| *** adrian_otto has quit IRC | 00:04 | |
| *** adrian_otto has joined #openstack-containers | 00:04 | |
| *** harshs has joined #openstack-containers | 00:06 | |
| *** banix has joined #openstack-containers | 00:17 | |
| *** adrian_otto has quit IRC | 00:22 | |
| *** Tango has quit IRC | 00:23 | |
| *** adrian_otto has joined #openstack-containers | 00:23 | |
| *** dims has joined #openstack-containers | 00:24 | |
| *** adrian_otto has quit IRC | 00:27 | |
| *** kebray has quit IRC | 00:28 | |
| *** adrian_otto has joined #openstack-containers | 00:29 | |
| *** adrian_otto has quit IRC | 00:32 | |
| *** adrian_otto has joined #openstack-containers | 00:36 | |
| openstackgerrit | Vilobh Meshram proposed openstack/magnum: Add bay_uuid to Service Read/Write API's https://review.openstack.org/228679 | 00:38 |
|---|---|---|
| openstackgerrit | Surojit Pathak proposed openstack/magnum: Make Kubernetes API call secure https://review.openstack.org/207324 | 00:38 |
| openstackgerrit | Surojit Pathak proposed openstack/magnum: Add TLS support in heat kubernetes https://review.openstack.org/202873 | 00:38 |
| *** suro-patz has quit IRC | 00:42 | |
| *** adrian_otto has quit IRC | 00:44 | |
| *** harshs_ has joined #openstack-containers | 00:44 | |
| *** harshs has quit IRC | 00:45 | |
| *** amit213 has quit IRC | 00:45 | |
| *** harshs_ is now known as harshs | 00:45 | |
| *** sthillma has quit IRC | 00:55 | |
| *** shakamunyi has joined #openstack-containers | 00:55 | |
| *** harshs has quit IRC | 01:01 | |
| daneyon | apmelton ping | 01:02 |
| *** dave-mcc_ has joined #openstack-containers | 01:07 | |
| *** dave-mccowan has quit IRC | 01:10 | |
| *** erkules has joined #openstack-containers | 01:12 | |
| openstackgerrit | Vilobh Meshram proposed openstack/magnum: Add bay_uuid to RC Read/Write API's https://review.openstack.org/228683 | 01:15 |
| *** erkules_ has quit IRC | 01:16 | |
| *** Marga_ has quit IRC | 01:18 | |
| *** Marga_ has joined #openstack-containers | 01:18 | |
| *** hongbin has joined #openstack-containers | 01:20 | |
| *** harshs has joined #openstack-containers | 01:29 | |
| *** unicell has quit IRC | 01:33 | |
| eliqiao | hi, what is docker.socket service ? | 01:34 |
| wanghua | Where you find it | 01:45 |
| wanghua | eliqiao: dockerclient use socket to communicate with docker server | 01:47 |
| eliqiao | params: | 01:47 |
| eliqiao | "$NODE_SERVICES": "docker-tcp.socket swarm-agent swarm-manager" | 01:47 |
| eliqiao | yeah, but the service name shouldn't be docker-tcp.socket | 01:48 |
| eliqiao | that should be docker.socket | 01:48 |
| eliqiao | wanghua: ^^^ | 01:48 |
| wanghua | eliqiao: You can test in your env | 01:49 |
| eliqiao | wanghua: if you have swarm enviroment, try sudo systemctl | grep docker-tcp.socket | 01:49 |
| openstackgerrit | Manjeet Singh Bhatia proposed openstack/magnum: WIP: Adding Documentation for use of proxies in magnum. https://review.openstack.org/228634 | 01:49 |
| eliqiao | wanghua: sure, I don't find that service. | 01:49 |
| eliqiao | should be a bug, | 01:49 |
| wanghua | Maybe | 01:50 |
| eliqiao | am working on this one https://bugs.launchpad.net/magnum/+bug/1500291, I would like to fix it in one patch. | 01:50 |
| openstack | Launchpad bug 1500291 in Magnum "swarm bay is "CREATE_COMPLETE" but the bay is not usable acutally" [High,Confirmed] - Assigned to Eli Qiao (taget-9) | 01:50 |
| eliqiao | wanghua: thanks for the explanation. | 01:50 |
| wanghua | eliqiao: I think swarm + compose = k8s | 01:53 |
| wanghua | eliqiao:now we only have swarm, I think we should introduce compose, too | 01:54 |
| *** harshs has quit IRC | 01:54 | |
| openstackgerrit | Manjeet Singh Bhatia proposed openstack/magnum: WIP: Adding Documentation for use of proxies in magnum. https://review.openstack.org/228634 | 01:55 |
| eghobo | wanghua: compose is client base | 01:57 |
| eghobo | swarm ~ kub ~ mesos | 01:57 |
| *** julim has joined #openstack-containers | 01:57 | |
| eghobo | all of them are cluster schedulers, in general ;) | 01:58 |
| eliqiao | -_- | 02:01 |
| *** banix has quit IRC | 02:03 | |
| *** eghobo has quit IRC | 02:03 | |
| *** dims has quit IRC | 02:09 | |
| wanghua | eghobo:k8s has service, pod, etc | 02:09 |
| *** zz_dimtruck is now known as dimtruck | 02:20 | |
| *** achanda has joined #openstack-containers | 02:25 | |
| *** wkqwu has joined #openstack-containers | 02:29 | |
| *** wkqwu has left #openstack-containers | 02:31 | |
| *** wkqwu has joined #openstack-containers | 02:31 | |
| *** wkqwu has left #openstack-containers | 02:31 | |
| *** zhenguo has joined #openstack-containers | 02:34 | |
| *** Marga__ has joined #openstack-containers | 02:36 | |
| *** Marga_ has quit IRC | 02:39 | |
| *** Marga__ has quit IRC | 02:40 | |
| *** harshs has joined #openstack-containers | 02:41 | |
| *** suro-patz has joined #openstack-containers | 03:01 | |
| *** harshs has quit IRC | 03:05 | |
| *** kebray has joined #openstack-containers | 03:08 | |
| *** achanda has quit IRC | 03:09 | |
| *** dims has joined #openstack-containers | 03:09 | |
| *** eghobo has joined #openstack-containers | 03:11 | |
| *** dims has quit IRC | 03:16 | |
| *** ganeshna has joined #openstack-containers | 03:20 | |
| *** hongbin has quit IRC | 03:22 | |
| *** deepthi has joined #openstack-containers | 03:23 | |
| *** dave-mcc_ has quit IRC | 03:24 | |
| *** madhuri has joined #openstack-containers | 03:29 | |
| madhuri | suro-patz: Hi | 03:29 |
| *** eghobo has quit IRC | 03:30 | |
| *** dimtruck is now known as zz_dimtruck | 03:32 | |
| *** ganeshna has quit IRC | 03:33 | |
| *** ganeshna has joined #openstack-containers | 03:35 | |
| *** tbh has joined #openstack-containers | 03:39 | |
| *** ganeshna has quit IRC | 03:40 | |
| *** vilobhmm111 has quit IRC | 03:40 | |
| *** madhuri has quit IRC | 03:42 | |
| *** harshs has joined #openstack-containers | 03:42 | |
| *** eghobo has joined #openstack-containers | 03:44 | |
| *** Kennan2 is now known as Kennnan | 03:45 | |
| openstackgerrit | Hua Wang proposed openstack/magnum: Add registry_address to db and api https://review.openstack.org/225400 | 03:47 |
| *** Tango has joined #openstack-containers | 03:50 | |
| *** vilobhmm11 has joined #openstack-containers | 03:53 | |
| *** vilobhmm11 has quit IRC | 03:54 | |
| *** wanghua has quit IRC | 04:06 | |
| *** wanghua has joined #openstack-containers | 04:06 | |
| *** VikasC has joined #openstack-containers | 04:12 | |
| *** Marga_ has joined #openstack-containers | 04:12 | |
| *** diga has joined #openstack-containers | 04:12 | |
| *** ganeshna has joined #openstack-containers | 04:14 | |
| *** chandankumar has joined #openstack-containers | 04:27 | |
| *** sdake_ has joined #openstack-containers | 04:28 | |
| *** achanda has joined #openstack-containers | 04:29 | |
| *** sdake has quit IRC | 04:31 | |
| *** Marga_ has quit IRC | 04:34 | |
| *** Marga_ has joined #openstack-containers | 04:35 | |
| *** unicell has joined #openstack-containers | 04:35 | |
| *** Marga_ has quit IRC | 04:39 | |
| *** eghobo_ has joined #openstack-containers | 04:43 | |
| *** vimal has joined #openstack-containers | 04:44 | |
| *** harshs_ has joined #openstack-containers | 04:45 | |
| *** eghobo has quit IRC | 04:46 | |
| *** suro-patz has quit IRC | 04:46 | |
| *** harshs has quit IRC | 04:47 | |
| *** harshs_ is now known as harshs | 04:47 | |
| *** Marga_ has joined #openstack-containers | 04:50 | |
| *** suro-patz has joined #openstack-containers | 04:54 | |
| *** suro-patz has quit IRC | 05:00 | |
| *** dims has joined #openstack-containers | 05:13 | |
| *** Marga_ has quit IRC | 05:15 | |
| *** Marga_ has joined #openstack-containers | 05:15 | |
| *** dims has quit IRC | 05:18 | |
| *** mathspanda has joined #openstack-containers | 05:30 | |
