*** whoami-rajat has quit IRC | 01:58 | |
*** pcaruana has joined #openstack-barbican | 04:12 | |
*** pcaruana has quit IRC | 04:32 | |
*** pcaruana has joined #openstack-barbican | 06:36 | |
*** pcaruana has quit IRC | 07:22 | |
*** altlogbot_3 has quit IRC | 08:03 | |
*** altlogbot_2 has joined #openstack-barbican | 08:03 | |
*** pcaruana has joined #openstack-barbican | 08:56 | |
*** whoami-rajat has joined #openstack-barbican | 09:09 | |
*** raildo has joined #openstack-barbican | 10:05 | |
*** pcaruana has quit IRC | 10:22 | |
*** pcaruana has joined #openstack-barbican | 11:01 | |
*** arunkant has quit IRC | 11:57 | |
*** arunkant has joined #openstack-barbican | 11:59 | |
*** xek has quit IRC | 12:01 | |
*** whoami-rajat has quit IRC | 12:38 | |
*** ade_lee has joined #openstack-barbican | 12:41 | |
*** whoami-rajat has joined #openstack-barbican | 12:58 | |
*** mmethot has joined #openstack-barbican | 13:17 | |
*** abishop has joined #openstack-barbican | 14:07 | |
*** ade_lee has quit IRC | 14:12 | |
*** abishop has quit IRC | 14:35 | |
*** abishop has joined #openstack-barbican | 14:40 | |
*** Luzi has joined #openstack-barbican | 14:56 | |
*** ade_lee has joined #openstack-barbican | 15:35 | |
*** amodi has joined #openstack-barbican | 15:51 | |
*** amodi has left #openstack-barbican | 15:51 | |
*** amodi has joined #openstack-barbican | 16:51 | |
*** amodi has left #openstack-barbican | 16:51 | |
*** openstackgerrit has joined #openstack-barbican | 17:22 | |
openstackgerrit | Merged openstack/barbican-tempest-plugin master: Remove oslosphinx https://review.opendev.org/655172 | 17:22 |
---|---|---|
*** Luzi has quit IRC | 18:15 | |
*** abishop has quit IRC | 18:18 | |
*** ade_lee has quit IRC | 18:35 | |
*** pcaruana has quit IRC | 19:02 | |
*** abishop has joined #openstack-barbican | 19:22 | |
*** ade_lee has joined #openstack-barbican | 19:25 | |
ade_lee | rm_work, hey - now that you guys store a pkcs12 blob, do you guys use the consumers interface? | 20:56 |
rm_work | ade_lee: we do not anymore (on containers) | 20:56 |
rm_work | theoretically that consumer thing was supposed to be on secrets too, and i've toyed with going and finishing the implementation to support secrets | 20:56 |
rm_work | at which point we could use it again | 20:56 |
rm_work | but... haven't had time for that work yet | 20:56 |
rm_work | are you guys looking at deprecating it? | 20:57 |
ade_lee | rm_work, right - doing that on secrets seems to be something we're looking to do | 20:57 |
rm_work | ah ok | 20:57 |
rm_work | so the opposite :D | 20:57 |
rm_work | yeah, it's something we'd like | 20:57 |
rm_work | it was in the original spec | 20:57 |
rm_work | so technically that spec has never been fully implemented | 20:57 |
* rm_work is actually a really bad/lazy community contributor | 20:57 | |
ade_lee | right -- we'd probably make it a little richer -- for instance having a type, resourceid so you could id what is using that secret | 20:58 |
rm_work | yeah ok | 20:58 |
ade_lee | for better user experience if you wanted to click back to the resource in a ui for instance | 20:58 |
rm_work | i mean, resource-id is already there | 20:58 |
rm_work | or rather, it's resource href? | 20:59 |
rm_work | the idea being that yes, the UI could link directly back to an object | 20:59 |
rm_work | that was the whole vision to begin with | 20:59 |
ade_lee | yup | 20:59 |
rm_work | (enabling nice UI flows) | 20:59 |
ade_lee | anyways we'll put up a spec | 20:59 |
rm_work | so however you folks think is the best way to accomplish that workflow | 20:59 |
rm_work | the existing spec is what i envisioned would allow it | 21:00 |
rm_work | you could probably just revise the original spec? | 21:00 |
ade_lee | yup | 21:00 |
ade_lee | you got link? | 21:00 |
rm_work | when you put up a CR let me know :) | 21:00 |
rm_work | uhh i can find it | 21:00 |
rm_work | one sec | 21:00 |
ade_lee | we may look into changing delete behavior too -- to not deleting the secret if it has a subscriber remaining | 21:01 |
ade_lee | (either as opt-in or by default) | 21:01 |
ade_lee | and then a --force delete option | 21:02 |
ade_lee | which is different form the containers thing in that in that case, its only advisiory | 21:02 |
rm_work | i found the CR but i can't find the blueprint | 21:05 |
rm_work | and i must not have created a spec file? | 21:05 |
rm_work | err, that is what i pushed for | 21:05 |
rm_work | but ya'll were like "NOOOOOO" | 21:05 |
rm_work | rofl | 21:05 |
rm_work | like, i wanted exactly that (refuse delete, allow --force) | 21:06 |
ade_lee | rm_work, :) | 21:07 |
rm_work | :D | 21:08 |
*** raildo has quit IRC | 21:08 | |
ade_lee | rm_work, I blame redrobot | 21:08 |
rm_work | :D | 21:08 |
rm_work | I might blame reaperhulk | 21:08 |
redrobot | heh | 21:08 |
rm_work | I think he was the staunch opponent to that | 21:08 |
rm_work | IIRC | 21:09 |
rm_work | anyway, let me know | 21:09 |
openstackgerrit | Merged openstack/barbican master: Update to opendev https://review.opendev.org/654814 | 21:20 |
*** hrybacki has quit IRC | 21:39 | |
*** jamespage has quit IRC | 21:43 | |
*** hrybacki has joined #openstack-barbican | 22:07 | |
*** jamespage has joined #openstack-barbican | 22:08 | |
*** ade_lee has quit IRC | 22:24 | |
*** mmethot has quit IRC | 22:32 | |
*** openstackstatus has quit IRC | 22:47 | |
openstackgerrit | Merged openstack/barbican-tempest-plugin master: Add option to toggle validation of signed image https://review.opendev.org/649670 | 23:06 |
*** abishop has quit IRC | 23:18 | |
*** abishop has joined #openstack-barbican | 23:35 | |
*** abishop has quit IRC | 23:40 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!