*** diogogmt has quit IRC | 00:00 | |
*** daneyon_ has joined #openstack-kolla | 00:04 | |
*** inc0_ has quit IRC | 00:06 | |
*** daneyon_ has quit IRC | 00:08 | |
*** v1k0d3n has quit IRC | 00:16 | |
*** sdake has quit IRC | 00:23 | |
*** HyperJohnGraham has joined #openstack-kolla | 00:25 | |
HyperJohnGraham | Hi All | 00:29 |
---|---|---|
HyperJohnGraham | the Kolla Kubernetes Quickstart Guide tells me i need Kubernetes1.2.4 or better | 00:34 |
HyperJohnGraham | Centos7 has kubernetes 1.2.0 in extras repo | 00:35 |
HyperJohnGraham | kubernetes releases https://github.com/kubernetes/kubernetes/releases dont have a 1.2.4 :) Current release is kubernetes 1.3.3 | 00:36 |
HyperJohnGraham | should i start with 1.3.3 ? | 00:37 |
*** unicell has quit IRC | 00:39 | |
*** unicell1 has joined #openstack-kolla | 00:39 | |
*** godleon has joined #openstack-kolla | 00:55 | |
*** asalkeld has joined #openstack-kolla | 01:02 | |
*** jtriley has joined #openstack-kolla | 01:07 | |
*** Liuqing has joined #openstack-kolla | 01:12 | |
*** zhurong has joined #openstack-kolla | 01:13 | |
*** sdake has joined #openstack-kolla | 01:13 | |
*** sdake has quit IRC | 01:13 | |
*** sdake has joined #openstack-kolla | 01:13 | |
openstackgerrit | Michal Jastrzebski (inc0) proposed openstack/kolla: Testing gate https://review.openstack.org/348551 | 01:13 |
*** sdake_ has joined #openstack-kolla | 01:15 | |
*** sdake has quit IRC | 01:18 | |
sdake_ | yo folks | 01:20 |
*** zhubingbing has joined #openstack-kolla | 01:21 | |
sbezverk_ | HyperJohnGraham your best bet is to get the latest 1.3.0 | 01:23 |
*** rstarmer has joined #openstack-kolla | 01:23 | |
HyperJohnGraham | 1.3.3 :) | 01:23 |
HyperJohnGraham | just ran [root@gateway cluster]# KUBERNETES_PROVIDER=centos ./kube-up.sh | 01:24 |
HyperJohnGraham | its thinking about it ... | 01:24 |
HyperJohnGraham | ok it finished no errors | 01:24 |
sbezverk_ | I am using 1.3.0 on multinode cluster and it is working perfectly | 01:24 |
HyperJohnGraham | not sure if it worked | 01:25 |
HyperJohnGraham | cool | 01:25 |
asalkeld | thought i was on kubernetes-users slack for a second there;) | 01:25 |
HyperJohnGraham | ;) | 01:26 |
*** banix has quit IRC | 01:28 | |
*** britthouser has joined #openstack-kolla | 01:41 | |
*** jtriley has quit IRC | 01:41 | |
*** britthouser has quit IRC | 01:50 | |
*** daneyon_ has joined #openstack-kolla | 01:52 | |
*** daneyon_ has quit IRC | 01:57 | |
*** britthouser has joined #openstack-kolla | 01:58 | |
*** sdake_ has quit IRC | 02:19 | |
*** zhubingbing has quit IRC | 02:21 | |
*** zhubingbing has joined #openstack-kolla | 02:21 | |
*** asalkeld has quit IRC | 02:22 | |
*** zhurong has quit IRC | 02:24 | |
*** zhurong has joined #openstack-kolla | 02:25 | |
*** unicell1 has quit IRC | 02:25 | |
*** Liuqing has quit IRC | 02:32 | |
*** mark-casey has joined #openstack-kolla | 02:32 | |
*** Liuqing has joined #openstack-kolla | 02:34 | |
*** Liuqing has quit IRC | 02:37 | |
*** Liuqing has joined #openstack-kolla | 02:39 | |
*** zhubingbing has quit IRC | 02:39 | |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Make the kolla_keystone_service can update fileds https://review.openstack.org/348382 | 02:42 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Enable the nova microversion api https://review.openstack.org/348432 | 02:42 |
*** banix has joined #openstack-kolla | 02:46 | |
*** klint has joined #openstack-kolla | 02:48 | |
*** yuanying_ has quit IRC | 02:57 | |
*** rstarmer has quit IRC | 03:06 | |
*** britthouser has quit IRC | 03:10 | |
*** AndChat|370944 has joined #openstack-kolla | 03:12 | |
*** AndChat|370944 has quit IRC | 03:13 | |
*** yuanying has joined #openstack-kolla | 03:51 | |
*** coolsvap_ has joined #openstack-kolla | 03:56 | |
*** coolsvap_ is now known as coolsvap | 03:57 | |
*** daneyon_ has joined #openstack-kolla | 04:35 | |
*** daneyon_ has quit IRC | 04:39 | |
*** godleon has quit IRC | 04:39 | |
*** mark-casey has quit IRC | 04:40 | |
*** unicell has joined #openstack-kolla | 04:48 | |
*** banix has quit IRC | 04:54 | |
*** bdaca has joined #openstack-kolla | 05:08 | |
*** tfukushima has joined #openstack-kolla | 05:08 | |
*** tfukushima has quit IRC | 05:15 | |
*** mark-casey has joined #openstack-kolla | 05:50 | |
*** mark-casey has left #openstack-kolla | 05:50 | |
*** harlowja_at_home has joined #openstack-kolla | 05:59 | |
*** david-lyle has joined #openstack-kolla | 06:07 | |
*** harlowja_at_home has quit IRC | 06:20 | |
*** dmueller-evoila has joined #openstack-kolla | 06:28 | |
*** bdaca has quit IRC | 06:40 | |
*** bdaca has joined #openstack-kolla | 06:40 | |
*** david-lyle has quit IRC | 06:45 | |
*** bdaca_ has joined #openstack-kolla | 06:46 | |
*** bdaca has quit IRC | 06:50 | |
*** matrohon has joined #openstack-kolla | 06:52 | |
*** rstarmer has joined #openstack-kolla | 06:56 | |
*** rstarmer has quit IRC | 06:56 | |
*** bdaca_ has quit IRC | 07:00 | |
*** b_bezak has joined #openstack-kolla | 07:08 | |
*** gfidente has joined #openstack-kolla | 07:23 | |
*** gfidente has joined #openstack-kolla | 07:23 | |
*** matrohon has quit IRC | 07:29 | |
*** shardy has joined #openstack-kolla | 07:39 | |
*** bdaca has joined #openstack-kolla | 07:41 | |
*** Serlex has joined #openstack-kolla | 07:43 | |
*** bdaca_ has joined #openstack-kolla | 08:01 | |
*** bdaca has quit IRC | 08:05 | |
*** fragatina has quit IRC | 08:09 | |
*** daneyon_ has joined #openstack-kolla | 08:12 | |
*** daneyon_ has quit IRC | 08:16 | |
*** bdaca__ has joined #openstack-kolla | 08:21 | |
*** bdaca_ has quit IRC | 08:25 | |
*** zhubingbing has joined #openstack-kolla | 08:37 | |
*** bdaca_ has joined #openstack-kolla | 08:41 | |
*** bdaca__ has quit IRC | 08:45 | |
*** bdaca_ has quit IRC | 08:53 | |
*** HyperJohnGraham has quit IRC | 08:56 | |
*** matrohon has joined #openstack-kolla | 09:07 | |
*** zhiwei has joined #openstack-kolla | 09:12 | |
*** mbound has joined #openstack-kolla | 09:17 | |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Make the kolla_keystone_service can update fileds https://review.openstack.org/348382 | 09:32 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Enable the nova microversion api https://review.openstack.org/348432 | 09:32 |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Use /etc file to overwrite the docker.service file https://review.openstack.org/348802 | 09:32 |
*** fragatina has joined #openstack-kolla | 09:38 | |
*** daneyon_ has joined #openstack-kolla | 10:00 | |
*** zhurong has quit IRC | 10:03 | |
*** Liuqing has quit IRC | 10:03 | |
*** daneyon_ has quit IRC | 10:04 | |
*** zhiwei has quit IRC | 10:07 | |
*** zhiwei has joined #openstack-kolla | 10:08 | |
*** zhiwei has quit IRC | 10:18 | |
*** zhiwei has joined #openstack-kolla | 10:20 | |
*** zhiwei has quit IRC | 10:25 | |
*** sdake has joined #openstack-kolla | 10:25 | |
*** mewald has joined #openstack-kolla | 10:26 | |
openstackgerrit | Marga Millet proposed openstack/kolla: Customizations for memcached https://review.openstack.org/348576 | 10:28 |
*** mbound has quit IRC | 10:31 | |
openstackgerrit | Mathias proposed openstack/kolla: Added telegraf role https://review.openstack.org/346448 | 10:42 |
mewald | We just discovered a bug in https://review.openstack.org/#/c/346448/ I uploaded another patch set to solve it | 10:47 |
patchbot | mewald: patch 346448 - kolla - Added telegraf role | 10:47 |
openstackgerrit | Mathias proposed openstack/kolla: Added telegraf role https://review.openstack.org/346448 | 10:51 |
openstackgerrit | Mathias proposed openstack/kolla: Added telegraf container https://review.openstack.org/346445 | 10:51 |
openstackgerrit | Mathias proposed openstack/kolla: Added influxdb container https://review.openstack.org/346446 | 10:53 |
openstackgerrit | Mathias proposed openstack/kolla: Added influxdb role https://review.openstack.org/346449 | 10:54 |
openstackgerrit | Mathias proposed openstack/kolla: Added grafana container https://review.openstack.org/346447 | 10:54 |
openstackgerrit | Mathias proposed openstack/kolla: Added grafana role https://review.openstack.org/346450 | 10:54 |
*** fragatina has quit IRC | 11:00 | |
*** britthouser has joined #openstack-kolla | 11:12 | |
*** britthou_ has joined #openstack-kolla | 11:18 | |
*** britthouser has quit IRC | 11:19 | |
*** mliima has joined #openstack-kolla | 11:22 | |
*** sdake has quit IRC | 11:27 | |
*** mbound has joined #openstack-kolla | 11:32 | |
*** britthou_ has quit IRC | 11:35 | |
*** mliima has quit IRC | 11:36 | |
*** mbound has quit IRC | 11:36 | |
*** britthouser has joined #openstack-kolla | 11:37 | |
*** ppowell has joined #openstack-kolla | 11:39 | |
*** rhallisey has joined #openstack-kolla | 11:42 | |
*** britthouser has quit IRC | 11:42 | |
*** mliima has joined #openstack-kolla | 11:43 | |
*** britthouser has joined #openstack-kolla | 11:43 | |
rhallisey | Jeffrey4l, you mind giving https://review.openstack.org/#/c/327925/ +A | 11:43 |
patchbot | rhallisey: patch 327925 - kolla - Enable kolla k8s to override bind api bind address... | 11:43 |
rhallisey | :) | 11:43 |
*** britthouser has quit IRC | 11:46 | |
*** britthouser has joined #openstack-kolla | 11:47 | |
*** dwalsh has joined #openstack-kolla | 11:47 | |
*** dwalsh_ has joined #openstack-kolla | 11:48 | |
*** daneyon_ has joined #openstack-kolla | 11:48 | |
*** daneyon_ has quit IRC | 11:53 | |
Jeffrey4l | done :D | 11:53 |
openstackgerrit | Merged openstack/kolla: Enable kolla k8s to override bind api bind address in genconfig https://review.openstack.org/327925 | 11:59 |
mliima | Jeffrey4l, ping | 12:04 |
openstackgerrit | Mathias proposed openstack/kolla: Added telegraf role https://review.openstack.org/346448 | 12:05 |
*** ppowell has quit IRC | 12:05 | |
*** britthouser has quit IRC | 12:06 | |
*** britthouser has joined #openstack-kolla | 12:07 | |
openstackgerrit | Mathias proposed openstack/kolla: Added influxdb container https://review.openstack.org/346446 | 12:07 |
openstackgerrit | Merged openstack/kolla: Use /etc file to overwrite the docker.service file https://review.openstack.org/348802 | 12:07 |
openstackgerrit | Mathias proposed openstack/kolla: Added grafana role https://review.openstack.org/346450 | 12:08 |
rhallisey | Jeffrey4l, thank you | 12:09 |
Jeffrey4l | mliima, pong | 12:11 |
mliima | thanks Jeffrey4l, rhallisey has solved my doubt | 12:12 |
mliima | :) | 12:12 |
Jeffrey4l | great. | 12:13 |
mliima | I saw in some PS in sudoers files with the word NOPASSWOD, just wanted to confirm that now would be that way | 12:13 |
mliima | :) | 12:13 |
