Tuesday, 2017-06-20

*** rm_mobile| has joined #openstack-lbaas00:01
*** SumitNaiksatam has quit IRC00:05
*** rm_mobile has quit IRC00:05
*** rm_mobile| has quit IRC00:07
*** openstack has joined #openstack-lbaas00:19
*** strigazi has joined #openstack-lbaas00:24
*** zigo has joined #openstack-lbaas00:24
openstackgerritMerged openstack/octavia master: Updated from global requirements  https://review.openstack.org/47556400:26
dayou@xgerman, thank you, I just squashed the commits from IBM and fixed pep8 and tox stuffs to getting started to know what they have done and have a better understanding of the spec. Would like to spend more time on it.00:35
*** yuanying has quit IRC00:36
*** fnaval has joined #openstack-lbaas00:40
*** amotoki_away is now known as amotoki00:41
*** amotoki is now known as amotoki_away00:55
*** harlowja has joined #openstack-lbaas01:04
xgerman_dayou IBM starts up a service VM with OVS on it which then uses consistent hashing through OpenFlow to distribute traffic01:28
xgerman_We think that the service VM (which they call distributor) should be managed through our existing amphora lifecycle system instead of creating a new system. So I was looking into extending the AmphoraAPI to cover the OVS distributor, too. There is quite some overlap (both use VIPs for instance)01:32
xgerman_there is another Active-Active spec in the works which uses the network fabric for hashing01:33
dayouYes, while I was sorting out their implementation, I see a lot of code duplication.01:33
dayouFold it into the same lifecycle seems to be much better.01:33
dayouYes, that's proposed by Jason using network as a distributor.01:34
xgerman_yeah, that was the focus of my work… before I even was using the OVS system01:34
xgerman_yes, Jason’s but he also thinks he could use a “distributor” to run the BGP speaker01:35
xgerman_or at least we could maybe control the BGP speaker through the Amphora API01:35
xgerman_that’s basically where we are at01:35
dayouDo you have the change request for the management of the distributor with existing amphora lifecycle system? Would ike to peak at the implemenation :-)01:37
xgerman_I will throw my WIP up then01:40
dayouYeah, don't know you already doing that, I just had some vague idea, and it is base of the following whatever backends we need to implement.01:41
xgerman_well, it’s the beginning — I got sidetracked01:42
openstackgerritGerman Eichberger proposed openstack/octavia master: ACTIVE-ACTIVE Topology: Initial Distributor Driver Mixin  https://review.openstack.org/31300601:48
xgerman_^^ dayou those are my humble beginnings01:49
xgerman_let me know if you like to take over or if I should finish this. If I know you are waiting for that I can try to accelerate01:50
dayouI think definitely you have better understanding on it, we are waiting and counting on it to implement other backends.01:53
xgerman_ok01:53
xgerman_I will see what I can do01:54
openstackgerritMerged openstack/octavia master: Remove deprecated signing_dir config setting  https://review.openstack.org/47363002:01
*** amotoki_away is now known as amotoki02:01
*** amotoki is now known as amotoki_away02:11
*** yamamoto has joined #openstack-lbaas02:17
*** armax has joined #openstack-lbaas02:19
*** raginbajin has quit IRC02:33
*** yuanying has joined #openstack-lbaas02:35
*** amotoki_away is now known as amotoki02:36
*** raginbajin has joined #openstack-lbaas02:39
*** gongysh has joined #openstack-lbaas02:59
*** yuanying has quit IRC03:04
*** armax has quit IRC03:04
*** yuanying has joined #openstack-lbaas03:04
*** dayou has quit IRC03:05
*** yuanying has quit IRC03:09
*** armax has joined #openstack-lbaas03:10
*** dayou has joined #openstack-lbaas03:15
*** gans has joined #openstack-lbaas03:19
*** amotoki is now known as amotoki_away03:24
*** links has joined #openstack-lbaas03:58
*** catintheroof has quit IRC04:01
*** csomerville has joined #openstack-lbaas04:14
*** cody-somerville has quit IRC04:17
*** jerrygb has joined #openstack-lbaas04:36
*** gans819 has joined #openstack-lbaas04:47
*** amotoki_away is now known as amotoki04:48
*** gans has quit IRC04:50
*** gans819 has quit IRC04:55
*** gongysh has quit IRC04:56
openstackgerritHengqing Hu proposed openstack/octavia-dashboard master: Fix npm test  https://review.openstack.org/47564704:58
