| tmcpeak | I mean, I'm not surprised. Good sad path stuff usually takes somebody actively working on them, and I don't think that's what Tempest's focus is | 00:00 |
|---|---|---|
| ccneill | right | 00:00 |
| tmcpeak | also some projects have way more coverage than others | 00:01 |
| tmcpeak | compute has a bunch | 00:01 |
| ccneill | I think I did manage to get unauthed tests into designate and barbican | 00:02 |
| tmcpeak | where is good old Barbican? | 00:03 |
| tmcpeak | https://github.com/openstack/tempest/tree/master/tempest/api | 00:03 |
| ccneill | https://review.openstack.org/#/q/owner:self+status:merged+(project:openstack/barbican+OR+project:openstack/designate) | 00:04 |
| ccneill | ¯\_(ツ)_/¯ | 00:04 |
| ccneill | I'm not really that familiar with what tempest's goals are | 00:04 |
| ccneill | they didn't align with mine :P | 00:04 |
| tmcpeak | cool, yeah, just thought I'd check since I remember hearing Tempest come out of your mouth at some point | 00:05 |
| ccneill | although, funnily enough, I'm using tempest at this moment to test out syntribos-collector | 00:05 |
| tmcpeak | I'll go pester others :) | 00:05 |
| ccneill | I'm trying to dig up a BP that mtreinish pointed me to at the time | 00:05 |
| ccneill | someone else made a similar proposal I think | 00:05 |
| ccneill | and he encouraged me to revive it, until he didn't :/ | 00:06 |
| tmcpeak | lol | 00:06 |
| tmcpeak | that's ok, I'll try to find mtreinish tomorrow | 00:06 |
| tmcpeak | thanks ccneill | 00:07 |
| ccneill | https://blueprints.launchpad.net/tempest/+spec/fuzzy-test | 00:07 |
| tmcpeak | cool, thanks man | 00:08 |
| *** zul has quit IRC | 00:08 | |
| tmcpeak | this predates my OpenStack life | 00:08 |
| ccneill | haha yeah mostly same for me | 00:09 |
| *** sdake_ has quit IRC | 00:17 | |
| *** sdake has joined #openstack-security | 00:18 | |
| *** ccneill has quit IRC | 00:19 | |
| openstackgerrit | Merged openstack/syntribos: An extenstion to retrieve network data from an openstack cloud https://review.openstack.org/369042 | 00:31 |
| openstackgerrit | Darren Chan proposed openstack/security-doc: Use hyperlink markup for the link reference title https://review.openstack.org/369746 | 00:33 |
| *** browne has quit IRC | 00:43 | |
| *** dave-mccowan has joined #openstack-security | 00:43 | |
| *** gfhellma has quit IRC | 00:44 | |
| *** tmcpeak has quit IRC | 01:11 | |
| *** jamielennox is now known as jamielennox|away | 01:26 | |
| *** yeison has joined #openstack-security | 01:37 | |
| *** yeison has left #openstack-security | 01:38 | |
| *** B_Smith has quit IRC | 01:38 | |
| *** B_Smith has joined #openstack-security | 01:40 | |
| *** salv-orlando has joined #openstack-security | 01:41 | |
| *** salv-orl_ has quit IRC | 01:43 | |
| *** sdake_ has joined #openstack-security | 01:45 | |
| *** sdake_ has quit IRC | 01:45 | |
| *** sdake_ has joined #openstack-security | 01:45 | |
| *** sdake has quit IRC | 01:47 | |
| openstackgerrit | chen.xing proposed openstack/security-doc: Update endpoint create command https://review.openstack.org/368314 | 01:52 |
| *** woodster_ has quit IRC | 02:19 | |
| *** ayoung has joined #openstack-security | 02:23 | |
| *** zul has joined #openstack-security | 02:27 | |
| *** zul has quit IRC | 02:28 | |
| *** zul has joined #openstack-security | 02:28 | |
| *** dave-mccowan has quit IRC | 02:38 | |
| *** yuanying has quit IRC | 02:49 | |
| *** zul has quit IRC | 03:05 | |
| *** yuanying has joined #openstack-security | 03:17 | |
| *** yuanying has quit IRC | 03:36 | |
| *** yuanying has joined #openstack-security | 03:37 | |
| *** yuanying has quit IRC | 03:39 | |
