Wednesday, 2015-08-12

*** david-lyle has quit IRC00:03
-openstackstatus- NOTICE: Zuul was restarted due to an error; events (such as approvals or new patchsets) since 23:01 UTC have been lost and affected changes will need to be rechecked00:04
*** nelsnelson has quit IRC00:24
*** nelsnelson has joined #openstack-barbican00:40
*** woodster_ has quit IRC00:50
*** david-lyle has joined #openstack-barbican00:54
*** everjeje has quit IRC01:22
*** vivek-ebay has joined #openstack-barbican01:34
*** nelsnelson has quit IRC01:44
*** nelsnelson has joined #openstack-barbican02:06
*** alee_on_way_home is now known as alee_02:13
*** nelsnelson has quit IRC02:20
*** gyee has quit IRC02:27
*** vivek-ebay has quit IRC02:33
*** david-lyle has quit IRC02:33
*** tkelsey has joined #openstack-barbican02:34
*** tkelsey has quit IRC02:38
*** chellygel has quit IRC02:45
*** chellygel has joined #openstack-barbican02:50
openstackgerritZhenyu Zheng proposed openstack/barbican: Drop downgrade field in alembic and version
*** rm_work|away is now known as rm_work03:10
*** david-lyle has joined #openstack-barbican03:30
*** vivek-ebay has joined #openstack-barbican03:41
openstackgerritDouglas Mendizábal proposed openstack/barbican: Introduce the concept of plugin status
*** vivek-ebay has quit IRC04:04
*** vivek-ebay has joined #openstack-barbican04:06
openstackgerritDouglas Mendizábal proposed openstack/castellan: Remove unnecesary __ne__ implementations
openstackgerritDouglas Mendizábal proposed openstack/castellan: Remove unnecessary __ne__ implementations
*** morgan_404 is now known as morgan_41004:26
*** morgan_410 is now known as morgan_40404:26
*** edtubill has joined #openstack-barbican04:34
*** vivek-ebay has quit IRC05:40
*** edtubill has quit IRC05:48
*** shohel has joined #openstack-barbican06:22
*** zz_dimtruck is now known as dimtruck06:26
*** vivek-ebay has joined #openstack-barbican06:36
*** vivek-ebay has quit IRC06:41
*** Nirupama has joined #openstack-barbican06:44
*** xek has quit IRC07:04
*** xek has joined #openstack-barbican07:05
*** nickrmc83 has joined #openstack-barbican07:10
*** ig0r_ has joined #openstack-barbican07:15
*** alee has quit IRC07:24
*** ig0r__ has joined #openstack-barbican07:39
*** ig0r_ has quit IRC07:41
*** dimtruck is now known as zz_dimtruck07:50
*** ig0r__ has quit IRC08:13
*** ig0r_ has joined #openstack-barbican08:17
*** ig0r_ has quit IRC08:19
*** DTadrzak has quit IRC08:19
*** tkelsey has joined #openstack-barbican08:26
*** everjeje has joined #openstack-barbican08:35
*** vivek-ebay has joined #openstack-barbican09:38
*** vivek-ebay has quit IRC09:42
*** DTadrzak has joined #openstack-barbican09:45
*** DTadrzak has quit IRC09:45
*** DTadrzak has joined #openstack-barbican09:46
*** ig0r_ has joined #openstack-barbican10:10
*** yuanying has quit IRC10:30
*** yuanying has joined #openstack-barbican10:30
*** ig0r_ has quit IRC10:46
openstackgerritArun Kant proposed openstack/python-barbicanclient: Part 1: Adding ACL support for Client API.
openstackgerritArun Kant proposed openstack/python-barbicanclient: Part 2: Adding ACL support for CLI commands and docs
openstackgerritArun Kant proposed openstack/python-barbicanclient: Part 3: Adding ACL functional tests.
