)]}'
{"specs/ocata/octavia.rst":[{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"5708254939b1c79948f3f9cb57b0eb865a1b3964","unresolved":false,"context_lines":[{"line_number":39,"context_line":"* Add Ansible code to deploy Octavia within an OpenStack-Ansible environment"},{"line_number":40,"context_line":"* Add centralized tests for the Ansible role"},{"line_number":41,"context_line":"* Add documentation to the role itself"},{"line_number":42,"context_line":"* Integrate the role with OpenStack-Ansible without dislodging the existing"},{"line_number":43,"context_line":"  neutron-lbaasv2 support"},{"line_number":44,"context_line":"* Add documentation to OpenStack-Ansible\u0027s main docs to explain how to deploy"},{"line_number":45,"context_line":"  Octavia as part of the integrated build"},{"line_number":46,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_83a9dd92","line":43,"range":{"start_line":42,"start_character":2,"end_line":43,"end_character":25},"updated":"2016-11-01 16:18:42.000000000","message":"Currently Octavia is available only thru NLBaaS v2 as driver - it require reconfiguration of this service to enable everything.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"64c642f7a60d5ebde76872d85b259aab08504b70","unresolved":false,"context_lines":[{"line_number":40,"context_line":"* Add centralized tests for the Ansible role"},{"line_number":41,"context_line":"* Add documentation to the role itself"},{"line_number":42,"context_line":"* Integrate the role with OpenStack-Ansible without dislodging the existing"},{"line_number":43,"context_line":"  neutron-lbaasv2 support"},{"line_number":44,"context_line":"* Add documentation to OpenStack-Ansible\u0027s main docs to explain how to deploy"},{"line_number":45,"context_line":"  Octavia as part of the integrated build"},{"line_number":46,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_f4c6cd66","line":43,"updated":"2016-11-01 17:23:27.000000000","message":"Haha, okay. Totally understand. ;)","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"cd77baa9a970b0deb7513be61313540c1e1e8748","unresolved":false,"context_lines":[{"line_number":40,"context_line":"* Add centralized tests for the Ansible role"},{"line_number":41,"context_line":"* Add documentation to the role itself"},{"line_number":42,"context_line":"* Integrate the role with OpenStack-Ansible without dislodging the existing"},{"line_number":43,"context_line":"  neutron-lbaasv2 support"},{"line_number":44,"context_line":"* Add documentation to OpenStack-Ansible\u0027s main docs to explain how to deploy"},{"line_number":45,"context_line":"  Octavia as part of the integrated build"},{"line_number":46,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_997f8c65","line":43,"updated":"2016-11-01 16:54:53.000000000","message":"Isn\u0027t there a plan in place to utilize an API within Octavia itself by the time Ocata is released?  I wasn\u0027t sure on the timing with that.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"0d8c93682e8f443813e28b3aee8a29161fbd05e3","unresolved":false,"context_lines":[{"line_number":40,"context_line":"* Add centralized tests for the Ansible role"},{"line_number":41,"context_line":"* Add documentation to the role itself"},{"line_number":42,"context_line":"* Integrate the role with OpenStack-Ansible without dislodging the existing"},{"line_number":43,"context_line":"  neutron-lbaasv2 support"},{"line_number":44,"context_line":"* Add documentation to OpenStack-Ansible\u0027s main docs to explain how to deploy"},{"line_number":45,"context_line":"  Octavia as part of the integrated build"},{"line_number":46,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_b9d0d020","line":43,"in_reply_to":"ba5da102_997f8c65","updated":"2016-11-01 17:03:44.000000000","message":"Ocata is our target. Time will show what is the result.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"5708254939b1c79948f3f9cb57b0eb865a1b3964","unresolved":false,"context_lines":[{"line_number":47,"context_line":"Alternatives"},{"line_number":48,"context_line":"------------"},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"We could keep using neutron-lbaasv2 with the agent architecture until that"},{"line_number":51,"context_line":"code is deprecated.  This is not ideal."},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"Playbook/Role impact"},{"line_number":54,"context_line":"--------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_8380fdf8","line":51,"range":{"start_line":50,"start_character":0,"end_line":51,"end_character":19},"updated":"2016-11-01 16:18:42.000000000","message":"Again Octavia require NLBaaSv2 for now","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"64c642f7a60d5ebde76872d85b259aab08504b70","unresolved":false,"context_lines":[{"line_number":48,"context_line":"------------"},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"We could keep using neutron-lbaasv2 with the agent architecture until that"},{"line_number":51,"context_line":"code is deprecated.  This is not ideal."},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"Playbook/Role impact"},{"line_number":54,"context_line":"--------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_14c4215d","line":51,"updated":"2016-11-01 17:23:27.000000000","message":"Got it.