| *** spotz_zzz is now known as spotz | 00:08 | |
| *** spotz is now known as spotz_zzz | 00:18 | |
| *** dimtruck is now known as zz_dimtruck | 01:14 | |
| *** spotz_zzz is now known as spotz | 02:09 | |
| *** spotz is now known as spotz_zzz | 02:20 | |
| *** spotz_zzz is now known as spotz | 04:12 | |
| *** spotz is now known as spotz_zzz | 04:21 | |
| *** spotz_zzz is now known as spotz | 05:12 | |
| *** spotz is now known as spotz_zzz | 05:22 | |
| *** liujiong has joined #openstack-barbican | 05:38 | |
| *** spotz_zzz is now known as spotz | 06:13 | |
| *** spotz is now known as spotz_zzz | 06:23 | |
| *** toabctl has joined #openstack-barbican | 06:54 | |
| *** spotz_zzz is now known as spotz | 07:14 | |
| *** spotz is now known as spotz_zzz | 07:24 | |
| *** andreas_s has joined #openstack-barbican | 07:25 | |
| *** mkoderer has joined #openstack-barbican | 07:26 | |
| *** shohel has joined #openstack-barbican | 08:15 | |
| *** spotz_zzz is now known as spotz | 08:15 | |
| *** pcaruana has joined #openstack-barbican | 08:15 | |
| *** spotz is now known as spotz_zzz | 08:25 | |
| *** spotz_zzz is now known as spotz | 10:16 | |
| *** mkoderer has quit IRC | 10:16 | |
| *** spotz is now known as spotz_zzz | 10:26 | |
| *** spotz_zzz is now known as spotz | 11:17 | |
| *** spotz is now known as spotz_zzz | 11:27 | |
| *** spotz_zzz is now known as spotz | 12:18 | |
| *** shohel has quit IRC | 12:24 | |
| *** catintheroof has joined #openstack-barbican | 12:25 | |
| *** spotz is now known as spotz_zzz | 12:28 | |
| *** shohel has joined #openstack-barbican | 12:45 | |
| *** dave-mccowan has joined #openstack-barbican | 13:00 | |
| *** jmckind has joined #openstack-barbican | 13:00 | |
| *** spotz_zzz is now known as spotz | 13:19 | |
| *** spotz is now known as spotz_zzz | 13:29 | |
| *** shohel has quit IRC | 13:31 | |
| *** mkoderer has joined #openstack-barbican | 13:38 | |
| *** jperry has joined #openstack-barbican | 14:26 | |
| *** agrebennikov__ has joined #openstack-barbican | 14:31 | |
| *** alee has quit IRC | 14:34 | |
| *** alee has joined #openstack-barbican | 14:35 | |
| *** jperry has quit IRC | 14:36 | |
| *** jperry has joined #openstack-barbican | 14:38 | |
| openstackgerrit | dane-fichter proposed openstack/barbican-tempest-plugin: Added Secret Metadata client and unit tests https://review.openstack.org/424817 | 14:38 |
|---|---|---|
| *** edtubill has joined #openstack-barbican | 14:38 | |
| *** liujiong has quit IRC | 14:51 | |
| *** liujiong has joined #openstack-barbican | 14:56 | |
| *** chris_hultin|AWA is now known as chris_hultin | 15:06 | |
| openstackgerrit | dane-fichter proposed openstack/barbican-tempest-plugin: Added Secret Metadata client and unit tests https://review.openstack.org/424817 | 15:09 |
| *** spotz_zzz is now known as spotz | 15:10 | |
| *** nkinder has joined #openstack-barbican | 15:16 | |
| *** kfarr has joined #openstack-barbican | 15:21 | |
| *** jaosorior has joined #openstack-barbican | 15:23 | |
| *** zz_dimtruck is now known as dimtruck | 15:26 | |
| *** jaosorior has quit IRC | 15:27 | |
| *** jaosorior has joined #openstack-barbican | 15:32 | |
| *** kfarr has quit IRC | 15:33 | |
| *** tdink has joined #openstack-barbican | 15:45 | |
| *** jperry has quit IRC | 15:56 | |
| openstackgerrit | dane-fichter proposed openstack/barbican-tempest-plugin: Added Secret Metadata client and unit tests https://review.openstack.org/424817 | 16:00 |
| *** tdink has quit IRC | 16:05 | |
| *** tdink has joined #openstack-barbican | 16:05 | |
| openstackgerrit | Ade Lee proposed openstack/barbican: add ipavault plugin https://review.openstack.org/426825 | 16:13 |
| alee | jaosorior, ^^ | 16:13 |
| jaosorior | alee: great, lets see | 16:13 |
| alee | jaosorior, all still untested and wip right now .. | 16:14 |
| alee | jaosorior, these are the errors I am currently getting http://paste.openstack.org/show/596911/ | 16:16 |
| jaosorior | alee: running tox on it | 16:16 |
