| *** gyee has quit IRC | 00:09 | |
| *** jamielennox is now known as jamielennox|away | 00:16 | |
| *** dimtruck is now known as zz_dimtruck | 00:37 | |
| *** tkelsey has joined #openstack-barbican | 01:30 | |
| *** tkelsey has quit IRC | 01:35 | |
| *** woodster_ has quit IRC | 01:59 | |
| *** zz_dimtruck is now known as dimtruck | 02:21 | |
| *** dave-mccowan has quit IRC | 03:27 | |
| *** gnuoy has quit IRC | 04:00 | |
| *** dimtruck is now known as zz_dimtruck | 04:01 | |
| *** tkelsey has joined #openstack-barbican | 04:33 | |
| *** tkelsey has quit IRC | 04:37 | |
| *** diazjf has joined #openstack-barbican | 04:51 | |
| *** jaosorior has joined #openstack-barbican | 05:01 | |
| *** michauds has joined #openstack-barbican | 05:05 | |
| *** michauds has quit IRC | 05:10 | |
| *** hdd has joined #openstack-barbican | 05:12 | |
| *** gyee has joined #openstack-barbican | 05:20 | |
| *** gyee has quit IRC | 05:49 | |
| *** gyee has joined #openstack-barbican | 05:58 | |
| *** hdd has quit IRC | 06:02 | |
| *** gyee has quit IRC | 06:05 | |
| *** andreas_s has joined #openstack-barbican | 06:39 | |
| *** pcaruana has joined #openstack-barbican | 07:03 | |
| *** tkelsey has joined #openstack-barbican | 07:35 | |
| *** tkelsey has quit IRC | 07:39 | |
| openstackgerrit | Johannes Grassler proposed openstack/barbican: Default to Keystone authentication https://review.openstack.org/333173 | 07:52 |
|---|---|---|
| *** tkelsey has joined #openstack-barbican | 08:32 | |
| *** jaosorior has quit IRC | 08:59 | |
| *** jaosorior has joined #openstack-barbican | 08:59 | |
| *** lixiaoy1_ has joined #openstack-barbican | 09:03 | |
| openstackgerrit | Swapnil Kulkarni (coolsvap) proposed openstack/castellan: Remove discover from test-requirements https://review.openstack.org/345288 | 09:38 |
| *** dave-mccowan has joined #openstack-barbican | 11:23 | |
| jaosorior | dave-mccowan: Hey dude | 12:08 |
| dave-mccowan | hi juan | 12:08 |
| jaosorior | dave-mccowan: How's it going? | 12:08 |
| jaosorior | dave-mccowan: Hey, how familiar are you with tempest? | 12:09 |
| dave-mccowan | jaosorior pretty good. | 12:09 |
| dave-mccowan | i haven't done much with tempest, but i did fix a TLS related bug in tempest recently. | 12:10 |
| jaosorior | I see | 12:10 |
| jaosorior | dave-mccowan: well, basically they want to start testing barbican as it's used by cinder's volume encryption | 12:10 |
| jaosorior | and it's failing like this http://logs.openstack.org/06/339806/22/check/gate-puppet-openstack-integration-3-scenario001-tempest-centos-7/70e105d/logs/barbican/main.txt.gz#_2016-07-18_20_33_04_080 | 12:10 |
| jaosorior | by they I mean the puppet folks | 12:11 |
| jaosorior | anyway, that seems to be a policy issue, which could be fixed by making sure that the user that is setting up that encrypted volume is either "admin" or "creator" | 12:11 |
| jaosorior | BUT, I have no clue where to find that in tempest | 12:11 |
| jaosorior | dave-mccowan: This is the test https://github.com/openstack/tempest/blob/master/tempest/scenario/test_encrypted_cinder_volumes.py | 12:13 |
| jaosorior | any ideas? | 12:13 |
| dave-mccowan | i agree... definitely RBAC problem. hopefully there is a some setup code where project specific setup can be hooked in to add roles to users. | 12:13 |
| jaosorior | but I just haven't figured it out | 12:14 |
| jaosorior | I've been bumping my head against the wall for a couple of days now | 12:14 |
