openstackgerrit | OpenStack Proposal Bot proposed openstack/networking-ovn: Updated from global requirements https://review.openstack.org/196845 | 00:18 |
---|---|---|
openstackgerrit | OpenStack Proposal Bot proposed openstack/networking-ovn: Updated from global requirements https://review.openstack.org/196845 | 00:26 |
*** BB has joined #openstack-neutron-ovn | 01:14 | |
*** s3wong has quit IRC | 01:53 | |
*** ParsectiX has joined #openstack-neutron-ovn | 03:09 | |
*** arosen has quit IRC | 03:43 | |
*** arosen has joined #openstack-neutron-ovn | 03:56 | |
*** ajo has quit IRC | 04:35 | |
*** ajo has joined #openstack-neutron-ovn | 04:37 | |
*** BB has quit IRC | 05:22 | |
*** ParsectiX has quit IRC | 06:24 | |
*** fzdarsky has joined #openstack-neutron-ovn | 07:24 | |
openstackgerrit | Gal Sagie proposed openstack/networking-ovn: Create Logical Router OVSDB API implementation https://review.openstack.org/199496 | 10:35 |
*** openstack has joined #openstack-neutron-ovn | 11:36 | |
*** fzdarsky_ has joined #openstack-neutron-ovn | 11:37 | |
*** cascardo` is now known as cascardo | 12:34 | |
gsagie | humm ovn patches are failing on jenkins | 12:57 |
gsagie | russellb: i think there is a problem with the ovs lib requierments | 14:00 |
*** fzdarsky_ has quit IRC | 14:23 | |
*** fzdarsky has joined #openstack-neutron-ovn | 14:28 | |
openstackgerrit | Gal Sagie proposed openstack/networking-ovn: Change the python-ovs lib requierments https://review.openstack.org/202139 | 14:38 |
russellb | gsagie: yeah i saw the failure, was going to ask in -infra for help | 14:38 |
russellb | lifeless would be best to help if he's around | 14:38 |
russellb | want to ask in there? | 14:39 |
gsagie | i think its related to the pbr | 14:39 |
gsagie | do you know why we added the python2.7 | 14:40 |
gsagie | to the ovs-python requierment? | 14:40 |
gsagie | error in setup command: Invalid environment marker: (python_version=='2.7' # Apache-2.0) | 14:42 |
gsagie | russellb: i think we need to remove this | 15:05 |
gsagie | i am not sure why it was added | 15:05 |
russellb | because ovs only works with python 2.7 | 15:06 |
russellb | not python 3 | 15:06 |
russellb | our job is installing with a version of (something) that isn't new enough to understand it | 15:07 |
russellb | i haven't dug into it yet, but that requirement is right at least | 15:07 |
*** fzdarsky has quit IRC | 15:14 | |
*** ParsectiX has joined #openstack-neutron-ovn | 15:18 | |
*** ig0r__ has quit IRC | 15:39 | |
*** ig0r_ has joined #openstack-neutron-ovn | 15:40 | |
*** armax has joined #openstack-neutron-ovn | 15:56 | |
*** salv-orl_ has joined #openstack-neutron-ovn | 16:01 | |
*** salv-orlando has quit IRC | 16:05 | |
*** gsagie_ has joined #openstack-neutron-ovn | 16:36 | |
gsagie_ | russellb: my check which removed the python2.7 pass tests: https://review.openstack.org/#/c/202139/ | 16:38 |
russellb | cool | 16:39 |
russellb | need to figure out what we're doing wrong in our job that breaks that requirement | 16:40 |
*** shettyg has joined #openstack-neutron-ovn | 16:44 | |
*** s3wong has joined #openstack-neutron-ovn | 16:45 | |
gsagie_ | arosen: RethinkDB looks great :) thanks for sharing | 17:05 |
*** s3wong has quit IRC | 17:12 | |
*** gsagie_ has quit IRC | 17:32 | |
shettyg | russellb: where do you run devstack on networking-ovn these days? fedora? | 17:42 |
russellb | I run it on Fedora for my own use | 17:43 |
russellb | it runs on Ubuntu in OpenStack's CI system though | 17:43 |
shettyg | ubuntu 14 or ubuntu 12? | 17:43 |
russellb | latest LTS, 14 i guess? | 17:44 |
shettyg | So when I run devstack, it get an error : error in setup command: Invalid environment marker: (python_version=='2.7' # Apache-2.0) | 17:44 |
