| *** hongbin has quit IRC | 00:07 | |
| *** sdake has quit IRC | 00:25 | |
| *** sdake has joined #openstack-containers | 00:30 | |
| *** sdake has quit IRC | 00:30 | |
| *** N3l1x has joined #openstack-containers | 00:32 | |
| *** Nel1x has quit IRC | 00:32 | |
| *** flwang has quit IRC | 00:42 | |
| *** sdake has joined #openstack-containers | 00:56 | |
| *** sdake has quit IRC | 01:03 | |
| *** sdake has joined #openstack-containers | 01:19 | |
| *** sdake has quit IRC | 01:27 | |
| *** sdake has joined #openstack-containers | 01:35 | |
| *** flwang has joined #openstack-containers | 01:48 | |
| *** ricolin has joined #openstack-containers | 01:50 | |
| *** sdake has quit IRC | 01:52 | |
| *** ricolin has quit IRC | 02:03 | |
| *** sdake has joined #openstack-containers | 02:20 | |
| *** hongbin has joined #openstack-containers | 03:00 | |
| *** jento has quit IRC | 03:05 | |
| *** sdake has quit IRC | 03:17 | |
| *** sdake has joined #openstack-containers | 03:19 | |
| *** ykarel|away has joined #openstack-containers | 03:23 | |
| *** hongbin has quit IRC | 03:34 | |
| *** sdake has quit IRC | 03:35 | |
| *** sdake has joined #openstack-containers | 03:58 | |
| *** sdake has quit IRC | 04:16 | |
| *** udesale has joined #openstack-containers | 04:17 | |
| *** jento has joined #openstack-containers | 04:39 | |
| *** sdake has joined #openstack-containers | 04:45 | |
| *** lpetrut has joined #openstack-containers | 04:46 | |
| *** dims has quit IRC | 04:58 | |
| *** ykarel|away is now known as ykarel | 04:59 | |
| *** N3l1x has quit IRC | 05:19 | |
| *** lpetrut has quit IRC | 05:23 | |
| *** janki has joined #openstack-containers | 05:42 | |
| *** ykarel has quit IRC | 05:44 | |
| *** ykarel has joined #openstack-containers | 05:53 | |
| *** sdake has quit IRC | 06:03 | |
| *** dims has joined #openstack-containers | 06:48 | |
| *** dims has quit IRC | 06:52 | |
| *** dims has joined #openstack-containers | 06:54 | |
| *** dims has quit IRC | 06:59 | |
| *** dims has joined #openstack-containers | 07:02 | |
| *** pcaruana has joined #openstack-containers | 07:45 | |
| *** ricolin has joined #openstack-containers | 07:50 | |
| *** ricolin has quit IRC | 08:03 | |
| *** belmoreira has joined #openstack-containers | 08:09 | |
| *** lpetrut has joined #openstack-containers | 08:21 | |
| *** lpetrut has quit IRC | 08:21 | |
| *** lpetrut has joined #openstack-containers | 08:22 | |
| *** lpetrut has quit IRC | 08:28 | |
| *** ykarel is now known as ykarel|lunch | 08:44 | |
| *** ttsiouts has joined #openstack-containers | 08:45 | |
| *** ttsiouts has quit IRC | 08:55 | |
| *** ttsiouts has joined #openstack-containers | 09:08 | |
| openstackgerrit | Merged openstack/magnum stable/rocky: [k8s_fedora_atomic] Delete floating ip for load balancer https://review.openstack.org/634620 | 10:00 |
|---|---|---|
| *** ykarel|lunch is now known as ykarel | 10:05 | |
| *** ign0tus has joined #openstack-containers | 10:11 | |
| *** yolanda has quit IRC | 10:14 | |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: k8s_fedora: Deploy tiller https://review.openstack.org/612336 | 10:52 |
| openstackgerrit | Lingxian Kong proposed openstack/magnum stable/rocky: Support octavia-ingress-controller https://review.openstack.org/634911 | 10:59 |
| *** ttsiouts has quit IRC | 11:12 | |
| *** ttsiouts has joined #openstack-containers | 11:12 | |
| *** ttsiouts has quit IRC | 11:16 | |
| *** udesale has quit IRC | 11:28 | |
| *** ramishra has quit IRC | 11:45 | |
| openstackgerrit | Ricardo Rocha proposed openstack/magnum master: Allow overwriting labels on swarm mode creation https://review.openstack.org/634501 | 11:56 |
| openstackgerrit | Ricardo Rocha proposed openstack/magnum master: Allow overwriting labels on swarm mode creation https://review.openstack.org/634501 | 11:58 |
| *** ramishra has joined #openstack-containers | 12:00 | |
