*** diogogmt has joined #openstack-lbaas | 00:10 | |
*** crc32 has joined #openstack-lbaas | 00:20 | |
*** manishg has joined #openstack-lbaas | 00:35 | |
*** manishg has quit IRC | 00:35 | |
*** kevo has quit IRC | 01:20 | |
*** fnaval_ has joined #openstack-lbaas | 01:27 | |
*** fnaval__ has joined #openstack-lbaas | 01:29 | |
*** fnaval has quit IRC | 01:31 | |
*** fnaval_ has quit IRC | 01:33 | |
ptoohill | not sure which i doc i was reading then :/ | 01:35 |
---|---|---|
*** bana_k has joined #openstack-lbaas | 01:42 | |
*** ajmiller has joined #openstack-lbaas | 02:06 | |
*** ajmiller_ has joined #openstack-lbaas | 02:13 | |
*** ajmiller has quit IRC | 02:15 | |
*** bana_k has quit IRC | 02:17 | |
*** alhu has joined #openstack-lbaas | 02:39 | |
*** jaff_cheng has joined #openstack-lbaas | 02:41 | |
*** crc32 has quit IRC | 02:44 | |
*** bana_k has joined #openstack-lbaas | 02:45 | |
*** ktrmzn has quit IRC | 02:47 | |
*** kevo has joined #openstack-lbaas | 03:00 | |
*** prabampm has joined #openstack-lbaas | 03:08 | |
*** ajmiller_ has quit IRC | 03:15 | |
*** ChrisBenson has quit IRC | 03:30 | |
*** prabampm has quit IRC | 03:31 | |
*** mixos has joined #openstack-lbaas | 03:33 | |
*** ajmiller has joined #openstack-lbaas | 03:37 | |
*** ajmiller_ has joined #openstack-lbaas | 03:39 | |
*** ajmiller has quit IRC | 03:42 | |
openstackgerrit | Kobi Samoray proposed openstack/octavia: (WIP) Implement string validation health monitor https://review.openstack.org/307688 | 03:43 |
*** links has joined #openstack-lbaas | 03:59 | |
*** ajmiller_ has quit IRC | 04:23 | |
*** reedip__ has joined #openstack-lbaas | 04:40 | |
*** sbalukoff has joined #openstack-lbaas | 04:42 | |
*** amotoki has joined #openstack-lbaas | 04:48 | |
*** reedip__ has quit IRC | 04:55 | |
*** yamamot__ has joined #openstack-lbaas | 05:00 | |
*** harlowja has joined #openstack-lbaas | 05:01 | |
*** fnaval has joined #openstack-lbaas | 05:02 | |
*** fnaval__ has quit IRC | 05:05 | |
*** ChrisBenson has joined #openstack-lbaas | 05:07 | |
*** madhu_ak has quit IRC | 05:23 | |
*** armax has quit IRC | 05:41 | |
*** jsheeren has joined #openstack-lbaas | 05:42 | |
*** kevo has quit IRC | 05:47 | |
*** yamamot__ has quit IRC | 05:57 | |
*** numans has joined #openstack-lbaas | 06:04 | |
*** anilvenkata has joined #openstack-lbaas | 06:18 | |
*** Alex_Stef has joined #openstack-lbaas | 06:19 | |
*** numans has quit IRC | 06:40 | |
*** numans has joined #openstack-lbaas | 06:56 | |
*** numans has quit IRC | 06:57 | |
*** numans has joined #openstack-lbaas | 06:57 | |
*** yamamot__ has joined #openstack-lbaas | 06:58 | |
*** alhu has quit IRC | 07:02 | |
*** yamamot__ has quit IRC | 07:03 | |
*** sbalukoff has quit IRC | 07:05 | |
*** alhu has joined #openstack-lbaas | 07:05 | |
*** bogdan has joined #openstack-lbaas | 07:06 | |
*** rcernin has joined #openstack-lbaas | 07:14 | |
*** mixos has quit IRC | 07:14 | |
*** sbalukoff has joined #openstack-lbaas | 07:16 | |
jsheeren | hi all, i have another question about lbaav2 | 07:22 |
jsheeren | i can create lbaasv2 load balancers through the command line and horizon | 07:23 |
jsheeren | i have the issue that i cannot access the loadbalancer vip through a floating IP | 07:23 |
jsheeren | when i associate a floating IP i cannot access it outside of the namespaces | 07:24 |
