| *** openstack has joined #openstack-barbican | 06:58 | |
| *** pcaruana has joined #openstack-barbican | 07:47 | |
| *** jaosorior has joined #openstack-barbican | 08:09 | |
| *** liujiong has quit IRC | 10:14 | |
| *** namnh has quit IRC | 10:34 | |
| *** cpuga has joined #openstack-barbican | 11:17 | |
| *** cpuga has quit IRC | 11:19 | |
| *** cpuga has joined #openstack-barbican | 11:20 | |
| *** peter-hamilton has joined #openstack-barbican | 11:33 | |
| *** hieulq has quit IRC | 11:38 | |
| openstackgerrit | M V P Nitesh proposed openstack/barbican master: Replaces uuid.uuid4 with uuidutils.generate_uuid() https://review.openstack.org/464622 | 12:09 |
|---|---|---|
| *** zz_dimtruck is now known as dimtruck | 12:19 | |
| *** ssmith has joined #openstack-barbican | 12:22 | |
| *** noslzzp has joined #openstack-barbican | 12:34 | |
| *** dimtruck is now known as zz_dimtruck | 12:45 | |
| *** zz_dimtruck is now known as dimtruck | 12:48 | |
| *** dave-mccowan has joined #openstack-barbican | 12:51 | |
| *** cpuga has quit IRC | 12:51 | |
| *** cpuga has joined #openstack-barbican | 12:52 | |
| *** cpuga_ has joined #openstack-barbican | 12:53 | |
| *** cpuga has quit IRC | 12:57 | |
| *** jaosorior has quit IRC | 13:15 | |
| *** andreas_s has quit IRC | 13:25 | |
| *** noslzzp has quit IRC | 13:25 | |
| *** andreas_s has joined #openstack-barbican | 13:29 | |
| *** dimtruck is now known as zz_dimtruck | 13:46 | |
| *** nkinder has quit IRC | 14:03 | |
| *** zz_dimtruck is now known as dimtruck | 14:13 | |
| *** nkinder has joined #openstack-barbican | 14:15 | |
| openstackgerrit | Jackie Truong proposed openstack/barbican-tempest-plugin master: Add ephemeral disk encryption scenario test https://review.openstack.org/455459 | 14:26 |
| *** diazjf has joined #openstack-barbican | 14:32 | |
| *** namnh has joined #openstack-barbican | 14:41 | |
| namnh | dave-mccowan: hello Dave, I am going to come back the offline upgrade task for now, could you please help me to review some patch such as: https://review.openstack.org/#/c/452679/ and https://review.openstack.org/#/c/449022/ | 14:44 |
| dave-mccowan | hi namnh! sure, i'll take a look. thanks! | 14:44 |
| namnh | today, is there the meeting as usuall? | 14:45 |
| namnh | dave-mccowan: | 14:45 |
| dave-mccowan | namnh yes | 14:45 |
| *** diazjf has quit IRC | 14:46 | |
| namnh | today, I will try to get up at that time, but if not, could you please talk with other core-reviewers for helping me to review, i am trying to finish this task as soon as possible, I saw this one in the project update slide :) | 14:49 |
| namnh | dave-mccowan: and I am thinking about rolling-upgrade for barbican :) | 14:49 |
| namnh | dave-mccowan: if i finish the offline upgrade task | 14:49 |
| *** diazjf has joined #openstack-barbican | 14:52 | |
| *** namnh has quit IRC | 14:54 | |
| *** namnh has joined #openstack-barbican | 14:54 | |
| *** diazjf has quit IRC | 15:01 | |
| *** noslzzp has joined #openstack-barbican | 15:03 | |
| *** diazjf has joined #openstack-barbican | 15:10 | |
| *** pcaruana has quit IRC | 15:25 | |
| *** diazjf has quit IRC | 15:30 | |
| *** diazjf has joined #openstack-barbican | 15:32 | |
| *** diazjf has quit IRC | 15:33 | |
| *** andreas_s has quit IRC | 15:39 | |
| *** diazjf has joined #openstack-barbican | 15:43 | |
| *** jaosorior has joined #openstack-barbican | 15:51 | |
| *** noslzzp has quit IRC | 16:23 | |
| *** diazjf has quit IRC | 16:45 | |
| *** diazjf has joined #openstack-barbican | 16:48 | |
| *** namnh has quit IRC | 16:51 | |
| *** diazjf has joined #openstack-barbican | 16:56 | |
| *** diazjf has quit IRC | 17:06 | |
| *** noslzzp has joined #openstack-barbican | 17:13 | |
| *** noslzzp has quit IRC | 17:19 | |
| openstackgerrit | Merged openstack/barbican master: Updated from global requirements https://review.openstack.org/464357 | 17:20 |
| *** noslzzp has joined #openstack-barbican | 17:21 | |
| *** noslzzp has quit IRC | 17:26 | |
| *** livelace has quit IRC | 17:41 | |
