| *** gangil has quit IRC | 00:01 | |
| *** dane_leblanc has joined #openstack-containers | 00:03 | |
| suro-patz | hongbin: around? | 00:04 |
|---|---|---|
| *** jruano has quit IRC | 00:08 | |
| *** dimtruck is now known as zz_dimtruck | 00:08 | |
| *** achanda has quit IRC | 00:16 | |
| openstackgerrit | Merged openstack/python-magnumclient: Updated from global requirements https://review.openstack.org/203138 | 00:25 |
| *** dane_leblanc has quit IRC | 00:28 | |
| *** sdake has quit IRC | 00:34 | |
| eliqiao | hi tcammann1 | 00:34 |
| *** sdake has joined #openstack-containers | 00:37 | |
| *** suro-patz has quit IRC | 00:40 | |
| *** Drago has quit IRC | 00:46 | |
| *** jjlehr has quit IRC | 00:54 | |
| *** jruano has joined #openstack-containers | 01:03 | |
| *** sthillma has quit IRC | 01:03 | |
| openstackgerrit | Eli Qiao proposed openstack/magnum: API: Handler exception when doing container-list https://review.openstack.org/199007 | 01:04 |
| openstackgerrit | Hua Wang proposed openstack/magnum: Code refactor for tests/unit/db/test_baymodel.py https://review.openstack.org/204022 | 01:08 |
| *** saksham has quit IRC | 01:09 | |
| *** saksham has joined #openstack-containers | 01:09 | |
| *** jruano has quit IRC | 01:09 | |
| *** saksham has quit IRC | 01:11 | |
| *** erkules_ has joined #openstack-containers | 01:11 | |
| *** erkules has quit IRC | 01:13 | |
| *** Tango has quit IRC | 01:14 | |
| *** jjlehr has joined #openstack-containers | 01:16 | |
| *** zhenguo has joined #openstack-containers | 01:22 | |
| *** y_sawai has joined #openstack-containers | 01:24 | |
| openstackgerrit | Kai Qiang Wu(Kennan) proposed openstack/magnum: Fix the wrong platform usage https://review.openstack.org/200401 | 01:25 |
| *** jruano has joined #openstack-containers | 01:28 | |
| madhuri | alee_afk, Hi | 01:30 |
| *** alee_afk is now known as alee | 01:31 | |
| alee | madhuri, hi | 01:31 |
| alee | good morning | 01:31 |
| madhuri | Good morning | 01:31 |
| alee | (well evening for me :)) | 01:31 |
| madhuri | Thank you for showing up | 01:31 |
| madhuri | Ok then good evening | 01:31 |
| alee | you're in Japan? | 01:32 |
| madhuri | Yes | 01:32 |
| madhuri | And you? | 01:32 |
| alee | Raleigh North Carolina | 01:32 |
| madhuri | Ok | 01:32 |
| alee | so maybe I'll get to see you at the summit | 01:32 |
| madhuri | Yes sure. I will be happy to see you | 01:33 |
| madhuri | Will this be your first time Tokyo? | 01:33 |
| alee | anyways, I think we should try to get you up and running with Barbican and the snake oil plugin first | 01:33 |
| madhuri | Yes sure | 01:33 |
| alee | yes -- I've been in the airport before , but thats about it | 01:33 |
| alee | looking forward to leaving Narita | 01:34 |
| madhuri | Ok so before starting I would like to introduce yuanying | 01:34 |
| yuanying | hi | 01:34 |
| alee | hi yuanying - also in Tokyo? | 01:34 |
| madhuri | I and yuanying are working on TLS support in Magnum | 01:34 |
| yuanying | I'm working with madhuri about tls support | 01:34 |
| yuanying | yes | 01:34 |
| alee | great - you guys have a lot of work ahead of you I think :) | 01:34 |
| madhuri | Is sdake here? | 01:35 |
| madhuri | Yes we also think so | 01:35 |
| alee | madhuri, I made a few comments on your spec -- it will be interesting to see how it shakes out | 01:35 |
| madhuri | Lots of work ahead | 01:35 |
| alee | lots of open questions | 01:35 |
| madhuri | Yes I saw your comments | 01:35 |
| sdake | shoot madhuri | 01:35 |
| alee | hi sdake | 01:36 |
| madhuri | But didn't get much time to look at the comments | 01:36 |
| madhuri | Hi sdake | 01:36 |
| madhuri | Just wanted you to join this dicsussion if you have time | 01:36 |
| alee | redrobot, you here? | 01:36 |
| sdake | i am on pto and supposed to not be working | 01:36 |
| sdake | but for you, i'm here :) | 01:36 |
| *** harshs has joined #openstack-containers | 01:36 | |
| madhuri | Thanks always sdake :) | 01:37 |
| madhuri | Ok so to start we tried to install Barbican | 01:37 |
| madhuri | But we don't see any default simple CA in the CAs list | 01:37 |
| *** hongbin has joined #openstack-containers | 01:38 | |
| alee | madhuri, yeah I can explain that .. The CA list is generated during the processing of a cert enrollment | 01:38 |
| sdake | hey yuanying long time no chat | 01:39 |
| alee | at least initially you have to send an enrollment in to have the ca list generated | 01:39 |
| sdake | how you been? | 01:39 |
| yuanying | yes | 01:39 |
| yuanying | now I'm checking barbican cas list | 01:39 |
| alee | so what I would do is send in an enrollment and when you check again the ca list will be available. | 01:39 |
| madhuri | alee, sorry may be my question may be vague but how do we do cert enrollment? | 01:40 |
| alee | madhuri, well - lets see - I wrote a quick start .. | 01:40 |
| alee | http://docs.openstack.org/developer/barbican/api/quickstart/certificates.html#simple-cmc-order | 01:40 |
| madhuri | After reading doc, it seems the simple ca is enrolled by default | 01:40 |
| *** jruano has quit IRC | 01:41 | |
| alee | yes -- I think thats what shows up in the default config | 01:41 |
| alee | madhuri, but the simple ca is really pretty useless -- lets get the snake oil one up instead | 01:42 |
| madhuri | About the link you shared that explains how to generate a order from an enrolled CA | 01:42 |
| yuanying | we configured snakeoil plugin | 01:42 |
| alee | madhuri, right -- thats what I mean by an enrollment | 01:42 |
| madhuri | Agree alee but we tried to test with the default one first | 01:42 |
| yuanying | but there is no ca in list | 01:42 |
| madhuri | But that needs a ca_id | 01:42 |
| alee | madhuri, only what I would do is send that order request in without the profile or ca_id | 01:42 |
| alee | it will go to the "first" ca in the list | 01:43 |
| alee | and the ca list will be generated | 01:43 |
| madhuri | alee, but the CA list is empty here | 01:44 |
| madhuri | So how the cert is signed? | 01:44 |
| alee | madhuri, the ca list is generated the first time an enrollment is processed. In this case, it will go to the first ca plugin -- which in your case I guess is the SimpleCA Plugin | 01:44 |
| alee | just send in the enrollment | 01:45 |
| madhuri | Ok I understand | 01:45 |
| alee | then check the ca list | 01:45 |
| madhuri | It CA is enrolled on the fly | 01:45 |
| alee | madhuri, right -- you need to send in an enrollment to kickstart the process as it were | 01:45 |
| alee | (I need to update the quickstart to document that) | 01:46 |
| madhuri | And the snakeoil plugin works the same way? | 01:46 |
| alee | yeah | 01:46 |
| madhuri | Yes sure please do that | 01:46 |
| madhuri | Ok we will try it out | 01:47 |
| alee | madhuri, the ca list is a little hinky right now -- need to think about how to make it more robust | 01:47 |
| *** dave-mccowan has quit IRC | 01:48 | |
