Tuesday, 2016-09-20

*** itsuugo has quit IRC00:00
*** itsuugo has joined #openstack-kuryr00:01
*** diga has joined #openstack-kuryr00:01
*** itsuugo has quit IRC00:06
*** itsuugo has joined #openstack-kuryr00:07
*** itsuugo has quit IRC00:14
*** itsuugo has joined #openstack-kuryr00:15
openstackgerritOpenStack Proposal Bot proposed openstack/kuryr-libnetwork: Updated from global requirements  https://review.openstack.org/35197600:26
*** limao has joined #openstack-kuryr00:29
*** limao has quit IRC00:29
*** limao has joined #openstack-kuryr00:29
*** huikang has joined #openstack-kuryr00:34
*** itsuugo has quit IRC00:49
*** itsuugo has joined #openstack-kuryr00:50
*** banix has joined #openstack-kuryr00:56
*** itsuugo has quit IRC01:02
*** itsuugo has joined #openstack-kuryr01:03
*** banix has quit IRC01:07
*** banix has joined #openstack-kuryr01:07
*** itsuugo has quit IRC01:13
*** itsuugo has joined #openstack-kuryr01:14
*** itsuugo has quit IRC01:19
*** itsuugo has joined #openstack-kuryr01:20
openstackgerritMohammad Banikazemi proposed openstack/kuryr-libnetwork: - Adding the limitation for Docker 1.12 - Adding config options for using with Keystone version 2.0  https://review.openstack.org/37278301:26
openstackgerritMohammad Banikazemi proposed openstack/kuryr-libnetwork: - Adding the limitation for Docker 1.12 - Adding config options for using with Keystone version 2.0  https://review.openstack.org/37278301:28
*** itsuugo has quit IRC01:33
*** itsuugo has joined #openstack-kuryr01:34
*** huikang has quit IRC01:35
*** huikang has joined #openstack-kuryr01:35
*** huikang has quit IRC01:39
*** diga has quit IRC01:40
*** itsuugo has quit IRC01:42
*** salv-orl_ has joined #openstack-kuryr01:42
*** itsuugo has joined #openstack-kuryr01:43
*** salv-orlando has quit IRC01:45
*** itsuugo has quit IRC01:48
*** itsuugo has joined #openstack-kuryr01:48
*** itsuugo has quit IRC01:54
*** itsuugo has joined #openstack-kuryr01:55
*** banix has quit IRC01:58
*** banix has joined #openstack-kuryr02:04
*** itsuugo has quit IRC02:05
*** itsuugo has joined #openstack-kuryr02:06
*** sdake has quit IRC02:06
*** sdake has joined #openstack-kuryr02:06
*** itsuugo has quit IRC02:12
*** itsuugo has joined #openstack-kuryr02:13
*** itsuugo has quit IRC02:18
*** sdake has quit IRC02:18
*** itsuugo has joined #openstack-kuryr02:20
*** itsuugo has quit IRC02:24
*** itsuugo has joined #openstack-kuryr02:25
*** itsuugo has quit IRC02:38
*** itsuugo has joined #openstack-kuryr02:41
*** huikang has joined #openstack-kuryr02:41
openstackgerritMohammad Banikazemi proposed openstack/kuryr-libnetwork: - Adding the limitation for Docker 1.12 - Adding config options for using with Keystone version 2.0 - Adding some of the features  https://review.openstack.org/37278302:47
*** limao has quit IRC02:49
*** limao has joined #openstack-kuryr02:49
openstackgerritMohammad Banikazemi proposed openstack/kuryr-libnetwork: - Adding the limitation for Docker 1.12 - Adding config options for using with Keystone version 2.0 - Adding some of the features  https://review.openstack.org/37278302:51
