| *** jamielennox is now known as jamielennox|away | 00:00 | |
| *** jamielennox|away is now known as jamielennox | 00:14 | |
| *** dimtruck is now known as zz_dimtruck | 02:05 | |
| *** zz_dimtruck is now known as dimtruck | 02:15 | |
| *** jamespage has quit IRC | 03:00 | |
| *** jamespag` has joined #openstack-barbican | 03:01 | |
| *** david-lyle has quit IRC | 03:04 | |
| *** dave-mccowan has quit IRC | 03:09 | |
| *** dimtruck is now known as zz_dimtruck | 04:16 | |
| *** zz_dimtruck is now known as dimtruck | 04:16 | |
| *** dimtruck is now known as zz_dimtruck | 04:25 | |
| *** jaosorior has joined #openstack-barbican | 04:50 | |
| openstackgerrit | Tony Breeds proposed openstack/barbican: Add dogtag-pki and python-nss as extra requirement https://review.openstack.org/344232 | 05:00 |
|---|---|---|
| openstackgerrit | ChangBo Guo(gcb) proposed openstack/python-barbicanclient: Handle container list command correctly https://review.openstack.org/264659 | 05:03 |
| *** woodster_ has quit IRC | 05:10 | |
| *** jaosorior has quit IRC | 05:10 | |
| *** jaosorior has joined #openstack-barbican | 05:11 | |
| *** tdink has quit IRC | 05:51 | |
| openstackgerrit | Tony Breeds proposed openstack/barbican: Add dogtag-pki and python-nss as extra requirement https://review.openstack.org/344232 | 06:06 |
| openstackgerrit | Merged openstack/python-barbicanclient: Handle container list command correctly https://review.openstack.org/264659 | 06:19 |
| *** andreas_s has joined #openstack-barbican | 06:32 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/373740 | 06:40 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/castellan: Updated from global requirements https://review.openstack.org/352316 | 06:40 |
| *** strigazi_AFK is now known as strigazi | 06:51 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/castellan: Updated from global requirements https://review.openstack.org/352316 | 07:03 |
| openstackgerrit | Sharat Sharma proposed openstack/barbican: Replace MagicMock with Mock class https://review.openstack.org/373800 | 07:10 |
| *** pcaruana has joined #openstack-barbican | 07:13 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/castellan: Updated from global requirements https://review.openstack.org/352316 | 07:14 |
| openstackgerrit | Sharat Sharma proposed openstack/python-barbicanclient: Replace MagicMock with Mock class https://review.openstack.org/373803 | 07:16 |
| *** shohel has joined #openstack-barbican | 07:48 | |
| *** jaosorior is now known as jaosorior_brb | 08:28 | |
| *** shohel has quit IRC | 09:35 | |
| *** jamespag` is now known as jamespage | 10:19 | |
| *** jaosorior_brb is now known as jaosorior | 11:28 | |
| *** woodster_ has joined #openstack-barbican | 11:40 | |
| *** dave-mccowan has joined #openstack-barbican | 12:00 | |
| *** david-lyle has joined #openstack-barbican | 12:56 | |
| *** zz_dimtruck is now known as dimtruck | 13:03 | |
| *** dimtruck is now known as zz_dimtruck | 13:08 | |
| *** zz_dimtruck is now known as dimtruck | 13:08 | |
| *** jaosorior has quit IRC | 13:10 | |
| *** jaosorior has joined #openstack-barbican | 13:11 | |
| *** jperry has joined #openstack-barbican | 13:13 | |
| *** dimtruck is now known as zz_dimtruck | 13:18 | |
| *** kb has joined #openstack-barbican | 13:36 | |
| *** kb has quit IRC | 13:41 | |
| *** kberger has joined #openstack-barbican | 13:41 | |
| *** tdink has joined #openstack-barbican | 13:56 | |
| *** mathiasb has quit IRC | 14:10 | |
| *** mathiasb has joined #openstack-barbican | 14:11 | |
| *** edtubill has joined #openstack-barbican | 14:30 | |
| *** edtubill has quit IRC | 14:30 | |
| *** edtubill has joined #openstack-barbican | 14:31 | |
| *** zz_dimtruck is now known as dimtruck | 14:33 | |
| *** jsheeren has joined #openstack-barbican | 14:50 | |
| *** openstack has joined #openstack-barbican | 15:00 | |
| *** diazjf has joined #openstack-barbican | 15:05 | |
| *** diazjf has quit IRC | 15:11 | |
| *** diazjf has joined #openstack-barbican | 15:20 | |
| *** andreas_s has quit IRC | 15:28 | |
| woodster_ | alee: redrobot there was a conversation in the nova channel about tempest testing and barbican for integration testing (and in particular retrieving certs from the key mgmr). I thought there were some integrate gates for the encrypted volumes flows now? I also recall folks looking into using castellan with out barbican for testing. Do you all know the | 15:28 |
