Tuesday, 2018-09-18

*** cbrumm has quit IRC00:39
*** cbrumm has joined #openstack-containers00:41
*** openstackgerrit has joined #openstack-containers00:52
openstackgerritJangwonLee proposed openstack/magnum master: Add prometheus-monitoring namespace  https://review.openstack.org/60090500:52
*** ricolin has joined #openstack-containers01:33
*** dave-mccowan has quit IRC01:42
*** dave-mccowan has joined #openstack-containers02:00
*** ramishra has joined #openstack-containers02:18
*** dave-mccowan has quit IRC02:20
*** hongbin has joined #openstack-containers02:37
*** flwang has joined #openstack-containers02:42
*** ykarel|away has joined #openstack-containers03:01
*** lbragstad has quit IRC03:04
openstackgerritMerged openstack/magnum-ui master: When selecting a image for cluster, many invalid images are shown. If a project has a lot of images, options can be quite long, and cause wrong selctiong by mistake. So I add a filter after fetching images, now images that has "os_distro" property and it'  https://review.openstack.org/59923503:07
*** ykarel|away has quit IRC03:07
*** lbragstad has joined #openstack-containers03:12
*** ricolin has quit IRC03:13
*** ricolin has joined #openstack-containers03:15
*** hongbin has quit IRC03:25
*** lbragstad has quit IRC03:48
*** udesale has joined #openstack-containers03:53
*** ricolin has quit IRC04:03
*** ykarel|away has joined #openstack-containers04:08
*** ykarel|away has quit IRC04:34
*** ykarel|away has joined #openstack-containers04:53
*** ykarel|away is now known as ykarel04:55
*** mvpnitesh has joined #openstack-containers05:18
*** belmoreira has joined #openstack-containers05:30
*** janki has joined #openstack-containers06:08
*** rcernin has quit IRC07:03
*** serlex has joined #openstack-containers07:05
*** ykarel is now known as ykarel|lunch07:31
openstackgerritOpenStack Proposal Bot proposed openstack/magnum-ui master: Imported Translations from Zanata  https://review.openstack.org/60331108:00
*** mattgo has joined #openstack-containers08:04
*** mvpnitesh has quit IRC08:06
*** belmoreira has quit IRC08:15
*** ykarel|lunch is now known as ykarel08:25
*** lbragstad has joined #openstack-containers08:59
*** belmoreira has joined #openstack-containers09:04
*** belmoreira has quit IRC09:10
*** belmoreira has joined #openstack-containers09:11
*** mvpnitesh has joined #openstack-containers09:14
*** keystonerc_admin has joined #openstack-containers09:38
keystonerc_adminAnybody know what's happening about Kubernetes cloud-provider-openstack?09:40
keystonerc_adminIt seems to have been extracted from controller manager and doesn't look like it's been containerized yet09:44
*** mattgo has quit IRC09:50
*** ykarel is now known as ykarel|away09:50
*** ykarel|away is now known as ykarel|afk09:51
brtknrmeeting today?09:57
brtknrstrigazi: ?09:58
*** flwang1 has joined #openstack-containers10:01
flwang1strigazi: around for sync?10:01
*** udesale has quit IRC10:47
brtknrflwang1: strigazi: do you guys know how to bring a magnum cluster out of "UPDATE FAILED" state?10:50
flwang1how did you do the update?10:50
brtknropenstack coe cluster update cluster replace nodes=310:51
brtknrunfortunately a colleague who did not create the cluster tried to update and it failed because the key verification failed10:52
brtknrnow i was able to update its state via heat but magnum still reports update failed state10:52
brtknrthis is in queens10:53
*** ykarel|afk is now known as ykarel11:00
strigaziflwang1: I'm in a 1h meeting, it ends in ~5511:03
strigaziflwang1: I can chat a bit here11:04
strigazibrtknr: yes, we will have a meeting today11:09
strigazibrtknr: https://wiki.openstack.org/wiki/Meetings/Containers11:10
strigaziflwang1: flwang ^^11:12
brtknrstrigazi: does this patch address "UPDATED FAILED" clusters? https://review.openstack.org/#/c/600806/11:27
*** mattgo has joined #openstack-containers11:30
*** mvpnitesh has quit IRC11:39
strigazibrtknr: yes11:44
strigazibrtknr: almost all of the cases11:45