*** peter-hamilton has joined #openstack-barbican11:03
*** shohel has quit IRC11:34
*** shohel has joined #openstack-barbican11:34
openstackgerritDave McCowan proposed openstack/barbican: Implement Models and Repositories for Resource Quotas
*** dave-mccowan has quit IRC12:12
*** shohel has quit IRC12:28
*** shohel has joined #openstack-barbican12:28
*** rellerreller has joined #openstack-barbican12:42
*** SheenaG has joined #openstack-barbican12:51
*** zz_dimtruck is now known as dimtruck12:55
*** elmiko has joined #openstack-barbican13:06
openstackgerritJoel Coffman proposed openstack/castellan: Remove copy_key operation
*** Nirupama has quit IRC13:09
*** lisaclark1 has joined #openstack-barbican13:15
*** lisaclark1 has quit IRC13:22
elmikoredrobot, ping13:26
*** kfarr has joined #openstack-barbican13:32
*** lisaclark1 has joined #openstack-barbican13:34
redrobotelmiko pong13:38
elmikoredrobot, hey, thanks for the comments. i just wanted to confirm about the optional barbican import before i pushed another revision13:40
redrobotelmiko just left a comment a minute ago.  The optional import makes sense to me now.13:41
elmikook, cool13:41
openstackgerritMichael McCune proposed openstack/castellan: refactoring castellan configuration
reaperhulkcryptography 1.0 is out btw. I believe it supports everything necessary to drop pyopenssl in barbican13:49
redrobotreaperhulk woot!13:49
reaperhulk release announce13:49
kfarrredrobot, I see you're over there reviewing Castellan patches :D Can you take a look at this one please?
redrobotreaperhulk does it have the bits we need to drop ldap?13:50
reaperhulkredrobot: probably? I forget what you're using ldap for. It was originally just basic DN validation, which cryptography can definitely do13:50
reaperhulkI think rm_work showed me something where the LDAP string could come from user input though, which is not a thing cryptography supports (and frankly neither should barbican)13:51
reaperhulkbecause LDAP strings are a travesty anyway13:51
redrobotreaperhulk hehe13:51
redrobotkfarr about to jump in the shower.  I'll look at it as soon as I get to the office.13:52
kfarrThanks redrobot!  I appreciate it13:52
lisaclark1go cryptography 1.0 !14:00
*** spotz_zzz is now known as spotz14:00
*** dave-mccowan has joined #openstack-barbican14:01
elmikovery neat, grats reaperhulk14:01
dave-mccowanhockeynut ping14:02
dave-mccowanreaperhulk, redrobot: barbican uses the str2dn() from ldap or parse_dn() from ldap3 to read the distinguished name from an order to copy it into a CSR.  Its used for both validation and normalization as the CSR is built.  what's the equivalent to parse_dn() in cryptography?  btw, shows exactly where and how ldap is used in barbican.14:11
*** pglass has joined #openstack-barbican14:15
hockeynutdave-mccowan pong14:22
*** silos has joined #openstack-barbican14:23
dave-mccowanhockeynut the async running of functional tests in the gate makes the paging test cases angry.  the counts get off as different tests create and delete new entries at the same time.  any ideas?14:24
hockeynutdave-mccowan look at how we did it with secrets - they use a unique prefix for filtering14:27
dave-mccowanhockeynut project quotas don't support filtering14:28
*** tkelsey has quit IRC14:28
*** tkelsey has joined #openstack-barbican14:28
darrenmoffatyeah on 1.0 of PyCA !14:29
reaperhulkdave-mccowan: there's no support for parsing a string into a DN in cryptography. You can build a Name via NameAttribute objects in cryptography, but the "order_model.meta.get('subject_dn')" would have to change (why does the order model support sending an LDAP encoded string anyway?)14:32
dave-mccowanreaperhulk it's not really LDAP, it "distinguished name format".  like: ",ou=dev,ou=us," maybe it's called X.501?  the python-ldap library just happens to have a method to parse it.14:44
*** chadlung has joined #openstack-barbican14:50
hockeynutdave-mccowan there aren't any fields that we could filter on?14:58
dave-mccowanhockeynut, is the only field14:59
hockeynutso without the filtering you are seeing what we saw that caused us to use the filtering - running tests in parallel change the data returned by the list APIs15:01
hockeynutanother alternative is to use a different userid15:01