shettyg | In requirements.txt of networking-ovn | 17:44 |
russellb | ah, yes, our CI is broken on that same error | 17:44 |
russellb | and i haven't had a chance to chase it down yet | 17:44 |
russellb | locally you can edit requirements.txt in /opt/stack/networking-ovn | 17:45 |
russellb | and remove the "python_version" part of the "ovs" line | 17:45 |
russellb | but i'm not sure what the right fix is yet, because that addition is intentional | 17:45 |
russellb | gsagie: did you ask about this in #openstack-infra by chance? | 17:45 |
shettyg | If I comment it out, the next error is that when neutron starts it fails with : "no ovs.db" module. | 17:45 |
shettyg | So which part of devstack actually installs ovs python modules? | 17:46 |
russellb | yeah you still need a line that says "ovs" | 17:46 |
shettyg | Ok | 17:46 |
shettyg | russellb: A quick question. The python modules for OVS comes from OVS repo itself right? I ask because there was some discussion for forking ovs for python3 support | 17:47 |
russellb | it's downloaded from PyPI, but it's published to PyPI directly from the repo, there's no fork | 17:47 |
russellb | https://pypi.python.org/pypi/ovs/ | 17:48 |
russellb | if it needs any updates we have to push an update to pypi | 17:48 |
russellb | otherwiseguy maintains that | 17:48 |
* otherwiseguy waves | 17:48 | |
russellb | i'm going to try to figure out what's wrong with requirements.txt now | 17:49 |
russellb | well, i think requirements.txt is right, but something in our env isn't | 17:49 |
otherwiseguy | russellb: I ran into that because an older version of pbr was being installed somewhere. | 17:50 |
russellb | ah.. | 17:50 |
*** salv-orl_ has quit IRC | 17:50 | |
russellb | well then. | 17:51 |
otherwiseguy | I seem to remember in devstack it being keystonemiddleware being an older version that had a requirement for pbr < something or other, so 0.11 would be installed. | 17:51 |
otherwiseguy | One of those things I hacked around in some checkout at some point, thinking it was just a one-off weirdness on my system due to reusing the same devstack vm. | 17:52 |
openstackgerrit | Russell Bryant proposed openstack/networking-ovn: test: pbr upgrade hack https://review.openstack.org/202214 | 17:52 |
russellb | otherwiseguy: yeah, our CI job is broken on it right now | 17:52 |
* russellb shrugs | 17:52 | |
russellb | i'm getting sick and tired of this python junk :-p | 17:52 |
otherwiseguy | russellb: looks like global-requirements has pbr>=1.3,<2.0 and we have pbr<2.0,>=0.11 | 17:55 |
otherwiseguy | russellb: I'm getting tired of all of the non-coding-related things that I have to do to be able to code. | 17:56 |
*** Bhargav has joined #openstack-neutron-ovn | 17:56 | |
russellb | otherwiseguy: but our requirements.txt update is broken too | 17:56 |
russellb | https://review.openstack.org/#/c/196845/ | 17:57 |
russellb | otherwiseguy: that fails on the same error | 17:57 |
otherwiseguy | Like setting up my 3 dell test servers that have no optical drives and seem to almost kind of sometimes work with USB-based installs, and Spacewalk just almost working for doing PXE. | 17:57 |
otherwiseguy | russellb: I remember keystonemiddleware on my system basically forcing an uninstall of pbr, and reinstall at 0.11 and doing a forced upgrade of keystonemiddleware fixed it (at least on the ovs-dpdk project). | 18:03 |
russellb | interesting | 18:03 |
Bhargav | I am trying to understand on how containers are deployed using OVN. In the texts, container-managment-system and plugin are talked at same breath. Are they same or independent entity | 18:03 |
Bhargav | ? | 18:03 |
russellb | Bhargav: shettyg has done the most work with containers and OVN | 18:04 |
shettyg | bhargav: You want to know container support in OVN on OpenStack or independent of OpenStack? | 18:04 |
