Wednesday, 2020-12-09

*** xgerman has quit IRC00:02
*** tkajinam has quit IRC00:16
*** tkajinam has joined #openstack-lbaas00:16
*** luksky has quit IRC00:29
*** zigo has quit IRC00:54
-openstackstatus- NOTICE: The Gerrit service on review.opendev.org is being restarted quickly to make heap memory and jgit config adjustments, downtime should be less than 5 minutes01:09
*** zzzeek has quit IRC01:52
*** zzzeek has joined #openstack-lbaas01:53
*** amotoki has quit IRC02:01
*** amotoki has joined #openstack-lbaas02:02
*** zzzeek has quit IRC02:05
*** zzzeek has joined #openstack-lbaas02:06
*** jamesdenton has quit IRC03:17
*** jamesdenton has joined #openstack-lbaas03:18
*** psachin has joined #openstack-lbaas03:21
*** armax has quit IRC03:38
*** zzzeek has quit IRC04:19
*** zzzeek has joined #openstack-lbaas04:21
*** zzzeek has quit IRC04:26
*** zzzeek has joined #openstack-lbaas04:27
*** vishalmanchanda has joined #openstack-lbaas04:55
*** ccamposr has joined #openstack-lbaas05:14
*** zzzeek has quit IRC05:26
*** zzzeek has joined #openstack-lbaas05:29
*** ramishra_ has joined #openstack-lbaas05:32
*** ramishra has quit IRC05:35
*** zzzeek has quit IRC06:15
*** gcheresh has joined #openstack-lbaas06:16
*** zzzeek has joined #openstack-lbaas06:17
*** zzzeek has quit IRC06:49
*** zzzeek has joined #openstack-lbaas06:51
*** damien_r has joined #openstack-lbaas07:04
*** damien_r has quit IRC07:05
*** psachin has quit IRC07:17
*** zzzeek has quit IRC07:21
*** zzzeek has joined #openstack-lbaas07:23
*** ramishra_ is now known as ramishra08:08
*** rpittau|afk is now known as rpittau08:14
*** gcheresh has quit IRC08:21
*** ccamposr__ has joined #openstack-lbaas08:34
*** ccamposr has quit IRC08:38
*** ccamposr has joined #openstack-lbaas08:45
*** ccamposr__ has quit IRC08:47
*** zzzeek has quit IRC08:50
*** zzzeek has joined #openstack-lbaas08:50
*** rcernin has quit IRC08:56
*** rcernin has joined #openstack-lbaas08:56
*** gcheresh has joined #openstack-lbaas09:01
*** luksky has joined #openstack-lbaas09:10
*** zzzeek has quit IRC09:16
*** zzzeek has joined #openstack-lbaas09:17
*** rcernin has quit IRC09:23
*** rcernin has joined #openstack-lbaas09:32
*** zzzeek has quit IRC09:40
*** zzzeek has joined #openstack-lbaas09:41
*** zzzeek has quit IRC09:46
*** rcernin has quit IRC09:48
*** zzzeek has joined #openstack-lbaas09:49
*** rcernin has joined #openstack-lbaas09:49
*** gcheresh has quit IRC09:51
openstackgerritXiaoYu Zhu proposed openstack/octavia master: Alternative Distributor for L3 Active-Active, N+1 Amphora Setup  https://review.opendev.org/c/openstack/octavia/+/74668809:55
*** ramishra has quit IRC09:59
*** zzzeek has quit IRC10:01
*** gcheresh has joined #openstack-lbaas10:03
*** zzzeek has joined #openstack-lbaas10:03
*** ramishra has joined #openstack-lbaas10:04
*** gcheresh has quit IRC10:13
*** rcernin has quit IRC10:31
openstackgerritzhangxingjun proposed openstack/octavia stable/stein: repair operating status is offline  https://review.opendev.org/c/openstack/octavia/+/76619810:48
*** rcernin has joined #openstack-lbaas10:53
*** zzzeek has quit IRC11:17
*** zzzeek has joined #openstack-lbaas11:18
*** gcheresh has joined #openstack-lbaas11:22
*** yangjianfeng has joined #openstack-lbaas12:03
*** rcernin has quit IRC12:04
*** yangjianfeng has quit IRC13:21
*** devfaz has quit IRC14:02
*** TrevorV has joined #openstack-lbaas14:17
*** noonedeadpunk has quit IRC14:30
*** noonedeadpunk_ has joined #openstack-lbaas14:33
*** sapd1 has joined #openstack-lbaas15:13
*** TrevorV has quit IRC15:18
*** lxkong has quit IRC15:39
*** devfaz has joined #openstack-lbaas15:50
*** sapd1 has quit IRC15:56
*** armax has joined #openstack-lbaas16:00
rm_work#startmeeting Octavia16:01
openstackMeeting started Wed Dec  9 16:01:05 2020 UTC and is due to finish in 60 minutes.  The chair is rm_work. Information about MeetBot at http://wiki.debian.org/MeetBot.16:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:01
*** openstack changes topic to " (Meeting topic: Octavia)"16:01
openstackThe meeting name has been set to 'octavia'16:01
johnsomOpps, yes, thanks16:01
gthiemongeHi16:01
rm_worko/16:01
mchlumskyHello16:01
johnsom#topic Announcements16:01