*** igueths has joined #openstack-barbican15:03
*** lisaclark1 has quit IRC15:04
*** DuncanT has quit IRC15:05
*** rm_work has quit IRC15:05
dave-mccowanhockeynut :-(  i'll have to think on this some more. maybe for now, i'll remove paging tests from the CR.15:05
hockeynutdave-mccowan that might be easier - then we can noodle on it for a while15:06
*** DuncanT has joined #openstack-barbican15:07
openstackgerritDave McCowan proposed openstack/barbican: Implement Models and Repositories for Resource Quotas
*** xaeth is now known as xaeth_afk15:08
*** dave-mccowan has quit IRC15:09
*** rm_work has joined #openstack-barbican15:10
*** rm_work has quit IRC15:10
*** rm_work has joined #openstack-barbican15:10
*** shohel has quit IRC15:10
*** nkinder has joined #openstack-barbican15:12
*** woodster_ has joined #openstack-barbican15:18
*** lisaclark1 has joined #openstack-barbican15:20
*** edtubill has joined #openstack-barbican15:32
*** darrenmoffat has quit IRC15:36
*** darrenmoffat has joined #openstack-barbican15:37
hockeynutwoodster_ I have confuzzles today - what's the current blessed method for running server in dev box?  I normally use bin/ <install or start> but I recall something about is being deprecated?  I see bin/barbican-all but that is actually deprecated according to its comments at the top of the file and it points to bin/barbican.sh15:41
redrobothockeynut I tend to use bin/barbican-api15:41
*** edtubill has quit IRC15:44
redrobotkfarr I have a Q about that Castellan CR15:47
*** nkinder has quit IRC15:47
redrobotkfarr actually, I think I answered my own question.15:50
redrobotkfarr if you get a chance, could you review again?  There was only a minor change since the last time you gave a +2.15:51
openstackgerritMerged openstack/castellan: Update the key manager API
redrobotkfarr never mind that... looks like it's in merge conflict now15:53
*** edtubill has joined #openstack-barbican15:54
elmikolol, NOOOoooo15:54
redrobotelmiko lol, sorry about that.15:55
elmikoredrobot, haha, no worries. i knew this could happen ;)15:55
*** nickrmc83 has quit IRC16:00
*** gyee has joined #openstack-barbican16:00
*** vivek-ebay has joined #openstack-barbican16:01
openstackgerritMichael McCune proposed openstack/castellan: refactoring castellan configuration
*** lisaclark1 has quit IRC16:04
*** vivek-eb_ has joined #openstack-barbican16:05
*** vivek-ebay has quit IRC16:05
*** diazjf has joined #openstack-barbican16:15
*** lisaclark1 has joined #openstack-barbican16:18
*** lisaclark1 has quit IRC16:19
*** lisaclark1 has joined #openstack-barbican16:20
diazjfrellerreller, redrobot, jfarr, can I get a +A on wanna start working on the Castellan Update function if needed16:25
kfarrredrobot, just saw all your messages, will take a look16:31
kfarrdiazjf, will take a look once I get some after-lunch caffeine16:34
*** dave-mccowan has joined #openstack-barbican16:37
diazjfkfarr, awesome thanks :-D16:37
*** vivek-eb_ has quit IRC16:38
redrobotdiazjf regarding the comment about payload=0 being false16:40
redrobotdiazjf It's worth noting that payload=0 is not supported, since it would fail the type check for text_type or binary_type16:41
diazjfredrobot, thanks, where would be a good place to note it? I had to change 'if self.payload' to 'if self.payload is not None' because of the zero.16:50
redrobotdiazjf should probably be a unit test that tests for payload=0 and checks for a ValueError16:51
diazjfredrobot, gotcha I'll add it after lunch. Anxious to get my 1st Barbican Merge :-D16:54
openstackgerritArun Kant proposed openstack/python-barbicanclient: Part 1: Adding ACL support for Client API.
*** vivek-ebay has joined #openstack-barbican17:08
openstackgerritArun Kant proposed openstack/python-barbicanclient: Part 2: Adding ACL support for CLI commands and docs
openstackgerritArun Kant proposed openstack/python-barbicanclient: Part 3: Adding ACL functional tests.
*** xek has quit IRC17:08
*** igueths has quit IRC17:09
*** DTadrzak has quit IRC17:10
*** lisaclark1 has quit IRC17:11
*** xek has joined #openstack-barbican17:13
openstackgerritArun Kant proposed openstack/python-barbicanclient: Part 2: Adding ACL support for CLI commands and docs
openstackgerritArun Kant proposed openstack/python-barbicanclient: Part 3: Adding ACL functional tests.