| madhuri | Agree | 01:48 |
| alee | anyways, if you send in a order request, does the ca list get generated? | 01:48 |
| madhuri | Let me try | 01:49 |
| madhuri | Just give me a sec alee | 01:49 |
| alee | sure | 01:49 |
| alee | incidentally are you guys using the latest barbican code? | 01:49 |
| madhuri | alee, it complains for "Missing required metadata field for ca_id" | 01:51 |
| *** y_sawai has quit IRC | 01:51 | |
| alee | did you remove the profile too? | 01:51 |
| madhuri | alee, sorry | 01:52 |
| madhuri | alee, now I see the CA in the list | 01:52 |
| alee | ok good | 01:52 |
| alee | so your cert request would have gone to the simple ca plugin | 01:53 |
| madhuri | Yes | 01:53 |
| madhuri | cert_type was simple-cmc | 01:53 |
| alee | which as I recall does nothing other than return "waiting for ca" | 01:53 |
| alee | madhuri, now lets get the snakeoil plugin configured | 01:54 |
| alee | are you using the latest barbican code? | 01:54 |
| madhuri | The master branch | 01:54 |
| madhuri | But may be outdated | 01:54 |
| alee | ok good | 01:54 |
| *** bradjones has quit IRC | 01:54 | |
| madhuri | It will update it | 01:54 |
| alee | madhuri, I played around with the snakeoil plugin today to see if it was working | 01:54 |
| *** y_sawai has joined #openstack-containers | 01:55 | |
| alee | I found it relatively easy to set up -- but there is a bug | 01:55 |
| alee | I will submit a patch for it tomorrow -- but for now , I can tell you how to patch around it | 01:56 |
| alee | (its a one line patch) | 01:56 |
| madhuri | Ok I have the latest code | 01:56 |
| *** bradjones has joined #openstack-containers | 01:56 | |
| *** bradjones has quit IRC | 01:56 | |
| *** bradjones has joined #openstack-containers | 01:56 | |
| alee | so -- to set up the snakeoil plugin, I created a subdirerctory under /etc/barbican called snakeoil | 01:56 |
| alee | then created the root ca and key under there | 01:57 |
| madhuri | Ok | 01:57 |
| alee | pretty standard openssl commands to do that .. | 01:57 |
| alee | let me get my notes ... | 01:57 |
| alee | openssl genrsa -out ca.key 4096 | 01:58 |
| alee | openssl req -new -x509 -days 1000 -key ca.key -out ca.crt | 01:58 |
| *** jjlehr has quit IRC | 01:58 | |
| alee | then I made sure to set the ownership/perms of those files so that whatever use3r was running barbican could access those | 01:59 |
| alee | I imagine you did something similar | 01:59 |
| madhuri | Yes | 01:59 |
| *** y_sawai has quit IRC | 01:59 | |
| alee | madhuri, then -- in barbican.conf .. | 01:59 |
| *** jruano has joined #openstack-containers | 02:00 | |
| alee | I uncommented the snakeoil plugin and put in the right paths | 02:00 |
| *** jjlehr has joined #openstack-containers | 02:00 | |
| * sdake groans at the setup complexity | 02:00 | |
| alee | -#[snakeoil_ca_plugin] | 02:00 |
| alee | -#ca_cert_path = /etc/barbican/snakeoil-ca.crt | 02:00 |
| alee | -#ca_cert_key_path = /etc/barbican/snakeoil-ca.key | 02:00 |
| alee | +[snakeoil_ca_plugin] | 02:00 |
| alee | +ca_cert_path = /etc/barbican/snakeoil/ca.crt | 02:00 |
| alee | +ca_cert_key_path = /etc/barbican/snakeoil/ca.key | 02:00 |
| alee | sdake, it'll get better | 02:01 |
| madhuri | Yes, done | 02:01 |
| sdake | is this one key only | 02:01 |
| sdake | like a global key | 02:01 |
| sdake | or can there be a separaet ca per service | 02:01 |
| sdake | we need separate key stuff per bay | 02:01 |
| alee | sdake, this is just to set up a basic dev ca plugin | 02:01 |
| sdake | so lets say i'm creating a new bay | 02:02 |
| alee | sdake, we can talk more complexity that is available in dogtag later | 02:02 |
| sdake | i have to go create these files and modify barbican.conf? | 02:02 |
| sdake | bay creation is an api command and eachbay needs unique keys | 02:02 |
| alee | sdake, lets focus on getting a test system up first | 02:02 |
| sdake | i jsut want to make sure it will work long term | 02:03 |
| alee | and we can talk how to do more shortly | 02:03 |
| sdake | will it do as I described? | 02:03 |
| sdake | one global key wont secure our system | 02:03 |
| *** julim has joined #openstack-containers | 02:03 | |
| sdake | we need multiple keys | 02:03 |
| alee | sdake, this is a dev ca plugin -- I would not use this long term | 02:03 |
| alee | sdake, I would use a real ca like dogtag instead | 02:03 |
| sdake | is there something that gives multiple keys? | 02:03 |
| madhuri | Dogtag is used in actual production environment | 02:03 |
| sdake | and that gives multiple unique keys? | 02:04 |
| alee | sdake, one thing that dogtag will be providing is the concept of "subcas" | 02:04 |
| alee | and yes - those are multiple uniqe keys | 02:04 |
| sdake | will be as in does not yet? | 02:04 |
| alee | sdake, will be as in -- its in the latest release which was just built Friday | 02:05 |
| sdake | cool | 02:05 |
| sdake | thanks :) | 02:05 |
| sdake | just want to make sure we dont replace one problem with another :) | 02:05 |
| alee | yup -- I think we have a solution for you -- its a question of timing | 02:05 |
| sdake | l3 or bust | 02:06 |
| alee | so -- also in barbican.conf -- | 02:06 |
| sdake | back to lurking :) | 02:06 |
| alee | [certificate] | 02:06 |
| alee | namespace = barbican.certificate.plugin | 02:06 |
| alee | -enabled_certificate_plugins = simple_certificate | 02:06 |
| alee | +enabled_certificate_plugins = snakeoil_ca | 02:06 |
| madhuri | Done alee | 02:07 |
| alee | ie. set enabled_certificate_plugins to snakeoil_ca | 02:07 |
| alee | ok - good -- you'll need one more change -- the bug I mentioned before .. | 02:07 |
| *** harshs has quit IRC | 02:07 | |
| alee | madhuri, http://www.fpaste.org/246711/ | 02:08 |
| alee | basically a one line change in the snakeoil_ca.py | 02:09 |
| alee | then restart the barbican server and send through an initial enrollment (without ca_id) | 02:10 |
| madhuri | re | 02:10 |
| madhuri | request_type will be snake-oil | 02:11 |
| madhuri | Right? | 02:11 |
| alee | no request-type will be simple-cmc | 02:11 |
| alee | same as before | 02:11 |
| madhuri | Ok | 02:11 |
| yuanying | I got one ca in the list.. | 02:12 |
| madhuri | me too | 02:12 |
| alee | get that ca .. | 02:13 |
| alee | and see what it says | 02:13 |
| *** jruano has quit IRC | 02:13 | |
| *** Tango has joined #openstack-containers | 02:13 | |
| madhuri | alee, Only one ca in the list | 02:13 |
| alee | madhuri, right can you get that CA? | 02:14 |
| *** yuanying_ has joined #openstack-containers | 02:14 | |
| madhuri | I can get the order and only one CA | 02:15 |
| madhuri | alee, Yes | 02:15 |
| alee | curl -H 'content-type:application/json' -H 'X-Project-Id: 12345' http://localhost:9311/v1/cas/3a2a533d-ed4d-4c68-a418-2ee79f4c958 | 02:15 |
| alee | 1 for insatnce | 02:15 |
| alee | should show you what kind of plugin you have .. | 02:16 |
| alee | snakeoil or simple or whatever | 02:16 |
