Greeting,
Last Monday Ralph and I had our monthly meeting for Factory2/Infra sync up.
We went over the event that lead to disabling gating in bodhi last week (see fesco ticket: https://pagure.io/fesco/issue/1872) If this situation happens again we encourage a stronger reach out for help from the folks involved (in this case Ralph or Dan Callaghan (dcallagh) who hangs on #fedora-admin and was around while the discussion was happening), by stronger we are putting down a phone call or a text as valid means.
We talked about PDC, as you may recall PDC is being decomissioned upstream leaving us with no maintainer upstream. Since the team is currently quite busy with other priorities we agreed to restart this discussion in early June with all parties who expressed interest on the thread on this list.
Finally, Ralph explained the new workflow they put in place to deploy their images in our openshift. This is all documented in: https://pagure.io/infra-docs/pull-request/109 Folks are welcomed to take a look at it and comment with their thoughts on the process. In short:images are built and hosted in quay, the latest tag is automatically added if the image passes testing, openshift in staging is configured to pull from the latest tag. Then a "prod" tag can be manually added to an images that openshift will pull in prod. @patrick: with your security officer hat, does this sound good to you ^? If not, the Factory crew is willing to look at other options.
Hoping this is helpful, Pierre
On 05/17/2018 01:10 PM, Pierre-Yves Chibon wrote:
We went over the event that lead to disabling gating in bodhi last week (see fesco ticket: https://pagure.io/fesco/issue/1872) If this situation happens again we encourage a stronger reach out for help from the folks involved (in this case Ralph or Dan Callaghan (dcallagh) who hangs on #fedora-admin and was around while the discussion was happening), by stronger we are putting down a phone call or a text as valid means.
The use of the word valid seems to imply that we did not reach out in a valid way. I don't think IRC should be considered invalid - it's one of the primary ways our community operates. Consider that packagers don't all have the phone numbers of the people who can help. I also don't think admins should be burdened with phone calls every time a packager has trouble with this. About 7% of updates needed to be waived as of last week[2] - it would have been quite a burden to resolve those via phone calls. I appreciate the offer to support problems via personal cell phones, and I may even take that offer up one day, but I don't think it's reasonable to state that it's the only valid means. Further, we need a system that packagers can use without needing admin help - supporting the current system is not scalable (especially if phone calls are needed).
I don't think a phone call would have changed the outcome here - even if we had been able to get that one update through, the experience[3] was ample evidence that the system places an unreasonable burden onto packagers, and that disabling it was in the best interest[1] of the Fedora project.
We do have a solid plan going forward. In the next days I plan to fix one Bodhi bug[0] that blocks it from integrating with Greenwave. Once that is in place, Bodhi's test gating setting can be turned back on. Greenwave is currently configured to pass all updates. Soon, Greenwave will gain a feature that will let packagers opt-in to test gating in Greenwave. We will use this to gain feedback from packagers who have opted in (I plan to opt in some of my packagers). Once we believe the packager experience around test gating is reasonable based on this feedback, we plan to enforce tests across all packages as we did before.
[0] https://github.com/fedora-infra/bodhi/issues/2368 [1] https://pagure.io/fesco/issue/1872#comment-511238 [2] https://pagure.io/fesco/issue/1872#comment-511305 [3] https://pagure.io/fesco/issue/1872#comment-511253
On 05/17/2018 05:02 PM, Randy Barlow wrote:
I don't think it's reasonable to state that it's the only valid means.
After re-reading your message, I realized that I may have misinterpreted your words a bit more strongly than perhaps they were intended to be. Please accept my apology if you hadn't intended to convey what I quoted here.
On Thu, May 17, 2018 at 10:21:44PM -0400, Randy Barlow wrote:
On 05/17/2018 05:02 PM, Randy Barlow wrote:
I don't think it's reasonable to state that it's the only valid means.
After re-reading your message, I realized that I may have misinterpreted your words a bit more strongly than perhaps they were intended to be. Please accept my apology if you hadn't intended to convey what I quoted here.
I was going to reply to this quote that I do not consider phone calls as being the only valid means but as being one for this particular case.
I certainly agree with the rest of your message.
Pierre
infrastructure@lists.fedoraproject.org