| johnsom | Running the bonehead checks now | 00:01 |
|---|---|---|
| openstackgerrit | Michael Johnson proposed openstack/octavia master: WIP: Floating IP Network Driver (spans L3s) https://review.openstack.org/435612 | 00:02 |
| johnsom | Give that a go while I read up on all of the subtleties of sqla transactions again. | 00:02 |
| rm_work | lol k | 00:03 |
| rm_work | i think that does it johnsom | 00:05 |
| rm_work | the error messages are lulzy but | 00:05 |
| rm_work | it works | 00:05 |
| johnsom | Well, you can fix those | 00:05 |
| rm_work | yeah | 00:06 |
| johnsom | What was the output of the debug log message? | 00:06 |
| johnsom | Out of curiousity | 00:06 |
| rm_work | http://paste.openstack.org/raw/619841/ | 00:06 |
| johnsom | Ah, ok, that looks good | 00:06 |
| rm_work | so switching to specifically NoResultFound and going to make that look more sane | 00:07 |
| rm_work | but yes | 00:07 |
| johnsom | Well, you need to handle a lock timeout and deadlock too, that is why I made it so open.... | 00:07 |
| openstackgerrit | Adam Harwell proposed openstack/octavia master: Make housekeeping build spares with an executor https://review.openstack.org/498989 | 00:07 |
| rm_work | with this code it SHOULD just be that one, no? | 00:08 |
| rm_work | i guess maybe? | 00:08 |
| rm_work | suppose I can leave it open | 00:08 |
| johnsom | I mean, pretty much if anything goes wrong there it's safer to skip it right? | 00:08 |
| rm_work | yes | 00:08 |
| johnsom | Ok then, I will send my bill and call it a day. | 00:09 |
| rm_work | but why that middle one.... | 00:09 |
| rm_work | 2017-08-29 17:05:36.957 6243 WARNING octavia.amphorae.drivers.health.flip_utils [-] VIP re-association ignored, amphora 76a5d63d-ba0f-44ef-ba9b-58c4b3cb4025 is busy.: NoResultFound: No row was found for one() | 00:09 |
| rm_work | why is it printing the error too | 00:10 |
| rm_work | it's not passed >_> | 00:10 |
| johnsom | I was wondering if you just added that to the message in your own code... I thought that was odd myself | 00:10 |
| rm_work | yeah i did not | 00:10 |
| rm_work | i wonder if LOG.warning automatically appends when it's in an except block or something??? | 00:10 |
| rm_work | but it's super weird | 00:11 |
| johnsom | That would be my guess. I just don't remember seeing that before | 00:11 |
| rm_work | OH maybe i know | 00:11 |
| johnsom | It means you don't really need the debug | 00:12 |
| johnsom | I just put it in to see what the exception details were | 00:12 |
| rm_work | yeah hmmm | 00:12 |
| *** sshank has quit IRC | 00:32 | |
| *** fnaval has joined #openstack-lbaas | 00:49 | |
| *** basilAB has left #openstack-lbaas | 00:51 | |
| *** sticker has joined #openstack-lbaas | 01:21 | |
| rm_work | yeah i don't understand why it prints that way but whatever | 02:07 |
| *** cody-somerville has joined #openstack-lbaas | 02:12 | |
| *** cody-somerville has joined #openstack-lbaas | 02:12 | |
| *** yamamoto has joined #openstack-lbaas | 02:30 | |
| *** sapd_ has joined #openstack-lbaas | 02:45 | |
| *** yamamoto has quit IRC | 02:48 | |
| xgerman_ | ok, running Adam’s improved script… | 03:19 |
| xgerman_ | also my ISP dropped me to 40MBs | 03:19 |
| *** chlong has quit IRC | 03:21 | |
| *** yamamoto has joined #openstack-lbaas | 03:33 | |
| *** links has joined #openstack-lbaas | 03:40 | |
| *** yamamoto has quit IRC | 03:41 | |
| *** sanfern has joined #openstack-lbaas | 04:10 | |
| openstackgerrit | Rajat Sharma proposed openstack/octavia master: Removes unnecessary utf-8 encoding https://review.openstack.org/499019 | 04:25 |
