Thursday, 2019-04-04

*** Liang__ has joined #openstack-helm00:49
*** Liang__ is now known as LiangFang00:50
*** schwicht has joined #openstack-helm00:58
*** schwicht has quit IRC01:03
*** schwicht has joined #openstack-helm01:07
itlinuxping me when you have a min jayahn: thanks bye01:20
*** schwicht has quit IRC01:20
*** aaronsheffield has quit IRC01:22
*** schwicht has joined #openstack-helm01:26
itlinuxcan someone tell me if I use this I can install openstack helm after that https://myopswork.com/how-to-install-kubernetes-k8-in-rhel-or-centos-in-just-7-steps-2b78331174a501:35
itlinuxthanks01:35
*** schwicht has quit IRC01:39
*** schwicht has joined #openstack-helm01:56
*** schwicht has quit IRC01:59
*** roman_g has quit IRC01:59
*** kranthikirang has quit IRC02:13
*** sthussey has quit IRC03:14
openstackgerritTin Lam proposed openstack/openstack-helm-infra master: Add wait.resource for LMA services to armada manifest  https://review.openstack.org/64914104:05
openstackgerritTin Lam proposed openstack/openstack-helm master: [DNM] Testing resource type  https://review.openstack.org/64931804:05
openstackgerritTin Lam proposed openstack/openstack-helm-infra master: Migrate migrate  Ubuntu jobs from xenial to Bionic  https://review.openstack.org/64969804:14
*** cfriesen has quit IRC04:33
*** gmann has joined #openstack-helm05:26
gmannportdirect: can you check this. jobs failing on bionic. Not sure that's the only thing we need to do in case of  helm or  something more.  - https://review.openstack.org/#/c/649698/205:27
openstackgerritHyunkook Cho proposed openstack/openstack-helm-infra master: Ceph: fix overriding ceph monitor hosts value  https://review.openstack.org/64927905:52
*** dpawlik has joined #openstack-helm06:26
*** pgaxatte has joined #openstack-helm06:32
*** jamesgu has quit IRC06:41
*** happyhemant has quit IRC06:57
*** dims has quit IRC07:22
*** dims has joined #openstack-helm07:24
openstackgerritChris Wedgwood proposed openstack/openstack-helm-infra master: [Calico] Using booleans where expected in values (not strings)  https://review.openstack.org/64502907:26
*** dims has quit IRC07:31
*** dims has joined #openstack-helm07:34
*** jistr is now known as jistr|afk07:35
*** witek has joined #openstack-helm07:43
*** spsurya has joined #openstack-helm07:55
openstackgerritMerged openstack/openstack-helm-infra master: Libvirt: support per node overrides  https://review.openstack.org/64774708:11
georgkcheng1: hi!08:14
cheng1georgk, hi08:14
*** happyhemant has joined #openstack-helm08:14
georgkcheng1: you mentioned in your email that OVS 2.5.4 is too old and hence causing the vif problems08:15
georgkcheng1: were you able to confirm that >2.8.0 works better? I am currently looking into how to update the version of oVS in the nova container08:16
georgkcheng1: it seems to be using the loci docker files which in turn uses the default OVS shipped with the distro used08:17
georgkcheng1: so, I need to figure out how to selectively get a newer version of OVS into the image08:17
cheng1The ovs version in ovs agent works weel. I can't remember the detail number, 2.8.0 or 2.8.108:17
cheng1I didn't get a chance to go future. My next step is to upgrade nova-compute image to 2.8.0, to see if any other problems08:21
georgkcheng1: it is 2.8.1. So we might need to include a newer version in the loci builds.08:21
cheng1I think yes08:21
cheng1Seems the old 2.5.4 is installed with apt install. I don't think there is a version of 2.8.1 in ubuntu repo. So we may need steps to build ovs package.08:23
cheng1georgk,08:23
georgkcheng1: right, ok, I am afraid so too. Just wanted to check if there is a simpler way.08:24
cheng1This is how ovs built with source installation. Can we do similar thing for nova-compute build. georgk08:26
cheng1https://github.com/openstack/openstack-helm-images/blob/master/openvswitch/Dockerfile.debian08:26
georgkcheng1: I agree08:27
*** gkadam has joined #openstack-helm08:27
cheng1nova-compute is built by loci, just not sure if any where we can inject the code for ovs build.08:28
georgkcheng1: right, exactly, my question. Maybe we can just create a new dockerfile which sources the Loci-built image and in the dockerfile we i) uninstall ovs and ii) include a source build08:31
georgkso, it would be a two-step build process, but we woudn;t have to recreate the entire nova image built process08:32
cheng1For test in local env, sure. we can do that. georgk08:32
cheng1For upstream, I think it doesn't make sense.08:33
cheng1georgk, I think we shouldn't break the current nova build rule.08:34
