Tuesday, 2015-06-02

*** gyee has quit IRC00:34
*** nkinder__ has joined #openstack-barbican00:50
*** tkelsey has joined #openstack-barbican00:50
*** zz_dimtruck is now known as dimtruck00:54
*** tkelsey has quit IRC00:55
*** dimtruck is now known as zz_dimtruck01:24
*** briancurtin has quit IRC01:36
*** briancurtin has joined #openstack-barbican01:43
openstackgerritJohn Wood proposed openstack/barbican: Fix cert tasks not being scheduled for retry  https://review.openstack.org/18742802:19
*** shakamunyi has joined #openstack-barbican02:26
*** shakamunyi has quit IRC02:33
openstackgerritJohn Wood proposed openstack/barbican: Add retry server and functional tests to DevStack  https://review.openstack.org/17089602:35
*** xaeth_afk is now known as xaeth02:39
*** chlong has quit IRC02:39
*** tkelsey has joined #openstack-barbican02:51
*** arunkant has quit IRC02:51
*** kebray has joined #openstack-barbican02:52
*** xaeth is now known as xaeth_afk02:55
*** arunkant has joined #openstack-barbican02:55
*** tkelsey has quit IRC02:56
*** xaeth_afk is now known as xaeth03:11
openstackgerritJohn Wood proposed openstack/barbican-specs: Add PUT Support For the Generic Containers Resource  https://review.openstack.org/18744303:21
*** chlong has joined #openstack-barbican03:22
*** xaeth is now known as xaeth_afk04:07
*** kebray has quit IRC04:24
*** david-lyle has quit IRC04:24
*** david-lyle has joined #openstack-barbican04:25
*** kebray has joined #openstack-barbican04:41
*** zz_dimtruck is now known as dimtruck04:42
*** dimtruck is now known as zz_dimtruck04:53
*** dave-mccowan has quit IRC05:19
*** tkelsey has joined #openstack-barbican06:52
*** tkelsey has quit IRC06:57
*** zz_dimtruck is now known as dimtruck07:05
*** everjeje has joined #openstack-barbican07:09
*** woodster_ has quit IRC07:10
*** dimtruck is now known as zz_dimtruck07:15
*** kebray has quit IRC07:25
*** chlong has quit IRC07:56
*** tkelsey has joined #openstack-barbican08:17
*** darrenmoffat1 has joined #openstack-barbican10:46
*** darrenmoffat1 has left #openstack-barbican10:46
*** darrenmoffat2 has joined #openstack-barbican10:50
*** nickrmc83 has joined #openstack-barbican10:50
*** darrenmoffat2 has left #openstack-barbican10:50
*** nickrmc83 has quit IRC10:51
*** nickrmc83 has joined #openstack-barbican10:51
*** woodster_ has joined #openstack-barbican11:03
*** zz_dimtruck is now known as dimtruck11:08
*** dimtruck is now known as zz_dimtruck11:11
*** darrenmoffat has quit IRC11:45
*** darrenmoffat has joined #openstack-barbican11:46
*** dave-mccowan has joined #openstack-barbican11:56
*** samueldmq has joined #openstack-barbican12:18
samueldmqmorning12:18
samueldmqcould someone check if this bug affects barbican side / https://bugs.launchpad.net/barbican/+bug/145894512:18
openstackLaunchpad bug 1458945 in murano "Use graduated oslo.policy instead of oslo-incubator code" [High,Confirmed] - Assigned to Ekaterina Chernova (efedorova)12:18
samueldmqI would say it doesn't, since I can't find the incubated version of policy.py in your repo12:19
*** zz_dimtruck is now known as dimtruck12:27
*** alee has quit IRC12:50
woodster_samueldmq: I believe we are using Oslo policy now but maybe no fully configured12:54
samueldmqwoodster_, yeah, looks like you are already using it13:01
samueldmqwoodster_, https://github.com/cloudkeep/barbican/blob/master/requirements.txt#L1813:01
samueldmqwoodster_, or just updated global requirements .. I am not sure13:02
samueldmqwoodster_, could you please take a look at that and confirm/invalidate the bug on your side13:02
samueldmq?13:02
samueldmqwoodster_, but I tend to say it's invalid, since you don't have the incubated version of policy.py13:02
*** nkinder__ has quit IRC13:30
woodster_samueldmq: actually jaosorior originally did that work but I haven't seen him online of late. It could be that we are only using a portion of the oslo policy library...I recall mainly to handle the policy engine related things, like setting the context for policy.json. Other aspects might not be covered so your bug could be valid. If you don't anticipate a13:31
woodster_large CR, then you could probably just submit against that bug.13:31
