*** ianychoi has quit IRC | 00:12 | |
*** ianychoi has joined #openstack-lbaas | 00:15 | |
*** goldyfruit_ has joined #openstack-lbaas | 00:23 | |
*** ccamposr has quit IRC | 00:26 | |
*** ianychoi has quit IRC | 00:32 | |
*** ianychoi has joined #openstack-lbaas | 00:48 | |
*** hongbin has joined #openstack-lbaas | 01:01 | |
*** salmankhan has joined #openstack-lbaas | 01:05 | |
*** salmankhan has quit IRC | 01:21 | |
*** salmankhan has joined #openstack-lbaas | 01:41 | |
*** yamamoto has quit IRC | 02:22 | |
openstackgerrit | Merged openstack/octavia-tempest-plugin master: Add a test job for cinder volume backed amps https://review.opendev.org/638293 | 02:25 |
---|---|---|
*** yamamoto has joined #openstack-lbaas | 02:29 | |
*** salmankhan has quit IRC | 02:32 | |
*** salmankhan has joined #openstack-lbaas | 02:35 | |
*** hongbin has quit IRC | 02:51 | |
*** salmankhan has quit IRC | 02:52 | |
*** gcheresh has joined #openstack-lbaas | 03:47 | |
*** gcheresh has quit IRC | 03:56 | |
*** ajay33 has joined #openstack-lbaas | 04:14 | |
*** sapd1_x has joined #openstack-lbaas | 04:20 | |
*** rcernin has quit IRC | 04:29 | |
*** rcernin has joined #openstack-lbaas | 04:32 | |
*** gcheresh has joined #openstack-lbaas | 04:40 | |
*** AlexStaf has joined #openstack-lbaas | 04:41 | |
*** eandersson has joined #openstack-lbaas | 04:48 | |
*** gcheresh has quit IRC | 04:49 | |
*** sapd1_x has quit IRC | 05:06 | |
*** gcheresh has joined #openstack-lbaas | 05:21 | |
rm_work | colin-: hmmmmmmm we SHOULD just *try* best effort to remove our ACLs/Consumer | 05:40 |
rm_work | and if not, then continue | 05:40 |
rm_work | buuuuut we MIGHT fail in that way, yes | 05:40 |
rm_work | which would be hopefully a pretty quick fix and backportable | 05:40 |
rm_work | I wonder if you could update the Listener to use a different secret, THEN delete it :D | 05:41 |
rm_work | anyway, let me check really quick | 05:41 |
rm_work | uhhh so i honestly can't find where we call unset_acls or delete_cert anymore :/ | 05:47 |
rm_work | I think maybe we just... don't? | 05:48 |
rm_work | because the new method uses Secrets and they don't have Consumers yet (it's WIP) which means we can't tell if other LBs are using the same secret, so we can't safely delete the ACLs we added... which I think I was upset about a little bit, but is kinda unavoidable at the moment, and just means we leave extra ACLs on the Secret forever -- though the user can remove them manually in Barbican | 05:49 |
rm_work | and there's no Consumers to delete anymore either... | 05:49 |
rm_work | soooo yeah, it should be impossible for a DELETE action to get stuck on a missing Barbican cert, because we only check them on POST/PUT | 05:50 |
*** gcheresh has quit IRC | 05:54 | |
*** ianychoi has quit IRC | 06:20 | |
*** ianychoi has joined #openstack-lbaas | 06:23 | |
*** gcheresh has joined #openstack-lbaas | 06:28 | |
*** ianychoi has quit IRC | 06:29 | |
*** ianychoi has joined #openstack-lbaas | 06:31 | |
f0o | rm_work: got a link for the gentoo amphora patch? I could have a crack at it, always nice seeing gentoo in production ;) | 06:40 |
*** yamamoto has quit IRC | 06:47 | |
*** yamamoto has joined #openstack-lbaas | 06:51 | |
*** maciejjozefczyk has joined #openstack-lbaas | 07:04 | |
*** salmankhan has joined #openstack-lbaas | 07:04 | |
*** rcernin has quit IRC | 07:06 | |
rm_work | I'll find it... It's going to be severely outdated now though. | 07:11 |
rm_work | All I really needed to do was finish the networking driver class, but I don't know how networking setup works in gentoo, lol | 07:11 |
