*** fnaval_ has quit IRC | 00:05 | |
*** davidlenwell has quit IRC | 00:11 | |
*** davidlenwell has joined #openstack-lbaas | 00:25 | |
*** fnaval has joined #openstack-lbaas | 00:27 | |
*** ipsecguy has quit IRC | 00:28 | |
*** ipsecguy has joined #openstack-lbaas | 00:46 | |
openstackgerrit | zhangyanxian proposed openstack/neutron-lbaas: Fix typo in v2_driver.py https://review.openstack.org/378111 | 00:46 |
---|---|---|
openstackgerrit | zhangyanxian proposed openstack/neutron-lbaas: Fix typo in v2_driver.py https://review.openstack.org/378111 | 00:47 |
*** ducttape_ has quit IRC | 01:08 | |
*** ipsecguy has quit IRC | 01:09 | |
openstackgerrit | Merged openstack/octavia: Updated from global requirements https://review.openstack.org/377918 | 01:13 |
*** kev0 has quit IRC | 01:16 | |
*** bank_ has quit IRC | 01:16 | |
*** ipsecguy has joined #openstack-lbaas | 01:19 | |
*** ducttape_ has joined #openstack-lbaas | 01:36 | |
*** ducttape_ has quit IRC | 01:37 | |
*** ducttape_ has joined #openstack-lbaas | 01:41 | |
*** ipsecguy has quit IRC | 01:49 | |
openstackgerrit | He Qing proposed openstack/octavia: Add MTU configuraion when plugging vip or network https://review.openstack.org/377332 | 01:50 |
*** ipsecguy has joined #openstack-lbaas | 01:50 | |
*** ducttape_ has quit IRC | 02:09 | |
*** ipsecguy has quit IRC | 02:33 | |
*** ipsecguy has joined #openstack-lbaas | 02:36 | |
*** ducttape_ has joined #openstack-lbaas | 03:09 | |
*** armax has quit IRC | 03:18 | |
*** bana_k has joined #openstack-lbaas | 03:18 | |
*** ipsecguy has quit IRC | 03:27 | |
*** ducttape_ has quit IRC | 03:33 | |
*** ipsecguy has joined #openstack-lbaas | 03:45 | |
openstackgerrit | Phillip Toohill proposed openstack/octavia: Add quota support to Octavia https://review.openstack.org/360794 | 03:58 |
*** njohnston__ is now known as njohnston | 04:01 | |
*** yamamoto_ has quit IRC | 04:17 | |
*** amotoki has joined #openstack-lbaas | 04:28 | |
*** gcheresh_ has joined #openstack-lbaas | 04:28 | |
*** kevo has joined #openstack-lbaas | 04:50 | |
*** yamamoto has joined #openstack-lbaas | 04:59 | |
*** links has joined #openstack-lbaas | 05:09 | |
*** links has quit IRC | 05:15 | |
*** links has joined #openstack-lbaas | 05:17 | |
*** anilvenkata has joined #openstack-lbaas | 05:21 | |
*** carrbs has quit IRC | 05:26 | |
*** woodster_ has quit IRC | 05:30 | |
*** anilvenkata is now known as anilvenkata_afk | 05:47 | |
*** Alex_Stef__ has joined #openstack-lbaas | 05:50 | |
*** rcernin has joined #openstack-lbaas | 06:14 | |
*** kobis has joined #openstack-lbaas | 06:30 | |
*** bana_k has quit IRC | 06:32 | |
*** pcaruana has joined #openstack-lbaas | 06:37 | |
*** ihrachys has joined #openstack-lbaas | 06:37 | |
*** ihrachys has quit IRC | 06:40 | |
*** ihrachys has joined #openstack-lbaas | 06:41 | |
*** ihrachys has quit IRC | 06:44 | |
*** reedip has quit IRC | 07:11 | |
*** links has quit IRC | 07:16 | |
openstackgerrit | Valleriya Perelman proposed openstack/octavia: ACTIVE-ACTIVE - controller network tasks https://review.openstack.org/323481 | 07:18 |
openstackgerrit | Valleriya Perelman proposed openstack/octavia: ACTIVE-ACTIVE - network driver related changes https://review.openstack.org/322494 | 07:18 |
