| *** yamamoto has joined #openstack-helm | 00:08 | |
| *** mihdih has joined #openstack-helm | 00:22 | |
| *** mihdih has quit IRC | 00:23 | |
| *** yangyapeng has quit IRC | 00:38 | |
| *** yangyapeng has joined #openstack-helm | 00:38 | |
| openstackgerrit | Matt McEuen proposed openstack/openstack-helm master: [WIP] Add Swift Chart https://review.openstack.org/508780 | 00:39 |
|---|---|---|
| *** yangyapeng has quit IRC | 00:43 | |
| *** jaypipes has quit IRC | 01:06 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: WIP: LOCI: Images https://review.openstack.org/533829 | 01:06 |
| *** mihdih has joined #openstack-helm | 01:09 | |
| *** yangyapeng has joined #openstack-helm | 01:11 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Ceph: Include relase name in cluster roles to prevent collision https://review.openstack.org/534578 | 01:11 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm-infra master: RBAC: Include relase name in cluster roles to prevent collision https://review.openstack.org/534580 | 01:25 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm-infra master: RBAC: Include release name in cluster roles to prevent collision https://review.openstack.org/534580 | 01:26 |
| *** julim has quit IRC | 01:45 | |
| *** StaceyF has quit IRC | 01:51 | |
| openstackgerrit | Merged openstack/openstack-helm-infra master: Run elasticsearch behind apache https://review.openstack.org/531519 | 02:14 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Docs/Gate: NFS Support https://review.openstack.org/534408 | 02:29 |
| portdirect | so - there has been an update to python-openstackclient (or one of its supporting libs) | 02:37 |
| portdirect | the gate is now dead :( | 02:37 |
| portdirect | we will need to deploy the newton version of openstack-client untill i can work out whats wrong :confused: | 02:37 |
| portdirect | https://www.irccloud.com/pastebin/m5FANCEX/ | 02:38 |
| portdirect | I can reproduce locally - by cloning the latest osc client and `pip install --upgrade` from master | 02:38 |
| portdirect | with the old client from pypi things still work | 02:39 |
| anticw | portdirect: not pinned by version? | 02:43 |
| anticw | portdirect: can we not 'pip install python-openstackclient==$version' ? | 02:43 |
| portdirect | Untill recently we did not need to - as osc client should support versions until eol | 02:44 |
| anticw | yeah but... | 02:44 |
| anticw | just use whatever version you have that you know works and call it a day? | 02:44 |
| anticw | or lmk if you want me to check what i have here | 02:44 |
| portdirect | I'm just about to put a ps in todo that, unless you can? (may be quicker to merge...) | 02:44 |
| anticw | booting env now, sec | 02:45 |
| * anticw imagines disks spinning up | 02:45 | |
| anticw | 2.3.1 i think i have here | 02:46 |
| anticw | yeah, pip will install that without crying though it does download 1.21 jiggasnots of data | 02:47 |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [gate] pin python-openstackclient to 2.3.1 https://review.openstack.org/534592 | 02:51 |
| anticw | portdirect: ^ ... untested of course | 02:51 |
| anticw | let it sock for a few mins and i'll come back in a bit and fix it assuming i got it wrong | 02:51 |
| portdirect | nice - thanks dude | 02:52 |
| anticw | and if you can't let it sock leat it soak | 02:52 |
| *** coboluxx has joined #openstack-helm | 02:52 | |
| portdirect | if that doesnt hit it, we can just use the container to run commands - which ensures we always match the os version we deploying without having to put too much thought into it... | 02:52 |
| anticw | it won't, stuff moved on rebase | 02:53 |
| anticw | will quickly fix | 02:53 |
| SamYaple | snap snap! | 02:54 |
| SamYaple | were waiting | 02:54 |
| anticw | i'm 2 wks behind master and people moved stuff | 02:56 |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [gate] pin python-openstackclient to 2.3.1 https://review.openstack.org/534592 | 02:58 |
| anticw | ok, git log -p is something i should check ... always (often do, but not always) | 02:58 |
| anticw | portdirect: what about python-heatclient? | 02:58 |
| anticw | SamYaple: just NAK the first of anything i ever do, and maybe the 2nd and 3rd for good measure | 02:59 |
| openstackgerrit | Merged openstack/openstack-helm-infra master: Run kibana behind apache https://review.openstack.org/531246 | 02:59 |
