Wednesday, 2015-09-30

*** openstackgerrit has quit IRC00:01
*** openstackgerrit has joined #openstack-containers00:01
*** suro-patz has quit IRC00:02
*** openstackstatus has quit IRC00:02
*** openstack has joined #openstack-containers00:05
*** banix has quit IRC00:06
*** Tango has quit IRC00:07
*** julim has joined #openstack-containers00:08
*** devlaps has quit IRC00:09
*** Drago has quit IRC00:13
*** gangil has quit IRC00:25
*** sdake_ has joined #openstack-containers00:38
*** sdake has quit IRC00:43
*** suro-patz has joined #openstack-containers00:45
*** suro-patz1 has joined #openstack-containers00:48
openstackgerritSurojit Pathak proposed openstack/magnum: Documentation update for 'magnum service-list'  https://review.openstack.org/22613300:49
*** suro-patz has quit IRC00:51
*** sdake_ has quit IRC00:53
*** suro-patz1 has quit IRC00:55
*** muralia1 has quit IRC01:00
openstackgerritVilobh Meshram proposed openstack/magnum: Remove unused DB API get_rcs_by_bay_uuid  https://review.openstack.org/21786501:10
*** erkules_ has joined #openstack-containers01:11
*** erkules has quit IRC01:14
*** harshs has quit IRC01:16
*** harshs has joined #openstack-containers01:20
*** ganeshna_ has quit IRC01:21
*** vilobhmm has quit IRC01:30
*** muralia has joined #openstack-containers01:31
*** fawadkhaliq has joined #openstack-containers01:33
*** unicell has quit IRC01:35
*** sthillma has quit IRC01:36
Kennnan2eliqiao: ping01:37
*** Kennnan2 is now known as Kennan01:37
eliqiaoKennnan: pong01:39
eliqiaoKennan: pong01:43
Kennaneliqiao: I am reviewing your patch, I see it use insecure = true, is any known bugs for that ?01:44
eliqiaoKennan: thanks, if you see PS 13(before using insecure = true, bay creataion failed)01:46
eliqiaoKennan: check ps14 (adding insecure=True for tesing, and bay creation passed)01:47
eliqiaoKennan:  my plan is we need to add all kinds of combin to testing bay creation ( passing different parameter to _create_baymodel)01:47
eliqiaoso I disagree with tom's comments01:48
*** harshs has quit IRC01:48
Kennaneliqiao: any bugs for insecure = true case ?01:49
Kennanis it brought by the new image?01:49
Kennanor something else ?01:49
eliqiaoKennan: for atomic-3, I don't do that testing yet, but I can testing it today.01:49
eliqiaoKennan: for atomic-5 image, I reported a bug #link https://bugs.launchpad.net/magnum/+bug/149960701:50
openstackLaunchpad bug 1499607 in Magnum "Failed to start any docker instance on atomic-5 image" [Undecided,New] - Assigned to Eli Qiao (taget-9)01:50
eliqiaoKennan: please take a look at that one ^^^01:50
eliqiaoKennan: I think this would be a critical one, it's blocking much.01:51
*** klindgren__ has joined #openstack-containers01:51
Kennaneliqiao:01:53
KennanI am not sure why docker dameon started with tls by default ?01:53
Kennanisn't it controllered by our templates creation ?01:54
eliqiaoKennan: if you see the last comments of mine in that bug, this is a bug of docker 1.7.101:54
eliqiaoKennan: don't think so01:54
eliqiaoKennan:  I found a possible workaround of this issue(see the last comments of that bug)01:55
*** klindgren_ has quit IRC01:55
Kennaneliqiao: I could not find https://docs.docker.com/articles/https/  said docker started with tls enabled01:56
*** sdake has joined #openstack-containers01:58
eliqiaoKennan:  yeah, default is insecure.01:58
eliqiaoKennan:  but I believe that magnum will prefer to use secure (tls) by default , right?01:58
Kennaneliqiao: whether tls or not tls enabled, the point is you make test pass insecure = true, so who kicked secure mode for swarm ?01:59
eliqiaothis is suck, I just pull the latest code of master, and do a 'magnum baymodel-list', and got a 500 error!!02:00
*** eghobo_ has quit IRC02:00
*** agireud has quit IRC02:00
eliqiaoKennan: insecure = true will be passed to baymodel, and that attr will be passed to swarm template.02:01
eliqiaomagnum/templates/docker-swarm/fragments/write-docker-service.sh will check insecure and passing extra options to docker daemon02:01
eliqiaoif [ $INSECURE == 'False'  ]; then02:02
eliqiaocat >> /etc/systemd/system/docker.service << END_TLS02:02
eliqiao          --tlsverify \\02:02
eliqiao          --tlscacert="/etc/docker/ca.crt" \\02:02
eliqiao          --tlskey="/etc/docker/server.key" \\02:02
eliqiao          --tlscert="/etc/docker/server.crt" \\02:02
eliqiaoEND_TLS02:02
eliqiaothere are same logic in write-swarm-master-service.sh02:02
Kennanso it is our templates did that02:03
KennanI think it was brought by TLS feature. let me check if 1.7.1 have such bugs in docker doc02:04
*** zhenguo has joined #openstack-containers02:06
*** ganeshna has joined #openstack-containers02:09
*** suro-patz has joined #openstack-containers02:09
*** ganeshna has quit IRC02:14
*** wanghua has joined #openstack-containers02:14
Kennaneliqiao:02:15
Kennanit seems our templates has isse about tls case02:16
Kennanas it docker run command all not pass tls02:16
Kennan 1153 ExecStart=/usr/bin/docker run --name swarm-manager -v /etc/docker:/etc/docker -p 2376:2375 -e http_proxy=http://10.239.4.160:911/ -e https_proxy=https://10.239.4.160:911/ -e no_proxy=192.168.0.1,192.168.0.2,192.168.0.3,192.168.0.4,192.168.0.5 swarm:0.2.0 manage -H tcp://0.0.0.0:2375 token://877a154bf4ff1297d62f500a9b92f3ec (code=exited, status=1/FAILURE)02:16
Kennanlikt this one02:16
KennanI think our tls need much work for that02:16
*** ganeshna has joined #openstack-containers02:17
eliqiaoKennan: can you please check /etc/sysconfig/heat-parames first?02:18
eliqiaocat /etc/sysconfig/heat-params  | grep INSECURE02:18