| *** achanda has quit IRC | 05:36 | |
| *** harshs has quit IRC | 05:44 | |
| *** Marga_ has quit IRC | 05:49 | |
| *** ganeshna has quit IRC | 05:55 | |
| *** sdake_ is now known as sdake | 05:56 | |
| *** chandankumar has quit IRC | 06:05 | |
| openstackgerrit | Vilobh Meshram proposed openstack/python-magnumclient: Magnum client: Pass bay_uuid to Pod Read/Write API https://review.openstack.org/228734 | 06:05 |
| *** suro-patz has joined #openstack-containers | 06:08 | |
| *** ganeshna has joined #openstack-containers | 06:12 | |
| *** irenab has quit IRC | 06:13 | |
| *** shuquan has joined #openstack-containers | 06:14 | |
| *** mathspanda has quit IRC | 06:14 | |
| *** openstackgerrit has quit IRC | 06:16 | |
| *** openstackgerrit has joined #openstack-containers | 06:16 | |
| *** fawadkhaliq has joined #openstack-containers | 06:21 | |
| *** eghobo_ has quit IRC | 06:24 | |
| *** eghobo has joined #openstack-containers | 06:25 | |
| *** fawadkhaliq has quit IRC | 06:30 | |
| *** sdake_ has joined #openstack-containers | 06:33 | |
| *** sdake has quit IRC | 06:36 | |
| openstackgerrit | Vilobh Meshram proposed openstack/python-magnumclient: Magnum client: Pass bay_uuid to Service Read/Write API https://review.openstack.org/228743 | 06:37 |
| *** Marga_ has joined #openstack-containers | 06:39 | |
| *** irenab has joined #openstack-containers | 06:46 | |
| *** mathspanda has joined #openstack-containers | 06:46 | |
| *** suro-patz has quit IRC | 06:49 | |
| *** ganeshna has quit IRC | 06:49 | |
| *** ganeshna has joined #openstack-containers | 06:50 | |
| *** eghobo has quit IRC | 06:55 | |
| *** ganeshna has quit IRC | 06:58 | |
| *** BertrandN has joined #openstack-containers | 06:59 | |
| *** ganeshna has joined #openstack-containers | 07:01 | |
| *** jwcroppe has joined #openstack-containers | 07:04 | |
| openstackgerrit | Vilobh Meshram proposed openstack/python-magnumclient: Magnum client: Pass bay_uuid to RC Read/Write API https://review.openstack.org/228750 | 07:05 |
| *** ganeshna has quit IRC | 07:06 | |
| *** sdake_ is now known as sdake | 07:10 | |
| *** Tango has quit IRC | 07:16 | |
| *** BertrandN has quit IRC | 07:23 | |
| *** ganeshna has joined #openstack-containers | 07:28 | |
| *** ganeshna has quit IRC | 07:33 | |
| *** kebray has quit IRC | 07:38 | |
| openstackgerrit | Eli Qiao proposed openstack/magnum: Swarm: Set to CREATE_FAILED status if swarm services not started https://review.openstack.org/228762 | 07:39 |
| *** BertrandN has joined #openstack-containers | 07:40 | |
| *** exploreshaifali has joined #openstack-containers | 07:40 | |
| *** alex_klimov has joined #openstack-containers | 07:42 | |
| *** ganeshna has joined #openstack-containers | 07:43 | |
| *** madhuri has joined #openstack-containers | 07:50 | |
| *** mathspanda has quit IRC | 07:53 | |
| *** shuquan has quit IRC | 07:54 | |
| *** shuquan has joined #openstack-containers | 07:56 | |
| eliqiao | wanghua: ping | 07:59 |
| openstackgerrit | Eli Qiao proposed openstack/magnum: Add functional test cases(containers actions) for swarm https://review.openstack.org/226125 | 08:02 |
| openstackgerrit | Eli Qiao proposed openstack/magnum: Add functional test cases for swarm https://review.openstack.org/221633 | 08:02 |
| *** ganeshna has quit IRC | 08:07 | |
| *** j___ has joined #openstack-containers | 08:18 | |
| eliqiao | wanghua: around? | 08:36 |
| *** exploreshaifali has quit IRC | 08:45 | |
| *** erkules has quit IRC | 08:46 | |
| *** erkules has joined #openstack-containers | 08:46 | |
| *** shuquan has quit IRC | 08:49 | |
| *** shuquan has joined #openstack-containers | 08:51 | |
| *** Kennnan2 has joined #openstack-containers | 08:54 | |
| *** Kennnan has quit IRC | 08:54 | |
| *** ganeshna has joined #openstack-containers | 09:00 | |
| *** daneyon_ has joined #openstack-containers | 09:11 | |
| *** daneyon has quit IRC | 09:11 | |
| *** ganeshna has quit IRC | 09:14 | |
| *** dims has joined #openstack-containers | 09:16 | |
| *** ganeshna has joined #openstack-containers | 09:19 | |
| *** j___ has quit IRC | 09:19 | |
| *** dims has quit IRC | 09:22 | |
| *** diga has quit IRC | 09:25 | |
| *** j___ has joined #openstack-containers | 09:26 | |
| *** madhuri has quit IRC | 09:36 | |
| *** mathspanda has joined #openstack-containers | 09:38 | |
| openstackgerrit | Eli Qiao proposed openstack/magnum: Add functional test cases(containers actions) for swarm https://review.openstack.org/226125 | 09:39 |
| *** diga has joined #openstack-containers | 09:41 | |
| *** mathspanda has quit IRC | 09:42 | |
| *** zhenguo has quit IRC | 09:43 | |
| *** dims has joined #openstack-containers | 09:47 | |
| *** ganeshna has quit IRC | 09:51 | |
| *** ganeshna has joined #openstack-containers | 09:54 | |
| *** kbyrne has quit IRC | 09:58 | |
| *** shuquan has quit IRC | 09:58 | |
| *** kbyrne has joined #openstack-containers | 10:03 | |
| wanghua | eliqiao: what's up | 10:15 |
| openstackgerrit | Merged openstack/magnum: Introduce BayType that declares valid COEs https://review.openstack.org/228294 | 10:20 |
| openstackgerrit | Eli Qiao proposed openstack/magnum: Swarm: Set to CREATE_FAILED status if swarm services not started https://review.openstack.org/228762 | 10:22 |
| eliqiao | wanghua: ^^^ ,replied in PS1 | 10:22 |
| *** madhuri_ has joined #openstack-containers | 10:23 | |
| wanghua | eliqiao:ok | 10:23 |
| *** ganeshna has quit IRC | 10:24 | |
| *** ganeshna has joined #openstack-containers | 10:27 | |
| *** ganeshna has quit IRC | 10:28 | |
| *** ganeshna has joined #openstack-containers | 10:32 | |
| *** ganeshna has quit IRC | 10:34 | |
| *** sdake_ has joined #openstack-containers | 10:50 | |
| *** wanghua has quit IRC | 10:52 | |
| openstackgerrit | Merged openstack/magnum: Fix container action debug log not accurate https://review.openstack.org/226194 | 10:53 |
| openstackgerrit | Merged openstack/magnum: Backend support for magnum service https://review.openstack.org/220702 | 10:53 |
| *** sdake has quit IRC | 10:54 | |
| openstackgerrit | Kai Qiang Wu(Kennan) proposed openstack/magnum: Make network-driver check based on COE type https://review.openstack.org/228838 | 10:54 |
| *** ganeshna has joined #openstack-containers | 11:02 | |
| *** ganeshna has quit IRC | 11:03 | |
| *** exploreshaifali has joined #openstack-containers | 11:03 | |
| *** ganeshna has joined #openstack-containers | 11:03 | |
| *** madhuri_ has quit IRC | 11:11 | |
| *** i316653 has joined #openstack-containers | 11:20 | |
| *** i316653 has quit IRC | 11:29 | |
| *** deepthi has quit IRC | 11:29 | |
| *** exploreshaifali has quit IRC | 11:32 | |
| openstackgerrit | Madhuri Kumari proposed openstack/magnum: Make Kubernetes API call secure https://review.openstack.org/207324 | 11:33 |
| openstackgerrit | Madhuri Kumari proposed openstack/magnum: Add TLS support in heat kubernetes https://review.openstack.org/202873 | 11:33 |
| *** madhuri has joined #openstack-containers | 11:36 | |
| *** VikasC has quit IRC | 11:56 | |
| *** exploreshaifali has joined #openstack-containers | 12:07 | |
| *** ganeshna has quit IRC | 12:09 | |
| openstackgerrit | Tom Cammann proposed openstack/magnum: [WIP] Generate heat templates from master template https://review.openstack.org/211771 | 12:27 |
| *** diga has quit IRC | 12:27 | |
| *** tbh has quit IRC | 12:28 | |
| *** ganeshna has joined #openstack-containers | 12:28 | |
| *** madhuri has quit IRC | 12:33 | |
| *** dims_ has joined #openstack-containers | 12:36 | |
| openstackgerrit | Tom Cammann proposed openstack/magnum: Create master tmptls for k8s ironic/coreos bay https://review.openstack.org/210169 | 12:37 |
| openstackgerrit | Tom Cammann proposed openstack/magnum: [WIP] Generate heat templates from master template https://review.openstack.org/211771 | 12:38 |
