Friday, 2021-05-14

*** mchlumsky has quit IRC00:25
*** mchlumsky has joined #openstack-neutron00:30
*** sapd1_x has quit IRC00:48
*** dsneddon has quit IRC01:46
openstackgerritzhangtongjian proposed openstack/neutron master: When neutron ACL synchronization is added, the code of the OVN northbound database is mistakenly deleted Closes-Bug: #1927293  https://review.opendev.org/c/openstack/neutron/+/79001201:46
openstackbug 1927293 in neutron "When ACL rules are synchronized, other rules docking with ovn vendors will be deleted by mistake" [Undecided,In progress] https://launchpad.net/bugs/192729301:46
openstackgerritliuyulong proposed openstack/neutron master: Add the DHCPReponder for IPv6  https://review.opendev.org/c/openstack/neutron/+/77328302:06
openstackgerritliuyulong proposed openstack/neutron master: Add agent extension 'dhcp' for ovs agent  https://review.opendev.org/c/openstack/neutron/+/77656702:06
openstackgerritliuyulong proposed openstack/neutron master: Add fullstack test case for OVS DHCP extension  https://review.opendev.org/c/openstack/neutron/+/77656802:06
*** carloss has quit IRC02:36
*** rcernin has quit IRC03:04
*** bengates has joined #openstack-neutron03:20
*** rcernin has joined #openstack-neutron03:22
*** bengates has quit IRC03:24
*** macz_ has joined #openstack-neutron03:32
*** macz_ has quit IRC03:37
*** hemanth_n has joined #openstack-neutron03:48
*** benj_ has quit IRC04:01
*** benj_ has joined #openstack-neutron04:03
*** hemanth_n has quit IRC04:08
openstackgerritMerged openstack/neutron stable/victoria: add_fake_chassis() may need to create a Chassis_Private  https://review.opendev.org/c/openstack/neutron/+/79091504:21
openstackgerritMerged openstack/neutron stable/ussuri: add_fake_chassis() may need to create a Chassis_Private  https://review.opendev.org/c/openstack/neutron/+/79091604:21
*** lajoskatona has joined #openstack-neutron04:44
*** lajoskatona has quit IRC04:45
*** psahoo has joined #openstack-neutron04:48
*** tamas_erdei has joined #openstack-neutron05:00
*** terdei has quit IRC05:02
*** ratailor has joined #openstack-neutron05:04
*** zijlboot has joined #openstack-neutron05:31
*** macz_ has joined #openstack-neutron05:33
*** zijlboot has quit IRC05:37
*** macz_ has quit IRC05:38
*** TMM has quit IRC05:46
*** TMM has joined #openstack-neutron05:46
*** lajoskatona has joined #openstack-neutron05:49
openstackgerrityatin proposed openstack/networking-sfc master: Use assertCountEqual instead of assertItemsEqual  https://review.opendev.org/c/openstack/networking-sfc/+/79135905:52
*** rcernin has quit IRC05:55
*** rcernin has joined #openstack-neutron05:57
*** lpetrut has joined #openstack-neutron06:01
*** slaweq has joined #openstack-neutron06:06
*** hjensas is now known as hjensas|afk06:15
openstackgerritSlawek Kaplonski proposed openstack/neutron master: Switch neutron-rally-task job to ML2/OVS  https://review.opendev.org/c/openstack/neutron/+/79136506:34
*** hjensas|afk is now known as hjensas06:48
openstackgerrityangjianfeng proposed openstack/neutron master: HA-non-DVR router don't need manually add static route  https://review.opendev.org/c/openstack/neutron/+/79035207:12
*** bengates has joined #openstack-neutron07:15
*** bengates has joined #openstack-neutron07:17
*** jpena|off is now known as jpena07:30
*** macz_ has joined #openstack-neutron07:34
openstackgerritliuyulong proposed openstack/neutron-lib master: Adds API extension for QoS rule type pps  https://review.opendev.org/c/openstack/neutron-lib/+/79090507:36
*** macz_ has quit IRC07:38
*** elvira has joined #openstack-neutron07:52
openstackgerritCharles DECOUX proposed openstack/neutron-specs master: Add spec for rfc2317 behavior  https://review.opendev.org/c/openstack/neutron-specs/+/79140007:56
*** rcernin has quit IRC07:56
*** rcernin has joined #openstack-neutron07:56
*** lucasagomes has joined #openstack-neutron08:00
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/rocky: designate: allow PTR zone creation to fail  https://review.opendev.org/c/openstack/neutron/+/78966408:00
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/queens: designate: allow PTR zone creation to fail  https://review.opendev.org/c/openstack/neutron/+/78966508:02
*** yoctozepto6 is now known as yoctozepto08:03
slaweqlajoskatona: hi, if You would have few minutes, please check https://review.opendev.org/c/openstack/neutron/+/783748 and https://review.opendev.org/c/openstack/neutron/+/78374308:08