cheng1https://github.com/openstack/openstack-helm-images/blob/master/zuul.d/openstack-loci.yaml#L160-L16908:34
*** roman_g has joined #openstack-helm08:36
georgkcheng1: well, ok. then I need a different idea :-)08:36
cheng1georgk, I will use your method for local test.08:37
cheng1to see if any other problems, until I could create VMs and to make sure the network is ok08:38
georgkok, makes sense08:38
*** LiangFang has quit IRC09:30
*** Darcidride has joined #openstack-helm09:47
*** jistr|afk is now known as jistr10:23
openstackgerritPete Birley proposed openstack/openstack-helm-infra master: Add default-docker (enforce) AppArmor profile to openvswitch  https://review.openstack.org/64035712:00
openstackgerritPete Birley proposed openstack/openstack-helm-infra master: Fix mysqldump default option  https://review.openstack.org/64969012:01
openstackgerritPete Birley proposed openstack/openstack-helm master: change the nova cache to dogpile.cache.memcached  https://review.openstack.org/64482112:06
evrardjpportdirect: did you ping stephenfin or diablo_rojo for the season of docs?12:33
evrardjpitxaka: did you see this: https://review.openstack.org/#/c/640357/ ?12:38
evrardjpportdirect: do you have too minutes ?12:40
evrardjptwo*12:40
evrardjpitxaka and I would like to discuss a problem with apparmor, and I would like to understand how things work to decide the better approach12:41
*** aaronsheffield has joined #openstack-helm13:01
portdirectI'm literally about to board a plane, will be offline for 7 hours :(13:01
portdirectBut I also dont like the current apparmour implementation13:01
portdirectNot least as there is no way to actually toggle to using selinux13:01
evrardjpsaef travels portdirect  :)13:05
evrardjpwe can discuss this later13:05
*** itlinux has quit IRC13:12
*** happyhemant has quit IRC13:17
openstackgerritLuna Das proposed openstack/openstack-helm-infra master: Add docker-default apparmor profile for elasticserach.  https://review.openstack.org/64999013:22
openstackgerritMerged openstack/openstack-helm master: change the nova cache to dogpile.cache.memcached  https://review.openstack.org/64482113:25
*** kranthikirang has joined #openstack-helm13:30
openstackgerritLuna Das proposed openstack/openstack-helm-infra master: Add docker-default apparmor profile for elasticserach.  https://review.openstack.org/64999013:32
*** spsurya has quit IRC13:51
*** altlogbot_2 has quit IRC13:54
*** cheng1__ has joined #openstack-helm13:58
*** cheng1__ has quit IRC14:00
*** cheng1__ has joined #openstack-helm14:00
*** dpawlik has quit IRC14:22
*** cheng1__ has quit IRC14:24
*** jamesgu has joined #openstack-helm14:30
*** itlinux has joined #openstack-helm14:32
*** itlinux has quit IRC14:32
*** itlinux has joined #openstack-helm14:48
*** itlinux has quit IRC14:49
*** itlinux has joined #openstack-helm14:50
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Update apparmor job to only use docker default profile  https://review.openstack.org/65004614:56
itlinuxhello all, I looked at a few site to install kubelet on centos 7.x but the systemctl status it's always down.. can someone suggest what would be the option to get this working. Thanks15:01
openstackgerritIan Howell proposed openstack/openstack-helm master: WIP/DNM - Add the upgrade lifecycle step  https://review.openstack.org/64918915:02
openstackgerritIan Howell proposed openstack/openstack-helm master: WIP/DNM - Add the upgrade lifecycle step  https://review.openstack.org/64918915:02
*** cfriesen has joined #openstack-helm15:03
*** howell has joined #openstack-helm15:12
*** cheng1__ has joined #openstack-helm15:24
openstackgerritSteve Wilkerson proposed openstack/openstack-helm master: Add nonvoting apparmor check job to openstack-helm  https://review.openstack.org/65005315:30
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Update apparmor job to only use docker default profile  https://review.openstack.org/65004615:33
*** happyhemant has joined #openstack-helm15:33
*** pgaxatte has quit IRC15:36
*** witek has quit IRC15:49
*** cheng1__ has quit IRC15:51
*** dustinspecker has joined #openstack-helm16:01
*** lemko has quit IRC16:09
*** dpawlik has joined #openstack-helm16:25
openstackgerritDeepak proposed openstack/openstack-helm-images master: Makefile and Docker file for calicoctl-utility containers.  https://review.openstack.org/64974216:26
*** dustinspecker has quit IRC16:32
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: [DNM]Test to see if removing memcachedd AppArmor from Zuul fixes the AppArmor gate  https://review.openstack.org/65006816:32
