*** rm_you has quit IRC | 00:15 | |
*** zz_dimtruck is now known as dimtruck | 00:23 | |
*** vivek-ebay has joined #openstack-barbican | 00:26 | |
*** alee_afk has quit IRC | 00:47 | |
*** alee_afk has joined #openstack-barbican | 00:48 | |
*** david-lyle has joined #openstack-barbican | 01:03 | |
*** vivek-ebay has quit IRC | 01:09 | |
*** kebray has quit IRC | 01:12 | |
*** dave-mccowan has quit IRC | 01:24 | |
*** dimtruck is now known as zz_dimtruck | 01:27 | |
*** DuncanT_ has joined #openstack-barbican | 01:38 | |
*** therve has quit IRC | 01:38 | |
*** DuncanT has quit IRC | 01:38 | |
*** therve has joined #openstack-barbican | 01:40 | |
*** DuncanT_ is now known as DuncanT | 01:44 | |
*** kebray has joined #openstack-barbican | 01:54 | |
*** kebray has quit IRC | 01:55 | |
*** su_zhang has joined #openstack-barbican | 02:26 | |
*** vivek-ebay has joined #openstack-barbican | 02:27 | |
*** zz_dimtruck is now known as dimtruck | 02:39 | |
*** dimtruck is now known as zz_dimtruck | 02:52 | |
*** vivek-ebay has quit IRC | 03:06 | |
*** Nirupama has joined #openstack-barbican | 03:22 | |
*** jhfeng has joined #openstack-barbican | 03:27 | |
*** jhfeng has quit IRC | 03:31 | |
*** kebray has joined #openstack-barbican | 03:33 | |
*** kebray has quit IRC | 03:33 | |
*** kebray has joined #openstack-barbican | 03:34 | |
*** edtubill has joined #openstack-barbican | 03:54 | |
*** everjeje has joined #openstack-barbican | 04:24 | |
*** edtubill has quit IRC | 04:31 | |
*** shohel has joined #openstack-barbican | 05:49 | |
*** Nirupama has quit IRC | 06:22 | |
*** Nirupama has joined #openstack-barbican | 06:22 | |
*** su_zhang has quit IRC | 06:46 | |
*** chlong has quit IRC | 07:17 | |
*** jamielennox is now known as jamielennox|away | 07:50 | |
*** kebray has quit IRC | 07:51 | |
*** jaosorior has joined #openstack-barbican | 08:26 | |
*** jaosorior has quit IRC | 08:34 | |
*** jaosorior has joined #openstack-barbican | 08:38 | |
*** darrenmoffat has quit IRC | 08:55 | |
*** darrenmoffat has joined #openstack-barbican | 08:56 | |
openstackgerrit | Merged openstack/barbican: Change test_containers unit test to work around webtest issue https://review.openstack.org/219774 | 09:12 |
---|---|---|
*** su_zhang has joined #openstack-barbican | 09:35 | |
*** su_zhang has quit IRC | 09:40 | |
openstackgerrit | Merged openstack/barbican: Fix comment and remove unneeded code https://review.openstack.org/228108 | 09:56 |
*** mmdurrant has quit IRC | 10:09 | |
*** Kiall has joined #openstack-barbican | 11:06 | |
*** chlong has joined #openstack-barbican | 11:44 | |
*** Nirupama has quit IRC | 11:47 | |
*** jamielennox|away is now known as jamielennox | 11:52 | |
*** mmdurrant has joined #openstack-barbican | 11:59 | |
*** jamielennox is now known as jamielennox|away | 12:33 | |
*** dave-mccowan has joined #openstack-barbican | 13:07 | |
*** rellerreller has joined #openstack-barbican | 13:39 | |
*** jmckind has joined #openstack-barbican | 13:41 | |
*** alee_afk has quit IRC | 13:41 | |
*** alee has joined #openstack-barbican | 13:42 | |
*** nelsnelson has joined #openstack-barbican | 13:57 | |
*** zz_dimtruck is now known as dimtruck | 13:59 | |
openstackgerrit | Merged openstack/castellan: Update Barbican functional tests https://review.openstack.org/216247 | 14:01 |
*** su_zhang has joined #openstack-barbican | 14:02 | |
*** stevemar has joined #openstack-barbican | 14:05 | |
*** spotz_zzz is now known as spotz | 14:06 | |
openstackgerrit | John Wood proposed openstack/barbican: Exit with error code when db_manage.py fails https://review.openstack.org/228472 | 14:06 |
