12:07:06 <lhinds> #startmeeting security squad 12:07:07 <openstack> Meeting started Wed Jul 18 12:07:06 2018 UTC and is due to finish in 60 minutes. The chair is lhinds. Information about MeetBot at http://wiki.debian.org/MeetBot. 12:07:08 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 12:07:10 <openstack> The meeting name has been set to 'security_squad' 12:07:10 <lhinds> #chair redrobot 12:07:11 <openstack> Current chairs: lhinds redrobot 12:07:17 <lhinds> :) 12:07:32 <redrobot> ok, good mornin' everyone! 12:07:39 <moguimar> o/ 12:08:01 <openstackgerrit> Cédric Jeanneret proposed openstack/tripleo-specs master: Validation Framework specifications. https://review.openstack.org/583475 12:08:14 <moguimar> this is probably going to be a small one redrobot 12:08:16 <redrobot> #topic Roll Call 12:08:20 <redrobot> o/ 12:09:02 <redrobot> Here is the agenda: 12:09:04 <redrobot> #link https://etherpad.openstack.org/p/tripleo-security-squad 12:09:43 <openstackgerrit> Quique Llorente proposed openstack/tripleo-quickstart master: [DNM] Use --with-ara for featureset010 https://review.openstack.org/583557 12:10:05 <redrobot> just looking over the agenda right now 12:10:10 <redrobot> do we usually go over every topic? 12:10:15 <ooolpbot> URGENT TRIPLEO TASKS NEED ATTENTION 12:10:17 <ooolpbot> https://bugs.launchpad.net/tripleo/+bug/1773325 12:10:17 <ooolpbot> https://bugs.launchpad.net/tripleo/+bug/1782165 12:10:17 <openstack> Launchpad bug 1773325 in tripleo "tempest.api.object_storage.test_object_services is failing on scenario002" [Critical,Triaged] - Assigned to Arx Cruz (arxcruz) 12:10:18 <openstack> Launchpad bug 1782165 in tripleo "ntp servers blocked. Can't deploy undercloud with oooq due to wrong NTP configuration" [Critical,Incomplete] - Assigned to wes hayutin (weshayutin) 12:10:33 <openstackgerrit> Quique Llorente proposed openstack/tripleo-heat-templates master: [DNM] To test --with-ara https://review.openstack.org/583537 12:10:38 <moguimar> we usualy put things we'd like to discuss in the agenda 12:10:43 <openstackgerrit> Jiri Tomasek proposed openstack/tripleo-common master: Update failures listing to use latest ansible-errors.json location https://review.openstack.org/583293 12:10:50 <moguimar> let me make the one for today 12:10:57 <redrobot> moguimar, awesome! 12:11:11 <moguimar> done 12:11:34 <redrobot> thanks moguimar 12:11:46 <redrobot> #topic Secret Management Update 12:11:53 <moguimar> nice 12:11:59 <moguimar> on secret management 12:12:07 <redrobot> #link https://etherpad.openstack.org/p/Secret-Management-for-TripleO 12:12:07 <moguimar> our work on oslo.config landed this week 12:12:20 <redrobot> awesome news 12:12:33 <moguimar> we're moving on to the next phase, castellan integration 12:12:52 <moguimar> redrobot did some work on a HashiCorp Vault instance for testing 12:13:26 <moguimar> now we'll point castellan to it and try to fetch secrets through castellan using oslo.config 12:13:58 <moguimar> a new driver for oslo.config is going to be the delivery for this phase 12:14:04 <moguimar> a castellan driver 12:14:40 <moguimar> then we'll be able to move to the next phase, finaly bringing it to tripleO 12:15:02 <moguimar> questions? 12:16:02 <redrobot> No questions from me, just a comment that there's a few things we'll need to think about when we get to adding Vault to TripleO 12:16:25 <redrobot> like making Vault policies that are in-line with the rest of TripleO policy 12:17:05 <redrobot> also, I'm not sure how we'll be getting secrets into vault... IIRC Castellan does not have a CLI? 12:17:28 <redrobot> so we may need to add one to Castellan to be able to automate storing secrets 12:17:56 <redrobot> or maybe just integrate TripleO with Castellan to store things via the API 12:18:20 <redrobot> that's all I can think of without my morning coffee 12:18:47 <moguimar> me too 12:19:03 <redrobot> 😴 12:19:09 <redrobot> ok, moving on 12:19:11 <openstackgerrit> Marios Andreou proposed openstack/tripleo-quickstart-extras master: WIP - Adds new bootstrap-subnodes role instead of tripleo.sh https://review.openstack.org/581026 12:19:40 <redrobot> #topic Any other business? 12:20:04 <moguimar> Next week I'll be at EuroPython in Edinburgh 12:20:18 <moguimar> presenting the oslo.config drivers 12:20:28 <moguimar> getting feedback 12:20:48 <moguimar> and today I'm starting on the castellan work as well 12:21:17 <openstackgerrit> Emilien Macchi proposed openstack/tripleo-heat-templates master: Check container health as part of the deploy https://review.openstack.org/569153 12:21:21 <openstackgerrit> Emilien Macchi proposed openstack/tripleo-heat-templates master: Test scenarios with https://review.openstack.org/#/c/569153/ https://review.openstack.org/581530 12:21:27 <openstackgerrit> Emilien Macchi proposed openstack/tripleo-heat-templates master: Limit deploy health checks to paunch managed ones https://review.openstack.org/581529 12:22:49 <redrobot> moguimar, that's exciting. Can't wait to hear the feedback. 12:23:39 <redrobot> anyone else have any topics? I see a bunch of stuff in the TripleO etherpad that we haven't talked about. 12:24:19 <moguimar> redrobot: we only have d0ugal raildo and lhinds 12:24:29 <moguimar> and they are also in other meetings 12:24:33 <lhinds> yes, i have a quick one 12:24:47 <redrobot> lhinds, go ahead 12:25:07 <lhinds> i could really use some reviews on: 12:25:10 <lhinds> https://review.openstack.org/#/c/572760/ 12:25:34 <lhinds> especially any folks who know CI 12:25:36 <lhinds> that's it 12:25:55 <redrobot> #help We need more reviews on https://review.openstack.org/#/c/572760/ for lhinds 12:26:15 <redrobot> thanks lhinds 12:26:30 <redrobot> well it definitely was a short one this time around. 12:26:35 <redrobot> :) 12:26:53 <redrobot> Thanks everyone for joining! 12:26:59 <moguimar> o/ 12:27:18 <redrobot> moguimar, \o 12:27:19 <d0ugal> moguimar: I'll be at EuroPython too! 12:28:02 <redrobot> #endmeeting