[OpenStack-Infra] [Zuul] can not get zuul env variables, such as 'ZUUL_URL'

Asselin, Ramy ramy.asselin at hpe.com
Wed Sep 7 16:03:15 UTC 2016


Simon proposed an updated patch to fix this issue: https://review.openstack.org/#/c/366803/1

From: Asselin, Ramy
Sent: Tuesday, September 06, 2016 2:59 PM
To: li.yuanzhen at zte.com.cn; mihailmed at gmail.com; eantyshev at virtuozzo.com; Thiago Paiva Brito <thiagop at lsd.ufcg.edu.br>
Cc: openstack-infra at lists.openstack.org
Subject: Re: [OpenStack-Infra] [Zuul] can not get zuul env variables, such as 'ZUUL_URL'

Evgeny was working on getting Jenkins pinned to older working versions.
He ran into some issues posted on the openstack-dev mailing list [1] where the merged patch doesn’t actually work:

[1] http://lists.openstack.org/pipermail/openstack-dev/2016-September/102983.html

[2] https://review.openstack.org/354086

From: li.yuanzhen at zte.com.cn<mailto:li.yuanzhen at zte.com.cn> [mailto:li.yuanzhen at zte.com.cn]
Sent: Monday, September 05, 2016 8:20 PM
To: mihailmed at gmail.com<mailto:mihailmed at gmail.com>
Cc: openstack-infra at lists.openstack.org<mailto:openstack-infra at lists.openstack.org>
Subject: Re: [OpenStack-Infra] [Zuul] can not get zuul env variables, such as 'ZUUL_URL'

Hi Mikhail,

Very glad to receive your response.
In my env, the version of Jenkins is 2.7.2.


Now my Jenkins jobs can get environment variables after I modify my
Jenkins env with your suggestion.
Thank you very much.


>
>Hi Li,
>
>On Sun, Sep 4, 2016 at 10:18 AM,  <li.yuanzhen?zte.com.cn> wrote:
>> Hi all,
>>         For deploy CI env, I need a help for Zuul.
>>
>>         In the slave node, I can not get the "zuul"
>>         environments variables using 'env' shell command,
>>         such as 'ZUUL_URL'.
>>
>>         The following is the config and log info
>>         *) /etc/zuul/layout/zuul.conf:
>>                 http://paste.ubuntu.com/23132730/
>>         *) /etc/jenkins_jobs/config/citest.yaml
>>                 http://paste.ubuntu.com/23132723/
>>         *) jenkins job result:
>>                 http://paste.ubuntu.com/23132737/
>>         *) /var/log/zuul/zuul.log
>>                 http://paste.ubuntu.com/23132745/
>>         *) /var/log/zuul/merger-debug.log
>>                 http://paste.ubuntu.com/23132748/
>>         *) /var/log/zuul/debug.log
>>                 http://paste.ubuntu.com/23132762/
>>
>>        I check the zuul code and it has been got the
>>         'zuul_url' variables in zuul-mergerr, but in slave nodes,
>>          these        variables can not be passed by zuul-scheduler.
>>
>>         Is there any wrong in my zuul config or jenkins jobs?
>
>You might be affected by the fix to SECURITY-170 [1] in new Jenkins
>you installed. It prevents Zuul from passing paramters that are not
>white listed. Which version of Jenkins are you using? Last version
>without the security fix is 1.651.1.
>
>If you have later version, you would need to either white list all
>zuul variables (
>-Dhudson.model.ParametersAction.safeParameters=ZUUL_URL,ZUUL_COMMIT ),
>or disable that security feature (
>-Dhudson.model.ParametersAction.keepUndefinedParameters=true ).
>
>[1] https://wiki.jenkins-ci.org/display/JENKINS/Plugins+affected+by+fix+for+SECURITY-170
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-infra/attachments/20160907/7e5d504d/attachment.html>


More information about the OpenStack-Infra mailing list