January 2021 - Zuul-discuss - lists.opendev.org

teaming up with patternfly team on building a generic ANSI/terminal component
by Sorin Sbarnea 16 Jan '21

16 Jan '21

As we had lots of discussions recently around ANSI processing in zuul, with multiple approaches for enabling ANSI in zuul I realized that maybe we should aim to resolve this at patternfly level, so any application using it may benefit from it. They have very good UX designers, something that we kinda miss around here. Few days ago I raised https://github.com/patternfly/patternfly-design/issues/955 and they want some extra feedback on this. I would like to invite those interested to watch and reply on this ticket, maybe we can end-up with an awesome solution. Cheers, -- /sorin

1 1

[yikes - marketing] Mini-Announcements/Social
by Jimmy McArthur 15 Jan '21

15 Jan '21

Hi everyone - We'd love to get some announcements out to help bring some notice and attention to the hard work the Zuul Community is doing. Generally we do this around big releases, but there's currently a bit of time until the Zuul 4 release. In the meantime, we'd really like to get some ideas from YOU - the community - on what we can help promote. We're not experts on CI/CD, so some context around what you would like to see promoted would be greatly helpful as well. For example, we'd love to push out some notices on: Nodepool 3.14.0 release New Elasticsearch feature Growth of the community/commercial support with the new Acme Gating and existing Vexxhost self-service The more context we can get the better. If there's some other new/in-the-works feature, please let us know. Cheers, Jimmy

4 5

My new role at Acme Gating
by jim＠acmegating.com 15 Jan '21

15 Jan '21

Hi, I'm pleased to announce that I have started a company to provide support, custom development, and consulting for Zuul. It's called Acme Gating. This isn't a forum for advertisement, so I'll keep this brief, though I do think it's important for folks to know what we all bring to the table as members of the community. My hope is that by growing the company, I can help support new Zuul users and thereby grow the Zuul community, all while continuing to support the Zuul project. There's a website[1] and twitter[2]. Please get in touch if there's anything you'd like to discuss. I look forward to continuing to be a part of this great community we've built. -Jim [1] https://acmegating.com/ [2] https://twitter.com/acmegating

3 3

migrating zuul-jobs towards an ansible collection
by Sorin Sbarnea 14 Jan '21

14 Jan '21

Does anyone have any reasons to oppose a gradual transition towards making zuul-jobs repository a real Ansible collection? If we do, we make it much easier to deploy and re-use these roles in order areas. We already followed most of the guidelines, the only real issue is around role names, which are not allowed to use use dashes, only underlines are supported. While collections are available only with ansible 2.9+ (2.8 support was only experimental), it does not mean that we cannot use the same code with older versions of Ansible. IMHO, we should not wait until the minimal version of Ansible we support would become 2.9 and just start to make changes towards building it as a collection. Regarding role re-names, probably we could make use of symlinks for keeping the old names as aliases and avoid breaking consumers. -- /sorin

