*** yamamoto has joined #openstack-lbaas | 00:13 | |
*** yamamoto has quit IRC | 00:17 | |
openstackgerrit | Merged openstack/octavia-dashboard master: Fix auth url for Barbican client https://review.openstack.org/640686 | 00:30 |
---|---|---|
*** abaindur has joined #openstack-lbaas | 00:50 | |
*** celebdor has quit IRC | 01:09 | |
*** cbrumm_ has quit IRC | 01:21 | |
*** cbrumm_ has joined #openstack-lbaas | 01:22 | |
*** PagliaccisCloud has quit IRC | 01:24 | |
*** PagliaccisCloud has joined #openstack-lbaas | 01:27 | |
*** rcernin has quit IRC | 01:31 | |
*** rcernin has joined #openstack-lbaas | 01:32 | |
*** ramishra has joined #openstack-lbaas | 02:20 | |
*** abaindur has quit IRC | 02:21 | |
*** fnaval has quit IRC | 02:30 | |
*** fnaval has joined #openstack-lbaas | 02:39 | |
*** psachin has joined #openstack-lbaas | 02:42 | |
*** yamamoto has joined #openstack-lbaas | 03:00 | |
*** problem_v has quit IRC | 03:20 | |
*** yamamoto has quit IRC | 03:36 | |
*** yamamoto has joined #openstack-lbaas | 03:36 | |
*** strigazi has quit IRC | 04:26 | |
*** brtknr has quit IRC | 04:26 | |
*** bcafarel has quit IRC | 04:26 | |
*** kklimonda_ has quit IRC | 04:26 | |
openstackgerrit | Merged openstack/octavia-dashboard master: Add load balancer flavor support https://review.openstack.org/638365 | 04:32 |
*** strigazi has joined #openstack-lbaas | 04:53 | |
*** kklimonda_ has joined #openstack-lbaas | 04:53 | |
*** brtknr has joined #openstack-lbaas | 04:53 | |
*** bcafarel has joined #openstack-lbaas | 04:53 | |
*** PagliaccisCloud has quit IRC | 04:56 | |
*** rcernin has quit IRC | 04:56 | |
*** mjblack has quit IRC | 04:56 | |
*** PagliaccisCloud has joined #openstack-lbaas | 04:56 | |
*** mjblack has joined #openstack-lbaas | 04:58 | |
*** rcernin has joined #openstack-lbaas | 05:02 | |
openstackgerrit | Merged openstack/octavia master: Remove outdated/incorrect certificate advice https://review.openstack.org/641515 | 05:25 |
*** lemko has joined #openstack-lbaas | 05:35 | |
*** yamamoto has quit IRC | 05:43 | |
*** yamamoto has joined #openstack-lbaas | 05:48 | |
*** yboaron_ has joined #openstack-lbaas | 06:04 | |
*** gcheresh_ has joined #openstack-lbaas | 06:08 | |
*** ivve has joined #openstack-lbaas | 06:49 | |
*** lxkong has quit IRC | 06:52 | |
*** mkuf has quit IRC | 06:54 | |
*** mkuf has joined #openstack-lbaas | 06:57 | |
*** ataraday has quit IRC | 07:13 | |
*** ccamposr has joined #openstack-lbaas | 07:14 | |
*** ataraday has joined #openstack-lbaas | 07:18 | |
openstackgerrit | Frode Nordahl proposed openstack/octavia master: Fix diskimage-create tox, add ``build`` and ``test`` targets https://review.openstack.org/632948 | 07:21 |
*** lxkong has joined #openstack-lbaas | 07:21 | |
*** ataraday_ has quit IRC | 07:25 | |
*** pcaruana has joined #openstack-lbaas | 07:25 | |
openstackgerrit | Frode Nordahl proposed openstack/octavia master: Fix diskimage-create tox, add ``build`` and ``test`` targets https://review.openstack.org/632948 | 07:27 |
*** rcernin has quit IRC | 07:27 | |
openstackgerrit | Carlos Goncalves proposed openstack/octavia-dashboard stable/rocky: Fix auth url for Barbican client https://review.openstack.org/641577 | 07:31 |
openstackgerrit | Carlos Goncalves proposed openstack/octavia-dashboard stable/queens: Fix auth url for Barbican client https://review.openstack.org/641578 | 07:31 |
