| *** chlong has joined #openstack-barbican | 00:05 | |
| *** dstanek has quit IRC | 00:09 | |
| *** dstanek has joined #openstack-barbican | 00:09 | |
| *** jraim has joined #openstack-barbican | 00:10 | |
| *** atiwari has joined #openstack-barbican | 00:24 | |
| *** david-lyle has joined #openstack-barbican | 00:28 | |
| *** codekobe has joined #openstack-barbican | 00:33 | |
| *** jvrbanac has quit IRC | 00:36 | |
| *** jvrbanac has joined #openstack-barbican | 00:45 | |
| *** jraim has quit IRC | 00:54 | |
| *** dougwig has quit IRC | 00:54 | |
| *** kgriffs is now known as kgriffs|afk | 00:57 | |
| *** david-lyle has quit IRC | 00:58 | |
| *** dougwig has joined #openstack-barbican | 00:58 | |
| *** david-lyle has joined #openstack-barbican | 00:58 | |
| *** jraim has joined #openstack-barbican | 01:00 | |
| *** david-lyle has quit IRC | 01:05 | |
| *** david-lyle has joined #openstack-barbican | 01:09 | |
| *** atiwari has quit IRC | 01:12 | |
| *** jraim has quit IRC | 01:13 | |
| *** jraim has joined #openstack-barbican | 01:19 | |
| *** nkinder has joined #openstack-barbican | 01:22 | |
| *** david-lyle has quit IRC | 01:24 | |
| *** david-lyle has joined #openstack-barbican | 01:29 | |
| *** david-lyle has quit IRC | 01:35 | |
| *** codekobe has quit IRC | 01:35 | |
| *** codekobe has joined #openstack-barbican | 01:36 | |
| *** david-lyle has joined #openstack-barbican | 01:52 | |
| *** david-lyle has quit IRC | 01:59 | |
| *** ayoung has joined #openstack-barbican | 02:01 | |
| *** samueldmq has quit IRC | 02:09 | |
| *** samueldmq has joined #openstack-barbican | 02:20 | |
| *** alee has quit IRC | 02:37 | |
| *** david-lyle has joined #openstack-barbican | 02:40 | |
| *** alee has joined #openstack-barbican | 02:43 | |
| *** rm_you| has joined #openstack-barbican | 02:45 | |
| *** kgriffs|afk has quit IRC | 02:46 | |
| *** zz_dimtruck has quit IRC | 02:46 | |
| *** zz_dimtruck has joined #openstack-barbican | 02:46 | |
| *** kgriffs|afk has joined #openstack-barbican | 02:47 | |
| *** zz_dimtruck is now known as dimtruck | 02:47 | |
| *** kgriffs|afk is now known as kgriffs | 02:47 | |
| *** russell_h has quit IRC | 02:47 | |
| *** lbragstad has quit IRC | 02:47 | |
| *** tdink has quit IRC | 02:48 | |
| *** woodster_ has quit IRC | 02:48 | |
| *** rm_you has quit IRC | 02:48 | |
| *** rm_work has quit IRC | 02:48 | |
| *** woodster_ has joined #openstack-barbican | 02:53 | |
| *** rm_work has joined #openstack-barbican | 02:53 | |
| *** russell_h has joined #openstack-barbican | 02:53 | |
| *** tdink has joined #openstack-barbican | 02:54 | |
| *** lbragstad has joined #openstack-barbican | 02:55 | |
| *** jroll has quit IRC | 03:00 | |
| *** tdink has quit IRC | 03:07 | |
| *** codekobe has quit IRC | 03:08 | |
| *** lbragstad has quit IRC | 03:08 | |
| *** codekobe has joined #openstack-barbican | 03:10 | |
| *** lbragstad has joined #openstack-barbican | 03:10 | |
| *** jroll has joined #openstack-barbican | 03:10 | |
| *** tdink has joined #openstack-barbican | 03:12 | |
| *** dimtruck has quit IRC | 03:17 | |
| *** jraim has quit IRC | 03:18 | |
| *** jraim has joined #openstack-barbican | 03:19 | |
| *** zz_dimtruck has joined #openstack-barbican | 03:23 | |
| *** zz_dimtruck is now known as dimtruck | 03:24 | |
| *** david-lyle has quit IRC | 03:25 | |
| *** jroll has quit IRC | 03:26 | |
| *** ayoung has quit IRC | 03:31 | |
| *** jroll has joined #openstack-barbican | 03:32 | |
| *** russell_h has quit IRC | 03:33 | |
| *** russell_h has joined #openstack-barbican | 03:35 | |
| *** dimtruck has quit IRC | 03:36 | |
| *** lbragstad has quit IRC | 03:38 | |
