*** gyee has quit IRC | 00:06 | |
*** rsyed is now known as rsyed_away | 00:29 | |
*** rsyed_away is now known as rsyed | 00:30 | |
*** mkam has quit IRC | 00:32 | |
*** jorge_munoz has quit IRC | 00:47 | |
*** jillysciarilly has quit IRC | 01:03 | |
*** lbragstad has quit IRC | 01:07 | |
*** reaperhulk has quit IRC | 01:07 | |
*** alee has quit IRC | 01:08 | |
*** rm_work has quit IRC | 01:08 | |
*** hockeynut has quit IRC | 01:08 | |
*** jroll has quit IRC | 01:09 | |
*** russellb has quit IRC | 01:09 | |
*** jroll has joined #openstack-barbican | 01:13 | |
*** russellb has joined #openstack-barbican | 01:15 | |
*** alee has joined #openstack-barbican | 01:15 | |
*** hockeynut has joined #openstack-barbican | 01:21 | |
*** lbragstad_ has joined #openstack-barbican | 01:21 | |
*** jillysciarilly has joined #openstack-barbican | 01:21 | |
*** reaperhulk has joined #openstack-barbican | 01:21 | |
*** rm_work has joined #openstack-barbican | 01:23 | |
*** rm_work has joined #openstack-barbican | 01:23 | |
*** lbragstad_ is now known as lbragstad | 01:26 | |
*** openstackgerrit has joined #openstack-barbican | 01:31 | |
*** jroll has quit IRC | 01:34 | |
*** jroll has joined #openstack-barbican | 01:34 | |
*** woodster_ has quit IRC | 02:00 | |
*** SheenaG1 has joined #openstack-barbican | 02:04 | |
*** SheenaG11 has joined #openstack-barbican | 02:09 | |
*** SheenaG1 has quit IRC | 02:09 | |
*** woodster_ has joined #openstack-barbican | 02:46 | |
*** rsyed is now known as rsyed_away | 03:05 | |
*** openstackgerrit has quit IRC | 03:10 | |
*** tdink has quit IRC | 03:26 | |
*** anteaya has quit IRC | 03:37 | |
*** mordred has quit IRC | 03:43 | |
*** mordred has joined #openstack-barbican | 03:45 | |
*** anteaya has joined #openstack-barbican | 03:45 | |
*** ayoung is now known as ayoung-Zzzz | 03:56 | |
*** tdink has joined #openstack-barbican | 03:57 | |
*** tdink has quit IRC | 04:01 | |
*** dougwig is now known as nvm | 04:05 | |
*** nvm is now known as dougwig | 04:05 | |
*** juantwo has quit IRC | 05:31 | |
*** woodster_ has quit IRC | 07:10 | |
*** tdink has joined #openstack-barbican | 07:27 | |
*** tdink has quit IRC | 07:32 | |
*** jaosorior has joined #openstack-barbican | 08:32 | |
*** akoneru has quit IRC | 12:29 | |
*** alee has quit IRC | 12:40 | |
*** ayoung-Zzzz is now known as ayoung | 12:42 | |
*** jamielennox|away is now known as jamielennox | 12:44 | |
*** gnuoy has joined #openstack-barbican | 12:53 | |
gnuoy | Hi, I'm trying to use barbican with keystone v3 api for the first time. I've been following https://github.com/cloudkeep/barbican/wiki/Integration-with-Keystone-V3-API but when I try and store a secret with a project namespace like /v1/e6c9c8a08c204bb1aab5efa00ab107ee/secrets I get a 404. Dropping the project and just using /v1/secrets works fine. I don't see any errors in the worker or api logs. Does anyone have any ideas where I should look | 13:02 |
---|---|---|
gnuoy | next? | 13:02 |
jvrbanac | gnuoy, it looks like you're trying to include the tenant id in the URI, just requires an X-Auth-Token header which discovers your tenant id. | 13:15 |
jvrbanac | ^Barbican just requires | 13:15 |
gnuoy | jvrbanac, d you mean e6c9... looks like a tenant id ? | 13:16 |
gnuoy | that's a project id as per step 6 of https://github.com/cloudkeep/barbican/wiki/Integration-with-Keystone-V3-API but I may well be misunderstanding that step | 13:18 |
*** rsyed_away is now known as rsyed | 13:18 | |
jvrbanac | gnuoy, We use to include that in the url, but it was removed for Juno. Your X-Auth-Token should scope you to the correct project. | 13:19 |
