Restricted access to /teuthology on teuthology.front.sepia.ceph.com
Hi folks, As many of you are aware, RAM/CPU is particularly scarce on teuthology.front.sepia.ceph.com which means that any log viewing of QA results can cause swapping and general slowness. At today's Ceph Infrastructure Weekly call [1], I proposed only allowing root, www-data, and teuthworker access to /teuthology so that others would be forced to look at logs on other beefier development machines like senta [2], vossi [3], your personal workstation [4], or even some temporary locked node [5]. The current plan is to proceed barring some reasonable justification not to. There are a few to-do items to make it happen laid out in the minutes. Until then, admins of teuthology would appreciate it if you already start moving your log viewing to other machines without waiting for a technical barrier to be set up. [1] https://pad.ceph.com/p/ceph-infra-weekly [2] https://wiki.sepia.ceph.com/doku.php?id=hardware:senta [3] https://wiki.sepia.ceph.com/doku.php?id=hardware:vossi [4] https://wiki.sepia.ceph.com/doku.php?id=services:cephfs [5] https://wiki.sepia.ceph.com/doku.php?id=testnodeaccess -- Patrick Donnelly, Ph.D. He / Him / His Red Hat Partner Engineer IBM, Inc. GPG: 19F28A586F808C2402351B93C3301A3E258DD79D
PSA: It is planned on Monday to remove the /ceph ("teuthology fs [1]) mount on teuthology.front.sepia.ceph.com. Track progress on [2] and [3]. It will not be possible to view QA artifacts on teuthology for regular users going forward. Please use one of the developer playground machines [4] or mount CephFS on lab nodes where you require it (see the script at the bottom of [4]). [1] https://wiki.sepia.ceph.com/doku.php?id=services:cephfs [2] https://tracker.ceph.com/issues/66083 [3] https://tracker.ceph.com/issues/66079 [4] https://wiki.sepia.ceph.com/doku.php?id=devplayground On Thu, Aug 24, 2023 at 1:11 PM Patrick Donnelly <pdonnell@redhat.com> wrote:
Hi folks,
As many of you are aware, RAM/CPU is particularly scarce on teuthology.front.sepia.ceph.com which means that any log viewing of QA results can cause swapping and general slowness. At today's Ceph Infrastructure Weekly call [1], I proposed only allowing root, www-data, and teuthworker access to /teuthology so that others would be forced to look at logs on other beefier development machines like senta [2], vossi [3], your personal workstation [4], or even some temporary locked node [5].
The current plan is to proceed barring some reasonable justification not to. There are a few to-do items to make it happen laid out in the minutes.
Until then, admins of teuthology would appreciate it if you already start moving your log viewing to other machines without waiting for a technical barrier to be set up.
[1] https://pad.ceph.com/p/ceph-infra-weekly [2] https://wiki.sepia.ceph.com/doku.php?id=hardware:senta [3] https://wiki.sepia.ceph.com/doku.php?id=hardware:vossi [4] https://wiki.sepia.ceph.com/doku.php?id=services:cephfs [5] https://wiki.sepia.ceph.com/doku.php?id=testnodeaccess
-- Patrick Donnelly, Ph.D. He / Him / His Red Hat Partner Engineer IBM, Inc. GPG: 19F28A586F808C2402351B93C3301A3E258DD79D
-- Patrick Donnelly, Ph.D. He / Him / His Red Hat Partner Engineer IBM, Inc. GPG: 19F28A586F808C2402351B93C3301A3E258DD79D
This change has been effected. On Fri, May 17, 2024 at 4:17 PM Patrick Donnelly <pdonnell@redhat.com> wrote:
PSA:
It is planned on Monday to remove the /ceph ("teuthology fs [1]) mount on teuthology.front.sepia.ceph.com. Track progress on [2] and [3].
It will not be possible to view QA artifacts on teuthology for regular users going forward. Please use one of the developer playground machines [4] or mount CephFS on lab nodes where you require it (see the script at the bottom of [4]).
[1] https://wiki.sepia.ceph.com/doku.php?id=services:cephfs [2] https://tracker.ceph.com/issues/66083 [3] https://tracker.ceph.com/issues/66079 [4] https://wiki.sepia.ceph.com/doku.php?id=devplayground
On Thu, Aug 24, 2023 at 1:11 PM Patrick Donnelly <pdonnell@redhat.com> wrote:
Hi folks,
As many of you are aware, RAM/CPU is particularly scarce on teuthology.front.sepia.ceph.com which means that any log viewing of QA results can cause swapping and general slowness. At today's Ceph Infrastructure Weekly call [1], I proposed only allowing root, www-data, and teuthworker access to /teuthology so that others would be forced to look at logs on other beefier development machines like senta [2], vossi [3], your personal workstation [4], or even some temporary locked node [5].
The current plan is to proceed barring some reasonable justification not to. There are a few to-do items to make it happen laid out in the minutes.
Until then, admins of teuthology would appreciate it if you already start moving your log viewing to other machines without waiting for a technical barrier to be set up.
[1] https://pad.ceph.com/p/ceph-infra-weekly [2] https://wiki.sepia.ceph.com/doku.php?id=hardware:senta [3] https://wiki.sepia.ceph.com/doku.php?id=hardware:vossi [4] https://wiki.sepia.ceph.com/doku.php?id=services:cephfs [5] https://wiki.sepia.ceph.com/doku.php?id=testnodeaccess
-- Patrick Donnelly, Ph.D. He / Him / His Red Hat Partner Engineer IBM, Inc. GPG: 19F28A586F808C2402351B93C3301A3E258DD79D
-- Patrick Donnelly, Ph.D. He / Him / His Red Hat Partner Engineer IBM, Inc. GPG: 19F28A586F808C2402351B93C3301A3E258DD79D
-- Patrick Donnelly, Ph.D. He / Him / His Red Hat Partner Engineer IBM, Inc. GPG: 19F28A586F808C2402351B93C3301A3E258DD79D
participants (1)
-
Patrick Donnelly