| *** zz_dimtruck is now known as dimtruck | 00:03 | |
| *** stanzi has quit IRC | 00:05 | |
| *** stanzi has joined #openstack-barbican | 00:06 | |
| *** kebray has joined #openstack-barbican | 00:14 | |
| *** david-lyle has quit IRC | 00:32 | |
| *** stanzi has quit IRC | 00:33 | |
| *** SheenaG1 has quit IRC | 00:33 | |
| *** stanzi has joined #openstack-barbican | 00:34 | |
| *** stanzi has quit IRC | 00:38 | |
| *** stanzi has joined #openstack-barbican | 00:39 | |
| *** woodster_ has quit IRC | 01:10 | |
| *** kebray has quit IRC | 01:15 | |
| *** stanzi has quit IRC | 01:20 | |
| *** stanzi has joined #openstack-barbican | 01:20 | |
| *** david-lyle has joined #openstack-barbican | 01:20 | |
| *** stanzi has quit IRC | 01:22 | |
| *** stanzi has joined #openstack-barbican | 01:22 | |
| *** SheenaG has joined #openstack-barbican | 01:23 | |
| *** kebray has joined #openstack-barbican | 01:24 | |
| *** alee_ has quit IRC | 01:29 | |
| *** alee has quit IRC | 01:29 | |
| *** stanzi has quit IRC | 01:36 | |
| *** stanzi has joined #openstack-barbican | 01:37 | |
| *** stanzi has quit IRC | 01:41 | |
| *** alee has joined #openstack-barbican | 01:42 | |
| *** SheenaG has left #openstack-barbican | 01:42 | |
| *** alee has quit IRC | 01:47 | |
| *** stanzi has joined #openstack-barbican | 01:51 | |
| *** alee has joined #openstack-barbican | 02:00 | |
| *** alee has quit IRC | 02:05 | |
| *** dimtruck is now known as zz_dimtruck | 02:05 | |
| *** stanzi has quit IRC | 02:08 | |
| *** stanzi has joined #openstack-barbican | 02:09 | |
| *** woodster_ has joined #openstack-barbican | 02:13 | |
| *** stanzi has quit IRC | 02:13 | |
| *** alee has joined #openstack-barbican | 02:18 | |
| *** zz_dimtruck is now known as dimtruck | 02:20 | |
| *** nkinder has joined #openstack-barbican | 02:22 | |
| *** alee has quit IRC | 02:23 | |
| *** dave-mccowan has joined #openstack-barbican | 02:28 | |
| *** david-lyle has quit IRC | 02:30 | |
| *** david-lyle has joined #openstack-barbican | 02:31 | |
| *** stanzi has joined #openstack-barbican | 02:33 | |
| *** alee has joined #openstack-barbican | 02:35 | |
| *** david-lyle has quit IRC | 02:36 | |
| openstackgerrit | Arun Kant proposed openstack/barbican: Adding documentation for ACL operations. https://review.openstack.org/178479 | 02:37 |
|---|---|---|
| *** alee has quit IRC | 02:40 | |
| openstackgerrit | Arun Kant proposed openstack/barbican: Adding documentation for ACLs operations. https://review.openstack.org/178479 | 02:51 |
| *** gyee has quit IRC | 02:53 | |
| *** alee has joined #openstack-barbican | 02:53 | |
| *** alee has quit IRC | 02:59 | |
| *** alee has joined #openstack-barbican | 03:11 | |
| *** dave-mccowan has quit IRC | 03:12 | |
| *** alee has quit IRC | 03:16 | |
| *** alee has joined #openstack-barbican | 03:17 | |
| *** dimtruck is now known as zz_dimtruck | 03:21 | |
| *** alee has quit IRC | 03:23 | |
| *** david-lyle has joined #openstack-barbican | 03:32 | |
| *** alee has joined #openstack-barbican | 03:36 | |
| *** alee has quit IRC | 03:41 | |
| *** alee has joined #openstack-barbican | 03:53 | |
| *** alee has quit IRC | 03:58 | |
| *** rm_work is now known as rm_work|away | 04:00 | |
| *** rm_work|away is now known as rm_work | 04:13 | |
| *** stanzi_ has joined #openstack-barbican | 04:28 | |
| *** kebray has quit IRC | 04:30 | |
| *** stanzi has quit IRC | 04:31 | |
| *** stanzi_ has quit IRC | 04:40 | |
| *** stanzi has joined #openstack-barbican | 04:40 | |
| *** stanzi has quit IRC | 04:45 | |
| *** alee has joined #openstack-barbican | 06:12 | |
| *** alee has quit IRC | 06:18 | |
| *** alee has joined #openstack-barbican | 06:30 | |
| *** alee has quit IRC | 06:36 | |
| *** jaosorior has joined #openstack-barbican | 07:59 | |
| *** darrenmoffat has joined #openstack-barbican | 08:38 | |
| *** woodster_ has quit IRC | 08:40 | |
| *** stanzi has joined #openstack-barbican | 08:40 | |