| alee | jaosorior, yeah - you're going to need to modify your tox environment by copying stuff in | 16:16 |
| alee | jaosorior, because the ipa stuff is not yet pip installable | 16:16 |
| jaosorior | alee: that's no biggie, it's better for me to see the bug there, that way I can mock it easier | 16:17 |
| alee | jaosorior, (christian working on that) | 16:17 |
| alee | jaosorior, understood. | 16:17 |
| jaosorior | wow | 16:17 |
| jaosorior | got an error with the tox | 16:17 |
| jaosorior | installing python-ldap | 16:17 |
| alee | jaosorior, yeah | 16:17 |
| jaosorior | dafuq | 16:17 |
| jaosorior | alee: did you get those from global requirements? | 16:18 |
| alee | jaosorior, let me recall what I had to copy in .. | 16:18 |
| jaosorior | alee: let me just fix up the requirements | 16:18 |
| jaosorior | alee: do we add those to requirements.txt or to test-requirements.txt ? | 16:19 |
| alee | jaosorior, cp -r /usr/lib/python2.7/site-packages/ipaplatform .tox/py27/lib/python2.7/site-packages/ | 16:19 |
| alee | jaosorior, cp -r /usr/lib/python2.7/site-packages/ipapython .tox/py27/lib/python2.7/site-packages/ | 16:19 |
| alee | cp -r /usr/lib/python2.7/site-packages/ipalib .tox/py27/lib/python2.7/site-packages/ | 16:19 |
| jaosorior | fuck | 16:19 |
| jaosorior | python-ldap is not in openstack requirements | 16:19 |
| jaosorior | alee: we have ldap3 available though, would you be able to use that? | 16:20 |
| alee | jaosorior, of course it isn't | 16:20 |
| alee | jaosorior, maybe - not sure -t he python-ldap requirement comes from within ipa code | 16:21 |
| alee | jaosorior, we don't use it in barbican plugin | 16:21 |
| alee | jaosorior, lets just get it working first - and then try to figure out the deps. | 16:22 |
| jaosorior | alee: so then we probably should add the ipa requirement to bindep.txt | 16:22 |
| jaosorior | cause adding stuff to requirements.txt that way could get problematic | 16:22 |
| jaosorior | alee: I went with the deps since it's the first thing that failed when trying to do tox | 16:23 |
| alee | jaosorior, no thats a good point | 16:23 |
| alee | jaosorior, whats bindep.txt supposed to be for? | 16:24 |
| jaosorior | alee: any non-pip requirements | 16:24 |
| jaosorior | AFAIK | 16:24 |
| alee | ah | 16:24 |
| jaosorior | alee: would be better to ask in the infra channel | 16:24 |
| jaosorior | anyway, trying it again without gssapi and ldap as dependencies | 16:25 |
| *** liujiong_lj has joined #openstack-barbican | 16:31 | |
| *** liujiong has quit IRC | 16:32 | |
| *** nkinder has quit IRC | 16:34 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: add ipavault plugin https://review.openstack.org/426825 | 16:36 |
| *** briancurtin has joined #openstack-barbican | 16:42 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: add ipavault plugin https://review.openstack.org/426825 | 16:43 |
| *** briancurtin has left #openstack-barbican | 16:43 | |
| *** andreas_s has quit IRC | 16:45 | |
| *** armstrong has joined #openstack-barbican | 16:50 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: add ipavault plugin https://review.openstack.org/426825 | 16:56 |
| *** tdink has quit IRC | 16:59 | |
| *** tdink has joined #openstack-barbican | 17:04 | |
| *** kfarr has joined #openstack-barbican | 17:04 | |
| *** nkinder has joined #openstack-barbican | 17:07 | |
| *** nkinder has quit IRC | 17:17 | |
| *** jsavak has joined #openstack-barbican | 17:23 | |
| openstackgerrit | Kaitlin Farr proposed openstack/castellan: Remove outdated comment https://review.openstack.org/409887 | 17:41 |
| jaosorior | alee: so I copied the paths that you told me but I still don't get to the issue you mentioned | 17:42 |
| jaosorior | still getting issues importing ipalib from the mock | 17:43 |
| jaosorior | I did get past that by mocking the ipalib import | 17:43 |
| jaosorior | but now it fails referencing ipav.CONF, which wouldn't be available when the import fails | 17:43 |
