Jenkins Configuration as Code Project, 22 Apr 2020

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Jenkins Configuration-as-Code project meeting, April 22, 2020

Description

Recording of the regular Jenkins Configuration-as-Code sub-project meeting. Breaking changes in the Jenkins core 2.231 and required JCasC upgrade, new features and compatibility enhancements, ongoing development and future plans. Full agenda and meeting notes: https://docs.google.com/document/d/1Hm07Q1egWL6VVAqNgu27bcMnqNZhYJmXKRvknVw4Y84/edit#heading=h.ok6j1hen9npt

A

Welcome to the regular Jenkins configuration has called Project meeting and day is April 22nd and we are going to discuss the project status and going development, and recent news in the Jenkins configuration is called area so basically we'll be running the center transgender and we have a number of participants on the call. So thanks to everyone for joining okay. So what do we have in our agenda for today? So we've got some news, especially about the breaking changes in the Jenkins core, so team. Would you like to summarize them yep.

B

So there was a change in Jenkins quarter who removed the job Eric's annotations for detecting malleability.

B

It turned out that the configurations code plug-in was. We was pulling those annotations from Jenkins core, which caused confederations code to completely break if in most in many cases, an example being credit insurance, but many other ways that it could just completely blow up and stop working.

B

We shipped a quick fix on the day we found us and we've got clean effects coming soon. We, basically we added the annotations in configurations code temporarily and we've got a follow up, pull request to remove them, but didn't want to have to do the testing at the same time just want to and get the emergency fix out.

B

Apart from that, we have so Dickens 2 to 6 change the layouts on the confirm the manage page to have categories. If you didn't specify when you went right to the bottom and categorized so now, we've seen it so that we're in a category and we're further at the top. Now, apart from that sure, there might've been a couple of other minor changes in the release, notes.

A

Yeah just second time opening click on my screen.

B

Some Javadoc improvements and some QA new issue dialogues. That's a recommendation to Tran bring questions to the Gilda chat. First, before opening a github issue. Yeah.

A

I really feature which is a became available and github couple of months ago. So now you see get a chat here and if you want to add something else, it's ultimately possible so here plug in maintaining it, you can add even more links, for example, linking to your special interest group channels, like my name, please and whatever so its quality of life improvement for maintained years, and you just request anything another llamo file.

A

Ok, thank you. For this overview. Another Jake asked related news that yesterday we had online meetup. They we had a presenter from Africa about how to use configuration as code together with kubernetes. It includes the Jake asked plug-in also integrations with job day sale, also helm as infrastructures code layer.

A

So if you're interested for some example how to run Jake asked in practice, you can take a look at this online Meetup and the recording is already published, and speaking of that, I have a topic for later about other meetups and blog posts, but yep we can discuss elated. You can do basic eating, okay, any other in use. We are missing.

A

I believe we had some artists on tragic as computability purchase in the Jenkins Corps thanks the team.

B

Yes, oh those administrative monitors, his support and it's very nice because I used it the next day and um there's been a couple of ones related to time, zone and ssh authorized keys for the local security realm.

B

A

So comas on so I hear.

B

Yeah, it's a Torres case might not be there because it came in as a it's. A library, dependency of Jenkins, core I think we.

A

Usually do that yeah allow SSH a terrorised key is to be configured using configuration and code. It was just one months ago, so we usually put our dependencies here as well, especially when there is a change visible to Jenkins users.

C

So, in other related news, full path to the sequence. So there's this the wish to access the full path, because you might have faith and move the team set up where you have the same secrets in different paths. So it's nice to resolve in different ways.

B

Yes, jerk evil secret source resolver was released a few weeks ago. I think.

A

D

A

I'm sure court fault.

A

I get this one.

A

So here we get healthful pass variables to Jake, asked secrets.

E

A

A nice improvement.

A

Thank you here. We have time zone property.

A

Then ssh oath keys and the third one was update administrative monitors.

E

F

So anything else about the news: yes, um jerk, evil secret sauce, resolver.

A

A

mmm Just imagine.

B

No joke it's in the jerky goes your K key right.

A

To the zero.

A

B

Was released in like one point no and also but two.

A

B

To fix a a resource leakage, but we changed is decays, they didn't behave. The same.

A

Okay, anyway, it's a great improvement, especially for example, frisian can say, oh and other instances which are asia because could consume these features.

A

Quite a number of news- and I believe there are more jake- has computability patches happening on the background he and there I definitely know that adrian has released a new version of my left leg in a while ago.

B

So that was the email, a couple of exes mailer I think.

E

Tls property that was not configurable because of a poacher issue, so yeah it was a quick 132 to figure that.

B

Just also configuring that uses email address for the local security realm as well.

