OpenStack - User contributions [en]

Meetings/KeystoneMeeting

2021-03-23T18:22:39Z

Bbobrov: fixed room for the meeting

Meetings/KeystoneMeeting

2021-03-23T18:07:47Z

Bbobrov: fixed meeting time according to https://opendev.org/opendev/irc-meetings/src/branch/master/meetings/keystone-team-meeting.yaml

Meetings/Barbican

2016-12-19T19:57:01Z

Bbobrov:

= Weekly Barbican Meeting =

The [https://wiki.openstack.org/wiki/Barbican Barbican] project team holds a weekly team meeting in <code><nowiki>#openstack-meeting-alt</nowiki></code>:

* Weekly on Mondays at [http://www.timeanddate.com/worldclock/fixedtime.html?iso=20130502T2000 2000 UTC]
* The blueprints that are used as a basis for the [https://launchpad.net/barbican Barbican project] can be found at https://blueprints.launchpad.net/barbican
* Notes for previous meetings can be found [http://eavesdrop.openstack.org/meetings/barbican here].
* Chair (to contact for more information): dave-mccowan (#openstack-barbican @ Freenode)

== Agenda ==
* December 19, 2016
** Code review requests https://review.openstack.org/#/c/403604/
** Storing Fernet keys in Barbican

* December 12, 2016
** Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
*** Milestone 2 is this week. Are we waiting on anything? dave-mccowan to cut release Tuesday if not.
** Meeting Time: plan to change to a later time starting in January: https://etherpad.openstack.org/p/barbican-irc-meeting-time
** PTG Meeting
*** Please RSVP and add agenda items
*** https://etherpad.openstack.org/p/ptg-barbican-pike
** Tempest Testing:
*** New repo for Tempest tests: https://review.openstack.org/#/q/project:openstack/barbican-tempest-plugin
*** Sign up to co-ordinate test development: https://etherpad.openstack.org/p/barbican_tempest_plugin
** Adding id fields to responses
*** Writing Tempest Tests has exposed another need for returning IDs, instead of only REFs, for Barbican Objects
*** Here's an example: https://review.openstack.org/#/c/409732/
*** Marc (mkoderer) has offered to write this code. Shall we push for Ocata release?
** Code review requests

* December 5, 2016
** Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
** Meeting Time: plan to change to a later time starting in January: https://etherpad.openstack.org/p/barbican-irc-meeting-time
** Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
** Tempest Testing: https://etherpad.openstack.org/p/barbican_tempest_plugin
** Code review requests:
*** https://review.openstack.org/#/c/397338
*** https://review.openstack.org/#/c/400370

* November 28, 2016
** Any suggestion on client refactor? https://review.openstack.org/#/c/403604/
** Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
** Meeting Time: can we move the weekly meeting earlier to be more Europe friendly?

* November 14, 2016
** CLI change patches (doug)
** Returning entity_id property (doug)
** Config option for certificate order api deprecation (doug)
** Congrats to Arun Kant for promotion to barbian-core

* November 7, 2016
** Barcelona Summit Recap
** Vault Plugin for Barbican (diazjf)
*** https://groups.google.com/forum/#!topic/vault-tool/BfSq4dP081s
** Arun Kant for barbican-core

* October 31, 2016
** Barcelona Summit Recap
** Vault Plugin for Barbican (diazjf)
*** https://groups.google.com/forum/#!topic/vault-tool/BfSq4dP081s

* October 17, 2016
** Barcelona Design Summit Topics
*** https://etherpad.openstack.org/p/barbican-ocata-design-summit
*** https://wiki.openstack.org/wiki/Design_Summit/Ocata/Etherpads#Barbican
*** https://www.openstack.org/summit/barcelona-2016/summit-schedule/global-search?t=Barbican
*** if you plan to attend, add your nic
*** add and vote for session topics
** Launchpad Blueprint Cleanup
*** https://blueprints.launchpad.net/barbican
** Reviews
*** In general, let's reduce our review backlog
*** Change authentication default to keystone: https://review.openstack.org/#/c/333173/
** Open Discussion

* October 10, 2016
** Action Item Status
** Barcelona Design Summit Topics
*** https://etherpad.openstack.org/p/barbican-ocata-design-summit
*** if you plan to attend, add your nic
*** add and vote for session topics
** Next Midcycle, Pike Design Summit
*** Project Team Gathering
*** http://www.openstack.org/ptg
*** Atlanta, February 20-24
*** https://etherpad.openstack.org/p/barbican-pike-ptg
** Reviews
*** LBaaS user context: https://bugs.launchpad.net/barbican/+bug/1592612
*** postgreSQL broken: https://review.openstack.org/#/c/383577
** Open Discussion

* October 3, 2016
** Action Item Status
** Newton Status
** Barcelona Design Summit Topics
*** https://etherpad.openstack.org/p/barbican-ocata-design-summit
*** if you plan to attend, add your nic
*** add and vote for session topics
** Next Midcycle, Pike Design Summit
*** Project Team Gathering
*** http://www.openstack.org/ptg
*** Atlanta, February 20-24
*** https://etherpad.openstack.org/p/barbican-pike-ptg
** Open Discussion
** Reviews

* September 26, 2016
** Newton RC1 Status
*** any newton-rc-potential bugs?
*** https://releases.openstack.org/newton/schedule.html
** /master unit and function tests failing, gates broken
*** https://bugs.launchpad.net/barbican/+bug/1627809
*** due to update of pecan package
** Midcycle Action Item Review
*** https://etherpad.openstack.org/p/barbican-newton-midcycle-topics
*** certificate api deprecation email (done)
*** state of barbican email (redrobot)
*** state of barbican blog postings (redrobot, alee, fernando, arun)
*** project integration how-to documentation (redrobot)
*** deployment guide location (redrobot)
*** implement listing secrets in a client (kfarr)
** Barcelona Design Summit Topics
*** https://etherpad.openstack.org/p/barbican-ocata-design-summit
*** if you plan to attend, add your nic
*** add and vote for session topics
** Reviews
*** https://review.openstack.org/#/c/353744

* September 19, 2016
** Newton RC1 Status
*** any newton-rc-potential bugs?
*** https://releases.openstack.org/newton/schedule.html
** Midcycle Action Item Review
*** https://etherpad.openstack.org/p/barbican-newton-midcycle-topics
** Barcelona Design Summit Topics
*** https://etherpad.openstack.org/p/barbican-ocata-design-summit
** Ocata Blueprints
*** https://review.openstack.org/#/c/363945/
** Container Install with Kolla
*** Need a good default config for production use with multinode
*** https://bugs.launchpad.net/kolla/+bug/1625340
*** https://bugs.launchpad.net/kolla/+bug/1625337
** PTL Election
** Reviews
*** https://review.openstack.org/#/c/372060

* September 12, 2016
** Reviews
*** https://review.openstack.org/#/c/251168/
** RC1
*** https://releases.openstack.org/newton/schedule.html
** PTL Election
** Barcelona Design Summit Topics
*** https://etherpad.openstack.org/p/barbican-ocata-design-summit
** reviews (multiple-backend reviews for newton release) - arunkant
*** Impl Part 1: https://review.openstack.org/#/c/348092/
*** Impl Part 2: https://review.openstack.org/#/c/354285/
*** Impl Part 3: https://review.openstack.org/#/c/357544/
*** Impl Part 4: https://review.openstack.org/#/c/358162/
*** Impl Part 5: https://review.openstack.org/#/c/360202/

* August 27, 2016
** Question around swift keymaster : Does it have barbican/castellan impl in newton release? (arunkant)
*** http://docs.openstack.org/developer/swift/overview_encryption.html
*** https://specs.openstack.org/openstack/swift-specs/specs/in_progress/at_rest_encryption.html#barbican-keymaster
** exception for multiple backend code reviews for newton RC1 timeline (arunkant)
** reviews (multiple-backend reviews for newton release) - arunkant
*** Api Doc: https://review.openstack.org/#/c/341803/
*** Impl Part 1: https://review.openstack.org/#/c/348092/
*** Impl Part 2: https://review.openstack.org/#/c/354285/
*** Impl Part 3: https://review.openstack.org/#/c/357544/
*** Impl Part 4: https://review.openstack.org/#/c/358162/
*** Impl Part 5: https://review.openstack.org/#/c/360202/

* August 22, 2016
** reviews (multiple-backend reviews for newton release)
*** Spec: https://review.openstack.org/#/c/263972/
*** Api Doc: https://review.openstack.org/#/c/341803/
*** Impl Part 1: https://review.openstack.org/#/c/348092/
*** Impl Part 2: https://review.openstack.org/#/c/354285/
*** Impl Part 3: https://review.openstack.org/#/c/357544/
*** Impl Part 4: https://review.openstack.org/#/c/358162/

* August 15, 2016
** reviews (core)
*** https://review.openstack.org/#/c/320100/
*** https://review.openstack.org/#/c/343986/

* August 8, 2016
** reviews (core)
*** https://review.openstack.org/#/c/320100/
*** https://review.openstack.org/#/c/343986/
** Midcycle
*** Who's coming?

