| *** jorge_munoz has quit IRC | 00:00 | |
| *** kebray_ has joined #openstack-barbican | 00:01 | |
| *** kebray has quit IRC | 00:02 | |
| *** ryanpetrello has quit IRC | 00:04 | |
| *** dave-mccowan_ has joined #openstack-barbican | 00:04 | |
| *** dave-mccowan has quit IRC | 00:06 | |
| *** dave-mccowan_ is now known as dave-mccowan | 00:06 | |
| *** david-lyle is now known as david-lyle_afk | 00:11 | |
| *** kebray_ has quit IRC | 00:16 | |
| *** kebray has joined #openstack-barbican | 00:17 | |
| *** kebray has quit IRC | 00:22 | |
| *** ryanpetrello has joined #openstack-barbican | 00:42 | |
| *** nkinder has joined #openstack-barbican | 00:43 | |
| *** jamielennox is now known as jamielennox|away | 00:48 | |
| *** gyee has quit IRC | 00:50 | |
| *** mikedillion has quit IRC | 01:00 | |
| *** mikedillion has joined #openstack-barbican | 01:01 | |
| *** mikedillion has quit IRC | 01:14 | |
| *** xianghui has joined #openstack-barbican | 01:15 | |
| *** ryanpetrello has quit IRC | 01:26 | |
| *** xianghui has quit IRC | 01:32 | |
| *** dave-mccowan_ has joined #openstack-barbican | 01:57 | |
| *** dave-mccowan has quit IRC | 01:59 | |
| *** dave-mccowan_ is now known as dave-mccowan | 01:59 | |
| *** kebray has joined #openstack-barbican | 02:17 | |
| *** kebray has quit IRC | 02:24 | |
| *** kebray has joined #openstack-barbican | 02:25 | |
| *** alee_ has joined #openstack-barbican | 02:37 | |
| *** ryanpetrello has joined #openstack-barbican | 02:48 | |
| *** ryanpetrello has quit IRC | 02:55 | |
| *** stanzi has joined #openstack-barbican | 03:07 | |
| *** SheenaG1 has quit IRC | 03:07 | |
| *** ryanpetrello has joined #openstack-barbican | 03:10 | |
| *** ryanpetrello has quit IRC | 03:14 | |
| *** kgriffs|afk is now known as kgriffs | 03:21 | |
| *** zz_dimtruck is now known as dimtruck | 03:23 | |
| *** kebray_ has joined #openstack-barbican | 03:24 | |
| *** kebray has quit IRC | 03:25 | |
| *** jamielennox|away is now known as jamielennox | 03:26 | |
| *** stanzi has quit IRC | 03:38 | |
| *** stanzi has joined #openstack-barbican | 03:44 | |
| *** dimtruck is now known as zz_dimtruck | 03:45 | |
| *** kebray_ has quit IRC | 03:47 | |
| *** kebray has joined #openstack-barbican | 03:47 | |
| *** kebray has quit IRC | 03:50 | |
| *** kebray has joined #openstack-barbican | 04:14 | |
| *** stanzi has quit IRC | 04:33 | |
| *** dave-mccowan has quit IRC | 04:48 | |
| *** kgriffs is now known as kgriffs|afk | 04:52 | |
| *** stanzi has joined #openstack-barbican | 04:54 | |
| *** stanzi has quit IRC | 05:21 | |
| *** stanzi has joined #openstack-barbican | 05:22 | |
| *** stanzi has quit IRC | 05:23 | |
| *** stanzi has joined #openstack-barbican | 05:24 | |
| *** rm_you| has joined #openstack-barbican | 05:25 | |
| openstackgerrit | greghaynes proposed openstack/barbican: WIP Create snakoil certificate plugin https://review.openstack.org/140575 | 05:27 |
|---|---|---|
| *** rm_you has quit IRC | 05:29 | |
| openstackgerrit | greghaynes proposed openstack/barbican: Make flake8 ignore *.egg https://review.openstack.org/140578 | 05:37 |
| *** gyee has joined #openstack-barbican | 06:08 | |
| *** stanzi has quit IRC | 06:21 | |
| *** alee_ has quit IRC | 06:36 | |
| *** alee_ has joined #openstack-barbican | 06:37 | |
| *** stanzi has joined #openstack-barbican | 06:51 | |
| *** stanzi has quit IRC | 07:00 | |
| *** gyee has quit IRC | 07:58 | |
| *** woodster_ has quit IRC | 08:30 | |
| *** darrenmoffat has quit IRC | 08:37 | |
| *** darrenmoffat has joined #openstack-barbican | 08:38 | |
