Barbican/Archive/Agenda/2016


 * December 19, 2016
 * Code review requests https://review.openstack.org/#/c/403604/
 * Storing Fernet keys in Barbican


 * December 12, 2016
 * Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
 * Milestone 2 is this week. Are we waiting on anything? dave-mccowan to cut release Tuesday if not.
 * Meeting Time: plan to change to a later time starting in January: https://etherpad.openstack.org/p/barbican-irc-meeting-time
 * PTG Meeting
 * Please RSVP and add agenda items
 * https://etherpad.openstack.org/p/ptg-barbican-pike
 * Tempest Testing:
 * New repo for Tempest tests: https://review.openstack.org/#/q/project:openstack/barbican-tempest-plugin
 * Sign up to co-ordinate test development: https://etherpad.openstack.org/p/barbican_tempest_plugin
 * Adding id fields to responses
 * Writing Tempest Tests has exposed another need for returning IDs, instead of only REFs, for Barbican Objects
 * Here's an example: https://review.openstack.org/#/c/409732/
 * Marc (mkoderer) has offered to write this code. Shall we push for Ocata release?
 * Code review requests


 * December 5, 2016
 * Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
 * Meeting Time: plan to change to a later time starting in January: https://etherpad.openstack.org/p/barbican-irc-meeting-time
 * Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
 * Tempest Testing: https://etherpad.openstack.org/p/barbican_tempest_plugin
 * Code review requests:
 * https://review.openstack.org/#/c/397338
 * https://review.openstack.org/#/c/400370


 * November 28, 2016
 * Any suggestion on client refactor? https://review.openstack.org/#/c/403604/
 * Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
 * Meeting Time: can we move the weekly meeting earlier to be more Europe friendly?


 * November 14, 2016
 * CLI change patches (doug)
 * Returning entity_id property (doug)
 * Config option for certificate order api deprecation (doug)
 * Congrats to Arun Kant for promotion to barbian-core


 * November 7, 2016
 * Barcelona Summit Recap
 * Vault Plugin for Barbican (diazjf)
 * https://groups.google.com/forum/#!topic/vault-tool/BfSq4dP081s
 * Arun Kant for barbican-core


 * October 31, 2016
 * Barcelona Summit Recap
 * Vault Plugin for Barbican (diazjf)
 * https://groups.google.com/forum/#!topic/vault-tool/BfSq4dP081s


 * October 17, 2016
 * Barcelona Design Summit Topics
 * https://etherpad.openstack.org/p/barbican-ocata-design-summit
 * https://wiki.openstack.org/wiki/Design_Summit/Ocata/Etherpads#Barbican
 * https://www.openstack.org/summit/barcelona-2016/summit-schedule/global-search?t=Barbican
 * if you plan to attend, add your nic
 * add and vote for session topics
 * Launchpad Blueprint Cleanup
 * https://blueprints.launchpad.net/barbican
 * Reviews
 * In general, let's reduce our review backlog
 * Change authentication default to keystone: https://review.openstack.org/#/c/333173/
 * Open Discussion


 * October 10, 2016
 * Action Item Status
 * Barcelona Design Summit Topics
 * https://etherpad.openstack.org/p/barbican-ocata-design-summit
 * if you plan to attend, add your nic
 * add and vote for session topics
 * Next Midcycle, Pike Design Summit
 * Project Team Gathering
 * http://www.openstack.org/ptg
 * Atlanta, February 20-24
 * https://etherpad.openstack.org/p/barbican-pike-ptg
 * Reviews
 * LBaaS user context: https://bugs.launchpad.net/barbican/+bug/1592612
 * postgreSQL broken: https://review.openstack.org/#/c/383577
 * Open Discussion


 * October 3, 2016
 * Action Item Status
 * Newton Status
 * Barcelona Design Summit Topics
 * https://etherpad.openstack.org/p/barbican-ocata-design-summit
 * if you plan to attend, add your nic
 * add and vote for session topics
 * Next Midcycle, Pike Design Summit
 * Project Team Gathering
 * http://www.openstack.org/ptg
 * Atlanta, February 20-24
 * https://etherpad.openstack.org/p/barbican-pike-ptg
 * Open Discussion
 * Reviews


 * September 26, 2016
 * Newton RC1 Status
 * any newton-rc-potential bugs?
 * https://releases.openstack.org/newton/schedule.html
 * /master unit and function tests failing, gates broken
 * https://bugs.launchpad.net/barbican/+bug/1627809
 * due to update of pecan package
 * Midcycle Action Item Review
 * https://etherpad.openstack.org/p/barbican-newton-midcycle-topics
 * certificate api deprecation email (done)
 * state of barbican email (redrobot)
 * state of barbican blog postings (redrobot, alee, fernando, arun)
 * project integration how-to documentation (redrobot)
 * deployment guide location (redrobot)
 * implement listing secrets in a client (kfarr)
 * Barcelona Design Summit Topics
 * https://etherpad.openstack.org/p/barbican-ocata-design-summit
 * if you plan to attend, add your nic
 * add and vote for session topics
 * Reviews
 * https://review.openstack.org/#/c/353744


