| rm_work | err did "key-manager" change | 00:22 |
|---|---|---|
| rm_work | my testing is all failing, lulz | 00:22 |
| rm_work | base_url = endpoint['key-manager'][0].get('url') | 00:22 |
| rm_work | KeyError: 'key-manager' | 00:22 |
| rm_work | ah maybe nm | 00:24 |
| rm_work | might be auth? hmm | 00:24 |
| *** tkelsey has quit IRC | 00:25 | |
| alee | hey - how does one specify mulitple options in oslo config? | 00:28 |
| alee | like say I want multiple plugins enabled? | 00:28 |
| alee | enabled_certificate_plugins = [ 'foo', 'bar'] ? | 00:30 |
| alee | redrobot, ^^ | 00:35 |
| *** rellerreller has joined #openstack-barbican | 00:52 | |
| *** xaeth_afk is now known as xaeth | 01:11 | |
| *** xaeth is now known as xaeth_afk | 01:21 | |
| *** nkinder has quit IRC | 01:37 | |
| *** rellerreller has quit IRC | 01:43 | |
| openstackgerrit | Dave McCowan proposed openstack/barbican: DO NOT MERGE: Data collection job only https://review.openstack.org/220332 | 02:31 |
| *** zz_dimtruck is now known as dimtruck | 02:33 | |
| *** openstackgerrit_ has joined #openstack-barbican | 03:11 | |
| *** xaeth_afk is now known as xaeth | 03:17 | |
| *** kebray has joined #openstack-barbican | 03:18 | |
| *** woodster_ has quit IRC | 03:19 | |
| *** dave-mccowan has quit IRC | 03:20 | |
| *** tkelsey has joined #openstack-barbican | 03:22 | |
| *** jroll has quit IRC | 03:28 | |
| *** tdink has quit IRC | 03:28 | |
| *** alee has quit IRC | 03:28 | |
| *** dimtruck has quit IRC | 03:28 | |
| *** eglute has quit IRC | 03:28 | |
| *** hockeynut has quit IRC | 03:28 | |
| *** lbragstad has quit IRC | 03:28 | |
| *** diazjf has joined #openstack-barbican | 03:29 | |
| *** alee has joined #openstack-barbican | 03:29 | |
| *** tdink has joined #openstack-barbican | 03:32 | |
| *** eglute has joined #openstack-barbican | 03:33 | |
| *** hockeynut has joined #openstack-barbican | 03:33 | |
| *** dimtruck has joined #openstack-barbican | 03:33 | |
| *** lbragstad has joined #openstack-barbican | 03:33 | |
| *** jroll has joined #openstack-barbican | 03:34 | |
| openstackgerrit | Fernando Diaz proposed openstack/barbican: Use testr for running functional tests and documentation https://review.openstack.org/218117 | 03:43 |
| *** vivek-ebay has joined #openstack-barbican | 03:45 | |
| openstackgerrit | Fernando Diaz proposed openstack/barbican: Use testr for running functional tests and documentation https://review.openstack.org/218117 | 03:51 |
| *** dimtruck is now known as zz_dimtruck | 03:53 | |
| openstackgerrit | Fernando Diaz proposed openstack/barbican: Use testr for running functional tests and documentation https://review.openstack.org/218117 | 04:02 |
| *** openstackgerrit_ has quit IRC | 04:14 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/220390 | 04:20 |
| *** diazjf has quit IRC | 04:44 | |
| *** tkelsey has quit IRC | 04:51 | |
| *** diazjf has joined #openstack-barbican | 04:52 | |
| openstackgerrit | Adam Harwell proposed openstack/barbican: Fix new devstack gate-hook (WIP) https://review.openstack.org/220396 | 05:05 |
| *** Nirupama has joined #openstack-barbican | 05:12 | |
| *** kebray has quit IRC | 05:18 | |
| *** jamielennox is now known as jamielennox|away | 05:35 | |
| *** vivek-ebay has quit IRC | 05:50 | |
| *** diazjf has quit IRC | 05:53 | |
| *** jamielennox|away is now known as jamielennox | 05:58 | |
| rm_work | FYI: Barbican gates broken because of a devstack change that landed today: https://review.openstack.org/#/c/186684/ | 06:01 |
| rm_work | working on a fix ASAP | 06:01 |
| rm_work | (unrelated to the stuff i was doing) | 06:01 |
| *** xaeth is now known as xaeth_afk | 06:13 | |
| *** tkelsey has joined #openstack-barbican | 06:19 | |
| *** tkelsey has quit IRC | 06:24 | |
| openstackgerrit | Ade Lee proposed openstack/barbican: Added functional tests for creating CAs https://review.openstack.org/220409 | 06:26 |
| openstackgerrit | Adam Harwell proposed openstack/barbican: Fix new devstack gate-hook (WIP) https://review.openstack.org/220396 | 06:30 |
| openstackgerrit | Adam Harwell proposed openstack/barbican: Fix devstack gate (and new gate_hook.sh) https://review.openstack.org/220396 | 06:34 |
| rm_work | alee: be aware the gate is broken right now | 06:39 |
| rm_work | so don't worry about false-positive dsvm failures | 06:39 |
| rm_work | https://review.openstack.org/#/c/186684/ | 06:40 |
| rm_work | fix is hopefully what i just submitted a minute ago | 06:40 |
| alee | rm_work, thanks -- I'll worry about it in the morning | 06:40 |
| rm_work | yep | 06:40 |
| alee | g'night! | 06:40 |
| rm_work | night | 06:40 |
| *** vivek-ebay has joined #openstack-barbican | 06:50 | |
| *** vivek-ebay has quit IRC | 06:55 | |
| *** jamielennox is now known as jamielennox|away | 07:08 | |
| *** shohel has joined #openstack-barbican | 07:09 | |
| openstackgerrit | Adam Harwell proposed openstack/barbican: Fix devstack gate (and new gate_hook.sh) https://review.openstack.org/220396 | 07:19 |
| rm_work | forgot a \ | 07:20 |
| rm_work | >_> | 07:20 |
| *** jamielennox|away is now known as jamielennox | 07:32 | |
| rm_work | erg, so close | 07:59 |
| openstackgerrit | Adam Harwell proposed openstack/barbican: Fix devstack gate (and new gate_hook.sh) https://review.openstack.org/220396 | 07:59 |
| rm_work | ok i think this should work | 08:15 |
| *** tkelsey has joined #openstack-barbican | 08:20 | |
| *** tkelsey has quit IRC | 08:25 | |
| rm_work | spins up but i don't think tests are going to work because barbicanclient seems to use keystone v2 only? don't think that is right but it seems to be what i'm getting... | 08:30 |
