| *** hongbin has quit IRC | 00:03 | |
| *** dardelea_ has joined #openstack-containers | 00:06 | |
| *** mnasiadka has joined #openstack-containers | 00:08 | |
| *** mnasiadka has quit IRC | 00:12 | |
| *** abelur has joined #openstack-containers | 00:17 | |
| *** mnasiadka has joined #openstack-containers | 00:23 | |
| *** pritesh has left #openstack-containers | 00:27 | |
| *** mnasiadka has quit IRC | 00:27 | |
| openstackgerrit | Merged openstack/magnum master: k8s: Fix kubelet, add RBAC and pass e2e tests https://review.openstack.org/533593 | 00:34 |
|---|---|---|
| *** mnasiadka has joined #openstack-containers | 00:38 | |
| *** fragatin_ has quit IRC | 00:42 | |
| *** fragatina has joined #openstack-containers | 00:42 | |
| *** mnasiadka has quit IRC | 00:43 | |
| openstackgerrit | Feilong Wang proposed openstack/magnum master: Explicitly adding --require-kubeconfig for kubelet https://review.openstack.org/543664 | 00:49 |
| *** mnasiadka has joined #openstack-containers | 00:53 | |
| *** dardelea_ has quit IRC | 00:54 | |
| *** mnasiadka has quit IRC | 00:58 | |
| *** shu-mutou-AWAY has quit IRC | 01:01 | |
| *** openstackgerrit has quit IRC | 01:03 | |
| *** pengdake_ has joined #openstack-containers | 01:04 | |
| *** openstackgerrit has joined #openstack-containers | 01:05 | |
| openstackgerrit | Merged openstack/magnum-ui master: Imported Translations from Zanata https://review.openstack.org/543088 | 01:05 |
| *** gyee has quit IRC | 01:07 | |
| *** mnasiadka has joined #openstack-containers | 01:08 | |
| *** mnasiadka has quit IRC | 01:12 | |
| *** itlinux has joined #openstack-containers | 01:15 | |
| *** oikiki has quit IRC | 01:17 | |
| *** mdnadeem has joined #openstack-containers | 01:23 | |
| *** mnasiadka has joined #openstack-containers | 01:23 | |
| *** mnasiadka has quit IRC | 01:28 | |
| *** lbragstad has quit IRC | 01:34 | |
| *** mnasiadka has joined #openstack-containers | 01:39 | |
| *** itlinux has quit IRC | 01:43 | |
| *** mnasiadka has quit IRC | 01:43 | |
| *** mnasiadka has joined #openstack-containers | 01:54 | |
| *** itlinux has joined #openstack-containers | 01:56 | |
| *** kiennt26 has joined #openstack-containers | 01:57 | |
| *** mnasiadka has quit IRC | 01:59 | |
| *** oikiki has joined #openstack-containers | 02:03 | |
| *** mnasiadka has joined #openstack-containers | 02:09 | |
| *** mnasiadka has quit IRC | 02:13 | |
| *** shu-mutou has joined #openstack-containers | 02:13 | |
| *** AlexeyAbashkin has joined #openstack-containers | 02:21 | |
| *** itlinux has quit IRC | 02:22 | |
| *** mnasiadka has joined #openstack-containers | 02:23 | |
| *** AlexeyAbashkin has quit IRC | 02:25 | |
| *** itlinux has joined #openstack-containers | 02:27 | |
| *** mnasiadka has quit IRC | 02:28 | |
| *** mnasiadka has joined #openstack-containers | 02:38 | |
| *** hongbin has joined #openstack-containers | 02:38 | |
| *** itlinux has quit IRC | 02:40 | |
| *** mnasiadka has quit IRC | 02:43 | |
| *** oikiki has quit IRC | 02:49 | |
| *** ricolin has joined #openstack-containers | 02:52 | |
| *** mnasiadka has joined #openstack-containers | 02:53 | |
| *** dardelean has joined #openstack-containers | 02:55 | |
| *** mnasiadka has quit IRC | 02:58 | |
| *** dardelean has quit IRC | 02:59 | |
| *** harlowja has quit IRC | 03:04 | |
| *** mnasiadka has joined #openstack-containers | 03:08 | |
| *** mnasiadka has quit IRC | 03:13 | |
| *** dpawar has joined #openstack-containers | 03:16 | |
| *** dpawar has quit IRC | 03:17 | |
| *** mnasiadka has joined #openstack-containers | 03:21 | |
| *** mnasiadka has quit IRC | 03:27 | |
| *** dpawar has joined #openstack-containers | 03:31 | |
| *** mnasiadka has joined #openstack-containers | 03:38 | |
| *** mnasiadka has quit IRC | 03:43 | |
| *** lbragstad has joined #openstack-containers | 03:52 | |
| *** mnasiadka has joined #openstack-containers | 03:53 | |
| *** flwang1 has quit IRC | 03:56 | |
| *** dave-mccowan has quit IRC | 03:56 | |
| *** udesale has joined #openstack-containers | 03:57 | |
| *** mnasiadka has quit IRC | 03:57 | |
| *** jmlowe has joined #openstack-containers | 04:04 | |
| *** oikiki has joined #openstack-containers | 04:06 | |
| *** mnasiadka has joined #openstack-containers | 04:08 | |
| oikiki | flwang: Just realized I actually do have 2 tests for the delete client files function. See last 2 tests in file: test_delete_client_files(), test_delete_client_files_none() I was keeping them in same order in the test file as they appear in cert_manager.py :) | 04:09 |
| *** ykarel|away has joined #openstack-containers | 04:10 | |
| *** ramishra has joined #openstack-containers | 04:11 | |
| *** pengdake_ has quit IRC | 04:11 | |
| *** mnasiadka has quit IRC | 04:13 | |
| *** mnasiadka has joined #openstack-containers | 04:23 | |
| *** mnasiadka has quit IRC | 04:27 | |
| *** dpawar has quit IRC | 04:29 | |
| *** kiennt26 has quit IRC | 04:32 | |
| *** vijaykc4 has joined #openstack-containers | 04:35 | |
| *** lpetrut has joined #openstack-containers | 04:37 | |
| *** mnasiadka has joined #openstack-containers | 04:38 | |
| *** pengdake_ has joined #openstack-containers | 04:40 | |
| *** mnasiadka has quit IRC | 04:43 | |
