| jeblair | tristanC: cool, i was asking in reference to https://review.openstack.org/529690 -- i want to set up a test for that to make sure we continue to support that | 00:01 |
|---|---|---|
| jeblair | tristanC: i think we'll be able to encode that proxypass rule pretty easily | 00:04 |
| tristanC | jeblair: i wouldn't mind changing that proxypass configuration, as long as zuul-web can be running in a sub-path | 00:04 |
| jeblair | tristanC: yeah, it's possible all 3 (or more?) ways of running will need configuration changes eventually -- but the test will make sure that they will work with *some* configuration | 00:06 |
| *** rlandy|ruck has quit IRC | 00:15 | |
| *** harlowja has quit IRC | 00:23 | |
| openstackgerrit | James E. Blair proposed openstack-infra/zone-zuul-ci.org master: Make zuul-ci.org self-hosting https://review.openstack.org/529723 | 00:33 |
| openstackgerrit | Merged openstack-infra/zone-zuul-ci.org master: Make zuul-ci.org self-hosting https://review.openstack.org/529723 | 00:44 |
| openstackgerrit | Tristan Cacqueray proposed openstack-infra/zuul feature/zuulv3: web: add OpenAPI documentation https://review.openstack.org/529013 | 01:50 |
| *** xinliang has quit IRC | 03:19 | |
| *** threestrands_ has quit IRC | 04:29 | |
| openstackgerrit | Tristan Cacqueray proposed openstack-infra/zuul feature/zuulv3: web: add OpenAPI documentation https://review.openstack.org/529013 | 04:32 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: Add implicit project name matching https://review.openstack.org/529801 | 07:41 |
| tobiash | jeblair, mordred: implicit project name matching ^^ | 07:41 |
| tobiash | the test uncovered a bug in not combining canonical/non-canonical project definitions in the dynamic case | 07:42 |
| tobiash | I will fix that separately and add a depends-on | 07:42 |
| *** hashar has joined #zuul | 08:14 | |
| *** sshnaidm is now known as sshnaidm|off | 08:18 | |
| *** jpena|off is now known as jpena | 08:45 | |
| openstackgerrit | Tristan Cacqueray proposed openstack-infra/zuul feature/zuulv3: web: add OpenAPI documentation https://review.openstack.org/529013 | 09:01 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: Really fix canonical/non-canonical project merge https://review.openstack.org/529810 | 09:05 |
| tobiash | jeblair, mordred: here it is ^^ | 09:05 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: Really fix canonical/non-canonical project merge https://review.openstack.org/529810 | 09:08 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: Add implicit project name matching https://review.openstack.org/529801 | 09:09 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: Really fix canonical/non-canonical project merge https://review.openstack.org/529810 | 09:10 |
| *** flepied__ has quit IRC | 09:15 | |
| *** flepied__ has joined #zuul | 09:47 | |
| *** Wei_Liu has quit IRC | 10:46 | |
| rcarrillocruz | tobiash: heya | 10:46 |
| rcarrillocruz | CET, so the same as yours i assume | 10:47 |
| rcarrillocruz | i heard you use zuul in openshift. I'm curious how you solved the issue of openshift giving random uids , i.e. ignoring USER on image. Have you changed the policy openshift side or you have nss_wrapper set in your images and you create /etc/passwd entries for the uid used on the entrypoint | 10:47 |
| rcarrillocruz | i was about to go the latter route, but wanted to see how you tackled that | 10:48 |
| tobiash | rcarrillocruz: yes, I'm CET too | 11:17 |
| tobiash | rcarrillocruz: I'm running it with the anyuid scc | 11:17 |
| tobiash | the executor needs privileged anyway | 11:17 |
| tobiash | because of bwrap | 11:18 |
| rcarrillocruz | so you do something like oc adm policy add-scc-to-user anyuid -z zuul | 11:18 |
| rcarrillocruz | right, was thinking of running it with nullwrap | 11:19 |
| tobiash | rcarrillocruz: yes, exactly | 11:19 |
| tobiash | running with nullwrap is possible without root | 11:20 |
| tobiash | but I'm building up a ci for projects I even have no permission to read so nullwrap is no option for me | 11:20 |
| rcarrillocruz | thing is , not sure if i'll host this in public cloud openshift, so unclear if i'd be able to do oc adm policy | 11:21 |
| rcarrillocruz | i'm not very familiar with perms on openshift online | 11:21 |
| rcarrillocruz | i need to check docs on what i can and what i cannot do if given an account there | 11:21 |
| rcarrillocruz | good stuff, thx | 11:21 |
| tobiash | rcarrillocruz: on public cloud openshift you probably have no other option | 11:21 |
| tobiash | (other than nullwrap) | 11:22 |
| tobiash | rcarrillocruz: what do you do with the nodepool-builder then? | 11:22 |
| rcarrillocruz | i don't use builder | 11:22 |
| rcarrillocruz | i use cloud images | 11:22 |
| tobiash | diskimage builder needs root and privileges | 11:22 |
| tobiash | ah, ok | 11:22 |
| tobiash | rcarrillocruz: is the random uid a problem then? | 11:23 |
| rcarrillocruz | with your change of bubbling up the nodepool user to zuul, then i have no need for DIB | 11:23 |
| rcarrillocruz | i.e. i can say 'use 'ubuntu' to login to thse instances' | 11:23 |
| tobiash | ah :) | 11:23 |
| rcarrillocruz | at some point i would like to check DIB | 11:23 |
| rcarrillocruz | but too much work still, i wanna get this on openshift first | 11:23 |
| tobiash | dib only works with sudo currently | 11:24 |
