)]}'
{"devstack/contrib/new-octavia-devstack.sh":[{"author":{"_account_id":6579,"name":"Nir Magnezi","email":"nmagnezi@redhat.com","username":"nmagnezi"},"change_message_id":"be90083ee7d5643b781b12a6ff819c73a0c8af0e","unresolved":false,"context_lines":[{"line_number":4,"context_line":"#"},{"line_number":5,"context_line":""},{"line_number":6,"context_line":"# Set up the packages we need"},{"line_number":7,"context_line":"apt-get update"},{"line_number":8,"context_line":"apt-get install git vim -y"},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"# Clone the devstack repo"}],"source_content_type":"text/x-sh","patch_set":2,"id":"5a5ae5dd_7ae38fd9","line":7,"range":{"start_line":7,"start_character":3,"end_line":7,"end_character":4},"updated":"2016-02-08 09:17:46.000000000","message":"Don\u0027t use apt-get directly. this will break things for some distros. Instead, use install_package which is part of devstack.","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":5,"context_line":""},{"line_number":6,"context_line":"# Set up the packages we need"},{"line_number":7,"context_line":"apt-get update"},{"line_number":8,"context_line":"apt-get install git vim -y"},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"# Clone the devstack repo"},{"line_number":11,"context_line":"git clone https://github.com/openstack-dev/devstack.git /tmp/devstack"}],"source_content_type":"text/x-sh","patch_set":2,"id":"1a26ad4f_e8ada984","line":8,"updated":"2015-11-03 05:10:56.000000000","message":"Installing vim was my personal preference, not strictly required... Though I suppose we can still encourage it. :P","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":6579,"name":"Nir Magnezi","email":"nmagnezi@redhat.com","username":"nmagnezi"},"change_message_id":"be90083ee7d5643b781b12a6ff819c73a0c8af0e","unresolved":false,"context_lines":[{"line_number":5,"context_line":""},{"line_number":6,"context_line":"# Set up the packages we need"},{"line_number":7,"context_line":"apt-get update"},{"line_number":8,"context_line":"apt-get install git vim -y"},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"# Clone the devstack repo"},{"line_number":11,"context_line":"git clone https://github.com/openstack-dev/devstack.git /tmp/devstack"}],"source_content_type":"text/x-sh","patch_set":2,"id":"5a5ae5dd_3a37574e","line":8,"in_reply_to":"1a26ad4f_e8ada984","updated":"2016-02-08 09:17:46.000000000","message":"Same as above, please us install_package instead of apt-get directly.","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":14,"context_line":"enable_plugin barbican https://review.openstack.org/openstack/barbican"},{"line_number":15,"context_line":"enable_plugin neutron-lbaas https://review.openstack.org/openstack/neutron-lbaas"},{"line_number":16,"context_line":"enable_plugin octavia https://review.openstack.org/openstack/octavia"},{"line_number":17,"context_line":"LIBS_FROM_GIT+\u003dpython-neutronclient"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"KEYSTONE_TOKEN_FORMAT\u003dUUID"},{"line_number":20,"context_line":""}],"source_content_type":"text/x-sh","patch_set":2,"id":"1a26ad4f_68c2f935","line":17,"updated":"2015-11-03 05:10:56.000000000","message":"Does anyone know if LIBS_FROM_GIT is still required? Will this ALWAYS be required? This is a sort of cargo-cult thing that I put in my script at some point...","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":15226,"name":"Bharath M","email":"bharath.stacker@gmail.com","username":"bharath"},"change_message_id":"d288241ba6113f0a68c81d3be5867f752d835a6d","unresolved":false,"context_lines":[{"line_number":32,"context_line":"ENABLED_SERVICES\u003dkey,rabbit,mysql"},{"line_number":33,"context_line":"# Nova"},{"line_number":34,"context_line":"ENABLED_SERVICES+\u003d,n-api,n-crt,n-obj,n-cpu,n-cond,n-sch"},{"line_number":35,"context_line":"IMAGE_URLS+\u003d\",https://launchpad.net/cirros/trunk/0.3.0/+download/cirros-0.3.0-x86_64-disk.img\""},{"line_number":36,"context_line":"# Glance"},{"line_number":37,"context_line":"ENABLED_SERVICES+\u003d,g-api,g-reg"},{"line_number":38,"context_line":"# Neutron"}],"source_content_type":"text/x-sh","patch_set":2,"id":"5a5ae5dd_bc6782e9","line":35,"updated":"2016-02-09 08:41:52.000000000","message":"Prefer using cirros-0.3.4\n\nIMAGE_URLS+\u003d\",http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86_64-disk.img\"","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":15226,"name":"Bharath M","email":"bharath.stacker@gmail.com","username":"bharath"},"change_message_id":"d288241ba6113f0a68c81d3be5867f752d835a6d","unresolved":false,"context_lines":[{"line_number":44,"context_line":"# Tempest (optional)"},{"line_number":45,"context_line":"#ENABLED_SERVICES+\u003d,tempest"},{"line_number":46,"context_line":"# Octavia"},{"line_number":47,"context_line":"ENABLED_SERVICES+\u003d,octavia,o-api,o-cw"},{"line_number":48,"context_line":"EOF"},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"# Create the stack user"}],"source_content_type":"text/x-sh","patch_set":2,"id":"5a5ae5dd_08ed318e","line":47,"updated":"2016-02-09 08:41:52.000000000","message":"Should include o-hm, o-hk","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":55,"context_line":"chown -R stack:stack /opt/stack/devstack/"},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"# Fix permissions on current tty so screens can attach"},{"line_number":58,"context_line":"chmod go+rw `tty`"},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"# Stack that stack!"},{"line_number":61,"context_line":"su - stack -c /opt/stack/devstack/stack.sh"}],"source_content_type":"text/x-sh","patch_set":2,"id":"1a26ad4f_e8fb6979","line":58,"updated":"2015-11-03 05:10:56.000000000","message":"Someone pointed out that \"go+rw\" might be overly permissive, but I haven\u0027t done testing to see what is the minimum required permissions change here.","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":15226,"name":"Bharath M","email":"bharath.stacker@gmail.com","username":"bharath"},"change_message_id":"d288241ba6113f0a68c81d3be5867f752d835a6d","unresolved":false,"context_lines":[{"line_number":62,"context_line":""},{"line_number":63,"context_line":"# Add environment variables for auth/endpoints"},{"line_number":64,"context_line":"echo \u0027source /opt/stack/devstack/openrc admin admin\u0027 \u003e\u003e /opt/stack/.bashrc"},{"line_number":65,"context_line":"echo \u0027export BARBICAN_ENDPOINT\u003d\"http://localhost:9311\"\u0027 \u003e\u003e /opt/stack/.bashrc"},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"# Install tox globally"},{"line_number":68,"context_line":"#pip install tox"}],"source_content_type":"text/x-sh","patch_set":2,"id":"5a5ae5dd_7c334af7","line":65,"range":{"start_line":65,"start_character":13,"end_line":65,"end_character":30},"updated":"2016-02-09 08:41:52.000000000","message":"Is it still required ? Wouldn\u0027t the keystone session object contain the endpoint from service catalog ?","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"9f570de7fb8613ce052ceccb5cd8f8373d7e2925","unresolved":false,"context_lines":[{"line_number":12,"context_line":"# TODO(sbalukoff): Add prerequisites for other distributions."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"# Clone the devstack repo"},{"line_number":15,"context_line":"git clone https://github.com/openstack-dev/devstack.git /tmp/devstack"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"cat \u003c\u003cEOF \u003e /tmp/devstack/localrc"},{"line_number":18,"context_line":"enable_plugin barbican https://review.openstack.org/openstack/barbican"}],"source_content_type":"text/x-sh","patch_set":4,"id":"fa7ab95a_2ba309a0","line":15,"updated":"2016-08-25 20:57:11.000000000","message":"We should not be putting stuff in /tmp as it is a security issue.  Why not just pull it in the user\u0027s home directory?","commit_id":"311e8df1109fa00ce2141171fea2fa5f7256bb48"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"6615f61aee9c8a0ea72b4e324b8ffebefe046076","unresolved":false,"context_lines":[{"line_number":12,"context_line":"# TODO(sbalukoff): Add prerequisites for other distributions."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"# Clone the devstack repo"},{"line_number":15,"context_line":"git clone https://github.com/openstack-dev/devstack.git /tmp/devstack"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"cat \u003c\u003cEOF \u003e /tmp/devstack/localrc"},{"line_number":18,"context_line":"enable_plugin barbican https://review.openstack.org/openstack/barbican"}],"source_content_type":"text/x-sh","patch_set":4,"id":"fa7ab95a_eeba04c0","line":15,"in_reply_to":"fa7ab95a_2ba309a0","updated":"2016-08-26 03:15:07.000000000","message":"I agree. I\u0027ll change this.","commit_id":"311e8df1109fa00ce2141171fea2fa5f7256bb48"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"9f570de7fb8613ce052ceccb5cd8f8373d7e2925","unresolved":false,"context_lines":[{"line_number":66,"context_line":""},{"line_number":67,"context_line":"# Add environment variables for auth/endpoints"},{"line_number":68,"context_line":"echo \u0027source /opt/stack/devstack/openrc admin admin\u0027 \u003e\u003e /opt/stack/.bashrc"},{"line_number":69,"context_line":"echo \u0027export BARBICAN_ENDPOINT\u003d\"http://localhost:9311\"\u0027 \u003e\u003e /opt/stack/.bashrc"},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"# Install tox globally"},{"line_number":72,"context_line":"#pip install tox"}],"source_content_type":"text/x-sh","patch_set":4,"id":"fa7ab95a_4bc76d45","line":69,"updated":"2016-08-25 20:57:11.000000000","message":"Do we need this?","commit_id":"311e8df1109fa00ce2141171fea2fa5f7256bb48"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"6615f61aee9c8a0ea72b4e324b8ffebefe046076","unresolved":false,"context_lines":[{"line_number":66,"context_line":""},{"line_number":67,"context_line":"# Add environment variables for auth/endpoints"},{"line_number":68,"context_line":"echo \u0027source /opt/stack/devstack/openrc admin admin\u0027 \u003e\u003e /opt/stack/.bashrc"},{"line_number":69,"context_line":"echo \u0027export BARBICAN_ENDPOINT\u003d\"http://localhost:9311\"\u0027 \u003e\u003e /opt/stack/.bashrc"},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"# Install tox globally"},{"line_number":72,"context_line":"#pip install tox"}],"source_content_type":"text/x-sh","patch_set":4,"id":"fa7ab95a_2e030c75","line":69,"in_reply_to":"fa7ab95a_4bc76d45","updated":"2016-08-26 03:15:07.000000000","message":"I suspect this isn\u0027t strictly necessary unless you\u0027re going to be talking with the barbican API directly (as Adam probably does). I\u0027ll remove this line.","commit_id":"311e8df1109fa00ce2141171fea2fa5f7256bb48"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"9f570de7fb8613ce052ceccb5cd8f8373d7e2925","unresolved":false,"context_lines":[{"line_number":69,"context_line":"echo \u0027export BARBICAN_ENDPOINT\u003d\"http://localhost:9311\"\u0027 \u003e\u003e /opt/stack/.bashrc"},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"# Install tox globally"},{"line_number":72,"context_line":"#pip install tox"},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"# Drop into a shell"},{"line_number":75,"context_line":"exec su - stack"}],"source_content_type":"text/x-sh","patch_set":4,"id":"fa7ab95a_ebaf617b","line":72,"updated":"2016-08-25 20:57:11.000000000","message":"Remove the comment line.","commit_id":"311e8df1109fa00ce2141171fea2fa5f7256bb48"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"6615f61aee9c8a0ea72b4e324b8ffebefe046076","unresolved":false,"context_lines":[{"line_number":69,"context_line":"echo \u0027export BARBICAN_ENDPOINT\u003d\"http://localhost:9311\"\u0027 \u003e\u003e /opt/stack/.bashrc"},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"# Install tox globally"},{"line_number":72,"context_line":"#pip install tox"},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"# Drop into a shell"},{"line_number":75,"context_line":"exec su - stack"}],"source_content_type":"text/x-sh","patch_set":4,"id":"fa7ab95a_8ef25899","line":72,"in_reply_to":"fa7ab95a_ebaf617b","updated":"2016-08-26 03:15:07.000000000","message":"Done","commit_id":"311e8df1109fa00ce2141171fea2fa5f7256bb48"},{"author":{"_account_id":23377,"name":"Ben Carr","email":"carrbens@gmail.com","username":"carrbs"},"change_message_id":"539c929f74d30cd61d5606157c64ebe89d28025d","unresolved":false,"context_lines":[{"line_number":1,"context_line":"#!/bin/bash"},{"line_number":2,"context_line":"#"},{"line_number":3,"context_line":"# These instructions assume an Ubunutu-based host or VM for running devstack."},{"line_number":4,"context_line":"# Please note that if you are running this in a VM, it is vitally important"},{"line_number":5,"context_line":"# that the underlying hardware have VT-X enabled in the BIOS or you will"},{"line_number":6,"context_line":"# experience very poor amphora performance."}],"source_content_type":"text/x-sh","patch_set":8,"id":"fa7ab95a_97f8b64b","line":3,"updated":"2016-08-31 04:48:17.000000000","message":"Ubuntu","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":23377,"name":"Ben Carr","email":"carrbens@gmail.com","username":"carrbs"},"change_message_id":"8e19063aa73c5487f401297b56fe21f876ccee62","unresolved":false,"context_lines":[{"line_number":1,"context_line":"#!/bin/bash"},{"line_number":2,"context_line":"#"},{"line_number":3,"context_line":"# These instructions assume an Ubunutu-based host or VM for running devstack."},{"line_number":4,"context_line":"# Please note that if you are running this in a VM, it is vitally important"},{"line_number":5,"context_line":"# that the underlying hardware have VT-X enabled in the BIOS or you will"},{"line_number":6,"context_line":"# experience very poor amphora performance."}],"source_content_type":"text/x-sh","patch_set":10,"id":"9a89bdaa_6b023140","line":3,"range":{"start_line":3,"start_character":31,"end_line":3,"end_character":38},"updated":"2016-09-12 16:58:40.000000000","message":"If we are keeping this comment, this should be spelled \"Ubuntu\"","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"e6acf7a4ffd600f1a1b4e2d5f29b471e1a39646b","unresolved":false,"context_lines":[{"line_number":1,"context_line":"#!/bin/bash"},{"line_number":2,"context_line":"#"},{"line_number":3,"context_line":"# These instructions assume an Ubunutu-based host or VM for running devstack."},{"line_number":4,"context_line":"# Please note that if you are running this in a VM, it is vitally important"},{"line_number":5,"context_line":"# that the underlying hardware have VT-X enabled in the BIOS or you will"},{"line_number":6,"context_line":"# experience very poor amphora performance."}],"source_content_type":"text/x-sh","patch_set":10,"id":"9a89bdaa_1de27e2f","line":3,"range":{"start_line":3,"start_character":31,"end_line":3,"end_character":38},"in_reply_to":"9a89bdaa_6b023140","updated":"2016-09-12 21:10:41.000000000","message":"Done","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"e9a1c7b9f597a28af4216605b773ca0b83f4cbab","unresolved":false,"context_lines":[{"line_number":36,"context_line":"ENABLED_SERVICES\u003dkey,rabbit,mysql"},{"line_number":37,"context_line":"# Nova"},{"line_number":38,"context_line":"ENABLED_SERVICES+\u003d,n-api,n-crt,n-obj,n-cpu,n-cond,n-sch"},{"line_number":39,"context_line":"IMAGE_URLS+\u003d\",http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86_64-disk.img\""},{"line_number":40,"context_line":"# Glance"},{"line_number":41,"context_line":"ENABLED_SERVICES+\u003d,g-api,g-reg"},{"line_number":42,"context_line":"# Neutron"}],"source_content_type":"text/x-sh","patch_set":10,"id":"9a89bdaa_15642420","line":39,"range":{"start_line":39,"start_character":13,"end_line":39,"end_character":81},"updated":"2016-09-12 15:30:42.000000000","message":"This image should be by default downloaded, maybe not exactly that by some cirros image","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"e6acf7a4ffd600f1a1b4e2d5f29b471e1a39646b","unresolved":false,"context_lines":[{"line_number":36,"context_line":"ENABLED_SERVICES\u003dkey,rabbit,mysql"},{"line_number":37,"context_line":"# Nova"},{"line_number":38,"context_line":"ENABLED_SERVICES+\u003d,n-api,n-crt,n-obj,n-cpu,n-cond,n-sch"},{"line_number":39,"context_line":"IMAGE_URLS+\u003d\",http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86_64-disk.img\""},{"line_number":40,"context_line":"# Glance"},{"line_number":41,"context_line":"ENABLED_SERVICES+\u003d,g-api,g-reg"},{"line_number":42,"context_line":"# Neutron"}],"source_content_type":"text/x-sh","patch_set":10,"id":"9a89bdaa_fd695a8d","line":39,"range":{"start_line":39,"start_character":13,"end_line":39,"end_character":81},"in_reply_to":"9a89bdaa_15642420","updated":"2016-09-12 21:10:41.000000000","message":"Yeah, it looks like one of these images gets loaded by default now in devstack anyway. Ok; I\u0027ll remove this line.","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"e9a1c7b9f597a28af4216605b773ca0b83f4cbab","unresolved":false,"context_lines":[{"line_number":40,"context_line":"# Glance"},{"line_number":41,"context_line":"ENABLED_SERVICES+\u003d,g-api,g-reg"},{"line_number":42,"context_line":"# Neutron"},{"line_number":43,"context_line":"ENABLED_SERVICES+\u003d,q-svc,q-agt,q-dhcp,q-l3,q-meta,neutron"},{"line_number":44,"context_line":"# Enable LBaaS V2"},{"line_number":45,"context_line":"ENABLED_SERVICES+\u003d,q-lbaasv2"},{"line_number":46,"context_line":"# Cinder (optional)"}],"source_content_type":"text/x-sh","patch_set":10,"id":"9a89bdaa_359be819","line":43,"range":{"start_line":43,"start_character":18,"end_line":43,"end_character":57},"updated":"2016-09-12 15:30:42.000000000","message":"all of them by default suppose to be enabled","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"e6acf7a4ffd600f1a1b4e2d5f29b471e1a39646b","unresolved":false,"context_lines":[{"line_number":40,"context_line":"# Glance"},{"line_number":41,"context_line":"ENABLED_SERVICES+\u003d,g-api,g-reg"},{"line_number":42,"context_line":"# Neutron"},{"line_number":43,"context_line":"ENABLED_SERVICES+\u003d,q-svc,q-agt,q-dhcp,q-l3,q-meta,neutron"},{"line_number":44,"context_line":"# Enable LBaaS V2"},{"line_number":45,"context_line":"ENABLED_SERVICES+\u003d,q-lbaasv2"},{"line_number":46,"context_line":"# Cinder (optional)"}],"source_content_type":"text/x-sh","patch_set":10,"id":"9a89bdaa_61904844","line":43,"range":{"start_line":43,"start_character":18,"end_line":43,"end_character":57},"in_reply_to":"9a89bdaa_359be819","updated":"2016-09-12 21:10:41.000000000","message":"Hmmm....  if I comment out this line, it looks like only q-svc actually gets launched. Moreover, Octavia doesn\u0027t get started.","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"43afa9708f982a827a8a1d91b3b53979c40aeaba","unresolved":false,"context_lines":[{"line_number":40,"context_line":"# Glance"},{"line_number":41,"context_line":"ENABLED_SERVICES+\u003d,g-api,g-reg"},{"line_number":42,"context_line":"# Neutron"},{"line_number":43,"context_line":"ENABLED_SERVICES+\u003d,q-svc,q-agt,q-dhcp,q-l3,q-meta,neutron"},{"line_number":44,"context_line":"# Enable LBaaS V2"},{"line_number":45,"context_line":"ENABLED_SERVICES+\u003d,q-lbaasv2"},{"line_number":46,"context_line":"# Cinder (optional)"}],"source_content_type":"text/x-sh","patch_set":10,"id":"9a89bdaa_ab991e7b","line":43,"range":{"start_line":43,"start_character":18,"end_line":43,"end_character":57},"in_reply_to":"9a89bdaa_61904844","updated":"2016-09-13 13:32:50.000000000","message":"I don\u0027t know. Normally I\u0027m using local.conf without that lines and it\u0027s working for me.","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"22fa014a8cc1adeb3a4d3c692c466aa0b353bf43","unresolved":false,"context_lines":[{"line_number":40,"context_line":"# Glance"},{"line_number":41,"context_line":"ENABLED_SERVICES+\u003d,g-api,g-reg"},{"line_number":42,"context_line":"# Neutron"},{"line_number":43,"context_line":"ENABLED_SERVICES+\u003d,q-svc,q-agt,q-dhcp,q-l3,q-meta,neutron"},{"line_number":44,"context_line":"# Enable LBaaS V2"},{"line_number":45,"context_line":"ENABLED_SERVICES+\u003d,q-lbaasv2"},{"line_number":46,"context_line":"# Cinder (optional)"}],"source_content_type":"text/x-sh","patch_set":10,"id":"9a89bdaa_26b8db29","line":43,"range":{"start_line":43,"start_character":18,"end_line":43,"end_character":57},"in_reply_to":"9a89bdaa_ab991e7b","updated":"2016-09-13 15:46:14.000000000","message":"Ok, so... again, I *just* spun up a devstack without these lines and it didn\u0027t work. Why don\u0027t you post the rest of your local.conf and we can see what the actual differences are?\n\nAlso, are you saying this script won\u0027t work with this line in there? If it does work, why block the patch?","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":10558,"name":"Dustin Lundquist","email":"dustin@null-ptr.net","username":"dlundquist"},"change_message_id":"62755b13fb16cc628f3f26d3691933b58181bc79","unresolved":false,"context_lines":[{"line_number":1,"context_line":"#!/bin/bash"},{"line_number":2,"context_line":"#"},{"line_number":3,"context_line":"# These instructions assume an Ubuntu-based host or VM for running devstack."},{"line_number":4,"context_line":"# Please note that if you are running this in a VM, it is vitally important"},{"line_number":5,"context_line":"# that the underlying hardware have VT-X enabled in the BIOS or you will"},{"line_number":6,"context_line":"# experience very poor amphora performance."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"# Set up the packages we need. Ubuntu package manager is assumed."},{"line_number":9,"context_line":"apt-get update"}],"source_content_type":"text/x-sh","patch_set":12,"id":"7a8ec9b2_c4bde4d8","line":6,"range":{"start_line":3,"start_character":0,"end_line":6,"end_character":43},"updated":"2016-09-14 20:51:32.000000000","message":"This is a script rather than instructions. Drop the VT-X comment,  since we really mean enabled nested virtualization, VT-X is Intel specific and that is described in the document.","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":1,"context_line":"#!/bin/bash"},{"line_number":2,"context_line":"#"},{"line_number":3,"context_line":"# These instructions assume an Ubuntu-based host or VM for running devstack."},{"line_number":4,"context_line":"# Please note that if you are running this in a VM, it is vitally important"},{"line_number":5,"context_line":"# that the underlying hardware have VT-X enabled in the BIOS or you will"},{"line_number":6,"context_line":"# experience very poor amphora performance."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"# Set up the packages we need. Ubuntu package manager is assumed."},{"line_number":9,"context_line":"apt-get update"}],"source_content_type":"text/x-sh","patch_set":12,"id":"7a8ec9b2_b00487c6","line":6,"range":{"start_line":3,"start_character":0,"end_line":6,"end_character":43},"in_reply_to":"7a8ec9b2_c4bde4d8","updated":"2016-09-20 21:01:01.000000000","message":"Done","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":10980,"name":"Doug Wiegley","email":"dougwig@parkside.io","username":"dougw"},"change_message_id":"b7bb6a47820bec86ae6ecd670e823c2c7001ceca","unresolved":false,"context_lines":[{"line_number":7,"context_line":""},{"line_number":8,"context_line":"# Set up the packages we need. Ubuntu package manager is assumed."},{"line_number":9,"context_line":"apt-get update"},{"line_number":10,"context_line":"apt-get install git vim -y"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"# TODO(sbalukoff): Add prerequisites for other distributions."},{"line_number":13,"context_line":""}],"source_content_type":"text/x-sh","patch_set":12,"id":"7a8ec9b2_5b71f176","line":10,"updated":"2016-09-19 17:30:28.000000000","message":"vim?  opinionated as F.  :-)\n\nI usually put chrony in that initial list.","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":7,"context_line":""},{"line_number":8,"context_line":"# Set up the packages we need. Ubuntu package manager is assumed."},{"line_number":9,"context_line":"apt-get update"},{"line_number":10,"context_line":"apt-get install git vim -y"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"# TODO(sbalukoff): Add prerequisites for other distributions."