16:02:45 #startmeeting project_atomic_community_meeting 16:02:45 Meeting started Mon Jun 26 16:02:45 2017 UTC. The chair is jberkus. Information about MeetBot at http://wiki.debian.org/MeetBot. 16:02:45 Useful Commands: #action #agreed #halp #info #idea #link #topic. 16:02:45 The meeting name has been set to 'project_atomic_community_meeting' 16:02:45 Meeting started Mon Jun 26 16:02:45 2017 UTC. The chair is jberkus. Information about MeetBot at http://wiki.debian.org/MeetBot. 16:02:45 Useful Commands: #action #agreed #help #info #idea #link #topic. 16:02:54 #topic roll call 16:03:01 .hello jberkus 16:03:01 jberkus: jberkus 'Josh Berkus' 16:03:03 .hello yzhang 16:03:07 yzhang: yzhang 'Yu Qi Zhang' 16:03:08 .hello dustymabe 16:03:10 dustymabe: dustymabe 'Dusty Mabe' 16:03:11 .hello smilner 16:03:12 ashcrow: smilner 'None' 16:03:19 .hello dwalsh 16:03:20 dwalsh: dwalsh 'Daniel J Walsh' 16:03:21 interesting that #topic didn't get picked up 16:03:22 .hello gbraad 16:03:23 gbraad_: gbraad 'Gerard Braad (吉拉德)' 16:03:24 .hellomynameis jzb 16:03:25 * gbraad_ just lurking 16:03:27 jzb: jzb 'Joe Brockmeier' 16:03:38 .hello rangerpb 16:03:39 rangerpb: Sorry, but you don't exist 16:03:40 .hello tsweeney 16:03:44 tsweeney: Sorry, but you don't exist 16:03:50 .hello mbarnes 16:03:51 mbarnes: mbarnes 'Matthew Barnes' 16:03:56 :) you have to use your fedora account nick 16:04:00 (this is the problem with using zodbot) 16:04:05 but, better than nothing 16:04:22 what if the nick is already used ? 16:04:32 .hello baude 16:04:33 dustymabe: baude 'Brent Baude' 16:04:35 baude: your nick doesn't matter, you can .hello as anyone 16:04:54 baude: yeah just use your fedora acount in the hello command 16:04:54 well then i will hello as you for now on 16:05:03 :) 16:05:09 fwiw i have to drop at the bottom of the hour 16:05:21 .hello jlebon 16:05:23 jlebon: jlebon 'None' 16:05:28 .hello miabbott 16:05:29 miabbott: miabbott 'Micah Abbott' 16:05:58 additional notes at http://etherpad.osuosl.org/atomic-community-meeting 16:06:53 add yourselfs to the attendee list at the top 16:07:17 .hello gscrivan 16:07:19 giuseppe: Sorry, but you don't exist 16:08:08 aweiteka: meeting? 16:08:15 .hello gscrivano 16:08:16 yzhang: gscrivano 'Giuseppe Scrivano' 16:08:44 #topic Origin vs. Kubernetes on FAH/CAH 16:08:54 #chair yzhang giuseppe jberkus miabbott jlebon rangerpb mbarnes tsweeney gbraad_ ashcrow jzb 16:09:03 .hello maxamillion 16:09:04 maxamillion: maxamillion 'Adam Miller' 16:09:07 I'm going to limit this discussion to 20 min, because we want time for other items 16:09:40 #chair yzhang giuseppe jberkus miabbott jlebon rangerpb mbarnes tsweeney gbraad_ ashcrow jzb maxamillion 16:09:40 Current chairs: ashcrow gbraad_ giuseppe jberkus jlebon jzb maxamillion mbarnes miabbott rangerpb tsweeney yzhang 16:09:40 Current chairs: ashcrow gbraad_ giuseppe jberkus jlebon jzb maxamillion mbarnes miabbott rangerpb tsweeney yzhang 16:10:06 so, everyone saw my post on atomic-devel on this topic, summarizing last week's discussion? 16:10:16 er, last meeting's 16:10:33 yes, but it would be good to post a link anyways 16:11:11 will do, searching for archive link 16:11:24 in the meantime, does anyone have additional input on this? 16:11:39 the mail was called: "[atomic-devel] Kubernetes vs. Origin for upstream" 16:12:39 here we go: https://lists.projectatomic.io/projectatomic-archives/atomic-devel/2017-June/msg00076.html 16:12:40 #link https://lists.projectatomic.io/projectatomic-archives/atomic-devel/2017-June/msg00076.html 16:12:54 jberkus: i think you gave a pretty good summary 16:13:09 I was hoping we would get more feed back from the Origin people. The question i have is, do we have anyone actively supporting the kubernetes package? 