Wednesday, 2021-11-24

@theikki6:matrix.orgHello friends!07:59
I am wondering if anyone knows a way to exclude something from a reference?
For example; in a job I can include my vars and add more vars like this
- job:
name: foo_bar
vars:
<<: *my_wonderful_vars
new_var: true
is there a way to not inlcude a specific variable in the reference somehow?
@francesco_sc:matrix.orgHi, I am tryiing to let github and zuul communicate, but I don't see the zuul pipelines under the github settings-branch tab, any idea?08:06
-@gerrit:opendev.org- Felix Edel proposed:13:13
- [zuul/zuul] 818868: Combine different history approaches for merge jobs in tests https://review.opendev.org/c/zuul/zuul/+/818868
- [zuul/zuul] 818205: WIP: Add source attribute to GitConnection https://review.opendev.org/c/zuul/zuul/+/818205
-@gerrit:opendev.org- Felix Edel proposed on behalf of Simon Westphahl: [zuul/zuul] 815278: DNM: execute tests with two schedulers https://review.opendev.org/c/zuul/zuul/+/81527813:13
@jim:acmegating.comtheikki6: not that i'm aware of.  you might consider setting the value to 'null' and making sure your playbook treats that as if it was not present.14:46
@jim:acmegating.comfrancesco_sc: here's the docs for configuring zuul with github: https://zuul-ci.org/docs/zuul/reference/drivers/github.html#configure-github14:48
-@gerrit:opendev.org- Matthieu Huin https://matrix.to/#/@mhuin:matrix.org proposed: [zuul/zuul-client] 819118: Support for "basic" authentication https://review.opendev.org/c/zuul/zuul-client/+/81911814:52
@francesco_sc:matrix.orgThanks corvus , I did what is written in the documentation, but I still can't see the pipeline on github.16:35
I see the following message: Sorry, we couldn’t find any status checks in the last week for this repository.
Learn more about status checks on GitHub.
@jim:acmegating.comthey may only show up after jobs have run and zuul has reported once?16:44
@francesco_sc:matrix.orgsorry corvus , I didn't get your question17:07
@tobias.henkel:matrix.orgcorvus: +2 with one typo on 80930017:08
@jim:acmegating.comfrancesco_sc: i'm not sure a check will appear there until zuul has run jobs and reported17:09
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: [zuul/zuul] 809300: Add a zookeeper map to developer docs https://review.opendev.org/c/zuul/zuul/+/80930017:10
@jim:acmegating.comtobiash: thx fixed :)17:10
@francesco_sc:matrix.orgOK, so how can I make check run for the first time?17:11
@francesco_sc:matrix.orgI tried to open a PR with projects file:17:11
- project:
name: myrepo
vars:
check:
fail-fast: true
jobs:
- gitlint
- small-checks
gate:
fail-fast: true
- noop
post:
jobs:
- noop
periodic:
jobs:
- noop
@jim:acmegating.comfrancesco_sc: you might want to follow the tutorial here: https://zuul-ci.org/docs/zuul/tutorials/quick-start.html  it's written for gerrit, but it walks you through the process of adding a project and running jobs.17:12
@jim:acmegating.comfrancesco_sc: if a project doesn't already have a check pipeline configuration, then zuul won't report errors in a PR that creates one.  you may have errors in that code but won't see them because of that.  start by adding a very simple empty pipeline config first.  the tutorial recommends that; see https://zuul-ci.org/docs/zuul/tutorials/quick-start.html#configure-zuul-pipelines under `zuul.d/projects.yaml`)17:16
@tobias.henkel:matrix.orgcorvus, mhu : is it feasible to extend the web ui authentication work later to optionally require auth for read access as well? That would be useful for us such that we don't need to combine oauth2-proxy with the admin login17:22
@mhuin:matrix.orgtobiash: you mean make zuul accessible only if you are authenticated?17:23
@tobias.henkel:matrix.orgyes17:23
@tobias.henkel:matrix.orgcurrently we have it behind a saml authenticating proxy (we're switching to keycloak and oidc soon)17:23
@tobias.henkel:matrix.organd we don't allow any anonymous access in our deployment17:24
@mhuin:matrix.orgwould that need to be tenant-scoped too?17:24
@tobias.henkel:matrix.orgin the best case yes17:24
@jim:acmegating.comi think so, but the api info endpoints would probably still need to be publicly accessible; and maybe the tenant list depending on the details.17:26
@jim:acmegating.combasically -- the js web app gets the authentication url from the info endpoint17:27
@tobias.henkel:matrix.orgI'd only care about the status, job, builds etc17:28
@mhuin:matrix.orgI agree, but I think oauth2-proxy is the simplest way to achieve this. Any particular reason why you'd like to part from it?17:28
@tobias.henkel:matrix.orgideally the tenant list would be filtered if we go the tenant-scoped route17:28
@tobias.henkel:matrix.orgI guess I have to try it out, oauth2-proxy is too simple for path based group requirements17:29
@tobias.henkel:matrix.orgthat requires a more complex setup using apache likely17:29
@mhuin:matrix.orgah, I see17:29
@tobias.henkel:matrix.orgI just thought if zuul can do auth it might be a good idea if it can do all auth17:29
@tobias.henkel:matrix.orgI guess at least if using oauth2 proxy it can forward the token so the user doesn't have to do double login?17:30
@jim:acmegating.com(to be clear: i don't see anything in the current stack that would prevent this work in the future, and i think the current stack will help enable it if we want to.  if we choose to do it, it's additional work that we'd do later and not a refactor of the current stack)17:33