| *** mihdih has quit IRC | 03:34 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Gate: Update heat templates to export floating IP https://review.openstack.org/534610 | 03:39 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Gate: Update heat templates to export floating IP https://review.openstack.org/534610 | 03:40 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Gate: Update heat templates to export floating IP https://review.openstack.org/534610 | 03:40 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Docs/Gate: NFS Support https://review.openstack.org/534408 | 03:42 |
| *** julim has joined #openstack-helm | 03:43 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Docs/Gate: NFS Support https://review.openstack.org/534408 | 03:45 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Docs/Gate: NFS Support https://review.openstack.org/534408 | 03:47 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: WIP: LOCI: Images https://review.openstack.org/533829 | 03:48 |
| *** coolsvap has joined #openstack-helm | 04:05 | |
| *** mihdih has joined #openstack-helm | 04:55 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: WIP: LOCI: Images https://review.openstack.org/533829 | 05:10 |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [WIP] by any other word https://review.openstack.org/534623 | 05:14 |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [WIP] meow https://review.openstack.org/534623 | 05:22 |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [WIP] meow https://review.openstack.org/534623 | 05:25 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Ceph: Include relase name in cluster roles to prevent collision https://review.openstack.org/534578 | 05:37 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Glance: fix storage init job to upgrade https://review.openstack.org/534246 | 05:45 |
| openstackgerrit | Jaesang Lee proposed openstack/openstack-helm master: Ceph: fix logic for check ceph version https://review.openstack.org/534630 | 05:58 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm-infra master: Gate: disable unbound and setup dns in nodepool VMs https://review.openstack.org/533433 | 06:18 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Ceph: fix logic for check ceph version https://review.openstack.org/534630 | 06:23 |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [WIP] meow meow https://review.openstack.org/534623 | 06:24 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: WIP: LOCI: Images https://review.openstack.org/533829 | 06:24 |
| *** julim has quit IRC | 07:26 | |
| openstackgerrit | Merged openstack/openstack-helm-infra master: KubeADM-AIO: Move to upstream debian base image https://review.openstack.org/533378 | 08:03 |
| openstackgerrit | Dae Seong Kim proposed openstack/openstack-helm master: fix jobs to create a secret can work on upgrade https://review.openstack.org/534246 | 08:03 |
| *** ljjjustin has joined #openstack-helm | 08:29 | |
| *** julim has joined #openstack-helm | 09:01 | |
| osh-chatbot4 | <longfei.zhang> Hi team, one question about the values.yaml | 09:05 |
| osh-chatbot4 | <longfei.zhang> [genericswitch:switch1] ngs_mac_address = 42:98:d2:44:86:4d device_type = netmiko_ovs_linux | 09:06 |
| osh-chatbot4 | <longfei.zhang> the swithc name in the [genericswitch:switch1] are the variable | 09:07 |
| osh-chatbot4 | <longfei.zhang> how can i define this in the values.yaml? | 09:07 |
| osh-chatbot4 | <longfei.zhang> i may have [] [genericswitch:switch2] or [] [genericswitch:switch77] | 09:07 |
| osh-chatbot4 | <longfei.zhang> it's a configuration for a ini file | 09:09 |
| *** yamamoto has quit IRC | 09:49 | |
| *** yamamoto has joined #openstack-helm | 09:57 | |
| *** ljjjustin has quit IRC | 10:12 | |
| *** yamamoto has quit IRC | 10:31 | |
| *** yamamoto has joined #openstack-helm | 10:31 | |
| *** dims has quit IRC | 10:57 | |
| *** dims has joined #openstack-helm | 10:58 | |
| *** yamamoto has joined #openstack-helm | 11:32 | |
| *** yamamoto has quit IRC | 11:32 | |
| *** yamamoto has joined #openstack-helm | 11:32 | |
| *** julim has quit IRC | 11:36 | |
| *** coolsvap has quit IRC | 11:55 | |
| *** jaypipes has joined #openstack-helm | 12:24 | |
| openstackgerrit | Renis Makadia proposed openstack/openstack-helm-infra master: WIP-Loopback device setup/configuration https://review.openstack.org/530302 | 12:36 |
| *** yangyapeng has quit IRC | 12:38 | |
| openstackgerrit | Renis Makadia proposed openstack/openstack-helm-infra master: WIP-Loopback device setup/configuration https://review.openstack.org/530302 | 13:00 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Ceph: Include release name in cluster roles to prevent collision https://review.openstack.org/534578 | 13:11 |
