<div dir="ltr">I finally made pulp_container CI work with https,<div>I also did some changes on pulp_installer, I believe these changes will make it possible to run functional tests on dev environment.</div><div><br></div><div>I think now it is a matter of deciding when is the best time to merge the PR on the single container and if latest tag should be https or not</div><div><br></div><div>PRs:</div><div><a href="https://github.com/pulp/pulp-oci-images/pull/73">https://github.com/pulp/pulp-oci-images/pull/73</a></div><div><a href="https://github.com/pulp/pulp_installer/pull/614">https://github.com/pulp/pulp_installer/pull/614</a></div><div><a href="https://github.com/pulp/plugin_template/pull/379">https://github.com/pulp/plugin_template/pull/379</a></div><div><a href="https://github.com/pulp/pulpcore/pull/1283">https://github.com/pulp/pulpcore/pull/1283</a><br></div><div><a href="https://github.com/pulp/pulp_container/pull/304">https://github.com/pulp/pulp_container/pull/304</a></div><div><a href="https://github.com/pulp/pulp_rpm/pull/1977">https://github.com/pulp/pulp_rpm/pull/1977</a></div><div><a href="https://github.com/pulp/pulp_ansible/pull/572">https://github.com/pulp/pulp_ansible/pull/572</a></div><div><a href="https://github.com/pulp/pulp-2to3-migration/pull/362">https://github.com/pulp/pulp-2to3-migration/pull/362</a><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><br></div><div dir="ltr">Best regards,</div><div dir="ltr"><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize">Fabricio</span><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize"> </span><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize">Aguiar</span><div>Software Engineer, Pulp Project</div><div><a href="https://www.redhat.com/" style="color:rgb(0,136,206);font-family:RedHatText,sans-serif;font-size:12px;margin:0px" target="_blank">Red Hat Brazil - Latam</a><br></div><div>+55 22 999000595</div><div><img src="https://marketing-outfit-prod-images.s3-us-west-2.amazonaws.com/f5445ae0c9ddafd5b2f1836854d7416a/Logo-RedHat-Email.png" width="96" height="22"><br></div></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Apr 27, 2021 at 5:35 PM Fabricio Aguiar <<a href="mailto:faguiard@redhat.com">faguiard@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">I created https branch: <a href="https://github.com/pulp/pulp-oci-images/tree/https" target="_blank">https://github.com/pulp/pulp-oci-images/tree/https</a><div>and pushed the following images:<br>- pulp/pulp-ci-centos:https</div><div>- pulp/pulp:https<br clear="all"><div><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><br></div><div>Now we can test on the plugins,</div><div>I followed your suggestion and did it on pulp_npm:<br><a href="https://github.com/pulp/pulp_npm/pull/89" target="_blank">https://github.com/pulp/pulp_npm/pull/89</a><br></div><div dir="ltr"><br></div><div dir="ltr">Best regards,</div><div dir="ltr"><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize">Fabricio</span><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize"> </span><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize">Aguiar</span><div>Software Engineer, Pulp Project</div><div><a href="https://www.redhat.com/" style="color:rgb(0,136,206);font-family:RedHatText,sans-serif;font-size:12px;margin:0px" target="_blank">Red Hat Brazil - Latam</a><br></div><div>+55 22 999000595</div><div><img src="https://marketing-outfit-prod-images.s3-us-west-2.amazonaws.com/f5445ae0c9ddafd5b2f1836854d7416a/Logo-RedHat-Email.png" width="96" height="22"><br></div></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Apr 27, 2021 at 9:25 AM David Davis <<a href="mailto:daviddavis@redhat.com" target="_blank">daviddavis@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">This is great. Thank you for working on it.<div><br></div><div>As a next step, would it make sense to create a branch and then try to deploy a new temporary tag from that branch? Then maybe we can test a plugin (eg pulp_npm) against this new image and see what breaks.<div><div><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><br></div><div>David</div></div></div></div></div></div></div></div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Apr 26, 2021 at 5:01 PM Fabricio Aguiar <<a href="mailto:faguiard@redhat.com" target="_blank">faguiard@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">I started this POC: <a href="https://github.com/pulp/pulp-oci-images/pull/73" target="_blank">https://github.com/pulp/pulp-oci-images/pull/73</a><div>It enables https on the single container, once merged, the CI for every plugin will run the functional tests using https.