| *** salv-orlando has joined #openstack-kuryr | 00:22 | |
| *** yuanying has joined #openstack-kuryr | 01:00 | |
| *** yuanying_ has quit IRC | 01:04 | |
| *** yuanying_ has joined #openstack-kuryr | 01:04 | |
| *** yuanying has quit IRC | 01:05 | |
| *** caowei has joined #openstack-kuryr | 01:37 | |
| *** hongbin has joined #openstack-kuryr | 01:50 | |
| *** yuanying_ has quit IRC | 02:01 | |
| *** yuanying has joined #openstack-kuryr | 02:04 | |
| *** wangbo has joined #openstack-kuryr | 02:11 | |
| *** kiennt has joined #openstack-kuryr | 02:20 | |
| *** wangbo has quit IRC | 02:41 | |
| *** wangbo has joined #openstack-kuryr | 02:44 | |
| *** wangbo has quit IRC | 03:10 | |
| *** wangbo has joined #openstack-kuryr | 03:15 | |
| *** gouthamr has quit IRC | 03:49 | |
| *** janki has joined #openstack-kuryr | 04:10 | |
| *** hongbin has quit IRC | 04:11 | |
| *** wangbo has quit IRC | 04:21 | |
| *** salv-orlando has quit IRC | 04:37 | |
| *** caowei has quit IRC | 04:57 | |
| *** wangbo has joined #openstack-kuryr | 04:57 | |
| *** salv-orlando has joined #openstack-kuryr | 05:09 | |
| *** aojea has joined #openstack-kuryr | 05:16 | |
| *** caowei has joined #openstack-kuryr | 05:37 | |
| *** aojea has quit IRC | 05:41 | |
| openstackgerrit | 张东杰 proposed openstack/kuryr-kubernetes master: Configure kuryr-cni："bindir = /path/to/env/libexec/kuryr",route description is not suitable；"bindir = {path_to_env}/libexec/kuryr" is suitable in "Configure kuryr-k8s-controller" https://review.openstack.org/499461 | 05:46 |
|---|---|---|
| *** aojea has joined #openstack-kuryr | 05:50 | |
| openstackgerrit | 张东杰 proposed openstack/kuryr-kubernetes master: Configure kuryr-cni："bindir = /path/to/env/libexec/kuryr",route description is not suitable；"bindir = {path_to_env}/libexec/kuryr" is suitable in "Configure kuryr-k8s-controller" https://review.openstack.org/499461 | 06:01 |
| *** aojea has quit IRC | 06:07 | |
| *** aojea has joined #openstack-kuryr | 06:07 | |
| *** aojea has quit IRC | 06:12 | |
| *** pcaruana has joined #openstack-kuryr | 06:22 | |
| openstackgerrit | 张东杰 proposed openstack/kuryr-kubernetes master: "Install kuryr-cni a virtualenv"->"Install kuryr-cni in a virtualenv" https://review.openstack.org/499472 | 06:41 |
| *** yboaron has joined #openstack-kuryr | 06:42 | |
| openstackgerrit | 张东杰 proposed openstack/kuryr-kubernetes master: "Install kuryr-cni a virtualenv"->"Install kuryr-cni in a virtualenv" https://review.openstack.org/499472 | 06:42 |
| *** livelace has joined #openstack-kuryr | 06:45 | |
| openstackgerrit | 张东杰 proposed openstack/kuryr-kubernetes master: "Install kuryr-cni a virtualenv"->"Install kuryr-cni in a virtualenv" https://review.openstack.org/499472 | 06:47 |
| ltomasbo | hi apuimedo | 07:09 |
| ltomasbo | I've checked how octavia l2 handles the traffic towards the loadbalancer | 07:10 |
| ltomasbo | and a new security group is created for each lbaas | 07:10 |
| ltomasbo | so, I think the addition needs to be done on code, rather than devstack | 07:11 |
| ltomasbo | any thoughts? | 07:16 |
| *** aojea has joined #openstack-kuryr | 07:21 | |
| *** vikasc has quit IRC | 07:26 | |
| *** vikasc has joined #openstack-kuryr | 07:39 | |
| *** egonzalez has joined #openstack-kuryr | 07:45 | |
| openstackgerrit | Kien Nguyen proposed openstack/kuryr-libnetwork master: [WIP] Support specifying existing subnet uuid/name https://review.openstack.org/499493 | 07:54 |
| apuimedo | ltomasbo: I think it is weird | 08:10 |
| apuimedo | xD | 08:10 |
| ltomasbo | apuimedo, so, any other (better) solution in mind? | 08:12 |
| apuimedo | ltomasbo: you mean that you need to create a rule in the SG of the octavia port? | 08:13 |
| apuimedo | cause if that is the case, it is very strange indeed | 08:13 |
| ltomasbo | I meant that, when you expose a service | 08:14 |
| ltomasbo | a new amphora is created | 08:14 |
| ltomasbo | and the port in the k8s-service-net has a newly created (by octavia) security group | 08:15 |
| ltomasbo | so that happen at run time and not while deploying the environment | 08:15 |
