| *** openstackgerrit has quit IRC | 00:22 | |
| *** openstackgerrit has joined #openstack-barbican | 00:23 | |
| *** openstack has joined #openstack-barbican | 00:35 | |
| *** gyee has quit IRC | 00:46 | |
| *** zz_dimtruck is now known as dimtruck | 01:15 | |
| *** everjeje has quit IRC | 01:36 | |
| *** rm_you| is now known as rm_you | 02:42 | |
| *** woodster_ has quit IRC | 03:30 | |
| *** woodster_ has joined #openstack-barbican | 04:25 | |
| *** dave-mccowan has quit IRC | 04:44 | |
| *** rm_work|away is now known as rm_work | 04:59 | |
| *** dimtruck is now known as zz_dimtruck | 05:15 | |
| *** jamielennox is now known as jamielennox|away | 06:34 | |
| *** tkelsey has joined #openstack-barbican | 07:18 | |
| *** woodster_ has quit IRC | 07:20 | |
| *** jaosorior has joined #openstack-barbican | 07:22 | |
| jaosorior | therve: So the CR fixing the bug has been workflowed, but it depends on some code that hockeynut made for the functionaltests | 07:29 |
|---|---|---|
| jaosorior | so if you have time to review this, probably it would help to merge it faster, since that one's needed to get the fix merged: https://review.openstack.org/#/c/172604/8 | 07:30 |
| *** jamielennox|away is now known as jamielennox | 07:43 | |
| *** tkelsey has quit IRC | 08:39 | |
| *** xaeth_afk is now known as xaeth | 09:28 | |
| *** xaeth is now known as xaeth_afk | 09:49 | |
| therve | jaosorior, Thanks looking | 11:38 |
| *** dave-mccowan has joined #openstack-barbican | 11:46 | |
| *** woodster_ has joined #openstack-barbican | 12:20 | |
| *** joesavak has joined #openstack-barbican | 13:04 | |
| *** alee_ has joined #openstack-barbican | 13:37 | |
| *** paul_glass has joined #openstack-barbican | 14:09 | |
| *** stanzi has joined #openstack-barbican | 14:11 | |
| *** igueths has joined #openstack-barbican | 14:32 | |
| *** stanzi has quit IRC | 14:40 | |
| *** stanzi has joined #openstack-barbican | 14:40 | |
| *** stanzi has quit IRC | 14:45 | |
| *** igueths has quit IRC | 14:47 | |
| *** zz_dimtruck is now known as dimtruck | 14:51 | |
| *** mdarby has joined #openstack-barbican | 14:52 | |
| openstackgerrit | Doug Hellmann proposed openstack/python-barbicanclient: Update README to work with release tools https://review.openstack.org/175919 | 15:00 |
| *** rellerreller has joined #openstack-barbican | 15:05 | |
| *** dave-mccowan has quit IRC | 15:08 | |
| *** mdarby has quit IRC | 15:12 | |
| *** SheenaG has joined #openstack-barbican | 15:16 | |
| *** igueths has joined #openstack-barbican | 15:20 | |
| *** darrenmoffat has quit IRC | 15:20 | |
| *** mdarby has joined #openstack-barbican | 15:21 | |
| *** darrenmoffat has joined #openstack-barbican | 15:21 | |
| *** xaeth_afk is now known as xaeth | 15:21 | |
| *** dave-mccowan has joined #openstack-barbican | 15:22 | |
| *** mdarby has quit IRC | 15:25 | |
| *** jsavak has joined #openstack-barbican | 15:26 | |
| *** joesavak has quit IRC | 15:29 | |
| *** david-lyle has quit IRC | 15:36 | |
| *** stanzi has joined #openstack-barbican | 15:37 | |
| *** ccneill has joined #openstack-barbican | 15:40 | |
| *** gyee has joined #openstack-barbican | 15:50 | |
| *** david-lyle has joined #openstack-barbican | 16:02 | |
| *** kebray has joined #openstack-barbican | 16:04 | |
| *** stanzi has quit IRC | 16:15 | |
| *** stanzi has joined #openstack-barbican | 16:15 | |
| *** stanzi has quit IRC | 16:19 | |
| *** stanzi has joined #openstack-barbican | 16:28 | |
| *** ccneill has quit IRC | 16:30 | |
| *** joesavak has joined #openstack-barbican | 16:34 | |
| *** jsavak has quit IRC | 16:37 | |
| *** silos214 has joined #openstack-barbican | 16:37 | |