*** dave-mccowan has joined #openstack-containers12:23
*** dave-mccowan has quit IRC12:28
brtknrstrigazi: so this patch will attempt to update a cluster if it is already in a "UPDATE FAILED" state?12:47
*** salmankhan has joined #openstack-containers13:10
*** flwang1 has quit IRC13:47
*** lbragstad has quit IRC13:53
*** lbragstad has joined #openstack-containers13:54
*** ykarel is now known as ykarel|away14:16
*** zul has joined #openstack-containers14:28
*** ykarel|away has quit IRC14:36
*** hongbin has joined #openstack-containers14:46
*** ramishra has quit IRC15:07
*** zul has quit IRC15:08
*** belmoreira has quit IRC15:15
*** zul has joined #openstack-containers15:19
*** serlex has quit IRC15:42
*** mattgo has quit IRC15:59
*** ykarel|away has joined #openstack-containers16:10
keystonerc_adminI want to containerize k8s cloud-provider-openstack. Can anyone point me in the right direction?16:11
*** salmankhan has quit IRC17:10
*** jchhatbar has joined #openstack-containers17:14
*** errantekarmico has joined #openstack-containers17:16
*** janki has quit IRC17:17
*** jchhatbar has quit IRC17:40
*** ykarel|away has quit IRC18:10
*** errantekarmico has quit IRC18:40
*** errantekarmico has joined #openstack-containers18:40
*** errantekarmico has quit IRC18:43
*** errantekarmico has joined #openstack-containers18:44
*** ricolin has joined #openstack-containers18:46
*** errantekarmico has quit IRC19:00
*** errantekarmico has joined #openstack-containers19:01
*** errantekarmico has quit IRC19:03
*** errantekarmico has joined #openstack-containers19:03
*** errantekarmico has quit IRC19:06
*** errantekarmico has joined #openstack-containers19:07
*** errantekarmico has quit IRC19:08
*** errantekarmico has joined #openstack-containers19:09
*** errantekarmico has quit IRC19:14
*** errantekarmico has joined #openstack-containers19:20
*** errantekarmico has quit IRC19:24
*** errantekarmico has joined #openstack-containers19:24
*** errantekarmico has quit IRC19:35
*** errantekarmico has joined #openstack-containers19:35
*** errantekarmico has quit IRC19:38
*** errantekarmico has joined #openstack-containers19:39
*** oikiki has joined #openstack-containers19:48
*** dave-mccowan has joined #openstack-containers20:07
*** errantekarmico has quit IRC20:13
imdigitaljimhttps://github.com/kubernetes/cloud-provider-openstack/blob/master/Makefile#L19020:56
strigazikeystonerc_admin: ^^20:57
strigazi#startmeeting containers21:00
openstackMeeting started Tue Sep 18 21:00:43 2018 UTC and is due to finish in 60 minutes.  The chair is strigazi. Information about MeetBot at http://wiki.debian.org/MeetBot.21:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.21:00
*** openstack changes topic to " (Meeting topic: containers)"21:00
openstackThe meeting name has been set to 'containers'21:00
strigazi#topic Roll Call21:01
*** openstack changes topic to "Roll Call (Meeting topic: containers)"21:01
strigazio/21:01
colin-hello21:01
cbrummo/21:01
imdigitaljimo/21:01
strigaziLet's go  diretly to stories/ideas, no more bps :)21:02
strigazi#topic Stories/Ideas21:02
*** openstack changes topic to "Stories/Ideas (Meeting topic: containers)"21:02
strigaziWhat I would like more review is on : Fix cluster update command https://storyboard.openstack.org/#!/story/1722573 Patch in review: https://review.openstack.org/#/c/600806/21:03
strigaziTo unblock cluster-updates21:03
cbrummwe'll get some eyes on it21:04
strigaziplus we need a patch to be able to fix clusters in UPDATE_FAILED21:04
strigaziI can do it, I'll ping you21:04
strigaziIn heat at least you can do stack update and go back in a good state21:05
strigazi#action strigazi to push a patch for allowing cluster-update on UPDATE_FAILED clusters21:05
strigaziI would also like to ask for review on making flannel self hosted:21:06
strigazihttps://review.openstack.org/#/c/597150/21:06
imdigitaljimoh awesome!21:06
imdigitaljimthat will make managing CNI a little cleaner :D21:07
cbrummwe'll check that out too21:07