*** itsuugo has quit IRC02:52
*** itsuugo has joined #openstack-kuryr02:53
*** huikang has quit IRC02:57
*** hongbin has joined #openstack-kuryr02:59
*** janonymous has joined #openstack-kuryr03:05
*** itsuugo has quit IRC03:07
*** limao_ has joined #openstack-kuryr03:08
*** huikang has joined #openstack-kuryr03:08
*** itsuugo has joined #openstack-kuryr03:09
*** limao has quit IRC03:11
*** banix has quit IRC03:22
*** yamamot__ has joined #openstack-kuryr03:30
*** tonanhngo has joined #openstack-kuryr03:35
*** tonanhngo has quit IRC03:39
*** tonanhngo has joined #openstack-kuryr03:45
*** hongbin has quit IRC04:01
*** itsuugo has quit IRC04:09
*** itsuugo has joined #openstack-kuryr04:11
*** itsuugo has quit IRC04:19
*** itsuugo has joined #openstack-kuryr04:20
*** itsuugo has quit IRC04:25
*** itsuugo has joined #openstack-kuryr04:27
*** itsuugo has quit IRC04:32
*** itsuugo has joined #openstack-kuryr04:33
*** itsuugo has quit IRC04:38
*** itsuugo has joined #openstack-kuryr04:39
*** yamamot__ has quit IRC04:41
*** diga has joined #openstack-kuryr04:45
*** sdake has joined #openstack-kuryr04:46
*** yamamot__ has joined #openstack-kuryr04:47
*** tonanhngo has quit IRC04:50
*** tonanhngo has joined #openstack-kuryr04:51
tonanhngovikasc: ping04:54
vikasctonanhngo, pong04:54
tonanhngoHi Vikas, I would like to get some more details about the new kuryr driver  in release 1 and 204:55
tonanhngoto make sure my understanding is correct04:55
*** huikang has quit IRC04:57
tonanhngoSo to integrate with a Swarm cluster running as VM, where we would have containers in the VM04:57
tonanhngowe would need the libnetwork driver in release 1, and also the new REST/RPC driver coming in release 2, as well as support for containers in VM04:58
tonanhngoIs this correct?04:58
* vikasc reading back04:59
vikasctonanhngo, yes.. all correct in my understanding05:03
*** itsuugo has quit IRC05:03
tonanhngoGreat, then if we choose the RPC driver, it will run as a service on a controller host, like the normal Neutron service?05:05
*** itsuugo has joined #openstack-kuryr05:05
vikasctonanhngo, in libnetwork case on controllerhost and in k8s deployment on master vm05:14
*** itsuugo has quit IRC05:14
*** itsuugo has joined #openstack-kuryr05:15
tonanhngoah ok, I didn't know that.  So in the VM's of the Swarm cluster, what would we need to run?05:15
vikasctonanhngo, to be honest, i am not familiar with 1.12 swarm integration in docker05:18
*** itsuugo has quit IRC05:20
*** itsuugo has joined #openstack-kuryr05:22
*** yamamot__ has quit IRC05:22
vikasctonanhngo, on nodes where containers would be launched, a libnetwork driver would run. This will be rpc_client for rpc_server running on controller/master_vm05:25
tonanhngovikasc:  So we won't need to run the openvswitch agent and Neutron L2 agent on the VM where the containers would be launched?05:27
vikasctonanhngo, neutron side apis will be invoked by rpc_server and after getting response details rpc_client/libnetwork_driver would do expected work inside vm. This 'expected_work' can be ip/macvlan based approach or vlan-aware-vm approach05:27
vikasctonanhngo, nope05:28
tonanhngovikasc:  Great, that helps solve our problem of having to store all the service credentials for Neutron on the VM.05:29
vikasctonanhngo, yeah to avoid saving credentials we thought of introducing rpc05:30
vikasctonanhngo, though still we have to think on securing rpc communication05:30
tonanhngovikasc:  right, that's what I was going to ask next05:31
vikasctonanhngo, first we are targeting to have functionality working05:31
