Tuesday, 2018-03-20

*** hongbin has joined #openstack-zun00:40
*** caisan has joined #openstack-zun01:13
*** openstackgerrit has joined #openstack-zun01:40
openstackgerritHongbin Lu proposed openstack/zun master: Move parse_image_name to compute manager  https://review.openstack.org/55407401:40
openstackgerritHongbin Lu proposed openstack/zun master: Introduce a config for default image driver  https://review.openstack.org/55406901:40
openstackgerritHongbin Lu proposed openstack/zun master: Pull/Search image from default driver  https://review.openstack.org/55407701:40
openstackgerritHongbin Lu proposed openstack/zun master: Move pull_image to container driver  https://review.openstack.org/55407901:40
openstackgerritHongbin Lu proposed openstack/zun master: [WIP] Move search_image to container driver  https://review.openstack.org/55408001:40
openstackgerritHongbin Lu proposed openstack/zun master: [WIP] Move create_image and upload_image_data  https://review.openstack.org/55408101:40
*** kevzha01 has joined #openstack-zun01:43
*** kevzha01 is now known as kevinz01:44
*** fengshengqin has joined #openstack-zun01:47
*** caowei has joined #openstack-zun02:03
openstackgerritHongbin Lu proposed openstack/zun master: Move search_image to container driver  https://review.openstack.org/55408002:05
openstackgerritHongbin Lu proposed openstack/zun master: Move create_image and upload_image_data  https://review.openstack.org/55408102:05
openstackgerritcaishan proposed openstack/zun master: Add essential comments for API image search  https://review.openstack.org/55440102:37
hongbinfengshengqin: ready to run the meeting?02:59
fengshengqinyes03:00
fengshengqin#startmeeting zun03:00
openstackMeeting started Tue Mar 20 03:00:29 2018 UTC and is due to finish in 60 minutes.  The chair is fengshengqin. Information about MeetBot at http://wiki.debian.org/MeetBot.03:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.03:00
*** openstack changes topic to " (Meeting topic: zun)"03:00
openstackThe meeting name has been set to 'zun'03:00
fengshengqin#topic Roll Call03:00
*** openstack changes topic to "Roll Call (Meeting topic: zun)"03:00
hongbino/03:00
kevinzo/03:00
fengshengqinThanks for joining the meeting, hongbin, kivenz03:01
hongbin:)03:01
kevinz:-)03:01
fengshengqin#topic Announcements03:01
*** openstack changes topic to "Announcements (Meeting topic: zun)"03:01
fengshengqinTwo Zun's presentations were selected at OpenStack Vancouver Summit03:02
fengshengqin1. Build Your Serverless Container Cloud with OpenStack and Kubernetes #link https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/20734/build-your-serverless-container-cloud-with-openstack-and-kubernetes  2. Integration of Openstack Zun with Kata containers #link https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/21193/integration-of-openstack-zun-with-kata-containers03:02
* hongbin applaud03:02
hongbin#link https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/20734/build-your-serverless-container-cloud-with-openstack-and-kubernetes03:02
hongbin#link https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/21193/integration-of-openstack-zun-with-kata-containers03:02
fengshengqinthanks hongbin03:03
kevinzCool03:03
hongbincongrat kevinz03:03
kevinzThanks :-)03:03
fengshengqincongrat , too03:03
hongbini believe this would be a very good presentation03:03
hongbinkevinz: do you confirm the travel to canada?03:03
kevinzhongbin: Yes. I can come03:04
hongbinawesome03:04
kevinznow applying for visa03:04
hongbingreat news03:04
fengshengqin#topic Blueprints03:05
*** openstack changes topic to "Blueprints (Meeting topic: zun)"03:05
fengshengqin1. OpenStack as a virtual Kubernetes node (assignee: kevinz)03:05
kevinzHi03:05
fengshengqinhi, how about your presentation to introduce zun in HongKong last week03:06
kevinzlast week prepared a Zun session in Hong Kong this Friday03:06
fengshengqinis there anything progress about this BP03:06
kevinzthis session will happen this Friday :-)03:07
kevinzStill working on Capsule Create(golang support)03:07
fengshengqinoh, i make a mistake03:08
kevinzMeet several test case failed. But now most of them are OK03:08
fengshengqingreat news!03:08
kevinzbeside, I've done a investigation about virtual-kubelet03:08
hongbincool03:08
kevinzI'll paste the investigation doc to googledoc03:08
kevinzThat's all from my side03:09
fengshengqinthanks, kevinz03:09
kevinzmy pleasure03:10
