Friday, 2021-01-29

*** snapiri has quit IRC00:18
*** snapiri has joined #openstack-neutron00:18
*** ksambor has quit IRC00:20
openstackgerritTerry Wilson proposed openstack/neutron master: [OVN] Allow schema checks to happen before starting connection  https://review.opendev.org/c/openstack/neutron/+/75448500:25
openstackgerritMerged openstack/neutron stable/ussuri: Improve DHCP agent's debug messages  https://review.opendev.org/c/openstack/neutron/+/77210500:36
*** rm_work has quit IRC00:37
*** logan- has quit IRC00:38
*** inflatador has quit IRC00:40
*** logan- has joined #openstack-neutron00:40
*** yamamoto_ has joined #openstack-neutron00:45
*** yamamoto has quit IRC00:46
*** gregoiremahe has quit IRC00:46
*** gregoiremahe has joined #openstack-neutron00:47
*** tbachman has quit IRC00:49
*** tbachman has joined #openstack-neutron00:49
*** dviroel has quit IRC00:52
openstackgerrityangjianfeng proposed openstack/neutron-specs master: L3 router support ndp proxy  https://review.opendev.org/c/openstack/neutron-specs/+/72862800:53
*** sapd__x has quit IRC00:58
*** sri_ has quit IRC01:11
*** mgagne has quit IRC01:11
*** sri_ has joined #openstack-neutron01:12
*** mgagne has joined #openstack-neutron01:12
*** mnaser has quit IRC01:13
*** thedac has quit IRC01:13
*** fyx has quit IRC01:14
*** masterpe has quit IRC01:15
*** thedac has joined #openstack-neutron01:15
*** mnaser has joined #openstack-neutron01:16
*** macz_ has joined #openstack-neutron01:24
*** macz_ has quit IRC01:29
*** rm_work has joined #openstack-neutron01:29
*** fyx has joined #openstack-neutron01:33
*** raildo has quit IRC01:35
*** yan0s has quit IRC01:57
*** rm_work has joined #openstack-neutron02:01
*** yamamoto_ has quit IRC02:15
*** yamamoto has joined #openstack-neutron02:16
*** liuyulong has joined #openstack-neutron02:18
openstackgerritliuyulong proposed openstack/neutron master: Add neutron_tempest_plugin.scenario.* cases to multinode jobs  https://review.opendev.org/c/openstack/neutron/+/77296502:22
*** sapd1_x has quit IRC02:49
*** zzzeek has quit IRC03:01
*** zzzeek has joined #openstack-neutron03:02
*** sapd__x has joined #openstack-neutron03:21
*** johanssone has quit IRC03:24
*** rcernin has quit IRC03:27
*** nicolasbock_ has joined #openstack-neutron03:30
*** lyr6 has joined #openstack-neutron03:31
*** ianw_ has joined #openstack-neutron03:32
*** cp-- has joined #openstack-neutron03:37
*** mgariepy has quit IRC03:38
*** nicolasbock has quit IRC03:38
*** cp- has quit IRC03:38
*** lyr has quit IRC03:38
*** ebbex has quit IRC03:38
*** jpena|off has quit IRC03:38
*** ianw has quit IRC03:38
*** beagles has quit IRC03:38
*** ianw_ is now known as ianw03:38
*** nicolasbock_ is now known as nicolasbock03:38
*** lyr6 is now known as lyr03:39
*** jpena|off has joined #openstack-neutron03:39
*** ebbex has joined #openstack-neutron03:41
*** rcernin has joined #openstack-neutron03:41
*** gouthamr has quit IRC03:43
*** beagles has joined #openstack-neutron03:43
*** mgariepy has joined #openstack-neutron03:45
*** gouthamr has joined #openstack-neutron04:00
*** gouthamr has quit IRC04:00
*** ratailor has joined #openstack-neutron04:14
*** gouthamr has joined #openstack-neutron04:18
*** gouthamr has quit IRC04:18
*** lajoskatona has joined #openstack-neutron05:01
openstackgerritTerry Wilson proposed openstack/neutron master: [OVN] Allow schema checks to happen before starting connection  https://review.opendev.org/c/openstack/neutron/+/75448505:02
*** hjensas|afk is now known as hjensas05:18
openstackgerritliuyulong proposed openstack/neutron master: Add neutron_tempest_plugin.scenario.* cases to multinode jobs  https://review.opendev.org/c/openstack/neutron/+/77296505:28
