Thursday, 2019-02-21

colin-if i want to visualize the information the amps send to the HM, am i looking in the right place here? https://github.com/openstack/octavia/blob/master/octavia/amphorae/backends/health_daemon/health_daemon.py#L12300:30
johnsomThat is just the stats part. If you look at the other side I put some comments in the code because I got tired of trying to figure it out myself.00:32
johnsomhttps://github.com/openstack/octavia/blob/master/octavia/controller/healthmanager/health_drivers/update_db.py#L13700:32
colin-i see, thanks00:33
johnsomhttps://github.com/openstack/octavia/blob/master/octavia/controller/healthmanager/health_drivers/update_db.py#L44800:33
openstackgerritMichael Johnson proposed openstack/octavia master: Add new ssl header into Listener for client certificate  https://review.openstack.org/61227000:38
*** celebdor has quit IRC00:40
*** AlexStaf has quit IRC00:40
rm_worktomorrow i need to figure out what reviews i owe people00:42
johnsomhttps://etherpad.openstack.org/p/octavia-priority-reviews00:42
rm_workgot really distracted working on a CI bug (turned out to be bug*s*) for the past week <_<00:42
rm_worklol yes00:43
johnsomOh joy, those are always fun.00:43
rm_workassuming there's stuff left by then, everyone has been really good at reviewing recently apparently :P00:43
rm_workbunch of stuff merged before i could get to it (yay)00:43
*** AlexStaf has joined #openstack-lbaas00:44
johnsomI just realized btrfs is absolutely horrible for VM images....00:46
johnsomI need to rebuild my filesystem back to ext4 at some point.00:47
openstackgerritMichael Johnson proposed openstack/octavia master: Update json module to jsonutils  https://review.openstack.org/63792900:49
rm_worklol00:49
rm_workis btrfs out of experimental?00:50
johnsomYeah, it's the default on synology now.00:50
rm_workah interesting00:50
johnsomHowever it COWs every single write, which with VM files leads to zillions of extents and hours of defrag to get it back to semi-usable00:51
johnsomIt's great if you are doing snapshots, but my primary use case on this isn't volume snapshots....00:52
rm_workyeah :/00:52
rm_workCoW support can be expensive I guess with large batches of writes T_T00:52
johnsomI noticed right away it was slower, but it's been getting worse and I finally looked into it.00:52
rm_workI like it for media storage because... well... *storage*00:53
johnsomYeah, just imagine what devstack stack/unstack does to this thing....00:53
rm_workand i'm on RAID6 anyway so not the fastest ever for writes00:53
rm_workrofl poor disk00:53
dayouI tried btrfs last year, found it requires too much resources on my router, and then fall back to bcache with soft raid 1000:54
rm_workoh hey dayou! haven't heard from you in a while :P00:54
rm_workare you going to Denver?00:54
johnsomOpps, I borked that header insertion patch...00:55
dayourm_work, don't know yet, but I'll be at Shanghai Summit :-D00:56
rm_workheh yeah, I think I will be too00:57
dayouCool, I can show you around when you are here00:58
openstackgerritMerged openstack/octavia-lib master: Fix some driver library bugs  https://review.openstack.org/63508700:58
rm_worklooking forward to visiting :)00:58
rm_workprobably that would be helpful, lol00:58
dayouMe too, long time no see00:58
rm_worksince I know very little about China and no Chinese T_T00:58
johnsomNice. I am pretty sure I will not be able to make Shanghai....00:59
dayouhaha, shanghai is kind of friendly, they have English everywhere00:59
rm_workI have WeChat and money on it for paying, but now they made some rule, so i can't spend it anymore without a valid Chinese ID T_T00:59
dayouOh, that's a pitty00:59
rm_workyeah, annoying00:59
dayouhaha, you can try alipay00:59
rm_workI used it in chinatown in vancouver before00:59
rm_workah hmmm I can check that out, I see it around too01:00
openstackgerritMerged openstack/octavia-lib master: Add FLAVOR as a constant.  https://review.openstack.org/63186301:00
dayouLast year when I was in ShengZhen with some friends whos has no Chinese ID it works01:00
rm_workcool, i'll try01:00
rm_workdo you use both? :P01:00
