| *** goldyfruit_ has joined #openstack-containers | 00:20 | |
| *** sapd1_x has quit IRC | 00:35 | |
| *** hongbin has joined #openstack-containers | 01:35 | |
| *** spsurya has joined #openstack-containers | 02:18 | |
| *** ykarel|away has joined #openstack-containers | 02:25 | |
| *** dave-mccowan has quit IRC | 03:35 | |
| *** hongbin has quit IRC | 03:46 | |
| *** ykarel|away has quit IRC | 03:53 | |
| *** ramishra has joined #openstack-containers | 03:54 | |
| *** udesale has joined #openstack-containers | 04:07 | |
| *** ykarel|away has joined #openstack-containers | 04:08 | |
| *** ykarel|away is now known as ykarel | 04:09 | |
| *** ricolin has joined #openstack-containers | 05:00 | |
| *** sapd1_x has joined #openstack-containers | 06:25 | |
| *** rcernin has quit IRC | 07:09 | |
| *** threestrands has quit IRC | 07:20 | |
| *** ykarel is now known as ykarel|lunch | 07:39 | |
| *** trident has quit IRC | 07:50 | |
| *** lpetrut has joined #openstack-containers | 07:55 | |
| *** trident has joined #openstack-containers | 08:01 | |
| *** sapd1_x has quit IRC | 08:18 | |
| *** flwang1 has joined #openstack-containers | 08:57 | |
| flwang1 | strigazi: ping | 08:57 |
|---|---|---|
| *** ykarel|lunch is now known as ykarel| | 09:01 | |
| *** ykarel| is now known as ykarel | 09:01 | |
| *** rcernin has joined #openstack-containers | 09:39 | |
| strigazi | flwang1: hello | 09:52 |
| flwang1 | did you see my email? are we going to have the meeting on Wed 9:00AM UTC or Tue? | 09:53 |
| strigazi | both work for me | 09:53 |
| *** udesale has quit IRC | 10:09 | |
| *** udesale has joined #openstack-containers | 10:10 | |
| brtknr | strigazi: any idea how to diagnose the calico-node CrashLoopBackoff issue? | 10:54 |
| brtknr | Ive realised it is not to do with your change... I am getting the same problem on master branch | 10:54 |
| brtknr | Despite the cluster reporting its health as HEALTHY | 10:54 |
| *** udesale has quit IRC | 11:14 | |
| strigazi | brtknr: http://paste.openstack.org/raw/774676/ works for me | 11:15 |
| strigazi | master plus my pacth | 11:15 |
| brtknr | strigazi: on devstack? | 11:16 |
| strigazi | y | 11:16 |
| brtknr | what base OS? | 11:16 |
| brtknr | ubuntu or centos? | 11:16 |
| brtknr | can you share your local.conf? | 11:17 |
| *** dave-mccowan has joined #openstack-containers | 11:17 | |
| strigazi | for dsvm? | 11:18 |
| strigazi | for the OS of devstack ubuntu bionic | 11:18 |
| strigazi | brtknr: my local.conf http://paste.openstack.org/raw/774677/ | 11:19 |
| *** mgoerens has joined #openstack-containers | 11:22 | |
| brtknr | strigazi: is your devstack host baremetal or vm? | 11:37 |
| *** ykarel is now known as ykarel|afk | 11:50 | |
| strigazi | brtknr: baremetal | 11:58 |
| *** goldyfruit_ has quit IRC | 12:18 | |
| strigazi | brtknr: flwang1 2019-09-10 12:20:49.163 [FATAL][632] int_dataplane.go 824: Kernel's RPF check is set to 'loose'. This would allow endpoints to spoof their IP address. Calico requires net.ipv4.conf.all.rp_filter to be set to 0 or 1. If you require loose RPF and you are not concerned about spoofing, this check can be disabled by setting the IgnoreLooseRPF configuration parameter to 'true'. | 12:27 |
| strigazi | brtknr: flwang1 fix: http://paste.openstack.org/raw/774682/ | 12:28 |
| brtknr | strigazi: is that from the log I shared? | 12:31 |
| strigazi | no | 12:39 |
| strigazi | log calico-<hash> calico-node -f | 12:39 |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: k8s_fedora: Set rp_filter=1 for calico https://review.opendev.org/681244 | 12:45 |
| strigazi | brtknr: with patch above http://paste.openstack.org/raw/774683/ | 12:46 |
| strigazi | flwang1: ^^ | 12:46 |
| brtknr | strigazi: nice, I will lookout for [fatal] log messages in the future | 12:52 |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: k8s_fedora: Set rp_filter=1 for calico https://review.opendev.org/681244 | 12:55 |
| strigazi | ready to test, conformance passes. Please try it too. (min two worker nodes) | 12:55 |
| *** udesale has joined #openstack-containers | 12:57 | |
| brtknr | ah, it worked for me after setting that on the hose | 13:08 |
