12:01:06 #startmeeting barbican 12:01:06 Meeting started Tue Jan 17 12:01:06 2023 UTC and is due to finish in 60 minutes. The chair is xek. Information about MeetBot at http://wiki.debian.org/MeetBot. 12:01:06 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 12:01:06 The meeting name has been set to 'barbican' 12:01:25 #topic Roll Call 12:01:33 Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin 12:01:40 rajiv: o/ 12:01:48 rajiv: yes, the meeting is 12 UTC 12:01:49 HEY 12:02:00 As usual our agenda can be found here: 12:02:06 #link https://etherpad.openstack.org/p/barbican-weekly-meeting 12:02:06 roger! 12:02:23 o/ 12:04:58 Just the usual topics on the agenda today 12:05:19 Luzi: o/ 12:05:31 #topic Review Past Meeting Action Items 12:05:46 #link https://meetings.opendev.org/meetings/barbican/2023/barbican.2023-01-10-12.01.html 12:05:55 There are no action items from previous meetings 12:06:15 #topic Liaison Updates 12:06:19 No updates from me 12:07:06 #topic Open Discussion 12:07:34 Hey, i have a couple topics, can i ask now ? or is there Q&A session ? 12:08:02 rajiv: yes you can :) 12:08:21 First, Zed release notes is broken, can i it be fixed ? https://docs.openstack.org/releasenotes/barbican/zed.html 12:08:56 i observed the latest stable release notes is always broken, but (latest release notes - 1) works 12:09:49 second, any change this bug could be merged in upcoming release cycle ? https://storyboard.openstack.org/#!/story/2009322 12:10:13 rajiv: I think we may need a patch for stable/zed to fix that, I'll look into it 12:10:23 (the release notes) 12:10:37 okay 12:10:58 rajiv: are there patches to fix this error? 12:11:39 i am unaware if there are any, i followed up during last cycle as well but there wasnt any patch. 12:12:05 rajiv: yeah, a quick search doesn't bring any 12:12:40 rajiv: someone would have to volunteer to prepare those patches 12:13:09 i see, idk how the workflow wrt zuul goes, hence i wasnt able to figure it out. 12:13:19 maybe once Doug is back, we can re-connect. 12:14:15 rajiv: what do you mean workflow with zuul? do you need help on setting your environment up? 12:14:38 sry, are we referring to first or second topic ? 12:14:53 rajiv: second, sorry I wasn't clear 12:15:22 rajiv: I'll look into why the release notes are not appearing 12:15:47 ah ok, second issue, i have a ready env, but wasnt able figure this out. Any suggestions ? i can work on a patch though 12:17:18 rajiv: you probably need to figure out how to pass the filter into the part that generates that next URL for pagination 12:17:26 i tried this but had no luck : https://github.com/sapcc/barbican/commit/cafde97c72171c9f0bd07cb3df6f20a8ade52e33 12:18:18 okay, last topic, i am testing Zed upgrade, is there a config to enable microversions ? 12:18:46 i get the below error even though i have added microversions in the paste.ini file : 12:18:47 LookupError: No section 'microversion' (prefixed by 'filter') found in config /etc/barbican/barbican-api-paste.ini 12:19:36 i added it here : https://github.com/sapcc/helm-charts/commit/f82748a378bf40116cfd2183b02ce6f38e9685f5 12:25:49 rajiv: I think you also need [filter:microversion] section 12:26:03 rajiv: with paste.filter_factory = barbican.api.middleware.microversion:MicroversionMiddleware.factory 12:27:06 okay 12:27:30 rajiv: see the last 2 commits here: https://github.com/openstack/barbican/commits/master/etc/barbican/barbican-api-paste.ini 12:27:48 https://github.com/openstack/barbican/blob/master/etc/barbican/barbican-api-paste.ini 12:28:18 rajiv: the last commit also added it to the barbican_version pipeline, since it is also versioned for backwards compatibility 12:28:20 thanks, are there any other changes in zed ? 12:28:32 i am asking release notes arent there 12:29:31 rajiv: no, I don't think there are any other major changes, and also the microversion implementation is still not well tested, since the python-barbicanclient implementation is not ready 12:30:13 rajiv: we are working on it this cycle, but will likely backport it to zed 12:30:26 oh ok, so do i need to enable microversion or drop it for now ? 12:31:05 rajiv: you don't need it, if you don't need secret consumers functionality 12:31:38 rajiv: and as of now, no other service uses this functionality 12:31:56 is there docu on secret consumers functionality ? 12:32:11 my barbican backend is Thales HSM A790 with FIPS mode enabled. 12:32:28 rajiv: yes, let me find a link 12:33:14 this https://specs.openstack.org/openstack/barbican-specs/specs/train/secret-consumers.html ? 12:33:55 rajiv: https://specs.openstack.org/openstack/barbican-specs/specs/train/secret-consumers.html 12:33:58 yep 12:34:46 thanks, could you elaborate "we are working on it this cycle, but will likely backport it to zed" 12:34:57 will this feature be rolled back in Antelope ? 12:34:58 that's the spec, there is also the api documentation 12:35:39 rajiv: https://docs.openstack.org/barbican/latest/api/reference/secret_consumers.html 12:36:37 rajiv: it won't be rolled back, we will fix any issues and backport them to zed 12:37:19 okay, thats it from my end. Thanks for clarifying. 12:38:05 rajiv: ack, happy to help :) 12:38:29 #topic Bug Review 12:39:32 There are no new bugs 12:39:50 Allright, thanks for attending! 12:39:59 #endmeeting