#9049 Please update ipsilon in prod.
Closed: Fixed by kevin. Opened by astepano.

Hello, please update ipsinlon package in prod.

We fixed a bug in upstream. This bug prevents to use: google-oauth-java-client library.

Related links:
https://pagure.io/ipsilon/issue/339
https://pagure.io/ipsilon/pull-request/340

This will help us to auth osci jenkins with Fedora OpenId Connect.

Tagging @puiterwijk @ngompa (just in case)

I am not sure where to get new package, maybe @ngompa could help please?
I see new builds at https://copr.fedorainfracloud.org/coprs/ngompa/ipsilon/builds/
But not at: https://koji.fedoraproject.org/koji/userinfo?userID=ngompa

Thank you!


Metadata Update from @mohanboddu:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: groomed, medium-gain, medium-trouble

I submitted the builds to Bodhi:

  • F32: https://bodhi.fedoraproject.org/updates/FEDORA-2020-08fca721c5
  • F31: https://bodhi.fedoraproject.org/updates/FEDORA-2020-6076850e9f

Thanks @ngompa !

I can update this tomorrow... some other folks indicated they would like to follow along on IRC and learn how things are setup. :)

@kevin Note that Ipsilon now ships a variant of the FAS theme as ipsilon-theme-Fedora, so you may want to consider using that if you are still using the old version of the theme. It was kindly ported to the latest Fedora Bootstrap assets by @hellcp.

@kevin if possible I would like also follow along on IRC :-D Thank you!

So, I didn't get to this friday... perhaps we could do it monday morning?

Sounds good :-D

So, due to timezones and schedules, I am just going to do this deployment and go over the steps as I do them here. :)

ipsilon is in our prodcution openshift cluster.
We deploy our apps with ansible from our ansible git repo.
In this case however, we have not made any changes in the ansible-repo for ipsilon.
Instead here what we want is to just do a new build (rebuild the container).

Check the version of fedora our container is based on:

➜ ansible git:(master) git grep fedora: | grep openshift | grep ipsilon
roles/openshift-apps/ipsilon/templates/buildconfig.yml: FROM fedora:31

So, it's fedora 31. Since the f31 ipsilon update above is in stable, we just need to rebuild the image to get it.

To do that, login to os-master01.iad2.fedoraproject.org as root (root has access to the oc commands there).

[root@os-master01 ~][PROD-IAD2]# oc project ipsilon
Now using project "ipsilon" on server "https://os-masters.iad2.fedoraproject.org:443".
[root@os-master01 ~][PROD-IAD2]# oc get bc
NAME      TYPE      FROM         LATEST
ipsilon   Docker    Dockerfile   8
[root@os-master01 ~][PROD-IAD2]# oc start-build ipsilon
build.build.openshift.io/ipsilon-9 started
[root@os-master01 ~][PROD-IAD2]# oc get pods
NAME               READY     STATUS              RESTARTS   AGE
ipsilon-9-build    0/1       PodInitializing     0          3s
[root@os-master01 ~][PROD-IAD2]# oc logs -f ipsilon-9-build
Step 1/10 : FROM fedora:31
 ---> adfbfa4a115a
Step 2/10 : RUN curl -o /etc/yum.repos.d/infra-tags.repo https://infrastructure.fedoraproject.org/infra/ansible/files/common/fedora-infra-tags.repo
 ---> Running in dab6e4a4c380
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   271  100   271    0     0  13550      0 --:--:-- --:--:-- --:--:-- 13550
 ---> 2d5be32b2bc5
Removing intermediate container dab6e4a4c380
Step 3/10 : RUN dnf install -y     ipsilon     ipsilon-authfas     ipsilon-openid     ipsilon-saml2     ipsilon-persona     ipsilon-infofas     ipsilon-authgssapi     ipsilon-openidc     fedora-ipsilontheme     mod_auth_openidc     python-psycopg2     python-setuptools     python-jinja2     httpd     python3-mod_wsgi
 ---> Running in ee18ae98cd41
...

That build, which finished, rolls out new pods based on it:

[root@os-master01 ~][PROD-IAD2]# oc get pods
NAME               READY     STATUS              RESTARTS   AGE
ipsilon-11-49f8t   1/1       Running             0          1m
ipsilon-11-9wvmq   1/1       Running             0          1m
ipsilon-11-f9f48   1/1       Running             0          24s
ipsilon-11-mfdph   1/1       Running             0          52s

@astepano can you test please?

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

https://osci-jenkins.ci.fedoraproject.org

@kevin++ :-) I can only say again: THANK YOU!

Metadata