| *** yuanying has joined #openstack-security | 03:41 | |
| *** yuanying has quit IRC | 03:42 | |
| *** yuanying has joined #openstack-security | 03:52 | |
| openstackgerrit | KATO Tomoyuki proposed openstack/security-doc: Updated from openstack-manuals https://review.openstack.org/369734 | 03:54 |
| *** rcernin has joined #openstack-security | 05:33 | |
| *** jamielennox|away is now known as jamielennox | 05:40 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/security-doc: Updated from openstack-manuals https://review.openstack.org/369734 | 06:03 |
| *** JAHoagie has joined #openstack-security | 06:08 | |
| *** jass93 has quit IRC | 06:13 | |
| *** salv-orlando has quit IRC | 06:18 | |
| *** pcaruana has joined #openstack-security | 06:32 | |
| *** liverpooler has joined #openstack-security | 06:35 | |
| *** salv-orlando has joined #openstack-security | 06:50 | |
| *** tesseract- has joined #openstack-security | 06:57 | |
| *** jass93 has joined #openstack-security | 06:59 | |
| *** shohel has joined #openstack-security | 07:02 | |
| *** salv-orl_ has joined #openstack-security | 07:40 | |
| *** salv-orlando has quit IRC | 07:42 | |
| *** tkelsey has joined #openstack-security | 07:50 | |
| *** austin987 has quit IRC | 08:22 | |
| *** liverpoo1er has joined #openstack-security | 08:25 | |
| *** liverpooler has quit IRC | 08:26 | |
| *** vinaypotluri has quit IRC | 08:42 | |
| *** JAHoagie has quit IRC | 08:46 | |
| *** sdake_ has quit IRC | 09:28 | |
| openstackgerrit | Allen proposed openstack/security-doc: Use hyperlink markup for the link reference title https://review.openstack.org/369746 | 10:07 |
| *** shohel1 has joined #openstack-security | 10:10 | |
| *** shohel has quit IRC | 10:11 | |
| *** liverpooler has joined #openstack-security | 10:17 | |
| *** liverpoo1er has quit IRC | 10:19 | |
| *** dstufft has quit IRC | 10:40 | |
| *** dstufft has joined #openstack-security | 10:50 | |
| *** dstufft has quit IRC | 10:50 | |
| *** dstufft has joined #openstack-security | 10:50 | |
| *** shohel1 has quit IRC | 11:12 | |
| *** shohel has joined #openstack-security | 11:25 | |
| *** dstufft has quit IRC | 11:34 | |
| *** dstufft has joined #openstack-security | 11:34 | |
| *** openstackgerrit has quit IRC | 11:34 | |
| *** dstufft has quit IRC | 11:34 | |
| *** dstufft has joined #openstack-security | 11:34 | |
| *** openstackgerrit has joined #openstack-security | 11:34 | |
| *** dstufft has quit IRC | 11:36 | |
| *** dstufft has joined #openstack-security | 11:36 | |
| *** dave-mccowan has joined #openstack-security | 11:47 | |
| *** woodster_ has joined #openstack-security | 11:49 | |
| *** edmondsw has joined #openstack-security | 11:55 | |
| *** _elmiko is now known as elmiko | 12:59 | |
| *** singlethink has joined #openstack-security | 13:33 | |
| *** salv-orlando has joined #openstack-security | 13:40 | |
| *** cleong has joined #openstack-security | 13:41 | |
| *** markvoelker has joined #openstack-security | 13:43 | |
| *** salv-orl_ has quit IRC | 13:43 | |
| *** JAHoagie has joined #openstack-security | 13:43 | |
| openstackgerrit | Emma Foley proposed openstack/security-doc: Updated from openstack-manuals https://review.openstack.org/369734 | 13:45 |
| *** tmcpeak has joined #openstack-security | 13:45 | |
| *** JAHoagie has quit IRC | 13:54 | |
| *** woodburn has quit IRC | 13:54 | |
| *** JAHoagie has joined #openstack-security | 13:57 | |
| *** sdake has joined #openstack-security | 13:58 | |
| *** shohel has quit IRC | 14:03 | |
| *** ayoung has quit IRC | 14:08 | |
| *** mvaldes has joined #openstack-security | 14:11 | |
| *** Daviey_ is now known as Daviey | 14:12 | |
| *** JAHoagie has quit IRC | 14:17 | |
