Continuing some thoughts started in IRC...The Jenkins CI is at https://ci.seleniumhq.org:8443/. It runs on Google Cloud Platform, in the same project that owns the Cloud Storage buckets for Selenium releases. A major complaint is that only Googlers have admin rights to the underlying machines, which makes a lot of maintenance tasks impossible without help from one of us.Is the general feeling that we would like to move everything over the Travis and/or Appveyor in the long run? Are there benefits to doing so other than independence from Google (e.g., less maintenance work upgrading Jenkins and the host machines)?
I would be pretty happy about giving away ownership of the Jenkins build. If sentiment is that we should eventually turn down Jenkins and move to a hosted solution so we don't have to manage our own machines, that would be a perfectly fine way to accomplish that.
Finally, would there be any objections to limiting access to the Jenkins instance? Given Jenkins' history of security incidents, I would like to limit our exposure a bit, and limiting access to authenticated users -- with access granted very liberally to anyone who asks -- would help. I'd be concerned about making the CI less useful to random Selenium contributors, but then, I'm not sure anybody ever really looks at it anyway.
I'm a little surprised Travis let us run as many builds as we do on their infrastructure, and I'd hate to rely on their goodwill. Having said that, the Jenkins builds have been widely ignored by almost everyone. I think that there are edge-cases that Jenkins handles way better than Travis (the Sauce stuff, perhaps --- Luke and Daniel would know more than I do)
Finally, would there be any objections to limiting access to the Jenkins instance? Given Jenkins' history of security incidents, I would like to limit our exposure a bit, and limiting access to authenticated users -- with access granted very liberally to anyone who asks -- would help. I'd be concerned about making the CI less useful to random Selenium contributors, but then, I'm not sure anybody ever really looks at it anyway.No objections at all, as long as the build summaries and logs are publicly available somehow.
--
You received this message because you are subscribed to the Google Groups "Selenium Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to selenium-developers+unsub...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-developers/602840d6-3293-4ab5-b431-1ccff1e91122%40googlegroups.com.
To unsubscribe from this group and stop receiving emails from it, send an email to selenium-developers+unsubscribe...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-developers/602840d6-3293-4ab5-b431-1ccff1e91122%40googlegroups.com.
--
You received this message because you are subscribed to the Google Groups "Selenium Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to selenium-developers+unsub...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-developers/be44da67-4848-4f17-bc10-9d65a7d38994%40googlegroups.com.
>>>> an email to selenium-developers+unsub...@googlegroups.com.
>>>> To view this discussion on the web visit
>>>> https://groups.google.com/d/msgid/selenium-developers/602840d6-3293-4ab5-b431-1ccff1e91122%40googlegroups.com.
>>>>
>>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Selenium Developers" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to selenium-developers+unsub...@googlegroups.com.
>> >>>> an email to selenium-developers+unsub...@googlegroups.com.
>> >>>> To view this discussion on the web visit
>> >>>>
>> >>>> https://groups.google.com/d/msgid/selenium-developers/602840d6-3293-4ab5-b431-1ccff1e91122%40googlegroups.com.
>> >>>>
>> >>>> For more options, visit https://groups.google.com/d/optout.
>> >>>
>> >>>
>> >> --
>> >> You received this message because you are subscribed to the Google
>> >> Groups
>> >> "Selenium Developers" group.
>> >> To unsubscribe from this group and stop receiving emails from it, send
>> >> an
>> >> email to selenium-developers+unsub...@googlegroups.com.
>> >>>> an email to selenium-developers+unsubscribe...@googlegroups.com.
>> >>>> To view this discussion on the web visit
>> >>>>
>> >>>> https://groups.google.com/d/msgid/selenium-developers/602840d6-3293-4ab5-b431-1ccff1e91122%40googlegroups.com.
>> >>>>
>> >>>> For more options, visit https://groups.google.com/d/optout.
>> >>>
>> >>>
>> >> --
>> >> You received this message because you are subscribed to the Google
>> >> Groups
>> >> "Selenium Developers" group.
>> >> To unsubscribe from this group and stop receiving emails from it, send
>> >> an
>> >> email to selenium-developers+unsubscribe...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-developers/CAN_hBkwPN_PDogx73EDJh8aAW-fD9zvc-%3D%3D4vQ%3DD_Sdgi6pfhQ%40mail.gmail.com.To unsubscribe from this group and stop receiving emails from it, send an email to selenium-developers+unsub...@googlegroups.com.
Thank you, Jason. I guess our next step is try and update the website and see what breaks :)Simon
To unsubscribe from this group and stop receiving emails from it, send an email to selenium-developers+unsubscribe...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-developers/CAN_hBkwPN_PDogx73EDJh8aAW-fD9zvc-%3D%3D4vQ%3DD_Sdgi6pfhQ%40mail.gmail.com.
--
You received this message because you are subscribed to the Google Groups "Selenium Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to selenium-developers+unsub...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-developers/CAOrAhYFO3KO1cs9VfZrd_4Bb7pQ%2BS1E1XVGO1syWMrDADiQTpA%40mail.gmail.com.
FWIW, I did already do a couple deploys from Travis -- I made a token change to the website just to make sure it got pushed, and it did. (I even got an email to tell me the build passed.)
By the way, I found credentials for an appe...@seleniumhq.org user in the Jenkins config. I actually used that account to go in to the GAE project and set up service account permissions for Travis. Is that user used for anything else? If not, it should be removed, or at least we should change the password, so that not every Googler with source access can go much with sehq.org.
To unsubscribe from this group and stop receiving emails from it, send an email to selenium-developers+unsubscribe...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-developers/CAOrAhYFO3KO1cs9VfZrd_4Bb7pQ%2BS1E1XVGO1syWMrDADiQTpA%40mail.gmail.com.
--
You received this message because you are subscribed to the Google Groups "Selenium Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to selenium-developers+unsub...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-developers/CAN_hBkxZqzR0OLU%3DNzKEXEG31xFGoYeBg7q3O1C2E9LvxJ%2B%3DhA%40mail.gmail.com.
On 1 July 2017 at 01:01, 'Jason Juang' via Selenium Developers <selenium-developers@googlegroups.com> wrote:FWIW, I did already do a couple deploys from Travis -- I made a token change to the website just to make sure it got pushed, and it did. (I even got an email to tell me the build passed.)Sounds awesome! Thanks for tearing this stuff down so cleanly :)
By the way, I found credentials for an appe...@seleniumhq.org user in the Jenkins config. I actually used that account to go in to the GAE project and set up service account permissions for Travis. Is that user used for anything else? If not, it should be removed, or at least we should change the password, so that not every Googler with source access can go much with sehq.org.As far as I know, that's the only thing it's used for. That said, I'm not aware of how releases are pushed to Google Cloud Storage.
To unsubscribe from this group and stop receiving emails from it, send an email to selenium-developers+unsubscribe...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-developers/CAN_hBkxZqzR0OLU%3DNzKEXEG31xFGoYeBg7q3O1C2E9LvxJ%2B%3DhA%40mail.gmail.com.
--
You received this message because you are subscribed to the Google Groups "Selenium Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to selenium-developers+unsub...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selenium-developers/CA%2Bc80B%2BO6Zd2uuAf%2BS%3DxuQOeD1suNMo6vLb7ssWVLa3uzknVUQ%40mail.gmail.com.