| *** ttsiouts has joined #openstack-containers | 12:31 | |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: [k8s] helm install metrics service https://review.openstack.org/632392 | 12:43 |
| *** janki has quit IRC | 12:59 | |
| *** sdake has joined #openstack-containers | 13:05 | |
| *** jmlowe has quit IRC | 13:17 | |
| *** jmlowe has joined #openstack-containers | 13:34 | |
| *** sdake has quit IRC | 13:54 | |
| *** ykarel is now known as ykarel|away | 13:58 | |
| *** sdake has joined #openstack-containers | 14:03 | |
| *** sdake has quit IRC | 14:17 | |
| *** ttsiouts has quit IRC | 14:30 | |
| *** ttsiouts has joined #openstack-containers | 14:31 | |
| *** udesale has joined #openstack-containers | 14:32 | |
| *** sdake has joined #openstack-containers | 14:34 | |
| *** ttsiouts has quit IRC | 14:36 | |
| *** PabloMartinez has quit IRC | 14:42 | |
| *** sdake has quit IRC | 14:45 | |
| *** ttsiouts has joined #openstack-containers | 14:47 | |
| *** sdake has joined #openstack-containers | 14:49 | |
| openstackgerrit | Ricardo Rocha proposed openstack/magnum master: Add hidden flag to cluster template https://review.openstack.org/634948 | 14:49 |
| *** sdake has quit IRC | 14:56 | |
| *** ign0tus has quit IRC | 14:56 | |
| *** Nel1x has joined #openstack-containers | 14:59 | |
| *** sdake has joined #openstack-containers | 15:04 | |
| *** udesale has quit IRC | 15:06 | |
| openstackgerrit | Diogo Guerra proposed openstack/magnum master: k8s_fedora: Deploy tiller https://review.openstack.org/612336 | 15:06 |
| openstackgerrit | Diogo Guerra proposed openstack/magnum master: [k8s] helm install metrics service https://review.openstack.org/632392 | 15:06 |
| *** ign0tus has joined #openstack-containers | 15:11 | |
| openstackgerrit | Ricardo Rocha proposed openstack/python-magnumclient master: Add hidden cmd flag to cluster template https://review.openstack.org/634955 | 15:22 |
| *** hongbin has joined #openstack-containers | 15:51 | |
| *** ricolin has joined #openstack-containers | 15:58 | |
| *** ign0tus has quit IRC | 16:11 | |
| *** belmoreira has quit IRC | 16:19 | |
| *** ttsiouts has quit IRC | 16:33 | |
| *** ttsiouts has joined #openstack-containers | 16:33 | |
| openstackgerrit | Ricardo Rocha proposed openstack/magnum master: Add hidden flag to cluster template https://review.openstack.org/634948 | 16:35 |
| *** openstackgerrit has quit IRC | 16:35 | |
| brtknr | oh no... openstackgerrit has left? | 16:37 |
| *** ttsiouts has quit IRC | 16:37 | |
| *** jmlowe has quit IRC | 16:44 | |
| *** ttsiouts has joined #openstack-containers | 16:44 | |
| *** ttsiouts has quit IRC | 16:48 | |
| *** ramishra has quit IRC | 17:15 | |
| *** flwang1 has joined #openstack-containers | 17:20 | |
| flwang1 | strigazi: today is NZ public holiday, i probably can't join the meeting | 17:20 |
| *** jmlowe has joined #openstack-containers | 17:27 | |
| *** ricolin has quit IRC | 17:32 | |
| *** jmlowe has quit IRC | 17:36 | |
| *** ykarel|away has quit IRC | 17:38 | |
| *** ykarel|away has joined #openstack-containers | 17:42 | |
| colin- | enjoy :) | 17:55 |
| *** jmlowe has joined #openstack-containers | 17:57 | |
| *** ykarel|away has quit IRC | 18:03 | |
| *** dims has quit IRC | 18:06 | |
| *** sdake has quit IRC | 18:11 | |
| *** dims has joined #openstack-containers | 18:26 | |
| *** Nel1x has quit IRC | 18:29 | |
| *** itlinux has joined #openstack-containers | 18:49 | |
| *** sdake has joined #openstack-containers | 18:52 | |
| *** dims has quit IRC | 19:16 | |
| *** dims has joined #openstack-containers | 19:25 | |
| *** pcaruana has quit IRC | 19:27 | |
| *** openstackgerrit has joined #openstack-containers | 19:54 | |
| openstackgerrit | Ricardo Rocha proposed openstack/magnum master: Add hidden flag to cluster template https://review.openstack.org/634948 | 19:54 |
| *** jmlowe has quit IRC | 20:29 | |
