tristanC | SamYaple: so identity is verified with ldap but email are fetched from ghe? | 01:22 |
---|---|---|
tristanC | maybe there could be some helper functions, that given a username would return email or ssh keys | 01:23 |
*** caowei has joined #softwarefactory | 02:04 | |
SamYaple | tristanC: no, we arent doing ldap directly (though we did play with that). For non-technical reasons we are doing identity through GHE. | 02:10 |
SamYaple | GHE backed by ldap, to be specific | 02:10 |
SamYaple | in that configuration GHE isnt able to provide a list of emails over the api | 02:10 |
SamYaple | with a different internal service i can fetch those emails, if the module was more plugable (im running a fork right now) | 02:11 |
tristanC | i see, then maybe a 'email_helper_module_path' type of option would let you have custom code to resolv email | 02:14 |
sfbender | Merged software-factory/sf-config master: replace broken md5 statement with checksum for stat https://softwarefactory-project.io/r/12031 | 02:26 |
*** sfbender has quit IRC | 03:29 | |
*** sfbender has joined #softwarefactory | 05:40 | |
sfbender | Tristan de Cacqueray created logreduce master: Skip empty files https://softwarefactory-project.io/r/12034 | 05:40 |
sfbender | Tristan de Cacqueray created logreduce master: Check for include-path change when reusing a model https://softwarefactory-project.io/r/12035 | 05:40 |
sfbender | Tristan de Cacqueray created logreduce master: Improve files ignore list https://softwarefactory-project.io/r/12036 | 05:40 |
*** jpena|off is now known as jpena | 07:48 | |
mhu | SamYaple, cauth *is* pluggable, you can create any auth plugin you want as long as it inherits from cauth.auth.base.AuthProtocolPlugin and when installing it, you declare it as an entry point under the namespace "cauth.authentication" | 08:06 |
mhu | The problem would be later with sf-config though, as you'd have to manually change cauth's config to add your auth plugin's config, and the template login page | 08:07 |
mhu | also you'd have to install your plugin library manually on the deployment | 08:07 |
mhu | I've been musing for a while about some kind of embedded, pre-defined CD workflow in every deployment of SF to allow developpers to create, maintain and deploy their own plugins for our components that allow them | 08:09 |
mhu | cauth, firehooks, ... | 08:09 |
mhu | that's a bit complex though | 08:10 |
*** dsariel has joined #softwarefactory | 08:20 | |
*** ssbarnea_ has joined #softwarefactory | 08:21 | |
sfbender | Merged software-factory/sf-docs master: zuul github setup doc fix webhook path + acl required https://softwarefactory-project.io/r/11732 | 08:42 |
sfbender | Merged software-factory/sf-docs master: zuul: add branch protection documentation https://softwarefactory-project.io/r/11763 | 08:53 |
sfbender | Tristan de Cacqueray created software-factory/sf-config master: refarch: remove unnecessary ip https://softwarefactory-project.io/r/12037 | 09:33 |
sfbender | Matthieu Huin created software-factory/sf-config master: managesf: load v2 builds, images endpoints only if zuulv2 is present https://softwarefactory-project.io/r/12038 | 09:34 |
sfbender | Merged software-factory/cauth master: Support for HTTPd modules auth, SAML2 https://softwarefactory-project.io/r/11861 | 10:42 |
*** ssbarnea_ has quit IRC | 10:50 | |
*** caowei has quit IRC | 11:13 | |
*** ssbarnea_ has joined #softwarefactory | 11:19 | |
*** jpena is now known as jpena|lunch | 11:50 | |
mhu | color ? in my zuul ansible logs ?? MADNESS https://ibb.co/dMx0yc | 12:50 |
*** jpena|lunch is now known as jpena | 12:54 | |
sfbender | Merged www.softwarefactory-project.io master: Add Sprint 2018-16 to the SF website https://softwarefactory-project.io/r/12010 | 13:37 |
SamYaple | mhu: yea that thing youve been musing about sounds good. but its no priority. i can run a small fork for a bit | 13:42 |
SamYaple | today is our cutover day to using it internal | 13:42 |
