summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
8 daysAdd tox-py37 jobHEADmasterPaul Belanger
This is helpful for people that would like to use the py37 target for tox. Change-Id: I03eb4a8164a8e6fe5f75bd5cacc7c95f5428adca Signed-off-by: Paul Belanger <pabelanger@redhat.com> Notes (review): Code-Review+2: Monty Taylor <mordred@inaugust.com> Code-Review+2: Clark Boylan <cboylan@sapwetik.org> Workflow+1: Clark Boylan <cboylan@sapwetik.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Thu, 11 Apr 2019 23:13:02 +0000 Reviewed-on: https://review.openstack.org/651938 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
9 daysRevert "Only alias registries on build nodes"Clark Boylan
This reverts commit 05f20a5396b8a1f463129b99bbe23b8b7862afdd. Apparently skopeo is properly cloud native too and doesn't support ipv6 either. I think it is pulling the same docker distribution/reference/regexp.go lib in and using docker's regex. The error we get from skopeo: time="2019-04-10T15:15:48Z" level=fatal msg="Invalid source name docker://[2607:ff68:100:54:f816:3eff:fef2:fc69]:5000/zuul/nodepool:latest: invalid reference format" Change-Id: I6f916574c9f46e8fdd2464465e2b36ecf8719b16 Notes (review): Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Code-Review+2: Jeremy Stanley <fungi@yuggoth.org> Workflow+1: Jeremy Stanley <fungi@yuggoth.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Wed, 10 Apr 2019 15:46:55 +0000 Reviewed-on: https://review.openstack.org/651579 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
10 daysOnly alias registries on build nodesClark Boylan
We only need to alias registries on the build nodes when running docker. We cannot alias them in /etc/hosts in roles that are expected to run on localhost beacuse /etc/hosts is bindmounted read only on localhost. This assumes that skopeo handles ipv6 properly (which has not been tested). If skopeo does not handle ipv6 properly then we'll need additional fixing. Change-Id: I40e5b1bac5aeaf2d42aa05a72b9ced72b7d222c0 Notes (review): Code-Review+2: David Shrewsbury <dshrewsb@redhat.com> Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Workflow+1: Clark Boylan <cboylan@sapwetik.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Wed, 10 Apr 2019 15:08:39 +0000 Reviewed-on: https://review.openstack.org/651393 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
10 daysRevert "Use /etc/hosts with docker registries to handle ipv6"Clark Boylan
This reverts commit a307259776bf9f95b15ca39a532cd37f512f8c5e. We need to additionally handle this on localhost (the zuul executor) where we cannot edit /etc/hosts. At least I don't think we can. We also need to handle the case where buildset_regsitry is not yet defined. Change-Id: I4928f7fcf58e88cf360de253f01b16546220aace Notes (review): Code-Review+2: David Shrewsbury <dshrewsb@redhat.com> Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Workflow+1: Andreas Jaeger <jaegerandi@gmail.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Tue, 09 Apr 2019 17:42:08 +0000 Reviewed-on: https://review.openstack.org/651332 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
10 daysMerge "Use /etc/hosts with docker registries to handle ipv6"Zuul
10 daysMerge "Allow user to set ara_report_executable"Zuul
11 daysMerge "Add retries to promote-docker-image"Zuul
11 daysUse /etc/hosts with docker registries to handle ipv6Clark Boylan
Docker doesn't appear to understand properly escaped ipv6 addrs in its "urls". Address this by adding /etc/hosts entries for any buildset_registry that is specified by an ip address (v4 or v6). This allows us to use a named alias instead of the ipv6 address. An example failure for posterity: "[2607:ff68:100:54:f816:3eff:fe7c:e98a]:5000/zuul/nodepool:latest" is not a valid repository/tag: invalid reference format Change-Id: Id865dc7d3382174b61f9eaa76e29b637a85f5142 Notes (review): Code-Review+2: David Shrewsbury <dshrewsb@redhat.com> Code-Review+2: Monty Taylor <mordred@inaugust.com> Workflow+1: Clark Boylan <cboylan@sapwetik.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Tue, 09 Apr 2019 16:23:29 +0000 Reviewed-on: https://review.openstack.org/650968 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