*** lemko has quit IRC | 07:45 | |
*** celebdor has joined #openstack-lbaas | 08:12 | |
*** gthiemonge has joined #openstack-lbaas | 08:52 | |
*** yboaron_ has quit IRC | 09:52 | |
*** salmankhan has joined #openstack-lbaas | 10:17 | |
*** sapd1 has joined #openstack-lbaas | 10:30 | |
*** yboaron_ has joined #openstack-lbaas | 10:43 | |
*** yamamoto has quit IRC | 10:53 | |
*** yamamoto has joined #openstack-lbaas | 11:33 | |
*** yamamoto has quit IRC | 11:35 | |
*** yamamoto has joined #openstack-lbaas | 11:35 | |
*** yamamoto has quit IRC | 11:42 | |
*** yamamoto has joined #openstack-lbaas | 11:43 | |
*** yamamoto has quit IRC | 11:43 | |
*** yamamoto has joined #openstack-lbaas | 11:44 | |
*** yamamoto has quit IRC | 11:48 | |
*** sapd1 has quit IRC | 11:55 | |
*** sapd1 has joined #openstack-lbaas | 12:08 | |
*** henriqueof has joined #openstack-lbaas | 12:21 | |
*** sapd1 has quit IRC | 12:36 | |
*** yamamoto has joined #openstack-lbaas | 12:38 | |
*** yamamoto has quit IRC | 12:47 | |
*** celebdor has quit IRC | 13:23 | |
*** yamamoto has joined #openstack-lbaas | 13:29 | |
openstackgerrit | Carlos Goncalves proposed openstack/octavia master: Updates Octavia to support octavia-lib https://review.openstack.org/613709 | 13:33 |
*** celebdor has joined #openstack-lbaas | 13:35 | |
mnaser | xgerman: thanks <3 | 13:35 |
openstackgerrit | Carlos Goncalves proposed openstack/octavia master: Updates Octavia to support octavia-lib https://review.openstack.org/613709 | 13:41 |
*** sapd1 has joined #openstack-lbaas | 13:54 | |
openstackgerrit | Carlos Goncalves proposed openstack/octavia-tempest-plugin master: Fix barbican service_available check https://review.openstack.org/639083 | 13:54 |
*** psachin has quit IRC | 14:24 | |
*** sapd1 has quit IRC | 14:51 | |
*** luksky has joined #openstack-lbaas | 14:57 | |
openstackgerrit | Merged openstack/octavia-tempest-plugin master: Add octavia-lib to required projects https://review.openstack.org/641180 | 15:15 |
*** fnaval has quit IRC | 15:16 | |
rm_work | looks like Starbucks is finally jumping on the cloud bandwagon :D https://usercontent.irccloud-cdn.com/file/UQOp2E9h/155197220751973913905446019447.jpg | 15:24 |
larsks | rm_work: I was expecting it to say "kubernetes" at the bottom or something instead of "espresso". | 15:25 |
*** gcheresh_ has quit IRC | 15:30 | |
*** fnaval has joined #openstack-lbaas | 15:30 | |
johnsom | We’ve noticed this glass is too full, let me kill your espresso and move it to another glass..... | 15:45 |
xgerman | Let me fix that for them “Cloud FUNCTION machiato" | 15:48 |
cgoncalves | only place I found serving espresso in JFK T5 was Starbucks. I can't recommend | 15:50 |
xgerman | You have an idea how espresso tasted before Starbucks? | 15:51 |
Baggypants12000 | nicer? | 15:51 |
cgoncalves | phrasing that way gives the impression Starbucks is the only place now | 15:51 |
xgerman | Thanks to Starbucks proving there is a market for “good” coffeee we now have good coffee | 15:52 |
mugsie | xgerman: in EU we always had good coffee :P | 15:53 |
xgerman | Yeah, I lived a year in Italy. I know my coffee… but what you have to put up with in US... | 15:54 |
Baggypants12000 | I went to Italy a few times, I don't think they like coffee, otherwise they woud use normal size cups. | 15:54 |
*** luksky has quit IRC | 16:32 | |
*** ivve has quit IRC | 16:33 | |
*** ramishra has quit IRC | 16:35 | |
johnsom | I'm on a Stumptown kick now. | 16:37 |
cgoncalves | I had to google that up | 16:42 |
*** yamamoto has quit IRC | 16:44 | |
johnsom | It's a Portland roaster. | 16:46 |
