Monday, 2020-04-20

*** ociuhandu has joined #openstack-neutron00:21
*** ociuhandu has quit IRC00:25
*** threestrands has joined #openstack-neutron00:35
openstackgerritZhouHeng proposed openstack/neutron master: fix bug: Floating IP was not removed from the router when the port forwarding deletion was completed  https://review.opendev.org/72112900:40
*** slaweq has joined #openstack-neutron00:49
*** yamamoto has joined #openstack-neutron01:26
openstackgerritMerged openstack/ovsdbapp stable/train: Accept a Row as a result in AddCommand  https://review.opendev.org/72016301:46
*** sapd1 has quit IRC01:52
*** yamamoto has quit IRC01:58
*** yamamoto has joined #openstack-neutron01:58
*** yamamoto has quit IRC02:04
*** sapd1 has joined #openstack-neutron02:11
*** yamamoto has joined #openstack-neutron02:18
*** ociuhandu has joined #openstack-neutron02:26
*** ociuhandu has quit IRC02:36
*** ociuhandu has joined #openstack-neutron02:37
*** ociuhandu has quit IRC02:42
*** ramishra has joined #openstack-neutron02:51
*** ociuhandu has joined #openstack-neutron02:55
*** ociuhandu has quit IRC03:05
openstackgerritQitao proposed openstack/neutron master: Use unittest.mock instead of third party mock  https://review.opendev.org/72115603:09
*** ircuser-1 has quit IRC03:09
*** ociuhandu has joined #openstack-neutron03:48
*** yamamoto has quit IRC03:52
*** ociuhandu has quit IRC03:53
*** yamamoto has joined #openstack-neutron04:02
*** ratailor has joined #openstack-neutron04:21
openstackgerritZhouHeng proposed openstack/neutron master: fix bug: Floating IP was not removed from the router when the port forwarding deletion was completed  https://review.opendev.org/72112904:34
openstackgerritAdit Sarfaty proposed openstack/neutron-fwaas master: Mark db connection as secret  https://review.opendev.org/70395604:36
openstackgerritAdit Sarfaty proposed openstack/neutron-fwaas master: Mark db connection as secret  https://review.opendev.org/70395604:36
*** ratailor has quit IRC04:38
*** ratailor has joined #openstack-neutron04:44
*** lajoskatona has joined #openstack-neutron04:56
*** tkajinam has quit IRC05:12
*** tkajinam has joined #openstack-neutron05:13
*** gcheresh has joined #openstack-neutron05:29
*** yamamoto has quit IRC05:35
*** tmorin has joined #openstack-neutron05:54
*** yamamoto has joined #openstack-neutron05:55
*** numans has joined #openstack-neutron06:29
*** tmorin has quit IRC06:59
*** ociuhandu has joined #openstack-neutron07:00
*** ccamposr has joined #openstack-neutron07:01
*** maciejjozefczyk has joined #openstack-neutron07:02
*** ccamposr__ has quit IRC07:03
*** rpittau|afk is now known as rpittau07:12
*** tesseract has joined #openstack-neutron07:12
*** hjensas has quit IRC07:13
*** jlibosva has joined #openstack-neutron07:14
*** hjensas has joined #openstack-neutron07:16
*** threestrands_ has joined #openstack-neutron07:18
*** ralonsoh has joined #openstack-neutron07:18
*** threestrands_ has quit IRC07:18
*** threestrands has quit IRC07:21
*** tamas_erdei has quit IRC07:22
*** lucadelmonte90 has joined #openstack-neutron07:33
*** tmorin has joined #openstack-neutron07:33
openstackgerritMaciej Józefczyk proposed openstack/ovn-octavia-provider master: Spawn long-running processes in the driver agent  https://review.opendev.org/71820307:43
*** lucadelmonte90 is now known as squalluca07:51
*** lucasagomes has joined #openstack-neutron07:51
*** S4ren has joined #openstack-neutron07:52
squallucahello,i was wondering if you could give me some help, since my google-fu failed me on this one.Is it possible to create an external network only on a subset of controller/host?In my company we are planning to deploy openstack (we are still in a very early stage), our datacenter network topology is partitioned in network islands, the delivery of07:52
squallucapublic network is accomplished via vlans at each TOR switch, all racks belonging to a network island have access to a set o vlan segment used to delivery public networks, but racks on ther network islands are not reached by the same segments.We were planning to segregate the compute part with cells ( 1 per island), my doubt is, is there a way in07:52