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: [DNM]Test to see if removing memcachedd AppArmor from Zuul fixes the AppArmor gate  https://review.openstack.org/65006816:33
openstackgerritSteve Wilkerson proposed openstack/openstack-helm master: Add nonvoting apparmor check job to openstack-helm  https://review.openstack.org/65005316:35
*** dpawlik has quit IRC16:38
*** itlinux has quit IRC16:45
*** itlinux has joined #openstack-helm16:47
*** itlinux has quit IRC16:54
*** itlinux has joined #openstack-helm16:55
*** itlinux has quit IRC16:59
*** itlinux has joined #openstack-helm17:00
*** gkadam has quit IRC17:11
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: [DNM]Test to see if removing memcachedd AppArmor from Zuul fixes the AppArmor gate  https://review.openstack.org/65006817:13
*** Darcidride has quit IRC17:16
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: [DNM]Test to see if removing memcachedd AppArmor from Zuul fixes the AppArmor gate  https://review.openstack.org/65006817:26
*** spsurya has joined #openstack-helm17:37
*** gmann is now known as gmann_afk17:44
cfriesenportdirect: I'm doing some failure testing with mariadb, and I'm hitting some intermittent cases of a mariadb-server-X pod coming up but then failing to sync.  The pod dies, gets recreated, and on retry it works fine.  Have you hit anything like this?17:44
portdirectOccasionally17:44
portdirectDo you have logs?17:45
portdirectAlso note we just moved to mariabackup, from rsync so would be good to know which you are using17:45
cfriesenportdirect: I can get logs, one sec.  pretty sure we don't have the mariabackup changes, let me check17:48
portdirectI've made quite a few changes in the last week, which I hope will have made things better...17:49
portdirect... though on the flip side, they may well have introduced some quirks of their own...17:49
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Update apparmor job to only use docker default profile  https://review.openstack.org/65004617:50
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: [DNM]Test to see if removing memcachedd AppArmor from Zuul fixes the AppArmor gate  https://review.openstack.org/65006817:54
cfriesenportdirect: relevent failed container logs: http://paste.openstack.org/show/748890/    relevent running container logs from other node: http://paste.openstack.org/show/748891/17:54
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: Update apparmor job to only use docker default profile  https://review.openstack.org/65004617:56
cfriesenportdirect: logs of successfully started container: http://paste.openstack.org/show/748893/17:57
portdirectThat looks at 1st glance like some DNS issues17:57
portdirectBut hard to tell, and certainly not enough to go pointing fingers17:57
portdirectBut I've seen similar things in my env17:58
cfriesenportdirect: like maybe a delay setting up the DNS entry for the newly-started pod?17:58
portdirectPossibly, we've been spending some time tuning coredns for some similar issues17:59
portdirectIf this is indeed the case then we may need to introduce some sanity checking to the start.py17:59
portdirectThough I'm rather hopeful that the state transfer initiated by mariabackup is more robust18:00
*** howell has quit IRC18:01
*** happyhemant has quit IRC18:02
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Update apparmor job to only use docker default profile  https://review.openstack.org/65004618:05
cfriesenportdirect: I expect we'll pick up those changes soonish.18:13
portdirectNice, would be great to really start testing this stuff properly in the zuul gates - I was thinking mysqlslap at as a first step while deleting pods, though would like to be a bit more methodical18:22
portdirectWill you be in denver at the end of the month?18:23
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: [DNM]Test to see if removing memcachedd AppArmor from Zuul fixes the AppArmor gate  https://review.openstack.org/65006818:28
*** itlinux has quit IRC18:35
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: [DNM]Test to see if removing memcachedd AppArmor from Zuul fixes the AppArmor gate  https://review.openstack.org/65006818:47
*** itlinux has joined #openstack-helm18:49
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: WIP: Update tenant-ceph periodic job  https://review.openstack.org/65010818:59
*** Anticom has joined #openstack-helm19:06
itlinuxhhello portdirect:19:07
itlinuxwanted to check with you if you have any tips to install kube ready for centos 7 so I can deploy openstack-helm19:07
