*** sthussey has quit IRC | 00:07 | |
*** mbeierl has quit IRC | 01:05 | |
*** mfuller_ has joined #airshipit | 01:10 | |
*** jamesgu__ has quit IRC | 01:12 | |
*** mcfuller has quit IRC | 01:12 | |
*** toabctl has quit IRC | 01:12 | |
*** jamesgu__ has joined #airshipit | 01:13 | |
*** kaspars__ has quit IRC | 02:09 | |
*** michael-beaver has quit IRC | 02:29 | |
*** michaelbeaver has joined #airshipit | 02:29 | |
*** michaelbeaver has quit IRC | 02:31 | |
openstackgerrit | Hemanth Nakkina proposed openstack/airship-in-a-bottle master: Add seccomp profile on genesis node in multinode gate https://review.openstack.org/644824 | 02:51 |
---|---|---|
*** roman_g has quit IRC | 03:22 | |
openstackgerrit | Rahul Khiyani proposed openstack/airship-maas master: [WIP]Maas: Add pod/container security context - deployment-ingress-errors.yaml https://review.openstack.org/639200 | 04:14 |
*** toabctl has joined #airshipit | 05:21 | |
*** lemko has joined #airshipit | 05:42 | |
jamesgu | thanks, kaspars__. we are needing a change from openstack-helm-infra, will override the global versions for now. | 05:46 |
*** krypto has joined #airshipit | 05:51 | |
*** jamesgu has quit IRC | 05:51 | |
openstackgerrit | Samuel Pilla proposed openstack/airship-maas master: Additional Rules for optional MAAS api only https://review.openstack.org/649506 | 05:56 |
evrardjp | hey folks, how are you I was wondering how you actively deploy airship into production? Do you use a simple shell script? | 06:39 |
*** krypto has quit IRC | 06:49 | |
*** krypto has joined #airshipit | 06:50 | |
evrardjp | I suppose you have a CI/CD based on your yamls, but I was wondering how this "gets bootstrapped" | 07:03 |
evrardjp | Also, how do your operations track of what's going on -- do they monitor airflow's behaviour? | 07:21 |
evrardjp | mattmceuen: ^ | 07:21 |
*** juhak has quit IRC | 07:29 | |
*** juhak has joined #airshipit | 07:30 | |
*** roman_g has joined #airshipit | 07:42 | |
*** juhak has quit IRC | 08:30 | |
*** juhak has joined #airshipit | 08:30 | |
*** lemko has quit IRC | 08:31 | |
openstackgerrit | Smruti Soumitra Khuntia proposed openstack/airship-shipyard master: User context tracing through logging https://review.openstack.org/633873 | 10:39 |
openstackgerrit | Smruti Soumitra Khuntia proposed openstack/airship-armada master: End user logging for audit traceabilty https://review.openstack.org/638124 | 10:40 |
openstackgerrit | Luna Das proposed openstack/airship-promenade master: [WIP] Add init container to load custom apparmor profile for kube-proxy https://review.openstack.org/647749 | 11:15 |
*** juhak has quit IRC | 11:45 | |
*** juhak has joined #airshipit | 11:45 | |
*** juhak has quit IRC | 12:28 | |
*** juhak has joined #airshipit | 12:28 | |
*** mbeierl has joined #airshipit | 13:01 | |
openstackgerrit | Luna Das proposed openstack/airship-promenade master: Add custom apparmor profile for kubernetes-proxy https://review.openstack.org/647749 | 13:01 |
*** mbeierl has quit IRC | 13:06 | |
*** lemko has joined #airshipit | 13:10 | |
*** Nishant_ has joined #airshipit | 13:13 | |
*** mbeierl has joined #airshipit | 13:23 | |
*** kranthikirang has joined #airshipit | 13:31 | |
openstackgerrit | Drew Walters proposed openstack/airship-armada master: CI: Add chart build job for latest Helm toolkit https://review.openstack.org/648443 | 14:24 |
openstackgerrit | Drew Walters proposed openstack/airship-drydock master: CI: Add chart build job for latest Helm toolkit https://review.openstack.org/648543 | 14:25 |
openstackgerrit | Drew Walters proposed openstack/airship-divingbell master: CI: Add chart build job for latest Helm toolkit https://review.openstack.org/648544 | 14:25 |
