| *** ramishra has quit IRC | 00:14 | |
| *** ivve has quit IRC | 00:25 | |
| *** ccamposr__ has joined #openstack-lbaas | 00:51 | |
| *** ccamposr has quit IRC | 00:53 | |
| *** yamamoto has joined #openstack-lbaas | 01:07 | |
| *** tkajinam has joined #openstack-lbaas | 01:52 | |
| *** yamamoto has quit IRC | 01:56 | |
| *** yamamoto_ has joined #openstack-lbaas | 01:56 | |
| *** yamamoto_ has quit IRC | 01:58 | |
| *** yamamoto has joined #openstack-lbaas | 01:58 | |
| *** yamamoto has quit IRC | 01:58 | |
| *** yamamoto has joined #openstack-lbaas | 01:58 | |
| *** yamamoto has quit IRC | 02:12 | |
| *** yamamoto has joined #openstack-lbaas | 02:13 | |
| *** yamamoto has quit IRC | 02:25 | |
| *** yamamoto has joined #openstack-lbaas | 02:30 | |
| *** lxkong has quit IRC | 02:30 | |
| *** yamamoto has quit IRC | 02:31 | |
| *** yamamoto has joined #openstack-lbaas | 02:36 | |
| *** yamamoto has quit IRC | 02:38 | |
| *** tkajinam has quit IRC | 02:40 | |
| *** ricolin has joined #openstack-lbaas | 02:53 | |
| *** ricolin has quit IRC | 03:35 | |
| *** psachin has joined #openstack-lbaas | 03:38 | |
| *** ricolin has joined #openstack-lbaas | 03:41 | |
| *** ricolin has quit IRC | 03:57 | |
| *** ricolin has joined #openstack-lbaas | 03:57 | |
| *** nmagnezi has quit IRC | 04:04 | |
| *** ricolin has quit IRC | 04:13 | |
| *** ricolin has joined #openstack-lbaas | 05:23 | |
| *** pcaruana has joined #openstack-lbaas | 05:41 | |
| *** ricolin has quit IRC | 05:50 | |
| *** gcheresh_ has joined #openstack-lbaas | 06:22 | |
| *** AlexStaf has quit IRC | 06:48 | |
| *** yamamoto has joined #openstack-lbaas | 07:08 | |
| *** yamamoto has quit IRC | 07:09 | |
| *** yamamoto has joined #openstack-lbaas | 07:10 | |
| *** yamamoto has quit IRC | 07:10 | |
| *** yamamoto has joined #openstack-lbaas | 07:11 | |
| *** yamamoto_ has joined #openstack-lbaas | 07:14 | |
| *** yamamoto has quit IRC | 07:17 | |
| *** ricolin has joined #openstack-lbaas | 07:17 | |
| *** lxkong has joined #openstack-lbaas | 07:19 | |
| *** yamamoto_ has quit IRC | 07:19 | |
| *** gcheresh_ has quit IRC | 07:32 | |
| *** gcheresh_ has joined #openstack-lbaas | 07:38 | |
| *** luksky has joined #openstack-lbaas | 07:39 | |
| *** ricolin_ has joined #openstack-lbaas | 07:45 | |
| *** ricolin has quit IRC | 07:47 | |
| *** yamamoto has joined #openstack-lbaas | 07:47 | |
| *** yamamoto has quit IRC | 07:48 | |
| *** yamamoto has joined #openstack-lbaas | 07:48 | |
| *** yamamoto has quit IRC | 07:49 | |
| *** yamamoto has joined #openstack-lbaas | 07:51 | |
| *** yamamoto has quit IRC | 07:54 | |
| *** yamamoto has joined #openstack-lbaas | 07:55 | |
| *** yamamoto has quit IRC | 07:57 | |
| *** ricolin_ has quit IRC | 08:04 | |
| *** ricolin_ has joined #openstack-lbaas | 08:04 | |
| *** AlexStaf has joined #openstack-lbaas | 08:23 | |
| *** tesseract has joined #openstack-lbaas | 08:24 | |
| *** ccamposr has joined #openstack-lbaas | 08:34 | |
| *** ccamposr__ has quit IRC | 08:37 | |
| *** ricolin_ has quit IRC | 08:37 | |
| openstackgerrit | Ann Taraday proposed openstack/octavia master: Add option to set default ssl ciphers in haproxy https://review.opendev.org/685337 | 09:38 |
|---|---|---|
| *** ccamposr has quit IRC | 10:01 | |
| *** ccamposr has joined #openstack-lbaas | 10:11 | |
| *** lemko has joined #openstack-lbaas | 10:18 | |
| *** gcheresh_ has quit IRC | 10:20 | |
| *** gcheresh has joined #openstack-lbaas | 10:20 | |
| *** CobHead has joined #openstack-lbaas | 10:38 | |
| *** ivve has joined #openstack-lbaas | 10:46 | |
| *** ataraday has joined #openstack-lbaas | 11:46 | |
