Tuesday, 2016-05-24

*** thumpba has quit IRC00:04
*** thumpba has joined #openstack-kolla00:12
*** salv-orl_ has quit IRC00:13
*** neophy has joined #openstack-kolla00:16
*** rcarrillocruz has joined #openstack-kolla00:19
*** kklimonda has joined #openstack-kolla00:19
*** diogogmt has joined #openstack-kolla00:19
*** Jeffrey4l has joined #openstack-kolla00:26
*** weiyu has joined #openstack-kolla00:27
*** thumpba has quit IRC00:31
*** thumpba has joined #openstack-kolla00:34
*** vhosakot has quit IRC00:35
*** poul7777777 has left #openstack-kolla00:38
*** diogogmt has quit IRC00:53
*** mbound has joined #openstack-kolla00:55
*** thumpba has quit IRC00:55
openstackgerritJeffrey Zhang proposed openstack/kolla: [WIP] Pin the base distro release version  https://review.openstack.org/31999200:55
*** diogogmt has joined #openstack-kolla00:56
openstackgerritJeffrey Zhang proposed openstack/kolla: Fix the rabbitmq crash on CentOS binary and source deploy  https://review.openstack.org/31992600:56
openstackgerritSerguei Bezverkhi proposed openstack/kolla-kubernetes: Changes Glance bootstrap to use kolla-toolbox  https://review.openstack.org/32002200:57
openstackgerritJeffrey Zhang proposed openstack/kolla: Configure the rabbitmq ha policy in config file  https://review.openstack.org/31999500:57
*** mbound has quit IRC00:59
*** wznoinsk has joined #openstack-kolla00:59
*** weiyu has quit IRC01:00
*** kollausr has quit IRC01:01
*** brad[] has quit IRC01:03
*** brad[] has joined #openstack-kolla01:03
*** weiyu_ has joined #openstack-kolla01:04
*** diogogmt has quit IRC01:18
*** daneyon_ has joined #openstack-kolla01:23
*** daneyon has quit IRC01:28
*** vhosakot has joined #openstack-kolla01:42
*** tfukushima has joined #openstack-kolla01:43
*** ccesario_ has joined #openstack-kolla01:47
*** daneyon has joined #openstack-kolla01:50
*** rhallisey has quit IRC01:54
*** daneyon has quit IRC01:55
*** vhosakot has quit IRC02:04
*** vhosakot has joined #openstack-kolla02:04
*** neophy has quit IRC02:07
*** neophy has joined #openstack-kolla02:13
*** unicell1 has quit IRC02:14
*** sacharya has joined #openstack-kolla02:19
*** salv-orlando has joined #openstack-kolla02:38
*** salv-orlando has quit IRC02:43
*** diogogmt has joined #openstack-kolla02:49
openstackgerritMerged openstack/kolla: Change ansible image to kolla_toolbox  https://review.openstack.org/32008803:01
*** vhosakot has quit IRC03:20
*** sdake_ has quit IRC03:29
*** unicell has joined #openstack-kolla03:35
*** dave-mcc_ has quit IRC03:38
*** daneyon has joined #openstack-kolla03:39
*** daneyon has quit IRC03:44
*** salv-orlando has joined #openstack-kolla04:08
*** ccesario___ has joined #openstack-kolla04:10
*** ccesario_ has quit IRC04:10
*** thumpba has joined #openstack-kolla04:10
*** salv-orlando has quit IRC04:17
*** sdake has joined #openstack-kolla04:17
*** sdake has quit IRC04:18
*** absubram has joined #openstack-kolla04:31
openstackgerritJeffrey Zhang proposed openstack/kolla: Manila driver session is needed only in manila-share  https://review.openstack.org/31123204:31
*** absubram_ has joined #openstack-kolla04:32
*** absubram has quit IRC04:36
*** absubram_ is now known as absubram04:36
*** tfukushima has quit IRC04:43
*** ntpttr has quit IRC05:15
*** ntpttr has joined #openstack-kolla05:16
*** tfukushima has joined #openstack-kolla05:20
*** sacharya_ has joined #openstack-kolla05:21
*** tfukushima has quit IRC05:21
openstackgerritMerged openstack/kolla: Generate configuration using ansible for any project  https://review.openstack.org/31835605:21
*** sacharya has quit IRC05:23
*** sacharya has joined #openstack-kolla05:26
*** sacharya_ has quit IRC05:28
*** thumpba has quit IRC05:47
*** Mr_Broken has quit IRC06:09
*** tfukushima has joined #openstack-kolla06:10
*** sdake has joined #openstack-kolla06:11
*** ediardo has quit IRC06:14
*** elemoine_ has quit IRC06:14
*** NachoDuck has quit IRC06:14
*** serverascode has quit IRC06:15
*** DuncanT has quit IRC06:15
*** mgkwill has quit IRC06:15
*** ediardo has joined #openstack-kolla06:16
*** NobodyCam has quit IRC06:16
*** serverascode has joined #openstack-kolla06:17
*** mgkwill has joined #openstack-kolla06:18
*** DuncanT has joined #openstack-kolla06:18
*** NobodyCam has joined #openstack-kolla06:19
*** coolsvap has quit IRC06:21
*** macsz has quit IRC06:21
*** elemoine_ has joined #openstack-kolla06:22
*** serverascode has quit IRC06:22
*** daneyon has joined #openstack-kolla06:22
*** macsz has joined #openstack-kolla06:23
*** sdake has quit IRC06:25
*** coolsvap has joined #openstack-kolla06:26
*** daneyon has quit IRC06:27
*** harlowja has quit IRC06:28
*** NachoDuck has joined #openstack-kolla06:28
*** cmceniry has quit IRC06:29
*** serverascode has joined #openstack-kolla06:31
*** cmceniry has joined #openstack-kolla06:34
*** sdake has joined #openstack-kolla06:37
*** Serlex has joined #openstack-kolla06:37
*** salv-orlando has joined #openstack-kolla06:37
*** neophy has quit IRC06:40
*** fragatin_ has joined #openstack-kolla06:45
*** fragatina has quit IRC06:47
*** fragatin_ has quit IRC06:50
*** unicell has quit IRC06:50
*** unicell has joined #openstack-kolla06:51
*** archjun has joined #openstack-kolla06:52
*** sdake has quit IRC06:53
*** fragatina has joined #openstack-kolla06:57
*** archjun has quit IRC07:00
*** archjun has joined #openstack-kolla07:01
*** fragatina has quit IRC07:02
*** Jeffrey4l has quit IRC07:06
*** fragatina has joined #openstack-kolla07:07
mdnadeemJeffrey4l, coolsvap , i have deploying liberty openstack, however nova-novncproxy container keeps on restarting state , because of 0.0.0.0:6080 address already in use07:08
*** fragatina has quit IRC07:08
coolsvapmdnadeem, which service is using the port?07:08
mdnadeemAny idea , how to correct it, here is the logs: http://paste.openstack.org/show/498496/07:08
*** fragatina has joined #openstack-kolla07:09
mdnadeemcoolsvap, 27122/haproxy service is listen on it07:09
*** archjun has quit IRC07:10
kjellymdnadeem: is the ip is your host ip ? 192.168.121.5507:11
*** athomas has joined #openstack-kolla07:12
*** sacharya has quit IRC07:13
mdnadeemkjelly, no this is the spare ip in my network , that i have set "kolla_internal_vip_address: " in global.yml file07:14
*** chopmann has joined #openstack-kolla07:19
*** mikelk has joined #openstack-kolla07:26
*** rmart04 has joined #openstack-kolla07:40
openstackgerritLiyi Meng proposed openstack/kolla-kubernetes: Implement neutron pods and service  https://review.openstack.org/31929307:43
*** fragatina has quit IRC08:01
*** mbound has joined #openstack-kolla08:04
*** mbound has quit IRC08:05
*** mbound has joined #openstack-kolla08:06
*** berendt has joined #openstack-kolla08:08
*** shardy has joined #openstack-kolla08:12
*** sacharya has joined #openstack-kolla08:13
*** berendt has quit IRC08:13
*** dmk0202 has joined #openstack-kolla08:16
*** sacharya has quit IRC08:18
*** berendt has joined #openstack-kolla08:19
openstackgerritLiyi Meng proposed openstack/kolla-kubernetes: Implement swift pods and serivces  https://review.openstack.org/31998508:20
*** salv-orlando has quit IRC08:25
openstackgerritLiyi Meng proposed openstack/kolla-kubernetes: Implement neutron pods and service  https://review.openstack.org/31929308:26
openstackgerritLiyi Meng proposed openstack/kolla-kubernetes: Implement swift pods and serivces  https://review.openstack.org/31998508:29
openstackgerritLiyi Meng proposed openstack/kolla: Replace underscore sign with dash in neutron config filename  https://review.openstack.org/32015908:36
*** ankush has joined #openstack-kolla08:40
*** ankush has quit IRC08:46
*** pbourke_ has quit IRC08:47
*** pbourke_ has joined #openstack-kolla08:47
*** athomas has quit IRC08:53
*** wznoinsk has quit IRC08:59
*** wznoinsk has joined #openstack-kolla08:59
*** athomas has joined #openstack-kolla09:03
*** gfidente has joined #openstack-kolla09:09
*** SiRiuS__ has joined #openstack-kolla09:14
*** sdake has joined #openstack-kolla09:20
openstackgerritLiyi Meng proposed openstack/kolla-kubernetes: Implment swift bootstrap job  https://review.openstack.org/32031609:20
*** zigo_ is now known as zigo09:28
*** prithiv has joined #openstack-kolla09:55
*** PyroMani has joined #openstack-kolla09:57
*** daneyon has joined #openstack-kolla09:58
*** sdake has quit IRC10:01
*** daneyon has quit IRC10:03
*** sacharya has joined #openstack-kolla10:15
*** sacharya has quit IRC10:19
*** prithiv has quit IRC10:23
*** prithiv has joined #openstack-kolla10:23
*** ccesario___ has quit IRC10:29
*** rhallisey has joined #openstack-kolla10:35
*** Jeffrey4l has joined #openstack-kolla10:45
openstackgerritRyan Hallisey proposed openstack/kolla: Cleanup Advanced Configuration doc  https://review.openstack.org/31959210:47
*** prithiv has quit IRC10:53
*** prithiv has joined #openstack-kolla10:55
*** mdnadeem_ has joined #openstack-kolla10:56
*** prithiv has quit IRC10:57
*** mdnadeem has quit IRC11:00
*** weiyu_ has quit IRC11:03
*** dcwangmit01 has quit IRC11:04
*** liyi has quit IRC11:05
*** mlima has joined #openstack-kolla11:06
mlimamorning guys11:06
rhalliseyhey11:06
mlimarhallisey, i did some updates in docs https://review.openstack.org/#/c/319899/11:11
patchbotmlima: patch 319899 - kolla - Update Documentation11:11
rhalliseysweet11:11
mlimabut you did too haha https://review.openstack.org/#/c/319592/311:11
patchbotmlima: patch 319592 - kolla - Cleanup Advanced Configuration doc11:11
*** salv-orlando has joined #openstack-kolla11:15
mlimai'll remove advanced configuration, and submmit my ps again. ok?11:15
