| *** dkingshott has quit IRC | 00:05 | |
| openstackgerrit | Venkat Sundaram proposed openstack/barbican-specs: Add Quota support for Barbican resources https://review.openstack.org/132091 | 00:18 |
|---|---|---|
| *** gyee has quit IRC | 00:34 | |
| *** kebray has quit IRC | 00:40 | |
| *** zz_dimtruck is now known as dimtruck | 00:57 | |
| *** chlong has joined #openstack-barbican | 01:05 | |
| *** arunkant has quit IRC | 01:17 | |
| *** david-lyle is now known as david-lyle_afk | 01:18 | |
| *** jamielennox|away is now known as jamielennox | 01:19 | |
| *** chlong has quit IRC | 01:22 | |
| *** kgriffs is now known as kgriffs|afk | 01:36 | |
| *** bdpayne has quit IRC | 01:51 | |
| *** chlong has joined #openstack-barbican | 02:27 | |
| *** chlong has quit IRC | 02:40 | |
| *** klep has left #openstack-barbican | 03:06 | |
| *** woodster_ has quit IRC | 03:06 | |
| *** chlong has joined #openstack-barbican | 03:30 | |
| *** woodster_ has joined #openstack-barbican | 03:34 | |
| *** chlong has quit IRC | 03:37 | |
| *** ajc_ has joined #openstack-barbican | 03:50 | |
| *** xaeth_afk is now known as xaeth | 03:57 | |
| *** kebray has joined #openstack-barbican | 04:00 | |
| *** kebray has quit IRC | 04:00 | |
| *** kebray has joined #openstack-barbican | 04:01 | |
| *** chlong has joined #openstack-barbican | 04:36 | |
| *** miqui has joined #openstack-barbican | 04:53 | |
| *** chlong has quit IRC | 04:54 | |
| *** chlong has joined #openstack-barbican | 05:03 | |
| *** xaeth is now known as xaeth_afk | 05:33 | |
| *** woodster_ has quit IRC | 07:36 | |
| *** chlong has quit IRC | 07:39 | |
| *** nkinder has joined #openstack-barbican | 07:57 | |
| *** jaosorior has joined #openstack-barbican | 08:22 | |
| *** dimtruck is now known as zz_dimtruck | 09:05 | |
| *** kebray has quit IRC | 09:24 | |
| *** zz_dimtruck is now known as dimtruck | 09:26 | |
| *** dimtruck is now known as zz_dimtruck | 09:38 | |
| *** nkinder has quit IRC | 09:53 | |
| *** nkinder has joined #openstack-barbican | 09:59 | |
| *** chlong has joined #openstack-barbican | 10:50 | |
| jaosorior | :t face | 11:57 |
| jaosorior | uhm... mistake | 11:58 |
| *** nkinder has quit IRC | 12:12 | |
| *** nkinder has joined #openstack-barbican | 12:19 | |
| *** ajc_ has quit IRC | 12:32 | |
| *** chlong has quit IRC | 12:38 | |
| *** woodster_ has joined #openstack-barbican | 12:49 | |
| *** alee_dinner has quit IRC | 13:53 | |
| *** lisaclark1 has joined #openstack-barbican | 14:18 | |
| woodster_ | jvrbanac, redrobot, rm_work, please review the quota bp when you can (it has two +2s) : https://review.openstack.org/#/c/132091/ | 14:51 |
| *** SheenaG1 has quit IRC | 14:51 | |
| *** alee_dinner has joined #openstack-barbican | 14:55 | |
| *** lisaclark1 has quit IRC | 14:56 | |
| *** darrenmoffat has quit IRC | 14:56 | |
| *** darrenmoffat has joined #openstack-barbican | 14:56 | |
| hockeynut | woodster_ ping | 15:08 |
| *** paul_glass has joined #openstack-barbican | 15:08 | |
| woodster_ | hockeynut: howdy | 15:13 |
| hockeynut | looking at that bp above - seems we need to include something around hard delete as part of that bp. Could be a nightmare for testing | 15:14 |
| *** rm_work|away is now known as rm_work | 15:18 | |
| rm_work | woah, don't know if i've seen this one before (quotas | 15:20 |
| rm_work | ) | 15:20 |
| *** david-lyle_afk is now known as david-lyle | 15:23 | |
| *** SheenaG1 has joined #openstack-barbican | 15:31 | |
| *** kgriffs|afk is now known as kgriffs | 15:35 | |
| openstackgerrit | Ade Lee proposed openstack/barbican-specs: Add spec for per-secret policy https://review.openstack.org/127353 | 15:39 |
| alee_dinner | rm_work, woodster_ , ^^ latest version of per-secret spec .. | 15:40 |
| *** alee_dinner is now known as alee | 15:40 | |
| *** xaeth_afk is now known as xaeth | 15:41 | |
