*** TMM has quit IRC | 00:23 | |
*** TMM has joined #openstack-lbaas | 00:23 | |
sorrison | rm_work johnsom: going to get into some more octavia work, I'll take a look at that AZ scenario tempest test finally too! | 01:07 |
---|---|---|
sorrison | johnsom: I've been looking at running tempest tests against our octavia in production and hoping to make some changes to make this easier. | 01:08 |
sorrison | currently the tempest tests require you to set up admin creds and I'm hoping to change it so they don't need admin creds to run tests that don't need admin creds | 01:09 |
sorrison | The other openstack projects allow this (some after patches from us to make this happen) | 01:09 |
rm_work | sorrison: also need to finish the real AZ tests that create a true working new AZ/network and use that to do a traffic test | 01:32 |
rm_work | I don't know enough on the networking OR the nova side to get that working in devstack, really :( | 01:32 |
sorrison | yip, hope to look at that soon too | 01:40 |
*** stingrayza has quit IRC | 01:51 | |
*** stingrayza has joined #openstack-lbaas | 01:53 | |
*** rcernin has quit IRC | 02:41 | |
*** rcernin has joined #openstack-lbaas | 02:42 | |
*** shtepanie has quit IRC | 02:53 | |
sorrison | rm_work: Just wondering if there is a reason octavia doesn't use the standard member and admin roles in default policy and defines it own? | 03:03 |
sorrison | is there plans to move to the standard roles, which also defines reader which would line up with load-balancer_observer I think | 03:04 |
*** vishalmanchanda has joined #openstack-lbaas | 03:15 | |
*** dmellado has quit IRC | 03:59 | |
*** wuchunyang has joined #openstack-lbaas | 04:02 | |
*** wuchunyang has quit IRC | 04:07 | |
*** wuchunyang has joined #openstack-lbaas | 04:18 | |
*** wuchunyang has quit IRC | 04:23 | |
*** wuchunyang has joined #openstack-lbaas | 05:11 | |
*** wuchunyang has quit IRC | 05:15 | |
*** strigazi has quit IRC | 05:18 | |
*** strigazi has joined #openstack-lbaas | 05:19 | |
*** wuchunyang has joined #openstack-lbaas | 05:21 | |
*** gcheresh has joined #openstack-lbaas | 05:21 | |
*** wuchunyang has quit IRC | 05:26 | |
*** wuchunyang has joined #openstack-lbaas | 05:41 | |
*** wuchunyang has quit IRC | 05:48 | |
johnsom | sorrison Our policy role definition is based on the original specification that was more detailed. I think only nova and octavia implemented the "advanced RBAC" as it was originally intended. The new "spec" is a simplified version of that, which is fairly compatible as you mentioned. However, I think these simplified roles should be an option and not reduce the capability we have shipped for many releases. Like | 06:09 |
johnsom | we provide a legacy policy file for the old "owner or admin" I would expect we could provide a dumbed down policy file as an option that implements the "reader"/"admin" role. | 06:09 |
sorrison | johnsom: it essentially just comes down to the name of the roles I think | 06:10 |
sorrison | it could work out of the box if it used the standard roles | 06:11 |
sorrison | and still have all the nice policy that octavia has | 06:11 |
sorrison | There is one difference I think in that octavia defines a non global read only user | 06:14 |
sorrison | This then feeds over to tempest and that is hard to use as it could instead use the standard primary, alt and admin users | 06:15 |
sorrison | I have been working on a patch on our environment to allow us to run tempest as not specify admin credentials https://github.com/NeCTAR-RC/octavia-tempest-plugin/commit/c1d88eb502f180c9edbf4c3b4f66b7ccfd57e15c | 06:17 |
sorrison | I'm wondering if this can go upstream, it would be backwards compatible if octavia used standard roles | 06:18 |
*** rpittau|afk is now known as rpittau | 06:34 | |
*** born2bake has joined #openstack-lbaas | 06:35 | |
*** maciejjozefczyk has joined #openstack-lbaas | 07:08 | |
openstackgerrit | Omer Schwartz proposed openstack/octavia-tempest-plugin master: Tags are strings attached to an entity with the purpose of classification into groups. Tags support API tests were added. https://review.opendev.org/735939 | 07:42 |
