22:01:42 #startmeeting containers 22:01:43 Meeting started Tue Aug 25 22:01:42 2015 UTC and is due to finish in 60 minutes. The chair is sdake. Information about MeetBot at http://wiki.debian.org/MeetBot. 22:01:44 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 22:01:47 The meeting name has been set to 'containers' 22:01:51 #topic rollcall 22:01:52 o/ 22:01:55 o/ 22:01:55 o/ folks :) 22:01:58 o/ 22:01:59 o/ 22:01:59 o/ 22:01:59 o/ 22:02:05 o/ 22:02:14 o/ 22:02:22 o/ 22:02:24 i'll wait a couple more mins 22:02:43 o/ 22:03:00 o/ 22:03:16 nice looks like we have a small army to start :) 22:03:23 #topic announcements 22:03:38 You are not going to greet everyone like Adrian does? :) 22:03:50 tango tool azy :) 22:04:00 lol 22:04:08 Madhuri has a family emergency and will be AFK for 1-4 weeks 22:04:26 this means people need to pick up her work if possible 22:04:38 yuanying-alt has already agreed to continue on the tls work 22:04:45 but we will need more horsepower here ;) 22:04:49 #2 22:05:30 liberty-3 release is around this time, and rc1 deadline is typically september 25th for 6mo release cycle projects 22:05:44 we are not a 6 mo release cycle project so we have freedom to decide our own mielstones 22:05:59 but I'd encourage people to think of the drop dead date as september 25th :) 22:06:10 i'll speak with adrian about whether he wants to make a rc1 milestone in launchpad 22:06:17 with a target of rc1 22:06:38 any other announcements from community cats? 22:07:08 ok then :) 22:07:20 #topic define ODS sessions for Tokyo 22:07:47 we need to produce a list of our sessions for Tokyo - last year we got 4 fishbowl sessions and 8 unnamed sessions which are technical in nature 22:07:51 the venue this year is smaller in size 22:07:59 so we may not get as many sessions 22:08:08 but we need to have a count asap 22:08:15 so I'd like to spend some time generating our list 22:08:39 https://etherpad.openstack.org/p/magnum-tokyo-summit-sessions 22:08:52 12 minute time box until 3:20 22:09:02 please brainstorm any sessions you would like to discuss 22:09:08 in the etherpad 22:09:17 dont worry about sorting into fishbowl vs nonfishbowl 22:09:24 adrian or I will do that 22:11:16 note we will have another one of thexe sessions snext wednesday to wrap up the sessions 22:12:12 if your here please participate ;) 22:12:18 add your name to participants list 22:12:24 even if you have no sessiont o add 22:12:41 this will give us idea who contributed - so we know if we have critical mass for the submissions :) 22:12:43 o/ 22:12:52 line 6 needs attention by folks not in 2-6 :) 22:12:58 rather line 7 22:13:38 7 minutes to go :) 22:14:31 whoever added line 6 could you define "other options" please :) 22:15:18 I don't have one in mind, just to encourage people to think of something other than Manila 22:15:35 Maybe I will have some thought later 22:16:38 ok ok i can already tell we will have more sessions then we have space for 22:16:43 next meeting we will stack rank em 22:16:52 or if adrian has some other idea he can do that :) 22:16:59 keep brainstorming :) 22:17:18 t-3 minutes 22:18:27 not eeach of these sessions is 40 minutes in length 22:18:31 not/note 22:19:42 ok 1 minute left, if you contributse please add your name to line 10 22:20:53 back 22:22:27 #topic networking team update 22:22:44 ok guys the irc bot won't change the topic 22:22:50 because my nick doesn't match 22:22:58 no worries 22:23:01 daneyon can you give a networking subtaem update 22:23:20 I didn't think i was going to make the meeting today, so I provided an update through the ML 22:23:23 #link http://osdir.com/ml/openstack-dev/2015-08/msg01630.html 22:23:39 can you give us the 5 minute tldr versoin :) 22:23:43 Instead of rehashing, i'll give everyone some time to pull the link up and review 22:23:54 ok 22:24:15 In summary, the container networking model spec merged. That was big 22:24:20 #topic networking subteam update 22:24:29 #link https://review.openstack.org/#/c/204686/ 22:24:32 nice job daneyon!! 