openstackgerrit | Pete Birley proposed openstack/openstack-helm-infra master: WIP: Mariadb cluster improvements https://review.openstack.org/604556 | 01:00 |
---|---|---|
*** sgrasley__ has joined #openstack-helm | 01:13 | |
*** sgrasley_ has quit IRC | 01:16 | |
*** chenyb4 has joined #openstack-helm | 01:35 | |
*** roman_g has quit IRC | 01:59 | |
*** unicell has joined #openstack-helm | 02:31 | |
*** unicell has quit IRC | 02:36 | |
*** unicell has joined #openstack-helm | 03:00 | |
*** unicell has quit IRC | 03:04 | |
*** unicell has joined #openstack-helm | 03:42 | |
*** unicell has quit IRC | 03:46 | |
openstackgerrit | Pete Birley proposed openstack/openstack-helm-infra master: WIP: Mariadb cluster improvements https://review.openstack.org/604556 | 04:29 |
*** unicell has joined #openstack-helm | 04:43 | |
*** unicell has quit IRC | 04:47 | |
*** lemko has joined #openstack-helm | 05:08 | |
*** unicell has joined #openstack-helm | 05:09 | |
*** cfriesen has quit IRC | 05:17 | |
*** Tomatosoup- has quit IRC | 05:25 | |
*** Tomatosoup- has joined #openstack-helm | 05:25 | |
openstackgerrit | Pete Birley proposed openstack/openstack-helm-infra master: WIP: Mariadb cluster improvements https://review.openstack.org/604556 | 05:35 |
*** chenyb4 has quit IRC | 05:50 | |
openstackgerrit | Pete Birley proposed openstack/openstack-helm-infra master: WIP: Mariadb cluster improvements https://review.openstack.org/604556 | 05:51 |
openstackgerrit | Pete Birley proposed openstack/openstack-helm-infra master: WIP: Mariadb cluster improvements https://review.openstack.org/604556 | 05:53 |
openstackgerrit | Tin Lam proposed openstack/openstack-helm-infra master: WIP: Adding network policy gate test for OSH-infra https://review.openstack.org/604872 | 05:54 |
*** unicell has quit IRC | 05:55 | |
openstackgerrit | Merged openstack/openstack-helm-infra master: Add apparmor annotation function https://review.openstack.org/602058 | 06:08 |
openstackgerrit | Tin Lam proposed openstack/openstack-helm master: Add apparmor security annotation https://review.openstack.org/602365 | 06:14 |
*** aojea has joined #openstack-helm | 06:24 | |
*** aojeagarcia has joined #openstack-helm | 06:29 | |
*** chenyb4 has joined #openstack-helm | 06:31 | |
*** aojea has quit IRC | 06:32 | |
openstackgerrit | Tin Lam proposed openstack/openstack-helm-infra master: WIP: Adding network policy gate test for OSH-infra https://review.openstack.org/604872 | 06:44 |
*** roman_g has joined #openstack-helm | 06:54 | |
evrardjp | good morning | 07:16 |
openstackgerrit | Tin Lam proposed openstack/openstack-helm-infra master: WIP: Adding network policy gate test for OSH-infra https://review.openstack.org/604872 | 07:23 |
openstackgerrit | Tin Lam proposed openstack/openstack-helm master: WIP: Adding gate test for apparmor https://review.openstack.org/604991 | 07:42 |
*** chenyb4 has quit IRC | 08:30 | |
evrardjp | hello I am curious, why this line doesn't have a port like :5000 included? https://github.com/openstack/openstack-helm/blob/master/tools/deployment/common/setup-client.sh#L35 | 08:37 |
evrardjp | I guess we have a redirection somewhere | 08:38 |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-helm master: Add local override for ingress https://review.openstack.org/605005 | 08:41 |
evrardjp | hello folks, how against would you be on splitting compute-kit into nova and neutron scripts? | 08:44 |
*** evrardjp_ has joined #openstack-helm | 08:50 | |
*** evrardjp has quit IRC | 08:53 | |
openstackgerrit | Tin Lam proposed openstack/openstack-helm master: WIP: Adding gate test for apparmor https://review.openstack.org/604991 | 09:00 |
