| jeblair | SpamapS: yes, it's all yours as long as you want it. :) | 00:00 |
|---|---|---|
| mordred | jeblair: I feel like I should write a script that says "if author == jeblair: +3" ;) | 00:01 |
| jeblair | mordred: hehe -- that would be a bad idea since the *simplest* change i wrote to day has the biggest problem: https://review.openstack.org/428391 | 00:01 |
| jeblair | ps2 of that caused tests to randomly end up running configuration from other tests | 00:02 |
| jeblair | fun stuff. | 00:02 |
| jeblair | i think ps3 should be safe | 00:02 |
| mordred | jeblair: ok. fine. I'll _read_ them | 00:06 |
| jeblair | thanks, and i'm done touching them for a while :) | 00:06 |
| mordred | sure...... | 00:08 |
| openstackgerrit | Ian Wienand proposed openstack-infra/nodepool master: Make web status text/plain https://review.openstack.org/428501 | 00:10 |
| openstackgerrit | Ian Wienand proposed openstack-infra/nodepool master: Make web status text/plain https://review.openstack.org/428501 | 00:11 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Report exceptions in launcher https://review.openstack.org/428499 | 00:41 |
| openstackgerrit | Ian Wienand proposed openstack-infra/nodepool master: Make web status text/plain https://review.openstack.org/428501 | 00:58 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Add some gearman related debugging https://review.openstack.org/428530 | 01:20 |
| jeblair | there's still something very strange going on which seems like state leaking between tests :| | 01:21 |
| jeblair | (it's manifesting in the webapp unit tests for some reason that escapes me) | 01:21 |
| *** anteaya has quit IRC | 01:57 | |
| *** pleia2 has quit IRC | 01:57 | |
| *** pleia2 has joined #zuul | 01:58 | |
| *** anteaya has joined #zuul | 02:04 | |
| *** bhavik1 has joined #zuul | 05:31 | |
| *** bhavik1 has quit IRC | 05:34 | |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 1 https://review.openstack.org/428582 | 05:56 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 2 https://review.openstack.org/428583 | 05:56 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 3 https://review.openstack.org/428584 | 05:56 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 4 https://review.openstack.org/428585 | 05:56 |
| *** saneax-_-|AFK is now known as saneax | 06:18 | |
| *** hashar has joined #zuul | 09:04 | |
| *** Cibo_ has quit IRC | 10:49 | |
| jkt | now that cloning/merging is getting moved to the workers in v3, will it work for non-public projects? | 10:54 |
| jkt | (e.g., our company's gerrit requires either SSH or HTTPS-with-auth for git clones; I'm currently "supporting" this by adding the zuul's user to a relevant Gerrit group, and hoping that nobody guesses the merger's git URL in a semi-private v6 network...) | 10:56 |
| hashar | jkt: isn't the merge URL exposed as the ZUUL_URL parameter passed to the job ? | 10:59 |
| jkt | hashar: Gerrit ensures that nobody but those who are already autorized have access to the job's log (more or less) | 11:01 |
| *** yolanda has quit IRC | 11:08 | |
| *** yolanda has joined #zuul | 11:10 | |
| *** hashar is now known as hasharAway | 11:54 | |
| *** hasharAway is now known as hashar | 12:19 | |
| openstackgerrit | David Shrewsbury proposed openstack-infra/nodepool feature/zuulv3: WIP: Assign node set to node requests https://review.openstack.org/428428 | 13:29 |
| openstackgerrit | David Shrewsbury proposed openstack-infra/nodepool feature/zuulv3: WIP: Assign node set to node requests https://review.openstack.org/428428 | 13:41 |
| openstackgerrit | David Shrewsbury proposed openstack-infra/nodepool feature/zuulv3: Assign node set to node requests https://review.openstack.org/428428 | 13:50 |
| openstackgerrit | David Shrewsbury proposed openstack-infra/nodepool feature/zuulv3: Update Node and NodeRequest models https://review.openstack.org/428736 | 13:50 |
| *** gothicmindfood has quit IRC | 14:03 | |
| *** gothicmindfood has joined #zuul | 14:03 | |
| openstackgerrit | Paul Belanger proposed openstack-infra/zuul master: Bump post playbook timeout to 30mins https://review.openstack.org/428740 | 14:03 |
| openstackgerrit | David Shrewsbury proposed openstack-infra/nodepool feature/zuulv3: Update Node and NodeRequest models https://review.openstack.org/428736 | 14:04 |
| openstackgerrit | David Shrewsbury proposed openstack-infra/nodepool feature/zuulv3: WIP: Assign node set to node requests https://review.openstack.org/428428 | 14:04 |