| openstackgerrit | greghaynes proposed openstack/barbican: WIP Create snakoil certificate plugin https://review.openstack.org/140575 | 09:39 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: WIP Create snakeoil certificate plugin https://review.openstack.org/140575 | 09:43 |
| greghaynes | heh, thanks | 09:44 |
| *** kebray has quit IRC | 10:30 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Replace model related instances of tenant https://review.openstack.org/140645 | 11:12 |
| *** jamielennox is now known as jamielennox|away | 11:38 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Replace model related instances of tenant https://review.openstack.org/140645 | 12:05 |
| *** david-lyle_afk is now known as david-lyle | 12:09 | |
| *** david-lyle is now known as david-lyle_afk | 12:17 | |
| *** david-lyle_afk is now known as david-lyle | 12:17 | |
| *** david-lyle is now known as david-lyle_afk | 12:23 | |
| *** david-lyle_afk is now known as david-lyle | 12:23 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/python-barbicanclient: Replace trivial docstring instances of tenant https://review.openstack.org/140658 | 12:23 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/python-barbicanclient: Replace trivial docstring instances of tenant https://review.openstack.org/140658 | 12:24 |
| *** jaosorior has joined #openstack-barbican | 12:27 | |
| *** david-lyle is now known as david-lyle_afk | 12:31 | |
| *** david-lyle_afk is now known as david-lyle | 12:31 | |
| *** ryanpetrello has joined #openstack-barbican | 12:36 | |
| *** david-lyle is now known as david-lyle_afk | 13:00 | |
| *** stanzi has joined #openstack-barbican | 13:08 | |
| *** stanzi has quit IRC | 13:13 | |
| openstackgerrit | John Wood proposed openstack/barbican: Fix diff-cover gate broken by parent CR https://review.openstack.org/139894 | 13:18 |
| *** dave-mccowan has joined #openstack-barbican | 13:27 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Replace 'tenants' for 'projects' in documentation https://review.openstack.org/140679 | 13:40 |
| *** kgriffs|afk is now known as kgriffs | 14:00 | |
| *** nkinder has quit IRC | 14:13 | |
| *** woodster_ has joined #openstack-barbican | 14:18 | |
| *** SheenaG1 has joined #openstack-barbican | 14:24 | |
| *** ryanpetrello_ has joined #openstack-barbican | 14:31 | |
| *** ryanpetrello has quit IRC | 14:31 | |
| *** ryanpetrello_ is now known as ryanpetrello | 14:31 | |
| *** dave-mccowan_ has joined #openstack-barbican | 14:36 | |
| *** SheenaG1 has quit IRC | 14:37 | |
| *** dave-mccowan has quit IRC | 14:37 | |
| *** dave-mccowan_ is now known as dave-mccowan | 14:37 | |
| *** lisaclark has joined #openstack-barbican | 14:49 | |
| *** SheenaG1 has joined #openstack-barbican | 14:53 | |
| *** nkinder has joined #openstack-barbican | 15:00 | |
| *** zz_dimtruck is now known as dimtruck | 15:05 | |
| openstackgerrit | Michael McCune proposed openstack/barbican: Changing ModelBase.save to correct updated time https://review.openstack.org/140423 | 15:10 |
| *** kgriffs is now known as kgriffs|afk | 15:20 | |
| *** ametts has joined #openstack-barbican | 15:32 | |
| *** lisaclark has quit IRC | 15:41 | |
| *** JeffF has joined #openstack-barbican | 15:50 | |
| *** kgriffs|afk is now known as kgriffs | 15:51 | |
| *** lisaclark has joined #openstack-barbican | 15:54 | |
| *** kgriffs is now known as kgriffs|afk | 15:56 | |
| *** kgriffs|afk is now known as kgriffs | 15:59 | |