*** rstarmer has quit IRC04:58
dayou@eandersson, I spent some time fixing npm test, local test passed, feel free to help review it.04:58
*** amotoki is now known as amotoki_away05:00
*** jerrygb_ has joined #openstack-lbaas05:01
dayou@xgerman, thank you, if there are trivial things you'd like me to do, just let me know.05:01
*** jerrygb has quit IRC05:03
*** yuanying has joined #openstack-lbaas05:11
*** pcaruana has joined #openstack-lbaas05:14
*** pcaruana has quit IRC05:30
*** gongysh has joined #openstack-lbaas05:30
*** armax has quit IRC06:10
*** armax has joined #openstack-lbaas06:27
*** amotoki_away is now known as amotoki06:31
*** gcheresh has joined #openstack-lbaas06:33
*** tesseract has joined #openstack-lbaas06:40
*** gongysh has quit IRC06:41
*** amotoki is now known as amotoki_away06:49
*** links has quit IRC06:49
*** pcaruana has joined #openstack-lbaas06:49
*** rcernin_ has joined #openstack-lbaas06:53
*** gongysh has joined #openstack-lbaas07:04
*** links has joined #openstack-lbaas07:05
nmagnezirm_work, o/07:06
nmagnezirm_work, i wanted to help with a review.. but got no replay to https://review.openstack.org/#/c/474790/7//COMMIT_MSG07:06
nmagnezi:<07:06
*** amotoki_away is now known as amotoki07:06
*** amotoki is now known as amotoki_away07:22
*** amotoki_away is now known as amotoki07:29
*** kobis has joined #openstack-lbaas07:30
*** pcaruana|afk| has joined #openstack-lbaas07:35
*** pcaruana|afk| has quit IRC07:35
*** pcaruana has quit IRC07:36
*** amotoki is now known as amotoki_away07:39
*** pcaruana has joined #openstack-lbaas07:40
*** amotoki_away is now known as amotoki07:53
*** links has quit IRC07:55
korean101octavia-api TRACE this messages (MissingAuthPlugin: An auth plugin is required to determine endpoint URL)07:55
korean101anyone knows?07:55
korean101i use Ocata Releases07:55
*** oomichi has quit IRC08:05
*** oomichi has joined #openstack-lbaas08:07
*** links has joined #openstack-lbaas08:08
*** sanfern has joined #openstack-lbaas08:26
*** openstackgerrit has quit IRC08:48
korean101problem solved08:53
korean101sorry...08:53
korean101my configuration mistake08:54
*** yamamoto has quit IRC09:41
*** openstackgerrit has joined #openstack-lbaas09:48
openstackgerritOpenStack Proposal Bot proposed openstack/neutron-lbaas-dashboard master: Imported Translations from Zanata  https://review.openstack.org/47571609:48
*** yamamoto has joined #openstack-lbaas09:56
*** jerrygb_ has quit IRC10:03
*** yamamoto has quit IRC10:06
*** gongysh has quit IRC10:18
*** yamamoto has joined #openstack-lbaas10:25
*** sanfern has quit IRC10:31
*** sanfern has joined #openstack-lbaas10:33
openstackgerritNir Magnezi proposed openstack/octavia master: Add RBAC enforcement to Octavia v2 API  https://review.openstack.org/47287210:44
*** rstarmer has joined #openstack-lbaas10:45
*** atoth has joined #openstack-lbaas11:21
*** ctracey has quit IRC11:33
*** ctracey has joined #openstack-lbaas11:33
*** chlong has joined #openstack-lbaas12:10
*** cpuga has joined #openstack-lbaas12:37
*** cpuga has quit IRC12:45
*** cpuga has joined #openstack-lbaas12:45
-openstackstatus- NOTICE: restarting gerrit to address slowdown issues12:56
*** yamamoto has quit IRC13:10
*** yamamoto has joined #openstack-lbaas13:11
*** yamamoto has quit IRC13:15
*** jerrygb has joined #openstack-lbaas13:15
*** links has quit IRC13:18
*** jerrygb_ has joined #openstack-lbaas13:20
*** jerrygb has quit IRC13:20
*** yamamoto has joined #openstack-lbaas13:29
*** yamamoto has quit IRC13:29
*** yamamoto has joined #openstack-lbaas13:31
*** sanfern has quit IRC13:38
openstackgerritHengqing Hu proposed openstack/neutron-lbaas-dashboard master: Fix npm test  https://review.openstack.org/47579813:46