| *** yangyapeng has joined #openstack-helm | 13:11 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Export ceph metrics via ceph-mgr prometheus plugin https://review.openstack.org/532866 | 13:12 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: helm-toolkit prometheus service annotation clean up https://review.openstack.org/533671 | 13:13 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Export ceph metrics via ceph-mgr prometheus plugin https://review.openstack.org/532866 | 13:13 |
| openstackgerrit | Renis Makadia proposed openstack/openstack-helm-infra master: WIP-Loopback device setup/configuration https://review.openstack.org/530302 | 13:16 |
| openstackgerrit | Merged openstack/openstack-helm master: Gate: Update heat templates to export floating IP https://review.openstack.org/534610 | 13:16 |
| *** ljjjustin has joined #openstack-helm | 13:19 | |
| *** mihdih has quit IRC | 13:44 | |
| *** mihdih has joined #openstack-helm | 13:44 | |
| openstackgerrit | Renis Makadia proposed openstack/openstack-helm-infra master: WIP-Loopback device setup/configuration https://review.openstack.org/530302 | 13:49 |
| *** ljjjustin has quit IRC | 13:59 | |
| *** ljjjustin has joined #openstack-helm | 14:04 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: fix jobs to create a secret can work on upgrade https://review.openstack.org/534246 | 14:05 |
| *** gmmaha has quit IRC | 14:06 | |
| *** gmmaha has joined #openstack-helm | 14:06 | |
| *** MarkBaker has joined #openstack-helm | 14:08 | |
| *** ljjjustin has quit IRC | 14:10 | |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: Disable Elasticsearch NFS snapshot repository by default https://review.openstack.org/532933 | 14:23 |
| *** haobing has joined #openstack-helm | 14:27 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Mariadb: enable storage ownership management on pod start https://review.openstack.org/534776 | 14:49 |
| *** felipemonteiro has joined #openstack-helm | 14:55 | |
| *** felipemonteiro_ has joined #openstack-helm | 14:57 | |
| *** felipemonteiro has quit IRC | 15:01 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Docs/Gate: NFS Support https://review.openstack.org/534408 | 15:06 |
| *** MarkBaker has quit IRC | 15:08 | |
| *** felipemonteiro_ has quit IRC | 15:09 | |
| *** felipemonteiro has joined #openstack-helm | 15:10 | |
| *** mihdih has quit IRC | 15:23 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Docs/Gate: NFS Support https://review.openstack.org/534408 | 15:28 |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [WIP] fix gate https://review.openstack.org/534623 | 15:28 |
| *** yamamoto has quit IRC | 15:31 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: WIP: LOCI: Images https://review.openstack.org/533829 | 15:32 |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: WIP - Nagios Chart https://review.openstack.org/523513 | 15:32 |
| *** haobing has quit IRC | 15:36 | |
| *** coolsvap has joined #openstack-helm | 15:41 | |
| *** yamamoto has joined #openstack-helm | 15:46 | |
| openstackgerrit | Tin Lam proposed openstack/openstack-helm-infra master: Add label to kube-system namespace https://review.openstack.org/534815 | 15:48 |
| *** yamamoto has quit IRC | 15:51 | |
| *** yamamoto has joined #openstack-helm | 16:04 | |
| *** yamamoto has quit IRC | 16:08 | |
| *** brutus333 has joined #openstack-helm | 16:11 | |
| brutus333 | Hello! | 16:12 |
| brutus333 | Looking through the code I seen --set conf.nova.libvirt.virt_type=qemu in tools/deployment/multinode/140-compute-kit.sh file | 16:12 |
| brutus333 | however, that doesn't seem to be a corresponding variable set in values.yaml in nova chart | 16:13 |
| brutus333 | I am interested to make nova work with qemu instead of default kvm provider | 16:14 |
| brutus333 | Is there any plan to create a parameter for this? | 16:14 |
| openstackgerrit | Merged openstack/openstack-helm master: Delete unused volume var_directory https://review.openstack.org/526992 | 16:22 |
| anticw | brutus333: i would think that would work | 16:33 |
| anticw | brutus333: what does 'nova hypervisor-list' say? | 16:34 |
| anticw | portdirect: did you see "openstack network agent list" fails on some (not all) gate runs? | 16:35 |
| openstackgerrit | Merged openstack/openstack-helm master: Ceph: fix logic for check ceph version https://review.openstack.org/534630 | 16:41 |
| portdirect | anticw: I have a ps in to fix that | 16:56 |
| portdirect | somtimes we call the public api a bit too soon | 16:56 |
| *** yamamoto has joined #openstack-helm | 17:08 | |
