Wednesday, 2015-02-18

*** woodster_ has quit IRC00:00
*** jaosorior has quit IRC00:01
*** tkelsey has joined #openstack-barbican00:21
*** zz_dimtruck is now known as dimtruck00:33
*** kgriffs is now known as kgriffs|afk00:34
*** hyakuhei has quit IRC00:35
*** david-lyle has quit IRC00:44
*** kgriffs|afk is now known as kgriffs00:45
*** bdpayne has quit IRC00:47
*** tkelsey has quit IRC00:48
*** kgriffs is now known as kgriffs|afk00:55
*** kgriffs|afk is now known as kgriffs01:01
*** hyakuhei has joined #openstack-barbican01:02
*** bdpayne has joined #openstack-barbican01:07
*** bdpayne has quit IRC01:12
*** tkelsey has joined #openstack-barbican01:16
*** woodster_ has joined #openstack-barbican01:19
*** kebray has quit IRC01:50
*** david-lyle has joined #openstack-barbican02:11
*** bdpayne has joined #openstack-barbican02:35
*** kgriffs is now known as kgriffs|afk02:40
*** dimtruck is now known as zz_dimtruck02:40
*** tkelsey has quit IRC02:46
*** hyakuhei has quit IRC02:56
*** gyee has quit IRC03:06
*** kebray has joined #openstack-barbican03:07
*** kebray has quit IRC03:17
*** zz_dimtruck is now known as dimtruck03:17
*** kgriffs|afk is now known as kgriffs03:30
*** david-lyle has quit IRC03:35
*** david-lyle has joined #openstack-barbican03:35
*** david-lyle has quit IRC03:40
*** kgriffs is now known as kgriffs|afk03:40
*** hyakuhei has joined #openstack-barbican03:48
*** kebray has joined #openstack-barbican03:49
*** xaeth_afk is now known as xaeth03:52
*** bdpayne has quit IRC03:58
*** david-lyle has joined #openstack-barbican04:22
*** david-lyle is now known as david-lyle_afk04:23
*** rm_you| is now known as rm_you04:24
*** bdpayne has joined #openstack-barbican04:57
*** bdpayne has quit IRC05:15
*** kgriffs|afk is now known as kgriffs05:19
*** hyakuhei has quit IRC05:25
*** hyakuhei has joined #openstack-barbican05:27
*** kgriffs is now known as kgriffs|afk05:29
*** hyakuhei has quit IRC05:45
*** crc32 has quit IRC06:03
openstackgerritOpenStack Proposal Bot proposed openstack/barbican: Imported Translations from Transifex  https://review.openstack.org/15689906:11
*** bdpayne has joined #openstack-barbican06:15
*** jamielennox is now known as jamielennox|away06:17
*** woodster_ has quit IRC06:20
*** eglute has joined #openstack-barbican06:22
*** eglute has quit IRC06:48
*** eglute has joined #openstack-barbican06:48
*** eglute has quit IRC06:49
*** eglute has joined #openstack-barbican06:51
*** eglute has quit IRC06:55
*** eglute has joined #openstack-barbican06:56
*** kebray has quit IRC07:01
*** eglute has quit IRC07:06
*** eglute has joined #openstack-barbican07:06
*** kgriffs|afk is now known as kgriffs07:08
*** kgriffs is now known as kgriffs|afk07:18
*** bdpayne has quit IRC07:41
*** chlong has quit IRC08:10
*** xaeth is now known as xaeth_afk08:11
*** xaeth_afk is now known as xaeth08:21
*** dimtruck is now known as zz_dimtruck08:25
*** kgriffs|afk is now known as kgriffs08:57
*** kgriffs is now known as kgriffs|afk09:07
*** xaeth has quit IRC10:29
*** xaeth has joined #openstack-barbican10:29
*** kgriffs|afk is now known as kgriffs10:45
*** kgriffs is now known as kgriffs|afk10:55
*** zz_dimtruck is now known as dimtruck10:56
*** dimtruck is now known as zz_dimtruck11:06
*** chlong has joined #openstack-barbican11:45
*** kgriffs|afk is now known as kgriffs12:34
*** kgriffs is now known as kgriffs|afk12:44
*** kgriffs|afk is now known as kgriffs13:45
*** xaeth is now known as xaeth_afk14:16
*** kebray has joined #openstack-barbican14:32
*** kebray has quit IRC14:34
*** zz_dimtruck is now known as dimtruck14:45
*** dimtruck is now known as zz_dimtruck15:01
*** kebray has joined #openstack-barbican15:09
*** paul_glass has joined #openstack-barbican15:12
*** dave-mccowan has joined #openstack-barbican15:13
*** rellerreller has joined #openstack-barbican15:13
*** igueths has joined #openstack-barbican15:14
*** kfarr has joined #openstack-barbican15:16
*** SheenaG1 has joined #openstack-barbican15:18
*** darrenmoffat has quit IRC15:18
*** darrenmoffat has joined #openstack-barbican15:19
kfarrVoting season is open!  https://www.openstack.org/vote-vancouver/Presentation/common-use-cases-for-barbican-in-your-openstack-deployment15:20
