| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-barbicanclient: Updated from global requirements https://review.openstack.org/146706 | 00:15 |
|---|---|---|
| *** david-lyle has joined #openstack-barbican | 00:24 | |
| *** chlong has quit IRC | 00:35 | |
| *** david-lyle has quit IRC | 00:46 | |
| *** lisaclark1 has joined #openstack-barbican | 00:49 | |
| *** lisaclark1 has quit IRC | 00:50 | |
| *** david-lyle has joined #openstack-barbican | 00:51 | |
| *** gyee has quit IRC | 00:55 | |
| *** kgriffs is now known as kgriffs|afk | 00:55 | |
| *** david-lyle has quit IRC | 01:04 | |
| *** jkf has quit IRC | 01:13 | |
| *** chlong has joined #openstack-barbican | 01:25 | |
| *** kebray has quit IRC | 01:31 | |
| *** ryanpetrello has quit IRC | 01:35 | |
| *** david-lyle has joined #openstack-barbican | 01:37 | |
| *** SheenaG1 has quit IRC | 01:50 | |
| *** bdpayne has quit IRC | 01:51 | |
| *** david-lyle has quit IRC | 01:52 | |
| *** kgriffs|afk is now known as kgriffs | 02:05 | |
| *** ryanpetrello has joined #openstack-barbican | 02:07 | |
| *** kgriffs is now known as kgriffs|afk | 02:15 | |
| *** zz_dimtruck is now known as dimtruck | 02:29 | |
| *** crc32 has quit IRC | 02:42 | |
| *** david-lyle has joined #openstack-barbican | 02:55 | |
| *** bdpayne has joined #openstack-barbican | 03:09 | |
| *** bdpayne has quit IRC | 03:23 | |
| *** bdpayne has joined #openstack-barbican | 04:10 | |
| *** bdpayne has quit IRC | 04:10 | |
| *** david-lyle has quit IRC | 04:20 | |
| *** ryanpetrello has quit IRC | 04:22 | |
| *** bdpayne has joined #openstack-barbican | 04:38 | |
| *** ayoung has quit IRC | 04:49 | |
| *** Nirupama has joined #openstack-barbican | 05:22 | |
| *** dimtruck is now known as zz_dimtruck | 05:31 | |
| *** zz_dimtruck is now known as dimtruck | 05:34 | |
| *** dimtruck is now known as zz_dimtruck | 05:38 | |
| *** woodster_ has quit IRC | 06:30 | |
| *** bdpayne has quit IRC | 06:49 | |
| *** ryanpetrello has joined #openstack-barbican | 06:52 | |
| *** tkelsey has joined #openstack-barbican | 07:10 | |
| *** ryanpetrello has quit IRC | 07:17 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Fix usage of keystone v3 https://review.openstack.org/143329 | 07:46 |
| *** Nirupama has quit IRC | 07:55 | |
| *** Nirupama has joined #openstack-barbican | 08:07 | |
| *** chlong has quit IRC | 08:09 | |
| *** nkarandi has joined #openstack-barbican | 08:13 | |
| *** Nirupama has quit IRC | 08:17 | |
| *** nkarandi is now known as Nirupama | 09:51 | |
| *** ryanpetrello has joined #openstack-barbican | 10:41 | |
| *** ryanpetrello has quit IRC | 10:45 | |
| *** dstufft has quit IRC | 11:05 | |
| *** dstufft has joined #openstack-barbican | 11:10 | |
| *** chlong has joined #openstack-barbican | 11:33 | |
| *** jamielennox is now known as jamielennox|away | 11:43 | |
| *** dstufft has quit IRC | 12:25 | |
| *** dstufft has joined #openstack-barbican | 12:26 | |
| *** ryanpetrello has joined #openstack-barbican | 12:27 | |
| *** SheenaG1 has joined #openstack-barbican | 12:33 | |
| *** ryanpetrello has quit IRC | 12:41 | |
| *** woodster_ has joined #openstack-barbican | 12:46 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Fix UnicodeDecodeError's in the functional tests https://review.openstack.org/146845 | 12:59 |
| *** jaosorior has joined #openstack-barbican | 13:00 | |
| openstackgerrit | Tim Kelsey proposed openstack/barbican: Adding client certificates to connection credentials https://review.openstack.org/135217 | 13:07 |
| *** ryanpetrello has joined #openstack-barbican | 13:08 | |
| *** Nirupama has quit IRC | 13:15 | |
| *** dstufft has quit IRC | 13:19 | |
| *** dstufft has joined #openstack-barbican | 13:20 | |
| jaosorior | tkesley: ping | 13:22 |
| jaosorior | * tkelsey | 13:23 |
| *** dstufft has quit IRC | 13:23 | |
| *** dstufft has joined #openstack-barbican | 13:24 | |
| tkelsey | hello jaosorior, how can i help | 13:24 |
| *** darrenmoffat has quit IRC | 13:24 | |
| *** darrenmoffat has joined #openstack-barbican | 13:25 | |
| jaosorior | aaah, nevermind, put the comments in your CR | 13:26 |
| tkelsey | jaosorior: ah ok thanks, will check | 13:26 |
| *** alee has quit IRC | 13:29 | |
| *** chlong has quit IRC | 13:30 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Return the actual name value for entities https://review.openstack.org/145495 | 13:32 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Fix UnicodeDecodeError's in the functional tests https://review.openstack.org/146845 | 13:32 |
| openstackgerrit | Tim Kelsey proposed openstack/barbican: Adding client certificates to connection credentials https://review.openstack.org/135217 | 14:10 |
| tkelsey | jaosorior: updated | 14:12 |
| reaperhulk | tkelsey: is there any reason we couldn't add an actual file fixture with the required permissions into our tests and have the test stat that? | 14:14 |
| reaperhulk | (and do you happen to know what would happen if we ran such a test on windows?) | 14:14 |
| tkelsey | reaperhulk: Im not sure what would happen on windows, in the meeting yesterday it seemed that a POSIX requirement was OK though | 14:15 |
| reaperhulk | I'm not sure I'm super happy about that but a bunch of other openstack projects do have implicit posix dependence | 14:16 |
| reaperhulk | so I'll drop that for now ;) | 14:16 |
| tkelsey | hehe fair enough :) | 14:17 |
