Wednesday, 2019-03-27

*** hongbin has joined #openstack-kuryr01:54
*** hongbin has quit IRC03:06
*** rh-jelabarre has quit IRC04:46
*** janki has joined #openstack-kuryr04:50
*** jistr is now known as jistr|doc06:33
*** ccamposr has joined #openstack-kuryr07:02
*** yboaron_ has joined #openstack-kuryr07:27
openstackgerritMerged openstack/kuryr master: Update master for stable/stein  https://review.openstack.org/64162707:31
openstackgerritDaniel Mellado proposed openstack/kuryr-kubernetes master: Add ipBlock support to NP  https://review.openstack.org/64513907:45
*** gcheresh has joined #openstack-kuryr08:09
*** celebdor has joined #openstack-kuryr08:33
*** yboaron_ has quit IRC08:37
*** alisanhaji has joined #openstack-kuryr08:48
*** pcaruana has joined #openstack-kuryr08:57
*** jistr|doc is now known as jistr09:15
*** yboaron_ has joined #openstack-kuryr09:28
*** gcheresh_ has joined #openstack-kuryr09:32
*** gcheresh has quit IRC09:33
*** yboaron_ has quit IRC09:35
*** yboaron_ has joined #openstack-kuryr09:36
*** premsankar has quit IRC09:44
alisanhajiHi, I have a question regarding kuryr pluging interfaces. Neutron-server sends to neutron-agent the port info as unbound and owned by compute:kuryr, and it's kuryr-daemon which plugs it to the OVS bridge right?10:17
*** gcheresh_ has quit IRC10:21
ltomasboyep, kuryr-cni is doing the binding to br-int or vm nit (in case of nested)10:21
ltomasboalisanhaji, ^10:21
openstackgerritDaniel Mellado proposed openstack/kuryr-kubernetes master: Add ipBlock support to NP  https://review.openstack.org/64513910:23
*** gcheresh_ has joined #openstack-kuryr10:30
alisanhajiltomasbo: thanks, I was wondering if it was neutron-agent which was not doing it's job10:33
*** gcheresh has joined #openstack-kuryr10:35
*** gcheresh_ has quit IRC10:35
alisanhajiltomasbo: and what about security groups?10:36
ltomasboalisanhaji, just to be clear, it is neutron how creates the port, add security groups, set the ovs-flows, etc10:42
ltomasboalisanhaji, kuryr-controller then annotates port information into the pod10:42
ltomasboalisanhaji, and then kuryr-cni reads it from there and connects the container to the neutron network10:42
ltomasboalisanhaji, in the case of neutron driver, it creates a veth devices, connects one end to the container namespace10:43
ltomasboalisanhaji, and then the other end to the br-int (ovs-vsctl add-port ....)10:43
ltomasboalisanhaji, it also sets the ip, route and such on the container namespace interface10:43
ltomasboalisanhaji, then, when neutron-agent detects that the port has been wired, it will do its dutty, transition the port to ACTIVE10:44
ltomasboalisanhaji, and then, the kuryr-controller will change the annotations on the pod, to state the port is active10:44
alisanhajiltomasbo: ok great, I understand why the annotations now, thank you10:44
ltomasboalisanhaji, and the kuryr-cni will be waiting for that port to become active, and when that happens it will finish, so that the container can be started (as the network is set)10:45
ltomasboalisanhaji, your welcome! hope it helps!10:45
alisanhajiltomasbo: with this workflow I can know what went wrong in my case, thanks10:45
alisanhajiit helps greatly10:45
ltomasboglad to hear :)10:45
openstackgerritMichaƂ Dulko proposed openstack/kuryr-kubernetes master: WiP: Fix cri-o gate  https://review.openstack.org/64486710:48
openstackgerritOpenStack Release Bot proposed openstack/kuryr-libnetwork master: Update master for stable/stein  https://review.openstack.org/64808611:09
*** rh-jelabarre has joined #openstack-kuryr11:53
*** yboaron_ has quit IRC12:18
*** pcaruana has quit IRC12:39
*** pcaruana has joined #openstack-kuryr12:42
*** pcaruana has quit IRC12:42
*** pcaruana has joined #openstack-kuryr12:43
*** yboaron_ has joined #openstack-kuryr13:15
*** janki has quit IRC14:41
*** alisanhaji has quit IRC14:51
*** alisanhaji has joined #openstack-kuryr15:39
*** gcheresh has quit IRC15:48
*** gcheresh has joined #openstack-kuryr16:13
alisanhajiso I tried to use the kuryr-cni docker container to run Kuryr on Magnum. I had an error telling me that the "docker command was not found". I think I know the source of the problem16:13
alisanhajiso Magnum runs VMs with fedora atomic OS for k8s16:14
alisanhajiand the kubernetes stack is containerized in fedora atomic https://www.projectatomic.io/blog/2018/03/containers-w-skopeo-ostree-oci/16:15
alisanhajiSo kubelet runs under runc, and the PATH does not seem to be loaded from the machine where docker and runc commands can be found16:15
alisanhajithat's why when kubelet runs /opt/cni/bin/kuryr-cni, it can't use runc or do docker exec to attach the interface16:17
*** gcheresh has quit IRC16:24
*** celebdor has quit IRC16:25
alisanhajiI'll try next time to mount /usr/bin in kubelet install by modifying Magnum code16:28
alisanhajiand see if it works16:29
*** celebdor has joined #openstack-kuryr17:10
dulekalisanhaji: Ah, so containerized kubelet. Yep, that sounds totally like the root cause.17:13
*** celebdor has quit IRC17:28
*** celebdor has joined #openstack-kuryr17:35
openstackgerritMaysa de Macedo Souza proposed openstack/kuryr-kubernetes master: Add support for text ports on Network Policy Spec  https://review.openstack.org/64308017:35
*** ccamposr has quit IRC17:38
*** yboaron_ has quit IRC17:40
*** celebdor has quit IRC18:02
*** premsankar has joined #openstack-kuryr18:11
*** celebdor has joined #openstack-kuryr18:20
openstackgerritOpenStack Release Bot proposed openstack/kuryr-kubernetes master: Update master for stable/stein  https://review.openstack.org/64821018:38
*** mrostecki has quit IRC19:05
*** mrostecki has joined #openstack-kuryr19:05
*** pcaruana has quit IRC19:53
openstackgerritMerged openstack/kuryr-libnetwork master: Update master for stable/stein  https://review.openstack.org/64808620:20
*** alisanhaji has quit IRC21:40

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!