Saturday, 2017-03-25

kfox1111sbezverk_: sed 's/.*|//' /tmp/after.html  > /tmp/after2.html00:00
kfox1111gets rid of most of the timestamps.00:00
sbezverk_thanks00:00
kfox1111np. :)00:00
kfox1111if you dont have a copy, I highly recommend this book: http://shop.oreilly.com/product/9780596528126.do00:01
kfox1111one of the best ban per buck books I've ever bought. :)00:01
kfox1111bang00:01
sbezverk_kfox1111: will do. thanks for the link00:03
kfox1111k8s containers are all the same image.00:03
kfox1111calico versions changed a lot.00:06
sbezverk_wow diff -y is really cool00:06
kfox1111calico/node v1.0.1 vs 1.1.000:07
* kfox1111 nods00:07
kfox1111diff is a very cool tool.00:08
sbezverk_kfox1111: have you seen that bad log is missing network configuration data!!!00:09
sbezverk_http://logs.openstack.org/43/449843/1/check/gate-kolla-kubernetes-deploy-ubuntu-binary-2-iscsi-nv/279f89e/console.html#_2017-03-24_23_43_53_64009200:09
sbezverk_http://logs.openstack.org/54/449254/3/check/gate-kolla-kubernetes-deploy-ubuntu-binary-2-iscsi-nv/dd31b46/console.html#_2017-03-23_21_54_12_06376400:10
*** Pavo has quit IRC00:10
kfox1111hmm... not sure what that is. infra's code.00:10
*** tonanhngo has joined #openstack-kolla00:10
kfox1111I'm betting this is a new version of calico not working with the openstack infra iptables.00:10
kfox1111or something like that.00:10
sbezverk_could be00:11
kfox1111gonna see if we can pin it back real quick.00:11
jemcevoyinc0:  Thanks for the override hint... for the I have kolla-build running... I had to find a bug in base_yum_repo_keys in that same file:  The GPG key should be https://www.percona.com/downloads/RPM-GPG-KEY-percona not a local file... https://github.com/openstack/kolla/blob/master/docker/base/Dockerfile.j2#L6300:11
kfox1111this looks bad00:13
kfox1111https://github.com/projectcalico/canal/commit/b84aad6492906a247e730cbdb234a635d558498300:13
kfox1111lets try: https://raw.githubusercontent.com/projectcalico/canal/7deb07cda04147ab49115f437151705c747d0374/k8s-install/kubeadm/canal.yaml00:14
*** lucasxu has quit IRC00:14
openstackgerritKevin Fox proposed openstack/kolla-kubernetes master: WIP: Test gate  https://review.openstack.org/44984300:15
sbezverk_kfox1111: yeah this version looks like memt for 1.6, since they decided to switch to etcd 300:17
sbezverk_meant for 1.600:17
kfox1111looks like they merged 1.6 back to 1.5 by mistake.00:17
kfox1111if this passes, its likely.00:17
kfox1111and we can raise an issue.00:18
sbezverk_let's hope00:18
kfox1111telnet://158.69.81.40:1988500:18
sbezverk_that was it :)00:23
*** caoyuan has joined #openstack-kolla00:23
kfox1111yup.00:24
sbezverk_great catch Kevin!!!00:24
*** tonanhngo has quit IRC00:24
*** unicell has quit IRC00:25
kfox1111thanks.00:26
kfox1111it was your idea though to compare gate runs. :)00:26
sbezverk_hopefully sdake is still aroubd so we could fix the gate00:27
openstackgerritKevin Fox proposed openstack/kolla-kubernetes master: Pin Back Canal  https://review.openstack.org/44984300:30
kfox1111inc0: ping00:30
*** unicell has joined #openstack-kolla00:30
sdakesbezverk_ what do yo uneed00:35
*** eaguilar has quit IRC00:37
kfox1111sdake: https://review.openstack.org/#/c/449843/00:38
*** caoyuan has quit IRC00:38
sdakecanal is deployed via calico right?00:38
kfox1111calico is part of canal00:39
kfox1111canal = calico + flannel00:39
sbezverk_sdake: we would need to merge kfox1111 fix asap to restore gate00:40
sbezverk_it has been tested and confimred as a good solution..00:41
sdakewaiting on gate00:41
sdakei was pretty sure osme part of canal or calico was to blame as I saw that earlier today00:41
sdakeas using weave doesn't exhibit the problem of kube-dns not starting00:42
sdakekfox1111 nice job on finding a version that works :)00:42
kfox1111yeah. I think they merged back a 1.6 canal to 1.5's yaml by mistake.00:42
kfox1111sdake: sbezverk_ had the idea of comparing gate logs.00:42
kfox1111it poped up pretty quickly from there. :)00:42
sdakeyup wish i could have helped more - still learning my way around the system00:43
sdakeanyway the patch is +2'ed waiting on gate for a workflow00:43
kfox1111k. thx.00:43
*** haplo37 has quit IRC00:44
sdakewhat is the downside of using weave?00:46
*** srwilkers has joined #openstack-kolla00:47
* kfox1111 shrugs00:47
kfox1111we've just tested more with canal.00:47
kfox1111shouldn't matter in theory.00:48
kfox1111though we have had more reports of brokenness with weave so far.00:48
kfox1111its like rabbit vs qpid. both work fine. one's more tested.00:48
sbezverk_sdake: as far as I heard 99% of kube community do not use it00:49
sdakei see00:50
sdakeand the other 1% do not use calico?00:50
*** caoyuan has joined #openstack-kolla00:50
openstackgerritMerged openstack/kolla master: Merged multiple ENV into a single layer  https://review.openstack.org/44937100:51
*** haplo37 has joined #openstack-kolla00:53
kfox1111I have no staticstics. I just started using it as I had previously used flannel.00:53
kfox1111and I like flannels simplicity.00:54
srwilkersflannels keep you nice and warm, and they're simple00:58
srwilkersobligatory /s00:58
kfox1111:)00:58
sdakehey srwilkers00:59
sdakehey sbezverk_ - http://sprunge.us/GOQP00:59
sdakewhat do you make of that00:59
sdakeseems jammed up in some way?00:59
*** unicell has quit IRC00:59
srwilkershey sdake01:02
srwilkershows it going sdake kfox1111 sbezverk_?01:02
srwilkershaving a good friday night?01:03
sdakesrwilkers waiting on dinner then unplugging01:03
srwilkerssdake, right on01:03
sdakesrwilkers almost have docs written however: https://review.openstack.org/#/c/447356/01:03
sdakehad meeting today and about 10 people showed up from the community while we debugged the install01:04
kfox1111srwilkers: pretty good. you?01:04
sdakeeveryone seems keen to understand *how* kolla-kubernetes installed01:04
sdakeI must have heard "we dont want a black box" atleast 5+ times01:04
sdakeor variations on that01:04
kfox1111as an op, fully relate. :)01:04
kfox1111black boxes are things that bite you eventually.01:05
sdakethese are devs01:05
sdakei guess - not totall ysure01:05
sdakealthough I have got to the ponit of having a clean cloud.yaml01:07
sdake(which doesn't work ;)01:07
sdakento sure if it is my CNI plugin or what01:07
kfox1111try the canal from the review.01:07
kfox1111much more tested. :)01:07
sdakei was just getting ready to blow away my deploy to do that01:07
sbezverk_kfox1111: have you seen on the gate fix job, some workflows failed with really weird issue, which looks more like a connectivity issue on the host where the job was running01:09
