| opendevreview | Merged openstack/neutron-lib stable/ussuri: Enforce policy for qos_policy_id attribute https://review.opendev.org/c/openstack/neutron-lib/+/826214 | 00:41 |
|---|---|---|
| opendevreview | Merged openstack/neutron-lib stable/victoria: Enforce policy for qos_policy_id attribute https://review.opendev.org/c/openstack/neutron-lib/+/826213 | 00:41 |
| opendevreview | yatin proposed openstack/neutron stable/xena: Update irrelevant-files for non scenario jobs https://review.opendev.org/c/openstack/neutron/+/826811 | 05:34 |
| opendevreview | yatin proposed openstack/neutron stable/wallaby: Update irrelevant-files for non scenario jobs https://review.opendev.org/c/openstack/neutron/+/826830 | 05:35 |
| opendevreview | yatin proposed openstack/neutron stable/wallaby: [OVN] Correctly set dns_server in dhcpv4/v6 options https://review.opendev.org/c/openstack/neutron/+/824022 | 05:38 |
| opendevreview | yatin proposed openstack/neutron-lib stable/stein: Dropping lower constraints testing (stable Xena) https://review.opendev.org/c/openstack/neutron-lib/+/826668 | 05:44 |
| opendevreview | Lajos Katona proposed openstack/tap-as-a-service master: WIP: Make ovs-taas start in VLAN only env https://review.opendev.org/c/openstack/tap-as-a-service/+/817449 | 07:13 |
| opendevreview | yatin proposed openstack/neutron-lib stable/stein: Enforce policy for qos_policy_id attribute https://review.opendev.org/c/openstack/neutron-lib/+/826615 | 07:18 |
| opendevreview | Lajos Katona proposed openstack/tap-as-a-service master: WIP: Make ovs-taas start in VLAN only env https://review.opendev.org/c/openstack/tap-as-a-service/+/817449 | 07:19 |
| opendevreview | yatin proposed openstack/neutron-tempest-plugin master: Use random name in qos test_list_policy_filter_by_name https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/826827 | 08:25 |
| opendevreview | Slawek Kaplonski proposed openstack/neutron master: Use elevated context to update router's external gateway https://review.opendev.org/c/openstack/neutron/+/826828 | 08:36 |
| slaweq | lajoskatona: hi, if You don't mind I would like to add one topic to the drivers meeting for today | 09:04 |
| slaweq | it's not rfe but I would like to talk about https://bugs.launchpad.net/neutron/+bug/1959332 | 09:04 |
| slaweq | is that possible? | 09:04 |
| lajoskatona | slaweq: sure, we have only one topic as "on demand" | 09:14 |
| opendevreview | Merged openstack/neutron-dynamic-routing master: Use TOX_CONSTRAINTS_FILE https://review.opendev.org/c/openstack/neutron-dynamic-routing/+/822893 | 09:23 |
| slaweq | lajoskatona: thx a lot | 09:38 |
| opendevreview | yatin proposed openstack/neutron-tempest-plugin master: Update irrelevant-files for scenario jobs https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/826647 | 09:52 |
| opendevreview | yatin proposed openstack/neutron-tempest-plugin master: [DNM] test patch https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/826867 | 09:54 |
| opendevreview | Rodolfo Alonso proposed openstack/neutron master: WIP Use neutron db for ovn agents https://review.opendev.org/c/openstack/neutron/+/818850 | 10:33 |
| opendevreview | Merged openstack/ovn-octavia-provider stable/victoria: [victoria/ussuri] Fix CI jobs https://review.opendev.org/c/openstack/ovn-octavia-provider/+/825652 | 10:44 |
| ralonsoh | bcafarel, https://review.opendev.org/c/openstack/neutron/+/826438 | 10:49 |
| ralonsoh | what do you think? | 10:49 |
| ralonsoh | I added this comment to justify why I was leaving self.vif_details[VIF_DETAILS_CONNECTIVITY] key | 10:50 |
| ralonsoh | in stable releases. It is easier | 10:50 |
| frickler | slaweq: I found another bug: "openstack port list" fails with 500 as system-admin. my feeling is that this should be allowed, even as system-reader. but if there is a reason no to allow it, it should at least have a proper return code and not 500 | 10:55 |
| frickler | like in the server log there is "ERROR oslo_middleware.catch_errors oslo_policy.policy.InvalidScope: rule:get_port requires a scope of ['project'], request was made with system scope." | 10:55 |