gnuoy | jvrbanac, perfect, thank you | 13:19 |
jvrbanac | gnuoy, we're trying to move all of our docs out of that old wiki and update them in the process | 13:20 |
gnuoy | jvrbanac, ah, good to know. Where should I be looking ? | 13:20 |
jvrbanac | gnuoy, hopefully, we'll have some of the updates landed in a day or two, but the merged docs will be here: http://docs.openstack.org/developer/barbican/ There isn't really much in there right now. We have a number of doc changes in review right now: https://review.openstack.org/#/q/status:open+project:openstack/barbican,n,z | 13:22 |
gnuoy | jvrbanac, excellent. thanks again for your help | 13:24 |
jvrbanac | gnuoy, unfortunately, things are a little slow right now as people are traveling and on their way to Paris, but we should be landing a bunch of those things within the next few days. | 13:24 |
jvrbanac | gnuoy, np | 13:24 |
*** SheenaG11 has quit IRC | 13:38 | |
*** woodster_ has joined #openstack-barbican | 13:39 | |
*** alee has joined #openstack-barbican | 13:43 | |
*** paul_glass has joined #openstack-barbican | 13:44 | |
*** tdink has joined #openstack-barbican | 14:00 | |
*** akoneru has joined #openstack-barbican | 14:01 | |
*** akoneru has quit IRC | 14:02 | |
*** akoneru has joined #openstack-barbican | 14:02 | |
*** SheenaG1 has joined #openstack-barbican | 14:03 | |
*** SheenaG1 has quit IRC | 14:08 | |
*** tdink has quit IRC | 14:10 | |
*** zz_dimtruck is now known as dimtruck | 14:10 | |
*** tdink has joined #openstack-barbican | 14:15 | |
*** mkam has joined #openstack-barbican | 14:15 | |
*** SheenaG1 has joined #openstack-barbican | 14:19 | |
jvrbanac | Thanks alee! | 14:25 |
alee | jvrbanac, np | 14:25 |
*** mkam_ has joined #openstack-barbican | 14:33 | |
akoneru | woodster_, ping | 14:39 |
woodster_ | akoneru, hello | 14:41 |
akoneru | woodster_, hey. i have question about the barbican.spec file. It seems like the source tar file here - https://launchpad.net/barbican/juno/2014.2 , does not contain files related to keystone listener package. | 14:43 |
akoneru | woodster_, i get No such file/directory errors for config files related to keystone-listener | 14:44 |
akoneru | woodster_, i am trying to package barbican for Fedora | 14:44 |
woodster_ | akoneru, I recall that the keystone listener feature went in for Kilo | 14:47 |
*** kebray has joined #openstack-barbican | 14:48 | |
akoneru | woodster_, oh. ok. thanks! | 14:49 |
woodster_ | akoneru, sorry for the confusion on that. Are you looking to package barbican for a use case you have? Can you package from kilo/master? | 14:51 |
alee | woodster_, we're looking to package barbican for fedora and then ultimately red hat open stack. Typically, fedora packages a specific snapshot/tag rather than master. | 14:54 |
woodster_ | alee, oh I see, thanks | 14:54 |
alee | woodster_, its just a matter of being able to reproduce the build consistently. But also to get something somewhat stable. | 14:55 |
woodster_ | alee, yeah, that is why we are working so hard to shore up the functional testing | 14:56 |
alee | woodster_, that said, we have a lot of flexibility in when we take the snapshot. we can do a git archive at any time. What other major features other than keystone listener are not in juno? | 14:57 |
