| *** d34dh0r53 has quit IRC | 00:09 | |
| *** d34dh0r53 has joined #openstack-barbican | 00:12 | |
| openstackgerrit | zhangboye proposed openstack/castellan master: migrate testing to ubuntu focal https://review.opendev.org/740845 | 02:33 |
|---|---|---|
| *** iurygregory has quit IRC | 03:54 | |
| *** ade_lee has quit IRC | 06:15 | |
| *** iurygregory_ has joined #openstack-barbican | 07:10 | |
| *** iurygregory_ is now known as iurygregory | 07:31 | |
| *** tosky has joined #openstack-barbican | 07:37 | |
| *** xek has joined #openstack-barbican | 07:40 | |
| *** moguimar has joined #openstack-barbican | 08:16 | |
| *** xek has quit IRC | 09:12 | |
| *** tkajinam has quit IRC | 10:12 | |
| *** iurygregory has quit IRC | 11:46 | |
| *** iurygregory has joined #openstack-barbican | 12:00 | |
| *** raildo has joined #openstack-barbican | 12:02 | |
| *** xek has joined #openstack-barbican | 12:23 | |
| moguimar | redrobot | 12:54 |
| moguimar | are the other projects to update the query these? | 12:55 |
| moguimar | openstack/ansible-role-atos-hsm | 12:55 |
| moguimar | openstack/ansible-role-lunasa-hsm | 12:55 |
| moguimar | openstack/ansible-role-thales-hsm | 12:55 |
| *** Luzi has joined #openstack-barbican | 12:55 | |
| moguimar | I have added those 3 to https://tinyurl.com/ya2qgkw6 | 12:58 |
| redrobot | #startmeeting barbican | 13:00 |
| openstack | Meeting started Tue Jul 14 13:00:52 2020 UTC and is due to finish in 60 minutes. The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot. | 13:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 13:00 |
| *** openstack changes topic to " (Meeting topic: barbican)" | 13:00 | |
| openstack | The meeting name has been set to 'barbican' | 13:00 |
| redrobot | #topic Roll Call | 13:01 |
| *** openstack changes topic to "Roll Call (Meeting topic: barbican)" | 13:01 | |
| tosky | o/ | 13:01 |
| Luzi | o/ | 13:01 |
| moguimar | o/ | 13:01 |
| redrobot | Hello everyone! | 13:01 |
| moguimar | iurygregory, around? | 13:01 |
| iurygregory | moguimar, yup | 13:01 |
| moguimar | hey y'all | 13:02 |
| redrobot | Courtesy ping for ade_lee dave-mccowan hrybacki jamespage lxkong mhen raildo rm_work xek nearyo | 13:02 |
| redrobot | hi iurygregory! | 13:02 |
| iurygregory | hey redrobot o/ | 13:02 |
| redrobot | As usual, our agenda can be found here: | 13:03 |
| redrobot | #link https://etherpad.opendev.org/p/barbican-weekly-meeting | 13:03 |
| redrobot | #topic Review Past Meeting Action Items | 13:03 |
| *** openstack changes topic to "Review Past Meeting Action Items (Meeting topic: barbican)" | 13:03 | |
| redrobot | #link http://eavesdrop.openstack.org/meetings/barbican/2020/barbican.2020-07-07-13.00.html | 13:04 |
| redrobot | First action item: moguimar to update Core Team roster in wiki | 13:04 |
| moguimar | done | 13:04 |
| redrobot | moguimar, nice! | 13:04 |
| redrobot | Here is the link: | 13:05 |
| redrobot | #link https://wiki.openstack.org/wiki/Barbican#Core_Team | 13:05 |
| redrobot | Next action item: | 13:05 |
| redrobot | tosky to check if barbican/volume tests works if moved into cinder-tempest-plugin | 13:05 |
| redrobot | tosky, did you get a chance to work on that? | 13:05 |
| tosky | not yet, sorry | 13:05 |
| tosky | but I will come to that | 13:05 |
| redrobot | no worries | 13:06 |
| redrobot | We'll check in again next week | 13:06 |
| redrobot | #action tosky to check if barbican/volume tests works if moved into cinder-tempest-plugin | 13:06 |
| redrobot | #topic Liaison Updates | 13:06 |
| *** openstack changes topic to "Liaison Updates (Meeting topic: barbican)" | 13:06 | |
| redrobot | moguimar, any news from Oslo? | 13:06 |
| moguimar | nope | 13:07 |
| moguimar | we had a good meeting with plenty of topics, but none that I recall invoves castellan or barbican | 13:08 |
