*** igordc has quit IRC | 00:24 | |
*** igordc has joined #zuul | 00:25 | |
*** rfolco has joined #zuul | 00:31 | |
*** igordc has quit IRC | 00:32 | |
*** tosky has quit IRC | 00:59 | |
*** sgw has joined #zuul | 01:01 | |
*** rfolco has quit IRC | 01:06 | |
*** webknjaz has quit IRC | 01:11 | |
*** gundalow has quit IRC | 01:11 | |
*** mnasiadka has quit IRC | 01:11 | |
*** webknjaz has joined #zuul | 01:11 | |
*** tributarian has quit IRC | 01:11 | |
*** guilhermesp has quit IRC | 01:11 | |
*** kmalloc has quit IRC | 01:12 | |
*** wxy-xiyuan has quit IRC | 01:12 | |
*** iamweswilson has quit IRC | 01:12 | |
*** mnasiadka has joined #zuul | 01:12 | |
*** ofosos has quit IRC | 01:12 | |
*** wxy-xiyuan has joined #zuul | 01:13 | |
*** iamweswilson has joined #zuul | 01:13 | |
*** tributarian has joined #zuul | 01:13 | |
*** kmalloc has joined #zuul | 01:13 | |
*** guilhermesp has joined #zuul | 01:13 | |
*** gundalow has joined #zuul | 01:13 | |
SpamapS | greetings zuulians. I am working on securing my zuul-web from any access (not just privileged) using JWT's. It seems, however, that only the privileged things currently check the JWT. Has anyone worked on perhaps having a default auth setting, so that somebody can basically require all Zuul API access to be authenticated? | 01:28 |
---|---|---|
*** rlandy|rover|bia is now known as rlandy|rover | 01:56 | |
*** rlandy|rover has quit IRC | 01:59 | |
*** openstackstatus has joined #zuul | 02:04 | |
*** ChanServ sets mode: +v openstackstatus | 02:04 | |
openstackgerrit | Ian Wienand proposed zuul/nodepool master: [wip] move openstack testing to use containerised daemon https://review.opendev.org/693464 | 02:52 |
*** igordc has joined #zuul | 02:53 | |
*** bhavikdbavishi has joined #zuul | 02:59 | |
*** bhavikdbavishi1 has joined #zuul | 03:24 | |
*** bhavikdbavishi has quit IRC | 03:25 | |
*** bhavikdbavishi1 is now known as bhavikdbavishi | 03:26 | |
*** raukadah is now known as chandankumar | 04:21 | |
openstackgerrit | Ian Wienand proposed zuul/nodepool master: Dockerfile: create APP_DIR https://review.opendev.org/693646 | 05:12 |
openstackgerrit | Ian Wienand proposed zuul/nodepool master: docker: Base nodepool images on diskimage-builder base image https://review.opendev.org/694177 | 05:12 |
openstackgerrit | Ian Wienand proposed zuul/nodepool master: [wip] move openstack testing to use containerised daemon https://review.opendev.org/693464 | 05:12 |
ianw | so it's a bit annoying that it seems holding a node doesn't also hold the parent dependencies | 05:14 |
ianw | this means the intermediate registry disappears | 05:14 |
*** swest has joined #zuul | 06:09 | |
*** gouthamr_ has joined #zuul | 06:35 | |
*** jpena|off has quit IRC | 06:37 | |
*** homeski has quit IRC | 06:39 | |
*** shanemcd has quit IRC | 06:39 | |
*** mgoddard has quit IRC | 06:39 | |
*** gouthamr has quit IRC | 06:39 | |
*** decimuscorvinus has quit IRC | 06:39 | |
*** fdegir has quit IRC | 06:39 | |
*** sileht has quit IRC | 06:39 | |
*** evrardjp has quit IRC | 06:39 | |
*** tobias-urdin has quit IRC | 06:39 | |
*** openstackstatus has quit IRC | 06:40 | |
*** tobias-urdin has joined #zuul | 06:42 | |
*** jpena|off has joined #zuul | 06:48 | |
*** shanemcd has joined #zuul | 06:48 | |
*** mgoddard has joined #zuul | 06:48 | |
*** decimuscorvinus has joined #zuul | 06:48 | |
*** fdegir has joined #zuul | 06:48 | |
*** sileht has joined #zuul | 06:48 | |
*** evrardjp has joined #zuul | 06:48 | |
*** jpena|off has quit IRC | 07:15 | |
*** shanemcd has quit IRC | 07:15 | |
*** mgoddard has quit IRC | 07:15 | |
*** decimuscorvinus has quit IRC | 07:15 | |
*** fdegir has quit IRC | 07:15 | |
*** sileht has quit IRC | 07:15 | |
*** evrardjp has quit IRC | 07:15 | |
*** jpena|off has joined #zuul | 07:16 | |
*** shanemcd has joined #zuul | 07:16 | |
*** mgoddard has joined #zuul | 07:16 | |
*** decimuscorvinus has joined #zuul | 07:16 | |
*** fdegir has joined #zuul | 07:16 | |
*** sileht has joined #zuul | 07:16 | |
*** evrardjp has joined #zuul | 07:16 | |
coldtom | hi, i'm interested in helping to write a gitlab driver for zuul, anything that needs doing? | 08:10 |
AJaeger | coldtom: there's already some working going on, see https://review.opendev.org/694346 . best talk with Fabien (not sure what's his nic is) | 08:13 |
fbo | coldtom: hi I'm tracking the tasks for the Gitlab driver here https://storyboard.openstack.org/#!/story/2006632 | 08:25 |
fbo | and the current open reviews are https://review.opendev.org/#/q/topic:gitlab+(status:open+OR+status:merged)+project:zuul/zuul | 08:25 |
fbo | any help is obviously welcome :) | 08:26 |
coldtom | thanks! i'll get up to speed on the current work first :) | 08:27 |
fbo | code review, live testing, implementing pending tasks, advices (I'm not a gitlab user, so I might miss some important key points regarding the intergration with Zuul) | 08:28 |
fbo | coldtom: great do not hesitate to ping me if needed | 08:29 |
*** saneax has joined #zuul | 08:32 | |
*** themroc has joined #zuul | 08:34 | |
*** tosky has joined #zuul | 08:39 | |
*** jpena|off is now known as jpena | 08:47 | |
*** jangutter has joined #zuul | 08:56 | |
*** saneax has quit IRC | 10:07 | |
*** bhavikdbavishi has quit IRC | 11:12 | |
*** jpena is now known as jpena|lunch | 12:00 | |
*** bhavikdbavishi has joined #zuul | 12:30 | |
*** jangutter has quit IRC | 12:33 | |
*** rfolco has joined #zuul | 12:59 | |
*** rlandy has joined #zuul | 13:03 | |
*** bhavikdbavishi1 has joined #zuul | 13:04 | |
*** rlandy is now known as rlandy|ruck | 13:04 | |
*** bhavikdbavishi has quit IRC | 13:06 | |
*** bhavikdbavishi1 is now known as bhavikdbavishi | 13:06 | |
*** rfolco is now known as rfolco_pto | 13:08 | |
*** bhavikdbavishi has quit IRC | 13:14 | |
*** jangutter has joined #zuul | 13:20 | |
*** rfolco_pto has quit IRC | 13:33 | |
*** jpena|lunch is now known as jpena | 14:01 | |
openstackgerrit | Simon Westphahl proposed zuul/zuul master: Fix issue search in FakeGithubClient https://review.opendev.org/694553 | 14:24 |
tobiash | pabelanger: this is related to your search issues thing ^ | 14:28 |
pabelanger | ++ | 14:30 |
*** chandankumar is now known as raukadah | 14:39 | |
*** jangutter has quit IRC | 15:00 | |
*** avass has joined #zuul | 15:05 | |
*** rlandy|ruck has quit IRC | 15:15 | |
*** saneax has joined #zuul | 15:17 | |
avass | regarding this: https://review.opendev.org/#/c/691114/6/roles/install-go/tasks/main.yaml@3 would it be a good idea to download the archive to {{ zuul.executor.work_dir }} and then unarchiving it instead? | 15:19 |
pabelanger | avass: you can use tmpfile to create tmp safe file | 15:40 |
pabelanger | tempfile* | 15:41 |
avass | ah yeah that makes sense | 15:44 |
avass | pabelanger: I'm adding a check to see if it's already installed aswell. Do we want to override any pre-existing versions or add a variable that needs to be set to force the version? | 16:04 |
pabelanger | avass: maybe add it, if we run into it? I don't think we do that today in other jobs | 16:05 |
pabelanger | IIRC, tempfile should deal with conflicts however | 16:05 |