mchlumskyHi guys! I just want to introduce myself. My name is Martin Chlumsky and I work at Ubisoft. We have several hundred loadbalancers in Octavia (Stein) in several Openstack deployments. I've been tasked to improve our Octavia deployments (upgrade to Ussuri, better monitoring, etc...) so you'll see me in here asking questions and I'd like to contribute16:01
mchlumskywhere I can (time permitting). :)16:01
johnsomAfter today I am on vacation until January 4th16:02
rm_work#chair johnsom16:02
openstackCurrent chairs: johnsom rm_work16:02
johnsommchlumsky Welcome!16:02
rm_work#topic Announcements16:02
*** openstack changes topic to " Announcements (Meeting topic: Octavia)"16:02
johnsomOpps, lol16:02
rm_worknow you're good :D16:03
johnsomI will repeat myself: After today I am on vacation until January 4th16:03
gthiemongejohnsom: enjoy!16:03
johnsommchlumsky This channel is a great resource to ask questions about Octavia.16:03
rm_workSimilar for me after next week -- I think i have one more meeting in me16:03
mchlumskyjohnsom I noticed already giot a few answers. thanks! :)16:04
johnsomNice, enjoy your break16:04
johnsomAny other announcements this week?16:04
johnsom#topic Brief progress reports / bugs needing review16:05
*** openstack changes topic to "Brief progress reports / bugs needing review (Meeting topic: Octavia)"16:05
johnsomI have mostly been working on reviews and poking at the bandit issues on stable/stein. Otherwise downstream work16:06
gthiemongeCan we start using the priority review etherpad? I know that some people have added patches to the awaiting prioritization list...16:07
rm_workyeah I really need to get back in the groove of reviews16:07
johnsomYeah, good question. Milestone 1 has now passed16:07
rm_workmy guess is the first opportunity i'll have to do so will really be in January16:08
*** sapd1 has joined #openstack-lbaas16:09
johnsomgthiemonge I would say feel free to freshen up the priority review etherpad and get it started for Wallaby16:09
gthiemongeok, I'll update the list tomorrow16:09
* johnsom likes not being PTL this cycle and still delegating. grin16:10
johnsomAny other updates this week?16:11
johnsomThank you all for helping review the stable branch patches. I think we have made good progress this week16:11
johnsom#topic Stable/Stein gate jobs are broken due to bandit py27->py3x transition16:11
*** openstack changes topic to "Stable/Stein gate jobs are broken due to bandit py27->py3x transition (Meeting topic: Octavia)"16:11
johnsomAs you may have seen on the openstack-discuss e-mail list, bandit released a version that no longer supports python2.7.16:12
johnsomThis broke a number of projects including the stable/stein branch test jobs.16:12
johnsomrm_work and I have poked at the issue and I will probably spend a bit of time on that today again.16:13
johnsomThis is blocking some of our tempest patches from passing.16:13
johnsomWe will pin bandit on the stein branch to a version that supports python2.716:14
johnsom#topic Open Discussion16:14
*** openstack changes topic to "Open Discussion (Meeting topic: Octavia)"16:14
johnsomAny other topics this week?16:14
mchlumskyI have a story I would like to work on (https://storyboard.openstack.org/#!/story/2008060) as we will likely need this feature. I think it should be labelled as a RFE (but I'm not too sure of the complexity of the change yet so maybe it's a spec?). I might require some guidance but I'll reach out unless you have some vital pieve of information to16:14
mchlumskygive me right now. ;)16:14
johnsomAh, yeah. So, basically you will want to enable changing that setting and then trigger a load balancer failover process to enact the change.16:15
johnsomI would advise against trying to hot-change CPU or RAM via nova as it unfortunately triggers an instance reboot, which can cause the security content (TLS keys) to be lost, which will trigger a failover as well.16:17
mchlumskyWould this be done via 2 separate API operations? or can this be done behind the scenes via a PUT to the LB?16:17
johnsomDoes that align to your thoughts?16:17
johnsomYou can do it all behind one API call16:17
mchlumskyI won't touch anything on the nova side. I was totally thinking of doing a failover to get this done. I'm just not sure what will happen when you change the topology from active-standby to standalone for example16:19
