rm_work | ugh | 00:02 |
---|---|---|
*** fnaval has quit IRC | 00:02 | |
rm_work | member statuses are making me die now | 00:02 |
*** fnaval has joined #openstack-lbaas | 00:06 | |
*** fnaval has quit IRC | 00:07 | |
*** fnaval has joined #openstack-lbaas | 00:07 | |
openstackgerrit | Adam Harwell proposed openstack/octavia-tempest-plugin master: Create api+scenario tests for members https://review.openstack.org/566199 | 00:20 |
johnsom | What is wrong with the statuses? | 00:21 |
openstackgerrit | Adam Harwell proposed openstack/octavia-tempest-plugin master: Create basic traffic balancing scenario test https://review.openstack.org/566700 | 00:21 |
johnsom | At least they aren’t hidden in a status tree only | 00:21 |
*** Swami_ has quit IRC | 00:21 | |
*** Swami has quit IRC | 00:21 | |
*** longkb has joined #openstack-lbaas | 00:23 | |
rm_work | yes | 00:25 |
rm_work | it's just wonky | 00:25 |
rm_work | because in NOOP mode, it will always be NO_MONITOR regardless of admin_state_up | 00:25 |
rm_work | but if you aren't noop, we will actually update a member to OFFLINE even without a monitor, if it's admin_state_up is False | 00:26 |
rm_work | because we know even without a monitor | 00:26 |
rm_work | but it makes the states weirdly unpredictable | 00:26 |
*** harlowja has quit IRC | 00:51 | |
*** longkb has quit IRC | 01:12 | |
*** longkb has joined #openstack-lbaas | 01:13 | |
openstackgerrit | Adam Harwell proposed openstack/octavia-tempest-plugin master: Create basic traffic balancing scenario test https://review.openstack.org/566700 | 01:20 |
*** ianychoi has joined #openstack-lbaas | 01:21 | |
*** username_ has joined #openstack-lbaas | 01:22 | |
*** username_ is now known as username__ | 01:23 | |
openstackgerrit | Adam Harwell proposed openstack/octavia master: WIP: Floating IP Network Driver (spans L3s) https://review.openstack.org/435612 | 01:54 |
*** atoth has quit IRC | 02:15 | |
openstackgerrit | Adam Harwell proposed openstack/octavia-tempest-plugin master: Create api+scenario tests for members https://review.openstack.org/566199 | 02:16 |
openstackgerrit | Adam Harwell proposed openstack/octavia-tempest-plugin master: Create basic traffic balancing scenario test https://review.openstack.org/566700 | 02:16 |
*** yamamoto has joined #openstack-lbaas | 02:20 | |
*** yamamoto has quit IRC | 02:24 | |
*** username__ has quit IRC | 02:35 | |
*** yamamoto has joined #openstack-lbaas | 02:37 | |
*** dayou_ has joined #openstack-lbaas | 03:01 | |
*** rcernin has quit IRC | 03:14 | |
*** yamamoto has quit IRC | 03:31 | |
openstackgerrit | Merged openstack/octavia-dashboard master: Imported Translations from Zanata https://review.openstack.org/566803 | 03:33 |
*** threestrands has joined #openstack-lbaas | 03:38 | |
*** links has joined #openstack-lbaas | 03:42 | |
*** yamamoto has joined #openstack-lbaas | 03:44 | |
*** amotoki has joined #openstack-lbaas | 04:19 | |
*** fnaval_ has joined #openstack-lbaas | 04:34 | |
*** fnaval has quit IRC | 04:34 | |
openstackgerrit | Merged openstack/octavia master: Fix periodic job https://review.openstack.org/566726 | 04:36 |
*** phuoc_ has quit IRC | 05:12 | |
*** yamamoto has quit IRC | 05:15 | |
*** phuoc has joined #openstack-lbaas | 05:16 | |
*** aojea has joined #openstack-lbaas | 05:17 | |
*** yboaron has joined #openstack-lbaas | 05:17 | |
*** yamamoto has joined #openstack-lbaas | 05:20 | |
*** fnaval_ has quit IRC | 05:26 | |
*** aojea has quit IRC | 05:31 | |
*** Swami has joined #openstack-lbaas | 05:32 | |
*** Swami_ has joined #openstack-lbaas | 05:32 | |
*** threestrands has quit IRC | 05:54 | |
*** pcaruana has joined #openstack-lbaas | 05:57 | |
*** Swami has quit IRC | 06:13 | |
*** Swami_ has quit IRC | 06:13 | |
*** annp has joined #openstack-lbaas | 06:22 | |
*** yamamoto_ has joined #openstack-lbaas | 07:10 | |
*** yamamoto has quit IRC | 07:10 | |
*** tesseract has joined #openstack-lbaas | 07:22 | |
*** yamamoto_ has quit IRC | 07:29 | |
*** yamamoto has joined #openstack-lbaas | 07:30 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/octavia-dashboard master: Imported Translations from Zanata https://review.openstack.org/567142 | 07:45 |
*** rpittau has joined #openstack-lbaas | 07:57 | |
*** yamamoto has quit IRC | 08:15 | |
*** yamamoto has joined #openstack-lbaas | 08:17 | |
*** salmankhan has joined #openstack-lbaas | 08:49 | |
*** yamamoto has quit IRC | 08:55 | |
*** salmankhan has quit IRC | 09:00 | |
*** salmankhan has joined #openstack-lbaas | 09:03 | |
*** yamamoto has joined #openstack-lbaas | 09:11 | |
*** salmankhan has quit IRC | 09:20 | |
*** phuoc has quit IRC | 09:26 | |
*** phuoc has joined #openstack-lbaas | 09:26 | |
*** phuoc has quit IRC | 09:27 | |
*** phuoc has joined #openstack-lbaas | 09:28 | |
*** salmankhan has joined #openstack-lbaas | 09:37 | |
openstackgerrit | Carlos Goncalves proposed openstack/neutron-lbaas master: DNM: testing LoggingNoop service provider driver https://review.openstack.org/567178 | 09:54 |
*** longkb has quit IRC | 10:00 | |
*** annp has quit IRC | 10:33 | |
*** yamamoto has quit IRC | 10:49 | |
*** yamamoto has joined #openstack-lbaas | 10:51 | |
*** AlexStaf has joined #openstack-lbaas | 11:12 | |
*** atoth has joined #openstack-lbaas | 11:25 | |
*** yamamoto has quit IRC | 11:25 | |
*** yamamoto has joined #openstack-lbaas | 11:31 | |
*** yamamoto has quit IRC | 11:32 | |
*** yboaron has quit IRC | 11:54 | |
*** yboaron has joined #openstack-lbaas | 11:54 | |
*** yamamoto has joined #openstack-lbaas | 11:58 | |
*** yboaron has quit IRC | 11:58 | |
*** pcaruana has quit IRC | 12:21 | |
*** yamamoto has quit IRC | 12:39 | |
openstackgerrit | huangshan proposed openstack/python-octaviaclient master: Add loadbalancer status show client api and osc https://review.openstack.org/542715 | 12:40 |
