| *** goldyfruit___ has quit IRC | 00:42 | |
| *** ricolin has quit IRC | 00:45 | |
| *** ricolin has joined #openstack-containers | 00:57 | |
| *** ykarel|pto has joined #openstack-containers | 04:01 | |
| *** ykarel|pto is now known as ykarel | 04:01 | |
| *** dave-mccowan has quit IRC | 04:02 | |
| *** jerryz has quit IRC | 04:07 | |
| *** udesale has joined #openstack-containers | 04:35 | |
| *** ykarel is now known as ykarel|afk | 05:02 | |
| *** ykarel|afk has quit IRC | 05:02 | |
| *** janki has joined #openstack-containers | 05:17 | |
| *** ykarel has joined #openstack-containers | 05:25 | |
| *** ivve has joined #openstack-containers | 05:57 | |
| *** ivve has quit IRC | 06:15 | |
| *** mkuf has quit IRC | 06:49 | |
| *** ykarel is now known as ykarel|afk | 06:59 | |
| *** pcaruana has joined #openstack-containers | 07:09 | |
| *** lpetrut has joined #openstack-containers | 07:35 | |
| *** ykarel|afk is now known as ykarel | 08:03 | |
| *** janki has quit IRC | 08:46 | |
| *** jchhatbar has joined #openstack-containers | 08:47 | |
| *** ivve has joined #openstack-containers | 08:53 | |
| *** flwang1 has joined #openstack-containers | 08:56 | |
| flwang1 | strigazi: brtknr: around? | 08:57 |
|---|---|---|
| flwang1 | strigazi: brtknr: if both of your are not around, i may have to cancel this meeting for today | 09:00 |
| *** ykarel is now known as ykarel|lunch | 09:03 | |
| flwang1 | strigazi: brtknr: okay, i have to cancel this meeting for today. I will go through the irc log tomorrow | 09:06 |
| *** vesper has joined #openstack-containers | 09:08 | |
| *** vesper11 has quit IRC | 09:09 | |
| *** trident has quit IRC | 09:26 | |
| brtknr | flwang1: i am here | 09:30 |
| *** trident has joined #openstack-containers | 09:34 | |
| brtknr | strigazi: u there? | 09:38 |
| strigazi | I'm here | 09:43 |
| strigazi | brtknr: The time change got us | 09:44 |
| strigazi | it is 9:45 UTC | 09:45 |
| brtknr | Oops | 09:45 |
| brtknr | Dammit! | 09:45 |
| brtknr | strigazi: I have sent a calendar invite to you both to avoid future confusion :) | 09:49 |
| brtknr | strigazi: I was wondering if you're there as I'd like to ask a few questions | 09:52 |
| strigazi | it is twice a year, as you want | 09:53 |
| strigazi | brtknr: next week I can't, I'll be in china | 09:54 |
| dioguerra | brtknr: can i has the link? | 09:54 |
| brtknr | dioguerra: https://calendar.google.com/event?action=TEMPLATE&tmeid=XzYwcjRjaDI2NmNvM2ViOWg2cDIzaWI5azg4cGphYmExODkwajRiOWo4NG9rNmRpMThvczM4Y3BuNm9fMjAxOTEwMzBUMDkwMDAwWiBiaGFyYXRAc3RhY2tocGMuY29t&tmsrc=bharat%40stackhpc.com&scp=ALL | 09:54 |
| brtknr | I'll add to weekly agenda | 09:54 |
| strigazi | brtknr: I had done this already in the past, nobody cared. | 09:55 |
| strigazi | https://wiki.openstack.org/wiki/Magnum#IRC_and_IRC_Meetings | 09:55 |
| strigazi | The weekly Containers IRC meeting is held on Tuesdays at 1000 UTC calendar and HTML. | 09:55 |
| strigazi | I abandoned this ^^ | 09:55 |
| brtknr | strigazi: that info is out of date :) | 09:56 |
| strigazi | because I abandoned this ^^ | 09:56 |
| strigazi | because nobody said, thanks, or, I use this | 09:56 |
| strigazi | anyway | 09:57 |
| strigazi | brtknr: you had some questions? | 09:57 |
| brtknr | strigazi: all we can do it try | 09:59 |
| brtknr | yes, if i add floating ip to an ingress node, how easy would it be to generate cluster certs that are valid for the cluster? | 10:00 |
| brtknr | as a post deployment step? | 10:00 |
| brtknr | atm, the certs are only valid if fip is enabled at cluster creation time | 10:00 |
| strigazi | certs for a service? | 10:00 |
| strigazi | certs for kubelet? | 10:01 |
| strigazi | what kind of certs? | 10:01 |
| brtknr | for the kubernetes API | 10:01 |
| brtknr | to use kubectl against | 10:01 |
| strigazi | they are created only at creation time. you can do it by hand | 10:01 |
| strigazi | what is the use case? | 10:02 |
| strigazi | new project? | 10:02 |
| brtknr | if ive got a cluster without fip, and add fip after the cluster is created and try to use kubectl against the kubernetes api | 10:02 |
| brtknr | so we have limited number of fips and we want to add fip to cluster without using loadbalancer | 10:02 |
| brtknr | to the master node | 10:03 |
| strigazi | this is supported | 10:03 |
| strigazi | at creation time, I don't remember the label | 10:03 |
| brtknr | fip to master node without lb? | 10:03 |