| *** zz_dimtruck has joined #openstack-barbican | 03:43 | |
| *** ayoung has joined #openstack-barbican | 03:43 | |
| *** zz_dimtruck is now known as dimtruck | 03:43 | |
| *** jraim has quit IRC | 03:45 | |
| *** jraim has joined #openstack-barbican | 03:47 | |
| *** lbragstad has joined #openstack-barbican | 03:47 | |
| *** russell_h has quit IRC | 03:48 | |
| openstackgerrit | Merged openstack/barbican: Updated from global requirements https://review.openstack.org/147023 | 03:53 |
|---|---|---|
| *** russell_h has joined #openstack-barbican | 03:57 | |
| *** lbragstad has quit IRC | 04:00 | |
| *** lbragstad has joined #openstack-barbican | 04:02 | |
| *** kebray has joined #openstack-barbican | 04:04 | |
| *** dimtruck has quit IRC | 04:07 | |
| *** zz_dimtruck has joined #openstack-barbican | 04:16 | |
| *** zz_dimtruck is now known as dimtruck | 04:16 | |
| *** tdink has quit IRC | 04:22 | |
| *** tdink has joined #openstack-barbican | 04:30 | |
| *** dimtruck has quit IRC | 04:35 | |
| *** russell_h has quit IRC | 04:36 | |
| *** russell_h has joined #openstack-barbican | 04:36 | |
| *** zz_dimtruck has joined #openstack-barbican | 04:37 | |
| *** zz_dimtruck is now known as dimtruck | 04:37 | |
| *** kebray has quit IRC | 04:39 | |
| *** kebray has joined #openstack-barbican | 04:39 | |
| *** tdink has quit IRC | 04:42 | |
| *** tdink has joined #openstack-barbican | 04:43 | |
| *** jvrbanac has quit IRC | 04:51 | |
| *** jvrbanac has joined #openstack-barbican | 04:54 | |
| *** dimtruck has quit IRC | 04:57 | |
| *** zz_dimtruck has joined #openstack-barbican | 05:04 | |
| *** zz_dimtruck is now known as dimtruck | 05:04 | |
| *** kebray has quit IRC | 05:10 | |
| *** kebray has joined #openstack-barbican | 05:15 | |
| *** dimtruck has quit IRC | 05:17 | |
| *** zz_dimtruck has joined #openstack-barbican | 05:18 | |
| *** zz_dimtruck is now known as dimtruck | 05:18 | |
| *** tdink has quit IRC | 05:23 | |
| *** kebray has quit IRC | 05:23 | |
| *** tdink has joined #openstack-barbican | 05:29 | |
| *** dimtruck has quit IRC | 05:36 | |
| *** zz_dimtruck has joined #openstack-barbican | 05:43 | |
| *** zz_dimtruck is now known as dimtruck | 05:43 | |
| *** Nirupama has joined #openstack-barbican | 05:47 | |
| *** lbragstad has quit IRC | 05:52 | |
| *** lbragstad has joined #openstack-barbican | 05:55 | |
| *** tdink has quit IRC | 05:57 | |
| *** dimtruck has quit IRC | 05:58 | |
| *** zz_dimtruck has joined #openstack-barbican | 05:58 | |
| *** zz_dimtruck is now known as dimtruck | 05:58 | |
| *** tdink has joined #openstack-barbican | 05:59 | |
| *** woodster_ has quit IRC | 06:20 | |
| *** tdink has quit IRC | 07:45 | |
| *** dimtruck has quit IRC | 07:45 | |
| *** zz_dimtruck has joined #openstack-barbican | 07:46 | |
| *** zz_dimtruck is now known as dimtruck | 07:46 | |
| *** chlong has quit IRC | 07:47 | |
| *** tdink has joined #openstack-barbican | 07:49 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Return the actual name value for entities https://review.openstack.org/145495 | 08:02 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Fix UnicodeDecodeError's in the functional tests https://review.openstack.org/146845 | 08:02 |
| *** jaosorior has joined #openstack-barbican | 08:03 | |
| *** tdink has quit IRC | 08:06 | |
| *** tdink has joined #openstack-barbican | 08:08 | |
| *** lbragstad has quit IRC | 08:24 | |
| *** nkinder has quit IRC | 08:25 | |
| *** lbragstad has joined #openstack-barbican | 08:34 | |
| *** jaosorior has quit IRC | 08:36 | |
| *** nkinder has joined #openstack-barbican | 08:37 | |
| *** jaosorior has joined #openstack-barbican | 08:38 | |
| *** tdink has quit IRC | 08:46 | |
