)]}'
{"doc/source/guides/operator-maintenance.rst":[{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":17,"context_line":"Operator Maintenace  Guide"},{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":"This document is intended for operators. For a developer guide see the"},{"line_number":20,"context_line":"dev-quick-start in this documentation repository. For an end-user guide,"},{"line_number":21,"context_line":"please see the end-user quick-start guide and cookbook in this documentation"},{"line_number":22,"context_line":"repository."},{"line_number":23,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_4f66ce2a","line":20,"updated":"2017-03-22 22:51:50.000000000","message":"This can be a link.\n\n:ref:`my-reference-label` here\n\n.. _my-reference-label: in the other guides (if one doesn\u0027t already exist)","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":17,"context_line":"Operator Maintenace  Guide"},{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":"This document is intended for operators. For a developer guide see the"},{"line_number":20,"context_line":"dev-quick-start in this documentation repository. For an end-user guide,"},{"line_number":21,"context_line":"please see the end-user quick-start guide and cookbook in this documentation"},{"line_number":22,"context_line":"repository."},{"line_number":23,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_03f80ec4","line":20,"in_reply_to":"1a1ced50_4f66ce2a","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":"This document is intended for operators. For a developer guide see the"},{"line_number":20,"context_line":"dev-quick-start in this documentation repository. For an end-user guide,"},{"line_number":21,"context_line":"please see the end-user quick-start guide and cookbook in this documentation"},{"line_number":22,"context_line":"repository."},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"Monitoring"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_8f6c4609","line":21,"range":{"start_line":21,"start_character":46,"end_line":21,"end_character":54},"updated":"2017-03-22 22:51:50.000000000","message":"Same","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":"This document is intended for operators. For a developer guide see the"},{"line_number":20,"context_line":"dev-quick-start in this documentation repository. For an end-user guide,"},{"line_number":21,"context_line":"please see the end-user quick-start guide and cookbook in this documentation"},{"line_number":22,"context_line":"repository."},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"Monitoring"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_6f69caf8","line":21,"range":{"start_line":21,"start_character":24,"end_line":21,"end_character":35},"updated":"2017-03-22 22:51:50.000000000","message":"Same here","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":"This document is intended for operators. For a developer guide see the"},{"line_number":20,"context_line":"dev-quick-start in this documentation repository. For an end-user guide,"},{"line_number":21,"context_line":"please see the end-user quick-start guide and cookbook in this documentation"},{"line_number":22,"context_line":"repository."},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"Monitoring"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_430206b6","line":21,"range":{"start_line":21,"start_character":24,"end_line":21,"end_character":35},"in_reply_to":"1a1ced50_6f69caf8","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Octavia will log each failover to the corresponding health manager logs. It is"},{"line_number":35,"context_line":"advisable to use log analytics to monitor failover trends to notice problems"},{"line_number":36,"context_line":"in the Open Stack Cluster early. We have seen neutron (network) connectivity"},{"line_number":37,"context_line":"issues, Denial of Service attacks, and nova (compute) malfunctions lead to a"},{"line_number":38,"context_line":"higher than normal failover rate. Alternatively, the monitoring of the other"},{"line_number":39,"context_line":"servcies showed problems as well, so depending on your overall monitoring"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_2f7c32b4","line":36,"range":{"start_line":36,"start_character":7,"end_line":36,"end_character":17},"updated":"2017-03-22 22:51:50.000000000","message":"OpenStack","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Octavia will log each failover to the corresponding health manager logs. It is"},{"line_number":35,"context_line":"advisable to use log analytics to monitor failover trends to notice problems"},{"line_number":36,"context_line":"in the Open Stack Cluster early. We have seen neutron (network) connectivity"},{"line_number":37,"context_line":"issues, Denial of Service attacks, and nova (compute) malfunctions lead to a"},{"line_number":38,"context_line":"higher than normal failover rate. Alternatively, the monitoring of the other"},{"line_number":39,"context_line":"servcies showed problems as well, so depending on your overall monitoring"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_cf61de06","line":36,"range":{"start_line":36,"start_character":18,"end_line":36,"end_character":25},"updated":"2017-03-22 22:51:50.000000000","message":"cluster (not to confuse it with Senlin)","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Octavia will log each failover to the corresponding health manager logs. It is"},{"line_number":35,"context_line":"advisable to use log analytics to monitor failover trends to notice problems"},{"line_number":36,"context_line":"in the Open Stack Cluster early. We have seen neutron (network) connectivity"},{"line_number":37,"context_line":"issues, Denial of Service attacks, and nova (compute) malfunctions lead to a"},{"line_number":38,"context_line":"higher than normal failover rate. Alternatively, the monitoring of the other"},{"line_number":39,"context_line":"servcies showed problems as well, so depending on your overall monitoring"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_639b8273","line":36,"range":{"start_line":36,"start_character":7,"end_line":36,"end_character":17},"in_reply_to":"1a1ced50_2f7c32b4","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Octavia will log each failover to the corresponding health manager logs. It is"},{"line_number":35,"context_line":"advisable to use log analytics to monitor failover trends to notice problems"},{"line_number":36,"context_line":"in the Open Stack Cluster early. We have seen neutron (network) connectivity"},{"line_number":37,"context_line":"issues, Denial of Service attacks, and nova (compute) malfunctions lead to a"},{"line_number":38,"context_line":"higher than normal failover rate. Alternatively, the monitoring of the other"},{"line_number":39,"context_line":"servcies showed problems as well, so depending on your overall monitoring"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_439e8664","line":36,"range":{"start_line":36,"start_character":18,"end_line":36,"end_character":25},"in_reply_to":"1a1ced50_cf61de06","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":40,"context_line":"strategy this might be optional."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"If additional monitoring is necessary review the corresponding calls on"},{"line_number":43,"context_line":"the amphora agent REST interface (see"},{"line_number":44,"context_line":"https://docs.openstack.org/developer/octavia/api/haproxy-amphora-api.html#get-amphora-details)"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"Monitoring Pool Members"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_ef23faba","line":43,"range":{"start_line":43,"start_character":4,"end_line":43,"end_character":32},"updated":"2017-03-22 22:51:50.000000000","message":"This can also be cleaned up using a link instead of the full URL in the doc.","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":40,"context_line":"strategy this might be optional."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"If additional monitoring is necessary review the corresponding calls on"},{"line_number":43,"context_line":"the amphora agent REST interface (see"},{"line_number":44,"context_line":"https://docs.openstack.org/developer/octavia/api/haproxy-amphora-api.html#get-amphora-details)"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"Monitoring Pool Members"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_43acc68c","line":43,"range":{"start_line":43,"start_character":4,"end_line":43,"end_character":32},"in_reply_to":"1a1ced50_ef23faba","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":48,"context_line":""},{"line_number":49,"context_line":"Octavia will use the health infromation from the underlying load balancing"},{"line_number":50,"context_line":"application to determine the health of members. This information will be"},{"line_number":51,"context_line":"streamed to the Neutron LBaaS database and made available via the status"},{"line_number":52,"context_line":"tree or other API methods. For critical applications we recommend to"},{"line_number":53,"context_line":"poll this information in regular intervals."},{"line_number":54,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_8f11a65f","line":51,"range":{"start_line":51,"start_character":16,"end_line":51,"end_character":38},"updated":"2017-03-22 22:51:50.000000000","message":"Octavia","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":48,"context_line":""},{"line_number":49,"context_line":"Octavia will use the health infromation from the underlying load balancing"},{"line_number":50,"context_line":"application to determine the health of members. This information will be"},{"line_number":51,"context_line":"streamed to the Neutron LBaaS database and made available via the status"},{"line_number":52,"context_line":"tree or other API methods. For critical applications we recommend to"},{"line_number":53,"context_line":"poll this information in regular intervals."},{"line_number":54,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_43c3e638","line":51,"range":{"start_line":51,"start_character":16,"end_line":51,"end_character":38},"in_reply_to":"1a1ced50_8f11a65f","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":48,"context_line":""},{"line_number":49,"context_line":"Octavia will use the health infromation from the underlying load balancing"},{"line_number":50,"context_line":"application to determine the health of members. This information will be"},{"line_number":51,"context_line":"streamed to the Neutron LBaaS database and made available via the status"},{"line_number":52,"context_line":"tree or other API methods. For critical applications we recommend to"},{"line_number":53,"context_line":"poll this information in regular intervals."},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"Monitoring load balancer functionality"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_cf0f1e35","line":52,"range":{"start_line":51,"start_character":66,"end_line":52,"end_character":4},"updated":"2017-03-22 22:51:50.000000000","message":"Soon we can link this too in the API-REF","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":56,"context_line":"--------------------------------------"},{"line_number":57,"context_line":""},{"line_number":58,"context_line":"For production sites we recommend to use outside monitoring services like"},{"line_number":59,"context_line":"pingdom or similar. They will not only monitor if the site is up but also if"},{"line_number":60,"context_line":"it is reachable from several servers aroudn the globe."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"Monitoring Octavia Control Plane"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_0a584455","line":59,"range":{"start_line":59,"start_character":0,"end_line":59,"end_character":7},"updated":"2017-03-22 22:51:50.000000000","message":"Let\u0027s not call out a specific provider","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":56,"context_line":"--------------------------------------"},{"line_number":57,"context_line":""},{"line_number":58,"context_line":"For production sites we recommend to use outside monitoring services like"},{"line_number":59,"context_line":"pingdom or similar. They will not only monitor if the site is up but also if"},{"line_number":60,"context_line":"it is reachable from several servers aroudn the globe."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"Monitoring Octavia Control Plane"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_4a1b1c81","line":59,"range":{"start_line":59,"start_character":20,"end_line":59,"end_character":64},"updated":"2017-03-22 22:51:50.000000000","message":"We can also mention here that it monitors parts of the system outside the visibility of Octavia.  I.e. routers, etc.  Something like that.","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":56,"context_line":"--------------------------------------"},{"line_number":57,"context_line":""},{"line_number":58,"context_line":"For production sites we recommend to use outside monitoring services like"},{"line_number":59,"context_line":"pingdom or similar. They will not only monitor if the site is up but also if"},{"line_number":60,"context_line":"it is reachable from several servers aroudn the globe."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"Monitoring Octavia Control Plane"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_03256e09","line":59,"range":{"start_line":59,"start_character":20,"end_line":59,"end_character":64},"in_reply_to":"1a1ced50_4a1b1c81","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":57,"context_line":""},{"line_number":58,"context_line":"For production sites we recommend to use outside monitoring services like"},{"line_number":59,"context_line":"pingdom or similar. They will not only monitor if the site is up but also if"},{"line_number":60,"context_line":"it is reachable from several servers aroudn the globe."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"Monitoring Octavia Control Plane"},{"line_number":63,"context_line":"--------------------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_2a53403a","line":60,"range":{"start_line":60,"start_character":37,"end_line":60,"end_character":43},"updated":"2017-03-22 22:51:50.000000000","message":"around","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":57,"context_line":""},{"line_number":58,"context_line":"For production sites we recommend to use outside monitoring services like"},{"line_number":59,"context_line":"pingdom or similar. They will not only monitor if the site is up but also if"},{"line_number":60,"context_line":"it is reachable from several servers aroudn the globe."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"Monitoring Octavia Control Plane"},{"line_number":63,"context_line":"--------------------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_a363ba40","line":60,"range":{"start_line":60,"start_character":37,"end_line":60,"end_character":43},"in_reply_to":"1a1ced50_2a53403a","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":63,"context_line":"--------------------------------"},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"To monitor the Octavia control plane we recommend process monitoring of the"},{"line_number":66,"context_line":"main octavia processes:"},{"line_number":67,"context_line":"* octavia-api"},{"line_number":68,"context_line":"* octavia-worker"},{"line_number":69,"context_line":"* octavia-health-manager"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_85f26704","line":66,"updated":"2017-03-22 22:51:50.000000000","message":"Do we want to mention the monasca monitoring here?\nhttps://github.com/openstack/monasca-agent/blob/master/monasca_setup/detection/plugins/octavia.py","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":68,"context_line":"* octavia-worker"},{"line_number":69,"context_line":"* octavia-health-manager"},{"line_number":70,"context_line":"* octavia-house-keeping"},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"Additionally, we recommend to monitor the Octavia API endpoint(s). There"},{"line_number":73,"context_line":"currently is no special url to use so just polling the root URL in regular"},{"line_number":74,"context_line":"intervals is sufficient."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_8556e703","line":71,"updated":"2017-03-22 22:51:50.000000000","message":"We might want to talk briefly about the HA model for the control plane and how individual process failures may not mean an outage.  I expect details of the HA design will be in the HA guide, so we don\u0027t need to go into depth here.","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":82,"context_line":"Rotating the Amphora Images"},{"line_number":83,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"Octavia will start load balancers with a pre build image which contains the"},{"line_number":86,"context_line":"amphora agent, a load balancing application, and gets seeded with cryptographic"},{"line_number":87,"context_line":"certificates through the config drive at start up."},{"line_number":88,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_25e2932f","line":85,"range":{"start_line":85,"start_character":41,"end_line":85,"end_character":50},"updated":"2017-03-22 22:51:50.000000000","message":"pre-built","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":82,"context_line":"Rotating the Amphora Images"},{"line_number":83,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"Octavia will start load balancers with a pre build image which contains the"},{"line_number":86,"context_line":"amphora agent, a load balancing application, and gets seeded with cryptographic"},{"line_number":87,"context_line":"certificates through the config drive at start up."},{"line_number":88,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_86db2c21","line":85,"range":{"start_line":85,"start_character":41,"end_line":85,"end_character":50},"in_reply_to":"1a1ced50_25e2932f","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":87,"context_line":"certificates through the config drive at start up."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"With rotating we mean making a load balancer amphora running with an old image"},{"line_number":90,"context_line":"fail-over to an amphora with a new image without any measurable interruption in"},{"line_number":91,"context_line":"the load balancing."},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Here are some reasons you might need to rotate the amphora image:"},{"line_number":94,"context_line":"* There has been a (security) update to the underlying operating system"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_051af716","line":91,"range":{"start_line":90,"start_character":41,"end_line":91,"end_character":18},"updated":"2017-03-22 22:51:50.000000000","message":"We should comment that this is with Active/Standby topology and that standalone topology load balancers may experience a short outage.","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a93a3d992f43b9c466e791e2cef8fb9bdadda702","unresolved":false,"context_lines":[{"line_number":87,"context_line":"certificates through the config drive at start up."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"With rotating we mean making a load balancer amphora running with an old image"},{"line_number":90,"context_line":"fail-over to an amphora with a new image without any measurable interruption in"},{"line_number":91,"context_line":"the load balancing."},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Here are some reasons you might need to rotate the amphora image:"},{"line_number":94,"context_line":"* There has been a (security) update to the underlying operating system"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_4c694e25","line":91,"range":{"start_line":90,"start_character":41,"end_line":91,"end_character":18},"in_reply_to":"1a1ced50_051af716","updated":"2017-03-23 17:54:21.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":91,"context_line":"the load balancing."},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Here are some reasons you might need to rotate the amphora image:"},{"line_number":94,"context_line":"* There has been a (security) update to the underlying operating system"},{"line_number":95,"context_line":"* You want to deploy a new version of the amphora agent or haproxy"},{"line_number":96,"context_line":"* The cryptographic certificates and.or keys on the amphora have been"},{"line_number":97,"context_line":"compromised."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_056cb79a","line":94,"updated":"2017-03-22 22:51:50.000000000","message":"I think you need a blank line here","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":91,"context_line":"the load balancing."},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Here are some reasons you might need to rotate the amphora image:"},{"line_number":94,"context_line":"* There has been a (security) update to the underlying operating system"},{"line_number":95,"context_line":"* You want to deploy a new version of the amphora agent or haproxy"},{"line_number":96,"context_line":"* The cryptographic certificates and.or keys on the amphora have been"},{"line_number":97,"context_line":"compromised."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_86c5ec0b","line":94,"in_reply_to":"1a1ced50_056cb79a","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":95,"context_line":"* You want to deploy a new version of the amphora agent or haproxy"},{"line_number":96,"context_line":"* The cryptographic certificates and.or keys on the amphora have been"},{"line_number":97,"context_line":"compromised."},{"line_number":98,"context_line":"* You are switching to a different flavor for the underlying virtua machine."},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"Preparing a new amphora image"},{"line_number":101,"context_line":"-----------------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_0503d7b8","line":98,"range":{"start_line":98,"start_character":2,"end_line":98,"end_character":76},"updated":"2017-03-22 22:51:50.000000000","message":"This reason is more for failover than for rotating images","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":95,"context_line":"* You want to deploy a new version of the amphora agent or haproxy"},{"line_number":96,"context_line":"* The cryptographic certificates and.or keys on the amphora have been"},{"line_number":97,"context_line":"compromised."},{"line_number":98,"context_line":"* You are switching to a different flavor for the underlying virtua machine."},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"Preparing a new amphora image"},{"line_number":101,"context_line":"-----------------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_45086fda","line":98,"range":{"start_line":98,"start_character":61,"end_line":98,"end_character":67},"updated":"2017-03-22 22:51:50.000000000","message":"virtual","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":95,"context_line":"* You want to deploy a new version of the amphora agent or haproxy"},{"line_number":96,"context_line":"* The cryptographic certificates and.or keys on the amphora have been"},{"line_number":97,"context_line":"compromised."},{"line_number":98,"context_line":"* You are switching to a different flavor for the underlying virtua machine."},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"Preparing a new amphora image"},{"line_number":101,"context_line":"-----------------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_c6e604b0","line":98,"range":{"start_line":98,"start_character":2,"end_line":98,"end_character":76},"in_reply_to":"1a1ced50_0503d7b8","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":95,"context_line":"* You want to deploy a new version of the amphora agent or haproxy"},{"line_number":96,"context_line":"* The cryptographic certificates and.or keys on the amphora have been"},{"line_number":97,"context_line":"compromised."},{"line_number":98,"context_line":"* You are switching to a different flavor for the underlying virtua machine."},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"Preparing a new amphora image"},{"line_number":101,"context_line":"-----------------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_0601fc39","line":98,"range":{"start_line":98,"start_character":61,"end_line":98,"end_character":67},"in_reply_to":"1a1ced50_45086fda","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":100,"context_line":"Preparing a new amphora image"},{"line_number":101,"context_line":"-----------------------------"},{"line_number":102,"context_line":""},{"line_number":103,"context_line":"To prepare a new amphora image you will need to use the disk-image-builder as"},{"line_number":104,"context_line":"described in the README in the diskimage-create directory. Once you have"},{"line_number":105,"context_line":"created a new image you will need to upload it into glance. The following"},{"line_number":106,"context_line":"shows how to do this if you are using image tags (make sure to use a user"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_c5ea9fda","line":103,"range":{"start_line":103,"start_character":56,"end_line":103,"end_character":74},"updated":"2017-03-22 22:51:50.000000000","message":"diskimage-create.sh","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a93a3d992f43b9c466e791e2cef8fb9bdadda702","unresolved":false,"context_lines":[{"line_number":100,"context_line":"Preparing a new amphora image"},{"line_number":101,"context_line":"-----------------------------"},{"line_number":102,"context_line":""},{"line_number":103,"context_line":"To prepare a new amphora image you will need to use the disk-image-builder as"},{"line_number":104,"context_line":"described in the README in the diskimage-create directory. Once you have"},{"line_number":105,"context_line":"created a new image you will need to upload it into glance. The following"},{"line_number":106,"context_line":"shows how to do this if you are using image tags (make sure to use a user"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_ac5e4277","line":103,"range":{"start_line":103,"start_character":56,"end_line":103,"end_character":74},"in_reply_to":"1a1ced50_c5ea9fda","updated":"2017-03-23 17:54:21.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":101,"context_line":"-----------------------------"},{"line_number":102,"context_line":""},{"line_number":103,"context_line":"To prepare a new amphora image you will need to use the disk-image-builder as"},{"line_number":104,"context_line":"described in the README in the diskimage-create directory. Once you have"},{"line_number":105,"context_line":"created a new image you will need to upload it into glance. The following"},{"line_number":106,"context_line":"shows how to do this if you are using image tags (make sure to use a user"},{"line_number":107,"context_line":"with the same tenant as the octavia user:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_c57fff12","line":104,"range":{"start_line":104,"start_character":0,"end_line":104,"end_character":23},"updated":"2017-03-22 22:51:50.000000000","message":"We should probably give an example here.","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a93a3d992f43b9c466e791e2cef8fb9bdadda702","unresolved":false,"context_lines":[{"line_number":101,"context_line":"-----------------------------"},{"line_number":102,"context_line":""},{"line_number":103,"context_line":"To prepare a new amphora image you will need to use the disk-image-builder as"},{"line_number":104,"context_line":"described in the README in the diskimage-create directory. Once you have"},{"line_number":105,"context_line":"created a new image you will need to upload it into glance. The following"},{"line_number":106,"context_line":"shows how to do this if you are using image tags (make sure to use a user"},{"line_number":107,"context_line":"with the same tenant as the octavia user:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_cc637e40","line":104,"range":{"start_line":104,"start_character":0,"end_line":104,"end_character":23},"in_reply_to":"1a1ced50_c57fff12","updated":"2017-03-23 17:54:21.