mlimarhallisey, ^11:15
rhalliseymlima, ya sure11:16
*** brad[] has quit IRC11:16
*** sdake has joined #openstack-kolla11:17
rhalliseymlima, you have +2 power so you can approve11:19
rhalliseyif you think it's ready11:19
*** salv-orlando has quit IRC11:19
mlimanot yet rhallisey11:19
rhalliseygotcha11:19
mlimai've only +1 and -111:22
mlimarhallisey,11:22
openstackgerritMauricio Lima proposed openstack/kolla: Update Documentation  https://review.openstack.org/31989911:23
*** brad[] has joined #openstack-kolla11:24
*** tfukushima has quit IRC11:28
rhalliseyI think you get added today mlima11:31
mlimahmm, no problem rhallisey11:32
*** ccesario___ has joined #openstack-kolla11:39
*** salv-orlando has joined #openstack-kolla11:46
*** sdake has quit IRC11:49
openstackgerritFrancesco Vollero proposed openstack/kolla: Fixed typos in Ansible files  https://review.openstack.org/32038211:50
*** ccesario___ has quit IRC11:51
openstackgerritFrancesco Vollero proposed openstack/kolla: Fixed typos in Ansible files  https://review.openstack.org/32038611:51
openstackgerritJeffrey Zhang proposed openstack/kolla: Bump the ansible to 2  https://review.openstack.org/31742111:53
pbourke_anyone know for our ceph implementation, what was the reason behind using a label on the disks as opposed to just passing a list of disks to be provisioned11:55
*** brad[] has quit IRC11:56
*** brad[] has joined #openstack-kolla11:57
*** prithiv has joined #openstack-kolla11:57
*** prithiv has quit IRC12:04
*** ccesario___ has joined #openstack-kolla12:05
*** weiyu_ has joined #openstack-kolla12:06
*** tfukushima has joined #openstack-kolla12:19
*** ayoung has quit IRC12:19
sbezverkrhallisey: could you take another look at these two: https://review.openstack.org/#/c/316411/3 and https://review.openstack.org/#/c/320022/612:21
patchbotsbezverk: patch 316411 - kolla-kubernetes - Add Horizon's kubernetes objects12:21
patchbotsbezverk: patch 320022 - kolla-kubernetes - Changes Glance bootstrap to use kolla-toolbox12:21
openstackgerritLiyi Meng proposed openstack/kolla: Replace underscore sign with dash in neutron config filename  https://review.openstack.org/32015912:26
rhalliseysbezverk, sure12:29
*** liyi has joined #openstack-kolla12:33
*** weiyu_ has quit IRC12:34
*** salv-orlando has quit IRC12:35
*** SiRiuS__ has quit IRC12:40
*** weiyu_ has joined #openstack-kolla12:47
*** mgoddard__ has quit IRC12:50
*** diogogmt has quit IRC12:50
*** mgoddard__ has joined #openstack-kolla12:51
*** diogogmt has joined #openstack-kolla12:53
*** weiyu_ has quit IRC12:58
*** alyson_ has joined #openstack-kolla13:07
*** SiRiuS__ has joined #openstack-kolla13:07
*** diogogmt has quit IRC13:07
*** sdake has joined #openstack-kolla13:09
*** salv-orlando has joined #openstack-kolla13:11
rhalliseyliyi, maybe we could add a add something at the end of bootstrap in the kolla containers so that kube can determine by a probe that bootstrapping has completed13:12
* rhallisey checks readiness probe13:12
*** sdake has quit IRC13:13
liyiK8s is unlikey to have a way to check readiness of a container/pod. It just make sure if the process that run container is running. if it is in dead loop or in serivce, kube unlikely know about that.13:15
rhalliseyliyi, but we can define a health check to be anything13:16
liyithe startup script could print readyness indication into fs13:16
rhalliseyhttp://kubernetes.io/docs/user-guide/liveness/13:16
rhalliseythat is just a script13:17
rhalliseyyes it could print that the db sync is complete13:17
*** vdo has joined #openstack-kolla13:17
liyiexactly, that is the way I though it can be done as well13:18
rhalliseyso then the pods would need to figure our if db sync is done by reading the same location13:18
liyiso we need to define a common script for doing so, like the start.sh in kolla at the moment. Do you know how kolla perform health check now?13:19
liyiping on tcp sockets?13:19
rhalliseyhaproxy does it13:19
rhalliseyjust checks the endpoints13:19
liyiOk, then it is kind of ping on tcp sockets13:20
liyii don't think it is a bad idea to add something like k8s is doing. it will improve the granularity of liveness checking13:21
rhalliseyhttps://github.com/openstack/kolla/blob/master/ansible/roles/mariadb/tasks/lookup_cluster.yml13:21
liyiI think that could be done inside container, if not mariadb container itself, kolla_toolbox container could do that.13:23
*** dave-mccowan has joined #openstack-kolla13:24
rhalliseywe did something for COPY_ONCE where if a file existed, then don't copy configs13:24
rhalliseyI can't find that example13:24
*** ayoung has joined #openstack-kolla13:27
rhalliseyliyi, I think it would require a shared mount on the host13:27
rhalliseyif we save a file that maintains database info13:28
rhalliseyliyi, that won't work for multinode without shared storage13:33
openstackgerritJeffrey Zhang proposed openstack/kolla: Fix the gate lying  https://review.openstack.org/32045813:36
liyiRyan, not sure if i am following. do you mean  shared mount between host and container to check readiness is not working?13:36
rhalliseyliyi, there needs to be for the mariadb pods to determine that the mariadb bootstrap in in progress13:37
rhalliseys/needs to be/needs to be a way/13:37
*** inc0 has joined #openstack-kolla13:39
liyihmm, i am not quite sure about how mariadb cluster bootstrap work.13:40
inc0liyi, nobody is;) hey everyone btw13:41
rhalliseyliyi, https://github.com/openstack/kolla/blob/master/docker/mariadb/extend_start.sh#L3713:41
liyidose it have seed nodes concept?13:41
rhalliseyliyi, upon completion, we need a way to let the mariabd pod know it can run13:41
rhalliseyinc0, hey :)13:42
sbezverkrhallisey: we can store key/value in etcd and check13:42
rhalliseyyes13:42
rhalliseythat's what I was thinking too13:42
inc0hey13:42
rhalliseybecause we can't use shared storage on the host adn this is what etcd is good at13:42
inc0but aren't we running single maria?13:43
inc0non-clustered?13:43
rhalliseyyes single maria13:43
sbezverkrhallisey: very easy to store and retrieve13:43
openstackgerritJeffrey Zhang proposed openstack/kolla: Pin the base distro release version  https://review.openstack.org/31999213:43
sbezverkwe just need to add logic to chck for it13:43
* rhallisey is reading the raft consneus algorithm :)13:44
rhalliseysbezverk, yes. We can pass it around as an env var13:44
*** ssurana has joined #openstack-kolla13:45
rhalliseyinc0, so the idea here is that we need a way for bootstrapping to run uninteruppted13:45
rhalliseysince mariadb pods keep killing the bootstrap13:45
inc0ahh...yeah. the bootstrap13:46
*** chopmann has quit IRC13:46
liyia bit lost, are we talking a cluster or a single node? if it is single node, then no problem regarding multi-nodes, right?13:46
inc0liyi, with kubernetes you can run single node mariadb13:47
*** m3m0 has quit IRC13:47
inc0and for HA you depend on k8s to restart containers if something goes wrong13:47
rhalliseyliyi, in the mariadb exmaple we're talking single node13:47
rhalliseybut this problem extends to all bootstrapping13:47
rhalliseywe don't want services starting before they are bootstrapping13:48
liyiOK, it is single node, seprating bootstrap from run service could be helpful?13:48
rhalliseybootstrapped*13:48
inc0rhallisey, well, why?13:48
rhalliseyliyi, it already is that way13:48
inc0so bootstrap is running13:48
inc0you start service, it fails13:48
inc0k8s restart it13:48
rhalliseyinc0, but it doesn't always fail13:48
inc0bootstrap finishes, and service stop failing13:48
inc0maybe add healthcheck then?13:49
liyiRyan, but you still have probme?13:49
rhalliseyinc0, this is the healthcheck13:49
*** mgoddard__ has quit IRC13:49
*** m3m0 has joined #openstack-kolla13:49
*** chopmann has joined #openstack-kolla13:49
inc0ahh...ok13:49
inc0;)13:49
rhalliseymake sure db sync is done13:49
rhalliseythis also would apply to upgrades13:49
d_code_morning all…  I’m trying to get PCI passthrough to work with nova…  I feel like I’m really close… I think something is mismatched on translating the pci_alias from the flavor to the list of devices…  how could I patch nova (in my dev env) to dump the data I’m interested in?  Can I just modify the container and restart it somehow?13:49
rhalliseywe can start the services back up again until *some actions* take place13:50
rhalliseys/can/cant13:50
rhalliseyinc0, unfortunately health checks are not advanced enought to be cluster away13:51
liyiwhat if we have a startup script pulling a ENV from etcd like system to get it synced?13:51
rhalliseyaware13:51
*** chopmann_ has joined #openstack-kolla13:51
rhalliseyinc0, check etcd to see if bootstrap_mariadb=DONE would give that container the check it needs to run :)13:52
rhalliseyhehe we're making dependencies in kube :)13:52
inc0well, truth be told you're asking for trouble with this13:52
inc0so what happends if node with bootstrap running dies?13:53
inc0who will release the lock?13:53
rhalliseykube would reschedule another bootstrapping job13:53
liyiRyan, so the option might be kolla-k8s rebuild image with overriting startup scripts13:53
*** mgoddard_ has joined #openstack-kolla13:53
rhalliseysince there would be 0 bootstrapping mariadb jobs running and etcd would show it's not complete13:53
inc0why rebuild?13:53
*** chopmann has quit IRC13:54
inc0you shouldn't rebuild at any point really13:54
inc0hmm13:54
liyiInc0, we want to change the startup behaviour of container13:54
inc0how?13:54
rhalliseyliyi, that is another option, but how would you make the cluster away a bootstapping task is completed?13:55
rhalliseydocker ps -a | grep bootstrapp?13:55
