Open Stack

I got close with my approach but I wasn’t sure how to get the network interface I created for Octavia to map to physnet2 to tell the kolla Octavia LB mgmt. subnet to use it.  So….Ill go with your approach.  It sounds like you have an all-in-one setup….Im going through the steps with a multinode setup. How do I find the DHCP servers port?

This is my output from this command.  I used network01 host as that has the OVS stuff on it.  Network02 also has OVS…


[root at kolla ~]# ssh network01 sudo docker exec openvswitch_vswitchd ovsdb-client dump unix:/var/run/openvswitch/db.sock Open_vSwitch Port name tag

Port table

name           tag

-------------- ---

br-ex          []

br-int         []

br-tun         []

eth1           []

int-br-ex      []

patch-int      []

patch-tun      []

phy-br-ex      []

qg-dd91a0d9-e7 2

qr-1fb72495-df 3

qr-a7bcbd91-14 4

qr-cd05b21c-b7 6

qr-e9938869-17 5

tap12d3571c-7f 1

tapd6c55c73-05 4

tape62e9ed6-a7 3

vxlan-0a00c817 []

vxlan-0a00c81b []

[root at kolla ~]#


From: Bernd Bausch <berndbausch at gmail.com>
Date: Tuesday, August 10, 2021 at 9:38 PM
To: Chris Lyons <chris at lyonsgroup.family>, openstack-discuss <openstack-discuss at lists.openstack.org>
Subject: Re: Octavia

A flat network for LB management should work as well. However, the LB management network has nothing to do with your VMs (except the amphorae), and it's unclear to me what ports you are adding to them and the Neutron router. There is no router for a flat network.

You seem to imply that your machines (controllers, computes) are virtual. My experience with Kolla is also in a virtual environment. I had to abandon VLAN or flat LB management networks because I was not competent enough to solve the networking problems outside of Kolla and went for the tenant network solution that I shared.

Bernd
On 2021/08/10 9:31 PM, Chris Lyons wrote:
Thank you!  I am trying the path of adding a separate physical (although its really virtual..) network that will be exclusively for lb-mgmt….that would work also, correct?  I added a port to my virtual router and the added a corresponding port to each openstack vm.  It sounds like only control and compute nodes need it but I was going to add it to everything to start and then eliminate one by one once it worked.

Would that approach also work?


From: Bernd Bausch <berndbausch at gmail.com><mailto:berndbausch at gmail.com>
Date: Tuesday, August 10, 2021 at 2:39 AM
To: Chris Lyons <chris at lyonsgroup.family><mailto:chris at lyonsgroup.family>, openstack-discuss at lists.openstack.org<mailto:openstack-discuss at lists.openstack.org> <openstack-discuss at lists.openstack.org><mailto:openstack-discuss at lists.openstack.org>
Subject: Re: Octavia
The stacktrace shows that Octavia can't reach an Amphora. I suppose you get this log when trying to create a loadbalancer? If so, most likely the Amphora management network is not set up correctly.

The difficulty is that Octavia workers, which are processes running on the controllers, need to have access to the same management network as the Amphora instances. If you implement the management network as a normal tenant network, some non-trivial manual Openvswitch configuration is required. See https://docs.openstack.org/octavia/latest/install/install-ubuntu.html#install-and-configure-components for instructions. In production settings, usually a VLAN is used, which is easy to access from controller processes.

I succeeded running Octavia on a Kolla cluster with three-way controllers, with a tenant network (VXLAN-based) for amphora management. My notes are attached (they are tailored to my configuration, of course).

Bernd.


On 2021/08/09 10:57 AM, Chris Lyons wrote:


Well…it gets. A lot further….  I see this error now…. Im looking around to see if it’s a security group missing or if there is some other setting I missed.  Im not seeing any scripts to prep the env…usually there is something like that if it’s a security group…anyone know?

...
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker Traceback (most recent call last):
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker   File "/usr/lib/python3.6/site-packages/taskflow/engines/action_engine/executor.py", line 53, in _execute_task
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker     result = task.execute(**arguments)
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker   File "/usr/lib/python3.6/site-packages/octavia/controller/worker/v1/tasks/amphora_driver_tasks.py", line 424, in execute
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker     amp_info = self.amphora_driver.get_info(amphora)
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker   File "/usr/lib/python3.6/site-packages/octavia/amphorae/drivers/haproxy/rest_api_driver.py", line 373, in get_info
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker     amphora, raise_retry_exception=raise_retry_exception)
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker   File "/usr/lib/python3.6/site-packages/octavia/amphorae/drivers/haproxy/rest_api_driver.py", line 106, in _populate_amphora_api_version
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker     raise_retry_exception=raise_retry_exception)['api_version']
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker   File "/usr/lib/python3.6/site-packages/octavia/amphorae/drivers/haproxy/rest_api_driver.py", line 744, in get_api_version
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker     raise_retry_exception=raise_retry_exception)
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker   File "/usr/lib/python3.6/site-packages/octavia/amphorae/drivers/haproxy/rest_api_driver.py", line 738, in request
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker     raise driver_except.TimeOutException()
2021-08-08 21:22:35.965 27 ERROR octavia.controller.worker.v1.controller_worker octavia.amphorae.driver_exceptions.exceptions.TimeOutException: contacting the amphora timed out
...


This email has been scanned by Inbound Shield™.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20210813/4df97f31/attachment-0001.html>