| *** tbh has joined #openstack-containers | 12:40 | |
| *** dims has quit IRC | 12:40 | |
| *** exploreshaifali has quit IRC | 12:40 | |
| *** tbh has quit IRC | 12:42 | |
| *** ganeshna has quit IRC | 12:47 | |
| *** ganeshna has joined #openstack-containers | 12:48 | |
| *** alejandrito has joined #openstack-containers | 12:52 | |
| *** dims_ has quit IRC | 12:53 | |
| *** dims has joined #openstack-containers | 13:01 | |
| *** jruano has joined #openstack-containers | 13:02 | |
| *** dave-mccowan has joined #openstack-containers | 13:03 | |
| *** i316653 has joined #openstack-containers | 13:08 | |
| *** annegentle has joined #openstack-containers | 13:11 | |
| *** alejandrito has quit IRC | 13:28 | |
| *** rlrossit has joined #openstack-containers | 13:29 | |
| *** banix has joined #openstack-containers | 13:33 | |
| openstackgerrit | Bradley Jones proposed openstack/magnum-ui: API for baymodel https://review.openstack.org/228899 | 13:35 |
| *** rpothier has joined #openstack-containers | 13:38 | |
| *** alejandrito has joined #openstack-containers | 13:40 | |
| *** dane_leblanc has joined #openstack-containers | 13:40 | |
| *** banix has quit IRC | 13:41 | |
| openstackgerrit | Bradley Jones proposed openstack/magnum-ui: API for Bays https://review.openstack.org/228905 | 13:44 |
| openstackgerrit | Bradley Jones proposed openstack/magnum-ui: API for BayModel https://review.openstack.org/228899 | 13:47 |
| openstackgerrit | Bradley Jones proposed openstack/magnum-ui: API for Bays https://review.openstack.org/228905 | 13:53 |
| *** jruano has quit IRC | 13:53 | |
| *** irenab has quit IRC | 13:54 | |
| *** zz_dimtruck is now known as dimtruck | 14:00 | |
| *** annegentle has quit IRC | 14:03 | |
| *** madhuri_ has joined #openstack-containers | 14:03 | |
| *** vimal has quit IRC | 14:05 | |
| madhuri_ | tcammann1: Hi | 14:05 |
| madhuri_ | tcammann1: About this patch https://review.openstack.org/#/c/202873/23 | 14:05 |
| *** adrian_otto has joined #openstack-containers | 14:10 | |
| *** adrian_otto has quit IRC | 14:11 | |
| *** achanda has joined #openstack-containers | 14:15 | |
| *** madhuri_ has quit IRC | 14:17 | |
| *** adrian_otto has joined #openstack-containers | 14:18 | |
| *** achanda has quit IRC | 14:22 | |
| *** madhuri has joined #openstack-containers | 14:23 | |
| madhuri | adrian_otto: Hi | 14:24 |
| adrian_otto | hi madhuri | 14:24 |
| *** julim has quit IRC | 14:25 | |
| madhuri | Do you have time to review some TLS patches? | 14:25 |
| madhuri | Only two patches are left to be merged | 14:25 |
| *** wznoinsk has quit IRC | 14:29 | |
| *** annegentle has joined #openstack-containers | 14:29 | |
| madhuri | adrian_otto: #link https://review.openstack.org/#/c/207324/ and https://review.openstack.org/#/c/202873/ | 14:30 |
| *** julim has joined #openstack-containers | 14:30 | |
| *** julim has quit IRC | 14:30 | |
| adrian_otto | great, madhuri. I will have a look. | 14:31 |
| *** julim has joined #openstack-containers | 14:31 | |
| *** julim has quit IRC | 14:32 | |
| *** julim has joined #openstack-containers | 14:33 | |
| openstackgerrit | Bradley Jones proposed openstack/magnum-ui: API for BayModel https://review.openstack.org/228899 | 14:34 |
| *** Drago has joined #openstack-containers | 14:35 | |
| *** Drago has quit IRC | 14:35 | |
| *** Drago has joined #openstack-containers | 14:36 | |
| *** madhuri has quit IRC | 14:39 | |
| *** banix has joined #openstack-containers | 14:45 | |
| *** madhuri has joined #openstack-containers | 14:46 | |
| openstackgerrit | Ronald Bradford proposed openstack/magnum: Add heat template plugins to documentation https://review.openstack.org/228619 | 14:46 |
| *** wznoinsk has joined #openstack-containers | 14:46 | |
| wznoinsk | hi all | 14:47 |
| wznoinsk | to get to know the roadmap for magnum, would I take whatever is in blueprints (https://blueprints.launchpad.net/magnum) or is there another/more comprehensive list for Magnum and also its networking? | 14:49 |
| *** chandankumar has joined #openstack-containers | 14:49 | |
| *** achanda has joined #openstack-containers | 14:51 | |
| *** i316653 has quit IRC | 14:53 | |
| *** irenab has joined #openstack-containers | 14:57 | |
| *** Tango has joined #openstack-containers | 14:58 | |
| *** annegentle has quit IRC | 14:59 | |
| *** achanda has quit IRC | 14:59 | |
| *** annegentle has joined #openstack-containers | 15:00 | |
| *** dims has quit IRC | 15:04 | |
| *** bradjones has joined #openstack-containers | 15:07 | |
| *** bradjones is now known as Guest89321 | 15:08 | |
| *** Guest89321 has quit IRC | 15:08 | |
| *** bradjones_alt has joined #openstack-containers | 15:10 | |
| *** dims__ has joined #openstack-containers | 15:16 | |
| *** kebray has joined #openstack-containers | 15:17 | |
| *** BertrandN has quit IRC | 15:25 | |
| *** j___ has quit IRC | 15:30 | |
| openstackgerrit | Merged openstack/magnum: Make network-driver check based on COE type https://review.openstack.org/228838 | 15:31 |
| *** ganeshna has quit IRC | 15:45 | |
| adrian_otto | Our team meeting will begin in #openstack-meeting-alt in about 15 minutes at 1600 UTC. See you all there! | 15:45 |
| *** ganeshna has joined #openstack-containers | 15:45 | |
| *** hongbin has joined #openstack-containers | 15:48 | |
| *** wanghua has joined #openstack-containers | 15:50 | |
| *** fawadkhaliq has joined #openstack-containers | 15:59 | |
| *** eghobo has joined #openstack-containers | 15:59 | |
| *** diga has joined #openstack-containers | 15:59 | |
| openstackgerrit | Tom Cammann proposed openstack/magnum: [WIP] Generate heat templates from master template https://review.openstack.org/211771 | 16:02 |
| openstackgerrit | Tom Cammann proposed openstack/magnum: Create master tmptls for k8s ironic/coreos bay https://review.openstack.org/210169 | 16:02 |
| *** eghobo_ has joined #openstack-containers | 16:02 | |
| *** vilobhmm has joined #openstack-containers | 16:02 | |
| hongbin | adrian_otto: Hi Adrian. Are you there? Now should be the meeting time | 16:03 |
| adrian_otto | starting now, sorry for delay | 16:04 |
| hongbin | np | 16:04 |
| *** eghobo has quit IRC | 16:05 | |
| *** diga has quit IRC | 16:09 | |
| *** diga has joined #openstack-containers | 16:10 | |
| *** annegentle has quit IRC | 16:12 | |
| *** suro-patz has joined #openstack-containers | 16:15 | |
| openstackgerrit | Merged openstack/magnum: Add heat template plugins to documentation https://review.openstack.org/228619 | 16:16 |
| *** gangil has joined #openstack-containers | 16:18 | |
| *** alex_klimov has quit IRC | 16:24 | |
| *** unicell has quit IRC | 16:24 | |
| *** chandankumar has quit IRC | 16:28 | |
| openstackgerrit | Egor Guz proposed openstack/magnum: Add details to developer quick-start Mesos section https://review.openstack.org/228225 | 16:29 |
| *** sthillma has joined #openstack-containers | 16:31 | |
| *** sthillma_ has joined #openstack-containers | 16:33 | |
| openstackgerrit | Tom Cammann proposed openstack/magnum: Rename "insecure" to "tls_disabled" https://review.openstack.org/229035 | 16:35 |
| *** sthillma has quit IRC | 16:36 | |
| *** sthillma_ is now known as sthillma | 16:36 | |
| *** dims__ has quit IRC | 16:38 | |
| *** dims__ has joined #openstack-containers | 16:39 | |
| *** jruano has joined #openstack-containers | 16:43 | |
| openstackgerrit | Vilobh Meshram proposed openstack/python-magnumclient: Client: Pass bay_uuid to Service Read/Write API https://review.openstack.org/228743 | 16:46 |
| openstackgerrit | Vilobh Meshram proposed openstack/python-magnumclient: Client: Pass bay_uuid to Pod Read/Write API https://review.openstack.org/228734 | 16:46 |
