| *** alex_klimov has quit IRC | 00:02 | |
| adrian_otto | oh, I see the image content iself is wrong | 00:02 |
|---|---|---|
| vilobhmm | yes | 00:02 |
| adrian_otto | madhuri will need to fit that I think | 00:02 |
| adrian_otto | *fix | 00:02 |
| openstackgerrit | Murali Allada proposed openstack/magnum: Adding support for public baymodels https://review.openstack.org/226335 | 00:02 |
| vilobhmm | we need to have new image for secure_k8sapi_wo_barbican | 00:02 |
| adrian_otto | I don't know what she used to create the image | 00:03 |
| vilobhmm | adrian_otto : ^^ | 00:03 |
| adrian_otto | right, I updated that review accordingly, vilobhmm | 00:07 |
| vilobhmm | adrian_otto : thanks! | 00:08 |
| openstackgerrit | Adrian Otto proposed openstack/magnum: Remove unnecessary util method temporary_mutation https://review.openstack.org/229417 | 00:11 |
| openstackgerrit | Vilobh Meshram proposed openstack/magnum: Baymodel update should accept both uuid and name https://review.openstack.org/229678 | 00:14 |
| *** jwcroppe has joined #openstack-containers | 00:14 | |
| *** suro-patz has quit IRC | 00:15 | |
| *** sdake has quit IRC | 00:23 | |
| *** adrian_otto has quit IRC | 00:26 | |
| *** sthillma has quit IRC | 00:34 | |
| *** jruano has quit IRC | 00:43 | |
| *** Tango has quit IRC | 00:53 | |
| *** eghobo has quit IRC | 00:57 | |
| *** julim has quit IRC | 01:01 | |
| *** erkules_ has joined #openstack-containers | 01:09 | |
| *** jwcroppe has quit IRC | 01:11 | |
| *** erkules has quit IRC | 01:12 | |
| *** julim has joined #openstack-containers | 01:19 | |
| *** vilobhmm has quit IRC | 01:21 | |
| *** gangil has quit IRC | 01:25 | |
| *** unicell has quit IRC | 01:43 | |
| *** jruano has joined #openstack-containers | 01:47 | |
| *** rpothier has joined #openstack-containers | 01:51 | |
| *** julim has quit IRC | 01:58 | |
| *** jerrygb has joined #openstack-containers | 02:09 | |
| *** hongbin has joined #openstack-containers | 02:11 | |
| *** tbh has quit IRC | 02:13 | |
| *** suro-patz has joined #openstack-containers | 02:21 | |
| *** dims__ has quit IRC | 02:29 | |
| *** dims_ has joined #openstack-containers | 02:29 | |
| openstackgerrit | Merged openstack/magnum: Use dockerpy logs operation instead of attach https://review.openstack.org/229627 | 02:34 |
| *** tbh has joined #openstack-containers | 02:55 | |
| *** Drago1 has quit IRC | 02:56 | |
| *** dave-mccowan has quit IRC | 03:10 | |
| *** harshs has quit IRC | 03:11 | |
| *** madhuri has joined #openstack-containers | 03:12 | |
| openstackgerrit | Merged openstack/magnum: Set up temp files containing client TLS certs https://review.openstack.org/229628 | 03:13 |
| *** suro-patz has quit IRC | 03:15 | |
| *** dims__ has joined #openstack-containers | 03:15 | |
| *** Tango has joined #openstack-containers | 03:15 | |
| *** dims___ has joined #openstack-containers | 03:16 | |
| *** dims____ has joined #openstack-containers | 03:18 | |
| *** dims_ has quit IRC | 03:18 | |
| *** dims__ has quit IRC | 03:20 | |
| *** dims___ has quit IRC | 03:21 | |
| *** puranamr has joined #openstack-containers | 03:23 | |
| *** deepthi has joined #openstack-containers | 03:23 | |
| *** sthillma has joined #openstack-containers | 03:24 | |
| *** hongbin has quit IRC | 03:25 | |
| *** sthillma_ has joined #openstack-containers | 03:26 | |
| *** suro-patz has joined #openstack-containers | 03:26 | |
| *** sthillma has quit IRC | 03:29 | |
| *** sthillma_ is now known as sthillma | 03:29 | |
| *** rpothier has quit IRC | 03:34 | |
| *** banix has quit IRC | 03:34 | |
| *** puranamr has quit IRC | 03:36 | |
| *** dims____ has quit IRC | 03:37 | |
| *** sthillma has quit IRC | 03:40 | |
| *** jwcroppe has joined #openstack-containers | 03:43 | |
| *** banix has joined #openstack-containers | 03:46 | |
| *** madhuri has quit IRC | 03:50 | |
| *** _hanhart has joined #openstack-containers | 03:53 | |
| *** jruano has quit IRC | 03:54 | |
| *** puranamr has joined #openstack-containers | 03:56 | |
| *** jerrygb has quit IRC | 03:57 | |
| *** jerrygb has joined #openstack-containers | 03:58 | |
| *** sdake has joined #openstack-containers | 04:00 | |
| *** _hanhart has quit IRC | 04:02 | |
| *** puranamr has quit IRC | 04:06 | |
| *** adrian_otto has joined #openstack-containers | 04:21 | |
| *** mdhuri has joined #openstack-containers | 04:21 | |
| *** chandankumar has joined #openstack-containers | 04:22 | |
| *** vilobhmm has joined #openstack-containers | 04:22 | |
| *** sdake_ has joined #openstack-containers | 04:24 | |
| *** adrian_otto has quit IRC | 04:26 | |
| *** adrian_otto has joined #openstack-containers | 04:27 | |
| *** sdake has quit IRC | 04:28 | |
| *** harshs has joined #openstack-containers | 04:28 | |
| *** irenab has joined #openstack-containers | 04:36 | |
| *** vimal has joined #openstack-containers | 04:40 | |
| *** suro-patz has quit IRC | 04:42 | |
| *** unicell has joined #openstack-containers | 04:46 | |
| *** VikasC has joined #openstack-containers | 04:46 | |
| *** Marga_ has quit IRC | 04:47 | |
| *** suro-patz has joined #openstack-containers | 04:50 | |
| *** harshs has quit IRC | 04:59 | |
| *** suro-patz has quit IRC | 05:00 | |
| openstackgerrit | Manjeet Singh Bhatia proposed openstack/python-magnumclient: Add Security group id to magnum client https://review.openstack.org/229724 | 05:02 |
| *** tbh has quit IRC | 05:10 | |
| *** banix has quit IRC | 05:11 | |
