Wednesday, 2016-03-09

*** rhagarty__ has quit IRC00:00
*** rhagarty__ has joined #openstack-barbican00:00
*** rhagarty__ has quit IRC00:00
*** rhagarty__ has joined #openstack-barbican00:00
*** rhagarty__ has quit IRC00:01
*** rhagarty__ has joined #openstack-barbican00:01
*** rhagarty__ has quit IRC00:01
*** rhagarty__ has joined #openstack-barbican00:01
*** rhagarty__ has quit IRC00:02
*** rhagarty_ has joined #openstack-barbican00:02
*** rhagarty_ has quit IRC00:02
*** rhagarty_ has joined #openstack-barbican00:02
*** rhagarty_ has quit IRC00:03
*** rhagarty_ has joined #openstack-barbican00:03
*** rhagarty_ has quit IRC00:03
*** rhagarty_ has joined #openstack-barbican00:03
*** rhagarty_ has quit IRC00:04
*** rhagarty_ has joined #openstack-barbican00:04
*** rhagarty_ has quit IRC00:04
*** rhagarty_ has joined #openstack-barbican00:04
*** rhagarty_ has quit IRC00:05
*** rhagarty_ has joined #openstack-barbican00:05
*** rhagarty_ has quit IRC00:05
*** rhagarty_ has joined #openstack-barbican00:05
*** rhagarty_ has quit IRC00:06
*** rhagarty_ has joined #openstack-barbican00:06
*** rhagarty_ has quit IRC00:06
*** rhagarty_ has joined #openstack-barbican00:06
*** rhagarty__ has joined #openstack-barbican00:07
*** rhagarty_ has quit IRC00:07
*** rhagarty__ has quit IRC00:07
*** rhagarty__ has joined #openstack-barbican00:07
*** rhagarty__ has quit IRC00:08
*** woodster_ has quit IRC00:09
*** woodster_ has joined #openstack-barbican00:10
*** gyee has joined #openstack-barbican00:10
*** gyee has quit IRC00:11
openstackgerritEric Brown proposed openstack/barbican: Remove use of old bandit.yaml  https://review.openstack.org/29008600:12
*** gyee has joined #openstack-barbican00:15
*** jhfeng has quit IRC00:17
*** fawadkhaliq has joined #openstack-barbican00:23
*** mp1 has joined #openstack-barbican00:24
*** mp1 has quit IRC00:24
*** fawadkhaliq has quit IRC00:35
openstackgerritMax Abidi proposed openstack/barbican: Improve error code for invalid secret creation with KMIP  https://review.openstack.org/28690300:38
*** mp1 has joined #openstack-barbican00:48
*** Kevin_Zheng has joined #openstack-barbican00:53
*** cheneydc has joined #openstack-barbican01:00
*** mp1 has quit IRC01:20
*** zz_dimtruck is now known as dimtruck01:25
*** mp1 has joined #openstack-barbican01:30
*** mp1 has quit IRC01:49
*** mp1 has joined #openstack-barbican01:56
*** pdesai has joined #openstack-barbican01:59
*** yfujioka has joined #openstack-barbican02:08
*** yfujioka has quit IRC02:09
*** mp1 has quit IRC02:12
*** mp1 has joined #openstack-barbican02:12
*** mp1 has quit IRC02:17
*** woodster_ has quit IRC02:37
*** fredyx10 has joined #openstack-barbican02:38
*** gyee has quit IRC03:02
*** fredyx10 has quit IRC03:15
*** jhfeng has joined #openstack-barbican03:29
*** dimtruck is now known as zz_dimtruck03:29
*** zz_dimtruck is now known as dimtruck03:29
*** dimtruck is now known as zz_dimtruck03:39
*** jhfeng has quit IRC03:45
*** mp1 has joined #openstack-barbican03:48
*** pdesai has quit IRC03:49
*** jamielennox is now known as jamielennox|away03:54
*** mp1 has quit IRC03:59
*** zz_dimtruck is now known as dimtruck04:33
*** dimtruck is now known as zz_dimtruck04:54
*** jmckind_ is now known as jmckind05:17
*** jmckind has quit IRC05:19
*** fawadkhaliq has joined #openstack-barbican05:47
*** Nirupama has joined #openstack-barbican06:03
*** chlong has quit IRC06:54
*** dave-mccowan has quit IRC07:02
*** rm_you has quit IRC07:02
*** chlong has joined #openstack-barbican07:08
*** fawadkhaliq has quit IRC07:28
*** eglute has quit IRC07:35
*** sigmavirus24_awa has quit IRC07:36
*** scheuran has joined #openstack-barbican08:00
*** openstackgerrit has quit IRC08:47
*** openstackgerrit has joined #openstack-barbican08:48
*** shohel has joined #openstack-barbican08:49
*** jaosorior has joined #openstack-barbican09:06
*** sidx64 has joined #openstack-barbican09:08
*** eglute has joined #openstack-barbican09:24
