| *** ccneill has quit IRC | 00:03 | |
| *** chadlung has joined #openstack-barbican | 00:06 | |
| *** stanzi has joined #openstack-barbican | 00:07 | |
| *** stanzi has quit IRC | 00:12 | |
| *** SheenaG has quit IRC | 00:20 | |
| *** chadlung has quit IRC | 00:25 | |
| *** gyee has quit IRC | 00:29 | |
| *** zz_dimtruck is now known as dimtruck | 01:35 | |
| *** greghaynes has joined #openstack-barbican | 01:35 | |
| *** chadlung has joined #openstack-barbican | 01:40 | |
| *** chadlung has quit IRC | 01:44 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Add Multi-user support and ACL coverage in Functional Tests https://review.openstack.org/176615 | 01:54 |
|---|---|---|
| *** xianghuihui has joined #openstack-barbican | 02:02 | |
| *** xianghuihui has left #openstack-barbican | 02:05 | |
| *** kebray has joined #openstack-barbican | 02:06 | |
| *** tkelsey has joined #openstack-barbican | 02:19 | |
| *** tkelsey has quit IRC | 02:23 | |
| *** xaeth_afk is now known as xaeth | 02:31 | |
| *** chadlung has joined #openstack-barbican | 02:39 | |
| *** chadlung has quit IRC | 02:39 | |
| *** dave-mccowan has quit IRC | 03:36 | |
| *** xianghuihui has joined #openstack-barbican | 03:40 | |
| *** xianghuihui has quit IRC | 03:40 | |
| *** xianghuihui has joined #openstack-barbican | 03:41 | |
| *** xianghuihui has quit IRC | 03:41 | |
| *** xaeth is now known as xaeth_afk | 03:46 | |
| *** xaeth_afk is now known as xaeth | 03:56 | |
| *** xaeth is now known as xaeth_afk | 04:32 | |
| *** woodster_ has quit IRC | 05:00 | |
| *** dimtruck is now known as zz_dimtruck | 05:40 | |
| *** alee has quit IRC | 05:40 | |
| *** kebray has quit IRC | 05:51 | |
| *** alee has joined #openstack-barbican | 05:53 | |
| *** david-ly_ has joined #openstack-barbican | 06:01 | |
| *** david-lyle has quit IRC | 06:03 | |
| *** alee_ has quit IRC | 06:28 | |
| *** chlong has quit IRC | 06:39 | |
| *** alee_ has joined #openstack-barbican | 06:41 | |
| *** nickrmc83 has quit IRC | 06:51 | |
| *** alee_ has quit IRC | 06:51 | |
| *** alee has quit IRC | 06:51 | |
| *** alee_ has joined #openstack-barbican | 07:03 | |
| *** alee has joined #openstack-barbican | 07:04 | |
| *** tkelsey has joined #openstack-barbican | 07:09 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Migrate to oslo_context https://review.openstack.org/175338 | 07:09 |
| *** tkelsey has quit IRC | 07:13 | |
| *** alee has quit IRC | 07:20 | |
| *** stanzi has joined #openstack-barbican | 07:25 | |
| *** stanzi has quit IRC | 07:28 | |
| *** stanzi has joined #openstack-barbican | 07:28 | |
| *** alee has joined #openstack-barbican | 07:32 | |
| *** stanzi has quit IRC | 07:33 | |
| *** tkelsey has joined #openstack-barbican | 07:42 | |
| *** tkelsey has quit IRC | 07:46 | |
| *** alkar has joined #openstack-barbican | 08:45 | |
| *** nickrmc83 has joined #openstack-barbican | 08:48 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/177126 | 08:54 |
| *** jaosorior has joined #openstack-barbican | 09:46 | |
| *** darrenmoffat has quit IRC | 10:06 | |
| *** darrenmoffat has joined #openstack-barbican | 10:08 | |
| alkar | is there any documentation on barbican's security options / model? | 11:16 |
| *** stanzi has joined #openstack-barbican | 11:28 | |
| *** stanzi has quit IRC | 11:33 | |
| *** stanzi has joined #openstack-barbican | 12:21 | |
| *** dave-mccowan has joined #openstack-barbican | 12:24 | |
| *** stanzi has quit IRC | 12:26 | |
| *** stanzi has joined #openstack-barbican | 12:26 | |
| *** stanzi has quit IRC | 12:31 | |
| dave-mccowan | ping jaosorior | 12:39 |
| jaosorior | dave-mccowan: pong | 12:40 |
| *** stanzi has joined #openstack-barbican | 12:40 | |
| dave-mccowan | jaosorior have you noticed the gate is failing on code related to CSRs for more than one CR? I remember you fixed something recently about different versions of OpenSSL handling CSRs differently. | 12:41 |
| jaosorior | I gotta see if it's related, but what I changed was some specific tests, not the code reading the CSRs. The OpenSSL version in the gate hasn't changed, so I am yet to see a relation. | 12:42 |
| dave-mccowan | jaosorior do we know the OpenSSL version didn't change in the gate? | 12:44 |