| SheenaG1 | reaperhulk: you joining this conference call with safenet? | 16:03 |
| *** ryanpetrello has quit IRC | 16:27 | |
| *** ryanpetrello has joined #openstack-barbican | 16:28 | |
| *** mikedillion has joined #openstack-barbican | 16:29 | |
| *** stanzi has joined #openstack-barbican | 16:31 | |
| *** kgriffs is now known as kgriffs|afk | 16:31 | |
| *** jaosorior has quit IRC | 16:33 | |
| *** dave-mccowan has quit IRC | 16:34 | |
| *** kgriffs|afk is now known as kgriffs | 16:34 | |
| SheenaG1 | reaperhulk: forgot you were in TCT stuff | 16:34 |
| *** paul_glass has joined #openstack-barbican | 16:44 | |
| *** mikedillion has quit IRC | 16:44 | |
| *** jraim has quit IRC | 16:48 | |
| *** codekobe has quit IRC | 16:48 | |
| *** kgriffs is now known as kgriffs|afk | 16:48 | |
| *** paul_glass has quit IRC | 16:50 | |
| *** paul_glass has joined #openstack-barbican | 16:51 | |
| *** kebray has joined #openstack-barbican | 17:05 | |
| *** david-lyle_afk is now known as david-lyle | 17:06 | |
| openstackgerrit | Merged openstack/barbican: Changing ModelBase.save to correct updated time https://review.openstack.org/140423 | 17:15 |
| *** lisaclark1 has joined #openstack-barbican | 17:22 | |
| *** lisaclark has quit IRC | 17:22 | |
| *** lisaclark1 has quit IRC | 17:24 | |
| *** lisaclark has joined #openstack-barbican | 17:24 | |
| *** stanzi has quit IRC | 17:34 | |
| *** jraim has joined #openstack-barbican | 17:41 | |
| *** stanzi has joined #openstack-barbican | 17:43 | |
| *** gyee has joined #openstack-barbican | 17:46 | |
| *** lisaclark has quit IRC | 17:53 | |
| *** lisaclark has joined #openstack-barbican | 17:54 | |
| *** codekobe has joined #openstack-barbican | 18:01 | |
| *** kgriffs|afk is now known as kgriffs | 18:02 | |
| *** alpha_ori has quit IRC | 18:10 | |
| *** stanzi has quit IRC | 18:14 | |
| *** lisaclark has quit IRC | 18:16 | |
| *** lisaclark has joined #openstack-barbican | 18:19 | |
| *** paul_glass has quit IRC | 18:26 | |
| *** alpha_ori has joined #openstack-barbican | 18:27 | |
| *** lisaclark has quit IRC | 18:36 | |
| openstackgerrit | John Wood proposed openstack/barbican: Add I18n-related unit tests (Part 1) https://review.openstack.org/140800 | 18:37 |
| *** lisaclark has joined #openstack-barbican | 18:37 | |
| openstackgerrit | John Wood proposed openstack/barbican: Add I18n-related unit tests (Part 1) https://review.openstack.org/140800 | 18:40 |
| *** JeffF has quit IRC | 18:42 | |
| elmiko | hey, is anyone else testing with python 2.7.8+? | 18:46 |
| elmiko | i think i might have found an issue while running the tests, and it seems to be coming from PyKMIP | 18:46 |
| elmiko | it actually may be from a difference in the default ssl.py and the way PyKMIP uses it | 18:47 |
| dstufft | what does the error look like | 18:48 |
| elmiko | on my end, i see http://paste.openstack.org/show/148029/ over and over for the kmip tests | 18:49 |
| elmiko | but if i run it on my machine with py2.7.5 i don't see the errors | 18:49 |
| elmiko | and it looks like something to do with the way the default ssl package handles the ca_certs that are passed | 18:49 |
| elmiko | the PyKMIP package tries to pass a cert file that doesn't exist, 2.7.5 handles it ok, 2.7.8+ not so much | 18:50 |
| dstufft | is the version "2.7.8+", aka is it from Debian Jessie or whatever | 18:50 |
| elmiko | barbican passes None for ca_certs, PyKMIP fills it with a default value | 18:50 |
| elmiko | fedora rawhide | 18:50 |
| dstufft | ah, they might backport the 2.7.9 patches too | 18:51 |
