Jump to: navigation, search

Meetings/Barbican

Weekly Barbican Meeting

The Barbican project team holds a weekly team meeting in #openstack-meeting-alt:

Agenda

  • July 10, 2017
  • July 3, 2017
    • No Meeting (US Holiday)
  • June 26, 2017
    • dave-mccowan on PTO, substitute chair:
    • PIke Status
    • Upcoming PTG
      • Denver, September 11-15
    • Review requests
    • Any other business
  • June 19, 2017
  • June 12, 2017
    • PIke Status
    • Upcoming PTG
      • Denver, September 11-15
    • Review requests
    • Any other business
  • May 29, 2017
    • No meeting this week. (Memorial Day Holiday in U.S.)
  • May 22, 2017
    • no meeting, schedule conflicts
  • May 8, 2017
    • No Meeting this week (Summit)


  • February 20, 2017
    • PTG: https://etherpad.openstack.org/p/ptg-barbican-pike
      • Team photo on Thursday at 1:40pm
      • Remote attendees via Hangouts/Webex (sign up on etherpad)
    • Project Navigator
    • Summit
      • don't forget to vote for barbican sessions
    • Ocata Status
      • patch to tag release is out
    • Tempest testing
      • extra stuff in devstack install?
    • Operator's Adopt-a-Project
    • Any other business
  • November 14, 2016
    • CLI change patches (doug)
    • Returning entity_id property (doug)
    • Config option for certificate order api deprecation (doug)
    • Congrats to Arun Kant for promotion to barbian-core




