| *** jwcroppe has quit IRC | 00:08 | |
| *** dave-mccowan has joined #openstack-containers | 00:21 | |
| *** catintheroof has quit IRC | 00:34 | |
| *** elleobot has joined #openstack-containers | 00:43 | |
| *** hongbin has quit IRC | 00:45 | |
| *** kevinz has joined #openstack-containers | 01:10 | |
| *** adrian_otto has quit IRC | 01:18 | |
| *** jwcroppe has joined #openstack-containers | 01:42 | |
| *** jwcroppe has quit IRC | 01:53 | |
| *** Oku_OS is now known as Oku_OS-away | 01:56 | |
| *** dixiaoli has joined #openstack-containers | 01:58 | |
| *** adrian_otto has joined #openstack-containers | 02:23 | |
| jaeman | Can I setup other network solution for k8s cluster than flannel? Especially, I am wondering if Open vSwitch is available from magnum or not. | 02:25 |
|---|---|---|
| *** adrian_otto has quit IRC | 02:27 | |
| *** yamamoto has joined #openstack-containers | 02:29 | |
| *** ricolin has joined #openstack-containers | 02:31 | |
| *** yamamoto has quit IRC | 02:33 | |
| jaeman | yatinkarel, when i see your cluster-template baremetal k8s cluster for you does not set network driver. If then, does network driver decided ad opens vswitch? | 02:33 |
| yatinkarel | jaeman, currently for k8s only flannel is supported and it's default | 02:47 |
| yatinkarel | jaeman, if you think it's worth to add openvswitch as a network driver you can propose it. | 02:52 |
| *** yuanying has quit IRC | 02:55 | |
| *** dave-mccowan has quit IRC | 03:03 | |
| *** jwcroppe has joined #openstack-containers | 03:09 | |
| *** EricGonczer_ has quit IRC | 03:10 | |
| *** raginbajin has quit IRC | 03:14 | |
| *** zerick has quit IRC | 03:15 | |
| *** zerick has joined #openstack-containers | 03:18 | |
| *** dixiaoli has quit IRC | 03:18 | |
| *** raginbajin has joined #openstack-containers | 03:21 | |
| *** elleobot has quit IRC | 03:21 | |
| *** dimtruck is now known as zz_dimtruck | 03:23 | |
| *** dixiaoli has joined #openstack-containers | 03:26 | |
| jaeman | yatinkarel, how can I propose that? As registering blueprint? | 03:39 |
| yatinkarel | jaeman, yes you can register a blueprint for this. Is this related to cni driver or something else? | 03:45 |
| yatinkarel | Try to give as much information you have in the bp with some advantage if any. | 03:46 |
| yatinkarel | If it's relate to cni then there is a patch, you can look into it: https://review.openstack.org/#/c/435270/ | 03:47 |
| *** mdnadeem has joined #openstack-containers | 04:17 | |
| *** dixiaoli has quit IRC | 04:30 | |
| *** dschultz has quit IRC | 04:35 | |
| *** yuanying has joined #openstack-containers | 04:39 | |
| *** dschultz has joined #openstack-containers | 04:43 | |
| jaeman | yatinkarel, I don't have still any idea for that. I will search if there is any ovs cni plugin for k8s or other approaches. And then I will create a bp with enough information I can add. | 04:51 |
| yatinkarel | jaeman, Ok | 04:57 |
| *** vryzhenkin has joined #openstack-containers | 05:07 | |
| *** freerunner has quit IRC | 05:07 | |
| *** askb has quit IRC | 05:07 | |
| *** vryzhenkin is now known as freerunner | 05:07 | |
| *** askb has joined #openstack-containers | 05:08 | |
| *** trinaths has joined #openstack-containers | 05:16 | |
| *** dschultz has quit IRC | 05:18 | |
| *** trinaths has quit IRC | 05:21 | |
| *** adrian_otto has joined #openstack-containers | 05:26 | |
| *** ramishra has quit IRC | 05:30 | |
| *** trinaths has joined #openstack-containers | 05:31 | |
| *** dixiaoli has joined #openstack-containers | 05:31 | |
| *** trinaths has left #openstack-containers | 05:33 | |