| *** kfarr has quit IRC | 17:43 | |
| alee | jaosorior, brb | 17:45 |
| alee | jaosorior, ok - here is what I did .. | 17:50 |
| alee | jaosorior, pull up change, then tox -r -e py27 | 17:51 |
| alee | jaosorior, this fails --- then .. copy in the stuff I mentioned | 17:52 |
| alee | jaosorior, then tox -e py27 | 17:52 |
| jaosorior | alee: I did just that | 17:55 |
| alee | jaosorior, and you're still getting error referencing ipav.CONF ? | 17:56 |
| openstackgerrit | Kaitlin Farr proposed openstack/castellan: Add ability to get only metadata https://review.openstack.org/412558 | 17:56 |
| *** jsavak has quit IRC | 17:57 | |
| openstackgerrit | Kaitlin Farr proposed openstack/castellan: Add ability to get only metadata https://review.openstack.org/412558 | 17:57 |
| openstackgerrit | Fernando Diaz proposed openstack/barbican: Add Unit Tests for Consumers API Controller https://review.openstack.org/425548 | 17:57 |
| jaosorior | alee: yes | 17:58 |
| alee | jaosorior, can you paste error? | 17:59 |
| jaosorior | alee: http://paste.openstack.org/show/596924/ | 17:59 |
| alee | jaosorior, ah ok -- actaully I had that different before .. | 18:00 |
| *** tdink has quit IRC | 18:02 | |
| alee | jaosorior, can you try printing out the ImportError exception? | 18:02 |
| alee | jaosorior, to see if I missed something | 18:02 |
| jaosorior | alee: so that was when I mocked ipalib | 18:06 |
| jaosorior | alee: wait up | 18:06 |
| jaosorior | after letting the code as you had it, I get this | 18:07 |
| jaosorior | alee: can you reply to this https://review.openstack.org/#/c/423510/2 ? | 18:08 |
| jaosorior | alee: and here's what I get http://paste.openstack.org/show/596925/ | 18:08 |
| alee | jaosorior, sorrry - in meeting - responses delayed .. | 18:08 |
| alee | jaosorior, responded | 18:13 |
| jaosorior | thanks | 18:14 |
| alee | jaosorior, can you try printing out an exception in case the import failed .. so something like this .. | 18:17 |
| alee | jaosorior, you can move from barbican.plugin import ipavault as ipav to above the try block | 18:19 |
| alee | so it will always get called | 18:19 |
| alee | and then you'll see why its failing | 18:19 |
| jaosorior | alee: http://paste.openstack.org/show/596926/ | 18:22 |
| alee | jaosorior, and you did copy over ipalib? | 18:23 |
| jaosorior | alee: I did what I pasted there in the beginning of the logs | 18:23 |
| jaosorior | I mean the paste | 18:23 |
| alee | jaosorior, ok - you missed ipalib | 18:24 |
| alee | cp -r /usr/lib/python2.7/site-packages/ipalib .tox/py27/lib/python2.7/site-packages/ | 18:24 |
| jaosorior | alee: ok, it's not fialing in the ldap module | 18:24 |
| jaosorior | ImportError: No module named ldap.dn | 18:24 |
| alee | ok -- yeah - I had that too -- let me see what I did -- | 18:25 |
| alee | jaosorior, I thought adding python-ldap in requirements.txt fixed it | 18:25 |
| jaosorior | alee: I can't even do the tox command with python-ldap in the requirements cause it fails building it | 18:26 |
| jaosorior | :/ | 18:26 |
| alee | jaosorior, it doesn't fail if you doi manualy ... | 18:26 |
| *** armstrong has quit IRC | 18:27 | |
| alee | jaosorior, I'm pretty sure I didn't have to copy it in -- but I guess you can do that till we figure it out | 18:28 |
| *** kfarr has joined #openstack-barbican | 18:29 | |
| alee | jaosorior, I'm confused - with python-ldap in requirements.txt , running tox -r -e py27 fails ? | 18:31 |
| alee | jaosorior, or just fails in the gate? | 18:32 |
| jaosorior | both | 18:33 |
| *** tdink has joined #openstack-barbican | 18:33 | |
| kfarr | dave-mccowan redrobot the castellan gate (and I'm assuming the python-barbicanclient gate) is broken from the ID work that merged in last week. I'm guessing https://review.openstack.org/#/c/382643/ will fix it? | 18:36 |
| dave-mccowan | kfarr yikes! | 18:42 |
| openstackgerrit | Kaitlin Farr proposed openstack/barbican: Add CryptoPluginUnsupportedOperation https://review.openstack.org/417709 | 18:46 |
