<@Zlopez:matrix.org>
17:00:12
!startmeeting Infrastructure (2025-03-06)
<@meetbot:fedora.im>
17:00:15
Meeting started at 2025-03-06 17:00:12 UTC
<@meetbot:fedora.im>
17:00:15
The Meeting name is 'Infrastructure (2025-03-06)'
<@smilner:fedora.im>
17:00:17
!hi
<@zodbot:fedora.im>
17:00:18
None (smilner)
<@Zlopez:matrix.org>
17:00:22
!topic ahoy
<@Zlopez:matrix.org>
17:00:22
!info About our team: https://docs.fedoraproject.org/en-US/cle/
<@Zlopez:matrix.org>
17:00:22
!info Agenda is at: https://board.net/p/fedora-infra
<@Zlopez:matrix.org>
17:00:22
!chair nirik zlopez nb bodanel dtometzki jnsamyak lenkaseg patrikp
<@Zlopez:matrix.org>
17:00:22
!meetingname infrastructure
<@Zlopez:matrix.org>
17:00:22
!info Fedora Infra documentation: https://docs.fedoraproject.org/en-US/infra
<@gwmngilfen:fedora.im>
17:00:22
!hi
<@meetbot:fedora.im>
17:00:23
The Meeting Name is now infrastructure
<@zodbot:fedora.im>
17:00:24
Greg Sutcliffe (gwmngilfen) - he / him / his
<@Zlopez:matrix.org>
17:00:27
!hi
<@zodbot:fedora.im>
17:00:31
Michal Konecny (zlopez)
<@Zlopez:matrix.org>
17:01:14
Welcome everyone to today Fedora Infra meeting :-)
<@phsmoura:fedora.im>
17:01:41
hello
<@Zlopez:matrix.org>
17:02:56
How is everyone?
<@markrosenbaum:fedora.im>
17:02:56
Heyo
<@markrosenbaum:fedora.im>
17:03:00
Good
<@pcreech:matrix.org>
17:03:05
!hi
<@zodbot:fedora.im>
17:03:06
Patrick Creech (pcreech17)
<@gwmngilfen:fedora.im>
17:03:12
tired, busy day 🙂
<@markrosenbaum:fedora.im>
17:03:17
!hi
<@zodbot:fedora.im>
17:03:18
Mark Rosenbaum (markrosenbaum)
<@humaton:fedora.im>
17:03:19
!hi
<@zodbot:fedora.im>
17:03:20
Tomáš Hrčka (humaton) - he / him / his
<@Zlopez:matrix.org>
17:03:49
Same here, at least had some progress with flatpak indexer
<@markrosenbaum:fedora.im>
17:04:00
Yeah, for sure
<@Zlopez:matrix.org>
17:04:41
Let's start with agenda
<@Zlopez:matrix.org>
17:04:50
!info This is a place where people who are interested in Fedora Infrastructure can introduce themselves
<@Zlopez:matrix.org>
17:04:50
!info Getting Started Guide: https://docs.fedoraproject.org/en-US/infra/gettingstarted/
<@Zlopez:matrix.org>
17:04:50
!topic New folks introductions
<@Zlopez:matrix.org>
17:05:03
Anybody new here?
<@ralph:fedora.im>
17:05:35
!hi
<@zodbot:fedora.im>
17:05:36
Ralph Bean (ralph)
<@Zlopez:matrix.org>
17:07:53
It does not seem so
<@Zlopez:matrix.org>
17:08:08
!info chair 2025-03-06 - @Zlopez
<@Zlopez:matrix.org>
17:08:08
!info magic eight ball says:
<@Zlopez:matrix.org>
17:08:08
!info chair 2025-03-13 - @saibug
<@Zlopez:matrix.org>
17:08:08
!topic Next chair
<@markrosenbaum:fedora.im>
17:08:12
Saw an introduction on the mailing list but I guess they're not herewe
<@markrosenbaum:fedora.im>
17:08:17
Saw an introduction on the mailing list but I guess they're not here
<@Zlopez:matrix.org>
17:08:31
!info chair 2025-03-20 - ???
<@phsmoura:fedora.im>
17:08:39
I can take it
<@Zlopez:matrix.org>
17:08:45
Sold!
<@Zlopez:matrix.org>
17:08:57
!info chair 2025-03-20 - @phsmoura:fedora.im
<@Zlopez:matrix.org>
17:09:28
!info chair 2025-03-27 - ???
