| *** Nel1x has joined #openstack-containers | 00:09 | |
| *** harlowja has quit IRC | 00:26 | |
| *** flwang has quit IRC | 00:34 | |
| *** hongbin has joined #openstack-containers | 01:03 | |
| *** ricolin has joined #openstack-containers | 01:29 | |
| *** yolanda has quit IRC | 02:03 | |
| *** jhesketh_ is now known as jhesketh | 03:14 | |
| *** ramishra has joined #openstack-containers | 03:16 | |
| *** Nel1x has quit IRC | 03:22 | |
| *** dave-mccowan has quit IRC | 03:31 | |
| *** janki has joined #openstack-containers | 03:41 | |
| *** udesale has joined #openstack-containers | 03:48 | |
| *** Bhujay has joined #openstack-containers | 04:13 | |
| *** hongbin has quit IRC | 04:15 | |
| *** Bhujay has quit IRC | 04:30 | |
| *** ykarel has joined #openstack-containers | 04:35 | |
| *** spiette has joined #openstack-containers | 06:16 | |
| *** spiette_ has quit IRC | 06:17 | |
| openstackgerrit | yatin proposed openstack/magnum stable/queens: [DNM] Try projects from stable/queens https://review.openstack.org/589374 | 06:19 |
|---|---|---|
| *** niteshmvp has joined #openstack-containers | 06:25 | |
| *** pcaruana has joined #openstack-containers | 06:36 | |
| *** Bhujay has joined #openstack-containers | 06:42 | |
| *** adrianc has joined #openstack-containers | 06:55 | |
| *** mattgo has joined #openstack-containers | 06:58 | |
| *** serlex has joined #openstack-containers | 07:03 | |
| *** adrianc_ has joined #openstack-containers | 07:30 | |
| *** adrianc has quit IRC | 07:34 | |
| *** ykarel is now known as ykarel|lunch | 07:43 | |
| *** slunkad has quit IRC | 07:58 | |
| *** rcernin has quit IRC | 08:11 | |
| *** ktibi has joined #openstack-containers | 08:22 | |
| *** sayalilunkad has joined #openstack-containers | 08:31 | |
| *** ykarel|lunch is now known as ykarel | 08:35 | |
| *** adrianc__ has joined #openstack-containers | 08:51 | |
| *** adrianc_ has quit IRC | 08:55 | |
| *** salmankhan has joined #openstack-containers | 08:56 | |
| *** ktibi has quit IRC | 09:00 | |
| *** ktibi has joined #openstack-containers | 09:00 | |
| *** ktibi has quit IRC | 09:21 | |
| *** ktibi has joined #openstack-containers | 09:22 | |
| *** adrianc_ has joined #openstack-containers | 10:01 | |
| *** adrianc__ has quit IRC | 10:05 | |
| *** niteshmvp has quit IRC | 10:40 | |
| *** dave-mccowan has joined #openstack-containers | 10:51 | |
| *** ricolin has quit IRC | 10:58 | |
| *** udesale has quit IRC | 11:15 | |
| *** Bhujay has quit IRC | 11:18 | |
| *** slagle has joined #openstack-containers | 11:39 | |
| *** zul has joined #openstack-containers | 11:54 | |
| *** Bhujay has joined #openstack-containers | 12:24 | |
| *** DimGR has quit IRC | 12:50 | |
| *** thomasem has quit IRC | 12:50 | |
| *** mattgo has quit IRC | 12:50 | |
| *** mattgo has joined #openstack-containers | 12:55 | |
| *** janki has quit IRC | 13:03 | |
| *** janki has joined #openstack-containers | 13:04 | |
| *** ArchiFleKs has quit IRC | 13:16 | |
| *** ykarel is now known as ykarel|away | 13:21 | |
| *** ykarel|away has quit IRC | 13:31 | |
| *** serlex has quit IRC | 13:37 | |
| *** adrianc__ has joined #openstack-containers | 13:40 | |
| *** ArchiFleKs has joined #openstack-containers | 13:41 | |
| *** adrianc_ has quit IRC | 13:43 | |
| *** ArchiFleKs has quit IRC | 13:46 | |
| *** ArchiFleKs has joined #openstack-containers | 13:47 | |
| *** ArchiFleKs has quit IRC | 13:56 | |
| *** ArchiFleKs has joined #openstack-containers | 13:56 | |
| *** ArchiFleKs has quit IRC | 14:02 | |
| *** ArchiFleKs has joined #openstack-containers | 14:03 | |
| *** Bhujay has quit IRC | 14:18 | |
| *** ykarel has joined #openstack-containers | 14:38 | |
| *** hongbin has joined #openstack-containers | 14:38 | |
| *** ykarel has quit IRC | 14:57 | |
| *** pcaruana has quit IRC | 15:11 | |
| *** Bhujay has joined #openstack-containers | 15:23 | |