| madhuri | Yes this shows simple ca | 02:16 |
| yuanying_ | me too | 02:16 |
| alee | interesting -- and you configured the enabled_cert_plugins to be snakeoil? | 02:16 |
| yuanying_ | yes | 02:17 |
| madhuri | alee, yes | 02:17 |
| yuanying_ | and restart the barbican | 02:17 |
| *** jruano has joined #openstack-containers | 02:17 | |
| *** jruano has quit IRC | 02:17 | |
| alee | I guess what I would do is do an enrollment (no ca_id or profile) and look at the server logs | 02:17 |
| *** yuanying has quit IRC | 02:17 | |
| alee | and see if there are errors in processing the enrollment | 02:18 |
| alee | do you have only the snakeoil enabled -- or both the snakeoil and the simple? | 02:18 |
| *** dave-mccowan has joined #openstack-containers | 02:18 | |
| madhuri | alee, both enabled | 02:19 |
| alee | madhuri, ok -- take out the simple one | 02:19 |
| madhuri | Ok | 02:19 |
| madhuri | alee, Done | 02:20 |
| madhuri | Took out simple one | 02:20 |
| madhuri | restarted barbican service | 02:20 |
| alee | so take out simple, restart barbican , send in entrollment | 02:20 |
| madhuri | Enroll | 02:21 |
| alee | see ca list | 02:21 |
| madhuri | And after that only one ca in the list | 02:21 |
| madhuri | and that too simple certificate | 02:21 |
| madhuri | yuanying_, Do you also get the same behaviour? | 02:21 |
| alee | madhuri, when you do the enrollment, are there errors in the server lgs? | 02:21 |
| yuanying_ | yes madhuri | 02:22 |
| madhuri | alee, no error | 02:22 |
| alee | madhuri, do you see the enriollment processed? | 02:22 |
| alee | and if so, by what plugin? | 02:22 |
| alee | madhuri, can you paste your /etc/barbican.conf? | 02:23 |
| madhuri | Sure alee | 02:23 |
| madhuri | Give me few minutes | 02:24 |
| *** dims_ has joined #openstack-containers | 02:25 | |
| *** yuanying_ has quit IRC | 02:25 | |
| *** yuanying has joined #openstack-containers | 02:26 | |
| madhuri | alee, http://paste.openstack.org/show/398072/ | 02:28 |
| madhuri | This might be bad to read | 02:28 |
| madhuri | Devstack setup | 02:28 |
| madhuri | Sorry for it | 02:29 |
| alee | madhuri, no - I can read it just fine | 02:29 |
| alee | and it looks right | 02:30 |
| alee | this is /etc/barbican/barbican.conf right? | 02:30 |
| *** unicell has quit IRC | 02:31 | |
| madhuri | Yes alee | 02:31 |
| alee | madhuri, so -- if you send in an enrollment -- you presumably get an order back | 02:32 |
| alee | if you look at that order, what do you see? | 02:32 |
| alee | what is the state of that order? | 02:32 |
| *** achanda has joined #openstack-containers | 02:33 | |
| madhuri | alee, Status is PENDING for all orders | 02:35 |
| alee | madhuri, how are you restarting barbican? | 02:36 |
| madhuri | I have setup barbican with devstack | 02:36 |
| madhuri | I stop barbican service hitting Ctrl+C | 02:37 |
| madhuri | And then restart it | 02:37 |
| alee | madhuri, ok - just strying to make sure that batrbicn.conf is being read | 02:37 |
| alee | madhuri, lets do this -- can you remove the barbican db ? -- this will remove the ca list | 02:38 |
| madhuri | Ok | 02:38 |
| madhuri | Complete db or just empty the ca table? | 02:38 |
| alee | madhuri, then if you restart and run through an enrollment - the ca list should be regen'ed with the snakeoil ca | 02:38 |
| alee | you can just empty ca table | 02:39 |
| madhuri | alee, new ca is generated but still it is simple ca | 02:43 |
| alee | madhuri, that doesn't make sense - unless the barbican.conf you are using is not being updated | 02:44 |
| alee | madhuri, do you have a barbican.conf in your home directory maybe? | 02:44 |
| madhuri | alee, let me check. This was suppose to work I guess | 02:46 |
| alee | madhuri, you can check to see if this conf file is being read by removing all plugins from the enabled cert plugin list | 02:46 |
| alee | madhuri, an enrollment should fail then | 02:46 |
| alee | because of no plugins | 02:46 |
| madhuri | alee, Ok trying | 02:46 |
| madhuri | alee, Surprisingly it worked | 02:48 |
| alee | with no plugins enabled? | 02:48 |
| madhuri | I think this conf is not used | 02:49 |
| alee | that means that the barbican.conf that you are modifying is the not the right one | 02:49 |
| madhuri | Yes with no plugins enabled | 02:49 |
| *** pksingh has joined #openstack-containers | 02:49 | |
| alee | madhuri, so these config changes should work if the right config file is found .. | 02:49 |
| madhuri | I will have to check the devstack plugin | 02:50 |
| alee | redrobot, you around? | 02:50 |
| pksingh | sdake: Hi, | 02:50 |
| sdake | shoot | 02:50 |
| madhuri | Hmm we need to figure out which config is used alee | 02:51 |
| madhuri | alee, Which setup are you using? | 02:51 |
| alee | madhuri, I have barbican running locally -- easier for me to make and test out changes | 02:51 |
| pksingh | sdake: how HA of conductor services is insured in production env? | 02:51 |
| sdake | hongbin is your man pksingh | 02:52 |
| alee | madhuri, we have a script called barbican.sh which installs and runs locally | 02:52 |
| pksingh | sdake: thanks | 02:52 |
| alee | madhuri, probably not what you want to do when trying to co-ordinate with other services | 02:52 |
| madhuri | That's always the advantage with all-in-one setup | 02:52 |
| hongbin | pksingh: conductor HA is not ready yet | 02:52 |
| alee | madhuri, lots of other folks in the barbican channel do run it iin an devstack setup though | 02:53 |
| *** julim has quit IRC | 02:53 | |
| alee | madhuri, so you should be able to find out how to change the config there -- I'll ask redrobot about it tommorow | 02:54 |
| pksingh | hongbin: by having redundant services on different controllers in different AZ will not insure HA of conductor, just a thought? | 02:54 |
| madhuri | Sure alee. I think it should work after that | 02:54 |
| *** unicell has joined #openstack-containers | 02:54 | |
| hongbin | pksingh: conductor HA is different thing | 02:54 |
| alee | madhuri, yes -- I'll get in the fix to the snake oil plugin tommorow too | 02:55 |
| alee | so you wont have to patch it | 02:55 |
| hongbin | pksingh: It is simply the ability to start multiple conductor in different servers | 02:55 |
| hongbin | pksingh: Take a look at this https://blueprints.launchpad.net/magnum/+spec/horizontal-scale | 02:55 |
| alee | madhuri, once you have it working - you will have a basic plugin that always provides a cert | 02:56 |
| pksingh | hongbin: ok Thanks, i am looking | 02:56 |
| madhuri | alee, That will be good for now to test our work atleast | 02:56 |
| pksingh | hongbin: might come to you again :) | 02:56 |
| hongbin | pksingh: sure | 02:56 |
| alee | and you can use that to write whatever code you need for testing | 02:56 |
| madhuri | Yes | 02:56 |
| alee | madhuri, want to talk about dogtag now? | 02:57 |
| madhuri | But for production we would need to run with Dogtag also | 02:57 |