openstackgerrit | Merged openstack/kolla: Clean up Glance image after sanity check https://review.openstack.org/347409 | 12:17 |
*** Liuqing has joined #openstack-kolla | 12:20 | |
*** klint has quit IRC | 12:32 | |
*** v1k0d3n has joined #openstack-kolla | 12:33 | |
*** zhiwei has joined #openstack-kolla | 12:34 | |
*** britthouser has quit IRC | 12:38 | |
*** zhiwei has quit IRC | 12:38 | |
openstackgerrit | Abe Music proposed openstack/kolla: enhancements to install_packages macro https://review.openstack.org/348567 | 12:44 |
*** lulei has quit IRC | 12:46 | |
*** britthouser has joined #openstack-kolla | 12:54 | |
*** sean-k-mooney has quit IRC | 12:59 | |
*** britthouser has quit IRC | 13:02 | |
mewald | mliima: has to be NOPASSWD! | 13:07 |
mliima | yes mewald :) | 13:08 |
mliima | thank you | 13:08 |
mliima | I saw NOPASSWOD so often in some PS i was in doubt hehe | 13:09 |
openstackgerrit | Mathias proposed openstack/kolla: Added telegraf container https://review.openstack.org/346445 | 13:09 |
*** zhiwei has joined #openstack-kolla | 13:15 | |
openstackgerrit | Mathias proposed openstack/kolla: Added grafana role https://review.openstack.org/346450 | 13:16 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla: Horizon interface address and memcached override https://review.openstack.org/330828 | 13:16 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla: Fix interface address for Neutron-server https://review.openstack.org/343117 | 13:16 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla: Fix interface address for memcached atop kubernetes https://review.openstack.org/327987 | 13:16 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla: Fix interface address for RabbitMQ and disable cluster for Kubernetes https://review.openstack.org/336751 | 13:16 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla: Glance interface address, memcached override, and glance override. https://review.openstack.org/332481 | 13:16 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla: Keystone interface address and memcached override https://review.openstack.org/328569 | 13:16 |
openstackgerrit | Mathias proposed openstack/kolla: Added grafana container https://review.openstack.org/346447 | 13:17 |
*** zhiwei has quit IRC | 13:19 | |
openstackgerrit | Mathias proposed openstack/kolla: Added grafana role https://review.openstack.org/346450 | 13:23 |
openstackgerrit | Mathias proposed openstack/kolla: Added telegraf role https://review.openstack.org/346448 | 13:23 |
openstackgerrit | Mathias proposed openstack/kolla: Added influxdb role https://review.openstack.org/346449 | 13:23 |
openstackgerrit | Mathias proposed openstack/kolla: Added grafana container https://review.openstack.org/346447 | 13:23 |
openstackgerrit | Mathias proposed openstack/kolla: Added influxdb container https://review.openstack.org/346446 | 13:23 |
openstackgerrit | Mathias proposed openstack/kolla: Added telegraf container https://review.openstack.org/346445 | 13:23 |
*** mbound has joined #openstack-kolla | 13:36 | |
*** lyncos has quit IRC | 13:41 | |
*** lyncos has joined #openstack-kolla | 13:41 | |
openstackgerrit | Serguei Bezverkhi proposed openstack/kolla-kubernetes: Glance bootstrap to create service/project/role https://review.openstack.org/346215 | 13:45 |
*** mgoddard__ has joined #openstack-kolla | 13:45 | |
*** mgoddard_ has quit IRC | 13:49 | |
openstackgerrit | Serguei Bezverkhi proposed openstack/kolla-kubernetes: Adds ansible support to deploy skydns service https://review.openstack.org/335677 | 13:51 |
*** severion has joined #openstack-kolla | 13:57 | |
*** v1k0d3n_ has joined #openstack-kolla | 14:02 | |
*** v1k0d3n_ has quit IRC | 14:02 | |
*** v1k0d3n_ has joined #openstack-kolla | 14:02 | |
*** severion has quit IRC | 14:04 | |
*** ppowell has joined #openstack-kolla | 14:07 | |
*** dmueller-evoila has quit IRC | 14:09 | |
*** dmueller-evoila has joined #openstack-kolla | 14:11 | |
openstackgerrit | zhubingbing proposed openstack/kolla: Add the missing packages in the gnocchi image https://review.openstack.org/348388 | 14:14 |
*** dmueller-evoila has quit IRC | 14:19 | |
*** dmueller-evoila has joined #openstack-kolla | 14:20 | |
*** daneyon_ has joined #openstack-kolla | 14:30 | |
*** banix has joined #openstack-kolla | 14:31 | |
*** mgoddard__ has quit IRC | 14:31 | |
*** mgoddard has joined #openstack-kolla | 14:31 | |
*** daneyon_ has quit IRC | 14:35 | |
*** HyperJohnGraham has joined #openstack-kolla | 14:36 | |
*** mewald has quit IRC | 14:38 | |
*** zhurong has joined #openstack-kolla | 14:40 | |
*** david-lyle has joined #openstack-kolla | 14:42 | |
openstackgerrit | Jeffrey Zhang proposed openstack/kolla: Optimize horizon cache and compress for http response https://review.openstack.org/346444 | 14:45 |
*** banix has quit IRC | 14:45 | |
*** zhurong has quit IRC | 14:46 | |
*** david-lyle_ has joined #openstack-kolla | 14:46 | |
*** zhurong_ has joined #openstack-kolla | 14:47 | |
*** david-lyle has quit IRC | 14:47 | |
*** david-lyle__ has joined #openstack-kolla | 14:48 | |
*** banix has joined #openstack-kolla | 14:49 | |
*** david-lyle_ has quit IRC | 14:52 | |
wirehead_ | Well, I guess I've got a bunch of testin' and reviewin' to do. | 14:53 |