| *** tdink has joined #openstack-barbican | 08:54 | |
| *** jaosorior has quit IRC | 08:58 | |
| *** jaosorior has joined #openstack-barbican | 08:59 | |
| *** tdink has quit IRC | 09:07 | |
| *** tdink has joined #openstack-barbican | 09:13 | |
| *** jamielennox is now known as jamielennox|away | 09:31 | |
| openstackgerrit | Tim Kelsey proposed openstack/barbican: Checking the certificate file has reasonable permissions https://review.openstack.org/146906 | 09:42 |
| *** dimtruck has quit IRC | 09:44 | |
| *** zz_dimtruck has joined #openstack-barbican | 09:52 | |
| *** zz_dimtruck is now known as dimtruck | 09:52 | |
| *** tdink has quit IRC | 09:54 | |
| *** tdink has joined #openstack-barbican | 09:56 | |
| openstackgerrit | Tim Kelsey proposed openstack/barbican: Checking the certificate file has reasonable permissions https://review.openstack.org/146906 | 10:38 |
| *** SheenaG1 has joined #openstack-barbican | 11:59 | |
| *** chlong has joined #openstack-barbican | 12:06 | |
| *** ryanpetrello has joined #openstack-barbican | 12:53 | |
| *** woodster_ has joined #openstack-barbican | 13:00 | |
| *** chlong has quit IRC | 13:02 | |
| *** darrenmoffat has quit IRC | 13:26 | |
| *** darrenmoffat has joined #openstack-barbican | 13:27 | |
| *** Nirupama has quit IRC | 13:39 | |
| openstackgerrit | Donald Stufft proposed openstack/barbican: Add data model entities for OrderRetryTask https://review.openstack.org/147160 | 13:59 |
| *** nkinder has quit IRC | 14:20 | |
| *** SheenaG1 has joined #openstack-barbican | 14:53 | |
| *** kebray has joined #openstack-barbican | 15:02 | |
| *** rellerreller has joined #openstack-barbican | 15:03 | |
| *** ametts has joined #openstack-barbican | 15:05 | |
| *** nkinder has joined #openstack-barbican | 15:10 | |
| *** lisaclark1 has joined #openstack-barbican | 15:12 | |
| *** SheenaG1 has quit IRC | 15:24 | |
| *** SheenaG1 has joined #openstack-barbican | 15:28 | |
| *** jroll has quit IRC | 15:28 | |
| *** jroll has joined #openstack-barbican | 15:28 | |
| *** paul_glass has joined #openstack-barbican | 15:37 | |
| *** kebray has quit IRC | 15:42 | |
| *** lisaclark1 has quit IRC | 15:49 | |
| *** lisaclark1 has joined #openstack-barbican | 15:51 | |
| *** jorge_munoz has joined #openstack-barbican | 15:54 | |
| *** ryanpetrello_ has joined #openstack-barbican | 16:04 | |
| *** ryanpetrello has quit IRC | 16:08 | |
| *** ryanpetrello_ is now known as ryanpetrello | 16:08 | |
| *** kebray has joined #openstack-barbican | 16:21 | |
| *** lisaclark1 has quit IRC | 16:31 | |
| *** lisaclark1 has joined #openstack-barbican | 16:35 | |
| openstackgerrit | Donald Stufft proposed openstack/barbican: Add data model entities for OrderRetryTask https://review.openstack.org/147160 | 16:45 |
| *** lisaclark1 has quit IRC | 16:46 | |
| *** gyee has joined #openstack-barbican | 16:48 | |
| *** atiwari has joined #openstack-barbican | 16:52 | |
| *** Guest8210 is now known as redrobot | 16:54 | |
| *** lisaclark1 has joined #openstack-barbican | 16:55 | |
| *** lisaclark1 has quit IRC | 17:01 | |
| *** lisaclark1 has joined #openstack-barbican | 17:05 | |
| *** dimtruck is now known as zz_dimtruck | 17:10 | |
| *** bdpayne has joined #openstack-barbican | 17:10 | |
| *** lisaclark1 has quit IRC | 17:15 | |
| *** zz_dimtruck is now known as dimtruck | 17:16 | |
| *** lisaclark1 has joined #openstack-barbican | 17:17 | |
| *** SheenaG1 has quit IRC | 17:20 | |
| *** lisaclark2 has joined #openstack-barbican | 17:22 | |
| *** lisaclark1 has quit IRC | 17:23 | |
| *** lisaclark1 has joined #openstack-barbican | 17:25 | |
| *** lisaclark1 has quit IRC | 17:26 | |