openstackgerrit | Drew Walters proposed openstack/airship-promenade master: CI: Add chart build job for latest Helm toolkit https://review.openstack.org/648545 | 14:26 |
openstackgerrit | Drew Walters proposed openstack/airship-shipyard master: CI: Add chart build job for latest Helm toolkit https://review.openstack.org/648546 | 14:26 |
openstackgerrit | Drew Walters proposed openstack/airship-maas master: CI: Add chart build job for latest Helm toolkit https://review.openstack.org/648548 | 14:27 |
*** jamesgu has joined #airshipit | 14:27 | |
openstackgerrit | Drew Walters proposed openstack/airship-deckhand master: CI: Add chart build jobs https://review.openstack.org/649441 | 14:27 |
openstackgerrit | Dmitrii Kabanov proposed openstack/airship-divingbell master: Add possibility to add repository and GPG key https://review.openstack.org/644495 | 14:41 |
openstackgerrit | Ian Pittwood proposed openstack/airship-spyglass master: [WIP] Refactors CLI to match style of Airship CLIs https://review.openstack.org/649452 | 14:43 |
*** aaronsheffield has joined #airshipit | 14:52 | |
openstackgerrit | Ian Pittwood proposed openstack/airship-spyglass master: [WIP] Refactors CLI to match style of Airship CLIs https://review.openstack.org/649452 | 14:52 |
*** kaspars__ has joined #airshipit | 15:09 | |
openstackgerrit | Samuel Pilla proposed openstack/airship-maas master: Additional Rules for optional MAAS api only https://review.openstack.org/649506 | 15:16 |
*** sthussey has joined #airshipit | 15:19 | |
openstackgerrit | Kaspars Skels proposed openstack/airship-treasuremap master: Uplift promeande charts to support latest ciphers https://review.openstack.org/649422 | 15:36 |
openstackgerrit | Kaspars Skels proposed openstack/airship-treasuremap master: global: Uplift Airship components https://review.openstack.org/649457 | 15:36 |
openstackgerrit | Lev Morgan proposed openstack/airship-pegleg master: Revised exception for missing passphrase catalog https://review.openstack.org/648470 | 15:45 |
openstackgerrit | Samuel Pilla proposed openstack/airship-maas master: Additional Rules for optional MAAS api only https://review.openstack.org/649506 | 15:45 |
openstackgerrit | Drew Walters proposed openstack/airship-armada master: wait: Fix deployment progress deadline message https://review.openstack.org/649651 | 15:48 |
openstackgerrit | Merged openstack/airship-drydock master: End user logging for audit traceabilty https://review.openstack.org/638115 | 15:50 |
openstackgerrit | Merged openstack/airship-drydock master: Drydock: Add pod/container security context https://review.openstack.org/639197 | 15:50 |
openstackgerrit | PRATEEK REDDY DODDA proposed openstack/airship-armada master: Implement Security Context for Armada https://review.openstack.org/639207 | 15:54 |
openstackgerrit | PRATEEK REDDY DODDA proposed openstack/airship-deckhand master: Implement Security Context for Deckhand https://review.openstack.org/639204 | 15:54 |
openstackgerrit | Ian Pittwood proposed openstack/airship-spyglass master: [WIP] Refactors CLI to match style of Airship CLIs https://review.openstack.org/649452 | 16:11 |
*** michael-beaver has joined #airshipit | 16:17 | |
openstackgerrit | Lev Morgan proposed openstack/airship-spyglass master: Based code for narad plugin https://review.openstack.org/624052 | 16:18 |
mattmceuen | Hey evrardjp -- today, we bootstrap the genesis node via the genesis.sh script. After genesis is up and running (single node), we drive the site deplyoment (and future site updates) using Jenkins | 16:19 |
mattmceuen | Note that Pegleg is enhanced to start talking to Shipyard directly, so that it can securely transfer secrets into the Airship site. We'll be leveraging that very soon. | 16:21 |