| alee | :) | 02:57 |
| sdake | what is dogtog | 02:57 |
| sdake | dogtag | 02:57 |
| sdake | give me the 30 second ptich version | 02:57 |
| alee | dogtag is the upstream project for the red hat certificate system | 02:57 |
| * sdake groans | 02:58 | |
| pksingh | hongbin: so after this BP is implemented many instances of conductor can be run on many different servers, | 02:58 |
| hongbin | pksingh: Yes, it is | 02:58 |
| *** unicell1 has joined #openstack-containers | 02:58 | |
| sdake | we have to pull all that in to use barbican ca? | 02:58 |
| madhuri | alee, For now can you please guide me the install Dogtag on ubuntu? | 02:58 |
| madhuri | So that I will have a setup to work together? | 02:58 |
| pksingh | hongbin: so it means untill any one of them is up magnum env would be fine, since they are picking the data from MQ? | 02:59 |
| madhuri | sdake, Dogtag is Redhat's CA | 02:59 |
| alee | sdake, so just to be clear --- barbican is not a ca. | 02:59 |
| sdake | anyone hae a picture of its dependency tree? | 02:59 |
| *** unicell has quit IRC | 02:59 | |
| alee | bvarbican is what one would call an RA | 02:59 |
| hongbin | pksingh: exactly | 02:59 |
| alee | which is a registration authroity that allows you to interct with ca's | 02:59 |
| *** y_sawai has joined #openstack-containers | 02:59 | |
| sdake | does dogtag have a bajillion dependencies? | 03:00 |
| alee | you can interact with a basic ca like the snakeoil ca , or a real production ca like dogtag, or some external ca - like symantec or whatver | 03:00 |
| madhuri | sdake, I agree about dependencies. That's a big concern for us | 03:00 |
| alee | sdake, madhuri -- well its a java app - so there will be some java dependencies | 03:01 |
| madhuri | alee, can user plug their own CA now in Barbican? | 03:01 |
| sdake | groan java | 03:01 |
| sdake | ok i'm supposed to be on pto | 03:01 |
| sdake | and this is just giving me headache so i'm going to bounce madhuri :) | 03:02 |
| alee | madhuri, there are ca plugins | 03:02 |
| pksingh | hongbin: and any conductor instance can serve the request , it does not depend on the API node which is receiving the request, am i right? | 03:02 |
| alee | if a ca plugin has been written then it can be used | 03:02 |
| sdake | i am pretty sure cloud operators are going to puke at pulling in a java runtime to run containers | 03:02 |
| alee | sdake, why ? you just need one instance ? | 03:03 |
| sdake | java is painful to package, and rarely packaged well for one | 03:03 |
| sdake | java is so.... 1980s | 03:03 |
| sdake | i dont think openstack should have been written in python but it was | 03:04 |
| sdake | it would be nice to stick to one language for deps | 03:04 |
| hongbin | pksingh: No. Requests will go to m-api first, then pass to m-conductor. | 03:04 |
| alee | sdake, we could get into a philoophical discussion about languages - but dogtag has the adantage that it has been battle tested for years. | 03:04 |
| sdake | ya i wont get into a philosophical discussion about languagess | 03:05 |
| alee | and is well packaged in its own way | 03:05 |
| sdake | just that more runtimes = more difficulty to debug | 03:05 |
| sdake | is it packaed as rpms/debs? | 03:06 |
| alee | yup | 03:06 |
| alee | rpms on fedora/ debs on ubuntu/deian | 03:06 |
| sdake | ok well that isn't as terrible as it could be (unpackaged) | 03:06 |
| alee | sdake, we've been delivering it for years on fedora/rhel | 03:06 |
| alee | sdake, its the ca that is behind freeipa | 03:07 |
| pksingh | hongbin: i am sorry but i dont get it, i want to ask, suppose controller1 node's API recieves the request , is it possible that controller2 node's conductor can handle that request instead of controller1 node's conductor, because both are recieving the data from MQ? | 03:07 |
| madhuri | So sdake do we like to keep this kind of dependency? | 03:08 |
| alee | sdake, admittedly there will be some cloud ops that puke at the mention of java -- but if they want something that has been doing the hard pki, on hardware tokens, in production for years -dogtag is not a bad option. | 03:09 |
| alee | java folks did a few things right .. | 03:09 |
| hongbin | pksingh: Yes, it is possible. API passes requests to conductors in round robin way | 03:09 |
| openstackgerrit | Hua Wang proposed openstack/magnum: Remove redundant commas https://review.openstack.org/204355 | 03:10 |
| pksingh | hongbin: how API insures round robin delivery or MQ insures it? | 03:11 |
| sdake | madhuri I am not writing the code | 03:11 |
| madhuri | It's not about the code but magnum setup | 03:12 |
| hongbin | MQ ensure it | 03:12 |
| sdake | madhuri at this point if I were, I'd take a look at how well barbican works and see if it were easy to write a ca plugin that were not server based in python | 03:12 |
| pksingh | hongbin: OK thanks a lot, you solved my doubts :) may come to you again | 03:13 |
| sdake | we clearly dont want people to have to go through hoops to install magnum | 03:13 |
| sdake | its already hard enough | 03:13 |
| madhuri | Ok we always have pluggable option | 03:13 |
| madhuri | sdake, +1 to your idea | 03:13 |
| *** y_sawai has quit IRC | 03:13 | |
| sdake | i would be wary of dogtag just because of the setup overhead, which I don't know if there is any or not | 03:13 |
| sdake | is there dogtag config overhead, or is it install and forget? | 03:14 |
| hongbin | pksingh: sure. Are you a dev or an operator? | 03:14 |
| *** y_sawai has joined #openstack-containers | 03:14 | |
| pksingh | hongbin: i am a dev :) | 03:14 |
| alee | sdake, its pretty minimal | 03:14 |
| madhuri | Ok but for now we want to test Dogtag and later decide on whether we want to use it or nor | 03:14 |
| hongbin | pksingh: I see | 03:14 |
| madhuri | alee, So can you help us with dogtag setup? | 03:14 |
| alee | sdake, and easily scripted -- we have a dogtag get for barbican | 03:14 |
| sdake | madhuri ya i'd take a look at dogtag and see what it takes to setup | 03:14 |
| sdake | what is a dogtag get | 03:15 |
| alee | madhuri, yes I can | 03:15 |
| sdake | even thoug hthings can be scripted, the more steps to setup the less likely someone will complete setup | 03:15 |
| sdake | even if it involves something as simple as running a script which sets up hundreds of things ;-) | 03:15 |
| *** dims_ has quit IRC | 03:15 | |
| *** Tennyson has joined #openstack-containers | 03:16 | |
| alee | sdake, sure but its pretty easy to set up .. | 03:16 |
| madhuri | alee, Do you want to tell us now? | 03:16 |
| madhuri | Or later | 03:16 |
| alee | sdake, madhuri -- I can send you guys the setup script ofr our dogtag gate jobs | 03:16 |
| alee | (have to find it) | 03:16 |
| alee | madhuri, sdake - one thing to keep in mind though is that currently there are some issues in debian | 03:17 |
| sdake | what would be ideal is "install package - its good to go" | 03:17 |
