Wednesday, 2021-02-03

*** ianychoi__ has joined #openstack-lbaas00:14
*** ianychoi_ has quit IRC00:17
*** sapd1 has joined #openstack-lbaas01:24
*** zzzeek has quit IRC02:12
*** zzzeek has joined #openstack-lbaas02:12
*** rcernin has quit IRC02:37
*** rcernin has joined #openstack-lbaas02:51
*** xgerman has quit IRC03:52
*** lemko2 has joined #openstack-lbaas04:28
*** lemko has quit IRC04:29
*** lemko2 is now known as lemko04:29
*** ramishra has quit IRC05:29
*** ramishra has joined #openstack-lbaas05:29
*** ramishra has quit IRC05:30
*** ramishra has joined #openstack-lbaas05:30
*** ramishra has quit IRC05:32
*** ramishra has joined #openstack-lbaas05:32
*** lemko has quit IRC05:46
*** lemko7 has joined #openstack-lbaas05:46
*** sapd1 has quit IRC05:54
*** ramishra has quit IRC05:55
*** ramishra has joined #openstack-lbaas05:55
*** rcernin has quit IRC06:08
*** rcernin has joined #openstack-lbaas06:08
*** rcernin has quit IRC06:17
*** rcernin has joined #openstack-lbaas06:17
*** rcernin has quit IRC06:17
*** rcernin has joined #openstack-lbaas06:19
*** gcheresh has joined #openstack-lbaas06:26
*** sapd1 has joined #openstack-lbaas06:49
*** dasp has joined #openstack-lbaas07:00
*** dasp_ has quit IRC07:01
*** ccamposr__ has joined #openstack-lbaas07:10
*** ccamposr has quit IRC07:13
*** vishalmanchanda has joined #openstack-lbaas07:33
*** sapd1 has quit IRC07:37
openstackgerritGregory Thiemonge proposed openstack/octavia-tempest-plugin master: Add new scenario test to create LB in specific AZ
*** sapd1 has joined #openstack-lbaas07:42
*** psachin has joined #openstack-lbaas08:11
*** rpittau|afk is now known as rpittau08:41
openstackgerritGregory Thiemonge proposed openstack/octavia-tempest-plugin master: Add new scenario test to create LB in specific AZ
*** psachin has quit IRC09:40
*** psachin has joined #openstack-lbaas09:44
*** yamamoto_ has quit IRC10:04
*** psachin has quit IRC10:04
*** rcernin has quit IRC10:24
*** sshnaidm|afk is now known as sshnaidm|ruck10:35
*** rcernin has joined #openstack-lbaas10:55
rm_workeugh well I ALMOST made it to a Wednesday with the right sleep schedule to be awake for the meeting...11:15
rm_workI'll try :)11:15
*** rcernin has quit IRC11:15
*** yamamoto has joined #openstack-lbaas11:23
*** yamamoto has quit IRC11:46
*** sapd1 has quit IRC11:49
*** yamamoto has joined #openstack-lbaas12:00
*** rcernin has joined #openstack-lbaas12:01
*** sapd1 has joined #openstack-lbaas12:33
openstackgerritAnn Taraday proposed openstack/octavia master: Add option to set default ssl ciphers in haproxy
*** rcernin has quit IRC12:43
*** sapd1 has quit IRC13:10
*** sapd1 has joined #openstack-lbaas13:22
openstackgerritGregory Thiemonge proposed openstack/octavia-tempest-plugin master: DNM WIP Trying to fix two-node job
*** bcafarel has quit IRC14:58
*** bcafarel has joined #openstack-lbaas14:59
mchlumskyHi there folks! Just wanted to report that we found a solution to our host route on the vip-subnet issue that we hit after the upgrade to ussuri. Switching to using a bionic image instead of centos 8 did it. Thanks for helping me troubleshoot this  issue johnsom15:25
*** sapd1 has quit IRC15:26
johnsomHmmm, we should open a story (bug) against the centos 8 support not working with host routes15:27
mchlumskySure, I'll write it up15:27
mchlumskyAre both CentOS 8 and Ubuntu Bionic officially supproted? I got the feeling Ubuntu was "favored" but I see centos 8 tests in zuul too so not 100% sure15:29
johnsomYes, CentOS8 and bionic/focal15:29
standMaybe documentation should be updated as well, it says "Current support is with an Ubuntu base OS and HAProxy". It's a bit confusing if CentOS images are considered as supported as well15:34
johnsomIt follows the OpenStack supported platforms definition:
johnsom#startmeeting Octavia16:01
openstackMeeting started Wed Feb  3 16:01:10 2021 UTC and is due to finish in 60 minutes.  The chair is johnsom. Information about MeetBot at
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:01
*** openstack changes topic to " (Meeting topic: Octavia)"16:01
openstackThe meeting name has been set to 'octavia'16:01