*** jorge_munoz has joined #openstack-barbican | 15:11 | |
*** mkam has quit IRC | 15:22 | |
*** mkam_ has quit IRC | 15:23 | |
*** mkam has joined #openstack-barbican | 15:25 | |
*** jorge_munoz has quit IRC | 16:05 | |
*** kebray has quit IRC | 16:10 | |
*** kebray has joined #openstack-barbican | 16:17 | |
*** gyee has joined #openstack-barbican | 16:17 | |
*** juantwo has joined #openstack-barbican | 16:33 | |
*** juantwo has quit IRC | 16:33 | |
*** juantwo has joined #openstack-barbican | 16:33 | |
*** kebray has quit IRC | 16:39 | |
*** dimtruck is now known as zz_dimtruck | 16:40 | |
*** kebray has joined #openstack-barbican | 16:40 | |
*** zz_dimtruck is now known as dimtruck | 16:42 | |
*** bdpayne has joined #openstack-barbican | 17:03 | |
*** tkelsey has joined #openstack-barbican | 17:07 | |
*** paul_glass has quit IRC | 17:14 | |
*** mikedillion has joined #openstack-barbican | 17:18 | |
*** jamielennox is now known as jamielennox|away | 17:18 | |
*** jorge_munoz has joined #openstack-barbican | 17:28 | |
*** jorge_munoz has quit IRC | 17:32 | |
*** jaosorior has quit IRC | 17:53 | |
*** mkam has quit IRC | 18:00 | |
*** tdink has quit IRC | 18:02 | |
*** dimtruck is now known as zz_dimtruck | 18:03 | |
*** tdink has joined #openstack-barbican | 18:07 | |
*** jorge_munoz has joined #openstack-barbican | 18:12 | |
*** tkelsey has quit IRC | 18:13 | |
*** rellerreller has joined #openstack-barbican | 18:16 | |
*** jorge_munoz has quit IRC | 18:17 | |
*** tdink has quit IRC | 18:22 | |
*** ayoung has quit IRC | 18:22 | |
*** tdink has joined #openstack-barbican | 18:22 | |
*** mkam has joined #openstack-barbican | 18:26 | |
*** ryanpetrello has joined #openstack-barbican | 18:33 | |
*** paul_glass has joined #openstack-barbican | 18:49 | |
*** ryanpetrello has quit IRC | 18:52 | |
*** kgriffs|afk is now known as kgriffs | 18:54 | |
*** tdink has quit IRC | 19:05 | |
*** zz_dimtruck is now known as dimtruck | 19:09 | |
*** kebray has quit IRC | 19:10 | |
rm_work | redrobot: something changed and it looks like the errors aren't being trapped horrifically by keystone anymore | 19:20 |
rm_work | so that's good | 19:20 |
rm_work | now I'm trying to figure out why the behavior is different with regard to seeing a stacktrace on order delete, but only seeing a clean error message on container delete (nothing to do with that try/catch) | 19:21 |
rm_work | ah and figured it out, my run-config had a --debug in the order one :) | 19:22 |
rm_work | anywho, looks good, my followup CR will actually be to REMOVE the pointless try/except on the container delete | 19:23 |
rm_work | redrobot: ^^ | 19:23 |
redrobot | rm_work I see... so we're happy? | 19:23 |
rm_work | pretty happy yes | 19:23 |
rm_work | keystone did the work for us to fix that shit :) | 19:23 |
rm_work | maybe this was a problem other people had as well | 19:23 |
rm_work | s/people/projects/\ | 19:23 |
*** dimtruck is now known as zz_dimtruck | 19:23 | |
rm_work | err, typo'd my substitution command T_T but yeah\ | 19:24 |
*** tdink has joined #openstack-barbican | 19:25 | |
*** mikedillion has quit IRC | 19:26 | |
*** tdink has quit IRC | 19:26 | |
*** bdpayne has quit IRC | 19:28 | |
rm_work | redrobot: https://review.openstack.org/132098 | 19:28 |
*** ayoung has joined #openstack-barbican | 19:28 | |
rm_work | woodster_: go +2 https://review.openstack.org/#/c/131598/ again :P | 19:28 |
*** rellerreller has quit IRC | 19:30 | |
*** mkam has quit IRC | 19:31 | |
*** kebray has joined #openstack-barbican | 19:37 | |
alee | rm_work, https://review.openstack.org/#/c/131598/ what does keystone do differently now? | 19:40 |
*** kebray has quit IRC | 19:42 | |
*** kebray has joined #openstack-barbican | 19:42 | |
redrobot | alee Sessions in the keystoneclient were eating up exceptions and returning some unuseful errors. Seems to be working differently now. Haven't had a chance to dig into it though. | 19:46 |
alee | redrobot, rm_work - so in this case , keystoneclient no longer throws an AttributeError if the container did not exist? | 19:49 |