| opendevreview | Merged openstack/ovn-octavia-provider stable/victoria: Set listeners back to ACTIVE upon pool/member action failures https://review.opendev.org/c/openstack/ovn-octavia-provider/+/825505 | 10:57 |
| opendevreview | Merged openstack/ovn-octavia-provider stable/ussuri: [victoria/ussuri] Fix CI jobs https://review.opendev.org/c/openstack/ovn-octavia-provider/+/825653 | 10:58 |
| opendevreview | Merged openstack/ovn-octavia-provider stable/ussuri: Set listeners back to ACTIVE upon pool/member action failures https://review.opendev.org/c/openstack/ovn-octavia-provider/+/825515 | 10:58 |
| opendevreview | Lajos Katona proposed openstack/neutron-tempest-plugin master: Use random policy names in test_qos and test_qos_negative https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/826871 | 11:02 |
| opendevreview | Lajos Katona proposed openstack/tap-as-a-service master: WIP: Install flows to bridge only if the network provider is related https://review.opendev.org/c/openstack/tap-as-a-service/+/822302 | 11:06 |
| opendevreview | Slawek Kaplonski proposed openstack/neutron master: Handle properly InvalidScope exceptions to not return error 500 https://review.opendev.org/c/openstack/neutron/+/826872 | 11:10 |
| frickler | ah, you had a bug open for that already, great | 11:47 |
| opendevreview | Rodolfo Alonso proposed openstack/neutron master: [OVN] Implement floating IP network QoS inheritance https://review.opendev.org/c/openstack/neutron/+/817790 | 11:53 |
| ralonsoh | slaweq, bcafarel https://review.opendev.org/c/openstack/neutron/+/824752 | 11:56 |
| ralonsoh | if you have a couple of mins | 11:57 |
| ralonsoh | lajoskatona, ^^ | 11:57 |
| ralonsoh | thanks in advance | 11:57 |
| ykarel | slaweq, ralonsoh lajoskatona when you get chance please check https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/826647 | 11:57 |
| ykarel | should help in other tempest-plugin patches | 11:57 |
| ykarel | thanks in advance | 11:57 |
| bcafarel | ralonsoh: sure | 12:18 |
| lajoskatona | will check these (I have chain downstream meetings..... :/) | 12:27 |
| ralonsoh | no rush at all | 12:33 |
| gibi | lajoskatona: heavy chains indeed :) | 12:33 |
| opendevreview | Lajos Katona proposed openstack/tap-as-a-service master: WIP: Make ovs-taas start in VLAN only env https://review.opendev.org/c/openstack/tap-as-a-service/+/817449 | 12:39 |
| opendevreview | Elvira García Ruiz proposed openstack/neutron master: [OVN] Fix overlapping security group objects not correctly applied https://review.opendev.org/c/openstack/neutron/+/822096 | 12:52 |
| opendevreview | Elvira García Ruiz proposed openstack/neutron master: [OVN] Fix overlapping security group objects not correctly applied https://review.opendev.org/c/openstack/neutron/+/822096 | 13:24 |
| *** dasm|off is now known as dasm | 13:30 | |
| *** dasm is now known as dasm|rover | 13:31 | |
| lajoskatona | #startmeeting neutron_drivers | 14:00 |
| opendevmeet | Meeting started Fri Jan 28 14:00:35 2022 UTC and is due to finish in 60 minutes. The chair is lajoskatona. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:00 |
| opendevmeet | The meeting name has been set to 'neutron_drivers' | 14:00 |
| lajoskatona | Hi | 14:00 |
| mlavalle | o/ | 14:00 |
| ralonsoh | hello | 14:00 |
| slaweq | hi | 14:00 |
| yamamoto | hi | 14:01 |
| obondarev_ | hi | 14:01 |
| lajoskatona | Hi yamamoto | 14:01 |
| lajoskatona | Ok, let's start | 14:02 |
| lajoskatona | We have no RFE for today, but 2 topics in the "on demand agenda" | 14:02 |
| lajoskatona | 1 from me, and it is to go back to the question of neutron-fwaas maintenance | 14:02 |
| lajoskatona | see discussion on #openstack-tc with gmann: https://meetings.opendev.org/irclogs/%23openstack-tc/%23openstack-tc.2022-01-24.log.html | 14:03 |
| lajoskatona | TC would like to make simpler to have maintainers for fwaas (anything) if I understand well, and to avoid project renaming where possible | 14:04 |
