Wednesday, 2014-12-10

*** jorge_munoz has quit IRC00:00
*** kebray_ has joined #openstack-barbican00:01
*** kebray has quit IRC00:02
*** ryanpetrello has quit IRC00:04
*** dave-mccowan_ has joined #openstack-barbican00:04
*** dave-mccowan has quit IRC00:06
*** dave-mccowan_ is now known as dave-mccowan00:06
*** david-lyle is now known as david-lyle_afk00:11
*** kebray_ has quit IRC00:16
*** kebray has joined #openstack-barbican00:17
*** kebray has quit IRC00:22
*** ryanpetrello has joined #openstack-barbican00:42
*** nkinder has joined #openstack-barbican00:43
*** jamielennox is now known as jamielennox|away00:48
*** gyee has quit IRC00:50
*** mikedillion has quit IRC01:00
*** mikedillion has joined #openstack-barbican01:01
*** mikedillion has quit IRC01:14
*** xianghui has joined #openstack-barbican01:15
*** ryanpetrello has quit IRC01:26
*** xianghui has quit IRC01:32
*** dave-mccowan_ has joined #openstack-barbican01:57
*** dave-mccowan has quit IRC01:59
*** dave-mccowan_ is now known as dave-mccowan01:59
*** kebray has joined #openstack-barbican02:17
*** kebray has quit IRC02:24
*** kebray has joined #openstack-barbican02:25
*** alee_ has joined #openstack-barbican02:37
*** ryanpetrello has joined #openstack-barbican02:48
*** ryanpetrello has quit IRC02:55
*** stanzi has joined #openstack-barbican03:07
*** SheenaG1 has quit IRC03:07
*** ryanpetrello has joined #openstack-barbican03:10
*** ryanpetrello has quit IRC03:14
*** kgriffs|afk is now known as kgriffs03:21
*** zz_dimtruck is now known as dimtruck03:23
*** kebray_ has joined #openstack-barbican03:24
*** kebray has quit IRC03:25
*** jamielennox|away is now known as jamielennox03:26
*** stanzi has quit IRC03:38
*** stanzi has joined #openstack-barbican03:44
*** dimtruck is now known as zz_dimtruck03:45
*** kebray_ has quit IRC03:47
*** kebray has joined #openstack-barbican03:47
*** kebray has quit IRC03:50
*** kebray has joined #openstack-barbican04:14
*** stanzi has quit IRC04:33
*** dave-mccowan has quit IRC04:48
*** kgriffs is now known as kgriffs|afk04:52
*** stanzi has joined #openstack-barbican04:54
*** stanzi has quit IRC05:21
*** stanzi has joined #openstack-barbican05:22
*** stanzi has quit IRC05:23
*** stanzi has joined #openstack-barbican05:24
*** rm_you| has joined #openstack-barbican05:25
openstackgerritgreghaynes proposed openstack/barbican: WIP Create snakoil certificate plugin  https://review.openstack.org/14057505:27
*** rm_you has quit IRC05:29
openstackgerritgreghaynes proposed openstack/barbican: Make flake8 ignore *.egg  https://review.openstack.org/14057805:37
*** gyee has joined #openstack-barbican06:08
*** stanzi has quit IRC06:21
*** alee_ has quit IRC06:36
*** alee_ has joined #openstack-barbican06:37
*** stanzi has joined #openstack-barbican06:51
*** stanzi has quit IRC07:00
*** gyee has quit IRC07:58
*** woodster_ has quit IRC08:30
*** darrenmoffat has quit IRC08:37
*** darrenmoffat has joined #openstack-barbican08:38
openstackgerritgreghaynes proposed openstack/barbican: WIP Create snakoil certificate plugin  https://review.openstack.org/14057509:39
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: WIP Create snakeoil certificate plugin  https://review.openstack.org/14057509:43
greghaynesheh, thanks09:44
*** kebray has quit IRC10:30
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Replace model related instances of tenant  https://review.openstack.org/14064511:12
*** jamielennox is now known as jamielennox|away11:38
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Replace model related instances of tenant  https://review.openstack.org/14064512:05