2 1

authentication in the web UI: an update
by Matthieu Huin 14 Jan '21

14 Jan '21

Hello Zuul Community, TL;DR: "git review 769943 && cd doc/source/examples && docker-compose up", "firefox http://localhost:9000" and give feedback please! Long version: The changes implementing support for authentication-related features in the web UI should be ready for review. Since several parties voiced their interest in this, I'd appreciate community feedback so it can move forward to integration sooner than later. You can find the patch chain at this URL: https://review.opendev.org/q/topic:%22fffaff%22+(status:open%20OR%20status:… (do not mind the random topic name) The proposed features are: - Tenant scoped login ( https://review.opendev.org/c/zuul/zuul/+/734082 and https://review.opendev.org/c/zuul/zuul/+/735586 ) ie it is possible to associate one specific identity provider per tenant. - Once logged in, a User modal can be toggled on/off from the top navigation bar. The modal holds basic info on the user such as her name, username (with a pretty wizard hat next to it if she is allowed to perform admin actions as per the tenant's access rules). More importantly, you can also see there information on the user's token such as its expiry time, and the full token should the user want to use it in zuul-client. I've also thrown in a clipboard button that lets you copy a boilerplate command to use zuul-client with this token, and the right API endpoint (sometimes difficult to figure out for end users of tenant deployments). - Dequeue a live change from the status page ( https://review.opendev.org/c/zuul/zuul/+/734850 ) - Re-enqueue a buildset from the buildset's page ( https://review.opendev.org/c/zuul/zuul/+/736772 ) - Create a autohold request from a build's page ( https://review.opendev.org/c/zuul/zuul/+/768115 ) - Autoholds page, similar to the builds or buildsets pages ( https://review.opendev.org/c/zuul/zuul/+/768199 ) In order to simplify testing, I have documented how to configure a zuul instance to use Google OAuth or Keycloak as an Identity Provider in https://review.opendev.org/c/zuul/zuul/+/734082 . If you are familiar with other OpenID Connect Providers, it'd be great if you could ensure they play nice with zuul as well. If you'd rather not bother with setting up another service to test things, I have also modified the Docker compose used by zuul-quick-start, in https://review.opendev.org/c/zuul/zuul/+/769943 . It adds a keycloak container to the mix, and configures gerrit and zuul to use it as their identity provider. It also comes with predefined access rules and users as examples. This is much more straightforward, but requires a few tweaks before using it: * you need to map the 'keycloak' alias to localhost in /etc/hosts. This could be solved if there was a way to forward traffic inbound to http://localhost:8082 to the keycloak container, within other containers. * In doc/source/examples/docker-compose.yaml, you can comment out line 92 and uncomment ll.94-97 to build the zuul-web container based on the patch chain. This is recommended, but also increases significantly the duration of the build phase when doing "docker-compose up". * If you don't edit docker-compose.yaml, you will have to run a dev server of the UI: "cd web && REACT_APP_ZUUL_API='http://localhost:9000/api/' yarn react-scripts start". This will however trigger CORS-related errors with the admin API in your browser; with chrome you can disable CORS checks (do that only for testing!) by running chrome with the --disable-web-security CLI option. Note that the CORS related errors are fixed in the patch chain; they don't appear if building the zuul-web container as discussed above. Apologies for the big wall of text, but I put in the effort so that you don't have to. Do not hesitate to ping me on IRC (mhu) if you need help with this. I'm looking forward to community feedback, and hope we can get these handy features merged soon! Cheers, -- Matthieu Huin Senior Software Developer Red Hat <https://www.redhat.com> <https://red.ht/sig>

2 1

Only a few hours left: 2021 Board elections and Bylaws amendments
by Allison Price 14 Jan '21

14 Jan '21

Hi everyone, The 2021 Individual Director elections are currently open. All members who are eligible to vote should have received an email ballot earlier this week. You can review the candidates here: https://www.openstack.org/election/2021-individual-director-election/Candid… <https://www.openstack.org/election/2021-individual-director-election/Candid…>. If you are not currently a member of the Open Infrastructure Foundation, you can join here to vote in next year’s elections: https://openinfra.dev/join <https://openinfra.dev/join> This year, the election includes a set of amendments to the Foundation’s Bylaws. The amendments were approved unanimously by the Foundation Board in 2020. As a member class, the Individual Members must also approve these amendments. You can find more information in this mailing list post by Jonathan Bryce: http://lists.openstack.org/pipermail/foundation/2021-January/002939.html <http://lists.openstack.org/pipermail/foundation/2021-January/002939.html> The deadline to vote is this Friday, January 15 at 1800 UTC / 12pm CST. Please let me know if you have any questions. Allison Allison Price Open Infrastructure Foundation allison(a)openstack.org <mailto:allison@openstack.org>

1 0

[Diversity] Diversity &Inclusion WG Meeting reminder
by Amy Marrich 11 Jan '21

11 Jan '21

The Diversity & Inclusion WG invites members of all OSF projects to our meeting today, at 17:00 UTC in the #openstack-diversity channel. The agenda can be found at https://etherpad.openstack.org/p/diversity-wg-agenda. Please feel free to add any other topics you wish to discuss at the meeting. Thanks, Amy (spotz)

1 0

Project lead election
by jim＠acmegating.com 05 Jan '21

05 Jan '21

Hi, The position of Zuul Project Lead is an elected position described in our governance document[1]. I currently hold the position, and would be happy to continue in that position for another year. If elected, I plan to continue my current hands-off approach. I believe that all of the Zuul Maintainers are empowered to collectively decide on and execute our vision for the project. My purpose is to help articulate that vision when necessary, drive the process of attaining consensus, and be a point of contact and representative for the project in circumstances where a single person is needed (but in those cases, I promise to share as much of that work as possible with the rest of the team). I have uploaded a change[2] to update the expiration date of my term. If any other Zuul Maintainers would like to nominate themselves for the position, please upload a similar change and send a reply to this message to this list. The nomination period will close on January 14, 2021. If there are other candidates, we will hold a Condorcet election at that time. -Jim [1] https://zuul-ci.org/docs/zuul/reference/governance.html#zuul-project-lead [2] https://review.opendev.org/769420

1 0