slaweqthx in advance08:08
lajoskatonaslaweq: ok08:08
slaweqthx08:10
openstackgerrityang yawei proposed openstack/os-ken master: setup.cfg: Replace dashes with underscores  https://review.opendev.org/c/openstack/os-ken/+/79141008:19
*** jlibosva has joined #openstack-neutron08:29
*** rcernin has quit IRC08:32
*** bengates has quit IRC08:32
*** bengates has joined #openstack-neutron08:33
openstackgerritSlawek Kaplonski proposed openstack/neutron-tempest-plugin master: Switch neutron-tempest-plugin-api job to be ML2/OVS  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/79141708:33
*** obondarev has joined #openstack-neutron08:35
*** masterpe has quit IRC08:37
openstackgerritSlawek Kaplonski proposed openstack/neutron master: Switch neutron-rally-task job to ML2/OVS  https://review.opendev.org/c/openstack/neutron/+/79136508:38
*** masterpe has joined #openstack-neutron08:40
*** mgoddard has quit IRC08:43
*** mgoddard has joined #openstack-neutron08:43
*** gcheresh has joined #openstack-neutron08:43
openstackgerritMamatisa Nurmatov proposed openstack/neutron master: Using 31-Bit and 32-Bit prefixes for IPv4 reasonably  https://review.opendev.org/c/openstack/neutron/+/31854208:52
openstackgerritSlawek Kaplonski proposed openstack/neutron master: Revert "Set system_scope='all' in elevated context"  https://review.opendev.org/c/openstack/neutron/+/78807209:12
*** macz_ has joined #openstack-neutron09:35
*** hjensas is now known as hjensas|lunch09:39
*** macz_ has quit IRC09:40
*** bengates_ has joined #openstack-neutron09:43
openstackgerritJakub Libosvar proposed openstack/neutron stable/victoria: ovn-migration: Use DHCP nodes to configure dnsmasq  https://review.opendev.org/c/openstack/neutron/+/79111309:44
openstackgerritJakub Libosvar proposed openstack/neutron stable/ussuri: ovn-migration: Use DHCP nodes to configure dnsmasq  https://review.opendev.org/c/openstack/neutron/+/79111409:44
*** ociuhandu has joined #openstack-neutron09:45
openstackgerritJakub Libosvar proposed openstack/networking-ovn stable/train: ovn-migration: Use DHCP nodes to configure dnsmasq  https://review.opendev.org/c/openstack/networking-ovn/+/79143909:46
*** bengates has quit IRC09:47
*** ociuhandu has quit IRC10:15
*** ociuhandu has joined #openstack-neutron10:17
*** ociuhandu has quit IRC10:22
*** ociuhandu has joined #openstack-neutron10:32
*** hjensas|lunch is now known as hjensas10:41
*** carloss has joined #openstack-neutron10:52
openstackgerritMerged openstack/neutron master: [OVN] Add "filter-validation" extension to supported list  https://review.opendev.org/c/openstack/neutron/+/78795611:17
openstackgerritMerged openstack/neutron stable/wallaby: designate: allow PTR zone creation to fail  https://review.opendev.org/c/openstack/neutron/+/78965911:18
openstackgerritLajos Katona proposed openstack/networking-bagpipe master: Explicitly set job networking-bagpipe-tempest to ML2/OVS  https://review.opendev.org/c/openstack/networking-bagpipe/+/79112611:32
*** jpena is now known as jpena|lunch11:34
*** macz_ has joined #openstack-neutron11:36
*** ratailor has quit IRC11:39
openstackgerritliuyulong proposed openstack/neutron master: Check dvr local router is up during port creation  https://review.opendev.org/c/openstack/neutron/+/63387111:40
*** macz_ has quit IRC11:40
*** elvira has quit IRC11:50
*** elvira has joined #openstack-neutron11:53
*** yumiriam has joined #openstack-neutron11:55
openstackgerritMamatisa Nurmatov proposed openstack/neutron master: Using 31-Bit and 32-Bit prefixes for IPv4 reasonably  https://review.opendev.org/c/openstack/neutron/+/31854211:57
*** mlavalle has joined #openstack-neutron12:08
mlavalleslaweq: is there drivers meeting today?12:08
*** jawad_axd has joined #openstack-neutron12:12
lajoskatonamlavalle: no: http://lists.openstack.org/pipermail/openstack-discuss/2021-May/022422.html12:14
*** mgariepy has quit IRC12:21
slaweqmlavalle: hi12:22
slaweqnope, I sent email yesterday12:22
slaweqI cancelled it due to lack of agenda12:22
jawad_axdHi folks, How do we take care of vxlan security issues in openstack? Is there a way to restrict vxlans (vnis) to one domain somehow or ?  Scenario is: If one compute node hosting vm with vxlan 100 is compromised, then attacker should not reach other compute nodes hosting vms with different vxlans[200,300 etc]. Generally, all vxlans behind one network, which might be vulnerable..Any comments/suggesti12:26
