Tuesday, 2018-09-25

openstackgerritPete Birley proposed openstack/openstack-helm-infra master: WIP: Mariadb cluster improvements  https://review.openstack.org/60455601:00
*** sgrasley__ has joined #openstack-helm01:13
*** sgrasley_ has quit IRC01:16
*** chenyb4 has joined #openstack-helm01:35
*** roman_g has quit IRC01:59
*** unicell has joined #openstack-helm02:31
*** unicell has quit IRC02:36
*** unicell has joined #openstack-helm03:00
*** unicell has quit IRC03:04
*** unicell has joined #openstack-helm03:42
*** unicell has quit IRC03:46
openstackgerritPete Birley proposed openstack/openstack-helm-infra master: WIP: Mariadb cluster improvements  https://review.openstack.org/60455604:29
*** unicell has joined #openstack-helm04:43
*** unicell has quit IRC04:47
*** lemko has joined #openstack-helm05:08
*** unicell has joined #openstack-helm05:09
*** cfriesen has quit IRC05:17
*** Tomatosoup- has quit IRC05:25
*** Tomatosoup- has joined #openstack-helm05:25
openstackgerritPete Birley proposed openstack/openstack-helm-infra master: WIP: Mariadb cluster improvements  https://review.openstack.org/60455605:35
*** chenyb4 has quit IRC05:50
openstackgerritPete Birley proposed openstack/openstack-helm-infra master: WIP: Mariadb cluster improvements  https://review.openstack.org/60455605:51
openstackgerritPete Birley proposed openstack/openstack-helm-infra master: WIP: Mariadb cluster improvements  https://review.openstack.org/60455605:53
openstackgerritTin Lam proposed openstack/openstack-helm-infra master: WIP: Adding network policy gate test for OSH-infra  https://review.openstack.org/60487205:54
*** unicell has quit IRC05:55
openstackgerritMerged openstack/openstack-helm-infra master: Add apparmor annotation function  https://review.openstack.org/60205806:08
openstackgerritTin Lam proposed openstack/openstack-helm master: Add apparmor security annotation  https://review.openstack.org/60236506:14
*** aojea has joined #openstack-helm06:24
*** aojeagarcia has joined #openstack-helm06:29
*** chenyb4 has joined #openstack-helm06:31
*** aojea has quit IRC06:32
openstackgerritTin Lam proposed openstack/openstack-helm-infra master: WIP: Adding network policy gate test for OSH-infra  https://review.openstack.org/60487206:44
*** roman_g has joined #openstack-helm06:54
evrardjpgood morning07:16
openstackgerritTin Lam proposed openstack/openstack-helm-infra master: WIP: Adding network policy gate test for OSH-infra  https://review.openstack.org/60487207:23
openstackgerritTin Lam proposed openstack/openstack-helm master: WIP: Adding gate test for apparmor  https://review.openstack.org/60499107:42
*** chenyb4 has quit IRC08:30
evrardjphello I am curious, why this line doesn't have a port like :5000 included? https://github.com/openstack/openstack-helm/blob/master/tools/deployment/common/setup-client.sh#L3508:37
evrardjpI guess we have a redirection somewhere08:38
openstackgerritJean-Philippe Evrard proposed openstack/openstack-helm master: Add local override for ingress  https://review.openstack.org/60500508:41
evrardjphello folks, how against would you be on splitting compute-kit into nova and neutron scripts?08:44
*** evrardjp_ has joined #openstack-helm08:50
*** evrardjp has quit IRC08:53
openstackgerritTin Lam proposed openstack/openstack-helm master: WIP: Adding gate test for apparmor  https://review.openstack.org/60499109:00
*** evrardjp_ is now known as evrardjp09:15
*** roman_g has quit IRC09:27
*** roman_g has joined #openstack-helm09:29
*** aaronsheffield has joined #openstack-helm12:48
openstackgerritSangeet Gupta proposed openstack/openstack-helm-infra master: Adding Falco  https://review.openstack.org/59829713:16
*** sthussey has joined #openstack-helm13:22
*** munimeha1 has joined #openstack-helm13:37
*** happyhemant has quit IRC13:45
*** evrardjp has quit IRC14:03
*** evrardjp has joined #openstack-helm14:03
openstackgerritDoug Schveninger proposed openstack/openstack-helm master: Clean up the tempest.conf section of the values.yaml  https://review.openstack.org/60508314:06
*** roman_g has quit IRC14:14
portdirectevrardjp: as the public (and admin) endpoints are hit via the ingress controller, which is listening on port 80 (or 443...)14:17
evrardjpportdirect: I am sorry but a PEBKAC has prevented me to see the whole conversation.14:17
portdirect`hello I am curious, why this line doesn't have a port like :5000 included? https://github.com/openstack/openstack-helm/blob/master/tools/deployment/common/setup-client.sh#L35`14:18
evrardjpI blame my lack of weechat for now, and stuck to irssi.14:18
portdirectas you suspected  - there is a proxy ;)14:18
evrardjpok14:18
