Thursday, 2021-12-09

opendevreviewMiguel Lavalle proposed openstack/neutron master: Test  https://review.opendev.org/c/openstack/neutron/+/82114301:47
opendevreviewyatin proposed openstack/neutron-tempest-plugin master: [WIP] Switch scenario jobs to virt nodes  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/82106704:38
opendevreviewMerged openstack/neutron master: Improve Router callback system's publish events  https://review.opendev.org/c/openstack/neutron/+/80484605:58
opendevreviewyatin proposed openstack/neutron-tempest-plugin master: Update irrelevant-files for api/scenario jobs  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/82116007:13
opendevreviewyatin proposed openstack/neutron-tempest-plugin master: Update irrelevant-files for api/scenario jobs  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/82116007:20
*** gibi_ is now known as gibi07:52
opendevreviewMaor Blaustein proposed openstack/neutron-tempest-plugin master: Add test_create_port_with_dns_name  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/82045608:00
lajoskatonaralonsoh: Hi, am I right that we don't need another discussion for https://bugs.launchpad.net/neutron/+bug/1953170 ([RFE] Unify quota engine API) ?08:16
ralonsohlajoskatona, that's my opinion, I think community accepted the steps provided08:17
ralonsohto move to the new quota behaviour08:17
lajoskatonaralonsoh: thanks, that was my understanding also08:19
opendevreviewOleg Bondarev proposed openstack/neutron master: Add Local IP fullstack test cases  https://review.opendev.org/c/openstack/neutron/+/81632708:20
slaweqlajoskatona that was also my understanding as well :)08:22
slaweqralonsoh lajoskatona can You check https://review.opendev.org/c/openstack/neutron/+/799625 when You will have some time?08:32
ralonsohsure08:32
slaweqit should helps with FIPS enabled jobs (maybe it's not critical but will be needed with: https://review.opendev.org/c/openstack/devstack/+/799621 )08:32
slaweqralonsoh also https://review.opendev.org/c/openstack/devstack/+/799621 seems to be fine now08:33
ralonsohchecking now08:33
slaweqI will do some DNM patch in Neutron to test it with all our jobs but zuul on that patch is happy now08:33
opendevreviewSlawek Kaplonski proposed openstack/neutron master: DNM It's just test of the Devstack patch  https://review.opendev.org/c/openstack/neutron/+/82116308:35
opendevreviewyatin proposed openstack/neutron stable/wallaby: Add retry when executing OF commands if "InvalidDatapath"  https://review.opendev.org/c/openstack/neutron/+/82117408:39
opendevreviewyatin proposed openstack/neutron stable/victoria: Add retry when executing OF commands if "InvalidDatapath"  https://review.opendev.org/c/openstack/neutron/+/82117508:40
opendevreviewMaor Blaustein proposed openstack/neutron-tempest-plugin master: Add test_create_port_with_dns_name  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/82045608:41
opendevreviewSlawek Kaplonski proposed openstack/neutron master: Add FIPS enabled scenario jobs  https://review.opendev.org/c/openstack/neutron/+/79753708:43
slaweqlajoskatona just FYI, I read pain points etherpad today and I opened https://bugs.launchpad.net/neutron/+bug/195371608:48
slaweqI will work on it08:48
slaweqI hope it should be easy to do08:48
opendevreviewRodolfo Alonso proposed openstack/neutron master: Quota engine to accept --force parameter in limit update  https://review.opendev.org/c/openstack/neutron/+/82119009:39
opendevreviewRodolfo Alonso proposed openstack/neutron master: Mock the OVN events providing a "priority" value  https://review.opendev.org/c/openstack/neutron/+/82091109:43
opendevreviewRodolfo Alonso proposed openstack/neutron master: Provide a "priority" value to the OVN events  https://review.opendev.org/c/openstack/neutron/+/82091109:44