A

So quite a list here and yeah thanks a lot to everyone who is working on Jake, ask support not yeah better. It's a lot of other changes here and there, but even this is really impressive.

A

Okay, so should we talk about ongoing development.

F

A

The first item force is, of course, system written permission. So how was going team.

B

Good slowly so plugin manager and talked configuration got marriage last week, ish I think I think plug a manager ISM that latest weekly and possibly tolling the one before that.

B

So that's great because plugin manager was a big one so that people could see what versions of plugins are installed and what updates are available.

A

Yeah, yes, also talking to go to issue is yeah.

A

It's actually am just looking for other items, so basically on truck to have something pretty useful in the next release: right next LCS yeah next LCS yeah. So we will have LCS baseline selection in two weeks and yeah by these two weeks. You like to get all these patches in place, because community ratings look pretty good. Yet.

B

A

Still have a chance to land more fixes, yeah.

B

In initial, a bit more to support landed in the last weekly as well I think there's just one. Admin monitor and I've got five more locally. That I just need to test. So I've done the changes finishing to do some UI to exist. Mmm-Hmm.

A

F

It in your home user reviews from the team you need.

B

Log recorders, reviewed and agent and cloud configuration, reviewed, I think Daniels started on started on the local quarter, one he started reporting a couple unrelated issues he's found. Well he's been doing it.

F

A

We create so currently you track. Changes in my drink is Judit right.

B

I must yeah they're in their engines. Tierra I'm, actually just tracked them by searching for system in the filter here, wouldn't make sense to create a project.

F

A

Because, ok, even let's just do it because it might be useful, since it implies changes across multiple repositories and yeah, not everybody uses JIRA nowadays, so jab 2 to 4 system.

A

Okay and I will also have something to be linked from the roadmap from the job. Ok, so public repositories.

A

Fix it later, I should have okay, I'll fix it later, but yeah up to the meeting, but we have a project. So anyone is welcome to just link it at all. Goodness: code developers, project maintenance,.

A

Okay, thank you.

A

My said for system with permission, I finally updated my demo to support it well, I just bumped to the weekly, not even to the previous ones. Yes, it works pretty. Well, though, I also started reporting a plugin manager to use plug-in installation manager tool because I want to use dependable and I, don't want to use custom or packages in this demo, so it takes a bit longer than I expected if.

B

You go a way of doing the painter ball with the plugin manager, CLI.

A

Yes, so how it works. Currently, you can use maybe an HPA plugin to dump a list of plugins, so I added support of down like in 60 from there and then I just generate like in 60 as a part of the kit build.

E

B

Do you have a link.

A

B

A

Be published, okay,.

B

Because yeah I'm interested in that and I was thinking of where the customer package it was the right way over. There was much safer yeah.

A

So, just to explain some context about it, so there was a for Bill of Materials, which we actually implemented. So now you can use maybe an HPA plugin to generate a bill of materials. It's basically a mall, it's Yama lien in different format, which is not supported by plug-in installation manager tool at the moment, but still it's a foundation and I just tweaked the code to generate plugins 16 in the future. We just need to generate final plug-in installation manager, camel I, believe you.

B

Know I mean just the format that it takes to this. If it's a standard.

F

If it makes sense monkey.

A

So I'll try to finish all my hot curry over the next week, yeah. First, let's try to integrate plug-in bomb, but what it's basically based on plug-in bomb anyway. So we just combines everything together without customer packager, ok and here speaking of bill of materials, I.

B

Finally, got past their last bomb blocker to now we're on to another one.

B

A

B

We got finally got up to 1.36 in the last bomb release, and now we can't go any further.

A

It's a it's a brain.

A

What is so the problem are in this race eat a.

B

Dozen to PCT dozen, so basically in script, security palm they have configuration is carried in configuration skirt, a stylist and PCT is only updating. The comparison is codependency and not the test. Anna Swan and the T stylist is trying to load all the old sneaking occurred and it's conflicting so.

A

The one we didn't fit, we need to bleed PC to eat or drink, assess harnesses all right, yeah yeah. The problem is that there isn't a bit of Jenkins test. Harness also includes upgrade of htmlunit. So it's not going to be easy because you have did Jenkins test harness and after that everything starts breaking because of binary incompatible changes at least a day. It's my suspicion. I really.

B

Had I met any issues, I'm upgrading HTML units, the only one is I, had I had one fixed on the jdk tool. Plugin, it's a jdk to a plugin, actually started working after upgrading it or is it didn't work without the.

A

Old tray total is GD key to this week. I wanted to do it anyway, because he still depends on some other plugins, so well bump the core baseline and release it. It's.

C

A

C

To clarify it, it's we were talking about. The configuration is code test harness yes,.

B

Comparison is carried, not they not the Jenkins tier Thomas. Sorry.