},{"line_number":13,"context_line":""}],"source_content_type":"text/x-sh","patch_set":12,"id":"7a8ec9b2_d02e7341","line":10,"in_reply_to":"7a8ec9b2_5b71f176","updated":"2016-09-20 21:01:01.000000000","message":"Heh! I can\u0027t tell whether you\u0027re kidding or not.","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"}],"doc/source/guides/dev-quick-start.rst":[{"author":{"_account_id":17419,"name":"Banashankar k","email":"banveerad@gmail.com","username":"banveerad"},"change_message_id":"90d39d4c5ec5fd9817c6906e5e1bd450093d7fcf","unresolved":false,"context_lines":[{"line_number":24,"context_line":"Running Octavia in devstack"},{"line_number":25,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"tl;dr"},{"line_number":28,"context_line":"-----"},{"line_number":29,"context_line":"* 8GB RAM minimum"},{"line_number":30,"context_line":"* \"vmx\" or \"svm\" in ``/proc/cpuinfo``"}],"source_content_type":"text/x-rst","patch_set":7,"id":"fa7ab95a_0b9c3abf","line":27,"range":{"start_line":27,"start_character":0,"end_line":27,"end_character":5},"updated":"2016-08-29 18:50:38.000000000","message":"no min req for vcpus?","commit_id":"e9d92d135310be4d0fc6367f04afd45dfc9f90a9"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"6575f2121e77975348c6f11364682e02e1497059","unresolved":false,"context_lines":[{"line_number":24,"context_line":"Running Octavia in devstack"},{"line_number":25,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"tl;dr"},{"line_number":28,"context_line":"-----"},{"line_number":29,"context_line":"* 8GB RAM minimum"},{"line_number":30,"context_line":"* \"vmx\" or \"svm\" in ``/proc/cpuinfo``"}],"source_content_type":"text/x-rst","patch_set":7,"id":"fa7ab95a_24046f48","line":27,"range":{"start_line":27,"start_character":0,"end_line":27,"end_character":5},"in_reply_to":"fa7ab95a_0b9c3abf","updated":"2016-08-29 21:18:47.000000000","message":"Not really-- for functional testing or development purposes, we\u0027re not being constrained by CPU.","commit_id":"e9d92d135310be4d0fc6367f04afd45dfc9f90a9"},{"author":{"_account_id":6116,"name":"li,chen","email":"shchenli@cn.ibm.com","username":"chen-li"},"change_message_id":"2a19b48b40d8eb1dc1a1c3dde758291b2719b52f","unresolved":false,"context_lines":[{"line_number":131,"context_line":""},{"line_number":132,"context_line":"Create Octavia User"},{"line_number":133,"context_line":"___________________"},{"line_number":134,"context_line":"By default Octavia will use the \u0027neutron\u0027 user. However, it doesn\u0027t actually"},{"line_number":135,"context_line":"share neutron\u0027s database or otherwise access Neutron outside of Neutron\u0027s API,"},{"line_number":136,"context_line":"so a dedicated \u0027octavia\u0027 user should generally be created for Octavia to use."},{"line_number":137,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"fa7ab95a_2b9d170a","line":134,"range":{"start_line":134,"start_character":0,"end_line":134,"end_character":47},"updated":"2016-08-30 01:23:53.000000000","message":"Is this really true ? Didn\u0027t find any place in octavia using \u0027neutron\u0027 user.","commit_id":"e9d92d135310be4d0fc6367f04afd45dfc9f90a9"},{"author":{"_account_id":17419,"name":"Banashankar k","email":"banveerad@gmail.com","username":"banveerad"},"change_message_id":"90d39d4c5ec5fd9817c6906e5e1bd450093d7fcf","unresolved":false,"context_lines":[{"line_number":138,"context_line":"You must:"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":141,"context_line":"* Add the \u0027service\u0027 role to this user."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"Load Balancer Network Configuration"}],"source_content_type":"text/x-rst","patch_set":7,"id":"fa7ab95a_b1de0e0f","line":141,"updated":"2016-08-29 18:50:38.000000000","message":"I think we need admin role also, as we will be accessing the other tenants networks.","commit_id":"e9d92d135310be4d0fc6367f04afd45dfc9f90a9"},{"author":{"_account_id":6116,"name":"li,chen","email":"shchenli@cn.ibm.com","username":"chen-li"},"change_message_id":"2a19b48b40d8eb1dc1a1c3dde758291b2719b52f","unresolved":false,"context_lines":[{"line_number":138,"context_line":"You must:"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":141,"context_line":"* Add the \u0027service\u0027 role to this user."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"Load Balancer Network Configuration"}],"source_content_type":"text/x-rst","patch_set":7,"id":"fa7ab95a_abd92724","line":141,"in_reply_to":"fa7ab95a_105402fd","updated":"2016-08-30 01:23:53.000000000","message":"Not sure, but I guess the role \u0027advsvc\u0027 might be the one we wanted.\nhttps://review.openstack.org/#/c/101281/\n\nBy default, there is no role \u0027service\u0027 in any policy.json file. So, if we really want to user role \u0027service\u0027, that would request extra works, right ?","commit_id":"e9d92d135310be4d0fc6367f04afd45dfc9f90a9"},{"author":{"_account_id":17419,"name":"Banashankar k","email":"banveerad@gmail.com","username":"banveerad"},"change_message_id":"e6423a2c2cc3f6b2368bb654cf4a1e6107fd7fe5","unresolved":false,"context_lines":[{"line_number":138,"context_line":"You must:"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":141,"context_line":"* Add the \u0027service\u0027 role to this user."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"Load Balancer Network Configuration"}],"source_content_type":"text/x-rst","patch_set":7,"id":"fa7ab95a_105402fd","line":141,"in_reply_to":"fa7ab95a_1a97c648","updated":"2016-08-30 00:04:34.000000000","message":"Just a clarification in here, we are adding an admin role not admin project.  This user still will be in service project only.","commit_id":"e9d92d135310be4d0fc6367f04afd45dfc9f90a9"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"6575f2121e77975348c6f11364682e02e1497059","unresolved":false,"context_lines":[{"line_number":138,"context_line":"You must:"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":141,"context_line":"* Add the \u0027service\u0027 role to this user."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"Load Balancer Network Configuration"}],"source_content_type":"text/x-rst","patch_set":7,"id":"fa7ab95a_c4c2e3e8","line":141,"in_reply_to":"fa7ab95a_b1de0e0f","updated":"2016-08-29 21:18:47.000000000","message":"So that\u0027s the point of a service role: Correct me if I\u0027m wrong, but \"service\" falls somewhere between admin and tenant, in the sense that it can do some admin-like things, but isn\u0027t intended to have to sweeping access of a full admin account.","commit_id":"e9d92d135310be4d0fc6367f04afd45dfc9f90a9"},{"author":{"_account_id":17419,"name":"Banashankar k","email":"banveerad@gmail.com","username":"banveerad"},"change_message_id":"7af0f88f845a7db62600ebd584760984de384783","unresolved":false,"context_lines":[{"line_number":138,"context_line":"You must:"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":141,"context_line":"* Add the \u0027service\u0027 role to this user."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"Load Balancer Network Configuration"}],"source_content_type":"text/x-rst","patch_set":7,"id":"fa7ab95a_1a97c648","line":141,"in_reply_to":"fa7ab95a_c4c2e3e8","updated":"2016-08-29 21:48:42.000000000","message":"We tested it out locally with devstack \nwe have following in config file\n\n[keystone_authtoken]\nauth_version \u003d 2\nadmin_password \u003d admin_pass\nadmin_tenant_name \u003d service\nadmin_user \u003d octavia\nauth_uri \u003d http://10.0.2.15/identity_v2_admin/v2.0\n\nWe first tried it with service and crated a LB with the demo user and one of its network. Octavia complained about not able to find the network. So we added admin also to the octavia user n it worked fine.  Please do let me know I am doing something wrong.","commit_id":"e9d92d135310be4d0fc6367f04afd45dfc9f90a9"},{"author":{"_account_id":17419,"name":"Banashankar k","email":"banveerad@gmail.com","username":"banveerad"},"change_message_id":"90d39d4c5ec5fd9817c6906e5e1bd450093d7fcf","unresolved":false,"context_lines":[{"line_number":175,"context_line":"You must:"},{"line_number":176,"context_line":""},{"line_number":177,"context_line":"* Create the \u0027lb-mgmt-net\u0027."},{"line_number":178,"context_line":"* Assign the \u0027lb-mgmt-net\u0027 to the admin tenant."},{"line_number":179,"context_line":"* Create a subnet and assign it to the \u0027lb-mgmt-net\u0027."},{"line_number":180,"context_line":"* Create neutron security group for amphorae created on the \u0027lb-mgmt-net\u0027."},{"line_number":181,"context_line":"  which allows appropriate access to the amphorae."}],"source_content_type":"text/x-rst","patch_set":7,"id":"fa7ab95a_11017a6a","line":178,"updated":"2016-08-29 18:50:38.000000000","message":"why do we want to do this? Don\u0027t we need to create the mgmt n.w with octavia user?","commit_id":"e9d92d135310be4d0fc6367f04afd45dfc9f90a9"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"6575f2121e77975348c6f11364682e02e1497059","unresolved":false,"context_lines":[{"line_number":175,"context_line":"You must:"},{"line_number":176,"context_line":""},{"line_number":177,"context_line":"* Create the \u0027lb-mgmt-net\u0027."},{"line_number":178,"context_line":"* Assign the \u0027lb-mgmt-net\u0027 to the admin tenant."},{"line_number":179,"context_line":"* Create a subnet and assign it to the \u0027lb-mgmt-net\u0027."},{"line_number":180,"context_line":"* Create neutron security group for amphorae created on the \u0027lb-mgmt-net\u0027."},{"line_number":181,"context_line":"  which allows appropriate access to the amphorae."}],"source_content_type":"text/x-rst","patch_set":7,"id":"fa7ab95a_a44b1f86","line":178,"in_reply_to":"fa7ab95a_11017a6a","updated":"2016-08-29 21:18:47.000000000","message":"This is simply how it\u0027s done right now in devstack. Have you tried this in production with the lb-mgmt-net being owned by the octavia user? (I\u0027d be happy to update this document if you\u0027ve actually run it that way in production.)","commit_id":"e9d92d135310be4d0fc6367f04afd45dfc9f90a9"},{"author":{"_account_id":6116,"name":"li,chen","email":"shchenli@cn.ibm.com","username":"chen-li"},"change_message_id":"2a19b48b40d8eb1dc1a1c3dde758291b2719b52f","unresolved":false,"context_lines":[{"line_number":175,"context_line":"You must:"},{"line_number":176,"context_line":""},{"line_number":177,"context_line":"* Create the \u0027lb-mgmt-net\u0027."},{"line_number":178,"context_line":"* Assign the \u0027lb-mgmt-net\u0027 to the admin tenant."},{"line_number":179,"context_line":"* Create a subnet and assign it to the \u0027lb-mgmt-net\u0027."},{"line_number":180,"context_line":"* Create neutron security group for amphorae created on the \u0027lb-mgmt-net\u0027."},{"line_number":181,"context_line":"  which allows appropriate access to the amphorae."}],"source_content_type":"text/x-rst","patch_set":7,"id":"fa7ab95a_2b8197c3","line":178,"in_reply_to":"fa7ab95a_1aa506a1","updated":"2016-08-30 01:23:53.000000000","message":"The previous section requests to create user octavia, I think we\u0027d better keeping things consistent. Use admin tenant \u0026 admin user all the time, or use octavia user all the time.","commit_id":"e9d92d135310be4d0fc6367f04afd45dfc9f90a9"},{"author":{"_account_id":17419,"name":"Banashankar k","email":"banveerad@gmail.com","username":"banveerad"},"change_message_id":"7af0f88f845a7db62600ebd584760984de384783","unresolved":false,"context_lines":[{"line_number":175,"context_line":"You must:"},{"line_number":176,"context_line":""},{"line_number":177,"context_line":"* Create the \u0027lb-mgmt-net\u0027."},{"line_number":178,"context_line":"* Assign the \u0027lb-mgmt-net\u0027 to the admin tenant."},{"line_number":179,"context_line":"* Create a subnet and assign it to the \u0027lb-mgmt-net\u0027."},{"line_number":180,"context_line":"* Create neutron security group for amphorae created on the \u0027lb-mgmt-net\u0027."},{"line_number":181,"context_line":"  which allows appropriate access to the amphorae."}],"source_content_type":"text/x-rst","patch_set":7,"id":"fa7ab95a_1aa506a1","line":178,"in_reply_to":"fa7ab95a_a44b1f86","updated":"2016-08-29 21:48:42.000000000","message":"with adding admin role to active, yes. Not in prod but in devstack.","commit_id":"e9d92d135310be4d0fc6367f04afd45dfc9f90a9"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":48,"context_line":"services using amphorae that run as Nova virtual machines, it is a very good"},{"line_number":49,"context_line":"idea to make sure the BIOS of the systems you\u0027re running your devstack on have"},{"line_number":50,"context_line":"virtualization features enabled (Intel VT-x, AMD-V, etc.), and the"},{"line_number":51,"context_line":"virtualization software you\u0027re using makes use of these features. (Otherwise,"},{"line_number":52,"context_line":"you can expect abysmal performance of your Octavia-enabled devstack.)"},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"The devstack environment we recommend should be running Ubuntu Linux 14.04 or"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_b4a063f5","line":51,"range":{"start_line":51,"start_character":37,"end_line":51,"end_character":64},"updated":"2016-08-30 21:29:58.000000000","message":"We should re-word this to clarify.\n\n\"exposes these features to the guest VM (sometimes called nested virtualization)\"\n\nSomething like that.\nAll of the virtualization software will \"use\" VT-x, but the key is if they expose it into devstack so that nova\u0027s use of qemu can see it.\n\nMaybe a link to this page would be helpful for folks: http://docs.openstack.org/developer/devstack/guides/devstack-with-nested-kvm.html","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":48,"context_line":"services using amphorae that run as Nova virtual machines, it is a very good"},{"line_number":49,"context_line":"idea to make sure the BIOS of the systems you\u0027re running your devstack on have"},{"line_number":50,"context_line":"virtualization features enabled (Intel VT-x, AMD-V, etc.), and the"},{"line_number":51,"context_line":"virtualization software you\u0027re using makes use of these features. (Otherwise,"},{"line_number":52,"context_line":"you can expect abysmal performance of your Octavia-enabled devstack.)"},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"The devstack environment we recommend should be running Ubuntu Linux 14.04 or"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_d168828a","line":51,"range":{"start_line":51,"start_character":37,"end_line":51,"end_character":64},"in_reply_to":"fa7ab95a_b4a063f5","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":23377,"name":"Ben Carr","email":"carrbens@gmail.com","username":"carrbs"},"change_message_id":"539c929f74d30cd61d5606157c64ebe89d28025d","unresolved":false,"context_lines":[{"line_number":48,"context_line":"services using amphorae that run as Nova virtual machines, it is a very good"},{"line_number":49,"context_line":"idea to make sure the BIOS of the systems you\u0027re running your devstack on have"},{"line_number":50,"context_line":"virtualization features enabled (Intel VT-x, AMD-V, etc.), and the"},{"line_number":51,"context_line":"virtualization software you\u0027re using makes use of these features. (Otherwise,"},{"line_number":52,"context_line":"you can expect abysmal performance of your Octavia-enabled devstack.)"},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"The devstack environment we recommend should be running Ubuntu Linux 14.04 or"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_5708ee2d","line":51,"range":{"start_line":51,"start_character":37,"end_line":51,"end_character":64},"in_reply_to":"fa7ab95a_b4a063f5","updated":"2016-08-31 04:48:17.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":62,"context_line":"----------"},{"line_number":63,"context_line":"1. Deploy an Ubuntu 14.04 or later Linux host with at least 8GB of RAM. (This"},{"line_number":64,"context_line":"   can be a VM, but again, make sure you have virtualization features enabled"},{"line_number":65,"context_line":"   in your BIOS and virtualization software.)"},{"line_number":66,"context_line":"2. Copy ``devstack/contrib/new-octavia-devstack.sh`` from this source"},{"line_number":67,"context_line":"   repository onto that host."},{"line_number":68,"context_line":"3. Run new-octavia-devstack.sh as root."}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_94eb5f12","line":65,"range":{"start_line":65,"start_character":20,"end_line":65,"end_character":43},"updated":"2016-08-30 21:29:58.000000000","message":"Maybe mention nested virtualization here as well.","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":62,"context_line":"----------"},{"line_number":63,"context_line":"1. Deploy an Ubuntu 14.04 or later Linux host with at least 8GB of RAM. (This"},{"line_number":64,"context_line":"   can be a VM, but again, make sure you have virtualization features enabled"},{"line_number":65,"context_line":"   in your BIOS and virtualization software.)"},{"line_number":66,"context_line":"2. Copy ``devstack/contrib/new-octavia-devstack.sh`` from this source"},{"line_number":67,"context_line":"   repository onto that host."},{"line_number":68,"context_line":"3. Run new-octavia-devstack.sh as root."}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_5113920d","line":65,"range":{"start_line":65,"start_character":20,"end_line":65,"end_character":43},"in_reply_to":"fa7ab95a_94eb5f12","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":96,"context_line":"environment to aid in achieving scalability and resiliency for the Octavia load"},{"line_number":97,"context_line":"balancing system."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"In the interests of keeping this guide somewhat high-level and avoiding"},{"line_number":100,"context_line":"obsolescence or operator- or distribution-specific environment assumptions by"},{"line_number":101,"context_line":"specifying exact commands that should be run to accomplish the tasks below, we"},{"line_number":102,"context_line":"will instead just describe what needs to be done and leave it to the cloud"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_b40a23d0","line":99,"range":{"start_line":99,"start_character":7,"end_line":99,"end_character":16},"updated":"2016-08-30 21:29:58.000000000","message":"interest","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":96,"context_line":"environment to aid in achieving scalability and resiliency for the Octavia load"},{"line_number":97,"context_line":"balancing system."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"In the interests of keeping this guide somewhat high-level and avoiding"},{"line_number":100,"context_line":"obsolescence or operator- or distribution-specific environment assumptions by"},{"line_number":101,"context_line":"specifying exact commands that should be run to accomplish the tasks below, we"},{"line_number":102,"context_line":"will instead just describe what needs to be done and leave it to the cloud"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_d1ffa2a8","line":99,"range":{"start_line":99,"start_character":7,"end_line":99,"end_character":16},"in_reply_to":"fa7ab95a_b40a23d0","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":97,"context_line":"balancing system."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"In the interests of keeping this guide somewhat high-level and avoiding"},{"line_number":100,"context_line":"obsolescence or operator- or distribution-specific environment assumptions by"},{"line_number":101,"context_line":"specifying exact commands that should be run to accomplish the tasks below, we"},{"line_number":102,"context_line":"will instead just describe what needs to be done and leave it to the cloud"},{"line_number":103,"context_line":"operator or distribution creator to \"do the right thing\" to accomplish the task"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_d4db274d","line":100,"range":{"start_line":100,"start_character":24,"end_line":100,"end_character":29},"updated":"2016-08-30 21:29:58.000000000","message":"Maybe just a /?","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":97,"context_line":"balancing system."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"In the interests of keeping this guide somewhat high-level and avoiding"},{"line_number":100,"context_line":"obsolescence or operator- or distribution-specific environment assumptions by"},{"line_number":101,"context_line":"specifying exact commands that should be run to accomplish the tasks below, we"},{"line_number":102,"context_line":"will instead just describe what needs to be done and leave it to the cloud"},{"line_number":103,"context_line":"operator or distribution creator to \"do the right thing\" to accomplish the task"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_512ab22d","line":100,"range":{"start_line":100,"start_character":24,"end_line":100,"end_character":29},"in_reply_to":"fa7ab95a_d4db274d","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":124,"context_line":"* Barbican (if TLS offloading functionality is enabled)"},{"line_number":125,"context_line":"* Keystone"},{"line_number":126,"context_line":"* Oslo messaging"},{"line_number":127,"context_line":""},{"line_number":128,"context_line":""},{"line_number":129,"context_line":"Production Deployment Walkthrough"},{"line_number":130,"context_line":"---------------------------------"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_54c71763","line":127,"updated":"2016-08-30 21:29:58.000000000","message":"mysql?","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":124,"context_line":"* Barbican (if TLS offloading functionality is enabled)"},{"line_number":125,"context_line":"* Keystone"},{"line_number":126,"context_line":"* Oslo messaging"},{"line_number":127,"context_line":""},{"line_number":128,"context_line":""},{"line_number":129,"context_line":"Production Deployment Walkthrough"},{"line_number":130,"context_line":"---------------------------------"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_b1193e25","line":127,"in_reply_to":"fa7ab95a_54c71763","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":17419,"name":"Banashankar k","email":"banveerad@gmail.com","username":"banveerad"},"change_message_id":"a5d614be6f13ba9cf953ace515bafecb161801d6","unresolved":false,"context_lines":[{"line_number":138,"context_line":"You must:"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":141,"context_line":"* Add the \u0027service\u0027 role to this user."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"Load Balancer Network Configuration"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_f4a66b0d","line":141,"range":{"start_line":141,"start_character":11,"end_line":141,"end_character":18},"updated":"2016-08-30 20:59:04.000000000","message":"are we sure it works fine with just the service role. I think we need to add the admin role also.","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":138,"context_line":"You must:"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":141,"context_line":"* Add the \u0027service\u0027 role to this user."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"Load Balancer Network Configuration"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_f1d10631","line":141,"range":{"start_line":141,"start_character":11,"end_line":141,"end_character":18},"in_reply_to":"fa7ab95a_f4a66b0d","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":144,"context_line":"Load Balancer Network Configuration"},{"line_number":145,"context_line":"___________________________________"},{"line_number":146,"context_line":"Octavia makes use of an \"LB Network\" mostly as a management network that the"},{"line_number":147,"context_line":"controller uses to talk to amphorae and vice versa. However, in some topologies"},{"line_number":148,"context_line":"this network also ends up being part of the data path. This in particular will"},{"line_number":149,"context_line":"happen when members are added without a corresponding tenant subnet-- in these"},{"line_number":150,"context_line":"cases the amphora will use default routing to attempt to reach the member IP."},{"line_number":151,"context_line":"Default routing for amphorae is over the LB network."},{"line_number":152,"context_line":""},{"line_number":153,"context_line":"All the amphorae that Octavia deploys will have interfaces and IP addresses on"},{"line_number":154,"context_line":"this network. Therefore, it\u0027s important that the subnet deployed on this"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_346b731f","line":151,"range":{"start_line":147,"start_character":52,"end_line":151,"end_character":52},"updated":"2016-08-30 21:29:58.000000000","message":"This is not the case (at least anymore).\nWith the network namespace, tenant traffic cannot reach the management network at all.  Security!\nThe default route is out the VIP network.","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":144,"context_line":"Load Balancer Network Configuration"},{"line_number":145,"context_line":"___________________________________"},{"line_number":146,"context_line":"Octavia makes use of an \"LB Network\" mostly as a management network that the"},{"line_number":147,"context_line":"controller uses to talk to amphorae and vice versa. However, in some topologies"},{"line_number":148,"context_line":"this network also ends up being part of the data path. This in particular will"},{"line_number":149,"context_line":"happen when members are added without a corresponding tenant subnet-- in these"},{"line_number":150,"context_line":"cases the amphora will use default routing to attempt to reach the member IP."},{"line_number":151,"context_line":"Default routing for amphorae is over the LB network."