*** tesseract has joined #openstack-lbaas | 07:12 | |
rm_work | f0o: https://review.opendev.org/#/c/518986/ | 07:12 |
rm_work | I could try to rebase it tomorrow maybe | 07:13 |
f0o | gentoo is very flexible when it comes to that, for this setup I'd suggest going full systemd route with systemd-networkd, systemd-resolved, systemd-timesyncd - This is not popular opinion because OpenRC is quite awesome, But for keeping things small, simple (less (dynamic-)configs, portable, ... I'd opt for systemd | 07:13 |
rm_work | It also relied on a bunch of musl libc stuff promethianfire was working on | 07:14 |
f0o | you can make networkd simply request dhcp on all en* interfaces (or e* to also catch eth*) | 07:14 |
openstackgerrit | Maciej Józefczyk proposed openstack/octavia-tempest-plugin master: Specify used algorithm for tests https://review.opendev.org/672264 | 07:14 |
rm_work | Yeah we probably don't want to do that T_T | 07:14 |
f0o | So you'd want to run static IPs instead of neutron-dhcp? | 07:15 |
rm_work | Need to be consistent with the way we do this in the other drivers, for many reasons | 07:15 |
rm_work | But yeah, no dhcp | 07:15 |
rm_work | Our configs are very specifically generated | 07:15 |
f0o | ah ok, that's fair enough. Cloud-Init can configure networkd based on the metadata/configdrives | 07:15 |
rm_work | The network config I'm talking about it post-boot | 07:15 |
f0o | aah | 07:15 |
rm_work | It's our vip-plug and member-plug stage | 07:16 |
f0o | see I'm very new to octavia (hell, i didnt even finish deploying it yet) but I can help with all Gentoo related stuff given the big picture how things are working with eachother. | 07:16 |
*** luksky has joined #openstack-lbaas | 07:16 | |
rm_work | Yeah this is ... A bit complex | 07:16 |
rm_work | Look at osutil | 07:17 |
rm_work | There's drivers for Ubuntu and Redhat | 07:17 |
rm_work | And they use templates we define elsewhere | 07:17 |
rm_work | It's a bit ... Confusing | 07:17 |
f0o | However; it seems that with this setup we will end up in a situation like CoreOS - minimal just enough OS to do lbaas things. At that point it might be a bit overkill to go Stock-Gentoo route and it could be more feasible to let portage create a custom OS based on Gentoo but not being Gentoo (like CoreOS really) | 07:17 |
rm_work | But if you want to take a crack at it, one of us can probably help you | 07:17 |
f0o | will have a look | 07:17 |
*** salmankhan has quit IRC | 07:17 | |
rm_work | Yeah ideally we want the most minimal possible -- that's one of the reasons I was looking into gentoo | 07:18 |
rm_work | Alpine, CoreOS, etc would be ideal | 07:18 |
f0o | Then you really just want portage and not gentoo itself | 07:18 |
rm_work | But none are supported by DIB | 07:18 |
rm_work | And I don't know how to write the DIB elements to bootstrap one of those :( | 07:19 |
f0o | CoreOS should be rather simple to build to be honest. I dont know how much we need to rely on DIB. If we can supply the right ignition config for CoreOS we can install all required parts and feed configs with ease | 07:19 |
rm_work | We need to use DIB for consistency | 07:19 |
rm_work | All of the existing elements will magically just plug in and work if we can get the base os element set up | 07:20 |
f0o | I dont like the term magically haha | 07:20 |
rm_work | We only want to commit to maintaining a single build system | 07:20 |
f0o | I understand, that's reasonable | 07:20 |
rm_work | Take a look at DIB and see how the element system works | 07:21 |
rm_work | Specifically things like pkg-map | 07:21 |
rm_work | Possibly talk to ianw or promethianfire | 07:21 |
