| *** itlinux_ has joined #openstack-trove | 00:04 | |
| *** rcernin has quit IRC | 00:07 | |
| *** itlinux has quit IRC | 00:07 | |
| *** rcernin has joined #openstack-trove | 01:05 | |
| *** minmin has joined #openstack-trove | 01:14 | |
| *** itlinux_ has quit IRC | 01:26 | |
| *** itlinux has joined #openstack-trove | 01:30 | |
| *** minmin has quit IRC | 01:33 | |
| *** minmin has joined #openstack-trove | 01:48 | |
| *** itlinux has quit IRC | 01:56 | |
| minmin | Hello All, cloud anyone help to review https://review.opendev.org/#/c/660968/, this bug blocks trove-specs Zuul verified. | 01:59 |
|---|---|---|
| *** itlinux has joined #openstack-trove | 02:04 | |
| lxkong | minmin: done, thanks for the fix | 02:04 |
| lxkong | minmin: i saw you've proposed a trove spec, just didn't get a chance to take a look | 02:05 |
| lxkong | on my todo list | 02:05 |
| *** altlogbot_3 has quit IRC | 02:12 | |
| minmin | Thanks very much. I am interesting in Trove project and hope to do more contribution :) | 02:14 |
| *** altlogbot_1 has joined #openstack-trove | 02:14 | |
| openstackgerrit | Merged openstack/trove-specs master: docs: Resolve issues with Sphinx 2.0 https://review.opendev.org/660968 | 02:14 |
| lxkong | minmin: may i ask which company or cloud you're working for? | 02:14 |
| lxkong | and your motivation of trove contribution? | 02:14 |
| minmin | I am from china unicom, we did some development on trove kilo version and are trying to switch to Rocky release. As a personal, I did some trove development for private cloud production in my last company, but I am not good at community contribution and connection. | 02:24 |
| lxkong | minmin: thanks for the info, that's helpful | 02:26 |
| goldyfruit | We did 15 commits on Trove during the Queens cycle \o/ | 02:27 |
| goldyfruit | We had to fix the single tenant | 02:28 |
| lxkong | minmin, goldyfruit, i have been working on enabling the multi tenant deployment in devstack for some time, the CI still complains, need more time | 02:29 |
| lxkong | i hope i could finish that within this cycle | 02:29 |
| goldyfruit | No problem :) | 02:29 |
| lxkong | minmin: how did you deploy Trove in your production? All the tenants share the Neutron network? | 02:31 |
| minmin | we use the proxy network, the trove instance have two nics tenant network and proxy network. | 02:36 |
| lxkong | minmin: you customzed the trove guest image? | 02:37 |
| lxkong | proxy network, i guess it's communicating with control plane, right? | 02:38 |
| minmin | correct. I am not a network expert and don't know more details. | 02:39 |
| lxkong | minmin: thats all right, that's the same direction with what i am proposing | 02:39 |
| goldyfruit | We are doing the same | 02:39 |
| lxkong | goldyfruit: may i have more details from you? | 02:40 |
| lxkong | goldyfruit: wait, you've also deployed Trove in production? | 02:40 |
| goldyfruit | Yes | 02:40 |
| goldyfruit | Trove, Zun, Ironic, Magnum, Octavia | 02:40 |
| lxkong | Wow | 02:41 |
| goldyfruit | For Trove we have 2 networks, one for Trove that is used by the guest-agent to reach the RabbitMQ | 02:41 |
| goldyfruit | Not routable, no internet access on this network | 02:42 |
| goldyfruit | And a second network which is the tenant one | 02:42 |
| lxkong | goldyfruit: how do you config the networks inside the guest vm? | 02:42 |
| *** gmann has joined #openstack-trove | 02:42 | |
| lxkong | so it doesn't conflict with the tenant network | 02:42 |
| goldyfruit | The Trove network is a provider network | 02:42 |
| goldyfruit | The tenant network is a VxLAN | 02:43 |
| goldyfruit | No conflict, just make sure you don't have a gateway on each Neutron network | 02:43 |
| goldyfruit | Only the tenant network should have one | 02:43 |
| minmin | we keep the network CIDR for proxy network and don't allow the customers use them. | 02:44 |
