Tuesday, 2015-05-12

*** dboik has quit IRC00:00
*** mchestr has quit IRC00:00
*** dannywilson has quit IRC00:00
*** dims has joined #openstack-neutron00:00
*** sdake has quit IRC00:01
*** achanda has quit IRC00:04
*** igordcard has joined #openstack-neutron00:05
*** ivar-laz_ has quit IRC00:06
*** ivar-lazzaro has joined #openstack-neutron00:06
*** zhhuabj_ has quit IRC00:09
*** igordcard has quit IRC00:14
*** igordcard has joined #openstack-neutron00:16
*** zhhuabj_ has joined #openstack-neutron00:22
*** yamamoto has joined #openstack-neutron00:22
*** Swami has quit IRC00:22
*** vivek-ebay has joined #openstack-neutron00:22
*** igordcard has quit IRC00:23
guskevinbenton: you left a 'ping' for me in -meeting?00:24
*** tkatarki has joined #openstack-neutron00:24
kevinbentongus: yeah, was going to see if you wanted to bring up the rootwrap stuff to bring attention to it for the summit00:24
gus(The neutron meetings are either crazy-o'clock, or conflict with me driving my daughter in to school :/ )00:24
guskevinbenton: yeah I would like to.00:25
kevinbentongus: well it's too late now, you'll have to wait until the next summit :)00:25
gusMostly I need to talk over a bunch of the details with the security folks.00:26
kevinbentongus: makes sense. can you ping me if you get a time ironed out for that? I'm interested in their thoughts00:26
*** vivek-ebay has quit IRC00:26
guskevinbenton: ;-)  I don't think I'm ready to bring it to a wide discussion yet anyway.  I want to make sure ossg is happy with it, and I have a good migration story worked out.00:27
gusyeah, I'll certainly be talking to people about it and collecting thoughts.00:27
*** aduarte has quit IRC00:27
*** britthou_ has joined #openstack-neutron00:28
kevinbentongus: i found out the other day that you can just set root_helper to 'sudo' and that seems to eliminate the performance issues :)00:28
kevinbentongus: can your approach beat that?00:28
gusfwiw, privsep is about 20x faster than a simple exec of ip - and that's without adding the sudo and rootwrap (daemon or not) overhead.00:29
*** hitalia has quit IRC00:29
*** zhhuabj_ has quit IRC00:29
gusbut of course: correctness before performance.  privsep removes many classes of bug/exploit.00:29
kevinbentongus: impressive, what's the comm channel between the main proc? unix socket?00:30
gusyeah, unix socket.00:30
*** britthouser has quit IRC00:30
*** tkatarki has quit IRC00:31
gusbut the main wins (in both speed and safety) come from using netlink directly (via pyroute2) rather than exec'ing ip (and groping its output) all the time.00:32
*** vivek-ebay has joined #openstack-neutron00:32
kevinbentoni'm not sure how i feel about the phrase 'groping its output'00:32
kevinbentondoes pyroute2 use calls into a C library for that?00:33
gusI was intending to communicate just how horrible that form of programmatic interface is ;)00:33
*** pritesh has quit IRC00:33
gusno, its all python.  pyroute2 just opens a netlink socket via regular socket.socket(AF_NETLINK) and then does the netlink binary pack/unpack in python code.00:34
gusalmost all the messages we're sending are *tiny* so usually the communication is dwarfed by the ip exec overhead.00:34
*** marun has joined #openstack-neutron00:35
gus.. and the regex parsing of output.00:35
*** zhhuabj has joined #openstack-neutron00:35
*** botang has joined #openstack-neutron00:36
openstackgerritenikanorov proposed openstack/neutron: Add logging of agent heartbeats  https://review.openstack.org/18113200:36
kevinbentongus: excellent00:37
kevinbentongus: so do you have any issues that you've run into so far?00:37
kevinbentongus: or do you just need the ossg guys to rain on your parade?00:37
gusI did have to do a small amount of monkeypatching to get it to work with eventlet (the gift that keeps on giving) - since the python socket.socket class has various levels of magic that aren't applied equally to all address families.00:38
gus(now included in pyroute2 upstream)00:39
gusMy main remaining issues are migration, and the threat model.00:39
*** baoli has joined #openstack-neutron00:40
yamamotokevinbenton: hi00:40
*** tkatarki has joined #openstack-neutron00:40
gusCurrently we start with no privs, and use sudo to gain root whenever we need to.  The usual Unix model is the opposite: start with enough privs, and drop them when you no longer need them.00:40
kevinbentongus: why is migration even a concern?00:40
yamamotokevinbenton: thank you for writing ft for https://review.openstack.org/#/c/178037/00:40
kevinbentongus: what is there to migrate?00:40
*** jbell8 has joined #openstack-neutron00:40
kevinbentonyamamoto: hey00:41
kevinbentonyamamoto: no prob00:41
guskevinbenton: I'd *like* to use the Unix model (and it leads to simpler/safer code, and no sudo requirement), but that means we need to start with elevated privs which changes the deployment instructions.00:41
openstackgerritMerged openstack/python-neutronclient: Allow setting router's external ip(s)  https://review.openstack.org/18168200:42
guskevinbenton: Related to this is whether I can trust the initial python environment or not.00:42
kevinbentongus: i see00:43
guskevinbenton: A factor in the design of rootwrap was to use minimal imports because you basically can't trust anything you download from pypi.00:43
*** baoli has quit IRC00:43
kevinbentongus: but it would be compatible with an existing deployment since it's over privileged, right?00:43
kevinbentongus: sketchy python developers :)00:43
*** aranjan has quit IRC00:43
*** baoli has joined #openstack-neutron00:43
*** packet has joined #openstack-neutron00:44
kevinbentonhaleyb: ping00:45
guskevinbenton: the whole thing is built on sand.  There is no end-to-end verification (checksums/signatures) for pypi packages, you need to rely on all the mirrors authenticating each transfer leg correctly.  Upload is based entirely on HTTP basic auth with per-project standards for who is allowed to upload.00:45
guskevinbenton: It's common for python path to include some directories that your uid can write to.  etc, etc.00:45
kevinbentongus: yeah, what's the resolution order for that?00:46
kevinbentongus: what if someone puts something in their local path called 'os'00:46
kevinbentongus: their malicious lib in the unprivileged world could write that00:46
kevinbentongus: and then your daemon loads it up00:47
guskevinbenton: it doesn't really matter.  It's so easy to get _something_ to load, and then it can monkey patch anything and it's game over.00:47
gusAfaics, the only real way to build a "secure" python server is to have start from some trusted environment, and switch to a uid which can't write to any of that python path before handling untrusted data.00:48
kevinbentongus: yeah, i suppose you could write some logic that bails if 'os' doesn't come from a few known locations. then import os and check the privs of everything in sys.path and bail if anything there is writable to neutron user00:49
gusThe "trusted environment" can't come from pip, unless you manually review that environment first (but in practice I think people will have to overlook this part because there are few alternatives).00:49
*** dboik_ has quit IRC00:49
gusand if you're using pip, you need to run "pip install" as a 3rd user - because it might download and run *anything*.00:49
kevinbentongus: well most distros just re-package this stuff so nobody is installing from pip in the regular envs00:50
gusAn easy alternative is to just treat the whole thing as untrusted and sandbox the whole lot in a VM/container.  In which case any rootwrap/privsep/sudo distinction is meaningless.00:50
*** shashankhegde has quit IRC00:50
gusThat latter actually isn't so bad in practice.  You have genuinely unprivileged API servers, and the agents are assumed to own the entire machine they're running on anyway.00:51
kevinbentongus: yeah, i agree with that model as well00:51
*** dboik_ has joined #openstack-neutron00:52
gus.. But this is against the accepted rootwrap design tenants, so I'll have to fight uphill if I want to change those assumptions.00:52
*** jbell8 has quit IRC00:52
kevinbentongus: i didn't particularily understand the threat model for rootwrap to begin with00:53
gus.. Hence me working on migration stories.  Currently I have a version that starts the privileged piece via sudo+rootwrap, so it is a minimal change to deployment.00:53
*** diegows has quit IRC00:53
gusiproute does some nasty things with network namespaces that means we effectively need uid=0 anyway if we want to create/delete namespaces (rather than "just" CAP_SYS_ADMIN which is all that is theoretically required)00:54
gusBut so far it basically works.  I have regular rootwrap and privsep running side by side, so I can migrate code across piece by piece (most of ip_lib is done since that was an obvious target).00:56
*** ChanServ changes topic to "Discussion of OpenStack Networking || for support join #openstack"00:56
-openstackstatus- NOTICE: Gerrit has been downgraded to version 2.8 due to the issues observed today. Please report further problems in #openstack-infra.00:56
gusThe hard bit is testing frameworks because it has to be a separate process - and all the monkeypatching we do to capture logs, etc doesn't work.00:57
*** tobe has joined #openstack-neutron00:58
yamamotowhat's the canonical way to create a stable branch on networking-* repo?00:59
*** yalie1 has joined #openstack-neutron01:00
haleybkevinbenton: pong, it's my late night check-in...01:02
*** achanda has joined #openstack-neutron01:03
*** prad has quit IRC01:05
openstackgerritMerged openstack/neutron: Move test_get_user_allocation*returns_none test to a proper class  https://review.openstack.org/17744801:07
*** Marga_ has quit IRC01:07
openstackgerritIan Wienand proposed openstack/neutron: Ensure netfilter is enabled for bridges  https://review.openstack.org/18086701:07
*** achanda has quit IRC01:08
*** Networkn3rd has quit IRC01:10
*** ijw has joined #openstack-neutron01:11
openstackgerritRobert Kukura proposed openstack/neutron: Add unit tests for ML2 DVR port binding and fix PortContext inconsistencies  https://review.openstack.org/18213401:11
openstackgerritMaru Newby proposed openstack/neutron-vpnaas: Add neutron-vpnaas/tests/unit/extensions/__init__  https://review.openstack.org/18213501:11
spandhehi.. need some quick help.. how does this code trigger? https://github.com/openstack/neutron/blob/2014.2.1/neutron/api/v2/base.py#L371 Who triggers this notification flow?01:11
*** achanda has joined #openstack-neutron01:11
*** ijw has quit IRC01:14
*** ijw has joined #openstack-neutron01:14
*** botang has quit IRC01:16
*** banix has quit IRC01:17
*** enikanorov2 has quit IRC01:17
kevinbentonhaleyb: yo, still there?01:17
*** banix has joined #openstack-neutron01:17
haleybkevinbenton: yeah, still here01:18
*** amuller has joined #openstack-neutron01:18
*** amuller has quit IRC01:18
*** ijw has quit IRC01:19
kevinbentonhaleyb: have you had much luck looking at the iptables apply code for bootup? I was going to look into at least getting the agent to wait to mark the port status as up until it's done01:19
kevinbentonnot bootup*01:19
kevinbentonport wiring01:19
*** dboik_ has quit IRC01:19
haleybkevinbenton: i haven't thought much about that, but do have other iptables issues on my plate, like general slowness with large sets01:20
kevinbentonhaleyb: ok, i just wanted to make sure i wasn't stepping on your toes too much by deferring the status change until initial wiring is done01:21
*** botang has joined #openstack-neutron01:21
hanzhangkevinbenton: I do not find why this tempest can https://github.com/openstack/tempest/blob/master/tempest/scenario/test_security_groups_basic_ops.py#L463 pass01:21
*** leenheer has joined #openstack-neutron01:21
*** tiswanso has joined #openstack-neutron01:22
kevinbentonhanzhang: perhaps it's a timing issue. have you tried running it locally and adding some sleep statements to make it as slow as a person?01:22
haleybkevinbenton: no, have it at it, will be glad tor review01:22
*** leenheer has left #openstack-neutron01:23
kevinbentonhaleyb: ok. i had wanted to look at it now because it's similar to this patch i was working on to stop the port from going active if the DHCP agent wasn't done https://review.openstack.org/#/c/181674/01:23
*** tiswanso_ has joined #openstack-neutron01:24
hanzhangok, I will try it locallly01:25
*** shashankhegde has joined #openstack-neutron01:25
*** erkules_ has joined #openstack-neutron01:25
*** tiswanso has quit IRC01:27
*** erkules has quit IRC01:28
*** _cjones_ has quit IRC01:28
haleybkevinbenton: we had seen some slowness w/dhcp here recently, but most was attributed to the printing of records inside the loop that builds the hosts file, but any speedup is good, notification good too01:29
* haleyb adds the review to his queue01:29
*** shashankhegde has quit IRC01:31
openstackgerritSridhar Ramaswamy proposed openstack/neutron-specs: Add Dynamic Multipoint VPN to Neutron VPNaaS  https://review.openstack.org/18156301:34
