22:00:28 #startmeeting containers 22:00:29 Meeting started Tue Jul 14 22:00:28 2015 UTC and is due to finish in 60 minutes. The chair is adrian_otto. Information about MeetBot at http://wiki.debian.org/MeetBot. 22:00:30 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 22:00:32 The meeting name has been set to 'containers' 22:00:53 #link https://wiki.openstack.org/wiki/Meetings/Containers#Agenda_for_2015-07-14_2200_UTC Our Agenda 22:00:56 #topic Roll Call 22:01:01 Adrian Otto 22:01:01 o/ 22:01:03 o/ 22:01:03 o/ 22:01:05 o/ 22:01:06 o/ 22:01:06 o/ 22:01:11 Perry Rivera 22:01:15 Ton Ngo 22:01:16 o/ 22:01:21 o/ 22:01:22 o/ 22:01:29 o/ 22:02:01 hello madhuri_, sdake_, yuanying-alt, dane_leblanc, mfalatic, suro-patz, juggler, Tango, tcammann1, daneyon, rods, and hongbin 22:02:16 hello! 22:02:21 Howdy! 22:03:37 0/ 22:03:48 hello eghobo 22:04:13 we have a full agenda today, so let's start 22:04:17 #topic Announcements 22:04:39 1) We have made a directional design decision to implement TLS and certificate generation initially using Barbican. 22:04:47 #link http://lists.openstack.org/pipermail/openstack-dev/2015-July/069130.html Summary of our TLS Design Meeting 22:04:58 this has the exact text of the #agreed for your reference ^ 22:05:07 #link https://review.openstack.org/194905 Spec Review for TLS Support in Magnum 22:05:16 ^ this is the work it relates to 22:05:59 there has been some initial delays in response from the Barbican team. Has madhuri_ heard back from redrobot or another Barbican team member? 22:06:10 Not yet adrian_otto 22:06:22 ok, I will take an action item to escalate 22:06:24 I found us another expert 22:06:31 Are we going to use dogtag as a backend? 22:06:33 Dave McCowan said he could provide guidance on the barbican front 22:06:50 Yet to be decided tcammann1 with Barbican guys 22:06:54 madhuri you have his email 22:06:55 #action adrian_otto to follow up with Barbican team to arrange assistance for integration with Magnum 22:07:09 thanks sdake_ 22:07:09 Yes sdake_ 22:07:33 let's table the Barbican matter until Open Discussion 22:07:36 madhuri_ make sure to cc the mailing list plz 22:07:46 Sure 22:07:46 we're going to get what we need there. 22:07:51 next.. 22:07:56 2) Welcome Tom Cammann to the magnum-core team. 22:08:01 :D 22:08:03 o/ welcome aboard dude 22:08:06 I will be adding him at the end of our meeting 22:08:06 Welcome 22:08:08 excellent! 22:08:09 welcome! 22:08:10 thanks guys 22:08:10 welcome 22:08:19 * juggler high fives tcammann 22:08:25 now you can help me on https://blueprints.launchpad.net/magnum/+spec/objects-from-bay ;-) 22:08:38 yep, sure can 22:08:47 although you could before ;-) 22:09:03 heh 22:09:31 actually tcammann has been added to https://review.openstack.org/#/admin/groups/473,members 22:09:41 woop 22:09:50 we look froward to your +2 power 22:10:06 next announcement... 22:10:08 3) Magnum Midcycle Meetup is 2015-08-05 and 2015-08-06 at IBM 22:10:17 in San Jose 22:10:23 #link https://wiki.openstack.org/wiki/Magnum/Midcycle Magnum Midcycle Details 22:10:29 NOTICE: Seating is limited, so Eventbrite RSVP is required for all in-person attendees. Remote attendees please do not RSVP. 22:10:50 this is really important. If you are going to attend in person, be sure to RSVP on eventbrite 22:11:05 seating = 28 seats correct? 22:11:17 there are 28 remaining of the 30 I posted 22:11:34 that should be plenty judging by the regular ODS 22:11:42 we can manage 22:11:49 adrian_otto lets rent an RV and drive up together... lol!!!! 22:11:57 I'm planning of email all of the ticketed participants prior to the event to confirm your attendance, and free up room for anyone waiting 22:12:11 daneyon, I own one of those 22:12:20 but sorry I can't afford the time to drive. 22:12:24 skip the rent part then 22:12:37 we;ll make a good team dinner on that Wed night together 22:12:55 questions about the Midcycle? 22:13:14 is there soda on site 22:13:18 or should I pack a cooler ;) 22:13:21 is there a call-in number for remotes? 