*** silos has joined #openstack-barbican | 14:13 | |
*** edtubill has joined #openstack-barbican | 14:17 | |
*** jhfeng has joined #openstack-barbican | 14:18 | |
*** xaeth_afk is now known as xaeth | 14:19 | |
*** pglass has joined #openstack-barbican | 14:19 | |
*** jmckind_ has joined #openstack-barbican | 14:32 | |
*** jmckind has quit IRC | 14:33 | |
*** jorge_munoz has joined #openstack-barbican | 14:36 | |
*** diazjf has joined #openstack-barbican | 14:39 | |
*** jorge_munoz has quit IRC | 14:48 | |
openstackgerrit | Fernando Diaz proposed openstack/python-barbicanclient: Fix error where barbican order create returns invalid error https://review.openstack.org/227642 | 14:55 |
*** jorge_munoz has joined #openstack-barbican | 14:56 | |
*** xaeth is now known as xaeth_afk | 15:04 | |
*** kebray has joined #openstack-barbican | 15:05 | |
*** ccneill has joined #openstack-barbican | 15:06 | |
*** arunkant has quit IRC | 15:15 | |
*** xaeth_afk is now known as xaeth | 15:17 | |
*** arunkant has joined #openstack-barbican | 15:21 | |
*** shohel has quit IRC | 15:30 | |
*** everjeje has quit IRC | 15:39 | |
*** su_zhang has quit IRC | 16:11 | |
openstackgerrit | Fernando Diaz proposed openstack/python-barbicanclient: Fix error where barbican order create returns invalid error https://review.openstack.org/227642 | 16:22 |
*** xaeth is now known as xaeth_afk | 16:24 | |
*** jmckind has joined #openstack-barbican | 16:26 | |
*** jmckind_ has quit IRC | 16:27 | |
*** gyee has joined #openstack-barbican | 16:28 | |
*** xaeth_afk is now known as xaeth | 16:31 | |
*** kebray has quit IRC | 16:34 | |
*** kebray has joined #openstack-barbican | 16:35 | |
*** kebray has quit IRC | 16:36 | |
*** kebray has joined #openstack-barbican | 16:37 | |
openstackgerrit | John Vrbanac proposed openstack/barbican: Use environmental variables for NewRelic https://review.openstack.org/220865 | 16:40 |
alee | dave-mccowan, g'day mate! | 16:42 |
*** vivek-ebay has joined #openstack-barbican | 16:43 | |
alee | redrobot, ^^ | 16:43 |
dave-mccowan | alee howdy | 16:43 |
redrobot | alee mornin' | 16:44 |
alee | dave-mccowan, thats funny -- I just said howdy to someone else on a different channel :) | 16:44 |
* dave-mccowan is not stalking you | 16:44 | |
alee | dave-mccowan, would be impressed if you did -- was on an internal RH channel | 16:45 |
* alee thinks dave-mccowan realy works for the NSA .. | 16:45 | |
alee | redrobot, dave-mccowan working on the dogtag plugin for subcas. got the unit test updated and working on the functional tests | 16:46 |
alee | should be done hopefully by end of today-ish | 16:46 |
alee | just fyi - dave-mccowan any othe bugs in subcas that need to go in? | 16:47 |
dave-mccowan | alee, redrobot: fixing delete should probably go in. what about woodster's db-manage fix? | 16:48 |
redrobot | alee dave-mccowan about the delete... I don't understand why having a "preferred" CA is a requirement? | 16:49 |
redrobot | alee dave-mccowan seems to me "preferred" CAs should be optional | 16:49 |
redrobot | alee dave-mccowan if you delete the preferred CA then you have no more preferred CA | 16:49 |
redrobot | having to set some other CA as preferred before you can delete the current preferred CA just complicates the workflow | 16:50 |
*** vivek-ebay has quit IRC | 16:51 | |
*** su_zhang has joined #openstack-barbican | 16:51 | |
alee | redrobot, this is part of the original design in the blueprint. The idea was that if you set a project ca , then you always had a preferred ca | 16:51 |
alee | and that the first project ca became the preferred ca | 16:51 |
alee | redrobot, I'm open to changing the design -- but thats what was decided on | 16:52 |
alee | redrobot, think of it this way .. | 16:53 |
alee | a project admin has specifically chosen to limit the users in his project to a set of N cas. | 16:53 |
alee | he has done that by specifying these N cas as project cas. | 16:54 |
