*** atiwari has quit IRC | 00:03 | |
*** dimtruck is now known as zz_dimtruck | 00:12 | |
*** ayoung has joined #openstack-barbican | 00:39 | |
*** nkinder has quit IRC | 00:49 | |
*** gyee has quit IRC | 00:49 | |
*** zz_dimtruck is now known as dimtruck | 01:33 | |
*** kebray has joined #openstack-barbican | 01:48 | |
*** juantwo_ has joined #openstack-barbican | 02:05 | |
*** juantwo_ has quit IRC | 02:06 | |
*** juantwo_ has joined #openstack-barbican | 02:06 | |
*** juantwo has quit IRC | 02:08 | |
*** jamielennox has quit IRC | 02:40 | |
*** dimtruck is now known as zz_dimtruck | 02:48 | |
*** kebray has quit IRC | 02:48 | |
*** jamielennox has joined #openstack-barbican | 02:49 | |
*** nkinder has joined #openstack-barbican | 02:54 | |
*** jamielennox has quit IRC | 03:13 | |
*** jamielenz has joined #openstack-barbican | 03:17 | |
*** jamielenz is now known as jamielennox | 03:17 | |
*** akoneru_ has joined #openstack-barbican | 04:48 | |
*** akoneru_ has quit IRC | 04:55 | |
*** juantwo_ has quit IRC | 05:15 | |
*** akoneru_ has joined #openstack-barbican | 05:28 | |
*** akoneru_ has quit IRC | 05:43 | |
*** rm_you| has joined #openstack-barbican | 05:56 | |
*** rm_you has quit IRC | 06:00 | |
*** rm_you|wtf has joined #openstack-barbican | 07:57 | |
*** alee has quit IRC | 08:00 | |
*** rm_you| has quit IRC | 08:00 | |
*** alee has joined #openstack-barbican | 08:00 | |
*** ayoung has quit IRC | 08:23 | |
*** woodster_ has quit IRC | 09:01 | |
*** jaosorior has joined #openstack-barbican | 10:27 | |
*** woodster_ has joined #openstack-barbican | 11:40 | |
*** ayoung has joined #openstack-barbican | 11:47 | |
*** akoneru has joined #openstack-barbican | 12:55 | |
*** joesavak has joined #openstack-barbican | 13:15 | |
*** openstackgerrit has quit IRC | 14:18 | |
alee | redrobot, jvrbanac ping | 14:18 |
---|---|---|
jvrbanac | alee, pong | 14:18 |
*** openstackgerrit has joined #openstack-barbican | 14:19 | |
alee | jvrbanac, hey - quick question -- how do I run the functional tests? | 14:19 |
jvrbanac | The ones within the barbican repo? | 14:19 |
alee | jvrbanac, yes and any outside it too | 14:19 |
alee | jvrbanac, redrobot also I want to revisit your chef scripts to create a dogtag instance and get it working -- where are those again? | 14:20 |
jvrbanac | The ones within the repo are suppose to be executed within devstack, like they are in the gate. However, you can run them outside of devstack if you have keystone setup and a tempest.conf | 14:23 |
alee | jvrbanac, are there instructions somewhere on how to do that? | 14:24 |
jvrbanac | alee, I think the instructions for getting barbican running in devstack are a little old but: https://wiki.openstack.org/wiki/BarbicanDevStack | 14:25 |
jvrbanac | alee, my less than ideal workflow right now uses vagrant to create a devstack that I mess with: https://github.com/jmvrbanac/vagrantfile-collection/tree/master/barbican-devstack | 14:25 |
*** zz_dimtruck is now known as dimtruck | 14:27 | |
alee | jvrbanac, ok - I'll play with that - thanks. Do you know where the chef scripts for dogtag are again? | 14:28 |
jvrbanac | alee, not sure if this is what you're looking for: https://github.com/cloudkeep-ops/chef-dogtag | 14:29 |
alee | jvrbanac, redrobot btw - do the functional tests test any certificate flows? | 14:29 |
jaosorior | Hey guys, can we get more people to give an opinion on this one? https://review.openstack.org/#/c/125106/ | 14:34 |
jvrbanac | alee, I don't think so | 14:39 |
jvrbanac | jaosorior, I was planning on putting up some more examples today | 14:40 |
openstackgerrit | Andreas Jaeger proposed a change to openstack/barbican: Use canonical cover name for coverage https://review.openstack.org/125362 | 14:40 |