A

Then I confused everything. Yes, it's okay! Bump of G cask, test fairness, right, yeah,.

B

So those I said there was two suggestions. One was at a hook into PCT to update the J cast test. Thomas went updating the Jackass plugin and the suggestion was for PCT if it finds that it's updating a property to update the property rather than just replace the property with a server version.

A

Yes, speaking of that, what we could do since Jake asked is widely used. You could just integrate it into plug-in pawn because, for example, what we can do plug-in pomo includes dependency management section. So here we could add. Basically Jake asked test harness. You could all set a property which defines its version similar to how we do with other tools, and then we can assume that all begins, which use Jack Astor's harness, would be ranked on the same property name and every write about it in PCT.

A

Would it make sense.

C

Yeah, the current guide is to that people include a property already for when they need the test harness well.

B

The guidance is really is used, Bob, where you can and then don't add one true problem as we had it. We had issues getting the latest bomb release out because we to update everyone so their their ISM. So possibly we can yeah. It's just just difficulty having a breaking change like this. The sneaky ml fast path changes, because normally that wouldn't be a breaking change, so it would work even though they're out of sync, mmm we would have had the same issue with the TCR I assume as well.

A

So a way to work it around just to shade instinct llamo.

B

A

Using the plug-in button, in such case, you will be responsible for keeping it up to date, which is quite complicated. Also shaking such libraries is always a risk because something mr. broken I'm.

B

Happy not maintaining just could just need to get over this hurdle some way.

G

A

So, anyway, thanks a lot for working on this bomb and finally, we have bombs for recent versions.

G

A

Before that we've had 176, though many projects moved on and now we have 196 right and.

B

Now we're up to 2 to 2 mm to the latest yeah.

A

Just missed that okay, so thank you. I will definitely update some components, for example jenkees file runner because they have been already immigrated to this bomb.

A

So, let's move on then CI Jen can say always code.

B

Just ever week ago, I think.

B

Olivia was just completely focusing only. What am I released? I'm, sorry! Yes, what does a year briefly mean submit join you for meeting yesterday.

A

So need to do that better sooner than later, yeah chorus. Automation still requires a lot of things to be done.

A

Yeah, our new scheduling can say instances is all already configured this code, but for staging can say you need to apply more patches, so maybe in a second part of May. He would finally get to that. Let's see yeah yeah thanks a lot for staging that, because it's definitely a great foundation.

F

F

Hurry up the other changes there.

A

And I will be able to finally kill my development instance for pipeline libraries.

A

Okay, so secret encryption is external secret key. A quick update, no updates, but I still intend to do that and pretty much the same for configurator EPA I tried implementing that two weeks ago. I hid some issues with binary compatibility. I can't fix, without reflection, so I'm back to the drawing board for a while.

A

But yeah one question to team Joseph and others. So since we already updated called dependency, what is a priority from your point of view? Do we still want to do that for the future I.

B

Don't know like most people seem happy enough bumping. Their codependency is required. They seems to be less hold back and increasing conversions. Recently from what I've seen among other plugin developers, it used to be just target the very lowest version, but people seem happier we can always release lower versions, as required as well. I was wondering if one I mean just going back to the last one. Only jake has test harness for the bomb. We could release a version of the snake here, more.

B

Sneaky and more dependency low enough version that script security could bump its core version too, and we could just hack our way around us.

B

Your mind, it doesn't solve the problem, but it doesn't solve the PCT problem, but it would give us passes PR.

C

I just picked this test code. 82% is over two point, one: seven six-four, so it's pretty high I, don't think that many people are afraid of bumping.

C

When they need to we're only on 50% on to two to one.

A

G

A

G

A

G

One question about that earlier: just how I I think I'm missing something. How is this related to a configurator, a TI, clogging, lapping.

A

G

A

We had a long discussion about configuration, call Ascott api because current situation, if you want to offer a new api for other plugins, then these other plugins will have to depend on the same version of the core Ezra cask or higher. So it means that now we should Jake ask for the recent version.

A

If we want to add new API, for example, for configurators, then you will have to update other plugins to be compatible with this new version, and we don't have so many use cases for configurator api, but at the same time it's it might cause problems at some point. If we need to drastically extended. For example, we did some configurator API changes for the communication generation when we working on the community-based project with shaylen, and there might be some similar changes away.

G

Okay, so the idea would be to have a configurator API plug-in, depending on a baseline and then configuration as code depending on another baseline. Yes,.

A

So all configurator API, Mallis, conservative and updating come there when it's really needed and the configuration is could plug in basically a tour link as it's needed to consume huge Incas core features, to example, new milestones, system, readmissions and other stuff.

G

A

A

So far, there is not that nobody mention that, but yeah I think that at some point it will become a problem for us.