sfbender | Merged software-factory/sf-config master: managesf: remove endpoints that depend on zuul 2.5 https://softwarefactory-project.io/r/12038 | 15:23 |
sfbender | Fabien Boucher created software-factory/managesf master: resources: Add a new Tenant object https://softwarefactory-project.io/r/12041 | 16:21 |
sfbender | Merged software-factory/cauth-distgit master: Add mod_mellon dependency https://softwarefactory-project.io/r/11863 | 16:52 |
*** jpena is now known as jpena|off | 17:12 | |
*** dsariel has quit IRC | 17:13 | |
sfbender | Nicolas HICHER created software-factory/sf-config master: Replace get started by documentation in top menu https://softwarefactory-project.io/r/12042 | 18:54 |
sfbender | Merged software-factory/sf-config master: jobs-base.yaml: fix if zuul_upstream_zuul_jobs https://softwarefactory-project.io/r/11984 | 18:58 |
sfbender | Merged software-factory/sf-config master: sf-nodepool: add /var/lib/nodepool/images directory creation https://softwarefactory-project.io/r/11943 | 20:31 |
*** sfbender has quit IRC | 20:36 | |
mhu | MORE COLOR?! https://ibb.co/dFR6oc | 21:11 |
*** sfbender has joined #softwarefactory | 21:34 | |
sfbender | Nicolas HICHER created software-factory/sf-config master: remove deprecation warnings for ansible 2.5 https://softwarefactory-project.io/r/12044 | 21:34 |
nhicher | nice mhu =) | 21:36 |
nhicher | I don't like the blue mhu =) | 21:37 |
nhicher | it is hard to read | 21:37 |
SamYaple | i imported an existing repo incorrectly and i think i broke refs/meta/config | 21:48 |
SamYaple | thats where all the acl stuff is being stored right? | 21:48 |
* SamYaple is very new to gerrit administration | 21:49 | |
nhicher | SamYaple: only a repo is broken or all of them ? | 21:53 |
SamYaple | only one repo i imported, the others were new then replicated | 21:54 |
SamYaple | i should rephrase, this is the *first* i imported. ihave more, but this didnt work so well haha | 21:55 |
SamYaple | cant seem to fix it by hand | 21:55 |
nhicher | there is a script to set the default acl on your sf deployment /usr/share/sf-config/scripts/gerrit-set-default-acl.sh | 21:56 |
nhicher | I just have to check how it works SamYaple | 21:56 |
SamYaple | 4 eyes are better than two! | 21:56 |
SamYaple | (im just kidding, its 6 i have glasses) | 21:57 |
SamYaple | nhicher: i think i can handle this. script is straight forward enough. give me a few to see if that gets it working | 21:58 |
nhicher | ok, tristanC or fbo probably know how to help you if you can't fix it SamYaple. fbo_ proposed a change for the acl with the new version of gerrit for sf today, I have more skills than me for gerrit management =) | 22:03 |
SamYaple | awesome :) | 22:04 |
nhicher | he* have | 22:04 |
SamYaple | git config -f project.config --replace-all access.refs/meta/config.read "group Registered Users" "group Registered Users" | 22:04 |
SamYaple | git config -f project.config --replace-all access.refs/meta/config.read "group Anonymous Users" "group Anonymous Users" | 22:04 |
SamYaple | i believe those were the key | 22:04 |
SamYaple | the rest of the config i handjobbed right | 22:04 |
SamYaple | seems to be working now.thanks nhicher! | 22:04 |
nhicher | great SamYaple =) | 22:05 |
SamYaple | i know thats a git comment... but i have no clue for the like of me what thats doing | 22:09 |
SamYaple | git command* | 22:09 |
nhicher | sometime is hard to understand git SamYaple https://xkcd.com/1597/ =) | 22:18 |
nhicher | I love this xkcd | 22:18 |
SamYaple | so very accurate | 22:38 |
SamYaple | awesome. i can replace the gerrit repo with my existing repo and hack meta/config enough to allow SF to handle update it correctly | 22:42 |
SamYaple | there were very strict "dont change git history" directives | 22:42 |
*** ssbarnea_ has quit IRC | 22:43 | |
*** nijaba has quit IRC | 23:00 | |
*** nijaba has joined #softwarefactory | 23:16 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!