jawad_axdons on this? Thanks12:26
*** gregraka has joined #openstack-neutron12:28
*** psahoo_ has joined #openstack-neutron12:29
*** jpena|lunch is now known as jpena12:31
*** psahoo has quit IRC12:33
*** mgariepy has joined #openstack-neutron12:35
*** lpetrut has quit IRC12:36
*** jawad_axd has quit IRC12:36
*** ociuhandu has quit IRC12:36
*** jawad_axd has joined #openstack-neutron12:36
openstackgerritJakub Libosvar proposed openstack/neutron stable/wallaby: ovn-migration: Introduce migrate mode to DB sync tool  https://review.opendev.org/c/openstack/neutron/+/79145112:37
*** ociuhandu has joined #openstack-neutron12:41
openstackgerritMerged openstack/neutron master: [OVN] Re-enable test_port_security_macspoofing_port for slow jobs  https://review.opendev.org/c/openstack/neutron/+/77563412:47
*** lpetrut has joined #openstack-neutron12:48
*** obondarev has quit IRC12:52
*** ociuhandu has quit IRC13:01
*** ociuhandu has joined #openstack-neutron13:02
amotokijawad_axd: do you mean a compute node itself is compromised?13:05
amotokijawad_axd: or is a VM connected to a network with VNI=100 compromised?13:06
amotokijawad_axd: I assume what in your mind is the first case. In this case, a compute node itself is compromised and the attacker can send any VNI frames. I wonder all things are affeted.13:07
*** ociuhandu has quit IRC13:07
amotokiit is not specific to VXLAN. the same happens for VLAN case. An attacked compute nodes can send packets to any VLANs and it is the same story.13:09
amotokiso, the security of a compute node is important.13:09
openstackgerritFlavio Fernandes proposed openstack/networking-ovn master: Mark scenario trunk tests as unstable for now for python 2 job  https://review.opendev.org/c/openstack/networking-ovn/+/79147913:22
mlavalleslaweq, lajoskatona: ack and thanks. have a nice weekend!13:23
lajoskatonamlavalle: the same to you!13:23
*** ociuhandu has joined #openstack-neutron13:32
*** hoonetorg has quit IRC13:32
*** ociuhandu has quit IRC13:32
*** ociuhandu has joined #openstack-neutron13:33
*** macz_ has joined #openstack-neutron13:37
*** ociuhandu has quit IRC13:38
*** ociuhandu has joined #openstack-neutron13:38
*** macz_ has quit IRC13:41
*** hoonetorg has joined #openstack-neutron13:44
openstackgerritMerged openstack/neutron master: [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses  https://review.opendev.org/c/openstack/neutron/+/78374313:57
*** jawad_axd has quit IRC13:58
openstackgerritSlawek Kaplonski proposed openstack/neutron master: [DVR] Send allowed address pairs info to the L3 agents  https://review.opendev.org/c/openstack/neutron/+/79149214:10
*** ociuhandu has quit IRC14:18
openstackgerritSlawek Kaplonski proposed openstack/neutron-tempest-plugin master: Remove train jobs from the project's CI queues  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/79149414:26
*** bengates has joined #openstack-neutron14:34
*** bengates_ has quit IRC14:38
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/wallaby: [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses  https://review.opendev.org/c/openstack/neutron/+/79146414:39
openstackgerritTakashi Natsume proposed openstack/neutron master: Fix wrong assertion methods in a unit test  https://review.opendev.org/c/openstack/neutron/+/79149714:40
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/victoria: [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses  https://review.opendev.org/c/openstack/neutron/+/79146514:40
*** mlavalle has quit IRC14:41
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/ussuri: [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses  https://review.opendev.org/c/openstack/neutron/+/79146714:41
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/train: [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses  https://review.opendev.org/c/openstack/neutron/+/79146814:42
*** ociuhandu has joined #openstack-neutron14:45
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/stein: [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses  https://review.opendev.org/c/openstack/neutron/+/79150014:47
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/rocky: [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses  https://review.opendev.org/c/openstack/neutron/+/79146914:48
openstackgerritSlawek Kaplonski proposed openstack/neutron stable/queens: [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses  https://review.opendev.org/c/openstack/neutron/+/79147014:48