| openstackgerrit | David Shrewsbury proposed openstack-infra/nodepool feature/zuulv3: Fix race in node request state changes https://review.openstack.org/428741 | 14:04 |
| pabelanger | jeblair: mordred: ^ looking for some feedback on a zuulv2.5 issue, our post playbook timeout is hardcoded to 10mins, but kolla needs more time. Are we okay will just bumping the value vs plumbing a properly timeout value config setting? | 14:05 |
| Shrews | i'm just trying to look as busy as jeblair this morning | 14:05 |
| Shrews | pabelanger: morning! | 14:05 |
| pabelanger | Shrews: o/ | 14:05 |
| *** pabelanger has quit IRC | 14:13 | |
| *** pabelanger has joined #zuul | 14:13 | |
| openstackgerrit | David Shrewsbury proposed openstack-infra/nodepool feature/zuulv3: Assign node set to node requests https://review.openstack.org/428428 | 14:26 |
| Shrews | 428428 is about as simple as I can make it, now. refactored most other things out into separate reviews | 14:28 |
| openstackgerrit | David Shrewsbury proposed openstack-infra/nodepool feature/zuulv3: Assign node set to node requests https://review.openstack.org/428428 | 14:31 |
| Shrews | and finally un-WIP'd | 14:31 |
| pabelanger | yay | 14:34 |
| openstackgerrit | Paul Belanger proposed openstack-infra/zuul feature/zuulv3: [WIP] Add reporter for Federated Message Bus (fedmsg) https://review.openstack.org/426861 | 14:58 |
| jeblair | jkt: yes, in fact, that's one of the main reasons we're doing it -- but the merging isn't moving to the workers it's moving to the zuul-launcher, a long-running daemon on a controlled and protected server. the zuul-launcher will then push the repos onto the test node (ie, worker). so only the server running zuul-launcher needs the gerrit creds. | 15:18 |
| jeblair | pabelanger: yeah, i think hardcoding is fine. | 15:19 |
| *** saneax is now known as saneax-_-|AFK | 15:19 | |
| pabelanger | jeblair: great | 15:20 |
| *** Cibo_ has joined #zuul | 15:23 | |
| jkt | jeblair: sweet, thanks (and now I know what you meant by the multi-tenancy in some slides) | 15:24 |
| jeblair | jkt: yeah, doing it this way makes multi-tenancy much more feasible too | 15:25 |
| *** Cibo_ has quit IRC | 15:30 | |
| *** Cibo_ has joined #zuul | 15:31 | |
| *** bhavik1 has joined #zuul | 15:32 | |
| *** bhavik1 has quit IRC | 15:40 | |
| openstackgerrit | Paul Belanger proposed openstack-infra/zuul feature/zuulv3: [WIP] Add reporter for Federated Message Bus (fedmsg) https://review.openstack.org/426861 | 16:17 |
| openstackgerrit | Monty Taylor proposed openstack-infra/zuul feature/zuulv3: Add action plugins to restrict untrusted execution https://review.openstack.org/428798 | 16:19 |
| mordred | jeblair: there is first (almost certainly non-working) pass | 16:19 |
| *** Cibo_ has quit IRC | 16:20 | |
| *** hashar has quit IRC | 16:22 | |
| *** hashar has joined #zuul | 16:25 | |
| openstackgerrit | Paul Belanger proposed openstack-infra/zuul feature/zuulv3: [WIP] Add reporter for Federated Message Bus (fedmsg) https://review.openstack.org/426861 | 16:48 |
| openstackgerrit | Monty Taylor proposed openstack-infra/zuul feature/zuulv3: Add action plugins to restrict untrusted execution https://review.openstack.org/428798 | 16:51 |
| mordred | jeblair: ok. amazingly enough that actually passes its test locally :) | 16:51 |
| jeblair | mordred: \o/ | 16:52 |
| *** yolanda has quit IRC | 17:03 | |
| *** yolanda has joined #zuul | 17:06 | |
| openstackgerrit | Monty Taylor proposed openstack-infra/zuul feature/zuulv3: Add action plugins to restrict untrusted execution https://review.openstack.org/428798 | 17:07 |
| mordred | jeblair: ^^ updated tests to test both positive and negative (copy works when it should and doesn't when it shouldn't) | 17:07 |
| jeblair | sweet :) | 17:08 |
| mordred | jeblair: structually speaking, that's pretty much all of the pieces for blocking execution via action plugins - only thing left there is to finishing putting in blocking action plugins for all of the things that do local action | 17:08 |
| mordred | jeblair: and then we need to block local_action/connection=local/host: localhost - which will be different and I need to noodle on | 17:09 |
| mordred | jeblair: I _think_ a broken connection plugin that overrides the normal local connection plugin is likely the most resilient - but I need to play | 17:10 |
| openstackgerrit | Paul Belanger proposed openstack-infra/zuul feature/zuulv3: [WIP] Add reporter for Federated Message Bus (fedmsg) https://review.openstack.org/426861 | 17:11 |
