*** jamiem has quit IRC | 00:07 | |
*** banix has joined #openstack-lbaas | 00:14 | |
*** vivek-ebay has quit IRC | 00:16 | |
*** vivek-ebay has joined #openstack-lbaas | 00:16 | |
*** amotoki has joined #openstack-lbaas | 00:19 | |
*** banix has quit IRC | 00:26 | |
*** xgerman has quit IRC | 00:29 | |
*** mlavalle has quit IRC | 00:39 | |
*** banix has joined #openstack-lbaas | 00:56 | |
*** vivek-ebay has quit IRC | 01:05 | |
*** vivek-ebay has joined #openstack-lbaas | 01:05 | |
openstackgerrit | min wang proposed stackforge/octavia: Add the config file for nova compute drive https://review.openstack.org/163240 | 01:09 |
---|---|---|
*** woodster_ has quit IRC | 01:10 | |
*** mwang2_ has quit IRC | 01:16 | |
*** banix has quit IRC | 01:31 | |
openstackgerrit | Merged openstack/neutron-lbaas: Fixes session persistence validation error https://review.openstack.org/163644 | 01:33 |
*** banix has joined #openstack-lbaas | 01:42 | |
*** woodster_ has joined #openstack-lbaas | 01:43 | |
*** madhu_ has joined #openstack-lbaas | 01:47 | |
openstackgerrit | Phillip Toohill proposed openstack/neutron-lbaas: TLS capability extension implementation for lbaas v2 https://review.openstack.org/145085 | 01:48 |
openstackgerrit | Phillip Toohill proposed openstack/neutron-lbaas: LBaaS reference implementation driver to support TLS https://review.openstack.org/145151 | 01:49 |
openstackgerrit | Pattabi Ayyasami proposed openstack/neutron-lbaas: Brocade Driver for lbaas v2 data model https://review.openstack.org/147074 | 01:53 |
*** Aish has left #openstack-lbaas | 01:59 | |
*** madhu_ has quit IRC | 02:06 | |
*** vivek-ebay has quit IRC | 02:28 | |
*** bharath has quit IRC | 02:32 | |
*** Aish has joined #openstack-lbaas | 02:56 | |
*** Aish has left #openstack-lbaas | 03:00 | |
*** sbalukoff has quit IRC | 03:02 | |
*** fnaval has quit IRC | 03:03 | |
*** fnaval has joined #openstack-lbaas | 03:10 | |
openstackgerrit | Merged openstack/neutron-lbaas: Hooks for lbaasv2 api tempest job https://review.openstack.org/162757 | 03:11 |
*** banix has quit IRC | 03:18 | |
*** banix has joined #openstack-lbaas | 03:19 | |
openstackgerrit | Phillip Toohill proposed openstack/neutron-lbaas: TLS capability extension implementation for lbaas v2 https://review.openstack.org/145085 | 03:28 |
openstackgerrit | Phillip Toohill proposed openstack/neutron-lbaas: LBaaS reference implementation driver to support TLS https://review.openstack.org/145151 | 03:28 |
*** banix has quit IRC | 04:11 | |
*** intr1nsic has joined #openstack-lbaas | 04:23 | |
openstackgerrit | Merged openstack/neutron-lbaas: Validate health_monitor id when associating to pool https://review.openstack.org/163680 | 04:26 |
openstackgerrit | Pattabi Ayyasami proposed openstack/neutron-lbaas: Brocade Driver for lbaas v2 data model https://review.openstack.org/147074 | 04:29 |
*** blogan_ has joined #openstack-lbaas | 04:36 | |
*** sbalukoff has joined #openstack-lbaas | 04:39 | |
*** enikanorov has quit IRC | 04:43 | |
*** enikanorov has joined #openstack-lbaas | 04:43 | |
openstackgerrit | Pattabi Ayyasami proposed openstack/neutron-lbaas: Brocade Driver for lbaas v2 data model https://review.openstack.org/147074 | 04:44 |
*** blogan_ has quit IRC | 04:46 | |
*** blogan_ has joined #openstack-lbaas | 05:01 | |
openstackgerrit | Phillip Toohill proposed openstack/neutron-lbaas: LBaaS reference implementation driver to support TLS https://review.openstack.org/145151 | 05:15 |
*** blogan_ has quit IRC | 05:54 | |
*** blogan_ has joined #openstack-lbaas | 05:56 | |
*** bharath has joined #openstack-lbaas | 06:02 | |
*** fnaval has quit IRC | 06:02 | |
*** blogan_ has quit IRC | 06:04 | |
*** bharath has quit IRC | 06:06 | |
*** bharath has joined #openstack-lbaas | 06:10 | |
*** kobis has joined #openstack-lbaas | 06:21 | |
*** blogan_ has joined #openstack-lbaas | 06:27 | |
*** kobis has quit IRC | 06:31 | |
*** amotoki has quit IRC | 06:43 | |
*** amotoki has joined #openstack-lbaas | 06:49 | |
*** blogan_ has quit IRC | 07:22 | |
*** apuimedo has joined #openstack-lbaas | 08:41 | |
*** bharath has quit IRC | 08:56 | |
*** woodster_ has quit IRC | 09:00 | |
*** BrianShang has joined #openstack-lbaas | 09:00 | |
*** apuimedo has quit IRC | 09:19 | |
*** apuimedo has joined #openstack-lbaas | 09:27 | |
*** kobis has joined #openstack-lbaas | 10:08 | |
*** kobis has quit IRC | 10:38 | |
*** kobis has joined #openstack-lbaas | 11:02 | |
*** kobis has quit IRC | 11:11 | |
*** kobis has joined #openstack-lbaas | 11:12 | |
*** kobis has quit IRC | 11:16 | |
*** bharath has joined #openstack-lbaas | 11:57 | |
*** woodster_ has joined #openstack-lbaas | 11:59 | |
*** amotoki has quit IRC | 11:59 | |
*** bharath has quit IRC | 12:01 | |
*** apuimedo has quit IRC | 12:13 | |
*** banix has joined #openstack-lbaas | 12:48 | |
*** amotoki has joined #openstack-lbaas | 13:09 | |
*** rohara1 has quit IRC | 13:09 | |
*** BrianShang_ has joined #openstack-lbaas | 13:11 | |
*** BrianShang has quit IRC | 13:13 | |
*** jamiem has joined #openstack-lbaas | 13:15 | |
*** apuimedo has joined #openstack-lbaas | 13:18 | |
*** banix has quit IRC | 13:22 | |
*** banix has joined #openstack-lbaas | 13:36 | |
*** rohara has joined #openstack-lbaas | 13:37 | |
*** banix has quit IRC | 13:52 | |
openstackgerrit | Merged openstack/neutron-lbaas: Install HAProxy 1.5 on Ubuntu Devstack https://review.openstack.org/164864 | 14:42 |
