Monday, 2015-07-20

*** chlong has joined #openstack-barbican00:20
*** nkinder has quit IRC00:32
*** nkinder has joined #openstack-barbican00:35
*** zz_dimtruck is now known as dimtruck00:38
*** pglass has quit IRC00:58
*** SheenaG has joined #openstack-barbican02:05
*** dimtruck is now known as zz_dimtruck02:07
*** SheenaG has quit IRC02:25
*** dave-mccowan has joined #openstack-barbican02:35
*** nelsnelson has quit IRC02:44
*** dave-mccowan has quit IRC03:11
*** nelsnelson has joined #openstack-barbican03:11
*** zz_dimtruck is now known as dimtruck03:17
*** dimtruck is now known as zz_dimtruck04:36
*** briancurtin has quit IRC04:58
*** briancurtin has joined #openstack-barbican04:59
*** Nirupama has joined #openstack-barbican05:16
*** kebray has quit IRC05:25
*** chlong has quit IRC05:27
*** lisaclark_ has quit IRC05:34
*** h00327910_ has quit IRC05:36
*** briancurtin has quit IRC05:36
*** lisaclark_ has joined #openstack-barbican05:38
*** chlong has joined #openstack-barbican05:40
*** briancurtin has joined #openstack-barbican05:44
*** h00327910_ has joined #openstack-barbican05:48
*** shohel has joined #openstack-barbican05:59
*** chlong has quit IRC06:20
*** chlong has joined #openstack-barbican06:36
*** lisaclark_ has quit IRC07:31
*** chlong has quit IRC07:34
*** lisaclark_ has joined #openstack-barbican07:43
*** nelsnelson has quit IRC07:50
*** everjeje has joined #openstack-barbican08:28
*** tkelsey has joined #openstack-barbican08:41
*** mmdurrant has quit IRC10:09
*** nickrmc83 has joined #openstack-barbican10:48
*** dave-mccowan has joined #openstack-barbican11:06
*** ig0r_ has joined #openstack-barbican11:08
*** everjeje has quit IRC11:38
*** mmdurrant has joined #openstack-barbican11:59
*** woodster_ has joined #openstack-barbican12:01
*** ig0r_ has quit IRC12:05
*** Nirupama has quit IRC12:11
*** kfarr has joined #openstack-barbican12:27
*** SheenaG has joined #openstack-barbican12:30
*** chlong has joined #openstack-barbican12:35
*** dave-mccowan has quit IRC12:48
*** alee has quit IRC12:49
*** darrenmoffat has quit IRC13:39
*** alee has joined #openstack-barbican13:39
*** darrenmoffat has joined #openstack-barbican13:39
*** nickrmc83 has quit IRC14:06
*** nickrmc83 has joined #openstack-barbican14:07
*** pglass has joined #openstack-barbican14:07
*** xaeth_afk is now known as xaeth14:08
*** Kevin_Bishop has joined #openstack-barbican14:14
*** rellerreller has joined #openstack-barbican14:15
*** zz_dimtruck is now known as dimtruck14:21
*** kfarr has quit IRC14:24
*** kfarr has joined #openstack-barbican14:25
*** dave-mccowan has joined #openstack-barbican14:26
*** xaeth is now known as xaeth_afk14:27
*** spotz_zzz is now known as spotz14:29
*** xaeth_afk is now known as xaeth14:34
*** shohel has quit IRC14:36
openstackgerritDave McCowan proposed openstack/barbican-specs: Quota Blueprint: Patch to spark discussion  https://review.openstack.org/20367814:36
*** kfox1111_ has joined #openstack-barbican14:39
*** nelsnelson has joined #openstack-barbican14:40
*** xaeth is now known as xaeth_afk14:40
*** ryanpetrello has quit IRC14:42
*** rm_work|away has quit IRC14:42
*** kfarr has quit IRC14:42
*** pglass has quit IRC14:42
*** jamielennox has quit IRC14:42
*** kfox1111 has quit IRC14:42
*** kfarr has joined #openstack-barbican14:42
*** ryanpetrello has joined #openstack-barbican14:42
*** rm_work|away has joined #openstack-barbican14:42
*** jamielennox has joined #openstack-barbican14:42
*** rm_work|away is now known as rm_work14:42
*** rm_work has joined #openstack-barbican14:42
*** pglass has joined #openstack-barbican14:43
*** spotz is now known as spotz_zzz14:43
*** spotz_zzz is now known as spotz14:50
*** spotz is now known as spotz_zzz14:53
*** spotz_zzz is now known as spotz14:53
*** silos has joined #openstack-barbican14:58
*** xaeth_afk is now known as xaeth14:58
*** kebray has joined #openstack-barbican15:04
*** mikeymeitbual has quit IRC15:18
*** gyee has joined #openstack-barbican15:19
*** diazjf has joined #openstack-barbican15:24
*** jorge_munoz has quit IRC15:30
*** jorge_munoz has joined #openstack-barbican15:31
*** rellerreller has quit IRC15:33
openstackgerritMerged openstack/barbican: Add retry server and functional tests to DevStack  https://review.openstack.org/17089615:46