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":104,"context_line":"described in the README in the diskimage-create directory. Once you have"},{"line_number":105,"context_line":"created a new image you will need to upload it into glance. The following"},{"line_number":106,"context_line":"shows how to do this if you are using image tags (make sure to use a user"},{"line_number":107,"context_line":"with the same tenant as the octavia user:"},{"line_number":108,"context_line":""},{"line_number":109,"context_line":" .. code-block:: bash"},{"line_number":110,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_e5931b59","line":107,"range":{"start_line":107,"start_character":28,"end_line":107,"end_character":40},"updated":"2017-03-22 22:51:50.000000000","message":"octavia service account or user?","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":104,"context_line":"described in the README in the diskimage-create directory. Once you have"},{"line_number":105,"context_line":"created a new image you will need to upload it into glance. The following"},{"line_number":106,"context_line":"shows how to do this if you are using image tags (make sure to use a user"},{"line_number":107,"context_line":"with the same tenant as the octavia user:"},{"line_number":108,"context_line":""},{"line_number":109,"context_line":" .. code-block:: bash"},{"line_number":110,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_a99e39b6","line":107,"range":{"start_line":107,"start_character":28,"end_line":107,"end_character":40},"in_reply_to":"1a1ced50_e5931b59","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":109,"context_line":" .. code-block:: bash"},{"line_number":110,"context_line":""},{"line_number":111,"context_line":"      glance image-create --name amphora-x64-haproxy --visibility private --disk-format qcow2 \\"},{"line_number":112,"context_line":"         --container-format bare --tags octavia-amphora-image \u003c/var/lib/octavia/amphora-x64-haproxy.qcow2"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"If you didn\u0027t use image tags and instead used the image id. You will need to"},{"line_number":115,"context_line":"change the Octavia configuration files and restart the octavia services."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_45a4efb8","line":112,"range":{"start_line":112,"start_character":40,"end_line":112,"end_character":61},"updated":"2017-03-22 22:51:50.000000000","message":"Maybe we should put \u003camphora-image-tag\u003e and a comment about the setting in the configuration file.  This is one of the blind copy support issues.","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":109,"context_line":" .. code-block:: bash"},{"line_number":110,"context_line":""},{"line_number":111,"context_line":"      glance image-create --name amphora-x64-haproxy --visibility private --disk-format qcow2 \\"},{"line_number":112,"context_line":"         --container-format bare --tags octavia-amphora-image \u003c/var/lib/octavia/amphora-x64-haproxy.qcow2"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"If you didn\u0027t use image tags and instead used the image id. You will need to"},{"line_number":115,"context_line":"change the Octavia configuration files and restart the octavia services."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_e9291139","line":112,"range":{"start_line":112,"start_character":40,"end_line":112,"end_character":61},"in_reply_to":"1a1ced50_45a4efb8","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":121,"context_line":""},{"line_number":122,"context_line":" .. code-block:: bash"},{"line_number":123,"context_line":""},{"line_number":124,"context_line":"        nova list --all | grep amphora"},{"line_number":125,"context_line":""},{"line_number":126,"context_line":"Take note of the vm\u0027s ids and ips on the management network."},{"line_number":127,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_c5a61fad","line":124,"updated":"2017-03-22 22:51:50.000000000","message":"We can do an awk here to have it output the exact fields.\nOr better yet, use the openstack client and have it output the required fields.","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":121,"context_line":""},{"line_number":122,"context_line":" .. code-block:: bash"},{"line_number":123,"context_line":""},{"line_number":124,"context_line":"        nova list --all | grep amphora"},{"line_number":125,"context_line":""},{"line_number":126,"context_line":"Take note of the vm\u0027s ids and ips on the management network."},{"line_number":127,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_e9159149","line":124,"in_reply_to":"1a1ced50_c5a61fad","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":131,"context_line":""},{"line_number":132,"context_line":"    .. code-block:: sql"},{"line_number":133,"context_line":""},{"line_number":134,"context_line":"        select * from amphora;"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"Take note of the nova ids, the role (ACTIVE, PASSIVE, or SPARE), and the ip on"},{"line_number":137,"context_line":"the management network. You can also find this ip either via"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_25d613f1","line":134,"updated":"2017-03-22 22:51:50.000000000","message":"We can give a mysql command line for this.\n\nmysql octavia -e \u0027select id, compute_id, lb_network_ip, role from amphora where status\u003d\"ALLOCATED\" or status\u003d\"READY\";\u0027","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":131,"context_line":""},{"line_number":132,"context_line":"    .. code-block:: sql"},{"line_number":133,"context_line":""},{"line_number":134,"context_line":"        select * from amphora;"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"Take note of the nova ids, the role (ACTIVE, PASSIVE, or SPARE), and the ip on"},{"line_number":137,"context_line":"the management network. You can also find this ip either via"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_8c242bb3","line":134,"in_reply_to":"1a1ced50_25d613f1","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":133,"context_line":""},{"line_number":134,"context_line":"        select * from amphora;"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"Take note of the nova ids, the role (ACTIVE, PASSIVE, or SPARE), and the ip on"},{"line_number":137,"context_line":"the management network. You can also find this ip either via"},{"line_number":138,"context_line":"``nova show \u003cid\u003e`` or ``nova list | grep \u003cid\u003e``."},{"line_number":139,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_05f2f799","line":136,"range":{"start_line":136,"start_character":57,"end_line":136,"end_character":62},"updated":"2017-03-22 22:51:50.000000000","message":"There is no SPARE role that I know of.\nSpares are indicated by status\u003d\"READY\"","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":133,"context_line":""},{"line_number":134,"context_line":"        select * from amphora;"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"Take note of the nova ids, the role (ACTIVE, PASSIVE, or SPARE), and the ip on"},{"line_number":137,"context_line":"the management network. You can also find this ip either via"},{"line_number":138,"context_line":"``nova show \u003cid\u003e`` or ``nova list | grep \u003cid\u003e``."},{"line_number":139,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_cc5623ce","line":136,"range":{"start_line":136,"start_character":57,"end_line":136,"end_character":62},"in_reply_to":"1a1ced50_05f2f799","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":141,"context_line":"-----------------"},{"line_number":142,"context_line":""},{"line_number":143,"context_line":"The idea is to force Octavia to start up a new amphora because Octavia thinks"},{"line_number":144,"context_line":"this one is in an error state. To do this most gracefully shut down the port"},{"line_number":145,"context_line":"on the managment network."},{"line_number":146,"context_line":""},{"line_number":147,"context_line":"Use the ip on the management newtork to find the port-id:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_a50e8389","line":144,"range":{"start_line":144,"start_character":9,"end_line":144,"end_character":29},"updated":"2017-03-22 22:51:50.000000000","message":"has failed.  (could be confusing with provisioning status error or operating status error)","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":141,"context_line":"-----------------"},{"line_number":142,"context_line":""},{"line_number":143,"context_line":"The idea is to force Octavia to start up a new amphora because Octavia thinks"},{"line_number":144,"context_line":"this one is in an error state. To do this most gracefully shut down the port"},{"line_number":145,"context_line":"on the managment network."},{"line_number":146,"context_line":""},{"line_number":147,"context_line":"Use the ip on the management newtork to find the port-id:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_cc246362","line":144,"range":{"start_line":144,"start_character":9,"end_line":144,"end_character":29},"in_reply_to":"1a1ced50_a50e8389","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":148,"context_line":""},{"line_number":149,"context_line":"    .. code-block:: bash"},{"line_number":150,"context_line":""},{"line_number":151,"context_line":"        neutron port-list | grep \u003cip on mgmt net\u003e"},{"line_number":152,"context_line":""},{"line_number":153,"context_line":"Take note of the port-id and initiate a fail-over by shutting down this port:"},{"line_number":154,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_858267c6","line":151,"range":{"start_line":151,"start_character":0,"end_line":151,"end_character":49},"updated":"2017-03-22 22:51:50.000000000","message":"This might be cleaner using openstack client and a filter (if ports have them)","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":148,"context_line":""},{"line_number":149,"context_line":"    .. code-block:: bash"},{"line_number":150,"context_line":""},{"line_number":151,"context_line":"        neutron port-list | grep \u003cip on mgmt net\u003e"},{"line_number":152,"context_line":""},{"line_number":153,"context_line":"Take note of the port-id and initiate a fail-over by shutting down this port:"},{"line_number":154,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_2c78972b","line":151,"range":{"start_line":151,"start_character":0,"end_line":151,"end_character":49},"in_reply_to":"1a1ced50_858267c6","updated":"2017-03-23 17:50:41.000000000","message":"no filter on ip but replaced with openstack-client","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":163,"context_line":"----------------------------"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"To speed up the failovers the spare pool can temporary be increased to"},{"line_number":166,"context_line":"accomodate gthe rapid failover of the amphora. In this case after the"},{"line_number":167,"context_line":"new image has been loaded into glance shut down or initiate a failover of the"},{"line_number":168,"context_line":"amphora in the spare pool. They can be found for instance by looking for the"},{"line_number":169,"context_line":"vms in ``nova list --all`` who only have an ip on the mangement network"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_25729311","line":166,"range":{"start_line":166,"start_character":11,"end_line":166,"end_character":15},"updated":"2017-03-22 22:51:50.000000000","message":"the","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":163,"context_line":"----------------------------"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"To speed up the failovers the spare pool can temporary be increased to"},{"line_number":166,"context_line":"accomodate gthe rapid failover of the amphora. In this case after the"},{"line_number":167,"context_line":"new image has been loaded into glance shut down or initiate a failover of the"},{"line_number":168,"context_line":"amphora in the spare pool. They can be found for instance by looking for the"},{"line_number":169,"context_line":"vms in ``nova list --all`` who only have an ip on the mangement network"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_cce543dd","line":166,"range":{"start_line":166,"start_character":11,"end_line":166,"end_character":15},"in_reply_to":"1a1ced50_25729311","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":173,"context_line":"will be greatly accelerated. To preserve resources restore the old settings"},{"line_number":174,"context_line":"and restart the octavia services. Since Octavia won\u0027t terminate superfluous"},{"line_number":175,"context_line":"spare amphora on its own they can either be left in the system and will"},{"line_number":176,"context_line":"automatically be used up as new load balancers are created and/or laod"},{"line_number":177,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"},{"line_number":178,"context_line":"manually by shutting them down in nova."},{"line_number":179,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_85598790","line":176,"range":{"start_line":176,"start_character":66,"end_line":176,"end_character":70},"updated":"2017-03-22 22:51:50.000000000","message":"load","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":173,"context_line":"will be greatly accelerated. To preserve resources restore the old settings"},{"line_number":174,"context_line":"and restart the octavia services. Since Octavia won\u0027t terminate superfluous"},{"line_number":175,"context_line":"spare amphora on its own they can either be left in the system and will"},{"line_number":176,"context_line":"automatically be used up as new load balancers are created and/or laod"},{"line_number":177,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"},{"line_number":178,"context_line":"manually by shutting them down in nova."},{"line_number":179,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_4cda3319","line":176,"range":{"start_line":176,"start_character":66,"end_line":176,"end_character":70},"in_reply_to":"1a1ced50_85598790","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":175,"context_line":"spare amphora on its own they can either be left in the system and will"},{"line_number":176,"context_line":"automatically be used up as new load balancers are created and/or laod"},{"line_number":177,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"},{"line_number":178,"context_line":"manually by shutting them down in nova."},{"line_number":179,"context_line":""},{"line_number":180,"context_line":"Since a failover puts significant load on the Open Stack cluster by creating"},{"line_number":181,"context_line":"new vms and ports, it should either be done at a very slow pace, during  a"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_054e77c0","line":178,"range":{"start_line":178,"start_character":12,"end_line":178,"end_character":39},"updated":"2017-03-22 22:51:50.000000000","message":"deleting them with nova.","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":175,"context_line":"spare amphora on its own they can either be left in the system and will"},{"line_number":176,"context_line":"automatically be used up as new load balancers are created and/or laod"},{"line_number":177,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"},{"line_number":178,"context_line":"manually by shutting them down in nova."},{"line_number":179,"context_line":""},{"line_number":180,"context_line":"Since a failover puts significant load on the Open Stack cluster by creating"},{"line_number":181,"context_line":"new vms and ports, it should either be done at a very slow pace, during  a"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_cc338361","line":178,"range":{"start_line":178,"start_character":12,"end_line":178,"end_character":39},"in_reply_to":"1a1ced50_054e77c0","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":177,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"},{"line_number":178,"context_line":"manually by shutting them down in nova."},{"line_number":179,"context_line":""},{"line_number":180,"context_line":"Since a failover puts significant load on the Open Stack cluster by creating"},{"line_number":181,"context_line":"new vms and ports, it should either be done at a very slow pace, during  a"},{"line_number":182,"context_line":"time with little load, or with the right thottling enabled in Octavia. The"},{"line_number":183,"context_line":"throttling will make sure to prioritize failovers higher than other operations"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_85d0a7ca","line":180,"range":{"start_line":180,"start_character":46,"end_line":180,"end_character":56},"updated":"2017-03-22 22:51:50.000000000","message":"OpenStack","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":177,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"},{"line_number":178,"context_line":"manually by shutting them down in nova."},{"line_number":179,"context_line":""},{"line_number":180,"context_line":"Since a failover puts significant load on the Open Stack cluster by creating"},{"line_number":181,"context_line":"new vms and ports, it should either be done at a very slow pace, during  a"},{"line_number":182,"context_line":"time with little load, or with the right thottling enabled in Octavia. The"},{"line_number":183,"context_line":"throttling will make sure to prioritize failovers higher than other operations"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_a5d3e3d3","line":180,"range":{"start_line":180,"start_character":57,"end_line":180,"end_character":64},"updated":"2017-03-22 22:51:50.000000000","message":"deployment?","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":177,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"},{"line_number":178,"context_line":"manually by shutting them down in nova."},{"line_number":179,"context_line":""},{"line_number":180,"context_line":"Since a failover puts significant load on the Open Stack cluster by creating"},{"line_number":181,"context_line":"new vms and ports, it should either be done at a very slow pace, during  a"},{"line_number":182,"context_line":"time with little load, or with the right thottling enabled in Octavia. The"},{"line_number":183,"context_line":"throttling will make sure to prioritize failovers higher than other operations"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_6c452fb2","line":180,"range":{"start_line":180,"start_character":46,"end_line":180,"end_character":56},"in_reply_to":"1a1ced50_85d0a7ca","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":177,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"},{"line_number":178,"context_line":"manually by shutting them down in nova."},{"line_number":179,"context_line":""},{"line_number":180,"context_line":"Since a failover puts significant load on the Open Stack cluster by creating"},{"line_number":181,"context_line":"new vms and ports, it should either be done at a very slow pace, during  a"},{"line_number":182,"context_line":"time with little load, or with the right thottling enabled in Octavia. The"},{"line_number":183,"context_line":"throttling will make sure to prioritize failovers higher than other operations"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_cc0aa379","line":180,"range":{"start_line":180,"start_character":57,"end_line":180,"end_character":64},"in_reply_to":"1a1ced50_a5d3e3d3","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":178,"context_line":"manually by shutting them down in nova."},{"line_number":179,"context_line":""},{"line_number":180,"context_line":"Since a failover puts significant load on the Open Stack cluster by creating"},{"line_number":181,"context_line":"new vms and ports, it should either be done at a very slow pace, during  a"},{"line_number":182,"context_line":"time with little load, or with the right thottling enabled in Octavia. The"},{"line_number":183,"context_line":"throttling will make sure to prioritize failovers higher than other operations"},{"line_number":184,"context_line":"and depending on hw many failovers are initiated this might crowd out other"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_05e597a6","line":181,"range":{"start_line":181,"start_character":4,"end_line":181,"end_character":7},"updated":"2017-03-22 22:51:50.000000000","message":"virtual machines","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":178,"context_line":"manually by shutting them down in nova."},{"line_number":179,"context_line":""},{"line_number":180,"context_line":"Since a failover puts significant load on the Open Stack cluster by creating"},{"line_number":181,"context_line":"new vms and ports, it should either be done at a very slow pace, during  a"},{"line_number":182,"context_line":"time with little load, or with the right thottling enabled in Octavia. The"},{"line_number":183,"context_line":"throttling will make sure to prioritize failovers higher than other operations"},{"line_number":184,"context_line":"and depending on hw many failovers are initiated this might crowd out other"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_ec0f5f86","line":181,"range":{"start_line":181,"start_character":4,"end_line":181,"end_character":7},"in_reply_to":"1a1ced50_05e597a6","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":181,"context_line":"new vms and ports, it should either be done at a very slow pace, during  a"},{"line_number":182,"context_line":"time with little load, or with the right thottling enabled in Octavia. The"},{"line_number":183,"context_line":"throttling will make sure to prioritize failovers higher than other operations"},{"line_number":184,"context_line":"and depending on hw many failovers are initiated this might crowd out other"},{"line_number":185,"context_line":"operations."},{"line_number":186,"context_line":""},{"line_number":187,"context_line":".. note::"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_85e7c7aa","line":184,"range":{"start_line":184,"start_character":17,"end_line":184,"end_character":19},"updated":"2017-03-22 22:51:50.000000000","message":"how","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":181,"context_line":"new vms and ports, it should either be done at a very slow pace, during  a"},{"line_number":182,"context_line":"time with little load, or with the right thottling enabled in Octavia. The"},{"line_number":183,"context_line":"throttling will make sure to prioritize failovers higher than other operations"},{"line_number":184,"context_line":"and depending on hw many failovers are initiated this might crowd out other"},{"line_number":185,"context_line":"operations."},{"line_number":186,"context_line":""},{"line_number":187,"context_line":".. note::"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_8cec2b94","line":184,"range":{"start_line":184,"start_character":17,"end_line":184,"end_character":19},"in_reply_to":"1a1ced50_85e7c7aa","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":194,"context_line":"Rotating Cryptographic Certificates"},{"line_number":195,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":196,"context_line":""},{"line_number":197,"context_line":"Octavia secures the communication between the amphora agent and the control"},{"line_number":198,"context_line":"plane with two-way SSL encryption. An amhora will only accept requests from"},{"line_number":199,"context_line":"a control plan client which is autorized by a valid client certificate."},{"line_number":200,"context_line":"The control plane client verifies that the agent is authenticating with the"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_0062e5d7","line":197,"updated":"2017-03-22 22:51:50.000000000","message":"This is very confusing.  I think we should list out the components here for clarity.\n\nSomething like:\nControl plane: CA certificate\n  Used to validate amphora certificates and issue new amphora certificates.\nControl plane: client certificate\n  Used to authenticate with the amphora\nAmphora: CA certificate\n  Used to validate control plane client certificate\nAmphora: server certificate\n  Presented to control plane process to prove amphora identity","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":194,"context_line":"Rotating Cryptographic Certificates"},{"line_number":195,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":196,"context_line":""},{"line_number":197,"context_line":"Octavia secures the communication between the amphora agent and the control"},{"line_number":198,"context_line":"plane with two-way SSL encryption. An amhora will only accept requests from"},{"line_number":199,"context_line":"a control plan client which is autorized by a valid client certificate."},{"line_number":200,"context_line":"The control plane client verifies that the agent is authenticating with the"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_1853116e","line":197,"in_reply_to":"1a1ced50_0062e5d7","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":206,"context_line":"----------------------------"},{"line_number":207,"context_line":""},{"line_number":208,"context_line":"For the server part Octavia will act either itself as a certificate authority"},{"line_number":209,"context_line":"or use Anchor (see Anchor.rst) to issue server certificates to be used by each"},{"line_number":210,"context_line":"amphora. Octavia will also monitor those certificates and refresh them before"},{"line_number":211,"context_line":"they expire."},{"line_number":212,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_2553733a","line":209,"range":{"start_line":209,"start_character":6,"end_line":209,"end_character":15},"updated":"2017-03-22 22:51:50.000000000","message":"This can be a link using :doc:","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a93a3d992f43b9c466e791e2cef8fb9bdadda702","unresolved":false,"context_lines":[{"line_number":206,"context_line":"----------------------------"},{"line_number":207,"context_line":""},{"line_number":208,"context_line":"For the server part Octavia will act either itself as a certificate authority"},{"line_number":209,"context_line":"or use Anchor (see Anchor.rst) to issue server certificates to be used by each"},{"line_number":210,"context_line":"amphora. Octavia will also monitor those certificates and refresh them before"},{"line_number":211,"context_line":"they expire."},{"line_number":212,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_4c506e5f","line":209,"range":{"start_line":209,"start_character":6,"end_line":209,"end_character":15},"in_reply_to":"1a1ced50_2553733a","updated":"2017-03-23 17:54:21.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":212,"context_line":""},{"line_number":213,"context_line":"There are two way to initiate a rotation manually:"},{"line_number":214,"context_line":"* Change the expiration date of the certificate in the database. Octavia"},{"line_number":215,"context_line":"will then rotate the certificates with newly issued ones. This requires"},{"line_number":216,"context_line":"that the certificate authority certs didn\u0027t change - so this only applies"},{"line_number":217,"context_line":"to very rare circumstances."},{"line_number":218,"context_line":"* If any certificate authority certs changed a failover (see the chapter"},{"line_number":219,"context_line":"on failovers above) of all amphora needs to be initiated. Until the failover"},{"line_number":220,"context_line":"is completed the amphora can\u0027t be controlled by the control plane."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_c03d2dc5","line":217,"range":{"start_line":215,"start_character":58,"end_line":217,"end_character":27},"updated":"2017-03-22 22:51:50.000000000","message":"hmm, there should be a way around this.","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":212,"context_line":""},{"line_number":213,"context_line":"There are two way to initiate a rotation manually:"},{"line_number":214,"context_line":"* Change the expiration date of the certificate in the database. Octavia"},{"line_number":215,"context_line":"will then rotate the certificates with newly issued ones. This requires"},{"line_number":216,"context_line":"that the certificate authority certs didn\u0027t change - so this only applies"},{"line_number":217,"context_line":"to very rare circumstances."},{"line_number":218,"context_line":"* If any certificate authority certs changed a failover (see the chapter"},{"line_number":219,"context_line":"on failovers above) of all amphora needs to be initiated. Until the failover"},{"line_number":220,"context_line":"is completed the amphora can\u0027t be controlled by the control plane."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_78eec5b5","line":217,"range":{"start_line":215,"start_character":58,"end_line":217,"end_character":27},"in_reply_to":"1a1ced50_c03d2dc5","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":215,"context_line":"will then rotate the certificates with newly issued ones. This requires"},{"line_number":216,"context_line":"that the certificate authority certs didn\u0027t change - so this only applies"},{"line_number":217,"context_line":"to very rare circumstances."},{"line_number":218,"context_line":"* If any certificate authority certs changed a failover (see the chapter"},{"line_number":219,"context_line":"on failovers above) of all amphora needs to be initiated. Until the failover"},{"line_number":220,"context_line":"is completed the amphora can\u0027t be controlled by the control plane."