rm_work | Neither are in this channel, but probably they're in #openstack-dib | 07:22 |
f0o | will do | 07:23 |
rm_work | Right now I'm more interested in getting Debian building more officially | 07:24 |
maciejjozefczyk | rm_work, cgoncalves hey! I would like to talk about this review: https://review.opendev.org/#/c/672264/8. Thank you for recent reviews. Unfornutelly I cannot check there if the number of responses per member while using SOURCE_IP_PORT algoritm is always the same or not. The algorithm is hash-based. So if there is no hash the connection goes to randomly selected node. So sometimes the number of connection per node could be equal, | 07:25 |
maciejjozefczyk | sometimes not. So I need to delete this check. | 07:25 |
rm_work | Which also requires that we get a Debian base element that uses the officially released cloud image from the Debian mirrors as a base rather than debootstrap | 07:25 |
rm_work | Which is on my loooong list of random stuff I need to do when I get around to it (none of which are directly related to my employer's priorities, lol) | 07:27 |
rm_work | maciejjozefczyk: yeah I kinda get it | 07:27 |
rm_work | Make whatever change you need and I'll re-review. | 07:27 |
maciejjozefczyk | rm_work, I posted new patch, thanks! | 07:27 |
rm_work | Trying to think if there's any check at all that would make sense | 07:27 |
rm_work | But I need to actually get some sleep for my brain to work at 100% | 07:28 |
rm_work | And not sure that's happening today either lol | 07:28 |
*** pcaruana has joined #openstack-lbaas | 07:28 | |
rm_work | Stupid morning stuff 😡 | 07:28 |
maciejjozefczyk | rm_work, so go sleep :) | 07:28 |
rm_work | Yeah lol | 07:28 |
maciejjozefczyk | rm_work, if your exhausted things are going slower. | 07:29 |
rm_work | I just wish it was so easy as "go sleep" :D | 07:29 |
maciejjozefczyk | ;) | 07:29 |
rm_work | I'll give it a shot, but there's a reason I'm currently laying in the dark on my phone on IRC ;) | 07:29 |
*** nmagnezi has joined #openstack-lbaas | 07:43 | |
*** ianychoi has quit IRC | 07:45 | |
*** yamamoto has quit IRC | 07:54 | |
*** rpittau|afk is now known as rpittau | 07:59 | |
*** tkajinam has quit IRC | 08:00 | |
*** gcheresh has quit IRC | 08:03 | |
*** gcheresh has joined #openstack-lbaas | 08:08 | |
*** yamamoto has joined #openstack-lbaas | 08:13 | |
*** gcheresh has quit IRC | 08:14 | |
*** gcheresh has joined #openstack-lbaas | 08:14 | |
*** yamamoto has quit IRC | 08:17 | |
*** yamamoto has joined #openstack-lbaas | 08:19 | |
*** ccamposr has joined #openstack-lbaas | 08:36 | |
*** gcheresh has quit IRC | 08:37 | |
*** gcheresh has joined #openstack-lbaas | 08:37 | |
*** yamamoto has quit IRC | 08:43 | |
*** yamamoto has joined #openstack-lbaas | 09:08 | |
*** ricolin has quit IRC | 09:15 | |
*** sapd1_x has joined #openstack-lbaas | 09:24 | |
openstackgerrit | Maciej Józefczyk proposed openstack/octavia-tempest-plugin master: Add an option to reuse connections https://review.opendev.org/672976 | 09:53 |
openstackgerrit | Maciej Józefczyk proposed openstack/octavia-tempest-plugin master: Add an option to enable/disable testing flavors https://review.opendev.org/676135 | 09:53 |
