Tuesday, 2018-08-07

« Monday, 2018-08-06 Index Wednesday, 2018-08-08 »
*** hongbin has joined #openstack-kuryr01:03
*** tzumainn has quit IRC02:31
*** janki has joined #openstack-kuryr03:41
*** hongbin has quit IRC04:15
*** pcaruana has joined #openstack-kuryr06:36
*** trinaths has joined #openstack-kuryr07:08
openstackgerritLuis Tomas Bolivar proposed openstack/kuryr-kubernetes master: Ensure OpenShift gate uses the namespace subnet/sg drivers  https://review.openstack.org/58068007:12
*** trinaths has quit IRC07:31
openstackgerritLuis Tomas Bolivar proposed openstack/kuryr-tempest-plugin master: Namespace svc isolation tempest coverage  https://review.openstack.org/58777807:46
ltomasbocelebdor[m], dmellado, dulek, irenab: https://review.openstack.org/#/c/581421/07:49
dulekltomasbo: You've just opened ICMP in patchset 25, right?07:51
ltomasboyep, I discovered that I only created the rules for tcp, so I added them for icmp07:51
ltomasbothat will not fix the problem with the fips and the tempest tests07:52
ltomasboas that is only enabling icmp from default namespace to the other namespaces and viceversa07:52
ltomasbonot to the fips07:52
ltomasbodulek, ^^07:53
dulekltomasbo: Okay!07:53
ltomasboI'm slightly modifying some of the tests to not rely on fips: https://review.openstack.org/#/c/587778/07:53
ltomasbodulek, ^^07:53
ltomasboand, if we believe icmp (and ssh) should be enabled everywhere, I can just add it07:54
ltomasboor from the fip subnet (though that needs admin rights)07:54
dmelladoltomasbo: your patch reminds me that I need to add documentation for mine07:54
* dmellado sighs07:54
ltomasboxD07:54
dmelladoand unit tests07:58
dmelladowell, I'll leave that for the final PS xD07:58
openstackgerritLuis Tomas Bolivar proposed openstack/kuryr-tempest-plugin master: Namespace svc isolation tempest coverage  https://review.openstack.org/58777808:05
openstackgerritMichał Dulko proposed openstack/kuryr-kubernetes master: WIP: Add HA gate  https://review.openstack.org/58822308:22
*** apuimedo has joined #openstack-kuryr08:37
*** garyloug has joined #openstack-kuryr08:46
openstackgerritMerged openstack/kuryr-kubernetes master: Add namespace isolation for services  https://review.openstack.org/58142109:06
openstackgerritMichał Dulko proposed openstack/kuryr-kubernetes master: WIP: Add HA gate  https://review.openstack.org/58822309:35
openstackgerritLuis Tomas Bolivar proposed openstack/kuryr-tempest-plugin master: Namespace svc isolation tempest coverage  https://review.openstack.org/58777809:37
apuimedoltomasbo: how's that going with the isolation?09:45
ltomasboapuimedo, last patch got merged, but dmellado found I forgot to change one thing on the opt.py file09:46
ltomasbohe is filling the bug and sending the patch09:46
ltomasboapuimedo, then, I'm with the gate patch sets now09:47
ltomasboI hope this is fine now: https://review.openstack.org/#/c/587778/09:47
ltomasboand after that I need to check this other one: https://review.openstack.org/#/c/580680/09:47
ltomasbowhere I'm afraid the most suitable solution is to add icmp from everywhere for the pods on the default namespace09:48
ltomasbo(when stacking)09:48
openstackgerritDaniel Mellado proposed openstack/kuryr-kubernetes master: Fix wrong reference in kuryr_k8s_opts  https://review.openstack.org/58941309:48
dmelladoltomasbo: apuimedo dulek ^^09:48
ltomasbootherwise some tempest test may fail as they depend on that09:48
ltomasbothanks dmellado09:49
dulekdmellado, ltomasbo: Fortunately that's only used for config example generation, isn't it?09:49
ltomasbodulek, yes, that was not impacting the gates09:49
ltomasbodulek, but it was breaking rdo-packaging09:49
dulekOh, sure!09:49
dmelladoexactly09:50
dmelladordo was nagging09:50
openstackgerritDaniel Mellado proposed openstack/kuryr-kubernetes master: Fix wrong reference in kuryr_k8s_opts  https://review.openstack.org/58941309:55
ltomasbodulek, https://review.openstack.org/#/c/589413/10:17
ltomasboirenab, ^^10:17
ltomasboplease +2/W this one10:17
ltomasbothanks!10:33