| *** jaosorior has joined #openstack-barbican | 08:39 | |
| rm_work | ugh | 08:41 |
| rm_work | python-barbicanclient: _DEFAULT_IDENTITY_API_VERSION = '3.0' | 08:41 |
| rm_work | directly incompatible with everything else -- supposed to be '3' not '3.0' | 08:41 |
| rm_work | whatever, can fix it later | 08:43 |
| jaosorior | rm_work: is it incompatible? | 08:44 |
| rm_work | yes | 08:44 |
| rm_work | if i export 3.0, the other clients all fail | 08:44 |
| rm_work | but if i export 3, barbicanclient falls back to 2.0 and fails | 08:44 |
| jaosorior | rm_work: Well... fuck | 08:44 |
| rm_work | almost done fixing the gate tho | 08:45 |
| rm_work | then it's beer-o-clock | 08:46 |
| rm_work | found another good sour -- New Belgium's La Folie | 08:47 |
| rm_work | http://www.beeradvocate.com/beer/profile/192/1917/ | 08:47 |
| jaosorior | haha not bad! | 08:48 |
| jaosorior | what time is it there? | 08:49 |
| rm_work | err | 08:56 |
| rm_work | hmm, 2am? | 08:56 |
| rm_work | i'm on the west coast presently | 08:56 |
| jaosorior | nice, where at? | 08:58 |
| rm_work | near Seattle | 09:00 |
| rm_work | woo, https://review.openstack.org/#/c/220396/ should fix the gate now | 09:03 |
| rm_work | jaosorior: could use a review :) | 09:04 |
| jaosorior | niiiiice! You're even using openstack CLI | 09:05 |
| jaosorior | I was meaning to do that at some point :D | 09:05 |
| rm_work | yeah, had to switch | 09:05 |
| rm_work | they merged a change that made dsvm gates only keystone V3 | 09:05 |
| rm_work | which the old keystone client doesn't even support T_T | 09:05 |
| jaosorior | excellent | 09:06 |
| rm_work | and with this, BOTH gates are passing | 09:06 |
| rm_work | so we can soon switch over | 09:06 |
| jaosorior | rm_work: +2 given | 09:06 |
| rm_work | sweet. now just need some other people on so we can get this resolved and start rechecking everything :P | 09:07 |
| rm_work | the only downside of working weird hours for the US is the lack of people online to actually assist / review (which i guess you must be used to :P) | 09:07 |
| rm_work | we need more globally spread out cores | 09:08 |
| jaosorior | rm_work: yep... pretty used to it | 09:08 |
| rm_work | you're the only non-US core, eh? | 09:08 |
| jaosorior | yup | 09:08 |
| jaosorior | and I don't see that changing any time soon :/ | 09:08 |
| jaosorior | not many contributors outside the US. I don't know why | 09:08 |
| jaosorior | well, for Barbican I mean | 09:08 |
| rm_work | yeah | 09:08 |
| openstackgerrit | Adam Harwell proposed openstack/barbican: Remove old gate code https://review.openstack.org/219451 | 09:15 |
| rm_work | there, the depends-on chain is set up properly now I think | 09:17 |
| rm_work | longest cross-project chain i've ever done | 09:17 |
| rm_work | the gate is complicated <_< | 09:17 |
| rm_work | man, if we could tune the devstack ./stack a bit so it didn't take quite as long, it would save a TON of time given how many times a day it has to run | 09:20 |
| rm_work | like, imagine if each instance was up for even 2-3 less minutes | 09:20 |
| rm_work | that is a lot of compute time | 09:20 |
| jaosorior | that would be brilliant | 09:24 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: API documentation for CAs interface https://review.openstack.org/219412 | 09:25 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Support for creation of subordinate CAs https://review.openstack.org/219411 | 09:25 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Add subca functionality to snakeoil plugin https://review.openstack.org/220011 | 09:25 |
| rm_work | such rebase | 09:25 |
| jaosorior | rm_work: So how's Seattle? What are you doing over there? | 09:26 |
| rm_work | was up here for a gaming convention thing, then kinda been puttering around visiting people | 09:26 |
| rm_work | crashing on various couches | 09:26 |
| jaosorior | cool! | 09:26 |
| rm_work | yeah, working 90% remotely is really sweet | 09:27 |
| jaosorior | I've got some friends that live there. They say it's a pretty cool city | 09:27 |
| rm_work | yeah, i love it | 09:27 |
| rm_work | wish i was here all the time | 09:27 |
| rm_work | well | 09:27 |
| rm_work | i wish i was in Barcelona all the time :P | 09:27 |
| rm_work | but here would work too | 09:27 |
| jaosorior | hahaha Barcelona is brilliant too | 09:27 |
| jaosorior | But I've heard rent in Seattle sucks | 09:28 |
| jaosorior | probably Barcelona would be cheaper ;) | 09:28 |
| rm_work | actually yeah T_T | 09:28 |
| rm_work | not as bad here as like, California bay area | 09:29 |
| rm_work | but still not great | 09:29 |
| jaosorior | No idea how rent is in the Bay Area | 09:29 |
| jaosorior | then again... rent is also stupid expensive here in Helsinki | 09:29 |
| rm_work | if you don't want roommates, studio apartment close-by bay area can run like $2500 | 09:32 |
| rm_work | of course it gets a LITTLE cheaper as you go out | 09:32 |
| rm_work | One of my friends in Seattle has an apartment that is only like $1000 I think, but it is literally the size of a small walk-in closet, if he folds down the murphy bed there is zero floor space, and people routinely get beaten up outside his window | 09:34 |
| rm_work | so there's that | 09:34 |
| jaosorior | that sounds quite crappy | 09:34 |
| jaosorior | my apt. in Helsinki is pretty small (a studio) and I live in the bar area (Kallio). But the worst that can happen here is drunk people doing drunk things (which is usually pretty harlmess around here) | 09:35 |
| rm_work | heh yeah | 09:35 |
