)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"change_message_id":"af51deec34487708399610f9680e8d5d700d16dc","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"0214b853_0994d03b","updated":"2022-08-04 23:47:13.000000000","message":"We should avoid adding new projects to gerrit after this lands until we have confirmed this didn\u0027t break project-config synchronization somehow. Otherwise we may get unexpected results out of manage-projects.yaml.","commit_id":"711def748309bc111533c2194b208574d047e87a"}],"playbooks/roles/sync-project-config/tasks/main.yaml":[{"author":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"change_message_id":"4fd1825ac29424c618d58b21f5e8fae3f3220c31","unresolved":true,"context_lines":[{"line_number":3,"context_line":"    path: \u0027{{ project_config_dest }}\u0027"},{"line_number":4,"context_line":"    state: directory"},{"line_number":5,"context_line":""},{"line_number":6,"context_line":"- name: Update from master"},{"line_number":7,"context_line":"  when: infra_prod_run_from_master|bool"},{"line_number":8,"context_line":"  delegate_to: bridge.openstack.org"},{"line_number":9,"context_line":"  git:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"065f71ab_090aa832","line":6,"updated":"2022-08-04 22:44:05.000000000","message":"This task runs as root against /home/zuul/src/opendev.org/openstack/project-config. That repo is typically updated and owned by zuul. Do we need to reconcile that here as well? (By becoming zuul?)\n\nHowever, checking the repo on bridge I don\u0027t see any files owned by root. I wonder if this is self correcting already somehow.","commit_id":"81dc4baf66a98522e150fb72463c61b62c0c7341"},{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"e37f87916743d9650b9edadfdc119282fb4bd08a","unresolved":true,"context_lines":[{"line_number":3,"context_line":"    path: \u0027{{ project_config_dest }}\u0027"},{"line_number":4,"context_line":"    state: directory"},{"line_number":5,"context_line":""},{"line_number":6,"context_line":"- name: Update from master"},{"line_number":7,"context_line":"  when: infra_prod_run_from_master|bool"},{"line_number":8,"context_line":"  delegate_to: bridge.openstack.org"},{"line_number":9,"context_line":"  git:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"e016b699_a2486a3e","line":6,"in_reply_to":"065f71ab_090aa832","updated":"2022-08-04 23:16:06.000000000","message":"I do know that it\u0027s owned by zuul on grafana\n\n ianw@grafana01:~$ ls -ld /opt/project-config/\n drwxr-xr-x 17 2031 2031 4096 Aug  4 19:49 /opt/project-config/\n\nI think what\u0027s happening is this syncs project_config_src which is the zuul checkout\n\n  inventory/base/group_vars/all.yaml:project_config_src: /home/zuul/src/opendev.org/openstack/project-config\n  \nwhich would have been created by zuul as the job starts","commit_id":"81dc4baf66a98522e150fb72463c61b62c0c7341"},{"author":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"change_message_id":"af51deec34487708399610f9680e8d5d700d16dc","unresolved":true,"context_lines":[{"line_number":3,"context_line":"    path: \u0027{{ project_config_dest }}\u0027"},{"line_number":4,"context_line":"    state: directory"},{"line_number":5,"context_line":""},{"line_number":6,"context_line":"- name: Update from master"},{"line_number":7,"context_line":"  when: infra_prod_run_from_master|bool"},{"line_number":8,"context_line":"  delegate_to: bridge.openstack.org"},{"line_number":9,"context_line":"  git:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"24843353_770ec6ad","line":6,"in_reply_to":"e016b699_a2486a3e","updated":"2022-08-04 23:47:13.000000000","message":"This is doing a git repo update in /home/zuul/src/opendev.org/openstack/project-config which seems to work, but I would\u0027ve expected it to pollute that repo with files owned by root.","commit_id":"81dc4baf66a98522e150fb72463c61b62c0c7341"},{"author":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"change_message_id":"af6bbb09ff47c05c72a58ac86a7ab1f542ab1b5e","unresolved":true,"context_lines":[{"line_number":16,"context_line":"    src: \u0027{{ project_config_src }}/{{ project_config_subdir }}\u0027"},{"line_number":17,"context_line":"    dest: \u0027{{ project_config_dest }}\u0027"},{"line_number":18,"context_line":"    delete: yes"},{"line_number":19,"context_line":"    # This runs as \"zuul\", which doesn\u0027t exist on the remote"},{"line_number":20,"context_line":"    owner: no"},{"line_number":21,"context_line":"    group: no"},{"line_number":22,"context_line":"  no_log: \u0027{{ silence_synchronize }}\u0027"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"5c7703e3_27166943","line":19,"updated":"2022-08-04 22:38:51.000000000","message":"Are you sure this runs as zuul? We appear to only run this from nested ansible on bridge which should run as root.","commit_id":"81dc4baf66a98522e150fb72463c61b62c0c7341"},{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"e37f87916743d9650b9edadfdc119282fb4bd08a","unresolved":true,"context_lines":[{"line_number":16,"context_line":"    src: \u0027{{ project_config_src }}/{{ project_config_subdir }}\u0027"},{"line_number":17,"context_line":"    dest: \u0027{{ project_config_dest }}\u0027"},{"line_number":18,"context_line":"    delete: yes"},{"line_number":19,"context_line":"    # This runs as \"zuul\", which doesn\u0027t exist on the remote"},{"line_number":20,"context_line":"    owner: no"},{"line_number":21,"context_line":"    group: no"},{"line_number":22,"context_line":"  no_log: \u0027{{ silence_synchronize }}\u0027"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"b3fa0b34_f1f802b4","line":19,"in_reply_to":"5c7703e3_27166943","updated":"2022-08-04 23:16:06.000000000","message":"Yeah, I guess per the prior comment it would be more \"this repo is owned by zuul\"","commit_id":"81dc4baf66a98522e150fb72463c61b62c0c7341"}]}