*** dave-mcc_ has joined #openstack-barbican17:28
*** vivek-eb_ has joined #openstack-barbican17:30
*** dave-mccowan has quit IRC17:31
*** nkinder has joined #openstack-barbican17:32
kfarrrellerreller, can you please review this one?
*** vivek-ebay has quit IRC17:34
*** lisaclark1 has joined #openstack-barbican17:34
*** lisaclark1 has quit IRC17:34
rellerrellerkfarr done!17:35
*** lisaclark1 has joined #openstack-barbican17:35
kfarrThanks rellerreller!!17:35
*** tkelsey has quit IRC17:36
*** dave-mccowan has joined #openstack-barbican17:38
*** dave-mcc_ has quit IRC17:40
redrobotwoot!  It's Castellan merge day!17:43
redrobot(except for yours rm_work )17:43
*** kfarr has quit IRC17:48
elmikodid someone say castellan merge day? /me pokes head up17:48
*** crc32 has joined #openstack-barbican17:49
redrobotelmiko yup, looks like yours is on the way to the merge queue17:51
*** peter-hamilton has quit IRC17:52
elmikoredrobot, are you planning a new castellan release once all these changes have gone through?17:54
rellerrellerNeed one more review for
*** nkinder has quit IRC17:54
redrobotelmiko yup! ... maybe even have kfarr do the release17:54
elmikonice, +117:55
elmikovery exciting though, we might be able to have barbican integration in sahara for L =)17:55
redrobotelmiko that would be awesome!17:56
elmikoit's been a long journey, i've appreciated all the help17:56
alee_elmiko, thats using barbican to do cert generation?17:59
alee_or store secrets?17:59
elmikoalee_, secret storage, we're offloading all passwords =)17:59
*** kfarr has joined #openstack-barbican17:59
alee_elmiko, excellent17:59
*** peter-hamilton has joined #openstack-barbican18:00
elmikoalthough, in the future we might be able to use the cert generation stuff if we move on our plans for secure clusters18:00
*** SheenaG1 has joined #openstack-barbican18:02
*** SheenaG has quit IRC18:04
*** DTadrzak has joined #openstack-barbican18:05
openstackgerritMerged openstack/castellan: Update mock key manager
openstackgerritMerged openstack/castellan: refactoring castellan configuration
* elmiko does happy dance18:07
openstackgerritFernando Diaz proposed openstack/python-barbicanclient: Add Unit Tests for Store and Update Payload when Payload is zero
redrobotelmiko thanks for all the work you put into that!18:13
elmikoi'm thinking about doing a little more documentation about usage for castellan. i think it would be helpful18:14
redrobotelmiko that would be awesome!  ... once we get a new release out, the docs should begin to be published to
diazjfredrobot, added the unit-test on a dependant patch18:15
elmikoredrobot, very cool!18:15
diazjfall ready to go!! :)18:15
*** silos1 has joined #openstack-barbican18:18
alee_elmiko, xaeth_afk -- how are you guys building the rpms that are being uploaded for fedora review?18:19
alee_are  you using the script or the checked in spec file?18:19
elmikoalee_, i had been building them with a container builder18:19
elmikoi used the spec file and rpmbuild18:20
alee_elmiko, and the spec file is not the one checked in in the tree , right?18:20
elmikoalee_, i had taken the last spec file that xaeth_afk had in his repo. i *thought* that was the last one pushed to the bz18:21
elmikobut i think he modified it since my last build18:21
*** silos has quit IRC18:22
alee_elmiko, thats fine -- I want to build something that uses the latest master rather than 2014-2-618:23
alee_and trying to figure out the best way to do this ..18:23
elmikoalee_, i build an f21 container in docker, then just logged in and built the rpm with the standard rpmbuild toolchain18:24
* elmiko is tired of rpmbuild destroying his rootfs18:24
elmikothen i deployed the rpm to my f21 devstack machine for integration testing18:25
alee_elmiko, right - presumably though - the spec file refers to a particular tarball18:26
elmikoalee_, yea it does18:26
alee_which is a snapshot at a particular time18:27
elmikoright, it was definitely something that was too old by my standards, but then i live on the bleeding edge lol18:27
alee_I'd like to just build something that is in tree to get the latest chaanges say18:27
alee_there is a build script and spec file in -tree right now18:28