alee | so if someone in the project specifies a ca_id - then the request will fail if it is not one of those ca_ids | 16:54 |
alee | on the other hand, if the caller specifies no ca_id, then it will end up going to the preferred ca_id | 16:55 |
*** peter-hamilton has joined #openstack-barbican | 16:55 | |
redrobot | alee I guess that's the bit I'm getting stuck on | 16:55 |
redrobot | alee are we saying that you always need to have a preferred CA no matter what? | 16:55 |
alee | and we need to make sure that the preferred ca_id is one of those N prohect cas | 16:55 |
alee | preferred ca is perhaps a misnomer -- default ca is probably more accurate | 16:56 |
redrobot | I just don't think that "preferred CAs" really add that much value. We have an endpoint to list a project's CAs, so I don't think it's unreasonable to require the CA ID when you send a request. | 16:57 |
redrobot | the only benefit is that you can skip that step if a preferred CA is set | 16:57 |
redrobot | but I don't think that's a huge win compared to the complexity it adds to the delete workflows | 16:57 |
alee | it makes sense to me that if an admin chooses to restrict access to N project cas, then requests that come in withiout a ca_id should go to one of those project cas | 16:57 |
alee | redrobot, well - I disagree - I think its useful for a client to be able to just send in the request and know it will go to the "right ca" | 16:58 |
alee | redrobot, and deleting a ca is an admin operation | 16:58 |
dave-mccowan | it makes it harder on admin, but much easier on user client. | 16:59 |
alee | yup | 16:59 |
alee | redrobot, and its not that hard for the admin | 16:59 |
alee | they just need to select another ca | 16:59 |
dave-mccowan | if we change the delete logic, we'll need to revisit the remove-from-project logic. it has the same check and error code. | 17:00 |
dave-mccowan | i think a case could be made for the change. the biggest problem with that now, is that there is code that assumes there will always be a preferred if there is a project CA. we'll need to re-review a bunch of code to make sure stuff will work with a different design. also the docs will need to be updated. | 17:00 |
redrobot | is it possible for a project to have no CAs at all? | 17:00 |
redrobot | ie, the admin does not want the users to provision any Certs | 17:00 |
* redrobot realizes is way too late in the game to make these changes for Liberty | 17:01 | |
*** vivek-ebay has joined #openstack-barbican | 17:01 | |
dave-mccowan | they can use quotas to disable orders or disable create_cas. disabling just certificate orders sounds like a useful feature. | 17:01 |
dave-mccowan | (that does not have a solution in liberty) | 17:02 |
alee | dave-mccowan, redrobot and I know thats one you guys want to add -- but I thought we were talking about adding it in Mitaka | 17:02 |
*** gyee has quit IRC | 17:03 | |
redrobot | alee dave-mccowan so what's the current behavior for deleting the last project-ca? | 17:03 |
alee | redrobot, you could add a ca plugin that just denies certs -- or for that matter use the simple ca plugin | 17:03 |
alee | and just restrict users to that ca | 17:03 |
dave-mccowan | without the delete bug fix, the system can get into an undefined state. a preferred CA or project CA entry can exist, referencing a CA that has been deleted. | 17:04 |
redrobot | alee dave-mccowan ehh... sounds like 500s waiting to happen? | 17:05 |
alee | redrobot, dave-mccowan yeah - we need to fix that | 17:05 |
redrobot | Sorry I didn't quite understand that last week, or I would have marked it as a higher priority bug | 17:06 |
dave-mccowan | blocking the delete when the CA is preferred is just one of the subtle bugs that is fixed with the eventual proposed patch. | 17:06 |