22:13:23 * sdake_ can't live without soda 22:13:30 or IRC only? 22:13:31 Soda provided :) 22:13:36 * adrian_otto will be sure sdake remains caffeinated at all times 22:13:42 cool thansk tang o: ) 22:13:52 juggler i setup a webex 22:13:56 juggler we will roll with webex 22:14:00 ok, let's hand off to daneyon for a moment 22:14:02 cool beans 22:14:03 the dets should be in the midcycle url above 22:14:04 #topic Container Networking Subteam Update 22:14:14 I was in training last week, but I have been adding to the etherpad this week. My focus has been to develop content to the spec draft. 22:14:19 link https://etherpad.openstack.org/p/magnum-native-docker-network 22:14:24 A lot more to come over the next week. 22:14:29 Those interested, please review the content that I’m adding to the spec draft sections and provide your feedback in the etherpad. 22:14:38 ok, cool. Thanks. 22:14:46 The networking subgroup will meet this Thursday to continue to collab on t he networking spec 22:14:51 #link https://wiki.openstack.org/wiki/Meetings/Containers#Container_Networking_Subteam_Meeting 22:14:56 ^ for details 22:15:04 that's Thursdays at 1800 UTC, correct? 22:15:04 meeting details that is 22:15:13 thanks for the link daneyon 22:15:15 i believe so 22:15:18 let me double check 22:15:40 yes, 1800 utc 22:15:42 #topic Review Action Items 22:15:48 Docker is having an online metope this Thursday. 22:15:58 1) madhuri to kick off thread about cert provided by stackforge project anchor 22:15:59 one more sec adrian_otto 22:16:04 Docker is having an online metope this Thursday. 22:16:09 #link http://www.meetup.com/Docker-Online-Meetup/events/223796871/ 22:16:10 * adrian_otto pausing 22:16:15 I highly suggest attending the meetup if you plan to contribute to magnum networking. 22:16:38 +1 22:16:44 otherwise, i look forward to getting together with the net subteam this thurs. feel free to pingme with any questions 22:16:46 thx 22:17:02 ok, so in reference to madhuri's action item 22:17:04 #link http://lists.openstack.org/pipermail/openstack-dev/2015-July/068993.html Magnum as a CA 22:17:15 Status: COMPLETE 22:17:28 2) All core reviewers to review https://review.openstack.org/#/c/194905/ 22:17:34 Status: Ongoing 22:17:52 I can carry that forward if you'd like to keep bird dogging it. 22:18:17 sure adrian_otto 22:18:33 #action All core reviewers to review https://review.openstack.org/194905 22:18:46 3) adrian_otto to begin an ML thread for https://review.openstack.org/194905 22:18:50 Status: COMPLETE 22:19:05 4) adrian_otto to assist xu_ with starting an ML thread about the Hyper blueprint for Magnum 22:19:10 Status: COMPLETE 22:19:16 #link http://lists.openstack.org/pipermail/openstack-dev/2015-July/069402.html ML Thread for Hyper/Magnum Integration 22:19:27 5) adrian_otto to select a date for the Midcycle and announce to the team members 22:19:30 Status: COMPLETE 22:19:39 #link https://wiki.openstack.org/wiki/Magnum/Midcycle Magnum Midcycle Details 22:19:53 that concludes all action item follow-ups 22:19:57 next topic 22:20:01 #topic Discuss Future of heat-coe-templates 22:20:07 #link http://lists.openstack.org/pipermail/openstack-dev/2015-June/068237.html ML Discussion (June) 22:20:12 #link http://lists.openstack.org/pipermail/openstack-dev/2015-July/068381.html ML Discussion (July) 22:20:51 proposal is to delete heat-coe-temlates, and maintain the code we have separately from the upstream, which will remain in github, not stackforge 22:20:57 thoughts on this? 22:21:23 I don't see this repo working with larsks' repo and he seems to have different aims for the templates 22:21:36 has larsks provided any feedback on this? 22:21:54 no, daneyon he has not responded on this topic 22:22:04 And we aren't getting the required attention on the h-c-t repo to make it useful 22:22:10 tcammann1 can u elaborate on larsks' diff aims? 22:22:37 i asked larsks atlaest 3 times to respond on that thread 22:22:44 he said he would, but has not ;) 22:22:45 so I don't know what else can be done 22:22:59 He isn't targeting Magnum, he has added several features that aren't compatible with Magnum 22:23:10 +1 22:23:28 if we do delete the heat-coe-template repo, (actually put in attic) we should cut trying to keep the two in sync 22:23:30 autoscaling and load generators to name a couple 22:23:37 one should be a fork of another 22:23:38 tcammann1 can you give us an example of one of the unsupported features that were added? 