* August 1, 2016
** reviews (core)
*** https://review.openstack.org/#/c/320100/6
*** https://review.openstack.org/#/c/343986/
** OpenStack Summit presentations(diazjf)
*** Let's start casting votes on Barbican related talks!!

* July 11, 2016
** Barbican MidCycle Meetup (diazjf)
*** It's official, it will be in IBM Austin site, August 15 - 17, Security will be August 17 - 19.
*** We need to plan fun things to do while everyone is here.
*** Add topics here: https://etherpad.openstack.org/p/barbican-security-midcycle-N
*** diazjf needs to get on the ball and send email to the mailing list!
** Barbican Talks (diazjf)
*** Is anyone giving any talks?
*** Everyone needs to update their profiles, etc.

* May 9, 2016
** Secret User Metadata Quota questions (diazjf)
*** Add a new api, db, etc. for Secret Quotas or use Project Quotas?
*** https://review.openstack.org/#/c/313788/
** Blueprints
*** Deployer Secret Metadata -> Ready for Review/Merge
**** https://review.openstack.org/#/c/301310/
*** HSM fail-safe
**** Will split up into 2 blueprints.
***** 1.) HSM retry. If connection to an HSM is lost, Barbican will try to connect again for a set amount of times after a set amount of time.
***** 2.) Pool of HSMs for fail-safe.
**** Will work on the HSM retry for N release. If HSM HA mode shows no improvement by N release will work on fail-safe for O release.
**** https://review.openstack.org/#/c/301997/

* May 2, 2016
** Deployer Metadata Spec ready for review (diazjf)
*** https://review.openstack.org/#/c/301310/
** Software HSM in the gate (diazjf)
*** Currently working on an install guide for SoftHSMv2. It will help out for learning how to deploy Barbican in production.
**** https://review.openstack.org/#/c/311571/
**** http://docs-draft.openstack.org/71/311571/3/check/gate-barbican-docs/a530a29//doc/build/html/testing/soft_hsm.html
** Barbican Stackalytics Broken?
*** Last update was April 23
**** http://stackalytics.com/?module=barbican-group

* Apr 18, 2016
** Candidate for backport to stable/mitaka and Liberty ?
*** https://review.openstack.org/#/c/304335/ (panatl) - Mitaka
*** https://review.openstack.org/#/c/303845/ (panatl) - Liberty
*** https://review.openstack.org/#/c/303648/ (arunkant)
** Should creator be allowed to delete related barbican resources?
*** Cinder allows create/delete as long as user has a role on that project. https://github.com/openstack/cinder/blob/master/etc/cinder/policy.json#L9
**** Should we assign creator or admin role for cinder user to mange barbican resources ?
** Security Related review, will need backport to Liberty and Mitaka once approved and merged
*** https://review.openstack.org/#/c/304788/ (panatl)
*** Security Concerns on having a default "kek" in simple_crypto.py, can we remove that and update the test cases accordingly?
** General Review
*** https://review.openstack.org/#/c/306216/ (panatl)

* Apr 11, 2016
** Blueprints for Newton
*** Blueprint for Deployer Secret Metadata (diazjf)
**** https://review.openstack.org/#/c/301310/
*** Blueprint for HSM fail safe (diazjf)
**** https://review.openstack.org/#/c/301997/

* Mar 28, 2016
** RC2
*** https://bugs.launchpad.net/barbican/+bug/1562091
** Secret User Metadata Quotas
*** Project Quotas vs. Secret Quotas
** Bug: Incorrect Error Code when Passing Accept Header on a Secret GET
*** https://bugs.launchpad.net/barbican/+bug/1561701

* Feb 29, 2016
** Code Freeze, burr! (diazjf)
*** https://etherpad.openstack.org/p/barbican-m-spec-crs
** Castellan releases (kfarr)

* Feb 22, 2016
** Chair: diazjf
** Fernando Diaz added to core team (redrobot)
*** http://lists.openstack.org/pipermail/openstack-dev/2016-February/087159.html
** Barbican CLI revamp (silos)
***https://etherpad.openstack.org/p/barbican-client-v2

* Feb 15, 2016
** Go over keystone middleware in Credential Factory (diazjf)
*** https://review.openstack.org/#/c/273863/11/castellan/common/utils.py
** pycryptodome (redrobot)
** Fernando Diaz for Core (rerdrobot)
*** http://lists.openstack.org/pipermail/openstack-dev/2016-February/086581.html
** Volunteer meeting chair for next week
** Barbican client cliff bug (silos)
***https://bugs.launchpad.net/python-barbicanclient/+bug/1504646

* Feb 8, 2016
** Public, internal barbican endpoints issue with single host setting in barbican config (arunkant)
*** https://github.com/openstack/barbican/blob/master/barbican/common/utils.py#L58
** Setup a Barbican Guild meeting (diazjf)
** KMIP Key Manager for Castellan (silos)
***https://review.openstack.org/#/c/246546/
** Required configuration options without a default value (rellerreller)
*** Is that allowed?
*** https://review.openstack.org/#/c/273863/

* Feb 1, 2016
** Discuss Castellan Credential Object Patches (diazjf)
*** https://review.openstack.org/#/c/270602/
** Setup Google Hangout meetings(diazjf)
*** BYOK Castellan implementation
*** Barbican Puppet

* Jan 25, 2016
** checkout BYOK spec (diazjf)
***https://review.openstack.org/#/c/271517/

* Jan 18, 2016
** discuss cron job database cleanup (edtubill)
*** talk about database constraints
*** set up hangout

* Jan 4, 2016
** Happy New Year!
** Quickly go over updated Castellan multiple keystone auth blueprint
*** https://review.openstack.org/#/c/241068/
** puppet modules for Barbican
*** https://review.openstack.org/#/c/258851/
*** review coming for puppet+ gunicorn + keystone
*** need help with apache/mod_wsgi

* Dec 21, 2015
** Questions about steps to integrate Barbican with DevStack (kfarr)

* Dec 14, 2015
** Barbican SAML authentication (diazjf)
*** https://review.openstack.org/#/c/241068/
** Add PUT support for generic container types (ting wang)
*** https://review.openstack.org/#/c/207249/
** Add barbican-manage command (jhfeng)
*** https://review.openstack.org/#/c/253719/

* Nov 30, 2015
** chair: rellerreller
** Mitaka-1 milestone
*** kfarr will be handling the release this week
** Castellan logging options (elmiko)
** Castellan integration testing (elmiko)

* Nov 23, 2015
** chair: rellerreller
** Castellan improvements (elmiko)
*** auto-discovery of barbican endpoint
*** auth detection from context object

* Nov 16, 2015
** Barbican Federation Use-Cases Detailed Overview
** Castellan Authentication compatibility for Swift
*** https://etherpad.openstack.org/p/swifjt-keymaster-with-castellan
** Barbican garbage collector
** Creating a castellan-specs github (silos)

* Nov 9, 2015
** Summit Recap
** redrobot is getting married at the end of November! :D
***We'll need a substitute meeting chair for the Nov 23 and 30.
** Federation Use Cases (edtubill, diazjf, silos)

* Nov 2, 2015
** Cancelled due to Summit

* October 26, 2015
** Cancelled due to Summit

* October 19, 2015
** chair: dave-mccowan
** Review design summit etherpad votes.

* October 12, 2015
** Cross project liasions
** py34 update (dave)

* October 5, 2015
** Liberty RC2
** Mitaka Blueprints
** Tokyo Summit

* September 28, 2015
** (woodster) What about changing our gates to populate database with Alembic migrations, instead of from SQLAlchemy models directly?

* September 21, 2015
** (arunkant) Barbicanclient failures on neutron test gate: http://logs.openstack.org/43/208343/15/check/gate-tempest-dsvm-neutron-src-python-barbicanclient/9193018/

* September 14, 2015
** Review Dave's core nomination: http://lists.openstack.org/pipermail/openstack-dev/2015-September/073866.html
** Federated Barbican Update (silos)

* September 7, 2015
** No meeting. Happy Labor day to contributors in the US.

