Barbican/Archive/Agenda/2016
< Barbican | Archive/Agenda
- December 19, 2016
- Code review requests https://review.openstack.org/#/c/403604/
- Storing Fernet keys in Barbican
- December 12, 2016
- Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
- Milestone 2 is this week. Are we waiting on anything? dave-mccowan to cut release Tuesday if not.
- Meeting Time: plan to change to a later time starting in January: https://etherpad.openstack.org/p/barbican-irc-meeting-time
- PTG Meeting
- Please RSVP and add agenda items
- https://etherpad.openstack.org/p/ptg-barbican-pike
- Tempest Testing:
- New repo for Tempest tests: https://review.openstack.org/#/q/project:openstack/barbican-tempest-plugin
- Sign up to co-ordinate test development: https://etherpad.openstack.org/p/barbican_tempest_plugin
- Adding id fields to responses
- Writing Tempest Tests has exposed another need for returning IDs, instead of only REFs, for Barbican Objects
- Here's an example: https://review.openstack.org/#/c/409732/
- Marc (mkoderer) has offered to write this code. Shall we push for Ocata release?
- Code review requests
- Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
- December 5, 2016
- Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
- Meeting Time: plan to change to a later time starting in January: https://etherpad.openstack.org/p/barbican-irc-meeting-time
- Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
- Tempest Testing: https://etherpad.openstack.org/p/barbican_tempest_plugin
- Code review requests:
- November 28, 2016
- Any suggestion on client refactor? https://review.openstack.org/#/c/403604/
- Ocata Work Items: https://etherpad.openstack.org/p/barbican-tracker-ocata
- Meeting Time: can we move the weekly meeting earlier to be more Europe friendly?
- November 14, 2016
- CLI change patches (doug)
- Returning entity_id property (doug)
- Config option for certificate order api deprecation (doug)
- Congrats to Arun Kant for promotion to barbian-core
- November 7, 2016
- Barcelona Summit Recap
- Vault Plugin for Barbican (diazjf)
- Arun Kant for barbican-core
- October 31, 2016
- Barcelona Summit Recap
- Vault Plugin for Barbican (diazjf)
- October 17, 2016
- Barcelona Design Summit Topics
- https://etherpad.openstack.org/p/barbican-ocata-design-summit
- https://wiki.openstack.org/wiki/Design_Summit/Ocata/Etherpads#Barbican
- https://www.openstack.org/summit/barcelona-2016/summit-schedule/global-search?t=Barbican
- if you plan to attend, add your nic
- add and vote for session topics
- Launchpad Blueprint Cleanup
- Reviews
- In general, let's reduce our review backlog
- Change authentication default to keystone: https://review.openstack.org/#/c/333173/
- Open Discussion
- Barcelona Design Summit Topics
- October 10, 2016
- Action Item Status
- Barcelona Design Summit Topics
- https://etherpad.openstack.org/p/barbican-ocata-design-summit
- if you plan to attend, add your nic
- add and vote for session topics
- Next Midcycle, Pike Design Summit
- Project Team Gathering
- http://www.openstack.org/ptg
- Atlanta, February 20-24
- https://etherpad.openstack.org/p/barbican-pike-ptg
- Reviews
- LBaaS user context: https://bugs.launchpad.net/barbican/+bug/1592612
- postgreSQL broken: https://review.openstack.org/#/c/383577
- Open Discussion
- October 3, 2016
- Action Item Status
- Newton Status
- Barcelona Design Summit Topics
- https://etherpad.openstack.org/p/barbican-ocata-design-summit
- if you plan to attend, add your nic
- add and vote for session topics
- Next Midcycle, Pike Design Summit
- Project Team Gathering
- http://www.openstack.org/ptg
- Atlanta, February 20-24
- https://etherpad.openstack.org/p/barbican-pike-ptg
- Open Discussion
- Reviews
- September 26, 2016
- Newton RC1 Status
- any newton-rc-potential bugs?