},{"line_number":152,"context_line":""},{"line_number":153,"context_line":"All the amphorae that Octavia deploys will have interfaces and IP addresses on"},{"line_number":154,"context_line":"this network. Therefore, it\u0027s important that the subnet deployed on this"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_b1c77e63","line":151,"range":{"start_line":147,"start_character":52,"end_line":151,"end_character":52},"in_reply_to":"fa7ab95a_346b731f","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":157,"context_line":"installation."},{"line_number":158,"context_line":""},{"line_number":159,"context_line":"You must also create a Neutron security group which will be applied to amphorae"},{"line_number":160,"context_line":"created on the LB network. It needs to allow all egress packets, and ingress on"},{"line_number":161,"context_line":"the amphora\u0027s API (by default, TCP port 9443). It can also be helpful to allow"},{"line_number":162,"context_line":"SSH access to the amphorae from the controller for troubleshooting purposes"},{"line_number":163,"context_line":"(ie. TCP port 22)."}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_f4e90b80","line":160,"range":{"start_line":160,"start_character":27,"end_line":160,"end_character":64},"updated":"2016-08-30 21:29:58.000000000","message":"Technically all we need is 9443/TCP to the amps and 5555/UDP to the health managers.   SSH is optional.  So, we should probably remove this about wide open egress.","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":157,"context_line":"installation."},{"line_number":158,"context_line":""},{"line_number":159,"context_line":"You must also create a Neutron security group which will be applied to amphorae"},{"line_number":160,"context_line":"created on the LB network. It needs to allow all egress packets, and ingress on"},{"line_number":161,"context_line":"the amphora\u0027s API (by default, TCP port 9443). It can also be helpful to allow"},{"line_number":162,"context_line":"SSH access to the amphorae from the controller for troubleshooting purposes"},{"line_number":163,"context_line":"(ie. TCP port 22)."}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_b175be33","line":160,"range":{"start_line":160,"start_character":27,"end_line":160,"end_character":64},"in_reply_to":"fa7ab95a_f4e90b80","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":17419,"name":"Banashankar k","email":"banveerad@gmail.com","username":"banveerad"},"change_message_id":"a5d614be6f13ba9cf953ace515bafecb161801d6","unresolved":false,"context_lines":[{"line_number":175,"context_line":"You must:"},{"line_number":176,"context_line":""},{"line_number":177,"context_line":"* Create the \u0027lb-mgmt-net\u0027."},{"line_number":178,"context_line":"* Assign the \u0027lb-mgmt-net\u0027 to the admin tenant."},{"line_number":179,"context_line":"* Create a subnet and assign it to the \u0027lb-mgmt-net\u0027."},{"line_number":180,"context_line":"* Create neutron security group for amphorae created on the \u0027lb-mgmt-net\u0027."},{"line_number":181,"context_line":"  which allows appropriate access to the amphorae."}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_94843f5e","line":178,"range":{"start_line":178,"start_character":34,"end_line":178,"end_character":39},"updated":"2016-08-30 20:59:04.000000000","message":"any reason we want to do this with admin user?","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":175,"context_line":"You must:"},{"line_number":176,"context_line":""},{"line_number":177,"context_line":"* Create the \u0027lb-mgmt-net\u0027."},{"line_number":178,"context_line":"* Assign the \u0027lb-mgmt-net\u0027 to the admin tenant."},{"line_number":179,"context_line":"* Create a subnet and assign it to the \u0027lb-mgmt-net\u0027."},{"line_number":180,"context_line":"* Create neutron security group for amphorae created on the \u0027lb-mgmt-net\u0027."},{"line_number":181,"context_line":"  which allows appropriate access to the amphorae."}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_f18d862b","line":178,"range":{"start_line":178,"start_character":34,"end_line":178,"end_character":39},"in_reply_to":"fa7ab95a_94843f5e","updated":"2016-09-09 05:28:05.000000000","message":"I think that\u0027s simply how it\u0027s done right now; Have you tested this using some other user?","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":198,"context_line":""},{"line_number":199,"context_line":"* Create amphora disk image using OpenStack diskimage-builder."},{"line_number":200,"context_line":"* Create a Nova flavor for the amphorae."},{"line_number":201,"context_line":"* Add amphora disk image to nova / glance."},{"line_number":202,"context_line":""},{"line_number":203,"context_line":""},{"line_number":204,"context_line":"Install Octavia Controller Software"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_5480f78a","line":201,"range":{"start_line":201,"start_character":28,"end_line":201,"end_character":34},"updated":"2016-08-30 21:29:58.000000000","message":"no nova here.\nglance\n\nWe also need to mention the glance tag required","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":198,"context_line":""},{"line_number":199,"context_line":"* Create amphora disk image using OpenStack diskimage-builder."},{"line_number":200,"context_line":"* Create a Nova flavor for the amphorae."},{"line_number":201,"context_line":"* Add amphora disk image to nova / glance."},{"line_number":202,"context_line":""},{"line_number":203,"context_line":""},{"line_number":204,"context_line":"Install Octavia Controller Software"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_71a2569c","line":201,"range":{"start_line":201,"start_character":28,"end_line":201,"end_character":34},"in_reply_to":"fa7ab95a_5480f78a","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":23377,"name":"Ben Carr","email":"carrbens@gmail.com","username":"carrbs"},"change_message_id":"539c929f74d30cd61d5606157c64ebe89d28025d","unresolved":false,"context_lines":[{"line_number":207,"context_line":"should put this somewhere on the network where it will have access to the"},{"line_number":208,"context_line":"database (to be initialized below), the oslo messaging system, and the LB"},{"line_number":209,"context_line":"network. Octavia uses the standard python setuptools, so installation of the"},{"line_number":210,"context_line":"software itself should be straight forward."},{"line_number":211,"context_line":""},{"line_number":212,"context_line":"One important security note: As of version 0.8 of Octavia, the Octavia API is"},{"line_number":213,"context_line":"designed to be consumed only by the Neutron-LBaaS v2 Octavia driver. As such,"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_69d99683","line":210,"range":{"start_line":210,"start_character":26,"end_line":210,"end_character":42},"updated":"2016-08-31 04:48:17.000000000","message":"straightforward","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":207,"context_line":"should put this somewhere on the network where it will have access to the"},{"line_number":208,"context_line":"database (to be initialized below), the oslo messaging system, and the LB"},{"line_number":209,"context_line":"network. Octavia uses the standard python setuptools, so installation of the"},{"line_number":210,"context_line":"software itself should be straight forward."},{"line_number":211,"context_line":""},{"line_number":212,"context_line":"One important security note: As of version 0.8 of Octavia, the Octavia API is"},{"line_number":213,"context_line":"designed to be consumed only by the Neutron-LBaaS v2 Octavia driver. As such,"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_919fda4f","line":210,"range":{"start_line":210,"start_character":26,"end_line":210,"end_character":42},"in_reply_to":"fa7ab95a_69d99683","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":230,"context_line":"+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+"},{"line_number":231,"context_line":"| controller worker | Yes        | Yes      | Yes            |"},{"line_number":232,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":233,"context_line":"| health monitor    | Yes        | Yes      | Yes            |"},{"line_number":234,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":235,"context_line":"| housekeeper       | Yes        | Yes      | Yes            |"},{"line_number":236,"context_line":"+-------------------+------------+----------+----------------+"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_af048c14","line":233,"range":{"start_line":233,"start_character":46,"end_line":233,"end_character":50},"updated":"2016-08-30 21:29:58.000000000","message":"No","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":230,"context_line":"+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d+"},{"line_number":231,"context_line":"| controller worker | Yes        | Yes      | Yes            |"},{"line_number":232,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":233,"context_line":"| health monitor    | Yes        | Yes      | Yes            |"},{"line_number":234,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":235,"context_line":"| housekeeper       | Yes        | Yes      | Yes            |"},{"line_number":236,"context_line":"+-------------------+------------+----------+----------------+"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_d1a9627d","line":233,"range":{"start_line":233,"start_character":46,"end_line":233,"end_character":50},"in_reply_to":"fa7ab95a_af048c14","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":232,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":233,"context_line":"| health monitor    | Yes        | Yes      | Yes            |"},{"line_number":234,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":235,"context_line":"| housekeeper       | Yes        | Yes      | Yes            |"},{"line_number":236,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":237,"context_line":"| API               | No         | Yes      | Yes            |"},{"line_number":238,"context_line":"+-------------------+------------+----------+----------------+"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_cf071016","line":235,"range":{"start_line":235,"start_character":46,"end_line":235,"end_character":50},"updated":"2016-08-30 21:29:58.000000000","message":"No","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":232,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":233,"context_line":"| health monitor    | Yes        | Yes      | Yes            |"},{"line_number":234,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":235,"context_line":"| housekeeper       | Yes        | Yes      | Yes            |"},{"line_number":236,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":237,"context_line":"| API               | No         | Yes      | Yes            |"},{"line_number":238,"context_line":"+-------------------+------------+----------+----------------+"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_f1b4a6d5","line":235,"range":{"start_line":235,"start_character":46,"end_line":235,"end_character":50},"in_reply_to":"fa7ab95a_cf071016","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":252,"context_line":"___________________________"},{"line_number":253,"context_line":"Octavia presently allows for one method for the controller to communicate with"},{"line_number":254,"context_line":"amphorae: The amphora REST API. Both amphora API and Octavia controller do"},{"line_number":255,"context_line":"bi-directional certificate-based authentication in order to authorize and"},{"line_number":256,"context_line":"encrypt communication. You must therefore create appropriate SSL certificates"},{"line_number":257,"context_line":"which will be used for key signing, authentication, and encryption. There is a"},{"line_number":258,"context_line":"helper script to do this in this repository under:"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_0f3d78c3","line":255,"range":{"start_line":255,"start_character":60,"end_line":255,"end_character":69},"updated":"2016-08-30 21:29:58.000000000","message":"authenticate","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":252,"context_line":"___________________________"},{"line_number":253,"context_line":"Octavia presently allows for one method for the controller to communicate with"},{"line_number":254,"context_line":"amphorae: The amphora REST API. Both amphora API and Octavia controller do"},{"line_number":255,"context_line":"bi-directional certificate-based authentication in order to authorize and"},{"line_number":256,"context_line":"encrypt communication. You must therefore create appropriate SSL certificates"},{"line_number":257,"context_line":"which will be used for key signing, authentication, and encryption. There is a"},{"line_number":258,"context_line":"helper script to do this in this repository under:"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_11baeac0","line":255,"range":{"start_line":255,"start_character":60,"end_line":255,"end_character":69},"in_reply_to":"fa7ab95a_0f3d78c3","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":256,"context_line":"encrypt communication. You must therefore create appropriate SSL certificates"},{"line_number":257,"context_line":"which will be used for key signing, authentication, and encryption. There is a"},{"line_number":258,"context_line":"helper script to do this in this repository under:"},{"line_number":259,"context_line":"``bin/create_certficiates.sh``"},{"line_number":260,"context_line":""},{"line_number":261,"context_line":"In addition to the above, it can sometimes be useful for cloud operators to log"},{"line_number":262,"context_line":"into running amphorae to troubleshoot problems. The standard method for doing"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_cf3f1085","line":259,"updated":"2016-08-30 21:29:58.000000000","message":"We should put a warning that these certificates may not be appropriate for production use and the operator should follow their own certificate security guidelines.\n\nI.e. these are self signed, have default passwords, arbitrary bit lengths, arbitrator expiration dates,  etc.","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":256,"context_line":"encrypt communication. You must therefore create appropriate SSL certificates"},{"line_number":257,"context_line":"which will be used for key signing, authentication, and encryption. There is a"},{"line_number":258,"context_line":"helper script to do this in this repository under:"},{"line_number":259,"context_line":"``bin/create_certficiates.sh``"},{"line_number":260,"context_line":""},{"line_number":261,"context_line":"In addition to the above, it can sometimes be useful for cloud operators to log"},{"line_number":262,"context_line":"into running amphorae to troubleshoot problems. The standard method for doing"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_f102e671","line":259,"in_reply_to":"fa7ab95a_cf3f1085","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":262,"context_line":"into running amphorae to troubleshoot problems. The standard method for doing"},{"line_number":263,"context_line":"this is to use SSH from the host running the controller worker. In order to do"},{"line_number":264,"context_line":"this, you must create an SSH public/private key pair specific to your cloud"},{"line_number":265,"context_line":"(for obvious security reasons). You will need to pass the path to this key to"},{"line_number":266,"context_line":"Octavia in the configuration below. You must also add this keypair to nova so"},{"line_number":267,"context_line":"that amphorae are initialized with it on boot."},{"line_number":268,"context_line":""},{"line_number":269,"context_line":"See the Troubleshooting Tips section below for an example of how an operator"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_2f66bcec","line":266,"range":{"start_line":265,"start_character":32,"end_line":266,"end_character":35},"updated":"2016-08-30 21:29:58.000000000","message":"No, the configuration setting in octavia.conf is the keypair name used to load the key into nova","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":262,"context_line":"into running amphorae to troubleshoot problems. The standard method for doing"},{"line_number":263,"context_line":"this is to use SSH from the host running the controller worker. In order to do"},{"line_number":264,"context_line":"this, you must create an SSH public/private key pair specific to your cloud"},{"line_number":265,"context_line":"(for obvious security reasons). You will need to pass the path to this key to"},{"line_number":266,"context_line":"Octavia in the configuration below. You must also add this keypair to nova so"},{"line_number":267,"context_line":"that amphorae are initialized with it on boot."},{"line_number":268,"context_line":""},{"line_number":269,"context_line":"See the Troubleshooting Tips section below for an example of how an operator"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_b1769e04","line":266,"range":{"start_line":265,"start_character":32,"end_line":266,"end_character":35},"in_reply_to":"fa7ab95a_2f66bcec","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":23377,"name":"Ben Carr","email":"carrbens@gmail.com","username":"carrbs"},"change_message_id":"539c929f74d30cd61d5606157c64ebe89d28025d","unresolved":false,"context_lines":[{"line_number":303,"context_line":"controller worker is installed."},{"line_number":304,"context_line":""},{"line_number":305,"context_line":"It\u0027s also important to note here that all of the components of the Octavia"},{"line_number":306,"context_line":"controller will need direct access to the database (including the API hander),"},{"line_number":307,"context_line":"so you must ensure these components are able to communicate with whichever host"},{"line_number":308,"context_line":"is housing your database."},{"line_number":309,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_a9163eef","line":306,"range":{"start_line":306,"start_character":70,"end_line":306,"end_character":76},"updated":"2016-08-31 04:48:17.000000000","message":"handler?","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":303,"context_line":"controller worker is installed."},{"line_number":304,"context_line":""},{"line_number":305,"context_line":"It\u0027s also important to note here that all of the components of the Octavia"},{"line_number":306,"context_line":"controller will need direct access to the database (including the API hander),"},{"line_number":307,"context_line":"so you must ensure these components are able to communicate with whichever host"},{"line_number":308,"context_line":"is housing your database."},{"line_number":309,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_1164aa47","line":306,"range":{"start_line":306,"start_character":70,"end_line":306,"end_character":76},"in_reply_to":"fa7ab95a_a9163eef","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":317,"context_line":""},{"line_number":318,"context_line":"Spares pool considerations"},{"line_number":319,"context_line":"__________________________"},{"line_number":320,"context_line":"One configuration directive deserves some extra consideration in this document:"},{"line_number":321,"context_line":""},{"line_number":322,"context_line":"Depending on the specifics of your production environment, you may decide to"},{"line_number":323,"context_line":"run Octavia with a non-empty \"spares pool.\" Since the time it takes to spin up"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_2f1ebc0b","line":320,"range":{"start_line":320,"start_character":78,"end_line":320,"end_character":79},"updated":"2016-08-30 21:29:58.000000000","message":".?","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":317,"context_line":""},{"line_number":318,"context_line":"Spares pool considerations"},{"line_number":319,"context_line":"__________________________"},{"line_number":320,"context_line":"One configuration directive deserves some extra consideration in this document:"},{"line_number":321,"context_line":""},{"line_number":322,"context_line":"Depending on the specifics of your production environment, you may decide to"},{"line_number":323,"context_line":"run Octavia with a non-empty \"spares pool.\" Since the time it takes to spin up"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_9150ba60","line":320,"range":{"start_line":320,"start_character":78,"end_line":320,"end_character":79},"in_reply_to":"fa7ab95a_2f1ebc0b","updated":"2016-09-09 05:28:05.000000000","message":"I think a colon is OK here, as it indicates the thought brought up in the sentence isn\u0027t complete and brings attention to what comes right afterward.","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":334,"context_line":""},{"line_number":335,"context_line":"Launching the Octavia Controller"},{"line_number":336,"context_line":"________________________________"},{"line_number":337,"context_line":"We recommend using init / upstart / systemd scripts to ensure the components of"},{"line_number":338,"context_line":"the Octavia controller are all started and kept running. It of course doesn\u0027t"},{"line_number":339,"context_line":"hurt to first start by running these manually to ensure configuration and"},{"line_number":340,"context_line":"communication is working between all the components."}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_6fc28454","line":337,"range":{"start_line":337,"start_character":19,"end_line":337,"end_character":23},"updated":"2016-08-30 21:29:58.000000000","message":"Can we not recommend init?  It doesn\u0027t natively support respawn","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":334,"context_line":""},{"line_number":335,"context_line":"Launching the Octavia Controller"},{"line_number":336,"context_line":"________________________________"},{"line_number":337,"context_line":"We recommend using init / upstart / systemd scripts to ensure the components of"},{"line_number":338,"context_line":"the Octavia controller are all started and kept running. It of course doesn\u0027t"},{"line_number":339,"context_line":"hurt to first start by running these manually to ensure configuration and"},{"line_number":340,"context_line":"communication is working between all the components."}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_11cbca1f","line":337,"range":{"start_line":337,"start_character":19,"end_line":337,"end_character":23},"in_reply_to":"fa7ab95a_6fc28454","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":23377,"name":"Ben Carr","email":"carrbens@gmail.com","username":"carrbs"},"change_message_id":"539c929f74d30cd61d5606157c64ebe89d28025d","unresolved":false,"context_lines":[{"line_number":346,"context_line":""},{"line_number":347,"context_line":"Configuring Neutron LBaaS"},{"line_number":348,"context_line":"_________________________"},{"line_number":349,"context_line":"This is fairly straight-forward. Neutron LBaaS needs to be directed to use the"},{"line_number":350,"context_line":"Octavia service provider. There should be a line like the following in"},{"line_number":351,"context_line":"``/etc/neutron/neutron_lbaas.conf`` file\u0027s ``[service providers]`` section:"},{"line_number":352,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_e9bda6d8","line":349,"range":{"start_line":349,"start_character":15,"end_line":349,"end_character":31},"updated":"2016-08-31 04:48:17.000000000","message":"straightforward","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":346,"context_line":""},{"line_number":347,"context_line":"Configuring Neutron LBaaS"},{"line_number":348,"context_line":"_________________________"},{"line_number":349,"context_line":"This is fairly straight-forward. Neutron LBaaS needs to be directed to use the"},{"line_number":350,"context_line":"Octavia service provider. There should be a line like the following in"},{"line_number":351,"context_line":"``/etc/neutron/neutron_lbaas.conf`` file\u0027s ``[service providers]`` section:"},{"line_number":352,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_51d552b7","line":349,"range":{"start_line":349,"start_character":15,"end_line":349,"end_character":31},"in_reply_to":"fa7ab95a_e9bda6d8","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d019c2cb86e60a748eb046aa19d81bc9559a873a","unresolved":false,"context_lines":[{"line_number":394,"context_line":""},{"line_number":395,"context_line":"Upon executing the above, log files should indicate that an amphora is deployed"},{"line_number":396,"context_line":"to house the load balancer, and that this load balancer is further modified to"},{"line_number":397,"context_line":"include a listener. The amphora should be visible using the ``nova list``"},{"line_number":398,"context_line":"command, and the listener should respond on the load balancer\u0027s IP on port 80"},{"line_number":399,"context_line":"(with an error 503 in this case, since no pool or members have been defined"},{"line_number":400,"context_line":"yet-- but this is usually enough to see that the Octavia load balancing system"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_6fa7e4a6","line":397,"range":{"start_line":397,"start_character":20,"end_line":397,"end_character":49},"updated":"2016-08-30 21:29:58.000000000","message":"Only to the octavia or admin tenant.  