15:02:36 #startmeeting kuryr 15:02:37 Meeting started Mon May 9 15:02:36 2016 UTC and is due to finish in 60 minutes. The chair is apuimedo. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:02:38 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:02:41 The meeting name has been set to 'kuryr' 15:02:59 Hello! And welcome to yet another kuryr weekly meeting! 15:03:06 Is there anybody here for it? 15:03:15 O/ 15:03:46 o/ 15:03:51 That's me with my big head. 15:04:12 so then, O-/ that's me with the big nose 15:04:23 thanks mspreitz and banix for joining :-) 15:04:36 I think Irena will join us in half an hour or so 15:05:05 #topic repository splitting 15:05:35 Gal is on holidays but he has submitted patches for creating the subprojects with openstack-infra 15:05:50 we'll leave openstack/kuryr for the common code 15:07:08 we'll move libnetwork to openstack/kuryr-libnetwork 15:07:28 and k8s to openstack/kuryr-kubernetes 15:07:34 #link https://review.openstack.org/#/c/313981/6/gerrit/projects.yaml 15:07:59 #info patches submitted for creating kuryr-libnetwork and kuryr-kubernetes repositories as Kuryr subprojects 15:08:15 Kuryr cores will be the same 15:08:30 o/ 15:08:32 but I expect that we may introduce cores for a single sub project in the future 15:08:40 devvesa: nice to see you here 15:08:45 thx :) 15:09:12 any questions about the split? 15:10:04 ok, moving on 15:10:14 #topic libnetwork updates 15:10:50 #info The ovs libnetwork container has been merged into the repo 15:10:55 #link https://review.openstack.org/#/c/279320/ 15:11:06 Today it will be added for automated builds 15:11:13 the image is already available in docker hub 15:11:26 #info docker pull kuryr/libnetwork:ovs 15:12:11 I hope other vendors join and ask for publishing in kuryr/libnetwork:vendor_name or publish their own in their own repositories 15:12:30 #info: ping apuimedo if you want to add your vendor automated build 15:12:35 hello 15:12:46 huikang: Hey! Nice to see you too! 15:13:10 I was just mentioning that our dockerfile has been merged 15:13:16 and has been tested alongside devstack 15:13:22 nice 15:13:46 that should allow us to move forward testing tests where instead of devstack we use containers from kolla for the networking 15:14:16 ok 15:15:20 so I will write the gate job to setup kolla and test kuryr 15:15:43 apuimedo, how about the keystone v3 issue? 15:16:31 huikang: ah yes. That's the remaining action :P 15:16:51 #action apuimedo to check if there is a bug for it and to try to get it sorted out by next week 15:17:21 we also got the calico binding script merged 15:17:35 #info project Calico binding script merged 15:17:42 For gate job, we can ask kolla keystone generate a temporary v3 token for kuryr. 15:17:57 #info the container uses uwsgi to provide libnetwork with multiple cores and threads 15:18:18 #action all packaging to include the uwsgi usage 15:18:55 Was posting on wrong channel :) 15:18:57 huikang: well, we should do that as part of kuryr, or you mean as part of of the jenkins shellscript? 15:19:06 banix: where were you posting? 15:19:10 jenkins shellscript 15:19:21 huikang: we can start with that, yes :-) 15:19:29 great, apuimedo 15:19:31 banix: I see it now 15:20:06 banix: to the question about testing, the answer is 15:20:23 I want the post merge test using the automatically built container 15:20:25 Regarding keystone v3, Hui did you asign the bug to yourself? 15:20:41 Or is it on Fawad's list? 15:20:58 it is still on Fawad's list 15:21:03 the same thread 15:21:33 Ok 15:22:01 very well 15:22:11 apuimedo I think huikang is looking into next steps 15:22:15 banix: any update on the routing/gateway specification? 15:22:44 I noticed a couple of new api in libnrtwork 15:22:58 That deal with external connectivity 15:23:24 Haven't looked closely but I thought we may use that for router stuff 15:23:37 Anyway will get that sorted out this week 15:23:51 mmm 15:24:04 so probably we should use those instead of making our own -o API 15:24:20 #action banix to look into the new 1.11 libnetwork external connectivity API 15:24:26 Yeah if possible 15:24:59 banix: you can do even the impossible :-) 15:25:17 One more thing 15:25:27 Regarding libnetwork :) 15:25:57 banix: what else? 15:26:14 I'm going to have a patch to allow for user to wait for a join to complete only when port is operational 15:26:57 sounds like an opposite to "--no-wait" in OVS 15:27:01 banix: how often do you see delays due to it? 15:27:09 Put the bug reference in the wiki 15:27:28 huikang: that in ovs is for the ovs-vsctl operation? 