| strigazi | but even post creation, you can generate them in the node. | 10:03 |
| strigazi | and replace the old ones | 10:04 |
| strigazi | https://github.com/openstack/magnum/blob/master/magnum/drivers/common/templates/kubernetes/fragments/make-cert.sh | 10:04 |
| strigazi | sounds good? | 10:04 |
| strigazi | brtknr: ping | 10:05 |
| brtknr | strigazi: one sec just looking | 10:06 |
| strigazi | this is how it is done, this script is very simple. And you can copy and execute it. | 10:08 |
| strigazi | I have to go in 5' | 10:08 |
| brtknr | strigazi: cool, i thought i'd need to rebuild the cluster in some way | 10:08 |
| brtknr | please let me know if you ca remember what that label is! | 10:09 |
| brtknr | if I add floating IP to an ingress node on a private cluster, are the services reachable? | 10:10 |
| strigazi | what is an ingress node? | 10:10 |
| brtknr | a node labelled ingress | 10:10 |
| strigazi | ok, any node | 10:10 |
| brtknr | for nginx and trafeik | 10:10 |
| brtknr | or do those need special certs too? | 10:10 |
| strigazi | yes, if you open the security group | 10:10 |
| strigazi | they application will need certs | 10:11 |
| strigazi | you can use traefik and if the fip is publicly assecisble use let's encrypt | 10:11 |
| strigazi | or the cert-manager by jetstack | 10:12 |
| brtknr | kgz: ^ | 10:12 |
| brtknr | thanks | 10:12 |
| strigazi | https://docs.traefik.io/https/acme/ | 10:12 |
| *** ykarel|lunch is now known as ykarel | 10:13 | |
| brtknr | strigazi: what next? we need to schedule a planning meeting for next release | 10:13 |
| strigazi | traefik can do everything (no need for cert-manager) | 10:13 |
| strigazi | brtknr: we can do it the week after | 10:14 |
| strigazi | after the summit | 10:14 |
| brtknr | okay, have a nice time at the summit! | 10:14 |
| *** rcernin has quit IRC | 10:27 | |
| brtknr | I am really surprised neither you or flwang1 are hitting issues with 1.14.7 and 1.14.8 images | 10:32 |
| brtknr | strigazi: ^ | 10:32 |
| *** pcaruana has quit IRC | 10:35 | |
| *** openstackstatus has quit IRC | 10:44 | |
| *** mgoddard has quit IRC | 10:46 | |
| *** jchhatbar has quit IRC | 11:14 | |
| *** goldyfruit___ has joined #openstack-containers | 11:29 | |
| *** ramishra has quit IRC | 11:46 | |
| *** ramishra has joined #openstack-containers | 11:47 | |
| *** goldyfruit___ has quit IRC | 11:54 | |
| *** pcaruana has joined #openstack-containers | 12:00 | |
| *** ykarel is now known as ykarel|afk | 12:02 | |
| *** udesale has quit IRC | 12:26 | |
| *** jmlowe has quit IRC | 12:36 | |
| *** goldyfruit___ has joined #openstack-containers | 13:04 | |
| *** ramishra has quit IRC | 13:07 | |
| *** jmlowe has joined #openstack-containers | 13:11 | |
| *** ramishra has joined #openstack-containers | 13:41 | |
| *** ykarel|afk is now known as ykarel | 13:45 | |
| *** dave-mccowan has joined #openstack-containers | 14:00 | |
| *** ykarel is now known as ykarel|meeting | 14:04 | |
| *** goldyfruit_ has joined #openstack-containers | 14:28 | |
| *** goldyfruit___ has quit IRC | 14:31 | |
| *** dasp has quit IRC | 14:32 | |
| *** dasp has joined #openstack-containers | 14:42 | |
| *** ykarel|meeting is now known as ykarel | 15:01 | |
| *** lpetrut has quit IRC | 15:22 | |
| *** jmlowe has quit IRC | 15:41 | |
| *** goldyfruit___ has joined #openstack-containers | 15:49 | |
| *** goldyfruit_ has quit IRC | 15:52 | |
| *** ykarel is now known as ykarel|away | 15:55 | |
| *** ivve has quit IRC | 16:10 | |
| *** ricolin has quit IRC | 16:41 | |
| *** openstackstatus has joined #openstack-containers | 17:02 | |
| *** ChanServ sets mode: +v openstackstatus | 17:02 | |
| *** jmlowe has joined #openstack-containers | 17:05 | |
| *** jerryz has joined #openstack-containers | 18:06 | |
| *** pcaruana has quit IRC | 18:10 | |
| *** ykarel|away has quit IRC | 18:31 | |
| *** pcaruana has joined #openstack-containers | 19:05 | |
| *** ivve has joined #openstack-containers | 19:06 | |
| *** pcaruana has quit IRC | 19:29 | |
| *** flwang1 has quit IRC | 19:37 | |
| *** pcaruana has joined #openstack-containers | 19:39 | |
| *** pcaruana has quit IRC | 20:09 | |
| *** iokiwi has quit IRC | 20:31 | |
| *** goldyfruit___ has quit IRC | 20:42 | |
| *** iokiwi has joined #openstack-containers | 20:49 | |
| *** goldyfruit___ has joined #openstack-containers | 22:27 | |
| *** goldyfruit___ has quit IRC | 22:51 | |
| *** ivve has quit IRC | 23:21 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!