| openstackgerrit | Ricardo Rocha proposed openstack/magnum master: Add hidden flag to cluster template https://review.openstack.org/634948 | 20:48 |
| strigazi | flwang1: ack, thanks for the heads up, cheers | 20:48 |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: IGNORE: test gate master https://review.openstack.org/382202 | 20:51 |
| openstackgerrit | Feilong Wang proposed openstack/magnum stable/rocky: Allow cluster template being renamed https://review.openstack.org/635035 | 20:55 |
| strigazi | #startmeeting containers | 21:01 |
| openstack | Meeting started Tue Feb 5 21:01:09 2019 UTC and is due to finish in 60 minutes. The chair is strigazi. Information about MeetBot at http://wiki.debian.org/MeetBot. | 21:01 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 21:01 |
| *** openstack changes topic to " (Meeting topic: containers)" | 21:01 | |
| openstack | The meeting name has been set to 'containers' | 21:01 |
| strigazi | #topic Roll Call | 21:01 |
| eandersson | o/ | 21:01 |
| *** openstack changes topic to "Roll Call (Meeting topic: containers)" | 21:01 | |
| strigazi | o/ | 21:01 |
| jakeyip | o/ | 21:01 |
| strigazi | Hey eandersson and jakeyip, let's get into it. I needs some reviewers :) | 21:03 |
| strigazi | #topic Stories/Tasks | 21:03 |
| *** openstack changes topic to "Stories/Tasks (Meeting topic: containers)" | 21:03 | |
| eandersson | That's what we are here for! :D | 21:03 |
| strigazi | 5 items, here it goes: | 21:04 |
| strigazi | k8s_fedora: Deploy tiller https://review.openstack.org/#/c/612336/ | 21:04 |
| strigazi | [k8s_fedora] Add heat-agent to worker nodes https://review.openstack.org/#/c/561858/ | 21:04 |
| strigazi | [k8s] helm install metrics service https://review.openstack.org/#/c/632392/ | 21:04 |
| strigazi | Allow cluster template being renamed https://review.openstack.org/#/c/609174/ | 21:04 |
| strigazi | Add hidden flag to cluster template https://review.openstack.org/#/c/634948/ | 21:04 |
| strigazi | First two are mine, ready for review. I have mentioned them before. | 21:04 |
| strigazi | Tiller in master nodes, and heat-agent in all nodes | 21:05 |
| strigazi | Next, colleague Diogo works on deploying the metrics server with helm in 632392 | 21:05 |
| strigazi | And last two are useful for operators to advertise public CTs | 21:06 |
| strigazi | Feilong proposed to allow CTs being renamed, like docker.io/ubuntu:latest | 21:06 |
| strigazi | And ricardo has a complementary patch to add a hidden field in CTs. | 21:07 |
| strigazi | You advertise a CT to users and when you want to put it away you hide like images. | 21:07 |
| jakeyip | would love to help, actually looking at last two right now because that's something I was interested in :) | 21:07 |
| strigazi | clusters can use a hidden public CT, but users shopping for a CT can not list it. | 21:08 |
| strigazi | If the know the uuid they can use it. (bad for them, kind of). We can add a check to not allow creation with hidden CTs. Not sure we want this or if it is that important. | 21:09 |
| strigazi | nice jakeyip | 21:09 |
| strigazi | jakeyip: eandersson any questions? | 21:09 |
| jakeyip | there's actually a similar thing in glance but it's called community (?) | 21:10 |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: k8s_fedora: Deploy tiller https://review.openstack.org/612336 | 21:10 |
| openstackgerrit | Spyros Trigazis proposed openstack/magnum master: [k8s] helm install metrics service https://review.openstack.org/632392 | 21:10 |
| strigazi | jakeyip yes, we thought about it | 21:10 |
| eandersson | sounds straightforward enough | 21:10 |
| eandersson | anything in particular that is of higher priority? | 21:10 |
| strigazi | but we would have to deprecate public and make a new enum field. microversions etc | 21:10 |
| jakeyip | honestly, I think this is easier to understand and less awkward, but just would like to know if making things similar across services was considered | 21:11 |