| *** lisaclark1 has joined #openstack-barbican | 17:26 | |
| redrobot | jorge_munoz ya? | 17:27 |
| *** lisaclark2 has quit IRC | 17:28 | |
| atiwari | reaperhulk, are you around? | 17:31 |
| *** jaosorior has quit IRC | 17:43 | |
| *** lisaclark1 has quit IRC | 17:46 | |
| *** lisaclark1 has joined #openstack-barbican | 17:47 | |
| *** lisaclark1 has quit IRC | 17:55 | |
| *** jaosorior has joined #openstack-barbican | 17:59 | |
| *** SheenaG1 has joined #openstack-barbican | 18:00 | |
| *** trey has joined #openstack-barbican | 18:01 | |
| *** jkf has joined #openstack-barbican | 18:03 | |
| *** chlong has joined #openstack-barbican | 18:10 | |
| openstackgerrit | John Wood proposed openstack/barbican-specs: Save order information on created secrets/containers https://review.openstack.org/147267 | 18:29 |
| *** rellerreller has quit IRC | 18:35 | |
| elmiko | anyone around who might be able to answer a design question about RootController? | 18:38 |
| *** atiwari has quit IRC | 18:40 | |
| *** atiwari has joined #openstack-barbican | 18:42 | |
| rm_work | hey redrobot are you around? | 18:45 |
| *** atiwari has quit IRC | 18:46 | |
| *** atiwari has joined #openstack-barbican | 18:47 | |
| rm_work | woodster_: are you here? | 18:48 |
| woodster_ | rm_work, yep | 18:48 |
| woodster_ | elmiko, do you mean in our unit tests? | 18:48 |
| rm_work | woodster_: could you join #openstack-infra ? | 18:49 |
| *** atiwari has joined #openstack-barbican | 18:50 | |
| *** lisaclark1 has joined #openstack-barbican | 18:53 | |
| *** ametts has quit IRC | 18:55 | |
| elmiko | woodster_: i meant in barbican.api.app.create_main_app, i'm curious about the decision to embed the class in the function. | 18:56 |
| elmiko | no judgement, mind you, just curious | 18:57 |
| rm_work | redrobot: when you get back, could you comment on https://review.openstack.org/#/c/146231/ ? | 19:00 |
| woodster_ | elmiko, no reason I can think of. It would be more inline with other parts of code it that was a first level class in the module. I do see that the Pecan dev that helped us move to Pecan from Falcon (ryanpatrello) originally used that approach. It is a pretty small class (more like a struct) so probably ok to inline like that I figure. | 19:00 |
| rm_work | woodster_: i figured that would be a simple update, I didn't expect to be tipping over a can of worms | 19:01 |
| elmiko | woodster_: ok, cool. thanks for the clarification. | 19:02 |
| ryanpetrello | elmiko: woodster_ is correct | 19:02 |
| ryanpetrello | the RootController could just as easily have been pulled out, though | 19:02 |
| elmiko | ryanpetrello: cool | 19:02 |
| ryanpetrello | I think it was just simple enough that I inlined it | 19:02 |
| elmiko | i'm working on some decorators to help me create a swagger output from a pecan app | 19:03 |
| elmiko | i just wanted to make sure i wasn't going against some design if i messed with that class | 19:03 |
| ryanpetrello | I've seen other OpenStack folks take a similar approach to this in scenarios where they want to pass some sort of runtime config to the subcontrollers | 19:03 |
| elmiko | that makes sense, i'll have to figure out a way to accomodate that style | 19:04 |
| ryanpetrello | I doubt it's actually necessary unless the barbican folks say so | 19:04 |
| elmiko | that's really what i wanted to check, don't want to go around breaking things.. too much ;) | 19:04 |
| *** bdpayne has quit IRC | 19:05 | |
| woodster_ | rm_work, yeah we need to assume folks are integrating with us more earnestly now then in the past. | 19:08 |
| woodster_ | rm_work do you think it would be difficult to get 2.x working with the current API/server, sans new features like containers/consumers? | 19:08 |