openstackgerrit | Valleriya Perelman proposed openstack/octavia: ACTIVE-ACTIVE Topology - amphora cluster DB https://review.openstack.org/327138 | 07:18 |
openstackgerrit | Valleriya Perelman proposed openstack/octavia: ACTIVE-ACTIVE Topology - Distributor image creation https://review.openstack.org/327137 | 07:18 |
*** jsheeren has joined #openstack-lbaas | 07:21 | |
*** reedip has joined #openstack-lbaas | 07:25 | |
*** nmagnezi has joined #openstack-lbaas | 07:35 | |
*** fnaval has quit IRC | 07:39 | |
*** fnaval has joined #openstack-lbaas | 07:39 | |
*** links has joined #openstack-lbaas | 07:45 | |
*** eezhova has joined #openstack-lbaas | 07:48 | |
*** strigazi_AFK is now known as strigazi | 07:49 | |
*** ihrachys has joined #openstack-lbaas | 07:51 | |
*** kevo has quit IRC | 08:10 | |
*** links has quit IRC | 08:21 | |
*** links has joined #openstack-lbaas | 08:37 | |
*** openstackgerrit has quit IRC | 08:48 | |
*** openstackgerrit has joined #openstack-lbaas | 08:49 | |
*** jsheeren has quit IRC | 08:50 | |
*** numans has joined #openstack-lbaas | 09:25 | |
*** kobis has quit IRC | 09:30 | |
openstackgerrit | Valleriya Perelman proposed openstack/octavia: ACTIVE-ACTIVE Topology - Initial Cluster Manager https://review.openstack.org/336925 | 10:10 |
*** yamamoto has quit IRC | 10:13 | |
*** ihrachys has quit IRC | 10:22 | |
*** anilvenkata_afk has quit IRC | 10:31 | |
*** anilvenkata_afk has joined #openstack-lbaas | 10:31 | |
*** numan_ has joined #openstack-lbaas | 10:31 | |
*** numans has quit IRC | 10:35 | |
*** eezhova has quit IRC | 10:39 | |
*** links has quit IRC | 10:53 | |
*** links has joined #openstack-lbaas | 11:02 | |
*** eezhova has joined #openstack-lbaas | 11:40 | |
*** anilvenkata_afk is now known as anilvenkata | 11:43 | |
ajo_ | ping ptoohill https://review.openstack.org/#/c/371807/12 | 11:58 |
ajo_ | ptoohill, did you get this to work ? :) | 11:58 |
ajo_ | ptoohill, oh, I see it works :) | 12:02 |
*** yamamoto has joined #openstack-lbaas | 12:16 | |
*** ducttape_ has joined #openstack-lbaas | 12:17 | |
*** ducttape_ has quit IRC | 12:19 | |
*** ducttape_ has joined #openstack-lbaas | 12:19 | |
*** yamamoto has quit IRC | 12:25 | |
*** eezhova has quit IRC | 12:28 | |
*** ducttape_ has quit IRC | 12:40 | |
*** duvarenkov has quit IRC | 12:42 | |
*** duvarenkov has joined #openstack-lbaas | 12:43 | |
*** yamamoto has joined #openstack-lbaas | 12:45 | |
*** yamamoto has quit IRC | 12:45 | |
*** yamamoto has joined #openstack-lbaas | 12:49 | |
*** Alex_Stef__ has quit IRC | 12:56 | |
*** fnaval has quit IRC | 13:02 | |
*** Alex_Stef__ has joined #openstack-lbaas | 13:04 | |
*** portdirect has joined #openstack-lbaas | 13:07 | |
*** yamamoto has quit IRC | 13:07 | |
*** yamamoto has joined #openstack-lbaas | 13:08 | |
*** woodster_ has joined #openstack-lbaas | 13:13 | |
*** matt-borland has joined #openstack-lbaas | 13:14 | |
*** fnaval has joined #openstack-lbaas | 13:19 | |
*** ducttape_ has joined #openstack-lbaas | 13:20 | |
*** ducttape_ has quit IRC | 13:25 | |
*** eezhova has joined #openstack-lbaas | 13:29 | |
*** jsheeren has joined #openstack-lbaas | 13:30 | |
*** links has quit IRC | 13:38 | |
*** bdeschenes has joined #openstack-lbaas | 13:48 | |
*** ducttape_ has joined #openstack-lbaas | 13:49 | |
*** TrevorV has joined #openstack-lbaas | 14:17 | |
TrevorV | ptoohill, whenever you're online, hit me up | 14:17 |