| *** stanzi has quit IRC | 08:45 | |
| *** alee has joined #openstack-barbican | 09:38 | |
| *** alee has quit IRC | 09:42 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Display all versions info in versions controller https://review.openstack.org/178601 | 10:38 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican-specs: Move fix-version-api blueprint to liberty https://review.openstack.org/178602 | 10:40 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican-specs: Move fix-version-api blueprint to Liberty https://review.openstack.org/178602 | 10:50 |
| *** woodster_ has joined #openstack-barbican | 11:56 | |
| jaosorior | woodster_ are you around? | 12:04 |
| *** openstackgerrit has quit IRC | 12:07 | |
| *** openstackgerrit has joined #openstack-barbican | 12:07 | |
| woodster_ | jaosorior: yep | 12:08 |
| woodster_ | jaosorior: how are things going over there? | 12:09 |
| jaosorior | woodster_: pretty good, having a chill day working from home | 12:10 |
| jaosorior | how about there? | 12:10 |
| jaosorior | woodster_: I stumbled upon something confusing. Why didn't the unauthed tests need a project-id before? now that I introduced this https://review.openstack.org/#/c/178601/1 they seem to brake http://logs.openstack.org/01/178601/1/check/gate-barbican-devstack-dsvm/242b25e/console.html | 12:11 |
| *** stanzi has joined #openstack-barbican | 12:11 | |
| *** stanzi has quit IRC | 12:16 | |
| jaosorior | * break | 12:20 |
| woodster_ | jaosorior: hmmm, that is odd, I'll take a look | 12:20 |
| jaosorior | woodster_: because from what I see, the project-id wasn't being added before, at least in the functional test client. BUT, it was being checked for https://github.com/openstack/barbican/blob/master/barbican/api/middleware/context.py#L143 which is what got me confused | 12:27 |
| *** darrenmoffat has left #openstack-barbican | 12:28 | |
| *** dave-mccowan has joined #openstack-barbican | 12:31 | |
| woodster_ | jaosorior: do curls against a local barbican work as you expect? The / request shouldn't require a project ID, but the /v1/ should | 12:42 |
| woodster_ | jaosorior: it looks like a malformed json is perhaps borking the project Id checking somehow? | 12:43 |
| jaosorior | woodster_: /v1/ should, as far as I can notice, the malformed id comes from the response that says that there is no project-id | 12:43 |
| *** chlong has joined #openstack-barbican | 12:44 | |
| jaosorior | so the malformed-json is the fact that the unauther middleware returns that error message in plain text, and not in json format | 12:44 |
| woodster_ | jaosorior: ah, got it | 12:47 |
| jaosorior | woodster_: Which is a bug by itself and I will send a fix for that (the fact that it doesn't return JSON) | 12:48 |
| jaosorior | but first I would like to understand what happened here O_o | 12:48 |
| *** xaeth_afk is now known as xaeth | 12:52 | |
| woodster_ | jaosorior: yeah that is weird...maybe hockeynut or tdink have thoughts on that one? | 12:56 |
| jaosorior | other than that, what's the process of bumping a blueprint to Liberty? | 13:02 |
| jaosorior | I moved the version fix api to the folder and added the index in the index, but... what else is needed? https://review.openstack.org/#/c/178602/ | 13:03 |
| *** xaeth is now known as xaeth_afk | 13:03 | |
| *** nkinder has quit IRC | 13:12 | |
| *** xaeth_afk is now known as xaeth | 13:36 | |
| *** joesavak has joined #openstack-barbican | 13:48 | |
| *** jsavak has joined #openstack-barbican | 13:53 | |
| *** nkinder has joined #openstack-barbican | 13:56 | |
| *** joesavak has quit IRC | 13:56 | |
| *** pglass has joined #openstack-barbican | 14:04 | |
| -openstackstatus- NOTICE: gerrit has been restarted to clear a stuck events queue. any change events between 13:29-14:05 utc should be rechecked or have their approval votes reapplied to trigger jobs | 14:05 | |
