Friday, 2021-01-29

*** TMM has quit IRC00:20
*** TMM has joined #openstack-lbaas00:22
*** rm_work has quit IRC00:37
*** logan- has quit IRC00:38
*** rm_work has joined #openstack-lbaas00:38
*** rm_work has quit IRC00:38
*** logan- has joined #openstack-lbaas00:40
*** yamamoto_ has joined #openstack-lbaas00:45
*** yamamoto has quit IRC00:46
*** sapd__x has quit IRC00:58
*** mnaser has quit IRC01:13
openstackgerritMerged openstack/octavia master: Fix PROXYV2 pools  https://review.opendev.org/c/openstack/octavia/+/75693401:13
*** fyx has quit IRC01:14
*** wolsen has quit IRC01:14
*** mnaser has joined #openstack-lbaas01:16
*** rm_work has joined #openstack-lbaas01:18
*** rm_work has quit IRC01:18
*** rm_work has joined #openstack-lbaas01:29
*** rm_work has quit IRC01:29
*** fyx has joined #openstack-lbaas01:33
*** xgerman has joined #openstack-lbaas01:37
*** wolsen has joined #openstack-lbaas01:46
*** rm_work has joined #openstack-lbaas02:01
*** wolsen has quit IRC02:04
*** yamamoto_ has quit IRC02:15
*** yamamoto has joined #openstack-lbaas02:16
*** sshnaidm|ruck is now known as sshnaidm|off02:25
*** lxkong has quit IRC02:38
*** lxkong has joined #openstack-lbaas02:39
openstackgerritMerged openstack/octavia master: Install HAProxy 2.x in CentOS amphora images  https://review.opendev.org/c/openstack/octavia/+/74410202:41
*** wolsen has joined #openstack-lbaas02:48
*** sapd1_x has quit IRC02:49
*** zzzeek has quit IRC03:01
*** zzzeek has joined #openstack-lbaas03:02
*** sapd__x has joined #openstack-lbaas03:21
*** rcernin has quit IRC03:27
*** nicolasbock_ has joined #openstack-lbaas03:30
*** TMM has quit IRC03:38
*** nicolasbock has quit IRC03:38
*** tobias-urdin has quit IRC03:38
*** beagles has quit IRC03:38
*** nicolasbock_ is now known as nicolasbock03:38
*** rcernin has joined #openstack-lbaas03:41
*** psachin has joined #openstack-lbaas03:42
*** TMM has joined #openstack-lbaas03:43
*** beagles has joined #openstack-lbaas03:43
*** TMM has quit IRC03:43
*** TMM has joined #openstack-lbaas03:43
*** xgerman has quit IRC04:08
*** vishalmanchanda has joined #openstack-lbaas05:03
openstackgerritMerged openstack/octavia master: Support deletion of all tags  https://review.opendev.org/c/openstack/octavia/+/75582805:19
*** sapd__x has quit IRC05:42
*** sapd__x has joined #openstack-lbaas05:47
*** gcheresh has joined #openstack-lbaas06:57
*** openstackgerrit has quit IRC07:23
*** gcheresh has quit IRC07:59
*** openstackgerrit has joined #openstack-lbaas08:33
openstackgerritGregory Thiemonge proposed openstack/octavia master: Add haproxy-source backend element in DIB  https://review.opendev.org/c/openstack/octavia/+/69808608:33
cgoncalvesrm_work, https://review.opendev.org/c/openstack/python-octaviaclient/+/77284808:45
*** rpittau|afk is now known as rpittau08:52
*** zzzeek has quit IRC09:01
*** rcernin has quit IRC09:02
*** yamamoto has quit IRC09:02
*** zzzeek has joined #openstack-lbaas09:03
*** gcheresh has joined #openstack-lbaas09:07
openstackgerritGregory Thiemonge proposed openstack/octavia-dashboard master: Add ciphers options for listeners and pools  https://review.opendev.org/c/openstack/octavia-dashboard/+/71855009:21
openstackgerritGregory Thiemonge proposed openstack/octavia-dashboard master: Add TLS enabled support for pools  https://review.opendev.org/c/openstack/octavia-dashboard/+/76335209:21
*** gcheresh has quit IRC09:21
*** rcernin has joined #openstack-lbaas09:21
*** yamamoto has joined #openstack-lbaas09:38
*** psachin has quit IRC09:46
rm_workcgoncalves: +W, but I hate these LC tests (and LC in general)09:47
