| *** hyakuhei has joined #openstack-barbican | 00:09 | |
| *** david-lyle is now known as david-lyle_afk | 00:41 | |
| *** stanzi has joined #openstack-barbican | 00:41 | |
| *** bdpayne has quit IRC | 00:42 | |
| *** tkelsey has quit IRC | 00:49 | |
| *** hyakuhei has quit IRC | 00:51 | |
| openstackgerrit | Merged openstack/barbican: Add container consumer repository factory https://review.openstack.org/157141 | 01:16 |
|---|---|---|
| *** zz_dimtruck is now known as dimtruck | 01:23 | |
| *** stanzi has quit IRC | 01:24 | |
| *** stanzi has joined #openstack-barbican | 01:24 | |
| *** stanzi has quit IRC | 01:29 | |
| *** stanzi has joined #openstack-barbican | 01:35 | |
| *** crc32 has joined #openstack-barbican | 01:41 | |
| *** kgriffs is now known as kgriffs|afk | 01:42 | |
| *** stanzi has quit IRC | 01:43 | |
| *** stanzi has joined #openstack-barbican | 01:44 | |
| *** stanzi has quit IRC | 01:48 | |
| *** crc32 has quit IRC | 02:03 | |
| openstackgerrit | Steve Heyman proposed openstack/barbican: Fix security bug with host HTTP header field https://review.openstack.org/157231 | 02:06 |
| openstackgerrit | Steve Heyman proposed openstack/barbican: Fix security bug with host HTTP header field https://review.openstack.org/157231 | 02:08 |
| *** jaosorior has quit IRC | 02:11 | |
| *** stanzi has joined #openstack-barbican | 02:20 | |
| *** stanzi has joined #openstack-barbican | 02:21 | |
| *** stanzi has quit IRC | 02:25 | |
| openstackgerrit | Louis Taylor proposed openstack/barbican: Sync with latest oslo-incubator https://review.openstack.org/157238 | 02:41 |
| openstackgerrit | Louis Taylor proposed openstack/barbican: Port to graduated oslo.log package https://review.openstack.org/157239 | 02:41 |
| openstackgerrit | Louis Taylor proposed openstack/barbican: Port to oslo.serialization's jsonutils https://review.openstack.org/157240 | 02:41 |
| openstackgerrit | Louis Taylor proposed openstack/barbican: Port to oslo.serialization's jsonutils https://review.openstack.org/157240 | 02:48 |
| openstackgerrit | Louis Taylor proposed openstack/barbican: Port to graduated oslo.log package https://review.openstack.org/157239 | 02:49 |
| openstackgerrit | Louis Taylor proposed openstack/barbican: Sync with latest oslo-incubator https://review.openstack.org/157238 | 02:49 |
| kragniz | sorry for the patch spam | 02:49 |
| openstackgerrit | Johnu George proposed openstack/barbican: Typos fixed in paramter names in comments https://review.openstack.org/157241 | 02:49 |
| *** hyakuhei has joined #openstack-barbican | 03:02 | |
| *** SheenaG1 has quit IRC | 03:54 | |
| *** tkelsey has joined #openstack-barbican | 03:59 | |
| *** woodster_ has quit IRC | 04:40 | |
| *** dimtruck is now known as zz_dimtruck | 04:47 | |
| *** xaeth_afk is now known as xaeth | 05:03 | |
| *** tkelsey has quit IRC | 05:17 | |
| *** xaeth is now known as xaeth_afk | 05:25 | |
| *** xaeth_afk is now known as xaeth | 05:33 | |
| *** gyee has quit IRC | 05:36 | |
| *** tkelsey has joined #openstack-barbican | 05:47 | |
| *** xaeth is now known as xaeth_afk | 05:57 | |
| *** woodster_ has joined #openstack-barbican | 06:00 | |
| *** xaeth_afk is now known as xaeth | 06:12 | |
| *** tkelsey has quit IRC | 06:22 | |
| *** tkelsey has joined #openstack-barbican | 06:49 | |
| *** xaeth is now known as xaeth_afk | 06:53 | |
| *** xaeth_afk is now known as xaeth | 07:02 | |
