[OpenStack-Infra] [Zuul] can not get zuul env variables, such as 'ZUUL_URL'

Evgeny Antyshev eantyshev at virtuozzo.com
Thu Sep 8 10:38:19 UTC 2016


This patch gives ability to set jenkins_version from puppet-openstackci
https://review.openstack.org/367232

On 09/07/2016 07:03 PM, Asselin, Ramy wrote:
>
> Simon proposed an updated patch to fix this issue: 
> https://review.openstack.org/#/c/366803/1
>
> *From:*Asselin, Ramy
> *Sent:* Tuesday, September 06, 2016 2:59 PM
> *To:* li.yuanzhen at zte.com.cn; mihailmed at gmail.com; 
> eantyshev at virtuozzo.com; Thiago Paiva Brito <thiagop at lsd.ufcg.edu.br>
> *Cc:* openstack-infra at lists.openstack.org
> *Subject:* Re: [OpenStack-Infra] [Zuul] can not get zuul env 
> variables, such as 'ZUUL_URL'
>
> Evgeny was working on getting Jenkins pinned to older working versions.
>
> He ran into some issues posted on the openstack-dev mailing list [1] 
> where the merged patch doesn’t actually work:
>
> [1] 
> http://lists.openstack.org/pipermail/openstack-dev/2016-September/102983.html
>
> [2] https://review.openstack.org/354086
>
> *From:*li.yuanzhen at zte.com.cn <mailto:li.yuanzhen at zte.com.cn> 
> [mailto:li.yuanzhen at zte.com.cn]
> *Sent:* Monday, September 05, 2016 8:20 PM
> *To:* mihailmed at gmail.com <mailto:mihailmed at gmail.com>
> *Cc:* openstack-infra at lists.openstack.org 
> <mailto:openstack-infra at lists.openstack.org>
> *Subject:* Re: [OpenStack-Infra] [Zuul] can not get zuul env 
> variables, such as 'ZUUL_URL'
>
> Hi Mikhail,
>
> Very glad to receive your response.
> In my env, the version of Jenkins is 2.7.2.
>
>
> Now my Jenkins jobs can get environment variables after I modify my
> Jenkins env with your suggestion.
> Thank you very much.
>
>
>> >Hi Li,
>> >On Sun, Sep 4, 2016 at 10:18 AM,  <li.yuanzhen?zte.com.cn> wrote:
> >> Hi all,
> >> For deploy CI env, I need a help for Zuul.
> >>
> >> In the slave node, I can not get the "zuul"
> >> environments variables using 'env' shell command,
> >> such as 'ZUUL_URL'.
> >>
> >> The following is the config and log info
> >> *) /etc/zuul/layout/zuul.conf:
> >> http://paste.ubuntu.com/23132730/
> >> *) /etc/jenkins_jobs/config/citest.yaml
> >> http://paste.ubuntu.com/23132723/
> >> *) jenkins job result:
> >> http://paste.ubuntu.com/23132737/
> >> *) /var/log/zuul/zuul.log
> >> http://paste.ubuntu.com/23132745/
> >> *) /var/log/zuul/merger-debug.log
> >> http://paste.ubuntu.com/23132748/
> >> *) /var/log/zuul/debug.log
> >> http://paste.ubuntu.com/23132762/
> >>
> >>        I check the zuul code and it has been got the
> >> 'zuul_url' variables in zuul-mergerr, but in slave nodes,
> >>  these        variables can not be passed by zuul-scheduler.
> >>
> >> Is there any wrong in my zuul config or jenkins jobs?
>> >You might be affected by the fix to SECURITY-170 [1] in new Jenkins
> >you installed. It prevents Zuul from passing paramters that are not
> >white listed. Which version of Jenkins are you using? Last version
> >without the security fix is 1.651.1.
>> >If you have later version, you would need to either white list all
> >zuul variables (
> >-Dhudson.model.ParametersAction.safeParameters=ZUUL_URL,ZUUL_COMMIT ),
> >or disable that security feature (
> >-Dhudson.model.ParametersAction.keepUndefinedParameters=true ).
>> >[1] 
> https://wiki.jenkins-ci.org/display/JENKINS/Plugins+affected+by+fix+for+SECURITY-170 
>
>>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-infra/attachments/20160908/214da578/attachment.html>


More information about the OpenStack-Infra mailing list