| *** yamamoto has joined #openstack-containers | 04:44 | |
| *** threestrands has quit IRC | 04:50 | |
| *** mnasiadka has joined #openstack-containers | 04:53 | |
| *** mnasiadka has quit IRC | 04:58 | |
| *** vijaykc4 has quit IRC | 05:04 | |
| *** lpetrut has quit IRC | 05:05 | |
| *** mnasiadka has joined #openstack-containers | 05:08 | |
| *** ricolin has quit IRC | 05:09 | |
| *** vijaykc4 has joined #openstack-containers | 05:11 | |
| *** lpetrut has joined #openstack-containers | 05:11 | |
| *** mnasiadka has quit IRC | 05:13 | |
| *** oikiki has quit IRC | 05:15 | |
| *** pengdake_ has quit IRC | 05:15 | |
| *** mdnadeem has quit IRC | 05:18 | |
| *** mnasiadka has joined #openstack-containers | 05:23 | |
| *** fragatina has quit IRC | 05:26 | |
| *** mnasiadka has quit IRC | 05:28 | |
| *** lpetrut has quit IRC | 05:29 | |
| *** hongbin has quit IRC | 05:37 | |
| *** mnasiadka has joined #openstack-containers | 05:38 | |
| *** janki has joined #openstack-containers | 05:43 | |
| *** mnasiadka has quit IRC | 05:44 | |
| *** dpawar has joined #openstack-containers | 05:48 | |
| *** harlowja has joined #openstack-containers | 05:52 | |
| *** mnasiadka has joined #openstack-containers | 05:53 | |
| *** pengdake_ has joined #openstack-containers | 05:54 | |
| *** mdnadeem has joined #openstack-containers | 05:55 | |
| *** ykarel|away is now known as ykarel | 05:57 | |
| *** mnasiadka has quit IRC | 05:58 | |
| *** itlinux has joined #openstack-containers | 05:59 | |
| *** mnasiadka has joined #openstack-containers | 06:06 | |
| *** itlinux has quit IRC | 06:08 | |
| *** flwang1 has joined #openstack-containers | 06:11 | |
| *** mnasiadka has quit IRC | 06:12 | |
| *** vijaykc4 has quit IRC | 06:13 | |
| *** kiennt26 has joined #openstack-containers | 06:13 | |
| *** hieulq has joined #openstack-containers | 06:17 | |
| *** mnasiadka has joined #openstack-containers | 06:23 | |
| *** fragatina has joined #openstack-containers | 06:27 | |
| *** mnasiadka has quit IRC | 06:30 | |
| *** harlowja has quit IRC | 06:33 | |
| *** yamamoto has quit IRC | 06:41 | |
| *** yamamoto has joined #openstack-containers | 06:43 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/magnum-ui master: Imported Translations from Zanata https://review.openstack.org/543811 | 06:47 |
| *** shu-mutou is now known as shu-mutou-AWAY | 06:49 | |
| *** yamamoto has quit IRC | 06:50 | |
| *** yamamoto has joined #openstack-containers | 06:55 | |
| *** mjura has joined #openstack-containers | 06:56 | |
| *** lbragstad has quit IRC | 07:01 | |
| openstackgerrit | Merged openstack/magnum-ui master: Imported Translations from Zanata https://review.openstack.org/543811 | 07:05 |
| *** olivierbourdon38 has quit IRC | 07:07 | |
| *** vijaykc4 has joined #openstack-containers | 07:14 | |
| *** lpetrut has joined #openstack-containers | 07:15 | |
| *** mnasiadka has joined #openstack-containers | 07:16 | |
| *** hieulq has quit IRC | 07:17 | |
| *** b_bezak has joined #openstack-containers | 07:21 | |
| *** fragatina has quit IRC | 07:25 | |
| *** rcernin has quit IRC | 07:25 | |
| *** b_bezak has quit IRC | 07:26 | |
| *** olivierbourdon38 has joined #openstack-containers | 07:38 | |
| *** pcaruana has joined #openstack-containers | 07:41 | |
| *** vijaykc4 has quit IRC | 07:43 | |
| *** vijaykc4 has joined #openstack-containers | 07:44 | |
| *** AlexeyAbashkin has joined #openstack-containers | 07:48 | |
| *** dardelean has joined #openstack-containers | 08:02 | |
| *** b_bezak has joined #openstack-containers | 08:03 | |
| *** olivierbourdon38 has quit IRC | 08:06 | |
| *** gsimondon has joined #openstack-containers | 08:17 | |
| *** hieulq has joined #openstack-containers | 08:18 | |
| *** dsariel has quit IRC | 08:18 | |
| *** dsariel_ has quit IRC | 08:18 | |
| *** gbialas has joined #openstack-containers | 08:24 | |
| *** dardelean has quit IRC | 08:29 | |
| *** dardelean has joined #openstack-containers | 08:29 | |
| *** dardelean has quit IRC | 08:34 | |
| *** yamamoto has quit IRC | 08:35 | |
| *** yamamoto has joined #openstack-containers | 08:39 | |
| *** dsariel_ has joined #openstack-containers | 08:57 | |
| *** dsariel has joined #openstack-containers | 08:57 | |
| flwang1 | strigazi: ykarel: around？ | 09:03 |
| *** vijaykc4 has quit IRC | 09:04 | |
| *** kong has quit IRC | 09:07 | |
| *** vijaykc4 has joined #openstack-containers | 09:07 | |
| ykarel | flwang1, yes | 09:10 |
| flwang1 | ykarel: did you see any error after applying patch https://review.openstack.org/533593 | 09:12 |
| ykarel | flwang1, yes | 09:12 |
| *** dardelea_ has joined #openstack-containers | 09:12 | |
| *** ricolin has joined #openstack-containers | 09:12 | |
| flwang1 | on master node or minion node? | 09:12 |
| ykarel | master | 09:13 |
| ykarel | haven't checked minion | 09:13 |
| *** armaan has quit IRC | 09:14 | |
| flwang1 | ykarel: may I know what's your error? i'm testing it again because in my testing i can't see the master node when using 'kubectl get nodes' | 09:14 |
| ykarel | flwang1, http://logs.openstack.org/93/533593/15/check/magnum-functional-k8s/5cfb717/logs/cluster-nodes/master-test-172.24.5.8/kube-controller-manager.txt.gz#_Feb_08_14_11_38 | 09:14 |
