Earlier  
Posted Nick Remark
#openstack-cyborg - 2019-12-05
04:22:20 shaohe_feng it just define the interfaces?
04:22:40 shaohe_feng Sundar
04:23:38 Sundar shaohe_feng: The generic driver is the ABC for drivers today
04:25:51 shaohe_feng Sundar but you can see, not every drivers inherit it.
04:26:38 shaohe_feng https://opendev.org/openstack/cyborg/src/branch/master/cyborg/accelerator/drivers/gpu/base.py#L29
04:26:47 shaohe_feng here is the example?
05:54:55 openstackgerrit zhurong proposed openstack/cyborg master: Add 5 placeholder db migration scripts for Train https://review.opendev.org/697031
07:21:26 openstackgerrit Xinran WANG proposed openstack/cyborg-specs master: Re-propose specification for Cyborg APIs Version 2 https://review.opendev.org/695840
07:51:06 openstackgerrit Brin Zhang proposed openstack/cyborg master: Add cyborg quickstart reference in devstack https://review.opendev.org/697419
#openstack-cyborg - 2019-12-06
09:57:06 openstackgerrit ShaoHe Feng proposed openstack/cyborg master: support program for all drivers. https://review.opendev.org/697639
09:57:06 openstackgerrit ShaoHe Feng proposed openstack/cyborg master: support program for fake driver https://review.opendev.org/697011
#openstack-cyborg - 2019-12-08
01:58:45 openstackgerrit Sundar Nadathur proposed openstack/cyborg master: Do not fail ARQ binding for specific Nova notification errors. https://review.opendev.org/697243
#openstack-cyborg - 2019-12-09
03:09:46 openstackgerrit Brin Zhang proposed openstack/cyborg master: Add cyborg quickstart reference in devstack https://review.opendev.org/697419
05:32:30 openstackgerrit ShaoHe Feng proposed openstack/cyborg master: support program for all drivers. https://review.opendev.org/697639
07:30:36 openstackgerrit Sundar Nadathur proposed openstack/cyborg master: WIP: Do not fail ARQ binding for specific Nova notification errors. https://review.opendev.org/697243
12:05:27 openstackgerrit Jason SUN proposed openstack/cyborg master: Remove 'base object' that no longer exist https://review.opendev.org/698000
#openstack-cyborg - 2019-12-10
00:00:40 openstackgerrit Sundar Nadathur proposed openstack/cyborg master: WIP: Do not fail ARQ binding for specific Nova notification errors. https://review.opendev.org/697243
06:14:31 openstackgerrit Shogo Saito proposed openstack/python-cyborgclient master: v2 API Support(using openstack-sdk) https://review.opendev.org/681391
07:08:18 openstackgerrit Shogo Saito proposed openstack/cyborg master: Programming support (v2 Deployable API) https://review.opendev.org/698190
07:51:14 openstackgerrit Shogo Saito proposed openstack/cyborg-specs master: Update device section in Cyborg V2 APIs specification. https://review.opendev.org/696012
09:46:00 openstackgerrit YumengBao proposed openstack/cyborg master: Replace pycodestyle with pep8 for python3 compatible https://review.opendev.org/698203
#openstack-cyborg - 2019-12-11
00:05:02 openstackgerrit Sundar Nadathur proposed openstack/cyborg master: Do not fail ARQ binding for specific Nova notification errors. https://review.opendev.org/697243
02:07:19 openstackgerrit Sundar Nadathur proposed openstack/cyborg master: Do not fail ARQ binding for specific Nova notification errors. https://review.opendev.org/697243
08:36:17 openstackgerrit Merged openstack/cyborg master: Do not fail ARQ binding for specific Nova notification errors. https://review.opendev.org/697243
#openstack-cyborg - 2019-12-12
03:00:43 Sundar49 #startmeeting openstack-cyborg
03:00:44 openstack Meeting started Thu Dec 12 03:00:43 2019 UTC and is due to finish in 60 minutes. The chair is Sundar49. Information about MeetBot at http://wiki.debian.org/MeetBot.
03:00:45 openstack Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
03:00:47 openstack The meeting name has been set to 'openstack_cyborg'
03:00:52 Sundar49 Hi all
03:01:13 chenke Hi all.
03:01:19 chenke info chenke.
03:01:23 chenke info# chenke
03:01:25 Yumeng #info Yumeng
03:01:34 Sundar49 Hi chenke, Yumeng
03:01:51 Yumeng Hi Sundar49
03:01:52 Sundar49 Let's give a min for folks to join
03:02:08 wangzhh Hi all.
03:02:20 Sundar49 Hi
03:02:26 Yumeng I just added https://wiki.openstack.org/wiki/Cyborg/Policy to the policy page
03:02:57 Sundar49 Yumeng: nice!
