Thursday, 2015-08-06

« Wednesday, 2015-08-05 Index Friday, 2015-08-07 »
*** everjeje has quit IRC00:12
*** crc32 has quit IRC00:22
*** elmiko has quit IRC00:29
*** gyee has quit IRC00:41
*** SheenaG1 has quit IRC00:42
*** SheenaG has joined #openstack-barbican02:02
*** SheenaG has quit IRC02:13
*** vivek-ebay has quit IRC02:16
*** dave-mccowan has joined #openstack-barbican02:40
*** silos has joined #openstack-barbican02:43
*** silos has left #openstack-barbican02:43
*** alee_ has joined #openstack-barbican02:56
*** mmdurrant has quit IRC03:25
*** mmdurrant has joined #openstack-barbican03:26
*** dave-mccowan has quit IRC03:42
*** vivek-ebay has joined #openstack-barbican03:47
*** vivek-ebay has quit IRC03:53
*** vivek-ebay has joined #openstack-barbican04:05
*** vivek-ebay has quit IRC04:10
*** vivek-ebay has joined #openstack-barbican04:10
*** xaeth_afk is now known as xaeth04:14
*** vivek-ebay has quit IRC04:25
*** vivek-ebay has joined #openstack-barbican04:26
*** vivek-ebay has quit IRC04:28
*** vivek-ebay has joined #openstack-barbican04:29
*** xaeth is now known as xaeth_afk04:59
*** vivek-ebay has quit IRC05:03
*** alee_ has quit IRC05:07
*** alee_ has joined #openstack-barbican05:28
*** Nirupama has joined #openstack-barbican05:29
*** nickrmc83 has joined #openstack-barbican06:16
*** shohel has joined #openstack-barbican06:51
*** everjeje has joined #openstack-barbican07:37
*** tkelsey has joined #openstack-barbican08:13
*** alee_ has quit IRC08:38
*** alee_ has joined #openstack-barbican09:30
*** yuanying has quit IRC10:09
*** mmdurrant has quit IRC10:09
*** shohel has quit IRC11:03
*** shohel1 has joined #openstack-barbican11:03
*** alee_ has quit IRC11:08
*** shohel1 has quit IRC11:19
*** shohel has joined #openstack-barbican11:19
*** yuanying has joined #openstack-barbican11:24
*** yuanying has quit IRC11:29
*** alee_ has joined #openstack-barbican11:30
*** alee_ has quit IRC11:45
*** nelsnelson has quit IRC11:57
*** darrenmoffat has quit IRC12:15
*** darrenmoffat has joined #openstack-barbican12:16
*** alee_ has joined #openstack-barbican12:20
*** mmdurrant has joined #openstack-barbican12:37
*** alee_ has quit IRC12:39
tkelseyhello Barbican folks, anyone around who might know about Barbican in devstack?12:42
tkelseyim trying to get it to work with cinder, but is moaning about policy stuff #link http://paste.openstack.org/show/411152/12:42
tkelseythis is stable/kilo12:43
*** diazjf has joined #openstack-barbican12:56
*** SheenaG has joined #openstack-barbican12:56
*** Nirupama has quit IRC12:57
*** dave-mccowan has joined #openstack-barbican13:01
*** rellerreller has joined #openstack-barbican13:02
*** diazjf1 has joined #openstack-barbican13:03
*** dave-mcc_ has joined #openstack-barbican13:04
*** diazjf has quit IRC13:05
*** kfarr has joined #openstack-barbican13:05
*** dave-mccowan has quit IRC13:07
*** yuanying has joined #openstack-barbican13:12
*** SheenaG has quit IRC13:16
*** yuanying has quit IRC13:17
*** SheenaG has joined #openstack-barbican13:17
*** alee_ has joined #openstack-barbican13:22
*** SheenaG has quit IRC13:34
*** diazjf has joined #openstack-barbican13:45
*** diazjf1 has quit IRC13:47
*** diazjf1 has joined #openstack-barbican13:56
*** diazjf has quit IRC13:56
*** diazjf has joined #openstack-barbican13:59
*** diazjf1 has quit IRC14:00
*** diazjf1 has joined #openstack-barbican14:03
*** diazjf has quit IRC14:05
