Wednesday, 2016-05-11

*** bana_k has joined #openstack-lbaas00:17
*** chlong_ has joined #openstack-lbaas00:22
*** chlong_ has quit IRC00:22
*** chlong_ has joined #openstack-lbaas00:27
*** chlong_ has quit IRC00:28
*** AnothrLundquist has quit IRC00:32
*** reedip__ has joined #openstack-lbaas00:35
*** AnothrLundquist has joined #openstack-lbaas00:35
*** AnothrLundquist has quit IRC00:38
*** madhu_ak has quit IRC00:56
*** bana_k has quit IRC00:59
*** yamamot__ has joined #openstack-lbaas01:04
*** ducttape_ has joined #openstack-lbaas01:04
*** ducttape_ has quit IRC01:06
*** kevo has quit IRC01:20
*** mixos has joined #openstack-lbaas01:20
*** piet has joined #openstack-lbaas01:28
*** amotoki has quit IRC01:30
*** reedip__ has quit IRC01:30
*** mjblack has joined #openstack-lbaas01:36
*** yamamot__ has quit IRC01:40
*** amotoki has joined #openstack-lbaas01:41
*** yamamot__ has joined #openstack-lbaas01:41
*** AnothrLundquist has joined #openstack-lbaas01:45
*** AnothrLundquist has quit IRC01:47
*** amotoki has quit IRC01:50
*** piet has quit IRC01:54
*** AnothrLundquist has joined #openstack-lbaas01:55
*** amotoki has joined #openstack-lbaas01:56
*** AnothrLundquist has quit IRC01:57
*** fnaval_ has joined #openstack-lbaas01:58
*** fnaval has quit IRC02:00
*** amotoki has quit IRC02:19
*** ducttape_ has joined #openstack-lbaas02:25
*** AnothrLundquist has joined #openstack-lbaas02:26
*** fnaval_ has quit IRC02:27
*** AnothrLundquist has quit IRC02:31
*** cody-somerville has joined #openstack-lbaas02:31
*** cody-somerville has quit IRC02:31
*** cody-somerville has joined #openstack-lbaas02:31
*** amotoki has joined #openstack-lbaas02:32
*** fnaval has joined #openstack-lbaas02:36
*** yamamot__ has quit IRC02:38
*** piet has joined #openstack-lbaas02:45
*** AnothrLundquist has joined #openstack-lbaas03:00
*** AnothrLundquist has quit IRC03:01
openstackgerritLingxian Kong proposed openstack/octavia: Add timestamp to octavia resources  https://review.openstack.org/30925303:01
*** AnothrLundquist has joined #openstack-lbaas03:04
*** AnothrLundquist has quit IRC03:05
*** piet has quit IRC03:07
*** AnothrLundquist has joined #openstack-lbaas03:10
*** ducttape_ has quit IRC03:14
*** prabampm has joined #openstack-lbaas03:18
*** yamamot__ has joined #openstack-lbaas03:19
*** ducttape_ has joined #openstack-lbaas03:19
*** links has joined #openstack-lbaas03:21
*** yamamot__ has quit IRC03:22
*** ducttape_ has quit IRC03:23
*** yamamot__ has joined #openstack-lbaas03:23
*** mjblack has quit IRC03:24
*** mjblack has joined #openstack-lbaas03:24
*** yamamot__ has quit IRC03:25
*** armax has quit IRC03:27
*** yamamot__ has joined #openstack-lbaas03:27
*** ducttape_ has joined #openstack-lbaas03:32
*** ducttape_ has quit IRC03:47
*** reedip__ has joined #openstack-lbaas03:58
openstackgerritPhillip Toohill proposed openstack/octavia: Whitespace bug in sysvinit jinja template  https://review.openstack.org/31485303:58
*** mjblack has quit IRC04:01
*** prabampm has quit IRC04:02
*** pcaruana has joined #openstack-lbaas04:02
*** cody-somerville has quit IRC04:04
*** mjblack has joined #openstack-lbaas04:16
*** reedip__ has quit IRC04:19
*** reedip__ has joined #openstack-lbaas04:31
*** yuanying has quit IRC04:44
*** amotoki_ has joined #openstack-lbaas04:46
*** amotoki has quit IRC04:48
*** rcernin has joined #openstack-lbaas04:58
*** jaff_cheng has joined #openstack-lbaas05:02
*** fawadkhaliq has joined #openstack-lbaas05:05
*** yamamot__ has quit IRC05:08
*** yamamot__ has joined #openstack-lbaas05:09
*** gomarivera has joined #openstack-lbaas05:09
*** yamamot__ has quit IRC05:12
*** yamamot__ has joined #openstack-lbaas05:13
*** fnaval has quit IRC05:16
*** fnaval has joined #openstack-lbaas05:19
*** gomarivera has quit IRC05:24
*** kobis has joined #openstack-lbaas05:28
*** yamamot__ has quit IRC05:50
*** yamamot__ has joined #openstack-lbaas05:52
*** nmagnezi has joined #openstack-lbaas05:52
*** amotoki_ has quit IRC05:56
*** AnothrLundquist has quit IRC05:59
*** yuanying has joined #openstack-lbaas06:01
*** numans has joined #openstack-lbaas06:07
*** jschwarz has joined #openstack-lbaas06:14
*** piet has joined #openstack-lbaas06:16
*** piet has quit IRC06:25
*** nmagnezi_ has joined #openstack-lbaas06:28
*** nmagnezi_ has quit IRC06:35
*** anilvenkata has joined #openstack-lbaas06:36
*** woodster_ has quit IRC06:38
*** fawadkhaliq has quit IRC06:44
*** fawadkhaliq has joined #openstack-lbaas06:44
*** mixos has quit IRC06:49
*** amotoki has joined #openstack-lbaas07:04
*** rcernin has quit IRC07:09
*** rcernin has joined #openstack-lbaas07:10
*** yuanying has quit IRC07:18
*** amotoki has quit IRC07:18
*** amotoki has joined #openstack-lbaas07:25
*** nmagnezi has quit IRC07:30
*** nmagnezi has joined #openstack-lbaas07:34
*** chlong has quit IRC07:49
*** amotoki has quit IRC07:54
*** amotoki has joined #openstack-lbaas07:55
*** amotoki has quit IRC08:04
*** bana_k has joined #openstack-lbaas08:05
*** dmk0202 has joined #openstack-lbaas08:08
*** fawadkhaliq has quit IRC08:14
*** fawadkhaliq has joined #openstack-lbaas08:15
*** amotoki has joined #openstack-lbaas08:21
*** amotoki has quit IRC08:22
*** fawadkhaliq has quit IRC08:25
*** fawadkhaliq has joined #openstack-lbaas08:25
*** amotoki has joined #openstack-lbaas08:26
openstackgerrithang cheng proposed openstack/neutron-lbaas: Wrote correct comment for function _create_health_monitor in: neutron_lbaas/tests/tempest/v2/scenario/base.py  https://review.openstack.org/31491108:28