Users will not see these.","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"602e7da8d794a0756c43337c6114ee870e54bb24","unresolved":false,"context_lines":[{"line_number":394,"context_line":""},{"line_number":395,"context_line":"Upon executing the above, log files should indicate that an amphora is deployed"},{"line_number":396,"context_line":"to house the load balancer, and that this load balancer is further modified to"},{"line_number":397,"context_line":"include a listener. The amphora should be visible using the ``nova list``"},{"line_number":398,"context_line":"command, and the listener should respond on the load balancer\u0027s IP on port 80"},{"line_number":399,"context_line":"(with an error 503 in this case, since no pool or members have been defined"},{"line_number":400,"context_line":"yet-- but this is usually enough to see that the Octavia load balancing system"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a89bdaa_d1e1629c","line":397,"range":{"start_line":397,"start_character":20,"end_line":397,"end_character":49},"in_reply_to":"fa7ab95a_6fa7e4a6","updated":"2016-09-09 05:28:05.000000000","message":"Done","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":17419,"name":"Banashankar k","email":"banveerad@gmail.com","username":"banveerad"},"change_message_id":"f0b3c2c81573316545174471eeebed4e32ecbdfd","unresolved":false,"context_lines":[{"line_number":138,"context_line":"You must:"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":141,"context_line":"* Add the \u0027service\u0027 role to this user."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"Load Balancer Network Configuration"}],"source_content_type":"text/x-rst","patch_set":9,"id":"fa7ab95a_dcd902f5","line":141,"range":{"start_line":141,"start_character":11,"end_line":141,"end_character":18},"updated":"2016-09-01 19:06:42.000000000","message":"I think we need to discuss about the adding admin role","commit_id":"2c9581618a67f5dd1c386331dceb2fa9f1bd4a46"},{"author":{"_account_id":17419,"name":"Banashankar k","email":"banveerad@gmail.com","username":"banveerad"},"change_message_id":"5ee16555baca88cbf376eb5df23e9b64e4c663bb","unresolved":false,"context_lines":[{"line_number":138,"context_line":"You must:"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":141,"context_line":"* Add the \u0027service\u0027 role to this user."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"Load Balancer Network Configuration"}],"source_content_type":"text/x-rst","patch_set":9,"id":"9a89bdaa_ecdae4e8","line":141,"range":{"start_line":141,"start_character":11,"end_line":141,"end_character":18},"in_reply_to":"9a89bdaa_71c3368b","updated":"2016-09-09 17:31:03.000000000","message":"I was testign out this patch https://review.openstack.org/#/c/364655/11. with this patch octavia user with just service role works fine. But as of now it needs admin also. \n\nYes that makes sense.","commit_id":"2c9581618a67f5dd1c386331dceb2fa9f1bd4a46"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"2ea3c5a827835cdf2c9d4d65e469735906be92a1","unresolved":false,"context_lines":[{"line_number":138,"context_line":"You must:"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":141,"context_line":"* Add the \u0027service\u0027 role to this user."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"Load Balancer Network Configuration"}],"source_content_type":"text/x-rst","patch_set":9,"id":"9a89bdaa_71c3368b","line":141,"range":{"start_line":141,"start_character":11,"end_line":141,"end_character":18},"in_reply_to":"fa7ab95a_dcd902f5","updated":"2016-09-09 05:28:17.000000000","message":"Yeah, we are not going to get the patch in for Newton for us to be able to use the \u0027service\u0027 role here, so I\u0027ll change this to \u0027admin\u0027 for now, and we\u0027ll have to update this doc when said patch makes it in.","commit_id":"2c9581618a67f5dd1c386331dceb2fa9f1bd4a46"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"e9a1c7b9f597a28af4216605b773ca0b83f4cbab","unresolved":false,"context_lines":[{"line_number":134,"context_line":""},{"line_number":135,"context_line":"Create Octavia User"},{"line_number":136,"context_line":"___________________"},{"line_number":137,"context_line":"By default Octavia will use the \u0027neutron\u0027 user. However, it doesn\u0027t actually"},{"line_number":138,"context_line":"share neutron\u0027s database or otherwise access Neutron outside of Neutron\u0027s API,"},{"line_number":139,"context_line":"so a dedicated \u0027octavia\u0027 user should generally be created for Octavia to use."},{"line_number":140,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_58da614c","line":137,"range":{"start_line":137,"start_character":33,"end_line":137,"end_character":40},"updated":"2016-09-12 15:30:42.000000000","message":"But this user is only used to verify keystone tokens. Admin user is used to authenticate in Nova/Neutron/Barbican","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"e6acf7a4ffd600f1a1b4e2d5f29b471e1a39646b","unresolved":false,"context_lines":[{"line_number":134,"context_line":""},{"line_number":135,"context_line":"Create Octavia User"},{"line_number":136,"context_line":"___________________"},{"line_number":137,"context_line":"By default Octavia will use the \u0027neutron\u0027 user. However, it doesn\u0027t actually"},{"line_number":138,"context_line":"share neutron\u0027s database or otherwise access Neutron outside of Neutron\u0027s API,"},{"line_number":139,"context_line":"so a dedicated \u0027octavia\u0027 user should generally be created for Octavia to use."},{"line_number":140,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_f0933c59","line":137,"range":{"start_line":137,"start_character":33,"end_line":137,"end_character":40},"in_reply_to":"9a89bdaa_58da614c","updated":"2016-09-12 21:10:41.000000000","message":"Done","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"e9a1c7b9f597a28af4216605b773ca0b83f4cbab","unresolved":false,"context_lines":[{"line_number":140,"context_line":""},{"line_number":141,"context_line":"You must:"},{"line_number":142,"context_line":""},{"line_number":143,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":144,"context_line":"* Add the \u0027admin\u0027 role to this user."},{"line_number":145,"context_line":""},{"line_number":146,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_9ecf717e","line":143,"range":{"start_line":143,"start_character":10,"end_line":143,"end_character":17},"updated":"2016-09-12 15:30:42.000000000","message":"octavia user should be a user belonging to service group.\nalso we can add some \"octavia_manager\" admin user which will be used to communicate with nova/neutron/glance/barbican.","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"22fa014a8cc1adeb3a4d3c692c466aa0b353bf43","unresolved":false,"context_lines":[{"line_number":140,"context_line":""},{"line_number":141,"context_line":"You must:"},{"line_number":142,"context_line":""},{"line_number":143,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":144,"context_line":"* Add the \u0027admin\u0027 role to this user."},{"line_number":145,"context_line":""},{"line_number":146,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_8617e7a1","line":143,"range":{"start_line":143,"start_character":10,"end_line":143,"end_character":17},"in_reply_to":"9a89bdaa_8bf9ba50","updated":"2016-09-13 15:46:14.000000000","message":"Ok, I think maybe you misunderstood the point of this documentation:\n\nThis document is meant to give people instructions for actually using Octavia as it is ACTUALLY in the tree right now. This means we don\u0027t put things in this document that don\u0027t actually work or aren\u0027t tested to work RIGHT NOW.\n\nIf you create a patch which changes some of the aspects of these instructions (like, say, using an \u0027octavia_manager\u0027 account), then guess what? It\u0027s your responsibility to update these instructions to reflect the new reality!\n\nI am 0% interested in creating instructions that don\u0027t work with the current state of the code in which they\u0027re found. Hell, our documentation exists in our repository with the code it\u0027s implementing. There is absolutely no reason these instructions can\u0027t be kept in synch with whatever the \"current\" best practice is based on the code in the exact same revision of this document.\n\nPlease also understand that your keystone patch will not merge before Newton is tagged, but these instructions better damned well merge. If your keystone patch has the effect of changing these instructions somehow, then part of your patch had better be updating these instructions. (Might also want to put a release note in.)\n\nSo, having said this: Is there anything about this particular section of this document that is not correct or doesn\u0027t work with the state of the code tree RIGHT NOW?","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"e6acf7a4ffd600f1a1b4e2d5f29b471e1a39646b","unresolved":false,"context_lines":[{"line_number":140,"context_line":""},{"line_number":141,"context_line":"You must:"},{"line_number":142,"context_line":""},{"line_number":143,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":144,"context_line":"* Add the \u0027admin\u0027 role to this user."},{"line_number":145,"context_line":""},{"line_number":146,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_f0cfbc53","line":143,"range":{"start_line":143,"start_character":10,"end_line":143,"end_character":17},"in_reply_to":"9a89bdaa_9ecf717e","updated":"2016-09-12 21:10:41.000000000","message":"So, that\u0027s what I had originally, and was told that the code doesn\u0027t actually work that way right now. So, what is correct at this time? I\u0027ve not heard of anyone using an \u0027octavia_manager\u0027 admin user for communication with external services. Do you have this deployed in production this way right now? If so, can you please give a break-down of exactly what users are created, what roles are created, and anything else that isn\u0027t yet covered in this document? (I\u0027m not going to go back and forth on this to piece-meal together the \"supported\" way of doing it, especially not if it\u0027s based on how one developer \"thinks\" it should work, instead of being based on an actual in-production deployment somewhere.)","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"43afa9708f982a827a8a1d91b3b53979c40aeaba","unresolved":false,"context_lines":[{"line_number":140,"context_line":""},{"line_number":141,"context_line":"You must:"},{"line_number":142,"context_line":""},{"line_number":143,"context_line":"* Create \u0027octavia\u0027 user."},{"line_number":144,"context_line":"* Add the \u0027admin\u0027 role to this user."},{"line_number":145,"context_line":""},{"line_number":146,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_8bf9ba50","line":143,"range":{"start_line":143,"start_character":10,"end_line":143,"end_character":17},"in_reply_to":"9a89bdaa_f0cfbc53","updated":"2016-09-13 13:32:50.000000000","message":"Right now we\u0027re using \"neutron\" service account to verify keystone tokens - what really is not implemented.\nWe\u0027re using \"admin\" normal user to communicate with neutron/nova/glance/barbican.\n\nThings look different after applying my code. I don\u0027t have anything right now how to use that \"octavia_manager\" account. I\u0027m planning to change that in future and reconfigure devstack plugin.sh for that.","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"e9a1c7b9f597a28af4216605b773ca0b83f4cbab","unresolved":false,"context_lines":[{"line_number":159,"context_line":""},{"line_number":160,"context_line":"You must also create a Neutron security group which will be applied to amphorae"},{"line_number":161,"context_line":"created on the LB network. It needs to allow amphorae to send UDP heartbeat"},{"line_number":162,"context_line":"packets to the health monitor (by default, UDP port 555), and ingress on the"},{"line_number":163,"context_line":"amphora\u0027s API (by default, TCP port 9443). It can also be helpful to allow SSH"},{"line_number":164,"context_line":"access to the amphorae from the controller for troubleshooting purposes (ie."},{"line_number":165,"context_line":"TCP port 22), though this is not strictly necessary in production environments."}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_5880a1bf","line":162,"range":{"start_line":162,"start_character":52,"end_line":162,"end_character":55},"updated":"2016-09-12 15:30:42.000000000","message":"5555","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"e6acf7a4ffd600f1a1b4e2d5f29b471e1a39646b","unresolved":false,"context_lines":[{"line_number":159,"context_line":""},{"line_number":160,"context_line":"You must also create a Neutron security group which will be applied to amphorae"},{"line_number":161,"context_line":"created on the LB network. It needs to allow amphorae to send UDP heartbeat"},{"line_number":162,"context_line":"packets to the health monitor (by default, UDP port 555), and ingress on the"},{"line_number":163,"context_line":"amphora\u0027s API (by default, TCP port 9443). It can also be helpful to allow SSH"},{"line_number":164,"context_line":"access to the amphorae from the controller for troubleshooting purposes (ie."},{"line_number":165,"context_line":"TCP port 22), though this is not strictly necessary in production environments."}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_5005c877","line":162,"range":{"start_line":162,"start_character":52,"end_line":162,"end_character":55},"in_reply_to":"9a89bdaa_5880a1bf","updated":"2016-09-12 21:10:41.000000000","message":"Done","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"e9a1c7b9f597a28af4216605b773ca0b83f4cbab","unresolved":false,"context_lines":[{"line_number":212,"context_line":"network. Octavia uses the standard python setuptools, so installation of the"},{"line_number":213,"context_line":"software itself should be straightforward."},{"line_number":214,"context_line":""},{"line_number":215,"context_line":"One important security note: As of version 0.8 of Octavia, the Octavia API is"},{"line_number":216,"context_line":"designed to be consumed only by the Neutron-LBaaS v2 Octavia driver. As such,"},{"line_number":217,"context_line":"there is presently no authentication required to use the Octavia API, and"},{"line_number":218,"context_line":"therefore the Octavia API should only be accessible on trusted network segments"}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_783d65dc","line":215,"range":{"start_line":215,"start_character":29,"end_line":215,"end_character":42},"updated":"2016-09-12 15:30:42.000000000","message":"To version","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"e6acf7a4ffd600f1a1b4e2d5f29b471e1a39646b","unresolved":false,"context_lines":[{"line_number":212,"context_line":"network. Octavia uses the standard python setuptools, so installation of the"},{"line_number":213,"context_line":"software itself should be straightforward."},{"line_number":214,"context_line":""},{"line_number":215,"context_line":"One important security note: As of version 0.8 of Octavia, the Octavia API is"},{"line_number":216,"context_line":"designed to be consumed only by the Neutron-LBaaS v2 Octavia driver. As such,"},{"line_number":217,"context_line":"there is presently no authentication required to use the Octavia API, and"},{"line_number":218,"context_line":"therefore the Octavia API should only be accessible on trusted network segments"}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_d06e382e","line":215,"range":{"start_line":215,"start_character":29,"end_line":215,"end_character":42},"in_reply_to":"9a89bdaa_783d65dc","updated":"2016-09-12 21:10:41.000000000","message":"No, \"As of version\" is correct, meaning \"in this version\". \"To version\" implies \"until version\", which would not be correct in this context.","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"22fa014a8cc1adeb3a4d3c692c466aa0b353bf43","unresolved":false,"context_lines":[{"line_number":212,"context_line":"network. Octavia uses the standard python setuptools, so installation of the"},{"line_number":213,"context_line":"software itself should be straightforward."},{"line_number":214,"context_line":""},{"line_number":215,"context_line":"One important security note: As of version 0.8 of Octavia, the Octavia API is"},{"line_number":216,"context_line":"designed to be consumed only by the Neutron-LBaaS v2 Octavia driver. As such,"},{"line_number":217,"context_line":"there is presently no authentication required to use the Octavia API, and"},{"line_number":218,"context_line":"therefore the Octavia API should only be accessible on trusted network segments"}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_86652746","line":215,"range":{"start_line":215,"start_character":29,"end_line":215,"end_character":42},"in_reply_to":"9a89bdaa_cb182287","updated":"2016-09-13 15:46:14.000000000","message":"These instructions are (and should always be) aimed at the current code, not the next release. If this statement becomes untrue in the next release, then this document should be updated AT THAT TIME and no sooner.","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"43afa9708f982a827a8a1d91b3b53979c40aeaba","unresolved":false,"context_lines":[{"line_number":212,"context_line":"network. Octavia uses the standard python setuptools, so installation of the"},{"line_number":213,"context_line":"software itself should be straightforward."},{"line_number":214,"context_line":""},{"line_number":215,"context_line":"One important security note: As of version 0.8 of Octavia, the Octavia API is"},{"line_number":216,"context_line":"designed to be consumed only by the Neutron-LBaaS v2 Octavia driver. As such,"},{"line_number":217,"context_line":"there is presently no authentication required to use the Octavia API, and"},{"line_number":218,"context_line":"therefore the Octavia API should only be accessible on trusted network segments"}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_cb182287","line":215,"range":{"start_line":215,"start_character":29,"end_line":215,"end_character":42},"in_reply_to":"9a89bdaa_d06e382e","updated":"2016-09-13 13:32:50.000000000","message":"But in version 1.0 so next release it will not be valid anymore.","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"e9a1c7b9f597a28af4216605b773ca0b83f4cbab","unresolved":false,"context_lines":[{"line_number":405,"context_line":"include a listener. The amphora should be visible to the octavia or admin"},{"line_number":406,"context_line":"tenant using the ``nova list`` command, and the listener should respond on the"},{"line_number":407,"context_line":"load balancer\u0027s IP on port 80 (with an error 503 in this case, since no pool or"},{"line_number":408,"context_line":"members have been defined yet-- but this is usually enough to see that the"},{"line_number":409,"context_line":"Octavia load balancing system is working). For more information on configuring"},{"line_number":410,"context_line":"load balancing services as a tenant, please see the end-user quick-start guide"},{"line_number":411,"context_line":"and cookbook."}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_de48195f","line":408,"updated":"2016-09-12 15:30:42.000000000","message":"missing space","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"e6acf7a4ffd600f1a1b4e2d5f29b471e1a39646b","unresolved":false,"context_lines":[{"line_number":405,"context_line":"include a listener. The amphora should be visible to the octavia or admin"},{"line_number":406,"context_line":"tenant using the ``nova list`` command, and the listener should respond on the"},{"line_number":407,"context_line":"load balancer\u0027s IP on port 80 (with an error 503 in this case, since no pool or"},{"line_number":408,"context_line":"members have been defined yet-- but this is usually enough to see that the"},{"line_number":409,"context_line":"Octavia load balancing system is working). For more information on configuring"},{"line_number":410,"context_line":"load balancing services as a tenant, please see the end-user quick-start guide"},{"line_number":411,"context_line":"and cookbook."}],"source_content_type":"text/x-rst","patch_set":10,"id":"9a89bdaa_70f48c5a","line":408,"in_reply_to":"9a89bdaa_de48195f","updated":"2016-09-12 21:10:41.000000000","message":"Actually, this should be an em-dash with no space. Correcting.","commit_id":"95d237acecbcba102070c529cd607a410fca31d1"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"68086b874c8427cb70dbfda9bbccf4f8630258f7","unresolved":false,"context_lines":[{"line_number":148,"context_line":""},{"line_number":149,"context_line":"Load Balancer Network Configuration"},{"line_number":150,"context_line":"___________________________________"},{"line_number":151,"context_line":"Octavia makes use of an \"LB Network\" mostly as a management network that the"},{"line_number":152,"context_line":"controller uses to talk to amphorae and vice versa. All the amphorae that"},{"line_number":153,"context_line":"Octavia deploys will have interfaces and IP addresses on this network."},{"line_number":154,"context_line":"Therefore, it\u0027s important that the subnet deployed on this network be"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_3bf8a5e5","line":151,"range":{"start_line":151,"start_character":37,"end_line":151,"end_character":44},"updated":"2016-09-14 04:03:39.000000000","message":"nit: Exclusively I think","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"86b855094caa8b04c2901fbbf19ddf0f21fe7293","unresolved":false,"context_lines":[{"line_number":148,"context_line":""},{"line_number":149,"context_line":"Load Balancer Network Configuration"},{"line_number":150,"context_line":"___________________________________"},{"line_number":151,"context_line":"Octavia makes use of an \"LB Network\" mostly as a management network that the"},{"line_number":152,"context_line":"controller uses to talk to amphorae and vice versa. All the amphorae that"},{"line_number":153,"context_line":"Octavia deploys will have interfaces and IP addresses on this network."},{"line_number":154,"context_line":"Therefore, it\u0027s important that the subnet deployed on this network be"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_50afdc93","line":151,"range":{"start_line":151,"start_character":37,"end_line":151,"end_character":44},"in_reply_to":"7a8ec9b2_3bf8a5e5","updated":"2016-09-14 17:28:48.000000000","message":"Done","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"68086b874c8427cb70dbfda9bbccf4f8630258f7","unresolved":false,"context_lines":[{"line_number":206,"context_line":"* Tag the above glance disk image with \u0027amphora\u0027."},{"line_number":207,"context_line":""},{"line_number":208,"context_line":""},{"line_number":209,"context_line":"Install Octavia Controller Software"},{"line_number":210,"context_line":"___________________________________"},{"line_number":211,"context_line":"This seems somewhat obvious, but the important things to note here are that you"},{"line_number":212,"context_line":"should put this somewhere on the network where it will have access to the"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_bbc11531","line":209,"updated":"2016-09-14 04:03:39.000000000","message":"nit: We could talk to the fact that we recommend installing mulitple (i.e. three) instances of these components to provide scalability and availability.","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"86b855094caa8b04c2901fbbf19ddf0f21fe7293","unresolved":false,"context_lines":[{"line_number":206,"context_line":"* Tag the above glance disk image with \u0027amphora\u0027."},{"line_number":207,"context_line":""},{"line_number":208,"context_line":""},{"line_number":209,"context_line":"Install Octavia Controller Software"},{"line_number":210,"context_line":"___________________________________"},{"line_number":211,"context_line":"This seems somewhat obvious, but the important things to note here are that you"},{"line_number":212,"context_line":"should put this somewhere on the network where it will have access to the"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_f060e837","line":209,"in_reply_to":"7a8ec9b2_bbc11531","updated":"2016-09-14 17:28:48.000000000","message":"Done","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"68086b874c8427cb70dbfda9bbccf4f8630258f7","unresolved":false,"context_lines":[{"line_number":214,"context_line":"network. Octavia uses the standard python setuptools, so installation of the"},{"line_number":215,"context_line":"software itself should be straightforward."