| *** dave-mccowan has joined #openstack-barbican | 01:06 | |
| *** liujiong has joined #openstack-barbican | 01:31 | |
| *** hieulq has quit IRC | 03:57 | |
| *** hieulq has joined #openstack-barbican | 03:57 | |
| *** dave-mccowan has quit IRC | 04:01 | |
| *** agrebennikov has quit IRC | 04:15 | |
| *** noslzzp_ has quit IRC | 04:25 | |
| *** noslzzp has joined #openstack-barbican | 04:25 | |
| *** noslzzp has quit IRC | 04:31 | |
| *** agrebennikov has joined #openstack-barbican | 04:50 | |
| *** noslzzp has joined #openstack-barbican | 05:28 | |
| *** noslzzp has quit IRC | 05:33 | |
| *** nkinder has quit IRC | 05:42 | |
| *** agrebennikov has quit IRC | 05:47 | |
| *** andreas_s has joined #openstack-barbican | 06:32 | |
| openstackgerrit | Spencer Yu proposed openstack/castellan master: Replace LOG.warn with LOG.warning https://review.openstack.org/485073 | 07:22 |
|---|---|---|
| *** catintheroof has joined #openstack-barbican | 07:31 | |
| *** catintheroof has quit IRC | 07:36 | |
| *** liujiong has quit IRC | 08:09 | |
| *** daidv__ has quit IRC | 08:30 | |
| *** openstackgerrit has quit IRC | 08:49 | |
| *** mjblack has quit IRC | 09:10 | |
| *** salmankhan has joined #openstack-barbican | 09:18 | |
| *** openstackgerrit has joined #openstack-barbican | 09:40 | |
| openstackgerrit | Paul Bourke (pbourke) proposed openstack/castellan master: Fix retrieving barbican endpoint from service catalog https://review.openstack.org/483457 | 09:40 |
| *** salmankhan has quit IRC | 10:32 | |
| *** salmankhan has joined #openstack-barbican | 10:36 | |
| *** andreas_s has quit IRC | 10:57 | |
| *** dave-mccowan has joined #openstack-barbican | 11:26 | |
| *** noslzzp has joined #openstack-barbican | 11:33 | |
| *** noslzzp has quit IRC | 11:37 | |
| *** chlong_ has quit IRC | 11:43 | |
| *** raildo has joined #openstack-barbican | 12:01 | |
| *** noslzzp has joined #openstack-barbican | 12:06 | |
| *** catintheroof has joined #openstack-barbican | 12:21 | |
| dave-mccowan | alee ping | 12:41 |
| dave-mccowan | alee in https://review.openstack.org/#/c/476995/ one of the triple-o gates is failing. do you know who can take a look to determine if it's a barbican issue? | 12:42 |
| *** randomhack has joined #openstack-barbican | 13:11 | |
| openstackgerrit | Merged openstack/barbican master: Using openstack command https://review.openstack.org/478371 | 13:31 |
| *** agrebennikov has joined #openstack-barbican | 13:36 | |
| *** alee_ has joined #openstack-barbican | 13:38 | |
| alee_ | dave-mccowan, did you piing me? | 13:39 |
| dave-mccowan | alee in https://review.openstack.org/#/c/476995/ one of the triple-o gates is failing. do you know who can take a look to determine if it's a barbican issue? | 13:40 |
| dave-mccowan | alee_ | 13:40 |
| alee_ | dave-mccowan, looking | 13:41 |
| alee_ | dave-mccowan, looks like a failure to build the barbican rpm | 13:42 |
| alee_ | dave-mccowan, I'll need to investigate | 13:43 |
| alee_ | dave-mccowan, Checking for unpackaged file(s): /usr/lib/rpm/check-files /builddir/build/BUILDROOT/openstack-barbican-5.0.0-0.20170714205434.69561af.el7.centos.x86_64 | 13:45 |
| alee_ | error: Installed (but unpackaged) file(s) found: | 13:45 |
| alee_ | /usr/bin/barbican-wsgi-api | 13:45 |
| alee_ | Installed (but unpackaged) file(s) found: | 13:45 |
| alee_ | /usr/bin/barbican-wsgi-api | 13:45 |
| alee_ | dave-mccowan, seems like a change is needed in the spec file as a result of this change | 13:46 |
| *** kfarr has joined #openstack-barbican | 13:52 | |
| *** nkinder has joined #openstack-barbican | 14:01 | |
| dave-mccowan | alee_ can you add comment to code review with what's needed? | 14:21 |
| alee_ | dave-mccowan, ok | 14:22 |
| kfarr | dave-mccowan when you get a chance, can you please review this one? https://review.openstack.org/#/c/455459/ | 15:18 |
| *** agrebennikov has quit IRC | 15:22 | |