| *** yamamoto has quit IRC | 17:17 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: RabbitMQ: permit multiple deployments within a single namespace https://review.openstack.org/534847 | 17:33 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: RabbitMQ: permit multiple deployments within a single namespace https://review.openstack.org/534847 | 17:35 |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: WIP - Nagios Chart https://review.openstack.org/523513 | 17:36 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Memcached: permit multiple deployments within a single namespace https://review.openstack.org/534851 | 17:39 |
| srwilkers | brutus333: the variable gets merged into nova's values.yaml file via the --set flag used in that script, so it'll get rendered in to nova.conf appropriately. to prevent all the openstack service's values files getting massive, we've pruned them down and relied on defaults for the settings that have them | 17:40 |
| srwilkers | but that being said, if you wish to run with QEMU instead, the flag used there will certainly enable it for you | 17:40 |
| *** jabadia has joined #openstack-helm | 17:44 | |
| *** jabadia has left #openstack-helm | 17:45 | |
| *** MarkBaker has joined #openstack-helm | 17:46 | |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [WIP] fix gate https://review.openstack.org/534623 | 17:53 |
| anticw | SamYaple: wanna nit pick the hell out of ^ ? | 17:53 |
| anticw | in the sense you're going to suggest a better way of doing things not just point out it's rancid and will cause an increase in global warming | 17:54 |
| v1k0d3n | snickers anyone? :) | 17:54 |
| *** MarkBaker has quit IRC | 17:55 | |
| *** julim has joined #openstack-helm | 18:02 | |
| *** felipemonteiro has quit IRC | 18:06 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Memcached: permit multiple deployments within a single namespace https://review.openstack.org/534851 | 18:29 |
| *** felipemonteiro has joined #openstack-helm | 18:31 | |
| anticw | portdirect: re: gate; is there a clean way to run a command early on (first thing) ... and just return success immediately? | 18:48 |
| anticw | portdirect: the code as-is won't run reliable on some hosts, i'm going to suggest we detect those and just terminate immediately with a message and success | 18:49 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: RabbitMQ: permit multiple deployments within a single namespace https://review.openstack.org/534847 | 18:56 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Memcached: permit multiple deployments within a single namespace https://review.openstack.org/534851 | 18:56 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Memcached: permit multiple deployments within a single namespace https://review.openstack.org/534851 | 18:57 |
| *** coolsvap has quit IRC | 19:09 | |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [gate] pin python-openstackclient to 2.3.1 https://review.openstack.org/534592 | 19:19 |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [WIP] fix gate https://review.openstack.org/534623 | 19:19 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Memcached: permit multiple deployments within a single namespace https://review.openstack.org/534851 | 19:31 |
| *** pcarver has joined #openstack-helm | 19:38 | |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm master: WIP - Add LMA components to dev and multinode deployments https://review.openstack.org/534893 | 19:55 |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm master: WIP - Add LMA components to dev and multinode deployments https://review.openstack.org/534893 | 19:58 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Memcached: permit multiple deployments within a single namespace https://review.openstack.org/534851 | 20:07 |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm master: WIP - Add LMA components to multinode deployments https://review.openstack.org/534893 | 20:09 |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm master: WIP - Add LMA components to multinode deployments https://review.openstack.org/534893 | 20:11 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Docs/Gate: NFS Support https://review.openstack.org/534408 | 20:12 |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm master: WIP - Add LMA components to multinode deployments https://review.openstack.org/534893 | 20:12 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Docs/Gate: NFS Support https://review.openstack.org/534408 | 20:14 |
