*** flwang has quit IRC | 00:16 | |
*** ianychoi has quit IRC | 00:17 | |
*** ianychoi has joined #openstack-containers | 00:18 | |
*** goldyfruit has left #openstack-containers | 00:27 | |
*** hongbin has joined #openstack-containers | 00:40 | |
*** itlinux has joined #openstack-containers | 01:05 | |
*** yolanda has quit IRC | 01:07 | |
*** yolanda has joined #openstack-containers | 01:15 | |
openstackgerrit | OpenStack Release Bot proposed openstack/magnum-ui stable/stein: Update .gitreview for stable/stein https://review.openstack.org/648571 | 01:16 |
---|---|---|
openstackgerrit | OpenStack Release Bot proposed openstack/magnum-ui stable/stein: Update UPPER_CONSTRAINTS_FILE for stable/stein https://review.openstack.org/648572 | 01:16 |
openstackgerrit | OpenStack Release Bot proposed openstack/magnum-ui master: Update master for stable/stein https://review.openstack.org/648573 | 01:16 |
*** flwang has joined #openstack-containers | 01:20 | |
*** ricolin has joined #openstack-containers | 01:21 | |
openstackgerrit | Merged openstack/magnum-ui stable/stein: Update .gitreview for stable/stein https://review.openstack.org/648571 | 01:52 |
openstackgerrit | Merged openstack/magnum-ui master: Update master for stable/stein https://review.openstack.org/648573 | 01:52 |
openstackgerrit | Merged openstack/magnum-ui stable/stein: Update UPPER_CONSTRAINTS_FILE for stable/stein https://review.openstack.org/648572 | 02:07 |
*** ramishra has joined #openstack-containers | 02:43 | |
openstackgerrit | Feilong Wang proposed openstack/magnum master: Allow admin update cluster/template in any project https://review.openstack.org/648590 | 03:04 |
*** goldyfruit has joined #openstack-containers | 03:09 | |
*** ykarel has joined #openstack-containers | 03:22 | |
*** hongbin has quit IRC | 03:52 | |
*** udesale has joined #openstack-containers | 03:56 | |
*** ykarel has quit IRC | 04:47 | |
*** ykarel has joined #openstack-containers | 05:02 | |
*** sidx64 has joined #openstack-containers | 05:43 | |
*** janki has joined #openstack-containers | 06:10 | |
*** rcernin has quit IRC | 06:38 | |
*** udesale has quit IRC | 06:41 | |
*** udesale has joined #openstack-containers | 06:41 | |
*** sidx64 has quit IRC | 07:09 | |
*** sidx64 has joined #openstack-containers | 07:14 | |
*** sidx64 has quit IRC | 07:39 | |
*** ykarel is now known as ykarel|lunch | 07:42 | |
*** rcernin has joined #openstack-containers | 08:23 | |
*** sidx64 has joined #openstack-containers | 08:25 | |
*** sidx64 has quit IRC | 08:26 | |
*** ttsiouts has joined #openstack-containers | 08:28 | |
*** sidx64 has joined #openstack-containers | 08:28 | |
*** ttsiouts has quit IRC | 08:40 | |
*** ykarel|lunch is now known as ykarel | 08:49 | |
*** rcernin has quit IRC | 08:57 | |
*** udesale has quit IRC | 08:57 | |
dioguerra | :goldyfruit what flag are you using? | 08:58 |
*** udesale has joined #openstack-containers | 08:58 | |
*** udesale has quit IRC | 09:07 | |
*** udesale has joined #openstack-containers | 09:10 | |
openstackgerrit | Ricardo Rocha proposed openstack/magnum master: Set a fixed cipher suite set for Traefik https://review.openstack.org/648649 | 09:12 |
*** pcaruana has joined #openstack-containers | 09:15 | |
*** udesale has quit IRC | 09:15 | |
*** sapd1_x has joined #openstack-containers | 09:17 | |
*** ttsiouts has joined #openstack-containers | 09:20 | |
*** alisanhaji has joined #openstack-containers | 09:21 | |
*** itlinux_ has joined #openstack-containers | 09:29 | |
*** itlinux has quit IRC | 09:31 | |
*** sapd1_x has quit IRC | 09:32 | |
openstackgerrit | Ricardo Rocha proposed openstack/magnum master: [k8s] Add nginx based ingress controller https://review.openstack.org/648655 | 09:48 |
