| *** markvoelker has quit IRC | 00:01 | |
| openstackgerrit | Agate Wang proposed openstack/barbican-specs master: Update min tox version to 2.0 https://review.openstack.org/614658 | 01:03 |
|---|---|---|
| *** zul has quit IRC | 01:04 | |
| *** dayou has quit IRC | 01:38 | |
| *** abishop has quit IRC | 02:28 | |
| *** xek has joined #openstack-barbican | 03:09 | |
| *** dayou has joined #openstack-barbican | 03:59 | |
| *** xek has quit IRC | 04:45 | |
| *** pcaruana|elisa| has joined #openstack-barbican | 07:40 | |
| *** pcaruana|elisa| has quit IRC | 07:59 | |
| *** pcaruana has joined #openstack-barbican | 08:05 | |
| *** serlex has joined #openstack-barbican | 08:43 | |
| *** xek has joined #openstack-barbican | 08:49 | |
| *** serlex has quit IRC | 10:01 | |
| *** salmankhan has joined #openstack-barbican | 10:12 | |
| *** jaosorior has quit IRC | 10:23 | |
| *** dave-mccowan has joined #openstack-barbican | 10:45 | |
| *** pcaruana has quit IRC | 11:05 | |
| *** phuoc has joined #openstack-barbican | 11:09 | |
| *** xek_ has joined #openstack-barbican | 11:22 | |
| *** xek has quit IRC | 11:25 | |
| *** xek__ has joined #openstack-barbican | 11:25 | |
| *** zul has joined #openstack-barbican | 11:27 | |
| *** xek_ has quit IRC | 11:27 | |
| *** jaosorior has joined #openstack-barbican | 11:35 | |
| phuoc | hi barbican team, | 11:37 |
| phuoc | I am following the document, https://docs.openstack.org/barbican/latest/install/verify.html | 11:37 |
| phuoc | I can store secret with this command: openstack secret store --name mysecret --payload key=test | 11:38 |
| phuoc | when I retrieve it (openstack secret get http://127.0.0.1/key-manager/v1/secrets/2d04331e-fd45-40fa-a696-07022d4e59a6) | 11:38 |
| phuoc | I got that error, 4xx Client error: Forbidden: Secret retrieval attempt not allowed - please review your user/project privileges | 11:38 |
| phuoc | Forbidden: Secret retrieval attempt not allowed - please review your user/project privileges | 11:38 |
| phuoc | How can I troubleshoot this issue? | 11:39 |
| *** pcaruana has joined #openstack-barbican | 11:52 | |
| *** abishop has joined #openstack-barbican | 12:03 | |
| *** pbourke has quit IRC | 12:09 | |
| *** pbourke has joined #openstack-barbican | 12:10 | |
| *** raildo has joined #openstack-barbican | 12:17 | |
| *** velizarx has joined #openstack-barbican | 12:22 | |
| *** jmlowe has quit IRC | 12:47 | |
| *** zul has quit IRC | 12:52 | |
| *** zul has joined #openstack-barbican | 12:55 | |
| *** zul has quit IRC | 13:04 | |
| *** zul has joined #openstack-barbican | 13:05 | |
| *** jmlowe has joined #openstack-barbican | 13:07 | |
| *** Luzi has joined #openstack-barbican | 14:27 | |
| *** Luzi has quit IRC | 14:44 | |
| redrobot | hi phuoc! You should check the roles assigned to your user account | 14:45 |
| redrobot | phuoc, the error seems like a permissions issue | 14:45 |
| *** velizarx has quit IRC | 14:57 | |
| phuoc | redrobot, thanks for replying me | 15:03 |
| phuoc | I changed Barbican version to Rocky and it worked | 15:03 |
| phuoc | last time, I did: openstack role add --user <username> --project <project name> creator | 15:03 |
| phuoc | but I still got the above error | 15:04 |
| *** jmlowe has quit IRC | 15:10 | |
| jaosorior | phuoc: what version were you using initially? | 15:33 |
| phuoc | jaosorior, hi | 15:42 |
| phuoc | I used Barbican master version in the last time | 15:42 |
| jaosorior | phuoc: so, barbican master is what didn't work? | 15:43 |