kfox1111sbezverk_: seen it very rarely. usually a hub isue.01:10
kfox1111still need to get that container cache ps through.01:10
sbezverk_yep01:11
*** srwilkers has quit IRC01:17
sdakedocker 17.03 not supported with kubeadm01:17
* sdake groans01:17
kfox1111heh.01:18
kfox1111distro docker.01:18
sdake[kubeadm] WARNING: kubeadm is in alpha, please do not use it for production clusters.01:20
kfox1111yup.01:22
kfox1111thats why i hand roll my prod systems.01:22
kfox1111well. one of the reasons.01:23
*** vhosakot has joined #openstack-kolla01:24
sdakeyup kubeadm definately doesn't work with latest docker01:26
sdakeafter kubeadm deploys you can upgrade to latest docker if you like01:26
kfox1111would be surprised if kubernetes did too.01:26
sdakekubernetes indeed seemed to01:26
kfox1111hmm.. k.01:26
sdakealthough maybe that is why my system wedged - and it wasn't weave01:26
sdakegetting ready to test that now01:27
*** kolla-slack has joined #openstack-kolla01:29
*** srwilkers has joined #openstack-kolla01:41
*** Pavo has joined #openstack-kolla01:43
*** jtriley has joined #openstack-kolla01:44
*** Pavo has quit IRC01:48
vhosakothaha, still chatting k8s on Friday evening... moving my k8s cluster now, will start new kubeadm run now01:50
sdakenow weave wedges with distro docker01:51
sdakealthough weave did not wedge with docker-engine 17.0301:51
sdakethe proper way to tidy up: [sdake@kolla ~]$ docker stop $@ `docker ps -a -q`01:57
vhosakotsdake: weave in halcyon was great for me... but, weave in kubeadm made many pods go to CrashloopBackoff... canal+kubeadm is good for me02:01
*** tovin07 has joined #openstack-kolla02:02
sdakevhosakot this works well:02:02
sdake1255  url="https://raw.githubusercontent.com/projectcalico/canal/7deb07cda04147ab49115f437151705c747d0374"02:02
sdake 1256  url="$url/k8s-install/kubeadm/canal.yaml"02:02
sdake 1257  wget $url02:02
sdake 1258  kubectl apply -f canal.yaml02:02
vhosakotah cool02:03
openstackgerritjimmygc proposed openstack/kolla master: Add vSphere Support  https://review.openstack.org/44939502:03
sdakekfox1111 what is with the sed in that script there02:04
kfox1111which sed?02:05
sdakemy pods dont run02:05
sdakethe one in https://review.openstack.org/44984302:05
sdakemy pods wer erunning with weave (busybo for eample)02:06
kfox1111sed -i "s@192.168.0.0/16@172.16.130.0/22@" /tmp/canal.yaml02:06
kfox1111sed -i "s@10.96.232.136@172.16.128.100@" /tmp/canal.yaml02:06
kfox1111?02:06
sdakeyup02:06
sdakecould you explain what that is doing at a high level02:07
kfox1111so, k8s sdn has 2 sets of ip's.02:07
kfox1111a clusterip range. k8s services get pulled from this range.02:08
kfox1111and a container network.02:08
kfox1111each physical machine carves off a chunk of the container network to hand out to its containers.02:08
kfox1111canal.yaml has some hard coded ip ranges in it.02:08
kfox1111those are used by the openstack providers in the gate.02:08
kfox1111so breaks things.02:09
kfox1111in a few different places, we replace the ip's with ones valid in the gate.02:09
sdakewhat is 172.16.130.0?02:09
kfox1111setup_kubernetes.sh and setup_canal.sh has things.02:09
kfox1111the container network space.02:10
sdakethings like docs ;)02:10
sdakethe default in canal.yaml is 192..168.0.0/16?02:10
kfox1111its something k8s should doc.02:10
kfox1111yeah.02:10
sdakechrist thats my home network02:10
kfox1111which is bad for most organizations.02:10
kfox1111yeah.02:10
sdakewhat should it be?02:10
kfox1111anythign that doesn't conflict with your org. :)02:11
sdakecan it be a routed address?02:11
kfox1111sdn's always the hardest part.02:11
kfox1111shoudln't be.02:11
kfox1111rfc191802:11
*** fooliouno has quit IRC02:11
sdakemy home network is 192.168.7.0/802:11
kfox1111just space from it your org doesn't use.02:11
sdakeso I should sed that crap to 192.168.8.0/8?02:11
kfox11118?  you mean 24?02:12
sdakeya /2402:12
sdakeLONG DAY02:12
kfox1111no worries.02:12
sdakedoes that have to match to anything setup in kubeadm --init?02:12
sdake 1215  sudo kubeadm init --pod-network-cidr=10.244.0.0/1602:13
sdakethis is what i'm running02:13
kfox1111how many nodes do you need?02:13
sdake1 at present02:13
sdakewriting AIO docs to begin02:13
kfox1111if you don't have any 10 space stuff, I'd just use that.02:13
sdakeso that people can give kolla-kubernetes a spin02:13
sdakeso 10.0.3.0/24?02:14
kfox1111each node will try and pull a /2402:14
kfox1111by default.02:14
sdakegroan02:14
kfox1111notsure what will happen if you only have a /2402:14
sdakedoes my pod network cidr need to match anything in canal setup?02:14
kfox1111yeah.02:14
kfox1111compare setup_kubernetes and setup_canal02:15
kfox1111you should see things that match.02:15
sdakeok02:15
vhosakotsdake: are you writing AIO docs to to deploy kolla-k8s?  using what?  vagrant+halcyon  or   kubeadm?02:18
sdakekubeadm on baremetal02:18
vhosakotsdake: kubeadm on a AIO node, followed by "helm init", and the install kolla-k8s charts to install OpenStack on k8s in that AIO VM?02:19
sdakevhosakot https://review.openstack.org/#/c/447356/02:19
vhosakotah that link, I'm reviewing it.. cool02:19
vhosakotsdake: why just kargo, what if users have their base cluster using kops, bootkube, or scripts?  I'll add this comment?02:22
sdakevhosakot - huh02:22
sdakevhosakot i am documetning a workflow iwth kubeadm02:23
sdakeif someone else wants to document a deployment workflow with kargo more power to them02:23
vhosakotsdake: ah right right. got it02:23
vhosakotsdake: does kolla-k8s mandate the base (empty) cluster must be deployed using kubeadm?02:23
sdakenope02:23
vhosakotsdake: cool, that is good :)02:24
*** shasha_t_ has joined #openstack-kolla02:24
sdakealthough devs are struggling to bring up kolla02:24
sdakeand operators as well02:24
vhosakottrue02:24
sdakemight as well help them02:24
vhosakotcool02:24
sdakerelying on documentation in 20 places is not ideal02:24
sdake"go look at project x go look at project y"02:25
sdakewho does that?02:25
sdakenobody, thats who02:25
*** fooliouno has joined #openstack-kolla02:25
sdakesup fooliouno02:25
fooliounosdake: did you all have the second webex session this afternoon02:25
sdakeindeed we did02:25
sdakewe got further02:25
fooliounoshoot .. I missed it02:25
fooliounowhere did you all stop02:25
fooliounowhat step02:26
sdakei have a cloud yaml I think works02:26
sdakeI wiped out my system to start fresh02:26
sdakethat is where we stopped - networking wasbusted02:26
sdakealthough I am about to get past that problem I hope02:26