| redrobot | moguimar, cool | 13:08 |
| redrobot | tosky, any news from the testing side of things? | 13:09 |
| tosky | not much (I guess it's linked to the point above) | 13:09 |
| tosky | I rechecked the barbican grenade job but I'm still not sure about the reason of the failure | 13:10 |
| redrobot | Gotcha | 13:10 |
| redrobot | OK, moving on | 13:10 |
| moguimar | iurygregory also checked the barbican grenate | 13:10 |
| moguimar | grenade | 13:10 |
| redrobot | #topic Grenade Gate | 13:11 |
| *** openstack changes topic to "Grenade Gate (Meeting topic: barbican)" | 13:11 | |
| moguimar | I guess you two could join forces | 13:11 |
| iurygregory | the failure seems to be related to cinder (and since the grenade didn't test barbican before it's a bit tricky) XD | 13:11 |
| iurygregory | I was looking at the cinder job with barbican to get an idea of the configuration and I'm trying to test locally =) | 13:12 |
| tosky | right now the grenade job on master doesn't test barbican | 13:12 |
| tosky | hence my patch to add barbican | 13:12 |
| iurygregory | tosky, yep, it never tested XD | 13:12 |
| tosky | but barbican fails at some point during the upgrade process | 13:13 |
| tosky | this is the patch: https://review.opendev.org/#/c/724258/ | 13:13 |
| *** xek has quit IRC | 13:13 | |
| iurygregory | it fails with Order creation attempt not allowed - please review your user/project privileges: oslo_policy.policy.PolicyNotAuthorized: orders:post is disallowed by policy | 13:13 |
| iurygregory | this is while trying to create an encrypted volume | 13:14 |
| iurygregory | so maybe is just a miss configuration on Cinder/Barbican | 13:14 |
| redrobot | Oh, interesting... sounds like a mismatch in oslo.policy | 13:14 |
| iurygregory | hummm | 13:15 |
| iurygregory | this would be solved by configuration or nope? | 13:15 |
| redrobot | i.e. cinder policy is allowing the operation, but barbican poicy is not | 13:15 |
| tosky | here is the error: https://zuul.opendev.org/t/openstack/build/896eb6b045ce4b48880340b92007b413/log/controller/logs/screen-barbican-svc.txt#67 | 13:15 |
| redrobot | we'll have to check the role assignments for the user credentials that are being used | 13:15 |
| * redrobot makes a note to look into that patch | 13:15 | |
| tosky | the timestamp matches the failed operation (well, it's the only error, I'd be surprised if it wasn't the case): https://zuul.opendev.org/t/openstack/build/896eb6b045ce4b48880340b92007b413/log/controller/logs/grenade.sh_log.txt#1424 | 13:16 |
| tosky | maybe something changed between ussuri and master around policies? Because I think this error should be visible also with a normal devstack job | 13:18 |
| tosky | but I don't know too much about that part | 13:18 |
| redrobot | 🤔 | 13:19 |
| redrobot | I am not sure... but I'll try to look into it this week, and ping you if I find anything. | 13:19 |
| iurygregory | probably we can run with a different tempest role | 13:20 |
| tosky | iirc I tried two of them | 13:20 |
| tosky | maybe I still missed the right one | 13:21 |
| iurygregory | humm I will do some tests locally to see how it goes | 13:21 |
| redrobot | another thing to check is to see whether we need barbican-specific roles to be added? | 13:24 |
| redrobot | e.g. "creator" | 13:24 |
| iurygregory | the config we have only creator | 13:24 |
| iurygregory | on the cinder job I saw they set member, creator | 13:25 |
| iurygregory | so maybe would need both? | 13:25 |
| redrobot | I am not sure. I think I need to learn a little bit more about tempest to be helpful. 😞 | 13:26 |
| iurygregory | I will give a try locally with both options on the tempest.conf | 13:26 |
| * iurygregory was checking the cinder job and will check diffs from cinder/barbican.conf | 13:27 | |
