*** chlong has joined #openstack-barbican | 00:20 | |
*** nkinder has quit IRC | 00:32 | |
*** nkinder has joined #openstack-barbican | 00:35 | |
*** zz_dimtruck is now known as dimtruck | 00:38 | |
*** pglass has quit IRC | 00:58 | |
*** SheenaG has joined #openstack-barbican | 02:05 | |
*** dimtruck is now known as zz_dimtruck | 02:07 | |
*** SheenaG has quit IRC | 02:25 | |
*** dave-mccowan has joined #openstack-barbican | 02:35 | |
*** nelsnelson has quit IRC | 02:44 | |
*** dave-mccowan has quit IRC | 03:11 | |
*** nelsnelson has joined #openstack-barbican | 03:11 | |
*** zz_dimtruck is now known as dimtruck | 03:17 | |
*** dimtruck is now known as zz_dimtruck | 04:36 | |
*** briancurtin has quit IRC | 04:58 | |
*** briancurtin has joined #openstack-barbican | 04:59 | |
*** Nirupama has joined #openstack-barbican | 05:16 | |
*** kebray has quit IRC | 05:25 | |
*** chlong has quit IRC | 05:27 | |
*** lisaclark_ has quit IRC | 05:34 | |
*** h00327910_ has quit IRC | 05:36 | |
*** briancurtin has quit IRC | 05:36 | |
*** lisaclark_ has joined #openstack-barbican | 05:38 | |
*** chlong has joined #openstack-barbican | 05:40 | |
*** briancurtin has joined #openstack-barbican | 05:44 | |
*** h00327910_ has joined #openstack-barbican | 05:48 | |
*** shohel has joined #openstack-barbican | 05:59 | |
*** chlong has quit IRC | 06:20 | |
*** chlong has joined #openstack-barbican | 06:36 | |
*** lisaclark_ has quit IRC | 07:31 | |
*** chlong has quit IRC | 07:34 | |
*** lisaclark_ has joined #openstack-barbican | 07:43 | |
*** nelsnelson has quit IRC | 07:50 | |
*** everjeje has joined #openstack-barbican | 08:28 | |
*** tkelsey has joined #openstack-barbican | 08:41 | |
*** mmdurrant has quit IRC | 10:09 | |
*** nickrmc83 has joined #openstack-barbican | 10:48 | |
*** dave-mccowan has joined #openstack-barbican | 11:06 | |
*** ig0r_ has joined #openstack-barbican | 11:08 | |
*** everjeje has quit IRC | 11:38 | |
*** mmdurrant has joined #openstack-barbican | 11:59 | |
*** woodster_ has joined #openstack-barbican | 12:01 | |
*** ig0r_ has quit IRC | 12:05 | |
*** Nirupama has quit IRC | 12:11 | |
*** kfarr has joined #openstack-barbican | 12:27 | |
*** SheenaG has joined #openstack-barbican | 12:30 | |
*** chlong has joined #openstack-barbican | 12:35 | |
*** dave-mccowan has quit IRC | 12:48 | |
*** alee has quit IRC | 12:49 | |
*** darrenmoffat has quit IRC | 13:39 | |
*** alee has joined #openstack-barbican | 13:39 | |
*** darrenmoffat has joined #openstack-barbican | 13:39 | |
*** nickrmc83 has quit IRC | 14:06 | |
*** nickrmc83 has joined #openstack-barbican | 14:07 | |
*** pglass has joined #openstack-barbican | 14:07 | |
*** xaeth_afk is now known as xaeth | 14:08 | |
*** Kevin_Bishop has joined #openstack-barbican | 14:14 | |
*** rellerreller has joined #openstack-barbican | 14:15 | |
*** zz_dimtruck is now known as dimtruck | 14:21 | |
*** kfarr has quit IRC | 14:24 | |
*** kfarr has joined #openstack-barbican | 14:25 | |
*** dave-mccowan has joined #openstack-barbican | 14:26 | |
*** xaeth is now known as xaeth_afk | 14:27 | |
*** spotz_zzz is now known as spotz | 14:29 | |
*** xaeth_afk is now known as xaeth | 14:34 | |
*** shohel has quit IRC | 14:36 | |
openstackgerrit | Dave McCowan proposed openstack/barbican-specs: Quota Blueprint: Patch to spark discussion https://review.openstack.org/203678 | 14:36 |
---|---|---|
