| *** gsimondon has joined #openstack-containers | 00:10 | |
| *** gsimondon has quit IRC | 00:16 | |
| *** livelace2 has quit IRC | 00:26 | |
| *** gsimondon has joined #openstack-containers | 00:26 | |
| *** livelace2 has joined #openstack-containers | 00:26 | |
| *** gsimondon has quit IRC | 00:31 | |
| *** yamamoto has joined #openstack-containers | 00:39 | |
| *** gsimondon has joined #openstack-containers | 00:41 | |
| *** yamamoto has quit IRC | 00:45 | |
| *** gsimondon has quit IRC | 00:46 | |
| *** gsimondon has joined #openstack-containers | 00:57 | |
| *** gsimondon has quit IRC | 01:02 | |
| *** gsimondon has joined #openstack-containers | 01:12 | |
| *** hongbin has joined #openstack-containers | 01:13 | |
| *** gsimondon has quit IRC | 01:17 | |
| *** gsimondon has joined #openstack-containers | 01:38 | |
| *** yamamoto has joined #openstack-containers | 01:41 | |
| *** gsimondon has quit IRC | 01:43 | |
| *** yamamoto has quit IRC | 01:47 | |
| *** yamamoto has joined #openstack-containers | 01:51 | |
| *** gsimondon has joined #openstack-containers | 01:53 | |
| *** yamamoto has quit IRC | 01:54 | |
| *** gsimondon has quit IRC | 01:59 | |
| *** gsimondon has joined #openstack-containers | 02:09 | |
| *** gsimondon has quit IRC | 02:14 | |
| *** gsimondon has joined #openstack-containers | 02:25 | |
| *** gsimondon has quit IRC | 02:29 | |
| *** gsimondon has joined #openstack-containers | 02:40 | |
| openstackgerrit | Feilong Wang proposed openstack/magnum master: Fix the heat-container-agent docker image https://review.openstack.org/584215 | 02:43 |
|---|---|---|
| *** gsimondon has quit IRC | 02:45 | |
| *** flwang1 has joined #openstack-containers | 02:45 | |
| *** yamamoto has joined #openstack-containers | 02:45 | |
| *** markguz has joined #openstack-containers | 02:51 | |
| *** ricolin has joined #openstack-containers | 02:51 | |
| *** markguz_ has quit IRC | 02:54 | |
| *** dave-mcc_ has quit IRC | 02:54 | |
| *** markguz has quit IRC | 02:55 | |
| *** gsimondon has joined #openstack-containers | 02:56 | |
| *** gsimondon has quit IRC | 03:00 | |
| *** gsimondon has joined #openstack-containers | 03:11 | |
| *** yamamoto has quit IRC | 03:16 | |
| *** yamamoto has joined #openstack-containers | 03:16 | |
| *** gsimondon has quit IRC | 03:16 | |
| *** yamamoto has quit IRC | 03:20 | |
| *** gsimondon has joined #openstack-containers | 03:27 | |
| *** gsimondon has quit IRC | 03:31 | |
| *** gsimondon has joined #openstack-containers | 03:42 | |
| *** gsimondon has quit IRC | 03:47 | |
| *** udesale has joined #openstack-containers | 03:55 | |
| *** gsimondon has joined #openstack-containers | 03:58 | |
| *** lpetrut has joined #openstack-containers | 04:00 | |
| *** gsimondon has quit IRC | 04:02 | |
| *** mdnadeem has joined #openstack-containers | 04:06 | |
| *** ykarel has joined #openstack-containers | 04:09 | |
| *** gsimondon has joined #openstack-containers | 04:13 | |
| *** gsimondon has quit IRC | 04:18 | |
| *** ramishra has joined #openstack-containers | 04:20 | |
| *** flwang1 has quit IRC | 04:21 | |
| *** flwang1 has joined #openstack-containers | 04:21 | |
| *** gsimondon has joined #openstack-containers | 04:29 | |
| *** gsimondon has quit IRC | 04:34 | |
| *** flwang1 has quit IRC | 04:37 | |
| *** gsimondon has joined #openstack-containers | 04:45 | |
| *** lpetrut has quit IRC | 04:45 | |
| *** gsimondon has quit IRC | 04:49 | |
| *** yamamoto has joined #openstack-containers | 04:52 | |
| *** janki has joined #openstack-containers | 04:54 | |
| *** hongbin has quit IRC | 04:55 | |
| *** gsimondon has joined #openstack-containers | 05:00 | |
| *** yamamoto has quit IRC | 05:03 | |
| *** janki has quit IRC | 05:03 | |
| *** janki has joined #openstack-containers | 05:04 | |
| *** gsimondon has quit IRC | 05:05 | |
| *** yamamoto has joined #openstack-containers | 05:07 | |
| *** pcichy has joined #openstack-containers | 05:20 | |
