18:00:14 <bdpayne> #startmeeting OpenStack Security Group
18:00:15 <openstack> Meeting started Thu Mar  6 18:00:14 2014 UTC and is due to finish in 60 minutes.  The chair is bdpayne. Information about MeetBot at http://wiki.debian.org/MeetBot.
18:00:16 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
18:00:18 <openstack> The meeting name has been set to 'openstack_security_group'
18:00:27 <bdpayne> Welcome to the OSSG meeting :-)
18:00:32 <bdpayne> #topic Roll Call
18:00:41 <bdpayne> o/ everyone
18:00:58 <srirramhere> hi there, this is sriram
18:00:59 <hyakuhei> yo!
18:01:23 <malini1> hello everyone!
18:01:50 <nkinder> Hi
18:02:34 <bdpayne> welcome everyone
18:02:38 <bdpayne> #topic Agenda
18:02:42 <paulmo> Paul here too
18:02:47 <joel-coffman> hey
18:02:58 <bdpayne> I'd like to discuss the ongoing election process a bit
18:03:03 <bdpayne> I'd also like to review OSSN status
18:03:08 <bdpayne> anything else for today?
18:03:53 <nicolae-sics> Hi, nicolae from the swedish institute of comp science here
18:04:05 <bdpayne> welcome nicolae
18:04:07 <hyakuhei> How about that security review of Keystone, if anyone is here to talk about it that is
18:04:15 <bdpayne> sure, we can add that too
18:04:16 <hyakuhei> welcome nicolae-sics nice to have you here.
18:04:23 <bdpayne> #topic Lead Election
18:04:38 <bdpayne> If you're following the mailing list, you'll know that we now have two candidates
18:04:51 <hyakuhei> Closing date for candidates is the 12th of March.
18:05:02 <bdpayne> yep, that ^^
18:05:10 <bdpayne> so that's next Wed
18:05:35 <bdpayne> thanks for Malini and Sriram for stepping up thus far
18:05:52 <srirramhere> pleasure!
18:06:00 <hyakuhei> Indeed, it's a worthy cause.
18:06:04 <malini1> :-)
18:06:09 <bdpayne> Also, I wanted to give a quick word on the electorate
18:06:26 <bdpayne> I've been working on a spreadsheet that lists everyone that is a member of OSSG launchpad group
18:06:41 <bdpayne> And then I'll be going through and figuring out who is an "active member"
18:06:48 <bdpayne> I'll publish this list before the election starts
18:06:57 <bdpayne> just so that everyone is on the same page and can correct errors, etc
18:07:04 <bdpayne> so please be watching for that
18:07:07 <hyakuhei> Seems reasonable.
18:07:20 <bdpayne> any other questions about the election process?
18:07:48 <bdpayne> ok, great
18:07:53 <bdpayne> #topic OSSN
18:08:01 <bdpayne> I'd like to do a quick review of the open OSSNs
18:08:16 <nkinder> there's a bit of a backlog
18:08:19 <bdpayne> yeah
18:08:37 <bdpayne> nkinder would you like to discuss?
18:08:44 <nkinder> I'll be sending one out today (it actually covers two)
18:08:57 <hyakuhei> Good stuff
18:08:59 <nkinder> It's not marked public yet, so I don't want to discuss the details of it.
18:09:15 <bdpayne> right, I mean discuss the backlog
18:09:21 <hyakuhei> https://bugs.launchpad.net/ossn
18:09:25 <nkinder> I've looked into the one about cinder third-party driver permissions, and will be writing that one up too.
18:09:31 <hyakuhei> We have two in 'new' states
18:09:39 <hyakuhei> i.e need writers / reviewers
18:10:02 <hyakuhei> I'm tied up in other work this week but I'd be happy to review these if someone else wants to have a go at writing them up
18:10:23 <nkinder> srirramhere worked on the noVNC one, but it's still listed in "New" status
18:10:35 <nkinder> I reviewed it, and recommended some changes a while back
18:10:43 <bdpayne> srirramhere can you update the status of that one?
18:11:00 <malini1> i'll take the DOS noVNC one
18:11:21 <hyakuhei> great. So does anyone want/need a review doing?
18:11:24 <srirramhere> I will take a look and make corrections that will make it complete this week
18:11:24 <nkinder> malini1: ok, there's a draft OSSN in the bug, but it needs to have some items addressed
18:11:25 <malini1> i remember seeing something like that a few months back
18:11:42 <hyakuhei> There was a VNC one but I think it may have been orthogonal to this one
18:12:20 <bdpayne> any takers for https://bugs.launchpad.net/ossn/+bug/1268751 ?
18:12:23 <malini1> nkinder and hyakuhei: will check and consult you as necessary, thanks
18:12:25 <bdpayne> this is a token revocation issue
18:12:40 <nkinder> I can look at that one and discuss it with Adam
18:12:50 <bdpayne> ok, thanks
18:13:15 <bdpayne> looks like all of the others have an assignee
18:13:18 <bdpayne> so that's a good step
18:13:21 <nkinder> I have one other thing related to OSSNs
18:13:25 <bdpayne> although most of them are assigned to nkinder ;-)
18:13:47 <hyakuhei> How's the gerrit/git stuff going?