| *** dixiaoli has quit IRC | 05:34 | |
| *** yamamoto has joined #openstack-containers | 05:35 | |
| *** ramishra has joined #openstack-containers | 05:35 | |
| *** sahilsinha has quit IRC | 05:39 | |
| *** rcernin has joined #openstack-containers | 05:39 | |
| *** sahilsinha has joined #openstack-containers | 05:39 | |
| *** yamamoto has quit IRC | 05:40 | |
| *** NikhilS has joined #openstack-containers | 05:54 | |
| *** swatson has quit IRC | 05:56 | |
| *** swatson has joined #openstack-containers | 05:57 | |
| *** dixiaoli has joined #openstack-containers | 05:58 | |
| *** hishh has joined #openstack-containers | 06:10 | |
| *** Oku_OS-away is now known as Oku_OS | 06:12 | |
| *** Serlex has joined #openstack-containers | 06:21 | |
| *** fragatin_ has joined #openstack-containers | 06:21 | |
| *** pcaruana has joined #openstack-containers | 06:24 | |
| *** fragatina has quit IRC | 06:24 | |
| *** tovin07 has joined #openstack-containers | 06:25 | |
| *** fragatin_ has quit IRC | 06:26 | |
| *** hishh has quit IRC | 06:35 | |
| *** fragatina has joined #openstack-containers | 06:36 | |
| *** fragatina has quit IRC | 06:40 | |
| *** fragatina has joined #openstack-containers | 06:40 | |
| *** yamamoto has joined #openstack-containers | 06:41 | |
| *** fragatina has quit IRC | 06:42 | |
| *** fragatina has joined #openstack-containers | 06:43 | |
| *** yamamoto has quit IRC | 06:47 | |
| *** dschultz has joined #openstack-containers | 06:55 | |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: Add reno for cluster_user_trust option https://review.openstack.org/450696 | 06:56 |
| *** dschultz has quit IRC | 07:01 | |
| *** dschultz has joined #openstack-containers | 07:02 | |
| *** mjura has joined #openstack-containers | 07:06 | |
| *** mjura has quit IRC | 07:06 | |
| *** mjura has joined #openstack-containers | 07:06 | |
| *** dschultz has quit IRC | 07:06 | |
| *** hishh has joined #openstack-containers | 07:09 | |
| *** amoralej|off is now known as amoralej | 07:24 | |
| *** yamamoto has joined #openstack-containers | 07:43 | |
| *** fungusakafungus has joined #openstack-containers | 07:44 | |
| *** tovin07 has quit IRC | 07:45 | |
| *** yamamoto has quit IRC | 07:48 | |
| *** zenirc369 has joined #openstack-containers | 07:48 | |
| *** dsariel has quit IRC | 07:50 | |
| *** swatson_ has quit IRC | 08:01 | |
| *** NikhilS has quit IRC | 08:04 | |
| *** NikhilS has joined #openstack-containers | 08:07 | |
| *** dixiaoli has quit IRC | 08:13 | |
| *** adrian_otto has quit IRC | 08:16 | |
| *** fungusakafungus has quit IRC | 08:17 | |
| *** dixiaoli has joined #openstack-containers | 08:18 | |
| *** fungusakafungus has joined #openstack-containers | 08:20 | |
| *** pbandark has joined #openstack-containers | 08:20 | |
| *** hishh has quit IRC | 08:21 | |
| *** shubhendu has joined #openstack-containers | 08:21 | |
| *** hishh has joined #openstack-containers | 08:22 | |
| *** yuanying has quit IRC | 08:31 | |
| *** yamamoto has joined #openstack-containers | 08:45 | |
| *** dixiaoli_ has joined #openstack-containers | 08:46 | |
| *** fungusakafungus has quit IRC | 08:48 | |
| *** dixiaoli has quit IRC | 08:48 | |
| *** hishh has quit IRC | 08:50 | |
| *** yamamoto has quit IRC | 08:50 | |
| *** salmankhan has joined #openstack-containers | 08:52 | |
| strigazi | hey yatinkarel, Add reno for cluster_user_trust option https://review.openstack.org/#/c/450696/ | 08:55 |
| yatinkarel | strigazi, Ok | 08:57 |
| yatinkarel | strigazi, we have volume_driver=rexray for swarm and volume_driver=cinder for k8s currently. You mentioned only rexray on the reno patch, that's why i commented | 08:58 |