| lajoskatona | so the question is if Inspur can keep maintaining / developing current fwaas repo in openstack/neutron-fwaas | 14:04 |
| mlavalle | why don't we go to my original proposal in December to Inspur? | 14:05 |
| mlavalle | we can have them go though the process of formally rehabilitating the project in the stadium and we have the tamplates to guide us? | 14:05 |
| slaweq | mlavalle: can You remind what was it exactly? | 14:05 |
| mlavalle | I proposed using the template to evaluate stadium projects | 14:06 |
| lajoskatona | perhaps this was it: http://lists.openstack.org/pipermail/openstack-discuss/2021-December/026425.html | 14:06 |
| lajoskatona | I mean the mail | 14:06 |
| lajoskatona | more likely this mail: http://lists.openstack.org/pipermail/openstack-discuss/2021-December/026442.html sorry | 14:07 |
| mlavalle | yes the latter one | 14:07 |
| lajoskatona | thanks mlavalle | 14:08 |
| mlavalle | they already agreed to follow that path | 14:08 |
| opendevreview | Merged openstack/neutron-lib stable/train: Enforce policy for qos_policy_id attribute https://review.opendev.org/c/openstack/neutron-lib/+/826225 | 14:08 |
| obondarev_ | does it contradict with what gmann suggested? | 14:08 |
| mlavalle | and if we follow that process, it will alleviate the concern of adding more workload to the core team, because there will be commitments on th side of Inspur | 14:09 |
| lajoskatona | mlavalle: yes, I think this can work | 14:09 |
| slaweq | ++ for that if it will be better to have it in stadium again, instead of moving it to x/ | 14:10 |
| obondarev_ | +1 | 14:10 |
| lajoskatona | If there is no activity we have still the option to stop fwaas maintenance again | 14:10 |
| mlavalle | obondarev_: a little bit, but I think that Inspur, if they really want to maintain the project, should have some skin in the game | 14:10 |
| slaweq | and regarding question about if we want to have it in stadium or not: I personally am fine with having it in stadium if the inspur team will maintain it | 14:10 |
| lajoskatona | +1 | 14:11 |
| mlavalle | yeah, as long as we have a commitment | 14:11 |
| mlavalle | from Inspur | 14:11 |
| slaweq | we can make some of their developers cores in the neutron-fwaas repo even so we will not need to do a lot there hopefully | 14:11 |
| ralonsoh | one question: being in stadium means releasing every cycle, right? | 14:11 |
| mlavalle | and we formalize that commitment in a doc | 14:11 |
| ralonsoh | (a part from other requirements) | 14:11 |
| slaweq | ralonsoh: usually yes, but that generally depends on the release model for the project IIIUC | 14:11 |
| mlavalle | ralonsoh: yes | 14:12 |
| ralonsoh | thanks | 14:12 |
| ralonsoh | so +1 from me, good to see people collaborating on Neutron orbit | 14:12 |
| mlavalle | and I think Inspur will have a better offering to their customers. They now can claim that the new FWaaS has the official recornition of being in the Stadium | 14:13 |
| lajoskatona | +1 from me also | 14:13 |
| mlavalle | they can claim that Saint Lajos has annointed the project :-) | 14:14 |
| lajoskatona | :-) | 14:14 |
| lajoskatona | not me but the team | 14:14 |
| slaweq | +1 from me too | 14:14 |
| obondarev_ | +1 | 14:15 |
| mlavalle | +1 | 14:15 |
| yamamoto | +1 | 14:15 |
| lajoskatona | but I can send the mail about it, so my stamp will be on top ;) | 14:15 |
| mlavalle | cool | 14:15 |
| mlavalle | you got the idea | 14:15 |
| lajoskatona | ok, next topic is from slaweq: https://bugs.launchpad.net/neutron/+bug/1959332 | 14:17 |
| slaweq | thx lajoskatona | 14:17 |
| slaweq | everything is already described in the bug description | 14:17 |
| slaweq | but I will quickly explain here too | 14:17 |
| slaweq | basically, with new rbac policies and scopes enforcement, project_admin user can access everything but from one project only | 14:18 |
| slaweq | there is no "super user" who can access everything | 14:18 |