kfarr^^ Vote for this Rackspace and APL joint presentation :]15:21
*** SheenaG1 has quit IRC15:28
*** SheenaG1 has joined #openstack-barbican15:32
*** lisaclark1 has joined #openstack-barbican15:33
*** zz_dimtruck is now known as dimtruck15:37
*** paul_glass has quit IRC15:41
*** paul_glass has joined #openstack-barbican15:47
*** alee has joined #openstack-barbican15:48
openstackgerritMerged openstack/barbican: Add missing repository factory functions  https://review.openstack.org/15668015:49
tdink_https://etherpad.openstack.org/p/barbican_client_issues15:52
*** jaosorior has joined #openstack-barbican15:53
*** lisaclark1 has quit IRC15:54
*** lisaclark1 has joined #openstack-barbican15:54
redrobotjaosorior https://etherpad.openstack.org/p/barbican-kilo-sprint15:57
lisaclark1https://etherpad.openstack.org/p/barbican-kilo-sprint15:57
*** rm_work|away is now known as rm_work16:04
rm_workAbandoned both of my CRs for Castellan, may or may not need to bring up something similar in Liberty. You guys made some good points, and a lot of my use-case data is stale -- quite a bit of stuff has changed on both sides of the equation, and I'm going to need to re-raise the discussion on our side and see what we think we need to do.16:13
rm_workFor now "taking no action" is both the least effort path for finishing out Kilo and a "working solution" for us, so it's not a big deal to put it off for now. Thanks for the discussion! :)16:13
rm_workredrobot: no need to discuss Castellan today as long as everyone was good with Nathan's stuff going in as is ^_^16:14
redrobotrm_work word.  thanks for making it out.  definitely good discussion16:14
*** jkf has joined #openstack-barbican16:16
openstackgerritMerged openstack/barbican: Imported Translations from Transifex  https://review.openstack.org/15689916:19
openstackgerritNathan Reller proposed openstack/barbican: Added secret_type to Secret model  https://review.openstack.org/15638516:22
openstackgerritAde Lee proposed openstack/barbican: Added mixin class to allow soft deletes  https://review.openstack.org/15662916:23
rellerrelleralee jaosorior I updated the content type CR16:25
hockeynutbin/barbican.sh debug --pydev-debug-host localhost --pydev-debug-port 567816:26
*** lisaclark1 has quit IRC16:26
*** david-lyle_afk is now known as david-lyle16:28
*** lisaclark1 has joined #openstack-barbican16:35
*** kgriffs is now known as kgriffs|afk16:43
jvrbanacjaosorior, fake_uuid_str = '00000000-0000-0000-0000-{value:0>{pad}}'.format(value=increment, pad=12)16:45
openstackgerritMerged openstack/barbican: Add subject_dn validator  https://review.openstack.org/15564016:46
*** xaeth_afk is now known as xaeth16:47
dave-mccowanw00t \o/ first barbican patch merged16:52
kragnizdave-mccowan: \o/16:53
hockeynutdoing the programmer dance again!16:54
SheenaG1Way to go dave-mccowan!16:54
hockeynutSheenaG1 lives!16:54
*** gyee has joined #openstack-barbican16:54
SheenaG1hockeynut: barely.  lisaclark can confirm I was a sight for sore eyes this morning.16:55
kragnizdave-mccowan: yours was a much better patch than mine :P16:55
reaperhulkSheenaG1: Looks like lisaclark won16:55