*** yamamoto has joined #openstack-lbaas | 12:44 | |
*** yamamoto has quit IRC | 12:45 | |
*** sapd has quit IRC | 13:05 | |
*** samccann has joined #openstack-lbaas | 13:06 | |
*** fnaval has joined #openstack-lbaas | 13:12 | |
*** pcaruana has joined #openstack-lbaas | 13:40 | |
openstackgerrit | Merged openstack/octavia master: Updates the docs with new admin tips https://review.openstack.org/562035 | 13:45 |
*** yamamoto has joined #openstack-lbaas | 13:46 | |
*** dayou_ has quit IRC | 13:49 | |
*** yamamoto has quit IRC | 13:56 | |
*** pcaruana has quit IRC | 14:05 | |
*** AlexStaf has quit IRC | 14:06 | |
*** pcaruana has joined #openstack-lbaas | 14:08 | |
*** dayou_ has joined #openstack-lbaas | 14:13 | |
*** nmagnezi_ is now known as nmagnezi | 14:17 | |
*** pcaruana has quit IRC | 14:25 | |
*** pcaruana has joined #openstack-lbaas | 14:26 | |
*** dayou_ has quit IRC | 14:30 | |
*** srihas has quit IRC | 14:52 | |
*** links has quit IRC | 15:25 | |
*** yboaron has joined #openstack-lbaas | 15:33 | |
openstackgerrit | Merged openstack/octavia-dashboard master: Imported Translations from Zanata https://review.openstack.org/567142 | 15:36 |
*** Swami has joined #openstack-lbaas | 16:55 | |
*** atoth_ has joined #openstack-lbaas | 16:55 | |
*** atoth has quit IRC | 16:57 | |
*** phuoc has quit IRC | 17:08 | |
*** tesseract has quit IRC | 17:15 | |
*** salmankhan has quit IRC | 17:17 | |
rm_work | ugh this member issue | 17:25 |
*** dmellado has quit IRC | 17:29 | |
*** atoth has joined #openstack-lbaas | 17:34 | |
johnsom | Well, I'm having fun writing mind numbing unit tests.... | 17:37 |
rm_work | johnsom: you have a devstack up? | 17:37 |
rm_work | can you do me a favor? :P | 17:37 |
johnsom | Yeah | 17:37 |
rm_work | make LB->Listener->Pool | 17:37 |
rm_work | add a member, no HM | 17:37 |
*** atoth_ has quit IRC | 17:37 | |
johnsom | Sure, just a minute | 17:38 |
rm_work | k | 17:38 |
rm_work | you may already have one sitting around | 17:38 |
rm_work | i just need to know that: A) it definitely is in state NO_MONITOR | 17:38 |
rm_work | B) what is the socat stats | 17:38 |
johnsom | k | 17:38 |
rm_work | in my cloud, i run this test and the thing is in NO_MONITOR as I expect | 17:39 |
rm_work | but in the gate... it's SOMETIMES IN "OFFLINE" instead | 17:39 |
rm_work | like | 17:39 |
rm_work | 3/4 maybe? | 17:39 |
johnsom | https://www.irccloud.com/pastebin/SjvSoFsx/ | 17:40 |
johnsom | https://www.irccloud.com/pastebin/8X99Fmgx/ | 17:41 |
rm_work | hmm k yeah | 17:41 |
rm_work | no check | 17:41 |
rm_work | is what i expect | 17:41 |
johnsom | Maybe an issue in noop driver? | 17:41 |
rm_work | this is scenario | 17:41 |
rm_work | and it's *not consistent* | 17:42 |
rm_work | i assume because of timing | 17:42 |
rm_work | my guess is it starts in one status and goes to the other | 17:42 |
johnsom | https://www.irccloud.com/pastebin/5ZdTeEEQ/ | 17:42 |
rm_work | given the code, i assume that means it starts in NO_MONITOR and goes to OFFLINE via health | 17:42 |
rm_work | yes | 17:42 |
johnsom | So, initial create should be right | 17:42 |
rm_work | right | 17:43 |
rm_work | so it'd go to OFFLINE via HM | 17:43 |
rm_work | *Healthmanager | 17:43 |
johnsom | hmm | 17:43 |
rm_work | but no idea why | 17:43 |
rm_work | http://logs.openstack.org/00/566700/11/check/octavia-v2-dsvm-scenario/ce3e244/job-output.txt.gz#_2018-05-09_03_10_34_983716 | 17:44 |
rm_work | reading through this line-by-line now | 17:44 |
rm_work | anyway yeah, it started in NO_MONITOR and then switched to BACKUP between the first and second GET | 18:12 |
rm_work | err | 18:12 |
rm_work | OFFLINE | 18:12 |
rm_work | before it even went to ACTIVE, during PENDING_CREATE | 18:13 |
rm_work | I wonder if it would switch back | 18:13 |
rm_work | i wonder if there's another status change in the flows | 18:13 |
rm_work | eugh though this flow is out of order a tiny bit i think | 18:14 |
rm_work | we mark the Pool ACTIVE *after* the LB and Listener T_T | 18:15 |
openstackgerrit | Adam Harwell proposed openstack/octavia master: WIP: Floating IP Network Driver (spans L3s) https://review.openstack.org/435612 | 18:15 |
openstackgerrit | Adam Harwell proposed openstack/octavia master: Slightly reorder member flows https://review.openstack.org/567306 | 18:18 |
rm_work | johnsom: i bet it flips to OFFLINE *briefly* and then back to NO_MONITOR because of this: | 18:20 |
rm_work | https://github.com/openstack/octavia/blob/master/octavia/controller/healthmanager/health_drivers/update_db.py#L267-L268 | 18:21 |
rm_work | which would explain why it's inconsistent | 18:21 |
rm_work | there's a brief moment when it could go OFFLINE depending on when the health message comes in | 18:22 |
johnsom | That could be | 18:23 |
rm_work | gonna ... fix that I think | 18:23 |
johnsom | Just have it take the DB status? | 18:25 |
rm_work | that would work | 18:31 |
rm_work | well no | 18:31 |
rm_work | i am gonna be a little smarter i think | 18:31 |
rm_work | sec | 18:31 |
rm_work | fixing the testing first, because this should have been caught | 18:31 |
rm_work | in fact i am pretty sure we have a test that does this on purpose and thinks it's right | 18:31 |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Implement provider drivers - L7 Policy https://review.openstack.org/567059 | 18:34 |