strigaziLaste week we rebooted hypervisors for l1tf and many nodes didn't have network21:07
imdigitaljimstrigazi: i had been working on some changes that would be good to add to https://review.openstack.org/#/c/585420/21:07
strigaziimdigitaljim: I'll strip the patch from the controller manager container, and just have CI code + git mv the container agent21:08
strigaziother changes can be added on top21:08
strigaziYou can push a patch with this one as dependency21:08
strigaziimdigitaljim: The changes are for containers or the ci?21:09
imdigitaljimsome additional changes for the containers21:09
imdigitaljimsorry some additional containers*21:09
imdigitaljimand only a couple changes21:10
imdigitaljimI have a latest (3.3.9) minimal etcd container21:10
strigaziif they are not for the CI let's do them ina follow-up patch21:10
imdigitaljimand a heat-container-agent using alpine as its base21:10
imdigitaljimsounds good21:10
strigaziimdigitaljim: sounds good, based on quai.io?21:10
imdigitaljimthe etcd is21:11
strigazifor etcd ^^21:11
imdigitaljimFROM quay.io/coreos/etcd:$ETCD_VERSION21:11
strigazicool21:11
strigazi3.3.x cleans the log of the api server21:11
imdigitaljim:)21:11
imdigitaljimand its much smalelr21:11
strigazifrom blah blah compacted blah blah21:12
imdigitaljimI've also finalized the calico update to latest21:12
imdigitaljimon our side, i'll get it all updated soon21:13
imdigitaljimhad a slow ramp-up since our trip :]21:13
strigazi:)21:13
strigazioh, right, can you also update the no-keypair option?21:14
strigaziI'll also update the patch to pass the actual public key as a string21:14
flwangsorry for the late21:15
strigazinot a keypair object, to allow cluster updates21:15
strigaziflwang: welcome21:15
strigaziSince flwang is here,21:16
imdigitaljimhttps://review.openstack.org/#/c/590443/21:16
imdigitaljimthis one/21:16
imdigitaljim?21:16
imdigitaljimflwang: hi! o/21:16
strigaziimdigitaljim: oh, I thought it was in conflict, looks good21:16
strigaziyes this one21:16
flwangimdigitaljim: strigazi: i'm keen  to know the output of Blizzard visiting to CERN ;)21:16
strigaziflwang: we missed you :)21:17
imdigitaljimstrigazi: i think going into the next couple weeks ill be looking into the in-place upgrade mechanism as well21:18
imdigitaljimflwang: ^21:18
strigazicool21:18
imdigitaljimdid you have any new updates to that?21:19
strigaziflwang: eandersson might have a fix for the UTs for the cluster healing cmd21:19
colin-strigazi, flwang are you guys using Designate? is anyone else who might be lurking using it? just curious21:19
strigaziflwang: we just need to test if it works in an actual py36 env21:19
strigaziimdigitaljim: not much, we can sync tmr if you can21:20
imdigitaljimyeah sounds good!21:20
flwangstrigazi: yep, i saw that21:20
strigazicolin-: we have our own DNS, many years old :)21:21
flwangi will test it in with both UT and run it in a py36 env21:21
imdigitaljimalso ill rebase/update the previous PRs with some new changes, such as starting to use config file instead of flags to move forward from deprecation21:21
flwangcolin-: no, we haven't enabled Designate, but it's on our roadmap21:21
eanderssonI wish we knew someone on the Designate team21:21
colin-ok21:21
imdigitaljimand kube-proxy daemonset most likely21:21
strigaziimdigitaljim: sounds good, I would do proxy first21:22
strigaziimdigitaljim: flwang in calico, can you tell easily which pods dont' have network?21:24
strigaziimdigitaljim: flwang with the l1tf reboots, the nodes were up, they had ips but not network acccess21:24
flwangstrigazi: what do you mean don't have network? there is a calico command can help you understand the network status of each pod21:25
imdigitaljimyeah21:25
flwangi had a blog but i didn't have time to finish it :( shame on me21:25
strigaziflwang:  ping each other21:25
imdigitaljimand you can generally see that the daemonset on the nodes isnt coming online21:25
imdigitaljimyou can see which nodes are having issues21:25