eliqiaoKennan: ^^02:18
eliqiaowhat's the output ?02:18
KennanI did not have the swarm env now, I just check your logs02:18
Kennanand the log say clearly, it try connect tls enabled without tls parameter02:19
eliqiaoKennan: I don't think there is issues when passing tls options.02:19
eliqiaoKennan: can you show me the log's link?02:19
Kennaneliqiao: it is your log http://paste.openstack.org/show/473987/02:20
Kennanlet me ask you question, if you enabel swarm tls, how do you use docker cli ?02:20
Kennandon't you pass tls option?02:20
Kennanhttps://docs.docker.com/articles/https/02:20
Kennanthis say clearly02:20
eliqiao Kennan: uh..  yes, that enviroment is using atomic-5 image.02:21
Kennanit need pass tls. only if configure tls default in cli02:21
KennanSecure by default02:21
Kennanif you not configure secure by default02:21
Kennanso every docker cli need pass tls parameters02:21
KennanI think02:21
eliqiaoKennan: wait, let me explain this #link http://paste.openstack.org/show/473987/02:22
*** ganeshna has quit IRC02:22
eliqiao1 using atomic-5 image with insecure=True(which means I don't enable tls), this you can find by ps output.02:23
KennanI think insecure = true is OK, as swarm worked before for insecure02:23
eliqiaoyes, but the diference is I am using 'atomic-5' image02:23
eliqiao'atomic-5' image 's docker version is 1.7.1( this version don't works fine, see https://bugzilla.redhat.com/show_bug.cgi?id=1244124)02:24
openstackbugzilla.redhat.com bug 1244124 in docker "Cannot link containers" [Unspecified,Closed: errata] - Assigned to lsm502:24
eliqiaothis link  http://paste.openstack.org/show/473987/ shows I am not using tls, but docker server reports "Are you trying to connect to a TLS-enabled daemon without TLS?"  , this is the bug of docker 1.7.102:26
Kennaneliqiao: I did not find tls issue in docker community fix(in 1.8.1 realse also not talked about)02:27
Kennanif tls issue, I think it is a serious issue, should be talked in docker new release fix02:27
eliqiaookay, I would suggest that you read https://bugzilla.redhat.com/show_bug.cgi?id=124412402:27
openstackbugzilla.redhat.com bug 1244124 in docker "Cannot link containers" [Unspecified,Closed: errata] - Assigned to lsm502:27
Kennanyes I read it02:27
eliqiaoKennan: okay, then if you don't believe it. then please do a testing with atomic-5.02:28
eliqiaoand please post comments on https://bugs.launchpad.net/magnum/+bug/149960702:28
openstackLaunchpad bug 1499607 in Magnum "Failed to start any docker instance on atomic-5 image" [Undecided,New] - Assigned to Eli Qiao (taget-9)02:28
Kennaneliqiao: my point is I think inseucre=true not work in atomic-image502:28
KennanI think something not right in our templates02:28
Kennannot docker itself02:29
eliqiaoKennan: okay, get you, but my point is the issue is from docker 1.7.1(atomic-5).02:30
eliqiaoI would suggest that both we do more testing on atomic-502:30
Kennaneliqiao: sure, I not have env now, I would try that later, if you have env, please try atomic-5 image with tls parameters passing when run following command02:31
Kennantry this  /usr/bin/docker run --name swarm-manager -v /etc/docker:/etc/docker -p 2376:2375 -e http_proxy=http://10.239.4.160:911/ -e https_proxy=https://10.239.4.160:911/ -e no_proxy=192.168.0.1,192.168.0.2,192.168.0.3,192.168.0.4,192.168.0.5 swarm:0.2.0 manage -H tcp://0.0.0.0:2375 token://877a154bf4ff1297d62f500a9b92f3ec  --tls **02:31
Kennanif it can not start either, I think it is docker issue02:32
Kennanif it can, it seems tls tempaltes not right02:32
eliqiaoKennan: actually, I tried, I can not start the swarm-master service02:32
eliqiaoKennan: if you have time, I can do a quick time in 30min02:32
eliqiaoI can do a quick test in 30min02:33
eliqiaooh.. so bad, I just upgrade to latest master, and I can not last bay-model now !!!02:33
Kennaneliqiao: if you tested swarm manager start even with tls parameters failde02:33
KennanI trust your test02:33
Kennanso I go on review your patch. I think it is ok for insecure=true now for your test02:34
eliqiaoKennan:  I hate this, every time I pull latest code, I need to debuging..02:34
Kennan^-^02:34
eliqiaoKennan: that's why I push fucntion testing cases.02:35
eliqiaoKennan:  we should keep that the basic function should works fine02:35
eliqiao Kennan: a good infrusture is important before we go with new features...02:35
eliqiaoI mean , stability is first!02:36
Kennanyes, I agree02:36
Kennanusually tempest did that, but we not do that now02:36
Kennananyway, you kick a good start. Good job02:36
eliqiaoKennan: thx02:37
eliqiaoKennan:  will you go to Tyoko/02:38
Kennanwill try to go; what about you? eliqiao02:41
eliqiaoKennan: good luck, yes, I will.02:41
Kennangood to know that02:41
eliqiaoKennan: hope we can meet in the summit.02:41
Kennan:)02:41
*** achanda has joined #openstack-containers02:43
Kennaneliqiao: for kubernets, is insecure issue exist ?02:43
eliqiaoKennan: I don't try k8s yet02:44
Kennanok02:44
*** gangil has joined #openstack-containers02:46
*** wanghua has quit IRC02:53
*** mathspanda has joined #openstack-containers02:54
*** mathspanda has quit IRC02:55
*** unicell has joined #openstack-containers02:56
*** dims_ has quit IRC02:57
*** suro-patz has quit IRC02:59
*** eghobo has joined #openstack-containers03:02
eliqiaoKennan: testing with swarm atomic-5 image, insecure = False #link http://paste.openstack.org/show/474775/03:05
