| *** namnh has joined #openstack-barbican | 02:08 | |
| *** sapcc-bot1 has joined #openstack-barbican | 02:09 | |
| *** dave-mccowan has joined #openstack-barbican | 02:12 | |
| *** sapcc-bot has quit IRC | 02:14 | |
| *** liujiong has joined #openstack-barbican | 02:18 | |
| liujiong | dave-mccowan: could you also check this out? https://review.openstack.org/#/c/553722/ https://review.openstack.org/#/c/558684/ | 02:39 |
|---|---|---|
| *** dave-mccowan has quit IRC | 02:48 | |
| openstackgerrit | Merged openstack/castellan master: add lower-constraints job https://review.openstack.org/555357 | 02:59 |
| alee | #startmeeting barbican | 03:00 |
| openstack | Meeting started Tue Apr 10 03:00:09 2018 UTC and is due to finish in 60 minutes. The chair is alee. Information about MeetBot at http://wiki.debian.org/MeetBot. | 03:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 03:00 |
| *** openstack changes topic to " (Meeting topic: barbican)" | 03:00 | |
| openstack | The meeting name has been set to 'barbican' | 03:00 |
| alee | #topic roll call | 03:00 |
| *** openstack changes topic to "roll call (Meeting topic: barbican)" | 03:00 | |
| liujiong | \o | 03:00 |
| liujiong | hi alee | 03:00 |
| alee | Hi Jeremy :) | 03:00 |
| alee | namnh, joining? | 03:01 |
| namnh | yes | 03:01 |
| alee | hi namnh :) | 03:01 |
| alee | anyone else joining today? | 03:02 |
| liujiong | hi namnh | 03:02 |
| namnh | hi alee, liujiong | 03:02 |
| alee | #topic rocky | 03:02 |
| *** openstack changes topic to "rocky (Meeting topic: barbican)" | 03:02 | |
| alee | https://etherpad.openstack.org/p/barbican-tracker-rocky | 03:02 |
| alee | so we have milestone 1 coming up next week | 03:03 |
| alee | next week Monday to be precise | 03:03 |
| alee | so I need to get together with dave this week and figure out what I'm supposed to do to cut the release | 03:03 |
| liujiong | alee: what's exactly "Update policy in code wiki page if done" ? | 03:04 |
| alee | we already implemented policy in code, there is a wiki page to track that for each of the projects | 03:04 |
| alee | when dave and I looked, it had not been updated | 03:05 |
| alee | so I need to verify and update it | 03:05 |
| alee | I'm pretty sure there is not much more to do there. | 03:05 |
| liujiong | ok, understand. That goal is "policy and docs in code", and we only have "policy in code" | 03:05 |
| alee | ah, ok - then we will need to do more in milestone 2 to complete then | 03:06 |
| liujiong | The description of each policy should be added into code as well. But that's pretty complicated for barbican. | 03:06 |
| alee | yes | 03:06 |
| alee | there is also some work that has been done to add read-only roles | 03:07 |
| liujiong | cool! | 03:07 |
| alee | I think we already have that - but we need to see if we can align with what the keystone folks are doing | 03:07 |
| alee | ie. we already have an "observer" role, but I'm not sure thats what the read-only role is called | 03:08 |
| alee | so describing the policy in code maybe something that we fold into that at the same time | 03:08 |
| alee | let me add that to the milestone 2 list | 03:09 |
| liujiong | sounds reasonable | 03:09 |
| liujiong | I want to help but I'm not so sure about all policies :( | 03:10 |
| alee | I think we'll be learning together :) | 03:10 |
| liujiong | great! | 03:10 |
| alee | liujiong, if you'd like to work on it, I can pair you with a keystone guy to iron out what needs to be done. | 03:11 |
| alee | liujiong, or I can try work with you on it. | 03:11 |
| liujiong | about "read-only role"? | 03:12 |
| alee | liujiong, yup - and docing policy | 03:12 |
| alee | doc'ing | 03:12 |
| liujiong | ok | 03:12 |