| rcarrillocruz | and leave the 'how the heck build and IOSv image or the likes with DIB' for later | 11:24 |
| rcarrillocruz | it's such a big rabbithole i don't want to get into that yet | 11:24 |
| tobiash | but it might be possible to change that with some effort | 11:24 |
| tobiash | the yocto project is building images too (framwork for building custom linux distros) | 11:24 |
| tobiash | and this works with a tool called fakeroot | 11:25 |
| tobiash | but I won't have time to try that out in dib soon | 11:25 |
| tobiash | for windows we wrote a script which looks like dib for nodepool and does ansible based instance creation, installation and image download | 11:27 |
| *** xinliang has joined #zuul | 11:33 | |
| *** xinliang has quit IRC | 11:33 | |
| *** xinliang has joined #zuul | 11:33 | |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: Add winrm certificate handling https://review.openstack.org/529821 | 11:40 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: Add winrm certificate handling https://review.openstack.org/529821 | 12:11 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: Really fix canonical/non-canonical project merge https://review.openstack.org/529810 | 12:12 |
| *** Wei_Liu has joined #zuul | 12:19 | |
| rcarrillocruz | tobiash: Is that windows script public anywhere? | 12:42 |
| tobiash | rcarrillocruz: not yet | 12:42 |
| tobiash | I have to clarify if I can upstream it | 12:42 |
| tobiash | (and if it's working already as I'm not the onewho created it) | 12:45 |
| tobiash | rcarrillocruz: I'll try to clarify if I can open source this | 12:50 |
| tobiash | it became a real framework already | 12:50 |
| tobiash | but the author of this is already in vacation so I can clarify this probably in the second week of january | 12:51 |
| *** jpena is now known as jpena|lunch | 12:53 | |
| rcarrillocruz | Cool | 12:55 |
| *** Wei_Liu1 has joined #zuul | 13:18 | |
| *** Wei_Liu has quit IRC | 13:20 | |
| *** Wei_Liu1 is now known as Wei_Liu | 13:20 | |
| *** jpena|lunch is now known as jpena | 13:46 | |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: WIP: Status branch protection checking for github https://review.openstack.org/471175 | 14:02 |
| tobiash | SpamapS, jlk: that *should* work already although the tests are still failing | 14:17 |
| tobiash | tested the canMerge method against our github with various pull requests and branch protection settings ^^ | 14:18 |
| *** Wei_Liu has quit IRC | 14:24 | |
| *** flepied__ has quit IRC | 15:08 | |
| tobiash | hm, not working, allow_needs is not yet populated correctly... | 15:22 |
| jeblair | tobiash: project changes lgtm thanks! once we merge that, we can start the long process of cleaning up the openstack config next year :) | 15:36 |
| tobiash | :) | 15:37 |
| tobiash | that was my friday before christmas morning task ;) | 15:37 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM: test debug flag https://review.openstack.org/529846 | 15:39 |
| *** flepied__ has joined #zuul | 16:06 | |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: WIP: Status branch protection checking for github https://review.openstack.org/471175 | 16:15 |
| tobiash | SpamapS, jlk: now working in my deployment :) ^^^ | 16:16 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Fix indentation on debug statement https://review.openstack.org/529864 | 17:13 |
| rcarrillocruz | tobiash: i made the executor ansible work with nss_wrapper | 17:14 |
| rcarrillocruz | will push in a bit to my repo | 17:14 |
| rcarrillocruz | it's pretty much just following the stuff from the openshift docs https://docs.openshift.com/enterprise/3.1/creating_images/guidelines.html | 17:14 |
| rcarrillocruz | tweaked it a bit for ansible-container and that it | 17:15 |
| tobiash | rcarrillocruz: cool, so you're using nss wrapper and the nullwrap driver? | 17:25 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Fix indentation on debug statement https://review.openstack.org/529864 | 17:34 |
| *** hashar is now known as hasharAway | 17:53 | |
| *** jpena is now known as jpena|off | 18:28 | |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: WIP: Status branch protection checking for github https://review.openstack.org/471175 | 18:46 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: Enable direct use of github driver in debug tool https://review.openstack.org/529606 | 18:58 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: WIP: Status branch protection checking for github https://review.openstack.org/471175 | 18:58 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: WIP: Status branch protection checking for github https://review.openstack.org/471175 | 18:59 |
| *** harlowja has joined #zuul | 19:01 | |
| *** harlowja has quit IRC | 19:04 | |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: Enable direct use of github driver in debug tool https://review.openstack.org/529606 | 19:04 |
| openstackgerrit | Tobias Henkel proposed openstack-infra/zuul feature/zuulv3: WIP: Status branch protection checking for github https://review.openstack.org/471175 | 19:04 |
| *** tushar has quit IRC | 19:56 | |
| *** hasharAway has quit IRC | 20:49 | |
| *** hashar has joined #zuul | 20:55 | |
| *** jeblair is now known as corvus | 23:15 | |
| *** hashar has quit IRC | 23:25 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!