| *** TxGirlGeek has joined #openstack-cyborg | 00:18 | |
| *** TxGirlGeek has quit IRC | 01:06 | |
| *** Sundar30 has joined #openstack-cyborg | 02:48 | |
| *** Sundar30 has left #openstack-cyborg | 02:49 | |
| *** Sundar49 has joined #openstack-cyborg | 02:51 | |
| *** chenke has joined #openstack-cyborg | 02:54 | |
| Sundar49 | #startmeeting openstack-cyborg | 03:00 |
|---|---|---|
| openstack | Meeting started Thu Dec 12 03:00:43 2019 UTC and is due to finish in 60 minutes. The chair is Sundar49. Information about MeetBot at http://wiki.debian.org/MeetBot. | 03:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 03:00 |
| *** openstack changes topic to " (Meeting topic: openstack-cyborg)" | 03:00 | |
| openstack | The meeting name has been set to 'openstack_cyborg' | 03:00 |
| Sundar49 | Hi all | 03:00 |
| chenke | Hi all. | 03:01 |
| *** Yumeng has joined #openstack-cyborg | 03:01 | |
| chenke | info chenke. | 03:01 |
| chenke | info# chenke | 03:01 |
| Yumeng | #info Yumeng | 03:01 |
| *** wangzhh has joined #openstack-cyborg | 03:01 | |
| Sundar49 | Hi chenke, Yumeng | 03:01 |
| Yumeng | Hi Sundar49 | 03:01 |
| Sundar49 | Let's give a min for folks to join | 03:01 |
| wangzhh | Hi all. | 03:02 |
| Sundar49 | Hi | 03:02 |
| Yumeng | I just added https://wiki.openstack.org/wiki/Cyborg/Policy to the policy page | 03:02 |
| Sundar49 | Yumeng: nice! | 03:02 |
| chenke | good | 03:03 |
| wangzhh | Great. | 03:03 |
| Sundar49 | Good, let's get started | 03:03 |
| *** s_shogo has joined #openstack-cyborg | 03:04 | |
| Sundar49 | Agenda: https://wiki.openstack.org/wiki/Meetings/CyborgTeamMeeting#Agenda | 03:04 |
| s_shogo | #info s_shogo | 03:04 |
| Sundar49 | Anything to add? | 03:04 |
| Sundar49 | #topic Secure_Default_Policies_Popup_Team | 03:04 |
| *** openstack changes topic to "Secure_Default_Policies_Popup_Team (Meeting topic: openstack-cyborg)" | 03:04 | |
| Yumeng | mainly three questions needs to disscuss with you guys. please take a look at the bottom of https://wiki.openstack.org/wiki/Cyborg/Policy | 03:05 |
| Sundar49 | Yumeng, could you explain to us what's happening in this area? | 03:05 |
| Sundar49 | What do the terms mean, member vs. reader? | 03:06 |
| Sundar49 | Yumeng: ^ | 03:08 |
| Yumeng | emmm. to be simple. the main problem today is that : 1) admin everywhere 2)insecure custom roles: many policy rules simply use "" as the rule 3)not support read-only | 03:08 |
| Sundar49 | Our RBAC policies allow for admin and user roles, I think. Are we considering more roles, like member and reader? | 03:10 |
| Yumeng | these means sometimes users may have too much or not enough privileges | 03:10 |
| Sundar49 | Have there been any meetings across the popup team? | 03:11 |
| Yumeng | something like that. 1)we need consistent admin over all openstack projects 2) we need to have read-only | 03:11 |
| Yumeng | 3) we can have a scoped-RBAC including project-scope and system-scope | 03:12 |
| Sundar49 | I see. So you could have a project-scope admin? | 03:12 |
| *** xinranwang has joined #openstack-cyborg | 03:12 | |
| Yumeng | yes. project-scope works for most of our current cases. maybe we need consider add system-scope for device related RBAC | 03:13 |
| Yumeng | emmm. seems I need to propose a spec to describe this in more details | 03:14 |
| Sundar49 | Re. the question about cyborg:arq:create, I agree that allowing any user to create an ARQ is too liberal, esp. because the ARQ creator can also program the device. | 03:14 |
| Sundar49 | Yea, a spec would be welcome | 03:14 |
| Yumeng | yes. I have same concerns on cyborg:arq:create | 03:15 |
| Sundar49 | How do we fix that? | 03:15 |