13 daysUse ipwrap filter in registry rolesJames E. Blair
We need to escape some ipv6 addresses in URLs. Change-Id: Ica5fe73dd65e138cdc4817de3903cdd271402941 Notes (review): Code-Review+2: Clark Boylan <cboylan@sapwetik.org> Code-Review+2: Paul Belanger <pabelanger@redhat.com> Code-Review+2: Ian Wienand <iwienand@redhat.com> Workflow+1: Ian Wienand <iwienand@redhat.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Sun, 07 Apr 2019 23:46:16 +0000 Reviewed-on: https://review.openstack.org/650473 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-04-02Fix error in pull-from-intermediate-registryJames E. Blair
A recent change to make this safer is causing the error: The conditional check 'metadata in item and item.metadata.type | default('') == 'container_image'' failed. The error was: error while evaluating conditional (metadata in item and item.metadata.type | default('') == 'container_image'): 'metadata' is undefined Change-Id: Ib709996dc950466a3673c422cd288ba874187f5c Notes (review): Code-Review+2: Monty Taylor <mordred@inaugust.com> Code-Review+2: Clark Boylan <cboylan@sapwetik.org> Workflow+1: Clark Boylan <cboylan@sapwetik.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Tue, 02 Apr 2019 23:39:49 +0000 Reviewed-on: https://review.openstack.org/649475 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-04-02Exclude linux_x86_64 wheels from upload to PyPITim Burke
...who would just reject them with Binary wheel '...' has an unsupported platform tag 'linux_x86_64'. anyway. Change-Id: Ie656de99ec1a7b00490f99b89dfc33d5e73ad079 Notes (review): Code-Review+2: James E. Blair <corvus@inaugust.com> Code-Review+2: Jeremy Stanley <fungi@yuggoth.org> Workflow+1: Jeremy Stanley <fungi@yuggoth.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Tue, 02 Apr 2019 22:19:11 +0000 Reviewed-on: https://review.openstack.org/649455 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-04-02Merge "Add parameter to upload-git-mirror to specify ssh host key"Zuul
2019-04-02Merge "Add trailing slash for log url"Zuul
2019-04-01Add parameter to upload-git-mirror to specify ssh host keyDavid Moreau Simard
If we attempt to push a mirror to a host we've never connected to before, it won't be in the SSH known hosts and the mirror will fail. This makes a new host_key parameter required and the role takes care of setting it up in the known_hosts for the duration of the job. Change-Id: I4bd40a289003fe3e88c9af4029576236c064fc3d Depends-On: https://review.openstack.org/#/c/649183/ Notes (review): Code-Review+2: James E. Blair <corvus@inaugust.com> Code-Review+2: Jeremy Stanley <fungi@yuggoth.org> Workflow+1: Jeremy Stanley <fungi@yuggoth.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Tue, 02 Apr 2019 21:22:24 +0000 Reviewed-on: https://review.openstack.org/649033 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-30Add trailing slash for log urlPaul Belanger
Both on logs.o.o and vexxhost swift object-storage, without a trailing slash, a request will get 301 to new location with trailing slash. By adding a trailing slash here, and since this is usually a directory, we can avoid a 301 redirect for browsers. Note, zuul_return for zuul upload-logs and upload-logs-swift does include trailing slash. Change-Id: Ie58f3922680806a5c1865a44bb379ef66e2992fd Signed-off-by: Paul Belanger <pabelanger@redhat.com> Notes (review): Code-Review+2: Tobias Henkel <tobias.henkel@bmw.de> Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Workflow+1: Andreas Jaeger <jaegerandi@gmail.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Tue, 02 Apr 2019 11:27:46 +0000 Reviewed-on: https://review.openstack.org/648837 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-30Don't create bindep venv if bindep_file is not foundPaul Belanger