| openstackgerrit | Vilobh Meshram proposed openstack/python-magnumclient: Client: Pass bay_uuid to RC Read/Write API https://review.openstack.org/228750 | 16:46 |
| *** kebray has quit IRC | 16:46 | |
| openstackgerrit | Tom Cammann proposed openstack/magnum: Fix E251 unnecessarily ignored pep8 rule https://review.openstack.org/224198 | 16:50 |
| *** chandankumar has joined #openstack-containers | 16:51 | |
| openstackgerrit | Tom Cammann proposed openstack/magnum: Rename "insecure" to "tls_disabled" https://review.openstack.org/229035 | 16:54 |
| *** madhuri has quit IRC | 16:55 | |
| suro-patz | madhuri: Let me know, if you want me to take care anything on https://review.openstack.org/#/c/207324/ | 16:58 |
| *** unicell has joined #openstack-containers | 17:00 | |
| daneyon_ | adrian_otto et al, to continue the discussion on the --tls flag and this link: https://docs.docker.com/articles/https/ | 17:01 |
| * adrian_otto here | 17:01 | |
| daneyon_ | --tls is used in combo with tlscert and tlskey for the daemon not to auth the client. | 17:02 |
| *** jruano has quit IRC | 17:03 | |
| adrian_otto | my understanding is that —tls is like saying "SSL ON" | 17:03 |
| daneyon_ | The client can use the --tls flag to auth the daemon based on a public/default CA pool or use it in combo with tlscert tlskey to authenticate with client certificate, do not authenticate server based on given CA. | 17:04 |
| adrian_otto | and the tlsverify is a way to use an X.509 as an identity | 17:04 |
| *** diga has quit IRC | 17:04 | |
| daneyon_ | adrian_otto take a few mins to review the link | 17:05 |
| *** kebray has joined #openstack-containers | 17:05 | |
| adrian_otto | the important part is that the server verifies the cert supplied by the client | 17:05 |
| daneyon_ | --tls is != to ssl on | 17:05 |
| *** dane_leblanc has quit IRC | 17:05 | |
| daneyon_ | adrian_otto from what i see and have tested, the mutual auth is implemented and works... just seems like an unnecesssary --tls is added to the daemon init. I wanted to get feedback from apmelton and others that did the work to make sure this assessment is accurate. | 17:06 |
| adrian_otto | I see… the section labeled "daemon modes" is the important one here | 17:07 |
| adrian_otto | we want these flags: tlsverify, tlscacert, tlscert, tlskey | 17:07 |
| adrian_otto | Not: tls, tlscert, tlskey | 17:07 |
| adrian_otto | I think apmelton is AFK right now | 17:08 |
| adrian_otto | actually, this is really easy for me to verify. Give me a few minutes and I will test it out | 17:08 |
| daneyon_ | adrian_otto https://github.com/openstack/magnum/blob/master/magnum/templates/docker-swarm/fragments/write-docker-service.sh#L26-L30 | 17:11 |
| daneyon_ | We have those 3 + the --tls | 17:11 |
| daneyon_ | I think we can get rid of the 1 line. Before doing so, I just wanted to get feedback from the tls crew | 17:12 |
| daneyon_ | adrian_otto I will test 1 more time w/o --tls. It worked for me yesterday but I just want to double-check. | 17:12 |
| *** dane_leblanc has joined #openstack-containers | 17:13 | |
| *** wanghua has quit IRC | 17:14 | |
| *** vilobhmm has quit IRC | 17:15 | |
| *** harshs has joined #openstack-containers | 17:16 | |
| adrian_otto | this works: /usr/bin/docker daemon -H tcp://0.0.0.0:2376 -H unix:///var/run/docker.sock --storage-driver aufs --tlsverify --tlscacert /etc/docker/ca.pem --tlscert /etc/docker/server.pem --tlskey /etc/docker/server-key.pem --label provider=rackspace | 17:16 |
| suro-patz | hongbin: regarding, your comment on https://review.openstack.org/#/c/226078/6/magnum/conductor/api.py | 17:21 |
| openstackgerrit | Tom Cammann proposed openstack/magnum: Reduce complexity of filter methods https://review.openstack.org/229057 | 17:22 |
| suro-patz | hongbin: I actually had followed, the way Bay/Pod lists are implemented | 17:22 |
| suro-patz | hongbin: https://github.com/openstack/magnum/blob/master/magnum/conductor/api.py#L38 | 17:23 |
| adrian_otto | daneyon_: which review has the —tls in it? | 17:25 |
| daneyon_ | adrian_otto not sure off hand | 17:26 |
| daneyon_ | their is no active review for fixing the --tls | 17:26 |
| daneyon_ | I just tested and works for me | 17:26 |
| adrian_otto | ok, it's probably in our heat template. I'll take a look | 17:26 |
| daneyon_ | I went into the docker/swarm-manager systemd unit files and removed --tls, reloaded the daemon, restarted the services (docker/swarm-manager) and everything works as expected | 17:27 |
| daneyon_ | ^ # docker -H tcp://10.0.0.3:2376 --tlsverify --tlscacert=/etc/docker/ca.crt --tlskey=/etc/docker/server.key --tlscert=/etc/docker/server.crt run -d --name test1 -p 8080 larsks/thttpd | 17:27 |
| daneyon_ | adrian_otto I know the exact changes | 17:28 |
| daneyon_ | I will makes the changes and do a test deploy in my lab. If all is well, I'll create a review | 17:28 |
| *** achanda has joined #openstack-containers | 17:29 | |
| *** chandankumar has quit IRC | 17:29 | |
| adrian_otto | ok | 17:29 |
| daneyon_ | adrian_otto should i file a bug on this, or is this simple enough to submit a review? | 17:29 |
| *** fawadkhaliq has quit IRC | 17:30 | |
| adrian_otto | this should be a bug | 17:30 |
| adrian_otto | I can file that for you | 17:30 |
| adrian_otto | and I will give you the number while you form a patch | 17:30 |
| openstackgerrit | Surojit Pathak proposed openstack/magnum: Adding API support for magnum service https://review.openstack.org/226078 | 17:30 |
| *** ganeshna has quit IRC | 17:31 | |
| suro-patz | hongbin: Kennan2: https://review.openstack.org/#/c/226078/ | 17:31 |
| eghobo_ | daneyon_: do you have a minute? | 17:31 |
| daneyon_ | sure | 17:32 |
| eghobo_ | about LB for etcd, could you share details? | 17:32 |
| *** ganeshna has joined #openstack-containers | 17:32 | |
| *** jruano has joined #openstack-containers | 17:32 | |
| *** coolsvap has quit IRC | 17:33 | |
| adrian_otto | daneyon: https://bugs.launchpad.net/magnum/+bug/1500982 | 17:33 |
| openstack | Launchpad bug 1500982 in Magnum "Remove --tls flag from socker-swarm" [Critical,Triaged] - Assigned to Daneyon Hansen (danehans) | 17:33 |
| adrian_otto | I call out the exact code to fix | 17:34 |
| adrian_otto | whops, typo in the title… fixing htat | 17:34 |
| daneyon_ | eghobo_ sure, but i'm basically replicating what is done in the k8s heat templates for swarm. | 17:34 |
| adrian_otto | fixed. | 17:34 |
| daneyon_ | have you looked at the k8s templates to see how load-balancing is being implemented? | 17:34 |
| daneyon_ | adrian_otto thx. I should have a review ready in the next hour. | 17:35 |
| *** julim has quit IRC | 17:36 | |
| daneyon_ | eghobo_ adrian_otto apmelton From my testing, it appears that networking for swarm w/o flannel does not completely work. | 17:36 |
| eghobo_ | yes, but I haven't seen any load-balancing ):, maybe I wasn't give enough attention | 17:36 |
| daneyon_ | Do any of you have a working swarm clsuter up and running using the latest code? | 17:36 |
| *** ganeshna has quit IRC | 17:37 | |
| eghobo_ | daneyon_: no, but eli told if you use insecure with atomic-3 it should | 17:37 |
| *** julim has joined #openstack-containers | 17:37 | |
| *** coolsvap has joined #openstack-containers | 17:37 | |
| daneyon_ | eghobo_ start here: https://github.com/openstack/magnum/blob/master/magnum/templates/heat-kubernetes/kubecluster.yaml#L236-L252 | 17:37 |
| daneyon_ | eghobo_ do you have a working swarm cluster using the latest magnum code? | 17:39 |
| eghobo_ | daneyon_: thx I missed it. but it means magnum need neutron with lbaas, adoption is going to be hard ): | 17:39 |
| openstackgerrit | Surojit Pathak proposed openstack/magnum: Documentation update for 'magnum service-list' https://review.openstack.org/226133 | 17:40 |
| *** exploreshaifali has joined #openstack-containers | 17:40 | |