*** sigmavirus24_awa has joined #openstack-barbican09:25
*** shohel has quit IRC09:33
*** shohel has joined #openstack-barbican09:35
*** cheneydc has quit IRC10:00
*** sidx64_Cern has joined #openstack-barbican11:06
*** sidx64 has quit IRC11:09
*** sidx64_Cern is now known as sidx6411:11
*** chlong has quit IRC11:42
*** jaosorior has quit IRC12:02
*** jaosorior has joined #openstack-barbican12:02
*** chlong has joined #openstack-barbican12:14
*** nelsnels_ has joined #openstack-barbican12:24
*** Kevin_Zheng_ has joined #openstack-barbican12:25
*** Kevin_Zheng has quit IRC12:27
*** Kevin_Zheng_ is now known as Kevin_Zheng12:27
*** ryanpetrello has quit IRC12:27
*** chlong has quit IRC12:27
*** nelsnelson has quit IRC12:27
*** jaosorior has quit IRC12:27
*** mmotiani has quit IRC12:27
*** jaosorior has joined #openstack-barbican12:27
*** ryanpetrello has joined #openstack-barbican12:36
*** chlong has joined #openstack-barbican12:40
*** sidx64 has quit IRC12:44
*** mmotiani has joined #openstack-barbican12:46
*** jaosorior has quit IRC13:15
*** jaosorior has joined #openstack-barbican13:15
*** dave-mccowan has joined #openstack-barbican13:22
*** scheuran has quit IRC13:28
*** rellerreller has joined #openstack-barbican13:33
openstackgerritThomas Herve proposed openstack/python-barbicanclient: Display error description  https://review.openstack.org/29050613:52
*** Nirupama has quit IRC14:02
*** randallburt has joined #openstack-barbican14:14
*** nkinder has joined #openstack-barbican14:14
*** randallburt1 has joined #openstack-barbican14:15
*** nelsnelson has joined #openstack-barbican14:17
*** nelsnels_ has quit IRC14:18
*** randallburt has quit IRC14:18
openstackgerritThomas Herve proposed openstack/python-barbicanclient: Display error description  https://review.openstack.org/29050614:23
*** jmckind has joined #openstack-barbican14:32
*** nkinder has quit IRC14:36
*** fredyx10 has joined #openstack-barbican14:39
*** fredyx101 has joined #openstack-barbican14:44
*** fredyx10 has quit IRC14:47
*** zz_dimtruck is now known as dimtruck15:03
*** fredyx101 has quit IRC15:04
*** xek_ is now known as xek15:05
*** fredyx10 has joined #openstack-barbican15:08
*** fredyx10 has joined #openstack-barbican15:08
*** sigmavirus24_awa is now known as sigmavirus2415:09
*** fredyx101 has joined #openstack-barbican15:10
*** fredyx10 has quit IRC15:12
*** silos has joined #openstack-barbican15:13
*** edtubill has joined #openstack-barbican15:14
silosredrobot: ping15:14
*** jhfeng has joined #openstack-barbican15:14
*** silos has quit IRC15:14
openstackgerritElvin Tubillara proposed openstack/barbican: Fix 500 server error invalid transport key during secret creation  https://review.openstack.org/29057715:20
*** mp1 has joined #openstack-barbican15:22
*** spotz_zzz is now known as spotz15:24
*** edtubill has quit IRC15:29
*** silos has joined #openstack-barbican15:35
*** edtubill has joined #openstack-barbican15:35
*** diazjf has joined #openstack-barbican15:44
spotzhttps://etherpad.openstack.org/p/OpenStack-Bug-Smash-Mitaka-SanAntonio is the main page for San Antonio then go to the bug tracking etherpad listed15:44
*** fredyx101 has quit IRC15:45
*** jorge_munoz has joined #openstack-barbican15:49
*** jorge_munoz_ has joined #openstack-barbican15:52
*** jorge_munoz has quit IRC15:54
*** jorge_munoz_ is now known as jorge_munoz15:54
*** nkinder has joined #openstack-barbican16:03
*** nkinder has quit IRC16:10
*** fredyx10 has joined #openstack-barbican16:17
*** sidx64 has joined #openstack-barbican16:24
*** shohel has quit IRC16:29
*** edtubill has quit IRC16:30
*** edtubill has joined #openstack-barbican16:31
*** nkinder has joined #openstack-barbican16:36
*** arunkant has joined #openstack-barbican16:36
*** gyee has joined #openstack-barbican16:39
diazjfryanpetrello ping16:42
ryanpetrelloo/16:42
diazjfryanpetrello I have a pecan question for you :)16:43
ryanpetrelloI may have a pecan answer :D16:43
