| *** armax has quit IRC | 00:24 | |
| *** armax has joined #openstack-lbaas | 00:32 | |
| *** armax has quit IRC | 00:33 | |
| *** armax has joined #openstack-lbaas | 00:44 | |
| *** armax has quit IRC | 01:27 | |
| *** armax has joined #openstack-lbaas | 01:47 | |
| *** armax has quit IRC | 01:51 | |
| *** zzzeek has quit IRC | 03:25 | |
| *** zzzeek has joined #openstack-lbaas | 03:29 | |
| *** psachin has joined #openstack-lbaas | 04:00 | |
| *** ramishra has joined #openstack-lbaas | 04:19 | |
| *** vishalmanchanda has joined #openstack-lbaas | 06:14 | |
| *** gcheresh has joined #openstack-lbaas | 06:24 | |
| *** cgoncalves has joined #openstack-lbaas | 07:27 | |
| *** vishalmanchanda has quit IRC | 08:34 | |
| *** ccamposr has joined #openstack-lbaas | 08:38 | |
| *** rpittau|afk is now known as rpittau | 08:51 | |
| *** devfaz has quit IRC | 09:08 | |
| *** lemko has quit IRC | 09:19 | |
| *** lemko has joined #openstack-lbaas | 09:19 | |
| *** devfaz has joined #openstack-lbaas | 09:20 | |
| *** devfaz has quit IRC | 09:24 | |
| *** devfaz has joined #openstack-lbaas | 09:35 | |
| *** gcheresh_ has joined #openstack-lbaas | 11:09 | |
| *** gcheresh has quit IRC | 11:10 | |
| *** gcheresh_ has quit IRC | 11:27 | |
| *** gcheresh_ has joined #openstack-lbaas | 11:27 | |
| openstackgerrit | Merged openstack/octavia master: Fix periodic image builder jobs https://review.opendev.org/c/openstack/octavia/+/767471 | 11:28 |
|---|---|---|
| *** zzzeek has quit IRC | 11:50 | |
| *** zzzeek has joined #openstack-lbaas | 11:52 | |
| admin0 | is it possible to provide security-groups to load balancer as a user ? | 12:01 |
| admin0 | also when launching a new lb, is it possible to tell it to not use 10.10.0.1 but a different router ip for its default route ? | 12:24 |
| *** njohnston has joined #openstack-lbaas | 13:15 | |
| *** haleyb has joined #openstack-lbaas | 13:27 | |
| *** ccamposr has quit IRC | 14:17 | |
| *** TrevorV has joined #openstack-lbaas | 14:18 | |
| *** ccamposr has joined #openstack-lbaas | 14:19 | |
| *** zzzeek has quit IRC | 14:44 | |
| *** zzzeek has joined #openstack-lbaas | 14:47 | |
| *** psachin has quit IRC | 15:31 | |
| johnsom | admin0 Correct, security groups are fully managed by Octavia to limit access to the required ports. If you need to restrict the source IPs, use the allowed_cidrs listener API: | 16:03 |
| johnsom | https://docs.openstack.org/api-ref/load-balancer/v2/index.html?expanded=create-listener-detail#create-listener | 16:03 |
| johnsom | admin0 The routes are handled by neutron. So if you configure alternate "host routes" on the subnet, Octavia will honor those. | 16:04 |
| admin0 | johnsom, so a security-group for every loadbalancer can only be done by user octavia and not by a normal user ? | 16:11 |
| johnsom | admin0 Right, Octavia will manage the security groups automatically and undo any manual changes. Normal users can use the allowed CIDRs API. | 16:14 |
| admin0 | how can a normal user say that in the load balancer, which has say port 80 allowed from all, deny X.y.z/ ip address | 16:14 |
| admin0 | johnsom, thanks .. i found something :) | 16:21 |
| johnsom | The allowed cidrs API allows that | 16:22 |
| *** xgerman has joined #openstack-lbaas | 16:35 | |
| *** armax has joined #openstack-lbaas | 16:36 | |
| *** zzzeek has quit IRC | 16:39 | |
| *** zzzeek has joined #openstack-lbaas | 16:40 | |
| *** zzzeek has quit IRC | 16:46 | |
| *** zzzeek has joined #openstack-lbaas | 16:47 | |
| *** dulek has quit IRC | 16:57 | |
| *** dulek has joined #openstack-lbaas | 16:59 | |
| *** zzzeek has quit IRC | 17:13 | |
| *** zzzeek has joined #openstack-lbaas | 17:14 | |
| *** rpittau is now known as rpittau|afk | 17:14 | |
| *** njohnston is now known as njohnston|lunch | 17:58 | |
| *** njohnston|lunch is now known as njohnston | 17:58 | |
| *** zzzeek has quit IRC | 18:26 | |
| *** zzzeek has joined #openstack-lbaas | 18:28 | |
| *** zzzeek has quit IRC | 19:19 | |
| *** zzzeek has joined #openstack-lbaas | 19:20 | |
| *** zzzeek has quit IRC | 19:27 | |
| *** zzzeek has joined #openstack-lbaas | 19:28 | |
| *** gcheresh_ has quit IRC | 20:19 | |
| *** ccamposr__ has joined #openstack-lbaas | 20:41 | |
| *** ccamposr has quit IRC | 20:44 | |
| *** ccamposr__ has quit IRC | 22:24 | |
| *** ccamposr__ has joined #openstack-lbaas | 22:29 | |
| *** ccamposr__ has joined #openstack-lbaas | 22:30 | |
| *** TrevorV has quit IRC | 22:37 | |
| *** tkajinam has joined #openstack-lbaas | 23:00 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!