*** dave-mccowan has quit IRC03:06
*** sthillma has joined #openstack-containers03:07
*** sthillma_ has joined #openstack-containers03:09
*** suro-patz has joined #openstack-containers03:09
*** sthillma has quit IRC03:12
*** sthillma_ is now known as sthillma03:12
*** kebray has joined #openstack-containers03:14
*** kebray has quit IRC03:15
*** wanghua has joined #openstack-containers03:15
*** harshs has joined #openstack-containers03:16
*** kebray has joined #openstack-containers03:16
*** kebray has quit IRC03:17
*** puranamr has joined #openstack-containers03:17
*** kebray has joined #openstack-containers03:17
*** eghobo has quit IRC03:18
*** shuquan has joined #openstack-containers03:19
openstackgerritMerged openstack/magnum: Documentation update for 'magnum service-list'  https://review.openstack.org/22613303:19
*** puranamr has quit IRC03:19
*** puranamr has joined #openstack-containers03:20
*** puranamr has quit IRC03:23
openstackgerritEli Qiao proposed openstack/magnum: Swarm: Fix NODE_SERVICES in template  https://review.openstack.org/22923003:23
*** puranamr has joined #openstack-containers03:24
openstackgerritEli Qiao proposed openstack/magnum: Swarm: Set to CREATE_FAILED status if swarm services not started  https://review.openstack.org/22876203:27
*** puranamr has quit IRC03:28
*** chandankumar has joined #openstack-containers03:29
*** agireud has joined #openstack-containers03:29
*** wanghua has quit IRC03:33
*** puranamr has joined #openstack-containers03:35
*** sthillma has quit IRC03:36
*** sdake has quit IRC03:38
eliqiaoKennan:  test result pasted on https://bugs.launchpad.net/magnum/+bug/1499607 , please take a look on that when you are available.03:40
openstackLaunchpad bug 1499607 in Magnum "Failed to start any docker instance on atomic-5 image" [Undecided,New]03:40
*** deepthi has joined #openstack-containers03:41
*** sdake has joined #openstack-containers03:41
*** shuquan has quit IRC03:41
*** shuquan has joined #openstack-containers03:44
*** harshs has quit IRC03:45
*** sdake has quit IRC03:46
*** sdake has joined #openstack-containers03:49
*** puranamr has quit IRC03:53
*** kebray_ has joined #openstack-containers03:54
*** Tango has joined #openstack-containers03:54
*** wanghua has joined #openstack-containers03:54
*** kebray has quit IRC03:57
*** dims has joined #openstack-containers03:57
*** sthillma has joined #openstack-containers03:59
*** shuquan has quit IRC04:00
*** shuquan has joined #openstack-containers04:02
*** dims has quit IRC04:03
*** vimal has joined #openstack-containers04:04
*** diga has joined #openstack-containers04:04
*** VikasC has joined #openstack-containers04:05
*** ganeshna has joined #openstack-containers04:11
*** eghobo has joined #openstack-containers04:12
*** fawadkhaliq has quit IRC04:12
*** chandankumar has quit IRC04:19
*** wanghua has quit IRC04:20
*** suro-patz has quit IRC04:21
openstackgerritMurali Allada proposed openstack/magnum: Adding support for public baymodels  https://review.openstack.org/22633504:24
*** gangil has quit IRC04:24
*** sdake has quit IRC04:28
*** eghobo_ has joined #openstack-containers04:29
*** tbh has joined #openstack-containers04:31
openstackgerritMurali Allada proposed openstack/python-magnumclient: Support for public baymodels.  https://review.openstack.org/22923904:32
*** eghobo has quit IRC04:32
*** fawadkhaliq has joined #openstack-containers04:34
*** fawadkhaliq has quit IRC04:35
*** fawadkhaliq has joined #openstack-containers04:35
*** shaohe_robot2 has quit IRC04:37
*** fawadkhaliq has quit IRC04:41
*** tbh has quit IRC04:42
*** sthillma has quit IRC04:44
*** ganeshna has quit IRC04:44
*** tbh has joined #openstack-containers04:54
*** irenab has quit IRC04:54
*** madhuri has joined #openstack-containers04:55
*** ganeshna has joined #openstack-containers04:56
*** ganeshna_ has joined #openstack-containers04:58
*** ganeshna has quit IRC04:58
*** tbh has quit IRC04:59
madhuriKennan: Hi05:02
Kennanhi madhuri:05:06
madhuriHi, about patch https://review.openstack.org/#/c/229035/05:07
madhuriDid you read my comment?05:07
Kennanmadhuri: I did not find that another patch address swarm changes05:09
madhuriKennan: I am sorry.05:10
madhuriYes you are right05:10
madhuriKennan: My patch is stucked due to this patch05:11
madhuriI will commit the changes05:11
madhuriCan you review?05:11
Kennansure madhuri: I am not sure which one is your patch ?05:11
madhuriLet me get you the link05:12
madhuriKennan: Here https://review.openstack.org/#/c/202873/05:12
*** shuquan has quit IRC05:13
Kennanmadhuri: I saw some comments -1, will you send a new patch?05:13
madhuriYes but after rebasing to Toms patch05:13
*** shuquan has joined #openstack-containers05:14
*** ganeshna_ has quit IRC05:15
*** tbh has joined #openstack-containers05:15
madhuriKennan: ^^05:16
*** eghobo_ has quit IRC05:18
*** eghobo has joined #openstack-containers05:20
*** shuquan has quit IRC05:25
*** shuquan has joined #openstack-containers05:26
madhuriKennan: there05:33
Kennanhi madhuri:05:37
*** gangil has joined #openstack-containers05:37
madhuriKennan: ^05:37
madhuriIs there any core-reviewer present here?05:38
*** chandankumar has joined #openstack-containers05:39
*** ganeshna has joined #openstack-containers05:41
KennanI think yuanying maybe here as Japan timezone05:43
*** irenab has joined #openstack-containers05:48
eghobotom will wake up soon ;)05:53
*** chandankumar has quit IRC05:54
*** ganeshna has quit IRC06:00
*** wanghua has joined #openstack-containers06:04
eliqiaomadhuri: hi06:07
madhuriHi eliqiao06:07
eliqiaocould you help to give a +w on https://review.openstack.org/#/c/229230/06:08
madhuriJust let me have a look eliqiao06:11
eliqiaomadhuri: sure , thank you :)06:12