16:13:12 we did get tim st clair to volunteer to help out a bit more on the kubernetes side of things 16:13:47 dwalsh: i think it's mostly jchaloup building things but not really much verification there 16:13:59 and jbrooks 16:14:06 and then jbrooks and yzhang helping out 16:14:19 dwalsh: a big part of what this is about is where we're going to focus our packaging efforts 16:14:39 I asked jchaloup to join us if he is able 16:14:52 dwalsh: AFAIK, there are no "origin" people, just OpenShift team 16:14:57 jberkus: when you say "packaging" do you mean RPMs or container images? 16:15:10 maxamillion: well, in Fedora we need both, no? 16:15:12 jberkus, Right. but if people add lots of bugzillas, and know one looks at them... 16:15:19 maxamillion: for Atomic, we really care about container images 16:15:47 jberkus: yes, I'm just curious about the scope of the statement ... and how far/wide does it span? system containers included also? 16:15:54 so here is the thing - i think if we switch our focus to origin we might end up in the same problem 16:16:07 maxamillion: well, it would be *mainly* system containers 16:16:45 right - so if we switch our focus to origin in Fedora 16:16:49 don't we have the same problem 16:16:51 Either way we need to make sure we have someone signed up to maintain the system container. Get updates into it on a regular basis, especially security ones. 16:16:56 maxamillion: builds the package 16:16:59 a few people test it 16:17:02 dustymabe: on Fedora, yes 16:17:13 most people are pulling origin from docker hub 16:17:17 * dustymabe thinks 16:17:24 if they are running it containerized 16:17:26 dustymabe: frankly, if we had the people, I'd suggest that we focus on Origin for CentOS, and Kubernetes for Fedora 16:17:31 dustymabe: other than 'oc cluster up' I don't think that's accurate 16:17:33 dustymabe: that is the case 16:18:05 the Origin images on Docker hub already have the files necessary to run as system containers 16:18:05 dustymabe: I wager that most people either get Origin from the CentOS PaaS SIG or from Fedora if they are deploying to more than one node 16:18:23 giuseppe: oh? 16:18:26 cool 16:18:54 so what sucks about this is confusion 16:19:07 if we had one funnel to send people through then it would be easier 16:19:27 basically the origin team is going to make sure what is in docker hub works because that's what they promote 16:19:47 none of us are on the origin team so everything we do is 'playing catch up' mostly 16:19:51 although "works" == "works on CentOS" 16:19:59 maxamillion, https://hub.docker.com/r/openshift/{origin,node,openvswitch} 16:20:13 giuseppe: awesome, thanks 16:20:25 same problem with kubernetes 16:20:47 which is ok, but it's going to be overhead and we need people to maintain it 16:21:10 right now I personally haven't been looking at origin in fedora much at all (other than using it as a client) 16:21:30 i basically set up the openshift-ansible installer from upstream and then it installs origin for me (containerized) 16:21:46 which means I don't test the origin from fedora 16:21:59 dustymabe: that's what I do as well 16:22:09 i'm just identifying this as a potential problem 16:22:16 dustymabe: that's what I do,but it still frequently breaks for me 16:22:27 which will end us up back in the same situation we are trying to solve now - which is reduce overhead 16:22:53 or expand support 16:23:22 Tim St. Clair weighing in points out another advantage to pursuing Kubernetes ... we can potentially get help/support from the kubernetes community 16:23:28 which is not true of Origin 16:23:31 dustymabe, yes, and installing the system containers version should happen in the same way (openshift_use_system_containers=True to the inventory file) 16:23:53 jberkus: sure 16:25:11 yeah would be nice to basically build our k8s community 16:25:22 if we can get more people willing to step up, then i'm 100% for keeping that around 16:25:51 so we're still stuck in the situation that we have two esentially equal options, but don't have the resources to pursue both 16:26:14 and pursuing either option adequately requires more work we're not currently doing 16:26:16 jberkus: i would even venture further to say we have 3 options 16:26:30 what's #3? 