Tuesday, 2016-03-01

*** zz_dimtruck is now known as dimtruck00:08
*** qwebirc62353 has quit IRC00:16
*** rellerreller has joined #openstack-barbican00:17
*** fnaval has joined #openstack-barbican00:17
*** mp1 has joined #openstack-barbican00:22
*** jorge_munoz has quit IRC01:14
*** cheneydc has joined #openstack-barbican01:15
*** mixos has joined #openstack-barbican01:16
*** rellerreller has quit IRC01:17
*** sigmavirus24 is now known as sigmavirus24_awa01:17
*** jamielennox is now known as jamielennox|away01:45
*** yfujioka has joined #openstack-barbican01:55
*** jmckind has quit IRC02:23
*** fawadkhaliq has quit IRC02:27
*** ptoohill has quit IRC02:32
*** crc32|znc has quit IRC02:32
*** jorgem has quit IRC02:32
*** panatl has quit IRC02:46
*** jhfeng has joined #openstack-barbican02:54
*** jhfeng has quit IRC02:58
*** dimtruck is now known as zz_dimtruck03:01
*** zz_dimtruck is now known as dimtruck03:12
*** woodster_ has quit IRC03:16
*** yuanying has joined #openstack-barbican03:21
*** jorge_munoz has joined #openstack-barbican03:21
*** jorge_munoz has quit IRC03:22
*** yuanying_ has quit IRC03:23
*** yuanying has quit IRC03:27
*** dave-mccowan has quit IRC03:45
*** kebray has quit IRC03:49
*** rhagarty_ has joined #openstack-barbican03:55
*** rhagarty has quit IRC03:58
*** rhagarty_ has quit IRC04:02
*** chlong_ has quit IRC04:03
*** yuanying has joined #openstack-barbican04:10
*** fawadkhaliq has joined #openstack-barbican04:18
*** dimtruck is now known as zz_dimtruck04:22
*** edtubill has joined #openstack-barbican04:54
*** jmckind has joined #openstack-barbican04:56
*** diazjf has joined #openstack-barbican04:57
*** edtubill has quit IRC05:06
*** edtubill has joined #openstack-barbican05:07
*** crc32|znc has joined #openstack-barbican05:18
*** jorgem has joined #openstack-barbican05:19
*** ptoohill has joined #openstack-barbican05:19
*** edtubill has quit IRC05:28
*** jmckind has quit IRC05:33
*** sidx64 has joined #openstack-barbican05:42
*** fawadkhaliq has quit IRC05:42
*** jaosorior has joined #openstack-barbican05:49
openstackgerritFernando Diaz proposed openstack/barbican: Introduce User-Meta table, model, and repo  https://review.openstack.org/27096305:52
*** fawadkhaliq has joined #openstack-barbican05:58
*** sidx64_Cern has joined #openstack-barbican05:59
*** sidx64 has quit IRC06:01
*** Nirupama has joined #openstack-barbican06:04
*** Kiall has quit IRC06:06
*** Kiall has joined #openstack-barbican06:08
openstackgerritFernando Diaz proposed openstack/barbican: User Metadata API and tests  https://review.openstack.org/27588506:09
*** Nirupama has quit IRC06:20
*** Nirupama has joined #openstack-barbican06:24
*** diazjf has quit IRC06:29
*** Nirupama has quit IRC06:51
*** scheuran has joined #openstack-barbican07:05
*** sid_cerner has joined #openstack-barbican07:21
*** sidx64_Cern has quit IRC07:25
*** Nirupama has joined #openstack-barbican07:34
*** fawadkhaliq has quit IRC08:08
*** pcaruana has joined #openstack-barbican08:09
*** tkelsey has joined #openstack-barbican08:12
*** mixos has quit IRC08:12
*** tkelsey has quit IRC08:13
*** yfujioka has quit IRC08:28
*** openstackgerrit has quit IRC08:48
*** openstackgerrit has joined #openstack-barbican08:48
*** scheuran has quit IRC09:15
*** scheuran has joined #openstack-barbican09:27
*** cheneydc has quit IRC10:01
*** Nirupama has quit IRC10:13
-openstackstatus- NOTICE: Gerrit is going to be restarted due to poor performance10:34
*** ChanServ changes topic to "Gerrit is going to be restarted due to poor performance"10:34
*** tkelsey has joined #openstack-barbican10:35
*** ChanServ changes topic to "Discussion about development of OpenStack Barbican and its client libraries. - Logs: http://eavesdrop.openstack.org/irclogs/%23openstack-barbican/"10:40
-openstackstatus- NOTICE: gerrit finished restartign10:40
