| mnasiadka | clarkb: seems centos9 jobs feel happy in Kolla right now - thanks for orchestrating the images update :-) | 05:44 |
|---|---|---|
| opendevreview | Slawek Kaplonski proposed zuul/zuul-jobs master: Drop support for user/password authentication to the readthedocs.org https://review.opendev.org/c/zuul/zuul-jobs/+/933395 | 08:29 |
| opendevreview | Slawek Kaplonski proposed openstack/project-config master: Remove rtd_secret from the trigger-readthedocs-webhook job https://review.opendev.org/c/openstack/project-config/+/933396 | 08:33 |
| opendevreview | Slawek Kaplonski proposed openstack/project-config master: Remove rtd_secret from the trigger-readthedocs-webhook job https://review.opendev.org/c/openstack/project-config/+/933396 | 08:35 |
| opendevreview | Slawek Kaplonski proposed openstack/project-config master: DNM Just test of the new config of the trigger-readthedocs-webhook job https://review.opendev.org/c/openstack/project-config/+/933397 | 08:35 |
| opendevreview | Slawek Kaplonski proposed openstack/project-config master: Remove rtd_secret from the trigger-readthedocs-webhook job https://review.opendev.org/c/openstack/project-config/+/933396 | 09:17 |
| opendevreview | Slawek Kaplonski proposed openstack/project-config master: DNM Just test of the new config of the trigger-readthedocs-webhook job https://review.opendev.org/c/openstack/project-config/+/933397 | 09:17 |
| slaweq | fungi hi, I proposed https://review.opendev.org/c/openstack/project-config/+/933396 and https://review.opendev.org/c/zuul/zuul-jobs/+/933395 today to address this rtd webhook change | 09:56 |
| slaweq | I wanted to test it with https://review.opendev.org/c/x/tobiko/+/933248 but it is complaining for me that I can't inherit from trigger-readthedocs-webhook" job as it is "final" (which is not with my patch) | 09:57 |
| slaweq | so do I need to first get merged https://review.opendev.org/c/openstack/project-config/+/933396 to be able to inherit from that job in tobiko ? | 09:57 |
| frickler | slaweq: yes, changes in config repos cannot be speculatively tested due to security concerns | 10:24 |
| frickler | slaweq: I think even with that change it would be better to keep using the template as documented in https://docs.openstack.org/infra/openstack-zuul-jobs/project-templates.html#project_template-docs-on-readthedocs ? so we'd need to update that part, too? | 10:28 |
| slaweq | frickler but how we can use template and pass secret to it? I was trying to do so in https://review.opendev.org/c/x/tobiko/+/933248 and it was always failing for me | 10:54 |
| slaweq | zuul was complaining for such config | 10:54 |
| slaweq | and IIUC, secret can be used only in the job defined in the same repo as secret so we need to define own trigger-readthedocs-webhook job which will inherit from that "generic" one and use secret there | 10:55 |
| slaweq | if there is different way to do this using this template as previously, please let me know how :) | 10:55 |
| frickler | slaweq: I need to check the details, but there is a "pass-to-parent" option that tobiko could set and have the secret be available to the job defined in the parent | 11:22 |
| fungi | yes, the child job in x/tobiko would need to set pass-to-parent but also as noted that can't be tested successfully until the update to the parent merges to remove the "final" flag (since changes for trusted config repos can't be tested speculatively for safety reasons) | 12:08 |
| slaweq | frickler yes, I set that "pass-to-parent" there already | 12:21 |
| slaweq | fungi but is it possible to use secret somehow without creating own job and using simply template and job defined in the project-config repo (as frickler suggested) or do I need to inherit from that job and create own which will use secret (how I did it currently)? Do you know? | 12:22 |
| fungi | i'd need to look in the docs and see if it's possible to pass variables when adding a project template, though using a job variant instead of inheriting in a completely separate job might be a middle-ground (not sure if you can do that with secrets either) | 12:39 |
| slaweq | please check, I only knew the way of inheritiing job to achieve that so far | 12:39 |
| fungi | clarkb might know once he's around, i'm about to be in ptg sessions and then hitting the road to go out of town, won't be back until sometime monday | 12:39 |
| Clark[m] | I think you can generally provide info to jobs in templates using project level vars. But that won't work for secrets as secrets are distinct from vars and you don't want all jobs to have access to them | 12:51 |
| fungi | yeah, i suspect what slaweq has is basically the only way, which is why the per-org github mirroring jobs are done similarly | 12:52 |
| Clark[m] | If you search code search for pass to parent you may find examples of variants doing this instead of full blown child jobs but I don't think you can do that with templates | 12:52 |
| fungi | it's just unfortunate that rtd won't accept webhook calls authenticated with user/password any longer and insists on per-project tokens (presumably someone has tried to call tobiko's webhook with a token generated for the openstackci account?) | 12:53 |
| fungi | yeah, i think the relevant section of the docs for applying project templates is https://zuul-ci.org/docs/zuul/latest/config/project.html#attr-project.templates and it doesn't mention being able to pass any vars or secrets or pragmas that way (they'd have to be included in the template definition instead) | 13:08 |
| clarkb | or set at the project level | 13:08 |
| fungi | right, as a variant | 13:08 |
| clarkb | no I mean as project level config like vars | 13:09 |
| clarkb | this works for vars but not secrets | 13:09 |
| fungi | oh! i forgot about that, but yeah still no secrets that way | 13:09 |
| fungi | https://zuul-ci.org/docs/zuul/latest/config/project.html#attr-project.vars is for setting vars at the project level | 13:10 |
| fungi | https://zuul-ci.org/docs/zuul/latest/config/job.html#attr-job.secrets doesn't actually talk about variants, but i guess pass-to-parent is handled the same way as for child jobs | 13:12 |
| *** dhill is now known as Guest7422 | 13:32 | |
| clarkb | mnasiadka: thank you for confirming that fixed things. And happy to help I just wasn't exactly sure what needed to be done. Glad you were able to track it down | 13:39 |
| *** dhill is now known as Guest7429 | 14:38 | |
| clarkb | all meetpad ptg sessions are complete per the schedule now. I will remove the meetpad servers from the emergency file | 17:06 |
| clarkb | done | 17:07 |
| clarkb | jitsi meet should update in about ~9 hours | 17:07 |
| corvus | https://zuul.opendev.org/t/zuul/build/6052dad383244780849aff4fb92bcff7/log/job-output.txt#12404 | 19:53 |
| corvus | hrm, "push tag to intermediate registry" appears to have timed out | 19:53 |
| corvus | i think it's doing that weird thing with ssl errors that we've still never tracked down but a restart fixes | 19:54 |
| corvus | #status log restarted zuul-registry | 19:55 |
| Clark[m] | I'm finishing up lunch do you want me to restart it? Or are you doing it | 19:55 |
| opendevstatus | corvus: finished logging | 19:55 |
| Clark[m] | That answers that question:) | 19:55 |
| corvus | :) | 19:55 |
| *** elodilles is now known as elodilles_pto | 20:28 | |
| opendevreview | Lars Kellogg-Stedman proposed openstack/diskimage-builder master: Support Fedora cloud images for Fedora 40 and later https://review.opendev.org/c/openstack/diskimage-builder/+/933361 | 20:48 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!