elmikoit should just be a matter of adjusting the version info at the top of the spec file18:28
alee_but I think that spec file is something that redrobot put together at some point18:28
elmiko1sec, bringing up the bz18:29
redrobotalee_ elmiko if you're talking about the spec file in the barbican repo, then you're looking in the wrong spot.  That thing is ancient and needs to be removed18:29
alee_elmiko, redrobot , xaeth_afk - would it make sense to have some kind of script in the barbican tree?18:29
redrobotalee_ elmiko  official, up-to-date, extra awesome spec by xaeth_afk is
elmikoalee_, i don't think so18:30
elmikoredrobot, alee_, keep in mind that the juno branch is actually xaeth_afk's most current work18:30
elmikothe master branch is really out of date there18:31
alee_yeah -- that looks much more up to date18:31
elmikoalee_, imo, the spec file should be all we need. we should be using the standard fedora/rdo packaging tools to build it18:32
alee_elmiko, redrobot interesting --- the juno branch has the latest changes for fedora review, but the master has 2015.118:33
elmikoalee_, yea, i'm not sure what was going on with the master branch18:33
*** mixos has joined #openstack-barbican18:34
*** mixos has quit IRC18:37
openstackgerritMerged openstack/barbican: Introduce the concept of plugin status
alee_elmiko, I agree that we only need the spec file in order to build , and certainly when we add to fedora, the spec file for that particular release will be there.18:38
alee_elmiko, I'm just wondering if we need to keep a spec file in tree that folks could use to build based on the current state18:39
alee_elmiko, or if this is soemthing that only I want to do18:40
elmikoalee_, i think we definitely want a more current build, but if we follow the fedora/rdo model then we would need to pin the spec file to specific releases. so a "master" build may not be appropriate for the fedora/rdo repos18:41
redrobotalee_ elmiko  I would suggest sending Pull Requests to xaeth_afk to get his master branch to a point where it can build barbican master...  I think that duplicating his work in our repo would be less than ideal.18:41
elmikoredrobot, +118:42
alee_elmiko, I'm just thinking more from a devlopment point of view18:42
alee_redrobot, elmiko because I see I need to 1) create tarball 2) modify spec file for that tarball 3) rpmbuild18:43
elmikoalee_, yea, for devel i totally agree. just not sure where it should live18:43
elmikoit seems out of band for something like that to live in the barbican upstream repo18:44
alee_why not in tree?  the advantage of being in tree is that if something changes that requires spec file changes -- like lets say using barbican.conf instead of barbican-api.conf it will be reflected in the spec file18:44
alee_and we have some guidance on how to change the spec file when we do a releasr18:44
elmikotrue, but then should the upstream tree also contain the deb files as well?18:44
elmikoit just seems like a mix of upstream/downstream work18:45
redrobotelmiko +118:45
alee_elmiko, true enough18:45
alee_ok -- using xaeths master branch is probably the right place for this then18:46
elmikoalee_, the sad part is, even for the rdo repos i don't think we carry spec files that allow building a cutting edge master branch18:46
alee_elmiko, yeah I know18:46
*** lisaclark1 has quit IRC18:47
elmikoalee_, honestly, i would start from the juno branch then add you version changes to that. i had great difficulty building from the master of his repo.18:47
alee_elmiko, I'm going to clone his repo and do just that18:47
alee_we can sync up once I have it working18:47
elmikocool, hit me up if things go weird ;)18:47
elmikoalee_, i *think* you can just change these two lines:18:49
elmiko%global release_name juno18:49
elmiko%global release_version 2014.218:49
elmikoand it should work18:49
alee_elmiko, I think there might have been a couple of changes -- barbican.conf for example18:49
elmikooh, good point18:50
alee_also I'm trying to figure out how to generate the tarball18:50
alee_I could have a separate script that does that -- but it would be nice to generate it when rpmbuild runs on the fly18:50
