| *** jperry has joined #openstack-barbican | 00:06 | |
| *** agrebennikov has quit IRC | 00:30 | |
| *** diazjf has joined #openstack-barbican | 02:03 | |
| *** diazjf has quit IRC | 02:04 | |
| *** liujiong has joined #openstack-barbican | 02:27 | |
| *** dave-mccowan has quit IRC | 02:57 | |
| *** jperry has quit IRC | 03:16 | |
| *** chlong has quit IRC | 04:24 | |
| *** andreas_s has joined #openstack-barbican | 07:31 | |
| *** openstackgerrit has quit IRC | 07:48 | |
| *** openstackgerrit has joined #openstack-barbican | 07:48 | |
| *** andreas_s has quit IRC | 08:24 | |
| *** xek__ is now known as xek | 08:28 | |
| *** andreas_s has joined #openstack-barbican | 08:37 | |
| *** jaosorior has joined #openstack-barbican | 08:45 | |
| *** liujiong has quit IRC | 08:48 | |
| *** haplo37 has quit IRC | 08:51 | |
| *** haplo37_ has joined #openstack-barbican | 08:54 | |
| *** liujiong has joined #openstack-barbican | 08:54 | |
| *** jaosorior has quit IRC | 09:14 | |
| *** tinwood has quit IRC | 09:14 | |
| *** jaosorior has joined #openstack-barbican | 09:14 | |
| *** tinwood has joined #openstack-barbican | 09:15 | |
| *** sayalilunkad has joined #openstack-barbican | 09:42 | |
| *** strigazi_AFK is now known as strigazi | 09:44 | |
| *** jaosorior has quit IRC | 09:48 | |
| *** jaosorior has joined #openstack-barbican | 09:49 | |
| *** jaosorior is now known as jaosorior_lunch | 10:08 | |
| *** liujiong has quit IRC | 10:17 | |
| *** spotz is now known as spotz_zzz | 11:12 | |
| *** jaosorior_lunch is now known as jaosorior | 11:21 | |
| *** Administrator__ has quit IRC | 11:34 | |
| *** Administrator__ has joined #openstack-barbican | 11:35 | |
| *** dave-mccowan has joined #openstack-barbican | 11:35 | |
| *** zhugaoxiao has joined #openstack-barbican | 11:37 | |
| *** Administrator__ has quit IRC | 11:40 | |
| *** jperry has joined #openstack-barbican | 11:46 | |
| *** jperry has quit IRC | 12:10 | |
| *** liujiong has joined #openstack-barbican | 12:15 | |
| *** diazjf has joined #openstack-barbican | 12:54 | |
| *** diazjf has quit IRC | 12:54 | |
| *** haplo37_ has quit IRC | 13:07 | |
| *** haplo37_ has joined #openstack-barbican | 13:09 | |
| *** andreas_s has quit IRC | 13:14 | |
| openstackgerrit | Jeremy Liu proposed openstack/barbican: Add bindep environment to tox https://review.openstack.org/391610 | 13:18 |
|---|---|---|
| *** jperry has joined #openstack-barbican | 13:18 | |
| *** andreas_s has joined #openstack-barbican | 13:20 | |
| openstackgerrit | Jeremy Liu proposed openstack/barbican: Add bindep environment to tox https://review.openstack.org/391610 | 13:22 |
| *** agrebennikov has joined #openstack-barbican | 13:38 | |
| *** edtubill has joined #openstack-barbican | 13:49 | |
| *** jaosorior has quit IRC | 13:53 | |
| *** andreas_s has quit IRC | 13:54 | |
| *** andreas_s has joined #openstack-barbican | 13:56 | |
| *** chris_hultin|AWA is now known as chris_hultin | 14:11 | |
| *** dane-fichter has joined #openstack-barbican | 14:14 | |
| *** tdink has joined #openstack-barbican | 14:14 | |
| dane-fichter | yo barbican folks | 14:14 |
| dane-fichter | as we talked about in barca, im working on adding a key manager to tempest | 14:14 |
| dane-fichter | please take a look and chime in your support, this is likely to be unpopular w tempest cores unless they see that people actually want this | 14:15 |
| dane-fichter | https://review.openstack.org/#/c/392329/ | 14:15 |
| *** tdink has quit IRC | 14:23 | |
| liujiong | Wow, nice! dane-fichter | 14:24 |
| dane-fichter | thanks liujiong | 14:25 |
| *** tdink has joined #openstack-barbican | 14:25 | |
