*** openstack has joined #openstack-containers | 00:05 | |
-cameron.freenode.net- [freenode-info] channel trolls and no channel staff around to help? please check with freenode support: http://freenode.net/faq.shtml#gettinghelp | 00:05 | |
*** SourabhP has quit IRC | 00:06 | |
*** achanda has quit IRC | 00:17 | |
*** y_sawai has joined #openstack-containers | 00:18 | |
*** y_sawai has quit IRC | 00:19 | |
*** sdake has joined #openstack-containers | 00:30 | |
*** achanda has joined #openstack-containers | 00:36 | |
*** barra204 has quit IRC | 00:39 | |
madhuri | sdake, ping | 00:47 |
---|---|---|
sdake | shoot madhuri | 00:52 |
*** suro-patz has quit IRC | 00:52 | |
madhuri | I and yuanying want you to have a look at this https://etherpad.openstack.org/p/magnum-tls-support | 00:54 |
*** sacharya has joined #openstack-containers | 00:55 | |
*** zz_dimtruck is now known as dimtruck | 00:56 | |
*** achanda has quit IRC | 00:56 | |
*** gangil has quit IRC | 00:57 | |
madhuri | sdake, there? | 00:57 |
sdake | looking | 00:57 |
madhuri | Thanks | 00:57 |
sdake | certs don't work well huh? :( | 00:58 |
sdake | no ubuntu support? | 00:58 |
* sdake groans | 00:58 | |
sdake | looks like a charlie foxtrot waiting to happen to me ;-( | 00:59 |
*** sacharya1 has joined #openstack-containers | 00:59 | |
*** sacharya has quit IRC | 00:59 | |
*** sthillma has quit IRC | 01:00 | |
openstackgerrit | Eli Qiao proposed openstack/magnum: Do not inspect contianer doesn't exist. https://review.openstack.org/202407 | 01:01 |
madhuri | Are you talking about Barbican CA support? | 01:01 |
sdake | yes | 01:02 |
sdake | no ubuntu support = DOA | 01:02 |
madhuri | We tried to install on Ubuntu but failed, so not sure completely | 01:03 |
sdake | we need to nail that down (etherpad says needs investigation) | 01:03 |
sdake | which part failed | 01:03 |
sdake | complalin on mailing list with [barbican] tag pls :) | 01:03 |
madhuri | I want to :) | 01:03 |
madhuri | The barbican CA part is not working for us completely | 01:04 |
*** jruano has quit IRC | 01:04 | |
madhuri | And we don't hear from them yet. So we thought of some other solution without any dependency | 01:04 |
madhuri | No Barbican, no anchor | 01:04 |
sdake | ya dependencies are evil ;) | 01:05 |
sdake | but you know my position on this already | 01:05 |
sdake | here is the deal | 01:05 |
sdake | your doing the work | 01:05 |
madhuri | Always agree to it | 01:05 |
sdake | so you get to decide what happens | 01:05 |
sdake | that is how open source works | 01:05 |
sdake | if someone else doesn't like it, let THEM write the patch ;) | 01:05 |
*** suro-patz has joined #openstack-containers | 01:06 | |
madhuri | But before doing this, we just wanted your and adrian consent on it | 01:06 |
sdake | realistically if nothing else gets done in the next 6 weeks, tls support must get done | 01:06 |
sdake | I dont care HOW it is done just that it is done :) | 01:06 |
madhuri | I understand | 01:06 |
madhuri | Now I understand why no one wanted to take this bp ;) | 01:07 |
sdake | definatley a hard one | 01:07 |
madhuri | Do you have any objection with the new plan? | 01:07 |
*** achanda has joined #openstack-containers | 01:07 | |
sdake | which new plan agent thing? | 01:07 |
madhuri | Yes | 01:07 |
sdake | I roll with don't ask forgiveness | 01:08 |
sdake | rather don't ask permission :) | 01:08 |
sdake | you can ask for forgiveness later if necessary | 01:08 |
sdake | thats my philosophy on life take it as it is :) | 01:08 |
sdake | it ended me up in a new job as a result, so YMMV | 01:08 |
madhuri | Ok got it | 01:09 |
sdake | would it be cool to integrate with barbican? yes | 01:09 |
sdake | is that the openstack way? yes | 01:09 |
sdake | is it practical? maybe not | 01:09 |
sdake | is practiciality the most important thing for tls ABSOLUTELY | 01:09 |
madhuri | may be not this release | 01:10 |
sdake | if you have to learn breakdance to implement tls, I'd support that ;) | 01:11 |
madhuri | I am doing it already from the day I took it ;) | 01:11 |
sdake | my turntable has arrived | 01:12 |
sdake | yay pick it up tomorrow ftw :) | 01:12 |
madhuri | Thank you! | 01:12 |
*** erkules_ has joined #openstack-containers | 01:13 | |
*** erkules has quit IRC | 01:16 | |
*** sacharya1 has quit IRC | 01:19 | |
openstackgerrit | Eli Qiao proposed openstack/magnum: API: Handler exception when doing container-list https://review.openstack.org/199007 | 01:21 |
*** hongbin has joined #openstack-containers | 01:23 | |
*** suro-patz has quit IRC | 01:35 | |
redrobot | madhuri sorry about that. I've been pretty busy and haven't had a chance to dig into it yet. It's still on my to-do list. :-\ | 01:44 |
madhuri | redrobot, Thanks for informing :) Hope to hear from you soon. | 01:46 |