*** kfox1111_ has joined #openstack-barbican | 14:39 | |
*** nelsnelson has joined #openstack-barbican | 14:40 | |
*** xaeth is now known as xaeth_afk | 14:40 | |
*** ryanpetrello has quit IRC | 14:42 | |
*** rm_work|away has quit IRC | 14:42 | |
*** kfarr has quit IRC | 14:42 | |
*** pglass has quit IRC | 14:42 | |
*** jamielennox has quit IRC | 14:42 | |
*** kfox1111 has quit IRC | 14:42 | |
*** kfarr has joined #openstack-barbican | 14:42 | |
*** ryanpetrello has joined #openstack-barbican | 14:42 | |
*** rm_work|away has joined #openstack-barbican | 14:42 | |
*** jamielennox has joined #openstack-barbican | 14:42 | |
*** rm_work|away is now known as rm_work | 14:42 | |
*** rm_work has joined #openstack-barbican | 14:42 | |
*** pglass has joined #openstack-barbican | 14:43 | |
*** spotz is now known as spotz_zzz | 14:43 | |
*** spotz_zzz is now known as spotz | 14:50 | |
*** spotz is now known as spotz_zzz | 14:53 | |
*** spotz_zzz is now known as spotz | 14:53 | |
*** silos has joined #openstack-barbican | 14:58 | |
*** xaeth_afk is now known as xaeth | 14:58 | |
*** kebray has joined #openstack-barbican | 15:04 | |
*** mikeymeitbual has quit IRC | 15:18 | |
*** gyee has joined #openstack-barbican | 15:19 | |
*** diazjf has joined #openstack-barbican | 15:24 | |
*** jorge_munoz has quit IRC | 15:30 | |
*** jorge_munoz has joined #openstack-barbican | 15:31 | |
*** rellerreller has quit IRC | 15:33 | |
openstackgerrit | Merged openstack/barbican: Add retry server and functional tests to DevStack https://review.openstack.org/170896 | 15:46 |
*** gyee has quit IRC | 16:11 | |
*** gyee has joined #openstack-barbican | 16:15 | |
*** nickrmc83 has quit IRC | 16:15 | |
*** nickrmc83 has joined #openstack-barbican | 16:15 | |
*** rellerreller has joined #openstack-barbican | 16:36 | |
*** kebray has quit IRC | 16:43 | |
*** silos has left #openstack-barbican | 16:46 | |
*** nelsnelson has quit IRC | 16:52 | |
*** mikeymeitbual has joined #openstack-barbican | 16:59 | |
jkf | What's the cut off for getting blueprints into the liberty release? | 16:59 |
*** nickrmc83 has quit IRC | 17:03 | |
*** pglbutt has joined #openstack-barbican | 17:04 | |
*** pglass has quit IRC | 17:05 | |
openstackgerrit | Merged openstack/python-barbicanclient: Updated from global requirements https://review.openstack.org/203134 | 17:07 |
*** xaeth is now known as xaeth_afk | 17:08 | |
*** openstackgerrit has quit IRC | 17:16 | |
*** openstackgerrit has joined #openstack-barbican | 17:17 | |
*** xaeth_afk is now known as xaeth | 17:26 | |
*** cbader has joined #openstack-barbican | 17:27 | |
*** pglbutt has quit IRC | 17:57 | |
*** pglbutt has joined #openstack-barbican | 18:03 | |
*** kebray has joined #openstack-barbican | 18:04 | |
dave-mccowan | woodster_ hockeynut alee (anyone else) I'm looking for some design discussion on the quotas blueprint. please add your comments to this when you get a chance: https://review.openstack.org/203678 | 18:08 |
woodster_ | dave-mccowan: will do later this afternoon | 18:10 |
dave-mccowan | woodster_ thanks! | 18:11 |
*** arunkant has joined #openstack-barbican | 18:14 | |
*** stanzi has joined #openstack-barbican | 18:15 | |
*** pglbutt has quit IRC | 18:24 | |
*** stanzi has quit IRC | 18:29 | |
*** stanzi has joined #openstack-barbican | 18:30 | |
dave-mccowan | rellerreller while quotas are still fresh in your mind ^^^ | 18:31 |
rellerreller | dave-mccowan I'm looking at it now :) | 18:32 |
*** tkelsey has quit IRC | 18:33 | |
*** stanzi has quit IRC | 18:34 | |
*** vivek-ebay has joined #openstack-barbican | 18:37 | |
*** silos has joined #openstack-barbican | 18:37 | |
*** SheenaG has quit IRC | 18:40 | |
*** vivek-ebay has quit IRC | 18:51 | |
*** vivek-ebay has joined #openstack-barbican | 18:57 | |
*** pglass has joined #openstack-barbican | 18:57 | |
*** SheenaG has joined #openstack-barbican | 18:58 | |
alee | redrobot, ping | 19:05 |
redrobot | alee pong | 19:06 |
alee | redrobot, hey - trying to build on latest master and running into -- http://www.fpaste.org/246199/37419209/ | 19:07 |
alee | any thought? | 19:07 |
alee | redrobot, am I missing a version of tox? | 19:07 |
redrobot | alee what python version are you running? | 19:08 |
alee | (barbican27)[alee@aleeredhat barbican]$ python --version | 19:08 |
alee | Python 2.7.5 | 19:08 |
alee | redrobot, I should be using python 3? | 19:08 |