22:24:42 thanks everyone for your contributions!!!! 22:24:44 and nice job all the core reviewers for spending the cycles to review that spec ;) 22:25:00 specs are evil evil things but in this case necessary 22:25:01 i have created bp's for each work item in the spec 22:25:11 i have also started to create wip patches for the work items 22:25:25 daneyon one question will this work complete before september 25th? 22:25:38 i have seen some of the initial feedback of the patches and will start providing updates to the wip's 22:25:58 sdake I think it's 50/50 22:26:09 ok well i would recommend in that case not breaking the implementation that is there 22:26:18 i am working though the labels aspect of the spec 22:26:19 and we can push into mitaka if necessary 22:27:05 I am reviewing how other OS projects have similar implementations to see if anything can be used as a model 22:27:05 all done? 22:27:23 will do 22:27:24 thx 22:27:31 #topic horizon UI update 22:27:39 anyone have updates on this work? 22:28:06 bradjones seems afk - it hink he is in EMEA so probably fast asleep 22:28:18 #topic TLS update 22:28:37 yuanying-alt apmelton any updates here? 22:28:47 I've got a little update from the barbican meeting 22:28:54 if we complete one piece of work before september 25th, it needs to be this ;) 22:29:16 I asked about where the work stood for being able to create CA's with barbican 22:29:19 I'm not familir with project_config 22:29:21 they pointed me towards https://review.openstack.org/#/c/187236/ 22:29:42 and the guy working on it said it'd likely be 3+ weeks 22:30:15 ok well we aren't waiting 22:30:21 make a solution that doesn't involve barbican plz 22:30:23 so it's definitely looking like magnum as a CA is definitely the best bet 22:30:31 3 weeks is september 25th, we have no time to do integration 22:30:48 it doesn't have to be perfect 22:31:07 the requirements are secure to the best of our ability and isolates bays from one another 22:31:20 from my understanding of where they were, magnum as a ca is the approach they were taking 22:31:20 yuanying-alt what od you need re project-config? 22:31:33 I want to add barbican to gate 22:31:46 but barbican seems something diffrerent 22:31:48 as i mentioned madhuri wont be able to contribute to this effort much over the next few weks 22:32:04 yuanying you mean to pass functional tests? 22:32:08 yes 22:32:16 I can help you get aquainted with the gate after the meeting if you have time 22:32:26 So I think we should modify project-config right? 22:32:34 ok, thanks 22:32:36 yuanying-alt possilby 22:32:47 #action sdake to walk yuanying-alt through how gating works 22:33:04 ok so barbican is off the table as a ca, we need to use magnum as a ca 22:33:16 just because barbican wont' be ready in time for our deadlines 22:33:33 yuanying-alt does that change your approach? 22:33:59 we want to barbican to store secret not a ca 22:34:12 i see so still needed for ca storage then 22:34:16 if that part works, that wfm 22:34:30 so yuanying-alt apmelton is working on this project 22:34:35 yuanying-alt: please let me know if you need help anywhere, it'll be very easy to get things on my end reprioritized to help out 22:34:43 any person willing to step up and contribute here as well? This is our #0 priority! 