| *** atiwari has quit IRC | 19:12 | |
| woodster_ | elmiki, ryanpetrello I don't think there would be an issue with pulling that class up to module level since it will still be gate checked, but it would be better longer term if swagger could work with in-function tests somehow. | 19:13 |
| elmiko | woodster_: +1 to making it work with in-function classes | 19:15 |
| elmiko | woodster_: i'm still working through this, i just need increase my level with regards to decorator magic | 19:15 |
| woodster_ | elmiko, that sounds good | 19:15 |
| woodster_ | rm_work ^^^ | 19:16 |
| *** atiwari has joined #openstack-barbican | 19:19 | |
| *** crc32 has joined #openstack-barbican | 19:19 | |
| woodster_ | redrobot: could you comment on https://review.openstack.org/#/c/146231/ ? Apparently there are teams integrating with 2.x of the client. I think the main changes in 3.x were to support more keystone auth components and a revamped python interaction model/framework, and maybe support newer API features like containers and consumers? Do you think it would be | 19:20 |
| woodster_ | difficult to get 2.x working with the latest API, at least for secrets and containers? | 19:20 |
| *** atiwari has quit IRC | 19:20 | |
| redrobot | woodster_ would it be difficult to do things in a backwards compatible way? Yes, I think so. | 19:21 |
| woodster_ | redrobot, I think its more a matter of what it would take to make 2.x, as it is - warts and all - work with the latest API, sans new features added at the end of Juno? At any rate, it might be good to weigh in on that CR | 19:23 |
| *** atiwari has joined #openstack-barbican | 19:23 | |
| woodster_ | ...by API I mean the REST API, not the python framework/model objects | 19:23 |
| *** SheenaG1 has quit IRC | 19:26 | |
| *** jkf has quit IRC | 19:32 | |
| *** atiwari has quit IRC | 19:35 | |
| *** kebray has quit IRC | 19:37 | |
| *** atiwari has joined #openstack-barbican | 19:37 | |
| *** nkinder has quit IRC | 19:38 | |
| *** atiwari has quit IRC | 19:38 | |
| *** atiwari has joined #openstack-barbican | 19:42 | |
| *** rellerreller has joined #openstack-barbican | 19:42 | |
| *** atiwari has quit IRC | 19:43 | |
| *** atiwari has joined #openstack-barbican | 19:47 | |
| redrobot | woodster_ I think sdague stepped away... but I don't really want to do any work on the 2.x branch. I'd rather spend that time sending patches to people using 2.x to bring them up to 3.x | 19:47 |
| *** kgriffs is now known as kgriffs|afk | 19:48 | |
| woodster_ | redrobot, I certainly understand that. Now that we know folks are integrating though, we'll have to be more careful in the future with new revs of things, and maintaining the old versions. I wish there was an easier way to figure out who is integrating with us....like how many projects have gate jobs involving barbican? | 19:49 |
| greghaynes | speaking of the controllers design, /me really wishes wsme were used | 19:49 |
| greghaynes | did anyone ever look at that? | 19:49 |
| *** atiwari has quit IRC | 19:49 | |
| greghaynes | many of the other projects use it and it does wonder for making the rest interfaces clearly defined / easily readable / small in code | 19:50 |
| redrobot | greghaynes is that an alternative to pecan? | 19:50 |
| greghaynes | its in addition to | 19:51 |
| *** atiwari has joined #openstack-barbican | 19:51 | |
| greghaynes | or, can be in addition to | 19:51 |
| greghaynes | http://pythonhosted.org//WSME/ | 19:51 |
| redrobot | greghaynes I don't think anyone has looked at it. We're certainly not opposed to it. We were originally using Falcon, but we were asked to move to Pecan to be more in-line with the rest of OpenStack. | 19:52 |