jvrbanac | I just didn't want to make that patchset very large | 14:40 |
jaosorior | well, maybe doing subsequent patchsets that depend on that one would be even better | 14:42 |
*** openstackgerrit has quit IRC | 14:47 | |
*** openstackgerrit has joined #openstack-barbican | 14:48 | |
*** juantwo has joined #openstack-barbican | 14:57 | |
*** juantwo has quit IRC | 14:57 | |
*** juantwo has joined #openstack-barbican | 14:58 | |
*** openstackgerrit has quit IRC | 15:02 | |
*** openstackgerrit has joined #openstack-barbican | 15:03 | |
openstackgerrit | Arvind Tiwari proposed a change to openstack/barbican: Code clean-up due to type order enhancement https://review.openstack.org/121269 | 15:16 |
*** bubbva has quit IRC | 15:20 | |
*** bubbva has joined #openstack-barbican | 15:21 | |
rm_work | alee: i wrote the bootstrap script at the bottom of that wiki page -- it still works (was updated recently) AFAIK | 15:26 |
rm_work | it runs the functional tests at the end | 15:26 |
rm_work | let me know if you have any issues getting those to run, I've been through the wringer on that :) | 15:27 |
rm_work | redrobot: I need to talk to Werner, where does he hang out on IRC? | 15:27 |
alee | rm_work, will do. thanks! | 15:27 |
redrobot | rm_work maybe keystone? His nick is nonameentername | 15:29 |
rm_work | redrobot: thanks | 15:29 |
rm_work | redrobot: is he there right now? | 15:29 |
rm_work | don't see him in the channel | 15:30 |
redrobot | rm_work he may still be in San Francisco? He was speaking at Java One, but I'm not sure when he gets back. | 15:30 |
rm_work | oh, ok, cool | 15:30 |
rm_work | hmm | 15:30 |
rm_work | need to find someone else from Identity then | 15:30 |
redrobot | rm_work Georgie is my 2nd goto identity guy | 15:31 |
redrobot | rm_work his nick is jorge_munoz | 15:31 |
rm_work | i found their internal channel | 15:31 |
rm_work | i'll hit them up there | 15:31 |
rm_work | oh hey, jorge_munoz is here :P | 15:32 |
redrobot | rm_work well, his znc is anyway... | 15:32 |
rm_work | heh | 15:32 |
jorge_munoz | I’m here \o | 15:34 |
jorge_munoz | Whats up? | 15:34 |
rm_work | ah i'll go to PM | 15:36 |
*** rellerreller has joined #openstack-barbican | 15:40 | |
*** dimtruck is now known as zz_dimtruck | 15:40 | |
*** mikedillion has joined #openstack-barbican | 15:42 | |
rm_work | jorge_munoz: see PM? | 15:43 |
*** rose has joined #openstack-barbican | 15:48 | |
*** jamielennox has quit IRC | 15:49 | |
*** juantwo has quit IRC | 15:55 | |
*** atiwari has joined #openstack-barbican | 15:58 | |
*** xaeth has left #openstack-barbican | 15:59 | |
*** jamielennox has joined #openstack-barbican | 16:00 | |
*** juantwo has joined #openstack-barbican | 16:01 | |
*** jsavak has joined #openstack-barbican | 16:03 | |
*** joesavak has quit IRC | 16:04 | |
*** jamielennox has quit IRC | 16:08 | |
*** zz_dimtruck is now known as dimtruck | 16:09 | |
*** lisaclark1 has joined #openstack-barbican | 16:11 | |
*** alpha_ori_ has joined #openstack-barbican | 16:14 | |
*** jamielennox has joined #openstack-barbican | 16:16 | |
*** alpha_ori has quit IRC | 16:17 | |
*** dstufft has quit IRC | 16:17 | |
*** ayoung has quit IRC | 16:17 | |
*** alpha_ori_ is now known as alpha_ori | 16:17 | |
*** openstackgerrit has quit IRC | 16:18 | |
*** dstufft has joined #openstack-barbican | 16:18 | |
*** lisaclark1 has quit IRC | 16:18 | |
*** ayoung has joined #openstack-barbican | 16:18 | |
*** openstackgerrit has joined #openstack-barbican | 16:19 | |
*** lisaclark1 has joined #openstack-barbican | 16:24 | |
*** gyee has joined #openstack-barbican | 16:25 | |
*** juantwo has quit IRC | 16:46 | |
*** jaosorior has quit IRC | 16:53 | |
*** gyee has quit IRC | 16:59 | |
*** juantwo has joined #openstack-barbican | 17:07 | |
*** lisaclark1 has quit IRC | 17:08 | |
openstackgerrit | A change was merged to openstack/barbican: Code clean-up due to type order enhancement https://review.openstack.org/121269 | 17:13 |