| xinranwang | Hi all, sorry for late | 03:16 |
| Yumeng | should we change to admin? | 03:16 |
| Yumeng | I was wondering why the initial design was allowing any user? | 03:17 |
| Yumeng | Does anyone know that? | 03:17 |
| Sundar49 | That is too restrictive. We want some auhtorized users to crete, and others should be forbidden. | 03:17 |
| Sundar49 | I mean: ^ for admin | 03:17 |
| Sundar49 | Does it make to sense to have granular roles like, device profile reader/writer, ARQ reader/writer etc.? | 03:18 |
| Yumeng | sundar49: emmm seems no writer, only reader | 03:19 |
| Sundar49 | Who can POST device profiles, PATCH arqs, etc.? Apart from admin? | 03:20 |
| Sundar49 | Yumeng, chenke, xinranwang, wangzhh: ^ | 03:21 |
| chenke | I only use admin to create device_profile. | 03:22 |
| xinranwang | I think only admin | 03:22 |
| Sundar49 | admin in project scope? | 03:22 |
| chenke | yes. | 03:22 |
| wangzhh | emmm Yep. I remembered that we disscussed about it before. And only admin allowed. | 03:23 |
| Sundar49 | Yumeng: So, the next step is that we need to review this table in the wiki? | 03:24 |
| Sundar49 | are you included in any meetings they have for this ? | 03:24 |
| Sundar49 | If anybody has any thoughts, please speak up. | 03:26 |
| Sundar49 | #topic Devstack components for multi-node | 03:27 |
| *** openstack changes topic to "Devstack components for multi-node (Meeting topic: openstack-cyborg)" | 03:27 | |
| Sundar49 | Shaohe's table: end of https://etherpad.openstack.org/p/cyborg-ptg-ussuri | 03:27 |
| Sundar49 | Any further comments? | 03:27 |
| Sundar49 | If not, shall we close this as final? | 03:28 |
| chenke | I have one. | 03:29 |
| chenke | 9. agent enabled_drivers N Y N | 03:29 |
| chenke | agent enabled_drivers? | 03:29 |
| Sundar49 | chenke, what is the comment? | 03:30 |
| chenke | I think cyborg-agent node's conf need this . | 03:30 |
| Sundar49 | Oh yes, it should be N N Y | 03:31 |
| chenke | Ye. | 03:31 |
| Sundar49 | Please write that in the etherpad | 03:31 |
| Sundar49 | Thanks, chenke. Anything else? | 03:31 |
| Yumeng | Sundar49: not yet. I just talked to zhurong. his idea is that this can be flexible. we can either use admin directly to post ARQ or use any user to make this post request to a system user to help do this post and return results. | 03:32 |
| chenke | about 10. api ramdisk_heartbeat_timeout | 03:32 |
| chenke | I don't know why we need this | 03:33 |
| Yumeng | Sundar49: I will propose a spec today and welcome you guys to disscuss. | 03:33 |
| Sundar49 | Yumeng: when a user wants to launch a VM with accelerators, he needs the ability to POST and PATCH ARQs, right? Does he have to ask the admin to create the VM? | 03:33 |
| Sundar49 | Yumeng: ok, we can discuss in the spec | 03:34 |
| Sundar49 | chenke: I don't see a reason for it either. We can probably drop it. | 03:35 |
| chenke | Agree. | 03:35 |
| Sundar49 | Ok, moving on | 03:36 |
| Sundar49 | For functional testing, we don't have Li today | 03:36 |
| Sundar49 | #topic Programming | 03:37 |
| *** openstack changes topic to "Programming (Meeting topic: openstack-cyborg)" | 03:37 | |
| Sundar49 | API proposal: https://etherpad.openstack.org/p/cyborg-ussuri-programming-apis | 03:37 |
| Sundar49 | Has anybody reviewed this yet? | 03:37 |
| Sundar49 | s_shogo, would you like to bring up or discuss your patch? | 03:39 |
| s_shogo | Yap,My patch relates the bottom of the proposal, > " Update FPGA user logic (bitstream)" | 03:39 |
| Sundar49 | My first comment is, it probably needs more validation :) Validation of inputs, Needs some checks: is the bitstream id valid, is the bitstream already programmed, is the deployable in use, etc. | 03:41 |