*** jbell8 has joined #openstack-neutron01:34
*** zhhuabj has quit IRC01:34
*** sthillma has quit IRC01:35
*** britthou_ has quit IRC01:37
*** padkrish has quit IRC01:40
*** zzzeek has quit IRC01:40
*** nlahouti1 has quit IRC01:40
*** padkrish has joined #openstack-neutron01:41
*** britthouser has joined #openstack-neutron01:41
*** britthouser has quit IRC01:41
*** popw has joined #openstack-neutron01:41
*** britthouser has joined #openstack-neutron01:41
*** padkrish has quit IRC01:42
*** padkrish has joined #openstack-neutron01:42
*** marun has quit IRC01:43
*** s3wong has quit IRC01:44
*** jbell8 has quit IRC01:44
*** sridhar_ram has quit IRC01:45
*** padkrish has quit IRC01:46
*** zhhuabj has joined #openstack-neutron01:46
*** botang has quit IRC01:48
*** baoli has quit IRC01:49
*** baoli has joined #openstack-neutron01:52
*** banix has quit IRC01:58
*** zhenguo has joined #openstack-neutron01:59
*** packet has quit IRC02:00
*** red_trela has joined #openstack-neutron02:02
*** botang has joined #openstack-neutron02:03
*** tkatarki has quit IRC02:04
*** gildub has quit IRC02:04
*** dboik has joined #openstack-neutron02:07
*** dboik has quit IRC02:07
*** achanda has quit IRC02:07
*** zhhuabj has quit IRC02:08
*** dboik has joined #openstack-neutron02:08
*** achanda has joined #openstack-neutron02:09
*** flwang has quit IRC02:15
*** sbalukoff has quit IRC02:16
*** apuimedo has quit IRC02:18
*** yasu_ has joined #openstack-neutron02:19
*** red_trela has quit IRC02:24
*** zhhuabj has joined #openstack-neutron02:24
*** gildub has joined #openstack-neutron02:25
*** flwang has joined #openstack-neutron02:29
*** mlavalle has quit IRC02:29
*** tkatarki has joined #openstack-neutron02:30
*** yamahata has quit IRC02:31
*** mlavalle has joined #openstack-neutron02:32
*** spandhe has quit IRC02:33
*** flwang has quit IRC02:36
*** banix has joined #openstack-neutron02:38
*** dims has quit IRC02:45
*** vivek-ebay has quit IRC02:45
*** packet has joined #openstack-neutron02:45
*** tkatarki has quit IRC02:46
*** packet has quit IRC02:47
HenryGyamamoto: you can check with sambetts, he went through the process02:48
*** vivek-ebay has joined #openstack-neutron02:48
yamamotoHenryG: about stable branch creation?  thank you02:49
*** flwang has joined #openstack-neutron02:49
HenryGyamamoto: yes. Although I think he is not up yet (UK time zone)02:49
*** ivar-laz_ has joined #openstack-neutron02:51
*** ivar-laz_ has quit IRC02:52
HenryGyamamoto: this was part of it: https://review.openstack.org/17672402:53
*** flwang has quit IRC02:55
yamamotoHenryG: do you know why it isn't necessary for eg. neutron.config?02:55
*** ivar-lazzaro has quit IRC02:55
HenryGyamamoto: sorry, no idea02:55
HenryGyamamoto: maybe ask in the -infra channel02:56
yamamotoHenryG: good idea.  thank you!02:56
*** julim has joined #openstack-neutron02:57
*** baoli has quit IRC03:02
*** oomichi has quit IRC03:03
*** flwang1 has joined #openstack-neutron03:08
openstackgerritshihanzhang proposed openstack/neutron: Allow updating port 'binding:host_id' be None  https://review.openstack.org/18186703:09
*** hanzhang has quit IRC03:10
*** hanzhang has joined #openstack-neutron03:10
*** baoli has joined #openstack-neutron03:12
*** tflynn has joined #openstack-neutron03:13
*** peterstac has quit IRC03:16
*** avico has quit IRC03:17
*** xianghui_ has quit IRC03:17
*** mplex has quit IRC03:17
*** xianghui has joined #openstack-neutron03:18
*** mplex has joined #openstack-neutron03:19
*** mplex has joined #openstack-neutron03:19
*** avico has joined #openstack-neutron03:19
*** peterstac has joined #openstack-neutron03:19
*** tflynn_ has joined #openstack-neutron03:23
*** tiswanso_ has quit IRC03:25
*** tflynn has quit IRC03:26
*** fedexo has joined #openstack-neutron03:28
*** yeungp has quit IRC03:28
*** baoli has quit IRC03:28
*** sbalukoff has joined #openstack-neutron03:29
*** tflynn_ has quit IRC03:29
*** amotoki_ has joined #openstack-neutron03:30
*** shwetaap has joined #openstack-neutron03:32
*** tflynn has joined #openstack-neutron03:34
*** yamahata has joined #openstack-neutron03:40
*** vivek-ebay has quit IRC03:40
*** watanabe_isao has quit IRC03:42
*** mlavalle has quit IRC03:46
openstackgerritYAMAMOTO Takashi proposed openstack/neutron: OVS-agent: Introduce Ryu based OpenFlow implementation  https://review.openstack.org/15394603:48
openstackgerritYAMAMOTO Takashi proposed openstack/neutron: OVS-agent: Separate ovs-ofctl using code as a driver  https://review.openstack.org/16024503:48
*** mlavalle has joined #openstack-neutron03:56
*** ijw has joined #openstack-neutron03:56
*** ijw_ has joined #openstack-neutron03:58
*** watanabe_isao has joined #openstack-neutron03:58
*** dave-mccowan has quit IRC03:59
*** ijw has quit IRC04:01
*** mlavalle has quit IRC04:01
*** ijw_ has quit IRC04:02
*** trinaths has joined #openstack-neutron04:05
*** mlavalle has joined #openstack-neutron04:06
*** banix has quit IRC04:09
*** spandhe has joined #openstack-neutron04:11
*** spandhe_ has joined #openstack-neutron04:12
*** gildub_ has joined #openstack-neutron04:15
*** spandhe has quit IRC04:16
*** spandhe_ is now known as spandhe04:16
*** ajmiller has quit IRC04:17
*** nlahouti has joined #openstack-neutron04:19
*** stanzgy has joined #openstack-neutron04:19
*** tflynn has quit IRC04:19
*** tflynn has joined #openstack-neutron04:24
*** nlahouti has quit IRC04:24
*** nlahouti has joined #openstack-neutron04:24
*** flaviof has quit IRC04:28
*** _cjones_ has joined #openstack-neutron04:28
openstackgerritYAMAMOTO Takashi proposed openstack/neutron: l2pop UT: Reduce code duplication in migration tests  https://review.openstack.org/15818404:30
openstackgerritYAMAMOTO Takashi proposed openstack/neutron: test_ovs_neutron_agent: Remove useless ofport=10 arguments  https://review.openstack.org/15820804:31
*** aranjan has joined #openstack-neutron04:32
*** dims has joined #openstack-neutron04:33
*** _cjones_ has quit IRC04:33
*** Marga_ has joined #openstack-neutron04:36
*** Marga__ has joined #openstack-neutron04:37
*** sdake_ has quit IRC04:37
*** dims has quit IRC04:38
*** gridinv_ has joined #openstack-neutron04:38
*** anshul has joined #openstack-neutron04:40
*** jaypipes has quit IRC04:40
*** vivek-ebay has joined #openstack-neutron04:40
*** Marga_ has quit IRC04:41
*** vivek-ebay has quit IRC04:46
*** sthillma has joined #openstack-neutron04:46
*** red_trela has joined #openstack-neutron04:47
*** sthillma_ has joined #openstack-neutron04:47
*** sthillma has quit IRC04:50
*** shashankhegde has joined #openstack-neutron04:50
*** yasu_ has quit IRC04:52
*** tobe has quit IRC04:52
*** huwei_ has joined #openstack-neutron04:53
*** markvoelker has joined #openstack-neutron04:54
*** ijw has joined #openstack-neutron04:54
*** gridinv_ has quit IRC04:56
*** jaypipes has joined #openstack-neutron04:57
*** ekuris has joined #openstack-neutron04:57
openstackgerritYAMAMOTO Takashi proposed openstack/neutron: OVS-agent: Introduce Ryu based OpenFlow implementation  https://review.openstack.org/15394604:59
openstackgerritYAMAMOTO Takashi proposed openstack/neutron: OVS-agent: Separate ovs-ofctl using code as a driver  https://review.openstack.org/16024504:59
*** ijw has quit IRC05:00
*** yfried has quit IRC05:01
*** huwei_ has quit IRC05:03
*** nlahouti has quit IRC05:05
*** watanabe_isao has quit IRC05:07
*** mlavalle has quit IRC05:09
*** moshele has joined #openstack-neutron05:13
*** watanabe_isao has joined #openstack-neutron05:14
*** LeanReox has quit IRC05:15
*** tflynn has quit IRC05:19
*** tflynn has joined #openstack-neutron05:20
*** ijw has joined #openstack-neutron05:23
*** ijw_ has joined #openstack-neutron05:24
*** ijw has quit IRC05:28
*** ijw_ has quit IRC05:29
*** shwetaap has quit IRC05:32
*** armax has quit IRC05:34
*** itzikb has joined #openstack-neutron05:37
*** debedb has quit IRC05:38
*** debedb has joined #openstack-neutron05:39
*** moshele has quit IRC05:42
*** gsagie has quit IRC05:42
*** hichihara has quit IRC05:47
*** tidwellr has joined #openstack-neutron05:50
*** tidwellr has left #openstack-neutron05:50
*** gsagie has joined #openstack-neutron05:51
*** ijw has joined #openstack-neutron05:54
*** irenab has joined #openstack-neutron05:54
*** pece has joined #openstack-neutron05:56
*** evgenyf has joined #openstack-neutron05:56
*** ijw has quit IRC06:00
*** nyechiel has joined #openstack-neutron06:01
*** vthapar has joined #openstack-neutron06:02
*** tflynn has quit IRC06:03
*** tflynn has joined #openstack-neutron06:03
*** numan has joined #openstack-neutron06:04
*** ijw has joined #openstack-neutron06:05
*** Murali has joined #openstack-neutron06:09
*** ijw has quit IRC06:09
*** scheuran has joined #openstack-neutron06:14
*** markvoelker has quit IRC06:15
*** afazekas_ has joined #openstack-neutron06:16
openstackgerritYAMAMOTO Takashi proposed openstack/neutron: OVS-agent: Introduce Ryu based OpenFlow implementation  https://review.openstack.org/15394606:17
openstackgerritYAMAMOTO Takashi proposed openstack/neutron: OVS-agent: Separate ovs-ofctl using code as a driver  https://review.openstack.org/16024506:17
*** markvoelker has joined #openstack-neutron06:18
*** coolsvap|afk is now known as coolsvap06:18
*** tobe has joined #openstack-neutron06:19
*** coolsvap is now known as coolsvap|afk06:21
*** coolsvap|afk has quit IRC06:28
*** coolsvap has joined #openstack-neutron06:29
*** debedb has quit IRC06:30
*** hitalia has joined #openstack-neutron06:31
*** tflynn has quit IRC06:32
*** sdake_ has joined #openstack-neutron06:38
*** spandhe has quit IRC06:39
*** SridharG has joined #openstack-neutron06:45
*** Marga__ has quit IRC06:48
*** vthapar has quit IRC06:49
*** shashankhegde has quit IRC06:49
*** kiran-r has joined #openstack-neutron06:50
openstackgerritLynn Li proposed openstack/neutron: Provide snat dvr host name during FIP association with unbound port  https://review.openstack.org/17943906:50
*** SridharG has left #openstack-neutron06:51
*** ijw has joined #openstack-neutron06:54
*** aranjan has quit IRC06:55
*** safchain has joined #openstack-neutron06:55
*** kiran-r has quit IRC06:55
*** aranjan has joined #openstack-neutron06:55
*** criptoverso has joined #openstack-neutron06:56
*** matrohon has joined #openstack-neutron06:56
*** Bhavya has joined #openstack-neutron06:56
*** nmagnezi has joined #openstack-neutron06:57
*** vthapar has joined #openstack-neutron06:58
*** aranjan has quit IRC07:00
*** tobe43 has joined #openstack-neutron07:00
*** ijw has quit IRC07:00
*** jbell8 has joined #openstack-neutron07:02
*** anilvenkata has joined #openstack-neutron07:05
*** erkules_ is now known as erkules07:11
*** erkules has joined #openstack-neutron07:12
*** ronis has joined #openstack-neutron07:13
openstackgerritshihanzhang proposed openstack/neutron: Allow updating port 'binding:host_id' be None  https://review.openstack.org/18186707:22
*** sdake_ has quit IRC07:23
hanzhanghi all, who can help review this patch:https://review.openstack.org/#/c/181272/07:24
*** neeti has joined #openstack-neutron07:24
*** gildub has quit IRC07:24
openstackgerrityalei wang proposed openstack/neutron-specs: ML2: convert security-group and address-pairs into extension driver  https://review.openstack.org/16922307:28
*** jistr has joined #openstack-neutron07:33
*** yog__ has joined #openstack-neutron07:33
*** sthillma_ has quit IRC07:38
pavel_bondarHi! Inviting everyone to review refactored db_base_plugin to use pluggable IPAM: https://review.openstack.org//#/c/153236/07:41
*** jlanoux has joined #openstack-neutron07:46
*** vthapar has quit IRC07:47
*** red_trela has quit IRC07:49
*** red_trela has joined #openstack-neutron07:49
*** jpena has joined #openstack-neutron07:52
*** openstackstatus has quit IRC07:52
*** openstack has joined #openstack-neutron07:54
*** heyongli has quit IRC07:55
*** aranjan has joined #openstack-neutron07:56
*** vthapar has joined #openstack-neutron07:57
ccardI'm trying to set up keystone as a wsgi under apache in my OpenStack installation, using TLS. This means that all the keystone endpoints are on https, and so anything talking to keystone must be able to validate certificates using a ca certificate. I am hitting a problem at the moment where e.g. the command "openstack network list" is failing because the neutron server is trying to authenticate to keystone and is failing because it can't validate07:58
ccardthe certificate. I can't see how to configure neutron in order to tell it about the ca certificate bundle, and I've also tried adding the ca cert bundle to the system bundle using the instructions here https://www.happyassassin.net/2015/01/14/trusting-additional-cas-in-fedora-rhel-centos-dont-append-to-etcpkitlscertsca-bundle-crt-or-etcpkitlscert-pem/, but with no luck. Any pointers as to how to get this working?07:58
*** red_trela has quit IRC07:59
*** txomon|fon has quit IRC07:59
*** aranjan has quit IRC08:01
*** ijw has quit IRC08:01
*** daneyon has quit IRC08:01
*** jbell8 has quit IRC08:03
*** yfried has joined #openstack-neutron08:05
*** yuanying has quit IRC08:07
*** Longgeek has joined #openstack-neutron08:09
openstackgerritMerged openstack/neutron: Two api tests for 'firewall insertion mode' feature  https://review.openstack.org/16585908:10
*** txomon|fon has joined #openstack-neutron08:13
*** SridharG has joined #openstack-neutron08:13
*** pask81 has joined #openstack-neutron08:16
*** kiran-r has joined #openstack-neutron08:18
*** atuvenie has joined #openstack-neutron08:18
*** ygbo has joined #openstack-neutron08:20
*** Longgeek has quit IRC08:22
*** achanda has quit IRC08:25
*** Longgeek has joined #openstack-neutron08:27
*** Longgeek has quit IRC08:29
*** slaweq has joined #openstack-neutron08:29
*** Longgeek has joined #openstack-neutron08:30
*** fedexo has quit IRC08:30
*** evgenyf has quit IRC08:30
*** ArchiFleKs has joined #openstack-neutron08:33
*** slaweq has quit IRC08:34
*** slaweq has joined #openstack-neutron08:35
*** moshele has joined #openstack-neutron08:40
*** criptoverso has quit IRC08:40
*** sudipto has joined #openstack-neutron08:41
*** Marga_ has joined #openstack-neutron08:42
*** watanabe_isao has quit IRC08:44
*** kawa2014 has joined #openstack-neutron08:44
*** lennyb has joined #openstack-neutron08:46
*** pal has joined #openstack-neutron08:49
*** hitalia has quit IRC08:49
*** ijw has joined #openstack-neutron08:54
*** aranjan has joined #openstack-neutron08:57
*** yfried is now known as yfried|afk08:57
ajoirenab, sc68cal , matrohon , aveiga , salv-orlando , I submitted a new version of the QoS spec yesterday08:58