| reaperhulk | git supports tracking of files with permissions so you could potentially create a file with the permissions you want, add it to git, and then stat that file in your tests | 14:18 |
| reaperhulk | Then no need to patch/mock anything | 14:18 |
| tkelsey | I would prefer to avoid touching files like that in tests tbh, just seems a bit messy when the mock will prove out the logic | 14:19 |
| *** openstackgerrit has quit IRC | 14:22 | |
| *** openstackgerrit has joined #openstack-barbican | 14:23 | |
| *** ayoung has joined #openstack-barbican | 14:29 | |
| *** SheenaG1 has quit IRC | 14:33 | |
| *** alee has joined #openstack-barbican | 14:42 | |
| *** ametts has joined #openstack-barbican | 14:48 | |
| *** nkinder has joined #openstack-barbican | 14:49 | |
| *** kgriffs|afk is now known as kgriffs | 14:55 | |
| *** dstufft has quit IRC | 15:00 | |
| *** ccuppel_ has joined #openstack-barbican | 15:00 | |
| *** dstufft has joined #openstack-barbican | 15:01 | |
| woodster_ | tkelsey: reaperhulk a concern I have is ensuring folks can run Barbican locally out of the box, and easily develop locally with specific plugins enabled. So any logic that is specific to an OS seems counter to that | 15:02 |
| tkelsey | sure, I get that, hummm I'm not that attached to these checks, if it make it easier for the patch to land then I can just drop them | 15:04 |
| ccuppel_ | Beginners question #1. We use oauth2 tokens to authenticate our services. Can such a token also authenticate barbican service? I don't know what keystone is or how that relates to our use of Oauth2. | 15:06 |
| reaperhulk | tkelsey: I think there's potential value in the checks but we could probably do a better job discussing them in a separate patch | 15:07 |
| tkelsey | reaperhulk: sure, that makes sense, I'll put up a second patch with the tests | 15:07 |
| *** zz_dimtruck is now known as dimtruck | 15:09 | |
| ccuppel_ | (Or is it something we could reasonably hack in ourselves) | 15:10 |
| *** kebray has joined #openstack-barbican | 15:15 | |
| *** kebray has quit IRC | 15:15 | |
| jaosorior | tkelsey: To me the updated CR looks OK. Will score as soon as it passes the tests | 15:16 |
| jaosorior | yet, regarding the POSIX thing. I am quite keen of checking these kind of things, even if it adds POSIX dependency. Unless someone comes with a requirement that this needs to run on Windows, I see no problem in not supporting it. | 15:17 |
| tkelsey | jaosorior: I do prefer to check, but if I split the patch then its somthing that can be talk over specifically | 15:18 |
| tkelsey | I would also quite like this cert work to land lol | 15:18 |
| jaosorior | alright | 15:18 |
| jaosorior | then let the CR be split | 15:18 |
| jaosorior | add a TODO or a note where the checks would usually go | 15:19 |
| tkelsey | sure, will do | 15:19 |
| jaosorior | daaaamn the gate is sloooow | 15:19 |
| *** kebray has joined #openstack-barbican | 15:19 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Return the actual name value for entities https://review.openstack.org/145495 | 15:23 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Fix UnicodeDecodeError's in the functional tests https://review.openstack.org/146845 | 15:23 |
| *** paul_glass has joined #openstack-barbican | 15:28 | |
| *** paul_glass has quit IRC | 15:29 | |
| *** paul_glass has joined #openstack-barbican | 15:30 | |
| *** rellerreller has joined #openstack-barbican | 15:30 | |
| ccuppel_ | I have a couple of starter barbican questions, which I have not been able to answer. They relate to oauth2 and desired redundant encryption by the local agent of keys stored in a remote barbican service. Any advice for directing or reformulating these questions would be appreciated. Thanks | 15:31 |
| *** kgriffs has quit IRC | 15:40 | |
| *** kgriffs has joined #openstack-barbican | 15:42 | |
| openstackgerrit | Tim Kelsey proposed openstack/barbican: Adding client certificates to connection credentials https://review.openstack.org/135217 | 15:45 |
| openstackgerrit | Tim Kelsey proposed openstack/barbican: Adding client certificates to connection credentials https://review.openstack.org/135217 | 15:48 |
| openstackgerrit | Tim Kelsey proposed openstack/barbican: Adding client certificates to connection credentials https://review.openstack.org/135217 | 15:51 |
| *** ccuppel_ has quit IRC | 15:55 | |
| openstackgerrit | Tim Kelsey proposed openstack/barbican: Checking the certificate file has reasonable permissions https://review.openstack.org/146906 | 15:55 |
| *** SheenaG1 has joined #openstack-barbican | 16:11 | |
| *** SheenaG1 has left #openstack-barbican | 16:14 | |
| *** ryanpetrello has quit IRC | 16:26 | |
| *** paul_glass has quit IRC | 16:31 | |
| *** paul_glass has joined #openstack-barbican | 16:33 | |
| rm_work | hey rellerreller | 16:42 |
| rellerreller | What's up? | 16:43 |
| rellerreller | rm_work what's up | 16:44 |
| rm_work | ah | 16:45 |
| rm_work | re: email | 16:45 |
| rm_work | my plans are basically to merge in what I already have in Octavia, with some tweaks, right on top of the Cinder stuff (which has been my plan from day 1) | 16:45 |
| rm_work | https://github.com/stackforge/octavia/tree/master/octavia/certificates | 16:46 |
| rellerreller | How does that differ from the KeyManager interface that exists today? | 16:46 |
| rm_work | that whole tree | 16:46 |
| rm_work | KeyManager handles Secrets | 16:46 |
| rm_work | my stuff handles Containers | 16:46 |
| rm_work | and specifically for Certs | 16:46 |