openstackgerritHengqing Hu proposed openstack/octavia-dashboard master: Exclude node_modules from pep8 checking  https://review.openstack.org/47580013:47
openstackgerritHengqing Hu proposed openstack/neutron-lbaas-dashboard master: Exclude node_modules from pep8 checking  https://review.openstack.org/47580113:49
*** kobis has quit IRC14:06
*** reedip_ has joined #openstack-lbaas14:17
*** mhayden has quit IRC14:46
*** mhayden has joined #openstack-lbaas14:46
*** rcernin_ has quit IRC14:47
*** gcheresh has quit IRC14:49
*** yamamoto has quit IRC14:53
*** yamamoto has joined #openstack-lbaas14:54
*** yamamoto has quit IRC14:54
*** yamamoto has joined #openstack-lbaas15:04
*** yamamoto has quit IRC15:11
*** yamamoto has joined #openstack-lbaas15:11
*** yamamoto has quit IRC15:15
*** jerrygb_ has quit IRC15:20
*** jerrygb has joined #openstack-lbaas15:21
*** rstarmer has quit IRC15:22
*** rstarmer has joined #openstack-lbaas15:23
*** jerrygb_ has joined #openstack-lbaas15:27
*** jerrygb has quit IRC15:29
*** jerrygb has joined #openstack-lbaas15:31
*** jerrygb_ has quit IRC15:32
*** fnaval has quit IRC15:33
*** jerrygb_ has joined #openstack-lbaas15:36
*** jerrygb has quit IRC15:37
*** rstarmer_ has joined #openstack-lbaas15:40
*** rstarmer has quit IRC15:42
*** jerrygb_ has quit IRC15:42
*** jerrygb has joined #openstack-lbaas15:43
*** reedip_ has quit IRC15:58
*** armax has quit IRC16:03
*** csomerville has quit IRC16:13
*** csomerville has joined #openstack-lbaas16:14
*** yamamoto has joined #openstack-lbaas16:17
*** pcaruana has quit IRC16:19
*** sanfern has joined #openstack-lbaas16:26
*** yamamoto has quit IRC16:28
*** sanfern has quit IRC16:31
*** sanfern has joined #openstack-lbaas16:31
openstackgerritMichael Johnson proposed openstack/octavia master: Add RBAC enforcement to pools v2 API  https://review.openstack.org/47586816:38
*** cody-somerville has joined #openstack-lbaas16:38
*** cody-somerville has quit IRC16:38
*** cody-somerville has joined #openstack-lbaas16:38
*** csomerville has quit IRC16:41
*** sshank has joined #openstack-lbaas16:52
*** yamamoto has joined #openstack-lbaas16:57
*** tesseract has quit IRC17:00
*** yamamoto has quit IRC17:03
*** JudeC has joined #openstack-lbaas17:08
*** blogan has joined #openstack-lbaas17:08
*** amotoki is now known as amotoki_away17:23
*** catintheroof has joined #openstack-lbaas17:24
*** sanfern has quit IRC17:39
*** sanfern has joined #openstack-lbaas17:43
*** sanfern has quit IRC17:48
*** sanfern has joined #openstack-lbaas17:53
*** catinthe_ has joined #openstack-lbaas18:03
*** catintheroof has quit IRC18:05
openstackgerritAdam Harwell proposed openstack/octavia master: HM Update for url_path uses incorrect validation  https://review.openstack.org/47589218:18
rm_workjohnsom: ^^ plz18:18
rm_workeasy easy peasy peasy18:18
rm_workxgerman_: ^^18:19
johnsomWhat!  I fixed that once...18:19
johnsomUgh, maybe just v1 or ????18:19
rm_worklol18:20
rm_workmaybe18:20
johnsomrm_work FYI, it would be super great to get that base RBAC patch in.  It's a conflict magnet18:21
rm_workyeah i know18:21
rm_workwe'd like it soon too18:21
johnsomIf I don't get too interrupted, I should have RBAC done today or early tomorrow.18:21
johnsomI will then grab Jude's API patches and fix them adding RBAC18:22
johnsomBut getting that base patch reviewed and in would be golden18:22
*** kobis has joined #openstack-lbaas18:31
*** sshank has quit IRC18:36
rm_workummmm18:45
rm_workjohnsom: http://logs.openstack.org/90/474790/11/gate/gate-octavia-v1-dsvm-scenario-multinode/cb94429/logs/screen-o-cw.txt.gz#_Jun_20_17_50_05_92656818:45
rm_workctrl-f for "Got a 404"18:45
rm_workrofl18:45
rm_workand look at the scrollbar (if you're in chrome)18:46
rm_worki don't thin the amphora network interface is going to be found (ever)18:46