*** yfujioka has joined #openstack-barbican10:55
*** chlong_ has joined #openstack-barbican11:02
*** Nirupama has joined #openstack-barbican11:53
*** Nirupama has quit IRC12:20
*** dave-mccowan has joined #openstack-barbican12:27
*** sid_cerner has quit IRC12:30
*** jaosorior has quit IRC12:36
*** jaosorior has joined #openstack-barbican12:37
*** tkelsey has quit IRC12:42
*** alee has quit IRC13:18
*** rellerreller has joined #openstack-barbican13:48
*** yfujioka has quit IRC13:49
*** diazjf has joined #openstack-barbican13:56
openstackgerritFernando Diaz proposed openstack/barbican: User Metadata API and tests  https://review.openstack.org/27588514:02
*** alee has joined #openstack-barbican14:14
*** jmckind has joined #openstack-barbican14:20
*** jmckind_ has joined #openstack-barbican14:21
*** edtubill has joined #openstack-barbican14:21
*** woodster_ has joined #openstack-barbican14:24
*** jmckind has quit IRC14:25
*** jroll has quit IRC14:29
*** jroll has joined #openstack-barbican14:30
*** jroll has quit IRC14:30
*** jroll has joined #openstack-barbican14:30
*** yfujioka has joined #openstack-barbican14:31
*** fredyx10 has joined #openstack-barbican14:38
openstackgerritFernando Diaz proposed openstack/barbican: User Metadata Documentation  https://review.openstack.org/28334114:44
openstackgerritFernando Diaz proposed openstack/barbican: User Metadata API and tests  https://review.openstack.org/27588514:46
*** jmckind_ has quit IRC14:47
*** yfujioka has quit IRC14:51
openstackgerritFernando Diaz proposed openstack/castellan: Allow Barbican Key Manager to accept different auth credentials  https://review.openstack.org/27387214:52
*** tkelsey has joined #openstack-barbican14:55
*** jmckind has joined #openstack-barbican14:58
*** fawadkhaliq has joined #openstack-barbican15:02
*** yfujioka has joined #openstack-barbican15:05
*** yfujioka has quit IRC15:07
*** zz_dimtruck is now known as dimtruck15:12
*** rhagarty has joined #openstack-barbican15:18
*** sigmavirus24_awa is now known as sigmavirus2415:20
*** rhagarty_ has joined #openstack-barbican15:21
*** rhagarty has quit IRC15:24
*** rhagarty_ has quit IRC15:25
*** mixos has joined #openstack-barbican15:25
rellerrellerdiazjf See my comments on https://review.openstack.org/#/c/27387215:26
rellerrellerdiazjf let me know what you want to do on that, and I can adjust my vote accordingly.15:27
diazjfrellerreller, thanks for going over it. If I have time before the Castellan release, I'll refactor :/, if not we can open up a wishlist bug and I can work on it once I'm done with all the metadata stuff15:31
rellerrellerdiazjf my thought is to defer until later. It's a minor thing as long as you agree to do it.15:31
rellerrellerdiazjf that way we can get this through the gates and merged with everything else.15:32
rellerrellerdiazjf and then kfarr can make a new release earlier.15:32
diazjfrellerreller sounds good. I will dedicate some time to it after the code freeze15:32
rellerrellerdiazjf sounds good. Do you have any other patches that need to be included in the Castellan release? kfarr including you here.15:33
diazjfrellerreller, kfarr, All I need is to finish the documentation and we are good. https://review.openstack.org/#/c/274183/215:34
diazjfshould just need some minor edits15:34
*** jorge_munoz has joined #openstack-barbican15:34
rellerrellerdiazjf sounds good. I'll be on the lookout.15:34
*** mp1 has joined #openstack-barbican15:35
*** mp1 has quit IRC15:35
*** mp1 has joined #openstack-barbican15:35
diazjfrellerreller, awesome thanks.15:36
*** spotz_zzz is now known as spotz15:37
*** ryanpetrello has quit IRC15:43
*** ryanpetrello has joined #openstack-barbican15:44
*** mixos has quit IRC15:45
mp1hi, can anyone take a look at this patch: https://review.openstack.org/#/c/282059/15:46
mp1it is ready for review15:46
openstackgerritElvin Tubillara proposed openstack/barbican: Simple soft deletion clean up for barbican-db-manage  https://review.openstack.org/26990315:50
*** rellerreller has quit IRC15:54
openstackgerritElvin Tubillara proposed openstack/barbican: Make clean up of soft deletions configurable  https://review.openstack.org/28482115:54