| *** tkelsey has quit IRC | 07:03 | |
| *** hyakuhei has quit IRC | 07:16 | |
| *** chlong has quit IRC | 07:19 | |
| *** zz_dimtruck is now known as dimtruck | 07:31 | |
| *** dimtruck is now known as zz_dimtruck | 08:07 | |
| *** woodster_ has quit IRC | 08:30 | |
| *** chlong has joined #openstack-barbican | 11:42 | |
| *** woodster_ has joined #openstack-barbican | 12:22 | |
| *** dave-mccowan has joined #openstack-barbican | 13:58 | |
| *** woodster_ has quit IRC | 14:30 | |
| *** woodster_ has joined #openstack-barbican | 14:41 | |
| *** alee has joined #openstack-barbican | 14:48 | |
| *** zz_dimtruck is now known as dimtruck | 14:49 | |
| *** paul_glass has joined #openstack-barbican | 15:04 | |
| *** dimtruck is now known as zz_dimtruck | 15:04 | |
| openstackgerrit | Nathan Reller proposed openstack/barbican: Fixed Binary Encoding to Secret Stores https://review.openstack.org/157410 | 15:13 |
| *** rellerreller has joined #openstack-barbican | 15:14 | |
| *** hyakuhei has joined #openstack-barbican | 15:17 | |
| rellerreller | Content types! >_< | 15:17 |
| rellerreller | woodster_ redrobot I put a CR out there for the base64 bug, https://review.openstack.org/#/c/157410/ | 15:18 |
| rellerreller | alee This bug fix could affect the DogTag secret store. This ensures that all data sent to the secret store for storage is base64 encoded. | 15:18 |
| *** darrenmoffat has quit IRC | 15:20 | |
| *** darrenmoffat has joined #openstack-barbican | 15:20 | |
| alee | rellerreller, oh I definitely expect this will affect the dogtag secret store. fortunately redrobot will be finishing setting up that gate - right, redrobot? | 15:21 |
| *** kgriffs|afk is now known as kgriffs | 15:22 | |
| openstackgerrit | Nathan Reller proposed openstack/barbican: Fixed Binary Encoding to Secret Stores https://review.openstack.org/157410 | 15:27 |
| *** lisaclark1 has joined #openstack-barbican | 15:29 | |
| *** lisaclark1 has quit IRC | 15:33 | |
| *** zz_dimtruck is now known as dimtruck | 15:37 | |
| *** rellerreller has quit IRC | 15:46 | |
| *** lisaclark1 has joined #openstack-barbican | 15:55 | |
| *** xaeth is now known as xaeth_afk | 15:57 | |
| lisaclark1 | Anyone have eyes to put on this CR: https://review.openstack.org/#/c/155507 | 15:57 |
| reaperhulk | lisaclark1: will look in a bit | 15:58 |
| lisaclark1 | thanks reaperhulk! | 15:58 |
| reaperhulk | need to get back on not tethering first, hehe | 15:58 |
| *** hyakuhei has quit IRC | 16:01 | |
| *** david-lyle_afk is now known as david-lyle | 16:04 | |
| woodster_ | tdink_, hockeynut, I added a question to the CR | 16:04 |
| lisaclark1 | woodster_: thanks! also, your spike for testing schema changes. anything left here? | 16:06 |
| woodster_ | lisaclark1, I don't think so....we capture the action item needed on the etherpad (to add a base migration version module/script aligned to Juno). That could be a paper cut item for sure. | 16:08 |
| woodster_ | lisaclark1, I converted some of those to paper cuts (adding links to them in launchpad) | 16:08 |
| lisaclark1 | awesome! | 16:08 |
| lisaclark1 | i'll close the spike then | 16:08 |
| *** xaeth_afk is now known as xaeth | 16:10 | |
| *** tsv has joined #openstack-barbican | 16:14 | |
| *** lisaclark1 has quit IRC | 16:22 | |
| *** kebray has joined #openstack-barbican | 16:25 | |
| *** kebray has quit IRC | 16:25 | |
| *** kebray has joined #openstack-barbican | 16:26 | |