| jaosorior | yes, I've been keeping track of it | 12:44 |
| jaosorior | it's still OpenSSL 1.0.1f | 12:44 |
| jaosorior | you can see if because one file in the logs in the tests actually lists the installed packages | 12:45 |
| dave-mccowan | jaosorior what about the python wrapper? could that have changed? | 12:45 |
| jaosorior | uhm... it might have, that I haven't checked | 12:46 |
| *** stanzi has quit IRC | 12:46 | |
| *** stanzi has joined #openstack-barbican | 12:46 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: [Experiment] Just an experiment to see if this commit passes the gate https://review.openstack.org/177225 | 12:50 |
| *** stanzi has quit IRC | 12:50 | |
| jaosorior | dave-mccowan: can you actually look a tthe logs at the moment? I get server errors when I try to browse them now | 12:55 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/177126 | 12:56 |
| dave-mccowan | jaosorior: i get the same errors. before zuul went loopy, i did catch that he is running a pretty fresh version: pyOpenSSL-0.15.1 | 12:56 |
| jaosorior | dave-mccowan: I guess that was to be expected since that's gotten from pip, as opposed to the OpenSSL which is gotten from the distro's repo | 12:57 |
| jaosorior | dave-mccowan: weird thing is that not only master is failing those tests, but also stable/kilo | 13:07 |
| *** kfarr has joined #openstack-barbican | 13:15 | |
| dave-mccowan | jaosorior, my experiment failed too, with the same error. logs are viewable though. | 13:17 |
| jaosorior | dave-mccowan: that doesn't seem like the same error | 13:18 |
| jaosorior | dave-mccowan: it is a different error indeed. And it's related to the "test" change | 13:20 |
| *** rellerreller has joined #openstack-barbican | 13:24 | |
| *** alee has quit IRC | 13:57 | |
| *** xaeth_afk is now known as xaeth | 14:05 | |
| *** paul_glass has joined #openstack-barbican | 14:13 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: [Experiment] Just an experiment to collect info when gate fails https://review.openstack.org/177225 | 14:24 |
| *** woodster_ has joined #openstack-barbican | 14:26 | |
| *** silos has joined #openstack-barbican | 14:35 | |
| *** zz_dimtruck is now known as dimtruck | 14:49 | |
| *** kebray has joined #openstack-barbican | 14:53 | |
| *** nickrmc84 has joined #openstack-barbican | 14:53 | |
| *** nickrmc83 has quit IRC | 14:53 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: [Experiment] Just an experiment to see if this will pass the gate https://review.openstack.org/177225 | 14:58 |
| redrobot | alkar the official docs are in http://docs.openstack.org/developer/barbican/ though they are a bit light | 15:02 |
| redrobot | alkar there are older (possibly inaccurate now) docs available at https://github.com/cloudkeep/barbican/wiki | 15:02 |
| redrobot | alkar the architecture page in the older docs is still mostly accurate https://github.com/cloudkeep/barbican/wiki/Architecture | 15:03 |
| redrobot | alkar but white papers and such are still coming attactions | 15:03 |
| *** redrobot sets mode: +v alee_ | 15:04 | |
| redrobot | mode +v jaosorior | 15:04 |
| *** redrobot sets mode: +v jaosorior | 15:04 | |
| *** redrobot sets mode: +v jraim | 15:05 | |
| *** kfarr has quit IRC | 15:05 | |
| *** redrobot sets mode: +v rellerreller | 15:05 | |
| *** redrobot sets mode: +v woodster_ | 15:05 | |
| *** stanzi has joined #openstack-barbican | 15:09 | |
| openstackgerrit | Steve Heyman proposed openstack/python-barbicanclient: Initial setup for command line tests https://review.openstack.org/172604 | 15:13 |
| openstackgerrit | Steve Heyman proposed openstack/python-barbicanclient: Updates for CLI testing https://review.openstack.org/175150 | 15:13 |
| *** stanzi has quit IRC | 15:16 | |
| *** stanzi has joined #openstack-barbican | 15:17 | |
| *** david-ly_ is now known as david-lyle | 15:22 | |
| *** rellerreller has quit IRC | 15:28 | |
| *** rm_work|away is now known as rm_work | 15:30 | |
| *** silos has quit IRC | 15:31 | |
| *** silos1 has joined #openstack-barbican | 15:31 | |
| *** SheenaG has joined #openstack-barbican | 15:34 | |
| *** rellerreller has joined #openstack-barbican | 15:40 | |