diazjfSo I recently implemented the Barbican Metadata API and I am running into the following bug: https://bugs.launchpad.net/barbican/+bug/155435016:44
openstackLaunchpad bug 1554350 in Barbican "404 instead of 405 when secret metadatum method not allowed" [Low,New] - Assigned to Fernando Diaz (diazjf)16:44
* ryanpetrello reads16:45
diazjfThe secret metadatum controller is hit here https://github.com/openstack/barbican/blob/master/barbican/api/controllers/secrets.py#L76-L8216:45
diazjfand follows here: https://github.com/openstack/barbican/blob/master/barbican/api/controllers/secretmeta.py#L11116:45
ryanpetrelloany idea what version of pecan you're using?16:46
diazjfpecan==1.0.416:47
ryanpetrellohrm16:48
ryanpetrelloyea, reading this code, I'd expect you to hit https://github.com/openstack/barbican/blob/master/barbican/api/controllers/secretmeta.py#L12116:48
ryanpetrelloany chance you're somehow landing in https://github.com/openstack/barbican/blob/master/barbican/api/controllers/secretmeta.py#L28 ?16:48
ryanpetrelloI also notice you're requesting16:49
ryanpetrello /v1/secrets/4b500dc9-7e14-4c9f-8dec-60116cff3cf9/metadata/description16:49
ryanpetrellonotice the description on the end16:50
ryanpetrellowhere is that handled in your controller?16:50
diazjfso description should be handelled in secret metadatun as a remainder16:50
diazjfhttps://github.com/openstack/barbican/blob/master/barbican/api/controllers/secretmeta.py#L28 is not hit, the 404 comes from /usr/local/lib/python2.7/dist-packages/pecan/routing.py(160)lookup_controller16:51
*** silos has quit IRC16:51
* ryanpetrello tinkers16:51
ryanpetrellohrm16:54
ryanpetrellothe behavior where a method consumes additional arguments16:54
ryanpetrelloI don't think that happens on the fallback16:54
ryanpetrello(the index method)16:54
*** silos has joined #openstack-barbican16:54
ryanpetrelloI think that's specific to request methods you define that expect a resource ID16:54
ryanpetrelloI'm tinkering, though16:54
*** jaosorior has quit IRC16:55
*** jhfeng has quit IRC16:58
diazjfryanpetrello, I'll tinker as well. Let me know if anything comes up :)17:01
ryanpetrelloyep17:01
ryanpetrellowill do17:01
*** fawadkhaliq has joined #openstack-barbican17:03
*** fawadkhaliq has quit IRC17:03
openstackgerritElvin Tubillara proposed openstack/barbican: Add missing unit test for clean_command and fix error handling  https://review.openstack.org/29069717:06
*** fawadkhaliq has joined #openstack-barbican17:10
ryanpetrelloso diazjf17:10
ryanpetrellounfortunately, this just isn't something that generic supports17:10
ryanpetrellothe whole "index" fallback17:10
ryanpetrellodepends on the path basically being / from that point onward17:10
ryanpetrelloif you *wanted* to handle this, you'd probably want a _lookup17:10
ryanpetrellomaybe something like17:10
ryanpetrello  1     @pecan.expose()17:10
ryanpetrello  0     def _lookup(self, next_segment, *remainder):17:10
ryanpetrello  1         pecan.abort(405)17:10
openstackgerritElvin Tubillara proposed openstack/barbican: Fix 500 server error invalid transport key during secret creation  https://review.openstack.org/29057717:11
ryanpetrelloexcuse my line numbers there :)17:11
diazjfryanpetrello lol17:11
diazjflet me give that a shot17:11
ryanpetrelloyea, try that17:11
ryanpetrellobasically, you need something to consume that extra "/description/" in case it's not caught by one of your method-specific handlers17:12
diazjfryanpetrello you the man, it works for me17:13
ryanpetrelloI'm also trying to think if there's a way for me to make pecan smart enough to do this automatically17:13
ryanpetrelloand if it makes sense to do so in all cases17:14
ryanpetrello\o/17:14
ryanpetrelloawesome17:14
diazjfryanpetrello thanks dude :)17:15
*** jhfeng has joined #openstack-barbican17:20
diazjfryanpetrello, also getting 405 on regular calls adding the lookup method17:28
*** dimtruck is now known as zz_dimtruck17:30
*** zz_dimtruck is now known as dimtruck17:30
ryanpetrelloyea :/17:45
