| *** woodster_ has quit IRC | 00:00 | |
| *** woodster_ has joined #openstack-barbican | 00:07 | |
| *** gyee has joined #openstack-barbican | 00:13 | |
| *** david-lyle is now known as david-lyle_afk | 00:14 | |
| kfox1111 | really close now. got container name -> container id. secret_id to raw data. project validation. just need container entity name -> secret id. | 00:19 |
|---|---|---|
| *** zz_dimtruck is now known as dimtruck | 00:28 | |
| *** rm_mobile has quit IRC | 00:29 | |
| kfox1111 | ok... got it. get request to /v1-vm/<container-id|container-name>/<container-secret-name> returns the data. :) | 00:36 |
| kfox1111 | so this works: curl -H 'Accept: application/octet-stream' -H 'X-Talisman: '$TALISMAN http://localhost:9311/v1-vm/mycontainer/mysecret2 | 00:42 |
| kfox1111 | now, is there a way to force the path to always be application/octet-stream, so it doesn't need to be explicitly specified? | 00:42 |
| kfox1111 | That would shrink it down to a very nice: | 00:43 |
| kfox1111 | curl -H 'X-Talisman: '$TALISMAN http://localhost:9311/v1-vm/mycontainer/mysecret2 | 00:43 |
| *** dave-mccowan has joined #openstack-barbican | 00:45 | |
| kfox1111 | hmm.... pecan.request.accept.header_value = 'application/octet-stream' doesn't seem to work. | 00:56 |
| kfox1111 | its bombin out in plugin.get_secret(pecan.request.accept.header_value, with a value of */*. | 00:57 |
| kfox1111 | so it seems like a write to it doesn't work. :/ | 00:57 |
| kfox1111 | ok... well, if I force it in the middleware, it works fine. :/ | 01:12 |
| kfox1111 | ok. sweet. I was able to shorten the key fetching process to: | 01:13 |
| kfox1111 | curl -H 'X-Talisman: '$TALISMAN $BARBICAN/v1-vm/mycontainer/mysecret2 | 01:13 |
| *** gyee has quit IRC | 01:18 | |
| *** bdpayne has quit IRC | 01:43 | |
| *** kfox1111 has quit IRC | 01:43 | |
| *** dave-mccowan has quit IRC | 01:51 | |
| *** chlong_ has joined #openstack-barbican | 02:43 | |
| *** rm_work has quit IRC | 03:10 | |
| *** lisaclark1 has joined #openstack-barbican | 03:48 | |
| *** SheenaG11 has quit IRC | 04:01 | |
| *** lisaclark has quit IRC | 04:04 | |
| *** jvrbanac has quit IRC | 04:05 | |
| *** lisaclark has joined #openstack-barbican | 04:06 | |
| *** jvrbanac has joined #openstack-barbican | 04:06 | |
| *** kebray has joined #openstack-barbican | 04:11 | |
| *** rm_work|away has joined #openstack-barbican | 04:36 | |
| *** rm_work|away is now known as rm_work | 04:36 | |
| *** rm_work has joined #openstack-barbican | 04:36 | |
| *** woodster_ has quit IRC | 05:20 | |
| *** lisaclark1 has quit IRC | 05:30 | |
| *** woodster_ has joined #openstack-barbican | 06:06 | |
| *** kebray has quit IRC | 06:16 | |
| *** kebray has joined #openstack-barbican | 06:19 | |
| *** alee has quit IRC | 06:44 | |
| *** alee has joined #openstack-barbican | 06:57 | |
| *** chlong_ has quit IRC | 07:42 | |
| *** chlong has quit IRC | 07:43 | |
| *** nickrmc83 has joined #openstack-barbican | 08:08 | |
| *** woodster_ has quit IRC | 08:10 | |
| *** jaosorior has joined #openstack-barbican | 09:38 | |
| *** darrenmoffat1 has quit IRC | 10:04 | |
| *** darrenmoffat has joined #openstack-barbican | 10:05 | |
| *** chlong has joined #openstack-barbican | 11:51 | |
| *** chlong_ has joined #openstack-barbican | 11:51 | |