mdboothHi, just trying to debug a CI failure in a configuration which normally works and hasn't been changed (2 node devstack on stable victoria). Server failed to come up on the worker with PortBindingFailed. I see the following 2 lines earlier in the neutron logs on the controller:10:03
mdboothDec 08 23:25:22 [controller-devstack.log] capo-e2e-controller neutron-server[104782]: DEBUG neutron.plugins.ml2.drivers.mech_agent [req-4edf64dc-5644-409a-bbf6-2b06c9b5e63c req-06eb50f4-4241-4a3d-99db-038ddfad2cd4 service neutron] Port e3517cda-7198-4483-b868-921e83cec8ea on network 1a4f49b3-95d6-4590-a3e3-84924ce4235e not bound, no agent of type10:03
mdboothLinux bridge agent registered on host capo-e2e-worker {{(pid=104782) bind_port /opt/stack/neutron/neutron/plugins/ml2/drivers/mech_agent.py:97}}10:03
mdboothDec 08 23:25:22 [controller-devstack.log] capo-e2e-controller neutron-server[104782]: ERROR neutron.plugins.ml2.managers [req-4edf64dc-5644-409a-bbf6-2b06c9b5e63c req-06eb50f4-4241-4a3d-99db-038ddfad2cd4 service neutron] Failed to bind port e3517cda-7198-4483-b868-921e83cec8ea on host capo-e2e-worker for vnic_type normal using segments [{'id':10:03
mdbooth'6e9a9521-a90f-476b-b836-2888ec1385ea', 'network_type': 'vxlan', 'physical_network': None, 'segmentation_id': 1707, 'network_id': '1a4f49b3-95d6-4590-a3e3-84924ce4235e'}]10:03
mdboothIs that interesting or a 'normal failure'? Just re-running to see if it reproduces, but posting in case it rings a bell.10:03
ignaziocassanoHello, is there any way to integrate neutron vxlan with vmware nsx ?10:21
ignaziocassanoIn other words nsx could be used as a ovn controller ?10:22
*** redrobot6 is now known as redrobot10:23
ralonsohignaziocassano, what does it means to use nsx as ovn-controller? You'll need to run OVS and ovn-controller service in a node10:28
ralonsohmdbooth, did you configure the ml2.type_drivers?10:28
ralonsohtype_drivers = flat,vlan,vxlan,geneve10:28
ralonsohfor example10:28
ignaziocassanoralonsoh, I never tried. Mi collegues want to use nsx-t but I yhink it is very expensive10:31
ignaziocassanoI do not know what can I do. At this thime for connectting vxlan between vcenter and openstack, we used a vlan a routing.10:32
ralonsohthe point is that nsx provides a SDN by itself. I don't know if this is compatible somehow with OVN as backend10:33
ignaziocassanoI do not know what can I do. At this thime for connectting vxlan between vcenter and openstack, we used a vlan and routing.10:33
ralonsohah, you mean connect openstack 10:33
ignaziocassanoyes10:33
ralonsohyou can use vxlan networks10:33
ralonsohand now vlan (with a static GW)10:33
ralonsohso yes, you can use both types10:34
ignaziocassanoI want to transport vxlan between vcenter and openstack10:34
ralonsohI see no problem, you can have vxlan provider networks with OVN10:34
ignaziocassanoralonsoh: so I mus use ovn . I never used ovn. In this case the controller will be the nsx ? Is ther any detailed configuration ?10:35
ralonsohwhat controller? there are two levels10:36
ralonsohneutron controller or ovn controller10:36
ignaziocassanoovn, I think 10:37
ralonsohthe ovn-controller is a service in each node to connect the SB DB with the local OVS instance10:37
ralonsohyou can create a chassis (that will hold an ovn-controller) in a node10:38
ignaziocassanoralonsoh: so I will not have a local openbswitch db but I centalized db ?10:38
ralonsohno10:38
ralonsohthe NB and SB DB are centralized10:39
ralonsohthe local OVS DB is local10:39
ralonsohthe ovn-controller translates the SB registers into the local OVS DB10:39
ralonsohNB -> SB -> (local) OVS DB10:39
ignaziocassanoralonsh: And how can I use nsx in this architecture ?10:40
ralonsohI have no idea, sorry10:40
ralonsohI don't know if you deploy another SDN on top of OVN10:40
ignaziocassanoralansoh: no problem Thanks anycase10:41
opendevreviewOleg Bondarev proposed openstack/neutron master: Add Local IP fullstack test cases  https://review.opendev.org/c/openstack/neutron/+/81632710:55
