Thursday, 2019-10-03

*** ianychoi has quit IRC00:12
*** ianychoi has joined #openstack-lbaas00:15
*** goldyfruit_ has joined #openstack-lbaas00:23
*** ccamposr has quit IRC00:26
*** ianychoi has quit IRC00:32
*** ianychoi has joined #openstack-lbaas00:48
*** hongbin has joined #openstack-lbaas01:01
*** salmankhan has joined #openstack-lbaas01:05
*** salmankhan has quit IRC01:21
*** salmankhan has joined #openstack-lbaas01:41
*** yamamoto has quit IRC02:22
openstackgerritMerged openstack/octavia-tempest-plugin master: Add a test job for cinder volume backed amps  https://review.opendev.org/63829302:25
*** yamamoto has joined #openstack-lbaas02:29
*** salmankhan has quit IRC02:32
*** salmankhan has joined #openstack-lbaas02:35
*** hongbin has quit IRC02:51
*** salmankhan has quit IRC02:52
*** gcheresh has joined #openstack-lbaas03:47
*** gcheresh has quit IRC03:56
*** ajay33 has joined #openstack-lbaas04:14
*** sapd1_x has joined #openstack-lbaas04:20
*** rcernin has quit IRC04:29
*** rcernin has joined #openstack-lbaas04:32
*** gcheresh has joined #openstack-lbaas04:40
*** AlexStaf has joined #openstack-lbaas04:41
*** eandersson has joined #openstack-lbaas04:48
*** gcheresh has quit IRC04:49
*** sapd1_x has quit IRC05:06
*** gcheresh has joined #openstack-lbaas05:21
rm_workcolin-: hmmmmmmm we SHOULD just *try* best effort to remove our ACLs/Consumer05:40
rm_workand if not, then continue05:40
rm_workbuuuuut we MIGHT fail in that way, yes05:40
rm_workwhich would be hopefully a pretty quick fix and backportable05:40
rm_workI wonder if you could update the Listener to use a different secret, THEN delete it :D05:41
rm_workanyway, let me check really quick05:41
rm_workuhhh so i honestly can't find where we call unset_acls or delete_cert anymore :/05:47
rm_workI think maybe we just... don't?05:48
rm_workbecause the new method uses Secrets and they don't have Consumers yet (it's WIP) which means we can't tell if other LBs are using the same secret, so we can't safely delete the ACLs we added... which I think I was upset about a little bit, but is kinda unavoidable at the moment, and just means we leave extra ACLs on the Secret forever -- though the user can remove them manually in Barbican05:49
rm_workand there's no Consumers to delete anymore either...05:49
rm_worksoooo yeah, it should be impossible for a DELETE action to get stuck on a missing Barbican cert, because we only check them on POST/PUT05:50
*** gcheresh has quit IRC05:54
*** ianychoi has quit IRC06:20
*** ianychoi has joined #openstack-lbaas06:23
*** gcheresh has joined #openstack-lbaas06:28
*** ianychoi has quit IRC06:29
*** ianychoi has joined #openstack-lbaas06:31
f0orm_work: got a link for the gentoo amphora patch? I could have a crack at it, always nice seeing gentoo in production ;)06:40
*** yamamoto has quit IRC06:47
*** yamamoto has joined #openstack-lbaas06:51
*** maciejjozefczyk has joined #openstack-lbaas07:04
*** salmankhan has joined #openstack-lbaas07:04
*** rcernin has quit IRC07:06
rm_workI'll find it... It's going to be severely outdated now though.07:11
rm_workAll I really needed to do was finish the networking driver class, but I don't know how networking setup works in gentoo, lol07:11
*** tesseract has joined #openstack-lbaas07:12
rm_workf0o: https://review.opendev.org/#/c/518986/07:12
rm_workI could try to rebase it tomorrow maybe07:13
f0ogentoo is very flexible when it comes to that, for this setup I'd suggest going full systemd route with systemd-networkd, systemd-resolved, systemd-timesyncd - This is not popular opinion because OpenRC is quite awesome, But for keeping things small, simple (less (dynamic-)configs, portable, ... I'd opt for systemd07:13
rm_workIt also relied on a bunch of musl libc stuff promethianfire was working on07:14
f0oyou can make networkd simply request dhcp on all en* interfaces (or e* to also catch eth*)07:14
openstackgerritMaciej Józefczyk proposed openstack/octavia-tempest-plugin master: Specify used algorithm for tests  https://review.opendev.org/67226407:14