squallucaneutron to specify the hosts from which this network is reachable and pass this info to the placement service in order to schedule resources requesting a particular network to the right compute host?07:52
*** jpena|off is now known as jpena07:55
*** ratailor has quit IRC08:05
*** ratailor has joined #openstack-neutron08:05
*** ociuhandu has quit IRC08:07
*** ratailor has quit IRC08:07
*** ratailor has joined #openstack-neutron08:07
*** ratailor has quit IRC08:10
openstackgerritZhouHeng proposed openstack/neutron master: Provide correct fip cidr when deleting port forwarding  https://review.opendev.org/72112908:14
*** ratailor has joined #openstack-neutron08:29
*** ratailor_ has joined #openstack-neutron08:38
*** ccamposr has quit IRC08:39
slaweqralonsoh: hi08:41
*** dsneddon has quit IRC08:41
slaweqralonsoh: one question about https://bugs.launchpad.net/neutron/+bug/1870400 - do You think we should get it in before Ussuri RC1? or can we wait for V to merge it?08:41
openstackLaunchpad bug 1870400 in neutron ""ml2_vlan_allocations.vlan_id" value should be checked in the DB backend" [Medium,In progress] - Assigned to Rodolfo Alonso (rodolfo-alonso-hernandez)08:41
*** dsneddon has joined #openstack-neutron08:41
*** ratailor has quit IRC08:42
slaweqralonsoh: and same question for https://bugs.launchpad.net/neutron/+bug/186589108:42
openstackLaunchpad bug 1865891 in neutron "Race condition during removal of subnet from the router and removal of subnet" [Medium,In progress] - Assigned to Rodolfo Alonso (rodolfo-alonso-hernandez)08:42
*** ociuhandu has joined #openstack-neutron08:43
ralonsohslaweq, about https://bugs.launchpad.net/neutron/+bug/1870400: there is no rush, but I have another patch on top of it08:44
openstackLaunchpad bug 1870400 in neutron ""ml2_vlan_allocations.vlan_id" value should be checked in the DB backend" [Medium,In progress] - Assigned to Rodolfo Alonso (rodolfo-alonso-hernandez)08:44
*** ccamposr has joined #openstack-neutron08:44
ralonsohI can rebase the other one (https://review.opendev.org/#/c/717083/)08:44
ralonsohand about the other one, the same08:45
ralonsohit's a pity we don't have both in this cycle...08:45
slaweqralonsoh: I think I can target them for RC and we may then get them in now08:46
slaweqralonsoh: I'm just thinking if that is really needed (I know we can't backport it later) and what is potential risk such late in the cycle08:47
ralonsohslaweq, both are addressing "rare" situations08:47
ralonsohbut the problem is that both are modifying the DB08:47
ralonsohthat means we can't backport them form V to U08:47
*** ociuhandu has quit IRC08:48
ralonsohslaweq, we can wait till V08:48
ralonsohI'll rebase both to V right now08:49
slaweqralonsoh: ok08:49
slaweqthx for info08:49
slaweqso I will set -2 for them for now, just to make sure we don't merge them in U08:50
slaweqralonsoh: in fact when I'm thinking about https://review.opendev.org/#/c/713045/ I think this should be good to go in Ussuri08:51
slaweqit has db migration but it shouldn't be risky08:52
ralonsohslaweq, then let me rebase it to master08:52
ralonsohgive me 5 mins08:52
ralonsoh(it's on top of the other patch)08:52
slaweqthe other one is more risky IMO as it may works differently depending on various DB engines08:52
ralonsohslaweq, agree08:52
slaweqralonsoh++ thx08:52
ralonsohgive 5 mins08:52
slaweqI set ussuri-rc1 for https://bugs.launchpad.net/neutron/+bug/186589108:53
openstackLaunchpad bug 1865891 in neutron "Race condition during removal of subnet from the router and removal of subnet" [Medium,In progress] - Assigned to Rodolfo Alonso (rodolfo-alonso-hernandez)08:53
openstackgerritRodolfo Alonso Hernandez proposed openstack/neutron master: Lock subnets during port creation and subnet deletion  https://review.opendev.org/71304508:55