jsheeren | when i create a instance and attach a floating IP, i can reach that outside of the namespaces (from the public network) | 07:25 |
jsheeren | a sidenote: i configged DVR | 07:27 |
*** yamamot__ has joined #openstack-lbaas | 08:00 | |
*** yamamot__ has quit IRC | 08:08 | |
bogdan | I am trying to create an image with bash -x ./diskimage-create.sh -o amphora-ubuntu-x64-haproxy -s 2 -t qcow2 and it finishes successfully with "Image file amphora-ubuntu-x64-haproxy.qcow2 created..." but I cannot find such a file on my filesystem, am I missing something? | 08:43 |
*** bharathm has quit IRC | 08:46 | |
*** bharathm has joined #openstack-lbaas | 08:46 | |
*** yamamoto has joined #openstack-lbaas | 09:05 | |
*** yamamoto has quit IRC | 09:10 | |
bogdan | I am trying to create an image with bash -x ./diskimage-create.sh -o amphora-ubuntu-x64-haproxy -s 2 -t qcow2 and it finishes successfully with "Image file amphora-ubuntu-x64-haproxy.qcow2 created..." but I cannot find such a file on my filesystem, am I missing something? | 09:51 |
openstackgerrit | Lingxian Kong proposed openstack/octavia: Add timestamp to octavia resources https://review.openstack.org/309253 | 10:05 |
*** yamamot__ has joined #openstack-lbaas | 10:07 | |
*** yamamot__ has quit IRC | 10:12 | |
*** bogdan has quit IRC | 10:14 | |
*** bogdan has joined #openstack-lbaas | 10:17 | |
*** jaff_cheng has quit IRC | 10:20 | |
*** banszmar has quit IRC | 10:22 | |
*** pcaruana has joined #openstack-lbaas | 10:32 | |
openstackgerrit | Lingxian Kong proposed openstack/octavia: Add timestamp to octavia resources https://review.openstack.org/309253 | 10:33 |
*** banszmar has joined #openstack-lbaas | 10:39 | |
bogdan | ptoohill, you there? | 10:43 |
*** amotoki_ has joined #openstack-lbaas | 10:52 | |
*** amotoki has quit IRC | 10:55 | |
*** yamamoto_ has joined #openstack-lbaas | 11:08 | |
*** dmk0202 has joined #openstack-lbaas | 11:10 | |
*** yamamoto_ has quit IRC | 11:14 | |
*** ducttape_ has joined #openstack-lbaas | 11:29 | |
*** numans has quit IRC | 11:31 | |
*** ducttape_ has quit IRC | 11:40 | |
*** yamamoto has joined #openstack-lbaas | 12:10 | |
*** yamamoto has quit IRC | 12:15 | |
*** eranra has joined #openstack-lbaas | 12:23 | |
*** jaff_cheng has joined #openstack-lbaas | 12:25 | |
*** ChrisBenson has quit IRC | 12:30 | |
*** ChrisBenson has joined #openstack-lbaas | 12:31 | |
*** dmk0202 has quit IRC | 12:46 | |
*** alhu has quit IRC | 12:49 | |
*** dmk0202 has joined #openstack-lbaas | 12:59 | |
*** rtheis has joined #openstack-lbaas | 13:01 | |
*** harlowja has quit IRC | 13:07 | |
*** yamamoto has joined #openstack-lbaas | 13:12 | |
*** amotoki_ has quit IRC | 13:18 | |
*** mixos has joined #openstack-lbaas | 13:28 | |
*** pcaruana has quit IRC | 13:28 | |
*** sbalukoff has quit IRC | 13:31 | |
*** mixos has quit IRC | 13:32 | |
*** neelashah has joined #openstack-lbaas | 13:33 | |
*** neelashah1 has joined #openstack-lbaas | 13:35 | |
*** rtheis has quit IRC | 13:36 | |
*** neelashah has quit IRC | 13:38 | |
*** neelashah1 has quit IRC | 13:39 | |
*** rtheis has joined #openstack-lbaas | 13:39 | |
*** rtheis has quit IRC | 13:44 | |
Frito | bogdan: Didn't you have an issue yesterday where you couldn't ssh into your amphorae? | 13:45 |