*** zz_dimtruck is now known as dimtruck14:05
*** diazjf has joined #openstack-barbican14:06
*** diazjf1 has quit IRC14:08
*** alee_ has quit IRC14:08
*** diazjf1 has joined #openstack-barbican14:09
*** diazjf has quit IRC14:11
*** diazjf has joined #openstack-barbican14:11
*** diazjf1 has quit IRC14:13
*** Kevin_Bishop has joined #openstack-barbican14:13
*** diazjf1 has joined #openstack-barbican14:13
*** SheenaG has joined #openstack-barbican14:13
openstackgerritDave McCowan proposed openstack/barbican-specs: Update Quota Blueprint Spec with New Details  https://review.openstack.org/20367814:15
*** diazjf has quit IRC14:15
*** diazjf has joined #openstack-barbican14:16
*** diazjf1 has quit IRC14:17
*** diazjf1 has joined #openstack-barbican14:18
*** diazjf has quit IRC14:20
*** alee_ has joined #openstack-barbican14:20
*** diazjf has joined #openstack-barbican14:21
*** diazjf2 has joined #openstack-barbican14:22
*** diazjf1 has quit IRC14:23
*** diazjf has quit IRC14:25
*** diazjf has joined #openstack-barbican14:26
*** diazjf2 has quit IRC14:26
*** pglass has joined #openstack-barbican14:27
*** mixos has joined #openstack-barbican14:29
*** diazjf1 has joined #openstack-barbican14:30
*** diazjf has quit IRC14:31
*** mixos_ has joined #openstack-barbican14:31
*** diazjf has joined #openstack-barbican14:33
*** mixos has quit IRC14:33
*** diazjf1 has quit IRC14:34
tkelseyhey, anyone with know how on devstack+barbican around?14:35
*** diazjf1 has joined #openstack-barbican14:36
*** diazjf has quit IRC14:38
*** alee_ has quit IRC14:40
*** diazjf has joined #openstack-barbican14:40
*** diazjf1 has quit IRC14:41
*** diazjf1 has joined #openstack-barbican14:43
*** diazjf has quit IRC14:44
*** diazjf has joined #openstack-barbican14:47
*** diazjf1 has quit IRC14:48
openstackgerritSteve Heyman proposed openstack/barbican-specs: Update template for client impact  https://review.openstack.org/20996714:49
*** diazjf1 has joined #openstack-barbican14:52
*** alee_ has joined #openstack-barbican14:53
*** diazjf has quit IRC14:54
kfarrtkelsey, I run devstack with barbican in my dev environment14:54
*** diazjf has joined #openstack-barbican14:55
*** diazjf1 has quit IRC14:56
*** alee_ has quit IRC14:58
tkelseyhey kfarr14:58
tkelseyso I am trying to run barbican with cinder in devstack, its sort of working but I have a policy error14:59
tkelsey#link http://paste.openstack.org/show/411188/15:00
*** shohel has quit IRC15:00
tkelseykfarr: any idea what might be up?15:00
*** yuanying has joined #openstack-barbican15:00
*** diazjf has quit IRC15:01
*** diazjf has joined #openstack-barbican15:01
*** edtubill has joined #openstack-barbican15:03
*** yuanying has quit IRC15:05
kfarrtkelsey I have not run with Cinder in awhile, and I have not seen that sort of error before.  I'll have to defer, but I'll keep an eye out :/15:05
tkelseyok kfarr, thank you for taking a look :) appreciated15:07
*** diazjf1 has joined #openstack-barbican15:08
*** diazjf has quit IRC15:09
*** edtubill has left #openstack-barbican15:10
*** alee_ has joined #openstack-barbican15:11
*** diazjf has joined #openstack-barbican15:12
*** diazjf1 has quit IRC15:12
*** gyee has joined #openstack-barbican15:14
openstackgerritMerged openstack/castellan: Add functional tests for Barbican key manager wrapper  https://review.openstack.org/19923415:16