*** ganeshna has joined #openstack-containers06:14
madhurieliqiao: Done06:17
eliqiaomadhuri: thank you.06:18
eliqiaore - https://review.openstack.org/#/c/229035/ , I just replied madhuri on  that patch06:18
eliqiaodid I miss something?06:18
madhurieliqiao: I posted my comment06:21
openstackgerritMerged openstack/magnum: Swarm: Fix NODE_SERVICES in template  https://review.openstack.org/22923006:21
eliqiao madhuri: I do think we will still need a python-magnumclient for that renaming things..06:22
eliqiaois there anyone working on?06:23
madhuriYes I submitted patch in magnumclient also06:23
madhuriTom is working on it06:24
eliqiaomadhuri:  cool, thanks06:24
madhuriI would have submitted a new patch. But it will be of no use now, as no two core reviewers are online.06:24
*** kebray_ has quit IRC06:24
*** suro-patz has joined #openstack-containers06:25
*** sdake has joined #openstack-containers06:25
madhurisdake: Hi06:26
madhuriLong time. How are you?06:26
*** eghobo has quit IRC06:28
*** sdake has quit IRC06:32
*** chandankumar has joined #openstack-containers06:34
*** shuquan has quit IRC06:35
eliqiaohello, do you think swarm-agent.service should depend on swarm-manager.service?06:54
*** BertrandN has joined #openstack-containers06:54
*** wanghua has quit IRC06:55
*** j___ has joined #openstack-containers06:55
*** erkules_ is now known as erkules06:55
*** erkules has quit IRC06:55
*** erkules has joined #openstack-containers06:55
*** Marga_ has quit IRC06:56
*** Marga_ has joined #openstack-containers06:56
*** Marga__ has joined #openstack-containers06:59
*** ganeshna has quit IRC07:03
*** Marga_ has quit IRC07:03
*** jlvillal has quit IRC07:05
*** ganeshna has joined #openstack-containers07:08
*** Tango has quit IRC07:10
*** BertrandN has quit IRC07:10
*** Marga__ has quit IRC07:18
*** ganeshna has quit IRC07:19
*** suro-patz has quit IRC07:20
*** Kennan has quit IRC07:23
*** wenchma has quit IRC07:23
*** wenchma has joined #openstack-containers07:23
*** sdake has joined #openstack-containers07:25
*** Kennan has joined #openstack-containers07:25
*** BertrandN has joined #openstack-containers07:26
*** tbh has quit IRC07:31
*** mathspanda has joined #openstack-containers07:38
*** mathspanda has quit IRC07:38
*** tbh has joined #openstack-containers07:44
*** alex_klimov has joined #openstack-containers07:46
eliqiaoKennan: ping07:47
*** achanda has quit IRC07:48
Kennanhi eliqiao:07:52
eliqiaoKennan: I would like to know if we can use magnum CLi to create container in a TLS enabled cluster?07:54
Kennaneliqiao: tls enabled was added by apmelton I think. I did not test it07:55
KennanI am not sure it now07:55
eliqiaoKennan: hmm, okay thx.07:55
*** ganeshna has joined #openstack-containers07:59
*** gangil has quit IRC08:25
*** ganeshna has quit IRC08:52
*** tcammann_ has quit IRC08:54
*** agireud has quit IRC08:54
*** chandankumar has quit IRC08:59
*** deepthi has quit IRC09:00
*** deepthi has joined #openstack-containers09:09
*** tbh has quit IRC09:18
*** j___ has quit IRC09:25
*** j___ has joined #openstack-containers09:31
*** dims has joined #openstack-containers09:32
*** ganeshna has joined #openstack-containers09:36
*** dims has quit IRC09:39
*** dims has joined #openstack-containers09:42
openstackgerritMerged openstack/magnum: Fix E251 unnecessarily ignored pep8 rule  https://review.openstack.org/22419809:42
openstackgerritMerged openstack/magnum: Add details to developer quick-start Mesos section  https://review.openstack.org/22822509:45
*** ganeshna has quit IRC10:02
*** jasondotstar_afk is now known as jasondotstar10:19
*** ganeshna has joined #openstack-containers10:23
*** wanghua has joined #openstack-containers10:26
*** wanghua has quit IRC10:26
*** deepthi has quit IRC10:35
*** VikasC has quit IRC10:53
*** VikasC has joined #openstack-containers10:53
*** ganeshna has quit IRC11:21
*** madhuri has quit IRC11:30
*** julim has quit IRC11:34
*** zz_dimtruck is now known as dimtruck11:38
*** chandankumar has joined #openstack-containers11:38
*** chandankumar has quit IRC11:39
*** chandankumar has joined #openstack-containers11:39
*** julim has joined #openstack-containers11:39
*** julim has quit IRC11:44
*** jruano has joined #openstack-containers11:52
*** julim has joined #openstack-containers12:03
*** dimtruck is now known as zz_dimtruck12:17
*** zz_dimtruck is now known as dimtruck12:18
*** sdake has quit IRC12:22
*** sdake has joined #openstack-containers12:23
*** julim has quit IRC12:30
*** VikasC has quit IRC12:31
*** diga has quit IRC12:31
*** jruano has quit IRC12:31
*** julim has joined #openstack-containers12:34
*** banix has joined #openstack-containers12:37
*** j___ has quit IRC12:37
*** Kennan has quit IRC12:38
*** Kennan has joined #openstack-containers12:39
*** j___ has joined #openstack-containers12:43
*** achanda has joined #openstack-containers12:44
*** dave-mccowan has joined #openstack-containers12:51
openstackgerritTom Cammann proposed openstack/magnum: Rename "insecure" to "tls_disabled"  https://review.openstack.org/22903512:55
*** Tango has joined #openstack-containers12:59
*** achanda has quit IRC13:00
*** rlrossit has joined #openstack-containers13:03
openstackgerritTom Cammann proposed openstack/magnum: Reduce complexity of filter methods  https://review.openstack.org/22905713:05
*** alex_klimov has quit IRC13:06
*** julim has quit IRC13:13
*** julim has joined #openstack-containers13:15
*** julim has quit IRC13:16
openstackgerritTom Cammann proposed openstack/magnum: Remove unnecessary util method temporary_mutation  https://review.openstack.org/22941713:16