* August 31, 2015
** Test framework - We're currently using both nosetest and testtools. Can we consolidate to one of them?
** Merge requirements continued
** Quotas Blueprint targeting Liberty-3. Update.
** /v2/orders
** Castellan: https://review.openstack.org/#/c/208569/ Last patch needed before a release (kfarr)
** (woodster) Don't forget about the ACL blueprints, esp. this one: https://review.openstack.org/#/c/208343

* August 24, 2015
** Merge Requirements - I think it's time we start merging after two +2 reviews by a core reviewer. (redrobot)
** Tokyo Session Requirements (red robot)

* August 17, 2015
** Adding certificate_manager namespace to Castellan (rm_work)
** Federated Barbican (silos)
** Defect/issue template - https://etherpad.openstack.org/p/barbican-bug-report-template (hockeynut)
** super-user rule in policy.json (dave-mccowan)
** quotas blueprint update (dave-mccowan)

* August 3, 2015
** Multiple KMIP Blueprint - https://review.openstack.org/#/c/194298/ (silos)
** Castellan merge requests (kfarr)

* July 27, 2015
** V2 and Orders (jmvrbanac)
** stable/kilo tests are failing (jaosorior)
** Barbican Openstack CLI plugin (jaosorior)
** Castellan
*** release schedules (elmiko)
*** patches need merging

* July 20, 2015
** Magnum integration
** Resource Quotas
*** Design Discussion: https://review.openstack.org/203678
*** Code review for first commit (config, controller, validator) https://review.openstack.org/198764
** Brief discussion regarding default policy settings and ability of secret creators to manage their secrets (https://bugs.launchpad.net/barbican/+bug/1475962)

* July 13, 2015
** Magnum integration
** CAs blueprint
*** http://specs.openstack.org/openstack/barbican-specs/specs/liberty/add-cas.html
** copy constructor for secrets and containers, report back from api-wg discussions (elmiko)
*** https://review.openstack.org/#/c/127823/

* July 6, 2015
** Update on Quota Support blueprint (dave-mccowan)
** ACL client implementation (chellygel)
** Let's discuss the fifth 'acl-user' role needed for Barbican:
*** Ugh, I noticed we did discuss this on May 4th with an etherpad [https://etherpad.openstack.org/p/barbican-acl-read-only-user-discussion here].
*** However, I think we got off track talking about lists of secrets...
*** So I think the outcome of this discussion should just be a blueprint or paper-cut to add this new role and associated testing for it. I favor blueprint as we could also see a sample of the API doc mods needed.

* June 29, 2015
** Magnum integration
** Why are we still testing the python-barbicanclient with py26
** Dogtag gate as voting

* June 8, 2015
** Mid-Cycle RSVP (red robot)

* June 1, 2015
** Vancouver Summit Recap (redrobot)
** Mid-Cycle (red robot)

* May 11, 2015
** (arunkant) Proposed ACL API changes as per [https://review.openstack.org/#/c/178479/5/doc/source/api/quickstart/acls.rst,cm ACL docs review] comments on line #237
** (dave-mccowan) Heads-up: adding run-as-user support to functional tests. You local keystone deployment will need new users and roles installed to run functional tests.

* May 4, 2015
** (woodster) Let's [https://etherpad.openstack.org/p/barbican-acl-read-only-user-discussion discuss and fine-tune the 'read-only' ACL user'] a little bit

* April 20, 2015
** (redrobot) Kilo-RC1
** (woodster) What approved or drafting blueprints do we want to bring over to Liberty?
** (redrobot) Bug: https://bugs.launchpad.net/barbican/+bug/1446266

* April 13, 2015
** (redrobot) Vancouver Design Summit. See this Liberty design session topics wiki page [https://etherpad.openstack.org/p/barbican-L-design-sessions here].
** (redrobot) Additional role for per-secret ACL. Current policy is available [https://github.com/openstack/barbican/blob/master/etc/barbican/policy.json here].

* April 6, 2015
** (woodster) Barbican Python client and expected sensitivity to additional response key/values returned. See notes on [https://review.openstack.org/#/c/169481 this CR]
** (redrobot) Juno to Kilo DB migration
** (redrobot) Content-Type and payload_content_type combinations

* March 30, 2015
** Flagging things for deprecation. (jvrbanac)
** Logging in Barbican (jvrbanac)
** Castellan Initial Release (redrobot)

* March 23, 2015
** Review comment around storing acl users as comma separated values vs separate table. [https://review.openstack.org/#/c/164334/9/barbican/model/models.py,cm Review Link] (arunkant)
** How to integrate Castellan with Openstack service (arunkant)
*** Related: Castellan release and how to update Castellan resources, i.e. bug tracker (kfarr)

* March 16, 2015
** Functional testing
** Assert parameter order

* March 2, 2015
** 100% code coverage options: break packages into 'paper cut' bugs maybe?

* February 23, 2015
** Mid-cycle recap
*** https://etherpad.openstack.org/p/barbican-kilo-sprint
*** Ade: Wrap profiles around CMC to pass to CA to track product type
*** Ade: Additional CR for Identify CA migration scripts (2 others in review)
*** Ade: BarbicanMetadata table
*** Dave: Certificate Order metadata change API parameter from container ref -> secret ref validation.
*** tsv: Quotas BP
*** woodster: reach out to Jarret about hard deletes for compliance concerns.
*** woodster: Order sub-status
*** New gates
** Road to Liberty summit
*** https://etherpad.openstack.org/p/barbican-L-design-sessions

* February 9, 2015
** Update on Swift integration with KeyManager, if/when moving to Castellan
** A note about Barbican packaging effort underway
** L-Summit space requirements

* February 2, 2015
** Kilo 2
** [https://review.openstack.org/#/c/132091 Quota Support blueprint]:
*** Open question: Admin endpoint (9312) vs service admin thats allowed to set quotas on any project it wishes to?
** Castellan project
*** Which openstack services are driving? What is the timeline for Castellan availability and services started using it.
** Just a note: L design session etherpad is available [https://etherpad.openstack.org/p/barbican-L-design-sessions here].
** Migration scripts are not being ran (according to the bugs that I've found) up to which revision should we keep(support)? [jaosorior]
*** https://bugs.launchpad.net/barbican/+bug/1376902 [jaosorior]
*** This bug also relates to plugin validation which has been [https://etherpad.openstack.org/p/barbican-validation-options discussed in the past] but not otherwise acted upon.
** A note about Barbican packaging effort underway

* January 26, 2015
** KMIP MKEK plugin spec https://review.openstack.org/#/c/148948 [tkelsey]
*** Discussion over the creation of a new plugin vs updating KMIPSecretStore
*** Discussion over Incompatible pluggin versioning (if we decide not to make a second plugin)
** [https://review.openstack.org/#/c/145073 Content types blueprint]:
*** Seems very close...what questions still need to be answered?
** [https://review.openstack.org/#/c/127353 Per Secret Policy blueprint]:
*** Open question: Should whitelisted users be able to decrypt secrets even if they don't have proper Barbican roles?

* January 19, 2015
** Barbican Mid-Cycle
*** https://etherpad.openstack.org/p/barbican-kilo-sprint
** Vancouver Summit
* January 12, 2015
** Castellan progress [redrobot/rm_work]
** KMIPSecretStore HSM connection certificates [tkelsey]
*** Request for reviews on https://review.openstack.org/#/c/135217/
*** Chance to answer any questions
** Blueprints:
*** Quota support: Should we restrict scope? ...So no driver support, no class support?
*** Per-secret RBAC: Whitelist only vs logical expressions? GET list by project-ID or by resources I can GET?

* January 5, 2015
** Kilo 1 Released [redrobot]
** Quota BP [redrobot]
** Insights on https://bugs.launchpad.net/barbican/+bug/1376469 [jaosorior]
** Status of essential blueprints

* December 15, 2014
** Barbican Mid-Cycle [redrobot]

* December 8, 2014
** Integration Docs [redrobot]
** Bugs [redrobot]
** Castellan [redrobot]
** Content types [rellerreller]
*** Any feedback on etherpad page, https://etherpad.openstack.org/p/barbican-formats-discussion?

* December 1, 2014
** Consider video conference to discuss and hopefully land our many outstanding blueprints

* November 24, 2014
** Validation for Typed Container data (Certificates, etc) [rm_work]
** Castellan scope: include CertMgr / ContainerMgr support? [rm_work]
** Content type

* November 17, 2014
** RFC 7030
*** See Ade's notes - https://etherpad.openstack.org/p/thoughts_on_certs
** New Key Manager library (Castellan)

* November 10, 2014
** New Core Reviewers
** RFC 7030

* October 27, 2014
** Kilo Design Sessions
** Atalla ESKM Plugin
** Barbican T-Shirts

* October 6, 2014
** Kilo development is open
*** https://review.openstack.org/#/c/125678/

* Sep 29, 2014
** Juno RC1
*** CR https://review.openstack.org/#/c/110817/ review and merge before Juno final?
** Kilo Design Sessions

* Sep 22, 2014
** (woodster) Added 'How should we handle content type for secrets' block to [https://etherpad.openstack.org/p/barbican-kilo-design-sessions Kilo design discussion etherpad].

* Sep 15, 2014
** jenkins.cloudkeep.io
** Metadata Storage: https://etherpad.openstack.org/p/barbican_metadata
** API Stability
** Documentation sync up with new API
** (woodster) [https://etherpad.openstack.org/p/barbican-juno-final-roadmap Juno roadmap addition]: Refactor Barbican python client to use new Keystone auth components
** (woodster) Various additions made to the [https://etherpad.openstack.org/p/barbican-kilo-design-sessions Kilo design etherpad].
** Need someone to look at https://review.openstack.org/#/c/118697/ comment from Nathan. Based on vote I made this change.