*** eghobo has quit IRC | 01:46 | |
*** tobe_ has joined #openstack-containers | 01:49 | |
*** macjack has left #openstack-containers | 02:15 | |
*** dave-mccowan has quit IRC | 02:18 | |
*** jruano has joined #openstack-containers | 02:20 | |
*** jruano has quit IRC | 02:22 | |
*** achanda has quit IRC | 02:23 | |
*** jjlehr has quit IRC | 02:24 | |
*** suro-patz has joined #openstack-containers | 02:28 | |
*** jjlehr has joined #openstack-containers | 02:29 | |
*** liudong has quit IRC | 02:31 | |
*** dims_ has quit IRC | 02:31 | |
*** zhenguo has joined #openstack-containers | 02:32 | |
*** hongbin has quit IRC | 02:34 | |
*** jruano has joined #openstack-containers | 02:43 | |
*** y_sawai has joined #openstack-containers | 02:48 | |
*** y_sawai has quit IRC | 02:49 | |
*** y_sawai has joined #openstack-containers | 02:52 | |
*** jruano has quit IRC | 02:52 | |
*** suro-patz has quit IRC | 02:57 | |
*** Tango has joined #openstack-containers | 02:59 | |
*** y_sawai_ has joined #openstack-containers | 03:01 | |
*** Tango|2 has quit IRC | 03:02 | |
*** y_sawai has quit IRC | 03:04 | |
*** sacharya has joined #openstack-containers | 03:15 | |
*** julim has quit IRC | 03:18 | |
*** Kennan has quit IRC | 03:20 | |
*** Kennan has joined #openstack-containers | 03:20 | |
*** achanda has joined #openstack-containers | 03:23 | |
*** sdake has quit IRC | 03:23 | |
*** achanda has quit IRC | 03:28 | |
*** dims_ has joined #openstack-containers | 03:32 | |
*** sdake has joined #openstack-containers | 03:33 | |
*** unicell has quit IRC | 03:34 | |
*** dims_ has quit IRC | 03:37 | |
*** jruano has joined #openstack-containers | 03:42 | |
*** harshs has joined #openstack-containers | 03:44 | |
*** hblixt has joined #openstack-containers | 03:45 | |
*** y_sawai_ has quit IRC | 03:48 | |
*** y_sawai has joined #openstack-containers | 03:48 | |
*** y_sawai has quit IRC | 03:49 | |
*** y_sawai has joined #openstack-containers | 03:49 | |
*** eghobo has joined #openstack-containers | 03:50 | |
*** jruano has quit IRC | 03:52 | |
*** y_sawai has quit IRC | 03:54 | |
*** hblixt has quit IRC | 03:54 | |
*** coolsvap|away is now known as coolsvap | 03:54 | |
*** achanda has joined #openstack-containers | 03:55 | |
*** liangbo has joined #openstack-containers | 03:57 | |
*** jjlehr has quit IRC | 03:58 | |
*** achanda has quit IRC | 04:00 | |
*** jjlehr has joined #openstack-containers | 04:07 | |
*** jjlehr has quit IRC | 04:11 | |
*** eghobo_ has joined #openstack-containers | 04:11 | |
*** eghobo has quit IRC | 04:15 | |
*** unicell has joined #openstack-containers | 04:22 | |
openstackgerrit | Motohiro/Yuanying Otsuka proposed openstack/magnum: Add TLS support in heat kubernetes template https://review.openstack.org/202873 | 04:25 |
*** unicell has quit IRC | 04:26 | |
*** unicell has joined #openstack-containers | 04:27 | |
*** y_sawai has joined #openstack-containers | 04:30 | |
*** eghobo has joined #openstack-containers | 04:32 | |
*** eghobo_ has quit IRC | 04:35 | |
*** suro-patz has joined #openstack-containers | 04:35 | |
openstackgerrit | Motohiro/Yuanying Otsuka proposed openstack/magnum: Remove unused file in heat-kubernetes template https://review.openstack.org/202874 | 04:35 |
*** y_sawai has quit IRC | 04:36 | |
*** harshs has quit IRC | 04:38 | |
*** zhenguo has quit IRC | 04:43 | |
*** sicarie is now known as sicarie_away | 04:46 | |
*** tobe_ has quit IRC | 04:53 | |
*** SourabhP has joined #openstack-containers | 04:54 | |
*** sdake has quit IRC | 04:56 | |
*** SourabhP_ has joined #openstack-containers | 04:57 | |
*** SourabhP has quit IRC | 04:59 | |
*** SourabhP_ is now known as SourabhP | 04:59 | |
*** suro-patz has quit IRC | 05:02 | |
*** liangbo has quit IRC | 05:07 | |
*** liangbo has joined #openstack-containers | 05:09 | |
openstackgerrit | Motohiro/Yuanying Otsuka proposed openstack/magnum: Add TLS support in heat kubernetes template https://review.openstack.org/202873 | 05:10 |
openstackgerrit | Motohiro/Yuanying Otsuka proposed openstack/magnum: Add TLS support in heat kubernetes template for Ironic https://review.openstack.org/202881 | 05:10 |
*** adrian_otto has joined #openstack-containers | 05:12 | |
*** oro has joined #openstack-containers | 05:21 | |
*** kmARC has joined #openstack-containers | 05:21 | |
*** Daviey_ has joined #openstack-containers | 05:22 | |
*** Daviey has quit IRC | 05:23 | |
*** harshs has joined #openstack-containers | 05:26 | |
*** sacharya has quit IRC | 05:29 | |
*** harshs has quit IRC | 05:31 | |
*** harshs has joined #openstack-containers | 05:35 | |
eliqiao1 | what's the issue with magnum jenkins ci? I can passed py27 in my local environment, but failed on gate! http://logs.openstack.org/07/199007/5/check/gate-magnum-python27/3b0a4c7/console.html#_2015-07-17_03_20_43_329 | 05:36 |
*** harshs has quit IRC | 05:38 | |
*** humble_ has joined #openstack-containers | 05:45 | |
*** tobe_ has joined #openstack-containers | 05:46 | |
*** wanghua has quit IRC | 05:48 | |
*** y_sawai has joined #openstack-containers | 05:52 | |
*** adrian_otto has quit IRC | 05:59 | |
*** dims_ has joined #openstack-containers | 06:00 | |
*** sthillma has joined #openstack-containers | 06:02 | |
*** sthillma_ has joined #openstack-containers | 06:03 | |
*** eghobo has quit IRC | 06:03 | |
*** dims_ has quit IRC | 06:06 | |
*** sthillma has quit IRC | 06:06 | |
*** sthillma_ is now known as sthillma | 06:06 | |
*** SourabhP has quit IRC | 06:08 | |
*** ig0r_ has joined #openstack-containers | 06:08 | |
*** SourabhP has joined #openstack-containers | 06:13 | |
*** tobe_ has quit IRC | 06:16 | |
*** SourabhP_ has joined #openstack-containers | 06:18 | |
*** SourabhP has quit IRC | 06:20 | |
*** SourabhP_ is now known as SourabhP | 06:20 | |
*** achanda has joined #openstack-containers | 06:21 | |
*** SourabhP has quit IRC | 06:22 | |
*** sthillma has quit IRC | 06:25 | |
*** tobe_ has joined #openstack-containers | 06:31 | |
*** achanda has quit IRC | 06:39 | |
Kennan | hi eliqiao1: | 06:39 |