| *** armaan has joined #openstack-containers | 05:26 | |
| *** yamamoto has quit IRC | 05:28 | |
| *** armaan has quit IRC | 05:35 | |
| *** udesale_ has joined #openstack-containers | 05:42 | |
| *** udesale has quit IRC | 05:45 | |
| *** mjura has joined #openstack-containers | 05:52 | |
| *** pcichy has quit IRC | 05:52 | |
| *** mjura has quit IRC | 06:00 | |
| *** mjura has joined #openstack-containers | 06:00 | |
| *** gsimondon has joined #openstack-containers | 06:17 | |
| *** gsimondo1 has joined #openstack-containers | 06:22 | |
| *** gsimondon has quit IRC | 06:23 | |
| *** lpetrut has joined #openstack-containers | 06:29 | |
| *** udesale__ has joined #openstack-containers | 06:43 | |
| *** udesale_ has quit IRC | 06:45 | |
| *** armaan has joined #openstack-containers | 06:59 | |
| *** pcaruana has joined #openstack-containers | 07:02 | |
| *** pcichy has joined #openstack-containers | 07:04 | |
| *** ispp has joined #openstack-containers | 07:14 | |
| *** yamamoto has joined #openstack-containers | 07:20 | |
| *** ispp has quit IRC | 07:21 | |
| openstackgerrit | Merged openstack/magnum master: Fix the heat-container-agent docker image https://review.openstack.org/584215 | 07:21 |
| openstackgerrit | Merged openstack/magnum master: Resolve stack outputs only on COMPLETE https://review.openstack.org/582506 | 07:21 |
| *** mgoddard has joined #openstack-containers | 07:22 | |
| *** yasemin has joined #openstack-containers | 07:22 | |
| *** serlex has joined #openstack-containers | 07:23 | |
| *** yamamoto has quit IRC | 07:24 | |
| *** ykarel is now known as ykarel|lunch | 07:38 | |
| *** AlexeyAbashkin has joined #openstack-containers | 07:42 | |
| *** adrianc has joined #openstack-containers | 07:51 | |
| *** adrianc has quit IRC | 08:00 | |
| *** ispp has joined #openstack-containers | 08:01 | |
| *** armaan has quit IRC | 08:04 | |
| *** serlex has quit IRC | 08:05 | |
| *** mgoddard has quit IRC | 08:24 | |
| *** armaan has joined #openstack-containers | 08:25 | |
| *** ykarel|lunch is now known as ykarel | 08:28 | |
| *** flwang1 has joined #openstack-containers | 08:31 | |
| *** yamamoto has joined #openstack-containers | 09:36 | |
| *** yamamoto has quit IRC | 09:41 | |
| *** parasitid has quit IRC | 09:45 | |
| *** parasitid has joined #openstack-containers | 10:02 | |
| *** janki has quit IRC | 10:33 | |
| *** janki has joined #openstack-containers | 10:39 | |
| *** ricolin has quit IRC | 10:55 | |
| *** dave-mccowan has joined #openstack-containers | 11:05 | |
| openstackgerrit | Ricardo Rocha proposed openstack/python-magnumclient master: [k8s] Add embed certs to config https://review.openstack.org/582955 | 11:08 |
| *** vijaykc4 has joined #openstack-containers | 11:09 | |
| *** jaewook_oh has joined #openstack-containers | 11:14 | |
| *** udesale__ has quit IRC | 11:25 | |
| *** vijaykc4 has quit IRC | 11:31 | |
| *** vijaykc4 has joined #openstack-containers | 11:32 | |
| *** ispp has quit IRC | 11:45 | |
| *** ispp has joined #openstack-containers | 11:47 | |
| *** adrianc_ has joined #openstack-containers | 11:54 | |
| *** ispp has quit IRC | 11:55 | |
| *** ispp has joined #openstack-containers | 12:00 | |
| *** adrianc_ has quit IRC | 12:12 | |
| *** Bhujay has joined #openstack-containers | 12:21 | |
| *** yamamoto has joined #openstack-containers | 12:26 | |
| *** yamamoto has quit IRC | 12:30 | |
| *** mdnadeem_ has joined #openstack-containers | 12:31 | |
| *** ricolin has joined #openstack-containers | 12:31 | |
| *** mdnadeem has quit IRC | 12:35 | |
| *** yamamoto has joined #openstack-containers | 12:43 | |
| *** yamamoto has quit IRC | 12:46 | |
| *** yamamoto has joined #openstack-containers | 12:49 | |
| *** adrianc_ has joined #openstack-containers | 12:53 | |
| *** yamamoto has quit IRC | 12:54 | |
| *** udesale has joined #openstack-containers | 12:56 | |
| *** yamamoto has joined #openstack-containers | 13:01 | |
| *** yamamoto has quit IRC | 13:03 | |
