canonical-ci-engineering team mailing list archive
-
canonical-ci-engineering team
-
Mailing list archive
-
Message #00752
Re: User authentication for CI Lab Jenkins instances
On Mon, Apr 14, 2014 at 5:53 PM, Alexander Sack <asac@xxxxxxxxxxxxx> wrote:
> On Mon, Apr 14, 2014 at 10:37 PM, Sergio Schvezov
> <sergio.schvezov@xxxxxxxxxxxxx> wrote:
>> On Mon, Apr 14, 2014 at 5:14 PM, Thomi Richards
>> <thomi.richards@xxxxxxxxxxxxx> wrote:
>>> Hi Larry,
>>>
>>> On Tue, Apr 15, 2014 at 2:08 AM, Larry Works <larry.works@xxxxxxxxxxxxx>
>>> wrote:
>>>>
>>>> During the migration each jenkins instance will be shut down. The
>>>> jenkins configuration file and users directory will be backed up. Once
>>>> the back up is complete the configuration will be switched from the
>>>> jenkins internal user database to OpenID/SSO which will use
>>>> https://login.ubuntu.com as the backend. User permissions will be
>>>> controlled by LP groups instead of being managed on a per-user basis.
>>>
>>>
>>>
>>> How will you be adding users to these launchpad groups? Which launchpad
>>> groups will be used to control access? After the migration is done, will I
>>> (and everyone else) still have permissions to run the same jobs as we did
>>> before the migration, or will we need to contact you individually?
>
> I agree which teams will get access (and to what) would be worth
> sharing. ev/retoaded?
>
>>
>> And if this is the case, will we have 24x7 support?
>
> Are you asking if the CI team will be there after the change to ensure
> you have everything you need and react swiftly? We surely don't offer
> 24x7, but what we plan to do is roll this out early morning Larries
> time, so all of you can check and test and we we can react swiftly.
> Also the change is planned in a way that we can completely rollback it
> in case there are too many unforseen issues.
I'm more interested in the 7 than the 24; as in if a build fails; will
I be able to trigger a rebuild? If we need to build a click package;
will I still be able to trigger it? This is standard pre train stuff
and only applicable if this change implies losing the privileges we
currently have.
Furthermore; trains on weekends would be nice.
Follow ups
References