| brtknr | ah, it worked for me after setting that on the host | 13:08 |
| brtknr | strange | 13:08 |
| brtknr | how do you do conformance test? sonobuoy? | 13:09 |
| brtknr | strigazi: ^ | 13:09 |
| *** ykarel|afk is now known as ykarel | 13:10 | |
| brtknr | strigazi: thanks | 13:18 |
| *** goldyfruit_ has joined #openstack-containers | 13:23 | |
| *** rcernin has quit IRC | 13:45 | |
| *** ramishra has quit IRC | 13:51 | |
| *** ramishra has joined #openstack-containers | 13:51 | |
| strigazi | brtknr: yes sonobuoy? just 'sonobuoy run' | 14:09 |
| strigazi | sonobuoy run --e2e-focus "should provide DNS for service" is the simplest test to check if the network works | 14:10 |
| strigazi | brtknr: ^^ | 14:10 |
| *** ianychoi_ is now known as ianychoi | 14:37 | |
| *** ykarel is now known as ykarel|afk | 14:42 | |
| *** udesale has quit IRC | 15:00 | |
| *** udesale has joined #openstack-containers | 15:00 | |
| *** spsurya has quit IRC | 15:05 | |
| squarebracket | i have a couple blades both with their own separate openstack install. on one, when i spin up a cluster, i have to go to the instances and type some stuff on my keyboard to get some randomness for generating an ssh key, on the other blade i don't. anyone know why that might be the case? | 15:39 |
| *** ykarel|afk is now known as ykarel|away | 15:42 | |
| *** ykarel|away has quit IRC | 15:47 | |
| *** ykarel|away has joined #openstack-containers | 16:06 | |
| *** lpetrut has quit IRC | 16:12 | |
| *** colby_ has joined #openstack-containers | 16:37 | |
| colby_ | Hey everyone. What is the highest kubernetes version I can use on Rocky? | 16:38 |
| colby_ | We are running 7.1.0 | 16:47 |
| *** ykarel|away has quit IRC | 16:54 | |
| *** ykarel|away has joined #openstack-containers | 17:03 | |
| *** udesale has quit IRC | 17:12 | |
| squarebracket | oh, i see. the one where it doesn't have enough randomness is only sandybridge, so it doesn't have the hardware rng :\ | 17:24 |
| squarebracket | in that case, does someone here know where in the magnum code the nova VMs are created? i'll see if adding a virtio rng device makes the entropy larger. | 17:28 |
| *** trident has quit IRC | 17:46 | |
| ykarel|away | squarebracket, cluster vms are created using heat, defined in heat template for the driver | 17:55 |
| ykarel|away | ex, for k8s fedora-atomic, https://github.com/openstack/magnum/blob/master/magnum/drivers/k8s_fedora_atomic_v1/templates/kubemaster.yaml#L690-L703 | 17:55 |
| *** trident has joined #openstack-containers | 17:59 | |
| *** ykarel|away has quit IRC | 18:39 | |
| *** goldyfruit___ has joined #openstack-containers | 18:49 | |
| *** goldyfruit_ has quit IRC | 18:52 | |
| *** ricolin has quit IRC | 18:58 | |
| *** flwang1 has quit IRC | 19:01 | |
| *** pcaruana has quit IRC | 19:20 | |
| squarebracket | yeah thanks, found that. unfortunately, it seems OS::Nova::Server doesn't have a way to add other devices, so I guess I'm SOL on that fround :( | 19:59 |
| brtknr | squarebracket: can you add metadata to the image/flavor to invoke virtio rng? | 21:16 |
| brtknr | we did this recently to support FA29 in devstack | 21:17 |
| squarebracket | brtknr: oooh, good question! | 21:18 |
| brtknr | andrein: take a look at this: https://review.opendev.org/#/c/678294/5/devstack/lib/magnum | 21:21 |
| brtknr | image property needs to be --property hw_rng_model=virtio" | 21:21 |
| brtknr | flavor property --property hw_rng:allowed=True --property hw_rng:rate_bytes=1024 --property | 21:21 |
| brtknr | hw_rng:rate_period=1 | 21:21 |
| brtknr | squarebracket: someone asked the same question the other day, this was my answer | 21:21 |
| *** henriqueof1 has joined #openstack-containers | 21:30 | |
| *** henriqueof has quit IRC | 21:31 | |
| *** flwang has joined #openstack-containers | 21:49 | |
| squarebracket | brtknr: nice, that worked! thanks. i guess those are properties that openstack understands? or are those passed directly to qemu? | 22:17 |
| *** rcernin has joined #openstack-containers | 22:59 | |
| *** henriqueof1 has quit IRC | 23:02 | |
| *** goldyfruit___ has quit IRC | 23:17 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!