| *** vilobhmm has quit IRC | 05:19 | |
| *** sdake_ is now known as sdake | 05:21 | |
| *** chandankumar has quit IRC | 05:28 | |
| *** eghobo has joined #openstack-containers | 05:47 | |
| *** wonder is now known as ioni | 05:56 | |
| *** adrian_otto has quit IRC | 05:57 | |
| *** hblixt has joined #openstack-containers | 05:57 | |
| *** chandankumar has joined #openstack-containers | 05:59 | |
| *** diga has joined #openstack-containers | 05:59 | |
| *** suro-patz has joined #openstack-containers | 06:08 | |
| *** j______ has joined #openstack-containers | 06:10 | |
| *** irenab has quit IRC | 06:15 | |
| openstackgerrit | vikas choudhary proposed openstack/python-magnumclient: Add support for 'baymodel-update' in python-client https://review.openstack.org/228110 | 06:18 |
| *** chandankumar has quit IRC | 06:34 | |
| *** Tango has quit IRC | 06:39 | |
| *** Marga_ has joined #openstack-containers | 06:39 | |
| *** j______ has quit IRC | 06:42 | |
| *** Marga_ has quit IRC | 06:47 | |
| *** suro-patz has quit IRC | 06:48 | |
| *** irenab has joined #openstack-containers | 06:49 | |
| *** j______ has joined #openstack-containers | 06:50 | |
| *** BertrandN has joined #openstack-containers | 06:59 | |
| *** BertrandN has quit IRC | 07:12 | |
| *** chandankumar has joined #openstack-containers | 07:16 | |
| *** tbh has joined #openstack-containers | 07:22 | |
| *** erkules_ is now known as erkules | 07:28 | |
| *** erkules has joined #openstack-containers | 07:28 | |
| *** BertrandN has joined #openstack-containers | 07:29 | |
| *** ganeshna has joined #openstack-containers | 07:30 | |
| *** alex_klimov has joined #openstack-containers | 07:31 | |
| *** ganeshna has quit IRC | 07:32 | |
| *** ganeshna has joined #openstack-containers | 07:32 | |
| *** eghobo has quit IRC | 07:40 | |
| *** Marga_ has joined #openstack-containers | 07:44 | |
| *** openstackgerrit has quit IRC | 07:46 | |
| *** openstackgerrit has joined #openstack-containers | 07:46 | |
| *** Marga_ has quit IRC | 07:48 | |
| *** alex_klimov has quit IRC | 07:52 | |
| *** alex_klimov has joined #openstack-containers | 08:05 | |
| *** ganeshna has quit IRC | 08:35 | |
| *** jruano has joined #openstack-containers | 08:43 | |
| *** Marga_ has joined #openstack-containers | 08:45 | |
| *** chandankumar has quit IRC | 08:46 | |
| *** Marga_ has quit IRC | 08:50 | |
| *** diga has quit IRC | 08:56 | |
| *** deepthi has quit IRC | 08:57 | |
| *** exploreshaifali has joined #openstack-containers | 09:00 | |
| *** j______ has quit IRC | 09:08 | |
| *** deepthi has joined #openstack-containers | 09:10 | |
| *** ArchiFleKs has quit IRC | 09:11 | |
| *** jruano has quit IRC | 09:14 | |
| *** Tango has joined #openstack-containers | 09:18 | |
| *** deepthi has quit IRC | 09:19 | |
| *** deepthi has joined #openstack-containers | 09:37 | |
| *** sdake_ has joined #openstack-containers | 09:38 | |
| *** sdake has quit IRC | 09:42 | |
| *** diga has joined #openstack-containers | 09:45 | |
| *** Marga_ has joined #openstack-containers | 09:46 | |
| *** Marga_ has quit IRC | 09:51 | |
| *** exploreshaifali has quit IRC | 09:54 | |
| *** dims has joined #openstack-containers | 09:55 | |
| *** mdhuri has quit IRC | 10:06 | |
| openstackgerrit | Merged openstack/python-magnumclient: Add support for python >= 3.4 https://review.openstack.org/224565 | 10:28 |
| *** diga has quit IRC | 10:41 | |
| *** diga has joined #openstack-containers | 10:46 | |
| *** Marga_ has joined #openstack-containers | 10:46 | |
| *** agireud has quit IRC | 10:48 | |
| *** Tango has quit IRC | 10:50 | |
| *** Marga_ has quit IRC | 10:51 | |
| *** j______ has joined #openstack-containers | 11:10 | |
| *** diga has quit IRC | 11:13 | |
| *** j______ has quit IRC | 11:14 | |
| *** j______ has joined #openstack-containers | 11:20 | |
| *** exploreshaifali has joined #openstack-containers | 11:22 | |
| *** dave-mccowan has joined #openstack-containers | 11:41 | |
| *** deepthi has quit IRC | 11:45 | |
| *** Marga_ has joined #openstack-containers | 11:47 | |
| *** Marga_ has quit IRC | 11:52 | |
| *** apuimedo has quit IRC | 11:54 | |
| *** apuimedo has joined #openstack-containers | 11:58 | |
| *** madhuri has joined #openstack-containers | 12:09 | |
| *** jerrygb has quit IRC | 12:17 | |
| *** banix has joined #openstack-containers | 12:24 | |
| *** annegentle has joined #openstack-containers | 12:25 | |
| *** VikasC has quit IRC | 12:27 | |
| *** alejandrito has joined #openstack-containers | 12:27 | |
| *** banix has quit IRC | 12:28 | |
| *** alex_klimov has quit IRC | 12:33 | |
| *** Marga_ has joined #openstack-containers | 12:48 | |
| *** puranamr has joined #openstack-containers | 12:48 | |
| *** julim has joined #openstack-containers | 12:52 | |
| *** puranamr has quit IRC | 12:52 | |
| *** Marga_ has quit IRC | 12:53 | |
| *** alex_klimov has joined #openstack-containers | 13:02 | |
| *** madhuri has quit IRC | 13:02 | |
| *** rlrossit has joined #openstack-containers | 13:03 | |
| *** j______ has quit IRC | 13:08 | |
| *** j___ has joined #openstack-containers | 13:11 | |
| *** rpothier has joined #openstack-containers | 13:19 | |
| *** irenab has quit IRC | 13:23 | |
| openstackgerrit | Murali Allada proposed openstack/magnum: Adding support for public baymodels https://review.openstack.org/226335 | 13:35 |
| *** Marga_ has joined #openstack-containers | 13:49 | |
| *** tbh has quit IRC | 13:52 | |