rm_work | I *think* that we can just avoid updating the status if it's in NO_MONITOR | 18:38 |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Implement provider drivers - L7 Rules https://review.openstack.org/567073 | 18:39 |
rm_work | but, gotta do lunch today | 18:45 |
*** fnaval has quit IRC | 18:49 | |
*** fnaval has joined #openstack-lbaas | 18:51 | |
johnsom | Yeah, me too. Time to run the tests and grab bite to eat | 18:52 |
*** dmellado has joined #openstack-lbaas | 18:58 | |
openstackgerrit | Adam Harwell proposed openstack/octavia master: Healthmanager shouldn't update NO_MONITOR members https://review.openstack.org/567322 | 19:05 |
openstackgerrit | Adam Harwell proposed openstack/octavia-tempest-plugin master: Create api+scenario tests for members https://review.openstack.org/566199 | 19:06 |
openstackgerrit | Adam Harwell proposed openstack/octavia-tempest-plugin master: Create basic traffic balancing scenario test https://review.openstack.org/566700 | 19:06 |
rm_work | ok | 19:06 |
rm_work | bbl | 19:06 |
johnsom | Gotta put an agenda together | 19:07 |
nmagnezi | o/ | 19:08 |
johnsom | nmagnezi We keep missing each other, do you still have an RBAC question? | 19:11 |
nmagnezi | johnsom, yes | 19:12 |
nmagnezi | :) | 19:12 |
johnsom | Fire away | 19:12 |
nmagnezi | johnsom, okay so some context | 19:12 |
nmagnezi | johnsom, I think I kinda miss the usecase for this, but I kinda assume that it relates to the fact that Octavia can operate as a standalone thing.. anyhow. I looked at projects like Cinder and Nova and what is the policy-in-code they implemented | 19:14 |
nmagnezi | they chose to go with admin or owner (with minor adaptations) | 19:14 |
nmagnezi | just wanted to ask, why did we chose differently | 19:14 |
nmagnezi | what was the incentive to have the roles that were implemented in our policy | 19:15 |
johnsom | Yeah, so the lovely history of OpenStack. At the time we did our RBAC, nova and keystone were planning and had patches up to implement their policy-in-code the same way we did. We agreed that the rich capabilities it provided was what our users (customers) were asking for, so we just did it. | 19:15 |
johnsom | Fast forward a bit and those keystone/nova patches never landed. | 19:16 |
johnsom | However, the discussion continues to this very day, and is being proposed as a Stein community goal. | 19:16 |
johnsom | See http://lists.openstack.org/pipermail/openstack-dev/2018-May/130207.html | 19:17 |
johnsom | This is actually a topic I was just putting on the agenda. | 19:17 |
nmagnezi | again, I know I probably lack context and details, but I'll ask anyway: Don't that create a worse user experience both for operators and their users? | 19:17 |
johnsom | And this one: https://review.openstack.org/#/c/523973/ | 19:18 |
nmagnezi | the meaning is that they need to manually assign roles for *each* newly created user just in order to interact with Octavia, no? | 19:18 |
nmagnezi | again, please correct me when I'm wrong :) | 19:18 |
johnsom | No, not really. It actually makes it much better. So roles are inherited, so when an operator is ready to allow Octavia in their cloud, they can add the load_balancer_member(or something similar, I don't remember now) to their "member role" and instantly every user in the cloud has access. | 19:19 |
nmagnezi | how can you add a role to a role? | 19:20 |
* nmagnezi looks at openstack docs | 19:21 | |
johnsom | via groups | 19:21 |
johnsom | openstack group role add nonadmins | 19:22 |
johnsom | something like that | 19:22 |
nmagnezi | I'll look it up | 19:22 |
nmagnezi | sec | 19:22 |
*** links has joined #openstack-lbaas | 19:22 | |
johnsom | Yeah, I'm not remembering the details of how that works on the keystone side | 19:23 |
nmagnezi | you're not using this feature in house? | 19:23 |
johnsom | I think for one customer, but that is handled by the keystone/identity folks | 19:24 |
nmagnezi | looks kinda related: https://blueprints.launchpad.net/keystone/+spec/inherited-domain-roles | 19:24 |
johnsom | openstack role assignment list | 19:25 |
johnsom | shows you the roles that are inherited | 19:25 |
johnsom | Yeah, ok, so to add a role to a group: openstack role add --group foo and there is an inherited flag | 19:27 |
johnsom | nmagnezi You are up in the storyboard meeting | 19:27 |
nmagnezi | johnsom, thanks :) | 19:28 |
nmagnezi | johnsom, do you recall who added the bullet about notifications? | 19:32 |
nmagnezi | there's no name. and it actually works okay for me | 19:32 |
johnsom | nmagnezi I added that it works for me, so I don't know who added the original | 19:32 |
nmagnezi | johnsom, ack. thanks. | 19:32 |
johnsom | Carlos maybe? | 19:32 |
nmagnezi | cgoncalves, o/ | 19:33 |
*** links has quit IRC | 19:45 | |
*** atoth has quit IRC | 19:46 | |
*** yboaron has quit IRC | 19:54 | |
cgoncalves | I'm here | 19:57 |
cgoncalves | what's up? | 19:57 |
cgoncalves | notifications? maybe me, not sure | 19:58 |
cgoncalves | I think so yeah | 19:58 |
nmagnezi | cgoncalves, hey. re: https://etherpad.openstack.org/p/storyboard-issues ==> number 5 | 19:58 |
nmagnezi | did you add it to the list? | 19:58 |
cgoncalves | nmagnezi, I added 4 and 6 which has same color. number 5 does not so it was not me | 19:59 |
nmagnezi | cgoncalves, ack. thanks | 20:00 |
johnsom | #startmeeting Octavia | 20:00 |
openstack | Meeting started Wed May 9 20:00:18 2018 UTC and is due to finish in 60 minutes. The chair is johnsom. Information about MeetBot at http://wiki.debian.org/MeetBot. | 20:00 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 20:00 |