eliqiao1 | hi | 06:39 |
eliqiao1 | Kennan: | 06:39 |
Kennan | Does jenkins issue solved by you ? | 06:39 |
eliqiao1 | no, I don't know why it's failed on gate, but works in my Env. | 06:40 |
Kennan | eliqiao1: please check other patch if jenkins passed or not | 06:40 |
eliqiao1 | sure, Kennan. | 06:40 |
Kennan | if it passed, it seems your patch issue, if not. it may jenkins issue. | 06:41 |
Kennan | you need delete your local .testreop and .tox | 06:41 |
Kennan | to make sure same env as jenkins | 06:41 |
eliqiao1 | hmm... okay. let me rebuild my virtual env. and try again. | 06:41 |
Kennan | OK | 06:42 |
eliqiao1 | Kennan, thx | 06:42 |
Kennan | wcl eliqiao1: let me know if you hit issue for that | 06:43 |
*** oro has quit IRC | 06:44 | |
*** kmARC has quit IRC | 06:44 | |
eliqiao1 | Kennan: I rebuild my env, seems even master is broken...... | 06:45 |
*** achanda has joined #openstack-containers | 06:45 | |
*** ig0r_ has quit IRC | 06:45 | |
eliqiao1 | Kennan: but, let me double check. | 06:46 |
eliqiao1 | Kennan: yes, same issue for master branch. | 06:47 |
*** ig0r_ has joined #openstack-containers | 06:50 | |
*** belmoreira has joined #openstack-containers | 06:51 | |
eliqiao1 | Kennan: around? | 06:52 |
*** dimtruck is now known as zz_dimtruck | 06:58 | |
*** sgordon has quit IRC | 07:03 | |
Kennan | hi eliqiao1: | 07:06 |
Kennan | what's up ? | 07:07 |
*** y_sawai has quit IRC | 07:07 | |
*** bradjones has quit IRC | 07:08 | |
*** BertrandN has joined #openstack-containers | 07:08 | |
eliqiao1 | Kennan: master's broken :( | 07:10 |
eliqiao1 | can you please have a test on your master? | 07:10 |
eliqiao1 | rm -rf .tox first | 07:10 |
*** bradjones has joined #openstack-containers | 07:11 | |
*** bradjones has quit IRC | 07:11 | |
*** bradjones has joined #openstack-containers | 07:11 | |
Kennan | I am checking all patches queue jenkins status now | 07:12 |
Kennan | seems all broken eliqiao1: | 07:13 |
Kennan | let me try check in openstack-infra | 07:13 |
Kennan | maybe they know what updates they did | 07:14 |
eliqiao1 | Kennan , cool | 07:16 |
*** sgordon has joined #openstack-containers | 07:25 | |
*** achanda has quit IRC | 07:27 | |
*** alex_klimov has joined #openstack-containers | 07:28 | |
*** BertrandN has quit IRC | 07:32 | |
*** Tango has quit IRC | 07:34 | |
*** achanda has joined #openstack-containers | 07:42 | |
*** BertrandN has joined #openstack-containers | 07:48 | |
*** dims_ has joined #openstack-containers | 07:49 | |
*** coolsvap is now known as coolsvap|afk | 07:51 | |
*** dims_ has quit IRC | 07:56 | |
openstackgerrit | Hua Wang proposed openstack/magnum: Remind the user when sort_key is invalid https://review.openstack.org/201994 | 08:03 |
*** Marga_ has quit IRC | 08:04 | |
*** kmARC has joined #openstack-containers | 08:15 | |
*** achanda has quit IRC | 08:16 | |
*** oro has joined #openstack-containers | 08:19 | |
*** yuanying has quit IRC | 08:43 | |
*** coolsvap|afk is now known as coolsvap | 08:54 | |
*** Daviey_ is now known as Daviey | 09:14 | |
*** dims_ has joined #openstack-containers | 09:15 | |
*** dims_ has quit IRC | 09:20 | |
*** tobe_ has quit IRC | 09:25 | |
*** Kennan2 has joined #openstack-containers | 09:33 | |
*** Kennan has quit IRC | 09:33 | |
*** humble_ has quit IRC | 09:42 | |
openstackgerrit | Madhuri Kumari proposed openstack/magnum: Correct exception raised in few db APIs https://review.openstack.org/202946 | 09:42 |
openstackgerrit | Madhuri Kumari proposed openstack/magnum: Correct exception raised in few db APIs https://review.openstack.org/202946 | 09:58 |
*** dims_ has joined #openstack-containers | 10:05 | |
eliqiao1 | Kennan: hi any outlook for jinkins issue? | 10:09 |
*** diga has quit IRC | 10:31 | |
*** openstackgerrit has quit IRC | 10:31 | |
*** openstackgerrit has joined #openstack-containers | 10:32 | |
*** liangbo has quit IRC | 10:32 | |
*** sdake has joined #openstack-containers | 10:39 | |
*** dims_ has quit IRC | 11:06 | |
*** coolsvap is now known as coolsvap|away | 11:14 | |
tcammann | eliqiao1: We need to fix some mocks somewhere | 11:19 |
*** sdake has quit IRC | 11:32 | |
*** diga has joined #openstack-containers | 11:35 | |
*** jruano has joined #openstack-containers | 11:56 | |
*** EricGonczer_ has joined #openstack-containers | 12:23 | |
*** dims_ has joined #openstack-containers | 12:25 | |
*** sdake has joined #openstack-containers | 12:33 | |
*** coolsvap|away is now known as coolsvap | 12:37 | |
openstackgerrit | Monty Taylor proposed openstack/magnum: Clean up getting started docs https://review.openstack.org/203007 | 12:40 |
openstackgerrit | Monty Taylor proposed openstack/magnum: Change instructions to use get-pip https://review.openstack.org/203008 | 12:40 |