| *** rstarmer has quit IRC | 04:43 | |
| *** rstarmer has joined #openstack-lbaas | 04:43 | |
| *** aojea has joined #openstack-lbaas | 04:52 | |
| *** gcheresh has joined #openstack-lbaas | 04:56 | |
| *** aojea has quit IRC | 04:57 | |
| *** armax has quit IRC | 05:01 | |
| *** cody-somerville has quit IRC | 05:53 | |
| *** aojea has joined #openstack-lbaas | 05:56 | |
| *** yamamoto has joined #openstack-lbaas | 05:59 | |
| *** aojea has quit IRC | 06:04 | |
| *** sapd_ has quit IRC | 06:15 | |
| *** eezhova has joined #openstack-lbaas | 06:20 | |
| *** rcernin has joined #openstack-lbaas | 06:42 | |
| *** pcaruana has joined #openstack-lbaas | 06:43 | |
| *** gtrxcb has quit IRC | 06:54 | |
| *** eezhova has quit IRC | 07:09 | |
| *** tesseract has joined #openstack-lbaas | 07:19 | |
| *** aojea has joined #openstack-lbaas | 07:20 | |
| *** eezhova has joined #openstack-lbaas | 07:34 | |
| *** yamamoto has quit IRC | 07:53 | |
| *** yuanying_ has joined #openstack-lbaas | 08:10 | |
| *** yuanying has quit IRC | 08:13 | |
| *** fnaval has quit IRC | 08:27 | |
| *** yamamoto has joined #openstack-lbaas | 08:37 | |
| openstackgerrit | Jude Cross proposed openstack/octavia-tempest-plugin master: Create scenario tests for health monitors https://review.openstack.org/497643 | 09:16 |
| openstackgerrit | Jude Cross proposed openstack/octavia-tempest-plugin master: Create scenario tests for health monitors https://review.openstack.org/497643 | 09:18 |
| *** yamamoto has quit IRC | 09:45 | |
| *** yamamoto has joined #openstack-lbaas | 09:52 | |
| *** sanfern has quit IRC | 10:34 | |
| *** rstarmer has quit IRC | 11:41 | |
| *** rstarmer has joined #openstack-lbaas | 11:42 | |
| *** numans has joined #openstack-lbaas | 11:44 | |
| *** ianychoi has quit IRC | 12:07 | |
| *** logan- has quit IRC | 12:07 | |
| *** dasanind has quit IRC | 12:07 | |
| *** redondo-mk has quit IRC | 12:07 | |
| *** amitry has quit IRC | 12:07 | |
| *** amotoki has quit IRC | 12:07 | |
| *** ianychoi_ has joined #openstack-lbaas | 12:07 | |
| *** rtjure has quit IRC | 12:09 | |
| *** kbyrne has quit IRC | 12:10 | |
| *** amotoki has joined #openstack-lbaas | 12:11 | |
| *** tesseract has quit IRC | 12:11 | |
| *** rtjure has joined #openstack-lbaas | 12:12 | |
| *** kbyrne has joined #openstack-lbaas | 12:12 | |
| *** logan- has joined #openstack-lbaas | 12:22 | |
| *** redondo-mk has joined #openstack-lbaas | 12:22 | |
| *** dasanind has joined #openstack-lbaas | 12:22 | |
| *** amitry has joined #openstack-lbaas | 12:22 | |
| *** amotoki has quit IRC | 12:25 | |
| *** tesseract has joined #openstack-lbaas | 12:26 | |
| *** amotoki has joined #openstack-lbaas | 12:27 | |
| *** sanfern has joined #openstack-lbaas | 12:36 | |
| *** slaweq has joined #openstack-lbaas | 12:41 | |
| *** fnaval has joined #openstack-lbaas | 12:48 | |
| *** links has quit IRC | 13:00 | |
| *** eezhova has quit IRC | 13:05 | |
| *** eezhova has joined #openstack-lbaas | 13:06 | |
| *** atoth has quit IRC | 13:10 | |
| *** fnaval has quit IRC | 13:11 | |
| *** catintheroof has joined #openstack-lbaas | 13:15 | |
| *** leitan has joined #openstack-lbaas | 13:35 | |
| *** fnaval has joined #openstack-lbaas | 13:36 | |
| *** ssmith has joined #openstack-lbaas | 13:44 | |
| *** cpusmith has joined #openstack-lbaas | 13:45 | |
| *** ssmith has quit IRC | 13:49 | |
| *** links has joined #openstack-lbaas | 14:05 | |
| *** links has quit IRC | 14:06 | |
| *** pcaruana has quit IRC | 14:06 | |
| *** rstarmer has quit IRC | 14:07 | |
