*** mixos has joined #openstack-barbican | 00:03 | |
*** edtubill has joined #openstack-barbican | 00:08 | |
*** jamielennox|away is now known as jamielennox | 00:37 | |
*** agrebennikov has quit IRC | 00:45 | |
*** dimtruck is now known as zz_dimtruck | 00:52 | |
*** gyee has quit IRC | 00:52 | |
*** fredyx10 has joined #openstack-barbican | 01:07 | |
*** fredyx10 has quit IRC | 01:14 | |
*** fredyx10 has joined #openstack-barbican | 01:15 | |
*** fredyx10 has quit IRC | 01:17 | |
*** edtubill has quit IRC | 01:29 | |
*** edtubill has joined #openstack-barbican | 01:52 | |
*** edtubill has quit IRC | 01:52 | |
*** zz_dimtruck is now known as dimtruck | 01:53 | |
*** jamielennox is now known as jamielennox|away | 01:59 | |
*** fredyx10 has joined #openstack-barbican | 02:13 | |
*** fredyx10 has quit IRC | 02:34 | |
*** elo1 has joined #openstack-barbican | 02:37 | |
*** elo11 has joined #openstack-barbican | 02:40 | |
*** elo1 has quit IRC | 02:43 | |
*** fawadkhaliq has joined #openstack-barbican | 02:46 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/316930 | 02:55 |
---|---|---|
*** woodster_ has quit IRC | 02:58 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-barbicanclient: Updated from global requirements https://review.openstack.org/303151 | 03:02 |
*** elo11 has quit IRC | 03:06 | |
*** elo1 has joined #openstack-barbican | 03:06 | |
*** fawadkhaliq has quit IRC | 03:09 | |
*** dimtruck is now known as zz_dimtruck | 03:38 | |
*** jamielennox|away is now known as jamielennox | 03:55 | |
*** fawadkhaliq has joined #openstack-barbican | 03:56 | |
openstackgerrit | venkatamahesh proposed openstack/python-barbicanclient: Update the home-page with developer documentation link https://review.openstack.org/317229 | 04:17 |
*** elo1 has quit IRC | 04:27 | |
*** elo1 has joined #openstack-barbican | 04:27 | |
*** elo11 has joined #openstack-barbican | 04:30 | |
*** elo1 has quit IRC | 04:32 | |
*** elo1 has joined #openstack-barbican | 04:34 | |
*** elo11 has quit IRC | 04:36 | |
*** dave-mccowan has quit IRC | 04:37 | |
*** elo11 has joined #openstack-barbican | 04:41 | |
*** elo1 has quit IRC | 04:41 | |
*** elo11 has quit IRC | 04:47 | |
*** elo1 has joined #openstack-barbican | 04:47 | |
*** elo11 has joined #openstack-barbican | 04:57 | |
*** elo1 has quit IRC | 04:57 | |
*** elo1 has joined #openstack-barbican | 05:04 | |
*** elo11 has quit IRC | 05:06 | |
*** elo1 has quit IRC | 05:16 | |
*** elo1 has joined #openstack-barbican | 05:16 | |
*** elo11 has joined #openstack-barbican | 05:26 | |
*** elo1 has quit IRC | 05:27 | |
*** elo1 has joined #openstack-barbican | 05:40 | |
*** elo11 has quit IRC | 05:42 | |
*** jaosorior has joined #openstack-barbican | 05:43 | |
*** andreas_s has joined #openstack-barbican | 06:40 | |
*** jamielennox is now known as jamielennox|away | 06:41 | |
*** jaosorior has quit IRC | 06:56 | |
*** jaosorior has joined #openstack-barbican | 06:57 | |
*** mixos has quit IRC | 06:59 | |
*** elo11 has joined #openstack-barbican | 07:04 | |
*** elo12 has joined #openstack-barbican | 07:06 | |
*** elo1 has quit IRC | 07:06 | |
*** ozialien10 has quit IRC | 07:07 | |
*** elo11 has quit IRC | 07:08 | |
*** elo1 has joined #openstack-barbican | 07:10 | |
*** elo12 has quit IRC | 07:11 | |
*** elo11 has joined #openstack-barbican | 07:14 | |
*** elo1 has quit IRC | 07:16 | |
*** elo1 has joined #openstack-barbican | 07:17 | |
*** elo11 has quit IRC | 07:19 | |
*** fawadkhaliq has quit IRC | 07:22 | |
*** fawadkhaliq has joined #openstack-barbican | 07:23 | |
*** elo11 has joined #openstack-barbican | 07:25 | |
*** elo1 has quit IRC | 07:26 | |
*** elo1 has joined #openstack-barbican | 07:29 | |
*** elo11 has quit IRC | 07:32 | |
*** elo11 has joined #openstack-barbican | 07:34 | |
*** elo1 has quit IRC | 07:35 | |
*** elo1 has joined #openstack-barbican | 07:41 | |
*** elo11 has quit IRC | 07:43 | |
*** elo11 has joined #openstack-barbican | 07:50 | |
*** ozialien10 has joined #openstack-barbican | 07:52 | |
*** elo1 has quit IRC | 07:52 | |
*** elo1 has joined #openstack-barbican | 07:55 | |
*** elo11 has quit IRC | 07:56 | |
*** ozialien10 has quit IRC | 07:57 | |
*** ozialien10 has joined #openstack-barbican | 07:58 | |
*** fawadkhaliq has quit IRC | 08:41 | |
*** fawadkhaliq has joined #openstack-barbican | 08:42 | |
*** elo11 has joined #openstack-barbican | 09:14 | |
*** elo1 has quit IRC | 09:16 | |
*** elo1 has joined #openstack-barbican | 09:25 | |
*** elo11 has quit IRC | 09:26 | |
*** elo11 has joined #openstack-barbican | 09:27 | |
*** elo1 has quit IRC | 09:29 | |
*** elo1 has joined #openstack-barbican | 09:34 | |
*** dave-mccowan has joined #openstack-barbican | 09:35 | |
*** elo11 has quit IRC | 09:36 | |
*** elo11 has joined #openstack-barbican | 09:44 | |
*** elo12 has joined #openstack-barbican | 09:47 | |
*** elo1 has quit IRC | 09:47 | |
*** elo11 has quit IRC | 09:49 | |
*** elo1 has joined #openstack-barbican | 09:56 | |
*** elo12 has quit IRC | 09:58 | |
*** elo11 has joined #openstack-barbican | 10:00 | |
*** elo1 has quit IRC | 10:02 | |
*** elo1 has joined #openstack-barbican | 10:04 | |
*** elo1 has quit IRC | 10:05 | |
*** elo11 has quit IRC | 10:06 | |
*** shohel has joined #openstack-barbican | 10:36 | |
*** jamielennox|away is now known as jamielennox | 10:53 | |
*** fawadkhaliq has quit IRC | 10:59 | |
*** fawadkhaliq has joined #openstack-barbican | 11:30 | |
*** fawadkhaliq has quit IRC | 11:30 | |
*** dave-mccowan has quit IRC | 11:47 | |
*** dave-mccowan has joined #openstack-barbican | 12:13 | |
*** alee has quit IRC | 12:14 | |
*** randallburt has joined #openstack-barbican | 12:19 | |
*** pauloewerton has joined #openstack-barbican | 13:05 | |
*** agrebennikov has joined #openstack-barbican | 13:32 | |
*** openstackgerrit has quit IRC | 13:32 | |
*** openstackgerrit has joined #openstack-barbican | 13:33 | |
*** alee has joined #openstack-barbican | 13:34 | |
*** alee has quit IRC | 13:38 | |
*** alee has joined #openstack-barbican | 13:39 | |
*** jmckind has joined #openstack-barbican | 13:43 | |
*** zz_dimtruck is now known as dimtruck | 13:44 | |
*** panatl has quit IRC | 13:44 | |
*** panatl has joined #openstack-barbican | 13:45 | |
*** jaosorior has quit IRC | 13:52 | |
*** dimtruck is now known as zz_dimtruck | 13:53 | |
*** sigmavirus24_awa is now known as sigmavirus24 | 13:54 | |
*** fredyx10 has joined #openstack-barbican | 13:55 | |
*** zz_dimtruck is now known as dimtruck | 13:57 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/316930 | 14:02 |
*** elo1 has joined #openstack-barbican | 14:04 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-barbicanclient: Updated from global requirements https://review.openstack.org/303151 | 14:09 |
*** kfarr has joined #openstack-barbican | 14:14 | |
*** spotz_zzz is now known as spotz | 14:21 | |
*** edtubill has joined #openstack-barbican | 14:25 | |
*** elo1 has quit IRC | 14:44 | |
*** elo1 has joined #openstack-barbican | 14:44 | |
*** elo1 has quit IRC | 14:45 | |
*** shohel has quit IRC | 14:54 | |
alee | redrobot, ping | 15:01 |