| *** adrianc__ has quit IRC | 15:28 | |
| *** ramishra has quit IRC | 15:34 | |
| *** v1k0d3n has joined #openstack-containers | 15:44 | |
| *** adrianc__ has joined #openstack-containers | 15:59 | |
| *** Bhujay has quit IRC | 16:00 | |
| *** janki has quit IRC | 16:47 | |
| *** mattgo has quit IRC | 16:48 | |
| *** salmankhan has quit IRC | 16:48 | |
| *** ktibi has quit IRC | 17:24 | |
| *** ricolin has joined #openstack-containers | 17:30 | |
| *** harlowja has joined #openstack-containers | 17:31 | |
| *** adrianc__ has quit IRC | 17:35 | |
| *** adrianc__ has joined #openstack-containers | 17:41 | |
| *** harlowja has quit IRC | 17:43 | |
| *** ricolin has quit IRC | 18:27 | |
| *** openstackgerrit has quit IRC | 18:49 | |
| *** adrianc__ has quit IRC | 18:53 | |
| *** stewie925 has joined #openstack-containers | 20:02 | |
| *** stewie925 has left #openstack-containers | 20:02 | |
| *** stewie925 has joined #openstack-containers | 20:06 | |
| stewie925 | hi all, I have a question on my docker build issue - was getting error at the 'python setup.py develop', but I didnt get it when I ran it manually on virtualenv | 20:07 |
| stewie925 | the error says "Versioning for this project requires either an sdist tarball, or access to an upstream git repository. It's also possible that there is a mismatch between the package name in setup.cfg and the argument given to pbr.version.VersionInfo. Project name xxxx_tempest_plugin was given, but was not able to be found. | 20:08 |
| *** zul has quit IRC | 20:13 | |
| canori01 | Will there be a meeting today? | 20:29 |
| *** markguz_ has joined #openstack-containers | 20:41 | |
| *** markguz_ has left #openstack-containers | 20:41 | |
| *** markguz_ has joined #openstack-containers | 20:41 | |
| -openstackstatus- NOTICE: Due to a bug, Zuul has been unable to report on cherry-picked changes over the last 24 hours. This has now been fixed; if you encounter a cherry-picked change missing its results (or was unable to merge), please recheck now. | 20:41 | |
| markguz_ | hey all. another problem... as a non admin user i'm getting this error "Policy doesn't allow certificate:get to be performed (HTTP 403)" | 20:44 |
| markguz_ | here's my policy file. it should be the default... http://paste.openstack.org/show/727575/ | 20:46 |
| *** schaney has joined #openstack-containers | 20:46 | |
| markguz_ | weird thing is that it obviously created the certificate, as the cluster created ok. | 20:47 |
| imdigitaljim | how are you trying to get the certificate | 20:49 |
| imdigitaljim | im thinking your user is not validated/scoped correctly and the policy rejects your user | 20:52 |
| *** strigazi has joined #openstack-containers | 20:54 | |
| *** strigazi has quit IRC | 20:55 | |
| *** strigazi has joined #openstack-containers | 21:01 | |
| imdigitaljim | openstack coe meeting start | 21:02 |
| imdigitaljim | nope | 21:02 |
| colin- | 403 | 21:02 |
| imdigitaljim | :( | 21:02 |
| strigazi | hello | 21:03 |
| canori01 | hello | 21:03 |
| imdigitaljim | oh hi | 21:03 |
| strigazi | I came back from holidays and #openstack-unregistered hit me | 21:04 |
| imdigitaljim | ah yeah | 21:04 |
| strigazi | Let's start | 21:04 |
| colin- | wb | 21:04 |
| canori01 | yeah, they've been getting spammed | 21:04 |
| strigazi | #startmeeting containers | 21:05 |
| openstack | Meeting started Tue Aug 7 21:05:04 2018 UTC and is due to finish in 60 minutes. The chair is strigazi. Information about MeetBot at http://wiki.debian.org/MeetBot. | 21:05 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 21:05 |
| openstack | The meeting name has been set to 'containers' | 21:05 |
| strigazi | #topic Roll Call | 21:05 |
| strigazi | o/ | 21:05 |
| colin- | greetings | 21:05 |
| canori01 | o/ | 21:05 |
| imdigitaljim | o/ | 21:05 |
| strigazi | #topic Announcements | 21:06 |
| imdigitaljim | wb strigazi :) | 21:06 |
