Wednesday, 2015-09-09

*** zz_dimtruck is now known as dimtruck00:17
*** gyee has quit IRC00:33
*** spotz_zzz has quit IRC00:47
*** hockeynut_afk has quit IRC00:48
*** lbragstad has quit IRC00:48
*** eglute_s has quit IRC00:48
*** dimtruck has quit IRC00:48
*** jamielennox has quit IRC00:49
*** jilly has quit IRC00:49
*** tdink has quit IRC00:49
*** rm_work has quit IRC00:50
*** jroll has quit IRC00:50
*** dimtruck has joined #openstack-barbican00:53
*** spotz_zzz has joined #openstack-barbican00:53
*** jroll has joined #openstack-barbican00:53
*** eglute has joined #openstack-barbican00:53
*** rm_work has joined #openstack-barbican00:53
*** rm_work has quit IRC00:53
*** rm_work has joined #openstack-barbican00:53
*** hockeynut has joined #openstack-barbican00:53
*** jamielennox has joined #openstack-barbican00:54
*** lbragstad has joined #openstack-barbican00:54
*** tdink has joined #openstack-barbican00:54
*** jillysciarilly has joined #openstack-barbican00:54
openstackgerritDave McCowan proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155700:59
openstackgerritDave McCowan proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155701:01
*** diazjf has quit IRC01:15
*** diazjf has joined #openstack-barbican01:16
openstackgerritDave McCowan proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155701:22
*** dimtruck is now known as zz_dimtruck01:24
*** everjeje has quit IRC01:42
*** diazjf has left #openstack-barbican02:00
*** zz_dimtruck is now known as dimtruck02:05
*** woodster_ has quit IRC02:39
*** vivek-ebay has quit IRC02:42
*** Nirupama has joined #openstack-barbican02:44
*** dimtruck is now known as zz_dimtruck03:08
*** kebray has joined #openstack-barbican03:13
*** kebray has quit IRC03:15
openstackgerritDave McCowan proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155703:15
*** zz_dimtruck has quit IRC03:29
*** nelsnels_ has joined #openstack-barbican03:37
*** zz_dimtruck has joined #openstack-barbican03:38
*** zz_dimtruck is now known as dimtruck03:38
*** nelsnelson has quit IRC03:40
*** nelsnels_ has quit IRC03:49
*** nelsnelson has joined #openstack-barbican03:49
*** nelsnelson has quit IRC03:50
*** dave-mccowan has quit IRC03:51
*** kebray has joined #openstack-barbican04:13
*** kebray has quit IRC04:14
*** kebray has joined #openstack-barbican04:14
*** vivek-ebay has joined #openstack-barbican04:36
*** Kevin_Zheng has quit IRC05:25
*** dimtruck is now known as zz_dimtruck05:26
*** rm_work has quit IRC05:59
*** rm_work has joined #openstack-barbican05:59
*** rm_work has quit IRC06:00
*** rm_work has joined #openstack-barbican06:00
*** rm_work has quit IRC06:02
*** rm_work has joined #openstack-barbican06:03
*** rm_work has quit IRC06:04
*** rm_work has joined #openstack-barbican06:04
*** rm_work has quit IRC06:06
*** rm_work has joined #openstack-barbican06:06
*** shohel has joined #openstack-barbican06:23
*** jaosorior has joined #openstack-barbican06:25
*** vivek-ebay has quit IRC06:32
*** vivek-ebay has joined #openstack-barbican06:32
*** vivek-ebay has quit IRC06:32
*** kebray has quit IRC06:33
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Added functional tests for creating CAs  https://review.openstack.org/22040906:44
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add subca functionality to snakeoil plugin  https://review.openstack.org/22001106:44
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155707:20
*** everjeje has joined #openstack-barbican07:35
*** tkelsey has joined #openstack-barbican08:31
*** darrenmoffat has quit IRC09:11
*** darrenmoffat has joined #openstack-barbican09:12
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Added functional tests for creating CAs  https://review.openstack.org/22040909:17
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add subca functionality to snakeoil plugin  https://review.openstack.org/22001109:17
*** jaosorior has quit IRC10:00
*** yuanying_ is now known as yuanying10:02
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155710:12
*** tkelsey has quit IRC10:53
*** jaosorior has joined #openstack-barbican11:14
*** peter-hamilton has joined #openstack-barbican11:24
jaosorioranybody around yet>11:27
jaosorior?11:27
*** zz_dimtruck is now known as dimtruck11:28
*** tkelsey has joined #openstack-barbican11:31
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Use barbican.conf instead of barbican-api.conf  https://review.openstack.org/22150511:34
