| *** chlong has joined #openstack-barbican | 00:06 | |
| mixos | woodster_ Would you have time for a few quick questions ? | 00:17 |
|---|---|---|
| mixos | hi chlong | 00:18 |
| mixos | Does anyone know best way to start barbican-worker with rabbitMQ ? Apparent barbican-worker has to be manually started. | 00:23 |
| *** cheneydc has joined #openstack-barbican | 01:24 | |
| *** tonyb has joined #openstack-barbican | 01:25 | |
| tonyb | newbie question .... when was python 3 added to barbican? | 01:25 |
| * tonyb is trying to work out if runnning the python34 checks on the kilo branch makes sense | 01:26 | |
| *** woodster_ has quit IRC | 02:36 | |
| *** dave-mccowan has quit IRC | 02:51 | |
| *** zz_dimtruck is now known as dimtruck | 03:13 | |
| *** dimtruck is now known as zz_dimtruck | 04:40 | |
| *** zz_dimtruck is now known as dimtruck | 04:46 | |
| *** Stanzi has joined #openstack-barbican | 04:52 | |
| *** stanzi_ has joined #openstack-barbican | 04:52 | |
| *** Nirupama has joined #openstack-barbican | 05:27 | |
| *** Stanzi has quit IRC | 05:55 | |
| *** stanzi_ has quit IRC | 05:55 | |
| *** yuanying has joined #openstack-barbican | 05:56 | |
| *** dimtruck is now known as zz_dimtruck | 06:32 | |
| *** chlong has quit IRC | 07:13 | |
| *** chlong has joined #openstack-barbican | 08:31 | |
| *** mixos has quit IRC | 08:33 | |
| *** shohel has joined #openstack-barbican | 09:35 | |
| *** openstack has joined #openstack-barbican | 15:36 | |
| *** mixos has joined #openstack-barbican | 15:41 | |
| *** lisaclark has quit IRC | 15:44 | |
| *** rellerreller has joined #openstack-barbican | 15:46 | |
| *** stanzi has joined #openstack-barbican | 15:51 | |
| *** Stanzi_ has joined #openstack-barbican | 15:51 | |
| *** dave-mccowan has quit IRC | 15:53 | |
| *** dave-mccowan has joined #openstack-barbican | 16:07 | |
| *** ccneill has joined #openstack-barbican | 16:30 | |
| *** lisaclark has joined #openstack-barbican | 16:34 | |
| *** shohel has quit IRC | 16:37 | |
| *** gyee has joined #openstack-barbican | 16:37 | |
| openstackgerrit | Fernando Diaz proposed openstack/barbican-specs: Allow different Keystone Auth Support in Castellan https://review.openstack.org/241068 | 16:43 |
| *** diazjf has joined #openstack-barbican | 16:43 | |
| *** dimtruck is now known as zz_dimtruck | 16:45 | |
| *** diazjf1 has joined #openstack-barbican | 16:48 | |
| *** diazjf has quit IRC | 16:50 | |
| electrichead | hi tonyb ! We've done _some_ work to get Barbican to be Python3 compliant, but I don't think we're 100% compliant yet | 16:54 |
| *** lisaclark1 has joined #openstack-barbican | 16:59 | |
| *** lisaclark1 has quit IRC | 16:59 | |
| *** lisaclark has quit IRC | 16:59 | |
| *** lisaclark has joined #openstack-barbican | 17:02 | |
| *** stanzi has quit IRC | 17:06 | |
| *** Stanzi_ has quit IRC | 17:06 | |
| *** woodster_ has quit IRC | 17:16 | |
| *** shohel has joined #openstack-barbican | 17:21 | |
| *** Stanzi_ has joined #openstack-barbican | 17:28 | |
| *** stanzi has joined #openstack-barbican | 17:28 | |
| *** Stanzi_ has quit IRC | 17:28 | |
| *** stanzi has quit IRC | 17:28 | |
| *** Stanzi_ has joined #openstack-barbican | 17:29 | |
| *** stanzi has joined #openstack-barbican | 17:29 | |
| *** lisaclark has quit IRC | 17:31 | |
| *** stanzi has quit IRC | 17:39 | |
| *** Stanzi_ has quit IRC | 17:39 | |
| *** stanzi has joined #openstack-barbican | 17:39 | |
| *** Stanzi_ has joined #openstack-barbican | 17:39 | |
| mixos | Hi, | 17:40 |
| mixos | anyone know that barbican can work with rabbitMQ cluster (not local rabbitMQ) ? | 17:40 |
| mixos | for orders ? | 17:40 |
| mixos | I see a lot of noise. | 17:42 |
| *** zz_dimtruck is now known as dimtruck | 17:46 | |
| *** gyee has quit IRC | 17:51 | |
| *** kfarr has joined #openstack-barbican | 17:56 | |
| *** lisaclark has joined #openstack-barbican | 18:21 | |
| *** electrichead is now known as redrobot | 18:21 | |