*** david-lyle_afk is now known as david-lyle12:09
*** david-lyle is now known as david-lyle_afk12:17
*** david-lyle_afk is now known as david-lyle12:17
*** david-lyle is now known as david-lyle_afk12:23
*** david-lyle_afk is now known as david-lyle12:23
openstackgerritJuan Antonio Osorio Robles proposed openstack/python-barbicanclient: Replace trivial docstring instances of tenant  https://review.openstack.org/14065812:23
openstackgerritJuan Antonio Osorio Robles proposed openstack/python-barbicanclient: Replace trivial docstring instances of tenant  https://review.openstack.org/14065812:24
*** jaosorior has joined #openstack-barbican12:27
*** david-lyle is now known as david-lyle_afk12:31
*** david-lyle_afk is now known as david-lyle12:31
*** ryanpetrello has joined #openstack-barbican12:36
*** david-lyle is now known as david-lyle_afk13:00
*** stanzi has joined #openstack-barbican13:08
*** stanzi has quit IRC13:13
openstackgerritJohn Wood proposed openstack/barbican: Fix diff-cover gate broken by parent CR  https://review.openstack.org/13989413:18
*** dave-mccowan has joined #openstack-barbican13:27
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Replace 'tenants' for 'projects' in documentation  https://review.openstack.org/14067913:40
*** kgriffs|afk is now known as kgriffs14:00
*** nkinder has quit IRC14:13
*** woodster_ has joined #openstack-barbican14:18
*** SheenaG1 has joined #openstack-barbican14:24
*** ryanpetrello_ has joined #openstack-barbican14:31
*** ryanpetrello has quit IRC14:31
*** ryanpetrello_ is now known as ryanpetrello14:31
*** dave-mccowan_ has joined #openstack-barbican14:36
*** SheenaG1 has quit IRC14:37
*** dave-mccowan has quit IRC14:37
*** dave-mccowan_ is now known as dave-mccowan14:37
*** lisaclark has joined #openstack-barbican14:49
*** SheenaG1 has joined #openstack-barbican14:53
*** nkinder has joined #openstack-barbican15:00
*** zz_dimtruck is now known as dimtruck15:05
openstackgerritMichael McCune proposed openstack/barbican: Changing ModelBase.save to correct updated time  https://review.openstack.org/14042315:10
*** kgriffs is now known as kgriffs|afk15:20
*** ametts has joined #openstack-barbican15:32
*** lisaclark has quit IRC15:41
*** JeffF has joined #openstack-barbican15:50
*** kgriffs|afk is now known as kgriffs15:51
*** lisaclark has joined #openstack-barbican15:54
*** kgriffs is now known as kgriffs|afk15:56
*** kgriffs|afk is now known as kgriffs15:59
SheenaG1reaperhulk: you joining this conference call with safenet?16:03
*** ryanpetrello has quit IRC16:27
*** ryanpetrello has joined #openstack-barbican16:28
*** mikedillion has joined #openstack-barbican16:29
*** stanzi has joined #openstack-barbican16:31
*** kgriffs is now known as kgriffs|afk16:31
*** jaosorior has quit IRC16:33
*** dave-mccowan has quit IRC16:34
*** kgriffs|afk is now known as kgriffs16:34
SheenaG1reaperhulk: forgot you were in TCT stuff16:34
*** paul_glass has joined #openstack-barbican16:44
*** mikedillion has quit IRC16:44
*** jraim has quit IRC16:48
*** codekobe has quit IRC16:48
*** kgriffs is now known as kgriffs|afk16:48
*** paul_glass has quit IRC16:50
*** paul_glass has joined #openstack-barbican16:51
*** kebray has joined #openstack-barbican17:05
*** david-lyle_afk is now known as david-lyle17:06
openstackgerritMerged openstack/barbican: Changing ModelBase.save to correct updated time  https://review.openstack.org/14042317:15
