*** oikiki has quit IRC | 01:07 | |
*** zhubingbing has joined #openstack-containers | 01:11 | |
*** hongbin has joined #openstack-containers | 01:12 | |
*** itlinux has quit IRC | 01:12 | |
*** zhubingbing has quit IRC | 01:15 | |
*** harlowja has quit IRC | 01:20 | |
*** pcichy has quit IRC | 02:28 | |
*** AlexeyAbashkin has joined #openstack-containers | 02:36 | |
*** AlexeyAbashkin has quit IRC | 02:40 | |
*** hongbin_ has joined #openstack-containers | 02:42 | |
*** hongbin has quit IRC | 02:43 | |
*** fragatina has quit IRC | 02:46 | |
*** fragatina has joined #openstack-containers | 02:51 | |
*** fragatina has quit IRC | 02:51 | |
*** shu-mutou has joined #openstack-containers | 03:13 | |
*** AlexeyAbashkin has joined #openstack-containers | 03:36 | |
*** AlexeyAbashkin has quit IRC | 03:40 | |
*** ykarel|afk has joined #openstack-containers | 03:51 | |
*** flwang has quit IRC | 03:57 | |
*** hongbin_ has quit IRC | 04:02 | |
*** janki has joined #openstack-containers | 04:02 | |
*** udesale has joined #openstack-containers | 04:05 | |
*** fragatina has joined #openstack-containers | 04:08 | |
*** fragatina has quit IRC | 04:09 | |
*** fragatina has joined #openstack-containers | 04:10 | |
*** harlowja has joined #openstack-containers | 04:12 | |
*** ianychoi_ has joined #openstack-containers | 04:12 | |
*** zhubingbing has joined #openstack-containers | 04:13 | |
*** ianychoi has quit IRC | 04:15 | |
*** dave-mccowan has quit IRC | 04:17 | |
*** zhubingbing has quit IRC | 04:18 | |
*** ricolin has joined #openstack-containers | 04:20 | |
*** harlowja has quit IRC | 04:40 | |
*** ramishra has quit IRC | 04:51 | |
*** ramishra has joined #openstack-containers | 04:58 | |
*** shu-mutou is now known as shu-mutow | 05:16 | |
*** dpawar has joined #openstack-containers | 05:17 | |
*** mdnadeem has joined #openstack-containers | 05:31 | |
*** sidx64 has joined #openstack-containers | 05:32 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/magnum master: Updated from global requirements https://review.openstack.org/533884 | 05:35 |
---|---|---|
openstackgerrit | OpenStack Proposal Bot proposed openstack/magnum-tempest-plugin master: Updated from global requirements https://review.openstack.org/536313 | 05:35 |
*** yasemin has joined #openstack-containers | 05:43 | |
*** ykarel|afk is now known as ykarel | 05:47 | |
*** sidx64 has quit IRC | 05:49 | |
*** sidx64 has joined #openstack-containers | 05:51 | |
*** ramishra has quit IRC | 05:51 | |
*** masber has quit IRC | 05:53 | |
*** ramishra has joined #openstack-containers | 05:58 | |
*** sidx64 has quit IRC | 05:59 | |
*** sidx64 has joined #openstack-containers | 06:00 | |
*** kiennt26__ has quit IRC | 06:14 | |
*** kiennt26 has joined #openstack-containers | 06:14 | |
*** pcichy has joined #openstack-containers | 06:21 | |
*** mdnadeem_ has joined #openstack-containers | 06:32 | |
*** mdnadeem has quit IRC | 06:33 | |
*** sidx64_ has joined #openstack-containers | 06:38 | |
*** mdnadeem_ has quit IRC | 06:39 | |
*** sidx64 has quit IRC | 06:40 | |
*** trinaths has joined #openstack-containers | 06:41 | |
*** dims has quit IRC | 06:41 | |
*** sidx64 has joined #openstack-containers | 06:42 | |
*** dims has joined #openstack-containers | 06:43 | |
*** ianychoi__ has joined #openstack-containers | 06:43 | |
*** sidx64_ has quit IRC | 06:45 | |
*** ianychoi_ has quit IRC | 06:46 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/magnum-ui master: Imported Translations from Zanata https://review.openstack.org/552802 | 06:48 |
*** dims has quit IRC | 06:48 | |
*** dims has joined #openstack-containers | 06:49 | |
*** mdnadeem_ has joined #openstack-containers | 06:50 | |
*** ianychoi__ is now known as ianychoi | 06:51 | |
*** pcichy has quit IRC | 06:52 | |
*** mjura has joined #openstack-containers | 06:55 | |
*** pcaruana has joined #openstack-containers | 07:04 | |
openstackgerrit | Merged openstack/magnum-ui master: Imported Translations from Zanata https://review.openstack.org/552802 | 07:11 |