| *** hashar has quit IRC | 17:17 | |
| *** EmilienM has quit IRC | 17:56 | |
| *** clarkb has quit IRC | 17:56 | |
| *** gundalow has quit IRC | 17:56 | |
| *** tristanC has quit IRC | 17:56 | |
| *** gundalow has joined #zuul | 17:56 | |
| *** tristanC has joined #zuul | 17:56 | |
| *** clarkb has joined #zuul | 17:56 | |
| *** cinerama has quit IRC | 17:56 | |
| *** dmsimard has quit IRC | 17:56 | |
| *** cinerama has joined #zuul | 17:56 | |
| *** dmsimard has joined #zuul | 17:57 | |
| *** EmilienM has joined #zuul | 17:57 | |
| jeblair | i apologize for all the times i'm going to push up a bunch of DNM patches today. i'm chasing down a very elusive test bug. | 18:00 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 3 https://review.openstack.org/428584 | 18:00 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 4 https://review.openstack.org/428585 | 18:00 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 1 https://review.openstack.org/428582 | 18:00 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 2 https://review.openstack.org/428583 | 18:00 |
| *** Cibo_ has joined #zuul | 18:14 | |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 3 https://review.openstack.org/428584 | 18:22 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 4 https://review.openstack.org/428585 | 18:22 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 1 https://review.openstack.org/428582 | 18:22 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 2 https://review.openstack.org/428583 | 18:22 |
| *** Cibo_ has quit IRC | 18:29 | |
| *** Cibo_ has joined #zuul | 18:33 | |
| Shrews | jeblair: in the integration test, i *think* we might need to put zuul and np on the same page as far as images/providers. I see in the builder logs images being created with names different from what zuul is sending. | 18:40 |
| Shrews | b/c i sort of half-expected (hoped?) that test_node_request would have worked with https://review.openstack.org/428428 | 18:40 |
| jeblair | Shrews: yeah, we can update the zuul/tests/functional config to use the names nodepool has | 18:40 |
| Shrews | looks like nodepool only has one (fake-nodepool) | 18:41 |
| Shrews | i'll see if i can figure out the relationships there | 18:42 |
| jeblair | Shrews: or maybe we're dealing with the nodepool label/image split | 18:42 |
| Shrews | maybe | 18:44 |
| jeblair | Shrews: maybe we should just go with images now (and change the zuul test to match) just to get some basic stuff working, then maybe look into implementing http://lists.openstack.org/pipermail/openstack-infra/2017-January/005018.html before we do the whole label/image mapping thing? | 18:45 |
| Shrews | yeah | 18:46 |
| openstackgerrit | David Shrewsbury proposed openstack-infra/zuul feature/zuulv3: DNM: Test coalescing zuul and nodepool images https://review.openstack.org/428858 | 18:48 |
| Shrews | let's see what that does | 18:48 |
| Shrews | well, it still won't pass b/c my change hasn't merged. jeblair: would a Depends-On work in this case? making 428428 depend on 428858? | 18:49 |
| Shrews | for the experimental test, that is | 18:49 |
| jeblair | Shrews: yep | 18:49 |
| Shrews | cool | 18:50 |
| openstackgerrit | David Shrewsbury proposed openstack-infra/zuul feature/zuulv3: DNM: Test coalescing zuul and nodepool images https://review.openstack.org/428858 | 18:51 |
| *** Cibo_ has quit IRC | 18:54 | |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 3 https://review.openstack.org/428584 | 18:56 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 4 https://review.openstack.org/428585 | 18:56 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 1 https://review.openstack.org/428582 | 18:56 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: DNM test 2 https://review.openstack.org/428583 | 18:56 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Fix Job class variable modification https://review.openstack.org/428859 | 18:56 |
| Shrews | jeblair: OMG http://logs.openstack.org/58/428858/2/experimental/gate-zuul-nodepool/afa0e31/testr_results.html.gz | 18:56 |
| jeblair | i think i might have found the tricky bug ^ (428859) | 18:56 |
| pabelanger | Shrews: w00t | 18:57 |
| jeblair | Shrews: dude. | 18:57 |
| jeblair | Shrews: were on the cusp of being able to run actual code on actual nodes. :) we're going to have fun at the ptg! | 18:57 |
| Shrews | RIGHT?!!! last piece left is actually launching nodes and some sort of cleanup thread | 18:58 |