openstackgerritRodolfo Alonso Hernandez proposed openstack/neutron master: Lock subnets during port creation and subnet deletion  https://review.opendev.org/71304509:02
openstackgerritRodolfo Alonso Hernandez proposed openstack/neutron master: Open Victoria DB branch  https://review.opendev.org/72120709:02
*** ramishra has quit IRC09:02
openstackgerritRodolfo Alonso Hernandez proposed openstack/neutron master: Lock subnets during port creation and subnet deletion  https://review.opendev.org/71304509:03
openstackgerritRodolfo Alonso Hernandez proposed openstack/neutron master: Open Victoria DB branch  https://review.opendev.org/72120709:03
openstackgerritMerged openstack/os-ken master: Use unittest.mock instead of third party mock  https://review.opendev.org/72096709:04
openstackgerritMerged openstack/os-ken master: Update master for stable/ussuri  https://review.opendev.org/71923209:04
openstackgerritMerged openstack/os-ken master: Add Python3 victoria unit tests  https://review.opendev.org/71923309:05
*** ratailor has joined #openstack-neutron09:06
*** ratailor_ has quit IRC09:06
openstackgerritMerged openstack/os-ken stable/ussuri: Update .gitreview for stable/ussuri  https://review.opendev.org/71923009:06
*** ramishra has joined #openstack-neutron09:11
*** ociuhandu has joined #openstack-neutron09:18
openstackgerritDongcan Ye proposed openstack/neutron-vpnaas master: Migrate to neutron-lib released API definition for VPNaaS APIs  https://review.opendev.org/44418609:20
*** dtantsur|afk is now known as dtantsur09:21
*** ratailor has quit IRC09:23
*** ratailor has joined #openstack-neutron09:23
openstackgerritMerged openstack/neutron-vpnaas master: Using unittest.mock instead of mock  https://review.opendev.org/71681409:23
*** gregwork has quit IRC09:24
*** rcernin has quit IRC09:26
*** ociuhandu has quit IRC09:32
*** ociuhandu has joined #openstack-neutron09:33
*** ociuhandu has quit IRC09:39
*** yamamoto has quit IRC09:49
*** rcernin has joined #openstack-neutron09:51
*** ratailor has quit IRC10:00
*** ratailor has joined #openstack-neutron10:02
openstackgerritRodolfo Alonso Hernandez proposed openstack/networking-ovn stable/stein: mech_driver.OVNMechanismDriver "_ovn_client" is a read-only property  https://review.opendev.org/71537810:05
openstackgerritRodolfo Alonso Hernandez proposed openstack/networking-ovn stable/rocky: mech_driver.OVNMechanismDriver "_ovn_client" is a read-only property  https://review.opendev.org/71537910:05
openstackgerritRodolfo Alonso Hernandez proposed openstack/networking-ovn stable/queens: mech_driver.OVNMechanismDriver "_ovn_client" is a read-only property  https://review.opendev.org/71538010:06
*** yamamoto has joined #openstack-neutron10:06
*** ociuhandu has joined #openstack-neutron10:08
slaweqbcafarel: https://bugs.launchpad.net/neutron/+bug/1873776 - I finally had time to open it :)10:10
openstackLaunchpad bug 1873776 in neutron "[stable/stein] Neutron-tempest-plugin jobs are failing due to wrong python version" [Critical,Confirmed]10:10
slaweqbcafarel: just FYI10:10
openstackgerritAndreas Jaeger proposed openstack/neutron-specs master: DNM: Test fetch-sphinx-tarball  https://review.opendev.org/72122210:14
openstackgerritAndreas Jaeger proposed openstack/neutron-specs master: DNM: Test fetch-sphinx-tarball 2  https://review.opendev.org/72122310:15
*** rpittau is now known as rpittau|bbl10:15
zigoIl there anyone over here that could help me with neutron-dynamic-routing ?10:18
zigoWe're still a bit stuck ... :/10:18
*** ociuhandu has quit IRC10:22
zigoThere's no docs that match our setup (ie: bgp 2 the host over local link ipv6 unumbered)10:31
zigoMaybe what we want to do is not even possible?!?10:31
*** yamamoto has quit IRC10:34
*** yamamoto has joined #openstack-neutron10:43
openstackgerritSlawek Kaplonski proposed openstack/neutron-tempest-plugin master: Improve QoS BW limit scenario tests  https://review.opendev.org/72123510:47