| redrobot | awesome, thank you for the help iurygregory! | 13:27 |
| iurygregory | np o/ | 13:27 |
| redrobot | and tosky! :D | 13:27 |
| redrobot | OK, moving on | 13:28 |
| redrobot | #topic Kanban Review | 13:28 |
| *** openstack changes topic to "Kanban Review (Meeting topic: barbican)" | 13:28 | |
| redrobot | #link https://tree.taiga.io/project/dmend-openstack-barbican/kanban | 13:28 |
| redrobot | moguimar, any updates on the HVAC rewrite for Castellan | 13:28 |
| redrobot | ? | 13:28 |
| moguimar | yep | 13:28 |
| moguimar | https://review.opendev.org/#/c/739698/ | 13:29 |
| moguimar | got some good reviews from herve and stephen | 13:29 |
| redrobot | Nice! | 13:29 |
| moguimar | with this one in, the next one is hvac | 13:29 |
| redrobot | I need to give it a good review as well. | 13:29 |
| redrobot | very cool, moguimar! :D | 13:29 |
| *** Luzi has quit IRC | 13:29 | |
| redrobot | I need to add a card on here to track the Secret Consumers progress. | 13:30 |
| redrobot | OK, moving on ... | 13:31 |
| redrobot | #topic Bug Review | 13:31 |
| *** openstack changes topic to "Bug Review (Meeting topic: barbican)" | 13:31 | |
| redrobot | First up Barbican Storyboards | 13:32 |
| redrobot | #link https://storyboard.openstack.org/#!/project_group/barbican | 13:32 |
| redrobot | Looks like we have not had any new bugs this week | 13:32 |
| redrobot | so that's good | 13:32 |
| moguimar | shouldn't openstack/ansible-role-atos-hsm and openstack/ansible-role-thales-hsm be listed too? | 13:33 |
| redrobot | moguimar, great question ... I think we may not have created those projects in Storyboard | 13:33 |
| redrobot | I can look into getting that added | 13:33 |
| redrobot | #action redrobot to look into ansible-role-thales-hsm and ansible-role-atos-hsm bug projects | 13:33 |
| redrobot | those two are still co-owned by the OpenStack Ansible team | 13:34 |
| redrobot | and they're listed under that project in governance | 13:34 |
| redrobot | and I'm not sure they're using Storyboard to track bugs on those | 13:34 |
| redrobot | Next, the Castellan Launchpad | 13:35 |
| redrobot | #link https://bugs.launchpad.net/castellan/ | 13:35 |
| redrobot | Looks like no new bugs there either | 13:35 |
| redrobot | OK, moving on | 13:35 |
| redrobot | #topic Wayward Reviews | 13:36 |
| *** openstack changes topic to "Wayward Reviews (Meeting topic: barbican)" | 13:36 | |
| redrobot | and this week we have a brand new link thanks to moguimar :D | 13:36 |
| redrobot | #link https://tinyurl.com/ya2qgkw6 | 13:36 |
| moguimar | I'd like to focus on the stable branches first today | 13:36 |
| moguimar | what about we tackle all S/T/U patches? | 13:37 |
| redrobot | lots of -1s at the gate :( | 13:37 |
| moguimar | yep | 13:37 |
| moguimar | this one I got the gate fixed | 13:37 |
| moguimar | https://review.opendev.org/#/c/738396/ | 13:37 |
| moguimar | with tosky's help | 13:37 |
| redrobot | m m m m merged! | 13:38 |
| redrobot | :D | 13:38 |
| moguimar | we have many of them failing docs | 13:39 |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican stable/queens: Make broken fedora_latest job n-v https://review.opendev.org/695327 | 13:39 |
| moguimar | I'll backport the docs fix we had | 13:40 |
| moguimar | and rebase them | 13:40 |
| redrobot | ^^ rebased to see if gate is still passing on that one (last run was from December 2019 | 13:40 |
| redrobot | moguimar, awesome | 13:40 |
| redrobot | I think maybe we should do them in LIFO order | 13:40 |
| redrobot | eg. do U backports first, then T, then S | 13:41 |
| moguimar | ok | 13:41 |
| redrobot | Doesn't look like there's any we can merge right now | 13:41 |
| moguimar | we have 2 patches by the release bot | 13:41 |
| moguimar | and one by you redrobot | 13:42 |
| moguimar | this one | 13:42 |
| moguimar | Use Zuulv3 devstack jobs | 13:42 |