| johnsom | http://lists.openstack.org/pipermail/release-announce/2017-August/002595.html | 14:12 |
| johnsom | Bummer the full diff didn't happen.... | 14:13 |
| *** armax has joined #openstack-lbaas | 14:14 | |
| *** aojea has quit IRC | 14:32 | |
| *** slaweq has quit IRC | 14:55 | |
| *** slaweq has joined #openstack-lbaas | 14:55 | |
| *** atoth has joined #openstack-lbaas | 14:57 | |
| *** slaweq has quit IRC | 15:00 | |
| *** gcheresh has quit IRC | 15:07 | |
| *** rcernin has quit IRC | 15:09 | |
| *** slaweq has joined #openstack-lbaas | 15:19 | |
| *** slaweq has quit IRC | 15:23 | |
| *** eezhova has quit IRC | 15:24 | |
| *** aojea has joined #openstack-lbaas | 15:39 | |
| *** aojea has quit IRC | 15:39 | |
| *** aojea has joined #openstack-lbaas | 15:39 | |
| johnsom | Neat, in theory the DVR bug got fixed in neutron | 15:49 |
| *** strigazi is now known as strigazi_AFK | 15:50 | |
| *** bbzhao has quit IRC | 15:52 | |
| *** bbzhao has joined #openstack-lbaas | 15:53 | |
| *** pcaruana has joined #openstack-lbaas | 15:54 | |
| *** sanfern has quit IRC | 15:57 | |
| *** sanfern has joined #openstack-lbaas | 15:57 | |
| *** eezhova has joined #openstack-lbaas | 15:58 | |
| openstackgerrit | Michael Johnson proposed openstack/octavia master: Update release notes theme to openstackdocs https://review.openstack.org/499210 | 15:59 |
| *** atoth has quit IRC | 16:07 | |
| *** aojea has quit IRC | 16:15 | |
| tomtomtom | hello, I ran into an issue creating a listener with barbican cert. I know it should seem obvious but is the following error most likely due to ACL's on the barbican cert or an actual bad cert that can't be read: 2017-08-30 15:50:34.221 35890 ERROR oslo_messaging.rpc.server UnreadableCert: Could not read X509 from PEM | 16:28 |
| *** tesseract has quit IRC | 16:33 | |
| tomtomtom | ok looks like it was the cert after all. | 16:46 |
| johnsom | Yep, though I would have thought barbican would have failed validation on upload | 16:47 |
| tomtomtom | yeah I just thought maybe I was doing ACL's wrong, but I uploaded/used a different cert and it was readable by the octavia pool and the pool is online, so I guess there is some kind of difference in how that particular cert was uploaded into barbican. I'll be able to research further in a bit. | 16:48 |
| johnsom | Octavia meeting starting in 5 minutes on #openstack-meeting | 16:55 |
| *** rm_mobile has joined #openstack-lbaas | 16:59 | |
| *** JudeC has joined #openstack-lbaas | 17:00 | |
| *** strigazi_AFK is now known as strigazi | 17:03 | |
| *** aojea has joined #openstack-lbaas | 17:12 | |
| *** strigazi has quit IRC | 17:14 | |
| *** strigazi has joined #openstack-lbaas | 17:14 | |
| nmagnezi | johnsom, that was a short meeting :P | 17:16 |
| johnsom | Yeah, like record short | 17:17 |
| johnsom | I don't want to have people just hang around though, I want the meetings to be reasonably efficient... | 17:17 |
| johnsom | Shameless plug for reviews: | 17:18 |
| johnsom | https://review.openstack.org/#/q/owner:%22Michael+Johnson+%253Cjohnsomor%2540gmail.com%253E%22++status:open | 17:18 |
| johnsom | xgerman_ FYI, I will test the delete thing you mentioned, but pretty sure that already existed. I opened a bug about that button being gone on some pages. But I will confirm it wasn't a regression. | 17:19 |
| xgerman_ | thx | 17:19 |
| xgerman_ | I figured so I +2’d but didn’t want to do +A until confirmation | 17:20 |
| johnsom | Ugh, the gate queue is backed up today. Waiting almost an hour and a half for my releasenotes patch to start | 17:20 |
| *** atoth has joined #openstack-lbaas | 17:24 | |
