Wednesday, 2020-11-25

*** tkajinam has quit IRC01:31
*** tkajinam has joined #openstack-barbican01:32
*** nikparasyr has joined #openstack-barbican06:58
*** iurygregory is now known as iurygregory|afk07:48
*** tosky has joined #openstack-barbican08:50
*** iurygregory|afk is now known as iurygregory09:10
*** d34dh0r53 has quit IRC09:17
moguimarnikparasyr, I haven't tried barbican with vault backend yet, but I think you're correct09:19
moguimarIt doesn't need to be the root token, just need to have the right permissions09:19
*** d34dh0r53 has joined #openstack-barbican09:20
nikparasyrthanks :). is there some docs somewhere or code that i can easily check what permissions are required? i'll give it a go on a test environment next couple of weeks09:21
*** xek has joined #openstack-barbican11:36
*** xek has quit IRC11:37
*** xek has joined #openstack-barbican11:38
*** raildo has joined #openstack-barbican12:09
*** xek has quit IRC12:44
*** xek_ has joined #openstack-barbican12:44
*** xek__ has joined #openstack-barbican13:05
*** xek_ has quit IRC13:08
*** Giuls has joined #openstack-barbican13:31
*** tkajinam has quit IRC13:31
*** tkajinam has joined #openstack-barbican13:32
GiulsHello everybody. I read on barbican documentation about this channel, I need help on barbican configuration. I had a couple of containers that run rabbitmq, keystone and barbican but when I try to complete the verify step by storing and retrieving a secret the procedure ends up with an error13:34
GiulsI'm lookin for the error...13:34
GiulsInvalid base64-encoded string: number of data characters (281) cannot be 1 more than a multiple of 413:35
*** Giuls has quit IRC13:37
moguimarnikparasyr, I don't think there is such a document13:52
nikparasyrmoguimar: if we decide to go the way of a service token i will make some notes and come back. I think it will be a useful addition to the docs at least13:54
*** Giuls has joined #openstack-barbican14:00
moguimarnikparasyr, sure14:10
*** mgoddard has joined #openstack-barbican14:47
*** openstackgerrit has joined #openstack-barbican14:47
openstackgerritMark Goddard proposed openstack/barbican master: Vault: ensure that secrets are normalized  https://review.opendev.org/c/openstack/barbican/+/76383514:47
openstackgerritMark Goddard proposed openstack/barbican master: Fix Vault functional test  https://review.opendev.org/c/openstack/barbican/+/76420214:47
openstackgerritMark Goddard proposed openstack/barbican master: Vault: enable RSA from ordered container functional test  https://review.opendev.org/c/openstack/barbican/+/76420314:49
dave-mccowanredrobot o/15:04
dave-mccowannm.  i got some emails from zuul for ptl approval, but i see you were copied too.15:06
dave-mccowanhappy thanksgiving! :-)15:06
moguimarredrobot is on PTO dave-mccowan15:06
JohnnyRainbow@Giuls: what exactly steps you're executing? It seems like something was not encoded by base64, maybe you imported certificate incorrectly? Just shooting :)16:03
GiulsI found it eventually, I have configured barbican for using a postgres connection, switching to mariadb has solved the problem16:06
GiulsJust another question, the KEK for simple_crypto_plugin has to be inside ''? Or not?16:07
JohnnyRainbow@Giuls: in my code it was in '' and it was working16:09
Giulsoh good, so it is the database switching16:10
openstackgerritMark Goddard proposed openstack/barbican master: Fix Vault functional test  https://review.opendev.org/c/openstack/barbican/+/76420216:39
*** irclogbot_0 has quit IRC16:41
*** irclogbot_1 has joined #openstack-barbican16:46
*** d34dh0r53 has quit IRC17:00
*** d34dh0r53 has joined #openstack-barbican17:02
*** nikparasyr has left #openstack-barbican17:10
*** d34dh0r53 has quit IRC17:20
*** Giuls has quit IRC17:21
*** xek__ has quit IRC17:37
*** nayarasps has joined #openstack-barbican18:01
*** mgoddard has quit IRC18:04
*** dave-mccowan has quit IRC18:04
*** dave-mccowan has joined #openstack-barbican18:11
*** xek__ has joined #openstack-barbican20:11
*** xek_ has joined #openstack-barbican20:28
*** nayarasps has quit IRC20:29
*** xek__ has quit IRC20:30
*** raildo has quit IRC21:39
*** xek_ has quit IRC22:08
*** dayou has quit IRC22:51
*** dayou has joined #openstack-barbican22:51
*** moguimar has quit IRC23:16
*** moguimar has joined #openstack-barbican23:17
*** JohnnyRainbow has quit IRC23:35
*** JohnnyRainbow has joined #openstack-barbican23:35
*** tosky has quit IRC23:51

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!