15:00:48 <mharley[m]> #startmeeting barbican
15:00:48 <opendevmeet> Meeting started Mon Sep 15 15:00:48 2025 UTC and is due to finish in 60 minutes.  The chair is mharley[m]. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:00:48 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:00:48 <opendevmeet> The meeting name has been set to 'barbican'
15:01:00 <mharley[m]> #topic Roll Call
15:01:20 <mharley[m]> Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin jjung mharley Freeman Boss lpiwowar xek tkajinam LinuZZ
15:01:35 <mharley[m]> You can find the meeting's agenda at the following link:
15:01:41 <mharley[m]> #link https://etherpad.openstack.org/p/barbican-weekly-meeting
15:02:00 <tkajinam> o/
15:02:32 <LinuZZ> hi
15:02:57 <mharley[m]> We finally have attendees. :-)
15:02:58 <dmendiza[m]> 🙋‍♂️
15:03:50 <mharley[m]> Hello, everybody.
15:03:58 <mharley[m]> #topic Review Past Meeting Action Items
15:04:18 <mharley[m]> As the last meeting didn't happen because of the lack of attendance, there's nothing to review.
15:05:10 <mharley[m]> #topic Liaison Updates
15:05:18 <mharley[m]> We are 2 weeks from Flamingo's release date.
15:05:25 <mharley[m]> #link https://releases.openstack.org/flamingo/schedule.html
15:05:39 <mharley[m]> Also, we have the 2026.1 election polling beginning this week.
15:05:43 <mharley[m]> #link https://governance.openstack.org/election/
15:05:51 <mharley[m]> There are currently no more news for Flamingo.
15:06:07 <mharley[m]> I'm not sure if Grzegorz Grasza is here. He's the security liaison for Barbican.
15:06:12 <tkajinam> one more important note maybe be that 2025.2 rc was already cut
15:06:35 <tkajinam> or should be cut asap
15:06:47 <tkajinam> the deadline was last Thursday afaik
15:07:22 <mharley[m]> Thanks for the info, tkajinam.
15:07:41 <mharley[m]> #topic Bug Review
15:08:26 <mharley[m]> For Barbican, there's a bug raised by tkajinam on early August.
15:08:42 <mharley[m]> #link https://bugs.launchpad.net/barbican/+bug/2119531
15:09:16 <tkajinam> I've already proposed its fix so appreciate any feedback :-) https://review.opendev.org/c/openstack/barbican/+/956550
15:09:45 <mharley[m]> Yes, I've seen it, tkajinam.  I'll review it.  dmendiza, mind doing it as well?
15:10:24 <dmendiza[m]> ack, looking
15:10:27 <mharley[m]> There are no bugs for Python Barbican client.
15:10:32 <mharley[m]> #link https://bugs.launchpad.net/python-barbicanclient/+bugs?orderby=-id&start=0
15:10:46 <mharley[m]> Also, no new bugs for Castellan.
15:10:48 <mharley[m]> #link https://bugs.launchpad.net/castellan/+bugs?orderby=-id&start=0
15:11:03 <mharley[m]> And finally, no new bugs for Cursive.
15:11:05 <mharley[m]> #link https://bugs.launchpad.net/cursive/+bugs?orderby=-id&start=0
15:12:12 <mharley[m]> #topic Open Discussion
15:13:06 <rajiv> hey
15:13:26 <rajiv> i wanted to know if anyone has experience with Utimaco backend integration ?
15:13:49 <mharley[m]> Hi, rajiv.  I haven't yet.
15:14:10 <mharley[m]> Can you elaborate on your use case?
15:14:47 <rajiv> we are trying to switch our backend to use Utimaco Se40k device
15:14:58 <rajiv> i wanted to get feedback wrt integration
15:15:41 <dmendiza[m]> rajiv a long time ago someone used an Utimaco and contributed docs for it
15:16:12 <rajiv> i see, do you also get 403 when you try to launch https://docs.openstack.org/barbican/latest/install/barbican-backend.html ?
15:16:14 <mharley[m]> For your information, this is the product's page:  https://utimaco.com/data-protection/gp-hsm/utrust-general-purpose-hsm.
15:17:14 <rajiv> yep, i reached out to Utimaco but apparently dont have an expert on this topic, was wondering how i can proceed or if there are any consultancy services we are aware of ?
