Wednesday, 2018-09-19

portdirector you wanting to totally seperate from the keystone catalog?00:00
cfriesenwe would like to ensure that all nova operations go via the proxy.  on our current baremetal system this was done by having all the endpoints in keystone hit the proxy00:00
openstackgerritPete Birley proposed openstack/openstack-helm master: Nova: Remove unused default values in values.yaml  https://review.openstack.org/60352500:02
cfriesenwhile the "real" nova is listening on a separate port that isn't in keystone00:02
portdirectroger, would using vhosts work here? or you need port based addressing of endpoints?00:02
portdirectI ask as i think i can see a awy to do it via request headers, but would need to think for a bit on how to do it cleanly as a mitm proxy as you describe via ports00:03
portdirectwould it be appropriate to think of your proxy as being a simple  proxy ala nginx/haproxy or summat more fancy?00:05
cfriesennot sure.  our existing proxy code uses ports, but I'm open to suggestions.   It's somewhat more fancy...some commands get passed on to a sort of orchestration engine before being passed to the "real" nova-api00:05
portdirectroger - I'll noodle on it for a bit over some noodles and get back to you if i think of anything simple00:07
cfriesensounds good, thanks00:07
cfriesenI'm off to supper00:07
portdirectspitballing here - the simplest may be to add a `pod_port` param that defaults to the `internal` port if not set in the endpoints section00:07
portdirectsame - catch you in a bit00:07
*** sthussey has quit IRC00:15
*** evrardjp has quit IRC01:12
openstackgerritChris Wedgwood proposed openstack/openstack-helm master: Rally: Update chart  https://review.openstack.org/58762101:25
openstackgerritChris Wedgwood proposed openstack/openstack-helm master: RFC: Add reference values.yaml template for new charts  https://review.openstack.org/57723401:26
openstackgerritChris Wedgwood proposed openstack/openstack-helm-infra master: Add calico-node dependency on calico-settings job  https://review.openstack.org/60084101:33
*** chenyb4 has joined #openstack-helm01:35
*** martin_ken has quit IRC01:59
openstackgerritTin Lam proposed openstack/openstack-helm master: Fix .zuul.yaml  https://review.openstack.org/60295002:36
openstackgerritTin Lam proposed openstack/openstack-helm-infra master: Implements network policy toolkit function  https://review.openstack.org/59688802:48
openstackgerritTin Lam proposed openstack/openstack-helm-infra master: Implements network policy toolkit function  https://review.openstack.org/59688802:52
openstackgerritTin Lam proposed openstack/openstack-helm-infra master: Add network policy toolkit function  https://review.openstack.org/59688802:54
openstackgerritMerged openstack/openstack-helm-infra master: Revert "Make it possible to secure pool during deployment"  https://review.openstack.org/60349602:57
openstackgerritMerged openstack/openstack-helm-infra master: Elasticsearch: Add ingress, remove node ports  https://review.openstack.org/59173002:57
*** jistr has quit IRC03:00
*** jistr has joined #openstack-helm03:00
*** d|k has quit IRC03:01
openstackgerritTin Lam proposed openstack/openstack-helm master: Add network policy in gate  https://review.openstack.org/59818903:27
openstackgerritTin Lam proposed openstack/openstack-helm-infra master: Add network policy toolkit function  https://review.openstack.org/59688803:38
*** cfriesen has quit IRC03:55
*** lemko has joined #openstack-helm04:22
*** roman_g has quit IRC04:52
openstackgerritJawon Choo proposed openstack/openstack-helm-infra master: Node-Exporter: allows to set collectors enable/disable  https://review.openstack.org/58781204:59
*** ruijing3 has quit IRC05:47
*** chenyb4 has quit IRC05:54
*** lemko has quit IRC06:31
*** tmorin has joined #openstack-helm07:01
*** cfriesen has joined #openstack-helm07:18
*** gkadam has joined #openstack-helm07:36
*** lemko has joined #openstack-helm07:37
*** gmmaha has quit IRC07:37
*** gmmaha has joined #openstack-helm07:38
*** sgrasley has quit IRC07:39
*** cfriesen has quit IRC07:39
*** sgrasley has joined #openstack-helm07:51
*** gkadam has quit IRC07:57
*** roman_g has joined #openstack-helm08:17
*** evrardjp has joined #openstack-helm09:33
*** evrardjp has left #openstack-helm10:04
*** b_briones has joined #openstack-helm10:09
*** jean-philippe has joined #openstack-helm10:15
*** jean-philippe has quit IRC10:24
*** jean-philippe has joined #openstack-helm10:24
*** jean-philippe is now known as evrardjp10:24
*** evrardjp has quit IRC10:32
*** b_briones has quit IRC10:41
*** b_briones has joined #openstack-helm11:46
*** b_briones has quit IRC11:54
*** b_briones has joined #openstack-helm12:27
*** sgrasley_ has joined #openstack-helm12:34
*** mardim has quit IRC12:34
*** sgrasley has quit IRC12:37
*** sgrasley_ has quit IRC12:39
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: HTK: Add s3 user/bucket scripts, snippets, manifests  https://review.openstack.org/58806612:48
