Monday, 2015-08-31

« Sunday, 2015-08-30 Index Tuesday, 2015-09-01 »
*** dimtruck is now known as zz_dimtruck00:15
openstackgerritMotohiro/Yuanying Otsuka proposed openstack/barbican: Set host_href parameter in devstack  https://review.openstack.org/21809100:36
*** everjeje has quit IRC00:42
*** diazjf has quit IRC00:45
*** chlong has joined #openstack-barbican00:55
*** diazjf has joined #openstack-barbican01:10
openstackgerritFernando Diaz proposed openstack/barbican: Allow debug flag in Barbican tox and debugging documentation  https://review.openstack.org/20862301:10
openstackgerritFernando Diaz proposed openstack/barbican: Add some documentation on running a single functional test case  https://review.openstack.org/21811701:11
*** SheenaG has joined #openstack-barbican01:17
*** zz_dimtruck is now known as dimtruck01:24
*** dimtruck is now known as zz_dimtruck01:29
*** nkinder has quit IRC01:37
*** nkinder has joined #openstack-barbican01:37
*** SheenaG1 has joined #openstack-barbican01:39
*** SheenaG has quit IRC01:40
*** SheenaG1 has quit IRC01:41
*** diazjf has quit IRC01:45
*** chlong has quit IRC01:49
*** diazjf has joined #openstack-barbican02:17
*** kebray has joined #openstack-barbican02:33
*** kebray has quit IRC02:33
*** kebray has joined #openstack-barbican02:34
*** kebray_ has joined #openstack-barbican02:53
*** kebray has quit IRC02:56
*** eglute has quit IRC03:25
*** jroll has quit IRC03:26
*** jroll has joined #openstack-barbican03:31
*** eglute has joined #openstack-barbican03:31
*** kebray_ has quit IRC03:37
*** kebray has joined #openstack-barbican03:37
*** diazjf has left #openstack-barbican03:49
openstackgerritDave McCowan proposed openstack/barbican: Add Functional Tests for Quota Enforcement  https://review.openstack.org/21871704:06
*** ig0r__ has joined #openstack-barbican04:59
*** ig0r_ has quit IRC04:59
openstackgerritDave McCowan proposed openstack/barbican: Add Functional Tests for Quota Enforcement  https://review.openstack.org/21871705:16
*** kebray has quit IRC05:17
*** dave-mccowan has quit IRC05:29
*** Nirupama has joined #openstack-barbican05:30
*** shohel has joined #openstack-barbican06:16
pksinghrm_work: Hi, are you around?06:27
*** shohel has quit IRC07:01
*** shohel has joined #openstack-barbican07:01
*** everjeje has joined #openstack-barbican07:13
*** shohel has quit IRC07:37
*** shohel1 has joined #openstack-barbican07:37
*** mixos has quit IRC08:28
rm_workpksingh: i am now... not sure when you sent that message exactly :P08:31
pksinghrm_work: thanks08:32
pksinghrm_work: i have some queries related to some requirements08:32
rm_workok08:32
pksinghcan i ask now08:32
rm_workyeah, somewhat tired but I will try to answer :P08:32
pksinghthere is a requirement in magnum they want to have different CAs for different users somewhat08:33
pksinghlike CAs as service08:33
pksinghis it possible in barbican?08:34
rm_workit was theoretically possible per the original spec I think?08:35
rm_workat least, we talked about this requirement for LBaaS as well08:36
rm_workbut I don't know if it can actually be done yet08:36
rm_workat least with the basic plugin08:36
rm_workdogtag can do it, so maybe by using the dogtag plugin? :P08:36
pksinghbut i think currently there is no such API in barbican for this08:37
rm_workyeah so it's "per project CA"08:37
rm_workI'd have to review the spec to see if it was actually done for the current implementation08:37
rm_workbut as I mentioned, I think dogtag can already do it08:38
pksinghok, but how to create different CA via barbican API?08:39
rm_work... hmm08:40