*** sapd__x has quit IRC05:42
*** calbers_ has joined #openstack-neutron05:45
*** calbers has quit IRC05:46
*** calbers_ is now known as calbers05:46
*** sapd__x has joined #openstack-neutron05:47
*** ianw has quit IRC05:59
*** ianw has joined #openstack-neutron06:01
*** lbragstad has quit IRC06:11
openstackgerritMerged openstack/neutron stable/ussuri: ovn: Support live migration to DPDK nodes  https://review.opendev.org/c/openstack/neutron/+/77112406:16
*** lbragstad has joined #openstack-neutron06:16
*** gouthamr has joined #openstack-neutron06:22
*** gouthamr has quit IRC06:22
*** ygk_12345 has joined #openstack-neutron06:55
*** gouthamr has joined #openstack-neutron06:56
*** gouthamr has quit IRC06:56
*** gcheresh has joined #openstack-neutron06:57
*** lbragstad has quit IRC07:14
*** lbragstad has joined #openstack-neutron07:14
*** viks____ has joined #openstack-neutron07:19
*** gouthamr has joined #openstack-neutron07:22
*** openstackgerrit has quit IRC07:23
*** lpetrut has joined #openstack-neutron07:30
*** ralonsoh has joined #openstack-neutron07:39
*** lajoskatona has quit IRC07:40
*** lajoskatona has joined #openstack-neutron07:48
*** slaweq has joined #openstack-neutron07:57
*** gcheresh has quit IRC07:59
*** johanssone has joined #openstack-neutron07:59
*** tesseract has joined #openstack-neutron08:00
*** tmorin has joined #openstack-neutron08:01
*** slaweq has quit IRC08:10
*** slaweq has joined #openstack-neutron08:14
*** tmorin has quit IRC08:15
lajoskatonaGood morning, shall I ask review for some stadium projects, these are to make their master free of recent issues with dependencies:08:19
lajoskatonahttps://review.opendev.org/c/openstack/networking-bgpvpn/+/771219 & https://review.opendev.org/c/openstack/networking-odl/+/76987708:19
lajoskatonathanks in advance08:19
*** benj_ has quit IRC08:22
*** ygk_12345 has quit IRC08:24
*** tmorin has joined #openstack-neutron08:32
*** macz_ has joined #openstack-neutron08:33
*** bengates has joined #openstack-neutron08:33
*** macz_ has quit IRC08:37
*** jlibosva has joined #openstack-neutron08:39
*** bengates has quit IRC08:46
*** bengates has joined #openstack-neutron08:46
*** rpittau|afk is now known as rpittau08:52
ralonsohlajoskatona, done08:53
lajoskatonaralonsoh: thanks, I check the ones below these, to make the stable branches clean as well :-)08:53
*** jpena|off is now known as jpena08:57
*** elvira has joined #openstack-neutron08:58
*** ccstone has quit IRC08:59
*** ccstone has joined #openstack-neutron08:59
*** zzzeek has quit IRC09:01
*** rcernin has quit IRC09:02
*** yamamoto has quit IRC09:02
*** zzzeek has joined #openstack-neutron09:03
*** bengates_ has joined #openstack-neutron09:06
*** lucasagomes has joined #openstack-neutron09:07
*** gcheresh has joined #openstack-neutron09:07
*** bengates has quit IRC09:10
*** openstackgerrit has joined #openstack-neutron09:16
openstackgerritMichal Nasiadka proposed openstack/neutron master: ovn: set allowed_address_pairs to addresses also  https://review.opendev.org/c/openstack/neutron/+/77298309:16
openstackgerritMichal Nasiadka proposed openstack/neutron master: ovn: set allowed_address_pairs to addresses also  https://review.opendev.org/c/openstack/neutron/+/77298309:18
*** gcheresh has quit IRC09:21
*** rcernin has joined #openstack-neutron09:21
*** bengates_ has quit IRC09:29
*** bengates has joined #openstack-neutron09:30
*** obondarev has joined #openstack-neutron09:33
*** bengates has quit IRC09:33
*** bengates has joined #openstack-neutron09:34
*** slaweq has quit IRC09:35
*** bengates_ has joined #openstack-neutron09:36
*** yamamoto has joined #openstack-neutron09:38
*** bengates has quit IRC09:39
*** slaweq has joined #openstack-neutron09:43
obondarevhi all, seems rally job in check queue is broken on master09:45