*** fnaval has joined #openstack-lbaas | 14:56 | |
*** SumitNaiksatam has joined #openstack-lbaas | 15:00 | |
*** banix has joined #openstack-lbaas | 15:13 | |
*** xgerman has joined #openstack-lbaas | 15:16 | |
*** fnaval has quit IRC | 15:16 | |
*** fnaval has joined #openstack-lbaas | 15:17 | |
*** crc32 has joined #openstack-lbaas | 15:17 | |
*** crc32 has quit IRC | 15:18 | |
*** crc32 has joined #openstack-lbaas | 15:19 | |
*** vivek-ebay has joined #openstack-lbaas | 15:20 | |
*** fnaval has quit IRC | 15:21 | |
openstackgerrit | Trevor Vardeman proposed openstack/neutron-lbaas: Change default cert manager to barbican https://review.openstack.org/164890 | 15:24 |
ptoohill | Updated: https://review.openstack.org/#/c/163682/1 | 15:27 |
*** crc32 has quit IRC | 15:28 | |
xgerman | dougwig, blogan: ajmiller is still working on stats... do you think they can still make it? | 15:30 |
*** Santosh has joined #openstack-lbaas | 15:31 | |
Santosh | I have query with respect to Load Balancer's Status Tree retrieval . (https://wiki.openstack.org/wiki/Neutron/LBaaS/API_2.0#Retrieve_a_specific_Load_Balancer.27s_Status_Tree) Is there any specific requirement so that we are returning entities statuses in nested tree? Isn't is simpler to return status in flat order. I can see duplication of entity status with tree. For example if same pool is associated with two listeners( | 15:31 |
*** fnaval has joined #openstack-lbaas | 15:33 | |
*** vivek-ebay has quit IRC | 15:37 | |
ptoohill | https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer | 15:43 |
ptoohill | TrevorV: and those that may have missed it yesterday ^^^ | 15:43 |
*** kobis has joined #openstack-lbaas | 15:44 | |
dougwig | xgerman: if they're ready today | 15:45 |
*** mlavalle has joined #openstack-lbaas | 15:46 | |
xgerman | ok, sounds good | 15:49 |
*** Aish has joined #openstack-lbaas | 15:50 | |
*** ajmiller has joined #openstack-lbaas | 15:52 | |
fnaval | nice doc ptoohill - i'll give it a try later today | 15:56 |
*** madhu_ has joined #openstack-lbaas | 15:57 | |
ptoohill | fnaval, let me know i can walk through it with you so i can get feedback if theres any | 15:57 |
fnaval | yep, i'll probably pull you in later | 15:58 |
ptoohill | good deal | 15:58 |
sballe | Morning | 15:58 |
ptoohill | Mornin' | 15:59 |
rm_work | ptoohill: i'm editing your wiki page a little bit | 15:59 |
ptoohill | uhoh | 15:59 |
rm_work | formatting stuff, and notes on Barbican | 15:59 |
rm_work | that is all | 15:59 |
ptoohill | kk | 15:59 |
rm_work | very nice doc :P | 15:59 |
ptoohill | :P | 15:59 |
TrevorV | Your mom has nice docs | 15:59 |
ptoohill | itll change once things get merged, bug fixes etc :) | 16:00 |
rm_work | yeah | 16:00 |
rm_work | biggest thing is getting rid of all the $ on the openssl commands | 16:00 |
rm_work | so you can copy/paste the whole thing easily :P | 16:00 |
rm_work | was trying to copy/paste and was like GAH | 16:01 |
*** jorgem has joined #openstack-lbaas | 16:01 | |
*** mwang2 has joined #openstack-lbaas | 16:01 | |
*** barclaac has joined #openstack-lbaas | 16:03 | |
*** localloop127 has joined #openstack-lbaas | 16:03 | |
ptoohill | rm_work, haha, i thought about that too and dislike having it there but thought since others were doing it i NEEDED to :/ | 16:05 |
rm_work | yeah screw what OTHERS are doing, just do it the convenient way, if they don't like it they'll switch it back :P | 16:06 |
*** amotoki has quit IRC | 16:06 | |
*** barclaac|2 has quit IRC | 16:07 | |
openstackgerrit | Phillip Toohill proposed openstack/neutron-lbaas: Fixes barbican cert manager to support v2/v3 auth https://review.openstack.org/164063 | 16:07 |
rm_work | ptoohill: actually, so, python-barbicanclient if you pull down latest should change a couple of things | 16:08 |
rm_work | one, the base64 encode isn't necessary anymore | 16:08 |
rm_work | and two, you shouldn't actually NEED to specify content-type now | 16:08 |
ptoohill | agreed, i can remove that chunk now! | 16:08 |
rm_work | just leave it out | 16:08 |
ptoohill | ah, awesome! | 16:08 |
rm_work | it does autodetection | 16:08 |
ptoohill | :D | 16:08 |