*** dmueller-evoila has quit IRC | 15:00 | |
*** b_bezak has quit IRC | 15:02 | |
*** dmueller-evoila has joined #openstack-kolla | 15:03 | |
*** v1k0d3n has quit IRC | 15:03 | |
openstackgerrit | Ryan Hallisey proposed openstack/kolla: Horizon interface address and memcached override https://review.openstack.org/330828 | 15:04 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla: Fix interface address for Neutron-server https://review.openstack.org/343117 | 15:04 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla: Fix interface address for RabbitMQ and disable cluster for Kubernetes https://review.openstack.org/336751 | 15:04 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla: Glance interface address, memcached override, and glance override. https://review.openstack.org/332481 | 15:04 |
openstackgerrit | Ryan Hallisey proposed openstack/kolla: Keystone interface address and memcached override https://review.openstack.org/328569 | 15:04 |
*** v1k0d3n has joined #openstack-kolla | 15:05 | |
*** banix has quit IRC | 15:07 | |
*** dmueller-evoila has quit IRC | 15:07 | |
*** mliima has quit IRC | 15:09 | |
*** dasTor has quit IRC | 15:10 | |
*** diogogmt has joined #openstack-kolla | 15:11 | |
*** ayoung has joined #openstack-kolla | 15:22 | |
*** david-lyle has joined #openstack-kolla | 15:23 | |
*** david-lyle__ has quit IRC | 15:23 | |
*** mliima has joined #openstack-kolla | 15:26 | |
*** inc0 has joined #openstack-kolla | 15:27 | |
inc0 | good morning | 15:27 |
*** zhurong_ has quit IRC | 15:28 | |
*** mgoddard_ has joined #openstack-kolla | 15:30 | |
*** Liuqing has quit IRC | 15:33 | |
*** mgoddard has quit IRC | 15:34 | |
rhallisey | sbezverk_, I think it is user facing | 15:34 |
rhallisey | how else would you add a pv | 15:34 |
rhallisey | we need each param in services-resources to be configurable and exposed through ansible | 15:35 |
rhallisey | via all.yml | 15:35 |
rhallisey | as defaults | 15:35 |
sbezverk_ | rhallisey all required services will have alredy all required resources | 15:35 |
sbezverk_ | so no need to edit service-resource.yml at all | 15:36 |
sbezverk_ | they just need to edit templates | 15:36 |
rhallisey | sbezverk_, ok, but there needs to be exposure through ansible | 15:36 |
rhallisey | for some of those vars | 15:36 |
rhallisey | sbezverk_, that file would be great to serve as a 'mapping of your cluster' | 15:37 |
rhallisey | do a bunch of status calls | 15:37 |
rhallisey | return an ascii map :D | 15:37 |
rhallisey | be cool as hell | 15:37 |
sbezverk_ | sure it is a positive collateral :-) | 15:38 |
sbezverk_ | rhallisey since all services will get pv and pvc even if they just use host mounts | 15:39 |
sbezverk_ | I do not see any need for a user to edit that file | 15:39 |
sbezverk_ | adding variables sounds ok | 15:39 |
*** sdake has joined #openstack-kolla | 15:39 | |
wirehead_ | rhallisey: https://github.com/kelseyhightower/kube-cert-manager | 15:45 |
sdake | morning | 15:45 |
rhallisey | wirehead_, neat | 15:46 |
rhallisey | sdake, https://review.openstack.org/#/c/327987/6 and all it's deps | 15:46 |
patchbot | rhallisey: patch 327987 - kolla - Fix interface address for memcached atop kubernetes | 15:46 |
rhallisey | :) | 15:46 |
wirehead_ | It would be nice, although requiring of much reconfiguration and redesign and so on, for Kolla-Kubernetes to work more like that. | 15:46 |
wirehead_ | Thus, the config lives as a third party resource. | 15:47 |
sdake | heads up - after 3 hours of sleep its not wise to ask soemone to review a patch and all its deps :) | 15:47 |
rhallisey | sdake, take your time :) | 15:47 |
wirehead_ | It's OK, it's not like there's a +PinkElephant option in the UI. | 15:47 |
sdake | we need a gui for kolla as well | 15:48 |
sdake | sham we don't have any gui cats in the team that i know of | 15:48 |
wirehead_ | *shrug* I'm not a GUI cat, but I play with it for fun. | 15:49 |
wirehead_ | My desire to have the config live as a ThirdPartyResource for Kolla-Kubernetes is mostly due to my mental picture of how I'd build it. | 15:50 |
rhallisey | wirehead_, well not kolla generates it. Would that be considered a third party resource? | 15:51 |
rhallisey | maybe I'm not understanding your point | 15:51 |
sdake | http://www.jmbullion.com/2016-1-4-oz-proof-australian-gold-koala-coin/?utm_source=remarketing&utm_medium=banner&utm_campaign=Criteo | 15:51 |
sbezverk_ | sdake how many of these you collected? ;-) | 15:52 |
*** mummer has joined #openstack-kolla | 15:52 | |
wirehead_ | Hm. So, thought experiment. Setup process takes the various yaml files, uploads them as ThirdPartyResources to a Kubernetes cluster. Execs a workflow job that's just a container with kolla-kubernetes installed on it to actually do the work. | 15:52 |
wirehead_ | Said workflow job doesn't contain the config files, it pulls them down as the ThirdPartyResource. | 15:53 |
wirehead_ | Machine used to run setup process disappears. Person who does setup moves on to greener pa$sture$. | 15:54 |
wirehead_ | New operator says "Hey, I need to reconfigure things," enters password into tiny web app running on the kube cluster. Web app edits the ThirdPartyResource, triggers workflow, does reconfiguration. | 15:55 |
rhallisey | wirehead_, config maps willl do that | 15:55 |
rhallisey | well eventually | 15:55 |
rhallisey | if you change data in config map is triggers kube to restart the container | 15:55 |
