*** crc32 has quit IRC | 00:01 | |
johnsom | Yeah, so the neutron-lbaas directory in /opt/stack didn't have the database migrations in it. When I swapped in the directory I was installing out of I could do the neutron-db-manage --service lbaas upgrade head and get the database up to date | 00:09 |
---|---|---|
johnsom | still get the error though. I am guessing the neutron-lbaas devstack was using is old somehow. I think I will try restacking with this new directory in place | 00:11 |
*** madhu_ has quit IRC | 00:11 | |
*** banix has quit IRC | 00:12 | |
*** crc32 has joined #openstack-lbaas | 00:12 | |
*** blogan_ has joined #openstack-lbaas | 00:15 | |
dougwig | do you have RECLONE=true ? | 00:19 |
*** vivek-ebay has quit IRC | 00:19 | |
johnsom | Nope | 00:20 |
rm_you|wtf | johnsom: brand new vm -> run script -> success! | 00:20 |
*** rm_you|wtf is now known as rm_you | 00:20 | |
rm_you | :P | 00:20 |
johnsom | Somehow when I built this instance this morning I must have not had the latest bits, or it merged after I created the instance | 00:21 |
openstackgerrit | Pattabi Ayyasami proposed openstack/neutron-lbaas: Brocade Driver for lbaas v2 data model https://review.openstack.org/147074 | 00:24 |
johnsom | Ok, that time I got farther | 00:25 |
ptoohill | still errored? | 00:25 |
openstackgerrit | German Eichberger proposed stackforge/octavia: Implements the haproxy amphora agent api server https://review.openstack.org/160034 | 00:26 |
johnsom | TLS container http://localhost:9311/v1/containers/ea778029-475d-4bca-89e2-1e405daa95d3 could not be found | 00:27 |
ptoohill | this is good | 00:27 |
ptoohill | can mean two things, and in this case probably both because im not sure i included in doc | 00:28 |
ptoohill | but one is to include the auth_version in neutron.conf under keystone_auth_token and ensure that admin_tenant_name is 'admin' | 00:28 |
ptoohill | auth_version = v2 is what youll want | 00:28 |
johnsom | Yep, have that, though I created the containers first and remembered to add it and restart neutron after that | 00:29 |
ptoohill | and the other, (at least is problem for me because i dont have them in my env) is the %/SERVICE_NAME%%/ etc for the admin_user ... update those to 'admin' and the password you configured | 00:29 |
ptoohill | thats fine | 00:30 |
ptoohill | the second one is probably issue then | 00:30 |
ptoohill | oh | 00:30 |
ptoohill | and | 00:30 |
ptoohill | the auth_uri should end in '35357/v2.0' | 00:30 |
ptoohill | i make sure to add this to doc | 00:31 |
johnsom | That issue was the /v2.0 missing from the url line in neutron.conf | 00:32 |
ptoohill | i suppose thats actually 'one' thing the config, but barbican still may be using the local_cert_manager. Trevor has patch to change default, or theres two choices to do it via config | 00:33 |
johnsom | I didn't follow the SERVICE_NAME though, I have OS_USERNAME in the environment | 00:33 |
ptoohill | ook, think mines the same, and i dont have those set in env | 00:33 |
johnsom | I get: Authentication required | 00:34 |
johnsom | 00:34 | |
ptoohill | ok | 00:34 |
ptoohill | thats the OS_SERVICE.. | 00:34 |
ptoohill | change those | 00:34 |
ptoohill | or set in env, atleast i think thats how those load | 00:34 |
ptoohill | you may still get the container not found because of the local cert manager | 00:35 |
*** xgerman has quit IRC | 00:36 | |
ptoohill | can fix 3 ways :) | 00:36 |
ptoohill | checkout this: https://review.openstack.org/#/c/164890/ | 00:36 |
ptoohill | or | 00:36 |
rm_you | yeah do that ^^ | 00:36 |
ptoohill | :P | 00:36 |
ptoohill | can pull patch in neutron from doug (i dont think its merged yet) and start neutron-server with neutron_lbaas.conf with the class manager under certificates group set to 'barbican_cert_manager' or, add the group and value to neutron.conf :D | 00:38 |
ptoohill | first way is def easier | 00:38 |
*** mlavalle has quit IRC | 00:38 | |
ptoohill | shoot, dont checkout the first one, cherry-pick it, sorry | 00:38 |