alee_redrobot, what command do you use to generate the tarballs for release?18:51
redrobotalee_ python sdist18:52
elmikogood to know, i wasn't aware of that command target18:52
openstackgerritDouglas Mendizábal proposed openstack/barbican: Remove rpmbuild directory
alee_redrobot, interesting so on my branch - I get barbican-
alee_where do the numbers come from?18:54
alee_ah gotcha barbican.egg-info/PKG-INFO:Version:
redrobotalee_ it's a combination of and PBR magic18:55
redrobotalee_ for Liberty the versions were reset, so you'll need a new epoch18:55
redrobotalee_ OpenStack as a whole dropped the Year prefix used in <=K  and replaced it with semver18:56
alee_redrobot, sure - nice thing is that this gives us soemthing unique and not specific to an openstack releasse18:56
*** mixos has joined #openstack-barbican19:05
*** xaeth_afk is now known as xaeth19:06
*** pglass has quit IRC19:06
xaethalee_ all the building is happening from the barbican-spec repo19:07
xaethi'm not touching the upstream stuff at all19:07
*** pglass has joined #openstack-barbican19:08
xaethwe definitely need to true up master w/ juno19:08
xaethelmiko made lots of improvements19:08
xaethas for building the rpm... i just type make19:09
*** lisaclark1 has joined #openstack-barbican19:09
elmikoi guess i tend to be more conservative in that respect lol19:09
openstackgerritDave McCowan proposed openstack/barbican: Remove obsolete term "incubated" from docs
xaethmy master should have built for kilo :(19:10
*** mixos has quit IRC19:11
xaethbringing juno to master is actually mergeable.. cant say it actually runs though o_O19:11
* xaeth is in an emoticon mood today apparently19:11
xaethhrm... looks legit19:12
*** peter-hamilton has quit IRC19:17
*** kfarr has quit IRC19:17
*** rellerreller has quit IRC19:17
*** kfarr has joined #openstack-barbican19:18
*** mixos has joined #openstack-barbican19:19
*** peter-hamilton has joined #openstack-barbican19:19
*** mixos has quit IRC19:23
*** rellerreller has joined #openstack-barbican19:27
*** silos1 has quit IRC19:32
*** silos has joined #openstack-barbican19:40
*** rellerreller has quit IRC19:42
rm_worklol redrobot19:42
*** vivek-eb_ has quit IRC19:53
kfarrredrobot, can I bug you to create a new release for python-barbicanclient?  It will be needed for the updates to the Barbican plugin for Castellan19:56
redrobotkfarr sure thing...  there's a new process for the client, so I'm not sure how long it will actually take...19:56
*** kfarr_ has joined #openstack-barbican19:59
*** kfarr has quit IRC20:00
*** lisaclark1 has quit IRC20:01
*** lisaclark1 has joined #openstack-barbican20:05
*** kfarr_ has quit IRC20:06
*** kfarr has joined #openstack-barbican20:06
*** xaeth is now known as xaeth_afk20:07
*** lisaclark1 has quit IRC20:09
openstackgerritDave McCowan proposed openstack/barbican: Implement Models and Repositories for Resource Quotas
*** alee_ has quit IRC20:14
*** peter-hamilton has quit IRC20:19
*** xaeth_afk is now known as xaeth20:19
rm_workredrobot / woodster_ / chellygel: I commented with my "vision" for CertBundles and why I care about this at all, if anyone wants to comment on THAT:
*** lisaclark1 has joined #openstack-barbican20:20
diazjfkfarr, redrobot, what's going on with a new release for Barbican client? I'd like to work on some Barbican plugin for Castellan. feel free to throw some work my way ;-)20:21
rm_workdiazjf: i think the barbican plugin for castellan already exists?20:22
rm_workkfarr wrote it :P20:22
rm_workkfarr: ah, also could use your view on my vision above ^^20:22
redrobotdiazjf yeah, kfarr has most of the barbican implementation in review20:22
kfarrdiazjf, the reason I was asking for a new release for python-barbicanclient was because the last release was like 2 months ago the Castellan uses some of the features that have been merged since then :)20:22
kfarrrm_work, I saw, was just now taking a look20:23
redrobotdiazjf but if you're looking for something to do, this client blueprint could keep you busy for a while:
diazjfkfarr, gotcha. redrobot, thanks, I'll take a look at it20:23
rm_workyeah, this can't be just me -- I am sure other people have a similar vision20:23