},{"line_number":221,"context_line":""},{"line_number":222,"context_line":"Rotating the Certificate Authority certificates"},{"line_number":223,"context_line":"-----------------------------------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_a0a75109","line":220,"range":{"start_line":218,"start_character":2,"end_line":220,"end_character":66},"updated":"2017-03-22 22:51:50.000000000","message":"Again it seems like we can handle this more gracefully","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":215,"context_line":"will then rotate the certificates with newly issued ones. This requires"},{"line_number":216,"context_line":"that the certificate authority certs didn\u0027t change - so this only applies"},{"line_number":217,"context_line":"to very rare circumstances."},{"line_number":218,"context_line":"* If any certificate authority certs changed a failover (see the chapter"},{"line_number":219,"context_line":"on failovers above) of all amphora needs to be initiated. Until the failover"},{"line_number":220,"context_line":"is completed the amphora can\u0027t be controlled by the control plane."},{"line_number":221,"context_line":""},{"line_number":222,"context_line":"Rotating the Certificate Authority certificates"},{"line_number":223,"context_line":"-----------------------------------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_b82e7df8","line":220,"range":{"start_line":218,"start_character":2,"end_line":220,"end_character":66},"in_reply_to":"1a1ced50_a0a75109","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":222,"context_line":"Rotating the Certificate Authority certificates"},{"line_number":223,"context_line":"-----------------------------------------------"},{"line_number":224,"context_line":""},{"line_number":225,"context_line":"If there is a compromise of the certificate authorities certificates or they"},{"line_number":226,"context_line":"expired new ones need to be installed into the system. If Octavia is"},{"line_number":227,"context_line":"not acting as the certificate authority only the certificate authority\u0027s"},{"line_number":228,"context_line":"cert needs to be changed in the system so amphora can be authenticated again."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_20b44133","line":225,"range":{"start_line":225,"start_character":56,"end_line":225,"end_character":68},"updated":"2017-03-22 22:51:50.000000000","message":"certificates,","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":222,"context_line":"Rotating the Certificate Authority certificates"},{"line_number":223,"context_line":"-----------------------------------------------"},{"line_number":224,"context_line":""},{"line_number":225,"context_line":"If there is a compromise of the certificate authorities certificates or they"},{"line_number":226,"context_line":"expired new ones need to be installed into the system. If Octavia is"},{"line_number":227,"context_line":"not acting as the certificate authority only the certificate authority\u0027s"},{"line_number":228,"context_line":"cert needs to be changed in the system so amphora can be authenticated again."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_f8155549","line":225,"range":{"start_line":225,"start_character":56,"end_line":225,"end_character":68},"in_reply_to":"1a1ced50_20b44133","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":223,"context_line":"-----------------------------------------------"},{"line_number":224,"context_line":""},{"line_number":225,"context_line":"If there is a compromise of the certificate authorities certificates or they"},{"line_number":226,"context_line":"expired new ones need to be installed into the system. If Octavia is"},{"line_number":227,"context_line":"not acting as the certificate authority only the certificate authority\u0027s"},{"line_number":228,"context_line":"cert needs to be changed in the system so amphora can be authenticated again."},{"line_number":229,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_807b357a","line":226,"range":{"start_line":226,"start_character":0,"end_line":226,"end_character":7},"updated":"2017-03-22 22:51:50.000000000","message":"expired,","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":223,"context_line":"-----------------------------------------------"},{"line_number":224,"context_line":""},{"line_number":225,"context_line":"If there is a compromise of the certificate authorities certificates or they"},{"line_number":226,"context_line":"expired new ones need to be installed into the system. If Octavia is"},{"line_number":227,"context_line":"not acting as the certificate authority only the certificate authority\u0027s"},{"line_number":228,"context_line":"cert needs to be changed in the system so amphora can be authenticated again."},{"line_number":229,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_180b112d","line":226,"range":{"start_line":226,"start_character":0,"end_line":226,"end_character":7},"in_reply_to":"1a1ced50_807b357a","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":230,"context_line":"# Issue new certificates (see the script in the bin folder of octavia if"},{"line_number":231,"context_line":"  Octavia) is acting as the certificate authority) or follow the instructions"},{"line_number":232,"context_line":"  of the third-party certificate authority. Copy the certificate and the"},{"line_number":233,"context_line":"  provate key (if Octavia acts as a certificate authority) were Octavia can"},{"line_number":234,"context_line":"  find them."},{"line_number":235,"context_line":"# If the previous certificate files haven\u0027t been overridden adjust the paths"},{"line_number":236,"context_line":"  to the new certs in the configuration file and restart all Octavia services."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_208b6169","line":233,"range":{"start_line":233,"start_character":2,"end_line":233,"end_character":9},"updated":"2017-03-22 22:51:50.000000000","message":"private","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":230,"context_line":"# Issue new certificates (see the script in the bin folder of octavia if"},{"line_number":231,"context_line":"  Octavia) is acting as the certificate authority) or follow the instructions"},{"line_number":232,"context_line":"  of the third-party certificate authority. Copy the certificate and the"},{"line_number":233,"context_line":"  provate key (if Octavia acts as a certificate authority) were Octavia can"},{"line_number":234,"context_line":"  find them."},{"line_number":235,"context_line":"# If the previous certificate files haven\u0027t been overridden adjust the paths"},{"line_number":236,"context_line":"  to the new certs in the configuration file and restart all Octavia services."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_3808cd2d","line":233,"range":{"start_line":233,"start_character":2,"end_line":233,"end_character":9},"in_reply_to":"1a1ced50_208b6169","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":233,"context_line":"  provate key (if Octavia acts as a certificate authority) were Octavia can"},{"line_number":234,"context_line":"  find them."},{"line_number":235,"context_line":"# If the previous certificate files haven\u0027t been overridden adjust the paths"},{"line_number":236,"context_line":"  to the new certs in the configuration file and restart all Octavia services."},{"line_number":237,"context_line":"# Initiate a manual rotation of the server certificates on the amphora (see"},{"line_number":238,"context_line":"  the chapter above)"},{"line_number":239,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_60ef191e","line":236,"range":{"start_line":236,"start_character":61,"end_line":236,"end_character":77},"updated":"2017-03-22 22:51:50.000000000","message":"API doesn\u0027t need restarted for this.","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":233,"context_line":"  provate key (if Octavia acts as a certificate authority) were Octavia can"},{"line_number":234,"context_line":"  find them."},{"line_number":235,"context_line":"# If the previous certificate files haven\u0027t been overridden adjust the paths"},{"line_number":236,"context_line":"  to the new certs in the configuration file and restart all Octavia services."},{"line_number":237,"context_line":"# Initiate a manual rotation of the server certificates on the amphora (see"},{"line_number":238,"context_line":"  the chapter above)"},{"line_number":239,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_0c0d9637","line":236,"range":{"start_line":236,"start_character":61,"end_line":236,"end_character":77},"in_reply_to":"1a1ced50_60ef191e","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":248,"context_line":"your certificate authority."},{"line_number":249,"context_line":"# Copy the new cert where Octavia cna find it."},{"line_number":250,"context_line":"# If the previous certificate files haven\u0027t been overridden adjust the paths"},{"line_number":251,"context_line":"to the new certs in the configuration file and restart all Octavia services."},{"line_number":252,"context_line":""},{"line_number":253,"context_line":"If the client certificate authority cert has been replaced in addition to"},{"line_number":254,"context_line":"rotating the client certificate te new client certificate authority"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_00e74540","line":251,"range":{"start_line":251,"start_character":55,"end_line":251,"end_character":75},"updated":"2017-03-22 22:51:50.000000000","message":"I don\u0027t think API needs to be restarted","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":248,"context_line":"your certificate authority."},{"line_number":249,"context_line":"# Copy the new cert where Octavia cna find it."},{"line_number":250,"context_line":"# If the previous certificate files haven\u0027t been overridden adjust the paths"},{"line_number":251,"context_line":"to the new certs in the configuration file and restart all Octavia services."},{"line_number":252,"context_line":""},{"line_number":253,"context_line":"If the client certificate authority cert has been replaced in addition to"},{"line_number":254,"context_line":"rotating the client certificate te new client certificate authority"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_0c72f6ad","line":251,"range":{"start_line":251,"start_character":55,"end_line":251,"end_character":75},"in_reply_to":"1a1ced50_00e74540","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":255,"context_line":"certificate needs to be installed in the system. After that initiate a"},{"line_number":256,"context_line":"failover of all amphora to distribute the new client certificate authority"},{"line_number":257,"context_line":"cert. Until the failover is completed the amphora can\u0027t be controled by the"},{"line_number":258,"context_line":"control plabe."},{"line_number":259,"context_line":""},{"line_number":260,"context_line":"Changing The Heartbeat Encryption Key"},{"line_number":261,"context_line":"-------------------------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_a0ccb1bb","line":258,"range":{"start_line":258,"start_character":8,"end_line":258,"end_character":13},"updated":"2017-03-22 22:51:50.000000000","message":"plane","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":255,"context_line":"certificate needs to be installed in the system. After that initiate a"},{"line_number":256,"context_line":"failover of all amphora to distribute the new client certificate authority"},{"line_number":257,"context_line":"cert. Until the failover is completed the amphora can\u0027t be controled by the"},{"line_number":258,"context_line":"control plabe."},{"line_number":259,"context_line":""},{"line_number":260,"context_line":"Changing The Heartbeat Encryption Key"},{"line_number":261,"context_line":"-------------------------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_ccb9becd","line":258,"range":{"start_line":258,"start_character":8,"end_line":258,"end_character":13},"in_reply_to":"1a1ced50_a0ccb1bb","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":257,"context_line":"cert. Until the failover is completed the amphora can\u0027t be controled by the"},{"line_number":258,"context_line":"control plabe."},{"line_number":259,"context_line":""},{"line_number":260,"context_line":"Changing The Heartbeat Encryption Key"},{"line_number":261,"context_line":"-------------------------------------"},{"line_number":262,"context_line":""},{"line_number":263,"context_line":"Special caution needs to be taken to replace the heartbeat encryption key."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_201521e4","line":260,"range":{"start_line":260,"start_character":0,"end_line":260,"end_character":37},"updated":"2017-03-22 22:51:50.000000000","message":"We probably should note that in the future we will have an \"update amphora\" API that will allow these to be updated without failover.  At that time there would be a procedure to halt health monitoring while the keys are rotated and then resume health processing.","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":257,"context_line":"cert. Until the failover is completed the amphora can\u0027t be controled by the"},{"line_number":258,"context_line":"control plabe."},{"line_number":259,"context_line":""},{"line_number":260,"context_line":"Changing The Heartbeat Encryption Key"},{"line_number":261,"context_line":"-------------------------------------"},{"line_number":262,"context_line":""},{"line_number":263,"context_line":"Special caution needs to be taken to replace the heartbeat encryption key."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_ecae7a80","line":260,"range":{"start_line":260,"start_character":0,"end_line":260,"end_character":37},"in_reply_to":"1a1ced50_201521e4","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":265,"context_line":"all amphora are in an error state and initiate an immediate failover."},{"line_number":266,"context_line":""},{"line_number":267,"context_line":"In preparation read the chapter on \"Best practices/optimizations\" in"},{"line_number":268,"context_line":"the Failover section. In particular it is advisable if the trottling"},{"line_number":269,"context_line":"enhancement (scheduled for Pike) doesn\u0027t exist to craete a sufficient"},{"line_number":270,"context_line":"number of spare amphora to mitigate the stress on the OpenStack cluster"},{"line_number":271,"context_line":"when Octavia starts to replace all amphora immediately."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_c04e0d3a","line":268,"range":{"start_line":268,"start_character":59,"end_line":268,"end_character":68},"updated":"2017-03-22 22:51:50.000000000","message":"throttling","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":265,"context_line":"all amphora are in an error state and initiate an immediate failover."},{"line_number":266,"context_line":""},{"line_number":267,"context_line":"In preparation read the chapter on \"Best practices/optimizations\" in"},{"line_number":268,"context_line":"the Failover section. In particular it is advisable if the trottling"},{"line_number":269,"context_line":"enhancement (scheduled for Pike) doesn\u0027t exist to craete a sufficient"},{"line_number":270,"context_line":"number of spare amphora to mitigate the stress on the OpenStack cluster"},{"line_number":271,"context_line":"when Octavia starts to replace all amphora immediately."}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_ac2ac22d","line":268,"range":{"start_line":268,"start_character":59,"end_line":268,"end_character":68},"in_reply_to":"1a1ced50_c04e0d3a","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":266,"context_line":""},{"line_number":267,"context_line":"In preparation read the chapter on \"Best practices/optimizations\" in"},{"line_number":268,"context_line":"the Failover section. In particular it is advisable if the trottling"},{"line_number":269,"context_line":"enhancement (scheduled for Pike) doesn\u0027t exist to craete a sufficient"},{"line_number":270,"context_line":"number of spare amphora to mitigate the stress on the OpenStack cluster"},{"line_number":271,"context_line":"when Octavia starts to replace all amphora immediately."},{"line_number":272,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_40613da8","line":269,"range":{"start_line":269,"start_character":13,"end_line":269,"end_character":31},"updated":"2017-03-22 22:51:50.000000000","message":"merged, so available in Pike","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":266,"context_line":""},{"line_number":267,"context_line":"In preparation read the chapter on \"Best practices/optimizations\" in"},{"line_number":268,"context_line":"the Failover section. In particular it is advisable if the trottling"},{"line_number":269,"context_line":"enhancement (scheduled for Pike) doesn\u0027t exist to craete a sufficient"},{"line_number":270,"context_line":"number of spare amphora to mitigate the stress on the OpenStack cluster"},{"line_number":271,"context_line":"when Octavia starts to replace all amphora immediately."},{"line_number":272,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_4cc6ae4a","line":269,"range":{"start_line":269,"start_character":13,"end_line":269,"end_character":31},"in_reply_to":"1a1ced50_40613da8","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"956e30ae9ed5ba513e68fa40e230a595bf4959dd","unresolved":false,"context_lines":[{"line_number":267,"context_line":"In preparation read the chapter on \"Best practices/optimizations\" in"},{"line_number":268,"context_line":"the Failover section. In particular it is advisable if the trottling"},{"line_number":269,"context_line":"enhancement (scheduled for Pike) doesn\u0027t exist to craete a sufficient"},{"line_number":270,"context_line":"number of spare amphora to mitigate the stress on the OpenStack cluster"},{"line_number":271,"context_line":"when Octavia starts to replace all amphora immediately."},{"line_number":272,"context_line":""},{"line_number":273,"context_line":"Given the risks involved with changing this key it should not be changed"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_c0752d64","line":270,"range":{"start_line":270,"start_character":64,"end_line":270,"end_character":71},"updated":"2017-03-22 22:51:50.000000000","message":"deployment","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"7d4246432c3f9139bad9c2ee7acbc52f82b2f936","unresolved":false,"context_lines":[{"line_number":267,"context_line":"In preparation read the chapter on \"Best practices/optimizations\" in"},{"line_number":268,"context_line":"the Failover section. In particular it is advisable if the trottling"},{"line_number":269,"context_line":"enhancement (scheduled for Pike) doesn\u0027t exist to craete a sufficient"},{"line_number":270,"context_line":"number of spare amphora to mitigate the stress on the OpenStack cluster"},{"line_number":271,"context_line":"when Octavia starts to replace all amphora immediately."},{"line_number":272,"context_line":""},{"line_number":273,"context_line":"Given the risks involved with changing this key it should not be changed"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a1ced50_6cc36a39","line":270,"range":{"start_line":270,"start_character":64,"end_line":270,"end_character":71},"in_reply_to":"1a1ced50_c0752d64","updated":"2017-03-23 17:50:41.000000000","message":"Done","commit_id":"990a3220d20269c5e255735bc7bcfa5c8e455b2d"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"55bd1228024af1c45c26e4ff59087129096bdfec","unresolved":false,"context_lines":[{"line_number":93,"context_line":""},{"line_number":94,"context_line":"There is a host of information in the log files which can be used for log"},{"line_number":95,"context_line":"analytics. A few examples what could be monitored are:"},{"line_number":96,"context_line":"* Amphora Build Rate - to determine load of the system"},{"line_number":97,"context_line":"* Amphora Build Time - to determine how long it takes to build an amphora"},{"line_number":98,"context_line":"* Failures/Errors - to get notified of systemm problems early"},{"line_number":99,"context_line":""},{"line_number":100,"context_line":".. _rotating_amphora:"},{"line_number":101,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"dfeb2761_ff541100","line":98,"range":{"start_line":96,"start_character":0,"end_line":98,"end_character":61},"updated":"2017-04-04 18:03:00.000000000","message":"This is not laying out correctly.  I think there has to be a blank line between the paragraph above.","commit_id":"34dfab9ef43331dc9d93d58dcc5dc19dd56c516b"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":17,"context_line":"Operator Maintenace  Guide"},{"line_number":18,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":19,"context_line":"This document is intended for operators. For a developer guide see the"},{"line_number":20,"context_line":":doc:`dev-quick-start.rst` in this documentation repository. For an end-user"},{"line_number":21,"context_line":"guide, please see the :doc:`basic-cookbook.rst` in this documentation"},{"line_number":22,"context_line":"repository."},{"line_number":23,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_206ec62e","line":20,"updated":"2017-04-10 19:36:49.000000000","message":"I don\u0027t think these doc tags are working? They don\u0027t seem to do anything, it\u0027s still just unlinked raw text of the filename. Maybe need to provide the full path?","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":27,"context_line":""},{"line_number":28,"context_line":"Montioring Load Balancer Amphora"},{"line_number":29,"context_line":"--------------------------------"},{"line_number":30,"context_line":"Octavia will monitor the load balancing amphora itself and initiate failovers"},{"line_number":31,"context_line":"and/or replacements if they malfunction. Therefore most installations won\u0027t"},{"line_number":32,"context_line":"need to monitor the amphora running the load balancer."},{"line_number":33,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_40d30ad6","line":30,"updated":"2017-04-10 19:36:49.000000000","message":"nit: amphorae\n\n(this could be singular, but you use \"if THEY malfunction\" below)","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":27,"context_line":""},{"line_number":28,"context_line":"Montioring Load Balancer Amphora"},{"line_number":29,"context_line":"--------------------------------"},{"line_number":30,"context_line":"Octavia will monitor the load balancing amphora itself and initiate failovers"},{"line_number":31,"context_line":"and/or replacements if they malfunction. Therefore most installations won\u0027t"},{"line_number":32,"context_line":"need to monitor the amphora running the load balancer."},{"line_number":33,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_2157e85a","line":30,"in_reply_to":"bff0334d_40d30ad6","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":28,"context_line":"Montioring Load Balancer Amphora"},{"line_number":29,"context_line":"--------------------------------"},{"line_number":30,"context_line":"Octavia will monitor the load balancing amphora itself and initiate failovers"},{"line_number":31,"context_line":"and/or replacements if they malfunction. Therefore most installations won\u0027t"},{"line_number":32,"context_line":"need to monitor the amphora running the load balancer."},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Octavia will log each failover to the corresponding health manager logs. It is"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_207806c2","line":31,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"Therefore\", or else comma instead of period before \"therefore\".","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":28,"context_line":"Montioring Load Balancer Amphora"},{"line_number":29,"context_line":"--------------------------------"},{"line_number":30,"context_line":"Octavia will monitor the load balancing amphora itself and initiate failovers"},{"line_number":31,"context_line":"and/or replacements if they malfunction. Therefore most installations won\u0027t"},{"line_number":32,"context_line":"need to monitor the amphora running the load balancer."},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Octavia will log each failover to the corresponding health manager logs. It is"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_81cd9432","line":31,"in_reply_to":"bff0334d_207806c2","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":29,"context_line":"--------------------------------"},{"line_number":30,"context_line":"Octavia will monitor the load balancing amphora itself and initiate failovers"},{"line_number":31,"context_line":"and/or replacements if they malfunction. Therefore most installations won\u0027t"},{"line_number":32,"context_line":"need to monitor the amphora running the load balancer."},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Octavia will log each failover to the corresponding health manager logs. It is"},{"line_number":35,"context_line":"advisable to use log analytics to monitor failover trends to notice problems"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_a0f1b66d","line":32,"updated":"2017-04-10 19:36:49.000000000","message":"nit: amphorae","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":29,"context_line":"--------------------------------"},{"line_number":30,"context_line":"Octavia will monitor the load balancing amphora itself and initiate failovers"},{"line_number":31,"context_line":"and/or replacements if they malfunction. Therefore most installations won\u0027t"},{"line_number":32,"context_line":"need to monitor the amphora running the load balancer."},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Octavia will log each failover to the corresponding health manager logs. It is"},{"line_number":35,"context_line":"advisable to use log analytics to monitor failover trends to notice problems"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_61e730ae","line":32,"in_reply_to":"bff0334d_a0f1b66d","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":39,"context_line":"monitoring of the other services showed problems as well, so depending on"},{"line_number":40,"context_line":"your overall monitoring strategy this might be optional."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"If additional monitoring is necessary review the corresponding calls on"},{"line_number":43,"context_line":"the amphora agent REST interface (see :doc:`../api/haproxy-amphora-api.rst`)"},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"Monitoring Pool Members"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_00b06289","line":42,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"necessary\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":39,"context_line":"monitoring of the other services showed problems as well, so depending on"},{"line_number":40,"context_line":"your overall monitoring strategy this might be optional."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"If additional monitoring is necessary review the corresponding calls on"},{"line_number":43,"context_line":"the amphora agent REST interface (see :doc:`../api/haproxy-amphora-api.rst`)"},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"Monitoring Pool Members"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_e1fa2041","line":42,"in_reply_to":"bff0334d_00b06289","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":40,"context_line":"your overall monitoring strategy this might be optional."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"If additional monitoring is necessary review the corresponding calls on"},{"line_number":43,"context_line":"the amphora agent REST interface (see :doc:`../api/haproxy-amphora-api.rst`)"},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"Monitoring Pool Members"},{"line_number":46,"context_line":"-----------------------"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_4048aa85","line":43,"updated":"2017-04-10 19:36:49.000000000","message":"Hmm, same, the doc tag doesn\u0027t seem to be working?","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":57,"context_line":"For production sites we recommend to use outside monitoring services. They"},{"line_number":58,"context_line":"will use servers distributed around the globe to not only monitor if the site"},{"line_number":59,"context_line":"is up but also parts of the system outside the visibility of Octavia like"},{"line_number":60,"context_line":"routers, network connectiviy, etc."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"Monitoring Octavia Control Plane"},{"line_number":63,"context_line":"--------------------------------"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_60384eed","line":60,"updated":"2017-04-10 19:36:49.000000000","message":"connectivity","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":57,"context_line":"For production sites we recommend to use outside monitoring services. They"},{"line_number":58,"context_line":"will use servers distributed around the globe to not only monitor if the site"},{"line_number":59,"context_line":"is up but also parts of the system outside the visibility of Octavia like"},{"line_number":60,"context_line":"routers, network connectiviy, etc."