Meetings/Barbican

= Weekly Barbican Meeting =

The Barbican project team holds a weekly team meeting in :


 * Weekly on Mondays at 2000 UTC
 * The blueprints that are used as a basis for the Barbican project can be found at https://blueprints.launchpad.net/barbican
 * Notes for previous meetings can be found here.
 * Chair (to contact for more information): dave-mccowan (#openstack-barbican @ Freenode)

Agenda

 * December 12, 2017
 * Remove Certificate Orders and CAs from API
 * https://review.openstack.org/#/c/462363/
 * Oslo version object for Barbican


 * September 4, 2017
 * uWSGI related patches
 * https://review.openstack.org/#/c/492182/
 * https://review.openstack.org/#/c/500430/
 * Queens Community goal: policy-and-docs-in-code
 * https://review.openstack.org/#/c/500363/


 * August 21, 2017
 * Pike Status
 * Upcoming PTG
 * Upcoming Summit
 * Any other business


 * August 14, 2017
 * Pike Status
 * Upcoming PTG
 * Any other business


 * July 31, 2017
 * Pike Status
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * Castellan: new release for pike? https://review.openstack.org/483457
 * Client: new release for pike? https://review.openstack.org/487721
 * Gates
 * Do we need more gate jobs (scenario tests) for castellan and client?
 * Queens PTG
 * Denver, September 11-15
 * https://etherpad.openstack.org/p/barbican-ptg-queens
 * Review requests
 * Code review request https://review.openstack.org/#/c/487721/


 * July 24, 2017
 * dave-mccowan on PTO this week, substitute chair:
 * Pike Status
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * Castellan Pike final version already cut
 * Barbican Client Pike final version to be cut this week
 * Barbican milestone 3 to be cut this week
 * What patches are high priority to merge for Pike release?
 * Queens PTG
 * Denver, September 11-15
 * https://etherpad.openstack.org/p/barbican-ptg-queens
 * Review requests
 * Any other business


 * July 10, 2017
 * Pike Status
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * July 24 is Milestone-3 (and release date for libraries)
 * Remaining features to push for; Remaining features to defer.
 * Upcoming PTG
 * Denver, September 11-15
 * Review requests
 * Any other business


 * July 3, 2017
 * No Meeting (US Holiday)


 * June 26, 2017
 * dave-mccowan on PTO, substitute chair:
 * PIke Status
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * July 24 is Milestone-3 (and release date for libraries)
 * Remaining features to push for; Remaining features to defer.
 * Upcoming PTG
 * Denver, September 11-15
 * Review requests
 * Any other business


 * June 19, 2017
 * PIke Status
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * July 24 is Milestone-3 (and release date for libraries)
 * Remaining features to push for; Remaining features to defer.
 * Upcoming PTG
 * Denver, September 11-15
 * Review requests
 * Any other business


 * June 12, 2017
 * PIke Status
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * Milestone-2 released last Friday; July 24 is Milestone-3 (and release date for libraries)
 * Remaining features to push for; Remaining features to defer.
 * Upcoming PTG
 * Denver, September 11-15
 * Review requests
 * Any other business


 * June 5, 2017
 * PIke Status
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * Upcoming PTG
 * Offline Upgrade Discussion (namnh)
 * https://review.openstack.org/#/c/467388/
 * https://review.openstack.org/#/c/467330/
 * Review requests
 * Any other business


 * May 29, 2017
 * No meeting this week. (Memorial Day Holiday in U.S.)


 * May 22, 2017
 * no meeting, schedule conflicts


 * May 15, 2017
 * dmccowan out. substiute chair:
 * Summit Recap
 * Pike Status
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * Review requests
 * Offline Upgrades
 * https://review.openstack.org/#/c/452679/
 * https://review.openstack.org/#/c/449022/
 * Certificate Deprecation
 * https://review.openstack.org/#/c/462363/
 * https://review.openstack.org/462368
 * Cryptography
 * https://review.openstack.org/458102
 * https://review.openstack.org/458196
 * Any other business


 * May 8, 2017
 * No Meeting this week (Summit)


 * May 1, 2017
 * PIke Status
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * deprecations (diazjf)
 * py35 (dave-mccowan)
 * cryptography library https://review.openstack.org/#/q/status:open+project:openstack/barbican+topic:pycrypto_to_cryptography
 * Summit Prep Status
 * https://etherpad.openstack.org/p/barbican-pike-summit
 * Review requests
 * Any other business
 * Congratulations to Jeremy Liu, new Barbican core reviewer
 * No meeting next week (summit)


 * April 24, 2017
 * PIke Status
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * Summit Prep Status
 * https://etherpad.openstack.org/p/barbican-pike-summit
 * Deprecations (diazjf)
 * Certificate Orders (https://review.openstack.org/#/c/459135/)
 * CAs (coming soon)
 * Database issue with HA event (liujiong)
 * https://bugs.launchpad.net/barbican/+bug/1589673
 * https://review.openstack.org/#/c/445722/
 * Review requests
 * py35 functional tests: https://review.openstack.org/#/c/453435/
 * Any other business
 * Jeremy Liu nominated for core: Respond to email on openstack-dev list