| *** lisaclark1 has joined #openstack-barbican | 16:27 | |
| openstackgerrit | Thomas Dinkjian proposed openstack/python-barbicanclient: Adds positive container functional tests https://review.openstack.org/155507 | 16:34 |
| *** openstackgerrit has quit IRC | 16:36 | |
| *** openstackgerrit has joined #openstack-barbican | 16:36 | |
| openstackgerrit | Thomas Dinkjian proposed openstack/python-barbicanclient: Adds positive container functional tests https://review.openstack.org/155507 | 16:40 |
| *** hyakuhei has joined #openstack-barbican | 16:50 | |
| *** tkelsey has joined #openstack-barbican | 16:51 | |
| *** lisaclark1 has quit IRC | 16:57 | |
| *** lisaclark1 has joined #openstack-barbican | 17:05 | |
| *** lisaclark1 has quit IRC | 17:05 | |
| *** lisaclark1 has joined #openstack-barbican | 17:05 | |
| *** igueths has joined #openstack-barbican | 17:12 | |
| *** bdpayne has joined #openstack-barbican | 17:31 | |
| *** dave-mccowan has quit IRC | 17:33 | |
| *** arunkant has quit IRC | 17:34 | |
| *** arunkant has joined #openstack-barbican | 17:41 | |
| *** kgriffs is now known as kgriffs|afk | 18:07 | |
| *** rellerreller has joined #openstack-barbican | 18:09 | |
| *** rellerreller has quit IRC | 18:27 | |
| *** lisaclark1 has quit IRC | 18:40 | |
| *** xaeth is now known as xaeth_afk | 18:57 | |
| *** kebray_ has joined #openstack-barbican | 19:03 | |
| *** kebray has quit IRC | 19:04 | |
| *** xaeth_afk is now known as xaeth | 19:05 | |
| redrobot | alee ping | 19:07 |
| alee | redrobot, pong | 19:07 |
| alee | redrobot, you got a gate ? :) | 19:08 |
| *** lisaclark1 has joined #openstack-barbican | 19:08 | |
| redrobot | alee working on it :) | 19:08 |
| alee | redrobot, cool - so whats up? | 19:08 |
| redrobot | alee I think I may have lost something in the script though... I destroyed the vagrant box to retry the script, and I'm getting a failure | 19:08 |
| alee | redrobot, ok --- which part is failing? | 19:09 |
| redrobot | alee looks like CA is fine, but KRA is failing... | 19:09 |
| redrobot | alee one sec on paste | 19:09 |
| redrobot | alee http://paste.openstack.org/show/177818/ | 19:09 |
| alee | redrobot, are you still defining the security domain host and port? | 19:11 |
| redrobot | alee let me paste the kra config | 19:11 |
| redrobot | alee refresh paste to see config | 19:12 |
| alee | redrobot, eh? | 19:13 |
| alee | I still see the output you put in before | 19:13 |
| redrobot | alee I added the config to the paste... refresh your browser to see the edit | 19:13 |
| redrobot | alee oh, derp it makes a new one when you reply... here https://localhost.localdomain:8373/ca | 19:13 |
| redrobot | alee I mean http://paste.openstack.org/show/177819/ | 19:13 |
| alee | interesting .. | 19:14 |
| alee | it loooks like the security domain hostname and port are defined | 19:15 |
| alee | can you get onto the machine? | 19:15 |
| redrobot | yep, | 19:15 |
| redrobot | I'm on it now | 19:15 |
| alee | ps -ef |grep java | 19:15 |
| redrobot | pkiuser 2559 1 0 17:11 ? 00:00:33 /usr/lib/jvm/jre/bin/java -DRESTEASY_LIB=/usr/share/java/resteasy -classpath /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/lib/java/commons-daemon.jar -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.pr | 19:16 |
| redrobot | operties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy org.apache.catalina.startup.Bootstrap start | 19:16 |
