| *** cnetPursuit has quit IRC | 00:14 | |
| *** tosky has quit IRC | 00:41 | |
| *** iurygregory has quit IRC | 07:58 | |
| *** iurygregory has joined #openstack-barbican | 08:30 | |
| *** JohnnyRainbow has joined #openstack-barbican | 08:38 | |
| *** iurygregory has quit IRC | 09:35 | |
| *** iurygregory has joined #openstack-barbican | 09:36 | |
| *** xek has joined #openstack-barbican | 09:42 | |
| *** xek has quit IRC | 09:58 | |
| *** xek has joined #openstack-barbican | 09:58 | |
| *** iurygregory_ has joined #openstack-barbican | 10:32 | |
| *** iurygregory has quit IRC | 10:35 | |
| *** xek_ has joined #openstack-barbican | 10:56 | |
| *** xek has quit IRC | 10:59 | |
| *** tosky has joined #openstack-barbican | 11:09 | |
| *** Luzi has joined #openstack-barbican | 11:56 | |
| *** xek__ has joined #openstack-barbican | 11:59 | |
| *** xek_ has quit IRC | 12:02 | |
| *** xek_ has joined #openstack-barbican | 12:06 | |
| *** xek__ has quit IRC | 12:08 | |
| *** raildo has joined #openstack-barbican | 12:28 | |
| *** iurygregory_ is now known as iurygregory | 13:01 | |
| *** Luzi has quit IRC | 13:25 | |
| *** d34dh0r53 has quit IRC | 13:46 | |
| *** d34dh0r53 has joined #openstack-barbican | 13:52 | |
| *** bbezak has joined #openstack-barbican | 14:01 | |
| bbezak | Hi, I've been trying to set up cinder volume encryption with key_manager - barbican. Barbican is configured with hashicorp vault as secret store - enabled_secretstore_plugins = vault_plugin. And receiving this error - http://paste.openstack.org/raw/799824/ | 14:09 |
|---|---|---|
| bbezak | Same error when trying to lookup with CLI - 'openstack secret get $URL --payload --payload_content_type "application/octet-stream"', On hashicrop vault side - secret is there. Btw - Magnum is using barbican with vault without problems | 14:10 |
| redrobot | Hi bbezak. We were talking about that last week. There seems to be a bug in that configuration (Cinder -> Castellan -> barbicanclient -> Barbican -> Castellan -> Vault) | 14:21 |
| bbezak | redrobot: ok, is there any possible workaround? Like using castellan talking to vault directly? cinder -> castellan -> vault | 14:41 |
| bbezak | will test it ;) | 14:54 |
| bbezak | looks good with castellan directly - as per cinder/nova sample configuration - https://docs.openstack.org/cinder/latest/_static/cinder.conf.sample | 15:33 |
| *** iurygregory has quit IRC | 15:43 | |
| *** iurygregory has joined #openstack-barbican | 16:03 | |
| bbezak | redrobot: is there a bug created for issues with this flow ? Cinder -> Castellan -> barbicanclient -> Barbican -> Castellan -> Vault | 16:35 |
| redrobot | bbezak, it does not look like one has been opened yet: https://storyboard.openstack.org/#!/project_group/barbican | 16:37 |
| *** JohnnyRainbow has quit IRC | 16:45 | |
| bbezak | redrobot: https://storyboard.openstack.org/#!/story/2008335 | 16:49 |
| redrobot | bbezak, thanks! We'll use that to track the bug fix | 17:01 |
| *** xek__ has joined #openstack-barbican | 17:53 | |
| *** xek__ has quit IRC | 17:55 | |
| *** xek_ has quit IRC | 17:56 | |
| *** xek__ has joined #openstack-barbican | 17:56 | |
| *** prernadembla05 has joined #openstack-barbican | 18:59 | |
| *** tosky has quit IRC | 20:17 | |
| *** tosky has joined #openstack-barbican | 20:28 | |
| openstackgerrit | Ade Lee proposed openstack/barbican master: DNM: testing FIPS gate job https://review.opendev.org/760665 | 22:00 |
| *** iurygregory has quit IRC | 23:04 | |
| *** prernadembla05 has quit IRC | 23:06 | |
| *** iurygregory has joined #openstack-barbican | 23:16 | |
| *** tosky has quit IRC | 23:33 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!