| vipul- | deployed barbican in devstack, barbican secret list immediately returns a forbidden | 00:11 |
|---|---|---|
| vipul- | is there a specific user / role that needs to be created for a out-of-the-box devstack instllation to work? | 00:11 |
| *** dimtruck is now known as zz_dimtruck | 00:14 | |
| *** zz_dimtruck is now known as dimtruck | 00:35 | |
| *** gyee has quit IRC | 00:36 | |
| *** elo1 has joined #openstack-barbican | 00:45 | |
| *** dimtruck is now known as zz_dimtruck | 00:52 | |
| *** zz_dimtruck is now known as dimtruck | 00:52 | |
| *** mixos has joined #openstack-barbican | 01:00 | |
| *** dimtruck is now known as zz_dimtruck | 01:02 | |
| *** elo1 has quit IRC | 01:08 | |
| *** ozialien10 has quit IRC | 01:14 | |
| *** shakamunyi has joined #openstack-barbican | 01:23 | |
| woodster_ | vipul-: I think 'admin' should work | 01:25 |
| *** mixos has quit IRC | 01:36 | |
| *** zz_dimtruck is now known as dimtruck | 01:42 | |
| *** diazjf has joined #openstack-barbican | 01:50 | |
| *** spotz_zzz is now known as spotz | 02:17 | |
| *** g0tr00t has joined #openstack-barbican | 02:28 | |
| *** nelsnelson has quit IRC | 02:50 | |
| *** mixos has joined #openstack-barbican | 02:50 | |
| *** randallburt has joined #openstack-barbican | 03:01 | |
| *** randallburt1 has joined #openstack-barbican | 03:03 | |
| *** randallburt has quit IRC | 03:05 | |
| *** dimtruck is now known as zz_dimtruck | 03:29 | |
| *** g0tr00t has quit IRC | 03:51 | |
| *** randallburt1 has quit IRC | 04:04 | |
| *** randallburt has joined #openstack-barbican | 04:10 | |
| *** diazjf1 has joined #openstack-barbican | 04:10 | |
| *** diazjf has quit IRC | 04:13 | |
| *** pcaruana has joined #openstack-barbican | 04:25 | |
| *** pcaruana has quit IRC | 04:32 | |
| *** diazjf1 has quit IRC | 05:09 | |
| *** woodster_ has quit IRC | 05:18 | |
| *** randallburt has quit IRC | 05:18 | |
| *** mixos has quit IRC | 05:54 | |
| *** andreas_s has joined #openstack-barbican | 06:06 | |
| *** pcaruana has joined #openstack-barbican | 06:12 | |
| *** shohel has joined #openstack-barbican | 06:26 | |
| *** nelsnelson has joined #openstack-barbican | 06:48 | |
| openstackgerrit | Thomas Goirand proposed openstack/barbican: Fix keystone_listener.py https://review.openstack.org/315373 | 06:50 |
| *** nelsnelson has quit IRC | 06:52 | |
| *** jorge_munoz has quit IRC | 06:53 | |
| *** jorge_munoz has joined #openstack-barbican | 07:01 | |
| *** jaosorior has joined #openstack-barbican | 07:03 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Return 4xx error for invalid KMIP key spec. https://review.openstack.org/305446 | 08:06 |
| *** jamielennox is now known as jamielennox|away | 08:10 | |
| *** spotz is now known as spotz_zzz | 08:26 | |
| *** pcaruana is now known as pcaruana|afk| | 09:01 | |
| *** openstackgerrit has quit IRC | 09:04 | |
| *** openstackgerrit has joined #openstack-barbican | 09:04 | |
| *** jaosorior has quit IRC | 11:28 | |
| *** jaosorior has joined #openstack-barbican | 11:29 | |
| *** shohel has quit IRC | 12:02 | |
| *** pauloewerton has joined #openstack-barbican | 12:17 | |
| *** alee has quit IRC | 12:24 | |
| *** zz_dimtruck is now known as dimtruck | 12:33 | |
| *** elo1 has joined #openstack-barbican | 12:42 | |
| *** pcaruana|afk| is now known as pcaruana | 13:01 | |
| *** elo11 has joined #openstack-barbican | 13:15 | |
| *** elo1 has quit IRC | 13:17 | |
| *** elo1 has joined #openstack-barbican | 13:25 | |
| *** elo11 has quit IRC | 13:26 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 13:28 | |
| *** elo1 has quit IRC | 13:29 | |
| *** alee has joined #openstack-barbican | 13:31 | |
| *** elo1 has joined #openstack-barbican | 13:31 | |
| *** dimtruck is now known as zz_dimtruck | 13:34 | |
