| *** rfolco has quit IRC | 00:00 | |
| *** tosky has quit IRC | 00:29 | |
| openstackgerrit | Ian Wienand proposed zuul/zuul-jobs master: Make opensuse-15 jobs non-voting https://review.opendev.org/695827 | 00:39 |
|---|---|---|
| openstackgerrit | Ian Wienand proposed zuul/zuul-jobs master: zuul-tests.d: add autogeneration note https://review.opendev.org/695828 | 00:39 |
| openstackgerrit | Ian Wienand proposed zuul/zuul-jobs master: container-roles test: remove duplicated jobs https://review.opendev.org/695829 | 00:39 |
| openstackgerrit | Ian Wienand proposed zuul/zuul-jobs master: update-test-platforms.py : handle non-voting jobs https://review.opendev.org/695830 | 00:39 |
| openstackgerrit | Ian Wienand proposed zuul/zuul-jobs master: Make opensuse-15 job voting again https://review.opendev.org/695831 | 00:40 |
| ianw | ahh, that's right, openvswitch is a pain for centos-8 | 00:55 |
| *** rfolco has joined #zuul | 00:55 | |
| ianw | we might be able to cheekily use rdo-trunk | 00:55 |
| *** rfolco has quit IRC | 00:59 | |
| openstackgerrit | Ian Wienand proposed zuul/zuul-jobs master: update-test-platforms.py : handle non-voting jobs https://review.opendev.org/695830 | 01:05 |
| openstackgerrit | Ian Wienand proposed zuul/zuul-jobs master: Make opensuse-15 job voting again https://review.opendev.org/695831 | 01:06 |
| openstackgerrit | Ian Wienand proposed zuul/zuul-jobs master: [wip] see if rdo trunk repos work for openvswitch on centos8 https://review.opendev.org/695833 | 01:06 |
| openstackgerrit | Ian Wienand proposed zuul/zuul-jobs master: Use RDO trunk repos work for openvswitch on centos8 https://review.opendev.org/695833 | 01:27 |
| openstackgerrit | Ian Wienand proposed zuul/zuul-jobs master: update-test-platforms.py : handle non-voting jobs https://review.opendev.org/695830 | 01:27 |
| openstackgerrit | Ian Wienand proposed zuul/zuul-jobs master: Make opensuse-15 job voting again https://review.opendev.org/695831 | 01:27 |
| *** decimuscorvinus has quit IRC | 01:27 | |
| *** decimuscorvinus has joined #zuul | 01:30 | |
| *** decimuscorvinus has joined #zuul | 01:33 | |
| *** jamesmcarthur has joined #zuul | 02:07 | |
| *** jamesmcarthur has quit IRC | 02:11 | |
| *** bhavikdbavishi has joined #zuul | 02:35 | |
| *** jamesmcarthur has joined #zuul | 02:38 | |
| *** jamesmcarthur has quit IRC | 02:44 | |
| *** jamesmcarthur has joined #zuul | 03:07 | |
| *** jamesmcarthur has quit IRC | 03:11 | |
| *** jamesmcarthur has joined #zuul | 03:21 | |
| *** jamesmcarthur has quit IRC | 03:34 | |
| *** bolg has joined #zuul | 05:12 | |
| *** raukadah is now known as chkumar|rover | 05:21 | |
| *** pots has quit IRC | 05:39 | |
| *** pots has joined #zuul | 05:39 | |
| *** jkt has quit IRC | 05:52 | |
| *** bolg has quit IRC | 05:54 | |
| *** jkt has joined #zuul | 05:58 | |
| *** bolg has joined #zuul | 06:04 | |
| *** bolg has quit IRC | 06:34 | |
| *** bolg has joined #zuul | 06:45 | |
| *** AJaeger has quit IRC | 07:02 | |
| *** AJaeger has joined #zuul | 07:16 | |
| openstackgerrit | Andreas Jaeger proposed zuul/zuul-jobs master: Use RDO trunk repos work for openvswitch on centos8 https://review.opendev.org/695833 | 07:28 |
| openstackgerrit | Andreas Jaeger proposed zuul/zuul-jobs master: update-test-platforms.py : handle non-voting jobs https://review.opendev.org/695830 | 07:28 |
| openstackgerrit | Andreas Jaeger proposed zuul/zuul-jobs master: Make opensuse-15 job voting again https://review.opendev.org/695831 | 07:28 |