| yatinkarel | did you misunderstood my comment, or i was wrong somewhere? | 09:00 |
| *** dsariel has joined #openstack-containers | 09:02 | |
| strigazi | yatinkarel cinder for k8s doesn't user the trustee user at the moment | 09:03 |
| strigazi | yatinkarel cinder for k8s doesn't use the trustee user at the moment | 09:03 |
| yatinkarel | strigazi, Then it's Ok | 09:04 |
| strigazi | yatinkarel There is a patch for that in fly but it's not there yet. It can have its own reno | 09:04 |
| yatinkarel | strigazi, Ok | 09:06 |
| openstackgerrit | Shu Muto proposed openstack/magnum-ui master: Fix breadcrumbs https://review.openstack.org/451261 | 09:06 |
| *** dschultz has joined #openstack-containers | 09:08 | |
| *** fungusakafungus has joined #openstack-containers | 09:14 | |
| *** fungusak_ has joined #openstack-containers | 09:17 | |
| *** fungusakafungus has quit IRC | 09:17 | |
| openstackgerrit | yuanpeng proposed openstack/magnum master: Remove log translations https://review.openstack.org/447868 | 09:18 |
| *** dschultz has quit IRC | 09:24 | |
| *** fungusak_ has quit IRC | 09:36 | |
| *** yuanying has joined #openstack-containers | 09:39 | |
| *** yuanying has quit IRC | 09:44 | |
| *** yamamoto has joined #openstack-containers | 09:46 | |
| *** yuanying has joined #openstack-containers | 09:47 | |
| *** yamamoto has quit IRC | 09:52 | |
| *** fungusakafungus has joined #openstack-containers | 09:55 | |
| *** fungusak_ has joined #openstack-containers | 09:57 | |
| *** fungusakafungus has quit IRC | 09:57 | |
| *** mjura has quit IRC | 10:14 | |
| *** mjura has joined #openstack-containers | 10:14 | |
| *** foutatoro has joined #openstack-containers | 10:16 | |
| *** fungusak_ has quit IRC | 10:33 | |
| *** yamamoto has joined #openstack-containers | 10:48 | |
| *** yamamoto has quit IRC | 10:54 | |
| openstackgerrit | Shu Muto proposed openstack/magnum-ui master: Fix breadcrumbs https://review.openstack.org/451261 | 11:01 |
| *** kevinz has quit IRC | 11:04 | |
| *** yamamoto has joined #openstack-containers | 11:09 | |
| *** yamamoto has quit IRC | 11:19 | |
| *** dschultz has joined #openstack-containers | 11:23 | |
| *** ricolin has quit IRC | 11:30 | |
| *** ricolin_ has joined #openstack-containers | 11:30 | |
| *** ricolin__ has joined #openstack-containers | 11:40 | |
| *** dschultz has quit IRC | 11:40 | |
| *** ricolin_ has quit IRC | 11:42 | |
| *** dixiaoli_ has quit IRC | 11:49 | |
| *** askb has quit IRC | 11:49 | |
| *** dixiaoli has joined #openstack-containers | 11:50 | |
| *** pbandark is now known as pbandark`brb | 11:52 | |
| *** dixiaoli has quit IRC | 11:54 | |
| *** amoralej is now known as amoralej|lunch | 11:56 | |
| *** gdony has joined #openstack-containers | 11:57 | |
| *** ricolin__ has quit IRC | 11:57 | |
| *** ricolin has joined #openstack-containers | 11:58 | |
| *** trinaths has joined #openstack-containers | 12:18 | |
| *** yamamoto has joined #openstack-containers | 12:20 | |
| *** yamamoto has quit IRC | 12:25 | |
| *** janki has joined #openstack-containers | 12:27 | |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: Add reno for cluster_user_trust option https://review.openstack.org/450696 | 12:39 |
| *** dave-mccowan has joined #openstack-containers | 12:46 | |
| *** jmlowe has quit IRC | 12:48 | |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: Add reno for cluster_user_trust option https://review.openstack.org/450696 | 12:49 |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum stable/newton: Add reno for cluster_user_trust option https://review.openstack.org/450698 | 12:56 |
