*** hongbin has joined #openstack-zun | 00:40 | |
*** caisan has joined #openstack-zun | 01:13 | |
*** openstackgerrit has joined #openstack-zun | 01:40 | |
openstackgerrit | Hongbin Lu proposed openstack/zun master: Move parse_image_name to compute manager https://review.openstack.org/554074 | 01:40 |
---|---|---|
openstackgerrit | Hongbin Lu proposed openstack/zun master: Introduce a config for default image driver https://review.openstack.org/554069 | 01:40 |
openstackgerrit | Hongbin Lu proposed openstack/zun master: Pull/Search image from default driver https://review.openstack.org/554077 | 01:40 |
openstackgerrit | Hongbin Lu proposed openstack/zun master: Move pull_image to container driver https://review.openstack.org/554079 | 01:40 |
openstackgerrit | Hongbin Lu proposed openstack/zun master: [WIP] Move search_image to container driver https://review.openstack.org/554080 | 01:40 |
openstackgerrit | Hongbin Lu proposed openstack/zun master: [WIP] Move create_image and upload_image_data https://review.openstack.org/554081 | 01:40 |
*** kevzha01 has joined #openstack-zun | 01:43 | |
*** kevzha01 is now known as kevinz | 01:44 | |
*** fengshengqin has joined #openstack-zun | 01:47 | |
*** caowei has joined #openstack-zun | 02:03 | |
openstackgerrit | Hongbin Lu proposed openstack/zun master: Move search_image to container driver https://review.openstack.org/554080 | 02:05 |
openstackgerrit | Hongbin Lu proposed openstack/zun master: Move create_image and upload_image_data https://review.openstack.org/554081 | 02:05 |
openstackgerrit | caishan proposed openstack/zun master: Add essential comments for API image search https://review.openstack.org/554401 | 02:37 |
hongbin | fengshengqin: ready to run the meeting? | 02:59 |
fengshengqin | yes | 03:00 |
fengshengqin | #startmeeting zun | 03:00 |
openstack | Meeting started Tue Mar 20 03:00:29 2018 UTC and is due to finish in 60 minutes. The chair is fengshengqin. Information about MeetBot at http://wiki.debian.org/MeetBot. | 03:00 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 03:00 |
*** openstack changes topic to " (Meeting topic: zun)" | 03:00 | |
openstack | The meeting name has been set to 'zun' | 03:00 |
fengshengqin | #topic Roll Call | 03:00 |
*** openstack changes topic to "Roll Call (Meeting topic: zun)" | 03:00 | |
hongbin | o/ | 03:00 |
kevinz | o/ | 03:00 |
fengshengqin | Thanks for joining the meeting, hongbin, kivenz | 03:01 |
hongbin | :) | 03:01 |
kevinz | :-) | 03:01 |
fengshengqin | #topic Announcements | 03:01 |
*** openstack changes topic to "Announcements (Meeting topic: zun)" | 03:01 | |
fengshengqin | Two Zun's presentations were selected at OpenStack Vancouver Summit | 03:02 |
fengshengqin | 1. Build Your Serverless Container Cloud with OpenStack and Kubernetes #link https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/20734/build-your-serverless-container-cloud-with-openstack-and-kubernetes 2. Integration of Openstack Zun with Kata containers #link https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/21193/integration-of-openstack-zun-with-kata-containers | 03:02 |
* hongbin applaud | 03:02 | |
hongbin | #link https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/20734/build-your-serverless-container-cloud-with-openstack-and-kubernetes | 03:02 |
hongbin | #link https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/21193/integration-of-openstack-zun-with-kata-containers | 03:02 |
fengshengqin | thanks hongbin | 03:03 |
kevinz | Cool | 03:03 |
hongbin | congrat kevinz | 03:03 |
kevinz | Thanks :-) | 03:03 |
fengshengqin | congrat , too | 03:03 |
hongbin | i believe this would be a very good presentation | 03:03 |
hongbin | kevinz: do you confirm the travel to canada? | 03:03 |
kevinz | hongbin: Yes. I can come | 03:04 |
hongbin | awesome | 03:04 |
kevinz | now applying for visa | 03:04 |
hongbin | great news | 03:04 |
fengshengqin | #topic Blueprints | 03:05 |