 * April 17, 2017
 * Backlog review
 * Pike status
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * https://launchpad.net/barbican/+milestone/pike-1 (push items you own to p2)
 * Tempest and Python 3.5
 * Database Issues? https://bugs.launchpad.net/barbican/+bug/1681988
 * Summit
 * https://etherpad.openstack.org/p/barbican-pike-summit
 * Queens PTG
 * Save the date, request the travel budget
 * Denver, CO at the Denver Renaissance Stapleton Hotel this September 11th-15th.
 * Review requests
 * Any other business


 * April 10, 2017
 * kfarr to chair
 * Backlog review
 * Pike status
 * This week is Milestone 1
 * Pike-1 Release Patch: https://review.openstack.org/#/c/454787
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * https://launchpad.net/barbican/+milestone/pike-1
 * Summit
 * action: confirm to use FNTech Cloud?
 * Queens PTG
 * Save the date, request the travel budget
 * Denver, CO at the Denver Renaissance Stapleton Hotel this September 11th-15th.
 * Review requests
 * Any other business


 * April 3, 2017
 * Backlog review
 * Continued good progress on patches and bug triage
 * Pike status
 * Next week is Milestone 1
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * https://launchpad.net/barbican/+milestone/pike-1
 * Py35 (dave-mccowan)
 * Upgrades (namnh)
 * https://review.openstack.org/#/c/449022
 * https://review.openstack.org/#/c/452679
 * wsgi deploy
 * New Project Adopting Barbican: Tacker
 * https://review.openstack.org/#/c/445543
 * Summit
 * Review requests
 * Any other business
 * dave-mccowan will be out next week


 * March 27, 2017
 * Backlog review
 * Continued good progress on patches and bug triage
 * Pike status
 * 2 weeks until Milestone 1
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * https://launchpad.net/barbican/+milestone/pike-1
 * Community Goals: py35, wsgi
 * Offline upgrades
 * Summit
 * Any discussion on Barbican Summit Sessions?
 * Barbican Forum Sessions: Onboarding Room (confirmed), Community Fishbowl (requested)
 * Review requests
 * Any other business


 * March 20, 2017
 * Backlog review
 * Continued good progress on patches
 * Need more bug triaging
 * Pike status
 * 3 weeks until Milestone 1
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * Castellan and Oslo Discussion
 * Code review requests
 * https://review.openstack.org/#/c/445722/
 * https://review.openstack.org/#/c/437747/
 * https://review.openstack.org/#/c/438098/
 * https://review.openstack.org/#/c/437056/
 * Any other business


 * March 13, 2017
 * Backlog review
 * Good progress on open patches
 * 49 Bugs, half still in "new" state
 * Pike Status
 * Four weeks until Pike Milestone 1
 * https://launchpad.net/barbican/+milestone/pike-1
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * Upgrade support (namnh) https://bugs.launchpad.net/barbican/+bug/1670946
 * Tempest testing
 * Operator's Adopt-a-Project
 * Summit
 * w00t!
 * Forum ideas
 * Cross project: https://etherpad.openstack.org/p/BOS-TC-brainstorming
 * Barbican: https://etherpad.openstack.org/p/BOS-Barbican-brainstorming
 * Code review requests
 * barbican-worker and devstack https://review.openstack.org/444190
 * Any other business


 * March 6, 2017
 * Pike Status
 * https://etherpad.openstack.org/p/barbican-tracker-pike
 * Backlog review
 * 47 Bugs, still many open patches
 * Tempest testing
 * Operator's Adopt-a-Project
 * Code review requests
 * Any other business
 * Porcupine Stickers (send me your address)


 * February 27, 2017
 * PTG Update
 * Pike Goals: key manager base service, vault plugin, id field, testing, backlog, community goals
 * PTG: https://etherpad.openstack.org/p/ptg-barbican-pike
 * Backlog review
 * bug count: down to 46 from 72
 * review count: still a lot
 * Tempest testing
 * Operator's Adopt-a-Project
 * Code review requests
 * https://review.openstack.org/#/c/431524/
 * https://review.openstack.org/#/c/431405/
 * https://review.openstack.org/#/c/414405/
 * https://review.openstack.org/#/c/403604/
 * Any other business


 * February 20, 2017
 * PTG: https://etherpad.openstack.org/p/ptg-barbican-pike
 * Team photo on Thursday at 1:40pm
 * Remote attendees via Hangouts/Webex (sign up on etherpad)
 * Project Navigator
 * Summit
 * don't forget to vote for barbican sessions
 * Ocata Status
 * patch to tag release is out
 * Tempest testing
 * extra stuff in devstack install?
 * Operator's Adopt-a-Project
 * Any other business


 * February 13, 2017
 * PTG: https://etherpad.openstack.org/p/ptg-barbican-pike
 * Summit
 * Ocata Status
 * Pike Status
 * Tempest testing
 * Operator's Adopt-a-Project
 * Any other business


 * February 6, 2017
 * Summit: Last day to submit presentation proposal
 * PTG: https://etherpad.openstack.org/p/ptg-barbican-pike
 * Ocata Status
 * RC1 has been release, final release this week
 * stable/ocata has been pulled. master is now Pike.
 * Castellan now has stable Ocata branch and releases managed by OpenStack bots
 * Tempest testing
 * Bug using barbican client?
 * https://bugs.launchpad.net/barbican/+bug/1479439
 * payload_content_type is set to "None" by default


