*** cheneydc has joined #openstack-barbican | 01:05 | |
*** dimtruck is now known as zz_dimtruck | 01:15 | |
*** lisaclark has joined #openstack-barbican | 01:21 | |
*** alee has joined #openstack-barbican | 01:55 | |
*** yuanying has quit IRC | 02:04 | |
*** yuanying has joined #openstack-barbican | 02:05 | |
*** kebray has joined #openstack-barbican | 02:07 | |
*** alee has quit IRC | 02:11 | |
*** kebray has quit IRC | 02:12 | |
*** kebray has joined #openstack-barbican | 02:13 | |
*** jamielennox is now known as jamielennox|away | 02:14 | |
*** kebray has quit IRC | 02:15 | |
*** kebray has joined #openstack-barbican | 02:16 | |
*** lisaclark has quit IRC | 02:16 | |
*** zz_dimtruck is now known as dimtruck | 02:20 | |
*** yuanying has quit IRC | 03:00 | |
*** yuanying has joined #openstack-barbican | 03:01 | |
openstackgerrit | Fernando Diaz proposed openstack/barbican-specs: Blueprint defining user defined metadata for Barbican Secrets https://review.openstack.org/229995 | 03:06 |
---|---|---|
*** yuanying has quit IRC | 03:20 | |
*** dimtruck is now known as zz_dimtruck | 03:20 | |
*** nkinder has joined #openstack-barbican | 03:51 | |
*** nkinder has quit IRC | 03:58 | |
*** yuanying has joined #openstack-barbican | 04:06 | |
*** kebray_ has joined #openstack-barbican | 04:37 | |
*** kebray has quit IRC | 04:37 | |
*** jaosorior has joined #openstack-barbican | 05:41 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Imported Translations from Zanata https://review.openstack.org/268602 | 06:28 |
*** Nirupama has joined #openstack-barbican | 06:32 | |
*** kebray_ has quit IRC | 06:35 | |
*** chlong has quit IRC | 07:00 | |
*** Nirupama has quit IRC | 07:25 | |
*** scheuran has joined #openstack-barbican | 07:37 | |
*** Kevin_Zheng has joined #openstack-barbican | 07:49 | |
*** Nirupama has joined #openstack-barbican | 07:52 | |
*** Nirupama has quit IRC | 08:10 | |
*** Nirupama has joined #openstack-barbican | 08:29 | |
*** jaosorior has quit IRC | 08:29 | |
*** jaosorior has joined #openstack-barbican | 08:30 | |
*** jaosorior has quit IRC | 09:17 | |
*** jaosorior has joined #openstack-barbican | 09:18 | |
*** cheneydc has quit IRC | 09:59 | |
*** Nirupama has quit IRC | 10:07 | |
*** Nirupama has joined #openstack-barbican | 11:24 | |
*** Nirupama has quit IRC | 11:27 | |
*** Nirupama has joined #openstack-barbican | 11:27 | |
openstackgerrit | Vishal kumar mahajan proposed openstack/barbican-specs: Replace deprecated library function os.popen() with subprocess. https://review.openstack.org/269009 | 12:00 |
*** Nirupama has quit IRC | 12:11 | |
*** chlong has joined #openstack-barbican | 12:36 | |
*** alee has joined #openstack-barbican | 13:02 | |
*** alee has quit IRC | 13:07 | |
*** alee has joined #openstack-barbican | 13:07 | |
*** zz_dimtruck is now known as dimtruck | 13:10 | |
*** alee has quit IRC | 13:22 | |
*** dimtruck is now known as zz_dimtruck | 13:44 | |
*** zz_dimtruck is now known as dimtruck | 13:47 | |
*** dimtruck is now known as zz_dimtruck | 13:58 | |
*** lisaclark has joined #openstack-barbican | 14:11 | |
*** jmckind has joined #openstack-barbican | 14:53 | |
*** spotz_zzz is now known as spotz | 15:02 | |
*** zz_dimtruck is now known as dimtruck | 15:04 | |
*** lisaclark has quit IRC | 15:05 | |
*** lisaclark has joined #openstack-barbican | 15:09 | |
*** diazjf has joined #openstack-barbican | 15:22 | |
*** diazjf has quit IRC | 15:28 | |
*** mp2 has joined #openstack-barbican | 15:29 | |
*** chlong has quit IRC | 15:31 | |
*** jmckind_ has joined #openstack-barbican | 15:35 | |
*** diazjf has joined #openstack-barbican | 15:38 | |
*** stanzi has joined #openstack-barbican | 15:38 | |
*** jmckind has quit IRC | 15:38 | |
*** fredyx10 has joined #openstack-barbican | 15:38 | |
*** nkinder has joined #openstack-barbican | 15:39 | |
*** rellerreller has joined #openstack-barbican | 15:41 | |
*** lisaclark has quit IRC | 15:58 | |
diazjf | zigo ping | 15:59 |