| *** atiwari has quit IRC | 19:52 | |
| greghaynes | gotcha | 19:52 |
| greghaynes | ironic is one of the projects that has done a pretty good job making their rest interface out of it if anyone is looking for an openstackey example | 19:53 |
| elmiko | greghaynes: i looked as wsme a little but was having trouble figuring out how to use it with pecan | 19:53 |
| elmiko | greghaynes: is it true that wsme can produce wadl or am i confusing it with something else | 19:53 |
| *** atiwari has joined #openstack-barbican | 19:53 | |
| greghaynes | It might, that seems like something it could do | 19:54 |
| redrobot | woodster_ yeah, we will definitely need long deprecation cycles going forward | 19:54 |
| greghaynes | elmiko: looks like yes | 19:54 |
| elmiko | greghaynes: hmm, too much reading not enough time! | 19:55 |
| greghaynes | always | 19:55 |
| *** paul_glass has quit IRC | 20:03 | |
| *** rm_mobile has joined #openstack-barbican | 20:03 | |
| *** rm_mobile has quit IRC | 20:03 | |
| *** rm_mobile has joined #openstack-barbican | 20:03 | |
| *** SheenaG1 has joined #openstack-barbican | 20:05 | |
| *** rellerreller has quit IRC | 20:07 | |
| *** david-lyle has joined #openstack-barbican | 20:10 | |
| *** jkf has joined #openstack-barbican | 20:10 | |
| *** lisaclark1 has quit IRC | 20:12 | |
| rm_work | woodster_: yeah i agree with redrobot, i would much rather DO THE WORK for anyone who is using 2.x to bring them up to 3.x, rather than trying to fudge 2.x support | 20:21 |
| rm_work | woodster_ / redrobot: but sdague seems like his feathers are pretty ruffled about the situation | 20:33 |
| woodster_ | rm_work, indeed he is, and agree with working to move to 3.x for folks. It's hard to figure out who is integrating with us to fix things though. :) | 20:36 |
| rm_work | woodster_: right but I think he's upset about the lack of backwards compatibility | 20:36 |
| rm_work | I can look at how much is broken in 2.x... | 20:36 |
| rm_work | though at this point he'd probably just think we fixed it to make him happy as an afterthought, not because we had plans to be stable | 20:37 |
| rm_work | and he might not be super wrong | 20:37 |
| rm_work | is his reading of the openstack incubation guidelines accurate? | 20:37 |
| rm_work | I was under the impression that some pretty major changes could happen as long as they were well before graduation | 20:37 |
| woodster_ | rm_work, well I think there is an expectation of a stable API, which by extension includes the client lib I figure. We should be good citizens about such changes and maintaining older versions once folks are integrating with Barbican, I just didn't think that was happening in earnest yet (at least before Juno released and 3.x was cut). | 20:43 |
| *** kgriffs|afk is now known as kgriffs | 20:48 | |
| greghaynes | Stable API is a huge deal. Theres a chicken and egg thing where if you dont maintain a stable API no one will (rightfully) be willing to adopt you | 20:49 |
| greghaynes | I say as a potential consumer :) | 20:49 |
| woodster_ | greghaynes, for sure! | 20:49 |
| *** kgriffs is now known as kgriffs|afk | 20:52 | |
| *** kgriffs|afk is now known as kgriffs | 20:53 | |
| *** atiwari has quit IRC | 20:56 | |
| *** paul_glass has joined #openstack-barbican | 20:57 | |
| *** bdpayne has joined #openstack-barbican | 21:00 | |
| *** david-lyle has quit IRC | 21:01 | |
| *** paul_glass has quit IRC | 21:02 | |
| *** paul_glass has joined #openstack-barbican | 21:10 | |
| rm_work | yeah | 21:11 |
