Wednesday, 2017-02-22

« Tuesday, 2017-02-21 Index Thursday, 2017-02-23 »
*** hoangcx has joined #openstack-barbican00:41
*** zz_dimtruck is now known as dimtruck00:50
*** catintheroof has quit IRC00:51
*** dimtruck is now known as zz_dimtruck01:02
*** zz_dimtruck is now known as dimtruck01:11
*** haplo37_ has quit IRC01:11
*** haplo37 has joined #openstack-barbican01:20
*** openstackgerrit has quit IRC01:23
*** liujiong has joined #openstack-barbican01:34
*** dimtruck is now known as zz_dimtruck01:45
*** arunkant has quit IRC01:46
*** liuhaijie has joined #openstack-barbican02:02
*** nkinder has quit IRC03:01
*** KeithMnemonic has joined #openstack-barbican03:05
*** eandersson has joined #openstack-barbican03:08
eanderssonAny update on fixing MySQL errors related to HA?03:08
eanderssonhttps://bugs.launchpad.net/barbican/+bug/158967303:08
openstackLaunchpad bug 1589673 in Barbican "MySQL server has gone away error related to HA event" [Undecided,New]03:08
eanderssonThis is affecting 50% of all our calls.03:09
eanderssonThe database is Active/Passive, and by-passing the HA component and Barbican is perfectly stable.03:10
*** KeithMnemonic has quit IRC03:15
*** ngupta has quit IRC03:16
*** ngupta has joined #openstack-barbican03:17
*** liuhaijie has quit IRC03:30
*** sapcc-bot has quit IRC03:46
*** sapcc-bot has joined #openstack-barbican03:46
*** nkinder has joined #openstack-barbican04:14
*** openstackgerrit has joined #openstack-barbican05:47
openstackgerritKiran Totad proposed openstack/barbican master: Change Barbican gates to use httpd  https://review.openstack.org/43533205:47
openstackgerritxhzhf proposed openstack/python-barbicanclient master: modify test-requirement according to requirements project  https://review.openstack.org/43678406:41
*** jaosorior has joined #openstack-barbican07:16
*** andreas_s has joined #openstack-barbican07:35
*** jsheeren has joined #openstack-barbican07:44
*** jsheeren has left #openstack-barbican09:10
*** totadkiran has joined #openstack-barbican10:08
*** liujiong has quit IRC10:17
*** hoangcx has quit IRC10:25
*** sapcc-bot has quit IRC10:27
*** carthaca_ has quit IRC10:27
*** databus23_1 has quit IRC10:27
*** databus23_ has joined #openstack-barbican10:27
*** carthaca_ has joined #openstack-barbican10:27
*** dgonzalez_ has joined #openstack-barbican10:27
*** tpatzig_ has joined #openstack-barbican10:27
*** sapcc-bot has joined #openstack-barbican10:27
*** mkoderer_ has joined #openstack-barbican10:27
*** dgonzalez_ has quit IRC10:29
*** tpatzig_ has quit IRC10:29
*** mkoderer_ has quit IRC10:29
*** sapcc-bot has quit IRC10:39
*** carthaca_ has quit IRC10:39
*** databus23_ has quit IRC10:39
*** databus23_2 has joined #openstack-barbican10:39
*** sapcc-bot2 has joined #openstack-barbican10:39
*** mkoderer_ has joined #openstack-barbican10:39
*** carthaca_1 has joined #openstack-barbican10:39
*** tpatzig_ has joined #openstack-barbican10:39
*** dgonzalez_ has joined #openstack-barbican10:39
*** mkoderer_ has quit IRC10:41
*** dgonzalez_ has quit IRC10:41
*** tpatzig_ has quit IRC10:41
*** totadkiran has quit IRC11:10
*** jsheeren has joined #openstack-barbican11:35
*** totadkiran has joined #openstack-barbican12:16
*** totadkiran has quit IRC12:19
*** dgonzalez_ has joined #openstack-barbican12:34
*** mkoderer_ has joined #openstack-barbican12:34
*** tpatzig_ has joined #openstack-barbican12:34
*** mkoderer_ has quit IRC12:38
*** dgonzalez_ has quit IRC12:38
*** tpatzig_ has quit IRC12:38
*** carthaca_1 has quit IRC12:43
*** sapcc-bot2 has quit IRC12:43
*** databus23_2 has quit IRC12:43
*** dgonzalez_ has joined #openstack-barbican12:43
*** carthaca_ has joined #openstack-barbican12:43
*** databus23_ has joined #openstack-barbican12:44
*** mkoderer_ has joined #openstack-barbican12:44
*** tpatzig_ has joined #openstack-barbican12:44
*** sapcc-bot has joined #openstack-barbican12:44
*** pcaruana has joined #openstack-barbican12:44
*** sapcc-bot has quit IRC12:44
*** sapcc-bot has joined #openstack-barbican12:45
*** mkoderer_ has quit IRC12:45
*** carthaca_ has quit IRC12:45
*** dgonzalez_ has quit IRC12:45
*** databus23_ has quit IRC12:45
*** tpatzig_ has quit IRC12:45
*** nkinder has quit IRC13:14
*** chlong has quit IRC13:18
*** sapcc-bot has quit IRC13:37
*** sapcc-bot has joined #openstack-barbican13:37
*** mkoderer_ has joined #openstack-barbican13:37
*** databus23_ has joined #openstack-barbican13:37
*** dgonzalez_ has joined #openstack-barbican13:37
*** carthaca_ has joined #openstack-barbican13:37
*** tpatzig_ has joined #openstack-barbican13:37
*** zz_dimtruck is now known as dimtruck13:39
*** databus23_ has quit IRC13:39
*** dgonzalez_ has quit IRC13:39
*** mkoderer_ has quit IRC13:39
*** carthaca_ has quit IRC13:39
*** tpatzig_ has quit IRC13:39
*** sapcc-bot has quit IRC13:46
*** mkoderer_ has joined #openstack-barbican13:46
*** tpatzig_ has joined #openstack-barbican13:46
*** carthaca_ has joined #openstack-barbican13:46
*** sapcc-bot1 has joined #openstack-barbican13:46
*** databus23_ has joined #openstack-barbican13:46
*** dgonzalez_ has joined #openstack-barbican13:46
*** zhurong has joined #openstack-barbican13:47
*** mkoderer_ has quit IRC13:48
*** carthaca_ has quit IRC13:48
*** tpatzig_ has quit IRC13:48
*** dgonzalez_ has quit IRC13:48
*** databus23_ has quit IRC13:48
*** dave-mccowan has joined #openstack-barbican13:58
*** ngupta has quit IRC14:01
*** ngupta has joined #openstack-barbican14:02
*** ngupta has quit IRC14:06
*** tdink has joined #openstack-barbican14:07
*** dave-mcc_ has joined #openstack-barbican14:07
dave-mcc_Good morning from the PTG Barbicaneers!14:08
jaosoriordave-mcc_: sup dave, how's it going?14:09
*** tdink has quit IRC14:09
*** alee has joined #openstack-barbican14:10
*** dave-mccowan has quit IRC14:10
dave-mcc_Small crowd here.  But we have a good agenda.  Do you want to dial in for a while?14:11
*** KeithMnemonic has joined #openstack-barbican14:11
*** jamielennox|away is now known as jamielennox14:16
jaosoriordave-mcc_: what's the topic? Trying to debug a failed deployment with a colleague14:19
*** jperry has joined #openstack-barbican14:20
*** jrichli has left #openstack-barbican14:20
*** chlong has joined #openstack-barbican14:26
dave-mcc_https://etherpad.openstack.org/p/ptg-barbican-pike14:26
*** david-lyle has joined #openstack-barbican14:27
*** kfarr has joined #openstack-barbican14:28
redrobotbuenos días los barbicaneers!14:35
redrobotI've got about an hour to hang out this morning, but I can hang out all afternoon14:35
redrobothi eandersson14:37
redroboteandersson I'm not familiar with MySQL HA (Posgre fan here), but I think maybe adding oslo.db support may help with this14:38
*** dimtruck is now known as zz_dimtruck14:41
*** jsheeren has left #openstack-barbican14:45
*** ngupta has joined #openstack-barbican14:52
dave-mcc_hi redrobot14:53
redrobothi dave-mcc_14:53
dave-mcc_do you want to dial in now, or wait for this afternoon?14:54
hyakuheidave-mcc_ you should just #openstack-prg14:54
hyakuheisorry14:54
hyakuhei#openstack-ptg14:54
redrobothyakuhei what's going on there?14:56
hyakuheiIt's just somewhere you should keep an eye on during the PTG14:57
redrobotdave-mcc_ what are you guys talking about this am?14:57
redrobothyakuhei ack14:57
hyakuheiredrobot 4 guys from Octavia just walked in and sat down so I guess we're talking about octavia + barbican now14:58
redrobotha, awesome14:58
