| *** david-lyle has quit IRC | 00:03 | |
| -openstackstatus- NOTICE: Zuul was restarted due to an error; events (such as approvals or new patchsets) since 23:01 UTC have been lost and affected changes will need to be rechecked | 00:04 | |
| *** nelsnelson has quit IRC | 00:24 | |
| *** nelsnelson has joined #openstack-barbican | 00:40 | |
| *** woodster_ has quit IRC | 00:50 | |
| *** david-lyle has joined #openstack-barbican | 00:54 | |
| *** everjeje has quit IRC | 01:22 | |
| *** vivek-ebay has joined #openstack-barbican | 01:34 | |
| *** nelsnelson has quit IRC | 01:44 | |
| *** nelsnelson has joined #openstack-barbican | 02:06 | |
| *** alee_on_way_home is now known as alee_ | 02:13 | |
| *** nelsnelson has quit IRC | 02:20 | |
| *** gyee has quit IRC | 02:27 | |
| *** vivek-ebay has quit IRC | 02:33 | |
| *** david-lyle has quit IRC | 02:33 | |
| *** tkelsey has joined #openstack-barbican | 02:34 | |
| *** tkelsey has quit IRC | 02:38 | |
| *** chellygel has quit IRC | 02:45 | |
| *** chellygel has joined #openstack-barbican | 02:50 | |
| openstackgerrit | Zhenyu Zheng proposed openstack/barbican: Drop downgrade field in alembic script.py.mako and version https://review.openstack.org/209323 | 02:57 |
|---|---|---|
| *** rm_work|away is now known as rm_work | 03:10 | |
| *** david-lyle has joined #openstack-barbican | 03:30 | |
| *** vivek-ebay has joined #openstack-barbican | 03:41 | |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican: Introduce the concept of plugin status https://review.openstack.org/211834 | 03:49 |
| *** vivek-ebay has quit IRC | 04:04 | |
| *** vivek-ebay has joined #openstack-barbican | 04:06 | |
| openstackgerrit | Douglas Mendizábal proposed openstack/castellan: Remove unnecesary __ne__ implementations https://review.openstack.org/211836 | 04:09 |
| openstackgerrit | Douglas Mendizábal proposed openstack/castellan: Remove unnecessary __ne__ implementations https://review.openstack.org/211836 | 04:15 |
| *** morgan_404 is now known as morgan_410 | 04:26 | |
| *** morgan_410 is now known as morgan_404 | 04:26 | |
| *** edtubill has joined #openstack-barbican | 04:34 | |
| *** vivek-ebay has quit IRC | 05:40 | |
| *** edtubill has quit IRC | 05:48 | |
| *** shohel has joined #openstack-barbican | 06:22 | |
| *** zz_dimtruck is now known as dimtruck | 06:26 | |
| *** vivek-ebay has joined #openstack-barbican | 06:36 | |
| *** vivek-ebay has quit IRC | 06:41 | |
| *** Nirupama has joined #openstack-barbican | 06:44 | |
| *** xek has quit IRC | 07:04 | |
| *** xek has joined #openstack-barbican | 07:05 | |
| *** nickrmc83 has joined #openstack-barbican | 07:10 | |
| *** ig0r_ has joined #openstack-barbican | 07:15 | |
| *** alee has quit IRC | 07:24 | |
| *** ig0r__ has joined #openstack-barbican | 07:39 | |
| *** ig0r_ has quit IRC | 07:41 | |
| *** dimtruck is now known as zz_dimtruck | 07:50 | |
| *** ig0r__ has quit IRC | 08:13 | |
| *** ig0r_ has joined #openstack-barbican | 08:17 | |
| *** ig0r_ has quit IRC | 08:19 | |
| *** DTadrzak has quit IRC | 08:19 | |
| *** tkelsey has joined #openstack-barbican | 08:26 | |
| *** everjeje has joined #openstack-barbican | 08:35 | |
| *** vivek-ebay has joined #openstack-barbican | 09:38 | |
| *** vivek-ebay has quit IRC | 09:42 | |
| *** DTadrzak has joined #openstack-barbican | 09:45 | |
| *** DTadrzak has quit IRC | 09:45 | |
| *** DTadrzak has joined #openstack-barbican | 09:46 | |
| *** ig0r_ has joined #openstack-barbican | 10:10 | |
| *** yuanying has quit IRC | 10:30 | |
| *** yuanying has joined #openstack-barbican | 10:30 | |
| *** ig0r_ has quit IRC | 10:46 | |
| openstackgerrit | Arun Kant proposed openstack/python-barbicanclient: Part 1: Adding ACL support for Client API. https://review.openstack.org/206699 | 10:49 |
| openstackgerrit | Arun Kant proposed openstack/python-barbicanclient: Part 2: Adding ACL support for CLI commands and docs https://review.openstack.org/208343 | 10:49 |
| openstackgerrit | Arun Kant proposed openstack/python-barbicanclient: Part 3: Adding ACL functional tests. https://review.openstack.org/208344 | 10:49 |
| *** peter-hamilton has joined #openstack-barbican | 11:03 | |
| *** shohel has quit IRC | 11:34 | |
| *** shohel has joined #openstack-barbican | 11:34 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Implement Models and Repositories for Resource Quotas https://review.openstack.org/205894 | 11:38 |
| *** dave-mccowan has quit IRC | 12:12 | |
| *** shohel has quit IRC | 12:28 | |
| *** shohel has joined #openstack-barbican | 12:28 | |
| *** rellerreller has joined #openstack-barbican | 12:42 | |
| *** SheenaG has joined #openstack-barbican | 12:51 | |
| *** zz_dimtruck is now known as dimtruck | 12:55 | |
| *** elmiko has joined #openstack-barbican | 13:06 | |
| openstackgerrit | Joel Coffman proposed openstack/castellan: Remove copy_key operation https://review.openstack.org/206126 | 13:07 |
| *** Nirupama has quit IRC | 13:09 | |
| *** lisaclark1 has joined #openstack-barbican | 13:15 | |
| *** lisaclark1 has quit IRC | 13:22 | |
| elmiko | redrobot, ping | 13:26 |