*** gyee has quit IRC16:11
*** gyee has joined #openstack-barbican16:15
*** nickrmc83 has quit IRC16:15
*** nickrmc83 has joined #openstack-barbican16:15
*** rellerreller has joined #openstack-barbican16:36
*** kebray has quit IRC16:43
*** silos has left #openstack-barbican16:46
*** nelsnelson has quit IRC16:52
*** mikeymeitbual has joined #openstack-barbican16:59
jkfWhat's the cut off for getting blueprints into the liberty release?16:59
*** nickrmc83 has quit IRC17:03
*** pglbutt has joined #openstack-barbican17:04
*** pglass has quit IRC17:05
openstackgerritMerged openstack/python-barbicanclient: Updated from global requirements  https://review.openstack.org/20313417:07
*** xaeth is now known as xaeth_afk17:08
*** openstackgerrit has quit IRC17:16
*** openstackgerrit has joined #openstack-barbican17:17
*** xaeth_afk is now known as xaeth17:26
*** cbader has joined #openstack-barbican17:27
*** pglbutt has quit IRC17:57
*** pglbutt has joined #openstack-barbican18:03
*** kebray has joined #openstack-barbican18:04
dave-mccowanwoodster_ hockeynut alee (anyone else) I'm looking for some design discussion on the quotas blueprint.  please add your comments to this when you get a chance: https://review.openstack.org/20367818:08
woodster_dave-mccowan: will do later this afternoon18:10
dave-mccowanwoodster_ thanks!18:11
*** arunkant has joined #openstack-barbican18:14
*** stanzi has joined #openstack-barbican18:15
*** pglbutt has quit IRC18:24
*** stanzi has quit IRC18:29
*** stanzi has joined #openstack-barbican18:30
dave-mccowanrellerreller while quotas are still fresh in your mind ^^^18:31
rellerrellerdave-mccowan I'm looking at it now :)18:32
*** tkelsey has quit IRC18:33
*** stanzi has quit IRC18:34
*** vivek-ebay has joined #openstack-barbican18:37
*** silos has joined #openstack-barbican18:37
*** SheenaG has quit IRC18:40
*** vivek-ebay has quit IRC18:51
*** vivek-ebay has joined #openstack-barbican18:57
*** pglass has joined #openstack-barbican18:57
*** SheenaG has joined #openstack-barbican18:58
aleeredrobot, ping19:05
redrobotalee pong19:06
aleeredrobot, hey - trying to build on latest master and running into -- http://www.fpaste.org/246199/37419209/19:07
aleeany thought?19:07
aleeredrobot, am I missing a version of tox?19:07
redrobotalee what python version are you running?19:08
alee(barbican27)[alee@aleeredhat barbican]$ python --version19:08
aleePython 2.7.519:08
aleeredrobot, I should be using python 3?19:08
redrobotalee no the error made it seem like you had 2.619:09
redrobot2.7 should be correct19:09
redrobottry updating both tox and PBR?19:09
aleeredrobot, yeah -- pbr did it -- thanks19:09
rm_worki've been updating tox/pbr/pip on most machines i touch now, since those three in combination have broken very badly recently19:15
aleeredrobot, rm_work -- so the build succeeded but there were failures in the py27 tests -- do you see those too?19:16
rm_workalee: heading to lunch but i'll start a build and see what happens when i get back :P19:16
aleeredrobot, rm_work -- Barbican's tox tests fail with "ImportError: No module named _bsddb"19:16
redrobotalee try deleting some .testdb directory or something like that19:17
redrobotalee it's some pbr/testtools magic that breaks often19:17
rm_workalee: oh god that again19:17
aleeredrobot, no such directory ..19:18
aleeredrobot, there is a ./.testrepository  ?19:19
chellygeldo acls subscribe to the limits & offsets that other lists do... or is it just a nice big dump?19:19
redrobotalee yeah, try rm -rf that directory19:19
redrobotchellygel nice big dump as implemented IIRC19:19
chellygelokay so then in the client i'm assuming it would make sense to just leave it as "get acl" rather than list... like secrets19:20
aleeredrobot, ok - getting further -- now any idea why tests would be failing with : barbican.plugin.interface.secret_store.SecretStorePluginsNotConfigured: No secret store plugins have been configured ??19:27
aleeredrobot, this is just running tox19:28
redrobotalee hmm... weird... maybe it's not reading the config file?19:29
aleeredrobot, which config file -- the one in ./etc/barbican/... ?19:31
aleeredrobot, why wouldn't it be?19:31
redrobotalee no idea... try copynig the barbican.conf file into your home dir?19:31
chellygelhey guys -- 20 minutes until the Barbican Meeting in #openstack-meeting-alt !19:38
chellygelif you have agenda topics, make sure you add them here: https://wiki.openstack.org/wiki/Meetings/Barbican19:39