There is no need to install bindep, if we don't have a bindep file. Change-Id: I33685e4905ceff23a6b772163ffce1a76143d2eb Signed-off-by: Paul Belanger <pabelanger@redhat.com> Notes (review): Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Code-Review+2: Monty Taylor <mordred@inaugust.com> Workflow+1: Monty Taylor <mordred@inaugust.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Mon, 01 Apr 2019 15:04:07 +0000 Reviewed-on: https://review.openstack.org/648833 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-29Merge "Handle no metadata in zuul artifact items"Zuul
2019-03-29Allow user to set ara_report_executablePaul Belanger
Default to 'ara' for the executable but also allow for a user to use the full path if they want. Change-Id: I26aac0d25f071b65b20f97622836abf56e65cebc Signed-off-by: Paul Belanger <pabelanger@redhat.com> Notes (review): Code-Review+2: David Moreau Simard <dmsimard@redhat.com> Code-Review+2: Joshua Hesketh <josh@nitrotech.org> Workflow+1: Joshua Hesketh <josh@nitrotech.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Tue, 09 Apr 2019 12:58:29 +0000 Reviewed-on: https://review.openstack.org/648773 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-29Merge "Fix typo in upload-git-mirror README"Zuul
2019-03-29Merge "Add a job that runs the upload-git-mirror role"Zuul
2019-03-29Merge "Add a role to mirror a git repository to a remote git server"Zuul
2019-03-28Merge "stage-output: fix the archiving of all files"Zuul
2019-03-28Fix typo in upload-git-mirror READMEDavid Moreau Simard
Change-Id: I71db9faa488ce496862e1487e615401df467909f Notes (review): Code-Review+2: Monty Taylor <mordred@inaugust.com> Code-Review+2: Ian Wienand <iwienand@redhat.com> Workflow+1: Ian Wienand <iwienand@redhat.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Fri, 29 Mar 2019 08:51:52 +0000 Reviewed-on: https://review.openstack.org/648423 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-28Add a job that runs the upload-git-mirror roleDavid Moreau Simard
This new job can be used by projects to mirror their repository to a remote git server. Change-Id: I6c51a6152f546dfdad2d0bfe260e8864e1803f8c Notes (review): Code-Review+2: James E. Blair <corvus@inaugust.com> Code-Review+2: Monty Taylor <mordred@inaugust.com> Workflow+1: Monty Taylor <mordred@inaugust.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Fri, 29 Mar 2019 08:51:51 +0000 Reviewed-on: https://review.openstack.org/648230 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-26Merge "Optionally silence git in mirror-workspace-git-repos"Zuul
2019-03-26Merge "run-test-command: support list in test_command variable"Zuul
2019-03-26Merge "Pin nodejs package to upstream repo"Zuul
2019-03-26Add a role to mirror a git repository to a remote git serverDavid Moreau Simard
This role is meant to replicate a successfully tested git repository to a remote git server over SSH during the POST pipeline. Change-Id: I562802ede7358c809c915f09f229884d81cc5b31 Depends-On: https://review.openstack.org/643435 Notes (review): Code-Review+2: James E. Blair <corvus@inaugust.com> Code-Review+2: Monty Taylor <mordred@inaugust.com> Workflow+1: Monty Taylor <mordred@inaugust.com> Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Workflow+1: Andreas Jaeger <jaegerandi@gmail.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Fri, 29 Mar 2019 08:51:50 +0000 Reviewed-on: https://review.openstack.org/643394 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-26Merge "Add the tox_install_bindep option to the tox job"Zuul
2019-03-25Organize documentation by subject areaJames E. Blair
This splits all of the current job and role documentation into files by subject area so that jobs and roles are easier for users to find. This will require that any future new jobs or roles add a line to the appropriate area of the documentation, since that can no longer be done automatically. A linter check is added to ensure that every job and role continue to be documented. After this refactor, we can begin to enhance the documentation pages so that they include narrative documentation and subsections. Change-Id: Ia6f0e89b57e3cb0d7d1745206384c946506d7ea0 Notes (review): Code-Review+2: Ian Wienand <iwienand@redhat.com> Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Workflow+1: Andreas Jaeger <jaegerandi@gmail.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Tue, 26 Mar 2019 06:51:52 +0000 Reviewed-on: https://review.openstack.org/645955 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-22Minor improvements to docker-image doc structureJames E. Blair