| *** noslzzp has joined #openstack-barbican | 18:08 | |
| *** noslzzp has quit IRC | 18:12 | |
| *** diazjf has joined #openstack-barbican | 18:14 | |
| diazjf | dave-mccowan, I wont be able to attend the meeting today. Will check history later. Just wanted to add if anyone can review https://review.openstack.org/#/c/462363/ | 18:20 |
| dave-mccowan | thanks diazjf | 18:21 |
| *** diazjf has quit IRC | 18:58 | |
| dave-mccowan | Happy Monday Barbicaneers! Weekly IRC meeting starts in one hour | 19:00 |
| *** dwannamaker has joined #openstack-barbican | 19:02 | |
| dwannamaker | hey guys, I've got perhaps a simple question. I'm close to get barbican working but for some reason when attaching a volume it's requesting the secret from GET /secrets/00000000-0000-0000-0000-000000000000 - by the python-keystoneclient, where does keystone determine the secret? do I need to define it somewhere? | 19:03 |
| dwannamaker | 2017-05-15 13:59:24.223 ERROR barbicanclient.client [req-6565ccab-5d49-4491-9683-c7990155f2b1 dwannamaker@onr.com DuncanTest] 4xx Client error: Not Found | 19:05 |
| dwannamaker | 2017-05-15 13:59:24.224 ERROR nova.keymgr.barbican [req-6565ccab-5d49-4491-9683-c7990155f2b1 dwannamaker@onr.com DuncanTest] Error getting secret data: Not Found | 19:05 |
| dwannamaker | 2017-05-15 13:59:24.224 ERROR nova.keymgr.barbican [req-6565ccab-5d49-4491-9683-c7990155f2b1 dwannamaker@onr.com DuncanTest] Error getting key: Not Found | 19:05 |
| dwannamaker | ahh, perhaps I've found the answer: https://bugs.launchpad.net/nova/+bug/1599385 | 19:08 |
| openstack | Launchpad bug 1599385 in OpenStack Compute (nova) "barbican's secret_ref created by nova misses barbican version" [Undecided,Invalid] | 19:08 |
| dwannamaker | looks like I need endpoint_template manually defined in nova.conf under the [barbican] section | 19:14 |
| dwannamaker | well, to be honest, it looks like this is just overriding whats coming from keystone's service definition, is my service definition incorrect? | 19:18 |
| dwannamaker | yep! no /v1 on the end of my endpoint URLs | 19:22 |
| dwannamaker | Well, so adding the v1 to the API endpoint for Barbican fixes the URL but not the root problem of no SECRET-REF being created in barbican when a volume is created. | 19:32 |
| dwannamaker | HTTPClientError: Not Found: Not Found. Provided secret id is invalid. | 19:32 |
| dave-mccowan | dwannamaker did you make the same config updates to both cinder and nova? | 19:33 |
| dave-mccowan | dwannamaker cinder creates the secret, and then nova reads the secret. | 19:34 |
| *** nkinder has quit IRC | 19:35 | |
| dwannamaker | dave-mccowan: hey Dave, thanks - I do have the api_class = cinder.keymgr.barbican.BarbicanKeyManager added to the [keymgr] section of cinder - but that's it | 19:35 |
| dave-mccowan | dwannamaker i also set encryption_auth_url and encryption_api_url under [keymgr]. although, i don't know for sure if that is required. | 19:38 |
| dwannamaker | dave-mccowan: thanks, I'll give it a shot | 19:41 |
| dwannamaker | gotta run to an appointment, I'll report later if success. | 19:44 |
| *** dwannamaker has quit IRC | 19:49 | |
| *** diazjf has joined #openstack-barbican | 19:51 | |
| *** diazjf has quit IRC | 19:56 | |
| openstackgerrit | Merged openstack/castellan master: Updated from global requirements https://review.openstack.org/464361 | 19:57 |
| openstackgerrit | Merged openstack/python-barbicanclient master: Updated from global requirements https://review.openstack.org/464460 | 19:59 |
| *** nkinder has joined #openstack-barbican | 20:12 | |
| *** ssmith has quit IRC | 20:21 | |
| *** nkinder has quit IRC | 20:27 | |
| *** dave-mccowan has quit IRC | 20:52 | |
| *** dimtruck is now known as zz_dimtruck | 21:05 | |
| *** Kevin_Zheng has quit IRC | 21:21 | |
| *** nkinder has joined #openstack-barbican | 21:25 | |
| *** dwannamaker has joined #openstack-barbican | 21:57 | |
| *** dwannamaker has quit IRC | 21:59 | |
| *** zz_dimtruck is now known as dimtruck | 21:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!