*** vivek-ebay has joined #openstack-barbican15:17
*** alee_ has quit IRC15:19
*** diazjf1 has joined #openstack-barbican15:19
*** diazjf has quit IRC15:19
thervetkelsey, I guess you're trying to create an order as a regular user?15:22
*** diazjf has joined #openstack-barbican15:23
*** diazjf1 has quit IRC15:25
thervetkelsey, You can either run it as admin, or add the 'creator' role to your user15:25
tkelseytherve: I see, so I know very little about this, i'll see if i can fiddle with it :) thanks for  the info15:27
*** edtubill has joined #openstack-barbican15:28
redrobottkelsey sorry about the delay, we're all in MD for the mid-cycle15:28
redrobottkelsey paste looks like you don't have the right roles.15:29
*** diazjf1 has joined #openstack-barbican15:29
redrobottkelsey like therve said, try adding "admin" or "creator" role to your user.15:29
*** diazjf has quit IRC15:29
tkelseysure, next question, how do I do that? I really dont know much about roles etc15:30
tkelseythis is the "demo" user that devstack setup15:30
tkelseyi didnt see anything obvious poking around horizon15:30
thervetkelsey, http://docs.openstack.org/user-guide-admin/manage_projects_users_and_roles.html15:31
*** diazjf has joined #openstack-barbican15:31
therveYou probably need to dig using the command line as admin15:31
tkelseyah excellent, i'll RTFM :) thanks therve15:31
*** alee_ has joined #openstack-barbican15:32
therveNP :)15:32
openstackgerritDaniel Tadrzak proposed openstack/barbican: Order Object  https://review.openstack.org/20301415:33
*** diazjf1 has quit IRC15:33
*** diazjf1 has joined #openstack-barbican15:34
*** xaeth_afk is now known as xaeth15:34
*** diazjf has quit IRC15:35
*** alee_ has quit IRC15:36
*** mixos_ has quit IRC15:40
*** mixos has joined #openstack-barbican15:40
*** diazjf has joined #openstack-barbican15:42
*** diazjf1 has quit IRC15:43
tkelseyah ha! that's got it working now, thank you redrobot therve kfarr :)15:44
redrobottkelsey awesome!  glad we could help15:45
*** mixos has quit IRC15:46
*** diazjf1 has joined #openstack-barbican15:46
*** mixos has joined #openstack-barbican15:47
*** alee_ has joined #openstack-barbican15:48
*** diazjf has quit IRC15:48
*** diazjf has joined #openstack-barbican15:49
*** diazjf1 has quit IRC15:51
*** nickrmc83 has quit IRC15:52
*** diazjf1 has joined #openstack-barbican15:52
kfarrtkelsey what cinder command were you doing when you ran into that error? creating an encrypted volume?15:53
*** diazjf has quit IRC15:53
tkelseyi was using horizon to create an encrypted volume15:54
tkelseymostly following this http://docs.openstack.org/kilo/config-reference/content/section_initial-configuration.html15:54
tkelseybut using barbican for the key manager15:54
*** diazjf has joined #openstack-barbican15:55
kfarrRight, were you at the step where you were creating the encrypted volume type or were you creating the volume itself using that type?15:56
kfarrLike, I know you were using Horizon, but was it http://docs.openstack.org/kilo/config-reference/content/section_create-encrypted-volume-type.html or http://docs.openstack.org/kilo/config-reference/content/section_create_volume.html15:57
tkelseyI had the type "LUKS" setup fine15:57
*** diazjf1 has quit IRC15:57
tkelseyso the equivalent cinder command would be " cinder create --display-name 'encrypted volume' --volume-type LUKS 1"15:57
*** alee_ has quit IRC15:58
*** diazjf1 has joined #openstack-barbican15:58
tkelseyi needed to add the "creator" role as advised here, then add it to "demo" user with "demo" project15:59