| ykarel | flwang1, yes u will not see master in kubectl get nodes | 09:14 |
| ykarel | because kubelet is removed | 09:14 |
| ykarel | are u facing any issue if u don't see it in kubectl get nodes | 09:15 |
| flwang1 | so means now user even can't taint it? | 09:16 |
| *** dardelea_ has quit IRC | 09:17 | |
| ykarel | means? | 09:17 |
| flwang1 | "because kubelet is removed" | 09:19 |
| *** dardelea_ has joined #openstack-containers | 09:20 | |
| flwang1 | ok, i just tested, it works, could be a bug of my calico driver | 09:20 |
| ykarel | okk | 09:21 |
| *** ykarel is now known as ykarel|lunch | 09:22 | |
| *** dpawar has quit IRC | 09:24 | |
| openstackgerrit | Feilong Wang proposed openstack/magnum master: Support calico as network driver https://review.openstack.org/540352 | 09:29 |
| openstackgerrit | Merged openstack/magnum master: Driver's name are case sensitive https://review.openstack.org/542540 | 09:38 |
| *** armaan has joined #openstack-containers | 09:47 | |
| *** gbialas has quit IRC | 09:49 | |
| *** b_bezak has quit IRC | 09:50 | |
| *** armaan has quit IRC | 09:50 | |
| *** b_bezak has joined #openstack-containers | 09:50 | |
| flwang1 | strigazi: ykarel|lunch: do we have a meeting in 10 mins? | 09:50 |
| *** armaan has joined #openstack-containers | 09:50 | |
| flwang1 | or it's tomorrow? | 09:51 |
| strigazi | flwang1: it is today | 09:51 |
| flwang1 | cool | 09:51 |
| *** salmankhan has joined #openstack-containers | 09:53 | |
| *** b_bezak_ has joined #openstack-containers | 09:54 | |
| *** b_bezak has quit IRC | 09:55 | |
| *** yamamoto has quit IRC | 09:58 | |
| *** gbialas has joined #openstack-containers | 09:59 | |
| *** kiennt26 has quit IRC | 09:59 | |
| strigazi | #startmeeting containers | 10:00 |
| openstack | Meeting started Tue Feb 13 10:00:17 2018 UTC and is due to finish in 60 minutes. The chair is strigazi. Information about MeetBot at http://wiki.debian.org/MeetBot. | 10:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 10:00 |
| *** openstack changes topic to " (Meeting topic: containers)" | 10:00 | |
| openstack | The meeting name has been set to 'containers' | 10:00 |
| strigazi | #topic Roll Call | 10:00 |
| *** openstack changes topic to "Roll Call (Meeting topic: containers)" | 10:00 | |
| flwang1 | o/ | 10:00 |
| slunkad | hi | 10:00 |
| strigazi | hello slunkad flwang1 | 10:01 |
| strigazi | #link https://wiki.openstack.org/wiki/Meetings/Containers#Agenda_for_2018-02-13_1600_UTC | 10:02 |
| strigazi | #link https://wiki.openstack.org/wiki/Meetings/Containers#Agenda_for_2018-02-13_1000_UTC | 10:02 |
| strigazi | new time | 10:02 |
| strigazi | #topic Announcements | 10:02 |
| *** openstack changes topic to "Announcements (Meeting topic: containers)" | 10:02 | |
| *** hieulq has quit IRC | 10:02 | |
| strigazi | Branch stable/queens is cut | 10:02 |
| strigazi | The final release is in two weeks | 10:03 |
| flwang1 | strigazi: do we still have chance to merge the calico driver ? | 10:03 |
| strigazi | flwang1: yes | 10:03 |
| flwang1 | strigazi: cool | 10:03 |
| strigazi | flwang1: we can add changes that don't change requirements and they don't break client etc | 10:04 |
| flwang1 | strigazi: got it | 10:04 |
| strigazi | #topic Blueprints/Bugs/Ideas | 10:04 |
| *** openstack changes topic to "Blueprints/Bugs/Ideas (Meeting topic: containers)" | 10:04 | |
| *** pengdake_ has quit IRC | 10:05 | |
| strigazi | Calico network driver for kubernetes https://review.openstack.org/#/c/540352/ flwang1 is there a verification example somewhere? We can add in the docs | 10:06 |
| flwang1 | strigazi: yep | 10:06 |
| flwang1 | just create a template and using 'calico' as the network driver | 10:06 |
| strigazi | cool, I'll test after the meeting. I mean test a network policy :) | 10:07 |
| flwang1 | strigazi: thanks a lot | 10:07 |
| strigazi | we can check after | 10:07 |
| flwang1 | strigazi: btw, we (catalyst cloud) are also upstreaming this one https://review.openstack.org/#/c/543265/ | 10:07 |
| flwang1 | support using octavia as LB | 10:08 |
| flwang1 | given the lbaas of neutron is deprecating, i think it makes much sense | 10:08 |
| *** vijaykc4 has quit IRC | 10:09 | |
| strigazi | I thought that neutron lbaas was by default octavia v2 | 10:09 |
| armaan | flwang1: hi, will there be a migration path for moving lbaas v2 LBs to Octavia? | 10:10 |
| strigazi | flwang1: Thanks, I'll take a look | 10:10 |
| strigazi | armaan: it's the above patch | 10:10 |
| strigazi | https://review.openstack.org/#/c/543265/ | 10:10 |
| strigazi | #link https://review.openstack.org/#/c/543265/ | 10:10 |
| flwang1 | armaan: there is no migration path unfortunately in magnum | 10:10 |
| flwang1 | there is a new config option to indicate if you have octavia deployed | 10:11 |
| armaan | flwang1: nice! last time neutron team made a mess with lbaas v1 by providing no upgrade path, their response was that operators delele the v1 lbs and create new lbs, which was a nightmare | 10:11 |
| strigazi | That's the closest possible option for a migration. New clusters will have octavia v2 | 10:12 |
| armaan | strigazi: thanks for sharing the link! | 10:12 |
| *** ykarel|lunch is now known as ykarel | 10:13 | |
| strigazi | Next is, cluster federation | 10:13 |