openstackgerritTin Lam proposed openstack/openstack-helm master: DNM & WIP: Enable network policy enforcement  https://review.openstack.org/60508814:20
openstackgerritChris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2  https://review.openstack.org/60381514:23
*** lamt has joined #openstack-helm14:32
portdirectsrwilkers, lrensing, v1k0d3n, lamt, portdirect, renmak, jayahn, korzen, alanmeadows, mattmceuen, raymaika, evrardjp its almost that time again - OpenStack-Helm meeting in #openstack-meeting-5 in 16 mins14:44
portdirecthttps://etherpad.openstack.org/p/openstack-helm-meeting-2018-09-2514:44
*** cfriesen has joined #openstack-helm14:54
openstackgerritHari proposed openstack/openstack-helm-addons master: Inclusion annotation for upgrade and install chart changes  https://review.openstack.org/60484914:59
*** sgrasley has joined #openstack-helm15:02
*** sgrasley__ has quit IRC15:05
evrardjpportdirect: have you thought of the idea to split computekit in two: nova/neutron? It would allow user level overrides of values easier (it would be one per shell script basically)15:39
mattmceuenwe have 21 minutes, who wants to get into some trouble!15:39
srwilkersim always up for trouble15:39
evrardjpnot surprised15:40
portdirectmattmceuen: coffee?15:40
srwilkersportdirect: yes15:40
evrardjpportdirect: is my rephrasing correct: https://review.openstack.org/#/c/604112/ ?15:40
cfriesensrwilkers: looking at your nova helm chart commit ca0cb858 it seems like nova is supposed to be able to do cold migration.  does that actually work?15:44
*** aojeagarcia has quit IRC15:52
portdirectevrardjp: yes16:03
srwilkerscfriesen: it worked the last time i checked, but definitely could use some improvements i think.  full disclosure: it's been awhile since i tested it last16:05
cfriesensrwilkers: just to make sure I understand what's going on, you're basically starting a separate container to run sshd, using rsa keys from /root/.ssh on the host16:07
jamesgu__not to distract from cfriesen's question.... really quick question here... anyone has tried on Cillium instead of Calico?16:10
*** moh_ahmed has joined #openstack-helm16:53
openstackgerritTin Lam proposed openstack/openstack-helm master: DNM & WIP: Enable network policy enforcement  https://review.openstack.org/60508817:05
*** roman_g has joined #openstack-helm17:14
openstackgerritChris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2  https://review.openstack.org/60381517:44
cfriesensrwilkers: in the newton and pike upstream nova images (from docker.io/openstackhelm/nova) I don't see the "/usr/sbin/sshd" binary.  Am I missing something?17:55
*** unicell has joined #openstack-helm17:58
openstackgerritNikita Koshikov proposed openstack/openstack-helm-infra master: Add ansible apparmor role  https://review.openstack.org/60516018:00
openstackgerritNikita Koshikov proposed openstack/openstack-helm-infra master: Add ansible apparmor role  https://review.openstack.org/60516018:01
openstackgerritNikita Koshikov proposed openstack/openstack-helm-infra master: Add ansible apparmor role  https://review.openstack.org/60516018:02
*** unicell has quit IRC18:03
openstackgerritsai battina proposed openstack/openstack-helm-infra master: Helm: Update helm to 2.11.0  https://review.openstack.org/60516218:12
*** lemko has quit IRC18:12
openstackgerritsai battina proposed openstack/openstack-helm-infra master: Helm: Update helm to 2.11.0  https://review.openstack.org/60516218:15
srwilkerscfriesen: thats a valid point.  that work was done with the kolla images initially, as far as i remember.  im also not seeing that container included as part of the rendered nova compute daemonset18:25
srwilkersfor reference: http://logs.openstack.org/65/602365/17/check/openstack-helm-multinode-ubuntu/a115120/primary/objects/namespaced/openstack/daemonsets/nova-compute-default.txt18:26
srwilkersmy suspicion is this may be tied to the daemonset-overrides template used to generate the daemonsets for things like nova compute: https://github.com/openstack/openstack-helm-infra/blob/master/helm-toolkit/templates/utils/_daemonset_overrides.tpl#L22118:29
openstackgerritSangeet Gupta proposed openstack/openstack-helm-infra master: Adding Falco  https://review.openstack.org/59829718:29
srwilkersportdirect: ^18:30
openstackgerritCliff Parsons proposed openstack/openstack-helm master: WIP: Adding gate test for apparmor  https://review.openstack.org/60499118:32
srwilkerscfriesen: i'd say this is a bug, one we should address sooner rather than later :)18:33
cfriesensrwilkers: agreed.18:35
cfriesensrwilkers: I opened https://storyboard.openstack.org/#!/story/2003463 a while back, seems like it's applicable18:36
cfriesenthe ssh bit might already be set up, sort of18:36
cfriesenls18:37