obondarevone of the failures are list_port requests taking too much time09:45
obondareva brief look at logs shows most of the time is spent on "neutron.pecan_wsgi.hooks.policy_enforcement [None req-9c144574-6ccf-4e89-b517-f76e830193d0 c_rally_111c37a9_Sq0DRK8S c_rally_111c37a9_eeSkdtpE] Attributes excluded by policy engine: ['standard_attr_id', 'binding:profile', 'binding:host_id', 'binding:vif_type', 'binding:vif_details'] {{(pid=66366) _exclude_attributes_by_policy /opt/stack/neutron/neutron/pecan_wsgi/hooks09:46
obondarev/policy_enforcement.py:255}}"09:46
obondareva log line per each port it seems09:46
slaweqobondarev: maybe it's related to patches https://review.opendev.org/q/project:openstack/neutron+topic:secure-rbac09:47
obondarev@slaweq, yeah I was thinking the same09:47
obondarevbut secure RBAC for ports is not merged yet09:48
slaweqnope09:48
slaweqobondarev: let me check when it started failing09:48
*** yamamoto has quit IRC09:48
obondarev@slaweq, on Jan 27: https://zuul.opendev.org/t/openstack/builds?job_name=neutron-rally-task&project=openstack%2Fneutron&branch=master09:49
slaweqaccording to https://grafana.opendev.org/d/PfjNuthGz/neutron-failure-rate?viewPanel=30&orgId=1 it started around 27.0109:49
obondarevthere was a bunch of secure RBAC patches merged this day09:50
slaweqand only them09:50
slaweqobondarev: will You check that?10:01
slaweqor should I?10:01
obondarev@slaweq, unfortunately have little time for it now, like half a hour, not sure it'll be enough..10:02
slaweqok, I will open LP bug and will try to look at it more deeply today10:02
obondarevgreat, thanks!10:04
slaweqhttps://bugs.launchpad.net/neutron/+bug/191371810:05
openstackLaunchpad bug 1913718 in neutron "rally ci job is unstable - port list takes very long time" [Critical,Confirmed] - Assigned to Slawek Kaplonski (slaweq)10:05
slaweqobondarev: ^^10:05
*** ociuhandu has joined #openstack-neutron10:06
slaweqobondarev: I think I have same issue on my devstack10:09
slaweqso hopefully I will be able to debug it now10:09
slaweqif I will not find it today, I will make rally job non-voting temporary to unblock the gate10:10
obondarev@slaweq, nice, and I still scratching my head on how could those patches be related to ports policy rules..10:10
slaweqmaybe they are not, idk :)10:11
*** yamamoto has joined #openstack-neutron10:19
*** rcernin has quit IRC10:23
slaweqobondarev: I don't think those logs are problem really10:24
slaweqI see them also when listing ports is faster10:25
obondarevyep10:28
obondarevbut anyway seems all this time we're in PolicyHook.after() func10:29
obondarevso probably some policy checks become slower10:29
slaweqobondarev: yes10:30
slaweqand I also think that it may not be one single commit responsible for that10:30
*** zzzeek has quit IRC10:30
*** zzzeek has joined #openstack-neutron10:32
obondarev@slaweq, indeed, because rally job would stop stop that commit10:32
obondarevalso those rally failures include 2 fails for list networks10:33
*** macz_ has joined #openstack-neutron10:33
obondarev@slaweq, https://38c22b82d2b68d3a8475-a78f202f1ef95696b139bf8dd6cecb5d.ssl.cf5.rackcdn.com/772817/6/check/neutron-rally-task/0d49aa0/results/report.html#/NeutronNetworks.create_and_list_networks/failures10:34
*** spatel has joined #openstack-neutron10:36
slaweqobondarev: yes, I saw it10:37
slaweqthx10:38
slaweqI reverted all "secure rbac" patches locally10:38
