portdirect | or you wanting to totally seperate from the keystone catalog? | 00:00 |
---|---|---|
cfriesen | we would like to ensure that all nova operations go via the proxy. on our current baremetal system this was done by having all the endpoints in keystone hit the proxy | 00:00 |
openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Nova: Remove unused default values in values.yaml https://review.openstack.org/603525 | 00:02 |
cfriesen | while the "real" nova is listening on a separate port that isn't in keystone | 00:02 |
portdirect | roger, would using vhosts work here? or you need port based addressing of endpoints? | 00:02 |
portdirect | I ask as i think i can see a awy to do it via request headers, but would need to think for a bit on how to do it cleanly as a mitm proxy as you describe via ports | 00:03 |
portdirect | would it be appropriate to think of your proxy as being a simple proxy ala nginx/haproxy or summat more fancy? | 00:05 |
cfriesen | not sure. our existing proxy code uses ports, but I'm open to suggestions. It's somewhat more fancy...some commands get passed on to a sort of orchestration engine before being passed to the "real" nova-api | 00:05 |
portdirect | roger - I'll noodle on it for a bit over some noodles and get back to you if i think of anything simple | 00:07 |
cfriesen | sounds good, thanks | 00:07 |
cfriesen | I'm off to supper | 00:07 |
portdirect | spitballing here - the simplest may be to add a `pod_port` param that defaults to the `internal` port if not set in the endpoints section | 00:07 |
portdirect | same - catch you in a bit | 00:07 |
*** sthussey has quit IRC | 00:15 | |
*** evrardjp has quit IRC | 01:12 | |
openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: Rally: Update chart https://review.openstack.org/587621 | 01:25 |
openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: RFC: Add reference values.yaml template for new charts https://review.openstack.org/577234 | 01:26 |
openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm-infra master: Add calico-node dependency on calico-settings job https://review.openstack.org/600841 | 01:33 |
*** chenyb4 has joined #openstack-helm | 01:35 | |
*** martin_ken has quit IRC | 01:59 | |
openstackgerrit | Tin Lam proposed openstack/openstack-helm master: Fix .zuul.yaml https://review.openstack.org/602950 | 02:36 |
openstackgerrit | Tin Lam proposed openstack/openstack-helm-infra master: Implements network policy toolkit function https://review.openstack.org/596888 | 02:48 |
openstackgerrit | Tin Lam proposed openstack/openstack-helm-infra master: Implements network policy toolkit function https://review.openstack.org/596888 | 02:52 |
openstackgerrit | Tin Lam proposed openstack/openstack-helm-infra master: Add network policy toolkit function https://review.openstack.org/596888 | 02:54 |
openstackgerrit | Merged openstack/openstack-helm-infra master: Revert "Make it possible to secure pool during deployment" https://review.openstack.org/603496 | 02:57 |
openstackgerrit | Merged openstack/openstack-helm-infra master: Elasticsearch: Add ingress, remove node ports https://review.openstack.org/591730 | 02:57 |
*** jistr has quit IRC | 03:00 | |
*** jistr has joined #openstack-helm | 03:00 | |
*** d|k has quit IRC | 03:01 | |
openstackgerrit | Tin Lam proposed openstack/openstack-helm master: Add network policy in gate https://review.openstack.org/598189 | 03:27 |
openstackgerrit | Tin Lam proposed openstack/openstack-helm-infra master: Add network policy toolkit function https://review.openstack.org/596888 | 03:38 |
*** cfriesen has quit IRC | 03:55 | |
*** lemko has joined #openstack-helm | 04:22 | |
*** roman_g has quit IRC | 04:52 | |
openstackgerrit | Jawon Choo proposed openstack/openstack-helm-infra master: Node-Exporter: allows to set collectors enable/disable https://review.openstack.org/587812 | 04:59 |
*** ruijing3 has quit IRC | 05:47 | |
*** chenyb4 has quit IRC | 05:54 | |
*** lemko has quit IRC | 06:31 | |
*** tmorin has joined #openstack-helm | 07:01 | |
*** cfriesen has joined #openstack-helm | 07:18 | |
*** gkadam has joined #openstack-helm | 07:36 | |
*** lemko has joined #openstack-helm | 07:37 | |
*** gmmaha has quit IRC | 07:37 | |
*** gmmaha has joined #openstack-helm | 07:38 | |
*** sgrasley has quit IRC | 07:39 | |
*** cfriesen has quit IRC | 07:39 | |
*** sgrasley has joined #openstack-helm | 07:51 | |
*** gkadam has quit IRC | 07:57 | |
*** roman_g has joined #openstack-helm | 08:17 | |
*** evrardjp has joined #openstack-helm | 09:33 | |
*** evrardjp has left #openstack-helm | 10:04 | |
*** b_briones has joined #openstack-helm | 10:09 | |
*** jean-philippe has joined #openstack-helm | 10:15 | |
*** jean-philippe has quit IRC | 10:24 | |
*** jean-philippe has joined #openstack-helm | 10:24 | |
*** jean-philippe is now known as evrardjp | 10:24 | |
*** evrardjp has quit IRC | 10:32 | |
*** b_briones has quit IRC | 10:41 | |
*** b_briones has joined #openstack-helm | 11:46 | |
*** b_briones has quit IRC | 11:54 | |
*** b_briones has joined #openstack-helm | 12:27 | |
*** sgrasley_ has joined #openstack-helm | 12:34 | |
*** mardim has quit IRC | 12:34 | |
*** sgrasley has quit IRC | 12:37 | |
*** sgrasley_ has quit IRC | 12:39 | |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: HTK: Add s3 user/bucket scripts, snippets, manifests https://review.openstack.org/588066 | 12:48 |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: HTK: Add s3 user/bucket scripts, snippets, manifests https://review.openstack.org/588066 | 12:49 |
*** aaronsheffield has joined #openstack-helm | 12:49 | |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: Elasticsearch S3 repo https://review.openstack.org/559417 | 12:51 |
srwilkers | o/ | 12:52 |
srwilkers | portdirect: thanks for getting the gates sorted out :) | 12:52 |
*** kukacz_ is now known as kukacz | 13:00 | |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: DNM: Fluent-logging: Update fluentd configuration https://review.openstack.org/590575 | 13:19 |
*** sthussey has joined #openstack-helm | 13:20 | |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: Fluent-logging: Update kubernetes plugin test https://review.openstack.org/603771 | 13:22 |
*** sgrasley_ has joined #openstack-helm | 13:41 | |
*** munimeha1 has joined #openstack-helm | 13:42 | |
openstackgerrit | Tin Lam proposed openstack/openstack-helm master: Add network policy in gate https://review.openstack.org/598189 | 13:42 |
*** eeiden has joined #openstack-helm | 13:46 | |
*** eeiden has quit IRC | 13:53 | |
*** eeiden has joined #openstack-helm | 13:53 | |
*** b_briones has quit IRC | 13:54 | |
openstackgerrit | Hari proposed openstack/openstack-helm-addons master: Implemente: ranger helm charts https://review.openstack.org/569797 | 14:04 |
*** eeiden has quit IRC | 14:04 | |
*** eeiden has joined #openstack-helm | 14:04 | |
*** munimeha1 has quit IRC | 14:09 | |
openstackgerrit | Hari proposed openstack/openstack-helm-addons master: Implement: ranger helm charts and supporting change for agent https://review.openstack.org/569797 | 14:10 |
openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2 https://review.openstack.org/603815 | 14:19 |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: Monitor postgresql, Openstack virt resources, api, logs, pod and nodes status https://review.openstack.org/579976 | 14:20 |
*** cfriesen has joined #openstack-helm | 14:22 | |
lemko | Hi. After restarting some nodes in my cluster (I'm using ceph), sometimes I've dns issues. What is the best thing to do in this case? Kill cordons pods? | 14:22 |
lemko | Hi. After restarting some nodes in my cluster (I'm using ceph), sometimes I've dns issues. What is the best thing to do in this case? Kill cordns pods? | 14:23 |
lemko | coredns* sorry for the duplicate line | 14:23 |
*** aagate has joined #openstack-helm | 14:24 | |
openstackgerrit | Tin Lam proposed openstack/openstack-helm master: Add apparmor security annotation https://review.openstack.org/602365 | 14:31 |
srwilkers | lemko: it's difficult for me to say, as i dont have much experience using coredns. what are you using to provision kubernetes? | 14:32 |
lemko | promenade | 14:32 |
jayahn | srwilkers: i know you are quite busy, when you have a time, pls look at this one. https://review.openstack.org/#/c/587812/ thanks | 14:32 |
srwilkers | hey jayahn -- looking now | 14:33 |
srwilkers | lemko: ah. might be worth asking in the #airshipit channel :) | 14:33 |
lemko | thanks srwilkers | 14:36 |
*** sgrasley_ has quit IRC | 14:37 | |
srwilkers | jayahn: this looks like a reasonable addition. i'm wondering if it'd make things a bit cleaner to handle the command flags similar to what we do with prometheus to drive some sort of consistency | 14:38 |
srwilkers | ie: https://github.com/openstack/openstack-helm-infra/blob/master/prometheus/values.yaml#L437-L452 and https://github.com/openstack/openstack-helm-infra/blob/master/prometheus/templates/utils/_command_line_flags.tpl#L36-L48 | 14:38 |
srwilkers | have any thoughts on that? | 14:38 |
jayahn | srwilkers: okay, I got that. I will pass it to jawon, and see what he thinks. I think your suggestion makes sense. | 14:40 |
jayahn | I heard that he wanted to avoid making helm-toolkit function just for that. | 14:41 |
srwilkers | jayahn: yeah, thats understandable. we can still keep it as a util function template tied to the chart. if we can handle it similar though, we can simplify the logic used to generate the flags i think. but thats just my opinion, of course :) | 14:44 |
*** munimeha1 has joined #openstack-helm | 14:49 | |
srwilkers | jayahn: left some feedback on the patchset | 14:58 |
jayahn | srwilkers: thanks a lot! | 15:01 |
*** munimeha1 has quit IRC | 15:16 | |
*** sgrasley has joined #openstack-helm | 15:20 | |
openstackgerrit | Merged openstack/openstack-helm-infra master: Fluentbit: Update version, config util template https://review.openstack.org/602784 | 15:33 |
