| *** daidv has quit IRC | 00:53 | |
| *** liujiong has joined #openstack-barbican | 01:19 | |
| *** randomhack has joined #openstack-barbican | 01:41 | |
| *** randomhack has quit IRC | 01:46 | |
| *** daidv has joined #openstack-barbican | 02:58 | |
| *** dave-mccowan has quit IRC | 03:09 | |
| *** jaosorior has joined #openstack-barbican | 05:24 | |
| *** randomhack has joined #openstack-barbican | 05:42 | |
| *** randomhack has quit IRC | 05:47 | |
| openstackgerrit | Rajat Sharma proposed openstack/python-barbicanclient master: Add 'rm -f .testrepository/times.dbm' command in testenv https://review.openstack.org/487797 | 06:14 |
|---|---|---|
| openstackgerrit | melissaml proposed openstack/barbican master: Update openstackdocstheme>=1.16.0 https://review.openstack.org/491359 | 06:18 |
| *** randomhack has joined #openstack-barbican | 08:18 | |
| *** randomhack has quit IRC | 08:24 | |
| *** shohel has joined #openstack-barbican | 08:24 | |
| *** shohel has quit IRC | 08:29 | |
| openstackgerrit | Nam Nguyen Hoai proposed openstack/barbican-specs master: Specs rolling upgrade for Barbican https://review.openstack.org/472612 | 08:43 |
| *** jaosorior has quit IRC | 09:27 | |
| *** salmankhan has joined #openstack-barbican | 09:31 | |
| *** hieulq has quit IRC | 09:32 | |
| *** daidv has quit IRC | 09:32 | |
| *** daidv has joined #openstack-barbican | 09:33 | |
| *** hieulq has joined #openstack-barbican | 09:33 | |
| *** jaosorior has joined #openstack-barbican | 09:45 | |
| openstackgerrit | Nam Nguyen Hoai proposed openstack/barbican master: Create multiple phases to upgrade Barbican database https://review.openstack.org/473658 | 09:45 |
| *** liujiong has quit IRC | 10:18 | |
| *** salmankhan has quit IRC | 10:25 | |
| *** salmankhan has joined #openstack-barbican | 10:25 | |
| *** strigazi_OFF is now known as strigazi | 11:05 | |
| *** salmankhan has quit IRC | 11:18 | |
| *** salmankhan has joined #openstack-barbican | 11:18 | |
| *** catintheroof has joined #openstack-barbican | 11:28 | |
| *** catintheroof has quit IRC | 11:38 | |
| *** catintheroof has joined #openstack-barbican | 11:50 | |
| *** catintheroof has quit IRC | 11:55 | |
| *** raildo has joined #openstack-barbican | 12:00 | |
| *** catintheroof has joined #openstack-barbican | 12:30 | |
| *** dave-mccowan has joined #openstack-barbican | 12:50 | |
| *** livelace2 has joined #openstack-barbican | 13:38 | |
| *** randomhack has joined #openstack-barbican | 13:53 | |
| *** openstackstatus has quit IRC | 16:42 | |
| *** openstackstatus has joined #openstack-barbican | 16:43 | |
| *** ChanServ sets mode: +v openstackstatus | 16:43 | |
| *** pcaruana has quit IRC | 17:15 | |
| *** randomhack has quit IRC | 17:35 | |
| *** randomhack has joined #openstack-barbican | 17:38 | |
| *** randomhack has quit IRC | 18:04 | |
| *** salmankhan has quit IRC | 18:12 | |
| *** csaikia has joined #openstack-barbican | 18:17 | |
| csaikia | hey I am trying to authenticate a keystone session for Barbican using the devstack deployment. I am not able to authenticate the session and it always gives me the error " The resource could not be found." | 18:18 |
| csaikia | Can anyone help me out with it? | 18:18 |
| csaikia | I am using a Python shell | 18:19 |
| *** livelace2 has quit IRC | 18:20 | |
| *** randomhack has joined #openstack-barbican | 18:30 | |
| *** kfarr has joined #openstack-barbican | 18:34 | |
| dave-mccowan | csaikia do you have some more details on how you're trying to authenticate a keystone session? | 18:56 |
| dave-mccowan | Happy Monday Barbicaneers! Reminder, weekly IRC meeting is today in one hour in #openstack-meting-alt | 18:56 |
| *** salmankhan has joined #openstack-barbican | 19:26 | |
| csaikia | dave-mccowan I am following Keystone API Version 3 authentication from this doc: https://docs.openstack.org/python-barbicanclient/latest/cli/authentication.html and using the environment variables set by devstack. | 19:28 |
| csaikia | dave-mccowan my auth_url from devstack however looks like this: http://1X.1X.5X.1XX/identity | 19:30 |
| *** salmankhan has quit IRC | 19:30 | |
| *** randomhack has quit IRC | 19:34 | |
| dave-mccowan | csaikia are you getting "resource not found" in the barbican logs, or as output from an openstack command you entered? | 19:38 |
| *** randomhack has joined #openstack-barbican | 19:41 | |
| csaikia | I am getting it as an exception when I am creating a secret object in the python shell and then doing a secret.store() | 19:43 |
| csaikia | dave-mccowan I am not using openstack command | 19:44 |
| openstackgerrit | Merged openstack/castellan master: Updated from global requirements https://review.openstack.org/490846 | 19:45 |
| csaikia | dave-mccowan I am using secret = barbican.secrets.create(<content>) and then doing a secret.store() | 19:46 |
| dave-mccowan | csaikia secret.store() is returning 404? or is it identity.V3Password()? | 19:47 |
