Monday, 2015-10-19

*** suro-patz has joined #openstack-containers00:04
*** vikasc has joined #openstack-containers00:14
*** vikasc has quit IRC00:14
*** vikasc has joined #openstack-containers00:32
*** hongbin has joined #openstack-containers00:36
*** vikasc has quit IRC00:37
openstackgerritMerged openstack/magnum: Fix incorrect usage of CertManager in k8s_api  https://review.openstack.org/23609400:38
*** Drago has quit IRC00:42
*** Kennan has quit IRC00:46
*** Kennan has joined #openstack-containers00:46
*** vimal has joined #openstack-containers00:47
*** dims_ has joined #openstack-containers00:53
*** vikasc has joined #openstack-containers00:54
*** dimsum__ has quit IRC00:56
*** vikasc has quit IRC00:57
*** eliqiao has joined #openstack-containers01:02
*** dims_ has quit IRC01:03
*** dimsum__ has joined #openstack-containers01:05
*** dimsum__ has quit IRC01:08
*** dimsum__ has joined #openstack-containers01:08
*** tbh has joined #openstack-containers01:12
*** eliqiao1 has joined #openstack-containers01:13
*** vikasc has joined #openstack-containers01:15
*** eliqiao has quit IRC01:15
*** zhenguo has joined #openstack-containers01:18
*** EricGonczer_ has joined #openstack-containers01:18
*** vikasc has quit IRC01:28
*** EricGonczer_ has quit IRC01:34
*** achanda has quit IRC01:35
*** julim has quit IRC01:39
*** tbh has quit IRC01:52
*** adrian_otto has joined #openstack-containers02:00
*** suro-patz has quit IRC02:02
*** eliqiao1 has quit IRC02:06
*** achanda has joined #openstack-containers02:19
*** eliqiao has joined #openstack-containers02:20
*** dimsum__ has quit IRC02:24
*** dimsum__ has joined #openstack-containers02:24
*** hongbin has quit IRC02:29
*** eghobo_ has quit IRC02:32
*** madhuri has joined #openstack-containers02:40
*** dave-mccowan has quit IRC02:42
*** dimsum__ has quit IRC02:51
*** adrian_otto has quit IRC02:51
*** dimsum__ has joined #openstack-containers02:51
*** adrian_otto has joined #openstack-containers02:54
*** HenryG has joined #openstack-containers02:55
*** VikasC has joined #openstack-containers02:55
*** suro-patz has joined #openstack-containers03:00
*** eghobo has joined #openstack-containers03:04
*** adrian_otto has quit IRC03:05
*** adrian_otto has joined #openstack-containers03:08
*** suro-patz has quit IRC03:12
*** VikasC has quit IRC03:20
*** eghobo has quit IRC03:21
*** adrian_otto has quit IRC03:26
*** dimsum__ has quit IRC03:30
*** dimsum__ has joined #openstack-containers03:31
*** dimsum__ has quit IRC03:31
*** dimsum__ has joined #openstack-containers03:31
*** adrian_otto has joined #openstack-containers03:32
*** gyliu513 has joined #openstack-containers03:35
*** dimsum__ has quit IRC03:37
*** dimsum__ has joined #openstack-containers03:38
*** vilobhmm11 has joined #openstack-containers03:40
*** eghobo has joined #openstack-containers03:48
*** dimsum__ has quit IRC03:57
*** gyliu513 has left #openstack-containers03:57
*** tbh has joined #openstack-containers04:00
*** adrian_otto has quit IRC04:02
*** daneyon has joined #openstack-containers04:05
*** daneyon_ has joined #openstack-containers04:06
*** daneyon has quit IRC04:10
*** daneyon_ has quit IRC04:14
*** jwcroppe_ has quit IRC04:20
*** unicell1 has joined #openstack-containers04:25
*** unicell has quit IRC04:26
*** jwcroppe has joined #openstack-containers04:26
*** vikasc has joined #openstack-containers04:32
*** chandankumar has joined #openstack-containers04:38
*** mathspanda_ has joined #openstack-containers04:55
*** TianYuan has joined #openstack-containers05:05
*** TianYuan has joined #openstack-containers05:06
*** harshs has quit IRC05:06
*** chandankumar has quit IRC05:06
*** chandankumar has joined #openstack-containers05:13
*** vijaykc4 has joined #openstack-containers05:15
*** vijaykc4 has quit IRC05:15
*** vijaykc4 has joined #openstack-containers05:16
*** harshs has joined #openstack-containers05:25
*** Drago1 has joined #openstack-containers05:29
*** Drago1 has joined #openstack-containers05:29
*** vijaykc4 has quit IRC05:31
*** eggshell has quit IRC05:33
*** vijaykc4 has joined #openstack-containers05:33
*** Tango|2 has joined #openstack-containers05:36
*** eghobo has quit IRC05:41
*** ljianbj has joined #openstack-containers05:46
