Friday, 2019-03-08

*** sapd1 has quit IRC00:16
rm_workBaggypants12000: also here: https://developer.openstack.org/api-ref/load-balancer/v2/index.html?expanded=create-listener-detail#create-listener00:24
rm_workthe API for create listener lists the fields necessary00:25
rm_work`default_tls_container_ref `: The URI of the key manager service secret containing a PKCS12 format certificate/key bundle for TERMINATED_TLS listeners.00:25
rm_workah sorry, that's roukoswarf00:25
rm_work^^00:25
*** abaindur has quit IRC00:26
rm_workBaggypants12000: wires crossed, was also thinking of a response for you -- I think you could use something like certbot or dogtag to handle the internal certs as well, plus cron... but, that CA needs to live longer than any existing amphora cert (for validation purposes) and we don't support multiple CAs? or actually maybe we do, if that's standard cert stuff to be able to put multiple CAs in one PEM00:27
*** fnaval has joined #openstack-lbaas00:38
*** fnaval has quit IRC00:46
*** fnaval has joined #openstack-lbaas00:49
*** fnaval has quit IRC00:49
*** sapd1 has joined #openstack-lbaas00:50
openstackgerritMerged openstack/octavia master: Fix health monitor exception  https://review.openstack.org/64100801:29
*** abaindur has joined #openstack-lbaas01:48
*** abaindur has quit IRC02:17
*** hongbin has joined #openstack-lbaas02:42
*** ramishra has joined #openstack-lbaas02:55
*** abaindur has joined #openstack-lbaas04:25
*** abaindur has quit IRC04:26
*** abaindur has joined #openstack-lbaas04:33
*** Dinesh_Bhor has quit IRC05:29
*** Dinesh_Bhor has joined #openstack-lbaas05:33
*** hongbin has quit IRC05:42
*** sapd1 has quit IRC05:42
*** sapd1 has joined #openstack-lbaas05:52
*** abaindur has quit IRC06:23
*** sapd1 has quit IRC06:44
*** ivve has joined #openstack-lbaas06:49
*** ccamposr has joined #openstack-lbaas06:49
*** ramishra has quit IRC07:10
*** luksky has joined #openstack-lbaas07:17
*** ramishra has joined #openstack-lbaas07:25
*** pcaruana has joined #openstack-lbaas07:26
*** gthiemonge has joined #openstack-lbaas07:37
*** rpittau|afk is now known as rpittau08:06
*** pcaruana has quit IRC09:12
*** pcaruana has joined #openstack-lbaas09:27
*** rcernin has quit IRC09:47
*** ramishra has quit IRC10:05
*** mkuf has quit IRC10:09
*** mkuf has joined #openstack-lbaas10:13
Baggypants12000rm_work: dogtag seems like the best shout here, thanks for the pointer!10:18
*** salmankhan has joined #openstack-lbaas10:27
*** yamamoto has quit IRC10:43
*** ramishra has joined #openstack-lbaas10:48
*** luksky has quit IRC11:06
rm_workBaggypants12000: yeah np, i think probably one of the main reasons we haven't really gotten into it is because it's so opinionated and everyone has their own way of dealing with certs11:13
*** yamamoto has joined #openstack-lbaas11:18
*** yamamoto has quit IRC11:25
*** yamamoto has joined #openstack-lbaas11:26
*** luksky has joined #openstack-lbaas11:36
*** gcheresh_ has joined #openstack-lbaas11:37
*** gcheresh_ has quit IRC11:58
*** willksm has joined #openstack-lbaas12:51
*** henriqueof has quit IRC13:06
*** ivve has quit IRC13:08
*** ramishra has quit IRC13:27
*** yamamoto has quit IRC13:27
openstackgerritMerged openstack/octavia master: Updates Octavia to support octavia-lib  https://review.openstack.org/61370913:29
*** pcaruana has quit IRC13:30
cgoncalves^ we're ready to cut a stein branch :)13:53
*** yamamoto has joined #openstack-lbaas13:54
*** pcaruana has joined #openstack-lbaas14:37
*** gthiemonge has quit IRC15:15
*** gthiemonge has joined #openstack-lbaas15:18
*** kmadac2 has joined #openstack-lbaas15:18
kmadac2Hi folks, I have octavia installed with openstack-ansible. I'm able to create LBs with openstack cli client, but dashboard in horizon does not work. I can see Load Balancers menu, but whe I click on it, horizon starts to reload the page again and again indefinitely. No errors is found in horizon log files. Do you have any hint where to look to find the root cause?15:22
kmadac2OpenStack version is Rocky15:23
johnsomkmadac2: Most likely issue is that both neutron-lbaas-dashboard and octavia-dashboard are installed in horizon.  Removing neutron-lbaas-dashboard should solve your problem.15:25
johnsomWe have a known bug when they are both installed.15:25
kmadac2@johnsom: thanks, I had both of them installed, but then I disable in neutron-lbaas-dashboard in deployment configuration, but problem still persist. What is the best way to check if it is really removed?15:29
