2025-03-06 17:00:12 <@Zlopez:matrix.org> !startmeeting Infrastructure (2025-03-06) 2025-03-06 17:00:15 <@meetbot:fedora.im> Meeting started at 2025-03-06 17:00:12 UTC 2025-03-06 17:00:15 <@meetbot:fedora.im> The Meeting name is 'Infrastructure (2025-03-06)' 2025-03-06 17:00:17 <@smilner:fedora.im> !hi 2025-03-06 17:00:18 <@zodbot:fedora.im> None (smilner) 2025-03-06 17:00:22 <@Zlopez:matrix.org> !topic ahoy 2025-03-06 17:00:22 <@Zlopez:matrix.org> !info About our team: https://docs.fedoraproject.org/en-US/cle/ 2025-03-06 17:00:22 <@Zlopez:matrix.org> !info Agenda is at: https://board.net/p/fedora-infra 2025-03-06 17:00:22 <@Zlopez:matrix.org> !chair nirik zlopez nb bodanel dtometzki jnsamyak lenkaseg patrikp 2025-03-06 17:00:22 <@Zlopez:matrix.org> !meetingname infrastructure 2025-03-06 17:00:22 <@Zlopez:matrix.org> !info Fedora Infra documentation: https://docs.fedoraproject.org/en-US/infra 2025-03-06 17:00:22 <@gwmngilfen:fedora.im> !hi 2025-03-06 17:00:23 <@meetbot:fedora.im> The Meeting Name is now infrastructure 2025-03-06 17:00:24 <@zodbot:fedora.im> Greg Sutcliffe (gwmngilfen) - he / him / his 2025-03-06 17:00:27 <@Zlopez:matrix.org> !hi 2025-03-06 17:00:31 <@zodbot:fedora.im> Michal Konecny (zlopez) 2025-03-06 17:01:14 <@Zlopez:matrix.org> Welcome everyone to today Fedora Infra meeting :-) 2025-03-06 17:01:41 <@phsmoura:fedora.im> hello 2025-03-06 17:02:56 <@Zlopez:matrix.org> How is everyone? 2025-03-06 17:02:56 <@markrosenbaum:fedora.im> Heyo 2025-03-06 17:03:00 <@markrosenbaum:fedora.im> Good 2025-03-06 17:03:05 <@pcreech:matrix.org> !hi 2025-03-06 17:03:06 <@zodbot:fedora.im> Patrick Creech (pcreech17) 2025-03-06 17:03:12 <@gwmngilfen:fedora.im> tired, busy day 🙂 2025-03-06 17:03:17 <@markrosenbaum:fedora.im> !hi 2025-03-06 17:03:18 <@zodbot:fedora.im> Mark Rosenbaum (markrosenbaum) 2025-03-06 17:03:19 <@humaton:fedora.im> !hi 2025-03-06 17:03:20 <@zodbot:fedora.im> Tomáš Hrčka (humaton) - he / him / his 2025-03-06 17:03:49 <@Zlopez:matrix.org> Same here, at least had some progress with flatpak indexer 2025-03-06 17:04:00 <@markrosenbaum:fedora.im> Yeah, for sure 2025-03-06 17:04:41 <@Zlopez:matrix.org> Let's start with agenda 2025-03-06 17:04:50 <@Zlopez:matrix.org> !info This is a place where people who are interested in Fedora Infrastructure can introduce themselves 2025-03-06 17:04:50 <@Zlopez:matrix.org> !info Getting Started Guide: https://docs.fedoraproject.org/en-US/infra/gettingstarted/ 2025-03-06 17:04:50 <@Zlopez:matrix.org> !topic New folks introductions 2025-03-06 17:05:03 <@Zlopez:matrix.org> Anybody new here? 2025-03-06 17:05:35 <@ralph:fedora.im> !hi 2025-03-06 17:05:36 <@zodbot:fedora.im> Ralph Bean (ralph) 2025-03-06 17:07:53 <@Zlopez:matrix.org> It does not seem so 2025-03-06 17:08:08 <@Zlopez:matrix.org> !info chair 2025-03-06 - @Zlopez 2025-03-06 17:08:08 <@Zlopez:matrix.org> !info magic eight ball says: 2025-03-06 17:08:08 <@Zlopez:matrix.org> !info chair 2025-03-13 - @saibug 2025-03-06 17:08:08 <@Zlopez:matrix.org> !topic Next chair 2025-03-06 17:08:12 <@markrosenbaum:fedora.im> Saw an introduction on the mailing list but I guess they're not herewe 2025-03-06 17:08:17 <@markrosenbaum:fedora.im> Saw an introduction on the mailing list but I guess they're not here 2025-03-06 17:08:31 <@Zlopez:matrix.org> !info chair 2025-03-20 - ??? 