| goldyfruit | Yeah, tenant network is only visible from service project | 02:44 |
| lxkong | minmin: yeah, that's the last resort solution for me | 02:44 |
| goldyfruit | And of course, user doesn't have SSH access to the Trove instance | 02:45 |
| lxkong | `make sure you don't have a gateway on each Neutron network`, i don't understand here. So inside the guest VM, there are 2 nics, right? What does the routing table looks like? | 02:46 |
| lxkong | then trove-manager sends requests to the agent on control plane, how does the data packet return back without a gateway? | 02:47 |
| goldyfruit | The instance is attached to two Neutron network, database network which is a provider network without gateway, tenant network which has a gateway (qrouter) | 02:47 |
| lxkong | i'm not network expert neither, but interested | 02:47 |
| goldyfruit | We have routes on the controller node | 02:47 |
| goldyfruit | provider network is neutron vlan network | 02:48 |
| goldyfruit | this vlan is tagged on our switches | 02:48 |
| lxkong | i mean, inside the agent vm | 02:48 |
| lxkong | when a packet on the control plane returns back from the guest VM | 02:49 |
| goldyfruit | We added a route to the neutron subnet too | 02:49 |
| lxkong | because the default gateway is the tenant network gateway | 02:49 |
| goldyfruit | The route inside the Neutron subnet says, if you need to go to the internal network then go via the database network | 02:50 |
| goldyfruit | our network guy create the routing on the switches | 02:51 |
| goldyfruit | Nothing to configure inside the inside | 02:51 |
| goldyfruit | instance* | 02:51 |
| lxkong | hmm.. i need time to understand that :-) | 02:51 |
| goldyfruit | In your trove.conf you have to configure the default-network which is the database network that Trove will use for the guest agent | 02:55 |
| goldyfruit | default_neutron_networks = NETWORK-UUID | 02:55 |
| lxkong | yesh | 02:55 |
| lxkong | i changed that config option name to `management_networks` :-) | 02:56 |
| minmin | I am personal devstack development env, I will `socat` to forward the guest VM nework to controller service | 02:56 |
| minmin | In my personal devstack development env, I will `socat` to forward the guest VM nework to controller service | 02:57 |
| lxkong | minmin: `socat ` inside the guest VM? | 02:57 |
| lxkong | or on the devstack host? | 02:57 |
| minmin | no, in tenant network namespace | 02:58 |
| lxkong | i was supposed to do that using policy routing | 02:58 |
| minmin | I use 169.254.169.254, It's similar to nova metadata proxy | 02:59 |
| lxkong | minmin: do you mind to paste me some commands for what you've done? | 03:00 |
| minmin | ip netns exec qdhcp-91fa504c-5d39-4dc9-b8e0-59d28d1986a7 socat -lpsocat-91fa504c-5d39-4dc9-b8e0-59d28d1986a7 TCP4-LISTEN:5672,fork UNIX-CONNECT:/var/lib/neutron/rabbitmq.sock | 03:02 |
| lxkong | minmin: thanks | 03:02 |
| lxkong | i guess i will be busy during the weekend :-) | 03:02 |
| lxkong | i need to learn some networking stuff | 03:02 |
| minmin | this command is to forward 169.254.169.254:5672 network traffic to unix socket | 03:03 |
| minmin | 169.254.169.254 is routable for guest vm and in dhcp namespace | 03:03 |
| minmin | socat UNIX-LISTEN:/var/lib/neutron/rabbitmq.sock,fork TCP4-CONNECT:controller:5672 | 03:03 |
| minmin | this command is to forward from unix socket to controller 5672 (rabbitmq) | 03:04 |
| minmin | in guest.conf 169.254.169.254 is rabbitmq server ip | 03:05 |
| openstackgerrit | renminmin proposed openstack/trove-specs master: Spec of volume data snapshot backup type https://review.opendev.org/660929 | 03:15 |
| *** goldyfruit has quit IRC | 03:25 | |
| *** itlinux has quit IRC | 03:40 | |
| *** itlinux has joined #openstack-trove | 03:44 | |
| *** itlinux has quit IRC | 04:03 | |