fooliounogreat. We started with helm init. got an error and stopped for the day.02:27
vhosakotfooliouno: I have stopped for the day after "helm init" breaking many days... lol... re-deploying new cluster now :)02:28
fooliounovhosakot:  I'm glad you all are clearing the way for us :)02:29
vhosakotfooliouno: bahahahahaha... I'm clearing backwards :)02:30
*** eanylin has quit IRC02:30
vhosakotkubeadm is such a great tool.. just needs some fixes... at a minimum, if "helm init", service account, and dashboard work OTB, I think kubeadm will be adopted a lot...02:31
vhosakotplus, supporting multiple masters (like kargo)02:31
vhosakotadding new workers in kubeadm is so much easier than in kargo.02:31
kfox1111its coming.02:31
vhosakotkfox1111: are you part of the kubeadm sig ?02:32
kfox1111I've kept an eye on it.02:33
vhosakotcool,02:33
kfox1111they are making it more modular.02:33
kfox1111so can be reused in more deployment tools.02:34
*** dave-mccowan has joined #openstack-kolla02:34
vhosakotI really saw hands-on how just two commands "kubeadm init" and "kubeadm join" replace like 5-10 Ansible playbooks.02:34
kfox1111yeah. its a really nice piece of code.02:35
*** pramodrj07 has quit IRC02:35
kfox1111when it becomes more mdular,02:35
kfox1111I want to try it tied in with helm.02:35
kfox1111use it to do all the ca stuff,02:35
kfox1111and deploy kube-* with helm.02:35
*** schwicht has quit IRC02:36
fooliounokfox1111: which time zone are you in02:38
fooliounook .. folks. my weekly poker game is not happening today. So I'll be off doing my taxes. Good night.02:43
*** fooliouno has quit IRC02:44
*** caoyuan has quit IRC02:46
*** manheim has joined #openstack-kolla02:50
sdakekfox1111 need some help02:53
kfox1111whats up?02:54
sdake[sdake@kolla ~]$ sudo kubeadm init --pod-network-cidr=10.1.0.0/16 --service-cidr=192.168.1.0/3002:54
sdakelocks up02:54
kfox1111fooliouno: pdt02:54
kfox111130's awefully small.02:54
sdake192.168.1.0AIO02:54
sdakeAIO02:54
sdakewhoudln't that do?02:54
kfox1111its one per service, not one per node.02:55
sdakeok my home network is 192.168.7.0/2402:55
sdake--service-cidr should beo nthat same network right?02:55
kfox1111glance-api, nova-api, neutron-server, heat-api, etc. all take up 1 service ip.02:55
kfox1111no. differnet network.02:55
kfox1111non overlapping.02:56
kfox1111its internal to k8s.02:56
sdakei see02:56
sdakeso 10.1.0.0/16 will work for sservice-cidr?02:56
kfox1111yeah.02:56
kfox1111or even 10.1.0.0/2402:56
sdakethat won't overwrite the pod network cidr?02:57
kfox1111non overlapping with the pod network cidr too.02:57
sdakeok02:57
sdake[sdake@kolla ~]$ sudo kubeadm init --pod-network-cidr=10.1.0.0/16 --service-cidr=10.3.0.0/1602:57
sdake10.2.0.0/16 is used in my network iirc02:57
kfox1111should be ok I think.02:57
kfox1111though my brains pretty fried. :/02:58
kfox1111I think those are non overlapping though.02:58
sdakeok - i'll assume non-overlapping02:58
sdakeok that gets me to this point: kube-dns-2924299975-kbtz7         0/4       ContainerCreating   0          14s03:00
sdakewhich i suspect needs some customization on canal.yml03:00
sdake  etcd_endpoints: "http://192.168.7.101:6666"03:00
sdakethis should be what?03:00
sdakenote i did look at setup_kubernetes.sh and setu_canal.sh however there is a lack of comments :)03:01
sdakelooking at seds randomly isn't all that helpful03:01
vhosakotsdake: doesn't kubeadm's default service cidr block (10.96.0.0/12).. yes, it is private and sees no internet.03:02
sdakevhosakot i want to understnad what the kubeadm optoins do03:03
sdakeand what canal.yaml requirees03:03
vhosakotsdake: ah ok ok03:03
sdakethe docs for canal are not that helpful03:03
sdakein fact rwellum said not to read them today :)03:03
sdakekfox1111 ^^03:04
sdakekfox1111 i understand this is canals' etcd endpoint03:04
sdakecanal runs its own etcd03:04
sdakewhat i dont understand is what ip to give it03:05
vhosakothahaha, yeah, many of those docs are not readable...03:05
sdakeincluding kollas03:05
sdakea readme is not helpful at all though03:06
vhosakotagree03:06
sdakevhosakot do you knwo what this value should be?03:06
vhosakotthe QSG works OTB in kolla03:06
sdakeyou mean kolla-ansible?03:06
kfox1111sdake: it needs an ip from the service cidr block.03:06
sdakekfox1111 any ip?03:06
kfox1111yeah.03:06
sdakesweet03:06
vhosakotsdake: yes, kolla-ansible's QSG03:06
sdakevhosakot kolla-ansible is mature03:07
vhosakot^^^ true03:07
sdake  clusterIP: 10.3.1.10003:07
vhosakotsdake: value for what?  kubeadm's --external-etcd-endpoints ?03:07
sdakekfox1111 this one is the same as etcd_endpoints?03:08
kfox1111I thihnk so.03:08
*** caoyuan has joined #openstack-kolla03:08
kfox1111I wrote that code a long time ago now though.03:08
sdakekfox1111 cool - any advice you can provide is helpful not going to roast you for not knowing how it works :)03:09
vhosakotsdake: I think it is needed to point kubeadm to a non-default etcd endpoint if the user does not want the etcd cluster that kubeadm install OTB.03:09
vhosakotI'm installing now03:09
vhosakotsdake: I did not pass any arg to "kubeadm init" at all.. the default args worked beautifully for me03:09
kfox1111canal has its own etcd.03:10
kfox1111vhosakot: depends on if your home network/corperate network has overlapping ip's with the random one it contains in its yaml file.03:10
sdakevhosakot can you ru nthis command then: kubectl run -i -t $(uuidgen) --image=busybox --restart=Never03:10
sdakekfox1111 yup i know canal has its own etcd03:10
vhosakotsdake: yes, that command worked for me.. now no cluster here.. tore down.. I ran that command successfully and then also ran "nslookup kubernetes" to validate DNS in busybox pod.03:11
sdakekfox1111 what about this:        # Writes basic flannel configuration to etcd.03:12
sdake        - name: configure-flannel03:12
sdake          image: quay.io/coreos/etcd:v3.0.903:12
sdake          command:03:12
sdake          - "etcdctl"03:12
sdake          - "set"03:12
sdake          - "/coreos.com/network/config"03:12
sdake          - '{ "Network": "10.0.4.0/16", "Backend": {"Type": "vxlan"} }'03:12
kfox1111thats the pod network.03:12
sdakespecifically the last line03:12
sdakeok thanks03:12
sdake[sdake@kolla ~]$ kubectl apply -f canal2.yaml03:13
sdakehere goes nothing03:13
sdakeok everyting in running state now03:15
sdake(kubernetes and canal specifically)03:15
sdakekfox1111 today on the webex we had, eveyrone was in general agreement it took them 1+ week to get kubernetes deployed03:16
kfox1111for dev or test?03:16
kfox1111or prod03:16
sdakefor anything03:16
sdaketo eval03:16
kfox1111minikube.03:16