tonanhngovikasc:  Can you use a trust derived from the user credential?05:32
vikasctonanhngo, once we are closer to functionality , will take on securty concerns05:32
*** limao_ has quit IRC05:33
tonanhngovikasc:  make sense05:33
*** limao has joined #openstack-kuryr05:33
vikasctonanhngo, TBH to comment anything on security, i will have to study a bit. I know magnum team did a good R&D in this area05:33
vikasctonanhngo, can you please elborate a little to me this user trust based approach?05:34
tonanhngovikasc:  Yes, this has been a major focus, and it touches on several different areas05:34
vikasctonanhngo, or a doc link05:35
vikasctonanhngo, that i can study offline05:35
tonanhngovikasc: Keystone has a feature called "trust", which is basically a service account to do work for a user05:36
tonanhngovikasc: this accounts inherit a subset of priviledges from the user account, ideally just enough to do whatever work that needs to be done05:36
tonanhngovikasc:  The idea is that if the trust account is stolen, then the damage would be limited05:37
vikasctonanhngo, for example, what damage can be avoided using trust?05:38
vikasctonanhngo, in case trust is misused05:38
tonanhngovikasc:  I am not an expert on this either :) , but say if the trust only has the privilege to create cinder block, then it can't be use to do other things like creating VM's05:40
tonanhngovikasc:  some high level pointer:  https://wiki.openstack.org/wiki/Keystone/Trusts05:42
tonanhngovikasc:  but anyway, I don't know if this will work for the rpc driver.  It's just something we have used to solve similar problems05:42
*** vikasc has quit IRC05:43
tonanhngovikasc:  What we want to avoid is storing a service credential in the VM that the user can access and compromise the service05:44
*** itsuugo has quit IRC05:48
*** itsuugo has joined #openstack-kuryr05:49
*** itsuugo has quit IRC05:54
*** vikasc has joined #openstack-kuryr05:54
*** itsuugo has joined #openstack-kuryr05:55
*** itsuugo has quit IRC06:02
*** itsuugo has joined #openstack-kuryr06:03
*** vikasc has quit IRC06:04
*** diga has quit IRC06:06
*** yamamot__ has joined #openstack-kuryr06:11
*** itsuugo has quit IRC06:11
*** itsuugo has joined #openstack-kuryr06:12
*** oanson has joined #openstack-kuryr06:15
*** itsuugo has quit IRC06:17
*** itsuugo has joined #openstack-kuryr06:19
*** vikasc has joined #openstack-kuryr06:19
*** digambar_patil has joined #openstack-kuryr06:19
*** irenab has joined #openstack-kuryr06:20
*** irenab_ has joined #openstack-kuryr06:22
*** irenab has quit IRC06:24
*** irenab_ is now known as irenab06:24
*** irenab has quit IRC06:29
*** irenab has joined #openstack-kuryr06:29
*** itsuugo has quit IRC06:31
*** digambar_patil has quit IRC06:32
*** diga has joined #openstack-kuryr06:32
*** itsuugo has joined #openstack-kuryr06:32
*** tonanhngo has quit IRC06:39
*** tonanhngo has joined #openstack-kuryr06:39
*** tonanhngo has quit IRC06:43
*** itsuugo has quit IRC06:44
*** itsuugo has joined #openstack-kuryr06:45
*** itsuugo has quit IRC06:50
*** itsuugo has joined #openstack-kuryr06:50
*** itsuugo has quit IRC06:59
*** itsuugo has joined #openstack-kuryr07:00
*** itsuugo has quit IRC07:11
*** itsuugo has joined #openstack-kuryr07:12
*** itsuugo has quit IRC07:24
*** itsuugo has joined #openstack-kuryr07:25
*** itsuugo has quit IRC07:30
apuimedoirenab: vikasc: please, merge https://review.openstack.org/#/c/372764/07:30