tkelseyI also had to make the demo project the active project in horizon15:59
tkelseythen it all worked nicely, maybe i'll do a write up of this lol16:00
*** diazjf has quit IRC16:00
kfarrYeah, it used to be that you could just use the default accounts that devstack created, admin to create volume type, but could be demo (non-admin) to use that volume-type16:01
*** diazjf has joined #openstack-barbican16:01
*** rm_work is now known as rm_work|away16:02
tkelseyright, i was trying to do this all under demo.16:02
*** diazjf1 has quit IRC16:03
*** diazjf1 has joined #openstack-barbican16:04
*** diazjf has quit IRC16:06
*** alee_ has joined #openstack-barbican16:10
*** diazjf has joined #openstack-barbican16:11
*** diazjf1 has quit IRC16:13
*** mixos has quit IRC16:13
openstackgerritLisa Clark proposed openstack/barbican-specs: Reordering project spec list  https://review.openstack.org/21000916:14
*** diazjf1 has joined #openstack-barbican16:16
openstackgerritLisa Clark proposed openstack/barbican-specs: Reordering project spec list  https://review.openstack.org/21000916:16
openstackgerritLisa Clark proposed openstack/barbican-specs: Reordering project spec list  https://review.openstack.org/21000916:17
*** diazjf has quit IRC16:18
openstackgerritMerged openstack/python-barbicanclient: Updated from global requirements  https://review.openstack.org/20872716:18
*** alee_ has quit IRC16:18
*** diazjf has joined #openstack-barbican16:19
*** diazjf1 has quit IRC16:21
*** lisaclark1 has joined #openstack-barbican16:31
*** alee_ has joined #openstack-barbican16:32
*** lisaclark2 has joined #openstack-barbican16:33
*** vivek-eb_ has joined #openstack-barbican16:34
*** lisaclark1 has quit IRC16:35
*** vivek-ebay has quit IRC16:37
*** vivek-eb_ has quit IRC16:38
*** lisaclark1 has joined #openstack-barbican16:40
*** alee_ has quit IRC16:41
*** lisaclark2 has quit IRC16:43
*** diazjf1 has joined #openstack-barbican16:47
*** diazjf has quit IRC16:47
*** diazjf1 has left #openstack-barbican16:48
*** yuanying has joined #openstack-barbican16:48
*** SheenaG has quit IRC16:52
*** yuanying has quit IRC16:53
*** alee_ has joined #openstack-barbican16:55
*** spotz_zzz is now known as spotz16:56
*** vivek-ebay has joined #openstack-barbican16:57
*** SheenaG has joined #openstack-barbican16:58
openstackgerritLisa Clark proposed openstack/barbican: Removing Cloudkeep from comments  https://review.openstack.org/21003116:59
*** lisaclark2 has joined #openstack-barbican17:00
*** alee_ has quit IRC17:02
*** lisaclark1 has quit IRC17:03
*** gyee has quit IRC17:05
*** lisaclark2 has quit IRC17:06
openstackgerritMerged openstack/barbican-specs: Reordering project spec list  https://review.openstack.org/21000917:08
*** alee_ has joined #openstack-barbican17:14
*** chlong has quit IRC17:14
tkelseyruh roh, hit another issue with Barbican/Cinder/Nova in devstack. http://paste.openstack.org/show/411216/17:26
hockeynutnew record - actually took 4 seconds between time I put up the CR until it was merged. openstacksdk ftw!  https://review.openstack.org/#/c/210046/17:26
tkelseyi think the URL in that paste should start /v1/ ??17:26
*** mixos has joined #openstack-barbican17:28
*** alee_ has quit IRC17:30
redrobottkelsey yeah, definitely should start with /v1/17:34