rhallisey | that's our reconfigure | 15:56 |
wirehead_ | Yeah. I suppose either way, Kubernetes doesn't really try to enforce a strict layout. | 15:58 |
rhallisey | neat idea though | 15:58 |
wirehead_ | Big thing is that you can alter a single key as an atomic operation with a ThirdPartyResource | 15:58 |
rhallisey | that is cool | 15:59 |
wirehead_ | So, ConfigMap preserves the comments but provides opportunities for config file corruption. | 15:59 |
rhallisey | we'll that's the ops fault :) | 15:59 |
wirehead_ | ThirdPartyResource kills the comments. | 15:59 |
wirehead_ | But you can't corrupt it, just misconfigure. | 15:59 |
rhallisey | how can the comments corrupt the config file | 16:00 |
wirehead_ | Honestly, I really want a ConfigMap that allows me to insert environment variables with string substitution, so as to force a non-12-factor-app to work more like a well-behaved 12-factor-app. | 16:00 |
wirehead_ | Picture a faulty process that uploads a ConfigMap with an accidental colon removal or other YAML corruption | 16:01 |
*** mgoddard has joined #openstack-kolla | 16:01 | |
*** mgoddard_ has quit IRC | 16:01 | |
rhallisey | but the configs themselves won't be yaml. They get converted a bunch by kube, but that corruption would be a kube bug | 16:02 |
wirehead_ | kolla-kuberentes.yml and globals.yml had better be yaml. :) | 16:03 |
rhallisey | but those are ansible and cli consumed | 16:04 |
rhallisey | we don't put kolla-kubernetes.yml in a configmap? do we? | 16:04 |
wirehead_ | No, but we could. | 16:04 |
wirehead_ | Or a ThirdPartyResource | 16:04 |
rhallisey | I think ansible should be the front facing config mechanism | 16:05 |
wirehead_ | Anyway, gotta run. Car thing for wife's car. | 16:05 |
rhallisey | wirehead_, good luck :) | 16:05 |
rhallisey | see ya later! | 16:05 |
*** mewald has joined #openstack-kolla | 16:15 | |
*** Liuqing has joined #openstack-kolla | 16:21 | |
kfox1111 | wirehead_: interesting. | 16:27 |
kfox1111 | along the same lines... | 16:28 |
kfox1111 | could you upload /etc/kolla stuff as configmaps, | 16:28 |
*** mark-casey has joined #openstack-kolla | 16:28 | |
sdake | need to go back to bed | 16:29 |
kfox1111 | and then have a kolla container pull them do the templating, and then push them back in as processed configmaps. | 16:29 |
kfox1111 | snapshotting the system then really is just redownloading the base kolla configmaps. as the rest can always be regenerated. | 16:30 |
sdake | Jeffrey4l around? | 16:32 |
openstackgerrit | Prithiv proposed openstack/kolla: Networking-SFC is a neutron big-tent project Kolla does not have Networking-SFC agent support for now. This is essential for Service Function Chaining use case. Add networking-sfc roles for ansible. https://review.openstack.org/346842 | 16:34 |
openstackgerrit | Prithiv proposed openstack/kolla: Dockerfiles for Networking-SFC Container https://review.openstack.org/344930 | 16:34 |
Jeffrey4l | sdake, yup | 16:34 |
openstackgerrit | Prithiv proposed openstack/kolla: Add Networking-SFC roles in ansible https://review.openstack.org/346842 | 16:39 |
*** gfidente has quit IRC | 16:39 | |
lyncos | ping Inc0 | 16:41 |
*** Liuqing has quit IRC | 16:44 | |
*** unicell has quit IRC | 16:46 | |
*** Liuqing has joined #openstack-kolla | 16:47 | |
*** rhallisey has quit IRC | 16:52 | |
*** Liuqing has quit IRC | 16:54 | |
sdake | Jeffrey4l could you answer this question for me | 16:55 |
sdake | if you create user by command line, use can exist without any role. | 16:55 |
sdake | in review https://review.openstack.org/#/c/346008/2 | 16:55 |
patchbot | sdake: patch 346008 - kolla - Keystone "user" role added by default. | 16:55 |
sdake | what do you mean by that? | 16:55 |
sdake | are you saying that is a bad thing? | 16:55 |
sdake | or a possibility | 16:55 |
*** Liuqing has joined #openstack-kolla | 16:56 | |
Jeffrey4l | sdake, it is possible. only in the horizon, a role must exist when create user. | 16:58 |
Jeffrey4l | this should be a logical in horizon. | 16:58 |
sdake | and that role should have admin assignment is what you mean? | 16:58 |
sdake | so horizon can create users? | 16:59 |
mewald | yes it can | 16:59 |
Jeffrey4l | my typo. i mean i can assignment the admin role to the user by using cli. | 17:00 |
sdake | let me restate, that role should have admin assignment so horizon can create users? | 17:00 |
Jeffrey4l | hmm. let's me show your the code. | 17:00 |
* Jeffrey4l is search the code in horizon | 17:00 | |
sdake | the code isn't helpful | 17:00 |
sdake | i just woke up | 17:00 |
sdake | with 3 hours of sleep | 17:01 |
Jeffrey4l | OK. | 17:01 |
Jeffrey4l | 1. the horizon need the _member_ role ( in default ) when create the user. | 17:01 |
sdake | i got that | 17:01 |
sdake | does the _member_ role need to be in the admin group or whatever? | 17:02 |
Jeffrey4l | 2. but in the keystone, this is not neccesary. | 17:02 |
Jeffrey4l | no. just a simple role without any special. | 17:02 |
sdake | ok so the review overloads user with horizon and other users | 17:02 |
Jeffrey4l | so the _member_ role is only needed by horizon, and should be create in horizon. | 17:02 |
*** matrohon has quit IRC | 17:02 | |
sdake | Jeffrey4l and that is the reason for the -1? | 17:04 |
Jeffrey4l | two reason: 1. use the default _member_ role 2. create the _member_ role in horizon. | 17:05 |