22:23:42 a permanent fork 22:23:45 nm 22:23:49 so we should express our appreciation for the kickstart this gave us, and acknowledge we are heading different enough directions to warrant a split 22:24:10 agree 22:24:13 ya we tried to fix the fork problem with heat-coe-tempaltes but it seems like thats more trobule then its worth to everyoene involved 22:24:26 but daneyon's questions are valid… so I'll address it this way... 22:24:39 would autoscaling and load generators be features that magnum will eventually want? 22:25:00 We are doing autoscaling significantly differently, and no we don't want a load geneartor 22:25:00 I find it highly unlikely his autoscaling actually works properly ;-) 22:25:06 tcammann volunteered to help consolidate our downstream changes with the stackforge upstream, and that has become a high friction effort for relatively low value 22:25:23 if nobody is consuming heat-coe-templated besides magnum, then it might as well be in our source tree 22:25:26 good point 22:25:32 it would make sense if larsks had intent to delete larsks/heat-kubernetes, but he does not 22:25:44 so we will always have 3 repos to deal with rather then one 22:26:03 we aren't actually consuming the library atm 22:26:07 so its dead code for the most part 22:26:14 straight to the attic with no code changes in magnum 22:26:14 so, we can delete the stackforge one, and keep an eye on the github one for enhancements that may help us 22:26:24 +1 22:26:26 and selectively cherry pick things that make sense 22:26:50 agree 22:27:03 +1 22:27:07 +1 22:27:30 ok, so that's a point of view that tcammann1 and hongbin, and sdake, eghobo, and yuanying-alt, and I agree on. Are there opposing points of view to hear before a decision? 22:27:38 its too bad larsks changed his mind but oh well +1 22:27:39 so, any heat template updates should be made here instead of h-c-t stackforge 22:27:41 #link https://github.com/openstack/magnum/tree/master/magnum/templates 22:27:56 daneyon ack 22:28:06 thx 22:28:08 and someone should move heat-coe-templates to attic 22:28:17 not opposing here. is there any value to an archival copy of that stackforge one? [in other words, is the delete absolute and final?] 22:28:17 dane_leblanc: yes, or also to the upstream if they are not Magnum specific and you want to be a good open source citizen 22:28:30 juggler you can't delete stackforge projects, they go to an attic 22:28:33 sorry dane_leblanc, that was for daneyon 22:28:34 where they are permanent 22:28:41 ah, cool 22:28:43 +1 then 22:29:14 tcammann1: are you willing to own the task of putting it into attic? 22:29:22 thx sdake 22:29:34 ok, I'm not hearing any opposition, so I'm going to record this as an #agreed 22:29:50 adrian_otto: yep 22:30:41 #agreed tcammann will move heat-coe-templates to the attic, and we will maintain the existing fork in the magnum tree for Magnum heat templates at https://github.com/openstack/magnum/tree/master/magnum/templates 22:30:55 if there are objections, I can still undo. 22:31:21 i think itw ould be helpful to annoucne on ml the retirement of that repo 22:31:26 and the reason behind it 22:31:45 and the reason it was created in teh first place ;) 22:31:52 #action tcammann to move heat-coe-templates repo to project attic, and to relay our resolution on the ML thread: http://lists.openstack.org/pipermail/openstack-dev/2015-July/068381.html 22:31:53 (bhind the retirement) 22:32:04 ok! 22:32:29 wfm - such a shame but oh well :) 22:32:52 also, it would be helpful, tcammann1 if you would find the original thread, and follow up to that one too with a link to the relevant archived message 22:32:58 does that make sense? 22:33:13 the one where we discussed the creation of that repo 22:33:28 #topic Keystone Support and Devstack Broken Gate 22:33:30 ya thread necromancy generally bad idea but i guess it couldn't hurt here 22:33:45 Magnum's gates broke on 7/10 because of a change in Devstack. 22:33:46 :) sdake_ adrian_otto can do also 22:33:59 #link http://lists.openstack.org/pipermail/openstack-dev/2015-July/069398.html Problem Overview 22:34:15 long term this gets obviated by: 22:34:17 #link https://blueprints.launchpad.net/magnum/+spec/magnum-keystone-v3 Keystone v3 API Support Blueprint 22:34:28 The actual issue was solved by merging workaround from Hongbin: 22:34:42 thanks for that hongbin 22:34:44 #link https://review.openstack.org/200835 Workaround for Devstack bug 22:34:52 yeah hongbin! 