*** henriqueof has quit IRC | 00:01 | |
*** abaindur has joined #openstack-lbaas | 00:01 | |
*** henriqueof has joined #openstack-lbaas | 00:02 | |
*** dmellado has quit IRC | 00:03 | |
*** dmellado has joined #openstack-lbaas | 00:04 | |
*** celebdor has joined #openstack-lbaas | 00:04 | |
*** celebdor has quit IRC | 00:10 | |
*** sapd1 has quit IRC | 00:16 | |
*** fnaval_ has quit IRC | 00:25 | |
*** luksky has quit IRC | 00:35 | |
*** fnaval has joined #openstack-lbaas | 00:35 | |
*** openstackgerrit has joined #openstack-lbaas | 00:44 | |
openstackgerrit | Ken'ichi Ohmichi proposed openstack/octavia master: Trivial: Remove unused OCTAVIA_AMP_SUBNET_ID https://review.openstack.org/641178 | 00:44 |
---|---|---|
openstackgerrit | Michael Johnson proposed openstack/octavia master: Support Host header inject for healthmonitor HTTP 1.1 health check https://review.openstack.org/626183 | 00:46 |
openstackgerrit | Ken'ichi Ohmichi proposed openstack/octavia master: Trivial: Remove unused OCTAVIA_AMP_SUBNET_ID https://review.openstack.org/641178 | 00:48 |
openstackgerrit | Michael Johnson proposed openstack/python-octaviaclient master: Add new options to HealthMonitor CLI https://review.openstack.org/626190 | 00:51 |
openstackgerrit | Michael Johnson proposed openstack/octavia-tempest-plugin master: Add octavia-lib to required projects https://review.openstack.org/641180 | 01:09 |
*** oanson has quit IRC | 01:13 | |
openstackgerrit | Michael Johnson proposed openstack/octavia master: DNM: Testing bionic on legacy tempest https://review.openstack.org/641182 | 01:18 |
openstackgerrit | Michael Johnson proposed openstack/neutron-lbaas master: DNM: Testing legacy tempest on bionic https://review.openstack.org/641183 | 01:19 |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Support Host header inject for healthmonitor HTTP 1.1 health check https://review.openstack.org/626183 | 01:24 |
*** abaindur_ has joined #openstack-lbaas | 02:04 | |
*** abaindur has quit IRC | 02:06 | |
*** abaindur has joined #openstack-lbaas | 02:11 | |
*** abaindur_ has quit IRC | 02:12 | |
*** abaindur_ has joined #openstack-lbaas | 02:13 | |
openstackgerrit | Merged openstack/octavia master: Support L7policy redirect http code https://review.openstack.org/625007 | 02:14 |
*** abaindur has quit IRC | 02:15 | |
*** abaindur has joined #openstack-lbaas | 02:17 | |
*** abaindur_ has quit IRC | 02:20 | |
*** abaindur_ has joined #openstack-lbaas | 02:24 | |
*** hongbin has joined #openstack-lbaas | 02:26 | |
*** abaindu__ has joined #openstack-lbaas | 02:26 | |
*** abaindu__ is now known as abaindur__ | 02:26 | |
*** abaindur has quit IRC | 02:27 | |
*** abaindur_ has quit IRC | 02:29 | |
*** abaindur has joined #openstack-lbaas | 02:29 | |
*** abaindur__ has quit IRC | 02:31 | |
*** abaindur_ has joined #openstack-lbaas | 02:36 | |
openstackgerrit | Merged openstack/octavia master: Encrypt certs and keys https://review.openstack.org/627064 | 02:38 |
*** abaindur has quit IRC | 02:38 | |
*** abaindur has joined #openstack-lbaas | 02:41 | |
*** psachin has joined #openstack-lbaas | 02:43 | |
*** abaindu__ has joined #openstack-lbaas | 02:44 | |
*** abaindur_ has quit IRC | 02:44 | |
*** abaindu__ is now known as abaindur__ | 02:44 | |
*** abaindur has quit IRC | 02:45 | |
*** abaindur has joined #openstack-lbaas | 02:48 | |
*** abaindur__ has quit IRC | 02:50 | |
*** abaindur_ has joined #openstack-lbaas | 02:50 | |
*** abaindur has quit IRC | 02:53 | |
*** abaindur_ has quit IRC | 02:57 | |
*** abaindur has joined #openstack-lbaas | 02:58 | |
*** yamamoto has joined #openstack-lbaas | 03:00 | |
*** ramishra has joined #openstack-lbaas | 04:14 | |
*** hongbin has quit IRC | 04:42 | |
*** bzhao__ has quit IRC | 04:59 | |
*** ianychoi_ has joined #openstack-lbaas | 05:24 | |
*** ianychoi has quit IRC | 05:28 | |
*** yboaron has joined #openstack-lbaas | 05:29 | |
*** gcheresh_ has joined #openstack-lbaas | 05:32 | |
*** gcheresh_ has quit IRC | 05:37 | |
*** abaindur has quit IRC | 05:49 | |
*** abaindur has joined #openstack-lbaas | 05:50 | |
*** gcheresh_ has joined #openstack-lbaas | 06:07 | |
*** abaindur has quit IRC | 06:19 | |
*** abaindur has joined #openstack-lbaas | 06:20 | |
*** ccamposr has joined #openstack-lbaas | 06:59 | |
*** ivve has joined #openstack-lbaas | 07:00 | |
openstackgerrit | Merged openstack/python-octaviaclient master: Add a new option '--redirect-http-code' into L7Policy CLI https://review.openstack.org/625008 | 07:13 |
*** mkuf has joined #openstack-lbaas | 07:35 | |
*** luksky has joined #openstack-lbaas | 07:35 | |
*** mkuf has quit IRC | 07:39 | |
*** luksky has quit IRC | 07:39 | |
openstackgerrit | Nir Magnezi proposed openstack/octavia stable/rocky: Encrypt certs and keys https://review.openstack.org/641268 | 07:47 |
*** rpittau|afk is now known as rpittau | 08:02 | |
*** mkuf has joined #openstack-lbaas | 08:17 | |
openstackgerrit | Nir Magnezi proposed openstack/octavia stable/queens: Encrypt certs and keys https://review.openstack.org/641279 | 08:23 |
*** pcaruana has joined #openstack-lbaas | 08:29 | |
*** yboaron_ has joined #openstack-lbaas | 08:32 | |
*** yboaron has quit IRC | 08:34 | |
*** yboaron_ has quit IRC | 09:06 | |
*** yboaron_ has joined #openstack-lbaas | 09:07 | |
*** numans has joined #openstack-lbaas | 09:13 | |
*** celebdor has joined #openstack-lbaas | 09:15 | |
*** andrein has joined #openstack-lbaas | 09:17 | |
*** abaindur has quit IRC | 09:22 | |
*** lemko has joined #openstack-lbaas | 09:48 | |
*** salmankhan has joined #openstack-lbaas | 09:52 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/octavia-dashboard master: Imported Translations from Zanata https://review.openstack.org/641288 | 09:57 |
*** yamamoto has quit IRC | 10:34 | |
*** ramishra has quit IRC | 10:40 | |
*** ramishra has joined #openstack-lbaas | 10:59 | |
*** pcaruana has quit IRC | 11:04 | |
*** yamamoto has joined #openstack-lbaas | 11:10 | |
*** yamamoto has quit IRC | 11:18 | |
*** ianychoi_ is now known as ianychoi | 11:20 | |
*** yamamoto has joined #openstack-lbaas | 11:27 | |
*** pcaruana has joined #openstack-lbaas | 11:32 | |
*** mkuf has quit IRC | 11:39 | |
*** mkuf has joined #openstack-lbaas | 11:39 | |
openstackgerrit | Merged openstack/octavia-dashboard master: Imported Translations from Zanata https://review.openstack.org/641288 | 11:47 |
*** henriqueof has quit IRC | 12:16 | |
*** andrein has quit IRC | 12:37 | |
*** andrein has joined #openstack-lbaas | 12:37 | |
*** andrein has quit IRC | 13:02 | |
*** lemko has quit IRC | 13:15 | |
*** salmankhan has quit IRC | 13:44 | |
*** yamamoto has quit IRC | 13:47 | |
*** yamamoto has joined #openstack-lbaas | 13:48 | |
*** pcaruana has quit IRC | 13:51 | |
*** ataraday_ has joined #openstack-lbaas | 13:58 | |
*** pcaruana has joined #openstack-lbaas | 14:01 | |
*** gthiemonge has joined #openstack-lbaas | 14:21 | |
*** fnaval has quit IRC | 14:31 | |
*** fnaval has joined #openstack-lbaas | 14:46 | |
*** ivve has quit IRC | 14:57 | |
dulek | cgoncalves: Lame question. Two listeners, port 53, different protocols - UDP and TCP. | 15:03 |
dulek | cgoncalves: Does this not work at all or not work for some providers? | 15:03 |
*** salmankhan has joined #openstack-lbaas | 15:30 | |
nmagnezi | dulek, for the Octavia Amphora driver it should work | 15:30 |
nmagnezi | dulek, other providers I don't know | 15:31 |
dulek | nmagnezi: I think we tracked this down to networking-ovn not being able to do it, so you're right. :) | 15:31 |