2025-03-06 17:08:39 <@phsmoura:fedora.im> I can take it 2025-03-06 17:08:45 <@Zlopez:matrix.org> Sold! 2025-03-06 17:08:57 <@Zlopez:matrix.org> !info chair 2025-03-20 - @phsmoura:fedora.im 2025-03-06 17:09:28 <@Zlopez:matrix.org> !info chair 2025-03-27 - ??? 2025-03-06 17:09:44 <@Zlopez:matrix.org> Do we have any volunteer for that week as well? 2025-03-06 17:09:52 <@lenkaseg:fedora.im> !hi 2025-03-06 17:09:53 <@zodbot:fedora.im> Lenka Segura (lenkaseg) 2025-03-06 17:10:23 <@pcreech:matrix.org> I can take that one on 2025-03-06 17:10:35 <@Zlopez:matrix.org> Sold to @pcreech:matrix.org ! 2025-03-06 17:10:51 <@Zlopez:matrix.org> !info chair 2025-03-27 - @pcreech:matrix.org 2025-03-06 17:11:27 <@Zlopez:matrix.org> I think that is enough for now, we have chairs for next 3 weeks 2025-03-06 17:11:42 <@Zlopez:matrix.org> Let's see what news we have 2025-03-06 17:11:48 <@Zlopez:matrix.org> !topic announcements and information 2025-03-06 17:11:48 <@Zlopez:matrix.org> !info CLE Infra&Releng EU-hours team has a Monday through Thursday 30 minute meeting going through tickets at 0800 UTC in https://matrix.to/#/#meeting-3:fedoraproject.org 2025-03-06 17:11:48 <@Zlopez:matrix.org> !info CLE Infra&Releng NA-hours team has a Monday through Thursday 30 minute meeting going through tickets at 1800 UTC in https://matrix.to/#/#meeting-3:fedoraproject.org 2025-03-06 17:12:02 <@Zlopez:matrix.org> !info We are in F42 Beta freeze 2025-03-06 17:15:44 <@Zlopez:matrix.org> !info F42 Beta GO/No GO meeting happening today at 1700 UTC 2025-03-06 17:16:45 <@Zlopez:matrix.org> That should already be in progress, but I don't see any meeting running in #meeting:fedoraproject.org 2025-03-06 17:18:08 <@Zlopez:matrix.org> I can see that the meeting got cancelled because too many unresolved blockers :-/ 2025-03-06 17:18:55 <@Zlopez:matrix.org> !info F42 Beta is NO GO as there are many unresolved blocker bugs, new target release date is 18th March 2025-03-06 17:19:20 <@Zlopez:matrix.org> Anything else to announce? 2025-03-06 17:22:17 <@Zlopez:matrix.org> Let's move to next topic than 2025-03-06 17:22:24 <@Zlopez:matrix.org> !topic Oncall 2025-03-06 17:22:24 <@Zlopez:matrix.org> !info ??? is on call from 2025-03-06 to 2025-03-13 2025-03-06 17:22:24 <@Zlopez:matrix.org> !info zlopez is on call from 2025-02-27 to 2025-03-06 2025-03-06 17:22:24 <@Zlopez:matrix.org> !info https://docs.fedoraproject.org/en-US/infra/day_to_day_fedora/#_the_oncall_role_in_our_team 2025-03-06 17:22:34 <@Zlopez:matrix.org> Any volunteers for the oncall? 2025-03-06 17:23:05 <@humaton:fedora.im> I can take it 2025-03-06 17:23:36 <@Zlopez:matrix.org> It's yours 2025-03-06 17:23:48 <@Zlopez:matrix.org> !info jednorozec is on call from 2025-03-06 to 2025-03-13 2025-03-06 17:24:22 <@Zlopez:matrix.org> !info ??? is on call from 2025-03-14 to 2025-03-20 2025-03-06 17:24:32 <@Zlopez:matrix.org> Anybody for the week above? 