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Added functional tests for creating CAs  https://review.openstack.org/22040911:34
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add subca functionality to snakeoil plugin  https://review.openstack.org/22001111:34
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155711:34
*** tkelsey has quit IRC11:35
*** peter-hamilton has quit IRC11:44
*** dave-mccowan has joined #openstack-barbican11:44
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Use barbican.conf instead of barbican-api.conf  https://review.openstack.org/22150511:45
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add subca functionality to snakeoil plugin  https://review.openstack.org/22001111:46
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Added functional tests for creating CAs  https://review.openstack.org/22040911:46
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155711:46
dave-mccowanjaosorior ping11:57
jaosoriordave-mccowan: pong11:57
dave-mccowanjaosorior quick question on transport keys and quotas.  it turns out that Transport Keys are not project resources, they should not have quotas.  i had already deleted most of the mentions of them from the quota code.  they need to be all gone.  it seems convenient to remove them while adding cas to the same file.  i can update the commit message explaining.  or do you think it really needs to be two CRs?12:00
jaosoriorI do recommend another CR since it would make that change easier to track12:00
*** Nirupama has quit IRC12:00
jaosorioron the other hand, three are some instances of transport_key quotas missing (e.g. validation code), so it would be apprpriate to delete those too12:01
jaosoriorso if we remove the transport keys from quotas, and at some point we decide that it actually made sense to have them there, we can just revert the commit and thus we would get them back. And if ther would be a problem with the removal of them, tracking which commit caused the issue would be easier if it would have it's own commit12:02
*** woodster_ has joined #openstack-barbican12:06
dave-mccowanjaosorior i already messed up the clean revert, since most of the transport quota key code was deleted before it merged.  just some sloppy leftovers that i missed before commit.  i do need to finish deleting the rest of it.12:07
dave-mccowanjaosorior ok.. i'll split it into two CRs.  i guess if i'm careful, git will do most of the work. :-)12:10
*** dimtruck is now known as zz_dimtruck12:12
dave-mccowanjaosorior i was surprised how much of it i found in the code.  i wonder if i had a commit that i forgot to push.12:12
jaosoriordave-mccowan: honestly I didn't even know it was no longer gonna be used12:12
dave-mccowanjaosorior i think we talked about it (and merged it) while you were on vacation.12:14
jaosoriordave-mccowan: Alright. I guess it makes sense12:14
dave-mccowantransport-keys are one-per-plugin.  there is no may for a project admin to add or delete them, so quotas don't apply.12:14
jaosoriordave-mccowan: Now it definitely makes sense12:15
dave-mccowanjaosorior too bad i had it mostly coded before i figured that out. :-D12:16
jaosoriorgit rebase -i makes since easier12:16
jaosoriorcan't live without it12:16
jaosoriordave-mccowan: On the other hand, I did some rebases of your CR on top of mines, so I recommend taking that into account12:17
*** peter-hamilton has joined #openstack-barbican12:18
dave-mccowanjaosorior will do.  i'll add a new CR and insert it into the "chain" before mine and after yours and ade's.12:19
jaosoriorpeter-hamilton: thanks for the quick responses to the CR12:20
peter-hamiltonjaosorior: not a problem12:21
peter-hamiltonjaosorior: it seemed manageable :P12:21
jaosoriorpeter-hamilton: If you have time to review the subsequent CRs it would be greatly appreciated12:22
peter-hamiltonjaosorior: will do!12:22
*** zz_dimtruck is now known as dimtruck12:23
*** dimtruck is now known as zz_dimtruck12:23
*** rellerreller has joined #openstack-barbican12:30
dave-mccowanjaosorior do you have any ideas what's going on with the snakeoil plugin config?12:36
jaosoriordave-mccowan: Somewhat. What's up?12:37
dave-mccowanjaosorior snakeoil func tests do not run in the gate or on my dev environment12:37
jaosoriorthey don't run on the gate?12:38
dave-mccowani checked the console logs; they show "skipped".12:38
jaosoriorI see12:39
jaosoriorlet me take a look12:39
jaosoriordave-mccowan: Got a link to the logs?12:39
jaosoriordave-mccowan: Found them12:40
jaosoriorit is skipping them12:40
