Thursday, 2019-01-17

openstackgerritDavid Moreau Simard proposed openstack/ara-infra master: Add blog post about new projects in 1.0  https://review.openstack.org/63135600:15
dmsimardapollo13, gvincent: ^ want to give a quick review ? Draft build: http://logs.openstack.org/56/631356/1/check/ara-infra-website/cf8d11b/logs/build/blog/2018/01/16/introducing-new-projects-for-the-upcoming-1.0-release/00:38
dmsimardI already noticed that I put 2018 instead of 2019 for the post date00:39
openstackgerritDavid Moreau Simard proposed openstack/ara-infra master: Add blog post about new projects in 1.0  https://review.openstack.org/63135600:56
Jmainguyblog post looks good, good state of the union01:02
dmsimardJmainguy: oi, thanks. Yes, we're trying to catch up :)01:03
Jmainguymakes me wish I waited until 1.0 to push this out lol, but I am glad I did it anyway, looks like 1.0 addresses the concerns I had01:04
Jmainguymainly isntalled all the dependencies on clients01:04
Jmainguyteam is excited about it, demoing it for them next week, did a limited demo at the end of the day today, its slick01:04
dmsimardI'm going to need to send you stickers at this point :p01:05
JmainguyI live off swag, you over at the tower?01:05
dmsimardno, I am remote from Montreal :)01:05
Jmainguyah nice01:05
dmsimardcold, but nice01:06
Jmainguylol I bet, yeah it gets into the teens next here, but I still wear shorts 365, nothing to complain about01:06
JmainguyI would have to wear pants if I lived up there01:06
dmsimardyeah.. we get moose and snow but thanks to that, there's no nasty critters here :p01:07
dmsimardwhen I see a spider I don't have to fear for my life lol01:08
Jmainguy=)01:08
dmsimardpabelanger: man, we really need an "ara-report" equivalent in 1.0.01:18
dmsimardwanna help ? making you upload these html files makes me sad01:18
*** odyssey4me has quit IRC02:46
*** larsks has quit IRC02:46
*** larsks has joined #ara02:58
openstackgerritDavid Moreau Simard proposed openstack/ara-infra master: Add blog post about new projects in 1.0  https://review.openstack.org/63135603:54
*** weshay has quit IRC05:29
*** jparrill has quit IRC06:49
*** Xaroth has quit IRC07:32
*** gvincent has joined #ara07:58
*** gvincent has quit IRC08:29
*** themroc has joined #ara08:30
*** herald85 has joined #ara09:24
*** odyssey4me has joined #ara09:44
*** gvincent has joined #ara09:53
*** sshnaidm|afk is now known as sshnaidm10:25
apollo13dmsimard: blog looks good10:42
*** odyssey4me has quit IRC10:49
*** irclogbot_0 has quit IRC12:47
*** irclogbot_0 has joined #ara12:56
openstackgerritGuillaume Vincent proposed openstack/ara-web master: Update playbooks page  https://review.openstack.org/63148712:59
*** logan- has joined #ara13:03
pabelangerdmsimard: I am guessing there is a way in html to collapse all the small files into a larger one, then only display the specific section based on url, but my html foo is weak13:16
openstackgerritMerged openstack/ara-web master: Update playbooks page  https://review.openstack.org/63148713:28
dmsimardpabelanger: the new web interface is stateless and can feed on any api server so the current ara-report approach with the sqlite middleware would work13:39
dmsimardthe problem is the use case with swift13:39
dmsimardsince the database is not on the same filesystem, we can't use the same approach because we need to download the database first13:39
dmsimardapollo13: didn't get a chance to test the new permissions patches, I'll do it today13:40
apollo13no worries13:40
dmsimardreally wanted to finish that blog post13:40
dmsimardgvincent: I'm not sure displaying the number of arguments is useful -- in all likelihood this number is going to be always 4013:44
*** irclogbot_0 has quit IRC13:45
openstackgerritGuillaume Vincent proposed openstack/ara-web master: Use flexbox instead of grid in playbook summary  https://review.openstack.org/63149813:49
dmsimardgvincent: maybe we can use that width real estate to display the date the playbook ran on ?13:49
gvincentdmsimard, sure in https://review.openstack.org/631498 I remove the argument box13:50
gvincentI will add the date near the duration13:50
dmsimard++13:50
gvincenthttps://screenshots.firefox.com/J1F9fj0g7S5bjI0t/localhost13:50
