| *** nicolasbock has quit IRC | 00:03 | |
| *** stevenglasford has quit IRC | 00:25 | |
| *** armax has quit IRC | 01:07 | |
| *** armax has joined #openstack-lbaas | 01:22 | |
| *** yamamoto has joined #openstack-lbaas | 02:04 | |
| openstackgerrit | Michael Johnson proposed openstack/octavia master: WIP - Refactor the failover flows https://review.opendev.org/705317 | 02:06 |
|---|---|---|
| *** vishalmanchanda has joined #openstack-lbaas | 02:59 | |
| *** goldyfruit has quit IRC | 03:05 | |
| *** goldyfruit has joined #openstack-lbaas | 03:05 | |
| *** ramishra has joined #openstack-lbaas | 03:15 | |
| *** ramishra has quit IRC | 03:25 | |
| *** spatel has joined #openstack-lbaas | 03:39 | |
| *** spatel has quit IRC | 03:44 | |
| *** ramishra has joined #openstack-lbaas | 03:55 | |
| *** gcheresh_ has joined #openstack-lbaas | 05:42 | |
| *** gcheresh_ has quit IRC | 05:53 | |
| *** spatel has joined #openstack-lbaas | 06:00 | |
| *** gcheresh_ has joined #openstack-lbaas | 06:01 | |
| *** spatel has quit IRC | 06:05 | |
| *** gcheresh_ has quit IRC | 06:14 | |
| *** gcheresh_ has joined #openstack-lbaas | 06:25 | |
| *** spatel has joined #openstack-lbaas | 06:55 | |
| *** spatel has quit IRC | 07:00 | |
| *** gcheresh_ has quit IRC | 07:26 | |
| *** ccamposr has joined #openstack-lbaas | 07:36 | |
| *** gcheresh_ has joined #openstack-lbaas | 07:40 | |
| *** ramishra has quit IRC | 07:45 | |
| *** maciejjozefczyk has joined #openstack-lbaas | 07:57 | |
| *** gcheresh_ has quit IRC | 07:59 | |
| *** ramishra has joined #openstack-lbaas | 08:02 | |
| *** gcheresh_ has joined #openstack-lbaas | 08:19 | |
| *** tesseract has joined #openstack-lbaas | 08:20 | |
| *** ivve has joined #openstack-lbaas | 08:24 | |
| *** ivve has quit IRC | 08:27 | |
| *** tkajinam has quit IRC | 08:29 | |
| cgoncalves | YAP2 (yet-another-python-2) issue. the one of today is installing stackviz after tempest run | 09:00 |
| cgoncalves | dulek, no need to recheck https://review.opendev.org/706052 | 09:33 |
| cgoncalves | there's a new py2 drop bug. see ^^ | 09:33 |
| cgoncalves | I pinged gmann in #openstack-qa for help | 09:34 |
| dulek | cgoncalves: Okay, thanks! | 09:34 |
| *** yamamoto has quit IRC | 10:04 | |
| *** yamamoto has joined #openstack-lbaas | 10:16 | |
| *** spatel has joined #openstack-lbaas | 10:41 | |
| *** spatel has quit IRC | 10:46 | |
| *** ivve has joined #openstack-lbaas | 11:39 | |
| *** vishalmanchanda has quit IRC | 11:58 | |
| *** nicolasbock has joined #openstack-lbaas | 12:07 | |
| *** xakaitetoia has joined #openstack-lbaas | 12:34 | |
| openstackgerrit | Merged openstack/octavia stable/train: Use stable upper-constraints.txt in Amphora builds https://review.opendev.org/705927 | 12:58 |
| openstackgerrit | Merged openstack/octavia master: Add docs warning for PING health monitors https://review.opendev.org/707426 | 13:18 |
| xakaitetoia | Hello team, when deploying a LB, does the amphra instances need to have a secondary interface pointing to the client's network? (apart from first interface which will be the lbaas network) | 13:31 |
| cgoncalves | xakaitetoia, correct. the second interface will be plugged to the VIP network | 13:33 |
| xakaitetoia | thanks a lot :) Seems during my lb deployment i do not see that interface. I only have the lbaas network interface. Which makes the provisionig stauts ok but the operational status as error. Still trying to find out where i can check this in logs configs etc | 13:35 |
| cgoncalves | xakaitetoia, the VIP interface is in a network namespace. check if it shows up in "ip netns exec amphora-haproxy ip a" | 13:36 |