| *** jangutter has joined #zuul | 07:33 | |
| openstackgerrit | Merged zuul/zuul-jobs master: Make opensuse-15 jobs non-voting https://review.opendev.org/695827 | 07:57 |
| *** tosky has joined #zuul | 08:21 | |
| *** themroc has joined #zuul | 08:22 | |
| *** jpena|off is now known as jpena | 08:53 | |
| openstackgerrit | Matthieu Huin proposed zuul/zuul master: [WIP] admin REST API: zuul-web integration https://review.opendev.org/643536 | 09:14 |
| *** saneax has joined #zuul | 09:31 | |
| *** sshnaidm|off is now known as sshnaidm | 10:18 | |
| *** bolg has quit IRC | 10:56 | |
| openstackgerrit | Fabien Boucher proposed zuul/zuul master: Pagure: prevent connector data fetching from API when not needed https://review.opendev.org/695884 | 11:08 |
| *** pcaruana has joined #zuul | 11:14 | |
| *** openstack has joined #zuul | 11:55 | |
| *** ChanServ sets mode: +o openstack | 11:55 | |
| openstackgerrit | Tobias Henkel proposed zuul/nodepool master: Delete images by id https://review.opendev.org/693672 | 11:58 |
| *** rfolco has joined #zuul | 12:07 | |
| openstackgerrit | Tobias Henkel proposed zuul/nodepool master: Support optional post upload hooks https://review.opendev.org/676266 | 12:37 |
| *** rlandy has joined #zuul | 12:51 | |
| *** armstrongs has joined #zuul | 13:14 | |
| *** zbr_ has joined #zuul | 13:18 | |
| *** avass has joined #zuul | 13:20 | |
| *** zbr has quit IRC | 13:22 | |
| *** avass has quit IRC | 13:28 | |
| *** bolg has joined #zuul | 13:53 | |
| *** mhu has joined #zuul | 13:53 | |
| *** jpena is now known as jpena|lunch | 13:59 | |
| openstackgerrit | Fabien Boucher proposed zuul/zuul master: Pagure: prevent connector data fetching from API when not needed https://review.opendev.org/695884 | 14:11 |
| *** armstrongs has quit IRC | 14:18 | |
| *** nhicher has quit IRC | 14:18 | |
| *** nhicher has joined #zuul | 14:19 | |
| *** nhicher has quit IRC | 14:19 | |
| *** nhicher has joined #zuul | 14:20 | |
| *** sgw has joined #zuul | 14:32 | |
| *** jamesmcarthur has joined #zuul | 14:43 | |
| *** jamesmcarthur has quit IRC | 14:44 | |
| *** jamesmcarthur has joined #zuul | 14:44 | |
| openstackgerrit | Tobias Henkel proposed zuul/zuul master: Fix canceling builds in starting phase https://review.opendev.org/684414 | 14:54 |
| *** jpena|lunch is now known as jpena | 14:57 | |
| *** michael-beaver has joined #zuul | 15:39 | |
| *** Goneri has joined #zuul | 15:47 | |
| mhu | hey there, these patches need some workflow love :) https://review.opendev.org/#/c/642408/ and https://review.opendev.org/#/c/684790/ and https://review.opendev.org/#/c/695446/ | 15:50 |
| *** chkumar|rover is now known as raukadah | 15:57 | |
| openstackgerrit | Merged zuul/zuul-jobs master: zuul-tests.d: add autogeneration note https://review.opendev.org/695828 | 16:03 |
| openstackgerrit | Merged zuul/zuul-jobs master: container-roles test: remove duplicated jobs https://review.opendev.org/695829 | 16:05 |
| *** jamesmcarthur has quit IRC | 16:07 | |
| *** openstackstatus has joined #zuul | 16:16 | |
| *** ChanServ sets mode: +v openstackstatus | 16:16 | |
| *** armstrongs has joined #zuul | 16:18 | |
| clarkb | mhu: I'm reading the jwt rfc and I don't think exp implies iat | 16:19 |
| fungi | so many tla | 16:20 |
| clarkb | fungi: indeed | 16:20 |
| clarkb | fungi: https://tools.ietf.org/html/rfc7519#page-10 | 16:20 |
| *** jamesmcarthur has joined #zuul | 16:21 | |
| clarkb | https://review.opendev.org/#/c/642408/32 I'm not sure that follows the spec | 16:21 |
