03:00:09 #startmeeting zun 03:00:10 Meeting started Tue Apr 25 03:00:09 2017 UTC and is due to finish in 60 minutes. The chair is hongbin. Information about MeetBot at http://wiki.debian.org/MeetBot. 03:00:11 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 03:00:13 The meeting name has been set to 'zun' 03:00:14 #link https://wiki.openstack.org/wiki/Zun#Agenda_for_2017-04-25_0300_UTC Today's agenda 03:00:18 #topic Roll Call 03:00:26 Madhuri Kumari 03:00:28 Hello, all 03:00:44 kevinz 03:01:08 Namrata 03:01:21 thanks for joining mkrai pksingh kevinz Namrata 03:01:22 shunli 03:01:29 thanks for joining Shunli 03:01:38 ok, let's get started 03:01:44 #topic Announcements 03:01:51 1. We will have a "Boston Summit" release by the end of April 03:02:04 the python-zunclient already released 03:02:09 #link https://review.openstack.org/#/c/459160/ 03:02:20 will release zun and zun-ui in this week 03:02:36 Great!! 03:02:55 just let me know if you have any patch wanted to be included in the release 03:03:10 or you saw any patch that should be included 03:03:19 2. Review Zun's mascot 03:03:26 #link http://lists.openstack.org/pipermail/openstack-dev/attachments/20170421/1db0d2fb/attachment.png 03:03:38 all, what do you think about this mascot? 03:03:39 hongbin: Will we have some release doc or some document that lists what we supports ? 03:03:40 I looked at it and it looks really good 03:03:44 +1 for it 03:04:09 cute, looks like docker's mascot 03:04:09 will mirror image be better? 03:04:16 shubhams: yes, there should be some release notes to explain the list of features of this release 03:04:24 hongbin: ack 03:04:36 hongbin: mascot looks cool +1 03:04:39 shubhams: will write the notes if i have a chance, otherwise, leave it to the pike release 03:04:45 +1 03:05:04 hongbin: got that 03:05:06 pksingh: what is mirrow image? 03:06:08 ok, it looks most people like the mascot, i will approve it 03:06:32 any other announcement from our team members? 03:07:10 seems no 03:07:12 #topic Review Action Items 03:07:20 1. hongbin help diga to get the cinder integration patch passed the gate (IN PROGRESS) 03:07:26 sorry i got disconnected 03:07:27 #link https://review.openstack.org/#/c/429943/ 03:07:47 pksingh_: you said something about mirror image? 03:08:01 pksingh_: what do you mean by mirror image? 03:08:02 face just opposite, means towards left 03:08:12 i see 03:09:32 pksingh_: Any reason ? 03:09:58 mkrai: no specific reason, just i think it would look better 03:10:36 just from myside, nothing strong about it 03:10:36 pksingh_: Ok 03:10:50 I am ok with the current one 03:11:06 :) 03:11:34 ok, let's get back to the action item 03:11:45 #link https://review.openstack.org/#/c/429943/ 03:12:04 diga cannot join the meeting today 03:12:34 i left a message to the review, mentioning that it missed a db migration script so the gate broke 03:12:47 will ping him about that after the meeting 03:12:56 #topic Cinder integration (diga) 03:13:02 #link https://blueprints.launchpad.net/zun/+spec/cinder-zun-integration The BP 03:13:18 ok, i just mentioned this bp 03:13:44 it looks the progress of this bp is slow, i am going to mark it as slow progress 03:14:04 any comment about this one? 03:14:56 seems no 03:15:04 #topic Kuryr integration (hongbin) 03:15:10 #link https://blueprints.launchpad.net/zun/+spec/kuryr-integration The BP 03:15:41 #link https://review.openstack.org/#/c/453387/ 03:15:48 the patch got merged last week 03:15:55 thanks everyone for the reviewing 03:16:22 this is a big patch, just let me know if you find anything that is breaking 03:16:56 it requires to run devstack with kuryr-libnetwork enabled, if not, you will got an error message on creating containers 03:17:08 Thanks hongbin. 