*** nmagnezi has quit IRC | 14:20 | |
rm_work | TrevorV: o/ | 14:27 |
TrevorV | Hey rm_work how goes it? | 14:27 |
rm_work | ¯\_(ツ)_/¯ | 14:28 |
TrevorV | Yeah, I know the feels ha ha | 14:29 |
*** jsheeren has quit IRC | 14:30 | |
*** pglass has joined #openstack-lbaas | 14:31 | |
*** Alex_Stef__ has quit IRC | 14:32 | |
*** numan_ has quit IRC | 14:32 | |
*** pglass has quit IRC | 14:32 | |
*** pglass has joined #openstack-lbaas | 14:33 | |
*** AlexeyAbashkin has joined #openstack-lbaas | 14:38 | |
openstackgerrit | Miguel Angel Ajo proposed openstack/octavia: Enable support for multinode in the gate hook https://review.openstack.org/378677 | 14:51 |
*** brad_behle has joined #openstack-lbaas | 14:51 | |
*** yamamoto has quit IRC | 14:52 | |
*** yamamoto has joined #openstack-lbaas | 14:52 | |
*** _ducttape_ has joined #openstack-lbaas | 14:54 | |
TrevorV | Hey ptoohill, hit me up on hangouts when you get online, I'm going to be AFK | 14:56 |
*** ducttape_ has quit IRC | 14:57 | |
*** carrbs has joined #openstack-lbaas | 14:58 | |
*** Guest78091 is now known as redrobot | 14:59 | |
*** gcheresh_ has quit IRC | 14:59 | |
*** armax has joined #openstack-lbaas | 15:01 | |
*** rcernin has quit IRC | 15:04 | |
*** amotoki has quit IRC | 15:16 | |
*** reedip has quit IRC | 15:23 | |
*** _ducttape_ has quit IRC | 15:26 | |
*** ducttape_ has joined #openstack-lbaas | 15:27 | |
johnsom | njohnston FYI, the Octavia release is now posted to the newton release page: https://releases.openstack.org/newton/#octavia | 15:30 |
johnsom | I saw that you asked about it yesterday | 15:31 |
njohnston | Thanks johnsom! | 15:31 |
*** Alex_Stef__ has joined #openstack-lbaas | 15:31 | |
*** bana_k has joined #openstack-lbaas | 15:35 | |
*** ihrachys has joined #openstack-lbaas | 15:36 | |
*** reedip has joined #openstack-lbaas | 15:37 | |
*** ihrachys has quit IRC | 15:39 | |
*** ihrachys has joined #openstack-lbaas | 15:39 | |
*** reedip has quit IRC | 15:51 | |
*** reedip has joined #openstack-lbaas | 16:05 | |
*** brad_behle has quit IRC | 16:09 | |
*** njohnston has quit IRC | 16:15 | |
*** njohnston has joined #openstack-lbaas | 16:16 | |
*** strigazi is now known as strigazi_AFK | 16:21 | |
*** njohnston has quit IRC | 16:22 | |
*** njohnston has joined #openstack-lbaas | 16:23 | |
*** yamamoto has quit IRC | 16:23 | |
*** njohnston has quit IRC | 16:25 | |
*** anilvenkata has quit IRC | 16:29 | |
*** ihrachys has quit IRC | 16:29 | |
*** reedip has quit IRC | 16:30 | |
*** njohnston has joined #openstack-lbaas | 16:30 | |
*** njohnston has quit IRC | 16:32 | |
*** njohnston has joined #openstack-lbaas | 16:32 | |
*** njohnston has quit IRC | 16:33 | |
*** njohnston has joined #openstack-lbaas | 16:34 | |
*** njohnston has quit IRC | 16:35 | |
*** armax has quit IRC | 16:36 | |
*** njohnston has joined #openstack-lbaas | 16:36 | |
*** njohnston has quit IRC | 16:37 | |
johnsom | Agenda for today: https://wiki.openstack.org/wiki/Octavia/Weekly_Meeting_Agenda#Meeting_2016-09-28 | 16:37 |
