| openstackgerrit | Tristan Cacqueray proposed openstack-infra/zuul-jobs master: fetch-javascript-content-tarball: add create_tarball variable https://review.openstack.org/606740 | 00:25 |
|---|---|---|
| tristanC | Shrews: I don't know much about minikube, I'm using oc cluster up... without the nested kvm driver, running k8s service in a vm may be too slow for integration testing | 00:44 |
| tristanC | Shrews: there was discussion from dublin to run regional k8s, how are those going to be deployed? maybe we should use the same tools for testing, for example kubespray? | 00:47 |
| openstackgerrit | Joshua Hesketh proposed openstack-infra/zuul master: WIP: Add API endpoint to get frozen jobs https://review.openstack.org/607077 | 00:54 |
| openstackgerrit | Joshua Hesketh proposed openstack-infra/zuul master: WIP: Get executor job params https://review.openstack.org/607078 | 00:54 |
| openstackgerrit | Joshua Hesketh proposed openstack-infra/zuul master: WIP: Separate out executor server from runner https://review.openstack.org/607079 | 00:54 |
| openstackgerrit | Joshua Hesketh proposed openstack-infra/zuul master: WIP: Move common AnsibleJob prep tasks into a base class https://review.openstack.org/607080 | 00:54 |
| openstackgerrit | Joshua Hesketh proposed openstack-infra/zuul master: WIP: Move prep tasks out of execute into a common method https://review.openstack.org/607081 | 00:54 |
| openstackgerrit | Joshua Hesketh proposed openstack-infra/zuul master: WIP: Implement a local zuul-runner https://review.openstack.org/607082 | 00:54 |
| *** threestrands has quit IRC | 01:33 | |
| *** pcaruana has joined #zuul | 04:36 | |
| *** pcaruana has quit IRC | 04:43 | |
| *** dkehn has quit IRC | 05:11 | |
| *** dkehn has joined #zuul | 05:41 | |
| openstackgerrit | Andreas Jaeger proposed openstack-infra/zuul-jobs master: Add zuul to the linters tox env https://review.openstack.org/607026 | 06:16 |
| openstackgerrit | Andreas Jaeger proposed openstack-infra/zuul-jobs master: Extract pep8 messages for inline comments https://review.openstack.org/589634 | 06:32 |
| *** nilashishc has joined #zuul | 06:39 | |
| openstackgerrit | Simon Westphahl proposed openstack-infra/zuul master: Add role path to JSON result in callback plugin https://review.openstack.org/607105 | 06:39 |
| *** pcaruana has joined #zuul | 07:01 | |
| *** jpena|off is now known as jpena | 07:50 | |
| openstackgerrit | Simon Westphahl proposed openstack-infra/zuul master: Add role path to JSON result in callback plugin https://review.openstack.org/607105 | 08:16 |
| *** sshnaidm|off is now known as sshnaidm | 08:30 | |
| *** electrofelix has joined #zuul | 09:45 | |
| *** nilashishc has quit IRC | 11:04 | |
| *** jpena is now known as jpena|lunch | 11:47 | |
| *** ssbarnea|bkp has joined #zuul | 12:04 | |
| *** nilashishc has joined #zuul | 12:07 | |
| *** nilashishc has quit IRC | 12:08 | |
| *** nilashishc has joined #zuul | 12:08 | |
| *** ssbarnea|bkp has quit IRC | 12:26 | |
| *** ssbarnea|bkp2 has joined #zuul | 12:27 | |
| *** jpena|lunch is now known as jpena | 12:42 | |
| *** yolanda has quit IRC | 12:45 | |
| *** pcaruana has quit IRC | 12:57 | |
| *** samccann has joined #zuul | 13:02 | |
| *** pcaruana has joined #zuul | 13:27 | |
| Shrews | tristanC: i wasn't in dublin so i nothing about a regional k8s | 13:44 |
| Shrews | but we probably don't want to wait for such a thing to exist before adding the nodepool k8s driver | 13:45 |
| Shrews | tristanC: but i'm open to ideas on how to proceed with functional testing of the driver. i'm hitting the edge of my k8s knowledge here | 13:46 |