| *** kfarr has joined #openstack-barbican | 13:32 | |
| *** lisaclark1 has joined #openstack-barbican | 13:34 | |
| redrobot | elmiko pong | 13:38 |
| elmiko | redrobot, hey, thanks for the comments. i just wanted to confirm about the optional barbican import before i pushed another revision | 13:40 |
| redrobot | elmiko just left a comment a minute ago. The optional import makes sense to me now. | 13:41 |
| elmiko | ok, cool | 13:41 |
| openstackgerrit | Michael McCune proposed openstack/castellan: refactoring castellan configuration https://review.openstack.org/206180 | 13:42 |
| elmiko | =) | 13:42 |
| reaperhulk | cryptography 1.0 is out btw. I believe it supports everything necessary to drop pyopenssl in barbican | 13:49 |
| redrobot | reaperhulk woot! | 13:49 |
| reaperhulk | https://mail.python.org/pipermail/cryptography-dev/2015-August/000481.html release announce | 13:49 |
| kfarr | redrobot, I see you're over there reviewing Castellan patches :D Can you take a look at this one please? https://review.openstack.org/#/c/203227/ | 13:50 |
| redrobot | reaperhulk does it have the bits we need to drop ldap? | 13:50 |
| reaperhulk | redrobot: probably? I forget what you're using ldap for. It was originally just basic DN validation, which cryptography can definitely do | 13:50 |
| reaperhulk | I think rm_work showed me something where the LDAP string could come from user input though, which is not a thing cryptography supports (and frankly neither should barbican) | 13:51 |
| reaperhulk | because LDAP strings are a travesty anyway | 13:51 |
| redrobot | reaperhulk hehe | 13:51 |
| redrobot | kfarr about to jump in the shower. I'll look at it as soon as I get to the office. | 13:52 |
| kfarr | Thanks redrobot! I appreciate it | 13:52 |
| lisaclark1 | go cryptography 1.0 ! | 14:00 |
| *** spotz_zzz is now known as spotz | 14:00 | |
| *** dave-mccowan has joined #openstack-barbican | 14:01 | |
| elmiko | very neat, grats reaperhulk | 14:01 |
| dave-mccowan | hockeynut ping | 14:02 |
| dave-mccowan | reaperhulk, redrobot: barbican uses the str2dn() from ldap or parse_dn() from ldap3 to read the distinguished name from an order to copy it into a CSR. Its used for both validation and normalization as the CSR is built. what's the equivalent to parse_dn() in cryptography? btw, https://review.openstack.org/#/c/211759/ shows exactly where and how ldap is used in barbican. | 14:11 |
| *** pglass has joined #openstack-barbican | 14:15 | |
| hockeynut | dave-mccowan pong | 14:22 |
| *** silos has joined #openstack-barbican | 14:23 | |
| dave-mccowan | hockeynut the async running of functional tests in the gate makes the paging test cases angry. the counts get off as different tests create and delete new entries at the same time. any ideas? | 14:24 |
| hockeynut | dave-mccowan look at how we did it with secrets - they use a unique prefix for filtering | 14:27 |
| hockeynut | https://github.com/openstack/barbican/blob/master/functionaltests/api/v1/functional/test_secrets.py#L1013 | 14:27 |
| dave-mccowan | hockeynut project quotas don't support filtering | 14:28 |
| *** tkelsey has quit IRC | 14:28 | |
| *** tkelsey has joined #openstack-barbican | 14:28 | |
| darrenmoffat | yeah on 1.0 of PyCA ! | 14:29 |
| reaperhulk | dave-mccowan: there's no support for parsing a string into a DN in cryptography. You can build a Name via NameAttribute objects in cryptography, but the "order_model.meta.get('subject_dn')" would have to change (why does the order model support sending an LDAP encoded string anyway?) | 14:32 |
| dave-mccowan | reaperhulk it's not really LDAP, it "distinguished name format". like: "cn=host.example.com,ou=dev,ou=us,o=example.com" maybe it's called X.501? the python-ldap library just happens to have a method to parse it. | 14:44 |
| *** chadlung has joined #openstack-barbican | 14:50 | |
| hockeynut | dave-mccowan there aren't any fields that we could filter on? | 14:58 |
| dave-mccowan | hockeynut, project.id is the only field | 14:59 |
| hockeynut | sadness... | 15:00 |
| hockeynut | so without the filtering you are seeing what we saw that caused us to use the filtering - running tests in parallel change the data returned by the list APIs | 15:01 |
| hockeynut | another alternative is to use a different userid | 15:01 |
| *** igueths has joined #openstack-barbican | 15:03 | |
| *** lisaclark1 has quit IRC | 15:04 | |
| *** DuncanT has quit IRC | 15:05 | |
| *** rm_work has quit IRC | 15:05 | |
| dave-mccowan | hockeynut :-( i'll have to think on this some more. maybe for now, i'll remove paging tests from the CR. | 15:05 |
| hockeynut | dave-mccowan that might be easier - then we can noodle on it for a while | 15:06 |
| *** DuncanT has joined #openstack-barbican | 15:07 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Implement Models and Repositories for Resource Quotas https://review.openstack.org/205894 | 15:08 |
| *** xaeth is now known as xaeth_afk | 15:08 | |
| *** dave-mccowan has quit IRC | 15:09 | |
| *** rm_work has joined #openstack-barbican | 15:10 | |
| *** rm_work has quit IRC | 15:10 | |
| *** rm_work has joined #openstack-barbican | 15:10 | |