| alee | liujiong, just sign up on the etherpad if you can do it | 03:12 |
| liujiong | I will | 03:13 |
| alee | liujiong, thanks -- I need dave to look at your mutable patch. I'll bug him about that tommorow | 03:13 |
| liujiong | oh, that patch is already +w by dave | 03:13 |
| alee | as well as check on his milestone 1 patches | 03:13 |
| alee | even better :) | 03:13 |
| alee | Not sure if I'll get the pycrypto change in this week -- may end up being early next week. | 03:14 |
| alee | I have a change to make the keystone listener work which I'd like to get in instead .. | 03:15 |
| alee | https://review.openstack.org/#/c/557067/ | 03:15 |
| liujiong | Nice, I'm keeping an eye on your patch | 03:15 |
| alee | yeah -- the fix is easy -- testing it is tricky | 03:15 |
| alee | right now trying to figure out how to query the db | 03:16 |
| alee | to see if the relevant project is there. | 03:17 |
| alee | if you happen to see what I'm doing wrong -- please let me know. | 03:17 |
| liujiong | ok, will have a look at that patch | 03:18 |
| alee | thanks. | 03:18 |
| liujiong | np | 03:18 |
| alee | the other thing I'm going to try and do is write a spec for the castellan/vault plugin | 03:18 |
| liujiong | will that be made for Rocky? | 03:19 |
| alee | I wrote a patch, but there were some design decisions that are probably best iterated over a spc | 03:19 |
| alee | yes, I wasnt to try and get that in | 03:19 |
| alee | want | 03:19 |
| alee | ideally for milestone 2 | 03:19 |
| liujiong | cool | 03:20 |
| alee | I think folks really want to use vault. and so having it behind barbican will be really helpful | 03:20 |
| openstackgerrit | Merged openstack/barbican master: Enable mutable config in Barbican https://review.openstack.org/556337 | 03:20 |
| alee | and if we can have a gate that does that - that will be super useful | 03:20 |
| alee | yay! | 03:20 |
| alee | namnh, how are the OVO patches? | 03:21 |
| alee | are they all ready for review? | 03:21 |
| openstackgerrit | Nam Nguyen Hoai proposed openstack/barbican master: [WIP] Implement OVO for Barbican [5] https://review.openstack.org/500244 | 03:22 |
| alee | I see there are a bunch of them - so we probably need to start on them soon to get them all in by milestone 2 | 03:22 |
| namnh | yeah, i think those two patch sets: https://review.openstack.org/#/c/499004/ https://review.openstack.org/#/c/559014/ | 03:22 |
| alee | namnh, can you remove the WIP label ? its hard to know that these are "ready" | 03:23 |
| namnh | yes, i will do it and i will push new patch on OVO [1] to get "Initial OVO" as parent. | 03:24 |
| alee | namnh, OK cool - I'll review once I know which ones and in which order | 03:25 |
| liujiong | cool | 03:25 |
| alee | anything else about rocky and next weeks milestone? | 03:25 |
| liujiong | namnh: ping me or leave a comment in your patch to let us know they are ready for review | 03:26 |
| namnh | liujiong, alee. could you help me to review the above patch set: first: https://review.openstack.org/#/c/559014/ then https://review.openstack.org/#/c/499004/ | 03:26 |
| namnh | liujiong: thanks :) | 03:26 |
| liujiong | ok, no problem | 03:26 |
| alee | namnh, cool - looks like a good place to start | 03:26 |
| namnh | i am trying to split small patch set to be easy for reviewing | 03:27 |
| alee | namnh, much appreciated :) | 03:27 |
| namnh | :) | 03:27 |
| alee | I'll check with dave , but I think the process of cutting a release is pretty straightforward. I'll plan on working on it either sunday or monday of next week | 03:28 |
| alee | so lets try to get all in before then. | 03:28 |
| alee | #topic launchpad migration | 03:29 |