zigo | diazjf: pong | 15:59 |
diazjf | hey zigo, I was recently working with alee on barbican-puppet and was wondering if all teh Debian Packages for Barbican were up-to-date | 16:00 |
zigo | diazjf: It depends what you call "up-to-date" ... | 16:00 |
zigo | diazjf: Mitaka b2 is out soon, no? :) | 16:00 |
*** lisaclark has joined #openstack-barbican | 16:01 | |
zigo | I've finished to package all of the clients and Oslo for Mitaka b2, and I'm waiting for projects to tag releases. | 16:01 |
zigo | Let's say Barbican releases today, then I can upload Mitaka b2 of Barbican to Experimental today too... | 16:01 |
diazjf | zigo, perfect, I was having some trouble with the installation on my ubuntu VM through apt-get. Running trusty | 16:02 |
zigo | I'm *not* doing things in Debian, so I can help you but I have no experience of what's the result in Ubuntu. | 16:03 |
zigo | What's your trouble? | 16:03 |
zigo | diazjf: ^ | 16:05 |
zigo | I wanted to say, I'm not doing things in Ubuntu. | 16:05 |
zigo | But in Debian... | 16:05 |
zigo | :) | 16:05 |
diazjf | zigo, 1.) What repo is the barbican package in? | 16:07 |
diazjf | vagrant@vagrant-ubuntu-trusty-64:~$ sudo apt-cache search barbican | 16:07 |
diazjf | vagrant@vagrant-ubuntu-trusty-64:~$ sudo apt-cache search openstack | grep barbican | 16:07 |
diazjf | I appreciate your help :) | 16:11 |
*** edtubill has joined #openstack-barbican | 16:16 | |
*** mixos has joined #openstack-barbican | 16:22 | |
*** woodster_ has joined #openstack-barbican | 16:27 | |
openstackgerrit | Christopher Solis proposed openstack/barbican: Create Orders Documentation https://review.openstack.org/236123 | 16:31 |
*** ccneill has joined #openstack-barbican | 16:31 | |
*** stanzi has quit IRC | 16:32 | |
*** ccneill_ has joined #openstack-barbican | 16:33 | |
*** ccneill has quit IRC | 16:34 | |
*** ccneill_ is now known as ccneill | 16:34 | |
*** jaosorior has quit IRC | 16:34 | |
*** silos has joined #openstack-barbican | 16:35 | |
*** jaosorior has joined #openstack-barbican | 16:35 | |
*** peter-hamilton has joined #openstack-barbican | 16:44 | |
*** mp2 has quit IRC | 16:44 | |
*** mp1 has joined #openstack-barbican | 16:45 | |
*** jaosorior has quit IRC | 16:46 | |
*** jaosorior has joined #openstack-barbican | 16:47 | |
-openstackstatus- NOTICE: Gerrit is restarting quickly as a workaround for performance degradation | 16:48 | |
*** narengan has joined #openstack-barbican | 16:49 | |
*** kebray has joined #openstack-barbican | 16:49 | |
edtubill | ping redrobot | 16:50 |
*** kebray has quit IRC | 16:51 | |
openstackgerrit | Fernando Diaz proposed openstack/barbican-specs: Allow different Keystone Auth Support in Castellan https://review.openstack.org/241068 | 16:56 |
redrobot | edtubill pong | 16:57 |
edtubill | redrobot: I wanted to ask you somethings about cleaning up the database. | 16:58 |
redrobot | edtubill what's up? | 16:58 |
edtubill | redrobot: I generated/made this picture that describes the database: https://github.com/edtubillara/barbican-misc/blob/master/BarbicanDB.jpg | 16:58 |
redrobot | edtubill heh, neato | 16:58 |
edtubill | redrobot: It seems that with the constraints, soft deleted secrets cannot be removed until the customer removes the order for it due to a non nullable foreign key restraint. | 16:59 |
