*** suro-patz has joined #openstack-containers | 00:04 | |
*** vikasc has joined #openstack-containers | 00:14 | |
*** vikasc has quit IRC | 00:14 | |
*** vikasc has joined #openstack-containers | 00:32 | |
*** hongbin has joined #openstack-containers | 00:36 | |
*** vikasc has quit IRC | 00:37 | |
openstackgerrit | Merged openstack/magnum: Fix incorrect usage of CertManager in k8s_api https://review.openstack.org/236094 | 00:38 |
---|---|---|
*** Drago has quit IRC | 00:42 | |
*** Kennan has quit IRC | 00:46 | |
*** Kennan has joined #openstack-containers | 00:46 | |
*** vimal has joined #openstack-containers | 00:47 | |
*** dims_ has joined #openstack-containers | 00:53 | |
*** vikasc has joined #openstack-containers | 00:54 | |
*** dimsum__ has quit IRC | 00:56 | |
*** vikasc has quit IRC | 00:57 | |
*** eliqiao has joined #openstack-containers | 01:02 | |
*** dims_ has quit IRC | 01:03 | |
*** dimsum__ has joined #openstack-containers | 01:05 | |
*** dimsum__ has quit IRC | 01:08 | |
*** dimsum__ has joined #openstack-containers | 01:08 | |
*** tbh has joined #openstack-containers | 01:12 | |
*** eliqiao1 has joined #openstack-containers | 01:13 | |
*** vikasc has joined #openstack-containers | 01:15 | |
*** eliqiao has quit IRC | 01:15 | |
*** zhenguo has joined #openstack-containers | 01:18 | |
*** EricGonczer_ has joined #openstack-containers | 01:18 | |
*** vikasc has quit IRC | 01:28 | |
*** EricGonczer_ has quit IRC | 01:34 | |
*** achanda has quit IRC | 01:35 | |
*** julim has quit IRC | 01:39 | |
*** tbh has quit IRC | 01:52 | |
*** adrian_otto has joined #openstack-containers | 02:00 | |
*** suro-patz has quit IRC | 02:02 | |
*** eliqiao1 has quit IRC | 02:06 | |
*** achanda has joined #openstack-containers | 02:19 | |
*** eliqiao has joined #openstack-containers | 02:20 | |
*** dimsum__ has quit IRC | 02:24 | |
*** dimsum__ has joined #openstack-containers | 02:24 | |
*** hongbin has quit IRC | 02:29 | |
*** eghobo_ has quit IRC | 02:32 | |
*** madhuri has joined #openstack-containers | 02:40 | |
*** dave-mccowan has quit IRC | 02:42 | |
*** dimsum__ has quit IRC | 02:51 | |
*** adrian_otto has quit IRC | 02:51 | |
*** dimsum__ has joined #openstack-containers | 02:51 | |
*** adrian_otto has joined #openstack-containers | 02:54 | |
*** HenryG has joined #openstack-containers | 02:55 | |
*** VikasC has joined #openstack-containers | 02:55 | |
*** suro-patz has joined #openstack-containers | 03:00 | |
*** eghobo has joined #openstack-containers | 03:04 | |
*** adrian_otto has quit IRC | 03:05 | |
*** adrian_otto has joined #openstack-containers | 03:08 | |
*** suro-patz has quit IRC | 03:12 | |
*** VikasC has quit IRC | 03:20 | |
*** eghobo has quit IRC | 03:21 | |
*** adrian_otto has quit IRC | 03:26 | |
*** dimsum__ has quit IRC | 03:30 | |
*** dimsum__ has joined #openstack-containers | 03:31 | |
*** dimsum__ has quit IRC | 03:31 | |
*** dimsum__ has joined #openstack-containers | 03:31 | |
*** adrian_otto has joined #openstack-containers | 03:32 | |
*** gyliu513 has joined #openstack-containers | 03:35 | |
*** dimsum__ has quit IRC | 03:37 | |
*** dimsum__ has joined #openstack-containers | 03:38 | |
*** vilobhmm11 has joined #openstack-containers | 03:40 | |
*** eghobo has joined #openstack-containers | 03:48 | |
*** dimsum__ has quit IRC | 03:57 | |
*** gyliu513 has left #openstack-containers | 03:57 | |
*** tbh has joined #openstack-containers | 04:00 | |
*** adrian_otto has quit IRC | 04:02 | |
*** daneyon has joined #openstack-containers | 04:05 | |
*** daneyon_ has joined #openstack-containers | 04:06 | |
*** daneyon has quit IRC | 04:10 | |
*** daneyon_ has quit IRC | 04:14 | |
*** jwcroppe_ has quit IRC | 04:20 | |
*** unicell1 has joined #openstack-containers | 04:25 | |
*** unicell has quit IRC | 04:26 | |
*** jwcroppe has joined #openstack-containers | 04:26 | |
*** vikasc has joined #openstack-containers | 04:32 | |
*** chandankumar has joined #openstack-containers | 04:38 | |
*** mathspanda_ has joined #openstack-containers | 04:55 | |
*** TianYuan has joined #openstack-containers | 05:05 | |
*** TianYuan has joined #openstack-containers | 05:06 | |
*** harshs has quit IRC | 05:06 | |
*** chandankumar has quit IRC | 05:06 | |
*** chandankumar has joined #openstack-containers | 05:13 | |
*** vijaykc4 has joined #openstack-containers | 05:15 | |
*** vijaykc4 has quit IRC | 05:15 | |
*** vijaykc4 has joined #openstack-containers | 05:16 | |
*** harshs has joined #openstack-containers | 05:25 | |
*** Drago1 has joined #openstack-containers | 05:29 | |
*** Drago1 has joined #openstack-containers | 05:29 | |
*** vijaykc4 has quit IRC | 05:31 | |
*** eggshell has quit IRC | 05:33 | |
*** vijaykc4 has joined #openstack-containers | 05:33 | |
*** Tango|2 has joined #openstack-containers | 05:36 | |