| imdigitaljim | been working on keystone auth/rbac on clusters | 21:06 |
| strigazi | Since I was having a look, to avoid problems when login in to Freenode and openstack channels, you can add a wait after the identify cmd | 21:07 |
| strigazi | imdigitaljim: :) | 21:07 |
| imdigitaljim | started some cleanup | 21:07 |
| strigazi | I have one more announcement: | 21:07 |
| strigazi | python-magnumclient 2.10.0 is out and the rocky branch is cut | 21:07 |
| strigazi | we still have freedom to add things to rocky, it is on the project, but we had to cut the branch to sync constraints and requirements with all OS projects | 21:08 |
| strigazi | Questions about that? | 21:08 |
| imdigitaljim | nope | 21:09 |
| imdigitaljim | sounds godo | 21:09 |
| imdigitaljim | good* | 21:09 |
| colin- | no | 21:09 |
| strigazi | cool | 21:09 |
| strigazi | #topic Blueprints/Bugs/Ideas | 21:09 |
| cbrumm | o/ | 21:09 |
| strigazi | imdigitaljim: since you started, please continue | 21:09 |
| strigazi | cbrumm: o/ | 21:09 |
| cbrumm | sorry, I was just saying I'm late but here | 21:10 |
| imdigitaljim | sure, our org is getting permissions to contribute to k8s org and we'll be making a few upstream changes for magnum to take advantage of for kubernetes created resources and some keystone/rbac cluster usage | 21:10 |
| markguz_ | imdigitaljim: yeah i know. but i'm not sure why | 21:10 |
| cbrumm | bad timing to raise my hand | 21:10 |
| strigazi | cbrumm: no worries :) | 21:10 |
| imdigitaljim | markguz: are you making an api call/cli/ui? | 21:11 |
| canori01 | I'm looking forward to the keystone rbac usage | 21:11 |
| markguz_ | imdigitaljim: running "openstack coe cluster config <clustername>" | 21:11 |
| strigazi | They only part I have to work a bit was kubeconfig, the rest is working | 21:12 |
| strigazi | markguz_: could we tell kubectl to execute openstack token issue in kubeconfig? | 21:13 |
| strigazi | I was using kubectl like so: kubectl --token=$(openstack token issue --format json | jq .id -r) --kubeconfig=config get po -n kube-system | 21:14 |
| imdigitaljim | ive got it where a user can access the cluster using os credentials on another machine with mainly just the ca of the cluster | 21:15 |
| strigazi | The plan is add a param to cluster config to generate the appropriate output right? | 21:15 |
| strigazi | like this: http://paste.openstack.org/show/727576/ ? | 21:16 |
| strigazi | imdigitaljim: ^^ | 21:16 |
| imdigitaljim | using this approach https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/using-client-keystone-auth.md | 21:17 |
| strigazi | imdigitaljim: you used the extra binary? | 21:17 |
| imdigitaljim | i have so far | 21:17 |
| strigazi | this binary client-keystone-auth | 21:18 |
| imdigitaljim | yes | 21:18 |
| strigazi | with the kubeconfig I pasted and the cmd above you don't need another binary | 21:18 |
| imdigitaljim | ill try it out | 21:19 |
| strigazi | for CERN and maybe other orgs using osc means kerberos auth | 21:19 |
| strigazi | markguz_: imdigitaljim for keystone/authNZ what do you plan to add? | 21:20 |
| imdigitaljim | flwang: proposed some stuff so far | 21:21 |
| markguz_ | strigazi: i've stumbled on here in the middle of your meeting. I'm not involved in the meeting sorry | 21:21 |
| imdigitaljim | going to see what i finish with and compare notes | 21:22 |
| strigazi | markguz_: np | 21:22 |
| strigazi | imdigitaljim: ok cool | 21:22 |
| strigazi | imdigitaljim: Do you want to add anything else? About the roles for master nodes etc | 21:23 |
| imdigitaljim | also | 21:23 |
| imdigitaljim | i tested that config | 21:23 |
| imdigitaljim | WARNING: in-tree openstack auth plugin is now deprecated. please use the "client-keystone-auth" kubectl/client-go credential plugin instead | 21:23 |
| imdigitaljim | longterm we'll be moved out of tree | 21:24 |
