*** yamamoto has joined #openstack-meeting-4 | 00:02 | |
*** yamamoto has quit IRC | 00:07 | |
*** salmankhan has joined #openstack-meeting-4 | 00:09 | |
*** salmankhan has quit IRC | 00:13 | |
*** hongbin has quit IRC | 00:16 | |
*** chyka has quit IRC | 00:36 | |
*** chyka has joined #openstack-meeting-4 | 00:37 | |
*** chyka has quit IRC | 00:41 | |
*** d0ugal_ has joined #openstack-meeting-4 | 00:48 | |
*** kjackal_bot has quit IRC | 00:59 | |
*** kjackal_bot has joined #openstack-meeting-4 | 01:00 | |
*** yamamoto has joined #openstack-meeting-4 | 01:03 | |
*** aspiers has quit IRC | 01:05 | |
*** dave-mccowan has joined #openstack-meeting-4 | 01:07 | |
*** yamamoto has quit IRC | 01:08 | |
*** woodard_ has joined #openstack-meeting-4 | 01:39 | |
*** woodard has quit IRC | 01:39 | |
*** woodard_ has quit IRC | 01:56 | |
*** woodard has joined #openstack-meeting-4 | 01:57 | |
*** salv-orl_ has joined #openstack-meeting-4 | 02:03 | |
*** yamamoto has joined #openstack-meeting-4 | 02:04 | |
*** salv-orlando has quit IRC | 02:07 | |
*** hongbin has joined #openstack-meeting-4 | 02:08 | |
*** yamamoto has quit IRC | 02:09 | |
*** yamahata has quit IRC | 02:15 | |
*** niedbalski has quit IRC | 02:25 | |
*** harlowja_ has quit IRC | 02:28 | |
*** links has joined #openstack-meeting-4 | 02:49 | |
*** yamamoto has joined #openstack-meeting-4 | 03:06 | |
*** kiennt26 has joined #openstack-meeting-4 | 03:09 | |
*** yamamoto has quit IRC | 03:11 | |
*** gkadam has quit IRC | 03:14 | |
*** gkadam has joined #openstack-meeting-4 | 03:15 | |
*** yamahata has joined #openstack-meeting-4 | 03:59 | |
*** yamamoto has joined #openstack-meeting-4 | 04:07 | |
*** d0ugal__ has joined #openstack-meeting-4 | 04:13 | |
*** yamamoto has quit IRC | 04:13 | |
*** d0ugal_ has quit IRC | 04:15 | |
*** psachin`` has joined #openstack-meeting-4 | 04:34 | |
*** dave-mccowan has quit IRC | 04:34 | |
*** hongbin has quit IRC | 04:56 | |
*** yboaron has joined #openstack-meeting-4 | 04:59 | |
*** yamamoto has joined #openstack-meeting-4 | 05:04 | |
*** psachin`` has quit IRC | 05:05 | |
*** trinaths has joined #openstack-meeting-4 | 05:27 | |
*** janki has joined #openstack-meeting-4 | 05:42 | |
*** lpetrut has joined #openstack-meeting-4 | 05:48 | |
*** yamamoto has quit IRC | 05:51 | |
*** yamamoto has joined #openstack-meeting-4 | 06:02 | |
*** gcheresh has joined #openstack-meeting-4 | 06:06 | |
*** aspiers has joined #openstack-meeting-4 | 06:14 | |
*** psachin`` has joined #openstack-meeting-4 | 06:22 | |
*** d0ugal__ has quit IRC | 06:27 | |
*** d0ugal__ has joined #openstack-meeting-4 | 06:33 | |
*** lpetrut has quit IRC | 06:48 | |
*** d0ugal__ has quit IRC | 06:52 | |
*** chyka has joined #openstack-meeting-4 | 07:13 | |
*** chyka has quit IRC | 07:18 | |
*** yamahata has quit IRC | 07:34 | |
*** eyalb has joined #openstack-meeting-4 | 07:37 | |
*** ifat_afek has joined #openstack-meeting-4 | 07:44 | |
*** pcaruana has joined #openstack-meeting-4 | 07:47 | |
*** psachin`` has quit IRC | 07:54 | |
*** alexchadin has joined #openstack-meeting-4 | 07:54 | |
*** d0ugal has joined #openstack-meeting-4 | 07:55 | |
*** d0ugal has quit IRC | 07:55 | |
*** d0ugal has joined #openstack-meeting-4 | 07:55 | |
*** lpetrut has joined #openstack-meeting-4 | 07:56 | |
*** psachin has joined #openstack-meeting-4 | 07:57 | |
*** mancdaz has quit IRC | 07:57 | |
*** mancdaz_ has joined #openstack-meeting-4 | 07:58 | |
*** mancdaz_ is now known as mancdaz | 07:58 | |
*** idan_hefetz has joined #openstack-meeting-4 | 07:59 | |
*** saggi has quit IRC | 07:59 | |
ifat_afek | #startmeeting vitrage | 08:00 |
---|---|---|
openstack | Meeting started Wed Feb 21 08:00:21 2018 UTC and is due to finish in 60 minutes. The chair is ifat_afek. Information about MeetBot at http://wiki.debian.org/MeetBot. | 08:00 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 08:00 |
*** openstack changes topic to " (Meeting topic: vitrage)" | 08:00 | |
openstack | The meeting name has been set to 'vitrage' | 08:00 |
ifat_afek | Hi :-) | 08:00 |
eyalb | \o/ | 08:00 |
idan_hefetz | hi | 08:00 |
*** d0ugal has quit IRC | 08:00 | |
*** annarez has joined #openstack-meeting-4 | 08:01 | |
annarez | Hi! | 08:01 |
*** d0ugal has joined #openstack-meeting-4 | 08:01 | |
ifat_afek | Agenda: | 08:02 |
ifat_afek | •Status and updates | 08:02 |
ifat_afek | •Dublin PTG | 08:02 |
ifat_afek | •Open Discussion | 08:02 |