| eghobo_ | daneyon_: no, all my attempts last couple days failed atomic-5 broken | 17:40 |
| daneyon_ | eghobo_ we need to load balance the control plane for ha and scaling purposes. No one will put prod works loads in a cluster that will die if 1 mgt service fails. | 17:41 |
| *** exploreshaifali has quit IRC | 17:41 | |
| openstackgerrit | Vilobh Meshram proposed openstack/python-magnumclient: Client: Pass bay_uuid to Service Read/Write API https://review.openstack.org/228743 | 17:41 |
| daneyon_ | eghobo_ For operators that do not use neutron lbaas, I would encourage us to deploy deploy load-balancing services in the bay, either as seperate vm's are within the mgt nodes | 17:42 |
| *** rlrossit has quit IRC | 17:42 | |
| eghobo_ | daneyon_: I understand but I know but not many people have lbaas and use it. we are more looking to actavia side | 17:42 |
| daneyon_ | eghobo_ understood. I prefer deploying the load-balancing services in the cluster, but using neutron lbaas was a decision made before I was involved in the project. | 17:44 |
| daneyon_ | Until someone ports the neutron lbaas work into the cluster, it will stay. Feel free to bring up the issue on the ML to solicit feedback. | 17:45 |
| eghobo_ | daneyon_: understood, but in our world all LBs are hw or appliances and I need to figure out how to deal with it ): | 17:45 |
| daneyon_ | eghobo_ Again, bring up your isse on the ML. It's a very valid issue. | 17:46 |
| *** rlrossit has joined #openstack-containers | 17:47 | |
| eghobo_ | daneyon_: sure, let me do some research first :) | 17:47 |
| daneyon_ | eghobo_ in your scenario, magnum would need to support external 3rd party LBs. | 17:47 |
| *** madhuri has joined #openstack-containers | 17:48 | |
| eghobo_ | daneyon_: I am not sure it's magnum issue, maybe heat need support octavia or we can pass all etcd ips to the client or create dns record with multiply ips | 17:49 |
| daneyon_ | eghobo_ in this scenario, I think we would need to take a long hard look at how internal LB'ing is performed. I could see the need for exposing a baymodel attr named load_balancing_mode. The default method would be neutron. Other values could be haproxy, which would implement haproxy load-balancing in the bay, F5, etc.. | 17:50 |
| eghobo_ | daneyon_: it's option. one off the topic question, can I run flannel in container? I mean I don't want to have native service. | 17:52 |
| daneyon_ | eghobo_ flannel should be able to run in a container. I believe this has been accomplished by the kube community. | 17:56 |
| daneyon_ | I would expect flannel to move into a container during a future iteration. | 17:56 |
| *** sthillma_ has joined #openstack-containers | 17:56 | |
| *** Marga_ has quit IRC | 17:56 | |
| daneyon_ | The 1st iteration is to simply get something that functions and does not break existing stuff. | 17:57 |
| *** chandankumar has joined #openstack-containers | 17:57 | |
| *** annegentle has joined #openstack-containers | 17:58 | |
| daneyon_ | i had a quick look at octavia, seems like this is where we should head in the future. I don't think it's ready (0.5 in Liberty) for us to include it. If you are involved in that community, can you look into their plans for heat support? We would need to make sure we can deploy octavia using heat resrouces. | 17:58 |
| *** sthillma has quit IRC | 17:58 | |
| *** sthillma_ is now known as sthillma | 17:58 | |
| openstackgerrit | Tom Cammann proposed openstack/magnum: Reduce method complexity including poll_and_check https://review.openstack.org/229072 | 17:59 |
| eghobo_ | it's fine, lets embrace immutable infra in M, really like Kub idea when they have just kublet :). but I couldn't find example for falnnel | 17:59 |
| *** dims has joined #openstack-containers | 18:00 | |
| eghobo_ | I am not involve in octavia at all, but I know two big OpenStack operators who is moving to this direction | 18:00 |
| *** dims__ has quit IRC | 18:02 | |
| *** adrian_otto has quit IRC | 18:02 | |
| hongbin | suro-patz: sorry, was in lunch before | 18:02 |
| *** adrian_otto has joined #openstack-containers | 18:03 | |
| suro-patz | hongbin: I answered some of your comments in the review https://review.openstack.org/#/c/226078/ | 18:03 |
| hongbin | suro-patz: saw that | 18:03 |
| hongbin | suro-patz: I still don't think you have to check out the handler in this patch | 18:04 |
| *** sthillma has quit IRC | 18:04 | |
| hongbin | suro-patz: It looks redundant just by looking that patch | 18:04 |
| suro-patz | Ok, if you suggest, I will remove that - only thing is the code was ready - and a temporary place holder | 18:04 |
| *** dane_leblanc has quit IRC | 18:05 | |
| suro-patz | hongbin: I knew this, and was trying to save some later work | 18:05 |
| suro-patz | but, if you feel strongly, I will remove that | 18:05 |
| hongbin | suro-patz: no, not very strongly | 18:05 |
| hongbin | It is actually up to you | 18:06 |
| suro-patz | I felt whenever I/(someone) have to add enable/disable, this code will be required, which I had already figured out, so I was saving some look-around in future :) | 18:07 |
| suro-patz | I will remove that, it does not make sense to add code that is not used | 18:07 |
| openstackgerrit | Tom Cammann proposed openstack/magnum: Rename "insecure" to "tls_disabled" https://review.openstack.org/229035 | 18:08 |
| suro-patz | hongbin: ^^ | 18:09 |
| hongbin | suro-patz: ack. Just let me know when you finish the patch. I am ready to give +2 | 18:10 |
| openstackgerrit | Madhuri Kumari proposed openstack/python-magnumclient: Rename 'insecure' baymodel attribute to 'tls_disabled'. https://review.openstack.org/229074 | 18:12 |
| *** dane_leblanc has joined #openstack-containers | 18:12 | |
| suro-patz | hongbin: Thanks for the follow-ups, as always | 18:12 |
| hongbin | np | 18:13 |
| adrian_otto | hongbin, are you ready to +2,+A this patch: https://review.openstack.org/229035 | 18:16 |
| adrian_otto | we would like that to merge prior to approving https://review.openstack.org/202873 | 18:17 |
| *** Tango has quit IRC | 18:17 | |
| hongbin | adrian_otto: sure. Will review it soon. | 18:17 |
| adrian_otto | tx! | 18:17 |
| hongbin | welcome | 18:17 |
| *** Marga_ has joined #openstack-containers | 18:19 | |
| hongbin | adrian_otto: tcammann_ tcammann1 About the patch https://review.openstack.org/229035 , there is a versioning issue | 18:21 |
| hongbin | which I have commented inline | 18:21 |
| adrian_otto | ok, checking | 18:21 |
| adrian_otto | great catch, hongbin! | 18:22 |
| hongbin | It should be an easy fix. After that, I am ready to give +2 | 18:23 |
| adrian_otto | tcammann1: are you available to make the patch? | 18:23 |
| adrian_otto | s/patch/revision/ | 18:23 |
| adrian_otto | if not I can upload a revision for you | 18:24 |
| *** sthillma has joined #openstack-containers | 18:24 | |
| adrian_otto | as long as we have a couple of cores ready to act on it | 18:24 |
| *** vilobhmm has joined #openstack-containers | 18:27 | |
| openstackgerrit | Adrian Otto proposed openstack/magnum: Rename "insecure" to "tls_disabled" https://review.openstack.org/229035 | 18:30 |
| adrian_otto | hongbin: madhuri: ok, there is the two character revision to that patch | 18:31 |
| vilobhmm | +1 looks good now | 18:32 |
| vilobhmm | after bumping to 1.6 | 18:32 |
| hongbin | lgtm | 18:33 |
| madhuri | hongbin: can you help reviewing this also https://review.openstack.org/#/c/207324/ | 18:37 |
| hongbin | madhuri: sure. Will do that | 18:37 |
| madhuri | Thanks hongbin | 18:37 |
| hongbin | np | 18:37 |
| openstackgerrit | Hongbin Lu proposed openstack/magnum: Implement bay monitoring and notifications https://review.openstack.org/215335 | 18:38 |
| *** madhuri_ has joined #openstack-containers | 18:40 | |