| armaan | okie, if we can migrate LBs outside of Magnum, even then perhaps we can find workaround for this. | 10:13 |
| armaan | strigazi: Will it be possible to upgrade K8s in Queens? | 10:13 |
| *** flwang1 has quit IRC | 10:13 | |
| *** flwang1 has joined #openstack-containers | 10:14 | |
| armaan | I mean live upgrading of K8s bits to a newer version | 10:14 |
| strigazi | armaan: I'll try to add a first implementation | 10:14 |
| *** yamamoto has joined #openstack-containers | 10:15 | |
| strigazi | About cluster federation, https://review.openstack.org/#/q/status:open+project:openstack/magnum+branch:master+topic:bp/federation-api | 10:15 |
| armaan | nice! | 10:15 |
| armaan | btw what is your opinion on something like this https://review.openstack.org/#/c/459498/ | 10:16 |
| strigazi | The first patch is megred and the api layer is ready to take it in | 10:16 |
| *** salmankhan1 has joined #openstack-containers | 10:16 | |
| strigazi | armaan: we have kube_tag to set the tag for the kubernetes containers. | 10:16 |
| strigazi | armaan: the api will still set the kube_tag to a newer version | 10:17 |
| *** salmankhan has quit IRC | 10:17 | |
| *** salmankhan1 is now known as salmankhan | 10:17 | |
| armaan | Okay, i was not aware of this. Let me google it ... | 10:17 |
| strigazi | flwang1: Is catalyst interested in cluster federation? | 10:19 |
| flwang1 | strigazi: not really at this moment | 10:19 |
| flwang1 | does GKE support that? | 10:19 |
| strigazi | flwang1 it is possible to federate with a cluster in their cloud | 10:20 |
| flwang1 | if so, we may evaluate it later | 10:20 |
| strigazi | flwang1: for marketing purposes I guess they don't offer it as option | 10:21 |
| flwang1 | but not on our MVP list | 10:21 |
| *** yamamoto has quit IRC | 10:22 | |
| strigazi | ok, next | 10:22 |
| strigazi | enable_drivers option https://review.openstack.org/#/c/541663 | 10:22 |
| strigazi | flwang1: we just need release notes, I will test it | 10:23 |
| flwang1 | strigazi: i can add a release note after the meeting | 10:23 |
| strigazi | flwang1: thanks | 10:24 |
| strigazi | #topic Open Discussion | 10:24 |
| *** openstack changes topic to "Open Discussion (Meeting topic: containers)" | 10:24 | |
| strigazi | slunkad: flwang1 armaan do you want to discuss anything? | 10:25 |
| slunkad | strigazi: do we know of any issues getting barbican to work as cert manager in magnum clusters? | 10:25 |
| slunkad | I recently ran into a problem when trying it out | 10:26 |
| strigazi | slunkad check your keystone_auth and keystone_authtoken sections in magnum.conf | 10:26 |
| strigazi | slunkad: https://docs.openstack.org/magnum/latest/install/install-obs.html | 10:27 |
| slunkad | I did, is there anything specific needed? the error I get is about domain not being found in project | 10:27 |
| armaan | strigazi: In my testing setup, i observed that stable/pike is broken because of this https://bugs.launchpad.net/magnum/+bug/1744362 | 10:27 |
| strigazi | slunkad: keystone_authtoken | 10:27 |
| openstack | Launchpad bug 1744362 in Magnum "heat-container-agent fails to communicate with Keystone." [Medium,Confirmed] | 10:27 |
| slunkad | strigazi: is this also valid for newton? | 10:28 |
| strigazi | slunkad: yes | 10:28 |
| slunkad | strigazi: ok thanks will check then | 10:28 |
| strigazi | slunkad: admin_user admin_password admin_tenant_name | 10:28 |
| flwang1 | strigazi: is there any migration path from x509 to barbican? | 10:28 |
| strigazi | flwang1: no | 10:28 |
| slunkad | strigazi: yes | 10:28 |
| flwang1 | so if we deploy magnum firstly without barbican, how can we migrate to barbican later? | 10:29 |
| strigazi | armaan: the bug is in heat :( AFAIK we can't do anything magnum-side | 10:29 |
| strigazi | flwang1: there is no supported path to do that | 10:29 |
| flwang1 | strigazi: ok, i see | 10:30 |
| strigazi | flwang1: you could import manually the certs, one by one | 10:30 |
| strigazi | flwang1: in theory it can work | 10:30 |
| flwang1 | ok, i see. | 10:30 |
| flwang1 | i could upstream the 'magic script' later if we have to do that | 10:30 |
| strigazi | take ca from db, use trusd_id and trustee user to import the certs to barbican | 10:31 |
| *** manikanta_tadi has joined #openstack-containers | 10:31 | |
| flwang1 | got it | 10:31 |
| *** vijaykc4 has joined #openstack-containers | 10:32 | |
| strigazi | armaan: exposing the admin or internal endpoint would work | 10:32 |
| *** fghaas has joined #openstack-containers | 10:32 | |
| armaan | strigazi: thanks! I will take it to the #heat folks then | 10:32 |
| strigazi | armaan: I don't know any security reason to not expose the admin and internal endpoints over ssl if you *already* expose the public one | 10:33 |
| strigazi | armaan: most openstack services offer the same functionality with all endpoints | 10:33 |
| armaan | ok, heat agent is currently disabled in our environment | 10:34 |
| armaan | strigazi: AFAIK, we cannot expose our internal endpoints because of keystone | 10:34 |
| strigazi | armaan: why not? | 10:35 |
| armaan | no ssl on internal endpoints | 10:35 |
| openstackgerrit | Ricardo Rocha proposed openstack/magnum master: [kubernetes] add ingress controller https://review.openstack.org/528756 | 10:35 |