rm_work | yes | 19:49 |
rm_work | it actually throws a NotFound with the 404 message | 19:49 |
rm_work | "Not Found (HTTP 404)" | 19:49 |
alee | is that equivalent to a LookupError? Or do we care? | 19:50 |
rm_work | yeah it's actually fine | 19:50 |
alee | ok cool | 19:50 |
rm_work | I just picked LookupError arbitrarily, NotFound might have been more appropriate anyway since that is really what Barbican returns | 19:50 |
*** alee is now known as alee_afk | 19:53 | |
*** zz_dimtruck is now known as dimtruck | 19:54 | |
*** ayoung has quit IRC | 19:59 | |
*** alee_afk has quit IRC | 19:59 | |
woodster_ | Any reviewers out there?: https://review.openstack.org/#/c/131598 | 20:02 |
rm_work | reaperhulk / jvrbanac | 20:03 |
redrobot | also dstufft or codekobe ^^ | 20:04 |
redrobot | once that patch merges I'll release 3.0.0 | 20:04 |
rm_work | redrobot: and the next one! | 20:04 |
redrobot | rm_work you already got 2x+2 and a workflow | 20:04 |
rm_work | oh lol wtf wow | 20:04 |
redrobot | rm_work just being gated by my CR | 20:04 |
rm_work | yeah just noticed :P | 20:04 |
rm_work | 31 minutes from posted to workflow O_o | 20:05 |
redrobot | it's also a 5 line review | 20:06 |
rm_work | truth | 20:06 |
*** rellerreller has joined #openstack-barbican | 20:14 | |
*** mkam has joined #openstack-barbican | 20:19 | |
rm_work | woodster_: https://review.openstack.org/#/c/131889/ | 20:19 |
*** paul_glass has quit IRC | 20:22 | |
*** tdink has joined #openstack-barbican | 20:25 | |
*** gnuoy has quit IRC | 20:32 | |
*** ayoung has joined #openstack-barbican | 20:33 | |
*** gnuoy has joined #openstack-barbican | 20:33 | |
*** tkelsey has joined #openstack-barbican | 20:42 | |
*** tkelsey has quit IRC | 20:46 | |
*** tdink has quit IRC | 20:48 | |
codekobe | I will take a look | 20:50 |
*** SheenaG1 has left #openstack-barbican | 20:54 | |
*** kgriffs is now known as kgriffs|afk | 20:55 | |
*** tdink has joined #openstack-barbican | 20:55 | |
*** kgriffs|afk is now known as kgriffs | 20:55 | |
*** kgriffs is now known as kgriffs|afk | 21:05 | |
woodster_ | codekobe??? Good to see you back in the channel... | 21:06 |
woodster_ | rm_work, thanks | 21:07 |
*** kgriffs|afk is now known as kgriffs | 21:07 | |
woodster_ | rm_work, octavia gate jobs hate you | 21:08 |
rm_work | heh | 21:08 |
rm_work | yeah because python-barbicanclient>=3.0 is in the requirements file :P | 21:08 |
rm_work | and it doesn't exist yet | 21:08 |
rm_work | once it's released i can recheck no bug | 21:08 |
rm_work | and it should just work | 21:08 |
*** SheenaG1 has joined #openstack-barbican | 21:10 | |
*** akoneru has quit IRC | 21:11 | |
codekobe | redrobot i love how you moved "six" before uuid to properly order your imports. PTL stuff right there! | 21:15 |
woodster_ | codekobe, yep he's been putting the spin shine on things around here. Even my old cloudkeep wiki has a target on it now. :) | 21:25 |
codekobe | whose been calling who "sonny" now woodster?? | 21:26 |
woodster_ | no kidding! | 21:27 |
*** bpoulos has joined #openstack-barbican | 21:33 | |
bpoulos | i'm working on the cinder wrapper for barbican (cinder/keymgr/barbican.py) | 21:35 |
bpoulos | and I'm having issues with creating and submitting orders | 21:35 |
bpoulos | and I was wondering if someone would be willing to help | 21:36 |
bpoulos | I get the error HTTPClientError: Provided object does not match schema 'Order': 'type' is a required property | 21:36 |
bpoulos | but it doesn't look like the python-barbicanclient even has a way to specify order type yet | 21:37 |
