20:00:37 <dave-mccowan> #startmeeting barbican
20:00:37 <openstack> Meeting started Mon Apr  3 20:00:37 2017 UTC and is due to finish in 60 minutes.  The chair is dave-mccowan. Information about MeetBot at http://wiki.debian.org/MeetBot.
20:00:38 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
20:00:41 <openstack> The meeting name has been set to 'barbican'
20:00:45 <dave-mccowan> #topic roll call
20:01:36 <johnsom> o/
20:01:40 <johnsom> Pretty quiet here...
20:01:54 <dave-mccowan> <crickets>
20:02:11 <dave-mccowan> maybe spring break?  maybe we're just a couple minutes early. :-)
20:02:35 <johnsom> We are on time by my clock, but yes, maybe it's spring break for folks.
20:03:57 <kfarr> o/
20:04:19 <dave-mccowan> small crowd today
20:04:24 <dave-mccowan> hi kfarr!
20:04:51 <dave-mccowan> our agenda is in the regular spot: https://wiki.openstack.org/wiki/Meetings/Barbican
20:04:59 <dave-mccowan> #topic pike status
20:05:22 <dave-mccowan> Milestone 1 is next week and it's actually pretty full.
20:05:56 <dave-mccowan> Castellan has been tagged as officially managed with stable branch now
20:06:12 <dave-mccowan> (sorry Kaitlin for prompting you to do duplicate work)
20:06:37 <dave-mccowan> I've made some good progress getting py35 running for function tests
20:06:50 <dave-mccowan> Namnh has made good progress on upgrade
20:07:22 <dave-mccowan> Nam needs some help reviewing two patches for that. (links in agenda)
20:07:55 <dave-mccowan> i'm going to tag the Milestone 1 release early (this week on Friday), instead of next week since I'll be out.
20:08:03 <dave-mccowan> kfarr can you chair the meeting the next week?
20:08:16 <kfarr> dave-mccowan sure thing!
20:08:36 <dave-mccowan> anything else on Pike Status or New Features?
20:08:59 <raddaoui> o/
20:09:07 <johnsom> Is the cascade ACL on track?
20:09:27 <johnsom> I see it on the list, but not sure when it is planned to land
20:10:12 <dave-mccowan> johnsom redrobot signed up for that.  i haven't heard an update on that recently.
20:10:20 <johnsom> Ok
20:10:50 <dave-mccowan> #topic New Adopter
20:11:12 <dave-mccowan> The OpenStack Project "Tacker" is integrating with Barbican this cycle
20:11:35 <dave-mccowan> here is a spec for them: https://review.openstack.org/#/c/445543
20:12:11 <kfarr> Awesome!
20:12:15 <dave-mccowan> please take a look if you have a change to help them out.  they appear to be using Castellan, so they are starting off on the right foot.
20:12:35 <dave-mccowan> i think they are the ones asking on the mail list about credentials
20:13:09 <kfarr> yeah, I assume so, too
20:13:41 <dave-mccowan> #topic Any other business
20:14:03 <dave-mccowan> since we're a small group... anything else?  summit, code reviews, questions?
20:14:47 <dave-mccowan> there is a guy in the main channel asking about updating certificates.  did we add support to update certificate containers?
20:15:08 <dave-mccowan> i know we had a blueprint that limited updates to certain types of containers, but i forget which types.
20:15:09 <johnsom> I hope not
20:16:19 <kfarr> I am not sure, I'd have to do some digging
20:16:24 <dave-mccowan> johnsom why's that?  expiring certs is something to deal with.
20:16:32 <dave-mccowan> i'm sure there's a good reason. :-)
20:17:38 <johnsom> Yes, but you handle that differently.  We assume that new certs are a new container.
20:18:22 <dave-mccowan> kfarr i see in the code we only allow updates of containers with 'generic' type.
20:18:52 <kfarr> That sounds vaguely familiar
20:19:31 <dave-mccowan> johnsom i'm sure that's right.  i just can't think of the reason why not to allow update containers.
20:20:09 <dave-mccowan> that's all i have today.
20:20:12 <johnsom> This way it is explicit for when the user wants to change out their certs.  Otherwise you folks would have to notify us in some way that they changed the cert.
20:21:47 <dave-mccowan> yea.  i think an octavia dev or user is asking.  they don't want to have to restart their load balancer to get a new cert.  but, i'm not sure how keeping the URL the same helps them in that regard.
20:22:36 <johnsom> They just call listener update with the new barbican IDs.  No restarts required
20:23:08 <dave-mccowan> we should move this conversation to #openstack-barbican
20:23:15 <dave-mccowan> johnsom can you join us there?
20:23:18 <dave-mccowan> thanks everyone!
20:23:20 <johnsom> Yep, just did
20:23:25 <dave-mccowan> #endmeeting