| *** kfox1111 has joined #openstack-barbican | 12:03 | |
| *** dimtruck is now known as zz_dimtruck | 12:39 | |
| *** woodster_ has joined #openstack-barbican | 13:07 | |
| *** zz_dimtruck is now known as dimtruck | 13:09 | |
| *** chlong has quit IRC | 13:20 | |
| *** chlong_ has quit IRC | 13:20 | |
| *** kebray has quit IRC | 13:23 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Refactor Secrets resource to use repository factories https://review.openstack.org/159457 | 13:29 |
| *** dimtruck is now known as zz_dimtruck | 13:34 | |
| *** zz_dimtruck is now known as dimtruck | 13:36 | |
| *** lisaclark1 has joined #openstack-barbican | 13:51 | |
| *** lisaclark1 has quit IRC | 14:01 | |
| *** dimtruck is now known as zz_dimtruck | 14:07 | |
| *** lisaclark1 has joined #openstack-barbican | 14:10 | |
| *** arunkant has quit IRC | 14:10 | |
| *** rellerreller has joined #openstack-barbican | 14:42 | |
| *** ametts has joined #openstack-barbican | 14:58 | |
| *** lisaclark1 has quit IRC | 15:02 | |
| *** zz_dimtruck is now known as dimtruck | 15:03 | |
| *** lisaclark1 has joined #openstack-barbican | 15:09 | |
| *** kebray has joined #openstack-barbican | 15:13 | |
| *** rellerreller has quit IRC | 15:28 | |
| *** kebray has quit IRC | 15:38 | |
| *** jorge_munoz has joined #openstack-barbican | 15:47 | |
| *** SheenaG1 has joined #openstack-barbican | 15:51 | |
| *** kfox1111 has quit IRC | 16:01 | |
| *** mikedillion has joined #openstack-barbican | 16:02 | |
| *** kgriffs|afk is now known as kgriffs | 16:04 | |
| *** mikedillion has quit IRC | 16:11 | |
| *** kebray has joined #openstack-barbican | 16:15 | |
| *** lisaclark1 has quit IRC | 16:15 | |
| *** rellerreller has joined #openstack-barbican | 16:18 | |
| *** gyee has joined #openstack-barbican | 16:24 | |
| *** kfox1111 has joined #openstack-barbican | 16:24 | |
| kfox1111 | ok. here's a question... I have a vendor data plugin for barbican. which repo? :) | 16:25 |
| SheenaG1 | Hey kfox1111 - sorry it's been so quiet the last couple of days; all the Rackspace contribs are in an annual tech conference, so they may be slow to respond | 16:27 |
| SheenaG1 | And I unfortunately don't know which repo you should use! | 16:27 |
| kfox1111 | no worries. :) | 16:27 |
| kfox1111 | I'll just stick it in barbican.git for now in the review, and let the reviewers decide. | 16:28 |
| *** kebray has quit IRC | 16:35 | |
| *** david-lyle_afk is now known as david-lyle | 16:36 | |
| *** kebray has joined #openstack-barbican | 16:52 | |
| *** paul_glass has joined #openstack-barbican | 16:53 | |
| *** paul_glass1 has joined #openstack-barbican | 16:55 | |
| *** paul_glass has quit IRC | 16:58 | |
| *** arunkant_ has joined #openstack-barbican | 16:59 | |
| arunkant_ | alee, ping | 17:01 |
| *** bdpayne has joined #openstack-barbican | 17:03 | |
| *** dave-mccowan has joined #openstack-barbican | 17:04 | |
| kfox1111 | ok. sweet. got it refactored abit. now you do: | 17:05 |
| kfox1111 | curl -f -H 'X-Token: '$BARBICAN_TOKEN $BARBICAN_URL/v1-vm/mycontainer/mysecret2 | 17:05 |
| *** kgriffs is now known as kgriffs|afk | 17:16 | |
| *** kebray has quit IRC | 17:21 | |
| alee | arunkant_, pong | 17:26 |
| arunkant_ | alee, How can I help in per secret ACL implementation plan? | 17:27 |
