| zigo | Hi there! Under Debian Trixie, with Barbican from Flamingo, I'm getting this in both unit testing and in functional tests, or when I try manually (ie: logs in barbican-api.log): | 07:38 |
|---|---|---|
| zigo | https://paste.opendev.org/show/bgVWMcukz5tgy1HtzNiL/ | 07:38 |
| zigo | Traceback (most recent call last): | 07:38 |
| zigo | File "/usr/lib/python3/dist-packages/barbican/plugin/util/utils.py", line 41, in instantiate_plugins | 07:38 |
| zigo | plugin_instance = ext.plugin(*invoke_args, **invoke_kwargs) | 07:38 |
| zigo | File "/usr/lib/python3/dist-packages/barbican/plugin/crypto/simple_crypto.py", line 58, in __init__ | 07:38 |
| zigo | if len(conf.simple_crypto_plugin.kek) < 1: | 07:38 |
| zigo | ~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ | 07:38 |
| zigo | TypeError: object of type 'NoneType' has no len() | 07:38 |
| zigo | I think I get it. | 07:54 |
| zigo | The config value for kek= has lost its default value. If we had nothing configured in our old deployment, is this a security problem ? | 07:54 |
| tkajinam | zigo, https://bugs.launchpad.net/barbican/+bug/2119531 | 12:27 |
| tkajinam | zigo, the root context is https://review.opendev.org/c/openstack/barbican/+/941577 | 12:28 |
| tkajinam | which is a breaking change merged without any release note :-) | 12:28 |
| zigo | Thanks man, I think I get it, I tried setting-up OS_SIMPLE_CRYPTO_PLUGIN__KEK= for running my build-time tests, but it's working half the times. :/ | 13:24 |
| zigo | It'd be nicer if the tests were setting-up the KEK by themselves. | 13:24 |
| zigo | Gosh, each time I run, I get a different set of unit test failures. | 16:10 |
| zigo | If I set stestr with the --serial option instead of --parallel, then it works. Something's weird ... | 16:46 |
| * zigo just opened a bug for that. | 19:04 | |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!