03:03:02 chenke good
03:03:30 wangzhh Great.
03:03:53 Sundar49 Good, let's get started
03:04:05 Sundar49 Agenda: https://wiki.openstack.org/wiki/Meetings/CyborgTeamMeeting#Agenda
03:04:16 s_shogo #info s_shogo
03:04:21 Sundar49 Anything to add?
03:04:58 Sundar49 #topic Secure_Default_Policies_Popup_Team
03:05:01 Yumeng mainly three questions needs to disscuss with you guys. please take a look at the bottom of https://wiki.openstack.org/wiki/Cyborg/Policy
03:05:16 Sundar49 Yumeng, could you explain to us what's happening in this area?
03:06:54 Sundar49 What do the terms mean, member vs. reader?
03:08:24 Sundar49 Yumeng: ^
03:08:49 Yumeng emmm. to be simple. the main problem today is that : 1) admin everywhere 2)insecure custom roles: many policy rules simply use "" as the rule 3)not support read-only
03:10:08 Sundar49 Our RBAC policies allow for admin and user roles, I think. Are we considering more roles, like member and reader?
03:10:15 Yumeng these means sometimes users may have too much or not enough privileges
03:11:34 Sundar49 Have there been any meetings across the popup team?
03:11:40 Yumeng something like that. 1)we need consistent admin over all openstack projects 2) we need to have read-only
03:12:10 Yumeng 3) we can have a scoped-RBAC including project-scope and system-scope
03:12:36 Sundar49 I see. So you could have a project-scope admin?
03:13:37 Yumeng yes. project-scope works for most of our current cases. maybe we need consider add system-scope for device related RBAC
03:14:03 Yumeng emmm. seems I need to propose a spec to describe this in more details
03:14:11 Sundar49 Re. the question about cyborg:arq:create, I agree that allowing any user to create an ARQ is too liberal, esp. because the ARQ creator can also program the device.
03:14:29 Sundar49 Yea, a spec would be welcome
03:15:13 Yumeng yes. I have same concerns on cyborg:arq:create
03:15:28 Sundar49 How do we fix that?
03:16:06 xinranwang Hi all, sorry for late
03:16:30 Yumeng should we change to admin?
03:17:15 Yumeng I was wondering why the initial design was allowing any user?
03:17:25 Yumeng Does anyone know that?
03:17:29 Sundar49 That is too restrictive. We want some auhtorized users to crete, and others should be forbidden.
03:17:46 Sundar49 I mean: ^ for admin
03:18:53 Sundar49 Does it make to sense to have granular roles like, device profile reader/writer, ARQ reader/writer etc.?
03:19:32 Yumeng sundar49: emmm seems no writer, only reader
03:20:16 Sundar49 Who can POST device profiles, PATCH arqs, etc.? Apart from admin?
03:21:35 Sundar49 Yumeng, chenke, xinranwang, wangzhh: ^
03:22:01 chenke I only use admin to create device_profile.
03:22:12 xinranwang I think only admin
03:22:36 Sundar49 admin in project scope?
03:22:58 chenke yes.
03:23:02 wangzhh emmm Yep. I remembered that we disscussed about it before. And only admin allowed.
03:24:03 Sundar49 Yumeng: So, the next step is that we need to review this table in the wiki?
03:24:20 Sundar49 are you included in any meetings they have for this ?
03:26:09 Sundar49 If anybody has any thoughts, please speak up.
03:27:08 Sundar49 #topic Devstack components for multi-node
03:27:23 Sundar49 Shaohe's table: end of https://etherpad.openstack.org/p/cyborg-ptg-ussuri
03:27:59 Sundar49 Any further comments?
03:28:33 Sundar49 If not, shall we close this as final?
03:29:09 chenke I have one.
03:29:18 chenke 9. agent enabled_drivers N Y N
03:29:47 chenke agent enabled_drivers?
03:30:36 Sundar49 chenke, what is the comment?
03:30:38 chenke I think cyborg-agent node's conf need this .
03:31:09 Sundar49 Oh yes, it should be N N Y
03:31:16 chenke Ye.
03:31:26 Sundar49 Please write that in the etherpad
03:31:53 Sundar49 Thanks, chenke. Anything else?
03:32:21 Yumeng Sundar49: not yet. I just talked to zhurong. his idea is that this can be flexible. we can either use admin directly to post ARQ or use any user to make this post request to a system user to help do this post and return results.
03:32:44 chenke about 10. api ramdisk_heartbeat_timeout
03:33:07 chenke I don't know why we need this
03:33:26 Yumeng Sundar49: I will propose a spec today and welcome you guys to disscuss.
03:33:59 Sundar49 Yumeng: when a user wants to launch a VM with accelerators, he needs the ability to POST and PATCH ARQs, right? Does he have to ask the admin to create the VM?

Earlier   Later