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: HTK: Add s3 user/bucket scripts, snippets, manifests  https://review.openstack.org/58806612:49
*** aaronsheffield has joined #openstack-helm12:49
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Elasticsearch S3 repo  https://review.openstack.org/55941712:51
srwilkerso/12:52
srwilkersportdirect: thanks for getting the gates sorted out :)12:52
*** kukacz_ is now known as kukacz13:00
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: DNM: Fluent-logging: Update fluentd configuration  https://review.openstack.org/59057513:19
*** sthussey has joined #openstack-helm13:20
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Fluent-logging: Update kubernetes plugin test  https://review.openstack.org/60377113:22
*** sgrasley_ has joined #openstack-helm13:41
*** munimeha1 has joined #openstack-helm13:42
openstackgerritTin Lam proposed openstack/openstack-helm master: Add network policy in gate  https://review.openstack.org/59818913:42
*** eeiden has joined #openstack-helm13:46
*** eeiden has quit IRC13:53
*** eeiden has joined #openstack-helm13:53
*** b_briones has quit IRC13:54
openstackgerritHari proposed openstack/openstack-helm-addons master: Implemente: ranger helm charts  https://review.openstack.org/56979714:04
*** eeiden has quit IRC14:04
*** eeiden has joined #openstack-helm14:04
*** munimeha1 has quit IRC14:09
openstackgerritHari proposed openstack/openstack-helm-addons master: Implement: ranger helm charts and supporting change for agent  https://review.openstack.org/56979714:10
openstackgerritChris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2  https://review.openstack.org/60381514:19
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Monitor postgresql, Openstack virt resources, api, logs, pod and nodes status  https://review.openstack.org/57997614:20
*** cfriesen has joined #openstack-helm14:22
lemkoHi. After restarting some nodes in my cluster (I'm using ceph), sometimes I've dns issues. What is the best thing to do in this case? Kill cordons pods?14:22
lemkoHi. After restarting some nodes in my cluster (I'm using ceph), sometimes I've dns issues. What is the best thing to do in this case? Kill cordns pods?14:23
lemkocoredns* sorry for the duplicate line14:23
*** aagate has joined #openstack-helm14:24
openstackgerritTin Lam proposed openstack/openstack-helm master: Add apparmor security annotation  https://review.openstack.org/60236514:31
srwilkerslemko: it's difficult for me to say, as i dont have much experience using coredns.  what are you using to provision kubernetes?14:32
lemkopromenade14:32
jayahnsrwilkers: i know you are quite busy, when you have a time, pls look at this one. https://review.openstack.org/#/c/587812/ thanks14:32
srwilkershey jayahn -- looking now14:33
srwilkerslemko: ah.  might be worth asking in the #airshipit channel :)14:33
lemkothanks srwilkers14:36
*** sgrasley_ has quit IRC14:37
srwilkersjayahn: this looks like a reasonable addition.  i'm wondering if it'd make things a bit cleaner to handle the command flags similar to what we do with prometheus to drive some sort of consistency14:38
srwilkersie: https://github.com/openstack/openstack-helm-infra/blob/master/prometheus/values.yaml#L437-L452 and https://github.com/openstack/openstack-helm-infra/blob/master/prometheus/templates/utils/_command_line_flags.tpl#L36-L4814:38
srwilkershave any thoughts on that?14:38
jayahnsrwilkers: okay, I got that. I will pass it to jawon, and see what he thinks. I think your suggestion makes sense.14:40
jayahnI heard that he wanted to avoid making helm-toolkit function just for that.14:41
srwilkersjayahn: yeah, thats understandable.  we can still keep it as a util function template tied to the chart.  if we can handle it similar though, we can simplify the logic used to generate the flags i think.  but thats just my opinion, of course :)14:44
*** munimeha1 has joined #openstack-helm14:49
srwilkersjayahn: left some feedback on the patchset14:58
jayahnsrwilkers: thanks a lot!15:01
*** munimeha1 has quit IRC15:16
*** sgrasley has joined #openstack-helm15:20
openstackgerritMerged openstack/openstack-helm-infra master: Fluentbit: Update version, config util template  https://review.openstack.org/60278415:33