openstackgerrithang cheng proposed openstack/neutron-lbaas: Correct the comment  https://review.openstack.org/31491108:30
*** yuanying has joined #openstack-lbaas08:34
*** bana_k has quit IRC08:37
*** yuanying has quit IRC08:37
*** yuanying has joined #openstack-lbaas08:38
*** bogdan has joined #openstack-lbaas08:41
*** yuanying has quit IRC08:41
*** yuanying has joined #openstack-lbaas08:43
bogdanI create LB and the amphora gets successfully created and in the Octavia database I see the LB is ACTIVE and ONLINE but the Neutron tables seem not to be updated - neutron lb show still reports LB is OFFLINE and in ERROR provisioning_status, how should I fix this?08:46
*** yuanying has quit IRC08:47
*** amotoki has quit IRC08:49
*** amotoki has joined #openstack-lbaas08:50
*** yuanying has joined #openstack-lbaas08:52
*** jschwarz_ has joined #openstack-lbaas08:55
*** jschwarz has quit IRC08:55
*** yuanying has quit IRC08:57
*** tesseract has joined #openstack-lbaas09:20
*** fawadkhaliq has quit IRC09:32
*** fawadkhaliq has joined #openstack-lbaas09:32
*** amotoki has quit IRC09:35
*** reedip__ has quit IRC09:44
*** jschwarz_ has quit IRC09:46
*** yamamot__ has quit IRC09:54
*** yamamot__ has joined #openstack-lbaas09:55
*** reedip__ has joined #openstack-lbaas09:57
*** jaff_cheng has quit IRC10:09
*** jaff_cheng has joined #openstack-lbaas10:16
*** jaff_cheng has quit IRC10:36
bogdanany octavia experts?10:46
*** ri0 has joined #openstack-lbaas10:50
*** yamamot__ has quit IRC10:53
*** yamamot__ has joined #openstack-lbaas10:53
bogdanI think I've configured everything to get the tutorial running - my amphora is up and running, LB in neutron is ACTIVE and OFFLINE, Floating IP assigned to the VIP port cannot be pinged...what am I missing, how to troubleshoot the VIP port?10:55
*** ri0 has quit IRC10:55
bogdanno errors in Octavia or Neutron logs10:56
*** ri0 has joined #openstack-lbaas10:58
*** reedip__ has quit IRC11:06
*** amotoki has joined #openstack-lbaas11:07
*** prabampm has joined #openstack-lbaas11:22
*** ducttape_ has joined #openstack-lbaas11:37
bogdanhow can I troubleshoot the VIP port?11:38
*** rtheis has joined #openstack-lbaas11:42
*** fawadkhaliq has quit IRC11:46
*** fawadkhaliq has joined #openstack-lbaas11:47
*** yamamot__ has quit IRC11:56
*** yamamot__ has joined #openstack-lbaas11:56
*** yamamot__ has quit IRC12:01
*** yamamot__ has joined #openstack-lbaas12:01
*** yamamot__ has quit IRC12:01
*** yamamot__ has joined #openstack-lbaas12:02
*** jaff_cheng has joined #openstack-lbaas12:22
*** ducttape_ has quit IRC12:22
*** openstackgerrit has quit IRC12:33
*** openstackgerrit has joined #openstack-lbaas12:34
*** yamamot__ has quit IRC12:40
*** yamamoto has joined #openstack-lbaas12:40
*** bana_k has joined #openstack-lbaas12:42
*** links has quit IRC12:52
*** bana_k has quit IRC13:02
*** amotoki has quit IRC13:08
*** matt-borland has joined #openstack-lbaas13:10
*** bana_k has joined #openstack-lbaas13:16
*** skape has joined #openstack-lbaas13:17
skapeHi guys! it's me again.   Now I'm trying to enable the loadbalancer in horizon. i've set in the local_setting enable_lb to true but  nothing change13:20
*** ri0 has quit IRC13:20
skapei'm using loadbalancer V2 with haproxy13:24
*** St3F_A13x has joined #openstack-lbaas13:29
skapeif I try to access the dashboard/project/loadbalancer  in the horizon logs I receive the error The resource could not be found."13:30
*** Alex_Stef has quit IRC13:33
*** Alex_Stef has joined #openstack-lbaas13:34
*** St3F_A13x has quit IRC13:35
*** chlong has joined #openstack-lbaas13:38
*** fawadkhaliq has quit IRC13:50
*** fawadkhaliq has joined #openstack-lbaas13:50
*** links has joined #openstack-lbaas14:01
*** ducttape_ has joined #openstack-lbaas14:08
*** fawadkhaliq has quit IRC14:10
*** fawadkhaliq has joined #openstack-lbaas14:10
*** mixos has joined #openstack-lbaas14:15
*** fawadkhaliq has quit IRC14:15
*** mixos_ has joined #openstack-lbaas14:16
*** mixos has quit IRC14:20
*** bana_k has quit IRC14:27
*** mixos_ has quit IRC14:28
*** prabampm has quit IRC14:29
*** jaff_cheng has quit IRC14:29
*** amotoki has joined #openstack-lbaas14:30
*** bana_k has joined #openstack-lbaas14:30
johnsomskape Did you follow these steps? https://pypi.python.org/pypi/neutron-lbaas-dashboard14:34