rm_work | so if you want to fix that section | 16:08 |
ptoohill | these are good changes! Yep ill take care of those when youre finished messing with it | 16:09 |
rm_work | err, test it first :P | 16:09 |
ptoohill | :P | 16:09 |
ptoohill | maybe, let the readers test :D | 16:09 |
ptoohill | trial and error >< | 16:09 |
ptoohill | j/k ill set things back up and verify that and make updates to it in a bit | 16:10 |
*** barclaac|2 has joined #openstack-lbaas | 16:12 | |
*** kunjathi has joined #openstack-lbaas | 16:15 | |
*** barclaac has quit IRC | 16:15 | |
blogan | Santosh: you asked the question about the nested tree? | 16:20 |
*** Aish has quit IRC | 16:21 | |
Santosh | Yes | 16:21 |
*** madhu_ has quit IRC | 16:21 | |
Santosh | 18] == openstack changed the topic of #openstack-meeting-4 to: OpenStack Meetings [03:19] <@openstack> Meeting ended Tue Mar 17 16:18:58 2015 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) [03:19] <@openstack> Minutes: http://eavesdrop.openstack.org/meetings/neutron_lbaas/2015/neutron_lbaas.2015-03-17-15.59.html [03:19] <dougwig> /by/bye/ [03:19] <@openstack> Minutes (text): http://eav | 16:21 |
Santosh | Is there any specific requirement so that we are returning entities statuses in nested tree? Isn't is simpler to return status in flat order. I can see duplication of entity status with tree. For example if same pool is associated with two listeners(when listener,pool n:1 mapping is implemented ,restriction is removed) same pool status will appear twice with mentioned listeners in statuses tree. | 16:22 |
*** vivek-ebay has joined #openstack-lbaas | 16:22 | |
blogan | Santosh: the reason we dont want to put the status on the pool entity itself is if a pool is associated with two listeners. That pool could fail provisioning on one listener and succeed on another, and the operating status of the pool could be different as well | 16:23 |
*** crc32 has joined #openstack-lbaas | 16:23 | |
Santosh | I am also doing changes for netscaler v2 driver for async tracking including statuses tree | 16:24 |
dougwig | Santosh: unless you're almost done, i'd focus on the basic object functionality, addressing blogan's comments, getting your CI commenting, and getting the version in gerrit revved. there's likely a few iterations left on the core stuff. | 16:26 |
Santosh | It bit late but i was going through the tempest api test , For listener create we are not waiting for status | 16:26 |
*** bharath has joined #openstack-lbaas | 16:26 | |
Santosh | listener create could be a async operation . | 16:28 |
*** barclaac has joined #openstack-lbaas | 16:30 | |
blogan | Santosh: it waits for load balancer status, and checks that listener status goes back to ACTIVE | 16:31 |
openstackgerrit | Phillip Toohill proposed openstack/neutron-lbaas: Fixes barbican cert manager to support v2/v3 auth https://review.openstack.org/164063 | 16:31 |
Santosh | But it is not checking down the status tree for listener | 16:32 |
blogan | Santosh: what do you mean? | 16:32 |
*** barclaac|2 has quit IRC | 16:32 | |
*** mwang2 has quit IRC | 16:34 | |
*** barclaac has quit IRC | 16:34 | |
Santosh | After creating listener should we wait for listener provisioning status be ACTIVE ( could be get from statuses tree) | 16:34 |
*** barclaac has joined #openstack-lbaas | 16:34 | |
blogan | Santosh: wait for load baalcner provisioning status to be ACTIVE, then verify that listener provisioning status is ACTIVE | 16:36 |
blogan | Santosh: but you can wait for listener provisioning status to be ACTIVE, but the gatekeeper is the load balancer provisioning status | 16:36 |
Santosh | But we are not verifying listener provisioning status is ACTIVE | 16:36 |
Santosh | In the tempest v2 listener test | 16:37 |
blogan | Santosh: i see many calls to self._check_status_tree helper method | 16:37 |
*** SumitNaiksatam has quit IRC | 16:40 | |
*** enikanorov has quit IRC | 16:40 | |
*** enikanorov has joined #openstack-lbaas | 16:41 | |
Santosh | in init it is missing | 16:41 |
Santosh | In test_pool.py in create pool | 16:42 |
*** kobis has quit IRC | 16:42 | |
blogan | Santosh: yeah now that doesn't, that should be fixed | 16:43 |
Santosh | it has only self._wait_for_load_balancer_status(self.load_balancer.get('id')) . We should have added _check_status_tree | 16:44 |
blogan | Santosh: agreed | 16:44 |