| dave-mccowan | kfarr this week is castellan release week, next week is python-barbicanclient release and barbican milestone 3 week | 15:24 |
| dave-mccowan | kfarr i'm going to be on pto next week, so was thinking about releasing early for barbican client. we should sync with oslo guys on castellan release. | 15:24 |
| dave-mccowan | kfarr any last minute requirements? | 15:25 |
| kfarr | dave-mccowan I think castellan already had the final release | 15:25 |
| kfarr | dave-mccowan https://review.openstack.org/#/c/484727/ | 15:26 |
| kfarr | I'm taking a look at what's in the python-barbicanclient queue | 15:27 |
| dave-mccowan | kfarr yep. i guess we need to be very proactive if we want to sync with them. :-) | 15:27 |
| kfarr | dave-mccowan we'll need to get this in: https://review.openstack.org/#/c/484926/1 | 15:28 |
| kfarr | did you see the issue about the latest python-barbicanclient breaking heat? | 15:28 |
| dave-mccowan | kfarr yike, lots of gates broken on that patch. and, no i missed the heat breakage. | 15:30 |
| kfarr | dave-mccowan ok wait it seems that python-barbicanclient change might be unrelated | 15:31 |
| kfarr | looks like the heat bug is fixed | 15:31 |
| kfarr | https://bugs.launchpad.net/heat/+bug/1704725 | 15:31 |
| openstack | Launchpad bug 1704725 in heat "heat engine does not start in py3 job" [High,Fix released] - Assigned to Rabi Mishra (rabi) | 15:31 |
| *** randomhack has quit IRC | 15:32 | |
| dave-mccowan | we merged the refactor barbican client change that jeremy wrote months ago. it added a /v1. i wonder if that caused the heat error. hopefully there is no other cross-project issues. | 15:34 |
| kfarr | dave-mccowan yes it looks like the heat bug was caused by that change -- it was ok for most projects, but it looks like the heat issue was that they were pulling in a lot of the barbican objects directly so they could mock them | 15:35 |
| kfarr | oh they aren't even mocking them, they are just calling client().containers._api directly, not sure why | 15:37 |
| kfarr | Anyway, we'll still need to fix up and get https://review.openstack.org/#/c/484926/1 in, otherwise openstack client is broken | 15:38 |
| *** randomhack has joined #openstack-barbican | 15:44 | |
| dims | kfarr : any opinion on doug's suggestion here? https://review.openstack.org/#/c/484015/4/castellan/key_manager/__init__.py | 15:56 |
| dims | dave-mccowan : ^ | 15:56 |
| dave-mccowan | dims i'll defer to you, doug, and kfarr. python entry points are not in my wheelhouse. | 15:59 |
| kfarr | dims how does stevedore work if there is a back end that is not part of castellan ? | 16:00 |
| kfarr | dims i.e. confkeymanager in cinder and nova | 16:00 |
| kfarr | dims do all the possible back ends need to be registered in the "choices" field for the "backend" config option? | 16:01 |
| dims | kfarr : cinder and nova can add a castellan.drivers = in their own setup.cfg pointing to their custom key managers. | 16:02 |
| dims | kfarr : no, it's not necessary for them to be listed there to be used. | 16:02 |
| kfarr | dims ok thanks I am also not that familiar with python entry points :) | 16:02 |
| dims | it's a hint for generating docs etc | 16:02 |
| kfarr | dims so doug's suggestion is to have two entry point names for, say, barbican: "barbican" and "castellan.key_manager.barbican_key_manager.BarbicanKeyManager" | 16:04 |
| kfarr | which would both utilize the same back end | 16:04 |
| kfarr | and then if neither of those are found, default back to the import_class method | 16:05 |
| dims | right | 16:05 |
| dims | i kinda like it | 16:05 |
| dims | if it's ok with you i will rework per his suggestion | 16:05 |
| kfarr | it would be just a migration step, and eventually we'd get to a point where the only option is "barbican"? | 16:06 |
| dims | yep | 16:06 |
| dims | we could log warning for deprecating | 16:06 |
| kfarr | dims for the fully qualified alias for stevedore, would that make things more annoying to deprecate/remove in the future? | 16:07 |