openstackgerritTom Cammann proposed openstack/magnum: Reduce complexity of poll_and_check method  https://review.openstack.org/22941813:16
*** banix has quit IRC13:23
*** jay-lau-513 has joined #openstack-containers13:25
*** julim has joined #openstack-containers13:27
openstackgerritTom Cammann proposed openstack/magnum: Reduce complexity of poll_and_check method  https://review.openstack.org/22907213:28
*** chandankumar has quit IRC13:30
*** banix has joined #openstack-containers13:30
*** alejandrito has joined #openstack-containers13:30
*** dimtruck is now known as zz_dimtruck13:38
*** alex_klimov has joined #openstack-containers13:42
*** dane_leblanc has joined #openstack-containers13:44
*** julim has quit IRC13:45
*** dims has quit IRC13:49
*** dims has joined #openstack-containers13:49
*** julim has joined #openstack-containers13:51
*** eghobo has joined #openstack-containers13:52
*** pradk has joined #openstack-containers13:54
*** rlrossit1 has joined #openstack-containers13:56
*** rlrossit has quit IRC13:56
*** banix has quit IRC13:56
*** rpothier has joined #openstack-containers13:56
*** julim has quit IRC14:00
apmeltoneliqiao: Kennan: Magnum CLI will only work against an 'insecure' swarm cluster currently14:06
apmeltoneliqiao: Kennan: I'm in the middle of a patch to add TLS support to the contianer conductor handler14:07
apmeltonI'm going to try to have it up for review today14:07
*** julim has joined #openstack-containers14:07
eghoboapmelton: are planning to finish it in Liberty?14:09
apmeltoneghobo: yes, it needs to land in Liberty14:11
eghobogreat14:11
*** eghobo has quit IRC14:13
*** gangil has joined #openstack-containers14:23
*** jruano has joined #openstack-containers14:27
*** irenab has quit IRC14:27
*** ganeshna has joined #openstack-containers14:29
*** kebray has joined #openstack-containers14:29
*** zz_dimtruck is now known as dimtruck14:30
*** ganeshna has quit IRC14:31
*** adrian_otto has joined #openstack-containers14:32
*** rlrossit1 has quit IRC14:33
*** kebray has quit IRC14:34
*** rlrossit has joined #openstack-containers14:35
*** dave-mccowan has quit IRC14:41
*** agireud has joined #openstack-containers14:41
*** adrian_otto has quit IRC14:45
*** banix has joined #openstack-containers14:49
*** madhuri has joined #openstack-containers14:51
*** chandankumar has joined #openstack-containers14:54
*** chandankumar has left #openstack-containers14:54
*** klindgren__ has quit IRC14:56
*** dave-mccowan has joined #openstack-containers14:57
*** klindgren__ has joined #openstack-containers14:58
*** sdake has quit IRC15:08
*** adrian_otto has joined #openstack-containers15:08
*** Drago has joined #openstack-containers15:09
*** Drago has quit IRC15:09
*** Drago has joined #openstack-containers15:09
*** sdake has joined #openstack-containers15:10
*** suro-patz has joined #openstack-containers15:16
*** dims_ has joined #openstack-containers15:16
*** dims has quit IRC15:20
openstackgerritTom Cammann proposed openstack/magnum: Remove unnecessary util method temporary_mutation  https://review.openstack.org/22941715:21
openstackgerritTom Cammann proposed openstack/magnum: Reduce complexity of poll_and_check method  https://review.openstack.org/22907215:21
openstackgerritTom Cammann proposed openstack/magnum: Reduce complexity of filter methods  https://review.openstack.org/22905715:21
*** julim has quit IRC15:28
*** j___ has quit IRC15:31
*** julim has joined #openstack-containers15:31
*** tbh has joined #openstack-containers15:33
openstackgerritMurali Allada proposed openstack/magnum: Adding support for public baymodels  https://review.openstack.org/22633515:36
*** julim has quit IRC15:36
*** julim has joined #openstack-containers15:37
*** madhuri_ has joined #openstack-containers15:38
*** jay-lau-513 has quit IRC15:39
madhuri_hongbin: Hi, can you please review this https://review.openstack.org/#/c/229074/ ?15:39
*** jay-lau-513 has joined #openstack-containers15:39
hongbinmadhuri_: lgtm15:40
openstackgerritMerged openstack/magnum: Rename "insecure" to "tls_disabled"  https://review.openstack.org/22903515:40
klindgren__Good Morning.  I can create a bay in magnum using the fedora-atomic-21-3 distro.  However, under the kilo version, a pod create following the example for kubernetes doesn't work.  It never moves past "pending".15:40
klindgren__when I use kubectl to define the redis-master - it seems to say pods/redis-master as the return.  but a kubectl pods get - shows nothing15:41
klindgren__any idea where to look?  On the master I keep seeing something about pod2 removed because timestamp blah is ahead of timestamp blah - but they are like 0.0001seconds apart15:42
openstackgerritBradley Jones proposed openstack/magnum-ui: API for Bays  https://review.openstack.org/22890515:43
*** rlrossit1 has joined #openstack-containers15:44
*** rlrossit has quit IRC15:44
*** rlrossit has joined #openstack-containers15:46
*** manjeets has joined #openstack-containers15:47
*** rlrossit1 has quit IRC15:48
*** BertrandN has quit IRC15:49
*** madhuri has quit IRC15:52
openstackgerritManjeet Singh Bhatia proposed openstack/magnum: WIP: Add Functional Tests for mesos cluster  https://review.openstack.org/22521215:54