*** saggi has joined #openstack-meeting-4 | 08:02 | |
ifat_afek | #topic Status and updates | 08:04 |
*** openstack changes topic to "Status and updates (Meeting topic: vitrage)" | 08:04 | |
ifat_afek | I’m working on final release issues. I finished checking the latest Queens version and submitted the cycle-highlights. | 08:04 |
ifat_afek | #link https://releases.openstack.org/queens/highlights.html | 08:04 |
ifat_afek | I’m about to release vitrage-tempest-plugin version 1.0.0 (the tempest-plugins are independent of the releases), and the last Queens versions of vitrage and vitrage-dashboard. | 08:04 |
ifat_afek | Other than that, I started working on the resource equivalence design. I hope to submit an initial spec today or tomorrow, so it will be a baseline for the discussion in the PTG. | 08:04 |
ifat_afek | That’s it for me. Any other updates? | 08:05 |
annarez | I'll update | 08:05 |
annarez | I'm working on the UI design for alarm and RCA history in Vitrage | 08:06 |
*** d0ugal has quit IRC | 08:06 | |
annarez | we will discuss it on the PTG next week | 08:06 |
annarez | that's it :) | 08:06 |
*** Idan_Kinory has joined #openstack-meeting-4 | 08:07 | |
annarez | idan_hefetz congratulations to you new born baby!! | 08:07 |
Idan_Kinory | Hi | 08:07 |
ifat_afek | Mazal Tov :-) | 08:07 |
Idan_Kinory | congratulations! | 08:08 |
eyalb | +2 | 08:08 |
idan_hefetz | Toda!! thanks everybody :) | 08:08 |
Idan_Kinory | I have a short update | 08:08 |
idan_hefetz | i finally got +2 from eyal :) | 08:08 |
eyalb | workflow +1 | 08:09 |
Idan_Kinory | I started working on a new datasource : kubernetes. | 08:09 |
Idan_Kinory | still working on design. | 08:11 |
Idan_Kinory | At first step kubernetes nodes will be added to the entity graphs. | 08:12 |
Idan_Kinory | resource equivalence is needed for this datasource. | 08:13 |
Idan_Kinory | that all for me :) | 08:13 |
Idan_Kinory | that's* | 08:13 |
ifat_afek | Thanks. Anyone else? | 08:13 |
*** d0ugal has joined #openstack-meeting-4 | 08:15 | |
ifat_afek | #topic Dublin PTG | 08:15 |
*** openstack changes topic to "Dublin PTG (Meeting topic: vitrage)" | 08:15 | |
ifat_afek | I prepared a draft for the PTG agenda. Your comments are welcome. | 08:15 |
ifat_afek | #link https://etherpad.openstack.org/p/vitrage-ptg-rocky | 08:15 |
ifat_afek | The PTG schedule: | 08:16 |
ifat_afek | #link https://www.openstack.org/ptg#tab_schedule | 08:16 |
ifat_afek | #topic Open Discussion | 08:16 |
*** openstack changes topic to "Open Discussion (Meeting topic: vitrage)" | 08:16 | |
ifat_afek | Just mentioning StoryBoard again… we should migrate from launchpad to StoryBoard soon, but I didn’t have time to look into it yet | 08:17 |
ifat_afek | Anything else? | 08:17 |
*** woodard has quit IRC | 08:18 | |
ifat_afek | Short meeting this time :-) | 08:19 |
ifat_afek | bye | 08:19 |
eyalb | bye | 08:19 |
ifat_afek | #endmeeting | 08:19 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 08:19 | |
openstack | Meeting ended Wed Feb 21 08:19:51 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 08:19 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/vitrage/2018/vitrage.2018-02-21-08.00.html | 08:19 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/vitrage/2018/vitrage.2018-02-21-08.00.txt | 08:19 |
openstack | Log: http://eavesdrop.openstack.org/meetings/vitrage/2018/vitrage.2018-02-21-08.00.log.html | 08:19 |
*** eyalb has left #openstack-meeting-4 | 08:20 | |
*** annarez has quit IRC | 08:22 | |
*** slaweq_ has joined #openstack-meeting-4 | 08:23 | |
*** idan_hefetz has quit IRC | 08:25 | |
*** slaweq_ has quit IRC | 08:28 | |
*** d0ugal has quit IRC | 08:29 | |
*** d0ugal has joined #openstack-meeting-4 | 08:34 | |
*** yamahata has joined #openstack-meeting-4 | 08:37 | |
*** d0ugal has quit IRC | 08:39 | |
*** psachin has quit IRC | 08:40 | |
*** d0ugal has joined #openstack-meeting-4 | 08:48 | |
*** d0ugal has quit IRC | 08:48 | |
*** d0ugal has joined #openstack-meeting-4 | 08:48 | |
*** alexchadin has quit IRC | 08:50 | |
*** alexchadin has joined #openstack-meeting-4 | 08:51 | |
*** psachin has joined #openstack-meeting-4 | 08:51 | |
*** d0ugal has quit IRC | 08:58 | |
*** Idan_Kinory has quit IRC | 08:59 | |
*** trinaths has quit IRC | 08:59 | |
*** trinaths has joined #openstack-meeting-4 | 09:02 | |
*** d0ugal has joined #openstack-meeting-4 | 09:08 | |
*** admcleod has quit IRC | 09:11 | |
*** admcleod has joined #openstack-meeting-4 | 09:12 | |
*** trozet has quit IRC | 09:45 | |
*** trozet has joined #openstack-meeting-4 | 09:46 | |
*** notmyname has quit IRC | 09:48 | |
*** alexchadin has quit IRC | 09:50 | |
*** alexchadin has joined #openstack-meeting-4 | 09:50 | |
*** notmyname has joined #openstack-meeting-4 | 09:51 | |
*** kiennt26 has quit IRC | 09:57 | |
*** cgoncalves has quit IRC | 09:57 | |
*** salmankhan has joined #openstack-meeting-4 | 09:58 | |
*** ifat_afek has left #openstack-meeting-4 | 09:59 | |
*** armstrong has joined #openstack-meeting-4 | 10:00 | |
*** salmankhan has quit IRC | 10:02 | |
*** cgoncalves has joined #openstack-meeting-4 | 10:02 | |
*** salmankhan has joined #openstack-meeting-4 | 10:04 | |
*** pcaruana has quit IRC | 10:05 | |
*** d0ugal_ has joined #openstack-meeting-4 | 10:06 | |
*** d0ugal has quit IRC | 10:06 | |
*** anilvenkata has quit IRC | 10:10 | |
*** d0ugal_ has quit IRC | 10:11 | |
*** d0ugal_ has joined #openstack-meeting-4 | 10:13 | |
*** d0ugal__ has joined #openstack-meeting-4 | 10:17 | |
*** d0ugal_ has quit IRC | 10:18 | |
*** pcaruana has joined #openstack-meeting-4 | 10:20 | |
*** yamahata has quit IRC | 10:22 | |
*** anilvenkata has joined #openstack-meeting-4 | 10:23 | |
*** alexchadin has quit IRC | 10:48 | |
*** d0ugal__ has quit IRC | 10:54 | |
*** d0ugal has joined #openstack-meeting-4 | 10:54 | |
*** d0ugal has quit IRC | 10:54 | |
*** d0ugal has joined #openstack-meeting-4 | 10:54 | |
*** yboaron has quit IRC | 11:05 | |
*** yboaron has joined #openstack-meeting-4 | 11:06 | |
*** pcaruana has quit IRC | 11:19 | |
*** d0ugal has quit IRC | 11:23 | |
*** anilvenkata has quit IRC | 11:26 | |
*** d0ugal has joined #openstack-meeting-4 | 11:30 | |
*** pcaruana has joined #openstack-meeting-4 | 11:33 | |
*** anilvenkata has joined #openstack-meeting-4 | 11:39 | |
*** pbourke has quit IRC | 11:40 | |
*** yamamoto has quit IRC | 11:41 | |
*** pbourke has joined #openstack-meeting-4 | 11:42 | |
*** alexchadin has joined #openstack-meeting-4 | 11:56 | |
*** yboaron has quit IRC | 11:58 | |
*** d0ugal has quit IRC | 12:06 | |
*** janki has quit IRC | 12:07 | |
*** yboaron has joined #openstack-meeting-4 | 12:08 | |
*** armstrong has quit IRC | 12:10 | |
*** d0ugal has joined #openstack-meeting-4 | 12:10 | |
*** seajay has joined #openstack-meeting-4 | 12:10 | |
*** mgagne has quit IRC | 12:19 | |
*** d0ugal has quit IRC | 12:20 | |
*** d34dh0r53 has quit IRC | 12:20 | |
*** toan has quit IRC | 12:20 | |
*** evrardjp has quit IRC | 12:22 | |
*** fnordahl has quit IRC | 12:22 | |
*** dhellmann has quit IRC | 12:22 | |
*** d0ugal has joined #openstack-meeting-4 | 12:23 | |
*** fnordahl has joined #openstack-meeting-4 | 12:23 | |
*** evrardjp has joined #openstack-meeting-4 | 12:26 | |
*** d34dh0r53 has joined #openstack-meeting-4 | 12:26 | |
*** toan has joined #openstack-meeting-4 | 12:27 | |
*** dhellmann has joined #openstack-meeting-4 | 12:30 | |
*** d0ugal has quit IRC | 12:34 | |
*** mgagne has joined #openstack-meeting-4 | 12:36 | |
*** trinaths has quit IRC | 12:36 | |
*** mgagne is now known as Guest20946 | 12:36 | |
*** zhubingbing has joined #openstack-meeting-4 | 12:41 | |
*** yamamoto has joined #openstack-meeting-4 | 12:42 | |
*** persia has quit IRC | 12:46 | |
*** persia has joined #openstack-meeting-4 | 12:47 | |
*** melwitt has quit IRC | 12:47 | |
*** yamamoto has quit IRC | 12:49 | |
*** yamamoto has joined #openstack-meeting-4 | 12:51 | |
*** melwitt has joined #openstack-meeting-4 | 12:52 | |
*** dave-mccowan has joined #openstack-meeting-4 | 13:07 | |
*** d0ugal has joined #openstack-meeting-4 | 13:13 | |
*** d0ugal_ has joined #openstack-meeting-4 | 13:19 | |
*** d0ugal has quit IRC | 13:20 | |
*** janki has joined #openstack-meeting-4 | 13:21 | |
*** d0ugal_ has quit IRC | 13:25 | |
*** woodard has joined #openstack-meeting-4 | 13:25 | |
*** alexchadin has quit IRC | 13:27 | |
*** alexchadin has joined #openstack-meeting-4 | 13:28 | |
*** alexchadin has quit IRC | 13:35 | |
*** d0ugal_ has joined #openstack-meeting-4 | 13:38 | |
*** Konan has joined #openstack-meeting-4 | 13:39 | |
*** d0ugal_ has quit IRC | 13:48 | |
*** d0ugal has joined #openstack-meeting-4 | 13:48 | |
*** d0ugal has quit IRC | 13:48 | |
*** d0ugal has joined #openstack-meeting-4 | 13:48 | |
*** zhubingbing has quit IRC | 13:52 | |
*** zhubingbing has joined #openstack-meeting-4 | 13:52 | |
*** psachin has quit IRC | 13:54 | |