*** david-lyle_ has joined #openstack-barbican15:00
*** david-lyle has quit IRC15:01
redrobotdave-mcc_ do you guys have a hangout going already?15:01
dave-mcc_no yet15:01
*** zz_dimtruck is now known as dimtruck15:02
*** edtubill has joined #openstack-barbican15:06
*** zhurong has quit IRC15:07
*** chris_hultin|AWA is now known as chris_hultin15:08
redrobotdave-mcc_ I have to run out of here in 30 min, so maybe best for me to join later.  I am interested in Octavia and I'm willing to help on any work items on the barbican side15:09
*** chris_hultin is now known as chris_hultin|AWA15:09
*** chris_hultin|AWA is now known as chris_hultin15:11
dave-mcc_redrobot do you know anything (status update, owner) about cascading ACL feature?15:12
openstackgerritBrianna Poulos proposed openstack/barbican-tempest-plugin master: Add image signing scenario  https://review.openstack.org/43124115:12
redrobotdave-mcc_ no owner/progress afaik15:12
*** jperry has quit IRC15:24
aleeredrobot, awesome we just signed you up for a bunch of work on octavia15:27
redrobotalee lol, sounds awesome15:27
aleeredrobot, there is a cacading acl feature that we discussed for Pike.15:28
redrobotalee where ACL on a container should cascade down to each secret, right?15:28
aleeredrobot, yup15:28
redrobotalee yeah, I can definitely help with spec/implementation of that15:28
aleeredrobot, we talked about getting a spec written with octavia input ot make sure we're covering their use case15:29
aleeredrobot, best thing would be for you and the octavia guys to get together and write up a spec15:30
redrobotalee ack15:30
*** catintheroof has joined #openstack-barbican15:43
*** david-lyle_ has quit IRC15:44
*** johnsom has joined #openstack-barbican15:49
*** jmccrory has joined #openstack-barbican15:50
*** diltram has joined #openstack-barbican15:51
johnsomhttps://bugs.launchpad.net/barbican/+bug/166696315:53
openstackLaunchpad bug 1666963 in Barbican "Enable cascading ACLs based on container ID" [Undecided,New]15:53
diltramhttps://review.openstack.org/#/c/436997/1 - cross repo testing gates15:55
*** r-browne has joined #openstack-barbican15:55
*** jaosorior has quit IRC15:57
*** r-browne has quit IRC16:02
*** tdink has joined #openstack-barbican16:05
*** gyee has joined #openstack-barbican16:10
*** KeithMnemonic has quit IRC16:18
*** KeithMnemonic has joined #openstack-barbican16:19
dave-mcc_redrobot has this been fixed? https://bugs.launchpad.net/barbican/+bug/154537016:26
openstackLaunchpad bug 1545370 in Barbican "pycryptodome breaks nova/barbican/glance/kite" [High,Triaged] - Assigned to Douglas Mendizábal (dougmendizabal)16:26
*** catintheroof has quit IRC16:33
*** catintheroof has joined #openstack-barbican16:38
*** catintheroof has quit IRC16:38
*** catintheroof has joined #openstack-barbican16:38
*** KeithMnemonic has quit IRC16:40
*** catintheroof has quit IRC16:43
*** david-lyle has joined #openstack-barbican16:46
*** david-lyle has quit IRC16:47
*** catintheroof has joined #openstack-barbican16:53
*** gyee has quit IRC16:56
*** catintheroof has quit IRC16:58
*** jamielennox is now known as jamielennox|away17:03
openstackgerritBrianna Poulos proposed openstack/barbican-tempest-plugin master: Add image signing scenario  https://review.openstack.org/43124117:04
dave-mcc_hyakuhei https://review.openstack.org/#/c/426825/17:10
*** kfarr has quit IRC17:11
*** dave-mcc_ has quit IRC17:14
*** catintheroof has joined #openstack-barbican17:15
*** alee has quit IRC17:15
*** andreas_s has quit IRC17:16
*** catintheroof has quit IRC17:18
*** catintheroof has joined #openstack-barbican17:19
*** chris_hultin is now known as chris_hultin|AWA17:47
*** dave-mccowan has joined #openstack-barbican17:50
*** dave-mccowan has quit IRC17:55
*** dave-mccowan has joined #openstack-barbican17:55
*** tdink has quit IRC17:56
*** dave-mccowan has quit IRC18:01
*** dave-mccowan has joined #openstack-barbican18:10
*** tdink has joined #openstack-barbican18:13
eanderssonredrobot: Yea, sounds like it.18:13
