[openstack-dev] [openstack-ansible][octavia] Spec: Deploy Octavia with OpenStack-Ansible
Michael Johnson
johnsomor at gmail.com
Mon Nov 7 17:54:40 UTC 2016
Thank you Major!
I will try to get a pass on this early in the week.
I agree with you that taking this one step at a time is probably best.
TLS offloading (requiring barbican) is a common use case, but we can
work on that as a follow up.
Michael
On Wed, Nov 2, 2016 at 6:42 AM, Major Hayden <major at mhtx.net> wrote:
> Hey folks,
>
> I drafted a spec yesterday for deploying Octavia with OpenStack-Ansible. The spec review[0] is pending and you can go straight to the rendered version[1] if you want to take a look.
>
> We proposed this before in the Liberty release, but we ended up implementing only LBaaSv2 with the agent-based load balancers. Octavia has come a long way and is definitely ready for use in Newton/Ocata.
>
> Most of the spec is fairly straightforward, but there are still two open questions that may need to be answered in the implementation steps:
>
> 1) Do we generate the amphora (LB) image on the fly
> with DIB with each deployment? Or, do we pre-build
> it and download it during the deployment?
>
> It might be easier to use DIB in the development stages and then figure out a cached image solution as the role becomes a little more mature.
>
> 2) Do we want to implement SSL offloading (Barbican
> is required) now or tackle that later?
>
> I'd lean towards deploying Octavia without SSL offloading first, and then add in the Barbican support afterwards. My gut says it's better to the basic functionality working well first before we begin adding on extras.
>
> Your feedback is definitely welcomed! :)
>
> [0] https://review.openstack.org/392205
> [1] http://docs-draft.openstack.org/05/392205/2/check/gate-openstack-ansible-specs-docs-ubuntu-xenial/8f1eec1//doc/build/html/specs/ocata/octavia.html
>
> --
> Major Hayden
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
More information about the OpenStack-dev
mailing list