Monday, 2018-04-30

*** yamamoto has joined #openstack-lbaas00:59
*** yamamoto has quit IRC01:04
*** yamamoto has joined #openstack-lbaas02:00
*** yamamoto has quit IRC02:05
*** JudeC has quit IRC02:40
*** JudeC has joined #openstack-lbaas02:40
*** yamamoto has joined #openstack-lbaas03:01
*** yamamoto has quit IRC03:06
*** slaweq has joined #openstack-lbaas03:08
*** slaweq has quit IRC03:12
*** yamamoto has joined #openstack-lbaas04:02
*** yamamoto has quit IRC04:08
*** links has joined #openstack-lbaas04:39
*** yboaron has joined #openstack-lbaas05:01
*** yamamoto has joined #openstack-lbaas05:04
*** yamamoto has quit IRC05:08
*** yamamoto has joined #openstack-lbaas06:05
*** slaweq has joined #openstack-lbaas06:08
*** Alex_Staf_ has joined #openstack-lbaas06:08
*** yamamoto has quit IRC06:11
*** yboaron has quit IRC06:50
*** yboaron has joined #openstack-lbaas06:59
*** yamamoto has joined #openstack-lbaas07:06
*** yboaron has quit IRC07:08
*** Guest1988 has joined #openstack-lbaas07:10
*** yamamoto has quit IRC07:13
*** Guest1988 has quit IRC07:17
*** yamamoto has joined #openstack-lbaas08:08
*** yamamoto has quit IRC08:14
*** yboaron has joined #openstack-lbaas08:16
*** yamamoto has joined #openstack-lbaas09:10
*** yamamoto has quit IRC09:16
*** yamamoto has joined #openstack-lbaas10:12
*** yamamoto has quit IRC10:17
*** yboaron_ has joined #openstack-lbaas10:27
*** yboaron has quit IRC10:29
*** yboaron has joined #openstack-lbaas10:32
*** yboaron_ has quit IRC10:34
*** atoth has quit IRC10:56
*** yamamoto has joined #openstack-lbaas11:14
*** yamamoto has quit IRC11:19
*** yboaron_ has joined #openstack-lbaas11:30
*** yboaron has quit IRC11:30
*** yamamoto has joined #openstack-lbaas11:39
*** atoth has joined #openstack-lbaas12:10
*** yamamoto has quit IRC12:25
*** yamamoto has joined #openstack-lbaas12:26
*** pchavva has joined #openstack-lbaas12:31
*** yboaron has joined #openstack-lbaas12:31
*** yboaron_ has quit IRC12:33
*** yboaron_ has joined #openstack-lbaas12:50
*** yboaron has quit IRC12:53
mugsieIf i am storing certs in Barbican, should I store them as public, private, intermediate in a container, or should I use a PKCS12 blob?12:53
*** samccann has joined #openstack-lbaas12:55
*** velizarx has joined #openstack-lbaas12:58
*** atoth has quit IRC13:08
*** links has quit IRC13:22
*** atoth has joined #openstack-lbaas13:23
*** velizarx has quit IRC13:49
*** fnaval has joined #openstack-lbaas13:54
*** atoth has quit IRC14:08
*** velizarx has joined #openstack-lbaas14:14
*** atoth has joined #openstack-lbaas14:22
*** Alex_Staf_ has quit IRC14:23
*** Alex_Staf_ has joined #openstack-lbaas14:24
*** velizarx has quit IRC14:39
xgerman_mugsie: so pkcs12 is the new recommended format14:48
mugsieOK - why the mangling?14:49
mugsiethe container idea seemed so much easier :P14:49
xgerman_we still support the container - if pkcs12 doesn’t work it will fall back14:50
xgerman_I think pkcs12 is a castellan idea…14:50
mugsieah, OK14:51
johnsommugsie The pkcs12 recommendation is because "containers" are unique to barbican and all of the backends (vault) support pkcs1215:14
mugsiecool - I was trying to avoid the mangling15:14
* mugsie will just copypasta from openstack/octavia15:15
*** yboaron_ has quit IRC15:21
*** astafeye__ has joined #openstack-lbaas15:47
*** Alex_Staf_ has quit IRC15:48
openstackgerritGerman Eichberger proposed openstack/neutron-lbaas master: Gate API test for the lbaasv2-proxy plugin  https://review.openstack.org/53935017:05
*** velizarx has joined #openstack-lbaas17:12
rm_workmugsie: you copying our cert support to designate API? :P17:29
mugsierm_work: haha - no - writing a letsencrypt thing for openstack17:29
rm_workyeah basically, if we want to support native Vault or whatever else, we can't use "containers", we need to use an actual defined format17:29
mugsierm_work: part one https://github.com/openstack/certbot-dns-openstack17:30
rm_workwhich is ... sad17:30
mugsieyeah :(17:30
rm_workjohnsom: so ... trying to decide how to do the subobject testing for the scenario CRUD17:33
rm_workand for the API really17:33
