[11:29:25] jbond: just migrated a couple of hosts in the project that hosts the main cloud vps web proxy (project-proxy) to puppet 7. now I'm writing a cookbook to do the server data migration, and try it on an another project [11:30:34] one weird thing I noticed that /etc/rsyslog/ssl/cert.pem changes, previously it only had the server certificate but on the first run after migrating the agent to puppet 7 it gets the ca certificate appended to it [11:34:10] jbond: also the labs/private clone is a bit messed up, editing it as root fails with the git safe.directory error, and editing it as gitpuppet with the git prompt asking for user.name and user.email to be set. thoughts on which one to fix? [11:39:49] taavi: re rsyslog thats a litle bit of a hack in expose_agent_certs. in production because we have an intermediate it was easier to configer the client to send the intermediate then to configuer all of the services to support the new puppet_rsa intermediate. [11:40:01] ultimatly for wmcs it make no difference [11:40:19] other then a bit more data on th wire [11:40:38] in production we will be moving this to pki planned for tuesday [11:41:20] taavi: for git operations i think we sohuld adit with the gitpuppet user [11:41:33] howver i think we should probably create a simple wrapper to make that easier [11:41:51] but not sure what to call that wrapper [11:42:01] we could call it git and put it earlier on the path [11:42:11] or pgit / puppet-git [11:42:49] and of course drop a git.config file in gitpuppets home dir [14:13:51] argh, pulling my hair out over harbor auth issues: [14:13:51] * the robot credentials works fine for creating a new project [14:13:52] * using same robot credentials to get a project summary, which includes the quota info, returns a restricted summary, not including quota info :/ [14:13:52] * testing via the swagger ui or with curl gives the same results [14:13:52] * the harbor admin credentials work fine though [14:13:52] * giving the robot account All.The.Possible.Permissions? still nothing. [14:13:52] * ?? [14:34:11] blancadesal: maybe you need to re-login with the robot account or issue a new token or something similar for it to pick up the new permissions? [14:38:51] trying this now [14:39:10] I did a harbor restart previously, but that didn't work [14:48:25] nope nope [14:49:50] everything else works, this is just the last piece. I think I'm ready to call it a day (and a week) though.