| strigazi | the one I shared? | 21:24 |
| imdigitaljim | yes | 21:24 |
| imdigitaljim | for v1.11.0 | 21:24 |
| imdigitaljim | it worked but its appears to be deprecated? | 21:24 |
| strigazi | I tried with 1.10 I think | 21:25 |
| imdigitaljim | but because of the oot we might have to use the binary | 21:25 |
| strigazi | since you are investigating, can you check if and how we could use OSC instead of client-keystone-auth | 21:25 |
| imdigitaljim | yeah ill keep investigated | 21:25 |
| imdigitaljim | investigating* | 21:26 |
| imdigitaljim | the binary doesnt even do that much | 21:26 |
| imdigitaljim | anyways thats all for me | 21:26 |
| strigazi | Thanks | 21:27 |
| strigazi | For me, I'm trying to finish with flwang the changes to use 1.11.x, a minor bug for multimaster | 21:28 |
| strigazi | the proper tls certs for the serviceaccount, I required quite some digging to find the root cause. | 21:28 |
| strigazi | the proper tls certs for the serviceaccount, It required quite some digging to find the root cause. | 21:28 |
| strigazi | Also this week, I'm adding kube-proxy to the master nodes plus missing parameter for kube-proxy. | 21:29 |
| strigazi | kube-proxy needs --cluster-cidr to be set to the pod-cidr | 21:30 |
| strigazi | for pods with host-network it required so that they can resolve other pod IPs eg the coredns pod | 21:30 |
| imdigitaljim | since you're doing those pieces please checkout https://review.openstack.org/#/c/589214/ | 21:30 |
| imdigitaljim | otherwise i can push the master kube-proxy shortly as well | 21:31 |
| strigazi | imdigitaljim: I was also thinking about this: https://review.openstack.org/#/c/589214/3/magnum/drivers/common/templates/kubernetes/fragments/configure-kubernetes-master.sh@131 | 21:32 |
| imdigitaljim | what about it? | 21:32 |
| strigazi | I like, to clean the parameters. | 21:33 |
| strigazi | I like it, to clean the parameters. | 21:33 |
| imdigitaljim | yeah definitely | 21:33 |
| imdigitaljim | i plan to "cleanup" each file with a heavy pass | 21:33 |
| imdigitaljim | then a final pass with small changes | 21:33 |
| imdigitaljim | but mostly for readability and not really any functional changes | 21:33 |
| strigazi | we also need to use as much as possible the params in kubecofig, in 1.11 many params are deprecated | 21:34 |
| imdigitaljim | yeah did you see the bottom | 21:34 |
| imdigitaljim | https://review.openstack.org/#/c/589214/3/magnum/drivers/common/templates/kubernetes/fragments/configure-kubernetes-master.sh@288 | 21:34 |
| imdigitaljim | staging that here for later | 21:34 |
| imdigitaljim | so we can collectively validate it works | 21:35 |
| strigazi | ok, I think we can add kube-proxy first and then add the heavy patches | 21:35 |
| imdigitaljim | if you want, i can provide them as part of the updates | 21:36 |
| strigazi | in the same commit you mean? | 21:36 |
| imdigitaljim | no we'll do this one, then my next one is make-cert.sh as a cleanup | 21:36 |
| imdigitaljim | then the kube-proxy patch | 21:36 |
| strigazi | ok | 21:37 |
| strigazi | I | 21:37 |
| imdigitaljim | i have them ready to go just need them pushed incrementally | 21:37 |
| strigazi | I'll test tomorrow then | 21:37 |
| imdigitaljim | yeah that'd be great | 21:37 |
| strigazi | I left for a weak and found my devstack env dead... | 21:37 |
| imdigitaljim | oh no! | 21:37 |
| strigazi | not a big deal, super annoying | 21:38 |
| imdigitaljim | yeah that might take a bit to recover | 21:38 |
| colin- | probably run better in docker containers as k8s deployments ;) | 21:38 |
| strigazi | imdigitaljim: never recover devsstack, only replace | 21:38 |
| imdigitaljim | sure, i just mean get back to operational :p | 21:39 |
| strigazi | colin-: :) | 21:39 |