| woodster_ | hockeynut: I think soft deletes should count against the overall number, but we will want a hard remove job to run periodically | 15:44 |
| woodster_ | alee: will do | 15:44 |
| woodster_ | alee: btw there is a latest quota spec up | 15:45 |
| alee | woodster_, yup - will try get to it today | 15:46 |
| alee | woodster_, don't forget my code CRs :) | 15:46 |
| *** zz_dimtruck is now known as dimtruck | 15:49 | |
| *** kebray has joined #openstack-barbican | 15:51 | |
| hockeynut | woodster_ if we do that then we run into the very likely scenario that projects get "locked" after running tests and we don't have (yet) a way to unlock them | 15:52 |
| rm_work | woodster_: yeah that's a little concerning, i would be frustrated if I deleted a bunch of secrets to make room on my account and then it was still full for no clear (to me) reason | 15:53 |
| *** kebray has quit IRC | 15:53 | |
| hockeynut | woodster_ I think we need a BP for addressing deletes - soft vs hard and how to differentiate between the two | 15:53 |
| hockeynut | rm_work + oo | 15:54 |
| woodster_ | If we don't count soft deleted resources then quotas don't work | 15:54 |
| hockeynut | agreed - | 15:54 |
| hockeynut | the idea is to make it easier to hard delete | 15:54 |
| *** rm_work is now known as rm_work|away | 15:54 | |
| hockeynut | and that would be set on a per-project basis | 15:54 |
| hockeynut | hence a BP to spec that all out | 15:54 |
| woodster_ | The purpose is to prevent one project from muscling out other projects | 15:54 |
| hockeynut | I agree 110% - I think the issue isn't with quota BP but rather how to we update delete processing to make it behave better with quotas | 15:56 |
| woodster_ | Well we have talked about talking about hard deletes in the past :) | 15:56 |
| hockeynut | we have :-) | 15:56 |
| hockeynut | but now they have a real world impact - someone may not be able to work because of them | 15:56 |
| hockeynut | if we have a flavor of delete that does a hard delete then the problem goes away because users have a way to really cleanup | 15:57 |
| hockeynut | but not all deletes should be hard deletes - could be a rbac thing that folks can choose to use or not | 15:57 |
| hockeynut | default would be current soft delete | 15:57 |
| woodster_ | hockeynut: I think in operation you'd set the limit high compared to avg usage and bump up on a case by case basis...but testing knocks that off axis a bit | 15:57 |
| hockeynut | could also conjure up a real world usecase where things like secrets are constantly created/deleted and the result would be the same | 15:58 |
| woodster_ | We've talked about a per secret or per tenant policy for this for sure. A initial step might be a hard delete exposed to cloud admins only...good for testing anyway? | 15:59 |
| hockeynut | maybe this is an item to discuss on monday irc mtg? | 15:59 |
| hockeynut | woodster_ admins - another question I have from reading this BP. Seems its not using the admin for things like quotas but that makes sense as the place to do it | 16:00 |
| woodster_ | Yep, can you add to agenda? I'm on phone/bus | 16:00 |
| hockeynut | certainly | 16:01 |
| woodster_ | hockeynut: cloud admin vs Barbican admin | 16:01 |
| woodster_ | hockeynut: so a Barbican admin shouldn't be allowed to modify the quota for other projects | 16:02 |
| hockeynut | woodster_ ah, gotcha | 16:02 |
| *** kgriffs has quit IRC | 16:02 | |
| redrobot | hockeynut could also be good to discuss on the ML | 16:03 |
| redrobot | hockeynut maybe other projects have good ideas on how to handle deletion | 16:04 |
| woodster_ | My thoughts are that the Bp could land, and in parallel we settle the delete issue. Worst case we don't count soft deleted resources initially (should be simple query change) until we have hard deletes in place | 16:04 |