rm_worksince ...17:33
rm_workbasically every test is a test of the object above it in the chain too17:33
rm_workbut i guess we still do them separately?17:33
johnsomYeah, one of the tempest rules is each test must run on it’s own.17:34
rm_workk17:34
rm_workdo we need to run each test for ipv4/6 ?17:34
rm_worklistener/pool/etc17:34
rm_workor can we just like... only do ipv6 for those17:35
johnsomI think just the tests that use addresses, so load balancer and member IMO17:35
johnsomProbably a few scenarios too, but for API those should cover it17:36
rm_workhow do I make new idempotent_id things for tests?17:38
rm_workjust run uuidgen and paste it in?17:39
rm_workjohnsom: wait a sec, the loadbalancer test says "create a fully populated load balancer"17:40
rm_workbut ... that ISN'T what we're doing, right?17:40
johnsomuuidgen is what I used17:40
johnsomIt has all of the fields17:41
rm_workerrr, what has all the fields?17:47
rm_workOH17:47
rm_workyou mean *that kind* of fully populated17:47
rm_workI thought you meant like, listener+pool+members+hm+l717:48
johnsomYeah, not single-call-create17:51
johnsomWhich is getting an overhaul, because, I actually need things populated.....17:51
*** velizarx has quit IRC17:54
openstackgerritAdam Harwell proposed openstack/octavia-tempest-plugin master: Create scenario tests for listeners  https://review.openstack.org/49231117:55
rm_workjohnsom: ^^ is that what you were thinking?17:55
rm_workI haven't done the API tests yet...17:55
rm_workor did you want to do more like17:55
rm_workhttps://review.openstack.org/#/c/492311/5/octavia_tempest_plugin/tests/scenario/v2/test_loadbalancer.py17:55
rm_workwhere everything is in a base class and in the tests you just run the create line17:56
johnsomNo, that base class thing is a mess.  It's all in the service client now17:56
rm_worki think they were also there?17:56
rm_workbut it was just convenience?17:56
johnsomYeah, that looks pretty good to me.18:03
johnsomNo, we don't need project_id on the sub-projects IMO. That is going away.18:03
rm_workk18:16
openstackgerritGerman Eichberger proposed openstack/neutron-lbaas master: Fix proxy extension for neutron RBAC  https://review.openstack.org/55400418:55
rm_workwait, why does loadbalancer go ONLINE without any HM or anything?18:56
openstackgerritGerman Eichberger proposed openstack/neutron-lbaas master: Gate API test for the lbaasv2-proxy plugin  https://review.openstack.org/53935018:56
*** atoth has quit IRC19:00
openstackgerritAdam Harwell proposed openstack/octavia-tempest-plugin master: Create api+scenario tests for listeners  https://review.openstack.org/49231119:37
rm_workjohnsom: tweaked some stuff, added API tests... err... actually, am I missing anything?19:37
rm_workoh, yeah, listener_list19:38
rm_workin the api test19:38
rm_worki'll do that after lunch+errands19:38
johnsomCool!19:38
rm_workthen ... pools19:38
rm_workjoy19:38
johnsomI think I am in the home stretch for single-call-create, then same, on to listeners19:39
rm_workk19:40
rm_workwill let these tests run in the gate over lunch so i can see what i messed up :P19:41
*** yboaron_ has joined #openstack-lbaas20:08
johnsomSo much for knocking on the door before swapping out the power meter....  Glad I have a UPS they would have a grumpy developer to deal with20:21
*** yboaron_ has quit IRC20:29
rm_work>_<20:30
*** sshank has joined #openstack-lbaas20:36
*** slaweq has quit IRC20:50
*** pchavva has quit IRC20:57
*** samccann has quit IRC21:13
*** velizarx has joined #openstack-lbaas21:36
*** velizarx has quit IRC21:39
*** rcernin has joined #openstack-lbaas22:13
*** slaweq_ has joined #openstack-lbaas22:26
*** slaweq_ has quit IRC22:28
*** fnaval has quit IRC22:56
*** sshank has quit IRC23:01
johnsomHmm, evidently python-octaviaclient doesn't support double byte names.23:17
johnsomhttps://storyboard.openstack.org/#!/story/200194623:17
johnsomThe API handles it fine though23:17
*** sshank has joined #openstack-lbaas23:26
*** sshank has quit IRC23:49
*** imacdonn has joined #openstack-lbaas23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!