| *** madhuri has quit IRC | 18:42 | |
| openstackgerrit | Surojit Pathak proposed openstack/magnum: Adding API support for magnum service https://review.openstack.org/226078 | 18:46 |
| suro-patz | hongbin: ^^ | 18:46 |
| hongbin | suro-patz: K. Will get back to your patch | 18:47 |
| *** jasondotstar is now known as jasondotstar_afk | 18:47 | |
| suro-patz | vilobhmm: regarding https://review.openstack.org/#/c/207324/9/magnum/objects/x509keypair.py | 18:48 |
| suro-patz | I had actually asked for a reference from you, if you have, on version changing due to adding a method | 18:48 |
| suro-patz | normally version is used to encode/decode across releases | 18:49 |
| suro-patz | which is meaning for changing a field attribute | 18:50 |
| vilobhmm | suro-patz : https://github.com/openstack/magnum/blob/master/doc/source/objects.rst ; https://github.com/openstack/nova/blob/master/nova/objects/service.py#L76 hope that helps | 18:50 |
| vilobhmm | also included link in the review now and before as well | 18:50 |
| suro-patz | vilobhmm: can you help me pointing a documentation on the reasoning for version updating while adding a method | 18:51 |
| vilobhmm | suro-patz : remotable methods are RPC-critical parts of the object alongwith the fields as you pointed out. | 18:53 |
| vilobhmm | https://github.com/openstack/magnum/blob/master/doc/source/objects.rst has more details | 18:53 |
| vilobhmm | and since this pattern is followed in other projects of openstack (example nova https://github.com/openstack/nova/blob/master/nova/objects/service.py#L76) IMHO we should be consistent since oslo versionobjects is something which is common to all | 18:54 |
| suro-patz | let's check quickly with oslo folks | 18:55 |
| hongbin | madhuri_: for the patch https://review.openstack.org/#/c/207324/ , I am not sure if we need to bump the version for adding a method | 18:56 |
| madhuri_ | hongbin: I'm working on revising it | 18:57 |
| hongbin | madhuri_: K. Besides that, it looks good to me. | 18:57 |
| suro-patz | madhuri_ hongbin: I am checking with oslo folks | 18:57 |
| suro-patz | if we need to bump the version for adding a method | 18:58 |
| suro-patz | vilobhmm: 's concern is correct | 19:00 |
| suro-patz | we need to bump up the version | 19:00 |
| suro-patz | dansmith: confirmed on oslo channel | 19:00 |
| vilobhmm | suro-patz : there we go ! | 19:00 |
| suro-patz | vilobhmm: good catch! | 19:00 |
| openstackgerrit | Madhuri Kumari proposed openstack/magnum: Make Kubernetes API call secure https://review.openstack.org/207324 | 19:01 |
| madhuri_ | vilobhmm: hongbin ^^ | 19:02 |
| madhuri_ | Thanks vilobhmm | 19:02 |
| vilobhmm | madhuri_ : np | 19:05 |
| *** Tango has joined #openstack-containers | 19:06 | |
| madhuri_ | adrian_otto: Can I rebase the patch tomorrow? | 19:14 |
| madhuri_ | It's too late here | 19:14 |
| suro-patz | madhuri_: Let me know, if I can be of any help | 19:14 |
| madhuri_ | suro-patz: Thanks. Sure. | 19:15 |
| suro-patz | madhuri_: quick sync up - we are talking about rebasing https://review.openstack.org/#/c/202873/23 | 19:16 |
| suro-patz | right? | 19:16 |
| madhuri_ | yes | 19:16 |
| suro-patz | madhuri_: I will take care of it, good night! | 19:16 |
| madhuri_ | suro-patz: Let adrian_otto reply | 19:17 |
| madhuri_ | If he is ok with tomorrow, then I will do it myself. Thanks for the help | 19:17 |
| adrian_otto | madhuri_: it's okay with me. Let's do it when you are fresh. | 19:17 |
| suro-patz | adrian_otto: madhuri_: ok :) | 19:18 |
| madhuri_ | adrian_otto: Thank you | 19:18 |
| madhuri_ | Good night all | 19:18 |
| *** madhuri_ has quit IRC | 19:18 | |
| vilobhmm | hongbin : thanks for the review | 19:19 |
| hongbin | welcome | 19:19 |
| vilobhmm | corresponding cli patches are here https://review.openstack.org/#/q/status:open+project:openstack/python-magnumclient+branch:master+topic:bp/objects-from-bay,n,z | 19:19 |
| *** chandankumar has quit IRC | 19:23 | |
| openstackgerrit | Daneyon Hansen proposed openstack/magnum: Removes --tls flag from docker and swarm-manager daemons https://review.openstack.org/229116 | 19:23 |
| *** bradjones_alt has quit IRC | 19:24 | |
| openstackgerrit | Vilobh Meshram proposed openstack/magnum: Rename "insecure" to "tls_disabled" https://review.openstack.org/229035 | 19:36 |
| vilobhmm | hongbin : looks like the build failed while merging https://review.openstack.org/#/c/229035/4 because in test_objects the version for baymodel object was not updated | 19:36 |
| vilobhmm | fixed it | 19:36 |
| vilobhmm | adrian_otto, hongbin : ^^ | 19:37 |
| vilobhmm | please check | 19:38 |
| adrian_otto | thanks vilobhmm | 19:42 |
| vilobhmm | adrian_otto : np | 19:42 |
| *** jruano has quit IRC | 19:55 | |
| eghobo_ | Tango: have you see Eli comments about Docker 1.7.1 bug? | 19:57 |
| Tango | eghobo_: Yep I took a quick look | 19:57 |
| Tango | eghobo_: Eli is suggesting a work-around, let's see if that works | 19:58 |
| Tango | eghobo_: I did replicate your scenario with busybox and Eli's | 19:59 |
| eghobo_ | I missed workaround, is it in bug? | 19:59 |
| Tango | eghobo_: It's mentioned in Eli's comment | 20:00 |
| eghobo_ | thx let me read it carefully | 20:01 |
| Tango | eghobo_: I did find that on a base Fedora 21 and docker 1.7.1, "docker run" works fine | 20:01 |
| Tango | eghobo_: Atomic may introduce something that changes the environment | 20:02 |
| eghobo_ | it's for sure, still not sure that I fully understand how it works ):. do you know why we are still with 21? it looks like 22 is everywhere | 20:04 |
| openstackgerrit | Merged openstack/magnum: Add bay_uuid to RC Read/Write API's https://review.openstack.org/228683 | 20:06 |
| openstackgerrit | Merged openstack/magnum: Add bay_uuid to Pod Read/Write API's https://review.openstack.org/228663 | 20:07 |
| openstackgerrit | Merged openstack/magnum: Add bay_uuid to Service Read/Write API's https://review.openstack.org/228679 | 20:07 |
| openstackgerrit | Merged openstack/magnum: Adding API support for magnum service https://review.openstack.org/226078 | 20:07 |
| hongbin | adrian_otto: tcammann_ tcammann1 dims sdake_ yuanying Kennnan2 Hi, if you have time, I need your help to review this patch https://review.openstack.org/#/c/215335/ . This review has been there for a while. Want to land it in this release. | 20:09 |
| dims | hongbin: ack, lining it up | 20:10 |
| hongbin | dims: thx | 20:10 |
| *** Marga_ has quit IRC | 20:12 | |
| *** Marga_ has joined #openstack-containers | 20:13 | |
| *** harshs has quit IRC | 20:14 | |
| adrian_otto | hongbin: yes, will review it! | 20:15 |
| hongbin | adrian_otto: thx | 20:15 |
| dims | hongbin: are we documenting the payload of the notification anywhere? | 20:16 |
| hongbin | dims: So far, it has been documented in ceilometer repo https://review.openstack.org/213562 | 20:18 |
| dims | ah thanks | 20:19 |
| openstackgerrit | Daneyon Hansen proposed openstack/magnum: Fixes Neutron security groups for Swarm Bay type https://review.openstack.org/229134 | 20:24 |
| dims | hongbin: we may want a config option to control the spacing (example nova has a sync_power_state_interval) | 20:25 |
| dims | hongbin: looks good | 20:25 |
| openstackgerrit | Merged openstack/magnum: Create master tmptls for k8s ironic/coreos bay https://review.openstack.org/210169 | 20:26 |
| hongbin | dims: thx. Will add the config option later. Actually will create a bug ticket for that | 20:26 |
| adrian_otto | hongbin: https://review.openstack.org/229116 is a critical security fix | 20:26 |
| dims | hongbin: ack | 20:26 |
| adrian_otto | hi dims!! | 20:26 |
| daneyon_ | apmelton I have the review up that removes the --tls flag: https://review.openstack.org/#/c/229116/ | 20:26 |