| rm_work | I think we're close to working it out -- but someone may get a bit of public chastisement >_> | 21:11 |
| *** ametts has joined #openstack-barbican | 21:11 | |
| rm_work | so ... sorry for whoever that ends up being :/ | 21:12 |
| *** nkinder has joined #openstack-barbican | 21:14 | |
| rm_work | woodster_ / redrobot: do you know if there WAS a mailing list thread about the 2.x/3.x client thing? | 21:24 |
| *** atiwari has joined #openstack-barbican | 21:27 | |
| redrobot | rm_work not sure... I think most of the discussions happened during the weekly meetings | 21:29 |
| rm_work | redrobot: I'm about to post this: | 21:31 |
| rm_work | http://pastebin.com/smK8p1sa | 21:31 |
| rm_work | redrobot: let me know if you'd rather I not :P | 21:31 |
| *** SheenaG11 has joined #openstack-barbican | 21:35 | |
| *** SheenaG1 has quit IRC | 21:35 | |
| greghaynes | Im not sure I agree with the sentiment of its almost entirely used by just other openstack projects - one of the big benefits of openstack is people deploying it and making their own private internal changes and thats one of the areas that backwards compatibility really can bite people | 21:35 |
| greghaynes | and supporting that case is kind of one of our biggest wins | 21:36 |
| greghaynes | so IMO its nice to strive for that use case even if you dont think its currently the case ;) | 21:36 |
| rm_work | not sure how you would use barbican easily without keystone >_> | 21:37 |
| greghaynes | sure, but my point is theres a lot of companies who modify openstack pretty heavily and dont push changes upstream | 21:38 |
| greghaynes | and you wouldnt know about them | 21:38 |
| *** david-lyle has joined #openstack-barbican | 21:42 | |
| * greghaynes makes another shameless plug for reviews on https://review.openstack.org/#/c/140575/ | 21:42 | |
| hockeynut | adding to the list - this one just needs workflow - https://review.openstack.org/#/c/143329/ | 21:44 |
| *** chlong has quit IRC | 21:47 | |
| redrobot | rm_work just catching up on that infra discussion... feathers are definitely ruffled... | 21:47 |
| *** david-lyle has quit IRC | 21:49 | |
| *** kebray has joined #openstack-barbican | 21:53 | |
| *** atiwari has quit IRC | 22:03 | |
| *** atiwari has joined #openstack-barbican | 22:03 | |
| greghaynes | so im reading https://review.openstack.org/#/c/145073/2/specs/kilo/content-type.rst - the way barbican currently works can you store arbitrarially formatted data in the existing secret types via the public api? | 22:10 |
| woodster_ | greghaynes, you can upload binary secrets to barbican which can be any format technically | 22:13 |
| greghaynes | ok | 22:13 |
| greghaynes | so that seems like a pretty backward incompat change too then ;) | 22:13 |
| greghaynes | or is secret type not publicly exposed | 22:16 |
| redrobot | greghaynes I think there was some considerations to backwards compatiblity in the spec... I need to look over it again | 22:16 |
| greghaynes | it mentions that if secret type is not specified then its stored as opaque data, I guess im wondering if I was currently storing a public key in a binary encoding then how would that change effect me | 22:18 |
| greghaynes | would I have to do a data migration and / or convert my data to the correct encoding | 22:19 |
| redrobot | greghaynes I think the idea is that you would get the same blob back... but you should go ahead and leave some comments with your concerns so that Nate can clarify in a follow up patch | 22:28 |
| greghaynes | Im just lacking how the public interface is exposed, I think the way it works is if you specify an {"algorithm": "foo"..} in your request, then the first plugin that returns that it supports foo choses the secret type to store foo as? | 22:30 |