* Sep 8, 2014
** Kilo Design Sessions
** Juno roadmap discussions: https://etherpad.openstack.org/p/barbican-juno-final-roadmap

* Sep 1, 2014
** Kilo Design Sessions

* Aug 25, 2014
** CR Sizes (jvrbanac)
** String interpolation in debug logging (redrobot, rellerreller)
** Python 3 support (rellerrellera)

* Aug 18, 2014
** Juno Home Stretch (woodsier)

* Aug 11, 2014
** [[Barbican/Integration|Barbican Integration]]
** Barbican as a Keystone service

* Aug 4, 2014
** #openstack-barbican on eavesdrop

* July 28, 2014
** Add more type in order post (https://review.openstack.org/#/c/87405/) waiting for review.
** Kilo conference presentation submissions

* July 21, 2014
** (redrobot) Expiring Launchpad BPs after 5 days

* July 14, 2014
** barbican-core nominations vote count
** can we plan better to make such change https://review.openstack.org/#/c/103431?
** python-barbicanclient release schedule

* June 30, 2014
** Mid-cycle meetup next week
** Keystone events blueprint
** (atiwari) https://review.openstack.org/#/c/98174/ (Do we need to worry about backward compatibility?)

* June 23, 2014
** Mid-cycle meetup in two weeks.

* June 16, 2014
** Mid-cycle meetup

* June 9, 2014
** barbican-specs repo
** juno-1 release coming up
** mid-cycle meetup
** https://review.openstack.org/#/c/98473 (is it merge ready? kind of blocker)
** https://review.openstack.org/#/c/97844/ (is it merge ready?)
** https://review.openstack.org/#/c/98174 (is it merge ready?)
** Testing code pattern
** Any progress on eventing system (atiwari).
** Can tenant_id removal from uri deserve v2 api version(atiwari).

* June 2, 2014
** Hacking enabled on pep8 gate
** New barbican-specs repository
** Order model changes for https://blueprints.launchpad.net/barbican/+spec/api-orders-add-more-types
*** New field "meta of type JsonBlob" and "container_id of type String"
** Meera is adding Barbican tempest tests https://blueprints.launchpad.net/tempest/+spec/add-basic-tests-for-barbican
*** Comments, Suggestions or disagreement?

* May 5, 2014
** https://review.openstack.org/#/c/82189/ (is it merge ready?)
** https://review.openstack.org/#/c/88463/ (review required- API change proposal Key generation)
** https://review.openstack.org/#/c/81310/ (review required- Adding target support for policy enforcement.)
** https://review.openstack.org/#/c/90613/ (review required- API change proposal certificate generation order)
**The Advanced Services Common Requirements team wanted to discuss the current status of the Barbican and its readiness to utilize the Barbican for Certificate/key generation and for storing the tenant's certificates sercurely in the system.
**Can we get an update or talk about this in today's meeting.
*** https://blueprints.launchpad.net/barbican/+spec/add-wrapping-key-to-barbican-server

* April 28, 2014
** Action items:
*** all: Review/contribute to Malini's etherpad: https://etherpad.openstack.org/p/juno-key-manager-chapter
*** all: Review atiwari's CR to modify the crypto plugin interface: https://review.openstack.org/#/c/82189/
*** core: Consider beefing up barbican docs related to current crypto plugin operation, as prep for the OpenStack summit

* April 7, 2014
** malini - update on Secuirty Guide documentation
** alee_/atiwari - Crypto plugin changes
** arunkant - Target support in barbican policy enforcement [https://blueprints.launchpad.net/barbican/+spec/policy-target-support]
** jraim - Support for debug mode start in barbican [https://review.openstack.org/#/c/82265/], can be merged?

== Meeting organizers ==

* Publish the agenda 24h in advance
* Mail the agenda to the list and invite participants
* Ask each person responsible for an action from the previous meeting to prepare a line of the form, for each action item: . #info nickname description of the action link to the diff / mailing list thread etc. describing the implementation of the action
* Use http://meetbot.debian.net/Manual.html to get an automatic summary
* Prepare an outline for the meeting to speed things up (see http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-05-10-16.00.log.html for an actual example)
* Record decisions and commitments; review in the next meeting

Meetings/Barbican

2016-12-19T19:55:54Z

Bbobrov: /* Agenda */

= Weekly Barbican Meeting =

The [https://wiki.openstack.org/wiki/Barbican Barbican] project team holds a weekly team meeting in <code><nowiki>#openstack-meeting-alt</nowiki></code>:

* Weekly on Mondays at [http://www.timeanddate.com/worldclock/fixedtime.html?iso=20130502T2000 2000 UTC]
* The blueprints that are used as a basis for the [https://launchpad.net/barbican Barbican project] can be found at https://blueprints.launchpad.net/barbican
* Notes for previous meetings can be found [http://eavesdrop.openstack.org/meetings/barbican here].
* Chair (to contact for more information): dave-mccowan (#openstack-barbican @ Freenode)

== Agenda ==
* December 19, 2016
** Code review requests https://review.openstack.org/#/c/403604/

* December 12, 2016
** Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
*** Milestone 2 is this week. Are we waiting on anything? dave-mccowan to cut release Tuesday if not.
** Meeting Time: plan to change to a later time starting in January: https://etherpad.openstack.org/p/barbican-irc-meeting-time
** PTG Meeting
*** Please RSVP and add agenda items
*** https://etherpad.openstack.org/p/ptg-barbican-pike
** Tempest Testing:
*** New repo for Tempest tests: https://review.openstack.org/#/q/project:openstack/barbican-tempest-plugin
*** Sign up to co-ordinate test development: https://etherpad.openstack.org/p/barbican_tempest_plugin
** Adding id fields to responses
*** Writing Tempest Tests has exposed another need for returning IDs, instead of only REFs, for Barbican Objects
*** Here's an example: https://review.openstack.org/#/c/409732/
*** Marc (mkoderer) has offered to write this code. Shall we push for Ocata release?
** Code review requests
** Storing Fernet keys in Barbican

* December 5, 2016
** Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
** Meeting Time: plan to change to a later time starting in January: https://etherpad.openstack.org/p/barbican-irc-meeting-time
** Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
** Tempest Testing: https://etherpad.openstack.org/p/barbican_tempest_plugin
** Code review requests:
*** https://review.openstack.org/#/c/397338
*** https://review.openstack.org/#/c/400370

* November 28, 2016
** Any suggestion on client refactor? https://review.openstack.org/#/c/403604/
** Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
** Meeting Time: can we move the weekly meeting earlier to be more Europe friendly?

* November 14, 2016
** CLI change patches (doug)
** Returning entity_id property (doug)
** Config option for certificate order api deprecation (doug)
** Congrats to Arun Kant for promotion to barbian-core

* November 7, 2016
** Barcelona Summit Recap
** Vault Plugin for Barbican (diazjf)
*** https://groups.google.com/forum/#!topic/vault-tool/BfSq4dP081s
** Arun Kant for barbican-core

* October 31, 2016
** Barcelona Summit Recap
** Vault Plugin for Barbican (diazjf)
*** https://groups.google.com/forum/#!topic/vault-tool/BfSq4dP081s

* October 17, 2016
** Barcelona Design Summit Topics
*** https://etherpad.openstack.org/p/barbican-ocata-design-summit
*** https://wiki.openstack.org/wiki/Design_Summit/Ocata/Etherpads#Barbican
*** https://www.openstack.org/summit/barcelona-2016/summit-schedule/global-search?t=Barbican
*** if you plan to attend, add your nic
*** add and vote for session topics
** Launchpad Blueprint Cleanup
*** https://blueprints.launchpad.net/barbican
** Reviews
*** In general, let's reduce our review backlog
*** Change authentication default to keystone: https://review.openstack.org/#/c/333173/
** Open Discussion

* October 10, 2016
** Action Item Status
** Barcelona Design Summit Topics
*** https://etherpad.openstack.org/p/barbican-ocata-design-summit
*** if you plan to attend, add your nic
*** add and vote for session topics
** Next Midcycle, Pike Design Summit
*** Project Team Gathering
*** http://www.openstack.org/ptg
*** Atlanta, February 20-24
*** https://etherpad.openstack.org/p/barbican-pike-ptg
** Reviews
*** LBaaS user context: https://bugs.launchpad.net/barbican/+bug/1592612
*** postgreSQL broken: https://review.openstack.org/#/c/383577
** Open Discussion

* October 3, 2016
** Action Item Status
** Newton Status
** Barcelona Design Summit Topics
*** https://etherpad.openstack.org/p/barbican-ocata-design-summit
*** if you plan to attend, add your nic
*** add and vote for session topics
** Next Midcycle, Pike Design Summit
*** Project Team Gathering
*** http://www.openstack.org/ptg
*** Atlanta, February 20-24
*** https://etherpad.openstack.org/p/barbican-pike-ptg
** Open Discussion
** Reviews

* September 26, 2016
** Newton RC1 Status
*** any newton-rc-potential bugs?
*** https://releases.openstack.org/newton/schedule.html
** /master unit and function tests failing, gates broken
*** https://bugs.launchpad.net/barbican/+bug/1627809
*** due to update of pecan package
** Midcycle Action Item Review
*** https://etherpad.openstack.org/p/barbican-newton-midcycle-topics
*** certificate api deprecation email (done)
*** state of barbican email (redrobot)
*** state of barbican blog postings (redrobot, alee, fernando, arun)
*** project integration how-to documentation (redrobot)
*** deployment guide location (redrobot)
*** implement listing secrets in a client (kfarr)
** Barcelona Design Summit Topics
*** https://etherpad.openstack.org/p/barbican-ocata-design-summit
*** if you plan to attend, add your nic
*** add and vote for session topics
** Reviews
*** https://review.openstack.org/#/c/353744