Bhargav | shettyg: Would like to understand WRT Openstack for now | 18:07 |
shettyg | bhargav: To summarize, you can run docker containers in a tenant VM and have it connect to a Neutron network. So effectively you can have VMs, physical machines etc be part of the same logical network | 18:08 |
shettyg | it is such that the VM is untrusted and all the intelligence lies in the hypervisor OVS | 18:10 |
Bhargav | shettg: You are referring to 2 things here 1) a VM could be part of tenant and have containers running over it 2) Have VM's and physical in the same network and create tenants with containers ? | 18:11 |
shettyg | Bhargav: 1 is true | 18:11 |
Bhargav | shettyg: Ok. Let us consider case 1. | 18:12 |
shettyg | For 2, I meant to say that a tenant can have physical machines and VMs and containers running inside a VM be all part of a logical network | 18:12 |
Bhargav | shettyg: oh, got the 2nd part too. | 18:13 |
openstackgerrit | Aaron Rosen proposed openstack/networking-ovn: Skip provider network tempest api tests for now https://review.openstack.org/202223 | 18:13 |
shettyg | So with OVN each container interface gets an IP address in a neutron network | 18:13 |
Bhargav | shettyg: will the ip address be in the same network on which VM is running or is it completely different subnet (kind of private) ? | 18:14 |
shettyg | Bhargav: A different network. VMs network is usually part of a mgmt network which the container schedulers will use to spawn and monitor containers | 18:15 |
shettyg | But a container can be in the same network of a differnent VM where you have your stateful services running | 18:16 |
Bhargav | shettyg: okay. let us assume the case you are talking about where a container is talking to a VM running stateful service. In this case both containers and the VM are in the same network. | 18:24 |
shettyg | yes | 18:25 |
Bhargav | assume that stateful service VM is running on a different host (different hypervisor) | 18:25 |
shettyg | ok | 18:25 |
shettyg | it will work | 18:25 |
Bhargav | in the hypervisor on which VM + Container is running, there are 2 OVS. One is inside the VM and other is on the hypervisor | 18:25 |
shettyg | yes | 18:26 |
Bhargav | so when container sends out a packet, it sends to with "no tag" and the immediate OVS slaps a tag. This packet having a tag is goes to outside OVS which strips the tag and sends over whatever overlay is | 18:27 |
shettyg | yes | 18:27 |
otherwiseguy | russellb: at least in runnig tox -r -epep8, removing the " # Apache-2.0)" from the python_version== line in requirements.txt fixes it. | 18:30 |
otherwiseguy | Apparently the environment marker parsing code doesn't handle comments. | 18:31 |
* otherwiseguy tries a devstack install | 18:32 | |
russellb | otherwiseguy: oh interesting | 18:33 |
otherwiseguy | russellb: devstack install successful with that change. http://ur1.ca/n4slw | 18:39 |
russellb | otherwiseguy: want to check global-requirements and see if ovs is the only entry with env marker + license comment ? | 18:40 |
Bhargav | shettyg: on the reverse side, the hypervisor OVS takes of adding the tag | 18:40 |
russellb | otherwiseguy: if that fixes it, i'd be happy to merge that fix into networking-ovn directly for now | 18:41 |
shettyg | Bhargav: yes | 18:41 |
russellb | otherwiseguy: and want to propose that to networking-ovn and see what happens? | 18:41 |
Bhargav | shettyg: what is point of this tag ?. Seems like there is some kind of understanding between upper-OVS vs lower-OVS | 18:41 |
otherwiseguy | looks like ovs, pyngus, and requests-kerberos have comments. | 18:41 |
Bhargav | shettyg: Also this tag is oblivious to openstack ? | 18:42 |
otherwiseguy | most do not | 18:42 |