Add a local table of contents and adjust the outline so that it makes sennse. Change-Id: I10fab5eb05e5823b405f4efd410df0f66b58c537 Notes (review): Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Code-Review+2: Monty Taylor <mordred@inaugust.com> Workflow+1: Monty Taylor <mordred@inaugust.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Mon, 25 Mar 2019 18:17:13 +0000 Reviewed-on: https://review.openstack.org/645897 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-22stage-output: fix the archiving of all filesLuigi Toscano
The archival task currently relies on the content of all_sources, but some files are renamed afterwards if their extensions match one of the special extension of the list. This means that few files from all_sources are not found and then not compressed. Change then the logic: simply discover all files inside logs and compress all of them. Change-Id: I7d34d7d90849736b7b842c0bdd67492816f98ebc Notes (review): Code-Review+2: James E. Blair <corvus@inaugust.com> Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Workflow+1: Andreas Jaeger <jaegerandi@gmail.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Thu, 28 Mar 2019 18:29:00 +0000 Reviewed-on: https://review.openstack.org/645239 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-21Add download artifact roleJames E. Blair
This role can be used to download a previously built artifact. Requires a Zuul API endpoint. Change-Id: I5dd88f67bfa383f5f2bc0cfcc3b2346def796ae7 Notes (review): Code-Review+2: Clark Boylan <cboylan@sapwetik.org> Code-Review+2: Ian Wienand <iwienand@redhat.com> Code-Review+2: Jeremy Stanley <fungi@yuggoth.org> Workflow+1: Jeremy Stanley <fungi@yuggoth.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Fri, 22 Mar 2019 17:26:13 +0000 Reviewed-on: https://review.openstack.org/645384 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-21Add fetch-sphinx-tarball roleJames E. Blair
This is a new artifact-aware method of fetching sphinx tarballs, meant to be used in docs promote jobs. Change-Id: I9a01af9e36b959c4fa42f3c41b548c87bf2e1759 Notes (review): Code-Review+2: Clark Boylan <cboylan@sapwetik.org> Code-Review+2: Ian Wienand <iwienand@redhat.com> Code-Review+2: Jeremy Stanley <fungi@yuggoth.org> Workflow+1: Jeremy Stanley <fungi@yuggoth.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Fri, 22 Mar 2019 17:26:12 +0000 Reviewed-on: https://review.openstack.org/645346 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-20Add retries to promote-docker-imageJames E. Blair
This should make this step more robust to remote failures. Change-Id: I3f3d643ac5285027bda909ac6d55d8959a4b4f79 Notes (review): Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Code-Review+2: Clark Boylan <cboylan@sapwetik.org> Workflow+1: Clark Boylan <cboylan@sapwetik.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Mon, 08 Apr 2019 21:41:29 +0000 Reviewed-on: https://review.openstack.org/644911 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-19Move chdir under args for shell taskPaul Belanger
This should fix a syntax issue on ansible 2.7. Change-Id: I006ff64c40875b8f1edd1e9f9bdfe509e2bdb295 Signed-off-by: Paul Belanger <pabelanger@redhat.com> Notes (review): Code-Review+2: Jeremy Stanley <fungi@yuggoth.org> Code-Review+2: Ian Wienand <iwienand@redhat.com> Workflow+1: Ian Wienand <iwienand@redhat.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Tue, 19 Mar 2019 23:45:35 +0000 Reviewed-on: https://review.openstack.org/644696 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-18Handle no metadata in zuul artifact itemsClark Boylan
