haleyb | dansmith: which one, just the neutron one? none of the others seem to have merged yet. i'm going offline but if you propose a revert you can always depend on it to see if it helps? if not ralonsoh will be around in the early morning | 01:18 |
---|---|---|
ykarel | dansmith, sure since neutron gates are unblocked with https://review.opendev.org/c/openstack/requirements/+/881329 | 04:20 |
ykarel | neutron patch could be reverted and others open patch could be put on hold until next steps are known | 04:20 |
ykarel | reading discussion in revert patch seems possible plan would be to keep py38 or drop dependencies of it on projects before real drop | 04:21 |
ykarel | will push the revert | 04:21 |
opendevreview | yatin proposed openstack/neutron master: Revert "Move to python3.9 as minimal python version" https://review.opendev.org/c/openstack/neutron/+/881430 | 04:26 |
ykarel | lajoskatona, i put -W on other projects just to avoid the merges | 04:55 |
ykarel | to avoid any future revert dances | 04:55 |
lajoskatona | ykarel: ack, thanks | 05:27 |
opendevreview | yatin proposed openstack/neutron-tempest-plugin master: [DNM] non nested virt jammy nodes with workaround v2 https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/881391 | 05:29 |
opendevreview | Sahid Orentino Ferdjaoui proposed openstack/neutron master: rpc/handlers/dhcp: fix get_network_info when no local subnets https://review.opendev.org/c/openstack/neutron/+/880131 | 07:16 |
opendevreview | Merged openstack/neutron master: Revert "Move to python3.9 as minimal python version" https://review.opendev.org/c/openstack/neutron/+/881430 | 07:18 |
opendevreview | Sahid Orentino Ferdjaoui proposed openstack/neutron master: rpc/handlers/dhcp: fix get_network_info when no local subnets https://review.opendev.org/c/openstack/neutron/+/880131 | 07:19 |
ralonsoh | ykarel, I'm going to send a mail saying that we have reverted the python3.9 patch in Neutron | 07:53 |
ralonsoh | but we'll continue working on moving to Jammy | 07:53 |
ykarel | ralonsoh, +1 | 07:55 |
lajoskatona | +1 | 07:55 |
lajoskatona | ralonsoh: Warning: there's a chance I can't join today meetings | 07:56 |
ralonsoh | np, do your best | 07:56 |
ralonsoh | folks, please check https://review.opendev.org/c/openstack/neutron/+/880586 | 08:05 |
bauzas | thanks folks for having quickly revert the python_requires for Neutron | 08:14 |
ralonsoh | yw | 08:14 |
opendevreview | Rodolfo Alonso proposed openstack/neutron master: [DNM] check 880586 [2] https://review.opendev.org/c/openstack/neutron/+/881395 | 08:25 |
opendevreview | Rodolfo Alonso proposed openstack/neutron master: Use a writer context for the online alembic migrations https://review.opendev.org/c/openstack/neutron/+/880867 | 08:25 |
opendevreview | Rodolfo Alonso proposed openstack/neutron master: [OVN] Admin procedure for duplicated or deleted OVN agents https://review.opendev.org/c/openstack/neutron/+/881204 | 08:39 |
opendevreview | Rodolfo Alonso proposed openstack/neutron master: Remove "neutron-ovn-tempest-ovs-release-ubuntu-old" job https://review.opendev.org/c/openstack/neutron/+/881342 | 08:39 |
opendevreview | Rodolfo Alonso proposed openstack/neutron master: [OVN] Remove backwards compatibility with OVN < v20.09 https://review.opendev.org/c/openstack/neutron/+/870621 | 08:40 |
opendevreview | Rodolfo Alonso proposed openstack/neutron master: Mark "ipv6_pd_enabled" as deprecated and experimental. https://review.opendev.org/c/openstack/neutron/+/879030 | 08:40 |
opendevreview | Merged openstack/neutron master: Fix parent of neutron-ovn-tempest-with-uwsgi-loki https://review.opendev.org/c/openstack/neutron/+/880586 | 08:58 |
opendevreview | Rodolfo Alonso proposed openstack/neutron master: Deprecated support for Windows OS https://review.opendev.org/c/openstack/neutron/+/880980 | 09:01 |