| sdake | 90% of the openstack community runs on ubuntu | 03:17 |
| alee | but I'm planning on resolving those this week .. | 03:17 |
| sdake | if ubuntu is doa, its a nonstarter | 03:18 |
| alee | sdake, dogtag is in sid | 03:18 |
| sdake | btw, I am in th 10% :) | 03:18 |
| alee | me too :) | 03:18 |
| alee | sdake, madhuri I can update you as to ubuntu status next week -- but its a priority | 03:19 |
| alee | for freeipa as well as openstack | 03:19 |
| madhuri | sure alee. It is also a priority for us | 03:19 |
| alee | madhuri, sdake -- ok -so I plan to 1) check with redrobot on location of conf file in devstack setup 2) send you script on dogtag setup in barbican | 03:21 |
| alee | 3) update you on ubuntu status (prob early next week) | 03:21 |
| madhuri | Great alee | 03:21 |
| sdake | i hear script and I think "we need something that is scriptless" | 03:21 |
| sdake | like a library | 03:21 |
| sdake | why can't it just be a library? | 03:21 |
| alee | sdake, the part that is scripted is the dogtag install and the barbican config | 03:22 |
| alee | sdake, but maybe all that becomes part of a puppet module or something .. | 03:23 |
| *** yuanying has quit IRC | 03:24 | |
| alee | anything else guys? its getting close to pumpkin time here .. | 03:24 |
| madhuri | No. Thanks alee for the time | 03:24 |
| sdake | thanks for getting with madhuri alee | 03:25 |
| madhuri | Will you be sending us mail about the above plan alee | 03:25 |
| alee | np - keep me posted as to progress - and let me know if we need another meeting | 03:25 |
| alee | sure | 03:25 |
| *** yuanying has joined #openstack-containers | 03:25 | |
| madhuri | It was really helpful. Now I have a Barbican CA running that I can use :) | 03:26 |
| madhuri | Sure alee | 03:26 |
| alee | excellent :) | 03:26 |
| sdake | re puppet, puppet isn't hip | 03:26 |
| sdake | the cool kids use containers and ansible these days ;) | 03:26 |
| alee | :) | 03:26 |
| *** jjlehr has quit IRC | 03:26 | |
| alee | ok later guys | 03:27 |
| madhuri | good night alee | 03:27 |
| yuanying | thanks alee | 03:27 |
| *** jjlehr has joined #openstack-containers | 03:32 | |
| *** dave-mccowan has quit IRC | 03:34 | |
| *** h00327910_ has quit IRC | 03:35 | |
| openstackgerrit | Hua Wang proposed openstack/magnum: Remove a redundant file https://review.openstack.org/204363 | 03:40 |
| *** jruano has joined #openstack-containers | 03:46 | |
| *** dims_ has joined #openstack-containers | 03:49 | |
| *** achanda has quit IRC | 03:50 | |
| *** dims_ has quit IRC | 03:56 | |
| openstackgerrit | Hongbin Lu proposed openstack/magnum: Make k8sclient use the load balancer address https://review.openstack.org/204261 | 03:56 |
| openstackgerrit | Hongbin Lu proposed openstack/magnum: Port upstream commit "keep chasing etcd" https://review.openstack.org/204260 | 03:56 |
| openstackgerrit | Hongbin Lu proposed openstack/magnum: Register kube minions through load balancers https://review.openstack.org/202307 | 03:56 |
| openstackgerrit | Hongbin Lu proposed openstack/magnum: Bootstrap etcd cluster by discovery_url https://review.openstack.org/204366 | 03:56 |
| *** coolsvap|away is now known as coolsvap | 04:01 | |
| *** jjlehr has quit IRC | 04:02 | |
| *** kebray_ has quit IRC | 04:03 | |
| *** Kennan2 has joined #openstack-containers | 04:14 | |
| *** Kennan has quit IRC | 04:15 | |
| *** gangil has joined #openstack-containers | 04:15 | |
| *** hongbin has quit IRC | 04:18 | |
| *** jruano has quit IRC | 04:31 | |
| *** SourabhP has joined #openstack-containers | 04:34 | |
| *** SourabhP_ has joined #openstack-containers | 04:37 | |
| *** suro-patz has joined #openstack-containers | 04:37 | |
| *** achanda has joined #openstack-containers | 04:37 | |
| *** SourabhP has quit IRC | 04:39 | |
| *** SourabhP_ is now known as SourabhP | 04:39 | |
| *** suro-patz1 has joined #openstack-containers | 04:39 | |
| *** suro-patz has quit IRC | 04:42 | |
| *** saksham has joined #openstack-containers | 04:47 | |
| *** diga has joined #openstack-containers | 04:51 | |
| *** gangil has quit IRC | 04:55 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/magnum: Updated from global requirements https://review.openstack.org/204397 | 04:56 |
| *** suro-patz1 has quit IRC | 04:59 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-magnumclient: Updated from global requirements https://review.openstack.org/204421 | 04:59 |
| *** sthillma has joined #openstack-containers | 05:04 | |
| *** harshs has joined #openstack-containers | 05:09 | |
| *** saksham has quit IRC | 05:17 | |
| *** y_sawai_ has joined #openstack-containers | 05:23 | |
| *** y_sawai has quit IRC | 05:26 | |
| *** mathspanda has joined #openstack-containers | 05:27 | |
| *** harshs has quit IRC | 05:30 | |
| *** Tango has quit IRC | 05:33 | |
| *** y_sawai has joined #openstack-containers | 05:34 | |
| *** y_sawai_ has quit IRC | 05:36 | |
| *** SourabhP has quit IRC | 05:42 | |
| *** humble_ has joined #openstack-containers | 05:46 | |
| *** wanghua has quit IRC | 05:48 | |
| *** SourabhP has joined #openstack-containers | 06:03 | |
| *** SourabhP has quit IRC | 06:10 | |
| *** Marga__ has quit IRC | 06:14 | |
| *** Marga_ has joined #openstack-containers | 06:15 | |
| *** dims_ has joined #openstack-containers | 06:17 | |
| *** dims_ has quit IRC | 06:22 | |
| *** eghobo has joined #openstack-containers | 06:28 | |
| *** mathspanda has quit IRC | 06:29 | |
| *** sdake has quit IRC | 06:31 | |
| *** mfalatic has quit IRC | 06:42 | |
| *** dims_ has joined #openstack-containers | 06:47 | |
| *** suro-patz has joined #openstack-containers | 06:48 | |
| *** dims_ has quit IRC | 06:53 | |
| *** mathspanda has joined #openstack-containers | 06:54 | |
| *** humble__ has joined #openstack-containers | 06:57 | |
| *** suro-patz has quit IRC | 06:57 | |
| *** suro-patz has joined #openstack-containers | 06:58 | |
| *** humble_ has quit IRC | 07:00 | |
| *** y_sawai_ has joined #openstack-containers | 07:00 | |
| *** coolsvap is now known as coolsvap|away | 07:01 | |
| *** y_sawai__ has joined #openstack-containers | 07:01 | |
| *** y_sawai__ has quit IRC | 07:01 | |
| *** y_sawai__ has joined #openstack-containers | 07:02 | |
| *** y_sawai has quit IRC | 07:03 | |
| *** alex_klimov has joined #openstack-containers | 07:03 | |
| *** y_sawai_ has quit IRC | 07:05 | |
| *** y_sawai__ has quit IRC | 07:06 | |
| *** j___ has joined #openstack-containers | 07:07 | |
| *** suro-patz has quit IRC | 07:07 | |
| *** dims_ has joined #openstack-containers | 07:12 | |
| *** y_sawai has joined #openstack-containers | 07:12 | |
| *** dims_ has quit IRC | 07:16 | |
| *** y_sawai has quit IRC | 07:17 | |
| openstackgerrit | Hua Wang proposed openstack/magnum: Remove redundant FunctionalTest class https://review.openstack.org/204468 | 07:19 |