redrobot | alee no the error made it seem like you had 2.6 | 19:09 |
redrobot | 2.7 should be correct | 19:09 |
redrobot | try updating both tox and PBR? | 19:09 |
alee | redrobot, yeah -- pbr did it -- thanks | 19:09 |
rm_work | i've been updating tox/pbr/pip on most machines i touch now, since those three in combination have broken very badly recently | 19:15 |
alee | redrobot, rm_work -- so the build succeeded but there were failures in the py27 tests -- do you see those too? | 19:16 |
rm_work | alee: heading to lunch but i'll start a build and see what happens when i get back :P | 19:16 |
alee | redrobot, rm_work -- Barbican's tox tests fail with "ImportError: No module named _bsddb" | 19:16 |
redrobot | alee try deleting some .testdb directory or something like that | 19:17 |
redrobot | alee it's some pbr/testtools magic that breaks often | 19:17 |
rm_work | alee: oh god that again | 19:17 |
alee | redrobot, no such directory .. | 19:18 |
alee | redrobot, there is a ./.testrepository ? | 19:19 |
chellygel | do acls subscribe to the limits & offsets that other lists do... or is it just a nice big dump? | 19:19 |
redrobot | alee yeah, try rm -rf that directory | 19:19 |
redrobot | chellygel nice big dump as implemented IIRC | 19:19 |
chellygel | okay so then in the client i'm assuming it would make sense to just leave it as "get acl" rather than list... like secrets | 19:20 |
alee | redrobot, ok - getting further -- now any idea why tests would be failing with : barbican.plugin.interface.secret_store.SecretStorePluginsNotConfigured: No secret store plugins have been configured ?? | 19:27 |
alee | redrobot, this is just running tox | 19:28 |
redrobot | alee hmm... weird... maybe it's not reading the config file? | 19:29 |
alee | redrobot, which config file -- the one in ./etc/barbican/... ? | 19:31 |
alee | redrobot, why wouldn't it be? | 19:31 |
redrobot | alee no idea... try copynig the barbican.conf file into your home dir? | 19:31 |
chellygel | hey guys -- 20 minutes until the Barbican Meeting in #openstack-meeting-alt ! | 19:38 |
chellygel | if you have agenda topics, make sure you add them here: https://wiki.openstack.org/wiki/Meetings/Barbican | 19:39 |
alee | redrobot, crazily enough - that worked .. thats a little disturbing .. | 19:39 |
redrobot | alee oslo.config is magic | 19:39 |
alee | redrobot, sigh .. | 19:40 |
mmdurrant | Could I throw this guy on the agenda - https://bugs.launchpad.net/barbican/+bug/1475962 ? | 19:41 |
openstack | Launchpad bug 1475962 in Barbican "Default policy does not allow secrets to be deleted by non-admin creator" [Undecided,New] | 19:41 |
redrobot | alee I think that the gate works because we copy the config into /etc/barbican, which is one of the magic oslo.conf directories. | 19:41 |
mmdurrant | Dave had responded to my concerns and I had some questions about Dave’s response and the notion of preventing users from shooting themselves in the foot. | 19:41 |
*** vivek-ebay has quit IRC | 19:42 | |
chellygel | sure mmdurrant , just edit the page and throw it in there for july 20th :) | 19:42 |
redrobot | mmdurrant the agenda is open to anyone who wants to add items. we can certainly answer any questions you have. | 19:42 |
alee | redrobot, yeah - but the conf should be looking in ./etc/barbican though, right? otherwise who knows what you're testing .. | 19:43 |
*** igueths has joined #openstack-barbican | 19:45 | |
woodster_ | alee: one benefit to working with configs outside the repo is that you can tweak them to your local dev needs, without worrying about inadvertently committing upstream. | 19:46 |
alee | woodster_, sure - thats one possible benefit -- so , is there an order of preference? home dir, followed by /etc/barbican , followed by in-tree? | 19:47 |
woodster_ | I'd work with /etc first if you have access, but that is my preference really. I don't recall in-tree working with oslo.config though, but that was 2+ years ago :) | 19:49 |
