Tuesday, 2023-12-19

fungitonyb: sorry, set what up?00:46
tonybAs an admin got the Google Search Console00:46
tonybfungi: at least from what I can see right now00:47
tonybOh that's not true, someone has00:47
fungifor openstack.org oe wiki.o.o?00:48
tonybopenstack.org00:49
tonybhost -t any openstack.org | grep google-site00:49
fungii can ask foundation webdevs about it, but yeah they have the base domain set up, no idea about subdomains tho00:49
tonybIf you "own" the basedomain you also own the subdomains00:50
tonybNot important right now00:55
*** dviroel_ is now known as dviroel14:23
simondodsleyI have a patch in (https://review.opendev.org/c/openstack/requirements/+/903099) to update requirements/upper-contraints.txt but it seems like the current `urllib3` version is get to a version 1 z-release lower than the new requirement I'm adding. How do I get `urllib3` version bumped? What is `generate-constraints` job that seems to do this automatically?16:21
fungisimondodsley: constraints are a resolved self-consistent set of transitive requirements, so if some package in the set depends on an older version of urllib3 then the resulting constraints set will include that version16:24
fungibasically you'll need to figure out what depends on urllib3 and then work out what needs to be done to make it support newer urllib316:25
simondodsleylooks like all the current dependencies would be ok with the .z bump. Can I do that in my patch then?16:26
fungisimondodsley: also the change you linked is for py-pure-client not urllib3?16:26
fungior maybe i'm misunderstanding what you say you're trying to do16:27
simondodsleyyep - urllib3 is a dependency in py-pure-client, but the version we specificy is higher than the pinned version16:27
simondodsleycan i bump urllib3 in my patch?16:27
fungioh, are you referring to a test failure?16:28
simondodsleyyes16:28
simondodsleypinned at 1.26.16 and we need 1.26.1716:29
fungihttps://zuul.opendev.org/t/openstack/build/cfb396f6793f40a5928fa3c0bda68e55 says you're conflicting on python-dateutil requirements, but maybe the resolver is unable to get past that16:29
simondodsleythat is an old one. We just updated py-pure-client to 1.45.016:29
fungican you link to the job failure you're talking about then?16:30
fungisorry, i'm in a meeting right now so not able to dig much16:30
simondodsleyi jus rebased - i'll drop the failure here as soon as it is visible16:30
simondodsleyfungi: https://zuul.opendev.org/t/openstack/build/15199b466bde4b37a1063f3ca76698ed16:31
fungisimondodsley: yeah, i think you can just increase it in upper-constraints.txt but i thought that file normally got automatically updated by a periodic (daily) job16:35
simondodsleyfungi: thanks16:36
fricklerfungi: it is a weekly job, but the results are always unmergeable due to several things openstack projects are lagging behind in adopting, like sqla 2.0, so it needs manual intervention to filter out the mergeable version bumps, which happens very rarely16:38
fricklertonyb has been starting some work to improve on the upgrade job to at least handle differing constraints for different python versions, but that's also not ready yet16:39
fungisimondodsley: yeah, looks like https://review.opendev.org/c/openstack/requirements/+/903802/4/upper-constraints.txt#177 is proposing to update it to 1.26.1816:40
fungiso i would just try setting it to that in your change16:40
simondodsley:+116:40
fungifrickler: thanks, that explains why i wasn't finding it in the builds list for periodic pipeline, i needed to look at periodic-weekly16:41
iurygregoryHey Infra team o/, I'm trying to recover my pypi account (got locked out due to the 2FA), https://github.com/pypi/support/issues/2708 , , I've received and email from ewdurbin " In order to verify the request, please push a branch with the name <Some Code> to the public source code repository for the ironic-prometheus-exporter project and respond to this email. " any idea how can I do this? =)19:06
iurygregoryThe branch does not need to include any commits or changes and can be deleted after it’s been verified.19:06
fungiiurygregory: we're having our weekly meeting right now, but i can take a look in an hour19:06
iurygregoryfungi, ack no rush =) 19:07
