15:00:20 <vishalmanchanda> #startmeeting horizon
15:00:20 <opendevmeet> Meeting started Wed Jul 20 15:00:20 2022 UTC and is due to finish in 60 minutes.  The chair is vishalmanchanda. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:00:20 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:00:20 <opendevmeet> The meeting name has been set to 'horizon'
15:01:28 <rdopiera> o/
15:01:34 <amotoki> hi
15:01:51 <vishalmanchanda> hello everyone
15:03:46 <vishalmanchanda> tmazur: ping.
15:03:53 <tmazur> o/
15:03:54 <vishalmanchanda> ok let's start the meeting.
15:04:09 <vishalmanchanda> Agenda of meeting can be found here https://etherpad.opendev.org/p/horizon-release-priorities#L39
15:04:36 <vishalmanchanda> #topic Notices
15:04:49 <vishalmanchanda> A Casual reminder about the schdeule.
15:05:22 <vishalmanchanda> This week is R-11 week.
15:05:44 <vishalmanchanda> For more info. about the schedule please refer https://releases.openstack.org/zed/schedule.html
15:06:29 <vishalmanchanda> I have no more announcements for this week.
15:07:02 <vishalmanchanda> If anyone else wants to make any announcements, please go ahead.
15:07:46 <amotoki> none from me
15:07:58 <vishalmanchanda> moving to next topic.
15:08:35 <vishalmanchanda> #topic On-Demand Agenda
15:08:47 <vishalmanchanda> horizon security contacts
15:09:38 <vishalmanchanda> I guess it is added by amotoki
15:09:53 <vishalmanchanda> Looking at the Vulnerability_management wiki doc. primary security contacts person points to Ivan.
15:09:56 <amotoki> yes, I added it.
15:10:10 <vishalmanchanda> https://wiki.openstack.org/wiki/CrossProjectLiaisons#Vulnerability_management
15:10:24 <amotoki> vishalmanchanda: as you may know, yessterday we were asked about our primary sec contact and coresec members.
15:10:55 <amotoki> e0ne is the current primary contact, but he is no longer very active in hoirzon
15:10:56 <vishalmanchanda> but as we know Ivan is not much active in the horizon for the past few months.
15:11:12 <vishalmanchanda> amotoki: please go ahead.
15:11:16 <amotoki> so it may be time to switch our sec contact.
15:11:24 <vishalmanchanda> amotoki: +1.
15:12:01 <amotoki> In addition, looking at the horizon-coresec member, Ivan and I are the only active members, so it needs to be updated too.
15:12:02 <vishalmanchanda> So I was thinking if someone else from the horizon coresec team can volunteer for primary security contacts.
15:12:09 <vishalmanchanda> amotoki: yes.
15:12:29 <amotoki> I can be the primary contact as perhaps I am most familiar with the process right now
15:12:43 <vishalmanchanda> amotoki: great.
15:13:56 <vishalmanchanda> Also below is list of members who are not active in horizon from long time:
15:13:56 <vishalmanchanda> David Lyle
15:13:56 <vishalmanchanda> Gabriel Hurley
15:13:56 <vishalmanchanda> Matthias Runge
15:13:56 <vishalmanchanda> Paul McMillan
15:13:58 <amotoki> re the coresec members, my proposal is to have all four active cores in https://launchpad.net/~horizon-coresec/+members
15:14:23 <amotoki> and drop non-active members who no longer work on horizon
15:14:35 <vishalmanchanda> amotoki: I am fine with that.
15:15:31 <amotoki> FYI: the vulnerability management process is explained at https://security.openstack.org/vmt-process.html
15:16:07 <vishalmanchanda> rdopiera: tmazur : wdys?
15:16:09 <amotoki> all public bugs cannot be switched back to private (even if it is done by mistake)
15:17:34 <tmazur> Sounds fine for me
15:18:01 <rdopiera> makes sense
15:19:07 <amotoki> if you have questions on the process, feel free to ping me. we are a small team, so it would be nice that everyone can access sec bugs
15:19:35 <tmazur> amotoki: thank you
15:19:46 <vishalmanchanda> amotoki: thanks.
15:20:25 <amotoki> okay, thank. I will update the sec contact in the wiki and the launchpad team.
15:20:54 <amotoki> s/thank/thanks/ :p
15:21:01 <vishalmanchanda> cool.
15:22:05 <vishalmanchanda> Does anyone have any other topic to discuss?
15:22:30 <amotoki> rdopiera: can we merge your "setup and teardown" patches for integration tests?
15:22:51 <rdopiera> amotoki: I don't see why not
15:23:16 <amotoki> rdopiera: thanks. I just would like to confirm the status of them. I will review them.
15:23:59 <rdopiera> yeah, with the CI failing, it's hard to tell if the patch is still WIP
15:24:59 <amotoki> yeah, anyway let's see what happens
15:25:49 <rdopiera> famous last words
15:26:15 <tmazur> :D
15:26:50 <amotoki> :D
15:28:12 <vishalmanchanda> If nothing more to discuss, we can end this meeting.
15:28:40 <amotoki> no more from me
15:30:05 <vishalmanchanda> Thanks everyone for joining!
15:30:11 <vishalmanchanda> See you next week.
15:30:19 <vishalmanchanda> #endmeeting