14:00:02 <nirik> #startmeeting Infrastructure (2018-08-16)
14:00:02 <zodbot> Meeting started Thu Aug 16 14:00:02 2018 UTC.
14:00:02 <zodbot> This meeting is logged and archived in a public location.
14:00:02 <zodbot> The chair is nirik. Information about MeetBot at http://wiki.debian.org/MeetBot.
14:00:02 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic.
14:00:02 <zodbot> The meeting name has been set to 'infrastructure_(2018-08-16)'
14:00:03 <nirik> #meetingname infrastructure
14:00:03 <zodbot> The meeting name has been set to 'infrastructure'
14:00:03 <nirik> #topic aloha
14:00:03 <nirik> #chair nirik pingou puiterwijk relrod smooge tflink threebean
14:00:03 <zodbot> Current chairs: nirik pingou puiterwijk relrod smooge tflink threebean
14:00:11 * relrod waves
14:00:12 <clime> hello
14:00:20 <creaked> .hello2
14:00:20 <zodbot> creaked: creaked 'Will Chellman' <creaked@gmail.com>
14:00:26 <puiterwijk> .hello2
14:00:27 <zodbot> puiterwijk: puiterwijk 'Patrick "マルタインアンドレアス" Uiterwijk' <puiterwijk@redhat.com>
14:00:41 <bowlofeggs> .hello2
14:00:42 <zodbot> bowlofeggs: bowlofeggs 'Randy Barlow' <rbarlow@redhat.com>
14:01:03 <pingou> .hellow
14:01:05 <pingou> .hello2
14:01:06 <zodbot> pingou: pingou 'Pierre-YvesChibon' <pingou@pingoured.fr>
14:01:28 <nirik> #topic New folks introductions
14:01:28 <nirik> #info This is a place where people who are interested in Fedora Infrastructure can introduce themselves
14:01:37 <nirik> any new folks this week?
14:01:49 <ciphernaut> hello
14:02:56 <nirik> alright. Moving on...
14:03:03 <nirik> #topic announcements and information
14:03:03 <nirik> #info tflink is on extended PTO
14:03:03 <nirik> #info visit to PHX2 will be happening 2018-08-15->2018-08-18
14:03:12 <nirik> any other announcements?
14:03:31 <nirik> smooge is out at our main datacenter this week.
14:03:44 <pingou> g'd luck to him
14:03:46 <threebean> smooge++
14:03:48 <smooge> I am at the hotel at the moment
14:03:51 <pingou> Phoenix at this time fo year++
14:03:57 <smooge> I will be heading over there in a short while
14:03:58 <nirik> hey smooge. didn't mean to wake you
14:04:20 <smooge> no I have been awake since 05:00 Az time
14:04:20 <relrod> #info Finally got a newcloud rhosp13 overcloud deploy last night - more info to come soon
14:04:29 <nirik> hurray!
14:04:40 <bowlofeggs> woot
14:05:19 <nirik> #info openshift 3.10 is out, I will start upgrading stg soon and then prod after that.
14:05:42 <nirik> oh and:
14:05:57 <nirik> #info f29 branching happened yesterday. Hopefully went smoothly
14:06:55 <nirik> #topic Oncall
14:06:55 <nirik> #info Pingou is on call from 2018-08-16->2018-08-23
14:06:55 <nirik> #info ??? is on call from 2018-08-23->2018-08-30
14:06:55 <nirik> #info Summary of last week: (from Kevin)
14:07:04 <nirik> pingou: did you still want to try taking oncall?
14:07:15 <nirik> I think actually puiterwijk had it this last while?
14:07:20 <nirik> .oncall
14:07:20 <zodbot> puiterwijk (Patrick Uiterwijk 🤖) is oncall, please file a ticket 🎫 if you don't hear from me
14:07:20 <pingou> nirik: I can :)
14:07:39 <puiterwijk> I did/do
14:07:53 <nirik> puiterwijk: anything to report?
14:08:06 <nirik> pingou: cool! let me know if you need to hand off anytime or whatever.
14:08:08 <puiterwijk> nirik: nah, not much happened in the few hours
14:08:37 <pingou> nirik: will do, thanks :)
14:09:04 <nirik> ok, there's a PDC topic next, was that leftover from last meeting or did we want to discuss again?
14:09:24 <nirik> #topic PDC
14:09:58 <nirik> so, I think we need a new owner for this replacement app... since kellen has moved on.
14:10:15 <nirik> anyone interested in it?
