*** yamamoto has joined #openstack-lbaas | 00:59 | |
*** yamamoto has quit IRC | 01:04 | |
*** yamamoto has joined #openstack-lbaas | 02:00 | |
*** yamamoto has quit IRC | 02:05 | |
*** JudeC has quit IRC | 02:40 | |
*** JudeC has joined #openstack-lbaas | 02:40 | |
*** yamamoto has joined #openstack-lbaas | 03:01 | |
*** yamamoto has quit IRC | 03:06 | |
*** slaweq has joined #openstack-lbaas | 03:08 | |
*** slaweq has quit IRC | 03:12 | |
*** yamamoto has joined #openstack-lbaas | 04:02 | |
*** yamamoto has quit IRC | 04:08 | |
*** links has joined #openstack-lbaas | 04:39 | |
*** yboaron has joined #openstack-lbaas | 05:01 | |
*** yamamoto has joined #openstack-lbaas | 05:04 | |
*** yamamoto has quit IRC | 05:08 | |
*** yamamoto has joined #openstack-lbaas | 06:05 | |
*** slaweq has joined #openstack-lbaas | 06:08 | |
*** Alex_Staf_ has joined #openstack-lbaas | 06:08 | |
*** yamamoto has quit IRC | 06:11 | |
*** yboaron has quit IRC | 06:50 | |
*** yboaron has joined #openstack-lbaas | 06:59 | |
*** yamamoto has joined #openstack-lbaas | 07:06 | |
*** yboaron has quit IRC | 07:08 | |
*** Guest1988 has joined #openstack-lbaas | 07:10 | |
*** yamamoto has quit IRC | 07:13 | |
*** Guest1988 has quit IRC | 07:17 | |
*** yamamoto has joined #openstack-lbaas | 08:08 | |
*** yamamoto has quit IRC | 08:14 | |
*** yboaron has joined #openstack-lbaas | 08:16 | |
*** yamamoto has joined #openstack-lbaas | 09:10 | |
*** yamamoto has quit IRC | 09:16 | |
*** yamamoto has joined #openstack-lbaas | 10:12 | |
*** yamamoto has quit IRC | 10:17 | |
*** yboaron_ has joined #openstack-lbaas | 10:27 | |
*** yboaron has quit IRC | 10:29 | |
*** yboaron has joined #openstack-lbaas | 10:32 | |
*** yboaron_ has quit IRC | 10:34 | |
*** atoth has quit IRC | 10:56 | |
*** yamamoto has joined #openstack-lbaas | 11:14 | |
*** yamamoto has quit IRC | 11:19 | |
*** yboaron_ has joined #openstack-lbaas | 11:30 | |
*** yboaron has quit IRC | 11:30 | |
*** yamamoto has joined #openstack-lbaas | 11:39 | |
*** atoth has joined #openstack-lbaas | 12:10 | |
*** yamamoto has quit IRC | 12:25 | |
*** yamamoto has joined #openstack-lbaas | 12:26 | |
*** pchavva has joined #openstack-lbaas | 12:31 | |
*** yboaron has joined #openstack-lbaas | 12:31 | |
*** yboaron_ has quit IRC | 12:33 | |
*** yboaron_ has joined #openstack-lbaas | 12:50 | |
*** yboaron has quit IRC | 12:53 | |
mugsie | If i am storing certs in Barbican, should I store them as public, private, intermediate in a container, or should I use a PKCS12 blob? | 12:53 |
---|---|---|
*** samccann has joined #openstack-lbaas | 12:55 | |
*** velizarx has joined #openstack-lbaas | 12:58 | |
*** atoth has quit IRC | 13:08 | |
*** links has quit IRC | 13:22 | |
*** atoth has joined #openstack-lbaas | 13:23 | |
*** velizarx has quit IRC | 13:49 | |
*** fnaval has joined #openstack-lbaas | 13:54 | |
*** atoth has quit IRC | 14:08 | |
*** velizarx has joined #openstack-lbaas | 14:14 | |
*** atoth has joined #openstack-lbaas | 14:22 | |
*** Alex_Staf_ has quit IRC | 14:23 | |
*** Alex_Staf_ has joined #openstack-lbaas | 14:24 | |
*** velizarx has quit IRC | 14:39 | |
xgerman_ | mugsie: so pkcs12 is the new recommended format | 14:48 |
mugsie | OK - why the mangling? | 14:49 |
mugsie | the container idea seemed so much easier :P | 14:49 |
xgerman_ | we still support the container - if pkcs12 doesn’t work it will fall back | 14:50 |
xgerman_ | I think pkcs12 is a castellan idea… | 14:50 |
mugsie | ah, OK | 14:51 |
johnsom | mugsie The pkcs12 recommendation is because "containers" are unique to barbican and all of the backends (vault) support pkcs12 | 15:14 |
mugsie | cool - I was trying to avoid the mangling | 15:14 |
* mugsie will just copypasta from openstack/octavia | 15:15 | |
*** yboaron_ has quit IRC | 15:21 | |
*** astafeye__ has joined #openstack-lbaas | 15:47 | |
*** Alex_Staf_ has quit IRC | 15:48 | |
openstackgerrit | German Eichberger proposed openstack/neutron-lbaas master: Gate API test for the lbaasv2-proxy plugin https://review.openstack.org/539350 | 17:05 |
*** velizarx has joined #openstack-lbaas | 17:12 | |
rm_work | mugsie: you copying our cert support to designate API? :P | 17:29 |
mugsie | rm_work: haha - no - writing a letsencrypt thing for openstack | 17:29 |
rm_work | yeah basically, if we want to support native Vault or whatever else, we can't use "containers", we need to use an actual defined format | 17:29 |
mugsie | rm_work: part one https://github.com/openstack/certbot-dns-openstack | 17:30 |
rm_work | which is ... sad | 17:30 |
mugsie | yeah :( | 17:30 |
rm_work | johnsom: so ... trying to decide how to do the subobject testing for the scenario CRUD | 17:33 |