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"Monitoring Octavia Control Plane"},{"line_number":63,"context_line":"--------------------------------"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_619cd00d","line":60,"in_reply_to":"bff0334d_60384eed","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":71,"context_line":""},{"line_number":72,"context_line":"* octavia-health-manager"},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"* octavia-house-keeping"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"The Monasca project has a plugin for such monitoring (see"},{"line_number":77,"context_line":"https://github.com/openstack/monasca-agent/blob/master/monasca_setup/detection/plugins/octavia.py)."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_fb53ef69","line":74,"updated":"2017-04-10 19:36:49.000000000","message":"octavia-housekeeping","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":71,"context_line":""},{"line_number":72,"context_line":"* octavia-health-manager"},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"* octavia-house-keeping"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"The Monasca project has a plugin for such monitoring (see"},{"line_number":77,"context_line":"https://github.com/openstack/monasca-agent/blob/master/monasca_setup/detection/plugins/octavia.py)."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_a1bf785f","line":74,"in_reply_to":"bff0334d_fb53ef69","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":81,"context_line":"lineary. For high availability of the control plane we recommend to run at"},{"line_number":82,"context_line":"least one set of components in each availability zone. Furthermore, the"},{"line_number":83,"context_line":"octavia-api endpoint could be behind a load balancer or other HA technology."},{"line_number":84,"context_line":"That said if one or more components fail the system will still be available"},{"line_number":85,"context_line":"(though potentially degraded). For instance if you have installed one set of"},{"line_number":86,"context_line":"components in three availabiity zones even if you loose a whole zone the"},{"line_number":87,"context_line":"Octavia will still be responsive and available - only if you loose the"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_fbd88fef","line":84,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"That said\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":81,"context_line":"lineary. For high availability of the control plane we recommend to run at"},{"line_number":82,"context_line":"least one set of components in each availability zone. Furthermore, the"},{"line_number":83,"context_line":"octavia-api endpoint could be behind a load balancer or other HA technology."},{"line_number":84,"context_line":"That said if one or more components fail the system will still be available"},{"line_number":85,"context_line":"(though potentially degraded). For instance if you have installed one set of"},{"line_number":86,"context_line":"components in three availabiity zones even if you loose a whole zone the"},{"line_number":87,"context_line":"Octavia will still be responsive and available - only if you loose the"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_81c474f6","line":84,"in_reply_to":"bff0334d_fbd88fef","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":83,"context_line":"octavia-api endpoint could be behind a load balancer or other HA technology."},{"line_number":84,"context_line":"That said if one or more components fail the system will still be available"},{"line_number":85,"context_line":"(though potentially degraded). For instance if you have installed one set of"},{"line_number":86,"context_line":"components in three availabiity zones even if you loose a whole zone the"},{"line_number":87,"context_line":"Octavia will still be responsive and available - only if you loose the"},{"line_number":88,"context_line":"Octavia control plane in all three zones will the service be unavailable."},{"line_number":89,"context_line":"Please note this only addresses control plane availability the availability"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_5be77bad","line":86,"updated":"2017-04-10 19:36:49.000000000","message":"\"availability\"\n\n\"lose\"\n\n\"zone the\" -\u003e \"zone\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":83,"context_line":"octavia-api endpoint could be behind a load balancer or other HA technology."},{"line_number":84,"context_line":"That said if one or more components fail the system will still be available"},{"line_number":85,"context_line":"(though potentially degraded). For instance if you have installed one set of"},{"line_number":86,"context_line":"components in three availabiity zones even if you loose a whole zone the"},{"line_number":87,"context_line":"Octavia will still be responsive and available - only if you loose the"},{"line_number":88,"context_line":"Octavia control plane in all three zones will the service be unavailable."},{"line_number":89,"context_line":"Please note this only addresses control plane availability the availability"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_217808c2","line":86,"in_reply_to":"bff0334d_5be77bad","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":84,"context_line":"That said if one or more components fail the system will still be available"},{"line_number":85,"context_line":"(though potentially degraded). For instance if you have installed one set of"},{"line_number":86,"context_line":"components in three availabiity zones even if you loose a whole zone the"},{"line_number":87,"context_line":"Octavia will still be responsive and available - only if you loose the"},{"line_number":88,"context_line":"Octavia control plane in all three zones will the service be unavailable."},{"line_number":89,"context_line":"Please note this only addresses control plane availability the availability"},{"line_number":90,"context_line":"of the load balancing function depends highly on the chosen topology and the"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_fb01af39","line":87,"updated":"2017-04-10 19:36:49.000000000","message":"\"lose\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":84,"context_line":"That said if one or more components fail the system will still be available"},{"line_number":85,"context_line":"(though potentially degraded). For instance if you have installed one set of"},{"line_number":86,"context_line":"components in three availabiity zones even if you loose a whole zone the"},{"line_number":87,"context_line":"Octavia will still be responsive and available - only if you loose the"},{"line_number":88,"context_line":"Octavia control plane in all three zones will the service be unavailable."},{"line_number":89,"context_line":"Please note this only addresses control plane availability the availability"},{"line_number":90,"context_line":"of the load balancing function depends highly on the chosen topology and the"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_017504cb","line":87,"in_reply_to":"bff0334d_fb01af39","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":86,"context_line":"components in three availabiity zones even if you loose a whole zone the"},{"line_number":87,"context_line":"Octavia will still be responsive and available - only if you loose the"},{"line_number":88,"context_line":"Octavia control plane in all three zones will the service be unavailable."},{"line_number":89,"context_line":"Please note this only addresses control plane availability the availability"},{"line_number":90,"context_line":"of the load balancing function depends highly on the chosen topology and the"},{"line_number":91,"context_line":"anti-affinity settings. See our forthcoming HA guide for more details."},{"line_number":92,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_9b9623f0","line":89,"updated":"2017-04-10 19:36:49.000000000","message":"After the first \"availability\", either end the sentence, or use a semicolon.","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":86,"context_line":"components in three availabiity zones even if you loose a whole zone the"},{"line_number":87,"context_line":"Octavia will still be responsive and available - only if you loose the"},{"line_number":88,"context_line":"Octavia control plane in all three zones will the service be unavailable."},{"line_number":89,"context_line":"Please note this only addresses control plane availability the availability"},{"line_number":90,"context_line":"of the load balancing function depends highly on the chosen topology and the"},{"line_number":91,"context_line":"anti-affinity settings. See our forthcoming HA guide for more details."},{"line_number":92,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_a14d389b","line":89,"in_reply_to":"bff0334d_9b9623f0","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":95,"context_line":"intervals is sufficient."},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"There is a host of information in the log files which can be used for log"},{"line_number":98,"context_line":"analytics. A few examples what could be monitored are:"},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"* Amphora Build Rate - to determine load of the system"},{"line_number":101,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_1b8a13be","line":98,"updated":"2017-04-10 19:36:49.000000000","message":"\"of what\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":95,"context_line":"intervals is sufficient."},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"There is a host of information in the log files which can be used for log"},{"line_number":98,"context_line":"analytics. A few examples what could be monitored are:"},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"* Amphora Build Rate - to determine load of the system"},{"line_number":101,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_4148ac85","line":98,"in_reply_to":"bff0334d_1b8a13be","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":101,"context_line":""},{"line_number":102,"context_line":"* Amphora Build Time - to determine how long it takes to build an amphora"},{"line_number":103,"context_line":""},{"line_number":104,"context_line":"* Failures/Errors - to get notified of systemm problems early"},{"line_number":105,"context_line":""},{"line_number":106,"context_line":".. _rotating_amphora:"},{"line_number":107,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_3bba776d","line":104,"updated":"2017-04-10 19:36:49.000000000","message":"\"to be notified\", \"system\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":101,"context_line":""},{"line_number":102,"context_line":"* Amphora Build Time - to determine how long it takes to build an amphora"},{"line_number":103,"context_line":""},{"line_number":104,"context_line":"* Failures/Errors - to get notified of systemm problems early"},{"line_number":105,"context_line":""},{"line_number":106,"context_line":".. _rotating_amphora:"},{"line_number":107,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_c1539c38","line":104,"in_reply_to":"bff0334d_3bba776d","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":108,"context_line":"Rotating the Amphora Images"},{"line_number":109,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":110,"context_line":""},{"line_number":111,"context_line":"Octavia will start load balancers with a pre-build image which contains the"},{"line_number":112,"context_line":"amphora agent, a load balancing application, and gets seeded with cryptographic"},{"line_number":113,"context_line":"certificates through the config drive at start up."},{"line_number":114,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_bba56749","line":111,"updated":"2017-04-10 19:36:49.000000000","message":"nit: pre-built\n\nnit: contain","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":108,"context_line":"Rotating the Amphora Images"},{"line_number":109,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":110,"context_line":""},{"line_number":111,"context_line":"Octavia will start load balancers with a pre-build image which contains the"},{"line_number":112,"context_line":"amphora agent, a load balancing application, and gets seeded with cryptographic"},{"line_number":113,"context_line":"certificates through the config drive at start up."},{"line_number":114,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_e12b4092","line":111,"in_reply_to":"bff0334d_bba56749","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":109,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":110,"context_line":""},{"line_number":111,"context_line":"Octavia will start load balancers with a pre-build image which contains the"},{"line_number":112,"context_line":"amphora agent, a load balancing application, and gets seeded with cryptographic"},{"line_number":113,"context_line":"certificates through the config drive at start up."},{"line_number":114,"context_line":""},{"line_number":115,"context_line":"With rotating we mean making a load balancer amphora running with an old image"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_bb7a07b7","line":112,"updated":"2017-04-10 19:36:49.000000000","message":"nit: and are seeded","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":109,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":110,"context_line":""},{"line_number":111,"context_line":"Octavia will start load balancers with a pre-build image which contains the"},{"line_number":112,"context_line":"amphora agent, a load balancing application, and gets seeded with cryptographic"},{"line_number":113,"context_line":"certificates through the config drive at start up."},{"line_number":114,"context_line":""},{"line_number":115,"context_line":"With rotating we mean making a load balancer amphora running with an old image"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_c1283c98","line":112,"in_reply_to":"bff0334d_bb7a07b7","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":112,"context_line":"amphora agent, a load balancing application, and gets seeded with cryptographic"},{"line_number":113,"context_line":"certificates through the config drive at start up."},{"line_number":114,"context_line":""},{"line_number":115,"context_line":"With rotating we mean making a load balancer amphora running with an old image"},{"line_number":116,"context_line":"fail-over to an amphora with a new image without any measurable interruption in"},{"line_number":117,"context_line":"the load balancing functionality with Active/Standby topology. Sandalone load"},{"line_number":118,"context_line":"balancers might experience a short outage."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_1b61f305","line":115,"updated":"2017-04-10 19:36:49.000000000","message":"nit: \"Rotating the image means making\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":113,"context_line":"certificates through the config drive at start up."},{"line_number":114,"context_line":""},{"line_number":115,"context_line":"With rotating we mean making a load balancer amphora running with an old image"},{"line_number":116,"context_line":"fail-over to an amphora with a new image without any measurable interruption in"},{"line_number":117,"context_line":"the load balancing functionality with Active/Standby topology. Sandalone load"},{"line_number":118,"context_line":"balancers might experience a short outage."},{"line_number":119,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_9b1bc37f","line":116,"updated":"2017-04-10 19:36:49.000000000","message":"nit: \"with a new image. This should be without any\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":113,"context_line":"certificates through the config drive at start up."},{"line_number":114,"context_line":""},{"line_number":115,"context_line":"With rotating we mean making a load balancer amphora running with an old image"},{"line_number":116,"context_line":"fail-over to an amphora with a new image without any measurable interruption in"},{"line_number":117,"context_line":"the load balancing functionality with Active/Standby topology. Sandalone load"},{"line_number":118,"context_line":"balancers might experience a short outage."},{"line_number":119,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_130b1724","line":116,"in_reply_to":"bff0334d_9b1bc37f","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":114,"context_line":""},{"line_number":115,"context_line":"With rotating we mean making a load balancer amphora running with an old image"},{"line_number":116,"context_line":"fail-over to an amphora with a new image without any measurable interruption in"},{"line_number":117,"context_line":"the load balancing functionality with Active/Standby topology. Sandalone load"},{"line_number":118,"context_line":"balancers might experience a short outage."},{"line_number":119,"context_line":""},{"line_number":120,"context_line":"Here are some reasons you might need to rotate the amphora image:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_7b37df00","line":117,"updated":"2017-04-10 19:36:49.000000000","message":"nit: \"when using Active/Standby\"\n\n\"Standalone\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":114,"context_line":""},{"line_number":115,"context_line":"With rotating we mean making a load balancer amphora running with an old image"},{"line_number":116,"context_line":"fail-over to an amphora with a new image without any measurable interruption in"},{"line_number":117,"context_line":"the load balancing functionality with Active/Standby topology. Sandalone load"},{"line_number":118,"context_line":"balancers might experience a short outage."},{"line_number":119,"context_line":""},{"line_number":120,"context_line":"Here are some reasons you might need to rotate the amphora image:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_93160749","line":117,"in_reply_to":"bff0334d_7b37df00","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":123,"context_line":""},{"line_number":124,"context_line":"* You want to deploy a new version of the amphora agent or haproxy"},{"line_number":125,"context_line":""},{"line_number":126,"context_line":"* The cryptographic certificates and.or keys on the amphora have been"},{"line_number":127,"context_line":"  compromised."},{"line_number":128,"context_line":""},{"line_number":129,"context_line":"* Though not related to rotating images this procedure might be invoked if you"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_6606261f","line":126,"updated":"2017-04-10 19:36:49.000000000","message":"and/or","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":123,"context_line":""},{"line_number":124,"context_line":"* You want to deploy a new version of the amphora agent or haproxy"},{"line_number":125,"context_line":""},{"line_number":126,"context_line":"* The cryptographic certificates and.or keys on the amphora have been"},{"line_number":127,"context_line":"  compromised."},{"line_number":128,"context_line":""},{"line_number":129,"context_line":"* Though not related to rotating images this procedure might be invoked if you"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_73294388","line":126,"in_reply_to":"bff0334d_6606261f","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":126,"context_line":"* The cryptographic certificates and.or keys on the amphora have been"},{"line_number":127,"context_line":"  compromised."},{"line_number":128,"context_line":""},{"line_number":129,"context_line":"* Though not related to rotating images this procedure might be invoked if you"},{"line_number":130,"context_line":"  are switching to a different flavor for the underlying virtual machine."},{"line_number":131,"context_line":""},{"line_number":132,"context_line":"Preparing a new amphora image"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_460b2223","line":129,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"images\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":126,"context_line":"* The cryptographic certificates and.or keys on the amphora have been"},{"line_number":127,"context_line":"  compromised."},{"line_number":128,"context_line":""},{"line_number":129,"context_line":"* Though not related to rotating images this procedure might be invoked if you"},{"line_number":130,"context_line":"  are switching to a different flavor for the underlying virtual machine."},{"line_number":131,"context_line":""},{"line_number":132,"context_line":"Preparing a new amphora image"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_132437ae","line":129,"in_reply_to":"bff0334d_460b2223","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":129,"context_line":"* Though not related to rotating images this procedure might be invoked if you"},{"line_number":130,"context_line":"  are switching to a different flavor for the underlying virtual machine."},{"line_number":131,"context_line":""},{"line_number":132,"context_line":"Preparing a new amphora image"},{"line_number":133,"context_line":"-----------------------------"},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"To prepare a new amphora image you will need to use the diskimage-create.sh as"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_e619167a","line":132,"updated":"2017-04-10 19:36:49.000000000","message":"nit: Consistency of capitalization is off throughout this document with respect to these headers. I\u0027m not sure whether they should be capitalized or not, I\u0027d just like it to be consistent. :)","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":129,"context_line":"* Though not related to rotating images this procedure might be invoked if you"},{"line_number":130,"context_line":"  are switching to a different flavor for the underlying virtual machine."},{"line_number":131,"context_line":""},{"line_number":132,"context_line":"Preparing a new amphora image"},{"line_number":133,"context_line":"-----------------------------"},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"To prepare a new amphora image you will need to use the diskimage-create.sh as"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_d33ecfb6","line":132,"in_reply_to":"bff0334d_e619167a","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":132,"context_line":"Preparing a new amphora image"},{"line_number":133,"context_line":"-----------------------------"},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"To prepare a new amphora image you will need to use the diskimage-create.sh as"},{"line_number":136,"context_line":"described in the README in the diskimage-create directory."},{"line_number":137,"context_line":""},{"line_number":138,"context_line":"For instance, in the ``octavia/diskimage-create`` directory run:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_661f465b","line":135,"updated":"2017-04-10 19:36:49.000000000","message":"nit: \"need to use diskimage-create.sh\" (no \"the\")","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":132,"context_line":"Preparing a new amphora image"},{"line_number":133,"context_line":"-----------------------------"},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"To prepare a new amphora image you will need to use the diskimage-create.sh as"},{"line_number":136,"context_line":"described in the README in the diskimage-create directory."},{"line_number":137,"context_line":""},{"line_number":138,"context_line":"For instance, in the ``octavia/diskimage-create`` directory run:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_537cff81","line":135,"in_reply_to":"bff0334d_661f465b","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":135,"context_line":"To prepare a new amphora image you will need to use the diskimage-create.sh as"},{"line_number":136,"context_line":"described in the README in the diskimage-create directory."},{"line_number":137,"context_line":""},{"line_number":138,"context_line":"For instance, in the ``octavia/diskimage-create`` directory run:"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"   .. code-block:: bash"},{"line_number":141,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_263dbec3","line":138,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"directory\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":135,"context_line":"To prepare a new amphora image you will need to use the diskimage-create.sh as"},{"line_number":136,"context_line":"described in the README in the diskimage-create directory."},{"line_number":137,"context_line":""},{"line_number":138,"context_line":"For instance, in the ``octavia/diskimage-create`` directory run:"},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"   .. code-block:: bash"},{"line_number":141,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_336dfbcb","line":138,"in_reply_to":"bff0334d_263dbec3","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":148,"context_line":""},{"line_number":149,"context_line":" .. code-block:: bash"},{"line_number":150,"context_line":""},{"line_number":151,"context_line":"      glance image-create --name amphora-x64-haproxy --visibility private \\"},{"line_number":152,"context_line":"      --disk-format qcow2 --container-format bare --tags \u003camphora-image-tag\u003e \\"},{"line_number":153,"context_line":"      \u003c/var/lib/octavia/amphora-x64-haproxy.qcow2"},{"line_number":154,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_e647d64b","line":151,"updated":"2017-04-10 19:36:49.000000000","message":"It would be nice to use the actual openstack client in this example, as this should be deprecated?\n\nopenstack image create --file amphora-x64-haproxy.qcow2 --disk-format qcow2 --tag \u003camphora-image-tag\u003e\n\nI am not sure about the rest of the options","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":148,"context_line":""},{"line_number":149,"context_line":" .. code-block:: bash"},{"line_number":150,"context_line":""},{"line_number":151,"context_line":"      glance image-create --name amphora-x64-haproxy --visibility private \\"},{"line_number":152,"context_line":"      --disk-format qcow2 --container-format bare --tags \u003camphora-image-tag\u003e \\"},{"line_number":153,"context_line":"      \u003c/var/lib/octavia/amphora-x64-haproxy.qcow2"},{"line_number":154,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_936727b8","line":151,"in_reply_to":"bff0334d_e647d64b","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":152,"context_line":"      --disk-format qcow2 --container-format bare --tags \u003camphora-image-tag\u003e \\"},{"line_number":153,"context_line":"      \u003c/var/lib/octavia/amphora-x64-haproxy.qcow2"},{"line_number":154,"context_line":""},{"line_number":155,"context_line":"If you didn\u0027t configure image tags and instead configured an image id. You will"},{"line_number":156,"context_line":"need to update the Octavia configuration file with the new id and restart the"},{"line_number":157,"context_line":"octavia services (except octavia-api)."},{"line_number":158,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_266b7eb7","line":155,"updated":"2017-04-10 19:36:49.000000000","message":"\"image id, you\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":152,"context_line":"      --disk-format qcow2 --container-format bare --tags \u003camphora-image-tag\u003e \\"},{"line_number":153,"context_line":"      \u003c/var/lib/octavia/amphora-x64-haproxy.qcow2"},{"line_number":154,"context_line":""},{"line_number":155,"context_line":"If you didn\u0027t configure image tags and instead configured an image id. You will"},{"line_number":156,"context_line":"need to update the Octavia configuration file with the new id and restart the"},{"line_number":157,"context_line":"octavia services (except octavia-api)."},{"line_number":158,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_f3f9d3c7","line":155,"in_reply_to":"bff0334d_266b7eb7","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":159,"context_line":"Generating a list of amphora to rotate"},{"line_number":160,"context_line":"--------------------------------------"},{"line_number":161,"context_line":""},{"line_number":162,"context_line":"The easiest way to generate a list is to use nova to list all the amphora vm:"},{"line_number":163,"context_line":""},{"line_number":164,"context_line":" .. code-block:: bash"},{"line_number":165,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_66a2a6fe","line":162,"updated":"2017-04-10 19:36:49.000000000","message":"\"all the amphorae:\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":165,"context_line":""},{"line_number":166,"context_line":"        openstack server list --name amphora* --all -c ID -c Status -c Networks"},{"line_number":167,"context_line":""},{"line_number":168,"context_line":"Take note of the vm\u0027s ids and ips on the management network."