13:00:12 <redrobot> #startmeeting barbican 13:00:13 <openstack> Meeting started Tue Dec 4 13:00:12 2018 UTC and is due to finish in 60 minutes. The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot. 13:00:14 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 13:00:16 <openstack> The meeting name has been set to 'barbican' 13:00:21 <redrobot> #topic Roll Call 13:00:59 <redrobot> Courtesy ping for Luzi lxkong moguimar rm_work xek 13:01:05 <redrobot> \o 13:01:07 <redrobot> o/ 13:01:11 <redrobot> o/\o 13:01:11 <Luzi> o/ 13:01:57 <redrobot> As per usual, our agenda is here: 13:01:59 <redrobot> #link https://wiki.openstack.org/wiki/Meetings/Barbican 13:02:19 <redrobot> And as usual there's nothing for today ... 😅 13:02:25 <redrobot> So we'll make it up as usual 13:03:36 <redrobot> We didn't have any action items last week ... so nothing to talk about there. 13:04:06 <redrobot> #topic HSM Support in TripleO 13:04:41 <redrobot> I'm not sure if you're aware, Luzi, but we've been working on getting support for a couple of HSMs in TripleO 13:04:55 <Luzi> that's nice 13:05:13 <Luzi> which one are you supporting? 13:05:35 <Luzi> or wanting to support 13:05:41 <redrobot> The first one we're working on is Thales 13:05:52 <redrobot> and we are also working on getting an ATOS one working as well 13:05:59 <redrobot> We have 3 patches for the Thales support 13:06:03 <redrobot> this one already merged: 13:06:05 <redrobot> #link https://review.openstack.org/#/c/608339/ 13:06:22 <redrobot> These two still need reviews: 13:06:23 <redrobot> #link https://review.openstack.org/#/c/610629/ 13:06:33 <redrobot> #link https://review.openstack.org/#/c/610634/ 13:07:19 <redrobot> I'm also working on a patch for the Kolla project to get a new group added to the barbican user account inside the images. 13:07:40 <redrobot> We'll need it so that Barbican is able to talk to the Thales daemon that communicates with the HSM. 13:08:10 <redrobot> Luzi, I'm not sure about the specific models for those, but I can probably find out if you're curious. 13:08:36 <redrobot> We also got Yubico to send us a couple of YubiHSM 2s. 13:09:06 <redrobot> But their support for PKCS#11 is somewhat limited, and it won't work with our current PKCS#11 backend implementation. 13:09:37 <moguimar> o/ 13:10:44 <Luzi> well it's certainly good to know, what HSMs are working with Barbican, and which ones doesn't right now 13:10:47 <Luzi> hi moguimar 13:11:46 <redrobot> The PKCS#11 plugin was originally written for the Safenet Luna SA (now Gemalto Network HSM). I haven't tested it since I left Rackspace, but I expect it to still work. 13:12:26 <redrobot> I think it would be good to document which specific models have been tested. We'll probably add it to the Barbican and/or TripleO docs as part of this effort. 13:12:44 <Luzi> it definitly works as we tested it with a gemalto HSM 13:13:09 <redrobot> Awesome! 😎 13:13:16 <redrobot> I'm glad we haven't broken anything, lol 13:16:15 <redrobot> OK, moving on 13:16:32 <redrobot> ... 13:17:02 <redrobot> #topic Reviews 13:17:05 <redrobot> #link https://tinyurl.com/yctfozgh 13:17:17 <redrobot> Just the usual weekly reminder to review things 13:18:40 <redrobot> ... and that's all the topics I can think of given the small amount of coffee I've consumed today. 13:18:54 <redrobot> Anything y'all want to talk about Luzi or moguimar ? 13:19:45 <moguimar> nope 13:20:26 <Luzi> not really 13:20:46 <redrobot> Alrighty, I think we can wrap it up for the meeting then. 13:20:51 <redrobot> Thanks for coming, guys! 13:20:58 <redrobot> #endmeeting