rhalliseyinside the contiainer?13:55
inc0so can you make k8s schedule pods when number_of_bootstraps=0 and BOOTSTRAPPED=false?13:55
liyiInc0, if we have k8s startup script for container, we re-build the container image with overrite it entry.sh13:55
sbezverkrhallisey confused, if we use etcd, it is a cluster and its key/value already synced across all nodes13:56
inc0well, I'd love to have co-usable containers13:56
inc0but we had extended logic inside container before with mesos13:56
rhalliseyinc0, I think so. I'm not sure of the kube etcd interaction13:56
inc0so if you could do that13:56
rhalliseysbezverk, yes that's what we want13:56
liyiRyan, while(bootstrap=flase); sleep(10);readbootstrap()13:57
inc0you can start bootstraping by simply managing these variables13:57
sbezverkrhallisey: skydns uses this approach13:57
inc0you want to start mariadb? you add variable BOOTSTRAPPED_MARIA=false13:57
sbezverkthey store dns DB in a local instance of etcd13:57
openstackgerritJeffrey Zhang proposed openstack/kolla: Pin the base distro release version  https://review.openstack.org/31999213:57
inc0k8s takes over and mariadb container, inside will change BOOTSTRAPPED_MARIA=true when it finishes13:57
inc0and mariadb container healthcheck will check this variable13:58
inc0if not true- die painfully13:58
rhalliseyliyi, where does readbootstrap() go?13:58
inc0see where I'm getting at13:58
inc0?13:58
rhalliseyinc0, yes13:59
liyireadbootstrapFromEctd()13:59
liyithe idea is to read the Env periodically until it is true13:59
rhalliseyliyi, so we're saying something very similar13:59
liyiaha, that is nice.14:00
liyii have problem in catching up in IRC14:00
inc0well I wouldn't sleep14:00
inc0I'd kill container14:00
rhalliseyinc0, what other issues do you think we can have14:01
liyiinc0 let k8s restart it?14:01
rhalliseyinc0, liyi, I think we would just exit(1)14:01
inc0liyi, correct14:01
rhalliseylet kube restart it14:01
inc0rhallisey, let's prototype this maria14:01
inc0and go from there14:01
rhalliseyya I agree14:01
liyiThat is even smarter :)14:01
inc0if it works, we can do something like that for everything else14:02
rhalliseyif we track the bootstrap state in etcd it should translate into upgrades14:02
inc0yeah14:02
rhalliseythis would fix some of the upgrade issues I mentioned on the mailing list14:02
liyithat is right !14:02
inc0really it would be as simple as changing bootstrapped var to false14:03
rhalliseyor be insight into how we could fix it14:03
rhalliseyya exactly14:03
inc0k8s will do the rest14:03
rhalliseyinc0, have do made a service yet for kube?14:04
inc0nope14:04
inc0about to spawn vms to deploy k8s14:04
inc0what's best way to deploy k8s?14:05
rhalliseyceph is open14:05
rhallisey:D14:05
rhalliseyI use hypercube14:05
rhalliseykubernetes in containers14:05
inc0I don't think we should deploy ceph with kube14:05
liyiI have it with hypercube on Cent714:05
rhalliseyinc0, using hypercude is super easy to get up and running14:05
inc0so even mons aren't really good idea14:05
rhalliseyhttps://github.com/openstack/kolla-kubernetes/blob/master/doc/source/kubernetes-all-in-one.rst14:06
inc0well, you could14:06
inc0but I'd keep ceph out of it really14:06
inc0and make kube use ceph if anything14:06
rhalliseyya14:07
rhalliseythere's some further discussion to be had around that for sure14:07
rhalliseyonce we transition to multinode14:07
*** dwalsh has joined #openstack-kolla14:08
*** rhallisey has left #openstack-kolla14:08
inc0I'll deploy multinode;)14:09
*** thumpba has joined #openstack-kolla14:09
*** thumpba has quit IRC14:09
*** rhallisey has joined #openstack-kolla14:10
*** thumpba has joined #openstack-kolla14:11
sbezverkinc0 you are late, I already have multinode ;) but after playing with aio, I like it better..14:12
liyiinc0, in case you want to have hypekube with mutlinode on rh7/CentOS7, this might help https://github.com/kubernetes/kubernetes/compare/master...liyimeng:master14:12
*** absubram has quit IRC14:13
inc0thanks guys!14:14
*** diogogmt has joined #openstack-kolla14:14
inc0I'm running butnu14:14
*** 64MAAATDJ has joined #openstack-kolla14:14
*** 64MAAATDJ has quit IRC14:14
*** thumpba has quit IRC14:14
*** diogogmt has quit IRC14:23
*** sacharya has joined #openstack-kolla14:24
*** sacharya has quit IRC14:24
sean-k-mooneyrhallisey: i have not been following the kolla-kubernetese work as closely as i should. is the aio setup functional14:25
rhalliseysean-k-mooney, yes14:25
rhalliseyfollow that doc I linked above14:26
rhalliseyhttps://github.com/openstack/kolla-kubernetes/blob/master/doc/source/kubernetes-all-in-one.rst14:26
sean-k-mooneyyes reading it now14:26
rhalliseyits like 4 steps14:26
sean-k-mooneycool i might try to deploy it soon14:26
rhalliseycool14:27
liyiRyan, I am off for today now. If you want me to help in some task, e.g. splitting cli, pls let me know.14:28
*** logan- has quit IRC14:29
rhalliseyliyi, sounds good.  See ya later!14:29
*** jmccarthy has joined #openstack-kolla14:29
sean-k-mooneyrhallisey: is the aio setup currently using nova-networks? i do not see neutron in the services folder14:30
rhalliseysean-k-mooney, the services aren't fully functionally yet14:30
*** logan- has joined #openstack-kolla14:30
rhalliseyneutron is up in the queue14:30
sean-k-mooneyok cool just trying to understand what the aio setup currently deploys before i try it out14:31
rhalliseysean-k-mooney, I'll need to add a bunch more in the docs to describe that.  We're still working through some of the bootstrapping kinks14:32
rhalliseybut some of the services do get up and runnig14:32
sean-k-mooneyok cool i know this is just forming so dont expect it to all work right way :)14:33
sean-k-mooneydo ye recommend any particalar os combination  ubuntu source vs centos binary    14.04 vs 16.0414:34
*** ssurana has quit IRC14:35
rhallisey:)14:35
rhalliseyI've only tried on centos thus far14:35
rhalliseyinc0, is trying on ubuntu as we speak14:35
rhalliseysean-k-mooney, kolla-kubernetes uses kolla for config generation and building images14:36
sean-k-mooneyi have hit issues building and deploying both recently with ansible so i am going to set up a clean env tomorow.14:38
*** ssurana has joined #openstack-kolla14:38
sean-k-mooneyi think part of the problem was the node i built the container on was centos 7 as were the contaienr but the nodes i deployed too were ubuntu 16.0414:38
rhalliseysean-k-mooney, ya you want to be careful with mixing the base os.  It doesn't work in all cases14:40
sean-k-mooneydoes ubuntu 16.04 work with kolla yet? i might revert to 14.0414:42
*** wznoinsk has quit IRC14:42
*** mgoddard_ has quit IRC14:42
*** ccesario___ has quit IRC14:42
*** athomas has quit IRC14:42
sean-k-mooneyi could install centos but i want to use btrfs as the storage driver and im not sure how well brtfs is supported in the centos kernel14:43
openstackgerritMerged openstack/kolla: Make configurable the location where config files are merged  https://review.openstack.org/31864814:44
*** fragatina has joined #openstack-kolla14:45
*** fragatina has quit IRC14:45
coolsvapsean-k-mooney, you need a device with btrfs and mount it on /var/lib/docker14:46
coolsvapthats what i do14:46
*** fragatina has joined #openstack-kolla14:46
sean-k-mooneycoolsvap: ya thats what i do on my home ceph/nas and it works fine there but i replaced the 3.10 centos kernel with an upstream 4.4 kenel as i think btrfs was still beta in 3.1014:47
openstackgerritChristian Berendt proposed openstack/kolla: Add title to index page of developer documentation  https://review.openstack.org/32049914:48
*** sdake has joined #openstack-kolla14:49
sdakemorning14:50
*** dwalsh has quit IRC14:50
inc0sean-k-mooney, afair we merged ansible 2 yesterday14:50
inc0do you have ansible issues?14:50
inc0and btrfs works well with buntu 16+14:51
inc0(or 15.10, thats what I'm running)14:51
*** Lyncos has left #openstack-kolla14:52
*** mlima has quit IRC14:54
openstackgerritEduardo Gonzalez proposed openstack/kolla: Specify registry volume location  https://review.openstack.org/31958514:55
openstackgerritMerged openstack/kolla: Fixed typos in Ansible files  https://review.openstack.org/32038215:00
sean-k-mooneyinc0: i was hitting some issue with trying deploy multi node with mariadb15:00
openstackgerritMerged openstack/kolla: Fixed typos in Ansible files  https://review.openstack.org/32038615:00
inc0sean-k-mooney, "some issue"?;)15:00
*** absubram has joined #openstack-kolla15:02
sean-k-mooneyi do not have access to the system currently15:02
inc0uhh15:03
sean-k-mooneybasically the deploy failed either trying to start the mariadb or creating the hecka user15:03
inc0is it fresh master?15:03
sean-k-mooneyit was but it was a centos source build deploying to a 16.04 host which is why i want to try this again using the same host and guest os15:04
*** mgoddard has joined #openstack-kolla15:04
*** inc0 has quit IRC15:05
sean-k-mooneyi was useing centos for the bifrost stuff but had ubuntu installed on all my other nodes so i didnt get around to rebuilding the images.15:05
*** inc0 has joined #openstack-kolla15:06
inc0sean-k-mooney, we don't support 16.04 inside containers yet15:06
openstackgerritJeffrey Zhang proposed openstack/kolla: Update ubuntu dockerfiles for formatting  https://review.openstack.org/31723815:06
sean-k-mooneyinc0: good to know. i saw your patch that chages latest to 14.0415:07
inc0yeah15:07
inc0we're working on 16.0415:07
inc0but still stuff to do15:07
*** jmccarthy has left #openstack-kolla15:08
sean-k-mooneyso the best way to deploy kolla currently would be ubuntu source on a 14.04 host or centos source on a centos 7.2 host correct15:08