strigaziwell, in our case, flannel was up, the pods too but they couldn't connect to each other21:26
flwangstrigazi: yep, sure, the debug process with calico is fairly normal like general network debug21:26
strigaziok, I was looking for a heartbeat or smth21:26
flwang1. make sure pod can talk to local node, 2. make sure the node can talk each other21:26
flwangneed some iptables knowledge21:27
strigaziyes, but it is a bit manual. I was doing this exacltly21:27
flwangdue to involving the network policy21:27
flwangstrigazi: yep, not sure if there is a fully automated way to debug it, but given it's normal process, we could probably write a script21:28
flwangwe're deploying magnum into prod in catalyst cloud this week, so pls forgive my latency for upstream work21:29
strigazino prob21:29
colin-gl :)21:29
imdigitaljimyeah gl!21:29
cbrummgo flwang!21:29
eandersson\o/21:29
flwangcross finger for me :D21:30
strigazikeep us posted :)21:30
flwangsure21:30
flwangah, i do have a question21:30
strigaziif heat is going well, magnum will go well too21:30
flwangbased on the code, magnum doesn't support rotate certs for k8s21:30
strigazino, it doesn't21:30
flwangbut we're showing the menu on magnum-ui21:30
flwangshouldn't we drop it until we can really support it21:31
strigaziI think if you change the policy, it will hide21:31
strigazinot 100% sure21:31
flwangstrigazi: good point, will try21:31
strigaziI can ask tmr in our team21:32
flwanghttps://ibb.co/cFxT4z21:33
flwangthat's the dashboard we're using in catalyst cloud21:33
strigaziit looks cool21:34
strigaziare you in the openstack passport program, not sure how it is called21:34
flwangstrigazi: we're21:34
strigaziuses will see magnum there?21:35
flwangstrigazi: yes, for sure, but not now21:35
strigazinice21:35
flwangprobably next couple of weeks21:35
strigazivery cool21:35
flwanghttps://catalystcloud.nz/services/paas/catalyst-kubernetes-service/21:35
flwangwe're using the vanilla upstream Magnum now21:36
flwangand we'd like to stick on that as much as we can21:36
flwangwe'd like to upstream whatever can benefit others21:36
strigazi:)21:36
strigaziIt seems we are covered, anything else to discuss?21:38
flwangno21:39
flwangim good21:39
imdigitaljimno all set here :)21:39
flwangah, one small thing21:39
flwangi can manage to get the ds work for keystone auth21:39
flwangi will propose new patch set early next week21:39
strigazi+121:40
strigaziThanks for joining imdigitaljim flwang cbrumm colin- eandersson21:41
eanderssonAnytime!21:41
flwangstrigazi: thank you21:41
strigazi#endmeeting21:41
*** openstack changes topic to "OpenStack Containers Team"21:41
openstackMeeting ended Tue Sep 18 21:41:32 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)21:41
openstackMinutes:        http://eavesdrop.openstack.org/meetings/containers/2018/containers.2018-09-18-21.00.html21:41
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/containers/2018/containers.2018-09-18-21.00.txt21:41
openstackLog:            http://eavesdrop.openstack.org/meetings/containers/2018/containers.2018-09-18-21.00.log.html21:41
colin-ttyl21:44
*** oikiki has quit IRC21:47
*** ricolin has quit IRC22:13
*** ekarmic has joined #openstack-containers22:30
*** rcernin has joined #openstack-containers22:47
*** janki has joined #openstack-containers22:47
*** ekarmic has quit IRC22:47
*** errantekarmico has joined #openstack-containers22:48
*** hongbin has quit IRC23:03
eanderssonbtw flwang gotta love me a minor mystery :D23:21
eanderssonTook me longer than it should have to figure out that unit-test bug.23:22
flwangeandersson: thank you for the comments23:25
flwangi'm going to upload a new patchset to test and test it locally to see if it's fully working23:25
openstackgerritFeilong Wang proposed openstack/magnum master: [k8s] Update cluster health status by native API  https://review.openstack.org/57289723:39
*** errantekarmico has quit IRC23:40

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!