*** joesavak has joined #openstack-barbican | 17:14 | |
*** lisaclark1 has joined #openstack-barbican | 17:15 | |
*** gyee has joined #openstack-barbican | 17:15 | |
*** jsavak has quit IRC | 17:16 | |
*** bdpayne has joined #openstack-barbican | 17:19 | |
openstackgerrit | John Vrbanac proposed a change to openstack/barbican: Cleaning up secret functional tests https://review.openstack.org/125435 | 17:29 |
jenkins-keep | Project openstack-barbican-cloudcafe build #50: STILL FAILING in 8 min 20 sec: http://jenkins.cloudkeep.io/job/openstack-barbican-cloudcafe/50/ | 17:31 |
jenkins-keep | arvind.tiwari: Code clean-up due to type order enhancement | 17:31 |
openstackgerrit | John Vrbanac proposed a change to openstack/barbican: Cleaning up secret functional tests https://review.openstack.org/125435 | 17:32 |
*** akoneru is now known as akoneru_lunch | 17:39 | |
*** jaosorior has joined #openstack-barbican | 17:40 | |
*** lisaclark1 has quit IRC | 17:51 | |
*** lisaclark1 has joined #openstack-barbican | 18:00 | |
*** lisaclark1 has quit IRC | 18:03 | |
*** lisaclark1 has joined #openstack-barbican | 18:04 | |
alee | redrobot, ping | 18:20 |
*** akoneru_lunch is now known as akoneru | 18:21 | |
*** jaosorior has quit IRC | 18:55 | |
*** jaosorior has joined #openstack-barbican | 18:57 | |
*** rellerreller has quit IRC | 19:01 | |
redrobot | alee pong | 19:04 |
arunkant | woodster_ , redrobot : Do we need more review on https://review.openstack.org/#/c/110817/ to get this merged? | 19:04 |
alee | redrobot, I sent you some updated config files for the dogtag chef install. | 19:04 |
alee | redrobot, those work for me in terms of of installing a ca and kra. | 19:05 |
alee | redrobot, perhaps we can work on getting those chef scripts working. | 19:05 |
alee | redrobot, I also pointed you to a new copr repo build. | 19:05 |
redrobot | alee awesome! I'll give them a try as soon as I get a chance... which probably wont be until next week... Going to a conference out of town tomorrow. Gotta re | 19:06 |
redrobot | Gotta release RC1 before then.. | 19:06 |
alee | redrobot, ok great | 19:06 |
redrobot | alee I also want to try using docker containers... I want to see what will be easier/faster to spin up for automated tests and such. | 19:07 |
alee | sure | 19:07 |
chellygel | alee, what do you mean by KRA? | 19:08 |
redrobot | arunkant there was some concerns from a couple of core devs about merging that patch the day before we release RC1. :( I think we may have to wait until next week and merge it for Kilo | 19:08 |
alee | chellygel, kra is the same as the drm -- key recovery authority | 19:09 |
redrobot | chellygel it's dogtag stuff :) | 19:09 |
redrobot | at least that's how I filed it in my brain... | 19:09 |
chellygel | alee, -- thanks! | 19:09 |
alee | chellygel, thats what the drm used to be called till someone in marketing decided on drm because kra sounded scary | 19:09 |
alee | chellygel, the devs never liked drm though and all the code says kra | 19:10 |
redrobot | lol, that's why the marketing folks make the big bucks. | 19:10 |
chellygel | alee, kra is a few characters away from kraken -- i can see why its scary :P | 19:10 |
alee | and we just got approval to change it back to kra :) | 19:10 |
arunkant | redrobot: So after RC1, are there no more juno release? | 19:10 |
