| *** michael-beaver has joined #airshipit | 00:08 | |
| *** michael-beaver has quit IRC | 01:06 | |
| *** bh526r has quit IRC | 01:08 | |
| *** cheng1 has joined #airshipit | 01:54 | |
| *** ianychoi has quit IRC | 02:03 | |
| *** ianychoi has joined #airshipit | 02:03 | |
| openstackgerrit | Aaron Sheffield proposed openstack/airship-deckhand master: [WIP] Updating Docker Gate use of zuul.newrev https://review.openstack.org/645825 | 02:43 |
|---|---|---|
| *** cheng1 has quit IRC | 03:20 | |
| openstackgerrit | Aaron Sheffield proposed openstack/airship-deckhand master: Updating Docker Gate use of zuul.newrev https://review.openstack.org/645825 | 03:23 |
| openstackgerrit | Tin Lam proposed openstack/airship-pegleg master: Remove extraneous dependency https://review.openstack.org/645048 | 03:50 |
| *** cheng1 has joined #airshipit | 03:55 | |
| openstackgerrit | Tin Lam proposed openstack/airship-pegleg master: Remove extraneous dependency https://review.openstack.org/645048 | 04:14 |
| *** jamesgu has joined #airshipit | 06:08 | |
| *** cheng1_ has joined #airshipit | 06:22 | |
| *** cheng1 has quit IRC | 06:25 | |
| *** mbologna_ has joined #airshipit | 06:45 | |
| *** mbologna has quit IRC | 06:45 | |
| *** jamesgu has quit IRC | 06:55 | |
| *** mbologna_ has quit IRC | 07:05 | |
| *** mbologna has joined #airshipit | 07:09 | |
| *** juhak has quit IRC | 09:14 | |
| *** juhak has joined #airshipit | 09:14 | |
| *** juhak has quit IRC | 09:14 | |
| *** juhak has joined #airshipit | 09:15 | |
| *** juhak has quit IRC | 09:20 | |
| *** juhak has joined #airshipit | 09:20 | |
| *** cheng1_ has quit IRC | 09:55 | |
| *** cheng1_ has joined #airshipit | 10:07 | |
| *** cheng1_ has quit IRC | 11:27 | |
| *** juhak has quit IRC | 11:46 | |
| *** juhak has joined #airshipit | 11:46 | |
| *** lemko has joined #airshipit | 12:21 | |
| *** juhak has quit IRC | 12:22 | |
| *** juhak has joined #airshipit | 12:22 | |
| *** juhak has quit IRC | 12:24 | |
| *** juhak has joined #airshipit | 12:24 | |
| *** cheng1_ has joined #airshipit | 12:39 | |
| *** sthussey has joined #airshipit | 12:49 | |
| *** jhesketh has quit IRC | 13:10 | |
| *** mbeierl has joined #airshipit | 13:15 | |
| *** aaronsheffield has joined #airshipit | 13:15 | |
| *** cheng1_ has quit IRC | 13:19 | |
| *** kranthikirang has joined #airshipit | 13:43 | |
| kranthikirang | mattmceuen: Good Morning; Did you get a chance to look into my new problem with helm test timeout for keystone? | 13:44 |
| *** bh526r has joined #airshipit | 13:59 | |
| *** michael-beaver has joined #airshipit | 14:02 | |
| dwalt | kranthikirang: sorry! Just saw your message from yesterday. Armada has a chart-level key, `test.timeout`, that allows you to configure the Helm test timeout of a chart https://airship-armada.readthedocs.io/en/latest/operations/guide-build-armada-yaml.html?highlight=test%20timeout#test | 14:03 |
| openstackgerrit | Dan Crank proposed openstack/airship-deckhand master: Log client-id in UCP API endpoints https://review.openstack.org/634068 | 14:04 |
| *** michaelbeaver has joined #airshipit | 14:08 | |
| *** michaelbeaver has joined #airshipit | 14:08 | |
| kranthikirang | dwalt: Thank you; So I should configure airship-treasuremap/global/software/charts/ucp/keystone/keystone.yaml data section with Test.timeout value? | 14:11 |
| *** michael-beaver has quit IRC | 14:12 | |
| *** jamesgu has joined #airshipit | 14:12 | |
| *** ian-pittwood has joined #airshipit | 14:22 | |
| openstackgerrit | Luna Das proposed openstack/airship-promenade master: [WIP] Add init container to load custom apparmor profile for kube-proxy https://review.openstack.org/647749 | 14:25 |
| kranthikirang | dwalt: Is my understanding correct? | 14:29 |
| dwalt | kranthikirang: Yep! Looks something like this: | 14:33 |
| dwalt | test: | 14:33 |
| dwalt | timeout: 900 | 14:33 |
| openstackgerrit | PRATEEK REDDY DODDA proposed openstack/airship-deckhand master: Implement Security Context for Deckhand https://review.openstack.org/639204 | 14:39 |
| openstackgerrit | Drew Walters proposed openstack/airship-deckhand master: tools: Update Helm to v2.13.1 https://review.openstack.org/647822 | 14:45 |