| *** mdnadeem has quit IRC | 12:56 | |
| *** mjura has quit IRC | 12:58 | |
| *** mjura has joined #openstack-containers | 12:59 | |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: IGNORE: test Fedora-Atomic-25-20170328 https://review.openstack.org/448629 | 12:59 |
| *** jmlowe has joined #openstack-containers | 13:00 | |
| *** jmlowe has quit IRC | 13:02 | |
| *** amoralej|lunch is now known as amoralej | 13:17 | |
| *** yamamoto has joined #openstack-containers | 13:22 | |
| *** yamamoto has quit IRC | 13:28 | |
| *** catintheroof has joined #openstack-containers | 13:30 | |
| *** salmankhan has quit IRC | 13:31 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/magnum master: Updated from global requirements https://review.openstack.org/451021 | 13:34 |
| *** jmlowe has joined #openstack-containers | 13:36 | |
| *** kevinz has joined #openstack-containers | 13:37 | |
| *** dschultz has joined #openstack-containers | 13:39 | |
| *** EricGonczer_ has joined #openstack-containers | 13:40 | |
| *** catintheroof has quit IRC | 13:41 | |
| *** jwcroppe has quit IRC | 13:43 | |
| *** jwcroppe has joined #openstack-containers | 13:43 | |
| foutatoro | Hi all, i would like to know if magnum support baremetal deployement of keubernate pods ? | 13:46 |
| *** jwcroppe has quit IRC | 13:47 | |
| *** kevinz has quit IRC | 13:51 | |
| *** kevinz has joined #openstack-containers | 13:52 | |
| *** dschultz has quit IRC | 13:56 | |
| *** jwcroppe has joined #openstack-containers | 13:57 | |
| *** salmankhan has joined #openstack-containers | 13:58 | |
| foutatoro | are you up ? | 13:59 |
| *** EricGonc_ has joined #openstack-containers | 14:01 | |
| *** janki has quit IRC | 14:02 | |
| *** jmlowe_ has joined #openstack-containers | 14:02 | |
| *** EricGonczer_ has quit IRC | 14:02 | |
| *** jmlowe has quit IRC | 14:04 | |
| strigazi | it does | 14:08 |
| *** adisky_ has quit IRC | 14:09 | |
| *** yatinkarel has quit IRC | 14:17 | |
| *** foutatoro has quit IRC | 14:20 | |
| *** yamamoto has joined #openstack-containers | 14:24 | |
| *** jasond has joined #openstack-containers | 14:24 | |
| *** yamamoto has quit IRC | 14:29 | |
| *** zz_dimtruck is now known as dimtruck | 14:30 | |
| *** yatinkarel has joined #openstack-containers | 14:31 | |
| *** adrian_otto has joined #openstack-containers | 14:35 | |
| *** NikhilS has quit IRC | 14:37 | |
| *** dsariel has quit IRC | 14:39 | |
| *** EricGonc_ has quit IRC | 14:54 | |
| *** EricGonczer_ has joined #openstack-containers | 14:57 | |
| *** gcb has joined #openstack-containers | 14:58 | |
| *** rcernin has quit IRC | 15:05 | |
| *** kevinz has quit IRC | 15:06 | |
| *** mtanino has joined #openstack-containers | 15:16 | |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: Add reno for cluster_user_trust option https://review.openstack.org/450696 | 15:18 |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum stable/newton: Add reno for cluster_user_trust option https://review.openstack.org/450698 | 15:18 |
| *** Drago has joined #openstack-containers | 15:23 | |
| *** pbandark`brb has quit IRC | 15:24 | |
| *** yamamoto has joined #openstack-containers | 15:26 | |
| *** adrian_otto has quit IRC | 15:30 | |
| *** yamamoto has quit IRC | 15:31 | |
| *** eliqiao has quit IRC | 15:33 | |
| *** eliqiao has joined #openstack-containers | 15:37 | |
| *** vijendar has joined #openstack-containers | 15:42 | |
| *** eliqiao has quit IRC | 15:46 | |
| *** eliqiao has joined #openstack-containers | 15:53 | |
| *** fragatina has quit IRC | 16:00 | |
