Monday, 2019-02-18

*** Florian has joined #openstack-containers00:08
*** itlinux_ has joined #openstack-containers00:11
*** itlinux has quit IRC00:13
*** itlinux has joined #openstack-containers00:38
*** itlinux_ has quit IRC00:40
openstackgerritFeilong Wang proposed openstack/magnum master: Add server group for cluster worker nodes  https://review.openstack.org/61382500:54
*** sapd1 has joined #openstack-containers00:58
*** itlinux has quit IRC01:03
*** itlinux has joined #openstack-containers01:13
*** dave-mccowan has joined #openstack-containers01:23
openstackgerritMerged openstack/magnum master: Add hidden flag to cluster template  https://review.openstack.org/63494801:28
*** itlinux has quit IRC01:38
*** sdake has joined #openstack-containers01:59
*** sdake has quit IRC02:18
*** sdake has joined #openstack-containers02:20
*** mgoddard has quit IRC02:32
*** sdake has quit IRC02:44
openstackgerritFeilong Wang proposed openstack/magnum master: [fedora_atomic] Support auto healing for k8s  https://review.openstack.org/63137803:01
*** sapd1 has quit IRC03:07
*** hongbin has joined #openstack-containers03:10
*** ykarel|away has joined #openstack-containers03:10
*** janki has joined #openstack-containers03:21
*** sapd1 has joined #openstack-containers03:23
openstackgerritHuang.Xiangdong proposed openstack/magnum master: suport multi discovery service  https://review.openstack.org/63745003:28
*** ricolin has joined #openstack-containers03:38
*** udesale has joined #openstack-containers03:44
*** ykarel|away is now known as ykarel04:00
*** ramishra has joined #openstack-containers04:07
*** dave-mccowan has quit IRC04:07
*** _fragatina has quit IRC04:26
*** _fragatina has joined #openstack-containers04:26
*** lpetrut has joined #openstack-containers04:43
*** sapd1 has quit IRC04:48
*** ykarel has quit IRC04:58
*** sapd1 has joined #openstack-containers05:00
*** lpetrut has quit IRC05:10
*** ykarel has joined #openstack-containers05:19
*** hongbin has quit IRC05:42
*** sdake has joined #openstack-containers06:38
*** belmoreira has joined #openstack-containers06:49
*** sdake has quit IRC07:30
*** pcaruana has joined #openstack-containers07:43
*** ykarel is now known as ykarel|lunch07:58
*** mgoerens has joined #openstack-containers08:21
mgoerensHi team! I'm using DevStack Queens, and I'm hitting some issue when enabling SSL. On cluster creation, Nova complains that the provided user_data is too long, see this issue: https://bugs.launchpad.net/nova/+bug/1669979. Without SSL, we don't hit this limit.08:23
openstackLaunchpad bug 1669979 in OpenStack Compute (nova) "failed to boot instance when user data is larger than 65535 bytes" [Wishlist,Expired]08:23
mgoerensOn NON-SSL DevStack: user_data sent from HEAT to NOVA has 59676 bytes.08:23
mgoerensOn SSL DevStack: user_data sent from HEAT to NOVA has 66488 bytes (limit is 65535 bytes)08:23
mgoerensDecoding the base64 user_data shows only one difference: In the second case, the SSL certificates are added.08:24
mgoerensI was wondering if this is an issue you already encountered, and if so, how you worked around it. Thanks for reading!08:24
*** mgoddard has joined #openstack-containers08:33
*** ArchiFleKs has quit IRC08:41
*** ykarel|lunch is now known as ykarel08:59
*** ArchiFleKs has joined #openstack-containers09:00
*** pcaruana|afk| has joined #openstack-containers09:01
*** pcaruana has quit IRC09:02
*** ramishra has quit IRC09:05
*** ramishra has joined #openstack-containers09:09
*** sdake has joined #openstack-containers09:14
*** ramishra_ has joined #openstack-containers09:21
*** ramishra has quit IRC09:23
*** ttsiouts has joined #openstack-containers09:23
*** sapd1 has quit IRC09:33
*** trident has joined #openstack-containers09:38
*** Florian has quit IRC09:49
*** sapd1 has joined #openstack-containers09:49
*** Horrorcat has joined #openstack-containers09:55
Horrorcatimdigitaljim, sorry for the delay. I’m back on my Fedora-27-does-not-work-but-CoreOS-does with my mixture of Rocky (magnum, heat) and Pike (everything else) services. Here’s the output of kubectl get all --all-namespaces=true of a fresh Fedora 27 Atomic-based cluster: http://paste.debian.net/hidden/d1976547/10:01