eanderssonIs adding oslo.db part of the roadmap for Pike?18:14
*** kfarr has joined #openstack-barbican18:14
*** tdink_ has joined #openstack-barbican18:17
*** tdink has quit IRC18:21
*** david-lyle has joined #openstack-barbican18:22
*** alee has joined #openstack-barbican18:25
openstackgerritKaitlin Farr proposed openstack/barbican master: Change parent class for ListingSecretsTestCase  https://review.openstack.org/43705618:35
*** gyee has joined #openstack-barbican18:35
*** david-lyle has quit IRC18:39
dave-mccowanredrobot let us know when you're back18:41
*** gyee has quit IRC18:41
*** gyee has joined #openstack-barbican18:45
*** KeithMnemonic has joined #openstack-barbican18:49
*** jamielennox|away is now known as jamielennox18:57
*** jperry has joined #openstack-barbican19:00
*** kfarr has quit IRC19:03
*** gyee has quit IRC19:06
*** kfarr has joined #openstack-barbican19:07
redrobotdave-mccowan back!19:09
*** gyee has joined #openstack-barbican19:09
dave-mccowanhttps://review.openstack.org/#/c/426825/19:10
dave-mccowanredrobot can you create a hangout?19:11
*** gyee has quit IRC19:11
*** gyee has joined #openstack-barbican19:12
dave-mccowanor do you want to try a webex?19:12
redrobotdave-mccowan https://hangouts.google.com/call/v3hah4osp5ejpbgwilsssjovsue19:14
*** gyee has quit IRC19:16
*** gyee has joined #openstack-barbican19:21
*** chris_hultin|AWA is now known as chris_hultin19:24
*** gyee has quit IRC19:27
*** david-lyle has joined #openstack-barbican19:33
*** jamielennox is now known as jamielennox|away19:38
*** catintheroof has quit IRC19:48
*** jamielennox|away is now known as jamielennox19:48
redrobothttps://review.openstack.org/#/c/431228/19:56
*** david-lyle_ has joined #openstack-barbican20:06
*** david-lyle has quit IRC20:07
*** catintheroof has joined #openstack-barbican20:11
*** catintheroof has quit IRC20:11
*** catintheroof has joined #openstack-barbican20:12
*** dimtruck is now known as zz_dimtruck20:13
*** david-lyle_ has quit IRC20:30
*** chlong has quit IRC20:33
*** gyee has joined #openstack-barbican20:35
*** chlong has joined #openstack-barbican20:35
*** zz_dimtruck is now known as dimtruck20:37
*** KeithMnemonic has quit IRC20:39
*** jamielennox is now known as jamielennox|away20:39
openstackgerritKaitlin Farr proposed openstack/barbican master: Change tempest find_test_caller import  https://review.openstack.org/43713520:40
*** ngupta has quit IRC20:42
openstackgerritKaitlin Farr proposed openstack/barbican master: Change tempest find_test_caller import  https://review.openstack.org/43713520:43
*** jamielennox|away is now known as jamielennox20:44
catintheroofguys, does barbican supports an api call for an admin to ask for all secrets available ? (like neutron for networks and nova for vms ) ???20:53
*** gyee has quit IRC20:53
*** gyee has joined #openstack-barbican20:55
kfarrcatintheroof yes, a user can list the secrets available20:57
kfarrUsing the API: https://docs.openstack.org/developer/barbican/api/reference/secrets.html#get-v1-secrets20:57
kfarrVia CLI: https://docs.openstack.org/cli-reference/barbican.html20:59
kfarr(see barbican secret list)20:59
kfarrVia python-barbicanclient: https://docs.openstack.org/developer/python-barbicanclient/reference.html#barbicanclient.secrets.SecretManager.list21:00
*** ngupta has joined #openstack-barbican21:09
redrobot https://docs.openstack.org/developer/barbican/setup/dev.html21:09
catintheroofkfarr: but a cloudadmin can ask for all secrets ?21:09