ryanpetrelloyou may need to make the code in that _lookup a bit more specific17:45
*** notmyname has quit IRC17:45
*** notmyname has joined #openstack-barbican17:46
diazjfryanpetrello, how can I tell pecan to route to on_get on a get in _lookup17:50
ryanpetrellohrm17:51
ryanpetrellogoing to be pretty hairy :/17:51
ryanpetrelloif /description/ always going to be on the ned of this path?17:51
*** nkinder has quit IRC17:51
ryanpetrelloif so, you might consider just making it a subcontrollers17:51
ryanpetrelloe.g.,17:51
ryanpetrellodescription = SomeOtherController()17:51
ryanpetrellowould make things a lot easier for you, imo17:52
diazjfryanpetrello description is an example, the routes can really be anything made up by the user.17:53
*** mp1 has quit IRC17:55
*** diazjf has quit IRC17:55
*** silos has quit IRC17:56
*** diazjf has joined #openstack-barbican17:59
diazjfryanpetrello, so the only other thing I'm thinking is writing @index.when(method=_all_the_other_ones) but that seems kinda ghetto18:00
ryanpetrelloyea :/18:00
ryanpetrellothat's one approach18:00
*** mp1 has joined #openstack-barbican18:07
*** jaosorior has joined #openstack-barbican18:21
*** silos has joined #openstack-barbican18:22
silosrellerreller, kfarr: ping18:24
*** nkinder has joined #openstack-barbican18:24
*** mp1 has quit IRC18:27
rellerrellersilos what's up?18:30
silosrellerreller: hey. Would you have some time tomorrow for a google hangout to go over the kmip key manager in castellan? I'd like to have kfarr there as well but I just noticed she's offline.18:31
*** mp1 has joined #openstack-barbican18:31
rellerrellersilos that's cool with me18:32
mp1ping dave-mccowan18:34
rellerrellersilos I am open all day tomorrow.18:34
dave-mccowanmp1 pong18:34
mp1dave-mccowan have you see this bug? https://bugs.launchpad.net/barbican/+bug/153540418:35
openstackLaunchpad bug 1535404 in Barbican "secret quota not limiting for request coming in via order" [Undecided,Confirmed] - Assigned to Michael (mperng)18:35
silosrellerreller: awesome. how does 11am your time sound?18:35
mp1dave-mccowan what should be the expected behavior when secret_quota == order_quota and secret_quota is full before order_quota is full?18:35
rellerrellersilos that's funny. I just scheduled a meeting with kfarr for that time and wanted to propose that to you.18:36
silosrellerreller: great minds :). sounds good18:36
mp1dave-mccowan for example if secret_quota = 10, order_quota = 10, should I be able to end up with 20 secrets created?18:36
dave-mccowanmp1 got it.  looks like you could call quota enforcer for both orders and quotas, when a secret order is received.18:38
dave-mccowanresponse would be 40X, i forget which one, but the code should do the right thing. :-)18:39
krotscheckI've addressed another round of comments on this mitaka bugfix - any cores around to confirm that I'm not crazy? https://review.openstack.org/#/c/287523/18:39
dave-mccowanfor both orders and secrets, when a secret order is recevied.18:39
openstackgerritFernando Diaz proposed openstack/barbican: Throw 405 when specified method not allowed in Secret Metadatum  https://review.openstack.org/29076518:43
mp1dave-mccowan ok, sounds good. I guess in the future we should go for a reservation system for quota enforcement (per our discussion here at the bug smash)?18:52
redrobotdiazjf https://github.com/openstack-infra/project-config/blob/master/jenkins/jobs/barbican.yaml#L13618:54
openstackgerritFernando Diaz proposed openstack/barbican: Throw 405 when specified method not allowed in Secret Metadatum  https://review.openstack.org/29076518:58
*** sidx64 has quit IRC18:59
openstackgerritFernando Diaz proposed openstack/barbican: Throw 405 when specified method not allowed in Secret Metadatum  https://review.openstack.org/29076518:59
openstackgerritFernando Diaz proposed openstack/barbican: Throw 405 when specified method not allowed in Secret Metadatum  https://review.openstack.org/29076518:59
