Wednesday, 2021-04-07

« Tuesday, 2021-04-06 Index Thursday, 2021-04-08 »
*** ccamposr has quit IRC00:08
*** ccamposr has joined #openstack-lbaas00:08
*** luksky has quit IRC00:09
*** ccamposr has quit IRC00:17
*** ccamposr has joined #openstack-lbaas00:20
*** sapd1 has quit IRC00:48
*** jamesdenton has quit IRC00:57
*** jamesdenton has joined #openstack-lbaas00:59
*** terdei has quit IRC01:38
*** terdei has joined #openstack-lbaas01:39
*** armax has quit IRC02:09
*** rcernin has quit IRC02:17
*** xgerman has quit IRC02:26
*** rcernin has joined #openstack-lbaas02:45
*** rcernin has quit IRC02:50
*** ramishra has quit IRC02:50
*** rcernin has joined #openstack-lbaas02:50
*** ramishra has joined #openstack-lbaas02:51
*** psachin has joined #openstack-lbaas03:24
*** vishalmanchanda has joined #openstack-lbaas03:57
*** zzzeek has quit IRC04:34
*** zzzeek has joined #openstack-lbaas04:35
*** gcheresh has joined #openstack-lbaas04:37
*** sapd1 has joined #openstack-lbaas04:40
*** sapd1 has quit IRC05:08
*** nmk_irc_1 has joined #openstack-lbaas05:45
nmk_irc_1Team, In octavia  lbaas , I want to restrict vip ip address from certain provider (provider:network_type : bgp ) , checked config option , I can see only allow option not disallow from certain network , Looking for some suggestion how to do that ?05:45
nmk_irc_1I'm also checking the ways to restrict loadbalancer create using policy.json05:45
nmk_irc_1"bgp_network": "(not field:networks:provider:network_type=bgp) and rule:load-balancer:member_and_owner",05:45
nmk_irc_1"load-balancer:write": "rule:bgp_network", but no luck05:45
*** rpittau|afk is now known as rpittau07:03
*** luksky has joined #openstack-lbaas07:07
*** sapd1 has joined #openstack-lbaas07:08
*** ccamposr has quit IRC07:18
*** ccamposr has joined #openstack-lbaas07:19
*** rcernin has quit IRC07:27
*** sapd1 has quit IRC08:03
*** yamamoto has quit IRC08:23
*** tkajinam has quit IRC08:25
*** tkajinam has joined #openstack-lbaas08:26
*** rcernin has joined #openstack-lbaas08:30
*** sapd1 has joined #openstack-lbaas08:35
*** rcernin has quit IRC08:52
*** yamamoto has joined #openstack-lbaas09:03
openstackgerritArieh Maron proposed openstack/octavia-tempest-plugin master: Modified test_traffic_ops for failover testing  https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/77125109:08
*** yamamoto has quit IRC09:08
openstackgerritArieh Maron proposed openstack/octavia-tempest-plugin master: Updating _test_pool_CRUD to enable testing of updates to the load balancer algorithm:  https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/77016309:10
*** sapd1 has quit IRC09:11
*** rpittau is now known as rpittau|bbl09:23
*** yamamoto has joined #openstack-lbaas09:36
*** sapd1 has joined #openstack-lbaas09:39
openstackgerritGregory Thiemonge proposed openstack/octavia-dashboard master: Fix updating a non-HTTP(S) Health Monitor  https://review.opendev.org/c/openstack/octavia-dashboard/+/78511209:41
*** rcernin has joined #openstack-lbaas09:48
*** yamamoto has quit IRC10:01
*** sapd1_x has joined #openstack-lbaas10:01
sapd1_xHi all, I'm facing with this issue: "nf_conntrack: nf_conntrack: table full, dropping packet"10:06
*** rcernin has quit IRC10:06
sapd1_xI don't know how to count conntrack in haproxy namespaces So I don't know how many connections are ebstablished10:06
*** dosaboy has joined #openstack-lbaas10:08
gthiemongesapd1_x: hi, there was a bug with nf_conntrack: https://review.opendev.org/c/openstack/octavia/+/748749/10:20
gthiemongesapd1_x: can you check if you have that patch?10:20
gthiemongethen the conntrack table is in /proc/net/nf_conntrack (you need to switch to the amphora-haproxy namespace)10:23
*** nmk_irc_1 has quit IRC10:29
sapd1_xgthiemonge, how to verify this patch in my amphora ?10:31
*** yamamoto has joined #openstack-lbaas10:32
*** yamamoto has quit IRC10:37
*** sapd1 has quit IRC11:01
*** yamamoto has joined #openstack-lbaas11:03
*** sapd1 has joined #openstack-lbaas11:10
*** sapd1 has quit IRC11:15
*** sapd1 has joined #openstack-lbaas11:17
*** nmk_irc_1 has joined #openstack-lbaas12:36
*** jamesdenton has quit IRC12:38
*** jamesdenton has joined #openstack-lbaas12:39
*** sapd1 has quit IRC12:43
*** rpittau|bbl is now known as rpittau12:51
*** nmk_irc_1 has quit IRC12:52
*** armax has joined #openstack-lbaas14:13
*** yamamoto has quit IRC14:23
*** sapd1 has joined #openstack-lbaas14:27
*** psachin has quit IRC14:35
*** nmk_irc_1 has joined #openstack-lbaas14:58
*** yamamoto has joined #openstack-lbaas15:44
*** yamamoto has quit IRC15:59
gthiemonge#startmeeting Octavia16:00
openstackMeeting started Wed Apr  7 16:00:25 2021 UTC and is due to finish in 60 minutes.  The chair is gthiemonge. Information about MeetBot at http://wiki.debian.org/MeetBot.16:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:00
