Thursday, 2015-02-19

*** hyakuhei has joined #openstack-barbican00:09
*** david-lyle is now known as david-lyle_afk00:41
*** stanzi has joined #openstack-barbican00:41
*** bdpayne has quit IRC00:42
*** tkelsey has quit IRC00:49
*** hyakuhei has quit IRC00:51
openstackgerritMerged openstack/barbican: Add container consumer repository factory  https://review.openstack.org/15714101:16
*** zz_dimtruck is now known as dimtruck01:23
*** stanzi has quit IRC01:24
*** stanzi has joined #openstack-barbican01:24
*** stanzi has quit IRC01:29
*** stanzi has joined #openstack-barbican01:35
*** crc32 has joined #openstack-barbican01:41
*** kgriffs is now known as kgriffs|afk01:42
*** stanzi has quit IRC01:43
*** stanzi has joined #openstack-barbican01:44
*** stanzi has quit IRC01:48
*** crc32 has quit IRC02:03
openstackgerritSteve Heyman proposed openstack/barbican: Fix security bug with host HTTP header field  https://review.openstack.org/15723102:06
openstackgerritSteve Heyman proposed openstack/barbican: Fix security bug with host HTTP header field  https://review.openstack.org/15723102:08
*** jaosorior has quit IRC02:11
*** stanzi has joined #openstack-barbican02:20
*** stanzi has joined #openstack-barbican02:21
*** stanzi has quit IRC02:25
openstackgerritLouis Taylor proposed openstack/barbican: Sync with latest oslo-incubator  https://review.openstack.org/15723802:41
openstackgerritLouis Taylor proposed openstack/barbican: Port to graduated oslo.log package  https://review.openstack.org/15723902:41
openstackgerritLouis Taylor proposed openstack/barbican: Port to oslo.serialization's jsonutils  https://review.openstack.org/15724002:41
openstackgerritLouis Taylor proposed openstack/barbican: Port to oslo.serialization's jsonutils  https://review.openstack.org/15724002:48
openstackgerritLouis Taylor proposed openstack/barbican: Port to graduated oslo.log package  https://review.openstack.org/15723902:49
openstackgerritLouis Taylor proposed openstack/barbican: Sync with latest oslo-incubator  https://review.openstack.org/15723802:49
kragnizsorry for the patch spam02:49
openstackgerritJohnu George proposed openstack/barbican: Typos fixed in paramter names in comments  https://review.openstack.org/15724102:49
*** hyakuhei has joined #openstack-barbican03:02
*** SheenaG1 has quit IRC03:54
*** tkelsey has joined #openstack-barbican03:59
*** woodster_ has quit IRC04:40
*** dimtruck is now known as zz_dimtruck04:47
*** xaeth_afk is now known as xaeth05:03
*** tkelsey has quit IRC05:17
*** xaeth is now known as xaeth_afk05:25
*** xaeth_afk is now known as xaeth05:33
*** gyee has quit IRC05:36
*** tkelsey has joined #openstack-barbican05:47
*** xaeth is now known as xaeth_afk05:57
*** woodster_ has joined #openstack-barbican06:00
*** xaeth_afk is now known as xaeth06:12
*** tkelsey has quit IRC06:22
*** tkelsey has joined #openstack-barbican06:49
*** xaeth is now known as xaeth_afk06:53
*** xaeth_afk is now known as xaeth07:02
*** tkelsey has quit IRC07:03
*** hyakuhei has quit IRC07:16
*** chlong has quit IRC07:19
*** zz_dimtruck is now known as dimtruck07:31
*** dimtruck is now known as zz_dimtruck08:07
*** woodster_ has quit IRC08:30
*** chlong has joined #openstack-barbican11:42
*** woodster_ has joined #openstack-barbican12:22
*** dave-mccowan has joined #openstack-barbican13:58
*** woodster_ has quit IRC14:30
*** woodster_ has joined #openstack-barbican14:41
*** alee has joined #openstack-barbican14:48
*** zz_dimtruck is now known as dimtruck14:49
*** paul_glass has joined #openstack-barbican15:04
*** dimtruck is now known as zz_dimtruck15:04
openstackgerritNathan Reller proposed openstack/barbican: Fixed Binary Encoding to Secret Stores  https://review.openstack.org/15741015:13