SheenaG1reaperhulk: but I still drank more than she did16:56
SheenaG1reaperhulk: could these things be related?16:56
reaperhulkyou did16:56
SheenaG1reaperhulk: I am proud to report that, in spite of pervasive nausea at 2 am, I held all of it16:56
reaperhulkprobably would have felt better if you puked16:57
lisaclark1SheenaG1: you did have 1 more drink than I did, and tried to finish off the one i left behind16:57
SheenaG1reaperhulk: almost certainly.16:57
SheenaG1And lisaclark1: I have learned my lesson16:58
SheenaG1DON'T MESS WITH THE CHAMPION16:58
lisaclark1SheenaG1: hackathon is on thursday and wraps up thu afternoon17:02
SheenaG1lisaclark1: looks like I had already scheduled Backlog Grooming next week for Friday, just got my days confused!17:03
kfarrjvrbanac, did you get the ldap dependencies sorted out?  I had to install libsasl2-dev for debian17:04
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Enable secret decrypt through 'payload' resource  https://review.openstack.org/15706817:14
*** dave-mccowan has quit IRC17:17
*** chlong has quit IRC17:22
iguethsAnyone know where the authoritative papercut source is presently located?17:23
openstackgerritMerged openstack/barbican: Added mixin class to allow soft deletes  https://review.openstack.org/15662917:24
iguethsThat someone is Igor.17:24
*** woodster_ has joined #openstack-barbican17:24
jaosoriorigueths: Didn't recognize your IRC handle17:25
iguethsjaosorior: Ah, yeah this is it...Iirc it's also in the Etherpad.17:26
openstackgerritJohn Vrbanac proposed openstack/barbican: Adding ldap dependencies to documentation  https://review.openstack.org/15707317:27
iguethshttps://bugs.launchpad.net/barbican/+bug/138625117:27
openstackLaunchpad bug 1386251 in Barbican "Error message for bad bit length is insufficient on secret create" [Low,Confirmed] - Assigned to N Dillon (sicarie)17:27
*** kgriffs|afk is now known as kgriffs17:27
iguethsInteresting, the original page didn't indicate an assignee but perhaps I missed it.17:29
*** bdpayne has joined #openstack-barbican17:31
*** lisaclark1 has quit IRC17:34
*** tkelsey has joined #openstack-barbican17:34
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add clarification regarding _lookup in secrets and orders  https://review.openstack.org/15707917:40
*** lisaclark1 has joined #openstack-barbican17:40
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add clarification regarding _lookup in secrets and orders  https://review.openstack.org/15707917:43
openstackgerritKaitlin Farr proposed openstack/barbican: Port the Database Migrations doc  https://review.openstack.org/15708117:44
openstackgerritKaitlin Farr proposed openstack/barbican: Port the Database Migrations doc  https://review.openstack.org/15708117:46
hockeynutrellerreller for https://review.openstack.org/#/c/156385/6 I think we will also need to update the docs - see https://github.com/cloudkeep/barbican/wiki/Application-Programming-Interface#post17:47
rellerrellerhockeynut Yes, we are planning to do that. We will have a subsequent patch for that.17:49
hockeynutrellerreller coolness, thx!17:50
*** igueths has quit IRC17:54
jaosoriorThis only needs a workflow: https://review.openstack.org/#/c/155961/17:54
aleedone17:56
*** xaeth is now known as xaeth_afk17:59
*** jkf has quit IRC18:05
*** lisaclark1 has quit IRC18:08
*** jkf has joined #openstack-barbican18:10
openstackgerritMerged openstack/barbican: Added secret_type to Secret model  https://review.openstack.org/15638518:23
openstackgerritMerged openstack/barbican: Adding ldap dependencies to documentation  https://review.openstack.org/15707318:24