*** yamamoto has quit IRC10:49
*** yamamoto has joined #openstack-neutron10:50
*** yamamoto has quit IRC10:50
*** squalluca has quit IRC10:51
*** yamamoto has joined #openstack-neutron11:19
*** tkajinam has quit IRC11:21
openstackgerritDongcan Ye proposed openstack/neutron-vpnaas master: Migrate to neutron-lib released API definition for VPNaaS APIs  https://review.opendev.org/44418611:22
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/stein: Change ovs-agent iteration log level to INFO  https://review.opendev.org/72123911:24
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/rocky: Change ovs-agent iteration log level to INFO  https://review.opendev.org/72124011:24
*** jpena is now known as jpena|lunch11:27
*** hjensas has quit IRC11:28
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/queens: Change ovs-agent iteration log level to INFO  https://review.opendev.org/72124211:28
zigoslaweq: Who do you said I should talk to about neutron dynamic routing?11:28
zigos/do/did/11:29
*** sean-k-mooney has joined #openstack-neutron11:29
zigo(terrible english here... :P)11:29
*** dsneddon has quit IRC11:31
*** sapd1 has quit IRC11:42
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/rocky: Refactor the L3 agent batch notifier  https://review.opendev.org/72124311:45
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/queens: Refactor the L3 agent batch notifier  https://review.opendev.org/72124411:45
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/queens: Delay HA router transition from "backup" to "master"  https://review.opendev.org/71997811:46
slaweqzigo: hi, the best guy is tidwellr11:49
zigoslaweq: What is his email address?11:49
slaweqzigo: but he isn't available often, so probably the best would be if You would email him if You have something urgent11:49
zigoIt's not urgent, we're trying, in pour preproduction env, to switch to a full BGP networking (bgp 2 the host + neutron-dynamic-routing), but we're kind of hitting a wall and there's no doc available...11:50
*** ociuhandu has joined #openstack-neutron11:57
*** yamamoto has quit IRC11:57
openstackgerritMerged openstack/neutron-tempest-plugin master: Update docs building  https://review.opendev.org/72106812:01
*** ociuhandu has quit IRC12:02
*** rpittau|bbl is now known as rpittau12:03
bcafarelslaweq: thanks for https://bugs.launchpad.net/neutron/+bug/1873776! I commented on it, not sure what changed or what could be missing, I will try to dig a bit in before bothering gmann again12:06
openstackLaunchpad bug 1873776 in neutron "[stable/stein] Neutron-tempest-plugin jobs are failing due to wrong python version" [Critical,Confirmed]12:06
*** jangutter has joined #openstack-neutron12:18
*** ratailor has quit IRC12:20
*** yamamoto has joined #openstack-neutron12:30
*** jpena|lunch is now known as jpena12:33
*** yamamoto has quit IRC12:33
*** yamamoto has joined #openstack-neutron12:33
openstackgerritMaciej Józefczyk proposed openstack/ovn-octavia-provider master: Spawn long-running processes in the driver agent  https://review.opendev.org/71820312:34
openstackgerritMaciej Józefczyk proposed openstack/ovn-octavia-provider master: Spawn long-running processes in the driver agent  https://review.opendev.org/71820312:34
*** Luzi has joined #openstack-neutron12:42
ralonsohbcafarel, 2020-04-20 07:47:34.147651 | controller | neutron-tempest-plugin requires Python '>=3.6' but the running Python is 2.7.1712:44
ralonsohthis is neutron-tempest-plugin-api-stein12:44
ralonsohshould we use py3 or use a stable branch of neutron-tempest-plugin?12:44
slaweqbcafarel: thx a lot, please assign this bug to yourself if You will work on it :)12:45
slaweqralonsoh: it's exactly the issue reported in https://bugs.launchpad.net/neutron/+bug/1873776 :)12:46
openstackLaunchpad bug 1873776 in neutron "[stable/stein] Neutron-tempest-plugin jobs are failing due to wrong python version" [Critical,Confirmed]12:46
ralonsohahhh cool thanks!!12:46
openstackgerritLucas Alvares Gomes proposed openstack/neutron-tempest-plugin master: Fix test_multicast_between_vms_on_same_network  https://review.opendev.org/72126212:50