| *** silos214 has quit IRC | 16:38 | |
| openstackgerrit | Kaitlin Farr proposed openstack/castellan: Add Barbican key manager https://review.openstack.org/171918 | 16:58 |
| *** rellerreller has quit IRC | 16:59 | |
| *** stanzi has quit IRC | 17:00 | |
| *** kebray has quit IRC | 17:01 | |
| *** stanzi has joined #openstack-barbican | 17:01 | |
| *** joesavak has quit IRC | 17:01 | |
| *** stanzi has quit IRC | 17:05 | |
| *** alee_ is now known as alee_lunch | 17:07 | |
| *** rellerreller has joined #openstack-barbican | 17:08 | |
| *** david-lyle has quit IRC | 17:08 | |
| *** stanzi has joined #openstack-barbican | 17:32 | |
| *** stanzi has quit IRC | 17:40 | |
| *** stanzi has joined #openstack-barbican | 17:51 | |
| *** alee_lunch is now known as alee_ | 17:52 | |
| *** stanzi has quit IRC | 17:58 | |
| *** joesavak has joined #openstack-barbican | 17:59 | |
| *** stanzi has joined #openstack-barbican | 17:59 | |
| *** mdarby has joined #openstack-barbican | 18:03 | |
| *** ccneill has joined #openstack-barbican | 18:08 | |
| *** rellerreller has quit IRC | 18:09 | |
| *** ccneill_ has joined #openstack-barbican | 18:09 | |
| *** ccneill has quit IRC | 18:10 | |
| *** ccneill_ is now known as ccneill | 18:11 | |
| *** mdarby has quit IRC | 18:19 | |
| *** ccneill_ has joined #openstack-barbican | 18:20 | |
| *** ccneill has quit IRC | 18:20 | |
| *** rellerreller has joined #openstack-barbican | 18:27 | |
| *** openstackgerrit has quit IRC | 18:37 | |
| *** openstackgerrit has joined #openstack-barbican | 18:37 | |
| *** joesavak has quit IRC | 18:38 | |
| *** david-lyle has joined #openstack-barbican | 18:39 | |
| *** ccneill_ has quit IRC | 18:42 | |
| *** joesavak has joined #openstack-barbican | 18:42 | |
| *** ccneill has joined #openstack-barbican | 18:43 | |
| *** david-ly_ has joined #openstack-barbican | 18:46 | |
| *** david-lyle has quit IRC | 18:46 | |
| *** stanzi has quit IRC | 18:50 | |
| *** stanzi has joined #openstack-barbican | 18:50 | |
| *** stanzi has quit IRC | 18:55 | |
| *** paul_glass has quit IRC | 19:05 | |
| *** rellerreller has quit IRC | 19:05 | |
| *** kebray has joined #openstack-barbican | 19:08 | |
| *** paul_glass has joined #openstack-barbican | 19:08 | |
| *** stanzi has joined #openstack-barbican | 19:12 | |
| *** stanzi has quit IRC | 19:17 | |
| *** SheenaG has quit IRC | 19:17 | |
| *** rellerreller has joined #openstack-barbican | 19:17 | |
| *** stanzi has joined #openstack-barbican | 19:17 | |
| *** david-ly_ has quit IRC | 19:18 | |
| *** stanzi has quit IRC | 19:22 | |
| *** gyee has quit IRC | 19:23 | |
| *** kebray has quit IRC | 19:36 | |
| *** kebray has joined #openstack-barbican | 19:36 | |
| *** kebray has quit IRC | 19:38 | |
| dave-mccowan | jvrbanac ping | 19:41 |
| *** rellerreller has quit IRC | 19:42 | |
| *** kebray has joined #openstack-barbican | 19:42 | |
| jamielennox | can someone refresh my memory - barbican was initially written on falcon and one of the terms of being incubated was to switch to pecan? | 19:42 |
| reaperhulk | pretty much | 19:43 |
| reaperhulk | it was strongly encouraged but not required | 19:43 |
| jamielennox | ok, the more I play with pecan the less i feel it fits, but i remember it was seriously discouraged to use anything other than pecan | 19:43 |
| *** stanzi has joined #openstack-barbican | 19:48 | |
| *** kebray has quit IRC | 19:55 | |
| *** stanzi has quit IRC | 19:56 | |
| *** stanzi has joined #openstack-barbican | 20:00 | |
| *** stanzi has quit IRC | 20:00 | |
| *** stanzi has joined #openstack-barbican | 20:01 | |
| *** silos has joined #openstack-barbican | 20:02 | |
