Tuesday, 2018-12-11

*** aaronsheffield has quit IRC00:20
*** sthussey has quit IRC01:03
*** ianychoi has quit IRC01:20
openstackgerritMatthew Heler proposed openstack/openstack-helm-infra master: Increase the cpu and memory resource limits for Ceph OSDs  https://review.openstack.org/62361701:27
*** cfriesen has quit IRC02:38
*** jamesgu_ has quit IRC02:41
*** jistr has quit IRC02:42
*** jistr has joined #openstack-helm02:50
*** jamesgu_ has joined #openstack-helm03:14
*** cfriesen has joined #openstack-helm03:42
openstackgerritTin Lam proposed openstack/openstack-helm-infra master: Add securityContext helm-toolkit function  https://review.openstack.org/61361103:59
openstackgerritTin Lam proposed openstack/openstack-helm master: Add startingDeadlineSeconds field to cronJobs  https://review.openstack.org/60985904:03
openstackgerritTin Lam proposed openstack/openstack-helm-infra master: Add Egress Helm-toolkit function  https://review.openstack.org/61250604:04
openstackgerritCliff Parsons proposed openstack/openstack-helm master: Add apparmor security annotation  https://review.openstack.org/60236505:33
*** jamesgu_ has quit IRC05:42
*** sdake has quit IRC06:35
*** sdake has joined #openstack-helm06:40
*** cfriesen has quit IRC06:48
*** unicell has joined #openstack-helm06:51
openstackgerritMerged openstack/openstack-helm-infra master: helm-toolkit: Support standard kubernetes/helm labels  https://review.openstack.org/62169807:11
evrardjpo/07:59
evrardjpportdirect: are you still there?07:59
*** unicell has quit IRC08:02
*** unicell has joined #openstack-helm08:05
*** unicell has quit IRC08:11
*** lemko has joined #openstack-helm08:33
*** rgogunskiy has joined #openstack-helm09:17
*** aojea has joined #openstack-helm09:40
openstackgerritJean-Philippe Evrard proposed openstack/openstack-helm-images master: [WIP] Add LOCI to OSH images  https://review.openstack.org/62120611:52
*** sgrasley has joined #openstack-helm13:59
*** sthussey has joined #openstack-helm14:00
portdirectevrardjp: itw as a bit late for me last night :(14:15
portdirectsrwilkers, lrensing, v1k0d3n, lamt, portdirect, renmak, jayahn, korzen, alanmeadows, mattmceuen, raymaika, evrardjp, MegHeisler, howell: meeting time in 45 mins14:15
evrardjpportdirect: no worries14:15
evrardjpI have a few questions14:15
portdirectover in #openstack-meeting-5, the Agenda is here https://etherpad.openstack.org/p/openstack-helm-meeting-2018-12-1114:16
portdirectsure - sup evrardjp ?14:16
evrardjpportdirect: for the OVS image -- what's the reason to build from source, vs using a package?14:17
portdirectas at the time, the packages were broken - also it provides an easy way of adding things like dpdk14:18
portdirectsamyaple and i talked about a sister project to loci for things like this - that would let us build required things like ovs/libvirt/qemu rather than rely on distro packages that often lagg behind where we want, or expose more features than we need14:19
openstackgerritSteve Wilkerson proposed openstack/openstack-helm master: Armada: Manifest updates for Ocata release  https://review.openstack.org/59180814:22
evrardjpwell I beg to disagree there, except if you're a dpdk dev :)14:22
evrardjpok let me ask another question14:23
evrardjpwould you be strongly against an image that has different implementations per distro? For example: ubuntu using sources, opensuse using packages14:24
evrardjpI trust my colleagues to build good packages. Else someone probably has a nearby whip I can use.14:24
portdirectworks for me14:24
portdirecthonestly - I'm quite up for moving the default base to debian14:25
portdirectas it removes many of these distro issues14:26
portdirectand then we could move ubuntu to packages as well14:26
portdirectbut i think that should come later14:26
evrardjpI am fine with that14:27
evrardjpif you saw the pattern I have set in that repo, all the images will have different versions, per distro, per openstack branch (if relevant), per "VERSION" (latest, 1.0, ...)14:28
evrardjpso we should be fine14:28
portdirectnice - yeah it looks good evrardjp14:29
portdirecti'll try to get an account on quay.io this week so we can store these images somewhere14:30
evrardjpperfect that's what I wanted to ask you14:33
evrardjpcreate an account somewhere14:33
evrardjpso that I can use it for publishing images14:34
lemkoHi. With one physical network in openstack, everything works But the problem comes when I want to add other network. The comments in neutron/values.yaml are really helpful and I believe I did everything right. I'm adding more bridges in auto_bridge_add, then bridge_mappings: "net1:br-ex,net2:br-ex2", them in flat_network: "net1,net2". With more network physical network in openstack, it doesn't work anymore, not possible14:48