| *** shohel has quit IRC | 15:10 | |
| *** nkinder has joined #openstack-barbican | 15:12 | |
| *** woodster_ has joined #openstack-barbican | 15:18 | |
| *** lisaclark1 has joined #openstack-barbican | 15:20 | |
| *** edtubill has joined #openstack-barbican | 15:32 | |
| *** darrenmoffat has quit IRC | 15:36 | |
| *** darrenmoffat has joined #openstack-barbican | 15:37 | |
| hockeynut | woodster_ I have confuzzles today - what's the current blessed method for running server in dev box? I normally use bin/barbican.sh <install or start> but I recall something about barbican.sh is being deprecated? I see bin/barbican-all but that is actually deprecated according to its comments at the top of the file and it points to bin/barbican.sh | 15:41 |
| redrobot | hockeynut I tend to use bin/barbican-api | 15:41 |
| *** edtubill has quit IRC | 15:44 | |
| redrobot | kfarr I have a Q about that Castellan CR | 15:47 |
| *** nkinder has quit IRC | 15:47 | |
| redrobot | kfarr actually, I think I answered my own question. | 15:50 |
| redrobot | kfarr if you get a chance, could you review https://review.openstack.org/#/c/206180/ again? There was only a minor change since the last time you gave a +2. | 15:51 |
| openstackgerrit | Merged openstack/castellan: Update the key manager API https://review.openstack.org/203227 | 15:52 |
| redrobot | kfarr never mind that... looks like it's in merge conflict now | 15:53 |
| *** edtubill has joined #openstack-barbican | 15:54 | |
| elmiko | lol, NOOOoooo | 15:54 |
| elmiko | KHAAAAAaaaaan | 15:55 |
| redrobot | elmiko lol, sorry about that. | 15:55 |
| elmiko | redrobot, haha, no worries. i knew this could happen ;) | 15:55 |
| *** nickrmc83 has quit IRC | 16:00 | |
| *** gyee has joined #openstack-barbican | 16:00 | |
| *** vivek-ebay has joined #openstack-barbican | 16:01 | |
| openstackgerrit | Michael McCune proposed openstack/castellan: refactoring castellan configuration https://review.openstack.org/206180 | 16:03 |
| *** lisaclark1 has quit IRC | 16:04 | |
| *** vivek-eb_ has joined #openstack-barbican | 16:05 | |
| *** vivek-ebay has quit IRC | 16:05 | |
| *** diazjf has joined #openstack-barbican | 16:15 | |
| *** lisaclark1 has joined #openstack-barbican | 16:18 | |
| *** lisaclark1 has quit IRC | 16:19 | |
| *** lisaclark1 has joined #openstack-barbican | 16:20 | |
| diazjf | rellerreller, redrobot, jfarr, can I get a +A on https://review.openstack.org/#/c/196876/ wanna start working on the Castellan Update function if needed | 16:25 |
| kfarr | redrobot, just saw all your messages, will take a look | 16:31 |
| kfarr | diazjf, will take a look once I get some after-lunch caffeine | 16:34 |
| *** dave-mccowan has joined #openstack-barbican | 16:37 | |
| diazjf | kfarr, awesome thanks :-D | 16:37 |
| *** vivek-eb_ has quit IRC | 16:38 | |
| redrobot | diazjf regarding the comment about payload=0 being false | 16:40 |
| redrobot | diazjf It's worth noting that payload=0 is not supported, since it would fail the type check for text_type or binary_type | 16:41 |
| diazjf | redrobot, thanks, where would be a good place to note it? I had to change 'if self.payload' to 'if self.payload is not None' because of the zero. | 16:50 |
| redrobot | diazjf should probably be a unit test that tests for payload=0 and checks for a ValueError | 16:51 |
| diazjf | redrobot, gotcha I'll add it after lunch. Anxious to get my 1st Barbican Merge :-D | 16:54 |
| openstackgerrit | Arun Kant proposed openstack/python-barbicanclient: Part 1: Adding ACL support for Client API. https://review.openstack.org/206699 | 17:08 |
| *** vivek-ebay has joined #openstack-barbican | 17:08 | |
| openstackgerrit | Arun Kant proposed openstack/python-barbicanclient: Part 2: Adding ACL support for CLI commands and docs https://review.openstack.org/208343 | 17:08 |
| openstackgerrit | Arun Kant proposed openstack/python-barbicanclient: Part 3: Adding ACL functional tests. https://review.openstack.org/208344 | 17:08 |
| *** xek has quit IRC | 17:08 | |
| *** igueths has quit IRC | 17:09 | |
| *** DTadrzak has quit IRC | 17:10 | |
| *** lisaclark1 has quit IRC | 17:11 | |
| *** xek has joined #openstack-barbican | 17:13 | |
| openstackgerrit | Arun Kant proposed openstack/python-barbicanclient: Part 2: Adding ACL support for CLI commands and docs https://review.openstack.org/208343 | 17:16 |
| openstackgerrit | Arun Kant proposed openstack/python-barbicanclient: Part 3: Adding ACL functional tests. https://review.openstack.org/208344 | 17:16 |
| *** dave-mcc_ has joined #openstack-barbican | 17:28 | |
| *** vivek-eb_ has joined #openstack-barbican | 17:30 | |
| *** dave-mccowan has quit IRC | 17:31 | |
| *** nkinder has joined #openstack-barbican | 17:32 | |
| kfarr | rellerreller, can you please review this one? https://review.openstack.org/#/c/205870/ | 17:32 |
| *** vivek-ebay has quit IRC | 17:34 | |
| *** lisaclark1 has joined #openstack-barbican | 17:34 | |
| *** lisaclark1 has quit IRC | 17:34 | |
| rellerreller | kfarr done! | 17:35 |
| *** lisaclark1 has joined #openstack-barbican | 17:35 | |
