Thursday, 2019-03-07

*** yamamoto has joined #openstack-lbaas00:13
*** yamamoto has quit IRC00:17
openstackgerritMerged openstack/octavia-dashboard master: Fix auth url for Barbican client  https://review.openstack.org/64068600:30
*** abaindur has joined #openstack-lbaas00:50
*** celebdor has quit IRC01:09
*** cbrumm_ has quit IRC01:21
*** cbrumm_ has joined #openstack-lbaas01:22
*** PagliaccisCloud has quit IRC01:24
*** PagliaccisCloud has joined #openstack-lbaas01:27
*** rcernin has quit IRC01:31
*** rcernin has joined #openstack-lbaas01:32
*** ramishra has joined #openstack-lbaas02:20
*** abaindur has quit IRC02:21
*** fnaval has quit IRC02:30
*** fnaval has joined #openstack-lbaas02:39
*** psachin has joined #openstack-lbaas02:42
*** yamamoto has joined #openstack-lbaas03:00
*** problem_v has quit IRC03:20
*** yamamoto has quit IRC03:36
*** yamamoto has joined #openstack-lbaas03:36
*** strigazi has quit IRC04:26
*** brtknr has quit IRC04:26
*** bcafarel has quit IRC04:26
*** kklimonda_ has quit IRC04:26
openstackgerritMerged openstack/octavia-dashboard master: Add load balancer flavor support  https://review.openstack.org/63836504:32
*** strigazi has joined #openstack-lbaas04:53
*** kklimonda_ has joined #openstack-lbaas04:53
*** brtknr has joined #openstack-lbaas04:53
*** bcafarel has joined #openstack-lbaas04:53
*** PagliaccisCloud has quit IRC04:56
*** rcernin has quit IRC04:56
*** mjblack has quit IRC04:56
*** PagliaccisCloud has joined #openstack-lbaas04:56
*** mjblack has joined #openstack-lbaas04:58
*** rcernin has joined #openstack-lbaas05:02
openstackgerritMerged openstack/octavia master: Remove outdated/incorrect certificate advice  https://review.openstack.org/64151505:25
*** lemko has joined #openstack-lbaas05:35
*** yamamoto has quit IRC05:43
*** yamamoto has joined #openstack-lbaas05:48
*** yboaron_ has joined #openstack-lbaas06:04
*** gcheresh_ has joined #openstack-lbaas06:08
*** ivve has joined #openstack-lbaas06:49
*** lxkong has quit IRC06:52
*** mkuf has quit IRC06:54
*** mkuf has joined #openstack-lbaas06:57
*** ataraday has quit IRC07:13
*** ccamposr has joined #openstack-lbaas07:14
*** ataraday has joined #openstack-lbaas07:18
openstackgerritFrode Nordahl proposed openstack/octavia master: Fix diskimage-create tox, add ``build`` and ``test`` targets  https://review.openstack.org/63294807:21
*** lxkong has joined #openstack-lbaas07:21
*** ataraday_ has quit IRC07:25
*** pcaruana has joined #openstack-lbaas07:25
openstackgerritFrode Nordahl proposed openstack/octavia master: Fix diskimage-create tox, add ``build`` and ``test`` targets  https://review.openstack.org/63294807:27
*** rcernin has quit IRC07:27
openstackgerritCarlos Goncalves proposed openstack/octavia-dashboard stable/rocky: Fix auth url for Barbican client  https://review.openstack.org/64157707:31
openstackgerritCarlos Goncalves proposed openstack/octavia-dashboard stable/queens: Fix auth url for Barbican client  https://review.openstack.org/64157807:31
*** lemko has quit IRC07:45
*** celebdor has joined #openstack-lbaas08:12
*** gthiemonge has joined #openstack-lbaas08:52
*** yboaron_ has quit IRC09:52
*** salmankhan has joined #openstack-lbaas10:17
*** sapd1 has joined #openstack-lbaas10:30
*** yboaron_ has joined #openstack-lbaas10:43
*** yamamoto has quit IRC10:53
*** yamamoto has joined #openstack-lbaas11:33
*** yamamoto has quit IRC11:35
*** yamamoto has joined #openstack-lbaas11:35
*** yamamoto has quit IRC11:42
*** yamamoto has joined #openstack-lbaas11:43
*** yamamoto has quit IRC11:43
*** yamamoto has joined #openstack-lbaas11:44
*** yamamoto has quit IRC11:48
*** sapd1 has quit IRC11:55
*** sapd1 has joined #openstack-lbaas12:08
*** henriqueof has joined #openstack-lbaas12:21
*** sapd1 has quit IRC12:36
*** yamamoto has joined #openstack-lbaas12:38
*** yamamoto has quit IRC12:47
*** celebdor has quit IRC13:23
*** yamamoto has joined #openstack-lbaas13:29
openstackgerritCarlos Goncalves proposed openstack/octavia master: Updates Octavia to support octavia-lib  https://review.openstack.org/61370913:33
*** celebdor has joined #openstack-lbaas13:35
mnaserxgerman: thanks <313:35