| redrobot | hi mixos ! I'm not entirely sure if Barbican does work with RabbitMQ Clusters... we're currently not using queues in the Rackspace deployment. | 18:22 |
| *** gyee has joined #openstack-barbican | 18:22 | |
| *** lisaclark has quit IRC | 18:23 | |
| *** gyee has quit IRC | 18:25 | |
| *** stanzi has quit IRC | 18:27 | |
| *** Stanzi_ has quit IRC | 18:27 | |
| *** woodster_ has joined #openstack-barbican | 18:30 | |
| *** spotz_zzz is now known as spotz | 18:40 | |
| mixos | redrobot: hope your important plan is going well without glitch. :- ) | 18:43 |
| mixos | Does rackspace use orders ? | 18:43 |
| redrobot | mixos not currently, no | 18:44 |
| mixos | then how to leverage HSM ? | 18:44 |
| redrobot | mixos we're using HSMs for all crypto operations (encrypt, decrypt, etc) | 18:44 |
| mixos | ok... using secrets , customers need to bring their own secret payload.. correct ? (please understand dumb question). | 18:46 |
| redrobot | mixos correct. for our deployment (without queue or workers) the user provides their own secret data | 18:47 |
| mixos | ok... right now.. I have setup 3 barbican nodes + mariaDB+ rabbitMQ.. but I see that barbican does not play nice with rabbitMQ "cluster" | 18:47 |
| mixos | I see a lot of these... | 18:48 |
| mixos | 2015-12-21 16:52:11.315 4500 ERROR oslo_messaging._drivers.impl_rabbit [-] Failed to process message ... skipping it. | 18:48 |
| mixos | 2015-12-21 16:52:11.315 4500 ERROR oslo_messaging._drivers.impl_rabbit Traceback (most recent call last): | 18:48 |
| mixos | 2015-12-21 16:52:11.315 4500 ERROR oslo_messaging._drivers.impl_rabbit File "/opt/barbican/lib/python2.7/site-packages/oslo_messaging/_drivers/impl_rabbit.py", line 260, in _callback | 18:48 |
| mixos | 2015-12-21 16:52:11.315 4500 ERROR oslo_messaging._drivers.impl_rabbit self.callback(RabbitMessage(message)) | 18:48 |
| mixos | 2015-12-21 16:52:11.315 4500 ERROR oslo_messaging._drivers.impl_rabbit File "/opt/barbican/lib/python2.7/site-packages/oslo_messaging/_drivers/amqpdriver.py", line 181, in __call__ | 18:48 |
| mixos | 2015-12-21 16:52:11.315 4500 ERROR oslo_messaging._drivers.impl_rabbit unique_id = self.msg_id_cache.check_duplicate_message(message) | 18:48 |
| mixos | 2015-12-21 16:52:11.315 4500 ERROR oslo_messaging._drivers.impl_rabbit File "/opt/barbican/lib/python2.7/site-packages/oslo_messaging/_drivers/amqp.py", line 255, in check_duplicate_message | 18:48 |
| mixos | 2015-12-21 16:52:11.315 4500 ERROR oslo_messaging._drivers.impl_rabbit raise rpc_common.DuplicateMessageError(msg_id=msg_id) | 18:48 |
| mixos | 2015-12-21 16:52:11.315 4500 ERROR oslo_messaging._drivers.impl_rabbit DuplicateMessageError: Found duplicate message(bda186edeb0f474da2cd5bbae09f54b3). Skipping it. | 18:48 |
| mixos | oslo_messaging._drivers.imple_rabbit is complaining about Dup'ed msgs. | 18:49 |
| mixos | Does this mean that I can NOT use rabbit cluster ? | 18:49 |
| redrobot | mixos interesting.... but the messages are different? or supposed to be different anyway? | 18:49 |
| mixos | I take that the complain is valid. it looks like dup'ed msg. | 18:50 |
| mixos | Does this mean that I have to use "LOCAL" rabbitMQ ? not cluster ? | 18:50 |
| mixos | like .. each barbican node should have rabbitMQ locally, not clustered ? | 18:51 |
| redrobot | mixos the idea is for all API nodes to use the same Rabbit Queue | 18:51 |
| redrobot | mixos and the workers as well | 18:51 |
| redrobot | mixos we should definitely support clusters. AFAIK there's nothing in Barbican that would prevent that. | 18:52 |
| redrobot | mixos that said, I'm not sure what the oslo.messaging support for it is | 18:52 |
| mixos | ok... that means... rabbitMQ can't be clustered. but only one rabbitMQ node should be taking messges. | 18:52 |
| redrobot | mixos you should be able to use a cluster | 18:52 |
| *** gyee has joined #openstack-barbican | 18:53 | |
| redrobot | mixos you may have found a bug in either oslo.messaging or Barbican | 18:53 |
| mixos | (reading what you said.. and really appreciate your time .) | 18:53 |