| alee | arunkant_, oh fantastic :) | 17:28 |
| *** jkf has joined #openstack-barbican | 17:28 | |
| alee | arunkant_, being called to lunch - but I'll get back to you this afternoon | 17:29 |
| arunkant_ | alee, I see the number of work items among two specs .. | 17:29 |
| arunkant_ | alee, okay | 17:29 |
| *** paul_glass1 has quit IRC | 17:32 | |
| *** kebray has joined #openstack-barbican | 17:34 | |
| *** kebray has quit IRC | 17:36 | |
| *** kebray has joined #openstack-barbican | 17:42 | |
| *** rellerreller has quit IRC | 17:44 | |
| kfox1111 | so, if I write a new spec real quick, where should it go? | 17:45 |
| kfox1111 | There is only a juno and kilo dir. | 17:45 |
| *** dave-mccowan has quit IRC | 18:01 | |
| redrobot | kfox1111 kilo is the current cycle | 18:09 |
| kfox1111 | k. | 18:10 |
| alee | arunkant_, ping | 18:13 |
| arunkant_ | alee, still here | 18:14 |
| alee | arunkant_, ok - so per-secret implementation | 18:14 |
| alee | arunkant_, pulling up specs .. | 18:14 |
| alee | arunkant_, per secret spec -- https://review.openstack.org/#/c/127353/ | 18:15 |
| arunkant_ | alee, so are you still targeting the impl (or part of it) to be targeted for kilo? I see number of items to be done as per two specs | 18:15 |
| alee | which other spec are you referring to? | 18:15 |
| alee | Or are you referring to the two blueprints in the same review ? | 18:16 |
| arunkant_ | alee, https://review.openstack.org/#/c/127353/5/specs/kilo/add-per-secret-policy.rst and https://review.openstack.org/#/c/127353/5/specs/kilo/add-creator-only-option.rst | 18:16 |
| alee | gotcha | 18:16 |
| arunkant_ | yes | 18:16 |
| alee | arunkant_, we were hoping to get both in kilo | 18:16 |
| alee | arunkant_, but I would suggest working on the first one --- add-per-secret-policy first | 18:17 |
| alee | thats the one that is needed most immediately | 18:17 |
| alee | and the second one depends on the first | 18:17 |
| alee | arunkant_, so - looking at the work items in the first spec , do you have any questions? | 18:19 |
| *** lisaclark1 has joined #openstack-barbican | 18:19 | |
| arunkant_ | alee, okay...are you planning to work on part of it? I can try to shoot for first spec in March 19 timeline. | 18:19 |
| alee | arunkant_, its going to be hard for me to work on any of it right now -- too many things pulling me off barbican -- its hard enough for me to get all the cert stuff in. | 18:20 |
| alee | arunkant_, I'll be willing to help out and provide reviews etc. , but I raised this as a flag at the summit | 18:21 |
| alee | arunkant_, jaosorior mentioned that he might be able to help work on it | 18:21 |
| alee | so did rm_work | 18:21 |
| *** lisaclark1 has quit IRC | 18:22 | |
| alee | and venkat | 18:22 |
| arunkant_ | alee, I understand the spec..and most likely will have question on the way. But will see if can make it happen this for kilo timeline. Will start working on it next week sometime, | 18:22 |
| jaosorior | alee, arunkant_ I will get confirmation about it soon. | 18:22 |
| jaosorior | Probably by next week also | 18:23 |
| alee | jaosorior, great -- I think arunkant_ will be happy for the help | 18:23 |
| jaosorior | If its possible to divide the tasks then it will work nicely | 18:23 |