*** eghobo has quit IRC | 05:41 | |
*** ljianbj has joined #openstack-containers | 05:46 | |
*** gangil has joined #openstack-containers | 05:54 | |
*** gangil has quit IRC | 05:54 | |
*** gangil has joined #openstack-containers | 05:54 | |
*** dimsum__ has joined #openstack-containers | 05:54 | |
*** dimsum__ has quit IRC | 05:59 | |
*** chandankumar has quit IRC | 06:00 | |
*** shu has joined #openstack-containers | 06:06 | |
*** manikanta has joined #openstack-containers | 06:15 | |
*** manikanta_ has joined #openstack-containers | 06:15 | |
*** harshs has quit IRC | 06:22 | |
*** vijaykc4 has quit IRC | 06:25 | |
*** wanghua has joined #openstack-containers | 06:29 | |
*** Drago1 has quit IRC | 06:29 | |
*** sdake has joined #openstack-containers | 06:32 | |
*** vijaykc4 has joined #openstack-containers | 06:38 | |
*** Tango|2 has quit IRC | 06:41 | |
*** achanda has quit IRC | 06:44 | |
*** unicell has joined #openstack-containers | 06:55 | |
*** unicell1 has quit IRC | 06:56 | |
*** dimsum__ has joined #openstack-containers | 06:56 | |
*** dimsum__ has quit IRC | 07:00 | |
openstackgerrit | Eli Qiao proposed openstack/magnum: Add proxy for k8s https://review.openstack.org/236823 | 07:04 |
*** vijaykc4 has quit IRC | 07:07 | |
*** suro-patz has joined #openstack-containers | 07:21 | |
*** suro-patz has quit IRC | 07:42 | |
*** lyanchih has joined #openstack-containers | 07:43 | |
*** vijaykc4 has joined #openstack-containers | 07:44 | |
*** vijaykc4 has quit IRC | 07:48 | |
*** inc0 has joined #openstack-containers | 07:52 | |
*** sdake has quit IRC | 07:56 | |
*** vijaykc4 has joined #openstack-containers | 08:03 | |
*** vijaykc4 has quit IRC | 08:06 | |
*** mathspanda_ has quit IRC | 08:06 | |
*** deepthi has joined #openstack-containers | 08:11 | |
*** mbound has joined #openstack-containers | 08:13 | |
*** xek_ is now known as xek | 08:16 | |
openstackgerrit | Eli Qiao proposed openstack/magnum: Add proxy for k8s https://review.openstack.org/236823 | 08:17 |
*** vilobhmm11 has quit IRC | 08:29 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/magnum: Updated from global requirements https://review.openstack.org/230566 | 08:41 |
*** mathspanda has joined #openstack-containers | 08:41 | |
*** lyanchih has quit IRC | 08:41 | |
eliqiao | hello, can you get bay.magnum_cert_ref from Rest api? | 08:44 |
eliqiao | hi madhuri: | 08:45 |
madhuri | hi eliqiao | 08:45 |
eliqiao | madhuri: do you know if we can get bay.magnum_cert_ref from Rest api? | 08:45 |
*** lyanchih has joined #openstack-containers | 08:45 | |
eliqiao | I would like to build a connection from api_client by this: | 08:46 |
eliqiao | client = api_client.ApiClient(bay.api_address, | 08:46 |
eliqiao | key_file=self.key_file.name, | 08:46 |
eliqiao | cert_file=self.cert_file.name, | 08:46 |
eliqiao | ca_certs=self.ca_file.name) | 08:46 |
eliqiao | but I have no idea how to get key_file/cert_file/ca_certs | 08:46 |
*** mbound has quit IRC | 08:47 | |
madhuri | Did you check get_bay* ? | 08:47 |
eliqiao | madhuri: sorry , pardon? | 08:47 |
madhuri | eliqiao: https://github.com/openstack/magnum/blob/master/magnum/conductor/k8s_api.py#L64 | 08:48 |
eliqiao | it seems I need to follow this guild https://github.com/openstack/magnum/blob/master/doc/source/dev/dev-tls.rst | 08:48 |
madhuri | This method fetches cert files from bay | 08:48 |
eliqiao | yeah, but I can not get bay object from REST API. | 08:49 |
eliqiao | if you do a bay-show {"status": "CREATE_COMPLETE", "uuid": "dc62886b-7e5d-497d-b18d-4e71e4087826", "links": [{"href": "http://10.238.157.49:9511/v1/bays/dc62886b-7e5d-497d-b18d-4e71e4087826", "rel": "self"}, {"href": "http://10.238.157.49:9511/bays/dc62886b-7e5d-497d-b18d-4e71e4087826", "rel": "bookmark"}], "updated_at": "2015-10-19T06:48:14+00:00", "created_at": "2015-10-19T06:45:45+00:00", "api_address": "https://172.24.4.15:6443", "discover | 08:49 |
madhuri | Ok I get it | 08:49 |
eliqiao | REST API won't return t | 08:49 |
madhuri | Ok let me check | 08:49 |
madhuri | eliqiao: As of now, we can't get cert_ref from Rest API | 08:54 |
madhuri | Can you please tell me what is your use case? | 08:54 |
eliqiao | madhuri: no, we can't get cert_ref | 08:55 |
eliqiao | madhuri: I just checked the python-magnumclient, we can use self.certificates to get ca first | 08:55 |
madhuri | Yes agree eliqiao | 08:55 |
eliqiao | then follow this guide https://github.com/openstack/magnum/blob/master/doc/source/dev/dev-tls.rst to generate ca.crt client.key client.crt | 08:56 |
eliqiao | I kinds of understand all process, but seems we need much coding | 08:56 |
eliqiao | my case is to adding functional case for tls_enabled k8s bay, check this https://review.openstack.org/#/c/232421 | 08:57 |
eliqiao | madhuri: thank you, I know what should I do now. | 08:57 |