kfox1111its like 10 min.03:17
sdakei get that03:17
sdakepeople want multinode03:17
sdakeminikube do multinode?03:17
vhosakotminikube fakes using localkube :)03:17
kfox1111people don't need minikube to kick the tires.03:17
vhosakotworse than devstack AIO IMO03:17
kfox1111to many people wnat to run before walking. ;)03:17
sdakei'd rather crawl first03:17
kfox1111yeah. and htats minikube. :)03:17
vhosakotyes, minikube is great to learn k8s concepts03:18
kfox1111once you really understand minkube, then kubeadm next.03:18
kfox1111then after that, then I did manual k8s deployment, to fully understand it.03:18
sdake[sdake@kolla ~]$ kubectl taint nodes --all dedicated-03:18
vhosakotkfox1111: how manually.. install service-after-service like k8s api-server, controller-manager, etcd, scheduler, etc03:19
vhosakot?03:19
kfox1111yeah. using kubelet and static pods to deploy those things.03:19
kfox1111the tricky bit is setting up a ca.03:19
kfox1111that and picking a right set of subnets for sdn.03:19
kfox1111the rest isn't too bad.03:20
sdakemost people give a project 30mins to 1 hour of eval time befor emoving on03:21
kfox1111yeah. so thats why I say, use minikube.03:21
kfox1111anything more is way too much for what they need to kick the tires with.03:21
portdirectminikube is a bit iffy these days - they have removed ipset and a few other things from the kernel a few times :/03:23
srwilkersa wild portdirect appears03:23
portdirectso anything that uses thes system calls gets fubared :(03:23
kfox1111easiest way is to write/contribute regression tests and upstream them. if you care about something, make sure it gets tested. :)03:24
kfox1111then its not accidental breakage at least.03:24
*** eanylin has joined #openstack-kolla03:25
portdirectyeah - i filed a few bugs, but it keeps on going :)03:25
*** inc0 has quit IRC03:25
kfox1111yeah. if its a voting test, they have to try really hard to break it.03:25
portdirectthis is what I'm using atm - which may be some help: https://github.com/portdirect/dockerfiles/tree/kubeadm/aio-deploy/kubeadm-aio03:26
sdakethis is what kube-dns does to me kfox1111 kube-dns-2924299975-kbtz7         3/4       Running            15     27m03:27
kfox1111portdirect: cool. thanks. I'll have a look.03:27
srwilkers75% is still a passing grade most places03:27
kfox1111sdake: that was what we were seeing in gate before the fix.03:27
sdakekfox1111 pretty sure i downloaded the fix03:28
*** manheim has quit IRC03:28
sdakekfox1111 however - i can give it another go03:28
kfox1111sdake: can happen for other reasons too.03:28
kfox1111issues with ip's,03:28
kfox1111iptables in the way, etc.03:28
srwilkersportdirect, hows it going03:28
sdaketiller-deploy-3210613906-bksx2    0/1       CrashLoopBackOff   4     2m03:29
sdakehowever helm version returns the proper version03:29
portdirectsrwilkers: better than that03:29
kfox1111sdake: that seems like a sdn issue.03:29
kfox1111tiller the way helm init deploys it uses sdn.03:30
kfox1111kube-dns also does.03:30
kfox1111so, symptoms of networkign not working.03:30
*** dave-mccowan has quit IRC03:30
sdakei love when people explode m80's right next door03:31
sdakemakes me so happy03:31
sdakekfox1111 you got any bone to throw me beyond that03:32
sdakekfox1111 the sooner i get this documented the less often people ask questions :)03:33
kfox1111what distro?03:33
sdakecentos 703:33
sdakekfox1111 webex screen share?03:33
kfox1111sdake: I so wish that were true.... there always are more questions. ;)03:33
sdakekfox1111 agreed- although people are struggling03:33
kfox1111do you have firewalld disabled?03:33
sdakeyes03:33
sdakeand selinux as well03:33
kfox1111iptables-service not installed?03:33
sdakewhich is my #1 and #2 questions to people03:34
sdakeyes iptables is disables03:34
sdakedisabled03:34
kfox1111what version of kubeadm?03:34
sdake[sdake@kolla kolla-bringup]$ kubeadm version03:35
sdakekubeadm version: version.Info{Major:"1", Minor:"6+", GitVersion:"v1.6.0-alpha.0.2074+a092d8e0f95f52", GitCommit:"a092d8e0f95f5200f7ae2cba45c75ab42da36537", GitTreeState:"clean", BuildDate:"2016-12-13T17:03:18Z", GoVersion:"go1.7.4", Compiler:"gc", Platform:"linux/amd64"}03:35
kfox1111hmm... lets see.03:35
sdake 1366  sudo kubeadm init --pod-network-cidr=10.1.0.0/16 --service-cidr=10.3.0.0/1603:36
sdake 1377  kubeadm aply -f canal2.yaml03:36
kfox1111anyhthing you missed from setup_kubernetes?03:36
sdake 1382  kubectl taint nodes --all dedicated-03:36
sdake 1383  ALLINONENODE=$(hostname)03:36
sdake 1384  kubectl label node $ALLINONENODE kolla_compute=true03:36
sdake 1385  kubectl label node $ALLINONENODE kolla_controller=true03:36
sdake 1386  sudo kolla-ansible genconfig03:36
kfox1111sed -i 's/10.96.0.10/172.16.128.10/g' /etc/systemd/system/kubelet.service.d/10-kubeadm.conf03:36
kfox1111 perhaps?03:36
sdakethere clearly has to be a better way to specify the dns server then hacking kubeadm.conf in systemd03:37
portdirectsdake: is that output copied from your history? looks like 1377 may be a typo?03:38
kfox1111I put in a feature request for that. not really my  problem to solve.03:38
sdakeportdirect right - that is the wrong line - it should be apply (later in my history I use apply)03:38
sdakekfox1111 ok - so what should it be set to in kubeadm.conf?03:38
kfox1111sdake: preferably, someone would take setup_kubernetes and make it generic enough for your document for those just wanting to crank out something quickly.03:39
kfox1111the service ip of the dns server.03:39
sdakekfox1111 how is that known ahead of time?03:39
portdirectsdake: 'kubectl create -f canal2.yaml' ?03:39
kfox1111take your service ip space and use the .10 address out of it.03:39
kfox1111kubeadm defaults to usiong .10 for kube-dns.03:40
sdakekfox1111 thats helpful - thanks :)03:40
sdakeportdirect i'll try that next go03:40
kfox1111it basically uses the start of the subnet + 10.03:41
kfox1111and kube-api gets .103:41
sdakekfox1111 intuitive ;)03:41
kfox1111no idea why.03:41
kfox1111probably leaving room for mutlple controllers or something.03:41
spsuryasup guys03:46
sdakekube-dns-2924299975-cxw89         3/4       Running   0          3m03:47
sdakestill 303:47
portdirectare there logs from the container thats not running?03:47
sdake[sdake@kolla ~]$ kubectl run -i -t $(uuidgen) --image=busybox --restart=Never03:47
sdakeWaiting for pod default/da72cb0f-0bac-4871-bb0f-0c268b171d53 to be running, status is Pending, pod ready: false03:47
sdakeWaiting for pod default/da72cb0f-0bac-4871-bb0f-0c268b171d53 to be running, status is Pending, pod ready: false03:47