fungiiurygregory: so "the public source code repository" is being determined based on the "homepage" link on https://pypi.org/project/ironic-prometheus-exporter/ i guess?20:04
iurygregoryfungi, I think so =)20:05
iurygregoryit doesn't say I have to push the branch, so maybe we can ask release team to create one with the name they asked me? 20:06
iurygregoryor maybe I need to do, not sure lol20:07
tonybCould we create $branchname pointing to an essentially empty repo with a READEME that explains why its there .... and removes it once you have your account?20:08
fungiyeah, i'm trying to figure out how *we'd* authenticate you since you don't even seem to use a registered nick in irc. something you can only do via gerrit would suffice20:08
tonybiurygregory: worth explaining to pypi that the repo is managed and it'd be created by tooling20:09
iurygregoryfungi, my nick is registered afaik .-. 20:12
iurygregoryI've authenticated again to see if fixes =)20:12
iurygregorytonyb, ok20:12
fungioftc -- [iurygregory] user has identified and verified with services20:13
funginow it's there ;)20:13
iurygregorymy bad I probably lost connection and forgot to do the identify 20:13
fungiiurygregory: one way to do that would be to temporarily amend the gerrit acl for ironic-prometheus-exporter to grant a group you're in permission to create/delete a branch and push directly to it, and then have the ptl +1 that change (for expediency, propose a revert of the change too so we can fast-track approval of it when you're done)20:15
iurygregoryJayF, fyi ^20:16
iurygregoryfungi, I think it makes sense20:16
fungithat also gets us some clear authentication because you're using your gerrit account to propose the acl change20:17
iurygregoryagree, do you have info about what I should add to the acl? 20:18
fungiiurygregory: there are a few ways to go about it. is the name of the branch you need to add secret in some way?20:19
fungiotherwise i think we can scope the creation/deletion to that temporary branch name for added safety20:20
iurygregorythe name they asked is kinda a password that google generates for you if you accept things in the browser lol20:20
iurygregory16 characthers letters and numbers 20:21
tonybUltimately they want that branch to be public so I don't think it can be secret right?20:22
iurygregoryyeah20:23
iurygregorysince they will check the repo to find the branch20:23
iurygregoryThe branch does not need to include any commits or changes and can be deleted after it’s been verified. After that, I’ll reset 2FA for your account and issue a password reset.20:24
tonybiurygregory: So I think you'd want to do something like: https://opendev.org/openstack/project-config/src/commit/60de765fa0c8dac1654b11ded4b3986db0ec681c/gerrit/acls/openstack/ironic.config#L4-L1020:29
tonybbut it'd be refs/heads/$branch_name20:29
fungiit looks like it already uses the ironic.config acl according to https://opendev.org/openstack/project-config/src/branch/master/gerrit/projects.yaml#L3720-L372620:30
iurygregoryyeah it uses the ironic one =)20:30
tonyband also include create = group ... and delete = group ...20:31
opendevreviewBrian Rosmaita proposed openstack/project-config master: Deprecate cinderlib  https://review.opendev.org/c/openstack/project-config/+/90326020:31
iurygregorytonyb, I was about to ask if extra options would be required =)20:31
fungiso you'll either be changing that acl or you can temporarily give - project: openstack/ironic-prometheus-exporter its own dedicated acl and then remove it again when you're done20:31
iurygregoryI think the first approach is ok, since we only need to change one file20:33
tonybiurygregory: It (the first approach) is a little larger hammer in that any ironic-core could create/delete $branch_name in any ironic project20:34
iurygregoryoh right20:34
tonybiurygregory: where as the idea fungi suggested is more targeted.20:34
tonybiurygregory: Having said that personally I'm okay with the bigger hammer20:35
iurygregoryok, so I would need to create a new file for ironic-prometheus-exporter and also update in projects.yaml?20:35
tonybiurygregory: Yup you could create ironic-prometheus-exporter.config that starts with something like [access] inheritFrom = ironic.config20:37
tonyband adds the hunk you need for your branch20:37