| ataraday | In case someone is around, I've updated ptg etherpad with taskflow jobboard status - let me know if I need to highlight some other points about it. | 11:49 |
| *** luksky has quit IRC | 12:13 | |
| *** henriqueof has quit IRC | 12:16 | |
| openstackgerrit | Ann Taraday proposed openstack/octavia master: Add option to set default ssl ciphers in haproxy https://review.opendev.org/685337 | 12:25 |
| *** luksky has joined #openstack-lbaas | 13:37 | |
| *** yamamoto has joined #openstack-lbaas | 13:48 | |
| *** yamamoto has quit IRC | 13:52 | |
| *** yamamoto has joined #openstack-lbaas | 13:52 | |
| *** yamamoto has quit IRC | 13:54 | |
| luksky | hi, I have question about octavia-amphora-agent. Does this service is needed ? | 14:04 |
| luksky | Where can I read about it ? | 14:05 |
| *** yamamoto has joined #openstack-lbaas | 14:06 | |
| *** ramishra has joined #openstack-lbaas | 14:07 | |
| *** goldyfruit_ has joined #openstack-lbaas | 14:19 | |
| johnsom | luksky: the Amphora agent runs inside the Amphora service VMs. It is required when you are using the amphora driver. The image creating script will install it for you. No configuration is required inside the image, it is automatic. | 14:31 |
| johnsom | ataraday: thank you, I will take a look. | 14:31 |
| *** goldyfruit___ has joined #openstack-lbaas | 14:34 | |
| *** goldyfruit_ has quit IRC | 14:36 | |
| luksky | johnsom: thank You - I'm asking becouse I see on octavia controller (turned off/disabled) octavia-amphora-agent.service in systemd (on system, which I get to administer) and was wondering WTF | 14:38 |
| *** gcheresh has quit IRC | 14:48 | |
| *** yamamoto has quit IRC | 14:49 | |
| *** ramishra has quit IRC | 14:50 | |
| *** TrevorV has joined #openstack-lbaas | 14:56 | |
| *** yamamoto has joined #openstack-lbaas | 15:26 | |
| *** yamamoto has quit IRC | 15:31 | |
| *** yamamoto has joined #openstack-lbaas | 15:36 | |
| *** yamamoto has quit IRC | 15:41 | |
| *** yamamoto has joined #openstack-lbaas | 15:47 | |
| *** Trevor_V has joined #openstack-lbaas | 16:08 | |
| *** TrevorV has quit IRC | 16:11 | |
| openstackgerrit | Michael Johnson proposed openstack/octavia master: Stop allowing the deletion of an in-use flavor https://review.opendev.org/692427 | 16:21 |
| *** luksky has quit IRC | 16:31 | |
| *** tesseract has quit IRC | 16:50 | |
| *** luksky has joined #openstack-lbaas | 16:57 | |
| *** AlexStaf has quit IRC | 16:59 | |
| generalfuzz | Hi - I'm having trouble setting up Octavia. My issue is that the octavia worker is unable to connect to the amphorae VM. | 17:07 |
| generalfuzz | I've written up details about my environment here: https://ask.openstack.org/en/question/124991/octavia-worker-not-able-to-connect-to-amphora/ | 17:07 |
| johnsom | Ok, are you able to ssh to the amphorae VM over the lb-mgmt-net? | 17:08 |
| generalfuzz | I can ssh into amphorae VM using network namespace | 17:08 |
| johnsom | Give me a minute to read through what you put on ask. | 17:09 |
| generalfuzz | ie "ip netns exec qdhcp-79f55a3b-3bba-4aec-a2a8-5eefaca033d1 ssh cirros@10.16.100.14" | 17:09 |
| johnsom | Yeah, that is not a good test. | 17:09 |
| johnsom | Ah, ok, so a Kolla issue. Sadly I'm not very familiar with how Kolla is setup for Octavia. But I can try to walk through some things to debug. | 17:13 |
| generalfuzz | awesome, open to suggestions | 17:13 |
| johnsom | So, the controller processes (worker, health manager, and house keeping) must have a network path to the amphora over the lb-mgmt-net. | 17:14 |
| johnsom | It looks like kolla is calling that lb-net | 17:14 |
| generalfuzz | I created that network | 17:14 |
| johnsom | Inside your controller worker container, do you have an interface for the lb-net? | 17:15 |