 * September 19, 2016
 * Newton RC1 Status
 * any newton-rc-potential bugs?
 * https://releases.openstack.org/newton/schedule.html
 * Midcycle Action Item Review
 * https://etherpad.openstack.org/p/barbican-newton-midcycle-topics
 * Barcelona Design Summit Topics
 * https://etherpad.openstack.org/p/barbican-ocata-design-summit
 * Ocata Blueprints
 * https://review.openstack.org/#/c/363945/
 * Container Install with Kolla
 * Need a good default config for production use with multinode
 * https://bugs.launchpad.net/kolla/+bug/1625340
 * https://bugs.launchpad.net/kolla/+bug/1625337
 * PTL Election
 * Reviews
 * https://review.openstack.org/#/c/372060


 * September 12, 2016
 * Reviews
 * https://review.openstack.org/#/c/251168/
 * RC1
 * https://releases.openstack.org/newton/schedule.html
 * PTL Election
 * Barcelona Design Summit Topics
 * https://etherpad.openstack.org/p/barbican-ocata-design-summit
 * reviews (multiple-backend reviews for newton release) - arunkant
 * Impl Part 1: https://review.openstack.org/#/c/348092/
 * Impl Part 2: https://review.openstack.org/#/c/354285/
 * Impl Part 3: https://review.openstack.org/#/c/357544/
 * Impl Part 4: https://review.openstack.org/#/c/358162/
 * Impl Part 5: https://review.openstack.org/#/c/360202/


 * August 27, 2016
 * Question around swift keymaster : Does it have barbican/castellan impl in newton release? (arunkant)
 * http://docs.openstack.org/developer/swift/overview_encryption.html
 * https://specs.openstack.org/openstack/swift-specs/specs/in_progress/at_rest_encryption.html#barbican-keymaster
 * exception for multiple backend code reviews for newton RC1 timeline (arunkant)
 * reviews (multiple-backend reviews for newton release) - arunkant
 * Api Doc: https://review.openstack.org/#/c/341803/
 * Impl Part 1: https://review.openstack.org/#/c/348092/
 * Impl Part 2: https://review.openstack.org/#/c/354285/
 * Impl Part 3: https://review.openstack.org/#/c/357544/
 * Impl Part 4: https://review.openstack.org/#/c/358162/
 * Impl Part 5: https://review.openstack.org/#/c/360202/


 * August 22, 2016
 * reviews (multiple-backend reviews for newton release)
 * Spec: https://review.openstack.org/#/c/263972/
 * Api Doc: https://review.openstack.org/#/c/341803/
 * Impl Part 1: https://review.openstack.org/#/c/348092/
 * Impl Part 2: https://review.openstack.org/#/c/354285/
 * Impl Part 3: https://review.openstack.org/#/c/357544/
 * Impl Part 4: https://review.openstack.org/#/c/358162/


 * August 15, 2016
 * reviews (core)
 * https://review.openstack.org/#/c/320100/
 * https://review.openstack.org/#/c/343986/


 * August 8, 2016
 * reviews (core)
 * https://review.openstack.org/#/c/320100/
 * https://review.openstack.org/#/c/343986/
 * Midcycle
 * Who's coming?


 * August 1, 2016
 * reviews (core)
 * https://review.openstack.org/#/c/320100/6
 * https://review.openstack.org/#/c/343986/
 * OpenStack Summit presentations(diazjf)
 * Let's start casting votes on Barbican related talks!!


 * July 11, 2016
 * Barbican MidCycle Meetup (diazjf)
 * It's official, it will be in IBM Austin site, August 15 - 17, Security will be August 17 - 19.
 * We need to plan fun things to do while everyone is here.
 * Add topics here: https://etherpad.openstack.org/p/barbican-security-midcycle-N
 * diazjf needs to get on the ball and send email to the mailing list!
 * Barbican Talks (diazjf)
 * Is anyone giving any talks?
 * Everyone needs to update their profiles, etc.