diazjfedtubill https://wiki.openstack.org/wiki/Barbican/Blueprints/dogtag-plugin19:16
*** mp1 has quit IRC19:34
openstackgerritElvin Tubillara proposed openstack/barbican: Fix 500 server error invalid transport key during secret creation  https://review.openstack.org/29057719:35
*** woodster_ has joined #openstack-barbican19:47
*** sigmavirus24 is now known as sigmavirus24_awa19:48
*** edtubill has quit IRC19:48
*** edtubill has joined #openstack-barbican19:50
*** mp1 has joined #openstack-barbican19:53
*** randallburt1 is now known as randallburt20:00
*** rhagarty has joined #openstack-barbican20:01
*** jaosorior has quit IRC20:02
*** jaosorior has joined #openstack-barbican20:03
*** gyee has quit IRC20:08
*** nkinder has quit IRC20:11
*** diazjf has quit IRC20:44
openstackgerritElvin Tubillara proposed openstack/barbican: Fix 500 server error invalid transport key during secret creation  https://review.openstack.org/29057720:47
*** edtubill has quit IRC20:49
*** mp1 has quit IRC20:53
*** silos has quit IRC20:55
*** sigmavirus24_awa is now known as sigmavirus2420:58
*** rellerreller has quit IRC21:00
woodster_dave-mccowan: Can you take a look at this CR?: https://review.openstack.org/#/c/29008621:04
dave-mccowanhi woodster_ sure. looking.21:04
dave-mccowanwoodster_ yep, it looks good.  eric beat me to it, i've been meaning to make that change since they changed the way bandit is used.21:08
dave-mccowanwoodster_ a side affect, btw, is that bandit will not be a voting job, part of pep8.21:08
dave-mccowan*bandit will be a voting21:08
dave-mccowanwoodster_ the coverage gate failed in a weird way ("cannot import name certificate_manger")  is that an ongoing thing?21:12
woodster_I think that's because the upstream barbican.conf has a misnamed cert event plugin21:12
redrobotdave-mccowan I think bandit is already part of pep821:14
woodster_dave-mccowan:  it doesn't appear to break anything, but does show in the logs (yeah, should fix that)21:14
dave-mccowanhi redrobot How's everything going?  Sorry I haven't been around much this cycle.  I'm missing it.21:18
redrobothi dave-mccowan !  no worries... I think a lot of folks have been busy with other things21:20
dave-mccowanany good barbican sessions coming up at summit?21:22
redrobotdave-mccowan a little slim on design sessions this summit https://etherpad.openstack.org/p/newton-barbican-design-sessions21:28
redrobotdave-mccowan feel free to add topics21:28
redrobotdave-mccowan my talk didn't get selected... curious to see if anyone else will be talking about barbican/castellan21:28
openstackgerritJohn Wood proposed openstack/barbican: Correct cert event plugin name in config  https://review.openstack.org/29086721:32
woodster_dave-mccowan: ^^^^ that should get rid of that pesky error in all our gate logs21:32
dave-mccowanwoodster_ cool!  i'm glad i could inspire a patch. :-)21:33
rm_workredrobot: maybe you can talk about barbican in the LBaaS sessions? we have a lot O_o21:35
rm_worksince I talked about lbaas in a few barbican sessions :P21:35
woodster_dave-mccowan:  well I felt the need to put *something* up on bug fix day21:38
*** gyee has joined #openstack-barbican21:51
*** pdesai has joined #openstack-barbican22:04
*** dimtruck is now known as zz_dimtruck22:07
*** pdesai has quit IRC22:17
*** david-lyle has quit IRC22:19
*** dave-mccowan has quit IRC22:20
*** david-lyle has joined #openstack-barbican22:20
*** randallburt has quit IRC22:22
*** jorge_munoz has left #openstack-barbican22:24
*** jmckind has quit IRC22:24
*** dave-mccowan has joined #openstack-barbican22:34
*** fredyx10 has quit IRC22:36
*** zz_dimtruck is now known as dimtruck22:38
openstackgerritDouglas Mendizábal proposed openstack/barbican: Return 404 Not Found when UUID is invalid  https://review.openstack.org/29089122:42
*** randallburt has joined #openstack-barbican23:01

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!