| greghaynes | so as a user I can essentially pick the secret type by setting algorithm | 22:30 |
| *** david-lyle has joined #openstack-barbican | 22:33 | |
| *** paul_glass1 has joined #openstack-barbican | 22:38 | |
| *** paul_glass has quit IRC | 22:40 | |
| alee | woodster_, ping | 22:55 |
| *** jamielennox|away is now known as jamielennox | 22:56 | |
| openstackgerrit | greghaynes proposed openstack/barbican: Create snakeoil certificate plugin https://review.openstack.org/140575 | 22:56 |
| woodster_ | alee, hello. BTW, I was going to ask you thoughts about the cert api (http://specs.openstack.org/openstack/barbican-specs/specs/kilo/certificate-order-api.html)...how would you see handling the case where Barbican generates the private key and CSR, and then generates the cert? | 22:59 |
| alee | you are talking about the stored-key case? | 23:00 |
| greghaynes | I would be very interested in this case :) | 23:01 |
| greghaynes | we have a pretty clear use case fo rit | 23:01 |
| greghaynes | because distributing keys is a problem we want to solve by using barbican | 23:01 |
| *** dimtruck is now known as zz_dimtruck | 23:01 | |
| *** ryanpetrello has quit IRC | 23:02 | |
| woodster_ | Maybe so...so clients would have barbican create private/public key pair first, then they would call barbican with that stored key to gen the cert, correct? | 23:03 |
| *** ryanpetrello has joined #openstack-barbican | 23:03 | |
| alee | greghaynes, yeah -- I had concerns about having the private key in memory in barbican -- but hve been convinced that thats not entirely a bad thing in this case. I'm going to implement it for now - and maybe tighten it up later. | 23:03 |
| alee | woodster_, right | 23:03 |
| openstackgerrit | Ade Lee proposed openstack/barbican: Added new model classes for CAs https://review.openstack.org/147323 | 23:04 |
| alee | woodster_, please take a look at the above when you get a chance ^^ | 23:04 |
| alee | woodster_, I also had a question about alembic migration scripts -- presumably I need to add some for the new tables .. | 23:05 |
| alee | there are all sorts of ids there -- a from version and a to version -- how are these generated? | 23:05 |
| alee | woodster_, (I also realize I need alembic scripts presumably to add the transport key tables , right?) | 23:06 |
| alee | woodster_, and how do I determine what the current version is? | 23:08 |
| alee | woodster_, ? | 23:10 |
| greghaynes | alee: theres an alembic command you use to create the micration module IIRC | 23:12 |
| greghaynes | alembic revision | 23:12 |
| greghaynes | http://alembic.readthedocs.org/en/latest/tutorial.html#create-a-migration-script | 23:12 |
| alee | greghaynes, cool - that worked thanks | 23:15 |
| *** david-lyle has quit IRC | 23:16 | |
| *** paul_glass1 has quit IRC | 23:32 | |
| rm_work | woodster_: https://github.com/stackforge/octavia/blob/master/octavia/certificates/generator/barbican.py#L99 | 23:41 |
| rm_work | woodster_: essentially yes | 23:41 |
| rm_work | woodster_: i've already | 23:41 |
| rm_work | err | 23:42 |
| rm_work | woodster_: i've already "pre-implemented" a lot of this stuff in Octavia :P | 23:42 |
| *** ryanpetrello has quit IRC | 23:46 | |
| woodster_ | alee, sorry, yeah this is how I've done db migrations in the past: https://github.com/cloudkeep/barbican/wiki/Database-Migrations | 23:50 |
| openstackgerrit | Merged openstack/barbican: Fix usage of keystone v3 https://review.openstack.org/143329 | 23:50 |
| *** SheenaG11 has quit IRC | 23:52 | |
| *** jorge_munoz has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!