*** jamielennox is now known as jamielennox|away | 00:05 | |
*** jamielennox|away is now known as jamielennox | 00:07 | |
*** arunkant_ has left #openstack-barbican | 00:09 | |
*** jamielennox is now known as jamielennox|away | 00:10 | |
*** lisaclark1 has joined #openstack-barbican | 00:38 | |
*** dimtruck is now known as zz_dimtruck | 00:47 | |
openstackgerrit | Dave McCowan proposed openstack/barbican: Add get_count() method to project resource repositories https://review.openstack.org/212876 | 01:03 |
---|---|---|
*** vivek-ebay has quit IRC | 01:05 | |
*** alee_ has quit IRC | 01:29 | |
pksingh | Hi rm_work , are u around? | 01:32 |
pksingh | Hi everyone, i have some questions about castellan , can anybody answer please | 01:36 |
pksingh | what is the purpose of castellan? | 01:42 |
rm_you | pksingh: yes I am here | 01:44 |
rm_you | pksingh: the idea is that it provides a high level interface for Secret storage | 01:44 |
rm_you | pksingh: so that other projects like Cinder / Nova / Glance / Sahara / etc can use it, and then at a very high level a deployer can decide how they want secrets stored (with Barbican, directly in a HSM/KMIP device, etc) | 01:45 |
pksingh | rm_you: ok | 01:45 |
pksingh | rm_you: how stable it is? | 01:45 |
rm_you | it is ... nearing its first useful release, I think | 01:45 |
rm_you | I think there are projects hopeful to be able to use it by the end of the L release | 01:46 |
pksingh | rm_you: so is it not released yet? | 01:46 |
pksingh | ok | 01:46 |
rm_you | I mean... | 01:46 |
rm_you | I think the current version is a bit old | 01:46 |
rm_you | but if you pull from master, it should be pretty decent now | 01:47 |
rm_you | the barbican implementation is still pending an update I think | 01:47 |
pksingh | rm_you: ok | 01:47 |
pksingh | rm_you: so it is for only secret store or we can create secret also? | 01:48 |
rm_you | you can also create | 01:48 |
rm_you | though it might be limited? I forget which create options are available | 01:48 |
rm_you | create/store/get/delete | 01:49 |
pksingh | rm_you: ok | 01:49 |
rm_you | I believe "copy" was there but just got removed | 01:49 |
pksingh | ok | 01:51 |
pksingh | rm_you: is tls/ssl secret also supported by castellan? | 01:52 |
rm_you | pksingh: WORKING ON IT. >_> | 01:52 |
pksingh | rm_you: ok thanks a lot | 01:52 |
rm_you | feel free to comment on https://review.openstack.org/#/c/156623/4 | 01:53 |
pksingh | if have other questions , will come to you :) | 01:53 |
rm_you | pksingh: ^^ | 01:53 |
rm_you | the tls/ssl secret thing is an ongoing debate | 01:53 |
*** crc32 has quit IRC | 01:53 | |
rm_you | redrobot: ^^ notice what pksingh asked with zero prompting from me :P | 01:54 |
rm_you | just sayin' | 01:54 |
*** alee_ has joined #openstack-barbican | 02:04 | |
*** jamielennox|away is now known as jamielennox | 02:08 | |
*** zz_dimtruck is now known as dimtruck | 02:25 | |
*** gyee_500 has quit IRC | 02:29 | |
*** lisaclark1 has quit IRC | 02:53 | |
*** crc32 has joined #openstack-barbican | 03:28 | |
*** tkelsey has joined #openstack-barbican | 03:29 | |
*** xaeth_afk is now known as xaeth | 03:31 | |
*** tkelsey has quit IRC | 03:33 | |
*** mixos has joined #openstack-barbican | 03:35 | |
mixos | Hi anyone here ? | 03:35 |
* rm_you waves at mixos | 03:36 | |
mixos | @rm_you you here again ? | 03:36 |
rm_you | I am ALWAYS here | 03:36 |
*** crc32 has quit IRC | 03:36 | |
rm_you | which may or may not be good for my sanity | 03:36 |
rm_you | what's up? | 03:37 |
mixos | @rm_you saw you @ openstack summit presentation. | 03:37 |
mixos | presenting contents related to lbaas. | 03:37 |
mixos | That was you. right ? | 03:37 |
rm_you | yes | 03:38 |
mixos | cool . :- ) | 03:38 |
mixos | a question on barbican. | 03:38 |
mixos | when you delete an order ref. | 03:38 |