| Shrews | ooh, i think i got minikube to work (or at least start correctly) | 14:11 |
| clarkb | shrews might help to push up ehat you have so we can see the job logs? | 14:12 |
| pabelanger | Shrews: yay | 14:12 |
| *** nilashishc has quit IRC | 14:25 | |
| *** nilashishc has joined #zuul | 14:25 | |
| *** nilashishc has quit IRC | 14:26 | |
| openstackgerrit | David Shrewsbury proposed openstack-infra/zuul-jobs master: WIP: Add role to install kubernetes https://review.openstack.org/605823 | 14:26 |
| Shrews | ^^ working for me locally | 14:27 |
| Shrews | i think minikube has issues sometimes when restarting the service using vm-driver=none. but seems to work on a fresh instance each time | 14:30 |
| clarkb | sounds like devstack | 14:30 |
| mhu | Hello, would it be possible to get some feedback on the Zuul tenant-scoped admin web API + JWT spec? This is a feature we need in SF and that I see requested here every now and then; and I'd like some community approval before pursuing with the PoC and integration down the road | 14:39 |
| mhu | the spec: https://review.openstack.org/#/c/562321/ | 14:40 |
| *** toabctl has joined #zuul | 15:03 | |
| pabelanger | just turned on branch protection on a sandbox repo to better test | 15:20 |
| pabelanger | so far, just using status checks first but really would like restrict who can push to branches | 15:21 |
| pabelanger | but sadly, doesn't seem a github app is supported | 15:21 |
| *** nilashishc has joined #zuul | 15:50 | |
| SpamapS | pabelanger: github apps request perms when they're installed | 16:18 |
| SpamapS | damnit, I have slides, but this donut is too old now | 16:19 |
| pabelanger | SpamapS: oh, a github app needs to request the branch protection stuff? | 16:19 |
| *** toabctl has quit IRC | 16:19 | |
| *** nilashishc has quit IRC | 16:21 | |
| SpamapS | I probably misunderstood you | 16:21 |
| SpamapS | I thought you were saying you wanted to restrict who can push | 16:21 |
| SpamapS | you can always restrict who can push | 16:22 |
| SpamapS | I think I understand what you meant now | 16:23 |
| pabelanger | SpamapS: yah, I am not explaining properly. With a branch protection, I'd like to only have zuul to be the user to merge, then remove other users. | 16:23 |
| SpamapS | pabelanger: I *think* you can put an app in a team | 16:23 |
| pabelanger | but, maybe my github app for zuul, need to ask for org permissions also to show up as a user | 16:24 |
| SpamapS | and you can definitely say "only this team can merge" | 16:24 |
| pabelanger | yah | 16:24 |
| *** rfolco has quit IRC | 16:26 | |
| tobiash | pabelanger: when enabling push restriction it is not possible to grant this right to an app | 16:30 |
| tobiash | There is an upstream ticket somewhere | 16:31 |
| pabelanger | tobiash: oh :( | 16:32 |
| pabelanger | and I guess a user (not app) doesn't have the same permissions to do things like status, etc | 16:33 |
| tobiash | pabelanger: if you want to use zuul as user instead of app (I wouldn't recommend it) the user needs anmin rights on the repo | 16:36 |
| tobiash | pabelanger: https://platform.github.community/t/repositories-which-have-protected-branches-with-push-restrictions-have-no-ability-to-grant-push-rights-to-integrations/1376/49 | 16:39 |
| tobiash | That's the upstream ticket | 16:39 |
| tobiash | So there seems to be *some* work on that topic but appearently not with a high prio | 16:40 |
| pabelanger | tobiash: why not recommend the user with admin rights | 16:52 |
| pabelanger | that's is more how gerrit works, zuul is only admin | 16:52 |
| openstackgerrit | Sorin Sbarnea proposed openstack-infra/zuul master: Assure that status tooltip is displayed on entire row https://review.openstack.org/603504 | 16:52 |