<@Zlopez:matrix.org>
17:09:44
Do we have any volunteer for that week as well?
<@lenkaseg:fedora.im>
17:09:52
!hi
<@zodbot:fedora.im>
17:09:53
Lenka Segura (lenkaseg)
<@pcreech:matrix.org>
17:10:23
I can take that one on
<@Zlopez:matrix.org>
17:10:35
Sold to @pcreech:matrix.org !
<@Zlopez:matrix.org>
17:10:51
!info chair 2025-03-27 - @pcreech:matrix.org
<@Zlopez:matrix.org>
17:11:27
I think that is enough for now, we have chairs for next 3 weeks
<@Zlopez:matrix.org>
17:11:42
Let's see what news we have
<@Zlopez:matrix.org>
17:11:48
!topic announcements and information
<@Zlopez:matrix.org>
17:11:48
!info CLE Infra&Releng EU-hours team has a Monday through Thursday 30 minute meeting going through tickets at 0800 UTC in https://matrix.to/#/#meeting-3:fedoraproject.org
<@Zlopez:matrix.org>
17:11:48
!info CLE Infra&Releng NA-hours team has a Monday through Thursday 30 minute meeting going through tickets at 1800 UTC in https://matrix.to/#/#meeting-3:fedoraproject.org
<@Zlopez:matrix.org>
17:12:02
!info We are in F42 Beta freeze
<@Zlopez:matrix.org>
17:15:44
!info F42 Beta GO/No GO meeting happening today at 1700 UTC
<@Zlopez:matrix.org>
17:16:45
That should already be in progress, but I don't see any meeting running in #meeting:fedoraproject.org
<@Zlopez:matrix.org>
17:18:08
I can see that the meeting got cancelled because too many unresolved blockers :-/
<@Zlopez:matrix.org>
17:18:55
!info F42 Beta is NO GO as there are many unresolved blocker bugs, new target release date is 18th March
<@Zlopez:matrix.org>
17:19:20
Anything else to announce?
<@Zlopez:matrix.org>
17:22:17
Let's move to next topic than
<@Zlopez:matrix.org>
17:22:24
!topic Oncall
<@Zlopez:matrix.org>
17:22:24
!info ??? is on call from 2025-03-06 to 2025-03-13
<@Zlopez:matrix.org>
17:22:24
!info zlopez is on call from 2025-02-27 to 2025-03-06
<@Zlopez:matrix.org>
17:22:24
!info https://docs.fedoraproject.org/en-US/infra/day_to_day_fedora/#_the_oncall_role_in_our_team
<@Zlopez:matrix.org>
17:22:34
Any volunteers for the oncall?
<@humaton:fedora.im>
17:23:05
I can take it
<@Zlopez:matrix.org>
17:23:36
It's yours
<@Zlopez:matrix.org>
17:23:48
!info jednorozec is on call from 2025-03-06 to 2025-03-13
<@Zlopez:matrix.org>
17:24:22
!info ??? is on call from 2025-03-14 to 2025-03-20
<@Zlopez:matrix.org>
17:24:32
Anybody for the week above?
<@Zlopez:matrix.org>
17:25:14
!oncall
<@zodbot:fedora.im>
17:25:15
The following people are oncall:
<@zodbot:fedora.im>
17:25:15
â—Ź @jednorozec:fedora.im (jednorozec) Current Time for them: 17:25 (UTC)
<@zodbot:fedora.im>
17:25:15
If they do not respond, please file a ticket (https://pagure.io/fedora-infrastructure/issues)
<@zodbot:fedora.im>
17:25:15
<@Zlopez:matrix.org>
17:25:26
Set
<@Zlopez:matrix.org>
17:26:55
Let's leave it for next week
<@markrosenbaum:fedora.im>
17:27:15
So what exactly are the reqs to be OnCall?
<@markrosenbaum:fedora.im>
17:27:29
So what exactly are the reqs to be oncall?
<@Zlopez:matrix.org>
17:28:02
Just to respond if you are around to !oncall ping and either solve the issue or find the people who can help
<@markrosenbaum:fedora.im>
17:28:18
Got it
<@humaton:fedora.im>
17:28:33
sometimes there are infra issues fixable by just running playbook or restarting service...