rm_workIt's like a constant game of chase-the-version, just install in a damn virtualenv09:48
rm_workOr a container09:48
*** yamamoto has quit IRC09:48
rm_workWho in their right mind does like "sudo pip install" in 202109:49
rm_workIf I knew someone not using virtualenvs, first I'd teach them how to use virtualenvs, then if they still didn't do it, STRAIGHT TO PYTHON JAIL09:50
openstackgerritGregory Thiemonge proposed openstack/octavia-dashboard master: Allows creation of resources without forcing the creation of children  https://review.opendev.org/c/openstack/octavia-dashboard/+/76335310:02
openstackgerritGregory Thiemonge proposed openstack/octavia-dashboard master: Add TLS versions support for listeners and pools  https://review.opendev.org/c/openstack/octavia-dashboard/+/76356910:02
*** lxkong has quit IRC10:15
*** lxkong has joined #openstack-lbaas10:16
*** yamamoto has joined #openstack-lbaas10:19
*** rcernin has quit IRC10:23
*** zzzeek has quit IRC10:30
*** zzzeek has joined #openstack-lbaas10:32
*** spatel has joined #openstack-lbaas10:36
*** spatel has quit IRC10:40
openstackgerritCarlos Gonçalves proposed openstack/octavia master: Install centos-release-nfv-extras  https://review.opendev.org/c/openstack/octavia/+/76321510:49
*** zzzeek has quit IRC10:54
*** zzzeek has joined #openstack-lbaas10:55
*** xarlos has quit IRC11:00
*** gcheresh has joined #openstack-lbaas11:01
openstackgerritCarlos Gonçalves proposed openstack/octavia-tempest-plugin master: Fix copy output in two-node jobs  https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/75293611:03
*** sshnaidm|off has quit IRC11:09
*** sshnaidm|off has joined #openstack-lbaas11:10
*** rcernin has joined #openstack-lbaas11:33
*** gcheresh has quit IRC11:49
*** sapd__x has quit IRC11:55
*** servagem has quit IRC12:27
*** servagem has joined #openstack-lbaas12:28
*** rcernin has quit IRC12:32
*** spatel has joined #openstack-lbaas12:37
*** ccamposr__ has joined #openstack-lbaas12:40
*** spatel has quit IRC12:41
*** ccamposr has quit IRC12:43
openstackgerritMerged openstack/python-octaviaclient master: Fix lower-constraints job  https://review.opendev.org/c/openstack/python-octaviaclient/+/77284812:44
openstackgerritCarlos Gonçalves proposed openstack/python-octaviaclient master: Add ALPN support for pools  https://review.opendev.org/c/openstack/python-octaviaclient/+/75209612:47
*** yamamoto has quit IRC12:53
openstackgerritGregory Thiemonge proposed openstack/octavia master: Add SCTP support in Amphora  https://review.opendev.org/c/openstack/octavia/+/75324712:59
*** rm_work has quit IRC13:00
*** jamesdenton has quit IRC13:00
*** mnaser has quit IRC13:00
*** jrosser has quit IRC13:00
*** rm_work has joined #openstack-lbaas13:01
*** jamesdenton has joined #openstack-lbaas13:01
*** mnaser has joined #openstack-lbaas13:01
*** jrosser has joined #openstack-lbaas13:01
*** wolsen has quit IRC13:02
*** fyx has quit IRC13:03
*** f0o has quit IRC13:03
*** andy_ has quit IRC13:03
*** zigo has quit IRC13:03
*** sorrison has quit IRC13:03
*** wolsen has joined #openstack-lbaas13:03
*** fyx has joined #openstack-lbaas13:03
*** f0o has joined #openstack-lbaas13:03
*** andy_ has joined #openstack-lbaas13:03
*** zigo has joined #openstack-lbaas13:03
*** sorrison has joined #openstack-lbaas13:03
*** wolsen has quit IRC13:04
*** yamamoto has joined #openstack-lbaas13:21
*** sapd__x has joined #openstack-lbaas13:25
*** yamamoto has quit IRC13:26
*** zzzeek has quit IRC13:29