| strigazi | armaan: ok, I get this but you can do the same config for the internal on I guess | 10:36 |
| strigazi | armaan: ok, I get this but you can do the same config for the internal one I guess | 10:36 |
| strigazi | slunkad: Do you need anything else for the config? | 10:37 |
| *** vijaykc4 has quit IRC | 10:37 | |
| strigazi | slunkad: did you try again? | 10:38 |
| slunkad | strigazi: I did but still seems to fail with the same error | 10:38 |
| strigazi | and the trust section? | 10:38 |
| strigazi | slunkad: does it have the required fields? | 10:39 |
| *** dardelea_ has quit IRC | 10:39 | |
| armaan | strigazi: Yeah, we could do that. I will have a discussion about this with my team. | 10:39 |
| slunkad | strigazi: seems so, let me try again | 10:39 |
| *** dardelea_ has joined #openstack-containers | 10:40 | |
| *** vijaykc4 has joined #openstack-containers | 10:41 | |
| openstackgerrit | Ricardo Rocha proposed openstack/magnum master: [k8s] allow enabling kubernetes cert manager api https://review.openstack.org/529818 | 10:42 |
| strigazi | folks, is there anything else to discuss? | 10:42 |
| fghaas | strigazi: yup :) | 10:42 |
| fghaas | strigazi: I realize I might be barging in here so apologies for that, but armaan just asked me to join in here about https://review.openstack.org/#/c/459498/ (i.e. --coe-version vs. kube_tag) | 10:43 |
| fghaas | If I understand you correctly, then you're suggesting for *operators* to select the kubernetes version they would like to enable users to deploy. That gerrit change, as I understand it, talks about enabling that choice for *users* though — a slightly different question. | 10:44 |
| fghaas | So I guess our question is, do you have thoughts on pros and cons for enabling users to select a kubernetes release to deploy, via an API/CLI call? | 10:45 |
| strigazi | fghaas coe_version is means to be used for the actual version. kube_tag on the other hand is for the tag that the nodes are going to pull. | 10:46 |
| strigazi | fghaas: user can select the version that they want via the kube_tag label. | 10:47 |
| strigazi | fghaas: users can use the cli eg with --labels kube_tag=v1.9.1 | 10:47 |
| fghaas | OK, perfect, and then `coe_version` (as a read-only attribute) would correctly return that? | 10:48 |
| slunkad | strigazi: http://paste.openstack.org/show/670986/ fails with this config | 10:48 |
| strigazi | fghaas: at the moment, it doesn't return the correct value] | 10:48 |
| strigazi | fghaas: since the heat-agent is added we can export the version from the node to heat and then to the cluster | 10:50 |
| strigazi | fghaas: at an api level coe_version will be read-only. makes sense? | 10:50 |
| strigazi | slunkad: [trust] section? | 10:50 |
| fghaas | strigazi: I see; so that means we just need to educate users that only kubectl --version is authoritative. No worries, we can do that. And, using the --labels approach requires the heat agent. Did I parse that correctly? | 10:50 |
| strigazi | fghaas yes, kubectl --version is the source of truth | 10:51 |
| strigazi | fghaas: no, the heat-agent is not required for kube_tag | 10:51 |
| strigazi | fghaas: kube_tag is used here: | 10:52 |
| strigazi | fghaas: http://git.openstack.org/cgit/openstack/magnum/tree/magnum/drivers/common/templates/kubernetes/fragments/configure-kubernetes-master.sh#n8 | 10:52 |
| strigazi | fghaas: we also miss an entry in the docs for it :( | 10:52 |
| slunkad | strigazi: ah I think i might be missing the trustee_domain_admin_name, I'm using the trustee_domain_admin_id, checking now | 10:53 |
| strigazi | fghaas: we miss it here http://git.openstack.org/cgit/openstack/magnum/tree/doc/source/user/index.rst#n294 | 10:53 |
| fghaas | strigazi: Well *that* can be remedied. :) | 10:54 |
| strigazi | slunkad: you need three entries in the trust section | 10:55 |
| strigazi | fghaas: you work with armaan ? | 10:55 |
| strigazi | fghaas: same team? | 10:55 |
| fghaas | strigazi: no longer same team, but same company (since 2013 :) ) | 10:56 |
| *** dardelea_ has quit IRC | 10:56 | |
| strigazi | fghaas I meant same company, cool :) | 10:56 |
| *** ricolin has quit IRC | 10:56 | |
| *** dpawar has joined #openstack-containers | 10:56 | |
| strigazi | time is almost up, we can wrap the meeting, if you need anything to be logged speak now :) | 10:57 |
| strigazi | cool, thanks folks, see you next week | 10:58 |
| strigazi | #endmeeting | 10:58 |
| *** openstack changes topic to "OpenStack Containers Team" | 10:58 | |
| openstack | Meeting ended Tue Feb 13 10:58:11 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 10:58 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/containers/2018/containers.2018-02-13-10.00.html | 10:58 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/containers/2018/containers.2018-02-13-10.00.txt | 10:58 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/containers/2018/containers.2018-02-13-10.00.log.html | 10:58 |
| *** vijaykc4 has quit IRC | 11:02 | |
| *** dardelea_ has joined #openstack-containers | 11:02 | |
| slunkad | strigazi: still the same error | 11:05 |
| *** dsariel has quit IRC | 11:07 | |
| *** dsariel_ has quit IRC | 11:07 | |