*** openstack changes topic to " (Meeting topic: Octavia)" | 20:00 | |
openstack | The meeting name has been set to 'octavia' | 20:00 |
johnsom | Hi folks | 20:00 |
nmagnezi | o/ | 20:00 |
cgoncalves | ahoy! | 20:00 |
johnsom | Oye, the storyboard meeting.... | 20:01 |
johnsom | #topic Announcements | 20:01 |
*** openstack changes topic to "Announcements (Meeting topic: Octavia)" | 20:01 | |
johnsom | I don't have much here. | 20:01 |
johnsom | The summit in Vancouver is coming up quickly, just a few weeks out. | 20:01 |
johnsom | I will probably cancel the Octavia meeting the week of the summit unless others want run it. | 20:02 |
johnsom | Any other announcements I missed? | 20:02 |
johnsom | #topic Brief progress reports / bugs needing review | 20:03 |
*** openstack changes topic to "Brief progress reports / bugs needing review (Meeting topic: Octavia)" | 20:03 | |
xgerman_ | o/ | 20:03 |
cgoncalves | made progress on grenade support: https://review.openstack.org/#/c/549654/ | 20:03 |
johnsom | I have been a busy person and as of yesterday we have a fully functional (aside from bugs/cleanup ) provider driver for Octavia and interface for other drivers. | 20:03 |
johnsom | I'm working on one last patch for the cleanup/bugs/release notes, etc. now | 20:04 |
*** rm_mobile has joined #openstack-lbaas | 20:04 | |
cgoncalves | it is now upgrading from stable/queens. post-upgrade octavia tempest was failing on 4 jobs. cause is known and rm_work has a patch up | 20:04 |
rm_mobile | o/ | 20:04 |
rm_mobile | Sorry I'm late. Lunch going long | 20:05 |
johnsom | Cool, I will check it out. I also promised a UDP protocol review that needs to happen soonish | 20:05 |
johnsom | rm_work has also been busy getting the tempest plugin in shape, so good stuff there too! | 20:06 |
johnsom | Any other updates? | 20:07 |
johnsom | #topic Default value for haproxy_amphora.connection_max_retries (300 at 5 seconds each) | 20:07 |
cgoncalves | stable/pike gates were broken because of tempest (brancheless) bumped ostestr from 0.8.x to 1.0.x. ostestr switched default from testr to stestr and with that broke stable/pike which was still expecting testr underneath. we've fixed stable/pike already | 20:07 |
*** openstack changes topic to "Default value for haproxy_amphora.connection_max_retries (300 at 5 seconds each) (Meeting topic: Octavia)" | 20:07 | |
xgerman_ | ? | 20:07 |
johnsom | This came in as a bug report and is worth a discussion | 20:08 |
johnsom | cgoncalves Cool, thanks for helping with that | 20:08 |
xgerman_ | +1 | 20:08 |
johnsom | We currently set the connection timeouts super high to allow for super slow cloud infrastructure (virtualbox I look at you in shame). | 20:09 |
*** samccann has quit IRC | 20:09 | |
johnsom | This eases folks trying out octavia on these not-so-great hosts as when the nova instance eventually boots they will get a working LB. | 20:09 |
*** leitan has joined #openstack-lbaas | 20:09 | |
johnsom | However, it also has the side effect that things can take a long time to timeout and go into ERROR states if the cloud is broken | 20:10 |
johnsom | This default is 25 minutes. | 20:10 |
johnsom | Now, I know we need to keep this a bit high for some zuul gate hosts, but that can be configured in the gate job definition. | 20:11 |
johnsom | So, the question is, now that folks are running this more in production style deployments, should we consider lowering this default? | 20:11 |
johnsom | So things give up quicker | 20:11 |
johnsom | Thoughts? Comments? | 20:12 |
xgerman_ | yeah, that might be good | 20:12 |
cgoncalves | as long as it is configurable, I don't see reason not to lower timeout | 20:13 |
nmagnezi | yeah, makes sense to move this high value to the job config and have a more sane (lower) value as production default | 20:13 |
johnsom | It could lead to more folks complaining that LBs don't come up, especially if they are using virutalbox, etc. | 20:14 |
johnsom | Though they probably complain that it's "stuck in pending_create" now anyway... lol | 20:14 |
nmagnezi | ha. maybe we can provide a local.conf for slow testing envs? | 20:15 |
johnsom | Either way we need to write up a guide. The dev guide would mention needing it higher, the operator guide would say lower | 20:15 |
johnsom | Ok, so mostly hearing yes, our defaults should be more in line with production style use cases. | 20:17 |
rm_mobile | I agree, lower the default | 20:17 |
johnsom | I will comment on the story | 20:17 |
nmagnezi | johnsom, please link the story | 20:17 |
johnsom | #link https://storyboard.openstack.org/#!/story/2001982 | 20:17 |
johnsom | Thanks for the reminder! | 20:17 |
johnsom | #topic New default RBAC roles | 20:18 |
*** openstack changes topic to "New default RBAC roles (Meeting topic: Octavia)" | 20:18 | |
johnsom | So, as some of you are aware we have "advanced" style RBAC defaults. | 20:18 |
johnsom | And the other two projects that were championing this never merged their patches. | 20:18 |
johnsom | Well, the spec and topic are still alive and well | 20:18 |
johnsom | #link http://lists.openstack.org/pipermail/openstack-dev/2018-May/130207.html | 20:19 |
cgoncalves | so advanced that users cannot CRUD resources out of the box :P | 20:19 |
johnsom | There is a new proposal for standard roles. It is pretty close to ours already. | 20:19 |
johnsom | cgoncalves Correct, the operator has to opt-in users or groups for load balancer features. | 20:20 |