| rm_work | my vision is that some code can be shared, so some extent (common), but we should have specific interfaces for specific things (Container Types) | 16:47 |
| rm_work | (as opposed to one generic container interface) | 16:47 |
| rm_work | *to some extent | 16:48 |
| rellerreller | OK, I just looked through the code. | 16:48 |
| rm_work | that was quick :P | 16:48 |
| rellerreller | I'm sure we will have some overlap with primitive object types | 16:48 |
| rm_work | yes | 16:49 |
| rellerreller | But like you said we are developing two different interfaces | 16:49 |
| rm_work | some of the code is almost a literal copy/paste from the cinder code | 16:49 |
| rm_work | I even left some JHU copyright | 16:49 |
| rm_work | lol | 16:49 |
| rm_work | yeah, which is why it should just nestle right in next to the other code | 16:49 |
| rm_work | with only minor tweaks to make them more consistent (re: naming, classpath/physical organization of files) | 16:50 |
| rellerreller | I guess one thing I was thinking about was having the KeyManager interface store certificates as well | 16:50 |
| rm_work | IE, KeyManager.store_certificate() ? | 16:51 |
| rellerreller | That is where I see some overlap. I was envisioning the KeyManager storing different types of keys (symmetric, asymmetric, certificates, etc), like the KMIP spec defines. | 16:51 |
| rm_work | basically just merge the interfaces instead of have them separate? | 16:51 |
| rm_work | err | 16:51 |
| rm_work | well, a "certificate" isn't a type of key | 16:51 |
| rellerreller | I know | 16:52 |
| rm_work | <_< | 16:52 |
| rellerreller | I modeled it mostly after the KMIP spec, which is why certificates fall into that category | 16:52 |
| rm_work | hmm | 16:52 |
| rm_work | I could try to fork the repo and put stuff together kind of how i see it, and we could look at that, and decide if that looks right | 16:53 |
| rellerreller | I think it would be worth a discussion with the group to see how we want to proceed | 16:53 |
| rm_work | because like i said, i have had this eventual merge in my head since the first line i wrote | 16:54 |
| rm_work | so it should be quick to do | 16:54 |
| rellerreller | I'm not totally opposed to having two different interfaces; it's just not what I was thinking. It's just different, and I need some time to think about it. I could easily be convinced that it is the way to go. | 16:55 |
| rm_work | k | 16:56 |
| rm_work | when it's an interface, I worry about having it be too broad | 16:56 |
| rm_work | because we want them to be quick/simple to implement | 16:56 |
| rm_work | and should be separating logical groupings of stuff | 16:56 |
| rm_work | so they can be done in different ways | 16:56 |
| rm_work | see how I separated CertManager from CertGenerator | 16:57 |
| rm_work | I could have had them in one interface, but it turns out they can be used in different combinations | 16:57 |
| rellerreller | Yes, that is a valid point. We also do not want key managers to not support all of the methods, and have method not supported excpetions be common | 16:58 |
| rm_work | right | 16:58 |
| rm_work | I like concise, specific, simple interfaces | 16:59 |
| rm_work | minimal and single-purpose, like the UNIX philosophy | 16:59 |
| rellerreller | On the other hand store, get, and delete cert are very similar to store, get, and delete key. Simply passing in a key type would be easy. | 17:00 |
| rellerreller | We may not want a password manager, symmetric key manager, certificate manager, IV manager | 17:01 |
| rm_work | yeah | 17:01 |
| rm_work | though for single-secret it's not actually as complicated | 17:01 |
| rm_work | you can just return a string, essentially | 17:01 |
| rm_work | the reason it matters more for containers is because I can return a typed class | 17:02 |
| rm_work | because containers are completely variable | 17:02 |
| rm_work | for typed-single-secret, you can pass in the type and either return a string or raise a "wrong type" exception | 17:03 |
| *** jamielennox|away is now known as jamielennox | 17:03 | |
| rm_work | also there may in the future be more complicated utility functions built into the container classes | 17:07 |
| rm_work | like optional certificate validation / parsing | 17:07 |
| rm_work | ala: https://review.openstack.org/#/c/145092/ | 17:08 |
| *** gyee has joined #openstack-barbican | 17:21 | |
| *** ryanpetrello has joined #openstack-barbican | 17:24 | |
| redrobot | ccuppel_ you still around? | 17:34 |
| rm_work | rellerreller: ^^ | 17:35 |
| *** ryanpetrello_ has joined #openstack-barbican | 17:37 | |
| *** ryanpetrello has quit IRC | 17:37 | |
| *** ryanpetrello_ is now known as ryanpetrello | 17:37 | |
| *** SheenaG1 has joined #openstack-barbican | 17:40 | |
| *** jfritcher has joined #openstack-barbican | 17:45 | |
| *** jfritcher has quit IRC | 17:46 | |
| *** ryanpetrello has quit IRC | 17:47 | |
| *** jkf has joined #openstack-barbican | 17:48 | |
| *** jkf has quit IRC | 18:00 | |
| *** kgriffs is now known as kgriffs|afk | 18:00 | |
| *** SheenaG1 has quit IRC | 18:03 | |
| *** kebray has quit IRC | 18:05 | |
| rellerreller | rm_work I had to run to another meeting. Sorry about that. | 18:06 |
| rm_work | np | 18:06 |
| rm_work | i am about to afk for a moment tho | 18:06 |
| rellerreller | That's ok. I can't really spend more time on this at the moment. | 18:07 |
| rm_work | k | 18:07 |
| *** tkelsey has quit IRC | 18:07 | |
