| openstackgerrit | Arun Kant proposed openstack/barbican-specs: Spec for adding audit capability using CADF specification. https://review.openstack.org/159938 | 00:02 |
|---|---|---|
| *** chadlung has joined #openstack-barbican | 00:12 | |
| *** dave-mccowan has quit IRC | 00:14 | |
| *** chadlung has quit IRC | 00:16 | |
| *** kfox1111 has quit IRC | 00:19 | |
| *** kfox1111 has joined #openstack-barbican | 00:19 | |
| *** arunkant__ has joined #openstack-barbican | 00:20 | |
| *** arunkant_ has quit IRC | 00:23 | |
| *** chadlung has joined #openstack-barbican | 00:26 | |
| *** darrenmoffat has quit IRC | 00:27 | |
| *** darrenmoffat has joined #openstack-barbican | 00:28 | |
| *** jamielennox|away is now known as jamielennox | 00:29 | |
| *** chadlung has quit IRC | 00:31 | |
| *** zz_dimtruck is now known as dimtruck | 00:39 | |
| *** kfox1111 has quit IRC | 00:39 | |
| *** nelsnelson has quit IRC | 00:44 | |
| *** SheenaG has quit IRC | 00:45 | |
| *** SheenaG has joined #openstack-barbican | 01:09 | |
| *** stanzi has joined #openstack-barbican | 01:09 | |
| *** stanzi has quit IRC | 01:10 | |
| *** stanzi has joined #openstack-barbican | 01:11 | |
| *** stanzi has quit IRC | 01:16 | |
| *** chadlung has joined #openstack-barbican | 01:22 | |
| *** stanzi has joined #openstack-barbican | 01:41 | |
| *** stanzi has quit IRC | 01:43 | |
| *** stanzi has joined #openstack-barbican | 01:43 | |
| *** stanzi has quit IRC | 01:48 | |
| *** SheenaG has quit IRC | 01:51 | |
| *** stanzi has joined #openstack-barbican | 02:14 | |
| *** SheenaG has joined #openstack-barbican | 02:17 | |
| *** stanzi has quit IRC | 02:23 | |
| *** kebray has joined #openstack-barbican | 02:31 | |
| *** kebray has quit IRC | 02:32 | |
| *** kebray has joined #openstack-barbican | 02:33 | |
| *** SheenaG has quit IRC | 02:37 | |
| *** kebray has quit IRC | 02:39 | |
| *** kebray has joined #openstack-barbican | 02:45 | |
| *** diazjf has joined #openstack-barbican | 02:47 | |
| *** dave-mccowan has joined #openstack-barbican | 02:47 | |
| *** nkinder has quit IRC | 03:06 | |
| *** nkinder has joined #openstack-barbican | 03:19 | |
| *** dave-mccowan has quit IRC | 03:33 | |
| *** nkinder has quit IRC | 03:43 | |
| *** nkinder has joined #openstack-barbican | 03:52 | |
| *** stanzi has joined #openstack-barbican | 03:54 | |
| *** stanzi has quit IRC | 03:59 | |
| *** dimtruck is now known as zz_dimtruck | 04:11 | |
| *** zz_dimtruck is now known as dimtruck | 05:11 | |
| *** woodster_ has quit IRC | 05:21 | |
| *** dimtruck is now known as zz_dimtruck | 05:22 | |
| *** arunkant_ has joined #openstack-barbican | 05:28 | |
| *** arunkant__ has quit IRC | 05:32 | |
| *** kebray has quit IRC | 05:35 | |
| *** diazjf has quit IRC | 05:42 | |
| *** arunkant__ has joined #openstack-barbican | 06:18 | |
| *** arunkant_ has quit IRC | 06:20 | |
| *** jaosorior has joined #openstack-barbican | 07:45 | |
| *** chlong has quit IRC | 07:48 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Stanardized Functional Tests https://review.openstack.org/193099 | 08:43 |
| openstackgerrit | Merged openstack/barbican: Updated from global requirements https://review.openstack.org/194317 | 08:45 |
| openstackgerrit | Merged openstack/python-barbicanclient: Updated from global requirements https://review.openstack.org/194018 | 09:00 |
| *** shohel has joined #openstack-barbican | 10:08 | |
| *** tkelsey has joined #openstack-barbican | 10:30 | |
| *** arunkant_ has joined #openstack-barbican | 10:34 | |
| *** arunkant__ has quit IRC | 10:39 | |
| *** jamielennox is now known as jamielennox|away | 11:00 | |