| strigazi | slunkad: in keystone_auth | 11:09 |
| strigazi | user_domain_id = default | 11:09 |
| strigazi | project_domain_id = default | 11:09 |
| strigazi | add ^^ | 11:09 |
| *** yamamoto has joined #openstack-containers | 11:13 | |
| *** vijaykc4 has joined #openstack-containers | 11:18 | |
| *** vijaykc4 has quit IRC | 11:18 | |
| *** serlex has joined #openstack-containers | 11:19 | |
| *** vijaykc4 has joined #openstack-containers | 11:20 | |
| *** gbialas has quit IRC | 11:23 | |
| *** vijaykc4 has quit IRC | 11:24 | |
| *** mnasiadka has quit IRC | 11:27 | |
| *** ykarel is now known as ykarel|afk | 11:36 | |
| slunkad | strigazi: ok adding that helped | 11:37 |
| slunkad | thanks! | 11:37 |
| strigazi | slunkad: cool :) | 11:42 |
| *** olivierbourdon38 has joined #openstack-containers | 11:47 | |
| *** b_bezak_ has quit IRC | 11:48 | |
| *** b_bezak has joined #openstack-containers | 11:48 | |
| *** salmankhan has quit IRC | 11:50 | |
| *** salmankhan has joined #openstack-containers | 11:52 | |
| *** b_bezak has quit IRC | 11:53 | |
| *** pcichy has joined #openstack-containers | 12:01 | |
| *** mnasiadka has joined #openstack-containers | 12:01 | |
| *** portdirect has quit IRC | 12:03 | |
| *** portdirect has joined #openstack-containers | 12:03 | |
| *** gbialas has joined #openstack-containers | 12:08 | |
| *** pcichy has quit IRC | 12:09 | |
| *** ykarel|afk is now known as ykarel | 12:23 | |
| *** vijaykc4 has joined #openstack-containers | 12:26 | |
| openstackgerrit | Florian Haas proposed openstack/magnum master: Document use of kube_tag label https://review.openstack.org/543918 | 12:30 |
| fghaas | ^^ there you go, strigazi. :) | 12:30 |
| *** ykarel_ has joined #openstack-containers | 12:33 | |
| *** ykarel has quit IRC | 12:35 | |
| *** armaan has quit IRC | 12:38 | |
| *** b_bezak has joined #openstack-containers | 12:41 | |
| *** ianychoi_ has joined #openstack-containers | 12:42 | |
| *** ianychoi has quit IRC | 12:46 | |
| *** armaan has joined #openstack-containers | 13:02 | |
| *** vijaykc4 has quit IRC | 13:13 | |
| *** pcaruana has quit IRC | 13:16 | |
| *** vijaykc4 has joined #openstack-containers | 13:18 | |
| *** vijaykc4 has quit IRC | 13:19 | |
| *** vijaykc4 has joined #openstack-containers | 13:20 | |
| *** lbragstad has joined #openstack-containers | 13:20 | |
| *** olivierbourdon38 has quit IRC | 13:22 | |
| *** vijaykc4 has quit IRC | 13:22 | |
| *** vijaykc4 has joined #openstack-containers | 13:23 | |
| *** janki has quit IRC | 13:32 | |
| *** dsariel_ has joined #openstack-containers | 13:36 | |
| *** dave-mccowan has joined #openstack-containers | 13:36 | |
| *** dsariel has joined #openstack-containers | 13:37 | |
| *** vijaykc4 has quit IRC | 13:39 | |
| *** vijaykc4 has joined #openstack-containers | 13:39 | |
| *** vijaykc4 has quit IRC | 13:40 | |
| openstackgerrit | Florian Haas proposed openstack/magnum master: Document use of kube_tag label https://review.openstack.org/543918 | 13:41 |
| *** yamamoto has quit IRC | 13:41 | |
| *** ykarel_ is now known as ykarel|afk | 13:47 | |
| *** ianychoi_ has quit IRC | 13:48 | |
| *** ianychoi_ has joined #openstack-containers | 13:49 | |
| *** fragatina has joined #openstack-containers | 13:49 | |
| *** zul has quit IRC | 13:56 | |
| *** ykarel_ has joined #openstack-containers | 13:56 | |
| *** zul has joined #openstack-containers | 13:57 | |
| *** ykarel|afk has quit IRC | 13:59 | |
| *** dpawar has quit IRC | 14:05 | |
| *** yamamoto has joined #openstack-containers | 14:27 | |
| *** fragatina has quit IRC | 14:31 | |
| *** openstackgerrit has quit IRC | 14:33 | |
| *** armaan has quit IRC | 14:35 | |
| *** armaan has joined #openstack-containers | 14:41 | |
| *** gbialas has quit IRC | 14:49 | |
| *** gbialas has joined #openstack-containers | 14:49 | |
| *** mgoddard_ has joined #openstack-containers | 14:53 | |
| *** ramishra has quit IRC | 14:56 | |
| *** armaan has quit IRC | 15:06 | |
| *** pcichy has joined #openstack-containers | 15:24 | |
| *** lpetrut has quit IRC | 15:24 | |
| *** pcichy has quit IRC | 15:34 | |
| *** itlinux has joined #openstack-containers | 16:01 | |
| *** gbialas has quit IRC | 16:02 | |
| *** mjura has quit IRC | 16:03 | |
| *** gsimondon has quit IRC | 16:04 | |
| *** b_bezak has quit IRC | 16:09 | |
| *** mgoddard_ has quit IRC | 16:22 | |
| *** udesale has quit IRC | 16:27 | |
| *** vijaykc4 has joined #openstack-containers | 16:27 | |
| *** ykarel_ has quit IRC | 16:28 | |
| *** b_bezak has joined #openstack-containers | 16:34 | |
| *** mnasiadka has quit IRC | 16:42 | |
| *** serlex has quit IRC | 16:43 | |
| *** vijaykc4 has quit IRC | 16:43 | |
| *** itlinux has quit IRC | 16:46 | |
| *** vijaykc4 has joined #openstack-containers | 16:46 | |
| *** pcaruana has joined #openstack-containers | 16:47 | |
| *** olivierbourdon38 has joined #openstack-containers | 16:49 | |
| *** mdnadeem has quit IRC | 16:49 | |
| *** itlinux has joined #openstack-containers | 16:50 | |
| *** cliles has joined #openstack-containers | 16:51 | |
| *** mnasiadka has joined #openstack-containers | 16:52 | |
| *** lpetrut has joined #openstack-containers | 16:53 | |
| *** oikiki has joined #openstack-containers | 16:55 | |
