Friday, 2020-10-23

*** tabbie_fash has joined #openstack-kuryr00:07
*** tabbie_fash has quit IRC00:15
*** gcheresh has joined #openstack-kuryr06:20
*** ltomasbo has joined #openstack-kuryr06:25
*** gcheresh has quit IRC07:32
*** DjeufackZane has joined #openstack-kuryr08:00
*** DjeufackZane has quit IRC09:28
*** ccamposr__ has joined #openstack-kuryr09:45
*** ccamposr has quit IRC09:48
*** gcheresh has joined #openstack-kuryr09:54
openstackgerritKafilat Adeleke proposed openstack/kuryr-kubernetes master: Removes generate_lbaas_port_specs method  https://review.opendev.org/75939009:57
*** gcheresh has quit IRC10:28
*** tabbie_fash has joined #openstack-kuryr10:33
*** ccamposr has joined #openstack-kuryr11:07
*** ccamposr__ has quit IRC11:09
*** takamatsu has quit IRC11:28
*** takamatsu has joined #openstack-kuryr11:32
*** takamatsu has quit IRC11:34
*** takamatsu has joined #openstack-kuryr11:35
*** rh-jelabarre has joined #openstack-kuryr11:59
*** gcheresh has joined #openstack-kuryr13:28
*** tabbie_fash has quit IRC13:34
*** gcheresh has quit IRC13:47
openstackgerritKafilat Adeleke proposed openstack/kuryr-kubernetes master: Removes generate_lbaas_port_specs method  https://review.opendev.org/75939013:59
*** tabbie_fash has joined #openstack-kuryr14:04
*** aghasaad04 has joined #openstack-kuryr14:41
maysamsHey dulek, tabbie_fash is taking a look on this task https://bugs.launchpad.net/kuryr-kubernetes/+bug/176478314:43
openstackLaunchpad bug 1764783 in kuryr-kubernetes "Split kuryr-controller and kuryr-cni ServiceAccounts" [Low,Confirmed] - Assigned to Tabitha Fasoyin (tabbie-fash)14:43
maysamsdulek, in the last part of that bug you mentioned only the CNI SA requires root access, this means that only the kuryr-cni pod should run on hostNetwork right?14:44
aghasaad04maysams can you help me push the changes to gerrit14:46
maysamsaghasaad04: of course14:47
maysamsaghasaad04: do you already have a gerrit account?14:47
aghasaad04Yes followed this link https://docs.openstack.org/contributors/common/setup-gerrit.html14:48
aghasaad04to set up the account14:48
dulekmaysams: Uhm… Well, kuryr-controller needs to be on hostNetworking too - otherwise it won't run as there's no CNI yet.14:49
dulekmaysams: But it shouldn't need root, but I remember having some troubles without it. We can check if it works or not now.14:50
maysamsaghasaad04: excellent. To undo the commit pushed to your repo you could try "git revert HEAD"14:50
maysamsaghasaad04: let me know if you now have the changes locally14:50
aghasaad04Okay14:50
dulekmaysams: The bug is mostly about splitting the API access RBAC - i.e. kuryr-cni only needs access to pods, KuryrPorts and probably nodes (SR-IOV stuff).14:51
maysamsdulek: yeah, but on the launchpad bug it was mentioned the root privileges were needed only for the cni.14:54
maysamsdulek: I wanted to confirm with you if the bug is only about SevicesAccount split14:54
aghasaad04@may14:54
aghasaad04maysams: done got those changes back14:55
dulekmaysams: Ah, okay. So yes - we don't have OpenShift gates anymore anyway.14:55
dulekAnd it was because in OpenShift you can specify more in SA's. I think… ;)14:55
maysamsdulek: aah ok ok :) Thanks!!14:58
maysamsaghasaad04: excellent. Now you can do 'git review -s', if it works then 'git review'15:00
tabbie_fashthanks dulek, thanks maysams ;)15:00
aghasaad04Uploaded file: https://uploads.kiwiirc.com/files/16ec5da8ff6152a1096f88eb2570ac68/image.png15:02
aghasaad04maysams: after running git review I am getting this15:02
dulekaghasaad04: You need to `git commit` them first, it seems? You can see what files are hanging using `git status`.15:03
aghasaad04Okay thanks15:03
aghasaad04Uploaded file: https://uploads.kiwiirc.com/files/d59b85d3f0e0d1fad2aef24e7ec892d9/image.png15:05
aghasaad04after reverting the already pushed changes, now I have 2 commits15:06
aghasaad04Uploaded file: https://uploads.kiwiirc.com/files/f2f9df59a2d086241c5aa78a14b061b9/image.png15:08
maysamsaghasaad04: you can try to do: 'git log', get the hash of the first commit you wanted to push, then 'git checkout <hash-of-the-commit>', then git review15:10
aghasaad04still getting the same error15:12
aghasaad04I have tried the hints15:12
aghasaad04and run git review after that, but same results15:12
*** takamatsu has quit IRC15:15
maysamsdulek: if I didn't miss any other place only the kuryrports is needed right? https://github.com/openstack/kuryr-kubernetes/blob/master/kuryr_kubernetes/cni/daemon/service.py#L199-L20015:27
maysamsdulek: for the CNI Service Account I mean15:27
maysamsoh no nodes is needed as well15:33
*** tabbie_fash has quit IRC15:37
openstackgerritAgha Saad Fraz proposed openstack/kuryr-kubernetes master: removed unused env variable reference  https://review.opendev.org/75946015:39
*** DjeufackZane has joined #openstack-kuryr15:44
*** tabbie_fash has joined #openstack-kuryr15:46
*** dmellado has quit IRC15:46
*** dmellado has joined #openstack-kuryr15:47
*** takamatsu has joined #openstack-kuryr15:53
dulekmaysams: Yes, probably nodes due to SR-IOV stuff.15:53
dulekmaysams: And pods, isn't it pods too?15:53
maysamsdulek: I took a look on the code only found kuryrports and nodes16:08
*** aghasaad04 has quit IRC16:33
*** ltomasbo has quit IRC16:36
*** maysams is now known as maysams-afk16:36
*** ccamposr__ has joined #openstack-kuryr16:49
*** DjeufackZane has quit IRC16:51
*** ccamposr has quit IRC16:57
*** tabbie_fash has quit IRC17:22
*** maysams-afk has quit IRC18:28
*** gcheresh has joined #openstack-kuryr19:07
*** gcheresh has quit IRC19:19
openstackgerritMerged openstack/kuryr-kubernetes master: Removes generate_lbaas_port_specs method  https://review.opendev.org/75939019:59
*** tabbie_fash has joined #openstack-kuryr20:03
*** tabbie_fash has quit IRC20:25
*** maysams has joined #openstack-kuryr21:48

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!