Wednesday, 2015-09-30

« Tuesday, 2015-09-29 Index Thursday, 2015-10-01 »
*** openstackgerrit has quit IRC00:01
*** openstackgerrit has joined #openstack-barbican00:02
*** jhfeng has quit IRC00:02
*** openstackstatus has quit IRC00:02
*** openstack has joined #openstack-barbican00:03
*** openstackstatus has joined #openstack-barbican00:03
*** ChanServ sets mode: +v openstackstatus00:03
openstackgerritAdam Harwell proposed openstack/python-barbicanclient: Fix keystone version selection  https://review.openstack.org/22045900:28
*** stevemar has joined #openstack-barbican00:40
*** su_zhang has quit IRC00:52
*** su_zhang has joined #openstack-barbican00:52
*** vivek-ebay has quit IRC00:59
*** alee has quit IRC01:27
*** su_zhang has quit IRC01:28
*** morgan is now known as notreallymorgan01:30
*** notreallymorgan is now known as morgan01:30
*** alee has joined #openstack-barbican01:32
*** stevemar has quit IRC02:02
*** stevemar has joined #openstack-barbican02:12
*** stevemar has quit IRC02:17
*** ngupta has joined #openstack-barbican02:18
*** ngupta has quit IRC02:26
*** stevemar has joined #openstack-barbican02:36
*** stevemar has quit IRC02:49
*** stevemar has joined #openstack-barbican02:50
*** gyee has quit IRC02:52
*** stevemar has quit IRC02:54
openstackgerritDave McCowan proposed openstack/barbican: Check a CA's status as project and preferred CA before deleting  https://review.openstack.org/22806102:58
*** xaeth_afk is now known as xaeth03:02
*** dave-mccowan has quit IRC03:06
openstackgerritPradeep Kumar Singh proposed openstack/barbican: Fix order of arguments in assertEqual  https://review.openstack.org/22882003:12
*** kebray has joined #openstack-barbican03:14
*** kebray has quit IRC03:15
*** kebray has joined #openstack-barbican03:16
*** kebray has quit IRC03:17
*** kebray has joined #openstack-barbican03:17
*** stevemar has joined #openstack-barbican03:22
*** stevemar_ has joined #openstack-barbican03:24
*** stevemar has quit IRC03:27
*** stevemar_ has quit IRC03:28
*** stevemar has joined #openstack-barbican03:31
*** kebray_ has joined #openstack-barbican03:54
*** kebray has quit IRC03:57
*** xaeth is now known as xaeth_afk04:15
*** everjeje has joined #openstack-barbican04:27
openstackgerritFernando Diaz proposed openstack/castellan: Add name to Castellan Objects and Barbican Key Manager  https://review.openstack.org/22085004:29
openstackgerritAdam Harwell proposed openstack/python-barbicanclient: Fix keystone version selection  https://review.openstack.org/22045904:42
openstackgerritPradeep Kumar Singh proposed openstack/barbican: Fix order of arguments in assertEqual  https://review.openstack.org/22924104:52
*** edtubill has quit IRC05:03
*** pksingh has joined #openstack-barbican05:16
*** pksingh has quit IRC05:37
*** Nirupama has joined #openstack-barbican05:39
*** su_zhang has joined #openstack-barbican05:40
openstackgerritPradeep Kumar Singh proposed openstack/barbican: Fix order of arguments in assertEqual  https://review.openstack.org/22924905:47
openstackgerritPradeep Kumar Singh proposed openstack/barbican: Fix order of arguments in assertEqual  https://review.openstack.org/22924105:51
*** pksingh has joined #openstack-barbican05:51
openstackgerritMerged openstack/barbican: Exit with error code when db_manage.py fails  https://review.openstack.org/22847206:02
*** stevemar has quit IRC06:04
*** stevemar has joined #openstack-barbican06:04
*** stevemar has quit IRC06:08
*** kebray_ has quit IRC06:24
*** Nirupama has quit IRC06:32
*** Nirupama has joined #openstack-barbican06:33
*** jaosorior has joined #openstack-barbican06:41
*** x3k` has quit IRC06:46
*** su_zhang has quit IRC06:55
*** Nirupama has quit IRC06:56
*** Nirupama has joined #openstack-barbican07:22
*** Nirupama has quit IRC07:34
*** ollie1 has left #openstack-barbican07:41
*** stevemar has joined #openstack-barbican08:16
*** stevemar has quit IRC08:21
*** shohel has joined #openstack-barbican08:26
*** darrenmoffat has quit IRC08:57
*** darrenmoffat has joined #openstack-barbican08:58
*** shohel has quit IRC10:05
*** jaosorior has quit IRC10:07
*** mmdurrant has quit IRC10:09
*** shohel has joined #openstack-barbican10:19
*** Kevin_Zheng has quit IRC10:25
*** shohel has quit IRC10:57
*** peter-hamilton has joined #openstack-barbican11:03
*** shohel has joined #openstack-barbican11:10
*** pksingh has quit IRC11:34
*** zz_dimtruck is now known as dimtruck11:38
*** mmdurrant has joined #openstack-barbican11:59
*** jaosorior has joined #openstack-barbican11:59
*** dimtruck is now known as zz_dimtruck12:17
*** zz_dimtruck is now known as dimtruck12:18
*** dave-mccowan has joined #openstack-barbican12:51
*** shohel has quit IRC12:54
*** rellerreller has joined #openstack-barbican13:07
*** su_zhang has joined #openstack-barbican13:30
*** su_zhang has quit IRC13:34
*** dimtruck is now known as zz_dimtruck13:38
*** su_zhang has joined #openstack-barbican13:48
*** spotz_zzz is now known as spotz13:54
*** stevemar has joined #openstack-barbican13:56
*** shohel has joined #openstack-barbican14:05
*** xaeth_afk is now known as xaeth14:08
*** pglass has joined #openstack-barbican14:08
*** kebray has joined #openstack-barbican14:29
*** zz_dimtruck is now known as dimtruck14:30
*** jhfeng has joined #openstack-barbican14:30
*** xaeth is now known as xaeth_afk14:30
*** su_zhang has quit IRC14:34
*** kebray has quit IRC14:34
redrobotgood (ugt) morning barbican! :D14:38
*** edtubill has joined #openstack-barbican14:39
*** su_zhang has joined #openstack-barbican14:40
*** dave-mccowan has quit IRC14:41
*** su_zhang has quit IRC14:42
*** silos has joined #openstack-barbican14:50
*** shohel has quit IRC14:56
*** dave-mccowan has joined #openstack-barbican14:57
*** diazjf has joined #openstack-barbican15:01
dave-mccowangood morning redrobot15:05
arunkantjaosorior: Can you please review barbicanclient ACL patches again as addressed test failure related to recent merge.15:12
*** ccneill_ has joined #openstack-barbican15:20
*** ccneill_ is now known as ccneill15:20
*** jmckind has joined #openstack-barbican15:47
redrobotsilos ping15:50
silosredrobot: pong15:50
redrobotsilos just wanted to pass along this interesting read http://www.csoonline.com/article/2986995/cloud-security/is-byok-the-key-to-secure-cloud-computing.html15:50
silosredrobot: haha that picture. Thanks. I'll read it.15:51
openstackgerritFernando Diaz proposed openstack/castellan: Add name to Castellan Objects and Barbican Key Manager  https://review.openstack.org/22085015:57
diazjfredrobot, when can blueprints begin to be submitted?15:57
dave-mccowanredrobot.  thanks for the link.  very interesting topic.  i have a question about key management.  when a VM needs a key that is stored in Barbican, what is the typical workflow for it to get the key?  is the barbican client inside the VM, or should the launcher of VM get the key and insert it at launch time?15:58
redrobotdiazjf for mitaka?  you can start submitting now15:58
diazjfredrobot, yeah, awesome I have a few features I would like to add to Barbican15:58
redrobotdave-mccowan so we don't really have a good story for that yet.  We're currently saying "get your keystone credentials onto the VM somehow"16:00
redrobotdave-mccowan and then it's up to the user to do that in a secure manner16:00
redrobotdave-mccowan which is not a trivial task16:00
redrobotdave-mccowan I'm hoping https://review.openstack.org/#/c/222293/ will gain community support this cycle16:01
*** vivek-ebay has joined #openstack-barbican16:01
dave-mccowanyep, i've been following that.  interesting use for virtual console port.16:02
*** diazjf has quit IRC16:04
*** diazjf has joined #openstack-barbican16:04
*** kebray has joined #openstack-barbican16:09
redrobotdave-mccowan I guess if I had to use Barbican today through some automation process I would probably use Ansible to install python-barbicanclient on the VM I'm spinning up and then use the CLI to pull down the key by providing keystone credentials inline.16:09