*** rellerreller has joined #openstack-barbican15:14
*** hyakuhei has joined #openstack-barbican15:17
rellerrellerContent types! >_<15:17
rellerrellerwoodster_ redrobot I put a CR out there for the base64 bug, https://review.openstack.org/#/c/157410/15:18
rellerrelleralee This bug fix could affect the DogTag secret store. This ensures that all data sent to the secret store for storage is base64 encoded.15:18
*** darrenmoffat has quit IRC15:20
*** darrenmoffat has joined #openstack-barbican15:20
aleerellerreller, oh I definitely expect this will affect the dogtag secret store.  fortunately redrobot  will be finishing setting up that gate - right, redrobot?15:21
*** kgriffs|afk is now known as kgriffs15:22
openstackgerritNathan Reller proposed openstack/barbican: Fixed Binary Encoding to Secret Stores  https://review.openstack.org/15741015:27
*** lisaclark1 has joined #openstack-barbican15:29
*** lisaclark1 has quit IRC15:33
*** zz_dimtruck is now known as dimtruck15:37
*** rellerreller has quit IRC15:46
*** lisaclark1 has joined #openstack-barbican15:55
*** xaeth is now known as xaeth_afk15:57
lisaclark1Anyone have eyes to put on this CR: https://review.openstack.org/#/c/15550715:57
reaperhulklisaclark1: will look in a bit15:58
lisaclark1thanks reaperhulk!15:58
reaperhulkneed to get back on not tethering first, hehe15:58
*** hyakuhei has quit IRC16:01
*** david-lyle_afk is now known as david-lyle16:04
woodster_tdink_, hockeynut, I added a question to the CR16:04
lisaclark1woodster_: thanks!  also, your spike for testing schema changes.  anything left here?16:06
woodster_lisaclark1, I don't think so....we capture the action item needed on the etherpad (to add a base migration version module/script aligned to Juno). That could be a paper cut item for sure.16:08
woodster_lisaclark1, I converted some of those to paper cuts (adding links to them in launchpad)16:08
lisaclark1awesome!16:08
lisaclark1i'll close the spike then16:08
*** xaeth_afk is now known as xaeth16:10
*** tsv has joined #openstack-barbican16:14
*** lisaclark1 has quit IRC16:22
*** kebray has joined #openstack-barbican16:25
*** kebray has quit IRC16:25
*** kebray has joined #openstack-barbican16:26
*** lisaclark1 has joined #openstack-barbican16:27
openstackgerritThomas Dinkjian proposed openstack/python-barbicanclient: Adds positive container functional tests  https://review.openstack.org/15550716:34
*** openstackgerrit has quit IRC16:36
*** openstackgerrit has joined #openstack-barbican16:36
openstackgerritThomas Dinkjian proposed openstack/python-barbicanclient: Adds positive container functional tests  https://review.openstack.org/15550716:40
*** hyakuhei has joined #openstack-barbican16:50
*** tkelsey has joined #openstack-barbican16:51
*** lisaclark1 has quit IRC16:57
*** lisaclark1 has joined #openstack-barbican17:05
*** lisaclark1 has quit IRC17:05
*** lisaclark1 has joined #openstack-barbican17:05
*** igueths has joined #openstack-barbican17:12
*** bdpayne has joined #openstack-barbican17:31
*** dave-mccowan has quit IRC17:33
*** arunkant has quit IRC17:34
*** arunkant has joined #openstack-barbican17:41
*** kgriffs is now known as kgriffs|afk18:07
*** rellerreller has joined #openstack-barbican18:09
*** rellerreller has quit IRC18:27
*** lisaclark1 has quit IRC18:40
*** xaeth is now known as xaeth_afk18:57
*** kebray_ has joined #openstack-barbican19:03
*** kebray has quit IRC19:04
*** xaeth_afk is now known as xaeth19:05
redrobotalee ping19:07
aleeredrobot, pong19:07
aleeredrobot, you got a gate ? :)19:08