redrobot | dave-mccowan would it be possible to delete the last CA? | 17:06 |
dave-mccowan | i don't think we knew about this bug until very late last week. | 17:06 |
redrobot | or I suppose the public CA is always available... | 17:06 |
* redrobot needs to kick the tires on CA API more | 17:06 | |
alee | redrobot, right -- remember project cas just restrict the set of available cas | 17:07 |
alee | and you can remove the last project ca. | 17:07 |
alee | the problem si removing a project ca that is the preferred ca, when other project cas exist | 17:07 |
alee | becaus the preferredness does not transfer | 17:08 |
dave-mccowan | is anyone else kicking the tires on the CA API this week? | 17:08 |
alee | dave-mccowan, anyways you working on that? | 17:08 |
dave-mccowan | i've got a WIP patch up in gerrit, and a working patch locally. just a bunch of unit test work to do. there's lots of branches to cover. | 17:10 |
alee | yeah | 17:10 |
dave-mccowan | alee, redrobot: do we have a target date in mind for RC2? | 17:11 |
redrobot | dave-mccowan alee I'll have to talk to the release managers.... schedule says RC window is ongoing until next week. | 17:11 |
alee | redrobot, cool thanks - that would be good to know. | 17:13 |
*** stevemar has quit IRC | 17:13 | |
alee | redrobot, I'm trying to wrap up my changes quickly, but it will still take a few days. | 17:14 |
dave-mccowan | do we know of any ongoing testing? it'd be nice to only have one more RC. | 17:14 |
alee | dave-mccowan, +1 | 17:14 |
alee | dave-mccowan, redrobot heard anything from the magnum folks? | 17:15 |
alee | redrobot, I'm working on getting dogtag client code into a package on pypi. I'm guessing though that we can defer adding this package to requirements.txt, test requirements to mitaka .. | 17:18 |
redrobot | alee since it's an optional dependency, I believe it does not need to be added to global-requirements. | 17:18 |
alee | redrobot, so no procedure other than to add to our own requirements.txt? | 17:19 |
*** stevemar has joined #openstack-barbican | 17:19 | |
redrobot | alee probably add to test-requirements.txt because requirements.txt actually gets added to the package | 17:19 |
*** gyee has joined #openstack-barbican | 17:19 | |
redrobot | alee I can double check for you though | 17:20 |
alee | redrobot, thatll be great - thanks | 17:20 |
dave-mccowan | i'll check with the magnum folks for feedback. | 17:21 |
*** xaeth is now known as xaeth_afk | 17:21 | |
dave-mccowan | i think there is a gate check to make sure projects don't add requirements that are not part of global-requirements. does it not check test-requirements? | 17:22 |
jaosorior | Any workflows for this? https://review.openstack.org/#/c/198732/ | 17:25 |
*** everjeje has joined #openstack-barbican | 17:25 | |
*** vivek-ebay has quit IRC | 17:31 | |
*** vivek-ebay has joined #openstack-barbican | 17:32 | |
dave-mccowan | redrobot, alee: i checked with the magnum team. for Liberty, they roll-their-own subCAs and certificates. ( :-( one more RA/CA in OpenStack.) They have a barbican plugin, but currently it can only store certificates. | 17:34 |
*** alee has quit IRC | 17:34 | |
redrobot | dave-mccowan alee bummer :( | 17:34 |
*** alee has joined #openstack-barbican | 17:36 | |
*** xaeth_afk is now known as xaeth | 17:37 | |
*** kebray has quit IRC | 17:38 | |
*** alee has quit IRC | 17:39 | |
*** alee has joined #openstack-barbican | 17:39 | |
jaosorior | dave-mccowan: do you know why they decided to go that way? | 17:45 |
redrobot | jaosorior mostly because our CR provisioning workflow was broken when they looked at it | 17:46 |
jaosorior | redrobot: well, shit | 17:46 |
redrobot | s/CR/Cert | 17:47 |