alee | seems that "drm" hasgotten a bad rap over the last few years .. | 19:11 |
*** lisaclark1 has quit IRC | 19:11 | |
chellygel | alee, yeah, from a gaming perspective, the term gets nasty looks... but that might be unrelated :P | 19:12 |
redrobot | arunkant hopefull not. RC stands for Release Candidate. It should be the build that is ready to be released to the wild. We'll be supporting the Juno release though, so if there's security fixes or critical bugs, we'll backport them. | 19:12 |
*** lisaclark1 has joined #openstack-barbican | 19:14 | |
arunkant | redrobot: Okay. I thought there is RC2 after that, may be not. This CR has been pending for a while. Hopefully it will get merge someday as tired of doing rebases. | 19:15 |
openstackgerrit | John Wood proposed a change to openstack/barbican: Sync SQLAlchemy lifecycle to request cycle https://review.openstack.org/125468 | 19:16 |
redrobot | arunkant RC2 is only for critical bugfixes. It's preferable to only have an RC1. | 19:27 |
redrobot | arunkant and yes, we'll get it merged as soon as RC1 is out. | 19:27 |
*** dimtruck is now known as zz_dimtruck | 19:38 | |
redrobot | hockeynut ping | 19:40 |
hockeynut | redrobot speak o wise one | 19:40 |
redrobot | hockeynut have you run into an issue where Barbican is configured to talk to a Keystone that is using PKI tokens | 19:41 |
redrobot | so Barbican tries to get the certificate | 19:41 |
redrobot | but for some reason it doesn't store the certs | 19:41 |
redrobot | so authentication of tokens fails afterwards? | 19:41 |
hockeynut | I recall a tokens vs uuid issue a while back | 19:42 |
redrobot | If I run Barbican in a Docker container, the cert is configured correclty, but if I run Barbican locally on my mac, the cert doesn't get cached. | 19:42 |
hockeynut | nothing in /tmp ? | 19:42 |
hockeynut | should have 3 pem files in /tmp/barbican/cache | 19:43 |
redrobot | so /tmp/barbican/cache is there, but it's empty | 19:44 |
hockeynut | is your /etc/barbican/barbican-api-paste.ini setup for keystone? | 19:45 |
hockeynut | default is not | 19:45 |
hockeynut | under [pipline:barbican_api] you should have this UNcommented: | 19:46 |
hockeynut | pipeline = keystone_authtoken context apiapp | 19:46 |
redrobot | yep | 19:46 |
hockeynut | and this one commented out: | 19:46 |
hockeynut | #pipeline = unauthenticated-context apiapp | 19:46 |
hockeynut | then down to [filter:keystone_authtoken] | 19:47 |
hockeynut | auth_host points to your keystone server (default is localhost) | 19:47 |
hockeynut | admin_password probably needs to be adjusted too | 19:47 |
redrobot | hockeynut so, in my docker container, it seems the admin_password is ignored, b/c it's not set correctly, yet keystone integration works | 19:48 |
redrobot | this is the stacktrace I'm seeing http://paste.openstack.org/show/117571/ | 19:48 |
hockeynut | <click> | 19:48 |
hockeynut | ah, ok | 19:49 |
hockeynut | been there, got bitten by that | 19:49 |
*** zz_dimtruck is now known as dimtruck | 19:49 | |
hockeynut | let me dig out the wiki update we did for that | 19:51 |
hockeynut | https://github.com/cloudkeep/barbican/wiki/Developer-Guide#troubleshooting | 19:52 |
hockeynut | see item 1 | 19:52 |
redrobot | hockeynut I'll give that a try, thanks! | 19:53 |
*** lisaclark1 has quit IRC | 20:12 | |
*** nkinder has quit IRC | 20:29 | |
*** akoneru has quit IRC | 20:46 | |
*** mikedillion has quit IRC | 20:51 | |
*** nkinder has joined #openstack-barbican | 20:51 | |
*** juantwo has quit IRC | 20:52 | |
*** SheenaG1 has joined #openstack-barbican | 21:07 | |
alee | rm_work, jvrbanac ping | 21:09 |
alee | rm_work, jvrbanac trying that script .. https://gist.github.com/rm-you/6feacb91182f5c011018 | 21:09 |
