Hello, please update ipsinlon package in prod.
We fixed a bug in upstream. This bug prevents to use: google-oauth-java-client library.
Related links: https://pagure.io/ipsilon/issue/339 https://pagure.io/ipsilon/pull-request/340
This will help us to auth osci jenkins with Fedora OpenId Connect.
Tagging @puiterwijk @ngompa (just in case)
I am not sure where to get new package, maybe @ngompa could help please? I see new builds at https://copr.fedorainfracloud.org/coprs/ngompa/ipsilon/builds/ But not at: https://koji.fedoraproject.org/koji/userinfo?userID=ngompa
Thank you!
Metadata Update from @mohanboddu: - Issue priority set to: Waiting on Assignee (was: Needs Review) - Issue tagged with: groomed, medium-gain, medium-trouble
I submitted the builds to Bodhi:
Thanks @ngompa !
I can update this tomorrow... some other folks indicated they would like to follow along on IRC and learn how things are setup. :)
@kevin Note that Ipsilon now ships a variant of the FAS theme as ipsilon-theme-Fedora, so you may want to consider using that if you are still using the old version of the theme. It was kindly ported to the latest Fedora Bootstrap assets by @hellcp.
ipsilon-theme-Fedora
@kevin if possible I would like also follow along on IRC :-D Thank you!
So, I didn't get to this friday... perhaps we could do it monday morning?
Sounds good :-D
So, due to timezones and schedules, I am just going to do this deployment and go over the steps as I do them here. :)
ipsilon is in our prodcution openshift cluster. We deploy our apps with ansible from our ansible git repo. In this case however, we have not made any changes in the ansible-repo for ipsilon. Instead here what we want is to just do a new build (rebuild the container).
Check the version of fedora our container is based on:
➜ ansible git:(master) git grep fedora: | grep openshift | grep ipsilon roles/openshift-apps/ipsilon/templates/buildconfig.yml: FROM fedora:31
So, it's fedora 31. Since the f31 ipsilon update above is in stable, we just need to rebuild the image to get it.
To do that, login to os-master01.iad2.fedoraproject.org as root (root has access to the oc commands there).
[root@os-master01 ~][PROD-IAD2]# oc project ipsilon Now using project "ipsilon" on server "https://os-masters.iad2.fedoraproject.org:443". [root@os-master01 ~][PROD-IAD2]# oc get bc NAME TYPE FROM LATEST ipsilon Docker Dockerfile 8 [root@os-master01 ~][PROD-IAD2]# oc start-build ipsilon build.build.openshift.io/ipsilon-9 started [root@os-master01 ~][PROD-IAD2]# oc get pods NAME READY STATUS RESTARTS AGE ipsilon-9-build 0/1 PodInitializing 0 3s [root@os-master01 ~][PROD-IAD2]# oc logs -f ipsilon-9-build Step 1/10 : FROM fedora:31 ---> adfbfa4a115a Step 2/10 : RUN curl -o /etc/yum.repos.d/infra-tags.repo https://infrastructure.fedoraproject.org/infra/ansible/files/common/fedora-infra-tags.repo ---> Running in dab6e4a4c380 % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 271 100 271 0 0 13550 0 --:--:-- --:--:-- --:--:-- 13550 ---> 2d5be32b2bc5 Removing intermediate container dab6e4a4c380 Step 3/10 : RUN dnf install -y ipsilon ipsilon-authfas ipsilon-openid ipsilon-saml2 ipsilon-persona ipsilon-infofas ipsilon-authgssapi ipsilon-openidc fedora-ipsilontheme mod_auth_openidc python-psycopg2 python-setuptools python-jinja2 httpd python3-mod_wsgi ---> Running in ee18ae98cd41 ...
That build, which finished, rolls out new pods based on it:
[root@os-master01 ~][PROD-IAD2]# oc get pods NAME READY STATUS RESTARTS AGE ipsilon-11-49f8t 1/1 Running 0 1m ipsilon-11-9wvmq 1/1 Running 0 1m ipsilon-11-f9f48 1/1 Running 0 24s ipsilon-11-mfdph 1/1 Running 0 52s
@astepano can you test please?
Metadata Update from @kevin: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
https://osci-jenkins.ci.fedoraproject.org
@kevin++ :-) I can only say again: THANK YOU!