| dane-fichter | definitely a work in progress, but it's coming along | 14:25 |
| *** tdink has quit IRC | 14:31 | |
| *** tdink has joined #openstack-barbican | 14:34 | |
| liujiong | Will keep an eye on it. | 14:34 |
| *** spotz_zzz is now known as spotz | 14:37 | |
| *** jaosorior has joined #openstack-barbican | 14:41 | |
| *** tdink has quit IRC | 14:43 | |
| dane-fichter | do you guys have weekly meetings? | 14:44 |
| *** tdink has joined #openstack-barbican | 14:45 | |
| openstackgerrit | Jeremy Liu proposed openstack/barbican: Fix some minor error https://review.openstack.org/392692 | 14:47 |
| liujiong | Yeah, it's usually on Monday at 2000 UTC | 14:49 |
| jaosorior | dane-fichter: https://wiki.openstack.org/wiki/Meetings/Barbican | 14:52 |
| *** tdink has quit IRC | 14:54 | |
| *** tdink has joined #openstack-barbican | 14:57 | |
| *** portdirect has joined #openstack-barbican | 15:01 | |
| *** tdink has quit IRC | 15:04 | |
| *** Bwhugen has joined #openstack-barbican | 15:04 | |
| *** tdink has joined #openstack-barbican | 15:06 | |
| *** tdink has quit IRC | 15:11 | |
| *** tdink has joined #openstack-barbican | 15:14 | |
| *** dane-fichter has quit IRC | 15:17 | |
| openstackgerrit | Jeremy Liu proposed openstack/barbican: Remove translations for debug level log https://review.openstack.org/392713 | 15:17 |
| openstackgerrit | Jeremy Liu proposed openstack/barbican: Fix some minor error https://review.openstack.org/392692 | 15:18 |
| openstackgerrit | Jeremy Liu proposed openstack/barbican: Remove translations for debug level log https://review.openstack.org/392713 | 15:21 |
| *** woodster_ has joined #openstack-barbican | 15:21 | |
| *** diazjf has joined #openstack-barbican | 15:22 | |
| diazjf | redrobot, dave-mccowan, hey quick question, should we start adding logging for deprecating certs, and certificate orders? | 15:23 |
| dave-mccowan | diazjf redrobot yes for logging for deprecating certificate orders. (also adding a config switch to turn off that api) | 15:24 |
| dave-mccowan | diazjf what did you mean by "deprecating certs"? (just the orders api, or something else) | 15:25 |
| openstackgerrit | Thomas Bechtold proposed openstack/barbican: Use oslo-config-generator to generate barbican.conf.sample https://review.openstack.org/340490 | 15:26 |
| *** tdink has quit IRC | 15:27 | |
| *** liujiong has quit IRC | 15:27 | |
| *** tdink has joined #openstack-barbican | 15:28 | |
| diazjf | dave-mccowan, redrobot the cas endpoint as well, and docs. | 15:28 |
| dave-mccowan | diazjf ah. yes, those too. do you want to do that? | 15:30 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/392717 | 15:30 |
| diazjf | dave-mccowan, sure, I can do it by the end of the week. Should be pretty simple :) | 15:30 |
| diazjf | dave-mccowan, I'm making a list, and will have everything up more review tonight/tomorrow morning. | 15:33 |
| dave-mccowan | diazjf awesome! thanks! | 15:34 |
| *** diazjf has quit IRC | 15:38 | |
| *** tdink has quit IRC | 15:41 | |
| *** tdink has joined #openstack-barbican | 15:43 | |
| *** diazjf has joined #openstack-barbican | 15:53 | |
| *** tdink has quit IRC | 15:55 | |
| *** tdink has joined #openstack-barbican | 15:57 | |
| *** tdink has quit IRC | 16:09 | |
| *** tdink has joined #openstack-barbican | 16:11 | |
| *** tdink has quit IRC | 16:21 | |
| *** tdink has joined #openstack-barbican | 16:23 | |
| *** diazjf has quit IRC | 16:28 | |
| *** jaosorior has quit IRC | 16:28 | |
| *** diazjf has joined #openstack-barbican | 16:34 | |
| *** tdink has quit IRC | 16:36 | |
| *** tdink has joined #openstack-barbican | 16:38 | |
