10:01:16 <strigazi> #startmeeting containers 10:01:17 <openstack> Meeting started Tue Feb 20 10:01:16 2018 UTC and is due to finish in 60 minutes. The chair is strigazi. Information about MeetBot at http://wiki.debian.org/MeetBot. 10:01:18 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 10:01:20 <openstack> The meeting name has been set to 'containers' 10:01:36 <strigazi> #topic Roll Call 10:01:43 <flwang1> o/ 10:02:06 <slunkad> hi 10:02:16 <strigazi> hi slunkad flwang1 10:02:33 <flwang1> strigazi: hello 10:03:16 <strigazi> meeting agenda #link https://wiki.openstack.org/wiki/Meetings/Containers#Agenda_for_2018-02-20_1000_UTC 10:03:33 <strigazi> #topic Announcements 10:03:37 <strigazi> None 10:03:43 <strigazi> #topic Blueprints/Bugs/Ideas 10:04:14 <strigazi> Calico network driver for kubernetes https://review.openstack.org/#/c/540352/ flwang1, do you want to log the status? 10:05:20 <strigazi> I'll do it then :) 10:05:23 <flwang1> yep, with strigazi's help, we have tested most of the functions 10:05:27 <flwang1> and it just works 10:05:41 <strigazi> problem found: 10:05:58 <strigazi> calico needed extra mounts for the kubelet container 10:06:23 <strigazi> and coredns needed the pods_network_cidr to be passed in its configuration 10:07:15 <strigazi> kubelet now has an interface to add new mounts 10:07:21 <strigazi> next 10:07:26 <strigazi> Cluster Federation remaining patch for queens https://review.openstack.org/#/c/546093/ 10:07:38 <flwang1> strigazi: yep, i'm going to add another document/note to highlight the calico driver need v1.9.3 kube_tag 10:08:22 <strigazi> yes we need that 10:08:34 <strigazi> 1.9.3 or later 10:08:55 <flwang1> yep, would you mind me adding it with a following patch? 10:09:38 <strigazi> it is better to be in this one. since we cherry-pick we double the patches 10:09:47 <flwang1> ok, no problem 10:10:03 <flwang1> I will post a new patchset then 10:10:12 <strigazi> thanks 10:12:31 <strigazi> Cluster Federation remaining patch for queens https://review.openstack.org/#/c/546093/ the feature is implemented server side. We can iterate in this cycle both upstream and downstream and complete the feature in rocky. kubernetes clusters created by magnum are ready to be federated if a user wants to do it manually. 10:13:37 <strigazi> next, 10:13:47 <strigazi> ingress controller https://review.openstack.org/#/c/528756/ 10:14:55 <strigazi> with this patch, traefik is deployed with magnum. Users can then create ingresses specific to their deployement. 10:15:17 <flwang1> strigazi: that's a good one, but i haven't got time to test it 10:15:29 <flwang1> strigazi: do we want to get it in Queens? 10:15:53 <strigazi> flwang1 it works better if the cloud that the cluster runs in has dns for the cluster ndoes 10:16:15 <strigazi> flwang1: yes 10:16:56 <strigazi> next, 10:17:01 <strigazi> k8s: allow passing extra options to kube daemons https://review.openstack.org/#/c/481062/ 10:17:30 <strigazi> We came with this issue for users that need high customization for kubernetes. 10:18:13 <strigazi> The most prominent use case we had was for cluster with over 300 nodes, (we tried up to 800) 10:18:48 <strigazi> there are parameters to tune like --qps which affects the performance of the cluster. 10:18:49 <flwang1> strigazi: wow 10:20:21 <flwang1> sounds interesting, will take a look 10:20:21 <slunkad> nice! 10:20:47 <strigazi> I'm looking for the param documentation, just a moment 10:21:25 <strigazi> eg: --event-qps int32 If > 0, limit event creations per second to this value. If 0, unlimited. (default 5) 10:21:42 <strigazi> this is for kubelet 10:22:48 <strigazi> large clusters are subject to tuning, otherwise their performance is degraded 10:23:11 <strigazi> next, 10:23:16 <flwang1> strigazi: it's a great feature 10:23:44 <strigazi> disable_drivers option https://review.openstack.org/#/c/541663/ flwang1 it's ready this one right? 10:24:07 <flwang1> strigazi: yep, it's ready 10:24:10 <strigazi> I'll test after the meeting 10:24:15 <flwang1> strigazi: great 10:24:16 <flwang1> thanks 10:24:34 <strigazi> I have three more, all for queens :) 10:24:42 <strigazi> Run etcd and flanneld in a system container https://review.openstack.org/524116 10:25:25 <flwang1> can it be tested with fedora 26? 