*** lisaclark1 has joined #openstack-barbican17:34
openstackgerritSteve Heyman proposed openstack/barbican-specs: Update template for client impact  https://review.openstack.org/20996717:34
kfarrtkelsey, was that nova or cinder ?17:34
tkelseyredrobot: cool, guess i need to open a bug17:34
hockeynutthanks for the keen eyes, redrobot17:34
tkelseykfarr: you know im not sure :P i'll find out17:34
kfarrah perhaps it does not matter if you you already pinpointed the issue to Barbican instead of the code that was invoking Barbican17:35
*** lisaclark2 has joined #openstack-barbican17:35
*** lisaclark1 has quit IRC17:38
tkelseykfarr: looks like it came from cinder17:40
tkelseyit happens when I try to attach a crypto volume17:41
*** alee_ has joined #openstack-barbican17:42
redrobottkelsey I wonder if maybe you have an old version of python-barbicanclient17:43
redrobottkelsey older versions expected the catalog entry to have /v1/ appended to it17:44
redrobottkelsey newer versions expect the catalog to not have /v1, and will add it itself.17:44
tkelseyredrobot: perhaps, I have whatever devstack installed for stable/kilo... other requests seem to work (with /v1/ ...)17:44
tkelseyredrobot: -e git://git.openstack.org/openstack/python-barbicanclient.git@4a500d730a44d8e7b85e9fb304775b00fc42cc27#egg=python_barbicanclient-master17:46
*** mmdurrant has quit IRC17:47
*** alee_ has quit IRC17:47
tkelseyI have put more output here #link http://paste.openstack.org/show/411223/17:50
tkelseyit is doing things like  DELETE http://localhost:9311/v1/secrets/2b0db6... correctly, also GET http://localhost:9311/v1/orders/d0... but then drops the /v1/ for  GET /secrets/3c837a....17:52
tkelseylooks like a bug17:52
redrobottkelsey possibly a bug with the client.17:54
tkelseyredrobot: yeah, I'll find some time to look over the code, its getting late here now though (UK TZ)17:54
redrobottkelsey or possibly a bug with the order data... what's the json returned from GET /v1/orders/...17:55
tkelseyredrobot: looking now17:57
*** alee_ has joined #openstack-barbican18:00
tkelseyredrobot: ok, im not sure how to fund that our18:01
tkelsey*out18:01
*** spotz is now known as spotz_zzz18:02
redrobotcurl -h "X-Auth-Token: keystone-token-here" http://localhost:9311/v1/orders/your-uuid18:02
tkelseyredrobot: cool, i'll give it a go :)18:02
redrobottkelsey oh, and -H "Accept: application/json"18:03
*** alee_ has quit IRC18:06
kfarrtkelsey, I think I pinpointed the issue18:08
tkelseyoh cool :) what's it look like?18:09
kfarrCinder side never calls the key manager's get_key, but the nova side does18:09
kfarrand when nova calls get_key, it creates the secret ref on the fly18:10
kfarrbased on the barbican endpoint in the keystone session18:10
kfarrunless it's hardcoded in the nova config file18:10
kfarrand through testing through the command line, retrieving the endpoint does not have the v1 at the end18:11
tkelseyi see, that sounds like it makes sense18:12
kfarrso it's gonna try doing18:12
kfarrbarbican_client.secrets.get('http://localhost:9311/secrets/<uuid>')18:12
tkelseyyeah, that looks like what im seeing18:13
kfarrthis never happens on the cinder side (for get order, delete key) because the refs are created differently18:13
kfarrThat's my theory18:14
tkelseyit sounds reasonable, im still trying to get the keystone token to use with curl lol18:14
tkelseyOK, I have to log now, thanks for looking over this everyone :)18:18