*** priteau has joined #openstack-neutron12:50
openstackgerritLucas Alvares Gomes proposed openstack/neutron-tempest-plugin master: Fix test_multicast_between_vms_on_same_network  https://review.opendev.org/72126212:56
openstackgerritLucas Alvares Gomes proposed openstack/neutron master: [OVN] Enable test_multicast_between_vms_on_same_network  https://review.opendev.org/72126312:59
openstackgerritSlawek Kaplonski proposed openstack/neutron-tempest-plugin master: Improve QoS BW limit scenario tests  https://review.opendev.org/72123513:01
*** irclogbot_1 has quit IRC13:06
*** irclogbot_1 has joined #openstack-neutron13:08
*** dayou_ has joined #openstack-neutron13:09
openstackgerritMaciej Józefczyk proposed openstack/ovn-octavia-provider master: Spawn long-running processes in the driver agent  https://review.opendev.org/71820313:10
*** dayou has quit IRC13:11
openstackgerritMaciej Józefczyk proposed openstack/ovn-octavia-provider master: WIP: Include functional tests in coverage results  https://review.opendev.org/71399613:15
*** ociuhandu has joined #openstack-neutron13:30
*** ociuhandu has quit IRC13:35
*** hoonetorg has quit IRC13:40
*** yamamoto has quit IRC13:44
openstackgerritRodolfo Alonso Hernandez proposed openstack/neutron master: Switch to new engine facade for IpamPluggableBackend  https://review.opendev.org/66286913:45
*** yamamoto has joined #openstack-neutron13:48
*** yamamoto has quit IRC13:48
*** yamamoto has joined #openstack-neutron13:49
openstackgerritRodolfo Alonso Hernandez proposed openstack/networking-ovn stable/train: Refactor OVN client QoS extension  https://review.opendev.org/71544713:49
openstackgerritEran Kuris proposed openstack/neutron-tempest-plugin master: Added new API test_create_sg_rules_when_quota_disabled  https://review.opendev.org/72127413:53
*** tkajinam has joined #openstack-neutron13:53
-openstackstatus- NOTICE: Zuul is temporarily offline; service should be restored in about 15 minutes.13:59
*** hoonetorg has joined #openstack-neutron13:59
*** ociuhandu has joined #openstack-neutron14:00
*** sapd1 has joined #openstack-neutron14:10
gmannbcafarel: how can i help you ?14:14
gmannbcafarel: is it py2 or xenial job on stein gate ?14:14
*** dayou_ has quit IRC14:16
*** dayou has joined #openstack-neutron14:17
bcafarelgmann: https://bugs.launchpad.net/neutron/+bug/1873776 we started getting "neutron-tempest-plugin requires Python '>=3.6' but the running Python is 2.7.17" in neutron-tempest-plugin stein jobs (since Friday I think)14:17
openstackLaunchpad bug 1873776 in neutron "[stable/stein] Neutron-tempest-plugin jobs are failing due to wrong python version" [Critical,Confirmed]14:17
bcafarelgmann: I was wondering if we need some similar fix to the tempest change you made, like setting INSTALL_TEMPEST in these jobs14:19
gmannbcafarel: yeah, its same issue of installing the tempest plugin on system wide not in venv14:20
gmannbcafarel: https://github.com/openstack/neutron-tempest-plugin/blob/5719f992d146505eb593d1fd68d02e4945e2e07f/devstack/plugin.sh#L814:20
gmannbcafarel: you can use the INSTALL_TEMPEST flag or i will say we do not need neutron-tempest-plugin to be present on system wide.14:21
*** hongbin has joined #openstack-neutron14:21
gmannso not doing that is also fine14:21
gmannbcafarel: i wanted INSTALL_TEMPEST to be removed from devstack as first solution but did not do due to 1. to dig more and get some history about INSTALL_TEMPEST flag 2. not to do at this time of release so doing it in start of next cycle14:23
gmannbut for this time, let's use the flag in neutron-tempst-plugin also and removal things we can decide later for being safe.14:24
bcafarelgmann: thanks! I will update job definition to set it (all stable branches)14:26
gmannbcafarel: not job definition. this place - https://github.com/openstack/neutron-tempest-plugin/blob/5719f992d146505eb593d1fd68d02e4945e2e07f/devstack/plugin.sh#L1614:27