| *** stanzi has joined #openstack-barbican | 14:15 | |
| *** stanzi has quit IRC | 14:16 | |
| *** stanzi has joined #openstack-barbican | 14:17 | |
| *** stanzi has quit IRC | 14:21 | |
| *** zz_dimtruck is now known as dimtruck | 14:27 | |
| *** kebray has joined #openstack-barbican | 14:28 | |
| *** kebray has quit IRC | 14:29 | |
| jaosorior | jvrbanac: ping | 14:37 |
| *** kebray has joined #openstack-barbican | 14:45 | |
| *** silos has joined #openstack-barbican | 14:53 | |
| *** silos has left #openstack-barbican | 14:53 | |
| *** kebray has quit IRC | 14:55 | |
| *** nelsnelson has joined #openstack-barbican | 15:02 | |
| *** stanzi has joined #openstack-barbican | 15:03 | |
| *** alee has joined #openstack-barbican | 15:12 | |
| *** stanzi has quit IRC | 15:31 | |
| *** stanzi has joined #openstack-barbican | 15:32 | |
| *** SheenaG has joined #openstack-barbican | 15:45 | |
| *** igueths has joined #openstack-barbican | 15:48 | |
| *** rm_work is now known as rm_work|away | 15:53 | |
| *** jsavak has quit IRC | 16:03 | |
| *** SheenaG1 has joined #openstack-barbican | 16:06 | |
| *** SheenaG2 has joined #openstack-barbican | 16:07 | |
| *** stanzi has quit IRC | 16:07 | |
| *** stanzi has joined #openstack-barbican | 16:08 | |
| *** SheenaG2 has left #openstack-barbican | 16:08 | |
| *** SheenaG has quit IRC | 16:09 | |
| *** SheenaG1 has quit IRC | 16:10 | |
| *** kebray has joined #openstack-barbican | 16:11 | |
| *** stanzi has quit IRC | 16:13 | |
| *** chlong has quit IRC | 16:19 | |
| *** gyee has joined #openstack-barbican | 16:25 | |
| *** SheenaG has joined #openstack-barbican | 16:37 | |
| *** stanzi has joined #openstack-barbican | 16:48 | |
| *** stanzi has quit IRC | 16:49 | |
| *** stanzi has joined #openstack-barbican | 16:50 | |
| *** rm_you has quit IRC | 16:52 | |
| *** rm_you has joined #openstack-barbican | 16:52 | |
| *** rm_you has joined #openstack-barbican | 16:52 | |
| *** stanzi has quit IRC | 16:54 | |
| *** kebray has quit IRC | 17:00 | |
| *** kebray has joined #openstack-barbican | 17:01 | |
| *** joesavak has joined #openstack-barbican | 17:08 | |
| *** rellerreller has joined #openstack-barbican | 17:09 | |
| *** pglass is now known as pglass|away | 17:27 | |
| arunkant | redrobot, there? | 17:52 |
| arunkant | dave-mccowan, there? | 17:54 |
| dave-mccowan | arunkant o/ | 17:54 |
| arunkant | I thought better to clarify review comments on https://review.openstack.org/#/c/177454/ here.. | 17:55 |
| arunkant | dave-mccowan, for adding other operation support via ACL, the pending task is more around defining policy rules..than actually making code change per se | 17:56 |
| arunkant | dave-mccowan, so far rules are added only for 'read' operation in default policy. If a deployment wants to allow other operations via ACL, it can be done with their customized version which is generally the case. | 17:58 |
| dave-mccowan | arunkant only policy.json changes? or is there still some code pending to support? | 17:59 |
| arunkant | dave-mccowan, for secrets and containers, no code change should be needed. If need to add support for orders or some other resource, then there might be change needed. | 18:00 |
| *** woodster_ has quit IRC | 18:00 | |
| dave-mccowan | arunkant is there any reason not to update the default policy.json file for write/list/delete operations to match read operations for secrets and containers? | 18:02 |
| arunkant | dave-mccowan, also if for some reason, CR change is needed, then I will think that its better to make change only in Kilo (though then we are removing option for deployment to use ACL for other operations) | 18:02 |
| arunkant | dave-mccowan, it was done to limit scope of development as this was added during kilo RC1 cycle. But it can be enhanced for other operations if needed (in upstream or via custom policy) | 18:04 |
| dave-mccowan | arunkant limit the scope of development or test? all the development is done, right? | 18:05 |
