<bentiss>
daniels: yes, I skimmed through the page, but right now we only have one rados daemon for object storage, and it is not exposed to the outside world
<bentiss>
but that might be the way forward
yk has quit [Remote host closed the connection]
<bentiss>
(also we need to validate the jwt token, which doesn't seemed to be covered by this doc)
<bentiss>
but maybe we can validate the jwt by opa directly
<daniels>
yeah, it can do that, but we'd need to pull the JWK in the registry, which is annoying per-req
<bentiss>
registry?
<bentiss>
FWIW, I am starting to mirror minio-packet, 300 MiB/s is not too bad :)
<daniels>
nice!
<daniels>
bentiss: s/registry/policy file/
<daniels>
I have no idea where 'registry' comes from
* daniels
reloads coffee
<bentiss>
daniels: OK, makes more sense
<bentiss>
daniels: I'll see how far I'll go with etcd, because it might be the lowest hanging fruit
* daniels
nods
<daniels>
good luck to you, I'm about to go into diffing SQL dumps :P
<bentiss>
ouch
<bentiss>
I thought it would be fine, but of course login with the token now works, but not retrieving files 'The Access Key Id you provided does not exist in our records.'
mykhal has joined #freedesktop
mykhal has quit [Remote host closed the connection]
ximion has joined #freedesktop
yk has joined #freedesktop
jkl has quit [Ping timeout: 480 seconds]
aleksander has quit [Read error: No route to host]
dstruct[m|gr] has quit [autokilled: Suspected spammer. Mail support@oftc.net with questions (2021-06-16 16:11:49)]
twelfther has joined #freedesktop
twelfther has quit [autokilled: Suspected spammer. Mail support@oftc.net with questions (2021-06-16 16:14:25)]
blue__penquin has quit []
chomwitt has joined #freedesktop
veganaiZe has joined #freedesktop
pk[m] has joined #freedesktop
pk[m] has quit [Remote host closed the connection]
alanc has quit [Remote host closed the connection]
alanc has joined #freedesktop
jkl has joined #freedesktop
tribly has joined #freedesktop
tribly has quit [autokilled: Suspected spammer. Mail support@oftc.net with questions (2021-06-16 17:17:40)]
ngcortes has joined #freedesktop
Phoebus has joined #freedesktop
Phoebus has quit [Remote host closed the connection]
<daniels>
Ford_Prefect: presumably Alpine doesn’t come with podman pre-installed
<Ford_Prefect>
daniels: hmm, this used to work -- did something change? Also does x86-64 not use Alpine?
<daniels>
the runners haven’t changed, so either ci-templates or alpine I guess …
rehrar29 has joined #freedesktop
<Ford_Prefect>
Ack, thx, I'll check the ci-templates repo
rehrar29 has quit [Remote host closed the connection]
ILoveYaToo has joined #freedesktop
ILoveYaToo has quit [Remote host closed the connection]
jkl has quit [Ping timeout: 480 seconds]
ximion has joined #freedesktop
<bentiss>
Ford_Prefect: x86_64 is using quay.io/freedesktop.org/ci-templates:buildah-2021-03-18.0 for the image, when arm64 is using alpine, so ther eis something wrong here