johnsom#chair rm_work16:01
openstackCurrent chairs: johnsom rm_work16:01
johnsomHi everyone16:01
johnsom#topic Announcements16:02
*** openstack changes topic to "Announcements (Meeting topic: Octavia)"16:02
johnsomMy weekly nag about the upcoming feature freeze:16:02
johnsomFinal client release is first week in March16:02
johnsomFeature freeze for everything else is the second week in March16:02
johnsomAny other announcements this week?16:02
*** sapd1 has joined #openstack-lbaas16:03
johnsom#topic Brief progress reports / bugs needing review16:03
*** openstack changes topic to "Brief progress reports / bugs needing review (Meeting topic: Octavia)"16:03
johnsomI am mostly focused on TripleO things currently, so a bit distracted. Mostly just doing reviews and helping folks with questions, etc.16:04
gthiemongeHey, FYI I cleaned up and have updated the Priority Review list16:04
johnsomOh, nice!16:04
johnsomYep, quite the list, but we have done it before!16:05
gthiemongelots of merge conflicts, I don't know whether the owners will update their patches16:06
johnsomThank you gthiemonge!16:06
johnsomFeel free to ask folks on IRC.16:06
* johnsom notes he probably has a few in that category as well16:06
johnsomAny other updates this week?16:08
johnsom#topic vip_subnet_id access bug (gthiemonge)16:09
*** openstack changes topic to "vip_subnet_id access bug (gthiemonge) (Meeting topic: Octavia)"16:09
johnsomYou have the floor....16:09
gthiemongeSo a bug was reported this week: a user can create a load balancer plugged into the subnet of another user, by using the subnet UUID16:10
gthiemongethere was an attempt to fix it in the past, but only the vip_network_id and vip_port_id were fixed16:11
gthiemongeI have a small patch that fixes this issue:
gthiemongebasically it verifies that the user provided vip_subnet_id belongs to the user16:12
gthiemongebut this patch triggers an interesting bug in octavia-tempest-plugin16:12
johnsomThank you for the patch16:12
gthiemongeoctavia-tempest-plugin uses a private subnet that is owned by the admin user for its IPv6 VIP test16:13
gthiemongeso now, tempest is failing because it cannot create an IPv6 LB16:13
gthiemongeI would like to have your opinion about that16:14
gthiemongeif someone sees a way to fix or to work around this issue16:14
johnsomAh, yeah, we preference the IPv6 subnet that the tempest framework creates. I think this is because tempest also makes sure that subnet is routable (but I might be remembering that part wrong).16:14
haleybgthiemonge: can we do the obvious and create an ipv6 subnet owned by the user?16:14
gthiemongehaleyb: yeah this is what I was thinking about16:15
johnsomYeah, that might be the right answer16:15
gthiemongehaleyb: we can create it in the octavia-tempest-plugin's devstack file16:15
gthiemongeit needs to be routable16:16
johnsomIt should be created in the tempest plugin setup so it is removed correctly and is present for runs outside of devstack.16:16
haleybcan we create it right there in that code?  just rip-out the private check?16:16
johnsomit would go in here:16:17
gthiemongebut we need to add a route from the tempest controller to the ipv6 subnet16:17
johnsomYeah, that is going to be the tricky part really.16:17
johnsomIt may require a change in tempest proper16:17
gthiemongeyes that's not easy16:18
johnsomThe question is really, should tempest be setting that IPv6 subnet to "shared"16:18
gthiemongejohnsom: the name of the network is "private"16:18
johnsomIn that case the user would have access16:18
johnsomYeah, but private networks can be marked as "shared" too....16:19
gthiemongeyes, but I guess the intent is to have a non-shared private network :D16:19
johnsomIs there a "public" ipv6 we should be using instead?16:20
johnsomI vaguely remember there was a tempest bug that caused only that private network to be routable, so the tests failed when using public16:20
gthiemongethere is a public ipv6 network16:20
johnsomSo, maybe give that a go and see if it works, if so, public is probably the right answer anyway. I think we use public for the IPv4 test VIPs16:22
