| *** hongbin has joined #openstack-kuryr | 00:24 | |
| *** caowei has joined #openstack-kuryr | 01:23 | |
| *** salv-orl_ has joined #openstack-kuryr | 01:24 | |
| *** salv-orlando has quit IRC | 01:26 | |
| *** kiennt26 has joined #openstack-kuryr | 02:17 | |
| *** janki has joined #openstack-kuryr | 02:29 | |
| *** kiennt26 has quit IRC | 02:54 | |
| *** janki has quit IRC | 02:57 | |
| *** janki has joined #openstack-kuryr | 03:22 | |
| *** janki has quit IRC | 03:23 | |
| *** janki has joined #openstack-kuryr | 03:23 | |
| *** yamamoto has joined #openstack-kuryr | 03:26 | |
| *** maysamacedos has quit IRC | 03:38 | |
| *** caowei has quit IRC | 03:41 | |
| *** hongbin has quit IRC | 03:49 | |
| *** caowei has joined #openstack-kuryr | 04:15 | |
| *** janonymous has joined #openstack-kuryr | 04:28 | |
| *** jchhatbar has joined #openstack-kuryr | 04:51 | |
| *** jchhatbar has quit IRC | 04:51 | |
| *** jchhatbar has joined #openstack-kuryr | 04:52 | |
| *** janki has quit IRC | 04:54 | |
| *** jchhatbar has quit IRC | 05:43 | |
| *** jchhatbar has joined #openstack-kuryr | 05:43 | |
| *** yamamoto_ has joined #openstack-kuryr | 06:18 | |
| *** yamamoto has quit IRC | 06:21 | |
| *** yamamoto has joined #openstack-kuryr | 06:29 | |
| *** yamamoto_ has quit IRC | 06:32 | |
| *** gcheresh has joined #openstack-kuryr | 06:32 | |
| *** maysamacedos has joined #openstack-kuryr | 06:37 | |
| *** gcheresh_ has joined #openstack-kuryr | 06:38 | |
| *** gcheresh has quit IRC | 06:38 | |
| *** maysamacedos has quit IRC | 06:39 | |
| *** jchhatba_ has joined #openstack-kuryr | 07:12 | |
| *** jchhatba_ has quit IRC | 07:15 | |
| *** jchhatbar has quit IRC | 07:15 | |
| *** jchhatba_ has joined #openstack-kuryr | 07:15 | |
| *** jchhatba_ has quit IRC | 07:17 | |
| openstackgerrit | Merged openstack/kuryr-tempest-plugin master: Testing service creation and connectivity https://review.openstack.org/539485 | 07:18 |
|---|---|---|
| *** irenab has quit IRC | 08:47 | |
| *** irenab has joined #openstack-kuryr | 08:48 | |
| *** lihi has quit IRC | 08:49 | |
| *** lihi has joined #openstack-kuryr | 08:49 | |
| *** yamamoto has quit IRC | 08:51 | |
| *** yamamoto has joined #openstack-kuryr | 09:00 | |
| *** dangtrinhnt has quit IRC | 09:33 | |
| *** jlabarre has joined #openstack-kuryr | 10:19 | |
| dulek | dmellado: Just in case you'll have a bit of time today. I have a few patches that are messing up with the gates and break them. I'm out of ideas on why this happens. | 10:40 |
| dmellado | dulek: shoot them, I'll take a look whenever I can ;) | 10:41 |
| dulek | dmellado: https://review.openstack.org/#/c/557732/ - this one's pretty simple, but I don't really know how to proceed with this. | 10:41 |
| dulek | dmellado: This is containerized gate with OpenShift: https://review.openstack.org/#/c/557313/ | 10:41 |
| dmellado | oh, the log one, I recall it | 10:41 |
| dulek | It's failing in kuryr-kubernetes because OpenShift API is complaining about annotating a pod! I cannot figure this out. | 10:42 |
| dmellado | complaining about annotating a pod? WTF xD | 10:42 |
| dulek | And this one is failing on curling K8s API from cni_ds_init: https://review.openstack.org/#/c/555040/ | 10:42 |
| dulek | My next idea is to try wget instead. But I don't understand what's happening. | 10:42 |
| dmellado | all right, I added myself there | 10:43 |