*** suro-patz has quit IRC15:54
*** manjeets has quit IRC15:55
*** jwcroppe has quit IRC16:05
*** eghobo has joined #openstack-containers16:06
*** dims_ has quit IRC16:06
*** sthillma has joined #openstack-containers16:09
*** kebray has joined #openstack-containers16:09
*** sthillma_ has joined #openstack-containers16:10
*** jlvillal has joined #openstack-containers16:10
*** manjeets has joined #openstack-containers16:12
*** eghobo_ has joined #openstack-containers16:13
*** zhenguo has quit IRC16:14
*** sthillma has quit IRC16:14
*** sthillma_ is now known as sthillma16:14
*** kebray has quit IRC16:15
*** eghobo has quit IRC16:16
openstackgerritMadhuri Kumari proposed openstack/magnum: Add TLS support in heat kubernetes  https://review.openstack.org/20287316:23
*** madhuri_ has quit IRC16:25
*** banix has quit IRC16:29
*** kebray has joined #openstack-containers16:33
*** dims_ has joined #openstack-containers16:33
*** harshs has joined #openstack-containers16:36
*** jay-lau-513 has quit IRC16:38
*** unicell has quit IRC16:39
openstackgerritMurali Allada proposed openstack/python-magnumclient: Support for public baymodels.  https://review.openstack.org/22951916:43
*** banix has joined #openstack-containers16:44
*** suro-patz has joined #openstack-containers16:44
*** jwcroppe has joined #openstack-containers16:44
*** alex_klimov has quit IRC16:45
*** devlaps has joined #openstack-containers16:50
*** Tango has quit IRC16:50
*** harlowja has quit IRC16:52
*** achanda has joined #openstack-containers16:58
*** suro-patz has quit IRC17:00
*** tbh has quit IRC17:00
*** achanda has quit IRC17:01
*** suro-patz has joined #openstack-containers17:02
*** adrian_otto has quit IRC17:03
*** gangil has quit IRC17:06
*** annegentle has joined #openstack-containers17:06
*** tbh has joined #openstack-containers17:07
*** rpothier has quit IRC17:11
*** unicell has joined #openstack-containers17:12
*** vimal has quit IRC17:12
*** manjeets has quit IRC17:15
*** suro-patz has quit IRC17:17
*** vilobhmm has joined #openstack-containers17:21
openstackgerritMadhuri Kumari proposed openstack/magnum: Add TLS support in heat kubernetes  https://review.openstack.org/20287317:23
*** madhuri has joined #openstack-containers17:31
*** shakamunyi has quit IRC17:35
*** Tango has joined #openstack-containers17:36
*** banix has quit IRC17:36
*** sthillma has quit IRC17:36
*** achanda has joined #openstack-containers17:37
*** rlrossit has quit IRC17:43
*** rlrossit has joined #openstack-containers17:49
*** gangil has joined #openstack-containers17:50
*** klindgren__ is now known as klindgren17:54
*** adrian_otto has joined #openstack-containers17:55
*** Drago has quit IRC17:58
*** Marga_ has joined #openstack-containers17:59
*** Marga_ has quit IRC17:59
*** Marga_ has joined #openstack-containers18:00
*** shakamunyi has joined #openstack-containers18:01
*** banix has joined #openstack-containers18:01
*** kebray has quit IRC18:01
*** madhuri has quit IRC18:02
*** chandankumar has joined #openstack-containers18:02
openstackgerritMadhuri Kumari proposed openstack/python-magnumclient: Rename 'insecure' baymodel attribute to 'tls_disabled'.  https://review.openstack.org/22907418:03
*** madhuri has joined #openstack-containers18:04
madhurihongbin: Kennan Can you please help merging this patch?18:05
madhuriThis patch is necessary for https://review.openstack.org/#/c/202873/ to pass18:05
madhuritcammann1: ^^18:06
vilobhmmmadhuri : +1 lgtm18:06
madhuriThanks vilobhmm18:06
*** madhuri has quit IRC18:10
*** suro-patz has joined #openstack-containers18:12
*** harlowja has joined #openstack-containers18:13
*** openstackgerrit has quit IRC18:16
*** openstackgerrit has joined #openstack-containers18:16
*** kebray has joined #openstack-containers18:17
*** Drago has joined #openstack-containers18:29
*** Drago has quit IRC18:29
*** Drago has joined #openstack-containers18:29
*** ioni is now known as ionut18:33
*** ionut is now known as wonder18:33
*** jwang_ has quit IRC18:34
*** harshs has quit IRC18:35
*** Drago has quit IRC18:36
*** Drago1 has joined #openstack-containers18:36
*** harshs has joined #openstack-containers18:38
*** julim has quit IRC18:41
*** julim has joined #openstack-containers18:43
*** dims_ has quit IRC18:46
*** openstackgerrit has quit IRC18:46
*** openstackgerrit has joined #openstack-containers18:46
*** dims_ has joined #openstack-containers18:46
*** chandankumar has quit IRC18:50
*** achanda has quit IRC18:50
*** sthillma has joined #openstack-containers18:52
*** achanda has joined #openstack-containers18:53
*** david-lyle has quit IRC18:55
*** david-lyle has joined #openstack-containers18:55
*** kebray has quit IRC18:57
*** annegentle has quit IRC18:57
vilobhmmhongbin : ping19:00
hongbinvilobhmm: hey19:00
*** annegentle has joined #openstack-containers19:00
vilobhmmhongbin : as part of this review https://review.openstack.org/#/c/228110/ we discovered that right now at the controller level baymodel only accepts "uuid" for update19:01
vilobhmmwouldn't it be better than we don't restrict to just uuid but also allow logical name19:01
vilobhmmhttps://github.com/openstack/magnum/blob/master/magnum/api/controllers/v1/baymodel.py#L34519:01
hongbinagree19:01
vilobhmmcool19:01
vilobhmmwill submit a patch19:01
hongbinfeel free19:01
*** achanda has quit IRC19:02
openstackgerritMerged openstack/python-magnumclient: Rename 'insecure' baymodel attribute to 'tls_disabled'.  https://review.openstack.org/22907419:08
*** dave-mccowan has quit IRC19:11
*** gangil has quit IRC19:19
openstackgerritManjeet Singh Bhatia proposed openstack/magnum: WIP: Adding Documentation for use of proxies in magnum.  https://review.openstack.org/22863419:20
