| user0801 | Hi I am trying to deploy ovn networking with tag 28.0.0 on debian 12 installation completed without any issue but I am not able to get network inside vm . vm to vm communication is working fine but my external traffic not working | 03:39 |
|---|---|---|
| user0801 | https://pastebin.com/wiGbMacq | 03:39 |
| user0801 | My ovs-system interface and br-int all down in all compute nodes services not showing any errors at all | 03:40 |
| user0801 | the bond0 network has multiple vlans created with interfaces file and it is also showing as ovs-system I done get it | 03:41 |
| user0801 | Name floating_network ID 9cae0601-17e4-461b-bcf7-9743c57118eb Project ID 3d2f3534887b498e8f264713fb5e19a4 Status Active Admin State UP Shared Yes External Network Yes MTU 1500 Provider Network Network Type: vlan Physical Network: vlan Segmentation ID: 8 | 03:49 |
| user0801 | This is the flating network conf | 03:50 |
| user0801 | This is the floating network conf | 03:50 |
| opendevreview | OpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata https://review.opendev.org/c/openstack/openstack-ansible/+/947304 | 04:08 |
| noonedeadpunk | mornings | 07:26 |
| noonedeadpunk | user0801: hey, let me read back... | 07:26 |
| noonedeadpunk | > ovs-system interface and br-int all down in all compute nodes - so that is fine, OVS bridge interfaces do not need to be up | 07:27 |
| noonedeadpunk | bond0 though needs to be UP IIRC | 07:27 |
| noonedeadpunk | user0801: one thing though, is that you usually need `network-infra_hosts: *infrastructure_hosts`, not `network_hosts: *infrastructure_hosts` | 07:30 |
| noonedeadpunk | I'm not sure if it affects anything or not though | 07:30 |
| user0801 | :noonedeadpunk thanks for the reply actually the issue resolved now but I am not able to understand the packet flow, is it going via controller nodes only , i thought compute bridges are also working | 07:33 |
| user0801 | our issue was switch config related as switch was dropping tagged network | 07:33 |
| noonedeadpunk | so it depends... eventually, external traffic should be going only through network-gateway_hosts | 07:34 |
| noonedeadpunk | also routers should be pinned also only to hosts in this group | 07:34 |
| user0801 | So the ovs bridges status doesnt matter hmm thats new for me | 07:35 |
| noonedeadpunk | but then it also depends on `neutron_ovn_distributed_fip` variable, which is false by default | 07:35 |
| noonedeadpunk | it does not on kernel level, as ovs has a lower level access to interfaces | 07:35 |
| user0801 | Yes I disabled it also so from the doc if I enable it compute nodes will communicate outside directly | 07:36 |
| noonedeadpunk | so you need to care only about state of interfaces attacxhed to the bridge | 07:36 |
| noonedeadpunk | yes, but they still will with your setup? | 07:36 |
| noonedeadpunk | as `network-gateway_hosts: *compute_hosts` | 07:36 |
| noonedeadpunk | so external connection is performed from computes right now | 07:36 |
| user0801 | Hmm so whats the diff with DVR | 07:37 |
| noonedeadpunk | um, that ovn has proper implementation of DVR?:) | 07:37 |
| noonedeadpunk | maybe you can tell me what you want and I can help how to do that?) | 07:38 |
| noonedeadpunk | as right now I'm just saying what is configured, but don't really understand what the need is | 07:38 |
| user0801 | https://docs.openstack.org/openstack-ansible-os_neutron/latest/app-ovn.html this is the only doc i could find | 07:38 |
| user0801 | No issues i was just asking to clear things | 07:39 |
| noonedeadpunk | aha | 07:39 |
| user0801 | Thanks for the help :) | 07:39 |
| noonedeadpunk | ok, so right now with `neutron_ovn_distributed_fip: false` and `network-gateway_hosts: *compute_hosts` you get the behavior, that external traffic will be going between computes to reach the world | 07:39 |
| noonedeadpunk | with setting neutron_ovn_distributed_fip: true FIPs will be served directly from the compute where VM is running | 07:40 |
| noonedeadpunk | so no parasite traffic | 07:40 |
| user0801 | ohk great | 07:40 |
| noonedeadpunk | but if you wanna have a dedicated gateway nodes, preventing of adding vlan to all computes, neutron_ovn_distributed_fip: true is getting weird | 07:41 |
| noonedeadpunk | but, default src_nat for the router will still happen where router is pinned | 07:41 |
| opendevreview | Merged openstack/openstack-ansible master: Imported Translations from Zanata https://review.opendev.org/c/openstack/openstack-ansible/+/947304 | 07:47 |
| derekokeeffe85 | morning all, so still having the issue with neutron. I was getting no mechanism driver ovn error so I did this "sudo apt install ovn-host ovn-central" that seemed to resolve that error but now I get this in the neutron container "ERROR neutron Stderr: 'ovsdb-client: failed to connect to "tcp:127.0.0.1:6641" (Connection refused)\n'"" I can't telnet to that on localhost or from the controller to the container on that port. sudo systemctl | 08:17 |