22:35:01 keystone trust is remaining 22:35:14 for implementing tls work 22:35:26 I think muralia has a good idea of what's required for keystone trust 22:35:30 i don't recall who was doing that work, but adrian knows the person 22:35:42 ya, i was looking into that. 22:35:45 muralia areyo u doin gthat work? 22:35:46 i can work on that 22:35:47 I know a guy can possibly work on keystone trust 22:35:51 is there a blueprint on it? 22:35:55 not yet 22:36:03 muralia please file a blueprint today 22:36:09 will do. 22:36:15 and I'll assign you to it 22:36:27 this is a dependency of tls so needs to be pulled in to whatever release we are doing next :) 22:36:35 ok 22:36:39 sdake: wanghua is also working on keystone trust as well 22:36:40 and needs to be done sooner rather then later 22:36:45 what is the timeline on this? 22:36:52 he need keystone trust for registryv2 bp 22:37:05 i'll sync up with wanghua 22:37:09 hongbin_ good to know can you reach out to him to get him to sync with muralia? 22:37:17 sure 22:37:23 no sense two people doing same job 22:37:33 any other tls dependencies that need addressing 22:37:35 ? 22:37:51 so for keystone trust 22:37:58 It can be splitted into two parts 22:38:06 1. keystone v3 support 22:38:09 2. trust 22:38:23 We can have two person to work on those items 22:38:27 hongbin_ instead of muralia filing a blueprint, could you file two for those two items? 22:38:35 sure 22:38:46 sounds like muralia you could add keystone v3 support? 22:38:48 i think there is a v3 client alreay. it just needs to be used. i've also seen a method for generating trusts. 22:39:22 agree 22:39:43 doen't api need support for v3? 22:39:53 It uses v2 right now 22:40:02 hongbin when you file those bugs please bring them into the liberty-3 milestone 22:40:07 rather those blueprints 22:40:20 sdake: OK 22:40:43 ok any other updates there, ounds like we are blocked on keystone and project-config atm 22:41:31 yuanying-alt does tls work outside the gate - meaning all we have to do is enable barbican support in the gate? 22:41:49 yes 22:41:57 well that is fantastic news1 22:42:02 1 22:42:03 ! 22:42:04 shift key bust 22:42:16 ok any other discussion on this topic? 22:42:23 yuanying-alt i will help you with project config after meeting 22:42:30 dont go anywhere plz :) 22:42:31 ok 22:42:43 sure 22:43:06 #topic updating to kubernetes 1.0 in our images/heat templates/documentation/devstack 22:43:19 Tango where are you with this work? 22:43:30 this is also a must have for liberty 22:43:44 I built a new image with release 1.0.3 and the recommended version of flannel, etcd 22:43:51 and docker 1.7.1 22:44:04 I am helping Tango for the k8sclient port 22:44:08 Docker requires a little tweaking on the storage 22:44:13 hongbin_ fantastic! 22:44:19 Tango: is that docker 1.7.1 from docker or redhat? 22:44:24 i think we need a blueprint to track this work 22:44:31 tango could you file one plz 22:44:40 Not sure, I pick up from kojipkj 22:44:49 apmelton yes from red hat 22:44:57 Tango: any problem with the release 1.0? 22:45:04 OK, right now it's a bug, but I will open a blueprint 22:45:21 ya blueprint makes sense because we will have to do api work too 22:45:24 i know i siad bug before 22:45:36 my brain wasn't working properly at the time :) 22:45:45 The current image was built with a prerelease version, so the new image is more "official", using the latest release 22:46:03 tnago does the new image work with the current heat templates, or is work neeeded there? 22:46:07 tango that is ^^ 22:46:37 Tango: are you going to build another image or using the *-4 image? 22:46:38 There is a couple patches to update the templates. I am updating the functional test, and adding a test for load balancer 22:47:23 ok just so we are clear, priority #1 is tls, priority #2 is running with kubernetes 1.0, priority #3 is everything in the launchpad tracker (from my perspective) 22:47:40 adrian may hae a different take 22:47:46 hongbin_: I am debugging the new image now, getting docker storage to work. When it's working, I will pass to sdake to upload and replace the current copy -4 22:47:59 Tango: get that 22:48:00 i'll make a copy -5 22:48:02 actually 22:48:09 Tango is their just 1 review for the k8s 1.0 update? 