},{"line_number":169,"context_line":""},{"line_number":170,"context_line":"If you are using an ACTIVE-PASSIVE topology it might be beneficial to rotate"},{"line_number":171,"context_line":"first the passive amphora before the active one. In this case you will need"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_e6b59633","line":168,"updated":"2017-04-10 19:36:49.000000000","message":"amphorae ids","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":167,"context_line":""},{"line_number":168,"context_line":"Take note of the vm\u0027s ids and ips on the management network."},{"line_number":169,"context_line":""},{"line_number":170,"context_line":"If you are using an ACTIVE-PASSIVE topology it might be beneficial to rotate"},{"line_number":171,"context_line":"first the passive amphora before the active one. In this case you will need"},{"line_number":172,"context_line":"to use the octavia database to query for that:"},{"line_number":173,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_06963a94","line":170,"updated":"2017-04-10 19:36:49.000000000","message":"I think we say ACTIVE-STANDBY?","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":168,"context_line":"Take note of the vm\u0027s ids and ips on the management network."},{"line_number":169,"context_line":""},{"line_number":170,"context_line":"If you are using an ACTIVE-PASSIVE topology it might be beneficial to rotate"},{"line_number":171,"context_line":"first the passive amphora before the active one. In this case you will need"},{"line_number":172,"context_line":"to use the octavia database to query for that:"},{"line_number":173,"context_line":""},{"line_number":174,"context_line":"    .. code-block:: bash"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_e68eb677","line":171,"updated":"2017-04-10 19:36:49.000000000","message":"passive-\u003estandby","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":175,"context_line":""},{"line_number":176,"context_line":"        mysql octavia -e \u0027select id, compute_id, lb_network_ip, role from amphora where status\u003d\"ALLOCATED\" or status\u003d\"READY\";\u0027"},{"line_number":177,"context_line":""},{"line_number":178,"context_line":"Take note of the nova ids, the role (ACTIVE, PASSIVE), and the ip on the"},{"line_number":179,"context_line":"management network. You can also find this ip either via"},{"line_number":180,"context_line":"``openstack server show \u003cid\u003e`` or"},{"line_number":181,"context_line":"``openstack server list --all -c ID -c Status -c Networks | grep \u003cid\u003e``."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_86d80a7b","line":178,"updated":"2017-04-10 19:36:49.000000000","message":"I believe this should be \"compute ids\", and \"STANDBY\"? or is it \"BACKUP\"? I know it isn\u0027t \"PASSIVE\".","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":175,"context_line":""},{"line_number":176,"context_line":"        mysql octavia -e \u0027select id, compute_id, lb_network_ip, role from amphora where status\u003d\"ALLOCATED\" or status\u003d\"READY\";\u0027"},{"line_number":177,"context_line":""},{"line_number":178,"context_line":"Take note of the nova ids, the role (ACTIVE, PASSIVE), and the ip on the"},{"line_number":179,"context_line":"management network. You can also find this ip either via"},{"line_number":180,"context_line":"``openstack server show \u003cid\u003e`` or"},{"line_number":181,"context_line":"``openstack server list --all -c ID -c Status -c Networks | grep \u003cid\u003e``."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_13b8b7e2","line":178,"in_reply_to":"bff0334d_86d80a7b","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":184,"context_line":"-----------------"},{"line_number":185,"context_line":""},{"line_number":186,"context_line":"The idea is to force Octavia to start up a new amphora because Octavia thinks"},{"line_number":187,"context_line":"this one has failed. To do this most gracefully shut down the port on the"},{"line_number":188,"context_line":"managment network."},{"line_number":189,"context_line":""},{"line_number":190,"context_line":"Use the ip on the management newtork to find the port-id:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_06499a2f","line":187,"updated":"2017-04-10 19:36:49.000000000","message":"nit: \"The most graceful way to do this is to shut down the port on the management network.\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":184,"context_line":"-----------------"},{"line_number":185,"context_line":""},{"line_number":186,"context_line":"The idea is to force Octavia to start up a new amphora because Octavia thinks"},{"line_number":187,"context_line":"this one has failed. To do this most gracefully shut down the port on the"},{"line_number":188,"context_line":"managment network."},{"line_number":189,"context_line":""},{"line_number":190,"context_line":"Use the ip on the management newtork to find the port-id:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_73a263b0","line":187,"in_reply_to":"bff0334d_06499a2f","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":199,"context_line":""},{"line_number":200,"context_line":"        openstack port update --admin-state-up False \u003cport-id\u003e"},{"line_number":201,"context_line":""},{"line_number":202,"context_line":"You can observe the failover by querying nova ``openstack server list --all |"},{"line_number":203,"context_line":"grep \u003cid\u003e`` until the vm isn\u0027t found any longer."},{"line_number":204,"context_line":""},{"line_number":205,"context_line":"Best practices/optimizations"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_660ce6eb","line":202,"updated":"2017-04-10 19:36:49.000000000","message":"Can we find+replace \"failover\" and \"fail-over\" in this document to be consistent? I think I prefer failover, but only marginally, so I am really OK with either as long as it is consistent.","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":199,"context_line":""},{"line_number":200,"context_line":"        openstack port update --admin-state-up False \u003cport-id\u003e"},{"line_number":201,"context_line":""},{"line_number":202,"context_line":"You can observe the failover by querying nova ``openstack server list --all |"},{"line_number":203,"context_line":"grep \u003cid\u003e`` until the vm isn\u0027t found any longer."},{"line_number":204,"context_line":""},{"line_number":205,"context_line":"Best practices/optimizations"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_b39b4b71","line":202,"in_reply_to":"bff0334d_660ce6eb","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":200,"context_line":"        openstack port update --admin-state-up False \u003cport-id\u003e"},{"line_number":201,"context_line":""},{"line_number":202,"context_line":"You can observe the failover by querying nova ``openstack server list --all |"},{"line_number":203,"context_line":"grep \u003cid\u003e`` until the vm isn\u0027t found any longer."},{"line_number":204,"context_line":""},{"line_number":205,"context_line":"Best practices/optimizations"},{"line_number":206,"context_line":"----------------------------"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_06f75ad5","line":203,"updated":"2017-04-10 19:36:49.000000000","message":"s/vm/server/","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":200,"context_line":"        openstack port update --admin-state-up False \u003cport-id\u003e"},{"line_number":201,"context_line":""},{"line_number":202,"context_line":"You can observe the failover by querying nova ``openstack server list --all |"},{"line_number":203,"context_line":"grep \u003cid\u003e`` until the vm isn\u0027t found any longer."},{"line_number":204,"context_line":""},{"line_number":205,"context_line":"Best practices/optimizations"},{"line_number":206,"context_line":"----------------------------"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_93984775","line":203,"in_reply_to":"bff0334d_06f75ad5","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":205,"context_line":"Best practices/optimizations"},{"line_number":206,"context_line":"----------------------------"},{"line_number":207,"context_line":""},{"line_number":208,"context_line":"To speed up the failovers the spare pool can temporary be increased to"},{"line_number":209,"context_line":"accomodate the rapid failover of the amphora. In this case after the"},{"line_number":210,"context_line":"new image has been loaded into glance shut down or initiate a failover of the"},{"line_number":211,"context_line":"amphora in the spare pool. They can be found for instance by looking for the"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_a62f8e3d","line":208,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"failovers\"\n\nnit: \"can be temporarily increased\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":205,"context_line":"Best practices/optimizations"},{"line_number":206,"context_line":"----------------------------"},{"line_number":207,"context_line":""},{"line_number":208,"context_line":"To speed up the failovers the spare pool can temporary be increased to"},{"line_number":209,"context_line":"accomodate the rapid failover of the amphora. In this case after the"},{"line_number":210,"context_line":"new image has been loaded into glance shut down or initiate a failover of the"},{"line_number":211,"context_line":"amphora in the spare pool. They can be found for instance by looking for the"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_f3a3139d","line":208,"in_reply_to":"bff0334d_a62f8e3d","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":207,"context_line":""},{"line_number":208,"context_line":"To speed up the failovers the spare pool can temporary be increased to"},{"line_number":209,"context_line":"accomodate the rapid failover of the amphora. In this case after the"},{"line_number":210,"context_line":"new image has been loaded into glance shut down or initiate a failover of the"},{"line_number":211,"context_line":"amphora in the spare pool. They can be found for instance by looking for the"},{"line_number":212,"context_line":"vms in ``nova list --all`` who only have an ip on the mangement network"},{"line_number":213,"context_line":"assigned but not any tenant network."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_86d92a58","line":210,"updated":"2017-04-10 19:36:49.000000000","message":"comma after \"glance\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":207,"context_line":""},{"line_number":208,"context_line":"To speed up the failovers the spare pool can temporary be increased to"},{"line_number":209,"context_line":"accomodate the rapid failover of the amphora. In this case after the"},{"line_number":210,"context_line":"new image has been loaded into glance shut down or initiate a failover of the"},{"line_number":211,"context_line":"amphora in the spare pool. They can be found for instance by looking for the"},{"line_number":212,"context_line":"vms in ``nova list --all`` who only have an ip on the mangement network"},{"line_number":213,"context_line":"assigned but not any tenant network."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_33329b5f","line":210,"in_reply_to":"bff0334d_86d92a58","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":208,"context_line":"To speed up the failovers the spare pool can temporary be increased to"},{"line_number":209,"context_line":"accomodate the rapid failover of the amphora. In this case after the"},{"line_number":210,"context_line":"new image has been loaded into glance shut down or initiate a failover of the"},{"line_number":211,"context_line":"amphora in the spare pool. They can be found for instance by looking for the"},{"line_number":212,"context_line":"vms in ``nova list --all`` who only have an ip on the mangement network"},{"line_number":213,"context_line":"assigned but not any tenant network."},{"line_number":214,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_26d13e24","line":211,"updated":"2017-04-10 19:36:49.000000000","message":"\"They can be found by\" ... but I would honestly switch to just giving a DB query example, which can easily return a list of compute_ids instead of trying to scan through a bunch of stuff manually looking for things with one instead of two ips.","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":208,"context_line":"To speed up the failovers the spare pool can temporary be increased to"},{"line_number":209,"context_line":"accomodate the rapid failover of the amphora. In this case after the"},{"line_number":210,"context_line":"new image has been loaded into glance shut down or initiate a failover of the"},{"line_number":211,"context_line":"amphora in the spare pool. They can be found for instance by looking for the"},{"line_number":212,"context_line":"vms in ``nova list --all`` who only have an ip on the mangement network"},{"line_number":213,"context_line":"assigned but not any tenant network."},{"line_number":214,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_1337974f","line":211,"in_reply_to":"bff0334d_26d13e24","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":212,"context_line":"vms in ``nova list --all`` who only have an ip on the mangement network"},{"line_number":213,"context_line":"assigned but not any tenant network."},{"line_number":214,"context_line":""},{"line_number":215,"context_line":"Once you increased the spare pool and restarted all Octavia services failovers"},{"line_number":216,"context_line":"will be greatly accelerated. To preserve resources restore the old settings"},{"line_number":217,"context_line":"and restart the octavia services. Since Octavia won\u0027t terminate superfluous"},{"line_number":218,"context_line":"spare amphora on its own they can either be left in the system and will"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_0693da5c","line":215,"updated":"2017-04-10 19:36:49.000000000","message":"nit: \"After you have increased the spare pool size\"\n\nnit: comma after \"services\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":212,"context_line":"vms in ``nova list --all`` who only have an ip on the mangement network"},{"line_number":213,"context_line":"assigned but not any tenant network."},{"line_number":214,"context_line":""},{"line_number":215,"context_line":"Once you increased the spare pool and restarted all Octavia services failovers"},{"line_number":216,"context_line":"will be greatly accelerated. To preserve resources restore the old settings"},{"line_number":217,"context_line":"and restart the octavia services. Since Octavia won\u0027t terminate superfluous"},{"line_number":218,"context_line":"spare amphora on its own they can either be left in the system and will"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_934287aa","line":215,"in_reply_to":"bff0334d_0693da5c","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":213,"context_line":"assigned but not any tenant network."},{"line_number":214,"context_line":""},{"line_number":215,"context_line":"Once you increased the spare pool and restarted all Octavia services failovers"},{"line_number":216,"context_line":"will be greatly accelerated. To preserve resources restore the old settings"},{"line_number":217,"context_line":"and restart the octavia services. Since Octavia won\u0027t terminate superfluous"},{"line_number":218,"context_line":"spare amphora on its own they can either be left in the system and will"},{"line_number":219,"context_line":"automatically be used up as new load balancers are created and/or load"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_c6985276","line":216,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"resources\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":213,"context_line":"assigned but not any tenant network."},{"line_number":214,"context_line":""},{"line_number":215,"context_line":"Once you increased the spare pool and restarted all Octavia services failovers"},{"line_number":216,"context_line":"will be greatly accelerated. To preserve resources restore the old settings"},{"line_number":217,"context_line":"and restart the octavia services. Since Octavia won\u0027t terminate superfluous"},{"line_number":218,"context_line":"spare amphora on its own they can either be left in the system and will"},{"line_number":219,"context_line":"automatically be used up as new load balancers are created and/or load"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_d325af0a","line":216,"in_reply_to":"bff0334d_c6985276","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":214,"context_line":""},{"line_number":215,"context_line":"Once you increased the spare pool and restarted all Octavia services failovers"},{"line_number":216,"context_line":"will be greatly accelerated. To preserve resources restore the old settings"},{"line_number":217,"context_line":"and restart the octavia services. Since Octavia won\u0027t terminate superfluous"},{"line_number":218,"context_line":"spare amphora on its own they can either be left in the system and will"},{"line_number":219,"context_line":"automatically be used up as new load balancers are created and/or load"},{"line_number":220,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_86900a4c","line":217,"updated":"2017-04-10 19:36:49.000000000","message":"Also, capitalization of \"octavia\" is seemingly random? Can we fix this one way or the other?","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":214,"context_line":""},{"line_number":215,"context_line":"Once you increased the spare pool and restarted all Octavia services failovers"},{"line_number":216,"context_line":"will be greatly accelerated. To preserve resources restore the old settings"},{"line_number":217,"context_line":"and restart the octavia services. Since Octavia won\u0027t terminate superfluous"},{"line_number":218,"context_line":"spare amphora on its own they can either be left in the system and will"},{"line_number":219,"context_line":"automatically be used up as new load balancers are created and/or load"},{"line_number":220,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_138557cf","line":217,"in_reply_to":"bff0334d_86900a4c","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":215,"context_line":"Once you increased the spare pool and restarted all Octavia services failovers"},{"line_number":216,"context_line":"will be greatly accelerated. To preserve resources restore the old settings"},{"line_number":217,"context_line":"and restart the octavia services. Since Octavia won\u0027t terminate superfluous"},{"line_number":218,"context_line":"spare amphora on its own they can either be left in the system and will"},{"line_number":219,"context_line":"automatically be used up as new load balancers are created and/or load"},{"line_number":220,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"},{"line_number":221,"context_line":"manually by deleting them in nova (compute)."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_469b2265","line":218,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"own\", remove \"either\".","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":217,"context_line":"and restart the octavia services. Since Octavia won\u0027t terminate superfluous"},{"line_number":218,"context_line":"spare amphora on its own they can either be left in the system and will"},{"line_number":219,"context_line":"automatically be used up as new load balancers are created and/or load"},{"line_number":220,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"},{"line_number":221,"context_line":"manually by deleting them in nova (compute)."},{"line_number":222,"context_line":""},{"line_number":223,"context_line":".. warning::"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_e6c23634","line":220,"updated":"2017-04-10 19:36:49.000000000","message":"I don\u0027t know if deleting them in nova is a good solution, as they will also show up in the DB and I THINK even with a smaller spares pool size, they will still be replaced by the HM when they don\u0027t heartbeat.","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":217,"context_line":"and restart the octavia services. Since Octavia won\u0027t terminate superfluous"},{"line_number":218,"context_line":"spare amphora on its own they can either be left in the system and will"},{"line_number":219,"context_line":"automatically be used up as new load balancers are created and/or load"},{"line_number":220,"context_line":"balancers in error state are failed over. Alternatively, they can be removed"},{"line_number":221,"context_line":"manually by deleting them in nova (compute)."},{"line_number":222,"context_line":""},{"line_number":223,"context_line":".. warning::"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_73c82321","line":220,"in_reply_to":"bff0334d_e6c23634","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":222,"context_line":""},{"line_number":223,"context_line":".. warning::"},{"line_number":224,"context_line":"    If you are using the anti-affinity feature please be aware that it is"},{"line_number":225,"context_line":"    not compatible with spare pools and you are risking both, the ACTIVE and"},{"line_number":226,"context_line":"    PASSIVE amphora, being scheduled omn the same host. It is recommended to"},{"line_number":227,"context_line":"    not increase the spare pool during fail overs in this case (and not to use"},{"line_number":228,"context_line":"    the spare pool at all)."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_86e36ad9","line":225,"updated":"2017-04-10 19:36:49.000000000","message":"nit: remove comma after \"both\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":222,"context_line":""},{"line_number":223,"context_line":".. warning::"},{"line_number":224,"context_line":"    If you are using the anti-affinity feature please be aware that it is"},{"line_number":225,"context_line":"    not compatible with spare pools and you are risking both, the ACTIVE and"},{"line_number":226,"context_line":"    PASSIVE amphora, being scheduled omn the same host. It is recommended to"},{"line_number":227,"context_line":"    not increase the spare pool during fail overs in this case (and not to use"},{"line_number":228,"context_line":"    the spare pool at all)."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_d3d80ff0","line":225,"in_reply_to":"bff0334d_86e36ad9","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":223,"context_line":".. warning::"},{"line_number":224,"context_line":"    If you are using the anti-affinity feature please be aware that it is"},{"line_number":225,"context_line":"    not compatible with spare pools and you are risking both, the ACTIVE and"},{"line_number":226,"context_line":"    PASSIVE amphora, being scheduled omn the same host. It is recommended to"},{"line_number":227,"context_line":"    not increase the spare pool during fail overs in this case (and not to use"},{"line_number":228,"context_line":"    the spare pool at all)."},{"line_number":229,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_46e9e2b4","line":226,"updated":"2017-04-10 19:36:49.000000000","message":"this should be \"BACKUP\" or \"STANDBY\", I forget which we actually use","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":223,"context_line":".. warning::"},{"line_number":224,"context_line":"    If you are using the anti-affinity feature please be aware that it is"},{"line_number":225,"context_line":"    not compatible with spare pools and you are risking both, the ACTIVE and"},{"line_number":226,"context_line":"    PASSIVE amphora, being scheduled omn the same host. It is recommended to"},{"line_number":227,"context_line":"    not increase the spare pool during fail overs in this case (and not to use"},{"line_number":228,"context_line":"    the spare pool at all)."},{"line_number":229,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_f304334c","line":226,"in_reply_to":"bff0334d_46e9e2b4","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":224,"context_line":"    If you are using the anti-affinity feature please be aware that it is"},{"line_number":225,"context_line":"    not compatible with spare pools and you are risking both, the ACTIVE and"},{"line_number":226,"context_line":"    PASSIVE amphora, being scheduled omn the same host. It is recommended to"},{"line_number":227,"context_line":"    not increase the spare pool during fail overs in this case (and not to use"},{"line_number":228,"context_line":"    the spare pool at all)."},{"line_number":229,"context_line":""},{"line_number":230,"context_line":"Since a failover puts significant load on the OpenStack installation by"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_06cf5a56","line":227,"updated":"2017-04-10 19:36:49.000000000","message":"yet another spelling of \"fail overs\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":224,"context_line":"    If you are using the anti-affinity feature please be aware that it is"},{"line_number":225,"context_line":"    not compatible with spare pools and you are risking both, the ACTIVE and"},{"line_number":226,"context_line":"    PASSIVE amphora, being scheduled omn the same host. It is recommended to"},{"line_number":227,"context_line":"    not increase the spare pool during fail overs in this case (and not to use"},{"line_number":228,"context_line":"    the spare pool at all)."},{"line_number":229,"context_line":""},{"line_number":230,"context_line":"Since a failover puts significant load on the OpenStack installation by"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_7396e3f2","line":227,"in_reply_to":"bff0334d_06cf5a56","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":228,"context_line":"    the spare pool at all)."},{"line_number":229,"context_line":""},{"line_number":230,"context_line":"Since a failover puts significant load on the OpenStack installation by"},{"line_number":231,"context_line":"creating new  virtual machines and ports, it should either be done at a very"},{"line_number":232,"context_line":"slow pace, during  a time with little load, or with the right thottling"},{"line_number":233,"context_line":"enabled in Octavia. The throttling will make sure to prioritize failovers"},{"line_number":234,"context_line":"higher than other operations and depending on how many failovers are"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_06f87a78","line":231,"updated":"2017-04-10 19:36:49.000000000","message":"nit: double space after \"new\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":228,"context_line":"    the spare pool at all)."},{"line_number":229,"context_line":""},{"line_number":230,"context_line":"Since a failover puts significant load on the OpenStack installation by"},{"line_number":231,"context_line":"creating new  virtual machines and ports, it should either be done at a very"},{"line_number":232,"context_line":"slow pace, during  a time with little load, or with the right thottling"},{"line_number":233,"context_line":"enabled in Octavia. The throttling will make sure to prioritize failovers"},{"line_number":234,"context_line":"higher than other operations and depending on how many failovers are"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_938cc7d7","line":231,"in_reply_to":"bff0334d_06f87a78","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":229,"context_line":""},{"line_number":230,"context_line":"Since a failover puts significant load on the OpenStack installation by"},{"line_number":231,"context_line":"creating new  virtual machines and ports, it should either be done at a very"},{"line_number":232,"context_line":"slow pace, during  a time with little load, or with the right thottling"},{"line_number":233,"context_line":"enabled in Octavia. The throttling will make sure to prioritize failovers"},{"line_number":234,"context_line":"higher than other operations and depending on how many failovers are"},{"line_number":235,"context_line":"initiated this might crowd out other operations."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_6632a660","line":232,"updated":"2017-04-10 19:36:49.000000000","message":"nit: double space after \"during\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":229,"context_line":""},{"line_number":230,"context_line":"Since a failover puts significant load on the OpenStack installation by"},{"line_number":231,"context_line":"creating new  virtual machines and ports, it should either be done at a very"},{"line_number":232,"context_line":"slow pace, during  a time with little load, or with the right thottling"},{"line_number":233,"context_line":"enabled in Octavia. The throttling will make sure to prioritize failovers"},{"line_number":234,"context_line":"higher than other operations and depending on how many failovers are"},{"line_number":235,"context_line":"initiated this might crowd out other operations."