| *** Marga_ has quit IRC | 13:53 | |
| *** jruano has joined #openstack-containers | 13:57 | |
| *** exploreshaifali has quit IRC | 14:03 | |
| *** dims has quit IRC | 14:10 | |
| *** david-lyle has quit IRC | 14:11 | |
| *** david-lyle has joined #openstack-containers | 14:13 | |
| *** dane_leblanc has joined #openstack-containers | 14:22 | |
| openstackgerrit | Andrew Melton proposed openstack/magnum: Add TLS support to container handler https://review.openstack.org/229629 | 14:24 |
| *** zz_dimtruck is now known as dimtruck | 14:29 | |
| *** rebase33 has joined #openstack-containers | 14:30 | |
| *** vimal has quit IRC | 14:40 | |
| *** ganeshna has joined #openstack-containers | 14:48 | |
| *** ganeshna has quit IRC | 14:48 | |
| *** ganeshna has joined #openstack-containers | 14:49 | |
| *** Marga_ has joined #openstack-containers | 14:50 | |
| *** hongbin has joined #openstack-containers | 14:52 | |
| *** banix has joined #openstack-containers | 14:53 | |
| *** Marga_ has quit IRC | 14:54 | |
| *** Tango has joined #openstack-containers | 14:56 | |
| *** harshs has joined #openstack-containers | 14:58 | |
| *** adrian_otto has joined #openstack-containers | 15:00 | |
| *** sdake has joined #openstack-containers | 15:06 | |
| *** agireud has joined #openstack-containers | 15:08 | |
| *** dave-mccowan has quit IRC | 15:09 | |
| *** sdake_ has quit IRC | 15:10 | |
| *** adrian_otto has quit IRC | 15:11 | |
| *** adrian_otto has joined #openstack-containers | 15:13 | |
| *** Marga_ has joined #openstack-containers | 15:14 | |
| *** ganeshna has quit IRC | 15:17 | |
| *** manjeets has joined #openstack-containers | 15:17 | |
| manjeets | daneyon_: | 15:17 |
| manjeets | ping | 15:17 |
| *** jerrygb has joined #openstack-containers | 15:19 | |
| *** jerrygb has quit IRC | 15:19 | |
| *** jerrygb has joined #openstack-containers | 15:19 | |
| *** dave-mccowan has joined #openstack-containers | 15:23 | |
| *** Drago1 has joined #openstack-containers | 15:24 | |
| *** Drago1 has quit IRC | 15:24 | |
| *** Drago1 has joined #openstack-containers | 15:24 | |
| *** suro-patz has joined #openstack-containers | 15:28 | |
| *** dims has joined #openstack-containers | 15:30 | |
| wznoinsk | hi all | 15:36 |
| wznoinsk | would it be better to mention 'gre' tunneling required for Magnum to work here: http://docs.openstack.org/developer/magnum/dev/dev-quickstart.html#dev-quickstart | 15:37 |
| *** daneyon has joined #openstack-containers | 15:37 | |
| manjeets | wznoinsk: ask daneyon_ when he gets online he maintains networking doc | 15:38 |
| manjeets | I will suggest it won't be a good idea to add gre details in quickstart | 15:38 |
| *** daneyon__ has joined #openstack-containers | 15:39 | |
| manjeets | daneyon__: ping | 15:39 |
| daneyon__ | hey manjeets | 15:39 |
| manjeets | Hi I saw you reported a bug | 15:40 |
| *** daneyon_ has quit IRC | 15:40 | |
| daneyon__ | which one? | 15:40 |
| manjeets | https://bugs.launchpad.net/magnum/+bug/1501050 | 15:40 |
| openstack | Launchpad bug 1501050 in Magnum "improve-swarm-security" [Undecided,New] - Assigned to Manjeet Singh Bhatia (manjeet-s-bhatia) | 15:40 |
| wznoinsk | manjeets: not details, just 'NOTE:' | 15:40 |
| daneyon__ | yes, I have an upcoming patch that will partially address the bug | 15:40 |
| manjeets | I implemented security_group_id in magnum client | 15:40 |
| manjeets | https://review.openstack.org/#/c/229724/ | 15:41 |
| daneyon__ | my patch removes the swarm agent off the swarm manager node. this will allow us to lock down the swarm manager port | 15:41 |
| *** daneyon has quit IRC | 15:41 | |
| daneyon__ | manjeets can you talk me through the patch? | 15:42 |
| daneyon__ | help me understand what you're thinking | 15:42 |
| manjeets | I added a param in bay create security group id | 15:43 |
| manjeets | i've done in client only | 15:43 |
| daneyon__ | manjeets understood | 15:43 |
| daneyon__ | I am trying to understand the rationale | 15:43 |
| wznoinsk | manjeets: my point comes from the fact I need to restart (or restart neutron with proper config - gre added) because I do not use gre (hence don't have it in my local.conf) normally | 15:44 |
| *** irenab has joined #openstack-containers | 15:44 | |
| *** tbh has joined #openstack-containers | 15:44 | |
| *** Marga_ has quit IRC | 15:44 | |
| *** Marga_ has joined #openstack-containers | 15:45 | |
| manjeets | I followed your description in bug to take a parameter. | 15:45 |
| manjeets | I thought adding a parameter add new feature to magnum we can define different security group rules for cluster | 15:46 |
| manjeets | there might be user or operators who want different sec group rules on their respective clusters | 15:46 |
| manjeets | then just define while creating bay ? | 15:47 |
| manjeets | ^_^ daneyon__ | 15:47 |
| daneyon__ | manjeets 1 moment pls | 15:48 |
| daneyon__ | manjeets let me think it through | 15:49 |
| manjeets | ok daneyon__ take your time | 15:49 |
| daneyon__ | manjeets, i think their is a possability of causing more harm than good by exposing sec-group id | 15:50 |
| daneyon__ | let me explain | 15:50 |
| daneyon__ | the more options we provide to end users, the higher possibility of a poor user experience. | 15:50 |
| *** vilobhmm has joined #openstack-containers | 15:51 | |
| *** gangil has joined #openstack-containers | 15:51 | |
| *** harshs_ has joined #openstack-containers | 15:51 | |