openstackgerritGage Hugo proposed openstack/openstack-helm-infra master: k8s-keystone create cluster roles and tests  https://review.openstack.org/57792015:34
lemkoI'm getting logs like INFO: TASK JBD2/RBD0-8:10518 blocks for more than 120 seconds. What could be the reason for this? One of my node crashed and I see logs like this thanks to the ipmi kvm viewer. I've a three node ceph cluster, with one block-logical for data and the journal file is a folder on my main disk /var/lib/journal.15:51
openstackgerritMerged openstack/openstack-helm-infra master: Gate: Trim dev-deploy gates  https://review.openstack.org/60283315:52
*** zhangfei has joined #openstack-helm16:32
*** tmorin has quit IRC16:32
*** zhangfei has quit IRC16:56
*** flaviosr__ has joined #openstack-helm16:58
*** flaviosr_ has quit IRC17:01
openstackgerritChris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2  https://review.openstack.org/60381517:09
*** zhangfei has joined #openstack-helm17:18
*** aagate has quit IRC17:30
*** zhangfei has quit IRC17:45
*** munimeha1 has joined #openstack-helm17:53
*** sgrasley has quit IRC18:19
openstackgerritHari proposed openstack/openstack-helm-addons master: Implement: ranger helm charts and supporting change for agent  https://review.openstack.org/56979718:28
*** zhangfei has joined #openstack-helm18:32
*** zhangfei has quit IRC18:45
*** munimeha1 has quit IRC19:05
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Fluentbit: Add kernel, kubelet, and dockerd logs  https://review.openstack.org/60278619:10
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Fluent-logging: Update fluentd configuration  https://review.openstack.org/59057519:12
openstackgerritCliff Parsons proposed openstack/openstack-helm master: Add apparmor security annotation  https://review.openstack.org/60236519:16
openstackgerritMerged openstack/openstack-helm-infra master: Fluent-logging: Update kubernetes plugin test  https://review.openstack.org/60377119:20
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Fluent-logging: Update fluentd configuration  https://review.openstack.org/59057519:22
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Fluent-logging: Update Elasticsearch index templates  https://review.openstack.org/58540019:24
openstackgerritDeepak proposed openstack/openstack-helm master: WIP: Add shaker charts and shaker deployment scripts  https://review.openstack.org/60205019:33
openstackgerritchinasubbareddy mallavarapu proposed openstack/openstack-helm-infra master: ceph-rgw: stop storage init job on each run  https://review.openstack.org/60389019:41
*** roman_g has quit IRC19:46
*** zhangfei has joined #openstack-helm19:46
*** roman_g has joined #openstack-helm19:47
openstackgerritMerged openstack/openstack-helm-infra master: Fix python-pip install for centOS system  https://review.openstack.org/60001919:48
*** zhangfei has quit IRC19:59
openstackgerritMike Pham proposed openstack/openstack-helm-infra master: Add network policy toolkit function  https://review.openstack.org/59688820:46
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: HTK: Add s3 user/bucket scripts, snippets, manifests  https://review.openstack.org/58806620:52
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Elasticsearch S3 repo  https://review.openstack.org/55941720:53
*** aaronsheffield has quit IRC21:12
openstackgerritChris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2  https://review.openstack.org/60381521:17
openstackgerritTin Lam proposed openstack/openstack-helm master: Add network policy in gate  https://review.openstack.org/59818921:18
*** sthussey has quit IRC21:40
openstackgerritChris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2  https://review.openstack.org/60381521:50
cfriesenportdirect: with this change to the openstack-nova chart (http://paste.openstack.org/show/730387/) and an override specifying network.osapi.port=18774, it brought up all the k8s resources using port 18774 but registered 8774 in keystone.  Which I think is exactly what we want.21:58
cfriesenfor production I think we'd want a conditional in there21:58
cfriesenand fall back to the endpoint port21:59
cfriesenOn a totally separate note, is anyone actually using the capability described at https://docs.openstack.org/openstack-helm/latest/devref/node-and-label-specific-configurations.html ?22:01
*** roman_g has quit IRC22:02
*** eeiden has quit IRC22:08
openstackgerritTin Lam proposed openstack/openstack-helm master: Add network policy in gate  https://review.openstack.org/59818922:13
*** lemko has quit IRC23:02
*** aagate has joined #openstack-helm23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!