15:00:45 <dmendiza[m]> #startmeeting barbican
15:00:45 <opendevmeet> Meeting started Mon Jul 20 15:00:45 2026 UTC and is due to finish in 60 minutes.  The chair is dmendiza[m]. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:00:45 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:00:45 <opendevmeet> The meeting name has been set to 'barbican'
15:02:58 <dmendiza[m]> Reminder: This meeting takes place under the OpenInfra Foundation Code of Conduct
15:03:07 <dmendiza[m]> #link https://openinfra.dev/legal/code-of-conduct
15:03:26 <dmendiza[m]> #topic Roll Call
15:03:32 <tkajinam> o/
15:03:35 <dmendiza[m]> Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin jjung mharley Freeman Boss lpiwowar xek tkajinam LinuZZ fprzewozn toabctl
15:04:14 <dmendiza[m]> Hi tkajinam !  ... mharley is around, but double-booked, so he asked me to chair this week
15:04:31 <tkajinam> ah, ok
15:04:56 <tkajinam> I don't have many topics today but would like to bring https://review.opendev.org/c/openstack/barbican/+/984422 to your attention
15:05:29 <dmendiza[m]> Ah yes ...
15:05:38 <dmendiza[m]> good 'ol hard-coded roles
15:05:49 <tkajinam> yeah
15:06:12 <tkajinam> that change should be enough to unblock gate, though we have to update functional tests to use the new consistent roles.
15:07:35 <dmendiza[m]> I've argued for a while that we should get rid of the in-tree functional tests.  The functionality is already tested in the barbican_tempest_plugin.tests.rbac namespace.
15:07:47 <dmendiza[m]> so maybe this is my chance to chuck all those out the window
15:13:16 <tkajinam> yeah I guess so
15:20:52 <dmendiza[m]> OK, let's see what else is on the agenda
15:21:07 <dmendiza[m]> #topic Review Past Meeting Action Items
15:21:39 <dmendiza[m]> #link https://meetings.opendev.org/meetings/barbican/2026/barbican.2026-07-06-15.02.html
15:21:44 <dmendiza[m]> No action items
15:22:17 <gmaan> dmendiza[m]: or other way around. rbac tests in plugins are costly where functional tests eaisly cover the testing for RBAC scope
15:23:12 <dmendiza[m]> gmaan: IIUC, tempest is the place to put functional tests.  And `barbican-tempest-plugin` already has SRBAC tests
15:23:42 <dmendiza[m]> I don't want to maintain two sets of functional test for the same functionality.  The in-tree tests are a legacy relic from before the plugin existed
15:23:50 <gmaan> dmendiza[m]: functional tests i mean in-tree barbican functional testing not tempest like tests are needed for RBAC testing
15:26:04 <dmendiza[m]> I think tempest test for RBAC are easier to maintain ... tempest already has built-in functions to create accounts with the relevant scopes/roles/etc and we have a bare-bones version of that in the in-tree functional tests ... they also require Keystone, which is better managed by devstack in a dedicated tempest job
15:26:44 <dmendiza[m]> In any case, I'll try to get tkajinam 's patch merged so we can unblock the gate
15:27:17 <tkajinam> I partially agree with gmaan though if you maintain functional tests which internally used tempest then I'd largely for moving it to tempest plugin
15:27:36 <tkajinam> because having something dependent on temepst in each branch causes horrible mess later
15:28:36 <tkajinam> dmendiza[m], thanks
15:28:50 <tkajinam> (actually it's gmaan's and I modified it to make functional tests pass)
15:29:47 <gmaan> dmendiza[m]: this is whole set of changes needed for new defaults but as tkajinam mentioned/changed in the proposed change, barbican need to fix the functional tests https://review.opendev.org/q/hashtag:%22remove-enforce-scope-flag%22+AND+hashtag:%22barbican%22
15:30:26 <dmendiza[m]> ack
15:31:28 <gmaan> barbican-tempest-plugin-simple-crypto-secure-old-rbac  is failing on two of them I think team can handle that from no onwards? I have limited bandwidth to fixt those
15:32:18 <gmaan> i do not know if old defaults are broken or its is just tests
15:35:05 <dmendiza[m]> K, I will look at those, but probably not until Friday 😅
15:35:16 <dmendiza[m]> #topic Open Discussion
15:35:23 <dmendiza[m]> Anything else y'all want to talk about?
15:36:27 <gmaan> thanks a lot
15:36:51 <dmendiza[m]> If not, I do have a KMIP update
15:37:50 <dmendiza[m]> I was able to get a hold of Peter Hamilton via email ... I'm now part of the OpenKMIP org in Github and will start working on getting PyKMIP modernized so it works with current versions of Python and Barbican
15:38:27 <dmendiza[m]> I'm still waiting on Peter to add me to the PyPI namespace for pykmip, and as soon as he does we should be able to start making regular releases.
15:41:54 <dmendiza[m]> OK, let's move on to bug review
15:41:59 <dmendiza[m]> #topic Bug Review
15:43:40 <dmendiza[m]> #link https://bugs.launchpad.net/barbican/+bugs?orderby=-id&start=0
15:43:43 <dmendiza[m]> no new bugs in barbican
15:44:05 <dmendiza[m]> #link https://bugs.launchpad.net/python-barbicanclient/+bugs?orderby=-id&start=0
15:44:17 <dmendiza[m]> no new bugs in python-barbicanclient
15:44:42 <dmendiza[m]> #link https://bugs.launchpad.net/castellan/+bugs?orderby=-id&start=0
15:44:46 <dmendiza[m]> no new bugs in castellan
15:45:10 <dmendiza[m]> #link https://bugs.launchpad.net/cursive/+bugs?orderby=-id&start=0
15:45:14 <dmendiza[m]> no new bugs in Cursive
15:45:15 <dmendiza[m]> ...
15:45:20 <dmendiza[m]> that's all for this week
15:45:28 <dmendiza[m]> Thanks for joining, everyone!
15:45:30 <dmendiza[m]> #endmeeting