rm_work | and for the API really | 17:33 |
rm_work | since ... | 17:33 |
rm_work | basically every test is a test of the object above it in the chain too | 17:33 |
rm_work | but i guess we still do them separately? | 17:33 |
johnsom | Yeah, one of the tempest rules is each test must run on it’s own. | 17:34 |
rm_work | k | 17:34 |
rm_work | do we need to run each test for ipv4/6 ? | 17:34 |
rm_work | listener/pool/etc | 17:34 |
rm_work | or can we just like... only do ipv6 for those | 17:35 |
johnsom | I think just the tests that use addresses, so load balancer and member IMO | 17:35 |
johnsom | Probably a few scenarios too, but for API those should cover it | 17:36 |
rm_work | how do I make new idempotent_id things for tests? | 17:38 |
rm_work | just run uuidgen and paste it in? | 17:39 |
rm_work | johnsom: wait a sec, the loadbalancer test says "create a fully populated load balancer" | 17:40 |
rm_work | but ... that ISN'T what we're doing, right? | 17:40 |
johnsom | uuidgen is what I used | 17:40 |
johnsom | It has all of the fields | 17:41 |
rm_work | errr, what has all the fields? | 17:47 |
rm_work | OH | 17:47 |
rm_work | you mean *that kind* of fully populated | 17:47 |
rm_work | I thought you meant like, listener+pool+members+hm+l7 | 17:48 |
johnsom | Yeah, not single-call-create | 17:51 |
johnsom | Which is getting an overhaul, because, I actually need things populated..... | 17:51 |
*** velizarx has quit IRC | 17:54 | |
openstackgerrit | Adam Harwell proposed openstack/octavia-tempest-plugin master: Create scenario tests for listeners https://review.openstack.org/492311 | 17:55 |
rm_work | johnsom: ^^ is that what you were thinking? | 17:55 |
rm_work | I haven't done the API tests yet... | 17:55 |
rm_work | or did you want to do more like | 17:55 |
rm_work | https://review.openstack.org/#/c/492311/5/octavia_tempest_plugin/tests/scenario/v2/test_loadbalancer.py | 17:55 |
rm_work | where everything is in a base class and in the tests you just run the create line | 17:56 |
johnsom | No, that base class thing is a mess. It's all in the service client now | 17:56 |
rm_work | i think they were also there? | 17:56 |
rm_work | but it was just convenience? | 17:56 |
johnsom | Yeah, that looks pretty good to me. | 18:03 |
johnsom | No, we don't need project_id on the sub-projects IMO. That is going away. | 18:03 |
rm_work | k | 18:16 |
openstackgerrit | German Eichberger proposed openstack/neutron-lbaas master: Fix proxy extension for neutron RBAC https://review.openstack.org/554004 | 18:55 |
rm_work | wait, why does loadbalancer go ONLINE without any HM or anything? | 18:56 |
openstackgerrit | German Eichberger proposed openstack/neutron-lbaas master: Gate API test for the lbaasv2-proxy plugin https://review.openstack.org/539350 | 18:56 |
*** atoth has quit IRC | 19:00 | |
openstackgerrit | Adam Harwell proposed openstack/octavia-tempest-plugin master: Create api+scenario tests for listeners https://review.openstack.org/492311 | 19:37 |
rm_work | johnsom: tweaked some stuff, added API tests... err... actually, am I missing anything? | 19:37 |
rm_work | oh, yeah, listener_list | 19:38 |
rm_work | in the api test | 19:38 |
rm_work | i'll do that after lunch+errands | 19:38 |
johnsom | Cool! | 19:38 |
rm_work | then ... pools | 19:38 |
rm_work | joy | 19:38 |
johnsom | I think I am in the home stretch for single-call-create, then same, on to listeners | 19:39 |
rm_work | k | 19:40 |
rm_work | will let these tests run in the gate over lunch so i can see what i messed up :P | 19:41 |
*** yboaron_ has joined #openstack-lbaas | 20:08 | |
johnsom | So much for knocking on the door before swapping out the power meter.... Glad I have a UPS they would have a grumpy developer to deal with | 20:21 |
*** yboaron_ has quit IRC | 20:29 | |
rm_work | >_< | 20:30 |
*** sshank has joined #openstack-lbaas | 20:36 | |
*** slaweq has quit IRC | 20:50 | |
*** pchavva has quit IRC | 20:57 | |
*** samccann has quit IRC | 21:13 | |
*** velizarx has joined #openstack-lbaas | 21:36 | |
*** velizarx has quit IRC | 21:39 | |
*** rcernin has joined #openstack-lbaas | 22:13 | |
*** slaweq_ has joined #openstack-lbaas | 22:26 | |
*** slaweq_ has quit IRC | 22:28 | |
*** fnaval has quit IRC | 22:56 | |
*** sshank has quit IRC | 23:01 | |
johnsom | Hmm, evidently python-octaviaclient doesn't support double byte names. | 23:17 |
johnsom | https://storyboard.openstack.org/#!/story/2001946 | 23:17 |
johnsom | The API handles it fine though | 23:17 |
*** sshank has joined #openstack-lbaas | 23:26 | |
*** sshank has quit IRC | 23:49 | |
*** imacdonn has joined #openstack-lbaas | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!