johnsom | I think I need to stop for the day, let you update the doc, and I will pick up in the morning... grin | 00:39 |
ptoohill | alrighty | 00:39 |
johnsom | Thanks for all the help today, I really appreciate the time. | 00:39 |
ptoohill | any time | 00:40 |
*** blogan_ has quit IRC | 00:42 | |
*** blogan_ has joined #openstack-lbaas | 00:42 | |
*** banix has joined #openstack-lbaas | 00:43 | |
*** banix has quit IRC | 00:57 | |
*** madhu_ has joined #openstack-lbaas | 01:00 | |
*** ptoohill-oo has quit IRC | 01:21 | |
*** vivek-ebay has joined #openstack-lbaas | 01:23 | |
openstackgerrit | Aishwarya Thangappa proposed openstack/neutron-lbaas: Added api tests for session-persistence https://review.openstack.org/165268 | 01:25 |
*** apuimedo has quit IRC | 01:25 | |
*** vivek-eb_ has joined #openstack-lbaas | 01:30 | |
*** vivek-ebay has quit IRC | 01:32 | |
*** Aish has quit IRC | 01:32 | |
openstackgerrit | Pattabi Ayyasami proposed openstack/neutron-lbaas: Brocade Driver for lbaas v2 data model https://review.openstack.org/147074 | 01:36 |
*** banix has joined #openstack-lbaas | 01:43 | |
openstackgerrit | Pattabi Ayyasami proposed openstack/neutron-lbaas: Brocade Driver for lbaas v2 data model https://review.openstack.org/147074 | 01:54 |
*** Aish has joined #openstack-lbaas | 02:09 | |
*** crc32 has quit IRC | 02:11 | |
*** crc32 has joined #openstack-lbaas | 02:20 | |
openstackgerrit | Merged openstack/neutron-lbaas: Change default cert manager to barbican https://review.openstack.org/164890 | 02:32 |
openstackgerrit | Merged openstack/neutron-lbaas: Fixes barbican cert manager to support v2/v3 auth https://review.openstack.org/164063 | 02:45 |
*** blogan_ has quit IRC | 02:51 | |
*** blogan_ has joined #openstack-lbaas | 03:08 | |
*** fnaval has quit IRC | 03:09 | |
*** banix has quit IRC | 03:25 | |
*** crc32 has quit IRC | 03:27 | |
*** crc32 has joined #openstack-lbaas | 03:29 | |
openstackgerrit | Merged openstack/neutron-lbaas: LBaaS reference implementation driver to support TLS https://review.openstack.org/145151 | 03:38 |
*** sbfox has joined #openstack-lbaas | 03:39 | |
ptoohill | Alright! | 03:40 |
*** madhu_ has quit IRC | 03:55 | |
*** Aish has quit IRC | 03:56 | |
*** ajmiller has joined #openstack-lbaas | 04:09 | |
*** blogan_ has quit IRC | 04:11 | |
*** blogan_ has joined #openstack-lbaas | 04:12 | |
*** blogan_ has quit IRC | 04:17 | |
*** SumitNaiksatam has joined #openstack-lbaas | 04:17 | |
*** madhu__ has quit IRC | 04:33 | |
*** ajmiller has quit IRC | 04:46 | |
*** ajmiller has joined #openstack-lbaas | 04:46 | |
openstackgerrit | Carlos Garza proposed openstack/neutron-lbaas: Implemented dynamic loadbalancer status tree https://review.openstack.org/161052 | 04:47 |
*** BrianShang_ has joined #openstack-lbaas | 05:04 | |
*** BrianShang has quit IRC | 05:06 | |
*** blogan_ has joined #openstack-lbaas | 05:19 | |
*** sbfox has quit IRC | 05:23 | |
*** sbfox has joined #openstack-lbaas | 05:49 | |
*** jschwarz has joined #openstack-lbaas | 06:05 | |
*** vivek-eb_ has quit IRC | 06:13 | |
*** blogan_ has quit IRC | 06:28 | |
*** mestery has quit IRC | 06:58 | |
*** bharath has quit IRC | 07:10 | |
bedis | morning | 07:36 |
*** woodster_ has quit IRC | 08:00 | |
*** sbfox has quit IRC | 08:30 | |
*** apuimedo has joined #openstack-lbaas | 08:35 | |
*** uschreiber_ has joined #openstack-lbaas | 08:38 | |
*** uschreiber_ has quit IRC | 08:39 | |
*** uschreiber_ has joined #openstack-lbaas | 08:41 | |
*** uschreiber_ has quit IRC | 08:42 | |
*** uschreiber_ has joined #openstack-lbaas | 08:42 | |
*** uschreiber_ has quit IRC | 08:42 | |
*** vivek-ebay has joined #openstack-lbaas | 09:10 | |
*** vivek-ebay has quit IRC | 09:14 | |
openstackgerrit | Evgeny Fedoruk proposed openstack/neutron-lbaas: Neutron LBaaS v2 Radware driver implementation https://review.openstack.org/155042 | 09:52 |
*** crc32 has quit IRC | 10:01 | |
*** bharath has joined #openstack-lbaas | 10:10 | |
*** bharath has quit IRC | 10:15 | |
*** mestery has joined #openstack-lbaas | 10:26 | |
*** crc32 has joined #openstack-lbaas | 10:40 | |
crc32 | morning | 10:56 |
