| *** ianw is now known as Guest52 | 01:07 | |
| *** Guest52 is now known as ianw | 01:29 | |
| *** zbr is now known as Guest76 | 07:40 | |
| *** rpittau|afk is now known as rpittau | 07:41 | |
| Luzi | #startmeeting image_encryption | 13:00 |
|---|---|---|
| opendevmeet | Meeting started Mon Jun 21 13:00:24 2021 UTC and is due to finish in 60 minutes. The chair is Luzi. Information about MeetBot at http://wiki.debian.org/MeetBot. | 13:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 13:00 |
| opendevmeet | The meeting name has been set to 'image_encryption' | 13:00 |
| Luzi | #topic Roll Call | 13:00 |
| fungi | ohai | 13:01 |
| Luzi | hi fungi | 13:02 |
| redrobot | 👋 | 13:04 |
| Luzi | hi redrobot | 13:04 |
| Luzi | lets start | 13:04 |
| rosmaita | o/ | 13:04 |
| Luzi | #topic Barbican Consumer API Update | 13:05 |
| Luzi | redrobot, are there news about the barbican consumer api? | 13:05 |
| redrobot | Little to no progress unfortunately. I've been working on getting the Vault backend fixed up. | 13:05 |
| Luzi | okay thank you | 13:05 |
| redrobot | There were some issues with the migration | 13:05 |
| redrobot | that adds the consumers table | 13:05 |
| redrobot | due to a new version of SQLAlchemy | 13:06 |
| redrobot | we did merge a couple of patches that fix it | 13:06 |
| Luzi | ah thats unfortunate | 13:06 |
| Luzi | #topic spec-lite update | 13:07 |
| Luzi | it's still open and i think dansmith posted a comment about it maybe being better as a full spec | 13:07 |
| Luzi | i would like to talk to him, he is also in one of the US-timezones right? | 13:08 |
| rosmaita | do you have the url handy? | 13:08 |
| rosmaita | he's in pacific timezone | 13:08 |
| fungi | Luzi: yes, utc-8 | 13:08 |
| Luzi | https://review.opendev.org/c/openstack/glance-specs/+/792134/ | 13:08 |
| fungi | or i suppose it's utc-7 this time of year | 13:08 |
| Luzi | okay, well i hope i can manage it this week | 13:08 |
| Luzi | i wonder if he is talking about the this specific spec-lite or if maybe he doesn't know about the former spec for which the WIP-patch was originally for | 13:09 |
| Luzi | well i will have to ask him personally | 13:11 |
| Luzi | thats all from my side. | 13:11 |
| Luzi | do you have any other topics you would like to talk about | 13:11 |
| rosmaita | was just looking at dan's comments | 13:11 |
| rosmaita | i think they apply to both the spec and spec-lite | 13:12 |
| fungi | Luzi: dansmith just sent e-mail to the openstack-discuss ml, so may already be awake/around | 13:12 |
| rosmaita | i mean his comments at https://review.opendev.org/c/openstack/glance/+/705445/4/glance/api/v2/images.py#177 and https://review.opendev.org/c/openstack/glance/+/705445/4/glance/api/v2/images.py#766 | 13:12 |
| Luzi | hm the WIP-patch was just a first draft, so i worry more about the spec-lite. | 13:15 |
| Luzi | my question is: is this spec-lite sufficient or will it be necessary to write another spec? | 13:16 |
| rosmaita | i guess the point you'll want to make is that this encryption model has the end user managing the secrets. The secret consumer API will help provide some safeguards, but there's nothing we can do to prevent users from deleting an in-use secret and making some resources inaccessible | 13:16 |
| rosmaita | on the other hand, we don't want to make the lives of users completely miserable | 13:16 |
| rosmaita | i guess my advice would be to put up a patch to the original spec for how you want to handle the various error scenarios dan points out (and others that occur to you) | 13:18 |
| rosmaita | because i think you need to handle them the same way with & without the secret consumers API | 13:19 |
| Luzi | rosmaita, well thats a starting point. | 13:20 |
| rosmaita | Luzi: can you attend the weekly glance meeting (1400 utc thursday?) | 13:21 |
| Luzi | well, i think this week i could | 13:22 |
| rosmaita | i suggest put yourself on the agenda and find out from the team what revisions they would like and whether they should be spec, spec-lite, or WIP patch | 13:22 |
| rosmaita | that way we'll all be on the same page | 13:22 |
| rosmaita | https://etherpad.opendev.org/p/glance-team-meeting-agenda | 13:23 |
| Luzi | okay i added this to the agenda | 13:25 |
| Luzi | are there any other topics you would like to talk about? | 13:26 |
| rosmaita | nothing from me | 13:26 |
| fungi | i got nothin' | 13:28 |
| Luzi | okay thank you for joining and have a nice week | 13:28 |
| Luzi | #endmeeting image_encryption | 13:29 |
| opendevmeet | Meeting ended Mon Jun 21 13:29:16 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 13:29 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/image_encryption/2021/image_encryption.2021-06-21-13.00.html | 13:29 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/image_encryption/2021/image_encryption.2021-06-21-13.00.txt | 13:29 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/image_encryption/2021/image_encryption.2021-06-21-13.00.log.html | 13:29 |
| fungi | thanks Luzi! | 13:30 |
| *** abhishekk is now known as akekane|home | 13:41 | |
| *** akekane|home is now known as abhishekk | 13:55 | |
| *** rpittau is now known as rpittau|afk | 16:00 | |
| Haunted330 | This channel is closed. You are going to have to leave. | 23:47 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!