| pabelanger | (until we need to unwedge something) | 16:52 |
| tobiash | pabelanger: it's not only the user, but also the webhook config is part of the app | 16:53 |
| tobiash | Without the app you need to configure the webhooks on every org | 16:54 |
| tobiash | Which also contains the shared webhook secret in zuul.conf | 16:55 |
| tobiash | That is error prone and unsafe if you have sevrral orgs with multiple teams | 16:56 |
| tobiash | So in a small installation for yourself this might be ok but as a zuul operator for many teams this is a no-go | 16:57 |
| openstackgerrit | David Shrewsbury proposed openstack-infra/nodepool master: WIP: Test using install-kubernetes role https://review.openstack.org/605803 | 17:04 |
| openstackgerrit | David Shrewsbury proposed openstack-infra/zuul-jobs master: WIP: Add role to install kubernetes https://review.openstack.org/605823 | 17:06 |
| *** rf0lc0 has joined #zuul | 17:11 | |
| *** jpena is now known as jpena|off | 17:14 | |
| *** electrofelix has quit IRC | 17:45 | |
| pabelanger | tobiash: thanks for the feedback | 17:50 |
| pabelanger | tobiash: to bad we cannot mix app and user | 17:50 |
| tobiash | pabelanger: are you on github.com or ghe? | 17:51 |
| *** openstackgerrit has quit IRC | 17:51 | |
| pabelanger | tobiash: github.com | 17:51 |
| pabelanger | https://github.com/ansible-network | 17:51 |
| tobiash | pabelanger: then you'll be the first who can use this feature once this will be introduced | 17:52 |
| tobiash | I still hope that will happen some time in hopefully not too distant f uture | 17:52 |
| pabelanger | tobiash: how often do you get GHE releases / updates? | 17:53 |
| tobiash | minor (bugfix) versions are released every two weeks and I think major (feature) releases are four per year | 17:55 |
| tobiash | but ghe is a bit behind when introducing new features | 17:55 |
| pabelanger | ack | 17:56 |
| pabelanger | tobiash: you are also using upload-logs-swift role? | 18:01 |
| tobiash | yes | 18:01 |
| pabelanger | tobiash: did you choose single or partitioned containers for the logs? | 18:01 |
| tobiash | I've chosen partitioned | 18:02 |
| tobiash | well, not really | 18:02 |
| tobiash | single partition per tenant | 18:02 |
| tobiash | that is more precise | 18:02 |
| *** pcaruana has quit IRC | 18:02 | |
| pabelanger | tobiash: Hmm, is your URL in emit-job-header correct? When we did partitions, it wasn't formatted propelry | 18:03 |
| pabelanger | log URL | 18:03 |
| tobiash | pabelanger: I have a reverse proxy in front so I redefine the log url completely after upload in a special task | 18:04 |
| pabelanger | tobiash: ah, I see. Yah, we haven't done a proxy yet. But have thought to help clean up long URLs from swift | 18:05 |
| *** smyers has quit IRC | 18:41 | |
| *** klep has joined #zuul | 18:43 | |
| *** caphrim007_ has joined #zuul | 18:44 | |
| *** smyers has joined #zuul | 18:49 | |
| *** caphrim007_ has quit IRC | 18:52 | |
| *** codrcodz has joined #zuul | 18:56 | |
| codrcodz | Great talk at AnsibleFest guys! | 18:56 |
| dmsimard | ++ | 19:03 |
| *** samccann has quit IRC | 20:44 | |
| *** codrcodz has quit IRC | 21:22 | |
| *** j^2 has joined #zuul | 21:48 | |
| *** jesusaur has quit IRC | 22:06 | |
| *** jesusaur has joined #zuul | 22:11 | |
| *** openstackgerrit has joined #zuul | 22:12 | |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul-jobs master: fetch-javascript-content-tarball: add create_tarball variable https://review.openstack.org/606740 | 22:12 |
| *** j^2 has quit IRC | 22:18 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!