| *** openstack changes topic to "launchpad migration (Meeting topic: barbican)" | 03:29 | |
| namnh | alee: sure, | 03:29 |
| alee | with no objections, I'll plan on doing this after milestone 1 | 03:29 |
| alee | launchpad -> storyboard | 03:30 |
| liujiong | nice | 03:30 |
| alee | hopefully it will all go smoothly -- in fact, I kinda hope kendall has done most of the work for us :) | 03:30 |
| alee | will send email out when its done. | 03:31 |
| alee | #topic anything else? | 03:31 |
| *** openstack changes topic to "anything else? (Meeting topic: barbican)" | 03:31 | |
| liujiong | that's all for me | 03:31 |
| namnh | me too | 03:32 |
| alee | cool - thanks for joining , guys -- till next week | 03:32 |
| alee | #endmeeting | 03:32 |
| *** openstack changes topic to "Discussion about development of OpenStack Barbican and its client libraries. - Logs: http://eavesdrop.openstack.org/irclogs/%23openstack-barbican/" | 03:32 | |
| openstack | Meeting ended Tue Apr 10 03:32:29 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 03:32 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/barbican/2018/barbican.2018-04-10-03.00.html | 03:32 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/barbican/2018/barbican.2018-04-10-03.00.txt | 03:32 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/barbican/2018/barbican.2018-04-10-03.00.log.html | 03:32 |
| namnh | thanks alee liujiong | 03:32 |
| *** pcaruana has joined #openstack-barbican | 04:06 | |
| *** strigazi has quit IRC | 04:11 | |
| *** strigazi has joined #openstack-barbican | 04:14 | |
| *** pcaruana has quit IRC | 04:16 | |
| *** annp has quit IRC | 04:25 | |
| *** annp has joined #openstack-barbican | 04:25 | |
| *** strigazi_ has joined #openstack-barbican | 05:13 | |
| *** strigazi has quit IRC | 05:17 | |
| *** jaosorior has quit IRC | 06:04 | |
| *** namnh has quit IRC | 06:18 | |
| *** jaosorior has joined #openstack-barbican | 06:37 | |
| *** pcaruana has joined #openstack-barbican | 06:40 | |
| *** livelace has joined #openstack-barbican | 07:22 | |
| *** jaosorior has quit IRC | 07:23 | |
| *** jaosorior has joined #openstack-barbican | 07:27 | |
| openstackgerrit | Jeremy Liu proposed openstack/barbican master: Add os-testr as test dependency https://review.openstack.org/559936 | 07:33 |
| *** pbourke has joined #openstack-barbican | 08:35 | |
| *** pcaruana has quit IRC | 09:04 | |
| *** salmankhan has joined #openstack-barbican | 09:09 | |
| *** salmankhan1 has joined #openstack-barbican | 09:10 | |
| *** salmankhan has quit IRC | 09:13 | |
| *** salmankhan1 is now known as salmankhan | 09:13 | |
| *** liujiong has quit IRC | 09:17 | |
| *** strigazi_ is now known as strigazi | 10:01 | |
| *** pbourke has quit IRC | 10:30 | |
| *** strigazi is now known as strigaz_ | 10:59 | |
| *** strigaz_ is now known as strigazi_ | 10:59 | |
| *** strigazi_ is now known as strigazi | 10:59 | |
| *** salmankhan has quit IRC | 11:07 | |
| *** salmankhan has joined #openstack-barbican | 11:09 | |
| *** abishop has quit IRC | 11:33 | |
| *** openstackgerrit has quit IRC | 12:04 | |
| *** raildo has joined #openstack-barbican | 12:17 | |
| *** dave-mccowan has joined #openstack-barbican | 12:19 | |
| *** salmankhan has quit IRC | 12:39 | |
| *** salmankhan has joined #openstack-barbican | 12:39 | |
| *** pcaruana has joined #openstack-barbican | 12:44 | |
| *** jaosorior has quit IRC | 12:50 | |
| *** zhurong has joined #openstack-barbican | 12:59 | |
| *** abishop has joined #openstack-barbican | 13:12 | |
| *** zhurong has quit IRC | 13:13 | |
| *** pbourke has joined #openstack-barbican | 13:20 | |
| *** pbourke has quit IRC | 13:21 | |
| *** pbourke has joined #openstack-barbican | 13:21 | |
| *** alee has quit IRC | 13:39 | |