ajowith the feedback I received08:58
matrohonajo : great!08:58
ajoI hope it slowly looks better, if you have time to review it again, I'd love to have something in good shape for the summit08:59
irenabajo: will review asap. Thanks.08:59
ajosummit is not the best place for looking into agreement, but it's a good place to check with the wider community if what we're proposing makes sense08:59
*** raildo has quit IRC09:00
*** ijw has quit IRC09:00
ajoirenab, I finally moved all the rules put/post/get into qos-rules, and looking into the cmdline tool argument thing now09:00
*** jlibosva has joined #openstack-neutron09:00
*** yfried|afk is now known as yfried09:01
irenabajo: I am concerned about extensability of the API to be flexible about rule types/parameters09:01
*** eezhova has joined #openstack-neutron09:02
*** aranjan has quit IRC09:02
ajoirenab: dictionaries are a "no-no"09:02
irenabajo: :-)09:03
ajoirenab the only way to extend will be adding new datamodels, but... now it's written with a single URI end09:04
ajoI hope that at least looks better09:04
*** yatin has joined #openstack-neutron09:04
irenabajo: I would consider what does it mean to add new rule type in some out of tree plugin implementation09:06
ajoirenab, yes, DB migrations are a missing piece for out of tree services, but it shouldn't be a stopper09:07
ajoif we finally wanted or needed to be out of tree09:07
irenabajo: agree09:08
ajoirenab: armax concerns were mainly about, design (we need to complicate the business logic to validate parameters & dicts), and that otherwise having an open dictionary opens vendors to include any random parameters.09:08
ajoin an ideal world, out of tree services/extensions should be able to manage their own tables & migrations09:11
*** aix has joined #openstack-neutron09:16
*** nfedotov has joined #openstack-neutron09:17
*** pask81 has quit IRC09:23
*** devvesa has joined #openstack-neutron09:26
*** yamamoto has quit IRC09:27
*** yamamoto has joined #openstack-neutron09:27
*** pask81 has joined #openstack-neutron09:29
*** tobe43 has quit IRC09:31
*** daneyon has joined #openstack-neutron09:31
*** yamamoto has quit IRC09:32
*** pask81 has quit IRC09:33
*** kiranr has joined #openstack-neutron09:37
*** claudiub has joined #openstack-neutron09:39
*** kiran-r has quit IRC09:40
openstackgerritElena Ezhova proposed openstack/neutron: Handle SIGHUP: neutron-server (multiprocess) and metadata agent  https://review.openstack.org/16173209:40
openstackgerritElena Ezhova proposed openstack/neutron: Handle SIGHUP: neutron-server (single process mode)  https://review.openstack.org/17090509:40
*** ZZelle_ has quit IRC09:42
*** ZZelle_ has joined #openstack-neutron09:42
openstackgerritMoshe Levi proposed openstack/neutron: mlnx MD: mlnx_direct removal  https://review.openstack.org/18167209:45
*** ihrachyshka has joined #openstack-neutron09:46
*** pask81 has joined #openstack-neutron09:46
*** zhhuabj has quit IRC09:47
openstackgerritElena Ezhova proposed openstack/neutron: Handle SIGHUP: neutron-server (multiprocess) and metadata agent  https://review.openstack.org/16173209:47
openstackgerritElena Ezhova proposed openstack/neutron: Handle SIGHUP: neutron-server (single process mode)  https://review.openstack.org/17090509:47
*** kiranr is now known as kiran-r09:50
*** aswadr has joined #openstack-neutron09:51
*** slaweq has quit IRC09:52
*** slaweq has joined #openstack-neutron09:52
*** ijw has joined #openstack-neutron09:54
*** kawa2014 has quit IRC09:55
*** kawa2014 has joined #openstack-neutron09:55
*** kiranr has joined #openstack-neutron09:56
*** ArchiFleKs has quit IRC09:57
*** ArchiFleKs has joined #openstack-neutron09:57
*** aranjan has joined #openstack-neutron09:57
*** kiran-r has quit IRC09:58
*** yamamoto has joined #openstack-neutron09:59
*** atuvenie_ has joined #openstack-neutron09:59
*** zhhuabj has joined #openstack-neutron10:00
*** ijw has quit IRC10:00
*** kiranr has quit IRC10:00
*** atuvenie has quit IRC10:01
*** Bhavya has quit IRC10:01
*** aranjan has quit IRC10:02
*** ArchiFleKs has quit IRC10:03
*** ArchiFleKs has joined #openstack-neutron10:03
*** txomon|fon has quit IRC10:03
*** yog__ has quit IRC10:07
*** yog__ has joined #openstack-neutron10:11
*** jlanoux_ has joined #openstack-neutron10:13
*** lazy_prince has joined #openstack-neutron10:14
*** jlanoux has quit IRC10:16
*** yfried is now known as yfried|afk10:18
*** txomon|fon has joined #openstack-neutron10:18
*** yfried|afk is now known as yfried10:23
*** lennyb has quit IRC10:26
*** kiran-r has joined #openstack-neutron10:27
ajoianw: ping10:29
ajoI was reviewing stable/juno .. stable/kilo config file changes10:29
*** kawa2014 has quit IRC10:29
ajoand I found the MTU stuff, are the config settings already working in the openvswitch-agent & l3-agent contexts , or that is yet to be done in liberty?10:29
*** jlanoux has joined #openstack-neutron10:29
*** kawa2014 has joined #openstack-neutron10:30
*** yalie1 has quit IRC10:30
ajoI wanted to confirm before trying to play with them :)10:30
*** jsheeren has joined #openstack-neutron10:30
*** yalie has joined #openstack-neutron10:31
*** jlanoux_ has quit IRC10:32
*** yalie has quit IRC10:32
*** dims has joined #openstack-neutron10:33
*** moshele has quit IRC10:33
*** yfried is now known as yfried|afk10:34
*** yamahata has quit IRC10:35
*** moshele has joined #openstack-neutron10:35
openstackgerritMerged openstack/neutron: Remove H305 from tox.ini pep8 ignore list  https://review.openstack.org/18190410:36
*** kiran-r has quit IRC10:37
*** stanzgy has quit IRC10:37
*** yfried|afk is now known as yfried10:38
sambettsyamamoto: Did you manage to find a guide to managing stable branches on the networking-* repos?10:40
*** jlanoux_ has joined #openstack-neutron10:40
*** kiran-r has joined #openstack-neutron10:41
*** jlanoux has quit IRC10:43
yamamotosambetts: hi10:47
*** pc_m has joined #openstack-neutron10:47
yamamotosambetts: i asked infra folk10:48
yamamotosambetts: and get "create" permission patch merged https://review.openstack.org/#/c/182144/10:48
yamamotosambetts: and now looking for a way to actually create a branch :)10:49
sambettsyamamoto: You have to use the gerrit web interface, this guide explains a lot about it http://docs.openstack.org/infra/manual/drivers.html10:49
yamamotosambetts: according to the infra guy, http://docs.openstack.org/infra/manual/drivers.html#release-management is a bit outdated10:50
sambettsyamamoto: In the gerrit interface you go to Projects -> List, and find your project -> Branches then you should be able to create the branch once your patch has merged10:50
yamamotosambetts: this?  https://review.openstack.org/#/admin/projects/stackforge/networking-ofagent,branches10:51
sambettsyamamoto: Yup, if you have the permissons to create a branch you should see a form under the list of branches10:51
*** coolsvap is now known as coolsvap|afk10:52
yamamotosambetts: i don't see any forms.  will the permisson be immediately effective after the patch is merged, or can it take some time?10:53
*** yfried is now known as yfried|afk10:54
*** ijw has joined #openstack-neutron10:54
*** ildikov has joined #openstack-neutron10:55
sambettsyamamoto: It should look like this http://imgur.com/GBjgWf0 , as far as I could tell it was pretty much instantly avaliable after merge10:55
yamamotosambetts: i don't have edit boxes and the button.  i guess i need to ask infra folks again.  thank you!10:57
*** yfried|afk is now known as yfried10:57
sambettsyamamoto: Yeah thats really odd :/ if you need any other help with it feel free to ping me again :)10:58
*** aranjan has joined #openstack-neutron10:58
*** ijw has quit IRC11:01
*** andyhky has quit IRC11:01
*** atuvenie__ has joined #openstack-neutron11:01
amotoki_yamamoto: It seems "create" permission has not been applied yet.11:02
amotoki_https://review.openstack.org/#/admin/projects/stackforge/networking-ofagent,access11:02
yamamotoamotoki_: yea11:02
*** aranjan has quit IRC11:03
amotoki_yamamoto: from my experience, it didn't take much time after the patch was merged as sambetts says.11:03
*** links has joined #openstack-neutron11:04
*** atuvenie_ has quit IRC11:04
openstackgerritCedric Brandily proposed openstack/neutron: Ensure non-overlapping cidrs in subnetpools without galera  https://review.openstack.org/17995511:09
*** anshul has quit IRC11:10
*** pal has quit IRC11:12
*** stanzgy_ has quit IRC11:14
*** stanzgy_ has joined #openstack-neutron11:14
*** dguitarbite has joined #openstack-neutron11:15
openstackgerritSam Betts proposed openstack/neutron: Make l3 agent prefix delegation pluggable  https://review.openstack.org/17627211:17
ianwajo: i think i'm not the ianw you're looking for :)11:17
ajohmmm11:17
ajono, you're not :D11:17
ajosorry ianw  ;)11:18
*** beagles has quit IRC11:19
openstackgerritMerged openstack/neutron: Support BP:ipv6-router in Neutron HA Router  https://review.openstack.org/17320611:21
*** pask81 has quit IRC11:21
*** blues-man has joined #openstack-neutron11:24
*** anshul has joined #openstack-neutron11:30
*** blues-man has quit IRC11:32
*** evgenyf has joined #openstack-neutron11:33
*** hareeshp has joined #openstack-neutron11:34
*** marrusl has joined #openstack-neutron11:35
*** Bhavya has joined #openstack-neutron11:38
*** pask81 has joined #openstack-neutron11:38
openstackgerritIhar Hrachyshka proposed openstack/neutron: tests: don't allow oslo.config to autodiscover config files  https://review.openstack.org/17235411:44
openstackgerritMerged openstack/neutron: Make it clear the rfe tag is lower-case  https://review.openstack.org/18201711:44
openstackgerritMerged openstack/neutron: l2pop UT: Reduce code duplication in migration tests  https://review.openstack.org/15818411:44
*** jistr is now known as jistr|class11:46
*** jistr|class is now known as jistr11:47
*** jistr is now known as jistr|class11:50
*** ijw has joined #openstack-neutron11:54
*** Bhavya has quit IRC11:55
*** pask81 has quit IRC11:55
*** pask81 has joined #openstack-neutron11:56
*** jistr|class is now known as jistr11:57
*** roeyc has joined #openstack-neutron11:58
*** trinaths has quit IRC11:58
*** aranjan has joined #openstack-neutron11:59
*** pask81 has quit IRC12:00
*** ijw has quit IRC12:00
*** harmw has joined #openstack-neutron12:01
anilvenkatapc_m: Hi Paul Michali12:01
*** yamamoto has quit IRC12:01
*** ildikov has quit IRC12:02
*** harmw has quit IRC12:02
pc_manilvenkata: hi12:02
*** harmw has joined #openstack-neutron12:02
anilvenkatapc_m:  do you have some time? This is regarding action item in previous vpnaas meeting - "*Swan can support multiple local CIDRs."12:02
*** dims_ has joined #openstack-neutron12:03
pc_myeah, can spend some time.12:03
*** aranjan has quit IRC12:04
anilvenkatapc_m: what exactly I have to look into, mean the requirement12:04
anilvenkatapc_m: http://eavesdrop.openstack.org/meetings/vpnaas/2015/vpnaas.2015-05-05-16.01.log.html12:05
pc_manilvenkata: I think the question was... does OpenSwan and StrongSwan allow the user to specify multiple left? side CIDRs for a IPSec connection? We know that there can be multiple subnet CIDRs specified on the peer side. Can the same be support by *Swan on the local end?12:06
*** dims has quit IRC12:06
openstackgerritshihanzhang proposed openstack/neutron: setup port filters when sg rules change  https://review.openstack.org/18127212:08
anilvenkatapc_m you mean multiple local private subnets?12:08
pc_mThat's the basic question and then the follow on to that is whether or not mixed v4/v6 CIDRs can be provided as well.12:08
pc_myes12:08
pc_m(maybe it was IP and not CIDR)12:09
anilvenkatabut we are creating vpn-service with subnet-id, so we can have only one local private subnet per vpnservice, right12:09
pc_manilvenkata: This is on the connection.12:09
pc_manilvenkata: When a connection is created, you can specify 1+ peer subnets, but there is no facility to specify additional local private subnets.12:10
anilvenkatathat is because connections are part of vpnservice and each vpnservice will suport only one subnet CIDR12:10
anilvenkataso all connections in that vpnservice should use same left subnet CIDR12:11
pc_manilvenkata: Are you saying that is a limitation/requirement of *Swan?12:11
pc_min "each vpnservice will suport only one subnet CIDR"12:12
anilvenkatayes in existing vpnaas, it is not limitation in *Swan12:12
anilvenkatawe are creating this limitation in vpnaas12:12
pc_manilvenkata: How so?12:13
pc_manilvenkata: The service is associated with a router, and not a subnet.12:13
pc_manilvenkata: Can't we have a router, with two private subnets?12:13
anilvenkatapc_m: as during vpn service create we have the command like "neutron vpn-service-create router1 subnet-id"12:14
anilvenkatapc_m: yes router can support multiple subnets at same time12:14
anilvenkatasee for example this command12:15
anilvenkataneutron vpn-service-create --name myvpn --description "My vpn service" router1 mysubnet12:15
*** raildo has joined #openstack-neutron12:15
anilvenkatafrom https://wiki.openstack.org/wiki/Neutron/VPNaaS/HowToInstall12:15
anilvenkatapc_m: ^12:15
*** jsheeren has quit IRC12:15
pc_manilvenkata: Right, but the service is associated with the router and not with the subnet, AFAIK12:15
*** fkobzik has joined #openstack-neutron12:16
anilvenkataneutron vpn-service-create ROUTER SUBNET12:16