johnsom | Easy way is to add LB member role to the non-admin user group and be done. | 20:20 |
johnsom | Anyway, keystone is moving forward with this, as is nova. They are talking about including us in the early adopter list as well. (I support, but not yet signed up to staff, this). | 20:21 |
nmagnezi | yup. I need to look at this again. but manually assigning roles for each new user is a pain. so hopefully groups makes it more sane | 20:21 |
johnsom | Yeah, don't do it per user, that would be un-pleasant | 20:21 |
johnsom | The current discussion is when a few projects do it, it would become a community goal for Stien or T | 20:22 |
johnsom | Any questions or comments on this? | 20:22 |
johnsom | I know we have customers asking for the more advanced roles, not sure if others are in the same camp or not | 20:23 |
nmagnezi | not at the moment, but I might have some after I learn more about how it works | 20:23 |
johnsom | I will also not, it is super easy to disable the advanced and go back to owner/admin by copying over the policy file | 20:23 |
johnsom | #link https://review.openstack.org/#/c/566377/ | 20:24 |
nmagnezi | yup. I double checked and it worked for me | 20:24 |
johnsom | That is the current home of the spec | 20:24 |
nmagnezi | (adding policy.json) | 20:24 |
johnsom | Yeah, some of our gate tests run with that enabled | 20:24 |
johnsom | The new tempest pluign does test the advanced roles as well | 20:24 |
nmagnezi | good to know. and in any case i think it's good that we have that option | 20:24 |
johnsom | Ok, I will communicate our general support for standardizing these roles. | 20:25 |
johnsom | Though I'm not sure I'm signing up right now to do the work. I have Rocky commitments to work on | 20:25 |
nmagnezi | we should update our devstack plugin to use role inheritance instead of manually assignment to user demo btw | 20:26 |
rm_mobile | Yeah it's good but with a personal history working on rbac, there is a lot of work they still need to do even in the design side | 20:26 |
johnsom | Sure if you would like. | 20:26 |
nmagnezi | s/manually/manual | 20:26 |
johnsom | #topic Open Discussion | 20:27 |
*** openstack changes topic to "Open Discussion (Meeting topic: Octavia)" | 20:27 | |
johnsom | BTW, the ticket price for the PTG goes up on the 18th of May | 20:27 |
johnsom | So if you are planning to go to Denver in Sept. you might want to get your ticket early | 20:27 |
johnsom | Other topics today? | 20:28 |
cgoncalves | yes | 20:28 |
nmagnezi | just to keep everyone posted. we had another discussion with the storyboard team | 20:28 |
cgoncalves | go on Nir | 20:28 |
johnsom | (you don't have to raise your hand, just jump in) grin | 20:29 |
nmagnezi | this will take time.. you can see some of their feedback in the etherpad | 20:29 |
nmagnezi | cgoncalves, I'm done :) | 20:29 |
nmagnezi | oh, the etherpad: | 20:30 |
nmagnezi | #link https://etherpad.openstack.org/p/storyboard-issues | 20:30 |
cgoncalves | we've had patches merged without stories or release notes included. I'd like to propose having at least one in | 20:30 |
cgoncalves | I'm not asking for trivial bugs (even though a release note would be nice and easier/less consuming than opening a story) | 20:31 |
johnsom | I just got an e-mail that 5 people have added the Octavia onboarding session to their summit schedule, so thanks folks for adding it to your schedule. grin | 20:31 |
rm_mobile | Oh yeah I need to get going on the ptg... Who else thinks they'll be there? | 20:31 |
rm_mobile | Johnsom do you want my help on that? Throw me on it if so | 20:31 |
rm_mobile | I'll probably be there regardless | 20:31 |
johnsom | cgoncalves Yes, please -1 all of the patches you see that should have release notes!!!!!! | 20:31 |
rm_mobile | It's just a talk? Or lab? | 20:31 |
johnsom | Just a talk | 20:32 |
cgoncalves | johnsom, duly noted :D | 20:32 |
* rm_mobile prepares to hate cgoncalves | 20:32 | |
cgoncalves | rm_mobile, I wasn't expecting anything less ;) | 20:32 |
nmagnezi | as soon as storyboard fix some key issues I think we'll need to improve the stories/patches ratio | 20:33 |
johnsom | Release notes are important for communicating out | 20:33 |
nmagnezi | so at the end of it, we'll have a proactive backports (driven by severity etc) process | 20:33 |
cgoncalves | rm_mobile, if you want make a git hook that takes the commit title and creates a reno note ('fixes' type by default) haha | 20:33 |
nmagnezi | cgoncalves, lol | 20:34 |
johnsom | Oh don't give him ideas | 20:34 |
* johnsom has visions of the quality of our release notes sinking | 20:34 | |
johnsom | Other items? | 20:35 |
*** rm_mobile| has joined #openstack-lbaas | 20:36 | |
johnsom | After this cleanup patch is in and the tempest patch is fixed (so the gates don't -1) I would really like to get some review time on provider drivers. It's a big chain so can be a conflict magnet. | 20:36 |
johnsom | Ok, either we had a net split again or that is it for today. | 20:38 |
nmagnezi | nothing on my end | 20:38 |
nmagnezi | :) | 20:38 |
johnsom | Thanks folks! | 20:38 |
johnsom | #endmeeting | 20:38 |
*** openstack changes topic to "Discussion of OpenStack Load Balancing (Octavia) | https://etherpad.openstack.org/p/octavia-priority-reviews" | 20:38 | |
openstack | Meeting ended Wed May 9 20:38:51 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 20:38 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/octavia/2018/octavia.2018-05-09-20.00.html | 20:38 |
