=== frankban|afk is now known as frankban [09:24] does anyone use juju with maas pods? trying to figure out how you define the amount of disk space a pod should have === mhilton_ is now known as mhilton === salmankhan1 is now known as salmankhan === salmankhan1 is now known as salmankhan [13:10] Hi, I am getting an error when deploying cs:~tengu-team/ssl-termination-proxy-0 [13:13] cannot get discharge from "https://api.jujucharms.com/terms": cannot acquire discharge: POST "https://api.jujucharms.com/terms/discharge" [13:13] what would that mean? [14:41] cmars: anything wonky with terms this morning? ^^ [14:42] kwmonroe: yes, we had a temporary outage earlier this morning, should be fixed now [14:42] stapler: ^^ [14:42] roger dodger, thx cmars [15:05] Best way to test changing the kube-apiserver arguments? I’d like to modify the startup [15:41] I got it, modfied the args and restarted [15:44] cynthiaoneill: if you change the config on the charm it will handle the restart and everything for you [15:45] ok, but wanted to change several api server arguments, i’ll have to see if the config lets me do that [15:49] cynthiaoneill: It does, you can do something like `juju config kubernetes-master api-extra-args="runtime-config=batch/v2alpha1=true profiling=true" and it would pass --runtime-config=batch/v2alpha1=true --profiling=true in addition to the other args. Anything you pass takes precedent as well. [15:50] Thanks! [17:03] The kubernetes-master charm supports a configuration option called ‘enable-rbac’. What would be a command example using this? [17:06] cynthiaoneill: if you want to turn on rbac you can do so with: juju config kubernetes-master authorization-mode="RBAC,Node" [17:06] cynthiaoneill: more info here: https://github.com/juju-solutions/bundle-canonical-kubernetes/wiki/Authorization-Mode-and-RBAC [17:07] Yay!!! That’s what I needed. We would also want secure-port and bind, I’ll try it that way. === frankban is now known as frankban|afk [18:10] I'm getting a "sudo: unable to resolve host juju-138a08-0" when doing a "juju bootstrap localhost controller --config=juju.config.yaml" (config sets the proxies, no direct internet access on these machines) [18:12] (lxd 3.0.0) [18:14] it seems that the bootstrap just hangs there [18:14] looking at the log file, I see that it reaches the login [18:14] but there is a (probably stuck) "sudo /bin/bash -c /bin/bash -c set -e tmpfile=$(mktemp) trap "rm -f $tmpfile" EXIT cat > $tmpfile /bin/bash $tmpfile" [18:21] When I change to secure-port=443, and bind-address=0.0.0.0, I get this error when doing kubectl get nodes: Error from server (InternalError): an error on the server ("\r\n502 Bad Gateway\r\n\r\n

502 Bad Gateway

\r\n

nginx/1.10.3 (Ubuntu)\r\n\r\n") has prevented the request from succeeding (get nodes) === hml_ is now known as hml [18:59] I don’t have to use secure-port=443 for the apiserver if we use an ingress to terminate the encryption - just learned. So the dashboard ssl termination would be nice if it went to an ingress controller [19:01] is there a way to fix the hwaddr of the controller? [19:04] (using lxd) [19:18] Hi, has anyone configured OpenStack to use VLANs through Juju? I am not sure where it is best to ask this (I have tried Ask Ubuntu but I have not yet received a response). Does anyone have further information about where I might ask? [19:31] or if anyone can point me in the direction of documentation on the networking components of the OpenStack charm, that would be great, too. I have been struggling with this for several days [20:00] pilot8092: yeah [20:00] pilot8092: I gotchu covered [20:00] doing just that right now on my own cluster [20:28] pilot8092: https://paste.ubuntu.com/p/pxtWjkJpVb/ [22:10] Is there a juju way to install tiller into kubernetes?