*** amotoki has joined #openstack-lbaas | 11:10 | |
*** kobis has joined #openstack-lbaas | 11:33 | |
*** woodster_ has joined #openstack-lbaas | 12:00 | |
*** Miouge has joined #openstack-lbaas | 12:02 | |
openstackgerrit | Evgeny Fedoruk proposed openstack/neutron-lbaas: L7 capability extension implementation for lbaas v2 https://review.openstack.org/148232 | 12:03 |
*** jschwarz has quit IRC | 12:10 | |
*** ajmiller has quit IRC | 12:26 | |
*** amotoki has quit IRC | 13:03 | |
*** amotoki has joined #openstack-lbaas | 13:05 | |
*** banix has joined #openstack-lbaas | 13:06 | |
*** banix has quit IRC | 13:07 | |
openstackgerrit | Carlos Garza proposed openstack/neutron-lbaas: Implemented dynamic loadbalancer status tree https://review.openstack.org/161052 | 13:19 |
sballe | TrevorV: ptoohill Morning | 13:28 |
*** Miouge has quit IRC | 13:30 | |
sballe | I have been working on the api_client and the https://review.openstack.org/#/c/144348/ and would like to make it compatible with the ssh_driver and the jinja patch. Would you be okay with me submitting and updated patch that does that? if Yes how do I make sure I am not loosing you as the original authors? Do I add Co-Authored-By: ? or will git just know | 13:31 |
*** crc32 has quit IRC | 13:38 | |
*** enikanorov_ has joined #openstack-lbaas | 13:47 | |
*** enikanorov has quit IRC | 13:49 | |
openstackgerrit | Ihar Hrachyshka proposed openstack/neutron-lbaas: tests: stop overwriting neutron BaseTestCase configuration files https://review.openstack.org/165417 | 13:53 |
*** jschwarz has joined #openstack-lbaas | 14:04 | |
*** localloop127 has joined #openstack-lbaas | 14:16 | |
*** mestery has quit IRC | 14:27 | |
*** ajmiller has joined #openstack-lbaas | 14:34 | |
*** TrevorV_ has joined #openstack-lbaas | 15:05 | |
*** amotoki has quit IRC | 15:06 | |
TrevorV | sballe I'm not entirely sure what you're talking about, mind elaborating? | 15:08 |
*** amotoki has joined #openstack-lbaas | 15:16 | |
*** pcaruana has joined #openstack-lbaas | 15:19 | |
sballe | TrevorV: Sure. I have been looking at the Amphora REST driver as you know and I started with your and ptoohill's patches. https://review.openstack.org/#/c/144348/ and https://review.openstack.org/#/c/145637/12. I have done some initial testing and I am making progress. I am getting ready to do some more testign and make sure it matches german amphora api | 15:19 |
sballe | server on the other side. It would be nice for me to be able to just pull the patches down in sequence so I do not have to do a whole bunch of copying and moving things around. | 15:19 |
sballe | Right now I do a git clone octavia, then fetch 157537/, then git review -d 160964. Uses that as my base for adding 144348 and 145637. So I would like to do a rebase of the last two | 15:21 |
*** crc32 has joined #openstack-lbaas | 15:26 | |
*** ajmiller has quit IRC | 15:26 | |
*** ajmiller has joined #openstack-lbaas | 15:30 | |
*** crc32 has quit IRC | 15:30 | |
sballe | TrevorV: | 15:30 |
sballe | and then after having done all the stutff above I can add my changes | 15:30 |
TrevorV | The SSH driver has nothing to do with the amphora API. | 15:31 |
TrevorV | It doesn't interact with it in any way. | 15:31 |
TrevorV | Its an alternative to the REST driver. | 15:31 |
sballe | I know but I added ir in there just because. | 15:31 |
sballe | I can take it out | 15:32 |
sballe | no problem | 15:32 |
TrevorV | That's not exactly what I mean | 15:32 |
TrevorV | I'm not entirely sure what you're trying to accomplish | 15:32 |
TrevorV | You want a single command to pull all the reviews? | 15:32 |
TrevorV | You want all the reviews merged together as one review? | 15:33 |
TrevorV | You want them all to merge into master right now? | 15:33 |
sballe | no | 15:33 |
sballe | no | 15:33 |
TrevorV | I'm not sure what you're trying to accomplish... | 15:33 |