| rellerreller | I think we probably won't figure this out until the mid-cycle. It really needs a lot of discussion that is difficult over irc. | 18:07 |
| *** paul_glass has quit IRC | 18:11 | |
| *** kebray has joined #openstack-barbican | 18:31 | |
| rm_work | yeah np… in the meantime i'll do a fork and a mockup of what i think it'll look like | 18:36 |
| rm_work | and by mockup, i mean, i'll do the work | 18:36 |
| rm_work | :P | 18:36 |
| *** jkf has joined #openstack-barbican | 18:39 | |
| *** kebray has quit IRC | 18:46 | |
| *** kgriffs|afk is now known as kgriffs | 18:48 | |
| *** paul_glass has joined #openstack-barbican | 18:49 | |
| *** kebray has joined #openstack-barbican | 18:57 | |
| *** jkf has quit IRC | 19:03 | |
| alee | woodster_, ping | 19:21 |
| *** crc32 has joined #openstack-barbican | 19:27 | |
| *** kebray has quit IRC | 19:32 | |
| woodster_ | alee, hello | 19:39 |
| alee | woodster_, hey -- I',m working on some code for the "Identifying CAs" blueprint. | 19:39 |
| woodster_ | rellerreller, do you mean wait until mid cycle to make final decisions on castellan? I'd prefer not do that if possible | 19:39 |
| woodster_ | alee, nice | 19:39 |
| alee | its model/ database code -- so I'd like you to take a quick look and see if what I have makes sense. | 19:40 |
| alee | woodster_, let me pastebin something up .. | 19:40 |
| *** jkf has joined #openstack-barbican | 19:40 | |
| woodster_ | alee, sounds good | 19:42 |
| alee | woodster_, http://fpaste.org/169217/42117808/ | 19:42 |
| alee | woodster_, this is model code for the new tables .. | 19:42 |
| alee | woodster_, its based on the other ones but there are some differences .. | 19:43 |
| alee | and I'm not sure I understand all the sqlalchemy stuff | 19:43 |
| alee | woodster_, you might want to refer to https://review.openstack.org/#/c/129048/6/specs/kilo/identify-cas.rst,cm | 19:44 |
| *** gyee has quit IRC | 19:56 | |
| *** SheenaG1 has joined #openstack-barbican | 19:57 | |
| woodster_ | alee, looks good...line #15 should refer back to the parent class (CertificateAuthority, so call it 'ca'. Lines #22/#84/#124/#165 should use i18n (so the u._("....") format). Better to pop off dict items so that line #39 isn't required (so don't have to worry about more specific field lines being added/removed in the future before that generic key/value | 19:57 |
| woodster_ | loop). | 19:57 |
| *** ametts has quit IRC | 19:57 | |
| woodster_ | alee, yeah the key/value stuff in sqlalchemy is a bit odd...you get a key/wrapped-value sort of thing out of it | 19:58 |
| alee | woodster_, fixing .. | 20:00 |
| rellerreller | woodster_ Yes, I was saying wait to make final decision on Castellan until mid-cycle. | 20:00 |
| *** SheenaG11 has joined #openstack-barbican | 20:01 | |
| rellerreller | It seems like a big decision to define the interface. I would hate to define it one way, push it out, and then change it. This will be the main entry point for the other projects to interface with Barbican, so it seems we should choose a stable API. | 20:02 |
| *** paul_glass has quit IRC | 20:02 | |
| *** SheenaG1 has quit IRC | 20:03 | |
| woodster_ | rellerreller, rm_work, my concern is with delaying integration with other projects in Kilo for another month...by that time we'll only have a 2/3 weeks until M3 I think, so that may not be enough time to land things | 20:05 |
| rm_work | yeah, i agree | 20:06 |
| rm_work | we'll be up against the wall | 20:06 |
| rm_work | i'm just saying i'll give it a shot in the next day or two and see what you think | 20:06 |
| alee | rellerreller, woodster_ I think waiting till midcycle to make final decisions seems reasonable. Thats not to say we cannot add code and get something in there now. But that we should probably spend a good deal of time face to face at the midcycle and iron stuff out. | 20:06 |
| alee | but I'm all for rm_work putting something up and seeing what sticks | 20:07 |
| rellerreller | alee woodster_ rm_work I agree with alee. The interfaces are not that far off. I feel like a lot of progress could be made in the meantime. Then it is a matter of shoehorning into defined interface. | 20:08 |
| rm_work | yeah just need a starting point to begin discussion | 20:08 |
| alee | rm_work, yup -- that could be a spec -- or better yet -- code | 20:09 |
| * rm_work votes code | 20:09 | |
| *** kebray has joined #openstack-barbican | 20:10 | |
| *** kebray has quit IRC | 20:12 | |
| *** david-lyle has joined #openstack-barbican | 20:16 | |
| alee | woodster_, so I wrote the following test .. | 20:16 |
| *** kebray has joined #openstack-barbican | 20:17 | |
| *** kebray has quit IRC | 20:17 | |
| alee | http://fpaste.org/169235/14211802/ | 20:17 |
| alee | woodster_, ^^ | 20:17 |
| alee | and ran into this error .. | 20:17 |
| alee | File "/home/alee/barbican/barbican/barbican/model/models.py", line 736, in __init__ | 20:18 |
| alee | self.ca_meta.append(meta) | 20:18 |
| alee | AttributeError: 'MappedCollection' object has no attribute 'append' | 20:18 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Return the actual name value for entities https://review.openstack.org/145495 | 20:19 |
| *** mikedillion has joined #openstack-barbican | 20:20 | |
| jaosorior | finally O_O... | 20:24 |
| jaosorior | Anybody wants to check this one out? https://review.openstack.org/#/c/144743/ it only needs a workflow :D | 20:24 |
| *** kebray has joined #openstack-barbican | 20:25 | |