G

Okay, yeah all other clients, follow this approach like pipeline. For example, there.

B

G

A lot of pipelining API is something so plugins. Don't need to depend on the actual pipeline. Yeah.

A

Okay, so anyway, is this on my list. I'm not sure yeah I confirm that it's not that easy yeah.

B

A

B

A

When I did it in 2017, it was easy, but yeah. Now it's more complicated to use all these inter dependencies yeah. Okay, we already only bed somehow, okay, they put some items like road map updates, some accounts, etc. Before we press it to date, do we have any technical topics so that we can spend time on them.

A

Other than Antonia late in your.

F

D

Doc, the doc the lock for editing I mean, is it still publicly available to I? Did.

B

F

See the docs yeah.

D

I go to request from the.

A

Let's see what the admissions, so what has happened? Let you know specific.

B

People can access.

A

That's interesting, I.

A

Guess this document is still on viability in the right. Yes,.

B

Can you change.

F

A

A

Let's really strange sorry, no.

D

A

A really a move today between Google Drive folders I'm, not sure, because before that it was publicly visible thanks.

B

This is anyone at practicum with the linking for me.

F

Another option.

A

I'll show you whether it's even on track my account but yeah, so Google technicians.

A

So I'll take an action item to contact Evelina. Yet maybe.

B

A

Else could contact.

B

Yeah yeah I think they're in the cattle channel, but I'm not sure.

D

B

Pick it up even after your change, it's still not visible, really yeah I think you just made it visible to people that practice.

A

Re it's my mistake.

A

You should probably move it out of pragmas drive anyone yeah, that's nothing that by the way, okay, so I'll take it.

A

Okay, anything else before we press it, so we have ten minutes left.

G

A

So yeah a quick update on the Jenkins roadmap. So yet tonight we have a first drink, is roadmap meeting and we'll be working with special interest groups and projects to have it in place. So it's quite long and will likely need to refactor it a bit and butter. Some items related to Jake asked. For example, we have G cos like incompatibility, also system edit permissions, a built in plug-in management.

A

It's mostly plug-in installation manager, plus integration, Center distributions than pluggable configuration sources which we discussed before the roadmap and basically they'd see about Jake asked right now. Obviously other stories may include some beats, but yet the number of stories he is quite limited and if anyone wants to put something else on the list, please do so because yeah this list is community driven.

A

Okay, our missing something important on this list.

G

There is a lot of things there.

A

Specific yeah, so we will be socializing to this roadmap. Later it's still working progress, so they will be more items like they're, always hopefully less, but let's yeah.

A

Okay, mmm so yeah the next one plug-in compatibility, highlights I, believe we discussed it in the beginning and the new section changing some account for meetings. So one good news that we finally have a specialist account for Jenkins what it means that yeah.

A

So if you participated yesterday in the online Meetup, we already used it to run some more webcast but yeah what it practically mean so that now we can manage permissions to this account on our own and we can grant more access to more people. So strange.

B

Hmmm nice train yeah.

A

Like stream as well, but yes specifically for sick meetings, I think it made sense to me great putting your account as well, starting from where next meetings yeah.

B

Definitely I mean it's nice having to manually upload the YouTube video later.

A

So is anyone against.

B

E

Do you get access to.

B

Our gig is it possible for other people to get access is.

A

B

A

The reasons so what is in my plan to writing you jab for some account, but we still sub-project leaders, sick leaders that are eligible towards this bed so similar to YouTube. Then, once it's approved, I believe that we can just transfer access to you team.

A

Okay, so I wanted to ask Joseph as well, but he disappeared so anyway.

A

Okay, so online meetups and blogs.

A

Yet question to everyone: I will have some new features about Jake asked. Would anyone be interested to share something because yeah we're looking for content yeah.

B

I'm planning to write a system, murid blog, but okay, users and developers, side of us.

D

Even I would be interested in contributing so.

A

Basically, any topic: you would like to speak about here's a good opportunity.

A

Just think okay I will I think about here. Okay, so it's coming into driven. We definitely do assign tasks to create something yeah, but if somebody is interested yes and specifically about Jenkins and kubernetes, so we run a series of online meetups and if somebody wants to present how to use Jake asked together with kubernetes it's more than welcome.

B

Yeah for serving 22, I own chickens and communities with Jake asked in helmand I guess I have started writing it. Actually writing it. Coming weeks ago, great.

A

A

If anyone once also wants to create something, just do it, my.

B

Problem was, it was just so much content and you needed to split it down into multiple posts.

A

Same program yep, sometimes it works okay. So that's it any other topics for the today's meeting. I see.

A

Okay, ever there is no other topics we can just close done.

E

Okay, thank you. Yeah.

A

F

Guy mm-hmm.