*** zhubingbing has quit IRC | 13:56 | |
*** woodard has quit IRC | 13:56 | |
*** alexchadin has joined #openstack-meeting-4 | 13:57 | |
*** woodard has joined #openstack-meeting-4 | 13:57 | |
*** d0ugal has quit IRC | 13:58 | |
*** d0ugal has joined #openstack-meeting-4 | 13:59 | |
*** lyan has joined #openstack-meeting-4 | 14:02 | |
*** d0ugal has quit IRC | 14:04 | |
*** diman has joined #openstack-meeting-4 | 14:04 | |
*** pmesserli has joined #openstack-meeting-4 | 14:13 | |
*** pmesserli has quit IRC | 14:13 | |
*** pmesserli has joined #openstack-meeting-4 | 14:14 | |
*** d0ugal has joined #openstack-meeting-4 | 14:22 | |
*** links has quit IRC | 14:29 | |
*** mjturek has joined #openstack-meeting-4 | 14:31 | |
*** psachin has joined #openstack-meeting-4 | 14:37 | |
*** dmellado has quit IRC | 14:37 | |
*** dmellado has joined #openstack-meeting-4 | 14:42 | |
*** d0ugal has quit IRC | 14:49 | |
*** salmankhan has quit IRC | 14:51 | |
*** salmankhan has joined #openstack-meeting-4 | 14:54 | |
*** alexchadin has quit IRC | 14:56 | |
*** d0ugal has joined #openstack-meeting-4 | 14:57 | |
*** yboaron has quit IRC | 15:01 | |
*** psachin has quit IRC | 15:08 | |
*** psachin has joined #openstack-meeting-4 | 15:09 | |
*** edleafe has quit IRC | 15:12 | |
*** edleafe has joined #openstack-meeting-4 | 15:12 | |
*** dklyle has joined #openstack-meeting-4 | 15:15 | |
*** david-lyle has quit IRC | 15:16 | |
*** spiette has joined #openstack-meeting-4 | 15:24 | |
*** yamahata has joined #openstack-meeting-4 | 15:25 | |
*** psachin has quit IRC | 15:26 | |
*** psachin has joined #openstack-meeting-4 | 15:28 | |
*** psachin has quit IRC | 15:29 | |
*** egonzalez has joined #openstack-meeting-4 | 15:31 | |
*** gcheresh has quit IRC | 15:40 | |
*** caboucha has joined #openstack-meeting-4 | 15:46 | |
*** VW has joined #openstack-meeting-4 | 15:51 | |
*** hrw has joined #openstack-meeting-4 | 15:53 | |
*** duonghq has joined #openstack-meeting-4 | 15:54 | |
*** yamamoto has quit IRC | 15:55 | |
*** pbourke_ has joined #openstack-meeting-4 | 15:56 | |
*** paken has joined #openstack-meeting-4 | 15:56 | |
*** inc0 has joined #openstack-meeting-4 | 15:56 | |
*** premsankar has joined #openstack-meeting-4 | 15:58 | |
Jeffrey4l | #startmeeting kolla | 16:00 |
openstack | Meeting started Wed Feb 21 16:00:05 2018 UTC and is due to finish in 60 minutes. The chair is Jeffrey4l. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
*** openstack changes topic to " (Meeting topic: kolla)" | 16:00 | |
openstack | The meeting name has been set to 'kolla' | 16:00 |
Jeffrey4l | #topic rollcall | 16:00 |
*** openstack changes topic to "rollcall (Meeting topic: kolla)" | 16:00 | |
duonghq | o/ | 16:00 |
inc0 | w00t for Jeffrey4l!!:) congrats man! | 16:00 |
Jeffrey4l | inc0, thanks ;D | 16:00 |
pbourke_ | w00t :) | 16:01 |
*** woodard has quit IRC | 16:02 | |
Jeffrey4l | are guys on the way to Dublin ;D | 16:02 |
*** sadasu has joined #openstack-meeting-4 | 16:02 | |
Jeffrey4l | #topic Announcements | 16:03 |
*** openstack changes topic to "Announcements (Meeting topic: kolla)" | 16:03 | |
Jeffrey4l | ptl election result. | 16:03 |
Jeffrey4l | i am pleasure to be severd as PTL in the next cycle. | 16:04 |
Jeffrey4l | and thanks duonghq and pbourke_ can join the nomination too. | 16:04 |
sadasu | congratulations! | 16:05 |
Jeffrey4l | kolla is the hostest project with three nominators. | 16:05 |
Jeffrey4l | which is a good sign | 16:05 |
Jeffrey4l | 2. ptg meeting will be hold on next week. | 16:06 |
Jeffrey4l | hope guys could enjoy it and next weekly meeting will be canceled. | 16:07 |
Jeffrey4l | 3. at the same time, kolla rc1 tag and queens branch will be created at next week too. | 16:07 |
*** mgoddard_ has joined #openstack-meeting-4 | 16:07 | |
Jeffrey4l | so any critical bug should be resolved and merged ASAP | 16:08 |
mgoddard_ | o/ | 16:08 |
Jeffrey4l | anything else? | 16:08 |
*** caoyuan has joined #openstack-meeting-4 | 16:08 | |
caoyuan | hi | 16:08 |
Jeffrey4l | sup caoyuan | 16:08 |
Jeffrey4l | gusse no. let us move on. | 16:09 |
Jeffrey4l | #topic Security bug in gates https://bugs.launchpad.net/kolla-ansible/+bug/1749326 (inc0) | 16:09 |
*** openstack changes topic to "Security bug in gates https://bugs.launchpad.net/kolla-ansible/+bug/1749326 (inc0) (Meeting topic: kolla)" | 16:09 | |
caoyuan | :) | 16:09 |
hrw | o/ | 16:09 |