| *** ko-ku has joined #openstack-security | 14:24 | |
| *** woodburn has joined #openstack-security | 14:36 | |
| *** diazjf has joined #openstack-security | 14:36 | |
| *** ko-ku has quit IRC | 14:39 | |
| *** mvaldes1 has joined #openstack-security | 14:41 | |
| *** mvaldes has quit IRC | 14:43 | |
| *** JAHoagie has joined #openstack-security | 14:51 | |
| openstackgerrit | Luke Hinds proposed openstack/security-doc: Adding OSSN-0066 https://review.openstack.org/368077 | 14:51 |
| openstackgerrit | Luke Hinds proposed openstack/security-doc: Adding OSSN-0066 https://review.openstack.org/368077 | 14:52 |
| *** prometheanfire has left #openstack-security | 14:57 | |
| *** JAHoagie has quit IRC | 14:57 | |
| *** diazjf has quit IRC | 15:01 | |
| *** vinaypotluri has joined #openstack-security | 15:13 | |
| *** diazjf has joined #openstack-security | 15:24 | |
| *** rcernin has quit IRC | 15:34 | |
| openstackgerrit | Doug Chivers proposed openstack/security-analysis: Initial draft of Barbican review https://review.openstack.org/357978 | 15:36 |
| *** JAHoagie has joined #openstack-security | 15:37 | |
| *** pcaruana has quit IRC | 15:40 | |
| *** ayoung has joined #openstack-security | 15:57 | |
| *** diazjf has quit IRC | 15:59 | |
| *** zul has joined #openstack-security | 16:01 | |
| *** browne has joined #openstack-security | 16:03 | |
| openstackgerrit | Merged openstack/syntribos: Changing get_token to get_scoped_token for neutron templates https://review.openstack.org/370240 | 16:03 |
| *** ayoung has quit IRC | 16:04 | |
| *** mdong has joined #openstack-security | 16:05 | |
| *** mvaldes1 has quit IRC | 16:12 | |
| *** jass93 has quit IRC | 16:14 | |
| *** ccneill has joined #openstack-security | 16:14 | |
| *** gfhellma has joined #openstack-security | 16:16 | |
| *** mvaldes has joined #openstack-security | 16:18 | |
| *** diazjf has joined #openstack-security | 16:23 | |
| *** austin987 has joined #openstack-security | 16:26 | |
| *** gfhellma1 has joined #openstack-security | 16:32 | |
| *** gfhellma has quit IRC | 16:33 | |
| *** rcernin has joined #openstack-security | 16:34 | |
| *** tesseract- has quit IRC | 16:35 | |
| *** sicarie has joined #openstack-security | 16:56 | |
| *** sicarie has quit IRC | 16:59 | |
| *** gfhellma1 has quit IRC | 16:59 | |
| *** mvaldes has quit IRC | 16:59 | |
| *** gfhellma has joined #openstack-security | 17:00 | |
| openstackgerrit | Merged openstack/security-doc: Updated from openstack-manuals https://review.openstack.org/369734 | 17:01 |
| *** sicarie has joined #openstack-security | 17:14 | |
| *** jass93 has joined #openstack-security | 17:18 | |
| *** sicarie has quit IRC | 17:19 | |
| *** mdong_ has joined #openstack-security | 17:26 | |
| mdong_ | ccneill, unrahul: I’m also getting 401’s when the templates use get_scoped_token instead of get_token - what should the config look like? | 17:28 |
| unrahul | hey mdong_ so.. the config should have project_name and domain_name.. if it is there.. then we can get the scoped_token.. | 17:29 |
| *** mdong has quit IRC | 17:29 | |
| *** mdong_ is now known as mdong | 17:29 | |
| unrahul | (theoretically) | 17:29 |
| mdong | so I have project_name=default and domain_name=default | 17:29 |
| mdong | both in the [user] section | 17:29 |
| unrahul | if it is the cluster can u try with project_name=syntribos..? | 17:29 |
| mdong | awesome, that worked | 17:30 |
| mdong | thanks! | 17:30 |
| *** diazjf has quit IRC | 17:30 | |
| unrahul | nice! | 17:30 |
| *** Alexey_Abashkin has joined #openstack-security | 17:38 | |
| *** AlexeyAbashkin has quit IRC | 17:41 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/security-doc: Updated from openstack-manuals https://review.openstack.org/370340 | 17:48 |