lemkoto access the network. What could be the cause of this? I looked at the bridge configuration in ovs and everything seems good.14:48
*** cfriesen has joined #openstack-helm14:58
jayahnportdirect: evrardjp: I am trying to summarize our thought before irc meeting, however I probably need a bit more time. pls read this week etherpad if the current writing makes any sense for you guys. otherwise, I will take some more time to properly write up the exact thought I want to pass.15:00
evrardjpgreat15:00
jayahnlong story short, skt can contribute anything relared to kolla image based deployment, but we really need on loci side.15:01
portdirectjayahn: would also be great to get an update on the docs repo?15:01
portdirectunderstand the kolla issues - would be great to get you invovled there, esp as over time i expect we will move away from supporting default kolla images as discussed at the ptgs15:02
jayahnjaesang has been looking into docs repo for the last several days, I need to get an update from him. I will do that the first thing in tomorrow.15:02
*** jamesgu_ has joined #openstack-helm15:10
*** aaronsheffield has joined #openstack-helm15:12
openstackgerritRahul Khiyani proposed openstack/openstack-helm master: Keystone podSecurityContext  https://review.openstack.org/61401115:14
openstackgerritMohan V proposed openstack/openstack-helm-infra master: Do-not run nginx as root for Ingress helm chart  https://review.openstack.org/62235915:58
*** nzoueidi has quit IRC16:02
jayahnportdirect: party is gone. (sad). we recently had big organizational changes, and it is now time to do all the planning....16:03
*** nzoueidi has joined #openstack-helm16:04
jayahnmy team is still intact though. (fortunately!) got more tasks... (i am not sure if it is good thing.. :) )16:04
jayahnI really want to invite all of you to Korea next year, need to come up with a very good excuse for that. ;)16:05
openstackgerritPete Birley proposed openstack/openstack-helm-infra master: Ingress: Remove server headers from response  https://review.openstack.org/62442916:06
openstackgerritSteve Wilkerson proposed openstack/openstack-helm master: Armada: Manifest updates for Ocata release  https://review.openstack.org/59180816:07
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: Kibana: Add basic Helm tests  https://review.openstack.org/60970316:11
*** jamesgu_ has quit IRC16:15
*** jamesgu_ has joined #openstack-helm16:19
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: DNM: Test elastic query in post run job  https://review.openstack.org/62443516:20
*** munimeha1 has joined #openstack-helm16:33
*** aaronsheffield has quit IRC16:36
*** aaronsheffield has joined #openstack-helm16:37
openstackgerritArun Kant proposed openstack/openstack-helm-images master: [WIP] Add LOCI to OSH images  https://review.openstack.org/62120616:55
cfriesenquestion about the various "controller" services.  Is there anything in the charts to ensure that multiple pods (for cinder-api, or glance-api, or ingress, etc.) don't end up on the same k8s node?16:57
evrardjpportdirect: are you there?17:08
evrardjpportdirect: remember when we discussed consumption of images, you said we could build locally, tag the image with docker.io/... and then it would be re-used correctly in the helm charts. Did I understand that correctly?17:09
*** jamesgu__ has joined #openstack-helm17:35
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: DNM: Test elastic query in post run job  https://review.openstack.org/62443517:36
srwilkerscfriesen: the charts should have antiaffinity defined to help prevent that where possible17:39
*** jamesgu_ has quit IRC17:39
cfriesensrwilkers: I see it, but it's "preferred" rather than required.  I noticed it because when I rebooted one of the two controllers I ended up with most of the pods on the other controller and they never redistributed themselves17:42
cfriesenIf I want one API pod per controller for host-based redundancy, I think "required" anti-affinity might make more sense.17:43
cfriesenunless the intent is just a pool of pods and we hope that statistically they get distributed reasonably17:45
srwilkerscfriesen: they can be overridden just like the other values in values.yaml. I feel preferred is a sane default17:50
cfriesenhow many controller nodes does openstack-helm normally test with?17:51
supamattthe gates?17:52
cfriesenor typical use at AT&T17:52
portdirectcfriesen: thats a piece of string question, and thankfully pretty similar whether talking best practive or within ATT18:00
portdirectI'd recomend a minimum of three controllers18:01
*** aojea has quit IRC18:01
portdirectbeyond there is driven by a balance of load, and physical layout18:01