*** gangil has joined #openstack-containers05:54
*** gangil has quit IRC05:54
*** gangil has joined #openstack-containers05:54
*** dimsum__ has joined #openstack-containers05:54
*** dimsum__ has quit IRC05:59
*** chandankumar has quit IRC06:00
*** shu has joined #openstack-containers06:06
*** manikanta has joined #openstack-containers06:15
*** manikanta_ has joined #openstack-containers06:15
*** harshs has quit IRC06:22
*** vijaykc4 has quit IRC06:25
*** wanghua has joined #openstack-containers06:29
*** Drago1 has quit IRC06:29
*** sdake has joined #openstack-containers06:32
*** vijaykc4 has joined #openstack-containers06:38
*** Tango|2 has quit IRC06:41
*** achanda has quit IRC06:44
*** unicell has joined #openstack-containers06:55
*** unicell1 has quit IRC06:56
*** dimsum__ has joined #openstack-containers06:56
*** dimsum__ has quit IRC07:00
openstackgerritEli Qiao proposed openstack/magnum: Add proxy for k8s  https://review.openstack.org/23682307:04
*** vijaykc4 has quit IRC07:07
*** suro-patz has joined #openstack-containers07:21
*** suro-patz has quit IRC07:42
*** lyanchih has joined #openstack-containers07:43
*** vijaykc4 has joined #openstack-containers07:44
*** vijaykc4 has quit IRC07:48
*** inc0 has joined #openstack-containers07:52
*** sdake has quit IRC07:56
*** vijaykc4 has joined #openstack-containers08:03
*** vijaykc4 has quit IRC08:06
*** mathspanda_ has quit IRC08:06
*** deepthi has joined #openstack-containers08:11
*** mbound has joined #openstack-containers08:13
*** xek_ is now known as xek08:16
openstackgerritEli Qiao proposed openstack/magnum: Add proxy for k8s  https://review.openstack.org/23682308:17
*** vilobhmm11 has quit IRC08:29
openstackgerritOpenStack Proposal Bot proposed openstack/magnum: Updated from global requirements  https://review.openstack.org/23056608:41
*** mathspanda has joined #openstack-containers08:41
*** lyanchih has quit IRC08:41
eliqiaohello, can you get bay.magnum_cert_ref from Rest api?08:44
eliqiaohi madhuri:08:45
madhurihi eliqiao08:45
eliqiaomadhuri: do you know if we can get bay.magnum_cert_ref from Rest api?08:45
*** lyanchih has joined #openstack-containers08:45
eliqiaoI would like to build a connection from api_client by this:08:46
eliqiao        client = api_client.ApiClient(bay.api_address,08:46
eliqiao                                      key_file=self.key_file.name,08:46
eliqiao                                      cert_file=self.cert_file.name,08:46
eliqiao                                      ca_certs=self.ca_file.name)08:46
eliqiaobut I have no idea how to get key_file/cert_file/ca_certs08:46
*** mbound has quit IRC08:47
madhuriDid you check get_bay* ?08:47
eliqiaomadhuri: sorry , pardon?08:47
madhurieliqiao: https://github.com/openstack/magnum/blob/master/magnum/conductor/k8s_api.py#L6408:48
eliqiaoit seems I need to follow this guild https://github.com/openstack/magnum/blob/master/doc/source/dev/dev-tls.rst08:48
madhuriThis method fetches cert files from bay08:48
eliqiaoyeah, but I can not get bay object from REST API.08:49
eliqiaoif you do a bay-show  {"status": "CREATE_COMPLETE", "uuid": "dc62886b-7e5d-497d-b18d-4e71e4087826", "links": [{"href": "http://10.238.157.49:9511/v1/bays/dc62886b-7e5d-497d-b18d-4e71e4087826", "rel": "self"}, {"href": "http://10.238.157.49:9511/bays/dc62886b-7e5d-497d-b18d-4e71e4087826", "rel": "bookmark"}], "updated_at": "2015-10-19T06:48:14+00:00", "created_at": "2015-10-19T06:45:45+00:00", "api_address": "https://172.24.4.15:6443", "discover08:49
madhuriOk I get it08:49
eliqiaoREST  API won't return t08:49
madhuriOk let me check08:49
madhurieliqiao: As of now, we can't get cert_ref from Rest API08:54
madhuriCan you please tell me what is your use case?08:54
eliqiaomadhuri:  no, we can't  get cert_ref08:55
eliqiaomadhuri: I just checked the python-magnumclient, we can use self.certificates to get ca first08:55
madhuriYes agree eliqiao08:55
eliqiaothen follow this guide https://github.com/openstack/magnum/blob/master/doc/source/dev/dev-tls.rst to generate ca.crt client.key client.crt08:56
eliqiaoI kinds of understand all process, but seems we need much coding08:56
eliqiaomy case is to adding functional case for tls_enabled k8s bay, check this https://review.openstack.org/#/c/23242108:57