*** openstack changes topic to "Blueprints (Meeting topic: zun)" | 03:05 | |
fengshengqin | 1. OpenStack as a virtual Kubernetes node (assignee: kevinz) | 03:05 |
kevinz | Hi | 03:05 |
fengshengqin | hi, how about your presentation to introduce zun in HongKong last week | 03:06 |
kevinz | last week prepared a Zun session in Hong Kong this Friday | 03:06 |
fengshengqin | is there anything progress about this BP | 03:06 |
kevinz | this session will happen this Friday :-) | 03:07 |
kevinz | Still working on Capsule Create(golang support) | 03:07 |
fengshengqin | oh, i make a mistake | 03:08 |
kevinz | Meet several test case failed. But now most of them are OK | 03:08 |
fengshengqin | great news! | 03:08 |
kevinz | beside, I've done a investigation about virtual-kubelet | 03:08 |
hongbin | cool | 03:08 |
kevinz | I'll paste the investigation doc to googledoc | 03:08 |
kevinz | That's all from my side | 03:09 |
fengshengqin | thanks, kevinz | 03:09 |
kevinz | my pleasure | 03:10 |
fengshengqin | 2. Support remove image in zun (assignee: pengdake) | 03:10 |
hongbin | i believe pengdake is not here | 03:10 |
hongbin | he wanted to discuss his image delete patch (i recalled) | 03:10 |
fengshengqin | yes | 03:11 |
hongbin | a question for you guys: | 03:11 |
fengshengqin | I think he is missing policy rule for image_delete api | 03:11 |
hongbin | do you have use cases for the image API (image-create, image-delete, image-show) | 03:11 |
caisan | hongbin: ping | 03:11 |
hongbin | caisan: hi | 03:11 |
hongbin | caisan: thanks for joining, you are at the right time, we are discussing your patch | 03:12 |
fengshengqin | yes, we do. | 03:12 |
hongbin | fengshengqin: what are your use cases ? | 03:12 |
caisan | hongbin: yes, i have implemented the image-delete code | 03:12 |
fengshengqin | delete image in docker data | 03:13 |
hongbin | interesting | 03:13 |
fengshengqin | if glance driver, need delete the tar in the specified path | 03:13 |
caisan | fengshengqin: policy ? | 03:13 |
hongbin | it sounds like this is the operation for cloud admins ? | 03:14 |
hongbin | e.g. cloud admins want to delete image from docker daemon and glance tarball | 03:15 |
hongbin | however, docker daemon and glance tar is hidden from normal users (non-admin) | 03:15 |
hongbin | this sounds like we should make image API as admin API | 03:15 |
fengshengqin | this is a good idea. | 03:16 |
hongbin | caisan: ack | 03:16 |
hongbin | fengshengqin: ack | 03:16 |
hongbin | caisan: what do you think? | 03:16 |
fengshengqin | https://github.com/openstack/zun/tree/master/zun/common/policies | 03:16 |
caisan | hongbin: you means cloud user just can use the image supported by cloud platform? | 03:17 |
hongbin | caisan: normal users would simply run the container with an image | 03:17 |
caisan | just that? | 03:18 |
hongbin | yes | 03:18 |
hongbin | i believe normal users won't care the specific path of glance tarball | 03:18 |
hongbin | or the docker image stored in a specific compute host | 03:18 |
hongbin | since all the hosts are hidden from normal users | 03:19 |
caisan | this strategy reminds me of openstack/trove which do the same way of managing database image. | 03:19 |
hongbin | (only admin can list the hosts) | 03:19 |
hongbin | yes, although i am not quite familiar with trove | 03:19 |
hongbin | caisan: for your patch, i believe most of the code will be used, what need to be change is the police | 03:20 |
hongbin | caisan: change the police to make it admin only, that is it | 03:20 |
hongbin | like this: check_str=base.RULE_ADMIN_API | 03:21 |
hongbin | caisan: any comment ? | 03:22 |
fengshengqin | anything else? | 03:22 |
fengshengqin | 3. Introduce quota for containers (assignee: TBD) | 03:23 |
caisan | hongbin: yes, i got it. but this cloud be not inconvenience for normal user if they pull the wrong image | 03:23 |
caisan | sorry guys, i am poor in english :( | 03:23 |
hongbin | caisan: i think zun is for pulling hte image and mange them | 03:23 |
caisan | typing slowly | 03:23 |