johnsombogdan If you have DVR enabled, there is a bug that can cause floating IPs to not work correctly.  Does going direct to the VIP work?14:35
johnsomThe DVR folks said it might be a while before they can fix the floating IP issue14:36
*** ajmiller has quit IRC14:36
skapejohnsom no I didn't but the guys in horizon chanel helped me already14:38
skapethx14:38
skapebut this information should be included here http://docs.openstack.org/mitaka/networking-guide/adv-config-lbaas.html14:40
*** mixos has joined #openstack-lbaas14:41
*** ajmiller has joined #openstack-lbaas14:42
bogdanjohnsom how can I tell if I am using DVR or not? (sorry new to that one)14:42
bogdanI cannot ping the VIP interface via the qdhcp-namespace14:43
bogdanwhen I try to set admin_state_up = True I get the following warning in the Neutron log: WARNING neutron.plugins.ml2.plugin [...] In _notify_port_updated(), no bound segment for port ... on network ...14:43
johnsombogdan Do a neutron router-show <routerID> and see if "distributed" is True14:44
johnsomIf it is True, you have DVR enabled and may be hitting the DVR bug14:45
*** TrevorV has joined #openstack-lbaas14:45
bogdanjohnsom it is false for all my routers14:45
johnsomOk, then it isn't the DVR bug14:46
bogdanI believe it is the ml2 thing but I cannot find any explanation about it...14:46
johnsomskape Yes, we have had trouble getting stuff into that guide.  We have some open bugs to move the docs into our tree.  Feel free to update or work on one of those: https://bugs.launchpad.net/octavia/+bugs?field.tag=docs14:47
*** ducttape_ has quit IRC14:48
*** woodster_ has joined #openstack-lbaas14:50
bogdanjohnsom, I have saw a bug in google about this but it seems log fixed https://bugs.launchpad.net/neutron/+bug/122709114:51
openstackLaunchpad bug 1227091 in neutron "ml2 fails to bind lbaas VIP" [Critical,Fix released] - Assigned to yong sheng gong (gongysh)14:51
bogdanfixed long ago14:52
johnsomYeah, there are no current bugs with ML2 and LBaaSv2 that I know of14:53
*** links has quit IRC14:54
bogdanjohnsom, any idea where to debug? maybe my environment is strange and invalid parameters are passed to that step of notify_port_update? I mean which piece of code in Octavia should I look at?14:55
johnsomWell, if you think it is an Octavia issue, you want to look in the o-cw (devstack) log14:56
johnsomIt would contain any error that it might have had working with neutron to plug ports.14:57
johnsomIs this a devstack install?14:57
*** anilvenkata has quit IRC14:57
bogdanjohnsom, it is not devstack14:59
bogdanI see no errors in the octavia logs15:00
bogdanbtw, another strange issue (maybe related):15:00
bogdancurl -s  -H "X-Auth-Token: $TOK"  http://localhost:9696/v2.0/lbaas/loadbalancers/2c9a9124-87db-47e9-8d55-944a87440386/statuses | python -mjson.tool15:00
bogdansays :15:00
bogdan         "operating_status": "DEGRADED", for the LB, while all internals (listener, pool, members) are ONLINE/ACTIVE15:01
bogdanI could not find any explanation of the DEGRADED value across the net15:02
bogdandid not look at the code yet15:02
bogdanwhat is this DEGRADED state and how can I reset it?15:02
johnsomDEGRADED means that one or more of the members are not reachable15:06
bogdanhow come they are not reachable but have status ONLINE/ACTIVE - see full status at http://paste.openstack.org/show/496753/15:08
bogdanit is true that at some point in time I had one more pool whose members were OFFLINE, but then I deleted that pool, could that be a reason?15:08
bogdanis there a way to reset this degraded state?15:08
bogdanbtw, what is this "segment" in ml2 context? I do not see any documentation about it on the network15:10
*** fnaval has quit IRC15:13
*** diogogmt has joined #openstack-lbaas15:14
*** numans has quit IRC15:15
*** yamamoto has quit IRC15:17
*** yamamoto has joined #openstack-lbaas15:18
*** fawadkhaliq has joined #openstack-lbaas15:22
*** bana_k has quit IRC15:23
openstackgerritNir Magnezi proposed openstack/neutron-lbaas: (WIP) Auto reschedule loadbalancers from dead agents  https://review.openstack.org/29999815:25
*** fnaval has joined #openstack-lbaas15:27
*** skape has left #openstack-lbaas15:30
*** armax has joined #openstack-lbaas15:32
*** madhu_ak has joined #openstack-lbaas15:33
johnsombogdan I'm not sure I can answer the details of a segment in ml2.  I have not needed to get into much detail on the ML2 side yet.15:33
*** diogogmt has quit IRC15:33
johnsombogdan DEGRADED should automatically go back into ONLINE once the members are restored.15:33
johnsomAre you checking in the Octavia database or the neutron database?  There may be some issues with syncing the neutron database depending on how you deployed15:34
bogdanI am using the lbaas v2 API curl -s  -H "X-Auth-Token: $TOK"  http://localhost:9696/v2.0/lbaas/loadbalancers/2c9a9124-87db-47e9-8d55-944a87440386/statuses | python -mjson.tool15:38