 * January 30, 2017
 * Barbican Container fixes (diazjf)
 * Missing Unit Tests: https://review.openstack.org/#/c/425548/
 * Bug Fix: https://review.openstack.org/#/c/426529/
 * Docs: https://review.openstack.org/#/c/426093/
 * Gate Status
 * Castellan and Client master branches broken (related to add id field?)
 * Ocata Status
 * Milestone-3 Barbican cut last week. RC-1 should be this week.
 * two weeks away from Ocata Final Release
 * Tempest Testing
 * Top Three Barbican Features for Ocata
 * PTG: https://etherpad.openstack.org/p/ptg-barbican-pike
 * Barbican Mascot Reveal


 * January 23, 2017
 * Tempest Testing
 * PTG Meeting: https://etherpad.openstack.org/p/ptg-barbican-pike
 * Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
 * python-barbicanclient release this week. wait for any patches?
 * PTL for Pike Nominations


 * January 16, 2017
 * Code review requests https://review.openstack.org/#/c/403604/
 * Tempest Testing
 * Project Navigator Updates, OpenStack Dev Mail Thread
 * PTG Meeting: https://etherpad.openstack.org/p/ptg-barbican-pike
 * Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
 * PTL for Pike Nominations


 * January 9, 2017
 * Castellan Release
 * Tempest Testing
 * Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
 * PTG Meeting: https://etherpad.openstack.org/p/ptg-barbican-pike


 * December 19, 2016
 * Code review requests https://review.openstack.org/#/c/403604/
 * Storing Fernet keys in Barbican


 * December 12, 2016
 * Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
 * Milestone 2 is this week. Are we waiting on anything? dave-mccowan to cut release Tuesday if not.
 * Meeting Time: plan to change to a later time starting in January: https://etherpad.openstack.org/p/barbican-irc-meeting-time
 * PTG Meeting
 * Please RSVP and add agenda items
 * https://etherpad.openstack.org/p/ptg-barbican-pike
 * Tempest Testing:
 * New repo for Tempest tests: https://review.openstack.org/#/q/project:openstack/barbican-tempest-plugin
 * Sign up to co-ordinate test development: https://etherpad.openstack.org/p/barbican_tempest_plugin
 * Adding id fields to responses
 * Writing Tempest Tests has exposed another need for returning IDs, instead of only REFs, for Barbican Objects
 * Here's an example: https://review.openstack.org/#/c/409732/
 * Marc (mkoderer) has offered to write this code. Shall we push for Ocata release?
 * Code review requests


 * December 5, 2016
 * Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
 * Meeting Time: plan to change to a later time starting in January: https://etherpad.openstack.org/p/barbican-irc-meeting-time
 * Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
 * Tempest Testing: https://etherpad.openstack.org/p/barbican_tempest_plugin
 * Code review requests:
 * https://review.openstack.org/#/c/397338
 * https://review.openstack.org/#/c/400370


 * November 28, 2016
 * Any suggestion on client refactor? https://review.openstack.org/#/c/403604/
 * Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
 * Meeting Time: can we move the weekly meeting earlier to be more Europe friendly?


 * November 14, 2016
 * CLI change patches (doug)
 * Returning entity_id property (doug)
 * Config option for certificate order api deprecation (doug)
 * Congrats to Arun Kant for promotion to barbian-core


 * November 7, 2016
 * Barcelona Summit Recap
 * Vault Plugin for Barbican (diazjf)
 * https://groups.google.com/forum/#!topic/vault-tool/BfSq4dP081s
 * Arun Kant for barbican-core


 * October 31, 2016
 * Barcelona Summit Recap
 * Vault Plugin for Barbican (diazjf)
 * https://groups.google.com/forum/#!topic/vault-tool/BfSq4dP081s


 * October 17, 2016
 * Barcelona Design Summit Topics
 * https://etherpad.openstack.org/p/barbican-ocata-design-summit
 * https://wiki.openstack.org/wiki/Design_Summit/Ocata/Etherpads#Barbican
 * https://www.openstack.org/summit/barcelona-2016/summit-schedule/global-search?t=Barbican
 * if you plan to attend, add your nic
 * add and vote for session topics
 * Launchpad Blueprint Cleanup
 * https://blueprints.launchpad.net/barbican
 * Reviews
 * In general, let's reduce our review backlog
 * Change authentication default to keystone: https://review.openstack.org/#/c/333173/
 * Open Discussion


 * October 10, 2016
 * Action Item Status
 * Barcelona Design Summit Topics
 * https://etherpad.openstack.org/p/barbican-ocata-design-summit
 * if you plan to attend, add your nic
 * add and vote for session topics
 * Next Midcycle, Pike Design Summit
 * Project Team Gathering
 * http://www.openstack.org/ptg
 * Atlanta, February 20-24
 * https://etherpad.openstack.org/p/barbican-pike-ptg
 * Reviews
 * LBaaS user context: https://bugs.launchpad.net/barbican/+bug/1592612
 * postgreSQL broken: https://review.openstack.org/#/c/383577
 * Open Discussion