hongbin | caisan: normally users just want to provide the name of the image, and let zun to pull it | 03:24 |
hongbin | if the image is wrong, zun is responsible to deal with it | 03:24 |
hongbin | caisan: think about it in nova, do the users are responsible to pull down the glance image ? | 03:25 |
hongbin | caisan: i believe they are not, nova will manage the glance image tarball internally | 03:25 |
caisan | hongbin: yes, i got the point. but the user can delete the image in glance. | 03:25 |
hongbin | caisan: yes, this is the same as zun ? | 03:26 |
caisan | hongbin: so the add the policy , normal user will delete the image in glance or docker if the need ? | 03:27 |
hongbin | caisan: yes | 03:27 |
hongbin | caisan: and i believe they won't have access to docker, so yes, they can delete it in glance | 03:27 |
caisan | hongbin: well, at least, docker can not be accessed. yes | 03:27 |
hongbin | agree | 03:28 |
fengshengqin | 3. Introduce quota for containers (assignee: TBD) | 03:28 |
fengshengqin | as i known, Keystone has supportted unified limits in Queen | 03:28 |
hongbin | fengshengqin: this one is assigned to kien and kien doesn't seem to be here | 03:29 |
hongbin | yes | 03:29 |
hongbin | i haven't looked into the unified limits in keystone yet, but this would be an interesting investigation | 03:29 |
fengshengqin | currently, nova manage the quota itself, not registering the quota to keystone | 03:30 |
hongbin | yes | 03:30 |
fengshengqin | i don't known how supports it for zun | 03:31 |
hongbin | fengshengqin: no worry, kien will figure it out (i believe) :) | 03:31 |
fengshengqin | OK, let's discuss this next time | 03:32 |
hongbin | +1 | 03:32 |
fengshengqin | #topic Bugs | 03:32 |
*** openstack changes topic to "Bugs (Meeting topic: zun)" | 03:33 | |
fengshengqin | 1. Cannot create container with kata runtime (assignee: hongbin) | 03:33 |
hongbin | for this one, i believe the kata team is investigating the issue | 03:33 |
hongbin | they doubt that the issue is about the ipv6 support in kata | 03:33 |
hongbin | they are working on patching the runtime and give it another try | 03:34 |
hongbin | that is all about this bug | 03:34 |
hongbin | fengshengqin: ^^ | 03:34 |
fengshengqin | thanks, hongbin, let's wait for new patch for kata | 03:34 |
fengshengqin | 2. Error on running privsep helper command (assignee: hongbin) | 03:35 |
hongbin | for this one, i have several patches up for reviews | 03:35 |
hongbin | #link https://review.openstack.org/#/c/544155/ | 03:35 |
hongbin | #link https://review.openstack.org/#/c/554021/ | 03:35 |
hongbin | this bug was introduced after the adding of privsep | 03:36 |
hongbin | privsep is the daemon for executing all the shell commands | 03:36 |
fengshengqin | so we can execute the sudo command? | 03:36 |
hongbin | so this bug basically breaks all the command execution | 03:36 |
hongbin | fengshengqin: in before, yes, but we switch to privsep for security reasons | 03:37 |
hongbin | fengshengqin: right now, all the shell commands are executed by privsep daemon | 03:37 |
fengshengqin | i got, i will review again. | 03:37 |
hongbin | thanks | 03:37 |
fengshengqin | #topic Open Discussion | 03:38 |
*** openstack changes topic to "Open Discussion (Meeting topic: zun)" | 03:38 | |
fengshengqin | how about containerize for zun? | 03:38 |
hongbin | what do you mean by containerize? | 03:38 |
fengshengqin | i mean zun is installed in a container | 03:39 |
hongbin | yes | 03:39 |
hongbin | i believe we have BPs for that, let me find the link | 03:39 |
hongbin | #link https://blueprints.launchpad.net/zun/+spec/zun-wsproxy-as-container | 03:39 |
hongbin | #link https://blueprints.launchpad.net/zun/+spec/zun-api-as-container | 03:40 |
fengshengqin | ok, i will try to do something about it. | 03:40 |
hongbin | cool | 03:40 |
fengshengqin | now i have a question | 03:41 |
hongbin | go ahead | 03:41 |
fengshengqin | such as zun will execute df in container | 03:41 |
hongbin | could you explain it a bit? | 03:42 |