johnsomOk, so via LBaaS API15:40
*** armax has quit IRC15:40
bogdanbtw, there seems to be some difference between the databases http://paste.openstack.org/show/496764/15:40
bogdanoctavia db says ONLINE, neutron db says OFFLINE, lbaas api says DEGRADED :) wtf15:41
bogdanhow should I get the neutron and octavia dbs in sync?15:41
bogdanfrom what you say about degraded it seems to be a bug at least in the API because it reports the degraded state but all of the members are ONLINE/ACTIVE, right?15:42
*** pck has quit IRC15:42
*** pck has joined #openstack-lbaas15:44
*** pck is now known as pckizer15:45
bogdanjohnsom, it seems that after some hacking via the horizon interface I got this port detached, how can I manually attach it back to the loadbalancer? what should I fill in for device Owner, device ID, Binding Host?15:46
*** rcernin has quit IRC15:47
johnsombogdan Yeah, you might have a DB sync issue.  Their is the "event streamer" that might help you here.  It's an octavia configuration setting, http://docs.openstack.org/developer/octavia/config-reference/octavia-config-table.html event_streamer_driver15:48
johnsomThere is an open bug about the databases getting out of sync.15:48
johnsombogdan As for the port settings, I'm not sure the right answer for all of that, we let Octavia handle that for us15:49
johnsomIt varies based on the port and topology you selected15:49
*** bana_k has joined #openstack-lbaas15:49
*** armax has joined #openstack-lbaas15:53
*** armax has quit IRC15:57
*** diogogmt has joined #openstack-lbaas15:59
*** fawadkhaliq has quit IRC16:02
bogdanjohnsom, could you paste me some  "neutron port-show" for a valid VIP port? I would like to see what is missing in my port16:03
*** dmk0202 has quit IRC16:07
*** nmagnezi has quit IRC16:07
*** mjblack has quit IRC16:08
*** armax has joined #openstack-lbaas16:21
*** mixos has quit IRC16:22
*** crc32 has joined #openstack-lbaas16:23
*** ducttape_ has joined #openstack-lbaas16:34
*** bogdan has quit IRC16:36
*** bana_k has quit IRC16:40
*** mjblack has joined #openstack-lbaas16:44
*** AnothrLundquist has joined #openstack-lbaas16:46
*** Lundquist_ has joined #openstack-lbaas16:49
*** AnothrLundquist has quit IRC16:51
*** amotoki has quit IRC16:52
*** fawadkhaliq has joined #openstack-lbaas16:53
*** bana_k has joined #openstack-lbaas16:56
*** crc32 has quit IRC17:02
*** BjoernT has joined #openstack-lbaas17:10
*** fawadkhaliq has quit IRC17:12
*** anilvenkata has joined #openstack-lbaas17:15
*** bogdan has joined #openstack-lbaas17:19
*** Lundquist_ has quit IRC17:19
ptoohillgates being funky again, or is this just me ><17:25
*** kevo has joined #openstack-lbaas17:27
*** Lundquist_ has joined #openstack-lbaas17:29
*** openstackgerrit has quit IRC17:33
*** openstackgerrit has joined #openstack-lbaas17:34
*** matt-borland has quit IRC17:42
*** Lundquist_ has quit IRC17:54
*** anilvenkata has quit IRC17:56
*** kobis has quit IRC18:01
bogdanjohnsom, I have enabled event_streamer_driver = queue_event_streamer, restarted octavia services, recreated lb but I still get to non-synchronized dbs http://paste.openstack.org/show/496790/, am I missing something?18:02
*** numans has joined #openstack-lbaas18:03
bogdancould the non-synhcronized state of Neutron lbaas tables lead to the VIP port state DOWN?18:16
*** Purandar has joined #openstack-lbaas18:18
*** mixos has joined #openstack-lbaas18:21
bogdanthese are the details of the ports of the LB, do you see issues there? http://paste.openstack.org/show/496795/18:24
*** evgenyf has joined #openstack-lbaas18:27
*** krotscheck_ has joined #openstack-lbaas18:30
bogdanstrangely enough the LB is in state DEGRADED even before I create any listeners,pools, members... http://paste.openstack.org/show/496796/18:31
*** krotscheck has quit IRC18:31
*** krotscheck_ is now known as krotscheck18:33
johnsombogdan The sync should not impact the VIP functioning.  If the LB thinks the members are all down, when you curl the VIP you would get an HTTP 503 error.18:41
bogdanmy VIP port is down, so no curl to it is possible18:44
bogdanI have no listeners/pools/memebers so wondering what the logic behind this DEGRADED is18:45
bogdanthis should be somewhere in Neutron right?18:45
johnsomDEGRADED would make sense if there is no pool and members.18:48
bogdanah, ok18:48
johnsombogdan also note, there are two ports for a VIP in octavia.18:48
johnsomOne is an allowed address pairs port18:49
bogdando you know at what step is the VIP port completely configured? could it be possible that only after state is out of degraded the port gets enabled?18:49
johnsomYou should be able to curl the VIP port and get back a 503 with just the LB and listener configured.18:49
bogdanok let me configure the listener now18:50
*** tesseract has quit IRC18:51
bogdanis there a diagram or explanation about all the different ports created by octavia per LB?18:55