inc0so I deploy with 15.10 on host and 14.04 inside container15:09
inc0didnt test 16.04 on host15:10
inc0but should work15:10
*** diogogmt has joined #openstack-kolla15:10
sean-k-mooneythat should work fine. the main problem with mixing centos and ubutue is the fact that selinux and apparmor dont like each other15:11
*** Kennan has quit IRC15:11
*** vhosakot has joined #openstack-kolla15:13
*** jmccarthy has joined #openstack-kolla15:14
*** Kennan has joined #openstack-kolla15:14
sean-k-mooneyi also hit this bug in the centos source build https://bugs.launchpad.net/kolla/+bug/157727315:14
openstackLaunchpad bug 1577273 in kolla "Failure of creating haproxy mysql user" [Critical,New] - Assigned to Serguei Bezverkhi (sbezverk)15:14
*** jrist has quit IRC15:15
*** jtriley has joined #openstack-kolla15:15
sean-k-mooneythe workaround got me past the intial error but the  [mariadb | Creating haproxy mysql user] task was the one that was still failing15:16
*** Junhongl_ has joined #openstack-kolla15:16
*** ssurana has quit IRC15:18
*** Junhongl_ has left #openstack-kolla15:20
*** ssurana has joined #openstack-kolla15:24
*** mlima has joined #openstack-kolla15:28
inc0sbezverk, which vars I need to change to deploy multinode k8s with hypercube?15:29
*** jtriley has quit IRC15:30
*** salv-orlando has quit IRC15:34
*** daneyon has joined #openstack-kolla15:36
*** mlima is now known as mliima15:37
*** dmk0202 has quit IRC15:38
*** mliima has left #openstack-kolla15:38
*** dmk0202 has joined #openstack-kolla15:38
*** daneyon_ has quit IRC15:39
*** ssurana has quit IRC15:39
*** mliima has joined #openstack-kolla15:40
*** egonzalez has joined #openstack-kolla15:40
*** ccesario___ has joined #openstack-kolla15:40
*** athomas has joined #openstack-kolla15:40
*** Junhongl_ has joined #openstack-kolla15:41
*** salv-orlando has joined #openstack-kolla15:41
*** fragatina has quit IRC15:43
*** Junhongl_ has quit IRC15:44
*** Junhongl_ has joined #openstack-kolla15:44
*** wznoinsk has joined #openstack-kolla15:45
*** tfukushima has quit IRC15:46
*** jrist has joined #openstack-kolla15:46
*** mikelk has quit IRC15:46
*** Junhongl_ has quit IRC15:47
*** jrist has quit IRC15:47
*** jrist has joined #openstack-kolla15:48
*** Junhongl has joined #openstack-kolla15:48
*** fragatina has joined #openstack-kolla15:49
*** ssurana has joined #openstack-kolla15:49
sbezverkinc0 I deployed multinode manually..15:51
*** Junhongl has quit IRC15:51
*** ssurana has quit IRC15:52
*** diogogmt has quit IRC15:54
*** ssurana has joined #openstack-kolla15:56
*** jrist has quit IRC15:57
*** wznoinsk has quit IRC15:57
*** mgoddard_ has joined #openstack-kolla15:58
inc0kk15:58
inc0thanks15:58
*** diogogmt has joined #openstack-kolla15:59
*** jtriley has joined #openstack-kolla16:00
*** mgoddard has quit IRC16:01
*** fragatina has quit IRC16:02
*** inc0 has quit IRC16:04
*** jrist has joined #openstack-kolla16:06
*** wznoinsk has joined #openstack-kolla16:06
*** inc0 has joined #openstack-kolla16:06
*** jmccarthy has left #openstack-kolla16:09
*** ssurana has quit IRC16:16
*** chopmann_ has quit IRC16:16
*** sacharya has joined #openstack-kolla16:18
sdakesean-k-mooney re that haproxy failing that is likely an envrionment problem16:21
*** ssurana has joined #openstack-kolla16:22
sdakedoes kolla work with ansible 2.0 now Jeffrey4l inc0 ?16:22
inc0yeah16:23
sdakedoes it work with 1.9.4?16:23
inc0nope16:23
Jeffrey4lsdake, yes. patch is here https://review.openstack.org/31742116:23
sdakeour docs are wrong16:23
Jeffrey4lthe patch is not merged.16:23
inc0hmm16:23
Jeffrey4lafter it is merged, i will update the doc.16:24
inc0I thought I +2 it yesterday16:24
*** dmk0202 has quit IRC16:24
Jeffrey4li pushed a new one. Mauricio found a bug.16:24
*** unicell has quit IRC16:24
sdakedid the centos gat esomehow magically fix itself?16:24
inc0ok, well, I have memory of a goldfish apperantly16:25
sdakeinc0 wait until your 42!16:25
sdakei've got a million things to remember16:25
sdakeand can still remember 7 +/- 2 things just like  the rest of humanity16:25
sdakeJeffrey4l did you fix the centos gate, and if so what was the resolution?16:26
Jeffrey4lsdake, just pushed a workaround and got merged.16:26
Jeffrey4lsdake, https://review.openstack.org/31586016:26
Jeffrey4lhere.16:26
*** jtriley has quit IRC16:27
Jeffrey4lit is a hostname issue as I told. But i have no idea why it is not changed on the CentOS.16:27
sean-k-mooneysdake: untill https://bugs.launchpad.net/kolla/+bug/1577273 is fixed the centos source build will be broken16:27
openstackLaunchpad bug 1577273 in kolla "Failure of creating haproxy mysql user" [Critical,New] - Assigned to Serguei Bezverkhi (sbezverk)16:27
sdakesean-k-mooney i see, that is our typical playbook where a failure happens because of environmental problems16:30
sdakein this case, it looks like something is being installed in the container that shouldn't be (see last comment)16:30
sdakeplaybook/task16:32
sdakesbezverk you want me to take that one16:32
sdakei have extensive understanding of the setuptools issue16:33
sdakesbezverk your solution is not viable16:33
sbezverksdake sure thing16:33
*** sdake_ has joined #openstack-kolla16:35
*** d_code_ has quit IRC16:37
sdake_rhallisey ping16:38
rhalliseywassup16:38
*** sdake has quit IRC16:38
sdake_re custom repos/files/etc16:38
sdake_here is what i'd like16:38
sdake_and i'm willing to do the work since i think your super busy with kolla-kubernetes16:38
sdake_i'd like per-container repositories16:38
sdake_so different containers could have different dependencies16:39
rhalliseysure. It's on my to do list, but would love some help16:40
rhalliseyso the case you're outlining are you moving for example the mariadb repo into the mariadb container?16:40
*** rmart04 has quit IRC16:40
rhalliseythere would still be a base repo, but I guess you override it with custom-<service>.repo16:41
sdake_i am not sure how to do the actual work16:42
sdake_i was thinking something with buildconf16:42
sdake_but yup that is the general idea16:42
rhalliseythe main reason I was kinda stuck was because I wasn't sure what to do next16:42
rhalliseyI"m not sure either16:42
sdake_so defaults woudl be base contains everything we need16:43
sdake_if any overrides are found, base no longer becomes the base for that repo/file/git16:43
rhalliseywell we don't install any service specific packages in the base.  I think if you say enabled delorean in the base and had a custom maraidb repo install that package, it would install the correct package in the mariadb contianer16:44
sdake_i think operators will want to build from one set of docker files with different rpm dependencies16:45
rhalliseyso I think you can still layer off the base unless the base repo has a newer version of the pacakge16:45
sdake_to run mitaka side by side with liberty for example16:45
sdake_is buildconf read by oslo?16:46
rhalliseyso that case you would use rdo-liberty with a custom repo. Then rebuild with rdo-mitaka and a custom repo16:47
sdake_yes i knwo the rebuild part works16:47
sdake_but i think people will want to integrate in their ci/cd pipelines16:47
sdake_and not build each container indivdiually16:47
sdake_sean-k-mooney are you buildilng from source or from rpm?16:49
rhalliseycool, that could work16:50
rhalliseybetter than stuffing build.cong16:50
rhalliseywe could use a few includes16:51
rhalliseyshould do the trick16:51
*** harlowja has joined #openstack-kolla16:51
*** egonzalez90 has joined #openstack-kolla16:53
*** mbound has quit IRC16:54
*** egonzalez has quit IRC16:54
*** egonzalez has joined #openstack-kolla16:54
*** egonzalez90 has quit IRC16:54
*** dwalsh has joined #openstack-kolla16:57
*** egonzalez has quit IRC17:00
sdake_rhallisey i was thinking stuffing build.conf initially ;)17:00
rhalliseyI think there were comments of fear of that getting out of had17:00
rhalliseyhand17:00
sdake_from pbourke?17:00
sdake_if it did get out of hand, it would be in the individual operators environment17:01
sdake_we would't actuallly ship a config like that17:01
sdake_we would ship a config that builds everythign in the top level base container17:01
*** ccesario___ has quit IRC17:03
openstackgerritSerguei Bezverkhi proposed openstack/kolla: Adds Neutron LBaaS Support  https://review.openstack.org/31832217:03
sean-k-mooneysdake: sorry was talking to someone at my desk. i was building from source17:04
rhalliseysdake_, what we could do is have a section in each service dockerfile that copies in the .repo17:05
rhalliseywe put an if around it that say if custom_mariadb_repo_enabled then copy it in17:05
rhalliseydocker expects the file to be in the same directory as the Dockerfile for that container17:05
rhalliseyso it will grab it there17:06
rhalliseymariadb.repo17:06
rhallisey<service.repo>17:06
sean-k-mooneyrhallisey: rather then an if per serivce would it be better to use a dictionay and check if there is an entry for this service copy in the file17:07
sean-k-mooneyso custom_repo={ 'mariadb':'mariadb.repo' }17:09
rhalliseysean-k-mooney, the if per service would live in each service's Dockerfile17:09
rhalliseysean-k-mooney, you could do that17:09
rhalliseyit would probably be done in the base container then17:09
rhalliseyyou could also just check if there are any .repo files in the same directory17:10
rhalliseyand add all of them17:10
sean-k-mooneyyou could have somting like this custom_repo=[{ 'mariadb':{ 'repofile':'mariadb.repo', 'keyfile':'key' }]  }17:12