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"cd77baa9a970b0deb7513be61313540c1e1e8748","unresolved":false,"context_lines":[{"line_number":48,"context_line":"------------"},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"We could keep using neutron-lbaasv2 with the agent architecture until that"},{"line_number":51,"context_line":"code is deprecated.  This is not ideal."},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"Playbook/Role impact"},{"line_number":54,"context_line":"--------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_b998d0c1","line":51,"updated":"2016-11-01 16:54:53.000000000","message":"Same question as above.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"0d8c93682e8f443813e28b3aee8a29161fbd05e3","unresolved":false,"context_lines":[{"line_number":48,"context_line":"------------"},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"We could keep using neutron-lbaasv2 with the agent architecture until that"},{"line_number":51,"context_line":"code is deprecated.  This is not ideal."},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"Playbook/Role impact"},{"line_number":54,"context_line":"--------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_19c45c5d","line":51,"in_reply_to":"ba5da102_b998d0c1","updated":"2016-11-01 17:03:44.000000000","message":"^^","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"cd77baa9a970b0deb7513be61313540c1e1e8748","unresolved":false,"context_lines":[{"line_number":62,"context_line":""},{"line_number":63,"context_line":"Octavia hasn\u0027t been deployed previously, so there\u0027s nothing to upgrade here."},{"line_number":64,"context_line":"However, deployers with neutron-lbaasv2 deployed will need to recreate load"},{"line_number":65,"context_line":"balancers in Octavia (if they choose to move to Octavia)."},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"Security impact"},{"line_number":68,"context_line":"---------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_d9958487","line":65,"updated":"2016-11-01 16:54:53.000000000","message":"From what I\u0027ve seen, LB\u0027s will need to be deleted and re-created if someone is using agent-based lbaasv2 and wants to move to Octavia.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"5708254939b1c79948f3f9cb57b0eb865a1b3964","unresolved":false,"context_lines":[{"line_number":61,"context_line":"--------------"},{"line_number":62,"context_line":""},{"line_number":63,"context_line":"Octavia hasn\u0027t been deployed previously, so there\u0027s nothing to upgrade here."},{"line_number":64,"context_line":"However, deployers with neutron-lbaasv2 deployed will need to recreate load"},{"line_number":65,"context_line":"balancers in Octavia (if they choose to move to Octavia)."},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"Security impact"},{"line_number":68,"context_line":"---------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_a3ea61aa","line":65,"range":{"start_line":64,"start_character":0,"end_line":65,"end_character":57},"updated":"2016-11-01 16:18:42.000000000","message":"It\u0027s true, but you need to reconfigure whole LBaaSv2 to use Octavia as driver. We need to verify how will work all LBs previously created with HAProxy NS driver and is it possible to still use them after reconfiguring driver in LBaaSv2","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"64c642f7a60d5ebde76872d85b259aab08504b70","unresolved":false,"context_lines":[{"line_number":62,"context_line":""},{"line_number":63,"context_line":"Octavia hasn\u0027t been deployed previously, so there\u0027s nothing to upgrade here."},{"line_number":64,"context_line":"However, deployers with neutron-lbaasv2 deployed will need to recreate load"},{"line_number":65,"context_line":"balancers in Octavia (if they choose to move to Octavia)."},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"Security impact"},{"line_number":68,"context_line":"---------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_34a3e5b3","line":65,"updated":"2016-11-01 17:23:27.000000000","message":"The LBs would run in an unmanaged state if we simply killed the agent. I think we would have to tell deployers to delete all existing load balancers, switch the driver, and re-create those LBs.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"0d8c93682e8f443813e28b3aee8a29161fbd05e3","unresolved":false,"context_lines":[{"line_number":62,"context_line":""},{"line_number":63,"context_line":"Octavia hasn\u0027t been deployed previously, so there\u0027s nothing to upgrade here."},{"line_number":64,"context_line":"However, deployers with neutron-lbaasv2 deployed will need to recreate load"},{"line_number":65,"context_line":"balancers in Octavia (if they choose to move to Octavia)."},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"Security impact"},{"line_number":68,"context_line":"---------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_199b7c73","line":65,"in_reply_to":"ba5da102_d9958487","updated":"2016-11-01 17:03:44.000000000","message":"So to switch into Octavia based LB you need to recreate that load balancer. My question is more how this old lbs will work with changed driver","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"64c642f7a60d5ebde76872d85b259aab08504b70","unresolved":false,"context_lines":[{"line_number":81,"context_line":"------------------"},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"Load balancing performance should be better with Octavia-based load balancers."