opendevreview | Rodolfo Alonso proposed openstack/neutron master: [DNM] check 880586 [2] https://review.opendev.org/c/openstack/neutron/+/881395 | 09:16 |
ralonsoh | lajoskatona, how did you change the links in LP? https://bugs.launchpad.net/neutron/+bug/2016414 | 09:37 |
lajoskatona | ralonsoh: phuhh, that was a good search :-) Let me try to remember it | 09:47 |
lajoskatona | ralonsoh: ok, I think I find it, go to the main Neutron bugs page (https://bugs.launchpad.net/neutron ) | 09:48 |
lajoskatona | rlonsoh: on the right side in one of the boxed areas there is a link "Configure Bugs", and that brings to the area where you can set such texts (https://bugs.launchpad.net/neutron/+configure-bugtracker ) | 09:49 |
ralonsoh | ahhhh good to know that | 09:50 |
ralonsoh | thanks! | 09:50 |
opendevreview | Rodolfo Alonso proposed openstack/neutron master: [DNM] Test loki https://review.opendev.org/c/openstack/neutron/+/881459 | 10:04 |
opendevreview | Merged openstack/neutron stable/zed: Honor debug mode in keepalived-state-change script logs https://review.opendev.org/c/openstack/neutron/+/881355 | 10:25 |
opendevreview | yatin proposed openstack/neutron master: Add py39 jobs to tox override template https://review.opendev.org/c/openstack/neutron/+/881464 | 10:25 |
opendevreview | Merged openstack/neutron stable/yoga: Honor debug mode in keepalived-state-change script logs https://review.opendev.org/c/openstack/neutron/+/881322 | 10:27 |
opendevreview | Merged openstack/neutron stable/xena: Honor debug mode in keepalived-state-change script logs https://review.opendev.org/c/openstack/neutron/+/881356 | 10:27 |
ykarel | lajoskatona, ralonsoh focal jobs broke again :( with pysaml2==7.4.1 https://github.com/IdentityPython/pysaml2/commit/7d34181fc0b7929e0100973e140d61f8fbf31d97 | 10:45 |
ralonsoh | oh my... | 10:45 |
ralonsoh | what a permanent drama! | 10:45 |
ralonsoh | so no support for 3.8 anymore | 10:45 |
frickler | magnificient move to do that in a patch version | 10:55 |
frickler | seems we really need py38-specific u-c | 10:55 |
ykarel | pushed revert https://review.opendev.org/c/openstack/requirements/+/881466 | 10:56 |
ralonsoh | +1 | 10:57 |
frickler | also https://review.opendev.org/c/openstack/requirements/+/881433 | 10:59 |
ralonsoh | done | 11:02 |
opendevreview | Bence Romsics proposed openstack/neutron master: port-hints: api extension https://review.opendev.org/c/openstack/neutron/+/870081 | 11:27 |
opendevreview | Bence Romsics proposed openstack/neutron-lib master: port-hint-ovs-tx-steering: Add missing api-ref response sample https://review.opendev.org/c/openstack/neutron-lib/+/881468 | 11:27 |
opendevreview | Bence Romsics proposed openstack/neutron master: port-hint-ovs-tx-steering: agent side https://review.opendev.org/c/openstack/neutron/+/872905 | 11:27 |
opendevreview | Bence Romsics proposed openstack/neutron master: port-hint-ovs-tx-steering: shim extension https://review.opendev.org/c/openstack/neutron/+/873113 | 11:28 |
opendevreview | Rodolfo Alonso proposed openstack/neutron master: [DNM] Test loki https://review.opendev.org/c/openstack/neutron/+/881459 | 12:56 |
dansmith | ykarel: awesome thanks! | 12:59 |
ralonsoh | Ping list: bcafarel, elvira, frickler, mlavalle, mtomaska, obondarev, sahid, slawek, tobias-urdin, ykarel, lajoskatona, jlibosva, averdagu, amotoki | 14:00 |
mlavalle | o/ | 14:00 |
mtomaska | o/ | 14:00 |
ralonsoh | #startmeeting networking | 14:01 |
opendevmeet | Meeting started Tue Apr 25 14:01:04 2023 UTC and is due to finish in 60 minutes. The chair is ralonsoh. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:01 |
opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:01 |
opendevmeet | The meeting name has been set to 'networking' | 14:01 |