nmagnezi | :D | 15:31 |
nmagnezi | dulek, For networking-ovn reedip would probably also know | 15:32 |
*** pcaruana has quit IRC | 15:53 | |
*** yboaron_ has quit IRC | 16:04 | |
*** pcaruana has joined #openstack-lbaas | 16:06 | |
*** amuller has joined #openstack-lbaas | 16:23 | |
colin- | anyone have a link handy to the sequence/app logic diagram that i know exists for the project? | 16:46 |
johnsom | colin- This one? https://docs.openstack.org/octavia/latest/contributor/devref/flows.html | 16:48 |
colin- | perfect, thank you | 16:48 |
colin- | could i have found this from the left-hand menu somehow? | 16:48 |
johnsom | It's in the "contributor documentation" section | 16:49 |
*** pcaruana has quit IRC | 16:55 | |
*** Baggypants12000 has joined #openstack-lbaas | 16:56 | |
colin- | got it. unrelated, what other options does amphora_udp_driver support if any? | 16:58 |
johnsom | Aside from the health monitors? | 16:59 |
*** ivve has joined #openstack-lbaas | 17:00 | |
johnsom | There are two open patches we haven't merged, one is the one-packet option, the other is re-enabling HTTP health monitors on UDP pools. | 17:01 |
colin- | alternative to keepalived_lvs i mean | 17:01 |
johnsom | Oh, none, it's LVS based only right now | 17:02 |
colin- | got it | 17:02 |
*** kenaz has joined #openstack-lbaas | 17:02 | |
johnsom | We just added UDP in Rocky, there is still some work to do there with documentation updates and tempest tests. | 17:02 |
*** henriqueof has joined #openstack-lbaas | 17:03 | |
*** gthiemonge has quit IRC | 17:06 | |
*** ramishra has quit IRC | 17:14 | |
*** yamamoto has quit IRC | 17:15 | |
*** kenaz is now known as kenaz_ | 17:22 | |
*** cbrumm_ has quit IRC | 17:26 | |
*** yamamoto has joined #openstack-lbaas | 17:28 | |
*** gcheresh_ has quit IRC | 17:32 | |
*** cbrumm_ has joined #openstack-lbaas | 17:33 | |
*** yamamoto has quit IRC | 17:34 | |
*** celebdor has quit IRC | 18:02 | |
*** psachin has quit IRC | 18:05 | |
*** yamamoto has joined #openstack-lbaas | 18:09 | |
*** kenaz_ has quit IRC | 18:11 | |
*** amuller has quit IRC | 18:13 | |
*** yamamoto has quit IRC | 18:14 | |
openstackgerrit | Carlos Goncalves proposed openstack/octavia-lib master: Sync data models and import new constants from Octavia https://review.openstack.org/640825 | 18:22 |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Fix updates to the provider driver guide. https://review.openstack.org/641460 | 18:30 |
*** ccamposr has quit IRC | 18:35 | |
openstackgerrit | Merged openstack/octavia master: Support Host header inject for healthmonitor HTTP 1.1 health check https://review.openstack.org/626183 | 18:49 |
johnsom | Ah yes, ext4 is much better than btrfs: | 18:53 |
johnsom | https://www.irccloud.com/pastebin/ZfgbKfwM/ | 18:53 |
cgoncalves | offline=true, reclone=false? | 18:54 |
xgerman | +1000 | 18:55 |
johnsom | online, reclone false, with horizon added | 18:55 |
johnsom | The COW in btrfs was killing my performance | 18:57 |
*** ivve has quit IRC | 18:57 | |
cgoncalves | how did it perform on btrfs? | 18:59 |
johnsom | 1500+ | 18:59 |
johnsom | And got worse over time | 18:59 |
cgoncalves | nice | 19:00 |
xgerman | I run all my (non OS-X) stuff on ext-4. Got my kid a cheap Chromebook they are pretty nice, too. Even come with some containerized (?) Debian they call Penguin.. | 19:02 |
xgerman | will defintely try devstack on it one day for science... | 19:03 |
johnsom | Ouch, horizon might not be python3 ready... I'm getting a ton of issues... | 19:06 |
*** salmankhan has quit IRC | 19:11 | |
*** salmankhan1 has joined #openstack-lbaas | 19:11 | |
*** salmankhan1 has quit IRC | 19:15 | |
*** kosa777777 has quit IRC | 19:22 | |
nmagnezi | cgoncalves, o/ | 19:57 |
cgoncalves | nmagnezi, o/^2 | 19:57 |
