| *** chadlung has joined #openstack-barbican | 00:30 | |
| *** SheenaG has quit IRC | 00:32 | |
| *** chadlung has quit IRC | 00:34 | |
| *** SheenaG has joined #openstack-barbican | 00:35 | |
| *** SheenaG has quit IRC | 00:45 | |
| *** kebray has joined #openstack-barbican | 01:31 | |
| *** kebray has quit IRC | 01:32 | |
| *** dave-mccowan has quit IRC | 01:42 | |
| *** kebray has joined #openstack-barbican | 01:51 | |
| *** chadlung has joined #openstack-barbican | 01:54 | |
| *** chadlung has quit IRC | 01:58 | |
| *** kebray has quit IRC | 02:01 | |
| *** kebray has joined #openstack-barbican | 02:02 | |
| *** zz_dimtruck is now known as dimtruck | 02:16 | |
| *** dimtruck is now known as zz_dimtruck | 02:41 | |
| *** kebray has quit IRC | 03:35 | |
| *** zz_dimtruck is now known as dimtruck | 03:41 | |
| *** kebray has joined #openstack-barbican | 04:01 | |
| *** dimtruck is now known as zz_dimtruck | 04:19 | |
| *** openstackgerrit has quit IRC | 06:23 | |
| *** openstackgerrit has joined #openstack-barbican | 06:23 | |
| *** woodster_ has quit IRC | 06:30 | |
| *** nickrmc83 has joined #openstack-barbican | 06:47 | |
| *** kebray has quit IRC | 07:11 | |
| *** chlong has quit IRC | 07:44 | |
| *** tkelsey has joined #openstack-barbican | 08:38 | |
| *** darrenmoffat has quit IRC | 08:45 | |
| *** darrenmoffat has joined #openstack-barbican | 08:46 | |
| *** alkar has joined #openstack-barbican | 09:26 | |
| *** zz_dimtruck is now known as dimtruck | 09:54 | |
| *** darrenmoffat has left #openstack-barbican | 10:07 | |
| *** dimtruck is now known as zz_dimtruck | 10:10 | |
| *** alkar has quit IRC | 10:11 | |
| openstackgerrit | Merged openstack/barbican: Remove deprecated references to admin endpoint. https://review.openstack.org/179896 | 11:34 |
|---|---|---|
| *** woodster_ has joined #openstack-barbican | 11:38 | |
| *** dave-mccowan has joined #openstack-barbican | 12:09 | |
| *** mdarby has joined #openstack-barbican | 12:30 | |
| *** gyee has joined #openstack-barbican | 12:39 | |
| *** _elmiko is now known as elmiko | 13:04 | |
| *** gyee has quit IRC | 13:22 | |
| openstackgerrit | Thomas Herve proposed openstack/barbican: Fix snakeoil_ca plugin https://review.openstack.org/179374 | 13:23 |
| *** gyee has joined #openstack-barbican | 13:27 | |
| woodster_ | arunkant: I just added comments to you doc CR. There are aspects about the ACL response I hadn't noticed before. | 13:31 |
| *** jaosorior has joined #openstack-barbican | 13:35 | |
| *** everjeje has quit IRC | 13:36 | |
| *** joesavak has joined #openstack-barbican | 14:04 | |
| *** pglass has joined #openstack-barbican | 14:10 | |
| *** pglass has quit IRC | 14:15 | |
| *** silos has joined #openstack-barbican | 14:18 | |
| *** silos has left #openstack-barbican | 14:20 | |
| *** pglass has joined #openstack-barbican | 14:20 | |
| hockeynut | got 2 functional test CRs in search of some love: https://review.openstack.org/#/c/179609/ and https://review.openstack.org/#/c/179659/ | 14:26 |
| lisaclark | morning barbicaneers! | 14:27 |
| lisaclark | quick question for you all: what's the etherpad link for the design summit discussion points for liberty? | 14:27 |
| lisaclark | nm, i found it | 14:29 |
| *** xaeth_afk is now known as xaeth | 14:33 | |
| *** nelsnelson has joined #openstack-barbican | 14:35 | |
| openstackgerrit | Merged openstack/python-barbicanclient: Add Secret CLI smoke tests https://review.openstack.org/177906 | 14:35 |
| woodster_ | alee_: the cert order validation that is done is 'static' via the common.validators.py code, and not via plugin lookup, correct? | 14:40 |
| *** kebray has joined #openstack-barbican | 14:41 | |
| *** kebray has quit IRC | 14:41 | |
| alee_ | woodster_, correct - it happens before the plugins are searched for or invoked | 14:42 |
| alee_ | woodster_, we have not yet added any plugin validation calls. | 14:42 |
| woodster_ | alee_: cool, just making sure. I think we'd still like to consider plugin validation for liberty, correct? | 14:43 |
| woodster_ | alee_: we can keep doing static validation for standardized order types of course | 14:45 |
| alee_ | woodster_, definitely | 14:46 |
| *** dave-mccowan has quit IRC | 14:51 | |
| *** silos has joined #openstack-barbican | 15:00 | |
| *** silos has left #openstack-barbican | 15:00 | |
| *** nickrmc83 has quit IRC | 15:01 | |
| *** dave-mccowan has joined #openstack-barbican | 15:04 | |
| *** alee_dinner is now known as alee | 15:09 | |
| *** kebray has joined #openstack-barbican | 15:10 | |