Jeffrey4l | two reason: 1. use the default _member_ role rather than a new role named *user* 2. create the _member_ role in horizon. | 17:05 |
sdake | i see, so dissastitfied with the renaming of the default role from _member_ to user | 17:05 |
sdake | is the second reason | 17:06 |
Jeffrey4l | yes. _member_ is well known but user is not. | 17:06 |
sdake | ok - let me have a think | 17:06 |
Jeffrey4l | OK. :D | 17:06 |
sdake | fwiw I think asking to overload the role creation with the ansible module is a bit much for the same patch | 17:07 |
sdake | your right it should be done | 17:07 |
sdake | i thinkn in a separate patch - we have that code all over the code base | 17:07 |
Jeffrey4l | that's fine | 17:08 |
sdake | Jeffrey4l can skim through http://docs.openstack.org/mitaka/install-guide-ubuntu/keystone-users.html | 17:10 |
david-lyle | don't know if this helps, but _member_ is just a placeholder that happens to work with devstack, any role can be used as the default role see: https://github.com/openstack/horizon/blob/master/openstack_dashboard/settings.py#L226 | 17:10 |
david-lyle | Horizon just requires a default role to be specified | 17:10 |
sdake | i want this horiozn bug settled once and for all | 17:11 |
Jeffrey4l | sdake, you mean the default role is bug? | 17:11 |
sdake | david-lyle - thanks | 17:12 |
sdake | Jeffrey4l depends on how important of a reference ou think that link is | 17:12 |
sdake | it says mitaka - intall-guide-ubuntu - keystone users | 17:12 |
sdake | in the title of the url | 17:12 |
sdake | seems authentic | 17:12 |
*** severion has joined #openstack-kolla | 17:12 | |
sdake | i never got the deal with creating a demo user | 17:12 |
Jeffrey4l | it has been there for a long time. iirc, a use without any role will not have any permission in a project. | 17:12 |
sdake | i thought that personally was bad practice | 17:12 |
sdake | Jeffrey4l yes i understand that part of things | 17:13 |
sdake | so i think we dont want to create demo role, but i dont understand problem with creating a user role called "user" | 17:14 |
sdake | would you expand | 17:15 |
Jeffrey4l | hmm in the doc, it want verify a normal user works. http://docs.openstack.org/mitaka/install-guide-ubuntu/keystone-verify.html | 17:15 |
Jeffrey4l | so it create a normal role and user. | 17:15 |
sdake | sorry not demo role above - demo user | 17:15 |
sdake | is this a security thing - that we give extra permissions to horizon if we use that patch? | 17:16 |
Jeffrey4l | horizon use the _member_ in default all the time. why we need change it. even though it is not a big deal. | 17:16 |
*** v1k0d3n_ has quit IRC | 17:16 | |
Jeffrey4l | my point is: _member_ is well known and used all the time, why we want to change it to `user`. ( i admit using `user` works) | 17:17 |
sdake | Jeffrey4l got it - but does using user grant extra credentials to horizon? | 17:17 |
sdake | I want to understand if we need a user specifically for horizon | 17:18 |
sdake | sorry role | 17:18 |
sdake | damn | 17:18 |
Jeffrey4l | sdake, no. `user` and `_member_` is the same. | 17:18 |
sdake | actually yes user | 17:18 |
sdake | they have same credentials? | 17:18 |
Jeffrey4l | the role is only affect by the policy file. and neither `user` nor `_member_` are defined/filtered in any policy files. | 17:19 |
*** unicell has joined #openstack-kolla | 17:19 | |
sdake | thanks | 17:19 |
Jeffrey4l | yes. they have the same credentials. | 17:19 |
sdake | so because not filtered in policy files, they have full credentials or no credentials? | 17:20 |
Jeffrey4l | sdake, they have part of permissions. | 17:21 |
Jeffrey4l | admin role has the full credentials. | 17:21 |
sdake | what about _member_ and user? | 17:22 |
Jeffrey4l | _member_ role and the user role is the same. | 17:22 |
Jeffrey4l | a user with that role create user the project panel in the horizon. | 17:22 |
sdake | and that same is th eadmin role? | 17:22 |
sdake | and that same is the admin role? | 17:22 |
Jeffrey4l | no. admin role is special. it have full permission( at least in the keystone v2 api, v3 is a little special ) | 17:23 |
Jeffrey4l | sdake, check this | 17:24 |
Jeffrey4l | https://github.com/openstack/keystone/blob/master/etc/policy.json#L15 | 17:24 |
Jeffrey4l | only a user with admin role can create region. | 17:24 |
Jeffrey4l | in some of usecase, we can change the policy file to something like: a user with role _member_ can create region. | 17:25 |
Jeffrey4l | this is how it works. | 17:25 |
sdake | cool | 17:25 |
sdake | Jeffrey4l ++ | 17:26 |
Jeffrey4l | :p | 17:26 |
sdake | let me go look at review - my thinking is _member_ or user doesn't matter | 17:26 |
*** rstarmer has joined #openstack-kolla | 17:27 | |
Jeffrey4l | for the final usage, it doesn't matter. My only point is: _member_ is default value and well known. change it to others may cause operators a little confused. | 17:27 |
sdake | cool well i'm glad whtever occurs is not a security issue :) | 17:28 |
Jeffrey4l | and another thing: kolla can not handle the policy file change now. it have no chance to change the file. | 17:28 |
Jeffrey4l | yep. it is not related to security. | 17:28 |
Jeffrey4l | we may need add that feature. | 17:29 |
sdake | if we create _member_ role it hsould go in horizon i think - i already said that once i'm prety sure :) | 17:29 |