openstackgerritCarlos Goncalves proposed openstack/octavia master: Updates Octavia to support octavia-lib  https://review.openstack.org/61370913:41
*** sapd1 has joined #openstack-lbaas13:54
openstackgerritCarlos Goncalves proposed openstack/octavia-tempest-plugin master: Fix barbican service_available check  https://review.openstack.org/63908313:54
*** psachin has quit IRC14:24
*** sapd1 has quit IRC14:51
*** luksky has joined #openstack-lbaas14:57
openstackgerritMerged openstack/octavia-tempest-plugin master: Add octavia-lib to required projects  https://review.openstack.org/64118015:15
*** fnaval has quit IRC15:16
rm_worklooks like Starbucks is finally jumping on the cloud bandwagon :D https://usercontent.irccloud-cdn.com/file/UQOp2E9h/155197220751973913905446019447.jpg15:24
larsksrm_work: I was expecting it to say "kubernetes" at the bottom or something instead of "espresso".15:25
*** gcheresh_ has quit IRC15:30
*** fnaval has joined #openstack-lbaas15:30
johnsomWe’ve noticed this glass is too full, let me kill your espresso and move it to another glass.....15:45
xgermanLet me fix that for them “Cloud FUNCTION machiato"15:48
cgoncalvesonly place I found serving espresso in JFK T5 was Starbucks. I can't recommend15:50
xgermanYou have an idea how espresso tasted before Starbucks?15:51
Baggypants12000nicer?15:51
cgoncalvesphrasing that way gives the impression Starbucks is the only place now15:51
xgermanThanks to Starbucks proving there is a market for “good” coffeee we now have good coffee15:52
mugsiexgerman: in EU we always had good coffee :P15:53
xgermanYeah, I lived a year in Italy. I know my coffee… but what you have to put up with in US...15:54
Baggypants12000I went to Italy a few times, I don't think they like coffee, otherwise they woud use normal size cups.15:54
*** luksky has quit IRC16:32
*** ivve has quit IRC16:33
*** ramishra has quit IRC16:35
johnsomI'm on a Stumptown kick now.16:37
cgoncalvesI had to google that up16:42
*** yamamoto has quit IRC16:44
johnsomIt's a Portland roaster.16:46
*** yamamoto has joined #openstack-lbaas16:49
xgermanyeah, they are very good --16:50
*** yboaron_ has quit IRC16:52
*** gthiemonge has quit IRC17:03
*** celebdor has quit IRC17:08
*** roukoswarf has joined #openstack-lbaas17:18
roukoswarfif i create an octavia LB on a shared network, i cant ever un-share that network without deleting all ports and the subnet on that network, how do i unshare a network? just says its connected to multiple tenants17:19
johnsomroukoswarf I think that is a limitation of neutron and not related to Octavia. I think that if there is any port on the network they have restrictions on what they let you do. It might be best to ask in #openstack-neutron if there is a way to unshare a network with ports on it.17:21
roukoswarfi deleted all the ports, and it still failed till i removed the subnet17:21
roukoswarfhow are ips given to the admin project to spin up amphoras? i figure that would be the problem17:22
johnsomYeah, that seems odd. I would have expected an un-share to work with an in-use network, but....17:22
johnsomneutron assigns them to us17:22
roukoswarfyeah... whatever that process is doing, its tripping over itself17:22
roukoswarfneed to delete the entire subnet before i can unshare.17:23
johnsomYeah, we don't do anything special with neutron. We just use the APIs like an end user to create ports on neutron networks.17:23
Baggypants12000What do people like use to manage the certificates for octavia?17:26
johnsomFor the internal use certificates, most folks setup a self-signed CA using the instructions here: https://docs.openstack.org/octavia/latest/admin/guides/certificates.html17:26
Baggypants12000or has everyone set up with a one shot openssl cert authority setup and a calendar reminder to renew the cert in 2030?17:27
johnsomFor tenant certificates used for TLS offload, we use barbican or castellan.17:27
Baggypants12000johnsom: that seems a bit... agricultural.17:28
johnsomPretty much, yes. The cets issued to the amphora can of course have much lower expiration as the controller housekeeping will rotate them for you.17:28
roukoswarfcan amporas be used for ssl termination?17:28
xgermanyes17:28
johnsomYes17:28