*** kobis has joined #openstack-lbaas | 16:49 | |
*** BrianShang_ has quit IRC | 16:51 | |
*** BrianShang has joined #openstack-lbaas | 16:52 | |
*** kobis1 has joined #openstack-lbaas | 16:56 | |
*** kobis has quit IRC | 16:57 | |
*** kobis1 has quit IRC | 17:01 | |
*** xgerman has quit IRC | 17:01 | |
*** xgerman has joined #openstack-lbaas | 17:01 | |
*** sbfox has joined #openstack-lbaas | 17:03 | |
*** Aish has joined #openstack-lbaas | 17:04 | |
*** kobis has joined #openstack-lbaas | 17:05 | |
*** barclaac has quit IRC | 17:05 | |
*** madhu_ has joined #openstack-lbaas | 17:06 | |
*** ajmiller_ has joined #openstack-lbaas | 17:06 | |
*** barclaac has joined #openstack-lbaas | 17:06 | |
*** ajmiller has quit IRC | 17:07 | |
*** jorgem has quit IRC | 17:08 | |
*** barclaac has quit IRC | 17:17 | |
*** barclaac has joined #openstack-lbaas | 17:20 | |
*** barclaac|2 has joined #openstack-lbaas | 17:21 | |
*** barclaac has quit IRC | 17:25 | |
*** localloo1 has joined #openstack-lbaas | 17:27 | |
*** localloop127 has quit IRC | 17:31 | |
*** localloo1 is now known as localloop127 | 17:34 | |
*** kobis has quit IRC | 17:52 | |
*** banix has quit IRC | 18:04 | |
*** vivek-ebay has quit IRC | 18:06 | |
*** vivek-ebay has joined #openstack-lbaas | 18:06 | |
*** sbfox has quit IRC | 18:13 | |
openstackgerrit | Carlos Garza proposed openstack/neutron-lbaas: Implemented dynamic loadbalancer status tree https://review.openstack.org/161052 | 18:17 |
*** Aish has quit IRC | 18:19 | |
*** jorgem has joined #openstack-lbaas | 18:23 | |
*** sbfox has joined #openstack-lbaas | 18:36 | |
*** Aish has joined #openstack-lbaas | 18:38 | |
blogan | xgerman, johnsom: have a chance to talk about your comments in this review: https://review.openstack.org/#/c/161052/ | 18:40 |
xgerman | give us 5 minutes | 18:40 |
johnsom | +1 | 18:40 |
blogan | xgerman: sure | 18:40 |
*** vivek-ebay has quit IRC | 18:41 | |
johnsom | dougwig: blogan wants to talk about the degraded status I asked you about, so you might want to join this conversation | 18:41 |
*** vivek-ebay has joined #openstack-lbaas | 18:42 | |
dougwig | johnsom: here | 18:42 |
*** SumitNaiksatam has joined #openstack-lbaas | 18:43 | |
johnsom | blogan what did you want to discuss? | 18:43 |
dougwig | johnsom: sounds like you and blogan were agreeing, it's just that OFFLINE is overloaded and not always due to admin action. | 18:43 |
blogan | johnsom: just clarifying, you dont want an OFFLINE status in a child to cause a DEGRADED status in its parent? | 18:44 |
blogan | dougwig: +1 | 18:44 |
blogan | johnsom: well i'm saying admin_state_up won't put the operating_status in OFFLINE status | 18:44 |
blogan | setting that to Fale i mean | 18:44 |
blogan | false | 18:44 |
dougwig | i think we agree that an admin marking a node offline should not trigger DEGRADED. now it's down to what it looks like when that happens, right? | 18:45 |
xgerman | so admin_state down won't cause it to become OFFLINE? | 18:45 |
blogan | dougwig: i think so | 18:45 |
xgerman | dougwig +1 | 18:45 |
blogan | xgerman: taht is correct, i dont think two fields should change if a user disables an entity | 18:45 |
xgerman | well, if it's DOWN it can't be ONLINE | 18:46 |
xgerman | that feels weird | 18:46 |
dougwig | xgerman: +1 | 18:46 |
blogan | xgerman: yeah thats definitely an issue | 18:46 |
johnsom | Yeah, with admin state down we don't want the customer to see ONLINE right? | 18:47 |
blogan | but changing two fields because a user disables is just as weird to me | 18:47 |
xgerman | +1 | 18:47 |
xgerman | well, setting it to DOWN should cause a Node to got offline | 18:47 |
johnsom | I think the admin state down flag helps explain to the user why it is in OFFLINE | 18:47 |
*** jorgem has quit IRC | 18:48 | |
blogan | hmm thats a good way to look at it, makes me feel less weird about it | 18:48 |
blogan | ok carlos or i will push up a new ps | 18:49 |
blogan | ill go with the lesser of two evils here | 18:49 |
dougwig | big giant violent agreement. | 18:49 |
johnsom | Cool! | 18:49 |
xgerman | +1 | 18:50 |
blogan | i wouldn't say there was agreement, there was disagreement and then i slowly cam eto the dark side | 18:50 |
openstackgerrit | Phillip Toohill proposed openstack/neutron-lbaas: Fixes barbican cert manager to support v2/v3 auth https://review.openstack.org/164063 | 18:50 |
johnsom | grin | 18:50 |
xgerman | blogan, I wouldn't call our side the dark side | 18:50 |
rm_work | xgerman: re-review ptoohill's commit there ^^ fixed the tests | 18:51 |
blogan | xgerman: my side is always the light side, all others are dark | 18:51 |
xgerman | lol | 18:51 |
*** jamiem has quit IRC | 18:52 | |
*** jorgem has joined #openstack-lbaas | 19:06 | |
*** sbfox has quit IRC | 19:16 | |
*** vivek-ebay has quit IRC | 19:26 | |
*** vivek-ebay has joined #openstack-lbaas | 19:26 | |
dougwig | Tow yards are dark, yo. | 19:36 |
xgerman | towed again? | 19:41 |