| dulek | dmellado: Yeah, like the only editable fields on Pod resource are restricted and annotations are not one of them. | 10:43 |
| *** caowei has quit IRC | 10:43 | |
| dmellado | will give them a try later on, let's see if I can get to find something ;) | 10:43 |
| dulek | I'll get back to the tomorrow, but maybe some of those errors will ring a bell for you. :) | 10:43 |
| dmellado | I hope so! :D | 10:46 |
| *** dougbtv has joined #openstack-kuryr | 11:34 | |
| *** leyal has quit IRC | 11:37 | |
| *** leyal has joined #openstack-kuryr | 11:38 | |
| *** atoth has joined #openstack-kuryr | 11:51 | |
| *** irenab has quit IRC | 12:02 | |
| *** lihi has quit IRC | 12:03 | |
| *** leyal has quit IRC | 12:03 | |
| *** oanson has quit IRC | 12:04 | |
| openstackgerrit | Eyal Leshem proposed openstack/kuryr-kubernetes master: Create network policy handler and driver https://review.openstack.org/530655 | 13:03 |
| openstackgerrit | Eyal Leshem proposed openstack/kuryr-kubernetes master: DisposableWatch for k8s client https://review.openstack.org/543448 | 13:03 |
| openstackgerrit | Eyal Leshem proposed openstack/kuryr-kubernetes master: Annotate pods that selected by k8s label-selector https://review.openstack.org/545663 | 13:03 |
| *** maysamacedos has joined #openstack-kuryr | 13:10 | |
| *** janonymous has quit IRC | 13:18 | |
| *** yamamoto has quit IRC | 13:37 | |
| *** yamamoto has joined #openstack-kuryr | 13:37 | |
| *** irenab has joined #openstack-kuryr | 13:41 | |
| *** lihi has joined #openstack-kuryr | 13:43 | |
| *** oanson has joined #openstack-kuryr | 13:45 | |
| ltomasbo | ping dmellado, dulek: do you know if devstack support is broken? | 13:53 |
| ltomasbo | I got: Failed to create kuryr-kubernetes certificates Secret. | 13:53 |
| dmellado | ltomasbo: just hit the same issue but seems to be working on the gate | 13:53 |
| ltomasbo | due to: /opt/stack/data/kuryr-kubernetes/certificates_secret.yml": error validating data: unknown object type "nil" in Secret.data.kuryr-ca-bundle.crt; if you choose to ignore these errors, turn validation off with --validate=false | 13:53 |
| dmellado | ltomasbo: we'll need to fix that and make it configurable | 13:54 |
| ltomasbo | I remember reading something about certificates and secrets on some email, but it was during vacations... | 13:54 |
| dmellado | as that's just intended for the gate to use https | 13:54 |
| dmellado | we can also just turn tls-proxy off on the gates | 13:54 |
| ltomasbo | seems the object is not filled (object type "nil") | 13:55 |
| ltomasbo | and at the certificate I see this is empty: | 13:55 |
| ltomasbo | kuryr-ca-bundle.crt: | 13:55 |
| dmellado | which host OS are you using ltomasbo ? | 13:55 |
| dmellado | centOS? | 13:56 |
| ltomasbo | yes | 13:56 |
| dmellado | hmmm I think that might be the issue, do you have an upstream patch? | 13:56 |
| dmellado | and if so, could you check experimental to see if it affects the centos gates? | 13:56 |
| ltomasbo | no, it is the first time I'm getting this error | 13:56 |
| *** gcheresh has joined #openstack-kuryr | 13:58 | |
| *** gcheresh_ has quit IRC | 14:02 | |
| ltomasbo | dmellado, seems that SSL_BUNDLE_FILE is not getting initialized and then the kuryr-ca-bundle.crt is not pointing to the right location | 14:03 |
| *** gcheresh has quit IRC | 14:04 | |
| dmellado | yep, there's no /opt/data/ca-bundle.pem | 14:04 |
| *** hongbin has joined #openstack-kuryr | 14:04 | |