nmagnezi | o/ | 20:38 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/octavia/2018/octavia.2018-05-09-20.00.txt | 20:38 |
openstack | Log: http://eavesdrop.openstack.org/meetings/octavia/2018/octavia.2018-05-09-20.00.log.html | 20:38 |
*** rm_mobile has quit IRC | 20:39 | |
*** leitan has quit IRC | 20:44 | |
*** rm_mobile| has quit IRC | 20:54 | |
*** rm_mobile has joined #openstack-lbaas | 20:54 | |
rm_work | plz to be merging https://review.openstack.org/#/c/567322/ | 20:56 |
rm_work | johnsom: ^^ | 20:57 |
rm_work | xgerman_: ^^ | 20:57 |
rm_work | nmagnezi: ^^ | 20:57 |
johnsom | rm_work You mean reviewing.... | 20:57 |
rm_work | sure, yeah, whatever | 20:57 |
johnsom | Grin | 20:57 |
rm_work | if you want | 20:57 |
rm_work | but this is A++ code if you ask me | 20:57 |
rm_work | the author | 20:57 |
rm_work | no bias | 20:58 |
johnsom | Gauntlet thrown | 20:58 |
xgerman_ | do we have a bug # for that? Just sayng? | 20:58 |
rm_work | just discovered it. could make one if it bugs you | 20:59 |
rm_work | (pun intended) | 20:59 |
*** pcaruana has quit IRC | 20:59 | |
cgoncalves | where's my release note? hahaha | 21:00 |
* cgoncalves disconnects :) | 21:00 | |
* rm_work gets out his shiv | 21:00 | |
johnsom | Do we really want to put bugs that haven't impacted users in the release notes? I think it's a pretty high bar to get a bug in the release notes IMB | 21:00 |
johnsom | IMO | 21:00 |
rm_work | ^^ agree ;P | 21:01 |
*** AlexStaf has joined #openstack-lbaas | 21:07 | |
*** kbyrne has quit IRC | 21:09 | |
*** kbyrne has joined #openstack-lbaas | 21:12 | |
rm_work | johnsom: responded | 21:14 |
rm_work | johnsom: you're suggesting we just *don't update status* if the member is missing, and don't try to be smart about it? | 21:15 |
*** dmellado has quit IRC | 21:15 | |
rm_work | I am fine with that I guess, if you really want that | 21:15 |
johnsom | I'm suggesting not forcing the status to NO_MONITOR just because the DB says so. | 21:15 |
johnsom | I am advocating for filling in the info if the amp doesn't report the member. | 21:16 |
rm_work | err | 21:16 |
rm_work | that's exactly the current bug | 21:16 |
rm_work | if the amp doesn't report the member at all | 21:16 |
rm_work | it means it is literally not in the haproxy config yet | 21:16 |
rm_work | which means whatever their "templates have set" for hms, it doesn't matter | 21:16 |
johnsom | It forces it to OFFLINE if there is no report, I'm saying if there is no report then check the DB no monitor status | 21:17 |
rm_work | k i'll try one for you | 21:17 |
johnsom | Right now you have that the DB trumps all status from the amp itself | 21:18 |
johnsom | Do you follow or what be to push a version? | 21:19 |
openstackgerrit | Adam Harwell proposed openstack/octavia master: Healthmanager shouldn't update NO_MONITOR members https://review.openstack.org/567322 | 21:19 |
johnsom | Or I guess I could pastebin it too | 21:19 |
rm_work | ^^ | 21:19 |
rm_work | eh hold on | 21:19 |
rm_work | let me reverse that if | 21:19 |
johnsom | I don't think pass is good | 21:19 |
johnsom | It should just set it no monitor | 21:20 |
rm_work | ... it's already that | 21:20 |
rm_work | None means no change | 21:20 |
rm_work | and it already is | 21:20 |
johnsom | Yeah, but the lower logic assumes there is some value set in the message right? | 21:20 |
openstackgerrit | Adam Harwell proposed openstack/octavia master: Healthmanager shouldn't update NO_MONITOR members https://review.openstack.org/567322 | 21:20 |
rm_work | the lower logic assumes if it's None, it's a no-change | 21:20 |
rm_work | and thus skips the emit | 21:21 |
rm_work | ^^ fixed | 21:21 |
rm_work | and yes, the nested-if is the most efficient way to write that AFAICT | 21:21 |
rm_work | unless i'm missing something dumb, which is possible | 21:22 |
rm_work | but the alternative I think would be .... | 21:22 |
johnsom | Ok, yeah, that last one looks good assuming the none is correct(haven't read all the way down yet) | 21:22 |
*** dmellado has joined #openstack-lbaas | 21:23 | |
johnsom | Yeah, that should work | 21:24 |
rm_work | http://paste.openstack.org/show/720716/ | 21:24 |
rm_work | that is ... annoying | 21:24 |
rm_work | so, nested-if | 21:24 |
rm_work | does that seem right? | 21:24 |
johnsom | I like what you have posted now | 21:25 |
rm_work | k | 21:25 |
johnsom | Yes, this logic is a bit, if-y | 21:25 |
johnsom | lol | 21:25 |
johnsom | But, it's kind of a decision tree, so... | 21:25 |
rm_work | lol | 21:25 |
rm_work | nice one | 21:25 |
rm_work | rechecking the tempest patches | 21:26 |
rm_work | should be fine | 21:26 |
rm_work | WTB merge on https://review.openstack.org/#/c/565640/ | 21:26 |
rm_work | to shorten this tree | 21:26 |
rm_work | and so it actually runs on more changes | 21:26 |
johnsom | Ah, you fixed the member one, good, it was tanking my chain too | 21:26 |
rm_work | yes the member one was broken *because of this bug* | 21:27 |
rm_work | this bug is the fix :P | 21:27 |
rm_work | *this bugfix | 21:27 |
*** dmellado has quit IRC | 21:27 | |
openstackgerrit | Michael Johnson proposed openstack/octavia master: Implement provider drivers - Cleanup https://review.openstack.org/567431 | 22:00 |
johnsom | Not done yet, but wanted to push a version up. | 22:00 |
rm_work | k | 22:03 |
*** zigo has quit IRC | 22:11 | |
*** zigo has joined #openstack-lbaas | 22:11 | |
johnsom | So here is question. As I have it now, the providers are just a list of names. Should we make that a list of names and some description string? I guess that could be added later. | 22:17 |