* September 19, 2016
** Newton RC1 Status
*** any newton-rc-potential bugs?
*** https://releases.openstack.org/newton/schedule.html
** Midcycle Action Item Review
*** https://etherpad.openstack.org/p/barbican-newton-midcycle-topics
** Barcelona Design Summit Topics
*** https://etherpad.openstack.org/p/barbican-ocata-design-summit
** Ocata Blueprints
*** https://review.openstack.org/#/c/363945/
** Container Install with Kolla
*** Need a good default config for production use with multinode
*** https://bugs.launchpad.net/kolla/+bug/1625340
*** https://bugs.launchpad.net/kolla/+bug/1625337
** PTL Election
** Reviews
*** https://review.openstack.org/#/c/372060

* September 12, 2016
** Reviews
*** https://review.openstack.org/#/c/251168/
** RC1
*** https://releases.openstack.org/newton/schedule.html
** PTL Election
** Barcelona Design Summit Topics
*** https://etherpad.openstack.org/p/barbican-ocata-design-summit
** reviews (multiple-backend reviews for newton release) - arunkant
*** Impl Part 1: https://review.openstack.org/#/c/348092/
*** Impl Part 2: https://review.openstack.org/#/c/354285/
*** Impl Part 3: https://review.openstack.org/#/c/357544/
*** Impl Part 4: https://review.openstack.org/#/c/358162/
*** Impl Part 5: https://review.openstack.org/#/c/360202/

* August 27, 2016
** Question around swift keymaster : Does it have barbican/castellan impl in newton release? (arunkant)
*** http://docs.openstack.org/developer/swift/overview_encryption.html
*** https://specs.openstack.org/openstack/swift-specs/specs/in_progress/at_rest_encryption.html#barbican-keymaster
** exception for multiple backend code reviews for newton RC1 timeline (arunkant)
** reviews (multiple-backend reviews for newton release) - arunkant
*** Api Doc: https://review.openstack.org/#/c/341803/
*** Impl Part 1: https://review.openstack.org/#/c/348092/
*** Impl Part 2: https://review.openstack.org/#/c/354285/
*** Impl Part 3: https://review.openstack.org/#/c/357544/
*** Impl Part 4: https://review.openstack.org/#/c/358162/
*** Impl Part 5: https://review.openstack.org/#/c/360202/

* August 22, 2016
** reviews (multiple-backend reviews for newton release)
*** Spec: https://review.openstack.org/#/c/263972/
*** Api Doc: https://review.openstack.org/#/c/341803/
*** Impl Part 1: https://review.openstack.org/#/c/348092/
*** Impl Part 2: https://review.openstack.org/#/c/354285/
*** Impl Part 3: https://review.openstack.org/#/c/357544/
*** Impl Part 4: https://review.openstack.org/#/c/358162/

* August 15, 2016
** reviews (core)
*** https://review.openstack.org/#/c/320100/
*** https://review.openstack.org/#/c/343986/

* August 8, 2016
** reviews (core)
*** https://review.openstack.org/#/c/320100/
*** https://review.openstack.org/#/c/343986/
** Midcycle
*** Who's coming?

* August 1, 2016
** reviews (core)
*** https://review.openstack.org/#/c/320100/6
*** https://review.openstack.org/#/c/343986/
** OpenStack Summit presentations(diazjf)
*** Let's start casting votes on Barbican related talks!!

* July 11, 2016
** Barbican MidCycle Meetup (diazjf)
*** It's official, it will be in IBM Austin site, August 15 - 17, Security will be August 17 - 19.
*** We need to plan fun things to do while everyone is here.
*** Add topics here: https://etherpad.openstack.org/p/barbican-security-midcycle-N
*** diazjf needs to get on the ball and send email to the mailing list!
** Barbican Talks (diazjf)
*** Is anyone giving any talks?
*** Everyone needs to update their profiles, etc.

* May 9, 2016
** Secret User Metadata Quota questions (diazjf)
*** Add a new api, db, etc. for Secret Quotas or use Project Quotas?
*** https://review.openstack.org/#/c/313788/
** Blueprints
*** Deployer Secret Metadata -> Ready for Review/Merge
**** https://review.openstack.org/#/c/301310/
*** HSM fail-safe
**** Will split up into 2 blueprints.
***** 1.) HSM retry. If connection to an HSM is lost, Barbican will try to connect again for a set amount of times after a set amount of time.
***** 2.) Pool of HSMs for fail-safe.
**** Will work on the HSM retry for N release. If HSM HA mode shows no improvement by N release will work on fail-safe for O release.
**** https://review.openstack.org/#/c/301997/

* May 2, 2016
** Deployer Metadata Spec ready for review (diazjf)
*** https://review.openstack.org/#/c/301310/
** Software HSM in the gate (diazjf)
*** Currently working on an install guide for SoftHSMv2. It will help out for learning how to deploy Barbican in production.
**** https://review.openstack.org/#/c/311571/
**** http://docs-draft.openstack.org/71/311571/3/check/gate-barbican-docs/a530a29//doc/build/html/testing/soft_hsm.html
** Barbican Stackalytics Broken?
*** Last update was April 23
**** http://stackalytics.com/?module=barbican-group

* Apr 18, 2016
** Candidate for backport to stable/mitaka and Liberty ?
*** https://review.openstack.org/#/c/304335/ (panatl) - Mitaka
*** https://review.openstack.org/#/c/303845/ (panatl) - Liberty
*** https://review.openstack.org/#/c/303648/ (arunkant)
** Should creator be allowed to delete related barbican resources?
*** Cinder allows create/delete as long as user has a role on that project. https://github.com/openstack/cinder/blob/master/etc/cinder/policy.json#L9
**** Should we assign creator or admin role for cinder user to mange barbican resources ?
** Security Related review, will need backport to Liberty and Mitaka once approved and merged
*** https://review.openstack.org/#/c/304788/ (panatl)
*** Security Concerns on having a default "kek" in simple_crypto.py, can we remove that and update the test cases accordingly?
** General Review
*** https://review.openstack.org/#/c/306216/ (panatl)

* Apr 11, 2016
** Blueprints for Newton
*** Blueprint for Deployer Secret Metadata (diazjf)
**** https://review.openstack.org/#/c/301310/
*** Blueprint for HSM fail safe (diazjf)
**** https://review.openstack.org/#/c/301997/

* Mar 28, 2016
** RC2
*** https://bugs.launchpad.net/barbican/+bug/1562091
** Secret User Metadata Quotas
*** Project Quotas vs. Secret Quotas
** Bug: Incorrect Error Code when Passing Accept Header on a Secret GET
*** https://bugs.launchpad.net/barbican/+bug/1561701

* Feb 29, 2016
** Code Freeze, burr! (diazjf)
*** https://etherpad.openstack.org/p/barbican-m-spec-crs
** Castellan releases (kfarr)

* Feb 22, 2016
** Chair: diazjf
** Fernando Diaz added to core team (redrobot)
*** http://lists.openstack.org/pipermail/openstack-dev/2016-February/087159.html
** Barbican CLI revamp (silos)
***https://etherpad.openstack.org/p/barbican-client-v2

* Feb 15, 2016
** Go over keystone middleware in Credential Factory (diazjf)
*** https://review.openstack.org/#/c/273863/11/castellan/common/utils.py
** pycryptodome (redrobot)
** Fernando Diaz for Core (rerdrobot)
*** http://lists.openstack.org/pipermail/openstack-dev/2016-February/086581.html
** Volunteer meeting chair for next week
** Barbican client cliff bug (silos)
***https://bugs.launchpad.net/python-barbicanclient/+bug/1504646

* Feb 8, 2016
** Public, internal barbican endpoints issue with single host setting in barbican config (arunkant)
*** https://github.com/openstack/barbican/blob/master/barbican/common/utils.py#L58
** Setup a Barbican Guild meeting (diazjf)
** KMIP Key Manager for Castellan (silos)
***https://review.openstack.org/#/c/246546/
** Required configuration options without a default value (rellerreller)
*** Is that allowed?
*** https://review.openstack.org/#/c/273863/

* Feb 1, 2016
** Discuss Castellan Credential Object Patches (diazjf)
*** https://review.openstack.org/#/c/270602/
** Setup Google Hangout meetings(diazjf)
*** BYOK Castellan implementation
*** Barbican Puppet

* Jan 25, 2016
** checkout BYOK spec (diazjf)
***https://review.openstack.org/#/c/271517/

* Jan 18, 2016
** discuss cron job database cleanup (edtubill)
*** talk about database constraints
*** set up hangout

* Jan 4, 2016
** Happy New Year!
** Quickly go over updated Castellan multiple keystone auth blueprint
*** https://review.openstack.org/#/c/241068/
** puppet modules for Barbican
*** https://review.openstack.org/#/c/258851/
*** review coming for puppet+ gunicorn + keystone
*** need help with apache/mod_wsgi

* Dec 21, 2015
** Questions about steps to integrate Barbican with DevStack (kfarr)

* Dec 14, 2015
** Barbican SAML authentication (diazjf)
*** https://review.openstack.org/#/c/241068/
** Add PUT support for generic container types (ting wang)
*** https://review.openstack.org/#/c/207249/
** Add barbican-manage command (jhfeng)
*** https://review.openstack.org/#/c/253719/

* Nov 30, 2015
** chair: rellerreller
** Mitaka-1 milestone
*** kfarr will be handling the release this week
** Castellan logging options (elmiko)
** Castellan integration testing (elmiko)

* Nov 23, 2015
** chair: rellerreller
** Castellan improvements (elmiko)
*** auto-discovery of barbican endpoint
*** auth detection from context object

* Nov 16, 2015
** Barbican Federation Use-Cases Detailed Overview
** Castellan Authentication compatibility for Swift
*** https://etherpad.openstack.org/p/swifjt-keymaster-with-castellan
** Barbican garbage collector
** Creating a castellan-specs github (silos)

* Nov 9, 2015
** Summit Recap
** redrobot is getting married at the end of November! :D
***We'll need a substitute meeting chair for the Nov 23 and 30.
** Federation Use Cases (edtubill, diazjf, silos)

* Nov 2, 2015
** Cancelled due to Summit

* October 26, 2015
** Cancelled due to Summit

* October 19, 2015
** chair: dave-mccowan
** Review design summit etherpad votes.