openstack | Launchpad bug 1749326 in kolla-ansible "Exploitable services exposed on community test nodes" [Critical,Confirmed] | 16:09 |
rwellum | Congrats Jeffrey4l !!! | 16:09 |
Jeffrey4l | inc0, your floor | 16:09 |
Jeffrey4l | thanks rwellum | 16:09 |
inc0 | so fungi got msg from one of cloud providers that our memcached is open for attack | 16:09 |
inc0 | which makes sense, | 16:09 |
*** janki has quit IRC | 16:09 | |
*** gcheresh has joined #openstack-meeting-4 | 16:09 | |
inc0 | right now in multinode gates we drop iptables rules | 16:10 |
Jeffrey4l | i am curiosity why only oraclelinux related jobs are point out? | 16:10 |
inc0 | https://github.com/openstack/kolla-ansible/blob/master/tests/pre.yml#L36 | 16:10 |
pbourke_ | wondering that also | 16:10 |
inc0 | just a correlation | 16:10 |
inc0 | my guess is that all of gates are in fact affected | 16:10 |
Jeffrey4l | i think so too. | 16:11 |
pbourke_ | so... since we're moving to fernet | 16:11 |
pbourke_ | can we just drop memcached and problem solved? | 16:11 |
inc0 | well dropping memcached fully isn't going solve it | 16:11 |
inc0 | it will for master, but pike and queens gates are still vulnerable | 16:11 |
Jeffrey4l | any i think we can do nothing for this. become event iptables rules are added, memcached port should be exported still for mulit node access. | 16:11 |
Jeffrey4l | pbourke_, inc0 we can not drop memcached. it is widely used in openstack , not only for uuid token | 16:12 |
inc0 | we can add multinode gates to allow traffic only from other nodes | 16:12 |
pbourke_ | I just mean drop it from the gates | 16:12 |
inc0 | instead of iptables -F - add rules that'll allow all traffic based on dest | 16:12 |
pbourke_ | not from the project | 16:12 |
Jeffrey4l | inc0, " allow traffic only from other nodes" +1 | 16:12 |
inc0 | thing is, I don't think I will be able to do it, got a lot on my plate | 16:13 |
inc0 | so looking for volunteers:) | 16:13 |
Jeffrey4l | i am afraid other project have the same issue, like mariadb. | 16:13 |
inc0 | right, so my thinking was | 16:13 |
inc0 | restore regular iptables rules, which were pretty strict | 16:13 |
fungi | yeah, if you could block it on the nodes' real interfaces and have it only exposed across the overlay network that would certainly solve the risk | 16:14 |
inc0 | and add new rule that will allow all from nodes | 16:14 |
inc0 | fungi: we can't use overlay network tho | 16:14 |
inc0 | not in the way it's implemented today in zuul | 16:14 |
fungi | oh, you don't tunnel between nodes in your multinode jobs? | 16:14 |
Jeffrey4l | for overylay, we can set up a vxlan interface to use. | 16:14 |
inc0 | because it uses ovs | 16:14 |
*** hongbin has joined #openstack-meeting-4 | 16:14 | |
inc0 | and our ovs in container conflicts with ovs used by overlay | 16:14 |
fungi | got it, namespace issues i guess | 16:15 |
inc0 | we would need to re-implement this with linuxbridge | 16:15 |
*** salmankhan has quit IRC | 16:15 | |
Jeffrey4l | inc0, we can use overlay for api_interface and use the direct physical interface for network_interface | 16:15 |
fungi | i think we had a linuxbridge implementation in devstack-gate which you might be able to excavate from git history if you need a starting point | 16:15 |
inc0 | that would be best, but also quite hard | 16:15 |
*** salmankhan has joined #openstack-meeting-4 | 16:15 | |
inc0 | Jeffrey4l: or other way around | 16:15 |
inc0 | in any case, someone would need to write it;) | 16:16 |
fungi | but regardless, you could of course also just hardcode the corresponding ip addresses of other nodes into iptables and do direct communication between them | 16:16 |
inc0 | I think this will be quickest | 16:16 |
Jeffrey4l | the root issue is: memcache do not support authorization, right? fungi | 16:16 |
fungi | since you don't currently have an overlay to make that simpler | 16:16 |
inc0 | and time is crucial here | 16:16 |
*** pcaruana has quit IRC | 16:16 | |
fungi | Jeffrey4l: yes, and the provider is primarily concerned that memcached can be leveraged by a miscreant to launch attacks against other systems on the internet | 16:17 |
fungi | particularly its udp access methods | 16:18 |
fungi | since the client address can be spoofed and used in an amplified reflection attack | 16:18 |
Jeffrey4l | got. i think we can implement inc0 idea, adding iptables rules. | 16:18 |
pbourke_ | so I can propose to try and fix this during the PTG next week | 16:19 |