 * October 3, 2016
 * Action Item Status
 * Newton Status
 * Barcelona Design Summit Topics
 * https://etherpad.openstack.org/p/barbican-ocata-design-summit
 * if you plan to attend, add your nic
 * add and vote for session topics
 * Next Midcycle, Pike Design Summit
 * Project Team Gathering
 * http://www.openstack.org/ptg
 * Atlanta, February 20-24
 * https://etherpad.openstack.org/p/barbican-pike-ptg
 * Open Discussion
 * Reviews


 * September 26, 2016
 * Newton RC1 Status
 * any newton-rc-potential bugs?
 * https://releases.openstack.org/newton/schedule.html
 * /master unit and function tests failing, gates broken
 * https://bugs.launchpad.net/barbican/+bug/1627809
 * due to update of pecan package
 * Midcycle Action Item Review
 * https://etherpad.openstack.org/p/barbican-newton-midcycle-topics
 * certificate api deprecation email (done)
 * state of barbican email (redrobot)
 * state of barbican blog postings (redrobot, alee, fernando, arun)
 * project integration how-to documentation (redrobot)
 * deployment guide location (redrobot)
 * implement listing secrets in a client (kfarr)
 * Barcelona Design Summit Topics
 * https://etherpad.openstack.org/p/barbican-ocata-design-summit
 * if you plan to attend, add your nic
 * add and vote for session topics
 * Reviews
 * https://review.openstack.org/#/c/353744


 * September 19, 2016
 * Newton RC1 Status
 * any newton-rc-potential bugs?
 * https://releases.openstack.org/newton/schedule.html
 * Midcycle Action Item Review
 * https://etherpad.openstack.org/p/barbican-newton-midcycle-topics
 * Barcelona Design Summit Topics
 * https://etherpad.openstack.org/p/barbican-ocata-design-summit
 * Ocata Blueprints
 * https://review.openstack.org/#/c/363945/
 * Container Install with Kolla
 * Need a good default config for production use with multinode
 * https://bugs.launchpad.net/kolla/+bug/1625340
 * https://bugs.launchpad.net/kolla/+bug/1625337
 * PTL Election
 * Reviews
 * https://review.openstack.org/#/c/372060


 * September 12, 2016
 * Reviews
 * https://review.openstack.org/#/c/251168/
 * RC1
 * https://releases.openstack.org/newton/schedule.html
 * PTL Election
 * Barcelona Design Summit Topics
 * https://etherpad.openstack.org/p/barbican-ocata-design-summit
 * reviews (multiple-backend reviews for newton release) - arunkant
 * Impl Part 1: https://review.openstack.org/#/c/348092/
 * Impl Part 2: https://review.openstack.org/#/c/354285/
 * Impl Part 3: https://review.openstack.org/#/c/357544/
 * Impl Part 4: https://review.openstack.org/#/c/358162/
 * Impl Part 5: https://review.openstack.org/#/c/360202/


 * August 27, 2016
 * Question around swift keymaster : Does it have barbican/castellan impl in newton release? (arunkant)
 * http://docs.openstack.org/developer/swift/overview_encryption.html
 * https://specs.openstack.org/openstack/swift-specs/specs/in_progress/at_rest_encryption.html#barbican-keymaster
 * exception for multiple backend code reviews for newton RC1 timeline (arunkant)
 * reviews (multiple-backend reviews for newton release) - arunkant
 * Api Doc: https://review.openstack.org/#/c/341803/
 * Impl Part 1: https://review.openstack.org/#/c/348092/
 * Impl Part 2: https://review.openstack.org/#/c/354285/
 * Impl Part 3: https://review.openstack.org/#/c/357544/
 * Impl Part 4: https://review.openstack.org/#/c/358162/
 * Impl Part 5: https://review.openstack.org/#/c/360202/


 * August 22, 2016
 * reviews (multiple-backend reviews for newton release)
 * Spec: https://review.openstack.org/#/c/263972/
 * Api Doc: https://review.openstack.org/#/c/341803/
 * Impl Part 1: https://review.openstack.org/#/c/348092/
 * Impl Part 2: https://review.openstack.org/#/c/354285/
 * Impl Part 3: https://review.openstack.org/#/c/357544/
 * Impl Part 4: https://review.openstack.org/#/c/358162/


 * August 15, 2016
 * reviews (core)
 * https://review.openstack.org/#/c/320100/
 * https://review.openstack.org/#/c/343986/


 * August 8, 2016
 * reviews (core)
 * https://review.openstack.org/#/c/320100/
 * https://review.openstack.org/#/c/343986/
 * Midcycle
 * Who's coming?


 * August 1, 2016
 * reviews (core)
 * https://review.openstack.org/#/c/320100/6
 * https://review.openstack.org/#/c/343986/
 * OpenStack Summit presentations(diazjf)
 * Let's start casting votes on Barbican related talks!!


 * July 11, 2016
 * Barbican MidCycle Meetup (diazjf)
 * It's official, it will be in IBM Austin site, August 15 - 17, Security will be August 17 - 19.
 * We need to plan fun things to do while everyone is here.
 * Add topics here: https://etherpad.openstack.org/p/barbican-security-midcycle-N
 * diazjf needs to get on the ball and send email to the mailing list!
 * Barbican Talks (diazjf)
 * Is anyone giving any talks?
 * Everyone needs to update their profiles, etc.