| woodster_ | latest state of things there? | 15:28 |
| *** edtubill has quit IRC | 15:37 | |
| *** edtubill has joined #openstack-barbican | 15:37 | |
| *** jaosorior has quit IRC | 15:39 | |
| *** spotz_zzz is now known as spotz | 15:53 | |
| alee | woodster_, so afaik there is no upstream test for encrypted volumes that involves barbican | 15:55 |
| alee | woodster_, what I worked on is tests qithin puppet-ci | 15:55 |
| woodster_ | alee: ah got it. I thought kfarr was working on something | 15:55 |
| alee | woodster_, so in puppet-openstack-integration, there is a test that enables barbican and then runs the cinder encryption tests | 15:56 |
| alee | woodster_, that was working until kfarr broke it in cinder :) | 15:56 |
| alee | woodster_, that test is now disabled penfing the cinder fix .. let me see where that is .. | 15:57 |
| *** diazjf has quit IRC | 15:57 | |
| alee | woodster_, https://review.openstack.org/#/c/366750/ | 15:58 |
| woodster_ | alee: if folks need to integrate with a key manager in tests, do we have a recommended approach? Should they mimic what is going on with your test in puppet-openstack-integration? | 15:58 |
| alee | woodster_, yes | 15:58 |
| alee | woodster_, though of course they may want to wait until the cinder bug is fixed | 15:59 |
| alee | woodster_, in case any changes are needed to the puppet test | 15:59 |
| woodster_ | alee: is that CR the bug fix? I don't see a bug ref if it is | 16:00 |
| alee | woodster_, once the puppet test is working, they can look to see what the config in cinder, nova and barbican is | 16:00 |
| alee | woodster_, thats the bug fix | 16:00 |
| alee | not sure what the bug ref is .. | 16:00 |
| alee | woodster_, at some point in the near future, I'll be working with triplo-ci to do a barbican encrypted volume test there too. | 16:01 |
| alee | woodster_, but having a test upstream would be much better | 16:07 |
| woodster_ | alee: can you point me to your puppet-openstack-integration tests? | 16:08 |
| alee | woodster_, look at this -- https://review.openstack.org/#/c/363142/ | 16:09 |
| alee | woodster_, http://logs.openstack.org/42/363142/10/check/gate-puppet-openstack-integration-3-scenario002-tempest-centos-7/fe14df0/ is for scenario2 | 16:10 |
| alee | woodster_, in there are the config files for cinder, nova, barbican | 16:10 |
| alee | woodster_, do you need any further? | 16:11 |
| woodster_ | alee: no that looks good, thanks! | 16:11 |
| *** diazjf has joined #openstack-barbican | 16:12 | |
| alee | woodster_, np -- who is trying to set up the integration tests? | 16:12 |
| *** pcaruana has quit IRC | 16:15 | |
| *** pcaruana has joined #openstack-barbican | 16:17 | |
| *** edtubill has quit IRC | 16:22 | |
| *** edtubill has joined #openstack-barbican | 16:23 | |
| *** diazjf has quit IRC | 16:39 | |
| redrobot | clear | 16:39 |
| *** edtubill has quit IRC | 16:51 | |
| *** randallburt has joined #openstack-barbican | 16:53 | |
| *** randallburt1 has joined #openstack-barbican | 16:55 | |
| *** randallburt has quit IRC | 16:58 | |
| *** ngupta has joined #openstack-barbican | 16:59 | |
| *** diazjf has joined #openstack-barbican | 17:03 | |
| *** diazjf has quit IRC | 17:06 | |
| *** diazjf has joined #openstack-barbican | 17:07 | |
| *** tdink has quit IRC | 17:12 | |
| *** tdink has joined #openstack-barbican | 17:13 | |
| *** Jiahao has joined #openstack-barbican | 17:18 | |
| Jiahao | Hi guys, I reraised bug #1592612 as LBaaS TLS for non-admin tenant is still not working. | 17:21 |
| openstack | bug 1592612 in neutron "TLS container could not be found" [Undecided,New] https://launchpad.net/bugs/1592612 | 17:21 |
| *** diazjf has quit IRC | 17:24 | |
| Jiahao | It failed when neutron is trying to retrieve self._cert_container.certificate.payload. | 17:25 |
| Jiahao | Does any of you mind check it out? Thanks a lot. | 17:31 |
| *** tdink_ has joined #openstack-barbican | 17:33 | |
| *** tdink has quit IRC | 17:33 | |
| *** haplo37__ has joined #openstack-barbican | 17:45 | |
| *** jarvis has joined #openstack-barbican | 17:51 | |
| woodster_ | alee: this is coming up from the Nova side | 17:57 |
| *** jarvis has quit IRC | 17:58 | |
| woodster_ | alee: could you help answer questions about integration testing with barbican? | 18:04 |