*** kobis has quit IRC | 15:33 | |
TrevorV | sballe PM me, so we're not spamming channel | 15:34 |
sballe | will do my msg was starting ot get long ;-) | 15:35 |
*** banix has joined #openstack-lbaas | 15:37 | |
*** amotoki has quit IRC | 15:38 | |
TrevorV | Sorry for the misunderstanding sballe :) | 15:44 |
sballe | ptoohill: Let me know when you are in. Just talk to Trevor who is okay with me doing the "rebase" of the api client. Let me know if you are okay with me doing the "rebase" of the the rest haproxy driver | 15:44 |
sballe | TrevorV: Np. It is not easy to keep up with everything | 15:44 |
ptoohill | sballe, to build a dep chain? If im understanding that correctly i am completly ok with it | 15:46 |
*** fnaval has joined #openstack-lbaas | 15:46 | |
TrevorV | ptoohill essentially she's going to rebase off jinja review that changed the directories, so all the directories can match up rather than the erroneous "haproxy-reference" directory | 15:47 |
TrevorV | That will make everything smoother | 15:47 |
ptoohill | ah, that works for me | 15:47 |
TrevorV | Yessir :D | 15:47 |
sballe | ptoohill: thx. | 15:48 |
ptoohill | johnsom, I updated doc, which was really pulling a bunch of things out as everything merged lastnight. So as long as you have the lastest and greates neutron-lbaas and python-neutronclient all you need is to update config (made that more clear in doc), barbican set up and certs created and to make the load balancer calls to create it | 15:52 |
*** mestery has joined #openstack-lbaas | 15:52 | |
ptoohill | https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer | 15:53 |
*** kobis has joined #openstack-lbaas | 15:54 | |
*** SumitNaiksatam has quit IRC | 15:57 | |
*** xgerman has joined #openstack-lbaas | 16:01 | |
*** apuimedo has quit IRC | 16:04 | |
*** banix_ has joined #openstack-lbaas | 16:07 | |
*** banix has quit IRC | 16:10 | |
*** banix__ has joined #openstack-lbaas | 16:10 | |
*** banix_ has quit IRC | 16:12 | |
*** vivek-ebay has joined #openstack-lbaas | 16:13 | |
johnsom | Cool, I will take a look | 16:23 |
*** jschwarz has quit IRC | 16:29 | |
*** vivek-ebay has quit IRC | 16:33 | |
openstackgerrit | Kobi Samoray proposed openstack/neutron-lbaas: VMWare Edge driver database model and migration https://review.openstack.org/152958 | 16:35 |
*** ajmiller has quit IRC | 16:44 | |
xgerman | blogan: Feel free to edit/amend - https://wiki.openstack.org/wiki/Octavia/Weekly_Meeting_Agenda#Meeting_2015-03-18 | 16:44 |
*** jschwarz has joined #openstack-lbaas | 16:47 | |
xgerman | blogan, rmwork, jorgem, dougwig: https://etherpad.openstack.org/p/octavia-weekly-standup | 16:53 |
xgerman | please fill in your company... | 16:53 |
*** vivek-ebay has joined #openstack-lbaas | 16:54 | |
*** openstackgerrit has quit IRC | 16:59 | |
*** openstackgerrit has joined #openstack-lbaas | 16:59 | |
*** madhu_ has joined #openstack-lbaas | 17:02 | |
johnsom | ptoohill: couple of questions... | 17:03 |
johnsom | In the neutron.conf section of your doc. Are you sure it is the auth_uri that needs updating, yesterday it was auth_url that I updated to get farther. | 17:04 |
johnsom | Also, is it the tenant name or the admin username? | 17:04 |
*** ajmiller has joined #openstack-lbaas | 17:05 | |
*** mlavalle has joined #openstack-lbaas | 17:10 | |
*** sbalukoff has quit IRC | 17:12 | |
ptoohill | johnsom, auth_uri and admin_tenant_name are the ones we need | 17:18 |
johnsom | ok | 17:18 |
johnsom | TLS container http://localhost:9311/v1/containers/4585f272-488d-49e0-9cc6-2a940abf0778 could not be found | 17:20 |
*** jschwarz has quit IRC | 17:21 | |
ptoohill | can i see the keystone_authtoken values | 17:22 |
johnsom | 2015-03-18 17:19:43.558 ERROR neutron_lbaas.common.cert_manager.barbican_cert_ma | 17:23 |
johnsom | nager [req-725245f2-b084-4a8e-b388-3dd3daaa166a admin 5b0ba05d893140d586d0980abd | 17:23 |
johnsom | 8b7708] Error creating Keystone session | 17:23 |
johnsom | I think it needs the admin user filled in too: | 17:24 |