| daneyon__ | we should be locking down the control plane (i.e. k8s master, swarm mgr, etc..) and leaving the data plane (i.e. nodes) relatively open. For the nodes, we should implement basic security meastures to protect the nodes, while allowing containers to communicate freely. | 15:52 |
| manjeets | daneyon__, its just a suggestion we can discuss with other members as well and can come to conclusion ? | 15:52 |
| manjeets | one question daneyon__, if you add you will just define it in template ? | 15:53 |
| daneyon__ | manjeets for sure. it would be good to bring this patch up during our weekly irc meeting. | 15:53 |
| *** harshs has quit IRC | 15:53 | |
| *** harshs_ is now known as harshs | 15:53 | |
| *** jruano has quit IRC | 15:53 | |
| daneyon__ | manjeets correct | 15:53 |
| manjeets | ok that was already there i think what you removed in past ? | 15:53 |
| manjeets | what will be the difference or new purpose it will serve this time ? | 15:54 |
| *** BertrandN has quit IRC | 15:54 | |
| daneyon__ | manjeets yes. FOr swarm, the sec rules only allowed ssh,icmp and swarm TCP ports (2375/2376). This is acceptable for the mgr node once the swarm agent is removed. My patch removes the swarm agent from the mgr node and locks down the mgr node port. | 15:55 |
| daneyon__ | manjeets I think a follow-on patch can implement basic sec measures such as blocking spoofing and things like that for node ports. | 15:56 |
| *** vilobhmm_ has joined #openstack-containers | 15:57 | |
| manjeets | ok I will bring it in next irc meeting | 15:58 |
| *** alejandrito has quit IRC | 15:58 | |
| *** kebray has joined #openstack-containers | 16:00 | |
| *** daneyon has joined #openstack-containers | 16:00 | |
| *** manjeets has quit IRC | 16:00 | |
| vilobhmm_ | hi manjeets : was reviewing your patch https://review.openstack.org/#/c/229724/1/magnumclient/tests/v1/test_shell.py #147 | 16:01 |
| *** daneyon__ has quit IRC | 16:03 | |
| *** suro-patz has quit IRC | 16:04 | |
| wznoinsk | daneyon: would it be good to add 'NOTE: gre tunneling is required' for Magnum to work here: http://docs.openstack.org/developer/magnum/dev/dev-quickstart.html#dev-quickstart ? | 16:04 |
| *** alejandrito has joined #openstack-containers | 16:05 | |
| daneyon | wznoinsk gre tunneling is required? Can you pls elaborate? | 16:05 |
| *** unicell has quit IRC | 16:09 | |
| wznoinsk | daneyon: http://paste.openstack.org/show/475094/ when creating a bay I see | 16:10 |
| *** alex_klimov has quit IRC | 16:11 | |
| *** j___ has quit IRC | 16:11 | |
| daneyon | wznoinsk are you using devstack? | 16:12 |
| wznoinsk | daneyon: correct | 16:12 |
| daneyon | can you try removing gre as a type-driver from ml2_conf.ini | 16:13 |
| daneyon | and restarting neutron-server and the neutron-ovs-agent | 16:14 |
| daneyon | wznoinsk ^ | 16:14 |
| wznoinsk | I didn't have it, only vlan, flat, local, I guess I should have at least one tuneling type driver? | 16:14 |
| daneyon | I think it's more of a devstack config issue than a magnum thing | 16:15 |
| wznoinsk | daneyon: ^ | 16:15 |
| daneyon | wznoinsk one sec pls | 16:15 |
| *** chandankumar has joined #openstack-containers | 16:19 | |
| daneyon | wznoinsk my ml2_conf.ini shows tenant_network_types = vxlan and type_drivers = local,flat,vlan,gre,vxlan | 16:21 |
| daneyon | when i spin up a bay, the neutron net-show looks good | 16:21 |
| daneyon | using vxlan for the tenant network | 16:21 |
| *** eghobo has joined #openstack-containers | 16:22 | |
| wznoinsk | yes, so I guess once of tunenling (vxlan or gre) has to be enabled in your confs, in my case I didn't have any and failed out - had to check logs to get to know about the problem | 16:25 |
| wznoinsk | and bay status was in CREATE_IN_PROGRESS forever <- daneyon | 16:26 |
| daneyon | wznoinsk take a look at the heat stack progress and see if it's failing at a particular point | 16:29 |
| wznoinsk | daneyon: yes, it's not finishing stacking there, althought I don't see any gre/vxlan errors in q-svc anymore, once I'll get my hear around the problem I'll get back to checking the vxlan/gre necessity, should the quickstart guide mention it or not | 16:37 |
| *** suro-patz has joined #openstack-containers | 16:39 | |
| wznoinsk | s/hear/head | 16:39 |
| *** amit213 has joined #openstack-containers | 16:43 | |
| daneyon | wznoinsk I don't think the q-start guide needs to mention anything about gre. | 16:43 |
| wznoinsk | daneyon: I need to get into magnum properly but I think it may be some default heat setting to use tunelling, not directly related then to magnum | 16:44 |
| *** Tango has quit IRC | 16:49 | |
| *** unicell has joined #openstack-containers | 16:56 | |
| *** diga has joined #openstack-containers | 16:56 | |
| *** harshs has quit IRC | 16:59 | |
| *** puranamr has joined #openstack-containers | 16:59 | |
| *** puranamr has quit IRC | 17:01 | |
| *** sdake_ has joined #openstack-containers | 17:02 | |
| *** dims_ has joined #openstack-containers | 17:03 | |
| *** jruano has joined #openstack-containers | 17:03 | |
| *** sdake_ has quit IRC | 17:04 | |
| *** jerrygb has quit IRC | 17:04 | |
| *** dims has quit IRC | 17:04 | |
| *** sdake has quit IRC | 17:05 | |
| *** Marga_ has quit IRC | 17:07 | |
| *** Marga_ has joined #openstack-containers | 17:08 | |
| *** Marga_ has quit IRC | 17:13 | |
| *** chandankumar has quit IRC | 17:22 | |
| *** vimal has joined #openstack-containers | 17:27 | |