redrobotdiazjf if you decide to tackle it let me know, so I can give you more info than the 2 sentence description we have there.20:24
diazjfredrobot, yeah it wasn't "so" informative lol, sure just give me some more info and I'd be happy to put in some work20:26
redrobotdiazjf google hangout?20:26
diazjfredrobot, can't right now, but maybe we can schedule one tomorrow?20:26
redrobotdiazjf sounds good.  I'm pretty much free all day except for 10:30-11am CDT.  Just ping me when you're ready to jump on.20:27
*** chadlung has quit IRC20:28
diazjfredrobot, will do thanks!20:29
rm_workexamples of usage of this "set of certificate data" that I am calling a CertBundle:20:30
rm_workwe're not "inventing a new standard" here20:30
rm_workthis is tried and true -- these are the things we need to really USE a certificate in any service20:30
*** xaeth is now known as xaeth_afk20:31
*** gyee has quit IRC20:39
rm_workI wish there was a /pingall command, because I really want to invite everyone to comment on my vision statement on and tell me if you think I'm wrong -- because this is the basis for my whole attempt to get certificates into Castellan, so if people don't agree with that, I may as well give up20:40
woodster_rm_work: you? give up??? :)20:41
rm_workchellygel / hockeynut / elmiko / atiwari / arunkant / kfarr / jvrbanac / reaperhulk / redrobot / ryanpetrello / woodster_ / diazjf20:41
redrobothehe... I have to agree, rm_work  your perseverance is commendable.20:41
rm_workI have expended a great deal of energy on something I really believe will be a huge improvement to openstack as a whole, not just a single project20:42
elmikorm_work, i'll take a look20:42
rm_workit's a vision for improving the whole ecosystem20:42
*** vivek-ebay has joined #openstack-barbican20:42
rm_workbut if people really don't want to make things better (or don't think this makes things better) then obviously I am wasting my time20:43
*** silos has left #openstack-barbican20:46
*** diazjf has left #openstack-barbican20:49
openstackgerritJoel Coffman proposed openstack/castellan: Remove copy_key operation
*** edtubill has quit IRC20:52
*** diazjf has joined #openstack-barbican20:53
*** diazjf has left #openstack-barbican20:54
*** alee_ has joined #openstack-barbican21:00
openstackgerritMerged openstack/barbican: Remove obsolete term "incubated" from docs
woodster_rm_work: canned beer, sliced bread, now castellan cert manager?21:01
rm_workit's not revolutionary, it's just steady progress21:01
woodster_rm_work: could you add a barbican cert manager impl to that CR? I'm tripping up your input kwargs a bit21:01
rm_worklook up two21:02
rm_workit's in the chain21:02
woodster_rm_work: sorry, didn't notice21:02
*** kfarr has quit IRC21:22
*** SheenaG1 has quit IRC21:26
*** SheenaG has joined #openstack-barbican21:34
*** alee_ has quit IRC21:38
dave-mccowanhockeynut fixes our parallel test problem.  what do you think?21:42
*** pglbutt has joined #openstack-barbican21:47
hockeynutdave-mccowan checking now21:51
*** pglass has quit IRC21:51
*** silos has joined #openstack-barbican21:55
silosredrobot: ping21:57
redrobotsilos pong21:57
silosWhat's the module for in the barbican/cmd directory?21:57
redrobotsilos it's a wrapper for the worker proces...21:59
*** pglbutt has quit IRC22:00
redrobotsilos out of the box, and also at the gerrit gate, barbican is configured to be synchronous for all requests22:00
redrobotsilos but in a real world deployment barbican should be deployed as a distributed system.22:00
redrobotsilos the first diagram in shows what a real world deployment may look like22:01
redrobotsilos all orders in a distributed deployment will be processed in an asynchronous fashion22:01
redrobotsilos this is because provisioning a certificate from a public CA may take up to a few weeks.22:02
silosredrobot: thanks for the explanation :-D22:03
silosI ran and some errors popped up so I'm just trying to see if it's a bug or not.22:03
redrobotsilos you're going to need a much fancier dev environment to test out the worker...  I think you'll need at least one rabbit node22:04
redrobotsilos or other oslo.messaging supported queue22:04
redrobotsilos we usually use rabbit though.22:04