rm_workYeah we probably don't want to do that T_T07:14
f0oSo you'd want to run static IPs instead of neutron-dhcp?07:15
rm_workNeed to be consistent with the way we do this in the other drivers, for many reasons07:15
rm_workBut yeah, no dhcp07:15
rm_workOur configs are very specifically generated07:15
f0oah ok, that's fair enough. Cloud-Init can configure networkd based on the metadata/configdrives07:15
rm_workThe network config I'm talking about it post-boot07:15
f0oaah07:15
rm_workIt's our vip-plug and member-plug stage07:16
f0osee I'm very new to octavia (hell, i didnt even finish deploying it yet) but I can help with all Gentoo related stuff given the big picture how things are working with eachother.07:16
*** luksky has joined #openstack-lbaas07:16
rm_workYeah this is ... A bit complex07:16
rm_workLook at osutil07:17
rm_workThere's drivers for Ubuntu and Redhat07:17
rm_workAnd they use templates we define elsewhere07:17
rm_workIt's a bit ... Confusing07:17
f0oHowever; it seems that with this setup we will end up in a situation like CoreOS - minimal just enough OS to do lbaas things. At that point it might be a bit overkill to go Stock-Gentoo route and it could be more feasible to let portage create a custom OS based on Gentoo but not being Gentoo (like CoreOS really)07:17
rm_workBut if you want to take a crack at it, one of us can probably help you07:17
f0owill have a look07:17
*** salmankhan has quit IRC07:17
rm_workYeah ideally we want the most minimal possible -- that's one of the reasons I was looking into gentoo07:18
rm_workAlpine, CoreOS, etc would be ideal07:18
f0oThen you really just want portage and not gentoo itself07:18
rm_workBut none are supported by DIB07:18
rm_workAnd I don't know how to write the DIB elements to bootstrap one of those :(07:19
f0oCoreOS should be rather simple to build to be honest. I dont know how much we need to rely on DIB. If we can supply the right ignition config for CoreOS we can install all required parts and feed configs with ease07:19
rm_workWe need to use DIB for consistency07:19
rm_workAll of the existing elements will magically just plug in and work if we can get the base os element set up07:20
f0oI dont like the term magically haha07:20
rm_workWe only want to commit to maintaining a single build system07:20
f0oI understand, that's reasonable07:20
rm_workTake a look at DIB and see how the element system works07:21
rm_workSpecifically things like pkg-map07:21
rm_workPossibly talk to ianw or promethianfire07:21
rm_workNeither are in this channel, but probably they're in #openstack-dib07:22
f0owill do07:23
rm_workRight now I'm more interested in getting Debian building more officially07:24
maciejjozefczykrm_work, cgoncalves hey! I would like to talk about this review: https://review.opendev.org/#/c/672264/8. Thank you for recent reviews. Unfornutelly I cannot check there if the number of responses per member while using SOURCE_IP_PORT algoritm is always the same or not. The algorithm is hash-based. So if there is no hash the connection goes to randomly selected node. So sometimes the number of connection per node could be equal,07:25
maciejjozefczyksometimes not. So I need to delete this check.07:25
rm_workWhich also requires that we get a Debian base element that uses the officially released cloud image from the Debian mirrors as a base rather than debootstrap07:25
rm_workWhich is on my loooong list of random stuff I need to do when I get around to it (none of which are directly related to my employer's priorities, lol)07:27
rm_workmaciejjozefczyk: yeah I kinda get it07:27
rm_workMake whatever change you need and I'll re-review.07:27
maciejjozefczykrm_work, I posted new patch, thanks!07:27
rm_workTrying to think if there's any check at all that would make sense07:27
rm_workBut I need to actually get some sleep for my brain to work at 100%07:28
rm_workAnd not sure that's happening today either lol07:28
*** pcaruana has joined #openstack-lbaas07:28
rm_workStupid morning stuff 😡07:28
maciejjozefczykrm_work, so go sleep :)07:28
rm_workYeah lol07:28