2025-03-06 17:25:14 <@Zlopez:matrix.org> !oncall 2025-03-06 17:25:15 <@zodbot:fedora.im> The following people are oncall: 2025-03-06 17:25:15 <@zodbot:fedora.im> ● @jednorozec:fedora.im (jednorozec) Current Time for them: 17:25 (UTC) 2025-03-06 17:25:15 <@zodbot:fedora.im> If they do not respond, please file a ticket (https://pagure.io/fedora-infrastructure/issues) 2025-03-06 17:25:15 <@zodbot:fedora.im> 2025-03-06 17:25:26 <@Zlopez:matrix.org> Set 2025-03-06 17:26:55 <@Zlopez:matrix.org> Let's leave it for next week 2025-03-06 17:27:15 <@markrosenbaum:fedora.im> So what exactly are the reqs to be OnCall? 2025-03-06 17:27:29 <@markrosenbaum:fedora.im> So what exactly are the reqs to be oncall? 2025-03-06 17:28:02 <@Zlopez:matrix.org> Just to respond if you are around to !oncall ping and either solve the issue or find the people who can help 2025-03-06 17:28:18 <@markrosenbaum:fedora.im> Got it 2025-03-06 17:28:33 <@humaton:fedora.im> sometimes there are infra issues fixable by just running playbook or restarting service... 2025-03-06 17:29:14 <@markrosenbaum:fedora.im> Yep, makes sense 2025-03-06 17:29:23 <@Zlopez:matrix.org> Some of them are easy to solve, but some of them need more investigation or specific permissions 2025-03-06 17:29:42 <@Zlopez:matrix.org> You can always ask them to fill the ticket 2025-03-06 17:30:03 <@Zlopez:matrix.org> @markrosenbaum:fedora.im Do you want to try it? 2025-03-06 17:30:40 <@markrosenbaum:fedora.im> I'll hold off for a bit, as of today work got shook up a bit but when things are more stable I'd love to try 2025-03-06 17:31:20 <@Zlopez:matrix.org> OK, let's go to next item on agenda then 2025-03-06 17:31:26 <@Zlopez:matrix.org> !info Summary of last week: (from current oncall) 2025-03-06 17:32:03 <@Zlopez:matrix.org> I saw only one ping during the week and that happened during my night and was already resolved when I get to computer 2025-03-06 17:32:23 <@Zlopez:matrix.org> So quiet week 2025-03-06 17:32:50 <@Zlopez:matrix.org> !info https://nagios.fedoraproject.org/nagios 2025-03-06 17:32:50 <@Zlopez:matrix.org> !info Go over existing items and fix them 2025-03-06 17:32:50 <@Zlopez:matrix.org> !topic Monitoring discussion [nirik] 2025-03-06 17:33:16 <@Zlopez:matrix.org> @nirik:matrix.scrye.com is on not around today and tomorrow, so let me take that 2025-03-06 17:33:37 <@Zlopez:matrix.org> In future we will be looking at zabbix, hopefully :-) 2025-03-06 17:34:13 <@markrosenbaum:fedora.im> Same here, I wrote an initial migration differences doc between v6 and v7 2025-03-06 17:34:22 <@Zlopez:matrix.org> So there are still the datanommer checks, that are still waiting for package review for unretirement 2025-03-06 17:34:50 <@Zlopez:matrix.org> And the log02, which we didn't figured out how to remove from nagios yet 2025-03-06 17:35:03 <@Zlopez:matrix.org> Other than that nothing outstanding 2025-03-06 17:35:22 <@markrosenbaum:fedora.im> Just removing the host? 2025-03-06 17:36:15 <@Zlopez:matrix.org> It's not that easy, it is handled by ansible and removing it from inventory didn't help, removing