| *** mbeierl has quit IRC | 15:05 | |
| openstackgerrit | Luna Das proposed openstack/airship-promenade master: [WIP] Add init container to load custom apparmor profile for kube-proxy https://review.openstack.org/647749 | 15:10 |
| *** mbeierl has joined #airshipit | 15:14 | |
| *** mbeierl has quit IRC | 15:20 | |
| openstackgerrit | PRATEEK REDDY DODDA proposed openstack/airship-deckhand master: Implement Security Context for Deckhand https://review.openstack.org/639204 | 15:24 |
| *** mbeierl has joined #airshipit | 15:34 | |
| openstackgerrit | Merged openstack/airship-deckhand master: Updating Docker Gate use of zuul.newrev https://review.openstack.org/645825 | 15:41 |
| openstackgerrit | Alexander Hughes proposed openstack/airship-spyglass master: [WIP] Updates to spyglass to pass tox locally on fresh VM https://review.openstack.org/648173 | 16:12 |
| openstackgerrit | PRATEEK REDDY DODDA proposed openstack/airship-deckhand master: Implement Security Context for Deckhand https://review.openstack.org/639204 | 16:33 |
| openstackgerrit | Ahmad Mahmoudi proposed openstack/airship-maas master: [FIX] - Fixed maas-rack reschedule issue https://review.openstack.org/642174 | 16:43 |
| openstackgerrit | PRATEEK REDDY DODDA proposed openstack/airship-divingbell master: Implement Security Context for Divingbell https://review.openstack.org/647894 | 16:48 |
| *** ian-pittwood has quit IRC | 17:05 | |
| openstackgerrit | Lev Morgan proposed openstack/airship-pegleg master: Clarify which refs can be used when https://review.openstack.org/648191 | 17:34 |
| openstackgerrit | Lev Morgan proposed openstack/airship-spyglass master: [WIP] Updates to spyglass to pass tox locally on fresh VM https://review.openstack.org/648173 | 17:40 |
| *** michaelbeaver has quit IRC | 17:40 | |
| *** michaelbeaver has joined #airshipit | 17:40 | |
| openstackgerrit | Scott Hussey proposed openstack/airship-promenade master: Allow non-YAML config file content https://review.openstack.org/648194 | 17:47 |
| *** michaelbeaver has quit IRC | 17:47 | |
| *** michael-beaver has joined #airshipit | 17:48 | |
| *** bh526r has quit IRC | 18:09 | |
| openstackgerrit | PRATEEK REDDY DODDA proposed openstack/airship-deckhand master: Implement Security Context for Deckhand https://review.openstack.org/639204 | 18:16 |
| kranthikirang | @team, I am curious on ldap in common-addresses.yaml in site specs; Where will it be used? If so what users have to be defined in LDAP? | 18:55 |
| kranthikirang | Can someone help me here? | 18:58 |
| openstackgerrit | Drew Walters proposed openstack/airship-treasuremap master: WIP: Add contributors' testing guide https://review.openstack.org/648216 | 19:08 |
| *** lemko has quit IRC | 19:11 | |
| *** sthussey has quit IRC | 19:48 | |
| *** dustinspecker has joined #airshipit | 19:58 | |
| openstackgerrit | PRATEEK REDDY DODDA proposed openstack/airship-drydock master: Drydock: Add pod/container security context https://review.openstack.org/639197 | 20:21 |
| *** mbeierl has quit IRC | 20:32 | |
| kranthikirang | @team, any help on LDAP configuration and usage? | 20:38 |
| kranthikirang | I have the LDAP server but didn't see any definitions for users to be configured in LDAP | 20:39 |
| openstackgerrit | Rahul Khiyani proposed openstack/airship-maas master: Maas: Add pod/container security context https://review.openstack.org/639200 | 20:44 |
| openstackgerrit | Rahul Khiyani proposed openstack/airship-promenade master: Add pod/container security context https://review.openstack.org/639189 | 20:47 |
| openstackgerrit | Stacey Fletcher proposed openstack/airship-pegleg master: [DNM] Added cleartext option to passphrase generation https://review.openstack.org/645017 | 21:01 |
| openstackgerrit | Stacey Fletcher proposed openstack/airship-pegleg master: [DNM] Added cleartext option to passphrase generation https://review.openstack.org/645017 | 21:03 |
| openstackgerrit | Rahul Khiyani proposed openstack/airship-promenade master: Add pod/container security context https://review.openstack.org/639189 | 21:06 |
| *** dustinspecker has quit IRC | 21:21 | |