15:27:43 Based on past experience under heavy load that can be a problem 15:27:51 interesting 15:27:52 :-) 15:27:52 yes, apuimedo. what is default behavior? 15:28:22 huikang: no idea. I'm not very experienced with ovs. I only used it recently with the libnetwork container :P 15:28:55 apuimedo, sorry. I was asking the default behavior in kuryr or libnetwork 15:29:06 Huikang nova has similar options 15:29:08 #action banix to publish a patch so that network join waits for the port to be operational 15:29:18 huikang: we use the ovs-vsctl default 15:29:21 just like nova does 15:29:37 Pls sea the bug report. On my phone so don't have the link. Sorry. 15:29:38 anything else about libnetwork? 15:29:48 I'll check it then 15:29:50 after the meeting 15:29:52 thanks banix 15:29:55 No from me 15:29:59 banix, apuimedo, thanks for explaining this 15:30:12 thanks to you for the help 15:30:17 #topic kubernetes 15:30:36 As soon as the repository is created we'll start submitting the patches 15:30:41 so I will start creating the shell script to pulling kolla on the gate 15:31:04 #info kubernetes specs will still leave in the main repository, openstack/kuryr 15:31:17 BTW, I have something that is for kubernetes but is directly something about libnetwork. 15:31:18 thanks a lot huikang! 15:31:34 mspreitz: you got the adapter working? 15:31:38 apuimedo, my pleasure 15:32:35 I have a simple "translate" approach CNI plugin in the Kubernetes contrib repo. But I wanted to raise the issue of `docker network connect --ip=XXX`. IBM is going to need that to work, by latching onto a pre-existing but unused Neutron Port. 15:33:03 aha 15:33:15 mspreitz: I take it, it does not work right now, does it? 15:33:33 I think banix said something that implies it does not work right now. 15:33:41 Should be easy to add 15:33:52 it's part of the Docker libnetwork API and we should consider it a bug, if it does not work 15:34:10 I will try it out 15:34:24 It should work 15:34:30 #action apuimedo to test "docker network connect --ip="xxx" 15:34:41 Specifying the ip that is 15:34:43 banix: I could imagine us not honoring the IP parameter though 15:34:47 The possibly unexpected part is that what I want is `--ip=W.X.Y.Z` to latch onto a pre-existing Port with that Ip address 15:34:55 Using pre existing port may not 15:35:09 Yes exactly 15:35:39 We honor the up request 15:35:44 Up 15:35:46 banix: mspreitz: We'll only do that if the port has not been updated with binding information 15:35:56 otherwise it opens the door for nasty hijacking, I believe 15:36:03 (correct me if I'm wrong) 15:36:18 Correct 15:36:20 Exactly. I want `--ip=W.X.Y.Z` to latch onto a pre-existing Port that has that IP address and is not currently in use. 15:36:52 mspreitz: very well 15:36:54 we can add that 15:36:59 We will work through the use case Mike has 15:37:07 great 15:37:10 banix: perfect! 15:37:37 #action mspreitz banix to report a bug for reusing unused ports (finding them by IP) 15:37:56 mspreitz: any other news from the kubernetes-net-sig camp? 15:38:13 I have to admit that I've not kept up to date recently with the summit and all 15:38:17 The spec for ingress filtering is firming up. 15:38:26 that is what that group has been working on. 15:38:40 They are now starting to turn some attention to multi-tenancy in the network 15:39:17 I listed a lot of ways to approach it. So far it is not clear that there is much that should go into k8s for this, except probably a little generalization to allow some of the techniques. 15:39:26 More pluggability. 15:39:35 and parameterization. 15:39:52 mspreitz: fkautz and I discussed some Docker (and by extension libnetwork) multitenancy. fkautz is trying to push it into docker 15:40:05 Where was this discussed? 