| *** jaewook_oh has quit IRC | 13:07 | |
| *** vijaykc4 has quit IRC | 13:17 | |
| *** vijaykc4 has joined #openstack-containers | 13:17 | |
| *** Bhujay has quit IRC | 13:26 | |
| *** vijaykc4 has quit IRC | 13:29 | |
| *** belmoreira has joined #openstack-containers | 13:38 | |
| *** vijaykc4 has joined #openstack-containers | 13:49 | |
| *** ykarel is now known as ykarel|away | 13:51 | |
| *** ykarel|away has quit IRC | 13:51 | |
| *** mdnadeem_ has quit IRC | 13:52 | |
| *** hongbin has joined #openstack-containers | 13:59 | |
| *** adrianc_ has quit IRC | 14:03 | |
| *** markguz has joined #openstack-containers | 14:18 | |
| *** markguz has quit IRC | 14:18 | |
| *** markguz has joined #openstack-containers | 14:18 | |
| *** markguz has quit IRC | 14:19 | |
| *** yolanda__ has joined #openstack-containers | 14:19 | |
| *** markguz has joined #openstack-containers | 14:19 | |
| *** yolanda_ has quit IRC | 14:21 | |
| *** yolanda__ is now known as yolanda | 14:26 | |
| *** ispp has quit IRC | 14:27 | |
| *** ispp has joined #openstack-containers | 14:30 | |
| *** armaan has quit IRC | 14:32 | |
| *** armaan has joined #openstack-containers | 14:32 | |
| *** dave-mccowan has quit IRC | 14:33 | |
| markguz | HI all. question. is the "insecure-registry" option on the magnum client being deprecated? I notice it's not in the now recommended to use openstack cli. | 14:33 |
| markguz | I also noticed that if i modify the template via horizon then that value in the database is wiped out. | 14:34 |
| markguz | If I am asking a dumb question please tell me. Or if this is clearly mentioned in the docs (i have read and re-read everything i could find to no avail) then point me there. | 14:37 |
| markguz | I'm stuck right now because I cannot pull images from my local registry (not set up by me so I've no control over its insecureness) | 14:38 |
| strigazi | you can create a cluster template and then do cluster template update to add the insecure registry. | 14:40 |
| strigazi | markguz: ^^ | 14:40 |
| *** Bhujay has joined #openstack-containers | 14:40 | |
| markguz | strigazi: yeah i've managed to get the entry in there, but i'm uncertain as to it's long term existence. the fact that the gui update wipes it out worries me along with the lack that option in the openstack client | 14:41 |
| *** dave-mccowan has joined #openstack-containers | 14:42 | |
| markguz | strigazi: also, when it is set, for some reason instead of just setting the insecure-registry option to dockerd it also adds it to k8s as the place for it to download the dashboard and something called "pause" | 14:43 |
| markguz | this makes me think that it's either unsupported or just something that no one uses? | 14:44 |
| markguz | The fact that i can't find much about this online makes me think I'm either in the minority with an insecure registry, or am just fundamentally not understanding how to set this up | 14:47 |
| *** gsimondo1 has quit IRC | 14:58 | |
| *** AlexeyAbashkin has quit IRC | 14:59 | |
| *** AlexeyAbashkin has joined #openstack-containers | 14:59 | |
| *** vijaykc4 has quit IRC | 15:09 | |
| *** belmoreira has quit IRC | 15:12 | |
| *** yamamoto has joined #openstack-containers | 15:15 | |
| *** AlexeyAbashkin has quit IRC | 15:16 | |
| *** AlexeyAbashkin has joined #openstack-containers | 15:16 | |
| *** yamamoto has quit IRC | 15:20 | |
| *** ispp has quit IRC | 15:20 | |
| *** ispp has joined #openstack-containers | 15:21 | |
| *** itlinux has joined #openstack-containers | 15:44 | |
| *** ispp has quit IRC | 15:47 | |
| *** lpetrut has quit IRC | 15:53 | |
| *** udesale has quit IRC | 15:56 | |
| strigazi | markguz: using an insecure registry is not very secure. But the combination of the labels container_infra_prefix and insecure_registry works. | 15:59 |
| strigazi | markguz: if there is something missing in the client we can add it and release it | 15:59 |
| strigazi | markguz: sounds good? | 15:59 |