@tobias.henkel:matrix.orgtotally clear17:34
@tobias.henkel:matrix.orgcorvus, mhu : +2 with q on 81069917:49
@jim:acmegating.comreplied17:51
@tobias.henkel:matrix.orgwhoops, thanks :)17:52
@tobias.henkel:matrix.orgjust curious, will oidc-react automatically refresh the tokens?17:58
@mhuin:matrix.orgyes17:58
@mhuin:matrix.orgif you enable the console, you'll see a call to refresh the token one minute before it expires17:59
@tobias.henkel:matrix.orgso 818295 is for those cases when the auth provider doesn't supply a refresh token17:59
@jim:acmegating.comactually i think in implicit flow we don't get a refresh token at all17:59
@tobias.henkel:matrix.orgyeah, implicit forbids refresh tokens afaik18:00
@jim:acmegating.comso in normal circumstances we're "refreshing" by logging in again silently.  so 818295 is for the cases where that fails18:00
@jim:acmegating.comand it might fail because of the SSO session timing out or being explicitly logged out18:00
@tobias.henkel:matrix.orgk18:00
@mhuin:matrix.orgexactly, that's how I tested it: I signed out off keycloak and let the token expire18:01
@tobias.henkel:matrix.orgI think I'm through the stack18:02
@tobias.henkel:matrix.orgthanks a lot for this work and sorry for the long review delay18:02
@mhuin:matrix.orgthanks for the review! It's not an easy thing to evaluate18:04
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: [zuul/zuul] 815207: Document (and warn about) tag job role checkouts https://review.opendev.org/c/zuul/zuul/+/81520718:13
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed on behalf of Simon Westphahl: [zuul/zuul] 807868: Checkout playbook branch for roles running on tag https://review.opendev.org/c/zuul/zuul/+/80786818:13
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: [zuul/zuul] 819156: Add SOS documentation and remove spec https://review.opendev.org/c/zuul/zuul/+/81915618:32
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: [zuul/zuul] 819156: Add SOS documentation and remove spec https://review.opendev.org/c/zuul/zuul/+/81915618:33
@spamaps:spamaps.ems.host> <@theikki6:matrix.org> Hello friends!19:34
>
> I am wondering if anyone knows a way to exclude something from a reference?
> For example; in a job I can include my vars and add more vars like this
>
> - job:
> name: foo_bar
> vars:
> <<: *my_wonderful_vars
> new_var: true
>
> is there a way to not inlcude a specific variable in the reference somehow?
That level of composition is best done via roles, not yaml references,.
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed on behalf of Felix Edel:21:51
- [zuul/zuul] 818773: Increase MySQL connection limit in tests https://review.opendev.org/c/zuul/zuul/+/818773
- [zuul/zuul] 818774: Remove unused _get_reporter_from_connection_name helper method https://review.opendev.org/c/zuul/zuul/+/818774
- [zuul/zuul] 818775: Add missing attributes to Gitlab MergeRequest https://review.opendev.org/c/zuul/zuul/+/818775
- [zuul/zuul] 818054: Make TestWeb.test_web_components work with multiple schedulers https://review.opendev.org/c/zuul/zuul/+/818054
- [zuul/zuul] 818203: Execute Github tests with only one scheduler https://review.opendev.org/c/zuul/zuul/+/818203
- [zuul/zuul] 818862: Only use a single createScheduler() helper method in tests https://review.opendev.org/c/zuul/zuul/+/818862
- [zuul/zuul] 818863: Limit scheduler_count to 1 for Scale out Scheduler tests https://review.opendev.org/c/zuul/zuul/+/818863
- [zuul/zuul] 818864: Limit scheduler_count to 1 for broken tenant config tests https://review.opendev.org/c/zuul/zuul/+/818864
- [zuul/zuul] 818867: Don't use RecordingMergeClient.history in TestNonLiveMerges https://review.opendev.org/c/zuul/zuul/+/818867
- [zuul/zuul] 818868: Combine different history approaches for merge jobs in tests https://review.opendev.org/c/zuul/zuul/+/818868
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed on behalf of Simon Westphahl:21:51
- [zuul/zuul] 818215: Allow running tests with multiple schedulers https://review.opendev.org/c/zuul/zuul/+/818215
- [zuul/zuul] 815787: Refresh pipelines in tests when settled https://review.opendev.org/c/zuul/zuul/+/815787
-@gerrit:opendev.org- Zuul merged on behalf of James E. Blair https://matrix.to/#/@jim:acmegating.com: [zuul/zuul] 816918: Upgrade react-router-dom https://review.opendev.org/c/zuul/zuul/+/81691822:09
-@gerrit:opendev.org- Zuul merged on behalf of Simon Westphahl: [zuul/zuul] 818360: Load job from pipeline state on executors https://review.opendev.org/c/zuul/zuul/+/81836022:15
-@gerrit:opendev.org- Zuul merged on behalf of Matthieu Huin https://matrix.to/#/@mhuin:matrix.org: [zuul/zuul] 734082: web UI: user login with OpenID Connect https://review.opendev.org/c/zuul/zuul/+/73408222:15
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed on behalf of Felix Edel: [zuul/zuul] 818868: Combine different history approaches for merge jobs in tests https://review.opendev.org/c/zuul/zuul/+/81886822:26
-@gerrit:opendev.org- Zuul merged on behalf of James E. Blair https://matrix.to/#/@jim:acmegating.com: [zuul/zuul] 817861: Support auth in multiple tabs https://review.opendev.org/c/zuul/zuul/+/81786122:28
-@gerrit:opendev.org- Zuul merged on behalf of James E. Blair https://matrix.to/#/@jim:acmegating.com: [zuul/zuul] 809300: Add a zookeeper map to developer docs https://review.opendev.org/c/zuul/zuul/+/80930023:00

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!