| xakaitetoia | I do see that client's network interface as attached in openstack in amphra instance though. Just not from inside the amphra | 13:36 |
| xakaitetoia | cool i ll check that | 13:37 |
| xakaitetoia | aah correct, i can see it there | 13:38 |
| cgoncalves | xakaitetoia, as for the ERROR operating status, check the octavia worker and health manager service logs | 13:40 |
| *** laerlingSAP has joined #openstack-lbaas | 13:40 | |
| xakaitetoia | Perfect, thanks a lot. Appreciate it. I got that in my head now, so i will go check these logs as you mentioned. | 13:43 |
| cgoncalves | cool. please let us know if you need help understanding the log messages | 13:44 |
| xakaitetoia | Sure will do. I ll check them in a bit | 13:47 |
| xakaitetoia | health monitors look ok. It's the members that are in operating status = error.. but i'll find out :P | 13:56 |
| *** laerlingSAP has quit IRC | 14:00 | |
| dulek | I'm trying to debug an issue with IPv6 connectivity on a gate VM. At this point I'm sure the Amp is unable to connect to the member because of: "curl: (7) Failed to connect to fdb5:1732:e99f:1::1c0 port 6443: Permission denied". | 14:11 |
| dulek | Anyone seen that? Internet says it might be selinux, but that amp is Ubuntu. | 14:12 |
| cgoncalves | xakaitetoia, which health monitor type have you created? PING, TCP, HTTP, ...? | 14:19 |
| cgoncalves | dulek, dumb question but have you checked firewall/security groups? | 14:20 |
| dulek | cgoncalves: Yeah, but I'll keep digging. Anyway SG issues should just produce a timeout, not "permission denied". | 14:22 |
| dulek | Well, disabling apparmor doesn't help either. | 14:22 |
| *** gcheresh_ has quit IRC | 14:22 | |
| *** yamamoto has quit IRC | 14:23 | |
| cgoncalves | dulek, double check it isn't firewall in the member | 14:25 |
| *** maciejjozefczyk has quit IRC | 14:26 | |
| *** gcheresh_ has joined #openstack-lbaas | 14:26 | |
| dulek | cgoncalves: Hm, now that I think of it, that might be one place where gate VM differs from my local setup (which works)… | 14:26 |
| dulek | Thanks for pointer! | 14:26 |
| *** spatel has joined #openstack-lbaas | 14:27 | |
| cgoncalves | always a pleasure also helping with non-Octavia related questions! :P | 14:27 |
| dulek | Hey, my question had Octavia background! :D | 14:29 |
| *** spatel has quit IRC | 14:32 | |
| xakaitetoia | i have created an http one | 14:33 |
| gmann | cgoncalves: virtualenv issue is fixed now. looking at stackviz thing. | 14:34 |
| xakaitetoia | and really appreciate your swift responses here. Great effort | 14:34 |
| cgoncalves | gmann, thanks! I see there's a patch, cool | 14:36 |
| cgoncalves | xakaitetoia, would it be possible to check the haproxy logs in the amphora? | 14:38 |
| cgoncalves | hmm. now that I think better about it, there was someone the other day with a similar problem, I guess...? | 14:38 |
| xakaitetoia | Interesting | 14:39 |
| cgoncalves | johnsom helped that user but he shouldn't be online yet. let me check the IRC logs | 14:39 |
| cgoncalves | xakaitetoia, mind checking the octavia health manager service logs please? | 14:41 |
| cgoncalves | check if you have error or warning messages | 14:41 |
| *** yamamoto has joined #openstack-lbaas | 14:42 | |
| xakaitetoia | sure will do. Interesting here .. i created a nother pool with ping check this time and operational status is online | 14:42 |
| cgoncalves | the other user had members in OFFLINE, though | 14:44 |
| *** maciejjozefczyk has joined #openstack-lbaas | 14:48 | |