silosyea. I was looking into rabbit. but I was expecting those errors. There's another error I dont' think should be there though. Dude to a recent release of oslo.config22:05
redrobotsilos ah... well then you may have found a bug!22:05
*** lisaclark1 has quit IRC22:11
rm_workwoodster_: thanks for the feedback, it pains me a bit but i pretty much agree with you22:12
*** gyee has joined #openstack-barbican22:14
*** alee_ has joined #openstack-barbican22:15
rm_workwill make some changes22:17
*** SheenaG has quit IRC22:25
*** silos has left #openstack-barbican22:31
*** spotz is now known as spotz_zzz22:39
hockeynutdave-mccowan - sorry, got sidetracked (its been a bad day).  Appears that dogtag gate isn't thrilled with the quota CR22:52
*** dimtruck is now known as zz_dimtruck22:53
rm_workman, elmiko this conf change really borked my CR since i was doing a little bit similar rearranging22:55
rm_workelmiko: i'm rebasing now, need you to take a look once i finish to make sure it looks sane22:55
rm_worki might need to rework it again22:56
*** SheenaG has joined #openstack-barbican23:01
rm_workanyone still get the "db type could not be determined" error running tox for py26?23:03
rm_workand reaperhulk does the release of cryptography for pypy take longer or something? getting an error on pypy tests only, which seems to be crypto related23:03
rm_workImportError: No module named cryptography.hazmat.bindings._constant_time23:04
rm_workthough it says ==1.023:04
rm_workbut it works fine on py27/py3423:04
openstackgerritAdam Harwell proposed openstack/castellan: Officially add Certificate Management to scope
openstackgerritAdam Harwell proposed openstack/castellan: Add barbican implementation of CertManager
openstackgerritAdam Harwell proposed openstack/castellan: Copy octavia.certmgr to Castellan
reaperhulkrm_work: you must run on pypy2.623:05
rm_worklet me see which pypy23:05
reaperhulkif the openstack infra gate is on pypy < 2.6 it will break.23:05
reaperhulk2.6 came out over a month ago23:05
rm_workPython 2.7.6 (32f35069a16d, Jun 06 2014, 20:12:47)23:06
rm_work[PyPy 2.3.1 with GCC 4.2.1 Compatible Apple LLVM 5.0 (clang-500.2.79)] on darwin23:06
reaperhulkholy crap upgrade your pypy :)23:06
rm_workto what23:06
reaperhulk(the latest)23:06
rm_worklooks like pyenv gives me 2.5.1 as latest23:06
reaperhulkupgrade your pyenv.23:07
rm_workjust did23:07
reaperhulkit is also out of date23:07
reaperhulkno, I mean yours still is23:07
reaperhulkI installed pypy-2.6 via pyenv a long time ago23:07
rm_workyeah but i JUST updated pyenv23:07
rm_workjust did it again23:07
rm_workstill not seeing anything . 2.5.123:07
reaperhulkpyenv and python-build are separate projects.23:07
reaperhulkI don't pull pyenv from homebrew but I'm guessing you need to upgrade python-build separately23:07
reaperhulk(and also learn your tooling :D)23:08
rm_worki don't use brew's pyenv either23:08
rm_workused it from their git-installer23:08
reaperhulkwhat happens when you ls ~/.pyenv/plugisn/python-build/share/python-build23:08
reaperhulkI see pypy-2.6.0 in there23:08
reaperhulkobviously without the typo23:09
rm_workyeah hmmm23:09
*** vivek-ebay has quit IRC23:09
rm_workpython-build isn't in the plugins dir23:09
rm_workdoing further investigating23:10
rm_workwell not sure, but restarting my shell fixed it23:13
rm_work*not sure why23:13
rm_workwhich just leaves me with the py26 "db type could not be determined" issue23:14
rm_workhmm, removing .testrepository didn't fix it :/23:16
*** vivek-ebay has joined #openstack-barbican23:18
*** SheenaG has quit IRC23:21
*** chlong has quit IRC23:25
rm_workwoodster_: let me know if that looks better to you23:31
rm_workwoodster_: decided to still leave registration in such that technically it will work, but is more sanely defaulting23:31
*** tkelsey has joined #openstack-barbican23:35
*** tkelsey has quit IRC23:39
*** SheenaG has joined #openstack-barbican23:43
*** zz_dimtruck is now known as dimtruck23:50
openstackgerritPradeep Kumar Singh proposed openstack/barbican: Make tests in test_hrefs, test_quota py3 compatible
*** crc32 has quit IRC23:58

Generated by 2.14.0 by Marius Gedminas - find it at!