| *** diazjf has quit IRC | 16:42 | |
| *** tdink has quit IRC | 16:49 | |
| *** tdink has joined #openstack-barbican | 16:50 | |
| *** tdink has quit IRC | 16:55 | |
| *** tdink has joined #openstack-barbican | 16:57 | |
| *** tdink has quit IRC | 17:01 | |
| *** tdink has joined #openstack-barbican | 17:04 | |
| *** andreas_s has quit IRC | 17:06 | |
| *** jaosorior has joined #openstack-barbican | 17:13 | |
| *** tdink has quit IRC | 17:15 | |
| *** tdink has joined #openstack-barbican | 17:18 | |
| *** tdink has quit IRC | 17:28 | |
| *** tdink has joined #openstack-barbican | 17:29 | |
| *** tdink has quit IRC | 17:34 | |
| *** tdink has joined #openstack-barbican | 17:34 | |
| *** diazjf has joined #openstack-barbican | 17:44 | |
| *** tdink has quit IRC | 18:00 | |
| dave-mccowan | Question from #openstack-kolla: | 18:01 |
| dave-mccowan | <portdirect>hey is anyone using barbican in kolla? The containers need an update to reflect the current state of the project (on it..) but I'm aslo hitting a race condition where if the api and worker containers start simultaneously they fight over managing the db. This is beasue unlike other openstack projects they insist upon running some db management taks each time the serive is started, devstack gets round this by rinning 'sleep | 18:01 |
| dave-mccowan | 10' between starting | 18:01 |
| portdirect | :) | 18:01 |
| dave-mccowan | redrobot woodster_ ^^^ do you know anything about this database race? | 18:01 |
| dave-mccowan | portdirect beat you too it. :-) | 18:02 |
| portdirect | sorry about the spelling there :) | 18:02 |
| dave-mccowan | jaosorior ^^ | 18:02 |
| redrobot | dave-mccowan auto-populating the db is a developer convenience | 18:02 |
| redrobot | dave-mccowan should probably be turned off by default | 18:02 |
| jaosorior | dave-mccowan: sup? | 18:03 |
| jaosorior | Eating pizza and drinkinh beer. So my responses will be limited | 18:03 |
| dave-mccowan | talking with some kolla users about our database | 18:03 |
| *** tdink has joined #openstack-barbican | 18:04 | |
| redrobot | You should probably have a container that just runs "barbican manage" and then run that with "db update" or whatever the command is to build the schema | 18:04 |
| *** spotz is now known as spotz_zzz | 18:04 | |
| redrobot | instead of relying on the api or worker to build the schema for you | 18:04 |
| portdirect | we are doing that, but I'm hitting a race condition sometimes when starting the api and worker at the same time, is there a way to disble the schema management in the config? | 18:05 |
| *** haplo37_ has quit IRC | 18:05 | |
| redrobot | portdirect yes, there is | 18:06 |
| redrobot | portdirect let me dig for that | 18:06 |
| *** haplo37_ has joined #openstack-barbican | 18:08 | |
| redrobot | portdirect in the [DEFAULT] section set | 18:10 |
| redrobot | db_auto_create = False | 18:10 |
| portdirect | cheers, also is it preferred to use barbican-retry or barbican-worker? I've been following devstack for my own work (based on alpine linux) https://github.com/portdirect/harbor/tree/latest/docker/openstack/openstack-barbican, but we are currently using worker and keystone-watcher in kolla. | 18:10 |
| portdirect | redrobot: nice, I'll get that in tonight :) | 18:11 |
| portdirect | (should have just checked thr source...) | 18:11 |
| redrobot | portdirect use "barbican-manage db upgrade" to build the schema before running API or Worker processes or they'll fail to start | 18:11 |
| portdirect | of course :) | 18:11 |