*** lisaclark1 has joined #openstack-barbican17:22
*** lisaclark has quit IRC17:22
*** lisaclark1 has quit IRC17:24
*** lisaclark has joined #openstack-barbican17:24
*** stanzi has quit IRC17:34
*** jraim has joined #openstack-barbican17:41
*** stanzi has joined #openstack-barbican17:43
*** gyee has joined #openstack-barbican17:46
*** lisaclark has quit IRC17:53
*** lisaclark has joined #openstack-barbican17:54
*** codekobe has joined #openstack-barbican18:01
*** kgriffs|afk is now known as kgriffs18:02
*** alpha_ori has quit IRC18:10
*** stanzi has quit IRC18:14
*** lisaclark has quit IRC18:16
*** lisaclark has joined #openstack-barbican18:19
*** paul_glass has quit IRC18:26
*** alpha_ori has joined #openstack-barbican18:27
*** lisaclark has quit IRC18:36
openstackgerritJohn Wood proposed openstack/barbican: Add I18n-related unit tests (Part 1)  https://review.openstack.org/14080018:37
*** lisaclark has joined #openstack-barbican18:37
openstackgerritJohn Wood proposed openstack/barbican: Add I18n-related unit tests (Part 1)  https://review.openstack.org/14080018:40
*** JeffF has quit IRC18:42
elmikohey, is anyone else testing with python 2.7.8+?18:46
elmikoi think i might have found an issue while running the tests, and it seems to be coming from PyKMIP18:46
elmikoit actually may be from a difference in the default ssl.py and the way PyKMIP uses it18:47
dstufftwhat does the error look like18:48
elmikoon my end, i see http://paste.openstack.org/show/148029/ over and over for the kmip tests18:49
elmikobut if i run it on my machine with py2.7.5 i don't see the errors18:49
elmikoand it looks like something to do with the way the default ssl package handles the ca_certs that are passed18:49
elmikothe PyKMIP package tries to pass a cert file that doesn't exist, 2.7.5 handles it ok, 2.7.8+ not so much18:50
dstufftis the version "2.7.8+", aka is it from Debian Jessie or whatever18:50
elmikobarbican passes None for ca_certs, PyKMIP fills it with a default value18:50
elmikofedora rawhide18:50
dstufftah, they might backport the 2.7.9 patches too18:51
elmikocould be, not sure18:51
dstufftthey must, that code shouldn't exist on 2.7.818:51
elmikohmm, interesting...18:51
dstufftwhat does PyKMIP pass as ca_certs18:51
dstufft2.7.9 backports the Python 3.4 ssl module18:52
* elmiko digs18:52
elmikokmip/demos/certs/server.crt is what it tries to pass as a default18:52
elmikowhich doesn't actually exist in my kmip package18:52
dstufftso18:52
dstufftprobably PyKMIP is broken, and the new 2.7.9 changes exposed it18:53
elmikothat's what i'm thinking18:53
elmikoi changed the local pykmip and removed the default(non-existant) file and it works on my machine(TM)18:53
elmikowell, i didn't remove the file, but removed the refernce in the code18:54
elmikoi'm not sure where to take this next, pykmip maybe?18:55
dstufftthat'd be my guess18:56
elmikok, thanks for the assistance =)18:57
elmikohmm, looking at the page for pykmip, i feel like i should hang out here until rellerreller or kaitlin-farr show up lol19:05
*** ayoung is now known as shhh_im_busy19:07
*** shhh_im_busy is now known as ayoung19:10
*** JeffF has joined #openstack-barbican19:11
*** lisaclark has quit IRC19:11
*** lisaclark has joined #openstack-barbican19:13
openstackgerritJohn Wood proposed openstack/barbican: Add I18n-related unit tests (Part 2)  https://review.openstack.org/14081119:15
*** Stanzi has joined #openstack-barbican19:15
*** Stanzi has quit IRC19:15
*** Stanzi has joined #openstack-barbican19:16
*** paul_glass has joined #openstack-barbican19:17
*** Stanzi has quit IRC19:18
*** Stanzi has joined #openstack-barbican19:18
*** bdpayne has joined #openstack-barbican19:35
woodster_I tried to summarize the open questions with the certificate-order-api blueprint: https://review.openstack.org/#/c/13549019:37
woodster_alee_ ^^^19:37
alee_woodster_, looking19:38