*** sidx64_ has joined #openstack-containers | 07:11 | |
*** sidx64 has quit IRC | 07:13 | |
*** DimGR has quit IRC | 07:14 | |
*** zhubingbing has joined #openstack-containers | 07:15 | |
*** sidx64_ has quit IRC | 07:17 | |
*** sidx64 has joined #openstack-containers | 07:17 | |
*** DimGR has joined #openstack-containers | 07:20 | |
*** zhubingbing has quit IRC | 07:20 | |
*** masber has joined #openstack-containers | 07:32 | |
*** armaan has quit IRC | 07:36 | |
*** armaan has joined #openstack-containers | 07:36 | |
*** trinaths has quit IRC | 07:38 | |
*** dpawar has quit IRC | 07:41 | |
*** dpawar has joined #openstack-containers | 07:48 | |
*** mnasiadka has joined #openstack-containers | 07:50 | |
*** AlexeyAbashkin has joined #openstack-containers | 07:57 | |
*** mdnadeem has joined #openstack-containers | 08:02 | |
*** gsimondon has joined #openstack-containers | 08:04 | |
*** mdnadeem_ has quit IRC | 08:05 | |
*** gsimondon has quit IRC | 08:08 | |
*** gsimondon has joined #openstack-containers | 08:09 | |
*** dsariel has quit IRC | 08:11 | |
*** olivenwk has joined #openstack-containers | 08:22 | |
*** mjura has quit IRC | 08:35 | |
*** mjura has joined #openstack-containers | 08:37 | |
*** kiennt26 has quit IRC | 08:55 | |
*** flwang has joined #openstack-containers | 08:57 | |
flwang | strigazi: ping re security group rules of minion nodes | 08:58 |
*** sidx64 has quit IRC | 09:03 | |
*** shu-mutow has quit IRC | 09:14 | |
*** zhubingbing has joined #openstack-containers | 09:17 | |
*** yamamoto_ has joined #openstack-containers | 09:18 | |
*** zhubingbing has quit IRC | 09:21 | |
*** trinaths has joined #openstack-containers | 09:21 | |
*** yamamoto has quit IRC | 09:22 | |
*** mgoddard_ has joined #openstack-containers | 09:24 | |
strigazi | flwang: hi | 09:25 |
flwang | strigazi: hello | 09:25 |
flwang | mind having a chat about the security groups rules? | 09:26 |
strigazi | sure | 09:26 |
strigazi | What's the problem, what do you propose to do? | 09:27 |
*** udesale_ has joined #openstack-containers | 09:27 | |
flwang | strigazi: i'd like to get your comments if we can add a new config like 'enabled_restricted_security_for_minions_security_group' | 09:28 |
flwang | so that we can close all ports for minion nodes for external | 09:29 |
flwang | and only expose services by LB or ingress | 09:29 |
*** udesale__ has joined #openstack-containers | 09:29 | |
*** udesale has quit IRC | 09:29 | |
flwang | as I mentioned last time, GKE is doing that | 09:30 |
strigazi | if we close all ports how ingress is going to work? | 09:31 |
*** udesale_ has quit IRC | 09:32 | |
flwang | sorry, i mean only expose by LB | 09:33 |
strigazi | fyi, we (CERN) don't have security groups, so you will not get feedback from us | 09:33 |
flwang | or just open some very common port, like 80 | 09:33 |
strigazi | docs to GKE for which ports they have open? | 09:33 |
flwang | wait a sec, let me show you | 09:33 |
strigazi | how are we going to make security groups configurable? | 09:33 |
*** lpetrut has joined #openstack-containers | 09:34 | |
flwang | strigazi: https://imgur.com/a/lNvkE | 09:35 |
flwang | strigazi: i don't know now, that's the thing we may need input from ricolin | 09:35 |
flwang | strigazi: FWIW, opening all ports for all sources is not a secure way, isn't it? | 09:36 |
strigazi | My only concern is changing a lot the templates from what people are used to. | 09:36 |