alee | and running into some issues .. | 21:10 |
rm_work | yeah? | 21:10 |
*** joesavak has quit IRC | 21:10 | |
rm_work | are you on a clean Ubuntu 14.04 VM? | 21:10 |
alee | rm_work, on line 45 | 21:10 |
rm_work | or is this your local system | 21:10 |
alee | rm_work, my local system and its fedora 20 | 21:10 |
rm_work | hmm k | 21:10 |
rm_work | NO idea about fedora | 21:11 |
alee | should not matter for what we're doing though .. | 21:11 |
rm_work | but, what is wrong with that pip line? | 21:11 |
rm_work | oh, err, this script is assumed to be run as root, BTW | 21:11 |
alee | rm_work, on that line it refers to /opt/openstack/barbican | 21:11 |
rm_work | yeah | 21:11 |
alee | yup - got that :) | 21:11 |
alee | now what creates that directory? | 21:11 |
rm_work | stack.sh does | 21:12 |
rm_work | it does all of the git clones | 21:12 |
alee | yeah thats what I figured but I dont see it being created .. ok - looking into the logs .. | 21:12 |
rm_work | did you do the first bits too? | 21:13 |
rm_work | cp /tmp/barbican/contrib/devstack/local.conf /tmp/devstack/ | 21:13 |
rm_work | you should be using the local.conf from barbican | 21:13 |
rm_work | otherwise, you can manually just add "barbican" to your ENABLED_SERVICES i think | 21:13 |
rm_work | if you have your own localrc or something | 21:13 |
alee | that should be done .. I may be running into perms issues -- looking | 21:15 |
alee | rm_work, yeah - perm problems .. causes stack.sh to exit prematurely | 21:25 |
rm_work | ah | 21:25 |
rm_work | hmm | 21:25 |
rm_work | are you doing it as the new stack user? | 21:25 |
rm_work | even locally you should REALLY use the "create stack user" script | 21:26 |
rm_work | it gets messy otherwise | 21:26 |
alee | I was using myself first and am now using a new stack user -- I just extricated the mess. | 21:27 |
rm_work | though, if you get a perms issue on anything in /var/run/user/* then | 21:27 |
rm_work | it's a little weird | 21:27 |
alee | I did -- but I think thats resolved -- on running the tests though I get this ..The Barbican (non-admin) API failed to respond within 20 seconds | 21:30 |
alee | and yeah - I get this --- > df: '/run/user/1000/gvfs': Permission denied | 21:31 |
rm_work | yep | 21:33 |
*** jaosorior has quit IRC | 21:33 | |
rm_work | the only way to fix that that I found was to actually log out and log in with the stack user | 21:33 |
rm_work | :( | 21:33 |
rm_work | I am not sure what controls that gvfs thing | 21:33 |
*** lisaclark1 has joined #openstack-barbican | 21:33 | |
rm_work | as the logged in user, it's there and looks normal, but once you SU, it gets wonky | 21:33 |
rm_work | or possibly ssh stack@localhost | 21:34 |
*** jaosorior has joined #openstack-barbican | 21:34 | |
rm_work | instead of su - stack | 21:34 |
*** juantwo has joined #openstack-barbican | 21:40 | |
*** juantwo has quit IRC | 21:41 | |
*** juantwo has joined #openstack-barbican | 21:41 | |
*** joesavak has joined #openstack-barbican | 21:47 | |
rm_work | alee: any luck? | 21:52 |
alee | rm_work, not so far -- I think stack.sh is still exiting prematurely | 21:52 |
alee | rm_work, this time on connecting to mysql | 21:53 |
rm_work | hmm | 21:53 |
alee | + sudo mysqladmin -u root password password | 21:53 |
alee | mysqladmin: connect to server at 'localhost' failed | 21:53 |
alee | error: 'Access denied for user 'root'@'localhost' (using password: NO)' | 21:53 |
rm_work | did you let it set up and configure your sql stuff? or did you already have mysql installed and configured? | 21:53 |
rm_work | you may need to tell it your root SQL password in the config | 21:53 |
rm_work | it will assume it was not set\ | 21:53 |