pc_manilvenkata: IOW, there is a 1:1 between service and router. I don't recall any restriction on the number of subnets. Do you see if there is a restriction and if so, where?12:16
*** aix has quit IRC12:17
*** ildikov has joined #openstack-neutron12:17
anilvenkataI didn't check that, I will see the api and implementation, atleast the service should support all the subnets in that router, do u agree with this12:18
*** hareeshp has quit IRC12:18
pc_manilvenkata: Even though the subnet is specified in the service command, I don't recall there being any relationship that requires the subnet. When you look at the code, everything is gated on the router (or router id).12:19
anilvenkataand the vpn-service-create should accept one more subnets as input that belong that router12:20
pc_manilvenkata: I think theoretically, one can have >1 subnet on the local side. The question is whether or not *swan would support multiples on the left side.12:20
anilvenkatapc_m: openswan and libreswan supports12:21
anilvenkatathey have "leftsubnets" field, which has to be used instead of "leftsubnet"12:21
anilvenkatapc_m: but strongswan doesn't support this field12:21
pc_manilvenkata: I guess the first question was whether or not *swan supported multiple subnets. The second is whether different IP versions could be supported in that case or whether they all have to be the same (for a connection)12:21
raornhi, everyone12:22
pc_manilvenkata: Then the final question is whether or not VPNaaS should be enhanced to support that capability (>1 subnets on local side)12:22
raorncan someone enlight me about neutron databases?12:22
ZZelle_raorn, hi12:23
anilvenkatapc_m: I think vpnaas should be enhanced, instead of using multiple local subnets in a signle connection, we can have each subnet belonging to a router in each connection, in the ipsec.conf belonging to the router12:23
anilvenkatawhat do u think with this approach12:24
anilvenkatapc_m: ?12:24
raornpc_m: latest *swans do support multiple subnets. different ip versions are not supported, you need to create different connections for each ip version12:24
pc_manilvenkata: not sure i follow12:24
*** dave-mccowan has joined #openstack-neutron12:26
anilvenkataraorn: pc_m as "localsubnets" filed is not supported for *Swan(supported only in openswan/libreswan and not in strongswan), we can have each local cidr(belonging to that router) in a seperate connection id12:26
*** jpena is now known as jpena|lunch12:26
raornanilvenkata: isn't strongswan dead already?12:26
pc_mraorn: anilvenkata says StrongSwan doesn't have leftsubnets. Is there another config option for that.12:26
*** Longgeek has quit IRC12:26
*** moha_hunt has joined #openstack-neutron12:27
pc_mraorn: Strongswan is replacing OpenSwan12:27
*** Longgeek has joined #openstack-neutron12:27
raornoh... i thought it was libreswan12:27
pc_mraorn: AFAIK... StrongSwan replaces OpenSwan, the latter not support on Ubuntu 15.10+,  Libreswan is for Fedora, instead of OpenSwan.12:28
raornah, i see.12:28
*** sudipto has quit IRC12:28
*** aix has joined #openstack-neutron12:28
pc_manilvenkata: We should probably discuss all this in the VPNaaS meeting in 3.5 hours.12:28
hanzhangsalv-orlando: I have address this patch# https://review.openstack.org/#/c/181272/ as your comments, can you help to review it again?12:30
*** ijw has joined #openstack-neutron12:30
anilvenkatapc_m: sure I am talking about this one for supporting multiple local CIDR http://paste.openstack.org/show/220764/12:31
anilvenkataraorn: ^12:31
*** ijw_ has joined #openstack-neutron12:32
openstackgerritElena Ezhova proposed openstack/neutron: Sync service from oslo-incubator  https://review.openstack.org/17583412:33
*** rpothier has joined #openstack-neutron12:34
pc_manilvenkata: so multiple connections. That's supported currently. I think the point was to have a single connection that supports N:M subnets12:34
anilvenkatapc_m: raorn that is not possible with strongswan I guess as it doesn't support leftsubnets and rightsubnets fields12:35
*** ijw has quit IRC12:35
anilvenkataI didn't see anywhere in strongswan examples single connection that supports N:M subnets12:36
raorni'm not sure if this configuration works...12:36
*** nyechiel has quit IRC12:37
raorntho ipsec gateways exchange policy, and here we have two completely different policies for one pair of gateways...12:37
openstackgerritPavel Bondar proposed openstack/neutron: IPAM reference driver  https://review.openstack.org/15048512:37
*** ijw_ has quit IRC12:38
pc_manilvenkata: Can you look into strongswan to confirm that there is no support for multiple local subnets (and to maybe verify that openswan does support)?12:38
openstackgerritPavel Bondar proposed openstack/neutron: Implement IPAM Driver loader  https://review.openstack.org/14747912:38
*** Marga_ has quit IRC12:38
pc_manilvenkata: I'd like to discuss this at todays meeting and see if this is something that should move forward or be dropped (by the community).12:39
anilvenkatapc_m: raorn for openswan https://github.com/libreswan/libreswan/commit/26f19985d99144ab5888ca1c950e292d8b762438#diff-42ce80c89423f807b659ec19269b1af8R1512:39
anilvenkatapc_m: sure, we will discuss this in meeting, thanks Paul and raorn, I will check with strongswan team also12:40
*** dims_ has quit IRC12:40
raornhttps://lists.strongswan.org/pipermail/users/2013-November/005491.html12:40
pc_manilvenkata: Thanks.12:40
raorn"I think it is possible. you can use different pairs of leftid/rightid"12:40
anilvenkataraorn: that is for tunnels and not private subnets12:40
anilvenkataraorn: the question is whether we can support multiple subnets in same ipsec site connection12:41
pc_mraorn: on the left side12:41
*** atuvenie__ has quit IRC12:42
pc_mraorn: We know we can do this on the right side (at least with OSwan/LSwan, I hope with SSWan)12:42
*** dims has joined #openstack-neutron12:42
*** mestery has joined #openstack-neutron12:42
raornthis is the same config as http://paste.openstack.org/show/220764/12:43
*** banix has joined #openstack-neutron12:43
*** baoli has joined #openstack-neutron12:45
*** baoli has quit IRC12:45
raornso, about databases12:45
*** atuvenie__ has joined #openstack-neutron12:46
raornI want to make an extension for ML2 plugin, create new type and put it in completely different package. and I need to create some tables12:46
raornwhat's the easiest way to deal with migrations?12:47
*** baoli has joined #openstack-neutron12:48
*** merooney has joined #openstack-neutron12:48
sambettsHey, I'm running into an odd issue doing python setup.py develop with neutron, this is the error, does anyone know how to fix12:49
sambetts?12:49
sambettsraise TypeError, "dist must be a Distribution instance"12:49
sambettsTypeError: dist must be a Distribution instance12:49
*** ferest has joined #openstack-neutron12:49
*** baoli has quit IRC12:50
*** baoli has joined #openstack-neutron12:50
openstackgerritCedric Brandily proposed openstack/neutron: Always use BridgeDevice to manage linuxbridges  https://review.openstack.org/18156912:51
*** tiswanso has joined #openstack-neutron12:52
*** ijw has joined #openstack-neutron12:54
*** blues-man has joined #openstack-neutron12:54
*** amuller has joined #openstack-neutron12:55
*** ferest has quit IRC12:55
*** ArchiFleKs has quit IRC12:57
*** ArchiFleKs has joined #openstack-neutron12:57
*** ijw has quit IRC13:00
*** aranjan has joined #openstack-neutron13:00
*** vhoward has joined #openstack-neutron13:00
*** sdake has joined #openstack-neutron13:01
*** sdake_ has joined #openstack-neutron13:03
*** redbeard has joined #openstack-neutron13:03
*** jistr is now known as jistr|mtg13:04
*** aranjan has quit IRC13:04
*** tiswanso has quit IRC13:05
*** vhoward has left #openstack-neutron13:05
*** tkatarki has joined #openstack-neutron13:05
*** sdake has quit IRC13:06
*** kiran-r has quit IRC13:06
*** kbringard has joined #openstack-neutron13:07
*** ildikov has quit IRC13:07
anilvenkatapc_m: raorn strongswan doesn't support "leftsubnets" field, but it supports multiple subnets in "leftsubnet" for IKEv2 only https://wiki.strongswan.org/projects/strongswan/wiki/ConnSection13:08
anilvenkataIKEv2 supports multiple subnets separated by commas, IKEv1 only interprets the first subnet of such a definition,13:08
anilvenkata     unless the Cisco Unity extension plugin is enabled (available since 5.0.1).13:08
*** yatin has quit IRC13:09
openstackgerritBaodong (Robert) Li proposed openstack/neutron: Add VIF_DELETED notification event to Nova  https://review.openstack.org/17866613:13
openstackgerritBaodong (Robert) Li proposed openstack/neutron: Add VIF_DELETED notification event to Nova  https://review.openstack.org/17866613:15
*** sdake_ is now known as sdake13:18
*** hareeshp has joined #openstack-neutron13:19
*** banix has quit IRC13:19
*** pavel_bondar has quit IRC13:20
*** popw has quit IRC13:20
*** yamamoto has joined #openstack-neutron13:22
*** moha_hunt has quit IRC13:22
*** ildikov has joined #openstack-neutron13:23
*** hareeshp has quit IRC13:24
*** blues-man has quit IRC13:24
*** blues-man has joined #openstack-neutron13:24
*** banix has joined #openstack-neutron13:25
*** tiswanso has joined #openstack-neutron13:29
*** prad has joined #openstack-neutron13:29
*** criptoverso has joined #openstack-neutron13:32
*** zhenguo has quit IRC13:34
*** criptoverso has quit IRC13:34
*** annegentle has joined #openstack-neutron13:35
*** dboik has quit IRC13:35
*** merooney has quit IRC13:35
*** rushil has joined #openstack-neutron13:41
*** neeti has quit IRC13:41
*** merooney has joined #openstack-neutron13:43
*** links has quit IRC13:44
*** merooney has quit IRC13:44
*** jpena|lunch has quit IRC13:44
*** vhoward has joined #openstack-neutron13:46
*** asrangne has joined #openstack-neutron13:47
*** marrusl has quit IRC13:47
*** rushil has quit IRC13:47
*** marrusl has joined #openstack-neutron13:47
*** aswadr has quit IRC13:50
*** jpena|lunch has joined #openstack-neutron13:52
*** xek is now known as x3k13:52
*** atuvenie__ has quit IRC13:52
*** mestery has quit IRC13:53
*** markvoelker has quit IRC13:53
*** rook has quit IRC13:55
*** SridharG has left #openstack-neutron13:57
*** rook has joined #openstack-neutron13:58
*** dboik has joined #openstack-neutron13:58
*** numan has quit IRC13:58
*** banix has quit IRC14:00
*** aranjan has joined #openstack-neutron14:01
*** jprovazn has joined #openstack-neutron14:04
*** armax has joined #openstack-neutron14:05
*** ildikov has quit IRC14:05
*** aranjan has quit IRC14:05
*** SridharG has joined #openstack-neutron14:06
*** merooney has joined #openstack-neutron14:07
*** rossella_s has quit IRC14:08
*** julien_ZTE has joined #openstack-neutron14:08
*** rossella_s has joined #openstack-neutron14:09
*** shwetaap has joined #openstack-neutron14:11
*** ajmiller has joined #openstack-neutron14:11
*** Marga_ has joined #openstack-neutron14:11
*** StevenK has quit IRC14:12
*** tiagogomes_ has joined #openstack-neutron14:13
dhellmannmarkmcclain, salv-orlando, mestery: what are the chances you'll be able to look at this neutron client patch this week? I'm going to need a new release of neutron client that doesn't use the oslo namespace package to unblock other work on that project. https://review.openstack.org/#/c/180700/14:14
dhellmannI know this is a busy week, with summit prep14:14
openstackgerritSam Betts proposed openstack/neutron: Add an internal DHCPv6 agent for Prefix Delegation  https://review.openstack.org/16138114:15
*** zzzeek has joined #openstack-neutron14:15
*** rushil has joined #openstack-neutron14:16
*** smccully has joined #openstack-neutron14:16
*** _smccully has joined #openstack-neutron14:16
*** _smccully has quit IRC14:16
*** pavel_bondar has joined #openstack-neutron14:16
*** smccully has quit IRC14:16
*** Marga_ has quit IRC14:16
*** smccully has joined #openstack-neutron14:17
*** Marga_ has joined #openstack-neutron14:17
tiagogomes_Hi, I created a router to connected the tenenat network with the external network. However I couldn't ping the any of the router interfaces (both the external an tenant interface on the router) from a VM in the tenant network.  I created another tenant network and connected it to the same router. After doing so, I was able to ping the router interfaces. Is this the expected behaviour?14:18
*** claudiub has quit IRC14:18
HenryGihrachyshka: see https://review.openstack.org/180700 by dhellmann14:18
*** leggsy has joined #openstack-neutron14:18
ihrachyshkaHenryG, yeah, that's what I currently do :)14:18
*** hareeshp has joined #openstack-neutron14:20
dhellmannHenryG, ihrachyshka : thanks!14:20
leggsyhi everyone.  Anyone have experience with Juno and OpenDaylight?  Basically my vxlan tunnels are not being created…14:21
*** ildikov has joined #openstack-neutron14:21
*** annegentle has quit IRC14:21
*** annegentle has joined #openstack-neutron14:22
openstackgerritNir Magnezi proposed openstack/python-neutronclient: networks: allow --router:external=False/True syntax, again  https://review.openstack.org/18231314:23
*** hareeshp has quit IRC14:24
*** signed8bit has joined #openstack-neutron14:25
*** atuvenie__ has joined #openstack-neutron14:25
*** breitz has quit IRC14:28
HenryGihrachyshka: how about this one too, so we see less red from jenkins? https://review.openstack.org/18127714:28
*** breitz has joined #openstack-neutron14:28
openstackgerritPavel Bondar proposed openstack/neutron: Refactor db_base_plugin_v2.py to use new IPAM  https://review.openstack.org/15323614:29
*** devvesa has quit IRC14:29
openstackgerritPavel Bondar proposed openstack/neutron: Enable pluggable IPAM implementation by default  https://review.openstack.org/18102314:29