*** gangil has joined #openstack-containers19:20
*** david-lyle has quit IRC19:22
*** david-lyle has joined #openstack-containers19:22
*** alex_klimov has joined #openstack-containers19:33
*** david-lyle has quit IRC19:35
*** dave-mccowan has joined #openstack-containers19:42
*** Guest34201 has quit IRC19:42
*** Guest34201 has joined #openstack-containers19:42
*** Guest34201 is now known as preilly19:42
*** sthillma has quit IRC19:48
*** annegentle has quit IRC19:48
*** Marga_ has quit IRC19:50
*** david-lyle has joined #openstack-containers19:52
*** eghobo_ has quit IRC19:57
*** david-ly_ has joined #openstack-containers20:07
*** david-lyle has quit IRC20:07
*** david-ly_ is now known as david-lyle20:08
*** harshs has quit IRC20:11
*** harshs has joined #openstack-containers20:13
*** Marga_ has joined #openstack-containers20:15
hongbinadrian_otto: Hi Adrian, I remembered you said the release was cut yesterday. Then, I wonder if what is the plan in the next two weeks. Do you want a repo freeze? or should we continue to approve patches? or selectively approve patches?20:15
*** sthillma has joined #openstack-containers20:15
*** banix has quit IRC20:18
adrian_ottohongbin: one approach is to branch the release, and only backport bugs into that20:19
adrian_ottoand we continue approving patches in master20:20
hongbinyou like this approach?20:20
hongbinIf you want to proceed this way, then we should stop approving patches until you create the stable/liberty branch20:22
openstackgerritMurali Allada proposed openstack/python-magnumclient: Support for public baymodels.  https://review.openstack.org/22951920:22
hongbinadrian_otto: ^^20:26
adrian_ottohongbin: I want to get all the TLS work in first20:29
adrian_ottodid all of that merge yet?20:29
adrian_ottoit looks like we merged a ton of code in the past day ;-)20:30
hongbinadrian_otto: I am not sure. Need to confirm by maduri and andrew20:30
adrian_ottohttps://review.openstack.org/#/q/status:open+project:openstack/magnum+branch:master+topic:bp/secure-kubernetes,n,z20:31
hongbinYes, yesterday has over 20 commits.20:31
adrian_ottoseems we have more revisions to land there20:31
hongbinI see. Then the cutting day needs to be postponse20:31
adrian_ottoright.20:32
hongbink. get that. I will give priority to review the tls patches.20:32
adrian_ottothanks hongbin!20:33
hongbinnp20:33
openstackgerritMerged openstack/magnum: Add TLS support in Magnum.  https://review.openstack.org/19490520:47
*** apuimedo has quit IRC20:56
*** sthillma_ has joined #openstack-containers21:00
*** apuimedo has joined #openstack-containers21:00
openstackgerritMerged openstack/magnum: Remove unused DB API get_rcs_by_bay_uuid  https://review.openstack.org/21786521:01
*** gangil has quit IRC21:02
*** gangil has joined #openstack-containers21:02
*** sthillma has quit IRC21:03
*** sthillma_ is now known as sthillma21:03
*** david-lyle has quit IRC21:03
*** david-ly_ has joined #openstack-containers21:03
*** david-ly_ is now known as david-lyle21:05
openstackgerritAndrew Melton proposed openstack/magnum: Use dockerpy logs operation instead of attach  https://review.openstack.org/22962721:08
openstackgerritAndrew Melton proposed openstack/magnum: Set up temp files containing client TLS certs  https://review.openstack.org/22962821:08
*** kebray has joined #openstack-containers21:08
openstackgerritAndrew Melton proposed openstack/magnum: Add TLS support to container handler  https://review.openstack.org/22962921:08
openstackgerritVilobh Meshram proposed openstack/magnum: Remove name from test token  https://review.openstack.org/22963121:09
openstackgerritAdrian Otto proposed openstack/magnum: Adding Documentation for use of proxies in magnum.  https://review.openstack.org/22863421:13
*** kebray has quit IRC21:13
openstackgerritAdrian Otto proposed openstack/magnum: Adding Documentation for use of proxies in magnum.  https://review.openstack.org/22863421:15
*** dimtruck is now known as zz_dimtruck21:17
openstackgerritAdrian Otto proposed openstack/magnum: Adding Documentation for use of proxies in magnum.  https://review.openstack.org/22863421:17
openstackgerritAdrian Otto proposed openstack/magnum: Adding Documentation for use of proxies in magnum.  https://review.openstack.org/22863421:19
*** david-lyle has quit IRC21:26
*** Marga_ has quit IRC21:26
*** david-lyle has joined #openstack-containers21:29
adrian_ottomuralia: ping21:29
adrian_ottocould you please rebase https://review.openstack.org/22633521:30
adrian_ottoand you will ned to bump the object version21:31
*** eghobo has joined #openstack-containers21:32
*** rlrossit has left #openstack-containers21:32
*** sthillma_ has joined #openstack-containers21:33
*** sthillma has quit IRC21:35
*** sthillma_ is now known as sthillma21:35
openstackgerritAdrian Otto proposed openstack/magnum: Add versioned objects to docs.openstack.org  https://review.openstack.org/22964121:47
*** david-lyle has quit IRC21:48
*** Marga_ has joined #openstack-containers21:48
openstackgerritHongbin Lu proposed openstack/magnum: Allow container memory size to be specified  https://review.openstack.org/22964521:49
*** david-lyle has joined #openstack-containers21:54
*** banix has joined #openstack-containers21:55
*** sdake has quit IRC21:55
*** sdake has joined #openstack-containers21:57
*** pradk has quit IRC22:02
klindgrenadrian_otto, I got the changes to the heat-template to have magnum nova-network vs's neutron - but the hcanges are against the kilo code base.  Looks like htings have changed pretty significantly in liberty.  Wondering what should I do here?  Since LBaaS doesn't exist in nova-network, would be forced to do something like spinup an haproxy node or some other thing to act as an LB for a multi-node master cluster.22:03