| woodster_ | alee: in a meeting for a bit | 20:25 |
| alee | woodster_, ok thanks - let me know if you get a chance to look at it | 20:27 |
| alee | jaosorior, looks like it has 3 +2's -- I'll workflow it .. | 20:27 |
| jaosorior | yay :D | 20:28 |
| alee | jaosorior, rm_work you understand how to do the sqlalchemy/ model code? | 20:29 |
| rm_work | somewhat yes | 20:29 |
| jaosorior | ditto | 20:29 |
| jaosorior | what's up? | 20:29 |
| alee | rm_work, jaosorior - maybe you can tell me how to do this .. | 20:30 |
| alee | so -- I have written the following code .. | 20:30 |
| jaosorior | bring it | 20:30 |
| rm_work | let's do this | 20:30 |
| jaosorior | you can also start uploading to gerrit and set it as work in progress | 20:30 |
| jaosorior | ...so I can read your code in vim :P | 20:31 |
| rm_work | …so I can read your code in pycharm :P | 20:31 |
| alee | http://fpaste.org/169243/11810851/ | 20:32 |
| *** jhfeng has joined #openstack-barbican | 20:32 | |
| alee | jaosorior, rm_work we can do that if there isn't something obvious .. | 20:33 |
| alee | rm_work, ^^ | 20:33 |
| rm_work | yeah I am just giving you a hard time :P | 20:33 |
| alee | so it has code for model, test for model, and result .. | 20:33 |
| alee | I'm trying to figure out what the right code is for line 40 | 20:34 |
| rm_work | yeah i was looking into that already actually | 20:34 |
| rm_work | the MappedCollection thing | 20:34 |
| alee | I took that line from a similar line in Containers -- where we store the ContainerSecrets | 20:35 |
| alee | but I have no idea how that line works .. | 20:35 |
| rm_work | err | 20:36 |
| *** mikedillion has quit IRC | 20:36 | |
| rm_work | loading this up in pycharm | 20:36 |
| rm_work | sec | 20:36 |
| jaosorior | ...reading... | 20:37 |
| jaosorior | uhm... it's not necessarily like that | 20:40 |
| jaosorior | thing i | 20:40 |
| jaosorior | is | 20:40 |
| jaosorior | for ContainerSecrets there is a back reference specified | 20:40 |
| jaosorior | which is then accessed from Container | 20:40 |
| jaosorior | which would be the same case for what you're doing | 20:41 |
| jaosorior | so the ca_meta would need to be a back reference defined here CertificateAuthorityMetadatum | 20:41 |
| jaosorior | and accessed from CertificateAuthority | 20:41 |
| rm_work | yeah, you've defined it explicitly, it looks like? | 20:42 |
| rm_work | err | 20:42 |
| rm_work | except you also changed the type to mapped_collection | 20:42 |
| jhfeng | I'm using Barbican quick start Guide to install a local Barbican. It 's saying install python 2.7.5. Does that mean current barbican code only work on 2.7.5 and up ? | 20:42 |
| rm_work | I don't know what that does, but i'm still looking | 20:42 |
| rm_work | jhfeng: i think technically it worked with 2.6 but openstack removed the 2.6 gates, so i don't know anymore | 20:43 |
| openstackgerrit | Merged openstack/barbican: Adding client certificates to connection credentials https://review.openstack.org/135217 | 20:43 |
| jaosorior | jhfeng: Barbican still doesn't support 3.X | 20:43 |
| rm_work | jhfeng: I have had problems with some specific versions though, it says 2.7.5 to be consistent so if people have problems we can more easily help them | 20:43 |
| rm_work | I think I run it on 2.7.8 | 20:43 |
| openstackgerrit | Merged openstack/barbican: Make default action return 405 in the controllers https://review.openstack.org/144743 | 20:44 |
| jaosorior | it should work just fine in python 2.7.X | 20:44 |
| rm_work | I had issues with pyca on 2.7.9 >_> | 20:45 |
| rm_work | but that might be fixed by now | 20:45 |
| jhfeng | thanks | 20:45 |
| alee | jaosorior, rm_work so -- I need to define ca_meta in CertificateAuthorityMetadatum, and not in CertificateAuthority then? | 20:45 |
| rm_work | err | 20:45 |
| rm_work | not necessarily, i think it might be the mapped_collection thing | 20:46 |
| jaosorior | If I understood correctly what you're trying to do, that would be a usual way to do it. Yet, I actually don't fully understand the mapped_collection thingy | 20:46 |
| alee | jaosorior, rm_work well the mapped collection thingy was me just doing what secret and secret metadata does .. | 20:47 |
| rm_work | hmm | 20:47 |
| alee | rm_work, jaosorior -- I freely admit here that I have no idea exactly what I'm doing .. | 20:47 |
| jaosorior | I gotta go quite soon though (almost 11pm here), so if you don't figure it out in the next 10 hours. You could upload it to gerrit as work in progress and I can help out tomorrow | 20:47 |
| alee | jaosorior, egads that is late :/ | 20:48 |
| alee | jaosorior, let me try what you suggested .. and do it the same way as container and container secrets | 20:49 |
| jaosorior | sure | 20:49 |
| rm_work | yeah possibly you can only set an attribute that way when it's via backref? | 20:49 |
| jaosorior | either way, I can continue that part tomorrow if you need, no biggie | 20:49 |
| rm_work | I am not familiar with that data type | 20:49 |
| alee | or it could be the mapped collection thing -- there is also some kind of relationship with containers and consumers | 20:50 |
| alee | which does it a different way | 20:50 |
| rm_work | yeah, that is the one I did | 20:50 |
| rm_work | trying to find good examples for using the mapped_collections and I am at a loss | 20:52 |
| alee | rm_work, jaosorior -- well I tried just removing the line about mapped_collections and now that error seems to have gone away .. | 20:54 |