gmannwith flag condition - https://github.com/openstack/devstack/blob/5b5aefb0898c791a5b58689579562d95f94750d4/lib/tempest#L11514:28
gmannand on all stable branch that flag is false (as expected) so it would not try to install neutron-temp4st-plugin on stable branches.14:28
*** dsneddon has joined #openstack-neutron14:29
*** ociuhandu has quit IRC14:29
bcafarelgmann: ah ok, and nice no need to to do it per branch then :)14:29
gmannyeah.14:30
openstackgerritBernard Cafarelli proposed openstack/neutron-tempest-plugin master: Only install plugin system-wide if INSTALL_TEMPEST is set  https://review.opendev.org/72127714:34
*** ociuhandu has joined #openstack-neutron14:35
bcafarelgmann: another round of virtual cheers then :)14:35
gmannbcafarel: :) o/14:35
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/stein: Implement "list_ns_pids" inside Neutron  https://review.opendev.org/71822714:36
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/stein: Kill all processes running in a namespace before deletion  https://review.opendev.org/71822614:36
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/queens: Do not link up HA router gateway in backup node  https://review.opendev.org/71774114:38
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/queens: Do not link up HA router gateway in backup node  https://review.opendev.org/71774114:39
*** ociuhandu has quit IRC14:40
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/queens: Do not link up HA router gateway in backup node  https://review.opendev.org/71774114:43
*** gcheresh has quit IRC14:50
*** hjensas has joined #openstack-neutron14:54
openstackgerritBrian Haley proposed openstack/neutron master: Remove some native openflow driver 'deferred' code  https://review.opendev.org/71542914:55
*** mlavalle has joined #openstack-neutron14:57
*** tkajinam has quit IRC14:59
openstackgerritBence Romsics proposed openstack/neutron master: WIP metadata-ipv6: DHCP namespace  https://review.opendev.org/71548215:02
openstackgerritBence Romsics proposed openstack/neutron master: WIP metadata-ipv6: Router namespace  https://review.opendev.org/71548315:02
openstackgerritBence Romsics proposed openstack/neutron master: WIP metadata-ipv6: Accept link local address in X-Forwarded-For  https://review.opendev.org/71872915:03
*** njohnston_ has joined #openstack-neutron15:04
*** sangeet has joined #openstack-neutron15:05
*** gcheresh has joined #openstack-neutron15:06
*** dswebb has joined #openstack-neutron15:09
openstackgerritRodolfo Alonso Hernandez proposed openstack/neutron stable/train: Improve port retrieval when validating auto address  https://review.opendev.org/71515215:10
*** sapd1 has quit IRC15:14
sangeetI am using Stein and ml2 plugin. I do not see Security Headers (X-Content-Type-Options and X-Frame-Options) in the response message. How can I get these headers in the responses from Neutron?15:16
sangeetSecurity Headers are defined and used for v2 api (neutron/api/v2/resources.py) but I did not see any such thing in neutron/pecan_wsgi/controllers/resource.py or neutron/plugins/ml2. Please help15:18
*** mmethot has quit IRC15:19
*** sangeet has quit IRC15:20
*** armax has joined #openstack-neutron15:21
*** well100 has quit IRC15:21
*** sapd1 has joined #openstack-neutron15:26
*** hongbin has quit IRC15:28
*** sangeet has joined #openstack-neutron15:29
*** mmethot has joined #openstack-neutron15:34
*** happyhemant has joined #openstack-neutron15:45
*** hoonetorg has quit IRC15:46
-openstackstatus- NOTICE: Gerrit will be restarted to correct a misconfiguration which caused some git mirrors to have outdated references.15:47
*** hjensas has quit IRC15:54
sangeetI am using Stein and ml2 plugin. I do not see Security Headers (X-Content-Type-Options and X-Frame-Options) in the response message. How can I get these headers in the responses from Neutron? Security Headers are defined and used for v2 api (neutron/api/v2/resources.py) but I did not see any such thing in neutron/pecan_wsgi/controllers/resource.py or neutron/plugins/ml2. Please help15:54