| *** mnasiadka has quit IRC | 16:57 | |
| oikiki | strigazi: ping | 17:00 |
| *** yasemin has quit IRC | 17:01 | |
| *** yasemin has joined #openstack-containers | 17:02 | |
| *** mnasiadka has joined #openstack-containers | 17:07 | |
| *** vijaykc4 has quit IRC | 17:11 | |
| *** mnasiadka has quit IRC | 17:12 | |
| *** vijaykc4 has joined #openstack-containers | 17:14 | |
| *** vijaykc4 has quit IRC | 17:15 | |
| *** armaan has joined #openstack-containers | 17:20 | |
| *** yamamoto has quit IRC | 17:21 | |
| *** mnasiadka has joined #openstack-containers | 17:22 | |
| *** fghaas has quit IRC | 17:23 | |
| *** yamamoto has joined #openstack-containers | 17:24 | |
| *** yamamoto has quit IRC | 17:24 | |
| *** gsimondon has joined #openstack-containers | 17:24 | |
| *** mdnadeem has joined #openstack-containers | 17:24 | |
| *** itlinux has quit IRC | 17:26 | |
| slunkad | strigazi: where can i find working fedora atomic image? | 17:26 |
| *** mnasiadka has quit IRC | 17:27 | |
| *** itlinux has joined #openstack-containers | 17:31 | |
| *** dsariel_ has quit IRC | 17:35 | |
| *** dsariel has quit IRC | 17:35 | |
| *** pcichy has joined #openstack-containers | 17:37 | |
| *** mnasiadka has joined #openstack-containers | 17:37 | |
| *** AlexeyAbashkin has quit IRC | 17:38 | |
| *** yamamoto has joined #openstack-containers | 17:40 | |
| *** mnasiadka has quit IRC | 17:42 | |
| *** yamamoto has quit IRC | 17:45 | |
| *** mnasiadka has joined #openstack-containers | 17:52 | |
| *** pcaruana has quit IRC | 17:55 | |
| fishbone__ | hello all, can anybody help, I'm running into a strange issue on the fedora-atomic instances, standard_init_linux.go:178: exec user process caused "permission denied" every time the docker run command is tried | 17:57 |
| fishbone__ | this is prohibiting the creation of the swarm container | 17:57 |
| *** mnasiadka has quit IRC | 17:57 | |
| *** mgoddard_ has joined #openstack-containers | 17:58 | |
| oikiki | fishbone__ fwiw I've been using a clean install of ubuntu+devstack, was recently able to create swarm clusters and execute docker run without that error. | 18:02 |
| fishbone__ | oikiki: hmm, maybe I'll try a new atomic image in that case, I am using a manual pike install on ubuntu that was upgraded from ocata | 18:04 |
| *** mnasiadka has joined #openstack-containers | 18:05 | |
| *** pcaruana has joined #openstack-containers | 18:06 | |
| *** yamamoto has joined #openstack-containers | 18:06 | |
| *** yamamoto has quit IRC | 18:06 | |
| *** mnasiadka has quit IRC | 18:12 | |
| *** gsimondon has quit IRC | 18:13 | |
| *** mnasiadka has joined #openstack-containers | 18:22 | |
| *** oikiki has quit IRC | 18:25 | |
| *** oikiki has joined #openstack-containers | 18:25 | |
| *** mnasiadka has quit IRC | 18:27 | |
| *** itlinux has quit IRC | 18:30 | |
| *** dardele__ has joined #openstack-containers | 18:31 | |
| *** spiette_ has quit IRC | 18:33 | |
| *** mdnadeem has quit IRC | 18:33 | |
| *** dardelea_ has quit IRC | 18:33 | |
| *** dardele__ has quit IRC | 18:35 | |
| *** dardelea_ has joined #openstack-containers | 18:36 | |
| *** pcichy has quit IRC | 18:36 | |
| *** mnasiadka has joined #openstack-containers | 18:37 | |
| *** oikiki has quit IRC | 18:38 | |
| *** oikiki has joined #openstack-containers | 18:39 | |
| *** dardelea_ has quit IRC | 18:41 | |
| *** mnasiadka has quit IRC | 18:42 | |
| *** itlinux has joined #openstack-containers | 18:44 | |
| *** pcaruana has quit IRC | 18:45 | |
| *** basvanveen has joined #openstack-containers | 18:52 | |
| *** vijaykc4 has joined #openstack-containers | 18:52 | |
| *** mnasiadka has joined #openstack-containers | 18:52 | |
| *** vijaykc4 has quit IRC | 18:52 | |
| *** lpetrut has quit IRC | 18:53 | |
| *** mnasiadka has quit IRC | 18:57 | |
| *** itlinux has quit IRC | 18:57 | |
| *** itlinux has joined #openstack-containers | 18:59 | |
| *** pcichy has joined #openstack-containers | 19:02 | |
| *** harlowja has joined #openstack-containers | 19:03 | |
| *** dardelea_ has joined #openstack-containers | 19:05 | |
| *** yamamoto has joined #openstack-containers | 19:06 | |
| *** salmankhan has quit IRC | 19:06 | |
| *** mnasiadka has joined #openstack-containers | 19:07 | |
| *** flwang1 has quit IRC | 19:09 | |
| *** dardelea_ has quit IRC | 19:09 | |
| *** vijaykc4 has joined #openstack-containers | 19:11 | |
| *** mnasiadka has quit IRC | 19:12 | |
| *** hongbin has joined #openstack-containers | 19:12 | |
| *** yamamoto has quit IRC | 19:15 | |
| *** vijaykc4 has quit IRC | 19:15 | |
| *** mnasiadka has joined #openstack-containers | 19:22 | |
| *** mnasiadka has quit IRC | 19:27 | |
| *** fghaas has joined #openstack-containers | 19:34 | |
| *** mnasiadka has joined #openstack-containers | 19:37 | |
| *** itlinux has quit IRC | 19:39 | |
| *** armaan has quit IRC | 19:41 | |
| *** armaan has joined #openstack-containers | 19:42 | |
| *** mnasiadka has quit IRC | 19:42 | |
| *** itlinux has joined #openstack-containers | 19:43 | |
| *** itlinux has quit IRC | 19:46 | |
| *** vijaykc4 has joined #openstack-containers | 19:47 | |
| *** b_bezak has quit IRC | 19:49 | |
| *** mnasiadka has joined #openstack-containers | 19:52 | |