| jaosorior | tkelsey: hello mr. | 11:30 |
| *** SheenaG has joined #openstack-barbican | 11:32 | |
| *** zz_dimtruck is now known as dimtruck | 12:02 | |
| *** dimtruck is now known as zz_dimtruck | 12:11 | |
| *** woodster_ has joined #openstack-barbican | 12:25 | |
| *** chlong has joined #openstack-barbican | 12:31 | |
| jaosorior | woodster_: ping | 12:33 |
| *** dave-mccowan has joined #openstack-barbican | 12:42 | |
| woodster_ | jaosorior: morning (well, over here) | 12:43 |
| jaosorior | woodster_: haha afternoon here, how's stuff mr.? | 12:45 |
| woodster_ | jaosorior: a little crazy over here, how are things over there? Hopefully enjoying the nice summer weather over there | 12:47 |
| jaosorior | woodster_: Just a quick one here. I put up the next step for the remove-project-secret-assoc blueprint https://review.openstack.org/#/c/194283/ which basically removes all the transitional code. Do you think the migration script that actually removes the project-secret table should be there too? I didn't add it there cause I thought the commit would get too | 12:47 |
| jaosorior | big | 12:47 |
| jaosorior | woodster_: Summer's here man! Finally! Took a while but we finally have some warm weather up here. Nice sun, festival season started. Life is good hehe | 12:47 |
| woodster_ | jaosorior: I hadn't noticed this CR: https://review.openstack.org/#/c/194157/ | 12:56 |
| jaosorior | woodster_: yeah, that just adds the project_id reference where it's needed. | 12:56 |
| jaosorior | woodster_: So now the transitional code can be removed. And finally the whole table itself. Now it's just a matter of, should I add the migration script to remove that table in a separate CR or should it be with the removal of the transitional code | 12:57 |
| zigo | What's the normal endpoint definition for a Barbican setup? | 13:02 |
| zigo | jaosorior: woodster_: Can one of you do: "keystone service-list" and "keystone endpoint-list" for me and show me the result for barbican? | 13:03 |
| zigo | FYI, I'm hard-wireing this into the Debian package of Barbican. | 13:03 |
| redrobot | zigo http://git.openstack.org/cgit/openstack/barbican/tree/bin/keystone_data.sh#n177 | 13:03 |
| zigo | I need the endpoint URI, and the service type. | 13:03 |
| zigo | Ok, so just / as URI. | 13:04 |
| zigo | And key-manager as service type. | 13:04 |
| zigo | redrobot: Thanks! | 13:04 |
| zigo | FWIW, I don't really like "manager" in the type, because everything could be a manager. | 13:05 |
| jaosorior | zigo: http://pastebin.com/fyyu1MYi | 13:07 |
| jaosorior | aaah, too late haha | 13:07 |
| woodster_ | jaosorior: adding that migration script shouldn't add too many lines to that cr | 13:07 |
| jaosorior | woodster_: OK, I'll add it there then | 13:08 |
| woodster_ | jaosorior: april is festival season here, lot of fun. Too bad we can't do midcycles then :) | 13:17 |
| *** openstack has quit IRC | 13:17 | |
| *** openstack has joined #openstack-barbican | 13:17 | |
| zigo | And how to do a db sync? | 13:23 |
| zigo | What's the normal syntax? | 13:23 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Remove ProjectSecret table-related code https://review.openstack.org/194283 | 13:23 |
| zigo | barbican-db-manage sync ? | 13:23 |
| zigo | jaosorior: ^ | 13:23 |
| jaosorior | zigo: $ bin/barbican-db-manage.py --dburl postgresql+psycopg2://<postgres_user>:<postgrespassword>@<your_host>/barbican upgrade | 13:25 |
| jaosorior | ooor whatever database url you need | 13:25 |
| zigo | jaosorior: Can't it just take whatever is in the config file? | 13:25 |
| zigo | jaosorior: Something like --config-file= ? | 13:25 |