rhalliseyI think that's similar to what I have now.. let me see17:12
sean-k-mooneyso that you you can specify a list of the custom repos for each service and the corresponding key17:12
rhalliseyhttps://review.openstack.org/#/c/314614/4/kolla/common/config.py17:13
patchbotrhallisey: patch 314614 - kolla - Allow the base container to be more customizable17:13
sean-k-mooneyactully that should be custom_repo={ 'mariadb-base':[{ 'repofile':'mariadb.repo', 'keyfile':'key' }]  }17:13
sean-k-mooneycool ill take a look now17:14
inc0so, rhallisey an idea17:15
rhalliseyhit me17:15
inc0we make mariadb_bootstrap pod17:15
inc0replication controller for this with replicas = 017:15
inc0then when we want to bootstrap stuff17:16
inc0we change it to 117:16
inc0and bootstrap script inside container at the end will change it back to 017:16
inc0then if we want to re-run bootstrap, we just scale it back to 117:16
rhalliseyok so that mean kube dynamically monitors etcd variable BOOTSTRAP17:16
sdake_rhallisey that doesn't work - because I am thinking about a case of nova wantss liberty repos, heat wants mitaka repos17:16
rhalliseyand flips it17:16
inc0no, no etcd involved, instead of variable in etcd we'll use number of replicas17:17
inc0I mean we can add etcd at the end so actual mariadb container will fail if bootstrapped=false17:17
inc0so total deployment will look like that17:18
rhalliseyinc0, the way we bootstrap mariadb at least as AIO it wouldn't work17:18
rhalliseybecause maraidb processes would kill eachother17:18
inc0hold on17:18
inc0total bootstrap logic would look like that17:18
inc0we have 2 pods - mariadb and mariadb_bootstrap17:18
inc0mariadb container will have additional logic in start script ->17:19
rhalliseysdake_, to which solution.  The enable service.repo one or the giant list in the base container?17:19
inc0if variable MARIADB_BOOTSTRAPPED in etcd == false => exit 017:19
sdake_both17:19
inc0so it will be in restarting loop17:19
rhalliseyinc0, ok so we change the way we bootstrap in kolla17:19
rhalliseyslightly17:19
inc0yeah we have to17:19
inc0I think17:20
rhalliseyya we do17:20
rhalliseyeither way we would17:20
*** unicell has joined #openstack-kolla17:20
*** unicell has quit IRC17:20
sdake_i wish all the bootstrapping tasks happened first...17:20
*** unicell has joined #openstack-kolla17:20
inc0so bootstrap_maria pod will have replication controller with replicas: 017:20
rhalliseysdake_, we're throwing all the eggs at the wall here :)17:20
inc0and when we want to start deploying mariadb, we change it to 117:20
sdake_when you throw eggs at walls they stick ;)17:21
inc0then inside this container we have logic that after successful bootstrap change it back to 0 and add MARIADB_BOOTSTRAPPED=true17:21
rhalliseywell the expression is we'll see who doesn't crack17:21
rhallisey:)17:21
rhalliseybut they do stick17:21
rhalliseyhehe17:21
inc0then original mariadb gets a green light and have it all nice and bootstrapped17:21
inc0how does that sound to you guys17:22
inc0?17:22
rhalliseyinc0, how would we signal to change it back to 017:22
*** dwalsh has quit IRC17:22
rhalliseyetcd?17:22
*** mark-casey has joined #openstack-kolla17:22
inc0rhallisey, kubectl17:22
*** ayoung has quit IRC17:22
*** jtriley has joined #openstack-kolla17:22
inc0or however API works for k8s17:23
rhalliseyhow would you automate that?17:23
rhalliseyansible task?17:23
inc0no17:23
*** ayoung has joined #openstack-kolla17:23
sbezverkinc0 we are not using replication controller at this point17:23
inc0so our bootstrap inside container is a shell script right?17:23
inc0sbezverk, at this point;)17:23
rhalliseyare you saying this gets done within the container?17:24
inc0we can add additional curl at the end17:24
inc0yeah17:24
rhalliseyeh17:24
sdake_curl to what17:24
sbezverkhow about cur info from etcd17:24
inc0container will manage k8s17:24
sdake_curl isn't viable to etcd, but etcdtcl is17:24
rhalliseyrainbows and unicorns?17:24
sbezverksdake_ curl -fs -X PUT "http://${host}:${port}/v2/keys/_test"17:24
rhalliseyinc0, :D I had to say it17:25
inc0:P17:25
sbezverkwe can store bootstrap completion in etcd per service17:25
rhalliseyI"m jk17:25
inc0sbezverk, yeah that's the plan17:25
*** athomas has quit IRC17:25
sdake_sbezverk how does that work with tls?17:25
inc0and also manage it running/not running by replication controllers17:25
inc0sdake_, as well as k8s/etcd works with tls17:26
inc0which I hope it does17:26
sbezverksdake_ since it is initiated from within container I do not think tls is requiored17:26
inc0well it will be all private network17:26
inc0and we don't use tls on management anyway17:26
sdake_there is only one endpoint for etcd, it can be tls enabled or disabled17:26
sbezverkinc0 exactly only k8s cluster components have visibility for this traffic17:27
inc0well, we can hide it behind haproxy17:27
inc0and then have 217:27
inc0endpoints17:27
sdake_win17:27
inc0what do you guys think about it?17:28
inc0we need to have discussion how do we do startup scripts depending on deployment method17:28
inc0we had this in set configs, but that's more17:29
rhalliseythe container managing kubernetes thing might erk some the wrong way17:29
inc0rhallisey, container managing k8s will be mariadb_bootstrap container itself17:29
rhalliseyit's really a container managing itself17:29
inc0it will literally commit suicide17:29
inc0yup17:29
rhalliseysmart containers?17:29
rhalliseycan we coin that term17:30
inc0not that smart, just saying "I'm done, kill me now"17:30
rhalliseyself-managed containers17:30
openstackgerritSteven Dake proposed openstack/kolla: change keyfile to key  https://review.openstack.org/32058917:30
*** jtriley has quit IRC17:30
inc0and really this logic can be generic, any bootstrap will work with this17:31
openstackgerritSteven Dake proposed openstack/kolla: change keyfile to key  https://review.openstack.org/32058917:31
rhalliseyinc0, I think it's good dude.  This give us native bootstrapping and upgrades17:31
*** athomas has joined #openstack-kolla17:31
inc0and upgrades will either change no of replicas to 1 for rolling-upgradable services17:31
rhalliseyit also gives a sense of control17:31
inc0or change BOOTSTRAP_KEYSTONE=false->keystone replucas to 0->keystone_bootstrap_replicas=1->keystone_replicas=217:32
inc0really in one script17:32
inc0it will stand up on it's own after bootstrap is done17:32
inc0for these non-rolling upgradable17:33
rhalliseyI think it's idempotent too17:33
inc0it is17:33
rhalliseysay docker dies between setting those vars17:33
rhalliseyreplication controller is still 117:33
inc0but we need to figure out how to tell containers that they're managed by k8s now17:33
rhalliseyso kube will run it again and fix it17:33
inc0and run this k8s logic instead of what we have with ansible17:33
inc0yup17:33
sbezverkrhallisey replica is per pod, so even if you have 1 replica all containers in the pod will start, I do nto see how playing with replica number helps here?17:34
inc0the only time it fails and kinda breaks stuff if it fails between change of no of replicas and setting up BOOTSTRAPPED var17:34
rhalliseysbezverk, the bootstrap pod is manageed by the replication controller17:35
inc0which is super improbable and if we change BOOTSTRAPPEd before changing of replicas, at worst we;ll run bootstrap twice17:35
rhalliseythere is a mariadb_bootstrap pod and a mariadb pod17:35
rhalliseysbezverk, 2 pods17:35
inc0which shouldnt be a problem as it's idemptent on its own17:35
sbezverkah, I see it is new :-)17:35
sbezverkhow abount shared volumes between pods?17:35
*** ayoung has quit IRC17:35
inc0hmm, good point17:35
inc0I hope we can do this17:36
*** ayoung has joined #openstack-kolla17:36
sbezverkwhen we had everything in one pod we could share configmaps, volumes etc17:36
rhalliseysbezverk, what would need to be shared?17:36
inc0rhallisey, mariadb data files for one17:36
rhalliseywe could use labels17:36
rhalliseyassign them to the same hosts17:36
rhalliseyas a group17:36
inc0for openstack services it's not that bad as bootstrap works with maria17:36
sbezverkrhallisey I am just saying, right now we have bunch of shared staff between bootstrap and actual service contianer17:36
inc0sbezverk, not that much really17:37
sbezverkif it is not needed even better17:37
inc0for openstack services17:37
inc0just same database17:37
inc0but it's not about volumes17:37
rhalliseylet's group the pods by labels17:37
rhalliseyso woudl mariadb float?17:37
rhalliseyor would it be anchored?17:37
inc0it has to float17:38
rhalliseyok so floating services require outside shared storage17:38
inc0otherwise we need more than 1 replica of it and we don't want to have galera cluster with k8s underneath17:38
inc0yeah, true, ceph works well17:38
rhalliseyunless their data is copies amoung all nodes17:38
rhalliseyfor floating multinode we need shared storage17:39
rhalliseywe could  also do anchored multinode17:39
rhalliseyidk something to think about17:39
rhalliseycould support both17:39
rhalliseywith clever templating17:40
inc0well anchored multinode is ansible17:40
inc0we already have it17:40
rhalliseythat's true17:40
inc0no value for k8s whatsoever then17:40
rhalliseyadditional HA17:40
inc0well not really17:40
mark-caseyanchored multinode?17:40
inc0so HA model for k8s is having one mariadb container17:41
inc0and if node dies k8s restarts it somewhere else17:41
inc0if you have anchored, it can't restart it anywhere else17:41
inc0so you need more than 1, so 3 nodes17:41
inc0and galera cluster17:41
inc0which is what we do with ansible and it's painful17:41
inc0k8s takes away this pain, but it needs to float17:42