| *** alejandrito has quit IRC | 17:36 | |
| *** Marga_ has joined #openstack-containers | 17:36 | |
| *** alejandrito has joined #openstack-containers | 17:38 | |
| *** Tango has joined #openstack-containers | 17:43 | |
| *** alejandrito has quit IRC | 17:46 | |
| *** rlrossit has quit IRC | 17:46 | |
| *** alejandrito has joined #openstack-containers | 17:47 | |
| adrian_otto | Reminder our network subteam meeting is scheduled to begin in 5 mins in #openstack-meeting | 17:56 |
| *** rlrossit has joined #openstack-containers | 17:58 | |
| *** jruano has quit IRC | 18:00 | |
| *** kebray has quit IRC | 18:03 | |
| *** kebray has joined #openstack-containers | 18:05 | |
| *** chandankumar has joined #openstack-containers | 18:12 | |
| vilobhmm | hongbin : can you please have a look at https://review.openstack.org/#/c/220344/ and https://review.openstack.org/#/q/status:open+project:openstack/python-magnumclient+branch:master+topic:bp/objects-from-bay,n,z | 18:13 |
| vilobhmm | whenever you are free | 18:13 |
| hongbin | vilobhmm: sure. Will review | 18:13 |
| *** vilobhmm has quit IRC | 18:18 | |
| *** vilobhmm_ is now known as vilobhmm | 18:18 | |
| *** chandankumar has quit IRC | 18:19 | |
| *** chandankumar has joined #openstack-containers | 18:19 | |
| *** banix has quit IRC | 18:21 | |
| *** chandankumar has quit IRC | 18:31 | |
| *** openstackgerrit has quit IRC | 18:31 | |
| *** openstackgerrit has joined #openstack-containers | 18:31 | |
| *** dave-mccowan has quit IRC | 18:35 | |
| *** julim has quit IRC | 18:48 | |
| *** banix has joined #openstack-containers | 18:48 | |
| *** tbh has quit IRC | 18:49 | |
| *** harshs has joined #openstack-containers | 18:49 | |
| *** dave-mccowan has joined #openstack-containers | 18:51 | |
| *** gangil has quit IRC | 19:01 | |
| muralia | adrian_otto: https://review.openstack.org/#/c/226335/ | 19:04 |
| adrian_otto | muralia: was just approved for merge | 19:09 |
| muralia | thanks | 19:09 |
| adrian_otto | muralia: thanks for your work on that feature. Small amount of code, but big potential impact. | 19:09 |
| muralia | absolutely. thanks for the review :) | 19:10 |
| *** muralia has quit IRC | 19:11 | |
| *** muralia has joined #openstack-containers | 19:12 | |
| openstackgerrit | Merged openstack/magnum: Adding support for public baymodels https://review.openstack.org/226335 | 19:13 |
| openstackgerrit | Merged openstack/magnum: Add TLS support to container handler https://review.openstack.org/229629 | 19:13 |
| *** SourabhP has joined #openstack-containers | 19:14 | |
| *** sthillma has joined #openstack-containers | 19:15 | |
| *** kebray has quit IRC | 19:17 | |
| *** david-lyle has quit IRC | 19:18 | |
| *** jwcroppe has quit IRC | 19:18 | |
| *** kebray has joined #openstack-containers | 19:18 | |
| muralia | tcammann1: https://review.openstack.org/#/c/229519/ needs one more +2 | 19:19 |
| vilobhmm | hongbin : ping..regarding your recent post on ML reharding hierarchical multitenancy | 19:20 |
| hongbin | vilobhmm: yes, go ahead | 19:21 |
| vilobhmm | For resource sharing every project need to implement there own Nested Quota Driver (which would enable resource sharing in an hierarchy). I did implement Nested Quota Driver in L https://blueprints.launchpad.net/cinder/+spec/cinder-nested-quota-driver which allows resource sharing of resources. | 19:22 |
| vilobhmm | the resources can be consumed from same pool for the projects in hierarchy | 19:23 |
| vilobhmm | is that something that you were looking for ? | 19:23 |
| hongbin | I wonder the resource visibility | 19:23 |
| vilobhmm | I didn’t get you | 19:23 |
| hongbin | like if resources in top level of the tree is sharable by the users in bottom level | 19:24 |
| hongbin | The goDaddy folk want to create a bay in a parent tenant, which can be sharad by tenants below | 19:25 |
| vilobhmm | the resource sharing happens level by level for example A (root) -> B -> C | 19:25 |
| vilobhmm | A can share with B and hence B can share with C | 19:25 |
| hongbin | good to know, any document about that? | 19:25 |
| vilobhmm | its possible…I have covered different usecases in detail here https://review.openstack.org/#/c/173141/7/specs/liberty/cinder-nested-quota-driver.rst | 19:25 |
| hongbin | it is a long proposal :) | 19:26 |
| vilobhmm | hongbin : yes its a big change ; its first of its kind in Openstack :) | 19:27 |
| vilobhmm | the nested quota driver i mean | 19:27 |
| *** david-lyle has joined #openstack-containers | 19:27 | |
| hongbin | k. That is cinder. Do you know if other projects propose something similar? | 19:27 |
| vilobhmm | yes nova is trying to do similar | 19:28 |
| hongbin | interesting | 19:28 |
| vilobhmm | hongbin : https://review.openstack.org/#/c/209969/ | 19:28 |
| vilobhmm | this spec was approved for liberty as well | 19:28 |
| hongbin | frankly, if resouce sharing is achievable, life is easier | 19:28 |
| vilobhmm | yes | 19:28 |
| vilobhmm | totally | 19:28 |
| vilobhmm | I had proposed this earlier https://blueprints.launchpad.net/magnum/+spec/nested-quota-magnum | 19:29 |
| vilobhmm | hongbin : ^^ | 19:30 |
| hongbin | vilobhmm: the bp looks good | 19:31 |
| hongbin | thx for the information | 19:32 |
| vilobhmm | hongbin : welcome | 19:32 |
| vilobhmm | should we discuss about this in upcoming weekly meeting | 19:32 |
| vilobhmm | hongbin : ^^ | 19:33 |
| hongbin | vilobhmm: you need to ping adrian_otto about that :) | 19:33 |