cfriesensrwilkers: where do  ssh-key-private and ssh-key-public get set up?  I see them being referenced in the volumeMounts, but I don't get how they're generated.18:42
*** moh_ahmed has quit IRC18:55
*** moh_ahmed has joined #openstack-helm18:55
openstackgerritsai battina proposed openstack/openstack-helm-addons master: Initial commit to add mission-control, distribution, xray charts Also add enterprise artifactory chart  https://review.openstack.org/58837019:03
openstackgerritCliff Parsons proposed openstack/openstack-helm master: WIP: Adding gate test for apparmor  https://review.openstack.org/60499119:05
openstackgerritHari proposed openstack/openstack-helm-addons master: Inclusion annotation for upgrade and install chart changes  https://review.openstack.org/60484919:13
srwilkerscfriesen: im going to go on a limb and say they aren't being generated at all right now.  since the nova-compute-ssh container isnt being included in the pod definition, neither are its volumemounts19:21
openstackgerritPete Birley proposed openstack/openstack-helm-infra master: WIP: Mariadb cluster improvements  https://review.openstack.org/60455619:25
cfriesensrwilkers: okay, that makes sense.  But if that container was included, how would we expect the public/private keys and authorized_keys file to be generated?19:27
portdirectsrwilkers: well that seems like a bug ;)19:28
portdirecthttps://github.com/openstack/openstack-helm-infra/blob/master/helm-toolkit/templates/utils/_daemonset_overrides.tpl#L22119:29
portdirectlooks like that needs fixed19:29
portdirectI think i did most of what was required for the ceph specific one19:30
portdirect(in its init containers)19:30
portdirectbut we'll need to bring that over19:30
*** moh_ahme_ has joined #openstack-helm19:38
*** moh_ahmed has quit IRC19:40
*** arunkant has joined #openstack-helm19:42
openstackgerritDoug Schveninger proposed openstack/openstack-helm master: Clean up the tempest.conf section of the values.yaml  https://review.openstack.org/60508320:13
openstackgerritChris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2  https://review.openstack.org/60381520:16
openstackgerritChris Wedgwood proposed openstack/openstack-helm-infra master: [WIP] [DNM] Calico 3.2  https://review.openstack.org/60381520:16
openstackgerritDoug Schveninger proposed openstack/openstack-helm master: Clean up the tempest.conf section of the values.yaml  https://review.openstack.org/60508320:18
*** moh_ahmed has joined #openstack-helm20:31
cfriesenis nova the only chart that wants to run multiple containers in a DaemonSet?20:31
*** moh_ahme_ has quit IRC20:34
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Kibana: Add session affinity to ingress  https://review.openstack.org/60522820:35
*** moh_ahmed has quit IRC20:36
openstackgerritDustin Specker proposed openstack/openstack-helm-addons master: Add Sonobuoy chart  https://review.openstack.org/60483320:36
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Kibana: Add session affinity to ingress  https://review.openstack.org/60522820:38
openstackgerritsai battina proposed openstack/openstack-helm-addons master: Initial commit to add mission-control, distribution, xray charts Also add enterprise artifactory chart  https://review.openstack.org/58837020:41
*** aaronsheffield has quit IRC20:51
cfriesensrwilkers: it looks like the ceph-osd helm chart might also try to set up multiple containers in a daemonset if .Values.logging.fluentd evaluates as true.20:57
openstackgerritDustin Specker proposed openstack/openstack-helm-addons master: Add Sonobuoy chart  https://review.openstack.org/60483321:15
openstackgerritMerged openstack/openstack-helm-addons master: Changing keystone role names to be ranger_flavor_creator, ranger_customer_creator  https://review.openstack.org/60483721:40
openstackgerritTin Lam proposed openstack/openstack-helm master: DNM & WIP: Enable network policy enforcement  https://review.openstack.org/60508822:01
*** munimeha1 has quit IRC22:03
cfriesensrwilkers: portdirect: I just opened up a bug, the per-label and per-host overrides don't seem to be working quite right, at least for upgrades.  https://storyboard.openstack.org/#!/story/200387322:45
srwilkerscfriesen: will take a peek at it after dinner22:53
openstackgerritDoug Schveninger proposed openstack/openstack-helm master: Clean up the tempest.conf section of the values.yaml  https://review.openstack.org/60508322:56
cfriesensrwilkers: thanks.  I can't get the yaml file snippet to indent properly in the problem description.22:57
cfriesenmarkdown seems to want to strip out leading whitespace, even in a <code> block22:57
cfriesenyay...<pre> works22:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!