| clarkb | however, I'm also not sure that there is another way to do it without storing state in the database | 16:21 |
| *** armstrongs has quit IRC | 16:22 | |
| *** mattw4 has joined #zuul | 16:23 | |
| *** mattw4 has quit IRC | 16:24 | |
| *** mattw4 has joined #zuul | 16:24 | |
| *** themroc has quit IRC | 16:24 | |
| mhu | clarkb, if token_expiry is set in zuul's config, then zuul will reject a jwt if it is missing the iat claim, since it's the only way to know how old a token is | 16:25 |
| clarkb | mhu: right I get why it is done (and could store state in the db as an alternative), what I don't understand yet is if that is valid per the rfc | 16:26 |
| clarkb | the RFC says it is optional, and rereading the use of optional I believe we may require it | 16:27 |
| clarkb | it is just up to us whether or not we want to require it | 16:27 |
| mhu | clarkb, yes | 16:27 |
| mhu | so I made the assumption we should require it | 16:28 |
| mhu | so that we don't have "eternal" tokens | 16:28 |
| mhu | same reason why exp is considered mandatory by Zuul by default | 16:29 |
| mhu | I believe it's up to how you want to implement it | 16:30 |
| mhu | just like you can add arbitrary application-specific claims | 16:30 |
| clarkb | ya what still isn't 100% clear to me is if an implementation can require optional claims or if an implementation must instead handle the presence of optional claims or work without them | 16:31 |
| mhu | If i understand https://tools.ietf.org/html/draft-ietf-oauth-json-web-token-32#section-4 correctly: | 16:34 |
| mhu | "The set of claims that a JWT must contain to be considered valid is | 16:34 |
| mhu | context-dependent and is outside the scope of this specification. | 16:34 |
| mhu | Specific applications of JWTs will require implementations to | 16:34 |
| mhu | understand and process some claims in particular ways. However, in | 16:34 |
| mhu | the absence of such requirements, all claims that are not understood | 16:34 |
| mhu | by implementations MUST be ignored." | 16:34 |
| mhu | it's free for all :) | 16:34 |
| mhu | or do you mean, what should we do with JWTs that have more claims than Zuul expects? Given that the tokens are not necessarily generated exclusively for Zuul, I'd say it's okay | 16:36 |
| clarkb | ok that clarifies it. We can require iat and exp then and clients just have to deal with it | 16:40 |
| *** jamesmcarthur has quit IRC | 16:43 | |
| openstackgerrit | Fabien Boucher proposed zuul/zuul master: Pagure - Hook calls sources whitelist system https://review.opendev.org/695945 | 16:51 |
| *** jamesmcarthur has joined #zuul | 16:52 | |
| *** igordc has joined #zuul | 17:18 | |
| openstackgerrit | Matthieu Huin proposed zuul/zuul master: [WIP] admin REST API: zuul-web integration https://review.opendev.org/643536 | 17:23 |
| *** jpena is now known as jpena|off | 18:08 | |
| *** bolg has quit IRC | 18:31 | |
| *** igordc has quit IRC | 18:39 | |
| *** jamesmcarthur has quit IRC | 19:26 | |
| *** jamesmcarthur has joined #zuul | 19:27 | |
| *** jamesmcarthur has quit IRC | 19:32 | |
| *** bhavikdbavishi has quit IRC | 19:36 | |
| pabelanger | I cannot remember, are child jobs grouped to the same nodepool region where the parent job ran? | 19:39 |
| *** Goneri has quit IRC | 19:39 | |
| clarkb | pabelanger: yes I believe they are otherwise we (opendev) would have failures between ipv4 and ipv6 clouds with the buildset registry | 19:41 |