portdirecti think most people running osh, tend to run a controller per rack18:02
portdirectand run at least three racks in a region18:02
cfriesenfair enough.  we have a driver to go down to single node and 1+1 configurations, which means we run into issues sometimes.18:02
portdirectfor this - id expect things to 'just work' - though as allways your millage may vary18:03
portdirectit was one of the reasons we default to soft anti affinity18:03
portdirectas though like you, i much prefer hard - it was a less friendly experience for people getting up and running, cicd, and smaller sites18:04
cfriesenmakes sense...thanks for the explanation18:04
portdirectevrardjp: re the images, its a bit of a hack18:07
portdirectas we default to 'pull if not present', you can make k8s run any image thats pre-loaded onto the host, provided its tag matches whats expected18:07
portdirectits for this reason that i'd caution against that param in production, and also recommend pulling by sha over tag if possible18:08
portdirectbut for quick and dirty testing ive used it a few times, though it would be leaner to just provide an over-ride to the chart18:08
portdirect*cleaner18:09
evrardjpI see18:09
openstackgerritSteve Wilkerson proposed openstack/openstack-helm master: Update upgrade host playbook in osh to match osh-infra  https://review.openstack.org/62445418:11
openstackgerritSteve Wilkerson proposed openstack/openstack-helm master: Armada: Manifest updates for Ocata release  https://review.openstack.org/59180818:20
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: DNM: Test elastic query in post run job  https://review.openstack.org/62443518:31
openstackgerritPete Birley proposed openstack/openstack-helm-infra master: Ingress: Update sleep function to not require dumb-init  https://review.openstack.org/62446518:54
openstackgerritJean-Philippe Evrard proposed openstack/openstack-helm-images master: [WIP] Add LOCI to OSH images  https://review.openstack.org/62120619:06
openstackgerritSteve Wilkerson proposed openstack/openstack-helm-infra master: DNM: Test elastic query in post run job  https://review.openstack.org/62443519:21
openstackgerritJean-Philippe Evrard proposed openstack/openstack-helm-images master: [WIP] Add LOCI to OSH images  https://review.openstack.org/62120619:41
cfriesenhas anyone seen issues like this with the rabbit pods?  It seems like the one pod has multiple servers running but isn't actually working.  http://paste.openstack.org/show/737050/   kubectl says the pods/containers are running, but I'm having issues with RPC in nova.19:43
cfriesen(this is with the stock docker image, after rebooting controller-1)19:44
*** lemko has quit IRC19:50
openstackgerritVladyslav Drok proposed openstack/openstack-helm-infra master: Do not expose ingress nginx version by default  https://review.openstack.org/62448320:17
openstackgerritDrew Walters proposed openstack/openstack-helm-addons master: Add aptly chart  https://review.openstack.org/62331420:35
openstackgerritMerged openstack/openstack-helm-infra master: Elasticsearch: Remove default  Curator action configuration  https://review.openstack.org/62009220:58
openstackgerritMike Pham proposed openstack/openstack-helm master: WIP: Implement East-West EGRESS policies for the Cloud Core services  https://review.openstack.org/62331521:04
openstackgerritDrew Walters proposed openstack/openstack-helm-addons master: [WIP] Add aptly chart  https://review.openstack.org/62331421:04
openstackgerritRahul Khiyani proposed openstack/openstack-helm master: Keystone podSecurityContext  https://review.openstack.org/61401121:19
openstackgerritMerged openstack/openstack-helm master: Update upgrade host playbook in osh to match osh-infra  https://review.openstack.org/62445421:23
openstackgerritMike Pham proposed openstack/openstack-helm master: WIP: Implement East-West EGRESS policies for the Cloud Core services  https://review.openstack.org/62331521:47
openstackgerritMerged openstack/openstack-helm-infra master: Ingress: Update sleep function to not require dumb-init  https://review.openstack.org/62446522:01
openstackgerritMike Pham proposed openstack/openstack-helm master: WIP: Implement East-West EGRESS policies for the Cloud Core services  https://review.openstack.org/62331522:24
openstackgerritStephanie Miller proposed openstack/openstack-helm-images master: [WIP] Add openSUSE Leap 15 openvswitch image  https://review.openstack.org/62114523:14
*** jamesgu_ has joined #openstack-helm23:29
*** jamesgu__ has quit IRC23:32
*** cliff_ has joined #openstack-helm23:43
*** cliff_ has quit IRC23:50

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!