15:00:48 <mharley[m]> #startmeeting barbican 15:00:48 <opendevmeet> Meeting started Mon Sep 15 15:00:48 2025 UTC and is due to finish in 60 minutes. The chair is mharley[m]. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:00:48 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:00:48 <opendevmeet> The meeting name has been set to 'barbican' 15:01:00 <mharley[m]> #topic Roll Call 15:01:20 <mharley[m]> Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin jjung mharley Freeman Boss lpiwowar xek tkajinam LinuZZ 15:01:35 <mharley[m]> You can find the meeting's agenda at the following link: 15:01:41 <mharley[m]> #link https://etherpad.openstack.org/p/barbican-weekly-meeting 15:02:00 <tkajinam> o/ 15:02:32 <LinuZZ> hi 15:02:57 <mharley[m]> We finally have attendees. :-) 15:02:58 <dmendiza[m]> 🙋♂️ 15:03:50 <mharley[m]> Hello, everybody. 15:03:58 <mharley[m]> #topic Review Past Meeting Action Items 15:04:18 <mharley[m]> As the last meeting didn't happen because of the lack of attendance, there's nothing to review. 15:05:10 <mharley[m]> #topic Liaison Updates 15:05:18 <mharley[m]> We are 2 weeks from Flamingo's release date. 15:05:25 <mharley[m]> #link https://releases.openstack.org/flamingo/schedule.html 15:05:39 <mharley[m]> Also, we have the 2026.1 election polling beginning this week. 15:05:43 <mharley[m]> #link https://governance.openstack.org/election/ 15:05:51 <mharley[m]> There are currently no more news for Flamingo. 15:06:07 <mharley[m]> I'm not sure if Grzegorz Grasza is here. He's the security liaison for Barbican. 15:06:12 <tkajinam> one more important note maybe be that 2025.2 rc was already cut 15:06:35 <tkajinam> or should be cut asap 15:06:47 <tkajinam> the deadline was last Thursday afaik 15:07:22 <mharley[m]> Thanks for the info, tkajinam. 15:07:41 <mharley[m]> #topic Bug Review 15:08:26 <mharley[m]> For Barbican, there's a bug raised by tkajinam on early August. 15:08:42 <mharley[m]> #link https://bugs.launchpad.net/barbican/+bug/2119531 15:09:16 <tkajinam> I've already proposed its fix so appreciate any feedback :-) https://review.opendev.org/c/openstack/barbican/+/956550 15:09:45 <mharley[m]> Yes, I've seen it, tkajinam. I'll review it. dmendiza, mind doing it as well? 15:10:24 <dmendiza[m]> ack, looking 15:10:27 <mharley[m]> There are no bugs for Python Barbican client. 15:10:32 <mharley[m]> #link https://bugs.launchpad.net/python-barbicanclient/+bugs?orderby=-id&start=0 15:10:46 <mharley[m]> Also, no new bugs for Castellan. 15:10:48 <mharley[m]> #link https://bugs.launchpad.net/castellan/+bugs?orderby=-id&start=0 15:11:03 <mharley[m]> And finally, no new bugs for Cursive. 15:11:05 <mharley[m]> #link https://bugs.launchpad.net/cursive/+bugs?orderby=-id&start=0 15:12:12 <mharley[m]> #topic Open Discussion 15:13:06 <rajiv> hey 15:13:26 <rajiv> i wanted to know if anyone has experience with Utimaco backend integration ? 15:13:49 <mharley[m]> Hi, rajiv. I haven't yet. 15:14:10 <mharley[m]> Can you elaborate on your use case? 15:14:47 <rajiv> we are trying to switch our backend to use Utimaco Se40k device 15:14:58 <rajiv> i wanted to get feedback wrt integration 15:15:41 <dmendiza[m]> rajiv a long time ago someone used an Utimaco and contributed docs for it 15:16:12 <rajiv> i see, do you also get 403 when you try to launch https://docs.openstack.org/barbican/latest/install/barbican-backend.html ? 15:16:14 <mharley[m]> For your information, this is the product's page: https://utimaco.com/data-protection/gp-hsm/utrust-general-purpose-hsm. 15:17:14 <rajiv> yep, i reached out to Utimaco but apparently dont have an expert on this topic, was wondering how i can proceed or if there are any consultancy services we are aware of ? 