 * May 9, 2016
 * Secret User Metadata Quota questions (diazjf)
 * Add a new api, db, etc. for Secret Quotas or use Project Quotas?
 * https://review.openstack.org/#/c/313788/
 * Blueprints
 * Deployer Secret Metadata -> Ready for Review/Merge
 * https://review.openstack.org/#/c/301310/
 * HSM fail-safe
 * Will split up into 2 blueprints.
 * 1.) HSM retry. If connection to an HSM is lost, Barbican will try to connect again for a set amount of times after a set amount of time.
 * 2.) Pool of HSMs for fail-safe.
 * Will work on the HSM retry for N release. If HSM HA mode shows no improvement by N release will work on fail-safe for O release.
 * https://review.openstack.org/#/c/301997/


 * May 2, 2016
 * Deployer Metadata Spec ready for review (diazjf)
 * https://review.openstack.org/#/c/301310/
 * Software HSM in the gate (diazjf)
 * Currently working on an install guide for SoftHSMv2. It will help out for learning how to deploy Barbican in production.
 * https://review.openstack.org/#/c/311571/
 * http://docs-draft.openstack.org/71/311571/3/check/gate-barbican-docs/a530a29//doc/build/html/testing/soft_hsm.html
 * Barbican Stackalytics Broken?
 * Last update was April 23
 * http://stackalytics.com/?module=barbican-group


 * Apr 18, 2016
 * Candidate for backport to stable/mitaka and Liberty ?
 * https://review.openstack.org/#/c/304335/ (panatl) - Mitaka
 * https://review.openstack.org/#/c/303845/ (panatl) - Liberty
 * https://review.openstack.org/#/c/303648/ (arunkant)
 * Should creator be allowed to delete related barbican resources?
 * Cinder allows create/delete as long as user has a role on that project. https://github.com/openstack/cinder/blob/master/etc/cinder/policy.json#L9
 * Should we assign creator or admin role for cinder user to mange barbican resources ?
 * Security Related review, will need backport to Liberty and Mitaka once approved and merged
 * https://review.openstack.org/#/c/304788/ (panatl)
 * Security Concerns on having a default "kek" in simple_crypto.py, can we remove that and update the test cases accordingly?
 * General Review
 * https://review.openstack.org/#/c/306216/ (panatl)


 * Apr 11, 2016
 * Blueprints for Newton
 * Blueprint for Deployer Secret Metadata (diazjf)
 * https://review.openstack.org/#/c/301310/
 * Blueprint for HSM fail safe (diazjf)
 * https://review.openstack.org/#/c/301997/


 * Mar 28, 2016
 * RC2
 * https://bugs.launchpad.net/barbican/+bug/1562091
 * Secret User Metadata Quotas
 * Project Quotas vs. Secret Quotas
 * Bug: Incorrect Error Code when Passing Accept Header on a Secret GET
 * https://bugs.launchpad.net/barbican/+bug/1561701


 * Feb 29, 2016
 * Code Freeze, burr! (diazjf)
 * https://etherpad.openstack.org/p/barbican-m-spec-crs
 * Castellan releases (kfarr)


 * Feb 22, 2016
 * Chair: diazjf
 * Fernando Diaz added to core team (redrobot)
 * http://lists.openstack.org/pipermail/openstack-dev/2016-February/087159.html
 * Barbican CLI revamp (silos)
 * https://etherpad.openstack.org/p/barbican-client-v2


 * Feb 15, 2016
 * Go over keystone middleware in Credential Factory (diazjf)
 * https://review.openstack.org/#/c/273863/11/castellan/common/utils.py
 * pycryptodome (redrobot)
 * Fernando Diaz for Core (rerdrobot)
 * http://lists.openstack.org/pipermail/openstack-dev/2016-February/086581.html
 * Volunteer meeting chair for next week
 * Barbican client cliff bug (silos)
 * https://bugs.launchpad.net/python-barbicanclient/+bug/1504646


 * Feb 8, 2016
 * Public, internal barbican endpoints issue with single host setting in barbican config (arunkant)
 * https://github.com/openstack/barbican/blob/master/barbican/common/utils.py#L58
 * Setup a Barbican Guild meeting (diazjf)
 * KMIP Key Manager for Castellan (silos)
 * https://review.openstack.org/#/c/246546/
 * Required configuration options without a default value (rellerreller)
 * Is that allowed?
 * https://review.openstack.org/#/c/273863/


 * Feb 1, 2016
 * Discuss Castellan Credential Object Patches (diazjf)
 * https://review.openstack.org/#/c/270602/
 * Setup Google Hangout meetings(diazjf)
 * BYOK Castellan implementation
 * Barbican Puppet


 * Jan 25, 2016
 * checkout BYOK spec (diazjf)
 * https://review.openstack.org/#/c/271517/


 * Jan 18, 2016
 * discuss cron job database cleanup (edtubill)
 * talk about database constraints
 * set up hangout


 * Jan 4, 2016
 * Happy New Year!
 * Quickly go over updated Castellan multiple keystone auth blueprint
 * https://review.openstack.org/#/c/241068/
 * puppet modules for Barbican
 * https://review.openstack.org/#/c/258851/
 * review coming for puppet+ gunicorn + keystone
 * need help with apache/mod_wsgi