| dims | hi adrian_otto | 20:27 |
| daneyon_ | it would be great if you could cherry pick it and test it in your lab | 20:27 |
| * dims switching networks. be right back | 20:28 | |
| hongbin | adrian_otto: reviewing | 20:28 |
| *** dims has quit IRC | 20:28 | |
| *** dims has joined #openstack-containers | 20:29 | |
| openstackgerrit | Merged openstack/magnum: Implement bay monitoring and notifications https://review.openstack.org/215335 | 20:29 |
| *** Marga_ has quit IRC | 20:32 | |
| *** Marga_ has joined #openstack-containers | 20:33 | |
| rlrossit | daneyon_: https://review.openstack.org/#/c/229134 makes me uncomfortable, but it looks like it's definitely needed | 20:35 |
| rlrossit | I don't understand how there's any other way to do this... | 20:36 |
| daneyon_ | rlrossit understood. It's a temp fix until a better solution is created | 20:36 |
| daneyon_ | as of now, containers can not communicate over the network of a swarm bay type... that's an even bigger issue. | 20:36 |
| rlrossit | daneyon_: do you have an idea as to a better fix for it? | 20:36 |
| rlrossit | daneyon_: yeah, it's surprising no one has caught that... | 20:37 |
| openstackgerrit | Merged openstack/magnum: Removes --tls flag from docker and swarm-manager daemons https://review.openstack.org/229116 | 20:37 |
| daneyon_ | rlrossit I am working on a patch. As part of the patch, I will be removing the swarm-agent off the mgr node. This will provide clear separation between the control/data plane. Then we can lock down the control plane | 20:37 |
| adrian_otto | daneyon_: you have proposed technical debt in https://review.openstack.org/229134 which I am happy to support, but I'd like it to be tracked. Let's open a wishlist bug marked with the tech-debt flag that identifies this as a point of future improvement for integrating security groups and magnum bays. | 20:38 |
| adrian_otto | daneyon_: LMK if you'd like me to open that for you | 20:38 |
| rlrossit | adrian_otto: daneyon_: I would say, don't have this fix close the bug, have it related or partial | 20:39 |
| daneyon_ | the data plane will need to be open until something like kuryr provide a feature that allows ports needed by containers to dynamically create rules in neutron. | 20:39 |
| rlrossit | also I would call bug 1501038 critical if it hasn't already been marked as such | 20:39 |
| openstack | bug 1501038 in Magnum "Swarm security groups block container traffic" [Undecided,In progress] https://launchpad.net/bugs/1501038 - Assigned to Daneyon Hansen (danehans) | 20:39 |
| adrian_otto | rlrossit: this does fix the bug of "I can not reach my app" because the policy is too strict | 20:39 |
| adrian_otto | rlrossit: Yes, I triaged that as critical just a moment ago | 20:40 |
| adrian_otto | so as long as we leave behind breadcrumbs to add this feature later, I'm fine with closes-bug: 1501038 | 20:41 |
| openstack | bug 1501038 in Magnum "Swarm security groups block container traffic" [Critical,Triaged] https://launchpad.net/bugs/1501038 - Assigned to Daneyon Hansen (danehans) | 20:41 |
| rlrossit | is this something we would hope to get in liberty? or would this need more work and a bp? | 20:41 |
| rlrossit | adrian_otto: daneyon_ ^ | 20:42 |
| adrian_otto | that's actually new scope | 20:42 |
| adrian_otto | so that's too ambitious for liberty at this point | 20:42 |
| *** jruano has joined #openstack-containers | 20:42 | |
| adrian_otto | but it could certainly fit as a fast follow | 20:43 |
| *** dimtruck is now known as zz_dimtruck | 20:43 | |
| adrian_otto | thinking through that, we probably want to allow bay-create to have an argument of what security-group to use with the bay | 20:43 |
| adrian_otto | and pass that down through the bay creation template as a parameter | 20:43 |
| adrian_otto | defaulting to "open" | 20:44 |
| adrian_otto | does not seem like that would be a very hard fix, really. | 20:45 |
| adrian_otto | will come with a documentation burden though | 20:45 |
| rlrossit | adrian_otto: what if people don't have the correct ports for swarm on there though? | 20:45 |
| adrian_otto | well, the way I am imagining the solution, the SecurityGroup would restrict access to all containers in the pay to a set port range definition | 20:47 |
| adrian_otto | and we can have input validation that fails if it blocks the required port ranges | 20:47 |
| daneyon_ | adrian_otto I created the tech-debt bug: https://bugs.launchpad.net/magnum/+bug/1501050 | 20:48 |
| openstack | Launchpad bug 1501050 in Magnum "improve-swarm-security" [Undecided,New] | 20:48 |
| adrian_otto | (example of the documentation burden) | 20:48 |
| adrian_otto | or we could simply allow people to shoot themselves in the foot, but address it in docs | 20:48 |
| daneyon_ | adrian_otto as part of this work, I have removed the swarm-agent off the swarm-manager node. This provides a clear separation of control/data planes: https://review.openstack.org/#/c/224367/ | 20:50 |
| daneyon_ | ^ will allow us to implement restricitve rules on the swarm-mgr node and leave the swarm-agent nodes open. This is similar to how things work in the k8s bay type | 20:51 |
| adrian_otto | thanks daneyon | 20:52 |
| daneyon_ | longer-term, I would see kuryr having a feature that provides the ability to dynamically create sec group rules when a container is instantiated. | 20:53 |
| daneyon_ | adrian_otto ^ if the kuryr solution takes too long, then we could implement something along the lines of what you are thinking. | 20:53 |
| daneyon_ | yw | 20:53 |
| adrian_otto | Launchpad is refusing to accept edits to bugs | 20:54 |
| daneyon_ | adrian_otto could you take a look at this when you have a moment: https://review.openstack.org/#/c/227992/ | 20:54 |
| adrian_otto | "Error: Timeout error, please try again in a few minutes." | 20:54 |
| daneyon_ | similar to my security fix, the kube example manifests are broken without my patch | 20:54 |
| daneyon_ | adrian_otto a few reviews -1, saying we should use an official docker image. I'm not opposed to that, but IMO it's outside the scope of the bug/fix. | 20:55 |
| adrian_otto | true. Can you make a quick edit there? | 20:56 |
| daneyon_ | we need to get this fix into L, otherwise the example manifests we provide will not work. | 20:56 |
| adrian_otto | seems easier just to fix that then go through the administrative process. | 20:56 |
| daneyon_ | adrian_otto do you mean change the image? | 20:56 |
| adrian_otto | but if you strongly object I can vote to merge it with follow up requested | 20:57 |
| adrian_otto | yeah, should be an easy change, right? | 20:57 |
| daneyon_ | i am fixing the image that has been used by magnum in the past | 20:57 |
| adrian_otto | good point | 20:57 |
| daneyon_ | it shouldn;t be too difficult | 20:57 |
| daneyon_ | but more difficult than merging the patch that fixes the bug | 20:57 |
| daneyon_ | I want to get back to the networking patch and not spend add'l time on this bug | 20:58 |
| adrian_otto | agreed, I switched my vote accordingly | 20:58 |
| daneyon_ | Changing the example image/manifest for the k8s bay type should be seperate | 20:58 |
| *** zz_dimtruck is now known as dimtruck | 20:59 | |
| daneyon_ | hongbin dims tcammann1 if you're around, do you mind reviewing https://review.openstack.org/#/c/227992/ | 20:59 |
| daneyon_ | ^ a quick fix so our k8s manifests actually work ;-) | 20:59 |
| hongbin | daneyon_: have +2 on it | 21:01 |
| dims | looks like it was already +A'ed :) | 21:03 |
| *** rlrossit has left #openstack-containers | 21:04 | |
| daneyon_ | hongbin thx! | 21:04 |
| daneyon_ | dims i just refresh and you are right | 21:05 |
| daneyon_ | dims hongbin here is another easy fix that IMO is critical for the L release: https://review.openstack.org/#/c/229134/ | 21:05 |