madhuri | Both way is different | 08:57 |
madhuri | For REst API, you can use ca-show and ca-sign | 08:58 |
madhuri | And in code you can directly use bay.cert_ref | 08:58 |
*** dimsum__ has joined #openstack-containers | 08:59 | |
eliqiao | madhuri: yeah, get you. in my case, I would like to do a fake api call, so I need to call ca-sign to get those ca files. | 09:00 |
*** TianYuan has quit IRC | 09:02 | |
*** dimsum__ has quit IRC | 09:04 | |
*** mbound has joined #openstack-containers | 09:05 | |
*** mathspanda has quit IRC | 09:07 | |
*** openstack has joined #openstack-containers | 09:19 | |
Kennan | hi madhrui: | 09:21 |
Kennan | madhuri: i always get TLS handshake timeout | 09:21 |
Kennan | for native client response | 09:21 |
madhuri | Kennan: Which COE are you trying? | 09:22 |
Kennan | madhuri: | 09:26 |
Kennan | I used k8s | 09:26 |
*** DrDocker_ has quit IRC | 09:28 | |
madhuri | Kennan: "kubernetes.invalid" should work | 09:28 |
madhuri | Can you paste the log? | 09:28 |
Kennan | which log madhuri: ? | 09:29 |
madhuri | The error you're getting while running the kubectl | 09:29 |
madhuri | yuanying: Hi there? | 09:29 |
Kennan | madhuri: couldn't read version from server: Get https://172.24.4.4:6443/api: net/http: TLS handshake timeout | 09:30 |
yuanying | It's better to use `curl -v https://k8s-master:6443/version --key ./client.key --cert ./client.crt --cacert ./ca.crt` | 09:30 |
yuanying | to check connection | 09:30 |
Kennan | still get | 09:32 |
Kennan | curl: (35) Unknown SSL protocol error in connection to 172.24.4.4:6443 | 09:32 |
madhuri | Is kube-apiserver running? | 09:34 |
Kennan | yes madhuri: it is running | 09:35 |
openstackgerrit | Shu Muto proposed openstack/magnum-ui: Add create action to bay panel https://review.openstack.org/235870 | 09:36 |
madhuri | Kennan: Can you paste your command? | 09:37 |
Kennan | curl -v https://172.24.4.4:6443/version --key ./client.key --cert ./client.crt --cacert ./ca.crt | 09:37 |
madhuri | I guess you're passing the IP of kube-apiserver | 09:37 |
madhuri | You should give the common name instead of giving IP in command | 09:38 |
madhuri | curl -v https://kubernetes.invalid:6443/version --key ./client.key --cert ./client.crt --cacert ./ca.crt | 09:38 |
madhuri | Try this | 09:38 |
yuanying | IP address is working now | 09:38 |
Kennan | but I use ip, can not | 09:38 |
Kennan | for host | 09:39 |
Kennan | curl: (6) Could not resolve host: kubernetes.invalid | 09:39 |
Kennan | it seems this host can be recolved, only you required to add it in /etc/hosts | 09:39 |
madhuri | Yes it should be | 09:39 |
madhuri | But yuanying said IP should also work | 09:39 |
Kennan | but I think it is same | 09:39 |
yuanying | I'll check at master | 09:40 |
*** DrDocker_ has joined #openstack-containers | 09:41 | |
*** i316653 has joined #openstack-containers | 09:42 | |
madhuri | Kennan: I will also check | 09:42 |
yuanying | Kennan: How about insecure bay which is tls_disabled ? | 09:43 |
i316653 | Devstack Magnum API cannot start because of oslo errors, but they should be installed. Adding them to lib/oslo worked for oslo.config but not for oslo.service. Any ideas on anything I'm missing? | 09:43 |
Kennan | yuanying: I did not test tls_disable case | 09:43 |
Kennan | i1316653 did you try latest code ? or old code | 09:44 |
i316653 | I'm on stable/kilo | 09:46 |
i316653 | Kennan: Also to note, I'm using SLES12 | 09:47 |
Kennan | i1316653: suggest use stable/liberty | 09:48 |
Kennan | and one note | 09:48 |
Kennan | when you clone devstack | 09:48 |
Kennan | it defaults to master | 09:48 |
Kennan | you need swtich to stable/liberty | 09:49 |
Kennan | branch | 09:49 |
yuanying | Kennan: my environt is worked. http://paste.openstack.org/show/476653/ | 09:50 |
yuanying | Kennan: How about this command ? `openssl s_client -connect 192.168.19.95:6443` | 09:51 |
Kennan | yuanying: | 09:52 |
Kennan | did I need to pass other parameters>? | 09:53 |
Kennan | I found it following message | 09:53 |
*** alex_klimov has joined #openstack-containers | 09:53 | |
Kennan | yuanying: | 09:54 |
Kennan | http://paste.openstack.org/show/476654/ | 09:54 |
*** slotty has joined #openstack-containers | 09:55 | |
*** DrDocker_ has quit IRC | 09:56 | |
yuanying | Is this a openssl s_client log? | 09:56 |
yuanying | Kennan: | 09:56 |
Kennan | yuanying: check this full output for : openssl s_client -connect 172.24.4.4:6443 | 09:58 |
Kennan | http://paste.openstack.org/show/476656/ | 09:58 |
yuanying | Kennan: my log is this. http://paste.openstack.org/show/476657/ | 09:58 |
yuanying | Kennan: hmm, it seems working | 09:59 |
yuanying | Kennan: Please show me a full log of `curl -v https://192.168.19.95:6443 --key ./client.key --cert ./client.crt --cacert ./ca.crt` | 10:01 |
Kennan | yuanying: | 10:02 |
