Tuesday, 2018-10-16

*** abaindur has quit IRC00:04
*** hyang has joined #openstack-lbaas00:20
*** hyang has quit IRC00:24
*** JudeCross has quit IRC00:29
*** hyang has joined #openstack-lbaas00:29
*** hyang has quit IRC00:33
*** hyang has joined #openstack-lbaas00:43
*** hyang has quit IRC00:47
*** openstackgerrit has joined #openstack-lbaas01:02
openstackgerritMichael Johnson proposed openstack/octavia-tempest-plugin master: Adds get_amphora_stats to the service client  https://review.openstack.org/58506001:02
openstackgerritMichael Johnson proposed openstack/octavia-tempest-plugin master: Adds get_amphora_stats to the service client  https://review.openstack.org/58506001:02
openstackgerritMichael Johnson proposed openstack/octavia master: Add amphora statistics to the admin API  https://review.openstack.org/58503101:03
*** JudeCross has joined #openstack-lbaas01:11
*** JudeCross has quit IRC01:15
openstackgerritwangxiyuan proposed openstack/octavia master: Tags support for load balancer  https://review.openstack.org/60675401:31
*** openstackgerrit has quit IRC01:35
*** openstackgerrit has joined #openstack-lbaas01:36
openstackgerritMerged openstack/octavia-dashboard master: Increment versioning with pbr instruction  https://review.openstack.org/61053301:36
*** yamamoto has quit IRC01:41
*** yamamoto has joined #openstack-lbaas01:41
*** hongbin has joined #openstack-lbaas02:09
*** annp has joined #openstack-lbaas02:26
openstackgerritmashuting proposed openstack/neutron-lbaas-dashboard master: Modify the way controls certificates show or hide  https://review.openstack.org/60990202:37
*** ramishra has joined #openstack-lbaas03:02
openstackgerritMerged openstack/neutron-lbaas-dashboard master: Increment versioning with pbr instruction  https://review.openstack.org/61053903:08
openstackgerritwangxiyuan proposed openstack/octavia master: Tags support for load balancer  https://review.openstack.org/60675403:37
*** hongbin has quit IRC03:48
*** JudeCross has joined #openstack-lbaas03:58
openstackgerritMerged openstack/neutron-lbaas master: Increment versioning with pbr instruction  https://review.openstack.org/61053804:24
*** phuoc_ has joined #openstack-lbaas04:35
*** phuoc has quit IRC04:35
*** yboaron_ has joined #openstack-lbaas05:03
*** yboaron_ has quit IRC05:04
*** yboaron_ has joined #openstack-lbaas05:04
openstackgerritmashuting proposed openstack/neutron-lbaas-dashboard master: Modify the way controls certificates show or hide  https://review.openstack.org/60990205:39
openstackgerritReedip proposed openstack/octavia-tempest-plugin master: Add configuration support for skipping tests  https://review.openstack.org/59939305:39
openstackgerritReedip proposed openstack/octavia-tempest-plugin master: Add configuration support for skipping tests  https://review.openstack.org/59939305:44
*** ccamposr has joined #openstack-lbaas05:47
*** yboaron_ has quit IRC05:49
*** JudeCross has quit IRC05:54
openstackgerritMerged openstack/octavia master: Increment versioning with pbr instruction  https://review.openstack.org/61053205:59
*** ccamposr__ has joined #openstack-lbaas06:00
*** ccamposr has quit IRC06:02
*** ccamposr has joined #openstack-lbaas06:13
*** ccamposr__ has quit IRC06:16
openstackgerritMerged openstack/octavia master: Refactor the AAP driver to not depend on nova  https://review.openstack.org/60422606:23
*** abaindur has joined #openstack-lbaas06:38
*** rcernin has quit IRC07:01
*** yboaron_ has joined #openstack-lbaas07:30
*** abaindur has quit IRC07:30
*** velizarx has joined #openstack-lbaas07:43
*** yboaron_ has quit IRC08:02
openstackgerritmashuting proposed openstack/neutron-lbaas-dashboard master: Modify the way controls certificates show or hide  https://review.openstack.org/60990208:04
*** yboaron_ has joined #openstack-lbaas08:06
openstackgerritLuis Tomas Bolivar proposed openstack/octavia master: Ensure pool object contains the listener_id if passed  https://review.openstack.org/60441708:56
openstackgerritmashuting proposed openstack/neutron-lbaas-dashboard master: Modify the way controls certificates show or hide  https://review.openstack.org/60990209:05
openstackgerritNir Magnezi proposed openstack/neutron-lbaas stable/queens: DNM: Test Queens CI  https://review.openstack.org/61091309:09
*** salmankhan has joined #openstack-lbaas09:10
openstackgerritRodolfo Alonso Hernandez proposed openstack/neutron-lbaas stable/queens: Updated "create_pool" method in plugin  https://review.openstack.org/60966909:22