*** lisaclark1 has joined #openstack-barbican19:08
redrobotalee working on it :)19:08
aleeredrobot, cool - so whats up?19:08
redrobotalee I think I may have lost something in the script though...  I destroyed the vagrant box to retry the script, and I'm getting a failure19:08
aleeredrobot, ok --- which part is failing?19:09
redrobotalee looks like CA is fine, but KRA is failing...19:09
redrobotalee one sec on paste19:09
redrobotalee http://paste.openstack.org/show/177818/19:09
aleeredrobot, are you still defining the security domain host and port?19:11
redrobotalee let me paste the kra config19:11
redrobotalee refresh paste to see config19:12
aleeredrobot, eh?19:13
aleeI still see the output you put in before19:13
redrobotalee I added the config to the paste... refresh your browser to see the edit19:13
redrobotalee oh, derp it makes a new one when you reply... here https://localhost.localdomain:8373/ca19:13
redrobotalee I mean http://paste.openstack.org/show/177819/19:13
aleeinteresting ..19:14
aleeit loooks like the security domain hostname and port are defined19:15
aleecan you get onto the machine?19:15
redrobotyep,19:15
redrobotI'm on it now19:15
aleeps -ef |grep java19:15
redrobotpkiuser   2559     1  0 17:11 ?        00:00:33 /usr/lib/jvm/jre/bin/java -DRESTEASY_LIB=/usr/share/java/resteasy -classpath /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/lib/java/commons-daemon.jar -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.pr19:16
redrobotoperties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy org.apache.catalina.startup.Bootstrap start19:16
redrobotroot      2714  2648  0 19:16 pts/0    00:00:00 grep --color=auto java19:16
* redrobot apologizes to everyone else19:16
aleewget https//localhost:8373/ca/admin/ca/getStatus19:18
redrobotalee getting a cert trust error...  what's the wget option for ignore ssl errors?19:19
aleewget https//localhost:8373/ca/admin/ca/getDomainXML19:19
alee-no-check-certificate19:20
*** kgriffs|afk is now known as kgriffs19:21
redrobotgetStatus= <?xml version="1.0" encoding="UTF-8" standalone="no"?><XMLResponse><State>1</State><Type>CA</Type><Status>running</Status><Version>10.2.0-5.fc21</Version></XMLResponse>19:21
redrobotgetDomainXML = <?xml version="1.0" encoding="UTF-8" standalone="no"?><XMLResponse><DomainInfo>&lt;?xml version="1.0" encoding="UTF-8" standalone="no"?&gt;&lt;DomainInfo&gt;&lt;Name&gt;EXAMPLE&lt;/Name&gt;&lt;CAList&gt;&lt;CA&gt;&lt;Host&gt;localhost.localdomain&lt;/Host&gt;&lt;UnSecurePort&gt;8370&lt;/UnSecurePort&gt;&lt;SecurePort&gt;8373&lt;/SecurePort&gt;&lt;SecureEEClientAuthPort&gt;8373&lt;/SecureEEClientAuthPort&gt;&lt;SecureAgentPort&19:21
redrobotgt;8373&lt;/SecureAgentPort&gt;&lt;SecureAdminPort&gt;8373&lt;/SecureAdminPort&gt;&lt;Clone&gt;FALSE&lt;/Clone&gt;&lt;SubsystemName&gt;CA localhost.localdomain 8373&lt;/SubsystemName&gt;&lt;DomainManager&gt;TRUE&lt;/DomainManager&gt;&lt;/CA&gt;&lt;SubsystemCount&gt;1&lt;/SubsystemCount&gt;&lt;/CAList&gt;&lt;KRAList&gt;&lt;SubsystemCount&gt;0&lt;/SubsystemCount&gt;&lt;/KRAList&gt;&lt;OCSPList&gt;&lt;SubsystemCount&gt;0&lt;/SubsystemCount&gt;&19:21
redrobotlt;/OCSPList&gt;&lt;TKSList&gt;&lt;SubsystemCount&gt;0&lt;/SubsystemCount&gt;&lt;/TKSList&gt;&lt;RAList&gt;&lt;SubsystemCount&gt;0&lt;/SubsystemCount&gt;&lt;/RAList&gt;&lt;TPSList&gt;&lt;SubsystemCount&gt;0&lt;/SubsystemCount&gt;&lt;/TPSList&gt;&lt;/DomainInfo&gt;</DomainInfo><Status>0</Status></XMLResponse>19:21
aleeredrobot, that tells me that the ca is running and that you should be able to get to the security domain19:22