eliqiaomadhuri:  thank you, I know what should I do now.08:57
madhuriBoth way is different08:57
madhuriFor REst API, you can use ca-show and ca-sign08:58
madhuriAnd in code you can directly use bay.cert_ref08:58
*** dimsum__ has joined #openstack-containers08:59
eliqiaomadhuri: yeah, get you. in my case, I would like to do a fake api call, so I need to call ca-sign to get those ca files.09:00
*** TianYuan has quit IRC09:02
*** dimsum__ has quit IRC09:04
*** mbound has joined #openstack-containers09:05
*** mathspanda has quit IRC09:07
*** openstack has joined #openstack-containers09:19
Kennanhi madhrui:09:21
Kennanmadhuri: i always get TLS handshake timeout09:21
Kennanfor native client response09:21
madhuriKennan: Which COE are you trying?09:22
Kennanmadhuri:09:26
KennanI used k8s09:26
*** DrDocker_ has quit IRC09:28
madhuriKennan: "kubernetes.invalid" should work09:28
madhuriCan you paste the log?09:28
Kennanwhich log madhuri: ?09:29
madhuriThe error you're getting while running the kubectl09:29
madhuriyuanying: Hi there?09:29
Kennanmadhuri: couldn't read version from server: Get https://172.24.4.4:6443/api: net/http: TLS handshake timeout09:30
yuanyingIt's better to use `curl -v https://k8s-master:6443/version --key ./client.key --cert ./client.crt --cacert ./ca.crt`09:30
yuanyingto check connection09:30
Kennanstill get09:32
Kennancurl: (35) Unknown SSL protocol error in connection to 172.24.4.4:644309:32
madhuriIs kube-apiserver running?09:34
Kennanyes madhuri: it is running09:35
openstackgerritShu Muto proposed openstack/magnum-ui: Add create action to bay panel  https://review.openstack.org/23587009:36
madhuriKennan: Can you paste your command?09:37
Kennan curl -v https://172.24.4.4:6443/version --key ./client.key --cert ./client.crt --cacert ./ca.crt09:37
madhuriI guess you're passing the IP of kube-apiserver09:37
madhuriYou should give the common name instead of giving IP in command09:38
madhuricurl -v https://kubernetes.invalid:6443/version --key ./client.key --cert ./client.crt --cacert ./ca.crt09:38
madhuriTry this09:38
yuanyingIP address is working now09:38
Kennanbut I use ip, can not09:38
Kennanfor host09:39
Kennancurl: (6) Could not resolve host: kubernetes.invalid09:39
Kennanit seems this host can be recolved, only you required to add it in /etc/hosts09:39
madhuriYes it should be09:39
madhuriBut yuanying said IP should also work09:39
Kennanbut I think it is same09:39
yuanyingI'll check at master09:40
*** DrDocker_ has joined #openstack-containers09:41
*** i316653 has joined #openstack-containers09:42
madhuriKennan: I will also check09:42
yuanyingKennan: How about insecure bay which is tls_disabled ?09:43
i316653Devstack Magnum API cannot start because of oslo errors, but they should be installed. Adding them to lib/oslo worked for oslo.config but not for oslo.service. Any ideas on anything I'm missing?09:43
Kennanyuanying: I did not test tls_disable case09:43
Kennani1316653  did you try latest code ? or old code09:44
i316653I'm on stable/kilo09:46
i316653Kennan: Also to note, I'm using SLES1209:47
Kennani1316653: suggest use stable/liberty09:48
Kennanand one note09:48
Kennanwhen you clone devstack09:48
Kennanit defaults to master09:48
Kennanyou need swtich to stable/liberty09:49
Kennanbranch09:49
yuanyingKennan: my environt is worked. http://paste.openstack.org/show/476653/09:50
yuanyingKennan: How about this command ? `openssl s_client -connect 192.168.19.95:6443`09:51
Kennanyuanying:09:52
Kennandid I need to pass other parameters>?09:53
KennanI found it following message09:53
*** alex_klimov has joined #openstack-containers09:53
Kennanyuanying:09:54
Kennanhttp://paste.openstack.org/show/476654/09:54
*** slotty has joined #openstack-containers09:55
*** DrDocker_ has quit IRC09:56
yuanyingIs this a openssl s_client log?09:56
yuanyingKennan:09:56
Kennanyuanying: check this full output for : openssl s_client -connect 172.24.4.4:644309:58
Kennanhttp://paste.openstack.org/show/476656/09:58
yuanyingKennan: my log is this. http://paste.openstack.org/show/476657/09:58
yuanyingKennan: hmm, it seems working09:59
yuanyingKennan: Please show me a full log of `curl -v https://192.168.19.95:6443 --key ./client.key --cert ./client.crt --cacert ./ca.crt`10:01