ralonsoh | hello | 14:01 |
sahid | o/ | 14:01 |
ykarel | o/ | 14:01 |
obondarev | hi | 14:01 |
ralonsoh | lajoskatona told me that, most probably, won't attend | 14:02 |
ralonsoh | ok, let's start | 14:02 |
ralonsoh | #topic announcements | 14:02 |
ralonsoh | #link https://releases.openstack.org/bobcat/schedule.html | 14:02 |
rubasov | o/ | 14:03 |
lajoskatona | o/ | 14:03 |
ralonsoh | next week is the Bobcat Cycle-Trailing Release Deadline | 14:03 |
ralonsoh | https://releases.openstack.org/bobcat/schedule.html#b-cycle-trail | 14:03 |
ralonsoh | and the PTG is closer | 14:03 |
ralonsoh | #link https://etherpad.opendev.org/p/neutron-vancouver-2023 | 14:03 |
ralonsoh | slaweq presented two forum sessions (still under review) | 14:03 |
ralonsoh | 1) OpenStack Neutron onboarding | 14:04 |
slaweq | o/ | 14:04 |
ralonsoh | 2) Neutron meet and greet: Operators feedback session | 14:04 |
bcafarel | late o/ | 14:04 |
ralonsoh | thanks slaweq for the document and presenting them | 14:04 |
lajoskatona | Thanks for proposing | 14:04 |
ralonsoh | and as usual, please check https://openinfra.dev/live/#all-episodes | 14:04 |
ralonsoh | any other announcement? | 14:05 |
ralonsoh | ok, let's move on | 14:05 |
ralonsoh | #topic bugs | 14:05 |
ralonsoh | last week report is from lucasgomes | 14:05 |
ralonsoh | #link https://lists.openstack.org/pipermail/openstack-discuss/2023-April/033448.html | 14:06 |
ralonsoh | there are some bugs not assigned yet | 14:06 |
ralonsoh | #link https://bugs.launchpad.net/neutron/+bug/2016413 | 14:06 |
ralonsoh | a low hanging fruit one | 14:06 |
ralonsoh | ok, next one | 14:07 |
ralonsoh | #link https://bugs.launchpad.net/neutron/+bug/2016504 | 14:07 |
ralonsoh | Support specify fixed_ip_address for DHCP or Metadata port | 14:07 |
ralonsoh | for ovn, when you create a network, the metadata port is created at the same time | 14:08 |
ralonsoh | and then, when the first subnet is created, the IP is assigned | 14:08 |
ralonsoh | the point is that you can then change the assigned IP | 14:08 |
lajoskatona | but this sounds more an RFE, am I wrong? | 14:08 |
ralonsoh | yes | 14:08 |
ralonsoh | is an RFE | 14:09 |
lajoskatona | ahh, ok | 14:09 |
ralonsoh | I'll comment in the bug | 14:09 |
ralonsoh | if Liu makes a good proposal, we can discuss it in the drivers meeting | 14:10 |
ralonsoh | feel free to comment on the bug | 14:10 |
ralonsoh | next one | 14:10 |
ralonsoh | #link https://bugs.launchpad.net/neutron/+bug/2016960 | 14:10 |
ralonsoh | [RFE] neutron fwaas support l2 firewall for ovn driver | 14:10 |
ralonsoh | same as before, is a RFE | 14:10 |
ralonsoh | if I'm not wrong, what is expecting is to have white lists, not present in the in-tree driver | 14:11 |
ralonsoh | sounds good but to be approved needs an assignee and to be presented in the drivers meeting | 14:11 |
ralonsoh | I'll comment in the lp bug | 14:11 |
ralonsoh | next one | 14:11 |
ralonsoh | #link https://bugs.launchpad.net/neutron/+bug/2017023 | 14:11 |
ralonsoh | lajoskatona, is ^^ still valid? | 14:12 |
lajoskatona | yes, I discussed it with kopecmartin and on #nova channel sean | 14:12 |
lajoskatona | I added the conclusion from those discussions so far as comment #2 | 14:12 |
ralonsoh | but we need first to bump the min version of nova api, right? | 14:12 |
lajoskatona | but as I see gmann also commented | 14:12 |
lajoskatona | No, that is not necessary | 14:13 |
ralonsoh | ah ok, I see | 14:13 |
lajoskatona | what is lightweight and good for us is that we stop executing those tests for Neutron, and keep the test coverage only in Nova | 14:13 |
lajoskatona | the same is true for glance for example as there's a similar legacy API in nova for images and tempest tests also | 14:14 |
ralonsoh | so do we need to remove this test from our jobs? | 14:14 |