  • July 11, 2016
    • Barbican MidCycle Meetup (diazjf)
    • Barbican Talks (diazjf)
      • Is anyone giving any talks?
      • Everyone needs to update their profiles, etc.
  • May 9, 2016
    • Secret User Metadata Quota questions (diazjf)
    • Blueprints
      • Deployer Secret Metadata -> Ready for Review/Merge
      • HSM fail-safe
        • Will split up into 2 blueprints.
          • 1.) HSM retry. If connection to an HSM is lost, Barbican will try to connect again for a set amount of times after a set amount of time.
          • 2.) Pool of HSMs for fail-safe.
        • Will work on the HSM retry for N release. If HSM HA mode shows no improvement by N release will work on fail-safe for O release.
        • https://review.openstack.org/#/c/301997/
  • Jan 18, 2016
    • discuss cron job database cleanup (edtubill)
      • talk about database constraints
      • set up hangout
  • Dec 21, 2015
    • Questions about steps to integrate Barbican with DevStack (kfarr)
  • Nov 30, 2015
    • chair: rellerreller
    • Mitaka-1 milestone
      • kfarr will be handling the release this week
    • Castellan logging options (elmiko)
    • Castellan integration testing (elmiko)
  • Nov 23, 2015
    • chair: rellerreller
    • Castellan improvements (elmiko)
      • auto-discovery of barbican endpoint
      • auth detection from context object
  • Nov 9, 2015
    • Summit Recap
    • redrobot is getting married at the end of November! :D
      • We'll need a substitute meeting chair for the Nov 23 and 30.
    • Federation Use Cases (edtubill, diazjf, silos)
  • Nov 2, 2015
    • Cancelled due to Summit
  • October 26, 2015
    • Cancelled due to Summit
  • October 19, 2015
    • chair: dave-mccowan
    • Review design summit etherpad votes.
  • October 12, 2015
    • Cross project liasions
    • py34 update (dave)
  • October 5, 2015
    • Liberty RC2
    • Mitaka Blueprints
    • Tokyo Summit
  • September 28, 2015
    • (woodster) What about changing our gates to populate database with Alembic migrations, instead of from SQLAlchemy models directly?
  • September 7, 2015
    • No meeting. Happy Labor day to contributors in the US.
  • August 31, 2015
  • August 24, 2015
    • Merge Requirements - I think it's time we start merging after two +2 reviews by a core reviewer. (redrobot)
    • Tokyo Session Requirements (red robot)
  • July 27, 2015
    • V2 and Orders (jmvrbanac)
    • stable/kilo tests are failing (jaosorior)
    • Barbican Openstack CLI plugin (jaosorior)
    • Castellan
      • release schedules (elmiko)
      • patches need merging
  • July 6, 2015
    • Update on Quota Support blueprint (dave-mccowan)
    • ACL client implementation (chellygel)
    • Let's discuss the fifth 'acl-user' role needed for Barbican:
      • Ugh, I noticed we did discuss this on May 4th with an etherpad here.
      • However, I think we got off track talking about lists of secrets...
      • So I think the outcome of this discussion should just be a blueprint or paper-cut to add this new role and associated testing for it. I favor blueprint as we could also see a sample of the API doc mods needed.
  • June 29, 2015
    • Magnum integration
    • Why are we still testing the python-barbicanclient with py26
    • Dogtag gate as voting
  • June 8, 2015
    • Mid-Cycle RSVP (red robot)
  • June 1, 2015
    • Vancouver Summit Recap (redrobot)
    • Mid-Cycle (red robot)
  • May 11, 2015
    • (arunkant) Proposed ACL API changes as per ACL docs review comments on line #237
    • (dave-mccowan) Heads-up: adding run-as-user support to functional tests. You local keystone deployment will need new users and roles installed to run functional tests.
  • April 13, 2015
    • (redrobot) Vancouver Design Summit. See this Liberty design session topics wiki page here.
    • (redrobot) Additional role for per-secret ACL. Current policy is available here.
  • April 6, 2015
    • (woodster) Barbican Python client and expected sensitivity to additional response key/values returned. See notes on this CR
    • (redrobot) Juno to Kilo DB migration
    • (redrobot) Content-Type and payload_content_type combinations
  • March 30, 2015
    • Flagging things for deprecation. (jvrbanac)
    • Logging in Barbican (jvrbanac)
    • Castellan Initial Release (redrobot)
  • March 23, 2015
    • Review comment around storing acl users as comma separated values vs separate table. Review Link (arunkant)
    • How to integrate Castellan with Openstack service (arunkant)
      • Related: Castellan release and how to update Castellan resources, i.e. bug tracker (kfarr)
  • March 16, 2015
    • Functional testing
    • Assert parameter order
  • March 2, 2015
    • 100% code coverage options: break packages into 'paper cut' bugs maybe?
  • February 23, 2015
  • February 9, 2015
    • Update on Swift integration with KeyManager, if/when moving to Castellan
    • A note about Barbican packaging effort underway
    • L-Summit space requirements
  • February 2, 2015
    • Kilo 2
    • Quota Support blueprint:
      • Open question: Admin endpoint (9312) vs service admin thats allowed to set quotas on any project it wishes to?
    • Castellan project
      • Which openstack services are driving? What is the timeline for Castellan availability and services started using it.
    • Just a note: L design session etherpad is available here.
    • Migration scripts are not being ran (according to the bugs that I've found) up to which revision should we keep(support)? [jaosorior]
    • A note about Barbican packaging effort underway
  • January 26, 2015
    • KMIP MKEK plugin spec https://review.openstack.org/#/c/148948 [tkelsey]
      • Discussion over the creation of a new plugin vs updating KMIPSecretStore
      • Discussion over Incompatible pluggin versioning (if we decide not to make a second plugin)
    • Content types blueprint:
      • Seems very close...what questions still need to be answered?
    • Per Secret Policy blueprint:
      • Open question: Should whitelisted users be able to decrypt secrets even if they don't have proper Barbican roles?
  • January 19, 2015
  • January 12, 2015
    • Castellan progress [redrobot/rm_work]
    • KMIPSecretStore HSM connection certificates [tkelsey]
    • Blueprints:
      • Quota support: Should we restrict scope? ...So no driver support, no class support?
      • Per-secret RBAC: Whitelist only vs logical expressions? GET list by project-ID or by resources I can GET?
  • December 15, 2014
    • Barbican Mid-Cycle [redrobot]
  • December 1, 2014
    • Consider video conference to discuss and hopefully land our many outstanding blueprints
  • November 24, 2014
    • Validation for Typed Container data (Certificates, etc) [rm_work]
    • Castellan scope: include CertMgr / ContainerMgr support? [rm_work]
    • Content type
  • November 10, 2014
    • New Core Reviewers
    • RFC 7030
  • October 27, 2014
    • Kilo Design Sessions
    • Atalla ESKM Plugin
    • Barbican T-Shirts
  • Sep 1, 2014
    • Kilo Design Sessions
  • Aug 25, 2014
    • CR Sizes (jvrbanac)
    • String interpolation in debug logging (redrobot, rellerreller)
    • Python 3 support (rellerrellera)
  • Aug 18, 2014
    • Juno Home Stretch (woodsier)
  • Aug 4, 2014
    • #openstack-barbican on eavesdrop
  • July 21, 2014
    • (redrobot) Expiring Launchpad BPs after 5 days
  • June 23, 2014
    • Mid-cycle meetup in two weeks.
  • June 16, 2014
    • Mid-cycle meetup
  • April 7, 2014
    • malini - update on Secuirty Guide documentation
    • alee_/atiwari - Crypto plugin changes
    • arunkant - Target support in barbican policy enforcement [1]
    • jraim - Support for debug mode start in barbican [2], can be merged?

Meeting organizers