*** njohnston has joined #openstack-lbaas | 16:38 | |
*** njohnston has quit IRC | 16:38 | |
*** njohnston has joined #openstack-lbaas | 16:39 | |
*** njohnston has quit IRC | 16:40 | |
*** njohnston has joined #openstack-lbaas | 16:40 | |
*** njohnston has quit IRC | 16:42 | |
*** njohnston has joined #openstack-lbaas | 16:42 | |
*** bana_k has quit IRC | 16:42 | |
*** reedip has joined #openstack-lbaas | 16:43 | |
*** njohnston has quit IRC | 16:43 | |
*** njohnston has joined #openstack-lbaas | 16:45 | |
*** njohnston has quit IRC | 16:45 | |
*** njohnston has joined #openstack-lbaas | 16:47 | |
*** njohnston has quit IRC | 16:47 | |
*** njohnston has joined #openstack-lbaas | 16:50 | |
*** njohnston has quit IRC | 16:50 | |
*** njohnston has joined #openstack-lbaas | 16:51 | |
*** njohnston has quit IRC | 16:52 | |
*** njohnston has joined #openstack-lbaas | 16:52 | |
openstackgerrit | Michael Johnson proposed openstack/octavia: Remove pypi download shield from Readme https://review.openstack.org/378808 | 16:53 |
*** njohnston has quit IRC | 16:53 | |
*** njohnston has joined #openstack-lbaas | 16:54 | |
*** njohnston has quit IRC | 16:55 | |
*** njohnston has joined #openstack-lbaas | 16:55 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/neutron-lbaas: Updated from global requirements https://review.openstack.org/378853 | 16:56 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/neutron-lbaas-dashboard: Updated from global requirements https://review.openstack.org/377473 | 16:56 |
*** njohnston has quit IRC | 16:57 | |
*** njohnston has joined #openstack-lbaas | 16:57 | |
*** Alex_Stef__ has quit IRC | 16:57 | |
*** njohnston has quit IRC | 16:58 | |
*** njohnston has joined #openstack-lbaas | 16:59 | |
*** njohnston has quit IRC | 17:00 | |
*** njohnston has joined #openstack-lbaas | 17:01 | |
*** ducttape_ has quit IRC | 17:02 | |
*** njohnston has quit IRC | 17:02 | |
*** njohnston has joined #openstack-lbaas | 17:04 | |
*** njohnston has quit IRC | 17:05 | |
*** njohnston has joined #openstack-lbaas | 17:06 | |
*** njohnston has quit IRC | 17:07 | |
*** njohnston has joined #openstack-lbaas | 17:08 | |
*** njohnston has quit IRC | 17:08 | |
*** njohnston has joined #openstack-lbaas | 17:09 | |
*** bana_k has joined #openstack-lbaas | 17:13 | |
openstackgerrit | Paul Glass proposed openstack/octavia: Basic listener scenario test https://review.openstack.org/378922 | 17:15 |
*** yamamoto has joined #openstack-lbaas | 17:23 | |
*** kevo has joined #openstack-lbaas | 17:23 | |
*** kevo has quit IRC | 17:28 | |
*** TrevorV has quit IRC | 17:29 | |
*** ducttape_ has joined #openstack-lbaas | 17:29 | |
*** yamamoto has quit IRC | 17:31 | |
*** reedip has quit IRC | 17:38 | |
*** reedip has joined #openstack-lbaas | 17:52 | |
openstackgerrit | Phillip Toohill proposed openstack/octavia: WIP: Add quota support to Octavia https://review.openstack.org/360794 | 17:53 |
*** _ducttape_ has joined #openstack-lbaas | 17:53 | |
*** ducttape_ has quit IRC | 17:57 | |
*** pglass has quit IRC | 18:00 | |
*** pglass has joined #openstack-lbaas | 18:00 | |
*** _ducttape_ has quit IRC | 18:13 | |
openstackgerrit | Merged openstack/neutron-lbaas-dashboard: Updated from global requirements https://review.openstack.org/377473 | 18:13 |