| *** gyee has quit IRC | 15:13 | |
| *** gyee has joined #openstack-barbican | 15:14 | |
| *** SheenaG has joined #openstack-barbican | 15:19 | |
| *** rellerreller has joined #openstack-barbican | 15:25 | |
| *** everjeje has joined #openstack-barbican | 15:26 | |
| *** nelsnelson has quit IRC | 15:26 | |
| *** nelsnelson has joined #openstack-barbican | 15:37 | |
| *** shakamunyi has joined #openstack-barbican | 15:39 | |
| *** silos has joined #openstack-barbican | 15:46 | |
| silos | hey rellerreller | 15:51 |
| rellerreller | hey silos I'm in a meeting now. | 15:53 |
| silos | kk. will come back later. | 15:53 |
| *** chlong has joined #openstack-barbican | 16:01 | |
| rellerreller | silos What's up? I can multi-task a little :) | 16:11 |
| *** chlong has quit IRC | 16:18 | |
| silos | rellerreller: hey. Sorry. Got pulled into a meeting as well. I was in the barbican IRC meeting and just wanted to confirm something. Is Barbican being replaced by Castellan?? | 16:29 |
| rellerreller | No Barbican is not being replaced by Castellan | 16:30 |
| arunkant | woodster_, replied to your comments on doc CR. Let me know if you think change is needed. | 16:30 |
| silos | rellerreller: ok. that's what I thought. | 16:31 |
| rellerreller | silos Castellan will provide a generic interface to talk to any key manager. The key manager implementations I would anticipate are Barbican, KMIP, and PKCS#11. | 16:31 |
| silos | rellerreller: ahhhhh ok I understand now. thanks for clearing that up. | 16:32 |
| rellerreller | silos With the Castellan interface you can easily swap out what key manager you want to use. That way if you have specific hardware requirements or anything then it is a quick swap. | 16:32 |
| rellerreller | silos np | 16:32 |
| *** joesavak has quit IRC | 16:40 | |
| *** nickrmc83 has joined #openstack-barbican | 16:43 | |
| *** silos has left #openstack-barbican | 16:50 | |
| *** nickrmc83 has quit IRC | 16:52 | |
| *** nickrmc83 has joined #openstack-barbican | 16:53 | |
| *** rellerreller has quit IRC | 16:55 | |
| -openstackstatus- NOTICE: zuul has been restarted to troubleshoot an issue, gerrit events between 15:00-17:00 utc were lost and changes updated or approved during that time will need to be rechecked or have their approval votes readded to trigger testing | 17:03 | |
| *** joesavak has joined #openstack-barbican | 17:03 | |
| *** nickrmc83 has quit IRC | 17:13 | |
| *** nickrmc83 has joined #openstack-barbican | 17:13 | |
| *** gyee has quit IRC | 17:14 | |
| SheenaG | alee, alee_ are you around? | 17:16 |
| alee | Sheena_, on my way | 17:16 |
| *** gyee has joined #openstack-barbican | 17:21 | |
| *** nickrmc83 has quit IRC | 17:29 | |
| *** jsavak has joined #openstack-barbican | 17:43 | |
| *** joesavak has quit IRC | 17:46 | |
| *** crc32 has joined #openstack-barbican | 17:52 | |
| *** tkelsey has quit IRC | 18:00 | |
| *** joesavak has joined #openstack-barbican | 18:00 | |
| *** jsavak has quit IRC | 18:02 | |
| *** barra204 has joined #openstack-barbican | 18:12 | |
| *** barra204 has quit IRC | 18:27 | |
| *** jsavak has joined #openstack-barbican | 18:29 | |
| *** joesavak has quit IRC | 18:32 | |
| *** chadlung has joined #openstack-barbican | 18:32 | |
| *** kebray has quit IRC | 18:39 | |
| *** barra204 has joined #openstack-barbican | 18:42 | |
| *** dave-mccowan has quit IRC | 18:50 | |
| *** SheenaG has quit IRC | 19:07 | |
| *** gyee has quit IRC | 19:13 | |
| *** tkelsey has joined #openstack-barbican | 19:14 | |
| *** gyee has joined #openstack-barbican | 19:15 | |
| *** tkelsey has quit IRC | 19:19 | |
| *** kebray has joined #openstack-barbican | 19:30 | |
| *** SheenaG has joined #openstack-barbican | 19:41 | |
| hockeynut | redrobot getting to my evernote backlog - I see you wanted a list of deprecated stuff. Here's what I find: https://etherpad.openstack.org/p/barbican-deprecations | 19:55 |
| hockeynut | anyone else feel free to update. Note that these are the items that are actually marked/commented as deprecated. If there are others then should put up a CR to appropriately mark them | 19:56 |
| *** kebray has quit IRC | 20:15 | |
| *** kebray has joined #openstack-barbican | 20:17 | |
| *** gyee has quit IRC | 20:28 | |
| *** dave-mccowan has joined #openstack-barbican | 20:30 | |
| elmiko | redrobot: i have a small question about the barbican key manager review, got a moment? | 20:35 |
| *** barra204 has quit IRC | 20:37 | |
| redrobot | elmiko what's up? | 20:41 |