<@markrosenbaum:fedora.im>
17:29:14
Yep, makes sense
<@Zlopez:matrix.org>
17:29:23
Some of them are easy to solve, but some of them need more investigation or specific permissions
<@Zlopez:matrix.org>
17:29:42
You can always ask them to fill the ticket
<@Zlopez:matrix.org>
17:30:03
@markrosenbaum:fedora.im Do you want to try it?
<@markrosenbaum:fedora.im>
17:30:40
I'll hold off for a bit, as of today work got shook up a bit but when things are more stable I'd love to try
<@Zlopez:matrix.org>
17:31:20
OK, let's go to next item on agenda then
<@Zlopez:matrix.org>
17:31:26
!info Summary of last week: (from current oncall)
<@Zlopez:matrix.org>
17:32:03
I saw only one ping during the week and that happened during my night and was already resolved when I get to computer
<@Zlopez:matrix.org>
17:32:23
So quiet week
<@Zlopez:matrix.org>
17:32:50
!info https://nagios.fedoraproject.org/nagios
<@Zlopez:matrix.org>
17:32:50
!info Go over existing items and fix them
<@Zlopez:matrix.org>
17:32:50
!topic Monitoring discussion [nirik]
<@Zlopez:matrix.org>
17:33:16
@nirik:matrix.scrye.com is on not around today and tomorrow, so let me take that
<@Zlopez:matrix.org>
17:33:37
In future we will be looking at zabbix, hopefully :-)
<@markrosenbaum:fedora.im>
17:34:13
Same here, I wrote an initial migration differences doc between v6 and v7
<@Zlopez:matrix.org>
17:34:22
So there are still the datanommer checks, that are still waiting for package review for unretirement
<@Zlopez:matrix.org>
17:34:50
And the log02, which we didn't figured out how to remove from nagios yet
<@Zlopez:matrix.org>
17:35:03
Other than that nothing outstanding
<@markrosenbaum:fedora.im>
17:35:22
Just removing the host?
<@Zlopez:matrix.org>
17:36:15
It's not that easy, it is handled by ansible and removing it from inventory didn't help, removing it from the host itself just helps till next time playbook is ran
<@markrosenbaum:fedora.im>
17:36:31
Yeah I assumed
<@markrosenbaum:fedora.im>
17:37:12
I was going to offer to look through ansible for that
<@Zlopez:matrix.org>
17:37:16
Feel free to try something, if you want
<@markrosenbaum:fedora.im>
17:37:33
Yeah, I'll try to look into it'
<@markrosenbaum:fedora.im>
17:37:37
Yeah, I'll try to look into it
<@Zlopez:matrix.org>
17:38:16
Now I have something I wanted to discuss here
<@Zlopez:matrix.org>
17:38:23
!topic OIDC sunset date
<@Zlopez:matrix.org>
17:38:33
!link https://pagure.io/fedora-infrastructure/issue/10241
<@Zlopez:matrix.org>
17:39:17
This is being in plan for some time, we would like to get rid of OpenID at some point and move completely to OIDC
<@Zlopez:matrix.org>
17:40:08
We identified few services that are still using OpenID authentication with FAS and hopefully that is all of them
<@Zlopez:matrix.org>
17:40:33
We will contact them once we decide on the sunset date for OpenID and help them move
<@Zlopez:matrix.org>
17:40:57
The proposed date was somewhere around F40 EOL
<@Zlopez:matrix.org>
17:41:20
Which will give us 3 months to move every remaining service to OIDC
<@Zlopez:matrix.org>
17:41:39
Thoughts about that? Ideas?
<@Zlopez:matrix.org>
17:43:19
+1?
<@markrosenbaum:fedora.im>
17:43:26
So is the only remaining service we own https://lists.pagure.io/?