*** Stanzi has quit IRC19:39
alee_woodster_, yes - that sounds about right19:40
alee_woodster_, and I thought we decided ..19:40
alee_1) add request_type to metadata19:40
alee_2) new intiate methods19:40
alee_3) if api is defined by barbican  - case 1,2,3 validate in barbican-core ; if not (case 4) validate by plugin19:41
alee_woodster_, at least I convinced greghaynes of this19:42
alee_woodster_, at least for now -- we can always make internal changes on this later if need be.19:42
woodster_alee_ I'm warming up to the idea :)  That sounds good to me...the first two are already in the bp...is the bit about validation in there?19:43
alee_woodster_, its in there too ..19:43
alee_lines ..19:43
alee_144-14719:44
woodster_312 too19:44
alee_yup19:44
woodster_cool, I'll +2 then...I'd like reaperhulk or redrobot to weigh in too19:45
alee_sounds good -- reaperhulk , redrobot ?19:45
alee_waiting for ya'll ..19:45
woodster_...hmm, if I add another +2, will it auto merge?19:45
alee_woodster_, no - it still needs +1 workflow19:46
redrobotwoodster_ nope, it only merges with +1 workflow19:46
woodster_cool19:46
alee_redrobot, waiting for your +2 .. you too, reaperhulk19:46
alee_woodster_, on the other one --19:46
redrobotalee_ will look at it sometime today.19:46
redrobotalee_ also, it looks like SF won't work for us19:46
redrobotalee_ no $ :(19:46
alee_redrobot, ah :/19:47
redrobotalee_ for the mid-cycle that is.19:47
alee_ok then SA then19:47
alee_we have dates?19:47
redrobotalee_ I was thinking Austin19:47
redrobotalee_ but SA would work too19:47
alee_redrobot, I'd prefer Austin :)19:48
alee_I just figured SA would be the default if y'all did not have $19:48
alee_woodster_, https://review.openstack.org/#/c/129048/3/specs/kilo/identify-cas.rst,cm19:49
alee_woodster_, only open question for me is whether to do a metadata table or just columns for the ca table19:49
redrobotalee_ It costs about the same to bring Austin folk down than to send SA folks up there.19:50
alee_woodster_, once we decide on that - I'll put up a new version and we're good to go.19:51
alee_redrobot, what about place to host?19:51
alee_redrobot, my vote for Austin19:51
redrobotalee_ the awesome SheenaG1 already got the ball rolling to get us space at Capitol Factory in downtown Austin.19:52
alee_redrobot, cool beans19:53
SheenaG1redrobot: fingers crossed they have space available for the dates we select19:53
SheenaG1redrobot: if you guys have a couple of dates that are options, I can run those down, just let me know19:54
woodster_alee_ regarding the new CA attributes...was the intent of those for plugins to use mainly, or is it info about the CA record that would potentially be sent back to the client via API?19:54
alee_woodster_, it would be information that would be sent back to the client via API19:55
woodster_If just for plugins, then the key/value table makes sense (we do that now for orders).19:55
*** lisaclark has quit IRC19:55
alee_woodster_, it seems that if we decided we wanted more data sent back to the client, we would need to add code to do that19:56
*** kgriffs is now known as kgriffs|afk19:56
alee_woodster_, so i that case, I guess we could have alembic migration to add another column19:56
*** Stanzi has joined #openstack-barbican19:58
woodster_alee_ it is annoying to browse/debug the database with key/values tables, but not a show stopper. And if some of those fields could be null, better to go key/value as well.19:58
*** Stanzi has quit IRC19:59
alee_woodster_, its a pretty small table -- can't imagine it having too many fields, but yeah some could be null19:59
alee_will go with metadata then19:59