*** SridharG has quit IRC14:29
*** anilvenkata has quit IRC14:33
*** thedodd has joined #openstack-neutron14:34
*** jbell8 has joined #openstack-neutron14:34
*** aranjan has joined #openstack-neutron14:34
*** ekuris has quit IRC14:34
openstackgerritOpenStack Proposal Bot proposed openstack/python-neutronclient: Updated from global requirements  https://review.openstack.org/18123714:35
*** spandhe has joined #openstack-neutron14:37
*** jpena|lunch is now known as jpena14:37
*** pavel_bondar has quit IRC14:38
*** Murali has quit IRC14:38
*** spandhe_ has joined #openstack-neutron14:38
*** jistr|mtg is now known as jistr14:39
*** wwriverrat has quit IRC14:39
openstackgerritTerry Wilson proposed openstack/neutron: Add ovs to requirements.txt  https://review.openstack.org/17791814:39
*** merooney has quit IRC14:41
*** spandhe has quit IRC14:41
*** spandhe_ is now known as spandhe14:41
*** StevenK has joined #openstack-neutron14:42
*** emagana has joined #openstack-neutron14:42
*** aranjan_ has joined #openstack-neutron14:44
*** pavel_bondar has joined #openstack-neutron14:44
openstackgerritNir Magnezi proposed openstack/python-neutronclient: networks: allow --router:external=False/True syntax, again  https://review.openstack.org/18231314:45
*** aranjan has quit IRC14:47
*** vivek-ebay has joined #openstack-neutron14:49
*** sdake_ has joined #openstack-neutron14:49
*** jbell8 has quit IRC14:49
*** merooney has joined #openstack-neutron14:50
*** carl_baldwin has joined #openstack-neutron14:51
*** achanda has joined #openstack-neutron14:52
*** sdake has quit IRC14:52
*** pavel_bondar has quit IRC14:53
*** lazy_prince has quit IRC14:53
*** vivek-ebay has quit IRC14:53
*** yog__ has quit IRC14:54
*** jaypipes has quit IRC14:54
*** yeungp has joined #openstack-neutron14:54
openstackgerritTerry Wilson proposed openstack/neutron: Add ovs to requirements.txt  https://review.openstack.org/17791814:55
*** rwsu has joined #openstack-neutron14:59
*** mlavalle has joined #openstack-neutron15:00
*** merooney has quit IRC15:00
*** achanda has quit IRC15:01
*** alexpilotti has joined #openstack-neutron15:01
*** tflynn has joined #openstack-neutron15:02
*** vivek-ebay has joined #openstack-neutron15:02
*** merooney has joined #openstack-neutron15:03
*** anshul has quit IRC15:03
*** rushil_ has joined #openstack-neutron15:04
ihrachyshkaHenryG, it's a good piece, though six import should have been shuffled. do we want to respin for that?15:04
HenryGihrachyshka: are you sure? Why no complaint from hacking checks?15:05
ihrachyshkaHenryG, I don't know. MAYBE those checks are disabled, or were removed. I will do some git-eology15:06
*** zz_jgrimm is now known as jgrimm15:06
*** tflynn has quit IRC15:06
*** jbell8 has joined #openstack-neutron15:06
*** rushil has quit IRC15:06
HenryGihrachyshka: actually I believe the grouping never had a check, just alphabetical order in each manually created grouping15:07
ihrachyshkaHenryG, so it's controlled by H305, which is disabled (afaik jlibosva was going to reenable it)15:07
ihrachyshkaand also : https://review.openstack.org/#/c/106170/15:07
*** pavel_bondar has joined #openstack-neutron15:08
*** kiran-r has joined #openstack-neutron15:08
*** banix has joined #openstack-neutron15:08
ihrachyshkaHenryG, see jlibosva patch: https://review.openstack.org/#/c/181904/15:08
*** nihilifer has joined #openstack-neutron15:09
HenryGihrachyshka: thanks. So Cyril's patch will fail now after jlibosva's?15:10
ihrachyshkaHenryG, I'm currently checking just that15:10
*** kiranr has joined #openstack-neutron15:11
ihrachyshkaHenryG, it passes the check. though H305 was not relaxed to allow those mixes in. not sure whether we want to enforce it manually though.15:11
*** dane_leblanc has joined #openstack-neutron15:12
*** kiran-r has quit IRC15:13
*** lori|away is now known as lori15:13
*** banix has quit IRC15:13
*** Marga_ has quit IRC15:13
*** ronis has quit IRC15:14
*** aswadr has joined #openstack-neutron15:14
HenryGihrachyshka: Personally I feel this kind of check gets in the way of real work ;)15:14
*** daneyon_ has joined #openstack-neutron15:15
*** afazekas_ has quit IRC15:15
*** shashankhegde has joined #openstack-neutron15:15
*** crose has joined #openstack-neutron15:16
HenryGihrachyshka: How about leave the grouping to later? When someone enables the check they can at the same time fix all the transgressions.15:16
ihrachyshkaHenryG, totally reasonable perspective.15:17
ihrachyshkaHenryG, W+115:17
*** asrangne has quit IRC15:17
*** pask81 has joined #openstack-neutron15:17
ihrachyshkaI hope no one complains that the spec is not formally merged in15:18
*** daneyon has quit IRC15:18
*** slaweq has quit IRC15:18
*** pask81 has quit IRC15:18
*** leggsy has quit IRC15:18
*** nihilifer has quit IRC15:18
*** nmagnezi has quit IRC15:18
openstackgerritBaodong (Robert) Li proposed openstack/neutron: Add VIF_DELETED notification event to Nova  https://review.openstack.org/17866615:18
HenryGThe only reason for that is because Kyle is not working this week15:19
*** _cjones_ has joined #openstack-neutron15:19
*** aswadr has quit IRC15:20
*** hareeshp has joined #openstack-neutron15:20
*** andyhky has joined #openstack-neutron15:21
*** shakamunyi has joined #openstack-neutron15:22
*** barra204 has joined #openstack-neutron15:22
*** anilvenkata has joined #openstack-neutron15:25
*** dannywilson has joined #openstack-neutron15:25
*** krtaylor has quit IRC15:26
*** kiranr has quit IRC15:26
*** scheuran has quit IRC15:28
*** vthapar has quit IRC15:28
openstackgerritMiguel Angel Ajo proposed openstack/neutron-specs: ML2/OVS QoS support with bandwidth limiting  https://review.openstack.org/18234915:29
*** _cjones_ has quit IRC15:29
ajosalv-orlando, irenab , sc68cal , gsagie, aveiga  : https://review.openstack.org/18234915:29
*** _cjones_ has joined #openstack-neutron15:30
ajoIt's very thin, but I wanted the fire started ;)15:30
*** lazy_prince has joined #openstack-neutron15:31
*** dguitarbite has quit IRC15:31
*** sridhar_ram has joined #openstack-neutron15:31
*** annegentle has quit IRC15:32
irenabajo: thanks, will take a look asap15:32
aveigaajo: what irenab said :) I'll have a look, and thank you15:32
ajoirenab, aveiga thank you both ;)15:32
*** mchestr has joined #openstack-neutron15:33
*** julim has quit IRC15:33
*** yamahata has joined #openstack-neutron15:34
sc68calajo: thanks, will look15:36
ajosc68cal++15:36
ajo:)15:36
*** wwriverrat has joined #openstack-neutron15:36
*** yamahata has quit IRC15:36
*** yamahata has joined #openstack-neutron15:37
*** moshele has quit IRC15:37
*** krtaylor has joined #openstack-neutron15:38
raornI am making ML2 type/mach driver (outside of neutron tree, as separate package) and need some database tables. I can add db management script to my package, but how do I handle alembic stuff in this case?15:40
raorncan someone help me? I know nothing about sqlalchemy and its add-ons...15:41
*** Swami has joined #openstack-neutron15:42
openstackgerritRyan Tidwell proposed openstack/neutron: Block subnet create when a network hosts subnets allocated from different pools  https://review.openstack.org/18029915:42
*** banix has joined #openstack-neutron15:43
*** reed has joined #openstack-neutron15:43
*** madhu_ak has joined #openstack-neutron15:43
*** jbell8 has quit IRC15:44
sc68calajo: I'm going to probably push a patch to the qos api spec to fix the sphinx errors15:44
ajosc68cal, sure, thanks a lot15:44
*** wwriverrat has quit IRC15:45
*** jaypipes has joined #openstack-neutron15:45
*** moha_hunt has joined #openstack-neutron15:45
*** nihilifer has joined #openstack-neutron15:46
*** spandhe_ has joined #openstack-neutron15:47
*** vivek-ebay has quit IRC15:47
*** daneyon_ has quit IRC15:47
*** daneyon has joined #openstack-neutron15:48
*** spandhe has quit IRC15:49
*** spandhe_ is now known as spandhe15:49
*** links has joined #openstack-neutron15:50
*** jistr has quit IRC15:50
*** nihilifer has quit IRC15:50
*** itzikb has quit IRC15:53
*** pask81 has joined #openstack-neutron15:53
*** nyechiel has joined #openstack-neutron15:53
*** josecastroleon has quit IRC15:54
*** Marga_ has joined #openstack-neutron15:54
*** wwriverrat has joined #openstack-neutron15:54
*** redbeard has quit IRC15:55
*** tkatarki has quit IRC15:55
*** rushil_ has quit IRC15:56
*** merooney has quit IRC15:57
*** wwriverrat has left #openstack-neutron15:57
*** irenab has quit IRC15:57
*** mtreinish has quit IRC15:58
*** merooney has joined #openstack-neutron15:58
*** rushil has joined #openstack-neutron15:58
*** rwsu has quit IRC15:58
*** rwsu has joined #openstack-neutron15:58
*** mtreinish has joined #openstack-neutron16:00
*** tkatarki has joined #openstack-neutron16:00
*** Marga_ has quit IRC16:01
madhu_akhi there, I have a devstack instance running on my vm. When I need flavor framework, Is there any sort of extra installation work to be done? https://wiki.openstack.org/wiki/Neutron/FlavorFramework16:01
*** Marga_ has joined #openstack-neutron16:01
*** banix has quit IRC16:01
*** britthouser has quit IRC16:03
*** merooney has quit IRC16:03
*** nlahouti has joined #openstack-neutron16:04
*** thedodd has quit IRC16:04
*** britthouser has joined #openstack-neutron16:04
*** thedodd has joined #openstack-neutron16:04
*** jlanoux_ has quit IRC16:05
*** marun has joined #openstack-neutron16:06
*** ivar-lazzaro has joined #openstack-neutron16:07
*** sthillma has joined #openstack-neutron16:08
*** thedodd has quit IRC16:09
openstackgerritMerged openstack/neutron: Allow users to run 'tox -epy34'  https://review.openstack.org/18127716:09
*** pask81 has quit IRC16:10
openstackgerritAndy McGuigan proposed openstack/neutron-vpnaas: Make tox -e cover work and align across the board  https://review.openstack.org/18237016:10
*** ivar-lazzaro has quit IRC16:10
openstackgerritAndy McGuigan proposed openstack/neutron-fwaas: Make tox -e cover work and align across the board  https://review.openstack.org/18237116:10
*** safchain has quit IRC16:11
*** ivar-lazzaro has joined #openstack-neutron16:11
*** openstackgerrit_ has quit IRC16:11
*** ivar-lazzaro has quit IRC16:12
*** ivar-lazzaro has joined #openstack-neutron16:13
*** sthillma has quit IRC16:13
*** nyechiel has quit IRC16:13
*** nyechiel has joined #openstack-neutron16:14
*** vivek-ebay has joined #openstack-neutron16:14
*** spandhe_ has joined #openstack-neutron16:15
*** thedodd has joined #openstack-neutron16:16
*** nfedotov has quit IRC16:17
*** moshele has joined #openstack-neutron16:17
*** spandhe has quit IRC16:17
*** spandhe_ is now known as spandhe16:17
*** claudiub has joined #openstack-neutron16:18
ihrachyshkaHenryG, +A please: https://review.openstack.org/#/c/172354/ I needed to rebase to avoid some irrelevant gate failures on merge\16:19
*** ildikov has quit IRC16:19
*** moshele has quit IRC16:20
*** kawa2014 has quit IRC16:20
*** Marga_ has quit IRC16:21
*** Marga_ has joined #openstack-neutron16:22
*** ronis has joined #openstack-neutron16:22
*** spandhe has quit IRC16:24
*** slaweq has joined #openstack-neutron16:26
*** jlibosva has quit IRC16:28
*** Marga_ has quit IRC16:28
*** Marga_ has joined #openstack-neutron16:28
*** slaweq has quit IRC16:31
*** julim has joined #openstack-neutron16:31
*** dboik_ has joined #openstack-neutron16:31
*** tiswanso has quit IRC16:31
*** aduarte has joined #openstack-neutron16:31
*** rushil has quit IRC16:32
*** tiswanso_ has joined #openstack-neutron16:32
*** slaweq has joined #openstack-neutron16:32
*** dboik has quit IRC16:33
*** nijaba has quit IRC16:34
sambettsyamamoto: Have you had any more success setting up your branches?16:34
*** ivar-lazzaro has quit IRC16:34
madhu_akenikanorov: Hi, I am looking into this patch: https://review.openstack.org/#/c/139758. I wanted to test the flavor framework capabilities. That said, after pulling the latest devstack, and then pull this patch manually, restarting the neutron service will work?16:35
yamamotosambetts: no success16:35
*** afazekas_ has joined #openstack-neutron16:35
*** yamahata has quit IRC16:35
ihrachyshkaHenryG, hm, the latest py34 patch we merged results in an interesting breakage in RDO16:36
*** annegentle has joined #openstack-neutron16:36
sambettsyamamoto: Your access rights look like they have been set up now, https://review.openstack.org/#/admin/projects/stackforge/networking-ofagent,access16:37
ihrachyshkaHenryG, since it now patched neutron/__init__.py to depend on six library, and since we parse setup.cfg on setup.py call, and it imports neutron hacking hook, it crashes without python-six as build dep16:37
ihrachyshkahttp://trunk.rdoproject.org/centos70/96/09/96091cb976e5f858fcd53fb0798555020eac94b8_33cfff38/rpmbuild.log16:37
HenryGihrachyshka: ouch :(16:37
*** mestery has joined #openstack-neutron16:37
ihrachyshkaHenryG, well, it may be fine16:37
*** mestery has quit IRC16:38
yamamotosambetts: i haven't noticed it, thank you.  now i have "Create Branch" button, yay!16:38
*** claudiub has quit IRC16:38
HenryGihrachyshka: what is pbr trying to do?16:39
sambettsyamamoto: Yay! :D16:39
ihrachyshkazigo, any concerns adding python-six as build dep for neutron?16:39
*** evgenyf has quit IRC16:39
zigoihrachyshka: Version 1.9.0?16:39
ihrachyshkazigo, any16:39
zigo(for Kilo?)16:39
zigoSure, no problem.16:39
ihrachyshkaHenryG, I guess it tries to build a source tarball from git checkout we did in delorean16:40
zigoI don't mind any change if all (build-)dependencies are already in Debian.16:40
ihrachyshkaHenryG, maybe it's even relevant for git master chasers only16:40
zigoThe issue is always new dependencies which we need too fast: Debian FTP masters aren't that fast to approve new stuff.16:40
