| openstackgerrit | Feilong Wang proposed openstack/python-magnumclient master: Drop py27 job https://review.opendev.org/713554 | 00:07 |
|---|---|---|
| openstackgerrit | Feilong Wang proposed openstack/python-magnumclient master: Drop py27 tests https://review.opendev.org/713555 | 00:09 |
| openstackgerrit | Feilong Wang proposed openstack/python-magnumclient master: Drop py27 tests https://review.opendev.org/713555 | 00:19 |
| *** dave-mccowan has quit IRC | 00:55 | |
| *** ivve has quit IRC | 01:27 | |
| *** xinliang has joined #openstack-containers | 01:37 | |
| openstackgerrit | Feilong Wang proposed openstack/magnum master: [k8s] Support updating k8s cluster health status https://review.opendev.org/710384 | 02:49 |
| *** ricolin_ has joined #openstack-containers | 03:00 | |
| *** dave-mccowan has joined #openstack-containers | 03:18 | |
| *** ykarel|away is now known as ykarel | 03:45 | |
| *** xinliang has quit IRC | 04:05 | |
| *** udesale has joined #openstack-containers | 04:54 | |
| *** dave-mccowan has quit IRC | 04:56 | |
| *** ricolin_ has quit IRC | 05:05 | |
| *** ricolin_ has joined #openstack-containers | 05:05 | |
| *** ricolin_ has quit IRC | 05:05 | |
| *** mkuf has joined #openstack-containers | 06:44 | |
| *** mkuf_ has joined #openstack-containers | 07:15 | |
| *** mkuf has quit IRC | 07:19 | |
| *** yoctozepto9 has joined #openstack-containers | 08:14 | |
| *** yoctozepto has quit IRC | 08:15 | |
| *** yoctozepto9 is now known as yoctozepto | 08:15 | |
| *** rcernin has quit IRC | 08:21 | |
| *** flwang1 has joined #openstack-containers | 08:37 | |
| flwang1 | brtknr: ping | 08:37 |
| flwang1 | brtknr: for magnum client gate, we need this https://review.opendev.org/#/c/713555/ | 08:38 |
| *** yoctozepto has quit IRC | 08:49 | |
| *** strigazi has joined #openstack-containers | 08:57 | |
| strigazi | o/ | 08:57 |
| *** yoctozepto has joined #openstack-containers | 08:59 | |
| strigazi | team? | 08:59 |
| flwang1 | o/ | 08:59 |
| flwang1 | #startmeeting magnum | 09:00 |
| openstack | Meeting started Wed Mar 18 09:00:10 2020 UTC and is due to finish in 60 minutes. The chair is flwang1. Information about MeetBot at http://wiki.debian.org/MeetBot. | 09:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 09:00 |
| *** openstack changes topic to " (Meeting topic: magnum)" | 09:00 | |
| openstack | The meeting name has been set to 'magnum' | 09:00 |
| flwang1 | #topic roll call | 09:00 |
| *** openstack changes topic to "roll call (Meeting topic: magnum)" | 09:00 | |
| flwang1 | o/ | 09:00 |
| strigazi | o/ | 09:00 |
| strigazi | \o | 09:00 |
| brtknr | o/ | 09:00 |
| flwang1 | team, put your topics on https://etherpad.openstack.org/p/magnum-weekly-meeting pls | 09:01 |
| flwang1 | #topic drop py27 for client https://review.opendev.org/713555 | 09:02 |
| *** openstack changes topic to "drop py27 for client https://review.opendev.org/713555 (Meeting topic: magnum)" | 09:02 | |
| flwang1 | now the magnum client gate is broken because of the py27 job failure, i have proposed above patch to remove the py27 | 09:03 |
| flwang1 | it's a simple one, so please help give it a quick review | 09:03 |
| strigazi | is this like a community goal? | 09:03 |
| flwang1 | i think so | 09:04 |
| flwang1 | for this cycle, but our client didn't get much love ;) | 09:04 |
| strigazi | ok | 09:05 |
| flwang1 | #topic Allow updating health_status https://review.opendev.org/#/c/710384/ | 09:06 |
| *** openstack changes topic to "Allow updating health_status https://review.opendev.org/#/c/710384/ (Meeting topic: magnum)" | 09:06 | |
| flwang1 | strigazi: i have added the policy check for this feature | 09:06 |
| flwang1 | and i have tested, it works good | 09:06 |
| flwang1 | strigazi: brtknr: any question about this one? | 09:07 |
| strigazi | I will try to review. I won't manage today | 09:07 |
| flwang1 | btw, are you guys safe about the virus? | 09:07 |
| brtknr | I will test it this week | 09:07 |
| flwang1 | do you need breathing mask? | 09:07 |
| strigazi | I'm good | 09:08 |
| brtknr | Everyone at stackhpc started working from home from last week :) | 09:08 |
| flwang1 | ok, God bless you | 09:08 |