*** dave-mccowan has joined #openstack-kolla03:49
portdirectsdake: if you can 'decribe' the dns deployment, you should be able to see which container it is thats failing03:49
portdirect'describe' whoops :)03:49
portdirectit would also be good to get the logs from that container using docker log on the host its trying to run on03:49
portdirectyou will then have a better idea of whats up with your deployment03:50
sdake  4m4m3{kubelet kolla}WarningFailedSyncError syncing pod, skipping: failed to "SetupNetwork" for "kube-dns-2924299975-cxw89_kube-system" with SetupNetworkError: "Failed to setup network for pod \"kube-dns-2924299975-cxw89_kube-system(34e95d2f-110d-11e7-865f-9890969934b8)\" using network plugins \"cni\": cni config unintialized; Skipping pod"03:50
portdirectit looks (from reading the scrollback) like to have an issue talking tot the api server from within a pod03:50
portdirectah! right03:51
sdakeworks with weave ;)03:51
sdakenot with calico03:51
portdirectcan you dump the output of 'kubectl --all-namespaces get all'03:51
openstackgerritshaofeng cheng proposed openstack/kolla-ansible master: Fix api_paste_config option  https://review.openstack.org/44985903:51
*** inc0 has joined #openstack-kolla03:52
sdakehttp://sprunge.us/BRIO03:52
*** dave-mccowan has quit IRC03:53
sdakebetting etcd needs to be 10.3.0.10003:53
sdakebut not really sure03:53
portdirectsdake: ok - cool, what pod and service cidr did you specify when you launched kubeadm?03:54
* portdirect is not that familiar with canal, just uses calico03:54
sdake 1410  sudo kubeadm init --pod-network-cidr=10.1.0.0/16 --service-cidr=10.3.0.0/1603:54
portdirectok - and where did you get the canal2.yaml? did you modify it?03:54
sdakeyes it was modified03:55
portdirectcool - any chance you could dump it as well03:55
kfox1111yeah. etcd probably shoudl be 10.3.0.100 and dns at 10.3.0.1003:55
openstackgerritshaofeng cheng proposed openstack/kolla-ansible master: Fix secure_proxy_ssl_header option  https://review.openstack.org/44985903:55
sdake19:02:51]  <sdake>1255  url="https://raw.githubusercontent.com/projectcalico/canal/7deb07cda04147ab49115f437151705c747d0374"03:55
sdake[19:02:51]  <sdake> 1256  url="$url/k8s-install/kubeadm/canal.yaml"03:55
sdake[19:02:51]  <sdake> 1257  wget $url03:55
portdirectsdake that uri doesnt work for me :(03:56
sdakeportdirect its a nested url - have to place in your env03:56
sdakeurl = '$URL"03:56
portdirectwhoops :)03:56
sdake1256 puts together an url from 125503:57
portdirecthow did you modify that file?03:58
sdake[sdake@kolla ~]$ diff canal.yaml canal2.yaml |  curl -F 'sprunge=<-' http://sprunge.us03:58
sdakehttp://sprunge.us/jMSc03:58
* sdake wtb a working pastebinit or fpaste03:58
sdakepretty sure i dont have vxlan in my network03:59
sdakenot sure if that matters03:59
portdirectso you understand canal arch?04:00
sdakenot at all04:00
portdirectits flanneld providing networking, with calico's policy controller for security04:00
sdakejust using "what works in the gate" to write some viable docs04:00
portdirectso you should have vxlan networks being created with that config04:00
sdakedoes underlying switch need to support vxlan?04:01
portdirectyes04:01
sdake(the hardware switch)04:01
* sdake groans04:01
sdakeis there a way to avoid that04:01
*** caoyuan has quit IRC04:01
portdirectyup04:01
portdirectyou can change it (2 sec)04:01
sdakethanks portdirect04:01
*** fooliouno has joined #openstack-kolla04:02
portdirectsdake: https://github.com/coreos/flannel#backends04:02
sdakeso udp than with a dummy switch?04:02
portdirectsdake: I'd really recommend calico for dev/testing - its been working really well for me, and works pretty much anywhere04:03
portdirectsdake: that may work04:03
portdirectsdake: if you just want an aio node, this is by far the simplest way to go: https://raw.githubusercontent.com/portdirect/dockerfiles/kubeadm/aio-deploy/kubeadm-aio/assets/usr/bin/kubeadm-aio04:04
sdakeportdirect i looked at that repo04:04
portdirectI'm running that on centos/fedora/ubuntu with the same version of kubeadm as you are using04:04
sdakeportdirect i really do want to undertand aio -> multinode04:04
eanylinsdake: I just tested what kfox1111 talked about earlier, it works fine04:04
portdirectsuper easy04:04
eanylinhttps://raw.githubusercontent.com/projectcalico/canal/7deb07cda04147ab49115f437151705c747d0374/k8s-install/kubeadm/canal.yaml04:04
eanylinthis config works04:04
portdirectsdake: i've scaled that out from single to 5 nodes and then back down again04:05
sdakeeanylin that works - if you ahve vxlan switches04:05
eanylinok04:05
sdakeeanylin do you have vxlan switches?04:05
eanylinno, I am just using a normal CentOS VM04:05
eanylinit looks similar to the end results that we saw earlier with weave-net04:06
sdakeeanylin that doesn't seem to work for me - dns doesn't come up04:06
eanylinthe kubernetes dashboard came up fine too04:06
portdirectsdake, all you need to do is run line 77 on any node you want to join the cluster https://www.irccloud.com/pastebin/pwSByriB/04:06
eanylinstrange though, you want to try and drain your set up like what we did earlier?04:07
eanylinbetter to start clean?04:07
sdakeeanylin i have done that04:07
eanylinok04:07
eanylinI did the following04:08
eanylinkubeadm init --skip-preflight-checks04:09
fooliounosdake: can you post the output of "ip a"04:09
eanylinkubectl apply -f canal.yaml04:09
*** kolla-slack has quit IRC04:14
srwilkersbye kolla-slack04:20
*** kolla-slack has joined #openstack-kolla04:21
sdake 4m1m179{kubelet kolla}WarningFailedSyncError syncing pod, skipping: failed to "SetupNetwork" for04:24
sdake"kube-dns-2924299975-6np0x_kube-system" with SetupNetworkError: "Failed to setup network for pod \"kube-dns-2924299975-6np0x_kube-system(4fc4218b-1112-11e7-ab3b-98909699304:24
sdake4b8)\" using network plugins \"cni\": cni config unintialized; Skipping pod"04:24
sdakethis reminds me of halycon errors :)04:24
sdakealthough now I understand it was kube-dns throwing the error04:25
sdakerather then "kubernetes"04:25
*** cuongnv has joined #openstack-kolla04:26
portdirectsdake: "cni config unintialized" should tell you a lot04:26
portdirectI'm not sure why you are having so much trouble with the network underlay :(04:27
portdirectit this a clean environement you are starting from?04:28
portdirectif you like i could have a look at the box?04:29
portdirector give you access to one of mine - and we could go through the process together?04:30
portdirectit would be great to get the entire kolla-k8s core team able to deploy k8s confidently04:30