*** salmankhan has joined #openstack-lbaas | 10:01 | |
*** yamamoto has quit IRC | 10:02 | |
*** yamamoto has joined #openstack-lbaas | 10:05 | |
*** yamamoto has quit IRC | 10:13 | |
*** yamamoto has joined #openstack-lbaas | 10:31 | |
*** rcernin has joined #openstack-lbaas | 10:43 | |
*** luksky has quit IRC | 11:13 | |
*** rcernin has quit IRC | 11:34 | |
*** dosaboy has quit IRC | 11:45 | |
*** sapd1_x has quit IRC | 11:52 | |
*** dosaboy has joined #openstack-lbaas | 11:54 | |
*** dosaboy has quit IRC | 12:03 | |
*** dosaboy has joined #openstack-lbaas | 12:03 | |
*** yamamoto has quit IRC | 12:05 | |
*** luksky has joined #openstack-lbaas | 12:07 | |
*** goldyfruit_ has quit IRC | 12:19 | |
*** yamamoto has joined #openstack-lbaas | 12:20 | |
*** yamamoto has quit IRC | 13:20 | |
*** luksky has quit IRC | 13:23 | |
*** goldyfruit_ has joined #openstack-lbaas | 13:23 | |
mloza | is there an option to disable HA on the amphorae? If not, is there an option to lengthen the timeout? Just want to avoid split brain situation. | 13:28 |
mloza | I found https://docs.openstack.org/octavia/stein/configuration/configref.html#health_manager.heartbeat_timeout | 13:36 |
mloza | Any other option do I need to tweak? | 13:37 |
*** gcheresh has quit IRC | 13:48 | |
*** yamamoto has joined #openstack-lbaas | 13:51 | |
*** ajay33 has quit IRC | 13:54 | |
mloza | how do I force delete an amphora instance? | 14:01 |
*** yamamoto has quit IRC | 14:04 | |
*** Vorrtex has joined #openstack-lbaas | 14:07 | |
*** haleyb has quit IRC | 14:09 | |
*** haleyb has joined #openstack-lbaas | 14:11 | |
*** haleyb has quit IRC | 14:16 | |
*** ricolin has joined #openstack-lbaas | 14:17 | |
*** luksky has joined #openstack-lbaas | 14:45 | |
*** goldyfruit_ has quit IRC | 14:49 | |
openstackgerrit | Merged openstack/octavia-dashboard master: Imported Translations from Zanata https://review.opendev.org/685004 | 14:53 |
*** goldyfruit_ has joined #openstack-lbaas | 14:57 | |
*** maciejjozefczyk has quit IRC | 15:09 | |
*** ivve has joined #openstack-lbaas | 15:20 | |
colin- | "rm_work> soooo yeah, it should be impossible for a DELETE action to get stuck on a missing Barbican cert, because we only check them on POST/PUT" and yet.... :) | 15:23 |
*** Vorrtex has quit IRC | 15:23 | |
colin- | do i go into the db again and do an update on this resource to try an null its secret ref? | 15:23 |
colin- | cause the api is refusing my delete | 15:23 |
*** goldyfruit_ has quit IRC | 15:25 | |
*** goldyfruit_ has joined #openstack-lbaas | 15:28 | |
colin- | captured this in case it helps https://gist.githubusercontent.com/itsc0lin/b7b090f0b850bf41e6880515311ddc7c/raw/3cdb3aa62fcae04bbb2b91cfcbf2b0366fbdc8a8/gistfile1.txt | 15:35 |
colin- | couldn't load paste.openstack | 15:35 |
*** tesseract has quit IRC | 15:36 | |
*** ivve has quit IRC | 15:38 | |
cgoncalves | oops, I can see that happening looking at the code | 15:38 |
cgoncalves | maybe until it gets fixed, you could try to delete the offending listener first and then re-try the LB cascade delete | 15:39 |
colin- | oh good idea | 15:40 |
colin- | hah, no that is the flow with the error apparently | 15:41 |
cgoncalves | ;( | 15:41 |
colin- | it returned the same 500 on the listener delete, complaining about the "container is in another castle." still. oh well | 15:41 |
*** luksky has quit IRC | 15:52 | |
*** ccamposr has quit IRC | 16:20 | |
*** ccamposr has joined #openstack-lbaas | 16:22 | |
*** goldyfruit___ has joined #openstack-lbaas | 16:24 | |
*** goldyfruit_ has quit IRC | 16:27 | |
*** AustinR has quit IRC | 16:27 | |
*** rpittau is now known as rpittau|afk | 16:27 | |
*** AustinR has joined #openstack-lbaas | 16:27 | |
*** salmankhan has quit IRC | 16:35 | |
*** ccamposr has quit IRC | 16:39 | |
*** maciejjozefczyk has joined #openstack-lbaas | 16:41 | |
*** luksky has joined #openstack-lbaas | 16:42 | |
*** maciejjozefczyk has quit IRC | 16:53 | |
rm_work | cgoncalves: wait where? how? what? | 17:04 |