| jakeyip | all good then | 21:11 |
| strigazi | 1st 634948 and 609174 the other three are important too but can be cherry-picked :) | 21:12 |
| strigazi | I mean downstream | 21:12 |
| strigazi | Adding helm, will simplify things a lot. We want all the CERN specific things to become a single chart that we just enable | 21:13 |
| strigazi | The heat agent can wait a bit but it is the simplest :) | 21:13 |
| jakeyip | re: tiller, I wonder if anybody has done tiller in gitlab before? does this implementation break that? | 21:14 |
| strigazi | jakeyip I had tried it. You can have many tillers | 21:14 |
| strigazi | that is why I add tiller in magnum-tiller | 21:14 |
| strigazi | the releases of helm live there | 21:15 |
| strigazi | The only thing that would break if gitlab's tiller wants to deploy the same thing. | 21:15 |
| strigazi | However I added the option to select the namespace | 21:15 |
| jakeyip | I see. nice! | 21:16 |
| strigazi | So you can install tiller in kube-system | 21:16 |
| strigazi | only things is you would have to distribute tiller certs | 21:16 |
| strigazi | jakeyip: how you deploy with gitlab? | 21:17 |
| jakeyip | so you can install in kube-system and let gitlab detect it? | 21:17 |
| strigazi | jakeyip: yes, it is the default but gitlab will need the certs to talk to tiller over tls. I haven't tried that | 21:18 |
| strigazi | jakeyip: I'll give it a go. | 21:18 |
| jakeyip | strigazi: a gitlab user can spin up their own cluster and attach the cluster to it their gitlab account | 21:18 |
| jakeyip | strigazi: then they'll have the option to install tiller and it'll be able to pick up the jobs in CI/CD pipelines on a commit. | 21:19 |
| strigazi | jakeyip: I'll give a go again, it is been some time. The option to insall tiller in magnum-tiller ns is totally compatible | 21:20 |
| jakeyip | I think it's fine if it's different NS | 21:20 |
| *** schaney has joined #openstack-containers | 21:20 | |
| jakeyip | the annoying thing is that gitlab doesn't let you choose NS :P | 21:20 |
| jakeyip | your implementation is superior | 21:21 |
| strigazi | jakeyip: I implemtented all the best practices mentioned in the docs | 21:21 |
| strigazi | jakeyip: only thing I couldn't avoid is make tiller sa very powerfull | 21:22 |
| strigazi | jakeyip: the metrics server chart needs to create cluster level roles and bindings | 21:22 |
| strigazi | jakeyip: it was unavoidable | 21:23 |
| strigazi | jakeyip: eandersson have a look into this: https://github.com/stefanprodan/gitops-helm | 21:23 |
| strigazi | better than pushing to the cluster. The cluster pulls instead when you push code. | 21:23 |
| eandersson | cbrumm_, ^ | 21:24 |
| cbrumm_ | thanks @eandersson: I'll review later | 21:25 |
| strigazi | Ricardo had implemented a similar method but this one is more mature | 21:25 |
| strigazi | eandersson: this one https://gitlab.cern.ch/helm/plugins/crd-release/tree/crd | 21:26 |
| eandersson | interesting | 21:26 |
| strigazi | we didn't know about the gitops thing before | 21:27 |
| strigazi | eandersson: the only depressing thing is that it is the same pattern as our puppet deployment, soooo it might bite later? who knows :) | 21:28 |
| *** itlinux has quit IRC | 21:29 | |
| jakeyip | strigazi: how's your puppet deployment like? | 21:30 |
| strigazi | jakeyip: in short: you push to repo, puppet-master picks up the changes, puppet agent runs every 60mins (unless you tell it to run) and applies the config | 21:31 |
| strigazi | jakeyip: so similarly, with gitops, you push the chart to repo, cluster listens to webhook (or cronjob) and it applies the chart | 21:32 |
| strigazi | jakeyip: makes sense? | 21:33 |
| jakeyip | are you using puppet to update helm charts? | 21:33 |
| strigazi | jakeyip: no | 21:34 |
| jakeyip | sorry, I mean to run the updated charts; update containers in your cluster | 21:34 |