| redrobot | root 2714 2648 0 19:16 pts/0 00:00:00 grep --color=auto java | 19:16 |
| * redrobot apologizes to everyone else | 19:16 | |
| alee | wget https//localhost:8373/ca/admin/ca/getStatus | 19:18 |
| redrobot | alee getting a cert trust error... what's the wget option for ignore ssl errors? | 19:19 |
| alee | wget https//localhost:8373/ca/admin/ca/getDomainXML | 19:19 |
| alee | -no-check-certificate | 19:20 |
| *** kgriffs|afk is now known as kgriffs | 19:21 | |
| redrobot | getStatus= <?xml version="1.0" encoding="UTF-8" standalone="no"?><XMLResponse><State>1</State><Type>CA</Type><Status>running</Status><Version>10.2.0-5.fc21</Version></XMLResponse> | 19:21 |
| redrobot | getDomainXML = <?xml version="1.0" encoding="UTF-8" standalone="no"?><XMLResponse><DomainInfo><?xml version="1.0" encoding="UTF-8" standalone="no"?><DomainInfo><Name>EXAMPLE</Name><CAList><CA><Host>localhost.localdomain</Host><UnSecurePort>8370</UnSecurePort><SecurePort>8373</SecurePort><SecureEEClientAuthPort>8373</SecureEEClientAuthPort><SecureAgentPort& | 19:21 |
| redrobot | gt;8373</SecureAgentPort><SecureAdminPort>8373</SecureAdminPort><Clone>FALSE</Clone><SubsystemName>CA localhost.localdomain 8373</SubsystemName><DomainManager>TRUE</DomainManager></CA><SubsystemCount>1</SubsystemCount></CAList><KRAList><SubsystemCount>0</SubsystemCount></KRAList><OCSPList><SubsystemCount>0</SubsystemCount>& | 19:21 |
| redrobot | lt;/OCSPList><TKSList><SubsystemCount>0</SubsystemCount></TKSList><RAList><SubsystemCount>0</SubsystemCount></RAList><TPSList><SubsystemCount>0</SubsystemCount></TPSList></DomainInfo></DomainInfo><Status>0</Status></XMLResponse> | 19:21 |
| alee | redrobot, that tells me that the ca is running and that you should be able to get to the security domain | 19:22 |
| redrobot | alee hmm... I wonder if it's just a race condition? Maybe the server isn't quite listening when the KRA command is executed? | 19:23 |
| redrobot | let me throw a sleep in there and see what happens | 19:23 |
| alee | redrobot, yeah - good idea | 19:23 |
| alee | if thats it - we could be more definitive and do the wget/curl to getStatus till we get a "running" response | 19:24 |
| redrobot | alee yep, that was it... put a "sleep 5" in between commands and was able to run the script on a clean vm | 19:33 |
| * jvrbanac shudder | 19:33 | |
| alee | redrobot, sweet - we probably need to do something smarter than just sleep. ie. check the results of /getStatus and sleep/loop | 19:34 |
| *** lisaclark1 has quit IRC | 19:35 | |
| alee | redrobot, ipa wrote something like that iirc -- let me look | 19:36 |
| *** ametts has joined #openstack-barbican | 19:38 | |
| redrobot | alee k | 19:38 |
| alee | redrobot, you could do a curl or wget to https//localhost:8373/ca/admin/ca/getStatus |grep "running" | 19:40 |
| *** lisaclark1 has joined #openstack-barbican | 19:40 | |
| alee | redrobot, curl or wget to https//localhost:8373/ca/admin/ca/getStatus |grep "running"|wc -l | 19:41 |
| alee | and check the output of that and loop and sleep till that is 1 | 19:41 |
| * redrobot flexes his bash-fu | 19:42 | |
| *** nkinder is now known as nkinder_away | 19:46 | |
| openstackgerrit | Thomas Dinkjian proposed openstack/python-barbicanclient: Adds orders behaviors and smoke tests. https://review.openstack.org/157130 | 19:53 |
| igueths | As a suggestion, pasted here since the captcha has marked me as spam and there's no audio captcha... | 19:57 |
