colin- | if i want to visualize the information the amps send to the HM, am i looking in the right place here? https://github.com/openstack/octavia/blob/master/octavia/amphorae/backends/health_daemon/health_daemon.py#L123 | 00:30 |
---|---|---|
johnsom | That is just the stats part. If you look at the other side I put some comments in the code because I got tired of trying to figure it out myself. | 00:32 |
johnsom | https://github.com/openstack/octavia/blob/master/octavia/controller/healthmanager/health_drivers/update_db.py#L137 | 00:32 |
colin- | i see, thanks | 00:33 |
johnsom | https://github.com/openstack/octavia/blob/master/octavia/controller/healthmanager/health_drivers/update_db.py#L448 | 00:33 |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Add new ssl header into Listener for client certificate https://review.openstack.org/612270 | 00:38 |
*** celebdor has quit IRC | 00:40 | |
*** AlexStaf has quit IRC | 00:40 | |
rm_work | tomorrow i need to figure out what reviews i owe people | 00:42 |
johnsom | https://etherpad.openstack.org/p/octavia-priority-reviews | 00:42 |
rm_work | got really distracted working on a CI bug (turned out to be bug*s*) for the past week <_< | 00:42 |
rm_work | lol yes | 00:43 |
johnsom | Oh joy, those are always fun. | 00:43 |
rm_work | assuming there's stuff left by then, everyone has been really good at reviewing recently apparently :P | 00:43 |
rm_work | bunch of stuff merged before i could get to it (yay) | 00:43 |
*** AlexStaf has joined #openstack-lbaas | 00:44 | |
johnsom | I just realized btrfs is absolutely horrible for VM images.... | 00:46 |
johnsom | I need to rebuild my filesystem back to ext4 at some point. | 00:47 |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Update json module to jsonutils https://review.openstack.org/637929 | 00:49 |
rm_work | lol | 00:49 |
rm_work | is btrfs out of experimental? | 00:50 |
johnsom | Yeah, it's the default on synology now. | 00:50 |
rm_work | ah interesting | 00:50 |
johnsom | However it COWs every single write, which with VM files leads to zillions of extents and hours of defrag to get it back to semi-usable | 00:51 |
johnsom | It's great if you are doing snapshots, but my primary use case on this isn't volume snapshots.... | 00:52 |
rm_work | yeah :/ | 00:52 |
rm_work | CoW support can be expensive I guess with large batches of writes T_T | 00:52 |
johnsom | I noticed right away it was slower, but it's been getting worse and I finally looked into it. | 00:52 |
rm_work | I like it for media storage because... well... *storage* | 00:53 |
johnsom | Yeah, just imagine what devstack stack/unstack does to this thing.... | 00:53 |
rm_work | and i'm on RAID6 anyway so not the fastest ever for writes | 00:53 |
rm_work | rofl poor disk | 00:53 |
dayou | I tried btrfs last year, found it requires too much resources on my router, and then fall back to bcache with soft raid 10 | 00:54 |
rm_work | oh hey dayou! haven't heard from you in a while :P | 00:54 |
rm_work | are you going to Denver? | 00:54 |
johnsom | Opps, I borked that header insertion patch... | 00:55 |
dayou | rm_work, don't know yet, but I'll be at Shanghai Summit :-D | 00:56 |
rm_work | heh yeah, I think I will be too | 00:57 |
dayou | Cool, I can show you around when you are here | 00:58 |
openstackgerrit | Merged openstack/octavia-lib master: Fix some driver library bugs https://review.openstack.org/635087 | 00:58 |
rm_work | looking forward to visiting :) | 00:58 |
rm_work | probably that would be helpful, lol | 00:58 |
dayou | Me too, long time no see | 00:58 |
rm_work | since I know very little about China and no Chinese T_T | 00:58 |