redrobot | alee pong | 15:01 |
alee | redrobot, do we have tempest tests that test things like volume encryption and swift at-rest encryption? | 15:01 |
kfarr | alee | 15:02 |
redrobot | alee I doubt it... kfarr may know for sure though | 15:02 |
alee | redrobot, or any barbican tempest tests at all> | 15:02 |
alee | ? | 15:02 |
alee | kfarr, :) | 15:02 |
kfarr | There's a tempest test for volume encryption, not sure about swift | 15:02 |
alee | kfarr, where is the volume encryption one? | 15:02 |
redrobot | alee no back in the day Tempest was moving away from a centralized test repo to a lib provider. We do use tempest-lib in our functional tests, but they live in our code tree | 15:02 |
kfarr | alee hmm, do you want me to point you to the source code? | 15:02 |
*** mixos has joined #openstack-barbican | 15:03 | |
alee | kfarr, yes please | 15:03 |
kfarr | alee https://github.com/openstack/tempest/blob/master/tempest/scenario/test_encrypted_cinder_volumes.py | 15:03 |
kfarr | alee, but it doesn't use barbican | 15:03 |
alee | redrobot, so our functional tests are basically our tempest tests? | 15:03 |
alee | kfarr, so it uses castellan? | 15:04 |
alee | and a local keystore? | 15:04 |
kfarr | alee, it uses a key manager called ConfKeyManager, which reads the key out of a configuration file | 15:04 |
kfarr | alee, ideally there would be a tempest test that used barbican instead | 15:05 |
alee | kfarr, yes -- I'm looking into writing such a test | 15:05 |
kfarr | alee, nice! | 15:06 |
alee | kfarr, redrobot - and running it on the rdo packages | 15:06 |
alee | kfarr, redrobot the puppet modules for barbican are in pretty good shape right now -- although they pretty much have only been tested/written for centos /rhel | 15:07 |
alee | they'll run barbican with keystone as an apache module or within gunicorn | 15:07 |
kfarr | alee, the test above is meant to be run against an already running devstack | 15:08 |
alee | kfarr, ok | 15:08 |
alee | redrobot, kfarr - who would know about the swift case? | 15:08 |
kfarr | so if the devstack / deployment you have is set up to use barbican as the key manager, the test would be testing volume encryption with barbican | 15:08 |
kfarr | alee, not sure | 15:08 |
redrobot | alee afaik, Swift encryption is still a WIP | 15:09 |
alee | kfarr, has all the integration with castellan been completed for volume encryption? | 15:09 |
kfarr | alee, still waiting on cinder https://review.openstack.org/#/c/247577/ | 15:09 |
kfarr | but the existing key manager can talk to barbican | 15:10 |
*** elo1 has joined #openstack-barbican | 15:10 | |
alee | kfarr, ok - so for now, still just integration with a key manager directly | 15:10 |
kfarr | alee yes | 15:10 |
alee | redrobot, did you get a chance to set up those docs? | 15:11 |
alee | redrobot, sorry missed meeting yesterday - was out on pto .. | 15:11 |
redrobot | alee not yet... was mainly putting out fires last week... should be working on it today and tomorrow though | 15:11 |
alee | redrobot, ok - please let me know once you have it | 15:12 |