johnsomAs of Stein we will do backend re-encryption as well17:28
johnsomAlso in Stein, TLS client authentication for TLS termination17:29
roukoswarfdocs where? i only end up getting stuff for legacy lbaas17:29
xgermanBaggypants12000: I was thinking integrating the certs we use to commuicate internally with Vault — but too little time. We use to have anchor (which did a similar thing) but then whittered17:29
johnsomroukoswarf The official docs are here: https://docs.openstack.org/octavia/latest/17:29
Baggypants12000whittered? oh you mean talked inanely?17:30
johnsomAnchor project died and is no longer an official OpenStack project.17:30
roukoswarfjohnsom: i dont see any docs there that show how to add an ssl cert to a listener?17:31
xgermanyeah, tried to be more prosaic17:31
Baggypants12000we're finally getting rid of vpnaas on our stack this month,17:31
johnsomroukoswarf https://docs.openstack.org/octavia/latest/user/guides/basic-cookbook.html#deploy-a-tls-terminated-https-load-balancer17:31
johnsomIt's been a feature since Mitaka, maybe earlier17:31
Baggypants12000xgerman: no worries :)17:31
roukoswarfmm, in a cookbook page, didnt appear when searching, or im bad at searching.17:32
johnsomBaggypants12000 Why are you getting rid of VPNaaS? Just curious17:32
*** rpittau is now known as rpittau|afk17:36
*** ivve has joined #openstack-lbaas17:41
johnsomI assume VPNaaS isn't still limited to PSK... That would be, sad17:41
*** luksky has joined #openstack-lbaas17:47
*** irclogbot_1 has joined #openstack-lbaas18:03
*** salmankhan has quit IRC18:06
openstackgerritMerged openstack/octavia-tempest-plugin master: Fix barbican service_available check  https://review.openstack.org/63908318:09
*** psachin has joined #openstack-lbaas18:23
*** ccamposr has quit IRC18:43
*** pcaruana has quit IRC18:46
*** pcaruana has joined #openstack-lbaas19:05
*** pcaruana has quit IRC19:33
*** ivve has quit IRC20:08
*** brtknr has quit IRC20:10
*** brtknr has joined #openstack-lbaas20:15
*** psachin has quit IRC20:17
*** abaindur has joined #openstack-lbaas20:20
*** abaindur has quit IRC20:22
*** abaindur has joined #openstack-lbaas20:22
*** abaindur has quit IRC20:33
lxkongjohnsom: hi, i have a question regarding to the health monitor. When the health monitor detects there is a member unhealthy, does it send some notification outside? So something else who receieves the nofication could do something repair job for the member, e.g. nova  rebuild22:28
johnsomIt does not today. We talked about this at the last PTG and I think work started on that, but is not done.22:30
lxkongjohnsom: any link pleae?22:32
lxkongstory? etherpad?22:32
johnsomThis stuff is in a few different locations, give me a minute22:33
johnsomhttps://etherpad.openstack.org/p/octavia-stein-ptg Line 26822:33
johnsomYikes, storyboard is slow now22:37
johnsomhttps://storyboard.openstack.org/#!/story/200378222:37
lxkongjohnsom: thanks, i'll take a look22:39
johnsomThere is a patch too I'm looking for, but not seeing22:39
johnsomhttps://review.openstack.org/61538222:40
lxkongnice, ta22:40
johnsomThere is eventing in the code now for sync with neutron, but it needs to be ripped out as soon as neutron-lbaas is retired later this year.  General events need a better design22:41
*** rcernin has joined #openstack-lbaas22:41
xgermanthere was some self healing project in Denver — forgot the name22:42
xgermanthey were driving part of that22:42
johnsomYeah, I pointed to the notes from the PTG chat.22:42
xgermansweet22:42
johnsomI think we should have a spec for this as it can get messy in the code and there are multiple groups looking for different kinds of event.s22:43
johnsomAh, here is the other story: https://storyboard.openstack.org/#!/story/200377322:44
johnsomlxkong https://storyboard.openstack.org/#!/story/2003773  might be the one you were looking for22:45
*** sapd1 has joined #openstack-lbaas22:51
*** luksky has quit IRC23:05
*** abaindur has joined #openstack-lbaas23:11
openstackgerritCarlos Goncalves proposed openstack/octavia master: Add listener and pool protocol validation  https://review.openstack.org/59404023:17
*** fnaval has quit IRC23:49

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!