pksinghif you are tired then we can discuss this in tomorrow morning also if its good to you :)08:41
rm_worki mean, technically i am on vacation tomorrow too :P08:41
rm_workbut sec08:41
pksinghohh08:42
rm_workso this is where it's mentioned08:42
rm_workhttp://specs.openstack.org/openstack/barbican-specs/specs/kilo/identify-cas.html08:42
pksinghok i will read this thanks a lot, see you day after tomorrow , enjoy the holiday :)08:43
rm_workand https://github.com/openstack/barbican-specs/blob/master/specs/liberty/add-cas.rst implies only admins can set them up...08:43
rm_workthe appropriate CRs weren't linked to the BP correctly though, so I can't easily find the implementing CRs :(08:44
rm_workheh yes, good luck :P08:44
rm_workI am not 100% sure it is actually possible to do yet08:45
rm_workso... let me know, because I will need to do this same thing possibly for LBaaS T_T08:45
pksinghalee: HI, are you there?08:54
pksinghalee: i have a query regarding the spec https://github.com/openstack/barbican-specs/blob/master/specs/liberty/add-cas.rst, is it implemented? specially  dogtag sub CAs one?08:56
pksinghalee: according to the blueprint its implemented09:13
*** shohel1 has quit IRC09:30
*** shohel has joined #openstack-barbican09:31
*** ig0r_ has joined #openstack-barbican09:37
*** ig0r__ has quit IRC09:39
*** mmdurrant has quit IRC10:09
*** shohel has quit IRC10:26
*** shohel has joined #openstack-barbican10:26
*** DTadrzak has joined #openstack-barbican10:44
*** peter-hamilton has joined #openstack-barbican11:17
*** openstackgerrit has quit IRC11:46
*** openstackgerrit has joined #openstack-barbican11:47
*** mmdurrant has joined #openstack-barbican11:58
*** dtadrzak_ has joined #openstack-barbican12:03
*** dave-mccowan has joined #openstack-barbican12:08
*** shohel has quit IRC12:32
*** shohel has joined #openstack-barbican12:32
*** shohel has quit IRC12:36
*** shohel has joined #openstack-barbican12:36
dave-mccowanFriendly request for code reviews today.  LIberty-3 milestone is this week.  https://review.openstack.org/#/c/216253/  Please ping me if you have any questions.12:58
*** Nirupama has quit IRC13:15
*** shohel has quit IRC13:18
*** shohel has joined #openstack-barbican13:21
peter-hamiltondave-mccowan: on it!13:23
dave-mccowanpeter-hamilton thanks!13:23
*** darrenmoffat has quit IRC13:28
*** darrenmoffat has joined #openstack-barbican13:29
dave-mccowanpeter-hamilton if you're still in a quota state-of-mind, please keep going.  there are 4 CRs in the chain to get to feature-complete. :-)13:30
*** SheenaG has joined #openstack-barbican13:41
*** rellerreller has joined #openstack-barbican13:45
aleepksingh, pong13:48
*** SheenaG has quit IRC14:00
*** insequent has quit IRC14:00
*** jroll has quit IRC14:09
*** jroll has joined #openstack-barbican14:09
*** edtubill has joined #openstack-barbican14:11
*** zz_dimtruck is now known as dimtruck14:11
peter-hamiltondave-mccowan: sorry, had a meeting. i'm jumping back in now.14:16
*** spotz_zzz is now known as spotz14:16
*** SheenaG has joined #openstack-barbican14:26
*** pglass has joined #openstack-barbican14:28
*** jlhinson has joined #openstack-barbican14:30
*** SheenaG has quit IRC14:34
*** jhfeng has joined #openstack-barbican14:37
*** mixos has joined #openstack-barbican14:42
*** jaosorior has joined #openstack-barbican14:44
*** mixos has quit IRC14:46
*** kebray has joined #openstack-barbican14:51
*** silos has joined #openstack-barbican14:56
peter-hamiltondave-mccowan: ok, they lgtm14:59
peter-hamiltondave-mccowan: i had one concern about the admin->user_name mapping but its in the functionaltest so it should be fine15:00