| johnsom | Oh, hmmm, I would have expected kolla to create that for you. | 17:15 |
| johnsom | The other deployment tools all create that network automatically. | 17:15 |
| generalfuzz | let me double check kolla on that | 17:16 |
| johnsom | If there is not an interface for that lb-net inside the containers, we will need to add that. | 17:17 |
| generalfuzz | check the interfaces with "ip a" ? | 17:19 |
| johnsom | yes | 17:20 |
| *** psachin has quit IRC | 17:20 | |
| generalfuzz | its a long list, not sure if lb-net is there - | 17:20 |
| johnsom | it is usually called something like o-hm0, but that is up to the deployment tool | 17:20 |
| generalfuzz | https://www.irccloud.com/pastebin/XnXEmmXj/ | 17:20 |
| johnsom | That is inside the worker container? | 17:21 |
| generalfuzz | yes | 17:21 |
| johnsom | Can you do a "openstack subnet show d17fa379-ad28-47cf-8479-8d5a7c46965e" ? | 17:22 |
| johnsom | We can probably match up the subnet to the interface | 17:22 |
| generalfuzz | https://www.irccloud.com/pastebin/i20b1QPu/ | 17:22 |
| johnsom | Yep, ok, so there is no interface in the worker container to allow it to access that network. | 17:23 |
| generalfuzz | so, this behavior is expected | 17:24 |
| johnsom | I would recommend asking in the kolla IRC channels how that should be configured. | 17:24 |
| johnsom | Yes, you must have the lb-mgmt-net connected to the controllers. That is a required deployment configuration. | 17:24 |
| generalfuzz | At what point in non-kolla deployment does this association happen? | 17:24 |
| johnsom | Installation/deployment. | 17:24 |
| johnsom | prior to attempting to start the controller processes | 17:25 |
| generalfuzz | Is there a history of this working in Kolla? | 17:25 |
| generalfuzz | octavia deployment, I mean | 17:26 |
| johnsom | Yeah, I know some folks are using it, but all of that Kolla work was done by the Kolla team. The core Octavia team typically doesn't work on the deployment tools as there are so many and they are pretty specialized. We mostly work with the tool we use most. | 17:28 |
| johnsom | One person that has used Kolla is at the summit and the other is either at the summit or offline in this time window. | 17:28 |
| generalfuzz | ok | 17:28 |
| johnsom | Your best bet for help with this is using the kolla channels. | 17:28 |
| generalfuzz | thanks much for your help | 17:28 |
| johnsom | I can show you how some of the other tools do it if you want to go it on your own, but I would expect there is a "kolla" way to do it. | 17:29 |
| generalfuzz | where does this network get assigned to worker - is it in /etc/octavia/octavia.conf ? | 17:35 |
| generalfuzz | because I do have the following configured - amp_boot_network_list = 79f55a3b-3bba-4aec-a2a8-5eefaca033d1 | 17:35 |
| *** ccamposr__ has joined #openstack-lbaas | 17:36 | |
| johnsom | Right, that config tells the amphora what network ID to use for the lb-mgmt-net at boot. For what I saw, that setting is correct. | 17:36 |
| johnsom | I think the issue is the controllers have no route/access to the lb-mgmt-net. | 17:36 |
| johnsom | There is no octavia.conf setting for that. It is all deployment tool. The controllers just know the IP address assigned to the amphora and attempt to access that IP on the amphora agent port, 9443 | 17:37 |
| *** ccamposr has quit IRC | 17:38 | |
| johnsom | The deployment tool has a lot of options about how to give access. Devstack and tripleo both create an interface on the neutron network called o-hm0 for the controllers. OpenStack-ansible uses a provider network and VLANs. Others have created routers and routes. | 17:38 |