| *** ccneill has joined #openstack-barbican | 15:43 | |
| *** stanzi has quit IRC | 15:48 | |
| *** stanzi has joined #openstack-barbican | 15:49 | |
| *** stanzi has quit IRC | 15:51 | |
| *** stanzi has joined #openstack-barbican | 15:51 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Fix call to load_privatekey() when passphrase is None https://review.openstack.org/177225 | 15:55 |
| dave-mccowan | ^^^ redrobot, jaosorior Fixes the broken gate for master and stable/kilo. | 15:56 |
| *** stanzi has quit IRC | 16:00 | |
| redrobot | dave-mccowan can you remove the LOG.info line? | 16:00 |
| *** silos1 has quit IRC | 16:00 | |
| *** stanzi has joined #openstack-barbican | 16:00 | |
| *** silos has joined #openstack-barbican | 16:00 | |
| dave-mccowan | redrobot doh! | 16:01 |
| redrobot | dave-mccowan is it possible to test this in a unit test? | 16:01 |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Fix call to load_privatekey() when passphrase is None https://review.openstack.org/177225 | 16:02 |
| dave-mccowan | redrobot, it's covered by functional tests. i can't think of any other coverage. | 16:03 |
| redrobot | dave-mccowan fair enough. | 16:03 |
| dave-mccowan | redrobot, stepping away now for a while... | 16:03 |
| redrobot | dave-mccowan thanks for the fix, btw! you're the man | 16:03 |
| *** stanzi has quit IRC | 16:05 | |
| *** SheenaG has quit IRC | 16:09 | |
| *** gyee has joined #openstack-barbican | 16:09 | |
| openstackgerrit | Merged openstack/barbican: Security tests for Secret resources https://review.openstack.org/164882 | 16:18 |
| openstackgerrit | Arun Kant proposed openstack/barbican: Fix for missing id check in ACL count query. https://review.openstack.org/177344 | 16:21 |
| *** rm_work is now known as rm_work|away | 16:22 | |
| *** SheenaG has joined #openstack-barbican | 16:25 | |
| arunkant | redrobot, ping | 16:30 |
| redrobot | arunkant pong | 16:31 |
| arunkant | redrobot, do you know if anybody is working on ACL api docs ? | 16:31 |
| arunkant | If not, I was planning to work on it. | 16:31 |
| redrobot | arunkant nobody is working on those afaik | 16:31 |
| arunkant | redrobot, okay. Was just checking before starting it..thanks | 16:32 |
| redrobot | arunkant you're welcome! and thank you for documenting stuff! :) | 16:33 |
| *** dimtruck is now known as zz_dimtruck | 16:45 | |
| *** zz_dimtruck is now known as dimtruck | 16:53 | |
| *** rellerreller has quit IRC | 17:01 | |
| openstackgerrit | Merged openstack/python-barbicanclient: Initial setup for command line tests https://review.openstack.org/172604 | 17:02 |
| *** stanzi has joined #openstack-barbican | 17:02 | |
| *** stanzi has quit IRC | 17:05 | |
| *** stanzi has joined #openstack-barbican | 17:05 | |
| *** dimtruck is now known as zz_dimtruck | 17:08 | |
| *** rellerreller has joined #openstack-barbican | 17:12 | |
| *** rm_work|away is now known as rm_work | 17:12 | |
| openstackgerrit | Merged openstack/barbican: Fix call to load_privatekey() when passphrase is None https://review.openstack.org/177225 | 17:13 |
| *** alkar has quit IRC | 17:16 | |
| *** zz_dimtruck is now known as dimtruck | 17:23 | |
| openstackgerrit | Arun Kant proposed openstack/barbican: Fix for missing id check in ACL count query. https://review.openstack.org/177344 | 17:32 |
| *** rm_work is now known as rm_work|away | 17:47 | |
| *** ccneill has quit IRC | 17:49 | |
| *** mriedem has joined #openstack-barbican | 18:00 | |
| mriedem | fyi https://review.openstack.org/#/c/177371/ | 18:00 |
| mriedem | when the gate jobs for barbican explode, e.g. https://bugs.launchpad.net/barbican/+bug/1448193 | 18:00 |
| openstack | Launchpad bug 1448193 in Barbican kilo "Generate CSR Fails with PyOpenSSL Version 0.15.1" [Critical,In progress] - Assigned to Douglas Mendizábal (dougmendizabal) | 18:00 |
| mriedem | we need the barbican logs indexed so we can use logstash and elastic-recheck on the failures | 18:00 |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Add Multi-user support and ACL coverage in Functional Tests https://review.openstack.org/176615 | 18:06 |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Fix for missing id check in ACL count query. https://review.openstack.org/177344 | 18:06 |