rhalliseywell you could have 10 nodes labeled controller17:42
rhalliseyit could anchor to any of those 1017:42
inc0then it floats between these 1017:42
rhalliseyvs any in the cluster17:42
rhalliseyya that's anchored17:42
*** Jeffrey4l has quit IRC17:43
rhalliseyvs literlly go anywhere17:43
inc0that's a design decision really17:43
inc0we can run k8s just on controller nodes17:43
rhalliseyok well I guess you can't really call that anchored because it does float17:43
rhalliseyselective floating17:43
sdake_kolla craters on this line TASK: [keystone | Creating admin project, user, role, service, and endpoint] ***17:43
sdake_master17:43
mark-caseyit could absolutely restart anywhere in the cluster. that is the whole point of state transfer in galera. the data dir gets wiped out17:43
sdake_source centos17:43
sdake_anyone seen that?17:44
rhalliseysdake_, nope17:44
rhalliseycould be a 2.0 issue17:44
sdake_i dont have ansible 2.017:44
rhalliseyupgrade to it?  I thought <2.0 doesn't work anymore ?17:44
rhalliseycould be wrong17:44
sdake_you are wrong17:44
rhalliseyidk I haven't tried it17:45
sdake_jeffrey4l's patch hasnt hit the repo yet17:45
rhalliseyoh I see17:45
inc0rhallisey, yeah, I +2+A the change but got race condition in getty and change still sits;)17:45
rhallisey:(17:45
dmsimardsdake_: Hi o/17:47
sdake_sup dmsimard17:47
rhalliseyinc0, so 2 pods then?17:48
*** ccesario___ has joined #openstack-kolla17:48
inc0worth to  try17:48
dmsimardsdake_: Last weekend I posted about a project I eventually want to send to /openstack, RDO (and by extension, OpenStack) will be the primary driver behind it, I thought you might be interested: https://dmsimard.com/2016/05/21/ara-an-idea-to-store-browse-and-troubleshoot-ansible-playbook-runs/17:49
rhalliseyOk. I"ll do nova while you do mariadb17:49
dmsimardI posted about it on openstack-infra as well: http://lists.openstack.org/pipermail/openstack-infra/2016-May/004257.html17:49
inc0rhallisey, let's start with 1 and check out if it even make sense17:49
inc0we need to figure out how to change kolla_start.sh depeding on deployment method17:49
*** esimone has quit IRC17:49
inc0we need to change containers with this approach unfortunately17:50
rhalliseyinc0, how can we split up the task?17:50
inc0changing the contianer will be separate review17:50
inc0but we need to discuss how do we do it17:50
rhalliseyhangout then?17:50
inc0hold on17:51
rhalliseydmsimard, you could add a doc to kolla with that17:51
mark-caseyinc0: rhallisey: was just trying to read back chat, what problem was there with changing bootstrap tasks so that you could run it 9 times in a row and not hurt anything? sort of like ansible's 'creates=' flag on the shell module17:52
rhalliseydmsimard, it's a pretty visualization of playbooks17:52
rhalliseymark-casey, I'm sure I understand what you mean.  The issue arose from being able to run a bootstrap job and signal when it's done17:54
*** dcwangmit01 has joined #openstack-kolla17:54
*** mbound has joined #openstack-kolla17:54
rhalliseymark-casey, inc0 has a clever way to do it by manipulating the # of replications of a pod17:55
*** Jeffrey4l has joined #openstack-kolla17:55
dmsimardrhallisey: *nods*, there is some polishing and improvements to do first .. and I also want the project to be under the openstack namespace before poking (too much) parties that may be interested17:56
mark-caseyrhallisey: oh. ok. that just clicked a little on how that could work. I thought it was two different pods coordinating. Still I wonder whether it would be easier/better to make every single task in a bootstrap idempotent. (i.e.: "stat file_created_by_db_bootstrap >/dev/null || bootstrap_db" )17:56
rhalliseydmsimard, neat!17:57
dmsimardrhallisey: I could even do an ara web ui container :p17:57
rhalliseyhehe :)17:57
rhalliseymark-casey, It is two different pods. One pod waits_for_bootstrap_done and the other run the bootstrap17:58
* rhallisey needs to add this to the ML thread & the spec17:58
rhalliseyif it works :)17:59
*** mbound has quit IRC17:59
inc0mark-casey, we have better places to put this kind of lock18:05
inc0namely ETCD18:05
inc0which we want to use in my idea;)18:05
*** mgoddard_ has quit IRC18:06
*** daneyon_ has joined #openstack-kolla18:06
*** athomas has quit IRC18:07
*** mbound has joined #openstack-kolla18:08
*** daneyon_ has quit IRC18:10
sdake_need help with this bug18:11
sdake_http://paste.fedoraproject.org/370466/46411345/ -> http://paste.fedoraproject.org/370466/4641134518:11
*** sdake_ is now known as sdake18:11
sdakeany ideas?18:11
rhalliseywonder what file it's failing to decode18:12
*** wznoinsk_ has joined #openstack-kolla18:14
sdakenote this is with the 2.0.0 tag18:15
*** jrist has quit IRC18:15
*** jrist has joined #openstack-kolla18:16
*** wznoinsk has quit IRC18:16
sean-k-mooneyinc0: just reading back through the last 2 hours of chat.18:16
inc0sean-k-mooney, it's about kubernetes18:17
*** dwalsh has joined #openstack-kolla18:17
sean-k-mooneyinc0: so in your case would we create teh inital mariadb pod with a replica size of 0 and only increase it to 1 after the maria_bootstrap pod had finished18:17
inc0no18:18
inc0mariadb pod will always be 118:18
sean-k-mooneysorry yes because its hosting the db your are bootstraping18:18
inc0but mariadb container will exit 0 if MARIADB_BOOTSTRAPPED==false18:18
inc0no, bootstrapping maria itself is different18:19
inc0(really not sure if we need to, but in case we need, let's asume we bootstrap it)18:19
inc0mariadb_bootsrap pod will have logic to bootstrap maria itself - like create files and such18:19
inc0and when it's done it will change MARIADB_BOOTSTRAPPED to True18:20
inc0will change mariadb_bootstrap replicas to 018:20
inc0(kill itself)18:20
inc0and exit 018:20
sean-k-mooneyoh ok so in this context what was the mariadb_bootstrap pode actully bootstraping. that was what was confusing me18:20
sdakeFile "/usr/local/bin/kolla_keystone_bootstrap", line 21, in <module>\n    from keystoneclient import exceptions\nImportError: No module named keystoneclient', 'rc': 1, 'invocation': {'module_name': u'command', 'module_complex_args'18:20
sean-k-mooneyinc0: yep that makes sense18:20
*** salv-orlando has quit IRC18:21
inc0same logic can be replicated for any other service18:21
inc0then if you want to upgrade, just put bootstrap replicas back to 118:21
sean-k-mooneyinc0: would you put the replicas back to 1 or create a new pod with the new image and put its replica set to 118:22
*** fragatina has joined #openstack-kolla18:22
inc0you don't need to create new pod to change images18:23
inc0you just tag new image with old tag18:23
inc0I mean mariadb_bootstrap:latest18:23
*** thumpba has joined #openstack-kolla18:24
rhalliseyinc0, do you think we should track the recpla count in etcd?18:24
sean-k-mooneyhum ok but if i was upgrading nova for example i may want to have different tag e.g. mitaka and newton rather then replace my existing tags18:25
inc0nah, it's alredy being tracked there18:25
inc0by k8s itself18:25
inc0in this case yeah, you need new pod18:25
rhalliseyinc0, ya that's better, could get some crazy corner cases if we did that18:25
inc0yeah, one source of truth ftw18:25
mark-caseyinc0: I just liked the idea that if the bootstrap process itself was repeatable without harm, it would work the same in ansible and k8s and not have to touch k8s' etcd, which i'd seen advised against18:26
*** jtriley has joined #openstack-kolla18:26
*** ccesario___ has quit IRC18:27
*** ccesario___ has joined #openstack-kolla18:27
sean-k-mooneymark-casey: well other then time is there any reason not to make the bootstrap logic idempotent as well18:29
*** d_code has quit IRC18:30
sdakehttp://paste.fedoraproject.org/370474/14637146/ -> http://paste.fedoraproject.org/370474/1463714618:30
sdakei rebuilt 2.0.018:30
sdakeand get this result18:30
sdakeso essentially - every version of kolla is broken18:31
*** d_code has joined #openstack-kolla18:31
*** thumpba has quit IRC18:31
inc0mark-casey, it should be idempotent18:32
inc0anyway18:32
inc0but you don't want mariadb to run while it's being bootstrapped18:32
mark-caseysean-k-mooney: what he said :D18:32
sean-k-mooney:)18:33
mark-caseyinc0: that makes sense. that is a different issue :)18:33
inc0that's the one we're trying to solve;)18:33
*** jtriley has quit IRC18:33
sean-k-mooneysdake is this an issue with the json decoder or what it is parsing18:34
sdakeyo can we have  a timeout from design to focus on the fact that all of kolla in all branches are broken18:34
*** dwalsh has quit IRC18:34
sdakesean-k-mooney it looks like keystone client is busted in some way18:34
inc0hmm18:34
inc0it was working yesterday18:34
inc0hold on, deploying18:34
sean-k-mooneywhen you say keystone client to you mean the client liberary or commandline client18:35
*** mbound has quit IRC18:35
sean-k-mooneyyou posted another error message a few minutes ago related to keystone correct18:36
sdakethe version i tested and tagged with 2.0.0 from source has the same version of python-keystoneclient18:37
sdakecan someone else test this and make sure its not environmental?18:37
*** ccesario___ has quit IRC18:37
inc0sdake, building containers now18:38
*** jtriley has joined #openstack-kolla18:38
sean-k-mooneysdake was the 'No module named keystoneclient'  error you hit on File "/usr/local/bin/kolla_keystone_bootstrap", line 21,  also related to this build18:41
sdakeyup18:41
sdakeoh no that was a build from master18:41
sean-k-mooneyoh ok18:41