strigazi | it is not, but | 09:36 |
strigazi | a more secure way is to not have fips on the worker nodes | 09:36 |
flwang | strigazi: agree | 09:37 |
flwang | would you mind reminding me the work/blueprint about that? | 09:38 |
strigazi | We can do that first. Having fips and all ports closed at the same time, doesn't make a lot of sense | 09:38 |
strigazi | flwang: let me find it | 09:38 |
strigazi | flwang: https://review.openstack.org/#/c/395095/ | 09:39 |
flwang | strigazi: ah, yes | 09:39 |
flwang | that's the thing i have claimed ;) | 09:39 |
flwang | i will take a further look about the two directions | 09:40 |
strigazi | flwang: i think this one is much more important and useful for public clouds | 09:41 |
flwang | yep, i agree | 09:41 |
strigazi | or all clouds | 09:41 |
flwang | +1 | 09:41 |
flwang | i'm happy with this topic now, let's move to next one | 09:41 |
flwang | as for the work of cotyledon investigation, i started it today | 09:42 |
strigazi | how that goes? | 09:42 |
flwang | based on my understanding, the main purpose of the replacement is for periodic task, right? | 09:42 |
flwang | or, we want to replace all the oslo.service we're using? | 09:42 |
strigazi | get rid of eventlet | 09:43 |
strigazi | oslo.service depends on it | 09:43 |
strigazi | eventlet is incompatible with the kubernetes client | 09:43 |
flwang | oslo.service is actually written on top of eventlet to provide two main features: periodic tasks and workers processes management The first feature was replaced by another library called futurist and the second feature is superseded by Cotyledon. | 09:44 |
strigazi | yes, from cotyledon docs | 09:44 |
flwang | based on above statement, if we want to totally remove oslo.service, we may need both of futurist and cotyledon | 09:44 |
strigazi | yes | 09:44 |
flwang | that's not a minor change i would say | 09:45 |
strigazi | I am not sure if it is the right thing to do | 09:45 |
flwang | do we have a bug to track that? | 09:45 |
strigazi | yes | 09:45 |
strigazi | https://bugs.launchpad.net/magnum/+bug/1746510 | 09:46 |
openstack | Launchpad bug 1746510 in Magnum "Kubernetes client is incompatible with evenlet and breaks the periodic tasks" [Undecided,New] | 09:46 |
*** ktibi has joined #openstack-containers | 09:46 | |
*** dsariel has joined #openstack-containers | 09:46 | |
strigazi | The other options is to use our own kubernetes client implementation with python requests | 09:46 |
strigazi | we don't have one | 09:47 |
strigazi | it means, write one | 09:47 |
strigazi | Or we fix eventlet :) | 09:47 |
flwang | yep, like i mentioned last time | 09:47 |
strigazi | it's clear that writing again the client is far from optimal | 09:48 |
flwang | write a simple wrapper on top of our own 'requests' based client and k8s client, could be the better way | 09:48 |
strigazi | isn't it? | 09:48 |
flwang | i know, but totally replace oslo.service is a big change, i'm just not sure if it worth the benefit | 09:49 |
strigazi | i'm not saying it is worth it. That's why asked for someone to investigate :) | 09:50 |
flwang | i saw qinling is using cotyledon to address this issue, so maybe we can try | 09:53 |
flwang | the ptl of qinling is my colleague | 09:54 |
flwang | i'm going to take this bug, but please don't expect it can be fix in short term, i hope i can fix it in Rocky | 09:55 |
strigazi | ok, it's not very high at the moment | 09:55 |
flwang | cool | 09:56 |
flwang | so let's move to next one? ;) | 09:56 |
strigazi | ok | 09:56 |
flwang | sorry for so many questions | 09:56 |
flwang | as I mentioned yesterday, i'm testing prometheus, and I found some issues | 09:57 |
strigazi | don't think about it, questions are good :) | 09:57 |
