*** hongbin has joined #openstack-kuryr | 01:54 | |
*** hongbin has quit IRC | 03:06 | |
*** rh-jelabarre has quit IRC | 04:46 | |
*** janki has joined #openstack-kuryr | 04:50 | |
*** jistr is now known as jistr|doc | 06:33 | |
*** ccamposr has joined #openstack-kuryr | 07:02 | |
*** yboaron_ has joined #openstack-kuryr | 07:27 | |
openstackgerrit | Merged openstack/kuryr master: Update master for stable/stein https://review.openstack.org/641627 | 07:31 |
---|---|---|
openstackgerrit | Daniel Mellado proposed openstack/kuryr-kubernetes master: Add ipBlock support to NP https://review.openstack.org/645139 | 07:45 |
*** gcheresh has joined #openstack-kuryr | 08:09 | |
*** celebdor has joined #openstack-kuryr | 08:33 | |
*** yboaron_ has quit IRC | 08:37 | |
*** alisanhaji has joined #openstack-kuryr | 08:48 | |
*** pcaruana has joined #openstack-kuryr | 08:57 | |
*** jistr|doc is now known as jistr | 09:15 | |
*** yboaron_ has joined #openstack-kuryr | 09:28 | |
*** gcheresh_ has joined #openstack-kuryr | 09:32 | |
*** gcheresh has quit IRC | 09:33 | |
*** yboaron_ has quit IRC | 09:35 | |
*** yboaron_ has joined #openstack-kuryr | 09:36 | |
*** premsankar has quit IRC | 09:44 | |
alisanhaji | Hi, I have a question regarding kuryr pluging interfaces. Neutron-server sends to neutron-agent the port info as unbound and owned by compute:kuryr, and it's kuryr-daemon which plugs it to the OVS bridge right? | 10:17 |
*** gcheresh_ has quit IRC | 10:21 | |
ltomasbo | yep, kuryr-cni is doing the binding to br-int or vm nit (in case of nested) | 10:21 |
ltomasbo | alisanhaji, ^ | 10:21 |
openstackgerrit | Daniel Mellado proposed openstack/kuryr-kubernetes master: Add ipBlock support to NP https://review.openstack.org/645139 | 10:23 |
*** gcheresh_ has joined #openstack-kuryr | 10:30 | |
alisanhaji | ltomasbo: thanks, I was wondering if it was neutron-agent which was not doing it's job | 10:33 |
*** gcheresh has joined #openstack-kuryr | 10:35 | |
*** gcheresh_ has quit IRC | 10:35 | |
alisanhaji | ltomasbo: and what about security groups? | 10:36 |
ltomasbo | alisanhaji, just to be clear, it is neutron how creates the port, add security groups, set the ovs-flows, etc | 10:42 |
ltomasbo | alisanhaji, kuryr-controller then annotates port information into the pod | 10:42 |
ltomasbo | alisanhaji, and then kuryr-cni reads it from there and connects the container to the neutron network | 10:42 |
ltomasbo | alisanhaji, in the case of neutron driver, it creates a veth devices, connects one end to the container namespace | 10:43 |
ltomasbo | alisanhaji, and then the other end to the br-int (ovs-vsctl add-port ....) | 10:43 |
ltomasbo | alisanhaji, it also sets the ip, route and such on the container namespace interface | 10:43 |
ltomasbo | alisanhaji, then, when neutron-agent detects that the port has been wired, it will do its dutty, transition the port to ACTIVE | 10:44 |
ltomasbo | alisanhaji, and then, the kuryr-controller will change the annotations on the pod, to state the port is active | 10:44 |
alisanhaji | ltomasbo: ok great, I understand why the annotations now, thank you | 10:44 |
ltomasbo | alisanhaji, and the kuryr-cni will be waiting for that port to become active, and when that happens it will finish, so that the container can be started (as the network is set) | 10:45 |
ltomasbo | alisanhaji, your welcome! hope it helps! | 10:45 |
alisanhaji | ltomasbo: with this workflow I can know what went wrong in my case, thanks | 10:45 |
alisanhaji | it helps greatly | 10:45 |
ltomasbo | glad to hear :) | 10:45 |
openstackgerrit | MichaĆ Dulko proposed openstack/kuryr-kubernetes master: WiP: Fix cri-o gate https://review.openstack.org/644867 | 10:48 |
openstackgerrit | OpenStack Release Bot proposed openstack/kuryr-libnetwork master: Update master for stable/stein https://review.openstack.org/648086 | 11:09 |
*** rh-jelabarre has joined #openstack-kuryr | 11:53 | |
*** yboaron_ has quit IRC | 12:18 | |
*** pcaruana has quit IRC | 12:39 | |
*** pcaruana has joined #openstack-kuryr | 12:42 | |
*** pcaruana has quit IRC | 12:42 | |
*** pcaruana has joined #openstack-kuryr | 12:43 | |
*** yboaron_ has joined #openstack-kuryr | 13:15 | |
*** janki has quit IRC | 14:41 | |
*** alisanhaji has quit IRC | 14:51 | |
*** alisanhaji has joined #openstack-kuryr | 15:39 | |
*** gcheresh has quit IRC | 15:48 | |
*** gcheresh has joined #openstack-kuryr | 16:13 | |
alisanhaji | so I tried to use the kuryr-cni docker container to run Kuryr on Magnum. I had an error telling me that the "docker command was not found". I think I know the source of the problem | 16:13 |
alisanhaji | so Magnum runs VMs with fedora atomic OS for k8s | 16:14 |
alisanhaji | and the kubernetes stack is containerized in fedora atomic https://www.projectatomic.io/blog/2018/03/containers-w-skopeo-ostree-oci/ | 16:15 |
alisanhaji | So kubelet runs under runc, and the PATH does not seem to be loaded from the machine where docker and runc commands can be found | 16:15 |
alisanhaji | that's why when kubelet runs /opt/cni/bin/kuryr-cni, it can't use runc or do docker exec to attach the interface | 16:17 |
*** gcheresh has quit IRC | 16:24 | |
*** celebdor has quit IRC | 16:25 | |
alisanhaji | I'll try next time to mount /usr/bin in kubelet install by modifying Magnum code | 16:28 |
alisanhaji | and see if it works | 16:29 |
*** celebdor has joined #openstack-kuryr | 17:10 | |
dulek | alisanhaji: Ah, so containerized kubelet. Yep, that sounds totally like the root cause. | 17:13 |
*** celebdor has quit IRC | 17:28 | |
*** celebdor has joined #openstack-kuryr | 17:35 | |
openstackgerrit | Maysa de Macedo Souza proposed openstack/kuryr-kubernetes master: Add support for text ports on Network Policy Spec https://review.openstack.org/643080 | 17:35 |
*** ccamposr has quit IRC | 17:38 | |
*** yboaron_ has quit IRC | 17:40 | |
*** celebdor has quit IRC | 18:02 | |
*** premsankar has joined #openstack-kuryr | 18:11 | |
*** celebdor has joined #openstack-kuryr | 18:20 | |
openstackgerrit | OpenStack Release Bot proposed openstack/kuryr-kubernetes master: Update master for stable/stein https://review.openstack.org/648210 | 18:38 |
*** mrostecki has quit IRC | 19:05 | |
*** mrostecki has joined #openstack-kuryr | 19:05 | |
*** pcaruana has quit IRC | 19:53 | |
openstackgerrit | Merged openstack/kuryr-libnetwork master: Update master for stable/stein https://review.openstack.org/648086 | 20:20 |
*** alisanhaji has quit IRC | 21:40 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!