mattmceuen | As for where genesis.sh comes from -- that's generated from the YAMLs by pegleg, and is kicked off by CICD when the YAMLs change in git | 16:22 |
mattmceuen | You're also right about monitoring - that's done via the Shipyard API which reports out on airflow status | 16:23 |
openstackgerrit | Merged openstack/airship-armada master: wait: Fix deployment progress deadline message https://review.openstack.org/649651 | 16:40 |
*** juhak has quit IRC | 16:50 | |
*** juhak has joined #airshipit | 16:50 | |
openstackgerrit | Dmitrii Kabanov proposed openstack/airship-divingbell master: Add possibility to add repository and GPG key https://review.openstack.org/644495 | 16:58 |
openstackgerrit | Drew Walters proposed openstack/airship-treasuremap master: docs: Add contributors' testing guide https://review.openstack.org/648216 | 17:05 |
*** jezogwza has quit IRC | 17:08 | |
openstackgerrit | Ian Pittwood proposed openstack/airship-spyglass master: [WIP] Updates to spyglass to pass tox locally on fresh VM https://review.openstack.org/648173 | 17:27 |
openstackgerrit | Ian Pittwood proposed openstack/airship-spyglass master: Refactors CLI to match style of Airship CLIs https://review.openstack.org/649452 | 17:38 |
openstackgerrit | Merged openstack/airship-treasuremap master: Uplift promeande charts to support latest ciphers https://review.openstack.org/649422 | 17:38 |
openstackgerrit | Samuel Pilla proposed openstack/airship-maas master: Additional Rules for optional MAAS api only https://review.openstack.org/649506 | 17:58 |
openstackgerrit | Scott Hussey proposed openstack/airship-armada master: [fix] Fix post pipeline image publish https://review.openstack.org/649686 | 18:07 |
kranthikirang | kaspars__: I have changed the genesis host and now everything is smooth; However after running shipyard client I am seeing following error | 18:30 |
kranthikirang | Error: Validations failed | 18:30 |
kranthikirang | Reason: Validation | 18:30 |
kranthikirang | - Error: None | 18:30 |
kranthikirang | Message: Error loading effective site: not enough arguments for format string | 18:30 |
kranthikirang | Source: Drydock | 18:30 |
kranthikirang | kaspars__: Can you help me to fix this? | 18:30 |
kranthikirang | kaspars | 18:31 |
kranthikirang | kaspars__: I guess I have to change it here airship-treasuremap/site/mtn21c/site-definition.yaml; missed the site name | 18:32 |
openstackgerrit | Ian Pittwood proposed openstack/airship-spyglass master: [WIP] Updates to spyglass to pass tox locally on fresh VM https://review.openstack.org/648173 | 18:33 |
kaspars__ | it looks like an error from Drydock | 18:33 |
kaspars__ | have a look at drydock log (kubectl logs -n ucp <drydock-pod>) | 18:33 |
kaspars__ | there might be some more info on the issue | 18:33 |
kaspars__ | Drydock is mostly concerned about files under site/<name>/network/physical | 18:34 |
kaspars__ | you may review and see if all details there are correct | 18:34 |
kaspars__ | it's likely some small syntax issue somewhere in the networking files | 18:34 |
kranthikirang | kaspars__: OK | 18:37 |
kranthikirang | kaspars__: One more question on the below content in site-definition.yaml | 18:37 |
kranthikirang | data: | 18:37 |
kranthikirang | # The type layer this site will delpoy with. Type layer is found in the | 18:37 |
kranthikirang | # type folder. | 18:37 |
kranthikirang | site_type: foundry | 18:37 |
kranthikirang | there is not type folder | 18:38 |
openstackgerrit | Ian Pittwood proposed openstack/airship-spyglass master: [WIP] PEP-8 code styling https://review.openstack.org/649692 | 18:38 |
kaspars__ | hm, so type folder is in the root of repo | 18:39 |
kaspars__ | https://github.com/openstack/airship-treasuremap/tree/master/type | 18:39 |