*** diazjf has joined #openstack-barbican | 15:14 | |
diazjf | kfarr, just saw your message. I'll look into it tonight :) | 15:15 |
alee | redrobot, does it make sense for us to host a tempest test in the barbican repo that does volume encryption? | 15:19 |
alee | kfarr, redrobot using tempest-lib? | 15:19 |
alee | or in the main tempest github? | 15:19 |
alee | redrobot, kfarr I have not run / written tempest tests before so I'm a little more confused than normal | 15:20 |
redrobot | alee last I heard, Temepest was moving away from one monolithic repo... maybe it makes sense for us to add a new devstack gate where swift is also installed and then run some functionals? | 15:21 |
kfarr | redrobot +1 | 15:22 |
redrobot | s/swift/cinder | 15:22 |
alee | and nova | 15:22 |
kfarr | alee that tempest test is from 2+ years ago | 15:22 |
alee | redrobot, kfarr seems like we shoudl throw swift on there too as it will be coming up | 15:23 |
*** diazjf has quit IRC | 15:24 | |
alee | redrobot, kfarr or couldn't we just reconfigure our current gate to include cinder? why a new gate? | 15:27 |
*** diazjf has joined #openstack-barbican | 15:27 | |
kfarr | alee redrobot, that could work too | 15:29 |
kfarr | though I'm a little nervous about making it a voting gate | 15:29 |
kfarr | because if for some reason, things break on the cinder side for volume encryption, our tests would start failing too? | 15:30 |
kfarr | but maybe that's not a very big risk | 15:32 |
redrobot | kfarr +1 yeah, I wouldn't want to gate on cinder either, so I think a separate dsvm would be best | 15:32 |
*** elo1 has quit IRC | 15:35 | |
alee | redrobot, kfarr fair enough | 15:35 |
*** gyee has joined #openstack-barbican | 15:36 | |
*** elo1 has joined #openstack-barbican | 15:38 | |
alee | redrobot, kfarr - so I'm looking at some of the other projects .. openstack-cinder, openstack-neutron | 15:39 |
alee | redrobot, they look like they have a tests/tempest directory which is different from functional .. | 15:40 |
* alee confused | 15:42 | |
kfarr | alee, I don't really know much about that tempest plugin part :( | 15:44 |
*** jhfeng has joined #openstack-barbican | 15:44 | |
alee | redrobot, didn't hockeynut use to do this kind of thing for barbican? | 15:45 |
*** dimtruck is now known as zz_dimtruck | 15:48 | |
*** andreas_s has quit IRC | 15:48 | |
hockeynut | alee redrobot tempest is moving to plugin model where tests live in each projects own repo but can be loaded up by tempest for other projects if needed | 15:51 |
*** elo1 has quit IRC | 15:52 | |
*** elo1 has joined #openstack-barbican | 15:52 | |
*** diazjf has quit IRC | 15:52 | |
*** kfarr has quit IRC | 15:53 | |
alee | hockeynut, so -- if I wanted to write a tempest test that uses cinder/nova and tsted volume encryption , the right thing to do would be to have it in the barbican source tree. | 15:59 |
*** elo1 has quit IRC | 16:00 | |
alee | hockeynut, whats the relationship between the current functional tests and the tempest plugin? | 16:00 |
alee | hockeynut, redrobot says somethig about using tempest-lib in the functional tests | 16:00 |
hockeynut | tempest.lib now (it changed recently) | 16:01 |
hockeynut | the idea is that our current tests should be able to be used by other projects | 16:01 |
alee | hockeynut, so are the current functional tests the same as tempest tests? | 16:01 |