When pulling from intermediate registries we check zuul for artifacts of a certain type. Unfortunately we do so blindly without checking that the metadata field exists for the artifact. These leads to errors like: "msg": "The conditional check 'item.metadata.type | default('') == 'container_image'' failed. The error was: error while evaluating conditional (item.metadata.type | default('') == 'container_image'): 'dict object' has no attribute 'metadata' http://logs.openstack.org/12/643712/1/gate/opendev-buildset-registry/1016e6e/job-output.txt.gz#_2019-03-18_19_28_39_060210 Address this by checking the metadata field prior to accessing it. Change-Id: I02bbeddccdda836fc313eccce09e4cb0beb6262a Notes (review): Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Code-Review+2: James E. Blair <corvus@inaugust.com> Workflow+1: James E. Blair <corvus@inaugust.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Fri, 29 Mar 2019 20:43:44 +0000 Reviewed-on: https://review.openstack.org/644428 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-18buildset registry: fix proxy_port error in push/pull rolesJames E. Blair
This was copy/pasta from the use_buildset_registry role; the intermediate registry has no proxy_port, and the push/pull operations don't need to use the proxy buildset registry, so remove both entries from the docker config. Change-Id: I7c2d57d027e457f4f093497938574624cd5a444c Notes (review): Code-Review+2: Clark Boylan <cboylan@sapwetik.org> Workflow+1: Clark Boylan <cboylan@sapwetik.org> Code-Review+2: James E. Blair <corvus@inaugust.com> Code-Review+2: Tobias Henkel <tobias.henkel@bmw.de> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Mon, 18 Mar 2019 17:35:35 +0000 Reviewed-on: https://review.openstack.org/644322 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-18buildset registry: don't put skopeo creds on command lineJames E. Blair
Use the docker user config file rather than the skopeo command line when performing skopeo push/pull operations. This should allow us to log the command. Change-Id: If6b1f3ab34461d77e619b188f48c5d209df7afce Notes (review): Code-Review+2: Monty Taylor <mordred@inaugust.com> Code-Review+2: Clark Boylan <cboylan@sapwetik.org> Workflow+1: Clark Boylan <cboylan@sapwetik.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Mon, 18 Mar 2019 16:39:41 +0000 Reviewed-on: https://review.openstack.org/644241 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-18Update zuul ansible locationJames E. Blair
With multi-ansible support, the location of the zuul plugins/modules has moved. Change-Id: I8e2cf1f2276bca5a912fed52062628b3b9d0d6d9 Notes (review): Code-Review+2: Clark Boylan <cboylan@sapwetik.org> Code-Review+2: Tobias Henkel <tobias.henkel@bmw.de> Workflow+1: Tobias Henkel <tobias.henkel@bmw.de> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Mon, 18 Mar 2019 16:34:11 +0000 Reviewed-on: https://review.openstack.org/644266 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-15Merge "Document how to build a buildset registry"Zuul
2019-03-15Document how to build a buildset registryJames E. Blair
Change-Id: I57e6ace5f6731045b8043995b18835a499d2250c Notes (review): Code-Review+2: David Shrewsbury <dshrewsb@redhat.com> Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Workflow+1: Andreas Jaeger <jaegerandi@gmail.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Fri, 15 Mar 2019 16:32:29 +0000 Reviewed-on: https://review.openstack.org/643167 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-15Fix exec quoting in release remove-gpgkey roleThierry Carrez
Between YAML, Ansible and Shell unpacking that '\;' this should work. Change-Id: If6a7affc2f1e2a3ac086d8db9ac3a3051040cc59 Notes (review): Code-Review+2: Jeremy Stanley <fungi@yuggoth.org> Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Workflow+1: Andreas Jaeger <jaegerandi@gmail.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Fri, 15 Mar 2019 14:36:32 +0000 Reviewed-on: https://review.openstack.org/643585 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-14Merge "Pin nodejs to come from nodesource repo"Zuul