Kennanyuanying:10:02
Kennanhttp://paste.openstack.org/show/476661/10:02
Kennanyuanying: I followed guide steps in dev-tls.rst part10:02
KennanI created client key csr, crt etc10:03
Kennanbut it seems server not think it is right10:03
Kennanhttps://github.com/openstack/magnum/blob/master/doc/source/dev/dev-tls.rst10:04
yuanyingCan you check `curl -ssl3 -v https://192.168.19.95:6443 --key ./client.key --cert ./client.crt --cacert ./ca.crt` ?10:05
Kennan error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number10:06
Kennanis it right ? -ssl310:06
yuanyingand also `openssl x509 -text -in ca.crt`10:07
yuanyingKennan: sorry, --sslv310:07
*** zhenguo has quit IRC10:07
*** dimsum__ has joined #openstack-containers10:07
Kennanyuanying: --sslv310:08
Kennan) error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number10:08
Kennanstill error10:08
yuanyinghmm10:08
yuanyingwhat about --tlsv110:09
yuanyingKennan: And also, Login to master node and check server.crt10:11
Kennanyuanying: I can get server.crt10:11
Kennanbut what should I check ?10:11
yuanyingKennan: server.crt contains subject alt name10:11
Kennanyuanying:10:12
KennansubjectAltName = IP:172.24.4.5,IP:172.24.4.4,IP:10.0.0.4,IP:127.0.0.110:12
Kennanyuanying: only server.conf contains it10:12
Kennanseems server.crt only contain charachter10:12
Kennanit is key file10:12
yuanyingopenssl x509 -text -in server.crt10:13
Kennanyuanying: run it on master ? or run it on magnum node ?10:13
yuanyinghmm, subjectAltName contains your IP...10:13
yuanyingmaster10:13
yuanyingKennan: What about this command at your master ? `curl -v https://192.168.19.95:6443 --key ./server.key --cert ./server.crt --cacert ./ca.crt`10:15
Kennanyuanying:10:15
Kennanhere is openssl run on master node10:15
Kennanhttp://paste.openstack.org/show/476663/10:15
yuanyingyou can use 127.0.0.1:6443 too at master `curl -v https://127.0.0.1:6443 --key ./server.key --cert ./server.crt --cacert ./ca.crt`10:16
yuanyingKennan: server.crt seems ok...10:16
yuanyingKennan: Can you connect to api from master node?10:17
Kennanyuanying: I run10:21
Kennancurl -v https://127.0.0.1:6443/version --key /srv/kubernetes/server.key  --cert /srv/kubernetes/server.crt  --cacert /srv/kubernetes/ca.crt10:22
Kennanon master node10:22
Kennanit seems hang it there10:22
yuanyingKennan: What about 172.24.4.4 or 10.0.0.4 or 172.24.4.5 ?10:22
Kennanfor 172.24.4.410:22
yuanyingKennan: It seems network problem, but I'm not sure what's wrong10:23
Kennani got NSS error -5938 (PR_END_OF_FILE_ERROR)10:23
Kennancurl: (35) Encountered end of file10:23
yuanyingI guess 172.24.4.4 is from lbaas10:23
Kennanyes10:23
yuanyingDo you think, is this a magnum issue?10:24
KennanI just followed guide, I not sure if it is magnum issue, but most probly it is that10:25
Kennanyuanying: do you use barbican in your env ? or local10:25
Kennanthe devstack default is barbican10:26
yuanyingKennan: Yes, I'm using barbican10:26
Kennanyuanying: if https really worked, could you help to enable it on jenkins ?10:26
yuanyingKennan: yes, of course10:27
KennanI think it need more test on jenkins, right now, it seems not work in my env.10:27
*** weihan has joined #openstack-containers10:39
*** lyanchih has quit IRC10:41
*** vimal has quit IRC10:44
*** dave-mccowan has joined #openstack-containers10:51
*** dimsum__ is now known as dims10:52
*** eghobo has joined #openstack-containers11:04
*** madhuri has quit IRC11:04
*** eghobo_ has joined #openstack-containers11:06
*** eghobo has quit IRC11:10
*** wallnerryan has quit IRC11:36
*** EricGonczer_ has joined #openstack-containers11:57
*** EricGonc_ has joined #openstack-containers11:58
*** EricGonczer_ has quit IRC12:02
*** eghobo_ has quit IRC12:02
*** dave-mccowan has quit IRC12:04
*** inc0 has quit IRC12:07
*** vikasc has quit IRC12:13
openstackgerritOpenStack Proposal Bot proposed openstack/magnum: Updated from global requirements  https://review.openstack.org/23056612:19