| kfarr | Thanks rellerreller!! | 17:35 |
| *** tkelsey has quit IRC | 17:36 | |
| *** dave-mccowan has joined #openstack-barbican | 17:38 | |
| *** dave-mcc_ has quit IRC | 17:40 | |
| redrobot | woot! It's Castellan merge day! | 17:43 |
| redrobot | (except for yours rm_work ) | 17:43 |
| *** kfarr has quit IRC | 17:48 | |
| elmiko | did someone say castellan merge day? /me pokes head up | 17:48 |
| *** crc32 has joined #openstack-barbican | 17:49 | |
| redrobot | elmiko yup, looks like yours is on the way to the merge queue | 17:51 |
| elmiko | \o/ | 17:51 |
| *** peter-hamilton has quit IRC | 17:52 | |
| elmiko | redrobot, are you planning a new castellan release once all these changes have gone through? | 17:54 |
| rellerreller | Need one more review for https://review.openstack.org/#/c/206649/ | 17:54 |
| *** nkinder has quit IRC | 17:54 | |
| redrobot | elmiko yup! ... maybe even have kfarr do the release | 17:54 |
| elmiko | nice, +1 | 17:55 |
| elmiko | very exciting though, we might be able to have barbican integration in sahara for L =) | 17:55 |
| redrobot | elmiko that would be awesome! | 17:56 |
| elmiko | it's been a long journey, i've appreciated all the help | 17:56 |
| alee_ | elmiko, thats using barbican to do cert generation? | 17:59 |
| alee_ | or store secrets? | 17:59 |
| elmiko | alee_, secret storage, we're offloading all passwords =) | 17:59 |
| *** kfarr has joined #openstack-barbican | 17:59 | |
| alee_ | elmiko, excellent | 17:59 |
| *** peter-hamilton has joined #openstack-barbican | 18:00 | |
| elmiko | although, in the future we might be able to use the cert generation stuff if we move on our plans for secure clusters | 18:00 |
| *** SheenaG1 has joined #openstack-barbican | 18:02 | |
| *** SheenaG has quit IRC | 18:04 | |
| *** DTadrzak has joined #openstack-barbican | 18:05 | |
| openstackgerrit | Merged openstack/castellan: Update mock key manager https://review.openstack.org/205870 | 18:06 |
| openstackgerrit | Merged openstack/castellan: refactoring castellan configuration https://review.openstack.org/206180 | 18:06 |
| * elmiko does happy dance | 18:07 | |
| openstackgerrit | Fernando Diaz proposed openstack/python-barbicanclient: Add Unit Tests for Store and Update Payload when Payload is zero https://review.openstack.org/212130 | 18:13 |
| redrobot | elmiko thanks for all the work you put into that! | 18:13 |
| elmiko | i'm thinking about doing a little more documentation about usage for castellan. i think it would be helpful | 18:14 |
| redrobot | elmiko that would be awesome! ... once we get a new release out, the docs should begin to be published to https://docs.openstack.org/developer/castellan | 18:15 |
| diazjf | redrobot, added the unit-test on a dependant patch | 18:15 |
| elmiko | redrobot, very cool! | 18:15 |
| diazjf | all ready to go!! :) | 18:15 |
| *** silos1 has joined #openstack-barbican | 18:18 | |
| alee_ | elmiko, xaeth_afk -- how are you guys building the rpms that are being uploaded for fedora review? | 18:19 |
| alee_ | are you using the build_rpm.sh script or the checked in spec file? | 18:19 |
| elmiko | alee_, i had been building them with a container builder | 18:19 |
| elmiko | i used the spec file and rpmbuild | 18:20 |
| alee_ | elmiko, and the spec file is not the one checked in in the tree , right? | 18:20 |
| elmiko | alee_, i had taken the last spec file that xaeth_afk had in his repo. i *thought* that was the last one pushed to the bz | 18:21 |
| elmiko | but i think he modified it since my last build | 18:21 |
| *** silos has quit IRC | 18:22 | |
| alee_ | elmiko, thats fine -- I want to build something that uses the latest master rather than 2014-2-6 | 18:23 |
| elmiko | +1 | 18:23 |
| alee_ | and trying to figure out the best way to do this .. | 18:23 |
| elmiko | alee_, i build an f21 container in docker, then just logged in and built the rpm with the standard rpmbuild toolchain | 18:24 |
| * elmiko is tired of rpmbuild destroying his rootfs | 18:24 | |
| elmiko | then i deployed the rpm to my f21 devstack machine for integration testing | 18:25 |
| alee_ | elmiko, right - presumably though - the spec file refers to a particular tarball | 18:26 |
| elmiko | alee_, yea it does | 18:26 |
| alee_ | which is a snapshot at a particular time | 18:27 |
| elmiko | right, it was definitely something that was too old by my standards, but then i live on the bleeding edge lol | 18:27 |
| alee_ | I'd like to just build something that is in tree to get the latest chaanges say | 18:27 |
| elmiko | yea | 18:27 |
| alee_ | there is a build script and spec file in -tree right now | 18:28 |
| elmiko | it should just be a matter of adjusting the version info at the top of the spec file | 18:28 |
| alee_ | but I think that spec file is something that redrobot put together at some point | 18:28 |
| elmiko | 1sec, bringing up the bz | 18:29 |
| redrobot | alee_ elmiko if you're talking about the spec file in the barbican repo, then you're looking in the wrong spot. That thing is ancient and needs to be removed | 18:29 |