*** zzzeek has joined #openstack-lbaas13:31
*** yamamoto has joined #openstack-lbaas13:37
*** spatel has joined #openstack-lbaas13:51
*** zzzeek has quit IRC13:52
*** spatel has quit IRC13:53
*** zzzeek has joined #openstack-lbaas13:56
*** zzzeek has quit IRC14:02
*** zzzeek has joined #openstack-lbaas14:03
*** wolsen has joined #openstack-lbaas14:14
*** gcheresh has joined #openstack-lbaas14:24
mchlumskyHi there folks! We just upgraded our Octavia deployment to Ussuri from Stein. It was a mostly flawless experience. Thanks for all your hard work, much appreciated!14:26
mchlumskyOur one snag in the upgrade came when we did the failovers and I have a feeling it's our own fault. We have a project that uses a vip subnet with a host route defined (destination: 10.0.0.0/8, nexthop: 10.x.y.z). Our lb-mgmt-net is a 10.a.b.0/23 and our control plane sits on a 10.c.d.0/23 so that host route on the vip subnet interferes with the14:26
mchlumskycommunication between the amphora14:26
mchlumskys and the control plane. Not sure if I'm asking for help or a shoulder to cry on.14:26
*** sshnaidm|off has quit IRC14:27
*** sshnaidm|off has joined #openstack-lbaas14:27
gthiemongemchlumsky: the management interface and the vip/members interfaces are in distinct namespaces in the amphora, so it should not be a problem14:35
mchlumskyyeah, I thought that as well but I think there might be a race condition. When I look on the amphora (centos 8 based) there is only the default namespace and I can see the host route in ip route14:38
*** yamamoto has quit IRC14:57
*** gcheresh has quit IRC15:20
*** rpittau is now known as rpittau|afk15:27
*** sapd__x has quit IRC15:34
johnsommchlumsky: The host routes are honored in the network namespace haproxy-amphora. As gthiemonge mentioned, they are separated from the lb-mgmt-net. What OS are the amphora images?15:44
mchlumskyCentOS 815:45
johnsomHmm, there was a patch recently messing with the route files on centos 8. I wonder if that broke them.15:46
johnsomI did the Ubuntu side, but someone else did the CentOS.15:47
johnsomIf there is only the default namespace in the amp, something else major is wrong though. I.e. ip netns doesn’t show the other namespace15:48
mchlumskyI'll keep digging. It's not that hard to reproduce15:53
haleybjohnsom: it wasn't this one you were thinking of was it?  https://review.opendev.org/c/openstack/octavia/+/700513/15:55
johnsomYeah, that was the one. But if the netns is missing, it didn’t get that far15:56
*** sshnaidm|off has quit IRC16:09
*** sshnaidm|off has joined #openstack-lbaas16:14
*** jaibanez has joined #openstack-lbaas16:41
*** jaibanez has quit IRC16:43
mchlumskythe /etc/netns directory is missing completely17:18
johnsomI don't think that is used17:18
johnsomIf you are in the amphroa, run "sudo ip netns"17:19
mchlumskythere are no namespaces17:20
mchlumskythe weird thing is that the other amphora did get net namespaces.17:20
johnsomHmm, so something went wrong super early. Can you check the /var/log/messages/syslog for the amphora-agent and see if there are errors there?17:20
johnsomAlso check the amphora-agent log, but typically the errors will go in the main syslog file17:21
*** xgerman has joined #openstack-lbaas17:24
mchlumskyno syslog file in centos 8. I guess journalctl?17:28
*** vishalmanchanda has quit IRC17:32
johnsomIt's "messages" I think17:34
mchlumskyhttp://paste.openstack.org/show/802143/    The vip network comes up after amphora-agent starts.19:08
johnsomYeah, that looks like the amphora has not been configured yet, just the initial boot19:10