maciejjozefczykrm_work, if your exhausted things are going slower.07:29
rm_workI just wish it was so easy as "go sleep" :D07:29
maciejjozefczyk;)07:29
rm_workI'll give it a shot, but there's a reason I'm currently laying in the dark on my phone on IRC ;)07:29
*** nmagnezi has joined #openstack-lbaas07:43
*** ianychoi has quit IRC07:45
*** yamamoto has quit IRC07:54
*** rpittau|afk is now known as rpittau07:59
*** tkajinam has quit IRC08:00
*** gcheresh has quit IRC08:03
*** gcheresh has joined #openstack-lbaas08:08
*** yamamoto has joined #openstack-lbaas08:13
*** gcheresh has quit IRC08:14
*** gcheresh has joined #openstack-lbaas08:14
*** yamamoto has quit IRC08:17
*** yamamoto has joined #openstack-lbaas08:19
*** ccamposr has joined #openstack-lbaas08:36
*** gcheresh has quit IRC08:37
*** gcheresh has joined #openstack-lbaas08:37
*** yamamoto has quit IRC08:43
*** yamamoto has joined #openstack-lbaas09:08
*** ricolin has quit IRC09:15
*** sapd1_x has joined #openstack-lbaas09:24
openstackgerritMaciej Józefczyk proposed openstack/octavia-tempest-plugin master: Add an option to reuse connections  https://review.opendev.org/67297609:53
openstackgerritMaciej Józefczyk proposed openstack/octavia-tempest-plugin master: Add an option to enable/disable testing flavors  https://review.opendev.org/67613509:53
*** salmankhan has joined #openstack-lbaas10:01
*** yamamoto has quit IRC10:02
*** yamamoto has joined #openstack-lbaas10:05
*** yamamoto has quit IRC10:13
*** yamamoto has joined #openstack-lbaas10:31
*** rcernin has joined #openstack-lbaas10:43
*** luksky has quit IRC11:13
*** rcernin has quit IRC11:34
*** dosaboy has quit IRC11:45
*** sapd1_x has quit IRC11:52
*** dosaboy has joined #openstack-lbaas11:54
*** dosaboy has quit IRC12:03
*** dosaboy has joined #openstack-lbaas12:03
*** yamamoto has quit IRC12:05
*** luksky has joined #openstack-lbaas12:07
*** goldyfruit_ has quit IRC12:19
*** yamamoto has joined #openstack-lbaas12:20
*** yamamoto has quit IRC13:20
*** luksky has quit IRC13:23
*** goldyfruit_ has joined #openstack-lbaas13:23
mlozais there an option to disable HA on the amphorae? If not, is there an option to lengthen the timeout? Just want to avoid split brain situation.13:28
mlozaI found https://docs.openstack.org/octavia/stein/configuration/configref.html#health_manager.heartbeat_timeout13:36
mlozaAny other option do  I need to tweak?13:37
*** gcheresh has quit IRC13:48
*** yamamoto has joined #openstack-lbaas13:51
*** ajay33 has quit IRC13:54
mlozahow do I force delete an amphora instance?14:01
*** yamamoto has quit IRC14:04
*** Vorrtex has joined #openstack-lbaas14:07
*** haleyb has quit IRC14:09
*** haleyb has joined #openstack-lbaas14:11
*** haleyb has quit IRC14:16
*** ricolin has joined #openstack-lbaas14:17
*** luksky has joined #openstack-lbaas14:45
*** goldyfruit_ has quit IRC14:49
openstackgerritMerged openstack/octavia-dashboard master: Imported Translations from Zanata  https://review.opendev.org/68500414:53
*** goldyfruit_ has joined #openstack-lbaas14:57
*** maciejjozefczyk has quit IRC15:09
*** ivve has joined #openstack-lbaas15:20
colin-"rm_work> soooo yeah, it should be impossible for a DELETE action to get stuck on a missing Barbican cert, because we only check them on POST/PUT" and yet.... :)15:23
*** Vorrtex has quit IRC15:23
colin-do i go into the db again and do an update on this resource to try an null its secret ref?15:23
colin-cause the api is refusing my delete15:23
*** goldyfruit_ has quit IRC15:25
*** goldyfruit_ has joined #openstack-lbaas15:28
colin-captured this in case it helps https://gist.githubusercontent.com/itsc0lin/b7b090f0b850bf41e6880515311ddc7c/raw/3cdb3aa62fcae04bbb2b91cfcbf2b0366fbdc8a8/gistfile1.txt15:35
colin-couldn't load paste.openstack15:35
*** tesseract has quit IRC15:36
*** ivve has quit IRC15:38
cgoncalvesoops, I can see that happening looking at the code15:38
cgoncalvesmaybe until it gets fixed, you could try to delete the offending listener first and then re-try the LB cascade delete15:39
colin-oh good idea15:40