*** lisaclark1 has joined #openstack-barbican18:25
*** lisaclark1 has quit IRC18:25
*** igueths has joined #openstack-barbican18:30
openstackgerritMerged openstack/python-barbicanclient: update tox.ini files to run functional tests  https://review.openstack.org/15596118:31
openstackgerritDouglas Mendizábal proposed openstack/barbican: Test CR to check hostname settings in DSVM  https://review.openstack.org/15710318:36
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Enable secret decrypt through 'payload' resource  https://review.openstack.org/15706818:36
*** kfarr has quit IRC18:37
*** jkf has quit IRC18:41
*** xaeth_afk is now known as xaeth18:49
*** bdpayne has quit IRC18:49
*** bdpayne has joined #openstack-barbican18:50
*** stanzi has joined #openstack-barbican19:05
*** stanzi has quit IRC19:07
*** stanzi has joined #openstack-barbican19:07
*** xaeth is now known as xaeth_afk19:10
*** stanzi has quit IRC19:11
*** xaeth_afk is now known as xaeth19:18
*** lisaclark1 has joined #openstack-barbican19:26
elmikohey folks, what is the authoritative source for castellan? (github or git.openstack.org)19:28
elmikohmm, is castellan even in a state where we could use it or should i stick with barbican?19:30
rm_workelmiko: most of the actual Castellan code that *does anything* is waiting to merge19:31
rm_workright now it is pretty much a bare repo19:31
elmikoyea, that's kind what it looks like19:31
elmikoi'm working on a bp for sahara to move our secret storage into barbican, but i want to explore the castellan option19:31
rm_workelmiko: what are you storing? just single standalone secrets?19:32
rm_workor are you using containers?19:32
elmikodon't think we'll need containers, just username/pass storage19:32
elmikoor really, we could just store passwords19:32
*** lisaclark1 has quit IRC19:33
rm_workit's possible that if your use-case is very simple, Castellan could be a good way to implement storage (especially if some deployers might have very strict requirements for secret storage)19:35
rm_workbut, python-barbicanclient is also very simple to use, so19:35
rm_workI may not have helpfully answered your question :P19:35
elmikolol19:36
elmikoi've been playing with barbican, and i find it easy to use. i might have issues getting the bp through with castellan as there doesn't seem to be anything to deploy or really even reference19:36
elmikowhereas barbican has some nice resources i can point at19:37
rm_workyeah, hopefully very soon the stuff will merge19:37
elmikoideally, i will separate the storage code enough that we could change to castellan if necessary19:37
rm_worklol19:37
rm_workthat is where castellan came from originally19:38
rm_workpeople separating storage code enough that they could easily change from barbican if necessary19:38
elmikolol19:38
elmikoat least i'm not alone then ;)19:38
*** xaeth is now known as xaeth_afk19:39
*** lisaclark1 has joined #openstack-barbican19:40
*** kebray has quit IRC19:40
*** kebray has joined #openstack-barbican19:40
*** lisaclark1 has quit IRC19:41
*** jkf has joined #openstack-barbican19:47
*** crc32 has joined #openstack-barbican19:48
elmikorm_work: does castellan provide something similar to barbican uri-wise, e.g. GET on .../secrets/<uuid> returns the secret info?20:08
rm_worknonono20:11
rm_workCastellan is JUST a library to import20:11
rm_workfor writing code that interfaces with a keymanager20:12
elmikoahh, interesting20:12
rm_workit doesn't run as a service20:12
rm_workall it does is change whether you'd use python-barbicanclient directly or use castellan as your key-manager client20:12
elmikogot it20:12
openstackgerritThomas Dinkjian proposed openstack/python-barbicanclient: Adds orders behaviors and smoke tests.  https://review.openstack.org/15713020:12