| *** dave-mccowan has quit IRC | 16:00 | |
| markguz | strigazi: clearly an "insecure" registry is by definition not secure. I'm aware of that. I don't have any way to fix that. It's outside of my influence zone. | 16:01 |
| markguz | should I set container_infra_prefix to be gcr.io so that it doesn't use the insecure_registry for core components? | 16:01 |
| markguz | the insecure registry is only for local customized containers. the cluster still has outboound access to the interwebs | 16:02 |
| *** gsimondon has joined #openstack-containers | 16:02 | |
| strigazi | markguz: you can push the containers to you account in docker.io or quay.io | 16:02 |
| markguz | now that would be against our local rules | 16:03 |
| markguz | the containers need to be private | 16:03 |
| strigazi | ok | 16:03 |
| markguz | but only the containers. It seems like that when insecure_registry was supported, the devs thought that would get hand in hand with an inability to communicate with the web | 16:04 |
| markguz | hence the container_infra_prefix ? | 16:04 |
| strigazi | Can you remind me why this is not good enough, I didn't get it. Create a cluster template with container_infra_prefix pointing the insecure registry. then do a CT update to add the insecure registry | 16:04 |
| markguz | the problem is. that with container_infra_prefix, kubernetes tries to pull some of its' components from the insecure registry. | 16:05 |
| markguz | but the insecure registry doesn't contain the kubeneretes dashboard. | 16:05 |
| markguz | i want to be able to set the dockerd insecure registry option without out changing anything else | 16:06 |
| markguz | kubernetes should still pull all of it's bits from the internet | 16:06 |
| strigazi | in our case, at CERN, all containers are in our secure local registry and we specify "<registry>/<our group>/" for container_infra_prefix | 16:06 |
| strigazi | markguz oh, got it. | 16:06 |
| strigazi | markguz: which magnum release are you using? | 16:06 |
| markguz | pike | 16:06 |
| markguz | strigazi: ^^ | 16:07 |
| strigazi | that should work then | 16:07 |
| markguz | should but doesn't | 16:07 |
| markguz | if i set insecure_registry the kube cluster fails trying to download the pause and kube dashboard | 16:07 |
| strigazi | if container_infra_prefix is not specified and insecure_registry is set, dockerd should have access | 16:07 |
| strigazi | let me check | 16:07 |
| markguz | i don't set container_infra_prefix explicitly only insecure_registry | 16:08 |
| strigazi | ok , go tit | 16:08 |
| strigazi | it is a bug. you need to mirror the pause container or set the insecure regisstry manually. | 16:09 |
| markguz | strigaze: http://paste.openstack.org/show/726460/ the pod-infra-container-image setting breaks it | 16:10 |
| strigazi | markguz: yes :( | 16:10 |
| *** ricolin has quit IRC | 16:10 | |
| markguz | a workaround is pulling the images to the local registry, but that's kludgy IMHO | 16:10 |
| strigazi | we need a fix upstream for this | 16:10 |
| *** dave-mccowan has joined #openstack-containers | 16:11 | |
| markguz | strigazi: an alternative would be if i was able to inject the local CA cert then docker wouldn't complain about the unverified certificate | 16:12 |
| markguz | i've not found a way to do that yet tho | 16:12 |
| strigazi | markguz: https://github.com/openstack/magnum/commit/7167aff3c1f8d42f37f05d21d5d28ea39468dbff | 16:13 |
| strigazi | this is not released. but it is the stable branch. | 16:14 |
| markguz | ic | 16:15 |
| strigazi | markguz: magnum is installed in the 5.0.1 tag or the stable branch? | 16:15 |
| markguz | 5.0.1 using rdo rpms | 16:15 |
| strigazi | I'll need to do a release | 16:15 |
| markguz | will this be in rocky? backported to queens? | 16:16 |
| strigazi | it is in queens already | 16:16 |
| strigazi | and will be in rocky too | 16:17 |
| strigazi | since it is in the master branch since some time. | 16:17 |
