Kubernetes SIG Windows, 7 Jul 2020

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Kubernetes SIG Windows 20200707

Description

Kubernetes SIG Windows 20200707

A

Hello, everybody and welcome to another sig windows meeting it's the 7th of july. As always, this is a recorded meeting. So please adhere to the cncf code of conduct, hello, everybody hope everybody had a good long weekend in the u.s and let's get started um so the the first few items I think, we'll be able to go through them fairly quickly. uh The first one is mark and I worked on a blog post called the sequindo spotlight that was published uh yesterday.

A

Well, it was published last week, but I think it really didn't go live until yesterday, and essentially this is a blog post to kind of help. uh Folks are interested to know a little bit more about sick windows. What do we do? What are some of our priorities at the high level? You know they added some cool graphics here and then you know and encourage folks to come and contribute.

A

You know the value proposition that we offer, and this is what we try to indicate here in the blog, is that if you come and contribute to seek windows, you get to touch pretty much every aspect of kubernetes from the cubelet to networking, to storage, uh to interfacing with security apis.

A

You know if you want to basically touch everything on kubernetes and still get to work on windows and net and and have and get some expertise there. We are the sig that offers this. You know like we're almost like a horizontal layer on top of every every kubernetes seek. We we deal with pretty much everyone, so folks are wanting to come and make a big impact. Kubernetes sequindos is a is a good spot to get started. Hopefully that will net us some more contributors.

A

Second thing I want to kind of outline is andreas cni. I know I've talked about this, maybe a little bit over a month ago, and now they just shipped version 0.8.0. That includes full windows support, uh including network policies. So this is kind of a big thing. So now we have one more cni that supports windows. uh It's production ready, uh it's fully supported by a community.

A

um Vmware is behind this, uh as the is the biggest contributor to andrea and you have full support for network policies.

A

So if you guys, uh this basically is built on top of a lot of the work that cloud-based did around obs and ovn. So you know they cloud-based paved the world uh the road here um maz, if you don't mind, let's talk about the backlog review in a little bit, we don't mind, can push this.

B

A

Yeah yeah yeah, we can talk in the end cool cool. Thank you. um The next item is cherry picks, so we got four cherry picks approved, approved from engineering, so sig node approved the last three 100 103 and 104. I approved the one five three three: uh that's uh that claudio wanted the first one and the next three are craig and maz and and mark so now we need to actually get a proposal for the release team to get this in uh craig.

A

Have you started that conversation at all, or is it something that you and I need to do- you're, muted.

A

Still needed sorry.

C

Too many screens, I have not started that conversation. I it's just monitoring.

A

Okay cool, so I'm gonna put a note here. uh I need to actually do that.

C

I thought it would come better from a co-chair other.

A

Okay, I'll I'll start the the thread on this right after this meeting. Okay, the next one mark rosetti's on personal leave, if you need something from a chair uh on our sig, either come to me or deep uh ben moss is also not working that much on windows these days. He has some other priorities. Hopefully, he'll come back eventually feel free to ping him. If you need him, but uh you know ping me on slack, call call out my name because I get I have so many slack channels.

A

I cannot monitor them all uh call out my name if you need my help uh or send me a private message. Okay, now I forgot to mention this on the cherry picks. Is there any other cherry picked to be missed? These are the four that I was tracking. Is there anything else?

A

If there's something else, please let me know quick, okay, cool um all right, uh the next one, I believe james you're, the one that added the container detox.

D

Yes, um so right before mark got went off on personal leave. He uh pushed some continuity. Docks just wanted to call it to people's attention, so they could give a review uh figure out if anything is missing or um want to change anything or add anything.

A

uh Is this something that you can have you taken a look at this mods.

B

um I I did take a look yesterday, I'm going to take a look and yeah I'm going to further review this.

D

And if there's any updates mark gave me access to them, so just mark them in there and I'll make sure I follow up on them. I think uh the doc's um deadline is next week july. 16Th 16th yeah.

A

All right, I'll I'll take a look as well. Is it a bit? Is it a lot of docs changes, or is this fairly uh fairly.

D

A

Small right now, um okay,.

D

So it's just actually.

A

Just saying that.

D

It moved to beta.

A

Got it, I will take a look at this by tomorrow. Promise.

C

Is there something missing there with respect to things like support for pinpoint slices, which is a new capability in this release? Are there.