slaweqand list of ports tooks my about 10 seconds (couple of tousands of ports)10:38
slaweqwith all patches it was about 1 minute or more10:38
slaweq:/10:38
*** hemanth_n has joined #openstack-neutron10:38
slaweqseems like this secure rbac causes some perf degradation10:38
*** macz_ has quit IRC10:39
*** spatel has quit IRC10:40
obondarev@slaweq, ah, so each secure-rbac patch adds to processing time, right?10:45
slaweqyes10:46
obondarev@slaweq, that would be interesting to debug :)10:46
slaweqobondarev: yes10:46
slaweqI will also ask lbragstad if he maybe saw something like that already in other projects10:46
openstackgerritLucas Alvares Gomes proposed openstack/neutron master: DO NOT REVIEW: OVN check slow job failures  https://review.opendev.org/c/openstack/neutron/+/77234110:47
obondarev@slaweq, cool to see rally job doing its job10:48
*** hemanth_n has quit IRC10:49
slaweqyes, it is now10:49
slaweq:)10:49
obondarevat least some good news10:49
*** baojg has joined #openstack-neutron10:51
*** zzzeek has quit IRC10:54
*** zzzeek has joined #openstack-neutron10:55
*** baojg has quit IRC10:58
*** benj_ has joined #openstack-neutron11:00
*** xarlos has quit IRC11:00
openstackgerritMerged openstack/neutron stable/victoria: [OVN] Ensure metadata checksum  https://review.opendev.org/c/openstack/neutron/+/77286711:01
*** gcheresh has joined #openstack-neutron11:01
*** xarlos has joined #openstack-neutron11:06
*** raildo has joined #openstack-neutron11:13
*** bengates_ has quit IRC11:28
*** bengates has joined #openstack-neutron11:29
*** rcernin has joined #openstack-neutron11:33
*** bengates_ has joined #openstack-neutron11:37
*** bengates_ has quit IRC11:39
*** bengates_ has joined #openstack-neutron11:39
*** bengates has quit IRC11:40
*** gcheresh has quit IRC11:49
openstackgerritRodolfo Alonso proposed openstack/neutron master: Fix typo in "DhcpAgent.enable_isolated_metadata_proxy"  https://review.opendev.org/c/openstack/neutron/+/77301711:52
*** bengates_ has quit IRC11:53
*** bengates has joined #openstack-neutron11:53
openstackgerritLucas Alvares Gomes proposed openstack/neutron master: DO NOT REVIEW: OVN check slow job failures  https://review.opendev.org/c/openstack/neutron/+/77234111:54
*** dviroel has joined #openstack-neutron11:54
*** sapd__x has quit IRC11:55
*** ociuhandu has quit IRC12:22
*** ociuhandu has joined #openstack-neutron12:23
*** ociuhandu has quit IRC12:27
*** mgariepy has quit IRC12:28
*** ociuhandu has joined #openstack-neutron12:30
*** elvira has quit IRC12:31
*** rcernin has quit IRC12:32
*** jpena is now known as jpena|lunch12:33
*** macz_ has joined #openstack-neutron12:34
*** ociuhandu has quit IRC12:35
*** bengates has quit IRC12:37
*** spatel has joined #openstack-neutron12:37
*** bengates has joined #openstack-neutron12:38
*** macz_ has quit IRC12:39
*** ccamposr__ has joined #openstack-neutron12:40
*** ratailor has quit IRC12:40
*** spatel has quit IRC12:41
*** ccamposr has quit IRC12:43
*** ociuhandu has joined #openstack-neutron12:44
*** ociuhandu has quit IRC12:49
*** elvira has joined #openstack-neutron12:52
*** yamamoto has quit IRC12:53
*** rm_work has quit IRC13:00
*** jamesdenton has quit IRC13:00
*** thedac has quit IRC13:00
*** mnaser has quit IRC13:00
*** jrosser has quit IRC13:00
*** Jeffrey4l has quit IRC13:00
*** rm_work has joined #openstack-neutron13:01
*** jamesdenton has joined #openstack-neutron13:01
*** mnaser has joined #openstack-neutron13:01
*** thedac has joined #openstack-neutron13:01
*** jrosser has joined #openstack-neutron13:01
*** Jeffrey4l has joined #openstack-neutron13:01
*** ociuhandu has joined #openstack-neutron13:01
*** benj_ has quit IRC13:02
*** liuyulong