johnsomHmm, actually no.  We should add that to the docs bugs.  It's basically a service VM with a management port, then it creates a VIP which is a main port and an allowed address pairs port, then as necessary it will create a plug ports for the member networks.18:56
johnsombogdan Are you running this in devstack or other?  The network plugging is pretty stable from our uses.  The only known issue, which isn't LBaaS/Octavia related is neutron floating IPs don't work when DVR is enabled if the port has allowed address pairs enabled18:57
bogdanI am using plain openstack, no devstack18:59
*** numans has quit IRC18:59
johnsomAh, ok, so maybe there was a setup  step missed.  Check out the script we use to configure devstack: https://github.com/openstack/octavia/blob/master/devstack/plugin.sh18:59
johnsomIt has everything we do to configure Octavia19:00
bogdanfrom your list I can recognize - I have the management port 10.1.0.14, the VIP 192.168.1.60 and I guess the plug port for the member network 192.168.1.61, (listed here http://paste.openstack.org/show/496795/), so I am missing the "an allowed address pairs port"19:01
*** AnothrLundquist has joined #openstack-lbaas19:02
bogdanin which log should I see details about it being created or which lines of code in octavia to debug to see why I do not get these?19:02
sbalukoffMeeting today?19:03
sbalukoffOr is that at 1:00pm?19:03
sbalukoffEr... an hour from now?19:03
bogdanI was following the plugin.sh all way long, the only thing I did not do is the steps in "create_mgmt_network_interface" because I did not know how to translate the ovs command to linuxbridge one19:05
bogdancould that be the issue? I thought it is not the problem as Octava db says ACTIVE/ONLINE for LB - only Neutron says ERROR/DEGRADED, etc.19:06
*** AnothrLundquist has quit IRC19:12
*** AnothrLundquist has joined #openstack-lbaas19:17
bogdanjohnsom, you can see what happens right after the amphora is up http://paste.openstack.org/show/496805/ from what I see all VIPs and ports and whatever should be created but you see the VIP port is down ... I am wondering how to troubleshoot19:28
bogdando you see anything not right in the log?19:28
xgermanlog looks ok to me19:30
xgermanNeutron goes to Octavia to check — in Octavia I would look in  the members table to see which one of the embers is down. Also a common problem is suers not specifying healthchecks19:31
bogdanaaah, I for sure did not configure healtchecks19:34
bogdanbut how about the VIP port, why would it be in such an ugly state, status = DOWN, binding:vif_type = unbound, etc.19:36
bogdanI have no members yet, johnsom said I should be able to curl VIP port but it is DOWN, I do not want to proceed with pool, member, healtcheck creation before I get this VIP port up and running19:37
*** dmk0202 has joined #openstack-lbaas19:38
xgermanyeah, it will return some error page without members so that will wirk19:46
xgermanVIP port weird - I have no idea but maybe blogan can help19:46
*** AnothrLundquist has quit IRC19:50
johnsombogdan We would not plug another port for the members if it is the same network as your VIP.  192.168.1.60 and 192.168.1.61 are your two VIP ports, one will be the allowed address pairs port.  The other being down is ok and should not impact your VIP functionality19:55
johnsomNo matter what the port says, you can't curl your vip?19:55
bogdannope, I was just reviewing the security group rules if they prevent 80 port but they seem ok19:56
bogdanand curl to VIP port fails with no route to host19:56
johnsomAh, ok, so your host can't get to the VIP netowrk19:56
bogdanI am trying to ping the VIP via the qdhcp-namespace of the subnet where these IPs live19:56
johnsomsbalukoff Yes, I plan to have a short meeting today19:57
bogdanwhen using the namespace I can ping the router port in the network e..g 192.168.1.2 ...but not the 60 or 61 IPs...19:57
*** mixos has quit IRC19:57
johnsomPing is blocked by the security group I think19:58
*** minwang2 has joined #openstack-lbaas19:58
johnsomOnly 80 should be open19:58
bogdanI added ICMP rules to all SGs19:58
bharathmbogdan: do you have allow ICMP rule for the port ?19:58
bogdanyes19:58
bharathmAs jhonsom said, one of those is VIP and the other is address-pair port.. From Neutron perspective, its ok for the VIP port to be DOWN and unbound FYI19:59
johnsomOctavia meeting starting soon on #openstack-meeting-alt19:59
bogdanwow! that is a relief ...I was afraid I have a severe problem with NEutron19:59
bogdanok then I am missing something else20:00
bharathmbogdan: see if you can reach any other VMs with a port plugged from this subnet20:00
bharathmfrom qdhcp-* ns20:00
bogdanso which of the two ports 60 or 61 is supposed to be my VIP that I can curl?20:00
bharathmThe one from neutron lbaas-loadbalancer-list is the VIP port IP add20:01
rm_workwhatever you put as the listener port when you created the LB20:01