dmsimardworks for me13:51
openstackgerritGuillaume Vincent proposed openstack/ara-web master: Use flexbox instead of grid in playbook summary  https://review.openstack.org/63149813:51
gvincentincomplete @dmsimard is status running13:52
gvincentincomplete.yaml playbook in the api13:52
dmsimardgvincent: yes, as it should13:52
dmsimardgvincent: the point of that playbook in the integration test is to be interrupted13:52
dmsimardmid-way through it's execution13:53
gvincentack13:53
*** irclogbot_0 has joined #ara13:53
dmsimardgvincent: FWIW I haven't found a reliable way for ARA to be able to differentiate between a playbook that was interrupted or one that is still running13:54
gvincentack13:54
dmsimardwe mark the playbook as completed if ansible sends us that last hook when the stats are displayed13:55
dmsimardbut if we don't get that last hook, it could be able ansible is still running (i.e, a very long task) or it could have died midway13:55
gvincentsee duration and date in this component: https://screenshots.firefox.com/lXy7ahX2wWSePKhJ/www.distributed-ci.io13:55
gvincentdoes it work for you?13:55
dmsimardgvincent: sure13:56
openstackgerritMerged openstack/ara-infra master: Add blog post about new projects in 1.0  https://review.openstack.org/63135614:11
openstackgerritMerged openstack/ara-web master: Use flexbox instead of grid in playbook summary  https://review.openstack.org/63149815:05
gnupyxhi, i'm very enthousiast to test the futur ara 1.0 and give my feedback15:18
*** etienne has joined #ara15:26
dmsimardgnupyx: \o/15:32
openstackgerritDavid Moreau Simard proposed openstack/ara-infra master: Rename "home" for "about" on the website navigation  https://review.openstack.org/63154616:10
*** herald85 has quit IRC16:39
openstackgerritMerged openstack/ara-infra master: Rename "home" for "about" on the website navigation  https://review.openstack.org/63154616:50
*** gvincent has quit IRC16:53
*** gvincent has joined #ara16:53
openstackgerritDavid Moreau Simard proposed openstack/ara-infra master: Clarify that the git commit and timestamp is for the page  https://review.openstack.org/63156016:54
*** themroc has quit IRC17:19
openstackgerritMerged openstack/ara-infra master: Clarify that the git commit and timestamp is for the page  https://review.openstack.org/63156017:21
openstackgerritDavid Moreau Simard proposed openstack/ara-infra master: WIP: New ARA 1.0 integration jobs  https://review.openstack.org/63030317:30
openstackgerritDavid Moreau Simard proposed openstack/ara-infra master: WIP: New ARA 1.0 integration jobs  https://review.openstack.org/63030317:31
dmsimardapollo13: so how would I create an account ? :p17:40
dmsimardmanage.py createsuperuser ?17:49
dmsimardeh, this is the first time I log in to the django admin for ara-server17:50
dmsimardapollo13: https://review.openstack.org/#/c/631285/ works for me but I'm not sure how to test https://review.openstack.org/#/c/631287/17:56
*** pabelanger has left #ara18:45
*** gvincent has quit IRC19:12
*** gvincent has joined #ara19:12
*** gvincent has quit IRC19:14
apollo13dmsimard: you could test the later by settings read/write_requires_login to true and send remote_user along as header from requests (any username will do)19:48
apollo13actually as a quick test a simple curl with remote_user set would do19:49
apollo13anyways, will see if I can get cleaned that up over the weekend (probably not though)19:50
dmsimardapollo13: no rush, thanks20:04
ara-slackchris435: @chris435 has joined the channel20:17
*** irclogbot_0 has quit IRC20:41
*** irclogbot_0 has joined #ara20:50
*** openstackgerrit has quit IRC20:56
*** mmercer has joined #ara21:18
dmsimardmmercer: there was a blog post today about 1.0: https://ara.recordsansible.org/blog/2019/01/16/introducing-new-projects-for-the-upcoming-1.0-release/21:19
dmsimardwith live demos :)21:19
mmercernice, looking21:20
mmercernot sure why my autojoin wasnt working for this channel, sad.21:20
mmercerill have to fix that xD21:20
*** Daemoen has joined #ara21:21
mmercerthere, now my log is there too.21:21
dmsimardthey turned on channel restrictions because of the whole freenode spam thing21:22