redrobotalee hmm... I wonder if it's just a race condition?  Maybe the server isn't quite listening when the KRA command is executed?19:23
redrobotlet me throw a sleep in there and see what happens19:23
aleeredrobot, yeah - good idea19:23
aleeif thats it - we could be more definitive and do the wget/curl  to getStatus till we get a "running" response19:24
redrobotalee yep, that was it... put a "sleep 5" in between commands and was able to run the script on a clean vm19:33
* jvrbanac shudder19:33
aleeredrobot, sweet - we probably need to do something smarter than just sleep.  ie.  check the results of /getStatus and sleep/loop19:34
*** lisaclark1 has quit IRC19:35
aleeredrobot, ipa wrote something like that iirc -- let me look19:36
*** ametts has joined #openstack-barbican19:38
redrobotalee k19:38
aleeredrobot, you could do a curl or wget to https//localhost:8373/ca/admin/ca/getStatus |grep "running"19:40
*** lisaclark1 has joined #openstack-barbican19:40
aleeredrobot, curl or wget to https//localhost:8373/ca/admin/ca/getStatus |grep "running"|wc -l19:41
aleeand check the output of that and loop and sleep till that is 119:41
* redrobot flexes his bash-fu19:42
*** nkinder is now known as nkinder_away19:46
openstackgerritThomas Dinkjian proposed openstack/python-barbicanclient: Adds orders behaviors and smoke tests.  https://review.openstack.org/15713019:53
iguethsAs a suggestion, pasted here since the captcha has marked me as spam and there's no audio captcha...19:57
iguethswhile true; do19:57
iguethsret=`curl -k https://localhost:8373/ca/admin/ca/getStatus |grep -c "running"`19:58
iguethsif [[ $ret == 1 ]]; then19:58
iguethsbreak19:58
iguethsfi19:58
iguethsdone19:58
redrobot^^ this is why igueths makes the big bucks19:58
aleeigueths, awesome19:58
iguethsThanks alee!19:59
iguethsI try anyway.19:59
iguethsWhere can I log a bug against the Pastebin?19:59
reaperhulkigueths: looks like you can email admin@pastebin.com or tweet @pastebin20:00
*** lisaclark1 has quit IRC20:01
iguethsreaperhulk: Ah I didn't realize that the paste.openstack.org endpoint contained /stock Pastebin/20:01
iguethsWill do that then.20:01
reaperhulkigueths: I actually have no idea if it does20:02
* reaperhulk just assumed20:02
*** lisaclark1 has joined #openstack-barbican20:02
*** crc32 has joined #openstack-barbican20:02
reaperhulkIt actually doesn't look like it does20:02
reaperhulk"lodgeit"20:02
reaperhulkhttp://www.pocoo.org/projects/lodgeit/ looks like this is the software it uses20:02
reaperhulklooks like you could maybe even ask on #pocoo on freenode20:03
*** crc32 has quit IRC20:06
*** kgriffs is now known as kgriffs|afk20:11
*** dave-mccowan has joined #openstack-barbican20:12
*** kgriffs|afk is now known as kgriffs20:20
*** tkelsey has quit IRC20:20
*** tkelsey has joined #openstack-barbican20:42
*** lisaclark1 has quit IRC20:43
*** lisaclark1 has joined #openstack-barbican20:47
*** atiwari has quit IRC20:48
*** lisaclark1 has quit IRC20:50
*** gyee has joined #openstack-barbican20:53
redrobotalee ping20:56
*** crc32 has joined #openstack-barbican21:00
openstackgerritMerged openstack/python-barbicanclient: Adds positive container functional tests  https://review.openstack.org/15550721:02
*** kgriffs is now known as kgriffs|afk21:03
*** kgriffs|afk is now known as kgriffs21:07
aleeredrobot, pong21:10
redrobotalee the pki namespace... what package provides that?21:10
aleeredrobot, sorry - meetings ..21:22
openstackgerritDouglas Mendizábal proposed openstack/barbican: Add support for dogtag in devstack testing  https://review.openstack.org/15753121:24