| -openstackstatus- NOTICE: zuul is undergoing an emergency restart. Jobs will be re-queued but some events may be lost. | 07:23 | |
| *** achanda has quit IRC | 07:30 | |
| *** y_sawai has joined #openstack-containers | 07:31 | |
| *** achanda has joined #openstack-containers | 07:39 | |
| *** eghobo has quit IRC | 07:41 | |
| *** dims_ has joined #openstack-containers | 07:44 | |
| *** achanda has quit IRC | 07:49 | |
| *** dims_ has quit IRC | 07:54 | |
| *** yuanying has quit IRC | 08:05 | |
| *** dims_ has joined #openstack-containers | 08:12 | |
| *** Tennyson has quit IRC | 08:12 | |
| -openstackstatus- NOTICE: zuul jobs are currently stuck while problems with gearman are debugged | 08:13 | |
| *** ChanServ changes topic to "zuul jobs are currently stuck while problems with gearman are debugged" | 08:13 | |
| *** dims_ has quit IRC | 08:16 | |
| openstackgerrit | yuntongjin proposed openstack/magnum: policy check for rc https://review.openstack.org/204496 | 08:38 |
| *** dims_ has joined #openstack-containers | 08:41 | |
| *** dims_ has quit IRC | 08:45 | |
| *** sthillma has quit IRC | 08:46 | |
| *** sthillma has joined #openstack-containers | 08:51 | |
| *** sthillma_ has joined #openstack-containers | 08:56 | |
| *** sthillma has quit IRC | 08:56 | |
| *** sthillma_ is now known as sthillma | 08:56 | |
| *** y_sawai has quit IRC | 09:00 | |
| *** liudong has quit IRC | 09:01 | |
| *** oro has joined #openstack-containers | 09:03 | |
| *** sthillma has quit IRC | 09:03 | |
| *** y_sawai has joined #openstack-containers | 09:09 | |
| openstackgerrit | Madhuri Kumari proposed openstack/magnum: Added Cert object and data model. https://review.openstack.org/203901 | 09:15 |
| *** dims_ has joined #openstack-containers | 09:15 | |
| *** dims_ has quit IRC | 09:20 | |
| *** dims_ has joined #openstack-containers | 09:23 | |
| openstackgerrit | Digambar proposed openstack/magnum: Fix error related policy.json file in quickstart guide. https://review.openstack.org/204511 | 09:25 |
| *** dims_ has quit IRC | 09:27 | |
| *** coolsvap|away is now known as coolsvap | 09:28 | |
| *** mathspanda has quit IRC | 09:31 | |
| *** dims_ has joined #openstack-containers | 09:47 | |
| *** y_sawai has quit IRC | 10:00 | |
| *** alex_klimov has quit IRC | 10:06 | |
| *** coolsvap is now known as coolsvap|away | 10:16 | |
| *** dims_ has quit IRC | 10:18 | |
| *** apuimedo has joined #openstack-containers | 10:20 | |
| openstackgerrit | Digambar proposed openstack/magnum: Fix error related policy.json file https://review.openstack.org/204511 | 10:34 |
| diga | Kennan2: Hi | 10:34 |
| diga | can you check now | 10:34 |
| Kennan2 | hi diga: | 10:35 |
| *** dims_ has joined #openstack-containers | 10:36 | |
| Kennan2 | hi diga: | 10:37 |
| Kennan2 | just want to know if you just hit that in manual install process | 10:37 |
| Kennan2 | or quick start guide process? | 10:37 |
| *** pksingh has quit IRC | 10:38 | |
| *** dims_ has quit IRC | 10:41 | |
| *** dims_ has joined #openstack-containers | 10:41 | |
| *** alex_klimov has joined #openstack-containers | 10:48 | |
| *** humble_ has joined #openstack-containers | 11:04 | |
| *** alex_klimov has quit IRC | 11:06 | |
| *** humble__ has quit IRC | 11:06 | |
| *** wanghua has joined #openstack-containers | 11:06 | |
| *** humble_ has quit IRC | 11:09 | |
| *** bradjones has quit IRC | 11:18 | |
| *** bradjones has joined #openstack-containers | 11:20 | |
| *** bradjones has quit IRC | 11:20 | |
| *** bradjones has joined #openstack-containers | 11:20 | |
| *** julim has joined #openstack-containers | 11:30 | |
| *** j___ has quit IRC | 11:34 | |
| *** alex_klimov has joined #openstack-containers | 11:38 | |
| *** dane_leblanc has joined #openstack-containers | 11:46 | |
| *** j___ has joined #openstack-containers | 11:46 | |
| *** kmARC has joined #openstack-containers | 11:51 | |
| *** david-lyle has joined #openstack-containers | 11:52 | |
| *** jruano has joined #openstack-containers | 11:53 | |
| *** humble_ has joined #openstack-containers | 12:13 | |
| *** wanghua has quit IRC | 12:14 | |
| *** sankarsh` is now known as sankarshan | 12:14 | |
| *** humble__ has joined #openstack-containers | 12:14 | |
| *** dave-mccowan has joined #openstack-containers | 12:15 | |
| *** humble_ has quit IRC | 12:17 | |
| *** dims_ has quit IRC | 12:24 | |
| *** mfalatic has joined #openstack-containers | 12:27 | |
| *** y_sawai has joined #openstack-containers | 12:30 | |
| *** y_sawai has quit IRC | 12:35 | |
| *** mathspanda has joined #openstack-containers | 12:35 | |
| openstackgerrit | yuntongjin proposed openstack/magnum: policy check for rc https://review.openstack.org/204496 | 12:48 |
| *** jjlehr has joined #openstack-containers | 12:49 | |
| openstackgerrit | yuntongjin proposed openstack/magnum: policy check for service https://review.openstack.org/204593 | 12:56 |
| *** unicell has joined #openstack-containers | 12:57 | |
| *** unicell1 has quit IRC | 12:58 | |
| *** j______ has joined #openstack-containers | 13:15 | |
| *** funzo has joined #openstack-containers | 13:16 | |
| *** j___ has quit IRC | 13:18 | |
| *** david-lyle has quit IRC | 13:27 | |
| *** zhenguo has quit IRC | 13:43 | |
| *** dims_ has joined #openstack-containers | 13:48 | |
| *** zz_dimtruck is now known as dimtruck | 13:55 | |
| openstackgerrit | Merged openstack/magnum: Remove a redundant file https://review.openstack.org/204363 | 13:57 |
| openstackgerrit | Merged openstack/magnum: Fix the wrong platform usage https://review.openstack.org/200401 | 14:07 |
| *** y_sawai has joined #openstack-containers | 14:11 | |
| -openstackstatus- NOTICE: CI is currently recovering from an outage overnight. It is safe to recheck results with NOT_REGISTERED errors. It may take some time for zuul to work through the backlog. | 14:14 | |
| *** ChanServ changes topic to "CI is currently recovering from an outage overnight. It is safe to recheck results with NOT_REGISTERED errors. It may take some time for zuul to work through the backlog." | 14:14 | |
| *** y_sawai has quit IRC | 14:16 | |
| *** jjlehr has quit IRC | 14:17 | |
| *** jjfreric has joined #openstack-containers | 14:19 | |
| *** y_sawai has joined #openstack-containers | 14:19 | |
| *** y_sawai has quit IRC | 14:27 | |
| *** ChanServ changes topic to "OpenStack Containers Team" | 14:32 | |
| -openstackstatus- NOTICE: CI is slowly recovering, please be patient while the backlog is worked through. | 14:32 | |
| *** jjlehr has joined #openstack-containers | 14:40 | |
| openstackgerrit | kexiaodong proposed openstack/magnum: Remove excess comma in front of parenthesis. Fixes Bug 1477136 https://review.openstack.org/204646 | 14:44 |
| openstack | bug 1477136 in Magnum "There is excess comma in front of parenthesis." [Undecided,New] https://launchpad.net/bugs/1477136 - Assigned to kexiaodong (kexiaodong) | 14:44 |
| *** kebray has joined #openstack-containers | 14:47 | |