Kennan | http://paste.openstack.org/show/476661/ | 10:02 |
Kennan | yuanying: I followed guide steps in dev-tls.rst part | 10:02 |
Kennan | I created client key csr, crt etc | 10:03 |
Kennan | but it seems server not think it is right | 10:03 |
Kennan | https://github.com/openstack/magnum/blob/master/doc/source/dev/dev-tls.rst | 10:04 |
yuanying | Can you check `curl -ssl3 -v https://192.168.19.95:6443 --key ./client.key --cert ./client.crt --cacert ./ca.crt` ? | 10:05 |
Kennan | error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number | 10:06 |
Kennan | is it right ? -ssl3 | 10:06 |
yuanying | and also `openssl x509 -text -in ca.crt` | 10:07 |
yuanying | Kennan: sorry, --sslv3 | 10:07 |
*** zhenguo has quit IRC | 10:07 | |
*** dimsum__ has joined #openstack-containers | 10:07 | |
Kennan | yuanying: --sslv3 | 10:08 |
Kennan | ) error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number | 10:08 |
Kennan | still error | 10:08 |
yuanying | hmm | 10:08 |
yuanying | what about --tlsv1 | 10:09 |
yuanying | Kennan: And also, Login to master node and check server.crt | 10:11 |
Kennan | yuanying: I can get server.crt | 10:11 |
Kennan | but what should I check ? | 10:11 |
yuanying | Kennan: server.crt contains subject alt name | 10:11 |
Kennan | yuanying: | 10:12 |
Kennan | subjectAltName = IP:172.24.4.5,IP:172.24.4.4,IP:10.0.0.4,IP:127.0.0.1 | 10:12 |
Kennan | yuanying: only server.conf contains it | 10:12 |
Kennan | seems server.crt only contain charachter | 10:12 |
Kennan | it is key file | 10:12 |
yuanying | openssl x509 -text -in server.crt | 10:13 |
Kennan | yuanying: run it on master ? or run it on magnum node ? | 10:13 |
yuanying | hmm, subjectAltName contains your IP... | 10:13 |
yuanying | master | 10:13 |
yuanying | Kennan: What about this command at your master ? `curl -v https://192.168.19.95:6443 --key ./server.key --cert ./server.crt --cacert ./ca.crt` | 10:15 |
Kennan | yuanying: | 10:15 |
Kennan | here is openssl run on master node | 10:15 |
Kennan | http://paste.openstack.org/show/476663/ | 10:15 |
yuanying | you can use 127.0.0.1:6443 too at master `curl -v https://127.0.0.1:6443 --key ./server.key --cert ./server.crt --cacert ./ca.crt` | 10:16 |
yuanying | Kennan: server.crt seems ok... | 10:16 |
yuanying | Kennan: Can you connect to api from master node? | 10:17 |
Kennan | yuanying: I run | 10:21 |
Kennan | curl -v https://127.0.0.1:6443/version --key /srv/kubernetes/server.key --cert /srv/kubernetes/server.crt --cacert /srv/kubernetes/ca.crt | 10:22 |
Kennan | on master node | 10:22 |
Kennan | it seems hang it there | 10:22 |
yuanying | Kennan: What about 172.24.4.4 or 10.0.0.4 or 172.24.4.5 ? | 10:22 |
Kennan | for 172.24.4.4 | 10:22 |
yuanying | Kennan: It seems network problem, but I'm not sure what's wrong | 10:23 |
Kennan | i got NSS error -5938 (PR_END_OF_FILE_ERROR) | 10:23 |
Kennan | curl: (35) Encountered end of file | 10:23 |
yuanying | I guess 172.24.4.4 is from lbaas | 10:23 |
Kennan | yes | 10:23 |
yuanying | Do you think, is this a magnum issue? | 10:24 |
Kennan | I just followed guide, I not sure if it is magnum issue, but most probly it is that | 10:25 |
Kennan | yuanying: do you use barbican in your env ? or local | 10:25 |
Kennan | the devstack default is barbican | 10:26 |
yuanying | Kennan: Yes, I'm using barbican | 10:26 |
Kennan | yuanying: if https really worked, could you help to enable it on jenkins ? | 10:26 |
yuanying | Kennan: yes, of course | 10:27 |
Kennan | I think it need more test on jenkins, right now, it seems not work in my env. | 10:27 |
*** weihan has joined #openstack-containers | 10:39 | |
*** lyanchih has quit IRC | 10:41 | |
*** vimal has quit IRC | 10:44 | |
*** dave-mccowan has joined #openstack-containers | 10:51 | |
*** dimsum__ is now known as dims | 10:52 | |
*** eghobo has joined #openstack-containers | 11:04 | |
*** madhuri has quit IRC | 11:04 | |
*** eghobo_ has joined #openstack-containers | 11:06 | |
*** eghobo has quit IRC | 11:10 | |
*** wallnerryan has quit IRC | 11:36 | |
*** EricGonczer_ has joined #openstack-containers | 11:57 | |
*** EricGonc_ has joined #openstack-containers | 11:58 | |
*** EricGonczer_ has quit IRC | 12:02 | |
*** eghobo_ has quit IRC | 12:02 | |
*** dave-mccowan has quit IRC | 12:04 | |
*** inc0 has quit IRC | 12:07 | |
*** vikasc has quit IRC | 12:13 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/magnum: Updated from global requirements https://review.openstack.org/230566 | 12:19 |
*** weihan_ has joined #openstack-containers | 12:25 | |
*** weihan_ has quit IRC | 12:26 | |
*** weihan has quit IRC | 12:26 | |
*** weihan has joined #openstack-containers | 12:26 | |
*** EricGonc_ has quit IRC | 12:26 | |
*** weihan has quit IRC | 12:27 | |
*** weihan has joined #openstack-containers | 12:27 | |
*** dims has quit IRC | 