mmercersure, but i id through sasl21:22
dmsimardmy bouncer attempts to join this channel before authenticating with nickserv and I suspect it happens to other folks too21:22
mmercerbut the config got screwed up a few months ago21:22
mmercerso i just readded the autojoins21:22
dmsimard\o/21:22
mmercerdmsimard: not sure why im getting a popup back:  https://api.demo.recordsansible.org/api/v1/playbooks21:24
dmsimardneither am I21:24
dmsimardwe found that out yesterday I think, haven't had the time to fix that yet21:24
mmercerahh,k,   figured youd know about it, but wanted to make sure21:25
mmercerhow are the ansible-playbooks for open stack looking ?21:25
mmercerespecially the all in one xD21:25
dmsimardI'm not sure what you mean21:25
dmsimardyou mean an openstack-ansible playbook through ara 1.0 ?21:25
mmercernah, i just saw you hanging out and contributing in #openstack-ansible a while ago =D21:26
mmerceri was in there discussing issues with the all in one deployment model21:26
dmsimardoh, I'm not very involved in OSA but I'm trying to see what 1.0 would look like already: https://review.openstack.org/#/c/631262/21:27
dmsimardtheir test node doesn't run python3 so it fails pretty quickly21:27
apollo13oh wow, why does django rest framework allow for XSS21:28
dmsimardI should get someone like mnaser to help *cough cough*21:28
mmerceryeah....  that was one of the things i found problematic when i was trying to setup my lab.... i generally prefer C7, and found that c7 was not as well tested/maintained as ubuntu, sadly21:28
dmsimardapollo13: that started showing up very recently -- I would like to say sometime after merging the secret key thing21:28
dmsimardhaven't bisected it yet21:29
apollo13doesn't sound like an ara issue though21:29
mmercerahh, i was going to say... generally django actually is one of the few that *protects* against xss by default21:29
mmercerunless you do something...  strange xD21:29
apollo13exactly21:29
mmerceri thought you were saying the opposite, lol21:30
apollo13sounds like an drf issue, I'll debug and notify the relevant security channels21:30
mmercerwas like 'umm....' xD21:30
apollo13mmercer: not an ara issue in the sense that our code shouldn't be causing that21:30
* mmercer nods21:30
mmerceroooh, i never noticed you were actual RH dmsimard -- nice xD21:31
dmsimardapollo13: drf released a new version yesterday21:32
dmsimardthe timing looks appropriate21:32
dmsimardhttps://github.com/encode/django-rest-framework/releases/tag/3.9.121:32
apollo13Resolve XSS issue in browsable API. #633021:32
apollo13https://github.com/encode/django-rest-framework/issues/633021:32
apollo13lets update :D21:32
dmsimardlet me see21:33
* mmercer cackles21:33
mmercerwell, that explains why apollo is familiar with drf21:33
*** openstackgerrit has joined #ara21:33
openstackgerritFlorian Apolloner proposed openstack/ara-server master: Fixed XSS issue from DRF.  https://review.openstack.org/63165121:33
apollo13mmercer: mhm?21:33
apollo13ups wrong branch21:33
mmercerim not overly familiar with the django community, so i looked you up, lol  'django core contributor'  -- yep, youd definitely know about django * snickers *21:34
openstackgerritFlorian Apolloner proposed openstack/ara-server master: Fixed XSS issue from DRF.  https://review.openstack.org/63165121:34
apollo13dmsimard: ^21:34
Jmainguy=)21:34
apollo13mmercer: hehe, thanks21:35
dmsimardapollo13: is the issue in 3.9.0 only ? or was it present in previous versions21:35
apollo13I remember hearing it recently21:35
apollo13so might be relatively new21:36
dmsimardpinning to a version that released yesterday is a bit harsh if we can help it21:36
dmsimardlooking21:36
apollo13dmsimard: you can downgrade to 3.8.221:37
apollo13so probably !=3.9.0 would do it too21:37
dmsimardapollo13: !=3.9.0 was what I had in mind21:38
apollo13that said I pinned django 2.1.5 the day it was released :þ21:38
mmercerooh, you can do that in requirements ?21:38
mmercerneat, didnt know that21:38
apollo13mmercer: yes, plenty of things nowadays21:38
dmsimardyeah you can pin floor, ceiling and exclude specific versions21:38
apollo13also match python versoins and whatnot21:38
mmerceryeah, i knew about floor/ceiling, didnt know about excludes21:38