18:14:02 <nkinder> The stackforge repo request isn't moving along, largely because we are discussing putting the OSSN repo under the docs program
18:14:30 <nkinder> annegentle started a discussion on the docs mailing list to float the idea, and I didn't see anyone against it on that side of things
18:14:43 <hyakuhei> What's the subject? I'll dig it out
18:14:54 <nkinder> OSSNs really are docs, and they will feed into the security guide, so I think that makes sense.
18:15:00 <nkinder> hyakuhei: let me get you a link...
18:15:21 <nkinder> hyakuhei: http://lists.openstack.org/pipermail/openstack-docs/2014-February/003833.html
18:15:53 <hyakuhei> thanks :)
18:15:57 <nkinder> Here is the stackforge repo request - https://review.openstack.org/#/c/73157/
18:16:15 <nkinder> I'm fine with it living inthe docs repo, and I'd just like to get this to move along so we can use git/gerrit.
18:16:43 <nkinder> So if nobody has problems with us using the docs repo, I'll sync up with annegentle and see how we can make it happen.
18:16:53 <hyakuhei> Yeah I'm fine with it in docs - I'll reach out to anne
18:16:54 <malini1> nkinder: completely agree with you, anything we can do
18:17:21 <annegentle> great!
18:17:40 <bdpayne> yeah, +1 for just moving ahead with the docs option... would be nice to get that put together
18:18:15 <malini1> BTW https://bugs.launchpad.net/ossn/+bug/1227575 has a long history (no wonder I am familiar with it, was following it at one time). srirramhere has a handle on it, why is it not wrapped up yet?
18:18:19 <nkinder> ok, I'll take an action item to push that forward
18:18:53 <hyakuhei> annegentle: hi there!
18:18:59 <nkinder> malini1: yes, that's what I was mentioning.  A OSSN draft was created, but it needs to have my feedback integrated.
18:19:09 <hyakuhei> So you're going to make this all work and we can get back to the pub annegentle ?
18:20:03 <srirramhere> malini, there is an OSSN for that : /wiki.openstack.org/wiki/OSSN/1227575; nkinder had some review comments; I will incorporate and make it ready ti close
18:20:41 <nkinder> srirramhere: it's not complete/published, so it's not listed among the other OSSNs on the wiki
18:21:19 <nkinder> srirramhere: I would prefer that we don't add drafts to the wiki.  Placing it on the wiki should be a part of the publishing process after it is written and reviewed.
18:21:47 <srirramhere> agreed - hence i didn't add that to wiki
18:21:47 <hyakuhei> +1
18:22:03 <srirramhere> it shouldn't be listed in wiki and last i checked, it is not
18:22:08 <nkinder> srirramhere: it was added, but I removed it from here some time back (https://wiki.openstack.org/wiki/Security_Notes)
18:22:09 <srirramhere> the content is added, but not listed
18:22:43 <srirramhere> ok - i you remember removing it, then i will follow the convention. Sorry for the inconvenience
18:23:24 <nkinder> srirramhere: no problem
18:23:34 <srirramhere> thx
18:23:35 <bdpayne> ok, sounds like we are sync'd on OSSN stuff
18:23:41 <bdpayne> which is excellent
18:23:54 <bdpayne> #topic Keystone Review
18:23:59 <malini1> srirramhere: ping me today after you are done incorporating nkinder edits and lets wrap this one and have nkinder publish tomorrow
18:24:05 <bdpayne> anyone here that can speak to this effort?
18:24:37 <Shohel02> tomorrow we will hv another meeting
18:25:03 <hyakuhei> What time?
18:25:14 <Shohel02> feedbacks r welcome
18:25:37 <Shohel02> 1700 gmt
18:25:58 <hyakuhei> Cool
18:26:08 <bdpayne> Shohel02 Could you provide a quick status update for people that haven't been following it through the other meetings?
18:26:47 <hyakuhei> yes please
18:27:08 <Shohel02> i can sent email later right nw i m using mobile to connect
18:27:41 <bdpayne> sure, perhaps just a note to the openstack-security mailing list
18:27:52 <bdpayne> I believe that there are several people that would like to stay abreast of that work
18:27:59 <bdpayne> and you might even suck in some more people that could help
18:28:01 <bdpayne> :-
18:28:01 <Shohel02> yes certainly
18:28:03 <bdpayne> :-)
18:28:10 <bdpayne> #topic Open Discussion
18:28:18 <bdpayne> anything else on people's minds?
18:28:35 <hyakuhei> Barbican!
18:28:49 <hyakuhei> I don't really have much to contribute other than more people should be contributing :P
18:28:51 <srirramhere> did u all vote for the Private cloud security talk by Bdpayne?
18:29:05 <hyakuhei> We are driving a few interesting features at the moment, it might even be useful soon.
18:29:11 <Shohel02> i did
18:29:41 <bdpayne> thanks for the nod guys :-)
18:29:59 <srirramhere> +!
18:30:11 <nicolae-sics> +1
18:30:26 <hyakuhei> +1
18:31:01 <bdpayne> ok, I guess we are out of time for today
18:31:05 <bdpayne> have a great week
18:31:07 <bdpayne> #endmeeting