| *** zz_dimtruck is now known as dimtruck | 13:34 | |
| *** dimtruck is now known as zz_dimtruck | 13:44 | |
| *** zz_dimtruck is now known as dimtruck | 14:08 | |
| andreas_s | Hi guys, can anybody tell me how I can access the barbican api (devstack setup) without getting: Forbidden: Secret(s) retrieval attempt not allowed - please review your user/project privileges | 14:19 |
| *** spotz_zzz is now known as spotz | 14:21 | |
| andreas_s | barbican-server says: PolicyNotAuthorized: secrets:get on {u'limit': u'10', u'offset': u'0'} by {'project': u'122cbe9aa73149ad9bebf7285f218988', 'user': u'1e9eb6ea4bcc47bf8d59f813253f2741', 'roles': []} disallowed by policy | 14:22 |
| *** stupidnic has quit IRC | 14:25 | |
| *** stupidnic has joined #openstack-barbican | 14:25 | |
| *** spotz is now known as spotz_zzz | 14:26 | |
| *** elo11 has joined #openstack-barbican | 14:36 | |
| *** elo1 has quit IRC | 14:37 | |
| *** jhfeng has joined #openstack-barbican | 14:47 | |
| *** diazjf has joined #openstack-barbican | 14:50 | |
| *** tkelsey has joined #openstack-barbican | 14:50 | |
| *** agrebennikov has joined #openstack-barbican | 15:07 | |
| *** mixos has joined #openstack-barbican | 15:09 | |
| *** agrebennikov has quit IRC | 15:11 | |
| *** mixos has quit IRC | 15:14 | |
| *** edtubill has joined #openstack-barbican | 15:14 | |
| *** shakamunyi has quit IRC | 15:19 | |
| *** fredyx10 has joined #openstack-barbican | 15:20 | |
| *** catintheroof has joined #openstack-barbican | 15:26 | |
| *** catintheroof has quit IRC | 15:27 | |
| *** catintheroof has joined #openstack-barbican | 15:29 | |
| *** andreas_s has quit IRC | 15:46 | |
| *** randallburt has joined #openstack-barbican | 16:00 | |
| *** randallburt1 has joined #openstack-barbican | 16:01 | |
| *** randallburt has quit IRC | 16:04 | |
| *** jaosorior has quit IRC | 16:06 | |
| *** elo11 has quit IRC | 16:07 | |
| *** upama has joined #openstack-barbican | 16:15 | |
| upama | Hi, I tried to install barbican following https://github.com/cloudkeep/barbican/wiki/Barbican-Quick-Start-Guide#install-insecure-barbican | 16:16 |
| upama | But failed with error http://paste.openstack.org/show/496939/ | 16:17 |
| upama | bin/barbican.sh install is supposed to install pyenv? | 16:18 |
| upama | Could you please help me with it? | 16:18 |
| rm_work | no, you need to install pyenv ahead of time if you want to use it -- also I think that script is deprecated | 16:18 |
| upama | Thanks rm_work for your response. Could you please share the doc link? | 16:19 |
| upama | I have tried following this link also http://docs.openstack.org/developer/barbican/setup/dev.html | 16:19 |
| upama | But no luck | 16:19 |
| openstackgerrit | Randall Burt proposed openstack/barbican: Use oslo config generator https://review.openstack.org/313151 | 16:23 |
| *** lixiaoy1 has quit IRC | 16:24 | |
| *** lixiaoy1 has joined #openstack-barbican | 16:24 | |
| *** spotz_zzz is now known as spotz | 16:26 | |
| rm_work | I use my own scripts to set up Barbican | 16:27 |
| rm_work | https://github.com/rm-you/devstack_deploy | 16:27 |
| rm_work | but with Devstack :( | 16:27 |
| upama | i cant use devstack.. low on resources | 16:28 |
| upama | :( | 16:28 |
| rm_work | but, when I WAS using barbican standalone, I installed pyenv, made a virtualenv with it, activated it (pyenv shell myvenv), and then ran "python setup.py install" in the barbican directory | 16:28 |
| rm_work | and IIRC that worked | 16:28 |
| redrobot | hi upama what part of this guide http://docs.openstack.org/developer/barbican/setup/dev.html didn't work for you? | 16:31 |
| upama | redrobot: it failed to start | 16:32 |
| redrobot | upama what was the error? | 16:32 |
| redrobot | upama that guide is the most up-to-date | 16:32 |