fengshengqin | df get the info of the container, not for the host | 03:42 |
hongbin | oh, i see | 03:42 |
hongbin | zun exec <container> <command> | 03:42 |
hongbin | above is the exec command, would it be useful ? | 03:43 |
fengshengqin | so zun should send the commant to host, then host return infos to zun which is installed in continer. | 03:43 |
fengshengqin | i think it is not | 03:44 |
hongbin | you mean the exec command? | 03:44 |
hongbin | zun exec <container> df | 03:44 |
hongbin | this is equals to "docker exec <container> df" | 03:44 |
caisan | shouldn't it return the info of the container ? | 03:45 |
fengshengqin | it will return the df info of container | 03:45 |
hongbin | yes | 03:46 |
caisan | this is what we expect | 03:46 |
fengshengqin | but i want get the host info | 03:46 |
hongbin | oh, i see | 03:46 |
hongbin | there is an admin api | 03:46 |
caisan | fengshengqin: you mean docker daemon host ? | 03:46 |
hongbin | $ zun host-list | 03:46 |
hongbin | $ zun host-show | 03:47 |
caisan | cool | 03:47 |
hongbin | this will return some host information i believe | 03:47 |
fengshengqin | what about lspci? | 03:47 |
hongbin | this is a good question | 03:48 |
fengshengqin | all command in zun code which get host info? | 03:48 |
hongbin | fengshengqin: ?? | 03:49 |
hongbin | fengshengqin: don't get your last question | 03:49 |
fengshengqin | I mean zun has installed in container, when zun execute the lspci/df/..., it will return the info of container | 03:51 |
fengshengqin | but i want get the info of host | 03:51 |
hongbin | fengshengqin: right now, zun is installed in the host (not in the container) right ? | 03:52 |
fengshengqin | yes | 03:52 |
hongbin | suppose zun is containerized, it is about the containerization of the zun-api and zun-wsproxy | 03:53 |
hongbin | zun-compute should not be containerized ( i think) | 03:53 |
hongbin | and all the commands are executed by zun-compute | 03:53 |
fengshengqin | oh,i see. | 03:53 |
hongbin | therefore, zun-compute will execute those commands in host | 03:53 |
fengshengqin | so we want send the command to host | 03:54 |
hongbin | yes, definitely | 03:54 |
fengshengqin | This is not a mature idea, I'll think about it, also hope to get your suggestions | 03:54 |
hongbin | sure | 03:54 |
fengshengqin | anything else? | 03:55 |
hongbin | no from my side | 03:55 |
fengshengqin | thanks for joining the meeting again, see you next time | 03:55 |
hongbin | fengshengqin: thanks for chairing the meeting, i believe you did a good job :) | 03:55 |
fengshengqin | thanks | 03:56 |
hongbin | yes, see you all | 03:56 |
fengshengqin | #endmeeting | 03:56 |
*** openstack changes topic to "Container management service for OpenStack" | 03:56 | |
openstack | Meeting ended Tue Mar 20 03:56:33 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 03:56 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/zun/2018/zun.2018-03-20-03.00.html | 03:56 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/zun/2018/zun.2018-03-20-03.00.txt | 03:56 |
openstack | Log: http://eavesdrop.openstack.org/meetings/zun/2018/zun.2018-03-20-03.00.log.html | 03:56 |
*** hongbin has quit IRC | 04:00 | |
*** rajat has joined #openstack-zun | 04:03 | |
*** deepak_ has joined #openstack-zun | 04:04 | |
*** deepak_ has quit IRC | 04:56 | |
*** deepak_ has joined #openstack-zun | 05:10 | |
*** caisan has quit IRC | 05:54 | |
*** caisan has joined #openstack-zun | 05:57 | |
*** masber has quit IRC | 06:12 | |
*** goutham has joined #openstack-zun | 06:24 | |
goutham | Hi all https://etherpad.openstack.org/p/Cliff_Usage_in_Python-Zunclient the etherpad to update your views on | 06:26 |
goutham | https://blueprints.launchpad.net/zun/+spec/cliff-in-python-zunclient this blueprint. | 06:26 |
goutham | Can anyone just post the link of the meetings?/ | 06:27 |
openstackgerrit | caishan proposed openstack/zun master: Adds image delete to server side https://review.openstack.org/550762 | 06:36 |