has quit IRC13:03
*** fyx has quit IRC13:03
*** f0o has quit IRC13:03
*** andy_ has quit IRC13:03
*** janno has quit IRC13:03
*** zigo has quit IRC13:03
*** sorrison has quit IRC13:03
*** liuyulong has joined #openstack-neutron13:03
*** fyx has joined #openstack-neutron13:03
*** f0o has joined #openstack-neutron13:03
*** andy_ has joined #openstack-neutron13:03
*** janno has joined #openstack-neutron13:03
*** zigo has joined #openstack-neutron13:03
*** sorrison has joined #openstack-neutron13:03
*** benj_ has joined #openstack-neutron13:04
*** johanssone has quit IRC13:04
*** johanssone has joined #openstack-neutron13:05
*** benj_ has quit IRC13:05
*** benj_ has joined #openstack-neutron13:06
*** ociuhandu has quit IRC13:08
*** ociuhandu has joined #openstack-neutron13:08
*** ociuhandu has quit IRC13:08
*** ociuhandu has joined #openstack-neutron13:09
*** ociuhandu has quit IRC13:14
*** inflatador has joined #openstack-neutron13:19
*** yamamoto has joined #openstack-neutron13:21
*** sapd__x has joined #openstack-neutron13:25
*** yamamoto has quit IRC13:26
*** mgariepy has joined #openstack-neutron13:27
*** zzzeek has quit IRC13:29
*** jpena|lunch is now known as jpena13:30
*** zzzeek has joined #openstack-neutron13:31
*** ociuhandu has joined #openstack-neutron13:33
*** tmorin has quit IRC13:34
openstackgerritLucas Alvares Gomes proposed openstack/neutron master: [OVN][Zuul] Copy OVN logs and databases  https://review.opendev.org/c/openstack/neutron/+/77303213:35
*** yamamoto has joined #openstack-neutron13:37
*** ociuhandu has quit IRC13:38
openstackgerritLucas Alvares Gomes proposed openstack/neutron master: [OVN][Zuul] Copy OVN logs and databases  https://review.opendev.org/c/openstack/neutron/+/77303213:39
*** spatel has joined #openstack-neutron13:51
*** ociuhandu has joined #openstack-neutron13:52
*** zzzeek has quit IRC13:52
*** spatel has quit IRC13:53
*** zzzeek has joined #openstack-neutron13:56
*** ociuhandu has quit IRC13:58
*** mlavalle has joined #openstack-neutron13:58
*** ociuhandu has joined #openstack-neutron13:58
*** zzzeek has quit IRC14:02
*** zzzeek has joined #openstack-neutron14:03
*** masterpe has joined #openstack-neutron14:13
*** bengates_ has joined #openstack-neutron14:15
*** bengates_ has quit IRC14:15
*** bengates has quit IRC14:15
*** bengates has joined #openstack-neutron14:15
*** nweinber has joined #openstack-neutron14:21
*** gcheresh has joined #openstack-neutron14:24
mgariepyralonsoh, do you have a minute ?14:45
mgariepyi found where the issue is for the lost ovs flow but i'm not quite sure how to fix it.14:46
ralonsohmgariepy, sure, what is happening with those flows?14:46
ralonsohdid you see, in the code, how those flows are being lost?14:47
mgariepywhen neutron agent starts it does init the ConfIPFlowManager https://github.com/openstack/neutron/blob/master/neutron/agent/linux/openvswitch_firewall/firewall.py#L48014:48
mgariepywhen ovs gets disconnected, all the flows are lost. the _initialize_firewall does set all the flows under the OVSFirewallDriver class. but since the ConfIPFlowManager is not re-initialiez the object still contains the flows so they are not re-added since it thinks they are already there.14:50
ralonsohahhhhhh14:50
ralonsohok, perfect14:50
mgariepyso you know how to fix it ?14:50
mgariepy;) haha14:50
ralonsohmgariepy, in the ovs agent we know if the OVS service is down14:51
ralonsohhttps://github.com/openstack/neutron/blob/master/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py#L37714:52
ralonsohin this case, we can consider resetting "conj_ip_manager"14:52
ralonsohof course, this is just a quick idea I had14:52