edtubill | redrobot: I also wanted to setup a hangout so we could further discuss this sometime this week. | 17:00 |
redrobot | edtubill interesting... I think we can probably talk about it during the IRC meeting this afternoon. | 17:01 |
edtubill | redrobot: k cool, perhaps there will be others interested as well. | 17:02 |
*** rellerreller has quit IRC | 17:07 | |
*** hockeynut_afk has joined #openstack-barbican | 17:10 | |
*** igueths has joined #openstack-barbican | 17:12 | |
*** scheuran has quit IRC | 17:14 | |
*** lisaclark has quit IRC | 17:15 | |
*** silos has quit IRC | 17:15 | |
*** lisaclark has joined #openstack-barbican | 17:20 | |
*** lisaclark has quit IRC | 17:30 | |
*** stanzi has joined #openstack-barbican | 17:34 | |
*** lisaclark has joined #openstack-barbican | 17:35 | |
*** silos has joined #openstack-barbican | 17:42 | |
*** fnaval has joined #openstack-barbican | 17:44 | |
*** mp1 has quit IRC | 17:49 | |
*** fnaval has quit IRC | 17:55 | |
*** jaosorior has quit IRC | 17:59 | |
*** silos has quit IRC | 18:02 | |
*** lisaclark has quit IRC | 18:03 | |
*** jmckind_ has quit IRC | 18:18 | |
*** david-lyle has quit IRC | 18:23 | |
*** kebray has joined #openstack-barbican | 18:30 | |
*** stanzi has quit IRC | 18:35 | |
*** david-lyle has joined #openstack-barbican | 18:39 | |
*** hockeynut has quit IRC | 18:41 | |
*** hockeynut_afk is now known as hockeynut | 18:43 | |
*** david-lyle has quit IRC | 18:46 | |
*** kebray has quit IRC | 18:50 | |
*** lisaclark has joined #openstack-barbican | 18:50 | |
*** peter-hamilton has quit IRC | 19:00 | |
*** kfarr has joined #openstack-barbican | 19:08 | |
*** david-lyle has joined #openstack-barbican | 19:10 | |
*** silos has joined #openstack-barbican | 19:23 | |
*** jmckind has joined #openstack-barbican | 19:27 | |
*** david-lyle_ has joined #openstack-barbican | 19:27 | |
diazjf | redrobot, were you able to take a look at the pptx I sent last night? Lmk what you think and I'll keep updating. :) | 19:28 |
*** jmckind_ has joined #openstack-barbican | 19:28 | |
*** david-lyle has quit IRC | 19:31 | |
*** jmckind has quit IRC | 19:32 | |
*** david-lyle_ has quit IRC | 19:37 | |
*** david-lyle has joined #openstack-barbican | 19:39 | |
*** david-lyle has quit IRC | 19:46 | |
*** silos has quit IRC | 19:50 | |
*** mp1 has joined #openstack-barbican | 19:52 | |
*** darrenmoffat has quit IRC | 19:52 | |
*** darrenmoffat has joined #openstack-barbican | 19:53 | |
*** narengan12 has joined #openstack-barbican | 19:57 | |
*** narengan has quit IRC | 19:57 | |
redrobot | diazjf yeah, looks awesome so far! | 19:58 |
diazjf | redrobot, awesome thanks! I'm trying to add alot of humor to keep the audience engaged ;) | 19:59 |
*** dave-mccowan has joined #openstack-barbican | 20:03 | |
*** dave-mcc_ has joined #openstack-barbican | 20:05 | |
*** dave-mccowan has quit IRC | 20:07 | |
*** kebray has joined #openstack-barbican | 20:08 | |
*** silos has joined #openstack-barbican | 20:09 | |
*** kebray has quit IRC | 20:10 | |
*** rellerreller has joined #openstack-barbican | 20:11 | |
*** fredyx10 has quit IRC | 20:13 | |
*** fredyx10 has joined #openstack-barbican | 20:13 | |
*** kebray has joined #openstack-barbican | 20:19 | |
*** jhfeng has joined #openstack-barbican | 20:21 | |
*** fredyx10 has quit IRC | 20:26 | |
*** fredyx10 has joined #openstack-barbican | 20:29 | |
*** dave-mcc_ has quit IRC | 20:37 | |
*** dave-mccowan has joined #openstack-barbican | 20:38 | |
*** dave-mccowan has quit IRC | 20:43 | |
*** lisaclark has quit IRC | 20:50 | |
*** lisaclark has joined #openstack-barbican | 20:55 | |
*** stack_ has joined #openstack-barbican | 20:57 | |
edtubill | ping woodster | 21:00 |