johnsom | 2015-03-18 17:19:43.558 TRACE neutron_lbaas.common.cert_manager.barbican_cert_manager Unauthorized: Could not find user: %SERVICE_USER% (Disable debug mode to suppress these details.) (HTTP 401) (Request-ID: req-d7276e71-279e-4009-967b-3dba689ecb90) | 17:24 |
ptoohill | well yea, thought i put that in there. Any of those '%/' need to be updated | 17:24 |
johnsom | Ok, that worked and got me farther | 17:25 |
ptoohill | were you able to get a lb created? | 17:35 |
*** sbfox has joined #openstack-lbaas | 17:40 | |
johnsom | Yes | 17:45 |
ptoohill | good deal | 17:45 |
johnsom | Can't connect on 443 though, looking into that. | 17:45 |
ptoohill | can view the haproxy config update /opt/stack/data to see what was generated | 17:48 |
ptoohill | well, /opt/stack/data/neutron/lbaas/v2/.. | 17:48 |
johnsom | guid directory, but empty | 17:49 |
ptoohill | which haproxy version are you running? | 17:51 |
ptoohill | are there any haproxy processes running? | 17:51 |
johnsom | ii haproxy 1.5.11-1ppa1~trusty amd64 | 17:51 |
ptoohill | ook, thats good | 17:52 |
johnsom | I don't see any running however | 17:52 |
ptoohill | if you created listener you should have seen a process running and config in that dir | 17:52 |
johnsom | The LB is listed as ACTIVE/ONLINE though | 17:52 |
ptoohill | you added pool and member also? was there any errors in the agent? | 17:53 |
johnsom | listener/pool/member all there and look happy via neutron calls. Let me look in the agent log | 17:53 |
*** kobis has quit IRC | 17:55 | |
johnsom | if CONF.keystone_authtoken.auth_version.lower() == 'v2': | 17:55 |
johnsom | AttributeError: 'NoneType' object has no attribute 'lower' | 17:55 |
johnsom | Maybe I need to restart the agent as well as neutron after those changes.... | 17:56 |
ptoohill | doh | 17:56 |
ptoohill | yea, a restart will pick up and reload the load balancer | 17:56 |
*** xgerman has quit IRC | 17:56 | |
ptoohill | ill make a not of that >< | 17:56 |
ptoohill | change*, coffee low | 17:57 |
barclaac|2 | Hey folks. Do we have a rough feel for which drivers will make it for Kilo? | 17:58 |
ptoohill | thrid party? | 18:00 |
barclaac|2 | yes | 18:00 |
*** crc32 has joined #openstack-lbaas | 18:00 | |
barclaac|2 | I think I saw dougwig's A10 in there but was wondering about the state of the others. | 18:01 |
ptoohill | brocade looked close, but yea, not sure about those | 18:01 |
*** jorgem has joined #openstack-lbaas | 18:01 | |
johnsom | ptoohill Ok, this time it populated the directory. I see the key and cert in the log, but only the cert is in the directory and the haproxy startup failed | 18:03 |
dougwig | barclaac|2: brocade will make it, if their CI gets a little cleaner. radware is going to be close. | 18:04 |
johnsom | oh, I see they are concat | 18:04 |
barclaac|2 | OK. Thanks dougwig | 18:04 |
johnsom | There is a missing return between the cert and key in the file | 18:04 |
ptoohill | did it say why it failed | 18:04 |
ptoohill | they shouldnt be spaced? | 18:04 |
dougwig | the netscalar guy was asking questions yesterday, but I haven't seen an update, and it's getting a bit late. we'll still approve it when it's ready of course, and i'll ask for FFE's for drivers that are ready. | 18:05 |
johnsom | There is this line: -----END CERTIFICATE----------BEGIN RSA PRIVATE KEY----- | 18:05 |
johnsom | I think it needs a return between those headers | 18:05 |
ptoohill | gosh doggit, yes | 18:05 |
ptoohill | bug | 18:05 |
ptoohill | :/ | 18:05 |
ptoohill | i made that change last second, bad | 18:06 |
ptoohill | i reordered them in code and removed that to test and forgot to put back | 18:06 |
ptoohill | im a dummy, patch incoming :/ | 18:07 |
johnsom | grin, that's why I'm doing running it. | 18:08 |
johnsom | Geez, great grammar when you have people talking in your ear. | 18:10 |
*** xgerman has joined #openstack-lbaas | 18:10 | |
ptoohill | eh, i have no excuse, im in a quite room with only my thoughts >< | 18:10 |