| *** kebray has quit IRC | 14:48 | |
| *** kebray has joined #openstack-containers | 14:48 | |
| openstackgerrit | Merged openstack/magnum: Remove redundant commas https://review.openstack.org/204355 | 14:54 |
| *** absubram has joined #openstack-containers | 14:58 | |
| *** y_sawai has joined #openstack-containers | 15:00 | |
| *** harshs has joined #openstack-containers | 15:03 | |
| *** absubram has quit IRC | 15:03 | |
| *** absubram_ has joined #openstack-containers | 15:03 | |
| *** y_sawai has quit IRC | 15:05 | |
| *** y_sawai has joined #openstack-containers | 15:05 | |
| *** kebray has quit IRC | 15:06 | |
| *** david-lyle has joined #openstack-containers | 15:09 | |
| *** oro has quit IRC | 15:11 | |
| *** kmARC has quit IRC | 15:11 | |
| *** kebray has joined #openstack-containers | 15:13 | |
| *** Drago has joined #openstack-containers | 15:16 | |
| *** y_sawai has quit IRC | 15:21 | |
| *** Tango has joined #openstack-containers | 15:21 | |
| *** humble__ has quit IRC | 15:25 | |
| *** j______ has quit IRC | 15:26 | |
| *** humble__ has joined #openstack-containers | 15:26 | |
| *** mathspanda has quit IRC | 15:33 | |
| *** chmouel has quit IRC | 15:44 | |
| *** y_sawai has joined #openstack-containers | 15:46 | |
| *** achanda has joined #openstack-containers | 15:48 | |
| *** y_sawai has quit IRC | 15:48 | |
| *** dimtruck is now known as zz_dimtruck | 15:51 | |
| *** chmouel has joined #openstack-containers | 15:51 | |
| *** achanda has quit IRC | 15:52 | |
| *** rcleere_away has quit IRC | 15:55 | |
| *** kebray has quit IRC | 15:55 | |
| *** achanda has joined #openstack-containers | 15:55 | |
| *** coolsvap|away is now known as coolsvap | 15:56 | |
| *** rcleere has joined #openstack-containers | 15:58 | |
| *** achanda has quit IRC | 15:58 | |
| *** eghobo has joined #openstack-containers | 16:05 | |
| *** wznoinsk has quit IRC | 16:07 | |
| *** kmARC has joined #openstack-containers | 16:08 | |
| *** absubram_ has quit IRC | 16:08 | |
| *** wznoinsk has joined #openstack-containers | 16:08 | |
| *** gangil has joined #openstack-containers | 16:13 | |
| *** nihilifer has quit IRC | 16:13 | |
| *** BertrandN has quit IRC | 16:14 | |
| *** nihilifer has joined #openstack-containers | 16:14 | |
| *** wznoinsk has quit IRC | 16:14 | |
| *** wznoinsk has joined #openstack-containers | 16:16 | |
| *** liudong has joined #openstack-containers | 16:17 | |
| *** adrian_otto has joined #openstack-containers | 16:17 | |
| *** jjfreric has quit IRC | 16:20 | |
| *** jjfreric has joined #openstack-containers | 16:20 | |
| *** achanda has joined #openstack-containers | 16:24 | |
| *** unicell has quit IRC | 16:24 | |
| openstackgerrit | Daneyon Hansen proposed openstack/magnum: Magnum Container Networking Spec https://review.openstack.org/204686 | 16:30 |
| *** alex_klimov has quit IRC | 16:31 | |
| *** harshs has quit IRC | 16:33 | |
| openstackgerrit | Daneyon Hansen proposed openstack/magnum: Magnum Container Networking Spec https://review.openstack.org/204686 | 16:34 |
| *** achanda has quit IRC | 16:34 | |
| *** coolsvap is now known as coolsvap|away | 16:38 | |
| *** humble_ has joined #openstack-containers | 16:45 | |
| *** sdake has joined #openstack-containers | 16:47 | |
| *** humble__ has quit IRC | 16:47 | |
| *** suro-patz has joined #openstack-containers | 16:47 | |
| *** wanghua has joined #openstack-containers | 16:47 | |
| *** sdake_ has joined #openstack-containers | 16:48 | |
| *** humble_ has quit IRC | 16:49 | |
| *** jjfreric has quit IRC | 16:50 | |
| *** jjfreric has joined #openstack-containers | 16:51 | |
| *** sdake has quit IRC | 16:52 | |
| *** harshs has joined #openstack-containers | 16:55 | |
| *** linevan has joined #openstack-containers | 16:57 | |
| *** Tango has quit IRC | 16:57 | |
| linevan | sdake: ping | 16:58 |
| *** unicell has joined #openstack-containers | 16:58 | |
| *** harshs has quit IRC | 16:59 | |
| *** zz_dimtruck is now known as dimtruck | 17:02 | |
| *** humble_ has joined #openstack-containers | 17:03 | |
| *** wanghua has quit IRC | 17:04 | |
| *** humble__ has joined #openstack-containers | 17:04 | |
| *** kmARC has quit IRC | 17:05 | |
| suro-patz | madhuri: If you have not started working on https://bugs.launchpad.net/magnum/+bug/1465097, I can pick this up | 17:05 |
| openstack | Launchpad bug 1465097 in Magnum "Wrong node-count in bay-list" [Medium,New] - Assigned to Madhuri Kumari (madhuri-rai07) | 17:05 |
| *** humble_ has quit IRC | 17:08 | |
| suro-patz | hongbin: I am bringing up devstack on RHEL, wanted to try out the mesos with magnum on that - I need some help on building the ubuntu image https://github.com/openstack/magnum/blob/master/magnum/templates/heat-mesos/elements/README.md | 17:18 |
| *** absubram has joined #openstack-containers | 17:18 | |
| *** daneyon_ has quit IRC | 17:19 | |
| *** daneyon has joined #openstack-containers | 17:20 | |
| *** jjfreric1 has joined #openstack-containers | 17:25 | |
| *** jjfreric has quit IRC | 17:27 | |
| *** SourabhP has joined #openstack-containers | 17:30 | |
| *** Tango has joined #openstack-containers | 17:31 | |
| *** hongbin has joined #openstack-containers | 17:41 | |
| *** Drago has quit IRC | 17:41 | |
| *** harshs has joined #openstack-containers | 17:44 | |
| hongbin | suro-patz: Hey, glad to see you are interesting to try the mesos bay. How can I help? | 17:44 |
| suro-patz | hongbin: I actually followed the steps to build the ubuntu image at https://github.com/openstack/magnum/blob/master/magnum/templates/heat-mesos/elements/README.md | 17:48 |
| suro-patz | I am trying it now, will keep you posted | 17:48 |
| hongbin | suro-patz: K | 17:48 |
| *** humble__ has quit IRC | 17:49 | |
| *** kebray has joined #openstack-containers | 17:51 | |
| *** kebray has quit IRC | 17:51 | |
| *** wanghua has joined #openstack-containers | 17:53 | |
| gangil | hongabin:http://lists.openstack.org/pipermail/openstack/2015-July/013481.html any help on this? | 17:53 |
| *** dimtruck is now known as zz_dimtruck | 17:57 | |
| *** kebray has joined #openstack-containers | 17:57 | |
| *** wanghua has quit IRC | 17:58 | |
| *** Drago has joined #openstack-containers | 17:58 | |
| *** apuimedo has quit IRC | 17:58 | |
| *** wanghua has joined #openstack-containers | 17:59 | |
| *** gangil has quit IRC | 17:59 | |
| *** gangil has joined #openstack-containers | 17:59 | |
| *** humble_ has joined #openstack-containers | 18:02 | |
| *** gangil1 has joined #openstack-containers | 18:02 | |
| *** wanghua has quit IRC | 18:03 | |
| *** Kennan has joined #openstack-containers | 18:04 | |
| *** Kennan2 has quit IRC | 18:04 | |
| *** zz_dimtruck is now known as dimtruck | 18:04 | |
| hongbin | gangil: So you created a stack and it is handing? | 18:05 |
| *** gangil has quit IRC | 18:06 | |
| *** gangil1 has quit IRC | 18:07 | |