rm_workmaybe I can send you my RMB on WeChat and you could change it to AliPay, lol01:00
dayouYep, that's the majority ways of payment here01:00
dayouI was thinking about the same, so I transfer the money back to you with alipay and you can use it on alipay01:01
rm_worki wonder how alipay avoided the chinese banking laws that got wechat pay...01:02
rm_workhmmm it seems like maybe they updated recently too T_T01:03
rm_worksome recent reviews that say it is asking for chinese ID T_T01:03
dayouIt's seems either a Chinese bank account or id is required01:04
rm_workyeah :(01:04
rm_worknew laws last year I think01:04
dayoumight be, that I am not quite aware of01:05
*** logan- has quit IRC01:22
*** logan- has joined #openstack-lbaas01:23
*** logan- has quit IRC01:31
*** logan- has joined #openstack-lbaas01:31
lxkongjohnsom, rm_work, do  you know how can i customized the sg attached to the vip port?01:33
johnsomYou can't right now.01:33
lxkongno workaround at all?01:33
johnsomWe have an RFE to add an ACL API in the future.01:33
johnsomI assume you want to restrict source IP?01:33
lxkongyep01:33
lxkongpublic cloud requirement01:34
lxkongjohnsom: may i know the rfe link?01:34
johnsomYeah, depending on your neutron config you might be able to put the VIP on a private network, use a floating IP, and put a SG on that01:34
johnsomThere was a proposed "add an SG to VIP" but it's not how we want to implement it and the provider drivers can hardware implement it01:36
johnsomhttps://storyboard.openstack.org/#!/story/200368601:37
johnsomBut there are also notes on this from a few of the PTGs in the etherpads01:37
lxkong>  put the VIP on a private network01:38
lxkongIsn't the VIP coming from the private network at the moment?01:38
johnsomBasically, we don't want to use neutron SGs, but instead add an ACL API.01:38
johnsomNeutron has a limitation of only ORing SGs and not AND ing....01:38
johnsomYou can put the VIP on any network01:38
lxkongok, sounds like a long way to go :-(01:38
johnsomIt's not too much work, but isn't going to make Stein01:39
openstackgerritpengyuesheng proposed openstack/neutron-lbaas-dashboard master: Prompt error when timeout is greater than interval  https://review.openstack.org/62147701:39
lxkongok, got the idea, thanks johnsom!01:39
johnsomYou can also use FWaaS if you route into the VIP01:39
lxkongyeah, but FWaaS is not available in our cloud01:40
openstackgerritMichael Johnson proposed openstack/octavia master: Add new ssl header into Listener for client certificate  https://review.openstack.org/61227002:05
*** abaindur has joined #openstack-lbaas02:07
*** abaindur has quit IRC02:07
*** abaindur has joined #openstack-lbaas02:09
*** abaindur has quit IRC02:10
*** abaindur has joined #openstack-lbaas02:10
sapd1_xjohnsom: I'm here.02:14
sapd1_xyeah. I saw your comment, but I'm busy on other tasks. So I will push new patch set asap.02:15
johnsomsapd1_x: ok, I added a gate test. If that works and I can find a minute are you ok with me making that change for you?02:17
sapd1_xrm_work: unfortunately, our presentation is not selected.02:19
sapd1_xI'm waiting for TSP.02:19
*** abaindur has quit IRC02:19
*** abaindur has joined #openstack-lbaas02:20
johnsomsapd1_x: I just want to check with you before modifying your patch.02:28
sapd1_xjohnsom: yeah, So the gate is working with cinder now?02:29
johnsomI don’t know yet.  Oslo broke our gates yesterday, so we are just getting them going again02:30
sapd1_xjohnsom: I just have to separate cinder function to other module other than nova drivers.02:30
johnsomIt is a patch in octavia-tempest-plugin02:30
sapd1_xyep. Let me know if it works.02:30
johnsomsapd1_x: that is the ask. I am offering to help if you are busy02:31
sapd1_xjohnsom: that's good. I think we can help each other. So no problem. :D02:32
johnsomsapd1_x: ok, if I have time I will try to help with that. We can do a follow the sun approach.  Grin02:35
*** sapd1_x has quit IRC02:38
*** Dinesh_Bhor has joined #openstack-lbaas02:41
*** hongbin has joined #openstack-lbaas02:48
*** psachin has joined #openstack-lbaas02:52
openstackgerritMerged openstack/octavia master: Update requirements for ubuntu  https://review.openstack.org/62440503:04