*** everjeje has quit IRC16:10
redrobotdave-mccowan that way the keystone credentials are never actually saved to the VM16:10
*** kebray has quit IRC16:15
*** jhfeng has quit IRC16:20
*** gyee has joined #openstack-barbican16:22
*** kebray has joined #openstack-barbican16:33
*** su_zhang has joined #openstack-barbican16:33
*** stevemar has quit IRC16:35
*** kfarr has joined #openstack-barbican16:38
openstackgerritMerged openstack/barbican: Fix order of arguments in assertEqual  https://review.openstack.org/22924916:38
*** jhfeng has joined #openstack-barbican16:41
*** silos has left #openstack-barbican16:49
*** vivek-ebay has quit IRC16:53
*** stevemar has joined #openstack-barbican17:07
dave-mccowanredrobot what do you mean by "providing keystone credentials inline"?17:08
aleejaosorior, still around?17:09
aleedave-mccowan, jaosorior - about to send out the latest dogtag plugin with comments addressed17:11
aleedave-mccowan, just making sure the funcitonal tests pass ..17:11
dave-mccowanalee, jaosorior, redrobot.  The fix for delete is also up. https://review.openstack.org/22806117:12
aleedave-mccowan, yup saw it -- will review soon17:12
redrobotdave-mccowan basically create a "command" ansible task that executes "barbican secret get --payload --os-user-id {{ user_id }} --os-password {{ password }} --os-project-id {{ project_id }} > /path/to/some/file"17:15
redrobotdave-mccowan and put the ids and password in an ansible-vault file17:16
redrobotdave-mccowan s/command/shell  ... I don't think stdout redirection is available in command.17:17
redrobotdave-mccowan Ansible is my new hammer for all deployment nails ;)17:19
dave-mccowanredrobot. thanks. that makes sense.17:21
*** stevemar has quit IRC17:24
*** stevemar has joined #openstack-barbican17:26
openstackgerritAde Lee proposed openstack/barbican: Add subca functionality to the dogtag plugin  https://review.openstack.org/22789317:31
aleedave-mccowan, jaosorior , redrobot ^^17:31
*** shakamunyi has quit IRC17:35
*** diazjf has quit IRC17:36
*** vivek-ebay has joined #openstack-barbican17:47
*** diazjf has joined #openstack-barbican17:53
*** stevemar has quit IRC17:57
*** stevemar has joined #openstack-barbican17:57
*** shakamunyi has joined #openstack-barbican18:01
*** kebray has quit IRC18:01
*** stevemar has quit IRC18:01
*** jmckind_ has joined #openstack-barbican18:12
*** su_zhang has quit IRC18:15
*** jmckind has quit IRC18:15
*** openstackgerrit has quit IRC18:16
*** openstackgerrit has joined #openstack-barbican18:17
*** kebray has joined #openstack-barbican18:17
openstackgerritMerged openstack/barbican: Fix order of arguments in assertEqual  https://review.openstack.org/22882018:25
hockeynutdevstack is being a pain today18:34
hockeynuttimeouts while running the tests18:35
hockeynut12219 Killed18:35
hockeynuttimeout -s 9 ${REMAINING_TIME}m bash -c "source $WORKSPACE/devstack-gate/functions.sh && $cmd"18:35
jaosorior /exit18:42
*** jaosorior has quit IRC18:42
*** su_zhang has joined #openstack-barbican18:45
*** openstackgerrit has quit IRC18:46
*** openstackgerrit has joined #openstack-barbican18:46
*** david-lyle has quit IRC18:55
*** david-lyle has joined #openstack-barbican18:55
*** kebray has quit IRC18:57
*** su_zhang has quit IRC19:01
*** peter-hamilton has quit IRC19:05
*** dave-mccowan has quit IRC19:11
redrobotalee do you subscribe to ask.openstack.org?19:13
redrobotalee see https://ask.openstack.org/en/question/81778/certificate-event-plugin-not-found-dogtagcaplugin/19:13
aleeI don;t but I'll respond thanks ..19:15
redrobotalee awesome, thanks19:16
*** david-lyle has quit IRC19:22
*** david-lyle has joined #openstack-barbican19:22
*** su_zhang has joined #openstack-barbican19:23
*** stevemar has joined #openstack-barbican19:26
*** david-lyle has quit IRC19:35
*** pglass has left #openstack-barbican19:36
openstackgerritArun Kant proposed openstack/barbican: Making barbican endpoint selection values to be configurable attributes.  https://review.openstack.org/22958819:40