| *** atoth has quit IRC | 17:24 | |
| *** atoth has joined #openstack-lbaas | 17:27 | |
| *** eandersson has quit IRC | 17:31 | |
| *** bbzhao has quit IRC | 17:40 | |
| xgerman_ | not good | 17:41 |
| *** bzhao has joined #openstack-lbaas | 17:41 | |
| *** sanfern has quit IRC | 17:48 | |
| *** rcernin has joined #openstack-lbaas | 17:52 | |
| *** eezhova has quit IRC | 17:55 | |
| *** KeithMnemonic2 has quit IRC | 18:14 | |
| nmagnezi | johnsom, your shameless plug for reviews was noted :P , I was not aware of all of those patches | 18:14 |
| johnsom | Grin | 18:15 |
| johnsom | Thanks | 18:15 |
| xgerman_ | nmagnezi if you like to make me happy: https://review.openstack.org/#/c/313006/ | 18:15 |
| xgerman_ | I also need to be more aggressive with adding my name to patches: didn’t make the cut on https://www.openstack.org/software/pike/ | 18:16 |
| johnsom | xgerman_ You are there | 18:19 |
| nmagnezi | xgerman_, with that one i don't even know where to begin :< | 18:19 |
| nmagnezi | johnsom, np | 18:20 |
| xgerman_ | yeah, didn’t read left2right but top down | 18:20 |
| xgerman_ | at least Aish made it finally | 18:20 |
| johnsom | Hahaha | 18:21 |
| johnsom | Octavia was #15 for lines of code in Pike, not bad... | 18:21 |
| johnsom | There we go... | 18:24 |
| johnsom | http://lists.openstack.org/pipermail/release-announce/2017-August/002598.html | 18:24 |
| xgerman_ | Nicw! | 18:24 |
| *** aojea has quit IRC | 18:35 | |
| *** yamamoto has quit IRC | 19:22 | |
| *** yamamoto has joined #openstack-lbaas | 19:28 | |
| *** catintheroof has quit IRC | 19:28 | |
| *** slaweq has joined #openstack-lbaas | 19:31 | |
| *** slaweq has quit IRC | 19:31 | |
| *** slaweq has joined #openstack-lbaas | 19:32 | |
| *** leitan has quit IRC | 19:32 | |
| *** leitan has joined #openstack-lbaas | 19:33 | |
| *** leitan has quit IRC | 19:33 | |
| *** leitan has joined #openstack-lbaas | 19:33 | |
| *** leitan has quit IRC | 19:34 | |
| *** gcheresh has joined #openstack-lbaas | 19:34 | |
| *** eezhova has joined #openstack-lbaas | 19:41 | |
| *** tongl has joined #openstack-lbaas | 20:00 | |
| *** rm_mobile has quit IRC | 20:01 | |
| *** rm_mobile has joined #openstack-lbaas | 20:01 | |
| *** rm_mobile has quit IRC | 20:05 | |
| *** yamamoto has quit IRC | 20:08 | |
| *** aojea has joined #openstack-lbaas | 20:09 | |
| rm_work | johnsom: we had a spec somewhere to take in an additional user-security-group to attach to LBs, didn't we? | 20:26 |
| rm_work | interestingly this serves a dual purpose | 20:26 |
| rm_work | one, it lets users kinda sorta firewall their LB | 20:26 |
| rm_work | two, for situations where there's no tenant networks and traffic goes back out via VIP, it allows users to protect their VMs by allowing access by security group source | 20:27 |
| rm_work | (we can say "this security group lets traffic in, if it comes from a source tagged with this other security group) | 20:27 |
| rm_work | ugh there's no way for me to fix the quoting/parens there in a sane way, i am going to tweak out about that for a while >_< fff | 20:28 |
| *** catintheroof has joined #openstack-lbaas | 20:29 | |
| johnsom | Nope, we decided to add an ACL interface to the API. But, either way, the spec never got posted/written | 20:29 |
| rm_work | bleh | 20:31 |
| rm_work | k | 20:31 |
| rm_work | so err | 20:31 |
| rm_work | if i were to just | 20:32 |
| rm_work | go back and propose we do the SG thing again | 20:32 |
| rm_work | and actually write the spec | 20:32 |
| rm_work | we might be fine with that? | 20:32 |