colin-hah, no that is the flow with the error apparently15:41
cgoncalves;(15:41
colin-it returned the same 500 on the listener delete, complaining about the "container is in another castle." still. oh well15:41
*** luksky has quit IRC15:52
*** ccamposr has quit IRC16:20
*** ccamposr has joined #openstack-lbaas16:22
*** goldyfruit___ has joined #openstack-lbaas16:24
*** goldyfruit_ has quit IRC16:27
*** AustinR has quit IRC16:27
*** rpittau is now known as rpittau|afk16:27
*** AustinR has joined #openstack-lbaas16:27
*** salmankhan has quit IRC16:35
*** ccamposr has quit IRC16:39
*** maciejjozefczyk has joined #openstack-lbaas16:41
*** luksky has joined #openstack-lbaas16:42
*** maciejjozefczyk has quit IRC16:53
rm_workcgoncalves: wait where? how? what?17:04
rm_workI couldn't find any trace of barbican reaching out anywhere17:04
colin-https://github.com/openstack/octavia/blob/master/octavia/api/drivers/utils.py#L205 https://github.com/openstack/octavia/blob/master/octavia/common/tls_utils/cert_parser.py#L36117:06
colin-i think?17:07
*** goldyfruit___ has quit IRC17:08
colin-update listener set tls_certificate_id="" where id="durr"17:08
colin-that allowed me to delete the LB through the API17:08
rm_workOH FFFFF17:09
rm_workintroduced in the provider translators17:09
rm_workwe should skip that on a delete17:10
rm_workor rather, do "different logic" on a delete17:10
colin-yea17:11
*** openstackgerrit has quit IRC17:21
*** ivve has joined #openstack-lbaas17:33
*** ricolin has quit IRC17:35
f0oHrm I'm having a hard time configuring octavia correctly, the install guide isn't really straightforward... https://docs.openstack.org/octavia/latest/contributor/guides/dev-quick-start.html does mention which config directives are required but the documentation about them arent very conclusive. I've no clue what to put in controller_ip_port_list for instance... looking at18:06
f0ohttps://www.hidekazuna.org/?p=976 only causes more questions...18:06
f0ois there any other install documentation that doesnt rely on devstack and is more suitable for production evironments where the API server is detached from Health-Manager, Worker and Housekeeper?18:07
*** goldyfruit___ has joined #openstack-lbaas18:16
*** schaney has joined #openstack-lbaas18:17
f0o'oslo_messaging.exceptions.InvalidTarget: A server's target must have topic and server names' - uhm... no clue where to start even18:29
f0oWhen I attempt to create a loadbalancer via the dashboard it instantly logs me out, the user I try with has the load-balancer_member role18:47
f0oideas?18:47
*** gcheresh has joined #openstack-lbaas18:53
*** haleyb has joined #openstack-lbaas19:01
*** henriqueof1 has joined #openstack-lbaas19:04
*** henriqueof has quit IRC19:07
f0oworks fine via CLI19:10
*** AustinR has quit IRC19:27
*** AustinR has joined #openstack-lbaas19:28
*** yamamoto has joined #openstack-lbaas19:30
*** yamamoto has quit IRC19:35
*** gcheresh has quit IRC19:48
*** gmann is now known as gmann_afk19:52
*** pcaruana has quit IRC20:18
rm_workf0o: we generally point people to our devstack plugin, as it configures a totally working thing and it should be easy-ish to see what it configures21:04
rm_workalso, the example config has everything in the appropriate sections and default/example settings21:04
rm_workhttps://github.com/openstack/octavia/blob/master/devstack/settings / https://github.com/openstack/octavia/blob/master/devstack/plugin.sh#L247-L38821:06
rm_workand: https://github.com/openstack/octavia/blob/master/etc/octavia.conf21:07
rm_worklike https://github.com/openstack/octavia/blob/master/etc/octavia.conf#L27921:07
*** goldyfruit___ has quit IRC21:15
*** goldyfruit has joined #openstack-lbaas21:15
*** rcernin has joined #openstack-lbaas22:08
*** henriqueof1 has quit IRC22:58
*** goldyfruit_ has joined #openstack-lbaas23:00
*** tkajinam has joined #openstack-lbaas23:01
*** goldyfruit has quit IRC23:02
*** luksky has quit IRC23:14
*** ivve has quit IRC23:15
*** goldyfruit_ has quit IRC23:56

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!