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_53c4fff4","line":232,"in_reply_to":"bff0334d_6632a660","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":236,"context_line":""},{"line_number":237,"context_line":".. note::"},{"line_number":238,"context_line":"    In Pike a failover command is being added to the API which allows to failover"},{"line_number":239,"context_line":"    a load balancer\u0027s amphora while taking care of the intrincaties of different"},{"line_number":240,"context_line":"    topologies and prioritizes administrative failovers behind other operations."},{"line_number":241,"context_line":"    This function should be used instead of the ones descrived above once it"},{"line_number":242,"context_line":"    becomes available."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_26401ea5","line":239,"updated":"2017-04-10 19:36:49.000000000","message":"intricacies","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":236,"context_line":""},{"line_number":237,"context_line":".. note::"},{"line_number":238,"context_line":"    In Pike a failover command is being added to the API which allows to failover"},{"line_number":239,"context_line":"    a load balancer\u0027s amphora while taking care of the intrincaties of different"},{"line_number":240,"context_line":"    topologies and prioritizes administrative failovers behind other operations."},{"line_number":241,"context_line":"    This function should be used instead of the ones descrived above once it"},{"line_number":242,"context_line":"    becomes available."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_f3b2f393","line":239,"in_reply_to":"bff0334d_26401ea5","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":245,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":246,"context_line":""},{"line_number":247,"context_line":"Octavia secures the communication between the amphora agent and the control"},{"line_number":248,"context_line":"plane with two-way SSL encryption. To accomplish that several certificates"},{"line_number":249,"context_line":"are distributed in the system:"},{"line_number":250,"context_line":""},{"line_number":251,"context_line":"* Control plane:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_c64292ab","line":248,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"that\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":245,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":246,"context_line":""},{"line_number":247,"context_line":"Octavia secures the communication between the amphora agent and the control"},{"line_number":248,"context_line":"plane with two-way SSL encryption. To accomplish that several certificates"},{"line_number":249,"context_line":"are distributed in the system:"},{"line_number":250,"context_line":""},{"line_number":251,"context_line":"* Control plane:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_7364a322","line":248,"in_reply_to":"bff0334d_c64292ab","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":251,"context_line":"* Control plane:"},{"line_number":252,"context_line":""},{"line_number":253,"context_line":"  * Amphora certificate authority certificate: Used to validate"},{"line_number":254,"context_line":"    amphora certificates and if Octavia acts as a Certificate Authority to"},{"line_number":255,"context_line":"    issue new amphora certificates"},{"line_number":256,"context_line":""},{"line_number":257,"context_line":"  * Client certificate: Used to authenticate with the amphora"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_06263a16","line":254,"updated":"2017-04-10 19:36:49.000000000","message":"remove \"and\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":251,"context_line":"* Control plane:"},{"line_number":252,"context_line":""},{"line_number":253,"context_line":"  * Amphora certificate authority certificate: Used to validate"},{"line_number":254,"context_line":"    amphora certificates and if Octavia acts as a Certificate Authority to"},{"line_number":255,"context_line":"    issue new amphora certificates"},{"line_number":256,"context_line":""},{"line_number":257,"context_line":"  * Client certificate: Used to authenticate with the amphora"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_136f97fc","line":254,"in_reply_to":"bff0334d_06263a16","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":258,"context_line":""},{"line_number":259,"context_line":"* Amphora:"},{"line_number":260,"context_line":""},{"line_number":261,"context_line":"  * Client certificate authority certificate: Used to validate control plane"},{"line_number":262,"context_line":"    client certificate"},{"line_number":263,"context_line":""},{"line_number":264,"context_line":"  * Amphora certificate: Presented to control plane processes to prove amphora"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_867feade","line":261,"updated":"2017-04-10 19:36:49.000000000","message":"These are super confusing, maybe just say \"CA Certificate\" or something (here and above), as people should know what that means, and it\u0027s weird to read certificate so many times in like 4 lines","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":258,"context_line":""},{"line_number":259,"context_line":"* Amphora:"},{"line_number":260,"context_line":""},{"line_number":261,"context_line":"  * Client certificate authority certificate: Used to validate control plane"},{"line_number":262,"context_line":"    client certificate"},{"line_number":263,"context_line":""},{"line_number":264,"context_line":"  * Amphora certificate: Presented to control plane processes to prove amphora"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_f360b303","line":261,"in_reply_to":"bff0334d_867feade","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":262,"context_line":"    client certificate"},{"line_number":263,"context_line":""},{"line_number":264,"context_line":"  * Amphora certificate: Presented to control plane processes to prove amphora"},{"line_number":265,"context_line":"    idendity."},{"line_number":266,"context_line":""},{"line_number":267,"context_line":"The heartbeat UDP packets emitted from the amphora are secured with a"},{"line_number":268,"context_line":"symmetric encryption key."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_066bda1d","line":265,"updated":"2017-04-10 19:36:49.000000000","message":"identity","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":262,"context_line":"    client certificate"},{"line_number":263,"context_line":""},{"line_number":264,"context_line":"  * Amphora certificate: Presented to control plane processes to prove amphora"},{"line_number":265,"context_line":"    idendity."},{"line_number":266,"context_line":""},{"line_number":267,"context_line":"The heartbeat UDP packets emitted from the amphora are secured with a"},{"line_number":268,"context_line":"symmetric encryption key."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_73326312","line":265,"in_reply_to":"bff0334d_066bda1d","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":265,"context_line":"    idendity."},{"line_number":266,"context_line":""},{"line_number":267,"context_line":"The heartbeat UDP packets emitted from the amphora are secured with a"},{"line_number":268,"context_line":"symmetric encryption key."},{"line_number":269,"context_line":""},{"line_number":270,"context_line":".. _rotate-amphora-certs:"},{"line_number":271,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_0602ba3d","line":268,"updated":"2017-04-10 19:36:49.000000000","message":"This seems a little random/terse. Maybe we should also say something like \"This is set by the configuration option `heartbeat_key` in the `health_manager` section. We recommend setting it to a random string of at least \u003cn\u003e characters.\"\n... What is our recommendation here, BTW? Is there a max size for this key? Does this matter at all?","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":265,"context_line":"    idendity."},{"line_number":266,"context_line":""},{"line_number":267,"context_line":"The heartbeat UDP packets emitted from the amphora are secured with a"},{"line_number":268,"context_line":"symmetric encryption key."},{"line_number":269,"context_line":""},{"line_number":270,"context_line":".. _rotate-amphora-certs:"},{"line_number":271,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_13167756","line":268,"in_reply_to":"bff0334d_0602ba3d","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":272,"context_line":"Rotating Amphora Certificates"},{"line_number":273,"context_line":"-----------------------------"},{"line_number":274,"context_line":""},{"line_number":275,"context_line":"For the server part Octavia will act either itself as a certificate authority"},{"line_number":276,"context_line":"or use :doc:`../main/anchor.rst` to issue amphora certificates to be used by"},{"line_number":277,"context_line":"each amphora. Octavia will also monitor those certificates and refresh them"},{"line_number":278,"context_line":"before they expire."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_669ce60d","line":275,"updated":"2017-04-10 19:36:49.000000000","message":"nit: \"will either act as a certificate authority itself, or use\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":272,"context_line":"Rotating Amphora Certificates"},{"line_number":273,"context_line":"-----------------------------"},{"line_number":274,"context_line":""},{"line_number":275,"context_line":"For the server part Octavia will act either itself as a certificate authority"},{"line_number":276,"context_line":"or use :doc:`../main/anchor.rst` to issue amphora certificates to be used by"},{"line_number":277,"context_line":"each amphora. Octavia will also monitor those certificates and refresh them"},{"line_number":278,"context_line":"before they expire."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_76001102","line":275,"in_reply_to":"bff0334d_669ce60d","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":283,"context_line":"  will then rotate the amphora certificates with newly issued ones. This"},{"line_number":284,"context_line":"  requires the following:"},{"line_number":285,"context_line":""},{"line_number":286,"context_line":"  * Client certificate authority certificate hasn\u0027t expired or the"},{"line_number":287,"context_line":"    corresponding client certificate on the control plane hasn\u0027t been issued by"},{"line_number":288,"context_line":"    a different client certificate authority (in case the authority was"},{"line_number":289,"context_line":"    compromised)"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_466fa2fb","line":286,"updated":"2017-04-10 19:36:49.000000000","message":"same as above, CA Certificate or ca_certificate or something might be less mind-bending, though maybe this is just me.","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":283,"context_line":"  will then rotate the amphora certificates with newly issued ones. This"},{"line_number":284,"context_line":"  requires the following:"},{"line_number":285,"context_line":""},{"line_number":286,"context_line":"  * Client certificate authority certificate hasn\u0027t expired or the"},{"line_number":287,"context_line":"    corresponding client certificate on the control plane hasn\u0027t been issued by"},{"line_number":288,"context_line":"    a different client certificate authority (in case the authority was"},{"line_number":289,"context_line":"    compromised)"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_f63c21c9","line":286,"in_reply_to":"bff0334d_466fa2fb","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":292,"context_line":"    change in any way which jeopardizes validation of the amphora certificate"},{"line_number":293,"context_line":"    (e.g. the certificate was reissued with a new private/public key)"},{"line_number":294,"context_line":""},{"line_number":295,"context_line":"* If the amphora certificate authority changed in a way which jeopardizes"},{"line_number":296,"context_line":"  validation of the amphora certificate an operator can manually upload newly"},{"line_number":297,"context_line":"  issued amphora certificates by switching off validation of the old amphora"},{"line_number":298,"context_line":"  certificate. This requires a client certificate which can be validated by the"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_86200aae","line":295,"updated":"2017-04-10 19:36:49.000000000","message":"This paragraph honestly hurts my head a little, just given the number of times we\u0027ve used the word \"certificate\", but maybe it is easier for other people to understand...","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":292,"context_line":"    change in any way which jeopardizes validation of the amphora certificate"},{"line_number":293,"context_line":"    (e.g. the certificate was reissued with a new private/public key)"},{"line_number":294,"context_line":""},{"line_number":295,"context_line":"* If the amphora certificate authority changed in a way which jeopardizes"},{"line_number":296,"context_line":"  validation of the amphora certificate an operator can manually upload newly"},{"line_number":297,"context_line":"  issued amphora certificates by switching off validation of the old amphora"},{"line_number":298,"context_line":"  certificate. This requires a client certificate which can be validated by the"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_d6391dd7","line":295,"in_reply_to":"bff0334d_86200aae","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":300,"context_line":"  :doc:`../haproxy-amphora-api.rst` for more details."},{"line_number":301,"context_line":""},{"line_number":302,"context_line":"* If the client certificate on the control plane changed in a way that it can\u0027t"},{"line_number":303,"context_line":"  be validated by the client certificate authority certificate on the amphora a"},{"line_number":304,"context_line":"  failover (see :ref:`_rotating_amphora`) of all amphora needs to be initiated."},{"line_number":305,"context_line":"  Until the failover is completed the amphora can\u0027t be controlled by the"},{"line_number":306,"context_line":"  control plane."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_a64d4e9b","line":303,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"amphora\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":300,"context_line":"  :doc:`../haproxy-amphora-api.rst` for more details."},{"line_number":301,"context_line":""},{"line_number":302,"context_line":"* If the client certificate on the control plane changed in a way that it can\u0027t"},{"line_number":303,"context_line":"  be validated by the client certificate authority certificate on the amphora a"},{"line_number":304,"context_line":"  failover (see :ref:`_rotating_amphora`) of all amphora needs to be initiated."},{"line_number":305,"context_line":"  Until the failover is completed the amphora can\u0027t be controlled by the"},{"line_number":306,"context_line":"  control plane."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_366de9cb","line":303,"in_reply_to":"bff0334d_a64d4e9b","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":301,"context_line":""},{"line_number":302,"context_line":"* If the client certificate on the control plane changed in a way that it can\u0027t"},{"line_number":303,"context_line":"  be validated by the client certificate authority certificate on the amphora a"},{"line_number":304,"context_line":"  failover (see :ref:`_rotating_amphora`) of all amphora needs to be initiated."},{"line_number":305,"context_line":"  Until the failover is completed the amphora can\u0027t be controlled by the"},{"line_number":306,"context_line":"  control plane."},{"line_number":307,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_4648c285","line":304,"updated":"2017-04-10 19:36:49.000000000","message":"nit: amphorae","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":301,"context_line":""},{"line_number":302,"context_line":"* If the client certificate on the control plane changed in a way that it can\u0027t"},{"line_number":303,"context_line":"  be validated by the client certificate authority certificate on the amphora a"},{"line_number":304,"context_line":"  failover (see :ref:`_rotating_amphora`) of all amphora needs to be initiated."},{"line_number":305,"context_line":"  Until the failover is completed the amphora can\u0027t be controlled by the"},{"line_number":306,"context_line":"  control plane."},{"line_number":307,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_769c91bf","line":304,"in_reply_to":"bff0334d_4648c285","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":302,"context_line":"* If the client certificate on the control plane changed in a way that it can\u0027t"},{"line_number":303,"context_line":"  be validated by the client certificate authority certificate on the amphora a"},{"line_number":304,"context_line":"  failover (see :ref:`_rotating_amphora`) of all amphora needs to be initiated."},{"line_number":305,"context_line":"  Until the failover is completed the amphora can\u0027t be controlled by the"},{"line_number":306,"context_line":"  control plane."},{"line_number":307,"context_line":""},{"line_number":308,"context_line":"Rotating the Certificate Authority certificates"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_c653b238","line":305,"updated":"2017-04-10 19:36:49.000000000","message":"nit: amphorae","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":302,"context_line":"* If the client certificate on the control plane changed in a way that it can\u0027t"},{"line_number":303,"context_line":"  be validated by the client certificate authority certificate on the amphora a"},{"line_number":304,"context_line":"  failover (see :ref:`_rotating_amphora`) of all amphora needs to be initiated."},{"line_number":305,"context_line":"  Until the failover is completed the amphora can\u0027t be controlled by the"},{"line_number":306,"context_line":"  control plane."},{"line_number":307,"context_line":""},{"line_number":308,"context_line":"Rotating the Certificate Authority certificates"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_36a289fd","line":305,"in_reply_to":"bff0334d_c653b238","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":314,"context_line":"cert needs to be changed in the system so amphora can be authenticated again."},{"line_number":315,"context_line":""},{"line_number":316,"context_line":"# Issue new certificates (see the script in the bin folder of octavia if"},{"line_number":317,"context_line":"Octavia) is acting as the certificate authority) or follow the instructions"},{"line_number":318,"context_line":"of the third-party certificate authority. Copy the certificate and the"},{"line_number":319,"context_line":"private key (if Octavia acts as a certificate authority) were Octavia can"},{"line_number":320,"context_line":"find them."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_260ffe37","line":317,"updated":"2017-04-10 19:36:49.000000000","message":"remove spurious closing parens after \"Octavia\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":314,"context_line":"cert needs to be changed in the system so amphora can be authenticated again."},{"line_number":315,"context_line":""},{"line_number":316,"context_line":"# Issue new certificates (see the script in the bin folder of octavia if"},{"line_number":317,"context_line":"Octavia) is acting as the certificate authority) or follow the instructions"},{"line_number":318,"context_line":"of the third-party certificate authority. Copy the certificate and the"},{"line_number":319,"context_line":"private key (if Octavia acts as a certificate authority) were Octavia can"},{"line_number":320,"context_line":"find them."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_f698a1c0","line":317,"in_reply_to":"bff0334d_260ffe37","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":316,"context_line":"# Issue new certificates (see the script in the bin folder of octavia if"},{"line_number":317,"context_line":"Octavia) is acting as the certificate authority) or follow the instructions"},{"line_number":318,"context_line":"of the third-party certificate authority. Copy the certificate and the"},{"line_number":319,"context_line":"private key (if Octavia acts as a certificate authority) were Octavia can"},{"line_number":320,"context_line":"find them."},{"line_number":321,"context_line":""},{"line_number":322,"context_line":"# If the previous certificate files haven\u0027t been overridden adjust the paths"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_81059413","line":319,"updated":"2017-04-10 19:36:49.000000000","message":"were-\u003ewhere","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":316,"context_line":"# Issue new certificates (see the script in the bin folder of octavia if"},{"line_number":317,"context_line":"Octavia) is acting as the certificate authority) or follow the instructions"},{"line_number":318,"context_line":"of the third-party certificate authority. Copy the certificate and the"},{"line_number":319,"context_line":"private key (if Octavia acts as a certificate authority) were Octavia can"},{"line_number":320,"context_line":"find them."},{"line_number":321,"context_line":""},{"line_number":322,"context_line":"# If the previous certificate files haven\u0027t been overridden adjust the paths"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_76ea510f","line":319,"in_reply_to":"bff0334d_81059413","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":319,"context_line":"private key (if Octavia acts as a certificate authority) were Octavia can"},{"line_number":320,"context_line":"find them."},{"line_number":321,"context_line":""},{"line_number":322,"context_line":"# If the previous certificate files haven\u0027t been overridden adjust the paths"},{"line_number":323,"context_line":"to the new certs in the configuration file and restart all Octavia services"},{"line_number":324,"context_line":"(except octavia-api)."},{"line_number":325,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_e119007a","line":322,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"overridden\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":319,"context_line":"private key (if Octavia acts as a certificate authority) were Octavia can"},{"line_number":320,"context_line":"find them."},{"line_number":321,"context_line":""},{"line_number":322,"context_line":"# If the previous certificate files haven\u0027t been overridden adjust the paths"},{"line_number":323,"context_line":"to the new certs in the configuration file and restart all Octavia services"},{"line_number":324,"context_line":"(except octavia-api)."},{"line_number":325,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_f6dd4170","line":322,"in_reply_to":"bff0334d_e119007a","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":336,"context_line":"if self signed certificates are used) or use the ones provided to you by"},{"line_number":337,"context_line":"your certificate authority."},{"line_number":338,"context_line":"# Copy the new cert where Octavia can find it."},{"line_number":339,"context_line":"# If the previous certificate files haven\u0027t been overridden adjust the paths"},{"line_number":340,"context_line":"to the new certs in the configuration file. In all cases restart all Octavia"},{"line_number":341,"context_line":"services except octavia-api."},{"line_number":342,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_213da8c3","line":339,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"overridden\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":336,"context_line":"if self signed certificates are used) or use the ones provided to you by"},{"line_number":337,"context_line":"your certificate authority."},{"line_number":338,"context_line":"# Copy the new cert where Octavia can find it."},{"line_number":339,"context_line":"# If the previous certificate files haven\u0027t been overridden adjust the paths"},{"line_number":340,"context_line":"to the new certs in the configuration file. In all cases restart all Octavia"},{"line_number":341,"context_line":"services except octavia-api."},{"line_number":342,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_b6e33934","line":339,"in_reply_to":"bff0334d_213da8c3","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":340,"context_line":"to the new certs in the configuration file. In all cases restart all Octavia"},{"line_number":341,"context_line":"services except octavia-api."},{"line_number":342,"context_line":""},{"line_number":343,"context_line":"If the client certificate authority cert has been replaced in addition to"},{"line_number":344,"context_line":"rotating the client certificate the new client certificate authority"},{"line_number":345,"context_line":"certificate needs to be installed in the system. After that initiate a"},{"line_number":346,"context_line":"failover of all amphora to distribute the new client certificate authority"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_6154d0fe","line":343,"updated":"2017-04-10 19:36:49.000000000","message":"We really should win a competition for who can say the word \"certificate\" the most times in a single paragraph.","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":340,"context_line":"to the new certs in the configuration file. In all cases restart all Octavia"},{"line_number":341,"context_line":"services except octavia-api."},{"line_number":342,"context_line":""},{"line_number":343,"context_line":"If the client certificate authority cert has been replaced in addition to"},{"line_number":344,"context_line":"rotating the client certificate the new client certificate authority"},{"line_number":345,"context_line":"certificate needs to be installed in the system. After that initiate a"},{"line_number":346,"context_line":"failover of all amphora to distribute the new client certificate authority"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_56d86d79","line":343,"in_reply_to":"bff0334d_6154d0fe","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":344,"context_line":"rotating the client certificate the new client certificate authority"},{"line_number":345,"context_line":"certificate needs to be installed in the system. After that initiate a"},{"line_number":346,"context_line":"failover of all amphora to distribute the new client certificate authority"},{"line_number":347,"context_line":"cert. Until the failover is completed the amphora can\u0027t be controled by the"},{"line_number":348,"context_line":"control plane."},{"line_number":349,"context_line":""},{"line_number":350,"context_line":"Changing The Heartbeat Encryption Key"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_4159cc32","line":347,"updated":"2017-04-10 19:36:49.000000000","message":"\"controlled\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":344,"context_line":"rotating the client certificate the new client certificate authority"},{"line_number":345,"context_line":"certificate needs to be installed in the system. After that initiate a"},{"line_number":346,"context_line":"failover of all amphora to distribute the new client certificate authority"},{"line_number":347,"context_line":"cert. Until the failover is completed the amphora can\u0027t be controled by the"},{"line_number":348,"context_line":"control plane."},{"line_number":349,"context_line":""},{"line_number":350,"context_line":"Changing The Heartbeat Encryption Key"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_363e098b","line":347,"in_reply_to":"bff0334d_4159cc32","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":354,"context_line":"Once this is changed Octavia can\u0027t read any heartbeats and will assume"},{"line_number":355,"context_line":"all amphora are in an error state and initiate an immediate failover."},{"line_number":356,"context_line":""},{"line_number":357,"context_line":"In preparation read the chapter on \"Best practices/optimizations\" in"},{"line_number":358,"context_line":"the Failover section. In particular it is advisable if the throttling"},{"line_number":359,"context_line":"enhancement (available in Pike) doesn\u0027t exist to create a sufficient"},{"line_number":360,"context_line":"number of spare amphora to mitigate the stress on the OpenStack installation"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_216b68b7","line":357,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"preparation\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":354,"context_line":"Once this is changed Octavia can\u0027t read any heartbeats and will assume"},{"line_number":355,"context_line":"all amphora are in an error state and initiate an immediate failover."