*** pcaruana|afk| has quit IRC10:01
strigaziHorrorcat: this looks ok ^^ can you kubectl get all --all-namespaces10:03
strigazimgoerens in queens you shouldn't see this anymore10:05
*** ramishra_ has quit IRC10:06
*** pcaruana has joined #openstack-containers10:07
*** ramishra has joined #openstack-containers10:09
*** dioguerra has joined #openstack-containers10:25
Horrorcatstrigazi, that’s what I did, isn’t it?10:27
Horrorcatstrigazi, http://paste.debian.net/hidden/3066f8e0/10:27
dioguerraFeilong Wang: Responded to your query at https://review.openstack.org/#/c/632392/1310:27
strigaziHorrorcat: I see three lines, the shell, the headers and the kubernetes svc10:29
mgoerensstrigazi, thanks for your answer. I deploy DevStack using "TARGET_BRANCH=stable/queens", and all components seems to be in Queens: magnum-api --version 6.3.1.dev1; heat-api --version 10.0.3; nova-api --version 17.0.1010:30
strigazimgoerens: and the stack craetion fails?10:31
strigaziwith the user_data thing?10:33
mgoerensyes, the Heat stack creation fails. Nova complains that the user_data is too long (exceeds the limit of 65535 bytes)10:33
strigazimgoerens: You pass the openstack_ca in magnum conf? Is that file too big?10:34
mgoerensAlso, the heat stack status goes to CREATE_FAILED, but Magnum doesn't update the cluster status accordingly. In the Magnum logs, the MagnumPeriodicTasks.sync_cluster_status fails with a DBDataError "Data too long for column 'status_reason'"10:35
mgoerensstrigazi, let me check that10:35
mgoerens$ sudo du -sk /opt/stack/data/ca-bundle.pem10:38
mgoerens4/opt/stack/data/ca-bundle.pem10:38
mgoerensstrigazi, it's not big no10:38
strigazimgoerens: which commit of magnum are you using? HEAD of stable/queens?10:39
mgoerensstrigazi, last commit in git log is "commit f86de684d2dcca018d056c44be4e4b164b8a4b32"10:43
mgoerensbranch is stable/queens10:43
mgoerens$ magnum-api --version10:43
mgoerens6.3.1.dev110:43
strigaziso HEAD, yes10:44
openstackgerritSpyros Trigazis proposed openstack/magnum stable/queens: DNM test queens  https://review.openstack.org/62615410:44
strigazihave modified anything? mgoerens let's see what the ci thinks ^^10:45
mgoerens(have to go will be back a bit later, strigazi thanks for your help)10:48
*** sdake has quit IRC11:16
*** sdake has joined #openstack-containers11:21
*** ttsiouts has quit IRC11:28
*** ttsiouts has joined #openstack-containers11:29
*** ttsiouts has quit IRC11:33
*** udesale has quit IRC11:33
*** udesale has joined #openstack-containers11:34
Horrorcatstrigazi, exactly, that’s the output I get11:39
strigaziHorrorcat: you don't get pods, deployment etc?11:40
strigaziHorrorcat: kubectl get cs11:40
Horrorcatstrigazi, yes, exactly.11:41
Horrorcatstrigazi, kubectl get cs: http://paste.debian.net/hidden/7440dd1a/11:41
strigaziHorrorcat: ssh fedora@<master ip> "sudo journcalctl -u heat-container-agent --no-pager"11:43
strigaziHorrorcat: ssh fedora@<master ip> "sudo docker ps -a"11:43
strigaziHorrorcat: ssh fedora@<master ip> "sudo atomic containers list"11:43
Horrorcat(that’ll take a moment)11:43
strigaziHorrorcat: the firsh one contains endpoints and maybe credentials11:44
strigaziHorrorcat: check the content before sharing11:44
Horrorcatwill do, thanks for the warning11:44
strigaziafter we should check, journcalctl -u kube-{apiseserver, scheduler, controller-manager} --no-pager11:46
strigaziand the most obvious :), kubectl get nodes11:46
Horrorcatstrigazi, re journalctl -u heat-container-agent: http://paste.debian.net/hidden/3d579ede/ I think this might already show the cause to you; I omitted about 8000 repetitions of the last line.11:48
Horrorcatsudo docker ps -a is empty11:48
Horrorcatsudo atomic containers list: http://paste.debian.net/hidden/0ed70d19/11:49
*** janki has quit IRC11:49
Horrorcat(on the master) kubectl get nodes: http://paste.debian.net/hidden/6e95550c/11:49
Horrorcatjournalctl -u kube-apiserver: http://paste.debian.net/hidden/b30622eb/11:52
Horrorcatjournalctl -u kube-scheduler: http://paste.debian.net/hidden/fd3e0f18/11:52
Horrorcataaand I got ratelimited by the pastebin :D11:52