| *** liujiong_lj has quit IRC | 18:57 | |
| dave-mccowan | Happy Monday, Barbicaneers! Weekly IRC Meeting starts in 45 minutes in #openstack-meeting-alt. | 19:15 |
| jaosorior | kfarr, dave-mccowan, redrobot: So... will that fix it? Seems that the barbican issue is blocking RDO image promotion | 19:22 |
| jaosorior | cause it fails the tests | 19:22 |
| jaosorior | alee: ^^ | 19:23 |
| dave-mccowan | jaosorior kfarr redrobot it seems like it helps it (fixes for secret.id), but does not fix all the cases (like orders.id) | 19:24 |
| jaosorior | dave-mccowan: one option is to revert that change | 19:25 |
| dave-mccowan | jaosorior that's an option. we have to do something pretty quick... we're supposed to cut RC-1 this week. | 19:26 |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Revert "Add ID property to all entities" https://review.openstack.org/426893 | 19:27 |
| jaosorior | dave-mccowan: ^^ | 19:27 |
| *** jaosorior is now known as jaosorior_lunch | 19:28 | |
| alee | dave-mccowan, how come the gate tests did not pick this up? seems like we need to add gate tests for barbican client/ castellan | 19:32 |
| dave-mccowan | alee +1 we should run castellan and client tests for each commit to barbican repo. | 19:33 |
| alee | dave-mccowan, I wont be able to make meeting -- but I'll check online later to see whats up .. | 19:34 |
| alee | dave-mccowan, if we can't fix quickly, we need to revert | 19:34 |
| dave-mccowan | alee i think we need to revert. especially since we have already tagged the Ocata release for Barbican client. | 19:35 |
| *** diazjf has joined #openstack-barbican | 19:35 | |
| dave-mccowan | can you +1 or +2 https://review.openstack.org/426893 | 19:35 |
| dave-mccowan | alee i'd like to get a broad agreement to revert or not. | 19:36 |
| *** mkoderer has quit IRC | 19:46 | |
| *** jmckind_ has joined #openstack-barbican | 19:47 | |
| diazjf | dave-mccowan just commented on that patch | 19:48 |
| *** jmckind has quit IRC | 19:49 | |
| diazjf | When is the cutoff date? We still have some time to add bug fixes, but will need someone to commit. | 19:49 |
| diazjf | kfarr, queueing the castellan patches to re-review this week :) | 19:50 |
| dave-mccowan | diazjf we're supposed to tag a release candidate by the end of this week. barbicanclient's deadline was last week. (i've already tagged the release, so any changes will be a maintenance release). | 19:51 |
| dave-mccowan | diazjf kfarr castellan is not on the official cycle... maybe we should change that? | 19:52 |
| diazjf | dave-mccowan it makes sense to revert the change then. I will +2. kfarr, I think it should have official releases now that it is more mature. Lmk what you think. | 19:54 |
| kfarr | dave-mccowan, back now | 19:57 |
| kfarr | dave-mccowan, what do official releases give us? It's been kind of nice not being on a schedule | 19:59 |
| *** tdink has quit IRC | 19:59 | |
| *** tdink has joined #openstack-barbican | 20:01 | |
| dave-mccowan | meeting starting in #openstack-meeting-alt | 20:01 |
| *** dimtruck is now known as zz_dimtruck | 20:29 | |
| *** kfarr_ has joined #openstack-barbican | 20:39 | |
| *** kfarr has quit IRC | 20:39 | |
| *** kfarr_ has quit IRC | 20:40 | |
| *** kfarr has joined #openstack-barbican | 20:40 | |
| *** tdink_ has joined #openstack-barbican | 20:51 | |
| *** tdink has quit IRC | 20:51 | |
| *** tdink_ has quit IRC | 20:53 | |
| *** tdink has joined #openstack-barbican | 20:53 | |
| *** zz_dimtruck is now known as dimtruck | 21:11 | |
| alee | jaosorior_lunch, you around? | 21:12 |
| *** diazjf has quit IRC | 21:19 | |
| *** jaosorior_lunch is now known as jaosorior | 21:21 | |
| jaosorior | alee: now I am | 21:21 |
| jaosorior | what's up? | 21:21 |
| alee | jaosorior, so first up -- e2e test .. | 21:21 |
| alee | jaosorior, my overcloud deployment failed .. | 21:22 |
| jaosorior | alee: where did it fail? | 21:22 |
