*** gkadam_ has joined #openstack-kuryr | 02:11 | |
*** gkadam_ has quit IRC | 02:17 | |
*** irclogbot_1 has quit IRC | 02:23 | |
*** hongbin has joined #openstack-kuryr | 03:12 | |
*** hongbin has quit IRC | 03:21 | |
*** janki has joined #openstack-kuryr | 04:05 | |
openstackgerrit | Merged openstack/kuryr-kubernetes master: DevStack: Bump SG quotas for "policy" SG driver https://review.openstack.org/643592 | 06:52 |
---|---|---|
*** pcaruana has joined #openstack-kuryr | 07:19 | |
*** gcheresh has joined #openstack-kuryr | 07:58 | |
*** maysams has joined #openstack-kuryr | 08:03 | |
openstackgerrit | Merged openstack/kuryr-kubernetes master: Add option to deploy coredns https://review.openstack.org/642072 | 09:12 |
*** maysams has quit IRC | 10:04 | |
*** alisanhaji has joined #openstack-kuryr | 10:06 | |
openstackgerrit | Michał Dulko proposed openstack/kuryr-kubernetes master: Add gate for Octavia provider OVN https://review.openstack.org/604036 | 10:13 |
openstackgerrit | Michał Dulko proposed openstack/kuryr-kubernetes master: WiP: Run K8s e2e network policy tests https://review.openstack.org/643327 | 10:13 |
*** maysams has joined #openstack-kuryr | 10:22 | |
openstackgerrit | Merged openstack/kuryr-kubernetes master: Switch Octavia API calls to openstacksdk https://review.openstack.org/638258 | 11:25 |
*** kaiokmo has quit IRC | 11:37 | |
*** rh-jelabarre has joined #openstack-kuryr | 11:57 | |
*** pcaruana|afk| has joined #openstack-kuryr | 12:54 | |
*** pcaruana has quit IRC | 12:56 | |
openstackgerrit | Michał Dulko proposed openstack/kuryr-kubernetes master: WiP: Run K8s e2e network policy tests https://review.openstack.org/643327 | 13:25 |
aperevalov | /join #openstack-meeting-4 | 13:43 |
*** pcaruana|afk| has quit IRC | 13:48 | |
*** alisanhaji has quit IRC | 14:02 | |
*** pcaruana has joined #openstack-kuryr | 14:33 | |
*** alisanhaji has joined #openstack-kuryr | 14:35 | |
dulek | I guess this means we should run the meeting today. ;) | 14:58 |
*** janki has quit IRC | 15:26 | |
*** gcheresh has quit IRC | 16:02 | |
dulek | maysams: Seems like your patch isn't working: http://paste.openstack.org/show/747978/ | 16:16 |
dulek | maysams: I'm unable to debug this deeper at the moment, but wanted to give feedback as soon as I see the result. ;) | 16:17 |
maysams | dulek: good to know.. I will look into it later today | 16:17 |
maysams | dulek: thanks | 16:17 |
maysams | dulek: Was this test passing before? | 16:18 |
dulek | maysams: No, no, it's about named ports. | 16:18 |
maysams | okay | 16:19 |
dulek | maysams: I'm trying to test it with https://review.openstack.org/#/c/643080/ applied. | 16:19 |
maysams | dulek, yup yup | 16:20 |
openstackgerrit | Merged openstack/kuryr-libnetwork master: Migrate legacy jobs to Ubuntu Bionic https://review.openstack.org/642321 | 16:22 |
openstackgerrit | Michał Dulko proposed openstack/kuryr-kubernetes master: Add option to tag Octavia resources created by us https://review.openstack.org/638483 | 16:29 |
dulek | maysams: Hey, do we support such policies: https://github.com/kubernetes/kubernetes/blob/master/test/e2e/network/network_policy.go#L87-L111 ? | 16:33 |
dulek | Because this one failed with a pod that shouldn't be able to access the service, accessed it.] | 16:33 |
maysams | dulek, checking | 16:34 |
dulek | maysams: Hm, kuryr-controller was restarted 7 times… | 16:35 |
maysams | dulek: we do support this kind of policy | 16:36 |
maysams | dulek: so, Just to confirm it failed because a pod that was not supposed to be selected was being able to access the svc? | 16:39 |
*** ccamposr has joined #openstack-kuryr | 16:39 | |
*** ccamposr__ has joined #openstack-kuryr | 16:39 | |
maysams | dulek: Do you have the controller log? | 16:39 |
dulek | maysams: Yup. But no log, seems like pod got restarted. :( | 16:39 |
dulek | maysams: It's pretty possible that some etcd events got lost. | 16:39 |
dulek | maysams: I'll need to dig more here. | 16:40 |
maysams | dulek: right, later I will try to double check the matching selector code and see if we're missing some case | 16:41 |
maysams | dulek: let me know if you find some log | 16:41 |
maysams | dulek: thanks! | 16:41 |
dulek | ltomasbo: Sure! | 16:41 |
ltomasbo | ?? | 16:42 |
ltomasbo | dulek, ^ | 16:42 |
dulek | ltomasbo: Hm? I'm running those K8s e2e tests on my env. | 16:43 |
ltomasbo | dulek, I saw your ping: 'ltomasbo: Sure!' | 16:43 |
ltomasbo | dulek, not sure you were asking anything... or I asked something time ago... xD | 16:44 |
dulek | ltomasbo: Oh, I've tagged wrong person, sorry. :P | 16:44 |
ltomasbo | :) | 16:44 |
dulek | maysams: One more data point - "should allow ingress access on one named port" passed while "should allow egress access on one named port" failed. | 16:55 |
maysams | dulek: and do you recall if this was passing before? | 16:56 |
dulek | maysams: Both were failing previously. | 16:56 |
maysams | dulek: okay | 16:56 |
dulek | So either your commit almost works, or it's my env failure. Doesn't hurt to double check if there's some significant difference in how ingress and egress are handled. :) | 16:57 |
maysams | dulek: it's possible that we're missing something else besides the text port | 16:57 |
maysams | dulek: sure sure. I will check | 16:57 |
dulek | maysams: I doubt we're missing anything besides text port, but obviously it's possible. :) | 16:58 |
*** ccamposr has quit IRC | 17:06 | |
*** ccamposr__ has quit IRC | 17:06 | |
maysams | dulek: yep, me too.. But lets see | 17:07 |
*** snapiri has quit IRC | 17:19 | |
*** maysams has quit IRC | 17:31 | |
*** maysams has joined #openstack-kuryr | 18:04 | |
*** maysams has quit IRC | 18:27 | |
*** gmann is now known as gmann_afk | 18:34 | |
*** gmann_afk is now known as gmann | 18:56 | |
*** mrostecki has quit IRC | 19:25 | |
*** mrostecki has joined #openstack-kuryr | 19:30 | |
*** irclogbot_1 has joined #openstack-kuryr | 20:12 | |
*** irclogbot_1 has quit IRC | 20:25 | |
*** irclogbot_1 has joined #openstack-kuryr | 20:27 | |
*** alisanhaji has quit IRC | 20:38 | |
*** pcaruana has quit IRC | 20:54 | |
*** rh-jelabarre has quit IRC | 21:07 | |
*** irclogbot_1 has quit IRC | 21:26 | |
*** irclogbot_1 has joined #openstack-kuryr | 21:28 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!