| rm_work | lol | 20:54 |
| rm_work | does it… "work" though? | 20:55 |
| rm_work | note that i didn't use it for consumers... | 20:55 |
| alee | test is not yet passing, but trying to figure out why .. | 20:55 |
| alee | rm_work, ah - good to know .. | 20:55 |
| rm_work | of course mine is one-way | 20:56 |
| rm_work | consumers = sa.orm.relationship("ContainerConsumerMetadatum") | 20:56 |
| rm_work | no backref | 20:56 |
| *** jhfeng has quit IRC | 20:57 | |
| *** jkf has quit IRC | 21:01 | |
| alee | rm_work, jaosorior - well it did not work -- and the error is illuminating -- self.assertEqual(ca.ca_meta['name'], self.parsed_ca['name']) | 21:02 |
| alee | TypeError: list indices must be integers, not str | 21:02 |
| rm_work | right | 21:03 |
| alee | append is useful for lists of course .. | 21:03 |
| rm_work | it's a map | 21:03 |
| rm_work | not a list | 21:03 |
| rm_work | i think normally you only use append via a backref | 21:03 |
| rm_work | because then it "knows" what the index is | 21:03 |
| alee | ok - let me try the way jaosorior suggested .. | 21:04 |
| alee | oops meeting .. | 21:04 |
| *** nkinder has quit IRC | 21:04 | |
| *** paul_glass has joined #openstack-barbican | 21:05 | |
| *** jkf has joined #openstack-barbican | 21:05 | |
| *** david-ly_ has joined #openstack-barbican | 21:07 | |
| *** david-lyle has quit IRC | 21:09 | |
| *** david-ly_ has quit IRC | 21:12 | |
| *** nkinder has joined #openstack-barbican | 21:17 | |
| *** SheenaG11 has quit IRC | 21:29 | |
| *** alee has quit IRC | 21:32 | |
| *** darrenmoffat has quit IRC | 21:32 | |
| *** jorge_munoz has quit IRC | 21:32 | |
| *** alpha_ori has quit IRC | 21:32 | |
| *** reaperhulk has quit IRC | 21:32 | |
| *** paul_glass has quit IRC | 21:33 | |
| *** crc32 has quit IRC | 21:33 | |
| *** reaperhulk has joined #openstack-barbican | 21:34 | |
| *** alpha_ori has joined #openstack-barbican | 21:34 | |
| *** jorge_munoz has joined #openstack-barbican | 21:34 | |
| *** darrenmoffat has joined #openstack-barbican | 21:34 | |
| *** alee has joined #openstack-barbican | 21:34 | |
| *** paul_glass has joined #openstack-barbican | 21:34 | |
| *** crc32 has joined #openstack-barbican | 21:34 | |
| *** kebray has quit IRC | 21:36 | |
| *** ayoung has quit IRC | 21:36 | |
| *** dstanek has quit IRC | 21:36 | |
| *** kebray has joined #openstack-barbican | 21:37 | |
| *** ayoung has joined #openstack-barbican | 21:37 | |
| *** dstanek has joined #openstack-barbican | 21:37 | |
| *** jaosorior has quit IRC | 21:38 | |
| *** samueldmq has quit IRC | 21:38 | |
| *** redrobot has quit IRC | 21:38 | |
| *** kgriffs is now known as kgriffs|afk | 21:39 | |
| *** kebray has quit IRC | 21:40 | |
| *** samueldmq has joined #openstack-barbican | 21:40 | |
| *** redrobot has joined #openstack-barbican | 21:40 | |
| *** redrobot is now known as Guest80861 | 21:41 | |
| *** david-lyle has joined #openstack-barbican | 21:41 | |
| *** Guest80861 is now known as redrobot | 21:42 | |
| woodster_ | alee, are you there? | 21:42 |
| *** dstufft has quit IRC | 21:44 | |
| *** openstackgerrit has quit IRC | 21:44 | |
| *** erw has quit IRC | 21:44 | |
| *** nkinder has quit IRC | 21:44 | |
| *** greghaynes has quit IRC | 21:44 | |
| *** toabctl has quit IRC | 21:44 | |
| *** samueldmq has quit IRC | 21:44 | |
| *** ayoung has quit IRC | 21:45 | |
| *** dstanek has quit IRC | 21:45 | |
| *** david-lyle has quit IRC | 21:45 | |
| *** alee has quit IRC | 21:45 | |
| *** darrenmoffat has quit IRC | 21:45 | |
| *** jorge_munoz has quit IRC | 21:45 | |
| *** alpha_ori has quit IRC | 21:45 | |
| *** reaperhulk has quit IRC | 21:45 | |
| *** paul_glass has quit IRC | 21:45 | |
| *** crc32 has quit IRC | 21:45 | |
| *** kgriffs|afk has quit IRC | 21:45 | |
| *** woodster_ has quit IRC | 21:46 | |
| *** rm_you has quit IRC | 21:46 | |
| *** rm_work has quit IRC | 21:46 | |
| *** jraim has quit IRC | 21:46 | |
| *** russell_h has quit IRC | 21:46 | |
| *** lbragstad has quit IRC | 21:46 | |
| *** tdink has quit IRC | 21:46 | |
| *** dimtruck has quit IRC | 21:46 | |
| *** anteaya has quit IRC | 21:46 | |
| *** codekobe has quit IRC | 21:46 | |
| *** jillysciarilly has quit IRC | 21:46 | |
| *** dougwig has quit IRC | 21:46 | |
| *** chellygel has quit IRC | 21:46 | |
| *** lisaclark has quit IRC | 21:46 | |
| *** d0ugal has quit IRC | 21:46 | |
| *** mordred has quit IRC | 21:46 | |
| *** insequent has quit IRC | 21:46 | |
| *** hockeynut has quit IRC | 21:46 | |
| *** morganfainberg has quit IRC | 21:46 | |
| *** redrobot has quit IRC | 21:46 | |
| *** elmiko has quit IRC | 21:46 | |
| *** openstack has joined #openstack-barbican | 21:47 | |
| *** jkf has quit IRC | 21:50 | |
| *** jaosorior has joined #openstack-barbican | 21:51 | |
| *** david-lyle has joined #openstack-barbican | 21:51 | |
| *** redrobot has joined #openstack-barbican | 21:51 | |
| *** samueldmq has joined #openstack-barbican | 21:51 | |
| *** dstanek has joined #openstack-barbican | 21:51 | |
| *** ayoung has joined #openstack-barbican | 21:51 | |
| *** crc32 has joined #openstack-barbican | 21:51 | |
| *** paul_glass has joined #openstack-barbican | 21:51 | |
| *** alee has joined #openstack-barbican | 21:51 | |
| *** darrenmoffat has joined #openstack-barbican | 21:51 | |
| *** jorge_munoz has joined #openstack-barbican | 21:51 | |
| *** alpha_ori has joined #openstack-barbican | 21:51 | |