| alee | and it looks like it could not resolve dns | 21:22 |
| alee | that is -- I go onto the nodes and I see that cloud-init was run .. | 21:22 |
| jaosorior | alee: did you add the DnsServers value? I think it was in your blog | 21:22 |
| jaosorior | alee: cause that's dynamic, so I can't put it in the enable-internal-tls.yaml | 21:23 |
| alee | ah no ... I figured that was in your patches .. | 21:23 |
| alee | jaosorior, let me check my blog .. | 21:23 |
| jaosorior | alee: ok, remember I had mentioned, I can't put the DNS in the environment, cause that will vary per deployment | 21:23 |
| *** EmilienM has joined #openstack-barbican | 21:24 | |
| EmilienM | hey | 21:24 |
| EmilienM | dave-mccowan: https://review.openstack.org/426930 FYI | 21:24 |
| jaosorior | EmilienM: thanks dude | 21:24 |
| EmilienM | jaosorior: my pleasure | 21:24 |
| jaosorior | dave-mccowan: besides the server-side revert, is there any client-side revert we should do? | 21:25 |
| alee | EmilienM, cool | 21:26 |
| dave-mccowan | jaosorior i'm not sure. we should review the merged queue. hopefully not, since i already cut the Ocata release for python-barbicanclient. | 21:27 |
| dave-mccowan | jaosorior merged queue looks good, i think we're in the clear now. | 21:28 |
| jaosorior | great | 21:29 |
| *** kfarr has quit IRC | 21:34 | |
| jaosorior | dave-mccowan: so EmilienM is adding this patch https://review.openstack.org/#/c/426930/ that will basically test barbican changes via tripleo. We basically just boot a node from an encrypted volume, so it's pretty simple, however, it's good for testing integration | 21:35 |
| EmilienM | yeah and the job is non voting | 21:36 |
| EmilienM | it won't block you never, ever | 21:36 |
| EmilienM | just tell us when it's read | 21:36 |
| EmilienM | red* | 21:36 |
| EmilienM | and we'll tell if it's because of your patch or not | 21:37 |
| EmilienM | actually ask jaosorior :P | 21:37 |
| *** catintheroof has quit IRC | 21:40 | |
| *** tdink has quit IRC | 21:40 | |
| *** catintheroof has joined #openstack-barbican | 21:42 | |
| dave-mccowan | thanks EmilienM! this is great! | 21:47 |
| jaosorior | EmilienM: why is puppet set as the suffix | 21:47 |
| EmilienM | jaosorior: because we have to duplicate the jobs | 21:48 |
| EmilienM | jaosorior: regular scenarios are triggered on specific files changes | 21:48 |
| jaosorior | oh, right | 21:48 |
| EmilienM | but zuul v2.5 doesn't support both rules in same time | 21:48 |
| *** jmckind has joined #openstack-barbican | 21:48 | |
| jaosorior | and we can't trigger it this way cause we want it to be triggered on every barbican change | 21:48 |
| jaosorior | makes sense | 21:48 |
| jaosorior | EmilienM: anyway id zuulv3 fixes this? | 21:48 |
| EmilienM | jaosorior: yes | 21:50 |
| *** jmckind_ has quit IRC | 21:50 | |
| *** catinthe_ has joined #openstack-barbican | 21:52 | |
| jaosorior | dave-mccowan: anyway, if you can take a look at that patch, we need your +1 :D | 21:52 |
| *** catintheroof has quit IRC | 21:53 | |
| *** jmckind has quit IRC | 22:02 | |
| *** diazjf has joined #openstack-barbican | 22:03 | |
| *** catintheroof has joined #openstack-barbican | 22:04 | |
| *** catinthe_ has quit IRC | 22:07 | |
| *** catinthe_ has joined #openstack-barbican | 22:17 | |
| *** catinth__ has joined #openstack-barbican | 22:18 | |
| *** catintheroof has quit IRC | 22:18 | |
| *** catinthe_ has quit IRC | 22:22 | |
| *** diazjf has quit IRC | 22:25 | |
| *** catinth__ has quit IRC | 22:29 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: add ipavault plugin https://review.openstack.org/426825 | 22:46 |
| *** edtubill has quit IRC | 23:01 | |
| *** catintheroof has joined #openstack-barbican | 23:50 | |
| *** dimtruck is now known as zz_dimtruck | 23:57 | |
| *** jamielennox is now known as jamielennox|away | 23:58 | |
| *** jamielennox|away is now known as jamielennox | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!