*** sbfox has joined #openstack-lbaas | 19:41 | |
*** jorgem has quit IRC | 19:43 | |
*** jorgem has joined #openstack-lbaas | 19:44 | |
*** banix has joined #openstack-lbaas | 19:44 | |
*** jorgem has quit IRC | 20:06 | |
*** jorgem has joined #openstack-lbaas | 20:11 | |
*** jorgem1 has joined #openstack-lbaas | 20:14 | |
*** jorgem has quit IRC | 20:16 | |
*** madhu__ has joined #openstack-lbaas | 20:18 | |
*** vivek-ebay has quit IRC | 20:21 | |
fnaval | blogan: how do i delete a load balancer that is stuck in a PENDING_UPDATE state? | 20:21 |
ptoohill | fnaval, can update status in db and call delete, or delete from db | 20:24 |
fnaval | is there another way, from the user's perspective, without touching the db? ptoohill | 20:28 |
fnaval | oh, you mean to update the lb status ? | 20:28 |
fnaval | using the update load balancer call? | 20:29 |
ptoohill | not sure of another way, things shouldnt get stuck and usually means something else is going wrong and requires operator attention | 20:29 |
fnaval | which are valid statuses to delete from? | 20:29 |
ptoohill | no, i mean to update status in db directly | 20:29 |
fnaval | ah, should I file an issue | 20:30 |
ptoohill | ? | 20:30 |
ptoohill | If things are getting stuck i assume theres an issue we need to fix, so yes please | 20:30 |
fnaval | is it a bug that i'm not able to delete a LB that is in PENDING_UPDATE provisioning status? | 20:30 |
blogan | no | 20:31 |
blogan | no thats nto a bug | 20:31 |
blogan | the bug is it getting stuck in PENDING_UPDATE | 20:31 |
fnaval | ah ok. | 20:31 |
blogan | fnaval: could you look in the neutron-server logs and find out where exactly it went wrong? | 20:31 |
fnaval | where is that kept | 20:31 |
blogan | fnaval: in the q-svc in screen | 20:33 |
*** mugu has quit IRC | 20:35 | |
fnaval | hmm.. i'm seeing some HTTPBadRequest issues | 20:36 |
ptoohill | ill come over | 20:36 |
fnaval | https://gist.github.com/fnaval/6f8f6367cf6e34335cfb | 20:36 |
madhu_ | I am seeing that hrrpbadrequest issues as well in q-svc screen when running test_loadbalancer.py tests | 20:37 |
madhu_ | httpbadrequest* | 20:37 |
xgerman | yep, looks like one of the negative tests we are about to write | 20:38 |
blogan | lol ROUNDED | 20:41 |
blogan | i like that algorithm | 20:41 |
blogan | round to the nearest pool member | 20:41 |
openstackgerrit | Merged openstack/neutron-lbaas: TLS capability extension implementation for lbaas v2 https://review.openstack.org/145085 | 20:42 |
blogan | madhu_: that causes the LB to get stuck in PENDING_UPDATE? | 20:43 |
rm_work | nice ptoohill :P | 20:44 |
johnsom | I am running through the doc: how-to-create-tls-loadbalancer and have hit an issue: | 20:48 |
johnsom | stack@tlsdevstack:/var/lib$ neutron lbaas-listener-create --loadbalancer lb1 --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container=$(barbican container list | awk '/ tls_container / {print $2}') | 20:48 |
johnsom | Starting new HTTP connection (1): localhost | 20:48 |
johnsom | Starting new HTTP connection (1): localhost | 20:48 |
johnsom | Unrecognized attribute(s) 'default_tls_container_id' | 20:48 |
rm_work | johnsom: hmm, TLS capability extension just merged | 20:49 |
rm_work | so it should even be available on master now | 20:49 |
rm_work | but only JUST now | 20:49 |
johnsom | Yeah, I followed the page and pulled patchsets | 20:50 |
rm_work | hmm | 20:50 |
*** mugu has joined #openstack-lbaas | 20:50 | |
rm_work | ptoohill is afk | 20:50 |
rm_work | he should be back soon | 20:50 |
*** kunjathi has quit IRC | 20:52 | |
johnsom | Yeah, ok, he missed a patchset in the docs. | 20:54 |
*** vivek-ebay has joined #openstack-lbaas | 20:54 | |
*** mestery has quit IRC | 20:55 | |
johnsom | Hmm, no, nevermind I have that patchset. | 20:55 |
ptoohill | need to get the client johnsom ? | 20:56 |
ptoohill | er, the client patch | 20:56 |
johnsom | I have this one: https://review.openstack.org/#/c/161404/ | 20:56 |
ptoohill | yea that should be it, have you 'sudo python setup.py install' in the python-neutronclient? | 20:58 |
johnsom | It looks like that is coming back from the server: | 20:58 |
ptoohill | cant tell if thats a client or lbaas errror from whats pasted | 20:58 |
johnsom | DEBUG: keystoneclient.session RESP: | 20:58 |
johnsom | DEBUG: neutronclient.v2_0.client Error message: {"NeutronError": {"message": "Unrecognized attribute(s) 'default_tls_container_id'", "type": "HTTPBadRequest", "detail": ""}} | 20:58 |
ptoohill | it just seems one of the patches arent in | 20:58 |
ptoohill | yea, thats client error | 20:58 |
*** vivek-ebay has quit IRC | 20:58 | |
ptoohill | need to checkout that patch then setup the neutronclient | 20:58 |
madhu_ | blogan, yes it is | 20:59 |
*** mestery has joined #openstack-lbaas | 20:59 | |
johnsom | I will do it again just to make sure | 20:59 |
madhu_ | I do see that error sometimes, with now it behaving okay | 20:59 |
*** vivek-ebay has joined #openstack-lbaas | 20:59 | |
madhu_ | blogan ^^ | 20:59 |