flwang | 1. prometheus doesn't work with kube-proxy, because https://github.com/prometheus/prometheus/issues/1583 are you aware of that? | 09:58 |
strigazi | Can you try move it from kube-system to prometheus-monitoring namespace? I don't know about this bug. We had it wotking until we moved to kube 1.9 and the kubernetes-dashboard | 09:59 |
strigazi | with nodeport it was working for me | 10:00 |
flwang | the short summary is https://camo.githubusercontent.com/360e0d525ecdabb7bee23370f00f72734ee91c53/687474703a2f2f692e696d6775722e636f6d2f4762494643555a2e706e67 the file is 404 because proxy | 10:00 |
flwang | yes, that's the #2 i'm gonna ask | 10:01 |
flwang | 2. with node port | 10:01 |
flwang | i'm getting error like "time="2018-03-14T03:17:36Z" level=error msg="github.com/prometheus/prometheus/discovery/kubernetes/kubernetes.go:182: Failed to list *v1.Service: services is forbidden: User "system:serviceaccount:kube-system:default" cannot list services at the cluster scope" component="kube_client_runtime" source="kubernetes.go:76" | 10:01 |
flwang | seems it's a RBAC issue, and I can't see any RBAC config for prometheus, am i missing anything? | 10:02 |
flwang | i think we need to create this https://github.com/prometheus/prometheus/blob/master/documentation/examples/rbac-setup.yml for prometheus? | 10:03 |
strigazi | yes, after RBAC we need to add roles | 10:05 |
strigazi | Are you going to offer both options? | 10:05 |
flwang | strigazi: ok, i will open a bug | 10:05 |
flwang | both means prometheus and heapster? | 10:05 |
strigazi | kube-dash and prom? | 10:05 |
strigazi | yes | 10:05 |
flwang | i'm not sure, TBH | 10:05 |
strigazi | We stopped advertising prometheus | 10:05 |
flwang | but we would like to make sure everything we're providing works | 10:06 |
flwang | we=cern or magnum? | 10:06 |
strigazi | cern | 10:06 |
flwang | ok | 10:06 |
flwang | fair enough | 10:06 |
flwang | but as a open source project | 10:06 |
*** mnasiadka has quit IRC | 10:07 | |
flwang | we still need to make sure what we're delivering work, no? | 10:07 |
strigazi | as a open source project was had zero feedback on it so far | 10:07 |
flwang | haha | 10:07 |
strigazi | Not a single user | 10:07 |
strigazi | you are the first asking about it | 10:07 |
flwang | that means Catalyst Cloud is doing serious contribution ;) | 10:08 |
strigazi | yes | 10:08 |
flwang | anyway, i will open a bug to fix it | 10:08 |
strigazi | ok | 10:08 |
flwang | and in the future, i may contribute back a user doc about it | 10:09 |
strigazi | be sure to also move it to another namespace | 10:09 |
flwang | like default? | 10:09 |
strigazi | I was working on this patch but I abandoned it since there was no interest from us and anyone else. | 10:09 |
flwang | could you please share the link? | 10:10 |
strigazi | flwang: https://review.openstack.org/#/c/508172/ | 10:10 |
flwang | is there any evidence users are going to heapster than prometheus? | 10:10 |
strigazi | From the kube community, I think for monitoing kube itself yes, but for monitoing apps they use prometheus | 10:11 |
strigazi | Our prom deployment though targets to monitor the cluster | 10:12 |
flwang | strigazi: makes sense for me | 10:12 |
strigazi | not the applications | 10:12 |
flwang | good to know | 10:12 |
flwang | i will dig into this area and bring feedback if you're still interested in | 10:13 |
*** rcernin has quit IRC | 10:13 | |
strigazi | sounds good | 10:16 |
strigazi | I have one for you | 10:16 |
*** sidx64 has joined #openstack-containers | 10:17 | |
strigazi | And maybe kong | 10:17 |
strigazi | I saw that you worked a bit on the keystone authn and authz with kubernetes. I would like to add in magnum | 10:18 |
strigazi | *to add it in magnum | 10:18 |