openstackgerritmashuting proposed openstack/neutron-lbaas-dashboard master: Modify the way controls certificates show or hide  https://review.openstack.org/60990210:03
*** hyang has joined #openstack-lbaas10:08
*** hyang has quit IRC10:13
*** jarodwl has joined #openstack-lbaas11:00
*** hyang has joined #openstack-lbaas11:29
*** hyang has quit IRC11:34
*** yamamoto has quit IRC12:04
*** yamamoto has joined #openstack-lbaas12:05
*** yamamoto has quit IRC12:05
*** yamamoto has joined #openstack-lbaas12:05
*** Emine has joined #openstack-lbaas12:30
*** Emine has quit IRC13:09
*** yamamoto has quit IRC13:10
*** yamamoto has joined #openstack-lbaas13:11
*** yamamoto has quit IRC13:15
*** volker0815 has joined #openstack-lbaas13:44
volker0815hiho13:44
*** volker0815_ has joined #openstack-lbaas13:46
volker0815_its me again ;)=13:46
volker0815_i got a old good problem like:13:47
volker0815_Could not load neutron_lbaas.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver13:47
volker0815_installed via juju13:47
volker0815_i do not understand why?13:48
volker0815_any suggestions?13:48
*** volker0815 has quit IRC13:49
*** yboaron_ has quit IRC13:52
*** yboaron has joined #openstack-lbaas13:52
*** yamamoto has joined #openstack-lbaas14:00
ltomasbojohnsom, xgerman_, cgoncalves: It'd be great if you can review this one: https://review.openstack.org/#/c/604417/14:18
volker0815_oh, it would be so nice if i have your problems ;)14:19
ltomasbo:D14:20
volker0815_maybe you can give me a hint?14:21
volker0815_Could not load neutron_lbaas.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver14:21
johnsomvolker0815_: If you must use neutron-lbaas, sometimes that warning doesn’t mean it didn’t load it later.  Are your load balancers starting?14:25
volker0815_the neutron-api dose not start: curl http://localhost:9696 -> connection refused14:28
volker0815_without lbaas, the api is running propper...14:29
volker0815_in my oppinion the juju charm "neutron-api" is running with obsolate configuration...14:30
volker0815_im running openstack in version "rocky" but the juju charm is still using a lbaas-config-file for "liberty": https://github.com/openstack/charm-neutron-api/blob/master/templates/liberty/neutron_lbaas.conf14:33
volker0815_i changed already to the commented line 2214:33
volker0815_so what does it mean in detail "could not load ..." ??? is driver not installed?14:34
volker0815_how can i get more informations in detail?14:35
volker0815_debug and verbose log-output didnt inform me in any way :(14:36
*** velizarx has quit IRC14:38
*** Emine has joined #openstack-lbaas14:56
johnsomWell, neutron-lbaas has been deprecated since Queens, so hasn't really changed since then. (https://wiki.openstack.org/wiki/Neutron/LBaaS/Deprecation)14:56
johnsomBasically that message is saying it is unable to find the old haproxy provider driver for neutron-lbaas.14:57
johnsomSo either it is not installed (unlikely given neutron-lbaas is there) or the configuration file string pointing to the path for the driver is not correct.14:57
johnsomLet me see if I can dig up what that string is for the old driver.14:58
johnsomvolker0815_ It should read:14:59
johnsomhttps://www.irccloud.com/pastebin/SUG4PBsJ/14:59
*** ramishra has quit IRC15:01
volker0815_@johnsom i have already set this value...15:11
volker0815_my neutron.conf [GLOBAL] section call like this:15:16
volker0815_service_plugins = neutron_lbaas.services.loadbalancer.plugin.LoadBalancerPluginv215:16
johnsomHmm, yeah, that should be it.15:23
*** yboaron has quit IRC15:24
*** fnaval has joined #openstack-lbaas15:32
openstackgerritReedip proposed openstack/octavia-tempest-plugin master: Add configuration support for skipping tests  https://review.openstack.org/59939315:35
openstackgerritweizj proposed openstack/neutron-lbaas-dashboard master: Update the hacking to latst  https://review.openstack.org/61103815:46
*** ccamposr has quit IRC15:52
openstackgerritweizj proposed openstack/neutron-lbaas-dashboard master: Update the hacking to latest  https://review.openstack.org/61103815:59
openstackgerritMichael Johnson proposed openstack/octavia-tempest-plugin master: Adds get_amphora_stats to the service client  https://review.openstack.org/58506016:10
openstackgerritMichael Johnson proposed openstack/octavia-tempest-plugin master: Add an active/standby scenario test  https://review.openstack.org/58468116:10