*** julim has joined #openstack-containers | 12:52 | |
*** julim has quit IRC | 12:53 | |
*** julim has joined #openstack-containers | 12:53 | |
*** dims_ has quit IRC | 12:54 | |
*** jjlehr has joined #openstack-containers | 12:57 | |
*** jruano has quit IRC | 13:25 | |
*** jjfreric has joined #openstack-containers | 13:28 | |
*** dane_leblanc has joined #openstack-containers | 13:30 | |
*** dane_leblanc has quit IRC | 13:35 | |
*** tcammann has quit IRC | 13:38 | |
*** dane_leblanc has joined #openstack-containers | 13:38 | |
*** tcammann has joined #openstack-containers | 13:40 | |
*** dims_ has joined #openstack-containers | 13:45 | |
*** zz_dimtruck has quit IRC | 13:47 | |
*** zz_dimtruck has joined #openstack-containers | 13:49 | |
*** zz_dimtruck is now known as dimtruck | 13:49 | |
*** jruano has joined #openstack-containers | 13:54 | |
*** dave-mccowan has joined #openstack-containers | 13:54 | |
*** jruano has quit IRC | 14:04 | |
*** julim_ has joined #openstack-containers | 14:05 | |
*** dboik has joined #openstack-containers | 14:08 | |
*** julim has quit IRC | 14:08 | |
*** dane_leblanc has quit IRC | 14:10 | |
*** alee has joined #openstack-containers | 14:17 | |
alee | dave-mccowan, I'm here | 14:17 |
alee | dave-mccowan, you mentioned someone wanted to talk about barbican integration? | 14:18 |
dave-mccowan | sdake madhuri ^^^ | 14:18 |
sdake | dave-mccowan i am pretty sure maduri is not around at this hour unfortunately | 14:19 |
sdake | she is in japan | 14:19 |
sdake | alee there is a msg on the mailing list from motohiro (yuanying) | 14:19 |
sdake | with [barbican] tag about getting dogtag rolling | 14:19 |
alee | sdake, yeah - its tricky to get everyone aligned esp with folks in Japan. | 14:19 |
sdake | apparently it doesn't install on ubuntu | 14:19 |
sdake | let me see if I can find the etherpad of their findings sec | 14:20 |
dave-mccowan | sdake is there a blueprint or spec with the barbican integration requirements that we can review? | 14:21 |
sdake | http://eavesdrop.openstack.org/irclogs/%23openstack-containers/%23openstack-containers.2015-07-17.log.html | 14:21 |
sdake | https://etherpad.openstack.org/p/magnum-tls-support | 14:21 |
sdake | https://review.openstack.org/#/c/194905/ | 14:22 |
sdake | 60 comments lol ;) | 14:22 |
sdake | the last link is the spec | 14:22 |
sdake | although we dont do specs in magnum | 14:22 |
sdake | i'm not sure why madhuri would punish herself like that ;-) | 14:23 |
sdake | alee^^ | 14:23 |
dave-mccowan | sdake i don't see motohiro's email on openstack-dev. which list did he send it to? | 14:23 |
sdake | openstack-dev | 14:23 |
alee | sdake, yeah - it seems specs are magnets for punishment. looking .. | 14:23 |
sdake | Re: [openstack-dev] [barbican] regarding certificate generation | 14:23 |
*** unicell1 has joined #openstack-containers | 14:24 | |
sdake | the etherpad contains current thinking I believe as well as othe rblockers ran into | 14:24 |
alee | sdake, a lot to read -- where is the best place for me to comment? | 14:25 |
*** unicell has quit IRC | 14:25 | |
sdake | i guess in the ehterpad or spec | 14:25 |
sdake | they probably both need comments i'd suspect | 14:26 |
sdake | basicallyw e have a client and server and need tls certs between them for both auth and encryption | 14:26 |
sdake | so we have two ptions - generate ourselves or use barbican | 14:26 |
sdake | atm we are trying to use barbican but the ca doesn't appear to work correclty | 14:26 |
alee | sdake, ok - I should be able to help you get the ball rolling on barbican ca plugins | 14:27 |
sdake | unfortunately it isn't me that needs help - I'm not actively working on the code | 14:27 |
redrobot | sdake alee any new failures or still the same thing we talked about last week? | 14:28 |
alee | redrobot, which thing is that? | 14:28 |
redrobot | alee certs not being generated out of the box | 14:28 |
redrobot | I attended a meeting in this channel last Thursday | 14:28 |
sdake | yup same problem | 14:28 |
redrobot | just haven't had a chance to dig into the failures | 14:28 |
sdake | we need tls support implemented in magnum by liberty 3- mandatory for us | 14:29 |
sdake | whatever it takes to get there we will do :) | 14:29 |
alee | sdake, redrobot this is using the snakeoil plugin ? or dogtag? | 14:29 |
sdake | magnum is not field deployable without tls certs built in | 14:29 |
sdake | i think they tried both alee not sure | 14:29 |
sdake | if there is ntohing else that gets done for magnum this cycle, tls should be the one thign | 14:29 |
redrobot | last we spoke they needed snakeoil to unblock dev | 14:29 |
sdake | they did say yesterday they used dogtog and it wont install on ubuntu | 14:30 |
alee | sdake, the ca part should definitely install on ubuntu - although its been awhile since I've tried it there. | 14:30 |
sdake | i haven't been involved in the dev | 14:31 |
alee | sdake, I worked awhile back with the ubuntu guys to get dogtag working within the context of freeipa | 14:31 |
sdake | alee redrobot what are your tzs? | 14:31 |
*** sicarie_away is now known as sicarie | 14:31 | |
alee | EDT | 14:31 |
redrobot | sdake CDT | 14:31 |
alee | sdake, are all the folks that need help in Japan? | 14:32 |