sdakekube-dns-2924299975-366sm                   4/4       Running   0          1m04:31
portdirectw00t!04:31
sdakekubectl create -f http://docs.projectcalico.org/v2.0/getting-started/kubernetes/installation/hosted/calico.yaml04:31
sdakethats without flannel04:31
portdirectfrom the script i sent you?04:31
portdirectnice :)04:31
sdakeyup04:31
portdirectthree lines to joy :D04:31
sdake1043  sudo kubeadm init --pod-network-cidr=10.1.0.0/16 --service-cidr=10.3.0.0/1604:32
sdake 1044  kubectl taint nodes --all dedicated-04:32
sdake 1045  kubectl create -f http://docs.projectcalico.org/v2.0/getting-started/kubernetes/installation/hosted/calico.yaml04:32
sdake 1046  kubectl get pods -n kube-system04:32
sdake 1047  watch kubectl get pods -n kube-system04:32
sdakeis what I did04:32
sdakethe defaults for kubeadm break my networking04:32
portdirectthats fantastic dude - really happy for you04:33
srwilkers:)04:33
sdakeadly ping 8.8.8.8 from busybox doesn't work04:37
sdakesadly that is04:37
sdakeand tiller doesn't do its thing04:37
sdakeso - kubedns starts - but no networking04:37
portdirectsdake: sad panda04:38
sdakepretty much04:38
portdirectlets have a look at whats going on04:38
portdirectso - can you nslookup kubernetes from the busybox pod?04:39
sdakedns appears dead: / # nslookup kubernetes04:39
sdakeServer:    10.3.0.1004:39
portdirectok - can we flush out that node?04:39
sdakeserver is what i set in systemd hacking04:39
sdakeyou mean completely reload it?04:40
portdirectwell ideally yes - I should like that things been through the ringer04:40
portdirectbut I can send you a semi safe set of commands04:40
portdirecthttps://github.com/portdirect/dockerfiles/tree/kubeadm/aio-deploy/kubeadm-aio#cleanup-host04:41
portdirectsystemctl stop kubelet 1st04:41
portdirectthen those should clear out your shiz, I expect that your cni dir is full of stuff from failed deployments04:41
portdirect(its only really the last 2 you need to run from that link)04:42
*** kolla-slack has quit IRC04:42
sdakeportdirect here is my tidy script:04:46
sdake[sdake@kolla ~]$ more /home/sdake/tidy04:46
sdakedocker stop $@ `docker ps -a -q`04:46
sdakedocker rm $@ `docker ps -a -q`04:46
sdakedocker rmi $@ `docker images -a -q`04:46
eanylinsbezverk_: How do we deploy nova cell0 and nova placement? You mentioned about some scripts in the ironic gate job?04:46
portdirectsdake: you need to clean your *host* not just the docker images04:47
sdakei did run the secon dcommand portdirect04:47
portdirectsweet04:47
sdakeand also uninstalled the kube stuff04:47
sdakegoing to try out your aio container04:47
sdakesee if that implodes my system or not :)04:47
portdirectlol - its worked on a lot of other ones - lets see if it survives the sdake acid test :)04:48
portdirectsdake: you need to run this: https://github.com/portdirect/dockerfiles/tree/kubeadm/aio-deploy/kubeadm-aio#common-host-setup as otherwise secrets wont work04:49
sdakenslookup: can't resolve 'kubernetes'04:56
sdakeok - enough fu nfor one week - hae a nice weekend folks :)04:57
sdakeenjoy04:57
portdirectlets get this sorted next week dude - I really want all of us to be able to deploy k8s, as otherwise I'm a bit concerned about the ability of us to make and take technical direction and desisions04:58
portdirectcatch you soon man - we'll get there :)04:58
*** cuongnv has quit IRC04:59
*** srwilkers has quit IRC05:00
sdakeportdirect I can deploy kubernetes just fine on different hardware, just not my home lab05:00
sdakethe differnet hardware = real switches05:01
*** iceyao has joined #openstack-kolla05:01
sdakeportdirect agreed tho - its a problem -I've been hoping would have been solved.... 3 months ago05:01
portdirectI'm pretty snowed under (as always) but can make some time on tueday i think if you want to have a debugging session?05:02
sdakei have meetings all day tuesday from 7am until 6pm05:03
sdaketuesday funday for me05:03
portdirectsame :(05:03
portdirectbut free after then05:03
portdirectduring office hours is pretty much a no-go for me, just too much on atm to play with a bro's home lab :(05:04
portdirectanyway better go too - catch ya later05:04
*** jascott1 has quit IRC05:19
*** jascott1 has joined #openstack-kolla05:24
*** zhubingbing has joined #openstack-kolla05:32
*** hieulq_ has joined #openstack-kolla05:32
*** tovin07 has quit IRC05:33
*** hieulq_ has quit IRC05:34
*** hieulq_ has joined #openstack-kolla05:36
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974005:40
zhubingbingguys05:40
zhubingbinghi guys05:40
*** eanylin has quit IRC06:00
*** jascott__ has joined #openstack-kolla06:03
*** sayantani01 has joined #openstack-kolla06:04
*** jascott1_ has quit IRC06:04
*** caoyuan has joined #openstack-kolla06:05
*** yangyapeng has quit IRC06:05
*** caoyuan has quit IRC06:06
*** lucasxu has joined #openstack-kolla06:14
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Set use kuerbernetes version in gate  https://review.openstack.org/44987306:27
*** hieulq_ has quit IRC06:31
*** hieulq_ has joined #openstack-kolla06:43
*** lucasxu has quit IRC06:45
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Set use kuerbernetes version in gate  https://review.openstack.org/44987307:00
*** hieulq_ has quit IRC07:00
*** shashank_t_ has joined #openstack-kolla07:02
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974007:02
*** shashank_t_ has quit IRC07:06
*** yee37915 has joined #openstack-kolla07:18
*** yee379 has quit IRC07:19
openstackgerritjimmygc proposed openstack/kolla-ansible master: Add VMware vSphere support  https://review.openstack.org/44952907:37
*** vhosakot has quit IRC08:01
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974008:09
*** manheim has joined #openstack-kolla08:16
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974008:20
*** manheim has quit IRC08:21
openstackgerritjimmygc proposed openstack/kolla-ansible master: Add VMware vSphere support  https://review.openstack.org/44952908:27
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974008:32
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974008:36
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974008:40
*** shashank_t_ has joined #openstack-kolla08:50
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974008:54
*** shashank_t_ has quit IRC08:55
openstackgerritjimmygc proposed openstack/kolla-ansible master: Add VMware vSphere support  https://review.openstack.org/44952908:59
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974009:03
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974009:09