*** evrardjp_ is now known as evrardjp | 09:15 | |
*** roman_g has quit IRC | 09:27 | |
*** roman_g has joined #openstack-helm | 09:29 | |
*** aaronsheffield has joined #openstack-helm | 12:48 | |
openstackgerrit | Sangeet Gupta proposed openstack/openstack-helm-infra master: Adding Falco https://review.openstack.org/598297 | 13:16 |
*** sthussey has joined #openstack-helm | 13:22 | |
*** munimeha1 has joined #openstack-helm | 13:37 | |
*** happyhemant has quit IRC | 13:45 | |
*** evrardjp has quit IRC | 14:03 | |
*** evrardjp has joined #openstack-helm | 14:03 | |
openstackgerrit | Doug Schveninger proposed openstack/openstack-helm master: Clean up the tempest.conf section of the values.yaml https://review.openstack.org/605083 | 14:06 |
*** roman_g has quit IRC | 14:14 | |
portdirect | evrardjp: as the public (and admin) endpoints are hit via the ingress controller, which is listening on port 80 (or 443...) | 14:17 |
evrardjp | portdirect: I am sorry but a PEBKAC has prevented me to see the whole conversation. | 14:17 |
portdirect | `hello I am curious, why this line doesn't have a port like :5000 included? https://github.com/openstack/openstack-helm/blob/master/tools/deployment/common/setup-client.sh#L35` | 14:18 |
evrardjp | I blame my lack of weechat for now, and stuck to irssi. | 14:18 |
portdirect | as you suspected - there is a proxy ;) | 14:18 |
evrardjp | ok | 14:18 |
openstackgerrit | Tin Lam proposed openstack/openstack-helm master: DNM & WIP: Enable network policy enforcement https://review.openstack.org/605088 | 14:20 |
openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2 https://review.openstack.org/603815 | 14:23 |
*** lamt has joined #openstack-helm | 14:32 | |
portdirect | srwilkers, lrensing, v1k0d3n, lamt, portdirect, renmak, jayahn, korzen, alanmeadows, mattmceuen, raymaika, evrardjp its almost that time again - OpenStack-Helm meeting in #openstack-meeting-5 in 16 mins | 14:44 |
portdirect | https://etherpad.openstack.org/p/openstack-helm-meeting-2018-09-25 | 14:44 |
*** cfriesen has joined #openstack-helm | 14:54 | |
openstackgerrit | Hari proposed openstack/openstack-helm-addons master: Inclusion annotation for upgrade and install chart changes https://review.openstack.org/604849 | 14:59 |
*** sgrasley has joined #openstack-helm | 15:02 | |
*** sgrasley__ has quit IRC | 15:05 | |
evrardjp | portdirect: have you thought of the idea to split computekit in two: nova/neutron? It would allow user level overrides of values easier (it would be one per shell script basically) | 15:39 |
mattmceuen | we have 21 minutes, who wants to get into some trouble! | 15:39 |
srwilkers | im always up for trouble | 15:39 |
evrardjp | not surprised | 15:40 |
portdirect | mattmceuen: coffee? | 15:40 |
srwilkers | portdirect: yes | 15:40 |
evrardjp | portdirect: is my rephrasing correct: https://review.openstack.org/#/c/604112/ ? | 15:40 |
cfriesen | srwilkers: looking at your nova helm chart commit ca0cb858 it seems like nova is supposed to be able to do cold migration. does that actually work? | 15:44 |
*** aojeagarcia has quit IRC | 15:52 | |
portdirect | evrardjp: yes | 16:03 |
srwilkers | cfriesen: it worked the last time i checked, but definitely could use some improvements i think. full disclosure: it's been awhile since i tested it last | 16:05 |
cfriesen | srwilkers: just to make sure I understand what's going on, you're basically starting a separate container to run sshd, using rsa keys from /root/.ssh on the host | 16:07 |
jamesgu__ | not to distract from cfriesen's question.... really quick question here... anyone has tried on Cillium instead of Calico? | 16:10 |
*** moh_ahmed has joined #openstack-helm | 16:53 | |
openstackgerrit | Tin Lam proposed openstack/openstack-helm master: DNM & WIP: Enable network policy enforcement https://review.openstack.org/605088 | 17:05 |