| slaweq | so basically there is no user which can do "openstack port list" and see ports used as router external gateway | 14:18 |
| slaweq | with old defaults, project admin (admin) can see all resources so also such ports | 14:19 |
| slaweq | If we look at code https://github.com/openstack/neutron/blob/d0fd4aa30adc883971bd4d87e0540523bded7a38/neutron/db/l3_db.py#L337 - it is done intentionally that this port don't belongs to any project | 14:19 |
| ralonsoh | I was looking for this | 14:20 |
| slaweq | and now the question is - if we want to have those ports visible in api somehow, and if yes, how to solve it :) | 14:20 |
| ralonsoh | why is that? | 14:20 |
| slaweq | why is what ralonsoh ? | 14:20 |
| ralonsoh | to let the port without project | 14:20 |
| ralonsoh | the GW port | 14:20 |
| slaweq | According to the comment there, to not expose such ports for regular users | 14:20 |
| ralonsoh | this is not a good reason with RBACs in place now | 14:21 |
| slaweq | we could probably change it to belong to tenant and add policy rule so such ports would be available only for admin users | 14:21 |
| lajoskatona | with new RBAC model whose project_id should be there? | 14:21 |
| ralonsoh | for project admin/users yes | 14:22 |
| slaweq | lajoskatona: IMO it should be same owner as of router | 14:22 |
| mlavalle | yeah I think so | 14:22 |
| lajoskatona | ok | 14:22 |
| ralonsoh | I agree with the second alternative you propose: to assign the project ID | 14:22 |
| mlavalle | me too | 14:22 |
| ralonsoh | matching the router project ID | 14:22 |
| mlavalle | is the cleanest | 14:22 |
| ralonsoh | (of course, for sure that will have a ton of issue will see later) | 14:22 |
| obondarev_ | yeah, the one without "hardcode" word in description :) | 14:23 |
| slaweq | and new policy rule to make such ports available only for the PROJECT_ADMIN by default, right? | 14:23 |
| lajoskatona | that's sounds reasonable | 14:23 |
| ralonsoh | yes | 14:23 |
| slaweq | so operator will even be able to modify it if will want to expose such ports to users | 14:23 |
| mlavalle | yeah, but that's probably the shake up that needs to happen as a consequence of implementing the new RBAC model OpenStack wide | 14:23 |
| slaweq | sounds like step in good direction with new rbac | 14:23 |
| slaweq | mlavalle: I think that there will be many such shake ups there :) | 14:24 |
| slaweq | this is really huge change | 14:24 |
| mlavalle | yeap, me too | 14:24 |
| slaweq | ok, thx for Your opinions on this | 14:25 |
| slaweq | I think I know what to do now | 14:25 |
| mlavalle | btw, I think that we should not only fix this in Neutron, but also we should share the "incident" with the new RBAC czars leading this at the OpenStack weide level | 14:25 |
| slaweq | so I will summarize this discussion in the Launchpad and will propose some patch | 14:25 |
| mlavalle | they should see the consequences of their decisions | 14:25 |
| mlavalle | maybe there is a learning in this for them too | 14:26 |
| slaweq | mlavalle: sure, I will add people responsible by RBAC to the review of that patch and will explain it to them | 14:26 |
| mlavalle | they might even have suggestions based on the impact they've seen in other projects | 14:27 |
| slaweq | TBH I don't think so - this is probably something specific to neutron that resource which normally belongs to the project, don't belong to any project in some case | 14:28 |
| lajoskatona | I see long discussions again for the PTG :-) | 14:28 |
| mlavalle | lol | 14:28 |
| slaweq | and it sounds for me like "hack/workaround" on our side :) | 14:28 |
| mlavalle | cool | 14:28 |
| slaweq | thx for Your feedback and suggestions on this | 14:28 |
| slaweq | that was all from me | 14:29 |
| lajoskatona | thanks for bringing it here and taking care of it | 14:29 |
| mlavalle | thanks for bringing this up | 14:29 |
| lajoskatona | If there's nothing more, we can close the meeting for today | 14:30 |
| slaweq | ++ | 14:30 |
| mlavalle | nothing else from me | 14:30 |
| lajoskatona | #endmeeting | 14:30 |
