Tuesday, 2018-04-10

*** caoyuan has joined #openstack-qinling00:06
*** caoyuan has quit IRC00:58
*** huntxu has joined #openstack-qinling01:10
*** jiangyuan has joined #openstack-qinling01:41
*** caoyuan has joined #openstack-qinling01:47
*** yufei has joined #openstack-qinling01:56
openstackgerritHunt Xu proposed openstack/qinling master: engine: set execution status upon exceptions  https://review.openstack.org/55655701:59
openstackgerritHunt Xu proposed openstack/qinling master: engine: set execution status upon exceptions  https://review.openstack.org/55655702:26
*** kevzha01 has joined #openstack-qinling02:26
*** kevzha01 is now known as kevinz02:26
jiangyuanHi, kong , huntxu. When I test resource limitation in pod, I found that in container based on phusion/baseimage:0.9.22, we can not create/mount/umount 'cgroup' because of read-only file system.  So if I can choose some other base image and do you have any requirements about the base image?02:32
*** yufei has quit IRC02:33
*** yufei has joined #openstack-qinling02:33
huntxujiangyuan: I guess you have to mount host's /sys/fs/cgroup into the pod?02:41
huntxuor more specifically, the runtime container02:42
jiangyuanhuntxu: In the runtime container, it has mount cgroup, but they are read-only, I can not create my 'control group' directory02:44
huntxujiangyuan: https://groups.google.com/forum/#!topic/kubernetes-dev/TBNzAxNXPOA this post is more than one year ago, I don't know whether there is any update in k8s for now02:45
jiangyuanlike this: cgroup on /sys/fs/cgroup/memory type cgroup (ro,nosuid,nodev,noexec,relatime,memory)02:45
huntxujiangyuan: I think you can create another volumemount specified in the deployment yaml, that would override the one mounted by docker I guess02:47
huntxujiangyuan: besides, you don't have to mount the host's /sys/fs/cgroup to exactly the same place in the container, maybe some place else would be better, like /host/.../cgroup02:50
huntxujiangyuan: or like /qinling_resource/memory and /qinling_resource/cpu, as long as you can change the contents in such paths in the container, you are changing the cgroup settings on the host then resources are limited02:52
jiangyuanhuntxu: ok , I will test it. Thanks a lot, your advice is a great help to me02:53
konghi jiangyuan, i agree with huntxu. Changing the base image for runtime is always the last resort. We should keep the customization for the runtime image as less as possible02:54
konghuntxu: thanks for your help to jiangyuan, you are always helpful to the team02:55
kongi will start to review the patches after i finish some debugging for k8s :-(02:56
jiangyuankong: ok, I got it, thanks.02:58
openstackgerritHunt Xu proposed openstack/qinling master: Allow qinling to connect to k8s API with certificates  https://review.openstack.org/55796106:25
openstackgerritHunt Xu proposed openstack/qinling master: Allow qinling to connect to k8s API with certificates  https://review.openstack.org/55796106:50
openstackgerritHunt Xu proposed openstack/qinling master: Allow qinling to connect to k8s API with certificates  https://review.openstack.org/55796107:15
openstackgerritHunt Xu proposed openstack/qinling master: Allow qinling to connect to k8s API with certificates  https://review.openstack.org/55796107:41
*** yufei has quit IRC07:41
openstackgerritHunt Xu proposed openstack/qinling master: Allow qinling to connect to k8s API with certificates  https://review.openstack.org/55796108:08
openstackgerritHunt Xu proposed openstack/qinling master: Allow qinling to connect to k8s API with certificates  https://review.openstack.org/55796108:32
openstackgerritHunt Xu proposed openstack/qinling master: Allow qinling to connect to k8s API with certificates  https://review.openstack.org/55796109:44
openstackgerritHunt Xu proposed openstack/qinling master: Allow qinling to connect to k8s API with certificates  https://review.openstack.org/55796109:55
openstackgerritHunt Xu proposed openstack/qinling master: Allow qinling to connect to k8s API with certificates  https://review.openstack.org/55796110:21
*** caoyuan has quit IRC11:08
*** openstackgerrit has quit IRC12:04
*** jiangyuan has quit IRC13:03
*** caoyuan has joined #openstack-qinling13:43
*** huntxu has quit IRC14:22
*** caoyuan has quit IRC15:11
*** caoyuan has joined #openstack-qinling17:27
*** caoyuan has quit IRC17:29
*** caoyuan has joined #openstack-qinling22:31
*** caoyuan has quit IRC22:33

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!