alee | woodster_, I wasn't asking about your preference as much as what the code does :) | 19:54 |
silos | alee: From what I've seen when testing barbican. the code looks to the conf file in your home directory first and if it's not there then it looks to the /etc/barbican directory. | 19:56 |
woodster_ | alee: ha, oh so what the code *does* instead of *should do*! | 19:56 |
woodster_ | silos: I just verified that now | 19:56 |
mmdurrant | Regarding the bug I posted, my main concern is this: As a secret creator, I would like the ability to delete my secrets. Thus far, the only argument for allowing only admins is an appeal to consequences - what if the user deletes an important secret? It seems preventing the users from shooting themselves in the foot is the job of the user and the policies set by the organization and not the software. I’m all for | 19:57 |
mmdurrant | software that is easy to use right and hard to use wrong, but the default policy seems to lean in the direction of hard to use right. | 19:57 |
alee | silos, woodster_ good to know -- and if neither, then it looks in-tree? | 19:57 |
alee | silos, woodster_ what if I'm downloading barbican for the first time on a fresh machine and want to do a build? | 19:58 |
silos | alee: hmm I'm not really sure about that one. I've never seen what happens if both are missing. | 19:59 |
woodster_ | in the past that failed...it didn't use the local etc/ version. Might work now. That is one of the things that the 'bin/barbican.sh install' does | 20:00 |
*** jhfeng has joined #openstack-barbican | 20:00 | |
chellygel | barbican meeting starting now! in #openstack-meeting-alt | 20:00 |
redrobot | alee I don't think oslo.config ever looks in-tree | 20:00 |
rm_work | alee / redrobot: i don't have a config in $HOME, but I do have one in /etc/barbican ... though it's probably super old so I can't imagine it'd work if it was being read | 20:15 |
rm_work | alee: but all tox tests passed for me with no issues :/ | 20:15 |
*** vivek-ebay has joined #openstack-barbican | 20:16 | |
alee | rm_work, yeah I probably have one in /etc/barbican that is messed up in just the right way | 20:16 |
rm_work | heh | 20:16 |
*** kebray has quit IRC | 20:28 | |
*** kebray has joined #openstack-barbican | 20:28 | |
*** dimtruck is now known as zz_dimtruck | 20:29 | |
*** vivek-ebay has quit IRC | 20:30 | |
*** stanzi has joined #openstack-barbican | 20:31 | |
*** stanzi_ has joined #openstack-barbican | 20:37 | |
*** stanzi has quit IRC | 20:38 | |
*** stanzi_ has quit IRC | 20:39 | |
*** stanzi has joined #openstack-barbican | 20:40 | |
woodster_ | alee, there were also changes to the paste configs (no admin paste anymore), and to the vassals folder (just api configs, no admin) | 20:41 |
elmiko | dave-mccowan, alee, hockeynut, just a follow up on the PUT/PATCH debate (because i asked around in openstack-api) | 20:41 |
alee | woodster_, ah maybe thats why mine failed. | 20:41 |
elmiko | there is a difference of opinion on using PATCH, and one school says partial updates should be sent through PATCH, whereas PUT should always contain the full record | 20:41 |
elmiko | the other camp is a little more stringent about only sending changeset style updates through PATCH | 20:42 |
*** rellerreller has quit IRC | 20:44 | |
elmiko | this https://tools.ietf.org/html/rfc6902 references the latter style of updating | 20:44 |
*** stanzi has quit IRC | 20:44 | |
*** xaeth is now known as xaeth_afk | 20:44 | |
dave-mccowan | elmiko cool. PATCH is definitely out of scope. And, POST is not used. because, if i understand it, the URI for the PUT command matches the URI for the GET command. did i get that right? | 20:45 |
elmiko | yes | 20:46 |
elmiko | we know the resource URI, so we should PUT with a full resource to update | 20:46 |