22:34:53 Once Devstack is fixed, we can back this back out in accordance with: 22:34:58 NP 22:34:59 #link https://bugs.launchpad.net/magnum/+bug/1474152 Tech Debt: Reverse temporary gate fix 22:34:59 Launchpad bug 1474152 in Magnum "Tech Debt: Reverse temporary gate fix" [Low,Triaged] 22:35:13 any questions on this? 22:36:05 #topic Blueprint/Bug Review 22:36:17 New Blueprints for Discussion 22:36:23 #link https://blueprints.launchpad.net/magnum/+spec/hyperstack Power Magnum to run on metal with Hyper 22:36:37 * adrian_otto looks for the ML thread link 22:37:15 #link http://lists.openstack.org/pipermail/openstack-dev/2015-July/068574.html Hyper Magnum Integration Discussion 22:37:33 there are open questions with active discussion 22:37:42 please keep an eye on that one 22:37:54 it could potentially be a compelling feature for us 22:38:11 any concerns? If not I will revisit it next week 22:38:15 i like the idea, would be nice if it ran a coe on top 22:38:26 such as kubernetes/etc 22:38:29 rather then just raw docker 22:38:34 sdake: it might actually work under another coe 22:38:49 So the integration point is k8s or magnum? 22:38:50 i get that, I htink that is what I just said ;0 22:38:50 so you might use it in combination with our existing Bay types 22:38:52 I am still not sure why integration need to be done at Magnum level 22:39:07 eghobo: that's one of the questions in the thread 22:39:18 I suggested that it might make more sense as a nova virt driver 22:39:38 I have the same opnion 22:39:56 That nova team accept the proposal, then it makes sence 22:39:57 ok, we'll come back to this again next week 22:40:05 Essential Blueprint Updates 22:40:09 or they need to integrate with Kub or Messos 22:40:13 #link https://blueprints.launchpad.net/magnum/+spec/objects-from-bay Obtain the objects from the bay endpoint (sdake) 22:40:24 so i've spent some more time on this 22:40:31 it needs to be broken into two peices at minimum 22:40:35 peice one is read operations 22:40:39 piece two is write operations 22:40:46 read easier then write 22:41:02 i have not written much code at all 22:41:08 mainly because devstack is busted on f21 atm 22:41:12 so i am unable to do dev 22:41:27 is this at risk, or should we remain calm? 22:41:29 or magnum will need to support different container runtimes per bay or within a bay 22:41:36 remain calm for l3 22:41:38 at risk for l2 22:41:42 ok 22:41:49 #link https://blueprints.launchpad.net/magnum/+spec/secure-kubernetes Secure the client/server communication between ReST client and ReST server (madhuri) 22:41:55 madhuri_: ^^ 22:42:10 this one is at risk 22:42:18 Agree 22:42:23 I'm escalating with the Barbican team on the CA portion 22:42:31 is the client all set madhuri? 22:42:33 I just saw reply mail 22:42:34 or do you need hep there 22:42:37 Yes 22:42:37 if that effort fails, we'll need a plan-B 22:42:44 Client all set 22:42:49 lets try to bring in Dave McCowan 22:42:52 he is keen to work in this area 22:42:54 Yes we need a B-plan for sure 22:42:59 although he said he may nto be available for antoher week or more 22:43:14 he is definately a security expert 22:43:22 he is the cat who wrote the doc for us that got us kicked off 22:43:24 That would be a great help sdake 22:43:25 ok, madhuri_ if we don't eel comfortable by your end of day thursday 22:43:36 let's get on the ML and arrange a Plan-B 22:43:47 +1 adrian_otto 22:43:51 thanks sdake 22:44:02 thx madhuri/sdake 22:44:05 feel free to ping me at that time 22:44:12 Sure 22:44:16 next BP 22:44:17 #link https://blueprints.launchpad.net/magnum/+spec/external-lb Support the kubernetes service external-load-balancer feature (sdake) 22:44:28 i dont know why that is assigned to me 22:44:30 Tango: ^ 22:44:35 isn't thtat tango's blueprint? 