| dmellado | ltomasbo: try adding this to your local.conf | 14:07 |
| dmellado | SSL_BUNDLE_FILE=/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem | 14:07 |
| ltomasbo | that was what I was looking at, figuring out why SSL_BUNDLE_FILE was empty and where should it point to | 14:08 |
| ltomasbo | it is a devstack issue then? dmellado ^^ | 14:08 |
| dmellado | ltomasbo: I'm testing it just now | 14:08 |
| dmellado | it could also be just CA_CERTIFICATE_PATH | 14:10 |
| dmellado | on our devstack plugin | 14:11 |
| ltomasbo | ok, re-stacking with that... let's see if it works... | 14:11 |
| dmellado | in any case that CA_CERTIFICATE_PATH is mapped to the ssl bundle file | 14:12 |
| dmellado | but I think that adding the non-ssl enabled might be useful just for development | 14:13 |
| ltomasbo | yep | 14:15 |
| ltomasbo | for development maybe it is not needed | 14:16 |
| ltomasbo | but I guess it should be tested on the gates, as I guess is the default | 14:16 |
| dmellado | it's the default as of now, though most of the projects override that by setting tls-proxy to false | 14:17 |
| ltomasbo | dmellado, same error... | 14:34 |
| ltomasbo | I'm going to hardcode it on certificates_secret.yaml | 14:35 |
| dmellado | ltomasbo: I've been checking the code | 14:48 |
| dmellado | and maybe it' just a matter USE_SSL | 14:48 |
| dmellado | as otherwise the var is reset within the devstack run | 14:48 |
| ltomasbo | really? | 14:49 |
| ltomasbo | I just hardcoded it at kuryr side, to see if that is the only issue | 14:49 |
| ltomasbo | still stacking... | 14:49 |
| dmellado | or just enable service tls-proxy | 14:52 |
| dmellado | I'll check those | 14:52 |
| openstackgerrit | Daniel Mellado proposed openstack/kuryr-kubernetes master: Make secrets dependant on tls-proxy https://review.openstack.org/558220 | 15:17 |
| dmellado | ltomasbo: ^^ | 15:25 |
| dmellado | for now just add tls-proxy to your services | 15:26 |
| *** yamamoto has quit IRC | 16:33 | |
| *** yamamoto has joined #openstack-kuryr | 16:42 | |
| *** gcheresh has joined #openstack-kuryr | 16:44 | |
| *** gcheresh has quit IRC | 16:53 | |
| *** yamamoto has quit IRC | 16:59 | |
| *** atoth has quit IRC | 17:16 | |
| *** gcheresh has joined #openstack-kuryr | 17:40 | |
| *** gcheresh has quit IRC | 17:56 | |
| *** yamamoto has joined #openstack-kuryr | 18:00 | |
| *** yamamoto has quit IRC | 18:06 | |
| *** atoth has joined #openstack-kuryr | 18:28 | |
| *** yamamoto has joined #openstack-kuryr | 18:37 | |
| *** yamamoto has quit IRC | 18:45 | |
| *** gcheresh has joined #openstack-kuryr | 19:08 | |
| *** yamamoto has joined #openstack-kuryr | 19:45 | |
| *** yamamoto has quit IRC | 19:51 | |
| *** gcheresh has quit IRC | 20:37 | |
| *** yamamoto has joined #openstack-kuryr | 20:47 | |
| *** yamamoto has quit IRC | 20:52 | |
| *** maysamacedos has quit IRC | 20:57 | |
| *** maysamacedos has joined #openstack-kuryr | 20:58 | |
| *** maysamacedos has quit IRC | 21:00 | |
| *** yamamoto has joined #openstack-kuryr | 21:48 | |
| *** yamamoto has quit IRC | 21:54 | |
| *** yamamoto has joined #openstack-kuryr | 22:50 | |
| *** yamamoto has quit IRC | 22:56 | |
| *** hongbin has quit IRC | 23:17 | |
| *** maysamacedos has joined #openstack-kuryr | 23:35 | |
| *** yamamoto has joined #openstack-kuryr | 23:52 | |
| *** yamamoto has quit IRC | 23:56 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!