| jaosorior | zigo: basically if you're installing from scratch, you don't need to do anything. It will do the sync for you. But if there's a migration you need to run something of the sort | 13:25 |
| jaosorior | zigo: Enabling was at some point in my mental todo-list | 13:26 |
| jaosorior | buuut that mental todo list might have been corrupted by all the partying that has been going on lately because of the summer festivals haha :P | 13:26 |
| zigo | jaosorior: The thing is, in Debian, it is possible to do the dbsync in the postinst of the package, after the URL is setup in the config file. | 13:26 |
| zigo | Which is why I ask. | 13:26 |
| zigo | jaosorior: So, in the case of Barbican, I shouldn't even bother? | 13:26 |
| jaosorior | uhm... | 13:27 |
| jaosorior | is the postinst called also for upgrades of debian packages? | 13:27 |
| zigo | Yup. | 13:27 |
| jaosorior | my debian packaging knowledge is super rusty now... | 13:27 |
| zigo | Basically, I do: | 13:27 |
| jaosorior | uhm... then you need that option | 13:27 |
| zigo | db_get barbican/configure_db | 13:27 |
| zigo | if [ "$RET" = "true" ]; then | 13:27 |
| zigo | echo "Now calling barbican-db-manage sync: this may take a while..." | 13:27 |
| zigo | su -s /bin/sh -c 'barbican-db-manage sync' barbican | 13:27 |
| zigo | fi | 13:27 |
| jaosorior | are you up for coding it or can you wait? | 13:27 |
| zigo | I can wait, and comment out the sync. | 13:28 |
| jaosorior | zigo: yeah, please do. I'll upload a patch...at some point tomorrow or the day after tomorrow | 13:29 |
| zigo | BTW, only the API needs db access, or what? | 13:29 |
| zigo | Same with rabbit and keystone auth_token? | 13:29 |
| jaosorior | the worker nodes will too | 13:29 |
| zigo | Why is it in the barbican-api.conf then? | 13:29 |
| zigo | Why not having just a barbican.conf ? | 13:29 |
| jaosorior | zigo: https://review.openstack.org/#/c/189434/ | 13:30 |
| zigo | Oh, very good ! :) | 13:30 |
| zigo | In the mean while, I'll have to deal with current state of things in Kilo (I wont package trunk just yet). | 13:30 |
| jaosorior | zigo: well, that commit basically just needs a workflow to get merged | 13:30 |
| zigo | So, should the workers also have --config-file=/etc/barbican/barbican-api.conf as parameter when starting? | 13:31 |
| jaosorior | well... they would be using the same config file as far as I know | 13:32 |
| jaosorior | woodster_ would know better | 13:32 |
| zigo | Ok, will do that then. | 13:33 |
| jaosorior | anyway, I'll be off in half an hour, but tomorrow I'll start working on adding that config option to the db-manage script | 13:33 |
| zigo | Cool. | 13:35 |
| zigo | jaosorior: I may use my own backport of that patch to Kilo then. Please add me (ie: "Thomas Goirand") to the review when done. | 13:35 |
| jaosorior | sure | 13:36 |
| jaosorior | zigo: uh... I think it is gonna be easier than I thought | 13:44 |
| jaosorior | zigo: I got it working in such a way that it will use the same config file as barbican | 13:44 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Make db-manage script use same config file as barbican https://review.openstack.org/194665 | 13:46 |
| jaosorior | zigo: ^^ | 13:46 |
| zigo | Cool ! | 13:46 |
| * zigo goes to have a look. | 13:47 | |
| zigo | jorge_munoz: Do I need to specify --config-file= or what? | 13:47 |
| jaosorior | zigo: wrong user, hahaha, jorge_munoz is also a mexican, so close call :P | 13:48 |
| zigo | Oh, sorry. | 13:48 |
| zigo | Bad auto-completion ! :) | 13:48 |
| jaosorior | well, you don't, it will just use the default config file it was using before | 13:49 |