ralonsohwhen OVS is restarted, we re-write all flows again14:53
ralonsohlike when we start the OVS agent14:53
ralonsohthat could be an option14:53
ralonsohof course, you should also check other "OVSFirewallDriver" class variables that should be re-initializated14:53
mgariepyanother one would be to look at ovsflows and see if we need to add or modify something.14:54
ralonsohif needed14:54
mgariepycurrently it rely on the tought that the obect and the ovs data are the same. but it might not be always true.14:55
ralonsohmgariepy, take a look at the code, in the OVS agent, when the OVS is restarted14:55
ralonsohhttps://github.com/openstack/neutron/blob/master/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py#L260714:55
ralonsohhttps://github.com/openstack/neutron/blob/0fb63f729751d7e62ac107d3275d440632936978/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py#L252314:56
ralonsohwe re-write everything14:56
*** yamamoto has quit IRC14:57
*** ociuhandu has quit IRC15:01
*** ociuhandu has joined #openstack-neutron15:02
*** ociuhandu has quit IRC15:08
*** ociuhandu has joined #openstack-neutron15:11
*** ociuhandu has quit IRC15:16
*** ociuhandu has joined #openstack-neutron15:20
*** gcheresh has quit IRC15:20
*** obondarev has quit IRC15:21
*** ociuhandu has quit IRC15:21
*** ociuhandu has joined #openstack-neutron15:22
openstackgerritFlavio Fernandes proposed openstack/neutron master: [DNM] [WIP] Please ignore -- [OVN] security group logging support  https://review.opendev.org/c/openstack/neutron/+/76812915:23
*** rpittau is now known as rpittau|afk15:27
*** sapd__x has quit IRC15:34
slaweqlbragstad: hi, are You around?15:48
slaweqlbragstad: we found out that we have problem with rally job and listing of ports and networks15:49
slaweqlbragstad: https://bugs.launchpad.net/neutron/+bug/191371815:49
openstackLaunchpad bug 1913718 in neutron "rally ci job is unstable - port list takes very long time" [Critical,Confirmed] - Assigned to Slawek Kaplonski (slaweq)15:49
slaweqand it is related to the secure-rbac15:49
slaweqI found out that most of the slow down happens in https://github.com/openstack/oslo.policy/blob/master/oslo_policy/policy.py#L64115:50
slaweqdid You saw something like that before?15:50
lbragstadslaweq interesting, i haven't seen a regression like that with the policy engine when we updated the scopes in keystone15:54
lbragstadi don't think gmann saw anything like that with nova?15:54
lbragstador at least i didn't hear about it15:54
*** macz_ has joined #openstack-neutron15:55
*** macz_ has quit IRC15:55
slaweqlbragstad: it's clearly in that place in code15:55
slaweqbut I don't know yet why it happens like that15:55
slaweqI was hoping that maybe You will know what we are doing wrong15:55
lbragstadinteresting... i assume i can recreate this on devstack, yeah?15:55
slaweqbut tbh regression in our case is huge15:55
slaweqyes, I have in on devstack15:55
lbragstadcool - i just stood up a fresh deployment yesterday, so i'll use it to recreate this15:56
slaweqbut I have many ports created15:56
lbragstadwhich policy is it?15:56
slaweqso, I'm using latest neutron code which has about 12 patches related to policies merged15:56
lbragstadok15:57
slaweqand I noticed that more we have migrated, slower api is15:57
lbragstadi have a meeting coming up, but i'll focus on neutron this afternoon15:58
zigoralonsoh: slaweq: Hi there! Would any of you know how to fix eventlet with Py 3.9, as per the thread I started?15:58
slaweqlbragstad: thx a lot15:58
ralonsohzigo, not yet15:58
lbragstadslaweq if you have a paste or anything like that describing the slow down, feel free to send them my way15:58