| jaosorior | phuoc: are you using a custom policy file? or just the defaults? | 15:43 |
| phuoc | I use the defaults | 15:43 |
| jaosorior | phuoc: so, you don't have any /etc/barbican/policy.json file? | 15:43 |
| phuoc | I didn't change anything in /etc/barbican/policy.json file | 15:44 |
| *** velizarx has joined #openstack-barbican | 16:27 | |
| redrobot | dave-mccowan, ade_lee working on Exercise 3 right now. "cubswin:)" doesn't seem to work as a pw | 17:21 |
| dave-mccowan | hmm | 17:22 |
| redrobot | also tried "redsoxwin:)" for good measure | 17:22 |
| dave-mccowan | lol. they (cirros guys) changed it after the cubs won. now it's "gocubsgo". | 17:26 |
| dave-mccowan | we must have accidentally upgrade to a newer cirros image at some point in the last couple weeks. | 17:27 |
| redrobot | dave-mccowan, yep, that works | 17:37 |
| *** salmankhan has quit IRC | 18:02 | |
| *** velizarx has quit IRC | 18:10 | |
| *** jmlowe has joined #openstack-barbican | 18:22 | |
| *** pcaruana has quit IRC | 19:05 | |
| *** salmankhan has joined #openstack-barbican | 19:38 | |
| ade_lee | dave-mccowan, redrobot hey -- so redrobot was saying that the output does not match whats in the workshop notes.. | 19:51 |
| dave-mccowan | which exercise? | 19:52 |
| redrobot | ade_lee, yeah, it's just the names of the fields in Exercise 1 | 19:52 |
| dave-mccowan | ah yea. we should fix that. | 19:52 |
| ade_lee | dave-mccowan, fix the doc? | 19:53 |
| redrobot | eg. instructions show the output as "secret_ref", but actual output is "Secret href" | 19:53 |
| redrobot | the commands have all been correct so far | 19:53 |
| redrobot | eg. commands in instructions actually use "Secret href" | 19:53 |
| dave-mccowan | for now fix the doc. maybe someday patch barbicanclient to have better field names. redrobot wrote that code once upon a time, but it didn't merge. | 19:54 |
| redrobot | IIRC when we did the Barcelona workshop, we patched the client to use "secret_ref" et al. | 19:54 |
| ade_lee | so - yeah - lets fix the doc and then get a patch up .. | 19:56 |
| ade_lee | dave-mccowan, can you fix doc? redrobot can you put up patch ? :) | 19:56 |
| redrobot | ade_lee, patch for client? Yeah, I can work on that... | 19:57 |
| dave-mccowan | yes, i'll put up the patch to the workshop doc. | 19:57 |
| dave-mccowan | we should think through patching client at this point, since we risk breaking backwards compatibility. | 19:58 |
| redrobot | Yeah... it would have to be a new Major version | 19:58 |
| ade_lee | dave-mccowan, agreed | 19:58 |
| * redrobot is not scared to semver | 19:58 | |
| *** salmankhan has quit IRC | 19:59 | |
| dave-mccowan | redrobot anything else other than field names in Exercise 1 and password in Exercise 3? | 20:00 |
| redrobot | dave-mccowan, haven't run into anything else yet, but I'll let y'all know if I do | 20:01 |
| *** salmankhan has joined #openstack-barbican | 20:09 | |
| redrobot | dave-mccowan, Exercise 4, when uploading cert, s/secret_ref/"Secret href" | 20:28 |
| *** dave-mccowan has quit IRC | 20:32 | |
| *** abishop has quit IRC | 20:37 | |
| *** dave-mccowan has joined #openstack-barbican | 20:55 | |
| *** raildo has quit IRC | 21:25 | |
| *** xek__ has quit IRC | 21:36 | |
| *** salmankhan has quit IRC | 22:01 | |
| *** salmankhan has joined #openstack-barbican | 22:09 | |
| *** abishop has joined #openstack-barbican | 22:26 | |
| *** abishop has quit IRC | 22:31 | |
| *** salmankhan has quit IRC | 22:38 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!