d_codeso, I’ve been beating my head against OpenStack for a couple days now relating to PCI passthrough…  dropping the relevant config into /etc/kolla/config/nova.conf seems to work appropriately, the compute nodes register the pci device, but the scheduler filter removes all servers when it comes time to comparing the pci capabilities against the alias of the flavor. Has anyone done any of this even outside of Kolla?18:43
*** Avi82 has joined #openstack-kolla18:44
sdaked_code i'm sure someone hs done it, but probably not in kolla land18:44
sdaked_code most folks are doing basic stuff with kolla at this point (mostly evaluations going on)18:44
vhosakotd_code: yes, I have successfully used and tested SR-IOV (PCI passthru) with kolla internally in my company18:44
inc0d_code, sounds like nova issue, I can hardly imagine how kolla can affect that if cnodes sees pci devices18:44
d_codeSamYaple mentioned that he had done it a few weeks ago…but he doesn’t seem to be around18:44
*** ccesario___ has joined #openstack-kolla18:45
d_codeinc0: I don’t think it’s a kolla issue, specifically. I just happen to be using it and #openstack is quite idle18:45
vhosakotd_code: neutron needs the hardware plugin for that card on which SR-IOV neutorn ports are created18:45
sean-k-mooneyd_code: i have done sow work with pci passthrough but its been a while18:45
inc0d_code, try #openstack-nova18:45
d_codeso…I want to pass through the PF though, not using SR-IOV18:45
vhosakotah, SR-IOV needs the PF to get outside the server18:46
d_codevhosakot: http://paste.fedoraproject.org/370480/1464115618:47
d_codethat’s /etc/kolla/config/nova.conf18:47
sean-k-mooneyd_code: in addtion the the pci_whitelist and adding the alais request in the flavor have you also enabled the pci passthrough filter18:47
sean-k-mooneythats a yes :)18:48
sean-k-mooneyso your are trying to pass throuhg a niantic18:48
sean-k-mooneywhat version of openstack?18:48
d_codemitaka18:49
d_codeI want to pass through an entire nic18:49
d_codeor…one of the two ports, whatever it does…need the physical function18:49
d_codethen, `openstack flavor show m1.sensor` returns http://paste.fedoraproject.org/370481/1464115718:49
*** ccesario___ has quit IRC18:50
d_codeI feel like the alias isn’t getting through18:50
*** ccesario___ has joined #openstack-kolla18:50
sean-k-mooneydo you have a pasted of the nova scheduler log with the error18:50
d_codeb/c nova-compute on each of my 3 nodes has 2 pci devices that match18:50
d_codesure...sec18:50
sean-k-mooneyim wondering what filter actully eliminated the nodes.18:50
d_codepcipassthrough18:51
d_codehttp://paste.fedoraproject.org/370482/1464115918:52
sean-k-mooneyi assume if you check the pci_devices table in the nova db they are listed and available? also in mitaka the sriov nic agent needs to be deployed on the compute node18:52
d_codeis there a way to increase verbosity of logging?18:53
d_codesean-k-mooney: I haven’t done anything with a nic agent18:53
sean-k-mooneykolla does not run nova in debug mode by default18:53
d_codethey are in the nova pci_devices table18:53
d_codeneutron_metadata_agent, neutron_l3_agent, neutron_dhcp_agent, neutron_openvswitch_agent  <— those are the containers running on my compute host …well..it’s an all in one18:55
d_codetwo others that are compute only18:55
sean-k-mooneyso prior to mitaka intel nics did not use or require the sriov nic agent but as of mitaka it is required by nova. if its not deployed it may casue the failure but without an error message to back that up its just a guess18:55
vhosakotd_code: the following in nova.conf works fine for me for SR-IOV  -->  http://paste.openstack.org/show/498736/18:56
inc0sdake, ubuntu source worked18:56
d_codevhosakot: but you hvae some sort of vlan in neutron config tying to VF’s, right?18:57
sdakeinc0 that doesn't mean centos isn't broken18:57
inc0well, I'm just saying ubuntu isn't broken, someone should test centos18:58
sean-k-mooneyd_code: vhosakot  both of your nova config look correct18:58
d_codesean-k-mooney: to increase logging of scheduler, do I need to rebuild the container?18:58
sean-k-mooneyd_code:  vhosakot also has the "physical_network":"phys_prov" set so that it will work with neutron too18:58
sean-k-mooneyd_code: no you just need to change the value in the nova.conf and restart the container if you deployed with copy_always18:59
*** ravig has joined #openstack-kolla18:59
vhosakotyes, the neutron must know the VLAN18:59
vhosakotyes, "physical_network":"phys_prov" is needed for provider networks18:59
d_codevhosakot: k19:00
d_codesean-k-mooney: I’ll give that a whirl19:01
sean-k-mooneysdake:  if i get a chance tonight i will install a centos node and try and build/deploy 2.0.0 and see if it works for me just as an other sanatiy check19:02
vhosakotd_code: cool19:02
sean-k-mooneysdake: was that a binary or source build that failed?19:02
sdakeit was source but i just rebuilt everything and it seems to deploy19:11
sdakenotsure which branch i'm on19:11
sdakewaiting for deploy to finish19:11
d_codeclaims “doesn't have the required PCI devices “ for all compute hosts19:12
d_codethat would be a reason…..   except for that it does have them :/19:12
*** ravig has quit IRC19:12
sean-k-mooneyok cool im just going to head home catch people later.19:13
d_codelater sean-k-mooney19:17
openstackgerritMerged openstack/kolla-kubernetes: Render the common role in the CLI  https://review.openstack.org/32009719:18
*** sdake has quit IRC19:21
*** sdake has joined #openstack-kolla19:21
*** jtriley has quit IRC19:27
*** sdake has quit IRC19:30
*** sdake has joined #openstack-kolla19:31
*** ravig has joined #openstack-kolla19:31
sdakesbezverk can you ink again plz19:31
*** rmart04 has joined #openstack-kolla19:32
*** diogogmt has quit IRC19:32
*** ravig has quit IRC19:32
*** gfidente has quit IRC19:34
*** Jeffrey4l has quit IRC19:34
*** ravig has joined #openstack-kolla19:34
sdakeis there a way to specify a regex of just "base" to build.py?19:36
inc0build.py base19:36
sdakeso only base is built not everything with base in it?19:36
inc0should19:37
sdakeshould what?19:38
inc0should build just base images19:38
inc0and it's deps19:38
sdakei want to build "base"19:38
sdakeand that is it19:38
sdakenothign else19:38
inc0just use this command19:38
*** rmart04 has quit IRC19:40
*** rmart04 has joined #openstack-kolla19:41
*** salv-orlando has joined #openstack-kolla19:42
*** rmart04 has quit IRC19:43
*** mliima has quit IRC19:44
*** Jeffrey4l has joined #openstack-kolla19:46
sdakeinc0 which command19:46
inc0build.py base19:48
sdakeinc0 that builds all base images19:52
sdakeI onlly want to build the one base image19:52
inc0which one?19:52
sdakelets take the example differently19:52
inc0it will build image and all it's dependencies19:52
sdakeno it builds all base19:52
sdaketry it for yourself19:52
sdakeit will buid lnova-base for exxample19:53
inc0yes19:53
inc0it will19:53
inc0it will build everything with base in it19:53
sdakeyes its \*base\*19:53
sdakethat is the regex19:53
inc0yup19:53
sdakebase as a regex = "base"19:53
*** dmk0202 has joined #openstack-kolla19:54
sdakesbezverk ping - master works for me19:55
sdakei'm not sure what happened with my last build19:55
sdakesbezverk lets get to the bottom of your problem with nova19:55
sdakesbezverk do you have time for webex to discuss?19:55
sdakeor alternatively - can you tell me which version of python-novaclient is on your system19:56
sdakei have 3.4.019:56
*** ccesario___ has quit IRC20:00
*** ccesario___ has joined #openstack-kolla20:00
*** Avi82 has quit IRC20:01
*** ravig has quit IRC20:01
*** sdake_ has joined #openstack-kolla20:02
*** ravig has joined #openstack-kolla20:04
*** sdake has quit IRC20:05
*** shardy has quit IRC20:06
sbezverksdake I had 3.3.0 and it did not work, after I updated it to 3.4.0 it sarted working.20:13
*** jtriley has joined #openstack-kolla20:21
*** ayoung has quit IRC20:21
sdake_nice!20:24
sdake_ya the dependencies and versions are a mess, no? :)20:24
*** jtriley has quit IRC20:32
sbezverkinc0 ping20:34
sdake_sbezverk does the data plane thing work?20:35
sbezverk:-( no20:35
sdake_workflow -1 your patch20:35
sbezverkeverything looks nice and clean20:36
sdake_i dont want to prematurely merge it20:36
sdake_sbezverk do you need config files from devstack with lbaas setup in it?20:36
inc0sbezverk, here20:36
sbezverksdake_ I got the best possible source for lbaas configuration as I used my red hat contact20:37
sbezverkI am confident from lbaas/opensatck perspective I have everything right20:37
sdake_so upstream is broken?20:38
sdake_or user error?20:38
sbezverksdake_ what I am not sure is kolla20:38
sdake_or network config problem20:38
sbezverkin a sense I thought I could use haproxy container20:38
sbezverklbaas required haproxy20:38
sdake_lets keep haproxy that kolla uses separate from lbaass' haproxy20:39
sdake_are you saying the haproxies are conflicting?20:39
sbezverkok then I need to install haproxy on my server where I run kolla?20:39
sdake_no, but it probably needs to be installed in the container20:39
sbezverkso I would have 1 haproxy in a container for kolla and one just for lbaas??20:39
sbezverkI think it is more architecture related issue than just config.20:40
sbezverksdake_ I have a idea20:42
sbezverksdake_ haproxy running container has in /run haproxy.pid what if I create a named volume and share it between haproxy and neutron lbaas containers:20:43
sbezverk?20:43
*** rmart04 has joined #openstack-kolla20:45
*** rmart04 has quit IRC20:45
*** ravig has quit IRC20:47
*** ravig has joined #openstack-kolla20:49
sdake_haproxy.pid doesn't help20:49
