Hello,
As you may or may not know, FreeIPA demo [1] reset procedure was driven from a
cron script from my work laptop :-) This worked most of the time, but sometimes
did not as my laptop availability was a SPOF here.
This week, I worked on a safer solution and converted my hacky script to a
proper Amazon Lambda [2] executed script, with source stored in a new public
git repo [3]. The reset procedure should be thus much more reliable.
I now also configured a simple check script [5] to check for demo availability
periodically and reset it if it fails, so that people do not have to wait until
next day for demo being fixed.
Hope that helps! Let me know if you have any questions, feedback or further
ideas on improving our public demo.
[1] https://www.freeipa.org/page/Demo
[2] https://aws.amazon.com/lambda/
[3] https://github.com/freeipa/freeipa-demo
[4] https://aws.amazon.com/cloudwatch/
[5] https://github.com/freeipa/freeipa-demo/blob/master/freeipa_org_demo/check.…
--
Martin Kosek <mkosek(a)redhat.com>
Manager, Software Engineering - Identity Management Team
Red Hat, Inc.
Hi all,
I was thinking about improvements to FreeIPA release processes and
related wiki updates. Relevant changes and upgrades to the wiki and it's
plugins [1] that I did recently will may enable us to leverage some of
the new functionality to fully automate the wiki updates.
If I check the release instructions [2] I see lot of manual steps that
prolong the release procedure. I think these could be improved to not
make wiki the bottleneck of full release automation:
1) Downloads - add pointer to new tarball
I would propose moving this information to release page, along with
information/link how we sign the release (or use signature as only mean
of verifying the release). Downloads page could then for example just
simply list links to the 5 most recent releases, utilizing the updated
plugin [3].
This means that the page would *not be changed* during release.
2) Main_Page - add info on new release
This document could again just list most recent 5 releases with [3],
filtered by category. We just need to make sure the Release pages have
some category assigned, which can be done easily if related template
{{ReleaseDate|YYY-MM-DD}} is used on every release (it was missed couple
last releases).
3) News - add similar info as on Main_Page
I see this page is now even obsolete, so we just remove it from [2]
4) Roadmap - add info on new release, check if Roadmap is up to date
This is still valid, but not may be a requirement for the release
person, this is just something we need to do when opening new milestones
or updating the upstream course.
5) Documentation - update links and version numbers
I am actually not sure what version numbers are meant here.
6) Build - update COPR repositories if new ones are introduced or old
abandoned
Same as 4) - something to be done when a new milestone is done,
especially if the release is a major release.
Summary: I think that if we leverage the new wiki capabilities and
changes proposed in this mail, the wiki changes for releasing a minor
FreeIPA release may be just creating the single release page and all
other pages should update automatically themselves.
[1] https://github.com/freeipa/freeipa-wiki
[2] https://www.freeipa.org/page/Release#Wiki_pages_to_be_updated
[3] https://www.mediawiki.org/wiki/Extension:DynamicPageList_(Wikimedia)
--
Martin Kosek <mkosek(a)redhat.com>
Manager, Software Engineering - Identity Management Team
Red Hat, Inc.
URL: https://github.com/freeipa/freeipa/pull/1417
Author: tiran
Title: #1417: [Backport][ipa-4-6] Include ipa_krb5.h without util prefix
Action: opened
PR body:
"""
This PR was opened automatically because PR #1415 was pushed to master and backport to ipa-4-6 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1417/head:pr1417
git checkout pr1417
URL: https://github.com/freeipa/freeipa/pull/1414
Author: tiran
Title: #1414: [Backport][ipa-4-6] Custodia uninstall: Don't fail when LDAP is down
Action: opened
PR body:
"""
This PR was opened automatically because PR #1410 was pushed to master and backport to ipa-4-6 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1414/head:pr1414
git checkout pr1414
URL: https://github.com/freeipa/freeipa/pull/1410
Author: tiran
Title: #1410: Custodia uninstall: Don't fail when LDAP is down
Action: opened
PR body:
"""
The Custodia instance is removed when LDAP is already shut down. Don't
fail and only remove the key files from disk. The server_del command
takes care of all Custodia keys in LDAP.
https://pagure.io/freeipa/issue/7318
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1410/head:pr1410
git checkout pr1410
URL: https://github.com/freeipa/freeipa/pull/1413
Author: tiran
Title: #1413: [Backport][ipa-4-6] Require python-ldap 3.0.0b2
Action: opened
PR body:
"""
This PR was opened automatically because PR #1390 was pushed to master and backport to ipa-4-6 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1413/head:pr1413
git checkout pr1413
URL: https://github.com/freeipa/freeipa/pull/1390
Author: tiran
Title: #1390: Require python-ldap 3.0.0b2
Action: opened
PR body:
"""
Use new LDAPBytesWarning to ignore python-ldap's bytes warnings. New
build is available in @freeipa/freeipa-master.
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1390/head:pr1390
git checkout pr1390
URL: https://github.com/freeipa/freeipa/pull/1407
Author: Rezney
Title: #1407: test_help: test "help" command without schema cache
Action: opened
PR body:
"""
This test case addresses upsteam ticket #6999, where "ipa help"
does not work if called when no schema is cached.
https://pagure.io/freeipa/issue/7325
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1407/head:pr1407
git checkout pr1407