| dims | we have done it before for oslo.messaging i think | 16:08 |
| kfarr | dims yes let's go ahead and do that, it seems a little more robust | 16:10 |
| kfarr | "that" meaning doug's suggestion | 16:10 |
| dims | cool will do "that" this after noon :) | 16:10 |
| kfarr | thanks dims | 16:11 |
| *** ssmith has joined #openstack-barbican | 16:29 | |
| ssmith | Does anyone know how to list the contents of a secret? | 16:29 |
| kfarr | ssmith are you using the python client or the CLI ? | 16:31 |
| ssmith | both | 16:31 |
| ssmith | I have both | 16:31 |
| ssmith | python-barbicanclient so I've tried the barbican command and openstack secret command. I want to check if a intermediate cert was correctly inserted | 16:33 |
| kfarr | ssmith you should be able to use "barbican secret get <href>--payload | 16:34 |
| kfarr | "barbican secret get <href> --payload" | 16:34 |
| ssmith | awesome...worked | 16:35 |
| kfarr | ssmith great! | 16:35 |
| ssmith | One other thing. Where cascading acl's ever implemented in barbican yet? | 16:36 |
| kfarr | ssmith to my knowledge, no, it looks like this bug is still outstanding: https://bugs.launchpad.net/barbican/+bug/1666963 | 16:38 |
| openstack | Launchpad bug 1592612 in octavia "duplicate for #1666963 LBaaS TLS is not working with non-admin tenant" [High,Confirmed] | 16:38 |
| ssmith | OK, thanks | 16:39 |
| *** randomhack has quit IRC | 16:53 | |
| *** randomhack has joined #openstack-barbican | 16:56 | |
| *** salmankhan has quit IRC | 16:58 | |
| *** salmankhan has joined #openstack-barbican | 17:00 | |
| openstackgerrit | Kaitlin Farr proposed openstack/barbican-tempest-plugin master: test https://review.openstack.org/485293 | 17:44 |
| *** randomhack has quit IRC | 17:53 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/castellan master: Use Stevedore for better extensions https://review.openstack.org/484015 | 17:55 |
| kfarr | randomhack I am seeing a similar problem that you were seeing | 18:03 |
| kfarr | all of a sudden, on master branches of things | 18:03 |
| kfarr | and I am not sure what caused the change, but I am looking into it | 18:03 |
| kfarr | I am not sure if the behavior of set_default changed | 18:04 |
| kfarr | but I am also not sure if that would affect newton | 18:04 |
| *** randomhack has joined #openstack-barbican | 18:28 | |
| *** randomhack has quit IRC | 18:33 | |
| *** randomhack has joined #openstack-barbican | 18:36 | |
| *** alee has quit IRC | 18:38 | |
| *** kfarr has quit IRC | 18:46 | |
| *** randomhack has quit IRC | 18:47 | |
| *** salmankhan has quit IRC | 18:54 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/castellan master: Use Stevedore for better extensions https://review.openstack.org/484015 | 19:08 |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/castellan master: Use Stevedore for better extensions https://review.openstack.org/484015 | 19:14 |
| *** chlong_ has joined #openstack-barbican | 19:16 | |
| openstackgerrit | Thiago da Silva proposed openstack/python-barbicanclient master: fix default version https://review.openstack.org/484926 | 19:42 |
| *** tinyurl_comSLASH has joined #openstack-barbican | 19:59 | |
| *** tinyurl_comSLASH has left #openstack-barbican | 20:02 | |
| *** chlong_ has quit IRC | 20:03 | |
| *** raildo has quit IRC | 20:21 | |
| *** chlong_ has joined #openstack-barbican | 20:48 | |
| *** chlong_ has quit IRC | 21:04 | |
| openstackgerrit | Kaitlin Farr proposed openstack/barbican-tempest-plugin master: test https://review.openstack.org/485293 | 21:16 |
| *** randomhack has joined #openstack-barbican | 21:44 | |
| *** cpusmith has joined #openstack-barbican | 21:50 | |
| *** ssmith has quit IRC | 21:53 | |
| *** cpusmith has quit IRC | 21:54 | |
| *** randomhack has quit IRC | 22:28 | |
| *** ssmith has joined #openstack-barbican | 22:44 | |
| *** catintheroof has quit IRC | 23:03 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!