slaweqzigo: sorry I didn't check Your thread at all, I didn't had time for it15:58
zigoralonsoh: You're on it?15:58
slaweqlbragstad: I will send email to ML, is that ok for You?15:58
ralonsohzigo not really, I just spent some time15:58
lbragstadslaweq yep - that works for me15:59
slaweqlbragstad++ thx a lot15:59
slaweqI will sum up my findings and will send email shortly15:59
zigoralonsoh: Any hint I could investigate too?16:00
ralonsohno sorry16:01
zigoralonsoh: I tried a diff with ssl.py in 3.8 and 3.9, and there's almost no diff ...16:03
zigo-from socket import socket, AF_INET, SOCK_STREAM, create_connection16:04
zigo+from socket import socket, SOCK_STREAM, create_connection16:04
gmannslaweq: lbragstad oh, i have not seen that for nova yet.16:04
zigono more ...16:04
gmannslaweq lbragstad _handle_deprecated_rule() does not do much just some if condition and append rule's check16:05
gmannslaweq: lbragstad and i think warning are disabled now in neutron right?16:05
slaweqgmann: let me summarize all and send email first16:08
gmannok16:09
*** mgariepy has quit IRC16:14
slaweqgmann: ok, I sent email16:14
gmannslaweq: thanks i will check16:15
*** lpetrut has quit IRC16:15
slaweqI just tested once again, just commenting call to this one method in https://github.com/openstack/oslo.policy/blob/e103baa002e54303b08630c436dfc7b0b8a013de/oslo_policy/policy.py#L641 made api as fast as without those secure-rbac policies16:15
slaweqso it's clearly something there16:15
slaweqbut I don't know what16:15
slaweqgmann: lbragstad: I think I found something16:26
slaweqe.g. in nova, when enforcer is initialized, it loads rule https://github.com/openstack/nova/blob/master/nova/policy.py#L9316:26
slaweqit is not setting force_reload=True16:27
slaweqso it's set to False16:27
slaweqand in oslo_policy this sets "self.use_conf = False" https://github.com/openstack/oslo.policy/blob/e103baa002e54303b08630c436dfc7b0b8a013de/oslo_policy/policy.py#L59716:27
slaweqso later use_conf = False16:27
slaweqin Neutron we are loading rules with force_reload=True16:28
slaweqso enforcer.use_conf is set to True all the time16:28
slaweqand due to that it loads all rules all the time16:28
slaweqand that's why it's so slow16:28
gmannslaweq: use_conf is true in nova case too https://github.com/openstack/nova/blob/master/nova/policy.py#L5816:38
openstackgerritLajos Katona proposed openstack/neutron-specs master: BFD support for Neutron  https://review.opendev.org/c/openstack/neutron-specs/+/76733716:39
slaweqgmann: but here https://github.com/openstack/nova/blob/master/nova/policy.py#L93 You call enforcer without force_reload16:39
slaweqso force_reload=False (default)16:39
slaweqand that will be set for use_conf in oslo_policy Enforcer16:39
*** mgariepy has joined #openstack-neutron16:40
slaweqahh, ok16:41
slaweqwait16:41
slaweqI missed "if" there16:41
slaweqgmann: so, I didn't found anything :/16:42
gmannslaweq: yeah only difference force_reload makes if you load_rule more than once with same policy enforcer16:43
slaweqgmann: correct16:43
slawequse_conf in nova is also True :/16:43
slaweqso I didn't found anything really16:43
gmannforce_reload=True then always ready from file and set in cache otherwise get from cache if availaible16:43
slaweqI think I need to take a break today16:44
gmann:) its friday and much needed :)16:44
slaweqgmann: yeah, and this week wasn't easy :)16:44
slaweqI will get back to this on Monday morning16:44
gmannI will try to check it sometime sooner but cannot commit for today.16:44
slaweqor maybe You or lbragstad will find something there in meantime16:44
slaweqgmann: thx a lot for any help16:45