gthiemongeok, I'm going to try the public network16:22
haleybthere is an ipv6-public-subnet by default in devstack, but it's not directly viewable by a user16:22
gthiemongeit will probably fix the tests in devstack, but octavia-tempest-plugin might start failing with other deployment tools16:23
haleybi still don't understand why we can't just create a lb_member_vip_ipv6_subnet, someone will have to hit me with the clue bat16:24
haleybwe already create an ipv4 one...16:24
gthiemongehaleyb: we are sending requests to the VIP address from the devstack node, so the ipv6 address have to be routable16:24
gthiemongehaleyb: it would require an explicity 'ip route add' call16:25
haleyboh, because the ipv4 one is for floating IPs?16:25
gthiemongeyes, we have FIPs for ipv416:25
johnsomOur plugin should not be messing with the test host routes, that should be managed by tempest, etc.16:25
* haleyb has smoke coming out his ears trying to think about an IPv6 fix16:27
johnsomWell, if the public subnet doesn't work, maybe take the root of that issue to the qa team for ideas.16:28
johnsompublic is supposed to be reachable from the tempest tests16:28
gthiemongeok Guys, I will explore the many options we have listed here16:29
gthiemongethank you16:29
gthiemongeI'll probably ping haleyb ;-)16:29
johnsom#topic Open Discussion16:29
*** openstack changes topic to "Open Discussion (Meeting topic: Octavia)"16:29
haleybjust don't ask for floating IPv6 :)16:29
johnsomAny other topics today?16:29
johnsomhaleyb That is easy, it's a no-op. grin16:30
gthiemongenothing here16:30
haleybnothing from me16:31
johnsomOk then, thanks for joining and the conversation. Have a great week!16:32
*** openstack changes topic to "Discussions for OpenStack Octavia | Priority bug review list:"16:32
openstackMeeting ended Wed Feb  3 16:32:31 2021 UTC.  Information about MeetBot at . (v 0.1.4)16:32
openstackMinutes (text):
gthiemongethanks johnsom16:32
openstackgerritGregory Thiemonge proposed openstack/octavia-tempest-plugin master: Fix two-node job configuration
*** sapd1 has quit IRC16:50
*** sshnaidm|ruck is now known as sshnaidm16:52
*** rpittau is now known as rpittau|afk18:08
*** rcernin has joined #openstack-lbaas19:49
*** rcernin has quit IRC20:20
*** rcernin has joined #openstack-lbaas20:20
*** sshnaidm is now known as sshnaidm|afk20:52
*** xgerman has joined #openstack-lbaas21:08
*** gcheresh has quit IRC21:20
*** rcernin has quit IRC21:22
*** rouk has joined #openstack-lbaas21:52
roukjohnsom: was there a bug in train that caused things like.... this to work?21:52
roukgot a user complaining that we "broke the api", as theyre getting "insert-headers is not a valid option for a TCP protocol listener.", which sounds right, but theres tcp listeners in my db which are marked for x-forwarded-for somehow. the code all the way back to stein doesnt look different.21:53
johnsomrouk I'm not sure I understand the question21:53
johnsomAh, yeah, just a second, I think someone worked on that recently21:54
roukim unsure how a tcp listener could do x-forwarded-for, and the code seems to not allow it, even looking back to 201921:54
roukthe current behavior seems like what id expect, but i just wonder how it allowed it before.21:57
rouknice, this is exactly what i needed.21:58
roukalso explains why it looked fine in stable/train, we were running an older unpatched version at the time.21:58
johnsomIt is also included in the release notes.21:58
johnsomYou could open a bug against us to have an upgrade check for that.21:59
roukwell, whats an invalid listener... do... exactly? they claim it worked before, but how could you add a header to tcp.21:59
johnsomYeah, according to the story, it accepted it, but then ignored it.21:59
rouksilently do nothing, is what id expect. yeah21:59
*** rcernin has joined #openstack-lbaas22:05
*** ccamposr has joined #openstack-lbaas22:05
*** rcernin has quit IRC22:06
*** rcernin has joined #openstack-lbaas22:07
*** ccamposr__ has quit IRC22:08
*** openstackgerrit has quit IRC22:11
*** vishalmanchanda has quit IRC22:30
*** rcernin has quit IRC22:45

Generated by 2.17.2 by Marius Gedminas - find it at!