*** hoonetorg has joined #openstack-neutron15:59
*** KeithMnemonic has joined #openstack-neutron16:00
*** hongbin has joined #openstack-neutron16:05
*** rpittau is now known as rpittau|afk16:07
*** lucasagomes has quit IRC16:09
*** jlibosva has quit IRC16:10
*** Luzi has quit IRC16:15
openstackgerritAndreas Jaeger proposed openstack/neutron-specs master: DNM: Test fetch-sphinx-tarball 2  https://review.opendev.org/72122316:21
haleybsangeet: i don't understand.  There is nothing in neutron called a Security Header as far as i know, and one of the files you mention (resources.py) doesn't exist.  Is there an online link you can supply?16:29
*** dtantsur is now known as dtantsur|afk16:32
*** njohnston_ has quit IRC16:32
*** ociuhandu has joined #openstack-neutron16:36
sangeet@haleyb https://github.com/openstack/neutron/blob/c13391daa424237c0ee6706986b5ef53b9ca78a5/neutron/api/v2/resource.py#L121. What I meant is I could update the webob.Response object to add the security headers. Can I do the same thing for ml216:41
sangeethaleyb ^^ (I am new to the application I am using and was not sure @ before your name notified you or not)16:46
haleybsangeet: i guess i still don't understand, but then wsgi isn't my expertise.  Maybe someone else will know.  The main question is "why is this necessary?"16:49
sangeethaleyb: For security reason of the product, we need to include X-Content-Type-Options and X-Frame-Options in the response messsage.16:51
sangeetX-Content-Type-Options: nosniff AND X-Frame-Options: deny16:52
*** kklimonda has quit IRC16:54
*** kklimonda has joined #openstack-neutron16:55
*** ociuhandu has quit IRC16:56
haleybsangeet: please be more specific than "for security reason of the product", an example of why it's important that this be done.  Also, have you looked into modifying api-paste.ini in some way to get what you want?  This might be something specific to your environment and not required for others16:58
haleyband again, i'm not a wsgi expert so am probably not the best to answer the question anyways16:58
openstackgerritMerged openstack/neutron master: Refactor OVN client QoS extension  https://review.opendev.org/71131717:04
sangeethaleyb: X-Content-Type-Options: nosniff in response header makes sure the browser does not try to detect a different Content-Type than what is actually sent (can lead to XSS). Also an X-Frame-Options: deny header to protects against drag and drop clickjacking attacks in older browsers.17:05
sangeetHow can I add these by modifying api-paste.ini?17:06
haleybsangeet: i don't know, it was only a thought based on what can be done there17:07
*** sapd1 has quit IRC17:07
*** ociuhandu has joined #openstack-neutron17:10
sangeetMay be I will as question as - how can I include  X-Content-Type-Options and  X-Frame-Options headers in response from neutron when using ml2 plugin?17:10
sangeetIs there a way to update response headers17:11
* haleyb shrugs17:16
*** tesseract has quit IRC17:18
openstackgerritMerged openstack/neutron stable/queens: Filter by owner SGs when retrieving the SG rules  https://review.opendev.org/72068617:18
*** priteau has quit IRC17:19
*** ociuhandu has quit IRC17:22
openstackgerritBrian Haley proposed openstack/ovn-octavia-provider master: Spawn long-running processes in the driver agent  https://review.opendev.org/71820317:23
*** jpena is now known as jpena|off17:32
openstackgerritMaciej Józefczyk proposed openstack/neutron master: [OVN] Enable qos service plugin in tempest jobs  https://review.opendev.org/70483317:32
*** S4ren has quit IRC17:33
*** ralonsoh has quit IRC17:39
openstackgerritMerged openstack/neutron master: Improve port retrieval when validating auto address  https://review.opendev.org/71461717:46