| openstackgerrit | Alan Meadows proposed openstack/openstack-helm-infra master: Provide additional flexibility for the calico chart https://review.openstack.org/532988 | 20:15 |
| openstackgerrit | Alan Meadows proposed openstack/openstack-helm-infra master: Provide additional flexibility for the calico chart https://review.openstack.org/532988 | 20:24 |
| openstackgerrit | Gabe Maurer proposed openstack/openstack-helm master: [WIP] Consolidate db functionality https://review.openstack.org/532998 | 20:24 |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm master: WIP - Add LMA components to multinode deployments https://review.openstack.org/534893 | 20:30 |
| openstackgerrit | Alan Meadows proposed openstack/openstack-helm-infra master: Provide additional flexibility for the calico chart https://review.openstack.org/532988 | 20:31 |
| *** julim has quit IRC | 20:31 | |
| *** julim has joined #openstack-helm | 20:33 | |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm master: Gate: Deploy service specific rabbit and memcache in multinode gate https://review.openstack.org/534926 | 20:34 |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: WIP - Nagios Chart https://review.openstack.org/523513 | 20:36 |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [WIP] fix gate https://review.openstack.org/534623 | 20:44 |
| openstackgerrit | Tin Lam proposed openstack/openstack-helm master: [Do not merge] Add network policy https://review.openstack.org/531263 | 21:37 |
| openstackgerrit | Mark Burnett proposed openstack/openstack-helm-infra master: Provide additional flexibility for the calico chart https://review.openstack.org/532988 | 21:38 |
| openstackgerrit | Matt McEuen proposed openstack/openstack-helm master: [WIP] Add Swift Chart https://review.openstack.org/508780 | 21:49 |
| openstackgerrit | Tin Lam proposed openstack/openstack-helm master: [Do not merge] Add network policy https://review.openstack.org/531263 | 21:57 |
| anticw | portdirect: static ipcalc (one i put on github) seems to have diff args :( should have checked | 21:58 |
| portdirect | I'll knock up a little container with one in | 21:59 |
| portdirect | should get us round these distro diffs for somthing so simple | 21:59 |
| anticw | so when i check man-page (googled it) it's not clear why it's not working | 22:03 |
| anticw | so maybe it's not quite as simple as diff args but something we pass in looks iffy | 22:04 |
| anticw | i added -x | 22:04 |
| SamYaple | i cannot believe you are fetching stuff from the web like that. it hurtsto look at :O | 22:04 |
| SamYaple | but this islife | 22:04 |
| anticw | SamYaple: as ugly as it is ... we fetch all sorts of things from the web | 22:06 |
| anticw | apt-get update does that | 22:07 |
| SamYaple | that is way different and you know it:P | 22:07 |
| anticw | except in many ways it's not | 22:07 |
| SamYaple | except it has verification and validation based on trusted keys | 22:08 |
| SamYaple | i dont actually care *where* it comes from, so long as it can be validated and trusted (which this code isnt doing) | 22:08 |
| anticw | apt does | 22:08 |
| openstackgerrit | Tin Lam proposed openstack/openstack-helm-infra master: Add label to namespaces https://review.openstack.org/534815 | 22:08 |
| anticw | docker run ... likely wont' | 22:08 |
| SamYaple | what? | 22:08 |
| SamYaple | i guess i should clarify | 22:08 |
| anticw | if we create a small docker image for it ... how does anyone really know they can trust it? | 22:09 |
| anticw | it's a metter of perspective | 22:09 |
| SamYaple | if you were also pulling in a asc and validating the file you downloaded, then i wouldnt have mentioned anything | 22:09 |
| SamYaple | all in all, it doesnt bother me, it just hurts my soul | 22:09 |
| anticw | SamYaple: but the asc could be bogus | 22:09 |
| SamYaple | well not when pulled over https where the ca certs are preinstalled (and trusted) | 22:10 |
| anticw | i'm not trying to argue just pointing out that as bad as it is, we're effectively not doing better elsewhere | 22:10 |
| anticw | that doesn't make it ok though | 22:10 |
| SamYaple | i disagree | 22:10 |
| SamYaple | as does most(all?) of the world | 22:10 |
| SamYaple | container world at least | 22:10 |
| anticw | apt pkgs i think have some degress of trust, not the best example | 22:10 |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm master: WIP - Add LMA components to multinode deployments https://review.openstack.org/534893 | 22:11 |
| SamYaple | right but the argument for the other side that you are making is "some stuff isnt perfect, we dont really need to try" | 22:11 |