| woodster_ | mriedem: thanks! | 18:10 |
| dave-mccowan | arunkant_ sorry, i tried to rebase my commit on yours, but i guess i did it wrong. looks like i accidentally reverted your last patch. | 18:10 |
| *** jaosorior has quit IRC | 18:22 | |
| openstackgerrit | Merged openstack/barbican: Removing signing_dir directive from config https://review.openstack.org/176071 | 18:24 |
| *** mriedem has left #openstack-barbican | 18:31 | |
| *** rm_work|away is now known as rm_work | 18:34 | |
| *** kebray has quit IRC | 18:35 | |
| *** stanzi has quit IRC | 18:36 | |
| *** stanzi has joined #openstack-barbican | 18:37 | |
| *** stanzi has quit IRC | 18:38 | |
| *** stanzi has joined #openstack-barbican | 18:38 | |
| *** rm_work is now known as rm_work|away | 18:50 | |
| *** rm_work|away is now known as rm_work | 18:56 | |
| dave-mccowan | redrobot, do you want a fix for https://bugs.launchpad.net/barbican/+bug/1447872 in kilo? | 19:09 |
| openstack | Launchpad bug 1447872 in Barbican "Post of unsupported parameters in ACL succeeds" [Undecided,New] | 19:09 |
| redrobot | dave-mccowan I was on the fence for that one... what do you think? | 19:09 |
| *** stanzi has quit IRC | 19:14 | |
| *** stanzi has joined #openstack-barbican | 19:14 | |
| dave-mccowan | redrobot, no short term issue, i think. one possible problem in the future: a Liberty Client accidentally talking to Kilo Server, expecting an ACL that applied without error to work. | 19:15 |
| *** stanzi has quit IRC | 19:19 | |
| *** rm_work is now known as rm_work|away | 19:22 | |
| openstackgerrit | Arun Kant proposed openstack/barbican: Adding ACL check when new stored key order is submitted https://review.openstack.org/176558 | 19:27 |
| openstackgerrit | Arun Kant proposed openstack/barbican: Fix for missing id check in ACL count query. https://review.openstack.org/177344 | 19:28 |
| *** kebray has joined #openstack-barbican | 19:31 | |
| *** rellerreller has quit IRC | 19:37 | |
| *** alkar has joined #openstack-barbican | 19:38 | |
| *** rm_work|away is now known as rm_work | 19:43 | |
| openstackgerrit | Arun Kant proposed openstack/barbican: Adding ACL check when new stored key order is submitted https://review.openstack.org/176558 | 19:48 |
| elmiko | any castellan folks around? | 20:07 |
| redrobot | elmiko we're all castellan folk :) | 20:17 |
| *** alee_ is now known as alee_afk | 20:17 | |
| *** rm_work is now known as rm_work|away | 20:17 | |
| *** dave-mccowan has quit IRC | 20:18 | |
| *** rm_work|away is now known as rm_work | 20:19 | |
| *** woodster_ has quit IRC | 20:20 | |
| elmiko | redrobot: i'm curious about the plugins (e.g. barbican), maybe i need to read more code but will they be implemented through entry_points or will i add them to my conf file? | 20:20 |
| redrobot | elmiko looks like you just have to put a full class path in the config file https://github.com/openstack/castellan/blob/master/castellan/key_manager/__init__.py#L29 | 20:22 |
| elmiko | redrobot: awesome, thanks for the pointer =) | 20:22 |
| *** woodster_ has joined #openstack-barbican | 20:40 | |
| *** rm_work is now known as rm_work|away | 20:47 | |
| *** rm_work|away is now known as rm_work | 20:47 | |
| *** rm_work is now known as rm_work|away | 20:57 | |
| *** gyee has quit IRC | 21:02 | |
| *** gyee has joined #openstack-barbican | 21:02 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Remove Future Parameters (write, list, delete) from ACL Validation Schema https://review.openstack.org/177454 | 21:04 |
| *** silos has left #openstack-barbican | 21:11 | |
| *** alkar has quit IRC | 21:25 | |
| *** paul_glass has quit IRC | 21:46 | |
| *** dave-mccowan has joined #openstack-barbican | 21:59 | |
| *** SheenaG has quit IRC | 22:16 | |
| *** dave-mccowan has quit IRC | 22:19 | |
| *** dimtruck is now known as zz_dimtruck | 22:25 | |
| *** woodster_ has quit IRC | 22:50 | |
| *** SheenaG has joined #openstack-barbican | 22:56 | |
| *** woodster_ has joined #openstack-barbican | 23:03 | |
| *** kebray has quit IRC | 23:44 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!