*** weihan_ has joined #openstack-containers12:25
*** weihan_ has quit IRC12:26
*** weihan has quit IRC12:26
*** weihan has joined #openstack-containers12:26
*** EricGonc_ has quit IRC12:26
*** weihan has quit IRC12:27
*** weihan has joined #openstack-containers12:27
*** dims has quit IRC12:27
*** dims has joined #openstack-containers12:28
*** weihan has quit IRC12:30
*** weihan has joined #openstack-containers12:31
*** inc0 has joined #openstack-containers12:34
*** weihan has quit IRC12:35
*** weihan has joined #openstack-containers12:37
*** weihan has quit IRC12:37
*** weihan has joined #openstack-containers12:38
*** achanda has joined #openstack-containers12:39
*** achanda has quit IRC12:41
*** Tango|2 has joined #openstack-containers12:45
*** weihan has quit IRC12:46
*** weihan has joined #openstack-containers12:47
*** tbh has quit IRC12:54
*** Tango|2 has quit IRC12:56
openstackgerritRob Cresswell proposed openstack/magnum-ui: Add API for container create, delete, list, show  https://review.openstack.org/23532712:56
*** manikanta_ has quit IRC12:56
*** Tango|2 has joined #openstack-containers12:56
*** manikanta has quit IRC12:56
*** Shijia has joined #openstack-containers12:57
*** inc0 has quit IRC13:11
*** rpothier has joined #openstack-containers13:25
*** julim has joined #openstack-containers13:27
*** masterbound has joined #openstack-containers13:28
*** mbound has quit IRC13:29
*** Shijia has quit IRC13:34
*** Shijia has joined #openstack-containers13:35
*** dane_leblanc has joined #openstack-containers13:42
*** Shijia has quit IRC13:43
*** exploreshaifali has joined #openstack-containers13:47
*** zz_dimtruck is now known as dimtruck13:52
*** weihan has quit IRC13:55
*** manjeets has joined #openstack-containers13:59
*** muralia has joined #openstack-containers14:08
*** muralia1 has joined #openstack-containers14:09
*** muralia has quit IRC14:12
*** adrian_otto has joined #openstack-containers14:19
*** adrian_otto has quit IRC14:20
*** sdake has joined #openstack-containers14:24
*** achanda has joined #openstack-containers14:32
*** weihan has joined #openstack-containers14:37
*** weihan has quit IRC14:40
*** achanda has quit IRC14:40
*** VikasC has joined #openstack-containers14:40
*** Kennan2 has joined #openstack-containers14:41
*** weihan has joined #openstack-containers14:41
*** Kennan has quit IRC14:41
*** _navneet has joined #openstack-containers14:43
*** Shijia has joined #openstack-containers14:43
*** lyanchih has joined #openstack-containers14:45
*** EricGonczer_ has joined #openstack-containers14:45
*** Shijia has quit IRC14:48
*** _navneet_ has joined #openstack-containers14:54
*** hongbin has joined #openstack-containers14:55
*** _navneet has quit IRC14:58
*** masterbound has quit IRC15:00
*** mbound has joined #openstack-containers15:00
*** VikasC_ has joined #openstack-containers15:03
*** deepthi has quit IRC15:04
*** suro-patz has joined #openstack-containers15:04
*** vikasc__ has joined #openstack-containers15:05
*** VikasC has quit IRC15:07
*** suro-patz has quit IRC15:08
*** daneyon has joined #openstack-containers15:10
*** annegentle has joined #openstack-containers15:10
*** daneyon_ has joined #openstack-containers15:11
*** daneyon has quit IRC15:14
*** alex_klimov has quit IRC15:15
*** lyanchih has quit IRC15:19
*** tbh_ has joined #openstack-containers15:26
*** Drago has joined #openstack-containers15:27
*** EricGonczer_ has quit IRC15:28
*** gangil has quit IRC15:29
*** mfalatic has joined #openstack-containers15:29
*** daneyon_ has quit IRC15:32
*** EricGonczer_ has joined #openstack-containers15:32
*** daneyon has joined #openstack-containers15:34
*** adrian_otto has joined #openstack-containers15:36
*** eggshell has joined #openstack-containers15:39
*** diga has joined #openstack-containers15:41
*** daneyon has quit IRC15:41
*** tbh_ has quit IRC15:43
openstackgerritZachary Sais proposed openstack/magnum: Cleanup template formatting  https://review.openstack.org/23629115:45
*** tbh_ has joined #openstack-containers15:47
*** Shijia has joined #openstack-containers15:48
*** BertrandN has quit IRC15:49
*** sdake has quit IRC15:53
*** sdake has joined #openstack-containers15:53
*** Shijia has quit IRC15:54
*** i316653 has quit IRC15:55
*** mbound has quit IRC16:01
*** slotty has quit IRC16:01
*** sdake_ has joined #openstack-containers16:02
*** daneyon has joined #openstack-containers16:02
*** Tango has joined #openstack-containers16:03
*** sdake has quit IRC16:04
*** Drago has quit IRC16:04
*** Tango|2 has quit IRC16:06
*** vikasc__ has quit IRC16:08
*** tbh_ has quit IRC16:10
openstackgerritRob Cresswell proposed openstack/magnum-ui: Add API for container create, delete, list, show  https://review.openstack.org/23532716:11