22:44:38 I will fix that for next week, sorry 22:44:44 Yep :) 22:44:47 it's just wrong in the agenda 22:44:51 ok 22:45:00 ya i'm at capacity 22:45:41 I made some progress, got version 0.19 to run on Magnum 22:45:50 oh, good! 22:45:56 It was configuration, as sdake said 22:46:09 tango note we will want ot get the kube dudes to fix problems soon as they release in a week I think :) 22:46:30 It was just not documented anywhere so it was painful to discover 22:46:52 Tango: do you have enough help to succeed with this? 22:46:54 bad documentation, agree Tango 22:47:30 is it documented somewhere now? 22:47:48 tango any bugs for the template to be corrected then? 22:48:07 we will want magnum to run on kube master soon because middle of july is release of kube 1.0 22:48:22 Yes, I will update the template when we decide to move on to the newer version 22:48:39 what is gating that decision? 22:48:47 lets move now 22:48:51 actually next Tue ;) 22:48:52 as soon as the tempaltes are working 22:49:14 typically it taes u 3-5 days to fix the templates after a major revision 22:49:14 I do have an issue with the image building for atomic. 22:49:20 so lets suffer the pain now 22:49:47 Agreed, let's get on that version. We are going to have to do it before the Liberty release anyway 22:49:51 One of the binary is broken and I am not sure why: kube-apiserver 22:50:13 ok, that's a good reason not to 22:50:16 I have to work around, so that's why the templates are not in perfect shape yet 22:50:51 I mean the binary is OK, just that when we create the Atomic image, Atomic broke it somehow 22:50:55 ok, so as soon as that's resolved, let's proceed to moving to 0.19 22:51:19 Yes, I will line up the patches to move on 22:51:21 it must be the nulecule 22:51:37 nulecule? 22:51:37 ok, thanks 22:51:40 tango make sure to put in a request people actually test it rather then eyeball it 22:52:24 ok, I have a couple more BP's to get stauts on 22:52:26 and i can ad dyou to the magnum group so you can upload the image 22:52:33 contact me offline 22:52:41 ok 22:52:42 thanks for your help with this sdake 22:52:44 #link https://blueprints.launchpad.net/magnum/+spec/magnum-swarm-scheduling Provide container anti-affinity through swarm constraint filtering (diga) 22:52:54 I'm not sure why we marked this one as Essential 22:53:03 me either 22:53:04 I think it's important, but I think we could live without it 22:53:06 doesn't look essential 22:53:17 I'm planning to downgrade it to a Medium 22:53:26 unless there is a good reason to keep it as-is 22:54:17 it is now a medium. I am willing to revisit it if there is/are (a) compelling argument(s) to consider 22:54:29 #link https://blueprints.launchpad.net/magnum/+spec/secure-docker Secure client/server communication using TLS (apmelton) 22:54:32 +1 22:54:51 apmelton is not present today 22:55:14 +1 22:55:39 this one is a liberty-2 deliverable 22:55:58 still marked as Not Started 22:56:18 Think its heavily linked to the other TLS blueprint, and waiting on the outcome of it 22:56:35 tha's what the dependency tree shows 22:57:01 basically to implement this we take the same pattern we use in k8s bays, and apply it to Swarm bays 22:57:18 so that should be a modest effort 22:57:29 probably not going to hit l2 22:57:36 madhuri_: is this something you might be willing to tackle once we get the others solved? 22:57:55 If done with Kubernetes, I will take it 22:58:04 ok, I'll add you as a subscriber 22:58:11 Thanks 22:58:28 done 22:58:34 ok, that brings us to open discussion 22:58:39 with only a moment remaining 22:58:44 #topic Open Discussion 22:58:53 Thanks to all who helped me update the docs! 22:59:03 mfalatic: thanks for staying on-task for that 22:59:04 Also, be advised that tox is broken 22:59:14 sounds like needs fixing ;-) 22:59:17 I had a question on the redis example in the quick-start guide, I think it's just a redis issue, if anyone's familiar. Brought it up on the ml: http://lists.openstack.org/pipermail/openstack-dev/2015-July/069357.html 22:59:19 the mock requirements update means that if you have an old virtualenv it won't work 22:59:34 e.g., ubuntu 14.04 22:59:43 Magnum gate was faling yesterday due to new taskflow release 22:59:45 you have to upgrade virtualenv 22:59:50 https://rbtcollins.wordpress.com/2015/07/12/bootstrapping-developer-environments-for-openstack/ 23:00:02 Our next meeting is on 2015-07-21 at 1600 UTC. I look forward to seeing you then! 23:00:07 or just hammer it with sudo pip install -U virtualenv 23:00:09 (sorry I have to end now) 23:00:10 ok 23:00:17 #endmeeting