| *** adrian_otto has joined #openstack-containers | 16:02 | |
| *** EricGonczer_ has quit IRC | 16:06 | |
| *** trinaths has left #openstack-containers | 16:23 | |
| *** yamamoto has joined #openstack-containers | 16:27 | |
| *** ricolin has quit IRC | 16:32 | |
| *** yamamoto has quit IRC | 16:33 | |
| *** fragatina has joined #openstack-containers | 16:36 | |
| *** dschultz has joined #openstack-containers | 16:37 | |
| *** mjura has quit IRC | 16:38 | |
| *** dschultz has quit IRC | 16:38 | |
| *** dschultz has joined #openstack-containers | 16:40 | |
| *** fragatin_ has joined #openstack-containers | 16:59 | |
| *** eliqiao has quit IRC | 17:01 | |
| *** fragatina has quit IRC | 17:02 | |
| *** eliqiao has joined #openstack-containers | 17:02 | |
| *** pbandark has joined #openstack-containers | 17:08 | |
| *** foutatoro has joined #openstack-containers | 17:20 | |
| *** jmlowe_ has quit IRC | 17:25 | |
| *** yamamoto has joined #openstack-containers | 17:29 | |
| *** yamamoto has quit IRC | 17:35 | |
| *** Drago has quit IRC | 17:38 | |
| *** mtanino has quit IRC | 17:40 | |
| *** Drago1 has joined #openstack-containers | 17:41 | |
| *** Drago1 has quit IRC | 17:42 | |
| *** Drago1 has joined #openstack-containers | 17:43 | |
| *** tonanhngo has joined #openstack-containers | 17:44 | |
| *** salmankhan has quit IRC | 17:44 | |
| *** Drago1 has quit IRC | 17:47 | |
| *** tonanhngo_ has joined #openstack-containers | 17:48 | |
| *** tonanhngo has quit IRC | 17:48 | |
| *** eliqiao has quit IRC | 17:49 | |
| *** eliqiao has joined #openstack-containers | 17:50 | |
| *** pcaruana has quit IRC | 17:52 | |
| *** tonanhngo_ has quit IRC | 17:52 | |
| *** EricGonczer_ has joined #openstack-containers | 17:54 | |
| *** adisky_ has joined #openstack-containers | 17:54 | |
| *** tonanhngo has joined #openstack-containers | 17:54 | |
| *** vishwanathj has joined #openstack-containers | 17:58 | |
| *** amoralej is now known as amoralej|off | 18:07 | |
| *** zenirc369 has quit IRC | 18:08 | |
| *** mtanino has joined #openstack-containers | 18:09 | |
| *** jmlowe has joined #openstack-containers | 18:13 | |
| openstackgerrit | Vijendar Komalla proposed openstack/magnum master: Add verify_ca field to cluster template https://review.openstack.org/447687 | 18:15 |
| openstackgerrit | Vijendar Komalla proposed openstack/magnum master: Add verify_ca field to cluster template https://review.openstack.org/447687 | 18:20 |
| openstackgerrit | Merged openstack/magnum stable/mitaka: Remove constraints envs from tox.ini https://review.openstack.org/450857 | 18:22 |
| *** pbandark has quit IRC | 18:25 | |
| openstackgerrit | Vijendar Komalla proposed openstack/magnum master: Add an option to verify CA (swarm) https://review.openstack.org/450310 | 18:27 |
| *** EricGonczer_ has quit IRC | 18:30 | |
| *** yamamoto has joined #openstack-containers | 18:31 | |
| *** EricGonczer_ has joined #openstack-containers | 18:31 | |
| *** yamamoto has quit IRC | 18:36 | |
| *** Drago has joined #openstack-containers | 18:37 | |
| *** jmlowe has quit IRC | 18:42 | |
| *** openstackstatus has joined #openstack-containers | 18:43 | |
| *** ChanServ sets mode: +v openstackstatus | 18:43 | |
| *** fungusakafungus has joined #openstack-containers | 18:49 | |
| *** EricGonczer_ has quit IRC | 18:52 | |
| *** Drago1 has joined #openstack-containers | 18:57 | |
| *** hongbin has joined #openstack-containers | 18:59 | |
| *** EricGonczer_ has joined #openstack-containers | 19:00 | |
| *** Drago has quit IRC | 19:00 | |
| *** jmlowe has joined #openstack-containers | 19:06 | |
| *** fungusakafungus has quit IRC | 19:11 | |