*** roman_g has joined #openstack-helm | 17:14 | |
openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2 https://review.openstack.org/603815 | 17:44 |
cfriesen | srwilkers: in the newton and pike upstream nova images (from docker.io/openstackhelm/nova) I don't see the "/usr/sbin/sshd" binary. Am I missing something? | 17:55 |
*** unicell has joined #openstack-helm | 17:58 | |
openstackgerrit | Nikita Koshikov proposed openstack/openstack-helm-infra master: Add ansible apparmor role https://review.openstack.org/605160 | 18:00 |
openstackgerrit | Nikita Koshikov proposed openstack/openstack-helm-infra master: Add ansible apparmor role https://review.openstack.org/605160 | 18:01 |
openstackgerrit | Nikita Koshikov proposed openstack/openstack-helm-infra master: Add ansible apparmor role https://review.openstack.org/605160 | 18:02 |
*** unicell has quit IRC | 18:03 | |
openstackgerrit | sai battina proposed openstack/openstack-helm-infra master: Helm: Update helm to 2.11.0 https://review.openstack.org/605162 | 18:12 |
*** lemko has quit IRC | 18:12 | |
openstackgerrit | sai battina proposed openstack/openstack-helm-infra master: Helm: Update helm to 2.11.0 https://review.openstack.org/605162 | 18:15 |
srwilkers | cfriesen: thats a valid point. that work was done with the kolla images initially, as far as i remember. im also not seeing that container included as part of the rendered nova compute daemonset | 18:25 |
srwilkers | for reference: http://logs.openstack.org/65/602365/17/check/openstack-helm-multinode-ubuntu/a115120/primary/objects/namespaced/openstack/daemonsets/nova-compute-default.txt | 18:26 |
srwilkers | my suspicion is this may be tied to the daemonset-overrides template used to generate the daemonsets for things like nova compute: https://github.com/openstack/openstack-helm-infra/blob/master/helm-toolkit/templates/utils/_daemonset_overrides.tpl#L221 | 18:29 |
openstackgerrit | Sangeet Gupta proposed openstack/openstack-helm-infra master: Adding Falco https://review.openstack.org/598297 | 18:29 |
srwilkers | portdirect: ^ | 18:30 |
openstackgerrit | Cliff Parsons proposed openstack/openstack-helm master: WIP: Adding gate test for apparmor https://review.openstack.org/604991 | 18:32 |
srwilkers | cfriesen: i'd say this is a bug, one we should address sooner rather than later :) | 18:33 |
cfriesen | srwilkers: agreed. | 18:35 |
cfriesen | srwilkers: I opened https://storyboard.openstack.org/#!/story/2003463 a while back, seems like it's applicable | 18:36 |
cfriesen | the ssh bit might already be set up, sort of | 18:36 |
cfriesen | ls | 18:37 |
cfriesen | srwilkers: where do ssh-key-private and ssh-key-public get set up? I see them being referenced in the volumeMounts, but I don't get how they're generated. | 18:42 |
*** moh_ahmed has quit IRC | 18:55 | |
*** moh_ahmed has joined #openstack-helm | 18:55 | |
openstackgerrit | sai battina proposed openstack/openstack-helm-addons master: Initial commit to add mission-control, distribution, xray charts Also add enterprise artifactory chart https://review.openstack.org/588370 | 19:03 |
openstackgerrit | Cliff Parsons proposed openstack/openstack-helm master: WIP: Adding gate test for apparmor https://review.openstack.org/604991 | 19:05 |
openstackgerrit | Hari proposed openstack/openstack-helm-addons master: Inclusion annotation for upgrade and install chart changes https://review.openstack.org/604849 | 19:13 |
srwilkers | cfriesen: im going to go on a limb and say they aren't being generated at all right now. since the nova-compute-ssh container isnt being included in the pod definition, neither are its volumemounts | 19:21 |
openstackgerrit | Pete Birley proposed openstack/openstack-helm-infra master: WIP: Mariadb cluster improvements https://review.openstack.org/604556 | 19:25 |