portdirectOnly thing you really need over a std k8s deployment on centos is the ceph pagakes to let you use rbd devices to back pvcs19:09
portdirecthttps://github.com/openstack/openstack-helm-infra/blob/master/tools/images/kubeadm-aio/assets/opt/playbooks/roles/deploy-kubelet/tasks/support-packages.yaml19:10
portdirectShould show you what's required there^19:11
itlinuxdo I need to have ceph? I really did not want to use it. .but I will try..19:11
portdirectOh ok, then if you want to use nfs19:12
itlinuxhow would you run that playbook ? Thanks19:12
portdirectThen just the nfs packages19:12
itlinuxok.. so can I use a dedicated box for storage?19:12
portdirectI'm not suggesting running the playbook in this instance if your planning on using kubespray to deploy the nodes19:12
itlinuxok I guess I can do ceph too not big deal..19:12
portdirectJust using it as a ref for the pagages required19:13
itlinuxwell I had issue running kubespray so I am trying to figure out what's the other best way to deploy it..19:13
itlinuxjayahn: was busy and I keep getting an issue with the same node and cert issue.. so I am trying to find diff routes..19:14
itlinuxI found also a good guide on digital ocean for installing kube do you think that will work portdirect: https://www.digitalocean.com/community/tutorials/how-to-create-a-kubernetes-cluster-using-kubeadm-on-centos-719:17
*** howell has joined #openstack-helm19:19
openstackgerritIan Howell proposed openstack/openstack-helm master: WIP/DNM Implement argo workflows into the keystone chart  https://review.openstack.org/63634619:25
*** itlinux has quit IRC19:33
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: [DNM]Test to see if removing memcachedd AppArmor from Zuul fixes the AppArmor gate  https://review.openstack.org/65006819:39
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: [DNM]Test to see if removing memcachedd AppArmor from Zuul fixes the AppArmor gate  https://review.openstack.org/65006819:47
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: [DNM]Test to see if removing memcachedd AppArmor from Zuul fixes the AppArmor gate  https://review.openstack.org/65006819:48
*** gmann_afk is now known as gmann19:49
openstackgerritItxaka Serrano Garcia proposed openstack/openstack-helm master: Add missing dependencies for spiceproxy in values  https://review.openstack.org/65012219:51
openstackgerritkranthi kiran guttikonda proposed openstack/openstack-helm-infra master: tenant-ceph client key script parameters change  https://review.openstack.org/65013320:16
openstackgerritIan Howell proposed openstack/openstack-helm master: WIP/DNM - Add the upgrade lifecycle step  https://review.openstack.org/64918920:18
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: WIP: Update tenant-ceph periodic job  https://review.openstack.org/65010820:21
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: Fixes the Apparmor gate for libvirt and memcached  https://review.openstack.org/65006820:26
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: Fixes the Apparmor gate for libvirt and memcached  https://review.openstack.org/65006820:29
*** dpawlik has joined #openstack-helm20:31
*** Anticom has quit IRC20:32
*** dpawlik has quit IRC20:35
*** itlinux has joined #openstack-helm20:37
*** itlinux has quit IRC20:38
*** itlinux has joined #openstack-helm20:39
*** itxaka has quit IRC20:48
*** spsurya has quit IRC20:54
openstackgerritRenis Makadia proposed openstack/openstack-helm-infra master: tenant-ceph client key script parameters change  https://review.openstack.org/65013320:57
*** howell has quit IRC20:58
*** JangwonLee has quit IRC21:02
*** dpawlik has joined #openstack-helm21:04
*** JangwonLee has joined #openstack-helm21:07
*** michael-beaver has joined #openstack-helm21:18
openstackgerritRandeep Jalli proposed openstack/openstack-helm-infra master: Fixes the Apparmor gate for libvirt and memcached  https://review.openstack.org/65006821:20
openstackgerritGeorg Kunz proposed openstack/openstack-helm-images master: Adding support for DPDK to openvswitch image  https://review.openstack.org/65015221:27
*** Nishant_ has quit IRC21:38
*** unicell has joined #openstack-helm21:47
*** dpawlik has quit IRC21:53
*** kranthikirang has quit IRC22:05
*** aaronsheffield has quit IRC22:40
*** michael-beaver has quit IRC22:47
openstackgerritRenis Makadia proposed openstack/openstack-helm-infra master: tenant-ceph client key script parameters change  https://review.openstack.org/65013322:55
*** itlinux has quit IRC23:31

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!