| *** openstackgerrit has quit IRC | 08:17 | |
| apuimedo | and which rule do you need to add? | 08:29 |
| ltomasbo | apuimedo, that is what I'm checking | 08:35 |
| ltomasbo | I'm digging | 08:36 |
| ltomasbo | I see the amphora VM has 3 connection, and the one in the k8s-service-subnet is the vrrp one | 08:36 |
| ltomasbo | then, the lbaas port (also in k8s-service-subnet) also has the same security group, the newly created | 08:36 |
| ltomasbo | lb-XXXX | 08:37 |
| ltomasbo | so, I'm assuming I need to add a rule to that one allowing traffic from k8s-pod-subnet | 08:37 |
| *** vikasc has quit IRC | 08:37 | |
| ltomasbo | apuimedo, this is what this sg includes: http://paste.openstack.org/show/619990/ | 08:39 |
| apuimedo | ltomasbo: what I'm saying is, try to create the rule manually, see if you get it to work | 08:40 |
| apuimedo | then report which rule (and to which group) fixed it | 08:40 |
| ltomasbo | ok | 08:40 |
| ltomasbo | I'll find the solution, and then we discuss how/where to add it | 08:40 |
| ltomasbo | my point was that most probably we need to do it in code, rather than devstack as it is being created at service exposing time | 08:41 |
| apuimedo | depends on where it falls | 08:42 |
| ltomasbo | yep | 08:42 |
| ltomasbo | my concern is that port 80 is already included, not sure why it is not working | 08:42 |
| ltomasbo | I'll dig a big more... | 08:42 |
| *** garyloug has joined #openstack-kuryr | 08:49 | |
| apuimedo | :-) | 08:50 |
| apuimedo | ltomasbo: you're starting to see why I excluded L2 | 08:50 |
| apuimedo | I just couldn't figure it out in a day | 08:50 |
| ltomasbo | yep | 08:51 |
| apuimedo | got mad and rage quit | 08:51 |
| ltomasbo | yesterday I was thinking, this was soo easy | 08:51 |
| ltomasbo | how come apuimedo didn't included both directly | 08:51 |
| ltomasbo | now I see why | 08:51 |
| ltomasbo | I added ping, ssh and port 80, and still no connectivity... tcpdump to the rescue... | 08:51 |
| apuimedo | ltomasbo: ovs firewall or hybrid? | 08:52 |
| ltomasbo | it is the default one, so hybrid | 08:53 |
| ltomasbo | maybe I should change to firewall | 08:53 |
| apuimedo | ltomasbo: what I meant to say is | 08:54 |
| apuimedo | you can try to flush the iptables | 08:54 |
| apuimedo | and see if it works | 08:54 |
| apuimedo | :P | 08:54 |
| ltomasbo | I see ping from container to the amphora VM arrives to the amphora tap on k8s-service-subnet | 08:55 |
| ltomasbo | so, it should not be iptables (at least not on the server, perhaps inside the VM) | 08:55 |
| ltomasbo | apuimedo, icmp request reaches amphora VM tap device, but not the amphora-haproxy namespace inside the amphoraVM | 09:04 |
| ltomasbo | apuimedo, wait, it does reach the namespace! http://paste.openstack.org/show/620003/ | 09:07 |
| apuimedo | ltomasbo: ain't it nice how tcpdump in the namespace is somehow delayed? | 09:17 |
| ltomasbo | yep, I would like to have live output instead of having to stop it | 09:19 |
| apuimedo | xD | 09:23 |
| ltomasbo | apuimedo, and iptables in the namespace are empty, I wonder why this is not working... | 09:23 |
| apuimedo | it's retarded | 09:23 |
| apuimedo | I wonder what causes it | 09:23 |
| apuimedo | (the delay) | 09:23 |
| ltomasbo | no idea | 09:31 |
| *** vikasc has joined #openstack-kuryr | 09:50 | |
| *** wangbo has quit IRC | 09:52 | |
| *** wangbo has joined #openstack-kuryr | 10:02 | |
| *** wangbo has quit IRC | 10:25 | |
| *** wangbo has joined #openstack-kuryr | 10:58 | |
| *** wangbo has quit IRC | 10:59 | |
| *** salv-orlando has quit IRC | 11:00 | |
| *** wangbo has joined #openstack-kuryr | 11:01 | |
| *** salv-orlando has joined #openstack-kuryr | 11:36 | |
| *** garyloug has quit IRC | 11:39 | |
| *** aojea has quit IRC | 11:56 | |
| apuimedo | ltomasbo: any advance on octavia l2? | 12:06 |
| *** kiennt has quit IRC | 12:14 | |
| *** garyloug has joined #openstack-kuryr | 12:20 | |
| *** yboaron_ has joined #openstack-kuryr | 12:29 | |
| *** yboaron has quit IRC | 12:32 | |