| elmiko | could be, not sure | 18:51 |
| dstufft | they must, that code shouldn't exist on 2.7.8 | 18:51 |
| elmiko | hmm, interesting... | 18:51 |
| dstufft | what does PyKMIP pass as ca_certs | 18:51 |
| dstufft | 2.7.9 backports the Python 3.4 ssl module | 18:52 |
| * elmiko digs | 18:52 | |
| elmiko | kmip/demos/certs/server.crt is what it tries to pass as a default | 18:52 |
| elmiko | which doesn't actually exist in my kmip package | 18:52 |
| dstufft | so | 18:52 |
| dstufft | probably PyKMIP is broken, and the new 2.7.9 changes exposed it | 18:53 |
| elmiko | that's what i'm thinking | 18:53 |
| elmiko | i changed the local pykmip and removed the default(non-existant) file and it works on my machine(TM) | 18:53 |
| elmiko | well, i didn't remove the file, but removed the refernce in the code | 18:54 |
| elmiko | i'm not sure where to take this next, pykmip maybe? | 18:55 |
| dstufft | that'd be my guess | 18:56 |
| elmiko | k, thanks for the assistance =) | 18:57 |
| elmiko | hmm, looking at the page for pykmip, i feel like i should hang out here until rellerreller or kaitlin-farr show up lol | 19:05 |
| *** ayoung is now known as shhh_im_busy | 19:07 | |
| *** shhh_im_busy is now known as ayoung | 19:10 | |
| *** JeffF has joined #openstack-barbican | 19:11 | |
| *** lisaclark has quit IRC | 19:11 | |
| *** lisaclark has joined #openstack-barbican | 19:13 | |
| openstackgerrit | John Wood proposed openstack/barbican: Add I18n-related unit tests (Part 2) https://review.openstack.org/140811 | 19:15 |
| *** Stanzi has joined #openstack-barbican | 19:15 | |
| *** Stanzi has quit IRC | 19:15 | |
| *** Stanzi has joined #openstack-barbican | 19:16 | |
| *** paul_glass has joined #openstack-barbican | 19:17 | |
| *** Stanzi has quit IRC | 19:18 | |
| *** Stanzi has joined #openstack-barbican | 19:18 | |
| *** bdpayne has joined #openstack-barbican | 19:35 | |
| woodster_ | I tried to summarize the open questions with the certificate-order-api blueprint: https://review.openstack.org/#/c/135490 | 19:37 |
| woodster_ | alee_ ^^^ | 19:37 |
| alee_ | woodster_, looking | 19:38 |
| *** Stanzi has quit IRC | 19:39 | |
| alee_ | woodster_, yes - that sounds about right | 19:40 |
| alee_ | woodster_, and I thought we decided .. | 19:40 |
| alee_ | 1) add request_type to metadata | 19:40 |
| alee_ | 2) new intiate methods | 19:40 |
| alee_ | 3) if api is defined by barbican - case 1,2,3 validate in barbican-core ; if not (case 4) validate by plugin | 19:41 |
| alee_ | woodster_, at least I convinced greghaynes of this | 19:42 |
| alee_ | woodster_, at least for now -- we can always make internal changes on this later if need be. | 19:42 |
| woodster_ | alee_ I'm warming up to the idea :) That sounds good to me...the first two are already in the bp...is the bit about validation in there? | 19:43 |
| alee_ | woodster_, its in there too .. | 19:43 |
| alee_ | lines .. | 19:43 |
| alee_ | 144-147 | 19:44 |
| woodster_ | 312 too | 19:44 |
| alee_ | yup | 19:44 |
| woodster_ | cool, I'll +2 then...I'd like reaperhulk or redrobot to weigh in too | 19:45 |
| alee_ | sounds good -- reaperhulk , redrobot ? | 19:45 |
| alee_ | waiting for ya'll .. | 19:45 |
| woodster_ | ...hmm, if I add another +2, will it auto merge? | 19:45 |
| alee_ | woodster_, no - it still needs +1 workflow | 19:46 |
| redrobot | woodster_ nope, it only merges with +1 workflow | 19:46 |
| woodster_ | cool | 19:46 |
| alee_ | redrobot, waiting for your +2 .. you too, reaperhulk | 19:46 |
| alee_ | woodster_, on the other one -- | 19:46 |