Jeffrey4l | pbourke_, cool, thanks. | 16:19 |
inc0 | long term we could also add vxlan linuxbridge to allow networking to spawned-by-us vms | 16:19 |
pbourke_ | hopefully if a few of us sit down together we can fix it up quickly enough | 16:19 |
Jeffrey4l | inc0, +1 | 16:19 |
inc0 | pbourke_: a lot of infra people will be there, I'm sure they'll provide help if needed:) | 16:19 |
pbourke_ | if we have trouble we can call by the infra room | 16:19 |
fungi | as soon as possible would be best of course, but i understand that everyone's time is at a premium | 16:20 |
inc0 | thanks pbourke_ we'll be here reviewing | 16:20 |
pbourke_ | fungi: will you be around next week? | 16:20 |
Jeffrey4l | pbourke_, i think just adding a few ansible tasks throught itpables module work. | 16:20 |
pbourke_ | Jeffrey4l: roger | 16:20 |
fungi | pbourke_: i'll be "around dublin" next week if that's what you're asking | 16:20 |
Jeffrey4l | in "pre.yml" playbooks. | 16:20 |
pbourke_ | fungi: yeah cool, I'll try say hi :) | 16:20 |
fungi | though i tend to be stretched pretty thin between infra, tc, foundation, election officials, vmt... | 16:20 |
fungi | but yes, happy to assist with anything you need if we can get our schedules to sync up | 16:21 |
Jeffrey4l | thanks fungi | 16:21 |
fungi | you bet! lmk if you need anything | 16:21 |
Jeffrey4l | we will | 16:22 |
Jeffrey4l | ok. let us move on next topic | 16:22 |
Jeffrey4l | #topic ptg plan https://etherpad.openstack.org/p/kolla-rocky-ptg-planning | 16:22 |
*** openstack changes topic to "ptg plan https://etherpad.openstack.org/p/kolla-rocky-ptg-planning (Meeting topic: kolla)" | 16:22 | |
Jeffrey4l | #link https://etherpad.openstack.org/p/kolla-rocky-ptg-planning | 16:22 |
caoyuan | pbourke_ , call me, if need any help | 16:22 |
pbourke_ | caoyuan: thanks! | 16:22 |
*** jmccarthy has joined #openstack-meeting-4 | 16:23 | |
caoyuan | :) | 16:23 |
Jeffrey4l | please open the link | 16:23 |
Jeffrey4l | ptg is around the corner, we need schedule the topic agenda today. | 16:23 |
Jeffrey4l | we have three days slots during ptg. | 16:23 |
egonzalez | sorry, was in a meeting, regarding drop memcached, we cannot do it because nova console auth need it for multinode | 16:23 |
duonghq | who is going to the PTG? | 16:23 |
jmccarthy | o/ | 16:23 |
* egonzalez going | 16:24 | |
* hrw go | 16:24 | |
Jeffrey4l | duonghq, there is a attendees confirm section on the page. | 16:24 |
mgoddard_ | o/ | 16:24 |
Jeffrey4l | since i can not be the Dublin, i have ask pbourke_ to hold the meeting. | 16:24 |
Jeffrey4l | thanks pbourke_ | 16:25 |
*** gcheresh has quit IRC | 16:25 | |
duonghq | Jeffrey4l, I saw a guy who name is Jeffrey, it's you or other Jeffrey? | 16:25 |
Jeffrey4l | i will try to sync though mail or etherpad. | 16:25 |
Jeffrey4l | duonghq, yes. it is other gusy. | 16:25 |
duonghq | okay, I'm recalling that I saw that guy in Denver | 16:26 |
*** slaweq has joined #openstack-meeting-4 | 16:26 | |
Jeffrey4l | now let us focus on the topic agenda schedule. | 16:26 |
*** slaweq has quit IRC | 16:26 | |
*** slaweq has joined #openstack-meeting-4 | 16:26 | |
duonghq | should we start voting for topic? | 16:26 |
Jeffrey4l | please add "+1" on the topic you would like to talk on ptg | 16:27 |
*** spsurya__ has joined #openstack-meeting-4 | 16:27 | |
*** slaweq has quit IRC | 16:27 | |
Jeffrey4l | duonghq, yes. | 16:27 |
Jeffrey4l | since we don't have much time. let us start a rough voting. | 16:27 |
*** slaweq has joined #openstack-meeting-4 | 16:27 | |
Jeffrey4l | let us go back to irc after 10 min, please voting the topics. | 16:28 |
spsurya__ | Jeffrey4l: sorry, just joined | 16:29 |
*** caboucha has quit IRC | 16:29 | |
Jeffrey4l | np. | 16:29 |
Jeffrey4l | spsurya__, we are priorize the topics on https://etherpad.openstack.org/p/kolla-rocky-ptg-planning now. | 16:30 |
spsurya__ | Jeffrey4l: nice | 16:31 |
*** slaweq has quit IRC | 16:31 | |
spsurya__ | Jeffrey4l: hope i would be at PTG | 16:33 |
egonzalez | anyone from k8s will attend PTG? | 16:37 |
*** yamahata has quit IRC | 16:39 | |
Jeffrey4l | egonzalez, seems no. | 16:40 |
pbourke_ | how many are working on kolla-k8s right now | 16:40 |
inc0 | I know kfox and jascott are on helm-summit today | 16:40 |
Jeffrey4l | http://stackalytics.com/?module=kolla-kubernetes&metric=commits | 16:40 |
inc0 | but neither are going to ptg | 16:41 |
Jeffrey4l | no much commits recently. | 16:41 |