| *** dhellmann has quit IRC | 18:05 | |
| arunkant | dave-mccowan, yes its for development (unit tests) and test . | 18:05 |
| *** rm_work|away is now known as rm_work | 18:07 | |
| dave-mccowan | arunkant, ah. i see how the confusion has come in. :-) | 18:08 |
| *** chadlung has joined #openstack-barbican | 18:17 | |
| openstackgerrit | Steve Heyman proposed openstack/python-barbicanclient: Add Secret CLI smoke tests https://review.openstack.org/177906 | 18:18 |
| redrobot | arunkant dave-mccowan about to jump in a meeting. | 18:18 |
| redrobot | arunkant I still don't understand why "write" and "list" were added to the API. The spec never mentions those additions. | 18:19 |
| *** pglass|away is now known as pglass | 18:20 | |
| arunkant | redrobot, there are operations described in one of ACL spec..http://specs.openstack.org/openstack/barbican-specs/specs/kilo/add-creator-only-option.html#operations | 18:21 |
| redrobot | arunkant yes, the spec specifies how reading a secret would affect the operation, but that doesn't explain why they were added to the API. | 18:21 |
| redrobot | arunkant that section describes how the "get" and "creator-only" affects other operations, it does not say that it has to be added to the API in the JSON body. | 18:22 |
| arunkant | redrobot, spec talks about having operations field in data model, and operation values can be 'get' or 'read', 'write', 'delete', 'list' etc. | 18:27 |
| arunkant | redrbot, http://specs.openstack.org/openstack/barbican-specs/specs/kilo/add-creator-only-option.html#data-model-impact | 18:28 |
| arunkant | redrobot, ^^^ | 18:28 |
| redrobot | arunkant yes, and I'm not sure what the purpose of those are... If we do want to enable those as part of the JSON message, then I think a new spec is needed that describes how they affect normal operations | 18:29 |
| redrobot | arunkant I'm not convinced that we need to support all those in barbican ACL | 18:29 |
| redrobot | arunkant even then, those are only booleans in the table, I don't see how it follows that they would store a specific user id? | 18:31 |
| arunkant | redrobot, both of ACL specs talks about various operations and what they can do. May be alee can clarify more | 18:31 |
| arunkant | redrobot, there are ACL defined per operation and each ACL has corresponding list of users. | 18:32 |
| redrobot | arunkant the reason I want this CR to land is because "get" is the only thing that is implemented. | 18:37 |
| redrobot | arunkant the others are effectively broken | 18:37 |
| redrobot | arunkant as new CRs are made that enable those features, then validation can be updated to accept the new values | 18:37 |
| redrobot | arunkant I don't like the idea of not failing when a user is requesting an unimplemented feature. | 18:38 |
| arunkant | redrobot, "not implemented" part is only around default policy change. And policy are generally deployment specific. As I said earlier, a company can use other operations via ACL if policy is updated accordingly. | 18:41 |
| arunkant | redrobot, we are looking consuming barbican for LBaaS integration. Having ACL support for other operations, allow us the flexibility to use privileged accounts to operate on barbican secrets/containers (without need to have project scoped token) | 18:43 |
| *** stanzi has joined #openstack-barbican | 18:43 | |
| redrobot | arunkant I don't know how useful it would be to let the lbass user delete a certificate? | 18:44 |
| redrobot | arunkant And "write" doesn't make sense, since secrets are not updatable. | 18:44 |
| redrobot | arunkant "list" I believe does need a code change, not just policy | 18:45 |
| rm_work | arunkant: I'm the one that IMPLEMENTED Barbican/LBaaS | 18:47 |
| rm_work | ACLs were designed to be compatible | 18:47 |
| rm_work | specifically for LBaaS' use case | 18:47 |
| rm_work | I do not see any problems with the current solution | 18:48 |