| *** harshs has joined #openstack-containers | 21:05 | |
| openstackgerrit | Merged openstack/magnum: Fixes Kubernetes Pod and Service Manifest Examples https://review.openstack.org/227992 | 21:05 |
| hongbin | daneyon_: lgtm | 21:08 |
| daneyon_ | hongbin thx | 21:08 |
| suro-patz | hongbin: https://review.openstack.org/#/c/226106/ | 21:09 |
| hongbin | suro-patz: revisiting it | 21:09 |
| suro-patz | hongbin: thanks! It was blocked on backend/API code | 21:10 |
| openstackgerrit | Surojit Pathak proposed openstack/magnum: Documentation update for 'magnum service-list' https://review.openstack.org/226133 | 21:12 |
| adrian_otto | Tango: please rebase: https://review.openstack.org/192425 | 21:16 |
| Tango | adrian_otto: OK, will work on it right away | 21:17 |
| hongbin | suro-patz: have +2 +A on it | 21:17 |
| suro-patz | hongbin:thnx! | 21:18 |
| suro-patz | hongbin: it is not merged | 21:18 |
| hongbin | suro-patz: ??? | 21:19 |
| openstackgerrit | Merged openstack/python-magnumclient: Adding 'magnum service-list' https://review.openstack.org/226106 | 21:19 |
| suro-patz | now it is | 21:19 |
| suro-patz | was in flight :) hongbin: | 21:19 |
| hongbin | kk | 21:19 |
| suro-patz | hongbin: I checked too soon :) | 21:20 |
| *** vilobhmm has quit IRC | 21:27 | |
| dims | daneyon_: done | 21:27 |
| *** rpothier has quit IRC | 21:28 | |
| *** jruano has quit IRC | 21:29 | |
| daneyon_ | thx dims | 21:30 |
| *** harshs has quit IRC | 21:32 | |
| openstackgerrit | Vilobh Meshram proposed openstack/magnum: Objects from Bay : Retrieve k8s API client https://review.openstack.org/220344 | 21:35 |
| *** vilobhmm has joined #openstack-containers | 21:36 | |
| vilobhmm | hongbin : don't see anything significant in the logs http://logs.openstack.org/35/229035/5/check/gate-functional-dsvm-magnum/e5f0306/console.html when https://review.openstack.org/#/c/229035/ is about to be merged | 21:39 |
| vilobhmm | tried rechecking couple of times now | 21:39 |
| *** harlowja has quit IRC | 21:40 | |
| *** kebray has quit IRC | 21:40 | |
| *** harlowja has joined #openstack-containers | 21:40 | |
| hongbin | vilobhmm: checking | 21:41 |
| vilobhmm | hongbin : thanks! | 21:41 |
| adrian_otto | vilobhmm: http://logs.openstack.org/35/229035/5/check/gate-functional-dsvm-magnum/e5f0306/console.html#_2015-09-29_21_34_19_006 | 21:41 |
| adrian_otto | the devstack run is returning with an exit status of 2. | 21:42 |
| vilobhmm | adrian_otto : thanks ! will check | 21:42 |
| *** kebray has joined #openstack-containers | 21:42 | |
| adrian_otto | might be this: http://logs.openstack.org/35/229035/5/check/gate-functional-dsvm-magnum/e5f0306/logs/devstacklog.txt.gz#_2015-09-29_21_34_17_709 | 21:43 |
| hongbin | yes, the DB migration failed | 21:43 |
| vilobhmm | alembic.util.CommandError: All MySQL CHANGE/MODIFY COLUMN operations require the existing type. | 21:44 |
| vilobhmm | http://logs.openstack.org/35/229035/5/check/gate-functional-dsvm-magnum/e5f0306/logs/devstacklog.txt.gz | 21:44 |
| suro-patz | vilobhmm: don't you think it will be better to have 'magnum rc-delete -rc <rc_name_or_uuid> —bay <bay_name_or_uuid>'? | 21:45 |
| suro-patz | instead of positional arguments | 21:45 |
| vilobhmm | suro-patz : will get back to you in few min...will that work..right now debugging some other issue..thanks! | 21:46 |
| suro-patz | vilobhmm: sure | 21:46 |
| hongbin | vilobhmm: try to pass an 'existing_type' argument. Use this one as a sample https://github.com/openstack/magnum/blob/master/magnum/db/sqlalchemy/alembic/versions/1c1ff5e56048_rename_container_image_id.py | 21:46 |
| *** annegentle has quit IRC | 21:47 | |
| *** annegentle has joined #openstack-containers | 21:48 | |
| vilobhmm | hongbin : trying the same...will have the fix ready in couple of min...unit test in progress | 21:48 |
| hongbin | vilobhmm: ack | 21:48 |
| openstackgerrit | Merged openstack/magnum: Fixes Neutron security groups for Swarm Bay type https://review.openstack.org/229134 | 21:50 |
| adrian_otto | Anything else someone would like me to review? | 21:52 |
| *** devlaps has joined #openstack-containers | 21:52 | |
| *** kebray has quit IRC | 21:54 | |
| openstackgerrit | Manjeet Singh Bhatia proposed openstack/magnum: WIP: Adding Documentation for use of proxies in magnum. https://review.openstack.org/228634 | 22:00 |
| openstackgerrit | Vilobh Meshram proposed openstack/magnum: Rename "insecure" to "tls_disabled" https://review.openstack.org/229035 | 22:02 |
| *** annegentle has quit IRC | 22:08 | |
| *** dimtruck is now known as zz_dimtruck | 22:13 | |
| *** harshs has joined #openstack-containers | 22:26 | |
| *** dane_leblanc_ has joined #openstack-containers | 22:36 | |
| *** banix has quit IRC | 22:37 | |
| *** dane_leblanc has quit IRC | 22:40 | |
| *** dane_leblanc_ has quit IRC | 22:42 | |
| *** adrian_otto has quit IRC | 22:49 | |
| *** alejandrito has quit IRC | 22:56 | |
| *** harshs has quit IRC | 23:12 | |
| *** dims_ has joined #openstack-containers | 23:19 | |
| openstackgerrit | Vilobh Meshram proposed openstack/magnum: Remove unused DB API and Service object API https://review.openstack.org/219043 | 23:22 |
| *** dims has quit IRC | 23:22 | |
| *** julim has quit IRC | 23:23 | |
| vilobhmm | hongbin, adrian_otto : https://review.openstack.org/#/c/229035/ functional test passed ; Jenkins +1 after fixing the DB migration related failure..please check when free | 23:24 |
| *** sthillma_ has joined #openstack-containers | 23:26 | |
| *** banix has joined #openstack-containers | 23:28 | |
| *** sthillma has quit IRC | 23:30 | |
| *** sdake_ has quit IRC | 23:30 | |
| *** sthillma_ is now known as sthillma | 23:30 | |
| *** sdake has joined #openstack-containers | 23:30 | |
| *** irenab_ has joined #openstack-containers | 23:30 | |
| *** ganeshna has joined #openstack-containers | 23:31 | |
| *** dims_ has quit IRC | 23:31 | |
| suro-patz | hongbin: https://review.openstack.org/#/c/226133/ | 23:31 |
| *** dims_ has joined #openstack-containers | 23:32 | |
| *** Guest59200 has quit IRC | 23:32 | |
| *** tristanC has quit IRC | 23:32 | |
| *** tristanC has joined #openstack-containers | 23:33 | |
| *** irenab has quit IRC | 23:33 | |
| *** irenab_ is now known as irenab | 23:33 | |
| *** preilly has joined #openstack-containers | 23:33 | |
| suro-patz | dims: any core available to merge https://review.openstack.org/#/c/226133/ | 23:33 |
| *** preilly is now known as Guest34201 | 23:33 | |
| *** harshs has joined #openstack-containers | 23:33 | |
| *** sthillma_ has joined #openstack-containers | 23:34 | |
| *** sthillma has quit IRC | 23:37 | |
| *** sthillma_ is now known as sthillma | 23:37 | |
| *** julim has joined #openstack-containers | 23:42 | |
| *** sdake_ has joined #openstack-containers | 23:44 | |
| *** sdake has quit IRC | 23:44 | |
| *** achanda_ has joined #openstack-containers | 23:44 | |
| *** achanda_ has quit IRC | 23:45 | |
| *** sdake_ is now known as sdake | 23:45 | |
| *** julim has quit IRC | 23:47 | |
| *** julim has joined #openstack-containers | 23:48 | |
| *** achanda has quit IRC | 23:48 | |
| openstackgerrit | Ton Ngo proposed openstack/magnum: Configure CoreOS for Kubernetes load balancer feature https://review.openstack.org/192425 | 23:49 |
| openstackgerrit | Ton Ngo proposed openstack/magnum: Configure Ironic for Kubernetes load balancer feature https://review.openstack.org/192426 | 23:49 |
| openstackgerrit | Ton Ngo proposed openstack/magnum: Configure Fedora Atomic for Kubernetes load balancer feature https://review.openstack.org/191878 | 23:49 |
| *** ganeshna_ has joined #openstack-containers | 23:51 | |
| *** ganeshna has quit IRC | 23:51 | |
| *** julim has quit IRC | 23:52 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!