| *** reaperhulk has joined #openstack-barbican | 21:51 | |
| *** nkinder has joined #openstack-barbican | 21:51 | |
| *** kgriffs|afk has joined #openstack-barbican | 21:51 | |
| *** rellerreller has joined #openstack-barbican | 21:51 | |
| *** woodster_ has joined #openstack-barbican | 21:51 | |
| *** rm_you has joined #openstack-barbican | 21:51 | |
| *** russell_h has joined #openstack-barbican | 21:51 | |
| *** dimtruck has joined #openstack-barbican | 21:51 | |
| *** rm_work has joined #openstack-barbican | 21:51 | |
| *** jraim has joined #openstack-barbican | 21:51 | |
| *** lbragstad has joined #openstack-barbican | 21:51 | |
| *** tdink has joined #openstack-barbican | 21:51 | |
| *** elmiko has joined #openstack-barbican | 21:51 | |
| *** greghaynes has joined #openstack-barbican | 21:51 | |
| *** anteaya has joined #openstack-barbican | 21:51 | |
| *** codekobe has joined #openstack-barbican | 21:51 | |
| *** jillysciarilly has joined #openstack-barbican | 21:51 | |
| *** dougwig has joined #openstack-barbican | 21:51 | |
| *** toabctl has joined #openstack-barbican | 21:51 | |
| *** chellygel has joined #openstack-barbican | 21:51 | |
| *** lisaclark has joined #openstack-barbican | 21:51 | |
| *** d0ugal has joined #openstack-barbican | 21:51 | |
| *** mordred has joined #openstack-barbican | 21:51 | |
| *** insequent has joined #openstack-barbican | 21:51 | |
| *** hockeynut has joined #openstack-barbican | 21:51 | |
| *** morganfainberg has joined #openstack-barbican | 21:51 | |
| *** david-lyle has quit IRC | 21:51 | |
| *** david-lyle has joined #openstack-barbican | 21:51 | |
| *** jaosorior has quit IRC | 21:51 | |
| *** jaosorior has joined #openstack-barbican | 21:51 | |
| *** jkf has joined #openstack-barbican | 21:51 | |
| *** dstufft_ has joined #openstack-barbican | 21:53 | |
| *** kgriffs|afk has quit IRC | 21:53 | |
| *** woodster_ has quit IRC | 21:53 | |
| *** rm_you has quit IRC | 21:53 | |
| *** rm_work has quit IRC | 21:53 | |
| *** jraim has quit IRC | 21:53 | |
| *** russell_h has quit IRC | 21:53 | |
| *** lbragstad has quit IRC | 21:53 | |
| *** tdink has quit IRC | 21:53 | |
| *** dimtruck has quit IRC | 21:53 | |
| *** anteaya has quit IRC | 21:53 | |
| *** kgriffs|afk has joined #openstack-barbican | 21:53 | |
| *** woodster_ has joined #openstack-barbican | 21:53 | |
| *** rm_you has joined #openstack-barbican | 21:53 | |
| *** russell_h has joined #openstack-barbican | 21:53 | |
| *** dimtruck has joined #openstack-barbican | 21:53 | |
| *** rm_work has joined #openstack-barbican | 21:53 | |
| *** jraim has joined #openstack-barbican | 21:53 | |
| *** lbragstad has joined #openstack-barbican | 21:53 | |
| *** tdink has joined #openstack-barbican | 21:53 | |
| *** anteaya has joined #openstack-barbican | 21:53 | |
| *** codekobe has quit IRC | 21:54 | |
| *** jillysciarilly has quit IRC | 21:54 | |
| *** dougwig has quit IRC | 21:54 | |
| *** chellygel has quit IRC | 21:54 | |
| *** lisaclark has quit IRC | 21:54 | |
| *** d0ugal has quit IRC | 21:54 | |
| *** mordred has quit IRC | 21:54 | |
| *** insequent has quit IRC | 21:54 | |
| *** hockeynut has quit IRC | 21:54 | |
| *** morganfainberg has quit IRC | 21:54 | |
| *** dstufft has joined #openstack-barbican | 21:54 | |
| *** openstackgerrit has joined #openstack-barbican | 21:54 | |
| *** erw has joined #openstack-barbican | 21:54 | |
| *** codekobe has joined #openstack-barbican | 21:54 | |
| *** jillysciarilly has joined #openstack-barbican | 21:54 | |
| *** dougwig has joined #openstack-barbican | 21:54 | |
| *** chellygel has joined #openstack-barbican | 21:54 | |
| *** lisaclark has joined #openstack-barbican | 21:54 | |
| *** d0ugal has joined #openstack-barbican | 21:54 | |
| *** mordred has joined #openstack-barbican | 21:54 | |
| *** insequent has joined #openstack-barbican | 21:54 | |
| *** hockeynut has joined #openstack-barbican | 21:54 | |
| *** morganfainberg has joined #openstack-barbican | 21:54 | |
| *** redrobot has quit IRC | 21:54 | |
| *** elmiko has quit IRC | 21:55 | |
| *** dstufft has quit IRC | 21:55 | |
| *** erw has quit IRC | 21:55 | |
| *** dstufft_ is now known as dstufft | 21:55 | |
| *** redrobot has joined #openstack-barbican | 21:57 | |
| *** rellerreller has quit IRC | 21:57 | |
| *** rellerreller has joined #openstack-barbican | 21:57 | |
| *** redrobot is now known as Guest8210 | 21:57 | |
| *** kgriffs|afk is now known as kgriffs | 21:58 | |
| *** erw has joined #openstack-barbican | 21:59 | |
| *** elmiko has joined #openstack-barbican | 21:59 | |
| *** kgriffs is now known as kgriffs|afk | 22:00 | |
| *** paul_glass has quit IRC | 22:02 | |
| *** david-lyle has quit IRC | 22:02 | |
| *** nkinder has quit IRC | 22:02 | |
| *** greghaynes has quit IRC | 22:02 | |
| *** toabctl has quit IRC | 22:02 | |
| *** elmiko has quit IRC | 22:02 | |
| *** rellerreller has quit IRC | 22:02 | |
| *** codekobe has quit IRC | 22:02 | |
| *** jillysciarilly has quit IRC | 22:02 | |
| *** dougwig has quit IRC | 22:02 | |
| *** chellygel has quit IRC | 22:02 | |
| *** lisaclark has quit IRC | 22:02 | |
| *** d0ugal has quit IRC | 22:03 | |
| *** mordred has quit IRC | 22:03 | |
| *** insequent has quit IRC | 22:03 | |
| *** hockeynut has quit IRC | 22:03 | |
| *** morganfainberg has quit IRC | 22:03 | |
| *** kgriffs|afk has quit IRC | 22:03 | |
| *** woodster_ has quit IRC | 22:03 | |
| *** rm_you has quit IRC | 22:03 | |
| *** russell_h has quit IRC | 22:03 | |