16:26:56 well, just that focusing on origin is only part of the solution since there is also fragmentation about where you can get containers from 16:27:07 i.e. from docker hub or from fedora 16:27:15 dustymabe: isn't there going to be fragmentation either way? 16:27:48 maxamillion: not unless we just told people to pull from the origin community directly (i'm not saying that's what we should do, just pointing it as an option) 16:28:16 btw, I want to point out the other major cost to a focus on Origin 16:28:29 dustymabe: if we want the origin stuff in registry.fedoraproject.org, I can do that this afternoon and it will go out with tomorrow's container release 16:28:32 right now, neither FLIBS nor CP produce Openshift-ready container images 16:28:42 CP? 16:28:48 container pipeline. CentOS 16:28:50 oh 16:28:51 right 16:29:10 maxamillion: what i'm saying is that we want to get as many people as possible pulling from the same sources 16:29:19 adding origin to FLIBS doesn't help us with that 16:29:21 IMHO 16:29:42 in order to do that we would either need to tell our users to pull from origin docker hub 16:29:45 I agree, getting all of the content from Fedora is best solution. 16:29:48 dustymabe: then I don't understand the problem you're stating 16:29:56 or convince the origin community to tell people to pull from registry.fedoraproject.org 16:30:27 i guess i'm thinking too big 16:30:31 or from the CentOS registry 16:30:51 dustymabe: wait, are you saying that this wouldn't be a problem with k8s? 16:31:01 maxamillion: it would be 16:31:12 jberkus: I agree 16:31:20 maxamillion: yes, it would be. what i'm trying to point out is that the same problem we are trying to solve by getting rid of k8s, won't really be solved 16:31:24 although ... for Atomic, we can configure docker/skopeo to pull from Fedora/CentOS first 16:31:24 jberkus: but I though dustymabe was saying this is an unique problem to Origin and I don't follow 16:31:43 tbh I'm feeling more muddled about what we are trying to fix as the conversation goes on. 16:31:45 ok, it sounds like we still don't have a conclusion 16:31:56 * dustymabe will stop talking now 16:31:59 does anyone else have any commentary before we take this back to the mailing list? 16:32:00 sorry for that 16:32:01 2 minutes 16:32:04 ashcrow: +1 ... I don't really understand what we're trying to solve here 16:32:24 basically trying to get more alignment and spin our wheels less 16:32:25 jberkus: can you reiterate the reason and the options we are aware of? 16:32:31 dustymabe: ah 16:32:33 jberkus: I think that will help before we go back to mailing list 16:32:54 ashcrow: i can, if he doesn't want to 16:32:58 Currently we kind of promote Kubernetes as our main orchestrator for 16:32:58 upstream Atomic (Fedora Atomic and Centos Atomic). However, we also 16:32:58 promote upstream Atomic as a plaform for Origin. There are two problems 16:32:58 with our current approach: 16:32:59 1. we don't realistically have the resources to package, document, and 16:32:59 promote both upstream Kubernetes and Origin on upstream Atomic. 16:33:00 2. not having a default option with clear & complete documentation 16:33:00 confuses users and doesn't present them with a complete system. 16:33:01 As a result, we need to decide which platform is the one we promote 16:33:02 first, and ensure has a complete and up-to-date toolchain. 