},{"line_number":84,"context_line":"However, we will need to generate or download a VM image for the load balancer"},{"line_number":85,"context_line":"virtual machines.  This could take time and it will need to be optimized."},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"End user impact"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_54a8598d","line":84,"updated":"2016-11-01 17:23:27.000000000","message":"Agree 100%.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"5708254939b1c79948f3f9cb57b0eb865a1b3964","unresolved":false,"context_lines":[{"line_number":81,"context_line":"------------------"},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"Load balancing performance should be better with Octavia-based load balancers."},{"line_number":84,"context_line":"However, we will need to generate or download a VM image for the load balancer"},{"line_number":85,"context_line":"virtual machines.  This could take time and it will need to be optimized."},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"End user impact"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_830abd77","line":84,"range":{"start_line":84,"start_character":25,"end_line":84,"end_character":56},"updated":"2016-11-01 16:18:42.000000000","message":"There is a DIB script to generate this image. Also, this image must be available in the Glance all the time and marked with the tag \u0027amphora\u0027. It\u0027s one-time operation - excluding upgrades.\n\nAlso, there is no way to download that image from somewhere. We\u0027re not providing it.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"cd77baa9a970b0deb7513be61313540c1e1e8748","unresolved":false,"context_lines":[{"line_number":81,"context_line":"------------------"},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"Load balancing performance should be better with Octavia-based load balancers."},{"line_number":84,"context_line":"However, we will need to generate or download a VM image for the load balancer"},{"line_number":85,"context_line":"virtual machines.  This could take time and it will need to be optimized."},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"End user impact"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_f98ec877","line":84,"updated":"2016-11-01 16:54:53.000000000","message":"We can figure out this process later. We might try to pre-build it and host it somewhere. The other option would be to build it on the fly, which might take a while. We can discuss those specifics later.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"0d8c93682e8f443813e28b3aee8a29161fbd05e3","unresolved":false,"context_lines":[{"line_number":81,"context_line":"------------------"},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"Load balancing performance should be better with Octavia-based load balancers."},{"line_number":84,"context_line":"However, we will need to generate or download a VM image for the load balancer"},{"line_number":85,"context_line":"virtual machines.  This could take time and it will need to be optimized."},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"End user impact"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_19729c49","line":84,"in_reply_to":"ba5da102_f98ec877","updated":"2016-11-01 17:03:44.000000000","message":"As deployment step you should build that image using DIB and upload into glance.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"5708254939b1c79948f3f9cb57b0eb865a1b3964","unresolved":false,"context_lines":[{"line_number":87,"context_line":"End user impact"},{"line_number":88,"context_line":"---------------"},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"End users who are already using the neutron-lbaasv2 API will have the same API"},{"line_number":91,"context_line":"contract with Octavia. The service endpoints will change for those users (from"},{"line_number":92,"context_line":"Neutron API to Octavia API), but the actual API commands remain the same."},{"line_number":93,"context_line":""},{"line_number":94,"context_line":"Deployer impact"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_034dcdc3","line":91,"range":{"start_line":90,"start_character":0,"end_line":91,"end_character":22},"updated":"2016-11-01 16:18:42.000000000","message":"You\u0027re still using NLBaaSv2 as API to create load balancers. You\u0027re only changing driver which is responsible for creating everything and configuring it.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"cd77baa9a970b0deb7513be61313540c1e1e8748","unresolved":false,"context_lines":[{"line_number":98,"context_line":"Octavia will not be deployed by default.  Deployers will also need to do their"},{"line_number":99,"context_line":"capacity planning a little differently since load balancer virtual machines"},{"line_number":100,"context_line":"will take up space within the data plane that would normally be occupied by"},{"line_number":101,"context_line":"tenant virtual machines."},{"line_number":102,"context_line":""},{"line_number":103,"context_line":"Developer impact"},{"line_number":104,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_198c5c7e","line":101,"updated":"2016-11-01 16:54:53.000000000","message":"Agreed.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"5708254939b1c79948f3f9cb57b0eb865a1b3964","unresolved":false,"context_lines":[{"line_number":94,"context_line":"Deployer impact"},{"line_number":95,"context_line":"---------------"},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"Deployers will need to enable Octavia deployments if they choose to use them."