| dave-mccowan | i know some folks that use tempest, but they are in California. i can check with them in a couple hours to see if they have any pointers. i'll also take a look. | 12:15 |
| jaosorior | that would be great | 12:16 |
| dave-mccowan | there are some test_roles files under identity. can you copy the code from there and stick it in the cinder tests to setup the user that is used? | 12:17 |
| dave-mccowan | i need to step out for a bit. i'll check back later. | 12:18 |
| jaosorior | sure | 12:18 |
| jaosorior | dave-mccowan: Which test_roles? | 12:19 |
| dave-mccowan | jaosorior tempest/tests/lib/services/identity/v2/test_roles_client.py | 13:05 |
| jaosorior | dave-mccowan: so apparently tempest has a config option called tempest_roles | 13:05 |
| jaosorior | which defines the roles that tempest will give to users globally | 13:05 |
| jaosorior | so I'm trying to use that | 13:05 |
| dave-mccowan | jaosorior is that what you're stuck on, or did you just find that? | 13:06 |
| jaosorior | just found that | 13:07 |
| jaosorior | testing it now | 13:07 |
| jaosorior | lets see if it works | 13:07 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/345431 | 13:35 |
| *** krotscheck_dcm is now known as krotscheck | 13:50 | |
| *** spotz_zzz is now known as spotz | 13:52 | |
| *** haplo37_ has joined #openstack-barbican | 13:57 | |
| *** zz_dimtruck is now known as dimtruck | 14:04 | |
| *** randallburt has joined #openstack-barbican | 14:13 | |
| *** randallburt1 has joined #openstack-barbican | 14:14 | |
| *** randallburt has quit IRC | 14:17 | |
| *** kfarr has joined #openstack-barbican | 14:24 | |
| *** randallburt1 has quit IRC | 14:36 | |
| *** randallburt has joined #openstack-barbican | 14:41 | |
| *** diazjf has joined #openstack-barbican | 14:41 | |
| *** diazjf1 has joined #openstack-barbican | 14:43 | |
| *** randallburt1 has joined #openstack-barbican | 14:43 | |
| *** michauds has joined #openstack-barbican | 14:44 | |
| *** randallburt has quit IRC | 14:45 | |
| *** diazjf has quit IRC | 14:47 | |
| *** michauds has quit IRC | 14:57 | |
| *** haplo37_ has quit IRC | 15:02 | |
| *** pcaruana has quit IRC | 15:02 | |
| *** haplo37_ has joined #openstack-barbican | 15:14 | |
| *** arunkant_ has joined #openstack-barbican | 15:16 | |
| *** andreas_s has quit IRC | 15:32 | |
| *** michauds has joined #openstack-barbican | 15:35 | |
| *** michauds has quit IRC | 15:40 | |
| *** dimtruck is now known as zz_dimtruck | 15:44 | |
| *** woodster_ has joined #openstack-barbican | 15:54 | |
| *** jamielennox|away is now known as jamielennox | 15:59 | |
| *** hdd has joined #openstack-barbican | 16:03 | |
| openstackgerrit | Thomas Bechtold proposed openstack/barbican: Use oslo-config-generator to generate barbican.conf.sample https://review.openstack.org/340490 | 16:51 |
| *** jaosorior has quit IRC | 16:59 | |
| *** jaosorior has joined #openstack-barbican | 16:59 | |
| openstackgerrit | Arun Kant proposed openstack/barbican-specs: Adding spec for supporting multiple secret store backends https://review.openstack.org/263972 | 17:09 |
| openstackgerrit | Arun Kant proposed openstack/barbican: Adding API docs for multiple backend support https://review.openstack.org/341803 | 17:09 |
| openstackgerrit | Swapnil Kulkarni (coolsvap) proposed openstack/python-barbicanclient: Remove discover from test-requirements https://review.openstack.org/345564 | 17:16 |
| jaosorior | arunkant: ping | 17:17 |
| jaosorior | kfarr: ping | 17:17 |
| *** hdd has quit IRC | 17:19 | |
| *** tkelsey has quit IRC | 17:24 | |
| *** kfarr_ has joined #openstack-barbican | 17:28 | |