<@Zlopez:matrix.org>
17:44:04
* https://lists.ovirt.org/
<@Zlopez:matrix.org>
17:44:04
* https://lists.ncf.ca/
<@Zlopez:matrix.org>
17:44:04
Now, the list is:
<@Zlopez:matrix.org>
17:44:04
* http://listat.jyps.fi/
<@Zlopez:matrix.org>
17:44:04
* https://igfae.usc.es/
<@Zlopez:matrix.org>
17:44:04
* https://lists.openldap.org/
<@Zlopez:matrix.org>
17:44:04
* https://lists.pagure.io/
<@Zlopez:matrix.org>
17:44:10
No, the list is:
<@Zlopez:matrix.org>
17:44:10
* http://listat.jyps.fi/
<@Zlopez:matrix.org>
17:44:10
* https://igfae.usc.es/
<@Zlopez:matrix.org>
17:44:10
* https://lists.openldap.org/
<@Zlopez:matrix.org>
17:44:10
* https://lists.pagure.io/
<@Zlopez:matrix.org>
17:44:10
* https://lists.ovirt.org/
<@Zlopez:matrix.org>
17:44:10
* https://lists.ncf.ca/
<@smooge:fedora.im>
17:44:38
i can help on removing hosts from nagios if you want that covered in meeting
<@markrosenbaum:fedora.im>
17:44:50
Yeah I do we own all of those?
<@smilner:fedora.im>
17:44:57
Is that external services using our openid or users of those systems using their Fedora account openid when signing in to those services?
<@Zlopez:matrix.org>
17:45:33
If you are talking about log02 it somewhat strange, the usual things are not working
<@markrosenbaum:fedora.im>
17:46:16
It looks like those external services are using our OpenID as a login option
<@Zlopez:matrix.org>
17:46:19
Yes, those are mailing lists that are using FAS as authentication method through OpenID
<@markrosenbaum:fedora.im>
17:46:34
It looks like those external services are using our FAS' OpenID as a login option
<@markrosenbaum:fedora.im>
17:46:41
It looks like those external services are using our FAS OpenID as a login option
<@Zlopez:matrix.org>
17:46:42
Yes, we need to migrate them to OIDC
<@smooge:fedora.im>
17:46:51
I will go look at my mess. I remember some magic
<@Zlopez:matrix.org>
17:47:47
All of them are mailing lists, so it should be easy to move them, I updated the mailman plugin for that when migrating to mailman3
<@zodbot:fedora.im>
17:47:56
zlopez gave a cookie to smooge. They now have 268 cookies, 6 of which were obtained in the Fedora 41 release cycle
<@Zlopez:matrix.org>
17:48:51
Feel free to reply to the ticket for OIDC, so we can announce the sunset date as soon as possible
<@Zlopez:matrix.org>
17:50:17
I'm not sure if that is actually hosted by us, as our mailman deployment already supports using OIDC
<@markrosenbaum:fedora.im>
17:50:29
Huh
<@smooge:fedora.im>
17:50:49
lists.pagure.io used to be one of the lists.fedoraproject.org I thought
<@smooge:fedora.im>
17:51:09
lists.pagure lists.fedoraproject lists.fedorahosted
<@markrosenbaum:fedora.im>
17:51:23
Resolves to proxy06, anyone know where it goes from there?
<@Zlopez:matrix.org>
17:51:59
Let me check, if it's the same deployment as fedoraproject.org it should already be using OIDC
<@smooge:fedora.im>
17:52:50
The lists.openldap.org and lists.ovirt.org may be run by @misc from OSAS
<@smooge:fedora.im>
17:53:14
and with that I don't think I can help on that more...
<@Zlopez:matrix.org>
17:53:37
I will need to reach to all of them
<@markrosenbaum:fedora.im>
17:54:35
It looks to me like it is
<@Zlopez:matrix.org>
17:55:11
Maybe the support it just still supporting OpenID as well
<@Zlopez:matrix.org>
17:55:20
Maybe the instance it just still supporting OpenID as well
<@markrosenbaum:fedora.im>
17:55:43
Welp, I do gotta run now
<@Zlopez:matrix.org>
17:56:17
Let me switch to open floor for the last few minutes
<@Zlopez:matrix.org>
17:57:29
!topic Open Floor
<@Zlopez:matrix.org>
17:58:00
Looking at the mailman admin interface and the lists.pagure.io is part of your deployment
<@Zlopez:matrix.org>
17:58:24
So it should already support OIDC like rest of our deployment
<@Zlopez:matrix.org>
18:00:03
So that must be someone trying to use openid endpoint from lists.pagure.io, so we can ignore that one
<@Zlopez:matrix.org>
18:00:22
One less to worry about
<@Zlopez:matrix.org>
18:00:32
We are at the end of our time
<@Zlopez:matrix.org>
18:00:41
Thanks everyone for joining us today
<@Zlopez:matrix.org>
18:00:46
!endmeeting