| arunkant | redrobot, not sure why 'list' (its get on 'secrets') and other operations will need code change. | 18:48 |
| rm_work | I may have dropped in to this conversation in the middle though | 18:48 |
| redrobot | rm_work this is the relevant CR https://review.openstack.org/#/c/177454/ | 18:49 |
| redrobot | rm_work basically right now you can send a JSON blobl that tries to set "list" and "write" to ACL, and get a 200 back, even though "list" and "write" do not work. | 18:49 |
| rm_work | ah | 18:50 |
| redrobot | it appears that they could be fixed with policy | 18:50 |
| rm_work | if they don't work... why are they allowed? | 18:50 |
| arunkant | rm_work, ACL spec has various operations support. If intention was only for 'read', then most likely we don't need that data point captured. | 18:50 |
| *** nkinder has quit IRC | 18:50 | |
| arunkant | rm_work, its matter of changing policy to support other operations | 18:51 |
| redrobot | arunkant but still, we have the problem of not being able to give feedback on whether policy is set correctly or not | 18:51 |
| redrobot | arunkant how is the list query able to gather all secrets across many projects for a single user? | 18:52 |
| *** chadlung_ has joined #openstack-barbican | 18:54 | |
| *** chadlung has quit IRC | 18:56 | |
| *** chadlung_ has quit IRC | 18:58 | |
| *** stanzi has quit IRC | 18:59 | |
| *** stanzi has joined #openstack-barbican | 18:59 | |
| arunkant | redrobot, for 'delete' , it will be able to do successful authorization via ACL . For 'list', I was thinking in terms of just authorization pass. Yes you are right code change will be needed as it uses token project id to list secrets. | 19:01 |
| rm_work | well, personally I think i'd +1 this CR | 19:02 |
| rm_work | but maybe I don't fully understand the issue arunkant is bringing up :/ | 19:02 |
| rm_work | sorry, got to disagree and run -- meeting :/ | 19:02 |
| *** chadlung has joined #openstack-barbican | 19:03 | |
| jaosorior | hockeynut, jvrbanac: are you guys around? | 19:03 |
| hockeynut | jaosorior in a meeting :-( | 19:05 |
| jaosorior | uok | 19:05 |
| *** dhellmann has joined #openstack-barbican | 19:06 | |
| *** chadlung has quit IRC | 19:06 | |
| arunkant | redrobot, okay. Looked into code now...looks like code change is needed for secret delete as well, even after passing authz check. So then its okay to remove API support if its needed. | 19:10 |
| redrobot | arunkant I think we can re-enable the API verification as the code changes that are needed land. | 19:14 |
| jaosorior | redrobot: How's your knowledge about the functional tests? | 19:14 |
| redrobot | jaosorior so-so... what's up? | 19:14 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/178409 | 19:15 |
| hockeynut | jaosorior I can give you 21% of my attention while in this meeting | 19:15 |
| arunkant | redrobot, okay | 19:15 |
| jaosorior | redrobot, hockeynut: So I started implementing the standardized version blueprint, and I did my first patch for it, But, for some reason now, the noauth functional tests break complaining about there not being a project-id | 19:16 |
| jaosorior | redrobot, hockeynut: looking at it, it makes sense, the project-id is not being set... but it wasn't set before either, so now I don't understand how that used to work before | 19:17 |
| jaosorior | redrobot, hockeynut: the patch I'm talking about is this one: https://review.openstack.org/#/c/178601/ and here' s the stack trace: http://logs.openstack.org/01/178601/1/check/gate-barbican-devstack-dsvm/242b25e/console.html | 19:17 |
| hockeynut | <clicking> | 19:17 |
| hockeynut | jaosorior from the comment in your CR, the / controller now requires authentication where before it did not? | 19:31 |
| *** woodster_ has joined #openstack-barbican | 19:31 | |
| jaosorior | hockeynut: the / controller doesn't. but the /v1/ controller does | 19:32 |