ignaziocassanoralonsoh: l2gw and hardware vtep ? Vmware nsx supports hw vtep.If  l2 gw works, we could connect vxlan without L3 but using L2 ?10:59
ralonsohI don;t know if OVN supports HW VTEP11:05
ralonsohit does, in theory, but I don't know how to configure it in Neutron (if we support it)11:06
ignaziocassanoralonsoh: thanks again11:07
sean-k-mooneyralonsoh: i think you woudl have to use the l2/l3gateway proejcts to configure external vteps11:34
sean-k-mooneythe core neutron api does not have the ablity to model them11:34
ralonsohno, we can't11:34
ralonsohand in OVN this is part of the OVN core11:34
ralonsohso in Neutron we can't model the VTEP connectivity11:35
ralonsohI know we can, in OVS, configure manually the HW VTEP11:35
ralonsohbut not in OVN11:35
sean-k-mooneywell with ovn you can model them in the nortdb11:35
sean-k-mooneybut we woudl need an api extion to do so or use l* gateway proejct and enhacne them to support ovn11:36
sean-k-mooneysomethign bascially woudl have to expose ovns supprot for external top of rack vtps11:36
sean-k-mooneyand that at least for now feels like soemthing that is outside the scope of core neutron although it could be added if there was enough interest i guess11:37
sean-k-mooneyits really an admin only capablitity however11:37
sean-k-mooneyfor most admins i suspect that flat/vlans provider networks possible with bgp integration will suffice11:38
sean-k-mooneyand as you said a second sdn can alway sbe ued to configure vteps at the TOR switch if they really need that out of band or neutron11:39
ralonsohsean-k-mooney, checking https://www.openvswitch.org/support/dist-docs-2.5/ovn-architecture.7.txt, this could be a bit more complex11:40
ralonsohwe need to deploy another service, ovn-controller-vtep11:40
sean-k-mooneyyes you would11:40
ralonsoh(I said nothing, we already deploy it)11:41
sean-k-mooneyproably not in all installers11:41
ralonsohright, I'm checking devstack11:41
ralonsohalong with the schema creation, etc.11:41
sean-k-mooneyya devstack proably does i suspect ooo does not11:42
sean-k-mooneyit might but if we dont test/use it its proably not there11:42
ralonsohright11:42
sean-k-mooneyanywya it shoudl eb therotically possible to deploy it and then add a neutron api exteion to allow defining the vteps if someone put in the work11:43
sean-k-mooneyim just not aware of anyone working on it now11:43
ralonsohI'll check that internally11:43
ralonsohthat could be a good feature (not present in OVS ml2, if I'm not wrong)11:44
sean-k-mooneyits aviable via the l2 gateway and l3 gateway project11:44
sean-k-mooneybut its not in core neutorn11:44
sean-k-mooneyhttps://opendev.org/x/networking-l2gw11:45
ralonsohah yes, right11:45
sean-k-mooneyhttps://opendev.org/x/networking-l2gw/src/commit/b20b90d7694f8c47e2275bc17995f4854eedf6ae/specs/newton/l2-border-gateway-implementation.rst11:45
sean-k-mooneylike networking bgp this might be a case wehre the api from that extion might want to be resued and the fucntioanlity delegated to ovn11:46
sean-k-mooneybut i agree it would be a nice feature to have11:47
sean-k-mooneyjust not sure its an urgent one11:47
ralonsohright, that could be easier in OVN11:48
ralonsohand we can reuse the API11:48
opendevreviewMaor Blaustein proposed openstack/neutron-tempest-plugin master: Add test_create_port_with_dns_name  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/82045612:23
ykarelralonsoh, slaweq when u get chance please have a look at backports https://review.opendev.org/q/Ia8d202f8a38362272e9519c1cbd9d6ba9359e0a112:48
ralonsohykarel, but we didn't detect this problem in older versions12:49
ykarelseeing those failures in stable/branches jobs12:49
ralonsohykarel, do you have a link?12:49
ykarelralonsoh, yes http://logstash.openstack.org/#dashboard/file/logstash.json?query=message%3A%5C%22os_ken.app.ofctl.exception.InvalidDatapath%3A%20Datapath%20Invalid%5C%22%20AND%20build_branch%3A%5C%22stable%2Fwallaby%5C%2212:50