*** Stanzi has joined #openstack-barbican20:00
alee_(more extensible)20:00
alee_woodster_, I could potentially see the api just looping over the fields in metadata for a particular ca and just returning all of them20:01
alee_woodster_, whatever info the plugin wants to provide20:01
*** stanzi_ has joined #openstack-barbican20:08
*** ryanpetrello has quit IRC20:11
*** ryanpetrello_ has joined #openstack-barbican20:11
*** ryanpetrello_ is now known as ryanpetrello20:12
openstackgerritJohn Wood proposed openstack/barbican: Add I18n-related unit tests (Part 1)  https://review.openstack.org/14080020:32
*** kgriffs|afk is now known as kgriffs20:34
openstackgerritJohn Wood proposed openstack/barbican: Add I18n-related unit tests (Part 1)  https://review.openstack.org/14080020:35
*** bdpayne_ has joined #openstack-barbican20:46
*** kgriffs is now known as kgriffs|afk20:48
*** Stanzi has quit IRC20:48
*** stanzi_ has quit IRC20:48
*** bdpayne has quit IRC20:49
*** Stanzi has joined #openstack-barbican20:50
*** stanzi_ has joined #openstack-barbican20:50
*** kgriffs|afk is now known as kgriffs20:52
*** bdpayne_ has quit IRC20:56
*** bdpayne has joined #openstack-barbican21:10
*** Stanzi has quit IRC21:14
*** stanzi_ has quit IRC21:14
*** kgriffs is now known as kgriffs|afk21:24
alee_rm_work, woodster_ ping21:31
rm_workalee_: pong21:31
alee_rm_work, so - just doing edits to the identify_ca spec.21:31
alee_rm_work, I think we can assure a single global preferred CA by keeping an entry in the PreferredCA table21:32
rm_workerr21:32
rm_workthese tables names are getting confusing21:33
alee_ie -- some special project_id like "barbican_global_ca"21:33
rm_workso there's a "GlobalCAs" table21:33
rm_workwhich has all of the possible CAs, right?21:33
alee_yeah21:33
rm_workthen a ProjectCAs table, which has the CAs that are allowed to be used on a specific project21:33
alee_yup21:33
rm_workthen there's PreferredCA, which is PROJECT_ID (Unique) | CA_ID21:34
alee_yup21:34
rm_workk21:34
rm_workyeah or id=021:34
rm_workwould probably be fine21:34
rm_workwhatevs21:34
alee_yeah - thats whatI wanted to ask about -- what id is good?  0 ? barbican_global_ca ?21:35
alee_woodster_, any preference?21:35
rm_worki'd just go with 0, don't think it needs to be dynamic21:35
alee_ok :/21:36
woodster_What id are you referring to?21:42
*** stanzi_ has joined #openstack-barbican21:53
*** Stanzi has joined #openstack-barbican21:53
*** stanzi_ has quit IRC21:53
openstackgerritAde Lee proposed openstack/barbican-specs: Spec for identifying CAs  https://review.openstack.org/12904822:01
alee_rm_work, woodster_ new version , ^^22:03
alee_I'm hoping this one is a keeper :)22:03
*** ryanpetrello has quit IRC22:04
*** bdpayne has quit IRC22:06
*** jamielennox|away has quit IRC22:08
*** alee_ is now known as alee_afk22:08
*** jamielennox|away has joined #openstack-barbican22:10
*** jamielennox|away is now known as jamielennox22:10
*** bdpayne has joined #openstack-barbican22:12
*** paul_glass has quit IRC22:23
*** bdpayne has quit IRC22:46
*** dimtruck is now known as zz_dimtruck23:00
*** bdpayne has joined #openstack-barbican23:10
*** ayoung is now known as ayoung_dad_mode23:26
*** JeffF has quit IRC23:26
*** ryanpetrello has joined #openstack-barbican23:29
*** SheenaG1 has quit IRC23:41
openstackgerritAde Lee proposed openstack/barbican-specs: Spec for identifying CAs  https://review.openstack.org/12904823:48
*** ryanpetrello has quit IRC23:50
openstackgerritJohn Wood proposed openstack/barbican: Add I18n-related unit tests (Part 2)  https://review.openstack.org/14081123:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!