| Shrews | i'm sure that sounds simpler than it will actually end up being | 18:58 |
| jeblair | Shrews: *hopefully* after 6 years we have some working code to launch nodes :) | 18:59 |
| jeblair | (mostly working) | 18:59 |
| Shrews | jeblair: yeah, though there is a lot of cruft around the actual launch i need to disect | 18:59 |
| mordred | jeblair: ah! nice | 19:00 |
| Shrews | plus, i'd like to try and support terminating launches, if possible | 19:00 |
| Shrews | during shutdown | 19:00 |
| openstackgerrit | David Shrewsbury proposed openstack-infra/zuul feature/zuulv3: Coalesce zuul and nodepool images in integration https://review.openstack.org/428858 | 19:01 |
| jeblair | Shrews: we may value quick shutdown (with later cleanup) more than clean shutdown.... when we restart nodepool, we usually want it to be fast. | 19:02 |
| Shrews | jeblair: *nod* I haven't looked to see what it does currently. | 19:03 |
| jeblair | Shrews: it might be nice to have an option for a clean shutdown, but we need to handle the leak case anyway, and i'd say most of the time we (openstack) would probably choose to use the unclean shutdown. | 19:03 |
| jeblair | Shrews: the short version of the current thing is that it exits quickly with no preparation. then, the next time it starts, it sets all 'building' nodes to 'delete' and lets the cleanup thread deal with it. i think the new version of that would probably be: a provider's cleanup thread should delete any unlocked node in 'building' state. so when a provider restarts after an unclean shutdown, the cleanup thread just does that as a matter of course. | 19:06 |
| Shrews | jeblair: ok | 19:08 |
| * Shrews celebrates his minor success with a major cup of afternoon coffee & Bailey's | 19:10 | |
| pabelanger | exciting! | 19:12 |
| jeblair | neat, my bug fix broke several working tests, so i get to celebrate that with more bugfixes :) | 19:14 |
| jlk | hahah | 19:15 |
| jeblair | (but it *consistently* broke them, so yay!) | 19:15 |
| mordred | jlk: btw - https://review.openstack.org/428798 is part of the "make it safe to run ansible from the launchers" work and affects ansible execution. I hear you know something about that ... | 19:22 |
| * jlk looks | 19:22 | |
| jlk | hrm. | 19:23 |
| jlk | so what happens if I want to test my ansible code, which requires use of specific plugins (action or otherwise) ? | 19:23 |
| jlk | Do I set it up so that the test script is ansible that fires off to a node that runs ansible there? | 19:24 |
| mordred | jlk: I think so - I don't think there is any safe way to include those plugins in the zuul context without it becoming a potential attack vector | 19:25 |
| jlk | right. | 19:25 |
| jlk | so this is because zuul is running ansible on the host, not in some VM or containment? | 19:26 |
| mordred | yah - that's right | 19:26 |
| * jlk ponders throw-away zuul-launcher nodes | 19:26 | |
| jlk | single-use containment | 19:26 |
| jlk | oh but those happen on the merger nodes now, right? | 19:27 |
| mordred | I am as a next step after this going to look at bubblewrap as a way to wrap what's going on here into a container context as well | 19:27 |
| mordred | yah | 19:27 |
| mordred | that's the thing ... throwaway merger nodes start to get expensive because of all of the git repos | 19:27 |
| jlk | yeah | 19:27 |
| jlk | need a data volume | 19:28 |
| jlk | but then you could leave landmines so.. | 19:28 |
| pabelanger | if we have external mergers, like today, I think having throw-away zuul launchers would be cool | 19:28 |
| mordred | exactly. containers will help some - but I don't think any of us actually trust them for security containment against directed attacks. I see them as more of a belt/suspenders against accidental oopses (in this case) | 19:29 |
| mordred | the only use case we've identified so far where it's a problem is the one jlk brought up - and I could imagine providing some glue in the standard lib as a follow up to make ansibling-the-ansible remotely feel non-wonky | 19:31 |
| mordred | (I'm sort of guessing that'll be in the lessons-learned, how do we improve moving forward work | 19:31 |
| jlk | ansibling the ansible has been one of my longest wishlist items for Ansible | 19:31 |
| pabelanger | ya | 19:33 |
| jlk | mordred: is there any risk of getting callback plugins loaded when zuul is running ansible directly? | 19:34 |
| pabelanger | if a zuul-worker could request a node from nodepool, that could work too | 19:34 |
| pabelanger | rather then, having all nodes online for launcher | 19:34 |