| redrobot | I'm not super familiar with the barbican-retry process... I think it ensures that pending orders in the DB are also in the rabbit queue? | 18:13 |
| redrobot | woodster_ would know for sure... | 18:13 |
| dave-mccowan | portdirect are you going to commit that to kolla? | 18:14 |
| portdirect | yeah, I'll pop it in just now | 18:15 |
| *** openstackgerrit has quit IRC | 18:18 | |
| *** openstackgerrit has joined #openstack-barbican | 18:18 | |
| woodster_ | portdirect: redrobot the barbican retry process was there to support the deprecated TLS cert generation stuff. I don't think it is currently used for any other purpose now, thought I could be used to retry failed async secret generations, though probably not worth the effort | 18:22 |
| *** tdink has quit IRC | 18:22 | |
| *** diazjf has quit IRC | 18:22 | |
| * woodster_ waves at redrobot dave-mccowan and the gang out in Spain! | 18:22 | |
| redrobot | woodster_ we're back in the US :D | 18:22 |
| *** tdink has joined #openstack-barbican | 18:22 | |
| woodster_ | redrobot: oh wow, I've definitely been out of touch with things OpenStack of late! Welcome back. Gotta do lunch to catch up one of these days (maybe tomorrow before a 1pm Rax meeting)? | 18:23 |
| dave-mccowan | woodster_ redrobot: do you guys have the link to sign up early for PTG in February? You can share it with others. | 18:24 |
| redrobot | dave-mccowan I have the link... just no funds yet. :-\ | 18:25 |
| portdirect | woodster_: cheers, fyi devstack still uses retry (https://github.com/openstack/barbican/blob/master/devstack/lib/barbican#L195) hence my confusion, so I should just be using worker, and keystone-watcher instead (if trying to follow the most beaten/supported path)? | 18:25 |
| redrobot | dave-mccowan gotta talk to the boss about that this week. | 18:25 |
| dave-mccowan | redrobot security is M-T and barbican W-F if you want to fill the week | 18:26 |
| *** jperry has quit IRC | 18:27 | |
| *** jperry has joined #openstack-barbican | 18:28 | |
| *** diazjf has joined #openstack-barbican | 18:31 | |
| *** portdirect is now known as portdirect_away | 18:51 | |
| *** jperry has quit IRC | 18:52 | |
| *** jperry has joined #openstack-barbican | 18:53 | |
| *** tdink_ has joined #openstack-barbican | 19:07 | |
| *** tdink has quit IRC | 19:07 | |
| *** spotz_zzz is now known as spotz | 19:36 | |
| *** dave-mcc_ has joined #openstack-barbican | 19:47 | |
| *** dave-mccowan has quit IRC | 19:48 | |
| *** openstack has joined #openstack-barbican | 19:59 | |
| *** Bwhugen has quit IRC | 20:07 | |
| *** openstackgerrit has quit IRC | 20:18 | |
| *** openstackgerrit has joined #openstack-barbican | 20:18 | |
| *** diazjf has quit IRC | 20:54 | |
| *** edtubill has quit IRC | 21:16 | |
| *** dave-mcc_ has quit IRC | 21:24 | |
| *** diazjf has joined #openstack-barbican | 21:24 | |
| openstackgerrit | Merged openstack/barbican: Updated from global requirements https://review.openstack.org/392717 | 21:35 |
| *** diazjf has quit IRC | 21:42 | |
| *** jperry has quit IRC | 22:02 | |
| *** chris_hultin is now known as chris_hultin|AWA | 22:09 | |
| *** diazjf has joined #openstack-barbican | 22:10 | |
| *** diazjf has quit IRC | 22:11 | |
| *** spotz is now known as spotz_zzz | 22:59 | |
| *** david-lyle has quit IRC | 23:04 | |
| *** chris_hultin|AWA is now known as chris_hultin | 23:08 | |
| *** jaosorior has quit IRC | 23:10 | |
| *** chris_hultin is now known as chris_hultin|AWA | 23:15 | |
| *** agrebennikov has quit IRC | 23:27 | |
| *** david-lyle has joined #openstack-barbican | 23:30 | |
| *** dave-mccowan has joined #openstack-barbican | 23:31 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!