| openstackgerrit | Sean Eagan proposed openstack/airship-armada master: [WIP] Introduce v2 docs https://review.openstack.org/648246 | 21:21 |
| openstackgerrit | Felipe Monteiro proposed openstack/airship-pegleg master: tests: Add CLI tests for site encrypt action https://review.openstack.org/614303 | 21:24 |
| openstackgerrit | Lev Morgan proposed openstack/airship-spyglass master: [WIP] Updates to spyglass to pass tox locally on fresh VM https://review.openstack.org/648173 | 21:30 |
| *** pkaralis has quit IRC | 21:31 | |
| *** dimitris_ has quit IRC | 21:31 | |
| *** nick_kar has quit IRC | 21:31 | |
| *** skatsaounis has quit IRC | 21:31 | |
| openstackgerrit | Sean Eagan proposed openstack/airship-armada master: [WIP] Introduce v2 docs https://review.openstack.org/648246 | 21:35 |
| openstackgerrit | Merged openstack/airship-pegleg master: Remove extraneous dependency https://review.openstack.org/645048 | 21:44 |
| openstackgerrit | Merged openstack/airship-pegleg master: Clarify which refs can be used when https://review.openstack.org/648191 | 21:45 |
| *** michael-beaver has quit IRC | 22:00 | |
| openstackgerrit | Sean Eagan proposed openstack/airship-armada master: [WIP] Introduce v2 docs https://review.openstack.org/648246 | 22:03 |
| mattmceuen | hey kranthikirang: the LDAP configuration is handled individually by the different charts that implement LDAP connectivity. Most notable is the OSH keystone chart, which has an example configuration for LDAP integration here: | 23:05 |
| mattmceuen | https://github.com/openstack/openstack-helm/tree/master/tools/overrides | 23:05 |
| mattmceuen | Similarly several of the logging and monitoring UIs have LDAP configurations in their values.yaml overrides | 23:06 |
| mattmceuen | in the openstack-helm-infra project | 23:06 |
| mattmceuen | Oops, the whole URL I meant to share is: https://github.com/openstack/openstack-helm/blob/master/tools/overrides/keystone/ldap_domain_config.yaml | 23:07 |
| kranthikirang | mattmceuen: OK; If I don't use LDAP config for keystone then the LDAP configuration in common-addresses.yaml has no use | 23:07 |
| mattmceuen | note that this example configures two different keystone domains -- a default one that is sql-backed, and an additional one that is ldap backed | 23:08 |
| mattmceuen | let me check real quick | 23:09 |
| mattmceuen | kranthikirang: yep that's right -- looks like common-addresses has standard places to define ldap config, but it's not actually getting substituted into the keystone chart overrides by default. That would need to be added to keystone.yaml in order to support LDAP integration | 23:12 |
| mattmceuen | https://github.com/openstack/airship-treasuremap/blob/master/global/software/charts/ucp/keystone/keystone.yaml | 23:12 |
| mattmceuen | (and similarly for the openstack overcloud's keystone definition) | 23:13 |
| kranthikirang | mattmceuen: I see; so keystone.yaml has no ldap config defined by default; We need to explicitly add it; Thank you for the information | 23:14 |
| mattmceuen | sure thing! sorry for the delayed response. | 23:14 |
| kranthikirang | mattmceuen: No Problem; I am still trying to work on keystone-test timeout; for me 900 also didn't work; | 23:14 |
| kranthikirang | need to increase it more | 23:14 |
| mattmceuen | that seems really odd | 23:15 |
| mattmceuen | that you're needing to tune things down so much. I'm wondering if there's some other underlying issue that needs to be fixed | 23:16 |
| kranthikirang | mattmceuen: I see 6 CPUs are totally being so much by kubelet, beam process(rabbitmq) uses 3 more; However this is 56 CPU host, rally-keystone-test running taking long time because of CPU utilization; Probably because both rabitmq and mariadb clusters are in single host giving more burden; But still I have no idea on why kublet is taking so much | 23:24 |
| kranthikirang | Will try deploying it again tomorrow with increased time outs | 23:27 |
| kranthikirang | mattmceuen: thanks for your help | 23:27 |
| *** kranthikirang has quit IRC | 23:29 | |
| *** aaronsheffield has quit IRC | 23:53 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!