| redrobot | alee_ will look at it sometime today. | 19:46 |
| redrobot | alee_ also, it looks like SF won't work for us | 19:46 |
| redrobot | alee_ no $ :( | 19:46 |
| alee_ | redrobot, ah :/ | 19:47 |
| redrobot | alee_ for the mid-cycle that is. | 19:47 |
| alee_ | ok then SA then | 19:47 |
| alee_ | we have dates? | 19:47 |
| redrobot | alee_ I was thinking Austin | 19:47 |
| redrobot | alee_ but SA would work too | 19:47 |
| alee_ | redrobot, I'd prefer Austin :) | 19:48 |
| alee_ | I just figured SA would be the default if y'all did not have $ | 19:48 |
| alee_ | woodster_, https://review.openstack.org/#/c/129048/3/specs/kilo/identify-cas.rst,cm | 19:49 |
| alee_ | woodster_, only open question for me is whether to do a metadata table or just columns for the ca table | 19:49 |
| redrobot | alee_ It costs about the same to bring Austin folk down than to send SA folks up there. | 19:50 |
| alee_ | woodster_, once we decide on that - I'll put up a new version and we're good to go. | 19:51 |
| alee_ | redrobot, what about place to host? | 19:51 |
| alee_ | redrobot, my vote for Austin | 19:51 |
| redrobot | alee_ the awesome SheenaG1 already got the ball rolling to get us space at Capitol Factory in downtown Austin. | 19:52 |
| alee_ | redrobot, cool beans | 19:53 |
| SheenaG1 | redrobot: fingers crossed they have space available for the dates we select | 19:53 |
| SheenaG1 | redrobot: if you guys have a couple of dates that are options, I can run those down, just let me know | 19:54 |
| woodster_ | alee_ regarding the new CA attributes...was the intent of those for plugins to use mainly, or is it info about the CA record that would potentially be sent back to the client via API? | 19:54 |
| alee_ | woodster_, it would be information that would be sent back to the client via API | 19:55 |
| woodster_ | If just for plugins, then the key/value table makes sense (we do that now for orders). | 19:55 |
| *** lisaclark has quit IRC | 19:55 | |
| alee_ | woodster_, it seems that if we decided we wanted more data sent back to the client, we would need to add code to do that | 19:56 |
| *** kgriffs is now known as kgriffs|afk | 19:56 | |
| alee_ | woodster_, so i that case, I guess we could have alembic migration to add another column | 19:56 |
| *** Stanzi has joined #openstack-barbican | 19:58 | |
| woodster_ | alee_ it is annoying to browse/debug the database with key/values tables, but not a show stopper. And if some of those fields could be null, better to go key/value as well. | 19:58 |
| *** Stanzi has quit IRC | 19:59 | |
| alee_ | woodster_, its a pretty small table -- can't imagine it having too many fields, but yeah some could be null | 19:59 |
| alee_ | will go with metadata then | 19:59 |
| *** Stanzi has joined #openstack-barbican | 20:00 | |
| alee_ | (more extensible) | 20:00 |
| alee_ | woodster_, I could potentially see the api just looping over the fields in metadata for a particular ca and just returning all of them | 20:01 |
| alee_ | woodster_, whatever info the plugin wants to provide | 20:01 |
| *** stanzi_ has joined #openstack-barbican | 20:08 | |
| *** ryanpetrello has quit IRC | 20:11 | |
| *** ryanpetrello_ has joined #openstack-barbican | 20:11 | |
| *** ryanpetrello_ is now known as ryanpetrello | 20:12 | |
| openstackgerrit | John Wood proposed openstack/barbican: Add I18n-related unit tests (Part 1) https://review.openstack.org/140800 | 20:32 |
| *** kgriffs|afk is now known as kgriffs | 20:34 | |