*** Aish has joined #openstack-lbaas | 18:16 | |
*** SumitNaiksatam has joined #openstack-lbaas | 18:18 | |
*** jorgem has quit IRC | 18:19 | |
*** SumitNaiksatam has left #openstack-lbaas | 18:22 | |
ptoohill | the patch im about to push out will fix this. Just need to check it out, restart neutron-server then agent and the config will get reloaded and all should work | 18:22 |
ptoohill | running tox now | 18:22 |
*** SumitNaiksatam has joined #openstack-lbaas | 18:22 | |
johnsom | Ok, cool, I will give it a go | 18:22 |
*** sbalukoff has joined #openstack-lbaas | 18:23 | |
openstackgerrit | Phillip Toohill proposed openstack/neutron-lbaas: Fixes certificate concatenation issue https://review.openstack.org/165549 | 18:28 |
ptoohill | still should have got this particular method (and maybe a few others) into the tlsutils. one more thing that could be refactored i suppose :/ sorry about this | 18:29 |
ptoohill | johnsom ^ | 18:30 |
*** jamiem has joined #openstack-lbaas | 18:30 | |
crc32 | https://review.openstack.org/#/c/161052/ | 18:33 |
*** jorgem has joined #openstack-lbaas | 18:35 | |
crc32 | https://review.openstack.org/#/c/161052/ | 18:36 |
ptoohill | only 153 items in check | 18:38 |
ptoohill | :P | 18:38 |
*** sbfox has quit IRC | 18:55 | |
*** sbfox has joined #openstack-lbaas | 18:58 | |
*** vivek-eb_ has joined #openstack-lbaas | 19:08 | |
*** vivek-ebay has quit IRC | 19:10 | |
*** vivek-eb_ has quit IRC | 19:21 | |
*** vivek-ebay has joined #openstack-lbaas | 19:21 | |
openstackgerrit | Brandon Logan proposed openstack/neutron-lbaas: Implemented dynamic loadbalancer status tree https://review.openstack.org/161052 | 19:24 |
dougwig | v2 qa folks, your api test jenkins job is in the merge queue! | 19:31 |
crc32 | https://review.openstack.org/#/c/161052/ | 19:35 |
*** rm_you| has joined #openstack-lbaas | 19:36 | |
*** sballe has quit IRC | 19:37 | |
*** jorgem has quit IRC | 19:39 | |
*** rm_you has quit IRC | 19:39 | |
*** sballe has joined #openstack-lbaas | 19:41 | |
openstackgerrit | Doug Wiegley proposed openstack/neutron-lbaas: DO NOT MERGE -- testing new jobs https://review.openstack.org/165577 | 19:42 |
*** bharath has joined #openstack-lbaas | 19:45 | |
johnsom | ptoohill bad news, the patch doesn't fix the issue. The server@acme.com.pem is still getting generated incorrectly | 19:49 |
johnsom | I pulled down the patch and did a setup.py install and restarted both neutron and lbaas agent | 19:49 |
ptoohill | and it doesnt work? | 19:50 |
*** TrevorV_ has quit IRC | 19:50 | |
ptoohill | im running right now and its terminating as expected | 19:50 |
johnsom | I still get a line: -----END CERTIFICATE----------BEGIN RSA PRIVATE KEY----- | 19:50 |
ptoohill | hmmm mine doesn | 19:51 |
johnsom | Wouldn't you need the \n in each concat line? | 19:52 |
bedis | morning | 19:53 |
*** crc32 has quit IRC | 19:53 | |
ptoohill | ? | 19:53 |
ptoohill | no, thats what the '\n'.join does i thought. i guess im doing it wrong | 19:54 |
*** devlaps has joined #openstack-lbaas | 19:55 | |
ptoohill | can test in intrepreter also to verify | 19:55 |
openstackgerrit | Al Miller proposed openstack/neutron-lbaas: Add bytes_in and bytes_out statistics to the listener https://review.openstack.org/158823 | 19:56 |
ptoohill | yea, just verified that using the tuple is indeed fine and does as expected in the intrepreter. had concerns this was wrong way to do it(got from example) but it does work as expected | 19:57 |
*** vivek-ebay has quit IRC | 19:59 | |
*** vivek-ebay has joined #openstack-lbaas | 19:59 | |
xgerman | meet, meet, ...meeting-alt | 20:00 |
*** mwang2 has joined #openstack-lbaas | 20:00 | |
ptoohill | pow, pow, power rangers? | 20:01 |
openstackgerrit | Santosh Sharma proposed openstack/neutron-lbaas: NetScaler driver for LBaaS V2 extension https://review.openstack.org/148541 | 20:01 |
*** jorgem has joined #openstack-lbaas | 20:02 | |
rm_work | yep '\n'.join() too OP | 20:03 |
johnsom | Hmmm, is something else generating that file or is my install just not working right? | 20:04 |