*** ducttape_ has joined #openstack-lbaas | 18:13 | |
*** portdirect has quit IRC | 18:20 | |
*** portdirect has joined #openstack-lbaas | 18:27 | |
*** woodster_ has quit IRC | 18:40 | |
*** ducttape_ has quit IRC | 18:41 | |
*** ptoohill1 has joined #openstack-lbaas | 18:46 | |
mugsie | so, with the lbaas v2 API, can I get a list of pools, filtered by loadbalancer_id, or listener_id? | 18:48 |
mugsie | johnsom: dougwig ^ | 18:48 |
*** mugsie_ has joined #openstack-lbaas | 18:49 | |
johnsom | Yes | 18:50 |
mugsie | using query params? | 18:50 |
johnsom | I think so | 18:50 |
mugsie | are you sure? | 18:50 |
johnsom | no | 18:51 |
johnsom | This so was for your first question | 18:51 |
mugsie | :) | 18:52 |
mugsie | I think we may have found a pretty big issue in kubernetes -_- | 18:52 |
johnsom | Only one? | 18:52 |
mugsie | well, another | 18:52 |
mugsie | so, anytime some one removes a service, all of their pools get deleted | 18:53 |
mugsie | for all services | 18:54 |
mugsie | so, with some expeirementation - there is no way to get a list of pools in a lb / listener | 18:54 |
mugsie | without walking tihe whole tree | 18:54 |
*** ducttape_ has joined #openstack-lbaas | 18:55 | |
pglass | mugsie: http://docs.openstack.org/developer/octavia/api/octaviaapi.html#list-pools ? unless you're not using octavia | 18:56 |
mugsie | johnsom: any reason https://github.com/openstack/neutron-lbaas/blob/master/neutron_lbaas/extensions/loadbalancerv2.py#L261-L263 has is_visable = False ? | 18:56 |
mugsie | pglass: well, we have to use lbaas's api | 18:56 |
mugsie | seen as Octivia is only one of the drivers we support | 18:56 |
pglass | ah, okay | 18:56 |
mugsie | and the octaiva API didnt have keystone auth in mitaka | 18:57 |
johnsom | mugsie, see the new version here: https://github.com/openstack/neutron-lbaas/blob/master/neutron_lbaas/extensions/sharedpools.py | 18:57 |
mugsie | ah | 18:58 |
mugsie | thats newton code right? | 18:58 |
johnsom | Mitaka | 18:58 |
mugsie | I thought shared pools didnt make it? | 18:58 |
mugsie | huh | 18:58 |
mugsie | OK. | 18:58 |
sbalukoff | Shared pools and L7 has been in since Mitaka. | 18:59 |
johnsom | Yeah, it made it. It was the cascade stuff that didn't all make it | 18:59 |
mugsie | and that shoudl show up in neutron ext-list , right? | 19:00 |
johnsom | yes, it does | 19:01 |
mugsie | damn | 19:01 |
johnsom | | shared_pools | Shared pools for LBaaSv2 | | 19:01 |
mugsie | OK, without that extension - who can I get a list of pools used by an Loadbalancer? can a listener only ever have one pool? | 19:03 |
sbalukoff | Um... I don't know anyone running Neutron-LBaaS that doesn't use that extension. Why would you exclude it? | 19:04 |
johnsom | Yeah, that would be strange | 19:04 |
johnsom | Or are you running liberty? | 19:05 |
mugsie_ | I did not work on the lbaas team in hpe ;) | 19:05 |
johnsom | I did, but when I left it was liberty.... | 19:06 |
mugsie_ | It's definitely mitaka | 19:06 |
xgerman | I am pretty sure it still is | 19:06 |
*** anilvenkata has joined #openstack-lbaas | 19:07 | |
xgerman | johnsom did you get the single create/delete into N? | 19:07 |
* xgerman is too lazy to read release notes | 19:07 | |