},{"line_number":98,"context_line":"Octavia will not be deployed by default.  Deployers will also need to do their"},{"line_number":99,"context_line":"capacity planning a little differently since load balancer virtual machines"},{"line_number":100,"context_line":"will take up space within the data plane that would normally be occupied by"},{"line_number":101,"context_line":"tenant virtual machines."},{"line_number":102,"context_line":""},{"line_number":103,"context_line":"Developer impact"},{"line_number":104,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_4397c5eb","line":101,"range":{"start_line":97,"start_character":0,"end_line":101,"end_character":24},"updated":"2016-11-01 16:18:42.000000000","message":"Even right now Reference Driver in NLBaaSv2 is Octavia. So you need to decide are you choosing to stay with HAProxy NS driver because using it is cheaper or you\u0027re using reference driver which require more resources but performance is also much better - especially that Octavia is WIP not like HAProxy NS driver.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"cd77baa9a970b0deb7513be61313540c1e1e8748","unresolved":false,"context_lines":[{"line_number":131,"context_line":""},{"line_number":132,"context_line":"The Octavia role should use the standard centralized testing repository as"},{"line_number":133,"context_line":"other roles. Octavia will need keystone, nova, neutron, glance deployed for"},{"line_number":134,"context_line":"proper testing."},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"Documentation impact"},{"line_number":137,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_39ebe014","line":134,"updated":"2016-11-01 16:54:53.000000000","message":"Good point. Isn\u0027t barbican only needed if we want to do SSL offloading in Octavia?","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"5708254939b1c79948f3f9cb57b0eb865a1b3964","unresolved":false,"context_lines":[{"line_number":131,"context_line":""},{"line_number":132,"context_line":"The Octavia role should use the standard centralized testing repository as"},{"line_number":133,"context_line":"other roles. Octavia will need keystone, nova, neutron, glance deployed for"},{"line_number":134,"context_line":"proper testing."},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"Documentation impact"},{"line_number":137,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_43bee565","line":134,"updated":"2016-11-01 16:18:42.000000000","message":"How about barbican?","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"64c642f7a60d5ebde76872d85b259aab08504b70","unresolved":false,"context_lines":[{"line_number":131,"context_line":""},{"line_number":132,"context_line":"The Octavia role should use the standard centralized testing repository as"},{"line_number":133,"context_line":"other roles. Octavia will need keystone, nova, neutron, glance deployed for"},{"line_number":134,"context_line":"proper testing."},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"Documentation impact"},{"line_number":137,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_74a9dd8f","line":134,"updated":"2016-11-01 17:23:27.000000000","message":"I\u0027ll note that here.","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":14591,"name":"Lubosz Kosnik (diltram)","email":"lubosz.kosnik@intel.com","username":"diltram"},"change_message_id":"0d8c93682e8f443813e28b3aee8a29161fbd05e3","unresolved":false,"context_lines":[{"line_number":131,"context_line":""},{"line_number":132,"context_line":"The Octavia role should use the standard centralized testing repository as"},{"line_number":133,"context_line":"other roles. Octavia will need keystone, nova, neutron, glance deployed for"},{"line_number":134,"context_line":"proper testing."},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"Documentation impact"},{"line_number":137,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba5da102_b9a530a3","line":134,"in_reply_to":"ba5da102_39ebe014","updated":"2016-11-01 17:03:44.000000000","message":"True","commit_id":"238bf702ba82439246c94342ff7576e776813fd8"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"4d52d82519c0006dbdcc5f911e87d72351792db8","unresolved":false,"context_lines":[{"line_number":47,"context_line":"* Add documentation to the role itself"},{"line_number":48,"context_line":"* Integrate the role with OpenStack-Ansible without dislodging the existing"},{"line_number":49,"context_line":"  neutron-lbaasv2 + agent support"},{"line_number":50,"context_line":"* Allow deployers to choose LBaaSv2+agent or LBaaSv2+Octavia"},{"line_number":51,"context_line":"* Add documentation to OpenStack-Ansible\u0027s main docs to explain how to deploy"},{"line_number":52,"context_line":"  Octavia as part of the integrated build"},{"line_number":53,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"9a629dbe_a75e5674","line":50,"range":{"start_line":50,"start_character":2,"end_line":50,"end_character":60},"updated":"2016-11-14 15:51:35.000000000","message":"We should maintain the capability of running both drivers at the same time.  This allows for a migration path and gives operators flexibility.","commit_id":"03211ed1fb4278380f0ee472b852a049602325b9"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"4d52d82519c0006dbdcc5f911e87d72351792db8","unresolved":false,"context_lines":[{"line_number":72,"context_line":""},{"line_number":73,"context_line":"Octavia hasn\u0027t been deployed previously, so there\u0027s nothing to upgrade here."