woodster_redrobot: ^^^^13:31
openstackgerritJohn Wood proposed openstack/barbican-specs: Add PUT Support For the Generic Containers Resource  https://review.openstack.org/18744313:44
*** alee has joined #openstack-barbican13:44
samueldmqwoodster_, nice thanks, let's see what redrobot says13:46
*** stanzi has joined #openstack-barbican13:56
*** SheenaG has joined #openstack-barbican13:59
*** Kevin_Bishop has joined #openstack-barbican14:01
*** SheenaG has left #openstack-barbican14:01
openstackgerritJohn Wood proposed openstack/barbican-specs: Add PUT Support For the Generic Containers Resource  https://review.openstack.org/18744314:09
*** dimtruck is now known as zz_dimtruck14:15
*** rellerreller has joined #openstack-barbican14:16
*** stanzi has quit IRC14:18
*** pglass has joined #openstack-barbican14:19
*** zz_dimtruck is now known as dimtruck14:19
*** jhfeng has joined #openstack-barbican14:19
*** kfarr has joined #openstack-barbican14:20
*** nkinder__ has joined #openstack-barbican14:26
*** xaeth_afk is now known as xaeth14:39
*** silos has joined #openstack-barbican14:43
openstackgerritAde Lee proposed openstack/barbican: Added Certificate API Docs and Quick Start Guides  https://review.openstack.org/18677114:56
*** rellerreller has quit IRC15:05
*** rellerreller has joined #openstack-barbican15:05
*** SheenaG has joined #openstack-barbican15:09
*** kebray has joined #openstack-barbican15:21
*** igueths has joined #openstack-barbican15:24
elmikoredrobot: ping15:25
redrobotelmiko pong15:25
elmikohey, i'm doing some outreach for the api working group. trying to contact all the listed liaisons,15:26
elmikoi just wanted to bring up 2 docs we have going;15:26
elmikothe first is a proposal that jaypipes and the nova team put together for a proposed liaison responsibilities, https://wiki.openstack.org/wiki/Nova/APIWGLiaisons15:26
elmikothe second is a CR we have up for merge guidelines, https://review.openstack.org/#/c/186836/15:27
elmikohopefully, we'll have some guidelines that we'd like to shop around and get more engagement from the liaisons. just a friendly fyi =)15:27
aleeelmiko, woodster_ why is PATCH to be avoided?15:28
elmikoalee: i think the prevailing wisdom is that PUT is more appropriate in most situations, but if you really want to get the dirty details talk with miguelgrinberg in openstack-api. he really knows the details well.15:29
*** stanzi has joined #openstack-barbican15:29
aleeelmiko, I'm looking at a comment made by woodster_ in arunkant CR --> https://review.openstack.org/#/c/178479/8/doc/source/api/reference/acls.rst,cm15:30
redrobotalee thanks for the heads up!15:30
redroboterr... elmiko  thanks for the heads up!15:31
elmikohehe, np15:31
aleeelmiko, it seems like woodster_ is suggesting that we change the API here to avoid patch.15:31
elmikoalee: yea, woodster_ had a big talk on openstack-api about the same issue. let me dig up the details15:31
aleeand rather use more fine grained reads15:31
aleeI mean PUTs15:31
arunkantalee, which specific comment you are referring to as there are number of them15:32
woodster_alee, the issue is to do PATCH 'right' is requires more effort. See this link for an RFC that shows this: http://williamdurand.fr/2014/02/14/please-do-not-patch-like-an-idiot/15:32
aleearunkant, woodster_ last one -- line 54515:32
*** jhfeng is now known as jhfeng-away15:33
*** stanzi has quit IRC15:33
elmikoalee: if you are curious, here is the irc convo that went on about it, http://eavesdrop.openstack.org/irclogs/%23openstack-api/%23openstack-api.2015-05-29.log.html#t2015-05-29T22:40:5515:34
arunkantwoodster_, alee: I will like to revisit this in another CR if its okay. I am working on changes suggested in docs and was hoping to finish that today15:35
openstackgerritDouglas Mendizábal proposed openstack/barbican: WIP: Use namespaced roles  https://review.openstack.org/18763815:35
elmikosadly, i don't know the details between the PATCH and PUT debate well enough to elaborate =(15:35
*** barra204 has joined #openstack-barbican15:36
*** shakamunyi has joined #openstack-barbican15:36
aleeelmiko, thanks15:37
aleewoodster_, very interesting15:37