 * Dec 21, 2015
 * Questions about steps to integrate Barbican with DevStack (kfarr)


 * Dec 14, 2015
 * Barbican SAML authentication (diazjf)
 * https://review.openstack.org/#/c/241068/
 * Add PUT support for generic container types (ting wang)
 * https://review.openstack.org/#/c/207249/
 * Add barbican-manage command (jhfeng)
 * https://review.openstack.org/#/c/253719/


 * Nov 30, 2015
 * chair: rellerreller
 * Mitaka-1 milestone
 * kfarr will be handling the release this week
 * Castellan logging options (elmiko)
 * Castellan integration testing (elmiko)


 * Nov 23, 2015
 * chair: rellerreller
 * Castellan improvements (elmiko)
 * auto-discovery of barbican endpoint
 * auth detection from context object


 * Nov 16, 2015
 * Barbican Federation Use-Cases Detailed Overview
 * Castellan Authentication compatibility for Swift
 * https://etherpad.openstack.org/p/swifjt-keymaster-with-castellan
 * Barbican garbage collector
 * Creating a castellan-specs github (silos)


 * Nov 9, 2015
 * Summit Recap
 * redrobot is getting married at the end of November! :D
 * We'll need a substitute meeting chair for the Nov 23 and 30.
 * Federation Use Cases (edtubill, diazjf, silos)


 * Nov 2, 2015
 * Cancelled due to Summit


 * October 26, 2015
 * Cancelled due to Summit


 * October 19, 2015
 * chair: dave-mccowan
 * Review design summit etherpad votes.


 * October 12, 2015
 * Cross project liasions
 * py34 update (dave)


 * October 5, 2015
 * Liberty RC2
 * Mitaka Blueprints
 * Tokyo Summit


 * September 28, 2015
 * (woodster) What about changing our gates to populate database with Alembic migrations, instead of from SQLAlchemy models directly?


 * September 21, 2015
 * (arunkant) Barbicanclient failures on neutron test gate: http://logs.openstack.org/43/208343/15/check/gate-tempest-dsvm-neutron-src-python-barbicanclient/9193018/


 * September 14, 2015
 * Review Dave's core nomination: http://lists.openstack.org/pipermail/openstack-dev/2015-September/073866.html
 * Federated Barbican Update (silos)


 * September 7, 2015
 * No meeting. Happy Labor day to contributors in the US.


 * August 31, 2015
 * Test framework - We're currently using both nosetest and testtools. Can we consolidate to one of them?
 * Merge requirements continued
 * Quotas Blueprint targeting Liberty-3. Update.
 * /v2/orders
 * Castellan: https://review.openstack.org/#/c/208569/ Last patch needed before a release (kfarr)
 * (woodster) Don't forget about the ACL blueprints, esp. this one: https://review.openstack.org/#/c/208343


 * August 24, 2015
 * Merge Requirements - I think it's time we start merging after two +2 reviews by a core reviewer. (redrobot)
 * Tokyo Session Requirements (red robot)


 * August 17, 2015
 * Adding certificate_manager namespace to Castellan (rm_work)
 * Federated Barbican (silos)
 * Defect/issue template - https://etherpad.openstack.org/p/barbican-bug-report-template (hockeynut)
 * super-user rule in policy.json (dave-mccowan)
 * quotas blueprint update (dave-mccowan)


 * August 3, 2015
 * Multiple KMIP Blueprint - https://review.openstack.org/#/c/194298/ (silos)
 * Castellan merge requests (kfarr)


 * July 27, 2015
 * V2 and Orders (jmvrbanac)
 * stable/kilo tests are failing (jaosorior)
 * Barbican Openstack CLI plugin (jaosorior)
 * Castellan
 * release schedules (elmiko)
 * patches need merging


 * July 20, 2015
 * Magnum integration
 * Resource Quotas
 * Design Discussion: https://review.openstack.org/203678
 * Code review for first commit (config, controller, validator) https://review.openstack.org/198764
 * Brief discussion regarding default policy settings and ability of secret creators to manage their secrets (https://bugs.launchpad.net/barbican/+bug/1475962)


 * July 13, 2015
 * Magnum integration
 * CAs blueprint
 * http://specs.openstack.org/openstack/barbican-specs/specs/liberty/add-cas.html
 * copy constructor for secrets and containers, report back from api-wg discussions (elmiko)
 * https://review.openstack.org/#/c/127823/


 * July 6, 2015
 * Update on Quota Support blueprint (dave-mccowan)
 * ACL client implementation (chellygel)
 * Let's discuss the fifth 'acl-user' role needed for Barbican:
 * Ugh, I noticed we did discuss this on May 4th with an etherpad here.
 * However, I think we got off track talking about lists of secrets...
 * So I think the outcome of this discussion should just be a blueprint or paper-cut to add this new role and associated testing for it. I favor blueprint as we could also see a sample of the API doc mods needed.


 * June 29, 2015
 * Magnum integration
 * Why are we still testing the python-barbicanclient with py26
 * Dogtag gate as voting


 * June 8, 2015
 * Mid-Cycle RSVP (red robot)


 * June 1, 2015
 * Vancouver Summit Recap (redrobot)
 * Mid-Cycle (red robot)


 * May 11, 2015
 * (arunkant) Proposed ACL API changes as per ACL docs review comments on line #237
 * (dave-mccowan) Heads-up: adding run-as-user support to functional tests. You local keystone deployment will need new users and roles installed to run functional tests.