jaosoriorgotta fix that12:40
dave-mccowanit's weird that it's working your you and ade, but not me or the gate.12:40
dave-mccowani didn't see any unskipIf(redhat) code.  ;-)12:41
*** Antonwoods has joined #openstack-barbican12:42
*** Antonwoods is now known as Anton12:42
*** Anton is now known as Guest9934412:43
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155712:44
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Added functional tests for creating CAs  https://review.openstack.org/22040912:44
jaosoriorpeter-hamilton: As a guideline, usually nits do not merit a -112:45
peter-hamiltonjaosorior: yeah, that's true, it was more a judgment call12:47
peter-hamiltonjaosorior: i'm happy to flip it12:47
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155712:48
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Added functional tests for creating CAs  https://review.openstack.org/22040912:48
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add subca functionality to snakeoil plugin  https://review.openstack.org/22001112:48
jaosoriorpeter-hamilton: Addressed the comments anyway12:48
peter-hamiltonjaosorior: cool, i'll take a look12:48
peter-hamiltonjaosorior: thanks, it lgtm12:52
*** nelsnelson has joined #openstack-barbican12:52
peter-hamiltonjaosorior: i'll try to get to the other two in a bit12:52
*** SheenaG has joined #openstack-barbican12:53
*** SheenaG has left #openstack-barbican12:54
*** rellerreller has quit IRC13:00
*** everjeje has quit IRC13:02
openstackgerritDave McCowan proposed openstack/barbican: Remove Vestigial Transport Key Quota Code  https://review.openstack.org/22174513:05
*** jaosorior has quit IRC13:06
*** lisaclark1 has joined #openstack-barbican13:09
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Remove Vestigial Transport Key Quota Code  https://review.openstack.org/22174513:10
openstackgerritDave McCowan proposed openstack/barbican: Remove Vestigial Transport Key Quota Code  https://review.openstack.org/22174513:11
openstackgerritDave McCowan proposed openstack/barbican: Remove Vestigial Transport Key Quota Code  https://review.openstack.org/22174513:12
*** lisaclark1 has quit IRC13:15
*** jaosorior has joined #openstack-barbican13:18
*** zz_dimtruck is now known as dimtruck13:19
*** tkelsey has joined #openstack-barbican13:30
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Added functional tests for creating CAs  https://review.openstack.org/22040913:36
openstackgerritDave McCowan proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155713:36
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Remove Vestigial Transport Key Quota Code  https://review.openstack.org/22174513:37
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155713:37
openstackgerritDave McCowan proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155713:48
openstackgerritDave McCowan proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155713:56
*** jhfeng has joined #openstack-barbican14:13
*** kebray has joined #openstack-barbican14:21
*** pglass has joined #openstack-barbican14:21
*** kebray has quit IRC14:22
*** kebray has joined #openstack-barbican14:23
*** kebray has quit IRC14:23
*** vivek-ebay has joined #openstack-barbican14:27
*** Guest99344 has quit IRC14:29
*** shohel has quit IRC14:33
*** vivek-ebay has quit IRC14:45
*** Antonwoods has joined #openstack-barbican14:46
*** Antonwoods is now known as Anton14:46
*** Anton is now known as Guest9908114:46
*** Guest99081 has quit IRC14:47
jaosoriordave-mccowan: So you were right that it wasn't loading the snakeoil CA. I my function had a bug and I was just taking into account that it was passing because of a misunderstanding on how oslo.config works14:48
jaosoriornow I fixed that function and we figured out that there is an error in one of the subca test cases14:49
*** edtubill has joined #openstack-barbican14:49
*** dave-mccowan has quit IRC15:02
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Added functional tests for creating CAs  https://review.openstack.org/22040915:07
openstackgerritJuan Antonio Osorio Robles proposed openstack/barbican: Add subca functionality to snakeoil plugin  https://review.openstack.org/22001115:07
*** dave-mccowan has joined #openstack-barbican15:16
dave-mccowanjaosorior cool.15:17
jaosoriorso now we're trying to figure out why is there an error when creating a subca from another subca15:18
dave-mccowanjaosorior hopefully the tests will run in my dev environment now too.  checking...15:19