opendevreviewBrian Rosmaita proposed openstack/project-config master: Restore cinderlib zuul jobs  https://review.opendev.org/c/openstack/project-config/+/90403520:37
tonybat least I think that's the syntax for inheritFrom20:38
fungiand temporary remove the acl-file override for it in projects.yaml20:39
fungialso, if it seems like we don't entirely know what we're doing, we don't. this is an unusual circumstance and it may take a couple of tries to get things right since there's no perfect example to crib from20:40
fungigerrit's acl language is a bit complicated20:40
fungibut i'm happy to help work with you on it20:41
opendevreviewIury Gregory Melo Ferreira proposed openstack/project-config master: Temporary update IPE ACL  https://review.opendev.org/c/openstack/project-config/+/90403620:44
iurygregoryI've pushed based on what I understood from our conversation =)20:44
iurygregorynot sure if is 100% correct20:44
tonybiurygregory: Looks like a pretty solid attempt20:45
iurygregoryjust wondering, after we get approved, how I would create the branch? in a normal repo in github I would just do "git checkout -b <name> origin/master" and "git push origin <name>"  20:49
fungiiurygregory: you do it through the gerrit webui (or optionally through the rest api). also i left you some trview comments20:50
iurygregoryfungi, tks!20:51
opendevreviewIury Gregory Melo Ferreira proposed openstack/project-config master: Temporary update IPE ACL  https://review.opendev.org/c/openstack/project-config/+/90403620:52
opendevreviewMerged openstack/project-config master: Temporary update IPE ACL  https://review.opendev.org/c/openstack/project-config/+/90403621:38
iurygregory"Error 403 (Forbidden): not permitted: create on refs/heads/Tv8HwD5dt65yMHGE" .-.21:41
iurygregoryEndpoint: /projects/*/branches/*21:42
iurygregoryany ideas? .-.21:42
fungiiurygregory: in the webui?21:42
iurygregoryyeah21:42
iurygregoryI'm wondering if the revision is required21:42
iurygregoryaha21:43
tonybhttps://stackoverflow.com/questions/29511087/permission-to-create-branches-with-gerrit21:44
tonybI guess you need to use git directly with the gerrit remote21:45
JayFgit checkout -b secretcode; git push gerrit secretcode21:45
JayFshould do the trick21:45
JayFplease confirm this, someone else21:45
JayFand please under no circumstances run git push g.errit without a fourth argument :)21:45
iurygregoryit worked, it needs the revision sha-1 otherwise it fails21:46
fungiodd, create normally works in the webui, but it's possible you need permission on the path parent, i.e. refs/heads21:46
fungiaha, yes you need to tell it what commit to branch from21:46
iurygregoryyeah21:46
tonybfungi: the stackoverflow link says you need "owner" to use the web-UI21:46
iurygregorywhich makes sense (but the ui highlited the button create after I added the name lol)21:46
fungiunfortunately, stackoverflow is notoriously full of people who are confused and have no idea what they're talking about21:47
tonybfungi: fair21:47
fungi"owner" is just a default role21:47
opendevreviewIury Gregory Melo Ferreira proposed openstack/project-config master: Revert "Temporary update IPE ACL"  https://review.opendev.org/c/openstack/project-config/+/90401221:48
iurygregoryrevert in place, I've marked W-1 so we avoid merging before they tell me things are verified in pypi21:49
iurygregoryTks everyone!21:49
tonybhttps://opendev.org/openstack/ironic-prometheus-exporter/src/branch/Tv8HwD5dt65yMHGE \o/21:49
fungiwhich is also my point on the openstack-discuss ml thread about web forums full of people asking questions and only getting answers from other people who are equally clueless21:49
tonybiurygregory: ... You'll remove that branch before you also remove your -W right ;P21:52
iurygregorytonyb, correct =)21:52
JayFbut we need a souvenir of this strange and clever account recovery process :D 21:54
tonybJayF: we have changes 904036 and 904012 for that.21:57
tonybThey'll forever be a part of our shared history now :)21:58
JayFlol21:58
fungiour souvenir is the git history which will allow us to more easily repeat the process the next time someone loses their phone, yep21:58
JayFI am just glad that Iury cares enough to actually jump through all the flaming hoops; we have a long-tail of pypi package owners who still haven't :D 22:00
tonybYeah22:02

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!