*** armstrongs has joined #zuul | 16:05 | |
openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Adds go jobs and roles. https://review.opendev.org/691114 | 16:09 |
armstrongs | hey guys quick question on nodepool i have /var/lib/nodepool/.aws and have this content in my aws config file. http://paste.openstack.org/show/786190/ this means that nodepool spins up boxes in that fixed account. We have a user that wants to use another aws account to launch nodepool instances, how would we configure nodepool config from zuul to | 16:09 |
armstrongs | control the account it picks to launch instances if we specified multiple accounts in the .aws file? | 16:09 |
openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Adds go jobs and roles. https://review.opendev.org/691114 | 16:11 |
*** jamesmcarthur has joined #zuul | 16:12 | |
pabelanger | armstrongs: with openstack, we have a single clouds.yaml file, which contains all the credentials. For aws, I assume that doesn't work right? | 16:12 |
pabelanger | I guess it would be boto3 that managed that | 16:13 |
pabelanger | but, if you could add multiple credtials into that file, you could create new providers pre aws credentials | 16:13 |
openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Adds go jobs and roles. https://review.opendev.org/691114 | 16:14 |
*** EmilienM is now known as EmilienM|PTO | 16:16 | |
avass | That should be ready for review now :) | 16:16 |
armstrongs | pabelanger: I think i can put multiple creds in the file. I just don't know how to select the entry from zuul. How do you do it with openstack to call the specific cred in the clouds.yaml | 16:17 |
pabelanger | armstrongs: yah, we setup nodepool with the specific cloud config: https://zuul-ci.org/docs/nodepool/configuration.html#attr-providers.[openstack].cloud | 16:18 |
*** jamesmcarthur has quit IRC | 16:19 | |
pabelanger | then you'd create a specific label for the images there | 16:19 |
pabelanger | then, in zuul, set up a new nodeset to just target those nodes | 16:19 |
pabelanger | usually in openstack (and ansible) we don't have specific region for testings to help avoid outages. We'd rather have more places to run generic nodes | 16:19 |
pabelanger | but sometimes, you cannot avoid that | 16:20 |
*** jamesmcarthur has joined #zuul | 16:20 | |
*** jamesmcarthur has quit IRC | 16:21 | |
pabelanger | armstrongs: https://zuul-ci.org/docs/nodepool/configuration.html#attr-providers.[aws].profile-name looks to be the aws setting | 16:21 |
armstrongs | so does the provider name map to the cloud name in the clouds.yaml | 16:21 |
armstrongs | ah perfect | 16:22 |
pabelanger | no, that can be what ever you want. In openstack, it is cloud value that must match | 16:22 |
armstrongs | thank you | 16:22 |
pabelanger | ++ | 16:22 |
armstrongs | profile looks like it may work | 16:22 |
pabelanger | let me know how it goes, we in ansible are going to do more aws stuff | 16:22 |
armstrongs | i wish i was using openstack :( | 16:22 |
armstrongs | miss the boot times | 16:22 |
*** michael-beaver has joined #zuul | 16:22 | |
pabelanger | yah, I am not looking forward to using AWS. But need to demo it | 16:23 |
avass | must be nice to live in cloud world ;) | 16:24 |
pabelanger | it's been a struggle at times, to get where we are for network appliance testing. But I am happy how well it is working | 16:26 |
*** hashar has joined #zuul | 16:28 | |
*** saneax has quit IRC | 16:29 | |
*** jamesmcarthur has joined #zuul | 16:36 | |
*** jamesmcarthur has quit IRC | 17:07 | |
*** hashar has quit IRC | 17:22 | |
*** hashar has joined #zuul | 17:22 | |
*** hashar has quit IRC | 17:39 | |
*** jpena is now known as jpena|off | 17:58 | |
*** armstrongs has quit IRC | 18:37 | |
openstackgerrit | David Shrewsbury proposed zuul/zuul master: WIP: test https://review.opendev.org/694619 | 18:55 |