| rm_work | the general quality of the drunken natives is much higher outside the US I think | 09:36 |
| jaosorior | hahaha remember I'm from México. I know the other side of the coin | 09:36 |
| jaosorior | Drunken natives where I come from... can get pretty....entertaining? | 09:37 |
| rm_work | heh, i bet | 09:44 |
| rm_work | it feels a bit weird i haven't been down to mexico really, since i have been living in TX for like 10 years almost now <_< | 09:45 |
| jaosorior | well, I do recommend visiting middle/south of Mexico | 09:47 |
| jaosorior | rm_work: Are you there? | 09:58 |
| rm_work | yeah jaosorior | 10:02 |
| *** dave-mccowan has joined #openstack-barbican | 10:06 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: API documentation for CAs interface https://review.openstack.org/219412 | 10:07 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Support for creation of subordinate CAs https://review.openstack.org/219411 | 10:07 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Add subca functionality to snakeoil plugin https://review.openstack.org/220011 | 10:07 |
| jaosorior | rm_work: I think I figured it out | 10:07 |
| rm_work | figured what out? :P | 10:07 |
| jaosorior | had some issues with alembic | 10:07 |
| rm_work | ah | 10:07 |
| jaosorior | dave-mccowan: ping | 10:38 |
| dave-mccowan | jaosorior pong | 10:38 |
| jaosorior | Any luck with the kilo/stable gate? | 10:38 |
| dave-mccowan | jaosorior i've got a few leads, but no success yet. others have had the same problem, but none of their fixes have worked yet. i'm trying save the "pip freeze" and "env" data from master and kilo/stable to compare. | 10:40 |
| jaosorior | dave-mccowan: Yeah... not a trivial issue :/ | 10:40 |
| dave-mccowan | jaosorior the path in the gate is: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/usr/local/sbin:/usr/sbin | 10:40 |
| jaosorior | games? O_o | 10:41 |
| jaosorior | /usr/games ... funky | 10:41 |
| dave-mccowan | jaosorior but i expect subunit-trace to in in .pyenv/ somewhere. would you expect .pyenv to be in the path? | 10:41 |
| jaosorior | pyenv? Not necessarily | 10:42 |
| jaosorior | pyenv shouldn't bee needed in the gate | 10:42 |
| dave-mccowan | jaosorior ok.. that makes sense. pyenv is my local machine. | 10:43 |
| dave-mccowan | jaosorior any idea why i can't add the "env" command to run_tests.sh in master? | 10:44 |
| jaosorior | no idea | 10:44 |
| jaosorior | rm_work: Sooo... this commit https://review.openstack.org/#/c/220396/ is needed for the gate to pass again, right? | 10:45 |
| rm_work | yep | 10:45 |
| jaosorior | I'm guessing it's too early for other cores to be awake yet... | 10:45 |
| rm_work | prolly | 10:45 |
| jaosorior | dave-mccowan: Damn, now that I think about it. What time is it where you're at? | 10:45 |
| rm_work | i should prolly head to bed soon, last night i stayed up till noon (does that count as night?) | 10:46 |
| rm_work | but i need to not do that again | 10:46 |
| dave-mccowan | jaosorior 6:46am. my son started back to school last week. his bus comes at 5:50am, so i've had to turn into an early bird. | 10:46 |
| jaosorior | rm_work: Do you think people will get pissed if I just merge that commit? haha Would REALLY use that to keep working today | 10:46 |
| rm_work | jaosorior: dunno... it's just changes to the gate code, not to app code, so... | 10:47 |
| rm_work | "gate is broken" might be a good excuse | 10:47 |
| rm_work | though, without other cores on, is anything else going to merge anyway? | 10:47 |
| jaosorior | dave-mccowan: Can you give a quick review to this CR? https://review.openstack.org/#/c/220396/ | 10:47 |
| rm_work | you can always rebase on it | 10:47 |
| jaosorior | rm_work: Good idea dude! | 10:48 |
| dave-mccowan | sure. is the master gate broken? i thought it was my patch. | 10:48 |
| rm_work | lol yeah, barbican gate is hosed | 10:48 |
| rm_work | not just you | 10:48 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: API documentation for CAs interface https://review.openstack.org/219412 | 10:49 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Support for creation of subordinate CAs https://review.openstack.org/219411 | 10:49 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Add subca functionality to snakeoil plugin https://review.openstack.org/220011 | 10:49 |
| dave-mccowan | ah, they finally killed the deprecated clis | 10:50 |
| rm_work | yep | 10:50 |
| rm_work | fortunately i was working on the gate already anyway | 10:50 |
| rm_work | dave-mccowan: you can rebase on top of that CR and get real results for the time being | 10:51 |
| rm_work | 220396 | 10:51 |
| dave-mccowan | in lib/barbican line 347 there's a block of code in there twice that only needs to be once | 10:52 |
| rm_work | no, had to split the creates | 10:52 |
| rm_work | one for public and one for internal | 10:52 |
| rm_work | they used to be one line | 10:52 |
| rm_work | new client doesn't support that apparently | 10:53 |
| jaosorior | that is correct | 10:53 |
| jaosorior | it's the way the CLI works now | 10:53 |
| jaosorior | a bit more verbose, but I don't really mind | 10:53 |
| rm_work | yeah, it's fine | 10:53 |
| dave-mccowan | jaosorior doesn't barbican have only one endpoint now? no internal admin i/f? or is that why they point to the same URL? | 10:54 |
| rm_work | well, i really just converted what was already there -- to maintain 1:1 with existing, we need to add both | 10:54 |
| rm_work | not sure if they are used | 10:54 |
| rm_work | I think it's an IP thing | 10:54 |
| rm_work | like, different networks | 10:55 |