*** diogogmt has quit IRC | 13:47 | |
*** rtheis has joined #openstack-lbaas | 13:49 | |
*** rtheis has quit IRC | 13:51 | |
*** rtheis has joined #openstack-lbaas | 13:52 | |
*** rtheis has quit IRC | 13:53 | |
*** amotoki has joined #openstack-lbaas | 13:56 | |
*** yamamoto has quit IRC | 14:04 | |
*** sbalukoff has joined #openstack-lbaas | 14:04 | |
*** links has quit IRC | 14:14 | |
*** ajmiller has joined #openstack-lbaas | 14:26 | |
*** permalac_ has quit IRC | 14:30 | |
Frito | I'm going to be blunt here and say that I'm being an idiot. I did a ./clean.sh on devstack and then rebooted just to be safe. I have latest as of yesterday on octavia and have the fix from ptoohill yesterday (https://review.openstack.org/#/c/310040). After stack is running I do "neutron lbaas-loadbalancer-create --name lb1 private-subnet" which eventually spins up a new Amphorae instance. When I try "ssh -i /etc/octavia/.ssh/octavia_ssh_key ubuntu@1 | 14:33 |
*** jsheeren has quit IRC | 14:43 | |
*** armax has joined #openstack-lbaas | 14:47 | |
*** diogogmt has joined #openstack-lbaas | 14:51 | |
*** fnaval has quit IRC | 14:51 | |
*** dmk0202 has quit IRC | 15:01 | |
*** fnaval has joined #openstack-lbaas | 15:02 | |
*** bana_k has quit IRC | 15:02 | |
*** Alex_Stef has quit IRC | 15:14 | |
Frito | I may have figured it out | 15:18 |
Frito | I was using the IP that shows up when you run "neutron lbaas-loadbalancer-list" and it would time out. When I ran "nova list" and used the "lb-mgmt-net" ip address I could ssh in. So yea, it was totally me being a dummy. | 15:19 |
*** armax has quit IRC | 15:21 | |
*** pcaruana has joined #openstack-lbaas | 15:21 | |
*** amotoki has quit IRC | 15:26 | |
*** sbalukoff has quit IRC | 15:29 | |
bogdan | I've managed to start amphora with the ubuntu image and can ssh to it and see that amphora agent is serving on port 9443 but the REST DRIVER is reporting WARNING octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to instance. Retrying. | 15:29 |
bogdan | how to troubleshoot? | 15:29 |
Frito | I /think/ that eventually "goes away" if that's happening right when you spin the instance up. | 15:30 |
Frito | b/c it retries once a second or something. | 15:30 |
bogdan | well it stays for several minutes (10?) until a REVERT action is taken | 15:32 |
*** jaff_cheng has quit IRC | 15:32 | |
bogdan | so it is not about the instance starting slowly (which it actually is), I think it is something related to the certificates | 15:32 |
bogdan | I am trying to do ip netns exec qdhcp-d0396100-bd03-4bcc-8b2f-02d169793cd2 wget --certificate client_amphora.crt https://10.1.0.69:9443/0.5/plug/vip/192.168.1.155 but it fails | 15:33 |
Frito | oh, :-/ | 15:33 |
Frito | nova list shows the instance ACTIVE ? | 15:34 |
bogdan | i am not sure what client certificate to use to try to connect manually | 15:34 |
bogdan | yes | 15:34 |
bogdan | I am ssh-ing to the instance ! :) | 15:34 |
Frito | Oh yea :-P | 15:34 |
Frito | haha | 15:34 |
bogdan | I see amphora agent is running in there | 15:34 |
bogdan | but somehow cannot validate the connection to it | 15:34 |
Frito | Yea, I haven't done anything with the certs yet. I don't have barbacan running so that kinda limits that :-) | 15:36 |
bogdan | I am also not running Barbican - using the local certificate maneger | 15:37 |
bogdan | manager* | 15:38 |
*** links has joined #openstack-lbaas | 15:38 | |
*** ducttape_ has joined #openstack-lbaas | 15:49 | |
rm_work | bogdan: local certificate manager doesn't really .... work | 15:57 |