| silos | Hello. I am having a problem testing the kmip_plugin with barbican. Is there anyone familiar with the kmip plugin? | 20:05 |
| *** paul_glass1 has joined #openstack-barbican | 20:05 | |
| *** paul_glass has quit IRC | 20:08 | |
| openstackgerrit | Merged openstack/python-barbicanclient: Update README to work with release tools https://review.openstack.org/175919 | 20:09 |
| redrobot | Hi silos! The main devs for the kmip plugin are rellerreller and kfarr but I don't believe either of them are online right now | 20:09 |
| *** SheenaG has joined #openstack-barbican | 20:10 | |
| silos | redrobot:Thanks! I'll try e-mailing the dev mailing list and try later then. | 20:11 |
| redrobot | silos what are you having trouble with? | 20:12 |
| silos | I am getting an error when I try to store a secret in barbican. It is an attributeError that is getting errored out in the kmip_secret_store module. | 20:13 |
| *** david-lyle has joined #openstack-barbican | 20:21 | |
| *** kebray has joined #openstack-barbican | 20:23 | |
| *** ccneill has quit IRC | 20:24 | |
| *** ccneill has joined #openstack-barbican | 20:25 | |
| redrobot | silos oh yikes... yeah, I don't have an answer off the top of my head. kfarr is usually pretty good about responding to email questions though, so hopefully she'll see yours. | 20:26 |
| *** kebray has quit IRC | 20:28 | |
| silos | redrobot: no problem. thanks | 20:32 |
| *** kebray has joined #openstack-barbican | 20:38 | |
| *** silos has quit IRC | 20:41 | |
| *** kebray has quit IRC | 20:46 | |
| *** openstackgerrit has quit IRC | 20:52 | |
| *** openstackgerrit has joined #openstack-barbican | 20:52 | |
| openstackgerrit | Charles Neill proposed openstack/barbican: Removing signing_dir directive from config https://review.openstack.org/176071 | 20:56 |
| openstackgerrit | John Vrbanac proposed openstack/python-barbicanclient: Cleaning up validate_ref() https://review.openstack.org/175605 | 20:56 |
| ccneill | anybody want to review the quickest CR ever? :) | 20:57 |
| ccneill | at least I think it should be... I've tested it locally with no ill effects, but I'm curious to see how other environments handle the removal of an explicit signing_dir in the config | 20:58 |
| redrobot | ccneill looking | 21:01 |
| redrobot | ccneill do you have a Launchpad ID, I want to assing the LP bug to you. | 21:01 |
| ccneill | I believe so, should be my Rackspace email | 21:01 |
| redrobot | ccneill yeah, that's an easy change. I'll +2 as soon as Jenkins votes | 21:01 |
| ccneill | sweet, thanks | 21:02 |
| ccneill | hey redrobot, not sure if you saw my question from yesterday, but I was also trying to find out what the best way to get the current project ID in a functionaltest? | 21:07 |
| ccneill | tried doing this in the setUp method for my class, but it seems to only work on the final test that's run, and fails on all others: `self.project_id = self.client._auth.auth_client.project_id` | 21:08 |
| redrobot | ccneill hmm... good question... I presume the auth object has it somewhere, I'd have to dig through keystoneclient code to make sure though. | 21:09 |
| redrobot | ccneill the idea is that the client knows their project id, or project name, and then the auth object takes care of authenticating, and requesting a token that has the correct project for scope | 21:10 |
| ccneill | right, so I can get the project name, but I just wanted to pull the ID so I can set only that header (i.e. without the token) | 21:10 |
| jamielennox | ccneill, redrobot: there is a get_project_id() on auth plugins that you would typically call from the adapter - but it's fairly rare that you would ever need your project_id as a user | 21:10 |