woodster_the basic issue is that it is cleaner/easier to implement the basic rest verbs like PUT/POST vs PATCH.15:37
aleewoodster_, arunkant I agree with arunkant that the PUT/PATCH thing needs to be revisited in another CR.  His CR should just document things as they are.15:38
aleewoodster_, arunkant if it helps -- we could put a note at the beginning of the PATCH documentation to indicate that will likely be changing15:39
*** stanzi has joined #openstack-barbican15:41
woodster_alee, arunkant I'd be fine with that actually15:41
aleewoodster_, yeah - I did not realize PATCH was so complicated.  I'm bookmarking that link for sure.15:42
woodster_alee: yeah I was surprised to but it makes sense...it is hard to remove items from lists without updating the entire list, which isn't very patch-like15:42
*** stanzi has quit IRC15:42
*** openstackgerrit has quit IRC15:42
aleewoodster_, OK so this change to the API requires a blueprint .. you going to write it?15:43
*** openstackgerrit has joined #openstack-barbican15:43
aleeblueprint/spec15:43
redrobotalee woodster_  is it a change to ACL?15:43
aleeredrobot, yes15:44
aleeredrobot, not to the acl itself, but to the way of modifying it15:44
redrobotalee I'd say just put up a CR.  I really really want to get Kilo ACL patched up.15:44
aleeredrobot, this is a complicated change.15:44
redrobotalee hmmm.... maybe I should just patch Kilo to remove ACLs altogether. :-\15:45
aleeredrobot, no -- I dont see any reason to do that.15:45
aleewoodster_, what do you think?  I think its OK to have kilo contain the current implementation for changing acls.15:46
redrobotalee well... I suppose the alternative is to email the dev list and tell everyone not to use Kilo ACLs.15:46
redrobotalee problem is kilo still has the undocumented non-spec compliant api15:46
woodster_redrobot: +1 :)  Short of that, shoring up what is there now (docs included) and getting into Kilo makes sense. Liberty is where we can do things like moving from creator-only -> project-access, and removing/reworking PATCH if folks agree on that15:46
aleeredrobot, I'm assuming there is not a lot of time to get in Kilo changes like this.15:48
aleethe PATCH -> PUT change is a big one, and not one I'd want to get in too quickly.15:48
aleeredrobot, APIs change and get better.  We can always deprecate PATCH in Liberty ..15:50
redrobotalee understood.  I like woodster_ suggestion to backport arun's work and then PATCH/PUT BP for liberty.15:50
aleeredrobot, ok - I think I was arguing for the same thing15:50
aleeredrobot, dont forget to backport my dogtag fix too please :)15:51
redrobotalee yeah, sorry.  I was the one thinking that would be needed in Kilo15:51
redrobotalee for sure.15:51
aleewoodster_ is a spec/BP printing machine (being an architect and all) - he'll have that PUT/PATCH BP up in no time :)15:53
aleearunkant, ping15:56
arunkantalee, yes15:56
aleearunkant, can https://review.openstack.org/#/c/176558/ be pushed ?  or is it dependant on other changes?15:57
*** stanzi has joined #openstack-barbican15:57
aleearunkant, I'll try and push it ..15:57
arunkantalee, its independent..it can be pushed now15:58
aleearunkant, done15:58
*** nickrmc83 has quit IRC16:01
*** dimtruck is now known as zz_dimtruck16:02
*** stanzi has quit IRC16:09
*** gyee has joined #openstack-barbican16:10
iguethsMore info on Put vs Patch http://restful-api-design.readthedocs.org/en/latest/methods.html16:21
*** jhfeng-away has quit IRC16:21
*** nelsnelson has joined #openstack-barbican16:24
*** nelsnelson has quit IRC16:40
*** nelsnels_ has joined #openstack-barbican16:41
*** rellerreller has quit IRC16:54
*** stanzi has joined #openstack-barbican16:56
*** nelsnels_ has quit IRC17:02
*** nelsnelson has joined #openstack-barbican17:02
*** nelsnelson has quit IRC17:02
*** nelsnelson has joined #openstack-barbican17:04
*** nelsnelson has quit IRC17:04
*** stanzi has quit IRC17:08
*** tkelsey has quit IRC17:08
*** Asha has joined #openstack-barbican17:13
AshaHi All17:13
openstackgerritArun Kant proposed openstack/barbican: Removed per ACL operations and added support for PUT method.  https://review.openstack.org/18088817:18