fengshengqin2. Support remove image in zun (assignee: pengdake)03:10
hongbini believe pengdake is not here03:10
hongbinhe wanted to discuss his image delete patch (i recalled)03:10
fengshengqinyes03:11
hongbina question for you guys:03:11
fengshengqinI think he is missing policy rule for image_delete api03:11
hongbindo you have use cases for the image API (image-create, image-delete, image-show)03:11
caisanhongbin: ping03:11
hongbincaisan: hi03:11
hongbincaisan: thanks for joining, you are at the right time, we are discussing your patch03:12
fengshengqinyes, we do.03:12
hongbinfengshengqin: what are your use cases ?03:12
caisanhongbin: yes, i have implemented the image-delete code03:12
fengshengqindelete image in docker data03:13
hongbininteresting03:13
fengshengqinif glance driver, need delete the tar in the specified path03:13
caisanfengshengqin: policy ?03:13
hongbinit sounds like this is the operation for cloud admins ?03:14
hongbine.g. cloud admins want to delete image from docker daemon and glance tarball03:15
hongbinhowever, docker daemon and glance tar is hidden from normal users (non-admin)03:15
hongbinthis sounds like we should make image API as admin API03:15
fengshengqinthis is a good idea.03:16
hongbincaisan: ack03:16
hongbinfengshengqin: ack03:16
hongbincaisan: what do you think?03:16
fengshengqinhttps://github.com/openstack/zun/tree/master/zun/common/policies03:16
caisanhongbin: you means cloud user just can use the image supported by cloud platform?03:17
hongbincaisan: normal users would simply run the container with an image03:17
caisanjust that?03:18
hongbinyes03:18
hongbini believe normal users won't care the specific path of glance tarball03:18
hongbinor the docker image stored in a specific compute host03:18
hongbinsince all the hosts are hidden from normal users03:19
caisanthis strategy reminds me of openstack/trove which do the same way of managing database image.03:19
hongbin(only admin can list the hosts)03:19
hongbinyes, although i am not quite familiar with trove03:19
hongbincaisan: for your patch, i believe most of the code will be used, what need to be change is the police03:20
hongbincaisan: change the police to make it admin only, that is it03:20
hongbinlike this: check_str=base.RULE_ADMIN_API03:21
hongbincaisan: any comment ?03:22
fengshengqinanything else?03:22
fengshengqin3. Introduce quota for containers (assignee: TBD)03:23
caisanhongbin: yes, i got it. but this cloud be not inconvenience for normal user if they pull the wrong image03:23
caisansorry guys, i am poor in english :(03:23
hongbincaisan: i think zun is for pulling hte image and mange them03:23
caisantyping slowly03:23
hongbincaisan: normally users just want to provide the name of the image, and let zun to pull it03:24
hongbinif the image is wrong, zun is responsible to deal with it03:24
hongbincaisan: think about it in nova, do the users are responsible to pull down the glance image ?03:25
hongbincaisan: i believe they are not, nova will manage the glance image tarball internally03:25
caisanhongbin: yes, i got the point. but the user can delete the image in glance.03:25
hongbincaisan: yes, this is the same as zun ?03:26
caisanhongbin: so the add the policy , normal user will delete the image in glance or docker if the need ?03:27
hongbincaisan: yes03:27
hongbincaisan: and i believe they won't have access to docker, so yes, they can delete it in glance03:27
caisanhongbin: well, at least, docker can not be accessed. yes03:27
hongbinagree03:28
fengshengqin 3. Introduce quota for containers (assignee: TBD)03:28
fengshengqinas i known, Keystone has supportted unified limits in Queen03:28
hongbinfengshengqin: this one is assigned to kien and kien doesn't seem to be here03:29
hongbinyes03:29
hongbini haven't looked into the unified limits in keystone yet, but this would be an interesting investigation03:29
fengshengqincurrently, nova manage the quota itself, not registering  the quota to keystone03:30
hongbinyes03:30
fengshengqini don't known how supports it for zun03:31
hongbinfengshengqin: no worry, kien will figure it out (i believe) :)03:31
fengshengqinOK, let's discuss this next time03:32
hongbin+103:32
fengshengqin#topic Bugs03:32
*** openstack changes topic to "Bugs (Meeting topic: zun)"03:33
fengshengqin1. Cannot create container with kata runtime (assignee: hongbin)03:33
hongbinfor this one, i believe the kata team is investigating the issue03:33