| anticw | SamYaple: i think to portdirect's point and your concern, a container with utils would be fine... a container from someone who looks accountable | 22:11 |
| anticw | that's certainly better than a random url | 22:11 |
| anticw | whilst it doesn't really make it secure, it makes it accountable in some sense | 22:11 |
| SamYaple | i would agree with that, yes | 22:11 |
| portdirect | just build it in the gate - prob solved | 22:11 |
| SamYaple | you do, at somepoint, have to trust someone | 22:11 |
| SamYaple | without it you have no trust of any kind | 22:11 |
| anticw | portdirect: build from where? fetch source from the internets? | 22:11 |
| SamYaple | and no dns | 22:11 |
| anticw | SamYaple: if you want a recent ktail i leave one at https://f00f.org/k8s/ktail ... [.gz] ... it's over ssl from a cdn ... go on, download it ... run it | 22:13 |
| anticw | SamYaple: to be fair, the trust issue is real and we shouldn't merge as-is | 22:13 |
| anticw | i will leave for a bit long as i debug other build issues and remove that part of the diff when we have something less awful | 22:14 |
| SamYaple | you know i wont. but if you provided me an keyid of some kind to lookup a gpg key from known trusted locations to validate it... i would | 22:14 |
| SamYaple | as thats how, in essence, we are pulling in all other binaries | 22:14 |
| openstackgerrit | Alan Meadows proposed openstack/openstack-helm-infra master: Provide additional flexibility for the calico chart https://review.openstack.org/532988 | 22:15 |
| anticw | SamYaple: i could sign it ... but i'm not sure that would really make you feel better, because why should you trust me? i don't even trust me | 22:16 |
| SamYaple | obviously i dont trust you.thats a given | 22:16 |
| anticw | that's why i frequently change my password to lock myself out | 22:16 |
| SamYaple | :P | 22:16 |
| SamYaple | yes you do have to trust the key that signed it, but that does ensure that it *is* the copy you want to give me | 22:17 |
| SamYaple | and the CDN or someone else hasnt modified it | 22:17 |
| SamYaple | and *thats* the important part | 22:17 |
| SamYaple | im getting exactly what you want me to get, and i can validate that | 22:17 |
| anticw | i know, and i know you know, i was just being irritating | 22:17 |
| SamYaple | im just more of the opinion if it can be made a bit more secure, it should be. thats all. i didnt even -1 the ipcalc fetching :) | 22:18 |
| anticw | yeah, and i agree with you | 22:19 |
| anticw | so it won't get merged doing that, fair point | 22:19 |
| anticw | we'll just get a version that works deliverable via a means that's verifiable and accountable | 22:19 |
| SamYaple | probably for the best | 22:20 |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [WIP] fix gate https://review.openstack.org/534623 | 22:21 |
| anticw | SamYaple: to be honest, if you hadn't slapped me over this ... i would have let it slide ... hence the value of letting me know when it's just too ugly, so comments much appreciated | 22:23 |
| SamYaple | i just like to cause problems | 22:24 |
| * srwilkers nods | 22:24 | |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm master: WIP - Add LMA components to multinode deployments https://review.openstack.org/534893 | 22:26 |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm-infra master: Provide additional flexibility for the calico chart https://review.openstack.org/532988 | 22:41 |
| openstackgerrit | Tin Lam proposed openstack/openstack-helm master: Added uninstall information https://review.openstack.org/527496 | 23:07 |
| *** felipemonteiro has quit IRC | 23:27 | |
| *** felipemonteiro has joined #openstack-helm | 23:27 | |
| openstackgerrit | Steve Wilkerson proposed openstack/openstack-helm-infra master: Change flush interval for fluentbit https://review.openstack.org/534972 | 23:46 |
| openstackgerrit | Chris Wedgwood proposed openstack/openstack-helm master: [WIP/DNM] fix gate https://review.openstack.org/534623 | 23:48 |
| anticw | ^ SamYaple gross wget hack removed, test of a utility container replacing it | 23:49 |
| anticw | pending feedback on that we'll do some more cleanups and extend it perhaps before merging | 23:49 |
| SamYaple | anticw: i swear... if i open that and find tabs everywhere ill be upset! | 23:57 |
| openstackgerrit | Pete Birley proposed openstack/openstack-helm-infra master: KubeADM: Increase pod limit for hosts https://review.openstack.org/534975 | 23:57 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!