johnsom | Nice. I am pretty sure I will not be able to make Shanghai.... | 00:59 |
dayou | haha, shanghai is kind of friendly, they have English everywhere | 00:59 |
rm_work | I have WeChat and money on it for paying, but now they made some rule, so i can't spend it anymore without a valid Chinese ID T_T | 00:59 |
dayou | Oh, that's a pitty | 00:59 |
rm_work | yeah, annoying | 00:59 |
dayou | haha, you can try alipay | 00:59 |
rm_work | I used it in chinatown in vancouver before | 00:59 |
rm_work | ah hmmm I can check that out, I see it around too | 01:00 |
openstackgerrit | Merged openstack/octavia-lib master: Add FLAVOR as a constant. https://review.openstack.org/631863 | 01:00 |
dayou | Last year when I was in ShengZhen with some friends whos has no Chinese ID it works | 01:00 |
rm_work | cool, i'll try | 01:00 |
rm_work | do you use both? :P | 01:00 |
rm_work | maybe I can send you my RMB on WeChat and you could change it to AliPay, lol | 01:00 |
dayou | Yep, that's the majority ways of payment here | 01:00 |
dayou | I was thinking about the same, so I transfer the money back to you with alipay and you can use it on alipay | 01:01 |
rm_work | i wonder how alipay avoided the chinese banking laws that got wechat pay... | 01:02 |
rm_work | hmmm it seems like maybe they updated recently too T_T | 01:03 |
rm_work | some recent reviews that say it is asking for chinese ID T_T | 01:03 |
dayou | It's seems either a Chinese bank account or id is required | 01:04 |
rm_work | yeah :( | 01:04 |
rm_work | new laws last year I think | 01:04 |
dayou | might be, that I am not quite aware of | 01:05 |
*** logan- has quit IRC | 01:22 | |
*** logan- has joined #openstack-lbaas | 01:23 | |
*** logan- has quit IRC | 01:31 | |
*** logan- has joined #openstack-lbaas | 01:31 | |
lxkong | johnsom, rm_work, do you know how can i customized the sg attached to the vip port? | 01:33 |
johnsom | You can't right now. | 01:33 |
lxkong | no workaround at all? | 01:33 |
johnsom | We have an RFE to add an ACL API in the future. | 01:33 |
johnsom | I assume you want to restrict source IP? | 01:33 |
lxkong | yep | 01:33 |
lxkong | public cloud requirement | 01:34 |
lxkong | johnsom: may i know the rfe link? | 01:34 |
johnsom | Yeah, depending on your neutron config you might be able to put the VIP on a private network, use a floating IP, and put a SG on that | 01:34 |
johnsom | There was a proposed "add an SG to VIP" but it's not how we want to implement it and the provider drivers can hardware implement it | 01:36 |
johnsom | https://storyboard.openstack.org/#!/story/2003686 | 01:37 |
johnsom | But there are also notes on this from a few of the PTGs in the etherpads | 01:37 |
lxkong | > put the VIP on a private network | 01:38 |
lxkong | Isn't the VIP coming from the private network at the moment? | 01:38 |
johnsom | Basically, we don't want to use neutron SGs, but instead add an ACL API. | 01:38 |
johnsom | Neutron has a limitation of only ORing SGs and not AND ing.... | 01:38 |
johnsom | You can put the VIP on any network | 01:38 |
lxkong | ok, sounds like a long way to go :-( | 01:38 |
johnsom | It's not too much work, but isn't going to make Stein | 01:39 |
openstackgerrit | pengyuesheng proposed openstack/neutron-lbaas-dashboard master: Prompt error when timeout is greater than interval https://review.openstack.org/621477 | 01:39 |
lxkong | ok, got the idea, thanks johnsom! | 01:39 |
johnsom | You can also use FWaaS if you route into the VIP | 01:39 |
lxkong | yeah, but FWaaS is not available in our cloud | 01:40 |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Add new ssl header into Listener for client certificate https://review.openstack.org/612270 | 02:05 |