hockeynut | but not sure that anyone else has done that yet | 16:01 |
hockeynut | maybe fnaval for LBaaS | 16:01 |
*** zz_dimtruck is now known as dimtruck | 16:02 | |
alee | hockeynut, I'm just wondering because I see functional tests and tempest tests in openstack-cinder for instance | 16:02 |
alee | and they appear to be distinct | 16:02 |
hockeynut | could be they have tests that they say "these can be used by other projects" versus "these are only useful for us" ? | 16:03 |
alee | hockeynut, let me ask this in a different way -- if someone want to use our tests , what wouldthey do? | 16:04 |
hockeynut | they could run them as we do (ie standalone) right now. I believe the goal is to be able to just tell tempest "hey, run barbican too" and they would run as plugins under tempest | 16:04 |
alee | hockeynut, so how would we achieve that goal? | 16:05 |
alee | ie. how would they run as plugin(s) under tempest? | 16:05 |
hockeynut | the big question! I think that's work that would need to be done to make barbican functional tests able to run as tempest plugins | 16:05 |
alee | hockeynut, ok so the answer is functional tests != tempest tests | 16:06 |
hockeynut | as of this moment, yes | 16:06 |
alee | (at least not right now) | 16:06 |
hockeynut | but it wouild be a good thing to fix that so they could be used as plugins | 16:07 |
alee | hockeynut, and how would one find out how to convert our functional tests to tempest plugins? | 16:07 |
hockeynut | tempest has docs I believe - uno momento | 16:07 |
alee | I guess there is this -- http://docs.openstack.org/developer/tempest/plugin.html | 16:08 |
hockeynut | yep | 16:08 |
alee | ok thanks | 16:09 |
*** elo1 has joined #openstack-barbican | 16:10 | |
*** diazjf has joined #openstack-barbican | 16:11 | |
diazjf | redrobot, for the Barbican Midcycle will we also host the Security team? Looking into the seating requirements. | 16:17 |
pauloewerton | hey guys, this one needs just workflow https://review.openstack.org/#/c/314256/ can any core show some love? ;-) | 16:26 |
pauloewerton | diazjf, ^^ | 16:26 |
diazjf | pauloewerton, will do was waiting for the gate ;) | 16:27 |
pauloewerton | diazjf, thanks! | 16:27 |
alee | diazjf, you guys hosting the midcycle? | 16:29 |
alee | redrobot, diazjf -- this would be in Austin? do we have dates? | 16:29 |
diazjf | hey alee, we agreed on Texas and the dates are Aug 22-26 | 16:32 |
diazjf | alee: still need some more info before I can confirm that we can host | 16:32 |
alee | diazjf, Texas meaning Austin or San Antonio then? | 16:33 |
diazjf | alee, either or depending on who can host. I'm working with management to get it hosted here | 16:33 |
alee | diazjf, redrobot - cool . good dates -- I'll be back in the US by then :) | 16:34 |
alee | though of course it will be toasty .. | 16:34 |
diazjf | alee ^ awesome. Have fun it Africa. | 16:34 |
diazjf | alee, yup prepare for the 100s. eventhough it maybe cooler since its been raining alot over there | 16:35 |
alee | diazjf, redrobot sure you guys dont want to have it in San Marcos ? | 16:35 |
diazjf | alee on the river :) | 16:35 |
alee | exactly .. | 16:36 |
*** diazjf has quit IRC | 16:43 | |
*** kfarr has joined #openstack-barbican | 16:45 | |
*** diazjf has joined #openstack-barbican | 16:45 | |
*** diazjf has quit IRC | 16:52 | |
*** jhfeng has quit IRC | 16:58 | |
*** gyee has quit IRC | 17:00 | |
*** jmckind_ has joined #openstack-barbican | 17:01 | |
*** jmckind has quit IRC | 17:04 | |
*** gyee has joined #openstack-barbican | 17:08 | |
openstackgerrit | Merged openstack/barbican: Use keystone auth plugin https://review.openstack.org/314256 | 17:12 |
