05:26bentiss: __tim: indeed...
05:26bentiss: daniels: "OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 state=error: certificate verify failed (certificate has expired)" -> time for your usual magic to happen ;)
13:12Venemo: can someone help me understand what is happening here? https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/21493 -> I couldn't merge this branch: Gitlab refused to merge this request and I don't know why!
13:13Venemo: I reassigned it to marge bot now
13:13Venemo: but I don't see what the problem was, CI was all green
13:24bentiss: Venemo: WARNING Not Allowed!: (405, {'message': '405 Method Not Allowed'}) that's what I have in the logs
13:24Venemo: what does that mean?
13:24Venemo: and where are these logs?
13:24bentiss: I believe the API token expired...
13:25Venemo: my token?
13:25bentiss: marge's token
13:25Venemo: :D
13:25bentiss: where are this logs -> in the k8s cluster, so you don't have access unfortunately
13:28bentiss: anholt: can you confirm that marge's token expired? and should I recreate one?
13:35bentiss: daniels: ^^ Marge doesn't have any token anymore. Should we create one for marge with api access or one on the mesa project itself (so with far fewer capabilities)
13:36bentiss: thinking about this more... how did she manage to add a comment without a token
13:38Venemo: marge bot is a hacker
13:39bentiss: that is the only possibility, yes :0
13:47jenatali: Perhaps it expired after pushing but before merging?
13:53Venemo: dunno
13:53Venemo: I just wish marge was as reliable as Mister Label Maker
13:58daniels: bentiss: oooh, ouch - it needs to be a user token so it can push rebases though afaik
13:59bentiss: daniels: k, I'll add one api token in the meantime while anholt can have a deeper look
14:00daniels: thanks, and it does look like the token has completely expired
14:00daniels: (from impersonating the user and going to access tokens - there are none left)
14:00bentiss: daniels: actually, there is one impersonation token, last used 23 hours ago
14:01bentiss: I wonder if there is not a limit for those old token (pre-gpat format)
14:08bentiss: daniels: recreated a new token, and redeployed it on marge-bot namespace
14:11daniels: thankyou!
14:12bentiss: I'm trying to force push https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/22265 so we know if this is working...
14:13bentiss: yay, looks like it is sorted out
14:14bentiss: Venemo: should be fixed now
14:16Venemo: thanks bentiss much appreciated
15:06ebassi: So, if I understood https://gitlab.freedesktop.org/freedesktop/freedesktop/-/issues/540 correctly, it means I can't run CI on the cairo project fork I have under my own namespace, and I have to push to a branch on the upstream repo, correct?
15:13__tim: if you're a cairo developer it should work fine I think?
15:14ebassi: Doesn't seem to
15:15__tim: ah, wait, you mean run the CI on the branch without a MR?
15:15ebassi: No, there is an MR
15:15ebassi: https://gitlab.freedesktop.org/ebassi/cairo/-/jobs/39243586 for https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/343
15:16ebassi: I guess it needs a detached MR workflow
15:22bentiss: ebassi: I might also be missing a group in ci-ok
15:22__tim: cairo group seems to be in the ci-ok group
15:23ebassi: Yeah, I checked there first, and the cairo group is in
15:23bentiss: yep, that's what I saw
15:24__tim: so it should say 'all good' after the "Checking if the user of the pipeline is allowed..." check, right?
15:25bentiss: __tim: no, because ebassi is "just" developer in his projects, not part of the group itself
15:26bentiss: ebassi: pick your poison: 1. I create a cairo/ci-ok group, and add you there as a guest, or 2. you get added at least as a guest to cairo
15:27__tim: ebassi should be added as developer to the cairo group imho
15:27__tim: surprised that's not the case already
15:27bentiss: __tim: probably, but I'd rather not take these kind of decisions
15:27__tim: (the cairo project maintainership is a bit ad-hoc / disfunctional)
15:28__tim: ok, I'll see if I can get adrian or uli to do it
15:29__tim: well, I guess ebassi can do that himself :)
15:37ebassi: __tim: This is weird, because I can already merge things
15:38__tim: you're developer in cairo/cairo, but not member of the cairo group afaict
15:38ebassi: Ah, that explains it
19:47alatiera:raises fist at script kiddies
19:47alatiera: we can't have nice things
19:47alatiera: (nothing new, just mumbling)
20:45DemiMarie: CI seems like the ideal fit for cloud.