| johnsom | generalfuzz I found this blog article using kolla-ansible: https://shreddedbacon.com/post/openstack-kolla/ | 17:40 |
| johnsom | It looks like this person had to setup that network too. It is just not clear to me how he made that VLAN, 400, available to the controllers. Maybe the neutron configuration for the provider networks also adds a path to that VLAN | 17:42 |
| johnsom | Or they just created the ports on the vlan themselves | 17:43 |
| johnsom | Ah there appears to be this too: https://bugs.launchpad.net/kolla-ansible/+bug/1719688 | 17:44 |
| openstack | Launchpad bug 1719688 in kolla-ansible "kolla-ansible does not create provider network needed by octavia" [Wishlist,Triaged] | 17:44 |
| generalfuzz | ok, so others have run into this in kolla land - good to know | 17:48 |
| johnsom | I think we are pushing twelve different deployment tools that support Octavia now. It's pretty hard to keep up with them all. | 17:51 |
| *** goldyfruit___ has quit IRC | 17:53 | |
| *** goldyfruit___ has joined #openstack-lbaas | 17:58 | |
| *** gcheresh has joined #openstack-lbaas | 18:10 | |
| *** gcheresh has quit IRC | 18:20 | |
| *** goldyfruit_ has joined #openstack-lbaas | 18:46 | |
| *** goldyfruit___ has quit IRC | 18:49 | |
| *** gcheresh has joined #openstack-lbaas | 19:13 | |
| *** goldyfruit_ has quit IRC | 19:14 | |
| *** gcheresh_ has joined #openstack-lbaas | 19:22 | |
| *** gcheresh has quit IRC | 19:25 | |
| *** ccamposr has joined #openstack-lbaas | 19:28 | |
| *** ccamposr__ has quit IRC | 19:30 | |
| *** ccamposr__ has joined #openstack-lbaas | 19:52 | |
| *** ccamposr has quit IRC | 19:54 | |
| *** gcheresh_ has quit IRC | 20:27 | |
| *** goldyfruit_ has joined #openstack-lbaas | 20:33 | |
| *** gcheresh_ has joined #openstack-lbaas | 20:37 | |
| *** gcheresh_ has quit IRC | 21:10 | |
| *** mriedem has joined #openstack-lbaas | 21:19 | |
| mriedem | for anyone around, i've got a random user flaming me up because he's using the old deprecated neutron lbaasv2 stuff and can't find the api reference https://docs.openstack.org/api-ref/network/v2/index.html#load-balancer-as-a-service-2-0-deprecated - he's not using octavia so doesn't care about the octavia api reference, or is it the exact same? | 21:19 |
| johnsom | Lol, was replying over there too. Grin | 21:20 |
| mriedem | you shamed me into moving | 21:20 |
| johnsom | The Octavia API also implements the lbaasv2 API. It is a superset. | 21:20 |
| mriedem | sure, | 21:21 |
| mriedem | but if you're using the old thing, how do you know what's new and only available with octavia? | 21:21 |
| johnsom | The api ref that was in the neutron docs had been wrong for years | 21:21 |
| johnsom | Someone merged the old lbaasv1 and lbaasv2 together making a mess | 21:21 |
| johnsom | So we decided correct docs were the best plan. | 21:22 |
| mriedem | ok, that doesn't surprise me | 21:22 |
| mriedem | but still, how does someone know what is unique to octavia? | 21:23 |
| *** Trevor_V has quit IRC | 21:23 | |
| johnsom | Anything that doesn’t have a version call out should work with the last neutron-lbaas release | 21:23 |
| mriedem | version call out == "added in x release" ? | 21:23 |
| johnsom | Our api-ref is versioned, starting with lbaasv2 as the reference | 21:24 |
| mriedem | i don't know how you guys version your api | 21:24 |
| johnsom | Correct | 21:24 |
| mriedem | x release isn't really a version though | 21:24 |
| johnsom | Oh, sorry, I thought you typed version, not release | 21:25 |
| mriedem | i mean, the end user doesn't necessarily know what version of openstack the cloud is running | 21:25 |
| johnsom | It is documented by api version | 21:25 |