mixos | the corresponding scret should be deleted as well. right ? | 03:39 |
rm_you | hmm, may not be able to answer this -- I know there was some discussion of a difference between "deleting" and "cancelling" an order, at least if it was still in progress | 03:39 |
rm_you | ah | 03:39 |
rm_you | no | 03:39 |
rm_you | deleting an order should not delete anything that came from it | 03:39 |
mixos | no ? | 03:39 |
rm_you | if it is finished | 03:39 |
rm_you | at least I wouldn't assume it does? | 03:39 |
rm_you | that would be... weird | 03:39 |
mixos | just sec. | 03:40 |
rm_you | i can test quick tho :P | 03:40 |
*** crc32 has joined #openstack-barbican | 03:40 | |
mixos | "order_ref": "http://localhost:9311/v1/orders/6ae5ab0c-4c00-4163-9b0d-aaf28a502567", | 03:40 |
mixos | "secret_ref": "http://localhost:9311/v1/secrets/92a6ddb7-e1a6-4039-afec-b3990dc908d9", | 03:40 |
mixos | these two (order ref and secret ref ) points to the same key. | 03:41 |
mixos | so... deleting from secret .. should delete same entry from orders. | 03:41 |
mixos | but it does not behave this way now. | 03:42 |
mixos | thought it was bug. | 03:42 |
rm_work | err | 03:42 |
rm_work | order ref is an object | 03:42 |
rm_work | and secret ref is an object | 03:42 |
rm_work | order ref has metadata that points to the secret ref | 03:42 |
mixos | correct. | 03:43 |
rm_work | but deleting either will not delete the other | 03:43 |
rm_work | since it is not actually the same object | 03:43 |
mixos | is that right behavior ? | 03:43 |
rm_work | i believe so | 03:43 |
mixos | why ? | 03:43 |
rm_work | because if i create an order, it finishes, and i have a secret, i should be able to clear out the order | 03:43 |
rm_work | and why would it delete the secret? it's just a reference to it | 03:44 |
mixos | I see. | 03:44 |
rm_work | same as if i create a secret, and create a container, and then delete the container | 03:44 |
rm_work | why would it delete the secret? | 03:44 |
mixos | now I get it... | 03:44 |
*** crc32 has quit IRC | 03:44 | |
mixos | order ... just order to create secret. | 03:44 |
rm_work | yes | 03:44 |
mixos | GOT IT . :- ) | 03:44 |
mixos | make sense. | 03:45 |
rm_work | the actual order object is useless once it is completed | 03:45 |
rm_work | other than as history, maybe | 03:45 |
mixos | I just thought that if they cross ref, then one deleted and the other should be as well. | 03:45 |
mixos | but that was total misunderstanding. | 03:45 |
rm_work | yeah don't think of it as a cross-reference | 03:45 |
rm_work | it's just a one-way linkage | 03:46 |
rm_work | like a symlink on a filesystem | 03:46 |
mixos | right. make sense. | 03:46 |
mixos | Anyway good to see you here again. | 03:46 |
rm_work | cool cool :) | 03:46 |
rm_work | yeah i am on too much for my own good | 03:46 |
rm_work | going to go watch some TV before i start working again in two hours :) | 03:46 |
mixos | haha. life's short. don't work too much. | 03:47 |
mixos | Thanks for helping me with the concept. ! | 03:48 |
*** jamielennox is now known as jamielennox|away | 04:02 | |
*** dimtruck is now known as zz_dimtruck | 04:09 | |
openstackgerrit | Dave McCowan proposed openstack/barbican: Add Quota Enforcement API https://review.openstack.org/212967 | 04:12 |