johnsomkmadac2: In the horizon container and directory there is a folder local/enabled or something similar.  Make sure __1482... is the only lbaas file there. The other might be 1481.15:31
johnsomAlso you can re-run the manage.py collectstatic and compress commands.  The. Restart apache.15:32
johnsomIf that doesn’t work you can clear the horizon static folder or rebuilt the horizon containers using ansible.15:33
kmadac2johnsom: I will probably rebuild the containers from scratch, thank you :)15:34
johnsomNp15:35
*** yamamoto has quit IRC15:48
*** yamamoto has joined #openstack-lbaas15:49
*** yamamoto has quit IRC15:51
*** luksky has quit IRC15:51
*** yamamoto has joined #openstack-lbaas16:01
*** yamamoto has quit IRC16:07
*** gthiemonge has quit IRC16:12
*** gthiemonge has joined #openstack-lbaas16:12
cgoncalvesfolks, any last-minute feature patch you'd like to see merged in for Stein?16:20
xgermanlove to see logging but we never agreed on how to do that16:25
cgoncalvesyeah, pity. I'd have liked to have in that too. last time I checked logs were not being saved in gate (https://review.openstack.org/#/c/626406/)16:27
xgermanwell, and then johnsom didn’t like the design (I think he wanted two hosts to send logs to)16:32
xgermanbut if that’s all we want we can try FFE16:32
*** pcaruana has quit IRC17:12
*** fnaval has joined #openstack-lbaas17:19
*** rpittau is now known as rpittau|afk17:31
*** gthiemonge has quit IRC18:05
johnsomcgoncalves Are you still looking at that verification patch?18:08
johnsomoctavia.tests.functional.api.v2.test_l7policy.TestL7Policy.test_listener_pool_protocol_map_put    1068.65318:08
johnsomThis is part of the problem.....18:09
cgoncalvesjohnsom, no18:09
johnsomThere are a few others that are in triple digit seconds per test as well.18:09
johnsomOk, on my list18:09
johnsomI don't think we need a functional test that takes 17 minutes.18:10
johnsomExcellent catch BTW.  Kudos18:10
cgoncalvesmy laptop fan was the whistle-blower18:10
johnsomlol, yeah I have a core graph on a small screen that is also my "something is horribly wrong" warning.18:11
*** salmankhan has quit IRC18:11
johnsomhttps://usercontent.irccloud-cdn.com/file/7yLPgIHB/1552068755.JPG18:12
cgoncalveswindows??18:13
johnsomYeah18:14
johnsomPreviously necessary to make some corporate tools run smoothly....18:14
johnsomXming works nicely though.18:15
cgoncalves"previously", heh18:15
*** ccamposr has quit IRC18:32
*** henriqueof has joined #openstack-lbaas19:02
*** irclogbot_1 has quit IRC20:13
*** abaindur has joined #openstack-lbaas20:15
cgoncalvesoctavia.tests.functional.api.v2.test_l7policy.TestL7Policy.test_listener_pool_protocol_map_put  368.900s20:16
cgoncalvesgetting better20:16
*** abaindur has quit IRC20:31
*** abaindur has joined #openstack-lbaas20:32
*** abaindur has quit IRC20:32
*** abaindur has joined #openstack-lbaas20:32
*** yamamoto has joined #openstack-lbaas20:49
*** yamamoto has quit IRC20:54
openstackgerritOpenStack Release Bot proposed openstack/octavia-lib stable/stein: Update .gitreview for stable/stein  https://review.openstack.org/64215421:19
openstackgerritOpenStack Release Bot proposed openstack/octavia-lib stable/stein: Update UPPER_CONSTRAINTS_FILE for stable/stein  https://review.openstack.org/64215521:19
openstackgerritOpenStack Release Bot proposed openstack/octavia-lib master: Update master for stable/stein  https://review.openstack.org/64215621:19
johnsomContinuing with my PTL paperwork duties....  octavia-lib now has a stable/stein branch.21:21
johnsomAlso, these will be our "marketing highlights" for Stein:21:21
johnsomhttps://www.irccloud.com/pastebin/CW0rjf9B/21:21
johnsomLet me know if you have feedback on those....21:21
johnsomIt's a bulleted list when rendered in the release docs.21:23
roukoswarfwhats the metadata tags?21:24
johnsomFrom the API guide: "A list of simple strings assigned to the resource."21:25
johnsomPeople use them to track resources when they use automation tools like terraform, etc.21:25
roukoswarfoh, so not a traffic tagging at all21:25
johnsomNope, It's an API only feature that most of the OpenStack services support.21:26
johnsomThis is another reference: https://specs.openstack.org/openstack/api-wg/guidelines/tags.html21:26
johnsomWe also have this in the API guide: https://developer.openstack.org/api-ref/load-balancer/v2/index.html?expanded=create-a-load-balancer-detail#filtering-by-tags21:28