| mriedem | maybe it would be easier if you could just point me at some api that is unique to octavia? | 21:25 |
| johnsom | There are commands to get the version discovery info | 21:25 |
| johnsom | At least I think the neutron API had version discovery | 21:26 |
| mriedem | ok so like this https://docs.openstack.org/api-ref/load-balancer/v2/index.html#filtering-by-tags | 21:26 |
| mriedem | New in version 2.5 | 21:26 |
| mriedem | 2.0 is backward compatible with neutron lbaasv2 yeah? | 21:27 |
| mriedem | anything > 2.0 is ocatavia only | 21:27 |
| *** lemko has quit IRC | 21:27 | |
| mriedem | is that correct? | 21:27 |
| johnsom | https://docs.openstack.org/api-ref/load-balancer/v2/index.html?expanded=list-flavors-detail#list-flavors | 21:27 |
| mriedem | "New in version 2.6" | 21:27 |
| mriedem | ack | 21:27 |
| johnsom | Correct | 21:27 |
| mriedem | how do you request the version? in the route path or a header? | 21:28 |
| johnsom | They will also get a “not implemented” message should they stray | 21:28 |
| mriedem | /v2.6/lbaas/flavors ? | 21:28 |
| johnsom | No, our API is additive only. No need to request a version | 21:29 |
| mriedem | ok, so if i'm talking to a cloud that has 2.6 and listing flavors, i'll get whatever goodies are in 2.6, else i won't | 21:29 |
| mriedem | as a user i can't opt in | 21:29 |
| mriedem | right? | 21:29 |
| mriedem | that's like how glance's api works | 21:29 |
| johnsom | Correct, /v2 gets you everything up to the api version the cloud is advertising | 21:30 |
| johnsom | Same as neutron and neutron-lbaas was | 21:30 |
| mriedem | without the extension mumbo jumbo in neutron i'm guessing | 21:30 |
| johnsom | Correct | 21:31 |
| mriedem | well that's a relief :) | 21:31 |
| mriedem | johnsom: ok, i've passed this on. thanks, it's helpful. it might be nice to have something in the api-ref detailing some of ^ and i realize patches are welcome... | 21:32 |
| johnsom | Nuetron | 21:32 |
| johnsom | Opps, it is called out in the neutron-lbaas deprecation FAQ | 21:33 |
| mriedem | sure, but assume i do'nt know anything about openstack | 21:33 |
| mriedem | and i'm coming to the octavia docs and i'm like, wtf is a neutron? i just want that sweet sweet lbaas action | 21:33 |
| johnsom | https://wiki.openstack.org/wiki/Neutron/LBaaS/Deprecation | 21:34 |
| mriedem | that's not linked from https://docs.openstack.org/api-ref/load-balancer/v2/index.html but ok, | 21:34 |
| mriedem | it's linked from the neutron api-ref | 21:34 |
| johnsom | Nuetron-lbaas went EOL, no train release, so .... | 21:34 |
| mriedem | https://docs.openstack.org/api-ref/network/v2/index.html?expanded=#load-balancer-as-a-service-2-0-deprecated | 21:34 |
| mriedem | i yield | 21:35 |
| johnsom | Lol | 21:35 |
| mriedem | btw you're not in shanghai answering these questions right now are you? | 21:35 |
| johnsom | Let me know if you need more info. Now you know the place | 21:35 |
| johnsom | No, I am the odd core out on this trip | 21:36 |
| johnsom | Still on mobile though, ran out for lunch | 21:36 |
| mriedem | sounds like a feature rather than a bug | 21:36 |
| johnsom | Agreed | 21:36 |
| *** mriedem has left #openstack-lbaas | 21:48 | |
| *** pcaruana has quit IRC | 22:03 | |
| *** gthiemonge has quit IRC | 22:14 | |
| *** gthiemon1e has joined #openstack-lbaas | 22:14 | |
| *** armax has joined #openstack-lbaas | 22:27 | |
| *** rcernin has joined #openstack-lbaas | 22:29 | |
| *** luksky has quit IRC | 22:54 | |
| *** ramishra has joined #openstack-lbaas | 23:04 | |
| *** armax has quit IRC | 23:41 | |
| *** ccamposr__ has quit IRC | 23:46 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!