kaspars__ | there is folder 'foundry' which is the type | 18:39 |
kranthikirang | karpars__: oh ok | 18:40 |
kaspars__ | (right now type is used very little more to showcase the layering - ultimately you can put more stuff in there) | 18:40 |
kranthikirang | kaspars__: One more questions; coming to ssh keys to use for MAAS; | 18:41 |
kranthikirang | substitutions: | 18:41 |
kranthikirang | # NEWSITE-CHANGEME: Substitutions from deckhand SSH public keys into the | 18:41 |
kranthikirang | # list of authorized keys which MaaS will register for the build-in "ubuntu" | 18:41 |
kranthikirang | # account during the PXE process. Create a substitution rule for each SSH | 18:41 |
kranthikirang | # key that should have access to the "ubuntu" account (useful for trouble- | 18:41 |
kranthikirang | # shooting problems before UAM or UAM-lite is operational). SSH keys are | 18:41 |
kranthikirang | # stored as secrets in site/airship-seaworthy/secrets. | 18:41 |
kranthikirang | - dest: | 18:41 |
kranthikirang | # Add/replace the first item in the list | 18:41 |
kranthikirang | path: .authorized_keys[0] | 18:41 |
kranthikirang | src: | 18:41 |
kranthikirang | schema: deckhand/PublicKey/v1 | 18:41 |
kranthikirang | # This should match the "name" metadata of the SSH key which will be | 18:41 |
kranthikirang | # substituted, located in site/airship-seaworthy/secrets folder. | 18:41 |
kranthikirang | name: airship_ssh_public_key | 18:41 |
kranthikirang | path: . | 18:41 |
kranthikirang | there is no help where to put the keys actually and what name to put? | 18:42 |
kaspars__ | so there is a sample key 'airship_ssh_public_key' | 18:42 |
kaspars__ | you may call it really any name you like - as long as they both match | 18:43 |
kranthikirang | ok; but where do we update the key? | 18:43 |
kranthikirang | in secrets folder? | 18:43 |
kaspars__ | https://github.com/openstack/airship-treasuremap/tree/master/global/secrets/publickey | 18:43 |
kranthikirang | secrets/passphrases? | 18:43 |
kaspars__ | it is in the secrets - but actually placed under global | 18:43 |
kranthikirang | ok; perfect; so I can update for site | 18:43 |
kranthikirang | cool; thank you | 18:44 |
kaspars__ | it might be better to move it to site for sake of example | 18:44 |
kaspars__ | they are placed in global because multiple sites may use keys for different people (say you want to add same person to several sites) | 18:44 |
kranthikirang | yeah, make sense | 18:44 |
dwalt | sthussey: are images not being tagged upstream because the post pipeline fails? https://review.openstack.org/649686 | 18:51 |
dwalt | I assumed it was because those fields did not exist | 18:51 |
dwalt | meaning, there was nothing to tag images with | 18:51 |
sthussey | they aren't being published | 18:51 |
sthussey | period | 18:51 |
*** kranthikirang has quit IRC | 18:52 | |
*** JosW has joined #airshipit | 19:32 | |
*** JosW has left #airshipit | 19:33 | |
*** kranthikirang has joined #airshipit | 19:49 | |
openstackgerrit | Scott Hussey proposed openstack/airship-deckhand master: (zuul) Fix image publish post pipeline https://review.openstack.org/649714 | 19:51 |
openstackgerrit | Scott Hussey proposed openstack/airship-drydock master: (zuul) Fix image publish post pipeline https://review.openstack.org/649715 | 19:52 |
openstackgerrit | Merged openstack/airship-armada master: [fix] Fix post pipeline image publish https://review.openstack.org/649686 | 19:54 |
openstackgerrit | Scott Hussey proposed openstack/airship-pegleg master: (zuul) Fix image publish job https://review.openstack.org/649716 | 19:54 |
openstackgerrit | Scott Hussey proposed openstack/airship-promenade master: (zuul) Fix image publish job https://review.openstack.org/649717 | 19:57 |