| Sundar49 | Also, UT | 03:41 |
| s_shogo | There is no specific topic, so | 03:41 |
| s_shogo | Thank you Sundar49 , I improve that. | 03:42 |
| Sundar49 | Thanks | 03:42 |
| *** TxGirlGeek has joined #openstack-cyborg | 03:43 | |
| Sundar49 | Before we move onto other things, have you all had a chance to look at the comments in https://review.opendev.org/#/c/692707/6/nova/objects/external_event.py@36 https://review.opendev.org/#/c/631244/51/nova/conductor/manager.py@1578 | 03:43 |
| Sundar49 | This will have impact on Cyborg side too | 03:44 |
| chenke | Ok. Will look at it after meeting. | 03:45 |
| Sundar49 | ok | 03:45 |
| Sundar49 | #topic Storyboard, specs, patches | 03:45 |
| *** openstack changes topic to "Storyboard, specs, patches (Meeting topic: openstack-cyborg)" | 03:45 | |
| Sundar49 | I know there is a long list of specs and patches for me to look at :). Does anybody want to raise anything specific to expedite? | 03:46 |
| Sundar49 | Very quiet meeting today :) | 03:47 |
| Sundar49 | Ok, I''m going to keep chugging on Nova side. Please ping me if you have comments/questions/concerns | 03:48 |
| Sundar49 | Have a good day, everybody! | 03:48 |
| Yumeng | bye. see you | 03:48 |
| Sundar49 | #endmeeting | 03:48 |
| *** openstack changes topic to "Pending patches (Meeting topic: openstack-cyborg)" | 03:48 | |
| openstack | Meeting ended Thu Dec 12 03:48:52 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 03:48 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/openstack_cyborg/2019/openstack_cyborg.2019-12-12-03.00.html | 03:48 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/openstack_cyborg/2019/openstack_cyborg.2019-12-12-03.00.txt | 03:48 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/openstack_cyborg/2019/openstack_cyborg.2019-12-12-03.00.log.html | 03:48 |
| chenke | bye~ | 03:49 |
| *** ws119jg has joined #openstack-cyborg | 03:49 | |
| s_shogo | bye | 03:49 |
| *** Sundar49 has quit IRC | 03:50 | |
| *** s_shogo has quit IRC | 04:48 | |
| *** chenke has quit IRC | 05:27 | |
| *** links has joined #openstack-cyborg | 05:41 | |
| *** TxGirlGeek has quit IRC | 05:41 | |
| *** tetsuro has quit IRC | 05:42 | |
| *** Yumeng has quit IRC | 05:43 | |
| *** tetsuro has joined #openstack-cyborg | 05:57 | |
| *** xinranwang has quit IRC | 06:00 | |
| *** wangzhh has quit IRC | 06:01 | |
| *** ws119jg has quit IRC | 10:06 | |
| *** davidsha has joined #openstack-cyborg | 10:12 | |
| *** FlorianFa has joined #openstack-cyborg | 13:22 | |
| *** links has quit IRC | 14:36 | |
| *** TxGirlGeek has joined #openstack-cyborg | 15:45 | |
| *** irclogbot_0 has quit IRC | 16:14 | |
| *** irclogbot_0 has joined #openstack-cyborg | 16:15 | |
| *** TxGirlGeek has quit IRC | 16:45 | |
| *** TxGirlGeek has joined #openstack-cyborg | 16:52 | |
| *** efried is now known as efried_afk | 17:08 | |
| openstackgerrit | Merged openstack/cyborg master: Replace pycodestyle with pep8 for python3 compatible https://review.opendev.org/698203 | 17:29 |
| *** davidsha has quit IRC | 17:36 | |
| *** TxGirlGeek has quit IRC | 17:59 | |
| *** igordc has joined #openstack-cyborg | 18:21 | |
| *** TxGirlGeek has joined #openstack-cyborg | 18:30 | |
| *** gmann is now known as gmann_afk | 18:53 | |
| *** efried_afk is now known as efried | 19:38 | |
| *** TxGirlGeek has quit IRC | 22:03 | |
| *** TxGirlGeek has joined #openstack-cyborg | 22:04 | |
| *** gmann_afk is now known as gmann | 22:29 | |
| *** irclogbot_0 has quit IRC | 23:11 | |
| *** irclogbot_0 has joined #openstack-cyborg | 23:11 | |
| *** TxGirlGeek has quit IRC | 23:14 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!