| alee_ | elmiko, redrobot , xaeth_afk - would it make sense to have some kind of create_fedora_rpm.sh script in the barbican tree? | 18:29 |
| redrobot | alee_ elmiko official, up-to-date, extra awesome spec by xaeth_afk is https://github.com/gregswift/barbican-spec | 18:29 |
| elmiko | alee_, i don't think so | 18:30 |
| elmiko | redrobot, alee_, keep in mind that the juno branch is actually xaeth_afk's most current work | 18:30 |
| elmiko | https://github.com/gregswift/barbican-spec/tree/juno | 18:30 |
| elmiko | the master branch is really out of date there | 18:31 |
| alee_ | yeah -- that looks much more up to date | 18:31 |
| elmiko | alee_, imo, the spec file should be all we need. we should be using the standard fedora/rdo packaging tools to build it | 18:32 |
| alee_ | elmiko, redrobot interesting --- the juno branch has the latest changes for fedora review, but the master has 2015.1 | 18:33 |
| elmiko | alee_, yea, i'm not sure what was going on with the master branch | 18:33 |
| *** mixos has joined #openstack-barbican | 18:34 | |
| *** mixos has quit IRC | 18:37 | |
| openstackgerrit | Merged openstack/barbican: Introduce the concept of plugin status https://review.openstack.org/211834 | 18:38 |
| alee_ | elmiko, I agree that we only need the spec file in order to build , and certainly when we add to fedora, the spec file for that particular release will be there. | 18:38 |
| alee_ | elmiko, I'm just wondering if we need to keep a spec file in tree that folks could use to build based on the current state | 18:39 |
| alee_ | elmiko, or if this is soemthing that only I want to do | 18:40 |
| elmiko | alee_, i think we definitely want a more current build, but if we follow the fedora/rdo model then we would need to pin the spec file to specific releases. so a "master" build may not be appropriate for the fedora/rdo repos | 18:41 |
| redrobot | alee_ elmiko I would suggest sending Pull Requests to xaeth_afk to get his master branch to a point where it can build barbican master... I think that duplicating his work in our repo would be less than ideal. | 18:41 |
| elmiko | redrobot, +1 | 18:42 |
| alee_ | elmiko, I'm just thinking more from a devlopment point of view | 18:42 |
| alee_ | redrobot, elmiko because I see I need to 1) create tarball 2) modify spec file for that tarball 3) rpmbuild | 18:43 |
| elmiko | alee_, yea, for devel i totally agree. just not sure where it should live | 18:43 |
| elmiko | it seems out of band for something like that to live in the barbican upstream repo | 18:44 |
| alee_ | why not in tree? the advantage of being in tree is that if something changes that requires spec file changes -- like lets say using barbican.conf instead of barbican-api.conf it will be reflected in the spec file | 18:44 |
| alee_ | and we have some guidance on how to change the spec file when we do a releasr | 18:44 |
| elmiko | true, but then should the upstream tree also contain the deb files as well? | 18:44 |
| elmiko | it just seems like a mix of upstream/downstream work | 18:45 |
| redrobot | elmiko +1 | 18:45 |
| alee_ | elmiko, true enough | 18:45 |
| alee_ | ok -- using xaeths master branch is probably the right place for this then | 18:46 |
| elmiko | alee_, the sad part is, even for the rdo repos i don't think we carry spec files that allow building a cutting edge master branch | 18:46 |
| alee_ | elmiko, yeah I know | 18:46 |
| *** lisaclark1 has quit IRC | 18:47 | |
| elmiko | alee_, honestly, i would start from the juno branch then add you version changes to that. i had great difficulty building from the master of his repo. | 18:47 |
| alee_ | elmiko, I'm going to clone his repo and do just that | 18:47 |
| alee_ | we can sync up once I have it working | 18:47 |
| elmiko | cool, hit me up if things go weird ;) | 18:47 |
| alee_ | s/if/when/ | 18:47 |
| elmiko | haha | 18:48 |
| elmiko | alee_, i *think* you can just change these two lines: | 18:49 |
| elmiko | %global release_name juno | 18:49 |
| elmiko | %global release_version 2014.2 | 18:49 |
| elmiko | and it should work | 18:49 |
| alee_ | elmiko, I think there might have been a couple of changes -- barbican.conf for example | 18:49 |
| elmiko | oh, good point | 18:50 |
| alee_ | also I'm trying to figure out how to generate the tarball | 18:50 |
| alee_ | I could have a separate script that does that -- but it would be nice to generate it when rpmbuild runs on the fly | 18:50 |
| alee_ | redrobot, what command do you use to generate the tarballs for release? | 18:51 |
| redrobot | alee_ python setup.py sdist | 18:52 |
| elmiko | good to know, i wasn't aware of that command target | 18:52 |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican: Remove rpmbuild directory https://review.openstack.org/212147 | 18:53 |
| alee_ | redrobot, interesting so on my branch - I get barbican-1.0.0.0b2.dev47.tar.gz | 18:54 |
| alee_ | where do the numbers come from? | 18:54 |
| alee_ | ah gotcha barbican.egg-info/PKG-INFO:Version: 1.0.0.0b2.dev47 | 18:55 |
| redrobot | alee_ it's a combination of https://github.com/openstack/barbican/blob/master/setup.cfg#L3 and PBR magic | 18:55 |
