[21:12:12] !log [21:12:21] I am running http://meta.wikimedia.org/wiki/WM-Bot version wikimedia bot v. 2.8.0.0 [libirc v. 1.0.3] my source code is licensed under GPL and located at https://github.com/benapetr/wikimedia-bot I will be very happy if you fix my bugs or implement new features [21:12:21] @help [21:12:28] http://bots.wmflabs.org/dump/%23confidant.htm [21:12:28] @info [21:13:19] @logs [21:13:31] so where is this bot hosted, on your infra? [21:13:39] in wikimedia-labs [21:13:46] I used to work at wikimedia foundation [21:13:55] it’s run by a volunteer [21:14:00] well, the bot is. [21:14:05] labs is run by WMF [21:14:38] ah i see and is any way you can browse like the Salt one which is mentioned in the channel topic ? [21:15:16] Infobot was already enabled [21:15:16] @infobot-on [21:15:42] I think so. need to find the info [21:16:04] http://bots.wmflabs.org/dump/%23confidant.htm [21:16:04] @info [21:18:22] the interface isn’t quite a nice, but it works ;) [21:19:04] the info page is somewhat interesting [21:19:24] !docs is http://lyft.github.io/confidant/ [21:19:25] Key was added [21:19:37] @installation is http://lyft.github.io/confidant/basics/install/ [21:19:44] !installation is http://lyft.github.io/confidant/basics/install/ [21:19:44] Key was added [21:19:56] !configure is http://lyft.github.io/confidant/basics/configuration/ [21:19:56] Key was added [21:20:18] Ryan_Lane: https://bots.wmflabs.org/~wm-bot/logs/ [21:20:22] !security is http://lyft.github.io/confidant/communication/security_reporting/ [21:20:22] Key was added [21:20:47] DanyC: yeah, that’s basically just a directory listing [21:20:56] the link gives you the ability to show logs between dates [21:21:27] !list is https://groups.google.com/forum/#!topic/confidant-users [21:21:27] Key was added [21:21:37] ok, enough spam for now :) [21:23:48] Ryan_Lane: if you don't mind/ don't get offended but the http://irclog.perlgeek.de/salt/ is easier for the flow, just click on the date or Search/ Google Search. worth having this features imo (but maybe for different time) [21:24:17] yeah, requires me to host a bot somewhere, though [21:25:18] this bot is free [21:25:32] in the future I can switch to a bot with a nicer web interface [21:26:46] Ryan_Lane: i see, i thought - reading http://moritz.faui2k3.org/en/ilbot - that i could also ask the owner if i can join his BOT list rather than you guys hosting one [21:26:50] maybe i got it wrong [21:27:50] ah [21:29:57] let me see if the author is online [21:29:59] I can ask [21:32:25] I’ll keep this logging on for now and if I can get that enabled, I’ll disable logging for wm-bot and change the link :) [21:33:22] sure thing, make sense - thanks for openness [21:34:26] yw [21:36:28] https://github.com/saltstack/salt/issues/28793 <— requested support for minion external pillars for salt, to make confidant work more effectively if you’re using master/minion mode. [21:41:10] @relay-on [21:41:10] Relay was enabled [21:42:20] Hooks from lyft/confidant will be now displayed in this channel [21:42:20] @github+ lyft/confidant [21:58:03] GitHub [8lyft/confidant] ryan-lane pushed 2 commits into branch master: https://github.com/lyft/confidant/compare/5d7515d89ccd...0e5d9eab98da [21:58:03] GitHub [8lyft/confidant] commit by ryan-lane (Ryan Lane) https://github.com/lyft/confidant/commit/bfa3e55ed04bd19b2395cb340a5b4388edcb1310 Use logging directly and reorder imports for pep8 [21:58:03] GitHub [8lyft/confidant] commit by ryan-lane (Ryan Lane) https://github.com/lyft/confidant/commit/0e5d9eab98daf4284f86879fb41468fb17f7214f Merge pull request #40 from lyft/logging-and-import-reordering Use logging directly and reorder imports for pep8 [21:58:04] GitHub [8lyft/confidant] ryan-lane pushed 0 commits into branch logging-and-import-reordering: https://github.com/lyft/confidant/compare/bfa3e55ed04b...000000000000 [21:58:26] ok. that’s a bit excessive [21:59:36] wow, quite noisy :D [21:59:58] yeah. pulling some events from the webhook :) [23:48:47] Hi, I have a few questions about Confidant [23:50:10] pnathan: hi there. what's up? [23:51:04] So I've eyeballed through the docs and a couple questions are kind of outstanding [23:51:33] (1) Right now it seems that the management system is via the web UI. Is there an API for that? [23:52:06] E.g., if I have a fancy schmany API that already does things with services, can I aim requests out to confidant and pull the data back? [23:52:35] well, there's an API, but it requires google auth [23:52:44] (2) what level of serious scrutiny has the system had? I've knocked around a bit and I'm not familar with the crypto library you're using. [23:53:06] that might be me just missing developments, might not be. [23:53:20] the general idea is that humans add secrets through the web-ui, then your services pull their credentials through a single rest call [23:53:22] to one endpoint [23:53:45] we have a very basic example implementation of the client: https://github.com/lyft/confidant/blob/master/confidant_client.py [23:54:16] so, yeah, if you have something fancy, you can just implement this directly, or pull this client in as a library [23:54:29] Ah, so I definitely have to provide Google auth if I want to access it and gin up my own service ? [23:54:38] well, it depends on what you're doing [23:54:38] I saw that kicking around the code but didn't grasp the full import. [23:55:32] so there's a couple concepts here [23:55:57] the first is management of the secrets. such as adding them to the system, modifying them, mapping them to IAM roles (which are services in confidant) [23:56:04] let's say I want to have a tool on my command-line "make-new-service" which emits xyz files here, abc application stubs there, and *critically here*, gins up the new secrets. [23:56:18] ah. so you have something that generates secrets [23:56:28] and want to programatically push them into confidant [23:56:33] apg is a good secret-generating tool. ;) [23:56:51] https://github.com/thialfihar/apg ? [23:57:31] APG(1) - http://www.adel.nursat.kz/apg/ (which is returned in the wrong mime-type) [23:57:43] heh [23:58:06] right, so right now this part requires google auth [23:58:22] because you'd need to create or update secrets [23:58:33] and that api end-point requires google auth [23:58:51] the auth code isn't terribly modular at this point [23:59:16] (Example apg run, fyi: # apg -n 1 -m 30 -a 1 gives out ... |V),AjKB&p2vyx1\/\8tRYt@!l&gNn ) [23:59:42] OK. So direct scriptability is kind of "ehhh"