mmercerwow, im falling way behind on my python apparently, lol21:38
apollo13tststs ;)21:39
mmerceri only have soooo much time21:40
dmsimardapollo13: ok let's keep >=3.9.1 but can you add a link to the github issue in the commit message ?21:40
openstackgerritFlorian Apolloner proposed openstack/ara-server master: Fixed XSS issue from DRF.  https://review.openstack.org/63165121:40
apollo13mmercer: I hear you21:40
dmsimardmmercer: so you're saying you have a lot of time? :P21:41
mmerceroh yeah... lots... my time is like ++++21:41
* mmercer laughs21:41
apollo13mmercer: I was looking into https://github.com/Supervisor/supervisor/issues/1110#issuecomment-455328704 before :/21:41
dmsimardthat looks like a lot of fun21:45
apollo13indeed, also the fact that supervisor works till back to py 2.4 or so doesn't make it better :D21:45
mmercermmmm.... supervisor needs a supervisor21:46
* mmercer snickers21:46
apollo13systemd ;)21:46
mmercerwould you really want to hand off fd management to systemd? xD21:46
apollo13oh just python2.7 nowadays, no py 2.4 apparently21:46
apollo13mmercer: I like systemd, that said not useable in this usecase21:46
dmsimardno more csrf popups on the api demo21:48
dmsimardthanks guys :)21:48
openstackgerritChandan proposed openstack/ara master: Documentation update to reflect the scalabality issues of static report  https://review.openstack.org/63165621:50
apollo13btw if you are bored feel free to write docs for my patches, I hate writing docs :D21:51
dmsimardapollo13: I can probably take a stab at that first one21:53
dmsimardI'm not sure what a webserver config might look like for that second one21:53
apollo13for instance https://httpd.apache.org/docs/2.4/howto/auth.html#gettingitworking21:53
dmsimardoh wow, a wild rbowen has appeared21:54
apollo13also a RHEL guy?21:55
apollo13you are really like pokemon, literally everywhere ;)21:57
apollo13*scnr*21:57
dmsimardHe's community manager for CentOS now and he's done a lot of work for the apache foundation as well :)21:57
apollo13aaaaah, that's why the name sounded familiar21:58
dmsimardok, so let me get this straight21:58
dmsimardthe authentication doesn't /need/ to be managed by django ? it can be managed by the web server ?21:58
apollo13yes, that is the whole point of external_auth=True21:59
dmsimardok, it makes sense now that I realize that :p21:59
apollo13the reason why it is a flag at all is that otherwise any malicious user could send REMOTE_USER header and be logged in21:59
dmsimardso someone could have apache with mod_ldap or something and it'd work22:00
apollo13yes22:00
apollo13or client ssl certs or, …22:01
apollo13as long as you can send REMOTE_USER22:01
dmsimardand you implemented that in ~50 lines of code across two patches22:01
apollo13maybe even mod_mallon for SAML /o\22:01
apollo13well to be fair, django does most of the heavy lifting22:02
dmsimardto be fair, you rock :p22:02
apollo13it will even autocreate the users so you can then for instance assign playbooks to a user etc22:02
apollo13hehe, thanks22:02
dmsimardI was scared to implement this kind of stuff before 1.0 at all, you exceeded all my expectations :D22:02
apollo13as I said, I was aiming for mvp ;)22:03
dmsimardmost valuable patch ?22:03
apollo13seriously?22:03
apollo13minimum viable product ;)22:04
apollo13but nice combination22:04
dmsimardI knew about mvp, yes, it was a dad joke :p22:05
apollo13puh, I am relieved22:05
dmsimardone of those will leak every once in a while22:05
openstackgerritMerged openstack/ara-server master: Fixed XSS issue from DRF.  https://review.openstack.org/63165122:18
*** etienne has quit IRC22:47
openstackgerritDavid Moreau Simard proposed openstack/ara master: Update versions used in integration tests  https://review.openstack.org/63167722:54
dmsimardansible is really picking up the pace in version releases...22:54
dmsimardthey're up to 2.5.14, 2.6.12 and 2.7.622:54
openstackgerritDavid Moreau Simard proposed openstack/ara master: Update versions used in integration tests  https://review.openstack.org/63167722:55
ara-slacknj.chandu: Sure, please point me to your patches23:21

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!