| redrobot | alee_ for Liberty the versions were reset, so you'll need a new epoch | 18:55 |
| redrobot | alee_ OpenStack as a whole dropped the Year prefix used in <=K and replaced it with semver | 18:56 |
| alee_ | redrobot, sure - nice thing is that this gives us soemthing unique and not specific to an openstack releasse | 18:56 |
| *** mixos has joined #openstack-barbican | 19:05 | |
| *** xaeth_afk is now known as xaeth | 19:06 | |
| *** pglass has quit IRC | 19:06 | |
| xaeth | alee_ all the building is happening from the barbican-spec repo | 19:07 |
| xaeth | i'm not touching the upstream stuff at all | 19:07 |
| *** pglass has joined #openstack-barbican | 19:08 | |
| xaeth | we definitely need to true up master w/ juno | 19:08 |
| xaeth | elmiko made lots of improvements | 19:08 |
| xaeth | as for building the rpm... i just type make | 19:09 |
| xaeth | ;D | 19:09 |
| *** lisaclark1 has joined #openstack-barbican | 19:09 | |
| elmiko | i guess i tend to be more conservative in that respect lol | 19:09 |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Remove obsolete term "incubated" from docs https://review.openstack.org/212151 | 19:09 |
| xaeth | my master should have built for kilo :( | 19:10 |
| *** mixos has quit IRC | 19:11 | |
| xaeth | bringing juno to master is actually mergeable.. cant say it actually runs though o_O | 19:11 |
| * xaeth is in an emoticon mood today apparently | 19:11 | |
| xaeth | https://github.com/gregswift/barbican-spec/pull/3 | 19:11 |
| xaeth | hrm... looks legit | 19:12 |
| *** peter-hamilton has quit IRC | 19:17 | |
| *** kfarr has quit IRC | 19:17 | |
| *** rellerreller has quit IRC | 19:17 | |
| *** kfarr has joined #openstack-barbican | 19:18 | |
| *** mixos has joined #openstack-barbican | 19:19 | |
| *** peter-hamilton has joined #openstack-barbican | 19:19 | |
| *** mixos has quit IRC | 19:23 | |
| *** rellerreller has joined #openstack-barbican | 19:27 | |
| *** silos1 has quit IRC | 19:32 | |
| *** silos has joined #openstack-barbican | 19:40 | |
| *** rellerreller has quit IRC | 19:42 | |
| rm_work | lol redrobot | 19:42 |
| *** vivek-eb_ has quit IRC | 19:53 | |
| kfarr | redrobot, can I bug you to create a new release for python-barbicanclient? It will be needed for the updates to the Barbican plugin for Castellan | 19:56 |
| redrobot | kfarr sure thing... there's a new process for the client, so I'm not sure how long it will actually take... | 19:56 |
| *** kfarr_ has joined #openstack-barbican | 19:59 | |
| *** kfarr has quit IRC | 20:00 | |
| *** lisaclark1 has quit IRC | 20:01 | |
| rm_work | alee_: https://review.openstack.org/#/c/156623/2 | 20:05 |
| *** lisaclark1 has joined #openstack-barbican | 20:05 | |
| *** kfarr_ has quit IRC | 20:06 | |
| *** kfarr has joined #openstack-barbican | 20:06 | |
| *** xaeth is now known as xaeth_afk | 20:07 | |
| *** lisaclark1 has quit IRC | 20:09 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: Implement Models and Repositories for Resource Quotas https://review.openstack.org/205894 | 20:12 |
| *** alee_ has quit IRC | 20:14 | |
| *** peter-hamilton has quit IRC | 20:19 | |
| *** xaeth_afk is now known as xaeth | 20:19 | |
| rm_work | redrobot / woodster_ / chellygel: I commented with my "vision" for CertBundles and why I care about this at all, if anyone wants to comment on THAT: https://review.openstack.org/#/c/156623/2 | 20:20 |
| *** lisaclark1 has joined #openstack-barbican | 20:20 | |
| diazjf | kfarr, redrobot, what's going on with a new release for Barbican client? I'd like to work on some Barbican plugin for Castellan. feel free to throw some work my way ;-) | 20:21 |
| rm_work | diazjf: i think the barbican plugin for castellan already exists? | 20:22 |
| rm_work | kfarr wrote it :P | 20:22 |
| rm_work | kfarr: ah, also could use your view on my vision above ^^ | 20:22 |
| redrobot | diazjf yeah, kfarr has most of the barbican implementation in review | 20:22 |
| kfarr | diazjf, the reason I was asking for a new release for python-barbicanclient was because the last release was like 2 months ago the Castellan uses some of the features that have been merged since then :) | 20:22 |
| kfarr | rm_work, I saw, was just now taking a look | 20:23 |
| redrobot | diazjf but if you're looking for something to do, this client blueprint could keep you busy for a while: https://blueprints.launchpad.net/python-barbicanclient/+spec/remove-test-client | 20:23 |
| diazjf | kfarr, gotcha. redrobot, thanks, I'll take a look at it | 20:23 |
| rm_work | yeah, this can't be just me -- I am sure other people have a similar vision | 20:23 |
| redrobot | diazjf if you decide to tackle it let me know, so I can give you more info than the 2 sentence description we have there. | 20:24 |
| diazjf | redrobot, yeah it wasn't "so" informative lol, sure just give me some more info and I'd be happy to put in some work | 20:26 |
| redrobot | diazjf google hangout? | 20:26 |
| diazjf | redrobot, can't right now, but maybe we can schedule one tomorrow? | 20:26 |
| redrobot | diazjf sounds good. I'm pretty much free all day except for 10:30-11am CDT. Just ping me when you're ready to jump on. | 20:27 |
