| dawzon | Oh, wow. I just realized I don't even have the octavia-tempest-plugin repo . Can I just clone the repo directly or do I have to install it with stack.sh? | 00:04 |
|---|---|---|
| dawzon | Nevermind, resolved | 00:08 |
| *** rcernin has joined #openstack-lbaas | 00:38 | |
| *** dulek has quit IRC | 00:54 | |
| *** yamamoto has joined #openstack-lbaas | 00:54 | |
| *** dulek has joined #openstack-lbaas | 01:06 | |
| *** yamamoto has quit IRC | 01:26 | |
| *** yamamoto has joined #openstack-lbaas | 06:35 | |
| *** abaindur has joined #openstack-lbaas | 07:17 | |
| *** abaindur has quit IRC | 07:19 | |
| *** abaindur has joined #openstack-lbaas | 07:19 | |
| *** abaindur has quit IRC | 07:30 | |
| *** gcheresh has joined #openstack-lbaas | 07:36 | |
| *** yamamoto has quit IRC | 07:56 | |
| *** yamamoto has joined #openstack-lbaas | 07:57 | |
| *** sapd1 has quit IRC | 08:29 | |
| *** sapd1 has joined #openstack-lbaas | 08:44 | |
| *** yamamoto has quit IRC | 09:24 | |
| *** yamamoto has joined #openstack-lbaas | 09:54 | |
| *** yamamoto has quit IRC | 10:43 | |
| *** yamamoto has joined #openstack-lbaas | 11:14 | |
| rm_work | nmickus: well, there's some good docs around on recommendations, like https://wiki.mozilla.org/Security/Server_Side_TLS | 11:15 |
| rm_work | As a starting point, I might take their Intermediate recommendations | 11:15 |
| rm_work | https://ssl-config.mozilla.org/guidelines/5.3.json | 11:16 |
| rm_work | I thought we used a whitelist? Therefore "blacklist" would be "not whitelist"? | 11:17 |
| rm_work | Could be totally wrong though, haven't kept up with this feature spec | 11:17 |
| *** yamamoto has quit IRC | 11:49 | |
| *** yamamoto has joined #openstack-lbaas | 11:51 | |
| *** yamamoto has quit IRC | 12:23 | |
| *** yamamoto has joined #openstack-lbaas | 12:32 | |
| *** yamamoto has quit IRC | 12:44 | |
| *** yamamoto has joined #openstack-lbaas | 13:15 | |
| openstackgerrit | Merged openstack/octavia stable/queens: Fix uncaught DB exception when trying to get a spare amphora https://review.opendev.org/709569 | 13:29 |
| *** gcheresh has quit IRC | 13:35 | |
| *** gcheresh has joined #openstack-lbaas | 13:36 | |
| openstackgerrit | Merged openstack/octavia stable/stein: Fix multi-listener LB with missing certificate https://review.opendev.org/698597 | 14:09 |
| *** yamamoto has quit IRC | 14:19 | |
| *** gcheresh has quit IRC | 14:59 | |
| johnsom | rm_work: The black list is for operators to flag those in that should never be used. I would probably leave it empty or see what owasp/nsa/nist says | 16:06 |
| rm_work | Ah, not default blacklist for each new listener | 16:08 |
| rm_work | Default blacklist for the whole system so people can't even whitelist certain stuff for new listeners | 16:09 |
| rm_work | Got it | 16:09 |
| *** yamamoto has joined #openstack-lbaas | 16:53 | |
| *** yamamoto has quit IRC | 16:58 | |
| *** sapd1 has quit IRC | 17:35 | |
| *** armax has quit IRC | 17:50 | |
| *** erdosip has joined #openstack-lbaas | 18:07 | |
| erdosip | hy! could somebody help me please with amphora diskimage-builder? We're at rocky based on 18.04 ubuntu. I've created a bionic based amphora image, but when it's booting up, the interface renamer do some wierd stuff (multile renames, and finally i only got one if) | 18:09 |
| erdosip | I've tried with centos 7 and 8, but then I got 500, because the amphora-agent searches `haproxy18` package, which does not installed (haproxy however yes, 1.5 in centos 7, 1.8 in centos 8) | 18:10 |
| erdosip | I've tried with centos 7 and 8, but then I got 500, because the amphora-agent searches `haproxy18` package, which does not installed (haproxy however yes, 1.5 in centos 7, 1.8 in centos 8) | 18:10 |
| erdosip | I've tried with centos 7 and 8, but then I got 500, because the amphora-agent searches `haproxy18` package, which does not installed (haproxy however yes, 1.5 in centos 7, 1.8 in centos 8 ) | 18:10 |
| erdosip | oops, sorry! dont wanted to send 3 times.. :( | 18:10 |
| erdosip | so as last resort I've tried to build it with fedora, which also not working, because the diskimage-builder.sh only support 27/28 fedora, but it's not in the mirror anymore, they are on 31 | 18:11 |
| erdosip | are there any tips, how to build a working image? where should i change the generated grub conf in ubuntu for example? (to disable interface renames, and stick with ethX) | 18:13 |
| erdosip | or how to correct the haproxy18 package name (or please help understand, why it's haproxy18 and how it suppose to work? ) | 18:14 |
| *** gcheresh has joined #openstack-lbaas | 18:49 | |
| *** armax has joined #openstack-lbaas | 18:57 | |
| *** erdosip has quit IRC | 18:58 | |
| *** erdosip has joined #openstack-lbaas | 18:58 | |
| *** armax has quit IRC | 19:05 | |
| *** gcheresh has quit IRC | 19:14 | |
| *** armax has joined #openstack-lbaas | 19:20 | |
| *** gcheresh has joined #openstack-lbaas | 19:21 | |
| *** gcheresh has quit IRC | 19:37 | |
| *** gcheresh has joined #openstack-lbaas | 21:18 | |
| *** erdosip has quit IRC | 21:30 | |
| *** rcernin has quit IRC | 21:30 | |
| *** gcheresh has quit IRC | 21:36 | |
| johnsom | erdosip We use Ubuntu 18.04 for all of our OpenStack gate tests. It should work fine. The amphora image does manage the interface naming and locations automatically. This assumes you are using our script https://github.com/openstack/octavia/blob/master/diskimage-create/diskimage-create.sh | 22:16 |
| johnsom | To build an Ubuntu image, just run that script. The defaults will automatically build you a fully functional Ubuntu Bionic image. | 22:16 |
| johnsom | Ah, they left, well, they probably didn't know there is a network namespace for security | 22:17 |
| johnsom | ah well | 22:17 |
| johnsom | Maybe they found and read the image building guide: https://docs.openstack.org/octavia/latest/admin/amphora-image-build.html | 22:18 |
| *** tkajinam has joined #openstack-lbaas | 22:50 | |
| *** yamamoto has joined #openstack-lbaas | 22:56 | |
| *** yamamoto has quit IRC | 23:00 | |
| *** rcernin has joined #openstack-lbaas | 23:27 | |
| openstackgerrit | Noah Mickus proposed openstack/octavia master: WIP: Adding The abllity to set a cipher blacklist https://review.opendev.org/711863 | 23:33 |
| *** yamamoto has joined #openstack-lbaas | 23:36 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!