sdake | madhuri usually appears around 5-6pm PST but its friday so she probably wont be around today | 14:32 |
sdake | yes | 14:32 |
sdake | ack on japan | 14:32 |
*** Kennan2 has quit IRC | 14:32 | |
sdake | the mailing list is a good place to get started on solving the problem i think ;) | 14:32 |
sdake | magnum is predominately apac devs :) | 14:33 |
alee | sdake, well I can attend a meeting 5-6 PST sometime - although probably not today either | 14:33 |
*** Kennan has joined #openstack-containers | 14:33 | |
alee | so yeah - I'll respond to mailing list/spec/etherpad - and maybe we can set up a meeting next week 5-6 PST | 14:34 |
sdake | i can coordinate something via email if you like - to help madhuri get through some debugging | 14:34 |
dave-mccowan | alee sdake here's the email: http://lists.openstack.org/pipermail/openstack-dev/2015-July/068871.html | 14:34 |
alee | sure - if we run into ubuntu issues - I can talk to the ubuntu guys (who unfortunately are in Europe :)) | 14:35 |
sdake | ya if we can get an answer on that mail thread that would help :) | 14:35 |
sdake | looks like they are using snakeoil there | 14:35 |
sdake | and ca responds with blanks | 14:35 |
alee | sdake, yeah - ok - I'll take a look | 14:36 |
sdake | alee what is your email addr, i'll send madhuri a note | 14:36 |
sdake | re ssetting up a live debug time that works for both your tzs | 14:36 |
alee | sdake, alee@redhat.com | 14:36 |
sdake | ahh redhat, I used to work there :) | 14:36 |
sdake | who is your manager may I ask? | 14:37 |
alee | nathan kinder | 14:37 |
sdake | have heard name, haven't met | 14:37 |
sdake | i worked for pmyers previously | 14:37 |
alee | I'm in the IDM team -- so from there dpal | 14:37 |
sdake | right | 14:37 |
sdake | caught that with the kinder name ;) | 14:37 |
*** apmelton has quit IRC | 14:38 | |
alee | sdake, ok cool - I haven't worked a lot with the snakeoil , so I'll need to play with it to see whats going on. But I'll try respond to everything later today | 14:39 |
alee | and we can set something up for early next week. | 14:39 |
sdake | cool just sent off a mail | 14:39 |
sdake | thanks :) | 14:39 |
alee | np :) | 14:40 |
*** apmelton has joined #openstack-containers | 14:40 | |
*** Tango has joined #openstack-containers | 14:41 | |
redrobot | alee I had it on my to-do list for today to dig into the snakeoil plugin | 14:41 |
*** jjlehr has quit IRC | 14:52 | |
*** achanda has joined #openstack-containers | 14:53 | |
*** sthillma has joined #openstack-containers | 14:54 | |
*** sthillma_ has joined #openstack-containers | 14:55 | |
*** sthillma has quit IRC | 14:58 | |
*** sthillma_ is now known as sthillma | 14:58 | |
*** achanda has quit IRC | 15:05 | |
*** f1ller is now known as filler | 15:05 | |
openstackgerrit | Zhenguo Niu proposed openstack/python-magnumclient: Remove H803 rule https://review.openstack.org/202384 | 15:07 |
*** sdake has quit IRC | 15:13 | |
*** jjlehr has joined #openstack-containers | 15:17 | |
*** coolsvap is now known as coolsvap|away | 15:23 | |
*** eghobo has joined #openstack-containers | 15:25 | |
*** sdake has joined #openstack-containers | 15:28 | |
*** Drago has joined #openstack-containers | 15:30 | |
*** daneyon has joined #openstack-containers | 15:31 | |
*** Drago has quit IRC | 15:34 | |
*** Drago has joined #openstack-containers | 15:35 | |
*** sthillma has quit IRC | 15:42 | |
*** belmoreira has quit IRC | 15:43 | |
*** jonjozwiak has joined #openstack-containers | 15:46 | |
jonjozwiak | I'm setting up Magnum stable/kilo on Fedora 22 and saw I needed kubectl on the OpenStack node in order to issue remote commands to the kube-master in the bay. Is kubectl always needed on the OpenStack node or is there some configuration that enables communication to the kube-master via Magnum without it? | 15:49 |
sdake | tango around? | 15:52 |
sdake | jonjozwiak to get non-kubectl you need master | 15:52 |
sdake | stable/kilo depends on kubectl, master implements a native python api | 15:53 |
jonjozwiak | sdake, got it. Thanks! | 15:53 |
*** jjfreric1 has joined #openstack-containers | 15:58 | |
*** jjfreric has quit IRC | 15:58 | |
Tango | sdake: Hi, just got off a conference call | 16:00 |
sdake | tango how is 1.0 porting of the templates coming along | 16:00 |
sdake | kube cats release 1.0 this week | 16:00 |
Tango | I got 0.19.3 working, but we are still using their v1beta3 api. I see 0.21.0 coming | 16:01 |
Tango | Are you referring to just the release or the api? | 16:01 |
Tango | they do have v1 api now | 16:02 |
openstackgerrit | Tom Cammann proposed openstack/magnum: Add return value to mocks to allow serialisation https://review.openstack.org/203106 | 16:03 |
tcammann | ^^ fix the py27 checks in gerrit | 16:04 |
sdake | well i guess we need to port to v1 api | 16:06 |
*** sacharya has joined #openstack-containers | 16:06 | |
sdake | if 0.19.3 works can you get a change up to move to that image | 16:07 |
Tango | ok, apparently they tag 0.21.2 as release 1. | 16:07 |
sdake | so madhuri can port to the v1 api | 16:07 |
*** Drago1 has joined #openstack-containers | 16:07 | |
*** Drago has quit IRC | 16:07 | |
*** Drago1 has quit IRC | 16:07 | |
Tango | Let me build another image and advance to this release | 16:07 |