03:17:28 Thx hongbin 03:17:34 my pleasure 03:18:00 mkrai: i think you will continue the work on defining the network api? 03:18:24 hongbin: Sure 03:18:55 mkrai: ok, i don't think the network api is urgent, (the Boston summit is the priority) 03:18:56 I will design the APIs and then share with team 03:19:06 mkrai: just take your time about that 03:19:14 hongbin: Ok thanks 03:19:16 mkrai: ok, thanks 03:19:30 a small question, the container can connect internet after launch? Do we need some to do in neutron side? 03:20:18 if the cloud provide has setup the neutron net, you don't need to do anything 03:20:39 which is similar to vm 03:20:40 OK 03:20:56 do we need something like floating ip? 03:21:26 yes, if you want to connect from outside to container, you will need the floating ip 03:21:58 so bind floating ip to container is on the to do list 03:22:05 the way to do that is to find the neutron port of the container, and associate a floating ip to the neutron port 03:22:50 i think yes, we might need an api to automatically associate floating ip 03:23:07 all, thoughts on this? 03:23:07 ok, i see. thx 03:23:31 ok, i will track this idea by a bp 03:23:32 I think we should have this API in zun 03:23:42 mkrai: ack 03:23:58 #action hongbin create a bp for floating ip association to containers 03:24:30 any other questions about this topic? 03:24:39 no 03:25:04 ok, advance topic 03:25:06 #topic Introduce container composition 03:25:11 #link https://review.openstack.org/#/c/437759/ 03:25:14 kevinz: ^^ 03:25:28 Hi all 03:25:42 Thanks everyone for review this spec 03:26:05 And there are two question need to discuss 03:26:21 1. since zun also gives container life-cycle management facility then will the user be able to manage their containers that are running inside a capsule ? 03:26:41 2. 03:26:41 We dont have mechanism to label the hosts yet, do we need to give the control of host selection to user? 03:27:02 The questions are just picked from comments :-) 03:27:46 all, thoughts on these? 03:27:53 +1 for label the host 03:28:38 whether user can controller the host selection not sure. 03:28:45 nova support label the host. user can choose host when launch vm 03:29:07 kevinz: could you elaborate? 03:29:08 controller->controll 03:29:11 For 1, I think we shouldn't allow this because it might bring some inconsistency across zun. For example, we delete a container from a capsule or etc 03:29:55 I think " give the control of host" is give user the authority to choose the host which launch the container 03:30:29 For 1, +1 with mkrai 03:30:48 ok, let's discuss #1 first 03:30:52 kevinz: as per my knowledge, Nova doesn't allow host selection directly. It is done through host-aggregate. Right? 03:31:23 Ok #1 first 03:31:26 i am not sure what it means by "manage their containers that are running inside a capsure" 03:31:32 mkrai: kevinz : for #1, That will mean that zun can support individual container lifecyle management but when the container is created through capsule api then it wont allow to handle container operations 03:31:53 mkrai: kevinz : Am I right here in my understanding ? 03:32:18 shubhams: Yes 03:32:27 there are several apis: create, delete, update, logs, restart, rename, ... 03:32:44 for #1 i think create/delete container in capsule should not be done, but other operations should be possible 03:32:54 how these operations will behave for a in-capsule container and a bare container 03:33:02 mkrai: then its wont be listed in zun list as well (I suppose) 03:33:32 I agree with pksingh_ here, the rest of the actions apply to capsule as well 03:34:01 shubhams: I suppose so, it shouldn't be listed 03:34:34 mkrai: if it is not listable, users won't be able to find the container to operate on it? 03:34:36 after seeing the list, i think exec and logs should be possible on containers in capsule 03:34:42 Here I find nova support specify host https://docs.openstack.org/admin-guide/cli-nova-specify-host.html 03:34:51 i think other operations would change the state of the container 03:35:16 i see, state change operations are not allowed 03:35:18 sorry for late responding , my boss call me just now... 03:35:34 hongbin: I am not sure whether we can allow to perform actions on individual container in capsule 03:35:44 kevinz: ok, i will handle this topic, take your time 03:35:50 hongbin: Right, it might bring inconsistency 03:36:39 pksingh_: We can restart, stop, pause etc a capsule also 03:36:43 Right? 03:37:41 hongbin: Are we going to have another set of APIs for capsule or just reuse the same as containers? 03:37:46 mkrai: i am not sure, if i want to stop or restart, simply delete and create would be enough? 