*** hieulq has joined #openstack-barbican | 01:00 | |
*** agrebennikov has joined #openstack-barbican | 01:43 | |
*** agrebennikov has quit IRC | 01:48 | |
*** liujiong has joined #openstack-barbican | 01:48 | |
openstackgerrit | Jeremy Liu proposed openstack/python-barbicanclient master: Switch to use new barbican endpoint https://review.openstack.org/519213 | 02:11 |
---|---|---|
openstackgerrit | Jeremy Liu proposed openstack/python-barbicanclient master: Switch to use new barbican endpoint https://review.openstack.org/519213 | 02:52 |
*** namnh has joined #openstack-barbican | 03:48 | |
*** nkinder has joined #openstack-barbican | 04:41 | |
*** eN_Guruprasad_Rn has joined #openstack-barbican | 05:29 | |
*** jaosorior has joined #openstack-barbican | 06:56 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican master: Imported Translations from Zanata https://review.openstack.org/518851 | 07:35 |
openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican master: Take context from environment instead of parsing headers https://review.openstack.org/518753 | 07:54 |
openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican master: Fix Dogtag mode on key generation https://review.openstack.org/512668 | 07:55 |
*** pcaruana has joined #openstack-barbican | 08:10 | |
*** serlex has joined #openstack-barbican | 08:11 | |
*** alee has quit IRC | 08:19 | |
*** liujiong has quit IRC | 08:24 | |
*** alee has joined #openstack-barbican | 08:57 | |
*** strigazi_ is now known as strigazi | 09:11 | |
*** slunkad has joined #openstack-barbican | 09:42 | |
*** liujiong has joined #openstack-barbican | 09:48 | |
*** eN_Guruprasad_Rn has quit IRC | 09:55 | |
*** salmankhan has joined #openstack-barbican | 10:07 | |
*** liujiong has quit IRC | 10:11 | |
*** namnh has quit IRC | 10:13 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican master: Updated from global requirements https://review.openstack.org/519085 | 10:16 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/castellan master: Updated from global requirements https://review.openstack.org/519087 | 10:17 |
AJaeger | barbican team, please review https://review.openstack.org/517212 for zuul v3 migration of the tempest plugin | 10:17 |
*** pbourke has quit IRC | 10:21 | |
*** raildo has joined #openstack-barbican | 12:00 | |
*** pbourke has joined #openstack-barbican | 12:05 | |
*** salmankhan has quit IRC | 12:27 | |
*** salmankhan has joined #openstack-barbican | 12:29 | |
*** salmankhan has quit IRC | 12:57 | |
*** salmankhan has joined #openstack-barbican | 12:58 | |
*** abishop has joined #openstack-barbican | 13:01 | |
*** salmankhan has quit IRC | 14:09 | |
*** salmankhan has joined #openstack-barbican | 14:28 | |
*** noslzzp has joined #openstack-barbican | 14:56 | |
*** rmascena has joined #openstack-barbican | 15:15 | |
*** raildo has quit IRC | 15:17 | |
*** dave-mccowan has joined #openstack-barbican | 15:52 | |
*** serlex has left #openstack-barbican | 15:56 | |
*** pcaruana has quit IRC | 16:49 | |
abishop | kfarr, dave-mccowan, alee : I'd like to continue pursuing https://review.openstack.org/514734 | 17:38 |
dave-mccowan | abishop would you please add the tag SecurityImpact to the commit message? that will summon the security interested reviewers. | 17:53 |
abishop | dave-mccowan: sure, will do | 17:54 |
dave-mccowan | abishop btw, i like this approach. i think it is the right one. i'll +2 after you update the commit message and the gate check re-runs. | 17:59 |
abishop | dave-mccowan: excellent, I really appreciate the feedback | 18:00 |
openstackgerrit | Alan Bishop proposed openstack/castellan master: WIP: Support handling legacy all-zeros key ID https://review.openstack.org/514734 | 18:02 |
dave-mccowan | abishop how would castellan determine if a user has access to read the key 0000-0...0000? | 18:03 |
dave-mccowan | or would it only work if nova is doing the getting? | 18:03 |
abishop | dave-mccowan: well, the code mimics both cinder's and nova's ConfKeyManagers, which really don't impose any restriction | 18:04 |
abishop | dave-mccowan: the user still needs to provide the fixed key, and that's where the ConfKeyManager "draws the line" | 18:05 |
dave-mccowan | abishop yea, it seems ok. there is no endpoint that a user could curl http://127.0.0.1/secret/000..000. it's in code only. | 18:06 |
abishop | exactly | 18:06 |
abishop | crappy, but that's why we're trying to help users stop using it :-/ | 18:06 |
*** salmankhan has quit IRC | 18:20 | |
AJaeger | barbican team, please review https://review.openstack.org/517212 for zuul v3 migration of the tempest plugin | 18:24 |
dave-mccowan | any barbicaneers around today? with the end of DST, the meeting an hour earlier now in the US. | 19:59 |
openstackgerrit | Merged openstack/barbican-tempest-plugin master: Add .zuul.yaml https://review.openstack.org/517212 | 20:03 |
*** AJaeger has left #openstack-barbican | 20:19 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican master: Updated from global requirements https://review.openstack.org/519085 | 21:03 |
*** rmascena has quit IRC | 21:03 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/castellan master: Updated from global requirements https://review.openstack.org/519087 | 21:04 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican master: Updated from global requirements https://review.openstack.org/519085 | 21:05 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/castellan master: Updated from global requirements https://review.openstack.org/519087 | 21:06 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican master: Updated from global requirements https://review.openstack.org/519085 | 21:06 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/castellan master: Updated from global requirements https://review.openstack.org/519087 | 21:06 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican master: Updated from global requirements https://review.openstack.org/519085 | 21:07 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican master: Updated from global requirements https://review.openstack.org/519085 | 21:07 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/castellan master: Updated from global requirements https://review.openstack.org/519087 | 21:07 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/castellan master: Updated from global requirements https://review.openstack.org/519087 | 21:07 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-barbicanclient master: Updated from global requirements https://review.openstack.org/519147 | 21:44 |
*** johnsom_ has joined #openstack-barbican | 21:46 | |
*** johnsom has quit IRC | 21:51 | |
*** johnsom_ is now known as johnsom | 21:51 | |
*** abishop has quit IRC | 22:17 | |
*** alee has quit IRC | 22:48 | |
*** alee has joined #openstack-barbican | 22:59 | |
*** nkinder has quit IRC | 23:01 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!