 * May 9, 2016
 * Secret User Metadata Quota questions (diazjf)
 * Add a new api, db, etc. for Secret Quotas or use Project Quotas?
 * https://review.openstack.org/#/c/313788/
 * Blueprints
 * Deployer Secret Metadata -> Ready for Review/Merge
 * https://review.openstack.org/#/c/301310/
 * HSM fail-safe
 * Will split up into 2 blueprints.
 * 1.) HSM retry. If connection to an HSM is lost, Barbican will try to connect again for a set amount of times after a set amount of time.
 * 2.) Pool of HSMs for fail-safe.
 * Will work on the HSM retry for N release. If HSM HA mode shows no improvement by N release will work on fail-safe for O release.
 * https://review.openstack.org/#/c/301997/


 * May 2, 2016
 * Deployer Metadata Spec ready for review (diazjf)
 * https://review.openstack.org/#/c/301310/
 * Software HSM in the gate (diazjf)
 * Currently working on an install guide for SoftHSMv2. It will help out for learning how to deploy Barbican in production.
 * https://review.openstack.org/#/c/311571/
 * http://docs-draft.openstack.org/71/311571/3/check/gate-barbican-docs/a530a29//doc/build/html/testing/soft_hsm.html
 * Barbican Stackalytics Broken?
 * Last update was April 23
 * http://stackalytics.com/?module=barbican-group


 * Apr 18, 2016
 * Candidate for backport to stable/mitaka and Liberty ?
 * https://review.openstack.org/#/c/304335/ (panatl) - Mitaka
 * https://review.openstack.org/#/c/303845/ (panatl) - Liberty
 * https://review.openstack.org/#/c/303648/ (arunkant)
 * Should creator be allowed to delete related barbican resources?
 * Cinder allows create/delete as long as user has a role on that project. https://github.com/openstack/cinder/blob/master/etc/cinder/policy.json#L9
 * Should we assign creator or admin role for cinder user to mange barbican resources ?
 * Security Related review, will need backport to Liberty and Mitaka once approved and merged
 * https://review.openstack.org/#/c/304788/ (panatl)
 * Security Concerns on having a default "kek" in simple_crypto.py, can we remove that and update the test cases accordingly?
 * General Review
 * https://review.openstack.org/#/c/306216/ (panatl)


 * Apr 11, 2016
 * Blueprints for Newton
 * Blueprint for Deployer Secret Metadata (diazjf)
 * https://review.openstack.org/#/c/301310/
 * Blueprint for HSM fail safe (diazjf)
 * https://review.openstack.org/#/c/301997/


 * Mar 28, 2016
 * RC2
 * https://bugs.launchpad.net/barbican/+bug/1562091
 * Secret User Metadata Quotas
 * Project Quotas vs. Secret Quotas
 * Bug: Incorrect Error Code when Passing Accept Header on a Secret GET
 * https://bugs.launchpad.net/barbican/+bug/1561701


 * Feb 29, 2016
 * Code Freeze, burr! (diazjf)
 * https://etherpad.openstack.org/p/barbican-m-spec-crs
 * Castellan releases (kfarr)


 * Feb 22, 2016
 * Chair: diazjf
 * Fernando Diaz added to core team (redrobot)
 * http://lists.openstack.org/pipermail/openstack-dev/2016-February/087159.html
 * Barbican CLI revamp (silos)
 * https://etherpad.openstack.org/p/barbican-client-v2


 * Feb 15, 2016
 * Go over keystone middleware in Credential Factory (diazjf)
 * https://review.openstack.org/#/c/273863/11/castellan/common/utils.py
 * pycryptodome (redrobot)
 * Fernando Diaz for Core (rerdrobot)
 * http://lists.openstack.org/pipermail/openstack-dev/2016-February/086581.html
 * Volunteer meeting chair for next week
 * Barbican client cliff bug (silos)
 * https://bugs.launchpad.net/python-barbicanclient/+bug/1504646


 * Feb 8, 2016
 * Public, internal barbican endpoints issue with single host setting in barbican config (arunkant)
 * https://github.com/openstack/barbican/blob/master/barbican/common/utils.py#L58
 * Setup a Barbican Guild meeting (diazjf)
 * KMIP Key Manager for Castellan (silos)
 * https://review.openstack.org/#/c/246546/
 * Required configuration options without a default value (rellerreller)
 * Is that allowed?
 * https://review.openstack.org/#/c/273863/


 * Feb 1, 2016
 * Discuss Castellan Credential Object Patches (diazjf)
 * https://review.openstack.org/#/c/270602/
 * Setup Google Hangout meetings(diazjf)
 * BYOK Castellan implementation
 * Barbican Puppet


 * Jan 25, 2016
 * checkout BYOK spec (diazjf)
 * https://review.openstack.org/#/c/271517/


 * Jan 18, 2016
 * discuss cron job database cleanup (edtubill)
 * talk about database constraints
 * set up hangout


 * Jan 4, 2016
 * Happy New Year!
 * Quickly go over updated Castellan multiple keystone auth blueprint
 * https://review.openstack.org/#/c/241068/
 * puppet modules for Barbican
 * https://review.openstack.org/#/c/258851/
 * review coming for puppet+ gunicorn + keystone
 * need help with apache/mod_wsgi