*** Santosh_NS_ has joined #openstack-lbaas | 20:11 | |
*** _cjones_ has joined #openstack-lbaas | 20:11 | |
_cjones_ | Hi dougwig and blogan! Just a repost from #openstack-neutron | 20:12 |
_cjones_ | Noticed that I could create a LB Pool with a tenant_id that doesn't exist in keystone. | 20:12 |
_cjones_ | I was wondering if this is a bug or by design? | 20:13 |
_cjones_ | Running openstack Juno. | 20:13 |
blogan | _cjones_: i'm not totally certain on this, but can you do the same when you create a network? | 20:13 |
_cjones_ | blogan: Fair question. Give me some time to check? | 20:14 |
blogan | bc that same code that validates the tenant is used by all of neutron, at least from what i can tell | 20:14 |
Santosh_NS_ | Hi All , https://review.openstack.org/#/c/148541/ for review I have submitted the latest patch. I am facing some issues with bringing up devstack .../stack.sh in CI setup . Will get it up asap | 20:14 |
blogan | Santosh_NS_: thanks! will look at it soon | 20:14 |
_cjones_ | blogan: Yeah, didn't dig into it too much. But my expectation would be that it should be rejected. | 20:14 |
*** openstackgerrit has quit IRC | 20:14 | |
*** openstackgerrit has joined #openstack-lbaas | 20:15 | |
_cjones_ | blogan: Can I get back to you later today/tomorrow as I've got some of my own work to finish up today? | 20:15 |
ptoohill | johnsom, which file? | 20:15 |
blogan | _cjones_: me too, but i vaguely remember a discussion about it and why it was not checked (but my memory is not a reliable source) | 20:15 |
blogan | _cjones_: sure thing, im always in here, though i may be afk | 20:16 |
johnsom | ptoohill server@acme.com.pem | 20:16 |
_cjones_ | blogan: What's your TZ? | 20:16 |
blogan | _cjones_: CST | 20:16 |
ptoohill | that file is built by the system. it takes whats in barbican secrets and builds it with the supplied CN | 20:16 |
blogan | -500 UTC | 20:16 |
ptoohill | or by the code i should say, jinja_cfg to be exact | 20:17 |
_cjones_ | Yup. I'm PDT. -700 UTC so we should be good. | 20:17 |
blogan | _cjones_: sounds good! | 20:18 |
*** jorgem has quit IRC | 20:21 | |
_cjones_ | blogan: Yup, seems like you can. | 20:25 |
_cjones_ | No error returned. | 20:25 |
blogan | _cjones_: thats what i figured, so its a neutron whole neutron thing, and i'm willing to bet my fuzzy memory is correct in that there is a reason behind it, though it may not be logical or sane | 20:26 |
_cjones_ | I would like to know why. If you do remember, can you try and find me here... or @ #openstack-neutron? | 20:26 |
johnsom | ptoohill ok, so install doesn't work on devstack, you have to swap out the /opt/stack directory. Working now | 20:27 |
*** bharath has quit IRC | 20:27 | |
johnsom | so the patch is good | 20:30 |
ptoohill | not sure what you mean by that johnsom? | 20:30 |
TrevorV | xgerman I got the meeting minutes updated | 20:30 |
ptoohill | we all seem to have it set up differently | 20:30 |
xgerman | TrevorV thanks | 20:31 |
johnsom | Yeah, I pulled down your patch into a separate directory and ran python setup.py install, but when restarting neutron and the agent it wasn't picking up the code. | 20:31 |
johnsom | I had to pull you patch into the /opt/stack/neutron-lbaas directory to get it to pick it up | 20:31 |
rm_work | ah yes | 20:32 |
rm_work | whatever you cherry-pick has to be in the main stack sourcedirs | 20:32 |
johnsom | Anyway, summary, the patch works so cheers to that | 20:32 |
*** bharath has joined #openstack-lbaas | 20:34 | |
ptoohill | ah, i see | 20:34 |
*** BrianShang has joined #openstack-lbaas | 20:40 | |
*** BrianShang_ has quit IRC | 20:43 | |
_cjones_ | blogan: Same issue seems to exist for subnet_id. So this one is all in Neutron land. | 20:51 |
*** bharath has quit IRC | 20:54 | |
*** bharath has joined #openstack-lbaas | 20:55 | |
openstackgerrit | German Eichberger proposed stackforge/octavia: Implements the haproxy amphora agent api server https://review.openstack.org/160034 | 20:55 |