| redrobot | upama if something doesn't work, I want to update it on the guide. | 16:32 |
| upama | redrobot: http://paste.openstack.org/show/496939/ | 16:32 |
| redrobot | upama that's barbican.sh, which is deprecated | 16:33 |
| redrobot | upama the gude at docs.openstack.org uses barbican-api | 16:33 |
| redrobot | upama see http://docs.openstack.org/developer/barbican/setup/dev.html#running-barbican | 16:33 |
| upama | redrobot: I have folllowed that guide also | 16:34 |
| upama | And got this error http://paste.openstack.org/show/496943/ | 16:34 |
| upama | I have installed all the dependencies | 16:35 |
| redrobot | upama looks like you may have missed a step, or your virtualenv was not active when you tried to run barbican | 16:35 |
| *** agrebennikov has joined #openstack-barbican | 16:35 | |
| upama | It is activated | 16:35 |
| redrobot | upama and you ran "pip install -e $PWD" in the barbican directory? | 16:35 |
| upama | Yes redrobot :( | 16:36 |
| redrobot | upama what does "pip list" show in the venv that gives you the paste error? | 16:36 |
| upama | http://paste.openstack.org/show/496945/ | 16:38 |
| upama | redrobot: ^^ | 16:38 |
| redrobot | upama definitely looks like you didn't run "pip install -e $PWD" | 16:38 |
| redrobot | upama pip list should show all barbican deps, but your venv looks empty | 16:38 |
| upama | Ok. It is giving me permission denied error | 16:39 |
| upama | So I ran with sudo | 16:39 |
| upama | Is it the issue? | 16:39 |
| redrobot | upama yeah, when you run "sudo pip" it installs everything into your system python, which is not part of the venv | 16:39 |
| redrobot | upama and when you activate the venv the global libs are unavailable | 16:40 |
| redrobot | upama in a terminal with the venv activated, run "pip install -e $PWD" again... the current directory should be the root of the barbican git repo | 16:40 |
| upama | redrobot: http://paste.openstack.org/show/496946/ | 16:40 |
| upama | Yes my PWD is barbican | 16:40 |
| redrobot | upama that is strange... why don't you have permissions to write to your own home dir? | 16:41 |
| redrobot | upama you can try to run using your global python, since you've already installed everything there | 16:41 |
| redrobot | upama just deactivate the venv, then run "pip list" to make sure that it shows barbican and all its deps | 16:41 |
| upama | Ok I will give it a try. Thanks redrobot | 16:42 |
| *** arunkant_ has joined #openstack-barbican | 16:45 | |
| *** gyee has joined #openstack-barbican | 16:47 | |
| *** woodster_ has joined #openstack-barbican | 16:52 | |
| upama | redrobot: thanks it worked.. :) | 16:57 |
| redrobot | upama awesome! glad we were able to get you going | 16:58 |
| upama | redrobot: do we have UI for barbican ? | 16:58 |
| redrobot | upama no, I don't think anyone has contributed any barbican specific code to horizon. | 16:59 |
| redrobot | upama it's definitely something we need, but not a priority for any contributors so far. | 16:59 |
| upama | i m interested in it.. | 16:59 |
| *** lixiaoy1_ has joined #openstack-barbican | 17:01 | |
| *** diazjf has quit IRC | 17:01 | |
| *** lixiaoy1 has quit IRC | 17:02 | |
| redrobot | upama awesome! I think the first step may be to write a spec for the horizon project | 17:02 |
| upama | redrobot: Yes i'll do that soon | 17:07 |
| redrobot | upama cool, let me know when you get the first draft and I can review it for you | 17:07 |
| upama | Yaa sure :) | 17:08 |
| openstackgerrit | Merged openstack/barbican: Fix keystone_listener.py https://review.openstack.org/315373 | 17:08 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/313711 | 17:18 |
| *** gyee has quit IRC | 17:35 | |
| *** elo1 has joined #openstack-barbican | 17:48 | |
| *** pcaruana has quit IRC | 17:58 | |