*** aannuusshhkkaa has quit IRC | 07:51 | |
openstackgerrit | Merged openstack/octavia master: Clarify health monitor behavior https://review.opendev.org/735191 | 08:06 |
*** rcernin has quit IRC | 08:18 | |
openstackgerrit | Carlos Goncalves proposed openstack/octavia master: Add missing reload method in amphora noop driver https://review.opendev.org/737460 | 08:59 |
frickler | this sdk test keeps failing with some lb error, would be great if someone could take a look https://zuul.opendev.org/t/openstack/build/110222aba61c450d8fac7c56ebc8d330 | 09:05 |
openstackgerrit | Gregory Thiemonge proposed openstack/octavia-tempest-plugin master: DNM check UDP pool fix https://review.opendev.org/737283 | 09:07 |
cgoncalves | frickler, https://review.opendev.org/737460 | 09:08 |
frickler | cgoncalves: ah, great, thx | 09:10 |
*** gcheresh has quit IRC | 09:31 | |
*** gcheresh has joined #openstack-lbaas | 09:32 | |
*** ccamposr has quit IRC | 10:10 | |
*** rpittau is now known as rpittau|bbl | 10:12 | |
*** ccamposr has joined #openstack-lbaas | 10:16 | |
*** tkajinam has quit IRC | 10:17 | |
*** gcheresh has quit IRC | 10:55 | |
*** wuchunyang has joined #openstack-lbaas | 10:56 | |
*** wuchunyang has quit IRC | 10:59 | |
*** ataraday_ has joined #openstack-lbaas | 11:16 | |
*** gcheresh has joined #openstack-lbaas | 11:32 | |
*** rpittau|bbl is now known as rpittau | 12:14 | |
openstackgerrit | Carlos Goncalves proposed openstack/octavia master: Add amphora image tag capability to Octavia flavors https://review.opendev.org/737528 | 12:57 |
*** ccamposr has quit IRC | 13:12 | |
rm_work | hmm somehow i thought we already did that | 14:02 |
rm_work | oh image TAG not image ID | 14:02 |
rm_work | err, or did we have either | 14:02 |
johnsom | I know that I was going to do it, but never got time to. | 14:09 |
*** ccamposr has joined #openstack-lbaas | 14:13 | |
cgoncalves | thought we'd be nice to our openstack multi-arch SIG | 14:17 |
*** riuzen has joined #openstack-lbaas | 14:24 | |
*** TrevorV has joined #openstack-lbaas | 14:24 | |
*** riuzen has quit IRC | 14:28 | |
*** yamamoto has quit IRC | 14:45 | |
*** yamamoto has joined #openstack-lbaas | 14:50 | |
*** yamamoto has quit IRC | 15:18 | |
*** maciejjozefczyk has quit IRC | 15:50 | |
*** yamamoto has joined #openstack-lbaas | 15:57 | |
*** rpittau is now known as rpittau|afk | 16:00 | |
*** yamamoto has quit IRC | 16:07 | |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Add an upgrade check for YAML oslo policy file https://review.opendev.org/737571 | 16:07 |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Add an upgrade check for YAML oslo policy file https://review.opendev.org/737571 | 16:11 |
*** dayou_ has quit IRC | 16:27 | |
cgoncalves | CI is not having a good day... POST_FAILURE everywhere | 16:29 |
johnsom | Yep, zuul is broken | 16:30 |
johnsom | Well, the storage backing zuul | 16:30 |
cgoncalves | reading #openstack-infra, seems a fix has merged. recheck should do | 16:30 |
*** gcheresh has quit IRC | 16:37 | |
*** dayou_ has joined #openstack-lbaas | 16:41 | |
*** dayou_ has quit IRC | 16:47 | |
*** dayou_ has joined #openstack-lbaas | 17:00 | |
*** spatel has joined #openstack-lbaas | 17:09 | |
openstackgerrit | Gregory Thiemonge proposed openstack/octavia-tempest-plugin master: DNM check UDP pool fix https://review.opendev.org/737283 | 17:11 |
*** ccamposr has quit IRC | 17:42 | |
*** gcheresh has joined #openstack-lbaas | 17:42 | |
rm_work | FYI I'm back to working on the failover halt threshold thing | 17:50 |
rm_work | gonna try to get that workable this week if possible | 17:50 |
johnsom | Nice | 17:50 |
rm_work | i forget exactly what needed done... i feel like it maybe wasn't too far? | 17:51 |
johnsom | I think there was a problem with it coming back, not sure, it's been too long | 17:51 |
*** servagem has quit IRC | 18:01 | |
openstackgerrit | Carlos Goncalves proposed openstack/octavia master: Remove amp_image_id option https://review.opendev.org/737591 | 18:07 |