| markguz | ok. i'll use my workaround of having the google-containers on my local reg until i upgrade to queens | 16:17 |
| strigazi | that will work | 16:17 |
| markguz | thanks for your help | 16:18 |
| strigazi | we didn't fix it, but you are welcome, cheers | 16:18 |
| markguz | yeah but i understand what's going on now, and that's a big plus for me !! | 16:18 |
| *** AlexeyAbashkin has quit IRC | 16:20 | |
| *** vijaykc4 has joined #openstack-containers | 16:23 | |
| *** gsimondon has quit IRC | 16:23 | |
| *** dave-mccowan has quit IRC | 16:23 | |
| *** dave-mccowan has joined #openstack-containers | 16:24 | |
| *** Bhujay has quit IRC | 16:25 | |
| *** dave-mccowan has quit IRC | 16:30 | |
| *** mjura has quit IRC | 16:30 | |
| *** gsimondon has joined #openstack-containers | 16:35 | |
| *** dave-mccowan has joined #openstack-containers | 16:43 | |
| *** armaan has quit IRC | 16:45 | |
| *** armaan has joined #openstack-containers | 16:45 | |
| *** pcaruana has quit IRC | 16:47 | |
| *** gsimondo1 has joined #openstack-containers | 16:52 | |
| *** gsimondon has quit IRC | 16:55 | |
| *** gsimondon has joined #openstack-containers | 16:57 | |
| *** gsimondo1 has quit IRC | 16:58 | |
| *** adrianc_ has joined #openstack-containers | 16:59 | |
| *** adrianc_ has quit IRC | 17:04 | |
| *** ramishra has quit IRC | 17:16 | |
| *** lpetrut has joined #openstack-containers | 17:46 | |
| *** gsimondon has quit IRC | 17:50 | |
| *** armaan has quit IRC | 17:50 | |
| *** armaan has joined #openstack-containers | 17:51 | |
| *** gsimondon has joined #openstack-containers | 17:55 | |
| *** gsimondon has quit IRC | 18:00 | |
| *** armaan has quit IRC | 18:01 | |
| *** armaan has joined #openstack-containers | 18:01 | |
| *** itlinux has quit IRC | 18:05 | |
| *** armaan has quit IRC | 18:06 | |
| *** armaan has joined #openstack-containers | 18:07 | |
| *** gsimondon has joined #openstack-containers | 18:16 | |
| *** gsimondon has quit IRC | 18:20 | |
| *** AlexeyAbashkin has joined #openstack-containers | 18:25 | |
| *** ianychoi has quit IRC | 18:33 | |
| *** ianychoi has joined #openstack-containers | 18:34 | |
| *** AlexeyAbashkin has quit IRC | 18:45 | |
| *** livelace2 has quit IRC | 19:13 | |
| *** livelace2 has joined #openstack-containers | 19:15 | |
| *** gsimondon has joined #openstack-containers | 19:16 | |
| *** vijaykc4 has quit IRC | 19:31 | |
| *** janki has quit IRC | 19:47 | |
| *** hongbin has quit IRC | 20:05 | |
| *** jmlowe has joined #openstack-containers | 20:12 | |
| *** jmlowe has quit IRC | 20:16 | |
| *** gsimondo1 has joined #openstack-containers | 20:29 | |
| *** lpetrut has quit IRC | 20:30 | |
| *** gsimondon has quit IRC | 20:32 | |
| *** itlinux has joined #openstack-containers | 20:35 | |
| *** yamamoto has joined #openstack-containers | 20:42 | |
| *** gsimondo1 has quit IRC | 20:44 | |
| *** gsimondon has joined #openstack-containers | 20:45 | |
| *** yamamoto has quit IRC | 20:46 | |
| *** jmlowe has joined #openstack-containers | 20:57 | |
| *** gsimondon has quit IRC | 21:05 | |
| *** jmlowe has quit IRC | 21:05 | |
| *** parasitid has quit IRC | 21:09 | |
| *** hongbin has joined #openstack-containers | 21:10 | |
| *** itlinux has quit IRC | 21:12 | |
| *** parasitid has joined #openstack-containers | 21:25 | |
| *** rcernin has joined #openstack-containers | 21:26 | |
| *** markguz_ has joined #openstack-containers | 21:33 | |
| *** markguz has quit IRC | 21:36 | |
| *** markguz_ has quit IRC | 21:38 | |
| *** hongbin has quit IRC | 22:50 | |
| *** itlinux has joined #openstack-containers | 22:53 | |
| *** yamamoto has joined #openstack-containers | 23:04 | |
| *** yamamoto has quit IRC | 23:08 | |
| *** lpetrut has joined #openstack-containers | 23:26 | |
| *** threestrands has joined #openstack-containers | 23:30 | |
| *** lpetrut has quit IRC | 23:30 | |
| *** jkuei has joined #openstack-containers | 23:43 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!