it from the host itself just helps till next time playbook is ran 2025-03-06 17:36:31 <@markrosenbaum:fedora.im> Yeah I assumed 2025-03-06 17:37:12 <@markrosenbaum:fedora.im> I was going to offer to look through ansible for that 2025-03-06 17:37:16 <@Zlopez:matrix.org> Feel free to try something, if you want 2025-03-06 17:37:33 <@markrosenbaum:fedora.im> Yeah, I'll try to look into it' 2025-03-06 17:37:37 <@markrosenbaum:fedora.im> Yeah, I'll try to look into it 2025-03-06 17:38:16 <@Zlopez:matrix.org> Now I have something I wanted to discuss here 2025-03-06 17:38:23 <@Zlopez:matrix.org> !topic OIDC sunset date 2025-03-06 17:38:33 <@Zlopez:matrix.org> !link https://pagure.io/fedora-infrastructure/issue/10241 2025-03-06 17:39:17 <@Zlopez:matrix.org> This is being in plan for some time, we would like to get rid of OpenID at some point and move completely to OIDC 2025-03-06 17:40:08 <@Zlopez:matrix.org> We identified few services that are still using OpenID authentication with FAS and hopefully that is all of them 2025-03-06 17:40:33 <@Zlopez:matrix.org> We will contact them once we decide on the sunset date for OpenID and help them move 2025-03-06 17:40:57 <@Zlopez:matrix.org> The proposed date was somewhere around F40 EOL 2025-03-06 17:41:20 <@Zlopez:matrix.org> Which will give us 3 months to move every remaining service to OIDC 2025-03-06 17:41:39 <@Zlopez:matrix.org> Thoughts about that? Ideas? 2025-03-06 17:43:19 <@Zlopez:matrix.org> +1? 2025-03-06 17:43:26 <@markrosenbaum:fedora.im> So is the only remaining service we own https://lists.pagure.io/? 2025-03-06 17:44:04 <@Zlopez:matrix.org> * https://lists.ovirt.org/ 2025-03-06 17:44:04 <@Zlopez:matrix.org> * https://lists.ncf.ca/ 2025-03-06 17:44:04 <@Zlopez:matrix.org> Now, the list is: 2025-03-06 17:44:04 <@Zlopez:matrix.org> * http://listat.jyps.fi/ 2025-03-06 17:44:04 <@Zlopez:matrix.org> * https://igfae.usc.es/ 2025-03-06 17:44:04 <@Zlopez:matrix.org> * https://lists.openldap.org/ 2025-03-06 17:44:04 <@Zlopez:matrix.org> * https://lists.pagure.io/ 2025-03-06 17:44:10 <@Zlopez:matrix.org> No, the list is: 2025-03-06 17:44:10 <@Zlopez:matrix.org> * http://listat.jyps.fi/ 2025-03-06 17:44:10 <@Zlopez:matrix.org> * https://igfae.usc.es/ 2025-03-06 17:44:10 <@Zlopez:matrix.org> * https://lists.openldap.org/ 2025-03-06 17:44:10 <@Zlopez:matrix.org> * https://lists.pagure.io/ 2025-03-06 17:44:10 <@Zlopez:matrix.org> * https://lists.ovirt.org/ 2025-03-06 17:44:10 <@Zlopez:matrix.org> * https://lists.ncf.ca/ 2025-03-06 17:44:38 <@smooge:fedora.im> i can help on removing hosts from nagios if you want that covered in meeting 2025-03-06 17:44:50 <@markrosenbaum:fedora.im> Yeah I do we own all of those? 2025-03-06 17:44:57 <@smilner:fedora.im> Is that external services using our openid or users of those systems using their Fedora account openid when signing in to those services? 