12:27 | |
*** dims has joined #openstack-containers | 12:28 | |
*** weihan has quit IRC | 12:30 | |
*** weihan has joined #openstack-containers | 12:31 | |
*** inc0 has joined #openstack-containers | 12:34 | |
*** weihan has quit IRC | 12:35 | |
*** weihan has joined #openstack-containers | 12:37 | |
*** weihan has quit IRC | 12:37 | |
*** weihan has joined #openstack-containers | 12:38 | |
*** achanda has joined #openstack-containers | 12:39 | |
*** achanda has quit IRC | 12:41 | |
*** Tango|2 has joined #openstack-containers | 12:45 | |
*** weihan has quit IRC | 12:46 | |
*** weihan has joined #openstack-containers | 12:47 | |
*** tbh has quit IRC | 12:54 | |
*** Tango|2 has quit IRC | 12:56 | |
openstackgerrit | Rob Cresswell proposed openstack/magnum-ui: Add API for container create, delete, list, show https://review.openstack.org/235327 | 12:56 |
*** manikanta_ has quit IRC | 12:56 | |
*** Tango|2 has joined #openstack-containers | 12:56 | |
*** manikanta has quit IRC | 12:56 | |
*** Shijia has joined #openstack-containers | 12:57 | |
*** inc0 has quit IRC | 13:11 | |
*** rpothier has joined #openstack-containers | 13:25 | |
*** julim has joined #openstack-containers | 13:27 | |
*** masterbound has joined #openstack-containers | 13:28 | |
*** mbound has quit IRC | 13:29 | |
*** Shijia has quit IRC | 13:34 | |
*** Shijia has joined #openstack-containers | 13:35 | |
*** dane_leblanc has joined #openstack-containers | 13:42 | |
*** Shijia has quit IRC | 13:43 | |
*** exploreshaifali has joined #openstack-containers | 13:47 | |
*** zz_dimtruck is now known as dimtruck | 13:52 | |
*** weihan has quit IRC | 13:55 | |
*** manjeets has joined #openstack-containers | 13:59 | |
*** muralia has joined #openstack-containers | 14:08 | |
*** muralia1 has joined #openstack-containers | 14:09 | |
*** muralia has quit IRC | 14:12 | |
*** adrian_otto has joined #openstack-containers | 14:19 | |
*** adrian_otto has quit IRC | 14:20 | |
*** sdake has joined #openstack-containers | 14:24 | |
*** achanda has joined #openstack-containers | 14:32 | |
*** weihan has joined #openstack-containers | 14:37 | |
*** weihan has quit IRC | 14:40 | |
*** achanda has quit IRC | 14:40 | |
*** VikasC has joined #openstack-containers | 14:40 | |
*** Kennan2 has joined #openstack-containers | 14:41 | |
*** weihan has joined #openstack-containers | 14:41 | |
*** Kennan has quit IRC | 14:41 | |
*** _navneet has joined #openstack-containers | 14:43 | |
*** Shijia has joined #openstack-containers | 14:43 | |
*** lyanchih has joined #openstack-containers | 14:45 | |
*** EricGonczer_ has joined #openstack-containers | 14:45 | |
*** Shijia has quit IRC | 14:48 | |
*** _navneet_ has joined #openstack-containers | 14:54 | |
*** hongbin has joined #openstack-containers | 14:55 | |
*** _navneet has quit IRC | 14:58 | |
*** masterbound has quit IRC | 15:00 | |
*** mbound has joined #openstack-containers | 15:00 | |
*** VikasC_ has joined #openstack-containers | 15:03 | |
*** deepthi has quit IRC | 15:04 | |
*** suro-patz has joined #openstack-containers | 15:04 | |
*** vikasc__ has joined #openstack-containers | 15:05 | |
*** VikasC has quit IRC | 15:07 | |
*** suro-patz has quit IRC | 15:08 | |
*** daneyon has joined #openstack-containers | 15:10 | |
*** annegentle has joined #openstack-containers | 15:10 | |
*** daneyon_ has joined #openstack-containers | 15:11 | |
*** daneyon has quit IRC | 15:14 | |
*** alex_klimov has quit IRC | 15:15 | |
*** lyanchih has quit IRC | 15:19 | |
*** tbh_ has joined #openstack-containers | 15:26 | |
*** Drago has joined #openstack-containers | 15:27 | |
*** EricGonczer_ has quit IRC | 15:28 | |
*** gangil has quit IRC | 15:29 | |
*** mfalatic has joined #openstack-containers | 15:29 | |
*** daneyon_ has quit IRC | 15:32 | |
*** EricGonczer_ has joined #openstack-containers | 15:32 | |
*** daneyon has joined #openstack-containers | 15:34 | |
*** adrian_otto has joined #openstack-containers | 15:36 | |
*** eggshell has joined #openstack-containers | 15:39 | |
*** diga has joined #openstack-containers | 15:41 | |
*** daneyon has quit IRC | 15:41 | |
*** tbh_ has quit IRC | 15:43 | |
openstackgerrit | Zachary Sais proposed openstack/magnum: Cleanup template formatting https://review.openstack.org/236291 | 15:45 |
*** tbh_ has joined #openstack-containers | 15:47 | |
*** Shijia has joined #openstack-containers | 15:48 | |
*** BertrandN has quit IRC | 15:49 | |
*** sdake has quit IRC | 15:53 | |
*** sdake has joined #openstack-containers | 15:53 | |
*** Shijia has quit IRC | 15:54 | |
*** i316653 has quit IRC | 15:55 | |
*** mbound has quit IRC | 16:01 | |
*** slotty has quit IRC | 16:01 | |
*** sdake_ has joined #openstack-containers | 16:02 | |
*** daneyon has joined #openstack-containers | 16:02 | |
*** Tango has joined #openstack-containers | 16:03 | |
*** sdake has quit IRC | 16:04 | |
*** Drago has quit IRC | 16:04 | |
*** Tango|2 has quit IRC | 16:06 | |
*** vikasc__ has quit IRC | 16:08 | |
*** tbh_ has quit IRC | 16:10 | |
openstackgerrit | Rob Cresswell proposed openstack/magnum-ui: Add API for container create, delete, list, show https://review.openstack.org/235327 | 16:11 |