bharathmThe one from nova list output is the service address-pair owner..20:01
rm_workor, maybe i am missing context20:01
bharathmrm_work: he's referring to neutron ports20:01
rm_workah20:01
bogdanI can ping 192.168.1.1 and 2 which are the router and dhcp ports in that subnet20:03
bogdanbut cannot ping 60 or 6120:03
bogdanping to 60 or 61 says Destination Host Unreachable20:03
bharathmbogdan: that means you received no response from that interface.. So either VM is down OR the interface on the VM is corrupted as you have already added the SG rules..20:04
bharathmIf you can, ssh into the amphora and do "$ip a"20:04
bogdanyes, I can ssh to the amphora via the amphora net (in my case 10.1.0.14 is the IP of the amphora) here is what ip a says: http://paste.openstack.org/show/496813/20:09
bogdanI only see the amphora network interface there... I did not know I should have more interfaces there.... who controls them? when and how are these created? cloud-init?20:10
bharathmbogdan: Sorry.. the interface are moved to the namespace.. Try "$sudo ip netns exec amphora-haproxy ip a"20:15
bogdaninside the amphora vm?20:16
bogdanhere it is http://paste.openstack.org/show/496815/20:17
bogdanjust saw eth1 is for some reason not created - see updated http://paste.openstack.org/show/496815/20:23
*** AnothrLundquist has joined #openstack-lbaas20:26
*** mjblack has quit IRC20:27
*** kobis has joined #openstack-lbaas20:29
bharathmbogdan: as you can see eth1 is down and has no IP address.. A functioning amphora should have eth1 and eth1:0 with VM port and VIP port ip addresses respectively20:31
bogdanI got that but now wondering what the cause for this is, I have built the amphora image using the tutorial ./diskimage-create.sh -o /home/I030730/openstack/octavia/amphora-ubuntu-x64-haproxy -s 2 -t qcow220:33
bogdanwhat am I missing?20:33
bharathmplug-vip task may have failed.. check amphora agent log20:35
bogdanbut the very first lines of cloud init say that eth1 is not up...shouldn't it be up already there? (see last lines in the paste above)20:36
bogdanquick question - what is haproxy_template  in [haproxy_amphora] in octavia.conf? mine is commented20:37
*** mjblack has joined #openstack-lbaas20:37
rm_workbogdan: the jinja template to use to make the haproxy config20:37
rm_workyou can customize it and use one for your own deployment if you have specific requirements about ram usage or core affinity or whatever20:38
rm_workby default it uses the simple one we ship20:38
rm_worki forget the path20:38
bogdanok then this is not the problem20:39
bogdanwhere is the amphora log? just /var/log/syslog or some dedicated file?20:40
rm_workyou mean on the actual amphora itself?20:41
bogdanyes20:41
rm_workI actually ... am not sure, lol20:41
bogdanin syslog I see IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready20:41
bogdanhow are eth1 and eth1:0 supposed to be configured on the amphora? who and when is doing it?20:42
rm_workjohnsom might know, he was working on pulling the amp logs during our gate tests so i'm guessing he at least knows where the files are :P20:42
rm_workbogdan: the REST Agent does it20:42
rm_workwell, some of it20:42
rm_worksome of it is nova doing it on boot20:42
*** pcaruana has quit IRC20:42
johnsombogdan Yes, eth1 and eth1:0 are cofigured.  They are part of the amphora-haproxy namespace though20:43
johnsomThe are for the VIP20:43
*** rcernin has joined #openstack-lbaas20:44
bogdanok but in my amphora they fail to configure20:44
bogdanI see also dhclient: Error getting hardware address for "eth1": No such device in amphora /var/log/syslog...20:44
bogdanand tons of failures in the sense of:20:45
bogdanMay 11 18:04:37 amphora-c8697146-42dc-446b-8f55-2f2188eaad88 os-collect-config: 2016-05-11 18:04:37.609 1155 WARNING os_collect_config.local [-] /var/lib/os-collect-config/local-data not found. Skipping May 11 18:04:37 amphora-c8697146-42dc-446b-8f55-2f2188eaad88 os-collect-config: 2016-05-11 18:04:37.613 1155 WARNING os_collect_config.local [-] No local metadata found (['/var/lib/os-collect-config/local-data']) May 11 18:04:20:45
bogdanone generic question - could the amphora vm creation process be impacted by the fact that I am behind proxy and there is no proxy configured inside amphora?20:46
bogdanjohnsom, where are the eth1 and eth1:0 configured? the os for some reason cannot use them20:47
johnsomWell, note, they are in a network namespace, so you have to interact with them different than a normal interface20:47
johnsomip netns exec amphora-haproxy ifconfig20:48
bogdanyes, bharathm already explained this20:48
bogdansee above20:48
*** mixos has joined #openstack-lbaas20:49
bogdanand ip netns exec amphora-haproxy ifconfig sys: http://paste.openstack.org/show/496815/20:49
bogdanso interfaces are for some reason not configured on a very basic level - the very start of cloud init reports eth1 down - look at http://paste.openstack.org/show/496818/20:50