openstackgerritRob Cresswell proposed openstack/magnum-ui: Add API for container create, delete, list, show  https://review.openstack.org/23532716:12
*** tbh_ has joined #openstack-containers16:12
*** mbound has joined #openstack-containers16:14
*** unicell has quit IRC16:14
*** mbound has quit IRC16:19
*** sdake_ is now known as sdake16:25
*** eggshell has quit IRC16:27
*** rpothier has quit IRC16:29
*** wenchma has quit IRC16:29
*** Babyface has quit IRC16:29
*** mikal has quit IRC16:29
*** chmouel has quit IRC16:29
*** ioni has quit IRC16:29
*** Babyface has joined #openstack-containers16:30
*** mikal has joined #openstack-containers16:30
*** gangil has joined #openstack-containers16:30
*** gangil has quit IRC16:30
*** gangil has joined #openstack-containers16:30
*** ioni has joined #openstack-containers16:31
*** ioni is now known as Guest8757616:31
*** weihan has quit IRC16:33
*** chmouel has joined #openstack-containers16:34
*** EricGonczer_ has quit IRC16:34
*** wenchma has joined #openstack-containers16:41
*** exploreshaifali has quit IRC16:45
*** EricGonczer_ has joined #openstack-containers16:49
*** eggshell has joined #openstack-containers16:49
*** sdake has quit IRC16:51
*** dimtruck is now known as zz_dimtruck16:52
*** unicell has joined #openstack-containers16:54
*** Shijia has joined #openstack-containers16:54
*** Shijia has quit IRC16:59
*** openstackgerrit has quit IRC17:01
*** Tango has quit IRC17:01
*** openstackgerrit has joined #openstack-containers17:01
*** Drago has joined #openstack-containers17:02
*** Drago has quit IRC17:02
*** Drago has joined #openstack-containers17:02
*** suro-patz has joined #openstack-containers17:03
*** jlvillal has joined #openstack-containers17:05
*** zz_dimtruck is now known as dimtruck17:06
*** klindgren__ is now known as klindgren17:17
*** vilobhmm11 has joined #openstack-containers17:20
*** adrian_otto has quit IRC17:22
*** jwcroppe_ has joined #openstack-containers17:23
*** jwcroppe has quit IRC17:24
*** adrian_otto has joined #openstack-containers17:25
*** achanda has joined #openstack-containers17:29
*** sthillma has joined #openstack-containers17:29
*** achanda has quit IRC17:29
*** achanda has joined #openstack-containers17:30
*** subscope has joined #openstack-containers17:31
*** jwcroppe has joined #openstack-containers17:41
*** jwcroppe_ has quit IRC17:44
*** tbh_ has quit IRC17:46
*** sdake has joined #openstack-containers17:46
*** manjeets has quit IRC17:49
*** diga has quit IRC17:50
*** kebray has joined #openstack-containers17:51
*** Tango has joined #openstack-containers17:53
*** sdake has quit IRC18:02
*** annegentle has quit IRC18:08
*** annegentle has joined #openstack-containers18:09
*** sdake has joined #openstack-containers18:11
*** gangil1 has joined #openstack-containers18:13
*** gangil has quit IRC18:14
*** sdake_ has joined #openstack-containers18:15
*** sdake has quit IRC18:16
*** kebray has quit IRC18:16
*** manjeets has joined #openstack-containers18:19
*** devlaps has joined #openstack-containers18:22
*** hblixt has joined #openstack-containers18:23
*** sdake_ is now known as sdake18:25
*** jlvillal_ has joined #openstack-containers18:40
*** eghobo has joined #openstack-containers18:48
*** julim has quit IRC18:53
*** adrian_otto has quit IRC18:53
*** julim has joined #openstack-containers18:56
*** sdake has quit IRC19:00
*** adrian_otto has joined #openstack-containers19:01
*** gangil1 has quit IRC19:05
Tangodaneyon: ping19:09
*** EricGonczer_ has quit IRC19:09
*** EricGonczer_ has joined #openstack-containers19:10
*** Marga_ has quit IRC19:18
daneyonTango here19:27
*** dave-mccowan has joined #openstack-containers19:33
*** dane_leblanc has quit IRC19:35
TangoHi Daneyon, I remember you mentioned you tried different networking options in Flannel19:35
Tangodaneyon: Wonder if you have tried configuring it to use VXLAN instead of the default UDP19:35