14:10:53 * nirik listens to the crickets chirp. :)
14:10:56 <pingou> :)
14:11:03 <pingou> I'll take it if needed
14:11:06 <pingou> but... :s
14:11:16 <aikidouke> sorry PDC == ?
14:11:27 <nirik> product definition center...
14:11:34 <nirik> https://pdc.fedoraproject.org
14:12:06 <nirik> basically it keeps track of whats in composes, what releases are in existance, what end dates are for packages
14:12:35 <nirik> it's going away upstream, so we want to make a slimmed down version that only has the stuff we use
14:12:55 <bowlofeggs> there is a patch to bring the bit of it that bodhi uses into bodhi
14:12:59 <bowlofeggs> so there's that
14:13:18 <bowlofeggs> and i think taskotron also uses that same bit
14:13:20 <pingou> thanks bowlofeggs :)
14:13:32 <threebean> bowlofeggs++
14:13:36 <pingou> I remember abompard saying he may be interested to help
14:13:37 <aikidouke> eee - well it sounds like alot, so I cant commit to taking on all of it until I research a bit more
14:13:37 <nirik> but there were still some things we needed right?
14:14:10 <pingou> yes
14:14:14 <pingou> a few
14:14:20 <aikidouke> is the upstream called pdc as well?
14:14:33 <nirik> perhaps we could gather a requirements doc?
14:14:58 <pingou> https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org/message/F2QIF3HXU6ESWRYAN7R7YYVPXHL3AIFJ/
14:15:04 <pingou> was basically the start of it
14:15:05 <bowlofeggs> i feel like there had been a requirement doc or two floating around months ago
14:15:07 <bowlofeggs> yeah
14:15:37 <nirik> alright
14:15:57 <nirik> so perhaps we see if abompard has time for this...
14:16:14 <nirik> since he's not here, we can pile work on him right? :)
14:16:27 <pingou> sounds good :)
14:17:00 <nirik> ok, anything else on PDC?
14:17:03 <bowlofeggs> haha
14:17:06 <aikidouke> I will research to see if I can help, but would probably need a good bit of hand-holding at first - if abompard asks
14:17:46 <nirik> https://github.com/product-definition-center/product-definition-center is the upstream
14:17:52 <aikidouke> ty
14:18:22 <nirik> #topic flock 2018 wrap up / info - kevin
14:18:34 <nirik> so flock was last week... we missed those that couldn't make it.
14:18:54 <nirik> lots of nice talks and meeting people face to face.
14:19:54 <nirik> I think most of the stuff I talked about in the infra planning and hacking session we have already discussed.
14:20:16 <nirik> One thing is that we are looking at having a higher level project tracking thing of some kind.
14:20:42 <nirik> What it might be still to be determined.
14:21:18 <nirik> anyone have any items from flock to further discuss?
14:21:56 <nirik> ok, if so, please bring to the list. :)
14:22:07 <aikidouke> nirik: was infra using (open source kanban thing that starts with T?) :( sorry
14:22:14 <bcotton> taiga
14:22:19 <aikidouke> that^
14:22:21 <nirik> yeah, thats one option...
14:22:25 <aikidouke> bcotton++
14:22:26 <zodbot> aikidouke: Karma for bcotton changed to 5 (for the current release cycle):  https://badges.fedoraproject.org/tags/cookie/any
14:22:52 <aikidouke> what's missing with taiga that a replacement is needed?
14:23:29 <nirik> well, we aren't talking about replacing taiga...
14:23:44 * aikidouke really needs to go watch videos when/if they are posted :(
14:23:46 <puiterwijk> We don't have anything for infra at this moment yet
14:23:48 <nirik> we are talking about tracking high level projects somewhere. taiga could be a place to do that. or pagure. or something else
14:24:28 * bcotton is happy to provide some program management consulting to the team if they want it :-)
14:24:38 <nirik> so someone could come to fedora infrastructure and say "I want you to do X" and we can say... here's all the big things were are working on now. how important is X? and we can schedule work on it, etc.
14:25:09 <nirik> bcotton: that would be very welcome. Perhaps we can rope you into the discussion for your thoughts.
14:25:37 * aikidouke is also a former PM and would like to be part of discussion as well
14:25:39 <bcotton> nirik: feel free
14:26:01 <nirik> The thing we want to avoid IMHO is too much overhead. We don't want _another_ issue tracker. Just high level.
14:26:19 <nirik> cool. Thanks to both of you...