| *** puranamr has joined #openstack-containers | 19:33 | |
| adrian_otto | we can include it on Tueday's agenda | 19:33 |
| vilobhmm | adrian_otto : thanks ! | 19:33 |
| *** julim has joined #openstack-containers | 19:33 | |
| *** vilobhmm has quit IRC | 19:35 | |
| *** vilobhmm has joined #openstack-containers | 19:36 | |
| adrian_otto | I just pulled magnum fresh from master, and found this: | 19:38 |
| adrian_otto | magnum service-list | 19:38 |
| adrian_otto | ERROR: Internal Server Error (HTTP 500) | 19:38 |
| adrian_otto | does that work for anyone else? | 19:39 |
| *** vimal has quit IRC | 19:41 | |
| *** jwcroppe has joined #openstack-containers | 19:43 | |
| hongbin | adrian_otto: I just unstack the whole stack. Need a few minutes to re-stack for test | 19:44 |
| suro-patz | adrian_otto: will take a look | 19:44 |
| *** puranamr has quit IRC | 19:45 | |
| *** logan2 has quit IRC | 19:47 | |
| *** logan2 has joined #openstack-containers | 19:55 | |
| adrian_otto | also, I think pod-show is broken too. I filed this bug against the client, understanding that the fix might actually need to happen in the server: https://bugs.launchpad.net/python-magnumclient/+bug/1501892 | 19:56 |
| openstack | Launchpad bug 1501892 in python-magnumclient "magnum pod-show does not work" [High,Triaged] | 19:56 |
| *** alex_klimov has joined #openstack-containers | 19:59 | |
| suro-patz | adrian_otto: https://bugs.launchpad.net/python-magnumclient/+bug/1501893 | 19:59 |
| openstack | Launchpad bug 1501893 in python-magnumclient "Magnum: service-list broken on latest" [Undecided,New] - Assigned to Surojit Pathak (suro-patz) | 19:59 |
| suro-patz | adrian_otto: working on a fix, it seemed one of a change for addressing review comments broke it. I will put a UT check too | 20:00 |
| openstackgerrit | Adrian Otto proposed openstack/magnum: Minor documentation correction https://review.openstack.org/230112 | 20:01 |
| adrian_otto | thanks suro-patz | 20:01 |
| vilobhmm | adrian_otto : esp for https://bugs.launchpad.net/python-magnumclient/+bug/1501892 I see these patches need to go in https://review.openstack.org/#/q/status:open+project:openstack/python-magnumclient+branch:master+topic:bp/objects-from-bay,n,z | 20:09 |
| openstack | Launchpad bug 1501892 in python-magnumclient "magnum pod-show does not work" [High,Triaged] - Assigned to Vilobh Meshram (vilobhmm) | 20:09 |
| adrian_otto | vilobhmm: thanks for jumping on that | 20:10 |
| vilobhmm | adrian_otto : np | 20:12 |
| *** gangil has joined #openstack-containers | 20:14 | |
| *** gangil1 has joined #openstack-containers | 20:19 | |
| *** gangil has quit IRC | 20:19 | |
| *** gangil1 has quit IRC | 20:23 | |
| *** devkulkarni has joined #openstack-containers | 20:30 | |
| *** apuimedo has quit IRC | 20:31 | |
| *** gangil has joined #openstack-containers | 20:32 | |
| *** gangil has quit IRC | 20:32 | |
| *** gangil has joined #openstack-containers | 20:32 | |
| apmelton | has anyone tried using the 'fedora-21-atomic-5' docker keeps crashing on me while trying to create/run containers | 20:32 |
| apmelton | I've tried with and without tls, so I don't think it's related to that | 20:33 |
| *** apuimedo has joined #openstack-containers | 20:33 | |
| devkulkarni | hello, I am not able to create a single node swarm bay on my 8 GB vm. I see these errors, in heat — http://paste.openstack.org/show/475117/ and in nova — http://paste.openstack.org/show/475120/ .. I was wondering if 8 GB is not enough for swarm bay (I was able to create a 1 node kubernetes bay on the same vm earlier. I deleted it before trying to create a swarm bay) | 20:37 |
| apmelton | devkulkarni: how old is your devstack? | 20:38 |
| *** muralia has quit IRC | 20:39 | |
| devkulkarni | apmelton: just cloned | 20:39 |
| apmelton | were you actually able to use your kubernetes bay, or did you just wait for it to go 'CREATE_COMPLETE'? | 20:39 |
| devkulkarni | I was kind of able to use the bay.. from here http://docs.openstack.org/developer/magnum/dev/dev-quickstart.html, I was able to ssh as minion into the redis-master.. I did not follow steps after that as I had not created the redis replication controllers. | 20:42 |
| hongbin | apmelton: I think everyone is using atomic-3 for swarm right now | 20:42 |
| apmelton | hongbin: yea... that's what I was using as well while I was doing TLS work | 20:43 |
| apmelton | so, I just spun up a k8s bay, docker doesn't seemt o work there either | 20:44 |
| *** banix has quit IRC | 20:53 | |
| *** rpothier has quit IRC | 20:55 | |
| *** gangil has quit IRC | 20:56 | |
| *** suro-patz has quit IRC | 21:03 | |
| *** suro-patz has joined #openstack-containers | 21:05 | |
| openstackgerrit | Dane LeBlanc proposed openstack/magnum: Baymodel create should allow no network_driver specified https://review.openstack.org/230147 | 21:05 |
| *** gangil has joined #openstack-containers | 21:09 | |
| *** gangil has quit IRC | 21:09 | |
| *** gangil has joined #openstack-containers | 21:09 | |
| openstackgerrit | Dane LeBlanc proposed openstack/magnum: Baymodel create should allow no network_driver specified https://review.openstack.org/230147 | 21:10 |
| *** vilobhmm has quit IRC | 21:10 | |
| *** vilobhmm has joined #openstack-containers | 21:11 | |
| adrian_otto | apmelton, I uploaded an atopic3 image,(image_id | fedora-21-atomic-3) | 21:11 |
| adrian_otto | that does not work either when creating a swarm bay | 21:11 |