| strigazi | jakeyip: at the moment each team has each own method. Some do it with helm by hand | 21:36 |
| strigazi | others with gitlab, but without the integration, just in gitlab ci the ci knows how to talk to the cluster | 21:37 |
| *** sdake has quit IRC | 21:39 | |
| jakeyip | strigazi: which integration is this referring to? | 21:39 |
| jakeyip | (I think we can take this topic offline if necessary, I don't want to hold up meeting time) | 21:40 |
| strigazi | eandersson: do you have anything to add? Do you need any further clarifications for the patches I mentioned before? | 21:41 |
| strigazi | jakeyip: same ^^ | 21:41 |
| eandersson | I'll take some time towards the end of the week to go through them | 21:42 |
| eandersson | and I'll let you know if I need anything else | 21:42 |
| strigazi | Thanks | 21:43 |
| jakeyip | same. I'm new so not that familiar with magnum code base, but I'll try to help. | 21:44 |
| strigazi | thanks jakeyip | 21:45 |
| openstackgerrit | Merged openstack/magnum master: Allow cluster template being renamed https://review.openstack.org/609174 | 21:46 |
| strigazi | eandersson: jakeyip so Feilong was did it :) | 21:47 |
| strigazi | flwang1: you can also review Ricardo's patch, Allow cluster template being renamed https://review.openstack.org/#/c/609174/ | 21:47 |
| strigazi | I think you will need that to not have a huge list of CTs | 21:48 |
| flwang1 | strigazi: which one? | 21:48 |
| strigazi | two line above | 21:48 |
| strigazi | wrong link | 21:49 |
| strigazi | correct: | 21:49 |
| strigazi | Add hidden flag to cluster template https://review.openstack.org/#/c/634948/ | 21:49 |
| flwang1 | strigazi: oh, yep, we had similar idea for glance public images | 21:50 |
| flwang1 | it's quite annoying when the number is big | 21:50 |
| strigazi | flwang1: the idea comes from there. We use community images in our cloud to not have a massive list of images | 21:50 |
| flwang1 | i will review that | 21:50 |
| strigazi | I explained above that we didn't use the same thing to not have to deprecate the public field. | 21:51 |
| strigazi | Also IMO hidden makes more sense than community | 21:51 |
| flwang1 | strigazi: yep, generally, user/admin just don't want to see them in the list | 21:52 |
| strigazi | When the cloud admin marks an image community, it is strange | 21:52 |
| flwang1 | i agree | 21:54 |
| flwang1 | personally, i like the 'hidden' idea | 21:54 |
| strigazi | sweet \o/ | 21:54 |
| strigazi | let's do this :) | 21:55 |
| strigazi | I need to review it actually first xD | 21:55 |
| strigazi | Let's end the meeting? Anything else to discuss? | 21:55 |
| strigazi | said once | 21:57 |
| strigazi | said twice | 21:57 |
| strigazi | See you around! | 21:57 |
| strigazi | #endmeeting | 21:57 |
| *** openstack changes topic to "OpenStack Containers Team" | 21:57 | |
| openstack | Meeting ended Tue Feb 5 21:57:38 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 21:57 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/containers/2019/containers.2019-02-05-21.01.html | 21:57 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/containers/2019/containers.2019-02-05-21.01.txt | 21:57 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/containers/2019/containers.2019-02-05-21.01.log.html | 21:57 |
| *** _fragatina has joined #openstack-containers | 22:06 | |
| *** _fragatina_ has joined #openstack-containers | 22:07 | |
| flwang1 | thank you, strigazi | 22:08 |
| *** _fragatina has quit IRC | 22:10 | |
| *** sdake has joined #openstack-containers | 22:27 | |
| *** sdake has quit IRC | 22:34 | |
| *** sdake has joined #openstack-containers | 22:36 | |
| *** _fragatina_ has quit IRC | 22:43 | |
| openstackgerrit | Ricardo Rocha proposed openstack/magnum master: Add hidden flag to cluster template https://review.openstack.org/634948 | 23:05 |
| *** hongbin has quit IRC | 23:18 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!