*** tkajinam has quit IRC | 01:31 | |
*** tkajinam has joined #openstack-barbican | 01:32 | |
*** nikparasyr has joined #openstack-barbican | 06:58 | |
*** iurygregory is now known as iurygregory|afk | 07:48 | |
*** tosky has joined #openstack-barbican | 08:50 | |
*** iurygregory|afk is now known as iurygregory | 09:10 | |
*** d34dh0r53 has quit IRC | 09:17 | |
moguimar | nikparasyr, I haven't tried barbican with vault backend yet, but I think you're correct | 09:19 |
---|---|---|
moguimar | It doesn't need to be the root token, just need to have the right permissions | 09:19 |
*** d34dh0r53 has joined #openstack-barbican | 09:20 | |
nikparasyr | thanks :). is there some docs somewhere or code that i can easily check what permissions are required? i'll give it a go on a test environment next couple of weeks | 09:21 |
*** xek has joined #openstack-barbican | 11:36 | |
*** xek has quit IRC | 11:37 | |
*** xek has joined #openstack-barbican | 11:38 | |
*** raildo has joined #openstack-barbican | 12:09 | |
*** xek has quit IRC | 12:44 | |
*** xek_ has joined #openstack-barbican | 12:44 | |
*** xek__ has joined #openstack-barbican | 13:05 | |
*** xek_ has quit IRC | 13:08 | |
*** Giuls has joined #openstack-barbican | 13:31 | |
*** tkajinam has quit IRC | 13:31 | |
*** tkajinam has joined #openstack-barbican | 13:32 | |
Giuls | Hello everybody. I read on barbican documentation about this channel, I need help on barbican configuration. I had a couple of containers that run rabbitmq, keystone and barbican but when I try to complete the verify step by storing and retrieving a secret the procedure ends up with an error | 13:34 |
Giuls | I'm lookin for the error... | 13:34 |
Giuls | Invalid base64-encoded string: number of data characters (281) cannot be 1 more than a multiple of 4 | 13:35 |
*** Giuls has quit IRC | 13:37 | |
moguimar | nikparasyr, I don't think there is such a document | 13:52 |
nikparasyr | moguimar: if we decide to go the way of a service token i will make some notes and come back. I think it will be a useful addition to the docs at least | 13:54 |
*** Giuls has joined #openstack-barbican | 14:00 | |
moguimar | nikparasyr, sure | 14:10 |
*** mgoddard has joined #openstack-barbican | 14:47 | |
*** openstackgerrit has joined #openstack-barbican | 14:47 | |
openstackgerrit | Mark Goddard proposed openstack/barbican master: Vault: ensure that secrets are normalized https://review.opendev.org/c/openstack/barbican/+/763835 | 14:47 |
openstackgerrit | Mark Goddard proposed openstack/barbican master: Fix Vault functional test https://review.opendev.org/c/openstack/barbican/+/764202 | 14:47 |
openstackgerrit | Mark Goddard proposed openstack/barbican master: Vault: enable RSA from ordered container functional test https://review.opendev.org/c/openstack/barbican/+/764203 | 14:49 |
dave-mccowan | redrobot o/ | 15:04 |
dave-mccowan | nm. i got some emails from zuul for ptl approval, but i see you were copied too. | 15:06 |
dave-mccowan | happy thanksgiving! :-) | 15:06 |
moguimar | redrobot is on PTO dave-mccowan | 15:06 |
JohnnyRainbow | @Giuls: what exactly steps you're executing? It seems like something was not encoded by base64, maybe you imported certificate incorrectly? Just shooting :) | 16:03 |
Giuls | I found it eventually, I have configured barbican for using a postgres connection, switching to mariadb has solved the problem | 16:06 |
Giuls | Just another question, the KEK for simple_crypto_plugin has to be inside ''? Or not? | 16:07 |
JohnnyRainbow | @Giuls: in my code it was in '' and it was working | 16:09 |
Giuls | oh good, so it is the database switching | 16:10 |
openstackgerrit | Mark Goddard proposed openstack/barbican master: Fix Vault functional test https://review.opendev.org/c/openstack/barbican/+/764202 | 16:39 |
*** irclogbot_0 has quit IRC | 16:41 | |
*** irclogbot_1 has joined #openstack-barbican | 16:46 | |
*** d34dh0r53 has quit IRC | 17:00 | |
*** d34dh0r53 has joined #openstack-barbican | 17:02 | |
*** nikparasyr has left #openstack-barbican | 17:10 | |
*** d34dh0r53 has quit IRC | 17:20 | |
*** Giuls has quit IRC | 17:21 | |
*** xek__ has quit IRC | 17:37 | |
*** nayarasps has joined #openstack-barbican | 18:01 | |
*** mgoddard has quit IRC | 18:04 | |
*** dave-mccowan has quit IRC | 18:04 | |
*** dave-mccowan has joined #openstack-barbican | 18:11 | |
*** xek__ has joined #openstack-barbican | 20:11 | |
*** xek_ has joined #openstack-barbican | 20:28 | |
*** nayarasps has quit IRC | 20:29 | |
*** xek__ has quit IRC | 20:30 | |
*** raildo has quit IRC | 21:39 | |
*** xek_ has quit IRC | 22:08 | |
*** dayou has quit IRC | 22:51 | |
*** dayou has joined #openstack-barbican | 22:51 | |
*** moguimar has quit IRC | 23:16 | |
*** moguimar has joined #openstack-barbican | 23:17 | |
*** JohnnyRainbow has quit IRC | 23:35 | |
*** JohnnyRainbow has joined #openstack-barbican | 23:35 | |
*** tosky has quit IRC | 23:51 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!