hongbinthey doubt that the issue is about the ipv6 support in kata03:33
hongbinthey are working on patching the runtime and give it another try03:34
hongbinthat is all about this bug03:34
hongbinfengshengqin: ^^03:34
fengshengqinthanks, hongbin, let's wait for new patch for kata03:34
fengshengqin2. Error on running privsep helper command (assignee: hongbin)03:35
hongbinfor this one, i have several patches up for reviews03:35
hongbin#link https://review.openstack.org/#/c/544155/03:35
hongbin#link https://review.openstack.org/#/c/554021/03:35
hongbinthis bug was introduced after the adding of privsep03:36
hongbinprivsep is the daemon for executing all the shell commands03:36
fengshengqinso we can execute the sudo command?03:36
hongbinso this bug basically breaks all the command execution03:36
hongbinfengshengqin: in before, yes, but we switch to privsep for security reasons03:37
hongbinfengshengqin: right now, all the shell commands are executed by privsep daemon03:37
fengshengqini got, i will review again.03:37
hongbinthanks03:37
fengshengqin#topic Open Discussion03:38
*** openstack changes topic to "Open Discussion (Meeting topic: zun)"03:38
fengshengqinhow about containerize for zun?03:38
hongbinwhat do you mean by containerize?03:38
fengshengqini mean zun is installed in a container03:39
hongbinyes03:39
hongbini believe we have BPs for that, let me find the link03:39
hongbin#link https://blueprints.launchpad.net/zun/+spec/zun-wsproxy-as-container03:39
hongbin#link https://blueprints.launchpad.net/zun/+spec/zun-api-as-container03:40
fengshengqinok, i will try to do something about it.03:40
hongbincool03:40
fengshengqinnow i have a question03:41
hongbingo ahead03:41
fengshengqinsuch as zun will execute df in container03:41
hongbincould you explain it a bit?03:42
fengshengqindf get the info of the container, not for the host03:42
hongbinoh, i see03:42
hongbinzun exec <container> <command>03:42
hongbinabove is the exec command, would it be useful ?03:43
fengshengqinso zun should send the commant to host, then host return infos to zun which is installed in continer.03:43
fengshengqin i think it is not03:44
hongbinyou mean the exec command?03:44
hongbinzun exec <container> df03:44
hongbinthis is equals to "docker exec <container> df"03:44
caisanshouldn't it return the info of the container ?03:45
fengshengqinit will return the df info of container03:45
hongbinyes03:46
caisanthis is what we expect03:46
fengshengqinbut i want get the host info03:46
hongbinoh, i see03:46
hongbinthere is an admin api03:46
caisanfengshengqin: you mean docker daemon host ?03:46
hongbin$ zun host-list03:46
hongbin$ zun host-show03:47
caisancool03:47
hongbinthis will return some host information i believe03:47
fengshengqinwhat about lspci?03:47
hongbinthis is a good question03:48
fengshengqinall command in zun code which get host info?03:48
hongbinfengshengqin: ??03:49
hongbinfengshengqin: don't get your last question03:49
fengshengqinI mean zun has installed in container, when zun execute the lspci/df/..., it will return the info of container03:51
fengshengqinbut i want get the info of host03:51
hongbinfengshengqin: right now, zun is installed in the host (not in the container) right ?03:52
fengshengqinyes03:52
hongbinsuppose zun is containerized, it is about the containerization of the zun-api and zun-wsproxy03:53
hongbinzun-compute should not be containerized ( i think)03:53
hongbinand all the commands are executed by zun-compute03:53
fengshengqinoh,i see.03:53
hongbintherefore, zun-compute will execute those commands in host03:53
fengshengqinso we want send the command to host03:54
hongbinyes, definitely03:54
fengshengqinThis is not a mature idea, I'll think about it, also hope to get your suggestions03:54
hongbinsure03:54
fengshengqinanything else?03:55
hongbinno from my side03:55
fengshengqinthanks for joining the meeting again, see you next time03:55
hongbinfengshengqin: thanks for chairing the meeting, i believe you did a good job :)03:55
fengshengqinthanks03:56
hongbinyes, see you all03:56
fengshengqin#endmeeting03:56
*** openstack changes topic to "Container management service for OpenStack"03:56
openstackMeeting ended Tue Mar 20 03:56:33 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)03:56
openstackMinutes:        http://eavesdrop.openstack.org/meetings/zun/2018/zun.2018-03-20-03.00.html03:56
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/zun/2018/zun.2018-03-20-03.00.txt03:56