| *** itlinux has joined #openstack-trove | 04:07 | |
| *** itlinux has quit IRC | 04:42 | |
| *** itlinux has joined #openstack-trove | 04:50 | |
| *** itlinux has quit IRC | 05:04 | |
| *** itlinux has joined #openstack-trove | 05:05 | |
| *** pcaruana has joined #openstack-trove | 05:08 | |
| *** pcaruana has quit IRC | 05:16 | |
| *** pcaruana has joined #openstack-trove | 05:17 | |
| *** itlinux has quit IRC | 05:44 | |
| openstackgerrit | inspurericzhang proposed openstack/trove-tempest-plugin master: Replace git.openstack.org URLs with opendev.org URLs https://review.opendev.org/661196 | 06:31 |
| *** minmin has quit IRC | 07:11 | |
| *** minmin has joined #openstack-trove | 07:12 | |
| *** gmann has quit IRC | 07:28 | |
| *** rcernin has quit IRC | 07:36 | |
| *** tosky has joined #openstack-trove | 08:10 | |
| *** trident has quit IRC | 08:33 | |
| *** trident has joined #openstack-trove | 08:34 | |
| *** tesseract has joined #openstack-trove | 08:48 | |
| *** tesseract has quit IRC | 09:56 | |
| *** tesseract has joined #openstack-trove | 09:59 | |
| *** tesseract has quit IRC | 10:00 | |
| *** tesseract has joined #openstack-trove | 10:01 | |
| *** gmann has joined #openstack-trove | 11:02 | |
| *** tesseract has quit IRC | 11:10 | |
| *** Reepicheep has quit IRC | 11:47 | |
| *** Reepicheep has joined #openstack-trove | 11:49 | |
| *** Reepicheep has quit IRC | 11:52 | |
| *** Reepicheep has joined #openstack-trove | 11:53 | |
| *** jamesmcarthur has joined #openstack-trove | 12:52 | |
| *** goldyfruit has joined #openstack-trove | 13:06 | |
| *** jamesmcarthur has quit IRC | 14:24 | |
| *** jamesmcarthur has joined #openstack-trove | 14:55 | |
| *** jamesmcarthur has quit IRC | 14:59 | |
| *** genevievenantel_ has joined #openstack-trove | 15:00 | |
| *** genevievenantel has joined #openstack-trove | 15:01 | |
| *** itlinux has joined #openstack-trove | 15:03 | |
| *** jamesmcarthur has joined #openstack-trove | 15:05 | |
| *** jamesmcarthur has quit IRC | 15:11 | |
| *** itlinux has quit IRC | 15:15 | |
| *** itlinux has joined #openstack-trove | 15:17 | |
| *** jamesmcarthur has joined #openstack-trove | 15:19 | |
| *** itlinux has quit IRC | 15:19 | |
| *** itlinux has joined #openstack-trove | 15:21 | |
| *** jamesmcarthur has quit IRC | 15:46 | |
| *** itlinux has quit IRC | 15:49 | |
| *** genevievenantel has left #openstack-trove | 15:49 | |
| *** itlinux has joined #openstack-trove | 15:50 | |
| *** itlinux has quit IRC | 15:55 | |
| *** jamesmcarthur has joined #openstack-trove | 15:55 | |
| *** jamesmcarthur has quit IRC | 16:02 | |
| *** jamesmcarthur has joined #openstack-trove | 16:03 | |
| *** itlinux has joined #openstack-trove | 16:31 | |
| *** jamesmcarthur has quit IRC | 16:34 | |
| *** itlinux has quit IRC | 17:01 | |
| *** itlinux has joined #openstack-trove | 17:15 | |
| *** itlinux has quit IRC | 17:16 | |
| *** itlinux has joined #openstack-trove | 17:20 | |
| *** itlinux_ has joined #openstack-trove | 17:21 | |
| *** itlinux has quit IRC | 17:25 | |
| *** itlinux_ has quit IRC | 17:47 | |
| *** pcaruana has quit IRC | 17:53 | |
| *** pcaruana has joined #openstack-trove | 18:48 | |
| *** pcaruana has quit IRC | 18:48 | |
| *** tosky has quit IRC | 19:16 | |
| *** jamesmcarthur has joined #openstack-trove | 22:12 | |
| *** jamesmcarthur has quit IRC | 22:19 | |
| *** goldyfruit has quit IRC | 22:32 | |
| *** jamesmcarthur has joined #openstack-trove | 22:50 | |
| *** goldyfruit has joined #openstack-trove | 22:56 | |
| *** jamesmcarthur has quit IRC | 22:57 | |
| *** rcernin has joined #openstack-trove | 23:05 | |
| *** rcernin has quit IRC | 23:11 | |
| *** goldyfruit has quit IRC | 23:20 | |
| *** jamesmcarthur has joined #openstack-trove | 23:33 | |
| *** jamesmcarthur has quit IRC | 23:37 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!