},{"line_number":216,"context_line":""},{"line_number":217,"context_line":"One important security note: As of version 0.8 of Octavia, the Octavia API is"},{"line_number":218,"context_line":"designed to be consumed only by the Neutron-LBaaS v2 Octavia driver. As such,"},{"line_number":219,"context_line":"there is presently no authentication required to use the Octavia API, and"},{"line_number":220,"context_line":"therefore the Octavia API should only be accessible on trusted network segments"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_3b87c510","line":217,"range":{"start_line":217,"start_character":43,"end_line":217,"end_character":46},"updated":"2016-09-14 04:03:39.000000000","message":"nit: This will merge for the 0.9 release.","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"86b855094caa8b04c2901fbbf19ddf0f21fe7293","unresolved":false,"context_lines":[{"line_number":214,"context_line":"network. Octavia uses the standard python setuptools, so installation of the"},{"line_number":215,"context_line":"software itself should be straightforward."},{"line_number":216,"context_line":""},{"line_number":217,"context_line":"One important security note: As of version 0.8 of Octavia, the Octavia API is"},{"line_number":218,"context_line":"designed to be consumed only by the Neutron-LBaaS v2 Octavia driver. As such,"},{"line_number":219,"context_line":"there is presently no authentication required to use the Octavia API, and"},{"line_number":220,"context_line":"therefore the Octavia API should only be accessible on trusted network segments"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_305b3089","line":217,"range":{"start_line":217,"start_character":43,"end_line":217,"end_character":46},"in_reply_to":"7a8ec9b2_3b87c510","updated":"2016-09-14 17:28:48.000000000","message":"Done","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"68086b874c8427cb70dbfda9bbccf4f8630258f7","unresolved":false,"context_lines":[{"line_number":221,"context_line":"(specifically, the segment that runs the neutron-services daemons.)"},{"line_number":222,"context_line":""},{"line_number":223,"context_line":"The Octavia controller presently consists of several components which may be"},{"line_number":224,"context_line":"split across several physical machines.  For the 0.8 release of Octavia, the"},{"line_number":225,"context_line":"important (and potentially separable) components are the controller worker,"},{"line_number":226,"context_line":"housekeeper, health manager and API controller. Please see the component"},{"line_number":227,"context_line":"diagrams elsewhere in this repository\u0027s documentation for detailed descriptions"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_db8ee126","line":224,"range":{"start_line":224,"start_character":48,"end_line":224,"end_character":52},"updated":"2016-09-14 04:03:39.000000000","message":"nit: same, 0.9","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"86b855094caa8b04c2901fbbf19ddf0f21fe7293","unresolved":false,"context_lines":[{"line_number":221,"context_line":"(specifically, the segment that runs the neutron-services daemons.)"},{"line_number":222,"context_line":""},{"line_number":223,"context_line":"The Octavia controller presently consists of several components which may be"},{"line_number":224,"context_line":"split across several physical machines.  For the 0.8 release of Octavia, the"},{"line_number":225,"context_line":"important (and potentially separable) components are the controller worker,"},{"line_number":226,"context_line":"housekeeper, health manager and API controller. Please see the component"},{"line_number":227,"context_line":"diagrams elsewhere in this repository\u0027s documentation for detailed descriptions"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_f0c70810","line":224,"range":{"start_line":224,"start_character":48,"end_line":224,"end_character":52},"in_reply_to":"7a8ec9b2_db8ee126","updated":"2016-09-14 17:28:48.000000000","message":"Done","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"68086b874c8427cb70dbfda9bbccf4f8630258f7","unresolved":false,"context_lines":[{"line_number":239,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":240,"context_line":"| housekeeper       | Yes        | Yes      | No             |"},{"line_number":241,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":242,"context_line":"| API               | No         | Yes      | Yes            |"},{"line_number":243,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":244,"context_line":""},{"line_number":245,"context_line":"In addition to talking to each other via OSLO messaging, various controller"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_bbaaf56e","line":242,"range":{"start_line":242,"start_character":1,"end_line":242,"end_character":7},"updated":"2016-09-14 04:03:39.000000000","message":"nit: alpha sort on the table?","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"86b855094caa8b04c2901fbbf19ddf0f21fe7293","unresolved":false,"context_lines":[{"line_number":239,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":240,"context_line":"| housekeeper       | Yes        | Yes      | No             |"},{"line_number":241,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":242,"context_line":"| API               | No         | Yes      | Yes            |"},{"line_number":243,"context_line":"+-------------------+------------+----------+----------------+"},{"line_number":244,"context_line":""},{"line_number":245,"context_line":"In addition to talking to each other via OSLO messaging, various controller"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_b0e660b2","line":242,"range":{"start_line":242,"start_character":1,"end_line":242,"end_character":7},"in_reply_to":"7a8ec9b2_bbaaf56e","updated":"2016-09-14 17:28:48.000000000","message":"Done","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"68086b874c8427cb70dbfda9bbccf4f8630258f7","unresolved":false,"context_lines":[{"line_number":279,"context_line":"See the Troubleshooting Tips section below for an example of how an operator"},{"line_number":280,"context_line":"can SSH into an amphora."},{"line_number":281,"context_line":""},{"line_number":282,"context_line":"You must:"},{"line_number":283,"context_line":""},{"line_number":284,"context_line":"* Create SSL certificates for communicating with the amphorae."},{"line_number":285,"context_line":"* Create SSH keys for communicating with the amphorae."}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_9b77f901","line":282,"updated":"2016-09-14 04:03:39.000000000","message":"Umm, I think we are missing the \"You must\" section for the cert generation.","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"86b855094caa8b04c2901fbbf19ddf0f21fe7293","unresolved":false,"context_lines":[{"line_number":279,"context_line":"See the Troubleshooting Tips section below for an example of how an operator"},{"line_number":280,"context_line":"can SSH into an amphora."},{"line_number":281,"context_line":""},{"line_number":282,"context_line":"You must:"},{"line_number":283,"context_line":""},{"line_number":284,"context_line":"* Create SSL certificates for communicating with the amphorae."},{"line_number":285,"context_line":"* Create SSH keys for communicating with the amphorae."}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_90ac0437","line":282,"in_reply_to":"7a8ec9b2_9b77f901","updated":"2016-09-14 17:28:48.000000000","message":"Er... isn\u0027t your comment literally at the start of the \"you must\" section you were looking for? The first bullet point is about creating the SSL certificates.","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"68086b874c8427cb70dbfda9bbccf4f8630258f7","unresolved":false,"context_lines":[{"line_number":399,"context_line":""},{"line_number":400,"context_line":"::"},{"line_number":401,"context_line":""},{"line_number":402,"context_line":"    # neutron lbaas-loadbalancer-create --name lb1 private-subnet"},{"line_number":403,"context_line":"    # neutron lbaas-listener-create --name listener1 --loadbalancer lb1 --protocol HTTP --protocol-port 80"},{"line_number":404,"context_line":""},{"line_number":405,"context_line":"Upon executing the above, log files should indicate that an amphora is deployed"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_2657a803","line":402,"updated":"2016-09-14 04:03:39.000000000","message":"We might need to mention that this may take some time to complete and they need to wait until the load balancer is active before creating the listener.","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"86b855094caa8b04c2901fbbf19ddf0f21fe7293","unresolved":false,"context_lines":[{"line_number":399,"context_line":""},{"line_number":400,"context_line":"::"},{"line_number":401,"context_line":""},{"line_number":402,"context_line":"    # neutron lbaas-loadbalancer-create --name lb1 private-subnet"},{"line_number":403,"context_line":"    # neutron lbaas-listener-create --name listener1 --loadbalancer lb1 --protocol HTTP --protocol-port 80"},{"line_number":404,"context_line":""},{"line_number":405,"context_line":"Upon executing the above, log files should indicate that an amphora is deployed"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_b059005d","line":402,"in_reply_to":"7a8ec9b2_2657a803","updated":"2016-09-14 17:28:48.000000000","message":"Will update accordingly.","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":10980,"name":"Doug Wiegley","email":"dougwig@parkside.io","username":"dougw"},"change_message_id":"b7bb6a47820bec86ae6ecd670e823c2c7001ceca","unresolved":false,"context_lines":[{"line_number":40,"context_line":"requires at least 1GB of RAM to run effectively. As such it is important that"},{"line_number":41,"context_line":"your devstack environment has enough resources dedicated to it to run all its"},{"line_number":42,"context_line":"necessary components. For most devstack environments, the limiting resource"},{"line_number":43,"context_line":"will be RAM. At the present time, we recommend at least 8GB of RAM. More is"},{"line_number":44,"context_line":"recommended if you also want to run a couple of application server VMs (so that"},{"line_number":45,"context_line":"Octavia has something to load balance within your devstack environment)."},{"line_number":46,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_3bb8a5e5","line":43,"updated":"2016-09-19 17:30:28.000000000","message":"suggest: at least 12GB of RAM for the standard devstack defaults, or 8GB of RAM is cinder and swift are disabled.","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":40,"context_line":"requires at least 1GB of RAM to run effectively. As such it is important that"},{"line_number":41,"context_line":"your devstack environment has enough resources dedicated to it to run all its"},{"line_number":42,"context_line":"necessary components. For most devstack environments, the limiting resource"},{"line_number":43,"context_line":"will be RAM. At the present time, we recommend at least 8GB of RAM. More is"},{"line_number":44,"context_line":"recommended if you also want to run a couple of application server VMs (so that"},{"line_number":45,"context_line":"Octavia has something to load balance within your devstack environment)."},{"line_number":46,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_90c30b57","line":43,"in_reply_to":"7a8ec9b2_3bb8a5e5","updated":"2016-09-20 21:01:01.000000000","message":"Done","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":10980,"name":"Doug Wiegley","email":"dougwig@parkside.io","username":"dougw"},"change_message_id":"b7bb6a47820bec86ae6ecd670e823c2c7001ceca","unresolved":false,"context_lines":[{"line_number":45,"context_line":"Octavia has something to load balance within your devstack environment)."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"Also, because the current implementation of Octavia delivers load balancing"},{"line_number":48,"context_line":"services using amphorae that run as Nova virtual machines, it is a very good"},{"line_number":49,"context_line":"idea to make sure the BIOS of the systems you\u0027re running your devstack on have"},{"line_number":50,"context_line":"virtualization features enabled (Intel VT-x, AMD-V, etc.), and the"},{"line_number":51,"context_line":"virtualization software you\u0027re using exposes these features to the guest VM"}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_3b86e513","line":48,"updated":"2016-09-19 17:30:28.000000000","message":"\u0027it is effectively mandatory to enable nested virtualization. The software will work with software emulated CPUs, but be unusable slow...\u0027","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":45,"context_line":"Octavia has something to load balance within your devstack environment)."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"Also, because the current implementation of Octavia delivers load balancing"},{"line_number":48,"context_line":"services using amphorae that run as Nova virtual machines, it is a very good"},{"line_number":49,"context_line":"idea to make sure the BIOS of the systems you\u0027re running your devstack on have"},{"line_number":50,"context_line":"virtualization features enabled (Intel VT-x, AMD-V, etc.), and the"},{"line_number":51,"context_line":"virtualization software you\u0027re using exposes these features to the guest VM"}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_b08e4725","line":48,"in_reply_to":"7a8ec9b2_3b86e513","updated":"2016-09-20 21:01:01.000000000","message":"Done","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":10980,"name":"Doug Wiegley","email":"dougwig@parkside.io","username":"dougw"},"change_message_id":"b7bb6a47820bec86ae6ecd670e823c2c7001ceca","unresolved":false,"context_lines":[{"line_number":125,"context_line":"* Glance"},{"line_number":126,"context_line":"* Barbican (if TLS offloading functionality is enabled)"},{"line_number":127,"context_line":"* Keystone"},{"line_number":128,"context_line":"* Oslo messaging"},{"line_number":129,"context_line":"* MySQL"},{"line_number":130,"context_line":""},{"line_number":131,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_dbdb4120","line":128,"updated":"2016-09-19 17:30:28.000000000","message":"this is a glue layer, where the rest of the list is services.  Note that you said mysql and not olso.db.  Shouldn\u0027t we just say \u0027rabbit\u0027 here?","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":125,"context_line":"* Glance"},{"line_number":126,"context_line":"* Barbican (if TLS offloading functionality is enabled)"},{"line_number":127,"context_line":"* Keystone"},{"line_number":128,"context_line":"* Oslo messaging"},{"line_number":129,"context_line":"* MySQL"},{"line_number":130,"context_line":""},{"line_number":131,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_90d6abef","line":128,"in_reply_to":"7a8ec9b2_dbdb4120","updated":"2016-09-20 21:01:01.000000000","message":"Yeah, I\u0027ll go ahead and list rabbit specifically, since I don\u0027t think anyone has tested this with any other messaging service. (Does oslo-messaging support other messaging services?)","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":10558,"name":"Dustin Lundquist","email":"dustin@null-ptr.net","username":"dlundquist"},"change_message_id":"62755b13fb16cc628f3f26d3691933b58181bc79","unresolved":false,"context_lines":[{"line_number":138,"context_line":"the admin user for interactions with all other serivces. However, it doesn\u0027t"},{"line_number":139,"context_line":"actually share neutron\u0027s database or otherwise access Neutron outside of"},{"line_number":140,"context_line":"Neutron\u0027s API, so a dedicated \u0027octavia\u0027 user should generally be created for"},{"line_number":141,"context_line":"Octavia to use."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":"You must:"},{"line_number":144,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_a479b8fe","line":141,"updated":"2016-09-14 20:51:32.000000000","message":"Please clarify this is a keystone user rather than a unix user or mysql user. I had to read this  a few times to be sure, since it sounds like it will use the Neutron keystone user by default, and then we discuss database concerns. Only after reading the step to add the admin role, did in occur to me this was a Keystone user.","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":138,"context_line":"the admin user for interactions with all other serivces. However, it doesn\u0027t"},{"line_number":139,"context_line":"actually share neutron\u0027s database or otherwise access Neutron outside of"},{"line_number":140,"context_line":"Neutron\u0027s API, so a dedicated \u0027octavia\u0027 user should generally be created for"},{"line_number":141,"context_line":"Octavia to use."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":"You must:"},{"line_number":144,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_30f8777c","line":141,"in_reply_to":"7a8ec9b2_a479b8fe","updated":"2016-09-20 21:01:01.000000000","message":"Done","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":10558,"name":"Dustin Lundquist","email":"dustin@null-ptr.net","username":"dlundquist"},"change_message_id":"62755b13fb16cc628f3f26d3691933b58181bc79","unresolved":false,"context_lines":[{"line_number":153,"context_line":"Octavia deploys will have interfaces and IP addresses on this network."},{"line_number":154,"context_line":"Therefore, it\u0027s important that the subnet deployed on this network be"},{"line_number":155,"context_line":"sufficiently large to allow for the maximum number of amphorae and controllers"},{"line_number":156,"context_line":"likely to be deployed throughout the lifespan of the cloud installation."},{"line_number":157,"context_line":""},{"line_number":158,"context_line":"The LB Network is isolated from tenant networks on the amphorae by means of"},{"line_number":159,"context_line":"network namespaces on the amphorae. Therefore, operators need not be concerned"}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_c750860d","line":156,"updated":"2016-09-14 20:51:32.000000000","message":"Can we include an example subnet here? Reading this my first question was: can I use IPv6 here. Maybe suggest 172.31.0.0/16 or such.","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":153,"context_line":"Octavia deploys will have interfaces and IP addresses on this network."},{"line_number":154,"context_line":"Therefore, it\u0027s important that the subnet deployed on this network be"},{"line_number":155,"context_line":"sufficiently large to allow for the maximum number of amphorae and controllers"},{"line_number":156,"context_line":"likely to be deployed throughout the lifespan of the cloud installation."},{"line_number":157,"context_line":""},{"line_number":158,"context_line":"The LB Network is isolated from tenant networks on the amphorae by means of"},{"line_number":159,"context_line":"network namespaces on the amphorae. Therefore, operators need not be concerned"}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_90722b10","line":156,"in_reply_to":"7a8ec9b2_c750860d","updated":"2016-09-20 21:01:01.000000000","message":"Done","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":10558,"name":"Dustin Lundquist","email":"dustin@null-ptr.net","username":"dlundquist"},"change_message_id":"62755b13fb16cc628f3f26d3691933b58181bc79","unresolved":false,"context_lines":[{"line_number":169,"context_line":"Amphorae will send periodic health checks to the controller\u0027s health manager."},{"line_number":170,"context_line":"Any firewall protecting the interface on which the health manager listens must"},{"line_number":171,"context_line":"allow these packets from amphorae on the LB Network (by default, UDP port"},{"line_number":172,"context_line":"5555)."},{"line_number":173,"context_line":""},{"line_number":174,"context_line":"Finally, you need to add routing or interfaces to this network such that the"},{"line_number":175,"context_line":"Octavia controller (which will be described below) is able to communicate with"}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_04718ce0","line":172,"updated":"2016-09-14 20:51:32.000000000","message":"Would then best practice be to remove the default permit all egress rule and add a rule only permitting udp/5555?","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":169,"context_line":"Amphorae will send periodic health checks to the controller\u0027s health manager."},{"line_number":170,"context_line":"Any firewall protecting the interface on which the health manager listens must"},{"line_number":171,"context_line":"allow these packets from amphorae on the LB Network (by default, UDP port"},{"line_number":172,"context_line":"5555)."},{"line_number":173,"context_line":""},{"line_number":174,"context_line":"Finally, you need to add routing or interfaces to this network such that the"},{"line_number":175,"context_line":"Octavia controller (which will be described below) is able to communicate with"}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_10d45bbb","line":172,"in_reply_to":"7a8ec9b2_04718ce0","updated":"2016-09-20 21:01:01.000000000","message":"I\u0027m reluctant to put that in this document until someone tests out that specific configuration (and better yet, sets up devstack to be configured this way by default).","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":10558,"name":"Dustin Lundquist","email":"dustin@null-ptr.net","username":"dlundquist"},"change_message_id":"62755b13fb16cc628f3f26d3691933b58181bc79","unresolved":false,"context_lines":[{"line_number":187,"context_line":"  health check messages from amphorae."},{"line_number":188,"context_line":"* Add appropriate routing to / from the \u0027lb-mgmt-net\u0027 such that egress is"},{"line_number":189,"context_line":"  allowed, and the controller (to be created later) can talk to hosts on this"},{"line_number":190,"context_line":"  network."},{"line_number":191,"context_line":""},{"line_number":192,"context_line":""},{"line_number":193,"context_line":"Create Amphora Image"}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_67a092a0","line":190,"updated":"2016-09-14 20:51:32.000000000","message":"A helper script to create network and security group would be awesome here too.","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":187,"context_line":"  health check messages from amphorae."},{"line_number":188,"context_line":"* Add appropriate routing to / from the \u0027lb-mgmt-net\u0027 such that egress is"},{"line_number":189,"context_line":"  allowed, and the controller (to be created later) can talk to hosts on this"},{"line_number":190,"context_line":"  network."},{"line_number":191,"context_line":""},{"line_number":192,"context_line":""},{"line_number":193,"context_line":"Create Amphora Image"}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_b0ed6790","line":190,"in_reply_to":"7a8ec9b2_67a092a0","updated":"2016-09-20 21:01:01.000000000","message":"I think you\u0027ve opened an RFE bug for the same, so I think we\u0027ll eventually be covered here. :)","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":10558,"name":"Dustin Lundquist","email":"dustin@null-ptr.net","username":"dlundquist"},"change_message_id":"62755b13fb16cc628f3f26d3691933b58181bc79","unresolved":false,"context_lines":[{"line_number":257,"context_line":"* Install the Octavia software."},{"line_number":258,"context_line":""},{"line_number":259,"context_line":""},{"line_number":260,"context_line":"Create Octavia Certificates"},{"line_number":261,"context_line":"___________________________"},{"line_number":262,"context_line":"Octavia presently allows for one method for the controller to communicate with"},{"line_number":263,"context_line":"amphorae: The amphora REST API. Both amphora API and Octavia controller do"}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_27a4caa4","line":260,"updated":"2016-09-14 20:51:32.000000000","message":"nit: Keys and Certificates","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":257,"context_line":"* Install the Octavia software."