| *** dave-mccowan has quit IRC | 18:05 | |
| *** diazjf has joined #openstack-barbican | 18:06 | |
| *** openstackgerrit has quit IRC | 18:18 | |
| *** openstackgerrit has joined #openstack-barbican | 18:18 | |
| openstackgerrit | Randall Burt proposed openstack/barbican: Use oslo config generator https://review.openstack.org/313151 | 18:40 |
| openstackgerrit | Paulo Ewerton Gomes Fragoso proposed openstack/barbican: Use keystone auth plugin https://review.openstack.org/314256 | 18:56 |
| *** upama has quit IRC | 19:05 | |
| *** kfarr has joined #openstack-barbican | 19:09 | |
| vipul- | what's a user in devstack that i can use to store and list secrets? | 19:10 |
| vipul- | OS_PROJECT_NAME=project_a | 19:10 |
| vipul- | OS_PASSWORD=barbican | 19:10 |
| vipul- | OS_USERNAME=project_a_creator | 19:10 |
| vipul- | OS_TENANT_NAME=project_a | 19:10 |
| vipul- | i've used ^ and get a 403 saying "secret creation attempt not allowed" | 19:11 |
| openstackgerrit | Merged openstack/barbican: Updated from global requirements https://review.openstack.org/313711 | 19:18 |
| *** fredyx10 has quit IRC | 19:28 | |
| *** tkelsey has quit IRC | 19:31 | |
| *** elo11 has joined #openstack-barbican | 19:31 | |
| *** elo1 has quit IRC | 19:31 | |
| *** elo11 has quit IRC | 19:34 | |
| *** pauloewerton has quit IRC | 19:55 | |
| *** alee has quit IRC | 19:58 | |
| *** fredyx10 has joined #openstack-barbican | 20:04 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/315756 | 20:17 |
| openstackgerrit | Merged openstack/barbican: Return 4xx error for invalid KMIP key spec. https://review.openstack.org/305446 | 20:23 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/315756 | 20:25 |
| *** elo1 has joined #openstack-barbican | 20:32 | |
| *** alee has joined #openstack-barbican | 20:41 | |
| *** diazjf has quit IRC | 20:43 | |
| *** gyee has joined #openstack-barbican | 20:44 | |
| *** elo11 has joined #openstack-barbican | 21:00 | |
| *** elo1 has quit IRC | 21:02 | |
| *** diazjf has joined #openstack-barbican | 21:07 | |
| vipul- | ok i suppose i need to rip apart the policy.json file | 21:09 |
| *** xek has quit IRC | 21:11 | |
| *** xek has joined #openstack-barbican | 21:12 | |
| *** mixos has joined #openstack-barbican | 21:18 | |
| *** diazjf has left #openstack-barbican | 21:18 | |
| *** fredyx10 has quit IRC | 21:34 | |
| *** randallburt1 has quit IRC | 21:35 | |
| *** elo11 has quit IRC | 21:53 | |
| *** elo1 has joined #openstack-barbican | 22:00 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 22:00 | |
| *** edtubill has quit IRC | 22:09 | |
| *** tkelsey has joined #openstack-barbican | 22:12 | |
| *** diazjf has joined #openstack-barbican | 22:12 | |
| *** diazjf has quit IRC | 22:12 | |
| *** dimtruck is now known as zz_dimtruck | 22:12 | |
| *** mixos has quit IRC | 22:13 | |
| *** tkelsey has quit IRC | 22:16 | |
| *** elo11 has joined #openstack-barbican | 22:17 | |
| *** elo1 has quit IRC | 22:19 | |
| *** elo1 has joined #openstack-barbican | 22:24 | |
| *** jamielennox|away is now known as jamielennox | 22:24 | |
| *** elo11 has quit IRC | 22:26 | |
| *** elo11 has joined #openstack-barbican | 22:27 | |
| *** edtubill has joined #openstack-barbican | 22:27 | |
| *** spotz is now known as spotz_zzz | 22:28 | |
| *** elo1 has quit IRC | 22:28 | |
| *** dave-mccowan has joined #openstack-barbican | 22:34 | |
| *** dave-mcc_ has joined #openstack-barbican | 22:36 | |
| *** dave-mccowan has quit IRC | 22:40 | |
| *** kfarr has quit IRC | 22:41 | |
| *** elo11 has quit IRC | 22:53 | |
| *** dave-mcc_ has quit IRC | 23:06 | |
| *** jhfeng has quit IRC | 23:09 | |
| *** chlong has quit IRC | 23:35 | |
| *** arunkant_ has quit IRC | 23:48 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!