*** Drago has joined #openstack-containers | 16:08 | |
sdake | it would be good if we could just get the templates updated | 16:08 |
sdake | to run with 0.19 to start | 16:08 |
sdake | so madhuri can get cracking on a v1 api port | 16:08 |
sdake | and an image on fedorapeople as well | 16:08 |
Tango | ok. We can do that in parallel. I still haven't heard back from the Atomic folks about the weird binary linking problem, so I have to use a work around in my image. | 16:09 |
sdake | tango google is having a big shindig this coming week re kuberenetes | 16:10 |
sdake | which workaround? | 16:10 |
*** oro has quit IRC | 16:10 | |
*** j___ has joined #openstack-containers | 16:10 | |
sdake | tango did you ask on #atomic? | 16:10 |
sdake | join #atomic | 16:11 |
*** kmARC has quit IRC | 16:11 | |
Tango | the binary kube-apiserver in /usr/bin doesn't work, but if I copy the same to somewhere else and run it, it works fine | 16:11 |
Tango | something to do with the way they set up symbolic link | 16:12 |
Tango | I posted the question, but let me jump to their IRC and ask | 16:12 |
Tango | similar problem with ping as I asked you earlier | 16:13 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/magnum: Updated from global requirements https://review.openstack.org/202702 | 16:13 |
Tango | sdake: So is it worth posting a patch with the work around and upload the image so Madhuri can proceed with v1? | 16:17 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-magnumclient: Updated from global requirements https://review.openstack.org/203138 | 16:17 |
Tango | I can mark it as WIP so folks won't bother with it | 16:18 |
*** liudong has joined #openstack-containers | 16:20 | |
*** j___ has quit IRC | 16:24 | |
*** alex_klimov has quit IRC | 16:25 | |
*** EricGonc_ has joined #openstack-containers | 16:26 | |
*** EricGonczer_ has quit IRC | 16:29 | |
*** kebray has joined #openstack-containers | 16:31 | |
*** jjlehr has quit IRC | 16:31 | |
*** jjlehr has joined #openstack-containers | 16:31 | |
*** harshs has joined #openstack-containers | 16:32 | |
*** ashuk has joined #openstack-containers | 16:32 | |
*** harshs has quit IRC | 16:36 | |
*** dims_ has quit IRC | 16:37 | |
sdake | tango if the image is one image without a workaround that would be good | 16:38 |
*** kebray has quit IRC | 16:38 | |
sdake | tango yes image + template update + devstack update for new image location | 16:38 |
sdake | put image somewhere I can download it and I'll put it on fedorapeople.org | 16:38 |
Tango | The current image requires the work around: copy kube-apiserver somewhere else and run from there. Ugly but at least it lets me move forward. | 16:40 |
Tango | Let me try building f22 to see if it's better, shouldn't take long | 16:40 |
sdake | can't you do that during the image building process? | 16:40 |
Tango | The service is set up to run from /usr/bin, and Atomic wouldn't let me modify the service config | 16:41 |
*** alee is now known as alee_lunch | 16:41 | |
Tango | they lock it down as readonly filesystem | 16:42 |
*** adrian_otto has joined #openstack-containers | 16:43 | |
*** brendenblanco has quit IRC | 16:44 | |
*** linevan has joined #openstack-containers | 16:44 | |
sdake | yes I mean during image build | 16:44 |
linevan | if you create a swarm coe bay model do you need dockers to be installed already ? | 16:44 |
sdake | linevan no | 16:44 |
*** suro-patz has joined #openstack-containers | 16:45 | |
sdake | linevan creating the swam coe installs docker and swarm on the fly | 16:45 |
sdake | rather just swarm on the fly - docker is already built into the distro | 16:45 |
linevan | right now I am creating bay under swarm coe baymodel i only see create_in_prrogress | 16:45 |
sdake | firewall? | 16:45 |
linevan | for kubernetes i can see create _complete | 16:45 |
sdake | it may be that your docker can't download from the internet inside the vm | 16:45 |
sdake | i can help you debug if you like | 16:46 |
sdake | swarm is downloaded via docker pull | 16:46 |
linevan | ok I already did proxy settings | 16:46 |
sdake | not sure if swarm coe has proxy settings | 16:46 |
sdake | apmelton around? | 16:46 |
linevan | that why I am able to create bay of coe kubernetes | 16:46 |
sdake | nah you can always create, it just wont actually download swarm | 16:46 |
sdake | if you ssh into the vm I can help you debug | 16:46 |
sdake | the fact that kubernetes finishes creation tells me that your wait conditions and dev environment are setup properly | 16:47 |
sdake | the fact that kuberentes coe doesnt finish tells me you have a firewall blocking your docker ports | 16:47 |
linevan | I am already sshed into | 16:47 |
sdake | run doccker images and paste the output | 16:48 |
sdake | after that, run curl www.openstack.org | 16:48 |
sdake | see if that works | 16:48 |
linevan | can u type in command to run ? | 16:48 |
sdake | step 1. | 16:49 |
sdake | curl www.openstack.org | 16:49 |
sdake | tell me what happens | 16:49 |
sdake | from within swarm bay vm | 16:49 |
*** adrian_otto has quit IRC | 16:49 | |
*** unicell1 has quit IRC | 16:50 | |
linevan | it just showed the whole html code | 16:50 |