*** sapd1_x has joined #openstack-containers | 09:55 | |
*** colby_ has quit IRC | 10:07 | |
*** colby_ has joined #openstack-containers | 10:10 | |
*** sapd1_x has quit IRC | 10:13 | |
*** ut2k3 has joined #openstack-containers | 10:22 | |
*** sapd1_x has joined #openstack-containers | 10:23 | |
*** ut2k3 has left #openstack-containers | 10:30 | |
*** ricolin has quit IRC | 10:33 | |
*** colby_ has quit IRC | 10:34 | |
*** ttsiouts has quit IRC | 11:12 | |
*** ttsiouts has joined #openstack-containers | 11:12 | |
*** ttsiouts has quit IRC | 11:17 | |
*** colby_ has joined #openstack-containers | 11:18 | |
*** benohara has joined #openstack-containers | 11:40 | |
*** sapd1_x has quit IRC | 11:40 | |
benohara | hey, anyone able to help trouble shoot an issue...when the kubernetes master boots, it runs cloudinit and fails when trying to retrieve the certificate | 11:41 |
benohara | magnum throws an exception...Remote error: Forbidden You are not authorized to perform the requested action: identity:get_user | 11:41 |
benohara | using barbican as the cert backend | 11:42 |
benohara | roles all look correct according to the queens install guide | 11:43 |
benohara | i also see when deleting a cluster, it tries to delete certificates, but uses http://localhost:9311?? | 11:44 |
*** ttsiouts has joined #openstack-containers | 11:48 | |
*** ttsiouts has quit IRC | 11:53 | |
*** benohara has quit IRC | 12:08 | |
*** benohara has joined #openstack-containers | 12:09 | |
*** janki has quit IRC | 12:20 | |
*** ttsiouts has joined #openstack-containers | 12:24 | |
*** goldyfruit has quit IRC | 12:25 | |
*** ttsiouts has quit IRC | 12:46 | |
*** ttsiouts has joined #openstack-containers | 12:47 | |
*** lpetrut has joined #openstack-containers | 13:15 | |
dioguerra | flwang: Managed to test everythin up until CA but not healing (broke my devstack) | 13:27 |
openstackgerrit | Diogo Guerra proposed openstack/magnum master: [k8s] Add missing container_prefix parameter https://review.openstack.org/637939 | 13:42 |
openstackgerrit | Diogo Guerra proposed openstack/magnum stable/stein: [k8s] Add missing container_prefix parameter https://review.openstack.org/648690 | 13:46 |
*** munimeha1 has joined #openstack-containers | 14:18 | |
NobodyCam | Good Morning Container folks, Happy Friday | 14:53 |
NobodyCam | I wanted to thank everyone here for all the help | 14:54 |
NobodyCam | I was able to solve my cluster stability issue after adding networks to the minion nodes | 14:56 |
*** alisanhaji has quit IRC | 14:57 | |
NobodyCam | solution involved some hacking in configure-kubernetes-master.sh | 14:57 |
NobodyCam | edited `--kubelet-preferred-address-types` the is set in kube_api_args | 14:58 |
NobodyCam | and added a startup script to build /etc/hosts file with all the internal addresses | 15:00 |
*** hongbin has joined #openstack-containers | 15:26 | |
*** gmann is now known as gmann_afk | 15:32 | |
*** ykarel has quit IRC | 15:40 | |
*** ricolin has joined #openstack-containers | 15:43 | |
*** lpetrut has quit IRC | 15:47 | |
*** sidx64 has quit IRC | 15:52 | |
*** ricolin has quit IRC | 16:07 | |
*** hongbin has quit IRC | 16:18 | |
*** benohara has quit IRC | 16:32 | |
brtknr | NobodyCam: what stability issue were youfacing? | 16:36 |
brtknr | NobodyCam: what did you edit --kubelet-preferred-address-types to? | 16:37 |