| elmiko | redrobot: so, i'm looking at the change to make barbican the default api_class and i'm curious if there is a way to override the default? | 20:41 |
| elmiko | for example, we'd like a SaharaKeyManager to be the default api_class | 20:42 |
| elmiko | on a related note, i'm wondering if castellan could use some sort of function to provide the config options through a function so that consumers can include it in their entry_points for creating config files. (if that makes sense) | 20:45 |
| redrobot | elmiko for Castellan right? The default should only be used when no class is defined in the config file | 20:45 |
| redrobot | elmiko defining a class in your conf should override the default | 20:45 |
| elmiko | redrobot: yea, for castellan. ok, hmm. i'll have to think about this. | 20:46 |
| elmiko | i'm concerned because sahara doesn't distribute a conf file anymore, we instruct users to create one with oslo-config-generator. | 20:47 |
| elmiko | for backward compat. it would be nice to have the default be our keymanager | 20:47 |
| *** igueths has joined #openstack-barbican | 20:51 | |
| rm_work | elmiko: yeah, that's interesting -- not sure if possible | 20:54 |
| rm_work | of course, I kind of expected the default keymanager to be MockKeyManager | 20:54 |
| rm_work | because the default should be the one that works out of box, with no dependencies IMO | 20:54 |
| *** gyee has joined #openstack-barbican | 20:54 | |
| elmiko | rm_work: i'm kinda wondering if using the CONF object is proper for something like castellan. | 20:54 |
| elmiko | rm_work: +1 | 20:54 |
| elmiko | i *think* it might be more appropriate for castellan to provide a list_opts type method for consumers to include in their setupttools configuration entry_points to allow definitions of the config options. | 20:55 |
| elmiko | as it stands now, the only control i have for bringing in the config options is to `import castellan.key_manager` | 20:56 |
| *** nelsnelson has quit IRC | 21:00 | |
| elmiko | i added my questions to https://review.openstack.org/#/c/171918/ | 21:00 |
| rm_work | ah actually, it might be possible to override the default | 21:03 |
| rm_work | though it's hard for me to explain my thought process right now | 21:03 |
| rm_work | i am a bit stretched | 21:03 |
| rm_work | working on a lot of stuff concurrently T_T | 21:03 |
| elmiko | i'm sure it's possible somehow. i'm just not aware of the pattern, i'm guessing it involves digging around CONF and replacing it. | 21:05 |
| rm_work | yes | 21:05 |
| elmiko | it just seems like there should be an easier way to make this possible for end users | 21:05 |
| elmiko | and i feel part of the issue is using the global conf object, but i'm having trouble finding good examples in other middleware | 21:06 |
| rm_work | honestly, in most cases i don't think it's valid to expect zero-config | 21:06 |
| *** jsavak has quit IRC | 21:06 | |
| rm_work | sometimes people just need to actually set up their configs <_< | 21:06 |
| elmiko | probably not, but even still we need something sensible to generate our config file. | 21:06 |
| elmiko | lol, tru dat | 21:06 |
| *** mdarby has quit IRC | 21:23 | |
| *** gyee has quit IRC | 21:27 | |
| *** igueths has quit IRC | 21:48 | |
| *** xaeth is now known as xaeth_afk | 21:58 | |
| *** pglass has quit IRC | 22:11 | |
| openstackgerrit | John Wood proposed openstack/barbican: Port the Architecture, Dataflow, and Project Strucure docs https://review.openstack.org/132304 | 22:23 |
| arunkant | redrobot, there? | 22:25 |
| *** Sheena__ has joined #openstack-barbican | 22:27 | |
| *** Sheena_ has quit IRC | 22:30 | |
| *** Sheena__ is now known as Sheena_ | 22:30 | |
| *** kebray has quit IRC | 22:32 | |
| *** chadlung has quit IRC | 22:35 | |
| *** mjg59 has quit IRC | 22:35 | |
| *** mjg59 has joined #openstack-barbican | 22:36 | |
| *** tkelsey has joined #openstack-barbican | 22:39 | |
| *** kebray has joined #openstack-barbican | 22:40 | |
| *** tkelsey has quit IRC | 22:43 | |
| *** chadlung has joined #openstack-barbican | 22:47 | |
| *** chadlung has quit IRC | 22:51 | |
| *** shakamunyi has quit IRC | 23:31 | |
| *** jaosorior has quit IRC | 23:32 | |
| *** chadlung has joined #openstack-barbican | 23:35 | |
| *** chadlung has quit IRC | 23:41 | |
| openstackgerrit | Arun Kant proposed openstack/barbican: Modifying ACL data in response to match request payload format. https://review.openstack.org/180353 | 23:42 |
| *** SheenaG has quit IRC | 23:45 | |
| *** everjeje has quit IRC | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!