| derekokeeffe85 | status ovsdb-server = active (running) no errors | 08:17 |
| noonedeadpunk | derekokeeffe: sorry, a bit -ENOTIME today :( | 09:55 |
| noonedeadpunk | > I was getting no mechanism driver ovn error - this means you have an issue in configuration | 09:55 |
| noonedeadpunk | and doing manual workarounds will not really help you | 09:55 |
| noonedeadpunk | as OVN setup is not super trivial and it's way more then just "install packages" | 09:56 |
| derekokeeffe | No worries noonedeadpunk. Ok so it's really borked on me then :( I did re re run all playbooks and they all completed so not sure where to look. As I said I used (mostly) the same openstack_user_config amd user_variables as a working deploy so not sure what I'm doing worng. What configuration might be missing/wrong to cause the ovn driver issue? | 09:59 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: fix problems with contributors documentation https://review.opendev.org/c/openstack/openstack-ansible/+/947430 | 10:04 |
| noonedeadpunk | except your working is OVS one? | 10:26 |
| noonedeadpunk | and now you wanna go with OVN | 10:26 |
| noonedeadpunk | which are *very* different | 10:26 |
| derekokeeffe | To be entirely honest I was only trying to fix the error when I did the apt-install of the package. | 10:28 |
| user0801 | Can I get a document for configuring octavia with OVN unable to find proper docs | 11:17 |
| user0801 | https://pastebin.com/iwBwafVe I am trying with this settings not working | 11:20 |
| kleini | container_interface: "bond0" sounds wrong in network configuration. That should be the name of the interface inside the octavia containers to the LBaaS network. | 11:57 |
| kleini | I have there eth2 | 11:58 |
| kleini | network_interface should not be set except some provider bridge (br-lbaas) should be connected to that physical interface. | 12:02 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/947569 | 12:11 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/947569 | 12:13 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/947569 | 12:15 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: minor fixes with RabbitMQ and HAProxy https://review.opendev.org/c/openstack/openstack-ansible/+/947569 | 12:15 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: minor fixes with RabbitMQ and HAProxy https://review.opendev.org/c/openstack/openstack-ansible/+/947569 | 12:18 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: minor fixes with RabbitMQ and HAProxy https://review.opendev.org/c/openstack/openstack-ansible/+/947569 | 12:20 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: minor fixes with RabbitMQ and HAProxy https://review.opendev.org/c/openstack/openstack-ansible/+/947569 | 13:10 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: minor fixes with RabbitMQ and HAProxy https://review.opendev.org/c/openstack/openstack-ansible/+/947569 | 13:11 |
| simondodsley | who is responsible for `ansible-collection-openstack`? There is an issue that seems to have been around since Jan/Feb that is causing the Zuul jobs to fail. This is blocking patches. There is little constructive activity on `#openstack-ansible-sig` | 13:22 |
| NeilHanlon | simondodsley: that is not this group. afaik it's sshnaidm and gtema, whom you've already tagged, it seems | 13:23 |
| simondodsley | NeilHanlon: ok - just trying other routes. These 2 seem conspicuous by their absence over the last months | 13:26 |
| noonedeadpunk | simondodsley: it's in #openstack-ansible-sig | 13:29 |
| noonedeadpunk | but yes | 13:30 |
| noonedeadpunk | activity there is very concerning | 13:30 |
| noonedeadpunk | and what makes things a bit worse - it's a sig and not official project | 13:30 |
| noonedeadpunk | so kinda having no election and somehow obscure on a way of getting new maintainers in | 13:31 |
| simondodsley | Maybe we should raise this with the TC | 13:31 |
| noonedeadpunk | I did mention that couple of times, but not as independent topic | 13:32 |
| noonedeadpunk | the root cause of it being a sig - is ansible licensing | 13:32 |
| noonedeadpunk | which is GPL | 13:32 |
| noonedeadpunk | so derrivative work likely should be GPL as well | 13:32 |
| noonedeadpunk | while OpenStack is Apache 2 licensed... | 13:32 |
| noonedeadpunk | So it's also a legal question | 13:32 |
| simondodsley | well that is above my pay grade... | 13:33 |
| noonedeadpunk | btw cinder is soooo poorly covered with ansible modules.... | 13:34 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: minor fixes with RabbitMQ and HAProxy https://review.opendev.org/c/openstack/openstack-ansible/+/947569 | 13:34 |
| simondodsley | hence why i'm trying to add a few more, but that will be impossible with the current state of the CI jobs | 13:35 |
| noonedeadpunk | like volume types is jsut broken, qos non existent | 13:35 |
| noonedeadpunk | well, right now CI fails quite "validly", no? | 13:36 |
| noonedeadpunk | meaning https://zuul.opendev.org/t/openstack/build/dce64a25eb6b45ca88cb769e9b05895d | 13:36 |