openstackgerrit | David Shrewsbury proposed zuul/zuul master: WIP: test https://review.opendev.org/694619 | 18:55 |
*** pcaruana has quit IRC | 18:56 | |
*** tosky has quit IRC | 19:14 | |
*** themroc has quit IRC | 19:23 | |
tristanC | Shrews: thanks, so if the executor copies the inventory to the test node, then that fix makes sense to me | 19:28 |
Shrews | it was the easiest way to fix it. not sure if it's the best way | 19:28 |
Shrews | trying to decipher the 2.8 post failure now | 19:28 |
*** ssbarnea has joined #zuul | 19:30 | |
Shrews | hrm, ara is failing | 19:31 |
tristanC | Shrews: could you share the log of the failure? | 19:38 |
Shrews | tristanC: http://paste.openstack.org/show/786214/ that's all there is. i don't know how to debug that | 19:38 |
Shrews | may have to enlist dmsimard | 19:39 |
dmsimard | ohai | 19:40 |
dmsimard | the irony is that there might've been more data in the ara report :D | 19:40 |
Shrews | ohai dmsimard. i thought i'd have to say your name 3 times before you would appear :) | 19:41 |
Shrews | beetlejuice-like | 19:41 |
dmsimard | once is usually good :p | 19:45 |
dmsimard | even the json doesn't have any more output than that -- if there's a failure there's usually /at least/ a trace that gives us a lead on what the issue might have been | 19:46 |
tristanC | Shrews: perhaps from the executor log there is more info? | 19:46 |
openstackgerrit | David Moreau Simard proposed zuul/zuul master: DNM: Get output from ara command https://review.opendev.org/694622 | 19:48 |
dmsimard | Shrews: ^ let's see if this gives us a hint | 19:48 |
Shrews | nope, nothing more in the executor log | 19:50 |
Shrews | dmsimard: *fingers crossed* | 19:51 |
dmsimard | if it reproduces we can recover the sqlite database to see what's up | 19:53 |
Shrews | i would've thought that info would show up in stderr or stdout ansible output | 19:53 |
dmsimard | it should, yeah | 19:54 |
Shrews | dmsimard: i also set a hold request for that job on your change | 19:56 |
Shrews | in case we need to poke at it with a sharp, pointy stick | 19:57 |
dmsimard | sure | 19:57 |
Shrews | oh, except now it won't fail. lol | 19:58 |
dmsimard | really long overdue to upgrade zuul's ara to 1.x | 19:58 |
dmsimard | I added an ignore_errors though | 19:58 |
Shrews | yeah, i'm going to just recheck my change | 19:59 |
*** lennyb has quit IRC | 20:00 | |
dmsimard | actually it just failed again and there's really no output | 20:01 |
dmsimard | however, we can tell from the rsync just after that it does render /some/ files so it crashes somewhere in the middle | 20:02 |
Shrews | oh, that's interesting | 20:03 |
* Shrews checks held nodes | 20:04 | |
dmsimard | already looking :p | 20:04 |
dmsimard | it does exit 1 without any output | 20:07 |
dmsimard | interesting | 20:07 |
Shrews | dmsimard: is there not an option for more output? running that command just silently exits | 20:07 |
Shrews | yeah | 20:07 |
dmsimard | adding --debug picks up a trace | 20:08 |
dmsimard | it's failing to render the result for "Print binary data" | 20:08 |
* Shrews lets the expert dig | 20:08 | |
dmsimard | http://paste.openstack.org/show/786215/ | 20:08 |
Shrews | command: echo -e '\x80abc' | 20:09 |
dmsimard | so this task: https://opendev.org/zuul/zuul/src/branch/master/playbooks/zuul-stream/fixtures/test-stream.yaml#L54 | 20:09 |
Shrews | is the command | 20:09 |