apuimedoirenab: I added the bug link07:31
*** itsuugo has joined #openstack-kuryr07:31
*** salv-orlando has joined #openstack-kuryr07:42
*** salv-orl_ has quit IRC07:44
openstackgerritMerged openstack/kuryr-libnetwork: - Adding the limitation for Docker 1.12 - Adding config options for using with Keystone version 2.0 - Adding some of the features  https://review.openstack.org/37278307:48
*** itsuugo has quit IRC07:54
*** itsuugo has joined #openstack-kuryr07:55
*** itsuugo has quit IRC08:02
openstackgerritjanonymous proposed openstack/kuryr: Links do not point to any document  https://review.openstack.org/37301408:02
*** itsuugo has joined #openstack-kuryr08:03
*** limao has quit IRC08:11
*** pmannidi has quit IRC08:15
*** devvesa has joined #openstack-kuryr08:20
openstackgerritMerged openstack/kuryr-libnetwork: devstack: use admin role  https://review.openstack.org/37276408:36
*** itsuugo has quit IRC08:36
*** itsuugo has joined #openstack-kuryr08:39
irenabapuimedo:08:47
apuimedoirenab: it's already merged ;-)08:48
irenabI added link to trello board at kuryr wiki page08:48
apuimedoirenab: good idea!08:48
apuimedothanks!08:48
irenabnp08:48
*** lezbar has joined #openstack-kuryr09:01
openstackgerritAntoni Segura Puimedon proposed openstack/kuryr-kubernetes: devstack: First version of kuryr-kubernetes plugin  https://review.openstack.org/37143209:03
*** __vaishali__ has joined #openstack-kuryr09:09
*** itsuugo has quit IRC09:10
*** itsuugo has joined #openstack-kuryr09:11
*** limao has joined #openstack-kuryr09:14
openstackgerritDongcan Ye proposed openstack/kuryr-libnetwork: Fix wrong package install  https://review.openstack.org/37209609:14
*** itsuugo has quit IRC09:24
*** itsuugo has joined #openstack-kuryr09:26
*** prithiv has joined #openstack-kuryr09:33
openstackgerritvikas choudhary proposed openstack/kuryr: Add neutron client generic rest driver  https://review.openstack.org/34262409:39
*** itsuugo has quit IRC09:41
*** itsuugo has joined #openstack-kuryr09:42
openstackgerritvikas choudhary proposed openstack/kuryr: Nested-Containers: Add vlan management apis  https://review.openstack.org/36199309:44
openstackgerritDongcan Ye proposed openstack/kuryr-libnetwork: Implement delete endpoint  https://review.openstack.org/37295509:45
*** oanson has quit IRC09:48
*** oanson has joined #openstack-kuryr09:48
*** prithiv has quit IRC09:50
*** prithiv has joined #openstack-kuryr09:58
*** prithiv has quit IRC09:58
openstackgerritvikas choudhary proposed openstack/kuryr: Add 'deployment_type' configuration parameter  https://review.openstack.org/36202309:59
*** itsuugo has quit IRC10:00
*** itsuugo has joined #openstack-kuryr10:01
*** limao has quit IRC10:09
vikascirenab, apuimedo https://review.openstack.org/#/c/342624/10:15