*** ravig has quit IRC20:52
*** ravig has joined #openstack-kolla20:53
*** ccesario___ has quit IRC20:54
*** ravig has quit IRC20:55
sdake_sbezverk lets not confuse our haproxy used by kolla with the one used by lbaas20:55
sdake_i think that would be a recipe for disaster20:55
*** ravig has joined #openstack-kolla20:55
*** mbound has joined #openstack-kolla20:55
*** fragatina has quit IRC20:57
*** ccesario___ has joined #openstack-kolla20:57
*** mliima has joined #openstack-kolla20:57
mliimasdake_, ping20:57
sdake_mliima wound me sir20:58
*** ravig has quit IRC20:58
*** mbound has quit IRC21:00
sdake_mlima whats up21:00
mliimawell, you said to me for ping you21:00
*** wirehead_ has joined #openstack-kolla21:01
sdake_right21:01
*** ravig has joined #openstack-kolla21:01
sdake_wound me = reference to shoot = which means speak in english :)21:01
sdake_can you open up a review21:01
*** ravig has quit IRC21:01
sdake_any one will do21:01
sdake_you need to be logged in21:01
*** ravig has joined #openstack-kolla21:01
sdake_i want to show you how gerrrit behaves now for you21:01
mliimaI had to change the nick, someone registred mlima :(21:02
*** wirehead_ is now known as wirehead21:02
sdake_change which nick21:02
mliimairc21:02
sdake_bummer21:02
*** wirehead is now known as wirehead_21:03
mliimanow i have 2 i21:03
sdake_ok21:03
sdake_so basically the way it works21:03
sdake_the first core reviewer comes along21:03
sdake_these people are called "first to review"21:03
sdake_it can also be non-core reviewerfs first to review21:03
sdake_if your first to review, your expected to see the review through until completion21:03
sdake_i sometimes vote +1 if I'm in favor of the idea, but the implementation isn't quite right but I don't have suggestions on hwo to fix it21:04
sdake_a -1 vote means "fix x y z"21:04
sdake_a -2 vote essentially kills a review, meaning it will never go into the code base21:04
sdake_we reserve -2 votes for serious situations21:04
sdake_atleasst i do21:05
sdake_everyone behaves differently as you will find out ;)21:05
sdake_the final vote you can case is a +221:05
mliimai understood :)21:05
*** ayoung has joined #openstack-kolla21:05
sdake_the second person to the review has a special obligation to +w the patch21:05
sdake_if they also +2 it21:05
sdake_one thing I do on every review, is look at the bug id21:05
sdake_if its high or critical, I target it to mitaka and liberty21:06
*** ravig has quit IRC21:06
sdake_I am not superhuman21:06
sdake_so I can't review everything, and would appreciate help in targeting bugs for backporting21:06
sdake_to backport, a bug *must* have a bug id21:06
mliimai'm very happy and excited to be part of the team.21:06
sdake_this is why trivialfix is limited use21:06
sdake_so dont +2 and +w if there isn't already a +221:06
sdake_there is no obligation to manually test something that you didn't persoanlly author21:07
sdake_sometimes I pull down patches21:07
sdake_sometimes I don't21:07
sdake_really up to you21:07
sdake_welcome to the core reviewer team for kolla, its a pleassure to have you :)21:07
mliimathe pleassure is mine21:08
*** ccesario___ has quit IRC21:08
*** ccesario___ has joined #openstack-kolla21:08
vhosakotgood work mliima! :)21:08
sdake_look we both mistyped pleasure ;)21:12
sdake_lol21:12
mliimamany fellings sdake_21:13
wirehead_The only thing more fun than endless piles of patches to review is directly shocking the basal ganglia.21:14
sdake_wirehead_ ++21:14
sdake_wirehead_ someone has to do it :)21:15
sdake_the work doesn't do itself :)21:15
*** callahanca has quit IRC21:16
openstackgerritLiyi Meng proposed openstack/kolla-kubernetes: Break deployment procedure into two steps  https://review.openstack.org/32066821:17
*** haplo37_ has joined #openstack-kolla21:19
*** callahanca has joined #openstack-kolla21:20
*** fragatina has joined #openstack-kolla21:20
d_codescheduler output: http://paste.fedoraproject.org/370482/14641159/21:21
d_codebah…wrong channel21:21
d_codesorry21:21
*** haplo37_ has quit IRC21:24
sbezverksdake_ well, I think it is bigger disaster to run to haproxies :-)21:25
sdake_you can probably use the same haproxy container just a different copy21:26
sdake_thin containers = do one job21:26
sdake_haproxy container does the job of proxying connectivity from the external to the internal networks authentiating along the way21:26
sdake_i want to have good separation of concerns here21:26
sdake_but my question is on the data plane stuff, were there any errors in the logs?21:27
sbezverksdake_ yes, agree but that job is acting as haproxy, nobody said only one application can use thin container..21:27
*** ccesario___ has quit IRC21:27
sdake_i think it ould be a security concern21:28
sbezverksdake_ there is no errors in logs, what happened is haproxy bring up VIP for lbaas, if haproxy is not running hence VIP is not active21:28
sdake_i'd just rather not even go there with it21:28
sdake_is haproxy meant to run wherever lbaas is running?21:28
sbezverkyes in the config you can see it uses haproxy driver to communicate with it21:29
sdake_is lbaas setup to run on the network nodes then?21:30
sdake_note haproxy probably has some other files besides haproxy.pid shared21:30
sdake_within the /run directory21:31
sdake_I'd recommend making a named volume just for haproxy+lbaas21:31
sbezverksdake_ I check haproxy container and I do not see anything suspicious21:31
sdake_sbezverk could you expand ;)21:31
sbezverkok but haproxy(kolla) or haproxy(additional container) ?21:32
sdake_there has got to be a haproxy socket in /run21:32
*** ccesario___ has joined #openstack-kolla21:32
sdake_please make a separate instance for lbaas21:32
sbezverksdake_ can you access links now?21:32
sdake_my main concern is security21:32
*** dmk0202 has quit IRC21:32
sdake_i can - reboot happened 1 hr ago :)21:32
sbezverksdake_ http://paste.openstack.org/show/498751/21:33
sdake_ls -l /run21:33
sdake_wierd21:33
sdake_i wonder how the client communicates with the server21:33
sbezverksdake_ normally they do not21:34
sbezverkhaproxy we use is manually configured21:34
sbezverkso it does what we told it to do21:34
*** sdake has joined #openstack-kolla21:34
sbezverkI suspect lbaas uses some sort of api for dynamic reconfiguration of haproxy21:34
sdakeback21:35
sdakeyes but to do that there is typically a socket21:35
sbezverkbecause one of lbaas config items is haproxy group id21:35
sdake /var/run/haproxy.sock21:36
sbezverksdake I tried to get more details from lbaas developers, but man these guys ignores you like you do not exist :-)21:36
sdakehttp://haproxy.tech-notes.net/9-2-unix-socket-commands/21:36
sdakehaha21:36
*** mliima has quit IRC21:36
sdakeput yourself in their shoes21:36
sdakethe neutron devs and nova devs have people harassing them nonstop for features bugs etc21:37
*** diogogmt has joined #openstack-kolla21:37
sdakethey dont need any more adoption, they need more third party support21:37
sdakekolla on the other hand needs adoption, that is why we spend so much time on support here ;)21:37
*** ravig has joined #openstack-kolla21:37
*** dmk0202 has joined #openstack-kolla21:37
sbezverk"/var/lib/kolla/haproxy/haproxy.sock"21:38
*** sdake_ has quit IRC21:38
sdakedisable frontend <frontend>21:38
sdakewe need this for upgrade21:39
sbezverksdake that socket seems to be for stats:   stats socket /var/lib/kolla/haproxy/haproxy.sock21:40
sdakeyou may have to read the lbaas python code to figure out how it communicates with haproxy21:40
*** Serlex has quit IRC21:46
sbezverksdake yeah it seems it comminucates via sock I found some references in code21:57
sdakesounds like you need a haproxy ontainer started in the lbaas role21:58
sbezverksdake it look too complicated, nested roles??22:00
sbezverksdake I need to do PoC, I will install haproxy locally, add lbaas container hostmount for haproxy internals and see if it works22:02
*** dmk0202 has quit IRC22:09
*** sdake has quit IRC22:09
*** sdake has joined #openstack-kolla22:19
sdakesbezverk soundsgood22:19
sdakesbezverk actually a host mount there wont work, because I assume your running lbaas on the network nodes where it belongs22:20
sdakeand haproxy has a host mount too22:21
sbezverksdake nope haproxy does not have host mount22:24
sdakeoh that makes sene then22:24
sbezverkit keeps its stuff inside wihtout exposing it22:24
*** rhallisey has quit IRC22:27
*** thumpba has joined #openstack-kolla22:31
sbezverksdake these guys turned out to be much smarter than I thought :-) they do not use haproxy in daemon mode22:47
sbezverksdake they use it in foreground mode and start it per name space, really cool22:47
sdakecool22:48
sdakethat doesn't answer the Q why the dataplane is busted22:48
sbezverk:-) give a bit of time I think I know what is wrong22:49
*** stvnoyes has quit IRC22:55
*** stvnoyes has joined #openstack-kolla22:55
*** absubram has quit IRC22:58
*** openstackgerrit has quit IRC23:03
*** openstackgerrit has joined #openstack-kolla23:03
*** vhosakot has quit IRC23:10
*** ravig has quit IRC23:14
*** ravig has joined #openstack-kolla23:21
*** ravig has quit IRC23:22
*** 32NAA9JNR has joined #openstack-kolla23:22
*** thumpba has quit IRC23:24
*** ravig has joined #openstack-kolla23:27
*** ravig has quit IRC23:34
*** ravig has joined #openstack-kolla23:34
*** 32NAA9JNR has quit IRC23:39
*** weiyu_ has joined #openstack-kolla23:44
*** SiRiuS__ has quit IRC23:48
*** inc0 has quit IRC23:49
*** ccesario___ has quit IRC23:50
*** weiyu_ has quit IRC23:53
*** jtriley has joined #openstack-kolla23:54
*** ravig has quit IRC23:54
*** sdake has quit IRC23:55

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!