Jeffrey4l | agreed. | 17:29 |
*** mark-casey has quit IRC | 17:29 | |
sdake | also there is not backward compatibility issue for backports | 17:31 |
Jeffrey4l | sdake, actually, it has. in the ansible>2, there is no method os_keystone_role module. :( | 17:31 |
Jeffrey4l | sorry, i mean ansible<2 | 17:32 |
*** severion has quit IRC | 17:33 | |
*** shardy has quit IRC | 17:33 | |
sdake | do we need that? | 17:34 |
sdake | could just use the cli | 17:34 |
Jeffrey4l | sdake, we can write our own module like kolla_user kolla_keystone_service does. | 17:35 |
Jeffrey4l | it is easy to implement. | 17:35 |
*** Liuqing has quit IRC | 17:36 | |
Jeffrey4l | it is hard to keep idempotent when use cli. | 17:36 |
sdake | yup | 17:36 |
sdake | thought we agreed to do that as a separate patch | 17:37 |
Jeffrey4l | sdake, for mitaka? or for all branches? | 17:37 |
sdake | this work needs to be backported | 17:37 |
Jeffrey4l | got. | 17:38 |
Jeffrey4l | so lets write our own edition. | 17:38 |
sdake | let me have another look at patch | 17:41 |
*** HyperJohnGraham has quit IRC | 17:41 | |
*** mark-casey has joined #openstack-kolla | 17:41 | |
*** blahrus has joined #openstack-kolla | 17:43 | |
*** blahrus has left #openstack-kolla | 17:43 | |
*** rstarmer has quit IRC | 17:44 | |
*** rstarmer has joined #openstack-kolla | 17:46 | |
sdake | Jeffrey4l i think the patch is good to go if we decide to use user instead of -member_ | 17:46 |
Jeffrey4l | cool | 17:46 |
sdake | it provides immediate relif to this bug which is sort of high profile | 17:46 |
sdake | alot of folks complain about it | 17:47 |
Jeffrey4l | yes. it is.. | 17:47 |
sdake | i dont know if we should use user or _member_ | 17:47 |
Jeffrey4l | i prefer to use _member_ . :D | 17:47 |
sdake | david-lyle seemed to indicate the name was picked at random | 17:47 |
Jeffrey4l | i think so. I never saw the `user` role. | 17:48 |
Jeffrey4l | _member_ and Member is more common. | 17:48 |
*** rhallisey_ has joined #openstack-kolla | 17:48 | |
sdake | seems to make sense that work should be separated | 17:48 |
Jeffrey4l | a user with `user` role is a little wired. :) | 17:48 |
david-lyle | devstack has waffled between _member_ and Member several times, Horizon is just reflecting that value in the default | 17:49 |
sdake | david-lyle cool thanks for the help :) | 17:49 |
sdake | devstack isn't our reference | 17:50 |
sdake | we pretty much our own reference | 17:50 |
*** rstarmer has quit IRC | 17:50 | |
Jeffrey4l | so the final decision is? | 17:51 |
sdake | i think what is needed is three things | 17:51 |
*** rstarmer has joined #openstack-kolla | 17:51 | |
sdake | _member_ based patch in horizon to do what operators expect | 17:52 |
sdake | user based patch - i'll ping operators list on their thoughts on creating a user as defined in those docs - that will decide if that goes in | 17:52 |
sdake | and some work on backporting a from cli->os_* patch | 17:53 |
sdake | which is a whole lotta work | 17:53 |
*** zhiwei has joined #openstack-kolla | 17:54 | |
Jeffrey4l | cool | 17:54 |
sdake | we could take shortcuts by just merging that patch straight up but that doesn't seem like the right thing to do | 17:54 |
Jeffrey4l | yes. split it into two will be better. one for kolla_keystone_role module. another for _member_(whatever) role create in horizon. | 17:55 |
sdake | 1`i was thinking split into three as well (adding user) | 17:56 |
sdake | maybe before we do work on that i ping ops list | 17:57 |
sdake | and ask them what htey want | 17:57 |
Jeffrey4l | ok | 17:57 |
*** rstarmer has quit IRC | 17:57 | |
sdake | so as not to waste time | 17:57 |
sdake | no idea what ops want on this one :) | 17:57 |
*** rstarmer has joined #openstack-kolla | 17:57 | |
*** zhiwei has quit IRC | 17:58 | |
Jeffrey4l | lol | 17:59 |
sdake | Jeffrey4l mind pasting a link to thi log in the review and keep vote at -1 | 17:59 |
Jeffrey4l | need to go bed. bye :) | 17:59 |
sdake | oh sorry | 17:59 |
sdake | forgot its late | 17:59 |
Jeffrey4l | sdake, i will add that. | 17:59 |
sdake | cool you rock thanks ;) | 18:00 |
Jeffrey4l | but which link should i add? | 18:00 |
sdake | irc log | 18:00 |
sdake | since this is where we sorted it out | 18:00 |
Jeffrey4l | no problem | 18:00 |
sdake | i dont like doing irc reviews | 18:00 |
sdake | but sometimes it has to be done | 18:00 |
Jeffrey4l | OK | 18:00 |
*** HyperJohnGraham has joined #openstack-kolla | 18:03 | |
Jeffrey4l | all done. | 18:06 |
*** dmueller-evoila has joined #openstack-kolla | 18:06 | |
Jeffrey4l | bye guys. | 18:06 |
* Jeffrey4l is head to the bed. | 18:06 | |
*** dmueller-evoila has quit IRC | 18:10 | |
*** inc0 has quit IRC | 18:15 | |
*** inc0 has joined #openstack-kolla | 18:15 | |
*** mummer has quit IRC | 18:16 | |
*** rstarmer has quit IRC | 18:17 | |
*** inc0_ has joined #openstack-kolla | 18:22 | |
openstackgerrit | Christian Berendt proposed openstack/kolla: Enable CADF events in Keystone https://review.openstack.org/349006 | 18:23 |
*** severion has joined #openstack-kolla | 18:24 | |
*** v1k0d3n_ has joined #openstack-kolla | 18:25 | |
*** inc0 has quit IRC | 18:26 | |
*** mummer has joined #openstack-kolla | 18:27 | |
*** rstarmer has joined #openstack-kolla | 18:28 | |
*** severion has quit IRC | 18:28 | |
*** v1k0d3n_ has quit IRC | 18:30 | |
openstackgerrit | Merged openstack/kolla-kubernetes: Add resource status command for Workflow Engine https://review.openstack.org/345102 | 18:35 |