*** jorgem has joined #openstack-lbaas | 20:58 | |
*** sbfox has quit IRC | 21:05 | |
johnsom | ptoohill bummer, one more with SNI | 21:05 |
johnsom | cert_mgr.get_cert(sni_cont.tls_container_id, check_only=True)) | 21:05 |
johnsom | AttributeError: 'dict' object has no attribute 'tls_container_id' | 21:05 |
johnsom | File "/opt/stack/neutron-lbaas/neutron_lbaas/services/loadbalancer/drivers/haproxy/jinja_cfg.py", line 163, in _process_tls_certificates | 21:06 |
johnsom | client shows them ok during the create: | 21:07 |
johnsom | | sni_container_ids | http://localhost:9311/v1/containers/4585f272-488d-49e0-9cc6-2a940abf0778 | | 21:07 |
johnsom | | | http://localhost:9311/v1/containers/4aa5070a-fba9-44fb-8146-e7b05f7dc7cc | | 21:07 |
ptoohill | ive ran into this before, think its an access issue, but i swear i added that :/ ugh | 21:08 |
*** jorgem has quit IRC | 21:08 | |
*** jorgem has joined #openstack-lbaas | 21:08 | |
ptoohill | yep, gosh doggit | 21:09 |
ptoohill | can test this real quick in your set up if you change the line 163 in jinja_cfg | 21:10 |
johnsom | ok, I am game | 21:10 |
ptoohill | from sni_cont.tls_container_id to sni_cont['tls_container_id'] | 21:10 |
ptoohill | :/ | 21:10 |
ptoohill | i wont test on dirty branch then attempt to make changes on clean branch anyumore :/ | 21:10 |
ptoohill | or i just need to document them properly so i dont forget, really sorry about this | 21:13 |
johnsom | ptoohill Confirmed, that fixes it | 21:13 |
*** banix__ has quit IRC | 21:13 | |
ptoohill | another patch incoming :/ | 21:13 |
*** jorgem has quit IRC | 21:19 | |
*** Aish has left #openstack-lbaas | 21:24 | |
*** jorgem has joined #openstack-lbaas | 21:27 | |
rm_work | dougwig: why is "check-neutron-lbaas-dsvm-api" queued on EVERYTHING | 21:36 |
rm_work | *everything neutron | 21:36 |
rm_work | T_T | 21:36 |
dougwig | checking now. go to infra to see the conversation. | 21:37 |
rm_work | ah cool | 21:38 |
*** devlaps has quit IRC | 21:43 | |
openstackgerrit | Madhusudhan Kandadai proposed openstack/neutron-lbaas: Including negative tempest tests https://review.openstack.org/165627 | 21:58 |
*** bharath has quit IRC | 22:05 | |
openstackgerrit | German Eichberger proposed stackforge/octavia: Implements the haproxy amphora agent api server https://review.openstack.org/160034 | 22:09 |
*** jorgem has quit IRC | 22:14 | |
*** localloop127 has quit IRC | 22:19 | |
openstackgerrit | Phillip Toohill proposed openstack/neutron-lbaas: Fixes sni_containers access issues https://review.openstack.org/165633 | 22:25 |
ptoohill | johnsom ^ | 22:26 |
johnsom | Cool | 22:26 |
*** bharath has joined #openstack-lbaas | 22:27 | |
ptoohill | This is the 'real' fix for that issue which is slightly different then what you tested out | 22:29 |
johnsom | Yep. I will pull it down and kick the tires here in a few | 22:31 |
*** barclaac has joined #openstack-lbaas | 22:32 | |
openstackgerrit | Madhusudhan Kandadai proposed openstack/neutron-lbaas: Adding negative tempest tests https://review.openstack.org/165627 | 22:32 |
ptoohill | thank you | 22:32 |
madhu_ | fnaval: Please check https://review.openstack.org/#/c/165627/ | 22:34 |
*** barclaac|2 has quit IRC | 22:34 | |
*** ajmiller_ has joined #openstack-lbaas | 22:36 | |
*** ajmiller has quit IRC | 22:39 | |
openstackgerrit | Santosh Sharma proposed openstack/neutron-lbaas: NetScaler driver for LBaaS V2 extension https://review.openstack.org/148541 | 22:43 |
*** Aish has joined #openstack-lbaas | 22:49 | |
johnsom | ptoohill Looks good | 22:50 |
ptoohill | awesome! | 22:51 |
*** Aish has left #openstack-lbaas | 22:57 | |
*** bharath_ has joined #openstack-lbaas | 23:01 | |
*** bharath has quit IRC | 23:04 | |
*** ajmiller_ is now known as ajmiller | 23:16 | |
*** mlavalle has quit IRC | 23:26 | |
*** barclaac|2 has joined #openstack-lbaas | 23:43 | |
*** barclaac has quit IRC | 23:47 | |
*** apuimedo has joined #openstack-lbaas | 23:50 | |
*** xgerman has quit IRC | 23:54 | |
*** ajmiller has quit IRC | 23:55 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!