*** ttsiouts has joined #openstack-containers11:53
strigazipaste.openstack.org11:53
*** janki has joined #openstack-containers11:54
Horrorcatjournalctl -u kube-controller-manager: http://paste.openstack.org/raw/745254/11:55
Horrorcatthanks11:55
Horrorcatthat should be it11:55
strigazione last thing, /var/log/cloud-init-output.log (contains creds)11:56
strigazialso check for containers in the node (docker ps)11:56
strigazialso check for containers in the node (docker ps -a)11:56
Horrorcatdocker ps -a on the node is empty, too11:59
Horrorcat(still reviewing the cloud-init-output.log)11:59
Horrorcatstrigazi, http://paste.openstack.org/raw/COxfSgMCnQeaR7ZFZyJZ/ I hope I got everything and didn’t elide too much :)12:09
Horrorcat(cloud-init-output.log)12:09
*** sdake has quit IRC12:12
strigaziI think I found it12:13
strigaziHorrorcat: can you check in /etc/sysconfig/heat-params if the trust_id has a value?12:14
*** sdake has joined #openstack-containers12:17
Horrorcatno, it is set to ""12:18
strigaziHorrorcat: in [trust] set cluster_user_trust = true https://docs.openstack.org/magnum/latest/configuration/sample-config.html12:18
strigaziand create a new cluster12:19
strigazican you also show me your cluster's labels12:19
HorrorcatI will try that, thank you very much12:19
HorrorcatI wonder though, why would it work with CoreOS?12:20
Horrorcat| labels              | {'flannel_backend': 'host-gw'}                             |12:20
strigaziit is a new regression :( because we unified the config scripts and when the trust_id is empty it exits12:20
*** kaiokmo has joined #openstack-containers12:25
*** janki has quit IRC13:06
mgoerensstrigazi, I'm back. Shall I check something else on my DevStack Queens deployment ?13:06
Horrorcatstrigazi, from reading the comment cluster_user_trust is not a recommended thing to do. So do I understand it correctly that it should not be required in my case and it is a regression? If so, will the regression be fixed in a minor release?13:11
*** sdake has quit IRC13:28
*** _fragatina has quit IRC13:34
*** _fragatina has joined #openstack-containers13:34
*** jmlowe has quit IRC13:43
*** itlinux has joined #openstack-containers13:51
*** _fragatina has quit IRC13:53
*** _fragatina has joined #openstack-containers13:53
*** sdake has joined #openstack-containers13:55
openstackgerritRicardo Rocha proposed openstack/magnum master: [k8s] Add trustee as a secret in kube-system  https://review.openstack.org/63672513:58
*** itlinux has quit IRC14:08
*** itlinux has joined #openstack-containers14:11
*** ykarel is now known as ykarel|away14:14
*** ykarel|away is now known as ykarel14:15
*** ttsiouts has quit IRC14:19
*** ttsiouts has joined #openstack-containers14:20
*** ttsiouts has quit IRC14:23
*** ttsiouts has joined #openstack-containers14:23
strigazicluster_user_trust well, it is not recommended is a strong statement made by the creator of the patch. Without this you can not use the cloud provider or anything that needs authentication with openstack.14:28
strigaziHorrorcat: ^^14:28
*** mgoerens has quit IRC14:29
strigazithis trust id, give access to the cluster to the openstack project, to create volumes, lbaas and so on14:29
*** mgoerens has joined #openstack-containers14:31
*** ricolin_ has joined #openstack-containers14:40
*** jmlowe has joined #openstack-containers14:41
*** ricolin has quit IRC14:42
*** ykarel is now known as ykarel|away14:42
*** ykarel|away has quit IRC14:52
Horrorcatstrigazi, I’m confused though, why does it work with CoreOS then?14:52
*** sdake has quit IRC14:58
*** dave-mccowan has joined #openstack-containers14:58
*** janki has joined #openstack-containers15:00
*** dave-mccowan has quit IRC15:03
strigaziHorrorcat: in fedora we use this: https://github.com/openstack/magnum/blob/stable/rocky/magnum/drivers/common/templates/kubernetes/fragments/kube-apiserver-to-kubelet-role.sh#L8415:06
strigaziHorrorcat: in coreos we don't15:06
strigazimakese sense?15:06
strigazimakes sense?15:06
Horrorcatah! yes15:10
Horrorcatthanks!15:11