*** apuimedo has quit IRC10:34
openstackgerritLuis Tomas Bolivar proposed openstack/kuryr-kubernetes master: Ensure OpenShift gate uses the namespace subnet/sg drivers  https://review.openstack.org/58068010:57
ltomasbodulek, dmellado, celebdor[m]: https://review.openstack.org/#/c/587778/11:07
dulekltomasbo: experimental pipeline just started on that one.11:09
ltomasboyep, it is being executed...11:10
openstackgerritLuis Tomas Bolivar proposed openstack/kuryr-kubernetes master: Fix wrong reference in kuryr_k8s_opts  https://review.openstack.org/58941311:13
ltomasbodmellado, ^^ pep8 fixed11:14
dmelladoAhoy11:14
dmelladoMy lack of caffeine was at fault11:15
ltomasboxD11:16
ltomasbodulek, irenab: https://review.openstack.org/#/c/589413/11:34
dulekDone.11:37
dulekltomasbo: I see namespace gate is okay on patch depending on https://review.openstack.org/#/c/587778.12:36
dulekcelebdor[m], dmellado, irenab: So this is okay now: https://review.openstack.org/#/c/58777812:36
irenabdulek, just few nits on commit and lgtm12:37
*** pliu has quit IRC12:50
*** janki has quit IRC13:03
*** janki has joined #openstack-kuryr13:04
ltomasbook, I'll fix them asap13:16
openstackgerritLuis Tomas Bolivar proposed openstack/kuryr-tempest-plugin master: Namespace svc isolation tempest coverage  https://review.openstack.org/58777813:18
ltomasbodulek, irenab ^^ done!13:20
irenabltomasbo, done13:21
ltomasbothanks!13:21
openstackgerritMerged openstack/kuryr-kubernetes master: Fix wrong reference in kuryr_k8s_opts  https://review.openstack.org/58941313:27
openstackgerritMichał Dulko proposed openstack/kuryr-kubernetes master: WIP: Add HA gate  https://review.openstack.org/58822313:31
openstackgerritGenadi Chereshnya proposed openstack/kuryr-tempest-plugin master: Testing VM to loadBalancer service connectivity  https://review.openstack.org/57196813:50
openstackgerritGenadi Chereshnya proposed openstack/kuryr-tempest-plugin master: Create service with unsupported type  https://review.openstack.org/58133713:50
*** celebdor has joined #openstack-kuryr13:52
ltomasbodulek, do you know if I can change default quotas? I have the feeling that I run out of sg for the openshift gates if network per namespace is used...13:55
ltomasbodmellado, celebdor ^^13:56
dmelladoltomasbo: you should be able to change those using admin creds on resource_setup13:56
dulekltomasbo: Oh man, you're opening pandora's box!13:56
ltomasbolol13:56
dmelladoxD13:56
dmelladodulek: ltomasbo let's raise the level13:56
dulekltomasbo: Because the correct way to do it would be to… create kuryr project in DevStack!13:57
dulekltomasbo: And stop using admin!13:57
dmelladodo you know if I can ask for a bigger flavor on the vm upstream? xD13:57
dmelladoLOL13:57
dmelladoyeah, that'd be just an ugly workaround, I do agree with dulek xD13:57
ltomasbodulek, don't we already use a different project on devstack for the kuryr resources?13:57
ltomasbowe create the k8s project, right?13:58
openstackgerritChuck Short proposed openstack/kuryr master: Switch to using stestr  https://review.openstack.org/57925113:58
dulekltomasbo: Lemme check what gets configured.13:58
openstackgerritGenadi Chereshnya proposed openstack/kuryr-tempest-plugin master: Create service with UDP protocol  https://review.openstack.org/58569413:58
*** celebdor has quit IRC13:59
dulekltomasbo: Looks like we use project_name = service.13:59
dulekAt least in gate.13:59
ltomasbowe use KURYR_NEUTRON_DEFAULT_PROJECT, don't we?13:59
ltomasbo    project_id=$(get_or_create_project \14:00
ltomasbo     1         "$KURYR_NEUTRON_DEFAULT_PROJECT" default)14:00
ltomasboand devstack/settings:KURYR_NEUTRON_DEFAULT_PROJECT=${KURYR_NEUTRON_DEFAULT_PROJECT:-k8s}14:00
ltomasbobut not sure about the gates14:00
openstackgerritChuck Short proposed openstack/kuryr master: Switch to using stestr  https://review.openstack.org/57925114:03
ltomasbodmellado, dulek and yes, the openshift gates are missing due to quota:14:03