*** servagem has joined #openstack-lbaas | 18:10 | |
*** gcheresh has quit IRC | 18:12 | |
*** spatel has quit IRC | 18:29 | |
*** aannuusshhkkaa has joined #openstack-lbaas | 19:08 | |
cgoncalves | rm_work, could you please review https://review.opendev.org/#/c/737460/ (small patch)? it's a gate blocker for openstacksdk | 19:26 |
rm_work | done | 19:29 |
cgoncalves | thanks | 19:30 |
*** gcheresh has joined #openstack-lbaas | 19:47 | |
*** yamamoto has joined #openstack-lbaas | 20:07 | |
*** servagem has quit IRC | 20:09 | |
*** yamamoto has quit IRC | 20:11 | |
*** also_stingrayza has joined #openstack-lbaas | 20:35 | |
*** stingrayza has quit IRC | 20:37 | |
*** vishalmanchanda has quit IRC | 20:54 | |
*** shtepanie has joined #openstack-lbaas | 21:11 | |
shtepanie | johnsom are you available to discuss something right now? | 21:12 |
johnsom | Sure | 21:12 |
shtepanie | we (aannuusshhkkaa and rm_work) are looking at the second part of the interface refactor. we're looking at the update_health functions and we're second guessing if it's possible to do, and if so, what work could be done on it? | 21:14 |
shtepanie | it may not need to be a driver? | 21:14 |
johnsom | Are you talking about the "status" part of the health manager? | 21:15 |
rm_work | yeah | 21:15 |
rm_work | it seems like most of what it's doing is ... very integral to the system working at all | 21:15 |
rm_work | it does way more than just update the DB with statuses too -- it even deletes amps | 21:16 |
johnsom | Yeah, I don't think it needs to be a driver really. At least not now. The Octavia control plane/API are responsible for managing the status of objects. | 21:16 |
rm_work | yeah, it's kinda core, not a third-party thing | 21:16 |
rm_work | BUT, i guess possibly the driver exists because we rely on being able to no-op it? | 21:16 |
johnsom | Yeah, it does. In the future it will probably need to do notifications too, but we can ignore that for now. | 21:16 |
rm_work | yeah I assume the notifications task can handle that | 21:17 |
johnsom | Umm, hmm, I don't *think* we can no-op out just the status code. | 21:17 |
*** gcheresh has quit IRC | 21:17 | |
johnsom | We are driver crazy, but maybe not *that* crazy | 21:18 |
rm_work | i mean it actually already does? | 21:18 |
rm_work | need to see if we actually set it as no-op in gates | 21:18 |
rm_work | but there already is a "logging" driver for both | 21:18 |
johnsom | Yeah, I thought it was bundled with stats. So you swap out all or none for logging | 21:19 |
johnsom | (I think logging might be the no-op there) | 21:19 |
rm_work | yes | 21:19 |
johnsom | So, I guess what I am getting at is I think it would be fine to split the two. Make metrics driver based and make status processing static. | 21:20 |
rm_work | however thinking about it, I believe that in a no-op testing situation, by virtue of no-oping the compute driver, there is never any health message, and therefore that code is unreachable anyway | 21:21 |
johnsom | Obviously status has to stay behind the thread/process pool, but doesn't rally need to be loaded/dynamic | 21:21 |
rm_work | so maybe it doesn't NEED a noop | 21:21 |
johnsom | Right | 21:21 |
rm_work | k i think that should be an acceptable approach | 21:21 |
johnsom | +1 | 21:21 |
rm_work | and lets us get rid of the other kinda broken interface bits | 21:21 |
rm_work | thanks :D | 21:22 |
openstackgerrit | Merged openstack/octavia master: Add missing reload method in amphora noop driver https://review.opendev.org/737460 | 21:28 |
*** TrevorV has quit IRC | 21:35 | |
*** TMM has quit IRC | 21:54 | |
*** TMM has joined #openstack-lbaas | 21:54 | |
*** born2bake has quit IRC | 22:41 | |
*** born2bake has joined #openstack-lbaas | 22:50 | |
*** tkajinam has joined #openstack-lbaas | 22:53 | |
*** rcernin has joined #openstack-lbaas | 23:02 | |
*** rcernin has quit IRC | 23:08 | |
*** rcernin has joined #openstack-lbaas | 23:08 | |
*** yamamoto has joined #openstack-lbaas | 23:10 | |
*** born2bake has quit IRC | 23:13 | |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Fix devstack cleanup keypair delete https://review.opendev.org/737657 | 23:13 |
*** yamamoto has quit IRC | 23:42 | |
*** armax has quit IRC | 23:59 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!