sbalukoff | I'm pretty sure that landed really early in the cycle. | 19:07 |
johnsom | Yeah, I think so as well. | 19:07 |
xgerman | well, mugs once we are on N things will be real easy :-( | 19:08 |
xgerman | :-) | 19:08 |
sbalukoff | Haha | 19:08 |
mugsie_ | Heh | 19:08 |
johnsom | https://pypi.python.org/pypi/octavia | 19:09 |
johnsom | It's up there for the grabbing.... | 19:09 |
johnsom | grin | 19:09 |
* mugsie will just write in go | 19:09 | |
mugsie | :D | 19:09 |
mugsie | thats the thing these days right? | 19:09 |
sbalukoff | Rust, I hear. | 19:09 |
sbalukoff | XD | 19:09 |
mugsie | oh - true | 19:09 |
mugsie | new governance patch needed | 19:09 |
mugsie | OK, going to bang my head against the wall again in the morning | 19:13 |
mugsie | enjoy your day folks | 19:13 |
mugsie | I also filed https://bugs.launchpad.net/octavia/+bug/1627780 if anyone wants to take a look :) | 19:14 |
openstack | Launchpad bug 1627780 in octavia "Octavia creates security groups on Load Balancer ports" [Undecided,New] | 19:14 |
johnsom | mugsie What do you want to change on the SG? | 19:16 |
zetab | A: stay out of security groups (this is the best option) | 19:16 |
zetab | why it is best option to ignore security groups? | 19:16 |
zetab | well, i must say that at least in my company security groups is quite important part of the whole stack | 19:16 |
mugsie_ | Well, Octavia stay out of them - I want control | 19:22 |
mugsie_ | For example my app servers are in one group | 19:22 |
mugsie_ | So to allow traffic from the lbs I need to add an allow rule from their security group | 19:23 |
mugsie_ | However I can't see it | 19:23 |
mugsie_ | It's in the Octavia tenant | 19:23 |
mugsie_ | So I can't add that rule | 19:23 |
mugsie_ | And if I got to update the groups on the port, I can't as I can't see the rule | 19:23 |
mugsie_ | So I have to remove the Octavia group to do anything | 19:24 |
sbalukoff | Hmmm... Well, octavia amphorae are owned by the Octavia project by design, so we're unlikely to entertain ideas that alter that. And Octavia is built to hot-plug into tenant networks on the back-end, meaning it'll end up owning the ports. And again, we probably want to continue with this being the case in order to facilitate things like fail-over and eventually auto-scale active-active | 19:34 |
sbalukoff | configurations. | 19:35 |
sbalukoff | It's also been our preception that most regular users don't understand security groups well enough to manage them. *shrug* But maybe it makes sense to allow users to specify an optional security group to use if they don't want octavia managing them. | 19:35 |
johnsom | Yeah, I'm trying to understand the use case. | 19:35 |
sbalukoff | The question is where does that actually attach to the model? Probably on the load balancer (which includes the VIP) on the front-end. | 19:36 |
sbalukoff | But... on the member or pool on the back-end? | 19:36 |
sbalukoff | I don't think it's possible to specify security group per member, if the members are on the same network. | 19:36 |
dougwig | sg's are on ports, so i presume he means vips. | 19:36 |
dougwig | and not the internal machinery ports. | 19:37 |
sbalukoff | And the same time, attaching it to a pool means that could lead to problems if members are specified that are on different networks. | 19:37 |
