14:03:13 #startmeeting barbican 14:03:13 Meeting started Mon May 6 14:03:13 2024 UTC and is due to finish in 60 minutes. The chair is xek. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:03:13 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 14:03:13 The meeting name has been set to 'barbican' 14:03:39 #topic Roll Call 14:03:45 Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin jjung mharley lpiwowar 14:04:03 As usual our agenda can be found here: 14:04:10 #link https://etherpad.openstack.org/p/barbican-weekly-meeting 14:05:59 Hi o/ 14:05:59 I 14:06:07 I started the meeting an hour early 14:06:32 Really? I thought this is the correct time. 14:07:08 Anyway, I want to apologize there are no updates from my side. I'm sorry I know I did not do much lately. If there is something I can help with please let me know. 14:07:09 yeah, the hour changed after the daylight saving time change 14:08:02 Oh, I see 14:08:05 ack, I guess the time change is the main culprit, it's also quite late for me 14:09:01 I'll keep this meeting open until the official meeting time 15:00:21 Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin jjung mharley lpiwowar 15:00:31 let's start :) 15:01:42 #topic Review Past Meeting Action Items 15:01:46 There were none 15:01:52 #topic Liaison Updates 15:03:33 Next week is the Dalmatian-1 milestone 15:03:52 #link https://releases.openstack.org/dalmatian/schedule.html 15:04:06 #topic Open Discussion 15:04:23 Hi 15:04:29 o/ 15:04:33 hope you all are doing good.! 15:04:48 i have 2 questions : 15:05:04 1. Is it possible to Disable auto-disable of secret expiration_time feature 15:05:25 there were few outages last week caused due to the octavia service 15:05:33 Yep, I'm just back from an extended weekend :) 15:05:45 depending on secrets which expired and octavia wasnt aware of it 15:08:08 those are certificates that expired? 15:09:52 hi 15:10:10 idk if my terminal crashed 15:10:22 would this be the code to remove ? https://opendev.org/openstack/barbican/src/branch/master/barbican/model/repositories.py#L1706-L1708 15:11:25 yes, this looks like right place 15:11:34 but the certificates would be expired anyway, right? 15:11:51 or maybe that was a time synchronisation issue? 15:12:37 the certs were valid but due to the expiration timestamp, the api returned 404 15:12:45 barbican-api* 15:13:19 i received a Name error when i removed the above 2 lines, are you aware of any other functional issues ? 15:14:06 i also mailed my query to openstack-discuss last week but it wasnt sent and had no response 15:14:16 you would also have to remove line https://opendev.org/openstack/barbican/src/branch/master/barbican/model/repositories.py#L1712 15:15:26 ah ok, here as well : https://opendev.org/openstack/barbican/src/branch/master/barbican/model/repositories.py#L733 15:18:25 I'm not aware of a functional issue, but during a review of any changes I would check how these filters were introduced, maybe there is some reasoning behind it that I'm not aware of 15:18:27 i dont see Doug in this meeting, my next question is regarding, if we can create the pkcs11 backend (HMAC/MKEK) keys based on project ? 15:19:58 could you please guide me on whom i can contact to get the reasoning ? 15:21:34 I see c2b96430abbe2ff0ee6fcbad6894bc9a14244ef5 introduced it 15:22:19 I'll ask Ade, since he's not around 15:24:35 thanks, any suggestions for my 2nd query ? 15:24:43 my next question is regarding, if we can create the pkcs11 backend (HMAC/MKEK) keys based on project ? 15:24:50 i mailed doug as well but had no response 15:25:59 I don't know, let's wait for Doug te get back 15:26:39 ok, is Doug is on vacation ? can i mark you on cc ? 15:27:37 yep, he's on PTO this week 15:27:45 you can add me on CC 15:28:29 great, email-id plz ? 15:29:06 it's xek -- redhat.com 15:29:46 thank you 15:30:37 ok, let's continue 15:30:57 #topic Bug Review 15:31:44 #link https://bugs.launchpad.net/barbican/+bug/2064583 15:32:00 I see it's one from you, rajiv_ 15:32:05 I remember seeing this 15:32:45 I don't remember if it just fell by the wayside or maybe we decided not to proceed, since it could break the api 15:32:46 yes, i was asked to raise a new request since the bugs moved to launchpad 15:34:17 ack, thanks! 15:34:44 it looks like a low hanging fruit 15:35:42 sure 15:36:05 Ok, looks like that's all for today 15:36:23 Have a good rest of the week :) 15:36:43 #endmeeting