| opendevmeet | Meeting ended Fri Jan 28 14:30:45 2022 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 14:30 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/neutron_drivers/2022/neutron_drivers.2022-01-28-14.00.html | 14:30 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/neutron_drivers/2022/neutron_drivers.2022-01-28-14.00.txt | 14:30 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/neutron_drivers/2022/neutron_drivers.2022-01-28-14.00.log.html | 14:30 |
| mlavalle | o/ | 14:30 |
| lajoskatona | o/ | 14:30 |
| ralonsoh | bye | 14:30 |
| mlavalle | have a nice weekend | 14:30 |
| obondarev_ | o/ | 14:30 |
| slaweq | have a great weekend! | 14:30 |
| slaweq | o/ | 14:30 |
| yamamoto | good night | 14:30 |
| lajoskatona | Thanks, have a nice weekend! | 14:31 |
| opendevreview | Slawek Kaplonski proposed openstack/ovn-octavia-provider master: Fix finding logical router of the logical switch https://review.opendev.org/c/openstack/ovn-octavia-provider/+/826896 | 14:58 |
| opendevreview | Merged openstack/neutron master: Ensure subports status is aligned with parent port https://review.opendev.org/c/openstack/neutron/+/824378 | 15:11 |
| opendevreview | Merged openstack/neutron-tempest-plugin master: Update irrelevant-files for scenario jobs https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/826647 | 15:12 |
| opendevreview | Merged openstack/neutron-tempest-plugin master: Add local ip scenario tests https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/823007 | 15:12 |
| opendevreview | Merged openstack/neutron master: Add "bound_drivers" information to port "vif_details" https://review.opendev.org/c/openstack/neutron/+/826512 | 15:13 |
| opendevreview | Merged openstack/neutron master: Fix reference before assignment error in the dhcp_rpc module https://review.opendev.org/c/openstack/neutron/+/826449 | 15:15 |
| *** ykarel_ is now known as ykarel | 15:54 | |
| opendevreview | Lucas Alvares Gomes proposed openstack/neutron master: [OVN] Migrate "reside-on-redirect-chassis" for distributed FIP https://review.opendev.org/c/openstack/neutron/+/826912 | 16:09 |
| opendevreview | Luis Tomas Bolivar proposed openstack/neutron stable/xena: Ensure subports status is aligned with parent port https://review.opendev.org/c/openstack/neutron/+/826843 | 16:43 |
| opendevreview | Luis Tomas Bolivar proposed openstack/neutron stable/wallaby: Ensure subports status is aligned with parent port https://review.opendev.org/c/openstack/neutron/+/826919 | 16:51 |
| opendevreview | Merged openstack/neutron master: [OVN] Fix overlapping security group objects not correctly applied https://review.opendev.org/c/openstack/neutron/+/822096 | 17:33 |
| opendevreview | Frode Nordahl proposed openstack/neutron master: [OVN] Extend port binding parameter validation https://review.opendev.org/c/openstack/neutron/+/818420 | 17:55 |
| opendevreview | Frode Nordahl proposed openstack/neutron master: WIP ovn: Off-path SmartNIC DPU Port Binding with OVN https://review.opendev.org/c/openstack/neutron/+/808961 | 17:55 |
| opendevreview | Merged openstack/neutron master: Reduce iptables version check from 1.6.2 to 1.6.0 https://review.opendev.org/c/openstack/neutron/+/822562 | 20:24 |
| *** dasm|rover is now known as dasm|off | 21:47 | |
| opendevreview | Merged openstack/neutron stable/ussuri: Properly clean up ovn-northd in functional tests https://review.opendev.org/c/openstack/neutron/+/825725 | 23:51 |
| opendevreview | Merged openstack/neutron-tempest-plugin master: Use random policy names in test_qos and test_qos_negative https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/826871 | 23:51 |
| opendevreview | Merged openstack/neutron-tempest-plugin master: Use random name in qos test_list_policy_filter_by_name https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/826827 | 23:52 |
| opendevreview | Merged openstack/neutron master: Add diff log on mech_logger https://review.opendev.org/c/openstack/neutron/+/826275 | 23:52 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!