*** SheenaG has joined #openstack-barbican15:00
*** diazjf has joined #openstack-barbican15:01
*** ccneill has joined #openstack-barbican15:04
*** xaeth_afk is now known as xaeth15:06
*** gyee has joined #openstack-barbican15:07
*** dave-mccowan has quit IRC15:11
*** jorge_munoz has quit IRC15:13
*** shohel has quit IRC15:14
openstackgerritFernando Diaz proposed openstack/python-barbicanclient: Remove test behaviors abstraction for orders smoke tests  https://review.openstack.org/21729815:14
openstackgerritFernando Diaz proposed openstack/python-barbicanclient: Remove test behaviors abstraction for containers smoke tests  https://review.openstack.org/21731215:18
*** woodster_ has joined #openstack-barbican15:18
*** jorge_munoz has joined #openstack-barbican15:19
*** dave-mccowan has joined #openstack-barbican15:25
openstackgerritMerged openstack/barbican: Make tests in test_hrefs, test_quota py3 compatible  https://review.openstack.org/21094615:29
openstackgerritOpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements  https://review.openstack.org/21890115:30
*** david-ly_ has joined #openstack-barbican15:31
*** david-ly_ is now known as david-lyle_15:33
*** david-lyle has quit IRC15:33
openstackgerritElvin Tubillara proposed openstack/barbican: Add Request ID to worker-side logs in barbican.  https://review.openstack.org/21777515:34
*** david-lyle_ is now known as david-lyle15:35
openstackgerritOpenStack Proposal Bot proposed openstack/python-barbicanclient: Updated from global requirements  https://review.openstack.org/21719315:35
openstackgerritFernando Diaz proposed openstack/barbican: Allow debug flag in Barbican tox and debugging documentation  https://review.openstack.org/20862315:47
openstackgerritFernando Diaz proposed openstack/barbican: Add some documentation on running a single functional test case  https://review.openstack.org/21811715:47
*** kebray has quit IRC16:08
*** peter-hamilton has quit IRC16:11
*** shohel has joined #openstack-barbican16:20
*** jlhinson_ has joined #openstack-barbican16:22
*** jlhinson has quit IRC16:22
openstackgerritFernando Diaz proposed openstack/barbican: Allow debug flag in Barbican tox and debugging documentation  https://review.openstack.org/20862316:24
openstackgerritFernando Diaz proposed openstack/barbican: Add some documentation on running a single functional test case  https://review.openstack.org/21811716:24
*** shohel has quit IRC16:27
*** peter-hamilton has joined #openstack-barbican16:36
elmikoredrobot, found a small error in the castellan docs. https://review.openstack.org/#/c/218533/16:39
*** insequent has joined #openstack-barbican16:53
*** silos has left #openstack-barbican16:59
dave-mccowanalee ping.  is there an etherpad or spec capturing the current ideas for /v2/orders?17:31
*** jlhinson_ has quit IRC17:32
aleedave-mccowan, good question -- redrobot jvrbanac ?17:32
dave-mccowanalee were the snaps of the midcycle whiteboard posted?17:33
aleeredrobot, ^^17:33
aleedave-mccowan, redrobot -- If I recal correctly, jvrbanac was tapped to create an initial spec based on the discussions at the midcycle17:34
aleebut I have not seen anything yet.  The hope is to have something we can noodle on before the summit17:35
*** jaosorior has quit IRC17:35
*** spotz is now known as spotz_zzz17:39
*** ig0r__ has joined #openstack-barbican17:43
*** ig0r_ has quit IRC17:46
*** peter-hamilton has quit IRC17:54
*** peter-hamilton has joined #openstack-barbican17:59
*** silos has joined #openstack-barbican18:01
*** rellerreller has quit IRC18:01
*** SheenaG has quit IRC18:01
*** rellerreller has joined #openstack-barbican18:03
*** xaeth is now known as xaeth_afk18:04
*** spotz_zzz is now known as spotz18:29
*** gyee has quit IRC18:33
*** ccneill has quit IRC18:34
*** shohel has joined #openstack-barbican18:41
woodster_alee: a good think to bring up at the IRC meeting18:46
