Friday, 2020-12-11

*** ccamposr__ has quit IRC00:26
*** ccamposr__ has joined #openstack-lbaas00:27
*** armax has quit IRC01:10
*** ccamposr__ has quit IRC01:24
*** ccamposr__ has joined #openstack-lbaas01:25
*** armax has joined #openstack-lbaas01:41
*** lxkong has quit IRC01:48
*** armax has quit IRC02:02
*** ramishra has quit IRC02:11
*** ramishra has joined #openstack-lbaas02:12
*** spatel has joined #openstack-lbaas02:38
*** spatel has quit IRC02:42
*** ccamposr__ has quit IRC02:54
-openstackstatus- NOTICE: The Gerrit service on review.opendev.org is being restarted quickly to enable support for Git protocol v2, downtime should be less than 5 minutes02:54
*** ccamposr__ has joined #openstack-lbaas02:54
*** rcernin has quit IRC03:39
*** rcernin has joined #openstack-lbaas03:40
*** ccamposr__ has quit IRC05:11
*** ccamposr__ has joined #openstack-lbaas05:11
*** ccamposr__ has quit IRC05:44
*** ccamposr__ has joined #openstack-lbaas05:45
*** lemko0 has joined #openstack-lbaas05:47
*** vishalmanchanda has joined #openstack-lbaas05:47
*** lemko has quit IRC05:50
*** lemko0 is now known as lemko05:50
*** numans has joined #openstack-lbaas06:11
*** lxkong has joined #openstack-lbaas06:16
*** adeberg5 has joined #openstack-lbaas06:28
*** adeberg has quit IRC06:30
*** adeberg5 is now known as adeberg06:30
*** ccamposr__ has quit IRC06:32
*** ccamposr__ has joined #openstack-lbaas06:32
*** zzzeek has quit IRC07:17
*** zzzeek has joined #openstack-lbaas07:19
*** openstackgerrit has joined #openstack-lbaas07:44
openstackgerritOpenStack Proposal Bot proposed openstack/octavia-dashboard master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/octavia-dashboard/+/76667907:44
*** ccamposr__ has quit IRC07:45
*** ccamposr__ has joined #openstack-lbaas07:45
*** rpittau|afk is now known as rpittau07:57
*** rcernin has quit IRC08:07
*** rcernin has joined #openstack-lbaas08:14
*** ccamposr has joined #openstack-lbaas08:19
*** ccamposr__ has quit IRC08:21
*** rcernin has quit IRC09:27
*** zzzeek has quit IRC10:03
*** zzzeek has joined #openstack-lbaas10:05
*** zzzeek has quit IRC10:39
*** zzzeek has joined #openstack-lbaas10:40
*** ccamposr__ has joined #openstack-lbaas11:47
*** ccamposr has quit IRC11:49
*** lxkong has quit IRC12:56
*** zzzeek has quit IRC13:17
*** zzzeek has joined #openstack-lbaas13:19
*** TrevorV has joined #openstack-lbaas14:34
*** rpittau is now known as rpittau|afk15:15
*** armax has joined #openstack-lbaas15:17
*** rcernin has joined #openstack-lbaas15:24
*** rcernin has quit IRC15:28
*** haleyb_ has joined #openstack-lbaas15:30
*** tamas_erdei is now known as terdei15:32
openstackgerritGregory Thiemonge proposed openstack/octavia-tempest-plugin master: Add SCTP protocol listener api tests  https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/76030516:09
openstackgerritGregory Thiemonge proposed openstack/octavia-tempest-plugin master: Add SCTP protocol scenario tests  https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/73864316:09
openstackgerritGregory Thiemonge proposed openstack/octavia-tempest-plugin master: Add SCTP protocol scenario tests  https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/73864316:11
*** haleyb_ has quit IRC16:32
*** xgerman has joined #openstack-lbaas16:49
*** ccamposr has joined #openstack-lbaas17:11
*** ccamposr__ has quit IRC17:14
admin0is it possible do use letsencrypt with octavia17:29
admin0octavia is up and running .. how do I add/enable ssh in octavia so that i don't have to do that for the internal endpoints17:29
johnsomadmin0 Yes, for the TLS enabled listeners, letsencrypt certs/keys are fine.17:30
johnsomadmin0 What are you using ssh for?17:31
admin0i mean how to add the certs ?17:32
admin0there seems to be no gui for it17:32
johnsomadmin0 https://docs.openstack.org/octavia/latest/user/guides/basic-cookbook.html#deploy-a-tls-terminated-https-load-balancer17:32
admin0does it support letsencrypt zerossl as well ?17:33
johnsomCerts and Keys are stored in barbican or a Castellan compatibly HSM.17:33
admin0oh .. so need to install barbican as well to have this functionality17:33
johnsomYes, you need either a Castellan compatible  store or Barbican to safely store the security content.17:34
johnsomAs for zerossl, it should be fine. I haven't used that, but as long as it creates x509/RSA certs and keys, they should work file with Octavia.17:35
johnsomFor TLS listeners, it's the LB creator responsibility to manage the certs/keys. It's not something that requires an operator to do.17:36
johnsomIt's pretty straight forward to automate the cert updates as well, but we don't provide tools for that currently.17:37
*** xgerman has quit IRC20:09
*** lemko3 has joined #openstack-lbaas20:14
*** lemko has quit IRC20:14
*** lemko3 is now known as lemko20:14
*** lxkong has joined #openstack-lbaas20:24
*** TrevorV has quit IRC20:59
*** servagem has quit IRC21:09
*** vishalmanchanda has quit IRC22:03
*** ccamposr__ has joined #openstack-lbaas22:19
*** ccamposr has quit IRC22:22
*** lxkong has quit IRC22:32
*** xgerman has joined #openstack-lbaas23:11

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!