14:03:13 <xek> #startmeeting barbican 14:03:13 <opendevmeet> Meeting started Mon May 6 14:03:13 2024 UTC and is due to finish in 60 minutes. The chair is xek. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:03:13 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 14:03:13 <opendevmeet> The meeting name has been set to 'barbican' 14:03:39 <xek> #topic Roll Call 14:03:45 <xek> Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin jjung mharley lpiwowar 14:04:03 <xek> As usual our agenda can be found here: 14:04:10 <xek> #link https://etherpad.openstack.org/p/barbican-weekly-meeting 14:05:59 <lpiwowar> Hi o/ 14:05:59 <lpiwowar> I 14:06:07 <xek> I started the meeting an hour early 14:06:32 <lpiwowar> Really? I thought this is the correct time. 14:07:08 <lpiwowar> Anyway, I want to apologize there are no updates from my side. I'm sorry I know I did not do much lately. If there is something I can help with please let me know. 14:07:09 <xek> yeah, the hour changed after the daylight saving time change 14:08:02 <lpiwowar> Oh, I see 14:08:05 <xek> ack, I guess the time change is the main culprit, it's also quite late for me 14:09:01 <xek> I'll keep this meeting open until the official meeting time 15:00:21 <xek> Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin jjung mharley lpiwowar 15:00:31 <xek> let's start :) 15:01:42 <xek> #topic Review Past Meeting Action Items 15:01:46 <xek> There were none 15:01:52 <xek> #topic Liaison Updates 15:03:33 <xek> Next week is the Dalmatian-1 milestone 15:03:52 <xek> #link https://releases.openstack.org/dalmatian/schedule.html 15:04:06 <xek> #topic Open Discussion 15:04:23 <rajiv> Hi 15:04:29 <xek> o/ 15:04:33 <rajiv> hope you all are doing good.! 15:04:48 <rajiv> i have 2 questions : 15:05:04 <rajiv> 1. Is it possible to Disable auto-disable of secret expiration_time feature 15:05:25 <rajiv> there were few outages last week caused due to the octavia service 15:05:33 <xek> Yep, I'm just back from an extended weekend :) 15:05:45 <rajiv> depending on secrets which expired and octavia wasnt aware of it 15:08:08 <xek> those are certificates that expired? 15:09:52 <rajiv_> hi 15:10:10 <rajiv_> idk if my terminal crashed 15:10:22 <rajiv_> would this be the code to remove ? https://opendev.org/openstack/barbican/src/branch/master/barbican/model/repositories.py#L1706-L1708 15:11:25 <xek> yes, this looks like right place 15:11:34 <xek> but the certificates would be expired anyway, right? 15:11:51 <xek> or maybe that was a time synchronisation issue? 15:12:37 <rajiv_> the certs were valid but due to the expiration timestamp, the api returned 404 15:12:45 <rajiv_> barbican-api* 15:13:19 <rajiv_> i received a Name error when i removed the above 2 lines, are you aware of any other functional issues ? 15:14:06 <rajiv_> i also mailed my query to openstack-discuss last week but it wasnt sent and had no response 15:14:16 <xek> you would also have to remove line https://opendev.org/openstack/barbican/src/branch/master/barbican/model/repositories.py#L1712 15:15:26 <rajiv_> ah ok, here as well : https://opendev.org/openstack/barbican/src/branch/master/barbican/model/repositories.py#L733 15:18:25 <xek> I'm not aware of a functional issue, but during a review of any changes I would check how these filters were introduced, maybe there is some reasoning behind it that I'm not aware of 15:18:27 <rajiv_> i dont see Doug in this meeting, my next question is regarding, if we can create the pkcs11 backend (HMAC/MKEK) keys based on project ? 15:19:58 <rajiv_> could you please guide me on whom i can contact to get the reasoning ? 15:21:34 <xek> I see c2b96430abbe2ff0ee6fcbad6894bc9a14244ef5 introduced it 15:22:19 <xek> I'll ask Ade, since he's not around 15:24:35 <rajiv_> thanks, any suggestions for my 2nd query ? 15:24:43 <rajiv_> my next question is regarding, if we can create the pkcs11 backend (HMAC/MKEK) keys based on project ? 15:24:50 <rajiv_> i mailed doug as well but had no response 15:25:59 <xek> I don't know, let's wait for Doug te get back 15:26:39 <rajiv_> ok, is Doug is on vacation ? can i mark you on cc ? 15:27:37 <xek> yep, he's on PTO this week 15:27:45 <xek> you can add me on CC 15:28:29 <rajiv_> great, email-id plz ? 15:29:06 <xek> it's xek -- redhat.com 15:29:46 <rajiv_> thank you 15:30:37 <xek> ok, let's continue 15:30:57 <xek> #topic Bug Review 15:31:44 <xek> #link https://bugs.launchpad.net/barbican/+bug/2064583 15:32:00 <xek> I see it's one from you, rajiv_ 15:32:05 <xek> I remember seeing this 15:32:45 <xek> I don't remember if it just fell by the wayside or maybe we decided not to proceed, since it could break the api 15:32:46 <rajiv_> yes, i was asked to raise a new request since the bugs moved to launchpad 15:34:17 <xek> ack, thanks! 15:34:44 <xek> it looks like a low hanging fruit 15:35:42 <rajiv_> sure 15:36:05 <xek> Ok, looks like that's all for today 15:36:23 <xek> Have a good rest of the week :) 15:36:43 <xek> #endmeeting