*** gcheresh_ has joined #openstack-lbaas | 19:37 | |
sbalukoff | dougwig: He was talking about app servers, which is members / back-end. | 19:37 |
dougwig | isn't that a function of the initial nova boot of the member, then? | 19:38 |
sbalukoff | Or at least, that's what I understand from that. | 19:38 |
dougwig | wouldn't make sense for lbaas to be touching member SGs, IMO. | 19:38 |
sbalukoff | dougwig: Unless he's enforcing egress rules or something. | 19:38 |
sbalukoff | Or wants to. | 19:38 |
dougwig | that can still be scripted directly against the member, if it's DSR, or via the vip if proxying. | 19:39 |
sbalukoff | That's true. | 19:39 |
*** fnaval has quit IRC | 19:39 | |
sbalukoff | So yeah, back-end doesn't make sense to me. | 19:39 |
*** fnaval has joined #openstack-lbaas | 19:39 | |
sbalukoff | So, I guess I'm not understanding the use case. | 19:40 |
mugsie_ | Heh | 19:41 |
mugsie_ | So I have 3 app servers in sg1 | 19:41 |
sbalukoff | If you're concerned about who can talk to the VIP, why not put it on a network you completely control? | 19:41 |
mugsie_ | I am concerned about the vip | 19:41 |
mugsie_ | I am not* | 19:41 |
mugsie_ | Freaking phone | 19:41 |
sbalukoff | So, this is back-end stuff. | 19:42 |
* johnsom thinks it's pints not phones.... | 19:42 | |
sbalukoff | Haha! | 19:42 |
mugsie_ | johnsom: only half way through the first one :) | 19:42 |
mugsie_ | The app server group does not allow access from outside it | 19:43 |
mugsie_ | I want to allow traffic from the lb VIP port to the app server sec group | 19:43 |
sbalukoff | Um... | 19:44 |
sbalukoff | The LB VIP port shouldn't be originating any connections. | 19:44 |
mugsie_ | It seems to be | 19:44 |
sbalukoff | Are you specifying the member subnet when you're defining the members? If so, Octavia should be hot-plugging into those networks/subnets directly. | 19:45 |
mugsie_ | I need to check what was happening in 1.3 | 19:46 |
mugsie_ | I thought we did | 19:46 |
sbalukoff | 1.3? | 19:46 |
mugsie_ | Kubernetes | 19:46 |
sbalukoff | Aah. Ok. | 19:46 |
sbalukoff | You can always log into the amphora itself and poke around to see what it's doing. | 19:47 |
sbalukoff | Note that in any case I recommend using the Newton release at least, since we got network namespace on amphora support. | 19:47 |
mugsie_ | The problem is that Octavia is different to haproxy, which is different to f5, which is different to $vendor | 19:47 |
sbalukoff | And that might solve the issue you're seeing. | 19:47 |
mugsie_ | Heh | 19:47 |
mugsie_ | That's a ways off | 19:47 |
mugsie_ | I think | 19:47 |
mugsie_ | I don't work on hos anymore | 19:47 |
sbalukoff | This one is important enough, I'd consider back-porting it for your environment. *shrug* | 19:48 |
mugsie_ | Yeah, unfortunately we support other people's openstack | 19:48 |
sbalukoff | Right. | 19:48 |
mugsie_ | So no ability to make them backport | 19:48 |
johnsom | You just have to convince suse now right? | 19:48 |
johnsom | grin | 19:48 |
sbalukoff | Heh! | 19:49 |
mugsie_ | No idea what you are talking about | 19:49 |
mugsie_ | Heh | 19:49 |
mugsie_ | We shall see | 19:49 |
sbalukoff | Meeing in #openstack-meetin-alt | 19:59 |