*** dimtruck is now known as zz_dimtruck | 21:53 | |
alee | where would that go? local.conf? | 21:54 |
alee | rm_work, I need to play with it some more -- the problem is that I ran this before as a different user and set things up | 21:56 |
alee | need to unset things again | 21:57 |
rm_work | alee: yeah, local.conf *or* localrc | 22:00 |
rm_work | I am not sure how it picks actuallyt | 22:00 |
rm_work | but both seem to work (albeit maybe slightly differently?? >_>) | 22:00 |
alee | rm_work, ok - progress -- I set the password to what I had used before and it got further .. | 22:02 |
*** joesavak has quit IRC | 22:03 | |
*** mikedillion has joined #openstack-barbican | 22:10 | |
*** atiwari has quit IRC | 22:12 | |
rm_work | what's the error on now? | 22:22 |
rm_work | I've seriously run into like... every error imaginable, plus some >_> | 22:23 |
*** lisaclark1 has quit IRC | 22:23 | |
alee | rm_work, gotta go to dinner - but I think I'm almost there. the main error was that I had set stuff up before with different passwords | 22:38 |
rm_work | ah | 22:38 |
rm_work | yeah | 22:38 |
rm_work | that's why i use a VM and nuke it *every day* | 22:38 |
alee | rm_work, now at least it runs the tests | 22:38 |
rm_work | and why I needed a bootstrap script so badly :P | 22:38 |
alee | yay -- and they just passed :) | 22:38 |
rm_work | cool | 22:38 |
alee | yeah - a bootstrap script is very useful | 22:38 |
alee | this would totally suck without one | 22:39 |
alee | so thanks! | 22:39 |
rm_work | seriously, your devstack will be out of date in like, an hour | 22:39 |
rm_work | you will need to redo it <_< | 22:39 |
rm_work | lol, np :) enjoy dinner | 22:39 |
alee | rm_work, one thing I would suggest is some cleanup things at the top | 22:39 |
rm_work | for the record, I use a VM and then ssh -X pycharm | 22:39 |
rm_work | :P | 22:39 |
rm_work | yeah, cleanup is a mess, easier to nuke the VM | 22:40 |
rm_work | :) | 22:40 |
alee | # cleanup | 22:40 |
alee | rm -rf /tmp/new | 22:40 |
alee | rm -rf /tmp/barbican | 22:40 |
alee | rm -rf /tmp/devstack | 22:40 |
alee | rm -rf /etc/tempest | 22:40 |
alee | rm -rf /opt/stack/devstack | 22:40 |
alee | rm -rf /opt/stack/new | 22:40 |
rm_work | apt-get uninstall --purge * | 22:40 |
rm_work | lol | 22:40 |
alee | yeah - you can do that too .. | 22:41 |
rm_work | well, any cleanup is kinda half-ass without cleaning that and the python environment | 22:41 |
rm_work | so | 22:41 |
alee | yeah | 22:41 |
rm_work | like I said, 10000000% easier to nuke the VM and start over | 22:41 |
alee | cool - thanks dinner time .. | 22:42 |
rm_work | this is Openstack development -- EMBRACE THE CLOUD | 22:42 |
rm_work | You were adopted by the Cloud -- I was BORN into it. | 22:42 |
rm_work | -- Cloudbane | 22:42 |
rm_work | sorry -- "Oh, you think the Cloud is your ally, but you merely adopted the Cloud. I was born in it, molded by it." --Cloudbane | 22:43 |
openstackgerrit | Douglas Mendizábal proposed a change to openstack/barbican: Fix 500 error when PUTing an order https://review.openstack.org/125516 | 22:58 |
*** SheenaG1 has quit IRC | 23:06 | |
*** mikedillion has quit IRC | 23:09 | |
openstackgerrit | Douglas Mendizábal proposed a change to openstack/barbican: Fix 500 error when PUTing an order https://review.openstack.org/125516 | 23:16 |
*** jaosorior has quit IRC | 23:53 | |
*** rose has quit IRC | 23:54 | |
*** mikedillion has joined #openstack-barbican | 23:55 | |
openstackgerrit | John Wood proposed a change to openstack/barbican: Sync SQLAlchemy lifecycle to request cycle https://review.openstack.org/125468 | 23:58 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!