openstackgerritDave McCowan proposed openstack/barbican: Remove Vestigial Transport Key Quota Code  https://review.openstack.org/22174515:20
openstackgerritDave McCowan proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155715:21
*** ccneill has joined #openstack-barbican15:25
*** diazjf has joined #openstack-barbican15:30
*** gyee has joined #openstack-barbican15:49
openstackgerritMerged openstack/barbican: Use barbican.conf instead of barbican-api.conf  https://review.openstack.org/22150516:00
*** vivek-ebay has joined #openstack-barbican16:00
jaosoriordave-mccowan: It should be working now16:03
jaosoriorpeter-hamilton are you around?16:06
peter-hamiltonjaosorior: chewing food and on a call, but yes :)16:06
jaosoriorouch haha well, can you re-visit this CR? https://review.openstack.org/#/c/220011/1916:06
peter-hamiltonjaosorior: yes! i'll try to get to it soon16:07
jaosoriorI added some lines of code that are needed and tested in the next CR, which is this one https://review.openstack.org/#/c/220409/16:07
peter-hamiltonjaosorior: my day keeps getting consumed :/16:07
jaosoriorpeter-hamilton: Good luck Mr.16:10
aleedave-mccowan, once the two subca patches merge , I'll also review your quota patches (just to make sure it all rebases correctly)16:14
peter-hamiltonjaosorior: ok i'm back16:17
jaosorioranybody knows if kfarr or rellerreller are around? would sure need some reviewers16:25
jaosoriorpeter-hamilton: Hey dude. let me know if you have any questions about the CRs16:26
peter-hamiltonjaosorior: will do, almost done the func tests one, nothing weird yet16:27
jaosoriordave-mccowan: If you have time, could you also take a look to the CRs?16:27
*** kebray has joined #openstack-barbican16:27
*** kfarr has joined #openstack-barbican16:28
aleekfarr, howdy!16:30
kfarralee, hi :)  more code reviews today?16:31
aleekfarr, yeah - we were just thinking of you :)16:32
aleekfarr, the remaining subca code reviews .. let me get links16:32
jaosoriornot much left though :D16:33
kfarrToday's a great day to review subca code!16:33
aleekfarr, https://review.openstack.org/#/c/22001116:33
aleehttps://review.openstack.org/#/c/22001116:34
aleeand of course daves subca quota code ..16:34
*** kebray has quit IRC16:35
jaosoriorpeter-hamilton: can you re-score this one? https://review.openstack.org/#/c/220011/1916:42
kfarrjasosorior, alee, it looks like the coverage gate is failing?16:42
jaosoriorkfarr: I'm writing a response in the CR16:42
peter-hamiltonjaosorior: done!16:43
peter-hamiltonjaosorior: i'll get to the final quota CR after my 1oclock16:43
aleekfarr, looking ..  I know what this is but want to make sure16:45
jaosoriorkfarr: answered16:46
aleekfarr, what he said ..16:48
kfarrjaosorior alee, saw it!16:48
jaosoriorkfarr: Thanks for the review :D16:48
*** vivek-ebay has quit IRC16:48
aleeawesome - workflowing ..16:49
aleekfarr, thanks -- keep going up the chain though :)16:49
jaosoriordave-mccowan: Did a couple of comments on your quota CR16:49
aleekfarr, https://review.openstack.org/#/c/22040916:50
*** peter-hamilton has quit IRC16:55
*** tkelsey has quit IRC16:59
*** kebray has joined #openstack-barbican17:00
aleekfarr, responded17:16
aleekfarr, does that all make sense to you?17:16
aleekfarr, I think I just need to add a TODO17:16
kfarralee, which is an example of a test that will fail if that first order is not sent in?17:18
aleekfarr, any test that requires a specific ca_id17:19
aleebecause the ca table may not be populated yet17:19
aleeor any test that expects to see cas defined17:20
aleekfarr, all of the tests that are annotated as requiring snakeoil_ca for instance17:22
aleebecause these need to be sent to the snakeoil ca instead of the simple_ca17:23
aleeand cannot be without a ca_id17:24
aleekfarr, makes sense?17:24
aleekfarr, in actual fact, almost all the tests really need to be run against a specific ca (simple, snakeoil, dogtag) and should be annotated accordingly17:25
aleekfarr, jaosorior has agreed to do this next week17:25
kfarralee, kind of, it seems a little funky17:26
aleebecause we need to be able to run in an environment with multiple cas defined17:26
aleekfarr, it is -- I will be looking to change the requirement of having to send in an initial request17:26
kfarralee, ok that makes me feel better!17:27
jaosoriorGotta go guys17:27
dave-mccowanalee  i'm glad that's on the to-do list to fix.  from a user point of view, i think it is bad to have to post a random certificate order to help Barbican initialize itself.17:27