*** openstack changes topic to " (Meeting topic: Octavia)"16:00
openstackThe meeting name has been set to 'octavia'16:00
johnsomo/16:00
cgoncalveso/16:00
gthiemongeHi everyone!16:00
haleybhi16:00
gthiemongeThanks johnsom for letting me run my first meeting ;-)16:01
johnsomOh, my pleasure! lol16:01
gthiemongeI know :D16:01
gthiemonge#topic Announcements16:01
*** openstack changes topic to "Announcements (Meeting topic: Octavia)"16:01
gthiemongeRC2 released16:01
gthiemongeThis is the last RC before the Wallaby release16:01
gthiemongeIt includes a last-minute patch to fix the ALPN compatibility with older amphora16:02
johnsomWahoo!16:02
gthiemongeAnd another patch that failed to pass the gates before RC116:02
gthiemongeSo I guess we're good now16:02
gthiemongemaster branch ready for Xena16:03
gthiemongeNow that the stable/wallaby branch exists, we can start merging commits for the Xena release16:03
*** rcernin has joined #openstack-lbaas16:03
gthiemongeI guess this is the time for "recheck"/"rebase"16:03
johnsomYep, onward to Xena16:04
gthiemongePTG etherpad - https://etherpad.opendev.org/p/xena-ptg-octavia16:04
gthiemongeFor those who missed the link, we have an etherpad for Octavia:16:05
gthiemonge#link https://etherpad.opendev.org/p/xena-ptg-octavia16:05
gthiemongePlease add any topics you would like to discuss16:05
gthiemongeAnd don't forget to register for the PTG16:05
gthiemonge#link https://www.openstack.org/ptg/16:05
gthiemongeAny other announcements this week?16:06
johnsomI don't have anything16:06
gthiemonge#topic Brief progress reports / bugs needing review16:07
*** openstack changes topic to "Brief progress reports / bugs needing review (Meeting topic: Octavia)"16:07
gthiemongeI've worked on some downstream stuff related to Octavia16:07
johnsomI have been working on the backend re-encryption tests that started failing after the ALPN merge.16:08
gthiemongeI also did a few patches for octavia-dashboard (bug fixes and some improvements)16:08
johnsom#link https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/76046516:08
johnsom#link https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/76047116:08
*** rcernin has quit IRC16:08
johnsomReviews would be welcome to get some test coverage for backend re-encryption.16:08
johnsomThank you to gthiemonge for helping out with that effort and finding the issue in the test server with ALPN16:08
gthiemongeI have this feature patch that is waiting for reviews: "Add generic network interface management in the amphora"16:09
gthiemonge#link https://review.opendev.org/c/openstack/octavia/+/76119516:09
johnsomThe scoped token patch is still open for review as well:16:09
johnsom#link https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/77681716:09
gthiemongeI'd like to test it early in the cycle in case I introduced some huge bugs16:09
johnsomAh, yes, that would be a good change. I hope I can take a look this week16:09
haleybgthiemonge: i just had those minor comments on that one, otherwise looked good16:11
gthiemongehaleyb: thanks!16:11
gthiemongeOk, let's move on16:12
gthiemonge#topic Open Discussion16:12
*** openstack changes topic to "Open Discussion (Meeting topic: Octavia)"16:12
openstackgerritMichael Johnson proposed openstack/octavia-tempest-plugin master: Switch to using q35 machine type for Octavia jobs  https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/72939116:12
gthiemongeWe noticed that some periodic jobs for EOL stable branches (queens, rocky, stein) are still running16:12
gthiemonge#link https://zuul.openstack.org/builds?project=openstack%2Foctavia&pipeline=periodic-stable16:13
gthiemongeI think we need to clean up that stuff during the X cycle16:13
johnsom+116:13
cgoncalves#link https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/75872516:14
gthiemongeI'll probably ask for help from our former PTL johnsom16:14
johnsomYou mean rm_work?16:14
* rm_work stumbles in pre-coffee16:14
johnsomgrin16:14
rm_workOh hey, the timing16:15
gthiemongecgoncalves: oh thanks!16:15
cgoncalvesI asked infra team the other day about this. it's a task on their to-do list and seems to be somewhat non-trivial16:15
cgoncalveswe've been reminding them about this for months now. no progress afaik16:16
gthiemongeah ok, so I presume that most of the openstack projects still have some old stable periodic jobs16:17
johnsomWell, we can still remove them from the stable branches even if the branch isn't deleted.16:17
openstackgerritMichael Johnson proposed openstack/octavia-tempest-plugin master: Remove legacy CI jobs  https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/75872516:18