pbourke_ | Id like to see an honest conversation on the future of this project | 16:41 |
spsurya__ | egonzalez: Jeffrey4l Though i am not from kubernetes...but i have added this to my schedule on Tuesday | 16:42 |
Jeffrey4l | spsurya__, thanks. | 16:43 |
hrw | Jeffrey4l: thx for link. /me -> own commits | 16:43 |
Jeffrey4l | OK. thanks guys for voting topics. | 16:44 |
Jeffrey4l | we have some high priority topics now. | 16:44 |
Jeffrey4l | we will sort it out and move them to the agenda sections later. | 16:45 |
Jeffrey4l | anyone else is welcome to add comments | 16:45 |
spsurya__ | rwellum: around ? | 16:46 |
*** yboaron has joined #openstack-meeting-4 | 16:47 | |
Jeffrey4l | #topic Open Discussion | 16:49 |
Jeffrey4l | hrm, bot doesn't work? | 16:49 |
*** openstack changes topic to "Open Discussion (Meeting topic: kolla)" | 16:49 | |
Jeffrey4l | anyway, any other topic wanna to talk? | 16:49 |
*** salv-orl_ has quit IRC | 16:49 | |
hrw | did someone added kolla to the list for group photo? | 16:50 |
*** salv-orlando has joined #openstack-meeting-4 | 16:50 | |
Jeffrey4l | tbh, i am afraid about kolla-k8s project too. not much contributor now. and we have a strong competitor, openstack-helm | 16:50 |
Jeffrey4l | pbourke, ^^ | 16:50 |
Jeffrey4l | hrw no. | 16:50 |
Jeffrey4l | i will add it after the meeting. | 16:50 |
egonzalez | should we have a cross session with others deployment tools? | 16:51 |
rwellum | Hi spsurya__ | 16:51 |
spsurya__ | egonzalez: +1 | 16:52 |
spsurya__ | rwellum: going to PTG ? | 16:52 |
*** woodard has joined #openstack-meeting-4 | 16:52 | |
Jeffrey4l | egonzalez, i am not sure how that happen. any idea inc0 ? | 16:52 |
egonzalez | I think we had a good discussion for healthchecks which was forgotten this release and could be really good to have | 16:52 |
egonzalez | *had in denver ptg | 16:52 |
rwellum | I am not going | 16:52 |
inc0 | egonzalez Jeffrey4l yeah it was good last time | 16:53 |
Jeffrey4l | does anybody know what's the status of self-health-check in triplo project? | 16:53 |
inc0 | Jeffrey4l: feel free to reach out to PTLs of OpenStack-Ansible, OpenStack-Helm, TripleO and other deployment tools | 16:54 |
rwellum | The main issue with kolla-k8s - is when they decided to split off from kolla-ansible - you guys are pouring new features and fixes into the project and they are not getting added to kolla-k8s | 16:54 |
*** salv-orlando has quit IRC | 16:54 | |
egonzalez | asked to mandre and no progress was done in the cross project goal, guess they made some advance internally in tripleo | 16:54 |
Jeffrey4l | inc0, OK | 16:55 |
egonzalez | rwellum, problem having a single repository are merge privileges, should an ansible expert(no idea in k8s) merge a change related to k8s? | 16:55 |
Jeffrey4l | rwellum, that is a good point. But the mainly issue now is there are fewer contributor ;( | 16:55 |
egonzalez | rwellum, same on the other way | 16:56 |
Jeffrey4l | we can use launchpad to track the same issue for both kolla-anaisble and kolls-k8s | 16:56 |
*** yamamoto has joined #openstack-meeting-4 | 16:56 | |
rwellum | egonzalez: we should have identified a few people to do that - become experts in k8s | 16:56 |
Jeffrey4l | mostly, i think you are meaing the configuration changes. | 16:56 |
rwellum | Keep the two projects synced | 16:56 |
*** dtk has joined #openstack-meeting-4 | 16:57 | |
rwellum | I think Serguei stopped because of the tripleo talks - he didn't want to go back to jinja templates when he'd just converted to go | 16:57 |
rwellum | Jeffrey4l: yes | 16:58 |
Jeffrey4l | does serguei go to triplo project? or openstack-helm? tw | 16:59 |
Jeffrey4l | rwellum, ^ | 16:59 |
inc0 | I don't know if he works with OpenStack upstream any more | 16:59 |
rwellum | Jeffrey4l: he has just focused on k8s - not openstack, I believe | 16:59 |
Jeffrey4l | i see thanks. | 16:59 |
pbourke_ | I think there's a lot of confusion resulting from the existence of both kolla-k8s and openstack-helm | 16:59 |
Jeffrey4l | time is up. thanks for all guys comming. let us end the meeting and move to #openstack-kolla channle. | 17:00 |
Jeffrey4l | #endmeeting | 17:00 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 17:00 | |
openstack | Meeting ended Wed Feb 21 17:00:16 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 17:00 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/kolla/2018/kolla.2018-02-21-16.00.html | 17:00 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/kolla/2018/kolla.2018-02-21-16.00.txt | 17:00 |