| *** salmankhan has joined #openstack-containers | 19:17 | |
| openstackgerrit | Vijendar Komalla proposed openstack/magnum master: Add verify_ca field to cluster template https://review.openstack.org/447687 | 19:22 |
| *** salmankhan has quit IRC | 19:22 | |
| *** fragatin_ has quit IRC | 19:25 | |
| *** fragatina has joined #openstack-containers | 19:26 | |
| *** eliqiao has quit IRC | 19:28 | |
| *** yamamoto has joined #openstack-containers | 19:32 | |
| *** openstackgerrit has quit IRC | 19:33 | |
| *** eliqiao has joined #openstack-containers | 19:33 | |
| *** yamamoto has quit IRC | 19:38 | |
| *** Serlex has quit IRC | 19:56 | |
| *** adisky_ has quit IRC | 19:59 | |
| *** jmlowe has quit IRC | 20:00 | |
| *** jmlowe has joined #openstack-containers | 20:03 | |
| adrian_otto | vijendar: I am reviewing https://review.openstack.org/447687 and I can't find any test cases for setting verify_ca to False. Am I missing it somewhere? | 20:05 |
| vijendar | adrian_otto: you mean functional test? | 20:13 |
| adrian_otto | unit test or functional test. I don't see either. | 20:14 |
| *** jmlowe has quit IRC | 20:15 | |
| vijendar | adrian_otto: I thought unit test is not of much use, but probably I can add a functional test | 20:18 |
| adrian_otto | tx! | 20:19 |
| vijendar | adrian_otto: thanks | 20:19 |
| *** dimtruck is now known as zz_dimtruck | 20:21 | |
| *** EricGonczer_ has quit IRC | 20:29 | |
| *** yamamoto has joined #openstack-containers | 20:34 | |
| *** yamamoto has quit IRC | 20:40 | |
| *** zz_dimtruck is now known as dimtruck | 20:42 | |
| foutatoro | hi all, did someone run "Failed to create certificates for Cluster" when creating magnum cluster in OSA ? | 20:43 |
| foutatoro | adrian_otto, vijendar: please do you know what cause this error "Failed to create certificates for Cluster" | 20:47 |
| vijendar | foutatoro: where did you get this error? | 20:48 |
| foutatoro | when creating cluster in prod environment | 20:48 |
| vijendar | which driver did you use? | 20:49 |
| foutatoro | do you mean coe ? | 20:50 |
| vijendar | foutatoro: correct | 20:50 |
| foutatoro | I'm using kubernetes | 20:50 |
| foutatoro | vijendar: you can see the output here http://paste.openstack.org/show/604739/ | 20:50 |
| *** jaeman has quit IRC | 20:53 | |
| vijendar | foutatoro: can you check the stack trace on magnum-conductor logs | 20:53 |
| *** vijendar has quit IRC | 20:56 | |
| adrian_otto | foutatoro: you still here? | 21:03 |
| adrian_otto | We have seen that problem intermittently before. What release of Magnum are you using? | 21:03 |
| *** hishh has joined #openstack-containers | 21:06 | |
| *** fragatin_ has joined #openstack-containers | 21:09 | |
| *** fragatina has quit IRC | 21:13 | |
| foutatoro | adrian_otto: I'm using newton release | 21:20 |
| foutatoro | sorry for the delay | 21:20 |
| *** yee379 has joined #openstack-containers | 21:25 | |
| *** hishh1 has joined #openstack-containers | 21:25 | |
| *** yee37915 has quit IRC | 21:26 | |
| *** hishh has quit IRC | 21:26 | |
| *** hishh1 is now known as hishh | 21:26 | |
| adrian_otto | foutatoro: I wonder if the problem is the certificate creation, or the fetching of the certificates by the cluster nodes. | 21:28 |
| adrian_otto | does it take a really long time to see that error, or is it within a couple of minutes? | 21:28 |
| foutatoro | adrian_otto: I get this error a few seconds after creating the cluster | 21:29 |
| adrian_otto | ok, then it's in the actual certificate creation | 21:29 |
| adrian_otto | do all your systems have access to the internet? | 21:29 |