16:33:28 per email 16:33:42 silly question 16:33:54 do the k8s binaries from upstream "just work" on Fedora? 16:34:05 e.g. does re-packaging it for Fedora add any value? 16:34:08 FWIW, I don't personally have any interest in vanilla k8s since I only work with Origin ... I don't think that should have any impact on anyone's opinion or decision, but I won't be signing up to be doing work if things go the k8s direction and I wanted to point that out because suspect others will have a similar stance for one vs the other 16:34:32 jzb: no, they don't 16:34:37 OK 16:34:43 jzb: hence the effort 16:34:57 maxamillion: that's a good question. how many people are in maxamillion's boat? 16:35:08 +1 16:35:19 gbraad_: what are you +1ing? 16:35:21 And our options is to focus more on one at the expense of the other (for the time being). Correct? 16:35:32 jzb: if they did though, repackaging adds the same value as repackaging anything in Fedora ... you get source->binary audiability and hopefully a well tested cohesive component of the distro 16:35:34 I am in the same boat 16:35:38 ashcrow: correct. also to promote one as the "primary" option 16:36:37 i'll attempt to make them both work - but admit that i lean towards openshift 16:36:40 I am in the same boat as maxamillion and gbraad_ as well. 16:37:13 strigazi: around? 16:37:26 we're having a conversation about kubernetes/openshift origin in project atomic 16:37:37 I'm not anti-k8s by any means, it's just a lack of spare cycles and I'm already focused on openshift because I need the build pipeline stuff 16:37:52 * ashcrow nods 16:38:10 I don't think anyone is anti-k8s. It's just a matter of focus and time. 16:38:24 * dustymabe thinks we need to have a kubernetes SIG or something 16:38:39 maxamillion: understand. but I also do not see how it would distance people from k8s. is the involvement beneficial and helping us? 16:38:52 ok, we need to move on just because people mentioned other topics 16:39:04 gbraad_: oh, absolutely ... it's a tough cross-roads to be at 16:39:04 jberkus: vote or just leave open? 16:39:22 jzb: leave open. folks, please continute discussion here/on the ML after the meeting 16:39:29 #topic upcoming events 16:39:33 And which does our customer base prefer/use more? 16:39:42 ooops, too late 16:40:06 so, we have a few events with CfPs open which we need Atomic folks for 16:40:19 (1) KubeCon NA (Austin, December) 16:40:33 (2) Container.Camp UK (London, October) 16:40:53 jberkus: KubeCon NA is just down the road from me so I'll be submitting something ... just not sure what yet 16:40:56 I *really* want to see proposals for the various Kubernetes-involved projects for KubeCon 16:41:13 cdrage: ^^ anything planned 16:41:30 jberkus: it's mostly going to be a matter of if they're open to OpenShift-related talks :) 16:41:53 I have an open door for reviewing talk proposals 16:41:53 because while OpenShift is technically a Kubernetes distribution, it's not just straight up kube 16:41:59 jberkus: +1 thanks 16:42:06 as in, PLEASE send me your abstracts to review before you submit them 16:42:18 maxamillion: they've accepted OS talks before 16:42:27 jberkus: cool cool 16:42:40 for ContainerCamp, do we have anyone in Western Europe? 16:43:07 jberkus: is there any coordination with the OpenShift Team around what talks are being submitted? 16:43:32 maxamillion: nothing I've been able to achieve. if you can make coordination happen, that would be great 16:43:55 note there will be an OpenShift Commons at Kubecon as well 16:44:03 so you can *also* submit talks there 16:44:10 jberkus: I'll reach out and CC you 16:44:12 although that event focuses on OpenShift customer stories 16:44:34 more on mailing list 16:44:38 ok 16:44:43 #topic open florr 16:44:51 #topic open floor 16:45:11 jberkus: was going to ask about future of atomic registry 16:45:11 so, a couple people wanted to raise stuff? ashcrow, anything from commissaire? 