* October 12, 2015
** Cross project liasions
** py34 update (dave)

* October 5, 2015
** Liberty RC2
** Mitaka Blueprints
** Tokyo Summit

* September 28, 2015
** (woodster) What about changing our gates to populate database with Alembic migrations, instead of from SQLAlchemy models directly?

* September 21, 2015
** (arunkant) Barbicanclient failures on neutron test gate: http://logs.openstack.org/43/208343/15/check/gate-tempest-dsvm-neutron-src-python-barbicanclient/9193018/

* September 14, 2015
** Review Dave's core nomination: http://lists.openstack.org/pipermail/openstack-dev/2015-September/073866.html
** Federated Barbican Update (silos)

* September 7, 2015
** No meeting. Happy Labor day to contributors in the US.

* August 31, 2015
** Test framework - We're currently using both nosetest and testtools. Can we consolidate to one of them?
** Merge requirements continued
** Quotas Blueprint targeting Liberty-3. Update.
** /v2/orders
** Castellan: https://review.openstack.org/#/c/208569/ Last patch needed before a release (kfarr)
** (woodster) Don't forget about the ACL blueprints, esp. this one: https://review.openstack.org/#/c/208343

* August 24, 2015
** Merge Requirements - I think it's time we start merging after two +2 reviews by a core reviewer. (redrobot)
** Tokyo Session Requirements (red robot)

* August 17, 2015
** Adding certificate_manager namespace to Castellan (rm_work)
** Federated Barbican (silos)
** Defect/issue template - https://etherpad.openstack.org/p/barbican-bug-report-template (hockeynut)
** super-user rule in policy.json (dave-mccowan)
** quotas blueprint update (dave-mccowan)

* August 3, 2015
** Multiple KMIP Blueprint - https://review.openstack.org/#/c/194298/ (silos)
** Castellan merge requests (kfarr)

* July 27, 2015
** V2 and Orders (jmvrbanac)
** stable/kilo tests are failing (jaosorior)
** Barbican Openstack CLI plugin (jaosorior)
** Castellan
*** release schedules (elmiko)
*** patches need merging

* July 20, 2015
** Magnum integration
** Resource Quotas
*** Design Discussion: https://review.openstack.org/203678
*** Code review for first commit (config, controller, validator) https://review.openstack.org/198764
** Brief discussion regarding default policy settings and ability of secret creators to manage their secrets (https://bugs.launchpad.net/barbican/+bug/1475962)

* July 13, 2015
** Magnum integration
** CAs blueprint
*** http://specs.openstack.org/openstack/barbican-specs/specs/liberty/add-cas.html
** copy constructor for secrets and containers, report back from api-wg discussions (elmiko)
*** https://review.openstack.org/#/c/127823/

* July 6, 2015
** Update on Quota Support blueprint (dave-mccowan)
** ACL client implementation (chellygel)
** Let's discuss the fifth 'acl-user' role needed for Barbican:
*** Ugh, I noticed we did discuss this on May 4th with an etherpad [https://etherpad.openstack.org/p/barbican-acl-read-only-user-discussion here].
*** However, I think we got off track talking about lists of secrets...
*** So I think the outcome of this discussion should just be a blueprint or paper-cut to add this new role and associated testing for it. I favor blueprint as we could also see a sample of the API doc mods needed.

* June 29, 2015
** Magnum integration
** Why are we still testing the python-barbicanclient with py26
** Dogtag gate as voting

* June 8, 2015
** Mid-Cycle RSVP (red robot)

* June 1, 2015
** Vancouver Summit Recap (redrobot)
** Mid-Cycle (red robot)

* May 11, 2015
** (arunkant) Proposed ACL API changes as per [https://review.openstack.org/#/c/178479/5/doc/source/api/quickstart/acls.rst,cm ACL docs review] comments on line #237
** (dave-mccowan) Heads-up: adding run-as-user support to functional tests. You local keystone deployment will need new users and roles installed to run functional tests.

* May 4, 2015
** (woodster) Let's [https://etherpad.openstack.org/p/barbican-acl-read-only-user-discussion discuss and fine-tune the 'read-only' ACL user'] a little bit

* April 20, 2015
** (redrobot) Kilo-RC1
** (woodster) What approved or drafting blueprints do we want to bring over to Liberty?
** (redrobot) Bug: https://bugs.launchpad.net/barbican/+bug/1446266

* April 13, 2015
** (redrobot) Vancouver Design Summit. See this Liberty design session topics wiki page [https://etherpad.openstack.org/p/barbican-L-design-sessions here].
** (redrobot) Additional role for per-secret ACL. Current policy is available [https://github.com/openstack/barbican/blob/master/etc/barbican/policy.json here].

* April 6, 2015
** (woodster) Barbican Python client and expected sensitivity to additional response key/values returned. See notes on [https://review.openstack.org/#/c/169481 this CR]
** (redrobot) Juno to Kilo DB migration
** (redrobot) Content-Type and payload_content_type combinations

* March 30, 2015
** Flagging things for deprecation. (jvrbanac)
** Logging in Barbican (jvrbanac)
** Castellan Initial Release (redrobot)

* March 23, 2015
** Review comment around storing acl users as comma separated values vs separate table. [https://review.openstack.org/#/c/164334/9/barbican/model/models.py,cm Review Link] (arunkant)
** How to integrate Castellan with Openstack service (arunkant)
*** Related: Castellan release and how to update Castellan resources, i.e. bug tracker (kfarr)

* March 16, 2015
** Functional testing
** Assert parameter order

* March 2, 2015
** 100% code coverage options: break packages into 'paper cut' bugs maybe?

* February 23, 2015
** Mid-cycle recap
*** https://etherpad.openstack.org/p/barbican-kilo-sprint
*** Ade: Wrap profiles around CMC to pass to CA to track product type
*** Ade: Additional CR for Identify CA migration scripts (2 others in review)
*** Ade: BarbicanMetadata table
*** Dave: Certificate Order metadata change API parameter from container ref -> secret ref validation.
*** tsv: Quotas BP
*** woodster: reach out to Jarret about hard deletes for compliance concerns.
*** woodster: Order sub-status
*** New gates
** Road to Liberty summit
*** https://etherpad.openstack.org/p/barbican-L-design-sessions

* February 9, 2015
** Update on Swift integration with KeyManager, if/when moving to Castellan
** A note about Barbican packaging effort underway
** L-Summit space requirements

* February 2, 2015
** Kilo 2
** [https://review.openstack.org/#/c/132091 Quota Support blueprint]:
*** Open question: Admin endpoint (9312) vs service admin thats allowed to set quotas on any project it wishes to?
** Castellan project
*** Which openstack services are driving? What is the timeline for Castellan availability and services started using it.
** Just a note: L design session etherpad is available [https://etherpad.openstack.org/p/barbican-L-design-sessions here].
** Migration scripts are not being ran (according to the bugs that I've found) up to which revision should we keep(support)? [jaosorior]
*** https://bugs.launchpad.net/barbican/+bug/1376902 [jaosorior]
*** This bug also relates to plugin validation which has been [https://etherpad.openstack.org/p/barbican-validation-options discussed in the past] but not otherwise acted upon.
** A note about Barbican packaging effort underway

* January 26, 2015
** KMIP MKEK plugin spec https://review.openstack.org/#/c/148948 [tkelsey]
*** Discussion over the creation of a new plugin vs updating KMIPSecretStore
*** Discussion over Incompatible pluggin versioning (if we decide not to make a second plugin)
** [https://review.openstack.org/#/c/145073 Content types blueprint]:
*** Seems very close...what questions still need to be answered?
** [https://review.openstack.org/#/c/127353 Per Secret Policy blueprint]:
*** Open question: Should whitelisted users be able to decrypt secrets even if they don't have proper Barbican roles?