| moguimar | but they are also failing devstack | 13:42 |
| moguimar | not just docs | 13:42 |
| redrobot | K, maybe we can tag team some of those this week | 13:43 |
| redrobot | moguimar, here's one for master from the translation bot: https://review.opendev.org/#/c/735772/ | 13:44 |
| *** Luzi has joined #openstack-barbican | 13:45 | |
| moguimar | shipped | 13:45 |
| redrobot | OK, let's move on | 13:45 |
| redrobot | #topic Open Discussion | 13:45 |
| *** openstack changes topic to "Open Discussion (Meeting topic: barbican)" | 13:45 | |
| redrobot | Anything else y'all want to talk about? | 13:45 |
| moguimar | let me see the dashboard one last time | 13:46 |
| moguimar | any tips on why this one is failing? | 13:47 |
| moguimar | https://review.opendev.org/#/c/740698/ | 13:47 |
| redrobot | moguimar, looks like a database integrity issue: https://zuul.opendev.org/t/openstack/build/b6dd7183a15c42f0a5fcc48e50d89c71/log/controller/logs/screen-barbican-svc.txt#202 | 13:49 |
| redrobot | which sounds super crappy | 13:49 |
| redrobot | I'm not sure how you'd end up with duplicate rows during SecretOrder processing :( | 13:49 |
| moguimar | is it some flakyness? | 13:50 |
| redrobot | yeah, lets try a recheck and if it fails consistently with the same error we may need to dig into it some more | 13:52 |
| moguimar | ok | 13:52 |
| moguimar | cause I had a +1 from Zuul before | 13:53 |
| moguimar | and then I got a -1 | 13:53 |
| * redrobot shakes fist at Zuul | 13:53 | |
| moguimar | ok, I guess that' | 13:54 |
| moguimar | s all | 13:54 |
| redrobot | thanks moguimar | 13:54 |
| moguimar | on my end | 13:54 |
| redrobot | We're just about out of time too | 13:54 |
| * redrobot can't remember the last time that happened | 13:54 | |
| redrobot | Thanks for joining everyone! | 13:54 |
| redrobot | #endmeeting | 13:55 |
| *** openstack changes topic to "OpenStack Barbican Development - Weekly Meeting Agenda: https://etherpad.openstack.org/p/barbican-weekly-meeting" | 13:55 | |
| openstack | Meeting ended Tue Jul 14 13:55:01 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 13:55 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/barbican/2020/barbican.2020-07-14-13.00.html | 13:55 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/barbican/2020/barbican.2020-07-14-13.00.txt | 13:55 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/barbican/2020/barbican.2020-07-14-13.00.log.html | 13:55 |
| openstackgerrit | Merged openstack/barbican master: Imported Translations from Zanata https://review.opendev.org/735772 | 13:59 |
| *** ade_lee has joined #openstack-barbican | 13:59 | |
| *** dave-mccowan has joined #openstack-barbican | 14:01 | |
| *** moguimar has quit IRC | 14:18 | |
| *** Luzi has quit IRC | 14:18 | |
| *** knikolla has joined #openstack-barbican | 14:21 | |
| openstackgerrit | Merged openstack/castellan stable/stein: add "verify_ssl_path" config for barbican key manager https://review.opendev.org/738396 | 14:26 |
| *** dave-mccowan has quit IRC | 14:33 | |
| *** xek has joined #openstack-barbican | 15:00 | |
| *** xek has quit IRC | 15:19 | |
| *** ade_lee has quit IRC | 15:26 | |
| *** ade_lee has joined #openstack-barbican | 15:29 | |
| *** xek has joined #openstack-barbican | 18:04 | |
| *** d34dh0r53 has quit IRC | 18:08 | |
| *** d34dh0r53 has joined #openstack-barbican | 18:15 | |
| *** rmcall has joined #openstack-barbican | 18:30 | |
| *** moguimar has joined #openstack-barbican | 21:17 | |
| *** moguimar has quit IRC | 22:22 | |
| *** moguimar has joined #openstack-barbican | 22:23 | |
| *** moguimar has quit IRC | 22:23 | |
| *** tosky has quit IRC | 22:50 | |
| *** tkajinam has joined #openstack-barbican | 22:58 | |
| *** xek has quit IRC | 23:36 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!