| @joao15130:matrix.org | Hello. | 08:29 |
|---|---|---|
| Can someone explain how to send back an external log server url to gerrit message when a zuul job completes? For now, it returns the url of the zuul server which isn't accessible publicly. I have notice the variable *root* in [web] section of zuul. Is that appropriate to put the logserver URL in there? | ||
| @mhuin:matrix.org | hello zuul-maint, any blockers on https://review.opendev.org/c/zuul/zuul/+/938067 to add event IDs on logs related to job layout generation? | 09:44 |
| @dpawlik:matrix.org | hello folks o/ if zuul is raising an error: `extra keys not allowed @ data['include-vars']` does it mean that include-vars can not be added into job definition when it has a parent? | 10:16 |
| @dpawlik:matrix.org | nvm, I see tag 11.2.0 include that feature | 10:20 |
| @mhuin:matrix.org | is zuul's statsd and monitoring doc generated by automation? I can't seem to find the executor sensors' gauges that were added in 12.0.0 referenced in https://zuul-ci.org/docs/zuul/latest/monitoring.html#metrics (zuul.executor.<executor>.{max_process, cur_process}) | 12:13 |
| @mhuin:matrix.org | I'll propose a quick manual fix to the doc but let me know if that should be handled by automation | 12:14 |
| -@gerrit:opendev.org- Dong Zhang proposed: [zuul/zuul] 940872: Implement keystore functions for OIDC RS256 https://review.opendev.org/c/zuul/zuul/+/940872 | 12:15 | |
| -@gerrit:opendev.org- Matthieu Huin https://matrix.to/#/@mhuin:matrix.org proposed: [zuul/zuul] 947943: Document process sensor metrics https://review.opendev.org/c/zuul/zuul/+/947943 | 12:22 | |
| @mhuin:matrix.org | there https://review.opendev.org/c/zuul/zuul/+/947943 | 12:22 |
| -@gerrit:opendev.org- Benjamin Schanzel proposed: [zuul/zuul] 945457: web: Pass auth header to log endpoint if serving from the same origin https://review.opendev.org/c/zuul/zuul/+/945457 | 12:25 | |
| @fungicide:matrix.org | joao15130: not really possible, your zuul dashboard needs to be reachable so you get the buildset list of all jobs that ran with links to their build results, rendered logs, artifacts, and so on. it sounds like you're looking for something more like jenkins | 12:43 |
| @joao15130:matrix.org | so our Zuul environment need to be reachable from gerrit upstream? | 13:48 |
| @fungicide:matrix.org | joao15130: no, your zuul-web service (specifically) will need to be reachable over https from users on the internet who will want to look at your test results | 13:49 |
| @fungicide:matrix.org | https://zuul-ci.org/docs/zuul/latest/components.html | 13:50 |
| @joao15130:matrix.org | ok I see, let me think about it. | 13:54 |
| @joao15130:matrix.org | I came to think that it was possible via an old parameter called url_pattern in zuul configuration file | 13:56 |
| @jim:acmegating.com | modern zuul uses the dashboard as the primary interface to build results; linking directly to logs is no longer supported | 13:57 |
| @joao15130:matrix.org | Big problem for us is that the logs are hosted on a DMZ server, if we move our zuul_web to that DMZ server we'll lose access to zuul internally as it seems this public IP can't be reached internally | 13:58 |
| @joao15130:matrix.org | ok | 13:58 |
| @joao15130:matrix.org | thank you corvus and fungi | 13:58 |
| @jim:acmegating.com | i do work with some customers that use a proxy for similar situations | 13:59 |
| @joao15130:matrix.org | a proxy? I know what this is but how can it be used? | 14:00 |
| @fungicide:matrix.org | yes, the final incarnation of that was the success-url and failure-url parameters, which were disabled in zuul 4.7.0 about four years ago: https://zuul-ci.org/docs/zuul/latest/releasenotes.html#relnotes-4-7-0-deprecation-notes | 14:04 |
| @fungicide:matrix.org | specifically a reverse-proxy, forwarding connections from users on the global internet to the https port on your zuul-web service | 14:06 |
| @fungicide:matrix.org | in fact, we do that in opendev using haproxy, though in our case it's for load distribution rather than wanting to host zuul-web on an isolated network | 14:06 |
| @joao15130:matrix.org | ok I see, every upcoming request on that DMZ reverse proxy will be sent to our zuul_web service | 14:23 |
| @fungicide:matrix.org | the alternative would be to run zuul-web in your dmz and have it connect to the other zuul services on a different network | 14:25 |
| @fungicide:matrix.org | all of the zuul services are decoupled and can be run on independent servers as long as you allow the required connections between them per the documentation | 14:26 |
| @joao15130:matrix.org | ok. As per our policy, or from what I understood, a server which is publicly available can't be access internally. With that in mind, moving zuul_web service on the DMZ will prevent us to access zuul_web. | 14:28 |
| I guess that option to enable a reverse proxy on the DMZ server would make more sense as we still can continue to access it without big change | ||
| @joao15130:matrix.org | do I need to make any modification to the current zuul web container? | 15:17 |
| @f2ked:matrix.org | My executors are behind a NAT and I use `zuul.conf:executor.{hostname,finger_port}` to define/reach them (sadly `hostname` is an IP address, no names). | 15:55 |
| When I look at `https://zuul-web/components` there multiple entries with the same IP address. | ||
| Is there a something (metadata?) I can use to differentiate them? | ||
| @clarkb:matrix.org | f2ked: if you look at /api/components you'll see the entirety of the json info the api provides the dashboard | 16:13 |
| -@gerrit:opendev.org- Zuul merged on behalf of Matthieu Huin https://matrix.to/#/@mhuin:matrix.org: [zuul/zuul] 947943: Document process sensor metrics https://review.opendev.org/c/zuul/zuul/+/947943 | 17:28 | |
| -@gerrit:opendev.org- Aurelio Jargas proposed on behalf of Aurelio Jargas: [zuul/zuul-jobs] 947041: Remove Artifactory cleanup playbook https://review.opendev.org/c/zuul/zuul-jobs/+/947041 | 20:42 | |
| -@gerrit:opendev.org- Zuul merged on behalf of Aurelio Jargas: [zuul/zuul-jobs] 947685: Pin artifactory Docker image to 7.77.12 https://review.opendev.org/c/zuul/zuul-jobs/+/947685 | 20:51 | |
| -@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: [zuul/zuul] 947649: Add newrev to timer-triggered items https://review.opendev.org/c/zuul/zuul/+/947649 | 21:20 | |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!