rm_workyou'd need to delete the backup basically, and send a new config to the remaining amp, generated with STANDALONE as the type16:20
johnsomWell, with the changes I made during Victoria to the failover flow, it should handle the case ok. It will just think that nova lost one of the amphora instances.16:20
rm_workbut yeah, the failover flow itself should basically just "do that"16:20
rm_worknew failover flow is great! :thumbsup:16:20
johnsomI think I would do a full LB failover. I wouldn't mess with converting an existing instance. Converting would mean a lot of changes inside the amp (keepalived, etc.) that just isn't worth it16:21
rm_workah yeah that's probably cleanest16:21
mchlumskyok, great.16:21
rm_workactually yeah, would it literally just be changing the topo to standalone, and triggering the failover? XD16:22
johnsomYeah, pretty much. The tricky part is handling the rollback correctly maybe.16:22
rm_worki suppose that might just work16:22
mchlumskythanks for making this all so easy for me :p16:23
johnsomSo, I think this is pretty straight forward and we had a good discussion on it. I'm not sure it needs a full spec to hammer out the details. I would just tag this story as RFE and propose the change16:23
mchlumskyawesome.16:24
johnsomAny other topics this week?16:24
gthiemongeyes! here16:25
gthiemongeone of my colleagues is working on a tempest test for TLS16:25
gthiemongehttps://review.opendev.org/c/openstack/octavia-tempest-plugin/+/76316916:25
gthiemongeit looks like it's failing on stein16:25
gthiemongeI'm wondering if it's worth it to spend some time to fix stein, or we could just skip the test for some old releases16:26
johnsomWell, if the feature was present in stein, we should not skip the test.16:26
rm_workhow long until we can EOL stein again? :D16:27
rm_workwe should really be doing one EOL per cycle...16:27
rm_workwhat's up next?16:27
johnsomFor one thing, I would strongly advise to not change the existing tests, but add additional.16:27
gthiemongeok, we can check the test in stein... perhaps one backport is missing there16:27
johnsomIt appears the existing tests were incorrectly modified16:28
gthiemongeI haven't reviewed the patch yet... but yeah the issue might be in the test itself16:29
johnsomI can review later, but that is my first comment. Don't change existing tests unless absolutely necessary.16:29
gthiemongeok thanks16:30
johnsomEspecially with the TLS tests, it's easy and quick to just create another listener for your new test case.16:30
johnsomThe current TLS tests are very detailed and still valid IMO16:31
johnsomAny other topics to raise?16:32
johnsomOk, thanks everyone. Have a great week and holiday!16:33
gthiemongejohnsom: thank you16:34
johnsom#endmeeting16:34
*** openstack changes topic to "Discussions for OpenStack Octavia | Priority bug review list: https://etherpad.openstack.org/p/octavia-priority-reviews"16:34
openstackMeeting ended Wed Dec  9 16:34:15 2020 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:34
openstackMinutes:        http://eavesdrop.openstack.org/meetings/octavia/2020/octavia.2020-12-09-16.01.html16:34
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/octavia/2020/octavia.2020-12-09-16.01.txt16:34
openstackLog:            http://eavesdrop.openstack.org/meetings/octavia/2020/octavia.2020-12-09-16.01.log.html16:34
mchlumskythank you! :)16:34
rm_worko/16:35
*** dayou has quit IRC17:10
*** rpittau is now known as rpittau|afk17:12
*** TrevorV has joined #openstack-lbaas17:19
*** xgerman has joined #openstack-lbaas17:25
xgermanjohnsom: rm_work cgoncalves  Wonder if we are having some virtual Octavia Holiday Party/Happy Hour...17:27
*** ccamposr has quit IRC17:32
*** ccamposr has joined #openstack-lbaas17:32
*** luksky has quit IRC17:35
*** noonedeadpunk_ is now known as noonedeadpunk18:01
-openstackstatus- NOTICE: The Gerrit service on review.opendev.org is currently responding slowly or timing out due to resource starvation, investigation is underway18:15
