User Report of a Zuul Installation in Production
summary
Production Zuul runs on bare metal with containers on Fedora CoreOS and Podman, but Zookeeper and Nodepool move to CentOS after reboots kill clusters; the first deployment is torn down when public logs leak credentials. The installation maintains three executors and three isolated pools, manages over 50 projects, enforces branch protection and draft PR gating, yet faces label-bypass by users with read+ rights, awkward secrets handling, periodic job flakiness, Podman stability problems, and plans a partial migration to OpenShift.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 5:26Second Attempt
- 10:57Workflow
- 13:43Limitations
- 19:46Other Issues
- 21:51Future Plans
- 22:39Outro
related talks
45mDeveloping, testing and deploying open infrastructure with Zuul for the OpenDev collabatory
19mZuul CI for Kubernetes on the Workday Private Cloud
15mAdvanced Zuul Features as used by OpenDev
24mAutomating OpenStack Operations with Zuul
27mVolvo and Zuul CI
25mCI/CD for Fedora packaging with Zuul
26mNo gain without pain a story of scaling CI with Zuul
34mProject Gating with Zuul