johnsomYeah, cloud init will not see the eth1 in the namespace, only the eth1 outside the namespace20:51
bogdanhm, how to troubleshoot then? :)20:52
bogdanwho and when configures those interfaces in the namespace? is this part of the image?20:52
*** minwang2 has quit IRC20:53
bogdanjohnsom, here is what I have as config for eth1 on the vm http://paste.openstack.org/show/496822/20:54
*** mjblack has quit IRC21:01
johnsombogdan That is the management interface outside of the namespace.  What is in /etc/netns/amphora-haproxy/network/interfaces.d21:02
*** evgenyf has quit IRC21:02
johnsom?21:02
johnsomnote, there will be multiple eth1's, some inside namespace, some outside21:03
johnsomAssuming you are running Master code and not liberty/mitaka21:03
johnsombogdan the amphora agent inside the amphora creates those interfaces with the VIP is plugged into the amphora.21:04
*** mjblack has joined #openstack-lbaas21:06
bogdanI am running openstack Liberty21:09
*** rtheis has quit IRC21:09
bogdanand did git clone https://github.com/openstack/octavia.git21:09
bogdanso octavia is from master21:10
bogdanthe rest is from liberty21:10
johnsomAhhh, ok, way different21:11
johnsomThere are no namespaces in the liberty version21:12
johnsomOh, sorry, mis-read21:12
bogdanI see an interesting file where I guess everything happens about namespaces, interfaces, but cannot tell how it was executed /etc/init/haproxy-8d30f0a1-3901-4e97-8cae-b70324ae3586.conf21:15
bogdanI see /var/log/upstart/haproxy-8d30f0a1-3901-4e97-8cae-b70324ae3586.log which only contains:21:16
bogdantwo lines:21:16
bogdanCannot not create namespace file "/var/run/netns/amphora-haproxy": File exists Wed May 11 18:52:02 UTC 2016 Starting HAProxy21:16
bogdanaccording to this conf file interfaces should be created but they are somehow not configured21:17
johnsomThat is fine, that code only runs if the amp is rebooted21:18
kongooh, again I missed the irc meeting...21:19
johnsombogdan The code that does the plug is here: https://github.com/openstack/octavia/blob/master/octavia/amphorae/backends/agent/api_server/plug.py#L4521:19
konganyone may take a look at https://review.openstack.org/#/c/314410/, need more feedback for working on that21:20
kongit's prettry simple, just need consensus21:20
bogdanjohnsom, what is the relation between plug.py and the conf file on the amphora?21:22
johnsomWhich conf?21:22
bogdan /etc/init/haproxy-8d30f0a1-3901-4e97-8cae-b70324ae3586.conf on the amphora vm21:23
*** TrevorV has quit IRC21:23
johnsomAh, another part of the amphora-agent code generates that haproxy conf21:23
johnsomSo, virtually no relation21:24
bogdanso, the plug.py is executed inside the amphora vm? how can I debug it - when does this piece of code run?21:25
bogdanI see 3 instances of  /usr/bin/python /usr/local/bin/amphora-agent --config-file /etc/octavia/amphora-agent.conf already running in the amphora vm, where are they logging to?21:29
johnsomIt logs to /var/log/upstart/amphora-agent21:33
bogdannothing indicates that the agent failed creating those interfaces http://paste.openstack.org/show/496827/21:35
bogdanso no errors but also no interfaces configured :) how to troubleshoot this?21:36
*** crc32 has joined #openstack-lbaas21:43
bogdanjohnsom, when is the plug_vip code executed from amphora lifecycle point of view?22:07
johnsomload balancer create22:07
bogdanhow can I debug that?22:08
bogdanI tried to shutdown the amphora-agent manually but could not do it as it was respawning, then decided to reboot vm but then health manager decided to revert it and deleted the whole VM :)22:09
johnsomYeah, these are cattle, the controller will nuke it and startup a replacement (which has a bug I'm working on right now with the namespaces).22:11
johnsomIf you want to monkey with the amphora-agent (don't recommend it, as if there are no logs for the agent, it succeeded at it's role)22:12
johnsomyou have to stop the health manager22:12
bogdanbut if it succeeded then why these interfaces are down on the amphora vm?22:13
*** mixos has quit IRC22:17
*** ducttape_ has quit IRC22:24
*** yamamoto has quit IRC22:28
*** yamamoto has joined #openstack-lbaas22:28
bogdanjohnsom, I did manually setup the eth1 interface in amphora-haproxy interface and I could finally ping it from octavia host, but the question remains why the setup during plug is not happening22:46
bogdanhow is the plug_vip executed - is it initiated from octavia servier remotely? or is it run automatically by agent on first run or something?22:47
bogdanI want to check what properties are used by the plug_vip code22:47
*** dmk0202 has quit IRC22:47
bogdane.g. where is it getting the IPs from22:48
johnsomYou setup the files under /etc/netns/amphora-haproxy/network/interfaces.d?23:00
johnsomThese are what the plug.py sets up for the VIP interfaces23:01
bogdani did not touch these, i just die ip netns exec amphora-haproxy ifconfig eth1 192.168.1.6323:06