*** yamamoto has joined #openstack-lbaas | 16:49 | |
xgerman | yeah, they are very good -- | 16:50 |
*** yboaron_ has quit IRC | 16:52 | |
*** gthiemonge has quit IRC | 17:03 | |
*** celebdor has quit IRC | 17:08 | |
*** roukoswarf has joined #openstack-lbaas | 17:18 | |
roukoswarf | if i create an octavia LB on a shared network, i cant ever un-share that network without deleting all ports and the subnet on that network, how do i unshare a network? just says its connected to multiple tenants | 17:19 |
johnsom | roukoswarf I think that is a limitation of neutron and not related to Octavia. I think that if there is any port on the network they have restrictions on what they let you do. It might be best to ask in #openstack-neutron if there is a way to unshare a network with ports on it. | 17:21 |
roukoswarf | i deleted all the ports, and it still failed till i removed the subnet | 17:21 |
roukoswarf | how are ips given to the admin project to spin up amphoras? i figure that would be the problem | 17:22 |
johnsom | Yeah, that seems odd. I would have expected an un-share to work with an in-use network, but.... | 17:22 |
johnsom | neutron assigns them to us | 17:22 |
roukoswarf | yeah... whatever that process is doing, its tripping over itself | 17:22 |
roukoswarf | need to delete the entire subnet before i can unshare. | 17:23 |
johnsom | Yeah, we don't do anything special with neutron. We just use the APIs like an end user to create ports on neutron networks. | 17:23 |
Baggypants12000 | What do people like use to manage the certificates for octavia? | 17:26 |
johnsom | For the internal use certificates, most folks setup a self-signed CA using the instructions here: https://docs.openstack.org/octavia/latest/admin/guides/certificates.html | 17:26 |
Baggypants12000 | or has everyone set up with a one shot openssl cert authority setup and a calendar reminder to renew the cert in 2030? | 17:27 |
johnsom | For tenant certificates used for TLS offload, we use barbican or castellan. | 17:27 |
Baggypants12000 | johnsom: that seems a bit... agricultural. | 17:28 |
johnsom | Pretty much, yes. The cets issued to the amphora can of course have much lower expiration as the controller housekeeping will rotate them for you. | 17:28 |
roukoswarf | can amporas be used for ssl termination? | 17:28 |
xgerman | yes | 17:28 |
johnsom | Yes | 17:28 |
johnsom | As of Stein we will do backend re-encryption as well | 17:28 |
johnsom | Also in Stein, TLS client authentication for TLS termination | 17:29 |
roukoswarf | docs where? i only end up getting stuff for legacy lbaas | 17:29 |
xgerman | Baggypants12000: I was thinking integrating the certs we use to commuicate internally with Vault — but too little time. We use to have anchor (which did a similar thing) but then whittered | 17:29 |
johnsom | roukoswarf The official docs are here: https://docs.openstack.org/octavia/latest/ | 17:29 |
Baggypants12000 | whittered? oh you mean talked inanely? | 17:30 |
johnsom | Anchor project died and is no longer an official OpenStack project. | 17:30 |
roukoswarf | johnsom: i dont see any docs there that show how to add an ssl cert to a listener? | 17:31 |
xgerman | yeah, tried to be more prosaic | 17:31 |
Baggypants12000 | we're finally getting rid of vpnaas on our stack this month, | 17:31 |
johnsom | roukoswarf https://docs.openstack.org/octavia/latest/user/guides/basic-cookbook.html#deploy-a-tls-terminated-https-load-balancer | 17:31 |
johnsom | It's been a feature since Mitaka, maybe earlier | 17:31 |