*** dstufft has left #openstack-barbican21:27
*** morganfainberg is now known as needscoffee21:32
*** openstackstatus has joined #openstack-barbican22:14
*** ChanServ sets mode: +v openstackstatus22:14
*** kebray_ has quit IRC22:19
aleeredrobot, so thats delivered by the dogtag packages22:19
*** kebray has joined #openstack-barbican22:20
aleeredrobot, (just got out of meetings)22:20
redrobotalee no worries...  just wanted to make sure we don't need to pip install something22:20
aleeredrobot, ie. pki-server or pki-common rpm iirc22:20
aleeredrobot, yup -- someday, when I get time , I have to pip-package it22:21
aleeredrobot, is that patch https://review.openstack.org/157531 ready to be reviewed?22:21
aleeor are you still testing?22:22
redrobotalee it's ready for review...  I was just waiting to confirm nothing else was needed...  once the patch merges I'll send a patch to infra to enable the gate22:23
redrobotalee I'll ask for it to be non-voting until we iron out whatever issues we find22:23
aleeredrobot, yup -- cool - reviewing now22:24
aleeredrobot, out of curiosity -- did you see the tests run against the dogtag instance?22:26
redrobotalee nope, not yet... but I should have all the stuff to run them now.22:28
aleeredrobot, +2 for me .. lets get it rolling ..22:29
openstackgerritJohn Wood proposed openstack/barbican: Add sub-status logic to worker/task processing  https://review.openstack.org/15756522:36
*** hyakuhei has quit IRC22:45
*** hyakuhei has joined #openstack-barbican22:48
*** hyakuhei has quit IRC22:54
*** hyakuhei has joined #openstack-barbican22:56
*** paul_glass has quit IRC22:56
kragnizdoes anyone have any pointers on why gate-barbican-devstack-dsvm is failing on one of my patches?23:03
kragniz(https://review.openstack.org/#/c/157239/)23:03
*** kgriffs is now known as kgriffs|afk23:06
*** kgriffs|afk is now known as kgriffs23:07
redrobotkragniz looking...23:07
*** crc32 has quit IRC23:07
kragnizit could be me doing something silly23:08
* kragniz only started looking at barbican a couple of days ago23:08
redrobotkragniz looks like the signature for oslo_log.log.setup() changed.23:13
redrobotkragniz looking at the released lib code http://git.openstack.org/cgit/openstack/oslo.log/tree/oslo_log/log.py#n206 it's expecting 2 args23:13
redrobotkragniz but barbican is only giving it one http://git.openstack.org/cgit/openstack/barbican/tree/barbican/api/app.py#n10323:14
redrobotkragniz relevant log file in your CR is http://logs.openstack.org/39/157239/2/check/gate-barbican-devstack-dsvm/37a5c2a/logs/screen-barbican.txt.gz23:14
kragnizwouldn't that cause the gate-barbican-python27 job to also fail?23:14
kragnizredrobot: thanks!23:14
* kragniz makes a note of that log file location for next time23:15
redrobotkragniz not necessarily, because the py27 job never loads the app23:15
kragnizso is that just unit tests?23:15
redrobotkragniz yep, the py27 job runs the unit test suite in Python 2.723:16
kragnizokay, good to know23:16
*** kgriffs is now known as kgriffs|afk23:16
openstackgerritLouis Taylor proposed openstack/barbican: Port to oslo.serialization's jsonutils  https://review.openstack.org/15724023:19
openstackgerritLouis Taylor proposed openstack/barbican: Port to graduated oslo.log package  https://review.openstack.org/15723923:19
kragnizredrobot: thanks for the help!23:19
*** crc32 has joined #openstack-barbican23:19
*** kgriffs|afk is now known as kgriffs23:20
redrobotkragniz any time! :)23:22
*** igueths has quit IRC23:25
*** bdpayne has quit IRC23:39
*** dimtruck is now known as zz_dimtruck23:47
*** hyakuhei has quit IRC23:49
*** kebray has quit IRC23:54
*** tkelsey has quit IRC23:55
*** tsv has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!