rm_work | bogdan: do you mean local certificate *generator*? | 15:58 |
rm_work | I thought we actually *removed* local certificate manager | 15:58 |
rm_work | Frito: yeah you probably figured it out, but the IP it shows for the LB is the frontend VIP which only listens on the port specified for loadbalancing (ie, usually 80 or 443 for a HTTP LB) and not on 22 | 15:59 |
Frito | Right | 16:00 |
Frito | That was the assumption I made after being able to connect on the 192 address. Huge thanks for the confirmation rm_work | 16:00 |
rm_work | bogdan: if you just recently installed, you may be seeing this: https://bugs.launchpad.net/octavia/+bug/1574784 | 16:00 |
openstack | Launchpad bug 1574784 in octavia "BadRequest: Bad networks format: network uuid is not in proper format when running octavia basic loadbalancer test" [Undecided,In progress] | 16:00 |
rm_work | bogdan: which is fixed by ptoohill's patch | 16:00 |
Frito | https://review.openstack.org/#/c/310040 | 16:02 |
Frito | ^-- ptoohill's patch | 16:02 |
*** links has quit IRC | 16:05 | |
*** ducttape_ has quit IRC | 16:07 | |
*** anilvenkata has quit IRC | 16:08 | |
*** amotoki has joined #openstack-lbaas | 16:11 | |
*** alhu has joined #openstack-lbaas | 16:14 | |
*** numans has joined #openstack-lbaas | 16:15 | |
*** alhu has quit IRC | 16:18 | |
*** fawadkhaliq has joined #openstack-lbaas | 16:25 | |
*** Alex_Stef has joined #openstack-lbaas | 16:40 | |
*** bogdan has quit IRC | 16:54 | |
*** amotoki has quit IRC | 16:57 | |
*** shakamunyi has joined #openstack-lbaas | 16:59 | |
*** amotoki has joined #openstack-lbaas | 17:00 | |
*** armax has joined #openstack-lbaas | 17:02 | |
*** madhu_ak has joined #openstack-lbaas | 17:03 | |
*** amotoki has quit IRC | 17:03 | |
*** tesseract has joined #openstack-lbaas | 17:06 | |
*** alhu has joined #openstack-lbaas | 17:06 | |
*** tesseract is now known as Guest8613 | 17:06 | |
*** amotoki has joined #openstack-lbaas | 17:06 | |
*** sbalukoff has joined #openstack-lbaas | 17:19 | |
*** armax has quit IRC | 17:19 | |
*** sbalukoff has quit IRC | 17:25 | |
openstackgerrit | Madhusudhan Kandadai proposed openstack/octavia: Give permission to run this script at gate https://review.openstack.org/306053 | 17:25 |
openstackgerrit | Adam Harwell proposed openstack/octavia: Driver to allow creating amphora from a base image with Ansible https://review.openstack.org/310260 | 17:25 |
*** kevo has joined #openstack-lbaas | 17:31 | |
*** bana_k has joined #openstack-lbaas | 17:32 | |
*** fawadkhaliq has quit IRC | 17:38 | |
*** minwang2 has joined #openstack-lbaas | 17:43 | |
*** amotoki has quit IRC | 17:44 | |
*** numans has quit IRC | 17:46 | |
*** alhu has quit IRC | 17:48 | |
*** amotoki has joined #openstack-lbaas | 17:57 | |
*** amotoki has quit IRC | 17:58 | |
*** amotoki has joined #openstack-lbaas | 18:08 | |
*** Alex_Stef has quit IRC | 18:11 | |
*** diogogmt_ has joined #openstack-lbaas | 18:13 | |
*** diogogmt has quit IRC | 18:13 | |
*** diogogmt_ is now known as diogogmt | 18:13 | |
*** armax has joined #openstack-lbaas | 18:17 | |
*** Alex_Stef has joined #openstack-lbaas | 18:24 | |
*** fawadkhaliq has joined #openstack-lbaas | 18:26 | |
*** kevo has quit IRC | 18:39 | |
*** anilvenkata has joined #openstack-lbaas | 18:40 | |
*** armax has quit IRC | 18:42 | |