| foutatoro | yes | 21:29 |
| adrian_otto | hummm | 21:30 |
| adrian_otto | did you find any stack traces as suggested by vijendar earlier? | 21:30 |
| adrian_otto | looking at your paste now | 21:31 |
| foutatoro | adrian_otto: here is the log http://paste.openstack.org/show/604741/ | 21:31 |
| adrian_otto | okay, we could look at the heat stack and see if that gives us any more clues | 21:32 |
| adrian_otto | one moment, let me find the guide that explains how | 21:33 |
| adrian_otto | https://docs.openstack.org/developer/magnum/troubleshooting-guide.html | 21:33 |
| *** ssbarnea has quit IRC | 21:34 | |
| *** shubhendu has quit IRC | 21:35 | |
| adrian_otto | foutatoro: https://docs.openstack.org/developer/magnum/troubleshooting-guide.html#heat-stacks | 21:35 |
| adrian_otto | the "heat resource-show" on the failed stack resource may give us more information | 21:36 |
| *** yamamoto has joined #openstack-containers | 21:36 | |
| *** hishh has quit IRC | 21:39 | |
| adrian_otto | I think this is where it's happening: https://github.com/openstack/magnum/blob/master/magnum/conductor/handlers/common/cert_manager.py#L111 | 21:39 |
| *** dimtruck is now known as zz_dimtruck | 21:41 | |
| foutatoro | adrian_otto: "heat stack-list" doesn't show any output | 21:41 |
| adrian_otto | foutatoro: does your magnum conductor log have a "Magnum client cert is created:" entry in it | 21:42 |
| *** yamamoto has quit IRC | 21:42 | |
| adrian_otto | openstack stack list | 21:42 |
| adrian_otto | maybe? | 21:42 |
| adrian_otto | otherwise you may need to install the heat client | 21:42 |
| foutatoro | neither | 21:42 |
| adrian_otto | dos your cloud have a working heat service? | 21:43 |
| adrian_otto | s/dos/does/ | 21:43 |
| foutatoro | yes heat is correcty running | 21:43 |
| adrian_otto | ok, so you'll need a working heat client to access it to extract more information about what went wrong | 21:44 |
| *** vijendar has joined #openstack-containers | 21:47 | |
| adrian_otto | foutatoro: I looked at your log. We should enable debug logging. | 21:47 |
| *** gdony has quit IRC | 21:48 | |
| adrian_otto | the debug severity level is not being logged. If we enabled debugging level logs, then we could see the result of the cert generation attempt. | 21:48 |
| adrian_otto | At least for magnum conductor | 21:49 |
| foutatoro | here is the log with --debug option http://paste.openstack.org/show/604747/ | 21:56 |
| *** fragatin_ has quit IRC | 22:08 | |
| *** fragatina has joined #openstack-containers | 22:09 | |
| *** adrian_otto has quit IRC | 22:09 | |
| *** adrian_otto has joined #openstack-containers | 22:10 | |
| *** zz_dimtruck is now known as dimtruck | 22:17 | |
| *** coreyob has quit IRC | 22:20 | |
| *** jasond has quit IRC | 22:27 | |
| *** openstackgerrit has joined #openstack-containers | 22:29 | |
| openstackgerrit | Jason Dunsmore proposed openstack/python-magnumclient master: Don't unpack multiple values from api.raw_request() https://review.openstack.org/451592 | 22:29 |
| *** askb has joined #openstack-containers | 22:33 | |
| *** fungusakafungus has joined #openstack-containers | 22:37 | |
| *** yamamoto has joined #openstack-containers | 22:38 | |
| adrian_otto | foutatoro: that's still only showing info level logs, not debug. Did you put the 'debug' directive in your magnum.conf file and restart the magnum conductor process? | 22:41 |
| *** yamamoto has quit IRC | 22:42 | |
| foutatoro | adrian_otto: no i didn't do that. I will retry now | 22:45 |
| *** fungusakafungus has quit IRC | 22:45 | |
| *** jwcroppe has quit IRC | 22:49 | |
| *** Drago1 has quit IRC | 22:57 | |