ltomasboAug 07 11:41:33.173989 ubuntu-xenial-ovh-bhs1-0001178124 python[22439]: 2018-08-07 11:41:33.173 22439 ERROR kuryr_kubernetes.controller.drivers.namespace_security_groups [-] Error creating security group for the namespace kuryr-namespace-1208706904: Quota exceeded for resources: ['security_group'].14:03
ltomasboAug 07 11:41:33.174146 ubuntu-xenial-ovh-bhs1-0001178124 python[22439]: Neutron server returns request_ids: ['req-7f556257-fedd-4816-986f-c257b9a285bb']: OverQuotaClient: Quota exceeded for resources: ['security_group'].14:03
dmelladoltomasbo: did you check if devstack has any setting for the default quota?14:04
dmellado./lib/neutron-legacy:740:        iniset $NEUTRON_CONF quotas quota_security_group -114:05
dmellado./lib/neutron-legacy:741:        iniset $NEUTRON_CONF quotas quota_security_group_rule -114:05
dmelladoltomasbo: try setting that on that gate14:05
ltomasboumm14:07
*** celebdor has joined #openstack-kuryr14:25
openstackgerritLuis Tomas Bolivar proposed openstack/kuryr-kubernetes master: Ensure OpenShift gate uses the namespace subnet/sg drivers  https://review.openstack.org/58068014:26
ltomasbodmellado, dulek ^^ I simply increated the quota for k8s project if namespace driver is enabled14:29
*** celebdor1 has joined #openstack-kuryr14:30
dmelladoltomasbo: lgtm for now ;)14:31
ltomasboI like the statement 'for now'14:32
ltomasbodmellado, ^^14:32
ltomasbodmellado, that means until the gate fails, right?14:32
ltomasboxD14:32
dmelladolol14:32
dmelladoltomasbo: FIXME14:32
dmelladoxD14:32
ltomasboxD14:32
*** celebdor has quit IRC14:33
*** hongbin has joined #openstack-kuryr14:38
celebdor1ltomasbo: dmellado: I manage to configure the 4g router!14:39
celebdor1I have internet agin14:39
celebdor1*again14:39
celebdor1what have you been up to today14:39
celebdor1?14:39
ltomasboxD14:39
dmelladocelebdor1: lol14:39
dmelladoI guess more than you xD14:39
*** celebdor1 is now known as celebdor14:39
ltomasbolast namespace patch merged, finishing merging the tempest/gate side14:39
celebdordmellado: hey, it was not so easy to repurpose orange's 4g router from 201514:40
celebdorltomasbo: need help with that?14:40
ltomasbocelebdor, sure!14:40
dmelladocelebdor: pls go and review the NP patch14:40
dmelladowell, hold on,14:40
ltomasbocelebdor, I think this one needs a flip of the W https://review.openstack.org/#/c/587778/14:40
dmelladoI'll submit a new PS that adds documentation xD14:40
ltomasboit is not running on the gate at the moment14:41
celebdorltomasbo: why not?14:41
ltomasbogate flakiness I assume14:41
ltomasbosometimes happens, not sure why14:41
openstackgerritDaniel Mellado proposed openstack/kuryr-kubernetes master: Implement NP SG create/delete actions  https://review.openstack.org/58354014:41
dmelladoltomasbo: celebdor there you go, docs14:41
dmelladoxD14:41
dmelladonow I need to handle the 'awesome' kubernetes python api14:41
dmelladoto finish the tempest tests14:42
ltomasbocelebdor, also I discovered that namespace isolation to work with openshift gates needs 1 more addition: https://review.openstack.org/#/c/580680/1414:42
ltomasbocelebdor, we need more quota for the security group and rule14:42
celebdor:O14:42
ltomasbocelebdor, I'm checking the gates right now to see if that is the last problem or not14:43
celebdorok14:46
openstackgerritDaniel Mellado proposed openstack/kuryr-kubernetes master: Implement NP SG create/delete actions  https://review.openstack.org/58354014:53
*** pcaruana has quit IRC15:11
openstackgerritDaniel Mellado proposed openstack/kuryr-tempest-plugin master: [WIP] Add Network Policy tests  https://review.openstack.org/58952115:42
openstackgerritMerged openstack/kuryr-tempest-plugin master: Namespace svc isolation tempest coverage  https://review.openstack.org/58777816:04
*** garyloug has quit IRC16:43
*** janki has quit IRC16:47
*** openstackgerrit has quit IRC18:49
*** celebdor has quit IRC22:13
*** hongbin has quit IRC22:39
*** pmannidi has joined #openstack-kuryr23:19
« Monday, 2018-08-06 Index Wednesday, 2018-08-08 »

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!