jaosorior | redrobot: I understood anyway. Bummer :/ | 17:47 |
*** diazjf_ has joined #openstack-barbican | 17:47 | |
redrobot | yeah, bummer for sure. | 17:47 |
redrobot | I was in the Security meeting last week and someone there was wanting to spin up their own CA API as well... I'm hoping I can convince them to contribute to Barbican instead. | 17:48 |
dave-mccowan | hopefully they will expand the barbican driver to include enrollment and subcas in Mitaka | 17:49 |
dave-mccowan | redrobot +1 we should help the community converge on one RA/CA API. | 17:50 |
redrobot | dave-mccowan indeed! ... I still have it on my to-dos to learn the Anchor API. | 17:50 |
*** igueths has joined #openstack-barbican | 17:51 | |
dave-mccowan | redrobot. not much to it. curl http://localhost:5000/v1/sign/CAID -F encoding=pem F 'csr=<put the CSR here>' | 17:54 |
*** kebray has joined #openstack-barbican | 17:59 | |
*** kebray has quit IRC | 17:59 | |
*** kebray has joined #openstack-barbican | 18:00 | |
*** jmckind has quit IRC | 18:03 | |
*** diazjf_ has quit IRC | 18:07 | |
redrobot | anyone know off the top of their head what "@" means in the policy file? | 18:10 |
*** xaeth is now known as xaeth_afk | 18:11 | |
*** su_zhang has quit IRC | 18:11 | |
*** su_zhang_ has joined #openstack-barbican | 18:12 | |
*** jmckind has joined #openstack-barbican | 18:13 | |
dave-mccowan | redrobot it means the action is always permitted. | 18:25 |
redrobot | dave-mccowan ack, thanks! | 18:26 |
*** ccneill_ has joined #openstack-barbican | 18:28 | |
*** ccneill has quit IRC | 18:29 | |
*** jmckind has quit IRC | 18:38 | |
*** jmckind has joined #openstack-barbican | 18:50 | |
*** xaeth_afk is now known as xaeth | 18:50 | |
*** su_zhang_ has quit IRC | 18:53 | |
*** fnaval has quit IRC | 18:55 | |
*** jmckind has quit IRC | 19:04 | |
*** ccneill_ has quit IRC | 19:06 | |
*** kfarr has joined #openstack-barbican | 19:09 | |
*** ccneill_ has joined #openstack-barbican | 19:09 | |
*** ccneill_ is now known as ccneill | 19:19 | |
*** jmckind has joined #openstack-barbican | 19:29 | |
*** jmckind has quit IRC | 19:30 | |
*** woodster_ has joined #openstack-barbican | 19:42 | |
*** su_zhang has joined #openstack-barbican | 19:50 | |
*** jmckind has joined #openstack-barbican | 19:57 | |
*** su_zhang has quit IRC | 19:58 | |
*** jsavak has joined #openstack-barbican | 20:02 | |
*** peter-hamilton has quit IRC | 20:03 | |
*** vivek-ebay has quit IRC | 20:05 | |
jaosorior | #join #openstack-meeting-alt | 20:07 |
*** jsavak has quit IRC | 20:08 | |
*** david-lyle has quit IRC | 20:14 | |
*** jmckind has quit IRC | 20:16 | |
*** everjeje has quit IRC | 20:19 | |
*** jmckind has joined #openstack-barbican | 20:20 | |
*** su_zhang has joined #openstack-barbican | 20:27 | |
*** jmckind has quit IRC | 20:31 | |
*** jmckind has joined #openstack-barbican | 20:38 | |
*** rellerreller has quit IRC | 20:44 | |
*** vivek-ebay has joined #openstack-barbican | 20:49 | |
*** xaeth is now known as xaeth_afk | 20:55 | |
*** jmckind has quit IRC | 20:58 | |
*** pglass has quit IRC | 21:04 | |
*** jmckind has joined #openstack-barbican | 21:05 | |
silos | woodster_: ping. Hope I'm not catching you on your way out. | 21:09 |
*** david-lyle has joined #openstack-barbican | 21:09 | |
woodster_ | silos: nope | 21:10 |
silos | woodster_: Have you tested db_manage.py from base recently? | 21:10 |
woodster_ | silos: yes, yesterday/today | 21:11 |
woodster_ | silos: against postgres only though | 21:11 |
silos | ah ok. I tested against mysql and I'm getting a few errors. If we add this to the gate will it use mysql, postgresql, or something else? | 21:11 |
woodster_ | silos: it would use mysql by default. can you send the stack trace you see to my IRC directly? | 21:12 |