| alee | woodster_, sure | 18:05 |
| woodster_ | alee, there is a contributor in the #openstack-nova channel saying this: "I'm skeptical of the value of writing a tempest test that will in all likelihood never prevent bad code from merging since Barbican isn't required by tempest" | 18:07 |
| alee | woodster_, there now .. | 18:08 |
| *** ngupta has quit IRC | 18:13 | |
| *** ngupta has joined #openstack-barbican | 18:14 | |
| *** edtubill has joined #openstack-barbican | 18:18 | |
| *** ngupta has quit IRC | 18:29 | |
| *** ngupta has joined #openstack-barbican | 18:29 | |
| *** jorgem[away] is now known as jorgem | 18:34 | |
| woodster_ | alee: thanks for helping out | 18:36 |
| alee | woodster_, I'm excited at the prospect of getting some actual barbican tests | 18:36 |
| alee | woodster_, (and the best part of it is someone else is doing it :)) | 18:37 |
| *** diazjf has joined #openstack-barbican | 18:37 | |
| woodster_ | alee: yeah I was hopeful there would be more traction on that outside of our merry team of folks! | 18:37 |
| woodster_ | alee: It sounds like they can leverage your puppet test configs for this new security gate test in nova | 18:38 |
| alee | woodster_, yup | 18:39 |
| woodster_ | alee: it seems Sean is wanting Barbican to do more cross-project integration testing to demonstrate maturity | 18:43 |
| alee | woodster_, thats not entirely unreasonable | 18:44 |
| woodster_ | alee: yeah, that might be a good thing to consider adding in Ocata. Leaving it up to other projects to do it is not working out so well :) | 18:46 |
| alee | dave-mccowan, woodster_ I think we should seriosuly consider having real functional tests -- even as an non-voting gate | 18:46 |
| alee | dave-mccowan, woodster_ its up to us to show the viablity of barbican as a key manager | 18:46 |
| alee | dave-mccowan, woodster_ and it gives folks a place to test their integrations | 18:47 |
| dave-mccowan | alee, woodster_ +1 | 18:48 |
| alee | dave-mccowan, by the way, congrats new fearless leader | 18:50 |
| woodster_ | alee: dave-mccowan agreed! And let all the projects know it's there too. I think the 'how do I test key mgmr integration with/without Barbican?' question comes up way too often | 18:50 |
| dave-mccowan | i think alee woodster_ in fact, it's already on the list to discuss at summit. https://etherpad.openstack.org/p/barbican-ocata-design-summit feel free to add specific tests to add to the list. | 18:50 |
| alee | off with the head of the old, in with the new .. | 18:50 |
| *** ig0r_ has joined #openstack-barbican | 18:51 | |
| woodster_ | alee: dave-mccowan From dane-fichter in #openstack-nova: I'll push a patch to devstack that sets the right key_manager / key_mgr opts if it's not already there. I'd be good to keep an eye on that progress and provide guidance as possible. | 18:52 |
| * woodster_ wonders if redrobot's ears are toasty right about now | 18:53 | |
| *** ngupta_ has joined #openstack-barbican | 18:56 | |
| *** ngupta has quit IRC | 18:59 | |
| *** ngupta_ has quit IRC | 19:00 | |
| *** catintheroof has joined #openstack-barbican | 19:12 | |
| *** ngupta has joined #openstack-barbican | 19:25 | |
| *** diazjf has quit IRC | 19:35 | |
| *** alee is now known as alee_afk | 19:36 | |
| *** catintheroof has quit IRC | 20:08 | |
| *** ngupta has quit IRC | 21:29 | |
| *** ngupta has joined #openstack-barbican | 21:30 | |
| *** ngupta has quit IRC | 21:35 | |
| *** ngupta has joined #openstack-barbican | 21:36 | |
| *** ig0r_ has quit IRC | 21:45 | |
| *** haplo37__ has quit IRC | 21:55 | |
| *** randallburt1 has quit IRC | 21:55 | |
| *** tdink_ has quit IRC | 21:58 | |
| *** edtubill has quit IRC | 21:59 | |
| *** jperry has quit IRC | 22:02 | |
| *** spotz is now known as spotz_zzz | 22:07 | |
| *** ngupta has quit IRC | 22:23 | |
| *** ngupta has joined #openstack-barbican | 22:23 | |
| *** ngupta has quit IRC | 22:28 | |
| *** ngupta has joined #openstack-barbican | 22:50 | |
| *** jamielennox is now known as jamielennox|away | 23:04 | |
| *** ngupta has quit IRC | 23:13 | |
| *** ngupta has joined #openstack-barbican | 23:13 | |
| *** ngupta has quit IRC | 23:18 | |
| *** jamielennox|away is now known as jamielennox | 23:43 | |
| *** dimtruck is now known as zz_dimtruck | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!