*** spandhe has joined #openstack-neutron16:41
*** evgenyf has joined #openstack-neutron16:41
*** claudiub has joined #openstack-neutron16:41
ihrachyshkazigo, ok. it's also not clear whether anyone is broken other than insane users who chase master (aka RDO)16:41
*** annegentle has quit IRC16:41
zigoAh ok.16:41
zigoihrachyshka: FYI, I only package beta, rc, and official releases.16:42
*** nyechiel has quit IRC16:42
zigoSo, roughly, one new release each month.16:42
ihrachyshkazigo, yeah, I know. SANITY.16:42
zigo:)16:42
ihrachyshkazigo, we chase all HEADs for all branches.16:42
zigoThanks for doing the dirty work ... :P16:42
*** afazekas_ has quit IRC16:42
ihrachyshka(or that's the plan, we don't chase anything older than kilo for now)16:42
*** ygbo has quit IRC16:43
ihrachyshkazigo, yeah, that's the plan, catch breakages before Debian maintainers need to get involved!16:43
ihrachyshka... :)16:43
*** jpena has quit IRC16:43
zigo:D16:43
zigoihrachyshka: Are you involved in RDO packaging with Alan and Haikel ?16:43
*** slaweq has quit IRC16:43
ihrachyshkazigo, I'm mostly neutron guy plus some libraries and designate, but yeah, I'm involved in lots of discussions around it16:44
*** spandhe has quit IRC16:45
*** emagana has quit IRC16:48
*** julien_ZTE has quit IRC16:49
*** moha_hunt has quit IRC16:50
*** emagana has joined #openstack-neutron16:50
*** hitalia has joined #openstack-neutron16:54
*** yfried has quit IRC16:55
*** jlibosva has joined #openstack-neutron16:56
*** tkatarki has quit IRC16:58
*** banix has joined #openstack-neutron16:58
*** jschwarz has joined #openstack-neutron16:58
*** tkatarki has joined #openstack-neutron16:59
*** nmagnezi has joined #openstack-neutron17:00
sridhar_rampc_m: anilvenkata: ping17:02
*** emagana has quit IRC17:02
*** dboik_ has quit IRC17:02
*** mtreinish has quit IRC17:02
*** lazy_prince has quit IRC17:02
*** hareeshp has quit IRC17:02
*** stanzgy_ has quit IRC17:02
*** xianghui has quit IRC17:02
*** rkukura has quit IRC17:02
*** enikanorov has quit IRC17:02
*** jobewan has quit IRC17:02
*** chem has quit IRC17:02
*** wverdugo500 has quit IRC17:02
*** triggerz_ has quit IRC17:02
*** jesusaurus has quit IRC17:02
*** ptoohill has quit IRC17:02
*** jobewan_ has joined #openstack-neutron17:02
*** mtreinish_ has joined #openstack-neutron17:02
*** Guest25580 is now known as dan17:02
pc_msridhar_ram: hi17:02
*** chem has joined #openstack-neutron17:02
*** rkukura has joined #openstack-neutron17:02
*** triggerz has joined #openstack-neutron17:02
*** ptoohill has joined #openstack-neutron17:02
*** xianghui has joined #openstack-neutron17:02
*** stanzgy_ has joined #openstack-neutron17:02
*** mtreinish_ is now known as mtreinish17:02
*** emagana has joined #openstack-neutron17:02
*** roeyc has quit IRC17:02
*** dboik has joined #openstack-neutron17:02
*** yamahata has joined #openstack-neutron17:03
*** hareeshp has joined #openstack-neutron17:03
pc_msridhar_ram: anilvenkata: matrohon: The big question is whether or not it makes sense to try to support multiple subnets. thoughts?17:03
*** enikanorov has joined #openstack-neutron17:03
sridhar_rampc_m: i think it makes absolute sense17:03
*** wverdugo500 has joined #openstack-neutron17:03
*** merooney has joined #openstack-neutron17:03
*** jesusaurus has joined #openstack-neutron17:04
sridhar_ramthe alternate is to create one vpn-service per subnet and a separate ipsec connection17:04
*** yfauser has joined #openstack-neutron17:04
anilvenkatapc_m: router having multiple subnets is very common17:05
*** matrohon has quit IRC17:05
*** yfauser has left #openstack-neutron17:06
anilvenkataatleast we can support multiple subnets through muliple connections in a single vpnservice17:06
anilvenkatathis can be done with minor changes in api I think17:06
sridhar_ramhowever i think moving the subnet out of vpn-service is drastic17:06
sridhar_ramwe should consider enhance vpn-service to accept multiple subnets ..17:06
pc_myeah, we support x <--> a, x <--> a,b, but not x,y <--> a17:06
sridhar_ramyou can then chose to site-2-site connect them a ONE remote site17:07
sridhar_ramor you can chose to connect to into a DMVPN mesh17:07
sridhar_rampc_m: yep17:07
pc_msridhar_ram: That's another question, should the service be associated with multiple subnets (thus implying all VPN types support) or should it be left to the connection.17:07
*** xgerman has joined #openstack-neutron17:08
anilvenkatapc_m: IMO vpn-service should only take router17:08
* sridhar_ram thinking17:08
pc_msridhar_ram: IOW should BGP vpn, DM VPN, IPSec VPN all support.17:08
*** merooney has quit IRC17:09
pc_manilvenkata: Yeah, that is what I'm wondering17:09
anilvenkataipsec-site-connection will have local subnets and peer-cidr17:09
anilvenkatawe will have a validation in ipse-site-connection that all user provided local subnets should belong to the router(which is part of vpn-service)17:09
sridhar_rampc_m: then, vpn-service doesn't have anything else.. perhaps move router to the connection as well ? ;-)17:09
anilvenkatano17:10
anilvenkataipsec-site-connection will belong to vpn-serive17:10
anilvenkataipsec-site-connection will get router info(all subnets for validation) from vpn-service17:10
*** blues-man has quit IRC17:10
*** sdake has joined #openstack-neutron17:11
anilvenkatauser can only provide a desired local subnets(among all subnets router having) in ipsec-site-connection17:11
pc_msridhar_ram: I could see this several ways. A) service only knows about router, and individual connection types know about subnets. B) Service knows about subnets too and connection is just associated with service17:12
*** ivar-lazzaro has joined #openstack-neutron17:13
*** merooney has joined #openstack-neutron17:13
*** hareeshp has quit IRC17:13
*** links has quit IRC17:14
*** shashankhegde has quit IRC17:14
pc_msridhar_ram: anilvenkata: With A) I'm wondering what the effect of that is (why they initially added the subnet to service and why it may be needed at that level).17:14
sridhar_rampc_m: with (A) the value for vpn-service data-model is reduced17:14
*** sdake_ has quit IRC17:14
pc_msridhar_ram: anilvenkata: With B) I'm concerned that it may imply that all types of connections have to support multiple subnets.17:15
*** jschwarz has quit IRC17:15
*** anilvenkata has quit IRC17:15
sridhar_rampc_m: anilvenkata: unfortunately i got to go17:15
*** pask81 has joined #openstack-neutron17:15
*** zhhuabj has quit IRC17:16
pc_msridhar_ram: I'll try to post on ML...17:16
sridhar_rami think we should propose a spec .. and discuss this out. it seems it will rather simple to support in strongswan17:16
sridhar_ramand i don't fully understand why we need Cisco unity extension plugin for this effort17:17
pc_msridhar_ram: I think it is a good idea, just wondering about the details.17:17
*** rushil has joined #openstack-neutron17:17
pc_msridhar_ram: that is something with strongswan. For it to support multiple subnets in IKEv1, it needs that extension (whatever it is)17:17
*** pece has quit IRC17:17
*** Marga_ has quit IRC17:18
*** pece has joined #openstack-neutron17:18
sridhar_rampc_m: okay17:18
pc_mcertainly need more info.17:18
raornI am making ML2 type/mach driver (outside of neutron tree, as separate package) and need some database tables. I can add db management script to my package, but how do I handle alembic stuff in this case?17:18
raorncan someone enlight me? I know nothing about sqlalchemy and its add-ons...17:18
pc_msridhar_ram: I'll try a ML discussion to try to get this focused more and then a BP spec can be created once more is known.17:19
*** tiswanso_ has quit IRC17:19
*** nmagnezi has quit IRC17:20
*** tiswanso_ has joined #openstack-neutron17:21
*** harlowja has quit IRC17:22
*** harlowja has joined #openstack-neutron17:22
*** dane_leblanc has quit IRC17:23
*** vivek-ebay has quit IRC17:26
*** merooney_ has joined #openstack-neutron17:26
*** tiswanso_ has quit IRC17:26
*** tidwellr has joined #openstack-neutron17:26
*** s3wong has joined #openstack-neutron17:27
*** Marga_ has joined #openstack-neutron17:28
*** tiswanso has joined #openstack-neutron17:28
*** signed8bit is now known as signed8bit_ZZZzz17:29
openstackgerritMerged openstack/neutron: tests: don't allow oslo.config to autodiscover config files  https://review.openstack.org/17235417:29
*** merooney has quit IRC17:30
*** pask81 has quit IRC17:30
*** pask81 has joined #openstack-neutron17:30
*** achanda has joined #openstack-neutron17:30
*** anilvenkata has joined #openstack-neutron17:30
*** pc_m has quit IRC17:31
*** jlibosva has quit IRC17:31
*** LeanReox has joined #openstack-neutron17:31
*** dane_leblanc has joined #openstack-neutron17:33
*** vivek-ebay has joined #openstack-neutron17:34
*** s3wong has quit IRC17:36
*** annegentle has joined #openstack-neutron17:37
*** tflynn has joined #openstack-neutron17:37
*** tflynn has quit IRC17:37
*** s3wong has joined #openstack-neutron17:38
*** tflynn has joined #openstack-neutron17:38
*** tellesnobrega_ has joined #openstack-neutron17:38
*** tellesnobrega_ has left #openstack-neutron17:38
*** sc68cal has quit IRC17:38
*** sc68cal has joined #openstack-neutron17:39
*** sc68cal has quit IRC17:39
*** sc68cal has joined #openstack-neutron17:39
*** tflynn has quit IRC17:39
*** zhhuabj has joined #openstack-neutron17:42
*** annegentle has quit IRC17:42
*** atuvenie__ has quit IRC17:43
*** shashankhegde has joined #openstack-neutron17:44
*** tflynn has joined #openstack-neutron17:44
*** dboik has quit IRC17:45
*** dboik has joined #openstack-neutron17:46
*** claudiub has quit IRC17:46
*** chlong has quit IRC17:46
*** signed8bit_ZZZzz is now known as signed8bit17:47
*** pc_m has joined #openstack-neutron17:47
*** ihrachyshka has quit IRC17:51
*** jorgem has joined #openstack-neutron17:54
*** merooney_ has quit IRC17:55
*** nfedotov has joined #openstack-neutron17:55
*** moshele has joined #openstack-neutron17:55
*** tiswanso has quit IRC17:59
*** chlong has joined #openstack-neutron17:59
*** tiswanso has joined #openstack-neutron18:00
*** moha_hunt has joined #openstack-neutron18:01
*** ajmiller_ has joined #openstack-neutron18:01
*** padkrish has joined #openstack-neutron18:01
*** merooney has joined #openstack-neutron18:01
*** dboik_ has joined #openstack-neutron18:01
*** ajmiller has quit IRC18:03
*** dboik has quit IRC18:04
*** pritesh has joined #openstack-neutron18:08
*** absubram has joined #openstack-neutron18:09
*** yfauser has joined #openstack-neutron18:10
*** tidwellr has left #openstack-neutron18:10
*** yfauser has left #openstack-neutron18:12
*** amotoki_ has quit IRC18:15
*** nfedotov has quit IRC18:20
*** claudiub has joined #openstack-neutron18:22
*** anilvenkata has left #openstack-neutron18:25
openstackgerritMerged openstack/python-neutronclient: Updated from global requirements  https://review.openstack.org/18123718:26
*** itzikb has joined #openstack-neutron18:29
russellbHenryG: ping re: https://review.openstack.org/#/c/18127718:31
*** shivharis has joined #openstack-neutron18:31
*** vivek-ebay has quit IRC18:32
*** vivek-ebay has joined #openstack-neutron18:32
*** shivharis has quit IRC18:32
*** shivharis has joined #openstack-neutron18:32
*** nfedotov has joined #openstack-neutron18:33
*** shivharis has quit IRC18:34
*** shivharis has joined #openstack-neutron18:34
*** ivar-laz_ has joined #openstack-neutron18:35
*** shivharis has quit IRC18:36
*** shivharis has joined #openstack-neutron18:36
openstackgerritIla Palanisamy proposed openstack/neutron: manual add/remove router for dvr_snat agent  https://review.openstack.org/12202418:37
*** ivar-lazzaro has quit IRC18:37
*** julien_ZTE has joined #openstack-neutron18:38
*** sridhar_ram has quit IRC18:41
*** tidwellr has joined #openstack-neutron18:44
*** padkrish has quit IRC18:44
openstackgerritSwaminathan Vasudevan proposed openstack/neutron: Fix fip agent gateway port delete when migrating a fip  https://review.openstack.org/18040818:45
*** padkrish has joined #openstack-neutron18:45
*** slaweq has joined #openstack-neutron18:46
*** moshele has quit IRC18:47
*** shashankhegde has quit IRC18:47
*** rushil has quit IRC18:48
*** aduarte has quit IRC18:48
*** rushil has joined #openstack-neutron18:49
*** padkrish has quit IRC18:49
*** shashankhegde has joined #openstack-neutron18:50
*** afazekas_ has joined #openstack-neutron18:51
*** padkrish has joined #openstack-neutron18:52
HenryGrussellb: oh dear :(18:53
*** aranjan_ has quit IRC18:53
*** julien_ZTE has quit IRC18:53
russellbHenryG: I can't seem to actually reproduce locally, though18:53
russellbHenryG: just found the bug that pointed to that patch ... but i can't find why that would break it18:53
* russellb has an idea for a hack to test it in jenkins ...18:54
HenryGrussellb: is it because of this?  https://review.openstack.org/#/c/181277/4/neutron/__init__.py18:55
*** aranjan_ has joined #openstack-neutron18:55
russellbHenryG: could be, if six isn't available at that point18:55
*** yfried has joined #openstack-neutron18:57
russellbHenryG: will see what happens with this: https://review.openstack.org/#/c/182411/18:58
russellbHenryG: i pointed to a git repo of neutron + that patch reverted18:58
russellbHenryG: sorry to bug you, but you were +2 on it :-p18:58
russellbHenryG: yes, that fixes it.19:00
HenryGrussellb: ok19:00
HenryGrussellb: So revert until we figure out the right way?19:00
*** redbeard has joined #openstack-neutron19:00
*** Sukhdev has joined #openstack-neutron19:00
russellbHenryG: +1 proposing a revert now]19:00
*** jprovazn has quit IRC19:01
HenryGrussellb: thanks for being on top of this19:02
russellbnp19:02
