Monday, 2024-12-16

xek#startmeeting barbican15:01
opendevmeetMeeting started Mon Dec 16 15:01:24 2024 UTC and is due to finish in 60 minutes.  The chair is xek. Information about MeetBot at http://wiki.debian.org/MeetBot.15:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:01
opendevmeetThe meeting name has been set to 'barbican'15:01
xek#topic Roll Call15:01
xekCourtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin jjung mharley lpiwowar15:01
xekAs usual our agenda can be found here:15:01
xek#link https://etherpad.openstack.org/p/barbican-weekly-meeting15:02
rajivhi15:03
xeko/15:03
rajivi have 2 questions for today :) i will wait for Q&A15:05
rajivwould Doug join ?15:05
xekI think so, he's in today15:06
xekok, let's go over the topics15:06
xek#topic Review Past Meeting Action Items15:06
xek#link https://meetings.opendev.org/meetings/barbican/2024/barbican.2024-12-09-15.01.html15:07
xekThere were none15:07
xek#topic Liaison Updates15:07
xek#note This will be our last meeting this year15:07
xek#info This will be our last meeting this year15:08
rajiv:) 15:08
xek#info also Jan 6th is a holiday here, so I won't be around15:09
xek#topic Open Discussion15:09
xekdmendizaI see the fix for httpx didn't go anywhere this week https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/93736615:10
xekSo let's make theese jobs non-voting15:11
rajiv1. regarding https://review.opendev.org/c/openstack/barbican/+/933461 is it compatible with lower hsm firmware 7.3.3 ? i couldnt test this scenario since hsm firmware rollback is a destructive change15:11
rajivin production all hsm firmware are on 7.3.3, hence i will need to rollout this patch first and then upgrade the hsm firmware version to 7.7.1, right ?15:11
xekWhat I heard is that dmendizais testing with older firmware, but I'm not sure which version15:12
rajivits been 3 weeks since Thales were informed regarding this change, but i had no information15:12
rajivi guess i need to wait for dmendiza[m] to comment on this then ?15:13
xekIt might be an even older version that he tested15:13
rajivoh ok ok, if rollback was not a destructive change, i would have gone ahead upgrading production but this isnt the case15:14
xekyeah, you should wait for his comment on this15:15
rajiv2. whats the best way to support multi-tenancy in barbican with HSM backend ? i see we support 1 secretstore type each but we cannot have multiple secretstores of the same type, correct ? 15:15
rajivi dont think there is an option to create secret stores manually as well ?15:15
rajivif multiple secret stores are present, we can then use the secret store api to set the preferred secretstore for the project15:16
rajivwould there be any security concerns in this approach ?15:20
xekbeyond the fact that it's not tested I can't think of any15:22
rajivokay, would Doug reply to mails ? or has Christmas celebrations started early :) 15:23
xekHe might just have a busy morning today :)15:23
rajivah ok, i will ask again in the next meeting then!15:24
xekok, let's finish up15:26
xek#topic Bug Review15:27
xekThere were no new bugs reported since our last meeting15:27
xekThat's it for today, Happy Holidays!15:27
xek#endmeeting15:28
opendevmeetMeeting ended Mon Dec 16 15:28:03 2024 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:28
opendevmeetMinutes:        https://meetings.opendev.org/meetings/barbican/2024/barbican.2024-12-16-15.01.html15:28
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/barbican/2024/barbican.2024-12-16-15.01.txt15:28
opendevmeetLog:            https://meetings.opendev.org/meetings/barbican/2024/barbican.2024-12-16-15.01.log.html15:28

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!