rm_work*don't think18:46
rm_worksorry it found it for the one i linked, but, slightly below that18:46
rm_workof course that finally happened when we were actually merging it :P18:46
*** gcheresh has joined #openstack-lbaas18:48
johnsomrm_work I guess I'm not following.  It looks like it did what it was supposed to do....18:49
johnsomIt retried a few times and then it found it with 20218:49
xgerman_johnsom I deployed the RBAC base but I don’t have the openstack CLI commands18:49
xgerman_any trick I forgot? Don’t they come automagically with devstack?18:49
johnsomxgerman_ Ah, yes, pip install python-octaviaclient18:50
johnsomUmm, I thought we added them for some strange reason.  We don't technically need them for gate tests18:50
rm_workjohnsom: sorry as i said, either search and look at the highlights on the scrollbar18:50
rm_workor look down a bit18:51
rm_worki linked to an earlier one where it succeeded18:51
johnsomOh! wow, hmmm18:51
rm_workhere's the start of the lulzy one: http://logs.openstack.org/90/474790/11/gate/gate-octavia-v1-dsvm-scenario-multinode/cb94429/logs/screen-o-cw.txt.gz#_Jun_20_17_50_07_97414718:51
rm_workbut i guess you found it18:51
rm_work14 minutes of 404s18:52
rm_workthat interface isn't going to appear <_<18:52
johnsomYeah, that timeout is so big to accommodate non-vtx folks/hosts18:53
rm_workyeah18:53
johnsomLet me look back at what it was trying to attach18:53
rm_workbut it proves that something is permanently broken18:53
johnsomYeah, sure does18:53
johnsomrm_work that loop must be broken somehow, it should be re-calling /0.5/plug/vip18:56
rm_workuhhh18:57
rm_workis it not18:57
rm_workhmmm18:59
rm_workheading to lunch, will look when i get back18:59
rm_workif you haven't figured it out18:59
*** catinthe_ has quit IRC19:16
johnsomWell, I can see that it was instance 5 on subnode-219:17
johnsomNothing yet as to why the interface we plugged didn't come up inside the instance19:17
*** atoth has quit IRC19:22
*** sshank has joined #openstack-lbaas19:28
*** sshank has quit IRC19:31
*** kobis has quit IRC19:37
*** sshank has joined #openstack-lbaas19:40
eanderssonthanks dayou - looks good19:46
*** JudeC has quit IRC20:00
*** kobis has joined #openstack-lbaas20:04
*** kobis has quit IRC20:08
*** JudeC has joined #openstack-lbaas20:12
*** jerrygb has quit IRC20:19
*** amotoki_away is now known as amotoki20:24
rm_workjohnsom: AUGH WHAT20:29
johnsomHa20:29
rm_worklook at the zuul gate run20:29
rm_workfor the HM patch20:29
rm_worksomething done got f'd20:29
rm_workubuntu mirrors?20:30
rm_workwait maybe this is best for the other channel lol20:30
johnsomI have been seeing DNS problems over the last few days.  Not just the mirrors20:30
*** amotoki is now known as amotoki_away20:33
*** gcheresh has quit IRC20:39
eanderssonI assumed that it was a general failure and did a recheck20:46
eanderssonbut yea seen that too across multiple projects over the last week or so20:46
openstackgerritMichael Johnson proposed openstack/octavia master: Add RBAC enforcement to members v2 API  https://review.openstack.org/47592020:49
rm_workEVERY check failed20:51
rm_worknot just one20:51
eanderssonrm_work, I downloaded the image and did a checksum and it does not match21:09
eanderssonpretty sure the mirror is broken21:10
rm_work>_<21:10
rm_workyep21:10
*** JudeC has quit IRC21:16
*** JudeC has joined #openstack-lbaas21:18
*** cpuga has quit IRC21:20
*** armax has joined #openstack-lbaas21:22
rm_workjohnsom: ubuntu eventually unbroke their qemu stuff right?21:23
johnsomI think so21:24
rm_worklol k21:24
johnsomNot 100% sure21:24
*** catintheroof has joined #openstack-lbaas21:25
openstackgerritMichael Johnson proposed openstack/octavia master: Add RBAC enforcement to health monitors v2 API  https://review.openstack.org/47593421:39