*** abaindur has joined #openstack-lbaas | 02:07 | |
*** abaindur has quit IRC | 02:07 | |
*** abaindur has joined #openstack-lbaas | 02:09 | |
*** abaindur has quit IRC | 02:10 | |
*** abaindur has joined #openstack-lbaas | 02:10 | |
sapd1_x | johnsom: I'm here. | 02:14 |
sapd1_x | yeah. I saw your comment, but I'm busy on other tasks. So I will push new patch set asap. | 02:15 |
johnsom | sapd1_x: ok, I added a gate test. If that works and I can find a minute are you ok with me making that change for you? | 02:17 |
sapd1_x | rm_work: unfortunately, our presentation is not selected. | 02:19 |
sapd1_x | I'm waiting for TSP. | 02:19 |
*** abaindur has quit IRC | 02:19 | |
*** abaindur has joined #openstack-lbaas | 02:20 | |
johnsom | sapd1_x: I just want to check with you before modifying your patch. | 02:28 |
sapd1_x | johnsom: yeah, So the gate is working with cinder now? | 02:29 |
johnsom | I don’t know yet. Oslo broke our gates yesterday, so we are just getting them going again | 02:30 |
sapd1_x | johnsom: I just have to separate cinder function to other module other than nova drivers. | 02:30 |
johnsom | It is a patch in octavia-tempest-plugin | 02:30 |
sapd1_x | yep. Let me know if it works. | 02:30 |
johnsom | sapd1_x: that is the ask. I am offering to help if you are busy | 02:31 |
sapd1_x | johnsom: that's good. I think we can help each other. So no problem. :D | 02:32 |
johnsom | sapd1_x: ok, if I have time I will try to help with that. We can do a follow the sun approach. Grin | 02:35 |
*** sapd1_x has quit IRC | 02:38 | |
*** Dinesh_Bhor has joined #openstack-lbaas | 02:41 | |
*** hongbin has joined #openstack-lbaas | 02:48 | |
*** psachin has joined #openstack-lbaas | 02:52 | |
openstackgerrit | Merged openstack/octavia master: Update requirements for ubuntu https://review.openstack.org/624405 | 03:04 |
*** farelysnow has joined #openstack-lbaas | 03:26 | |
*** ramishra has joined #openstack-lbaas | 03:43 | |
openstackgerrit | caoyuan proposed openstack/python-octaviaclient master: Update json module to jsonutils https://review.openstack.org/638330 | 04:11 |
openstackgerrit | caoyuan proposed openstack/octavia-tempest-plugin master: Update json module to jsonutils https://review.openstack.org/638332 | 04:22 |
*** ianychoi has quit IRC | 04:31 | |
*** hongbin has quit IRC | 05:04 | |
*** yamamoto has quit IRC | 05:44 | |
openstackgerrit | caoyuan proposed openstack/octavia-tempest-plugin master: Update json module to jsonutils https://review.openstack.org/638332 | 05:47 |
*** yamamoto has joined #openstack-lbaas | 05:48 | |
openstackgerrit | Merged openstack/octavia master: Fix auto setup Barbican's ACL in the legacy driver. https://review.openstack.org/606918 | 06:10 |
*** gcheresh has joined #openstack-lbaas | 06:17 | |
*** gcheresh has quit IRC | 06:34 | |
*** ccamposr has joined #openstack-lbaas | 06:51 | |
*** yamamoto has quit IRC | 06:59 | |
*** psachin has quit IRC | 07:10 | |
*** rcernin has quit IRC | 07:13 | |
*** pcaruana has joined #openstack-lbaas | 07:19 | |
*** celebdor has joined #openstack-lbaas | 07:31 | |
*** psachin has joined #openstack-lbaas | 07:32 | |
*** yamamoto has joined #openstack-lbaas | 07:38 | |
*** Dinesh_Bhor has quit IRC | 07:49 | |
openstackgerrit | Merged openstack/octavia master: Update json module to jsonutils https://review.openstack.org/637929 | 07:53 |
*** sapd1_x has joined #openstack-lbaas | 07:54 | |
*** sapd1_x has quit IRC | 08:06 | |
openstackgerrit | Nir Magnezi proposed openstack/octavia master: WIP: Add initscript element to RHEL8 and Fedora28 https://review.openstack.org/636661 | 08:10 |