*** rcernin has quit IRC | 18:47 | |
*** fawadkhaliq has quit IRC | 18:49 | |
*** crc32 has joined #openstack-lbaas | 18:50 | |
*** sbalukoff has joined #openstack-lbaas | 18:51 | |
*** amotoki has quit IRC | 19:01 | |
*** bana_k has quit IRC | 19:02 | |
*** kevo has joined #openstack-lbaas | 19:07 | |
*** alhu has joined #openstack-lbaas | 19:08 | |
*** crc32 has quit IRC | 19:32 | |
*** kobis has joined #openstack-lbaas | 19:41 | |
*** alhu has quit IRC | 19:41 | |
*** pcaruana has quit IRC | 19:45 | |
*** crc32 has joined #openstack-lbaas | 19:45 | |
*** Guest8613 has quit IRC | 19:54 | |
*** alhu has joined #openstack-lbaas | 19:57 | |
*** ducttape_ has joined #openstack-lbaas | 20:05 | |
*** kevo has quit IRC | 20:06 | |
openstackgerrit | min wang proposed openstack/octavia: Add failover scenario test for octavia https://review.openstack.org/309625 | 20:09 |
*** yamamoto has joined #openstack-lbaas | 20:10 | |
openstackgerrit | min wang proposed openstack/octavia: Add failover scenario test for octavia https://review.openstack.org/309625 | 20:12 |
openstackgerrit | min wang proposed openstack/octavia: Add failover scenario test for octavia https://review.openstack.org/309625 | 20:13 |
*** alhu has quit IRC | 20:22 | |
*** yamamoto has quit IRC | 20:24 | |
*** anilvenkata has quit IRC | 20:25 | |
*** bogdan_ has joined #openstack-lbaas | 20:31 | |
*** crc32 has quit IRC | 20:33 | |
rm_work | WTB reviews plz: https://review.openstack.org/#/c/310040/ <--- sbalukoff blogan whoever | 20:33 |
*** amotoki has joined #openstack-lbaas | 20:33 | |
bogdan_ | rm_work, sorry for the confusion - when i wrote local certificate manager I meant local certificate generator :) | 20:36 |
rm_work | yeah, I figured :P | 20:38 |
bogdan_ | regarding the issue I am facing - I indeed installed recently but as far as I can see the logs attached I am not facing the same issue, my situation is that the nova instance for the amphora gets created successfully, the os in the amphora starts , obtains IP and I can ssh and http to the IP of the amphora | 20:38 |
*** ducttape_ has quit IRC | 20:38 | |
rm_work | ah | 20:38 |
rm_work | hmm yeah then very different :P | 20:38 |
bogdan_ | yet, the rest driver for some reason cannot contact the amphora on 9443 ... if i try to reach the same port from ip netns exec ... wget I connect to the API but fail with the SSL handshake | 20:39 |
bogdan_ | I will not try to alter the rest driver code to see the actual error | 20:40 |
bogdan_ | if I wanted to connect via wget manually what certificate should I be using ? | 20:40 |
bogdan_ | I wanted to validate that at least manually the amphora agent can be reached ok | 20:41 |
*** armax has joined #openstack-lbaas | 20:42 | |
*** cody-somerville has joined #openstack-lbaas | 20:43 | |
*** cody-somerville has quit IRC | 20:43 | |
*** cody-somerville has joined #openstack-lbaas | 20:43 | |
bogdan_ | rm_work, any idea how can I manually simulate the connection to amphora? | 20:43 |
*** kobis has quit IRC | 20:43 | |
bogdan_ | rm_work, what SSL certificate is the REST driver using when trying to connect to amphoras? | 20:53 |
*** armax has quit IRC | 20:57 | |
*** sbalukoff has quit IRC | 21:07 | |
bharathm | bogdan: In devstack I use curl -k --cert /etc/octavia/certs/ca_01.pem:foobar --key /etc/octavia/certs/private/cakey.pem https://192.168.0.8:9443/0.5/details | 21:08 |