| *** ccneill-phone has joined #openstack-security | 17:50 | |
| openstackgerrit | Merged openstack/security-doc: Updated from openstack-manuals https://review.openstack.org/370340 | 17:57 |
| *** mvaldes has joined #openstack-security | 17:57 | |
| vinaypotluri | getting a few 500 and 415 errors lately | 18:12 |
| unrahul | hey ccneill mdong .. can we setup multiple proxies in terminal.. the http_proxy.. ? | 18:17 |
| unrahul | i need it go through two proxy servers | 18:17 |
| mdong | as in, do you need them to be chained together? | 18:18 |
| unrahul | yup | 18:18 |
| unrahul | go through zap proxy + intel proxy | 18:18 |
| ccneill | I think mitmproxy can be set up in a chain like that | 18:19 |
| ccneill | not sure about zap/burp | 18:19 |
| ccneill | LOL | 18:19 |
| ccneill | RAX firewall blocks mitmproxy | 18:19 |
| mdong | I know you can configure Burp to go through a SOCKS proxy | 18:19 |
| mdong | actually in the options tab there’s an option fo Upstream Proxy Server | 18:20 |
| mdong | so maybe play around with either of those | 18:20 |
| mdong | idk about zap though | 18:20 |
| ccneill | yep, just noticed that in burp | 18:20 |
| unrahul | oh.. let me try that.. hopefully zap has something similar.. | 18:22 |
| unrahul | so there is a support ticket open in zap to implement this.. meanwhile the workaround is to edit the startup script and use java options for proxy.. :) | 18:27 |
| unrahul | gonna try that. | 18:27 |
| vinaypotluri | i tried setting intel proxy in upstream settings and it works | 18:28 |
| vinaypotluri | https://support.portswigger.net/customer/en/portal/articles/2363078-burp-suite-options-upstream-proxy-servers | 18:29 |
| unrahul | yeah burp has it.. implemented not zap. | 18:29 |
| *** tkelsey has quit IRC | 18:39 | |
| *** gfhellma has quit IRC | 18:44 | |
| *** diazjf has joined #openstack-security | 18:47 | |
| openstackgerrit | Andreas Jaeger proposed openstack/security-doc: Add marker files https://review.openstack.org/370376 | 18:51 |
| openstackgerrit | Charles Neill proposed openstack/syntribos: Fixing up SSL test https://review.openstack.org/370377 | 18:52 |
| ccneill | got a patch up to optimize the SSL test a bit ^ | 18:53 |
| ccneill | it's buggy right now because it doesn't prepare the request before sending it off | 18:53 |
| ccneill | so I got rid of the test request altogether | 18:53 |
| *** zul_ has quit IRC | 18:55 | |
| *** liverpooler has quit IRC | 18:58 | |
| *** zul has quit IRC | 18:59 | |
| *** gfhellma has joined #openstack-security | 18:59 | |
| *** ayoung has joined #openstack-security | 19:01 | |
| *** zul_ has joined #openstack-security | 19:06 | |
| *** pcaruana has joined #openstack-security | 19:07 | |
| *** david-lyle has joined #openstack-security | 19:10 | |
| *** david-lyle has left #openstack-security | 19:11 | |
| ccneill | oof. our install time is definitely going up as we add these clients.. | 19:18 |
| *** datadog327 has joined #openstack-security | 19:25 | |
| *** sdake_ has joined #openstack-security | 19:29 | |
| *** sdake has quit IRC | 19:33 | |
| *** salv-orl_ has joined #openstack-security | 19:40 | |
| *** gfhellma has quit IRC | 19:42 | |
| *** salv-orlando has quit IRC | 19:43 | |
| *** diazjf has quit IRC | 19:47 | |
| *** ccneill-phone has quit IRC | 19:55 | |
| *** can8dnSix has joined #openstack-security | 19:55 | |
| *** diazjf has joined #openstack-security | 19:55 | |
| *** pcaruana has quit IRC | 20:00 | |
| *** zul has joined #openstack-security | 20:02 | |
| *** tkelsey has joined #openstack-security | 20:04 | |
| *** tkelsey has quit IRC | 20:08 | |