openstackgerrit | Rob Cresswell proposed openstack/magnum-ui: Add API for container create, delete, list, show https://review.openstack.org/235327 | 16:12 |
*** tbh_ has joined #openstack-containers | 16:12 | |
*** mbound has joined #openstack-containers | 16:14 | |
*** unicell has quit IRC | 16:14 | |
*** mbound has quit IRC | 16:19 | |
*** sdake_ is now known as sdake | 16:25 | |
*** eggshell has quit IRC | 16:27 | |
*** rpothier has quit IRC | 16:29 | |
*** wenchma has quit IRC | 16:29 | |
*** Babyface has quit IRC | 16:29 | |
*** mikal has quit IRC | 16:29 | |
*** chmouel has quit IRC | 16:29 | |
*** ioni has quit IRC | 16:29 | |
*** Babyface has joined #openstack-containers | 16:30 | |
*** mikal has joined #openstack-containers | 16:30 | |
*** gangil has joined #openstack-containers | 16:30 | |
*** gangil has quit IRC | 16:30 | |
*** gangil has joined #openstack-containers | 16:30 | |
*** ioni has joined #openstack-containers | 16:31 | |
*** ioni is now known as Guest87576 | 16:31 | |
*** weihan has quit IRC | 16:33 | |
*** chmouel has joined #openstack-containers | 16:34 | |
*** EricGonczer_ has quit IRC | 16:34 | |
*** wenchma has joined #openstack-containers | 16:41 | |
*** exploreshaifali has quit IRC | 16:45 | |
*** EricGonczer_ has joined #openstack-containers | 16:49 | |
*** eggshell has joined #openstack-containers | 16:49 | |
*** sdake has quit IRC | 16:51 | |
*** dimtruck is now known as zz_dimtruck | 16:52 | |
*** unicell has joined #openstack-containers | 16:54 | |
*** Shijia has joined #openstack-containers | 16:54 | |
*** Shijia has quit IRC | 16:59 | |
*** openstackgerrit has quit IRC | 17:01 | |
*** Tango has quit IRC | 17:01 | |
*** openstackgerrit has joined #openstack-containers | 17:01 | |
*** Drago has joined #openstack-containers | 17:02 | |
*** Drago has quit IRC | 17:02 | |
*** Drago has joined #openstack-containers | 17:02 | |
*** suro-patz has joined #openstack-containers | 17:03 | |
*** jlvillal has joined #openstack-containers | 17:05 | |
*** zz_dimtruck is now known as dimtruck | 17:06 | |
*** klindgren__ is now known as klindgren | 17:17 | |
*** vilobhmm11 has joined #openstack-containers | 17:20 | |
*** adrian_otto has quit IRC | 17:22 | |
*** jwcroppe_ has joined #openstack-containers | 17:23 | |
*** jwcroppe has quit IRC | 17:24 | |
*** adrian_otto has joined #openstack-containers | 17:25 | |
*** achanda has joined #openstack-containers | 17:29 | |
*** sthillma has joined #openstack-containers | 17:29 | |
*** achanda has quit IRC | 17:29 | |
*** achanda has joined #openstack-containers | 17:30 | |
*** subscope has joined #openstack-containers | 17:31 | |
*** jwcroppe has joined #openstack-containers | 17:41 | |
*** jwcroppe_ has quit IRC | 17:44 | |
*** tbh_ has quit IRC | 17:46 | |
*** sdake has joined #openstack-containers | 17:46 | |
*** manjeets has quit IRC | 17:49 | |
*** diga has quit IRC | 17:50 | |
*** kebray has joined #openstack-containers | 17:51 | |
*** Tango has joined #openstack-containers | 17:53 | |
*** sdake has quit IRC | 18:02 | |
*** annegentle has quit IRC | 18:08 | |
*** annegentle has joined #openstack-containers | 18:09 | |
*** sdake has joined #openstack-containers | 18:11 | |
*** gangil1 has joined #openstack-containers | 18:13 | |
*** gangil has quit IRC | 18:14 | |
*** sdake_ has joined #openstack-containers | 18:15 | |
*** sdake has quit IRC | 18:16 | |
*** kebray has quit IRC | 18:16 | |
*** manjeets has joined #openstack-containers | 18:19 | |
*** devlaps has joined #openstack-containers | 18:22 | |
*** hblixt has joined #openstack-containers | 18:23 | |
*** sdake_ is now known as sdake | 18:25 | |
*** jlvillal_ has joined #openstack-containers | 18:40 | |
*** eghobo has joined #openstack-containers | 18:48 | |
*** julim has quit IRC | 18:53 | |
*** adrian_otto has quit IRC | 18:53 | |
*** julim has joined #openstack-containers | 18:56 | |
*** sdake has quit IRC | 19:00 | |
*** adrian_otto has joined #openstack-containers | 19:01 | |
*** gangil1 has quit IRC | 19:05 | |
Tango | daneyon: ping | 19:09 |
*** EricGonczer_ has quit IRC | 19:09 | |
*** EricGonczer_ has joined #openstack-containers | 19:10 | |
*** Marga_ has quit IRC | 19:18 | |
daneyon | Tango here | 19:27 |
*** dave-mccowan has joined #openstack-containers | 19:33 | |
*** dane_leblanc has quit IRC | 19:35 | |
Tango | Hi Daneyon, I remember you mentioned you tried different networking options in Flannel | 19:35 |