| pabelanger | but, I can see that getting tricky | 19:34 |
| mordred | jlk: _shouldn't_ be - zuul writes out an ansible.cfg into a temp dir and executes ansible-playbook from that dir | 19:35 |
| mordred | jlk: is there a way to load callback plugins outside of ansible.cfg? | 19:36 |
| jlk | alright. So as long as ansible.cfg can't be modified, or side-loaded, then we should be good, as there is a whitelist of callback plugins to use | 19:36 |
| mordred | like in a playbook? | 19:36 |
| mordred | yah | 19:36 |
| jlk | "You can activate a custom callback by either dropping it into a callback_plugins directory adjacent to your play or inside a role or by putting it in one of the callback directory sources configured in ansible.cfg." | 19:37 |
| jlk | it's unclear as to if the whitelist will prevent loading random_plugin from a callback_plugins/ directory | 19:38 |
| mordred | yah. callback_plugins in a role directory would be the one we don't have a good way of preventing | 19:39 |
| jlk | that's a vector to executing user's code directly on a zuul host | 19:39 |
| pabelanger | that is one of my concerns honestly, the amount of work (effort) that will be needed to protect the zuul-launcher. | 19:40 |
| pabelanger | but, until we get our first exploit, maybe I am over reacting a little | 19:41 |
| jlk | it's a matter of what user ansible runs as, and what all access that user has. Looks like I can fairly easily cause my own code to be executed via the user running ansible | 19:45 |
| jeblair | pabelanger: i would not say you are overreacting. | 19:49 |
| jeblair | pabelanger, jlk: running arbitrary code on the launcher would almost certainly let you pwn all of zuul or whatever it protects fairly easily. | 19:49 |
| jlk | actually | 19:50 |
| jlk | what prevents running a delegate_to: localhost | 19:50 |
| jlk | type task? | 19:50 |
| jlk | then you could cause any module to execute locally | 19:50 |
| jeblair | jlk: i think mordred had some thoughts on that, including adding a localhost entry to the inventory (but also possibly requiring a custom connection plugin for other ways of saying "run this on localhost") | 19:51 |
| mordred | jlk: yah - the custom connection plugin that overrides the 'local' connection type was one of the things I was considering | 19:52 |
| mordred | jeblair: looks like we may need to inspect roles that we download for execution | 19:52 |
| jlk | hrm | 19:52 |
| jeblair | jlk, mordred: yeah, we can pretty easily check for 'callback_plugins' directories and bomb if that's needed | 19:53 |
| jlk | yeah, because one could also do add_host: whatever, and then delegate_to: whatever | 19:53 |
| mordred | jeblair: if they have a "callback_plugins" dir in them, they can define a callback plugin that will get loaded | 19:53 |
| mordred | jlk: add_host will also be turned off :) | 19:53 |
| jlk | fair enough! | 19:53 |
| jeblair | (this is really good -- we definitely need to make sure all of these are covered. maybe we should have a pentest event when we think we have them all :) | 19:54 |
| mordred | jeblair: ++ | 19:54 |
| mordred | jlk: you can't put action plugins in a role like you can do with callback plugins can you? | 19:54 |
| jlk | Looks like a good list of things to bork on at http://docs.ansible.com/ansible/dev_guide/developing_plugins.html#distributing-plugins | 19:55 |
| jlk | mordred: was just looking that up, and yes you can | 19:55 |
| jlk | there's a whole list of paths we need to bitch about | 19:55 |
| mordred | yup | 19:55 |
| mordred | excellent | 19:55 |
| mordred | _definitely_ need to scrub roles for those | 19:55 |
| jeblair | we have two very flexible systems colliding :) | 19:55 |
| mordred | squish | 19:55 |
| jeblair | and we should probably start a list of things we need to check on in future ansible releases | 19:56 |
| jlk | like an octopus arm wrestling a squid | 19:56 |
| jeblair | "wrestling" | 19:56 |
| mordred | jeblair: maybe we just search roles for any directory ending in "_plugins" | 19:56 |
| jeblair | mordred: ++ | 19:56 |
| jeblair | and yeah, i think the general answer to the question earlier is "if you can't do it on the launcher, then one of the test nodes should be your ansible controller" | 19:57 |
| jlk | https://s-media-cache-ak0.pinimg.com/564x/43/fd/3b/43fd3b214c2ae8ab3619e9b0881777de.jpg | 19:58 |
| mordred | nice | 19:58 |
| jeblair | can we use that in our docs? | 19:58 |