| openstackgerrit | John Wood proposed openstack/barbican: Add I18n-related unit tests (Part 1) https://review.openstack.org/140800 | 20:35 |
| *** bdpayne_ has joined #openstack-barbican | 20:46 | |
| *** kgriffs is now known as kgriffs|afk | 20:48 | |
| *** Stanzi has quit IRC | 20:48 | |
| *** stanzi_ has quit IRC | 20:48 | |
| *** bdpayne has quit IRC | 20:49 | |
| *** Stanzi has joined #openstack-barbican | 20:50 | |
| *** stanzi_ has joined #openstack-barbican | 20:50 | |
| *** kgriffs|afk is now known as kgriffs | 20:52 | |
| *** bdpayne_ has quit IRC | 20:56 | |
| *** bdpayne has joined #openstack-barbican | 21:10 | |
| *** Stanzi has quit IRC | 21:14 | |
| *** stanzi_ has quit IRC | 21:14 | |
| *** kgriffs is now known as kgriffs|afk | 21:24 | |
| alee_ | rm_work, woodster_ ping | 21:31 |
| rm_work | alee_: pong | 21:31 |
| alee_ | rm_work, so - just doing edits to the identify_ca spec. | 21:31 |
| alee_ | rm_work, I think we can assure a single global preferred CA by keeping an entry in the PreferredCA table | 21:32 |
| rm_work | err | 21:32 |
| rm_work | these tables names are getting confusing | 21:33 |
| alee_ | ie -- some special project_id like "barbican_global_ca" | 21:33 |
| rm_work | so there's a "GlobalCAs" table | 21:33 |
| rm_work | which has all of the possible CAs, right? | 21:33 |
| alee_ | yeah | 21:33 |
| rm_work | then a ProjectCAs table, which has the CAs that are allowed to be used on a specific project | 21:33 |
| alee_ | yup | 21:33 |
| rm_work | then there's PreferredCA, which is PROJECT_ID (Unique) | CA_ID | 21:34 |
| alee_ | yup | 21:34 |
| rm_work | k | 21:34 |
| rm_work | yeah or id=0 | 21:34 |
| rm_work | would probably be fine | 21:34 |
| rm_work | whatevs | 21:34 |
| alee_ | yeah - thats whatI wanted to ask about -- what id is good? 0 ? barbican_global_ca ? | 21:35 |
| alee_ | woodster_, any preference? | 21:35 |
| rm_work | i'd just go with 0, don't think it needs to be dynamic | 21:35 |
| alee_ | ok :/ | 21:36 |
| woodster_ | What id are you referring to? | 21:42 |
| *** stanzi_ has joined #openstack-barbican | 21:53 | |
| *** Stanzi has joined #openstack-barbican | 21:53 | |
| *** stanzi_ has quit IRC | 21:53 | |
| openstackgerrit | Ade Lee proposed openstack/barbican-specs: Spec for identifying CAs https://review.openstack.org/129048 | 22:01 |
| alee_ | rm_work, woodster_ new version , ^^ | 22:03 |
| alee_ | I'm hoping this one is a keeper :) | 22:03 |
| *** ryanpetrello has quit IRC | 22:04 | |
| *** bdpayne has quit IRC | 22:06 | |
| *** jamielennox|away has quit IRC | 22:08 | |
| *** alee_ is now known as alee_afk | 22:08 | |
| *** jamielennox|away has joined #openstack-barbican | 22:10 | |
| *** jamielennox|away is now known as jamielennox | 22:10 | |
| *** bdpayne has joined #openstack-barbican | 22:12 | |
| *** paul_glass has quit IRC | 22:23 | |
| *** bdpayne has quit IRC | 22:46 | |
| *** dimtruck is now known as zz_dimtruck | 23:00 | |
| *** bdpayne has joined #openstack-barbican | 23:10 | |
| *** ayoung is now known as ayoung_dad_mode | 23:26 | |
| *** JeffF has quit IRC | 23:26 | |
| *** ryanpetrello has joined #openstack-barbican | 23:29 | |
| *** SheenaG1 has quit IRC | 23:41 | |
| openstackgerrit | Ade Lee proposed openstack/barbican-specs: Spec for identifying CAs https://review.openstack.org/129048 | 23:48 |
| *** ryanpetrello has quit IRC | 23:50 | |
| openstackgerrit | John Wood proposed openstack/barbican: Add I18n-related unit tests (Part 2) https://review.openstack.org/140811 | 23:57 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!