},{"line_number":258,"context_line":""},{"line_number":259,"context_line":""},{"line_number":260,"context_line":"Create Octavia Certificates"},{"line_number":261,"context_line":"___________________________"},{"line_number":262,"context_line":"Octavia presently allows for one method for the controller to communicate with"},{"line_number":263,"context_line":"amphorae: The amphora REST API. Both amphora API and Octavia controller do"}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_90f78b58","line":260,"in_reply_to":"7a8ec9b2_27a4caa4","updated":"2016-09-20 21:01:01.000000000","message":"Done","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":10558,"name":"Dustin Lundquist","email":"dustin@null-ptr.net","username":"dlundquist"},"change_message_id":"62755b13fb16cc628f3f26d3691933b58181bc79","unresolved":false,"context_lines":[{"line_number":262,"context_line":"Octavia presently allows for one method for the controller to communicate with"},{"line_number":263,"context_line":"amphorae: The amphora REST API. Both amphora API and Octavia controller do"},{"line_number":264,"context_line":"bi-directional certificate-based authentication in order to authenticate and"},{"line_number":265,"context_line":"encrypt communication. You must therefore create appropriate SSL certificates"},{"line_number":266,"context_line":"which will be used for key signing, authentication, and encryption. There is a"},{"line_number":267,"context_line":"helper script to do this in this repository under:"},{"line_number":268,"context_line":"``bin/create_certficiates.sh``"}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_e7b4a2f3","line":265,"range":{"start_line":265,"start_character":61,"end_line":265,"end_character":64},"updated":"2016-09-14 20:51:32.000000000","message":"SSL is deprecated, now we use TLS. But user might not all know this.","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":262,"context_line":"Octavia presently allows for one method for the controller to communicate with"},{"line_number":263,"context_line":"amphorae: The amphora REST API. Both amphora API and Octavia controller do"},{"line_number":264,"context_line":"bi-directional certificate-based authentication in order to authenticate and"},{"line_number":265,"context_line":"encrypt communication. You must therefore create appropriate SSL certificates"},{"line_number":266,"context_line":"which will be used for key signing, authentication, and encryption. There is a"},{"line_number":267,"context_line":"helper script to do this in this repository under:"},{"line_number":268,"context_line":"``bin/create_certficiates.sh``"}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_308957cb","line":265,"range":{"start_line":265,"start_character":61,"end_line":265,"end_character":64},"in_reply_to":"7a8ec9b2_e7b4a2f3","updated":"2016-09-20 21:01:01.000000000","message":"Done","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":10558,"name":"Dustin Lundquist","email":"dustin@null-ptr.net","username":"dlundquist"},"change_message_id":"62755b13fb16cc628f3f26d3691933b58181bc79","unresolved":false,"context_lines":[{"line_number":301,"context_line":""},{"line_number":302,"context_line":"It\u0027s also important to note that this configuration file will need to be"},{"line_number":303,"context_line":"updated with UUIDs of the LB network, amphora security group, amphora image ID,"},{"line_number":304,"context_line":"SSH key path, SSL certificate path, database credentials, etc."},{"line_number":305,"context_line":""},{"line_number":306,"context_line":"You must:"},{"line_number":307,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_c7e086cf","line":304,"updated":"2016-09-14 20:51:32.000000000","message":"If we are specifying the amphora image by UUID, why did we create a Glance tag?\n\nBulleted list would be helpful here so user can verify they have all the required information as they proceed.","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":301,"context_line":""},{"line_number":302,"context_line":"It\u0027s also important to note that this configuration file will need to be"},{"line_number":303,"context_line":"updated with UUIDs of the LB network, amphora security group, amphora image ID,"},{"line_number":304,"context_line":"SSH key path, SSL certificate path, database credentials, etc."},{"line_number":305,"context_line":""},{"line_number":306,"context_line":"You must:"},{"line_number":307,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_7a79fdfb","line":304,"in_reply_to":"7a8ec9b2_c7e086cf","updated":"2016-09-20 21:01:01.000000000","message":"Done","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":10558,"name":"Dustin Lundquist","email":"dustin@null-ptr.net","username":"dlundquist"},"change_message_id":"62755b13fb16cc628f3f26d3691933b58181bc79","unresolved":false,"context_lines":[{"line_number":323,"context_line":""},{"line_number":324,"context_line":"You must:"},{"line_number":325,"context_line":""},{"line_number":326,"context_line":"* Create database credentials for Octavia."},{"line_number":327,"context_line":"* Add these to the ``/etc/octavia/octavia.conf`` file."},{"line_number":328,"context_line":"* Run ``/usr/local/bin/octavia-db-manage upgrade head`` on the controller"},{"line_number":329,"context_line":"  worker host to initialize the octavia database."}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_c7632640","line":326,"updated":"2016-09-14 20:51:32.000000000","message":"Doesn\u0027t this step need to occur before \"Configuring Octavia\" above?","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":323,"context_line":""},{"line_number":324,"context_line":"You must:"},{"line_number":325,"context_line":""},{"line_number":326,"context_line":"* Create database credentials for Octavia."},{"line_number":327,"context_line":"* Add these to the ``/etc/octavia/octavia.conf`` file."},{"line_number":328,"context_line":"* Run ``/usr/local/bin/octavia-db-manage upgrade head`` on the controller"},{"line_number":329,"context_line":"  worker host to initialize the octavia database."}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_3ae695b4","line":326,"in_reply_to":"7a8ec9b2_c7632640","updated":"2016-09-20 21:01:01.000000000","message":"The octavia-db-manage script looks at the octavia.conf to get its database credentials, and therefore must happen after Octavia is configured. I\u0027ll add a note explaining this.","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":10558,"name":"Dustin Lundquist","email":"dustin@null-ptr.net","username":"dlundquist"},"change_message_id":"62755b13fb16cc628f3f26d3691933b58181bc79","unresolved":false,"context_lines":[{"line_number":374,"context_line":"::"},{"line_number":375,"context_line":""},{"line_number":376,"context_line":"    [octavia]"},{"line_number":377,"context_line":"    base_url\u003dhttp://127.0.0.1:9876"},{"line_number":378,"context_line":""},{"line_number":379,"context_line":"You must:"},{"line_number":380,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_e79f4201","line":377,"updated":"2016-09-14 20:51:32.000000000","message":"If there isn\u0027t a technical requirement for these to run on the same host, lets not use the loopback address as an example since it may give people that idea.","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"c9358e1cfe2ac6a42d7eb7d02d32eba020394aec","unresolved":false,"context_lines":[{"line_number":374,"context_line":"::"},{"line_number":375,"context_line":""},{"line_number":376,"context_line":"    [octavia]"},{"line_number":377,"context_line":"    base_url\u003dhttp://127.0.0.1:9876"},{"line_number":378,"context_line":""},{"line_number":379,"context_line":"You must:"},{"line_number":380,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"7a8ec9b2_fd20a74b","line":377,"in_reply_to":"7a8ec9b2_e79f4201","updated":"2016-09-20 21:01:01.000000000","message":"At the present time, this is the only supported configuration since the Octavia API does not have any authentication. (That will be coming in Ocata; We should update this doc at that time.)","commit_id":"95e1f9d9b0c432b9943849ad9716641b404f018c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"c25e0f9624912a8918612101f7a9c1035072fa97","unresolved":false,"context_lines":[{"line_number":336,"context_line":"+-----------------------+-------------------------------+"},{"line_number":337,"context_line":"| controller_worker     | amp_secgroup_list             |"},{"line_number":338,"context_line":"+-----------------------+-------------------------------+"},{"line_number":339,"context_line":"| controller_worker     | amp_ssh_key_name              |"},{"line_number":340,"context_line":"+-----------------------+-------------------------------+"},{"line_number":341,"context_line":"| controller_worker     | amphora_driver                |"},{"line_number":342,"context_line":"+-----------------------+-------------------------------+"}],"source_content_type":"text/x-rst","patch_set":14,"id":"5a8bc5a2_e381144c","line":339,"updated":"2016-09-22 20:16:35.000000000","message":"Nit: this is optional","commit_id":"87da2fd498d08c4da81d3ee920d4a2a28272374c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"62b204d4b72f0d7f6b012fd34ed89b8e85a7512c","unresolved":false,"context_lines":[{"line_number":336,"context_line":"+-----------------------+-------------------------------+"},{"line_number":337,"context_line":"| controller_worker     | amp_secgroup_list             |"},{"line_number":338,"context_line":"+-----------------------+-------------------------------+"},{"line_number":339,"context_line":"| controller_worker     | amp_ssh_key_name              |"},{"line_number":340,"context_line":"+-----------------------+-------------------------------+"},{"line_number":341,"context_line":"| controller_worker     | amphora_driver                |"},{"line_number":342,"context_line":"+-----------------------+-------------------------------+"}],"source_content_type":"text/x-rst","patch_set":14,"id":"5a8bc5a2_713a9b9a","line":339,"in_reply_to":"5a8bc5a2_e381144c","updated":"2016-09-26 21:18:35.000000000","message":"Done","commit_id":"87da2fd498d08c4da81d3ee920d4a2a28272374c"},{"author":{"_account_id":6732,"name":"Lingxian Kong","email":"anlin.kong@gmail.com","username":"kong"},"change_message_id":"8c55a121c98a2bd26707646edf943ecfbb1dde23","unresolved":false,"context_lines":[{"line_number":394,"context_line":"running in an idle, unconfigured state. These amphora will run base amphora"},{"line_number":395,"context_line":"health checks and wait for configuration from the Octavia controller. The"},{"line_number":396,"context_line":"overall effect of this is to greatly reduce the time it takes and increase the"},{"line_number":397,"context_line":"reliability of deploying a new load balancing service on demand. This comes at"},{"line_number":398,"context_line":"the cost of having a number of deployed amphorae which consume resources but"},{"line_number":399,"context_line":"are not actively providing load balancing services."},{"line_number":400,"context_line":""},{"line_number":401,"context_line":""},{"line_number":402,"context_line":"Initialize Octavia Database"}],"source_content_type":"text/x-rst","patch_set":14,"id":"5a8bc5a2_bbd0ba20","line":399,"range":{"start_line":397,"start_character":65,"end_line":399,"end_character":51},"updated":"2016-09-26 04:38:16.000000000","message":"Another thing we need to document when using spared pool is, the anti-affinity rule (if configured) will not be applied.","commit_id":"87da2fd498d08c4da81d3ee920d4a2a28272374c"},{"author":{"_account_id":6732,"name":"Lingxian Kong","email":"anlin.kong@gmail.com","username":"kong"},"change_message_id":"dd1d51a0dfea90c3d9b41c7bff30039ca4b27d12","unresolved":false,"context_lines":[{"line_number":394,"context_line":"running in an idle, unconfigured state. These amphora will run base amphora"},{"line_number":395,"context_line":"health checks and wait for configuration from the Octavia controller. The"},{"line_number":396,"context_line":"overall effect of this is to greatly reduce the time it takes and increase the"},{"line_number":397,"context_line":"reliability of deploying a new load balancing service on demand. This comes at"},{"line_number":398,"context_line":"the cost of having a number of deployed amphorae which consume resources but"},{"line_number":399,"context_line":"are not actively providing load balancing services."},{"line_number":400,"context_line":""},{"line_number":401,"context_line":""},{"line_number":402,"context_line":"Initialize Octavia Database"}],"source_content_type":"text/x-rst","patch_set":14,"id":"5a8bc5a2_51491fb6","line":399,"range":{"start_line":397,"start_character":65,"end_line":399,"end_character":51},"in_reply_to":"5a8bc5a2_116797e9","updated":"2016-09-26 21:30:31.000000000","message":"hah, thanks!","commit_id":"87da2fd498d08c4da81d3ee920d4a2a28272374c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"62b204d4b72f0d7f6b012fd34ed89b8e85a7512c","unresolved":false,"context_lines":[{"line_number":394,"context_line":"running in an idle, unconfigured state. These amphora will run base amphora"},{"line_number":395,"context_line":"health checks and wait for configuration from the Octavia controller. The"},{"line_number":396,"context_line":"overall effect of this is to greatly reduce the time it takes and increase the"},{"line_number":397,"context_line":"reliability of deploying a new load balancing service on demand. This comes at"},{"line_number":398,"context_line":"the cost of having a number of deployed amphorae which consume resources but"},{"line_number":399,"context_line":"are not actively providing load balancing services."},{"line_number":400,"context_line":""},{"line_number":401,"context_line":""},{"line_number":402,"context_line":"Initialize Octavia Database"}],"source_content_type":"text/x-rst","patch_set":14,"id":"5a8bc5a2_116797e9","line":399,"range":{"start_line":397,"start_character":65,"end_line":399,"end_character":51},"in_reply_to":"5a8bc5a2_aed03eca","updated":"2016-09-26 21:18:35.000000000","message":"I don\u0027t agree: I think we should merge this as is, and that if any more extremely minor nits like this are brought up, people should propose their own patch to this document. :P\n\nBut since I want to get this damned thing finally merged, I\u0027ll make the change. :P","commit_id":"87da2fd498d08c4da81d3ee920d4a2a28272374c"},{"author":{"_account_id":11302,"name":"Phillip Toohill","email":"phillip.toohill@rackspace.com","username":"ptoohill1"},"change_message_id":"74ba71dcdc96104a992f011720e12a74c1429f9e","unresolved":false,"context_lines":[{"line_number":394,"context_line":"running in an idle, unconfigured state. These amphora will run base amphora"},{"line_number":395,"context_line":"health checks and wait for configuration from the Octavia controller. The"},{"line_number":396,"context_line":"overall effect of this is to greatly reduce the time it takes and increase the"},{"line_number":397,"context_line":"reliability of deploying a new load balancing service on demand. This comes at"},{"line_number":398,"context_line":"the cost of having a number of deployed amphorae which consume resources but"},{"line_number":399,"context_line":"are not actively providing load balancing services."},{"line_number":400,"context_line":""},{"line_number":401,"context_line":""},{"line_number":402,"context_line":"Initialize Octavia Database"}],"source_content_type":"text/x-rst","patch_set":14,"id":"5a8bc5a2_aed03eca","line":399,"range":{"start_line":397,"start_character":65,"end_line":399,"end_character":51},"in_reply_to":"5a8bc5a2_bbd0ba20","updated":"2016-09-26 21:01:47.000000000","message":"I Agree, some information around affinity would be useful here.","commit_id":"87da2fd498d08c4da81d3ee920d4a2a28272374c"}],"doc/source/main/dev-quick-start.rst":[{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"71c986b7ced8b582dbe9f9bfdc3fac8a77829ff7","unresolved":false,"context_lines":[{"line_number":12,"context_line":"tl;dr"},{"line_number":13,"context_line":"-----"},{"line_number":14,"context_line":"* 8GB RAM minimum"},{"line_number":15,"context_line":"* \"vmx\" in /proc/cpuinfo"},{"line_number":16,"context_line":"* Ubuntu 14.04 or later"},{"line_number":17,"context_line":"* On that host, copy and run as root:"},{"line_number":18,"context_line":"  octavia/devstack/contrib/new-octavia-devstack.sh"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a061dce_b99f7b4f","line":15,"updated":"2016-04-08 16:27:41.000000000","message":"vmx or svm(AMD)","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3903d80de06afc952a4489a342914674b51f450","unresolved":false,"context_lines":[{"line_number":12,"context_line":"tl;dr"},{"line_number":13,"context_line":"-----"},{"line_number":14,"context_line":"* 8GB RAM minimum"},{"line_number":15,"context_line":"* \"vmx\" in /proc/cpuinfo"},{"line_number":16,"context_line":"* Ubuntu 14.04 or later"},{"line_number":17,"context_line":"* On that host, copy and run as root:"},{"line_number":18,"context_line":"  octavia/devstack/contrib/new-octavia-devstack.sh"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ac06dbe_e13a7ccc","line":15,"in_reply_to":"9a061dce_b99f7b4f","updated":"2016-08-25 20:01:10.000000000","message":"Done","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":6732,"name":"Lingxian Kong","email":"anlin.kong@gmail.com","username":"kong"},"change_message_id":"eef2555864a48ed38067d8e9398825f1fe3825dc","unresolved":false,"context_lines":[{"line_number":106,"context_line":"* Nova"},{"line_number":107,"context_line":"* Neutron (with Neutron LBaaS v2)"},{"line_number":108,"context_line":"* Glance"},{"line_number":109,"context_line":"* Barbican"},{"line_number":110,"context_line":"* Keystone"},{"line_number":111,"context_line":"* Oslo messaging"},{"line_number":112,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba0121b8_bf077880","line":109,"updated":"2016-04-02 09:57:28.000000000","message":"Is Barbican service really necessary for Octavia installation? It\u0027s not included (or maybe never be considered) for many OpenStack cloud deployment,  having a dependency on it will daunt many operators, because they have to maintain another OpenStack service they are not familiar with.","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3903d80de06afc952a4489a342914674b51f450","unresolved":false,"context_lines":[{"line_number":106,"context_line":"* Nova"},{"line_number":107,"context_line":"* Neutron (with Neutron LBaaS v2)"},{"line_number":108,"context_line":"* Glance"},{"line_number":109,"context_line":"* Barbican"},{"line_number":110,"context_line":"* Keystone"},{"line_number":111,"context_line":"* Oslo messaging"},{"line_number":112,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ac06dbe_a25b67f5","line":109,"in_reply_to":"ba0121b8_bf077880","updated":"2016-08-25 20:01:10.000000000","message":"It is necessary if the operator intends to enable TLS offloading with Neutron LBaaS v2 / Octavia. I will update the wording here to clarify this.","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":6732,"name":"Lingxian Kong","email":"anlin.kong@gmail.com","username":"kong"},"change_message_id":"eef2555864a48ed38067d8e9398825f1fe3825dc","unresolved":false,"context_lines":[{"line_number":168,"context_line":"* Assign the \u0027lb-mgmt-net\u0027 to the admin tenant"},{"line_number":169,"context_line":"* Create a subnet and assign it to the \u0027lb-mgmt-net\u0027"},{"line_number":170,"context_line":"* Ensure the above subnet does not overlap IP space with any tenant networks"},{"line_number":171,"context_line":"  which will be using the Octavia load balancing service"},{"line_number":172,"context_line":"* Create neutron security group for amphorae created on the \u0027lb-mgmt-net\u0027"},{"line_number":173,"context_line":"  which allows appropriate access to the amphorae."},{"line_number":174,"context_line":"* Add appropriate routing to / from the \u0027lb-mgmt-net\u0027 such that egress is"}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba0121b8_020d6b37","line":171,"updated":"2016-04-02 09:57:28.000000000","message":"As a deployer, how can I guarantee tenants will never create network using subnet overlapped with lb-mgmt-net?","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3903d80de06afc952a4489a342914674b51f450","unresolved":false,"context_lines":[{"line_number":168,"context_line":"* Assign the \u0027lb-mgmt-net\u0027 to the admin tenant"},{"line_number":169,"context_line":"* Create a subnet and assign it to the \u0027lb-mgmt-net\u0027"},{"line_number":170,"context_line":"* Ensure the above subnet does not overlap IP space with any tenant networks"},{"line_number":171,"context_line":"  which will be using the Octavia load balancing service"},{"line_number":172,"context_line":"* Create neutron security group for amphorae created on the \u0027lb-mgmt-net\u0027"},{"line_number":173,"context_line":"  which allows appropriate access to the amphorae."},{"line_number":174,"context_line":"* Add appropriate routing to / from the \u0027lb-mgmt-net\u0027 such that egress is"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ac06dbe_fd3a1ecc","line":171,"in_reply_to":"ba0121b8_020d6b37","updated":"2016-08-25 20:01:10.000000000","message":"This note is now obsolete, since amphorae now use network name space and overlap won\u0027t matter anymore.","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":15226,"name":"Bharath M","email":"bharath.stacker@gmail.com","username":"bharath"},"change_message_id":"c7b4d94223c2e60124d9e87cbc8fc7e95a446e4a","unresolved":false,"context_lines":[{"line_number":230,"context_line":"communicate: The amphora REST API. Both amphora API and Octavia controller do"},{"line_number":231,"context_line":"bi-directional certificate-based authentication in order to authorize and"},{"line_number":232,"context_line":"encrypt communication.  You must therefore create appropriate SSL certificates"},{"line_number":233,"context_line":"which will be used for key signing, authentication, encryption and amphora"},{"line_number":234,"context_line":"health checks. There is a helper script to do this in this repository under:"},{"line_number":235,"context_line":"bin/create_certficiates.sh"},{"line_number":236,"context_line":""},{"line_number":237,"context_line":"In addition to the above, it can sometimes be useful for cloud operators to log"}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba0121b8_19e6e3af","line":234,"range":{"start_line":233,"start_character":67,"end_line":234,"end_character":14},"updated":"2016-03-31 09:43:15.000000000","message":"As discussed on IRC, health checks don\u0027t need certs.","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3903d80de06afc952a4489a342914674b51f450","unresolved":false,"context_lines":[{"line_number":230,"context_line":"communicate: The amphora REST API. Both amphora API and Octavia controller do"},{"line_number":231,"context_line":"bi-directional certificate-based authentication in order to authorize and"},{"line_number":232,"context_line":"encrypt communication.  You must therefore create appropriate SSL certificates"},{"line_number":233,"context_line":"which will be used for key signing, authentication, encryption and amphora"},{"line_number":234,"context_line":"health checks. There is a helper script to do this in this repository under:"},{"line_number":235,"context_line":"bin/create_certficiates.sh"},{"line_number":236,"context_line":""},{"line_number":237,"context_line":"In addition to the above, it can sometimes be useful for cloud operators to log"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ac06dbe_c135c0db","line":234,"range":{"start_line":233,"start_character":67,"end_line":234,"end_character":14},"in_reply_to":"ba0121b8_19e6e3af","updated":"2016-08-25 20:01:10.000000000","message":"Done","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":6732,"name":"Lingxian Kong","email":"anlin.kong@gmail.com","username":"kong"},"change_message_id":"a4a8a67eea8e0c30f42001b2aee45fcd45c00c2e","unresolved":false,"context_lines":[{"line_number":237,"context_line":"In addition to the above, it can sometimes be useful for cloud operators to log"},{"line_number":238,"context_line":"into running amphorae to troubleshoot problems. The standard method for doing"},{"line_number":239,"context_line":"this is to use SSH from the host running the controller worker. In order to do"},{"line_number":240,"context_line":"this, you must create an SSH public/private key pair specific to your cloud"},{"line_number":241,"context_line":"(for obvious security reasons). You will need to pass the path to this key to"},{"line_number":242,"context_line":"Octavia in the configuration below. You must also add this keypair to nova so"},{"line_number":243,"context_line":"that amphorae are initialized with it on boot."}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba0121b8_3430949e","line":240,"updated":"2016-04-03 23:49:26.000000000","message":"Thanks for mentioning this, but I can find these commands from other docs, and could you please give some hints here about the default user name of the amphorae guest vm and how to config that? Although, I know that it\u0027s something related to diskimage-builder.","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3903d80de06afc952a4489a342914674b51f450","unresolved":false,"context_lines":[{"line_number":237,"context_line":"In addition to the above, it can sometimes be useful for cloud operators to log"},{"line_number":238,"context_line":"into running amphorae to troubleshoot problems. The standard method for doing"},{"line_number":239,"context_line":"this is to use SSH from the host running the controller worker. In order to do"},{"line_number":240,"context_line":"this, you must create an SSH public/private key pair specific to your cloud"},{"line_number":241,"context_line":"(for obvious security reasons). You will need to pass the path to this key to"},{"line_number":242,"context_line":"Octavia in the configuration below. You must also add this keypair to nova so"},{"line_number":243,"context_line":"that amphorae are initialized with it on boot."