E

C

Docs gaps that we should talk about.

C

I was looking at the endpoint slices and it doesn't call out linux or windows in that, so it could be that leaving it, as is, is just fine.

A

um So craig, do you want to just take a look at that and see? If you can add it.

C

I I didn't well, I thought it was something to talk about here. Should we add a mention about support on windows or or is the fact that the endpoints license documentation doesn't differentiate between linux and windows, uh enough to specify the correct thing to users.

A

Well I'll, ask this: how we tested that? Does it work.

C

I think there are tests for it, uh hello, james or adelina. Have we are there test scan point slices in our test? Runs.

F

Not I know I believe, some time ago, uh actually, I'm very certain that empire slices pro had some problems and we're disabling that I don't think, but I I didn't follow up. I don't know what what the status of that was uh is up late.

C

Okay, let's follow up offline.

G

And craig my docs, my docs pr how to configure it at least and point to the you know the official docs there's both for linux and windows.

G

I could do that, but I agree would make sense to first validate before no updating the box to reflect that this is supported.

C

Can you add the your pr for your docs changes.

A

C

So we can all review thanks. Dude.

A

Hey david, your pr is in a good spot right, and I know I saw you uh you know james no jim had jim angel had asked us for some changes. I saw you push them through. Is that in a good spot right now for for merging, or is it still needing something.

G

Yeah it's in a good spot. I think I I um you know the person the reviewer uh said. I addressed all the comments, so yeah.

A

That was, I was dreaming angel he he basically, we were not following some of the guidelines and he spanked me too for it, because I I approved your your first version of the pr when we're not following some of the style guidelines, so we're diverging from everything else and they didn't like it. You know they leave most of our dogs and windows alone when they're refactoring other dogs, so we basically fell behind.

G

Yeah, I see yeah.

A

That's what happened? Maybe we should.

G

Raise the pr to just update the style everywhere, but it would.

F

G

Too large, for my like it would be really hard to review. If I made like changes everywhere now,.

A

G

It was new features, so.

A

I remember the paint crack and I went through to actually get the first releasing. I don't want to go through this again, so we will see how we can cross our biggest too.

H

Minor uh information regarding the network slices: there are three tests which uh are in combination with ee tests, general conformance two of them pass on windows, and one of them does not.

H

Last time I checked, the one that doesn't pass is endpoint. Slice should create endpoints and endpoint slices for pods matching a service.

H

Well, I can take a look at that just to see what's happening.

A

That'd be great, thank you, claudia uh and and um david when you have the networking docs pr just drop it here. I left your spot here um all right.

G

I'll drop it.

A

Oh, if he's in charge, okay, I know what is I'll I'll copy it, I'm not looking at the chat window all right. Thank you um all right, james. I believe you have the next item as well, which is the validate rule for windows.

D

Yeah, um so this is a pr that I reviewed a while back back in deep.

D

uh I don't see him on the call he wanted to bring it up um in sig windows to talk about um essentially there's a bug when you put the um root check when you, when you specify uh don't run as root uh windows, containers won't come online because uh they're, it's just the check for linux, uh so it's been refactored to ignore that check for windows, but deep brought up a good point that um we have the consent uh container administrator, um and we may want to check that because it's similar to root- and I just wanted to bring it up- um I don't know deep- might have more opinions on it, but I thought I'd bring it to some people's attention to uh maybe give some insight into it.

A

Yeah, so so deep couldn't make it. uh He basically asked he gave us his feedback on that. So his main concern is that the psp rule must run is not root. The interpreter on windows notes to block run his username with I. I pasted it here with container administrator, rather than completely run as username from the start. um So he you know, uh if we're more restrictive, initially saying we're gonna get more feedback rather than being more open out of the get-go. um So I I agree with his opinion here.

A

um So will it be possible to change the pr to reflect these changes.

D

Sure I can leave, uh we can just drop this note into um the pr and we'll uh get it updated. I guess.

A

D

Unless anybody else has concerns.

A

It doesn't look like it. um There was one more issue that deeb was tracking, which was the device manager on windows. um Did you get a chance to look at that? Pr at all uh that we talked about last week.

B

Yes, I did take a look. um I actually talked to one of our engineers who worked on container d as well. uh I I couldn't get a full back. Is there any more information on what we're trying like how we are like accessing device manager and stuff? Besides,.