14:26:27 * aikidouke nods
14:26:59 * pingou notes that there is a ticket for adding a kanban-like lite to pagure
14:27:14 <pingou> (no eta though)
14:27:46 <aikidouke> i like that idea at least without knowing all the specifics of what is needed :)
14:28:07 <nirik> yeah. but pagure 5.0 has a lot of improvments in roadmap and such, so I would love to see what it would look like there...
14:28:40 <pingou> hopefully I'll push a beta in stg soon :)
14:29:24 <nirik> cool.
14:30:12 <nirik> #topic Tickets discussion
14:30:12 <nirik> #info https://pagure.io/fedora-infrastructure/report/Meetings%20ticket
14:30:32 <nirik> .ticket 7158
14:30:34 <zodbot> nirik: Issue #7158: Planet Fedora doesn't have a valid certificate - fedora-infrastructure - Pagure - https://pagure.io/fedora-infrastructure/issue/7158
14:30:42 <nirik> so, this keeps coming up...
14:31:17 <nirik> to recap: making fedoraplanet.org https would result in people complaining that their browser told them there is a bunch of non https links and such.
14:31:27 <nirik> since we just aggregate blogs and many aren't https.
14:31:29 <puiterwijk> But the problem is that when we fix the cert there, the next ticket will be "half of the image don't work"
14:31:34 <nirik> right
14:32:02 <puiterwijk> nirik: so... random idea: we could fix the TLS cert, and make https forward to http....
14:32:04 <nirik> we discussed this a few years ago also... and perhaps now it's finally time to set a "your blog must use https by YYYY-DD-MM'
14:32:14 <puiterwijk> Or that.
14:32:27 <nirik> with letsencrypt it shouldn't be that hard right?
14:32:42 <pingou> I kinda like puiterwijk 's idea
14:32:54 <pingou> support https just redirect to plain htt
14:32:56 <pingou> p
14:32:56 <nirik> well, we could do that now and set a date also
14:32:57 <puiterwijk> nirik: well, except not all hosts have https
14:33:15 <smooge> and vice versa
14:33:37 <pingou> smooge: ?
14:33:39 <puiterwijk> While, sure, people could take cloudflare and put that in front. But there'll be enough people who don't know how to. We don't only have technical people
14:33:40 <smooge> various hosts are dropping http and going https only so redirect to plain http is going to break..
14:33:56 <puiterwijk> smooge: I meant redirect only fedoraplanet.org itself
14:33:57 <pingou> smooge: fedoraplanet would be http, the blog could be either
14:34:02 <pingou> just as they are today
14:34:04 <puiterwijk> I don't intend to modify the img links
14:34:08 <smooge> ah ok
14:34:23 <smooge> sorry I mis interpreted and jumped to conclusions
14:34:25 <nirik> note that chrome now I think warns on http sites.
14:34:44 <puiterwijk> nirik: yep. But meh
14:35:03 <nirik> "Not secure" but it doesn't say it in blinking red or anything. ;)
14:35:27 <puiterwijk> I don't think it does blinking
14:35:35 <puiterwijk> nirik: not even red
14:35:39 <puiterwijk> It just says "Not secure" in grey
14:35:42 <nirik> well, my point is that it's not very scary
14:35:45 <nirik> yes
14:35:54 <puiterwijk> Oh, sorry. does*n't*
14:35:58 <puiterwijk> I missed the not part...
14:36:15 <puiterwijk> I think it only does the red bold if there's any input fields
14:36:23 <nirik> we could also see I suppose how many blogs we have left that are not https
14:36:46 <nirik> or ask the council if requiring https is too high a barrier
14:37:19 <bcotton> at the least, it seems like something that bexelbie should weigh in on
14:37:37 <bcotton> and/or the commops and mindshare teams
14:37:41 <nirik> yep
14:38:10 <nirik> so, how about we setup the redirect for now and ask other teams for down the road?
14:38:34 <puiterwijk> +1
14:38:56 <nirik> does someone want to do the redirect/ssl cert? :) If not, I guess I can...
14:40:13 <nirik> I can also mail commops/mindshare about it.
14:40:43 <nirik> Any other tickets folks would like to discuss?
14:40:49 <aikidouke> this is an apache mod-redirect (forget the exact name) for planet?
14:41:12 <puiterwijk> mod-rewrite
14:41:14 <puiterwijk> Yeah
14:41:21 <puiterwijk> or mod_rewrite, since they like underscores
14:41:28 <aikidouke> there you go
14:41:30 <bowlofeggs> mod_re-write
14:42:09 <nirik> Ⓜ️od_re-✏️
14:42:10 <aikidouke> may I have a look at that ticket if it isnt of the supernova-hot urgency variety?
