14:46:03 <jbair> #startmeeting Fedora CI SIG
14:46:03 <zodbot> Meeting started Wed Sep  9 14:46:03 2020 UTC.
14:46:03 <zodbot> This meeting is logged and archived in a public location.
14:46:03 <zodbot> The chair is jbair. Information about MeetBot at http://wiki.debian.org/MeetBot.
14:46:03 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic.
14:46:03 <zodbot> The meeting name has been set to 'fedora_ci_sig'
14:46:12 <jbair> .hello jimbair
14:46:13 <zodbot> jbair: jimbair 'Jim Bair' <jbair@redhat.com>
14:46:15 <jbair> it can be a quick one :)
14:46:18 <siddharthvipul> oh, sorry, I thought it had already started :P
14:46:24 <siddharthvipul> .hello siddharthvipul1
14:46:25 <zodbot> siddharthvipul: siddharthvipul1 'Vipul Siddharth' <siddharthvipul1@gmail.com>
14:46:35 <jbair> nah, there were no items so I figured it may be a skip week :)
14:46:59 <jbair> #topic Cluster permissions, old vs new
14:47:01 <siddharthvipul> fair.. would be sure to add them from next time (even if I have a tiny thing to discuss) :)
14:47:11 <jbair> so from before, you had said:
14:47:20 <jbair> with mvadkert.. iirc Saffronique was discussing giving you similar access you have in older cluster
14:47:30 <jbair> I assume this is copying over permissions from old cluster to new cluster?
14:47:55 <siddharthvipul> right! so from what I have heard (I was away for sick leave).. that for testing farm there was a request from mvadkert that they are not ready to move to kubevirt yet and would like the old cluster to be there for a few more months
14:48:30 <siddharthvipul> from what I have heard, Saffronique said that we can provide similar access till the time you have that figured out.. I am more coming from https://pagure.io/centos-infra/issue/85
14:48:56 <siddharthvipul> older cluster will have issues and would be amazing if we can move asap
14:49:39 <siddharthvipul> bstinson, if you are around, Am I on the right track? (since I was away for these conversation)
14:50:22 <jbair> mvadkert is here today so hopefully he can pop in too :) though I think he's busy currenty
14:50:25 <jbair> currently*
14:50:31 <mvadkert> siddharthvipul: jbair: hi
14:50:37 <siddharthvipul> mvadkert, \o :D
14:50:42 <mvadkert> if we could get the same access as with old cluster
14:50:44 <mvadkert> that would help!
14:50:57 <siddharthvipul> mvadkert, sure thing
14:51:06 <mvadkert> we will later migrate away to aws mostly, and later on we would like to also use kubevirt
14:51:09 <siddharthvipul> let's track those somewhere (I will figure out that)
14:51:16 <siddharthvipul> mvadkert, great
14:51:50 <mvadkert> siddharthvipul: so you need a ticket then?
14:52:03 <siddharthvipul> mvadkert, would be great, or I can create that if you don't have time
14:52:11 <mvadkert> jbair: doesn't OSCi already have a service account which can create privileged containers btw?
14:52:16 <mvadkert> maybe we could just use that
14:52:25 <siddharthvipul> mvadkert, similar thing
14:52:39 <mvadkert> siddharthvipul: I see
14:52:43 <mvadkert> we can share the sa for now
14:52:48 <mvadkert> we did that like always
14:52:49 <mvadkert> :)
14:53:16 <mvadkert> siddharthvipul: creating the issue
14:53:21 <siddharthvipul> mvadkert, thank you :D
14:53:36 <jbair> msrb: not sure if you're around but can you confirm that we have a service account that can create containers?
14:53:45 <jbair> if not, I'm sure we'll figure it out :)
14:53:53 <mvadkert> siddharthvipul: is the new cluster deployed on bare metal right?
14:54:00 <siddharthvipul> yes
14:54:04 <mvadkert> siddharthvipul: I guess so :) if there si kubevirt :)
14:54:04 <mvadkert> ok
14:54:06 <mvadkert> makes sense
14:54:18 <bgoncalv> jbair: yes, we can create privileged containers on new cluster
14:54:22 <bgoncalv> already using it ;)
14:54:38 <mvadkert> bgoncalv: that would mean I can just use that
14:54:47 <jbair> thanks bgoncalv!
14:54:49 * mvadkert stopping his effort to file na issue
14:54:50 <bgoncalv> I think so
14:54:58 <siddharthvipul> just to let you all know.. this is very high level access and not ideal.. so hush hush hahaha
14:55:38 <mvadkert> siddharthvipul: I believe we are in middle moving away entirely and returning back using kubevirt
14:56:00 <mvadkert> siddharthvipul: later on
14:56:15 <siddharthvipul> mvadkert, understandable :)
14:56:16 <mvadkert> siddharthvipul: I had meeting today about our app, it will take ~month
14:56:34 <mvadkert> siddharthvipul: what bgoncalv is doing, I believe we could take that over even sooner
14:57:25 <mvadkert> so I guess all we need is a a project and make that SA avaialbe in it
14:57:30 <mvadkert> siddharthvipul: so I will file a ticket for that
14:57:38 <mvadkert> bgoncalv: can you give me the name of the SA pls?
14:57:51 <siddharthvipul> mvadkert++ thank you
14:57:51 <zodbot> siddharthvipul: Karma for mvadkert changed to 1 (for the current release cycle):  https://badges.fedoraproject.org/tags/cookie/any
14:57:57 <mvadkert> bgoncalv: and also the cluster URL pls
14:58:05 <bgoncalv> hmmm, let me check it. I just created the jenkinsfile and it worked :P
14:58:46 <mvadkert> siddharthvipul: how does the auth work pls? I am not sure we have access to the new cluster for my team
14:59:06 <bgoncalv> osci-jenkins-2 on fedora-ci-jenkins-prod project
14:59:12 <bgoncalv> siddharthvipul: can be this? ^
14:59:28 <siddharthvipul> mvadkert, you login with your ACO
15:01:27 <siddharthvipul> bgoncalv, sorry
15:01:41 <siddharthvipul> bgoncalv, I will have to check, and just got into a meeting
15:03:33 <siddharthvipul> mvadkert, how about I update you on this later :) I will figure stuff out
15:07:45 <mvadkert> bgoncalv: maybe :)
15:07:59 <mvadkert> what is ACO? :)
15:08:08 <mvadkert> bgoncalv: and the cluster URL?
15:08:30 <bgoncalv> https://console-openshift-console.apps.ocp.ci.centos.org/
15:08:31 <siddharthvipul> mvadkert, ipsilon instance like FAS but for CentOS
15:08:44 <siddharthvipul> accounts.centos.org
15:09:18 <mvadkert> siddharthvipul: ack ty
15:09:23 <mvadkert> bgoncalv: ty
15:09:30 <mvadkert> have to run also, will check back tmrw :)
15:09:33 <mvadkert> see ya \o/
15:09:39 <siddharthvipul> mvadkert, have a good evening :)
20:17:42 <jbair> #endmeeting