*** yamamot__ has quit IRC10:22
*** __vaishali__ has quit IRC10:38
*** __vaishali__ has joined #openstack-kuryr10:42
*** tonanhngo has joined #openstack-kuryr10:47
*** itsuugo has quit IRC10:47
*** itsuugo has joined #openstack-kuryr10:48
*** tonanhngo has quit IRC10:51
*** itsuugo has quit IRC10:58
*** itsuugo has joined #openstack-kuryr11:01
*** banix has joined #openstack-kuryr11:03
*** __vaishali__ has quit IRC11:10
*** __vaishali__ has joined #openstack-kuryr11:13
*** banix has quit IRC11:15
*** yamamoto has joined #openstack-kuryr11:18
*** itsuugo has quit IRC11:18
*** itsuugo has joined #openstack-kuryr11:19
*** yamamoto has quit IRC11:24
*** yamamoto has joined #openstack-kuryr11:25
*** yamamoto has quit IRC11:26
*** itsuugo has quit IRC11:37
*** itsuugo has joined #openstack-kuryr11:38
*** devvesa has quit IRC11:42
*** __vaishali__ has quit IRC11:47
*** itsuugo has quit IRC11:54
*** limao has joined #openstack-kuryr11:55
*** itsuugo has joined #openstack-kuryr11:56
*** yamamoto has joined #openstack-kuryr12:05
*** itsuugo has quit IRC12:06
*** itsuugo has joined #openstack-kuryr12:07
*** vaishali has joined #openstack-kuryr12:08
*** diga has quit IRC12:28
*** sdake has quit IRC13:17
*** limao_ has joined #openstack-kuryr13:18
*** limao has quit IRC13:21
openstackgerritAntoni Segura Puimedon proposed openstack/kuryr-kubernetes: devstack: First version of kuryr-kubernetes plugin  https://review.openstack.org/37143213:29
openstackgerritAntoni Segura Puimedon proposed openstack/kuryr-libnetwork: Using the credentials from the config file.  https://review.openstack.org/37266813:32
*** limao_ has quit IRC13:36
*** limao has joined #openstack-kuryr13:36
*** vaishali has quit IRC13:37
*** banix has joined #openstack-kuryr13:39
*** salv-orl_ has joined #openstack-kuryr13:42
*** salv-orlando has quit IRC13:45
*** yamamoto has quit IRC13:46
*** yamamoto has joined #openstack-kuryr13:47
*** tonanhngo has joined #openstack-kuryr13:48
*** sdake has joined #openstack-kuryr13:49
*** tonanhngo has quit IRC13:53
*** limao has quit IRC13:57
openstackgerritAntoni Segura Puimedon proposed openstack/kuryr-kubernetes: devstack: First version of kuryr-kubernetes plugin  https://review.openstack.org/37143213:57
*** limao has joined #openstack-kuryr13:58
*** tonanhngo has joined #openstack-kuryr14:01
*** yamamoto has quit IRC14:03
*** tonanhngo has quit IRC14:06
*** sdake_ has joined #openstack-kuryr14:09
*** sdake has quit IRC14:11
*** limao_ has joined #openstack-kuryr14:18
*** hongbin has joined #openstack-kuryr14:19
*** limao__ has joined #openstack-kuryr14:20
*** tonanhngo has joined #openstack-kuryr14:20
openstackgerritMerged openstack/kuryr-libnetwork: Using the credentials from the config file.  https://review.openstack.org/37266814:21
*** limao has quit IRC14:22
*** limao_ has quit IRC14:23
*** yamamoto has joined #openstack-kuryr14:30
*** banix has quit IRC14:30
*** banix has joined #openstack-kuryr14:33
*** devvesa has joined #openstack-kuryr14:36
openstackgerritDongcan Ye proposed openstack/kuryr-libnetwork: Fix wrong package install  https://review.openstack.org/37209614:40
*** limao__ has quit IRC14:42
*** limao has joined #openstack-kuryr14:44
*** pablochacin has joined #openstack-kuryr14:46
*** limao has quit IRC15:01
*** limao has joined #openstack-kuryr15:01
*** banix has quit IRC15:02
*** limao has quit IRC15:02
*** limao has joined #openstack-kuryr15:03
*** oanson has quit IRC15:20
*** tonanhngo has quit IRC15:23
*** banix has joined #openstack-kuryr15:41
*** tonanhngo has joined #openstack-kuryr15:44
*** yamamoto has quit IRC15:59
*** yamamoto has joined #openstack-kuryr15:59
openstackgerritDongcan Ye proposed openstack/kuryr-libnetwork: Implement delete endpoint  https://review.openstack.org/37295516:13
