| *** gibi_off is now known as gibi | 07:43 | |
| gboutry1 | Hey Infra. We've come across an issue in Sunbeam's monorepo related to updating an in-tree secret for Charmhub publishing post a successful build. | 09:19 |
|---|---|---|
| gboutry1 | We can't have the same secrets with different definition, which is an issue when trying to update one secret (as we can't land the updated version) | 09:19 |
| gboutry1 | Here's the two solution we are considering: | 09:19 |
| gboutry1 | Considering removing the secret definition each time we cut 'main' into a new 'stable' branch, retaining it solely in 'main.' | 09:19 |
| gboutry1 | Exploring the option of creating a dedicated 'secrets' branch for independent updates. | 09:19 |
| gboutry1 | The secret has a 90-day ttl, therefore updates are necessary on expiration or when we're adding a new charm | 09:19 |
| gboutry1 | thanks for any input on the matter | 09:20 |
| frickler | gboutry1: I think the assumption made by zuul developers mainly is that secrets would live in an unbranched config repo. both of your options sound reasonable to me, but likely keeping the secrets only in the default branch is slightly simpler in terms of actually using then | 09:49 |
| gboutry1 | thank you | 10:23 |
| *** elodilles is now known as elodilles_afk | 12:55 | |
| *** elodilles_afk is now known as elodilles | 13:33 | |
| opendevreview | Jan Marchel proposed openstack/project-config master: Add netdata onfiguration repo to NebulOuS https://review.opendev.org/c/openstack/project-config/+/905293 | 13:36 |
| *** elodilles is now known as elodilles_afk | 14:21 | |
| clarkb | gboutry1: you should be able to get away with flip flopping between two secret names | 16:21 |
| *** elodilles_afk is now known as elodilles | 16:27 | |
| fungi | you'd still have to delete old copies from stable branches though | 16:50 |
| fungi | well, delete or update i guess | 16:51 |
| clarkb | well you leave the old one alone since thats fine as long as the definition is identical. Then you add a new one (and switch the job to use it) that is identical across the barnches too | 16:52 |
| clarkb | eventually you can delete the old stuff | 16:52 |
| fungi | right, flip-flopping back the next time you need to update assumes you've cleaned up the old copies in the interim | 16:52 |
| clarkb | ya | 16:52 |
| fungi | or else you still have the same issue | 16:53 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!