elmikorm_work: so when i store a new secret with castellan, will i get back whatever representation the key-manager provides?20:13
*** lisaclark1 has joined #openstack-barbican20:13
elmikoi'm trying to think about how we will associate a secret with it's store, internally20:14
openstackgerritAde Lee proposed openstack/barbican: Add validation for profile for Orders API  https://review.openstack.org/15713120:15
openstackgerritDouglas Mendizábal proposed openstack/barbican: Test CR to check hostname settings in DSVM  https://review.openstack.org/15710320:17
jvrbanachttps://gist.github.com/jmvrbanac/abe30c0cf6872b76dee420:20
*** dave-mccowan has joined #openstack-barbican20:21
jvrbanachttps://gist.github.com/jmvrbanac/abe30c0cf6872b76dee420:21
jvrbanachttps://registry.hub.docker.com/u/jmvrbanac/simple-keystone/20:21
jvrbanacdave-mccowan, ^^20:21
openstackgerritKaitlin Farr proposed openstack/barbican: Port the Database Migrations doc  https://review.openstack.org/15708120:23
aleewoodster_, https://review.openstack.org/15713120:26
aleehockeynut, ^^20:26
aleeredrobot, ^^20:27
hockeynut<click>20:27
rm_workelmiko: yeah, it'd give back whatever unique identifier that system uses20:27
rm_workelmiko: might be a UUID, might be a URI, dunno20:27
rm_workelmiko: the assumption is, if you store a key and it gives you back "bob123", calling get_key("bob123") would get it back20:28
jaosoriorwoodster_, jvrbanac: https://review.openstack.org/#/c/157079/20:29
jaosoriorgot time for that one? should be a quicky :P20:29
elmikorm_work: ok cool, that works20:32
openstackgerritDouglas Mendizábal proposed openstack/barbican: Test CR to check hostname settings in DSVM  https://review.openstack.org/15710320:36
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add clarification regarding _lookup in secrets and orders  https://review.openstack.org/15707920:36
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Enforce secret and order IDs are valid UUIDs  https://review.openstack.org/15678320:36
redrobotresolve back to localhost.localdomain20:38
redrobot- address 0:0:0:0:0:0:0:1 resolves to host localhost20:38
redrobot- address 127.0.0.1 resolves to host localhost20:38
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add clarification regarding _lookup in secrets and orders  https://review.openstack.org/15707920:39
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Enforce secret and order IDs are valid UUIDs  https://review.openstack.org/15678320:39
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add container consumer repository factory  https://review.openstack.org/15714120:44
*** tkelsey has quit IRC20:48
*** stanzi has joined #openstack-barbican20:53
*** kebray has quit IRC20:53
hockeynutjaosorior looking at https://review.openstack.org/#/c/157079/ - should we also do the same kind of refactor for the other resources to be consistent?20:58
*** kebray has joined #openstack-barbican21:00
jaosoriorhockeynut: I could do that, but in some cases I just thought that would be overkill, that's why I didn't do it21:00
hockeynutjaosorior might be nice just to follow the same pattern21:01
jaosorioralright21:01
jaosoriorI'll do that in subsequent CRs21:01
jaosoriorat the moment I'm starting to move to the repo factories21:01
hockeynuthockeynut that's cool21:03
jaosoriorhockeynut, woodster_, tdink_: meanwhile, if you guys have time to check this one out https://review.openstack.org/#/c/157068/2 I added the tests the way we discussed earlier21:06
openstackgerritMerged openstack/barbican: Add validation for profile for Orders API  https://review.openstack.org/15713121:09