},{"line_number":356,"context_line":""},{"line_number":357,"context_line":"In preparation read the chapter on \"Best practices/optimizations\" in"},{"line_number":358,"context_line":"the Failover section. In particular it is advisable if the throttling"},{"line_number":359,"context_line":"enhancement (available in Pike) doesn\u0027t exist to create a sufficient"},{"line_number":360,"context_line":"number of spare amphora to mitigate the stress on the OpenStack installation"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_b6bc5906","line":357,"in_reply_to":"bff0334d_216b68b7","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":355,"context_line":"all amphora are in an error state and initiate an immediate failover."},{"line_number":356,"context_line":""},{"line_number":357,"context_line":"In preparation read the chapter on \"Best practices/optimizations\" in"},{"line_number":358,"context_line":"the Failover section. In particular it is advisable if the throttling"},{"line_number":359,"context_line":"enhancement (available in Pike) doesn\u0027t exist to create a sufficient"},{"line_number":360,"context_line":"number of spare amphora to mitigate the stress on the OpenStack installation"},{"line_number":361,"context_line":"when Octavia starts to replace all amphora immediately."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_016864b6","line":358,"updated":"2017-04-10 19:36:49.000000000","message":"nit: comma after \"particular\"","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":355,"context_line":"all amphora are in an error state and initiate an immediate failover."},{"line_number":356,"context_line":""},{"line_number":357,"context_line":"In preparation read the chapter on \"Best practices/optimizations\" in"},{"line_number":358,"context_line":"the Failover section. In particular it is advisable if the throttling"},{"line_number":359,"context_line":"enhancement (available in Pike) doesn\u0027t exist to create a sufficient"},{"line_number":360,"context_line":"number of spare amphora to mitigate the stress on the OpenStack installation"},{"line_number":361,"context_line":"when Octavia starts to replace all amphora immediately."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_96b95516","line":358,"in_reply_to":"bff0334d_016864b6","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":357,"context_line":"In preparation read the chapter on \"Best practices/optimizations\" in"},{"line_number":358,"context_line":"the Failover section. In particular it is advisable if the throttling"},{"line_number":359,"context_line":"enhancement (available in Pike) doesn\u0027t exist to create a sufficient"},{"line_number":360,"context_line":"number of spare amphora to mitigate the stress on the OpenStack installation"},{"line_number":361,"context_line":"when Octavia starts to replace all amphora immediately."},{"line_number":362,"context_line":""},{"line_number":363,"context_line":"Given the risks involved with changing this key it should not be changed"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_817c7483","line":360,"updated":"2017-04-10 19:36:49.000000000","message":"nit: amphorae","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":357,"context_line":"In preparation read the chapter on \"Best practices/optimizations\" in"},{"line_number":358,"context_line":"the Failover section. In particular it is advisable if the throttling"},{"line_number":359,"context_line":"enhancement (available in Pike) doesn\u0027t exist to create a sufficient"},{"line_number":360,"context_line":"number of spare amphora to mitigate the stress on the OpenStack installation"},{"line_number":361,"context_line":"when Octavia starts to replace all amphora immediately."},{"line_number":362,"context_line":""},{"line_number":363,"context_line":"Given the risks involved with changing this key it should not be changed"}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_766131a9","line":360,"in_reply_to":"bff0334d_817c7483","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"73a8b6e7e7ef7f9ba56ebfead959fccdcf7304e8","unresolved":false,"context_lines":[{"line_number":367,"context_line":"   For future versions of Octavia an \"update amphora\" API is planned which"},{"line_number":368,"context_line":"   will allow this key to be changed without failover. At that time there would"},{"line_number":369,"context_line":"   be a procedure to halt health monitoring while the keys are rotated and then"},{"line_number":370,"context_line":"   resume health processing."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_01ad04e8","line":370,"updated":"2017-04-10 19:36:49.000000000","message":"nit: resume processing health messages\n\nor, probably just \"resume health monitoring\".","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"a1d5bacc813cf463b43c5e7a32e1cece5c81c409","unresolved":false,"context_lines":[{"line_number":367,"context_line":"   For future versions of Octavia an \"update amphora\" API is planned which"},{"line_number":368,"context_line":"   will allow this key to be changed without failover. At that time there would"},{"line_number":369,"context_line":"   be a procedure to halt health monitoring while the keys are rotated and then"},{"line_number":370,"context_line":"   resume health processing."}],"source_content_type":"text/x-rst","patch_set":6,"id":"bff0334d_365729cd","line":370,"in_reply_to":"bff0334d_01ad04e8","updated":"2017-04-10 20:42:20.000000000","message":"Done","commit_id":"01cd53d2d47d4bee035d9167aa971ce07066b300"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":65,"context_line":"To monitor the Octavia control plane we recommend process monitoring of the"},{"line_number":66,"context_line":"main Octavia processes:"},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"* Octavia-api"},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"* Octavia-worker"},{"line_number":71,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_67d29602","line":68,"updated":"2017-04-11 06:17:00.000000000","message":"OK, I know I said consistent capitalization, but process names should be lowercase :P","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":65,"context_line":"To monitor the Octavia control plane we recommend process monitoring of the"},{"line_number":66,"context_line":"main Octavia processes:"},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"* Octavia-api"},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"* Octavia-worker"},{"line_number":71,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_94012e6d","line":68,"in_reply_to":"bff0334d_67d29602","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":74,"context_line":"* Octavia-housekeeping"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"The Monasca project has a plugin for such monitoring (see"},{"line_number":77,"context_line":"https://github.com/openstack/monasca-agent/blob/master/monasca_setup/detection/plugins/Octavia.py)."},{"line_number":78,"context_line":"Please refer to this project for further information."},{"line_number":79,"context_line":""},{"line_number":80,"context_line":"Octavia\u0027s control plane components are shared nothing and can be scaled"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_81a10a49","line":77,"range":{"start_line":77,"start_character":0,"end_line":77,"end_character":99},"updated":"2017-04-11 06:31:40.000000000","message":"Can we make this a nicer link?\n\n:doc:`Monasca Octavia plugin\u003chttps://github.com/openstack/monasca-agent/blob/master/monasca_setup/detection/plugins/Octavia.py\u003e`","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":74,"context_line":"* Octavia-housekeeping"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"The Monasca project has a plugin for such monitoring (see"},{"line_number":77,"context_line":"https://github.com/openstack/monasca-agent/blob/master/monasca_setup/detection/plugins/Octavia.py)."},{"line_number":78,"context_line":"Please refer to this project for further information."},{"line_number":79,"context_line":""},{"line_number":80,"context_line":"Octavia\u0027s control plane components are shared nothing and can be scaled"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_744102a9","line":77,"range":{"start_line":77,"start_character":0,"end_line":77,"end_character":99},"in_reply_to":"bff0334d_81a10a49","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":80,"context_line":"Octavia\u0027s control plane components are shared nothing and can be scaled"},{"line_number":81,"context_line":"lineary. For high availability of the control plane we recommend to run at"},{"line_number":82,"context_line":"least one set of components in each availability zone. Furthermore, the"},{"line_number":83,"context_line":"Octavia-api endpoint could be behind a load balancer or other HA technology."},{"line_number":84,"context_line":"That said, if one or more components fail the system will still be available"},{"line_number":85,"context_line":"(though potentially degraded). For instance if you have installed one set of"},{"line_number":86,"context_line":"components in three availability zones even if you loose a whole zone"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_27d80e1c","line":83,"updated":"2017-04-11 06:17:00.000000000","message":"I think this is a process name technically, so lowercase","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":80,"context_line":"Octavia\u0027s control plane components are shared nothing and can be scaled"},{"line_number":81,"context_line":"lineary. For high availability of the control plane we recommend to run at"},{"line_number":82,"context_line":"least one set of components in each availability zone. Furthermore, the"},{"line_number":83,"context_line":"Octavia-api endpoint could be behind a load balancer or other HA technology."},{"line_number":84,"context_line":"That said, if one or more components fail the system will still be available"},{"line_number":85,"context_line":"(though potentially degraded). For instance if you have installed one set of"},{"line_number":86,"context_line":"components in three availability zones even if you loose a whole zone"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_d419f6d6","line":83,"in_reply_to":"bff0334d_27d80e1c","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":83,"context_line":"Octavia-api endpoint could be behind a load balancer or other HA technology."},{"line_number":84,"context_line":"That said, if one or more components fail the system will still be available"},{"line_number":85,"context_line":"(though potentially degraded). For instance if you have installed one set of"},{"line_number":86,"context_line":"components in three availability zones even if you loose a whole zone"},{"line_number":87,"context_line":"Octavia will still be responsive and available - only if you lose the"},{"line_number":88,"context_line":"Octavia control plane in all three zones will the service be unavailable."},{"line_number":89,"context_line":"Please note this only addresses control plane availability; the availability"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_c70cc2a6","line":86,"updated":"2017-04-11 06:17:00.000000000","message":"You didn\u0027t fix \"loose\"-\u003e\"lose\"","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":83,"context_line":"Octavia-api endpoint could be behind a load balancer or other HA technology."},{"line_number":84,"context_line":"That said, if one or more components fail the system will still be available"},{"line_number":85,"context_line":"(though potentially degraded). For instance if you have installed one set of"},{"line_number":86,"context_line":"components in three availability zones even if you loose a whole zone"},{"line_number":87,"context_line":"Octavia will still be responsive and available - only if you lose the"},{"line_number":88,"context_line":"Octavia control plane in all three zones will the service be unavailable."},{"line_number":89,"context_line":"Please note this only addresses control plane availability; the availability"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_940fee86","line":86,"in_reply_to":"bff0334d_c70cc2a6","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":133,"context_line":"Preparing a New Amphora Image"},{"line_number":134,"context_line":"-----------------------------"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"To prepare a new amphora image you will needs to use diskimage-create.sh as"},{"line_number":137,"context_line":"described in the README in the diskimage-create directory."},{"line_number":138,"context_line":""},{"line_number":139,"context_line":"For instance, in the ``Octavia/diskimage-create`` directory, run:"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_672976e4","line":136,"updated":"2017-04-11 06:17:00.000000000","message":"You added an \"s\" to \"need\", it should be just \"need\".","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":133,"context_line":"Preparing a New Amphora Image"},{"line_number":134,"context_line":"-----------------------------"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"To prepare a new amphora image you will needs to use diskimage-create.sh as"},{"line_number":137,"context_line":"described in the README in the diskimage-create directory."},{"line_number":138,"context_line":""},{"line_number":139,"context_line":"For instance, in the ``Octavia/diskimage-create`` directory, run:"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_5425e607","line":136,"in_reply_to":"bff0334d_672976e4","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":136,"context_line":"To prepare a new amphora image you will needs to use diskimage-create.sh as"},{"line_number":137,"context_line":"described in the README in the diskimage-create directory."},{"line_number":138,"context_line":""},{"line_number":139,"context_line":"For instance, in the ``Octavia/diskimage-create`` directory, run:"},{"line_number":140,"context_line":""},{"line_number":141,"context_line":"   .. code-block:: bash"},{"line_number":142,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_071ceabe","line":139,"updated":"2017-04-11 06:17:00.000000000","message":"This is a path, so octavia is still lowercase","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":136,"context_line":"To prepare a new amphora image you will needs to use diskimage-create.sh as"},{"line_number":137,"context_line":"described in the README in the diskimage-create directory."},{"line_number":138,"context_line":""},{"line_number":139,"context_line":"For instance, in the ``Octavia/diskimage-create`` directory, run:"},{"line_number":140,"context_line":""},{"line_number":141,"context_line":"   .. code-block:: bash"},{"line_number":142,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_141bdec9","line":139,"in_reply_to":"bff0334d_071ceabe","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":151,"context_line":""},{"line_number":152,"context_line":"      openstack image create --file amphora-x64-haproxy.qcow2 \\"},{"line_number":153,"context_line":"      --disk-format qcow2 --tag \u003camphora-image-tag\u003e --private \\"},{"line_number":154,"context_line":"      --container-format bare \u003c/var/lib/Octavia/amphora-x64-haproxy.qcow2"},{"line_number":155,"context_line":""},{"line_number":156,"context_line":"If you didn\u0027t configure image tags and instead configured an image id, you"},{"line_number":157,"context_line":"will need to update the Octavia configuration file with the new id and restart"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_27748efd","line":154,"updated":"2017-04-11 06:17:00.000000000","message":"This \"octavia\" is also a path, so lowercase","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":151,"context_line":""},{"line_number":152,"context_line":"      openstack image create --file amphora-x64-haproxy.qcow2 \\"},{"line_number":153,"context_line":"      --disk-format qcow2 --tag \u003camphora-image-tag\u003e --private \\"},{"line_number":154,"context_line":"      --container-format bare \u003c/var/lib/Octavia/amphora-x64-haproxy.qcow2"},{"line_number":155,"context_line":""},{"line_number":156,"context_line":"If you didn\u0027t configure image tags and instead configured an image id, you"},{"line_number":157,"context_line":"will need to update the Octavia configuration file with the new id and restart"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_04d508e5","line":154,"range":{"start_line":154,"start_character":30,"end_line":154,"end_character":31},"updated":"2017-04-11 06:31:40.000000000","message":"extra \u0027\u003c\u0027","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":151,"context_line":""},{"line_number":152,"context_line":"      openstack image create --file amphora-x64-haproxy.qcow2 \\"},{"line_number":153,"context_line":"      --disk-format qcow2 --tag \u003camphora-image-tag\u003e --private \\"},{"line_number":154,"context_line":"      --container-format bare \u003c/var/lib/Octavia/amphora-x64-haproxy.qcow2"},{"line_number":155,"context_line":""},{"line_number":156,"context_line":"If you didn\u0027t configure image tags and instead configured an image id, you"},{"line_number":157,"context_line":"will need to update the Octavia configuration file with the new id and restart"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_746fc22a","line":154,"range":{"start_line":154,"start_character":30,"end_line":154,"end_character":31},"in_reply_to":"bff0334d_04d508e5","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":155,"context_line":""},{"line_number":156,"context_line":"If you didn\u0027t configure image tags and instead configured an image id, you"},{"line_number":157,"context_line":"will need to update the Octavia configuration file with the new id and restart"},{"line_number":158,"context_line":"the Octavia services (except Octavia-api)."},{"line_number":159,"context_line":""},{"line_number":160,"context_line":"Generating a List of Amphorae to Rotate"},{"line_number":161,"context_line":"---------------------------------------"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_07718a0c","line":158,"updated":"2017-04-11 06:17:00.000000000","message":"octavia-api is a process name, lowercase","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":155,"context_line":""},{"line_number":156,"context_line":"If you didn\u0027t configure image tags and instead configured an image id, you"},{"line_number":157,"context_line":"will need to update the Octavia configuration file with the new id and restart"},{"line_number":158,"context_line":"the Octavia services (except Octavia-api)."},{"line_number":159,"context_line":""},{"line_number":160,"context_line":"Generating a List of Amphorae to Rotate"},{"line_number":161,"context_line":"---------------------------------------"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_546a8619","line":158,"in_reply_to":"bff0334d_07718a0c","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":160,"context_line":"Generating a List of Amphorae to Rotate"},{"line_number":161,"context_line":"---------------------------------------"},{"line_number":162,"context_line":""},{"line_number":163,"context_line":"The easiest way to generate a list is to use nova to list all the amphorae vm:"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":" .. code-block:: bash"},{"line_number":166,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_c768421e","line":163,"updated":"2017-04-11 06:17:00.000000000","message":"I meant to cut \"vm\" because the whole point of \"amphora\" was to not say \"vm\" or \"container\". :P","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":160,"context_line":"Generating a List of Amphorae to Rotate"},{"line_number":161,"context_line":"---------------------------------------"},{"line_number":162,"context_line":""},{"line_number":163,"context_line":"The easiest way to generate a list is to use nova to list all the amphorae vm:"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":" .. code-block:: bash"},{"line_number":166,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_d467b64c","line":163,"in_reply_to":"bff0334d_c768421e","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":166,"context_line":""},{"line_number":167,"context_line":"        openstack server list --name amphora* --all -c ID -c Status -c Networks"},{"line_number":168,"context_line":""},{"line_number":169,"context_line":"Take note of the amphorae ids and ips on the management network."},{"line_number":170,"context_line":""},{"line_number":171,"context_line":"If you are using an ACTIVE-STANDBY topology it might be beneficial to rotate"},{"line_number":172,"context_line":"first the STANDBY amphora before the active one. In this case you will need"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_a432dc5c","line":169,"range":{"start_line":169,"start_character":26,"end_line":169,"end_character":29},"updated":"2017-04-11 06:31:40.000000000","message":"IDs","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":166,"context_line":""},{"line_number":167,"context_line":"        openstack server list --name amphora* --all -c ID -c Status -c Networks"},{"line_number":168,"context_line":""},{"line_number":169,"context_line":"Take note of the amphorae ids and ips on the management network."},{"line_number":170,"context_line":""},{"line_number":171,"context_line":"If you are using an ACTIVE-STANDBY topology it might be beneficial to rotate"},{"line_number":172,"context_line":"first the STANDBY amphora before the active one. In this case you will need"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_8402386e","line":169,"range":{"start_line":169,"start_character":34,"end_line":169,"end_character":37},"updated":"2017-04-11 06:31:40.000000000","message":"IPs","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":166,"context_line":""},{"line_number":167,"context_line":"        openstack server list --name amphora* --all -c ID -c Status -c Networks"},{"line_number":168,"context_line":""},{"line_number":169,"context_line":"Take note of the amphorae ids and ips on the management network."},{"line_number":170,"context_line":""},{"line_number":171,"context_line":"If you are using an ACTIVE-STANDBY topology it might be beneficial to rotate"},{"line_number":172,"context_line":"first the STANDBY amphora before the active one. In this case you will need"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_b45aea7f","line":169,"range":{"start_line":169,"start_character":26,"end_line":169,"end_character":29},"in_reply_to":"bff0334d_a432dc5c","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":169,"context_line":"Take note of the amphorae ids and ips on the management network."},{"line_number":170,"context_line":""},{"line_number":171,"context_line":"If you are using an ACTIVE-STANDBY topology it might be beneficial to rotate"},{"line_number":172,"context_line":"first the STANDBY amphora before the active one. In this case you will need"},{"line_number":173,"context_line":"to use the Octavia database to query for that:"},{"line_number":174,"context_line":""},{"line_number":175,"context_line":"    .. code-block:: bash"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_074aaaaa","line":172,"updated":"2017-04-11 06:17:00.000000000","message":"I know I said passive-\u003estandby, but I\u0027m looking at below and I wonder if this should be BACKUP? What do you guys think? Also should ACTIVE be similarly capitalized?","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":169,"context_line":"Take note of the amphorae ids and ips on the management network."},{"line_number":170,"context_line":""},{"line_number":171,"context_line":"If you are using an ACTIVE-STANDBY topology it might be beneficial to rotate"},{"line_number":172,"context_line":"first the STANDBY amphora before the active one. In this case you will need"},{"line_number":173,"context_line":"to use the Octavia database to query for that:"},{"line_number":174,"context_line":""},{"line_number":175,"context_line":"    .. code-block:: bash"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_344edac0","line":172,"in_reply_to":"bff0334d_074aaaaa","updated":"2017-04-21 17:19:59.000000000","message":"will do BACKUP","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":174,"context_line":""},{"line_number":175,"context_line":"    .. code-block:: bash"},{"line_number":176,"context_line":""},{"line_number":177,"context_line":"        mysql Octavia -e \u0027select id, compute_id, lb_network_ip, role from amphora where status\u003d\"ALLOCATED\" or status\u003d\"READY\";\u0027"},{"line_number":178,"context_line":""},{"line_number":179,"context_line":"Take note of the compute ids, the role (ACTIVE, BACKUP), and the ip on the"},{"line_number":180,"context_line":"management network. You can also find this ip either via"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_a759be8e","line":177,"updated":"2017-04-11 06:17:00.000000000","message":"DB name is lowercase","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":174,"context_line":""},{"line_number":175,"context_line":"    .. code-block:: bash"},{"line_number":176,"context_line":""},{"line_number":177,"context_line":"        mysql Octavia -e \u0027select id, compute_id, lb_network_ip, role from amphora where status\u003d\"ALLOCATED\" or status\u003d\"READY\";\u0027"},{"line_number":178,"context_line":""},{"line_number":179,"context_line":"Take note of the compute ids, the role (ACTIVE, BACKUP), and the ip on the"},{"line_number":180,"context_line":"management network. You can also find this ip either via"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_14499eb5","line":177,"in_reply_to":"bff0334d_a759be8e","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":177,"context_line":"        mysql Octavia -e \u0027select id, compute_id, lb_network_ip, role from amphora where status\u003d\"ALLOCATED\" or status\u003d\"READY\";\u0027"},{"line_number":178,"context_line":""},{"line_number":179,"context_line":"Take note of the compute ids, the role (ACTIVE, BACKUP), and the ip on the"},{"line_number":180,"context_line":"management network. You can also find this ip either via"},{"line_number":181,"context_line":"``openstack server show \u003cid\u003e`` or"},{"line_number":182,"context_line":"``openstack server list --all -c ID -c Status -c Networks | grep \u003cid\u003e``."},{"line_number":183,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_e415849d","line":180,"range":{"start_line":180,"start_character":43,"end_line":180,"end_character":45},"updated":"2017-04-11 06:31:40.000000000","message":"IP","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":177,"context_line":"        mysql Octavia -e \u0027select id, compute_id, lb_network_ip, role from amphora where status\u003d\"ALLOCATED\" or status\u003d\"READY\";\u0027"},{"line_number":178,"context_line":""},{"line_number":179,"context_line":"Take note of the compute ids, the role (ACTIVE, BACKUP), and the ip on the"},{"line_number":180,"context_line":"management network. You can also find this ip either via"},{"line_number":181,"context_line":"``openstack server show \u003cid\u003e`` or"},{"line_number":182,"context_line":"``openstack server list --all -c ID -c Status -c Networks | grep \u003cid\u003e``."