elmiko | but, if you want to only send a partial resource update (ie you only want to send some of the resource back), then you might use PATCH | 20:47 |
elmiko | at least, this is one school of thinking and its being reviewed as a change to the guidelines for the api-wg | 20:47 |
elmiko | https://review.openstack.org/#/c/199597 | 20:47 |
elmiko | dave-mccowan: sadly, there isn't a clear line on this one :/ | 20:48 |
dave-mccowan | it's not too bad. i'll code it as PUT only. if i have to add POST later for some reason, there is no throw away code. | 20:49 |
elmiko | cool | 20:51 |
*** xaeth_afk is now known as xaeth | 20:52 | |
elmiko | i added a small comment on the review as well dave-mccowan | 20:52 |
dave-mccowan | who's a database expert? i have a question about the database design for quotas. | 20:52 |
*** zz_dimtruck is now known as dimtruck | 20:58 | |
arunkant | chellygel: Just continuing from meeting, looks like all details agreed on acl support in barbican client is captured in July 6 meeting notes. | 21:03 |
redrobot | thanks for chairing today chellygel ! | 21:03 |
chellygel | redrobot, of course. have fun at your conference | 21:04 |
chellygel | arunkant, yes, were you planning on adding all of the support listed in client and all that | 21:04 |
arunkant | chellygel, yes as per acl API available on server side | 21:05 |
chellygel | okay, cool -- good to know | 21:05 |
*** silos has left #openstack-barbican | 21:08 | |
openstackgerrit | Merged openstack/barbican: Add RBAC Functional Test for ACL Opeations https://review.openstack.org/200696 | 21:10 |
*** alee has quit IRC | 21:12 | |
*** vivek-ebay has joined #openstack-barbican | 21:14 | |
*** xaeth is now known as xaeth_afk | 21:27 | |
*** vivek-ebay has quit IRC | 21:33 | |
*** dimtruck is now known as zz_dimtruck | 21:39 | |
*** zz_dimtruck is now known as dimtruck | 21:39 | |
*** kfarr has quit IRC | 21:40 | |
*** rellerreller has joined #openstack-barbican | 21:48 | |
*** vivek-ebay has joined #openstack-barbican | 21:52 | |
*** stanzi has joined #openstack-barbican | 21:53 | |
openstackgerrit | Fernando Diaz proposed openstack/python-barbicanclient: Allow Barbican Client Secret Update Functionality https://review.openstack.org/196876 | 21:55 |
*** Kevin_Bishop has quit IRC | 21:55 | |
*** stanzi has quit IRC | 21:57 | |
*** pglass has quit IRC | 22:04 | |
*** alee has joined #openstack-barbican | 22:07 | |
*** igueths has quit IRC | 22:10 | |
*** rellerreller has quit IRC | 22:16 | |
openstackgerrit | Fernando Diaz proposed openstack/python-barbicanclient: Allow Barbican Client Secret Update Functionality https://review.openstack.org/196876 | 22:18 |
*** spotz is now known as spotz_zzz | 22:30 | |
*** diazjf has left #openstack-barbican | 22:45 | |
mmdurrant | Any cores around to discuss a bug I had submitted last week regarding error response handling (https://bugs.launchpad.net/python-barbicanclient/+bug/1474479) ? | 22:50 |
openstack | Launchpad bug 1474479 in python-barbicanclient "Error message handling incorrectly accesses error response title" [Undecided,New] | 22:50 |
mmdurrant | It’s a pretty easy fix (I have it applied to my local repo) but I wanted to make sure it wasn’t functioning as intended/etc before I hauled off fixing things that aren’t broken. | 22:51 |
*** rm_work is now known as rm_work|away | 22:53 | |
*** chlong has quit IRC | 22:54 | |
*** bitblt has joined #openstack-barbican | 23:20 | |
*** dimtruck is now known as zz_dimtruck | 23:26 | |
*** yuanying has joined #openstack-barbican | 23:29 | |
*** jhfeng has quit IRC | 23:32 | |
redrobot | mmdurrant o/ | 23:43 |
mmdurrant | Howdy | 23:44 |
openstackgerrit | Douglas Mendizábal proposed openstack/barbican: Remove docbook documentation https://review.openstack.org/203872 | 23:53 |
redrobot | mmdurrant did you have questions about that barbicanclient bug? | 23:53 |
*** SheenaG has quit IRC | 23:57 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!