 * May 4, 2015
 * (woodster) Let's discuss and fine-tune the 'read-only' ACL user' a little bit


 * April 20, 2015
 * (redrobot) Kilo-RC1
 * (woodster) What approved or drafting blueprints do we want to bring over to Liberty?
 * (redrobot) Bug: https://bugs.launchpad.net/barbican/+bug/1446266


 * April 13, 2015
 * (redrobot) Vancouver Design Summit. See this Liberty design session topics wiki page here.
 * (redrobot) Additional role for per-secret ACL. Current policy is available here.


 * April 6, 2015
 * (woodster) Barbican Python client and expected sensitivity to additional response key/values returned. See notes on this CR
 * (redrobot) Juno to Kilo DB migration
 * (redrobot) Content-Type and payload_content_type combinations


 * March 30, 2015
 * Flagging things for deprecation. (jvrbanac)
 * Logging in Barbican (jvrbanac)
 * Castellan Initial Release (redrobot)


 * March 23, 2015
 * Review comment around storing acl users as comma separated values vs separate table. Review Link (arunkant)
 * How to integrate Castellan with Openstack service (arunkant)
 * Related: Castellan release and how to update Castellan resources, i.e. bug tracker (kfarr)


 * March 16, 2015
 * Functional testing
 * Assert parameter order


 * March 2, 2015
 * 100% code coverage options: break packages into 'paper cut' bugs maybe?


 * February 23, 2015
 * Mid-cycle recap
 * https://etherpad.openstack.org/p/barbican-kilo-sprint
 * Ade: Wrap profiles around CMC to pass to CA to track product type
 * Ade: Additional CR for Identify CA migration scripts (2 others in review)
 * Ade: BarbicanMetadata table
 * Dave: Certificate Order metadata change API parameter from container ref -> secret ref validation.
 * tsv: Quotas BP
 * woodster: reach out to Jarret about hard deletes for compliance concerns.
 * woodster: Order sub-status
 * New gates
 * Road to Liberty summit
 * https://etherpad.openstack.org/p/barbican-L-design-sessions


 * February 9, 2015
 * Update on Swift integration with KeyManager, if/when moving to Castellan
 * A note about Barbican packaging effort underway
 * L-Summit space requirements


 * February 2, 2015
 * Kilo 2
 * Quota Support blueprint:
 * Open question: Admin endpoint (9312) vs service admin thats allowed to set quotas on any project it wishes to?
 * Castellan project
 * Which openstack services are driving? What is the timeline for Castellan availability and services started using it.
 * Just a note: L design session etherpad is available here.
 * Migration scripts are not being ran (according to the bugs that I've found) up to which revision should we keep(support)? [jaosorior]
 * https://bugs.launchpad.net/barbican/+bug/1376902 [jaosorior]
 * This bug also relates to plugin validation which has been discussed in the past but not otherwise acted upon.
 * A note about Barbican packaging effort underway


 * January 26, 2015
 * KMIP MKEK plugin spec https://review.openstack.org/#/c/148948 [tkelsey]
 * Discussion over the creation of a new plugin vs updating KMIPSecretStore
 * Discussion over Incompatible pluggin versioning (if we decide not to make a second plugin)
 * Content types blueprint:
 * Seems very close...what questions still need to be answered?
 * Per Secret Policy blueprint:
 * Open question: Should whitelisted users be able to decrypt secrets even if they don't have proper Barbican roles?


 * January 19, 2015
 * Barbican Mid-Cycle
 * https://etherpad.openstack.org/p/barbican-kilo-sprint
 * Vancouver Summit
 * January 12, 2015
 * Castellan progress [redrobot/rm_work]
 * KMIPSecretStore HSM connection certificates [tkelsey]
 * Request for reviews on https://review.openstack.org/#/c/135217/
 * Chance to answer any questions
 * Blueprints:
 * Quota support: Should we restrict scope? ...So no driver support, no class support?
 * Per-secret RBAC: Whitelist only vs logical expressions? GET list by project-ID or by resources I can GET?


 * January 5, 2015
 * Kilo 1 Released [redrobot]
 * Quota BP [redrobot]
 * Insights on https://bugs.launchpad.net/barbican/+bug/1376469 [jaosorior]
 * Status of essential blueprints


 * December 15, 2014
 * Barbican Mid-Cycle [redrobot]


 * December 8, 2014
 * Integration Docs [redrobot]
 * Bugs [redrobot]
 * Castellan [redrobot]
 * Content types [rellerreller]
 * Any feedback on etherpad page, https://etherpad.openstack.org/p/barbican-formats-discussion?