*** j___ has joined #openstack-containers | 16:50 | |
sdake | nice | 16:50 |
sdake | step 2. | 16:50 |
sdake | docker pull centos | 16:50 |
sdake | tell me what happens | 16:50 |
linevan | i did curl from machine where I am running all the services | 16:51 |
sdake | the first step validated your vm interenet wors | 16:51 |
*** adrian_otto has joined #openstack-containers | 16:51 | |
sdake | works | 16:52 |
linevan | can you guide me how to do from swarm vm ? | 16:52 |
sdake | nova list | 16:52 |
sdake | there are two sets of ips | 16:52 |
sdake | one is the internal network | 16:52 |
sdake | one is the external network | 16:52 |
sdake | ssh into an external network interface | 16:52 |
linevan | i see swarm manager and swarm bay | 16:52 |
sdake | ok you see two ips at the end? | 16:52 |
linevan | yes | 16:53 |
linevan | in networks | 16:53 |
sdake | the second one should be your public interface | 16:53 |
sdake | ssh into it | 16:53 |
linevan | ok | 16:53 |
sdake | go ahead and do on a swarm manager i guess | 16:53 |
linevan | its not letting me ssh into | 16:54 |
linevan | network connection is timing out | 16:54 |
sdake | ya well there is your problem devstack sin't setup properly | 16:55 |
*** adrian_otto has quit IRC | 16:55 | |
sdake | is ping responsive to the ip? | 16:55 |
linevan | yes | 16:56 |
linevan | i again sshed it says authenticity can't be established | 16:58 |
sdake | ssh fedora@ip | 16:58 |
*** jjlehr has quit IRC | 16:59 | |
linevan | $ sudo ssh fedora@172.24.4.4 Permission denied (publickey,gssapi-keyex,gssapi-with-mic). | 16:59 |
sdake | when you created the vm which ssh key did you use? | 17:00 |
sdake | your personal one? | 17:00 |
sdake | rather created the coe? | 17:00 |
linevan | testkey | 17:00 |
sdake | (ssh key is one of the options) | 17:00 |
sdake | where is the testkey data | 17:00 |
linevan | you mean ssh testkey@ip ? | 17:00 |
sdake | no, how did you create testkey? | 17:01 |
sdake | did it store a file on the disk? | 17:01 |
*** j___ has quit IRC | 17:01 | |
sdake | where is testkey's private key? | 17:01 |
*** adrian_otto has joined #openstack-containers | 17:02 | |
sdake | note i have to bounce in 20 minutes | 17:04 |
linevan | ok I am figuring out | 17:04 |
*** sthillma has joined #openstack-containers | 17:04 | |
linevan | i just used developer guide to create swarm | 17:04 |
linevan | they had instruction to create testkey using nova | 17:05 |
sdake | nova keypair-add --pub-key ~/.ssh/id_rsa.pub testkey | 17:05 |
sdake | you have that file on your system right? | 17:05 |
sdake | ~/.ssh/id_rsa.pub | 17:05 |
sdake | apmelton ping! | 17:05 |
sdake | perhaps the login isn't fedora and is something else | 17:06 |
sdake | try ssh root@ip | 17:06 |
linevan | i ~/.ssh/id_rsa.pub i have this | 17:08 |
sdake | try ssh root@ip | 17:08 |
sdake | it should tell you a differnet login to use | 17:09 |
sdake | tell me what it is so I know for future reference and then use it :) | 17:09 |
linevan | now it showed please login as user fedora rather than user root | 17:09 |
sicarie | you could also try: cd ~/.ssh; ssh -i id_rsa fedora@ip | 17:09 |
linevan | what local.sh does inside devstack ? | 17:09 |
sdake | i think it would have to be ssh -id id_rsa.pub fedora@Ip | 17:10 |
*** unicell has joined #openstack-containers | 17:10 | |
sdake | linevan do following | 17:10 |
sdake | cd ~/.ssh | 17:10 |
sdake | ssh -i id_rsa.pub fedora@ip | 17:10 |
*** DRoBeR has quit IRC | 17:10 | |
linevan | i guess it worked | 17:11 |
sdake | victory | 17:11 |
sdake | curl www.openstack.org | 17:11 |
linevan | i am in swarm manager now | 17:11 |
* sicarie cheers | 17:11 | |
sdake | sicarie ;-) | 17:12 |
linevan | it could not resolve host | 17:12 |
sdake | cat /etc/resolv.conf | 17:12 |
linevan | # Generated by NetworkManager search openstacklocal novalocal nameserver 8.8.8.8 | 17:13 |
sdake | are those two lines? | 17:13 |
sdake | or one line? | 17:13 |
linevan | can you tell me what local.sh does ? | 17:13 |
linevan | yes | 17:13 |
sdake | yes which? :) | 17:13 |
linevan | no in two lines | 17:13 |
sdake | is nameserver 8.8.8.8 on its own line? | 17:13 |
linevan | search openstacklocal novalocal | 17:14 |
linevan | nameseevr | 17:14 |
linevan | yes | 17:14 |
sdake | curl 8.8.8.8 | 17:14 |
sdake | nah that wont work | 17:15 |
linevan | no reply | 17:15 |
sdake | try curl 190.93.240.15 | 17:15 |
sdake | rather 190.93.240.15 | 17:15 |
linevan | what is this ip | 17:16 |
linevan | ? | 17:16 |
sdake | www.openstack.org | 17:16 |
sdake | nslookup will show you | 17:16 |
linevan | even it does not reply | 17:17 |
sdake | ok well your network is busted | 17:17 |
sdake | fix that, and swarm will work | 17:17 |
sdake | swarm uses docker to pull an image, kubernetes bay has the image built in | 17:18 |
sdake | so kubernetes doesnt do any docker pull until you start a pod | 17:18 |
linevan | ok can you tell me what local.sh does ? | 17:18 |
linevan | that has sudo iptables -t nat -A POSTROUTING -o br-ex -j MASQUERADE | 17:19 |
linevan | what is br-ex ? | 17:19 |
sdake | br-ex is the external bridge on your system | 17:19 |
sdake | that sets all external bridge networing to masquiarade | 17:19 |
sdake | typically when I run it, I run em1 (which is my first interface, or eth0 on debuntian systems) | 17:20 |