*** yamamoto has joined #openstack-lbaas | 21:16 | |
*** amotoki has quit IRC | 21:18 | |
*** cody-somerville has quit IRC | 21:20 | |
*** amotoki has joined #openstack-lbaas | 21:23 | |
openstackgerrit | Merged openstack/octavia: Amphora fails to build https://review.openstack.org/310040 | 21:25 |
openstackgerrit | Lingxian Kong proposed openstack/octavia: Add timestamp to octavia resources https://review.openstack.org/309253 | 21:25 |
*** kobis has joined #openstack-lbaas | 21:26 | |
*** yamamoto has quit IRC | 21:26 | |
*** neelashah has joined #openstack-lbaas | 21:27 | |
openstackgerrit | Kobi Samoray proposed openstack/octavia: (WIP) Implement string validation health monitor https://review.openstack.org/307688 | 21:28 |
*** kobis has quit IRC | 22:01 | |
*** kobis has joined #openstack-lbaas | 22:08 | |
*** cody-somerville has joined #openstack-lbaas | 22:08 | |
openstackgerrit | Lingxian Kong proposed openstack/octavia: Add timestamp to octavia resources https://review.openstack.org/309253 | 22:16 |
*** woodster_ has joined #openstack-lbaas | 22:18 | |
*** kobis has quit IRC | 22:20 | |
*** cody-somerville has quit IRC | 22:21 | |
*** sbalukoff has joined #openstack-lbaas | 22:29 | |
*** amotoki has quit IRC | 22:32 | |
*** sbalukoff has quit IRC | 22:36 | |
*** alhu has joined #openstack-lbaas | 22:37 | |
*** kobis has joined #openstack-lbaas | 22:40 | |
*** amotoki has joined #openstack-lbaas | 22:44 | |
openstackgerrit | Franklin Naval proposed openstack/neutron-lbaas: Neutron-LBaaS: Shared Pools Fucntional Tests https://review.openstack.org/310326 | 22:47 |
openstackgerrit | Franklin Naval proposed openstack/neutron-lbaas: Neutron-LBaaS: Shared Pools Functional Tests https://review.openstack.org/310326 | 22:52 |
*** ajmiller_ has joined #openstack-lbaas | 22:55 | |
openstackgerrit | Franklin Naval proposed openstack/neutron-lbaas: Neutron-LBaaS: Shared Pools Functional Tests https://review.openstack.org/310326 | 22:56 |
*** ajmiller has quit IRC | 22:58 | |
*** kevo has joined #openstack-lbaas | 23:01 | |
*** amotoki has quit IRC | 23:11 | |
*** minwang2 has quit IRC | 23:13 | |
*** neelashah has quit IRC | 23:26 | |
*** alhu has quit IRC | 23:30 | |
*** diogogmt has quit IRC | 23:39 | |
*** eranra has quit IRC | 23:41 | |
*** eranra has joined #openstack-lbaas | 23:41 | |
bogdan_ | my rest driver cannot reach the amphora | 23:54 |
bogdan_ | I had to change the code a bit to get the real connection error and initially I was getting ConnectionError: HTTPSConnectionPool(host='10.1.0.6', port=9443): Max retries exceeded with url: /0.5/plug/vip/192.168.1.17 (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))) | 23:55 |
*** armax has joined #openstack-lbaas | 23:55 | |
bogdan_ | and that is because my openstack lives behind proxy | 23:55 |
bogdan_ | after I added some IPs to the no_proxy env I am getting ConnectTimeout: HTTPSConnectionPool(host='10.1.0.8', port=9443): Max retries exceeded with url: /0.5/plug/vip/192.168.1.25 (Caused by ConnectTimeoutError(<requests.packages.urllib3.connection.VerifiedHTTPSConnection object at 0x7f69f2ab8150>, 'Connection to 10.1.0.8 timed out. (connect timeout=10.0)')) | 23:56 |
bogdan_ | which network is the octavia worker living in? how can I add route in its network to the amphora network? | 23:57 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!