* January 19, 2015
** Barbican Mid-Cycle
*** https://etherpad.openstack.org/p/barbican-kilo-sprint
** Vancouver Summit
* January 12, 2015
** Castellan progress [redrobot/rm_work]
** KMIPSecretStore HSM connection certificates [tkelsey]
*** Request for reviews on https://review.openstack.org/#/c/135217/
*** Chance to answer any questions
** Blueprints:
*** Quota support: Should we restrict scope? ...So no driver support, no class support?
*** Per-secret RBAC: Whitelist only vs logical expressions? GET list by project-ID or by resources I can GET?

* January 5, 2015
** Kilo 1 Released [redrobot]
** Quota BP [redrobot]
** Insights on https://bugs.launchpad.net/barbican/+bug/1376469 [jaosorior]
** Status of essential blueprints

* December 15, 2014
** Barbican Mid-Cycle [redrobot]

* December 8, 2014
** Integration Docs [redrobot]
** Bugs [redrobot]
** Castellan [redrobot]
** Content types [rellerreller]
*** Any feedback on etherpad page, https://etherpad.openstack.org/p/barbican-formats-discussion?

* December 1, 2014
** Consider video conference to discuss and hopefully land our many outstanding blueprints

* November 24, 2014
** Validation for Typed Container data (Certificates, etc) [rm_work]
** Castellan scope: include CertMgr / ContainerMgr support? [rm_work]
** Content type

* November 17, 2014
** RFC 7030
*** See Ade's notes - https://etherpad.openstack.org/p/thoughts_on_certs
** New Key Manager library (Castellan)

* November 10, 2014
** New Core Reviewers
** RFC 7030

* October 27, 2014
** Kilo Design Sessions
** Atalla ESKM Plugin
** Barbican T-Shirts

* October 6, 2014
** Kilo development is open
*** https://review.openstack.org/#/c/125678/

* Sep 29, 2014
** Juno RC1
*** CR https://review.openstack.org/#/c/110817/ review and merge before Juno final?
** Kilo Design Sessions

* Sep 22, 2014
** (woodster) Added 'How should we handle content type for secrets' block to [https://etherpad.openstack.org/p/barbican-kilo-design-sessions Kilo design discussion etherpad].

* Sep 15, 2014
** jenkins.cloudkeep.io
** Metadata Storage: https://etherpad.openstack.org/p/barbican_metadata
** API Stability
** Documentation sync up with new API
** (woodster) [https://etherpad.openstack.org/p/barbican-juno-final-roadmap Juno roadmap addition]: Refactor Barbican python client to use new Keystone auth components
** (woodster) Various additions made to the [https://etherpad.openstack.org/p/barbican-kilo-design-sessions Kilo design etherpad].
** Need someone to look at https://review.openstack.org/#/c/118697/ comment from Nathan. Based on vote I made this change.

* Sep 8, 2014
** Kilo Design Sessions
** Juno roadmap discussions: https://etherpad.openstack.org/p/barbican-juno-final-roadmap

* Sep 1, 2014
** Kilo Design Sessions

* Aug 25, 2014
** CR Sizes (jvrbanac)
** String interpolation in debug logging (redrobot, rellerreller)
** Python 3 support (rellerrellera)

* Aug 18, 2014
** Juno Home Stretch (woodsier)

* Aug 11, 2014
** [[Barbican/Integration|Barbican Integration]]
** Barbican as a Keystone service

* Aug 4, 2014
** #openstack-barbican on eavesdrop

* July 28, 2014
** Add more type in order post (https://review.openstack.org/#/c/87405/) waiting for review.
** Kilo conference presentation submissions

* July 21, 2014
** (redrobot) Expiring Launchpad BPs after 5 days

* July 14, 2014
** barbican-core nominations vote count
** can we plan better to make such change https://review.openstack.org/#/c/103431?
** python-barbicanclient release schedule

* June 30, 2014
** Mid-cycle meetup next week
** Keystone events blueprint
** (atiwari) https://review.openstack.org/#/c/98174/ (Do we need to worry about backward compatibility?)

* June 23, 2014
** Mid-cycle meetup in two weeks.

* June 16, 2014
** Mid-cycle meetup

* June 9, 2014
** barbican-specs repo
** juno-1 release coming up
** mid-cycle meetup
** https://review.openstack.org/#/c/98473 (is it merge ready? kind of blocker)
** https://review.openstack.org/#/c/97844/ (is it merge ready?)
** https://review.openstack.org/#/c/98174 (is it merge ready?)
** Testing code pattern
** Any progress on eventing system (atiwari).
** Can tenant_id removal from uri deserve v2 api version(atiwari).

* June 2, 2014
** Hacking enabled on pep8 gate
** New barbican-specs repository
** Order model changes for https://blueprints.launchpad.net/barbican/+spec/api-orders-add-more-types
*** New field "meta of type JsonBlob" and "container_id of type String"
** Meera is adding Barbican tempest tests https://blueprints.launchpad.net/tempest/+spec/add-basic-tests-for-barbican
*** Comments, Suggestions or disagreement?

* May 5, 2014
** https://review.openstack.org/#/c/82189/ (is it merge ready?)
** https://review.openstack.org/#/c/88463/ (review required- API change proposal Key generation)
** https://review.openstack.org/#/c/81310/ (review required- Adding target support for policy enforcement.)
** https://review.openstack.org/#/c/90613/ (review required- API change proposal certificate generation order)
**The Advanced Services Common Requirements team wanted to discuss the current status of the Barbican and its readiness to utilize the Barbican for Certificate/key generation and for storing the tenant's certificates sercurely in the system.
**Can we get an update or talk about this in today's meeting.
*** https://blueprints.launchpad.net/barbican/+spec/add-wrapping-key-to-barbican-server

* April 28, 2014
** Action items:
*** all: Review/contribute to Malini's etherpad: https://etherpad.openstack.org/p/juno-key-manager-chapter
*** all: Review atiwari's CR to modify the crypto plugin interface: https://review.openstack.org/#/c/82189/
*** core: Consider beefing up barbican docs related to current crypto plugin operation, as prep for the OpenStack summit

* April 7, 2014
** malini - update on Secuirty Guide documentation
** alee_/atiwari - Crypto plugin changes
** arunkant - Target support in barbican policy enforcement [https://blueprints.launchpad.net/barbican/+spec/policy-target-support]
** jraim - Support for debug mode start in barbican [https://review.openstack.org/#/c/82265/], can be merged?

== Meeting organizers ==

* Publish the agenda 24h in advance
* Mail the agenda to the list and invite participants
* Ask each person responsible for an action from the previous meeting to prepare a line of the form, for each action item: . #info nickname description of the action link to the diff / mailing list thread etc. describing the implementation of the action
* Use http://meetbot.debian.net/Manual.html to get an automatic summary
* Prepare an outline for the meeting to speed things up (see http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-05-10-16.00.log.html for an actual example)
* Record decisions and commitments; review in the next meeting

Meetings/KeystoneMeeting

2016-04-18T16:58:31Z

Bbobrov:

Meetings/KeystoneMeeting

2015-08-11T10:54:25Z

Bbobrov: /* Main Agenda */

= Weekly Keystone team meeting =

If you're interested in identity, authentication, authorization, and/or policy for OpenStack, we hold public meetings weekly on [[IRC]] in <code><nowiki>#openstack-meeting</nowiki></code>, on [https://www.google.com/search?q=current+utc+time Tuesdays at 18:00 UTC]. Please feel free to add items to the agenda below with your name and we'll cover them.

== Regular attendees ==

Add yourself to this list to be pinged prior to each meeting:

ajayaa, amakarov, ayoung, breton, browne, davechen, david8hu, dolphm, dstanek, ericksonsantos, geoffarnold, gyee, henrynash, hogepodge, htruta, jamielennox, joesavak, lbragstad, lhcheng, marekd, morganfainberg, nkinder, raildo, rharwood, rodrigods, roxanaghe, samueldmq, stevemar, topol, wanghong

== Agenda for next meeting ==

==== Main Agenda ====
Please add agenda items to the bottom of this section's list (be sure to include your <code>irc_handle</code>!).

*2015-08-11
** Centralized Policies Distribution <code>(ayoung, samueldmq)</code>
*** Operators Feedback (https://www.mail-archive.com/openstack-operators@lists.openstack.org/msg02805.html)
*** SFE decision (https://www.mail-archive.com/openstack-dev@lists.openstack.org/msg57416.html)
*** Spec/code review (https://review.openstack.org/#/q/status:open+branch:master+topic:bp/dynamic-policies-delivery,n,z)
** Raising an exception if no domain specified on user/group/project create <code>(henrynash)</code>
*** https://bugs.launchpad.net/keystone/+bug/1482330 with the proposed https://review.openstack.org/#/c/209848/
*** Question is whether this is OK to just do...or should we have a cycle of given a deprecate warning for this undocumented use of default domain
** HTTP caching support
*** client -> https://review.openstack.org/#/c/211396/
** X.509 Tokenless Authz needs a verdict <code>(gyee)</code>
*** "You have that luxury. You have the luxury of not knowing what I know. That service user account's death, while tragic, probably saved lives. And X.509 tokenless authz's existence, while grotesque and incomprehensible to you, saves lives. You don't want the truth because deep down in places you don't talk about at parties, you want it on your next deployment, you need it on your next deployment." -- gyee's motivational speech, paraphrasing Col. Jessep (A Few Good Men)
*** https://review.openstack.org/#/c/156870/
*** Client-side implementation <code>(breton)</code>

==== Review of Keystone Blueprints for No-Spec Requires Status ====
Please add BPs to the bottom of this sections list that should be reviewed as not requiring a spec (include your <code>irc_handle</code>!).