| *** lbragstad has quit IRC | 22:03 | |
| *** tdink has quit IRC | 22:03 | |
| *** rm_work has quit IRC | 22:03 | |
| *** jraim has quit IRC | 22:03 | |
| *** dimtruck has quit IRC | 22:03 | |
| *** anteaya has quit IRC | 22:03 | |
| *** openstackgerrit has quit IRC | 22:03 | |
| *** Guest8210 has quit IRC | 22:03 | |
| *** dstufft has quit IRC | 22:03 | |
| *** samueldmq has quit IRC | 22:04 | |
| *** ayoung has quit IRC | 22:04 | |
| *** dstanek has quit IRC | 22:04 | |
| *** jkf has quit IRC | 22:04 | |
| *** alee has quit IRC | 22:04 | |
| *** darrenmoffat has quit IRC | 22:04 | |
| *** erw has quit IRC | 22:05 | |
| *** jorge_munoz has quit IRC | 22:05 | |
| *** alpha_ori has quit IRC | 22:05 | |
| *** reaperhulk has quit IRC | 22:05 | |
| *** jaosorior has quit IRC | 22:05 | |
| *** crc32 has quit IRC | 22:05 | |
| *** SheenaG1 has joined #openstack-barbican | 22:06 | |
| *** elmiko has joined #openstack-barbican | 22:06 | |
| *** erw has joined #openstack-barbican | 22:06 | |
| *** rellerreller has joined #openstack-barbican | 22:06 | |
| *** Guest8210 has joined #openstack-barbican | 22:06 | |
| *** morganfainberg has joined #openstack-barbican | 22:06 | |
| *** hockeynut has joined #openstack-barbican | 22:06 | |
| *** insequent has joined #openstack-barbican | 22:06 | |
| *** mordred has joined #openstack-barbican | 22:06 | |
| *** d0ugal has joined #openstack-barbican | 22:06 | |
| *** lisaclark has joined #openstack-barbican | 22:06 | |
| *** chellygel has joined #openstack-barbican | 22:06 | |
| *** dougwig has joined #openstack-barbican | 22:06 | |
| *** jillysciarilly has joined #openstack-barbican | 22:06 | |
| *** codekobe has joined #openstack-barbican | 22:06 | |
| *** openstackgerrit has joined #openstack-barbican | 22:06 | |
| *** anteaya has joined #openstack-barbican | 22:06 | |
| *** tdink has joined #openstack-barbican | 22:06 | |
| *** lbragstad has joined #openstack-barbican | 22:06 | |
| *** jraim has joined #openstack-barbican | 22:06 | |
| *** rm_work has joined #openstack-barbican | 22:06 | |
| *** dimtruck has joined #openstack-barbican | 22:06 | |
| *** russell_h has joined #openstack-barbican | 22:06 | |
| *** rm_you has joined #openstack-barbican | 22:06 | |
| *** woodster_ has joined #openstack-barbican | 22:06 | |
| *** kgriffs|afk has joined #openstack-barbican | 22:06 | |
| *** dstufft has joined #openstack-barbican | 22:06 | |
| *** jkf has joined #openstack-barbican | 22:06 | |
| *** jaosorior has joined #openstack-barbican | 22:06 | |
| *** david-lyle has joined #openstack-barbican | 22:06 | |
| *** samueldmq has joined #openstack-barbican | 22:06 | |
| *** dstanek has joined #openstack-barbican | 22:06 | |
| *** ayoung has joined #openstack-barbican | 22:06 | |
| *** crc32 has joined #openstack-barbican | 22:06 | |
| *** alee has joined #openstack-barbican | 22:06 | |
| *** darrenmoffat has joined #openstack-barbican | 22:06 | |
| *** jorge_munoz has joined #openstack-barbican | 22:06 | |
| *** alpha_ori has joined #openstack-barbican | 22:06 | |
| *** reaperhulk has joined #openstack-barbican | 22:06 | |
| *** nkinder has joined #openstack-barbican | 22:06 | |
| *** greghaynes has joined #openstack-barbican | 22:06 | |
| *** toabctl has joined #openstack-barbican | 22:06 | |
| *** paul_glass has joined #openstack-barbican | 22:07 | |
| *** dstanek has left #openstack-barbican | 22:10 | |
| *** kgriffs|afk is now known as kgriffs | 22:15 | |
| *** kgriffs is now known as kgriffs|afk | 22:16 | |
| *** rellerreller has quit IRC | 22:17 | |
| *** SheenaG1 has quit IRC | 22:18 | |
| *** dstanek has joined #openstack-barbican | 22:18 | |
| *** dougwig has quit IRC | 22:19 | |
| *** SheenaG1 has joined #openstack-barbican | 22:19 | |
| *** ayoung has quit IRC | 22:21 | |
| *** ryanpetrello has joined #openstack-barbican | 22:21 | |
| *** kgriffs|afk is now known as kgriffs | 22:24 | |
| *** david-lyle has quit IRC | 22:27 | |
| *** david-lyle has joined #openstack-barbican | 22:30 | |
| *** alee has quit IRC | 22:32 | |
| *** dimtruck is now known as zz_dimtruck | 22:35 | |
| *** paul_glass has quit IRC | 22:48 | |
| woodster_ | alee, are you there? | 22:49 |
| *** dstanek has left #openstack-barbican | 22:53 | |
| *** jorge_munoz has quit IRC | 22:54 | |
| *** ryanpetrello has quit IRC | 22:57 | |
| *** SheenaG1 has quit IRC | 23:00 | |
| *** zz_dimtruck is now known as dimtruck | 23:06 | |
| *** kgriffs is now known as kgriffs|afk | 23:12 | |
| *** dimtruck is now known as zz_dimtruck | 23:16 | |
| rm_work | woodster_: re: email: seems like that could work, don't think it's absolutely necessary | 23:20 |
| *** david-lyle has quit IRC | 23:27 | |
| *** ryanpetrello has joined #openstack-barbican | 23:27 | |
| woodster_ | rm_work, as long as forward progress on the code is happening, I'm happier :) | 23:29 |
| *** crc32 has quit IRC | 23:30 | |
| *** jaosorior has quit IRC | 23:33 | |
| *** kgriffs|afk is now known as kgriffs | 23:36 | |
| *** dougwig has joined #openstack-barbican | 23:39 | |
| *** codekobe has quit IRC | 23:40 | |
| *** jraim has quit IRC | 23:40 | |
| *** jkf has quit IRC | 23:49 | |
| *** dstanek has joined #openstack-barbican | 23:56 | |
| *** alee has joined #openstack-barbican | 23:57 | |
| *** nkinder has quit IRC | 23:58 | |
| *** ryanpetrello has quit IRC | 23:59 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/147023 | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!