openstackgerritRussell Bryant proposed openstack/neutron: Revert "Allow users to run 'tox -epy34'"  https://review.openstack.org/18241319:02
*** tiswanso has quit IRC19:02
russellbit blocked me, so i had to figure it out :)19:02
*** banix has quit IRC19:02
*** afazekas_ has quit IRC19:03
*** dboik_ has quit IRC19:03
HenryGlet's see who else is around...19:03
HenryGcarl_baldwin: ping19:03
*** dboik has joined #openstack-neutron19:04
carl_baldwinHenryG, pong19:05
*** banix has joined #openstack-neutron19:05
HenryGcarl_baldwin: need help with a revert ^^ by russellb19:05
*** ildikov has joined #openstack-neutron19:05
*** atuvenie has joined #openstack-neutron19:05
carl_baldwinHenryG, right, I had just pulled it up.  Looking...19:05
HenryGcarl_baldwin: the py34 thing broke stuff19:06
*** dguerri is now known as _dguerri19:06
*** merooney has quit IRC19:06
HenryGcarl_baldwin: So let's revert and the submitter can investigate the details19:07
carl_baldwinHenryG, I agree.  I'm just checking the revert for sanity quickly.19:07
*** merooney has joined #openstack-neutron19:07
russellbthanks ... i didn't really check it closely ... just "git revert"19:07
russellband didn't get conflicts19:07
HenryGcarl_baldwin: good idea, thanks19:07
*** SunnyRainbow has joined #openstack-neutron19:08
*** tiswanso has joined #openstack-neutron19:08
carl_baldwinrussellb, I like to replay reverts and cherry-picks locally and diff them against gerrit.  Usually, it is fine but sometimes I find a conflict that was incorrectly resolved or something.19:09
carl_baldwinrussellb, In this case, you're right no conflicts and I came up with the same patch locally.19:09
*** yog__ has joined #openstack-neutron19:09
russellbcool :)19:09
*** rushil has quit IRC19:10
HenryGcarl_baldwin: thanks!19:10
* HenryG is taking a break for about 45 minutes19:11
russellbHenryG: carl_baldwin thank you both!19:11
*** thurloat_isgone is now known as thurloat19:11
*** jorgem has quit IRC19:11
pc_mcarl_baldwin: hi19:13
carl_baldwinpc_m hi19:13
*** afazekas_ has joined #openstack-neutron19:13
pc_mcarl_baldwin: I'm seeing an odd issue with tox. Getting failure to install deps, throwing import error in pbr19:14
*** hareeshp has joined #openstack-neutron19:14
pc_mcarl_baldwin: for neutron.hooks.setup_hook (I'm in VPN repo)19:14
pc_mcarl_baldwin: Have you seen that?19:14
carl_baldwinpc_m, I haven't seen it yet but could it be related to russellb 's revert ^^ (just a wild guess)19:15
*** afazekas_ has quit IRC19:15
*** jorgem has joined #openstack-neutron19:15
pc_mIt just started happening about an hour ago in the VPN repo.19:15
russellbpc_m: carl_baldwin yes same bug19:15
russellbhttps://bugs.launchpad.net/neutron/+bug/145437219:15
openstackLaunchpad bug 1454372 in neutron "ImportError: neutron.hooks.setup_hook" [Undecided,In progress] - Assigned to Russell Bryant (russellb)19:15
pc_mrussellb: ah!19:15
*** afazekas_ has joined #openstack-neutron19:16
*** openstackgerrit_ has joined #openstack-neutron19:16
*** hitalia has quit IRC19:16
pc_mOK, so I could checkout the commit before the offending one, and have VPN repo use my local neutron repo to be able to proceed.19:17
pc_m:( This is second neutron change that has broken VPNaaS today...19:18
*** aix has quit IRC19:18
pc_mI'm frantically trying to get a fix in for VPN tests to get the tests running again.19:18
pc_mrussellb: carl_baldwin: thanks19:18
*** hareeshp has quit IRC19:18
pc_mcarl_baldwin: Do you still have +2 for VPN repo?19:19
carl_baldwinpc_m, when it rains it pours.  Sorry to hear.19:19
carl_baldwinpc_m, I'm not sure, I can check.19:19
* carl_baldwin thinks so19:19
*** rushil has joined #openstack-neutron19:19
*** evgenyf has quit IRC19:21
*** redbeard has quit IRC19:22
*** afazekas_ has quit IRC19:22
pc_mcarl_baldwin: If you get time, can you review https://review.openstack.org/#/c/168115/34? Trying to get the functional job for VPN updated to no longer run devstack (similar to what neutron does).19:23
*** openstackgerrit_ has quit IRC19:25
*** echirivella has joined #openstack-neutron19:25
*** aranjan_ has quit IRC19:29
*** itzikb has quit IRC19:29
*** annegentle has joined #openstack-neutron19:31
*** merooney_ has joined #openstack-neutron19:33
*** achanda has quit IRC19:33
*** shakamunyi has quit IRC19:35
*** merooney_ has quit IRC19:35
*** barra204 has quit IRC19:36
*** merooney_ has joined #openstack-neutron19:36
*** merooney has quit IRC19:36
*** hitalia has joined #openstack-neutron19:36
*** jbell8 has joined #openstack-neutron19:36
*** _dguerri is now known as dguerri19:38
*** thedodd has quit IRC19:38
*** thedodd has joined #openstack-neutron19:41
*** pask811 has joined #openstack-neutron19:41
*** atuvenie has quit IRC19:42
*** pask81 has quit IRC19:42
*** markvoelker has joined #openstack-neutron19:45
*** turul_ has joined #openstack-neutron19:46
*** botang has quit IRC19:47
*** botang has joined #openstack-neutron19:48
*** luqas__ has joined #openstack-neutron19:48
*** shakamunyi has joined #openstack-neutron19:50
*** barra204 has joined #openstack-neutron19:50
*** afazekas has quit IRC19:50
*** jbell8 has quit IRC19:50
*** madhu_ak_ has joined #openstack-neutron19:51
*** luqas has quit IRC19:51
*** nlahouti has quit IRC19:53
*** madhu_ak has quit IRC19:55
*** aduarte has joined #openstack-neutron19:56
*** claudiub|2 has joined #openstack-neutron19:57
*** redbeard has joined #openstack-neutron19:58
*** sridhar_ram has joined #openstack-neutron19:58
*** dboik_ has joined #openstack-neutron19:58
*** claudiub has quit IRC19:59
russellbcarl_baldwin: HenryG so this is fun ... the revert is blocked by the same bug it introduced.  This other patch should fix it though: https://review.openstack.org/#/c/18243320:01
*** dboik has quit IRC20:01
carl_baldwinrussellb, without looking too closely at the patch, why is it proposed against kilo first?20:03
russellbcarl_baldwin: no idea, that seems wrong.20:03
*** banix has quit IRC20:03
russellbcarl_baldwin: will re-propose...20:03
*** armax has quit IRC20:03
*** achanda has joined #openstack-neutron20:04
openstackgerritRussell Bryant proposed openstack/neutron: Update build hooks.  https://review.openstack.org/18243820:05
russellbcarl_baldwin: ^ though we'll see what jenkins has to say on that one ...20:06
*** merooney has joined #openstack-neutron20:06
* russellb does the broken gate dance20:06
*** sridhar_ram1 has joined #openstack-neutron20:06
*** madhu_ak_ is now known as madhu_ak20:06
*** jbell8 has joined #openstack-neutron20:07
*** sridhar_ram has quit IRC20:08
*** dboik_ has quit IRC20:09
*** merooney_ has quit IRC20:09
carl_baldwinrussellb, I don't really have my head wrapped around this stuff.  I don't feel qualified to vote on it at the moment.  Let's see what Jenkins has to say about it.20:09
*** dboik has joined #openstack-neutron20:10
*** jbell8 has quit IRC20:12
*** jbell8 has joined #openstack-neutron20:12
russellbcarl_baldwin: it is indeed magic20:13
carl_baldwinkevinbenton, ping20:16
kevinbentoncarl_baldwin: pong20:17
carl_baldwinhttps://review.openstack.org/#/c/180367/9/neutron/agent/linux/ip_lib.py20:17
*** thurloat is now known as thurloat_isgone20:17
*** marun has quit IRC20:17
*** nmagnezi has joined #openstack-neutron20:18
carl_baldwinkevinbenton, just wondering if you explicitly chose not to use utils.wait_until_true.20:18
*** slaweq has quit IRC20:18
*** wes__ has joined #openstack-neutron20:18
kevinbentoncarl_baldwin: no, i didn't know it existed20:19
kevinbentoncarl_baldwin: one sec. i'll update it20:19
*** slaweq has joined #openstack-neutron20:19
wes__Hello, I'm having an issue in Juno when I connect a router to a private tenant network, the dhcp service stops responding. Upon remove the router interface from the private network, the dhcp service seems to start working again in about a minute. Any ideas?20:20
kevinbentoncarl_baldwin: and i'm not going to adjust the system clock :)20:20
carl_baldwinkevinbenton, :P20:20
carl_baldwinkevinbenton, I hoped you'd know that I am kidding.20:20
wes__This is with Neutron / OVS20:20
*** jorgem has quit IRC20:21
kevinbentoncarl_baldwin: yeah :)20:21
*** wes__ has quit IRC20:21
*** wes__ has joined #openstack-neutron20:21
*** achanda has quit IRC20:21
*** nmagnezi has quit IRC20:26
*** jbell8 has quit IRC20:27
*** markvoelker has quit IRC20:30
*** nfedotov1 has joined #openstack-neutron20:31
*** matrohon has joined #openstack-neutron20:32
*** logan2 has quit IRC20:33
openstackgerritKevin Benton proposed openstack/neutron: Add capability to wait for IPv6 address in ip_lib  https://review.openstack.org/18036720:35
kevinbentoncarl_baldwin: ^^20:35
*** nfedotov has quit IRC20:35
kevinbentoncarl_baldwin: gross, i put another change in there, hang on a sec20:35
openstackgerritCarl Baldwin proposed openstack/neutron: Append @randtoken to L3 agent namespaces in full stack tests  https://review.openstack.org/17609320:36
*** achanda has joined #openstack-neutron20:36
carl_baldwinkevinbenton, I just caught that.  Thanks for not rebasing.20:36
*** shivharis has quit IRC20:37
*** openstackgerrit has quit IRC20:37
*** yfauser has joined #openstack-neutron20:37
*** yfauser has left #openstack-neutron20:37
*** openstackgerrit has joined #openstack-neutron20:37
*** julien_ZTE has joined #openstack-neutron20:38
kevinbentoncarl_baldwin: ok, fixed now20:38
carl_baldwinThanks.20:38
openstackgerritRussell Bryant proposed openstack/neutron: Update build hooks.  https://review.openstack.org/18243820:38
*** aranjan has joined #openstack-neutron20:39
*** aranjan has quit IRC20:39
*** aranjan has joined #openstack-neutron20:40
*** yog__ has quit IRC20:41
* HenryG returns to ... chaos?20:44
*** merooney has quit IRC20:45
*** slaweq has quit IRC20:46
HenryGrussellb: I am completely clueless on the build hooks patch :(20:46
russellbHenryG: heh, well let's see if we can get it passing first ... the first failure was a silly one.  if it's still busted we can bug lifeless about it20:47
lifelesshi o/20:48
*** mlavalle has quit IRC20:48
lifelessyeah, zuul seems a bit slow on kicking off the ,2 build20:48
lifelessthat todo pedanism is so wrong20:48
* lifeless gets off the soapbox20:48
*** ronis has quit IRC20:48
*** nlahouti has joined #openstack-neutron20:49
russellblifeless: yep, pretty annoying20:49
lifelessanyhow20:50
lifelessthe unittest tests passed20:50
lifelessso it looks like it does fix the thing20:50
lifelessHenryG: I can help you understand the hooks thing20:50
lifelessHenryG: just ask20:50
HenryGlifeless: let me read the commit msg a couple more times ...20:51
*** LeanReox has quit IRC20:51
*** marun has joined #openstack-neutron20:52
*** nfedotov1 has quit IRC20:53
HenryGlifeless: does neutron even support being easy installed? If so, who even uses that?20:53
lifelessHenryG: you may want to look at PEP 426, the bit called 'environment markers'20:53
lifelessHenryG: easy install happens when you call python setup.py $anything20:53
lifelessHenryG: because we use setuptools.20:53
lifelessHenryG: if any dependencies are missing, it then goes and downloads them without using proxies, SSL, or generally anything sane.20:54
openstackgerritAssaf Muller proposed openstack/neutron: Return early from RPC call handlers with no return value  https://review.openstack.org/18244920:54
lifelessHenryG: pip works only because it installs things before calling setup.py.20:54
lifelessHenryG: but - it can't tell what to install before calling setup.py until its called setup.py.20:54
lifelessHenryG: so there are two sets of deps: the setup.py deps, and the install deps.20:54
lifelessHenryG: the first set we can't avoid easy_install for: but what we can do (and do do ) is pre-install them, and because that list is stored globally in CI, it has to be small and static.20:55
lifelessHenryG: right now, its 'pbr' and 'setuptools' and 'pip' and thats it.20:55
lifelesssetup.py install would trigger easy_install of other runtime deps, but pip after doing 'setup.py egg_info' can read out the deps itself and install them before setup.py install is called.20:56
*** Longgeek has quit IRC20:56
HenryGlifeless: Thanks, I think I kind of understand. (But don't expect me to remember any of this next week.)21:00
*** Sukhdev has quit IRC21:00
lifelessHenryG: so what broke here is that 'import neutron' is something that has to work with only setup_requires21:01
*** armax has joined #openstack-neutron21:01
lifelessso anything in  neutron/__init__.py has to be in setup_requires, and six wasn't.21:01
lifelessthats why it broke21:01
*** madhu_ak has quit IRC21:02
lifelessbut the underlying cause of us trying to import it was the way that the win32 stuff had been laid in, which was procedural rather than declarative21:02
*** madhu_ak has joined #openstack-neutron21:03
*** tkatarki has quit IRC21:04
HenryGlifeless: and moving the win32 deps into setup.py means they get evaluated ... when?21:05
*** sridhar_ram1 has quit IRC21:07
lifelessHenryG: by pip when its introspecting the requirements21:07
russellb>_<21:07
russellblifeless: this is rev2 https://jenkins03.openstack.org/job/check-neutron-lbaas-dsvm-api/49/console21:07
russellblifeless: somehow i think we're completely wedged.21:07
lifelessHenryG: the ":<marker>" syntax is a little bit of a hack, - it becomes a regular install_requires, but only when <marker> evaluates true21:07
russellblifeless: that job is installing neutron-lbaas, which is using requirements.txt to install neutron from git (so it's not using the patch)21:08
russellbso we're just wedged.21:08
russellblifeless: i think we should just force-merge the revert that busted this21:08
russellberr, force merge the revert of the commit that busted this21:08
lifelessrussellb: or force merge my fix ?21:08
lifelessrussellb: since it fixed the unit tests...21:08