| kfarr_ | jaosorior pong! | 17:29 |
| *** kfarr has quit IRC | 17:29 | |
| jaosorior | Hey! | 17:29 |
| jaosorior | kfarr_: You're acquainted with the tempest tests for cinder encrypted volumes, right? | 17:30 |
| kfarr_ | jaosorior, yes, I wrote them, but that was 3 yrs ago | 17:31 |
| jaosorior | kfarr_: So | 17:32 |
| jaosorior | we're trying to test that stuff in the puppet-community | 17:32 |
| jaosorior | aaaand it's failing due to policy | 17:32 |
| kfarr_ | jaosorior barbican policy? | 17:32 |
| jaosorior | http://logs.openstack.org/06/339806/22/check/gate-puppet-openstack-integration-3-scenario001-tempest-centos-7/70e105d/logs/barbican/main.txt.gz#_2016-07-18_20_33_04_080 | 17:32 |
| jaosorior | so it seems that it's using a user that is not admin or creator | 17:32 |
| jaosorior | when you wrote that | 17:32 |
| jaosorior | how did you set the roles for the users in tempest? | 17:32 |
| kfarr_ | jaosorior the tempest tests are just run against the existing devstack, last time I checked it doesn't create the users | 17:35 |
| kfarr_ | and the default devstack just uses ConfKeyManager | 17:35 |
| kfarr_ | which doesn't use policy | 17:35 |
| kfarr_ | so if you're using barbican, the user that's creating the volume would need to have barbican roles added outside of the tests | 17:36 |
| kfarr_ | IIRC, the admin user creates the volume type, then the demo user creates the volume | 17:36 |
| jaosorior | well | 17:37 |
| jaosorior | crap haha | 17:37 |
| jaosorior | I have no idea what user does that then | 17:37 |
| kfarr_ | it should be the same, demo user | 17:37 |
| kfarr_ | "demo" | 17:37 |
| jaosorior | thiung is | 17:37 |
| jaosorior | for puppet they don't use devstack | 17:37 |
| kfarr_ | let me double check | 17:37 |
| *** zz_dimtruck is now known as dimtruck | 17:43 | |
| kfarr_ | jaosorior what do they use? | 17:46 |
| jaosorior | a virtual machine that they provision with the necessary services | 17:46 |
| *** diazjf1 has quit IRC | 17:52 | |
| *** diazjf has joined #openstack-barbican | 18:12 | |
| *** catintheroof has quit IRC | 18:25 | |
| *** jaosorior has quit IRC | 18:27 | |
| *** kfarr_ has quit IRC | 18:30 | |
| *** randallburt1 has quit IRC | 18:43 | |
| *** randallburt has joined #openstack-barbican | 18:47 | |
| *** randallburt1 has joined #openstack-barbican | 18:49 | |
| *** michauds has joined #openstack-barbican | 18:51 | |
| *** randallburt has quit IRC | 18:52 | |
| *** diazjf has quit IRC | 19:42 | |
| *** diazjf has joined #openstack-barbican | 19:43 | |
| *** hdd has joined #openstack-barbican | 19:55 | |
| *** hdd has quit IRC | 20:10 | |
| *** diazjf has quit IRC | 20:24 | |
| openstackgerrit | Namrata proposed openstack/barbican: Add guru meditation report for barbican https://review.openstack.org/345660 | 20:38 |
| *** diazjf has joined #openstack-barbican | 20:51 | |
| *** woodster_ has quit IRC | 20:59 | |
| *** haplo37_ has quit IRC | 21:00 | |
| *** madorn has joined #openstack-barbican | 21:14 | |
| *** dave-mccowan has quit IRC | 21:37 | |
| openstackgerrit | Arun Kant proposed openstack/barbican-specs: Adding spec for supporting multiple secret store backends https://review.openstack.org/263972 | 21:50 |
| *** spotz is now known as spotz_zzz | 22:19 | |
| *** diazjf has quit IRC | 22:26 | |
| *** dimtruck is now known as zz_dimtruck | 22:30 | |
| *** ntpttr- has quit IRC | 22:31 | |
| *** ntpttr- has joined #openstack-barbican | 22:36 | |
| *** Kiall has quit IRC | 22:43 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!