| alee | arunkant_, definitely feel free to ping me with questions. I think the spec has been through enough reviews that a lot has been worked out | 18:24 |
| alee | and it wont be too bad once we get started | 18:24 |
| alee | jaosorior, arunkant_ its definitely possible to divvy up the work | 18:24 |
| alee | jaosorior, arunkant_ I think the tasks under work items form discrete chunks | 18:25 |
| alee | arunkant_, very excited that you're taking it on :) | 18:26 |
| alee | jaosorior, you too - if you get approval :) | 18:26 |
| alee | ok - got to go outside to shovel snow/ play with kids etc. | 18:26 |
| *** alee is now known as alee_snow | 18:26 | |
| arunkant_ | alee, yes..but they seem kind of interdependent. Will go through it next week. | 18:27 |
| alee_snow | they are, but they can be sliced if needed --- I'm sure ya'll will figure it out. | 18:28 |
| openstackgerrit | Kevin Fox proposed openstack/barbican-specs: Spec for vm-integration https://review.openstack.org/159571 | 18:41 |
| *** gyee has quit IRC | 18:48 | |
| *** lisaclark1 has joined #openstack-barbican | 18:48 | |
| openstackgerrit | Kevin Fox proposed openstack/barbican: VM Integration https://review.openstack.org/159573 | 18:53 |
| kfox1111 | Ok. there it is. :) | 18:54 |
| kfox1111 | not nessisarily pretty at this point, but fairly functional. | 18:54 |
| openstackgerrit | Kevin Fox proposed openstack/barbican-specs: Spec for vm-integration https://review.openstack.org/159571 | 19:01 |
| *** lisaclark1 has quit IRC | 19:03 | |
| openstackgerrit | Kevin Fox proposed openstack/barbican-specs: Spec for vm-integration https://review.openstack.org/159571 | 19:10 |
| *** dimtruck is now known as zz_dimtruck | 19:10 | |
| *** lisaclark1 has joined #openstack-barbican | 19:14 | |
| *** zz_dimtruck is now known as dimtruck | 19:22 | |
| *** lisaclark1 has quit IRC | 19:24 | |
| *** kebray has quit IRC | 19:48 | |
| *** bdpayne_ has joined #openstack-barbican | 19:59 | |
| *** bdpayne has quit IRC | 20:01 | |
| *** bdpayne_ has quit IRC | 20:02 | |
| kfox1111 | ok. Since I have a patch in place that will work for us, I need to try and rpmize this... | 20:02 |
| kfox1111 | anyone with experience with https://github.com/gregswift/barbican-spec on? | 20:02 |
| *** kebray has joined #openstack-barbican | 20:03 | |
| *** kebray has quit IRC | 20:04 | |
| *** kebray has joined #openstack-barbican | 20:05 | |
| kfox1111 | this is a weird build system. :/ | 20:09 |
| *** bdpayne has joined #openstack-barbican | 20:22 | |
| *** kebray has quit IRC | 20:24 | |
| kfox1111 | so what peices do you need to install? openstack-barbican, worker says it conflicts with openstack-barbican. keystone listener? | 20:31 |
| *** bdpayne has quit IRC | 20:34 | |
| *** bdpayne has joined #openstack-barbican | 20:35 | |
| *** kebray has joined #openstack-barbican | 20:35 | |
| *** alee_snow is now known as alee | 20:37 | |
| *** lisaclark1 has joined #openstack-barbican | 20:44 | |
| *** xaeth_afk is now known as xaeth | 20:45 | |
| *** jorge_munoz has quit IRC | 20:46 | |
| *** lisaclark2 has joined #openstack-barbican | 20:50 | |
| *** lisaclark1 has quit IRC | 20:50 | |
| kfox1111 | hmmm... the rpms say it depends on python-cryptography. is there another package somewhere for that? rdo doesn't seem to provide it. | 20:50 |
| rm_work | python-cryptography probably just provides the pypi package "cryptography" | 20:54 |