| *** DuncanT has quit IRC | 14:04 | |
| *** jvrbanac has quit IRC | 14:04 | |
| *** DuncanT has joined #openstack-barbican | 14:04 | |
| *** portdirect has quit IRC | 14:19 | |
| *** portdirect has joined #openstack-barbican | 14:19 | |
| *** alee has joined #openstack-barbican | 14:20 | |
| *** salmankhan has quit IRC | 14:24 | |
| *** beisner has quit IRC | 14:24 | |
| *** beisner has joined #openstack-barbican | 14:24 | |
| *** salmankhan has joined #openstack-barbican | 14:43 | |
| *** salmankhan has quit IRC | 14:52 | |
| *** salmankhan has joined #openstack-barbican | 15:01 | |
| *** pbourke has quit IRC | 17:05 | |
| *** salmankhan has quit IRC | 17:08 | |
| *** openstackgerrit has joined #openstack-barbican | 17:15 | |
| openstackgerrit | Merged openstack/python-barbicanclient master: Supress client debug messages https://review.openstack.org/553722 | 17:15 |
| openstackgerrit | Ade Lee proposed openstack/barbican master: Initialize db for Barbican Keystone listener https://review.openstack.org/557067 | 17:15 |
| *** annp has quit IRC | 17:17 | |
| *** annp has joined #openstack-barbican | 17:18 | |
| *** openstackgerrit has quit IRC | 17:34 | |
| *** jaosorior has joined #openstack-barbican | 17:50 | |
| *** openstackgerrit has joined #openstack-barbican | 18:13 | |
| openstackgerrit | Merged openstack/barbican master: Remove unused broker configuration in devstack https://review.openstack.org/558684 | 18:13 |
| *** pbourke has joined #openstack-barbican | 18:18 | |
| *** jaosorior has quit IRC | 18:48 | |
| openstackgerrit | Ade Lee proposed openstack/barbican master: Initialize db for Barbican Keystone listener https://review.openstack.org/557067 | 18:56 |
| *** openstackgerrit has quit IRC | 19:04 | |
| *** pbourke has quit IRC | 19:50 | |
| *** pcaruana has quit IRC | 20:01 | |
| alee | dave-mccowan, ping | 20:07 |
| *** abishop has quit IRC | 20:29 | |
| *** raildo has quit IRC | 20:44 | |
| *** jmlowe_ has joined #openstack-barbican | 21:09 | |
| jmlowe_ | I need a hint, I can't seem to get the dogtag plugin working keep getting "NSPRError: (SEC_ERROR_BAD_DATABASE) security library: bad database" | 21:09 |
| dave-mccowan | alee pong | 21:18 |
| alee | jmlowe_, would be happy to help you but I have to head back home .. will be online later tongiht and tommorow | 21:21 |
| jmlowe_ | ok, thanks! I'll stick around +/- laptop falling asleep | 21:21 |
| alee | jmlowe_, it probably means your nss certdb is not set up[ | 21:22 |
| alee | dave-mccowan, any idea what I'm doing wrong here .. | 21:22 |
| alee | dave-mccowan, http://logs.openstack.org/67/557067/16/check/barbican-simple-crypto-devstack-functional/acaec6d/job-output.txt.gz#_2018-04-10_19_29_43_509253 | 21:23 |
| alee | dave-mccowan, same deal - back online in a little bit | 21:26 |
| dave-mccowan | alee ok. that's new to me. only guess is keystone listener is trying to init something already inited? | 21:27 |
| alee | dave-mccowan, well no -- what I'm trying to do is to connect to the db and see the internal barbican project there. | 21:28 |
| alee | dave-mccowan, then I delete the external project -- and if the listener is working, it will trigger a delete of the internal project in barbican | 21:29 |
| alee | dave-mccowan, the init there is supposed to be my connection (as a client) to the db | 21:29 |
| *** alee has quit IRC | 21:49 | |
| *** alee has joined #openstack-barbican | 22:20 | |
| *** dave-mccowan has quit IRC | 22:49 | |
| *** livelace has quit IRC | 22:50 | |
| jmlowe_ | I may have lurched forward "MissingArgumentError: Must supply non-None value argument for SecretStoreMetadatum entry" | 23:27 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!