sbalukoff | Meeting. | 19:59 |
*** nmagnezi has joined #openstack-lbaas | 20:00 | |
*** gcheresh_ has quit IRC | 20:08 | |
*** anilvenkata has quit IRC | 20:10 | |
openstackgerrit | Paul Glass proposed openstack/octavia: Basic shared pools scenario test https://review.openstack.org/378993 | 20:23 |
*** fnaval has quit IRC | 20:26 | |
*** fnaval has joined #openstack-lbaas | 20:26 | |
dougwig | sbalukoff: i'm impressed that you spelled meeting THREE different ways there. | 20:44 |
sbalukoff | dougwig: Haha! That comes of not actually reading what I type. | 20:44 |
sbalukoff | Ok, lunch time. BBL. | 20:49 |
*** nmagnezi has quit IRC | 21:08 | |
openstackgerrit | Michael Johnson proposed openstack/octavia: Use a cached get-pip.py if it is availble https://review.openstack.org/379000 | 21:11 |
openstackgerrit | Michael Johnson proposed openstack/neutron-lbaas: Use a cached get-pip.py if it is availble https://review.openstack.org/379001 | 21:11 |
johnsom | That should fix it for our gates. Infra is also updating their image build process. | 21:13 |
*** tries_ has quit IRC | 21:13 | |
*** tries_ has joined #openstack-lbaas | 21:24 | |
*** tries_ has joined #openstack-lbaas | 21:24 | |
*** matt-borland has quit IRC | 21:32 | |
*** pglass has quit IRC | 22:11 | |
*** bdeschenes has quit IRC | 22:20 | |
*** reedip has quit IRC | 22:21 | |
*** ducttape_ has quit IRC | 22:22 | |
ptoohill | That didnt seem to fix it johnsom :( | 22:25 |
ptoohill | wait, nvm | 22:25 |
johnsom | Which? | 22:25 |
johnsom | I'm still waiting for the get-pip.py thing | 22:25 |
ptoohill | yeah, it looked like they all failed | 22:25 |
johnsom | Well, the octavia one bombed on a bad mirror | 22:26 |
ptoohill | looking at zuul | 22:26 |
ptoohill | the pypa thing | 22:26 |
ptoohill | i thought this was a fix for the underlying issue there | 22:26 |
johnsom | W: Failed to fetch http://mirror.regionone.osic-cloud1.openstack.org/ubuntu/dists/trusty-updates/main/binary-amd64/Packages Hash Sum mismatch | 22:26 |
ptoohill | ah, i clicked wrong one | 22:27 |
ptoohill | mybad | 22:27 |
johnsom | Ok, yeah, it didn't work.... hmmm | 22:29 |
*** bdeschenes has joined #openstack-lbaas | 22:31 | |
johnsom | So, the file wasn't found on the host | 22:31 |
johnsom | The infra guys gave me bad info | 22:31 |
*** reedip has joined #openstack-lbaas | 22:32 | |
openstackgerrit | Michael Johnson proposed openstack/neutron-lbaas: Use a cached get-pip.py if it is availble https://review.openstack.org/379001 | 22:37 |
openstackgerrit | Michael Johnson proposed openstack/octavia: Use a cached get-pip.py if it is availble https://review.openstack.org/379000 | 22:37 |
johnsom | Alright, trying another path | 22:38 |
*** ducttape_ has joined #openstack-lbaas | 22:46 | |
*** ducttape_ has quit IRC | 22:52 | |
*** ducttape_ has joined #openstack-lbaas | 22:58 | |
*** kbyrne has quit IRC | 23:06 | |
*** kbyrne has joined #openstack-lbaas | 23:08 | |
*** ducttape_ has quit IRC | 23:13 | |
openstackgerrit | Michael Johnson proposed openstack/neutron-lbaas: Use a cached get-pip.py if it is availble https://review.openstack.org/379001 | 23:22 |
*** fnaval has quit IRC | 23:55 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!