| mordred | jeblair: yah - and a zuul-provided cantrip of some sort to make treating one of the test nodes like your ansible controller | 19:59 |
| jlk | or there's https://thumbs.dreamstime.com/z/squid-attacking-octopus-giant-giant-34655212.jpg | 19:59 |
| jlk | I'm having too much fun with this: http://img08.deviantart.net/c219/i/2015/022/7/f/octopus_vs__squid_by_wolfsrain7249-d8exyit.jpg | 20:01 |
| jeblair | this is how you perform security analysis on critical infrastructure, right? | 20:02 |
| jlk | every good vulnerability needs a snazzy logo and name, so yeah | 20:04 |
| jlk | I'm SecEngineering so hard right now | 20:04 |
| * jeblair lunches | 20:05 | |
| mordred | https://www.youtube.com/watch?v=x5izINmi5Fg <-- hide and seek with an octopus | 20:05 |
| *** hashar has joined #zuul | 21:11 | |
| *** hashar has quit IRC | 22:27 | |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Put Zuul vars in an ansible vars file https://review.openstack.org/424367 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Move job running into own class https://review.openstack.org/385964 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Add infrastructure for pre/post playbooks https://review.openstack.org/425989 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Use ZUUL_TEST_ROOT in launcher https://review.openstack.org/428391 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Handle multiple playbook extensions https://review.openstack.org/425450 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Fix nodeset return on skipped jobs https://review.openstack.org/425865 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Add some gearman related debugging https://review.openstack.org/428530 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Set job class attributes in __init__ https://review.openstack.org/428859 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Tests: store debug logs on error https://review.openstack.org/427946 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Add SourceContext class https://review.openstack.org/427846 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Report exceptions in launcher https://review.openstack.org/428499 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Use playbooks defined in repos https://review.openstack.org/423550 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Add playbooks for all test jobs https://review.openstack.org/425810 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Implement job aborting https://review.openstack.org/426306 | 22:34 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Avoid multiple build cancelations https://review.openstack.org/428477 | 22:35 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Run pre and post playbooks https://review.openstack.org/427494 | 22:35 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Add inheritance debugging https://review.openstack.org/429065 | 22:35 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Add some gearman related debugging https://review.openstack.org/428530 | 22:50 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Set job class attributes in __init__ https://review.openstack.org/428859 | 22:50 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Add SourceContext class https://review.openstack.org/427846 | 22:50 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Report exceptions in launcher https://review.openstack.org/428499 | 22:50 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Use ZUUL_TEST_ROOT in launcher https://review.openstack.org/428391 | 22:50 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Run pre and post playbooks https://review.openstack.org/427494 | 22:50 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Add inheritance debugging https://review.openstack.org/429065 | 22:50 |
| jeblair | the board is green! | 23:01 |
| jeblair | mordred, pabelanger: ^ those are ready to go in :) | 23:01 |
| openstackgerrit | James E. Blair proposed openstack-infra/zuul feature/zuulv3: Add action plugins to restrict untrusted execution https://review.openstack.org/428798 | 23:01 |
| jeblair | mordred: ^ rebased on current patchset | 23:01 |
| jeblair | if you need a map, the series starts at 428389 | 23:02 |
| pabelanger | yay | 23:03 |
| pabelanger | looking | 23:03 |
| *** saneax-_-|AFK is now known as saneax | 23:35 | |
| openstackgerrit | Adam Gandelman proposed openstack-infra/zuul feature/zuulv3: Re-enable test_file_jobs https://review.openstack.org/429115 | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!