| csaikia | dave-mccowan secret.store() is. Also, following the doc link i mentioned, a sess.get_user_id() is also giving me the same exception | 19:51 |
| csaikia | Please let me know if I am using the correct auth_url | 19:51 |
| csaikia | and correct credentials to create a session. I am using the env variables devstack had set | 19:52 |
| dave-mccowan | csaikia i know there has been some changes with keystone url recently. i think /identity is right. they removed support for :5000. | 20:03 |
| dave-mccowan | csaikia can you do other keystone commands? i think the first step, before using barbican client, is to make sure keystone api is working. | 20:04 |
| openstackgerrit | Merged openstack/barbican master: Remove install-guide env which is no longer effective https://review.openstack.org/489136 | 20:05 |
| csaikia | [stack@devstack3 devstack]$ systemctl | grep keystone | 20:05 |
| csaikia | devstack@keystone.service loaded active running Devstack devstack@keystone.service | 20:05 |
| csaikia | dave-mccowan it is running fine when I am using all the openstack/nova/cinder commands but not within the shell | 20:06 |
| csaikia | I can see a set of conf variables in /etc/barbican/barbican.conf file which I also used to create a session, but that fails as well. | 20:07 |
| dave-mccowan | csaikia it sounds like it's not specific to barbican then? maybe the keystone guys will know better. | 20:09 |
| openstackgerrit | Merged openstack/barbican master: Updated from global requirements https://review.openstack.org/487457 | 20:11 |
| openstackgerrit | Merged openstack/barbican master: Use devstack functions for deploying barbican-svc https://review.openstack.org/476996 | 20:12 |
| *** rfxn has joined #openstack-barbican | 20:14 | |
| openstackgerrit | Kaitlin Farr proposed openstack/barbican-tempest-plugin master: test https://review.openstack.org/485293 | 20:16 |
| csaikia | dave-mccowan okay thank you! | 20:19 |
| dave-mccowan | csaikia please come back and let us know what you find out, especially if it does seem to be a problem with barbican or barbican documentation. | 20:20 |
| *** nkinder has quit IRC | 20:23 | |
| rfxn | is a HSM absolutely needed w/ barbican? | 20:24 |
| *** nkinder has joined #openstack-barbican | 20:24 | |
| dave-mccowan | rfxn there are configuration options that work without an HSM. it depends on your security needs. | 20:28 |
| rfxn | @dave-mccowan any good examples that you can help point me too :) ? | 20:30 |
| dave-mccowan | rfxn https://docs.openstack.org/barbican/ocata/setup/plugin_backends.html | 20:32 |
| dave-mccowan | simple_crypto and dogtag_plugin do not use an hsm | 20:32 |
| dave-mccowan | rfxn simple_crypto is generally considered not secure, since secrets are encrypted using a fixed key stored in the barbican.conf file. however, that is the quickest/easiest way to get going. | 20:34 |
| *** randomha1k has joined #openstack-barbican | 20:40 | |
| *** randomhack has quit IRC | 20:43 | |
| *** randomha1k has quit IRC | 20:44 | |
| rfxn | dave-mccowan, thx, gotcha! | 20:49 |
| rfxn | dogtag is out but for now think simple_crypto will be just fine | 20:49 |
| kfarr | dave-mccowan I am seeing that error from the uwsgi branch in barbican-tempest-plugin now | 21:04 |
| kfarr | https://review.openstack.org/#/c/485293/ | 21:04 |
| dave-mccowan | kfarr yea, it looks like glance is failing on a PUT image. | 21:08 |
| dave-mccowan | kfarr https://bugs.launchpad.net/glance/+bug/1703856 | 21:09 |
| openstack | Launchpad bug 1703856 in Glance "502 Bad gateway error on image-create" [High,Confirmed] | 21:09 |
| kfarr | dave-mccowan oh great, glad you found that bug report. glad it's not a barbican issue | 21:12 |
| *** chaynikasaikia has joined #openstack-barbican | 21:13 | |
| *** Teck7 has joined #openstack-barbican | 21:13 | |
| dave-mccowan | kfarr the comments in the bug show that we can increase the socket timeout in glance-api.conf as a workaround. maybe that is something we can do for tempest tests. | 21:14 |
| *** csaikia has quit IRC | 21:15 | |
| kfarr | dave-mccowan, ok I will look into that! gotta go for now | 21:17 |
| *** kfarr has quit IRC | 21:17 | |
| *** rfxn has quit IRC | 21:17 | |
| *** chaynikasaikia has quit IRC | 21:18 | |
| *** catintheroof has quit IRC | 21:20 | |
| *** rfxn has joined #openstack-barbican | 21:23 | |
| *** Teck7 has quit IRC | 21:26 | |
| *** csaikia has joined #openstack-barbican | 21:51 | |
| *** pbourke has quit IRC | 23:06 | |
| *** pbourke has joined #openstack-barbican | 23:08 | |
| *** catintheroof has joined #openstack-barbican | 23:28 | |
| -openstackstatus- NOTICE: The Gerrit service on review.openstack.org will be offline momentarily at 00:00 utc for a quick reconfiguration-related restart | 23:32 | |
| *** raildo has quit IRC | 23:35 | |
| *** catintheroof has quit IRC | 23:50 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!