*** munimeha1 has joined #openstack-containers15:12
*** henriqueof has joined #openstack-containers15:14
*** ricolin_ has quit IRC15:16
*** ricolin_ has joined #openstack-containers15:17
*** jmlowe has quit IRC15:20
*** jmlowe has joined #openstack-containers15:21
*** itlinux has quit IRC15:37
*** udesale has quit IRC15:41
*** sdake has joined #openstack-containers15:44
*** ykarel|away has joined #openstack-containers15:50
*** itlinux has joined #openstack-containers15:50
*** itlinux has quit IRC15:51
*** ykarel|away is now known as ykarel15:51
*** itlinux has joined #openstack-containers16:03
*** itlinux has quit IRC16:06
*** itlinux has joined #openstack-containers16:07
*** itlinux has quit IRC16:08
*** janki has quit IRC16:08
*** pcaruana has quit IRC16:10
*** ramishra has quit IRC16:13
*** ykarel is now known as ykarel|away16:13
*** itlinux has joined #openstack-containers16:17
*** ramishra has joined #openstack-containers16:17
*** mgoerens has quit IRC16:26
*** flwang1 has joined #openstack-containers16:26
flwang1strigazi: around for a catch up?16:31
*** mgoerens has joined #openstack-containers16:33
*** ramishra has quit IRC16:42
*** ttsiouts has quit IRC16:47
*** ttsiouts has joined #openstack-containers16:48
*** ppetit has joined #openstack-containers16:50
*** ttsiouts has quit IRC16:52
*** ppetit has quit IRC16:53
*** ricolin_ has quit IRC17:00
*** sdake has quit IRC17:00
*** jmlowe has quit IRC17:02
openstackgerritDiogo Guerra proposed openstack/magnum master: Install prometheus monitoring with helm  https://review.openstack.org/62957717:02
*** Florian has joined #openstack-containers17:04
*** sdake has joined #openstack-containers17:05
*** ppetit_ has joined #openstack-containers17:06
*** ppetit_ has quit IRC17:14
*** ricolin has joined #openstack-containers17:16
*** jmlowe has joined #openstack-containers17:21
*** mgoerens has quit IRC17:23
openstackgerritMerged openstack/magnum stable/rocky: Allow cluster template being renamed  https://review.openstack.org/63503517:31
*** jmlowe has quit IRC17:31
*** ttsiouts has joined #openstack-containers17:42
*** jmlowe has joined #openstack-containers17:45
openstackgerritMerged openstack/magnum master: [k8s] helm install metrics service  https://review.openstack.org/63239217:46
*** _fragatina has quit IRC17:48
*** ricolin has quit IRC17:52
*** flwang1 has quit IRC17:53
*** sapd1 has quit IRC17:59
*** ykarel|away has quit IRC18:16
*** ykarel|away has joined #openstack-containers18:17
*** ykarel|away has quit IRC18:22
*** sdake has quit IRC18:29
*** sdake_ has joined #openstack-containers18:31
*** _fragatina has joined #openstack-containers19:00
*** hongbin has joined #openstack-containers19:36
*** hongbin has quit IRC19:43
*** sdake_ has quit IRC19:54
*** mrodriguez has joined #openstack-containers20:08
*** ttsiouts has quit IRC20:09
*** ttsiouts has joined #openstack-containers20:10
*** ttsiouts has quit IRC20:14
*** ttsiouts has joined #openstack-containers20:28
*** jmlowe has quit IRC20:56
*** ttsiouts has quit IRC21:07
*** ttsiouts has joined #openstack-containers21:08
*** ttsiouts has quit IRC21:13
*** rcernin has joined #openstack-containers21:40
*** ttsiouts has joined #openstack-containers21:43
*** henriqueof_ has joined #openstack-containers21:51
*** ttsiouts has quit IRC21:53
*** henriqueof has quit IRC21:53
*** ttsiouts has joined #openstack-containers21:54
*** ttsiouts has quit IRC21:59
*** dave-mccowan has joined #openstack-containers22:16
*** dave-mccowan has quit IRC22:21
*** _fragatina has quit IRC22:25
*** sdake has joined #openstack-containers22:25
*** _fragatina has joined #openstack-containers22:26
*** sdake has quit IRC22:27
*** jmlowe has joined #openstack-containers22:32
*** sdake has joined #openstack-containers22:33
*** sdake has quit IRC22:46
*** sdake has joined #openstack-containers22:47
*** ArchiFleKs has quit IRC23:04
*** munimeha1 has quit IRC23:12
*** sdake has quit IRC23:24
*** sdake has joined #openstack-containers23:24
*** ArchiFleKs has joined #openstack-containers23:25
*** sdake has quit IRC23:32
*** ttsiouts has joined #openstack-containers23:51
*** ttsiouts has quit IRC23:57
*** spsurya has quit IRC23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!