| pabelanger | okay thanks, I am testing out a child_job that will download artifact from http server, but think the grouping of all child_jobs to where the parent runs maybe cause us some quota issues | 19:43 |
| *** jamesmcarthur has joined #zuul | 19:48 | |
| *** igordc has joined #zuul | 19:55 | |
| pabelanger | also, is there an example inventory file that might contain the zuul.artifacts variables? https://zuul-ci.org/docs/zuul/user/jobs.html#var-zuul.artifacts | 19:56 |
| clarkb | pabelanger: re quota issues, it will end up serializing them for you | 19:57 |
| clarkb | pabelanger: https://opendev.org/zuul/zuul-jobs/src/branch/master/doc/source/docker-image.rst explains how zuul_return'd artifacts are used in the docker image jobs | 19:58 |
| pabelanger | clarkb: yes, but with multinode jobs, we see some inefficiencies right now with nodepool. So, having jobs in more providers does help in that aspect | 19:58 |
| clarkb | pabelanger: I mean regardless of number of nodes if you are at quota it should serialize those jobs (basically one jobs runs, returns resources, then the next job runs) | 19:59 |
| pabelanger | clarkb: yah, reading that but having issues finding a job that actually publish that info inthe inventory | 19:59 |
| pabelanger | clarkb: yup, that is correct. I am saying serial may show down things signifantly for us | 20:00 |
| pabelanger | slow* | 20:00 |
| clarkb | http://zuul.opendev.org/t/zuul/build/190da92a94d94700a46bdc998bfbc775 is an example job with artifacts | 20:01 |
| clarkb | http://zuul.opendev.org/t/zuul/build/190da92a94d94700a46bdc998bfbc775/log/zuul-info/inventory.yaml is its inventory | 20:02 |
| pabelanger | great, thanks! | 20:03 |
| *** Goneri has joined #zuul | 20:10 | |
| *** jamesmcarthur has quit IRC | 20:15 | |
| *** jamesmcarthur has joined #zuul | 20:15 | |
| *** jamesmcarthur has quit IRC | 20:20 | |
| *** jamesmcarthur has joined #zuul | 20:28 | |
| *** igordc has quit IRC | 20:47 | |
| *** jamesmcarthur has quit IRC | 20:51 | |
| *** jamesmcarthur has joined #zuul | 20:52 | |
| *** igordc has joined #zuul | 20:53 | |
| *** jamesmcarthur has quit IRC | 20:57 | |
| pabelanger | Yay it worked: https://dashboard.zuul.ansible.com/t/ansible/build/93adeee570374b54917a31333be69494 | 21:05 |
| pabelanger | doh, zuul part did | 21:05 |
| pabelanger | I didn't actually publish it to swift | 21:06 |
| pabelanger | lulz | 21:06 |
| *** jamesmcarthur has joined #zuul | 21:23 | |
| clarkb | mhu: can you check my comment on https://review.opendev.org/#/c/684790/8 | 21:28 |
| clarkb | mordred: ^ you +2'd that chagne previously so may want to check it | 21:29 |
| *** pcaruana has quit IRC | 21:38 | |
| clarkb | mhu: also left a couple notes on the jwt expiry change. Nothing worth a -1 but I figure worth checking before we approve anything | 21:41 |
| *** rfolco has quit IRC | 21:56 | |
| *** jamesmcarthur has quit IRC | 22:02 | |
| *** threestrands has joined #zuul | 22:22 | |
| *** mhu has quit IRC | 22:25 | |
| openstackgerrit | Vitaliy Lotorev proposed zuul/zuul master: doc: Clarify that regexp has restricted syntax https://review.opendev.org/695991 | 22:27 |
| *** jamesmcarthur has joined #zuul | 23:01 | |
| *** jamesmcarthur has quit IRC | 23:07 | |
| *** rlandy is now known as rlandy|bbl | 23:13 | |
| *** tosky has quit IRC | 23:36 | |
| clarkb | tobiash_: I think https://review.opendev.org/#/c/684414/5 has a race in it. Details noted inline | 23:57 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!