13:01:00 <dmendiza[m]> #startmeeting barbican
13:01:00 <opendevmeet> Meeting started Tue Aug 23 13:01:00 2022 UTC and is due to finish in 60 minutes.  The chair is dmendiza[m]. Information about MeetBot at http://wiki.debian.org/MeetBot.
13:01:00 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
13:01:00 <opendevmeet> The meeting name has been set to 'barbican'
13:01:07 <dmendiza[m]> #topic Roll Call
13:01:39 <dmendiza[m]> Courtesy ping for ade_lee dave-mccowan d34dh0r53 hrybacki jamespage Luzi lxkong mhen rm_work tosky xek nearyo oleksandry
13:01:46 <tosky> hi
13:01:47 <Luzi> o/
13:01:58 <dmendiza[m]> Hi y'all!
13:02:06 <dmendiza[m]> Welcome back, Luzi !
13:02:15 <dmendiza[m]> OK, let's get started
13:02:21 <dmendiza[m]> #topic Review Past Meeting Action Items
13:02:33 <dmendiza[m]> #link https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-08-16-13.00.html
13:02:36 <dmendiza[m]> We didn't have any
13:02:41 <dmendiza[m]> #topic Liaison Updates
13:02:47 <dmendiza[m]> tosky: any updates from you this week?
13:02:49 <tosky> I've noticed a recent fix to the devstack plugin which may have fixed the granade job - or at least my old review which fixes the grenade job now passes (!)
13:03:03 <dmendiza[m]> Nice!
13:03:21 <dmendiza[m]> Yeah, there was a devstack patch that landed yesterday, so maybe that was it?
13:03:24 <tosky> it's about https://review.opendev.org/c/openstack/barbican/+/724258
13:03:28 <tosky> yes, I guess so
13:03:55 <tosky> Alan was asking me about that patch and I noticed it was exactly about that area
13:04:05 <dmendiza[m]> right onw
13:04:06 <tosky> and that's it from me today :)
13:04:08 <dmendiza[m]> *on
13:04:11 <dmendiza[m]> Thanks, tosky !
13:04:18 <dmendiza[m]> No updates from my side.
13:04:23 <dmendiza[m]> So let's move on
13:04:29 <dmendiza[m]> #topic Microversions + Secret Consumers
13:04:44 <dmendiza[m]> API changes and Tempest tests have merged
13:04:54 <dmendiza[m]> ade_lee and/or I will be working on the client changes this week
13:06:03 <dmendiza[m]> Castellan will be a stretch goal this week
13:06:15 <dmendiza[m]> but as soon as everything is landed I'll ask the release folks to do the needful.
13:07:28 <dmendiza[m]> Any questions/comments on Secret Consumers?
13:09:58 <Luzi> no thank you
13:10:22 <ade_lee> o/
13:11:27 <ade_lee> Luzi, hi - nice to be in the same timezone as you :)
13:12:31 <dmendiza[m]> Cool, moving on
13:12:39 <dmendiza[m]> #topic Secure RBAC
13:12:53 <dmendiza[m]> I was brushing up on the latest changes to the Secure RBAC goal
13:13:18 <dmendiza[m]> looks like we'll need to go double check to make sure that project tokens work for the admin apis
13:13:24 <tosky> aren't those basically matching what was already there, reducing the general scope?
13:14:09 <dmendiza[m]> tosky: for SRBAC? yeah, the scope was reduced, but also we're going backwards to re-enable project-scoped tokens on all APIs :-\
13:14:55 <dmendiza[m]> #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html
13:16:12 <tosky> oh, because there is no system stuff anymore
13:17:20 <dmendiza[m]> yup
13:18:20 <dmendiza[m]> I'm also working on fixing the SRBAC policy implementation in Barbican
13:18:23 <dmendiza[m]> WIP patch is here:
13:18:40 <dmendiza[m]> #link https://review.opendev.org/c/openstack/barbican/+/853680
13:19:15 <dmendiza[m]> The srbac job is failing because the client used in the scenario tests does not have the "member" role
13:19:33 <dmendiza[m]> so I'm working on a fix for that before I update the rest of the policies
13:20:27 <dmendiza[m]> That's it for SRBAC on my end.  Any questions/comments?
13:23:21 <dmendiza[m]> OK, moving on
13:23:30 <dmendiza[m]> #topic Open Discussion
13:23:48 <dmendiza[m]> Anything else y'all want to talk about before we look at the bug reports?
13:26:33 <Luzi> i've heard the ptg will be online again?
13:27:20 <dmendiza[m]> Yeah, they decided to make it virtual and canceled the in-person meeting in Columbus, OH. 😞
13:28:44 <dmendiza[m]> OK, moving on to bug review
13:28:46 <dmendiza[m]> #topic Bug Review
13:28:52 <dmendiza[m]> #link https://storyboard.openstack.org/#!/project_group/barbican
13:29:02 <dmendiza[m]> We've got one new story:
13:29:04 <dmendiza[m]> #link https://storyboard.openstack.org/#!/story/2010235
13:29:16 <dmendiza[m]> I reported this, and it's the reason I'm re-working the SRBAC policies
13:30:18 <dmendiza[m]> #link https://bugs.launchpad.net/castellan/+bugs?orderby=-id&start=0
13:30:30 <dmendiza[m]> No new Castellan bugs
13:30:42 <dmendiza[m]> #link https://bugs.launchpad.net/cursive/+bugs?orderby=-id&start=0
13:30:49 <dmendiza[m]> and no new Cursive bugs
13:30:53 <dmendiza[m]> ...
13:30:58 <dmendiza[m]> That's all I have on the agenda for today
13:31:04 <dmendiza[m]> Thanks for joining, y'all!
13:31:07 <dmendiza[m]> #endmeeting