*** farelysnow has joined #openstack-lbaas03:26
*** ramishra has joined #openstack-lbaas03:43
openstackgerritcaoyuan proposed openstack/python-octaviaclient master: Update json module to jsonutils  https://review.openstack.org/63833004:11
openstackgerritcaoyuan proposed openstack/octavia-tempest-plugin master: Update json module to jsonutils  https://review.openstack.org/63833204:22
*** ianychoi has quit IRC04:31
*** hongbin has quit IRC05:04
*** yamamoto has quit IRC05:44
openstackgerritcaoyuan proposed openstack/octavia-tempest-plugin master: Update json module to jsonutils  https://review.openstack.org/63833205:47
*** yamamoto has joined #openstack-lbaas05:48
openstackgerritMerged openstack/octavia master: Fix auto setup Barbican's ACL in the legacy driver.  https://review.openstack.org/60691806:10
*** gcheresh has joined #openstack-lbaas06:17
*** gcheresh has quit IRC06:34
*** ccamposr has joined #openstack-lbaas06:51
*** yamamoto has quit IRC06:59
*** psachin has quit IRC07:10
*** rcernin has quit IRC07:13
*** pcaruana has joined #openstack-lbaas07:19
*** celebdor has joined #openstack-lbaas07:31
*** psachin has joined #openstack-lbaas07:32
*** yamamoto has joined #openstack-lbaas07:38
*** Dinesh_Bhor has quit IRC07:49
openstackgerritMerged openstack/octavia master: Update json module to jsonutils  https://review.openstack.org/63792907:53
*** sapd1_x has joined #openstack-lbaas07:54
*** sapd1_x has quit IRC08:06
openstackgerritNir Magnezi proposed openstack/octavia master: WIP: Add initscript element to RHEL8 and Fedora28  https://review.openstack.org/63666108:10
*** ivve has joined #openstack-lbaas08:27
*** abaindur has quit IRC08:31
*** abaindur has joined #openstack-lbaas08:31
openstackgerritMerged openstack/octavia master: Fix oslo messaging connection leakage  https://review.openstack.org/63642808:41
openstackgerritJacky Hu proposed openstack/octavia-dashboard master: WIP: Add load balancer flavor support  https://review.openstack.org/63836508:55
*** yamamoto has quit IRC08:56
*** abaindur has quit IRC08:57
*** yamamoto has joined #openstack-lbaas09:04
*** ccamposr has quit IRC09:04
*** ccamposr has joined #openstack-lbaas09:23
openstackgerritMerged openstack/octavia master: Set the default retries down to 120  https://review.openstack.org/63707709:31
*** sapd1_x has joined #openstack-lbaas09:37
*** yamamoto has quit IRC09:58
*** ccamposr has quit IRC09:58
openstackgerritNir Magnezi proposed openstack/octavia master: Encrypt certs and keys  https://review.openstack.org/62706410:02
*** ccamposr has joined #openstack-lbaas10:02
*** yamamoto has joined #openstack-lbaas10:34
*** psachin has quit IRC10:38
*** yamamoto has quit IRC10:39
*** psachin has joined #openstack-lbaas10:42
*** sapd1_x has quit IRC10:50
*** AlexStaf has quit IRC10:54
*** psachin has quit IRC11:22
openstackgerritzhulingjie proposed openstack/octavia-tempest-plugin master: Update json module to jsonutils  https://review.openstack.org/63833211:28
openstackgerritzhulingjie proposed openstack/python-octaviaclient master: Update json module to jsonutils  https://review.openstack.org/63833011:29
*** yamamoto has joined #openstack-lbaas11:29
*** yamamoto has quit IRC11:34
*** dayou has quit IRC12:19
*** farelysnow has quit IRC12:21
*** dayou has joined #openstack-lbaas12:23
*** yamamoto has joined #openstack-lbaas12:28
*** yamamoto has quit IRC12:34
*** celebdor has quit IRC12:48
*** yamamoto has joined #openstack-lbaas13:03
*** trown|outtypewww is now known as trown13:06
*** yamamoto has quit IRC13:08
openstackgerritNir Magnezi proposed openstack/octavia master: Encrypt certs and keys  https://review.openstack.org/62706413:10
*** henriqueof has quit IRC13:17
*** henriqueof has joined #openstack-lbaas13:25
*** yamamoto has joined #openstack-lbaas13:36
*** yamamoto has quit IRC13:36
*** yamamoto has joined #openstack-lbaas13:47
*** yamamoto has quit IRC14:13
*** yamamoto has joined #openstack-lbaas14:14
*** yamamoto has quit IRC14:14
*** yamamoto has joined #openstack-lbaas14:15
*** yamamoto has quit IRC14:19
openstackgerritNir Magnezi proposed openstack/octavia master: Encrypt certs and keys  https://review.openstack.org/62706414:30