| jaosorior | if you want that I could add it quickly | 13:49 |
| jaosorior | let me check | 13:49 |
| jaosorior | I have like 20 minutes I think before I can't code anymore haha | 13:49 |
| zigo | jaosorior: I just want it to take whatever is in /etc/barbican/barbican-api.conf, in a way or another. If you tell me it does that by default without any option in the command line, then perfect! | 13:49 |
| woodster_ | jaosorior: we really need to have that script read the db url from that config file by default...I'll add a paper cut for that | 13:50 |
| *** SheenaG has quit IRC | 13:50 | |
| jaosorior | woodster_: That was added in this CR https://review.openstack.org/194665 | 13:51 |
| jaosorior | zigo: And since we are using oslo_config, in theory it should be possible to use --config-file.... But for some reason it's not happening, gotta check on that | 13:53 |
| *** SheenaG has joined #openstack-barbican | 13:53 | |
| *** Kevin_Bishop has joined #openstack-barbican | 13:54 | |
| *** shohel has quit IRC | 13:55 | |
| *** shohel has joined #openstack-barbican | 13:55 | |
| zigo | Is this correct, then? | 13:56 |
| zigo | su -s /bin/sh -c 'barbican-db-manage sync' barbican | 13:56 |
| *** stanzi has joined #openstack-barbican | 13:56 | |
| jaosorior | zigo: s/sync/upgrade | 13:56 |
| zigo | Ok. | 13:57 |
| openstackgerrit | Merged openstack/barbican-specs: Spec for adding audit capability using CADF specification. https://review.openstack.org/159938 | 13:59 |
| *** pglass has joined #openstack-barbican | 14:00 | |
| *** pglass has quit IRC | 14:09 | |
| *** pglass has joined #openstack-barbican | 14:09 | |
| *** zz_dimtruck is now known as dimtruck | 14:13 | |
| woodster_ | arunkant_: ^^^^ | 14:15 |
| arunkant_ | woodster_ : Thanks for taking care of this. | 14:17 |
| hockeynut | chellygel is looking at adding orders our paging functional tests but it appears that we have a problem since orders don't have names, and the paging tests depend on naming for separation. Have we ever considered adding names to orders? woodster_ ? redrobot ? | 14:18 |
| woodster_ | arunkant_: thanks for the patience :) | 14:18 |
| jaosorior | zigo: but anyway, at the moment it will just use the default config file from barbican. If you really need the config-file/config-dir options let me know and I can add those there | 14:20 |
| jaosorior | and by at the moment, I mean with that CR I put up | 14:22 |
| *** stanzi has quit IRC | 14:24 | |
| *** stanzi has joined #openstack-barbican | 14:25 | |
| woodster_ | hockeynut: order names don't seem natural to me as they are just work/job tracking entities. You could instead provide metadata to the order that you would then see in the orders list | 14:25 |
| hockeynut | woodster_ we would then have to add the ability to filter on that data when we do paging requests (GET /orders with limit, offset) | 14:26 |
| zigo | jaosorior: I've build version 2015.1.0-6 of barbican, and now I'm currently testing it. I'll let you know if I fail to install it. | 14:26 |
| *** kfarr has joined #openstack-barbican | 14:27 | |
| woodster_ | hockeynut: is this to support concurrent paged tests? | 14:27 |
| hockeynut | woodster_ yessir | 14:27 |
| *** stanzi has quit IRC | 14:29 | |
| jaosorior | zigo: I gotta go though :/ But if something happens I could take a look at it tomorrow | 14:30 |
| zigo | Sure ! :) | 14:30 |
| *** Kevin_Bishop has quit IRC | 14:30 | |
| hockeynut | chellygel might be good to split up the CR and do orders in a new CR. | 14:32 |
| *** stanzi has joined #openstack-barbican | 14:39 | |
