Wednesday, 2018-05-16

*** linhnm has joined #openstack-barbican00:33
*** dave-mcc_ has quit IRC00:59
*** dave-mccowan has joined #openstack-barbican02:01
*** annp has quit IRC02:03
*** annp has joined #openstack-barbican02:03
*** linhnm has quit IRC02:03
*** dave-mccowan has quit IRC02:32
*** annp has quit IRC03:20
*** alee_afk is now known as alee03:30
*** jaosorior has quit IRC04:40
*** jaosorior has joined #openstack-barbican04:47
*** jaosorior has quit IRC04:54
*** jaosorior has joined #openstack-barbican05:02
*** annp has joined #openstack-barbican05:34
*** livelace has joined #openstack-barbican06:26
*** dims has quit IRC07:59
*** dims has joined #openstack-barbican08:02
*** dims has quit IRC08:07
*** dims has joined #openstack-barbican08:07
*** livelace has quit IRC08:26
*** salmankhan has joined #openstack-barbican08:54
*** serlex has joined #openstack-barbican09:34
*** salmankhan has quit IRC10:14
*** salmankhan has joined #openstack-barbican10:18
*** dave-mccowan has joined #openstack-barbican10:41
*** pbourke has quit IRC11:14
*** pbourke has joined #openstack-barbican11:15
*** jaosorior has quit IRC11:23
*** abishop has joined #openstack-barbican11:31
*** abishop has quit IRC11:34
*** jaosorior has joined #openstack-barbican11:42
*** raildo has joined #openstack-barbican11:44
*** rmascena has joined #openstack-barbican11:44
*** abishop has joined #openstack-barbican11:52
*** abishop has quit IRC11:55
*** salmankhan has quit IRC12:20
*** salmankhan has joined #openstack-barbican12:23
*** abishop has joined #openstack-barbican12:28
*** abishop has quit IRC12:31
*** abishop has joined #openstack-barbican12:32
*** sapcc-bot4 has quit IRC12:35
*** sapcc-bot5 has joined #openstack-barbican12:35
*** jjimenez-gradian has joined #openstack-barbican12:56
*** jjimenez-gradian has left #openstack-barbican12:56
*** jjimenez-gradian has joined #openstack-barbican12:57
*** jjimenez-gradian has left #openstack-barbican12:59
*** jjimenez-grd has joined #openstack-barbican13:00
*** rmascena has quit IRC13:01
*** jjimenez-grd has left #openstack-barbican13:02
*** jjimenez-grd has joined #openstack-barbican13:03
jjimenez-grdHi. I'd like to know what are the requirements for a contribution, since we have a functionality that would be helpful in our opinion. Do I simply have to register a blueprint here https://blueprints.launchpad.net/openstack and hope it gets approved?13:05
aleejjimenez-grd, sounds great - what functionality do you guys have in mind?14:16
aleejjimenez-grd, we recently moved to storyboard -- https://storyboard.openstack.org/#!/project_group/8114:19
aleejjimenez-grd, if you put up a blueprint there - we'll definitely take a look -- but depending on what you want to add, it may/may not require a blueprint14:19
jjimenez-grdoh, I already created a Blueprint https://blueprints.launchpad.net/barbican/+spec/p11-symmetric-keys-out-of-hsm14:21
aleejjimenez-grd, ok -- it shouldn't be be too hard to move to storyboard in a story there14:22
aleejjimenez-grd, cut/paste mostlt14:22
aleemostly14:22
jjimenez-grdWe basically faced to problem of using a provider which doesn't allow symmetric keys creation, and we would need it to store the MKEK and HMAC as objects, wrapped with an asymmetric key pair14:22
jjimenez-grdthe problem*14:23
aleejjimenez-grd, interesting - just out of curiosity -- which provier is this?14:25
aleejjimenez-grd, so process wise -- you'd need to 1) create a story - just like the blueprint really 2) create a spec detailing the changes you want to make 3) submit patches :)14:27
aleespecs are in barbican-specs -- thats where folks will weigh in on design14:28
aleejjimenez-grd, overall though - sounds like a reasonable functionality add for a very specific problem14:29
jjimenez-grdSorry alee. Thanks for your explanation of the process. It's a provider developed here at Gradiant (https://www.gradiant.org/noticia/security-and-electronic-signature-for-any-enterprise/?lang=en) to connect with Microsoft's Azure Key Vault through PKCS11, and Azure doesn't support symmetric keys creation at the moment, although they mention this possibility in their API. That's where this need came from.15:04
jjimenez-grdWe've been discusing however, and we're finally going to wait until Azure adds support for this, at least for now. Sorry, can I delete the storyboard/blueprint or simply remove myself from it? Thanks!15:08
*** jjimenez-grd has quit IRC15:20
openstackgerritAde Lee proposed openstack/barbican master: Remove pycrypto dependency  https://review.openstack.org/56887915:28