openstackgerritGerman Eichberger proposed openstack/octavia master: Refactor the pluggin of the VIP  https://review.openstack.org/60447916:29
*** hyang has joined #openstack-lbaas17:29
hyangjohnsom Hi, can you review this if you have time? https://review.openstack.org/#/c/610284/  thx17:33
johnsomhyang It was on my list for later today. I'm also working on IPv6 tempest tests that pass traffic, so we will have a gate that covers it.  Right now we only have IPv6 API tests, no traffic tests. I will probably have a patch by the end of the day.17:46
hyangcool, thanks for letting me know it17:47
*** colby_ has joined #openstack-lbaas17:56
colby_Hey Guys. We had a user try and attach a secret directly to the loadbalancer listener without using a contiainer. So it errored out and now its stuck in the pending_update and cant be deleted. How can I delete the load balancer now?17:56
colby_Im on pike btw17:57
*** salmankhan has quit IRC18:02
*** hyang has quit IRC18:05
*** Emine has quit IRC18:15
johnsomcolby_ Hmmm, are you absolutely sure all of your controllers are not still retrying for that load balancer? It should transition to ERROR once the controller gives up retrying, in which case you can delete and retry.18:40
johnsomAre you like some old pre-release version of Pike?18:41
colby_it was 1.0.218:41
colby_just noticed the 1.0.3 update package18:41
johnsomLet me look at when the capstone tasks were added. I'm pretty sure they are in 1.0.2. Those make sure there is no path that allows things to "get stuck"18:42
*** abaindur has joined #openstack-lbaas18:43
colby_Exception during message handling: TypeError: Unknown container type ""18:44
johnsomYeah, 1.0.2 has those capstone tasks. So, double check something isn't still retrying. If you are running with defaults, that can be a lengthy retry timeout.18:44
johnsomYeah, from there you should see revert tasks right or is it still retrying the task?18:44
colby_Flow 'octavia-create-listener_flow' (6a4615eb-5e4b-18:46
colby_47df-b6ba-1378be63906c) transitioned into state 'FAILURE' from state 'RUNNING'18:46
colby_Never seemed to try again. This was 16 hours ago18:46
johnsomYep, that is good. There there should be a series of "reverting" transitions in the logs18:46
johnsomDouble check your configuration that someone didn't disable all of the recovery code: https://docs.openstack.org/octavia/latest/configuration/configref.html#task_flow.disable_revert18:47
johnsom16 hours is way beyond the default timeouts for retries18:48
*** hyang has joined #openstack-lbaas18:49
colby_oh man you are right. Shoot. I forgot I disabled the revert when troubleshooting. Cant believe I forgot that. Thanks!18:50
johnsomYep, that would be a problem... So, your recourse at this point is to go into the DB, set it to ERROR, then delete the obeject.18:53
colby_ok thanks18:53
colby_ok that works. Ok one more question. A user of our is trying to use TLS offload with barbican. He has a pem file with crt/key/ca all in one file. Does he create a secret from that file and then create a container including only that secret? He looked at the rock workflow with directly attached a pks12 file without container which is how this happened to begin with18:57
johnsomYeah, so Pike is too old for the Rocky instructions.  You will have to follow the Pike instructions here: https://docs.openstack.org/octavia/pike/user/guides/basic-cookbook.html#deploy-a-tls-terminated-https-load-balancer18:58
colby_yea do the crt/key/ca have to be separate secrets?18:59
johnsomOn the docs site, there is a "version" button with a drop down that let's you go back in time. In the newer releases we still support the old way, but we have made improvements18:59
*** fnaval has quit IRC18:59
colby_The user was hoping to not have to split them out if possible19:00
johnsomYes, in the old model they do. In the new code we support pkcs12 single file formats19:00
johnsomYeah, that is why we added the pkcs12. Folks didn't like barbican's proprietary container model19:01
colby_gotcha. Ok thanks for the info19:01
*** hyang has quit IRC19:48
colby_ok now we are experiencing another issue. So when I create the pool for the tls terminated listener its trying to add the backend to haproxy as a tcp mode, and failing. Ive set the protocol for the pool to HTTPS20:04
colby_oh it should be http I think for the backend not https20:06
colby_thats probably why20:06
*** rcernin has joined #openstack-lbaas22:49

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!