openstackLog:            http://eavesdrop.openstack.org/meetings/zun/2018/zun.2018-03-20-03.00.log.html03:56
*** hongbin has quit IRC04:00
*** rajat has joined #openstack-zun04:03
*** deepak_ has joined #openstack-zun04:04
*** deepak_ has quit IRC04:56
*** deepak_ has joined #openstack-zun05:10
*** caisan has quit IRC05:54
*** caisan has joined #openstack-zun05:57
*** masber has quit IRC06:12
*** goutham has joined #openstack-zun06:24
gouthamHi all https://etherpad.openstack.org/p/Cliff_Usage_in_Python-Zunclient the etherpad to update your views on06:26
gouthamhttps://blueprints.launchpad.net/zun/+spec/cliff-in-python-zunclient this blueprint.06:26
gouthamCan anyone just post the link of the meetings?/06:27
openstackgerritcaishan proposed openstack/zun master: Adds image delete to server side  https://review.openstack.org/55076206:36
*** masber has joined #openstack-zun06:44
*** masber has quit IRC06:47
*** masber has joined #openstack-zun06:47
openstackgerritcaishan proposed openstack/zun master: Adds image delete to server side  https://review.openstack.org/55076207:17
caisangoutham: https://wiki.openstack.org/wiki/Zun#Meetings08:22
openstackgerritwangqi proposed openstack/zun-ui master: add documentation link to README  https://review.openstack.org/55446509:04
openstackgerritMerged openstack/zun-ui master: add documentation link to README  https://review.openstack.org/55446509:31
openstackgerritMerged openstack/zun master: Introduce rootwrap and filter  https://review.openstack.org/54415509:42
openstackgerritMerged openstack/zun master: Modify part of the code for the rebuilding process  https://review.openstack.org/55393309:42
*** kevinz has quit IRC09:52
gouthamZun Meetings are held at what time?? 3:00 UTC today r8??09:57
gouthamright**09:57
*** caisan has quit IRC10:07
openstackgerritMerged openstack/zun stable/queens: restart_policy can not be None  https://review.openstack.org/55402710:22
openstackgerritMerged openstack/zun stable/queens: Can't delete error container that non-existent in docker  https://review.openstack.org/55402510:31
openstackgerritMerged openstack/zun stable/queens: api-ref: fix the type of restart_policy  https://review.openstack.org/55402810:31
openstackgerritMerged openstack/zun stable/queens: Failed to update memory for container  https://review.openstack.org/55402410:31
openstackgerritMerged openstack/zun master: Delete container failed if container host is None  https://review.openstack.org/55368710:31
*** goutham has quit IRC10:35
*** masber has quit IRC10:43
*** caowei has quit IRC10:49
*** masber has joined #openstack-zun11:08
*** masuberu has joined #openstack-zun11:12
*** masber has quit IRC11:14
*** caowei has joined #openstack-zun11:55
*** openstackgerrit has quit IRC12:33
*** hongbin has joined #openstack-zun13:30
*** openstackgerrit has joined #openstack-zun13:59
openstackgerritHongbin Lu proposed openstack/zun stable/queens: Introduce rootwrap and filter  https://review.openstack.org/55455113:59
*** goutham has joined #openstack-zun14:45
gouthamHI all will the meeting start here only??14:55
*** goutham has quit IRC14:58
*** cooldharma06 has joined #openstack-zun15:16
*** AndChat|94569 has joined #openstack-zun15:26
*** cooldharma06 has quit IRC15:26
hongbingoutham: yes15:42
*** masuberu has quit IRC16:18
*** AndChat|94569 has quit IRC16:29
openstackgerritMerged openstack/zun-tempest-plugin master: Add tempest test for the 'nets' parameter  https://review.openstack.org/55227016:39
openstackgerritMerged openstack/zun-tempest-plugin master: Cleanup the created security groups  https://review.openstack.org/54416016:39
openstackgerritMerged openstack/zun-tempest-plugin master: Updated from global requirements  https://review.openstack.org/55330616:42
*** masuberu has joined #openstack-zun16:59
*** caowei has quit IRC17:03
*** masuberu has quit IRC17:33
*** harlowja has joined #openstack-zun18:23
*** masber has joined #openstack-zun20:02
*** masber has quit IRC20:32
*** openstackgerrit has quit IRC20:33
*** openstackgerrit has joined #openstack-zun21:40
openstackgerritMerged openstack/zun stable/queens: Correct the response code of attach  https://review.openstack.org/55402221:40
*** hongbin has quit IRC22:44
*** harlowja has quit IRC22:57
*** masber has joined #openstack-zun23:03
*** masuberu has joined #openstack-zun23:04
*** masber has quit IRC23:08
*** harlowja has joined #openstack-zun23:49

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!