03:38:17 mkrai: i think kevinz proposed a /capsule endpoint, so it is another set of apis 03:38:36 hongbin: Ok 03:39:20 I think we should then allow only read only container APIs to capsule for single containers 03:39:57 My take for supported apis for individual apis : exec and logs .. also restart and stop upto some extent 03:40:13 hongbin: ok, thanks hongbin. I'm back now 03:40:17 mkrai: +1 for read only container 03:40:34 k8s support only attach/exec/logs, https://kubernetes.io/docs/user-guide/kubectl-overview/ 03:40:37 Or to completely segregate this two resources, we can have similar capsule-* APIs also. But this APIs might me redudant 03:41:06 yes, since attach/exec/logs only make senses on single contianer 03:41:42 yes i think the same 03:41:45 yeah .. internally capsule api can perform other operations as required 03:43:22 i think we can do this: list all the operaitons in the etherpad, then iterate each one to see which one should be allowed for a in-capsule container, and which one is not 03:43:54 hongbin: great idea 03:44:12 kevinz: i think you have an etherpad for capsule in before? 03:44:14 +1 03:44:25 +1 03:44:26 yes here 03:44:31 https://etherpad.openstack.org/p/zun-container-composition 03:44:45 ok, let't do it in the etherpad 03:44:50 I will move item to etherpad 03:45:15 ok, then move to #2 03:45:33 We dont have mechanism to label the hosts yet, do we need to give the control of host selection to user? 03:45:55 In the 138-151 is the capsule api 03:46:30 #link https://docs.openstack.org/admin-guide/cli-nova-specify-host.html 03:46:41 That is user can select host to launch container 03:46:42 in nova, only admin can use "forced_host" to select a host 03:47:38 normal usrs can choose availability zone, but not a specific host 03:47:41 Yeah, that right 03:47:55 however, that is for nova 03:48:06 what about us? thoughts? 03:48:51 Does this operation induce some issue? If not, I thinks it's OK to have the function 03:49:06 I don't have a very strong take on it, if we allow this should be admin only 03:49:38 #link https://specs.openstack.org/openstack/nova-specs/specs/pike/approved/resource-provider-traits.html 03:49:50 +1 for label host. But give the control of host selection to user-not sure. 03:50:10 the placement api has a proposal about traits, which is a similar idea as lables 03:50:47 I lean to think host selection of a in-capsule container is some policy controll on the capsule. 03:51:21 Shunli: yes, i agree 03:51:50 i also think host labels would be a good idea 03:52:04 +1 03:52:27 for who has privileage to select host, i am open for ideas 03:52:58 hongbin: kevinz : This host labelling is for associating a capsule to a host , not a container to a host .. right? 03:53:15 in addition, i am thinking how to aglin host labeling with the traits api above 03:53:23 hongbin: i guess like nova. only admin can select host. 03:53:31 Shunli: Right 03:53:40 shubhams: Right 03:53:42 shubhams: not sure right now 03:53:47 normal user can not see the host in the datacenter. 03:54:25 Shunli: yes 03:54:46 hide hosts from users is basically the model 03:55:15 ok, we are running close to the end 03:55:27 let me record the discussion as bp 03:55:44 #action hongbin create a bp to track the idea of labeling hosts 03:55:55 #topic Open Discussion 03:56:16 Namrata: want to give the team a update about your heat work? 03:56:44 i am working on https://review.openstack.org/#/c/437810/ 03:57:10 will update the patch today. working on inlien comments 03:57:18 I will work with Namrata on this as we might need it for summit 03:57:32 Namrata: great work Namrata 03:57:45 Hongbin mkrai:Thanks for the help 03:57:50 mkrai: thx 03:58:19 Namrata: np, do you have ideas how to address the comments? 03:58:41 Namrata: for example, is any comment that needs a clarification for you? 03:59:24 No i am okay with the explaination 03:59:26 Namrata: ok, ping me or others offline if you need helps to address those comments 03:59:32 Namrata: ack 03:59:34 thanks hongbin 03:59:41 Namrata: welcome 03:59:48 ok, all, thanks for joining the meeting 03:59:56 see you next time 04:00:00 #endmeeting