| openstackgerrit | Merged openstack/barbican-specs: Move fix-version-api blueprint to Liberty https://review.openstack.org/178602 | 19:34 |
| hockeynut | jaosorior do these tests work in your local env (which I assume has some flavor of keystone)? | 19:36 |
| hockeynut | jaosorior I'll pull down your CR and see how my env likes it | 19:39 |
| jaosorior | let me run it again, I was playing with the configs, since I had to do a change in the paste config | 19:39 |
| hockeynut | ok | 19:39 |
| jaosorior | but actually, in my local environment, if I actually use the unauthed middleware, those tests have always failed that way | 19:40 |
| jaosorior | which is why I ask, I have no idea how they have passed in the gate before | 19:40 |
| *** rellerreller has quit IRC | 19:40 | |
| jaosorior | hockeynut: now that I enabled the keystone auth middleware the tests pass | 19:43 |
| hockeynut | ah, I always run with keystone mw | 19:43 |
| *** david-lyle has quit IRC | 19:44 | |
| *** david-lyle has joined #openstack-barbican | 19:44 | |
| jaosorior | hockeynut: the unauth middleware is the default, so I try to run both | 19:45 |
| jaosorior | hockeynut: anyway, I have no idea how the tests passed before. And I don't see where the paste config would be changed before running the functional tests | 19:47 |
| hockeynut | so running unauth mw with your changes I should see these failures, right? | 19:52 |
| jaosorior | yup | 19:53 |
| *** SheenaG has quit IRC | 19:53 | |
| *** SheenaG has joined #openstack-barbican | 19:55 | |
| elmiko | hey folks | 20:01 |
| elmiko | when using castellan, do i need to create_key first or can i just store_key? | 20:01 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Display all versions info in versions controller https://review.openstack.org/178601 | 20:01 |
| *** stanzi has quit IRC | 20:06 | |
| *** stanzi has joined #openstack-barbican | 20:06 | |
| *** chadlung has joined #openstack-barbican | 20:07 | |
| *** stanzi has quit IRC | 20:11 | |
| *** stanzi has joined #openstack-barbican | 20:11 | |
| *** chadlung has quit IRC | 20:12 | |
| *** stanzi_ has joined #openstack-barbican | 20:18 | |
| *** stanzi_ has quit IRC | 20:18 | |
| *** stanzi_ has joined #openstack-barbican | 20:19 | |
| *** stanzi has quit IRC | 20:21 | |
| *** igueths has quit IRC | 20:30 | |
| jaosorior | hockeynut: thought I had found the issue, but no :/ | 20:32 |
| *** stanzi_ has quit IRC | 20:35 | |
| *** stanzi has joined #openstack-barbican | 20:35 | |
| *** stanzi has quit IRC | 20:39 | |
| *** joesavak has quit IRC | 20:53 | |
| openstackgerrit | Michael McCune proposed openstack/castellan: Removing SymmetricKey docs from key module https://review.openstack.org/178843 | 20:59 |
| elmiko | redrobot: question about Key classes, would it be appropriate to use SymmetricKey for something that is unencoded? | 21:00 |
| redrobot | hi elmiko, to be honest I haven't dug down that deep in Castellan | 21:01 |
| redrobot | elmiko, kfarr and rellerreller would be the best folks to ask | 21:01 |
| elmiko | redrobot: ack, thanks! | 21:01 |
| redrobot | elmiko also Brianna from JHU, but I'm not sure what her nick is | 21:02 |
| jaosorior | redrobot: do you happen to know how the barbican-api-paste.ini is configured in the gate? | 21:02 |
| redrobot | jaosorior I think it just gets copied into /etc/barbican https://github.com/openstack/barbican/blob/master/contrib/devstack/lib/barbican#L92 | 21:08 |
| jvrbanac | woodster_, question about one of your CR's | 21:11 |
| openstackgerrit | John Vrbanac proposed openstack/barbican: Adding more logging around containers & consumers https://review.openstack.org/178845 | 21:15 |
| elmiko | so, if storing a secret, and it has no algorithm, is it better to use "", "None", "plain", None, or some other value for the algo? | 21:15 |
| elmiko | (i realize algo is optional, just curious about best practice) | 21:15 |