openstackgerrit | Gage Hugo proposed openstack/openstack-helm-infra master: k8s-keystone create cluster roles and tests https://review.openstack.org/577920 | 15:34 |
lemko | I'm getting logs like INFO: TASK JBD2/RBD0-8:10518 blocks for more than 120 seconds. What could be the reason for this? One of my node crashed and I see logs like this thanks to the ipmi kvm viewer. I've a three node ceph cluster, with one block-logical for data and the journal file is a folder on my main disk /var/lib/journal. | 15:51 |
openstackgerrit | Merged openstack/openstack-helm-infra master: Gate: Trim dev-deploy gates https://review.openstack.org/602833 | 15:52 |
*** zhangfei has joined #openstack-helm | 16:32 | |
*** tmorin has quit IRC | 16:32 | |
*** zhangfei has quit IRC | 16:56 | |
*** flaviosr__ has joined #openstack-helm | 16:58 | |
*** flaviosr_ has quit IRC | 17:01 | |
openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2 https://review.openstack.org/603815 | 17:09 |
*** zhangfei has joined #openstack-helm | 17:18 | |
*** aagate has quit IRC | 17:30 | |
*** zhangfei has quit IRC | 17:45 | |
*** munimeha1 has joined #openstack-helm | 17:53 | |
*** sgrasley has quit IRC | 18:19 | |
openstackgerrit | Hari proposed openstack/openstack-helm-addons master: Implement: ranger helm charts and supporting change for agent https://review.openstack.org/569797 | 18:28 |
*** zhangfei has joined #openstack-helm | 18:32 | |
*** zhangfei has quit IRC | 18:45 | |
*** munimeha1 has quit IRC | 19:05 | |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: Fluentbit: Add kernel, kubelet, and dockerd logs https://review.openstack.org/602786 | 19:10 |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: Fluent-logging: Update fluentd configuration https://review.openstack.org/590575 | 19:12 |
openstackgerrit | Cliff Parsons proposed openstack/openstack-helm master: Add apparmor security annotation https://review.openstack.org/602365 | 19:16 |
openstackgerrit | Merged openstack/openstack-helm-infra master: Fluent-logging: Update kubernetes plugin test https://review.openstack.org/603771 | 19:20 |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: Fluent-logging: Update fluentd configuration https://review.openstack.org/590575 | 19:22 |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: Fluent-logging: Update Elasticsearch index templates https://review.openstack.org/585400 | 19:24 |
openstackgerrit | Deepak proposed openstack/openstack-helm master: WIP: Add shaker charts and shaker deployment scripts https://review.openstack.org/602050 | 19:33 |
openstackgerrit | chinasubbareddy mallavarapu proposed openstack/openstack-helm-infra master: ceph-rgw: stop storage init job on each run https://review.openstack.org/603890 | 19:41 |
*** roman_g has quit IRC | 19:46 | |
*** zhangfei has joined #openstack-helm | 19:46 | |
*** roman_g has joined #openstack-helm | 19:47 | |
openstackgerrit | Merged openstack/openstack-helm-infra master: Fix python-pip install for centOS system https://review.openstack.org/600019 | 19:48 |
*** zhangfei has quit IRC | 19:59 | |
openstackgerrit | Mike Pham proposed openstack/openstack-helm-infra master: Add network policy toolkit function https://review.openstack.org/596888 | 20:46 |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: HTK: Add s3 user/bucket scripts, snippets, manifests https://review.openstack.org/588066 | 20:52 |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: Elasticsearch S3 repo https://review.openstack.org/559417 | 20:53 |
*** aaronsheffield has quit IRC | 21:12 | |
openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2 https://review.openstack.org/603815 | 21:17 |
openstackgerrit | Tin Lam proposed openstack/openstack-helm master: Add network policy in gate https://review.openstack.org/598189 | 21:18 |
*** sthussey has quit IRC | 21:40 | |
openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2 https://review.openstack.org/603815 | 21:50 |
cfriesen | portdirect: with this change to the openstack-nova chart (http://paste.openstack.org/show/730387/) and an override specifying network.osapi.port=18774, it brought up all the k8s resources using port 18774 but registered 8774 in keystone. Which I think is exactly what we want. | 21:58 |
cfriesen | for production I think we'd want a conditional in there | 21:58 |
cfriesen | and fall back to the endpoint port | 21:59 |
cfriesen | On a totally separate note, is anyone actually using the capability described at https://docs.openstack.org/openstack-helm/latest/devref/node-and-label-specific-configurations.html ? | 22:01 |
*** roman_g has quit IRC | 22:02 | |
*** eeiden has quit IRC | 22:08 | |
openstackgerrit | Tin Lam proposed openstack/openstack-helm master: Add network policy in gate https://review.openstack.org/598189 | 22:13 |
*** lemko has quit IRC | 23:02 | |
*** aagate has joined #openstack-helm | 23:58 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!