| noonedeadpunk | as in `https://10.0.19.120/volume/v3/volumes/ansible_test_volume_manage/action` it must be uuid, not volume name | 13:36 |
| simondodsley | yes - i was testing whether a manage test would even work. I don't beleive it can as manage/unmanage is so 3rd party backend dependant. | 13:37 |
| noonedeadpunk | or dunno... but looks related | 13:37 |
| noonedeadpunk | yeah, I never tried to manage lvm tbh | 13:38 |
| simondodsley | i couldn't even get to that test because the recordset test fails, so i temporarily moved my test before the recordset failure | 13:38 |
| simondodsley | i think LVM works in such a different way to 'real' backends that the test will never work - as mentioned in the commit message - the test was just added in, in case i could get it to work. Given it doesn't I'll be removing it | 13:39 |
| noonedeadpunk | Well. I can add this topic to the next TC agenda (in case you don't want to do that on your own) | 13:40 |
| opendevreview | Merged openstack/openstack-ansible master: [doc] Add multi-AZ deployment configuration sample https://review.opendev.org/c/openstack/openstack-ansible/+/939609 | 13:41 |
| simondodsley | noonedeadpunk: can i ask you to officially raise the collection issue with the TC/ We need to get something sorted out for it, even if it is just to remove gerrit control from it and go back to just GitHub | 13:41 |
| simondodsley | lol - crossover | 13:41 |
| noonedeadpunk | I do't think the issue is gerrit or github.... as it's more of - who is maintainer, if we have volunteer and how to onboard new people to the sig | 13:42 |
| noonedeadpunk | as github won't solve any of these | 13:42 |
| opendevreview | Merged openstack/openstack-ansible master: docs: fix problems with contributors documentation https://review.opendev.org/c/openstack/openstack-ansible/+/947430 | 13:42 |
| noonedeadpunk | simondodsley: I added https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Agenda | 13:45 |
| simondodsley | thank you - i'll try and attend the meeting | 13:46 |
| noonedeadpunk | ++ that would be extermely nice | 13:46 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: small fix for table https://review.opendev.org/c/openstack/openstack-ansible/+/947577 | 13:47 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: small fix for table https://review.opendev.org/c/openstack/openstack-ansible/+/947577 | 13:48 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: small fix for table https://review.opendev.org/c/openstack/openstack-ansible/+/947577 | 13:48 |
| jrosser | i also have outstanding patches to ansible-collection-openstack from andrew which are basically impossible to merge | 17:24 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Move sync framework to integrated repo https://review.opendev.org/c/openstack/openstack-ansible/+/947626 | 19:31 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 20:02 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 20:06 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: Enable translation for deploy guide https://review.opendev.org/c/openstack/openstack-ansible/+/947634 | 20:08 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: Enable translation for deploy guide https://review.opendev.org/c/openstack/openstack-ansible/+/947634 | 20:10 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: Enable translation for deploy guide https://review.opendev.org/c/openstack/openstack-ansible/+/947634 | 20:13 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 20:13 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: fix mistakes in examples configurations for Ceph https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 20:14 |
| opendevreview | Merged openstack/openstack-ansible master: docs: small fix for table https://review.opendev.org/c/openstack/openstack-ansible/+/947577 | 20:37 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: fix mistakes in examples configurations for Ceph https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 20:45 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 20:45 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 20:58 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 21:12 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 21:31 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 21:32 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 21:47 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: docs: fix mistake in defining container networking https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 22:01 |
| opendevreview | Merged openstack/openstack-ansible-plugins master: Add openstack_user_config verification playbook as healthcheck https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/938980 | 22:19 |
| opendevreview | Dmitriy Chubinidze proposed openstack/openstack-ansible master: docs: fix order of steps for "Defining container networking" https://review.opendev.org/c/openstack/openstack-ansible/+/947633 | 23:15 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!