},{"line_number":183,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_f4c99225","line":180,"range":{"start_line":180,"start_character":43,"end_line":180,"end_character":45},"in_reply_to":"bff0334d_e415849d","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":210,"context_line":"accomodate the rapid failover of the amphora. In this case after the"},{"line_number":211,"context_line":"new image has been loaded into glance, shut down or initiate a failover of the"},{"line_number":212,"context_line":"amphora in the spare pool. They can be found, for instance, by looking for the"},{"line_number":213,"context_line":"seevers in ``openstack server list --all`` who only have an ip on the mangement"},{"line_number":214,"context_line":"network assigned but not any tenant network. Alternatively, use this"},{"line_number":215,"context_line":"database query:"},{"line_number":216,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_e7c8e622","line":213,"updated":"2017-04-11 06:17:00.000000000","message":"\"servers\"","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":210,"context_line":"accomodate the rapid failover of the amphora. In this case after the"},{"line_number":211,"context_line":"new image has been loaded into glance, shut down or initiate a failover of the"},{"line_number":212,"context_line":"amphora in the spare pool. They can be found, for instance, by looking for the"},{"line_number":213,"context_line":"seevers in ``openstack server list --all`` who only have an ip on the mangement"},{"line_number":214,"context_line":"network assigned but not any tenant network. Alternatively, use this"},{"line_number":215,"context_line":"database query:"},{"line_number":216,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_b4cf8a27","line":213,"in_reply_to":"bff0334d_e7c8e622","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":217,"context_line":""},{"line_number":218,"context_line":"    .. code-block:: bash"},{"line_number":219,"context_line":""},{"line_number":220,"context_line":"        mysql Octavia -e \u0027select id, compute_id, lb_network_ip from amphora where status\u003d\"READY\";\u0027"},{"line_number":221,"context_line":""},{"line_number":222,"context_line":""},{"line_number":223,"context_line":"After you have increased the spare pool size and restarted all Octavia"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_e4f1046d","line":220,"range":{"start_line":220,"start_character":14,"end_line":220,"end_character":21},"updated":"2017-04-11 06:31:40.000000000","message":"mysql is case sensitive, \"octavia\"","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":217,"context_line":""},{"line_number":218,"context_line":"    .. code-block:: bash"},{"line_number":219,"context_line":""},{"line_number":220,"context_line":"        mysql Octavia -e \u0027select id, compute_id, lb_network_ip from amphora where status\u003d\"READY\";\u0027"},{"line_number":221,"context_line":""},{"line_number":222,"context_line":""},{"line_number":223,"context_line":"After you have increased the spare pool size and restarted all Octavia"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_07df4ad6","line":220,"updated":"2017-04-11 06:17:00.000000000","message":"octavia is the db name, lowercase","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":217,"context_line":""},{"line_number":218,"context_line":"    .. code-block:: bash"},{"line_number":219,"context_line":""},{"line_number":220,"context_line":"        mysql Octavia -e \u0027select id, compute_id, lb_network_ip from amphora where status\u003d\"READY\";\u0027"},{"line_number":221,"context_line":""},{"line_number":222,"context_line":""},{"line_number":223,"context_line":"After you have increased the spare pool size and restarted all Octavia"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_94d24ed0","line":220,"range":{"start_line":220,"start_character":14,"end_line":220,"end_character":21},"in_reply_to":"bff0334d_e4f1046d","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":230,"context_line":".. warning::"},{"line_number":231,"context_line":"    If you are using the anti-affinity feature please be aware that it is"},{"line_number":232,"context_line":"    not compatible with spare pools and you are risking both the ACTIVE and"},{"line_number":233,"context_line":"    STANDBY amphora, being scheduled omn the same host. It is recommended to"},{"line_number":234,"context_line":"    not increase the spare pool during fail overs in this case (and not to use"},{"line_number":235,"context_line":"    the spare pool at all)."},{"line_number":236,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_a79c1e0e","line":233,"updated":"2017-04-11 06:17:00.000000000","message":"don\u0027t need that comma, and typo\u0027d \"on the same\"","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":230,"context_line":".. warning::"},{"line_number":231,"context_line":"    If you are using the anti-affinity feature please be aware that it is"},{"line_number":232,"context_line":"    not compatible with spare pools and you are risking both the ACTIVE and"},{"line_number":233,"context_line":"    STANDBY amphora, being scheduled omn the same host. It is recommended to"},{"line_number":234,"context_line":"    not increase the spare pool during fail overs in this case (and not to use"},{"line_number":235,"context_line":"    the spare pool at all)."},{"line_number":236,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_e12c5603","line":233,"range":{"start_line":233,"start_character":37,"end_line":233,"end_character":40},"updated":"2017-04-11 06:31:40.000000000","message":"on","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":230,"context_line":".. warning::"},{"line_number":231,"context_line":"    If you are using the anti-affinity feature please be aware that it is"},{"line_number":232,"context_line":"    not compatible with spare pools and you are risking both the ACTIVE and"},{"line_number":233,"context_line":"    STANDBY amphora, being scheduled omn the same host. It is recommended to"},{"line_number":234,"context_line":"    not increase the spare pool during fail overs in this case (and not to use"},{"line_number":235,"context_line":"    the spare pool at all)."},{"line_number":236,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_54d846ed","line":233,"in_reply_to":"bff0334d_a79c1e0e","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":230,"context_line":".. warning::"},{"line_number":231,"context_line":"    If you are using the anti-affinity feature please be aware that it is"},{"line_number":232,"context_line":"    not compatible with spare pools and you are risking both the ACTIVE and"},{"line_number":233,"context_line":"    STANDBY amphora, being scheduled omn the same host. It is recommended to"},{"line_number":234,"context_line":"    not increase the spare pool during fail overs in this case (and not to use"},{"line_number":235,"context_line":"    the spare pool at all)."},{"line_number":236,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_34e37aa6","line":233,"range":{"start_line":233,"start_character":37,"end_line":233,"end_character":40},"in_reply_to":"bff0334d_e12c5603","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":257,"context_line":""},{"line_number":258,"context_line":"* Control plane:"},{"line_number":259,"context_line":""},{"line_number":260,"context_line":"  * Amphora certificate authority (CA) certificate: Used to validate"},{"line_number":261,"context_line":"    amphora certificates if Octavia acts as a Certificate Authority to"},{"line_number":262,"context_line":"    issue new amphora certificates"},{"line_number":263,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_07a62a54","line":260,"updated":"2017-04-11 06:17:00.000000000","message":"I meant *instead of* spelling it out, as I think everyone should know what a CA Certificate is, and was trying to lower the cognitive load of parsing the word \"certificate\" to mean two things within three words.\nBut, maybe you are using just this one to define CA for later?","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":257,"context_line":""},{"line_number":258,"context_line":"* Control plane:"},{"line_number":259,"context_line":""},{"line_number":260,"context_line":"  * Amphora certificate authority (CA) certificate: Used to validate"},{"line_number":261,"context_line":"    amphora certificates if Octavia acts as a Certificate Authority to"},{"line_number":262,"context_line":"    issue new amphora certificates"},{"line_number":263,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_f4f2b26f","line":260,"in_reply_to":"bff0334d_07a62a54","updated":"2017-04-21 17:19:59.000000000","message":"yep, I use that to define it for the rest of the document","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":274,"context_line":"The heartbeat UDP packets emitted from the amphora are secured with a"},{"line_number":275,"context_line":"symmetric encryption key. This is set by the configuration option"},{"line_number":276,"context_line":"`heartbeat_key` in the `health_manager` section. We recommend setting it to a"},{"line_number":277,"context_line":"random string of a sufficient length."},{"line_number":278,"context_line":""},{"line_number":279,"context_line":".. _rotate-amphora-certs:"},{"line_number":280,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_477552ca","line":277,"updated":"2017-04-11 06:17:00.000000000","message":"\"sufficient length\" is super vague, lol\nI guess we don\u0027t have a recommendation?","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":274,"context_line":"The heartbeat UDP packets emitted from the amphora are secured with a"},{"line_number":275,"context_line":"symmetric encryption key. This is set by the configuration option"},{"line_number":276,"context_line":"`heartbeat_key` in the `health_manager` section. We recommend setting it to a"},{"line_number":277,"context_line":"random string of a sufficient length."},{"line_number":278,"context_line":""},{"line_number":279,"context_line":".. _rotate-amphora-certs:"},{"line_number":280,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_34fc9a3c","line":277,"in_reply_to":"bff0334d_477552ca","updated":"2017-04-21 17:19:59.000000000","message":"Nope + everybody\u0027s security requirements are different.","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":282,"context_line":"-----------------------------"},{"line_number":283,"context_line":""},{"line_number":284,"context_line":"For the server part Octavia will act either itself as a certificate authority"},{"line_number":285,"context_line":"itself, or use :doc:`../main/anchor` to issue amphora certificates to be used"},{"line_number":286,"context_line":"by each amphora. Octavia will also monitor those certificates and refresh them"},{"line_number":287,"context_line":"before they expire."},{"line_number":288,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_078d0ad2","line":285,"range":{"start_line":285,"start_character":0,"end_line":285,"end_character":6},"updated":"2017-04-11 06:31:40.000000000","message":"Delete this \"itself\"","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":282,"context_line":"-----------------------------"},{"line_number":283,"context_line":""},{"line_number":284,"context_line":"For the server part Octavia will act either itself as a certificate authority"},{"line_number":285,"context_line":"itself, or use :doc:`../main/anchor` to issue amphora certificates to be used"},{"line_number":286,"context_line":"by each amphora. Octavia will also monitor those certificates and refresh them"},{"line_number":287,"context_line":"before they expire."},{"line_number":288,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_876fdafa","line":285,"range":{"start_line":285,"start_character":15,"end_line":285,"end_character":36},"updated":"2017-04-11 06:31:40.000000000","message":"Maybe \"Anchor\"?  This link isn\u0027t working.","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"a033d9f3f6d7b7d25ea5b57ad83dc95adfc15e81","unresolved":false,"context_lines":[{"line_number":282,"context_line":"-----------------------------"},{"line_number":283,"context_line":""},{"line_number":284,"context_line":"For the server part Octavia will act either itself as a certificate authority"},{"line_number":285,"context_line":"itself, or use :doc:`../main/anchor` to issue amphora certificates to be used"},{"line_number":286,"context_line":"by each amphora. Octavia will also monitor those certificates and refresh them"},{"line_number":287,"context_line":"before they expire."},{"line_number":288,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_d22fde3c","line":285,"range":{"start_line":285,"start_character":0,"end_line":285,"end_character":6},"in_reply_to":"bff0334d_078d0ad2","updated":"2017-04-11 06:34:38.000000000","message":"I think I prefer \"will either act as a certificate authority itself, or use\"","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":282,"context_line":"-----------------------------"},{"line_number":283,"context_line":""},{"line_number":284,"context_line":"For the server part Octavia will act either itself as a certificate authority"},{"line_number":285,"context_line":"itself, or use :doc:`../main/anchor` to issue amphora certificates to be used"},{"line_number":286,"context_line":"by each amphora. Octavia will also monitor those certificates and refresh them"},{"line_number":287,"context_line":"before they expire."},{"line_number":288,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_b49d4a0b","line":285,"range":{"start_line":285,"start_character":15,"end_line":285,"end_character":36},"in_reply_to":"bff0334d_876fdafa","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":282,"context_line":"-----------------------------"},{"line_number":283,"context_line":""},{"line_number":284,"context_line":"For the server part Octavia will act either itself as a certificate authority"},{"line_number":285,"context_line":"itself, or use :doc:`../main/anchor` to issue amphora certificates to be used"},{"line_number":286,"context_line":"by each amphora. Octavia will also monitor those certificates and refresh them"},{"line_number":287,"context_line":"before they expire."},{"line_number":288,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_748b42c2","line":285,"range":{"start_line":285,"start_character":0,"end_line":285,"end_character":6},"in_reply_to":"bff0334d_d22fde3c","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":306,"context_line":"  issued amphora certificates by switching off validation of the old amphora"},{"line_number":307,"context_line":"  certificate. This requires a client certificate which can be validated by the"},{"line_number":308,"context_line":"  client CA file on the amphora. Refer to"},{"line_number":309,"context_line":"  :doc:`../haproxy-amphora-api` for more details."},{"line_number":310,"context_line":""},{"line_number":311,"context_line":"* If the client certificate on the control plane changed in a way that it can\u0027t"},{"line_number":312,"context_line":"  be validated by the client certificate authority certificate on the amphora,"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_a7389eed","line":309,"range":{"start_line":309,"start_character":2,"end_line":309,"end_character":31},"updated":"2017-04-11 06:31:40.000000000","message":"This link isn\u0027t working.  I think you are missing the API path.","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":306,"context_line":"  issued amphora certificates by switching off validation of the old amphora"},{"line_number":307,"context_line":"  certificate. This requires a client certificate which can be validated by the"},{"line_number":308,"context_line":"  client CA file on the amphora. Refer to"},{"line_number":309,"context_line":"  :doc:`../haproxy-amphora-api` for more details."},{"line_number":310,"context_line":""},{"line_number":311,"context_line":"* If the client certificate on the control plane changed in a way that it can\u0027t"},{"line_number":312,"context_line":"  be validated by the client certificate authority certificate on the amphora,"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_548606bb","line":309,"range":{"start_line":309,"start_character":2,"end_line":309,"end_character":31},"in_reply_to":"bff0334d_a7389eed","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":310,"context_line":""},{"line_number":311,"context_line":"* If the client certificate on the control plane changed in a way that it can\u0027t"},{"line_number":312,"context_line":"  be validated by the client certificate authority certificate on the amphora,"},{"line_number":313,"context_line":"  a failover (see :ref:`_rotating_amphora`) of all amphorae needs to be"},{"line_number":314,"context_line":"  initiated. Until the failover is completed the amphorae can\u0027t be controlled"},{"line_number":315,"context_line":"  by the control plane."},{"line_number":316,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_472312be","line":313,"range":{"start_line":313,"start_character":19,"end_line":313,"end_character":42},"updated":"2017-04-11 06:31:40.000000000","message":"This link isn\u0027t working. I think it should be \"rotate-amphora-certs\"","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":310,"context_line":""},{"line_number":311,"context_line":"* If the client certificate on the control plane changed in a way that it can\u0027t"},{"line_number":312,"context_line":"  be validated by the client certificate authority certificate on the amphora,"},{"line_number":313,"context_line":"  a failover (see :ref:`_rotating_amphora`) of all amphorae needs to be"},{"line_number":314,"context_line":"  initiated. Until the failover is completed the amphorae can\u0027t be controlled"},{"line_number":315,"context_line":"  by the control plane."},{"line_number":316,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_94b92e7a","line":313,"range":{"start_line":313,"start_character":19,"end_line":313,"end_character":42},"in_reply_to":"bff0334d_472312be","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":322,"context_line":"not acting as the certificate authority only the certificate authority\u0027s"},{"line_number":323,"context_line":"cert needs to be changed in the system so amphora can be authenticated again."},{"line_number":324,"context_line":""},{"line_number":325,"context_line":"# Issue new certificates (see the script in the bin folder of Octavia if"},{"line_number":326,"context_line":"Octavia is acting as the certificate authority) or follow the instructions"},{"line_number":327,"context_line":"of the third-party certificate authority. Copy the certificate and the"},{"line_number":328,"context_line":"private key (if Octavia acts as a certificate authority) where Octavia can"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_1248a659","line":325,"range":{"start_line":325,"start_character":0,"end_line":325,"end_character":2},"updated":"2017-04-11 06:31:40.000000000","message":"These are not coming through as outlines","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":322,"context_line":"not acting as the certificate authority only the certificate authority\u0027s"},{"line_number":323,"context_line":"cert needs to be changed in the system so amphora can be authenticated again."},{"line_number":324,"context_line":""},{"line_number":325,"context_line":"# Issue new certificates (see the script in the bin folder of Octavia if"},{"line_number":326,"context_line":"Octavia is acting as the certificate authority) or follow the instructions"},{"line_number":327,"context_line":"of the third-party certificate authority. Copy the certificate and the"},{"line_number":328,"context_line":"private key (if Octavia acts as a certificate authority) where Octavia can"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_f465121f","line":325,"range":{"start_line":325,"start_character":0,"end_line":325,"end_character":2},"in_reply_to":"bff0334d_1248a659","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":330,"context_line":""},{"line_number":331,"context_line":"# If the previous certificate files haven\u0027t been overridden, adjust the paths"},{"line_number":332,"context_line":"to the new certs in the configuration file and restart all Octavia services"},{"line_number":333,"context_line":"(except Octavia-api)."},{"line_number":334,"context_line":""},{"line_number":335,"context_line":"# Review :ref:`_rotate-amphora-certs` above to determine if and how the"},{"line_number":336,"context_line":"amphora certificates needs to be rotated."}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_a743fe6b","line":333,"updated":"2017-04-11 06:17:00.000000000","message":"lowercase process name","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":330,"context_line":""},{"line_number":331,"context_line":"# If the previous certificate files haven\u0027t been overridden, adjust the paths"},{"line_number":332,"context_line":"to the new certs in the configuration file and restart all Octavia services"},{"line_number":333,"context_line":"(except Octavia-api)."},{"line_number":334,"context_line":""},{"line_number":335,"context_line":"# Review :ref:`_rotate-amphora-certs` above to determine if and how the"},{"line_number":336,"context_line":"amphora certificates needs to be rotated."}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_946ecefd","line":333,"in_reply_to":"bff0334d_a743fe6b","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"d4c6002ce81f6cb4fa4c0e3f323604071ccf8bf2","unresolved":false,"context_lines":[{"line_number":341,"context_line":"If the client certificates expired new ones need to be issued and installed on"},{"line_number":342,"context_line":"the system:"},{"line_number":343,"context_line":""},{"line_number":344,"context_line":"# Issue a new client certificate (see the script in the bin folder of Octavia"},{"line_number":345,"context_line":"if self signed certificates are used) or use the ones provided to you by"},{"line_number":346,"context_line":"your certificate authority."},{"line_number":347,"context_line":"# Copy the new cert where Octavia can find it."}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_927b9679","line":344,"range":{"start_line":344,"start_character":0,"end_line":344,"end_character":2},"updated":"2017-04-11 06:31:40.000000000","message":"These outline items don\u0027t render right","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":341,"context_line":"If the client certificates expired new ones need to be issued and installed on"},{"line_number":342,"context_line":"the system:"},{"line_number":343,"context_line":""},{"line_number":344,"context_line":"# Issue a new client certificate (see the script in the bin folder of Octavia"},{"line_number":345,"context_line":"if self signed certificates are used) or use the ones provided to you by"},{"line_number":346,"context_line":"your certificate authority."},{"line_number":347,"context_line":"# Copy the new cert where Octavia can find it."}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_14a51e47","line":344,"range":{"start_line":344,"start_character":0,"end_line":344,"end_character":2},"in_reply_to":"bff0334d_927b9679","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":347,"context_line":"# Copy the new cert where Octavia can find it."},{"line_number":348,"context_line":"# If the previous certificate files haven\u0027t been overridden, adjust the paths"},{"line_number":349,"context_line":"to the new certs in the configuration file. In all cases restart all Octavia"},{"line_number":350,"context_line":"services except Octavia-api."},{"line_number":351,"context_line":""},{"line_number":352,"context_line":"If the client CA certificate has been replaced in addition to"},{"line_number":353,"context_line":"rotating the client certificate the new client CA"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_8748fa86","line":350,"updated":"2017-04-11 06:17:00.000000000","message":"lowercase process name","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":347,"context_line":"# Copy the new cert where Octavia can find it."},{"line_number":348,"context_line":"# If the previous certificate files haven\u0027t been overridden, adjust the paths"},{"line_number":349,"context_line":"to the new certs in the configuration file. In all cases restart all Octavia"},{"line_number":350,"context_line":"services except Octavia-api."},{"line_number":351,"context_line":""},{"line_number":352,"context_line":"If the client CA certificate has been replaced in addition to"},{"line_number":353,"context_line":"rotating the client certificate the new client CA"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_d451f637","line":350,"in_reply_to":"bff0334d_8748fa86","updated":"2017-04-21 17:19:59.000000000","message":"Done","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10273,"name":"Adam Harwell","email":"flux.adam@gmail.com","username":"rm_you"},"change_message_id":"95f61289483eff23b1493cf5c66e1f25b3d0db0b","unresolved":false,"context_lines":[{"line_number":363,"context_line":"Once this is changed Octavia can\u0027t read any heartbeats and will assume"},{"line_number":364,"context_line":"all amphora are in an error state and initiate an immediate failover."},{"line_number":365,"context_line":""},{"line_number":366,"context_line":"In preparation, read the chapter on \"Best practices/optimizations\" in"},{"line_number":367,"context_line":"the Failover section. In particular, it is advisable if the throttling"},{"line_number":368,"context_line":"enhancement (available in Pike) doesn\u0027t exist to create a sufficient"},{"line_number":369,"context_line":"number of spare amphorae to mitigate the stress on the OpenStack installation"}],"source_content_type":"text/x-rst","patch_set":7,"id":"bff0334d_475e7244","line":366,"updated":"2017-04-11 06:17:00.000000000","message":"You capitalized the chapter title above, this should match.","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":10850,"name":"German Eichberger","email":"german.eichberger@gmail.com","username":"german"},"change_message_id":"ccb2307ee0fa5dcf33292247c5ea7fe47f9b09c2","unresolved":false,"context_lines":[{"line_number":363,"context_line":"Once this is changed Octavia can\u0027t read any heartbeats and will assume"},{"line_number":364,"context_line":"all amphora are in an error state and initiate an immediate failover."},{"line_number":365,"context_line":""},{"line_number":366,"context_line":"In preparation, read the chapter on \"Best practices/optimizations\" in"},{"line_number":367,"context_line":"the Failover section. In particular, it is advisable if the throttling"},{"line_number":368,"context_line":"enhancement (available in Pike) doesn\u0027t exist to create a sufficient"},{"line_number":369,"context_line":"number of spare amphorae to mitigate the stress on the OpenStack installation"}],"source_content_type":"text/x-rst","patch_set":7,"id":"7ffa3b31_d7045817","line":366,"in_reply_to":"bff0334d_475e7244","updated":"2017-04-21 17:19:59.000000000","message":"changed into a link","commit_id":"19a90446041fb96fd7aa58fa3cf820231b51670c"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"8c1ca40e5dfaeeb3edfdd8fdbab561f43d3a158d","unresolved":false,"context_lines":[{"line_number":74,"context_line":"* octavia-housekeeping"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"The Monasca project has a plugin for such monitoring (see"},{"line_number":77,"context_line":":doc:`Monasca Octavia plugin\u003chttps://github.com/openstack/monasca-agent/blob/master/monasca_setup/detection/plugins/Octavia.py\u003e`"},{"line_number":78,"context_line":")."},{"line_number":79,"context_line":"Please refer to this project for further information."},{"line_number":80,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"5ff73747_b4533a39","line":77,"range":{"start_line":77,"start_character":0,"end_line":77,"end_character":128},"updated":"2017-04-27 16:47:37.000000000","message":"This link isn\u0027t working.","commit_id":"44700751902411f7acd57b969af566932dbe5822"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"8c1ca40e5dfaeeb3edfdd8fdbab561f43d3a158d","unresolved":false,"context_lines":[{"line_number":313,"context_line":""},{"line_number":314,"context_line":"* If the client certificate on the control plane changed in a way that it can\u0027t"},{"line_number":315,"context_line":"  be validated by the client certificate authority certificate on the amphora,"},{"line_number":316,"context_line":"  a failover (see :ref:`_rotate-amphora-certs`) of all amphorae needs to be"},{"line_number":317,"context_line":"  initiated. Until the failover is completed the amphorae can\u0027t be controlled"},{"line_number":318,"context_line":"  by the control plane."},{"line_number":319,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"5ff73747_f48662b9","line":316,"range":{"start_line":316,"start_character":18,"end_line":316,"end_character":46},"updated":"2017-04-27 16:47:37.000000000","message":"This link isn\u0027t working.","commit_id":"44700751902411f7acd57b969af566932dbe5822"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"8c1ca40e5dfaeeb3edfdd8fdbab561f43d3a158d","unresolved":false,"context_lines":[{"line_number":368,"context_line":"Once this is changed Octavia can\u0027t read any heartbeats and will assume"},{"line_number":369,"context_line":"all amphora are in an error state and initiate an immediate failover."},{"line_number":370,"context_line":""},{"line_number":371,"context_line":"In preparation, read the chapter on :ref:`_best_practice` in"},{"line_number":372,"context_line":"the Failover section. In particular, it is advisable if the throttling"},{"line_number":373,"context_line":"enhancement (available in Pike) doesn\u0027t exist to create a sufficient"},{"line_number":374,"context_line":"number of spare amphorae to mitigate the stress on the OpenStack installation"}],"source_content_type":"text/x-rst","patch_set":8,"id":"5ff73747_14054e46","line":371,"range":{"start_line":371,"start_character":36,"end_line":371,"end_character":57},"updated":"2017-04-27 16:47:37.000000000","message":"This link isn\u0027t working.","commit_id":"44700751902411f7acd57b969af566932dbe5822"}],"doc/source/index.rst":[{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"55bd1228024af1c45c26e4ff59087129096bdfec","unresolved":false,"context_lines":[{"line_number":42,"context_line":"   :maxdepth: 1"},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"   guides/dev-quick-start.rst"},{"line_number":45,"context_line":"   guides/operator-maintenance   .rst"},{"line_number":46,"context_line":"   main/configref.rst"},{"line_number":47,"context_line":"   main/Anchor.rst"},{"line_number":48,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"dfeb2761_3f8ddad2","line":45,"range":{"start_line":45,"start_character":3,"end_line":45,"end_character":37},"updated":"2017-04-04 18:03:00.000000000","message":"Typo","commit_id":"34dfab9ef43331dc9d93d58dcc5dc19dd56c516b"}]}