*** sdake has quit IRC | 18:47 | |
*** mummer has quit IRC | 18:48 | |
*** achanda has joined #openstack-kolla | 18:55 | |
*** daneyon_ has joined #openstack-kolla | 19:01 | |
openstackgerrit | Michal Jastrzebski (inc0) proposed openstack/kolla: Testing gate https://review.openstack.org/348551 | 19:04 |
*** daneyon_ has quit IRC | 19:06 | |
*** lyncos has quit IRC | 19:08 | |
*** HyperJohnGraham has quit IRC | 19:23 | |
*** HyperJohnGraham has joined #openstack-kolla | 19:24 | |
openstackgerrit | Serguei Bezverkhi proposed openstack/kolla-kubernetes: Kolla Kubernetes Service Exposure BP https://review.openstack.org/349044 | 19:25 |
*** HyperJohnGraham has quit IRC | 19:28 | |
*** ppowell has quit IRC | 19:33 | |
*** rstarmer has quit IRC | 19:33 | |
*** sdake has joined #openstack-kolla | 19:35 | |
openstackgerrit | Michal Jastrzebski (inc0) proposed openstack/kolla: Ansible role to deploy kubernetes https://review.openstack.org/349049 | 19:36 |
openstackgerrit | Serguei Bezverkhi proposed openstack/kolla-kubernetes: Kolla Kubernetes Service Exposure BP https://review.openstack.org/349044 | 19:37 |
mewald | What's that pep error here? https://review.openstack.org/#/c/346450/ I can figure out what causes it | 19:40 |
patchbot | mewald: patch 346450 - kolla - Added grafana role | 19:40 |
*** rhallisey_ is now known as rhallisey | 19:42 | |
rhallisey | mewald, did you try removing the blank line after main() | 19:43 |
rhallisey | line 64 | 19:43 |
*** banix has joined #openstack-kolla | 19:43 | |
rhallisey | http://logs.openstack.org/50/346450/15/check/gate-kolla-pep8-ubuntu-xenial/1b172f2/console.html#_2016-07-29_15_22_21_289211 | 19:43 |
mewald | rhallisey: ah nice, I didnt even see that line .... | 19:44 |
openstackgerrit | Mathias proposed openstack/kolla: Added grafana role https://review.openstack.org/346450 | 19:46 |
mewald | fixed - I think | 19:46 |
rhallisey | ya we'll see | 19:46 |
rhallisey | :) | 19:46 |
mewald | I summary together with all that logging info would be awesome :D | 19:47 |
mewald | s/I/A/ | 19:51 |
*** rstarmer has joined #openstack-kolla | 19:51 | |
*** rahuls has joined #openstack-kolla | 19:59 | |
*** sdake has quit IRC | 19:59 | |
mewald | how is https://github.com/openstack/openstack-ansible considered compared to Kolla? I am trying to find pros and cons … | 20:00 |
*** mliima has quit IRC | 20:04 | |
*** rstarmer has quit IRC | 20:06 | |
*** rstarmer has joined #openstack-kolla | 20:15 | |
openstackgerrit | Christian Berendt proposed openstack/kolla: Enable CADF events in Keystone https://review.openstack.org/349006 | 20:18 |
*** rstarmer has quit IRC | 20:20 | |
*** coolsvap has quit IRC | 20:21 | |
openstackgerrit | Mathias proposed openstack/kolla: Added grafana container https://review.openstack.org/346447 | 20:23 |
openstackgerrit | Mathias proposed openstack/kolla: Added grafana role https://review.openstack.org/346450 | 20:24 |
*** achanda has quit IRC | 20:34 | |
*** daneyon_ has joined #openstack-kolla | 20:50 | |
*** rstarmer has joined #openstack-kolla | 20:54 | |
*** daneyon_ has quit IRC | 20:54 | |
*** dwalsh_ has quit IRC | 20:54 | |
*** dwalsh has quit IRC | 20:55 | |
*** Serlex has quit IRC | 20:59 | |
*** inc0_ has quit IRC | 21:07 | |
*** banix has quit IRC | 21:10 | |
*** zhiwei has joined #openstack-kolla | 21:27 | |
*** zhiwei has quit IRC | 21:31 | |
*** banix has joined #openstack-kolla | 21:34 | |
*** rhallisey has quit IRC | 21:40 | |
*** dims_ has quit IRC | 21:44 | |
*** ayoung has quit IRC | 21:44 | |
*** dims has joined #openstack-kolla | 21:46 | |
*** mewald has quit IRC | 22:00 | |
*** achanda has joined #openstack-kolla | 22:13 | |
*** daneyon has quit IRC | 22:15 | |
*** bmace has quit IRC | 22:18 | |
*** dave-mccowan has quit IRC | 22:38 | |
*** rstarmer has quit IRC | 22:42 | |
*** britthouser has joined #openstack-kolla | 22:51 | |
*** mark-casey has quit IRC | 22:53 | |
*** rstarmer has joined #openstack-kolla | 22:56 | |
*** britthouser has quit IRC | 22:56 | |
*** britthouser has joined #openstack-kolla | 23:02 | |
*** rstarmer has quit IRC | 23:08 | |
*** britthouser has quit IRC | 23:12 | |
*** HyperJohnGraham has joined #openstack-kolla | 23:12 | |
*** britthouser has joined #openstack-kolla | 23:15 | |
*** achanda has quit IRC | 23:17 | |
*** britthou_ has joined #openstack-kolla | 23:20 | |
*** britthouser has quit IRC | 23:20 | |
*** britthou_ has quit IRC | 23:25 | |
*** britthouser has joined #openstack-kolla | 23:27 | |
*** rstarmer has joined #openstack-kolla | 23:28 | |
*** jtriley has joined #openstack-kolla | 23:28 | |
*** jtriley has quit IRC | 23:35 | |
*** banix has quit IRC | 23:35 | |
*** britthou_ has joined #openstack-kolla | 23:36 | |
*** britthouser has quit IRC | 23:40 | |
*** jtriley has joined #openstack-kolla | 23:42 | |
*** rstarmer has quit IRC | 23:44 | |
*** rstarmer has joined #openstack-kolla | 23:45 | |
*** ssurana has joined #openstack-kolla | 23:47 | |
*** jtriley has quit IRC | 23:50 | |
*** rstarmer has quit IRC | 23:51 | |
*** achanda has joined #openstack-kolla | 23:58 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!