| ltomasbo | no, I did not find the reason for traffic dropping | 12:33 |
| *** wangbo has quit IRC | 12:46 | |
| apuimedo | ltomasbo: nmagnezi neither? | 12:46 |
| ltomasbo | I think I didn't explain myself enough, and he only checked what is was working (qrouter namespace to service, not pod to service) | 12:47 |
| *** wangbo has joined #openstack-kuryr | 12:48 | |
| apuimedo | :-) | 12:52 |
| *** yboaron_ has quit IRC | 12:52 | |
| apuimedo | ltomasbo: I call this the curse of the reference implementaiton | 12:52 |
| apuimedo | you all like it a bit too much to go to the qrouter namespace | 12:52 |
| ltomasbo | :D | 12:53 |
| *** yboaron_ has joined #openstack-kuryr | 12:53 | |
| *** salv-orlando has quit IRC | 12:54 | |
| *** wangbo has quit IRC | 12:57 | |
| *** gouthamr has joined #openstack-kuryr | 13:18 | |
| *** salv-orlando has joined #openstack-kuryr | 13:33 | |
| *** garyloug has quit IRC | 13:40 | |
| *** yboaron_ has quit IRC | 13:52 | |
| *** vikasc has quit IRC | 14:05 | |
| *** hongbin has joined #openstack-kuryr | 14:07 | |
| *** garyloug has joined #openstack-kuryr | 14:37 | |
| *** janki has quit IRC | 14:55 | |
| *** salv-orlando has quit IRC | 15:08 | |
| *** salv-orlando has joined #openstack-kuryr | 15:21 | |
| *** pcaruana has quit IRC | 15:32 | |
| *** vikasc has joined #openstack-kuryr | 15:32 | |
| *** salv-orlando has quit IRC | 15:35 | |
| *** vikasc has quit IRC | 15:50 | |
| *** egonzalez has quit IRC | 16:02 | |
| *** salv-orlando has joined #openstack-kuryr | 16:36 | |
| *** garyloug has quit IRC | 16:40 | |
| *** salv-orlando has quit IRC | 16:41 | |
| *** aojea has joined #openstack-kuryr | 17:07 | |
| *** aojea has quit IRC | 17:10 | |
| *** aojea has joined #openstack-kuryr | 17:10 | |
| *** aojea has quit IRC | 17:19 | |
| *** aojea has joined #openstack-kuryr | 17:20 | |
| *** aojea has quit IRC | 17:24 | |
| *** salv-orlando has joined #openstack-kuryr | 17:37 | |
| *** salv-orlando has quit IRC | 17:41 | |
| *** livelace has quit IRC | 18:24 | |
| *** salv-orlando has joined #openstack-kuryr | 18:38 | |
| *** salv-orlando has quit IRC | 18:43 | |
| *** salv-orlando has joined #openstack-kuryr | 19:39 | |
| *** salv-orlando has quit IRC | 19:43 | |
| *** egonzalez has joined #openstack-kuryr | 19:54 | |
| *** salv-orlando has joined #openstack-kuryr | 20:39 | |
| *** salv-orlando has quit IRC | 20:45 | |
| *** egonzalez has quit IRC | 21:38 | |
| *** salv-orlando has joined #openstack-kuryr | 21:40 | |
| *** salv-orlando has quit IRC | 21:45 | |
| *** openstackgerrit has joined #openstack-kuryr | 22:07 | |
| openstackgerrit | Hongbin Lu proposed openstack/kuryr-libnetwork master: [WIP] Make capability_scope configurable in devstack https://review.openstack.org/499827 | 22:07 |
| *** gouthamr has quit IRC | 22:08 | |
| *** aojea has joined #openstack-kuryr | 22:20 | |
| *** aojea has quit IRC | 22:25 | |
| *** salv-orlando has joined #openstack-kuryr | 22:29 | |
| *** aojea has joined #openstack-kuryr | 22:37 | |
| *** jgriffith has quit IRC | 22:43 | |
| *** jgriffith has joined #openstack-kuryr | 22:44 | |
| openstackgerrit | Hongbin Lu proposed openstack/kuryr-libnetwork master: Change config file directory in gate https://review.openstack.org/499844 | 22:47 |
| *** aojea has quit IRC | 22:58 | |
| *** aojea has joined #openstack-kuryr | 22:58 | |
| *** vikasc has joined #openstack-kuryr | 22:59 | |
| *** salv-orlando has quit IRC | 23:01 | |
| *** salv-orlando has joined #openstack-kuryr | 23:02 | |
| *** aojea has quit IRC | 23:03 | |
| *** salv-orlando has quit IRC | 23:06 | |
| *** salv-orlando has joined #openstack-kuryr | 23:06 | |
| *** hongbin has quit IRC | 23:22 | |
| *** salv-orlando has quit IRC | 23:23 | |
| *** salv-orlando has joined #openstack-kuryr | 23:23 | |
| *** salv-orlando has quit IRC | 23:28 | |
| *** yamamoto_ has joined #openstack-kuryr | 23:31 | |
| *** yamamoto_ has quit IRC | 23:31 | |
| *** yamamot__ has joined #openstack-kuryr | 23:31 | |
| *** salv-orlando has joined #openstack-kuryr | 23:47 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!