*** dave-mccowan has joined #openstack-barbican19:42
*** su_zhang has quit IRC19:44
*** silos has joined #openstack-barbican19:44
*** everjeje has joined #openstack-barbican19:46
*** rellerreller has quit IRC19:47
*** david-lyle has joined #openstack-barbican19:52
*** vivek-ebay has quit IRC19:56
*** vivek-ebay has joined #openstack-barbican19:57
*** david-ly_ has joined #openstack-barbican20:07
*** su_zhang has joined #openstack-barbican20:07
*** david-lyle has quit IRC20:07
*** david-ly_ is now known as david-lyle20:08
*** gyee has quit IRC20:16
openstackgerritMerged openstack/barbican: Fix order of arguments in assertEqual  https://review.openstack.org/22924120:19
*** vivek-ebay has quit IRC20:22
*** xaeth_afk is now known as xaeth20:28
*** su_zhang has quit IRC20:28
*** su_zhang has joined #openstack-barbican20:30
*** stevemar has quit IRC20:39
*** stevemar has joined #openstack-barbican20:40
*** stevemar has quit IRC20:45
*** stevemar has joined #openstack-barbican20:53
*** jmckind_ has quit IRC20:58
*** su_zhang has quit IRC21:02
*** david-lyle has quit IRC21:03
*** david-ly_ has joined #openstack-barbican21:03
*** su_zhang has joined #openstack-barbican21:05
*** david-ly_ is now known as david-lyle21:05
*** vivek-ebay has joined #openstack-barbican21:06
*** kebray has joined #openstack-barbican21:08
*** kebray has quit IRC21:13
dave-mccowanalee ping21:14
openstackgerritDave McCowan proposed openstack/barbican: Check a CA's status as project and preferred CA before deleting  https://review.openstack.org/22806121:16
*** dimtruck is now known as zz_dimtruck21:17
aleedave-mccowan, pong21:17
dave-mccowanalee i'm looking through barbican-svc screen for the dogtag dvsm run.  i see the following log entry a lot: "Sub-CAs are not supported by Dogtag client".  Does that make sense?21:17
aleedave-mccowan, yes21:18
aleedave-mccowan, in order for them to supported, you need to have the correct dogtag client code there21:18
aleedave-mccowan, which is basically the latest dogtag code -- not the code that is released on f2121:19
aleedave-mccowan, in a day or two, I'll set up a copr repo with the lastest build on f22 - and see if we can get the gate to run against that21:20
openstackgerritAde Lee proposed openstack/barbican: Add subca functionality to the dogtag plugin  https://review.openstack.org/22789321:22
aleedave-mccowan, ^^ new rebased version21:22
aleedave-mccowan, and I have not forgotten about trying to create some centos builds -- will do those too.21:23
aleecentos 7.x21:23
dave-mccowanalee thanks!21:24
*** woodster_ has joined #openstack-barbican21:26
*** david-lyle has quit IRC21:26
xaethalee: threw you under the bus as an owner for the package :) SCM request is created21:27
*** david-lyle has joined #openstack-barbican21:29
*** xaeth is now known as xaeth_afk21:39
*** kfarr has quit IRC21:45
*** david-lyle has quit IRC21:48
*** vivek-ebay has quit IRC21:50
*** silos has left #openstack-barbican21:52
*** david-lyle has joined #openstack-barbican21:54
*** spotz is now known as spotz_zzz22:02
*** edtubill has quit IRC22:07
rm_worklisaclark: you around?22:08
*** diazjf has quit IRC22:08
rm_workredrobot / jvrbanac ?22:09
rm_workhockeynut: ?22:09
redrobotrm_work o/22:09
*** su_zhang has quit IRC22:10
rm_workthanks redrobot22:10
*** su_zhang has joined #openstack-barbican22:11
*** david-lyle has quit IRC22:15
*** su_zhang has quit IRC22:21
*** su_zhang has joined #openstack-barbican22:31
*** david-lyle has joined #openstack-barbican22:36
*** su_zhang has quit IRC22:36
*** su_zhang has joined #openstack-barbican22:51
*** edtubill has joined #openstack-barbican22:56
*** jhfeng has quit IRC23:12
*** rellerreller has joined #openstack-barbican23:22
*** stevemar has quit IRC23:23
*** stevemar has joined #openstack-barbican23:24
*** stevemar has quit IRC23:28
*** vivek-ebay has joined #openstack-barbican23:29
*** ccneill has quit IRC23:37
*** su_zhang has quit IRC23:47
*** su_zhang has joined #openstack-barbican23:49
« Tuesday, 2015-09-29 Index Thursday, 2015-10-01 »

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!