nmagnezi | cgoncalves, any luck with https://review.openstack.org/#/c/640825/ | 19:58 |
nmagnezi | .l | 19:58 |
nmagnezi | lo | 19:58 |
nmagnezi | l | 19:58 |
nmagnezi | I see a new patch set | 19:58 |
nmagnezi | Lemme know if ready for review | 19:58 |
cgoncalves | nmagnezi, see my comment | 19:58 |
nmagnezi | cgoncalves, ack | 19:58 |
nmagnezi | johnsom, o/ | 20:00 |
johnsom | ha | 20:00 |
johnsom | #startmeeting octavia | 20:00 |
openstack | Meeting started Wed Mar 6 20:00:49 2019 UTC and is due to finish in 60 minutes. The chair is johnsom. Information about MeetBot at http://wiki.debian.org/MeetBot. | 20:00 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 20:00 |
*** openstack changes topic to " (Meeting topic: octavia)" | 20:00 | |
openstack | The meeting name has been set to 'octavia' | 20:00 |
cgoncalves | hi folks | 20:01 |
xgerman | o/ | 20:01 |
nmagnezi | o/ | 20:01 |
johnsom | Sorry folks, got distracted working on a dashboard patch | 20:01 |
xgerman | n.p, | 20:01 |
xgerman | exciting week | 20:01 |
johnsom | #topic Announcements | 20:01 |
*** openstack changes topic to "Announcements (Meeting topic: octavia)" | 20:02 | |
xgerman | TC election results | 20:02 |
johnsom | Yep, the TC election is complete | 20:02 |
xgerman | https://twitter.com/SeanTMcGinnis/status/1103086613322641408 | 20:03 |
johnsom | #link https://civs.cs.cornell.edu/cgi-bin/results.pl?id=E_6c71f84caff2b37c | 20:03 |
johnsom | Sorry, took me a minute to find the link | 20:03 |
xgerman | congrats to friends of LBaaS mnaser mugsie dewsday | 20:04 |
johnsom | Yeah, looks like a great TC | 20:04 |
xgerman | +1 | 20:04 |
xgerman | big disturbance in the force | 20:05 |
johnsom | Also of note, the PTL election cycle for Train is now open. | 20:05 |
johnsom | #link http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003505.html | 20:05 |
xgerman | 4 more years!! | 20:05 |
johnsom | Ha, well, we will get to that later in the agenda | 20:05 |
johnsom | The big item of note this week: | 20:06 |
johnsom | It is feature freeze week. No new features will be merged until the open of Train. (Tempest tests and documentation are exempt) | 20:06 |
johnsom | We will talk a bit later in the agenda about where we are and what items we can get into Stein. | 20:07 |
xgerman | https://techcrunch.com/2019/03/01/rackspace-announces-it-has-laid-off-200-workers/ | 20:07 |
johnsom | Well, yeah, ^^^^ that | 20:07 |
johnsom | We can talk more about that later in the meeting | 20:07 |
johnsom | Also, there is call to review the two potential community goals for Train: | 20:08 |
xgerman | +1 | 20:08 |
johnsom | #link http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003549.html | 20:08 |
johnsom | One is about cleaning up all of the resources a project owned in the whole cloud. | 20:09 |
johnsom | The other is about OpenStack client migration. | 20:09 |
johnsom | I suspect the client goal may be a no-op for us as we are already 100% OpenStack client | 20:10 |
johnsom | We might need to play whack a mole on any neutron-lbaas patches that show up, but otherwise should be good. | 20:10 |
johnsom | Any other announcements today? | 20:10 |
*** yamamoto has joined #openstack-lbaas | 20:11 | |
johnsom | #topic Brief progress reports / bugs needing review | 20:11 |
*** openstack changes topic to "Brief progress reports / bugs needing review (Meeting topic: octavia)" | 20:11 | |
johnsom | I have been heads down, aside from some other distractions, getting patches ready and merged for the feature freeze. | 20:11 |
johnsom | TLS is all done and in. Some other enhancements are close. | 20:12 |
johnsom | I'm working on the dashboard patch for flavors now. | 20:12 |
cgoncalves | great work, you and Zhao! | 20:12 |
xgerman | “full stack engineer" | 20:12 |