2025-03-06 17:45:33 <@Zlopez:matrix.org> If you are talking about log02 it somewhat strange, the usual things are not working 2025-03-06 17:46:16 <@markrosenbaum:fedora.im> It looks like those external services are using our OpenID as a login option 2025-03-06 17:46:19 <@Zlopez:matrix.org> Yes, those are mailing lists that are using FAS as authentication method through OpenID 2025-03-06 17:46:34 <@markrosenbaum:fedora.im> It looks like those external services are using our FAS' OpenID as a login option 2025-03-06 17:46:41 <@markrosenbaum:fedora.im> It looks like those external services are using our FAS OpenID as a login option 2025-03-06 17:46:42 <@Zlopez:matrix.org> Yes, we need to migrate them to OIDC 2025-03-06 17:46:51 <@smooge:fedora.im> I will go look at my mess. I remember some magic 2025-03-06 17:47:47 <@Zlopez:matrix.org> All of them are mailing lists, so it should be easy to move them, I updated the mailman plugin for that when migrating to mailman3 2025-03-06 17:47:56 <@zodbot:fedora.im> zlopez gave a cookie to smooge. They now have 268 cookies, 6 of which were obtained in the Fedora 41 release cycle 2025-03-06 17:48:51 <@Zlopez:matrix.org> Feel free to reply to the ticket for OIDC, so we can announce the sunset date as soon as possible 2025-03-06 17:50:17 <@Zlopez:matrix.org> I'm not sure if that is actually hosted by us, as our mailman deployment already supports using OIDC 2025-03-06 17:50:29 <@markrosenbaum:fedora.im> Huh 2025-03-06 17:50:49 <@smooge:fedora.im> lists.pagure.io used to be one of the lists.fedoraproject.org I thought 2025-03-06 17:51:09 <@smooge:fedora.im> lists.pagure lists.fedoraproject lists.fedorahosted 2025-03-06 17:51:23 <@markrosenbaum:fedora.im> Resolves to proxy06, anyone know where it goes from there? 2025-03-06 17:51:59 <@Zlopez:matrix.org> Let me check, if it's the same deployment as fedoraproject.org it should already be using OIDC 2025-03-06 17:52:50 <@smooge:fedora.im> The lists.openldap.org and lists.ovirt.org may be run by @misc from OSAS 2025-03-06 17:53:14 <@smooge:fedora.im> and with that I don't think I can help on that more... 2025-03-06 17:53:37 <@Zlopez:matrix.org> I will need to reach to all of them 2025-03-06 17:54:35 <@markrosenbaum:fedora.im> It looks to me like it is 2025-03-06 17:55:11 <@Zlopez:matrix.org> Maybe the support it just still supporting OpenID as well 2025-03-06 17:55:20 <@Zlopez:matrix.org> Maybe the instance it just still supporting OpenID as well 2025-03-06 17:55:43 <@markrosenbaum:fedora.im> Welp, I do gotta run now 2025-03-06 17:56:17 <@Zlopez:matrix.org> Let me switch to open floor for the last few minutes 2025-03-06 17:57:29 <@Zlopez:matrix.org> !topic Open Floor 2025-03-06 17:58:00 <@Zlopez:matrix.org> Looking at the mailman admin interface and the lists.pagure.io is part of your deployment 2025-03-06 17:58:24 <@Zlopez:matrix.org> So it should already support OIDC like rest of our deployment 2025-03-06 18:00:03 <@Zlopez:matrix.org> So that must be someone trying to use openid endpoint from lists.pagure.io, so we can ignore that one 2025-03-06 18:00:22 <@Zlopez:matrix.org> One less to worry about 2025-03-06 18:00:32 <@Zlopez:matrix.org> We are at the end of our time 2025-03-06 18:00:41 <@Zlopez:matrix.org> Thanks everyone for joining us today 2025-03-06 18:00:46 <@Zlopez:matrix.org> !endmeeting