| igueths | while true; do | 19:57 |
| igueths | ret=`curl -k https://localhost:8373/ca/admin/ca/getStatus |grep -c "running"` | 19:58 |
| igueths | if [[ $ret == 1 ]]; then | 19:58 |
| igueths | break | 19:58 |
| igueths | fi | 19:58 |
| igueths | done | 19:58 |
| redrobot | ^^ this is why igueths makes the big bucks | 19:58 |
| alee | igueths, awesome | 19:58 |
| igueths | Thanks alee! | 19:59 |
| igueths | I try anyway. | 19:59 |
| igueths | Where can I log a bug against the Pastebin? | 19:59 |
| reaperhulk | igueths: looks like you can email admin@pastebin.com or tweet @pastebin | 20:00 |
| *** lisaclark1 has quit IRC | 20:01 | |
| igueths | reaperhulk: Ah I didn't realize that the paste.openstack.org endpoint contained /stock Pastebin/ | 20:01 |
| igueths | Will do that then. | 20:01 |
| reaperhulk | igueths: I actually have no idea if it does | 20:02 |
| * reaperhulk just assumed | 20:02 | |
| *** lisaclark1 has joined #openstack-barbican | 20:02 | |
| *** crc32 has joined #openstack-barbican | 20:02 | |
| reaperhulk | It actually doesn't look like it does | 20:02 |
| reaperhulk | "lodgeit" | 20:02 |
| reaperhulk | http://www.pocoo.org/projects/lodgeit/ looks like this is the software it uses | 20:02 |
| reaperhulk | looks like you could maybe even ask on #pocoo on freenode | 20:03 |
| *** crc32 has quit IRC | 20:06 | |
| *** kgriffs is now known as kgriffs|afk | 20:11 | |
| *** dave-mccowan has joined #openstack-barbican | 20:12 | |
| *** kgriffs|afk is now known as kgriffs | 20:20 | |
| *** tkelsey has quit IRC | 20:20 | |
| *** tkelsey has joined #openstack-barbican | 20:42 | |
| *** lisaclark1 has quit IRC | 20:43 | |
| *** lisaclark1 has joined #openstack-barbican | 20:47 | |
| *** atiwari has quit IRC | 20:48 | |
| *** lisaclark1 has quit IRC | 20:50 | |
| *** gyee has joined #openstack-barbican | 20:53 | |
| redrobot | alee ping | 20:56 |
| *** crc32 has joined #openstack-barbican | 21:00 | |
| openstackgerrit | Merged openstack/python-barbicanclient: Adds positive container functional tests https://review.openstack.org/155507 | 21:02 |
| *** kgriffs is now known as kgriffs|afk | 21:03 | |
| *** kgriffs|afk is now known as kgriffs | 21:07 | |
| alee | redrobot, pong | 21:10 |
| redrobot | alee the pki namespace... what package provides that? | 21:10 |
| alee | redrobot, sorry - meetings .. | 21:22 |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican: Add support for dogtag in devstack testing https://review.openstack.org/157531 | 21:24 |
| *** dstufft has left #openstack-barbican | 21:27 | |
| *** morganfainberg is now known as needscoffee | 21:32 | |
| *** openstackstatus has joined #openstack-barbican | 22:14 | |
| *** ChanServ sets mode: +v openstackstatus | 22:14 | |
| *** kebray_ has quit IRC | 22:19 | |
| alee | redrobot, so thats delivered by the dogtag packages | 22:19 |
| *** kebray has joined #openstack-barbican | 22:20 | |
| alee | redrobot, (just got out of meetings) | 22:20 |
| redrobot | alee no worries... just wanted to make sure we don't need to pip install something | 22:20 |
| alee | redrobot, ie. pki-server or pki-common rpm iirc | 22:20 |
| alee | redrobot, yup -- someday, when I get time , I have to pip-package it | 22:21 |
| alee | redrobot, is that patch https://review.openstack.org/157531 ready to be reviewed? | 22:21 |
| alee | or are you still testing? | 22:22 |