| *** chadlung has quit IRC | 20:28 | |
| diazjf | redrobot, will do thanks! | 20:29 |
| rm_work | examples of usage of this "set of certificate data" that I am calling a CertBundle: | 20:30 |
| rm_work | https://www.digicert.com/ssl-certificate-installation-barracuda.htm | 20:30 |
| rm_work | https://docs.openvpn.net/how-to-tutorialsguides/administration/installing-and-managing-ssl-web-certificates-in-openvpn-access-server/ | 20:30 |
| rm_work | https://www.digicert.com/ssl-certificate-installation-apache.htm | 20:30 |
| rm_work | we're not "inventing a new standard" here | 20:30 |
| rm_work | this is tried and true -- these are the things we need to really USE a certificate in any service | 20:30 |
| *** xaeth is now known as xaeth_afk | 20:31 | |
| *** gyee has quit IRC | 20:39 | |
| rm_work | I wish there was a /pingall command, because I really want to invite everyone to comment on my vision statement on https://review.openstack.org/#/c/156307/2 and tell me if you think I'm wrong -- because this is the basis for my whole attempt to get certificates into Castellan, so if people don't agree with that, I may as well give up | 20:40 |
| woodster_ | rm_work: you? give up??? :) | 20:41 |
| rm_work | chellygel / hockeynut / elmiko / atiwari / arunkant / kfarr / jvrbanac / reaperhulk / redrobot / ryanpetrello / woodster_ / diazjf | 20:41 |
| redrobot | hehe... I have to agree, rm_work your perseverance is commendable. | 20:41 |
| rm_work | I have expended a great deal of energy on something I really believe will be a huge improvement to openstack as a whole, not just a single project | 20:42 |
| elmiko | rm_work, i'll take a look | 20:42 |
| rm_work | it's a vision for improving the whole ecosystem | 20:42 |
| *** vivek-ebay has joined #openstack-barbican | 20:42 | |
| rm_work | but if people really don't want to make things better (or don't think this makes things better) then obviously I am wasting my time | 20:43 |
| *** silos has left #openstack-barbican | 20:46 | |
| *** diazjf has left #openstack-barbican | 20:49 | |
| openstackgerrit | Joel Coffman proposed openstack/castellan: Remove copy_key operation https://review.openstack.org/206126 | 20:50 |
| *** edtubill has quit IRC | 20:52 | |
| *** diazjf has joined #openstack-barbican | 20:53 | |
| *** diazjf has left #openstack-barbican | 20:54 | |
| *** alee_ has joined #openstack-barbican | 21:00 | |
| openstackgerrit | Merged openstack/barbican: Remove obsolete term "incubated" from docs https://review.openstack.org/212151 | 21:00 |
| woodster_ | rm_work: canned beer, sliced bread, now castellan cert manager? | 21:01 |
| rm_work | lol | 21:01 |
| rm_work | it's not revolutionary, it's just steady progress | 21:01 |
| woodster_ | rm_work: could you add a barbican cert manager impl to that CR? I'm tripping up your input kwargs a bit | 21:01 |
| rm_work | look up two | 21:02 |
| rm_work | err | 21:02 |
| rm_work | https://review.openstack.org/#/c/211780/1 | 21:02 |
| rm_work | it's in the chain | 21:02 |
| woodster_ | rm_work: sorry, didn't notice | 21:02 |
| rm_work | np | 21:02 |
| *** kfarr has quit IRC | 21:22 | |
| *** SheenaG1 has quit IRC | 21:26 | |
| *** SheenaG has joined #openstack-barbican | 21:34 | |
| *** alee_ has quit IRC | 21:38 | |
| dave-mccowan | hockeynut https://review.openstack.org/205894 fixes our parallel test problem. what do you think? | 21:42 |
| *** pglbutt has joined #openstack-barbican | 21:47 | |
| hockeynut | dave-mccowan checking now | 21:51 |
| *** pglass has quit IRC | 21:51 | |
| *** silos has joined #openstack-barbican | 21:55 | |
| silos | redrobot: ping | 21:57 |
| redrobot | silos pong | 21:57 |
| silos | What's the worker.py module for in the barbican/cmd directory? | 21:57 |
| redrobot | silos it's a wrapper for the worker proces... | 21:59 |
| *** pglbutt has quit IRC | 22:00 | |
| redrobot | silos out of the box, and also at the gerrit gate, barbican is configured to be synchronous for all requests | 22:00 |
| redrobot | silos but in a real world deployment barbican should be deployed as a distributed system. | 22:00 |
| redrobot | silos the first diagram in http://docs.openstack.org/developer/barbican/contribute/architecture.html shows what a real world deployment may look like | 22:01 |
| redrobot | silos all orders in a distributed deployment will be processed in an asynchronous fashion | 22:01 |
| redrobot | silos this is because provisioning a certificate from a public CA may take up to a few weeks. | 22:02 |
| silos | redrobot: thanks for the explanation :-D | 22:03 |
| silos | I ran worker.py and some errors popped up so I'm just trying to see if it's a bug or not. | 22:03 |
| redrobot | silos you're going to need a much fancier dev environment to test out the worker... I think you'll need at least one rabbit node | 22:04 |
| redrobot | silos or other oslo.messaging supported queue | 22:04 |
| redrobot | silos we usually use rabbit though. | 22:04 |
| silos | yea. I was looking into rabbit. but I was expecting those errors. There's another error I dont' think should be there though. Dude to a recent release of oslo.config | 22:05 |