*** ociuhandu has quit IRC14:56
*** macz_ has joined #openstack-neutron14:58
*** ociuhandu has joined #openstack-neutron15:11
*** mlavalle has joined #openstack-neutron15:11
*** tkajinam has quit IRC15:14
*** ociuhandu has quit IRC15:16
*** ociuhandu has joined #openstack-neutron15:21
*** gcheresh has quit IRC15:34
elodslaweq: just a heads up: I'm about to approve your ocata-eol patch ( https://review.opendev.org/790904 ) and delete related stable/ocata branches after it has merged and the tagging is finished15:36
openstackgerritFlavio Fernandes proposed openstack/networking-ovn stable/train: Mark scenario trunk tests as unstable for now for python 2 job  https://review.opendev.org/c/openstack/networking-ovn/+/79100815:38
*** ociuhandu has quit IRC15:45
*** gregraka2 has joined #openstack-neutron16:03
*** jlibosva has quit IRC16:07
*** lpetrut has quit IRC16:10
*** macz_ has quit IRC16:12
*** gregraka2 has quit IRC16:15
*** lucasagomes has quit IRC16:26
*** jpena is now known as jpena|off16:28
*** bengates_ has joined #openstack-neutron16:30
openstackgerritMerged openstack/os-vif master: Creating oslo.config.opts entry_points for plugins  https://review.opendev.org/c/openstack/os-vif/+/78964516:32
openstackgerritMerged openstack/os-vif master: setup.cfg: Replace dashes with underscores  https://review.opendev.org/c/openstack/os-vif/+/78973416:32
*** bengates has quit IRC16:32
*** elvira has quit IRC16:34
*** bengates_ has quit IRC16:34
*** psahoo_ has quit IRC16:41
*** lajoskatona has quit IRC17:05
*** dsneddon has joined #openstack-neutron17:20
*** ociuhandu has joined #openstack-neutron18:01
openstackgerritMerged openstack/neutron master: Use payloads for TRUNK and SUBPORTS callbacks  https://review.opendev.org/c/openstack/neutron/+/63506018:02
*** ociuhandu has quit IRC18:07
openstackgerritMerged openstack/networking-ovn stable/train: Don't ever give up trying to connect to OVN DBs  https://review.opendev.org/c/openstack/networking-ovn/+/78859118:07
openstackgerritMerged openstack/ovsdbapp master: Fix docs job  https://review.opendev.org/c/openstack/ovsdbapp/+/79131218:09
*** tbachman has quit IRC18:53
*** tbachman has joined #openstack-neutron18:53
openstackgerritMerged openstack/neutron master: Fix SQLAlchemy warnings with view only relationships  https://review.opendev.org/c/openstack/neutron/+/79028819:24
*** TMM has quit IRC19:46
*** TMM has joined #openstack-neutron19:46
openstackgerritFlavio Fernandes proposed openstack/networking-ovn stable/train: WIP: DNM  https://review.opendev.org/c/openstack/networking-ovn/+/79154520:15
openstackgerritMerged openstack/neutron stable/victoria: ovn-migration: Use DHCP nodes to configure dnsmasq  https://review.opendev.org/c/openstack/neutron/+/79111320:20
openstackgerritMerged openstack/neutron stable/ussuri: ovn-migration: Use DHCP nodes to configure dnsmasq  https://review.opendev.org/c/openstack/neutron/+/79111420:25
*** livelace has joined #openstack-neutron20:34
*** rcernin has joined #openstack-neutron20:39
*** gthiemonge has quit IRC20:49
*** gthiemonge has joined #openstack-neutron20:49
*** gthiemonge has quit IRC20:52
*** gthiemonge has joined #openstack-neutron20:54
*** macz_ has joined #openstack-neutron21:03
*** macz_ has quit IRC21:07
*** macz_ has joined #openstack-neutron21:08
*** tbachman has quit IRC21:14
*** yumiriam has quit IRC21:16
*** livelace has quit IRC21:39
*** rcernin has quit IRC21:40
*** macz_ has quit IRC21:45
*** macz_ has joined #openstack-neutron21:49
openstackgerritMerged openstack/networking-ovn stable/train: ovn-migration: Use DHCP nodes to configure dnsmasq  https://review.opendev.org/c/openstack/networking-ovn/+/79143921:55
*** rcernin has joined #openstack-neutron22:06
*** rcernin has quit IRC22:11
*** rcernin has joined #openstack-neutron22:23
*** rcernin has quit IRC22:27
*** rcernin has joined #openstack-neutron22:28
*** rcernin has quit IRC22:33
*** tbachman has joined #openstack-neutron22:52
*** rcernin has joined #openstack-neutron23:05
*** rcernin has quit IRC23:09
*** macz_ has quit IRC23:14
*** bengates has joined #openstack-neutron23:21
*** bengates has quit IRC23:26
*** rcernin has joined #openstack-neutron23:35
*** rcernin has quit IRC23:40
*** mlavalle has quit IRC23:46
*** bengates has joined #openstack-neutron23:50
*** bengates has quit IRC23:55

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!