ptoohill | sometimes the env can be flaky in regards to setting up the client since devstack uses the libs and doesnt actually download the clients | 21:00 |
ptoohill | may just be env issue in this case | 21:00 |
*** jorgem1 is now known as jorgem | 21:01 | |
johnsom | Nope, same error back from the server | 21:01 |
ptoohill | did you checkout the patch for neutron-lbaas and also setup.py that? | 21:01 |
ptoohill | that=neutron-lbaas | 21:01 |
johnsom | I followed the page exactly | 21:01 |
ptoohill | some things merged, though that really shouldnt cause issues like this. But, assuming youve checked out the patches, setup the projects and spelled everything correctly this shouldnt be an error | 21:02 |
johnsom | It's this driver that should work right? | 21:02 |
johnsom | service_provider=LOADBALANCERV2:Haproxy:neutron_lbaas.services.loadbalancer.drivers.haproxy.synchronous_namespace_driver.HaproxyNSDriver:default | 21:02 |
ptoohill | You can use that one | 21:03 |
ptoohill | or the agent | 21:03 |
ptoohill | but that error isnt from the driver | 21:03 |
ptoohill | its either the plugin/ext or the client | 21:03 |
ptoohill | and that stack trace/reponse looks like just the client is having issues | 21:04 |
johnsom | No, it's definitely coming back from the plugin | 21:04 |
johnsom | This is what it sent: | 21:05 |
johnsom | "default_tls_container_id": "http://localhost:9311/v1/containers/c9b41fe9-667a-4d2c-b535-7a17968d9a7f" | 21:05 |
johnsom | q-svc.log.2015-03-17-180113:2015-03-17 21:04:25.865 TRACE neutron.api.v2.resource HTTPBadRequest: Unrecognized attribute(s) 'default_tls_container_id' | 21:06 |
ptoohill | hmmm | 21:07 |
ptoohill | i just reset things up with those patches and i cant seem to duplicate this erorros | 21:07 |
ptoohill | AH | 21:07 |
ptoohill | did you restart the neutron-server? | 21:07 |
johnsom | Yep | 21:07 |
ptoohill | oh | 21:07 |
ptoohill | not quite sure what the problem could be then if youve done all those steps | 21:08 |
johnsom | 2015-03-17 21:04:25.865 TRACE neutron.api.v2.resource ESC[01;35mESC[00 | 21:08 |
johnsom | m File "/opt/stack/neutron/neutron/api/v2/base.py", line 654, in _verify_attrib | 21:08 |
johnsom | utes | 21:08 |
ptoohill | try with the agent | 21:10 |
johnsom | Can you paste me the string? | 21:10 |
ptoohill | its in the config, just needs to be uncommented | 21:10 |
johnsom | This one? | 21:11 |
johnsom | service_provider=LOADBALANCERV2:Haproxy:neutron_lbaas.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver:default | 21:11 |
ptoohill | yes | 21:11 |
ptoohill | if anything try cherry-picking the patch: https://review.openstack.org/#/c/145151/ | 21:11 |
ptoohill | and before you do that make sure your neutron-lbaasis up to date with master | 21:12 |
johnsom | same error | 21:12 |
ptoohill | you setup and restarted the srever after the driver change? | 21:12 |
*** mlavalle has quit IRC | 21:12 | |
johnsom | I restarted neutron | 21:13 |
ptoohill | try making sure master is up to date and cherry-pic the ref | 21:13 |
ptoohill | neutron-server | 21:13 |
ptoohill | the ref impl patch* | 21:13 |
johnsom | I can see that the repo I am installing from has 145151 in it. I wonder if the neutron code is the wrong version. | 21:14 |
ptoohill | Can you paste me the first two commits from git log? | 21:14 |
johnsom | commit 4d5851072b3d66747a994fa0d0670b86b81a34b7 | 21:15 |
johnsom | Author: ptoohill1 <phillip.toohill@rackspace.com> | 21:15 |
johnsom | Date: Wed Aug 20 03:44:48 2014 -0500 | 21:15 |
johnsom | LBaaS reference implementation driver to support TLS | 21:15 |
johnsom | Including plugin modifications for barbican container retrieval | 21:15 |
johnsom | Including template updates to support TLS and SNI | 21:15 |
johnsom | Including jinja_config updates to support storing of the container details | 21:15 |
ptoohill | not sure neutron being older would cause this issue. Its acting like you dont have the TLS code at all if the neutron-lbaas ext cant find tls | 21:15 |
johnsom | Including driver updates for data directory locations | 21:15 |
johnsom | Implement blueprint lbaas-ref-impl-tls-support | 21:15 |
johnsom | Change-Id: Ie6d09780bc6e617ca2be15ee2378f7f51f08218d | 21:15 |
johnsom | commit 0cc103564b6ddf881c76140a2c413fa9488ea9f6 | 21:15 |
johnsom | Author: Evgeny Fedoruk <evgenyf@radware.com> | 21:15 |
johnsom | Date: Wed Jul 23 09:39:14 2014 -0700 | 21:15 |
johnsom | TLS capability extension implementation for lbaas v2 | 21:15 |
johnsom | Including extension modifications | 21:15 |
johnsom | Including db model modifications | 21:15 |
ptoohill | hmm | 21:16 |
johnsom | The cert manager stuff is in there too | 21:16 |
johnsom | i.e. 164063 | 21:16 |
ptoohill | thats cherry picked on top of all of this? | 21:16 |
johnsom | yep | 21:16 |