| redrobot | alee it's ready for review... I was just waiting to confirm nothing else was needed... once the patch merges I'll send a patch to infra to enable the gate | 22:23 |
| redrobot | alee I'll ask for it to be non-voting until we iron out whatever issues we find | 22:23 |
| alee | redrobot, yup -- cool - reviewing now | 22:24 |
| alee | redrobot, out of curiosity -- did you see the tests run against the dogtag instance? | 22:26 |
| redrobot | alee nope, not yet... but I should have all the stuff to run them now. | 22:28 |
| alee | redrobot, +2 for me .. lets get it rolling .. | 22:29 |
| openstackgerrit | John Wood proposed openstack/barbican: Add sub-status logic to worker/task processing https://review.openstack.org/157565 | 22:36 |
| *** hyakuhei has quit IRC | 22:45 | |
| *** hyakuhei has joined #openstack-barbican | 22:48 | |
| *** hyakuhei has quit IRC | 22:54 | |
| *** hyakuhei has joined #openstack-barbican | 22:56 | |
| *** paul_glass has quit IRC | 22:56 | |
| kragniz | does anyone have any pointers on why gate-barbican-devstack-dsvm is failing on one of my patches? | 23:03 |
| kragniz | (https://review.openstack.org/#/c/157239/) | 23:03 |
| *** kgriffs is now known as kgriffs|afk | 23:06 | |
| *** kgriffs|afk is now known as kgriffs | 23:07 | |
| redrobot | kragniz looking... | 23:07 |
| *** crc32 has quit IRC | 23:07 | |
| kragniz | it could be me doing something silly | 23:08 |
| * kragniz only started looking at barbican a couple of days ago | 23:08 | |
| redrobot | kragniz looks like the signature for oslo_log.log.setup() changed. | 23:13 |
| redrobot | kragniz looking at the released lib code http://git.openstack.org/cgit/openstack/oslo.log/tree/oslo_log/log.py#n206 it's expecting 2 args | 23:13 |
| redrobot | kragniz but barbican is only giving it one http://git.openstack.org/cgit/openstack/barbican/tree/barbican/api/app.py#n103 | 23:14 |
| redrobot | kragniz relevant log file in your CR is http://logs.openstack.org/39/157239/2/check/gate-barbican-devstack-dsvm/37a5c2a/logs/screen-barbican.txt.gz | 23:14 |
| kragniz | wouldn't that cause the gate-barbican-python27 job to also fail? | 23:14 |
| kragniz | redrobot: thanks! | 23:14 |
| * kragniz makes a note of that log file location for next time | 23:15 | |
| redrobot | kragniz not necessarily, because the py27 job never loads the app | 23:15 |
| kragniz | so is that just unit tests? | 23:15 |
| redrobot | kragniz yep, the py27 job runs the unit test suite in Python 2.7 | 23:16 |
| kragniz | okay, good to know | 23:16 |
| *** kgriffs is now known as kgriffs|afk | 23:16 | |
| openstackgerrit | Louis Taylor proposed openstack/barbican: Port to oslo.serialization's jsonutils https://review.openstack.org/157240 | 23:19 |
| openstackgerrit | Louis Taylor proposed openstack/barbican: Port to graduated oslo.log package https://review.openstack.org/157239 | 23:19 |
| kragniz | redrobot: thanks for the help! | 23:19 |
| *** crc32 has joined #openstack-barbican | 23:19 | |
| *** kgriffs|afk is now known as kgriffs | 23:20 | |
| redrobot | kragniz any time! :) | 23:22 |
| *** igueths has quit IRC | 23:25 | |
| *** bdpayne has quit IRC | 23:39 | |
| *** dimtruck is now known as zz_dimtruck | 23:47 | |
| *** hyakuhei has quit IRC | 23:49 | |
| *** kebray has quit IRC | 23:54 | |
| *** tkelsey has quit IRC | 23:55 | |
| *** tsv has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!