</div><div>Probably it would break the majority of the CIs, we need to discuss when is the best moment to merge this PR or discuss alternatives<br clear="all"><div><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><br></div><div dir="ltr">Best regards,</div><div dir="ltr"><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize">Fabricio</span><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize"> </span><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize">Aguiar</span><div>Software Engineer, Pulp Project</div><div><a href="https://www.redhat.com/" style="color:rgb(0,136,206);font-family:RedHatText,sans-serif;font-size:12px;margin:0px" target="_blank">Red Hat Brazil - Latam</a><br></div><div>+55 22 999000595</div><div><img src="https://marketing-outfit-prod-images.s3-us-west-2.amazonaws.com/f5445ae0c9ddafd5b2f1836854d7416a/Logo-RedHat-Email.png" width="96" height="22"><br></div></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Feb 9, 2021 at 10:55 AM Fabricio Aguiar <<a href="mailto:faguiard@redhat.com" target="_blank">faguiard@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Our nginx conf only supports http now: <a href="https://github.com/pulp/pulp-oci-images/blob/latest/assets/nginx.conf#L15" target="_blank">https://github.com/pulp/pulp-oci-images/blob/latest/assets/nginx.conf#L15</a><div>For not breaking all plugins, I believe we can build a new CI image that supports https.</div><div>Maybe a template_config parameter - test_https: true would switch the images</div><div><div><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><br></div><div dir="ltr">Best regards,</div><div dir="ltr"><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize">Fabricio</span><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize"> </span><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize">Aguiar</span><div>Software Engineer, Pulp Project</div><div><a href="https://www.redhat.com/" style="color:rgb(0,136,206);font-family:RedHatText,sans-serif;font-size:12px;margin:0px" target="_blank">Red Hat Brazil - Latam</a><br></div><div>+55 22 999000595</div><div><img src="https://marketing-outfit-prod-images.s3-us-west-2.amazonaws.com/f5445ae0c9ddafd5b2f1836854d7416a/Logo-RedHat-Email.png" width="96" height="22"><br></div></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Feb 9, 2021 at 5:16 AM Matthias Dellweg <<a href="mailto:mdellweg@redhat.com" target="_blank">mdellweg@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>I believe this is at least solving the problem partially:<br></div><div><br></div><div><a href="https://github.com/pulp/pulp-smash/pull/1251" target="_blank">https://github.com/pulp/pulp-smash/pull/1251</a></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Feb 8, 2021 at 9:48 PM Brian Bouterse <<a href="mailto:bmbouter@redhat.com" target="_blank">bmbouter@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>I believe all of our plugins (and CI) require HTTP and do not work with HTTPS. I'm not well versed in what needs to be done to fix this, but I think we should fix it.</div><div><br></div><div>Can the CI group have a 30 min call to talk over what needs to be done? Or maybe share some info here?</div><div><br></div><div>The main issue I'm aware of is that the tests are not prepared to trust an https certificate that is self-signed. I'm not exactly sure where we can change that in one place either.</div><div><br></div><div>Thanks!</div><div>Brian</div><div><br></div><div><br></div><div><br></div></div>
_______________________________________________<br>
Pulp-dev mailing list<br>
<a href="mailto:Pulp-dev@redhat.com" target="_blank">Pulp-dev@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/pulp-dev" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/pulp-dev</a><br>
</blockquote></div>
_______________________________________________<br>
Pulp-dev mailing list<br>
<a href="mailto:Pulp-dev@redhat.com" target="_blank">Pulp-dev@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/pulp-dev" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/pulp-dev</a><br>
</blockquote></div>
</blockquote></div>
_______________________________________________<br>
Pulp-dev mailing list<br>
<a href="mailto:Pulp-dev@redhat.com" target="_blank">Pulp-dev@redhat.com</a><br>
<a href="https://listman.redhat.com/mailman/listinfo/pulp-dev" rel="noreferrer" target="_blank">https://listman.redhat.com/mailman/listinfo/pulp-dev</a><br>
</blockquote></div>
</blockquote></div>
</blockquote></div>