*** mgoddard has joined #openstack-kolla09:11
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974009:17
openstackgerritLingyong Xu proposed openstack/kolla-kubernetes master: Drop py34 target in tox.ini  https://review.openstack.org/44989809:20
openstackgerritjimmygc proposed openstack/kolla-ansible master: Add VMware vSphere support  https://review.openstack.org/44952909:22
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974009:30
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974009:40
openstackgerritjimmygc proposed openstack/kolla-ansible master: Add VMware vSphere support  https://review.openstack.org/44952909:45
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix gate Error helm plugin "template" exited with error  https://review.openstack.org/44990409:47
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974009:55
zhubingbingsup sdake09:56
*** klindgren_ has joined #openstack-kolla09:59
*** bmace has quit IRC10:01
*** klindgren has quit IRC10:02
*** bmace has joined #openstack-kolla10:02
*** jascott__ has quit IRC10:03
*** jascott1_ has joined #openstack-kolla10:04
*** kristian__ has joined #openstack-kolla10:04
*** jascott1_ has quit IRC10:09
openstackgerritjimmygc proposed openstack/kolla-ansible master: Add VMware vSphere support  https://review.openstack.org/44952910:11
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: test gate  https://review.openstack.org/44990610:12
*** manheim has joined #openstack-kolla10:13
*** mgoddard has quit IRC10:16
*** pbourke has quit IRC10:19
*** pbourke has joined #openstack-kolla10:21
openstackgerritzhubingbing proposed openstack/kolla-kubernetes master: Fix problem with kollakube res create configmap  https://review.openstack.org/43974010:28
*** manheim has quit IRC10:31
*** zhubingbing has quit IRC10:35
*** manheim has joined #openstack-kolla10:49
*** manheim has quit IRC10:58
*** kristian__ has quit IRC11:15
*** kristian__ has joined #openstack-kolla11:15
*** kristian__ has quit IRC11:20
*** kristian__ has joined #openstack-kolla11:21
*** yangyapeng has joined #openstack-kolla11:26
*** yangyapeng has quit IRC11:29
*** kristian__ has quit IRC11:42
*** caoyuan has joined #openstack-kolla11:55
*** caoyuan has quit IRC12:17
*** yangyapeng has joined #openstack-kolla12:32
*** Pavo has joined #openstack-kolla12:48
*** yangyapeng has quit IRC12:58
*** jtriley has quit IRC13:03
*** yangyapeng has joined #openstack-kolla13:04
*** caoyuan has joined #openstack-kolla13:04
*** zhurong has joined #openstack-kolla13:26
*** iceyao has quit IRC13:33
*** zhubingbing has joined #openstack-kolla13:41
mnaserhas anyone successfully ran kolla with gre tunnels instead of vxlan13:44
mnaserthe br-tun interfaces are not going up13:45
mnaseri dont see any of them being established13:45
*** zhubingbing_ has joined #openstack-kolla13:45
*** zhubingbing has quit IRC13:46
*** eanylin has joined #openstack-kolla13:58
*** zhurong has quit IRC14:19
*** eanylin has quit IRC14:25
*** eanylin has joined #openstack-kolla14:25
*** yangyapeng has quit IRC14:26
*** dave-mccowan has joined #openstack-kolla14:48
*** yangyapeng has joined #openstack-kolla14:53
*** dave-mccowan has quit IRC14:55
*** dave-mccowan has joined #openstack-kolla14:58
openstackgerritMerged openstack/kolla-kubernetes master: Pin Back Canal  https://review.openstack.org/44984314:58
*** dave-mcc_ has joined #openstack-kolla15:11
*** dave-mccowan has quit IRC15:14
*** iceyao has joined #openstack-kolla15:20
*** yangyapeng has quit IRC15:27
*** hrw has quit IRC15:34
*** hrw has joined #openstack-kolla15:36
openstackgerritSerguei Bezverkhi proposed openstack/kolla-kubernetes master: Fixing ironic deployment failure on Ubuntu  https://review.openstack.org/44980315:41
*** Pavo has quit IRC15:41
sdakemorning folks15:42
sdakesbezverk_ why no sbezverk?15:42
*** caoyuan has quit IRC15:43
*** kolla-slack has joined #openstack-kolla15:46
*** Pavo has joined #openstack-kolla15:52
*** sbezverk_ is now known as sbezverk15:57
*** dave-mccowan has joined #openstack-kolla16:04
openstackgerritMohammed Naser proposed openstack/kolla stable/newton: Fix neutron-vpnaas for redhat derived bases  https://review.openstack.org/44995216:05
*** schwicht has joined #openstack-kolla16:06
*** dave-mcc_ has quit IRC16:06
*** lamt has joined #openstack-kolla16:10
*** zhubingbing__ has joined #openstack-kolla16:14
*** zhubingbing_ has quit IRC16:17
*** dave-mccowan has quit IRC16:19
spsuryamorning sdake16:20
*** schwicht has quit IRC16:23
*** eaguilar has joined #openstack-kolla16:24
mnaseris there any reason why a chown command would fail in kolla16:28
mnasertrying to debug vpnaas16:28
*** schwicht has joined #openstack-kolla16:28
mnaserProcessExecutionError: Exit code: 1; Stdin: ; Stdout: ; Stderr: chown: changing ownership of '/var/lib/neutron/ipsec/94df0215-75d1-458b-a8d3-8c9ae689a520/etc/ipsec.secrets': Operation not permitted16:28
*** iceyao has quit IRC16:30
mnaser2017-03-25 16:30:18.534 7 DEBUG neutron.agent.linux.utils [-] Running command: ['chown', '--from=998', 'root:root', '/var/lib/neutron/ipsec/94df0215-75d1-458b-a8d3-8c9ae689a520/etc/ipsec.secrets'] create_process /usr/lib/python2.7/site-packages/neutron/agent/linux/utils.py:8916:31
mnaserthis is the failing command16:31
mnaserinterestingly enough if i run it manually, it works16:31
*** manheim has joined #openstack-kolla16:40
openstackgerritSerguei Bezverkhi proposed openstack/kolla-kubernetes master: Fixing ironic deployment failure on Ubuntu  https://review.openstack.org/44980316:47
*** eaguilar has quit IRC16:48
*** jascott1_ has joined #openstack-kolla17:00
*** lamt has quit IRC17:03
*** jascott1_ has quit IRC17:05
*** haplo37 has quit IRC17:08
*** haplo37 has joined #openstack-kolla17:17
*** dave-mccowan has joined #openstack-kolla17:24
sdakesup peeps17:26
sdakeok - the instructions are shaping up17:26
sdakealthough still incomplete17:26
*** Pavo has quit IRC17:28
sdakesbezverk any idea what this should be set to:          dns_name: "192.168.1.101"17:28
sdakesbezverk and this:        external_vip: "192.168.1.101"17:28
*** manheim has quit IRC17:29
*** Pavo has joined #openstack-kolla17:52
*** lamt has joined #openstack-kolla18:00
openstackgerritSerguei Bezverkhi proposed openstack/kolla-kubernetes master: Fixing ironic deployment failure on Ubuntu  https://review.openstack.org/44980318:00
sbezverksdake: are you kidding me?? yesterday you asked the same question, I answered and now we are bakc to square 1?? Please read the scroll back from yesterday18:02
sdakei have a cloud yaml18:02
sdakeyou said to set them18:02