*** alee_ has joined #openstack-barbican18:18
*** tkelsey has quit IRC18:22
*** mariojv has joined #openstack-barbican18:34
*** mariojv has left #openstack-barbican18:34
*** xaeth is now known as xaeth_afk18:35
*** yuanying has joined #openstack-barbican18:37
openstackgerritDave McCowan proposed openstack/barbican-specs: Update Quota Blueprint Spec with New Details  https://review.openstack.org/20367818:37
*** edtubill1 has joined #openstack-barbican18:40
*** edtubill has quit IRC18:40
*** gyee has joined #openstack-barbican18:40
*** alee_ has quit IRC18:41
*** yuanying has quit IRC18:41
*** xaeth_afk is now known as xaeth18:42
*** lisaclark2 has quit IRC18:50
*** everjeje has quit IRC18:52
*** alee_ has joined #openstack-barbican18:53
*** chadlung has joined #openstack-barbican18:54
*** lisaclark1 has joined #openstack-barbican19:04
openstackgerritKaitlin Farr proposed openstack/castellan: Update mock key manager  https://review.openstack.org/20587019:36
*** SheenaG has quit IRC19:39
*** alee_ has quit IRC19:41
*** SheenaG has joined #openstack-barbican19:42
openstackgerritKaitlin Farr proposed openstack/castellan: Update Barbican wrapper  https://review.openstack.org/20856919:43
*** alee_ has joined #openstack-barbican19:53
*** alee_ has quit IRC20:10
*** DCWilliams_VA has joined #openstack-barbican20:21
openstackgerritMerged openstack/barbican: Removing Cloudkeep from comments  https://review.openstack.org/21003120:22
*** alee_ has joined #openstack-barbican20:24
*** yuanying has joined #openstack-barbican20:25
openstackgerritFernando Diaz proposed openstack/python-barbicanclient: Allow Barbican Client Secret Update Functionality  https://review.openstack.org/19687620:25
*** DCWilliams_VA has quit IRC20:26
*** rm_work|away is now known as rm_work20:28
*** alee_ has quit IRC20:29
*** yuanying has quit IRC20:29
*** mixos has quit IRC20:32
*** lisaclark1 has quit IRC20:35
*** alee_ has joined #openstack-barbican20:42
*** atiwari has joined #openstack-barbican20:46
openstackgerritFernando Diaz proposed openstack/python-barbicanclient: Allow Barbican Client Secret Update Functionality  https://review.openstack.org/19687620:55
*** alee_ has quit IRC21:00
*** rm_work is now known as rm_work|away21:07
*** alee_ has joined #openstack-barbican21:13
openstackgerritKaitlin Farr proposed openstack/castellan: Add managed objects hierarchy  https://review.openstack.org/19188421:18
*** kfarr has quit IRC21:20
*** alee_ has quit IRC21:22
*** rellerreller has quit IRC21:24
*** dave-mcc_ has quit IRC21:26
*** Kevin_Bishop has quit IRC22:00
*** edtubill1 has quit IRC22:11
*** yuanying has joined #openstack-barbican22:13
*** yuanying has quit IRC22:17
*** crc32 has joined #openstack-barbican22:37
*** pglass has quit IRC22:37
*** xaeth is now known as xaeth_afk22:41
*** chadlung has quit IRC22:51
*** SheenaG has quit IRC22:58
*** chadlung has joined #openstack-barbican23:08
*** chadlung has quit IRC23:12
*** yuanying has joined #openstack-barbican23:14
*** yuanying has quit IRC23:18
*** yuanying has joined #openstack-barbican23:23
*** _jungh4ns has quit IRC23:25
*** Daviey has quit IRC23:25
*** Daviey has joined #openstack-barbican23:26
*** _jungh4ns has joined #openstack-barbican23:27
*** morganfainberg is now known as morgan_50323:31
*** crc32 has quit IRC23:35
*** dimtruck is now known as zz_dimtruck23:57
« Wednesday, 2015-08-05 Index Friday, 2015-08-07 »

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!