klindgrenOr change it back to where only a single master is done under nova-network?22:04
adrian_ottohi klindgren. I'm thinking about your question.22:05
adrian_ottoklindgren: have you seen the recent work that Tango has been doing for this blueprint? https://blueprints.launchpad.net/magnum/+spec/external-lb22:06
klindgrenin kilo the change was pretty trivial. - I have not.  Been pretty heads down on trying to get a POC of magnum working in our lab environments that are configured like our prod.22:07
adrian_ottothat addresses the LB concern for apps that run on magnum k8s bays22:07
adrian_ottoyes, Getting HA bays to work in kilo will be tricky22:08
adrian_ottoI would consider any work you to on that topic to be temporary in nature22:09
adrian_ottoso maybe a hack like launching an haproxy container in your bay might be appropriate22:10
*** jruano has quit IRC22:10
adrian_ottoyou could adapt your template a bit to include that, perhaps?22:10
klindgrenSeems like that change still requires neutron+lbaas, just not in the heat template?22:11
adrian_ottothe advantage of the external-lb feature is that it uses the neutron lbaas api so if you have a hardware load balancer connected there, you can leverage that for your k8s bays22:11
adrian_ottono, not necessarily. I understand you are trying to make things work without neutron.22:12
klindgrenso the idea being that you have a neutron install + lbaas specifically for handling the lb create requests22:14
klindgrenand kube will call that to setup a vip and use that22:14
adrian_ottoyes, that should work22:14
*** david-lyle has quit IRC22:15
openstackgerritHongbin Lu proposed openstack/python-magnumclient: Add an option to specify container memory size  https://review.openstack.org/22966322:17
adrian_ottohongbin: aha, there it is!22:18
hongbinyou means the magnumclient patch? Yes, I just submitted it22:19
vilobhmmhongbin : just saw it22:21
vilobhmmthanks!22:21
*** devlaps has quit IRC22:30
*** dims__ has joined #openstack-containers22:30
*** ganeshna has joined #openstack-containers22:31
eghobohongbin: "memory limit" is it for Liberty?22:31
*** ganeshna has quit IRC22:32
hongbineghobo: not necessary, but not hurt to let it be22:32
*** ganeshna has joined #openstack-containers22:32
eghobook, but it will work only with swarm, right?22:33
hongbinright22:33
*** dims_ has quit IRC22:33
eghoboand it's optional, isn't it? i don't see any test for this case22:35
*** david-lyle has joined #openstack-containers22:36
*** ganeshna has quit IRC22:36
hongbinit is optional. Let me double-check the test cases22:38
hongbineghobo: you are right. A test case is needed.22:39
openstackgerritHongbin Lu proposed openstack/magnum: Allow container memory size to be specified  https://review.openstack.org/22964522:50
adrian_ottohongbin, dims__, sdake, Kennan, yuanying, tcammann1: Please vote for new core reviewers (vilobhmm, and mumble00) http://lists.openstack.org/pipermail/openstack-dev/2015-September/075911.html22:51
adrian_ottoeghobo: you are suggesting a unit test that proves that you can create a container without the memory attribute set?22:54
eghoboyes22:54
adrian_ottook22:54
*** dane_leblanc has quit IRC22:54
eghobofeel free to ignore it, I just don't know how client deal with optional ):22:55
adrian_ottoit's a good suggestion, thanks.22:56
dims__adrian_otto: ack thanks!22:59
*** suro-patz has quit IRC23:00
*** suro-patz has joined #openstack-containers23:00
harlowjasdake hmmmm, challenge, hmmm23:04
harlowjadun dun dun, lol23:04
*** alejandrito has quit IRC23:04
harlowja;)23:05
*** hongbin has quit IRC23:08
*** jruano has joined #openstack-containers23:08
sdakesup23:16
sdakefigure of speech harlowja  :)23:16
harlowja;)23:16
harlowjahaha23:16
harlowjai know23:16
harlowjabut but i just added multi-tenancy to k8s23:17
harlowjachallenge accepted, ha23:17
sdakek8s has multitenancy but it isn't secure23:17
sdakeit offers no softwre defined isolation23:17
harlowjagotcha23:18
sdaketo do that means integrating with openstack directly in k8s23:18
sdakewhich would be interesting as I said but painful I suspect :)23:19
harlowjaya, i wonder how that would work out23:19
harlowja(if it would work out)23:21
*** suro-patz has quit IRC23:29
*** suro-patz has joined #openstack-containers23:29
openstackgerritVilobh Meshram proposed openstack/magnum: Baymodel update should accept both uuid and name  https://review.openstack.org/22967823:33
adrian_ottoyuanying: ping23:35
adrian_ottoyuanying: any chance you could revise https://review.openstack.org/202881 today?23:35
adrian_ottovilobhmm: please revisit https://review.openstack.org/22338423:38
*** jwcroppe has quit IRC23:40
*** jwcroppe has joined #openstack-containers23:41
vilobhmmadrian_otto : sure...should have an updated patch by tommorow23:43
adrian_ottothanks vilobhmm23:45
*** jwcroppe has quit IRC23:45
openstackgerritAdrian Otto proposed openstack/magnum: Add guide for TLS support in Magnum.  https://review.openstack.org/20646723:49
vilobhmmadrian_otto : with/wo barbican have same image for above review23:54
openstackgerritMurali Allada proposed openstack/magnum: Adding support for public baymodels  https://review.openstack.org/22633523:54
adrian_ottovilobhmm: which review number are you referring to?23:57
vilobhmmadrian_otto : https://review.openstack.org/20646723:58
vilobhmmsecure_k8sapi_with_barbican and secure_k8sapi_wo_barbican23:59
vilobhmmimages are same23:59
adrian_ottovilobhmm: nice catch. I'll revise it.23:59
vilobhmmadrian_otto : sure23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!