opendevreview | Gregory Thiemonge proposed openstack/octavia master: Reduce duration of failovers with amphora in ERROR https://review.opendev.org/c/openstack/octavia/+/893536 | 06:51 |
---|---|---|
opendevreview | Gregory Thiemonge proposed openstack/octavia master: Fix amphorae in ERROR during the failover https://review.opendev.org/c/openstack/octavia/+/893612 | 06:51 |
opendevreview | Gregory Thiemonge proposed openstack/octavia-tempest-plugin master: WIP Add active/standby failover scenario with 2 amps down https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/894255 | 07:15 |
opendevreview | Gregory Thiemonge proposed openstack/octavia-tempest-plugin master: WIP Add active/standby failover scenario with 2 amps down https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/894255 | 08:09 |
opendevreview | Gregory Thiemonge proposed openstack/octavia-tempest-plugin master: Add tests for additional VIPs https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/664462 | 12:00 |
skraynev | @gthiemonge : hi. if you will find a time, could you please review: https://review.opendev.org/c/openstack/octavia/+/883063 | 12:51 |
skraynev | I added tests to demonstrate new behaviour. API tests were not changed to show, that this change is backward compatible with API schema for members | 12:52 |
gthiemonge | skraynev: sure, I'll look at it | 13:13 |
skraynev | @gthiemonge : thank you | 13:14 |
opendevreview | Takashi Kajinami proposed openstack/octavia master: Remove invalid network driver entry point https://review.opendev.org/c/openstack/octavia/+/894303 | 14:00 |
opendevreview | OpenStack Release Bot proposed openstack/octavia-lib stable/2023.2: Update .gitreview for stable/2023.2 https://review.opendev.org/c/openstack/octavia-lib/+/894331 | 14:54 |
opendevreview | OpenStack Release Bot proposed openstack/octavia-lib stable/2023.2: Update TOX_CONSTRAINTS_FILE for stable/2023.2 https://review.opendev.org/c/openstack/octavia-lib/+/894332 | 14:54 |
opendevreview | OpenStack Release Bot proposed openstack/octavia-lib master: Update master for stable/2023.2 https://review.opendev.org/c/openstack/octavia-lib/+/894333 | 14:54 |
opendevreview | OpenStack Release Bot proposed openstack/python-octaviaclient stable/2023.2: Update .gitreview for stable/2023.2 https://review.opendev.org/c/openstack/python-octaviaclient/+/894334 | 14:54 |
opendevreview | OpenStack Release Bot proposed openstack/python-octaviaclient stable/2023.2: Update TOX_CONSTRAINTS_FILE for stable/2023.2 https://review.opendev.org/c/openstack/python-octaviaclient/+/894336 | 14:54 |
opendevreview | OpenStack Release Bot proposed openstack/python-octaviaclient master: Update master for stable/2023.2 https://review.opendev.org/c/openstack/python-octaviaclient/+/894337 | 14:54 |
spatel | johnsom Hey! | 16:45 |
spatel | what is the difference between TERMINATED_HTTPS vs HTTPS in horizon octavia GUI? | 16:45 |
johnsom | HTTPS is pass through (basically just TCP flow, but some smarter handling). TERMINATED_HTTPS is where the Amphora is handling the encryption/decryption | 16:46 |
spatel | cool | 16:48 |
spatel | Does barbican has horizon UI for end user? | 16:48 |
johnsom | https://opendev.org/openstack/barbican-ui | 16:49 |
dmendiza[m] | spatel johnsom unfortunately that repo is just a skeleton. There is currently no GUI for Barbican | 16:52 |
spatel | oh god.. | 16:52 |
spatel | How does other people using to import SSL cert.. ? | 16:52 |
spatel | its painful to explain this to customer.. lol | 16:53 |
spatel | I am getting this error - Forbidden: Secret(s) retrieval attempt not allowed - please review your user/project privileges | 17:28 |
spatel | I did add openstack role add --user spatel --project myproject creator | 17:28 |
spatel | what else I need to do to give end user permission | 17:28 |
johnsom | That should be it I think. Maybe ask in #openstack-barbican | 17:30 |
johnsom | Do you maybe just need to get a fresh token? | 17:31 |
spatel | I did obtain fresh token after assigning user | 17:31 |
spatel | Let me check something | 17:33 |
spatel | Damn it! I found it.. they user was part of multiple projects.. now it works | 17:34 |
johnsom | +1 | 17:36 |
spatel | johnsom one more question, currently I am doing - openstack role add --project myproject --user spatel load-balancer_member | 17:45 |
spatel | each user I am assigning this permission.. | 17:46 |
spatel | Is there a way I can say just give permission to each user whatever we create? | 17:46 |
spatel | default LB permssion | 17:46 |
johnsom | Yeah, using the advanced RBAC. Sure, you can add that role to the default user group | 17:47 |
johnsom | https://docs.openstack.org/octavia/latest/configuration/policy.html#keystone-group-roles | 17:54 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!