| adrian_otto | that also results in a status CREATE_FAILED, with status_reason " status_reason | Resource CREATE failed: WaitConditionFailure: resources.master_wait_condition: Setup failed, docker.socket swarm-agent swarm-manager not start up correctly." | 21:12 |
| apmelton | I'm not sure what's going on there, atomic-3 is what I've been using for a while now | 21:12 |
| adrian_otto | so I'm beginning to doubt that it's an image corruption | 21:13 |
| adrian_otto | magnum bay-list | 21:13 |
| adrian_otto | bbl | 21:14 |
| devkulkarni | apmelton: in my glance, I have fedora-21-atomic-5 .. should I be instead uploading fedora-21-atomic-3 and use that? and in that case, where can I get atomic-3 image? | 21:21 |
| apmelton | devkulkarni: adrian_otto had issues with the atomic-3 image as well | 21:21 |
| apmelton | I'm honestly not sure what's going on yet | 21:21 |
| adrian_otto | it does not work wither devkulkarni | 21:22 |
| adrian_otto | wget https://fedorapeople.org/groups/magnum/fedora-21-atomic-3.qcow2 | 21:22 |
| adrian_otto | glance image-create --name fedora-21-atomic-3 --disk-format qcow2 --container-format bare --file fedora-21-atomic-3.qcow2 | 21:22 |
| adrian_otto | openstack --os-image-api-version 1 image set fedora-21-atomic-3 --property os_distro=fedora-atomic | 21:22 |
| adrian_otto | that's how you would load it | 21:22 |
| devkulkarni | apmelton: ok.. your reply to adrian_otto seemed to suggest that atomic-3 has been working for you.. | 21:22 |
| devkulkarni | thanks adrian_otto | 21:22 |
| apmelton | devkulkarni: it has been, but I'd downloaded it a bit under a month ago | 21:23 |
| devkulkarni | no harm in trying.. will try with atomic-3 | 21:23 |
| devkulkarni | apmelton: oh okay | 21:23 |
| *** muralia has joined #openstack-containers | 21:24 | |
| apmelton | so I'm even trying vanilla fedora-21 and docker doesn't even want to start | 21:24 |
| adrian_otto | need a swarm bay func test in the gate | 21:24 |
| openstackgerrit | Surojit Pathak proposed openstack/magnum: Fix TypeError at magnum API for service-list https://review.openstack.org/230153 | 21:24 |
| *** suro-patz has quit IRC | 21:25 | |
| *** muralia1 has joined #openstack-containers | 21:25 | |
| *** muralia has quit IRC | 21:25 | |
| openstackgerrit | Daneyon Hansen proposed openstack/magnum: Updates Swarm Heat Templates for Container Network Model https://review.openstack.org/224367 | 21:26 |
| apmelton | hey daneyon, do you have a devstack that can boot working swarm bays? | 21:27 |
| daneyon | apmelton kind of | 21:27 |
| daneyon | apmelton, actually i do | 21:27 |
| apmelton | daneyon: which fedora atomic image do you have? | 21:27 |
| daneyon | yes | 21:27 |
| daneyon | i have 3 and 6 | 21:28 |
| apmelton | there's a -6? | 21:28 |
| daneyon | 3 works for me with swarm and 6 for k8s | 21:28 |
| daneyon | ya | 21:28 |
| daneyon | that support k8s v1 | 21:28 |
| *** Marga_ has quit IRC | 21:28 | |
| apmelton | daneyon: can you spawn a k8s cluster with -6, hop on the minion and try 'sudo docker run --rm -ti cirros /bin/sh'? | 21:28 |
| daneyon | apmelton sure. give me a min | 21:29 |
| apmelton | much appreciated | 21:29 |
| *** Marga_ has joined #openstack-containers | 21:30 | |
| *** annegentle has quit IRC | 21:35 | |
| daneyon | apmelton k8s bay spinning up atm | 21:35 |
| apmelton | so the same issue I'm seeing, has been reported here: https://github.com/kubernetes/kubernetes/issues/13484 | 21:35 |
| apmelton | and he was running our exact docker verion: docker-io-1.7.1-3.git33de319.fc21.x86_64 | 21:35 |
| apmelton | I'm wondering if what we've got is a bad build | 21:36 |
| daneyon | apmelton are you looking to test the cirros image specifically or can use use kubectl to spin up the test pod/service in the examples dir? | 21:36 |
| apmelton | daneyon: I'm trying to just test the docker daemon directly | 21:36 |
| daneyon | ok | 21:37 |
| apmelton | k8s can some how spin up docker contaienrs, but running docker cli directly doesn't work | 21:37 |
| eghobo | apmelton: do you know how 6 was built? | 21:37 |
| apmelton | no idea | 21:37 |
| *** rlrossit has left #openstack-containers | 21:38 | |
| daneyon | apmelton my k8s bay is up. my docker version shows: docker-io-1.7.1-2.git33de319.fc21.x86_64 | 21:38 |
| daneyon | again, i used the atomic-3 image | 21:38 |
| apmelton | atomic-3 or atomic-6? | 21:39 |
| eghobo | apmelton: elli found some issue with docker socket but I don't remember details | 21:39 |
| daneyon | apmelton this is what i see: https://gist.github.com/danehans/d058554c62a5faa36f2e | 21:40 |
| daneyon | apmelton atomic-3 | 21:40 |
| eghobo | daneyon: could you double check? i believe 3 should have Docker 1.5 | 21:41 |
| apmelton | daneyon: I'm seeing 1.5.0 on atomic-3 and docker-io-1.7.1-2.git33de319.fc21.x86_64 on atomic-5 | 21:41 |
| apmelton | I think there's something broken in docker-io-1.7.1-2.git33de319.fc21.x86_64 | 21:42 |
| *** david-lyle has quit IRC | 21:43 | |
| Tango | apmelton: Do you think docker 1.6.2 would be more stable? | 21:44 |
| apmelton | Tango: f21 is actually already on 1.8.1 it appears | 21:45 |
| Tango | apmelton: When I asked the k8s guys, they recommended 1.6.2 or 1.7.2, but not 1.7.0 | 21:45 |
| *** kebray has quit IRC | 21:45 | |
| Tango | apmelton: I can build another image with a different docker version | 21:45 |
| Tango | apmelton: I just happened to pick 1.7.1 | 21:46 |