strigazi | flwang: thoughts ^^ | 10:18 |
flwang | hah, yep, we tested the keystone integration before | 10:19 |
flwang | how did you know that? | 10:19 |
strigazi | mailing list | 10:19 |
strigazi | he was asking questions | 10:19 |
flwang | yes | 10:19 |
flwang | i don't think there are two much to do in magnum | 10:20 |
flwang | what do you mean 'add in magnum'? | 10:20 |
flwang | s/two/too | 10:20 |
strigazi | have an option to enable the webhooks | 10:20 |
flwang | strigazi: that's good idea | 10:21 |
flwang | then run it on the master node? | 10:21 |
strigazi | it is a standalone patch and easy to do, ye | 10:21 |
strigazi | yes | 10:21 |
flwang | cool, i will open a bug to track the work | 10:22 |
flwang | enable_keystone_integration? | 10:22 |
strigazi | kong: is not around atm, can you ask him if he is interested to do it, since he worked on it? | 10:23 |
strigazi | enable_keystone_authz | 10:23 |
strigazi | or enable_keystone_authorization | 10:23 |
flwang | ok | 10:24 |
strigazi | integration is a bit vague, we can work the name :) | 10:24 |
flwang | i will talk with him, technically, i'm his manager, so shouldn't be a big problem ;) | 10:24 |
*** sidx64 has quit IRC | 10:24 | |
strigazi | I thought since he worked on it, we would duplicate the effort if one of us started looking from scratch | 10:25 |
flwang | so it will be a new config and introduce db schema change, or you just want to see a label? | 10:25 |
strigazi | only one label | 10:26 |
flwang | strigazi: fair enough | 10:26 |
flwang | strigazi: ok | 10:26 |
*** vijaykc4 has joined #openstack-containers | 10:27 | |
flwang | strigazi: just to be clear, you just say authz, how about auth? | 10:29 |
*** jmlowe has quit IRC | 10:30 | |
flwang | and if we use authz of keystone for k8s, based on my knowledge, it may break the existing rbac for all the service we're providing, is it? | 10:31 |
flwang | or we have to update the role for each service when we enabling keystone authz | 10:32 |
*** salmankhan has joined #openstack-containers | 10:33 | |
strigazi | We can give the cluster project the clusterrole | 10:40 |
strigazi | it won't break anything | 10:41 |
strigazi | We will test anyway :) | 10:41 |
*** sidx64 has joined #openstack-containers | 10:44 | |
*** flwang has quit IRC | 10:47 | |
*** sidx64 has quit IRC | 10:48 | |
*** trinaths has quit IRC | 10:49 | |
*** mikal_ has joined #openstack-containers | 10:52 | |
*** mikal has quit IRC | 10:53 | |
*** huzhengchuan has joined #openstack-containers | 10:55 | |
*** sidx64 has joined #openstack-containers | 10:55 | |
*** belmoreira has joined #openstack-containers | 10:56 | |
*** sidx64 has quit IRC | 10:58 | |
*** sidx64 has joined #openstack-containers | 11:02 | |
*** flwang has joined #openstack-containers | 11:03 | |
flwang | strigazi: cool | 11:06 |
*** ianychoi has quit IRC | 11:07 | |
flwang | strigazi: btw, is rochapor1o around? | 11:07 |
*** sidx64 has quit IRC | 11:09 | |
*** janki has quit IRC | 11:10 | |
strigazi | flwang: no | 11:11 |
*** zhubingbing has joined #openstack-containers | 11:11 | |
*** sidx64 has joined #openstack-containers | 11:11 | |
flwang | strigazi: wouldn't you happen to have tested the traefik before, would you? | 11:12 |
strigazi | flwang: we did test it | 11:12 |
flwang | why don't we have traefic ui as well? | 11:13 |
strigazi | we do | 11:13 |
strigazi | port 8080 where traefik is running | 11:13 |
flwang | oh, really? maybe i missed it | 11:13 |
*** ianychoi has joined #openstack-containers | 11:13 | |
flwang | i will check it again, is it reachable by proxy? | 11:14 |
strigazi | nodeport | 11:14 |
flwang | interesting | 11:14 |