aleeredrobot, crazily enough - that worked .. thats a little disturbing ..19:39
redrobotalee oslo.config is magic19:39
aleeredrobot, sigh ..19:40
mmdurrantCould I throw this guy on the agenda - https://bugs.launchpad.net/barbican/+bug/1475962 ?19:41
openstackLaunchpad bug 1475962 in Barbican "Default policy does not allow secrets to be deleted by non-admin creator" [Undecided,New]19:41
redrobotalee I think that the gate works because we copy the config into /etc/barbican, which is one of the magic oslo.conf directories.19:41
mmdurrantDave had responded to my concerns and I had some questions about Dave’s response and the notion of preventing users from shooting themselves in the foot.19:41
*** vivek-ebay has quit IRC19:42
chellygelsure mmdurrant , just edit the page and throw it in there for july 20th :)19:42
redrobotmmdurrant the agenda is open to anyone who wants to add items.   we can certainly answer any questions you have.19:42
aleeredrobot, yeah - but the conf should be looking in ./etc/barbican though, right?  otherwise who knows what you're testing ..19:43
*** igueths has joined #openstack-barbican19:45
woodster_alee: one benefit to working with configs outside the repo is that you can tweak them to your local dev needs, without worrying about inadvertently committing upstream.19:46
aleewoodster_, sure - thats one possible benefit -- so , is there an order of preference?  home dir, followed by /etc/barbican , followed by in-tree?19:47
woodster_I'd work with /etc first if you have access, but that is my preference really.  I don't recall in-tree working with oslo.config though, but that was 2+ years ago :)19:49
aleewoodster_, I wasn't asking about your preference as much as what the code does :)19:54
silosalee: From what I've seen when testing barbican. the code looks to the conf file in your home directory first and if it's not there then it looks to the /etc/barbican directory.19:56
woodster_alee: ha, oh so what the code *does* instead of *should do*!19:56
woodster_silos: I just verified that now19:56
mmdurrantRegarding the bug I posted, my main concern is this:  As a secret creator, I would like the ability to delete my secrets.  Thus far, the only argument for allowing only admins is an appeal to consequences - what if the user deletes an important secret?  It seems preventing the users from shooting themselves in the foot is the job of the user and the policies set by the organization and not the software.  I’m all for19:57
mmdurrantsoftware that is easy to use right and hard to use wrong, but the default policy seems to lean in the direction of hard to use right.19:57
aleesilos, woodster_ good to know -- and if neither, then it looks in-tree?19:57
aleesilos, woodster_ what if I'm downloading barbican for the first time on a fresh machine and want to do a build?19:58
silosalee: hmm I'm not really sure about that one. I've never seen what happens if both are missing.19:59
woodster_in the past that failed...it didn't use the local etc/ version. Might work now. That is one of the things that the 'bin/barbican.sh install' does20:00
*** jhfeng has joined #openstack-barbican20:00
chellygelbarbican meeting starting now! in #openstack-meeting-alt20:00
redrobotalee I don't think oslo.config ever looks in-tree20:00
rm_workalee / redrobot: i don't have a config in $HOME, but I do have one in /etc/barbican ... though it's probably super old so I can't imagine it'd work if it was being read20:15
rm_workalee: but all tox tests passed for me with no issues :/20:15
*** vivek-ebay has joined #openstack-barbican20:16
aleerm_work, yeah I probably have one in /etc/barbican that is messed up in just the right way20:16
rm_workheh20:16
*** kebray has quit IRC20:28
*** kebray has joined #openstack-barbican20:28
*** dimtruck is now known as zz_dimtruck20:29
*** vivek-ebay has quit IRC20:30
*** stanzi has joined #openstack-barbican20:31
*** stanzi_ has joined #openstack-barbican20:37
*** stanzi has quit IRC20:38
*** stanzi_ has quit IRC20:39
*** stanzi has joined #openstack-barbican20:40
woodster_alee, there were also changes to the paste configs (no admin paste anymore), and to the vassals folder (just api configs, no admin)20:41
elmikodave-mccowan, alee, hockeynut, just a follow up on the PUT/PATCH debate (because i asked around in openstack-api)20:41
aleewoodster_, ah maybe thats why mine failed.20:41