| Tango | apmelton: I mean the k8s folks recommended 1.6.2 or 1.7.1 | 21:46 |
| apmelton | I'd like to try to find an rpm for docker-io-1.7.1-2.git33de319.fc21.x86_64 just to be sure | 21:46 |
| *** Marga_ has quit IRC | 21:46 | |
| *** Marga_ has joined #openstack-containers | 21:47 | |
| Tango | apmelton: Let me find the link | 21:47 |
| Tango | apmelton: https://kojipkgs.fedoraproject.org/packages/docker-io/1.7.1/2.git33de319.fc21/src/docker-io-1.7.1-2.git33de319.fc21.src.rpm | 21:48 |
| apmelton | Tango: 404 | 21:49 |
| *** annegentle has joined #openstack-containers | 21:49 | |
| daneyon | eghobo https://gist.github.com/danehans/d058554c62a5faa36f2e | 21:49 |
| Tango | apmelton: The rpm are here: https://kojipkgs.fedoraproject.org/packages/docker-io/1.7.1/2.el6/x86_64/ | 21:49 |
| daneyon | apmelton I have to run. I'll be back online in a couple hours | 21:50 |
| daneyon | i can spin up a k8s pod | 21:50 |
| *** daneyon_ has joined #openstack-containers | 21:51 | |
| *** daneyon_ has quit IRC | 21:51 | |
| *** daneyon has quit IRC | 21:54 | |
| *** annegentle has quit IRC | 21:56 | |
| *** david-lyle has joined #openstack-containers | 21:56 | |
| *** Marga_ has quit IRC | 21:59 | |
| *** Marga_ has joined #openstack-containers | 21:59 | |
| *** Marga_ has quit IRC | 22:00 | |
| *** Marga_ has joined #openstack-containers | 22:00 | |
| *** harshs has quit IRC | 22:02 | |
| *** adrian_otto has quit IRC | 22:03 | |
| *** harshs has joined #openstack-containers | 22:03 | |
| *** dane_leblanc has quit IRC | 22:12 | |
| *** muralia has joined #openstack-containers | 22:13 | |
| *** muralia1 has quit IRC | 22:16 | |
| *** hogepodge has joined #openstack-containers | 22:22 | |
| *** achanda has joined #openstack-containers | 22:23 | |
| devkulkarni | apmelton: swarm bay creation with atomic-3 failed | 22:24 |
| *** suro-patz has joined #openstack-containers | 22:29 | |
| *** dimtruck is now known as zz_dimtruck | 22:38 | |
| *** sthillma_ has joined #openstack-containers | 22:40 | |
| *** kebray has joined #openstack-containers | 22:42 | |
| *** sthillma has quit IRC | 22:43 | |
| *** sthillma_ is now known as sthillma | 22:43 | |
| eghobo | devkulkarni: I see the same problem | 22:45 |
| *** rebase33 has quit IRC | 22:45 | |
| eghobo | | stack_status | CREATE_FAILED | | 22:46 |
| eghobo | | stack_status_reason | Resource CREATE failed: WaitConditionFailure: | | 22:46 |
| eghobo | | | resources.master_wait_condition: Setup failed, | | 22:46 |
| eghobo | | | docker.socket swarm-agent swarm-manager not start up | | 22:46 |
| eghobo | | | correctly. | 22:46 |
| devkulkarni | eghobo: thanks for confirming | 22:47 |
| eghobo | Tango: where I can find provision log at atomic? | 22:47 |
| *** kebray has quit IRC | 22:50 | |
| Tango | eghobo: Provision log? | 22:50 |
| Tango | eghobo: I guess you mean heat log? | 22:50 |
| eghobo | heat output at vm during cloud-init | 22:50 |
| openstackgerrit | Surojit Pathak proposed openstack/magnum: Fix TypeError at magnum API for service-list https://review.openstack.org/230153 | 22:51 |
| devkulkarni | eghobo: most likely the issue might be from nova | 22:51 |
| devkulkarni | yep | 22:51 |
| devkulkarni | nova-cond has 'NoValidHost: No valid host was found. There are not enough hosts available.' | 22:52 |
| Tango | eghobo: Normally the heat log is in /opt/stack/logs/h-eng.log | 22:52 |
| eghobo | devkulkarni: lucky you in my case I see al vms | 22:52 |
| *** alex_klimov has quit IRC | 22:53 | |
| Tango | eghobo: For cloud-init output, it's on the VM | 22:53 |
| eghobo | yes I remember Steve told me but I forgot | 22:54 |
| devkulkarni | nova-cond screen has this as well "internal error: process exited while connecting to monitor: Cannot set up guest memory 'pc.ram': Cannot allocate memory\n\n"]" | 22:54 |
| Tango | eghobo: I think /var/log/cloud-init-output.log | 22:55 |
| eghobo | Tango: it's empty | 22:57 |
| Tango | eghobo: Sounds like it didn't get to run cloud-init yet. Checking one of my VM, there is some output there. | 23:00 |
| Tango | eghobo: It shows starting the services and running a curl back to the wait_handle server | 23:01 |
| devkulkarni | Tango, eghobo: output in my vm is "015-10-01 15:16:56,603 - util.py[WARNING]: Failed to run debconf-set-selections for grub-dpkg" | 23:01 |
| *** suro-patz has quit IRC | 23:02 | |
| *** alejandrito has quit IRC | 23:03 | |
| *** suro-patz has joined #openstack-containers | 23:03 | |
| *** harshs has quit IRC | 23:04 | |
| *** harshs has joined #openstack-containers | 23:08 | |
| *** hongbin has quit IRC | 23:10 | |
| *** adrian_otto has joined #openstack-containers | 23:16 | |
| *** sthillma_ has joined #openstack-containers | 23:16 | |
| *** sthillma has quit IRC | 23:19 | |
| *** sthillma_ is now known as sthillma | 23:19 | |
| openstackgerrit | Surojit Pathak proposed openstack/magnum: Fix TypeError at magnum API for service-list https://review.openstack.org/230153 | 23:33 |
| *** jwcroppe has quit IRC | 23:36 | |
| *** jwcroppe has joined #openstack-containers | 23:37 | |
| *** jwcroppe has quit IRC | 23:41 | |
| *** achanda has quit IRC | 23:47 | |
| *** agireud has quit IRC | 23:47 | |
| *** achanda has joined #openstack-containers | 23:54 | |
| *** dims has joined #openstack-containers | 23:56 | |
| *** dims has quit IRC | 23:58 | |
| *** dims_ has quit IRC | 23:58 | |
| *** dims has joined #openstack-containers | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!