},{"line_number":74,"context_line":"However, deployers who are currently using LBaaSv2+agent will have the option"},{"line_number":75,"context_line":"of changing the backend LBaaSv2 driver to use Octavia instead. They will need"},{"line_number":76,"context_line":"to delete all existing load balancers prior to making this change and recreate"},{"line_number":77,"context_line":"them."},{"line_number":78,"context_line":""},{"line_number":79,"context_line":"Security impact"},{"line_number":80,"context_line":"---------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9a629dbe_87e792ab","line":77,"range":{"start_line":75,"start_character":63,"end_line":77,"end_character":5},"updated":"2016-11-14 15:51:35.000000000","message":"No, they can run both drivers at the same time, so there is no \"forced\" rebuild.","commit_id":"03211ed1fb4278380f0ee472b852a049602325b9"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"4d52d82519c0006dbdcc5f911e87d72351792db8","unresolved":false,"context_lines":[{"line_number":82,"context_line":"The main security concern is that the Octavia load balancer virtual machines"},{"line_number":83,"context_line":"will need to be on some type of management network that can be reached by"},{"line_number":84,"context_line":"Octavia services that are running within the control plane. Those virtual"},{"line_number":85,"context_line":"machines will have one network connection into a tenant network and one"},{"line_number":86,"context_line":"connection into a management network."},{"line_number":87,"context_line":""},{"line_number":88,"context_line":"This could allow an attacker to move from a compromised load balancer VM into"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9a629dbe_e773eee5","line":85,"range":{"start_line":85,"start_character":49,"end_line":85,"end_character":63},"updated":"2016-11-14 15:51:35.000000000","message":", inside an isolated network namespace,","commit_id":"03211ed1fb4278380f0ee472b852a049602325b9"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"4d52d82519c0006dbdcc5f911e87d72351792db8","unresolved":false,"context_lines":[{"line_number":85,"context_line":"machines will have one network connection into a tenant network and one"},{"line_number":86,"context_line":"connection into a management network."},{"line_number":87,"context_line":""},{"line_number":88,"context_line":"This could allow an attacker to move from a compromised load balancer VM into"},{"line_number":89,"context_line":"the control plane.  We will need to determine some ways to mitigate those types"},{"line_number":90,"context_line":"of attacks.  This could be done with iptables or other network filtering."},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"Performance impact"},{"line_number":93,"context_line":"------------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9a629dbe_a7bad66c","line":90,"range":{"start_line":88,"start_character":0,"end_line":90,"end_character":73},"updated":"2016-11-14 15:51:35.000000000","message":"This is already mitigated by only plugging tenant network interfaces into a network namespace inside the amphora.  This isolates tenant network traffic from the management process and network.","commit_id":"03211ed1fb4278380f0ee472b852a049602325b9"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"4d52d82519c0006dbdcc5f911e87d72351792db8","unresolved":false,"context_lines":[{"line_number":93,"context_line":"------------------"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":"Load balancing performance should be better with Octavia-based load balancers."},{"line_number":96,"context_line":"However, we will need to generate or download a VM image for the load balancer"},{"line_number":97,"context_line":"virtual machines.  This could take time and it will need to be optimized."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"End user impact"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9a629dbe_e7212eb6","line":96,"range":{"start_line":96,"start_character":25,"end_line":96,"end_character":33},"updated":"2016-11-14 15:51:35.000000000","message":"It takes about five minutes to build the image in our gates.  This could be an available option in the ansible.","commit_id":"03211ed1fb4278380f0ee472b852a049602325b9"},{"author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"change_message_id":"4d52d82519c0006dbdcc5f911e87d72351792db8","unresolved":false,"context_lines":[{"line_number":93,"context_line":"------------------"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":"Load balancing performance should be better with Octavia-based load balancers."},{"line_number":96,"context_line":"However, we will need to generate or download a VM image for the load balancer"},{"line_number":97,"context_line":"virtual machines.  This could take time and it will need to be optimized."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"End user impact"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9a629dbe_c75d0a4a","line":96,"range":{"start_line":96,"start_character":37,"end_line":96,"end_character":45},"updated":"2016-11-14 15:51:35.000000000","message":"The Octavia team feels it is a bad practice to store pre-built images for download.","commit_id":"03211ed1fb4278380f0ee472b852a049602325b9"}]}