openstackgerritArun Kant proposed openstack/barbican: Adding documentation for ACLs operations.  https://review.openstack.org/17847917:19
Asharoot@barbican-automation ~]# curl -H 'Accept:application/octet-stream'  -H "X-Auth-Token:ddabc8dacc5a450999b734d347d31648" -k https://169.53.235.102:9311/v1/secrets/0d269674-a6a5-4040-97aa-a109638d04ed/payload X▒▒▒5:<O8▒FD0b▒▒z▒E▒▒V▒]▒[root@barbican-automation ~]#17:19
AshaI would like to know if the following response has been decrypted by Barbican17:19
*** zz_dimtruck is now known as dimtruck17:20
AshaAny help would highly be appreicated17:20
arunkantwoodster_, alee, redrobot, kfarr: Updated ACL docs and code review CR. Can you review it. Thanks for comments on doc CR so far. Will be good to have similar attention on code change CR as well.17:24
*** nkinder_ has joined #openstack-barbican17:25
*** nkinder__ has quit IRC17:29
*** dimtruck is now known as zz_dimtruck17:29
*** nkinder_ has quit IRC17:31
openstackgerritSteve Heyman proposed openstack/barbican: Complete RBAC tests for containers  https://review.openstack.org/18641017:36
*** tkelsey has joined #openstack-barbican17:37
hockeynutchellygel redrobot jvrbanac reaperhulk dave-mccowan alee would y'all be so kind as to look at the above CR?  Also the secret RBAC CR -  https://review.openstack.org/#/c/186149/17:37
*** tkelsey has quit IRC17:41
*** nkinder_ has joined #openstack-barbican17:43
*** zz_dimtruck is now known as dimtruck17:43
*** stanzi has joined #openstack-barbican17:45
samueldmqredrobot ping, did you see woodster_ 's message earlier ?17:49
samueldmqredrobot, I am trying to see if this bug is valid on barbican side https://bugs.launchpad.net/barbican/+bug/145894517:50
openstackLaunchpad bug 1458945 in murano "Use graduated oslo.policy instead of oslo-incubator code" [High,Confirmed] - Assigned to Ekaterina Chernova (efedorova)17:50
*** stanzi has quit IRC17:50
*** stanzi has joined #openstack-barbican17:53
*** stanzi has quit IRC17:55
*** stanzi has joined #openstack-barbican17:56
aleeredrobot, hey - you mentioned something about running barbican as an apache module?17:59
aleeredrobot, you have code to deploy like that>17:59
alee?17:59
*** SheenaG has quit IRC18:05
*** Kevin_Bishop has quit IRC18:07
*** openstackgerrit has quit IRC18:09
*** openstackgerrit has joined #openstack-barbican18:10
*** stanzi has quit IRC18:10
aleearunkant, ping18:13
aleearunkant, are you guys running barbican as an apache module?18:13
arunkantalee, Yes, we tried last year..but now will be working on it again as barbican needs to be added in internally in HP18:16
aleearunkant, I'm looking on doing it too for rdo.  Do you have any code/config on how you set it up?18:17
arunkantActually there is a wiki around it. https://github.com/cloudkeep/barbican/wiki/Integration-with-Apache218:18
aleearunkant, cool - thanks!18:19
*** rellerreller has joined #openstack-barbican18:22
*** Kevin_Bishop has joined #openstack-barbican18:22
openstackgerritKevin Bishop proposed openstack/barbican: Centralize Barbican API Config  https://review.openstack.org/18729718:26
*** kebray has quit IRC18:40
*** nelsnelson has joined #openstack-barbican18:41
*** nelsnelson has quit IRC18:41
*** nelsnelson has joined #openstack-barbican18:42
openstackgerritSteve Heyman proposed openstack/barbican: Complete RBAC tests for secrets  https://review.openstack.org/18614918:42
hockeynutthanks for your comments dave-mccowan - updates are up18:42
*** openstackgerrit has quit IRC18:56
*** openstackgerrit has joined #openstack-barbican18:56
*** pglass has quit IRC19:00
redrobotsamueldmq we migrated to oslo_policy during the kilo cycle http://git.openstack.org/cgit/openstack/barbican/commit/?id=077fce673d45f2b5ed0681fe5665961ff840b34119:01
samueldmqredrobot, could you makrk that as 'fix released' ?19:02
*** rellerreller has quit IRC19:02
samueldmqredrobot, in this bug report : https://bugs.launchpad.net/barbican/+bug/145894519:03
openstackLaunchpad bug 1458945 in murano "Use graduated oslo.policy instead of oslo-incubator code" [High,Confirmed] - Assigned to Ekaterina Chernova (efedorova)19:03
*** stanzi has joined #openstack-barbican19:03
redrobotsamueldmq trying to...  Launchpad keeps timing out on me :-\19:03
