[Ci-users] apps.ci SCC and oci-kvm-hook ?

Fri Apr 6 00:06:59 UTC 2018
Brian Stinson <brian at bstinson.com>

On Apr 05 10:05, Jonathan Lebon wrote:
> Just following up on this thread here. We're getting really close to
> ready to migrate workloads to OCP.
> (1) How can we request a per-namespace SCC with RunAsAny?

Consider it requested, but let's do a bug in bugs.centos.org for
tracking purposes. 

> (2) Can we get oci-kvm-hook installed on the underlying nodes? I see
> Stef has now created a build for EPEL:
> https://koji.fedoraproject.org/koji/buildinfo?buildID=1058034

oci-kvm-hook is already installed on some of the nodes. Currently we're
using the node label "oci_kvm_hook=allowed" for scheduling purposes. 

> (3) I noticed there are no resource quotas on the namespace, though
> just to get a sense of what's available, are the nodes underneath
> sufficiently powerful to have, say, 10 running pods each with
> resources.requests.memory=4G?

We can certainly have capacity for this by early next week. 

> (4) Are there any plans to upgrade the cluster to v3.7 anytime soon?

Our current plan is to skip 3.7 and do a full reinstall on 3.9 in the
coming weeks. We'll reach out here to the ci-users list for folks
willing to try a trial migration in a staging environment before we make
the switch.