| johnsom | Is there a way we can accept a user defined SG but still protect the amphora? | 20:32 |
| johnsom | Can we layer them with a priority that says something like (inbound VIP and SSH only, outbound any) and then whatever the user wants? | 20:33 |
| johnsom | I mean, if someone can just open random ports on the amps it's not much of a "managed" service.... | 20:34 |
| johnsom | I think we should still protect the amps the best we can | 20:34 |
| xgerman_ | rm_work we had a discussion to assign some sec-grp to our ports to mark them | 20:38 |
| rm_work | johnsom: hmmm yeah that's interesting... | 20:38 |
| xgerman_ | I am willing to entertain the sec-grp source model | 20:38 |
| xgerman_ | we can allow sec-grps for people and secure ourselves with fwaas | 20:39 |
| xgerman_ | the first one that we slap a sec-grp on so vms can use it to protect themselves | 20:39 |
| xgerman_ | (aka remote security group) | 20:39 |
| *** pcaruana has quit IRC | 20:40 | |
| *** atoth has quit IRC | 20:40 | |
| xgerman_ | rm_work on eof the K8 guys asked for the remote-sec-grp as well | 20:40 |
| rm_work | xgerman_: right yeah that's what we want | 20:40 |
| rm_work | we want the member VMs to be able to lock down traffic to only the LB | 20:41 |
| rm_work | which right now we have to tell people "just open up your VMs to 10.*" | 20:41 |
| xgerman_ | ok, I am in support of that | 20:41 |
| xgerman_ | but that means we need to add a column/row to the lb-show command to show the sec-grp we assigned for you | 20:41 |
| johnsom | I would almost rather turn on iptables in the amps than add fwaas into the mix | 20:42 |
| xgerman_ | you have been assimilated. Why use an existing project if you cna use a competing tech | 20:42 |
| xgerman_ | ? | 20:42 |
| xgerman_ | 100% OpenStack | 20:42 |
| xgerman_ | anyhow, my position is remote sec-hrps yes; user defined no; ACLs for acccess control | 20:43 |
| johnsom | Well, I'm just saying we depend on a bunch of other projects already and adding one more just makes our gates even more volatile. Nothing against fwaas, it's just.... | 20:43 |
| *** eezhova has quit IRC | 20:46 | |
| rm_work | probably this is something i'd like to discuss in Denver if we have time | 20:49 |
| xgerman_ | I am on board with us assigning sec-grps and making them available as remote ones | 20:49 |
| rm_work | xgerman_: BTW it's looking like for Sydney I will probably have to share my airbnb with other GD folks :/ | 20:50 |
| xgerman_ | ok | 20:50 |
| johnsom | We have time in Denver, put it on the etherpad | 20:50 |
| *** slaweq has quit IRC | 20:50 | |
| rm_work | k just need to find the etherpad lol | 20:51 |
| johnsom | https://etherpad.openstack.org/p/octavia-ptg-queens | 20:52 |
| *** sshank has joined #openstack-lbaas | 20:53 | |
| *** gcheresh has quit IRC | 20:54 | |
| xgerman_ | I will fire up our travel tool and see how much things cost | 20:55 |
| johnsom | xgerman_ Can you give me a better sequence on that delete thing? | 21:13 |
| xgerman_ | 1) Create LB with everyhting | 21:14 |
| johnsom | got it | 21:14 |
| xgerman_ | 2) Navigate to health monitor | 21:14 |
| xgerman_ | 3) Delete HealthMonitor | 21:14 |
| xgerman_ | 4) It should bring you back to Pool WITHOUT an Edit button | 21:15 |
| xgerman_ | 5) Go to Listener, back to pool | 21:15 |
| xgerman_ | 6) Delete | 21:15 |
| xgerman_ | 7) same… | 21:15 |
| johnsom | Yeah, ok. That happened before the patch | 21:15 |
| johnsom | Yeah, I think I captured that in a bug yesterday, let me double check. | 21:15 |
| johnsom | The delete button is like always missing on listener.... Ugh | 21:16 |
