Barbican/Archive/Agenda/2016

December 19, 2016
- Code review requests https://review.openstack.org/#/c/403604/
- Storing Fernet keys in Barbican

December 12, 2016
- Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
  - Milestone 2 is this week. Are we waiting on anything? dave-mccowan to cut release Tuesday if not.
- Meeting Time: plan to change to a later time starting in January: https://etherpad.openstack.org/p/barbican-irc-meeting-time
- PTG Meeting
  - Please RSVP and add agenda items
  - https://etherpad.openstack.org/p/ptg-barbican-pike
- Tempest Testing:
  - New repo for Tempest tests: https://review.openstack.org/#/q/project:openstack/barbican-tempest-plugin
  - Sign up to co-ordinate test development: https://etherpad.openstack.org/p/barbican_tempest_plugin
- Adding id fields to responses
  - Writing Tempest Tests has exposed another need for returning IDs, instead of only REFs, for Barbican Objects
  - Here's an example: https://review.openstack.org/#/c/409732/
  - Marc (mkoderer) has offered to write this code. Shall we push for Ocata release?
- Code review requests

December 5, 2016
- Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
- Meeting Time: plan to change to a later time starting in January: https://etherpad.openstack.org/p/barbican-irc-meeting-time
- Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
- Tempest Testing: https://etherpad.openstack.org/p/barbican_tempest_plugin
- Code review requests:
  - https://review.openstack.org/#/c/397338
  - https://review.openstack.org/#/c/400370

November 28, 2016
- Any suggestion on client refactor? https://review.openstack.org/#/c/403604/
- Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
- Meeting Time: can we move the weekly meeting earlier to be more Europe friendly?

November 14, 2016
- CLI change patches (doug)
- Returning entity_id property (doug)
- Config option for certificate order api deprecation (doug)
- Congrats to Arun Kant for promotion to barbian-core

November 7, 2016
- Barcelona Summit Recap
- Vault Plugin for Barbican (diazjf)
  - https://groups.google.com/forum/#!topic/vault-tool/BfSq4dP081s
- Arun Kant for barbican-core

October 31, 2016
- Barcelona Summit Recap
- Vault Plugin for Barbican (diazjf)
  - https://groups.google.com/forum/#!topic/vault-tool/BfSq4dP081s

October 17, 2016
- Barcelona Design Summit Topics
  - https://etherpad.openstack.org/p/barbican-ocata-design-summit
  - https://wiki.openstack.org/wiki/Design_Summit/Ocata/Etherpads#Barbican
  - https://www.openstack.org/summit/barcelona-2016/summit-schedule/global-search?t=Barbican
  - if you plan to attend, add your nic
  - add and vote for session topics
- Launchpad Blueprint Cleanup
  - https://blueprints.launchpad.net/barbican
- Reviews
  - In general, let's reduce our review backlog
  - Change authentication default to keystone: https://review.openstack.org/#/c/333173/
- Open Discussion

October 10, 2016
- Action Item Status
- Barcelona Design Summit Topics
  - https://etherpad.openstack.org/p/barbican-ocata-design-summit
  - if you plan to attend, add your nic
  - add and vote for session topics
- Next Midcycle, Pike Design Summit
  - Project Team Gathering
  - http://www.openstack.org/ptg
  - Atlanta, February 20-24
  - https://etherpad.openstack.org/p/barbican-pike-ptg
- Reviews
  - LBaaS user context: https://bugs.launchpad.net/barbican/+bug/1592612
  - postgreSQL broken: https://review.openstack.org/#/c/383577
- Open Discussion

October 3, 2016
- Action Item Status
- Newton Status
- Barcelona Design Summit Topics
  - https://etherpad.openstack.org/p/barbican-ocata-design-summit
  - if you plan to attend, add your nic
  - add and vote for session topics
- Next Midcycle, Pike Design Summit
  - Project Team Gathering
  - http://www.openstack.org/ptg
  - Atlanta, February 20-24
  - https://etherpad.openstack.org/p/barbican-pike-ptg
- Open Discussion
- Reviews

September 26, 2016
- Newton RC1 Status
  - any newton-rc-potential bugs?
  - https://releases.openstack.org/newton/schedule.html
- /master unit and function tests failing, gates broken
  - https://bugs.launchpad.net/barbican/+bug/1627809
  - due to update of pecan package
- Midcycle Action Item Review
  - https://etherpad.openstack.org/p/barbican-newton-midcycle-topics
  - certificate api deprecation email (done)
  - state of barbican email (redrobot)
  - state of barbican blog postings (redrobot, alee, fernando, arun)
  - project integration how-to documentation (redrobot)
  - deployment guide location (redrobot)
  - implement listing secrets in a client (kfarr)
- Barcelona Design Summit Topics
  - https://etherpad.openstack.org/p/barbican-ocata-design-summit
  - if you plan to attend, add your nic
  - add and vote for session topics
- Reviews
  - https://review.openstack.org/#/c/353744