*** mixos has joined #openstack-barbican15:58
*** rellerreller has joined #openstack-barbican16:01
*** randallburt has joined #openstack-barbican16:06
*** jaosorior is now known as jaosorior_away16:06
*** fredyx10 has quit IRC16:06
*** chlong_ has quit IRC16:10
*** fredyx10 has joined #openstack-barbican16:10
*** silos has joined #openstack-barbican16:13
*** fawadkhaliq has quit IRC16:33
*** rhagarty has joined #openstack-barbican16:34
*** mixos has quit IRC16:35
*** randallburt has quit IRC16:35
rhagartyhello - has something changed recently that would result in me getting "403 Forbidden" responses to all my container and secret HTTP get requests?16:37
*** mixos has joined #openstack-barbican16:38
*** jhfeng has joined #openstack-barbican16:40
hockeynutedtubill redrobot et al - for secret delete did we ever decide to do anything with the API?  Or just the cleanup script?16:42
edtubillhockeynut: I think we are just going for the cleanup script16:42
hockeynutedtubill thats what I thought.  Last night I woke up at 2am and thought "hey, how cool would it be if you could to DELETE /v1/secrets/uuid/purge and that would do a hard delete?16:43
hockeynutI went back to sleep afterwards but it stuck with me16:43
hockeynutkinda like we do a GET and with /payload it gets the decrypted secret, but without a /payload it gets the metadata16:44
hockeynutdelete without /purge would be soft...with /purge it would be hard16:44
edtubillhockeynut: I think that could be useful too, were you also thinking about a /v1/secrets/uuid/restore as well?16:44
*** mixos has quit IRC16:44
hockeynutedtubill that will probably come to me in a dream tonight.16:47
hockeynutthose two do make the API a bit more resilient - maybe a blueprint is in order?16:48
*** jmckind has quit IRC16:48
*** scheuran has quit IRC16:49
edtubillhockeynut: lol barbican dreams. I have a blueprint for secret restoration, but it was for a command. Maybe I should scrap that and a blueprint should be made with your api idea?16:50
hockeynutmight not be a bad idea16:51
hockeynutone for the monday IRC meeting perhaps16:51
*** mixos has joined #openstack-barbican16:52
*** jmckind has joined #openstack-barbican16:55
*** fawadkhaliq has joined #openstack-barbican16:56
*** gyee has joined #openstack-barbican17:03
*** pcaruana has quit IRC17:07
*** jorge_munoz has quit IRC17:08
*** mixos has quit IRC17:10
mp1rhagarty did you do "source path/to/devstack/openrc admin admin"?17:17
rhagartymp1, in what context should I run that? barbican-svc?17:21
mp1outside of screen17:21
mp1rhagarty in your VM (assuming you are using VM)17:22
rhagartymp1, yes17:22
rhagartymp1, I just pulled from master this week and I started seeing this "forbidden" issue. Hadn't pulled for a couple months prior17:23
mp1rhagarty I used to get that error too but then I did "source openrc admin admin" from within my devstack directory and got a new keystone token and it disappeared17:24
mp1rhagarty I pulled latest master and it works17:24
rhagartymp1, let me pull a new keystone token and try again17:25
rhagartymp1, still getting error17:27
mp1rhagarty you sourced openrc with admin admin before getting the token as well?17:31
rhagartymp1, yes. FYI, I see a constant stack trace in barbican-svc. Am trying to put into pastebin to show...17:32
mp1rhagarty ok.. I am restacking with the latest master to see if I can reproduce what you're getting17:33
rhagartymp1, much appreciated!17:33
mp1rhagarty looks like I'm able to create a secret after restacking with latest master17:38
mp1http://paste.openstack.org/show/488802/17:39
rhagartymp1, I've been using Chrome DHC. Let me try your curl commands17:41
mp1rhagarty I see. I'm going from command line in vagrant and am just copying and pasting the commands from here: http://docs.openstack.org/developer/barbican/api/userguide/secrets.html17:43
*** nkinder has joined #openstack-barbican17:44
rhagartymp1, I get same 403 error running your curl command. Frustrating...17:50
rhagartymp1, do you see any stack traces with barbican-svc?17:50
rhagartymp1, I'm seeing "ImportError: 'module' object has no attribute 'create_admin_app'"17:51
mp1rhagarty nothing unexpected popping up here17:51
rhagartymp1, maybe I need to restack17:52