| mixos | redrobot just a few more questions. | 18:54 |
| *** shohel has quit IRC | 18:55 | |
| mixos | 1. Does this "barbican-worker" have anything to do with "workers=1" in barbican.conf ? | 18:55 |
| mixos | 2. what would be good number for this barbican-worker (barbican.queue.server) ? | 18:55 |
| mixos | (one per a node vs. multiple per node based on number CPUs on the node). | 18:55 |
| mixos | 3. Is there particular reason why orders not being used ? If you could briefly explain why, I would appreciate it. | 18:56 |
| mixos | #3. john already answered. | 18:57 |
| mixos | #1, john didn't see any relevance between barbican-worker and workers=1 in barbican.conf. | 18:58 |
| *** shohel has joined #openstack-barbican | 19:01 | |
| *** shohel has quit IRC | 19:02 | |
| *** ccneill has quit IRC | 19:03 | |
| mixos | redrobot : Did I break the robot with too many questions. :- ) | 19:04 |
| mixos | The reason I want to use queue is ... without queue, I see many orders failing when high volume of orders coming in. | 19:09 |
| mixos | Even with the above dup'ed msg errs, all orders going through ok. | 19:09 |
| *** ccneill has joined #openstack-barbican | 19:15 | |
| mixos | redrobot : Thanks a lot for answering all my questions. it was really helpful. | 19:36 |
| *** darrenmoffat has joined #openstack-barbican | 19:39 | |
| *** stanzi has joined #openstack-barbican | 19:42 | |
| *** Stanzi_ has joined #openstack-barbican | 19:42 | |
| elmiko | redrobot: i forget, is the meeting on for this week? | 19:50 |
| *** lisaclark has joined #openstack-barbican | 19:51 | |
| diazjf1 | elmiko, I see a new item on the agenda for today https://wiki.openstack.org/wiki/Meetings/Barbican | 19:53 |
| elmiko | diazjf1: ack, thanks! | 19:53 |
| *** lisaclark1 has joined #openstack-barbican | 19:58 | |
| *** lisaclark has quit IRC | 19:59 | |
| *** lisaclark has joined #openstack-barbican | 19:59 | |
| *** maxabidi has joined #openstack-barbican | 20:00 | |
| *** maxabidi has quit IRC | 20:35 | |
| openstackgerrit | Arun Kant proposed openstack/barbican: Adding auditing support for API request using audit middleware https://review.openstack.org/217523 | 21:18 |
| *** Stanzi_ has quit IRC | 21:18 | |
| *** stanzi has quit IRC | 21:18 | |
| *** rellerreller has quit IRC | 21:31 | |
| *** xaeth has quit IRC | 21:35 | |
| *** 18VAACSMC has quit IRC | 21:35 | |
| rm_work | kfarr: just noticed in meeting notes you were talking sbout barbican gating with other projects | 21:40 |
| rm_work | kfarr: Octavia and Neutron-LBaaS gate with Barbican right now | 21:40 |
| kfarr | rm_work oh, great! Thanks | 21:40 |
| rm_work | https://github.com/openstack-infra/project-config/blob/master/jenkins/jobs/neutron-lbaas.yaml#L29 | 21:42 |
| rm_work | I forget if that is all it takes to enable | 21:42 |
| rm_work | that is why i spent so much time fixing the barbican devstack plugin | 21:43 |
| *** stanzi has joined #openstack-barbican | 21:44 | |
| *** Stanzi_ has joined #openstack-barbican | 21:44 | |
| kfarr | rm_work, yes the devstack plugin is going to be very helpful :) | 21:50 |
| rm_work | yeah, adding barbican to any devstack gate SHOULD be easy | 21:53 |
| *** Stanzi_ has quit IRC | 22:03 | |
| *** stanzi has quit IRC | 22:03 | |
| *** kfarr has quit IRC | 22:21 | |
| *** lisaclark has quit IRC | 22:29 | |
| *** lisaclark has joined #openstack-barbican | 22:33 | |
| *** dimtruck is now known as zz_dimtruck | 22:42 | |
| *** woodster_ has quit IRC | 23:06 | |
| *** mixos has quit IRC | 23:07 | |
| *** lisaclark has quit IRC | 23:08 | |
| *** lisaclark has joined #openstack-barbican | 23:09 | |
| *** mixos has joined #openstack-barbican | 23:17 | |
| *** ccneill has quit IRC | 23:31 | |
| *** spotz is now known as spotz_zzz | 23:31 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/260248 | 23:39 |
| *** lisaclark has quit IRC | 23:42 | |
| *** zz_dimtruck is now known as dimtruck | 23:46 | |
| *** dimtruck is now known as zz_dimtruck | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!