| ccneill | the client has use_auth kwargs for all the request methods, but that sets BOTH the x-project-id header and the x-auth-token header | 21:11 |
| ccneill | and I want to write a test that sends ONLY the valid project-id, no token | 21:11 |
| ccneill | so I could modify how use_auth works... | 21:11 |
| redrobot | jamielennox oh cool thanks. ccneill is writing some security-minded tests for us, so he'll be trying to do sneaky things with the project-id. | 21:11 |
| ccneill | hmm | 21:12 |
| jamielennox | ccneill: that's kind of odd, but anyway from a manager you call httpclient.get_project_id() | 21:12 |
| redrobot | ccneill the keystone middleware _should_ strip out the X-Project-Id header and then set it to whatever the project scope is returned from the token validation. | 21:13 |
| jamielennox | there is also session.get_project_id() - you might need to pass it an auth plugin or not depending on how you set up the session | 21:13 |
| woodster_ | ccneill, +1 to what redrobot said there. You should not be able to spoof a project ID via header | 21:22 |
| ccneill | well I guess we'll find out soon :) | 21:23 |
| ccneill | so.. quick and dirty way to get project id: self.client._auth.stored_auth.values()[0]['project_id'] | 21:34 |
| ccneill | :S | 21:34 |
| ccneill | also, looks like passing use_auth=False and extra_headers={'X-Project-Id': 'dummy'} will send the dummy project ID | 21:35 |
| ccneill | I'm planning to do both (e.g. use_auth=False with dummy project ID, use_auth=False with real project ID) | 21:36 |
| ccneill | brb | 21:36 |
| *** stanzi has quit IRC | 21:48 | |
| *** stanzi has joined #openstack-barbican | 21:48 | |
| *** stanzi has quit IRC | 21:49 | |
| *** stanzi has joined #openstack-barbican | 21:50 | |
| *** xaeth is now known as xaeth_afk | 21:57 | |
| *** gyee has joined #openstack-barbican | 22:01 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Fix failure with get on dict that was None https://review.openstack.org/176101 | 22:01 |
| *** stanzi has quit IRC | 22:02 | |
| *** stanzi has joined #openstack-barbican | 22:03 | |
| *** dave-mccowan has quit IRC | 22:03 | |
| openstackgerrit | Charles Neill proposed openstack/barbican: Security tests for Secret resources https://review.openstack.org/164882 | 22:05 |
| *** stanzi has quit IRC | 22:08 | |
| *** igueths has quit IRC | 22:15 | |
| *** dave-mccowan has joined #openstack-barbican | 22:19 | |
| dave-mccowan | redrobot ^^^ this bug might make sense to backport | 22:20 |
| *** jaosorior has quit IRC | 22:22 | |
| *** paul_glass1 has quit IRC | 22:23 | |
| *** joesavak has quit IRC | 22:39 | |
| *** alee_ is now known as alee_headed_home | 22:51 | |
| openstackgerrit | Steve Heyman proposed openstack/python-barbicanclient: Initial setup for command line tests https://review.openstack.org/172604 | 23:00 |
| *** alee_headed_home has quit IRC | 23:01 | |
| dimtruck | hi! | 23:04 |
| dimtruck | got erroz :) | 23:04 |
| dimtruck | http://logs.openstack.org/01/176101/1/check/gate-barbican-python27/ce85fe1/console.html | 23:05 |
| dimtruck | 2015-04-21 22:12:17.506 | TypeError: cannot create weak reference to 'Struct' object | 23:05 |
| dimtruck | this blocks anything that requires cryptography (and barbican) | 23:05 |
| dimtruck | solum's gates are failing, for example....not sure what's going on...cryptography tests are passing: https://travis-ci.org/pyca/cryptography | 23:06 |
| dimtruck | oh i see infra's already on top of it | 23:07 |
| *** dimtruck is now known as zz_dimtruck | 23:34 | |
| *** alee_headed_home has joined #openstack-barbican | 23:49 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!