16:45:17 i don't see aweiteka around, though 16:45:30 dustymabe: termination, AFAIK. we should get that formally on the agenda for next time 16:45:37 yeah 16:46:01 jberkus: Just that our community meeting for Commissiare is tomorrow (http://commissaire.readthedocs.io/en/latest/community_meetings.html) 16:46:03 #action dustymabe to get aweiteka to next meeting 16:46:07 yzhang: jberkus: want to give a short summary of the linuxcon trip? 16:46:18 ashcrow: I spoke with Brian Stinson at the containercon in beijing. And we wanted to be able to offer a minishift on CentOS CI. we would like to see if we can you guys on their 16:46:33 s/their/there 16:46:38 Hm, I have the written summary, perhaps gbraad_ would have more to add 16:46:45 since he was also very active at the event 16:46:47 I've heard that atomic registry got consumed by OpenShift and you can now deploy it as "OpenShift Stand-Alone Registry" isntead of a separate project/product --> https://docs.openshift.org/latest/install_config/install/stand_alone_registry.html 16:46:48 yzhang: is that public? 16:46:55 gbraad_: cool! :-) 16:46:57 dustymabe: no 16:46:59 maxamillion: that's correct 16:47:15 yzhang: yeah would be good to get a public facing email maybe? 16:47:34 no secret bits, just overview - anything community relevant 16:47:40 dustymabe: a lot of attention for openshift and complaints about the ansible scripts 16:47:43 however, last time I attempted to deploy it ... the install instructions don't work, I filed a BZ 16:47:53 I would say interest in openshift is far higher than atomic 16:48:03 i wanted to write a summary, but didn't have the time yet 16:48:04 perhaps due to the fact that many people were openshift partners 16:48:07 yzhang: yeah, that is to be expected 16:48:25 I can send out an email if you'd like 16:48:29 gbraad_: what do you meanby 'offer a minishift on CentOS CI' ? 16:48:50 dustymabe: a pre-installed package and running instance 16:49:04 gbraad_: so for development purposes? 16:49:16 or purely for test? 16:49:24 this means that an install of openshift is available to target (for contained tests) 16:49:53 an idea would be to have the commissaire containers run on this. but we are at the initial (discussion) stage for this. 16:50:20 but according to brian, we had received similar questions from other projects 16:50:21 dustymabe: jberkus: maxamillion: i'm going to be helping out w/ issues with the registry, fyi. just getting up to speed over the next couple weeks. please add me to any discussion threads/meetings/etc. 16:50:33 thomasmckay: +1 thanks 16:50:43 the registry ==? 16:50:49 i don't think it is "atomic registry" specific but more "the registry ui in cockpit" 16:51:07 dustymabe: will pickup this discussion with ashcrow and brian. might discuss more on the commissaire meeting 16:51:23 gbraad_: please also report to atomic-devel ML so we can track 16:51:35 sure 16:51:45 thomasmckay: ok 16:51:46 i think aweiteka was in favor or removing the "atomic registry" installation flavor and focusing on openshift usage 16:51:55 yes 16:52:01 i don't know the results of those conversations, though 16:52:11 * gbraad_ will drop off now. thanks all 16:52:18 thomasmckay: is that the same UI elements brought into OpenShift's Stand-Alone registry? (i.e. - does it deploy cockpit internally somehow?) 16:52:38 thanks gbraad_ 16:53:56 ok, anything else for this meeting? 16:54:05 jberkus: +1 for closing 16:54:58 Are we meeting next week given it's 7/3? 16:55:18 tsweeney: every 2 weeks 16:55:47 #nextmeeting is July 10th. Topic: Atomic Registry 16:55:51 Doh!, thought it was weekly, thanks! 16:55:54 #endmeeting