*** rmascena has joined #openstack-barbican16:05
*** rmascena is now known as raildo_16:05
*** raildo has quit IRC16:08
*** jmlowe has quit IRC16:09
*** pbourke has quit IRC16:33
*** salmankhan has quit IRC16:54
*** raildo_ is now known as raildo16:58
openstackgerritAde Lee proposed openstack/barbican master: Add devstack functions to configure vault  https://review.openstack.org/56890517:07
aleedave-mccowan, ping17:52
*** jmlowe has joined #openstack-barbican17:59
aleedave-mccowan, any idea where the gate jobs for barbican gate tests are defined?18:01
dave-mccowanalee pong18:01
aleedave-mccowan, any idea where the gate jobs for barbican gate tests are defined?18:01
dave-mccowanalee they were recently moved to the barbican repo18:02
aleeoh - well thats convenient -- where?18:02
dave-mccowanmuch easier or us to control now18:02
aleedave-mccowan, where in the tree is it defined?18:03
* dave-mccowan is looking18:04
dave-mccowanalee .zuul.yaml18:04
aleedave-mccowan, cool -- although a hidden file is a little sneaky18:05
aleedave-mccowan, but definitely better for us to control it !18:05
dave-mccowanalthough we lose expert reviews to keep us from breaking things.  but also makes it easier to have different jobs for different versions.18:06
aleeyup18:06
aleewe can always find experts when we do break things18:07
aleedave-mccowan, you going to the next PTG?18:15
openstackgerritAde Lee proposed openstack/barbican master: Add devstack gate for vault  https://review.openstack.org/56890518:16
dave-mccowanalee have they announced dates and locations?18:17
aleedave-mccowan, yup denver again18:17
aleeseptember18:17
aleedave-mccowan, https://www.openstack.org/ptg/18:17
aleedave-mccowan, just checking coz the early bird ticket period expires May 1818:18
aleedave-mccowan, same hotel (and trains :)) as before18:19
dave-mccowani won't be able to decide until it's closer.  if i had to guess now, probably not.18:20
aleedave-mccowan, well -- if you want to take advantage of the early bird special -- and save $200 - you could book now and then refunds are available till August 3118:21
aleedave-mccowan, https://www.eventbrite.com/e/project-teams-gathering-denver-2018-tickets-4529670366018:21
*** serlex has quit IRC18:36
*** salmankhan has joined #openstack-barbican18:36
*** salmankhan has quit IRC18:41
*** jmlowe has quit IRC18:47
*** jmlowe has joined #openstack-barbican18:59
*** randomhack has joined #openstack-barbican19:05
*** abishop_ has joined #openstack-barbican19:05
*** abishop has quit IRC19:06
*** livelace has joined #openstack-barbican19:12
randomhackhey I have a fix for https://storyboard.openstack.org/#!/story/1748116 (barbican-api start fail due to no /var/run/barbican folder) -- not sure the process to submit a fix, but it's related to the RPM package installation.  The installer needs to add a line to  /usr/lib/tmpfiles.d/barbican.conf to autogenerate the barbican folder with the correct permissions.19:15
randomhackI added "d /var/run/barbican 0755 barbican barbican -" to /etc/tmpfiles.d/barbican.conf and that fixed my issue19:15
randomhack the /usr/lib/tmpfiles.d folder seems to be used by installed packages and /etc/tmpfiles.d is the local override19:16
openstackgerritAde Lee proposed openstack/barbican master: Add devstack gate for vault  https://review.openstack.org/56890519:44
*** jmlowe has quit IRC20:00
*** randomhack has quit IRC20:17
*** asbishop has joined #openstack-barbican20:24
*** abishop_ has quit IRC20:27
*** raildo has quit IRC20:31
*** salmankhan has joined #openstack-barbican20:56
*** salmankhan has quit IRC21:01
*** asbishop has quit IRC21:21
*** dave-mccowan has quit IRC21:32
*** dave-mccowan has joined #openstack-barbican21:41
*** dave-mcc_ has joined #openstack-barbican21:47
*** dave-mccowan has quit IRC21:48
*** livelace has quit IRC21:52
openstackgerritAde Lee proposed openstack/barbican master: Add devstack gate for vault  https://review.openstack.org/56890522:11
openstackgerritAde Lee proposed openstack/barbican master: Remove pycrypto dependency  https://review.openstack.org/56887922:27
*** andreaf has quit IRC22:29
*** andreaf has joined #openstack-barbican22:29
*** jmlowe has joined #openstack-barbican22:49
*** randomhack has joined #openstack-barbican23:26
randomhackAdded a bug report to RDO for the Barbican Package: https://bugzilla.redhat.com/show_bug.cgi?id=1579079 -- /run/barbican is deleted after a reboot - Seems like a packaging issue.23:27
openstackbugzilla.redhat.com bug 1579079 in Package Review "RDO Queens - Barbican Service Doesn't Start After Reboot - /run/barbican Folder Doesn't Exist" [Unspecified,New] - Assigned to hguemar23:27
*** randomhack has quit IRC23:43

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!