| rm_work | but as a system level | 20:54 |
| kfox1111 | looks like there is a rpmbuild/package_dependencies.sh script... | 20:54 |
| kfox1111 | hmm... it depends on fpm, which isn't in an rpm either. :/ | 20:56 |
| *** morganfainberg is now known as needscoffee | 20:57 | |
| kfox1111 | arg.... | 20:57 |
| kfox1111 | fpm is buggy! :) | 20:57 |
| kfox1111 | "FUNDAMENTAL PRINCIPLE: IF FPM IS NOT HELPING YOU MAKE PACKAGES EASILY, THEN THERE IS A BUG IN FPM." | 20:58 |
| kfox1111 | If I have to install ruby, and load a gem, just to use it.... ;) | 20:58 |
| *** paul_glass has joined #openstack-barbican | 21:13 | |
| *** paul_glass has quit IRC | 21:15 | |
| *** paul_glass has joined #openstack-barbican | 21:22 | |
| *** dimtruck is now known as zz_dimtruck | 21:25 | |
| *** kebray has quit IRC | 21:28 | |
| *** paul_glass has quit IRC | 21:33 | |
| openstackgerrit | Steve Heyman proposed openstack/python-barbicanclient: Add pre-test hook to configure barbican server https://review.openstack.org/159617 | 21:39 |
| *** igueths has joined #openstack-barbican | 21:46 | |
| *** lisaclark2 has quit IRC | 21:48 | |
| *** kebray has joined #openstack-barbican | 21:59 | |
| *** kebray has quit IRC | 21:59 | |
| kfox1111 | bummer... rpm wants to start /usr/bin/barbican/barbican.sh but it doesn't exist. | 22:06 |
| *** needscoffee is now known as needsmostcoffee | 22:12 | |
| *** needsmostcoffee is now known as morganfainberg | 22:13 | |
| *** igueths has quit IRC | 22:16 | |
| *** jorge_munoz has joined #openstack-barbican | 22:17 | |
| kfox1111 | I added the script back, but /etc/barbican/vassles is emplty too. :/ | 22:29 |
| kfox1111 | does anyone run barbican in production yet? | 22:30 |
| *** jorge_munoz has quit IRC | 22:30 | |
| SheenaG1 | kfox1111: Rackspace does, in a really limited sense | 22:30 |
| SheenaG1 | kfox1111: it's a full deployment on Production gear, but it's currently being limited to use by only a couple of teams | 22:30 |
| kfox1111 | know who maintains https://github.com/gregswift/barbican-spec? | 22:33 |
| *** gyee has joined #openstack-barbican | 22:38 | |
| kfox1111 | arg..... from oslo_config import cfg :/ | 22:39 |
| *** igueths has joined #openstack-barbican | 22:39 | |
| *** gyee has quit IRC | 22:40 | |
| *** jaosorior has quit IRC | 22:42 | |
| *** gyee has joined #openstack-barbican | 22:42 | |
| kfox1111 | hmm... oslo_log.... | 22:45 |
| kfox1111 | not in the old oslo/log location. :/ | 22:45 |
| *** SheenaG1 has quit IRC | 23:04 | |
| kfox1111 | arg... gona have to try and backport this to juno barbican. :/ | 23:05 |
| kfox1111 | too much has changed in kilo. :/ | 23:05 |
| *** xaeth is now known as xaeth_afk | 23:13 | |
| *** dave-mccowan has joined #openstack-barbican | 23:14 | |
| *** igueths has quit IRC | 23:18 | |
| *** lisaclark1 has joined #openstack-barbican | 23:19 | |
| *** lisaclark1 has quit IRC | 23:34 | |
| *** kfox1111 has quit IRC | 23:45 | |
| *** kfox1111 has joined #openstack-barbican | 23:50 | |
| kfox1111 | wow. its a pain to package openstack. :/ | 23:51 |
| kfox1111 | at least kilo versions of things getting oslo all moved around. :/ | 23:51 |
| *** chlong has joined #openstack-barbican | 23:53 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!