elmikothere is a difference of opinion on using PATCH, and one school says partial updates should be sent through PATCH, whereas PUT should always contain the full record20:41
elmikothe other camp is a little more stringent about only sending changeset style updates through PATCH20:42
*** rellerreller has quit IRC20:44
elmikothis https://tools.ietf.org/html/rfc6902 references the latter style of updating20:44
*** stanzi has quit IRC20:44
*** xaeth is now known as xaeth_afk20:44
dave-mccowanelmiko  cool. PATCH is definitely out of scope.  And, POST is not used.  because, if i understand it,  the URI for the PUT command matches the URI for the GET command.   did i get that right?20:45
elmikoyes20:46
elmikowe know the resource URI, so we should PUT with a full resource to update20:46
elmikobut, if you want to only send a partial resource update (ie you only want to send some of the resource back), then you might use PATCH20:47
elmikoat least, this is one school of thinking and its being reviewed as a change to the guidelines for the api-wg20:47
elmikohttps://review.openstack.org/#/c/19959720:47
elmikodave-mccowan: sadly, there isn't a clear line on this one :/20:48
dave-mccowanit's not too bad.  i'll code it as PUT only.  if i have to add POST later for some reason, there is no throw away code.20:49
elmikocool20:51
*** xaeth_afk is now known as xaeth20:52
elmikoi added a small comment on the review as well dave-mccowan20:52
dave-mccowanwho's a database expert?  i have a question about the database design for quotas.20:52
*** zz_dimtruck is now known as dimtruck20:58
arunkantchellygel: Just continuing from meeting, looks like all details agreed on acl support in barbican client is captured in July 6 meeting notes.21:03
redrobotthanks for chairing today chellygel !21:03
chellygelredrobot, of course. have fun at your conference21:04
chellygelarunkant, yes, were you planning on adding all of the support listed in client and all that21:04
arunkantchellygel, yes as per acl API available on server side21:05
chellygelokay, cool -- good to know21:05
*** silos has left #openstack-barbican21:08
openstackgerritMerged openstack/barbican: Add RBAC Functional Test for ACL Opeations  https://review.openstack.org/20069621:10
*** alee has quit IRC21:12
*** vivek-ebay has joined #openstack-barbican21:14
*** xaeth is now known as xaeth_afk21:27
*** vivek-ebay has quit IRC21:33
*** dimtruck is now known as zz_dimtruck21:39
*** zz_dimtruck is now known as dimtruck21:39
*** kfarr has quit IRC21:40
*** rellerreller has joined #openstack-barbican21:48
*** vivek-ebay has joined #openstack-barbican21:52
*** stanzi has joined #openstack-barbican21:53
openstackgerritFernando Diaz proposed openstack/python-barbicanclient: Allow Barbican Client Secret Update Functionality  https://review.openstack.org/19687621:55
*** Kevin_Bishop has quit IRC21:55
*** stanzi has quit IRC21:57
*** pglass has quit IRC22:04
*** alee has joined #openstack-barbican22:07
*** igueths has quit IRC22:10
*** rellerreller has quit IRC22:16
openstackgerritFernando Diaz proposed openstack/python-barbicanclient: Allow Barbican Client Secret Update Functionality  https://review.openstack.org/19687622:18
*** spotz is now known as spotz_zzz22:30
*** diazjf has left #openstack-barbican22:45
mmdurrantAny cores around to discuss a bug I had submitted last week regarding error response handling (https://bugs.launchpad.net/python-barbicanclient/+bug/1474479) ?22:50
openstackLaunchpad bug 1474479 in python-barbicanclient "Error message handling incorrectly accesses error response title" [Undecided,New]22:50
mmdurrantIt’s a pretty easy fix (I have it applied to my local repo) but I wanted to make sure it wasn’t functioning as intended/etc before I hauled off fixing things that aren’t broken.22:51
*** rm_work is now known as rm_work|away22:53
*** chlong has quit IRC22:54
*** bitblt has joined #openstack-barbican23:20
*** dimtruck is now known as zz_dimtruck23:26
*** yuanying has joined #openstack-barbican23:29
*** jhfeng has quit IRC23:32
redrobotmmdurrant o/23:43
mmdurrantHowdy23:44
openstackgerritDouglas Mendizábal proposed openstack/barbican: Remove docbook documentation  https://review.openstack.org/20387223:53
redrobotmmdurrant did you have questions about that barbicanclient bug?23:53
*** SheenaG has quit IRC23:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!