September 19, 2016
- Newton RC1 Status
  - any newton-rc-potential bugs?
  - https://releases.openstack.org/newton/schedule.html
- Midcycle Action Item Review
  - https://etherpad.openstack.org/p/barbican-newton-midcycle-topics
- Barcelona Design Summit Topics
  - https://etherpad.openstack.org/p/barbican-ocata-design-summit
- Ocata Blueprints
  - https://review.openstack.org/#/c/363945/
- Container Install with Kolla
  - Need a good default config for production use with multinode
  - https://bugs.launchpad.net/kolla/+bug/1625340
  - https://bugs.launchpad.net/kolla/+bug/1625337
- PTL Election
- Reviews
  - https://review.openstack.org/#/c/372060

September 12, 2016
- Reviews
  - https://review.openstack.org/#/c/251168/
- RC1
  - https://releases.openstack.org/newton/schedule.html
- PTL Election
- Barcelona Design Summit Topics
  - https://etherpad.openstack.org/p/barbican-ocata-design-summit
- reviews (multiple-backend reviews for newton release) - arunkant
  - Impl Part 1: https://review.openstack.org/#/c/348092/
  - Impl Part 2: https://review.openstack.org/#/c/354285/
  - Impl Part 3: https://review.openstack.org/#/c/357544/
  - Impl Part 4: https://review.openstack.org/#/c/358162/
  - Impl Part 5: https://review.openstack.org/#/c/360202/

August 27, 2016
- Question around swift keymaster : Does it have barbican/castellan impl in newton release? (arunkant)
  - http://docs.openstack.org/developer/swift/overview_encryption.html
  - https://specs.openstack.org/openstack/swift-specs/specs/in_progress/at_rest_encryption.html#barbican-keymaster
- exception for multiple backend code reviews for newton RC1 timeline (arunkant)
- reviews (multiple-backend reviews for newton release) - arunkant
  - Api Doc: https://review.openstack.org/#/c/341803/
  - Impl Part 1: https://review.openstack.org/#/c/348092/
  - Impl Part 2: https://review.openstack.org/#/c/354285/
  - Impl Part 3: https://review.openstack.org/#/c/357544/
  - Impl Part 4: https://review.openstack.org/#/c/358162/
  - Impl Part 5: https://review.openstack.org/#/c/360202/

August 22, 2016
- reviews (multiple-backend reviews for newton release)
  - Spec: https://review.openstack.org/#/c/263972/
  - Api Doc: https://review.openstack.org/#/c/341803/
  - Impl Part 1: https://review.openstack.org/#/c/348092/
  - Impl Part 2: https://review.openstack.org/#/c/354285/
  - Impl Part 3: https://review.openstack.org/#/c/357544/
  - Impl Part 4: https://review.openstack.org/#/c/358162/

August 15, 2016
- reviews (core)
  - https://review.openstack.org/#/c/320100/
  - https://review.openstack.org/#/c/343986/

August 8, 2016
- reviews (core)
  - https://review.openstack.org/#/c/320100/
  - https://review.openstack.org/#/c/343986/
- Midcycle
  - Who's coming?

August 1, 2016
- reviews (core)
  - https://review.openstack.org/#/c/320100/6
  - https://review.openstack.org/#/c/343986/
- OpenStack Summit presentations(diazjf)
  - Let's start casting votes on Barbican related talks!!

July 11, 2016
- Barbican MidCycle Meetup (diazjf)
  - It's official, it will be in IBM Austin site, August 15 - 17, Security will be August 17 - 19.
  - We need to plan fun things to do while everyone is here.
  - Add topics here: https://etherpad.openstack.org/p/barbican-security-midcycle-N
  - diazjf needs to get on the ball and send email to the mailing list!
- Barbican Talks (diazjf)
  - Is anyone giving any talks?
  - Everyone needs to update their profiles, etc.