*** Nirupama has joined #openstack-barbican | 04:18 | |
*** vivek-ebay has joined #openstack-barbican | 04:19 | |
*** vivek-ebay has quit IRC | 04:21 | |
*** vivek-ebay has joined #openstack-barbican | 04:27 | |
*** morgan_404 is now known as morgan_204 | 04:42 | |
*** morgan_204 is now known as morgan_206 | 04:44 | |
*** morgan_206 is now known as morgan_503 | 04:45 | |
*** jamielennox|away is now known as jamielennox | 04:46 | |
*** dave-mccowan has quit IRC | 05:14 | |
*** vivek-ebay has quit IRC | 05:14 | |
*** vivek-ebay has joined #openstack-barbican | 05:23 | |
*** chlong has quit IRC | 05:41 | |
*** vivek-ebay has quit IRC | 05:43 | |
*** vivek-ebay has joined #openstack-barbican | 05:44 | |
*** chlong has joined #openstack-barbican | 05:44 | |
*** vivek-ebay has quit IRC | 05:48 | |
*** mixos has quit IRC | 06:22 | |
*** jamielennox is now known as jamielennox|away | 07:17 | |
*** tkelsey has joined #openstack-barbican | 07:31 | |
*** tkelsey has quit IRC | 07:35 | |
*** chlong has quit IRC | 07:36 | |
*** chlong has joined #openstack-barbican | 07:39 | |
*** tkelsey has joined #openstack-barbican | 07:51 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/212243 | 09:14 |
*** tkelsey has quit IRC | 09:22 | |
*** peter-hamilton has joined #openstack-barbican | 11:20 | |
*** peter-hamilton has quit IRC | 11:43 | |
*** peter-hamilton has joined #openstack-barbican | 12:12 | |
*** SheenaG has joined #openstack-barbican | 12:17 | |
*** peter-hamilton has quit IRC | 12:23 | |
*** Nirupama has quit IRC | 12:32 | |
*** peter-hamilton has joined #openstack-barbican | 12:37 | |
*** xaeth is now known as xaeth_afk | 12:38 | |
*** rellerreller has joined #openstack-barbican | 12:49 | |
*** dave-mccowan has joined #openstack-barbican | 12:52 | |
*** SheenaG has quit IRC | 12:57 | |
*** SheenaG has joined #openstack-barbican | 13:10 | |
*** zz_dimtruck is now known as dimtruck | 13:20 | |
*** vivek-ebay has joined #openstack-barbican | 13:28 | |
*** everjeje has joined #openstack-barbican | 13:53 | |
rellerreller | I could use a workflow on https://review.openstack.org/#/c/212578/ . It's one line and has 2 +2s and several +1s. | 13:56 |
*** spotz_zzz is now known as spotz | 13:58 | |
hockeynut | rellerreller done | 13:59 |
rellerreller | hockeynut thanks! | 14:00 |
*** dimtruck is now known as zz_dimtruck | 14:03 | |
dave-mccowan | i nominate today "quota code review day". if you're looking for something to read with your morning coffee, take a look. There are 3 now, include 2 smaller bite-sized ones. :-) https://review.openstack.org/#/c/212967/ https://review.openstack.org/212876 https://review.openstack.org/205894 | 14:10 |
peter-hamilton | rellerreller: PyKMIP 0.4.0 has been released, you should be good to go | 14:12 |
*** edtubill has joined #openstack-barbican | 14:13 | |
*** lisaclark1 has joined #openstack-barbican | 14:15 | |
rellerreller | peter-hamilton thanks! I will recheck it. | 14:19 |
*** chlong has quit IRC | 14:19 | |
*** vivek-eb_ has joined #openstack-barbican | 14:20 | |
*** pglass has joined #openstack-barbican | 14:22 | |
*** vivek-ebay has quit IRC | 14:22 | |
*** lisaclark1 has quit IRC | 14:26 | |
*** zz_dimtruck is now known as dimtruck | 14:27 | |
openstackgerrit | Merged openstack/barbican: Made Functional Test Key 256 Bits https://review.openstack.org/212578 | 14:30 |
*** lisaclark1 has joined #openstack-barbican | 14:41 | |
openstackgerrit | Zhenyu Zheng proposed openstack/barbican: Drop downgrade field in alembic script.py.mako and version https://review.openstack.org/209323 | 14:45 |
*** SheenaG has quit IRC | 14:52 | |
*** SheenaG has joined #openstack-barbican | 14:56 | |
*** alee_ is now known as alee_afk | 15:00 | |
*** nelsnelson has joined #openstack-barbican | 15:04 | |
*** xaeth_afk is now known as xaeth | 15:07 | |
*** lisaclark1 has quit IRC | 15:12 | |
*** lisaclark1 has joined #openstack-barbican | 15:12 | |
*** silos has joined #openstack-barbican | 15:17 | |
*** openstackgerrit has quit IRC | 15:31 | |
*** openstackgerrit has joined #openstack-barbican | 15:32 | |
*** darrenmoffat has quit IRC | 15:38 | |
*** darrenmoffat has joined #openstack-barbican | 15:39 | |
*** pglass has quit IRC | 15:39 | |
*** pglass has joined #openstack-barbican | 15:49 | |
*** lisaclark1 has quit IRC | 15:57 | |
*** woodster_ has joined #openstack-barbican | 