xgerman | cgoncalves: +10 | 20:12 |
nmagnezi | cgoncalves, totally agree | 20:12 |
johnsom | Most of the credit goes to Zhao. It is awesome that he could get backend re-encrypt in as well. That was a special ask we had from the PTG. | 20:13 |
johnsom | It also sets us up to support TLS for non-HTTP protocols, so good stuff there. | 20:13 |
xgerman | +1 | 20:13 |
johnsom | Bonus on the TLS stuff, you don't need to roll the amp image to get it. (though other patches will likely make you want to. | 20:14 |
xgerman | Sweet! | 20:15 |
johnsom | Once we declare feature freeze, I plan to pivot to looking at bugs. I think we have a few we should address in Stein. | 20:15 |
*** yamamoto has quit IRC | 20:16 | |
johnsom | RC1 will be the week of the 18th. | 20:16 |
xgerman | happy to help - now as I have some time on my hands | 20:16 |
johnsom | Any other updates from folks? | 20:16 |
nmagnezi | RHEL8 amphora support is on the way | 20:17 |
xgerman | ARM, too? | 20:17 |
nmagnezi | cgoncalves, made some additions to Octavia. I work on other places as well | 20:17 |
cgoncalves | well, yet to be seen | 20:17 |
colin- | o/ | 20:17 |
johnsom | Cool. I assume that DIB patch did not land? | 20:17 |
colin- | sorry i'm late | 20:17 |
nmagnezi | Including dib, SELinux and other stuff | 20:17 |
nmagnezi | Sadly no but we will keep pushing it | 20:18 |
cgoncalves | no. my idea is to create a rhel8 element and have it merged in DIB | 20:18 |
johnsom | Ok. Just checking if we could land the 8 support patch | 20:18 |
cgoncalves | the rhel-minimal is for rhel 8 and uses the beta repos | 20:18 |
johnsom | Cool | 20:18 |
nmagnezi | yup | 20:18 |
nmagnezi | Also nice to see 'Encrypt certs and keys' in | 20:19 |
nmagnezi | Not a "feature" but still a good one | 20:19 |
xgerman | yeah, that seemed nice... | 20:19 |
johnsom | +1, yeah, that was important to get in. | 20:19 |
johnsom | It also will help when we do persistent flow storage for the sub-flow recovery work. | 20:20 |
cgoncalves | there has been some work in octavia-lib to sync data models that still exist in octavia. hopefully we can merge the open patch and make a release asap | 20:20 |
xgerman | we probably can :-) | 20:20 |
johnsom | Yeah, that is my plan. We can talk about the in/out here in a minute. | 20:20 |
johnsom | Ok, let's move on to the next topic..... | 20:20 |
nmagnezi | cgoncalves, +1. I'll look at it after the meeting | 20:21 |
cgoncalves | I also worked on a patch to fix creation of TLS-terminated listeners via horizon | 20:21 |
cgoncalves | #link https://review.openstack.org/#/c/640686/ | 20:21 |
johnsom | Ah, yeah, thanks for that bug fix. I plan to test it right after I finish up the flavor dashboard patch review | 20:21 |
johnsom | #topic PTL role update/discussion | 20:21 |
*** openstack changes topic to "PTL role update/discussion (Meeting topic: octavia)" | 20:21 | |
johnsom | So, if you have not yet heard, Rackspace had a layoff and halted work on some projects. | 20:22 |
johnsom | This has impacted my employment, so I am now looking for a new job. | 20:22 |
xgerman | I am also impacted :-( | 20:23 |
johnsom | Others here have also been impacted | 20:23 |
colin- | sorry to hear that you guys, that's really unfortunate :( | 20:23 |
johnsom | My plan is to of course, look for a new job.... | 20:23 |
johnsom | But I will also try to fulfill my PTL commitment through the end of my term. | 20:23 |
johnsom | This means I will continue to work on patches and reviews, lead meetings, and generally be the PTL while I hunt for what is next. | 20:24 |
cgoncalves | that is very generous of you. thank you very much, Michael | 20:24 |
colin- | hear hear | 20:24 |
xgerman | +100 | 20:24 |