silos | sure. | 21:12 |
woodster_ | silos: I'm replaced some of the 'execute' calls in there, so I wonder if that is breaking mysql now | 21:13 |
woodster_ | silos: are you thinking of putting that into the devstack gate? | 21:13 |
*** silos has quit IRC | 21:14 | |
*** xaeth_afk is now known as xaeth | 21:14 | |
*** silos has joined #openstack-barbican | 21:14 | |
silos | woodster_: no. I was just wondering if it's something to worry about since we talked about the db_manage script today. | 21:15 |
woodster_ | silos: indeed! | 21:15 |
*** diazjf has quit IRC | 21:18 | |
openstackgerrit | Merged openstack/python-barbicanclient: Create Openstack CLI plugin for Barbican https://review.openstack.org/198732 | 21:21 |
jaosorior | stevemar: ^^ yay! :D | 21:23 |
*** dave-mccowan has quit IRC | 21:23 | |
stevemar | jaosorior: holy crap | 21:23 |
stevemar | finally | 21:23 |
stevemar | that thing was sitting at 2x+2 forever | 21:23 |
jaosorior | stevemar: By the way, congrats on becoming the new keystone PTL :D | 21:23 |
stevemar | jaosorior: ty ty! | 21:23 |
* stevemar bows elegantly | 21:24 | |
jaosorior | hahaha awesome | 21:24 |
jaosorior | stevemar: Celebrated already? | 21:24 |
stevemar | jaosorior: topol took me out for giant steaks | 21:24 |
stevemar | that was nice | 21:25 |
jaosorior | stevemar: Aah yeah! Saw the pic on twitter | 21:25 |
jaosorior | stevemar: very well deserved | 21:26 |
stevemar | jaosorior: \o/ | 21:26 |
jaosorior | Anyway, it's pretty late over here | 21:26 |
stevemar | jaosorior: now to ruin everything! | 21:26 |
jaosorior | gonna go to sleep already | 21:26 |
jaosorior | have a good one | 21:26 |
stevemar | jaosorior: gn! | 21:26 |
*** jaosorior has quit IRC | 21:26 | |
*** stevemar has quit IRC | 21:29 | |
*** stevemar has joined #openstack-barbican | 21:29 | |
*** dave-mccowan has joined #openstack-barbican | 21:31 | |
*** stevemar has quit IRC | 21:32 | |
*** pglass has joined #openstack-barbican | 21:33 | |
*** silos has left #openstack-barbican | 21:35 | |
*** edtubill has quit IRC | 21:38 | |
*** jmckind has quit IRC | 21:38 | |
*** su_zhang_ has joined #openstack-barbican | 21:44 | |
*** su_zhang has quit IRC | 21:47 | |
*** vivek-ebay has quit IRC | 21:51 | |
*** su_zhang has joined #openstack-barbican | 21:53 | |
*** igueths has quit IRC | 21:56 | |
*** su_zhang_ has quit IRC | 21:56 | |
*** kfarr has quit IRC | 22:02 | |
*** vivek-ebay has joined #openstack-barbican | 22:05 | |
*** stevemar has joined #openstack-barbican | 22:12 | |
*** xaeth is now known as xaeth_afk | 22:14 | |
*** stevemar has quit IRC | 22:17 | |
*** vivek-ebay has quit IRC | 22:17 | |
*** dimtruck is now known as zz_dimtruck | 22:20 | |
*** stevemar has joined #openstack-barbican | 22:21 | |
*** stevemar_ has joined #openstack-barbican | 22:23 | |
*** pglbutt has joined #openstack-barbican | 22:25 | |
*** stevemar has quit IRC | 22:25 | |
*** stevemar_ has quit IRC | 22:28 | |
*** pglass has quit IRC | 22:29 | |
*** stevemar has joined #openstack-barbican | 22:30 | |
*** stevemar_ has joined #openstack-barbican | 22:31 | |
*** spotz is now known as spotz_zzz | 22:32 | |
*** su_zhang has quit IRC | 22:32 | |
*** pglbutt has quit IRC | 22:33 | |
*** stevemar has quit IRC | 22:34 | |
*** stevemar_ has quit IRC | 22:36 | |
*** stevemar has joined #openstack-barbican | 22:36 | |
*** vivek-ebay has joined #openstack-barbican | 22:38 | |
*** su_zhang has joined #openstack-barbican | 22:39 | |
*** stevemar has quit IRC | 22:41 | |
*** jamielennox|away is now known as jamielennox | 23:13 | |
*** gyee has quit IRC | 23:14 | |
*** vivek-ebay has quit IRC | 23:26 | |
*** vivek-eb_ has joined #openstack-barbican | 23:26 | |
*** ccneill has quit IRC | 23:38 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!