sdakeyou didn't say what they do18:02
sdakei need to know what they do to set them properlly18:02
sdakesbezverk i have set dns_name to my cluster ip and external_vip to my cluster ip (my "eth0" on my cluster is 192.168.1.101"18:04
sdakeI am not convinced this is correct18:04
sdakesbezverk I have almost the entire workflow documented, atleast in my mind, minus these two values plus whatever charts are needed to get cells0 and apiplacement going18:04
sdakei cna sort out cells0 and api placement on my own18:04
sdaketrust me when I say that nobody else in the community knows what to set these values to either - had 10-15 people on a  call yesterday - none of them know what to set them too either18:05
sdakesbezverk in other words, it isn't documented anywhere - I am documenting it so this question isn't asked over and over and over18:05
*** dave-mccowan has quit IRC18:08
*** Pavo has quit IRC18:08
*** lamt has quit IRC18:11
*** kolla-slack has quit IRC18:18
*** zhubingbing__ has quit IRC18:20
*** Pavo has joined #openstack-kolla18:26
*** Pavo has quit IRC18:30
*** lamt has joined #openstack-kolla18:45
*** schwicht has quit IRC19:06
thomas_oneillhey how did some of you guys get your contributions to show up against your github accounts in the github commit log?19:13
*** lamt has quit IRC19:21
*** jascott1_ has joined #openstack-kolla19:28
portdirectHey up kolla peeps o/19:38
eanylinsbezverk_: I looked at the shell scripts in the gate_common.sh and updated the placement_api config, deployed the nova-placement-deployment helm chart and I can see that the nova compute stopped crashing after that19:47
eanylinI can see that the nova scheduler is not able to find a valid host to spin the cirros VM19:47
eanylinbut I did deploy the microservice for cell019:47
eanylinthe db for nova cell0 got created but its empty19:48
eanylinis this the reason why its failing?19:48
portdirectthomas_oneill: you just need to have the same details for not github and openstack's gerrit. No magic19:56
portdirect(Extra 'not' in that... Weird)19:56
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: ironic-pxe: handle non-x86 architectures  https://review.openstack.org/43481720:01
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: debian: enable all images enabled for Ubuntu  https://review.openstack.org/43278720:01
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: Add support for non-x86 architectures (aarch64, ppc64le)  https://review.openstack.org/43094020:01
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: openstack-base/kolla-toolbox: use mariadb-devel for CentOS and !x86-64  https://review.openstack.org/44483220:01
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: nova-libvirt: handle ppc64le  https://review.openstack.org/43481020:01
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: ceph: move ceph-fuse package to cephfs-fuse image  https://review.openstack.org/44063420:01
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: kubernetes: disable for architectures other than x86-64  https://review.openstack.org/44563820:01
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: nova-compute: handle rtslib(-fb) for debian-binary builds too  https://review.openstack.org/43594120:01
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: debian: move to stretch  https://review.openstack.org/43445320:01
openstackgerritMarcin Juszkiewicz proposed openstack/kolla master: openstack-base: Percona-Server is x86-64 only  https://review.openstack.org/44996520:01
*** lamt has joined #openstack-kolla20:02
*** jtriley has joined #openstack-kolla20:06
*** manheim has joined #openstack-kolla20:21
*** lamt has quit IRC20:23
*** manheim has quit IRC21:02
*** jtriley has quit IRC21:09
*** eaguilar has joined #openstack-kolla21:21
*** eaguilar has quit IRC21:37
*** lamt has joined #openstack-kolla21:43
*** lamt has quit IRC22:17
sdakeeanylin would you mind adding your steps to the review here: https://review.openstack.org/#/c/447356/ (for cells0 and placement api)22:19
sdakeeanylin line 15522:20
sdakesup portdirect22:20
sdakesbezverk note i found the references to the data i was asking for in the scrollback - thanks22:22
sdakesbezverk they are in the review now22:23
*** sean-k-mooney has quit IRC22:23
sdakesbezverk if you have a chance you might have a look at it22:23
*** sean-k-mooney has joined #openstack-kolla22:23
sdakeeanylin i think it is possible a configmap is missing  for cell0 and placement api - although I am uncertain22:23
sdakeeanylin i'd dig into that myself but going out22:23
eanylinsdake: Ok, I am trying same steps on another laptop, I am not sure if those are the correct steps though, since I wasnt able to get the Cirros up22:25
sdakeeanylin if which are the correct steps22:25
sdakeeanylin the ones you havve?22:26
sdakeeanylin if you ahve steps to contribute, it may help others make forward progress - you can always add a preface that says "not sure if this is right, but this got me further"22:27
eanylinsure22:28
eanylinok, I will do it after I get my dinner22:28
sdakeeanylin thanks fine sir :)22:28
eanylin:)22:28
sdakei'll give em a runthrough with weae22:28
sdakesince that works22:28
sdake(for me)22:28
eanylinyeah, so I tested with the master.sh script under kube-deploy22:29
eanylinseems like that one will work too, with flannel22:29
sdakewhich is master.sh?22:30
eanylinbut that one doesnt use kubeadm though22:30
eanylinits inside the official document22:30
eanylinhttps://docs.openstack.org/developer/kolla-kubernetes/kubernetes-setup.html#single-node-kubernetes-setup22:30
sdakecool - i wasn't sure which script you were talking about22:32
sdakethat script is from kube-deploy22:32
eanylinyeah22:32
sdakeeanylin we have many scripts ;)22:32
sdakeand many are third party22:32
eanylinI know, thats why its confusing after a while ;-)22:32
sdakeya I'd like to unify that into one doc and guide so people can understand how deployment works22:33
eanylinI know this script works pretty well, at least for AIO22:33
sdakecool22:33
eanylinagree22:33
*** eaguilar has joined #openstack-kolla22:55
openstackgerritSerguei Bezverkhi proposed openstack/kolla-kubernetes master: Fixing ironic deployment failure on Ubuntu  https://review.openstack.org/44980323:14
*** eaguilar_ has joined #openstack-kolla23:17
*** eaguilar has quit IRC23:18
*** schwicht has joined #openstack-kolla23:20
*** eaguilar_ has quit IRC23:46
*** Pavo has joined #openstack-kolla23:46
*** lamt has joined #openstack-kolla23:49
*** eaguilar has joined #openstack-kolla23:50

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!