catintheroofkfarr: i mean, ALL ?21:09
*** capnoday has joined #openstack-barbican21:10
catintheroofkfarr: all secrets of all projects ?21:10
*** pcaruana has quit IRC21:12
kfarrcatintheroof, it depends on the ACL policy that's been set for barbican: https://docs.openstack.org/developer/barbican/admin-guide-cloud/access_control.html21:13
kfarrbut the default is that a user with the admin role can retrieve the secrets in any projects that admin has access to21:13
catintheroofkfarr: sorry but, since you dont give project as URL barbican uses de project on the proyect scoped token21:14
catintheroofkfarr: are you telling me that barbican supports domain scoped tokens ? and if NOT, how to i do to call barbican an ask for all secrets ?21:15
kfarryou're right, the admin can access the secrets, but only one project at a time depending on how the token was scoped21:16
kfarras far as I know21:17
kfarrone sec21:17
redrobotbarbican is not aware of domains21:18
redrobotas of Ocata barbican scopes everything at the project level21:19
catintheroofperect, thank you all21:19
redrobotwe require a scoped token and api calls will only list secrets in that project scope21:19
catintheroofdelight21:22
catintheroofthanks21:22
*** dimtruck is now known as zz_dimtruck21:24
*** tdink_ has quit IRC21:25
*** chlong has quit IRC21:25
aleehttps://docs.openstack.org/developer/octavia/guides/basic-cookbook.html#deploy-a-tls-terminated-https-load-balancer21:29
*** gyee has quit IRC21:30
*** tdink has joined #openstack-barbican21:30
*** tdink has quit IRC21:35
*** chlong has joined #openstack-barbican21:39
openstackgerritDoug Chivers proposed openstack/barbican master: Updated readme  https://review.openstack.org/43715521:40
kfarrcapnoday HOST_IP=127.0.0.121:50
hyakuheikfarr capnoday21:50
capnodaythanks :)21:50
*** ngupta has quit IRC21:50
*** ngupta has joined #openstack-barbican21:51
openstackgerritBrianna Poulos proposed openstack/barbican-tempest-plugin master: Add image signing scenario  https://review.openstack.org/43124121:51
*** zz_dimtruck is now known as dimtruck21:51
*** jamielennox is now known as jamielennox|away21:52
aleecapnoday, https://github.com/cloudkeep/barbican-workshop/blob/master/student_image/files/setup_student_vm.sh21:53
*** KeithMnemonic has joined #openstack-barbican21:53
capnodaykfarr https://github.com/openstack/barbican/blob/master/devstack/local.conf.example22:01
openstackgerritKaitlin Farr proposed openstack/barbican master: Update local.conf.example  https://review.openstack.org/43717022:07
openstackgerritDoug Chivers proposed openstack/barbican master: Updated devstack local.conf example to ocata  https://review.openstack.org/43717122:07
*** chlong has quit IRC22:10
openstackgerritKaitlin Farr proposed openstack/barbican master: Change parent class for ListingSecretsTestCase  https://review.openstack.org/43705622:12
redrobothttps://developer.openstack.org/api-guide/key-manager/consumers.html22:22
*** KeithMnemonic has quit IRC22:24
*** KeithMnemonic has joined #openstack-barbican22:25
*** ngupta has quit IRC22:31
*** ngupta has joined #openstack-barbican22:31
*** ngupta has quit IRC22:36
*** dave-mccowan has quit IRC22:46
*** capnoday has quit IRC22:46
*** alee has quit IRC22:46
*** catintheroof has quit IRC22:47
*** kfarr has quit IRC22:48
*** edtubill has quit IRC22:48
*** chris_hultin is now known as chris_hultin|AWA22:54
*** jperry has quit IRC23:01
*** ngupta has joined #openstack-barbican23:23
*** david-lyle has joined #openstack-barbican23:30
*** david-lyle has quit IRC23:35
*** ngupta has quit IRC23:56
*** ngupta has joined #openstack-barbican23:57
« Tuesday, 2017-02-21 Index Thursday, 2017-02-23 »

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!