13:11:45 <redrobot> #startmeeting barbican
13:11:45 <opendevmeet> Meeting started Tue Sep 21 13:11:45 2021 UTC and is due to finish in 60 minutes.  The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot.
13:11:45 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
13:11:45 <opendevmeet> The meeting name has been set to 'barbican'
13:11:50 <redrobot> #topic Roll Call
13:12:08 <redrobot> Courtesy ping for ade_lee dave-mccowan d34dh0r53 hrybacki jamespage Luzi lxkong mhen moguimar raildo rm_work tosky xek nearyo oleksandry
13:14:22 <Luzi> o/
13:16:33 <redrobot> Hi Luzi!
13:19:24 <redrobot> Let's get started
13:19:41 <redrobot> No action items last week
13:19:44 <redrobot> so we can skip those.
13:19:55 <redrobot> #topic Liaison Updates
13:19:57 <redrobot> tosky around?
13:25:30 <redrobot> I guess not, moving on
13:25:43 <redrobot> #topic Yoga cycle
13:25:59 <redrobot> Just a reminder that the Barbican master branch is now tracking Yoga
13:26:28 <redrobot> RC1 for Xena is out, and it will likely be the final Xena release unless someone finds a showstopper bug
13:27:33 <redrobot> #topic Kanban Review
13:27:45 <redrobot> #link https://tree.taiga.io/project/dmend-openstack-barbican/kanban
13:30:00 <redrobot> Sorry, had to get logged in
13:30:31 <redrobot> The Vault encoding issue is now fixed! :D
13:30:37 <redrobot> #link https://tree.taiga.io/project/dmend-openstack-barbican/us/16?kanban-status=2092519
13:32:17 <redrobot> And now I'm back to working on the Microversions patches for Yoga
13:32:21 <redrobot> moving on ...
13:32:24 <redrobot> #topic Bug Review
13:32:34 <redrobot> #link https://storyboard.openstack.org/#!/project_group/barbican
13:33:04 <redrobot> Looks like we do have a new bug in Barbican
13:33:08 <redrobot> #link https://storyboard.openstack.org/#!/story/2009236
13:33:15 <redrobot> > Barbican keystone listener functionality broken when it uses different messaging queues for RPC and oslo_message_notification
13:33:54 <mvpnitesh> hi Doglus, i had found out this issue. Can it be fixed for Xena ?
13:35:17 <redrobot> mvpnitesh typically we fix bugs on the master branch and then backport the fixes to stable branches after that.
13:35:40 <mvpnitesh> okay
13:36:27 <redrobot> mvpnitesh I don't currently have the bandwith to work on this bug, but if you want to work on a patch, I should be able to review it.
13:36:48 <mvpnitesh> okay Doglus, i'll give a try
13:40:19 <redrobot> #link https://bugs.launchpad.net/castellan/+bugs?orderby=-id&start=0
13:40:28 <redrobot> Looks like no new Castellan bugs
13:40:37 <redrobot> #link https://bugs.launchpad.net/cursive/+bugs?orderby=-id&start=0
13:40:43 <redrobot> And also no new Cursive bugs
13:40:49 <redrobot> #topic Open Discussion
13:40:56 <redrobot> Anything else y'all want to talk about?
13:41:09 <mvpnitesh> i have couple of queries
13:41:42 <redrobot> mvpnitesh sure, what's up?
13:41:44 <mvpnitesh> Will tpm be supported by Barbican to store the secrets
13:41:57 <mvpnitesh> is it in pipe line ?
13:42:57 <redrobot> Some work for TPM support has been done in the past.  There may be some old OpenStack Summit videos of presentations that were given on that topic.  Howver, the folks who wrote that proof-of-concept did not contribute the code back into Barbican.
13:43:33 <redrobot> We don't currently have it on our roadmap, but we are certainly open to reviewing and merging patches that  implement TPM support.
13:43:51 <mvpnitesh> ok
13:43:51 <redrobot> The first step would be to write a spec with some design details
13:44:06 <redrobot> #link https://opendev.org/openstack/barbican-specs
13:44:36 <mvpnitesh> okay. If need by my company will try to start with a Spec
13:44:47 <redrobot> great.
13:44:57 <redrobot> what else did you want to talk about, mvpnitesh?