| brtknr | Whats it like in NZ? | 09:08 |
| flwang1 | i'm starting to wfh since this week | 09:08 |
| *** ykarel is now known as ykarel|away | 09:08 | |
| flwang1 | here are 20 confirmed case | 09:08 |
| flwang1 | 3 in wellington | 09:08 |
| brtknr | Ah thats nothing :) we have ~2000 | 09:09 |
| flwang1 | but i can see it may raise to 200 after one month | 09:09 |
| flwang1 | ok, let's continue | 09:09 |
| flwang1 | #topic selinx disable | 09:10 |
| *** openstack changes topic to "selinx disable (Meeting topic: magnum)" | 09:10 | |
| brtknr | It doesnt take very long for it to accelerate though, only 2 weeks ago, we have about 200 | 09:10 |
| flwang1 | brtknr: ^ | 09:10 |
| brtknr | At catalyst are you using cinder volumes on fedora coreos yet? | 09:10 |
| brtknr | the seliux issue exists for both in-tree and out of tree cinder | 09:11 |
| flwang1 | brtknr: we haven't upgrade to train, we're still using fedora atomic | 09:12 |
| flwang1 | we're working on the upgrade now | 09:12 |
| strigazi | So this volume plugin had never potential to be secure | 09:12 |
| brtknr | strigazi: elaborate? | 09:12 |
| strigazi | selinux was never working with this plugin, that's it | 09:13 |
| strigazi | since it had this issue forever as you said. I haven't checked myself | 09:14 |
| flwang1 | is it a cinder issue or any other cloud provider may have similar issue? | 09:14 |
| strigazi | not a cidner issue | 09:15 |
| flwang1 | cinder or CPO? | 09:15 |
| strigazi | client only | 09:15 |
| strigazi | CPO | 09:15 |
| flwang1 | is there an issue in CPO to track this? | 09:15 |
| strigazi | yes, brtknr opened it | 09:15 |
| flwang1 | good | 09:15 |
| flwang1 | for magnum side, i think what we can do now is adding the new label to allow disable it | 09:16 |
| brtknr | yep | 09:16 |
| flwang1 | anything else about this? | 09:16 |
| brtknr | I will test with strigazi's suggest to add selinux config into ignition file so we dont need to reload it | 09:16 |
| brtknr | disabling zincati was a good call | 09:17 |
| brtknr | next topic? | 09:18 |
| strigazi | +1 on having selinux on by default. This way we know what forces as to disable | 09:18 |
| flwang1 | +1 | 09:19 |
| flwang1 | #topic labels merging | 09:19 |
| *** openstack changes topic to "labels merging (Meeting topic: magnum)" | 09:19 | |
| flwang1 | strigazi: did you get a chance to discuss with Ricardo? | 09:19 |
| strigazi | yes, we had came up with a different plan the ugly ++ and -- | 09:20 |
| strigazi | yes, we had came up with a different plan than the ugly ++ and -- | 09:20 |
| flwang1 | strigazi: so what's the solution? | 09:20 |
| strigazi | have cluster labels and nodegroup labels | 09:20 |
| flwang1 | conclusion | 09:20 |
| strigazi | And have per driver policy in the config for which labels can be passed as cluster labels | 09:21 |
| strigazi | or ng labels | 09:21 |
| strigazi | currently, if you pass labels in cluster creation basically CT labels are completely ignored. | 09:22 |
| strigazi | This was we know what the user passed. | 09:22 |
| strigazi | with ++ and --, you can't have this | 09:22 |
| strigazi | unless you log the payload of the requests | 09:23 |
| flwang1 | are you going to pick up the current patch? | 09:23 |
| strigazi | in log or notification, which is a horrible idea | 09:23 |
| strigazi | I saw this in helm 3 where, helm reports what have passed and what is default. While in helm 2, if you do get values you see all values merged | 09:24 |
| flwang1 | :) | 09:24 |
| flwang1 | so which way we should follow | 09:24 |
| strigazi | what i mentioned, having different labels for cluster and ng | 09:25 |
| strigazi | I can write it in a spec | 09:25 |
| strigazi | brtknr: you can jump in if you want | 09:25 |
| flwang1 | it would be appreciated if you can propose a spec | 09:26 |
| strigazi | brtknr: we can draft the spec together and you take over | 09:26 |
| flwang1 | i'm happy to review it | 09:26 |
| flwang1 | anything else we need to discuss? | 09:27 |
| brtknr | sorry i had to answer a colleague's question as i was just catching up | 09:28 |
| strigazi | let's wait of brtknr to read | 09:28 |