openstackgerritAssaf Muller proposed openstack/neutron: Return early from RPC call handlers with no return value  https://review.openstack.org/18244921:08
lifelessrussellb: but yes I agree.21:08
russellblifeless: or that, yes ... though a revert seems a little safer to force21:09
lifelessrussellb: also that job is broken conceptually, since it really shuld be using the ZUUL_REF21:09
russellbtotally agreed21:09
lifelessI really don't want to checkout the lbaas code out do I?21:09
*** redbeard has quit IRC21:10
*** annegentle has quit IRC21:10
* lifeless does so21:10
lifelessI fear what I'll find21:10
*** tiswanso has quit IRC21:11
*** amuller is now known as amuller_afk21:11
*** julien_ZTE has quit IRC21:12
*** pc_m has quit IRC21:16
russellbhttps://review.openstack.org/18245521:16
*** ajmiller__ has joined #openstack-neutron21:17
*** ijw has joined #openstack-neutron21:18
openstackgerritenikanorov proposed openstack/neutron: Expunge port object from session to avoid ObjectDeletedError  https://review.openstack.org/18245621:18
russellbdougwig: fyi, https://review.openstack.org/18245521:19
*** dboik_ has joined #openstack-neutron21:19
*** madhu_ak has quit IRC21:20
*** matrohon has quit IRC21:20
*** LeanReox has joined #openstack-neutron21:20
*** ajmiller_ has quit IRC21:21
*** madhu_ak has joined #openstack-neutron21:21
*** dboik has quit IRC21:22
*** dboik_ has quit IRC21:23
*** thurloat_isgone is now known as thurloat21:24
*** dane_leblanc has quit IRC21:24
*** chlong has quit IRC21:24
*** mlavalle has joined #openstack-neutron21:25
dougwigrussellb: thank you.21:25
*** rpothier has quit IRC21:26
russellbdougwig: np, sorry it came down to having to turn that off21:26
russellbbut wanted to give you a heads up21:27
*** absubram has quit IRC21:27
*** enikanorov2 has joined #openstack-neutron21:28
dougwigrussellb: no worries, you're right, it's testing the wrong neutron.21:28
russellbdougwig: i was completely confused as to how the broken patch merged in the first place for a while, but that's why21:28
*** Steap has joined #openstack-neutron21:29
dougwigahh, nuts, it went non-voting in both repos. let me see if i can update that quickly.21:29
russellbdougwig: sorry about that, was kind of working quickly21:29
*** SunnyRainbow has quit IRC21:30
russellbdougwig: since the broken patch broke a bunch of other jobs too, for networking-* repos21:30
*** rushil has quit IRC21:30
dougwigrussellb: no worries, i totally get it.21:30
*** emagana has quit IRC21:30
russellbk21:30
*** sridhar_ram has joined #openstack-neutron21:30
*** emagana has joined #openstack-neutron21:30
russellbsoftware is fun.21:30
russellband by fun i mean i'm about to rage quit for the day :)21:31
Steaphehe21:31
SteapI'm the author of the py34 patch21:31
Steapand I must say I feel the same way :)21:31
SteapSorry for breaking everything btw :)21:31
dougwigrussellb: i owe you a beer for leaving you that time bomb.21:31
russellbSteap: i'm sure, it's ok, it's easy to see how it happened now21:31
Steaprussellb: I must say I dont really get all teh details21:31
russellbdougwig: haha, i'll take a beer21:31
Steapthough I think that if the hook is removed, I might just be able to resubmit the patch ?21:31
russellbSteap: yes21:32
Steapok21:32
SteapThanks, I'll resubmit once all these new patches have been merged21:32
russellbSteap: the addition of six to neutron/__init__.py broke it, as the hook was running in some cases when dependencies had not been installed yet21:32
SteapI proposed a change to make the py34 gate voting though21:32
*** rushil has joined #openstack-neutron21:32
Steapand it has just been merged21:32
Steapso that might be an issue21:32
russellboh, well that's fun21:32
Steapsince this gate will be failing every single time if my patch is reverted21:32
Steapcan we remove the hook without reverting the patch ?21:33
Steapor will it not work ?21:33
* russellb thinks21:33
russellbif the lbaas job goes non-voting, i think merging the patch to remove the hook will restore happiness21:33
Steaphehe21:33
Steaplet's hope so21:33
Steaphttps://review.openstack.org/#/c/182439/ here is the patch that makes the py34 gate voting21:33
Steapjust got approved :/21:34
russellbSteap: i think i stopped it from merging21:34
russellbSteap: let's just let the dust settle a bit21:34
*** madhu_ak has quit IRC21:34
*** madhu_ak has joined #openstack-neutron21:35
Steaprussellb: ok21:36
russellbSteap: once either the hook removal patch merges, or the revert -> hook removal -> re-add of your py34 patch21:36
russellbthen this can probably be turned on ..21:36
Steapy21:36
Steapthe idea if to have both patches merged quickly21:36
Steapso nothing breaks before the gate is turned on21:37
* russellb nods21:37
*** dane_leblanc has joined #openstack-neutron21:37
russellbunderstandable, let's just repair what's broken first :)21:37
Steapy21:37
russellbi'm out for the day, i'll pick this up again in the morning21:39
HenryGrussellb: recheck on 182438 now?21:39
russellbHenryG: almost ... need https://review.openstack.org/182455 to be merged and take effect21:40
HenryGrussellb: it is merged, when does it take effect?21:40
*** hitalia has quit IRC21:40
russellbit's approved, but not merged yet21:41
* HenryG has too many tabs open, again21:41
HenryGrussellb: gotcha21:41
russellbpassed check, now in gate queue21:42
*** ijw has quit IRC21:42
*** hitalia has joined #openstack-neutron21:42
russellbi'm out ... thanks all21:42
*** salv-orlando has quit IRC21:42
HenryGrussellb: Thanks for everything today!21:42
russellbof course, happy to do my part21:43
*** padkrish has quit IRC21:43
*** padkrish has joined #openstack-neutron21:43
*** crose has quit IRC21:44
*** jobewan_ has quit IRC21:45
*** marrusl has quit IRC21:45
*** ildikov has quit IRC21:45
*** banix has joined #openstack-neutron21:46
*** jobewan has joined #openstack-neutron21:46
*** padkrish has quit IRC21:48
*** annegentle has joined #openstack-neutron21:50
*** dkehn has quit IRC21:50
*** fnaval has joined #openstack-neutron21:51
*** dkehn has joined #openstack-neutron21:52
*** ivar-laz_ has quit IRC21:54
*** ivar-lazzaro has joined #openstack-neutron21:54
*** jorgem has joined #openstack-neutron21:56
*** armax has quit IRC21:56
openstackgerritenikanorov proposed openstack/neutron: Add logging of agent heartbeats  https://review.openstack.org/18113221:57
*** mlavalle has quit IRC21:58
*** echirivella has quit IRC21:58
wes__Question: Should attaching a Neutron router to a private network change the OVS VLAN tag on the br-int for the qdhcp port?22:01
*** ildikov has joined #openstack-neutron22:01
wes__It seems that my installation is changing the tag from 10 to 7 when I attach a router, which breaks network connectivity. If I manually set the tag back to 10 on that port, things seem to work.22:02
*** Swami has quit IRC22:02
*** sridhar_ram has quit IRC22:05
*** Marga__ has joined #openstack-neutron22:09
*** rushil has quit IRC22:10
*** Marga_ has quit IRC22:10
*** moha_hunt has quit IRC22:11
HenryGlifeless: I have sent https://review.openstack.org/182438 off to the gate. I will check in on it later tonight.22:11
*** a_le has joined #openstack-neutron22:12
*** padkrish has joined #openstack-neutron22:13
lifelessHenryG: cool22:13
*** jaypipes has quit IRC22:13
*** a_le has quit IRC22:16
*** a_le has joined #openstack-neutron22:16
*** doude has quit IRC22:17
*** logan2 has joined #openstack-neutron22:18
*** pask811 has quit IRC22:19
*** enikanorov2 has quit IRC22:19
*** josecastroleon has joined #openstack-neutron22:23
*** signed8b_ has joined #openstack-neutron22:23
*** markvoelker has joined #openstack-neutron22:24
*** thedodd has quit IRC22:24
*** josecastroleon has quit IRC22:24
*** shwetaap has quit IRC22:25
*** signed8bit has quit IRC22:25
*** dims_ has joined #openstack-neutron22:28
*** jorgem has quit IRC22:28
*** botang has quit IRC22:29
*** sdake_ has joined #openstack-neutron22:29
*** dims has quit IRC22:30
*** padkrish has quit IRC22:31
*** botang has joined #openstack-neutron22:31
*** sdake has quit IRC22:33
*** padkrish has joined #openstack-neutron22:34
openstackgerritlifeless proposed openstack/neutron: Update build hooks.  https://review.openstack.org/18243822:34
*** kbringard has quit IRC22:36
*** padkrish_ has joined #openstack-neutron22:37
lifelessHenryG: I failed at gerrit before, and fixing it failed again - https://review.openstack.org/#/c/182438/ has lots its +2 (but not changed).22:37
lifelesserm +A22:37
lifelessSo any cores around? we need a +A on ^ urgently22:38
*** padkrish has quit IRC22:38
*** tidwellr has left #openstack-neutron22:40
*** salv-orlando has joined #openstack-neutron22:43
*** sdake has joined #openstack-neutron22:43
*** ihrachyshka has joined #openstack-neutron22:44
*** salv-orlando has quit IRC22:46
*** sdake_ has quit IRC22:46
*** pece has quit IRC22:47
*** madhu_ak has quit IRC22:49
dougwiglifeless: done22:53
lifelessthanks22:54
*** banix has quit IRC22:54
*** Swami has joined #openstack-neutron22:57
HenryGlifeless: gah, you need to remove a space between TODO and (lifeless)22:57
HenryGSilliest rule evah22:57
lifelessHenryG: oh it really did come back.22:57
openstackgerritlifeless proposed openstack/neutron: Update build hooks.  https://review.openstack.org/18243822:58
lifelesssorry for messing up your work russellb :)22:58
* HenryG learned to rage-approve from dougwig22:59
*** amuller_afk is now known as amuller23:05
*** emagana has quit IRC23:06
dougwigHenryG: it's called "recycling prior approval"23:06
HenryGoooo fancy23:07
*** a_le has quit IRC23:07
*** markvoelker has quit IRC23:08
*** zhhuabj has quit IRC23:08
*** mestery has joined #openstack-neutron23:09
wes__Is there a better channel to get Neutron help in?23:09
HenryGdougwig: lifeless: With neutron not in PyPI, how is the requirements.txt for lbaas (and other repos that depend on neutron) supposed to look for now?23:11
dougwigHenryG: I'll upload a review in a few.23:11
*** SunnyRainbow has joined #openstack-neutron23:12
HenryGdougwig: are you going to mass-propose to all *aas and networking-* ? ;) ;)23:12
openstackgerritLynn Li proposed openstack/neutron: Use 1st SNAT DVR host name for FIP assoc w/unbound  https://review.openstack.org/17943923:13
*** smccully has quit IRC23:14
dougwigHenryG: heh, sure.  Let me get it solid and reviewed by infra once first.23:14
*** chlong has joined #openstack-neutron23:15
lifelessHenryG: I think we should list neutron23:15
lifelessHenryG: not on pypi just means 'pip cannot find it to install it'23:15
lifelessHenryG: it doesn't mean 'the name is invalid' - and for neutron we own the name on pypi anyhow23:15
*** carl_baldwin has quit IRC23:16
amullermarun: https://bugs.launchpad.net/oslo.messaging/+bug/145444923:16
openstackLaunchpad bug 1454449 in oslo.messaging "Blocked publishers due to rabbitmq disk/memory alarm causes indefinitely frozen RPC calls with zero errors" [Undecided,New]23:16
lifelessHenryG: to trigger installs there are a few answers we can use, which may differ based on context.23:16
lifelessthey are: preinstall it; use a local requirements file to specify where to get it; edit the requirements file just-in-time to have it inject23:16
HenryGdougwig: I was kidding. When ready, announce on the ML and let the maintainers pick up the work for their repos.23:16
*** annegentle has quit IRC23:17
*** yuanying has joined #openstack-neutron23:17
*** Marga__ has quit IRC23:17
HenryGlifeless: For example, for tox runs?23:18
*** Marga_ has joined #openstack-neutron23:18
lifelessso tox runs run in both CI and locally for users23:19
lifelessCI: there's a helper script we already run in CI that currently is editing the requirements.txt. If it didn't edit and instead just installed neutron, we're all good.23:19
lifelesslocally for users: devs need to setup their environment already with C libraries and so on23:20
lifelessso add it to their instructions / automation23:20
lifelessif they're developng inside devstack, for instance, devstack already installs neutron, and tox there can just assume it (if you have site global dependencies present)23:20
*** signed8b_ is now known as signed8bit_ZZZzz23:21
HenryGBut I often just clone a repo to my home dir and run 'tox -epy27' for unit tests23:21
HenryGI only want neutron installed in the tox-built venv23:22
dougwigI think I can satisfy both cases.  Gimme a few, in stuck in a meeting.23:22
*** aduarte has quit IRC23:23
*** sridhar_ram has joined #openstack-neutron23:23
*** smccully has joined #openstack-neutron23:24
lifelesslets see what frankenstein dougwig is cooking up, I wouldn't want to spoil his surprise.23:25
*** Marga_ has quit IRC23:25
dougwigI'll make sure you're a reviewer.23:25
*** yamamoto has quit IRC23:25
*** Marga_ has joined #openstack-neutron23:26
*** yamamoto has joined #openstack-neutron23:27
*** yamamoto has quit IRC23:31
*** a_le has joined #openstack-neutron23:33
*** aranjan has quit IRC23:34
*** gildub has joined #openstack-neutron23:34
*** aranjan has joined #openstack-neutron23:35
*** SunnyRainbow has quit IRC23:38
*** yamamoto has joined #openstack-neutron23:39
*** ivar-lazzaro has quit IRC23:42
*** ivar-lazzaro has joined #openstack-neutron23:42
*** zhenguo has joined #openstack-neutron23:43
*** garyk has joined #openstack-neutron23:45
*** hichihara has joined #openstack-neutron23:45
*** mchestr has quit IRC23:46
*** banix has joined #openstack-neutron23:46
*** armax has joined #openstack-neutron23:48
*** hitalia has quit IRC23:50
*** padkrish has joined #openstack-neutron23:54
*** padkrish_ has quit IRC23:54
*** yamamoto has quit IRC23:56
*** garyk has quit IRC23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!