Perl 6 - the future is here, just unevenly distributed

IRC log for #confidant, 2017-06-05

| Channels | #confidant index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
06:50 abrody joined #confidant
15:14 lyftbot left #confidant
15:14 lyftbot joined #confidant
19:56 patrickod has there been any consideration for adding finer-scoped permissions to Confidant to more granular controls than at the service level?
19:56 patrickod i.e. if service A is generally configured with "web" and "worker" clusters, to facilitate scoping of secrets to one of these named clusters within the service.
21:28 Ryan_Lane patrickod: yes
21:28 Ryan_Lane oh
21:28 Ryan_Lane I see what you mean
21:28 Ryan_Lane I thought you meant user acls
21:28 patrickod ah yes :) I've heard that those might be coming.
21:29 Ryan_Lane not sure when that'll come :)
21:29 patrickod it's possible that the sub-service authentication might be overkill to be honest.
21:29 Ryan_Lane but... for your other question
21:29 patrickod and is a smell that indicates that we should split the service functionality even outside of the secret provisioning problem.
21:29 Ryan_Lane confidant "services" are essentially tied to IAM roles
21:34 patrickod *nod*
21:35 patrickod while you're here Ryan_Lane what's the quickest way to get the confidant-client package working with a development environment? the client complains about not using any auth key, but from what I can see the documentation provided service.env doesn't use one?
21:37 Ryan_Lane oh. hm.
21:37 Ryan_Lane good question
21:37 Ryan_Lane I think there's a no-auth option
21:37 Ryan_Lane there definitely is with the server
21:37 Ryan_Lane (we use a real KMS key, even in dev)
21:38 Ryan_Lane heh. doh. I guess I didn't add a no-auth option to the client
21:38 Ryan_Lane let me open an issue for that. should be easy
21:39 patrickod thank you kindly!
21:39 patrickod not a huge deal, I can provision the requisite AWS things later today, am just poking through the documentation and dev environments of tools to compare them.
21:41 Ryan_Lane ah. gotcha
21:42 Ryan_Lane https://github.com/lyft/python-confidant-client/issues/11
21:42 Ryan_Lane hm. need to get the bot for this client linked into this channel :)
21:43 Ryan_Lane @doy I'm just now seeing you still have three PRs in this repo
21:43 Ryan_Lane am I not watching this? :D
21:53 Ryan_Lane @doy merged two of your changes in. one is still waiting on tests to be fixed

| Channels | #confidant index | Today | | Search | Google Search | Plain-Text | summary