rm_work | I couldn't find any trace of barbican reaching out anywhere | 17:04 |
colin- | https://github.com/openstack/octavia/blob/master/octavia/api/drivers/utils.py#L205 https://github.com/openstack/octavia/blob/master/octavia/common/tls_utils/cert_parser.py#L361 | 17:06 |
colin- | i think? | 17:07 |
*** goldyfruit___ has quit IRC | 17:08 | |
colin- | update listener set tls_certificate_id="" where id="durr" | 17:08 |
colin- | that allowed me to delete the LB through the API | 17:08 |
rm_work | OH FFFFF | 17:09 |
rm_work | introduced in the provider translators | 17:09 |
rm_work | we should skip that on a delete | 17:10 |
rm_work | or rather, do "different logic" on a delete | 17:10 |
colin- | yea | 17:11 |
*** openstackgerrit has quit IRC | 17:21 | |
*** ivve has joined #openstack-lbaas | 17:33 | |
*** ricolin has quit IRC | 17:35 | |
f0o | Hrm I'm having a hard time configuring octavia correctly, the install guide isn't really straightforward... https://docs.openstack.org/octavia/latest/contributor/guides/dev-quick-start.html does mention which config directives are required but the documentation about them arent very conclusive. I've no clue what to put in controller_ip_port_list for instance... looking at | 18:06 |
f0o | https://www.hidekazuna.org/?p=976 only causes more questions... | 18:06 |
f0o | is there any other install documentation that doesnt rely on devstack and is more suitable for production evironments where the API server is detached from Health-Manager, Worker and Housekeeper? | 18:07 |
*** goldyfruit___ has joined #openstack-lbaas | 18:16 | |
*** schaney has joined #openstack-lbaas | 18:17 | |
f0o | 'oslo_messaging.exceptions.InvalidTarget: A server's target must have topic and server names' - uhm... no clue where to start even | 18:29 |
f0o | When I attempt to create a loadbalancer via the dashboard it instantly logs me out, the user I try with has the load-balancer_member role | 18:47 |
f0o | ideas? | 18:47 |
*** gcheresh has joined #openstack-lbaas | 18:53 | |
*** haleyb has joined #openstack-lbaas | 19:01 | |
*** henriqueof1 has joined #openstack-lbaas | 19:04 | |
*** henriqueof has quit IRC | 19:07 | |
f0o | works fine via CLI | 19:10 |
*** AustinR has quit IRC | 19:27 | |
*** AustinR has joined #openstack-lbaas | 19:28 | |
*** yamamoto has joined #openstack-lbaas | 19:30 | |
*** yamamoto has quit IRC | 19:35 | |
*** gcheresh has quit IRC | 19:48 | |
*** gmann is now known as gmann_afk | 19:52 | |
*** pcaruana has quit IRC | 20:18 | |
rm_work | f0o: we generally point people to our devstack plugin, as it configures a totally working thing and it should be easy-ish to see what it configures | 21:04 |
rm_work | also, the example config has everything in the appropriate sections and default/example settings | 21:04 |
rm_work | https://github.com/openstack/octavia/blob/master/devstack/settings / https://github.com/openstack/octavia/blob/master/devstack/plugin.sh#L247-L388 | 21:06 |
rm_work | and: https://github.com/openstack/octavia/blob/master/etc/octavia.conf | 21:07 |
rm_work | like https://github.com/openstack/octavia/blob/master/etc/octavia.conf#L279 | 21:07 |
*** goldyfruit___ has quit IRC | 21:15 | |
*** goldyfruit has joined #openstack-lbaas | 21:15 | |
*** rcernin has joined #openstack-lbaas | 22:08 | |
*** henriqueof1 has quit IRC | 22:58 | |
*** goldyfruit_ has joined #openstack-lbaas | 23:00 | |
*** tkajinam has joined #openstack-lbaas | 23:01 | |
*** goldyfruit has quit IRC | 23:02 | |
*** luksky has quit IRC | 23:14 | |
*** ivve has quit IRC | 23:15 | |
*** goldyfruit_ has quit IRC | 23:56 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!