mp1rhagarty maybe17:52
mp1rhagarty maybe paste the full error in paste.openstack.org17:53
rhagartymp1, been trying, but having trouble setting up account17:53
*** nkinder has quit IRC17:53
mp1rhagarty that's strange, I just logged in with gerrit / Ubuntu One account and it worked for me17:54
mp1:(17:54
rhagartymp1, http://pastebin.com/N0FyM1jW17:56
*** fnaval has quit IRC17:58
mp1rhagarty I don't have a "/etc/barbican/barbican-admin-paste.ini" file in my VM17:58
mp1rhagarty maayyybe it's related? Not sure17:58
rhagartymp1, removed it... now I get error that it can't find it18:00
mp1rhagarty I guess restack may be the best option at this point18:00
rhagartymp1, do you have a barbican-api.conf file in /etc/barbican?18:01
mp1rhagarty yes18:03
rhagartymp1, ok - I'm going to restack. Thanks again for your help18:03
mp1rhagarty np18:06
*** fredyx10 has quit IRC18:18
*** openstackgerrit has quit IRC18:18
*** openstackgerrit has joined #openstack-barbican18:18
*** mixos has joined #openstack-barbican18:21
openstackgerritFernando Diaz proposed openstack/barbican: User Metadata API and tests  https://review.openstack.org/27588518:21
*** jmckind has quit IRC18:22
diazjfrellerreller, added model tests to https://review.openstack.org/#/c/270963/ and repo tests to https://review.openstack.org/#/c/275885/ coverage is significantly up :)18:23
*** fnaval has joined #openstack-barbican18:26
*** jaosorior_away is now known as jaosorior18:31
openstackgerritElvin Tubillara proposed openstack/barbican: Make clean up of soft deletions configurable  https://review.openstack.org/28482118:35
*** jorge_munoz has joined #openstack-barbican18:36
*** tkelsey has quit IRC18:36
*** silos has quit IRC18:41
*** mp1 has quit IRC18:52
openstackgerritMerged openstack/barbican: Avoid using `len(x)` to check if x is empty  https://review.openstack.org/28475018:52
*** openstack has joined #openstack-barbican19:15
*** openstackstatus has joined #openstack-barbican19:16
*** ChanServ sets mode: +v openstackstatus19:16
*** openstackgerrit has joined #openstack-barbican19:19
*** tdink has quit IRC19:25
*** briancurtin has quit IRC19:25
*** mjg59 has quit IRC19:25
*** mp1 has joined #openstack-barbican19:29
*** tdink has joined #openstack-barbican19:31
*** briancurtin has joined #openstack-barbican19:31
*** mjg59 has joined #openstack-barbican19:31
*** sigmavirus24 is now known as sigmavirus24_awa19:37
*** silos has joined #openstack-barbican19:44
*** rellerreller has quit IRC19:45
*** gyee has quit IRC19:48
*** jmckind has joined #openstack-barbican19:51
*** fredyx101 has joined #openstack-barbican19:51
*** sigmavirus24_awa is now known as sigmavirus2419:52
*** fredyx10 has quit IRC19:53
*** david-lyle has quit IRC19:59
*** jhfeng has quit IRC20:07
*** fredyx101 has quit IRC20:09
*** david-lyle has joined #openstack-barbican20:09
*** jhfeng has joined #openstack-barbican20:09
diazjfping rellerreller20:10
openstackgerritFernando Diaz proposed openstack/barbican: Introduce User-Meta table, model, and repo  https://review.openstack.org/27096320:11
jhfengwoodster_: hi John, thanks reviewing https://review.openstack.org/#/c/279371/20:11
jhfengwoodster_: could you please review https://review.openstack.org/#/c/282059/20:12
openstackgerritFernando Diaz proposed openstack/barbican: User Metadata API and tests  https://review.openstack.org/27588520:12
*** jaosorior has quit IRC20:12
*** fredyx10 has joined #openstack-barbican20:16
*** jorge_munoz has quit IRC20:17
openstackgerritElvin Tubillara proposed openstack/barbican: WIP DO NOT MERGE -Add secret user meta data to clean command  https://review.openstack.org/28682220:26
*** jorge_munoz has joined #openstack-barbican20:26
openstackgerritFernando Diaz proposed openstack/barbican: User Metadata API and tests  https://review.openstack.org/27588520:30
openstackgerritFernando Diaz proposed openstack/barbican: User Metadata Documentation  https://review.openstack.org/28334120:44