| rm_work | not necessarily what they do | 10:55 |
| dave-mccowan | rm_work yea, i agree. functional equivalence is most important for this patch. | 10:55 |
| jaosorior | dave-mccowan: Only one endpoint is really needed. You could configure several... but wouldn't find a use-case | 10:55 |
| jaosorior | At least for our testing set-up. Only one is needed | 10:55 |
| rm_work | BTW, barbican dsvm builds breaking also breaks other projects' gates now <_< just FYI | 10:56 |
| rm_work | or ... hmm, maybe magnum hasn't merged their thing yet. | 10:56 |
| rm_work | octavia has a new gate WIP that relies on barbican, hopefully to merge soon | 10:56 |
| dave-mccowan | +1 from me. if this was not urgent gate fixing patch, i'd say to update keystone_data.sh too. but ship it. i can work on the other script. | 10:57 |
| jaosorior | well, if dave-mccowan gives a review and one more core wakes up, then I could merge it | 10:57 |
| rm_work | what is keystone_data.sh? | 10:57 |
| rm_work | have not even seen that | 10:57 |
| rm_work | apparently not that important, because everything is green... | 10:57 |
| rm_work | ah i see it. yeah | 10:58 |
| jaosorior | rm_work: Just a script to set up different projects and such, for setting up a test environment | 10:58 |
| jaosorior | not really used by us | 10:58 |
| rm_work | pretty much the same thing | 10:58 |
| jaosorior | I mean | 10:58 |
| jaosorior | not really used by the gate | 10:58 |
| rm_work | all the changes should port over | 10:58 |
| jaosorior | alee: You awake? | 10:58 |
| rm_work | it was "tedious" making those changes <_< | 10:58 |
| rm_work | so have fun :P | 10:59 |
| jaosorior | rm_work: I'm actually happy you did it haha. I was planning on doing that at some point :P | 10:59 |
| dave-mccowan | jaosorior rm_work the other script is for local user's test environments. maybe i'm the only one who uses it. :-) seems like everyone has their own way of setting up local keystone. | 10:59 |
| rm_work | by the end i finally figured out how to effectively find/replace the changes... | 10:59 |
| rm_work | once i was done, that is | 11:00 |
| jaosorior | dave-mccowan: I had my own scripts for that... but I forgot to version control it and now my scripts are lost | 11:00 |
| rm_work | yeah my scripts live in gists | 11:00 |
| dave-mccowan | jaosorior i try to keep mine in 'git stash', but keep losing them. i need to find a better place. | 11:01 |
| rm_work | this one is still broken though, in part due to the 3 / 3.0 issue | 11:01 |
| rm_work | https://gist.github.com/rm-you/70f0b779970402e9baba | 11:01 |
| *** peter-hamilton has joined #openstack-barbican | 11:01 | |
| rm_work | and i can't figure out what else i need to set to get it to work... | 11:01 |
| rm_work | it = `barbican secret list` | 11:02 |
| rm_work | stack@devstack:~$ barbican --os-project-name admin --os-project-domain-id default secret list | 11:02 |
| rm_work | Expecting to find domain in user - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-b39c564d-7b86-4ef8-a0d7-ba5b813678b4) | 11:02 |
| rm_work | i think i am just putting the wrong thing | 11:03 |
| dave-mccowan | rm_work you need to get a scoped token | 11:03 |
| rm_work | erg | 11:03 |
| dave-mccowan | rm_work add project to your keystone command | 11:03 |
| rm_work | does keystone v3 not support password auth? >_> | 11:03 |
| dave-mccowan | rm_work... oh.. does barbican client do the keystone thing for us? i've never used it. | 11:04 |
| rm_work | it is supposed to, I thought | 11:04 |
| rm_work | i never gave it any token before | 11:04 |
| rm_work | just set environment variables | 11:04 |
| rm_work | OS_USERNAME OS_PASSWORD OS_AUTH_URL OS_IDENTITY_API_VERSION and BARBICAN_ENDPOINT | 11:05 |
| rm_work | and OS_TENANT_NAME | 11:05 |
| rm_work | now it wants more with v3 :( | 11:05 |
| rm_work | with just those set: | 11:05 |
| rm_work | ERROR: please specify the following --os-project-id or (--os-project-name and --os-project-domain-name) or (--os-project-name and --os-project-domain-id) | 11:05 |
| *** shohel has quit IRC | 11:05 | |
| dave-mccowan | do you need OS_PROJECT_NAME instead of OS_TENANT_NAME ? | 11:06 |
| rm_work | maybe | 11:07 |
| rm_work | nope | 11:07 |
| rm_work | it wants project-id or project-name+domain-name | 11:07 |
| rm_work | which is fine, i gave it those | 11:07 |
| rm_work | and it breaks still | 11:07 |
| rm_work | i also got the project ID directly from keystone with the openstack client | 11:07 |
| rm_work | pass that in as os-project-id, and it breaks the same way | 11:08 |
| rm_work | stack@devstack:~$ barbican --os-project-id 89286e1919784857af4b781f1ce38b8c secret list | 11:08 |
| rm_work | Expecting to find domain in user - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-5fa5f10c-695d-47b6-9f09-22e644607962) | 11:08 |
| jaosorior | I think you even need the user-domain | 11:08 |
| rm_work | ^^ that project-id is directly from `openstack project list` | 11:08 |
| jaosorior | there is the project-domain-name and the user-domain-name | 11:08 |
| jaosorior | probably the user is in the default domain | 11:08 |
| rm_work | yes | 11:08 |
| jaosorior | the id of the default domain is default | 11:09 |
| jaosorior | the name is Default | 11:09 |
| rm_work | so i tried those | 11:09 |
| rm_work | they all give this same result | 11:09 |
| rm_work | which i am beginning to believe means maybe something is broken in our client | 11:09 |
| rm_work | because if i give BAD data for those, they give a different error | 11:09 |
| rm_work | this is the error i get when I use correct data <_< | 11:09 |
| rm_work | firstly we need to fix the 3.0 -> 3 thing | 11:10 |