 * December 1, 2014
 * Consider video conference to discuss and hopefully land our many outstanding blueprints


 * November 24, 2014
 * Validation for Typed Container data (Certificates, etc) [rm_work]
 * Castellan scope: include CertMgr / ContainerMgr support? [rm_work]
 * Content type


 * November 17, 2014
 * RFC 7030
 * See Ade's notes - https://etherpad.openstack.org/p/thoughts_on_certs
 * New Key Manager library (Castellan)


 * November 10, 2014
 * New Core Reviewers
 * RFC 7030


 * October 27, 2014
 * Kilo Design Sessions
 * Atalla ESKM Plugin
 * Barbican T-Shirts


 * October 6, 2014
 * Kilo development is open
 * https://review.openstack.org/#/c/125678/


 * Sep 29, 2014
 * Juno RC1
 * CR https://review.openstack.org/#/c/110817/ review and merge before Juno final?
 * Kilo Design Sessions


 * Sep 22, 2014
 * (woodster) Added 'How should we handle content type for secrets' block to Kilo design discussion etherpad.


 * Sep 15, 2014
 * jenkins.cloudkeep.io
 * Metadata Storage: https://etherpad.openstack.org/p/barbican_metadata
 * API Stability
 * Documentation sync up with new API
 * (woodster) Juno roadmap addition: Refactor Barbican python client to use new Keystone auth components
 * (woodster) Various additions made to the Kilo design etherpad.
 * Need someone to look at https://review.openstack.org/#/c/118697/ comment from Nathan. Based on vote I made this change.


 * Sep 8, 2014
 * Kilo Design Sessions
 * Juno roadmap discussions: https://etherpad.openstack.org/p/barbican-juno-final-roadmap


 * Sep 1, 2014
 * Kilo Design Sessions


 * Aug 25, 2014
 * CR Sizes (jvrbanac)
 * String interpolation in debug logging (redrobot, rellerreller)
 * Python 3 support (rellerrellera)


 * Aug 18, 2014
 * Juno Home Stretch (woodsier)


 * Aug 11, 2014
 * Barbican Integration
 * Barbican as a Keystone service


 * Aug 4, 2014
 * #openstack-barbican on eavesdrop


 * July 28, 2014
 * Add more type in order post (https://review.openstack.org/#/c/87405/) waiting for review.
 * Kilo conference presentation submissions


 * July 21, 2014
 * (redrobot) Expiring Launchpad BPs after 5 days


 * July 14, 2014
 * barbican-core nominations vote count
 * can we plan better to make such change https://review.openstack.org/#/c/103431?
 * python-barbicanclient release schedule


 * June 30, 2014
 * Mid-cycle meetup next week
 * Keystone events blueprint
 * (atiwari) https://review.openstack.org/#/c/98174/ (Do we need to worry about backward compatibility?)


 * June 23, 2014
 * Mid-cycle meetup in two weeks.


 * June 16, 2014
 * Mid-cycle meetup


 * June 9, 2014
 * barbican-specs repo
 * juno-1 release coming up
 * mid-cycle meetup
 * https://review.openstack.org/#/c/98473 (is it merge ready? kind of blocker)
 * https://review.openstack.org/#/c/97844/ (is it merge ready?)
 * https://review.openstack.org/#/c/98174 (is it merge ready?)
 * Testing code pattern
 * Any progress on eventing system (atiwari).
 * Can tenant_id removal from uri deserve v2 api version(atiwari).


 * June 2, 2014
 * Hacking enabled on pep8 gate
 * New barbican-specs repository
 * Order model changes for https://blueprints.launchpad.net/barbican/+spec/api-orders-add-more-types
 * New field "meta of type JsonBlob" and "container_id of type String"
 * Meera is adding Barbican tempest tests https://blueprints.launchpad.net/tempest/+spec/add-basic-tests-for-barbican
 * Comments, Suggestions or disagreement?


 * May 5, 2014
 * https://review.openstack.org/#/c/82189/ (is it merge ready?)
 * https://review.openstack.org/#/c/88463/ (review required- API change proposal Key generation)
 * https://review.openstack.org/#/c/81310/ (review required- Adding target support for policy enforcement.)
 * https://review.openstack.org/#/c/90613/ (review required- API change proposal certificate generation order)
 * The Advanced Services Common Requirements team wanted to discuss the current status of the Barbican and its readiness to utilize the Barbican for Certificate/key generation and for storing the tenant's certificates sercurely in the system.
 * Can we get an update or talk about this in today's meeting.
 * https://blueprints.launchpad.net/barbican/+spec/add-wrapping-key-to-barbican-server


 * April 28, 2014
 * Action items:
 * all: Review/contribute to Malini's etherpad: https://etherpad.openstack.org/p/juno-key-manager-chapter
 * all: Review atiwari's CR to modify the crypto plugin interface: https://review.openstack.org/#/c/82189/
 * core: Consider beefing up barbican docs related to current crypto plugin operation, as prep for the OpenStack summit


 * April 7, 2014
 * malini - update on Secuirty Guide documentation
 * alee_/atiwari - Crypto plugin changes
 * arunkant - Target support in barbican policy enforcement
 * jraim - Support for debug mode start in barbican, can be merged?

Meeting organizers

 * Publish the agenda 24h in advance
 * Mail the agenda to the list and invite participants
 * Ask each person responsible for an action from the previous meeting to prepare a line of the form, for each action item:  . #info nickname description of the action link to the diff / mailing list thread etc. describing the implementation of the action
 * Use http://meetbot.debian.net/Manual.html to get an automatic summary
 * Prepare an outline for the meeting to speed things up (see http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-05-10-16.00.log.html for an actual example)
 * Record decisions and commitments; review in the next meeting