| hockeynut | woodster_ I'm trying out meta - that may do the trick | 14:42 |
| *** stanzi has quit IRC | 14:43 | |
| kfarr | Hey everyone, there's a new Homewood Suites being built within walking distance of APL, and I just realized this morning that they'll be taking reservations for dates after July 10 (in time for our meet-up!) Here's the link in case you want to make a reservation: http://homewoodsuites3.hilton.com/en/hotels/maryland/homewood-suites-by-hilton-columbia-laurel-BALCMHW/attractions/index.html | 14:46 |
| *** mariojv- is now known as mariojv | 14:55 | |
| hockeynut | kfarr we are at a Homewood at 8320 Benson Drive, Columbia, Maryland - I might look at that one too. thx! | 14:58 |
| kfarr | hockeynut, I'm talking to someone at APL's travel department, and it sounds like they haven't confirmed yet that the new hotel will honor per diem rates. I'll keep watching it, but it's still kind of up in the air | 15:01 |
| kfarr | Just thought I'd throw out that option, just in case :D | 15:01 |
| hockeynut | kfarr cool, thanks. We got $102/nite at the Homewood I mentioned above | 15:02 |
| *** kfarr1 has joined #openstack-barbican | 15:03 | |
| *** kfarr1 has left #openstack-barbican | 15:04 | |
| *** kfarr_ has joined #openstack-barbican | 15:04 | |
| *** kfarr has quit IRC | 15:06 | |
| *** kfarr has joined #openstack-barbican | 15:10 | |
| *** kfarr has left #openstack-barbican | 15:10 | |
| *** diazjf has joined #openstack-barbican | 15:11 | |
| *** ccneill has joined #openstack-barbican | 15:13 | |
| *** kfox1111 has joined #openstack-barbican | 15:31 | |
| *** dimtruck is now known as zz_dimtruck | 15:36 | |
| *** zz_dimtruck is now known as dimtruck | 15:42 | |
| kfox1111 | redrobot: I made some changes to the instance user spec, including the suggestion you made to have barbican simply store the key rather then put it in the db. Can you please have a look? | 15:43 |
| *** mariojv has left #openstack-barbican | 15:51 | |
| *** stanzi has joined #openstack-barbican | 15:58 | |
| *** kebray has joined #openstack-barbican | 16:06 | |
| *** stanzi has quit IRC | 16:24 | |
| *** stanzi has joined #openstack-barbican | 16:25 | |
| *** stanzi has quit IRC | 16:29 | |
| *** kebray has quit IRC | 16:39 | |
| *** chlong has quit IRC | 16:39 | |
| *** kebray has joined #openstack-barbican | 16:44 | |
| *** SheenaG has quit IRC | 16:47 | |
| *** SheenaG has joined #openstack-barbican | 16:58 | |
| *** dontalton has joined #openstack-barbican | 17:01 | |
| *** kfarr has joined #openstack-barbican | 17:03 | |
| *** jaosorior has quit IRC | 17:05 | |
| *** shohel has quit IRC | 17:09 | |
| *** stanzi has joined #openstack-barbican | 17:25 | |
| *** stanzi has quit IRC | 17:30 | |
| *** gyee_ has quit IRC | 17:33 | |
| *** nkinder has quit IRC | 17:34 | |
| *** gyee has joined #openstack-barbican | 17:36 | |
| *** shohel has joined #openstack-barbican | 17:42 | |
| *** shohel has quit IRC | 17:48 | |
| *** ccneill has quit IRC | 17:55 | |
| *** ccneill has joined #openstack-barbican | 17:57 | |
| *** shohel has joined #openstack-barbican | 18:02 | |
| *** silos has joined #openstack-barbican | 18:06 | |
| *** stanzi has joined #openstack-barbican | 18:07 | |
| *** stanzi has quit IRC | 18:13 | |
| *** stanzi has joined #openstack-barbican | 18:14 | |
| *** stanzi has quit IRC | 18:18 | |
| *** tkelsey has quit IRC | 18:29 | |
| *** shohel1 has joined #openstack-barbican | 18:29 | |
| *** shohel has quit IRC | 18:31 | |
| *** ryanpetrello has quit IRC | 18:37 | |
| *** SheenaG has quit IRC | 18:45 | |
| *** SheenaG has joined #openstack-barbican | 18:51 | |