aleewoodster_, yup18:46
*** jillysciarilly has quit IRC18:48
*** ig0r__ has quit IRC18:48
*** jillysciarilly has joined #openstack-barbican18:51
*** ccneill has joined #openstack-barbican18:54
*** SheenaG has joined #openstack-barbican18:54
chellygelHello everyone, Doug (redrobot) is out of office today, but we will still be having our weekly meeting starting in an hour and some change. Please make sure you've updated the agenda if there is anything you wish to discuss!18:56
* elmiko runs off to find a good emoticon19:02
*** peter-hamilton has quit IRC19:04
*** rellerreller_ has joined #openstack-barbican19:13
*** rellerreller has quit IRC19:17
*** silos1 has joined #openstack-barbican19:29
*** silos1 has left #openstack-barbican19:30
*** silos1 has joined #openstack-barbican19:30
openstackgerritKaitlin Farr proposed openstack/castellan: Update Barbican wrapper  https://review.openstack.org/20856919:31
*** silos has quit IRC19:32
*** everjeje has quit IRC19:32
*** kfarr has joined #openstack-barbican19:32
rm_worksweet, experimental gate is in for the new devstack plugin method19:36
rm_workmight maybe make code-freeze19:36
elmikokfarr: hey, found a small error i put in the docs =( https://review.openstack.org/21853319:37
kfarrelmiko, nice catch!19:37
*** jhfeng has quit IRC19:38
*** diazjf has quit IRC19:39
*** diazjf has joined #openstack-barbican19:41
elmikosorry gonna miss the meeting today, about to land19:58
*** david-lyle has quit IRC20:01
*** jhfeng has joined #openstack-barbican20:03
aleeis there a barbican meeting today - redrobot ?20:03
aleejvrbanac, woodster_ ^^ ?20:04
silos1I think chellygel commented earlier that redrobot is out but we were still meeting. today20:04
*** david-lyle has joined #openstack-barbican20:06
*** ccneill has quit IRC20:16
*** diazjf has quit IRC20:32
openstackgerritAdam Harwell proposed openstack/barbican: Use the new Devstack external plugin method  https://review.openstack.org/16788520:35
openstackgerritAdam Harwell proposed openstack/barbican: Use the new Devstack external plugin method  https://review.openstack.org/16788520:35
*** rellerreller_ has quit IRC20:41
*** gyee has joined #openstack-barbican20:43
*** kebray has joined #openstack-barbican20:44
*** kebray has quit IRC20:44
*** kebray has joined #openstack-barbican20:45
*** diazjf has joined #openstack-barbican20:55
*** kebray has quit IRC20:59
*** silos1 has left #openstack-barbican20:59
woodster_kfarr: you just removed that static private key test method then?21:01
woodster_kfarr: you didn't need for other tests?21:01
kfarrwoodster_ it wasn't actually being used for anything21:02
woodster_kfarr:21:02
kfarrIt was being used for an old test, but then some of the code got refactored and accepting PEM wasn't valid anymore, so the sample bytes weren't needed21:02
woodster_kfarr: cool. So would not having Keystone v2 support break client projects?21:02
woodster_kfarr: I'm not sure how many client projects are utilizing Castellan yet21:04
kfarrwoodster_ None are using it yet, though I know elmiko wants to use it, and we have another developer here, Brianna, who's trying to integrate it into glance21:05
woodster_kfarr: I recall that the barbican python client had to deal with v2/v3 as well21:05