| canori01 | For me, regarding the work I've been doing to fix the CoreOS driver, I found this story: https://storyboard.openstack.org/#!/story/1490334. So I pinged yatin and he said I could take the story. Would you be able to reassign it strigazi? | 21:40 |
| strigazi | also, I'll push the changes for in-place upgrades to have them in rocky, to see how we can move forward. | 21:40 |
| strigazi | canori01: you are Rick Cano? | 21:40 |
| canori01 | yeah | 21:40 |
| strigazi | assinged | 21:41 |
| canori01 | Ricardo actually, but I go by rick :D | 21:41 |
| strigazi | fyi, you appear two times in storyboard | 21:41 |
| canori01 | I'm not sure why that is | 21:42 |
| strigazi | speaking of coreos and atomic, I'm in flocktofedora.org seeking answears for our future with fedora atomic | 21:42 |
| canori01 | Other than that, I would just need reviews on that change https://review.openstack.org/#/c/579026/6 | 21:42 |
| strigazi | canori01: I'll do my best to test it | 21:43 |
| imdigitaljim | strigazi: great, please keep us posted | 21:43 |
| canori01 | strigazi: is that regarding the RedHat acquisition of coreos? | 21:43 |
| strigazi | canori01: we don't actually care about the acquisition, but coreos and fedora atomic will become Fedora Core | 21:44 |
| canori01 | ah, yes. that will be interesting | 21:45 |
| strigazi | the only certain thing is that instead of gentoo builds they will do builds with rpms | 21:45 |
| strigazi | let's see | 21:45 |
| strigazi | imdigitaljim: feel free to push a patchset to https://review.openstack.org/#/c/582955/ to take it in | 21:46 |
| strigazi | We have concensus on the solution, I'm not pushing to minimize the patches that I approve and contribute too | 21:48 |
| imdigitaljim | wonderful | 21:48 |
| imdigitaljim | i will | 21:48 |
| strigazi | Before we start to wrap, Just a question | 21:49 |
| strigazi | imdigitaljim: do you use fedora atomic? (if you can answer) | 21:50 |
| strigazi | canori01: You have evaluated both coreos and fedora atomic?> | 21:50 |
| imdigitaljim | yes, as we sit right now its fedora atomic | 21:50 |
| canori01 | strigazi: yes, I have | 21:51 |
| strigazi | canori01: You have selected coreos? | 21:52 |
| canori01 | Well, my organization has. If it were up to me personally, I would use either | 21:53 |
| strigazi | canori01: yeap, I get it | 21:53 |
| strigazi | @all Anything else? | 21:54 |
| colin- | nope | 21:54 |
| canori01 | nope | 21:54 |
| strigazi | Thanks for joining the meeting everyone, see you indentified with your nick in #openstack-contianers :) | 21:56 |
| colin- | ttyl | 21:56 |
| strigazi | #endmeeting | 21:56 |
| openstack | Meeting ended Tue Aug 7 21:56:48 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 21:56 |
| *** slagle has quit IRC | 21:56 | |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/containers/2018/containers.2018-08-07-21.05.html | 21:56 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/containers/2018/containers.2018-08-07-21.05.txt | 21:56 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/containers/2018/containers.2018-08-07-21.05.log.html | 21:56 |
| *** strigazi has quit IRC | 22:00 | |
| *** rcernin has joined #openstack-containers | 22:20 | |
| *** strigazi has joined #openstack-containers | 22:20 | |
| *** strigazi has quit IRC | 22:21 | |
| *** strigazi has joined #openstack-containers | 22:21 | |
| *** strigazi has left #openstack-containers | 22:24 | |
| *** strigazi has joined #openstack-containers | 22:26 | |
| *** strigazi has quit IRC | 22:27 | |
| *** strigazi has joined #openstack-containers | 22:28 | |
| *** strigazi has quit IRC | 22:28 | |
| *** strigazi has joined #openstack-containers | 22:29 | |
| *** strigazi has quit IRC | 22:32 | |
| *** strigazi has joined #openstack-containers | 22:33 | |
| *** hongbin has quit IRC | 22:39 | |
| *** flwang has joined #openstack-containers | 23:16 | |
| *** markguz_ has quit IRC | 23:41 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!