15:17:29 <dmendiza[m]> #link https://docs.openstack.org/barbican/latest/install/barbican-backend.html#utimaco 15:17:56 <rajiv> the forbidden seems to be a short issues, yes, i was about to share the same https://docs.openstack.org/barbican/latest/install/barbican-backend.html#utimaco 15:18:11 <tkajinam> maybe you can drop an email to openstack-discuss ml though there would be no such services if utimaco does not provide any 15:18:21 <rajiv> i presume the latest information is published ? 15:18:26 <rajiv> okay, thanks :) 15:18:41 <mharley[m]> Nice, guys. Anything else to add? 15:18:52 <LinuZZ> yes 15:19:10 <LinuZZ> is there something we can do for the YubiHSM? 15:20:04 <LinuZZ> we changed the code to work with the new key wrap code and verified it works with 2025.1 15:20:40 <dmendiza[m]> Hi LinuZZ ... I have an old YubiHSM, not sure if the latest revisions still work the same. I have it on my todo to look at that patch, but I admit it has been low priority for me. I'll take a look this Friday for Upstream Friday at work. 15:21:03 <mharley[m]> Can you paste the patch's link here, dmendiza ? 15:21:13 <LinuZZ> if the firmware is before 2.3 it won work 15:21:19 <tkajinam> maybe https://etherpad.opendev.org/p/barbican-weekly-meeting#L75 ? 15:21:28 <LinuZZ> https://review.opendev.org/c/openstack/barbican/+/900107 15:21:50 <mharley[m]> Thanks, tkajinam. I didn't realize the Etherpad has been edited. ;-) 15:22:28 <tkajinam> (I'll talk shortly about my lists there after the current topic 15:23:38 <tkajinam> (maybe I can start now ? 15:25:10 <mharley[m]> I believe so, tkajinam. 15:25:46 <tkajinam> I've left list of patches which I'd like to ask for some attentions to 15:25:51 <tkajinam> in https://etherpad.opendev.org/p/barbican-weekly-meeting#L53 15:26:15 <tkajinam> 1. https://review.opendev.org/c/openstack/barbican/+/956356 fixes config error, which is blocking job update now. this may need urgent attention 15:26:43 <tkajinam> 2. https://review.opendev.org/c/openstack/barbican/+/956553 is the first step to fix broken grenade job. once that is merged I'll backport it to stable branches 15:27:00 <tkajinam> 3. https://review.opendev.org/c/openstack/python-barbicanclient/+/953096 removes python 3.9 support which is kept only in barbicanclient atm 15:27:22 <tkajinam> these three may need to get some priorities 15:27:30 <mharley[m]> Gotcha. Unfortunately, I can't still +2 is any patch, as I'm waiting for someone to add me as a core reviewer. 15:27:46 <mharley[m]> s/is/in/ 15:27:46 <tkajinam> I've also left a patches which xek added his +2 to some time ago in https://etherpad.opendev.org/p/barbican-weekly-meeting#L63 so would appreciate 2nd review 15:28:00 <tkajinam> maybe dmendiza[m] can add you ? 15:28:10 <mharley[m]> Probably. 15:28:18 <tkajinam> I'd appreciate any feedback. please feel free to reach me if you have any questions 15:28:43 <mharley[m]> Great, tkajinam. Anyone else would like to add anything? 15:28:44 <tkajinam> one more thing to add is that there are a few open patches to cursive to clean up deprecation. 15:28:50 <tkajinam> that's all. 15:28:59 <mharley[m]> Understood. 15:29:03 <tkajinam> dmendiza[m], if you can spare some time to these, that would be great 15:29:35 <LinuZZ> thanks all 15:32:10 <dmendiza[m]> tkajinam: ack, thanks for looking at that job .. I don't even remember the last time it passed. 15:32:23 <mharley[m]> Upstream Friday is gonna be full. :-) 15:32:34 <dmendiza[m]> 💯 full 15:32:49 <tkajinam> dmendiza[m], yeah. there was an issue with grenade which has been breaking it 15:32:58 <tkajinam> I'll ask qa folks to take a look about it, too 15:33:59 <mharley[m]> I believe we are sorted for now, guys. 15:34:08 <mharley[m]> See you all in two weeks. 15:34:09 <tkajinam> yup 15:34:10 <mharley[m]> #endmeeting