cfriesen | srwilkers: okay, that makes sense. But if that container was included, how would we expect the public/private keys and authorized_keys file to be generated? | 19:27 |
portdirect | srwilkers: well that seems like a bug ;) | 19:28 |
portdirect | https://github.com/openstack/openstack-helm-infra/blob/master/helm-toolkit/templates/utils/_daemonset_overrides.tpl#L221 | 19:29 |
portdirect | looks like that needs fixed | 19:29 |
portdirect | I think i did most of what was required for the ceph specific one | 19:30 |
portdirect | (in its init containers) | 19:30 |
portdirect | but we'll need to bring that over | 19:30 |
*** moh_ahme_ has joined #openstack-helm | 19:38 | |
*** moh_ahmed has quit IRC | 19:40 | |
*** arunkant has joined #openstack-helm | 19:42 | |
openstackgerrit | Doug Schveninger proposed openstack/openstack-helm master: Clean up the tempest.conf section of the values.yaml https://review.openstack.org/605083 | 20:13 |
openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2 https://review.openstack.org/603815 | 20:16 |
openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2 https://review.openstack.org/603815 | 20:16 |
openstackgerrit | Doug Schveninger proposed openstack/openstack-helm master: Clean up the tempest.conf section of the values.yaml https://review.openstack.org/605083 | 20:18 |
*** moh_ahmed has joined #openstack-helm | 20:31 | |
cfriesen | is nova the only chart that wants to run multiple containers in a DaemonSet? | 20:31 |
*** moh_ahme_ has quit IRC | 20:34 | |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: Kibana: Add session affinity to ingress https://review.openstack.org/605228 | 20:35 |
*** moh_ahmed has quit IRC | 20:36 | |
openstackgerrit | Dustin Specker proposed openstack/openstack-helm-addons master: Add Sonobuoy chart https://review.openstack.org/604833 | 20:36 |
openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: Kibana: Add session affinity to ingress https://review.openstack.org/605228 | 20:38 |
openstackgerrit | sai battina proposed openstack/openstack-helm-addons master: Initial commit to add mission-control, distribution, xray charts Also add enterprise artifactory chart https://review.openstack.org/588370 | 20:41 |
*** aaronsheffield has quit IRC | 20:51 | |
cfriesen | srwilkers: it looks like the ceph-osd helm chart might also try to set up multiple containers in a daemonset if .Values.logging.fluentd evaluates as true. | 20:57 |
openstackgerrit | Dustin Specker proposed openstack/openstack-helm-addons master: Add Sonobuoy chart https://review.openstack.org/604833 | 21:15 |
openstackgerrit | Merged openstack/openstack-helm-addons master: Changing keystone role names to be ranger_flavor_creator, ranger_customer_creator https://review.openstack.org/604837 | 21:40 |
openstackgerrit | Tin Lam proposed openstack/openstack-helm master: DNM & WIP: Enable network policy enforcement https://review.openstack.org/605088 | 22:01 |
*** munimeha1 has quit IRC | 22:03 | |
cfriesen | srwilkers: portdirect: I just opened up a bug, the per-label and per-host overrides don't seem to be working quite right, at least for upgrades. https://storyboard.openstack.org/#!/story/2003873 | 22:45 |
srwilkers | cfriesen: will take a peek at it after dinner | 22:53 |
openstackgerrit | Doug Schveninger proposed openstack/openstack-helm master: Clean up the tempest.conf section of the values.yaml https://review.openstack.org/605083 | 22:56 |
cfriesen | srwilkers: thanks. I can't get the yaml file snippet to indent properly in the problem description. | 22:57 |
cfriesen | markdown seems to want to strip out leading whitespace, even in a <code> block | 22:57 |
cfriesen | yay...<pre> works | 22:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!