10:25:28 <strigazi> if f27 both components are removed and we need to run them in syscontainers like kube. 10:27:27 <slunkad> strigazi: btw the fedora atomic image link is broken here https://docs.openstack.org/magnum/pike/user/#kubernetes-on-fedora-atomic 10:28:01 <strigazi> flwang1 it could, but it's not quite the same. we are bitten by docker-storage-setup 10:28:19 <strigazi> flwang1: I need to update it properly to work with both 10:28:23 <flwang1> strigazi: ok, then it would be tricky 10:28:35 <strigazi> we will default to overlay2 10:28:52 <flwang1> you mean network driver? 10:29:06 <strigazi> and devicemapper will be adviced to be used only with external volumes 10:29:13 <strigazi> flwang1 not storage 10:29:16 <strigazi> flwang1 no, storage 10:29:20 <flwang1> ok, i see 10:29:45 <flwang1> make sense for me 10:29:59 <strigazi> slunkad: that would be the correct https://dl.fedoraproject.org/pub/alt/atomic/stable/ it changed :( 10:30:28 <slunkad> ah i see 10:31:19 <strigazi> next, 10:31:26 <flwang1> strigazi: btw, as for image, should we update the image in devstack? 10:31:30 <flwang1> from 26 to 27? 10:31:41 <strigazi> yes, when it works :) 10:32:07 <flwang1> and given the k8s 1.7.x will EOL at March, should we update the default version of k8s? 10:32:24 <strigazi> yes, we will default to 1.9.3 10:32:36 <flwang1> in Queens? 10:32:40 <strigazi> yes 10:32:41 <flwang1> is there a patch? 10:33:07 <strigazi> no 10:33:16 <flwang1> mind me proposing? 10:33:21 <strigazi> I don't 10:33:30 <flwang1> cool 10:33:32 <strigazi> go for it :) 10:33:38 <flwang1> will do after this meeting 10:34:17 <strigazi> flwang1: 1.7 is EOL in March? 10:34:27 <strigazi> I though it is one year 10:34:34 <flwang1> strigazi: i will find the link for you 10:37:33 <strigazi> ok, next is the dashboard. 10:37:50 <strigazi> I missed it in the agenda. 10:38:27 <strigazi> I'll update the patch to work with kubernetes 1.9 and RBAC. https://review.openstack.org/#/c/507465/ 10:39:10 <flwang1> strigazi: awesome 10:39:17 <strigazi> And last one, is upgrades. The feature I want to go in as beta. 10:39:59 <strigazi> We need to have a working prototype deployed and finalize the feature in Rocky 10:41:04 <strigazi> I have tested going from 1.7 to 1.8 with success but this path is not enough I would say. 10:41:30 <strigazi> flwang1: how does that sound? 10:41:54 <flwang1> sounds good for me 10:41:57 <flwang1> i'm keen to test it 10:42:26 <flwang1> strigazi: IIRC, you haven't posted your patch on gerrit, yes? 10:42:58 <strigazi> I did, it's incomplete though. https://review.openstack.org/#/q/status:open+project:openstack/magnum+branch:master+topic:bp/cluster-upgrades 10:44:02 <flwang1> sorry, it's on my list actually 10:44:13 <flwang1> after completed the calico work, i will revisit the patch 10:44:25 <strigazi> flwang1 sure, 10:44:31 <strigazi> A note here 10:45:00 <strigazi> Magnum is designed to manage a lot of clusters 10:45:57 <flwang1> do we really need the note ? ;) 10:46:26 <flwang1> it should definitely support A LOT OF clusters 10:46:31 <strigazi> So we make some decisions keeping in mind that the clusters are built to serve almost all use cases 10:46:44 <flwang1> strigazi: +1 10:47:41 <strigazi> applications should be closely attached to nodes 10:48:19 <strigazi> this concept needs some time to grasp that you need to stop caring about the node that your app is running on :) 10:48:37 <strigazi> from my experience is difficult to pass it to new users 10:48:51 <strigazi> that was my note :) 10:50:17 <strigazi> I think we can move to 10:50:17 <strigazi> #topic Open Discussion 10:50:32 <strigazi> slunkad: are you coming in the end at the PTG? 10:50:44 <slunkad> strigazi: yes i will be there 10:50:53 <strigazi> slunkad: great! 10:51:06 <slunkad> strigazi: what was the link to the planning etherpad? 10:51:23 <strigazi> https://wiki.openstack.org/wiki/PTG/Rocky/Etherpads 10:51:50 <slunkad> thanks! 10:52:09 <flwang1> strigazi: thanks for the link though i won't be there 10:52:19 <strigazi> flwang1: which time will you be able to join remotely? 10:53:12 <flwang1> depends on the timezone, i nneed to check 10:53:26 <strigazi> it uk/ireland 10:53:30 <strigazi> it;s uk/ireland 10:53:36 <strigazi> it's uk/ireland :) 10:54:05 <flwang1> i don't mind working at night for one or two days 10:55:36 <strigazi> It will be mostly one I guess, we will see, depends on the attendance 10:56:43 <flwang1> ok 10:56:50 <strigazi> let's wrap this meeting 10:57:01 <strigazi> 3' left 10:57:36 <strigazi> Next meeting at the 6th of March 10:57:47 <strigazi> Next week is the PTG 10:57:48 <flwang1> got 10:58:08 <strigazi> #endmeeting