bogdanand that was all - I could ping the interface23:06
bogdanso, it seems the plug_vip did not execute something properly23:07
bogdannow I added a breakpoint at nano +220 /usr/lib/python2.7/site-packages/octavia/amphorae/drivers/haproxy/rest_api_driver.py and I saw that arguments are sent ok23:07
johnsomVery unusual23:07
*** yuanying has joined #openstack-lbaas23:10
*** zigo has quit IRC23:14
*** zigo has joined #openstack-lbaas23:15
bogdanjohnsom, i think I have found something - shouldn't this folder contain interface configs? /etc/netns/amphora-haproxy/network/interfaces.d23:23
johnsomYes, as the VIP is plugged, plug.py will create that folder and the required contents23:23
bogdanI do not have the file there but I have it in /etc/network/interfaces.d/eth1.cfg23:24
johnsomThat file is for the management interface, the eth1 outside the namespace23:24
bogdanand that is because in /etc/octavia/amphora-agent.conf [amphora_agent] I have agent_server_network_dir = /etc/network/interfaces.d/23:24
johnsomYep23:24
bogdannope, my management interface is eth023:25
bogdanfrom what I got this should be my VIP http://paste.openstack.org/show/496830/23:26
johnsomAh, right.  Then that file should not be there if it's the right version of Octavia.  can you go to /opt/amphora-agent and do a "git log"23:26
johnsom?23:26
bogdanbut looking at the code eth1 is expected to be in a differet location23:27
bogdanhere is git log http://paste.openstack.org/show/496831/23:28
johnsomThat should be right23:29
bogdanjust wondering why the code assumes /etc/netns/... if then util.get_network_interface_file is using CONF settings23:29
bogdanshould I just change my agent_server_network_dir to be /etc/netns/amphora-haproxy/network/interfaces.d, would that fix it?23:30
johnsom the /etc/netns path is an overlay directory.  To applications running in the namespace or are namespace aware they look like /etc/network23:31
bogdanok but in order to make plug_vip to work properly I should change my agent_server_network_dir to be /etc/netns/amphora-haproxy/network/interfaces.d, right?23:33
johnsomNo, that would break the overlay23:33
*** diogogmt_ has joined #openstack-lbaas23:34
bogdanok then I am lost ;)23:34
*** diogogmt_ has quit IRC23:34
bogdanhow is it supposed for the eth1.cfg file to go to the /etc/netns/ location ?23:35
johnsomTo the code running in the namespace /etc/netns/* does not exist as linux maps /etc/netns/* to be /etc/network23:35
bogdanI got that but did not quite get where eth1.cfg file should be23:36
*** diogogmt has quit IRC23:37
*** cody-somerville has joined #openstack-lbaas23:42
*** ajo has quit IRC23:45
bogdanjohnsom, if eth1.cfg is dedicated for programs that run in the amphora-haproxy namespace then shouldn't this file be copied to /etc/netns/amphora-haproxy/network/interfaces.d so that they would see it as /etc/network/interfaces.d/eth1.cfg?23:47
johnsomThis code creates the eth1.cfg in /etc/netns/... https://github.com/openstack/octavia/blob/master/octavia/amphorae/backends/agent/api_server/plug.py#L8523:48
*** ajo has joined #openstack-lbaas23:49
*** BjoernT has quit IRC23:50
bogdanwell, if I read the code correctly this line uses interface_file_path variable, which is taken from util.get_network_interface_file, which is using CONF.amphora_agent.agent_server_network_file or CONF.amphora_agent.agent_server_network_dir, right?23:54
johnsomYeah, I'm seeing that too23:54
johnsomAh, ok, so the new default is: # agent_server_network_dir = /etc/netns/amphora-haproxy/network/interfaces.d/23:55
johnsomSo it is putting them in that path23:55
bogdanin my conf agent_server_network_dir = /etc/network/interfaces.d/, and agent_server_network_file is missing, so in my case plug_vip creates the file not in /etc/netns....23:55
johnsomAhh, ok, you set that to /etc/network/interfaces.d?23:56
johnsomhttps://github.com/openstack/octavia/blob/master/etc/octavia.conf#L21723:56
bogdanyes, seems I was looking to older examples23:56
johnsomThis is the default config file23:56
bogdanindeed :)23:56
johnsomAh, ok23:56
bogdanso I need to update it :)23:56
johnsomIt becomes clearer now23:56
johnsomYeah, those amphora_agent settings really shouldn't be in the config file as they are internal use to the amphora.  They got added back in because people kept seeing them and thinking they were "missing" from the config23:57
johnsomThey really shouldn't be changed23:58
bogdanoh, it was even worse - I had it commented in my config, so I guess it is taking the old default from somewhere23:58
johnsomIf it is commented out, it should use: https://github.com/openstack/octavia/blob/master/octavia/common/config.py#L6923:58
johnsomTo double check what it is using, you can enabled debug in the octavia.conf and restart the worker process.  That will log the "actual" configuration settings used as it starts up23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!