johnsom | At this time, since I do not know if I will find an OpenStack related job, I do not plan to run for PTL for the Train release. | 20:25 |
johnsom | It would be unfair to run and then need to resign right away. | 20:25 |
nmagnezi | Best of luck with finding your next jobs guys! | 20:25 |
xgerman | thanks | 20:25 |
johnsom | If magic happens and I have an offer by the PTL deadline, and the employer would like me to run, I would. However there are a lot of "if"s in that sentence.... lol | 20:26 |
johnsom | Any questions/comments? | 20:27 |
johnsom | Ok, thanks folks for understanding. | 20:27 |
nmagnezi | johnsom, first, thank you for keep doing this even now. Secondly, I'm really sad that this is the situation but fully get what you meant | 20:28 |
johnsom | #topic Stein feature freeze | 20:28 |
*** openstack changes topic to "Stein feature freeze (Meeting topic: octavia)" | 20:28 | |
johnsom | So, looking at the priority list | 20:28 |
johnsom | #link https://etherpad.openstack.org/p/octavia-priority-reviews | 20:28 |
*** lemko has joined #openstack-lbaas | 20:29 | |
johnsom | I have put a blank line in the list where I think we are going to be able to get things in. | 20:29 |
johnsom | Stuff below the line seems like a long shot. They either fail tests or have other issues to address. | 20:29 |
johnsom | Any comments or concerns about that list? | 20:30 |
colin- | none here | 20:30 |
johnsom | I had really hoped we could get volume backed amps in, but in light of my reduced time, I wasn't able to get into it and fix the bugs. | 20:30 |
johnsom | Again, this is feature freeze. We can still add tempest tests and documentation. We can also continue to work on bug fixes. | 20:31 |
johnsom | The idea here is to stabilize and focus on bug fix/stability for the Stein release. | 20:31 |
xgerman | also FFE | 20:31 |
cgoncalves | I added https://review.openstack.org/#/c/640825/ (octavia-lib), a dependency of https://review.openstack.org/613709 | 20:31 |
johnsom | True, if there was a critical feature, we can go through the FFE process, but that has a pretty high bar and I don't see anything on the horizon that would need/meet that. | 20:32 |
johnsom | cgoncalves yes, good call | 20:32 |
johnsom | I have to say, congratulations team on a pretty nice release for Stein. Though I haven't polished the release notes yet, it's a pretty nice list of new capabilities: | 20:33 |
johnsom | #link https://docs.openstack.org/releasenotes/octavia/unreleased.html | 20:33 |
cgoncalves | a list that is only made possible when folks include release notes in their patches ;-) | 20:34 |
johnsom | Ha, true. I try to make sure patches have them. They really are useful for folks. | 20:35 |
xgerman | +1 | 20:35 |
johnsom | Ok, it sounds like we are all aligned on the Stein features list. | 20:35 |
johnsom | #topic Open Discussion | 20:36 |
*** openstack changes topic to "Open Discussion (Meeting topic: octavia)" | 20:36 | |
johnsom | Other topics this week? | 20:37 |
cgoncalves | again, apologies for not have been successful thus far in fixing rocky grenade job. there are 11 open backport requests | 20:38 |
colin- | have ever considered value in a "please update the whole fleet" style operation against our amphorae? | 20:39 |
cgoncalves | I gave it a try last week (or two). I couldn't reproduce the issue seen in upstream CI | 20:39 |
johnsom | No worries, sometimes these things are hard to file | 20:39 |
johnsom | find | 20:39 |
colin- | adding new HMs to my config over the weekend caused me to wonder | 20:39 |
colin- | what i'm imagining would likely leverage failovers to perform it gracefully or something | 20:40 |
johnsom | cgoncalves After we feature freeze today/tomorrow remind me and I will focus on that for a bit. | 20:40 |
cgoncalves | johnsom, thank you, much appreciated | 20:40 |