openstack | Log: http://eavesdrop.openstack.org/meetings/kolla/2018/kolla.2018-02-21-16.00.log.html | 17:00 |
*** pbourke_ has left #openstack-meeting-4 | 17:00 | |
*** jmccarthy has left #openstack-meeting-4 | 17:00 | |
*** chyka has joined #openstack-meeting-4 | 17:00 | |
hrw | thx | 17:00 |
*** yamamoto has quit IRC | 17:02 | |
*** dklyle has quit IRC | 17:08 | |
*** sadasu has quit IRC | 17:15 | |
*** yamahata has joined #openstack-meeting-4 | 17:15 | |
*** duonghq has quit IRC | 17:17 | |
*** mgoddard_ has left #openstack-meeting-4 | 17:28 | |
*** caoyuan has quit IRC | 17:34 | |
*** david-lyle has joined #openstack-meeting-4 | 17:41 | |
*** egonzalez has quit IRC | 17:55 | |
*** VW_ has joined #openstack-meeting-4 | 17:57 | |
*** VW_ has quit IRC | 17:58 | |
*** VW_ has joined #openstack-meeting-4 | 17:58 | |
*** yamamoto has joined #openstack-meeting-4 | 17:58 | |
*** VW has quit IRC | 18:01 | |
*** yamamoto has quit IRC | 18:04 | |
*** gcheresh has joined #openstack-meeting-4 | 18:21 | |
*** edleafe- has joined #openstack-meeting-4 | 18:34 | |
*** salmankhan has quit IRC | 18:52 | |
*** edleafe| has joined #openstack-meeting-4 | 19:00 | |
*** yamamoto has joined #openstack-meeting-4 | 19:00 | |
*** VW_ has quit IRC | 19:01 | |
*** VW has joined #openstack-meeting-4 | 19:02 | |
*** edleafe- has quit IRC | 19:02 | |
*** VW has quit IRC | 19:03 | |
*** salv-orlando has joined #openstack-meeting-4 | 19:03 | |
*** VW has joined #openstack-meeting-4 | 19:03 | |
*** yamamoto has quit IRC | 19:06 | |
*** diman has quit IRC | 19:26 | |
*** slaweq has joined #openstack-meeting-4 | 19:30 | |
*** salv-orlando has quit IRC | 19:38 | |
*** salv-orlando has joined #openstack-meeting-4 | 19:39 | |
*** salv-orlando has quit IRC | 19:43 | |
*** aniketh has joined #openstack-meeting-4 | 19:49 | |
*** yamamoto has joined #openstack-meeting-4 | 20:02 | |
*** yamamoto has quit IRC | 20:07 | |
*** psachin has joined #openstack-meeting-4 | 20:11 | |
*** edleafe| has quit IRC | 20:26 | |
*** premsankar has quit IRC | 20:28 | |
*** edleafe- has joined #openstack-meeting-4 | 20:28 | |
*** edleafe- has quit IRC | 20:31 | |
*** psachin has quit IRC | 20:33 | |
*** Konan has quit IRC | 20:33 | |
*** hongbin has quit IRC | 20:33 | |
*** psachin has joined #openstack-meeting-4 | 20:38 | |
*** salv-orlando has joined #openstack-meeting-4 | 20:39 | |
*** belmoreira has joined #openstack-meeting-4 | 20:43 | |
*** salv-orlando has quit IRC | 20:44 | |
*** psachin has quit IRC | 20:52 | |
*** psachin has joined #openstack-meeting-4 | 20:55 | |
*** paken has quit IRC | 20:58 | |
*** lyan has quit IRC | 20:59 | |
*** dave-mccowan has quit IRC | 21:00 | |
*** salv-orlando has joined #openstack-meeting-4 | 21:03 | |
*** yamamoto has joined #openstack-meeting-4 | 21:04 | |
*** lpetrut has quit IRC | 21:06 | |
*** yamamoto has quit IRC | 21:09 | |
*** seajay has quit IRC | 21:24 | |
*** paken has joined #openstack-meeting-4 | 21:29 | |
*** belmoreira has quit IRC | 21:37 | |
*** gcheresh has quit IRC | 21:39 | |
*** caoyuan has joined #openstack-meeting-4 | 21:47 | |
*** caoyuan has quit IRC | 21:49 | |
*** psachin has quit IRC | 21:50 | |
*** dmellado has quit IRC | 22:00 | |
*** yboaron has quit IRC | 22:01 | |
*** yamamoto has joined #openstack-meeting-4 | 22:05 | |
*** yamamoto has quit IRC | 22:10 | |
*** salv-orlando has quit IRC | 22:34 | |
*** salv-orlando has joined #openstack-meeting-4 | 22:34 | |
*** yamamoto has joined #openstack-meeting-4 | 22:35 | |
*** salv-orlando has quit IRC | 22:39 | |
*** salmankhan has joined #openstack-meeting-4 | 22:48 | |
*** VW_ has joined #openstack-meeting-4 | 22:50 | |
*** paken has quit IRC | 22:50 | |
*** VW has quit IRC | 22:53 | |
*** salv-orlando has joined #openstack-meeting-4 | 22:53 | |
*** VW_ has quit IRC | 22:54 | |
*** yamamoto has quit IRC | 23:08 | |
*** aniketh has quit IRC | 23:23 | |
*** salv-orlando has quit IRC | 23:32 | |
*** salmankhan has quit IRC | 23:32 | |
*** salv-orlando has joined #openstack-meeting-4 | 23:33 | |
*** bobmel_ has quit IRC | 23:33 | |
*** bobmel has joined #openstack-meeting-4 | 23:34 | |
*** salv-orlando has quit IRC | 23:37 | |
*** seajay has joined #openstack-meeting-4 | 23:54 | |
*** chyka has quit IRC | 23:55 | |
*** chyka has joined #openstack-meeting-4 | 23:56 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!