*** diazjf has quit IRC21:05
kfarrI was just hoping a TODO would cover the situation temporarily :)21:05
woodster_kfarr: well, if you intend to follow up with a v2/v3 version this CR looks good to me21:05
kfarrYes, I think the v2/v3 issue should be addressed more thoroughly since OpenStack officially supports both versions21:06
kfarrWill just have to find a nice way to do it21:06
woodster_kfarr: Yeah, I think rm_work had a good way to handle this in the barbican client code, so you might take a glance at that code21:07
kfarrOoh good idea21:07
rm_workwe deal with it in Octavia at least21:08
rm_workdon't remember if that code is in pybc too, it might be21:08
openstackgerritDave McCowan proposed openstack/barbican: Ensure Project and ProjectQuotas Tables are in sync  https://review.openstack.org/21625321:08
*** insequent has quit IRC21:09
*** diazjf has joined #openstack-barbican21:10
openstackgerritDave McCowan proposed openstack/barbican: Add get_count() method to project resource repositories  https://review.openstack.org/21287621:14
openstackgerritDave McCowan proposed openstack/barbican: Implement Enforce Method for QuotaEnforcer  https://review.openstack.org/21806421:22
openstackgerritDave McCowan proposed openstack/barbican: Add Functional Tests for Quota Enforcement  https://review.openstack.org/21871721:22
*** kfarr has quit IRC21:22
openstackgerritMerged openstack/castellan: Fixing error in documentation example  https://review.openstack.org/21853321:24
*** edtubill has quit IRC21:29
*** shohel has quit IRC21:30
*** silos has joined #openstack-barbican21:30
*** silos has left #openstack-barbican21:30
*** diazjf has quit IRC21:37
*** dave-mccowan has quit IRC21:46
rm_workwoo, looks like the new gate code is passing21:47
rm_workyep21:54
*** rellerreller has joined #openstack-barbican21:58
openstackgerritAdam Harwell proposed openstack/barbican: Use the new Devstack external plugin method  https://review.openstack.org/16788522:03
rm_work^^ this is ready now22:04
rm_worktested per experimental job, and depends-on the final gate change CR, so we can +2/+W this change and it will go in alongside the gate change and everything should be good :)22:05
rm_workwoodster_ / redrobot / jvrbanac / hockeynut / chellygel ^^22:05
*** pglass has quit IRC22:10
*** dimtruck is now known as zz_dimtruck22:11
openstackgerritMerged openstack/castellan: Update Barbican wrapper  https://review.openstack.org/20856922:16
*** rellerreller has quit IRC22:19
*** insequent has joined #openstack-barbican22:30
*** spotz is now known as spotz_zzz22:50
*** SheenaG has quit IRC23:23
jkfAny one around who knows what the process is for filing security related bugs?23:29
*** dave-mccowan has joined #openstack-barbican23:41
pksinghalee: ping23:44
pksinghdave-mccowan: Hi, are you around?23:46
dave-mccowanpksingh pong23:49
pksinghi have a query regarding the spec https://github.com/openstack/barbican-specs/blob/master/specs/liberty/add-cas.rst, is it implemented? specially  dogtag sub CAs one?23:50
pksinghdave-mccowan: ^^23:50
dave-mccowanpksingh, not yet.  alee is still working on it.  he said to expect patches this week.23:50
pksinghso after this fix, we will be able to create sub CAs per project wise right?23:51
pksinghdave-mccowan: ^^23:54
*** jhfeng has quit IRC23:56
dave-mccowanpksingh i think a barbican admin can do that today.  part of this change is to allow a project admin to do that for his own project.23:56
pksinghdave-mccowan: so admin can create sub CAs in current master branch?23:58
« Sunday, 2015-08-30 Index Tuesday, 2015-09-01 »

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!