rm_work | yeah | 22:17 |
rm_work | later | 22:17 |
johnsom | K | 22:18 |
johnsom | Could be a pain upgrade wise | 22:18 |
rm_work | weird, your +2 isn't showing up on those patches | 22:18 |
rm_work | i wonder if gerrit is broken | 22:18 |
* johnsom wonders if I am broken | 22:18 | |
rm_work | </troll> | 22:19 |
johnsom | Must be gerrit, I don't see any +2s from you either | 22:19 |
rm_work | lol | 22:19 |
rm_work | gotta merge the tests first | 22:19 |
* rm_work shrugs | 22:20 | |
rm_work | my plan is: | 22:20 |
rm_work | 1) get all tests written and ready to merge | 22:20 |
rm_work | 2) start reviewing producer code with the tests running against it | 22:20 |
johnsom | Many of my patches are depends-on with the test, so... | 22:21 |
rm_work | 3) easy +2 because now merged tests pass | 22:21 |
rm_work | right, so the legitimately NEED the tests to merge first, eh? :P | 22:21 |
rm_work | also an EASY one that would make my life a lot easier: https://review.openstack.org/#/c/564082/ | 22:22 |
rm_work | having to manually carry that patch | 22:22 |
openstackgerrit | Adam Harwell proposed openstack/octavia master: Add element and flag to disable DHCP on amp images https://review.openstack.org/520590 | 22:25 |
johnsom | Hmm, odd, I thought I did review that failover patch.... | 22:32 |
*** threestrands has joined #openstack-lbaas | 22:33 | |
*** threestrands has quit IRC | 22:33 | |
*** threestrands has joined #openstack-lbaas | 22:33 | |
johnsom | Oh, this is api side | 22:34 |
johnsom | rm_work on this failover API thing, what happens when you call it with a bogus amp ID? | 22:35 |
*** threestrands_ has joined #openstack-lbaas | 22:36 | |
*** threestrands has quit IRC | 22:38 | |
*** mstrohl has joined #openstack-lbaas | 22:39 | |
rm_work | hmmmm | 22:42 |
rm_work | that's a good question | 22:42 |
rm_work | i think i assumed it was part of the lookup but it might not be | 22:42 |
johnsom | Yeah, something is wrong there, I get 405 | 22:42 |
johnsom | Maybe this is part of that crazy neutron 405 thing | 22:43 |
rm_work | hmmmm | 22:44 |
rm_work | yeah 405 because it's a PUT on an amp that doesn't exist I guess? | 22:44 |
rm_work | wait | 22:44 |
johnsom | Frankly it's not working for me on existing amps either | 22:45 |
rm_work | no | 22:45 |
rm_work | because you're doing GET | 22:45 |
rm_work | it's a PUT | 22:45 |
rm_work | and it works as expected | 22:45 |
johnsom | curl -v -X PUT -H "Content-Type: application/json" -H "Accept: application/json" -H "X-Auth-Token: $current_token" $test_API_ENDPOINT/v2.0/octavia/amphorae/09f72b8b-0f08-4790-b8ed-ab2f5af766cd | 22:45 |
rm_work | http://paste.openstack.org/show/720718/ | 22:46 |
johnsom | {"code": 405, "description": "", "title": "Method Not Allowed"} | 22:46 |
rm_work | PUT to /failover | 22:46 |
rm_work | you're fail-ing to use the right failover URL :P | 22:46 |
johnsom | derp | 22:47 |
johnsom | This is what happens when you ask me to context switch.... grin | 22:47 |
rm_work | pecan lookup does the needful | 22:47 |
rm_work | ;) | 22:47 |
rm_work | will take "explaining to confused johnsom and getting a review" over "no review" | 22:47 |
rm_work | literally any time | 22:47 |
johnsom | no review for you! | 22:48 |
rm_work | T_T | 22:48 |
rm_work | I'm just happy I got to use the phrase "does the neeful" | 22:48 |
rm_work | *needful | 22:48 |
*** mstrohl has quit IRC | 22:49 | |
johnsom | rm_work Trade: https://review.openstack.org/#/c/561369/ | 22:52 |
rm_work | i was actually looking at that one already, but ran into a testing issue due to the heavy rebasing i have to do on top of it | 22:53 |
*** fnaval has quit IRC | 22:56 | |
rm_work | johnsom: interestingly, this makes things a little MORE dangerous for me | 22:56 |
rm_work | if an amp fails to delete, right now I can see a whole list of them via a quick DB query | 22:57 |
rm_work | because in a pinch I can just delete all health messages, and wait to see which ones come back and which don't | 22:57 |
rm_work | and then query+join the amp and amp-health tables and see where i'm missing matches | 22:57 |
rm_work | this will block the updates for those amps, which means they'll fly under the radar for me until i start doing log inspection | 22:58 |
rm_work | which is almost never at the moment | 22:58 |
rm_work | i actually have sensu alerts that rely on that DB join method of finding bad amps | 22:59 |
rm_work | also, the point you made in the other patch for the amp-cleanup stuff was that we wanted even DELETED amps to stick around if they were still receiving health messages | 23:00 |
rm_work | which ... this will negate | 23:00 |
johnsom | Well, it's a review, comment it up so I can re-evaluate later | 23:01 |
johnsom | Heck I'm tempted to do whack-a-mole and just delete them | 23:02 |
rm_work | that's what i do in a lot of cases in my driver <_< | 23:05 |
rm_work | johnsom: actually, commented, I think it's *really* wrong | 23:06 |
rm_work | I think it's doing exactly not what you think it is | 23:06 |
rm_work | did you test this and see it doing what you expect? | 23:06 |
johnsom | Ugh, I'm going to add descriptions now. I think it's an important thing for the UI and to make it not be an upgrade nightmare. | 23:06 |
rm_work | k | 23:07 |
johnsom | Just making the config file use a dict instead of a list | 23:07 |
rm_work | err is that a thing? | 23:07 |
johnsom | Yeah | 23:07 |
rm_work | neat I guess | 23:07 |
johnsom | So, um, I think I did, but that has been open so long I cannot confirm nor deny testing that code. | 23:07 |