| *** mnasiadka has quit IRC | 19:57 | |
| fishbone__ | oikiki: with the new fedora atomic 27 image from their website i am getting the same error: standard_init_linux.go:178: exec user process caused "permission denied" | 20:04 |
| fishbone__ | oikiki: do any preparations need to be done on the image beforehand, I know I need to install etcd as the image does not come with it | 20:05 |
| *** mnasiadka has joined #openstack-containers | 20:07 | |
| oikiki | fishbone__ not that I know of, but perhaps someone with more experience with swarm can chime in? | 20:08 |
| oikiki | fishbone__ are you sure that your docker permissions are correct? | 20:09 |
| fishbone__ | oikiki: I am not, the only thing I have done is install etcd on the image, where should I be looking for those permissions? | 20:09 |
| *** mnasiadka has quit IRC | 20:12 | |
| *** mnasiadka has joined #openstack-containers | 20:23 | |
| oikiki | fishbone__ I'm just starting out with this but you could start by checking the permissions where docker is installed and go out from there? | 20:25 |
| oikiki | fishbone__ on its face it looks like something needs a +x | 20:26 |
| oikiki | but maybe someone more experienced with magnum could chime in? | 20:27 |
| *** mnasiadka has quit IRC | 20:28 | |
| *** dardelea_ has joined #openstack-containers | 20:29 | |
| *** mgoddard_ has quit IRC | 20:30 | |
| fishbone__ | oikiki: thanks for your help and insight; I tested applying 777 to the mounted /var/lib/docker and to the /etc/docker directories and the error persists. I am doing research that isn't leading me to a probable cause of this | 20:32 |
| *** basvanveen has quit IRC | 20:33 | |
| *** itlinux has joined #openstack-containers | 20:35 | |
| *** armaan has quit IRC | 20:37 | |
| oikiki | fishbone__ on a cursory search im seeing that this is a not uncommon docker problem tho the fixes seems to vary =( | 20:37 |
| *** dardelea_ has quit IRC | 20:37 | |
| *** dardelea_ has joined #openstack-containers | 20:38 | |
| *** mnasiadka has joined #openstack-containers | 20:38 | |
| *** vijaykc4 has quit IRC | 20:39 | |
| *** dardelea_ has quit IRC | 20:43 | |
| *** mnasiadka has quit IRC | 20:44 | |
| *** salmankhan has joined #openstack-containers | 20:47 | |
| *** salmankhan has quit IRC | 20:51 | |
| *** mnasiadka has joined #openstack-containers | 20:53 | |
| *** mnasiadka has quit IRC | 20:59 | |
| *** armaan has joined #openstack-containers | 21:06 | |
| *** mnasiadka has joined #openstack-containers | 21:08 | |
| *** mnasiadka has quit IRC | 21:13 | |
| *** spiette has joined #openstack-containers | 21:14 | |
| *** olivierbourdon38 has quit IRC | 21:22 | |
| *** mnasiadka has joined #openstack-containers | 21:23 | |
| *** oikiki has quit IRC | 21:26 | |
| *** oikiki has joined #openstack-containers | 21:26 | |
| *** mnasiadka has quit IRC | 21:28 | |
| fishbone__ | oikiki: after digging I came to this; I installed etcd manually on the image as it isn't installed normally, however; after launching the swarm it listens on 127.0.0.1 instead of the assigned IP from the template. Any way around this you think? | 21:31 |
| *** mnasiadka has joined #openstack-containers | 21:31 | |
| *** mnasiadka has quit IRC | 21:36 | |
| *** mnasiadka has joined #openstack-containers | 21:38 | |
| *** openstackstatus has quit IRC | 21:43 | |
| *** mnasiadka has quit IRC | 21:43 | |
| *** openstackstatus has joined #openstack-containers | 21:44 | |
| *** ChanServ sets mode: +v openstackstatus | 21:44 | |
| oikiki | fishbone__ i'm not sure, sorry =( | 21:49 |
| *** mnasiadka has joined #openstack-containers | 21:53 | |
| *** mnasiadka has quit IRC | 21:58 | |
| *** rcernin has joined #openstack-containers | 22:05 | |
| *** mnasiadka has joined #openstack-containers | 22:08 | |
| *** mnasiadka has quit IRC | 22:13 | |
| *** itlinux has quit IRC | 22:23 | |
| *** mnasiadka has joined #openstack-containers | 22:23 | |
| *** itlinux has joined #openstack-containers | 22:27 | |
| *** mnasiadka has quit IRC | 22:28 | |
| *** mnasiadka has joined #openstack-containers | 22:38 | |
| *** flwang1 has joined #openstack-containers | 22:42 | |
| *** mnasiadka has quit IRC | 22:43 | |
| *** armaan has quit IRC | 22:43 | |
| *** itlinux has quit IRC | 22:46 | |
| *** mnasiadka has joined #openstack-containers | 22:53 | |
| *** kong has joined #openstack-containers | 22:55 | |
| *** mnasiadka has quit IRC | 22:57 | |
| *** mnasiadka has joined #openstack-containers | 23:08 | |
| *** hongbin has quit IRC | 23:10 | |
| *** mnasiadka has quit IRC | 23:12 | |
| *** clenimar has quit IRC | 23:17 | |
| *** dardelean has joined #openstack-containers | 23:21 | |
| *** mnasiadka has joined #openstack-containers | 23:22 | |
| *** mnasiadka has quit IRC | 23:27 | |
| *** dsariel_ has joined #openstack-containers | 23:27 | |
| *** dsariel has joined #openstack-containers | 23:28 | |
| *** mnasiadka has joined #openstack-containers | 23:38 | |
| *** dsariel has quit IRC | 23:38 | |
| *** dsariel_ has quit IRC | 23:38 | |
| *** mnasiadka has quit IRC | 23:43 | |
| *** dardelean has quit IRC | 23:52 | |
| *** mnasiadka has joined #openstack-containers | 23:53 | |
| *** mnasiadka has quit IRC | 23:57 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!