| hongbin | gangil1: BTW, it is better to send your question to the openstack-dev list instead. I doubt if anyone is monitoring the openstack mailing list (I don't). | 18:08 |
| *** gangil has joined #openstack-containers | 18:15 | |
| *** jjfreric has joined #openstack-containers | 18:32 | |
| *** jjfreric1 has quit IRC | 18:34 | |
| *** alee has quit IRC | 18:35 | |
| *** gangil has quit IRC | 18:37 | |
| *** achanda has joined #openstack-containers | 18:40 | |
| *** gangil has joined #openstack-containers | 18:42 | |
| *** dims_ has quit IRC | 18:42 | |
| *** linevan has quit IRC | 18:42 | |
| *** gangil has quit IRC | 18:46 | |
| *** dims_ has joined #openstack-containers | 18:47 | |
| *** linevan has joined #openstack-containers | 18:49 | |
| *** sthillma has joined #openstack-containers | 18:50 | |
| *** kmARC has joined #openstack-containers | 18:56 | |
| *** Marga_ has quit IRC | 19:04 | |
| *** Marga_ has joined #openstack-containers | 19:05 | |
| *** Marga_ has quit IRC | 19:07 | |
| *** Marga_ has joined #openstack-containers | 19:08 | |
| *** rcleere is now known as rcleere_away | 19:10 | |
| *** kmARC has quit IRC | 19:11 | |
| *** Drago has quit IRC | 19:14 | |
| *** Drago has joined #openstack-containers | 19:14 | |
| *** adrian_otto has quit IRC | 19:14 | |
| *** eghobo has quit IRC | 19:15 | |
| *** linevan has quit IRC | 19:16 | |
| *** kebray has quit IRC | 19:31 | |
| *** kebray has joined #openstack-containers | 19:37 | |
| *** gangil has joined #openstack-containers | 19:41 | |
| *** kmARC has joined #openstack-containers | 19:50 | |
| openstackgerrit | Merged openstack/python-magnumclient: Updated from global requirements https://review.openstack.org/204421 | 19:52 |
| openstackgerrit | Merged openstack/magnum: Updated from global requirements https://review.openstack.org/204397 | 19:52 |
| *** linevan has joined #openstack-containers | 19:54 | |
| *** gangil has quit IRC | 20:04 | |
| *** kebray has quit IRC | 20:05 | |
| *** sdake_ is now known as sdake | 20:07 | |
| linevan | Hi sdake | 20:08 |
| sdake | sup linevan | 20:08 |
| linevan | i was thnking if some service is missing in a vm it should indicate user who is creating_bays | 20:09 |
| linevan | because it takes time to verify manually and it will be good if new user is using | 20:10 |
| linevan | or their should be a way to test or make sure that all the yaml have writen all services files | 20:11 |
| linevan | in a vm | 20:11 |
| linevan | when i was creating bay yesterday and swarm manager service was missing it kept showing bay-status create in progress until i deleted that bau | 20:13 |
| linevan | I know if you use default yaml there will be no issue but if somebody want to edit and make changes according to their use it will be good and debugging will be easy | 20:15 |
| linevan | ? | 20:17 |
| *** gangil has joined #openstack-containers | 20:24 | |
| *** linevan_ has joined #openstack-containers | 20:27 | |
| linevan_ | sorry I lost connection | 20:27 |
| *** linevan has quit IRC | 20:30 | |
| openstackgerrit | Daneyon Hansen proposed openstack/magnum: Magnum Container Networking Spec https://review.openstack.org/204686 | 20:30 |
| *** kebray has joined #openstack-containers | 20:35 | |
| *** kebray has quit IRC | 20:36 | |
| *** kebray has joined #openstack-containers | 20:36 | |
| *** kebray_ has joined #openstack-containers | 20:40 | |
| *** kebray has quit IRC | 20:40 | |
| *** adrian_otto has joined #openstack-containers | 20:42 | |
| *** linevan_ has quit IRC | 20:44 | |
| openstackgerrit | Sergey Vilgelm proposed openstack/magnum: Remove unused oslo-incubator modules https://review.openstack.org/204754 | 20:46 |
| *** absubram has quit IRC | 20:47 | |
| *** jjfreric has left #openstack-containers | 20:47 | |
| openstackgerrit | Sergey Vilgelm proposed openstack/python-magnumclient: Remove uuidutils from openstack.common https://review.openstack.org/204758 | 20:49 |
| *** saksham has joined #openstack-containers | 20:49 | |
| *** gangil has left #openstack-containers | 21:04 | |
| *** kebray_ has quit IRC | 21:06 | |
| *** jruano has quit IRC | 21:15 | |
| *** david-lyle has quit IRC | 21:17 | |
| *** jruano has joined #openstack-containers | 21:19 | |
| *** eghobo has joined #openstack-containers | 21:19 | |
| *** daneyon has quit IRC | 21:27 | |
| *** dan_ has joined #openstack-containers | 21:27 | |
| *** daneyon has joined #openstack-containers | 21:27 | |
| *** dan_ is now known as Guest56855 | 21:27 | |
| openstackgerrit | Hongbin Lu proposed openstack/magnum: Make k8sclient use the load balancer address https://review.openstack.org/204261 | 21:31 |
| openstackgerrit | Hongbin Lu proposed openstack/magnum: Port upstream commit "keep chasing etcd" https://review.openstack.org/204260 | 21:31 |
| openstackgerrit | Hongbin Lu proposed openstack/magnum: [WIP]Bootstrap etcd cluster by discovery_url https://review.openstack.org/204366 | 21:31 |
| openstackgerrit | Hongbin Lu proposed openstack/magnum: Register kube minions through load balancers https://review.openstack.org/202307 | 21:31 |
| *** Tango has quit IRC | 21:37 | |
| *** kebray has joined #openstack-containers | 21:38 | |
| *** liudong has quit IRC | 21:41 | |
| *** achanda has quit IRC | 21:43 | |
| sdake | tango did you get a working image? | 21:44 |
| *** jjlehr has quit IRC | 21:50 | |
| *** dane_leblanc has quit IRC | 21:53 | |
| *** dims_ has quit IRC | 21:53 | |
| *** y_sawai has joined #openstack-containers | 21:57 | |
| *** alex_klimov has joined #openstack-containers | 22:00 | |
| *** y_sawai has quit IRC | 22:01 | |
| *** y_sawai has joined #openstack-containers | 22:01 | |
| *** Kennan has quit IRC | 22:02 | |
| *** Kennan has joined #openstack-containers | 22:03 | |
| *** y_sawai has quit IRC | 22:13 | |
| *** achanda has joined #openstack-containers | 22:15 | |
| *** kebray has quit IRC | 22:16 | |
| *** kebray has joined #openstack-containers | 22:17 | |
| *** jjlehr has joined #openstack-containers | 22:18 | |
| *** Tango has joined #openstack-containers | 22:27 | |
| *** dave-mccowan has quit IRC | 22:28 | |
| *** dave-mccowan has joined #openstack-containers | 22:36 | |
| *** kmARC has quit IRC | 22:42 | |
| *** kebray has quit IRC | 22:51 | |
| *** kebray has joined #openstack-containers | 22:52 | |
| *** hongbin has quit IRC | 22:58 | |
| *** dimtruck is now known as zz_dimtruck | 22:59 | |
| *** alex_klimov has quit IRC | 23:00 | |
| *** kebray has quit IRC | 23:07 | |
| *** suro-patz has quit IRC | 23:17 | |
| *** Guest56855 has quit IRC | 23:29 | |
| *** Drago has quit IRC | 23:30 | |
| *** suro-patz has joined #openstack-containers | 23:37 | |
| *** adrian_otto has quit IRC | 23:44 | |
| *** achanda has quit IRC | 23:49 | |
| openstackgerrit | Madhuri Kumari proposed openstack/magnum: Added Cert object and data model. https://review.openstack.org/203901 | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!