xek | #startmeeting barbican | 15:01 |
---|---|---|
opendevmeet | Meeting started Mon Dec 16 15:01:24 2024 UTC and is due to finish in 60 minutes. The chair is xek. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:01 |
opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:01 |
opendevmeet | The meeting name has been set to 'barbican' | 15:01 |
xek | #topic Roll Call | 15:01 |
xek | Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin jjung mharley lpiwowar | 15:01 |
xek | As usual our agenda can be found here: | 15:01 |
xek | #link https://etherpad.openstack.org/p/barbican-weekly-meeting | 15:02 |
rajiv | hi | 15:03 |
xek | o/ | 15:03 |
rajiv | i have 2 questions for today :) i will wait for Q&A | 15:05 |
rajiv | would Doug join ? | 15:05 |
xek | I think so, he's in today | 15:06 |
xek | ok, let's go over the topics | 15:06 |
xek | #topic Review Past Meeting Action Items | 15:06 |
xek | #link https://meetings.opendev.org/meetings/barbican/2024/barbican.2024-12-09-15.01.html | 15:07 |
xek | There were none | 15:07 |
xek | #topic Liaison Updates | 15:07 |
xek | #note This will be our last meeting this year | 15:07 |
xek | #info This will be our last meeting this year | 15:08 |
rajiv | :) | 15:08 |
xek | #info also Jan 6th is a holiday here, so I won't be around | 15:09 |
xek | #topic Open Discussion | 15:09 |
xek | dmendizaI see the fix for httpx didn't go anywhere this week https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/937366 | 15:10 |
xek | So let's make theese jobs non-voting | 15:11 |
rajiv | 1. regarding https://review.opendev.org/c/openstack/barbican/+/933461 is it compatible with lower hsm firmware 7.3.3 ? i couldnt test this scenario since hsm firmware rollback is a destructive change | 15:11 |
rajiv | in production all hsm firmware are on 7.3.3, hence i will need to rollout this patch first and then upgrade the hsm firmware version to 7.7.1, right ? | 15:11 |
xek | What I heard is that dmendizais testing with older firmware, but I'm not sure which version | 15:12 |
rajiv | its been 3 weeks since Thales were informed regarding this change, but i had no information | 15:12 |
rajiv | i guess i need to wait for dmendiza[m] to comment on this then ? | 15:13 |
xek | It might be an even older version that he tested | 15:13 |
rajiv | oh ok ok, if rollback was not a destructive change, i would have gone ahead upgrading production but this isnt the case | 15:14 |
xek | yeah, you should wait for his comment on this | 15:15 |
rajiv | 2. whats the best way to support multi-tenancy in barbican with HSM backend ? i see we support 1 secretstore type each but we cannot have multiple secretstores of the same type, correct ? | 15:15 |
rajiv | i dont think there is an option to create secret stores manually as well ? | 15:15 |
rajiv | if multiple secret stores are present, we can then use the secret store api to set the preferred secretstore for the project | 15:16 |
rajiv | would there be any security concerns in this approach ? | 15:20 |
xek | beyond the fact that it's not tested I can't think of any | 15:22 |
rajiv | okay, would Doug reply to mails ? or has Christmas celebrations started early :) | 15:23 |
xek | He might just have a busy morning today :) | 15:23 |
rajiv | ah ok, i will ask again in the next meeting then! | 15:24 |
xek | ok, let's finish up | 15:26 |
xek | #topic Bug Review | 15:27 |
xek | There were no new bugs reported since our last meeting | 15:27 |
xek | That's it for today, Happy Holidays! | 15:27 |
xek | #endmeeting | 15:28 |
opendevmeet | Meeting ended Mon Dec 16 15:28:03 2024 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:28 |
opendevmeet | Minutes: https://meetings.opendev.org/meetings/barbican/2024/barbican.2024-12-16-15.01.html | 15:28 |
opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/barbican/2024/barbican.2024-12-16-15.01.txt | 15:28 |
opendevmeet | Log: https://meetings.opendev.org/meetings/barbican/2024/barbican.2024-12-16-15.01.log.html | 15:28 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!