==== Keystone Weekly Bug Reports ====
Bugs for the various Keystone repositories are collects and published to the following links. (<code>lbragstad</code>)
* [http://keystone-weekly-bug-report.tempusfrangit.org/weekly-bug-reports/keystone-weekly-bug-report.html Keystone Weekly Bug Report]

== Previous meetings ==

Logs and meeting summaries of previous meetings are located [http://eavesdrop.openstack.org/meetings/keystone/ here].

Meetings/KeystoneMeeting

2015-06-01T12:48:56Z

Bbobrov: /* Agenda for next meeting */

= Weekly Keystone team meeting =

If you're interested in identity for OpenStack, we hold public meetings weekly on [[IRC]] in <code><nowiki>#openstack-meeting</nowiki></code>, on [https://www.google.com/search?q=current+utc+time Tuesdays at 18:00 UTC]. Please feel free to add items to the agenda below with your name and we'll cover them.

== Regular attendees ==

Add yourself to this list to be pinged prior to each meeting:

ajayaa, amakarov, ayoung, bknudson, breton, browne, davechen, david8hu, dolphm, dstanek, ericksonsantos, geoffarnold, gyee, henrynash, hogepodge, htruta, jamielennox, joesavak, lbragstad, lhcheng, marekd, morganfainberg, nkinder, raildo, rharwood, rodrigods, roxanaghe, samueldmq, stevemar, topol, wanghong

== Agenda for next meeting ==

==== Main Agenda ====
Please add agenda items to the bottom of this section's list (be sure to include your <code>irc_handle</code>!).

<big>Reminder: No Meeting 5/19 or 5/26</big>

*6/2
** Post Summit Rundown (<code>Keystone Drivers</code>)
** What's going on with auth plugins and client? (<code>bknudson</code>)
*** e.g., Add Keystone2KeystoneAuthPlugin for K2K federation https://review.openstack.org/#/c/172155/
*** Does this belong in a separate repo from keystoneclient?
** Keystone IdP config API - an API to configure Keystone IdPs instead of using the config file (<code>rodrigods, gabriel-bezerra</code>)
** No one uses keystonemiddleware's memcache_pool? (<code>breton</code>)

==== Test Scripts ====
* posting upstream test scripts on etherpad
* example for HMT: https://etherpad.openstack.org/p/hierarchical-projects
* Need org structure

==== Review of Keystone Blueprints for No-Spec Requires Status ====
Please add BPs to the bottom of this sections list that should be reviewed as not requiring a spec (include your <code>irc_handle</code>!).
* Role descriptions: https://blueprints.launchpad.net/keystone/+spec/role-descriptions - browne

==== Keystone Weekly Bug Reports ====
Bugs for the various Keystone repositories are collects and published to the following links. (<code>lbragstad</code>)
* [http://keystone-weekly-bug-report.tempusfrangit.org/weekly-bug-reports/keystone-weekly-bug-report.html Keystone Weekly Bug Report]

== Previous meetings ==

Logs and meeting summaries of previous meetings are located [http://eavesdrop.openstack.org/meetings/keystone/ here].

Meetings/KeystoneMeeting

2015-03-10T16:00:00Z

Bbobrov: /* Main Agenda */

= Weekly Keystone team meeting =

If you're interested in identity for OpenStack, we hold public meetings weekly on [[IRC]] in <code><nowiki>#openstack-meeting</nowiki></code>, on [https://www.google.com/search?q=current+utc+time Tuesdays at 18:00 UTC]. Please feel free to add items to the agenda below with your name and we'll cover them.

== Regular attendees ==

Add yourself to this list to be pinged prior to each meeting:

dolphm, ayoung, dstanek, jamielennox, morganfainberg, stevemar, gyee, henrynash, topol, marekd, lbragstad, joesavak, shardy, fabiog, nkinder, lloydm, shrekuma, ksavich, hrybacki, rharwood, grantbow, vdreamarkitex, raildo, rodrigods, amakarov, ajayaa, hogepodge, breton, lhcheng, nonameentername, samueldmq, htruta, amolock, wanghong, fmarco76

== Agenda for next meeting ==

==== Main Agenda ====
Please add agenda items to the bottom of this section's list (be sure to include your <code>irc_handle</code>!).
* JSON Home: Support for experimental/disabled. When we approved the spec for [https://review.openstack.org/#/c/133809/8/specs/kilo/replace_extensions.rst moving away from extensions], we specified that resources might be appear as "experimental" (if they were still maturing) or "disabled" (if that features had been turned off by a config switch) in the JSON Home response. Concern, however, has been raised as to whether this is a valid way of using JSON Home. The new [https://review.openstack.org/#/c/162484/4/api/v3/identity-api-v3.rst domain-config-database support] is the first new resources to use this....before we merge its JSON Home support, let's make sure we are still happy with this approach. (<code>henrynash</code>)
* keystone vs Keystone (https://review.openstack.org/#/c/162561/) <code>breton</code>

==== Review of Keystone Blueprints for No-Spec Requires Status ====
Please add BPs to the bottom of this sections list that should be reviewed as not requiring a spec (include your <code>irc_handle</code>!).

==== Keystone Weekly Bug Reports ====
Bugs for the various Keystone repositories are collects and published to the following links. (<code>lbragstad</code>)
* [http://keystone-weekly-bug-report.tempusfrangit.org/weekly-bug-reports/keystone-weekly-bug-report.html Keystone Weekly Bug Report]

== Previous meetings ==

Logs and meeting summaries of previous meetings are located [http://eavesdrop.openstack.org/meetings/keystone/ here].

Meetings/KeystoneMeeting

2015-01-27T16:11:49Z

Bbobrov: /* Main Agenda */

= Weekly Keystone team meeting =

If you're interested in identity for OpenStack, we hold public meetings weekly on [[IRC]] in <code><nowiki>#openstack-meeting</nowiki></code>, on [https://www.google.com/search?q=current+utc+time Tuesdays at 18:00 UTC]. Please feel free to add items to the agenda below with your name and we'll cover them.

== Regular attendees ==

Add yourself to this list to be pinged prior to each meeting:

dolphm, ayoung, dstanek, jamielennox, morganfainberg, stevemar, gyee, henrynash, topol, marekd, lbragstad, joesavak, shardy, fabiog, nkinder, lloydm, shrekuma, ksavich, hrybacki, rharwood, grantbow, vdreamarkitex, raildo, rodrigods, amakarov, ajayaa, hogepodge, breton, lhcheng, nonameentername, samueldmq, htruta, amolock

== Agenda for next meeting ==

==== Main Agenda ====
Please add agenda items to the bottom of this section's list (be sure to include your <code>irc_handle</code>!).

* What is the best way to solve the clashing name problem in the domains sql migration? <code>raildo</code>
* Idp and the new relationship with domains and project domain-ness <code>ayoung, raildo</code>
* Review Client Blockers - Release scheduled for February 1st. (<code>morganfainberg</code>, <code>jamielennox</code>)
* Review Code for Blueprints / Bugs targeted for Kilo-2 (<code>morganfainberg</code>)
* Review un-approved specs for Feb 5th Spec Proposal Deadline (<code>morganfainberg</code>)
* Domain roles APIs addition (<code>henrynash, samueldmq</code>)
* Role inheritance naming changes (<code>henrynash, samueldmq</code>)
* Functional testing changes (<code>dstanek</code>)
* Alembic status and blockers (<code>breton</code>)

==== Review of Keystone Blueprints for No-Spec Requires Status ====
Please add BPs to the bottom of this sections list that should be reviewed as not requiring a spec (include your <code>irc_handle</code>!).

* [https://blueprints.launchpad.net/keystone/+spec/list-role-assignments-performance Improve list role assignments filtering performance] - <code>henrynash, samueldmq</code>
* [https://blueprints.launchpad.net/keystone/+spec/idp-id-registration IDP ID registration and validation] - https://review.openstack.org/#/c/142743/ - <code>fmarco76</code>
* [https://blueprints.launchpad.net/keystone/+spec/ldap-filtering Support list filtering in LDAP backends] - <code>henrynash</code>

==== Keystone Weekly Bug Reports ====
Bugs for the various Keystone repositories are collects and published to the following links. (<code>lbragstad</code>)
* [http://keystone-weekly-bug-report.tempusfrangit.org/weekly-bug-reports/keystone-weekly-bug-report.html Keystone Weekly Bug Report]

== Previous meetings ==

Logs and meeting summaries of previous meetings are located [http://eavesdrop.openstack.org/meetings/keystone/ here].

Meetings/KeystoneMeeting

2014-10-13T11:39:18Z

Bbobrov: /* Regular attendees */