johnsom | I think I did, but, that was a ton of driver patches ago | 23:08 |
openstackgerrit | Adam Harwell proposed openstack/octavia master: Fix amphora failover API to work with spares https://review.openstack.org/564082 | 23:09 |
rm_work | ^^ plz to redo +2 | 23:10 |
rm_work | fixed your nit because it bothered me too | 23:10 |
johnsom | It was the cupboard part wasn't it.... | 23:10 |
rm_work | yes T_T | 23:11 |
rm_work | reminded me of my gradeschool math teachers | 23:11 |
rm_work | "Oh, so you have 3 left, eh? 3 what? 3 potatoes?" | 23:11 |
johnsom | lol | 23:11 |
rm_work | "USE UNITS" | 23:11 |
rm_work | "No Mrs. Krabappel, 3 *meters*." | 23:12 |
rm_work | https://www.youtube.com/watch?v=ON4sOlxvtbU | 23:12 |
rm_work | xgerman_: https://review.openstack.org/#/c/564082/ | 23:16 |
rm_work | oh wait hold on that's not the one i need | 23:17 |
rm_work | https://review.openstack.org/#/c/567322/ | 23:17 |
rm_work | you verbally +2'd :P | 23:17 |
rm_work | ^^ johnsom | 23:17 |
rm_work | which is proved out by https://review.openstack.org/#/c/566199/ passing now | 23:17 |
johnsom | Yeah, waiting on the gates to make sure there isn't something I overlooked | 23:18 |
rm_work | k | 23:18 |
rm_work | johnsom: is something wrong on members? | 23:22 |
rm_work | http://logs.openstack.org/31/567431/1/check/octavia-v2-dsvm-noop-api/3aa2030/testr_results.html.gz | 23:23 |
rm_work | that's still in gate, but... already failed the api-noop for member updates, due to timeout | 23:23 |
rm_work | can it really be that slow? | 23:23 |
johnsom | NoOp? | 23:23 |
rm_work | err | 23:24 |
rm_work | ok yeah it can't be that slow | 23:24 |
johnsom | Shouldn't that be PENDING_UPDATE it's looking for? with noop there is nothing to make it active right? | 23:24 |
rm_work | something is up | 23:24 |
rm_work | err | 23:24 |
rm_work | I think noop it still goes active | 23:24 |
rm_work | it uses the "noop amp driver" | 23:25 |
rm_work | so it goes through to the worker and such | 23:25 |
rm_work | and it should go active | 23:25 |
rm_work | it passes on all the other patchsets, like ... master for example | 23:25 |
rm_work | also the rest of them passed (create / show / etc) which also all wait for ACTIVE | 23:26 |
rm_work | so my initial guess would be "something broke update" | 23:26 |
rm_work | same failure on the members patch | 23:26 |
rm_work | http://logs.openstack.org/39/566939/3/check/octavia-v2-dsvm-noop-api/6df97ea/testr_results.html.gz | 23:26 |
rm_work | did not fail on the pools patch | 23:27 |
rm_work | sticking with my guess | 23:27 |
rm_work | yep failing on everything after members | 23:27 |
rm_work | i think | 23:27 |
rm_work | on the plus side, https://review.openstack.org/#/c/567322/ is good now | 23:29 |
rm_work | ah no, stuff after members didn't run | 23:30 |
rm_work | except cleanup | 23:30 |
rm_work | but it did fail on both in the same way | 23:30 |
rm_work | johnsom: you've got a +2 on the first two in the chain | 23:37 |
johnsom | Nice | 23:37 |
rm_work | I assume you're going to update the third one (LB) for the description? | 23:38 |
johnsom | Wait, what is wrong with the description? | 23:38 |
rm_work | i thought you wanted to add a description to providers in the initial migration? | 23:39 |
johnsom | It's in the config file | 23:39 |
johnsom | We only store the provider name in DB | 23:39 |
rm_work | errr | 23:39 |
rm_work | oh | 23:39 |
rm_work | i mean yes | 23:39 |
rm_work | i thought you were saying you wanted to add the description to the DB | 23:39 |
rm_work | not what you meant? | 23:39 |
johnsom | I've already done it in this patch I'm working on. Super easy | 23:39 |
rm_work | so... you ARE. but it's a separate migration? | 23:40 |
johnsom | https://www.irccloud.com/pastebin/2kZW54jD/ | 23:40 |
rm_work | errr | 23:40 |
johnsom | No, it will never be in the DB | 23:40 |
rm_work | ok | 23:40 |
rm_work | how will the UI get to it? | 23:40 |
rm_work | i thought the point was because the UI would want it | 23:40 |
rm_work | so the API would return it | 23:40 |
johnsom | /providers API | 23:40 |
rm_work | ah, i guess it would return from the config too | 23:40 |
johnsom | Yep | 23:41 |
rm_work | wait so why do we even have them in the DB | 23:41 |
rm_work | so we can have a constraint? | 23:41 |
johnsom | I don't want to store what drivers exist or are enabled in the DB. That means people have to touch the DB adding /removing drivers | 23:41 |
rm_work | I feel like personally I might rather simplify the config file, and have the descriptions go in the DB | 23:41 |
rm_work | err | 23:41 |
rm_work | but we DO store them? | 23:41 |
rm_work | or no | 23:41 |
rm_work | not at all? | 23:41 |
rm_work | ah i guess it is just a column of text | 23:42 |
johnsom | No, we store the provider name the LB was created with. nothing elese | 23:42 |
rm_work | ok, i thought they were going in the DB | 23:42 |
rm_work | well, nm them | 23:42 |
rm_work | *then | 23:42 |
rm_work | OH this is the patch where i was going on about a thing | 23:42 |
*** fnaval has joined #openstack-lbaas | 23:46 | |
*** Swami has quit IRC | 23:49 | |
johnsom | Yeah, look at listener, I think I changed it there | 23:51 |
rm_work | johnsom: https://review.openstack.org/#/c/563795/ | 23:57 |
rm_work | did you update all of what I just commented already in another patch? lol | 23:57 |
johnsom | Yeah, maybe, sorry, I will reply on the comments if so. | 23:58 |
rm_work | I could probably do a follow-up and just do it all ;P | 23:58 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!