13:00:47 #startmeeting barbican 13:00:48 Meeting started Tue Feb 4 13:00:47 2020 UTC and is due to finish in 60 minutes. The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot. 13:00:49 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 13:00:52 The meeting name has been set to 'barbican' 13:02:19 #topic Roll Call 13:02:38 Courtesy ping for ade_lee dave-mccowan hrybacki jamespage Luzi lxkong mhen moguimar raildo rm_work xek 13:02:44 o/ 13:02:47 hello :) 13:03:41 Hi Luzi! 13:04:11 Let's get started 13:04:20 #topic Review Past Action Items 13:04:41 o/ 13:04:46 #link http://eavesdrop.openstack.org/meetings/barbican/2020/barbican.2020-01-28-13.05.html 13:05:32 OK, first one: 13:05:33 redrobot to add containers-undercloud as a non-voting job 13:05:49 Started working on this, should have a patch ready for it later today 13:05:53 #action redrobot to add containers-undercloud as a non-voting job 13:06:02 ^^ adding it again so we can talk about it again next week 13:06:10 Next, 13:06:11 redrobot to bug stable team for pending stable backports 13:06:20 I did not bug enough people for this 13:06:26 so I need to do some more buggin' 13:06:29 #action redrobot to bug stable team for pending stable backports 13:07:15 OK, moving on 13:07:39 #topic 4Liaison Updates 13:07:52 moguimar, how did it go at FOSDEM? 13:08:16 It was nice 13:08:50 after my talk some one told that my presentation was better than the oslo.config docs 13:08:59 guess I need to do more work to update the docs xD 13:09:18 Hehe, I was just about to say... it sounds like you need to do some doc work, haha. 13:09:20 and you can find everything here 13:09:22 https://fosdem.org/2020/schedule/event/security_protecting_plaintext_secrets_in_configuration_files/ 13:09:30 including the recording 13:09:39 #link https://fosdem.org/2020/schedule/event/security_protecting_plaintext_secrets_in_configuration_files/ 13:09:43 Nice! I'll have to check it out later 13:09:51 20 minutes 13:10:44 moguimar, any other news from oslo? 13:11:01 nope, Ben has been absend from the meetings for a while 13:11:13 I also missed the meeting yesterday, if there was actually one 13:11:29 but Herve is pushing things forward 13:11:53 We are bumping all major versions, I 13:11:59 I'll ask about the castellan patch 13:12:53 that's all on FOSDEM + oslo land 13:13:20 sweet, thanks moguimar 13:13:24 ok, moving on 13:13:43 #topic Manipulation of ACL data in DB 13:13:57 #link https://review.opendev.org/#/c/357978/13/doc/source/artifacts/barbican/newton/review-findings.rst 13:14:05 Luzi, have you had a chance to think about ^^ 13:14:15 i was discussing this with mhen 13:15:25 signing the rows does sound like a good idea as long as the private key is not on the database host 13:16:09 Cool. 13:16:19 Yeah, I think Hashicorp Vault does something similar 13:16:38 I think they do authenticated encryption of everything that gets stored in the DB 13:16:53 We should probably work on that this cycle 13:17:03 Luzi, did you have any interest/time to work on this? 13:18:27 sadly not, as i can finally start with implementing some image encryption patches :/ 13:19:14 Luzi, no worries. I'll try to get some time to work on it on Upstream Fridays 13:19:30 That's all I have on the agenda for today 13:19:35 #topic Open Discussion 13:19:42 Anything else y'all want to talk about? 13:19:56 I'd like to take a look into hvac next Friday 13:20:26 and create some cards in the board 13:20:33 Nice, yeah, that'll be awesome moguimar 13:20:35 where do we find the link to that board redrobot ? 13:21:07 #link https://tree.taiga.io/project/dmend-openstack-barbican/kanban 13:21:36 tks 13:27:40 Alrighty y'all 13:27:44 I think we're done for the day 13:27:47 Thanks for coming! 13:27:50 #endmeeting