| xakaitetoia | ok i have an update | 14:50 |
| xakaitetoia | looks like security groups. I was able to curl the http from ampohra namespace into that client instance | 14:50 |
| cgoncalves | I'd have expected the health monitor to report member OFFLINE, not ERROR | 14:52 |
| cgoncalves | anything in haproxy log? | 14:52 |
| xakaitetoia | the default security groups. I had to allow port 80 from anywhere but we don't want that in the future. Allowing by the default sec group. didn't work though. Yes and they went to offline | 14:52 |
| xakaitetoia | forgot to mention | 14:52 |
| xakaitetoia | so i am in a good place so far :) almost there :P | 14:52 |
| *** TrevorV has joined #openstack-lbaas | 14:55 | |
| cgoncalves | xakaitetoia, you could configure the security group of the members to allow only incoming traffic from the load balancer IP | 15:05 |
| xakaitetoia | yeap that's what i am doing ;) | 15:07 |
| xakaitetoia | thanks a lot hehe | 15:07 |
| dulek | cgoncalves: So it was iptables on the member. My problem was I was checking iptables, not ip6tables. | 15:12 |
| cgoncalves | dulek, there you go! | 15:14 |
| dulek | Yeah, thanks again! | 15:14 |
| xakaitetoia | hmm in the end i had to allow the whole internal network for port 80 | 15:35 |
| xakaitetoia | as i allowed the vip address only and it didn't work | 15:36 |
| xakaitetoia | https://ask.openstack.org/en/question/122858/octavia-health-check-ip-and-security-group/ | 15:37 |
| xakaitetoia | so you can leverage fwaas in that case | 15:38 |
| *** gcheresh_ has quit IRC | 15:47 | |
| xakaitetoia | perfect all good. Next step is to enable the https termination to work with barbican.. LEt's see ;P cheers guys.. thanks a lot | 15:53 |
| *** Trevor_V has joined #openstack-lbaas | 15:55 | |
| *** TrevorV has quit IRC | 15:58 | |
| *** gcheresh_ has joined #openstack-lbaas | 16:10 | |
| *** gcheresh_ has quit IRC | 16:20 | |
| cgoncalves | glad it worked out for you! | 16:25 |
| *** maciejjozefczyk has quit IRC | 16:25 | |
| openstackgerrit | Brian Haley proposed openstack/octavia stable/stein: Fix pep8 failures on stable/stein branch https://review.opendev.org/707687 | 16:48 |
| *** tesseract has quit IRC | 16:59 | |
| openstackgerrit | Carlos Goncalves proposed openstack/octavia stable/stein: Use stable upper-constraints.txt in Amphora builds https://review.opendev.org/706050 | 17:19 |
| *** maciejjozefczyk has joined #openstack-lbaas | 17:28 | |
| *** gcheresh_ has joined #openstack-lbaas | 17:50 | |
| *** maciejjozefczyk has quit IRC | 18:06 | |
| *** gcheresh_ has quit IRC | 18:10 | |
| *** armax has quit IRC | 18:11 | |
| *** gcheresh_ has joined #openstack-lbaas | 18:37 | |
| *** ramishra has quit IRC | 19:02 | |
| *** armax has joined #openstack-lbaas | 19:02 | |
| *** yamamoto has quit IRC | 19:32 | |
| *** gcheresh_ has quit IRC | 19:43 | |
| *** yamamoto has joined #openstack-lbaas | 20:12 | |
| *** yamamoto has quit IRC | 20:23 | |
| *** Trevor_V has quit IRC | 21:55 | |
| openstackgerrit | Brian Haley proposed openstack/octavia master: Allow multiple VIPs per LB https://review.opendev.org/660239 | 22:06 |
| openstackgerrit | Brian Haley proposed openstack/octavia master: Allow multiple VIPs per LB https://review.opendev.org/660239 | 23:01 |
| *** tkajinam has joined #openstack-lbaas | 23:04 | |
| *** ivve has quit IRC | 23:11 | |
| *** armax has quit IRC | 23:26 | |
| *** spatel has joined #openstack-lbaas | 23:30 | |
| *** spatel has quit IRC | 23:34 | |
| *** xakaitetoia has quit IRC | 23:55 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!