gmannslaweq: sure, take rest and have nice weekend16:45
slaweqthx, You too gmann16:45
*** lajoskatona has quit IRC16:57
*** lucasagomes has quit IRC16:57
*** jlibosva has quit IRC16:58
*** tesseract has quit IRC17:10
*** tesseract has joined #openstack-neutron17:21
openstackgerritRodolfo Alonso proposed openstack/neutron master: [WIP] Process DHCP events in order if related  https://review.opendev.org/c/openstack/neutron/+/77316017:22
openstackgerritRodolfo Alonso proposed openstack/neutron stable/ussuri: [OVN] Ensure metadata checksum  https://review.opendev.org/c/openstack/neutron/+/77286817:24
*** ociuhandu has quit IRC17:48
*** ociuhandu has joined #openstack-neutron17:48
*** ociuhandu has quit IRC17:53
*** jpena is now known as jpena|off17:57
*** elvira has quit IRC18:04
openstackgerritRodolfo Alonso proposed openstack/neutron master: Remove rootwrap execution (2)  https://review.opendev.org/c/openstack/neutron/+/77206818:05
*** ociuhandu has joined #openstack-neutron18:06
*** ociuhandu has quit IRC18:12
*** ralonsoh has quit IRC18:19
*** ociuhandu has joined #openstack-neutron18:19
*** ociuhandu has quit IRC18:20
*** ociuhandu has joined #openstack-neutron18:20
*** bengates has quit IRC18:25
*** ociuhandu has quit IRC18:25
*** bengates has joined #openstack-neutron18:25
openstackgerritMarc GariĆ©py proposed openstack/neutron master: Fix losses of ovs flows when ovs is restarted  https://review.opendev.org/c/openstack/neutron/+/77316518:26
mgariepyralonsoh, can you check this quickly ?^^18:26
*** ociuhandu has joined #openstack-neutron18:59
*** ociuhandu has quit IRC19:03
openstackgerritMerged openstack/neutron stable/victoria: Limit usage of resources in the fullstack tests job  https://review.opendev.org/c/openstack/neutron/+/77007919:10
*** tesseract has quit IRC19:18
*** bnemec has quit IRC19:22
openstackgerritBrian Haley proposed openstack/ovn-octavia-provider master: Delay string interpolations at logging calls  https://review.opendev.org/c/openstack/ovn-octavia-provider/+/77317519:26
*** bnemec has joined #openstack-neutron19:30
*** bengates has quit IRC19:38
openstackgerritBrian Haley proposed openstack/ovn-octavia-provider master: Correctly set member operating status  https://review.opendev.org/c/openstack/ovn-octavia-provider/+/76521320:03
openstackgerritBrian Haley proposed openstack/ovn-octavia-provider master: Start running the tempest API tests  https://review.opendev.org/c/openstack/ovn-octavia-provider/+/75255820:03
*** rcernin has joined #openstack-neutron20:09
*** tbachman has quit IRC20:13
*** tbachman has joined #openstack-neutron20:14
*** macz_ has joined #openstack-neutron20:27
*** rcernin has quit IRC20:44
*** slaweq has quit IRC20:59
*** rcernin has joined #openstack-neutron21:10
*** raildo has quit IRC21:11
*** rcernin has quit IRC21:15
*** sean-k-mooney has quit IRC21:24
*** sean-k-mooney has joined #openstack-neutron21:26
*** rcernin has joined #openstack-neutron21:27
*** sean-k-mooney has quit IRC21:36
*** sean-k-mooney has joined #openstack-neutron21:36
*** nweinber has quit IRC22:07
*** ociuhandu has joined #openstack-neutron22:09
*** yamamoto has joined #openstack-neutron22:11
*** ociuhandu has quit IRC22:15
*** yamamoto has quit IRC22:21
*** yamamoto has joined #openstack-neutron22:25
*** stand has quit IRC22:26
*** armax has quit IRC22:43
*** rcernin has quit IRC22:47
*** ccamposr has joined #openstack-neutron22:47
*** ccamposr__ has quit IRC22:49
*** rcernin has joined #openstack-neutron23:04
*** rcernin has quit IRC23:19
*** zzzeek has quit IRC23:48
*** zzzeek has joined #openstack-neutron23:50

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!