13:45:42 <mvpnitesh> about the tempest plugin, i'm using tempest 25 and trying to run barbican-tempest-plugin. I'm ending up in this error @ https://paste.openstack.org/show/809460/
13:45:53 <tosky> (abusing this open discussion time to say there are no updates from me, sorry)
13:46:23 <redrobot> thanks for the update, tosky :)
13:47:23 <redrobot> mvpnitesh that is strange, I've been doing a lot of work on those RBAC tests, and have not run into that issue
13:47:34 <redrobot> mvpnitesh are you able to share your tempest config?
13:47:36 <tosky> mvpnitesh: you should use a newer tempest
13:47:43 <tosky> or an older barbican-tempest-plugin
13:47:53 <redrobot> tosky++
13:48:18 <tosky> both are branchless, so they should either be used from the last commit of the master branch, or you need to pin both to a specific tag, depending on the support for each openstack release
13:49:01 <mvpnitesh> actually we are stuck to use tempest 25  and some version of barbican-tempest-plugin
13:49:31 <mvpnitesh> tempest.conf @ https://paste.openstack.org/show/809466/
13:49:51 <tosky> which version of barbican-tempest-plugin? Probably too new
13:50:04 <tosky> with tempest 25 you probably can use at most barbican-tempest-plugin 1.1.0
13:50:13 <tosky> the newer code contains RBAC testing which requires a newer tempest
13:50:25 <tosky> so please make sure to pin barbican-tempest-plugin to 1.1.0
13:50:52 <mvpnitesh> i'm not sure about this barbican-tempest-plugin what we are picking. Will check and get back to you
13:51:23 <tosky> I would also check whether you can move to a newer tempest as well - but that depends also on the openstack version you use
13:51:34 <tosky> which you may have mentioned, I need to recheck the backlog
13:51:39 <mvpnitesh> i'm using Openstack Victoria ?
13:52:37 <mvpnitesh> can you guys tell me how i've to check the barbican-tempest-plugin
13:52:59 <tosky> it depends on how you installed it
13:53:10 <tosky> the same why you checked the version of tempest
13:53:19 <tosky> if it's installed from some vendor packages, check the packages version
13:53:38 <redrobot> if it's installed from git you can just git checkout 1.1.0 https://opendev.org/openstack/barbican-tempest-plugin/src/tag/1.1.0
13:53:50 <tosky> if it's installed through pip, check with pip list/pip show
13:54:17 <tosky> and if you installe from git with pip but without the -e option, you need to uninstall and reinstall it
13:54:29 <tosky> but again a good part of the answer depends on your setup
13:54:38 <redrobot> pip install barbican-tempest-plugin==1.1.0
13:55:16 <mvpnitesh> we are using a private repo
13:55:27 <mvpnitesh> ~/Data/barbican-tempest-plugin (master) $ git branch * master  enitmvp@IN-00252509 MINGW64 ~/Data/barbican-tempest-plugin (master) $ git tag 0.1.0 0.2.0 0.3.0 1.0.0 1.1.0 1.2.0 1.2.1 1.3.0 1.5.0 stein-last
13:56:00 <redrobot> yeah, git checkout 1.1.0 after you clone should do the trick
13:56:35 <mvpnitesh> i did git clone of my private repo for this , can i know which is the upstream version that it is
13:56:55 <mvpnitesh> ok Doglus, i'll give a try
13:57:27 <redrobot> We're just about out of time
13:57:34 <redrobot> any last minute questions or comments?
13:59:11 <mvpnitesh> i'm using the master barbican-tempest-plugin
13:59:18 <mvpnitesh> got to know that from the git log
13:59:21 <mvpnitesh> Author: Douglas Mendizábal <dmendiza@redhat.com> Date:   Wed Sep 1 20:35:45 2021 +0000      Add secure-rbac tests for Quotas across projects      This patch refactors some test for Quotas and adds tests for     checking quotas for different projects than the one the persona     is authenticated as.      Change-Id: Iff17a51d6d23f99376119249c046a84cdfc438e0
13:59:36 <mvpnitesh> so i'll try to git checkout 1.1.0 and try it out
13:59:46 <redrobot> awesome mvpnitesh, glad we could help
13:59:52 <redrobot> (and glad tosky is a tempest pro!)
13:59:59 <tosky> naaah
14:00:05 <redrobot> Thanks for joining, everyone!
14:00:09 <redrobot> #endmeeting