2019-03-14Pin nodejs to come from nodesource repoMonty Taylor
We're installing the nodesource repo, that means we want to install from it even if the distro happens to have a newer version. Change-Id: Ib37615089a2b11b8cc8bdfbe811e5f9cb3d1a529 Notes (review): Code-Review+2: Jeremy Stanley <fungi@yuggoth.org> Code-Review+2: Andreas Jaeger <jaegerandi@gmail.com> Workflow+1: Andreas Jaeger <jaegerandi@gmail.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Thu, 14 Mar 2019 19:05:36 +0000 Reviewed-on: https://review.openstack.org/643397 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-14Support ~/.gnupg subdirs in remove-gpgkey roleJeremy Stanley
Newer versions of GNU Privacy Guard place some files in a private-keys-v1.d subdirectory of ~/.gnupg so calling shred on them needs extra care (shred has no recursive option). Instead of relying on globbing, use find to filter to a list of files under that tree so that shredding them will still work. Change-Id: I69ed78b1b6d642d71b5e426c9ed254b3e5097ae3 Notes (review): Code-Review+2: James E. Blair <corvus@inaugust.com> Code-Review+2: Monty Taylor <mordred@inaugust.com> Workflow+1: Monty Taylor <mordred@inaugust.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Thu, 14 Mar 2019 16:10:22 +0000 Reviewed-on: https://review.openstack.org/643328 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-11Add no_log entries to skopeo copy commandsJames E. Blair
Now that these work, we should disable logging because the password appears in the command. Change-Id: I0c5d0be9bffb48bb576f61b7ff19f4451353b7e2 Notes (review): Code-Review+2: Clark Boylan <cboylan@sapwetik.org> Code-Review+2: Jeremy Stanley <fungi@yuggoth.org> Workflow+1: James E. Blair <corvus@inaugust.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Mon, 11 Mar 2019 23:57:44 +0000 Reviewed-on: https://review.openstack.org/642574 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-08Revert "Docker: use the buildset registry if defined"James E. Blair
This reverts commit 3fa0c21024844d501f72dccfb14782b3c9bff79f. It makes more sense to put this in jobs that know about the intermediate registry. Change-Id: I2f64b3a0a7cf66b76597c607b5bee06189c8a321 Notes (review): Code-Review+2: Monty Taylor <mordred@inaugust.com> Code-Review+2: Clark Boylan <cboylan@sapwetik.org> Workflow+1: Clark Boylan <cboylan@sapwetik.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Fri, 08 Mar 2019 22:09:44 +0000 Reviewed-on: https://review.openstack.org/642150 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-07Docker: use the buildset registry if definedJames E. Blair
If the docker build jobs see that a buildset_registry is defined (i.e., they are running in a job graph where an earlier job ran a buildset registry) automatically use that registry. Change-Id: Ied7730b793a02204921a2e76f8474fcce534ac77 Notes (review): Code-Review+2: Monty Taylor <mordred@inaugust.com> Code-Review+2: Jeremy Stanley <fungi@yuggoth.org> Workflow+1: Jeremy Stanley <fungi@yuggoth.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Thu, 07 Mar 2019 23:14:37 +0000 Reviewed-on: https://review.openstack.org/641805 Project: openstack-infra/zuul-jobs Branch: refs/heads/master
2019-03-01Fix docker image retagJames E. Blair
The missing "." from the content-type headers was causing us to downgrade image manifests from v1 to to v2 when promoting them. That can cause problems since many tools no longer support v1 manifests. Notably, the docker registry is one of them. Change-Id: I35a5d29933669b80b49578587ebe6db8e13e62ad Notes (review): Code-Review+2: Clark Boylan <cboylan@sapwetik.org> Code-Review+2: James E. Blair <corvus@inaugust.com> Workflow+1: James E. Blair <corvus@inaugust.com> Code-Review+2: Jeremy Stanley <fungi@yuggoth.org> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Sat, 02 Mar 2019 00:50:29 +0000 Reviewed-on: https://review.openstack.org/640558 Project: openstack-infra/zuul-jobs Branch: refs/heads/master