*** armax has quit IRC21:54
*** armax has joined #openstack-lbaas22:03
*** sshank has quit IRC22:11
*** openstack has joined #openstack-lbaas22:18
*** oomichi has joined #openstack-lbaas22:19
*** dosaboy has joined #openstack-lbaas22:20
openstackgerritAdam Harwell proposed openstack/octavia master: SSL Health Monitors didn't actually ... check very much  https://review.openstack.org/47594422:26
rm_workjohnsom: ^^22:26
johnsomrm_work Did you implement backend re-encryption?22:27
rm_workno22:27
openstackgerritMichael Johnson proposed openstack/octavia master: Add RBAC enforcement to L7 policies v2 API  https://review.openstack.org/47594522:27
rm_workbut don't need to22:27
rm_workyou can still *do a healthcheck*22:27
rm_workthe healthcheck is *generated by haproxy*22:28
johnsomThat will fail if they are checking client certs where the old way would not22:28
rm_worki put "verify none" in the HM check22:29
rm_worksince right now we don't have backend reencryption so they don't even have a way to pass in certs to verify against anyway22:29
rm_workthough one sec22:29
johnsomYeah, but that only validates the cert the member presents22:29
johnsomIt's about the handshake....22:30
rm_workhmmmmm22:30
johnsomI'm talking about *client* certs, like in two-way-ssl authentication22:30
rm_workso you mean22:32
rm_workthe user's application running client cert verification22:32
rm_workand these healthchecks now come in without a client cert?22:33
johnsomRight, that health check passes now, but with your change would fail22:33
rm_worki am testing it22:35
rm_workand the healthchecks are passing22:35
rm_workbut22:35
rm_workthe app isn't doing client cert verification22:35
rm_workso yeah22:35
johnsomRight, turn that on and test it22:35
rm_workbleh i don't have a test box i control22:36
rm_worki just use someone else's IP lol22:36
johnsomSorry, I don't know of any public servers to try either22:36
rm_workwell no public server would be doing client cert validation and also accept MY cert, right? :P22:37
rm_workI think I might merge this internally and just let it float upstream :/22:37
johnsomUmm, right, This doesn't use *your* cert22:38
rm_workbecause the % of people here who will want their healthchecks to actually work on SSL, is greater than those that want client cert validation22:38
rm_work?22:38
johnsomBut the old way is a valid SSL health check, just minus the certs22:38
johnsomIt does an SSL hello handshake22:39
rm_workerr22:40
rm_workthat's ALL it does22:40
johnsomhttp://www.allanbank.com/blog/images/tls-x509-and-mongodb/browser-handshake.png22:40
rm_workit doesn't actually hit the correct URL or check status or page content22:40
rm_workit JUST checks a handshake22:40
rm_workand ignores every other part of the HM config22:40
johnsomYeah, true22:41
rm_workwould rather actually run the healthcheck as configured22:41
rm_workand disable the ability to do client cert validation22:41
rm_workon the app22:41
johnsomOk, so meet me half way, add TLS-HELLO as an option22:42
rm_workk yeah i think that's doable22:42
rm_workone sec22:42
rm_workrunning into other issues22:42
johnsomOr SSL-HELLO, not sure which is accurate22:42
rm_worktrying to get this config exactly right22:42
johnsomYeah, I would call it TLS-HELLO22:43
*** isotope has joined #openstack-lbaas22:44
*** cpuga has joined #openstack-lbaas22:45
johnsomThat will need a release note too22:48
*** sshank has joined #openstack-lbaas22:50
*** sshank has quit IRC23:12
*** sshank has joined #openstack-lbaas23:15
*** catintheroof has quit IRC23:18
*** harlowja has quit IRC23:19
*** sanfern has quit IRC23:19
openstackgerritMichael Johnson proposed openstack/octavia master: Add RBAC enforcement to l7rules v2 API  https://review.openstack.org/47595323:22
*** armax has quit IRC23:26
*** sanfern has joined #openstack-lbaas23:33
*** JudeC has quit IRC23:34
openstackgerritAdam Harwell proposed openstack/octavia master: SSL Health Monitors didn't actually ... check very much  https://review.openstack.org/47594423:41
*** cpuga has quit IRC23:47

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!