Thursday, 2018-08-02

johnsomAll that lovely override stuffs for keytsone endpoints00:00
rm_workhmmm00:02
*** dave-mccowan has quit IRC00:02
rm_worklet me look at another one really quick00:02
*** namnh has joined #openstack-barbican00:04
johnsomby others I mean openstack clients00:05
rm_workhmm00:07
rm_workyea was taking a look at ours, and then glance00:07
rm_workours just uses osc_lib or something O_o there's no real code00:07
johnsomRight, ours i all magical00:08
johnsomNova is a lot of stuffs: https://docs.openstack.org/python-novaclient/latest/reference/api/novaclient.v2.client.html00:09
johnsomIn Octavia we usually allow these overrides: https://github.com/openstack/octavia/blob/master/etc/octavia.conf#L38900:09
*** namnh has quit IRC00:10
johnsomWhich it looks like we have for barbican: https://docs.openstack.org/octavia/latest/configuration/configref.html#certificates00:10
rm_workjohnsom: looks like the cacert is in the keystone session?00:10
rm_workso that's our responsibility to set00:10
rm_worksince we just pass a keystone session to Barbican00:11
rm_workwhen we make the session we need to pass it?00:11
*** pbourke has quit IRC00:12
johnsomHmm, yeah, could be missing on our side for that part00:12
johnsomAh, that is a bug too in our barbican code. It's using the service auth settings and not the certificate section settings.00:14
rm_workerr where00:22
rm_workit just seems to straight up USE the keystoneauth1 adapter00:22
rm_workthat's it00:22
rm_workall that stuff should be handled inside that00:22
rm_workget() / post() etc is all just inside the session auth00:23
rm_workso if keystone has it, keystone should use it, and if it isn't that's a *keystone* bug IMO00:23
johnsomrm_work here: https://github.com/openstack/octavia/blob/master/octavia/certificates/common/auth/barbican_acl.py#L4100:32
johnsomand https://github.com/openstack/octavia/blob/master/octavia/common/keystone.py#L2900:32
rm_workoh, in Octavia00:34
rm_workyeah, quite possibly00:34
rm_workAH you said "our Barbican code"00:35
rm_workyeah ok00:35
rm_workI missed "our"00:35
*** namnh has joined #openstack-barbican01:08
*** namnh has quit IRC01:13
*** mhen has quit IRC01:33
*** mhen has joined #openstack-barbican01:34
*** namnh has joined #openstack-barbican01:35
*** dave-mccowan has joined #openstack-barbican01:47
*** namnh has quit IRC01:59
*** namnh has joined #openstack-barbican02:08
*** dave-mccowan has quit IRC03:33
*** namnh has quit IRC03:44
*** FrankZhang has quit IRC04:41
*** Luzi has joined #openstack-barbican06:12
*** velizarx has joined #openstack-barbican07:04
*** strigazi has quit IRC07:45
*** velizarx has quit IRC07:59
*** velizarx has joined #openstack-barbican08:04
*** pcaruana has joined #openstack-barbican09:00
*** salmankhan has joined #openstack-barbican09:03
*** velizarx has quit IRC10:52
*** velizarx has joined #openstack-barbican10:53
*** ducnv_ has quit IRC11:00
*** dave-mccowan has joined #openstack-barbican11:27
*** ade_lee has joined #openstack-barbican11:34
ade_leejohnsom, looking now11:35
ade_leejohnsom, is this related to the patch that rm_work posted?11:37
ade_leejohnsom, https://review.openstack.org/58810411:38
*** abishop has joined #openstack-barbican11:57
*** jmlowe has quit IRC12:35
*** velizarx has quit IRC12:48
*** velizarx has joined #openstack-barbican12:55
*** raildo has joined #openstack-barbican12:55
johnsomade_lee: yes, that patch is to help address our problem with the client, when used as an sdk13:14
*** jaosorior has quit IRC13:20
ade_leejohnsom, ok - I'll take a closer look at it prob tommorow or early next week.13:26
*** jaosorior has joined #openstack-barbican13:33
*** Luzi has quit IRC13:35
*** velizarx has quit IRC13:41
*** velizarx has joined #openstack-barbican13:42
*** ade_lee has quit IRC14:05
*** FrankZhang has joined #openstack-barbican15:07
*** gagehugo has joined #openstack-barbican15:33
*** spotz has quit IRC16:18
*** velizarx has quit IRC16:25
*** raildo has quit IRC16:38
*** raildo has joined #openstack-barbican16:42
*** salmankhan has quit IRC17:23
*** salmankhan has joined #openstack-barbican19:35
*** salmankhan has quit IRC19:39
openstackgerritPaul Belanger proposed openstack/barbican master: Switch to fedora-latest for testing  https://review.openstack.org/58836919:59
*** FrankZhang_ has joined #openstack-barbican21:18
*** FrankZhang has quit IRC21:18
*** FrankZhang_ has quit IRC21:22
*** abishop has quit IRC21:24
openstackgerritPaul Belanger proposed openstack/barbican master: Switch to fedora-latest for testing  https://review.openstack.org/58836923:31

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!