Monday, 2023-11-20

opendevreviewGregory Thiemonge proposed openstack/octavia master: Fix health-monitors with ALPN members  https://review.opendev.org/c/openstack/octavia/+/90143508:03
opendevreviewGregory Thiemonge proposed openstack/octavia master: Deprecate TLS-HELLO HMs  https://review.opendev.org/c/openstack/octavia/+/90143608:03
opendevreviewMerged openstack/python-octaviaclient master: Update master for stable/2023.2  https://review.opendev.org/c/openstack/python-octaviaclient/+/89433710:15
opendevreviewGregory Thiemonge proposed openstack/octavia master: Deprecate TLS-HELLO HMs  https://review.opendev.org/c/openstack/octavia/+/90143611:15
opendevreviewTom Weininger proposed openstack/octavia-tempest-plugin master: Add tests for creating a fully populated LB  https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/82499913:38
opendevreviewQuentin GROLLEAU proposed openstack/octavia master: Add validation for minimum number of ips when the subnet is specified  https://review.opendev.org/c/openstack/octavia/+/89880316:05
spateljohnsom morning 19:13
spateljohnsom take a look here - https://paste.opendev.org/show/brAuzocBieYmnlMLzb5r/19:19
spatelwhy haproxy changing https to [{"rel": "self", "href": "http://openstack.example.com:5000/v3/"}] 19:19
eanderssonDo you have api_base_uri set on octavia.conf?19:23
johnsomspatel Yeah, eandersson has it right, the api_base_uri is not set for HTTPS in keystone19:35
spatelThis is not octavia issue but just haproxy 19:36
johnsomActually it's keystone, not haproxy19:36
spatelI have working openstack in non-HTTPS so I put small VM to expose to public using haproxy 19:37
spatelsimilar setup I did with F5 and it works 19:37
spatelthat is why I am here to see why F5 handle it proper way but not haproxy19:37
johnsomYou probably have your F5 configured to connect to keystone over HTTPS?19:37
spatelhmm! 19:38
johnsomAny which way, it's keystone responding differently19:38
johnsomhttps://docs.openstack.org/keystone/2023.2/configuration/config-options.html#DEFAULT.public_endpoint19:38
spatellet me see 19:39

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!