15:40:25 mspreitz: in the summit work session and last week in #openstack-kuryr 15:40:41 mspreitz: we'd like to see you in the irc more often :P 15:41:10 I work odd hours, seems that whenever I am on IRC, nobody else is. 15:41:29 Anyway, is that proposal written down anywhere? 15:41:31 mspreitz: you should set up an IRC bouncer like I did last week :-) 15:41:46 mspreitz: I guess fkautz will update us when it is 15:41:50 Or we should switch to Slack? 15:42:06 mspreitz: not possible for openstack projects :P 15:42:25 then someone should tell me, offline, what an IRC bouncer is. 15:42:54 #info: devvesa is preparing CI jobs for coverage of the kuryr-kubernetes code that we'll be able to set up when we push the code in the new repo 15:43:07 mspreitz: sure, I'll send you an email ;-) 15:43:17 thanks 15:43:35 mspreitz: please, paste here the link to your cni->libnetwork translator in the k8s repo 15:43:42 for the meeting logs 15:43:55 https://github.com/kubernetes/contrib/tree/master/cni-plugins/to_docker 15:44:07 thanks! 15:44:13 #link https://github.com/kubernetes/contrib/tree/master/cni-plugins/to_docker 15:44:13 There is a PR in progress on that, https://github.com/kubernetes/contrib/pull/845 15:44:21 #link https://github.com/kubernetes/contrib/pull/845 15:44:30 anything more on kubernetes from anybody? 15:44:53 mspreitz: I trust you saw my answer on the mailing about the service load balancer usage 15:45:23 Yes, thank you. 15:45:31 :-) 15:45:31 apuimedo: sorry I have network issues today, will have to catch up from the log 15:45:44 irenab: me too. I'm tethering right now 15:45:56 (and that after having gone to my parents for better wifi) 15:46:09 #topic open discussion 15:46:19 Anybody else has any other topic to bring up? 15:46:43 #info We should consider a mid-cycle virtual sprint at some point 15:46:50 We'll update on the mailing list 15:46:57 about that 15:47:07 Meeting time ! 15:47:23 Do we need changing this time? 15:47:43 also, banix, what do you think about doing the first release after we support the external connectivity (if possible) and have successfully moved to the new repo? 15:47:47 There was nobody around for last week's meeting. 15:48:12 Does anybody know where Weave and Calico stand wrt libnetwork and external connectivity? 15:48:16 apuimedo sounds good 15:49:24 mspreitz: the alternate time is far too late for me to join 15:49:39 mspreitz: I think that they provide external connectivity always by default 15:49:43 but I may be wrong 15:49:53 I am not criticizing anyone, just suggesting the time may not be good. 15:50:15 I think Weave's libnetwork plugin does not provide external connectivity 15:50:28 At least, not in the normal way. They have special ways of their own. 15:50:50 mspreitz: well, it's up for the people in those time zones to propose a new time 15:51:09 I hope they do 15:51:27 and participate more, otherwise I don't see a lot of good from having the alternate meeting 15:51:59 mspreitz: being that it's all routed I expect that they just propagate some bgp to the edge 15:52:05 but I've never really tried it 15:52:17 mspreitz: you should ask neiljerram in #openstack-kuryr channel 15:52:25 he's from kuryr 15:52:30 sorry, calico 15:52:33 any other topic? 15:53:12 I think we can leave storage for when gal comes back? 15:53:31 Do we have anyone from fushi here? 15:53:45 Or magnum storage? 15:54:12 Can you share if there were any agreements regaridng the Newton features at the summit? I mean except for k8s 15:54:38 banix: I think we'll have to take to the mailing list about that 15:54:41 :P 15:54:55 Sure 15:55:04 in case someone has etherpads of the Thursday/Friday sessions, it can be great 15:55:39 banix should have the links 15:55:44 I was lazy to open the laptop 15:55:47 :P 15:55:58 I wanted to ask to move the Monday meeting one hour before or after if it works for other people 15:56:20 Irenab please let me find and share by email 15:56:28 banix: thanks 15:56:56 irenab: sounds good to me 15:57:03 Moving either way is ok with me 15:57:06 irenab: please, start an ml thread about it 15:57:12 thanks all for joining 15:57:24 Thx 15:57:24 have a nice and productive week! 15:57:30 #endmeeting