*** devvesa has quit IRC16:17
*** yamamoto has quit IRC16:30
*** xleon has joined #openstack-kuryr16:35
*** xleon has quit IRC16:38
*** xleon has joined #openstack-kuryr16:38
*** pablochacin has quit IRC16:39
*** xleon has left #openstack-kuryr16:40
*** banix has quit IRC16:59
*** tonanhngo has quit IRC17:01
*** itsuugo has quit IRC17:02
*** itsuugo has joined #openstack-kuryr17:03
*** yamamoto has joined #openstack-kuryr17:06
*** yamamoto has quit IRC17:06
*** tonanhngo has joined #openstack-kuryr17:28
*** itsuugo has quit IRC17:36
*** banix has joined #openstack-kuryr17:38
*** itsuugo has joined #openstack-kuryr17:38
*** itsuugo has quit IRC17:45
*** itsuugo has joined #openstack-kuryr17:46
*** tonanhngo has quit IRC17:47
*** banix has quit IRC17:59
*** tonanhngo has joined #openstack-kuryr18:00
*** banix has joined #openstack-kuryr18:03
*** yamamoto has joined #openstack-kuryr18:07
*** yamamoto has quit IRC18:16
*** itsuugo has quit IRC18:49
*** sdake_ is now known as sdake18:50
*** itsuugo has joined #openstack-kuryr18:51
*** neiljerram has quit IRC19:11
*** itsuugo has quit IRC19:12
*** huikang has joined #openstack-kuryr19:12
*** itsuugo has joined #openstack-kuryr19:14
*** neiljerram has joined #openstack-kuryr19:18
*** itsuugo has quit IRC19:28
*** itsuugo has joined #openstack-kuryr19:29
*** itsuugo has quit IRC19:36
*** itsuugo has joined #openstack-kuryr19:37
*** tonanhngo has quit IRC19:42
*** salv-orlando has joined #openstack-kuryr19:42
*** itsuugo has quit IRC19:44
*** salv-orl_ has quit IRC19:45
*** itsuugo has joined #openstack-kuryr19:45
*** tonanhngo has joined #openstack-kuryr19:48
*** huikang has quit IRC19:59
*** huikang has joined #openstack-kuryr20:00
*** itsuugo has quit IRC20:01
*** itsuugo has joined #openstack-kuryr20:03
*** huikang has quit IRC20:05
*** huikang has joined #openstack-kuryr20:07
*** huikang has quit IRC20:17
*** huikang has joined #openstack-kuryr20:17
*** huikang has quit IRC20:22
*** huikang has joined #openstack-kuryr20:44
*** huikang has quit IRC20:49
openstackgerritAntoni Segura Puimedon proposed openstack/kuryr-kubernetes: devstack: First version of kuryr-kubernetes plugin  https://review.openstack.org/37143221:24
*** salv-orlando has quit IRC21:26
*** salv-orlando has joined #openstack-kuryr21:26
*** huikang has joined #openstack-kuryr21:40
*** huikang has quit IRC22:05
*** huikang has joined #openstack-kuryr22:05
*** banix has quit IRC22:07
*** huikang has quit IRC22:10
*** itsuugo has quit IRC22:20
*** itsuugo has joined #openstack-kuryr22:21
*** tonanhngo has quit IRC22:28
*** itsuugo has quit IRC22:49
openstackgerritMerged openstack/kuryr-libnetwork: Fix wrong package install  https://review.openstack.org/37209622:50
*** itsuugo has joined #openstack-kuryr22:50
*** limao has quit IRC23:09
*** pmannidi has joined #openstack-kuryr23:09
*** hongbin has quit IRC23:11
*** banix has joined #openstack-kuryr23:15
*** banix has quit IRC23:17
*** itsuugo has quit IRC23:18
*** banix has joined #openstack-kuryr23:18
*** itsuugo has joined #openstack-kuryr23:18
*** huikang has joined #openstack-kuryr23:23
*** itsuugo has quit IRC23:23
*** itsuugo has joined #openstack-kuryr23:24
*** banix has quit IRC23:32
*** tonanhngo has joined #openstack-kuryr23:52
*** tonanhngo has quit IRC23:56
*** itsuugo has quit IRC23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!