Thursday, 2018-11-01

*** markvoelker has quit IRC00:01
openstackgerritAgate Wang proposed openstack/barbican-specs master: Update min tox version to 2.0
*** zul has quit IRC01:04
*** dayou has quit IRC01:38
*** abishop has quit IRC02:28
*** xek has joined #openstack-barbican03:09
*** dayou has joined #openstack-barbican03:59
*** xek has quit IRC04:45
*** pcaruana|elisa| has joined #openstack-barbican07:40
*** pcaruana|elisa| has quit IRC07:59
*** pcaruana has joined #openstack-barbican08:05
*** serlex has joined #openstack-barbican08:43
*** xek has joined #openstack-barbican08:49
*** serlex has quit IRC10:01
*** salmankhan has joined #openstack-barbican10:12
*** jaosorior has quit IRC10:23
*** dave-mccowan has joined #openstack-barbican10:45
*** pcaruana has quit IRC11:05
*** phuoc has joined #openstack-barbican11:09
*** xek_ has joined #openstack-barbican11:22
*** xek has quit IRC11:25
*** xek__ has joined #openstack-barbican11:25
*** zul has joined #openstack-barbican11:27
*** xek_ has quit IRC11:27
*** jaosorior has joined #openstack-barbican11:35
phuochi barbican team,11:37
phuocI am following the document,
phuocI can store secret with this command: openstack secret store --name mysecret --payload key=test11:38
phuocwhen I retrieve it (openstack secret get
phuocI got that error, 4xx Client error: Forbidden: Secret retrieval attempt not allowed - please review your user/project privileges11:38
phuocForbidden: Secret retrieval attempt not allowed - please review your user/project privileges11:38
phuocHow can I troubleshoot this issue?11:39
*** pcaruana has joined #openstack-barbican11:52
*** abishop has joined #openstack-barbican12:03
*** pbourke has quit IRC12:09
*** pbourke has joined #openstack-barbican12:10
*** raildo has joined #openstack-barbican12:17
*** velizarx has joined #openstack-barbican12:22
*** jmlowe has quit IRC12:47
*** zul has quit IRC12:52
*** zul has joined #openstack-barbican12:55
*** zul has quit IRC13:04
*** zul has joined #openstack-barbican13:05
*** jmlowe has joined #openstack-barbican13:07
*** Luzi has joined #openstack-barbican14:27
*** Luzi has quit IRC14:44
redrobothi phuoc!  You should check the roles assigned to your user account14:45
redrobotphuoc, the error seems like a permissions issue14:45
*** velizarx has quit IRC14:57
phuocredrobot, thanks for replying me15:03
phuocI changed Barbican version to Rocky and it worked15:03
phuoclast time, I did: openstack role add --user <username> --project <project name> creator15:03
phuocbut I still got the above error15:04
*** jmlowe has quit IRC15:10
jaosoriorphuoc: what version were you using initially?15:33
phuocjaosorior, hi15:42
phuocI used Barbican master version in the last time15:42
jaosoriorphuoc: so, barbican master is what didn't work?15:43
jaosoriorphuoc: are you using a custom policy file? or just the defaults?15:43
phuocI use the defaults15:43
jaosoriorphuoc: so, you don't have any /etc/barbican/policy.json file?15:43
phuocI didn't change anything in /etc/barbican/policy.json file15:44
*** velizarx has joined #openstack-barbican16:27
redrobotdave-mccowan, ade_lee working on Exercise 3 right now.  "cubswin:)" doesn't seem to work as a pw17:21
redrobotalso tried "redsoxwin:)" for good measure17:22
dave-mccowanlol.  they (cirros guys) changed it after the cubs won.  now it's  "gocubsgo".17:26
dave-mccowanwe must have accidentally upgrade to a newer cirros image at some point in the last couple weeks.17:27
redrobotdave-mccowan, yep, that works17:37
*** salmankhan has quit IRC18:02
*** velizarx has quit IRC18:10
*** jmlowe has joined #openstack-barbican18:22
*** pcaruana has quit IRC19:05
*** salmankhan has joined #openstack-barbican19:38
ade_leedave-mccowan, redrobot hey -- so redrobot was saying that the output does not match whats in the workshop notes..19:51
dave-mccowanwhich exercise?19:52
redrobotade_lee, yeah, it's just the names of the fields in Exercise 119:52
dave-mccowanah yea.  we should fix that.19:52
ade_leedave-mccowan, fix the doc?19:53
redroboteg. instructions show the output as "secret_ref", but actual output is "Secret href"19:53
redrobotthe commands have all been correct so far19:53
redroboteg. commands in instructions actually use "Secret href"19:53
dave-mccowanfor now fix the doc.  maybe someday patch barbicanclient to have better field names.  redrobot wrote that code once upon a time, but it didn't merge.19:54
redrobotIIRC when we did the Barcelona workshop, we patched the client to use "secret_ref" et al.19:54
ade_leeso - yeah - lets fix the doc and then get a patch up ..19:56
ade_leedave-mccowan, can you fix doc?  redrobot can you put up patch ? :)19:56
redrobotade_lee, patch for client? Yeah, I can work on that...19:57
dave-mccowanyes, i'll put up the patch to the workshop doc.19:57
dave-mccowanwe should think through patching client at this point, since we risk breaking backwards compatibility.19:58
redrobotYeah... it would have to be a new Major version19:58
ade_leedave-mccowan, agreed19:58
* redrobot is not scared to semver19:58
*** salmankhan has quit IRC19:59
dave-mccowanredrobot anything else other than field names in Exercise 1 and password in Exercise 3?20:00
redrobotdave-mccowan, haven't run into anything else yet, but I'll let y'all know if I do20:01
*** salmankhan has joined #openstack-barbican20:09
redrobotdave-mccowan, Exercise 4, when uploading cert, s/secret_ref/"Secret href"20:28
*** dave-mccowan has quit IRC20:32
*** abishop has quit IRC20:37
*** dave-mccowan has joined #openstack-barbican20:55
*** raildo has quit IRC21:25
*** xek__ has quit IRC21:36
*** salmankhan has quit IRC22:01
*** salmankhan has joined #openstack-barbican22:09
*** abishop has joined #openstack-barbican22:26
*** abishop has quit IRC22:31
*** salmankhan has quit IRC22:38

Generated by 2.15.3 by Marius Gedminas - find it at!