| brtknr | Hmm I might be able to work on this from June depending on whether we get funded for it | 09:30 |
| strigazi | ok | 09:30 |
| flwang1 | June is a bit late | 09:30 |
| flwang1 | i can help as well | 09:30 |
| strigazi | ok, I try to wrap some networking tests this week and I will get into it | 09:31 |
| flwang1 | strigazi: thank you very much | 09:31 |
| flwang1 | anything else? | 09:31 |
| strigazi | One more thing, | 09:31 |
| strigazi | Apart from the fixing the labels | 09:32 |
| strigazi | we could introduce new fields that resemble config maps | 09:32 |
| flwang1 | explain more? | 09:33 |
| flwang1 | what do you mean resemble? | 09:33 |
| strigazi | The need we have, similar to the url manifest you added | 09:33 |
| flwang1 | ok, can you give an example? | 09:33 |
| strigazi | sorry guys, I need to get the door | 09:33 |
| strigazi | please wait t abit | 09:33 |
| openstackgerrit | Merged openstack/python-magnumclient master: Drop py27 tests https://review.opendev.org/713555 | 09:37 |
| strigazi | I'm back | 09:38 |
| strigazi | For example, we deploy a few things we helm and we have some value set | 09:39 |
| strigazi | For example, we deploy a few things we helm and we have some values set | 09:39 |
| strigazi | but we expose to the API only handful of them | 09:39 |
| strigazi | nginx-ingress, prometheus have an immense amount of config options | 09:40 |
| strigazi | we can not expose everything via labels | 09:40 |
| flwang1 | you mean saving those config options into an extra cluster field? | 09:40 |
| strigazi | yes | 09:40 |
| strigazi | so this is for helm | 09:41 |
| flwang1 | hmm... then it has to be a json format | 09:41 |
| strigazi | we have other addons, eg NPD | 09:41 |
| flwang1 | otherwise, it will be very limited | 09:41 |
| strigazi | flwang1: in magnum db blob | 09:41 |
| strigazi | but it can yaml | 09:42 |
| flwang1 | if you have a patch or spec, i'm happy to review it | 09:42 |
| openstackgerrit | Feilong Wang proposed openstack/python-magnumclient master: Support updating cluster health status https://review.opendev.org/713344 | 09:42 |
| flwang1 | but i can see the pain | 09:42 |
| strigazi | the end goal for us at CERN would be to have most addons with helm | 09:42 |
| strigazi | even calico | 09:42 |
| flwang1 | i'm happy to support that goal | 09:43 |
| strigazi | and also deployed via fluxcd, so that we can uprade them too | 09:43 |
| strigazi | and also deployed via fluxcd, so that we can upgrade them too | 09:43 |
| flwang1 | but the current helm way in magnum is not very good | 09:43 |
| strigazi | flwang1: for calico for example we added a new labels recently | 09:44 |
| flwang1 | what's the new label? | 09:44 |
| strigazi | the IPIP mode | 09:44 |
| flwang1 | right | 09:44 |
| strigazi | we wouldn't need a patch for this | 09:45 |
| strigazi | anyway you get the idea, right? | 09:45 |
| flwang1 | yes | 09:45 |
| flwang1 | sorry, strigazi i have to leave earlier today, anything else we need to discuss? | 09:45 |
| strigazi | all good here | 09:45 |
| flwang1 | brtknr: ? | 09:46 |
| brtknr | are we going to upgrade to using helm3 at some point? | 09:46 |
| brtknr | i'm a big fan of a world without tiller | 09:46 |
| strigazi | everyone is | 09:46 |
| strigazi | the creators of tiller too | 09:46 |
| brtknr | lol | 09:46 |
| strigazi | brtknr: do you want to do it? | 09:46 |
| flwang1 | let me end the meeting, and you guys can continue the topic ;) | 09:47 |
| brtknr | i will try :) | 09:47 |
| strigazi | good night | 09:47 |
| flwang1 | thank you for joining | 09:47 |
| brtknr | night all | 09:47 |
| flwang1 | #endmeeting | 09:47 |
| *** openstack changes topic to "OpenStack Containers Team | Meeting: every Wednesday @ 9AM UTC | Agenda: https://etherpad.openstack.org/p/magnum-weekly-meeting" | 09:47 | |
| openstack | Meeting ended Wed Mar 18 09:47:53 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 09:47 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/magnum/2020/magnum.2020-03-18-09.00.html | 09:47 |
| flwang1 | ttyl | 09:47 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/magnum/2020/magnum.2020-03-18-09.00.txt | 09:47 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/magnum/2020/magnum.2020-03-18-09.00.log.html | 09:47 |