*** ramishra has quit IRC14:40
*** yamamoto has joined #openstack-lbaas14:57
*** yamamoto has quit IRC15:01
*** celebdor has joined #openstack-lbaas15:02
henriqueofWhat are the post-install steps to take after deploying Octavia with kolla? Looks like only missing thing is amphora image, am I right?15:03
*** ramishra has joined #openstack-lbaas15:30
*** celebdor has quit IRC15:50
xgermanrm_work: has the most experience with kolla - so you need to wait until he is in :_15:53
*** ramishra has quit IRC16:05
*** celebdor has joined #openstack-lbaas16:11
*** fnaval has joined #openstack-lbaas16:13
openstackgerritCarlos Goncalves proposed openstack/octavia stable/rocky: Fix oslo messaging connection leakage  https://review.openstack.org/63845416:24
*** yamamoto has joined #openstack-lbaas16:45
*** yamamoto has quit IRC16:50
openstackgerritMichael Johnson proposed openstack/octavia master: Add client_ca_tls_container_ref to listener API  https://review.openstack.org/61226717:02
openstackgerritMichael Johnson proposed openstack/octavia master: Add an option to the Octavia V2 listener API for client cert  https://review.openstack.org/61226817:02
johnsomRebase fun17:02
johnsomAh, the barbican patch caused the conflict... easy cleanup17:04
openstackgerritMichael Johnson proposed openstack/octavia master: Add crl-file option for certification  https://review.openstack.org/61226917:06
openstackgerritMichael Johnson proposed openstack/octavia master: Add new ssl header into Listener for client certificate  https://review.openstack.org/61227017:06
openstackgerritguang-yee proposed openstack/octavia master: Update osutil support for SUSE distro  https://review.openstack.org/54181117:06
*** pcaruana has quit IRC17:07
openstackgerritMichael Johnson proposed openstack/octavia master: Add new ssl header into Listener for client certificate  https://review.openstack.org/61227017:17
*** yamamoto has joined #openstack-lbaas17:20
*** ccamposr has quit IRC17:24
*** yamamoto has quit IRC17:25
*** trown is now known as trown|lunch17:38
*** celebdor has quit IRC17:44
*** yamamoto has joined #openstack-lbaas17:47
*** trown|lunch is now known as trown18:52
rm_workhenriqueof: yeah actually you prolly want to do the amp build and image upload *before* you deploy the service :D19:48
rm_workBut, yeah that's basically the only other thing19:48
henriqueofrm_work: Right, I see the installer asked for the certs and I provided then but it doesn't asked for images, it also did not create the networks so I thought some parts of the deployment wasn't implemented on the ansible playbook.19:58
henriqueofAlso, there is no docs on Octavio config using kolla, is there a guide anywhere?19:59
rm_workah, kolla-ansible, not just kolla19:59
rm_workor, kolla + custom stuff?19:59
*** fnaval has quit IRC20:12
*** fnaval_ has joined #openstack-lbaas20:12
henriqueofkolla-ansible20:23
*** abaindur has joined #openstack-lbaas20:26
rm_workYeah because we use an image tag not an ID, I don't think k-a needs to know anything about your image, it just expects you to upload it and tag it with the correct tag name20:26
rm_workThough I forget which one it configures by default20:26
*** abaindur has quit IRC20:27
*** abaindur has joined #openstack-lbaas20:28
*** fnaval_ has quit IRC20:29
*** fnaval has joined #openstack-lbaas20:29
henriqueofI just checked the deployed configs, the image tag is amphora like the docs recommends and there is not network IDs so I think it is out of the scope os k-a, what dou you think?20:36
rm_workyeah21:03
*** rcernin has joined #openstack-lbaas21:11
*** trown is now known as trown|outtypewww22:07
*** fnaval has quit IRC22:13
johnsomWell, that was a bunch of time refreshing my memory on Distinguished Name syntax...  At least I have a path forward now on the L7 patch.22:28
*** fnaval has joined #openstack-lbaas22:35
*** fnaval has quit IRC22:35
*** fnaval has joined #openstack-lbaas22:36
*** ivve has quit IRC23:25

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!