ptoohill | which, that patch doesnt matter if you cant get past the plugin | 21:16 |
ptoohill | johnsom: make sure you are restarting the 'neutron-server' under q-svc and not the q-lbaasv2 | 21:24 |
ptoohill | q-lbaasv2 is just the agent | 21:25 |
johnsom | python /usr/local/bin/neutron-server --config-fi /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini & echo $! >/opt/stack/status/stack/q-svc.pid; fg || echo "q-svc failed to start" | tee "/opt/stack/status/stack/q-svc.failure" | 21:26 |
ptoohill | thats the right one to restart | 21:27 |
johnsom | That's what I have run to restart neutron | 21:27 |
ptoohill | typo? | 21:28 |
ptoohill | --config-fi? | 21:28 |
johnsom | It's what devstacck came with in the command buffer. It starts so must be finding it | 21:29 |
ptoohill | odd | 21:29 |
ptoohill | thats a typo for sure | 21:29 |
ptoohill | assuming its not a cp fail | 21:29 |
johnsom | Could be a screen issue cutting it off | 21:30 |
ptoohill | possible. Im unsure what to say at this point, had a couple others set it up and they ran into that issue but it was because they werent starting the right service (were doing lbaasv2 agent and not the server) | 21:31 |
johnsom | Something is wrong with that agent: | 21:33 |
johnsom | stack@tlsdevstack:~/logs$ neutron lbaas-loadbalancer-create $(neutron subnet-list | awk '/ private-subnet / {print $2}') --name lb2 | 21:33 |
johnsom | No eligible agent found for loadbalancer 332613d7-e8e2-49ba-898e-a7af3d32826e. | 21:33 |
johnsom | I didn't have that when I used the other driver | 21:33 |
blogan | johnsom: try restarting the agent | 21:36 |
johnsom | Didn't help the "No eligible agent found" issue | 21:38 |
blogan | is this a fresh stack? | 21:39 |
johnsom | Yeah, built this morning following https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer | 21:40 |
blogan | johnsom: and it pulled down a fresh neutron and neutron-lbaas repository? | 21:42 |
johnsom | I'm not sure on the neutron part, but the neutron-lbaas was fresh | 21:43 |
*** crc32 has quit IRC | 21:43 | |
johnsom | This one works: | 21:44 |
johnsom | service_provider=LOADBALANCERV2:Haproxy:neutron_lbaas.services.loadbalancer.drivers.haproxy.synchronous_namespace_driver.HaproxyNSDriver:default | 21:44 |
johnsom | This one does not: | 21:44 |
johnsom | service_provider=LOADBALANCERV2:Haproxy:neutron_lbaas.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver:default | 21:44 |
johnsom | By works, I can at least create the load balancer, then the TLS stuff throws an error | 21:45 |
*** BrianShang has quit IRC | 21:45 | |
blogan | yeah because it doesn't use an agent | 21:45 |
*** banix has quit IRC | 21:45 | |
blogan | but if the qlbaasv2 agent is set in localrc, and you're using the service_provider you mentioned above, then that has always worked, there have been times the agent's heartbeat stops for some reason and i get that same error message, but a restart of the agent fixes that | 21:46 |
*** BrianShang has joined #openstack-lbaas | 21:46 | |
blogan | i know ajmiller_ has gotten this working too | 21:47 |
blogan | and many here have too | 21:47 |
blogan | so its gotta be some weird issue that i acn't even fathom | 21:48 |
blogan | or its the something obvious that everyone looks over | 21:48 |
johnsom | haha, likely | 21:48 |
blogan | only otehr suggestion i have is pull master from neutron, and restart neutron-server | 21:49 |
ajmiller_ | johnsom, blogan, yes, I have had it working. | 21:49 |
blogan | if that doesn't work, wipe all of your stack directory and pull down a fresh devstack and restack | 21:49 |
ajmiller_ | Have you pulled the devstack patch https://review.openstack.org/#/c/161436/ | 21:50 |
ajmiller_ | ? | 21:50 |
blogan | ajmiller_: that shouldn't affect this | 21:51 |
ajmiller_ | OK | 21:51 |
blogan | ajmiller_: qlbaasv2 should still get started | 21:51 |
blogan | ajmiller_, johnsom: althoguht pulling that down doesn't hurt | 21:52 |
ajmiller_ | blogan the only reason I mention it is that essentially all my testing uses it... | 21:53 |
blogan | ajmiller_: ah i havent had to because i made sure that it being remvoed from devstack and having our devstack plugin together wouldn't cause issues | 21:53 |
ajmiller_ | OK, that sounds right. | 21:54 |
johnsom | I think I need to restack, I will work on that. | 21:59 |
*** Santosh has quit IRC | 22:01 | |
*** vivek-ebay has quit IRC | 22:04 | |
*** vivek-ebay has joined #openstack-lbaas | 22:05 | |
ptoohill | sorry, im back. Im going to head home but will be on a bit later tonight. If still having issues i can maybe screen share or work through this with ya. Ping me | 22:05 |
johnsom | Ok, thanks ptoohill | 22:06 |