| *** can8dnSix has quit IRC | 20:08 | |
| *** zul has quit IRC | 20:11 | |
| *** zul has joined #openstack-security | 20:12 | |
| *** can8dnSix has joined #openstack-security | 20:13 | |
| *** gfhellma has joined #openstack-security | 20:16 | |
| openstackgerrit | Charles Neill proposed openstack/syntribos: Simplify Glance and Neutron extension clients https://review.openstack.org/370411 | 20:20 |
| ccneill | modified the glance/neutron clients to use our identity extension ^ | 20:20 |
| ccneill | I was getting some funky stuff testing against devstack because it would try to use the catalogue sometimes | 20:20 |
| ccneill | which would give the 10.* address instead of the localhost address specified in the syntribos config | 20:20 |
| ccneill | also means we only have to edit the identity client if keystone changes anything | 20:21 |
| ccneill | and in the future we could move to using the keystone client straight-up, instead of using our own custom client | 20:21 |
| ccneill | (in the identity extension) | 20:21 |
| openstackgerrit | Merged openstack/syntribos: Fixing up SSL test https://review.openstack.org/370377 | 20:25 |
| openstackgerrit | Charles Neill proposed openstack/syntribos: Simplify Glance and Neutron extension clients https://review.openstack.org/370411 | 20:34 |
| *** rcernin has quit IRC | 20:36 | |
| *** rcernin has joined #openstack-security | 20:40 | |
| *** rcernin has quit IRC | 20:41 | |
| *** rcernin has joined #openstack-security | 20:41 | |
| *** rcernin has quit IRC | 20:42 | |
| *** rcernin has joined #openstack-security | 20:42 | |
| unrahul | ccneill: should we remove the identity clients and use the keystone client..? as a refacor..? | 20:47 |
| unrahul | ccneill: remove identity client from extensions. | 20:47 |
| ccneill | I don't think we need to do that right this minute, but yeah we can | 20:53 |
| ccneill | it would bump up our unittest coverage since I think a lot of the code that isn't tested is in the identity extension | 20:54 |
| ccneill | :) | 20:54 |
| unrahul | :D | 20:55 |
| ccneill | unrahul: as for the repeated calls to _get_client, it's so that we get a new token when the memoization cache is cleared | 20:55 |
| ccneill | I was thinking about refactoring it into a class that handles it more elegantly, but I figured this was good for now.. | 20:55 |
| unrahul | well.. not i wrote a unit test for identity.. its has pretty good coverage now.. I think . | 20:55 |
| ccneill | oh, it's been a while since I've looked at our coverage | 20:56 |
| ccneill | let me take a look | 20:56 |
| *** can8dnSix has quit IRC | 20:59 | |
| *** elmiko is now known as _elmiko | 20:59 | |
| ccneill | yeah, looks like the client itself is at 72% now, but the models are lower | 21:00 |
| ccneill | the glance/neutron clients also need some unittests.. | 21:00 |
| unrahul | oh yeah.. i am in the process of writing one for the clients now.. | 21:02 |
| unrahul | if we are eventually gonna remove the identity extension.. may be we can skip writing for the models for now. | 21:02 |
| ccneill | yep | 21:03 |
| *** tkelsey has joined #openstack-security | 21:05 | |
| *** mvaldes has quit IRC | 21:07 | |
| *** tkelsey has quit IRC | 21:09 | |
| unrahul | ccneill: gave a +2 for the patch.. I had the same issue and sometime the client used to get stuck pinging internal ips.. the change fixes it. | 21:10 |
| ccneill | shweet | 21:10 |
| unrahul | :D | 21:10 |
| ccneill | I don't think I'll have any more surprise patches today haha | 21:11 |
| ccneill | running against devstack now, seems to be working well for the most part | 21:11 |
| unrahul | hehe.. I might have that unit test patch.. other than that none from me. too | 21:11 |