*** masber has joined #openstack-zun | 06:44 | |
*** masber has quit IRC | 06:47 | |
*** masber has joined #openstack-zun | 06:47 | |
openstackgerrit | caishan proposed openstack/zun master: Adds image delete to server side https://review.openstack.org/550762 | 07:17 |
caisan | goutham: https://wiki.openstack.org/wiki/Zun#Meetings | 08:22 |
openstackgerrit | wangqi proposed openstack/zun-ui master: add documentation link to README https://review.openstack.org/554465 | 09:04 |
openstackgerrit | Merged openstack/zun-ui master: add documentation link to README https://review.openstack.org/554465 | 09:31 |
openstackgerrit | Merged openstack/zun master: Introduce rootwrap and filter https://review.openstack.org/544155 | 09:42 |
openstackgerrit | Merged openstack/zun master: Modify part of the code for the rebuilding process https://review.openstack.org/553933 | 09:42 |
*** kevinz has quit IRC | 09:52 | |
goutham | Zun Meetings are held at what time?? 3:00 UTC today r8?? | 09:57 |
goutham | right** | 09:57 |
*** caisan has quit IRC | 10:07 | |
openstackgerrit | Merged openstack/zun stable/queens: restart_policy can not be None https://review.openstack.org/554027 | 10:22 |
openstackgerrit | Merged openstack/zun stable/queens: Can't delete error container that non-existent in docker https://review.openstack.org/554025 | 10:31 |
openstackgerrit | Merged openstack/zun stable/queens: api-ref: fix the type of restart_policy https://review.openstack.org/554028 | 10:31 |
openstackgerrit | Merged openstack/zun stable/queens: Failed to update memory for container https://review.openstack.org/554024 | 10:31 |
openstackgerrit | Merged openstack/zun master: Delete container failed if container host is None https://review.openstack.org/553687 | 10:31 |
*** goutham has quit IRC | 10:35 | |
*** masber has quit IRC | 10:43 | |
*** caowei has quit IRC | 10:49 | |
*** masber has joined #openstack-zun | 11:08 | |
*** masuberu has joined #openstack-zun | 11:12 | |
*** masber has quit IRC | 11:14 | |
*** caowei has joined #openstack-zun | 11:55 | |
*** openstackgerrit has quit IRC | 12:33 | |
*** hongbin has joined #openstack-zun | 13:30 | |
*** openstackgerrit has joined #openstack-zun | 13:59 | |
openstackgerrit | Hongbin Lu proposed openstack/zun stable/queens: Introduce rootwrap and filter https://review.openstack.org/554551 | 13:59 |
*** goutham has joined #openstack-zun | 14:45 | |
goutham | HI all will the meeting start here only?? | 14:55 |
*** goutham has quit IRC | 14:58 | |
*** cooldharma06 has joined #openstack-zun | 15:16 | |
*** AndChat|94569 has joined #openstack-zun | 15:26 | |
*** cooldharma06 has quit IRC | 15:26 | |
hongbin | goutham: yes | 15:42 |
*** masuberu has quit IRC | 16:18 | |
*** AndChat|94569 has quit IRC | 16:29 | |
openstackgerrit | Merged openstack/zun-tempest-plugin master: Add tempest test for the 'nets' parameter https://review.openstack.org/552270 | 16:39 |
openstackgerrit | Merged openstack/zun-tempest-plugin master: Cleanup the created security groups https://review.openstack.org/544160 | 16:39 |
openstackgerrit | Merged openstack/zun-tempest-plugin master: Updated from global requirements https://review.openstack.org/553306 | 16:42 |
*** masuberu has joined #openstack-zun | 16:59 | |
*** caowei has quit IRC | 17:03 | |
*** masuberu has quit IRC | 17:33 | |
*** harlowja has joined #openstack-zun | 18:23 | |
*** masber has joined #openstack-zun | 20:02 | |
*** masber has quit IRC | 20:32 | |
*** openstackgerrit has quit IRC | 20:33 | |
*** openstackgerrit has joined #openstack-zun | 21:40 | |
openstackgerrit | Merged openstack/zun stable/queens: Correct the response code of attach https://review.openstack.org/554022 | 21:40 |
*** hongbin has quit IRC | 22:44 | |
*** harlowja has quit IRC | 22:57 | |
*** masber has joined #openstack-zun | 23:03 | |
*** masuberu has joined #openstack-zun | 23:04 | |
*** masber has quit IRC | 23:08 | |
*** harlowja has joined #openstack-zun | 23:49 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!