johnsom | colin- Short answer is yes. Though there is a longer answer | 20:40 |
johnsom | The use case of adding HMs will be an API call per amp now in Stein, where it now pushes out a new config and adopts it without requiring a failover. | 20:41 |
colin- | i saw that, that's going to be nice | 20:41 |
colin- | it also made me wonder if we ever considered having the amps periodically pull config from a centralized location? | 20:41 |
colin- | maybe when they go to do their heartbeats, for example | 20:42 |
johnsom | We have put "bulk" actions on the back burner and have gone down the path of enabling that via the API and leaving the exercise to the operator and their favor automation tool. This is for a few reasons: | 20:42 |
*** abaindur has joined #openstack-lbaas | 20:42 | |
johnsom | 1. Bulk operations can be dangerous. If the process hasn't been tested well (i.e. the operator loaded a bad custom image), we don't want to be responsible for runway breakage. | 20:43 |
colin- | yeah that would be horrifying, good point | 20:43 |
johnsom | 2. We don't have mechanisms built in to "cancel/abort" these actions after they start. | 20:43 |
johnsom | 3. We don't have a good way to track/monitor success/failure/progress. | 20:44 |
colin- | yeah that is a fairly stateful job | 20:44 |
colin- | ok | 20:44 |
johnsom | 4. We haven't had anyone that had time to go after that problem.... | 20:44 |
johnsom | Mostly #4 | 20:44 |
xgerman | for me #1-3 are also problematic | 20:44 |
xgerman | but I can see us to have a controb flder with common “scripts" | 20:45 |
xgerman | I also know that having systems get their config from an API endpoint is quite modern those days (envoy) | 20:45 |
johnsom | As for amps, pulling configs is something that breaks our trust model. Amps are un-trusted in our model. We try to push from "more trusted" to "less trusted" and never rely on the amp being what it says it is. | 20:45 |
xgerman | yep, that was my next point how to make that secure | 20:46 |
colin- | cool, that's a really succinct way to phrase it ty | 20:46 |
johnsom | So, for example, we don't want a rogue amp asking for the certs and keys from another tenant's load balancer. | 20:46 |
xgerman | but there are a ton of startups working in the zero trust idendity space | 20:47 |
johnsom | So, maybe that would be something to consider in the future, but right now we are in keep it simple mode. | 20:47 |
colin- | understood | 20:48 |
johnsom | We have discussed using something like etcd, consul, etc. but there were a bunch of trade offs and extra deployment overhead. | 20:48 |
xgerman | yeah, and you still have the trust problem | 20:49 |
johnsom | Again, if someone has a use case, need, and willing to work on it, please feel free to post a spec. | 20:49 |
xgerman | yep, happy to review it. There is exciting stuff out there and our CA inside the worker is just a baby step ;-) | 20:49 |
johnsom | Right, I agree. The certs model we put in place is a good start for this. | 20:50 |
colin- | > | 20:50 |
colin- | Adds an administrator API to access per-amphora statistics. | 20:50 |
colin- | connection stats? | 20:50 |
colin- | like data plane | 20:50 |
johnsom | This is actually one of the problems in Trove. One DB instance can shutdown another by sending commands back up to the control plane. (Maybe they have since fixed this) | 20:51 |
johnsom | colin- No, it' exposes the listener traffic stats "per-amphora". | 20:51 |
colin- | ah ok | 20:52 |
johnsom | Just another way to query the data, which happens to help us with testing. | 20:52 |
johnsom | The driver for that was testing active/standby VRRP failover. However cgoncalves has posted an alternative option too. | 20:52 |
colin- | thanks for humoring my wandering attention :) | 20:53 |