| hockeynut | redrobot sure - which ml? | 16:04 |
| redrobot | hockeynut openstack-dev@lists.openstack.org | 16:05 |
| hockeynut | redrobot thx! | 16:05 |
| *** kgriffs has joined #openstack-barbican | 16:05 | |
| hockeynut | woodster_ that sounds reasonable | 16:06 |
| redrobot | Kilo-2 is out https://launchpad.net/barbican/+milestone/kilo-2 | 16:10 |
| redrobot | xaeth ^^ got a new release for your awesome packaging effort :) | 16:13 |
| xaeth | redrobot, kew | 16:13 |
| *** kebray has joined #openstack-barbican | 16:16 | |
| *** nkinder has quit IRC | 16:17 | |
| xaeth | redrobot, that part has gotten nice clean and easy. I'm working on all the dependencies right now | 16:19 |
| xaeth | Wrote: /home/greg5320/Development/barbican-spec/artifacts/rpms/openstack-barbican-2015.1.0b2-1.fc21.src.rpm | 16:19 |
| xaeth | Wrote: /home/greg5320/Development/barbican-spec/artifacts/rpms/noarch/openstack-barbican-2015.1.0b2-1.fc21.noarch.rpm | 16:19 |
| xaeth | Wrote: /home/greg5320/Development/barbican-spec/artifacts/rpms/noarch/python-barbican-2015.1.0b2-1.fc21.noarch.rpm | 16:19 |
| xaeth | Wrote: /home/greg5320/Development/barbican-spec/artifacts/rpms/noarch/openstack-barbican-worker-2015.1.0b2-1.fc21.noarch.rpm | 16:19 |
| xaeth | Wrote: /home/greg5320/Development/barbican-spec/artifacts/rpms/noarch/openstack-barbican-keystone-listener-2015.1.0b2-1.fc21.noarch.rpm | 16:19 |
| redrobot | xaeth sweet! | 16:19 |
| *** rm_work|away is now known as rm_work | 16:22 | |
| woodster_ | xaeth: nice! | 16:22 |
| *** nkinder has joined #openstack-barbican | 16:23 | |
| *** lisaclark1 has joined #openstack-barbican | 16:28 | |
| *** lisaclark1 has quit IRC | 16:30 | |
| *** lisaclark1 has joined #openstack-barbican | 16:30 | |
| openstackgerrit | Thomas Dinkjian proposed openstack/python-barbicanclient: Adds base behaviors, secret behaviors and the secret smoke tests https://review.openstack.org/151777 | 16:36 |
| *** tkelsey has joined #openstack-barbican | 16:49 | |
| *** lisaclark1 has quit IRC | 16:49 | |
| *** lisaclark1 has joined #openstack-barbican | 16:57 | |
| *** lisaclark1 has joined #openstack-barbican | 16:57 | |
| *** SheenaG1 has quit IRC | 16:58 | |
| *** nkinder has quit IRC | 16:59 | |
| *** SheenaG1 has joined #openstack-barbican | 17:01 | |
| *** bdpayne has joined #openstack-barbican | 17:05 | |
| *** kgriffs is now known as kgriffs|afk | 17:30 | |
| *** jkf has joined #openstack-barbican | 17:33 | |
| *** paul_glass has quit IRC | 17:41 | |
| *** kebray has quit IRC | 17:43 | |
| openstackgerrit | Thomas Dinkjian proposed openstack/python-barbicanclient: All of the containers behaviors and container smoke tests https://review.openstack.org/151787 | 17:51 |
| openstackgerrit | Thomas Dinkjian proposed openstack/python-barbicanclient: Adds base behaviors, secret behaviors and the secret smoke tests https://review.openstack.org/151777 | 17:51 |
| *** lisaclark2 has joined #openstack-barbican | 18:03 | |
| *** lisaclark1 has quit IRC | 18:05 | |
| *** jkf has quit IRC | 18:06 | |
| *** lisaclark2 has quit IRC | 18:06 | |
| *** lisaclark1 has joined #openstack-barbican | 18:07 | |
| *** jkf has joined #openstack-barbican | 18:08 | |
| *** kebray has joined #openstack-barbican | 18:09 | |
| *** tkelsey has quit IRC | 18:11 | |
| *** bdpayne has quit IRC | 18:15 | |
| *** lisaclark1 has quit IRC | 18:22 | |
| *** bdpayne has joined #openstack-barbican | 18:38 | |
| *** tkelsey has joined #openstack-barbican | 18:41 | |
| *** lisaclark1 has joined #openstack-barbican | 18:42 | |
| *** kgriffs|afk is now known as kgriffs | 18:44 | |
| *** tkelsey has quit IRC | 18:45 | |
| *** jaosorior has quit IRC | 18:46 | |
| *** SheenaG1 has quit IRC | 18:47 | |