16:04 | |
*** rellerreller has quit IRC | 16:04 | |
*** lisaclark1 has joined #openstack-barbican | 16:07 | |
*** lisaclark1 has joined #openstack-barbican | 16:07 | |
*** gyee has joined #openstack-barbican | 16:37 | |
*** lisaclark1 has quit IRC | 16:40 | |
*** lisaclark1 has joined #openstack-barbican | 16:41 | |
*** lisaclark1 has quit IRC | 16:55 | |
*** peter-hamilton has quit IRC | 16:56 | |
*** atiwari has joined #openstack-barbican | 16:56 | |
*** peter-hamilton has joined #openstack-barbican | 16:59 | |
*** rellerreller has joined #openstack-barbican | 17:07 | |
*** crc32 has joined #openstack-barbican | 17:11 | |
*** crc32 has quit IRC | 17:13 | |
*** david-lyle is now known as cbrown | 17:17 | |
openstackgerrit | Dave McCowan proposed openstack/barbican: Add get_count() method to project resource repositories https://review.openstack.org/212876 | 17:24 |
*** crc32 has joined #openstack-barbican | 17:27 | |
*** SheenaG has quit IRC | 17:53 | |
openstackgerrit | Dave McCowan proposed openstack/barbican: Add get_count() method to project resource repositories https://review.openstack.org/212876 | 17:55 |
*** rellerreller has quit IRC | 18:00 | |
*** peter-hamilton has quit IRC | 18:00 | |
*** rellerreller has joined #openstack-barbican | 18:01 | |
*** lisaclark1 has joined #openstack-barbican | 18:09 | |
*** woodster_ has quit IRC | 18:10 | |
*** edtubill has quit IRC | 18:12 | |
*** vivek-eb_ has quit IRC | 18:21 | |
*** lisaclark1 has quit IRC | 18:54 | |
*** lisaclark1 has joined #openstack-barbican | 18:57 | |
*** lisaclark1 has quit IRC | 19:03 | |
*** lisaclark1 has joined #openstack-barbican | 19:03 | |
*** vivek-ebay has joined #openstack-barbican | 19:08 | |
*** crc32 has quit IRC | 19:25 | |
*** edtubill has joined #openstack-barbican | 19:35 | |
*** silos has left #openstack-barbican | 19:39 | |
*** rellerreller has quit IRC | 19:41 | |
*** crc32 has joined #openstack-barbican | 19:50 | |
*** lisaclark1 has quit IRC | 20:00 | |
*** lisaclark1 has joined #openstack-barbican | 20:03 | |
*** vivek-ebay has quit IRC | 20:06 | |
*** SheenaG has joined #openstack-barbican | 20:11 | |
*** woodster_ has joined #openstack-barbican | 20:13 | |
*** SheenaG1 has joined #openstack-barbican | 20:21 | |
*** SheenaG has quit IRC | 20:22 | |
*** vivek-ebay has joined #openstack-barbican | 20:37 | |
*** vivek-eb_ has joined #openstack-barbican | 20:40 | |
*** vivek-ebay has quit IRC | 20:41 | |
*** gyee has quit IRC | 21:09 | |
*** SheenaG1 has quit IRC | 21:11 | |
*** cbrown is now known as david-lyle | 21:20 | |
*** SheenaG has joined #openstack-barbican | 21:21 | |
*** vivek-eb_ has quit IRC | 21:26 | |
*** vivek-ebay has joined #openstack-barbican | 21:26 | |
*** lisaclark1 has quit IRC | 21:32 | |
*** vivek-eb_ has joined #openstack-barbican | 21:41 | |
*** xaeth is now known as xaeth_afk | 21:41 | |
*** vivek-ebay has quit IRC | 21:44 | |
*** edtubill has quit IRC | 22:04 | |
*** spotz is now known as spotz_zzz | 22:08 | |
*** pglass has quit IRC | 22:15 | |
*** dimtruck is now known as zz_dimtruck | 22:21 | |
*** zz_dimtruck is now known as dimtruck | 22:36 | |
*** lisaclark1 has joined #openstack-barbican | 22:40 | |
*** vivek-eb_ has quit IRC | 22:42 | |
*** vivek-ebay has joined #openstack-barbican | 22:42 | |
*** rellerreller has joined #openstack-barbican | 22:45 | |
*** dimtruck is now known as zz_dimtruck | 22:51 | |
*** zz_dimtruck is now known as dimtruck | 22:57 | |
*** lisaclark1 has quit IRC | 22:59 | |
*** atiwari1 has joined #openstack-barbican | 23:04 | |
*** atiwari has quit IRC | 23:06 | |
*** rellerreller has quit IRC | 23:17 | |
*** dimtruck is now known as zz_dimtruck | 23:23 | |
*** SheenaG has quit IRC | 23:48 | |
*** mixos has joined #openstack-barbican | 23:57 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!