*** ccamposr__ has joined #openstack-lbaas18:49
*** ccamposr has quit IRC18:51
*** lxkong has joined #openstack-lbaas19:40
*** ccamposr has joined #openstack-lbaas19:57
*** ccamposr__ has quit IRC19:58
*** ccamposr has quit IRC20:00
*** ccamposr has joined #openstack-lbaas20:04
*** ccamposr has quit IRC20:08
*** dayou has joined #openstack-lbaas20:11
*** ccamposr has joined #openstack-lbaas20:14
*** ccamposr has quit IRC20:25
*** ccamposr has joined #openstack-lbaas20:25
*** ccamposr has quit IRC20:27
*** ccamposr has joined #openstack-lbaas20:35
*** ccamposr__ has joined #openstack-lbaas20:39
*** ccamposr has quit IRC20:39
*** vishalmanchanda has quit IRC20:54
*** ccamposr__ has quit IRC20:58
*** ccamposr has joined #openstack-lbaas21:00
*** ccamposr has quit IRC21:00
*** ccamposr has joined #openstack-lbaas21:00
*** sapd1 has quit IRC21:04
*** ccamposr has quit IRC21:26
*** ccamposr has joined #openstack-lbaas21:27
*** ccamposr has quit IRC21:45
*** ccamposr has joined #openstack-lbaas21:50
*** rcernin has joined #openstack-lbaas22:02
*** rcernin has quit IRC22:04
*** rcernin has joined #openstack-lbaas22:05
*** gcheresh has quit IRC22:11
*** ccamposr has quit IRC22:13
*** ccamposr has joined #openstack-lbaas23:21
*** TrevorV has quit IRC23:22
*** lemko3 has joined #openstack-lbaas23:28
*** lemko has quit IRC23:31
*** lemko3 is now known as lemko23:31
lxkongThe reason for our UDP listener is not working is `/var/lib/octavia/vrrp/check_scripts/lvs_udp_check.sh: 4: /var/lib/octavia/vrrp/check_scripts/lvs_udp_check.sh: shopt: not found`, so that the VIP is not bond to VRRP port.23:32
lxkongjohnsom, rm_work, was that a know issue before? We are using stable/ussuri23:33
lxkongi looked at my devstack environment, the script is the same23:33
lxkongbut it's working (master octavia on my devstack)23:33
johnsomThat script hasn't changed since it originally merged23:35
johnsomThree years ago23:35
rm_workhmmm23:35
rm_workshopt??? isn't that part of bash23:35
rm_workwhat OS is your image based on lxkong ?23:36
johnsomIt seems like an image build issue maybe? like bash isn't installed, but busybox or something?23:36
rm_workyeah23:36
johnsomlol, yeah that ^^^^23:36
johnsomhttps://github.com/openstack/octavia/blob/master/octavia/amphorae/backends/agent/api_server/templates/keepalived_lvs_check_script.sh.j223:36
rm_workused to deal with that more in embedded, like back in my #maemo or Sharp Zaurus days23:36
rm_workI miss Maemo23:37
lxkongwe are using ubuntu...23:37
rm_workhmmm23:37
rm_workcan you get into the amp and just... try running `shopt`?23:38
lxkongIn the syslog, we can see23:38
lxkonghttps://www.irccloud.com/pastebin/jA3vD3TI/23:38
lxkongthen I ran `bash -x /var/lib/octavia/vrrp/check_script.sh`23:38
lxkongand met with that error23:39
rm_workyeah ok23:39
rm_workwhen you run shopt23:39
rm_workwhat happens?23:39
lxkongshopt is working though...23:39
rm_work... hmm23:39
lxkonghttps://www.irccloud.com/pastebin/iFYkRO9L/23:40
lxkongwe just started testing UDP recently and found it's not working23:40
lxkongThe image was built using `diskimage-create.sh` from octavia repo.23:41
lxkonghmm, wait, in devstack, it's also failing23:44
lxkonghttps://www.irccloud.com/pastebin/GgV89Nzz/23:44
lxkongso that may not be the reason of VIP not bond23:44
lxkongin the amphora of devstack, i can see the VIP address on the VRRP port.23:44
lxkongbut in our cloud, it's not23:45
johnsomin the check_script.sh, what happens if you change sh to bash?23:45
lxkonghttps://www.irccloud.com/pastebin/b47xTC9A/23:46
johnsomYeah, that is interesting, it appears to still be running the check as the "Check keepalived pid file" message is there23:46
johnsomYeah, so that is a bug that has been there for 5 years. lol Something must have changed in the image.23:47
lxkongjohnsom: i also changed to use bash in our amphora, i can see the VIP now23:48
lxkonglet me check if the UDP is working or not23:48
lxkongjohnsom: yeah, it's working !23:48
lxkongjohnsom, rm_work, thanks, maybe i need to make a hotfix for us first.23:49
johnsomYeah, so something must have changed in ubuntu. Those are 3 and 5 years old.23:49
johnsomlxkong are you going to post a patch for octavia?23:49
rm_workhmmmm23:50
johnsomhttps://github.com/openstack/octavia/blob/master/octavia/amphorae/backends/agent/api_server/templates/keepalived_check_script.conf.j223:50
rm_workweird23:50
lxkongjohnsom: yep, i can do that23:53
johnsomThank you23:53
lxkongbut i don't understand, why it's working in my devstack23:53
lxkongwith the same error msg.23:53

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!