Tango | daneyon: Wonder if you have tried configuring it to use VXLAN instead of the default UDP | 19:35 |
*** adrian_otto has quit IRC | 19:42 | |
*** dane_leblanc has joined #openstack-containers | 19:44 | |
*** muralia has joined #openstack-containers | 19:47 | |
*** muralia1 has quit IRC | 19:48 | |
*** exploreshaifali has joined #openstack-containers | 19:50 | |
*** subscope has quit IRC | 19:53 | |
vilobhmm11 | honginb : ping | 19:55 |
vilobhmm11 | running into https://bugs.launchpad.net/magnum/+bug/1506226 despite checking out latest codebase…this seem to have fixed it https://review.openstack.org/#/c/235010/3 ..any pointers on this | 19:56 |
openstack | Launchpad bug 1506226 in Magnum "Creating pods results in "EOF occurred in violation of protocol" exception" [Critical,Confirmed] - Assigned to hongbin (hongbin034) | 19:56 |
hongbin | vilobhmm11: yes, it should be fixed | 19:57 |
vilobhmm11 | hongbin : I still see it while creating pod :( | 19:57 |
*** Guest93745 is now known as preilly | 19:58 | |
*** preilly has quit IRC | 19:58 | |
*** preilly has joined #openstack-containers | 19:58 | |
vilobhmm11 | and the stack trace is similar to what reported here https://bugs.launchpad.net/magnum/+bug/1506226 | 19:58 |
openstack | Launchpad bug 1506226 in Magnum "Creating pods results in "EOF occurred in violation of protocol" exception" [Critical,Confirmed] - Assigned to hongbin (hongbin034) | 19:58 |
hongbin | vilobhmm11: could you verify the security group? (nova secgroup-list-rules) | 19:59 |
hongbin | to verify the port 6443 is indeed open | 20:00 |
*** eghobo has quit IRC | 20:02 | |
vilobhmm11 | hongbin : http://paste.openstack.org/show/476748/ | 20:02 |
*** eghobo_ has joined #openstack-containers | 20:02 | |
vilobhmm11 | is the detailed output for each secgroup | 20:03 |
hongbin | it looks good | 20:03 |
vilobhmm11 | hongbin : is there anything else you would like me to check/verify ? | 20:04 |
hongbin | vilobhmm11: you are trying secure bay or insecure bay? | 20:04 |
vilobhmm11 | hongbin : by default its secure right ? for me secure/insecure bay does not matter IMHO if pod creation works my next plan is to test objects from bay patches and address your concerns | 20:06 |
vilobhmm11 | for this test | 20:06 |
hongbin | default is secure | 20:06 |
vilobhmm11 | yup then I am using secure bay | 20:06 |
hongbin | two things: | 20:07 |
hongbin | 1. could you ssh to the master and type "kubectl create -f file.yaml" | 20:07 |
hongbin | where file.yaml is the manifest you were using in magnum | 20:07 |
vilobhmm11 | ok | 20:07 |
hongbin | 2. could you delete the secure bay and create an insecure bay. Then try to create the k8s resource again. (insecure bay is better for debuging) | 20:08 |
vilobhmm11 | ok | 20:09 |
vilobhmm11 | let me try will let you know | 20:09 |
vilobhmm11 | hongbin : for #1. http://paste.openstack.org/show/476750/ | 20:11 |
daneyon | Tango I have used vxlan and it works. Are you seeing problems with it? | 20:12 |
*** krotscheck has joined #openstack-containers | 20:12 | |
hongbin | vilobhmm11: It looks the k8s cluster was not setup properly | 20:14 |
*** annegentle has quit IRC | 20:14 | |
hongbin | let's see what is the result of insecure bay | 20:14 |
vilobhmm11 | hongbin : followed the steps here http://docs.openstack.org/developer/magnum/dev/dev-quickstart.html nd used fedora-21-atomic-5 | 20:15 |
vilobhmm11 | image… | 20:15 |
Tango | daneyon: I am about to set up Flanneld with vxlan to do some performance measurement, so I just want to double check to see if you ran into any issues | 20:15 |
Tango | daneyon: Do you have some instructions on setting it up? | 20:15 |
Tango | daneyon: (specific to the way we deploy the kus cluster) | 20:16 |
*** dims_ has joined #openstack-containers | 20:16 | |
*** dims has quit IRC | 20:19 | |
*** dave-mccowan has quit IRC | 20:21 | |
*** adrian_otto has joined #openstack-containers | 20:21 | |
*** gangil has joined #openstack-containers | 20:23 | |
*** gangil has quit IRC | 20:23 | |
*** gangil has joined #openstack-containers | 20:23 | |
*** Marga_ has joined #openstack-containers | 20:23 | |
daneyon | Tango you just need to pass the label when you create the baymodel: --labels flannel_use_vxlan=true | 20:23 |
Tango | daneyon: ah cool, so the new script handles the configuration. | 20:24 |
*** chandankumar_awa has joined #openstack-containers | 20:24 | |
*** achanda has quit IRC | 20:26 | |
*** alex_klimov has joined #openstack-containers | 20:29 | |
daneyon | flannel is the default network-driver for k8s, so you do not need to specifu --network-driver=flannel. Without passing any labels, flannel is setup with the defaults in the k8s heat template. Conductor has been updated to support the flannel config parameters in the heat template. These are flannel_use_vxlan, flannel_network_subnetlen, flannel_network_cidr. Ex> --labels flannel_use_vxlan=true,flannel_network_subnetlen=26,flanne | 20:29 |