*** michael-beaver has quit IRC | 20:02 | |
*** michael-beaver has joined #airshipit | 20:03 | |
openstackgerrit | Scott Hussey proposed openstack/airship-maas master: (zuul) Fix image publish job https://review.openstack.org/649719 | 20:05 |
*** krypto has quit IRC | 20:08 | |
openstackgerrit | Ian Pittwood proposed openstack/airship-spyglass master: [WIP] Updates to spyglass to pass tox locally on fresh VM https://review.openstack.org/648173 | 20:10 |
*** mrhillsman is now known as mrhillsman_bbiab | 20:11 | |
openstackgerrit | Dimitrios Markou proposed openstack/airship-treasuremap master: [WIP] Create pipeline for airsloop site https://review.openstack.org/649432 | 20:19 |
openstackgerrit | Merged openstack/airship-maas master: (zuul) Fix image publish job https://review.openstack.org/649719 | 20:20 |
openstackgerrit | Dimitrios Markou proposed openstack/airship-treasuremap master: [WIP] Create pipeline for airsloop site https://review.openstack.org/649432 | 20:21 |
openstackgerrit | Merged openstack/airship-promenade master: (zuul) Fix image publish job https://review.openstack.org/649717 | 20:24 |
openstackgerrit | Scott Hussey proposed openstack/airship-shipyard master: (zuul) Fix image publish job https://review.openstack.org/649720 | 20:25 |
openstackgerrit | Merged openstack/airship-pegleg master: (zuul) Fix image publish job https://review.openstack.org/649716 | 20:26 |
openstackgerrit | Ian Pittwood proposed openstack/airship-spyglass master: [WIP] PEP-8 code styling and linting https://review.openstack.org/649692 | 20:28 |
openstackgerrit | Lev Morgan proposed openstack/airship-spyglass master: [WIP] Updates to spyglass to pass tox locally on fresh VM https://review.openstack.org/648173 | 20:30 |
openstackgerrit | Merged openstack/airship-drydock master: (zuul) Fix image publish post pipeline https://review.openstack.org/649715 | 20:30 |
sthussey | Thank you for reviews on image publishing fixes, spotted check promenade's post pipeline and it is green | 20:35 |
*** sgrasley has quit IRC | 20:35 | |
dwalt | thanks for getting that fix out there sthussey | 20:35 |
openstackgerrit | Dmitrii Kabanov proposed openstack/airship-divingbell master: Add possibility to add repository and GPG key https://review.openstack.org/644495 | 20:38 |
*** michaelbeaver has joined #airshipit | 20:39 | |
*** michael-beaver has quit IRC | 20:42 | |
openstackgerrit | Merged openstack/airship-deckhand master: (zuul) Fix image publish post pipeline https://review.openstack.org/649714 | 21:10 |
openstackgerrit | Merged openstack/airship-shipyard master: (zuul) Fix image publish job https://review.openstack.org/649720 | 21:11 |
openstackgerrit | Lev Morgan proposed openstack/airship-pegleg master: Revised exception for missing passphrase catalog https://review.openstack.org/648470 | 21:28 |
*** sgrasley has joined #airshipit | 21:36 | |
*** sgrasley_ has joined #airshipit | 21:43 | |
*** sgrasley has quit IRC | 21:47 | |
openstackgerrit | Kaspars Skels proposed openstack/airship-treasuremap master: Add sloop type and airsloop site https://review.openstack.org/649195 | 21:59 |
*** michaelbeaver has quit IRC | 22:10 | |
*** mloza has joined #airshipit | 23:23 | |
openstackgerrit | Merged openstack/airship-treasuremap master: airskiff: Use Minikube for Kubernetes deployment https://review.openstack.org/622610 | 23:28 |
openstackgerrit | Kaspars Skels proposed openstack/airship-treasuremap master: Add sloop type and airsloop site https://review.openstack.org/649195 | 23:29 |
openstackgerrit | Kaspars Skels proposed openstack/airship-treasuremap master: Add sloop type and airsloop site https://review.openstack.org/649195 | 23:52 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!