*** ccamposr__ has joined #openstack-neutron17:50
*** billkgr has joined #openstack-neutron17:52
*** ccamposr has quit IRC17:52
*** maciejjozefczyk_ has joined #openstack-neutron17:53
*** maciejjozefczyk has quit IRC17:53
*** happyhemant has quit IRC17:55
*** maciejjozefczyk_ has quit IRC18:01
*** ircuser-1 has joined #openstack-neutron18:01
*** billkgr has quit IRC18:07
*** billkgr has joined #openstack-neutron18:12
*** ociuhandu has joined #openstack-neutron18:15
*** ociuhandu has quit IRC18:20
*** ociuhandu has joined #openstack-neutron18:20
*** hongbin has quit IRC18:21
*** hongbin has joined #openstack-neutron18:26
*** hongbin has quit IRC18:27
openstackgerritBrian Haley proposed openstack/ovn-octavia-provider master: Spawn long-running processes in the driver agent  https://review.opendev.org/71820318:33
*** jrosser has quit IRC18:41
*** jrosser has joined #openstack-neutron18:42
*** slaweq has quit IRC18:50
*** slaweq has joined #openstack-neutron18:56
*** ociuhandu has quit IRC18:57
*** ociuhandu has joined #openstack-neutron18:58
openstackgerritBrian Haley proposed openstack/neutron-tempest-plugin master: Fix test_multicast_between_vms_on_same_network  https://review.opendev.org/72126219:01
*** lajoskatona has quit IRC19:02
*** slaweq_ has joined #openstack-neutron19:02
*** ociuhandu has quit IRC19:03
*** slaweq has quit IRC19:05
*** hjensas has joined #openstack-neutron19:23
*** gcheresh has quit IRC19:39
mnaserso i've been working on a small project of bridging openstack neutron vxlan networks to other physical switch vxlan networks19:41
mnasersimilar to networking-l2gw, but not doing vxlan<=>vlan, directly doing vxlan<=>vxlan, i think the harder part is getting all the neutron agents to add a tunnel19:42
*** ociuhandu has joined #openstack-neutron19:50
*** tmorin has quit IRC19:57
*** ociuhandu has quit IRC19:57
*** ociuhandu has joined #openstack-neutron20:10
*** flaviof has quit IRC20:14
*** flaviof has joined #openstack-neutron20:14
*** ociuhandu has quit IRC20:30
*** billkgr has quit IRC20:31
openstackgerritBrian Haley proposed openstack/neutron master: Remove the dependency on the "mock" package  https://review.opendev.org/71157920:34
openstackgerritBrian Haley proposed openstack/neutron master: Complete removal of dependency on the "mock" package  https://review.opendev.org/71604920:41
openstackgerritBrian Haley proposed openstack/networking-ovn stable/stein: Add support for virtual port type  https://review.opendev.org/70489820:44
openstackgerritBrian Haley proposed openstack/networking-ovn stable/rocky: Add support for virtual port type  https://review.opendev.org/70490220:45
openstackgerritBrian Haley proposed openstack/networking-ovn stable/queens: Add support for virtual port type  https://review.opendev.org/70490320:54
*** ociuhandu has joined #openstack-neutron21:03
*** ociuhandu has quit IRC21:08
*** jangutter has quit IRC21:16
*** dosaboy has quit IRC21:46
*** dosaboy has joined #openstack-neutron22:02
*** ociuhandu has joined #openstack-neutron22:04
*** rcernin has quit IRC22:05
*** rcernin has joined #openstack-neutron22:06
*** ociuhandu has quit IRC22:18
*** ociuhandu has joined #openstack-neutron22:18
*** ociuhandu has quit IRC22:23
openstackgerritBernard Cafarelli proposed openstack/neutron-tempest-plugin master: Only install plugin system-wide if INSTALL_TEMPEST is set  https://review.opendev.org/72127722:26
*** abaindur has joined #openstack-neutron22:34
*** jangutter has joined #openstack-neutron22:39
*** tkajinam has joined #openstack-neutron22:43
*** jangutter has quit IRC22:45
*** abaindur has quit IRC22:46
*** abaindur has joined #openstack-neutron22:46
*** njohnston has quit IRC23:08
*** threestrands has joined #openstack-neutron23:18
*** slaweq_ has quit IRC23:21
*** slaweq_ has joined #openstack-neutron23:24
*** slaweq_ has quit IRC23:29
openstackgerritMerged openstack/python-neutronclient master: Remove Babel from requirements  https://review.opendev.org/72071723:37
*** jangutter has joined #openstack-neutron23:46
*** hjensas has quit IRC23:49
*** hjensas has joined #openstack-neutron23:51
*** jangutter has quit IRC23:52

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!