johnsomJust rebased that to kick the tires16:18
gthiemongecgoncalves: johnsom: thanks for working on it ;-)16:19
rm_workSpeaking of rebasing, in case the person who was interested in the multi-AZ patch is here, I did do most of the hard lifting on the rebase finally. I think it already needs another rebase, but it's minor. Not sure if it's working though as I no longer have an easy test-bed. Won't be able to get to that for about a quarter, but if they want to help test, I can assist.16:19
gthiemonge#link https://review.opendev.org/c/openstack/octavia/+/55896216:21
rm_workAh, thanks16:21
gthiemongerm_work: I can rebase it until you're back16:21
rm_workI mean, I can do it again, it's just I won't be able to try to spin up testing for it yet16:22
johnsomIt would be nice to have tempest coverage for that ..... For those of us without multi-az deployments16:23
gthiemongeyeah we could reuse some code from the az_scenario tests (still open in octavia-tempest-plugin)16:24
rm_workYes, was working on multiple AZs in tempest for the main AZ patches that already merged, once that is in better shape I can take advantage of it16:25
gthiemongehttps://review.opendev.org/c/openstack/octavia-tempest-plugin/+/69534916:25
rm_workI think I was just having issues with configuring multiple working AZs there16:25
gthiemongeI need to double check the tempest results but I think it's ok now: https://ce653b590a63b482d73e-172f8f1388c135568979f569022c1ad6.ssl.cf2.rackcdn.com/695349/30/check/octavia-v2-dsvm-scenario-two-node/7414f4e/testr_results.html16:26
gthiemongeAny other topics today?16:28
gthiemongeOk16:29
gthiemongeThanks everyone16:29
gthiemonge#endmeeting16:29
*** openstack changes topic to "Discussions for OpenStack Octavia | Priority bug review list: https://etherpad.openstack.org/p/octavia-priority-reviews"16:29
openstackMeeting ended Wed Apr  7 16:29:25 2021 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:29
openstackMinutes:        http://eavesdrop.openstack.org/meetings/octavia/2021/octavia.2021-04-07-16.00.html16:29
nmk_irc_1hey , I ve one question16:29
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/octavia/2021/octavia.2021-04-07-16.00.txt16:29
openstackLog:            http://eavesdrop.openstack.org/meetings/octavia/2021/octavia.2021-04-07-16.00.log.html16:29
johnsomThanks gthiemonge16:29
nmk_irc_1I want to restrict vip ip address from certain provider (provider:network_type : bgp ) , checked config option , I can see only allow option (valid_vip_networks) not disallow from certain network , Looking for some suggestion how to do that ?16:29
johnsomnmk_irc_1 I think you want to define "allowed_cidrs" when creating your listeners: https://docs.openstack.org/api-ref/load-balancer/v2/index.html?expanded=create-listener-detail#create-listener16:31
johnsomnmk_irc_1 https://docs.openstack.org/octavia/latest/user/guides/basic-cookbook.html#deploy-a-load-balancer-with-access-control-list16:32
nmk_irc_1johnsom , Thanks !16:33
nmk_irc_1I'll check these , I feel if anything like Invalid_vip_network , disallow_cidrs definitely helps16:35
*** rpittau is now known as rpittau|afk16:46
*** nmk_irc_1 has quit IRC17:26
rm_workyeah  I can see the use-case for those17:52
rm_workbut he left17:52
*** rcernin has joined #openstack-lbaas18:04
*** rcernin has quit IRC18:09
*** ccamposr__ has joined #openstack-lbaas18:11
*** ccamposr has quit IRC18:14
johnsomFYI, I have opened a story about the slow socket read issue we occasionally see in the gates: https://storyboard.openstack.org/#!/story/200880619:51
johnsomMy first glance at the issue doesn't highlight why that should timeout during functional tests.19:52
johnsomIt should be a simple read from the sqllite engine.19:52
*** rcernin has joined #openstack-lbaas20:05
*** rcernin has quit IRC20:09
*** vishalmanchanda has quit IRC20:16
*** sapd1_x has quit IRC20:49
*** sapd1_y has joined #openstack-lbaas20:49
*** yamamoto has joined #openstack-lbaas20:53
*** rcernin has joined #openstack-lbaas20:53
*** yamamoto has quit IRC20:57
*** rcernin has quit IRC21:11
*** rcernin has joined #openstack-lbaas21:11
*** gcheresh has quit IRC21:17
*** rcernin has quit IRC21:57
*** sapd1 has quit IRC22:01
*** sapd1 has joined #openstack-lbaas22:14
*** yamamoto has joined #openstack-lbaas22:30
*** yamamoto has quit IRC22:32
*** yamamoto has joined #openstack-lbaas22:32
*** rcernin has joined #openstack-lbaas22:37
*** rcernin has quit IRC22:42
*** rcernin has joined #openstack-lbaas22:47
*** rcernin has quit IRC22:47
*** rcernin has joined #openstack-lbaas22:48
*** luksky has quit IRC23:11
« Tuesday, 2021-04-06 Index Thursday, 2021-04-08 »

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!