A

The pr you wouldn't, I don't have any more- maybe you want to talk to or not or there's another user that was super involved in this uh yeah here, it's tomatoes, so you might want to pink them and ask them hey like I did was looking into it and- and I guess since he's not here today, I don't know what the the full context behind this.

B

Yeah yeah, I mean look, I I mean on the prime looks good. uh I I think it should be supported by container d as well like you shouldn't, have any issues, but I I just wanted to get a little bit more background because of the some of the customer apps we have had and just see if it covers.

A

It okay, so if you can take a look at it and reply so that way, we can at least go to don chen from signal and ask her to approve it. uh That'd be great! So if you can take a look at that earlier, rather.

B

A

Yeah yeah I'll leave a comment on there and appear okay cool. Thank you. So I'm gonna put your name here as.

A

All right, I think we cover most of the items on our agenda. The next one is: uh let's take a look at uh the backlog review meeting proposal. uh Maz, that's on you.

B

Yeah, so I just wanted to remind everyone. I think we talked about it. Last week uh I have posted the the doodle link on like what time or day works in a week for folks uh should it be bi-weekly like in like once every two weeks, or should it be monthly? um I put the agenda what we are targeting, uh it's all in the slack. uh I posted a message. Yesterday I haven't seen much response.

B

uh You know just want to remind everyone if you can go to slack, look for my message from yesterday and just take a quick survey. It will take like you know, literally like two or three minutes, uh but we want to know like what works for you. So I can schedule the meeting uh and get that started and I'm putting.

A

The doodle link here as well for everybody so I'll paste it here. That's right, link right, yep windows, backlog review.

B

Thank you mike.

A

All right, yeah, so folks it takes a couple of minutes. Just go. Go! Go through that. I remember at some point uh craig. Do you remember when we did it for uh for 1.4, where we actually got into a dire situation where we had to actually three bucks on a more frequent basis, but we said that we basically had a meeting late thursday afternoon every week for one hour and we did it over a course of a couple of months and we basically cleaned up everything. So we got 1.4 shipped.

A

um The this is not situation is dire right now, but you do need to have some more uh prioritization and refinement of our tickets. If we can all agree on a meeting time, uh do you know what's going to happen? The leads for sick windows, mimas uh deep uh and, if mark and a few other folks we're just gonna. Do it ourselves. So if you wanna have input into this process vote and let's find the time that works for everybody, otherwise we're just doing behind the scenes.

A

uh We wanna be very community friendly here, obviously, and do it out in the open and have as many contributors to voice their opinion on tickets. But if we can't find the time, then we'll resort to something else,.

A

All right, that's it for the agenda today. Folks, uh is there anything else? Anybody else want to bring up discussion topics. uh Anything else.

C

I was just gonna say I looked, it looks like there is not currently a test pass for endpoints license.

F

No, no, I we disabled it specifically. uh What I meant was, I didn't know if uh what the status of the test is, if they exist, if they pass, if we try them.

C

Yeah, unfortunately, I don't know uh david colley can look at that better than me.

E

C

E

Was working I mean vinod in our team was working with, uh I mean on implementing in point slices uh updates uh in the code, and I don't know if his pull requests went completely through. I think he was having some troubles with getting the test to pass.

E

uh I haven't followed, but I can start a discussion with him.

G

C

G

E

Was okay sounds good. Thank you.

A

All right cool by the way next week, uh let's do a let's do a status update of where we are uh 419.

A

So that's going to include: must the container d work uh the networking work, that's going in and csi work and anything else that we're planning for 119.

A

That's good um since now the topics I'll keep talking. I have one more thing to mention so and if you guys noticed, uh if guys all of you guys and girls, I know this, but today contour, which is an english controller for kubernetes, was donated to cncf. We leave fro sandbox, so we are straight into incubation.

A

um As part of that, I asked the team to validate that. This works well for windows containers as well, and windows and environment, and it's beautiful it works great. The only problem is because there's no real, you know envoy, which you use as a proxy and needs to run on linux. So essentially you need to have.

A

Even if you have a windows cluster, you put your master components on linux and then you add one or two more linux nodes to run envoy and then contours and ingress will be able to program that envoy and be able to uh route and all of your nodes that have windows containers on so work. Great.

A

Cool all right, everybody give you all back eight minutes. Thank you all for attending have a great rest of your week and I'll me, and craig will follow up on a few items here and much as well. Bye thank.

B