14:42:13 <aikidouke> lol
14:42:48 <nirik> aikidouke: sure thing. Should just be some ansible patch to add the redirect from https->http and make it get a letsencrypt cert...
14:43:31 <aikidouke> ok - are we doing this for any other service on fpo?
14:43:35 <puiterwijk> aikidouke: for letsencrypt, you'd want to use certgetter
14:43:45 <puiterwijk> Yeah, pkgs does this redirect+certgetter stuff as well
14:43:46 <aikidouke> thanks puiterwijk
14:43:50 <puiterwijk> (thanks to nirik for that!)
14:44:09 <aikidouke> that should get me going :)
14:44:16 <aikidouke> puiterwijk++
14:44:16 <zodbot> aikidouke: Karma for puiterwijk changed to 32 (for the current release cycle):  https://badges.fedoraproject.org/tags/cookie/any
14:44:16 <nirik> yeah, no other site, just fedoraplanet.org
14:44:22 <nirik> #topic Apprentice Open office minutes
14:44:22 <nirik> #info A time where apprentices may ask for help or look at problems.
14:44:33 <nirik> any apprentice questions, comments, notes?
14:44:59 <nirik> relrod had a session about improving on-boarding, we may try and implement some of those things soon and see if they help
14:45:21 <aikidouke> err - I'm not sure if I'm too early or too late - but sapo and I were looking at coming up with a workday for the create an infrastructure map ticket
14:45:33 * relrod nods. I'll post my slides from that soon too, happy to have help implementing those ideas.
14:45:53 <aikidouke> is that still relevant or needed after all the work everyone did at Flock (or are planning to do?)
14:45:54 <nirik> aikidouke: cool.
14:46:12 <nirik> sure, I think so... the idea was that would be helpfull for new folks to see what is what
14:46:56 <aikidouke> ok - I still have a todo to get in touch with sapo and mizdebsk (I think) to schedule a workday
14:47:09 <nirik> sounds good!
14:47:17 <aikidouke> it sounded like mizdebsk was going to be available soonish for that
14:47:52 <nirik> ok. Yeah, another work day could be nice...
14:48:12 <aikidouke> ok - ty...thats all I had for today
14:48:20 <nirik> #topic Open Floor
14:48:40 <nirik> anyone have items for open floor? questions, comments, favorite cheese?
14:49:21 <pingou> soo many to choose from
14:49:24 <pingou> how could one?
14:49:35 <puiterwijk> SecureBoot?
14:49:37 <pingou> oh in the news
14:49:39 <puiterwijk> Oh wait, not a cheese
14:49:41 <nirik> yeah, I know it's hard...
14:49:42 <pingou> got loopabull up and running
14:49:51 <pingou> it's running two playbooks
14:49:55 <nirik> pingou: cool! we should add more to it now.
14:49:58 <pingou> or rather, it's supposed to br running two playbooks
14:50:07 <nirik> oh, reminds me...
14:50:12 <pingou> because it currently fail with something that looks like an ansible error...
14:50:34 <nirik> ah, bummer. I'm happy to look if you like
14:50:54 <pingou> https://paste.fedoraproject.org/paste/jORy56nN0Yttni72xthLyg this is the error
14:50:55 <nirik> two quick things... first, related to loopabull:
14:50:59 <pingou> if someone has a clue
14:51:04 <nirik> https://pagure.io/fedora-infrastructure/issue/5943 <- is this still needed?
14:51:29 <smooge> congrats pingou
14:51:39 <nirik> would have to look at the playbook, but can later today
14:51:46 <nirik> second thing I forgot some infos:
14:52:12 <nirik> #info stg.release-monitoring.org setup in stg now... has valid cert, latest version, you can login to it, etc.
14:52:57 <nirik> I need to check on it's cron job, and then we can look at a flag day to swap in production
14:53:58 <nirik> anyhow, if nothing else will close in a min
14:54:18 <pingou> nirik: replied to the ticket
14:54:35 <pingou> I think we can close it as no-one took it over and loopabull is no longer pointing to that git repo
14:54:50 <nirik> ok.
14:54:54 <pingou> if cverna or mboddu want to take it over, we can always re-open
14:54:57 <nirik> thanks pingou and everyone for coming!
14:55:01 <nirik> #endmeeting