- https://releases.openstack.org/newton/schedule.html
- /master unit and function tests failing, gates broken
- https://bugs.launchpad.net/barbican/+bug/1627809
- due to update of pecan package
- Midcycle Action Item Review
- https://etherpad.openstack.org/p/barbican-newton-midcycle-topics
- certificate api deprecation email (done)
- state of barbican email (redrobot)
- state of barbican blog postings (redrobot, alee, fernando, arun)
- project integration how-to documentation (redrobot)
- deployment guide location (redrobot)
- implement listing secrets in a client (kfarr)
- Barcelona Design Summit Topics
- https://etherpad.openstack.org/p/barbican-ocata-design-summit
- if you plan to attend, add your nic
- add and vote for session topics
- Reviews
- Newton RC1 Status
- September 19, 2016
- Newton RC1 Status
- any newton-rc-potential bugs?
- https://releases.openstack.org/newton/schedule.html
- Midcycle Action Item Review
- Barcelona Design Summit Topics
- Ocata Blueprints
- Container Install with Kolla
- Need a good default config for production use with multinode
- https://bugs.launchpad.net/kolla/+bug/1625340
- https://bugs.launchpad.net/kolla/+bug/1625337
- PTL Election
- Reviews
- Newton RC1 Status
- September 12, 2016
- Reviews
- RC1
- PTL Election
- Barcelona Design Summit Topics
- reviews (multiple-backend reviews for newton release) - arunkant
- Impl Part 1: https://review.openstack.org/#/c/348092/
- Impl Part 2: https://review.openstack.org/#/c/354285/
- Impl Part 3: https://review.openstack.org/#/c/357544/
- Impl Part 4: https://review.openstack.org/#/c/358162/
- Impl Part 5: https://review.openstack.org/#/c/360202/
- August 27, 2016
- Question around swift keymaster : Does it have barbican/castellan impl in newton release? (arunkant)
- exception for multiple backend code reviews for newton RC1 timeline (arunkant)
- reviews (multiple-backend reviews for newton release) - arunkant
- Api Doc: https://review.openstack.org/#/c/341803/
- Impl Part 1: https://review.openstack.org/#/c/348092/
- Impl Part 2: https://review.openstack.org/#/c/354285/
- Impl Part 3: https://review.openstack.org/#/c/357544/
- Impl Part 4: https://review.openstack.org/#/c/358162/
- Impl Part 5: https://review.openstack.org/#/c/360202/
- August 22, 2016
- reviews (multiple-backend reviews for newton release)
- Spec: https://review.openstack.org/#/c/263972/
- Api Doc: https://review.openstack.org/#/c/341803/
- Impl Part 1: https://review.openstack.org/#/c/348092/
- Impl Part 2: https://review.openstack.org/#/c/354285/
- Impl Part 3: https://review.openstack.org/#/c/357544/
- Impl Part 4: https://review.openstack.org/#/c/358162/
- reviews (multiple-backend reviews for newton release)
- August 15, 2016
- August 8, 2016
- reviews (core)
- Midcycle
- Who's coming?
- August 1, 2016
- reviews (core)
- OpenStack Summit presentations(diazjf)
- Let's start casting votes on Barbican related talks!!
- July 11, 2016
- Barbican MidCycle Meetup (diazjf)
- It's official, it will be in IBM Austin site, August 15 - 17, Security will be August 17 - 19.
- We need to plan fun things to do while everyone is here.
- Add topics here: https://etherpad.openstack.org/p/barbican-security-midcycle-N
- diazjf needs to get on the ball and send email to the mailing list!
- Barbican Talks (diazjf)
- Is anyone giving any talks?
- Everyone needs to update their profiles, etc.
- Barbican MidCycle Meetup (diazjf)
- May 9, 2016
- Secret User Metadata Quota questions (diazjf)
- Add a new api, db, etc. for Secret Quotas or use Project Quotas?