*** localloop127 has quit IRC | 22:09 | |
*** jorgem has quit IRC | 22:19 | |
*** jorgem has joined #openstack-lbaas | 22:19 | |
*** TrevorV|Home has joined #openstack-lbaas | 22:21 | |
*** ptoohill-oo has joined #openstack-lbaas | 22:24 | |
*** TrevorV|Home has quit IRC | 22:25 | |
*** crc32 has joined #openstack-lbaas | 22:29 | |
*** Trevor_V has joined #openstack-lbaas | 22:44 | |
*** Trevor_V has quit IRC | 22:47 | |
openstackgerrit | Al Miller proposed openstack/neutron-lbaas: Add bytes_in and bytes_out statistics to the listener https://review.openstack.org/158823 | 22:50 |
*** ajmiller__ has joined #openstack-lbaas | 22:55 | |
*** ajmiller_ has quit IRC | 22:58 | |
johnsom | No luck. I did a clean, then restack. The agent driver now creates LBs, but I get the same error from neutron-server: | 22:59 |
johnsom | Unrecognized attribute(s) 'default_tls_container_id' | 22:59 |
ptoohill-oo | Try creating via api and not client. See if that gives anything additional or different ? | 23:11 |
ptoohill-oo | You have the pluginv2 enabled in neutron I assume? | 23:12 |
johnsom | I think so. I can create the LB | 23:12 |
ptoohill-oo | That error means the ext with the new TLS stuff can't be found and if you look at the code you checked out it should be there | 23:13 |
*** enikanorov has quit IRC | 23:14 | |
*** enikanorov has joined #openstack-lbaas | 23:15 | |
ptoohill-oo | In neutron.conf could you just verify the neutron_lbaas.services.loadbalancer.plugin.LoadBalancerPluginv2 is set. I'm sure it is, but running out of trouble shooting ideas for code that's certainly there especially since it merged | 23:15 |
ptoohill-oo | And you did do a cherrypick of the ref impl patch and not a checkout? | 23:16 |
johnsom | service_plugins = neutron.services.l3_router.l3_router_plugin.L3RouterPlugin,neutron_lbaas.services.loadbalancer.plugin.LoadBalancerPluginv2 | 23:16 |
ptoohill-oo | Yep, that looks good | 23:17 |
johnsom | The docs say to checkout 145151/ | 23:17 |
johnsom | chery picked 164063 | 23:17 |
ptoohill-oo | Well yea, but things merged a bit ago and havnt updated doc quite yet | 23:17 |
ptoohill-oo | 164063 is the client one right? You did cherry pick into client. Just to be clear | 23:18 |
johnsom | no, 161404 is client | 23:18 |
ptoohill-oo | Ook | 23:18 |
ptoohill-oo | I'm on phone and don't have those handy at the moment | 23:19 |
*** jorgem has quit IRC | 23:20 | |
ptoohill-oo | Hrmmm, screen share? I'm not sure what could be problem if you've done all those things already :/ | 23:20 |
johnsom | I think the alembic didn't run | 23:21 |
ptoohill-oo | Oh, was that a db error? Though it should have failed on lb create or even start up in that case | 23:22 |
johnsom | yep | 23:22 |
johnsom | no sni table | 23:22 |
ptoohill-oo | Should have other errors for that though | 23:22 |
ptoohill-oo | Not the missing attr error | 23:23 |
ptoohill-oo | We got the sane error you did when we didn't reload neutron-server. But you've done that | 23:23 |
ptoohill-oo | Same | 23:23 |
johnsom | Hmm, if I just run it I get: | 23:24 |
johnsom | File "alembic_migrations/env.py", line 26, in <module> | 23:24 |
johnsom | neutron_config = config.neutron_config | 23:24 |
johnsom | AttributeError: 'Config' object has no attribute 'neutron_config' | 23:24 |
ptoohill-oo | O.o | 23:24 |
ptoohill-oo | OK now I'm really not sure what's going on >< | 23:25 |
crc32 | is brandon around? | 23:25 |
ptoohill-oo | Ping blogan | 23:25 |
* crc32 slaps blogan around a bit with a large trout | 23:26 | |
ptoohill-oo | I was having env issues and wiping the /opt/stack and restacking helped. Did you do that already? | 23:26 |
johnsom | Yeah, I pretty much nuked everything this last round | 23:27 |
rm_work | crc32: he left | 23:27 |
ptoohill-oo | Also, should start neutron-server with neutron_lbaas.conf also. But that requires a patch that hasn't merged yet. Though that wouldn't cause this error | 23:28 |
ptoohill-oo | Or the other one | 23:28 |
ptoohill-oo | Johnsom are you deploying locally or VM? | 23:30 |
johnsom | VM | 23:30 |
ptoohill-oo | Took screen share won't help then | 23:30 |
ptoohill-oo | Took* | 23:30 |
ptoohill-oo | Ook***** | 23:30 |
ptoohill-oo | I'll be on in an hour or so and update the docs. I'll start fresh and follow instructions and see if I can replicate issues | 23:34 |
johnsom | Ok. I am pretty convinced my issue is the db didn't migrate when I did the install of neutron-lbaas | 23:34 |
*** sbfox has quit IRC | 23:35 | |
johnsom | or the stack I guess | 23:36 |
*** crc32 has quit IRC | 23:39 | |
ptoohill-oo | Run neutron-db-manage --service lbaas upgrade head | 23:41 |
*** crc32 has joined #openstack-lbaas | 23:44 | |
*** banix has joined #openstack-lbaas | 23:46 | |
*** ajmiller__ has quit IRC | 23:50 | |
*** mlavalle has joined #openstack-lbaas | 23:52 | |
*** SumitNaiksatam has quit IRC | 23:56 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!