johnsom | Since VRRP failover occurs autonomously inside the amphorae it's hard to track which amp is passing traffic at any one time. | 20:53 |
johnsom | Sure, no problem. | 20:53 |
johnsom | Any other topics in the last few minutes today? | 20:54 |
cgoncalves | #lin khttps://review.openstack.org/#/c/584681/ | 20:54 |
cgoncalves | #link https://review.openstack.org/#/c/637073/ | 20:54 |
xgerman | yeah, we have a lot of ideas but no time... | 20:54 |
johnsom | Yeah, it was a lot easier to do things when the active team was 20+ people | 20:54 |
xgerman | :-) | 20:55 |
johnsom | Ok then. Thanks again for all of the hard work for Stein, we are in the home stretch. | 20:56 |
johnsom | Have a great week! | 20:56 |
nmagnezi | o/ | 20:56 |
cgoncalves | let's do it!! :D | 20:56 |
xgerman | o/ | 20:56 |
johnsom | #endmeeting | 20:56 |
*** openstack changes topic to "Discussions for Octavia | Stein priority review list: https://etherpad.openstack.org/p/octavia-priority-reviews" | 20:56 | |
openstack | Meeting ended Wed Mar 6 20:56:36 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 20:56 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/octavia/2019/octavia.2019-03-06-20.00.html | 20:56 |
colin- | ttyl | 20:56 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/octavia/2019/octavia.2019-03-06-20.00.txt | 20:56 |
openstack | Log: http://eavesdrop.openstack.org/meetings/octavia/2019/octavia.2019-03-06-20.00.log.html | 20:56 |
nmagnezi | cgoncalves, so | 20:56 |
nmagnezi | cgoncalves, just looking at https://review.openstack.org/#/c/640825/3..4 | 20:56 |
nmagnezi | cgoncalves, I see also some new additions like redirect_http_code and http_version | 20:57 |
nmagnezi | cgoncalves, related to the tests we spoke about or just another thing you synced between octavia and octavia-lib? | 20:57 |
cgoncalves | nmagnezi, new bits from https://review.openstack.org/#/c/626183/ and https://review.openstack.org/#/c/625007/ | 20:59 |
openstackgerrit | Merged openstack/octavia master: Trivial: Remove unused OCTAVIA_AMP_SUBNET_ID https://review.openstack.org/641178 | 21:00 |
cgoncalves | AFK until tomorrow morning | 21:02 |
*** celebdor has joined #openstack-lbaas | 21:05 | |
*** irclogbot_1 has joined #openstack-lbaas | 21:09 | |
*** irclogbot_1 has quit IRC | 21:28 | |
openstackgerrit | Merged openstack/octavia-lib master: Sync data models and import new constants from Octavia https://review.openstack.org/640825 | 21:29 |
*** celebdor has quit IRC | 21:50 | |
openstackgerrit | Michael Johnson proposed openstack/octavia-dashboard master: Add load balancer flavor support https://review.openstack.org/638365 | 21:56 |
*** celebdor has joined #openstack-lbaas | 21:57 | |
*** henriqueof has quit IRC | 21:57 | |
*** celebdor has quit IRC | 22:02 | |
johnsom | Anyone able to do the final review on the dashboard patch? https://review.openstack.org/#/c/638365/ | 22:10 |
openstackgerrit | Merged openstack/python-octaviaclient master: Add new options to HealthMonitor CLI https://review.openstack.org/626190 | 22:11 |
*** lemko has quit IRC | 22:38 | |
*** rcernin has joined #openstack-lbaas | 22:52 | |
*** abaindur has quit IRC | 23:02 | |
*** abaindur has joined #openstack-lbaas | 23:03 | |
openstackgerrit | Adam Harwell proposed openstack/octavia master: Remove outdated/incorrect certificate advice https://review.openstack.org/641515 | 23:29 |
*** abaindur has quit IRC | 23:42 | |
*** abaindur has joined #openstack-lbaas | 23:44 | |
*** celebdor has joined #openstack-lbaas | 23:46 | |
*** abaindur has quit IRC | 23:50 | |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Updates Octavia to support octavia-lib https://review.openstack.org/613709 | 23:57 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!