roukoswarfim just lurking waiting for something to replace f5 irules so i can make the argument to move away from f5/a10, which is keeping us on lbaas21:28
johnsomAh, good to know.  Do you have some sample use cases you could put in a story for us?21:28
johnsomNot that those aren't fine devices, but if it's a feature you are looking for out of the Octavia API it would be good to know.21:29
roukoswarfwe are still early stages migrating to openstack, the devs arent 100% sure whats missing yet, but we have a lot of irule crazy lying around, so i will let you know once we start porting more.21:32
roukoswarfwe have a10/f5 via lbaas for now, as a fallback21:32
johnsomOk. With the new flavors, the F5 driver could support the operator injecting irules (it was discussed during the flavors design work).21:32
roukoswarfi would like to be free of the lbaas dep21:32
roukoswarfany idea when an f5/a10 driver for octavia will be here? instead of relying on legacy lbaas?21:33
johnsomI don't know on those two. It's up to the vendors as we have no way to test, etc.21:33
roukoswarfseems like they arent in much of a hurry to move, just to get a10 working how we needed i had to add a bunch of code to their driver.21:34
roukoswarfand that just getting their stuff to do what we need with legacy lbaas.21:34
johnsomYeah, I think A10 had some development team changes.....21:34
johnsomWe are here to help them develop their drivers though.21:35
roukoswarftheir plumbing code must have been written by a college student with a point to prove and way too much time cause it was very strangely made.21:35
johnsomThe Octavia driver specification was written by F521:35
*** luksky has joined #openstack-lbaas21:35
johnsomUnfortunately they also had some internal changes. I hope they can get back to it soon if they haven't already.21:36
roukoswarfwhats stopping octavia devs from writing it? time, money, hardware, or all of the above?21:37
roukoswarf(the octavia drivers for f5/a10)21:38
johnsomYes. But mostly, we don't have access to the hardware to test against. Also we would need the approval from the company, etc.21:38
roukoswarfapproval from the company to work on their customer facing api?21:39
johnsomWell, I think it would be a good idea if we represent is as "the F5 driver" or such.21:40
roukoswarfsure, but if they arent competing currently, if you built one in-tree they would be better off just commiting to that once they get the bandwidth21:41
johnsomMost of us are sponsored (or were until recently) by employers that have their own needs/agenda. So developing for another company isn't always on that list.21:41
roukoswarfah21:41
johnsomWith Octavia we made the decision to have all but the reference driver out of the tree, simply because it's overhead for the driver developers to get us to review, etc. With the new plugin model for the drivers, this makes it pretty easy to build an out-of-tree driver.21:42
roukoswarfi wouldnt mind porting the a10 driver if it wasnt written insanely21:43
roukoswarfbut its written insanely.21:43
johnsomI wrote a decent guide for creating one if you get the itch: https://docs.openstack.org/octavia/latest/contributor/guides/providers.html21:43
roukoswarfpretty docs, ill need to read them21:45
roukoswarffor now my "sponsor" is busy getting bootstrapped in openstack, might have some bandwidth eventually.21:46
johnsomlol, sounds good21:47
openstackgerritMerged openstack/octavia-lib stable/stein: Update .gitreview for stable/stein  https://review.openstack.org/64215421:47
openstackgerritMerged openstack/octavia-lib master: Update master for stable/stein  https://review.openstack.org/64215621:47
*** roukoswarf has quit IRC21:49
*** Swami has joined #openstack-lbaas22:28
rm_workjohnsom: this needs to be rebased? https://review.openstack.org/#/c/617015/322:53
rm_workdo we need these soon?22:53
rm_worklike, *today*, or soon22:53
johnsomNo, we can boot that to train22:53
rm_workk22:53
johnsomIt's non-critical cleanup22:54
rm_workkk22:54
rm_workanything of yours i need to look at today?22:54
johnsomNope, we are in feature freeze now IMO22:54
johnsomWe got the last hot item in this morning22:54
johnsomI'm just working on paperwork stuffs today (release note cleanup, marketing highlights, stable/stein for the octavia-lib, etc.)22:55
rm_workk22:56
johnsomWell, among other distractions.22:58
cgoncalveswe can start purging API v1, event queue and  tempest+octavia-v1-dsvm jobs!22:59
johnsomcgoncalves It's September or "U" right?23:01