May 9, 2016
- Secret User Metadata Quota questions (diazjf)
  - Add a new api, db, etc. for Secret Quotas or use Project Quotas?
  - https://review.openstack.org/#/c/313788/
- Blueprints
  - Deployer Secret Metadata -> Ready for Review/Merge
    - https://review.openstack.org/#/c/301310/
  - HSM fail-safe
    - Will split up into 2 blueprints.
      - 1.) HSM retry. If connection to an HSM is lost, Barbican will try to connect again for a set amount of times after a set amount of time.
      - 2.) Pool of HSMs for fail-safe.
    - Will work on the HSM retry for N release. If HSM HA mode shows no improvement by N release will work on fail-safe for O release.
    - https://review.openstack.org/#/c/301997/

May 2, 2016
- Deployer Metadata Spec ready for review (diazjf)
  - https://review.openstack.org/#/c/301310/
- Software HSM in the gate (diazjf)
  - Currently working on an install guide for SoftHSMv2. It will help out for learning how to deploy Barbican in production.
    - https://review.openstack.org/#/c/311571/
    - http://docs-draft.openstack.org/71/311571/3/check/gate-barbican-docs/a530a29//doc/build/html/testing/soft_hsm.html
- Barbican Stackalytics Broken?
  - Last update was April 23
    - http://stackalytics.com/?module=barbican-group

Apr 18, 2016
- Candidate for backport to stable/mitaka and Liberty ?
  - https://review.openstack.org/#/c/304335/ (panatl) - Mitaka
  - https://review.openstack.org/#/c/303845/ (panatl) - Liberty
  - https://review.openstack.org/#/c/303648/ (arunkant)
- Should creator be allowed to delete related barbican resources?
  - Cinder allows create/delete as long as user has a role on that project. https://github.com/openstack/cinder/blob/master/etc/cinder/policy.json#L9
    - Should we assign creator or admin role for cinder user to mange barbican resources ?
- Security Related review, will need backport to Liberty and Mitaka once approved and merged
  - https://review.openstack.org/#/c/304788/ (panatl)
  - Security Concerns on having a default "kek" in simple_crypto.py, can we remove that and update the test cases accordingly?
- General Review
  - https://review.openstack.org/#/c/306216/ (panatl)

Apr 11, 2016
- Blueprints for Newton
  - Blueprint for Deployer Secret Metadata (diazjf)
    - https://review.openstack.org/#/c/301310/
  - Blueprint for HSM fail safe (diazjf)
    - https://review.openstack.org/#/c/301997/

Mar 28, 2016
- RC2
  - https://bugs.launchpad.net/barbican/+bug/1562091
- Secret User Metadata Quotas
  - Project Quotas vs. Secret Quotas
- Bug: Incorrect Error Code when Passing Accept Header on a Secret GET
  - https://bugs.launchpad.net/barbican/+bug/1561701

Feb 29, 2016
- Code Freeze, burr! (diazjf)
  - https://etherpad.openstack.org/p/barbican-m-spec-crs
- Castellan releases (kfarr)

Feb 22, 2016
- Chair: diazjf
- Fernando Diaz added to core team (redrobot)
  - http://lists.openstack.org/pipermail/openstack-dev/2016-February/087159.html
- Barbican CLI revamp (silos)
  - https://etherpad.openstack.org/p/barbican-client-v2

Feb 15, 2016
- Go over keystone middleware in Credential Factory (diazjf)
  - https://review.openstack.org/#/c/273863/11/castellan/common/utils.py
- pycryptodome (redrobot)
- Fernando Diaz for Core (rerdrobot)
  - http://lists.openstack.org/pipermail/openstack-dev/2016-February/086581.html
- Volunteer meeting chair for next week
- Barbican client cliff bug (silos)
  - https://bugs.launchpad.net/python-barbicanclient/+bug/1504646

Feb 8, 2016
- Public, internal barbican endpoints issue with single host setting in barbican config (arunkant)
  - https://github.com/openstack/barbican/blob/master/barbican/common/utils.py#L58
- Setup a Barbican Guild meeting (diazjf)
- KMIP Key Manager for Castellan (silos)
  - https://review.openstack.org/#/c/246546/
- Required configuration options without a default value (rellerreller)
  - Is that allowed?
  - https://review.openstack.org/#/c/273863/

Feb 1, 2016
- Discuss Castellan Credential Object Patches (diazjf)
  - https://review.openstack.org/#/c/270602/
- Setup Google Hangout meetings(diazjf)
  - BYOK Castellan implementation
  - Barbican Puppet

Jan 25, 2016
- checkout BYOK spec (diazjf)
  - https://review.openstack.org/#/c/271517/

Jan 18, 2016
- discuss cron job database cleanup (edtubill)
  - talk about database constraints
  - set up hangout

Jan 4, 2016
- Happy New Year!
- Quickly go over updated Castellan multiple keystone auth blueprint
  - https://review.openstack.org/#/c/241068/
- puppet modules for Barbican
  - https://review.openstack.org/#/c/258851/
  - review coming for puppet+ gunicorn + keystone
  - need help with apache/mod_wsgi