*** elo1 has quit IRC | 17:15 | |
*** agrebennikov has quit IRC | 17:31 | |
*** diazjf has joined #openstack-barbican | 17:48 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/316930 | 17:58 |
redrobot | alee you're on to something... | 18:00 |
redrobot | alee end of summer mid-cycle river float FTW! | 18:00 |
diazjf | alee, redrobot, haha. If I do get it hosted I can plan some team events. | 18:01 |
diazjf | redrobot just need an estimate of the # of attendees and if the security team is coming and I'll see if I can get some rooms reserved and plan some events | 18:07 |
redrobot | diazjf cool, I sent an email to michelxin about it | 18:07 |
redrobot | diazjf maybe go poke at the #openstack-security channel? | 18:08 |
diazjf | redrobot, good idea. thanks man | 18:08 |
*** fredyx10 has quit IRC | 18:09 | |
*** elo1 has joined #openstack-barbican | 18:21 | |
*** diazjf has quit IRC | 18:59 | |
*** diazjf has joined #openstack-barbican | 19:03 | |
*** woodster_ has joined #openstack-barbican | 19:20 | |
*** randallburt has quit IRC | 19:22 | |
*** gyee has quit IRC | 19:33 | |
*** elo1 has quit IRC | 19:36 | |
*** elo1 has joined #openstack-barbican | 19:47 | |
*** agrebennikov has joined #openstack-barbican | 19:58 | |
*** elo1 has quit IRC | 20:04 | |
*** diazjf has quit IRC | 20:08 | |
*** elo1 has joined #openstack-barbican | 20:12 | |
*** elo1 has quit IRC | 20:29 | |
*** elo1 has joined #openstack-barbican | 20:31 | |
*** elo1 has quit IRC | 20:32 | |
*** elo1 has joined #openstack-barbican | 20:34 | |
*** gyee has joined #openstack-barbican | 20:40 | |
*** diazjf has joined #openstack-barbican | 20:40 | |
*** diazjf has quit IRC | 20:45 | |
*** diazjf has joined #openstack-barbican | 21:00 | |
*** elo1 has quit IRC | 21:01 | |
*** alee has quit IRC | 21:07 | |
*** pauloewerton has quit IRC | 21:17 | |
*** elo1 has joined #openstack-barbican | 21:21 | |
*** jamielennox is now known as jamielennox|away | 21:30 | |
*** jamielennox|away is now known as jamielennox | 21:39 | |
*** edtubill has quit IRC | 21:44 | |
*** elo1 has quit IRC | 21:47 | |
*** elo1 has joined #openstack-barbican | 21:56 | |
*** diazjf has quit IRC | 21:57 | |
*** mixos has quit IRC | 22:03 | |
*** ozialien10 has quit IRC | 22:04 | |
*** ozialien10 has joined #openstack-barbican | 22:04 | |
*** sigmavirus24 is now known as sigmavirus24_awa | 22:08 | |
*** jmckind_ has quit IRC | 22:15 | |
*** spotz is now known as spotz_zzz | 22:15 | |
*** elo1 has quit IRC | 22:25 | |
*** dimtruck is now known as zz_dimtruck | 22:27 | |
*** elo1 has joined #openstack-barbican | 22:28 | |
*** zz_dimtruck is now known as dimtruck | 22:45 | |
*** kfarr has quit IRC | 22:54 | |
*** woodster_ has quit IRC | 23:08 | |
agrebennikov | hi folks, does somebody know how api server constructs versions dictionary when I make a call just to the port? My keystone contains https in the catalog, but api server returns http instead | 23:16 |
*** elo1 has quit IRC | 23:26 | |
*** mixos has joined #openstack-barbican | 23:36 | |
*** alee has joined #openstack-barbican | 23:47 | |
*** alee has quit IRC | 23:49 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!