*** pcaruana has joined #openstack-barbican20:44
*** jamielennox|away is now known as jamielennox20:45
*** mixos has quit IRC20:46
*** mixos has joined #openstack-barbican20:48
*** gyee has joined #openstack-barbican20:50
*** mixos has quit IRC20:50
*** mixos has joined #openstack-barbican20:54
openstackgerritFernando Diaz proposed openstack/barbican: User Metadata API and tests  https://review.openstack.org/27588520:57
*** sigmavirus24 is now known as sigmavirus24_awa20:58
*** sigmavirus24_awa is now known as sigmavirus2420:58
*** fredyx10 has quit IRC21:03
rhagartymp1, FYI - I figured out the issue. Had an obsolete file that needed to be deleted - "/etc/barbican/vassals/barbican-admin-ini". Thanks again21:04
rhagartymp1, I meant barbican-admin.ini21:05
*** fredyx10 has joined #openstack-barbican21:06
mp1rhagarty nice!21:07
*** fredyx10 has quit IRC21:07
mp1rhagarty glad I could help21:07
*** david-lyle has quit IRC21:08
*** fnaval has quit IRC21:10
*** fnaval has joined #openstack-barbican21:11
*** fnaval has quit IRC21:11
*** fnaval has joined #openstack-barbican21:12
*** mixos has quit IRC21:12
*** david-lyle has joined #openstack-barbican21:17
hockeynutjhfeng apologies if this has been addressed already, but for the barbican-manage CR was there discussion about making this part of the regular OpenStack CLI and not a separate command?21:18
redrobothockeynut no, I believe barbican-manage should be its own cli that is included with the server21:18
redrobothockeynut otherwise managing the server would require us to install the client as well21:18
hockeynutredrobot is that what the other components do?21:18
jhfenghockeynut:no ww didn't21:19
redrobothockeynut what other components?21:19
hockeynutredrobot any other openstack component (nova, cinder, swift, etc)21:19
hockeynutjust want to be sure we're not going to be a special snowflake if we don't have to be one21:19
redrobothockeynut afaik, when you install Keystone for example, you also get keystone scripts, and you are never reuquired to instally keystoneclient to be able to administer the service21:20
jhfenghockeynut: yes, there are similar commands like keystone-manage, nova-manage, glance-manage etc21:20
hockeynutok thanks jhfeng and redrobot - I am very happy now21:21
openstackgerritFernando Diaz proposed openstack/castellan: Add Credential Authentication Usage Documentation  https://review.openstack.org/27418321:21
redrobothockeynut 🍺21:21
*** fredyx10 has joined #openstack-barbican21:23
*** jmckind has quit IRC21:26
*** jmckind has joined #openstack-barbican21:28
*** alee has quit IRC21:29
*** jorge_munoz has quit IRC21:33
*** mixos has joined #openstack-barbican21:39
*** mp1 has quit IRC21:43
*** fawadkhaliq has quit IRC21:54
openstackgerritFernando Diaz proposed openstack/barbican: Introduce User-Meta table, model, and repo  https://review.openstack.org/27096321:59
openstackgerritFernando Diaz proposed openstack/barbican: User Metadata API and tests  https://review.openstack.org/27588521:59
*** pcaruana has quit IRC22:01
*** fawadkhaliq has joined #openstack-barbican22:04
*** alee has joined #openstack-barbican22:10
*** mp1 has joined #openstack-barbican22:14
*** fredyx10 has quit IRC22:17
*** jorge_munoz has joined #openstack-barbican22:18
*** dimtruck is now known as zz_dimtruck22:20
*** david-lyle has quit IRC22:29
*** mixos has quit IRC22:35
*** zz_dimtruck is now known as dimtruck22:45
*** silos has quit IRC22:54
*** edtubill has quit IRC22:54
*** diazjf has quit IRC22:55
*** david-lyle has joined #openstack-barbican23:00
openstackgerritMerged openstack/barbican: Fixing pkcs11_kek_rewrap script  https://review.openstack.org/27937123:12
*** mp1 has quit IRC23:13
*** chlong_ has joined #openstack-barbican23:13
*** madhu_ak has joined #openstack-barbican23:14
*** jmckind has quit IRC23:15
*** jorge_munoz has quit IRC23:29
*** david-lyle has quit IRC23:41
*** sostingy has joined #openstack-barbican23:41
*** dimtruck is now known as zz_dimtruck23:44
*** spotz is now known as spotz_zzz23:47
openstackgerritMax Abidi proposed openstack/barbican: Improve error code for invalid secret creation with KMIP  https://review.openstack.org/28690323:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!