jaosoriortalk to you tomorrow17:27
*** jaosorior has quit IRC17:27
aleekfarr, dave-mccowan yeah I dont like it either17:28
kfarralee, so then for the functional tests, how do you know which ca you are testing against?17:28
aleekfarr, dave-mccowan  the trick is that the table needs to be refreshed by polling the plugins17:29
aleeand the wuestion then is where to invoke that code17:29
aleebut we can worrry about that next week.17:29
aleekfarr, so to your question17:29
alee1. if a test designates a particular ca by finding the ca_id for it , then it will use that ca17:30
alee2. if not, then it will use the first defined ca17:30
aleeright now, the ca tests are written to pass with the simple ca17:30
aleesome of these wont pass with the snakeoil because the behavoir is differnet17:31
aleesimple never returns a cert (waiting state), snaeoil always reyturns a cert17:31
aleeso to make allthis work -- the first defined is simple17:32
aleeand so all existing tests pass17:32
aleeand then the new tests that require snakeoil will look for the snakeoil ca_id explicitly17:32
aleeon the dogtag gate right now, only the dogtag ca is defined17:33
aleeall this is what will be cleaned up by jaosorior next week17:33
aleeie. we will specify for each test exactly which cas should be running them17:33
aleesome can be run on all cas17:33
aleebut those are mostly the ones that fail before they get to the ca plugin17:34
aleebecause of missing/bad arguments etc.17:34
aleemake sense?17:34
kfarrYeah, that makes sense, sorry stepped away for a minute17:37
kfarralee, are there any tests that would get run against all CAs?17:37
aleewell some tests could run againsta all cas -- ie ones that fail before they get there17:38
*** ccneill has quit IRC17:38
aleebut the test cas are just so different, its hard to see other cases17:39
kfarralee, ok that's fair17:39
openstackgerritDave McCowan proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155717:40
aleekfarr, different in behavior - not in interface17:40
aleekfarr, you cant get more different than 1) simple - never give a cert 2) snakeoil - always give a cert17:41
aleekfarr, so just the todo right ?17:42
kfarralee, yes, for me anyway!17:42
aleeok - todo on the way ..17:42
openstackgerritMerged openstack/barbican: Add subca functionality to snakeoil plugin  https://review.openstack.org/22001117:43
*** kebray has quit IRC17:45
openstackgerritAde Lee proposed openstack/barbican: Added functional tests for creating CAs  https://review.openstack.org/22040917:49
aleekfarr, patch up ^^ :)17:49
openstackgerritDave McCowan proposed openstack/barbican: Remove Vestigial Transport Key Quota Code  https://review.openstack.org/22174517:51
openstackgerritDave McCowan proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155717:51
*** tkelsey has joined #openstack-barbican17:58
*** diazjf has quit IRC17:58
*** diazjf has joined #openstack-barbican18:01
*** lisaclark1 has joined #openstack-barbican18:03
*** kebray has joined #openstack-barbican18:03
*** vivek-ebay has joined #openstack-barbican18:05
*** diazjf has quit IRC18:25
*** diazjf has joined #openstack-barbican18:28
*** silos has joined #openstack-barbican18:31
*** mmdurrant has joined #openstack-barbican18:38
*** kebray has quit IRC18:44
*** ccneill has joined #openstack-barbican18:48
*** lisaclark1 has quit IRC18:55
*** diazjf has quit IRC19:00
*** silos has quit IRC19:00
*** ccneill has quit IRC19:00
*** silos has joined #openstack-barbican19:00
*** pglbutt has joined #openstack-barbican19:04
*** lisaclark1 has joined #openstack-barbican19:04
*** pglass has quit IRC19:07
*** diazjf has joined #openstack-barbican19:07
*** lisaclark2 has joined #openstack-barbican19:24
*** silos has quit IRC19:24
*** silos has joined #openstack-barbican19:24
*** lisaclark1 has quit IRC19:26
openstackgerritMerged openstack/barbican: Added functional tests for creating CAs  https://review.openstack.org/22040919:26
*** silos has quit IRC19:30
*** silos has joined #openstack-barbican19:31
*** silos has left #openstack-barbican19:31
dave-mccowanalee ping19:35
*** silos has joined #openstack-barbican19:36
*** silos has left #openstack-barbican19:37
aleedave-mccowan, pong19:44
aleedave-mccowan, just got done with meeting19:44
dave-mccowanalee what is the expected clean-up scenario when deleting sub cas, or restarting barbican?  especially w.r.t. to /etc/barbican/snakeoil-cas/19:45