}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ac06dbe_4150b00a","line":240,"in_reply_to":"ba0121b8_3430949e","updated":"2016-08-25 20:01:10.000000000","message":"I will add a troubleshooting section below with hints like this. Thanks for the question!","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":15226,"name":"Bharath M","email":"bharath.stacker@gmail.com","username":"bharath"},"change_message_id":"c7b4d94223c2e60124d9e87cbc8fc7e95a446e4a","unresolved":false,"context_lines":[{"line_number":328,"context_line":"* Update /etc/neutron/neutron_lbaas.conf as described above"},{"line_number":329,"context_line":""},{"line_number":330,"context_line":""},{"line_number":331,"context_line":"Register Octavia API Endpoint with Neutron"},{"line_number":332,"context_line":"__________________________________________"},{"line_number":333,"context_line":"This is also fairly straight-forward: Neutron needs to know how to talk to"},{"line_number":334,"context_line":"Octavia. The commands for doing this will look something like the following:"},{"line_number":335,"context_line":""},{"line_number":336,"context_line":"::"},{"line_number":337,"context_line":""},{"line_number":338,"context_line":"    # openstack service create octavia octavia \"Octavia Service\""},{"line_number":339,"context_line":"    # openstack endpoint create \u003cid_from_last_command\u003e \u003cregion\u003e http://10.0.0.1:9876/ http://10.0.0.1:9876/ http://10.0.0.1:9876/"},{"line_number":340,"context_line":""},{"line_number":341,"context_line":"You must:"},{"line_number":342,"context_line":""},{"line_number":343,"context_line":"* Register the Octavia API endpoint with Neutron"},{"line_number":344,"context_line":""},{"line_number":345,"context_line":""},{"line_number":346,"context_line":"Install Neutron-LBaaS v2 extension in Horizon"}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba0121b8_59605b01","line":343,"range":{"start_line":331,"start_character":0,"end_line":343,"end_character":48},"updated":"2016-03-31 09:43:15.000000000","message":"I dont see any requirement to register Octavia as an endpoint. In fact Neutron doesn\u0027t poll Keystone catalog to fetch endpoint.\n\nInstead, octavia API URL should be added to the \"base_url\" option under the [octavia] section of neutron.conf","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3903d80de06afc952a4489a342914674b51f450","unresolved":false,"context_lines":[{"line_number":328,"context_line":"* Update /etc/neutron/neutron_lbaas.conf as described above"},{"line_number":329,"context_line":""},{"line_number":330,"context_line":""},{"line_number":331,"context_line":"Register Octavia API Endpoint with Neutron"},{"line_number":332,"context_line":"__________________________________________"},{"line_number":333,"context_line":"This is also fairly straight-forward: Neutron needs to know how to talk to"},{"line_number":334,"context_line":"Octavia. The commands for doing this will look something like the following:"},{"line_number":335,"context_line":""},{"line_number":336,"context_line":"::"},{"line_number":337,"context_line":""},{"line_number":338,"context_line":"    # openstack service create octavia octavia \"Octavia Service\""},{"line_number":339,"context_line":"    # openstack endpoint create \u003cid_from_last_command\u003e \u003cregion\u003e http://10.0.0.1:9876/ http://10.0.0.1:9876/ http://10.0.0.1:9876/"},{"line_number":340,"context_line":""},{"line_number":341,"context_line":"You must:"},{"line_number":342,"context_line":""},{"line_number":343,"context_line":"* Register the Octavia API endpoint with Neutron"},{"line_number":344,"context_line":""},{"line_number":345,"context_line":""},{"line_number":346,"context_line":"Install Neutron-LBaaS v2 extension in Horizon"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ac06dbe_61d04c54","line":343,"range":{"start_line":331,"start_character":0,"end_line":343,"end_character":48},"in_reply_to":"9a061dce_d2ea860e","updated":"2016-08-25 20:01:10.000000000","message":"Aah! Thanks for pointing this out. I didn\u0027t realize all the implications of this.","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":6732,"name":"Lingxian Kong","email":"anlin.kong@gmail.com","username":"kong"},"change_message_id":"a4a8a67eea8e0c30f42001b2aee45fcd45c00c2e","unresolved":false,"context_lines":[{"line_number":328,"context_line":"* Update /etc/neutron/neutron_lbaas.conf as described above"},{"line_number":329,"context_line":""},{"line_number":330,"context_line":""},{"line_number":331,"context_line":"Register Octavia API Endpoint with Neutron"},{"line_number":332,"context_line":"__________________________________________"},{"line_number":333,"context_line":"This is also fairly straight-forward: Neutron needs to know how to talk to"},{"line_number":334,"context_line":"Octavia. The commands for doing this will look something like the following:"},{"line_number":335,"context_line":""},{"line_number":336,"context_line":"::"},{"line_number":337,"context_line":""},{"line_number":338,"context_line":"    # openstack service create octavia octavia \"Octavia Service\""},{"line_number":339,"context_line":"    # openstack endpoint create \u003cid_from_last_command\u003e \u003cregion\u003e http://10.0.0.1:9876/ http://10.0.0.1:9876/ http://10.0.0.1:9876/"},{"line_number":340,"context_line":""},{"line_number":341,"context_line":"You must:"},{"line_number":342,"context_line":""},{"line_number":343,"context_line":"* Register the Octavia API endpoint with Neutron"},{"line_number":344,"context_line":""},{"line_number":345,"context_line":""},{"line_number":346,"context_line":"Install Neutron-LBaaS v2 extension in Horizon"}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba0121b8_f4161cf0","line":343,"range":{"start_line":331,"start_character":0,"end_line":343,"end_character":48},"in_reply_to":"ba0121b8_59605b01","updated":"2016-04-03 23:49:26.000000000","message":"And exposing octaiva api by keystone endpoint will give users direct access to octavia service, right? We have no authentication mechanism for now.","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":6951,"name":"Brandon Logan","email":"brandon.logan@rackspace.com","username":"brandon-logan"},"change_message_id":"47e2a4fe27791b7362b8d474253c58d4f91e9713","unresolved":false,"context_lines":[{"line_number":328,"context_line":"* Update /etc/neutron/neutron_lbaas.conf as described above"},{"line_number":329,"context_line":""},{"line_number":330,"context_line":""},{"line_number":331,"context_line":"Register Octavia API Endpoint with Neutron"},{"line_number":332,"context_line":"__________________________________________"},{"line_number":333,"context_line":"This is also fairly straight-forward: Neutron needs to know how to talk to"},{"line_number":334,"context_line":"Octavia. The commands for doing this will look something like the following:"},{"line_number":335,"context_line":""},{"line_number":336,"context_line":"::"},{"line_number":337,"context_line":""},{"line_number":338,"context_line":"    # openstack service create octavia octavia \"Octavia Service\""},{"line_number":339,"context_line":"    # openstack endpoint create \u003cid_from_last_command\u003e \u003cregion\u003e http://10.0.0.1:9876/ http://10.0.0.1:9876/ http://10.0.0.1:9876/"},{"line_number":340,"context_line":""},{"line_number":341,"context_line":"You must:"},{"line_number":342,"context_line":""},{"line_number":343,"context_line":"* Register the Octavia API endpoint with Neutron"},{"line_number":344,"context_line":""},{"line_number":345,"context_line":""},{"line_number":346,"context_line":"Install Neutron-LBaaS v2 extension in Horizon"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a061dce_d2ea860e","line":343,"range":{"start_line":331,"start_character":0,"end_line":343,"end_character":48},"in_reply_to":"ba0121b8_f4161cf0","updated":"2016-04-06 19:01:27.000000000","message":"I came here to comment on this piece and yall already got it.  Agree with all of this.  Technically we could add octavia as an endpoint in keystone though and only show it to admin users though.  But at this point I don\u0027t think its useful.  At this point, treating Octavia as another Vendor\u0027s API makes sense.","commit_id":"5bc71962c89cfdd6a74d68921a197b041d49bbf6"},{"author":{"_account_id":6116,"name":"li,chen","email":"shchenli@cn.ibm.com","username":"chen-li"},"change_message_id":"5a6702f68874bc3a5bb1bc50f56d350755089a9a","unresolved":false,"context_lines":[{"line_number":38,"context_line":""},{"line_number":39,"context_line":"The devstack environment we recommend should be running Ubuntu Linux 14.04 or"},{"line_number":40,"context_line":"later. These instructions may work for other Linux operating systems or"},{"line_number":41,"context_line":"environments: However, most people doing development on Octavia are using"},{"line_number":42,"context_line":"Ubuntu for their test environment, so you will probably have the easiest time"},{"line_number":43,"context_line":"getting your devstack working with that OS."},{"line_number":44,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa7ab95a_d8118ab1","line":41,"range":{"start_line":41,"start_character":12,"end_line":41,"end_character":13},"updated":"2016-08-26 02:13:25.000000000","message":".","commit_id":"311e8df1109fa00ce2141171fea2fa5f7256bb48"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"6615f61aee9c8a0ea72b4e324b8ffebefe046076","unresolved":false,"context_lines":[{"line_number":38,"context_line":""},{"line_number":39,"context_line":"The devstack environment we recommend should be running Ubuntu Linux 14.04 or"},{"line_number":40,"context_line":"later. These instructions may work for other Linux operating systems or"},{"line_number":41,"context_line":"environments: However, most people doing development on Octavia are using"},{"line_number":42,"context_line":"Ubuntu for their test environment, so you will probably have the easiest time"},{"line_number":43,"context_line":"getting your devstack working with that OS."},{"line_number":44,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa7ab95a_ced2a034","line":41,"range":{"start_line":41,"start_character":12,"end_line":41,"end_character":13},"in_reply_to":"fa7ab95a_d8118ab1","updated":"2016-08-26 03:15:07.000000000","message":"Done","commit_id":"311e8df1109fa00ce2141171fea2fa5f7256bb48"},{"author":{"_account_id":6116,"name":"li,chen","email":"shchenli@cn.ibm.com","username":"chen-li"},"change_message_id":"5a6702f68874bc3a5bb1bc50f56d350755089a9a","unresolved":false,"context_lines":[{"line_number":266,"context_line":"Going into all of the specifics of how Octavia can be configured is actually"},{"line_number":267,"context_line":"beyond the scope of this document. For full documentation of this, please see"},{"line_number":268,"context_line":"the main OpenStack documentation site. For example, for the Mitaka release:"},{"line_number":269,"context_line":"http://docs.openstack.org/mitaka/config-reference/content/networking-plugin-lbaas.html"},{"line_number":270,"context_line":""},{"line_number":271,"context_line":"However, a configuration template can be found in etc/octavia.conf in this"},{"line_number":272,"context_line":"repository."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa7ab95a_d3e88b19","line":269,"range":{"start_line":269,"start_character":0,"end_line":269,"end_character":86},"updated":"2016-08-26 02:13:25.000000000","message":"Looks like for mitaka, the link should be:\n\nhttp://docs.openstack.org/mitaka/config-reference/networking/lbaas.html","commit_id":"311e8df1109fa00ce2141171fea2fa5f7256bb48"},{"author":{"_account_id":6116,"name":"li,chen","email":"shchenli@cn.ibm.com","username":"chen-li"},"change_message_id":"4ab99bfe2270d7d654488bd8ebc9836282d93779","unresolved":false,"context_lines":[{"line_number":266,"context_line":"Going into all of the specifics of how Octavia can be configured is actually"},{"line_number":267,"context_line":"beyond the scope of this document. For full documentation of this, please see"},{"line_number":268,"context_line":"the main OpenStack documentation site. For example, for the Mitaka release:"},{"line_number":269,"context_line":"http://docs.openstack.org/mitaka/config-reference/content/networking-plugin-lbaas.html"},{"line_number":270,"context_line":""},{"line_number":271,"context_line":"However, a configuration template can be found in etc/octavia.conf in this"},{"line_number":272,"context_line":"repository."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa7ab95a_595c9925","line":269,"range":{"start_line":269,"start_character":0,"end_line":269,"end_character":86},"in_reply_to":"fa7ab95a_8ec89876","updated":"2016-08-26 05:20:18.000000000","message":"Understand!","commit_id":"311e8df1109fa00ce2141171fea2fa5f7256bb48"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"6615f61aee9c8a0ea72b4e324b8ffebefe046076","unresolved":false,"context_lines":[{"line_number":266,"context_line":"Going into all of the specifics of how Octavia can be configured is actually"},{"line_number":267,"context_line":"beyond the scope of this document. For full documentation of this, please see"},{"line_number":268,"context_line":"the main OpenStack documentation site. For example, for the Mitaka release:"},{"line_number":269,"context_line":"http://docs.openstack.org/mitaka/config-reference/content/networking-plugin-lbaas.html"},{"line_number":270,"context_line":""},{"line_number":271,"context_line":"However, a configuration template can be found in etc/octavia.conf in this"},{"line_number":272,"context_line":"repository."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa7ab95a_8ec89876","line":269,"range":{"start_line":269,"start_character":0,"end_line":269,"end_character":86},"in_reply_to":"fa7ab95a_d3e88b19","updated":"2016-08-26 03:15:07.000000000","message":"Since we just merged a patch that creates a config reference right in this documentation repository, I\u0027m going to cross-link that here.\n\nAlso, Chen-- when you find errors when you are reviewing, you should put a \"-1\" on the review. If you don\u0027t put something other that \"0\" on the review, then the stackalytics system doesn\u0027t give you (or IBM) credit for the review, eh!","commit_id":"311e8df1109fa00ce2141171fea2fa5f7256bb48"}],"doc/source/main/introduction.rst":[{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":23,"context_line":"Simple or automatic application delivery scaling requires load balancing. If"},{"line_number":24,"context_line":"application scaling is considered a vital feature of any cloud for it to truly"},{"line_number":25,"context_line":"be considered a \"cloud,\" then this necessarily implies that load balancing is a"},{"line_number":26,"context_line":"vital feature for any cloud to truly be a cloud."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"As such, we consider Octavia to be as vital to OpenStack as Nova, Neutron,"},{"line_number":29,"context_line":"Glance or any of the other \"core\" projects which enable essential features of"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_65abff75","line":26,"updated":"2015-11-03 05:10:56.000000000","message":"That paragraph is ... odd.","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":37,"context_line":"  on demand."},{"line_number":38,"context_line":"* **Neutron** - For network connectivity between amphorae, tenant environments,"},{"line_number":39,"context_line":"  and external networks."},{"line_number":40,"context_line":"* **Barbican** - For managing TLS certificates and credentials, especially when"},{"line_number":41,"context_line":"  TLS session termination is configured on the amphorae."},{"line_number":42,"context_line":"* **keystone** - For authentication against the Octavia API, and for Octavia to"},{"line_number":43,"context_line":"  authenticate with other OpenStack projects."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_e5adcf84","line":40,"updated":"2015-11-03 05:10:56.000000000","message":"At this point I think it\u0027s \"only when\".","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":82,"context_line":"glossary throughout Octavia\u0027s documentation, and in discussions held by Octavia"},{"line_number":83,"context_line":"team members on public mailing lists, in IRC channels and at conferences. If"},{"line_number":84,"context_line":"you want to know how to \"talk the talk\" as it were so that we understand each"},{"line_number":85,"context_line":"other, it\u0027s a good idea to familiarize yourself with these terms."},{"line_number":86,"context_line":""},{"line_number":87,"context_line":""},{"line_number":88,"context_line":"A 10,000-foot overview of Octavia components"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_45e4c3df","line":85,"updated":"2015-11-03 05:10:56.000000000","message":"I would consider cutting the last sentence -- how formal/informal are these docs?","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":97,"context_line":"  services to tenant application environments. In version 0.5, the reference"},{"line_number":98,"context_line":"  implementation of the amphorae image is an Ubuntu virtual machine running"},{"line_number":99,"context_line":"  haproxy."},{"line_number":100,"context_line":"* **controller** - This is the \"brains\" of Octavia, managing everything from"},{"line_number":101,"context_line":"  API interaction, amphora lifecycle management and health monitoring, and load"},{"line_number":102,"context_line":"  balancing service configuration. The controller actually consists of several"},{"line_number":103,"context_line":"  other smaller subcomponents, which might be distributable across different"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_651e9fbc","line":100,"updated":"2015-11-03 05:10:56.000000000","message":"I think this is actually split out more now? There is an API service, a Controller Worker service, a Health Manager service, and a Housekeeping service (all running as different processes, possibly on different machines depending on deployment).","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":15226,"name":"Bharath M","email":"bharath.stacker@gmail.com","username":"bharath"},"change_message_id":"d288241ba6113f0a68c81d3be5867f752d835a6d","unresolved":false,"context_lines":[{"line_number":97,"context_line":"  services to tenant application environments. In version 0.5, the reference"},{"line_number":98,"context_line":"  implementation of the amphorae image is an Ubuntu virtual machine running"},{"line_number":99,"context_line":"  haproxy."},{"line_number":100,"context_line":"* **controller** - This is the \"brains\" of Octavia, managing everything from"},{"line_number":101,"context_line":"  API interaction, amphora lifecycle management and health monitoring, and load"},{"line_number":102,"context_line":"  balancing service configuration. The controller actually consists of several"},{"line_number":103,"context_line":"  other smaller subcomponents, which might be distributable across different"}],"source_content_type":"text/x-rst","patch_set":2,"id":"5a5ae5dd_fcb2da05","line":100,"in_reply_to":"1a26ad4f_651e9fbc","updated":"2016-02-09 08:41:52.000000000","message":"+1 . As controller is split into 4 different service components, respective stand-alone descriptions would be good.","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d7ccd56cc11ec124a6eea56befda616097fccd77","unresolved":false,"context_lines":[{"line_number":35,"context_line":""},{"line_number":36,"context_line":"Where Octavia fits into the OpenStack ecosystem"},{"line_number":37,"context_line":"-----------------------------------------------"},{"line_number":38,"context_line":"Application delivery scaling requires load balancing. If application scaling is"},{"line_number":39,"context_line":"in turn considered a vital feature of any cloud for it to truly be considered a"},{"line_number":40,"context_line":"\"cloud,\" then this implies that load balancing is a vital feature for any cloud"},{"line_number":41,"context_line":"to be a cloud."}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa7ab95a_9a1b451b","line":38,"updated":"2016-08-26 17:50:56.000000000","message":"nit:  I think availability is another reason load balancing is critical to a cloud.","commit_id":"7b22f0117ffb269825d2ab5f976ab551ed54aa0b"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d7ccd56cc11ec124a6eea56befda616097fccd77","unresolved":false,"context_lines":[{"line_number":52,"context_line":"  and external networks."},{"line_number":53,"context_line":"* **Barbican** - For managing TLS certificates and credentials, when TLS"},{"line_number":54,"context_line":"  session termination is configured on the amphorae."},{"line_number":55,"context_line":"* **keystone** - For authentication against the Octavia API, and for Octavia to"},{"line_number":56,"context_line":"  authenticate with other OpenStack projects."},{"line_number":57,"context_line":"* **Glance** - For storing the amphora virtual machine image."},{"line_number":58,"context_line":"* **Oslo** - For communication between Octavia controller components, making"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa7ab95a_daeead8a","line":55,"range":{"start_line":55,"start_character":4,"end_line":55,"end_character":12},"updated":"2016-08-26 17:50:56.000000000","message":"We should be consistent with case","commit_id":"7b22f0117ffb269825d2ab5f976ab551ed54aa0b"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d7ccd56cc11ec124a6eea56befda616097fccd77","unresolved":false,"context_lines":[{"line_number":55,"context_line":"* **keystone** - For authentication against the Octavia API, and for Octavia to"},{"line_number":56,"context_line":"  authenticate with other OpenStack projects."},{"line_number":57,"context_line":"* **Glance** - For storing the amphora virtual machine image."},{"line_number":58,"context_line":"* **Oslo** - For communication between Octavia controller components, making"},{"line_number":59,"context_line":"  Octavia work within the standard OpenStack framework and review system, and"},{"line_number":60,"context_line":"  project code structure."},{"line_number":61,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa7ab95a_dabced6e","line":58,"updated":"2016-08-26 17:50:56.000000000","message":"I would like us to also give a shout-out to Taskflow here.  Technically it is a part of Oslo, but it is another project that is used extensively in Octavia","commit_id":"7b22f0117ffb269825d2ab5f976ab551ed54aa0b"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d7ccd56cc11ec124a6eea56befda616097fccd77","unresolved":false,"context_lines":[{"line_number":68,"context_line":"write an Octavia networking driver for your SDN environment which can be a"},{"line_number":69,"context_line":"drop-in replacement for the standard Neutron networking driver in Octavia."},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"Also note: Octavia was not necessarily designed as a complete replacement for"},{"line_number":72,"context_line":"the Neutron LBaaS project. That is to say, Octavia \"plugs in\" to Neutron LBaaS"},{"line_number":73,"context_line":"the same way any proprietary vendor solution would: Through a Neutron LBaaS"},{"line_number":74,"context_line":"version 2 driver interface. In this sense, Octavia should be thought of as an"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa7ab95a_5d145743","line":71,"updated":"2016-08-26 17:50:56.000000000","message":"Since the spec to merge neutron-lbaas and octavia has been approved, we should change this paragraph.","commit_id":"7b22f0117ffb269825d2ab5f976ab551ed54aa0b"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d7ccd56cc11ec124a6eea56befda616097fccd77","unresolved":false,"context_lines":[{"line_number":85,"context_line":"creates, deploys and uses load balancing devices or services, terminology is"},{"line_number":86,"context_line":"often not used consistently. In order to reduce confusion, the Octavia team has"},{"line_number":87,"context_line":"created a glossary of terms as used within the context of the Octavia project"},{"line_number":88,"context_line":"and Neutron LBaaS version 2. This glossary should be available in this"},{"line_number":89,"context_line":"documentation repository. (If you are familiar with Neutron LBaaS version 1"},{"line_number":90,"context_line":"terms and usage, it is especially important to understand how the meaning of"},{"line_number":91,"context_line":"\"VIP,\" \"load balancer,\" and \"load balancing,\" have changed in Neutron LBaaS"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa7ab95a_dd26a7b9","line":88,"updated":"2016-08-26 17:50:56.000000000","message":"We should be able to provide a link here.","commit_id":"7b22f0117ffb269825d2ab5f976ab551ed54aa0b"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d7ccd56cc11ec124a6eea56befda616097fccd77","unresolved":false,"context_lines":[{"line_number":110,"context_line":"  metal servers which actually accomplish the delivery of load balancing"},{"line_number":111,"context_line":"  services to tenant application environments. In version 0.8, the reference"},{"line_number":112,"context_line":"  implementation of the amphorae image is an Ubuntu virtual machine running"},{"line_number":113,"context_line":"  haproxy."