| *** chadlung has joined #openstack-barbican | 21:17 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Display all versions info in versions controller https://review.openstack.org/178601 | 21:18 |
| *** kebray has quit IRC | 21:20 | |
| woodster_ | jvrbanac: hey there | 21:23 |
| openstackgerrit | Steve Heyman proposed openstack/python-barbicanclient: Add Secret CLI smoke tests https://review.openstack.org/177906 | 21:24 |
| jvrbanac | woodster_, on https://review.openstack.org/#/c/132304/ should we be including GIFs into our repo? This feels like it should be an external resource | 21:24 |
| jvrbanac | woodster_, Also, one of them has a rackspace logo on it | 21:24 |
| woodster_ | jvrbanac: ah, so maybe put into a cloud files cdn or drop box maybe? Oh that first fig has a logo :\ | 21:26 |
| jvrbanac | yeah... thinking CDN is good | 21:27 |
| *** chadlung has quit IRC | 21:27 | |
| woodster_ | jvrbanac: do you think we could use our current keep account for this, or should we create a special openstack related one maybe? There might even already be such a beast...I can ask the docs team about that one | 21:30 |
| *** kebray has joined #openstack-barbican | 21:30 | |
| jvrbanac | woodster_, just put in ours for the time being. We can always put up a CR to changes the links later | 21:31 |
| woodster_ | jvrbanac: that sounds good, thanks | 21:31 |
| *** nkinder has joined #openstack-barbican | 21:33 | |
| *** chadlung has joined #openstack-barbican | 21:44 | |
| *** kebray has quit IRC | 21:51 | |
| jaosorior | hockeynut, redrobot, woodster_: it works now :D | 21:55 |
| jaosorior | So... If you guys have time. Here's the first patch of the series for the standardised version thingy blueprint https://review.openstack.org/#/c/178601/ | 21:57 |
| hockeynut | jaosorior awesomeness - | 22:02 |
| *** mdarby has joined #openstack-barbican | 22:02 | |
| *** kebray has joined #openstack-barbican | 22:02 | |
| *** pglass has quit IRC | 22:05 | |
| *** chadlung has quit IRC | 22:05 | |
| *** chadlung has joined #openstack-barbican | 22:05 | |
| *** xaeth is now known as xaeth_afk | 22:08 | |
| *** chadlung has quit IRC | 22:10 | |
| openstackgerrit | Merged openstack/barbican: Updated from global requirements https://review.openstack.org/178409 | 22:11 |
| openstackgerrit | Merged openstack/barbican: Drop use of 'oslo' namespace package. https://review.openstack.org/178242 | 22:11 |
| woodster_ | jaosorior: wow, what was the issue after all? | 22:12 |
| jaosorior | woodster_: missed properly overwriting the new configuration in the devstack script | 22:14 |
| jaosorior | So it was setting it. But to another section. So it didn't complain. So it just took the default, which is unauthed. Instead of the one that uses keystone auth | 22:14 |
| woodster_ | jaosorior: ugh. Devstack is magic! :) I still need to figure out how to make two screens share the same database, to test the retry stuff | 22:15 |
| *** mdarby has quit IRC | 22:15 | |
| jaosorior | Hahaha it is black magic indeed | 22:15 |
| *** nelsnelson has quit IRC | 22:18 | |
| *** chadlung has joined #openstack-barbican | 22:25 | |
| openstackgerrit | Merged openstack/barbican: Remove Future Parameters (write, list, delete) from ACL Validation Schema https://review.openstack.org/177454 | 22:26 |
| *** dimtruck is now known as zz_dimtruck | 22:29 | |
| *** chadlung has quit IRC | 22:30 | |
| openstackgerrit | Arun Kant proposed openstack/barbican: Adding documentation for ACLs operations. https://review.openstack.org/178479 | 22:32 |
| *** stanzi has joined #openstack-barbican | 22:41 | |
| *** rm_work is now known as rm_work|away | 22:58 | |
| *** stanzi has quit IRC | 23:07 | |
| *** stanzi has joined #openstack-barbican | 23:08 | |
| *** stanzi has quit IRC | 23:13 | |
| *** kebray has quit IRC | 23:32 | |
| *** chlong has joined #openstack-barbican | 23:50 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!