samueldmqredrobot, it's doing that with us :/ sorry19:03
samueldmqredrobot, I'd appreciate if you can try it again later :)19:04
redrobotsamueldmq will do!19:04
samueldmqredrobot, great thanks19:04
*** pglass has joined #openstack-barbican19:05
*** stanzi has quit IRC19:07
*** stanzi has joined #openstack-barbican19:08
*** kebray has joined #openstack-barbican19:08
*** xaeth is now known as xaeth_afk19:10
*** SheenaG has joined #openstack-barbican19:17
*** xaeth_afk is now known as xaeth19:20
*** gyee has quit IRC19:21
*** Asha has quit IRC19:23
*** tkelsey has joined #openstack-barbican19:38
*** tkelsey has quit IRC19:42
*** xaeth is now known as xaeth_afk19:50
*** kfarr has quit IRC19:56
*** xaeth_afk is now known as xaeth19:57
*** rellerreller has joined #openstack-barbican19:58
*** stanzi has quit IRC19:59
aleeredrobot, do we have any puppet modules to deploy barbican?20:00
*** samueldmq has quit IRC20:05
openstackgerritDave McCowan proposed openstack/barbican-specs: Add Quota support for Barbican resources  https://review.openstack.org/18656220:07
openstackgerritKevin Bishop proposed openstack/barbican: Centralize Barbican API Config  https://review.openstack.org/18729720:08
*** rellerreller has quit IRC20:09
*** openstackgerrit has quit IRC20:10
*** openstackgerrit has joined #openstack-barbican20:10
*** kebray has quit IRC20:16
*** stanzi has joined #openstack-barbican20:22
redrobotalee none that I'm aware of.20:33
aleeredrobot, ok thanks20:33
*** operator99 is now known as gyee20:39
*** ryanpetrello has joined #openstack-barbican20:42
*** dimtruck is now known as zz_dimtruck20:45
*** Kevin_Bishop has quit IRC20:46
*** stanzi has quit IRC20:46
*** stanzi has joined #openstack-barbican20:47
*** gyee has quit IRC20:53
*** gyee has joined #openstack-barbican20:53
*** zz_dimtruck is now known as dimtruck20:57
*** dimtruck is now known as zz_dimtruck20:58
*** zz_dimtruck is now known as dimtruck20:59
*** dimtruck is now known as zz_dimtruck21:02
*** zz_dimtruck is now known as dimtruck21:02
*** shakamunyi_ has joined #openstack-barbican21:03
*** shakamunyi__ has joined #openstack-barbican21:04
*** shakamunyi__ is now known as tylerdurden21:05
*** tylerdurden has quit IRC21:08
*** shakamunyi_ has quit IRC21:08
*** SheenaG has quit IRC21:13
*** SheenaG has joined #openstack-barbican21:16
*** stanzi has quit IRC21:36
openstackgerritDave McCowan proposed openstack/barbican-specs: Add Quota support for Barbican resources  https://review.openstack.org/18656221:38
*** nkinder_ has quit IRC21:44
*** silos has left #openstack-barbican21:46
dave-mccowanhockeynut, chellygel, arunkant here are some new functional tests for ACLs that need to be reviewed.  https://review.openstack.org/#/c/181291/21:48
*** igueths has quit IRC21:48
*** pglass has quit IRC21:54
*** chadlung has joined #openstack-barbican21:56
*** alee has quit IRC21:58
arunkantdave-mccowan: Are these  tested based on current ACL apis or the one based on changes I am working on (https://review.openstack.org//#/c/180888/) ?22:06
*** silos has joined #openstack-barbican22:09
*** silos has left #openstack-barbican22:09
*** xaeth is now known as xaeth_afk22:10
*** kebray has joined #openstack-barbican22:18
openstackgerritMerged openstack/barbican: Fix cert tasks not being scheduled for retry  https://review.openstack.org/18742822:20
*** chadlung has quit IRC22:25
dave-mccowanarunkant  it's based on the old code.   the functional tests would be useful to test your changes.  either i should rebase on top of your CR, or you should rebase on top of mine.22:25
*** dimtruck is now known as zz_dimtruck23:03
*** tkelsey has joined #openstack-barbican23:04
*** kebray has quit IRC23:05
*** chadlung has joined #openstack-barbican23:08
*** tkelsey has quit IRC23:09
*** nelsnelson has quit IRC23:22
*** chlong has joined #openstack-barbican23:23
*** stanzi has joined #openstack-barbican23:32
*** stanzi has quit IRC23:33
*** alee has joined #openstack-barbican23:40
*** nelsnelson has joined #openstack-barbican23:43
*** barra204 has quit IRC23:57
*** shakamunyi has quit IRC23:57
*** SheenaG has quit IRC23:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!