johnsomWe plan to retire neutron-lbaas and neutron-lbaas-dashboard in September 2019 or the "U" OpenStack release cycle, whichever comes first. This means the code will be be removed and will not be released as part of the "U" OpenStack release.23:01
johnsomNot that it wouldn't so refreshing to that...23:01
*** irclogbot_1 has joined #openstack-lbaas23:01
cgoncalveshttps://releases.openstack.org/train/schedule.html23:03
johnsomHmmm23:04
johnsomGlad to see the Train schedule posted.23:04
johnsomWe should probably vote on that next week and update the statement to reflect the "T" cycle given the change in release cadence.23:06
cgoncalvessure. not that it would change anything anyway23:11
cgoncalvesSeptember 2019 comes first than T (and U)23:11
johnsom+123:11
johnsomGeez, we might all fight over which parts of the code we want to rip out! grin23:12
cgoncalveslol!23:12
openstackgerritMichael Johnson proposed openstack/octavia master: Add a prelude to the Stein release notes  https://review.openstack.org/64217723:24
openstackgerritKen'ichi Ohmichi proposed openstack/octavia master: Remove unnecessary `openstack flavor show`  https://review.openstack.org/64217823:25
*** fnaval has quit IRC23:26
cgoncalvesshould we be calling "octavia flavors" or "load balancer flavors"?23:30
johnsomI have been saying octavia because they are different than the crappy/barely implemented flavors that neutron-lbaas had.23:30
johnsomBut, feel free to vote/comment23:31
cgoncalvesit's a minor thing, nothing special23:31
*** fnaval has joined #openstack-lbaas23:34
cgoncalvesin functional, creating 199 listeners took 499 seconds :/23:39
cgoncalveseach creation started being subsecond and ended taking ~6 seconds23:40
johnsomHmmm, interesting23:40
rm_workcgoncalves: my functional tests locally do not take nearly that long23:41
rm_workwhat are you running?23:41
rm_workjust octavia `tox -e functional`?23:41
johnsomHe is looking at the new validation patch that takes like 17 minutes to run functional on23:41
cgoncalveshttps://gist.github.com/cgoncalves/db1807bfd452de0a09262062c1888b0223:41
rm_worki got on a "long test" kick a while back and there was only one thing that took any time23:41
rm_workhmmmmmm23:41
rm_workwhich patch is that23:42
johnsomoctavia.tests.functional.api.v2.test_l7policy.TestL7Policy.test_listener_pool_protocol_map_put    1068.65323:42
rm_worki mean which patch23:42
rm_worknot which test23:42
johnsomhttps://review.openstack.org/59404023:42
cgoncalveshttps://review.openstack.org/#/c/594040/23:42
johnsomYeah, I know, just pointing out the issue, though I think what Carlos found is a different, yet related issue.23:42
rm_workjinx23:42
cgoncalvesthere's a slight improvement we can make: https://gist.github.com/cgoncalves/b3e0f87132d69a6e8910c416af61410d23:44
rm_workwow, -2 johnsom ? :D23:44
rm_workbrutal23:44
cgoncalvessavage!23:45
johnsomrm_work You want a 25 minute functional test to merge? It was already +W....23:45
johnsomOh and....  Fire me!  grin23:46
rm_worklol23:46
rm_work:D23:46
rm_workI mean I thought -2 was for "this will never merge, ever, because it is conceptually wrong or not what we want"23:46
cgoncalveshmm, about that. today is last day for PTL nominations23:46
rm_workoh what already?23:47
rm_workseriously?23:47
johnsomNo, they extended it to the 14th23:47
rm_worki thought we had one more week23:47
rm_workok good23:47
rm_workjohnsom: get a job already23:47
rm_workgeeze23:47
johnsomWorking on it23:47
rm_work<323:47
rm_workit's been like, a *whole week*23:47
johnsomBut, -2 is the only way I could pull it out of the gates/stop the +W from going through with a recheck23:48
rm_workwait, did people actually +W?23:48
johnsomYes23:48
rm_workwutlol23:48
rm_workk23:48
rm_worknow i am also curious. but, i'll wait for cgoncalves to post his findings so we don't duplicate effort23:49
cgoncalvesI'm super slow on this. you folks have way more experience so don't make me hold you23:49
johnsomI am fighting with sphinx that doesn't like my prelude...23:50
cgoncalvesthat's because you missed tags23:50
johnsomIt has a super helpful error: "<reno.sphinxext current branch>:16:Unexpected indentation."23:50
johnsomDoesn't even say which file, but I have figured that part out.23:50
rm_worklol23:51
johnsomAh, yeah, should add tags too23:51
rm_worksuch full of help23:51
rm_workah also now it's merge-conflicting23:53
rm_worklol23:53
rm_workdear god well23:56
rm_worki have a fix i want to push anyway just for formatting23:57
rm_workand merge-conflict23:57

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!