| foutatoro | adrian_otto here are logs with debug http://paste.openstack.org/show/604753/ | 23:00 |
| foutatoro | I would like also to know if magnum support running kernetes pods on baremetal ? | 23:01 |
| adrian_otto | foutatoro: okay, this confirms that either the call to _generate_ca_cert() or _generate_client_cert() is failing | 23:07 |
| adrian_otto | are you sure you have a working TLS library installed? | 23:07 |
| adrian_otto | specifically the x.509 library. We call x509.generate_ca_certificate() | 23:08 |
| foutatoro | I'm not sure because I installed openstack with ansible | 23:08 |
| foutatoro | so can I disable tls ? | 23:08 |
| adrian_otto | you could try that | 23:08 |
| adrian_otto | but if you do that it's the same as giving free login access to your servers | 23:08 |
| adrian_otto | so I would not do that on any internet connected cloud | 23:09 |
| adrian_otto | the TLS certificates are what provide the access control to the COE APIs | 23:09 |
| adrian_otto | without them it's the security equivalent of publishing your root SSH keys ;-) | 23:09 |
| adrian_otto | but at least that would give you an idea if it's really an SSL/TLS problem | 23:10 |
| *** swatson_ has joined #openstack-containers | 23:10 | |
| foutatoro | ok thans i will try that. I would like also to know if magnum support running kernetes pods on baremetal ? | 23:10 |
| adrian_otto | it's probably better to run python interactively and see if you can call x509.generate_ca_certificate() | 23:10 |
| adrian_otto | and if not, then you've got an environment problem | 23:11 |
| adrian_otto | I should write an automated test to verify that before we try to create a cluster | 23:11 |
| adrian_otto | so that you'd get a better error message immediately | 23:12 |
| foutatoro | I think it's a certificate issue. NameError: name 'x509' is not defined | 23:13 |
| adrian_otto | foutatoro: Magnum is designed to allow that, but you need to have a working Ironic service (nova virt driver that can produce nova instances that are BM hosts) | 23:14 |
| adrian_otto | strigazi could probably offer you some tips on how to do it | 23:14 |
| adrian_otto | the clouds I have for testing Magnum don't have that service, so I can't do it myself | 23:15 |
| foutatoro | adrian_otteyo: about certifiate are they used by the master to connect to nodes ? or by user ? | 23:20 |
| adrian_otto | both | 23:20 |
| adrian_otto | I just found something in the code | 23:20 |
| adrian_otto | do you have Magnum configured to use Barbican, or internal certificate storage? | 23:20 |
| adrian_otto | based on the code I'm looking at here for Mitaka, after we generate the cert, we try to store it using the CertManger backend and if that fails, we will not get to the 'CA cert is created:' debug log message, which is consistent with your log excerpt. | 23:22 |
| foutatoro | thanks | 23:27 |
| adrian_otto | I hope that helps you a bit. I'm at my end of day now, but I'llbe back again tomorrow | 23:31 |
| *** foutatoro has quit IRC | 23:34 | |
| *** EricGonczer_ has joined #openstack-containers | 23:37 | |
| *** yamamoto has joined #openstack-containers | 23:39 | |
| openstackgerrit | Adrian Otto proposed openstack/magnum master: Update Dev Quickstart for Xenial https://review.openstack.org/451602 | 23:42 |
| *** yamamoto has quit IRC | 23:44 | |
| *** daidv has quit IRC | 23:47 | |
| *** hieulq has quit IRC | 23:47 | |
| *** adrian_otto has quit IRC | 23:51 | |
| *** dschultz has quit IRC | 23:56 | |
| *** dschultz has joined #openstack-containers | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!