johnsom | Assuming my way-back-machine-memory is correct. | 00:00 |
---|---|---|
rm_work | yep | 00:25 |
*** abaindur_ has joined #openstack-lbaas | 00:31 | |
*** abaindu__ has joined #openstack-lbaas | 00:33 | |
*** abaindu__ is now known as abaindur__ | 00:33 | |
*** abaindur has quit IRC | 00:34 | |
*** abaindur_ has quit IRC | 00:36 | |
*** abaindur has joined #openstack-lbaas | 00:39 | |
*** abaindur__ has quit IRC | 00:41 | |
*** abaindur_ has joined #openstack-lbaas | 00:42 | |
*** abaindur_ has quit IRC | 00:43 | |
*** abaindur_ has joined #openstack-lbaas | 00:44 | |
*** abaindur has quit IRC | 00:44 | |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Fix the amphora noop driver https://review.openstack.org/595390 | 00:45 |
*** ramishra has joined #openstack-lbaas | 01:15 | |
*** abaindur has joined #openstack-lbaas | 01:19 | |
*** abaindur_ has quit IRC | 01:20 | |
*** abaindur has quit IRC | 01:25 | |
*** abaindur has joined #openstack-lbaas | 01:44 | |
*** raginbajin has quit IRC | 01:46 | |
*** raginbajin has joined #openstack-lbaas | 01:49 | |
*** abaindur has quit IRC | 01:51 | |
*** threestrands has quit IRC | 02:08 | |
*** hongbin has joined #openstack-lbaas | 02:21 | |
*** ianychoi has quit IRC | 02:28 | |
*** dims has quit IRC | 02:28 | |
*** fyx has quit IRC | 02:28 | |
*** mnaser has quit IRC | 02:28 | |
*** Krast has quit IRC | 02:28 | |
*** mordred has quit IRC | 02:28 | |
*** rtjure has quit IRC | 02:28 | |
*** ianychoi has joined #openstack-lbaas | 02:30 | |
*** dims has joined #openstack-lbaas | 02:30 | |
*** fyx has joined #openstack-lbaas | 02:30 | |
*** mnaser has joined #openstack-lbaas | 02:30 | |
*** Krast has joined #openstack-lbaas | 02:30 | |
*** mordred has joined #openstack-lbaas | 02:30 | |
*** rtjure has joined #openstack-lbaas | 02:30 | |
*** openstack has joined #openstack-lbaas | 13:23 | |
*** ChanServ sets mode: +o openstack | 13:23 | |
*** openstackstatus has joined #openstack-lbaas | 13:24 | |
*** ChanServ sets mode: +v openstackstatus | 13:24 | |
openstackgerrit | Merged openstack/octavia master: Fix the amphora noop driver https://review.openstack.org/595390 | 14:01 |
*** xgerman_ has joined #openstack-lbaas | 14:44 | |
*** pcaruana has quit IRC | 14:59 | |
*** abaindur has quit IRC | 15:16 | |
cgoncalves | dolly, hi. FYI, I started working on a fix to the misconfig of octavia by tripleo: https://review.openstack.org/#/c/596373/ | 15:23 |
cgoncalves | I haven't tested it yet | 15:23 |
*** fnaval has joined #openstack-lbaas | 15:24 | |
*** ramishra has quit IRC | 15:25 | |
dolly | cgoncalves, hey! Oh, awesome, that makes sense! | 15:27 |
dolly | cgoncalves, Do you have to use an extra "common-file", isn't it possible to "just" use the octavia.conf (just curious) ? | 15:28 |
*** velizarx has quit IRC | 15:29 | |
dolly | For anyone interested, (cgoncalves maybe), here's how I rebuilt the octavia-containers with the 2.0.2-release of octavia, http://paste.openstack.org/show/728757/ | 15:55 |
*** ktibi has quit IRC | 16:50 | |
xgerman_ | cgoncalves: o/ I am back. Should be able to join you in Berlin.. | 16:51 |
xgerman_ | cores: https://review.openstack.org/#/c/587505/ | 17:06 |
cgoncalves | dolly, it should be possible, yes, I just didn't want to touch too much in tripleo for multiple reasons :) | 17:15 |
cgoncalves | dolly, cool, thanks for the dockerfile | 17:16 |
cgoncalves | xgerman_, welcome back! great! my attendance isn't confirmed yet. having sessions helps but is not a done deal | 17:16 |
cgoncalves | dolly, I think you overdid it. using kolla should have been much easier | 17:17 |
xgerman_ | yeah, let's hope they get you confirmed as well ;-) | 17:17 |
cgoncalves | unless I'm missing something you can't do with kolla today | 17:17 |
openstackgerrit | Michael Johnson proposed openstack/octavia master: switch documentation job to new PTI https://review.openstack.org/595754 | 17:17 |
openstackgerrit | boden proposed openstack/neutron-lbaas master: use payloads for PORT BEFORE_DELETE callbacks https://review.openstack.org/596418 | 18:06 |
*** abaindur has joined #openstack-lbaas | 18:17 | |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Add amphora statistics to the admin API https://review.openstack.org/585031 | 18:32 |
*** abaindur has quit IRC | 18:36 | |
*** abaindur has joined #openstack-lbaas | 18:36 | |
openstackgerrit | Merged openstack/octavia master: import zuul job settings from project-config https://review.openstack.org/595753 | 18:56 |
abaindur | johnsom: and rm_work: hey, continuing our discussion from yesterday... | 18:58 |
abaindur | You mentioned that in [certificates] section, "ca_certificate = server CA's "server.pem" file. Which file is this exactly? Perhaps my understanding of TLS/self-signed certs isn't complete, but as I understand, there is the CA's private key, and the CA's cert. From here a user can generate their own private key, then use the CA's cer to generate a client cert. | 18:58 |
abaindur | This is what I see the create_certificates.sh script creating: First private key for CA (private/cakey.pem), then the CA cert (ca_01.pem). It then generates a client key and client cert (client.pem), using the CA's cert to do so. | 18:58 |
abaindur | So in this case, what is ca_certificate = server CA's "server.pem"? Is it not ca_01.pem, the CA's cert? | 18:59 |
abaindur | Forget about the CLient CA and the client cert that octavia presents to the amphora - that I understand fully | 18:59 |
abaindur | Even looking at devstack and other example configs, I see that [certificates] ca_certificate == [haproxy_amphora] server_ca == ca_01.pem | 19:03 |
openstackgerrit | Merged openstack/neutron-lbaas master: Do not run dsvm tests if locales change https://review.openstack.org/593387 | 19:37 |
johnsom | abaindur I am on vacation today and can't really respond today. | 19:38 |
abaindur | np | 19:41 |
rm_work | and i am in meetings for a bit T_T | 19:49 |
*** abaindur has quit IRC | 20:13 | |
*** abaindur has joined #openstack-lbaas | 20:14 | |
*** KeithMnemonic has quit IRC | 20:28 | |
*** sapd1_ has quit IRC | 20:30 | |
openstackgerrit | Merged openstack/octavia master: switch documentation job to new PTI https://review.openstack.org/595754 | 20:49 |
abaindur | rm_work: are you free now, or shall we discuss on Monday? | 22:37 |
*** celebdor has quit IRC | 22:44 | |
*** fnaval has quit IRC | 23:15 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!