dmsimard | another thing to add to the integration tests :/ | 20:10 |
Shrews | \o/ | 20:11 |
Shrews | dmsimard: do we still need the held node? | 20:12 |
Shrews | or do you want to verify locally first? | 20:12 |
dmsimard | let me pick up the database so I can reproduce locally | 20:12 |
Shrews | sure | 20:13 |
dmsimard | ok all good | 20:14 |
openstackgerrit | David Moreau Simard proposed zuul/zuul master: DNM: Test zuul-stream-functional with ara 1.2 https://review.opendev.org/694622 | 20:18 |
Shrews | k, thx | 20:21 |
dmsimard | so the real error is "UnicodeEncodeError: 'utf-8' codec can't encode character '\udc80' in position 2453: surrogates not allowed" | 20:22 |
dmsimard | encoding and decoding makes me sad | 20:22 |
Shrews | if that works, we'll probably need to combine our fixes into a single review | 20:24 |
dmsimard | upgrading ara to 1.2 might require a bit more work than that but I'm curious to see if 1.2 chokes on that binary output as well | 20:25 |
dmsimard | also kind of weird that it only triggers against 2.8 and not before | 20:25 |
fungi | i wonder if that's a regression of the fix for https://bugs.python.org/issue10114 years ago | 20:26 |
fungi | where is that exception getting raised? | 20:26 |
dmsimard | fungi: it's by ara when trying to render the web result page for a task that runs: echo -e '\x80abc' | 20:27 |
fungi | and the raw bytearray output is being fed to .encode() i guess? | 20:29 |
dmsimard | I'm not sure yet :) | 20:30 |
fungi | ahh, okay, sorry i assumed you had a traceback | 20:30 |
dmsimard | fungi: I do but the ara webapp is nowhere in the traceback http://paste.openstack.org/raw/786216/ | 20:32 |
dmsimard | hunting where it's from | 20:32 |
Shrews | this does make me wonder if we should reconsider when we run the zuul-stream-functional tests. we currently run them when only select files are touched. we apparently haven't run them for a long while, allowing issues to creep in. | 20:32 |
dmsimard | Shrews: ah, the test nodes are running py35 and 1.2 is >=py36 so it ended up failing | 20:33 |
fungi | it's worth noting that we shouldn't assume all raw shell command output is able to get represented in utf-8 | 20:33 |
fungi | from the traceback it looks like it's flask handling that data | 20:34 |
Shrews | dmsimard: ah, maybe that was the reason for the version limit | 20:34 |
dmsimard | fungi: yeah there are tests for non-ascii characters but not binary | 20:35 |
dmsimard | so it's a good test to have | 20:35 |
*** yolanda has quit IRC | 20:35 | |
dmsimard | flask renders the result just fine .. it's werkzeug that seems sad about it | 20:39 |
*** yolanda has joined #zuul | 20:43 | |
fungi | yeah, but that traceback shows flask is calling werkzeug | 20:54 |
dmsimard | believe I've found a fix | 21:04 |
dmsimard | Shrews: that binary string task makes ansible-lint sad too. | 21:20 |
dmsimard | ah nevermind, unrelated error | 21:21 |
dmsimard | fix in ara is https://review.opendev.org/#/c/694627/ | 21:30 |
dmsimard | I could probably tag a dot release sometime next week when the fix lands | 21:30 |
dmsimard | added a test to 1.2.0 and it doesn't have the bug \o/ | 21:48 |
Shrews | dmsimard: thx! | 22:28 |
*** michael-beaver has quit IRC | 22:52 | |
*** armstrongs has joined #zuul | 23:03 | |
*** armstrongs has quit IRC | 23:12 | |
*** jamesmcarthur has joined #zuul | 23:18 | |
*** Goneri has quit IRC | 23:41 | |
*** jamesmcarthur has quit IRC | 23:43 | |
*** jamesmcarthur has joined #zuul | 23:47 | |
*** jamesmcarthur has quit IRC | 23:55 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!