| openstackgerrit | Dave McCowan proposed openstack/barbican: DO NOT MERGE: Data collection job only https://review.openstack.org/220332 | 11:10 |
| rm_work | because i am getting tired of switching the value of OS_IDENTITY_API_VERSION back and forth between every command I run | 11:10 |
| openstackgerrit | Adam Harwell proposed openstack/python-barbicanclient: Keystone Version is '3' not '3.0' https://review.openstack.org/220459 | 11:13 |
| rm_work | alright. | 11:13 |
| jaosorior | rm_work: Are you sure that's the issue? | 11:14 |
| rm_work | it's *an* issue | 11:14 |
| rm_work | not *the* issue | 11:14 |
| rm_work | just an annoyance, really | 11:14 |
| rm_work | the real issue is something else I haven't figured out yet | 11:14 |
| jaosorior | I remember introducing that (the 3.0) Since keystone needed it at the time. And there was talks about introducing microversions there | 11:14 |
| jaosorior | so 3.0 was the expected, and there was gonna be even a 3.1 | 11:15 |
| rm_work | heh | 11:15 |
| rm_work | they must have changed their minds i guess | 11:15 |
| jaosorior | gotta check the keystoneclient code again | 11:15 |
| rm_work | stack@devstack:~$ export OS_IDENTITY_API_VERSION="3.0" | 11:15 |
| rm_work | stack@devstack:~$ openstack | 11:15 |
| rm_work | WARNING: openstackclient.shell The identity version <3.0> is not in supported versions <2, 3, 2.0> | 11:15 |
| jaosorior | I see | 11:16 |
| rm_work | maybe it is just an OSC thing? | 11:16 |
| rm_work | but since everything is switching to OSC... | 11:16 |
| jaosorior | lets use your proposal | 11:17 |
| jaosorior | +2 given | 11:17 |
| rm_work | I wonder how much stuff that will break? | 11:18 |
| rm_work | I was considering having it just accept both | 11:18 |
| rm_work | <_< | 11:18 |
| rm_work | what do you guys thing? | 11:18 |
| rm_work | *think | 11:18 |
| jaosorior | uh... I don't think it will break much | 11:19 |
| jaosorior | but probably accepting both would be the better idea | 11:19 |
| rm_work | if anyone actually uses it with v3 they are probably already annoyed about the current breakage | 11:19 |
| dave-mccowan | peter-hamilton ping | 11:20 |
| peter-hamilton | dave-mccowan: pong | 11:20 |
| dave-mccowan | peter-hamilton nm. i was going to ask if kaitlin or nate were around (if you were in the office), but then looked at the clock. and i already know the answer. :-) rm_work needs a +2 to fix the gate. | 11:21 |
| peter-hamilton | dave-mccowan: yeah, i get in earlier than most. i don't think either's in yet. | 11:23 |
| peter-hamilton | dave-mccowan: i'm reading through the backlog now. what happened to the gate? | 11:24 |
| dave-mccowan | peter-hamilton i'm still getting used to being an early bird. i just started last week with my son's new school schedule. | 11:24 |
| dave-mccowan | peter-hamilton they finally killed the keystone CLI command. (the one that's been spewing "warning" "deprecated command" for about a year now) | 11:25 |
| peter-hamilton | dave-mccowan: o.o was this expected? | 11:25 |
| dave-mccowan | not by us. :-) i'm sure there is a thread on the os-dev mailer, though. | 11:26 |
| rm_work | they "thought all the code was migrated" | 11:27 |
| rm_work | guess they didn't realize we weren't in whatever they were looking at | 11:27 |
| peter-hamilton | *sigh* | 11:27 |
| dave-mccowan | the move for all projects to use the "openstack <project> " command instead of every project for themselves has been in the works for a while. | 11:27 |
| dave-mccowan | hockeynut was asking about it recently. i wonder if he saw something. | 11:28 |
| *** shohel has joined #openstack-barbican | 11:29 | |
| openstackgerrit | Adam Harwell proposed openstack/python-barbicanclient: Fix keystone version selection https://review.openstack.org/220459 | 11:30 |
| peter-hamilton | i wonder what else broke from this? | 11:30 |
| rm_work | ok dave-mccowan, jaosorior: what do you think of that approach? ^^ | 11:30 |
| rm_work | ah one last change | 11:31 |
| openstackgerrit | Adam Harwell proposed openstack/python-barbicanclient: Fix keystone version selection https://review.openstack.org/220459 | 11:32 |
| jaosorior | rm_work: I think it would be better to use stuff from python-keystonelibrary https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/discover.py | 11:32 |
| rm_work | erg | 11:32 |
| rm_work | now you want me to really make a CHANGE and not just a patch <_< | 11:32 |
| jaosorior | :D | 11:33 |
| rm_work | I *knew* this was going to get more complicated the second I mentioned backwards compatibility | 11:33 |
| rm_work | I will look at this later T_T | 11:33 |
| rm_work | should go to bed, it's closing on 5am | 11:33 |
| jaosorior | hahaha alright | 11:34 |
| rm_work | and I have to help my brother move to a new house early Saturday so I need to get my sleep schedule in order | 11:34 |
| jaosorior | Have a good one Mr. | 11:34 |
| rm_work | yeah, hopefully the gatefix will merge at least, if anyone needs to make additional fixes on that CR they can go for it, but it should be fine | 11:35 |
| dave-mccowan | rm_work thanks. see ya adam. have a good weekend. | 11:36 |
| rm_work | you too (though I may be on later ... today, as well) | 11:37 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Added functional tests for creating CAs https://review.openstack.org/220409 | 11:44 |
| *** vivek-ebay has joined #openstack-barbican | 11:55 | |
| *** vivek-ebay has quit IRC | 11:59 | |
| jaosorior | peter-hamilton: Responded t your comments in this CR https://review.openstack.org/#/c/219411/ | 12:23 |