johnsomNo errors there19:10
mchlumskyah so the NICs don't all have to be up before the amphora agent starts?19:13
johnsomNope19:13
mchlumskyI don't really see any errors anywhere. I do notice that there is this message: `kernel: virtio_net virtio4 ens7: renamed from eth0` and it's normally followed later in the logs by a similar message saying it renames ens7 to eth1 but this second message doesn't happen in the problematic amphorae19:41
johnsomThe interface names don't matter in amphora. We don't rely on them as they are fluid across distros19:48
johnsomCould this amphora be a spare? i.e. not in use by a load balancer?19:48
johnsomwhat is it's status in "openstack loadbalancer amphora list"?19:48
mchlumskyALLOCATED19:52
mchlumskyboth MASTER and BACKUP roles19:52
johnsomSo it is assigned to a load balancer. So, if it's hasn't been configured, there must be some messages in the worker logs.19:53
mchlumskyoctavia.amphorae.driver_exceptions.exceptions.TimeOutException: contacting the amphora timed out19:56
johnsomSo it wasn't reachable over the lb-mgmt-net from that controller. I would check the neutron networking, the management port on that controller, etc.19:56
mchlumskyKeep in mind it has that route set that sends traffic out over a network that isn;t the lb-mgmt-net19:57
johnsomYeah, but the log earier shows the controller never sent out any configuration to the amp, so that all isn't even there yet19:58
mchlumskyDoes the controller need to reach the amphora for it to configure the net namespace? Until the net namespace is configured, the bad route is in the default namespace. Chicken and egg problem?20:00
johnsomAll that is in that amp now is the lb-mgmt-net interface configured by nova and the routes associated with that. The amphora-agent, when it gets a config, will create the netns, configured the vip interface, add the routes, etc. But you aren't getting that far yet.20:00
mchlumskyok, this makes more sense now.20:01
*** rcernin has joined #openstack-lbaas20:09
mchlumskyThe 10/8 route that interferes with the lb-mgmt-net is getting set by networkmanager via dhcp when the second interface (the one from vip_subnet_id) gets added. It happens early enough that it can keep the contoller from pushing config to the amphora so it can never move that route into the amphora namespace.20:10
*** rcernin has quit IRC20:44
*** rcernin has joined #openstack-lbaas21:10
*** rcernin has quit IRC21:15
*** rcernin has joined #openstack-lbaas21:27
*** yamamoto has joined #openstack-lbaas22:11
*** servagem has quit IRC22:14
rm_workInteresting22:18
*** yamamoto has quit IRC22:21
*** yamamoto has joined #openstack-lbaas22:25
*** stand has quit IRC22:26
*** armax has quit IRC22:43
*** rcernin has quit IRC22:47
*** ccamposr has joined #openstack-lbaas22:47
rm_workjohnsom: so how do we accelerate https://review.opendev.org/c/openstack/taskflow/+/772953 ? :D22:47
rm_workwho else do we ping?22:47
*** ccamposr__ has quit IRC22:49
openstackgerritAdam Harwell proposed openstack/octavia master: Bump the minimum coverage to 92%  https://review.opendev.org/c/openstack/octavia/+/76038223:02
rm_work^^ just a rebase23:02
*** rcernin has joined #openstack-lbaas23:04
johnsomrm_work Any of the oslo cores. I will try to remember to bring it up at the meeting Monday as well23:10
*** rcernin has quit IRC23:19
*** xgerman has quit IRC23:34
*** zzzeek has quit IRC23:48
*** zzzeek has joined #openstack-lbaas23:50

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!