| clarkb | fungi: for the record here is the rename plugin moving waiting queue dir aside https://a5375e49235af986f15f-80527d3715cd24d9d5daf12827bd66d5.ssl.cf5.rackcdn.com/911622/2/gate/system-config-run-review-3.8/bb05f6e/bridge99.opendev.org/ara-report/results/256.html | 00:08 |
|---|---|---|
| fungi | oh cool | 00:10 |
| clarkb | also we should check cacti graphs after 0300 to ensure that daily repo archive is doing what we expect | 00:14 |
| clarkb | though maybe it won't be super claer since we also landed the user agent filters | 00:15 |
| clarkb | in fact if you look at cacti for gitea10 you can see it plateau after waht must've been the application of updated UA filters | 00:15 |
| opendevreview | Dr. Jens Harbott proposed opendev/irc-meetings master: Update kolla meeting time https://review.opendev.org/c/opendev/irc-meetings/+/916160 | 05:15 |
| frickler | mnasiadka: ^^ | 05:17 |
| mnasiadka | frickler: thanks | 06:55 |
| opendevreview | Merged opendev/irc-meetings master: Update kolla meeting time https://review.opendev.org/c/opendev/irc-meetings/+/916160 | 09:27 |
| yoctozepto | morning; any idea how to delete gerrit's personal sandbox branches in opendev? I think I am missing the required permissions... | 09:48 |
| yoctozepto | vide https://www.mediawiki.org/wiki/Gerrit/personal_sandbox | 09:48 |
| yoctozepto | made https://opendev.org/nebulous/sal-scripts/branches | 09:48 |
| yoctozepto | https://pastebin.ubuntu.com/p/XDbzJ9cP9w/ | 09:49 |
| frickler | nice. looks like the docs only talk about branch creation, not deletion. I think we'll want to disable this feature completely, I don't see where it would be useful | 09:56 |
| yoctozepto | I will leave the decision in your hands | 09:58 |
| yoctozepto | just bear in mind this kind of activity is possible | 09:58 |
| yoctozepto | will be lurking here to discuss | 09:58 |
| fungi | https://review.opendev.org/Documentation/access-control.html talks about personal sandboxes branches a little | 12:03 |
| *** gthiemon1e is now known as gthiemonge | 12:09 | |
| Clark[m] | Deleting branches via git push requires force push perms on the ref which we generally don't allow. But through the API or web UI you can do it with an explicit perm (which may already be there for sandboxes did you test?) | 12:41 |
| fungi | unrelated, manage-projects did eventually have a successful (periodic) run: https://zuul.opendev.org/t/openstack/builds?job_name=infra-prod-manage-projects | 12:43 |
| fungi | so it should be all caught up as of ~05:00 utc today | 12:44 |
| yoctozepto | Clark[m]: hi! could you elaborate on that web UI possibility a bit more? I could not find the sandbox in there... | 13:26 |
| fungi | yoctozepto: since personal sandbox branches are associated with specific user accounts, it's possible the ui to manage them is buried in your account settings (though i'm not seeing where that might be), or that nobody's gotten around to making a web ui for it yet | 13:34 |
| fungi | yoctozepto: though i do see it here, so an account with branch deletion permissions might be able to: https://review.opendev.org/admin/repos/nebulous/sal-scripts,branches | 13:36 |
| yoctozepto | fungi: thanks, I see it now | 13:39 |
| yoctozepto | so yeah, I need more perms | 13:39 |
| fungi | you can find examples of groups with branch deletion permissions in acls | 13:43 |
| fungi | useful for cleaning up old stable branches or feature branches | 13:44 |
| fungi | you can scope that permission to specific ref patterns as well | 13:44 |
| opendevreview | Radosław Piliszek proposed openstack/project-config master: Add perms to delete own sandbox refs in NebulOuS https://review.opendev.org/c/openstack/project-config/+/916300 | 13:54 |
| yoctozepto | ^ this looks plausible but I am not sure it will work | 13:56 |
| yoctozepto | I have no other means of verifying than trying :D | 13:56 |
| fungi | yoctozepto: sure, worth a try | 14:15 |
| Clark[m] | That will allow any registered user to delete any sandbox branch I think | 14:18 |
| fungi | should limit them to those specific to their username shouldn't it? | 14:18 |
| fungi | at least based on my reading of the acl docs | 14:18 |
| Clark[m] | I haven't been able to find documentation of that. Can you point where you see it? | 14:20 |
| Clark[m] | Oh I guess username is filled with the current logged in user? | 14:22 |
| Clark[m] | So as long as you use the special car in the ref that scopes it to the single user? | 14:22 |
| opendevreview | Merged openstack/project-config master: Add perms to delete own sandbox refs in NebulOuS https://review.opendev.org/c/openstack/project-config/+/916300 | 14:23 |
| Clark[m] | So it does apply for every registered user but they are presented with a dynamic acl that only applies to their ref | 14:23 |
| fungi | Clark[m]: yeah, the gerrit acl doc has an example just not for deletion | 14:35 |
| opendevreview | Rico Lin proposed zuul/zuul-jobs master: Fix collection import error https://review.opendev.org/c/zuul/zuul-jobs/+/916303 | 14:44 |
| opendevreview | Clark Boylan proposed opendev/project-config master: Add record for planned rename on April 22, 2024 https://review.opendev.org/c/opendev/project-config/+/916323 | 16:54 |
| clarkb | noonedeadpunk: fyi 910018 needs a rebase due to a merge conflict. Let me know if that is something we should go ahead and take care of as we prepare for renames on Monday | 17:08 |
| clarkb | fungi: tonyb if you have time for https://review.opendev.org/c/opendev/glean/+/915907 maybe we can do a glean release next week | 17:12 |
| clarkb | wiki's ssl cert expires in 30 days. we should get an automated alert "tonight" | 17:23 |
| corvus | #status log stopped apache on cacti for maintenance | 17:29 |
| opendevstatus | corvus: finished logging | 17:29 |
| yoctozepto | fungi, clarkb: it does work! (that sandbox acl) :D | 18:22 |
| yoctozepto | I also get why I was able to create it in the first place | 18:26 |
| yoctozepto | because of the preceding | 18:26 |
| yoctozepto | [access "refs/heads/*"] | 18:26 |
| yoctozepto | create = group nebulous-release | 18:26 |
| * yoctozepto being a part of that group | 18:26 | |
| yoctozepto | TIL | 18:26 |
| yoctozepto | oh, btw, it works also from git push (in addition to UI - and possibly API) | 18:27 |
| fungi | yoctozepto: good to know, since we don't generally permit create/push access to refs/heads/* the impact is fairly limited | 18:29 |
| opendevreview | Radosław Piliszek proposed openstack/project-config master: Allow nebulous-release team to delete branches too https://review.opendev.org/c/openstack/project-config/+/916327 | 18:37 |
| yoctozepto | this is my final word :D | 18:38 |
| opendevreview | Merged openstack/project-config master: Allow nebulous-release team to delete branches too https://review.opendev.org/c/openstack/project-config/+/916327 | 19:16 |
| *** dmitriis is now known as Guest1575 | 23:07 | |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!