linevan | i can see that br-ex in list if i do ifconfig | 17:20 |
linevan | so local.conf for devstack where i enabled magnum i gave public interface etho | 17:20 |
sdake | ya br-ex will be there | 17:21 |
sdake | are you on ubuntu or fedora base os? | 17:21 |
sdake | your networking isn't working because your masquarding across the bridge rather hten your eth0 | 17:21 |
sdake | i've got to jet | 17:21 |
sdake | try changing br-ex to whatever the name of your interface where eth0 is and restack | 17:22 |
sdake | might reboot while your at it :) | 17:22 |
linevan | ok | 17:22 |
*** daneyon has quit IRC | 17:23 | |
linevan | thank you sdake I appreciate it | 17:24 |
linevan | i just changed and starting over from ./stack.sh | 17:24 |
*** harlowja has quit IRC | 17:26 | |
*** harlowja has joined #openstack-containers | 17:26 | |
*** ashuk has quit IRC | 17:26 | |
*** irenab has joined #openstack-containers | 17:27 | |
*** adrian_otto has joined #openstack-containers | 17:31 | |
*** oro has joined #openstack-containers | 17:35 | |
*** kmARC has joined #openstack-containers | 17:35 | |
*** achanda has joined #openstack-containers | 17:35 | |
*** gangil has joined #openstack-containers | 17:42 | |
*** SourabhP has joined #openstack-containers | 17:47 | |
*** irenab has quit IRC | 17:48 | |
*** irenab has joined #openstack-containers | 17:49 | |
*** irenab has quit IRC | 17:53 | |
*** gangil has quit IRC | 17:54 | |
*** sthillma_ has joined #openstack-containers | 17:54 | |
*** gangil has joined #openstack-containers | 17:54 | |
*** sthillma has quit IRC | 17:56 | |
*** sthillma_ is now known as sthillma | 17:56 | |
*** alee_lunch is now known as alee | 17:58 | |
*** jjlehr has joined #openstack-containers | 18:03 | |
*** Kennan2 has joined #openstack-containers | 18:04 | |
*** Kennan has quit IRC | 18:05 | |
linevan | sdake still here ? | 18:09 |
*** eghobo has quit IRC | 18:11 | |
*** jjfreric1 has left #openstack-containers | 18:18 | |
*** adrian_otto has quit IRC | 18:19 | |
*** EricGonc_ has quit IRC | 18:21 | |
*** EricGonczer_ has joined #openstack-containers | 18:22 | |
*** gangil has left #openstack-containers | 18:30 | |
*** unicell1 has joined #openstack-containers | 18:38 | |
*** unicell has quit IRC | 18:38 | |
*** jonjozwiak has left #openstack-containers | 18:41 | |
linevan | :. | 19:00 |
*** sthillma_ has joined #openstack-containers | 19:07 | |
*** linevan has quit IRC | 19:09 | |
*** sthillma has quit IRC | 19:10 | |
*** sthillma_ is now known as sthillma | 19:10 | |
*** harshs has joined #openstack-containers | 19:11 | |
*** dims_ has joined #openstack-containers | 19:18 | |
*** unicell1 has quit IRC | 19:20 | |
*** unicell has joined #openstack-containers | 19:22 | |
*** dims__ has joined #openstack-containers | 19:30 | |
*** sdake has quit IRC | 19:32 | |
*** dims_ has quit IRC | 19:34 | |
*** ig0r_ has quit IRC | 19:47 | |
*** sacharya has quit IRC | 19:56 | |
*** dave-mccowan has quit IRC | 20:07 | |
*** hongbin has joined #openstack-containers | 20:11 | |
*** dave-mccowan has joined #openstack-containers | 20:16 | |
*** LIN_EVAN has joined #openstack-containers | 20:19 | |
*** dboik has quit IRC | 20:26 | |
*** dims__ has quit IRC | 20:34 | |
*** julim_ has quit IRC | 20:43 | |
*** dims_ has joined #openstack-containers | 21:00 | |
*** sthillma_ has joined #openstack-containers | 21:04 | |
*** sthillma has quit IRC | 21:07 | |
*** sthillma_ is now known as sthillma | 21:07 | |
*** y_sawai has joined #openstack-containers | 21:12 | |
*** sthillma_ has joined #openstack-containers | 21:16 | |
*** sthillma has quit IRC | 21:19 | |
*** sthillma_ is now known as sthillma | 21:19 | |
*** adrian_otto has joined #openstack-containers | 21:19 | |
*** kmARC has quit IRC | 21:26 | |
*** oro has quit IRC | 21:26 | |
*** EricGonczer_ has quit IRC | 21:27 | |
*** dave-mccowan has quit IRC | 21:27 | |
*** dave-mccowan has joined #openstack-containers | 21:28 | |
*** dave-mccowan has quit IRC | 21:33 | |
*** adrian_otto has quit IRC | 21:36 | |
*** jjlehr has quit IRC | 21:46 | |
*** liudong has quit IRC | 21:51 | |
*** adrian_otto has joined #openstack-containers | 21:58 | |
*** adrian_otto has quit IRC | 22:05 | |
*** alee has quit IRC | 22:07 | |
*** y_sawai has quit IRC | 22:19 | |
*** Drago has quit IRC | 22:27 | |
*** eghobo has joined #openstack-containers | 22:28 | |
*** manjeets has joined #openstack-containers | 22:29 | |
*** LIN_EVAN has quit IRC | 22:30 | |
*** dimtruck is now known as zz_dimtruck | 22:39 | |
*** sicarie has quit IRC | 22:48 | |
*** alee has joined #openstack-containers | 22:51 | |
*** achanda has quit IRC | 23:04 | |
*** zz_dimtruck is now known as dimtruck | 23:07 | |
*** hongbin has quit IRC | 23:13 | |
*** dave-mccowan has joined #openstack-containers | 23:16 | |
*** y_sawai has joined #openstack-containers | 23:19 | |
*** y_sawai has quit IRC | 23:24 | |
*** dimtruck is now known as zz_dimtruck | 23:26 | |
openstackgerrit | Surojit Pathak proposed openstack/magnum: Derive the public interface https://review.openstack.org/203287 | 23:31 |
*** suro-patz has quit IRC | 23:37 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!