| *** kfarr_ has quit IRC | 18:55 | |
| *** stanzi has joined #openstack-barbican | 18:56 | |
| *** kfarr has quit IRC | 18:58 | |
| *** pglbutt has joined #openstack-barbican | 19:04 | |
| *** pglass has quit IRC | 19:05 | |
| *** kfarr has joined #openstack-barbican | 19:18 | |
| *** openstackgerrit has quit IRC | 19:21 | |
| *** openstackgerrit has joined #openstack-barbican | 19:22 | |
| *** ryanpetrello has joined #openstack-barbican | 19:24 | |
| *** stanzi has quit IRC | 19:49 | |
| *** stanzi has joined #openstack-barbican | 19:49 | |
| *** stanzi has quit IRC | 19:54 | |
| *** ccneill has quit IRC | 20:01 | |
| *** greghaynes has quit IRC | 20:08 | |
| *** kfarr has quit IRC | 20:14 | |
| *** ryanpetrello has quit IRC | 20:14 | |
| *** ryanpetrello has joined #openstack-barbican | 20:15 | |
| *** kebray has quit IRC | 20:22 | |
| *** dontalton has quit IRC | 20:32 | |
| *** dontalton has joined #openstack-barbican | 20:33 | |
| *** ccneill has joined #openstack-barbican | 20:41 | |
| *** silos has left #openstack-barbican | 20:41 | |
| *** rm_work is now known as rm_work|away | 20:42 | |
| *** dimtruck is now known as zz_dimtruck | 20:46 | |
| *** kebray has joined #openstack-barbican | 20:46 | |
| *** zz_dimtruck is now known as dimtruck | 20:52 | |
| *** ccneill_ has joined #openstack-barbican | 20:53 | |
| *** ccneill has quit IRC | 20:53 | |
| *** ccneill_ is now known as ccneill | 20:53 | |
| *** kfarr has joined #openstack-barbican | 20:55 | |
| *** tkelsey has joined #openstack-barbican | 21:06 | |
| *** arunkant__ has joined #openstack-barbican | 21:07 | |
| *** kfarr has quit IRC | 21:08 | |
| *** tkelsey has quit IRC | 21:10 | |
| *** arunkant_ has quit IRC | 21:10 | |
| *** shohel1 has quit IRC | 21:11 | |
| *** kebray has quit IRC | 21:11 | |
| *** SheenaG has quit IRC | 21:15 | |
| *** rm_work|away is now known as rm_work | 21:15 | |
| *** ccneill_ has joined #openstack-barbican | 21:21 | |
| *** ccneill has quit IRC | 21:21 | |
| *** diazjf has quit IRC | 21:25 | |
| *** SheenaG has joined #openstack-barbican | 21:26 | |
| *** kebray has joined #openstack-barbican | 21:26 | |
| *** arunkant_ has joined #openstack-barbican | 21:27 | |
| *** arunkant__ has quit IRC | 21:30 | |
| *** pglbutt has quit IRC | 21:33 | |
| *** pglass has joined #openstack-barbican | 21:34 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/194830 | 21:41 |
| *** kfarr has joined #openstack-barbican | 21:42 | |
| *** kfarr has quit IRC | 21:48 | |
| *** ccneill_ has quit IRC | 21:54 | |
| *** ccneill_ has joined #openstack-barbican | 21:54 | |
| *** pglass has quit IRC | 22:00 | |
| *** kebray has quit IRC | 22:05 | |
| *** dontalton2 has joined #openstack-barbican | 22:19 | |
| *** gyee has quit IRC | 22:23 | |
| *** gyee has joined #openstack-barbican | 22:27 | |
| *** SheenaG has quit IRC | 22:41 | |
| *** SheenaG has joined #openstack-barbican | 22:49 | |
| *** dimtruck is now known as zz_dimtruck | 23:02 | |
| *** kebray has joined #openstack-barbican | 23:03 | |
| *** kebray has quit IRC | 23:04 | |
| *** zz_dimtruck is now known as dimtruck | 23:05 | |
| *** SheenaG has quit IRC | 23:09 | |
| *** kebray has joined #openstack-barbican | 23:10 | |
| *** kebray has quit IRC | 23:10 | |
| *** kebray has joined #openstack-barbican | 23:11 | |
| *** dontalton2 has quit IRC | 23:16 | |
| *** dontalton has quit IRC | 23:16 | |
| *** dimtruck is now known as zz_dimtruck | 23:37 | |
| *** kfarr has joined #openstack-barbican | 23:47 | |
| *** ccneill_ has quit IRC | 23:48 | |
| *** chlong has joined #openstack-barbican | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!