openstackgerritJohn Vrbanac proposed openstack/barbican: Removing uuid verification mock  https://review.openstack.org/15714721:10
openstackgerritJohn Vrbanac proposed openstack/barbican: Removing uuid verification mock  https://review.openstack.org/15714721:11
*** stanzi has quit IRC21:11
*** stanzi has joined #openstack-barbican21:12
openstackgerritJohn Vrbanac proposed openstack/barbican: Removing uuid verification mock  https://review.openstack.org/15714721:16
*** stanzi has quit IRC21:16
*** stanzi has joined #openstack-barbican21:19
*** stanzi has quit IRC21:20
*** stanzi has joined #openstack-barbican21:21
openstackgerritMerged openstack/barbican: Enforce secret and order IDs are valid UUIDs  https://review.openstack.org/15678321:26
jvrbanacjaosorior, https://pypi.python.org/pypi/pretend/1.0.821:29
*** xaeth_afk is now known as xaeth21:33
openstackgerritMerged openstack/barbican: Add clarification regarding _lookup in secrets and orders  https://review.openstack.org/15707921:37
*** dave-mccowan has quit IRC21:38
*** alee has quit IRC21:40
*** lisaclark1 has joined #openstack-barbican21:40
*** lisaclark1 has quit IRC21:41
*** igueths has quit IRC21:48
*** jamielennox|away is now known as jamielennox21:51
*** xaeth is now known as xaeth_afk21:55
*** jkf has quit IRC21:55
openstackgerritgreghaynes proposed openstack/barbican: Create snakeoil certificate plugin  https://review.openstack.org/14057522:00
*** xaeth_afk is now known as xaeth22:02
openstackgerritMerged openstack/python-barbicanclient: Adds positive secrets functional tests  https://review.openstack.org/15339522:28
*** chadlung has joined #openstack-barbican22:28
jaosoriorgreghaynes: Hopefully you didn't take the review the wrong way. Just trying to keep things descriptive and consistent.22:29
greghaynesyea, totally, so generally the rule other projects have is that naming issues dont -1, if theres other stuff or if its egregious then we fix them in another patch22:30
greghaynesalso, I may be at a mid cycle having this exact discussion about another project22:30
greghaynesbut not offended, sorry if I came off harsh22:30
greghaynesgenerally the issue is that reviewer bandwidth is a precious resource and reposting a patch means everyone has to review22:32
greghaynessome projects might be feeling a lot of pain ATM because of this ;)22:32
*** rellerreller has quit IRC22:33
jaosoriorgreghaynes: no prob. Wait up, moving to another building22:34
openstackgerritMerged openstack/barbican: Port the Database Migrations doc  https://review.openstack.org/15708122:37
*** stanzi has quit IRC22:39
*** stanzi has joined #openstack-barbican22:39
*** stanzi has quit IRC22:44
openstackgerritMerged openstack/barbican: Removing uuid verification mock  https://review.openstack.org/15714722:45
*** crc32 has quit IRC22:48
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add container consumer repository factory  https://review.openstack.org/15714122:50
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Enable secret decrypt through 'payload' resource  https://review.openstack.org/15706822:53
jaosoriorback22:53
*** kebray has quit IRC22:53
*** openstackgerrit has quit IRC23:00
*** openstackgerrit has joined #openstack-barbican23:00
*** paul_glass has quit IRC23:09
*** dimtruck is now known as zz_dimtruck23:14
*** chlong has joined #openstack-barbican23:19
*** chadlung has quit IRC23:21
*** tkelsey has joined #openstack-barbican23:26
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Enable secret decrypt through 'payload' resource  https://review.openstack.org/15706823:30
*** xaeth is now known as xaeth_afk23:33

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!