| peter-hamilton | jaosorior: thanks, i'll take a look | 12:24 |
| *** rellerreller has joined #openstack-barbican | 12:25 | |
| jaosorior | rellerreller: Hey man, sorry to bother you so early. But this needs urgent checking https://review.openstack.org/#/c/220396/ got some minutes for it? | 12:26 |
| jaosorior | The barbican gate isn't working and it's already affecting other projects. So we need to get that merged | 12:26 |
| rellerreller | jaosorior I'm looking at it now. | 12:27 |
| jaosorior | yay :D | 12:27 |
| rellerreller | I'm not as familiar with this stuff, so I might be a little slow and have to ping you. | 12:27 |
| jaosorior | sure | 12:28 |
| jaosorior | rellerreller: Though mostly the change is that keystone cli is deprecated and we are now using the openstack cli | 12:28 |
| peter-hamilton | jaosorior: comments commented :) | 12:32 |
| jaosorior | peter-hamilton: Actually giving a second thought to your comments. I'm actually not entirely sure about the creator_id thing | 12:32 |
| jaosorior | it could be None in some case (unauthenticated pipeline) | 12:32 |
| peter-hamilton | jaosorior: hmmm | 12:32 |
| jaosorior | project_id shouldn't be None though, at any point | 12:33 |
| jaosorior | since that's needed in both the authenticated and the unauthenticated pipelines | 12:33 |
| peter-hamilton | jaosorior: makes sense, it's got to be mapped to something | 12:33 |
| jaosorior | althgouh, the creator_id was explicitly set up as nullable | 12:34 |
| jaosorior | *although. Most likely it's not really an issue. Since it will be used for quotas, policy and such | 12:34 |
| rellerreller | jaosorior I finished my review. | 12:34 |
| rellerreller | jaosorior I did not workflow because I am not as comfortable with this stuff, but I gave +2 because looked good to me and all tests passed. | 12:35 |
| rellerreller | jaosorior feel free to workflow if you are comfortable with it. | 12:35 |
| jaosorior | rellerreler: I think I'll be merging that. It's not really application code (it's only used to set up devstack) | 12:35 |
| rellerreller | jaosorior sounds good to me. | 12:36 |
| *** rellerreller has quit IRC | 12:40 | |
| *** Nirupama has quit IRC | 12:43 | |
| *** rellerreller has joined #openstack-barbican | 12:44 | |
| jaosorior | rellerreller: Thanks for the review, btc | 12:46 |
| jaosorior | *btw | 12:46 |
| jaosorior | How's stuff there? | 12:46 |
| rellerreller | Things are going well. We almost have everything done for our KMIP work. | 12:46 |
| rellerreller | Just waiting on pykmip 0.4.0 to get through and then we are good. | 12:46 |
| peter-hamilton | rellerreller jaosorior hopefully it'll get through today :) | 12:47 |
| *** kfarr has joined #openstack-barbican | 13:12 | |
| *** woodster_ has joined #openstack-barbican | 13:14 | |
| openstackgerrit | Merged openstack/barbican: Fix devstack gate (and new gate_hook.sh) https://review.openstack.org/220396 | 13:15 |
| jaosorior | yay! :D | 13:16 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: PyKMIP 0.4.0 test requirement https://review.openstack.org/214894 | 13:28 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Use testr for running functional tests and documentation https://review.openstack.org/218117 | 13:29 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Updated from global requirements https://review.openstack.org/220390 | 13:30 |
| *** darrenmoffat has quit IRC | 13:32 | |
| *** darrenmoffat has joined #openstack-barbican | 13:33 | |
| *** tkelsey has joined #openstack-barbican | 13:34 | |
| *** tkelsey has quit IRC | 13:39 | |
| *** spotz_zzz is now known as spotz | 13:53 | |
| *** kebray has joined #openstack-barbican | 13:56 | |
| *** peter-hamilton has quit IRC | 14:03 | |
| *** peter-hamilton has joined #openstack-barbican | 14:10 | |
| *** zz_dimtruck is now known as dimtruck | 14:29 | |
| *** silos has joined #openstack-barbican | 14:33 | |
| *** pglass has joined #openstack-barbican | 14:34 | |
| *** edtubill has joined #openstack-barbican | 14:42 | |
| *** dave-mccowan has quit IRC | 14:43 | |
| *** pglass has quit IRC | 14:48 | |
| *** diazjf has joined #openstack-barbican | 14:53 | |
| *** pglass has joined #openstack-barbican | 14:54 | |
| *** diazjf has quit IRC | 14:54 | |
| *** jorge_munoz has joined #openstack-barbican | 14:55 | |
| *** dave-mccowan has joined #openstack-barbican | 15:00 | |
| *** shohel has quit IRC | 15:08 | |
| openstackgerrit | Merged openstack/barbican: PyKMIP 0.4.0 test requirement https://review.openstack.org/214894 | 15:09 |
| openstackgerrit | Merged openstack/barbican: Integrated with PyKMIP Pie API https://review.openstack.org/212579 | 15:14 |
| *** diazjf has joined #openstack-barbican | 15:15 | |
| *** spotz is now known as spotz_zzz | 15:16 | |
| *** jaosorior has quit IRC | 15:22 | |
| *** jaosorior has joined #openstack-barbican | 15:25 | |
| *** tkelsey has joined #openstack-barbican | 15:26 | |
| *** spotz_zzz is now known as spotz | 15:29 | |
| alee | woodster_, chellygel -- hey guys -- going to start reviewing subca patches? | 15:29 |
| *** jaosorior has quit IRC | 15:32 | |
| *** jaosorior has joined #openstack-barbican | 15:39 | |
| *** jaosorior has quit IRC | 15:41 | |
| *** jaosorior has joined #openstack-barbican | 15:42 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: API documentation for CAs interface https://review.openstack.org/219412 | 15:45 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Support for creation of subordinate CAs https://review.openstack.org/219411 | 15:45 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Added functional tests for creating CAs https://review.openstack.org/220409 | 15:45 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Add subca functionality to snakeoil plugin https://review.openstack.org/220011 | 15:45 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Add validators for new CA creations https://review.openstack.org/220563 | 15:45 |