bpoulos | this example page (https://gist.github.com/jfwood/9080109) for this blueprint (https://blueprints.launchpad.net/barbican/+spec/api-orders-add-more-types) has more details | 21:38 |
bpoulos | but it doesn't look like orders.py in python-barbicanclient uses the new form yet | 21:38 |
woodster_ | bpoulos, a CR is pending to add just that capability to the client now | 21:39 |
bpoulos | ok, wonderful | 21:39 |
rm_work | bpoulos: hey, you might be the person I need to talk to | 21:40 |
woodster_ | bpoulos, the CR is here: https://review.openstack.org/#/c/131598/ | 21:40 |
rm_work | bpoulos: I am working on a similar concept, but for certificates -- modeled on KeyMgr from Cinder. https://review.openstack.org/#/c/131889/ | 21:40 |
bpoulos | woodster_: thanks for the link | 21:41 |
woodster_ | bpoulos, we plan to discuss these sorts of integrations at the summit next week, in case plan to be there | 21:41 |
rm_work | bpoulos: would love if you could take a look and give comments -- and we could discuss what's going to happen in the future with these interfaces | 21:41 |
rm_work | since it seems like your work and my mods would be better served living as a common lib somewhere | 21:41 |
bpoulos | woodster_: i unfortunately will not be there | 21:41 |
*** dimtruck is now known as zz_dimtruck | 21:41 | |
rm_work | bpoulos: cool, neither will i, so we can talk about it here :) | 21:42 |
bpoulos | rm_work: i'll take a look | 21:42 |
rm_work | bpoulos: thanks -- the base for that review was essentially taken directly from cinder (you'll note the copyrights are still from the cinder versions) | 21:42 |
rm_work | trying to keep it compatible so eventually they could be merged together as a common lib | 21:43 |
bpoulos | rm_work: i'll be updating cinder's barbican.py (it's broken now due to changes in python-barbicanclient) and I'll also be adding it to nova | 21:48 |
rm_work | yeah | 21:48 |
rm_work | We have to do the auth differently in Octavia (operating as a service-account, not in a user context) | 21:48 |
bpoulos | rm_work: yeah, i noticed you didn't use the context auth_token, like nova and cinder can | 21:49 |
rm_work | but anyway, would like to see some mechanism for standardizing this code across projects | 21:49 |
*** mkam has quit IRC | 21:57 | |
*** rellerreller has quit IRC | 22:01 | |
*** kgriffs is now known as kgriffs|afk | 22:02 | |
*** kgriffs|afk is now known as kgriffs | 22:03 | |
*** akoneru has joined #openstack-barbican | 22:15 | |
*** rm_work has quit IRC | 22:15 | |
*** rm_mobile has joined #openstack-barbican | 22:16 | |
*** rm_work has joined #openstack-barbican | 22:20 | |
*** rm_work has quit IRC | 22:20 | |
*** rm_work has joined #openstack-barbican | 22:20 | |
*** rsyed is now known as rsyed_away | 22:26 | |
*** lecalcot has joined #openstack-barbican | 22:33 | |
*** lecalcot has quit IRC | 22:39 | |
*** kgriffs is now known as kgriffs|afk | 23:02 | |
rm_work | reaperhulk: you around? :) | 23:02 |
rm_work | reaperhulk / anyone with a +2: sooooo close to getting client 3.0 released -- just need workflow on https://review.openstack.org/#/c/131598/ | 23:03 |
woodster_ | alee, jvrbanac: ^^^^ | 23:08 |
woodster_ | dstufft: ^^^^ | 23:08 |
dstufft | looking | 23:09 |
*** alee_afk has joined #openstack-barbican | 23:16 | |
*** SheenaG1 has quit IRC | 23:19 | |
*** kebray has quit IRC | 23:20 | |
*** tkelsey has joined #openstack-barbican | 23:43 | |
*** AndChat|40521 has joined #openstack-barbican | 23:44 | |
*** tkelsey has quit IRC | 23:47 | |
*** rm_mobile has quit IRC | 23:48 | |
rm_you | woot :) | 23:53 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!