Baggypants12000 | xgerman: no worries :) | 17:31 |
roukoswarf | mm, in a cookbook page, didnt appear when searching, or im bad at searching. | 17:32 |
johnsom | Baggypants12000 Why are you getting rid of VPNaaS? Just curious | 17:32 |
*** rpittau is now known as rpittau|afk | 17:36 | |
*** ivve has joined #openstack-lbaas | 17:41 | |
johnsom | I assume VPNaaS isn't still limited to PSK... That would be, sad | 17:41 |
*** luksky has joined #openstack-lbaas | 17:47 | |
*** irclogbot_1 has joined #openstack-lbaas | 18:03 | |
*** salmankhan has quit IRC | 18:06 | |
openstackgerrit | Merged openstack/octavia-tempest-plugin master: Fix barbican service_available check https://review.openstack.org/639083 | 18:09 |
*** psachin has joined #openstack-lbaas | 18:23 | |
*** ccamposr has quit IRC | 18:43 | |
*** pcaruana has quit IRC | 18:46 | |
*** pcaruana has joined #openstack-lbaas | 19:05 | |
*** pcaruana has quit IRC | 19:33 | |
*** ivve has quit IRC | 20:08 | |
*** brtknr has quit IRC | 20:10 | |
*** brtknr has joined #openstack-lbaas | 20:15 | |
*** psachin has quit IRC | 20:17 | |
*** abaindur has joined #openstack-lbaas | 20:20 | |
*** abaindur has quit IRC | 20:22 | |
*** abaindur has joined #openstack-lbaas | 20:22 | |
*** abaindur has quit IRC | 20:33 | |
lxkong | johnsom: hi, i have a question regarding to the health monitor. When the health monitor detects there is a member unhealthy, does it send some notification outside? So something else who receieves the nofication could do something repair job for the member, e.g. nova rebuild | 22:28 |
johnsom | It does not today. We talked about this at the last PTG and I think work started on that, but is not done. | 22:30 |
lxkong | johnsom: any link pleae? | 22:32 |
lxkong | story? etherpad? | 22:32 |
johnsom | This stuff is in a few different locations, give me a minute | 22:33 |
johnsom | https://etherpad.openstack.org/p/octavia-stein-ptg Line 268 | 22:33 |
johnsom | Yikes, storyboard is slow now | 22:37 |
johnsom | https://storyboard.openstack.org/#!/story/2003782 | 22:37 |
lxkong | johnsom: thanks, i'll take a look | 22:39 |
johnsom | There is a patch too I'm looking for, but not seeing | 22:39 |
johnsom | https://review.openstack.org/615382 | 22:40 |
lxkong | nice, ta | 22:40 |
johnsom | There is eventing in the code now for sync with neutron, but it needs to be ripped out as soon as neutron-lbaas is retired later this year. General events need a better design | 22:41 |
*** rcernin has joined #openstack-lbaas | 22:41 | |
xgerman | there was some self healing project in Denver — forgot the name | 22:42 |
xgerman | they were driving part of that | 22:42 |
johnsom | Yeah, I pointed to the notes from the PTG chat. | 22:42 |
xgerman | sweet | 22:42 |
johnsom | I think we should have a spec for this as it can get messy in the code and there are multiple groups looking for different kinds of event.s | 22:43 |
johnsom | Ah, here is the other story: https://storyboard.openstack.org/#!/story/2003773 | 22:44 |
johnsom | lxkong https://storyboard.openstack.org/#!/story/2003773 might be the one you were looking for | 22:45 |
*** sapd1 has joined #openstack-lbaas | 22:51 | |
*** luksky has quit IRC | 23:05 | |
*** abaindur has joined #openstack-lbaas | 23:11 | |
openstackgerrit | Carlos Goncalves proposed openstack/octavia master: Add listener and pool protocol validation https://review.openstack.org/594040 | 23:17 |
*** fnaval has quit IRC | 23:49 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!