| johnsom | https://bugs.launchpad.net/octavia/+bug/1714096 | 21:18 |
| openstack | Launchpad bug 1714096 in octavia "octavia-dashboard Pool Edit/Delete button missing after health monitor delete" [High,Triaged] | 21:18 |
| johnsom | Ok, explicit bug.... | 21:18 |
| johnsom | Not a regression, just old broken stuff | 21:19 |
| xgerman_ | ok | 21:23 |
| xgerman_ | then feel free to +A | 21:23 |
| xgerman_ | or do I need to gp back? | 21:23 |
| johnsom | They are my patches, so technically I should not +A them | 21:23 |
| xgerman_ | ok | 21:23 |
| *** johnsom changes topic to "Welcome to LBaaS / Octavia - Queens development is now open." | 21:24 | |
| johnsom | Don't need the Pike bug list there anymore | 21:24 |
| xgerman_ | +A | 21:24 |
| johnsom | Thanks. I am ready to attempt to switch it over to Octavia | 21:24 |
| *** sapd has quit IRC | 21:26 | |
| *** armax has quit IRC | 21:35 | |
| openstackgerrit | Merged openstack/octavia-dashboard master: Remove old unused code. https://review.openstack.org/496961 | 21:36 |
| openstackgerrit | Merged openstack/octavia-dashboard master: Remove neutron-lbaas checks and rename "slug" https://review.openstack.org/497642 | 21:36 |
| xgerman_ | mmh, they have some airbnb for $50 in Sydney | 21:36 |
| xgerman_ | rm_work no chance you get a 3 bed room so we can start an Octavia commune? | 21:37 |
| johnsom | lol | 21:37 |
| tomtomtom | hello, I'm running OS newton, from the unified client when I add an tls cert it DOES NOT get added into the listnener | 21:42 |
| tomtomtom | DB I have to run it manually. you guys see anything like this before? | 21:42 |
| rm_work | lolol | 21:44 |
| johnsom | tomtomtom What do you mean by unified client? | 21:45 |
| *** cpusmith has quit IRC | 21:47 | |
| tomtomtom | openstack listener create https listener with tls cert defined | 21:54 |
| johnsom | tomtomtom and you are running what version of Octavia? master? | 21:54 |
| tomtomtom | yes just download last week | 21:54 |
| johnsom | tomtomtom That should work, can you post the output of "openstack --debug listener create ...." | 21:55 |
| tomtomtom | sure | 21:55 |
| johnsom | It doesn't give an error? | 21:55 |
| tomtomtom | no it creates the listener, but I have to run a mysql command and update the tls field in the db manually. It's just the href to the barbican container that I have to insert. | 21:57 |
| tomtomtom | ok well now I get a conflict when running the command again I changed the name of the listener but I guess that's not allowed | 21:58 |
| johnsom | If it has the exact same port it will conflict | 21:59 |
| johnsom | (If my patch ever lands it will give a useful error message | 21:59 |
| *** aojea has quit IRC | 22:02 | |
| *** aojea has joined #openstack-lbaas | 22:02 | |
| *** aojea has quit IRC | 22:06 | |
| *** fnaval has quit IRC | 22:17 | |
| *** rcernin has quit IRC | 22:28 | |
| *** fnaval has joined #openstack-lbaas | 22:28 | |
| *** rstarmer has joined #openstack-lbaas | 22:35 | |
| *** armax has joined #openstack-lbaas | 22:39 | |
| *** kbyrne has quit IRC | 22:40 | |
| *** kbyrne has joined #openstack-lbaas | 22:41 | |
| rm_work | whelp finally booked airbnb and got my visa for australia | 22:41 |
| xgerman_ | we need a Visa? | 22:44 |
| rm_work | yarp | 22:51 |
| *** ssmith has joined #openstack-lbaas | 23:03 | |
| *** ssmith has quit IRC | 23:19 | |
| *** rstarmer has quit IRC | 23:38 | |
| *** kbyrne has quit IRC | 23:51 | |
| *** sshank has quit IRC | 23:51 | |
| *** kbyrne has joined #openstack-lbaas | 23:54 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!