silos | redrobot: could we put up an etherpad or wiki page for BP's we are trying to deliver to mitaka? That way people know which one's we are interested in and we can get them delivered ASAP. | 21:01 |
woodster_ | edtubill: just continuing here...yeah if you hard delete a secret that has an order attached, that order probably needs to be cleaned up too | 21:01 |
*** narengan12 has quit IRC | 21:01 | |
diazjf | silos +1 | 21:02 |
edtubill | woodertser: so it should be fine to keep an order of a deleted secret, I would need to set the order's foreign key to null before setting the foreign key to null. Then the secret could get deleted. | 21:02 |
*** stack_ is now known as narengan | 21:02 | |
woodster_ | edtubill: I think the sticky part is with *expired* certs associated to a cert order. I don't think we can remove those secrets/orders in case someone wants to reissue the cert later? | 21:02 |
woodster_ | edtubill: that would be a good alee question as well | 21:03 |
edtubill | so I'm going to leave orders out of it unless it is soft deleted by the user. | 21:03 |
woodster_ | edtubill: I can't recall...are you planning to delete expired certs too, or just soft deleted ones? | 21:03 |
edtubill | just soft deleted ones. | 21:04 |
edtubill | or I guess for certs, they are not soft deleted. | 21:04 |
woodster_ | edtubill: then I'd agree | 21:04 |
edtubill | I also generated/made this chart to visualize the database | 21:04 |
edtubill | https://github.com/edtubillara/barbican-misc/blob/master/BarbicanDB.jpg | 21:04 |
edtubill | I also wanted to make a google hangout sometime to talk a little about implementation... | 21:05 |
edtubill | and I had a question about the order_retry_tasks table and what exactly that table was used for... | 21:07 |
jhfeng | edtubill, in mid cycle discussion, I think we wanted your BP focus on secret only, not orders. If you touch on order, just order of secret | 21:10 |
openstackgerrit | Freddy Pedraza proposed openstack/barbican: Reworded sentence fragment in the README. https://review.openstack.org/269275 | 21:12 |
openstackgerrit | Freddy Pedraza proposed openstack/barbican: Reworded sentence fragment in the README https://review.openstack.org/269275 | 21:15 |
*** fnaval has joined #openstack-barbican | 21:20 | |
*** jmckind has joined #openstack-barbican | 21:25 | |
*** fredyx101 has joined #openstack-barbican | 21:25 | |
*** fredyx10 has quit IRC | 21:27 | |
*** jmckind_ has quit IRC | 21:28 | |
*** kebray has quit IRC | 21:28 | |
openstackgerrit | Christopher Solis proposed openstack/barbican: Create Orders Documentation https://review.openstack.org/236123 | 21:33 |
*** fnaval_ has joined #openstack-barbican | 21:37 | |
edtubill | jhfeng, I think that we agreed on not cleaning up on orders that were not soft deleted. | 21:37 |
*** fnaval has quit IRC | 21:39 | |
woodster_ | edtubill: that's what I recall as well | 21:46 |
*** lisaclark has quit IRC | 21:47 | |
*** silos has quit IRC | 21:47 | |
edtubill | woodster: I guess my only concern right now is for cleaning up soft deleted orders if they have a child entry inside the order_retry_tasks table. I'm not sure when that table is cleaned up. | 21:48 |