22:48:11 so expect the image to be named -5 22:48:17 ok sure 22:48:23 I want to make sure my network stuff is implemented with your 1.0 work 22:48:32 we need changes to the heat templates, image, devstack, and api code for kuberntes 1.0 22:48:44 this is why it needs to be a blueprint 22:48:47 daneyon: That's ok, the change is not big 22:48:53 also the k8sclient needs to be re-generated 22:49:06 do u have a link to the review that you can share? 22:49:26 i want to make sure i'm using the right patch(es) for 1.0 22:49:56 daneyon: https://review.openstack.org/#/c/210641/ 22:50:02 Tango thx 22:50:08 This one will pick up the others 22:50:37 #action tango to create a blueprint for the kuberntees 1.0 port and include devstack, image creation, k8sclient regen, heat templates in it 22:50:48 will do 22:50:57 #topic open discussion 22:51:05 I have a question on the topic of versioned objects 22:51:12 we have 9 minutes for whatever folks would like to discuss 22:51:18 I noticed that right now, when we make changes in magnum/objects, we don't change object version 22:51:18 sdake: I want to get back to the magnum-ui 22:51:19 shoot x3k 22:51:32 but the idea of objects is that each change in their fields should be versioned 22:51:36 hongbin_ your next up 22:51:39 documentation about the change should also be written in a comment inside the object 22:51:46 and the obj_make_compatible method should be implemented/updated 22:52:03 see an example here: https://github.com/openstack/nova/commit/ad6051bb5c2b62a0de6708cd2d7ac1e3cfd8f1d3#diff-7c6fefb09f0e1b446141d4c8f1ac5458L27 22:52:09 x3k can you submit patches for the work if something is missing with a bug or blueprint? 22:52:11 so the question is, do you think magnum should support rolling upgrades f.ex. from next release? 22:52:26 i thikn rolling upgrades are a big job 22:52:33 but that is the end goal yes 22:52:34 if yes, I think core reviewers should start checking for these incompatible changes 22:52:38 by liberty - who knows :) 22:53:02 x3k this is first i've heard about it, perhaps a mailing list thread would be helpful 22:53:11 x3k our cr team is spread around the globe 22:53:42 sdake, ok, I'll start discussion and maybe submit bug reports 22:53:46 a mailing lis tthread would be best to make the core reviewers aware of it 22:54:05 #action x3k to start ml thread on versioned objects review objectives 22:54:19 hongbin_ your up :) 22:54:31 but maybe it's still too early (for fixing this now, in this release) 22:54:46 lets get a thead started and make a decision 22:54:52 Yes, for the mgnum-ui, I saw brad is submitting two patches, but lack of reviews 22:54:57 atm there is no decesion because there has been no complaint :) 22:55:10 magnum-ui has a lot of cores. We need to ping them to review :) 22:55:38 sounds like an action for adrian otto :) 22:55:51 lol 22:55:53 #action adrian_otto to ping all magnum-ui core reviewers to review bradjones magnum ui patches 22:56:03 I have talked to Thai Tran, he will use my environment to try out the patches and help with review 22:56:13 tango that would be much appreciated :) 22:56:19 sdake : regarding object from bay have proposed a WIP https://review.openstack.org/#/c/213368/ would like to get feedback on it…if this way seems good I can send out patches for service, pod 22:56:52 vilobhmm1 send me an email stdake@cisco.com and I willge tto it tomororw -t he rest of my day is slammed today 22:57:00 email = wont lose it or forget :) 22:57:10 sdake : Thanks :) will do. 22:57:30 3 more minutes :) 22:58:39 ok if nothing else, keep up the good work, stay focused on tls + kube 1.0 support 22:59:00 need to see thoe blueprints filed so we can track them and set them as essential as discussed in the meeting 22:59:15 yep 22:59:20 please link them in #openstack-containers if you don't have permissions to tag to liberty-3 release 22:59:32 ok times out :) 22:59:34 thanks folks! 22:59:36 #endmeeting