daneyon | l_network_cidr=1.1.0.0/16 | 20:29 |
daneyon | Tango ^ | 20:29 |
Tango | daneyon: Sounds great, let me try this out | 20:30 |
Tango | daneyon: Save me a lot of work :) | 20:30 |
daneyon | Tango: Example> https://gist.github.com/danehans/e113c3a69195f7571ce4 | 20:31 |
Tango | daneyon: OK let me duplicate this in my environment | 20:34 |
daneyon | ok | 20:34 |
*** annegentle has joined #openstack-containers | 20:36 | |
*** eghobo_ has quit IRC | 20:36 | |
*** achanda has joined #openstack-containers | 20:46 | |
*** Marga_ has quit IRC | 20:52 | |
*** Marga_ has joined #openstack-containers | 20:53 | |
*** jlvillal_ has quit IRC | 20:57 | |
*** jlvillal_ has joined #openstack-containers | 20:58 | |
*** jlvillal_ has quit IRC | 21:02 | |
openstackgerrit | Michael Krotscheck proposed openstack/magnum: Added CORS support to Magnum https://review.openstack.org/237199 | 21:03 |
*** hblixt has quit IRC | 21:04 | |
*** julim has quit IRC | 21:04 | |
*** gangil has quit IRC | 21:04 | |
vilobhmm11 | hongbin : for bay creation with tls-disabled http://paste.openstack.org/show/476763/ | 21:09 |
hongbin | vilobhmm11: It still seems there is something wrong of the cluster | 21:11 |
hongbin | could you ssh to the master | 21:11 |
vilobhmm11 | yes trying the same thing | 21:11 |
hongbin | and type: sudo systemctl list-units | 21:11 |
vilobhmm11 | ok | 21:11 |
vilobhmm11 | hongbin : http://paste.openstack.org/show/476765/ the imp services failed docker,etcd | 21:14 |
*** Marga_ has quit IRC | 21:14 | |
*** Marga_ has joined #openstack-containers | 21:14 | |
*** Marga_ has quit IRC | 21:15 | |
hongbin | vilobhmm11: In master, try this: cat /etc/etcd/etcd.conf | 21:15 |
vilobhmm11 | hongbin : http://paste.openstack.org/show/476767/ | 21:16 |
*** Marga_ has joined #openstack-containers | 21:16 | |
*** manjeets has quit IRC | 21:18 | |
hongbin | vilobhmm11: the config looks right. Let's check the log: sudo journalctl -u etcd --no-pager | 21:18 |
vilobhmm11 | hongbin : http://paste.openstack.org/show/476769/ | 21:20 |
hongbin | vilobhmm11: It looks your VM cannot connect to public etcd https://discovery.etcd.io | 21:21 |
*** jwcroppe has quit IRC | 21:21 | |
vilobhmm11 | yes its timing out | 21:21 |
vilobhmm11 | in trying to connect to discovery.etcd.io | 21:22 |
*** gangil has joined #openstack-containers | 21:22 | |
*** gangil has quit IRC | 21:22 | |
*** gangil has joined #openstack-containers | 21:22 | |
hongbin | I am not good at debugging network issue. Thing to check: iptables, dns, neutron setting ... | 21:25 |
vilobhmm11 | hongbin : will check…thats fine…thanks for your help till now | 21:25 |
hongbin | np | 21:26 |
openstackgerrit | Zachary Sais proposed openstack/magnum: Cleanup template formatting https://review.openstack.org/236291 | 21:27 |
*** achanda has quit IRC | 21:34 | |
*** adrian_otto has quit IRC | 21:43 | |
*** achanda has joined #openstack-containers | 21:50 | |
*** eghobo has joined #openstack-containers | 21:55 | |
*** daneyon has quit IRC | 22:08 | |
*** exploreshaifali has quit IRC | 22:14 | |
*** dims_ has quit IRC | 22:15 | |
*** john5223 has joined #openstack-containers | 22:16 | |
*** EricGonczer_ has quit IRC | 22:17 | |
john5223 | Hello | 22:17 |
*** alex_klimov has quit IRC | 22:18 | |
*** dane_leblanc has quit IRC | 22:19 | |
*** _navneet_ has quit IRC | 22:26 | |
*** eghobo has quit IRC | 22:30 | |
*** annegentle has quit IRC | 22:32 | |
*** annegentle has joined #openstack-containers | 22:41 | |
*** annegentle has quit IRC | 22:45 | |
john5223 | Anyone running multi hypervisor openstack with kvm + lxc? | 22:51 |
*** vikasc__ has joined #openstack-containers | 22:52 | |
*** achanda has quit IRC | 22:55 | |
*** achanda_ has joined #openstack-containers | 22:55 | |
*** achanda has joined #openstack-containers | 22:55 | |
*** dimtruck is now known as zz_dimtruck | 22:58 | |
*** achanda_ has quit IRC | 22:59 | |
*** hongbin has quit IRC | 23:01 | |
*** sdake has joined #openstack-containers | 23:04 | |
*** suro-patz has quit IRC | 23:18 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/magnum: Updated from global requirements https://review.openstack.org/230566 | 23:28 |
*** gangil has quit IRC | 23:30 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-magnumclient: Updated from global requirements https://review.openstack.org/235657 | 23:32 |
*** gangil has joined #openstack-containers | 23:35 | |
*** gangil has quit IRC | 23:35 | |
*** gangil has joined #openstack-containers | 23:35 | |
*** eghobo has joined #openstack-containers | 23:43 | |
*** sthillma has quit IRC | 23:55 | |
*** sthillma has joined #openstack-containers | 23:55 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!