12:01:06 <xek> #startmeeting barbican 12:01:06 <opendevmeet> Meeting started Tue Jan 17 12:01:06 2023 UTC and is due to finish in 60 minutes. The chair is xek. Information about MeetBot at http://wiki.debian.org/MeetBot. 12:01:06 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 12:01:06 <opendevmeet> The meeting name has been set to 'barbican' 12:01:25 <xek> #topic Roll Call 12:01:33 <xek> Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin 12:01:40 <xek> rajiv: o/ 12:01:48 <xek> rajiv: yes, the meeting is 12 UTC 12:01:49 <rajiv> HEY 12:02:00 <xek> As usual our agenda can be found here: 12:02:06 <xek> #link https://etherpad.openstack.org/p/barbican-weekly-meeting 12:02:06 <rajiv> roger! 12:02:23 <Luzi> o/ 12:04:58 <xek> Just the usual topics on the agenda today 12:05:19 <xek> Luzi: o/ 12:05:31 <xek> #topic Review Past Meeting Action Items 12:05:46 <xek> #link https://meetings.opendev.org/meetings/barbican/2023/barbican.2023-01-10-12.01.html 12:05:55 <xek> There are no action items from previous meetings 12:06:15 <xek> #topic Liaison Updates 12:06:19 <xek> No updates from me 12:07:06 <xek> #topic Open Discussion 12:07:34 <rajiv> Hey, i have a couple topics, can i ask now ? or is there Q&A session ? 12:08:02 <xek> rajiv: yes you can :) 12:08:21 <rajiv> First, Zed release notes is broken, can i it be fixed ? https://docs.openstack.org/releasenotes/barbican/zed.html 12:08:56 <rajiv> i observed the latest stable release notes is always broken, but (latest release notes - 1) works 12:09:49 <rajiv> second, any change this bug could be merged in upcoming release cycle ? https://storyboard.openstack.org/#!/story/2009322 12:10:13 <xek> rajiv: I think we may need a patch for stable/zed to fix that, I'll look into it 12:10:23 <xek> (the release notes) 12:10:37 <rajiv> okay 12:10:58 <xek> rajiv: are there patches to fix this error? 12:11:39 <rajiv> i am unaware if there are any, i followed up during last cycle as well but there wasnt any patch. 12:12:05 <xek> rajiv: yeah, a quick search doesn't bring any 12:12:40 <xek> rajiv: someone would have to volunteer to prepare those patches 12:13:09 <rajiv> i see, idk how the workflow wrt zuul goes, hence i wasnt able to figure it out. 12:13:19 <rajiv> maybe once Doug is back, we can re-connect. 12:14:15 <xek> rajiv: what do you mean workflow with zuul? do you need help on setting your environment up? 12:14:38 <rajiv> sry, are we referring to first or second topic ? 12:14:53 <xek> rajiv: second, sorry I wasn't clear 12:15:22 <xek> rajiv: I'll look into why the release notes are not appearing 12:15:47 <rajiv> ah ok, second issue, i have a ready env, but wasnt able figure this out. Any suggestions ? i can work on a patch though 12:17:18 <xek> rajiv: you probably need to figure out how to pass the filter into the part that generates that next URL for pagination 12:17:26 <rajiv> i tried this but had no luck : https://github.com/sapcc/barbican/commit/cafde97c72171c9f0bd07cb3df6f20a8ade52e33 12:18:18 <rajiv> okay, last topic, i am testing Zed upgrade, is there a config to enable microversions ? 12:18:46 <rajiv> i get the below error even though i have added microversions in the paste.ini file : 12:18:47 <rajiv> LookupError: No section 'microversion' (prefixed by 'filter') found in config /etc/barbican/barbican-api-paste.ini 12:19:36 <rajiv> i added it here : https://github.com/sapcc/helm-charts/commit/f82748a378bf40116cfd2183b02ce6f38e9685f5 12:25:49 <xek> rajiv: I think you also need [filter:microversion] section 12:26:03 <xek> rajiv: with paste.filter_factory = barbican.api.middleware.microversion:MicroversionMiddleware.factory 12:27:06 <rajiv> okay 12:27:30 <xek> rajiv: see the last 2 commits here: https://github.com/openstack/barbican/commits/master/etc/barbican/barbican-api-paste.ini 12:27:48 <rajiv> https://github.com/openstack/barbican/blob/master/etc/barbican/barbican-api-paste.ini 12:28:18 <xek> rajiv: the last commit also added it to the barbican_version pipeline, since it is also versioned for backwards compatibility 12:28:20 <rajiv> thanks, are there any other changes in zed ? 12:28:32 <rajiv> i am asking release notes arent there 12:29:31 <xek> rajiv: no, I don't think there are any other major changes, and also the microversion implementation is still not well tested, since the python-barbicanclient implementation is not ready 12:30:13 <xek> rajiv: we are working on it this cycle, but will likely backport it to zed 12:30:26 <rajiv> oh ok, so do i need to enable microversion or drop it for now ? 12:31:05 <xek> rajiv: you don't need it, if you don't need secret consumers functionality 12:31:38 <xek> rajiv: and as of now, no other service uses this functionality 12:31:56 <rajiv> is there docu on secret consumers functionality ? 12:32:11 <rajiv> my barbican backend is Thales HSM A790 with FIPS mode enabled. 12:32:28 <xek> rajiv: yes, let me find a link 12:33:14 <rajiv> this https://specs.openstack.org/openstack/barbican-specs/specs/train/secret-consumers.html ? 12:33:55 <xek> rajiv: https://specs.openstack.org/openstack/barbican-specs/specs/train/secret-consumers.html 12:33:58 <xek> yep 12:34:46 <rajiv> thanks, could you elaborate "we are working on it this cycle, but will likely backport it to zed" 12:34:57 <rajiv> will this feature be rolled back in Antelope ? 12:34:58 <xek> that's the spec, there is also the api documentation 12:35:39 <xek> rajiv: https://docs.openstack.org/barbican/latest/api/reference/secret_consumers.html 12:36:37 <xek> rajiv: it won't be rolled back, we will fix any issues and backport them to zed 12:37:19 <rajiv> okay, thats it from my end. Thanks for clarifying. 12:38:05 <xek> rajiv: ack, happy to help :) 12:38:29 <xek> #topic Bug Review 12:39:32 <xek> There are no new bugs 12:39:50 <xek> Allright, thanks for attending! 12:39:59 <xek> #endmeeting