ykarelalso seen in neutron-tempest-plugin where branched jobs run12:51
ykarelsimilarly can see for victoria too12:51
ralonsohykarel, then what you need to backport is https://review.opendev.org/c/openstack/neutron/+/81545912:53
ykarelralonsoh, ahh you mean only ^ or both are needed?12:54
ralonsohlast one is enough12:55
opendevreviewSlawek Kaplonski proposed openstack/neutron master: WIP Update secure RBAC policies accrodingly to the new guidelines  https://review.opendev.org/c/openstack/neutron/+/82120812:58
ykarelralonsoh, ohkk strange as 815459 is not in xena13:00
ykareland i don't see much failure in xena, only failures are in grenade jobs, which upgrades from wallaby to xena13:01
ykarelIa8d202f8a38362272e9519c1cbd9d6ba9359e0a1 is in xena so i thought that will also clear victoria/wallaby too so proposed backports13:03
ykarelbut likely you mean https://review.opendev.org/c/openstack/neutron/+/815459 is better workaround, right?13:04
ralonsohyes13:04
ykarelokk will propose backport for that then13:04
ralonsohin any case, the problem should be also solved in os-ken13:04
ralonsohbut we can't bump library versions13:04
ykarelyes okk13:04
ykarelahh it conflicts during cherry-pick to xena itself13:06
ykarelwill check13:06
opendevreviewyatin proposed openstack/neutron stable/xena: [OVS] Workaround when OpenFlow controller restarts  https://review.opendev.org/c/openstack/neutron/+/82121113:17
opendevreviewyatin proposed openstack/neutron stable/wallaby: [OVS] Workaround when OpenFlow controller restarts  https://review.opendev.org/c/openstack/neutron/+/82118213:17
opendevreviewyatin proposed openstack/neutron stable/victoria: [OVS] Workaround when OpenFlow controller restarts  https://review.opendev.org/c/openstack/neutron/+/82118313:18
ykarelralonsoh, done ^13:18
ykarelwill abandon the other one in favor of this13:18
*** ykarel is now known as ykarel|away13:21
opendevreviewMerged openstack/neutron stable/ussuri: [OVN] Fix gateway_mtu option should not always be set  https://review.opendev.org/c/openstack/neutron/+/81958114:07
opendevreviewTamas Gergely proposed openstack/neutron master: Check whether vxlan group and local addresses are IPv4 or IPv6  https://review.opendev.org/c/openstack/neutron/+/82037615:11
opendevreviewBence Romsics proposed openstack/neutron master: WIP Make the dead vlan actually dead  https://review.opendev.org/c/openstack/neutron/+/82089715:38
opendevreviewSlawek Kaplonski proposed openstack/neutron master: Update secure RBAC policies accrodingly to the new guidelines  https://review.opendev.org/c/openstack/neutron/+/82120815:57
opendevreviewMerged openstack/neutron master: Provide a "priority" value to the OVN events  https://review.opendev.org/c/openstack/neutron/+/82091116:57
*** weechat1 is now known as amorin17:54
*** weechat1 is now known as amorin18:00
opendevreviewRodolfo Alonso proposed openstack/neutron master: [WIP] When creating a VXLAN interface, a device is mandatory  https://review.opendev.org/c/openstack/neutron/+/82127118:13
slaweqgmann lbragstad_ hi, I pushed today patch to change neutron's secure rbac according to what was agreed in the community goal (at least I think it's like it should be now), if You will have some time, please take a look at https://review.opendev.org/c/openstack/neutron/+/82120821:14
slaweqthx in advance21:14
opendevreviewAde Lee proposed openstack/neutron master: Add FIPS enabled scenario jobs  https://review.opendev.org/c/openstack/neutron/+/79753722:06
gmannslaweq: sure. I will be checking that next week early 22:33
slaweqthx gmann22:34
*** tbachman_ is now known as tbachman22:54
*** tbachman_ is now known as tbachman23:04
opendevreviewMiguel Lavalle proposed openstack/neutron master: Test commit  https://review.opendev.org/c/openstack/neutron/+/82133423:23

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!