NobodyCam | Good Morning brtknr : My kube cluster would become unstable if I attached additional networks to the minion nodes (private vlan's are workload specific) | 16:39 |
brtknr | NobodyCam: We were having the same problems | 16:40 |
brtknr | I have 3 NIC per instance | 16:40 |
brtknr | nodes were randomly getting assigned IP from one of the 3 interfaces | 16:41 |
NobodyCam | I've got it stable and working, but it's a awful hack | 16:41 |
brtknr | NobodyCam: we fixed the problem by setting --kubelet-preferred-address-types=Hostname,InternalIP,ExternalIP | 16:42 |
*** ttsiouts has quit IRC | 16:42 | |
brtknr | But we have a DNS server which resolves Hostname to node IP | 16:42 |
NobodyCam | same here, but I needed to do it with out dns | 16:43 |
NobodyCam | so I changed the setting in the same way, I removed externalIP | 16:44 |
*** jmlowe has quit IRC | 16:46 | |
NobodyCam | then I create a .sh file in usr/local/bin that uses kubectl to get the ip off the minion nodes and creates a /etc/hosts file in the containers for the kube-* services, Really the only one that needed it kube-apiserver but I wanted to make sure they all had the same file | 16:46 |
NobodyCam | I also add a kube-register systemd service that registers the nodes to failure domain nova and kicks off the .sh script | 16:47 |
brtknr | I think the problem lies with openstack cloud provider | 16:55 |
brtknr | If you remove --cloud-provider=openstack, the problem never occurs | 16:57 |
brtknr | If you remove --cloud-provider=openstack from kubelet args, the problem never occurs | 16:57 |
*** flwang1 has joined #openstack-containers | 16:57 | |
*** ykarel has joined #openstack-containers | 16:59 | |
NobodyCam | yea the the cloud-provider seems to always return all networks attached to the node, then just picks one: at least that what I've seen in the load balancer code I've been looking into: https://github.com/kubernetes/cloud-provider-openstack/blob/b100f24bb0e4b70c71587e24cac6ae84ddfa77d4/pkg/cloudprovider/providers/openstack/openstack_loadbalancer.go#L798 | 17:01 |
NobodyCam | (note above may be from correct tag) | 17:02 |
NobodyCam | (note above may NOT be from correct tag) | 17:02 |
NobodyCam | :p | 17:02 |
* NobodyCam needs more coffee | 17:02 | |
*** ykarel has quit IRC | 17:03 | |
*** jmlowe has joined #openstack-containers | 17:07 | |
brtknr | NobodyCam: have you seen this PR: https://github.com/kubernetes/cloud-provider-openstack/pull/444 | 17:45 |
NobodyCam | Oh I had not seen that, but I like what it does! | 17:48 |
*** yolanda has quit IRC | 17:53 | |
*** ramishra has quit IRC | 18:01 | |
*** jmlowe has quit IRC | 18:07 | |
*** jmlowe has joined #openstack-containers | 18:16 | |
NobodyCam | is there a listing of roles required to create a cluster, I am attempting to setup a project / user but am hitting : Forbidden: resources[0].resources.kube_master_eth0: ((rule: create_port and rule: create_port: allowed_address_pairs) and rule: create_port: fixed_ips) is disallowed by policy Neutron server | 18:18 |
NobodyCam | I added _member_ and heat_stack_owner roles | 18:18 |
openstackgerrit | Feilong Wang proposed openstack/magnum master: Add cluster upgrade to the API https://review.openstack.org/514959 | 18:21 |
*** pcaruana has quit IRC | 18:38 | |
*** gmann_afk is now known as gmann | 19:19 | |
*** yolanda has joined #openstack-containers | 19:58 | |
*** jmlowe has quit IRC | 20:21 | |
*** munimeha1 has quit IRC | 20:59 | |
*** jmlowe has joined #openstack-containers | 21:14 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!