*** serlex has joined #openstack-containers | 11:16 | |
*** jmlowe has joined #openstack-containers | 11:23 | |
*** armaan has quit IRC | 11:25 | |
*** jmlowe has quit IRC | 11:27 | |
*** janki has joined #openstack-containers | 11:43 | |
*** udesale__ has quit IRC | 11:45 | |
*** vijaykc4 has quit IRC | 11:48 | |
*** dsariel has quit IRC | 11:50 | |
*** armaan has joined #openstack-containers | 11:53 | |
*** salmankhan has quit IRC | 12:02 | |
*** salmankhan has joined #openstack-containers | 12:02 | |
*** armaan has quit IRC | 12:05 | |
*** dsariel has joined #openstack-containers | 12:05 | |
*** armaan has joined #openstack-containers | 12:06 | |
*** armaan has quit IRC | 12:10 | |
*** yamamoto_ has quit IRC | 12:17 | |
*** yamamoto has joined #openstack-containers | 12:18 | |
*** vijaykc4 has joined #openstack-containers | 12:18 | |
*** armaan has joined #openstack-containers | 12:24 | |
*** armaan has quit IRC | 12:24 | |
*** armaan_ has joined #openstack-containers | 12:29 | |
*** mdnadeem_ has joined #openstack-containers | 12:31 | |
*** dave-mccowan has joined #openstack-containers | 12:32 | |
*** mdnadeem has quit IRC | 12:35 | |
*** olivenwk has quit IRC | 12:36 | |
*** yamamoto has quit IRC | 12:38 | |
*** dsariel has quit IRC | 12:39 | |
*** yamamoto has joined #openstack-containers | 12:39 | |
*** yamamoto has quit IRC | 12:44 | |
*** huzhengchuan has quit IRC | 12:49 | |
*** dsariel has joined #openstack-containers | 12:52 | |
*** armaan_ has quit IRC | 12:53 | |
*** armaan has joined #openstack-containers | 12:53 | |
*** yamamoto has joined #openstack-containers | 12:55 | |
*** yamamoto has quit IRC | 12:59 | |
*** zhubingbing has quit IRC | 13:01 | |
*** zhubingb_ has joined #openstack-containers | 13:01 | |
*** vijaykc4 has quit IRC | 13:03 | |
*** yamamoto has joined #openstack-containers | 13:10 | |
*** ktibi_ has joined #openstack-containers | 13:12 | |
*** yamamoto has quit IRC | 13:15 | |
*** ktibi has quit IRC | 13:16 | |
*** yamamoto has joined #openstack-containers | 13:25 | |
*** mdnadeem has joined #openstack-containers | 13:29 | |
*** yamamoto has quit IRC | 13:29 | |
*** sidx64 has quit IRC | 13:31 | |
*** mdnadeem_ has quit IRC | 13:32 | |
*** sidx64 has joined #openstack-containers | 13:32 | |
*** dpawar has quit IRC | 13:38 | |
*** yamamoto has joined #openstack-containers | 13:40 | |
*** dsariel has quit IRC | 13:41 | |
*** zhubingb_ has quit IRC | 13:43 | |
*** ykarel is now known as ykarel|afk | 13:43 | |
*** zhubingbing has joined #openstack-containers | 13:43 | |
*** yamamoto has quit IRC | 13:44 | |
*** zhubingbing has quit IRC | 13:53 | |
*** zhubingbing has joined #openstack-containers | 13:54 | |
*** yamamoto has joined #openstack-containers | 13:54 | |
*** yamamoto has quit IRC | 13:55 | |
*** yamamoto has joined #openstack-containers | 13:55 | |
*** yamamoto has quit IRC | 13:55 | |
*** dsariel has joined #openstack-containers | 13:56 | |
*** vijaykc4 has joined #openstack-containers | 13:58 | |
*** zhubingbing has quit IRC | 14:00 | |
*** zhubingbing has joined #openstack-containers | 14:01 | |
*** ktibi_ has quit IRC | 14:03 | |
*** sidx64 has quit IRC | 14:10 | |
*** ktibi has joined #openstack-containers | 14:11 | |
*** zhubingbing has quit IRC | 14:12 | |
*** ykarel|afk has quit IRC | 14:12 | |
*** dsariel has quit IRC | 14:13 | |
*** sidx64 has joined #openstack-containers | 14:14 | |
*** dsariel has joined #openstack-containers | 14:26 | |
*** salmankhan has quit IRC | 14:38 | |
*** salmankhan has joined #openstack-containers | 14:49 | |
*** yamamoto has joined #openstack-containers | 14:55 | |
*** hongbin has joined #openstack-containers | 14:55 | |
*** ykarel|afk has joined #openstack-containers | 14:58 | |
*** ykarel|afk is now known as ykarel | 14:58 | |
*** yamamoto has quit IRC | 15:02 | |
*** mdnadeem has quit IRC | 15:02 | |
*** huzhengchuan has joined #openstack-containers | 15:02 | |
*** olivenwk has joined #openstack-containers | 15:06 | |
*** itlinux has joined #openstack-containers | 15:12 | |
*** salmankhan has quit IRC | 15:20 | |
*** salmankhan has joined #openstack-containers | 15:20 | |
*** huzhengchuan has quit IRC | 15:33 | |
*** vijaykc4 has quit IRC | 15:37 | |
*** ykarel is now known as ykarel|afk | 15:39 | |
*** vijaykc4 has joined #openstack-containers | 15:40 | |
*** vijaykc4 has quit IRC | 15:41 | |
*** lpetrut has quit IRC | 15:42 | |
*** sidx64 has quit IRC | 15:43 | |
openstackgerrit | Merged openstack/magnum-tempest-plugin master: Fix links to build docs https://review.openstack.org/528254 | 15:53 |
*** yamamoto has joined #openstack-containers | 15:58 | |
*** dsariel has quit IRC | 15:59 | |
*** huzhengchuan has joined #openstack-containers | 15:59 | |
*** mjura has quit IRC | 16:04 | |
*** yamamoto has quit IRC | 16:04 | |
*** huzhengchuan has quit IRC | 16:09 | |
*** gsimondon has quit IRC | 16:10 | |
*** masber has quit IRC | 16:10 | |
*** vijaykc4 has joined #openstack-containers | 16:19 | |
*** udesale has joined #openstack-containers | 16:20 | |
*** udesale has quit IRC | 16:26 | |
*** vijaykc4 has quit IRC | 16:26 | |
*** masber has joined #openstack-containers | 16:29 | |
*** ykarel|afk has quit IRC | 16:30 | |
*** AlexeyAbashkin has quit IRC | 16:30 | |
*** masber has quit IRC | 16:44 | |
*** janki has quit IRC | 16:47 | |
*** vijaykc4 has joined #openstack-containers | 16:50 | |
*** vijaykc4 has quit IRC | 16:50 | |
*** masber has joined #openstack-containers | 16:51 | |
*** flwang has quit IRC | 16:51 | |
*** armaan has quit IRC | 16:59 | |
*** yamamoto has joined #openstack-containers | 16:59 | |
*** sapd_ has joined #openstack-containers | 17:01 | |
*** sapd has quit IRC | 17:05 | |
*** yamamoto has quit IRC | 17:05 | |
*** ktibi is now known as ktibi_away | 17:08 | |
*** armaan has joined #openstack-containers | 17:13 | |
*** zhubingbing has joined #openstack-containers | 17:16 | |
*** pcaruana has quit IRC | 17:18 | |
*** zhubingbing has quit IRC | 17:25 | |
*** serlex has quit IRC | 17:32 | |
*** olivenwk has quit IRC | 17:41 | |
*** itlinux has quit IRC | 17:50 | |
*** flwang has joined #openstack-containers | 17:52 | |
*** itlinux has joined #openstack-containers | 17:58 | |
*** yamamoto has joined #openstack-containers | 18:01 | |
*** yamamoto has quit IRC | 18:06 | |
*** mgoddard_ has quit IRC | 18:07 | |
*** AlexeyAbashkin has joined #openstack-containers | 18:07 | |
*** harlowja has joined #openstack-containers | 18:11 | |
*** AlexeyAbashkin has quit IRC | 18:11 | |
*** salmankhan has quit IRC | 18:13 | |
*** fragatina has quit IRC | 18:15 | |
*** fragatina has joined #openstack-containers | 18:16 | |
*** lpetrut has joined #openstack-containers | 18:28 | |
*** mgoddard_ has joined #openstack-containers | 18:48 | |
*** itlinux has quit IRC | 18:57 | |
*** itlinux_ has joined #openstack-containers | 18:57 | |
*** fragatina has quit IRC | 19:01 | |
*** yamamoto has joined #openstack-containers | 19:02 | |
*** yamamoto has quit IRC | 19:07 | |
*** flwang has quit IRC | 19:31 | |
*** ricolin has quit IRC | 19:33 | |
*** itlinux_ has quit IRC | 19:40 | |
*** mgoddard_ has quit IRC | 19:48 | |
*** itlinux has joined #openstack-containers | 19:53 | |
*** yamamoto has joined #openstack-containers | 20:03 | |
*** yamamoto has quit IRC | 20:08 | |
*** sidx64 has joined #openstack-containers | 20:10 | |
*** sidx64 has quit IRC | 20:15 | |
*** sidx64 has joined #openstack-containers | 20:16 | |
*** zhubingbing has joined #openstack-containers | 20:23 | |
*** mgoddard_ has joined #openstack-containers | 20:25 | |