*** pglass has joined #openstack-barbican19:46
*** pglass has quit IRC19:46
aleedave-mccowan, well - so first off -- when you restsrt barbican, the snakeoil ca reads all the files it sees for subcas and adds them19:47
aleedave-mccowan, I'm working on the code to delete subcas next19:48
aleebut I was thinking of doing a soft delete kind of functionality19:48
aleeon the barbican side19:49
alee(or maybe hard delete is ok)19:49
aleedave-mccowan, either way, there will be a call to the plugin to delete the ca19:49
*** pglbutt has quit IRC19:49
aleeand it will be up to the plugin to handle this19:49
aleedogtag will likely do a soft delete sort of thing19:50
aleesnakeoil I think can do a hard delete19:50
aleeremoving the relevant files in /etc/barbican/snakeoil-cas19:51
dave-mccowanalee cool.  that explains most of what i'm seeing.  if i delete the database, but leave the subcas files, i seem to end up broken.  is that what you'd expect now?19:51
aleedefine broken19:51
dave-mccowanalee my quota enforcing functional test cases work in the gate, but break in my local environment unless i'm very careful about cleaning up before starting.  looks like i just need to wait for a future commit.19:52
aleedave-mccowan, I need to review the quota test cases -- will do that shortly - but19:53
aleeif I understand it correctly then - you add a whole bunch of cas19:54
aleeuntil you reach your quota19:54
aleeand then if you blow away your db and do the test again, you see that the cas are still there?19:55
alee(and hence break your quota test)19:55
aleeand that would make sense because barbican will query the plugin to see what subcas are there ..19:56
aleeand will re-add them to the db19:56
dave-mccowanif i blow away my db, but leave the snakeoil-cas/ files, then snakeoil seems to be broken altogether.  i can double check that.19:57
dave-mccowanalee, i don't think that worries me.  if delete subcas starts working, then i won't need to manually cleanup.19:59
aleeok19:59
*** pglass has joined #openstack-barbican19:59
aleeI'll try to get that going today or tomorrow morning19:59
aleedave-mccowan, then we can rebase your patches on top of that20:00
aleedave-mccowan, or are the patches ready to be reviewed/merged now?20:00
dave-mccowani'll add calls to delete to my patch, so the tests are ready and waiting for you.20:00
aleeok - I should have the delete patch by tomorrow in any case20:01
dave-mccowanthey're in good shape for merging.  whatever works for you for timing of the merge.20:01
openstackgerritDave McCowan proposed openstack/barbican: Add Project Quota Support for Sub CAs  https://review.openstack.org/22155720:02
dave-mccowanalee ^^ now test_cas.py and test_quotas_enforce.py will send a delete command to delete a CA.20:03
dave-mccowanit returns 406, but will start working when you've added the code to process it.20:04
aleeok -- I'm start my coding on top of your patch20:04
*** tkelsey has quit IRC20:18
*** ccneill has joined #openstack-barbican20:22
openstackgerritDave McCowan proposed openstack/barbican: Fix Tempest Installation  https://review.openstack.org/22195220:40
openstackgerritDave McCowan proposed openstack/barbican: Update Bandit Tox Environment  https://review.openstack.org/22195420:48
edtubillHi, I was wondering if ACLs for barbican work across multiple projects -like can another user in a different project access the secret if they are on the ACL?20:48
dave-mccowanedtubill yes, that is the intended use case.20:49
edtubilloh cool thx20:49
*** dave-mccowan has quit IRC20:51
*** kebray has joined #openstack-barbican21:04
*** kebray has quit IRC21:16
*** kebray has joined #openstack-barbican21:21
*** lisaclark2 has quit IRC21:29
*** lisaclark1 has joined #openstack-barbican21:29
*** dave-mccowan has joined #openstack-barbican21:32
*** dave-mccowan has quit IRC21:42
*** diazjf has left #openstack-barbican21:45
*** edtubill has quit IRC21:46
*** kfarr has quit IRC22:02
*** lisaclark1 has quit IRC22:18
*** kebray has quit IRC22:18
*** pglass has quit IRC22:19
*** lisaclark1 has joined #openstack-barbican22:31
*** lisaclark1 has quit IRC22:48
*** ccneill has quit IRC22:53
*** lisaclark1 has joined #openstack-barbican22:55
*** david-lyle has quit IRC23:11
*** david-lyle has joined #openstack-barbican23:12
*** david-lyle has quit IRC23:22
*** david-lyle has joined #openstack-barbican23:23
*** jhfeng has quit IRC23:35
*** lisaclark2 has joined #openstack-barbican23:44
*** dimtruck is now known as zz_dimtruck23:48
*** lisaclark1 has quit IRC23:48
*** lisaclark2 has quit IRC23:48

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!