| *** jaosorior has quit IRC | 15:52 | |
| diazjf | Hey kfarr, I am going to be working on the using Castellan for swift encryption. Any docs on how to install and use it with barbican and keystone. | 15:54 |
| *** dave-mccowan has quit IRC | 15:56 | |
| *** vivek-ebay has joined #openstack-barbican | 16:01 | |
| *** vivek-ebay has quit IRC | 16:05 | |
| *** vivek-ebay has joined #openstack-barbican | 16:06 | |
| *** dave-mccowan has joined #openstack-barbican | 16:08 | |
| rellerreller | diazjf woohoo! | 16:10 |
| diazjf | rellerreller, gonna work on it a bit this weekend. Lets see if I can get it working :) | 16:33 |
| *** peter-hamilton has quit IRC | 16:41 | |
| openstackgerrit | Ade Lee proposed openstack/barbican: Add validators for new CA creations https://review.openstack.org/220563 | 16:54 |
| *** openstackgerrit_ has joined #openstack-barbican | 17:02 | |
| kfarr | diazjf sorry, just saw this, I was at lunch! | 17:05 |
| kfarr | diazjf, elmiko worked on some helpful documentation that should get you started https://github.com/openstack/castellan/blob/master/doc/source/usage.rst | 17:08 |
| * elmiko waves | 17:08 | |
| diazjf | kfarr, elmiko, thanks!! Much appreciated! 8-) | 17:11 |
| elmiko | diazjf: if you are curious, or run into issues, i can share the patch for sahara that i am working on. it basically integrates sahara with barbican through castellan | 17:12 |
| *** vivek-ebay has quit IRC | 17:16 | |
| diazjf | elmiko, sure that would be great. | 17:19 |
| *** silos has left #openstack-barbican | 17:22 | |
| *** ccneill_ is now known as ccneill | 17:27 | |
| *** diazjf has left #openstack-barbican | 17:30 | |
| *** vivek-ebay has joined #openstack-barbican | 17:45 | |
| *** vivek-ebay has quit IRC | 17:46 | |
| *** vivek-ebay has joined #openstack-barbican | 17:46 | |
| openstackgerrit | Ade Lee proposed openstack/barbican: API documentation for CAs interface https://review.openstack.org/219412 | 17:58 |
| dave-mccowan | hockeynut ping | 18:02 |
| hockeynut | dave-mccowan good timing, just got back from lunch | 18:02 |
| dave-mccowan | hockeynut i hope i don't give you indigestion. :-) i have a question about tox and virtual environments. | 18:02 |
| hockeynut | after Indian food? no chance :-) | 18:03 |
| openstackgerrit | Merged openstack/castellan: Updated from global requirements https://review.openstack.org/219984 | 18:03 |
| dave-mccowan | i'm looking at the kilo/stable gate failure and i've found the root cause. | 18:03 |
| hockeynut | excellent | 18:03 |
| dave-mccowan | it looks like the tempest tools we needs are in a venv and the script is running in the not-v environment | 18:04 |
| dave-mccowan | so.. i need to move the tests into the venv, of add to the tools to the real env. | 18:04 |
| dave-mccowan | do i make sense so far? | 18:04 |
| hockeynut | you do | 18:05 |
| dave-mccowan | which one should i do? | 18:06 |
| hockeynut | I would think they would need to go into the venv | 18:06 |
| hockeynut | meaning everything should run in the venv | 18:06 |
| hockeynut | otherwise why have a venv? | 18:07 |
| dave-mccowan | it looks like run_tests.sh is trying to install tempest stuff in the real env | 18:07 |
| *** gyee has joined #openstack-barbican | 18:08 | |
| dave-mccowan | hockeynut to run the functional tests in a vm, i'd need to do "tox -e something" and then would i make a new tox.ini file in the /functionaltests/ directory? | 18:09 |
| hockeynut | you mean venv not vm, right? | 18:09 |
| dave-mccowan | yea | 18:09 |
| hockeynut | so when run_tests.sh is kicked off, is the "current" python a virtual or real? | 18:10 |
| dave-mccowan | looks real to me. _=/usr/bin/env does that mean it's real? | 18:11 |
| hockeynut | probably | 18:11 |
| dave-mccowan | i have the dump of the "env" command. anything there to know for sure? | 18:11 |
| dave-mccowan | more interesting: i can find: /opt/stack/new/tempest/.tox/full/bin/subunit-trace | 18:12 |
| dave-mccowan | but, ./run_tests.sh: line 49: subunit-trace: command not found | 18:12 |
| hockeynut | so that's a venv named full, I believe | 18:12 |
| hockeynut | and run_tests isn't running in that env so it won't find subunit-trace | 18:13 |
| dave-mccowan | yep. so, can install tempest stuff in /usr/bin. or put run_tests.sh in that venv. | 18:13 |
| hockeynut | hmm... devstack in general is throw-away so I wonder why we don't just always use a real one rather than worry about venvs | 18:14 |
| hockeynut | if you are running something locally of course then you want venv | 18:14 |
| dave-mccowan | doesn't pip install -e "$TEMPEST_DIR" make it look like run_tests.sh is trying to use the real one? | 18:14 |
| hockeynut | uses the current one - which is likely a REAL | 18:14 |
| dave-mccowan | but, i don't see a package in that command. where is the package list coming from? | 18:15 |
| hockeynut | I think it just installs from a directory (rather than a package). need to doublecheck on the -e option | 18:16 |
| hockeynut | -e just points to the directory from which you want to install | 18:16 |
| hockeynut | https://pip.pypa.io/en/latest/reference/pip_install.html#options | 18:16 |
| hockeynut | so I wonder where that "full" venv came from | 18:17 |
| dave-mccowan | it's devstack, so who knows. :-) | 18:17 |