otherwiseguy | russellb: sure, I'll check out the existing review and update it. | 18:42 |
russellb | cool thanks | 18:43 |
openstackgerrit | Terry Wilson proposed openstack/networking-ovn: Updated from global requirements https://review.openstack.org/196845 | 18:43 |
russellb | maybe all of those are busted *shrug* | 18:44 |
russellb | otherwiseguy: if that works you get a cookie | 18:45 |
otherwiseguy | russellb: ooh, cookie! | 18:45 |
shettyg | Bhargav: The tag is semi-visibile to OpenStack. i..e when a neutron port is created, we give the tag to it as an additional option | 18:45 |
otherwiseguy | russellb: it's about time I got back to doing at least something remotely ovn-related. | 18:45 |
otherwiseguy | I've really been fighting my test lab lately. :/ | 18:45 |
shettyg | Bhargav: the only use of tag is to distinguish multiple container interfaces inside a VM | 18:46 |
* otherwiseguy hates physical servers | 18:46 | |
otherwiseguy | :p | 18:46 |
russellb | otherwiseguy: yeah quit trying to actually use stuff | 18:46 |
otherwiseguy | russellb: the real world is icky | 18:46 |
Bhargav | shettyg: if have 2 containers on same VM's, assume that they will have different IP address (in same or different subnet). Will not ip address help ? | 18:47 |
Bhargav | to distinguish ? | 18:47 |
shettyg | 2 containers can have the same IP address (if they belong to different logical switches) | 18:48 |
*** ParsectiX has quit IRC | 18:50 | |
Bhargav | shettyg: i am not getting this different logical switches. Can you elaborate more ? | 18:51 |
shettyg | Bhargav: So OVN is a network virtualization solution. It is also multi-tenant support capable. What this means is that 2 networks can have overlapping IP addresses (it does not matter if they belong to the same tenant or different tenants | 19:07 |
shettyg | So mac address and IP address cannot be used to distinguish tenants and networks | 19:08 |
Bhargav | aha okay. So, the lower-OVS takes care of isolation thro' NVO mechanism such as VxLAN/Geneve etc. To isolate between in the upper-OVS, VLAN is used. | 19:09 |
shettyg | yes | 19:12 |
Bhargav | thanks much. I get it now. | 19:13 |
openstackgerrit | Aaron Rosen proposed openstack/networking-ovn: Convert plugin away from ML2 https://review.openstack.org/195326 | 19:32 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/networking-ovn: Updated from global requirements https://review.openstack.org/196845 | 19:46 |
*** ParsectiX has joined #openstack-neutron-ovn | 19:51 | |
*** salv-orlando has joined #openstack-neutron-ovn | 19:51 | |
shettyg | bhargav; np. I am sure you will have more questions once you think it through :) | 19:55 |
*** salv-orlando has quit IRC | 19:57 | |
russellb | otherwiseguy: you got stepped on ... might be easiest to push it up as a different change-id | 19:58 |
otherwiseguy | doh. | 19:58 |
otherwiseguy | It was almost done! | 19:59 |
openstackgerrit | Terry Wilson proposed openstack/networking-ovn: Updated from global requirements https://review.openstack.org/202255 | 20:00 |
*** fzdarsky has joined #openstack-neutron-ovn | 20:20 | |
Bhargav | shettyg: You are spot on :-). I have already asked quite a bit, so keeping off for sometime now | 20:23 |
*** ParsectiX has quit IRC | 20:59 | |
otherwiseguy | russellb: gate-install-dsvm-networking-ovn: SUCCESS | 21:34 |
* otherwiseguy requests aforementioned cookie | 21:34 | |
otherwiseguy | :p | 21:34 |
*** salv-orlando has joined #openstack-neutron-ovn | 21:36 | |
*** Bhargav has quit IRC | 21:59 | |
*** mestery_ has joined #openstack-neutron-ovn | 23:00 | |
*** mestery has quit IRC | 23:03 | |
shettyg | If I have to disable nova with disable_service in local.conf, what is the keyword for that? | 23:26 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!