| ccneill | might need to tweak some of the templates slightly. post_image is re-using the same UUID right now so it just 409s over and over | 21:11 |
| unrahul | ohh.. | 21:11 |
| ccneill | (that was my bad :X) | 21:11 |
| unrahul | or may be we should randomize the returning of ids.. ? | 21:12 |
| unrahul | at least that might help in some cases.. | 21:12 |
| unrahul | not all though..? | 21:12 |
| unrahul | rather than returning the last one in the list.. | 21:12 |
| ccneill | so in this case it actually lets you specify what you want the image UUID to be, so I'd just change it to do a get_uuid | 21:13 |
| *** diazjf has quit IRC | 21:15 | |
| unrahul | ohh. | 21:15 |
| unrahul | okay.. get it. | 21:15 |
| ccneill | weird.. syntribos seems to have frozen o_O | 21:18 |
| ccneill | or at least it did for a minute.. | 21:18 |
| *** datadog327 has quit IRC | 21:19 | |
| unrahul | eh.. is it burp.? | 21:19 |
| *** edmondsw has quit IRC | 21:21 | |
| ccneill | might've been | 21:22 |
| ccneill | ¯\_(ツ)_/¯ | 21:22 |
| ccneill | back to normal now | 21:22 |
| ccneill | no test failures.. | 21:22 |
| ccneill | at least for the one it paused on | 21:22 |
| *** diazjf has joined #openstack-security | 21:25 | |
| openstackgerrit | Merged openstack/syntribos: Simplify Glance and Neutron extension clients https://review.openstack.org/370411 | 21:25 |
| unrahul | hehe. | 21:25 |
| unrahul | hey ccneill so I got a weird behavior | 21:25 |
| ccneill | sup? | 21:25 |
| unrahul | well.. no I am wrong its as expected.. only thing is that.. the clent openstack image list will not all the images that is created. | 21:26 |
| unrahul | like I have 11 pages full of images created which can be seen from horizon.. but the client only shows the images listed in the first page. | 21:27 |
| ccneill | right | 21:28 |
| ccneill | so it paginates the request and requests the first 20 | 21:28 |
| ccneill | it does a call for /v2/images?limit=20 | 21:28 |
| unrahul | hmm.. yeah.. as expected.. then. :. | 21:29 |
| unrahul | :/ | 21:29 |
| ccneill | hmm.. I am seeing some weird behavior though o_O | 21:32 |
| ccneill | doing a GET on /v2.0/routers with an admin token gives me alternating 200s and 401s | 21:32 |
| ccneill | on the OSIC cluster | 21:32 |
| ccneill | (was looking to see if we had any extra routers we could delete) | 21:32 |
| ccneill | wondering if it's trying to use a round-robin or something... | 21:32 |
| unrahul | eh.. we only have one router. though.. and it should ideally give 200s for all. | 21:34 |
| unrahul | :o | 21:34 |
| *** cleong has quit IRC | 21:34 | |
| ccneill | try it out with Burp/ZAP | 21:35 |
| *** dave-mccowan has quit IRC | 21:48 | |
| *** diazjf has quit IRC | 22:01 | |
| *** browne has quit IRC | 22:13 | |
| *** singlethink has quit IRC | 22:35 | |
| *** sdake_ has quit IRC | 22:40 | |
| *** rcernin has quit IRC | 22:43 | |
| *** zul has quit IRC | 22:44 | |
| *** gfhellma1 has joined #openstack-security | 22:48 | |
| *** gfhellma has quit IRC | 22:50 | |
| *** gfhellma1 has quit IRC | 22:54 | |
| *** mdong has quit IRC | 23:01 | |
| *** jass93 has quit IRC | 23:12 | |
| *** browne has joined #openstack-security | 23:13 | |
| *** jamielennox is now known as jamielennox|away | 23:22 | |
| *** tim26 has joined #openstack-security | 23:26 | |
| *** singlethink has joined #openstack-security | 23:26 | |
| *** singlethink has quit IRC | 23:26 | |
| *** tim26 has left #openstack-security | 23:27 | |
| *** singlethink has joined #openstack-security | 23:27 | |
| *** browne has quit IRC | 23:45 | |
| *** singlethink has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!