*** zhubingbing has quit IRC | 20:27 | |
*** gsimondon has joined #openstack-containers | 20:31 | |
*** jmlowe has joined #openstack-containers | 20:35 | |
*** AlexeyAbashkin has joined #openstack-containers | 20:36 | |
*** fragatina has joined #openstack-containers | 20:39 | |
*** AlexeyAbashkin has quit IRC | 20:40 | |
*** flwang has joined #openstack-containers | 20:44 | |
*** yamamoto has joined #openstack-containers | 21:04 | |
*** rcernin has joined #openstack-containers | 21:08 | |
*** yamamoto has quit IRC | 21:10 | |
*** ktibi_away has quit IRC | 21:14 | |
*** lpetrut has quit IRC | 21:22 | |
*** sidx64 has quit IRC | 21:22 | |
*** dave-mccowan has quit IRC | 21:26 | |
*** dave-mccowan has joined #openstack-containers | 21:33 | |
*** itlinux has quit IRC | 21:40 | |
*** belmoreira has quit IRC | 21:45 | |
pwd | when starting kubernetes cluster, I can see the master and minion instances up and running, running "heat stack-list -n" show all stack_status in CREATE_COMPLETE, but running "openstack coe cluster list" shows CREATE_IN_PROGRESS and does not move to CREATE_COMPLETE state, where can it go wrong? | 21:51 |
*** yamamoto has joined #openstack-containers | 22:06 | |
*** yamamoto has quit IRC | 22:12 | |
flwang | pwd: I would suggest enable the debug mode, and then check code here https://github.com/openstack/magnum/blob/master/magnum/service/periodic.py#L65 | 22:14 |
*** mgoddard_ has quit IRC | 22:14 | |
flwang | pwd: and here https://github.com/openstack/magnum/blob/master/magnum/drivers/heat/driver.py#L86 | 22:14 |
flwang | so generally, there is a poller. it will check the stack status and then update cluster status accordingly | 22:15 |
flwang | if the cluster status can't be updated, that probably means the poller is not working correctly | 22:15 |
flwang | hope that helps | 22:16 |
*** fragatina has quit IRC | 22:23 | |
*** fragatina has joined #openstack-containers | 22:24 | |
pwd | flwang: you mean set debug=true in /etc/magnum/magnum.conf and check the log file? which location does the log write to ? my /var/log/magnum directory is empty | 22:24 |
*** gsimondo1 has joined #openstack-containers | 22:24 | |
*** gsimondon has quit IRC | 22:27 | |
*** fragatina has quit IRC | 22:29 | |
pwd | flwang: I restarted openstack-magnum-api.service and openstack-magnum-conductor.service and now the cluster changed to CREATE_COMPLETE state | 22:35 |
*** fragatina has joined #openstack-containers | 22:36 | |
*** fragatina has quit IRC | 22:36 | |
*** fragatina has joined #openstack-containers | 22:38 | |
pwd | flwang: running "kubectl -n kube-system get po" results in error message: Error from server (Forbidden): pods is forbidden: User "Magnum User" cannot list pods in the namespace "kube-system" | 22:39 |
*** fragatina has quit IRC | 22:40 | |
*** fragatina has joined #openstack-containers | 22:46 | |
*** dave-mccowan has quit IRC | 22:47 | |
flwang | pwd: where are you running the kubectl command? | 22:55 |
flwang | lunch time, brb | 22:55 |
*** masber has quit IRC | 22:57 | |
pwd | flwang: from controller | 22:57 |
*** hongbin has quit IRC | 22:59 | |
DimGR | hi strigazi | 23:00 |
*** masber has joined #openstack-containers | 23:00 | |
*** gsimondon has joined #openstack-containers | 23:02 | |
*** gsimondo1 has quit IRC | 23:05 | |
*** yamamoto has joined #openstack-containers | 23:07 | |
*** armaan has quit IRC | 23:11 | |
*** yamamoto has quit IRC | 23:12 | |
flwang | pwd: did you run the 'eval' command? | 23:20 |
*** gsimondon has quit IRC | 23:20 | |
*** zhubingbing has joined #openstack-containers | 23:25 | |
*** zhubingbing has quit IRC | 23:30 | |
*** itlinux has joined #openstack-containers | 23:47 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!