*** ivve has joined #openstack-lbaas | 08:27 | |
*** abaindur has quit IRC | 08:31 | |
*** abaindur has joined #openstack-lbaas | 08:31 | |
openstackgerrit | Merged openstack/octavia master: Fix oslo messaging connection leakage https://review.openstack.org/636428 | 08:41 |
openstackgerrit | Jacky Hu proposed openstack/octavia-dashboard master: WIP: Add load balancer flavor support https://review.openstack.org/638365 | 08:55 |
*** yamamoto has quit IRC | 08:56 | |
*** abaindur has quit IRC | 08:57 | |
*** yamamoto has joined #openstack-lbaas | 09:04 | |
*** ccamposr has quit IRC | 09:04 | |
*** ccamposr has joined #openstack-lbaas | 09:23 | |
openstackgerrit | Merged openstack/octavia master: Set the default retries down to 120 https://review.openstack.org/637077 | 09:31 |
*** sapd1_x has joined #openstack-lbaas | 09:37 | |
*** yamamoto has quit IRC | 09:58 | |
*** ccamposr has quit IRC | 09:58 | |
openstackgerrit | Nir Magnezi proposed openstack/octavia master: Encrypt certs and keys https://review.openstack.org/627064 | 10:02 |
*** ccamposr has joined #openstack-lbaas | 10:02 | |
*** yamamoto has joined #openstack-lbaas | 10:34 | |
*** psachin has quit IRC | 10:38 | |
*** yamamoto has quit IRC | 10:39 | |
*** psachin has joined #openstack-lbaas | 10:42 | |
*** sapd1_x has quit IRC | 10:50 | |
*** AlexStaf has quit IRC | 10:54 | |
*** psachin has quit IRC | 11:22 | |
openstackgerrit | zhulingjie proposed openstack/octavia-tempest-plugin master: Update json module to jsonutils https://review.openstack.org/638332 | 11:28 |
openstackgerrit | zhulingjie proposed openstack/python-octaviaclient master: Update json module to jsonutils https://review.openstack.org/638330 | 11:29 |
*** yamamoto has joined #openstack-lbaas | 11:29 | |
*** yamamoto has quit IRC | 11:34 | |
*** dayou has quit IRC | 12:19 | |
*** farelysnow has quit IRC | 12:21 | |
*** dayou has joined #openstack-lbaas | 12:23 | |
*** yamamoto has joined #openstack-lbaas | 12:28 | |
*** yamamoto has quit IRC | 12:34 | |
*** celebdor has quit IRC | 12:48 | |
*** yamamoto has joined #openstack-lbaas | 13:03 | |
*** trown|outtypewww is now known as trown | 13:06 | |
*** yamamoto has quit IRC | 13:08 | |
openstackgerrit | Nir Magnezi proposed openstack/octavia master: Encrypt certs and keys https://review.openstack.org/627064 | 13:10 |
*** henriqueof has quit IRC | 13:17 | |
*** henriqueof has joined #openstack-lbaas | 13:25 | |
*** yamamoto has joined #openstack-lbaas | 13:36 | |
*** yamamoto has quit IRC | 13:36 | |
*** yamamoto has joined #openstack-lbaas | 13:47 | |
*** yamamoto has quit IRC | 14:13 | |
*** yamamoto has joined #openstack-lbaas | 14:14 | |
*** yamamoto has quit IRC | 14:14 | |
*** yamamoto has joined #openstack-lbaas | 14:15 | |
*** yamamoto has quit IRC | 14:19 | |
openstackgerrit | Nir Magnezi proposed openstack/octavia master: Encrypt certs and keys https://review.openstack.org/627064 | 14:30 |
*** ramishra has quit IRC | 14:40 | |
*** yamamoto has joined #openstack-lbaas | 14:57 | |
*** yamamoto has quit IRC | 15:01 | |
*** celebdor has joined #openstack-lbaas | 15:02 | |
henriqueof | What are the post-install steps to take after deploying Octavia with kolla? Looks like only missing thing is amphora image, am I right? | 15:03 |
*** ramishra has joined #openstack-lbaas | 15:30 | |
*** celebdor has quit IRC | 15:50 | |
xgerman | rm_work: has the most experience with kolla - so you need to wait until he is in :_ | 15:53 |