- https://review.openstack.org/#/c/313788/
- Blueprints
- Deployer Secret Metadata -> Ready for Review/Merge
- HSM fail-safe
- Will split up into 2 blueprints.
- 1.) HSM retry. If connection to an HSM is lost, Barbican will try to connect again for a set amount of times after a set amount of time.
- 2.) Pool of HSMs for fail-safe.
- Will work on the HSM retry for N release. If HSM HA mode shows no improvement by N release will work on fail-safe for O release.
- https://review.openstack.org/#/c/301997/
- Will split up into 2 blueprints.
- Secret User Metadata Quota questions (diazjf)
- May 2, 2016
- Deployer Metadata Spec ready for review (diazjf)
- Software HSM in the gate (diazjf)
- Currently working on an install guide for SoftHSMv2. It will help out for learning how to deploy Barbican in production.
- Barbican Stackalytics Broken?
- Last update was April 23
- Apr 18, 2016
- Candidate for backport to stable/mitaka and Liberty ?
- https://review.openstack.org/#/c/304335/ (panatl) - Mitaka
- https://review.openstack.org/#/c/303845/ (panatl) - Liberty
- https://review.openstack.org/#/c/303648/ (arunkant)
- Should creator be allowed to delete related barbican resources?
- Cinder allows create/delete as long as user has a role on that project. https://github.com/openstack/cinder/blob/master/etc/cinder/policy.json#L9
- Should we assign creator or admin role for cinder user to mange barbican resources ?
- Cinder allows create/delete as long as user has a role on that project. https://github.com/openstack/cinder/blob/master/etc/cinder/policy.json#L9
- Security Related review, will need backport to Liberty and Mitaka once approved and merged
- https://review.openstack.org/#/c/304788/ (panatl)
- Security Concerns on having a default "kek" in simple_crypto.py, can we remove that and update the test cases accordingly?
- General Review
- Candidate for backport to stable/mitaka and Liberty ?
- Apr 11, 2016
- Blueprints for Newton
- Blueprint for Deployer Secret Metadata (diazjf)
- Blueprint for HSM fail safe (diazjf)
- Blueprints for Newton
- Mar 28, 2016
- RC2
- Secret User Metadata Quotas
- Project Quotas vs. Secret Quotas
- Bug: Incorrect Error Code when Passing Accept Header on a Secret GET
- Feb 29, 2016
- Code Freeze, burr! (diazjf)
- Castellan releases (kfarr)
- Feb 22, 2016
- Chair: diazjf
- Fernando Diaz added to core team (redrobot)
- Barbican CLI revamp (silos)
- Feb 15, 2016
- Go over keystone middleware in Credential Factory (diazjf)
- pycryptodome (redrobot)
- Fernando Diaz for Core (rerdrobot)
- Volunteer meeting chair for next week
- Barbican client cliff bug (silos)
- Feb 8, 2016
- Public, internal barbican endpoints issue with single host setting in barbican config (arunkant)
- Setup a Barbican Guild meeting (diazjf)
- KMIP Key Manager for Castellan (silos)
- Required configuration options without a default value (rellerreller)
- Is that allowed?
- https://review.openstack.org/#/c/273863/
- Feb 1, 2016
- Discuss Castellan Credential Object Patches (diazjf)
- Setup Google Hangout meetings(diazjf)
- BYOK Castellan implementation
- Barbican Puppet
- Jan 25, 2016
- checkout BYOK spec (diazjf)
- Jan 18, 2016
- discuss cron job database cleanup (edtubill)
- talk about database constraints
- set up hangout
- discuss cron job database cleanup (edtubill)
- Jan 4, 2016
- Happy New Year!
- Quickly go over updated Castellan multiple keystone auth blueprint
- puppet modules for Barbican
- https://review.openstack.org/#/c/258851/
- review coming for puppet+ gunicorn + keystone
- need help with apache/mod_wsgi