| brtknr | i mean morning to you strigazi | 09:48 |
| strigazi | :) | 09:48 |
| brtknr | strigazi: we have tried some helm2 charts on helm3 and mostly it works without a fuss | 09:49 |
| brtknr | so the transition is probably not going to be too difficult | 09:50 |
| brtknr | but the official helm chart repo is due to be deprecated soon | 09:50 |
| brtknr | *deprecated and will be removed soon | 09:51 |
| *** flwang1 has quit IRC | 09:52 | |
| *** yoctozepto has quit IRC | 09:59 | |
| *** yoctozepto has joined #openstack-containers | 10:03 | |
| *** yoctozepto2 has joined #openstack-containers | 10:13 | |
| *** yoctozepto has quit IRC | 10:13 | |
| *** yoctozepto2 is now known as yoctozepto | 10:13 | |
| openstackgerrit | Merged openstack/magnum stable/train: atomic-podman: Set log imit to 50m https://review.opendev.org/713211 | 10:33 |
| openstackgerrit | Merged openstack/magnum stable/train: fcos-podman: Set max size for logging to 50m https://review.opendev.org/713210 | 10:33 |
| openstackgerrit | Merged openstack/magnum stable/train: Upgrade pause image to version 3.1 https://review.opendev.org/713218 | 10:33 |
| openstackgerrit | Merged openstack/magnum stable/train: k8s-fedora: Set max-size to 10m for containers https://review.opendev.org/713214 | 10:33 |
| openstackgerrit | Merged openstack/magnum stable/train: [stable] Remove magnum-container-publish from .zuul.yaml https://review.opendev.org/713279 | 10:33 |
| openstackgerrit | Bharat Kunwar proposed openstack/magnum master: Fix join of status_reason https://review.opendev.org/713407 | 10:40 |
| *** ivve has joined #openstack-containers | 11:47 | |
| *** sapd1 has quit IRC | 11:53 | |
| openstackgerrit | Bharat Kunwar proposed openstack/magnum master: Add 'selinux_mode' label. https://review.opendev.org/713193 | 12:04 |
| *** udesale_ has joined #openstack-containers | 12:44 | |
| *** udesale has quit IRC | 12:47 | |
| *** sapd1 has joined #openstack-containers | 13:18 | |
| *** vishalmanchanda has joined #openstack-containers | 13:19 | |
| *** spiette_ has joined #openstack-containers | 13:43 | |
| *** spiette has quit IRC | 13:44 | |
| *** dave-mccowan has joined #openstack-containers | 13:57 | |
| *** yoctozepto1 has joined #openstack-containers | 14:12 | |
| *** yoctozepto has quit IRC | 14:13 | |
| *** yoctozepto1 is now known as yoctozepto | 14:13 | |
| *** vishalmanchanda has quit IRC | 15:31 | |
| *** udesale_ has quit IRC | 15:32 | |
| *** mkuf_ has quit IRC | 15:38 | |
| *** sapd1 has quit IRC | 16:09 | |
| *** johanssone has quit IRC | 16:51 | |
| *** johanssone has joined #openstack-containers | 16:56 | |
| *** johanssone has quit IRC | 16:57 | |
| openstackgerrit | Bharat Kunwar proposed openstack/magnum stable/train: Add cinder_csi_enabled label https://review.opendev.org/713699 | 17:02 |
| *** johanssone has joined #openstack-containers | 17:03 | |
| *** johanssone has quit IRC | 17:03 | |
| openstackgerrit | Bharat Kunwar proposed openstack/magnum master: Add selinux_mode label. https://review.opendev.org/713193 | 17:03 |
| *** johanssone has joined #openstack-containers | 17:05 | |
| *** johanssone has quit IRC | 17:05 | |
| *** johanssone has joined #openstack-containers | 17:06 | |
| *** pcaruana has quit IRC | 17:08 | |
| *** johanssone has quit IRC | 17:08 | |
| *** johanssone has joined #openstack-containers | 17:14 | |
| *** johanssone has quit IRC | 17:15 | |
| *** johanssone has joined #openstack-containers | 17:20 | |
| *** johanssone has quit IRC | 17:20 | |
| *** johanssone has joined #openstack-containers | 17:23 | |
| *** johanssone has quit IRC | 17:27 | |
| *** pcaruana has joined #openstack-containers | 17:28 | |
| *** mkuf_ has joined #openstack-containers | 20:35 | |
| *** mkuf_ has quit IRC | 20:39 | |
| *** openstackstatus has joined #openstack-containers | 21:15 | |
| *** ChanServ sets mode: +v openstackstatus | 21:16 | |
| *** rcernin has joined #openstack-containers | 22:44 | |
| *** ivve has quit IRC | 22:50 | |
| *** threestrands has joined #openstack-containers | 22:58 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!