*** ramishra has quit IRC | 16:05 | |
*** celebdor has joined #openstack-lbaas | 16:11 | |
*** fnaval has joined #openstack-lbaas | 16:13 | |
openstackgerrit | Carlos Goncalves proposed openstack/octavia stable/rocky: Fix oslo messaging connection leakage https://review.openstack.org/638454 | 16:24 |
*** yamamoto has joined #openstack-lbaas | 16:45 | |
*** yamamoto has quit IRC | 16:50 | |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Add client_ca_tls_container_ref to listener API https://review.openstack.org/612267 | 17:02 |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Add an option to the Octavia V2 listener API for client cert https://review.openstack.org/612268 | 17:02 |
johnsom | Rebase fun | 17:02 |
johnsom | Ah, the barbican patch caused the conflict... easy cleanup | 17:04 |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Add crl-file option for certification https://review.openstack.org/612269 | 17:06 |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Add new ssl header into Listener for client certificate https://review.openstack.org/612270 | 17:06 |
openstackgerrit | guang-yee proposed openstack/octavia master: Update osutil support for SUSE distro https://review.openstack.org/541811 | 17:06 |
*** pcaruana has quit IRC | 17:07 | |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Add new ssl header into Listener for client certificate https://review.openstack.org/612270 | 17:17 |
*** yamamoto has joined #openstack-lbaas | 17:20 | |
*** ccamposr has quit IRC | 17:24 | |
*** yamamoto has quit IRC | 17:25 | |
*** trown is now known as trown|lunch | 17:38 | |
*** celebdor has quit IRC | 17:44 | |
*** yamamoto has joined #openstack-lbaas | 17:47 | |
*** trown|lunch is now known as trown | 18:52 | |
rm_work | henriqueof: yeah actually you prolly want to do the amp build and image upload *before* you deploy the service :D | 19:48 |
rm_work | But, yeah that's basically the only other thing | 19:48 |
henriqueof | rm_work: Right, I see the installer asked for the certs and I provided then but it doesn't asked for images, it also did not create the networks so I thought some parts of the deployment wasn't implemented on the ansible playbook. | 19:58 |
henriqueof | Also, there is no docs on Octavio config using kolla, is there a guide anywhere? | 19:59 |
rm_work | ah, kolla-ansible, not just kolla | 19:59 |
rm_work | or, kolla + custom stuff? | 19:59 |
*** fnaval has quit IRC | 20:12 | |
*** fnaval_ has joined #openstack-lbaas | 20:12 | |
henriqueof | kolla-ansible | 20:23 |
*** abaindur has joined #openstack-lbaas | 20:26 | |
rm_work | Yeah because we use an image tag not an ID, I don't think k-a needs to know anything about your image, it just expects you to upload it and tag it with the correct tag name | 20:26 |
rm_work | Though I forget which one it configures by default | 20:26 |
*** abaindur has quit IRC | 20:27 | |
*** abaindur has joined #openstack-lbaas | 20:28 | |
*** fnaval_ has quit IRC | 20:29 | |
*** fnaval has joined #openstack-lbaas | 20:29 | |
henriqueof | I just checked the deployed configs, the image tag is amphora like the docs recommends and there is not network IDs so I think it is out of the scope os k-a, what dou you think? | 20:36 |
rm_work | yeah | 21:03 |
*** rcernin has joined #openstack-lbaas | 21:11 | |
*** trown is now known as trown|outtypewww | 22:07 | |
*** fnaval has quit IRC | 22:13 | |
johnsom | Well, that was a bunch of time refreshing my memory on Distinguished Name syntax... At least I have a path forward now on the L7 patch. | 22:28 |
*** fnaval has joined #openstack-lbaas | 22:35 | |
*** fnaval has quit IRC | 22:35 | |
*** fnaval has joined #openstack-lbaas | 22:36 | |
*** ivve has quit IRC | 23:25 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!