},{"line_number":114,"context_line":""},{"line_number":115,"context_line":"* **controller** - This is the \"brains\" of Octavia. It consists of four"},{"line_number":116,"context_line":"  sub-components, which are individual daemons that can be run on separate"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa7ab95a_3da953e0","line":113,"range":{"start_line":113,"start_character":2,"end_line":113,"end_character":9},"updated":"2016-08-26 17:50:56.000000000","message":"HAProxy since we capitalized Ubuntu","commit_id":"7b22f0117ffb269825d2ab5f976ab551ed54aa0b"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d7ccd56cc11ec124a6eea56befda616097fccd77","unresolved":false,"context_lines":[{"line_number":127,"context_line":"    up and running and otherwise healthy. It also handles failover events if"},{"line_number":128,"context_line":"    amphorae fail unexpectedly."},{"line_number":129,"context_line":""},{"line_number":130,"context_line":"  * **housekeeping manager** - This manages the deletion and clean-up of"},{"line_number":131,"context_line":"    amphorae which are gracefully terminated. It also manages the spare"},{"line_number":132,"context_line":"    amphora pool, if used."},{"line_number":133,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa7ab95a_20a68610","line":130,"updated":"2016-08-26 17:50:56.000000000","message":"This is no longer the case.  Housekeeping does not delete amphora any longer.\n\nIt cleans up stale (deleted) database records, manages the spares pool, and manages amphora certificate rotation.","commit_id":"7b22f0117ffb269825d2ab5f976ab551ed54aa0b"},{"author":{"_account_id":23377,"name":"Ben Carr","email":"carrbens@gmail.com","username":"carrbs"},"change_message_id":"539c929f74d30cd61d5606157c64ebe89d28025d","unresolved":false,"context_lines":[{"line_number":71,"context_line":"write an Octavia networking driver for your SDN environment which can be a"},{"line_number":72,"context_line":"drop-in replacement for the standard Neutron networking driver in Octavia."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"Also note: Octavia was not necessarily designed as a complete replacement for"},{"line_number":75,"context_line":"the Neutron LBaaS project. That is to say, Octavia was designed to \"plug in\" to"},{"line_number":76,"context_line":"Neutron LBaaS the same way any proprietary vendor solution would: Through a"},{"line_number":77,"context_line":"Neutron LBaaS version 2 driver interface. In this sense, at the present time"},{"line_number":78,"context_line":"Octavia should be thought of as an \"open source vendor\" for Neutron LBaaS"},{"line_number":79,"context_line":"rather than as a Neutron LBaaS substitute. Because of this, in configuring load"},{"line_number":80,"context_line":"balancing services with Octavia, we recommend tenants do this through the"},{"line_number":81,"context_line":"Neutron LBaaS version 2 CLI and API."},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"In the near future Octavia will supplant Neutron LBaaS as the load balancing"},{"line_number":84,"context_line":"solution for OpenStack. When this happens, third party vendor drivers that"},{"line_number":85,"context_line":"presently \"plug in\" to Neutron LBaaS will instead plug in to Octavia. For"},{"line_number":86,"context_line":"end-users, this transition should be relatively seamless, as Octavia will"},{"line_number":87,"context_line":"support the Neutron LBaaS v2 API and have a similar CLI interface."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"Octavia terminology"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_ff5638cd","line":87,"range":{"start_line":74,"start_character":0,"end_line":87,"end_character":66},"updated":"2016-08-31 04:48:17.000000000","message":"The first couple sentences of these paragraphs seem contradictory. \nMight be better to start the note out like:\n\n\"Also note: In the near future, Octavia will supplant Neutron LBaaS as the load balancing solution for OpenStack, however Octavia was not originally designed as a complete replacement for the Neutron LBaaS project.\"...\n\nand then reword the intro to the next paragraph, something like:\n\n\"When Neutron LBaaS is replaced with Octavia, third party vendor drivers that presently \"plug in\" to Neutron LBaaS will instead \"plug in\" directly to Octavia.\"...\n\nIf this seems like too much editing, maybe simply changing \"necessarily\" out with \"originally\" or \"initially\" would clarify?","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":21636,"name":"Leslie Lundquist","email":"llundquist@us.ibm.com"},"change_message_id":"3835c545889e70308bde44054674150f121e215e","unresolved":false,"context_lines":[{"line_number":71,"context_line":"write an Octavia networking driver for your SDN environment which can be a"},{"line_number":72,"context_line":"drop-in replacement for the standard Neutron networking driver in Octavia."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"Also note: Octavia was not necessarily designed as a complete replacement for"},{"line_number":75,"context_line":"the Neutron LBaaS project. That is to say, Octavia was designed to \"plug in\" to"},{"line_number":76,"context_line":"Neutron LBaaS the same way any proprietary vendor solution would: Through a"},{"line_number":77,"context_line":"Neutron LBaaS version 2 driver interface. In this sense, at the present time"},{"line_number":78,"context_line":"Octavia should be thought of as an \"open source vendor\" for Neutron LBaaS"},{"line_number":79,"context_line":"rather than as a Neutron LBaaS substitute. Because of this, in configuring load"},{"line_number":80,"context_line":"balancing services with Octavia, we recommend tenants do this through the"},{"line_number":81,"context_line":"Neutron LBaaS version 2 CLI and API."},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"In the near future Octavia will supplant Neutron LBaaS as the load balancing"},{"line_number":84,"context_line":"solution for OpenStack. When this happens, third party vendor drivers that"},{"line_number":85,"context_line":"presently \"plug in\" to Neutron LBaaS will instead plug in to Octavia. For"},{"line_number":86,"context_line":"end-users, this transition should be relatively seamless, as Octavia will"},{"line_number":87,"context_line":"support the Neutron LBaaS v2 API and have a similar CLI interface."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"Octavia terminology"}],"source_content_type":"text/x-rst","patch_set":8,"id":"fa7ab95a_b4c81876","line":87,"range":{"start_line":74,"start_character":0,"end_line":87,"end_character":66},"in_reply_to":"fa7ab95a_ff5638cd","updated":"2016-08-31 20:50:50.000000000","message":"Fixed","commit_id":"e00b022c9b9ec73576e3f6d14582ab5a892bc709"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3dd9aa73642919e00a721abc8a2a4baac3e25bd","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Octavia is an open source, operator-scale load balancing solution designed to"},{"line_number":22,"context_line":"work with OpenStack."},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"Octavia was borne out of the Neutron LBaaS project."},{"line_number":25,"context_line":"Its conception influenced the transformation of the Neutron LBaaS project,"},{"line_number":26,"context_line":"as Neutron LBaaS moved"},{"line_number":27,"context_line":"from version 1 to version 2. Starting with the Liberty release of OpenStack,"},{"line_number":28,"context_line":"Octavia has become the reference implementation for Neutron LBaaS version 2."},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"Octavia accomplishes its delivery of load balancing services by managing a"},{"line_number":31,"context_line":"fleet of virtual machines, containers, or bare metal servers—collectively"}],"source_content_type":"text/x-rst","patch_set":9,"id":"fa7ab95a_bc7d1e1e","line":28,"range":{"start_line":24,"start_character":0,"end_line":28,"end_character":76},"updated":"2016-09-01 19:12:19.000000000","message":"Leslie, could you fix the line lengths here to be more uniform? Each line should be at most 79 characters long, so technically this passes, but it looks really odd to have short lines interspersed with longer ones in this paragraph when viewing the text file (which some people will do).","commit_id":"2c9581618a67f5dd1c386331dceb2fa9f1bd4a46"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3dd9aa73642919e00a721abc8a2a4baac3e25bd","unresolved":false,"context_lines":[{"line_number":35,"context_line":""},{"line_number":36,"context_line":"Where Octavia fits into the OpenStack ecosystem"},{"line_number":37,"context_line":"-----------------------------------------------"},{"line_number":38,"context_line":"Load balancing is essential for enabling simple or automatic delivery scaling."},{"line_number":39,"context_line":"In turn, application delivery scaling must be considered a vital feature of any"},{"line_number":40,"context_line":"cloud. Together, these facts imply that load balancing is a vital feature of"},{"line_number":41,"context_line":"any cloud."}],"source_content_type":"text/x-rst","patch_set":9,"id":"fa7ab95a_1ca8ca76","line":38,"range":{"start_line":38,"start_character":0,"end_line":38,"end_character":78},"updated":"2016-09-01 19:12:19.000000000","message":"You removed my verbiage about availability. Availability should specifically be called out in this paragraph.","commit_id":"2c9581618a67f5dd1c386331dceb2fa9f1bd4a46"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3dd9aa73642919e00a721abc8a2a4baac3e25bd","unresolved":false,"context_lines":[{"line_number":37,"context_line":"-----------------------------------------------"},{"line_number":38,"context_line":"Load balancing is essential for enabling simple or automatic delivery scaling."},{"line_number":39,"context_line":"In turn, application delivery scaling must be considered a vital feature of any"},{"line_number":40,"context_line":"cloud. Together, these facts imply that load balancing is a vital feature of"},{"line_number":41,"context_line":"any cloud."},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"Therefore, Octavia is as essential as Glance or any other \"core\" project that"},{"line_number":44,"context_line":"enables the  essential features of a modern OpenStack cloud."}],"source_content_type":"text/x-rst","patch_set":9,"id":"fa7ab95a_9c0e9a8a","line":41,"range":{"start_line":40,"start_character":60,"end_line":41,"end_character":10},"updated":"2016-09-01 19:12:19.000000000","message":"The implication in my previous wording was that some \"clouds\" out there are not truly clouds because they don\u0027t do load balancing natively. I don\u0027t like that this implication is lost in your rewording of this paragraph.","commit_id":"2c9581618a67f5dd1c386331dceb2fa9f1bd4a46"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3dd9aa73642919e00a721abc8a2a4baac3e25bd","unresolved":false,"context_lines":[{"line_number":40,"context_line":"cloud. Together, these facts imply that load balancing is a vital feature of"},{"line_number":41,"context_line":"any cloud."},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"Therefore, Octavia is as essential as Glance or any other \"core\" project that"},{"line_number":44,"context_line":"enables the  essential features of a modern OpenStack cloud."},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"In accomplishing its role, Octavia makes use of other OpenStack projects:"},{"line_number":47,"context_line":""}],"source_content_type":"text/x-rst","patch_set":9,"id":"fa7ab95a_9c377a4c","line":44,"range":{"start_line":43,"start_character":0,"end_line":44,"end_character":60},"updated":"2016-09-01 19:12:19.000000000","message":"Technically, right now you can run neutron-lbaas with a vendor driver and skip Octavia entirely. So, I think softening our language to say \"we consider it to be as essential...\" is appropriate.","commit_id":"2c9581618a67f5dd1c386331dceb2fa9f1bd4a46"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3dd9aa73642919e00a721abc8a2a4baac3e25bd","unresolved":false,"context_lines":[{"line_number":76,"context_line":"vendor solution would: through a Neutron LBaaS version 2 driver interface."},{"line_number":77,"context_line":"You could think of Octavia as an \"open source vendor\" for Neutron LBaaS,"},{"line_number":78,"context_line":"rather than as a substitute for Neutron LBaaS. For this reason, we recommend"},{"line_number":79,"context_line":"that tenants configure load balancing services with Octavia by means of the"},{"line_number":80,"context_line":"Neutron LBaaS version 2 CLI and API."},{"line_number":81,"context_line":""},{"line_number":82,"context_line":"Soon, Octavia will supplant Neutron LBaaS as the load balancing solution for"}],"source_content_type":"text/x-rst","patch_set":9,"id":"fa7ab95a_1c49aab7","line":79,"range":{"start_line":79,"start_character":60,"end_line":79,"end_character":71},"updated":"2016-09-01 19:12:19.000000000","message":"I prefer \"through\"","commit_id":"2c9581618a67f5dd1c386331dceb2fa9f1bd4a46"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3dd9aa73642919e00a721abc8a2a4baac3e25bd","unresolved":false,"context_lines":[{"line_number":90,"context_line":"-------------------"},{"line_number":91,"context_line":"Before you proceed further in this introduction, please note:"},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Experience shows that—within the subsegment of the IT industry that"},{"line_number":94,"context_line":"creates, deploys, and uses load balancing devices or services— terminology"},{"line_number":95,"context_line":"often is used inconsistently. To reduce confusion, the Octavia team has"},{"line_number":96,"context_line":"created a glossary of terms as they are defined and used within the context"}],"source_content_type":"text/x-rst","patch_set":9,"id":"fa7ab95a_3c966ef0","line":93,"range":{"start_line":93,"start_character":21,"end_line":93,"end_character":23},"updated":"2016-09-01 19:12:19.000000000","message":"Since we don\u0027t have a mdash in plain text, should we use two dashes here? Right now this looks like a hyphenated word, which is confusing.","commit_id":"2c9581618a67f5dd1c386331dceb2fa9f1bd4a46"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3dd9aa73642919e00a721abc8a2a4baac3e25bd","unresolved":false,"context_lines":[{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Experience shows that—within the subsegment of the IT industry that"},{"line_number":94,"context_line":"creates, deploys, and uses load balancing devices or services— terminology"},{"line_number":95,"context_line":"often is used inconsistently. To reduce confusion, the Octavia team has"},{"line_number":96,"context_line":"created a glossary of terms as they are defined and used within the context"},{"line_number":97,"context_line":"of the Octavia project and Neutron LBaaS version 2. This glossary is available"},{"line_number":98,"context_line":"here: :doc:`glossary`"}],"source_content_type":"text/x-rst","patch_set":9,"id":"fa7ab95a_dcae622d","line":95,"range":{"start_line":95,"start_character":0,"end_line":95,"end_character":8},"updated":"2016-09-01 19:12:19.000000000","message":"\"is often\" reads less awkwardly.","commit_id":"2c9581618a67f5dd1c386331dceb2fa9f1bd4a46"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3dd9aa73642919e00a721abc8a2a4baac3e25bd","unresolved":false,"context_lines":[{"line_number":101,"context_line":"especially important for you to understand how the meanings of the terms “VIP,\""},{"line_number":102,"context_line":"\"load balancer,\" and \"load balancing,\" have changed in Neutron LBaaS version 2."},{"line_number":103,"context_line":""},{"line_number":104,"context_line":"Our use of these terms must remain consistent with the :doc:`glossary`"},{"line_number":105,"context_line":"throughout Octavia\u0027s documentation, in discussions held by Octavia team members"},{"line_number":106,"context_line":"on public mailing lists, in IRC channels, and at conferences. To avoid"},{"line_number":107,"context_line":"misunderstandings, it\u0027s a good idea to familiarize yourself with these glossary"}],"source_content_type":"text/x-rst","patch_set":9,"id":"fa7ab95a_5c509232","line":104,"range":{"start_line":104,"start_character":23,"end_line":104,"end_character":27},"updated":"2016-09-01 19:12:19.000000000","message":"Um... \"should\" is more correct here. :) Or \"will\". But I like \"should\" better.","commit_id":"2c9581618a67f5dd1c386331dceb2fa9f1bd4a46"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"d3dd9aa73642919e00a721abc8a2a4baac3e25bd","unresolved":false,"context_lines":[{"line_number":130,"context_line":""},{"line_number":131,"context_line":"  * **API Controller** - As the name implies, this subcomponent runs Octavia\u0027s"},{"line_number":132,"context_line":"    API. It takes API requests, performs simple sanitizing on them, and ships"},{"line_number":133,"context_line":"    them off to the controller worker by means of the Oslo messaging"},{"line_number":134,"context_line":"    bus."},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"  * **Controller Worker** - This subcomponent takes sanitized API commands from"}],"source_content_type":"text/x-rst","patch_set":9,"id":"fa7ab95a_4f2c5299","line":133,"range":{"start_line":133,"start_character":38,"end_line":133,"end_character":49},"updated":"2016-09-01 19:12:19.000000000","message":"I really don\u0027t like the phrase \"by means of\". There are so many less wordy alternatives.","commit_id":"2c9581618a67f5dd1c386331dceb2fa9f1bd4a46"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"68086b874c8427cb70dbfda9bbccf4f8630258f7","unresolved":false,"context_lines":[{"line_number":113,"context_line":"   :width: 660px"},{"line_number":114,"context_line":"   :alt: Octavia Component Overview"},{"line_number":115,"context_line":""},{"line_number":116,"context_line":"Starting with version 0.8, Octavia consists of the following major"},{"line_number":117,"context_line":"components:"},{"line_number":118,"context_line":""},{"line_number":119,"context_line":"* **amphorae** - Amphorae are the individual virtual machines, containers, or"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_a081e091","line":116,"range":{"start_line":116,"start_character":22,"end_line":116,"end_character":25},"updated":"2016-09-14 04:03:39.000000000","message":"Nit: This will merge for 0.9 which has the same architecture.  Not worth a patch, but might help folks.","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"},{"author":{"_account_id":11685,"name":"Stephen Balukoff","email":"stephen@balukoff.com","username":"sbalukoff"},"change_message_id":"86b855094caa8b04c2901fbbf19ddf0f21fe7293","unresolved":false,"context_lines":[{"line_number":113,"context_line":"   :width: 660px"},{"line_number":114,"context_line":"   :alt: Octavia Component Overview"},{"line_number":115,"context_line":""},{"line_number":116,"context_line":"Starting with version 0.8, Octavia consists of the following major"},{"line_number":117,"context_line":"components:"},{"line_number":118,"context_line":""},{"line_number":119,"context_line":"* **amphorae** - Amphorae are the individual virtual machines, containers, or"}],"source_content_type":"text/x-rst","patch_set":11,"id":"7a8ec9b2_cbffbda8","line":116,"range":{"start_line":116,"start_character":22,"end_line":116,"end_character":25},"in_reply_to":"7a8ec9b2_a081e091","updated":"2016-09-14 17:28:48.000000000","message":"Ok. I mean-- this is the reason this sentence begins \"Starting with.\" But I am happy to just talk about the current release here, too.","commit_id":"a751b342e36d67af0b7a8ce2d1d6edd6b2541d3c"}],"doc/source/main/quick-start.rst":[{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":10,"context_line":"* 6GB RAM minimum"},{"line_number":11,"context_line":"* \"vmx\" in /proc/cpuinfo"},{"line_number":12,"context_line":"* Ubuntu 14.04 or later"},{"line_number":13,"context_line":"* On that host, copy and run: octavia/devstack/contrib/new-octavia-devstack.sh"},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"System requirements"},{"line_number":16,"context_line":"-------------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_e5806fc1","line":13,"updated":"2015-11-03 05:10:56.000000000","message":"You might want to include \"as root\" here as well, for this to be a truly useful tl;dr section. You mentioned it below, but if they didn\u0027t read the rest...","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":21,"context_line":"necessary components. For most devstack environments, the limiting resource"},{"line_number":22,"context_line":"will be RAM. At the present time, we recommend at least 6GB of RAM. More, if"},{"line_number":23,"context_line":"you want to run a couple of application server VMs (so that Octavia has"},{"line_number":24,"context_line":"something to load balance within your devstack environment)."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"Also, because the current implementation of Octavia delivers load balancing"},{"line_number":27,"context_line":"services using amphorae that run as Nova virtual machines, it is a very good"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_45ce032f","line":24,"updated":"2015-11-03 05:10:56.000000000","message":"This last sentence is a weird sort of fragment. \"More RAM is recommended if [...]\" might be better.","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":115,"context_line":"You must:"},{"line_number":116,"context_line":""},{"line_number":117,"context_line":"* Create \u0027octavia\u0027 user"},{"line_number":118,"context_line":"* Add the \u0027service\u0027 role to this user"},{"line_number":119,"context_line":""},{"line_number":120,"context_line":""},{"line_number":121,"context_line":"Load Balancer Network Configuration"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_85f73b58","line":118,"updated":"2015-11-03 05:10:56.000000000","message":"I originally thought this was a system user, but you are talking about a keystone user? If that is the case, the Barbican ACL process assumes the Octavia service account is the same as the Neutron service account (to access the Barbican secrets, the ACLs would have to be set for each account).","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":231,"context_line":""},{"line_number":232,"context_line":"* Create SSH keys for communicating with the amphorae (if SSH is used)"},{"line_number":233,"context_line":"* Add the SSH keypair to nova (if SSH is used)"},{"line_number":234,"context_line":"* Create SSL certificates for communicating with the amphorae"},{"line_number":235,"context_line":""},{"line_number":236,"context_line":""},{"line_number":237,"context_line":"Initialize Octavia Database"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_c52453c6","line":234,"updated":"2015-11-03 05:10:56.000000000","message":"This whole section is somewhat confusing -- *I* knew the answer prior to reading this, but if I hadn\u0027t, I believe I would be quite confused. I need SSL Certificates set up even if I\u0027m using the SSH driver? The two options kind of blend together above, maybe try to separate them more explicitly?","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":278,"context_line":"a new amphora can be non-trivial in some cloud environments (and the"},{"line_number":279,"context_line":"reliability of such operations can sometimes be less than ideal), this"},{"line_number":280,"context_line":"directive instructs Octavia to attempt to maintain a certain number of amphorae"},{"line_number":281,"context_line":"running in a \"running but not configured\" state. These amphora will run idly"},{"line_number":282,"context_line":"waiting for configuration from the Octavia controller. The overall effect of"},{"line_number":283,"context_line":"this is to greatly reduce the time it takes and increase the reliability of"},{"line_number":284,"context_line":"deploying a new load balancing service on demand. This comes at the cost of"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_c50bf328","line":281,"updated":"2015-11-03 05:10:56.000000000","message":"running in a \"running but not configured\" state. These amphora will run idly\n\nsounds a bit redundant, and should probably be\n\nin a \"running but not configured\" state. These amphora will idle","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"62168aa039bcae0563fa54edfc4acf7e896d80bf","unresolved":false,"context_lines":[{"line_number":320,"context_line":""},{"line_number":321,"context_line":"You must:"},{"line_number":322,"context_line":""},{"line_number":323,"context_line":"* Register the Octavia API endpoint with Neutron"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_583266f3","line":323,"updated":"2015-11-03 05:10:56.000000000","message":"Is there supposed to be a \"how\" here? Is this actually the end of the document?","commit_id":"046833bf641e4d242c764633f126f56c6a6257e1"}]}