| xaeth | redrobot, woodster_ i got spun up trying to recover too many dependencies. Just paired it down and am hopefully finishing up the last one or two. Seriously how did openjpeg2 become a dependency of openstack ? :/ | 18:47 |
| *** lisaclark1 has quit IRC | 18:50 | |
| xaeth | alee, do you know mcepl ? | 19:00 |
| *** kebray has quit IRC | 19:00 | |
| *** SheenaG1 has joined #openstack-barbican | 19:00 | |
| *** lisaclark1 has joined #openstack-barbican | 19:00 | |
| *** kebray has joined #openstack-barbican | 19:01 | |
| alee | xaeth, sounds familiar .. why? | 19:04 |
| xaeth | mcepl seems to be the python-cryptography maintainer and that package doesn't want to pass its tests on el6. since they are having to solve the problem too i didn't want to waste cycles duplicating effort | 19:05 |
| xaeth | just tried to pm them | 19:05 |
| alee | xaeth, I didn't think python-cryptography was in rhel yet ... it just got into fedora | 19:07 |
| xaeth | its not | 19:07 |
| xaeth | he's got an epel branch for it | 19:07 |
| xaeth | http://pkgs.fedoraproject.org/cgit/python-cryptography.git/tree/python-cryptography.spec?h=el6 | 19:07 |
| xaeth | his build seems to be blocked on needing a newer python-six based on bugzilla, but since i'm building something to put into COPR i have an updated python-six already. My problem is the test failures... not sure what the source of them is | 19:08 |
| xaeth | could be a bad versioned dependency still | 19:08 |
| xaeth | but i'm meeting the stated dependencies | 19:09 |
| xaeth | i wonder if my python-six is too new | 19:09 |
| alee | xaeth, ok - mcepl is in the czech republic or germany which means that he's probably offline now. | 19:10 |
| xaeth | kk | 19:10 |
| xaeth | thanks | 19:10 |
| alee | they've also been having a dev conf there this week - so may be hard to reach this week | 19:10 |
| alee | but you can try in the mornings | 19:11 |
| xaeth | kewl. will do | 19:11 |
| xaeth | thanks | 19:11 |
| xaeth | alee how do you want to go towards the pre-fedora package review? | 19:11 |
| alee | if you still have trouble reaching him, ping me again and I'll hook you guys up. | 19:11 |
| xaeth | i think the spec works fairly well right now.. and even got it supporting a little minimal variablizing for dev and rc releases | 19:11 |
| xaeth | https://github.com/gregswift/barbican-spec | 19:12 |
| alee | xaeth, ok - I'll take a look and get back to you. kinda swamped right now - so it will likely be early next week. | 19:12 |
| xaeth | so for todays kilo-2 you can do 'RELEASE_NUMBER=2 make' and get a built artifact. (just defining the release_number macro inside the spec would work too | 19:12 |
| xaeth | np | 19:12 |
| xaeth | thats fine | 19:12 |
| alee | xaeth, but I think you can go ahead and file a package-review bug and someone might pick it up there | 19:13 |
| xaeth | kk | 19:13 |
| alee | might as well get the ball rolling | 19:13 |
| alee | xaeth, I assume you've done all that before? | 19:13 |
| xaeth | like i said in the intro email, i've only maintained existing... but i've seen the process | 19:14 |
| alee | xaeth, ok cool - copy me and hguemar on the review | 19:14 |
| xaeth | will do | 19:15 |
| alee | awesome | 19:15 |
| SheenaG1 | rm_work: ping | 19:24 |
| rm_work | SheenaG1: pong | 19:24 |
| SheenaG1 | rm_work: I sent you a copy of the abstract for your presentation this AM, in case you'd like to review/revise | 19:25 |
| alee | jvrbanac, woodster_ , rm_work , redrobot - lets gather up the +2's for the per-secret spec please :) | 19:34 |
| *** jkf has quit IRC | 19:35 | |
| *** jkf has joined #openstack-barbican | 19:38 | |
| rm_work | SheenaG1: I saw, glanced at it but am still in my own mid-cycle right now :P | 19:39 |
| rm_work | SheenaG1: i think it looks ok | 19:39 |
| rm_work | alee: hey, I already gave you my +1, not much I can help with now :P | 19:40 |
| rm_work | not a core yet <_< | 19:40 |