*** adrian_otto has quit IRC19:42
*** dane_leblanc has joined #openstack-containers19:44
*** muralia has joined #openstack-containers19:47
*** muralia1 has quit IRC19:48
*** exploreshaifali has joined #openstack-containers19:50
*** subscope has quit IRC19:53
vilobhmm11honginb : ping19:55
vilobhmm11running into https://bugs.launchpad.net/magnum/+bug/1506226 despite checking out latest codebase…this seem to have fixed it https://review.openstack.org/#/c/235010/3 ..any pointers on this19:56
openstackLaunchpad bug 1506226 in Magnum "Creating pods results in "EOF occurred in violation of protocol" exception" [Critical,Confirmed] - Assigned to hongbin (hongbin034)19:56
hongbinvilobhmm11: yes, it should be fixed19:57
vilobhmm11hongbin : I still see it while creating pod :(19:57
*** Guest93745 is now known as preilly19:58
*** preilly has quit IRC19:58
*** preilly has joined #openstack-containers19:58
vilobhmm11and the stack trace is similar to what reported here https://bugs.launchpad.net/magnum/+bug/150622619:58
openstackLaunchpad bug 1506226 in Magnum "Creating pods results in "EOF occurred in violation of protocol" exception" [Critical,Confirmed] - Assigned to hongbin (hongbin034)19:58
hongbinvilobhmm11: could you verify the security group? (nova secgroup-list-rules)19:59
hongbinto verify the port 6443 is indeed open20:00
*** eghobo has quit IRC20:02
vilobhmm11hongbin  : http://paste.openstack.org/show/476748/20:02
*** eghobo_ has joined #openstack-containers20:02
vilobhmm11is the detailed output for each secgroup20:03
hongbinit looks good20:03
vilobhmm11hongbin : is there anything else you would like me to check/verify ?20:04
hongbinvilobhmm11: you are trying secure bay or insecure bay?20:04
vilobhmm11hongbin : by default its secure right ? for me secure/insecure bay does not matter IMHO if pod creation works my next plan is to test objects from bay patches and address your concerns20:06
vilobhmm11for this test20:06
hongbindefault is secure20:06
vilobhmm11yup then I am using secure bay20:06
hongbintwo things:20:07
hongbin1. could you ssh to the master and type "kubectl create -f file.yaml"20:07
hongbinwhere file.yaml is the manifest you were using in magnum20:07
vilobhmm11ok20:07
hongbin2. could you delete the secure bay and create an insecure bay. Then try to create the k8s resource again. (insecure bay is better for debuging)20:08
vilobhmm11ok20:09
vilobhmm11let me try will let you know20:09
vilobhmm11hongbin : for #1. http://paste.openstack.org/show/476750/20:11
daneyonTango I have used vxlan and it works. Are you seeing problems with it?20:12
*** krotscheck has joined #openstack-containers20:12
hongbinvilobhmm11: It looks the k8s cluster was not setup properly20:14
*** annegentle has quit IRC20:14
hongbinlet's see what is the result of insecure bay20:14
vilobhmm11hongbin : followed the steps here http://docs.openstack.org/developer/magnum/dev/dev-quickstart.html nd  used fedora-21-atomic-520:15
vilobhmm11 image…20:15
Tangodaneyon: I am about to set up Flanneld with vxlan to do some performance measurement, so I just want to double check to see if you ran into any issues20:15
Tangodaneyon: Do you have some instructions on setting it up?20:15
Tangodaneyon: (specific to the way we deploy the kus cluster)20:16
*** dims_ has joined #openstack-containers20:16
*** dims has quit IRC20:19
*** dave-mccowan has quit IRC20:21
*** adrian_otto has joined #openstack-containers20:21
*** gangil has joined #openstack-containers20:23
*** gangil has quit IRC20:23
*** gangil has joined #openstack-containers20:23
*** Marga_ has joined #openstack-containers20:23
daneyonTango you just need to pass the label when you create the baymodel: --labels flannel_use_vxlan=true20:23
Tangodaneyon: ah cool, so the new script handles the configuration.20:24
*** chandankumar_awa has joined #openstack-containers20:24
*** achanda has quit IRC20:26
*** alex_klimov has joined #openstack-containers20:29
daneyonflannel is the default network-driver for k8s, so you do not need to specifu --network-driver=flannel. Without passing any labels, flannel is setup with the defaults in the k8s heat template. Conductor has been updated to support the flannel config parameters in the heat template. These are flannel_use_vxlan, flannel_network_subnetlen, flannel_network_cidr. Ex> --labels flannel_use_vxlan=true,flannel_network_subnetlen=26,flanne20:29