15:17:29 <dmendiza[m]> #link https://docs.openstack.org/barbican/latest/install/barbican-backend.html#utimaco
15:17:56 <rajiv> the forbidden seems to be a short issues, yes, i was about to share the same https://docs.openstack.org/barbican/latest/install/barbican-backend.html#utimaco
15:18:11 <tkajinam> maybe you can drop an email to openstack-discuss ml though there would be no such services if utimaco does not provide any
15:18:21 <rajiv> i presume the latest information is published ?
15:18:26 <rajiv> okay, thanks :)
15:18:41 <mharley[m]> Nice, guys.  Anything else to add?
15:18:52 <LinuZZ> yes
15:19:10 <LinuZZ> is there something we can do for the YubiHSM?
15:20:04 <LinuZZ> we changed the code to work with the new key wrap code and verified it works with 2025.1
15:20:40 <dmendiza[m]> Hi LinuZZ  ... I have an old YubiHSM, not sure if the latest revisions still work the same.  I have it on my todo to look at that patch, but I admit it has been low priority for me.  I'll take a look this Friday for Upstream Friday at work.
15:21:03 <mharley[m]> Can you paste the patch's link here, dmendiza ?
15:21:13 <LinuZZ> if the firmware is before 2.3 it won work
15:21:19 <tkajinam> maybe https://etherpad.opendev.org/p/barbican-weekly-meeting#L75 ?
15:21:28 <LinuZZ> https://review.opendev.org/c/openstack/barbican/+/900107
15:21:50 <mharley[m]> Thanks, tkajinam.  I didn't realize the Etherpad has been edited. ;-)
15:22:28 <tkajinam> (I'll talk shortly about my lists there after the current topic
15:23:38 <tkajinam> (maybe I can start now ?
15:25:10 <mharley[m]> I believe so, tkajinam.
15:25:46 <tkajinam> I've left list of patches which I'd like to ask for some attentions to
15:25:51 <tkajinam> in https://etherpad.opendev.org/p/barbican-weekly-meeting#L53
15:26:15 <tkajinam> 1. https://review.opendev.org/c/openstack/barbican/+/956356 fixes config error, which is blocking job update now. this may need urgent attention
15:26:43 <tkajinam> 2. https://review.opendev.org/c/openstack/barbican/+/956553  is the first step to fix broken grenade job. once that is merged I'll backport it to stable branches
15:27:00 <tkajinam> 3. https://review.opendev.org/c/openstack/python-barbicanclient/+/953096 removes python 3.9 support which is kept only in barbicanclient atm
15:27:22 <tkajinam> these three may need to get some priorities
15:27:30 <mharley[m]> Gotcha.  Unfortunately, I can't still +2 is any patch, as I'm waiting for someone to add me as a core reviewer.
15:27:46 <mharley[m]> s/is/in/
15:27:46 <tkajinam> I've also left a patches which xek added his +2 to some time ago in https://etherpad.opendev.org/p/barbican-weekly-meeting#L63 so would appreciate 2nd review
15:28:00 <tkajinam> maybe dmendiza[m] can add you ?
15:28:10 <mharley[m]> Probably.
15:28:18 <tkajinam> I'd appreciate any feedback. please feel free to reach me if you have any questions
15:28:43 <mharley[m]> Great, tkajinam.  Anyone else would like to add anything?
15:28:44 <tkajinam> one more thing to add is that there are a few open patches to cursive to clean up deprecation.
15:28:50 <tkajinam> that's all.
15:28:59 <mharley[m]> Understood.
15:29:03 <tkajinam> dmendiza[m], if you can spare some time to these, that would be great
15:29:35 <LinuZZ> thanks all
15:32:10 <dmendiza[m]> tkajinam: ack, thanks for looking at that job .. I don't even remember the last time it passed.
15:32:23 <mharley[m]> Upstream Friday is gonna be full. :-)
15:32:34 <dmendiza[m]> 💯 full
15:32:49 <tkajinam> dmendiza[m], yeah. there was an issue with grenade which has been breaking it
15:32:58 <tkajinam> I'll ask qa folks to take a look about it, too
15:33:59 <mharley[m]> I believe we are sorted for now, guys.
15:34:08 <mharley[m]> See you all in two weeks.
15:34:09 <tkajinam> yup
15:34:10 <mharley[m]> #endmeeting