| hockeynut | &diety only knows. | 18:18 |
| dave-mccowan | ah... if -e is "from", then maybe tempest has been moved. maybe the right fix is to change TEMPEST_DIR to a directory with all-the-things we need. | 18:19 |
| hockeynut | I would think we did a git clone into TEMPEST_DIR at some point | 18:20 |
| hockeynut | still wondering where that "full" venv came from | 18:22 |
| dave-mccowan | there's a /opt/stack/new/tempest/.tox/venv/bin/subunit-trace too | 18:22 |
| dave-mccowan | and a /usr/os-testr-env/bin/subunit-trace | 18:22 |
| dave-mccowan | maybe I should just add /usr/os-testr-env/bin/ to the $PATH | 18:23 |
| hockeynut | interesting to see if that works | 18:23 |
| dave-mccowan | every guess takes about an hour turn around with the gate. :-( | 18:23 |
| dave-mccowan | i like that idea. not sure why to install something that's already in /usr/ | 18:24 |
| hockeynut | so I think its tempest that sets up the venv, not us (since .tox is under the tempest directory) | 18:24 |
| alee | hockeynut, woodster_, redrobot , rellerreller , chellygel, kfarr if we could get some eyes on the subca stuff, that would be super | 18:24 |
| hockeynut | dave-mccowan yes, I see in tempest's tox.ini that there is a testenv:full | 18:25 |
| alee | there are so many patches stacked on each other that its hard to make changes without rebases | 18:25 |
| dave-mccowan | hockeynut, so i could "tox -e full". then how would tox know what tests to run? would i add a tox.ini file to functionaltests/? | 18:26 |
| hockeynut | dave-mccowan "full" looks like a tempest-y thing, not sure it has anything to do with us. Is the problem just missing things like subunit-trace? | 18:26 |
| dave-mccowan | hockeynut that's the current blocking symptom. i'm going to give it a run with the PATH pointing to /usr/os-testr-env/bin | 18:28 |
| hockeynut | ko. | 18:28 |
| hockeynut | I could be wrong, but I think our test-requirements.txt needs to include python-subunit>=0.0.18 | 18:29 |
| hockeynut | then we know it gets installed wherever we are running - virtual or real | 18:29 |
| hockeynut | brb | 18:29 |
| *** edtubill has quit IRC | 18:45 | |
| *** edtubill has joined #openstack-barbican | 18:45 | |
| *** edtubill has quit IRC | 18:49 | |
| *** dave-mccowan has quit IRC | 18:51 | |
| rm_work | gate jobs all looking good? | 19:05 |
| rm_work | including the new ones? | 19:05 |
| rm_work | hoping to swing over to the new jobs shortly :) | 19:05 |
| *** edtubill has joined #openstack-barbican | 19:14 | |
| *** diazjf has joined #openstack-barbican | 19:18 | |
| *** dave-mccowan has joined #openstack-barbican | 19:19 | |
| *** peter-hamilton has joined #openstack-barbican | 19:19 | |
| *** ccneill_ has joined #openstack-barbican | 19:32 | |
| *** ccneill has quit IRC | 19:35 | |
| *** ccneill_ has quit IRC | 19:39 | |
| *** openstackgerrit_ has quit IRC | 20:03 | |
| *** openstackgerrit_ has joined #openstack-barbican | 20:04 | |
| *** rellerreller has quit IRC | 20:07 | |
| *** crc32|znc has quit IRC | 20:16 | |
| *** elarson has quit IRC | 20:16 | |
| *** crc32|znc has joined #openstack-barbican | 20:16 | |
| *** elarson_ has joined #openstack-barbican | 20:16 | |
| *** elarson_ is now known as elarson | 20:24 | |
| *** kfarr has quit IRC | 20:28 | |
| *** SheenaG has joined #openstack-barbican | 20:34 | |
| rm_work | looking for thoughts on https://review.openstack.org/#/c/220459/ as well -- i think i agree it'd be nice to use the keystone lib's autodiscovery stuff, but i don't have time to work on that, and this is at least somewhat better in the interim -- but it'd be cool if someone did have the time to take that over | 20:41 |
| *** SheenaG has left #openstack-barbican | 20:46 | |
| *** openstackgerrit_ has quit IRC | 20:47 | |
| *** openstackgerrit_ has joined #openstack-barbican | 20:47 | |
| *** openstackgerrit_ has quit IRC | 20:48 | |
| *** openstackgerrit_ has joined #openstack-barbican | 20:49 | |
| *** gyee has quit IRC | 20:50 | |
| *** gyee has joined #openstack-barbican | 20:50 | |
| *** openstackgerrit_ has quit IRC | 20:53 | |
| *** diazjf has quit IRC | 20:54 | |
| *** peter-hamilton has quit IRC | 20:58 | |
| dave-mccowan | [stable/kilo] Verified+1 | 21:04 |
| rm_work | nice | 21:05 |
| *** gyee has quit IRC | 21:08 | |
| *** darrenmoffat has quit IRC | 21:09 | |
| *** whydidyoustealmy has quit IRC | 21:11 | |
| *** whydidyoustealmy has joined #openstack-barbican | 21:19 | |
| *** gyee has joined #openstack-barbican | 21:20 | |
| *** tkelsey has quit IRC | 21:21 | |
| *** dimtruck is now known as zz_dimtruck | 21:25 | |
| *** darrenmoffat has joined #openstack-barbican | 21:25 | |
| *** tkelsey has joined #openstack-barbican | 21:37 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Add subca functionality to snakeoil plugin https://review.openstack.org/220011 | 21:44 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Added functional tests for creating CAs https://review.openstack.org/220409 | 21:44 |
| *** zz_dimtruck is now known as dimtruck | 21:55 | |
| *** diazjf has joined #openstack-barbican | 21:58 | |
| *** pglass has quit IRC | 22:07 | |
| *** spotz is now known as spotz_zzz | 22:20 | |
| *** dimtruck is now known as zz_dimtruck | 22:39 | |
| *** kebray has quit IRC | 22:46 | |
| *** kebray has joined #openstack-barbican | 22:47 | |
| *** vivek-ebay has quit IRC | 23:07 | |
| *** vivek-ebay has joined #openstack-barbican | 23:07 | |
| *** tkelsey has quit IRC | 23:08 | |
| *** jamielennox is now known as jamielennox|away | 23:13 | |
| *** gyee has quit IRC | 23:41 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!