| redrobot | silos ah... well then you may have found a bug! | 22:05 |
| silos | \o/ | 22:06 |
| *** lisaclark1 has quit IRC | 22:11 | |
| rm_work | woodster_: thanks for the feedback, it pains me a bit but i pretty much agree with you | 22:12 |
| *** gyee has joined #openstack-barbican | 22:14 | |
| *** alee_ has joined #openstack-barbican | 22:15 | |
| rm_work | will make some changes | 22:17 |
| *** SheenaG has quit IRC | 22:25 | |
| *** silos has left #openstack-barbican | 22:31 | |
| *** spotz is now known as spotz_zzz | 22:39 | |
| hockeynut | dave-mccowan - sorry, got sidetracked (its been a bad day). Appears that dogtag gate isn't thrilled with the quota CR | 22:52 |
| *** dimtruck is now known as zz_dimtruck | 22:53 | |
| rm_work | man, elmiko this conf change really borked my CR since i was doing a little bit similar rearranging | 22:55 |
| rm_work | elmiko: i'm rebasing now, need you to take a look once i finish to make sure it looks sane | 22:55 |
| rm_work | i might need to rework it again | 22:56 |
| *** SheenaG has joined #openstack-barbican | 23:01 | |
| rm_work | anyone still get the "db type could not be determined" error running tox for py26? | 23:03 |
| rm_work | and reaperhulk does the release of cryptography for pypy take longer or something? getting an error on pypy tests only, which seems to be crypto related | 23:03 |
| rm_work | ImportError: No module named cryptography.hazmat.bindings._constant_time | 23:04 |
| rm_work | though it says ==1.0 | 23:04 |
| rm_work | but it works fine on py27/py34 | 23:04 |
| openstackgerrit | Adam Harwell proposed openstack/castellan: Officially add Certificate Management to scope https://review.openstack.org/156623 | 23:05 |
| openstackgerrit | Adam Harwell proposed openstack/castellan: Add barbican implementation of CertManager https://review.openstack.org/211780 | 23:05 |
| openstackgerrit | Adam Harwell proposed openstack/castellan: Copy octavia.certmgr to Castellan https://review.openstack.org/156307 | 23:05 |
| reaperhulk | rm_work: you must run on pypy2.6 | 23:05 |
| rm_work | hmm | 23:05 |
| rm_work | let me see which pypy | 23:05 |
| reaperhulk | if the openstack infra gate is on pypy < 2.6 it will break. | 23:05 |
| reaperhulk | 2.6 came out over a month ago | 23:05 |
| rm_work | Python 2.7.6 (32f35069a16d, Jun 06 2014, 20:12:47) | 23:06 |
| rm_work | [PyPy 2.3.1 with GCC 4.2.1 Compatible Apple LLVM 5.0 (clang-500.2.79)] on darwin | 23:06 |
| rm_work | lol | 23:06 |
| reaperhulk | holy crap upgrade your pypy :) | 23:06 |
| rm_work | to what | 23:06 |
| reaperhulk | 2.6.0 | 23:06 |
| reaperhulk | (the latest) | 23:06 |
| rm_work | looks like pyenv gives me 2.5.1 as latest | 23:06 |
| reaperhulk | upgrade your pyenv. | 23:07 |
| rm_work | just did | 23:07 |
| reaperhulk | it is also out of date | 23:07 |
| rm_work | :/ | 23:07 |
| reaperhulk | no, I mean yours still is | 23:07 |
| reaperhulk | I installed pypy-2.6 via pyenv a long time ago | 23:07 |
| rm_work | yeah but i JUST updated pyenv | 23:07 |
| rm_work | just did it again | 23:07 |
| rm_work | weird | 23:07 |
| rm_work | still not seeing anything . 2.5.1 | 23:07 |
| reaperhulk | pyenv and python-build are separate projects. | 23:07 |
| reaperhulk | I don't pull pyenv from homebrew but I'm guessing you need to upgrade python-build separately | 23:07 |
| reaperhulk | (and also learn your tooling :D) | 23:08 |
| rm_work | lol | 23:08 |
| rm_work | i don't use brew's pyenv either | 23:08 |
| rm_work | used it from their git-installer | 23:08 |
| reaperhulk | what happens when you ls ~/.pyenv/plugisn/python-build/share/python-build | 23:08 |
| reaperhulk | I see pypy-2.6.0 in there | 23:08 |
| reaperhulk | obviously without the typo | 23:09 |
| rm_work | heh | 23:09 |
| rm_work | yeah hmmm | 23:09 |
| *** vivek-ebay has quit IRC | 23:09 | |
| rm_work | python-build isn't in the plugins dir | 23:09 |
| rm_work | sec | 23:09 |
| rm_work | doing further investigating | 23:10 |
| rm_work | well not sure, but restarting my shell fixed it | 23:13 |
| rm_work | <_< | 23:13 |
| rm_work | *not sure why | 23:13 |
| rm_work | which just leaves me with the py26 "db type could not be determined" issue | 23:14 |
| rm_work | hmm, removing .testrepository didn't fix it :/ | 23:16 |
| *** vivek-ebay has joined #openstack-barbican | 23:18 | |
| *** SheenaG has quit IRC | 23:21 | |
| *** chlong has quit IRC | 23:25 | |
| rm_work | woodster_: let me know if that looks better to you | 23:31 |
| rm_work | woodster_: decided to still leave registration in such that technically it will work, but is more sanely defaulting | 23:31 |
| *** tkelsey has joined #openstack-barbican | 23:35 | |
| *** tkelsey has quit IRC | 23:39 | |
| *** SheenaG has joined #openstack-barbican | 23:43 | |
| *** zz_dimtruck is now known as dimtruck | 23:50 | |
| openstackgerrit | Pradeep Kumar Singh proposed openstack/barbican: Make tests in test_hrefs, test_quota py3 compatible https://review.openstack.org/210946 | 23:55 |
| *** crc32 has quit IRC | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!