| rm_work | though I did make core on Octavia :) | 19:40 |
| SheenaG1 | rm_work: I had no idea, apologies | 19:42 |
| rm_work | SheenaG1: heh np | 19:42 |
| rm_work | SheenaG1: bugging people is basically your job, right? :P | 19:43 |
| rm_work | I know it should be in my official job description... | 19:43 |
| openstackgerrit | Thomas Dinkjian proposed openstack/python-barbicanclient: All of the containers behaviors and container smoke tests https://review.openstack.org/151787 | 19:43 |
| rm_work | SheenaG1: i mean, it was like 2 sentences, I probably could have responded :P | 19:44 |
| *** dimtruck is now known as zz_dimtruck | 19:45 | |
| *** jkf has quit IRC | 19:47 | |
| SheenaG1 | rm_work: yes, cat herder is totally in my job description and I know you aren't literate | 19:47 |
| SheenaG1 | rm_work: I was going to offer to send someone over to read it to you | 19:47 |
| SheenaG1 | ;-) | 19:47 |
| rm_work | SheenaG1: :P | 19:49 |
| *** jkf has joined #openstack-barbican | 19:50 | |
| *** jkf has quit IRC | 20:03 | |
| *** bdpayne has quit IRC | 20:06 | |
| *** jkf has joined #openstack-barbican | 20:06 | |
| *** bdpayne has joined #openstack-barbican | 20:08 | |
| *** zz_dimtruck is now known as dimtruck | 20:09 | |
| *** kebray has quit IRC | 20:54 | |
| *** kebray has joined #openstack-barbican | 20:55 | |
| *** lisaclark1 has quit IRC | 20:58 | |
| *** lisaclark1 has joined #openstack-barbican | 21:07 | |
| *** kgriffs is now known as kgriffs|afk | 21:20 | |
| *** lisaclark1 has quit IRC | 21:25 | |
| openstackgerrit | Thomas Dinkjian proposed openstack/python-barbicanclient: All of the containers behaviors and container smoke tests https://review.openstack.org/151787 | 21:33 |
| *** atiwari has quit IRC | 21:48 | |
| *** atiwari has joined #openstack-barbican | 21:50 | |
| *** atiwari has quit IRC | 21:54 | |
| *** atiwari1 has joined #openstack-barbican | 21:54 | |
| openstackgerrit | Thomas Dinkjian proposed openstack/python-barbicanclient: Adds first round of secrets functional tests https://review.openstack.org/153395 | 22:04 |
| *** alee has quit IRC | 22:13 | |
| *** tkelsey has joined #openstack-barbican | 22:16 | |
| *** tkelsey has quit IRC | 22:20 | |
| *** kgriffs|afk is now known as kgriffs | 22:20 | |
| *** kgriffs is now known as kgriffs|afk | 22:31 | |
| *** kgriffs|afk is now known as kgriffs | 22:34 | |
| *** nkinder has joined #openstack-barbican | 22:35 | |
| *** jkf_ has joined #openstack-barbican | 22:35 | |
| *** jkf has quit IRC | 22:38 | |
| *** jkf_ is now known as jkf | 22:40 | |
| *** dimtruck is now known as zz_dimtruck | 22:55 | |
| *** xaeth is now known as xaeth_afk | 23:13 | |
| *** zz_dimtruck is now known as dimtruck | 23:14 | |
| *** SheenaG1 has quit IRC | 23:17 | |
| rm_work | so... can someone review https://review.openstack.org/#/c/146210/ (with regard to the Barbican stuff) and make sure that looks sane? | 23:21 |
| rm_work | https://review.openstack.org/#/c/146210/10/neutron_lbaas/common/cert_manager/barbican_cert_manager.py | 23:21 |
| *** chlong has joined #openstack-barbican | 23:23 | |
| *** dimtruck is now known as zz_dimtruck | 23:24 | |
| *** kebray has quit IRC | 23:25 | |
| *** alee has joined #openstack-barbican | 23:27 | |
| *** nkinder has quit IRC | 23:28 | |
| *** kebray has joined #openstack-barbican | 23:39 | |
| openstackgerrit | Merged openstack/barbican: Drop old namespace for some oslo libraries https://review.openstack.org/150372 | 23:41 |
| *** david-lyle is now known as david-lyle_afk | 23:41 | |
| *** zz_dimtruck is now known as dimtruck | 23:43 | |
| *** rm_work is now known as rm_work|away | 23:47 | |
| *** bdpayne has quit IRC | 23:54 | |
| *** openstack has joined #openstack-barbican | 23:56 | |
| *** bdpayne has joined #openstack-barbican | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!