*** silos has joined #openstack-barbican | 21:48 | |
*** kebray has joined #openstack-barbican | 21:49 | |
*** rellerreller has quit IRC | 21:49 | |
woodster_ | edtubill: the order retry table is currently only used to retry long-running cert generation tasks...e.g. getting a CA to create a cert that might take days/weeks to get approved/validated. A soft deleted order should be removed from this table, so I think your figure could show that as a blue line. That figure is very cool BTW.... | 21:49 |
woodster_ | edtubill: eventually that table could be cleaned of soft deleted orders as well | 21:50 |
edtubill | woodster_: thanks, the messy diagram is pretty cool :p, So I guess what I'm afraid of is that if an order is soft deleted, the entry for the retry_task is still there, but I can't remove the order until the retry_task is soft deleted as well because of foreign key constraints. And I don't know if it is safe to remove the retry_task if it is still on the queue. | 21:59 |
edtubill | does that make sense? | 22:00 |
*** diazjf has quit IRC | 22:03 | |
*** lisaclark has joined #openstack-barbican | 22:03 | |
*** kebray has quit IRC | 22:05 | |
*** stanzi has joined #openstack-barbican | 22:05 | |
*** jamielennox|away is now known as jamielennox | 22:09 | |
*** chlong has joined #openstack-barbican | 22:12 | |
*** lisaclark has quit IRC | 22:16 | |
*** narengan has quit IRC | 22:17 | |
*** narengan has joined #openstack-barbican | 22:18 | |
*** fredyx101 has quit IRC | 22:31 | |
*** jmckind has quit IRC | 22:33 | |
*** narengan12 has joined #openstack-barbican | 22:34 | |
woodster_ | edtubill: you should be able to remove records from that retry table...the retry manager does that already. Just remove the records with soft-deleted orders :) | 22:34 |
*** narengan has quit IRC | 22:37 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/268431 | 22:39 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/castellan: Updated from global requirements https://review.openstack.org/262884 | 22:39 |
*** stanzi has quit IRC | 22:44 | |
*** silos has left #openstack-barbican | 22:44 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-barbicanclient: Updated from global requirements https://review.openstack.org/268504 | 22:45 |
edtubill | wooderster_: I think there is a period in time where the retry_task is not soft deleted and the order is soft deleted. And I think it would take time until the retry_task is soft deleted. Is this true? Should I just skip these orders until the retry_task is soft deleted? | 22:48 |
edtubill | I think this would happen when an order that is in the retry_task queue is deleted. | 22:50 |
*** narengan12 has quit IRC | 22:51 | |
edtubill | woodster_ | 22:54 |
*** edtubill has quit IRC | 23:06 | |
*** lisaclark has joined #openstack-barbican | 23:17 | |
*** igueths has quit IRC | 23:17 | |
*** mixos has quit IRC | 23:18 | |
*** diazjf has joined #openstack-barbican | 23:26 | |
*** lisaclark has quit IRC | 23:28 | |
openstackgerrit | Fernando Diaz proposed openstack/castellan: Use Keystone V3 Identity Plugins for Functional Tests https://review.openstack.org/235707 | 23:30 |
*** dimtruck is now known as zz_dimtruck | 23:30 | |
openstackgerrit | Merged openstack/barbican: Reworded sentence fragment in the README https://review.openstack.org/269275 | 23:37 |
*** jhfeng has quit IRC | 23:45 | |
*** jhfeng has joined #openstack-barbican | 23:45 | |
*** jhfeng has quit IRC | 23:48 | |
*** jhfeng has joined #openstack-barbican | 23:50 | |
*** mp1 has quit IRC | 23:51 | |
*** spotz is now known as spotz_zzz | 23:53 | |
*** yuanying has quit IRC | 23:54 | |
*** jhfeng has quit IRC | 23:55 | |
*** yuanying has joined #openstack-barbican | 23:56 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!