daneyonl_network_cidr=1.1.0.0/1620:29
daneyonTango ^20:29
Tangodaneyon: Sounds great, let me try this out20:30
Tangodaneyon: Save me a lot of work :)20:30
daneyonTango: Example> https://gist.github.com/danehans/e113c3a69195f7571ce420:31
Tangodaneyon: OK let me duplicate this in my environment20:34
daneyonok20:34
*** annegentle has joined #openstack-containers20:36
*** eghobo_ has quit IRC20:36
*** achanda has joined #openstack-containers20:46
*** Marga_ has quit IRC20:52
*** Marga_ has joined #openstack-containers20:53
*** jlvillal_ has quit IRC20:57
*** jlvillal_ has joined #openstack-containers20:58
*** jlvillal_ has quit IRC21:02
openstackgerritMichael Krotscheck proposed openstack/magnum: Added CORS support to Magnum  https://review.openstack.org/23719921:03
*** hblixt has quit IRC21:04
*** julim has quit IRC21:04
*** gangil has quit IRC21:04
vilobhmm11hongbin : for bay creation with tls-disabled http://paste.openstack.org/show/476763/21:09
hongbinvilobhmm11: It still seems there is something wrong of the cluster21:11
hongbincould you ssh to the master21:11
vilobhmm11yes trying the same thing21:11
hongbinand type: sudo systemctl list-units21:11
vilobhmm11ok21:11
vilobhmm11hongbin : http://paste.openstack.org/show/476765/  the imp services failed docker,etcd21:14
*** Marga_ has quit IRC21:14
*** Marga_ has joined #openstack-containers21:14
*** Marga_ has quit IRC21:15
hongbinvilobhmm11: In master, try this: cat /etc/etcd/etcd.conf21:15
vilobhmm11hongbin : http://paste.openstack.org/show/476767/21:16
*** Marga_ has joined #openstack-containers21:16
*** manjeets has quit IRC21:18
hongbinvilobhmm11: the config looks right. Let's check the log: sudo journalctl -u etcd --no-pager21:18
vilobhmm11hongbin : http://paste.openstack.org/show/476769/21:20
hongbinvilobhmm11: It looks your VM cannot connect to public etcd https://discovery.etcd.io21:21
*** jwcroppe has quit IRC21:21
vilobhmm11yes its timing out21:21
vilobhmm11in trying to connect to discovery.etcd.io21:22
*** gangil has joined #openstack-containers21:22
*** gangil has quit IRC21:22
*** gangil has joined #openstack-containers21:22
hongbinI am not good at debugging network issue. Thing to check: iptables, dns, neutron setting ...21:25
vilobhmm11hongbin : will check…thats fine…thanks for your help till now21:25
hongbinnp21:26
openstackgerritZachary Sais proposed openstack/magnum: Cleanup template formatting  https://review.openstack.org/23629121:27
*** achanda has quit IRC21:34
*** adrian_otto has quit IRC21:43
*** achanda has joined #openstack-containers21:50
*** eghobo has joined #openstack-containers21:55
*** daneyon has quit IRC22:08
*** exploreshaifali has quit IRC22:14
*** dims_ has quit IRC22:15
*** john5223 has joined #openstack-containers22:16
*** EricGonczer_ has quit IRC22:17
john5223Hello22:17
*** alex_klimov has quit IRC22:18
*** dane_leblanc has quit IRC22:19
*** _navneet_ has quit IRC22:26
*** eghobo has quit IRC22:30
*** annegentle has quit IRC22:32
*** annegentle has joined #openstack-containers22:41
*** annegentle has quit IRC22:45
john5223Anyone running multi hypervisor openstack with kvm + lxc?22:51
*** vikasc__ has joined #openstack-containers22:52
*** achanda has quit IRC22:55
*** achanda_ has joined #openstack-containers22:55
*** achanda has joined #openstack-containers22:55
*** dimtruck is now known as zz_dimtruck22:58
*** achanda_ has quit IRC22:59
*** hongbin has quit IRC23:01
*** sdake has joined #openstack-containers23:04
*** suro-patz has quit IRC23:18
openstackgerritOpenStack Proposal Bot proposed openstack/magnum: Updated from global requirements  https://review.openstack.org/23056623:28
*** gangil has quit IRC23:30
openstackgerritOpenStack Proposal Bot proposed openstack/python-magnumclient: Updated from global requirements  https://review.openstack.org/23565723:32
*** gangil has joined #openstack-containers23:35
*** gangil has quit IRC23:35
*** gangil has joined #openstack-containers23:35
*** eghobo has joined #openstack-containers23:43
*** sthillma has quit IRC23:55
*** sthillma has joined #openstack-containers23:55

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!