lajoskatona | but that is a separate story and not covered in this bug, just as interesting story | 14:14 |
ralonsoh | this/these | 14:14 |
lajoskatona | yes as I understand, but have to double check with QA, as they wanted to have it as topic on their meeting | 14:15 |
lajoskatona | have to check with them again | 14:15 |
ralonsoh | perfect, can I assign the neutron bug to you? just to track it | 14:15 |
lajoskatona | sure | 14:16 |
ralonsoh | thanks a lot | 14:16 |
ralonsoh | ok, last one | 14:16 |
ralonsoh | #link https://bugs.launchpad.net/neutron/+bug/2017131 | 14:16 |
ralonsoh | ykarel, fixed the issue with loki jobs | 14:16 |
ralonsoh | now both (ovs and ovn) are working again | 14:16 |
ralonsoh | now the problem is in the OVN one, when creating the router | 14:16 |
ykarel | Thanks ralonsoh | 14:16 |
ralonsoh | I'm testing several options: https://review.opendev.org/q/topic:test_loki | 14:17 |
ralonsoh | I'll assign this bug to myself | 14:17 |
ralonsoh | in any case, this is not critical | 14:17 |
ralonsoh | and now the CI "party" we had, a short report | 14:18 |
ralonsoh | after these 2 reverts | 14:18 |
ralonsoh | Revert "Move to python3.9 as minimal python version": https://review.opendev.org/c/openstack/neutron/+/881430 | 14:18 |
ralonsoh | Revert "update constraint for tooz to new release 4.0.0": https://review.opendev.org/c/openstack/requirements/+/881329 | 14:18 |
ralonsoh | we were able to execute py38 jobs again | 14:18 |
ralonsoh | this is because we are still running on Focal, not in Jammy | 14:18 |
ralonsoh | ykarel, is testing a Nova patch https://review.opendev.org/c/openstack/nova/+/868419 | 14:19 |
ralonsoh | that could fix the nested virt nodes issue | 14:19 |
ralonsoh | because of this, during the last release we reverted the migration to Jammy nodes | 14:19 |
ralonsoh | and, of course, we have new problems in the CI | 14:19 |
ralonsoh | that are being addressed by | 14:20 |
ralonsoh | Revert pysaml2 to 7.3.1: https://review.opendev.org/c/openstack/requirements/+/881466 | 14:20 |
ralonsoh | adn | 14:20 |
ralonsoh | Revert "Drop check-uc jobs for py38": https://review.opendev.org/c/openstack/requirements/+/881433 | 14:20 |
ykarel | yes will be discussing that nova patch in nova meeting today | 14:20 |
ralonsoh | right, we need to keep investigating this issue to be able to migrate to Jammy asap | 14:21 |
lajoskatona | thanks for the summary and for pushing this topic | 14:21 |
mlavalle | so hold re-checks until further notice? | 14:21 |
ralonsoh | yes, exactly | 14:21 |
mlavalle | ack | 14:21 |
ralonsoh | check upper patches in requirements | 14:21 |
mlavalle | thanks for the update | 14:21 |
ralonsoh | and that's all | 14:22 |
ralonsoh | ah | 14:22 |
ralonsoh | This week jlibosva is the deputy, next week will be obondarev | 14:22 |
obondarev | ++ | 14:22 |
ralonsoh | I'll ping Jakub after this meeting | 14:22 |
ralonsoh | let's jump to the next topic | 14:22 |
ralonsoh | #topic community_goals | 14:23 |
ralonsoh | there are no new specs nor ryu patches | 14:23 |
ralonsoh | so no need to stop there | 14:23 |
ralonsoh | 1) Consistent and Secure Default RBAC | 14:23 |
ralonsoh | there is an active list of patches | 14:23 |
ralonsoh | https://review.opendev.org/c/openstack/neutron/+/879827 | 14:23 |
ralonsoh | ^^ this one is the last one | 14:23 |
ralonsoh | to enable sRBAC in master | 14:24 |
slaweq | and the most important one | 14:24 |
ralonsoh | by default | 14:24 |
ralonsoh | exactly hehehe | 14:24 |
slaweq | it's very big but changes are mostly in tests | 14:24 |
ralonsoh | slaweq, if I'm not wrong, this is the summary now, right? | 14:24 |
slaweq | as I had to change many tests so it is passing proper context while doing requests to neutron now | 14:25 |
slaweq | logically tests were not changed IIRC | 14:25 |
slaweq | that's all from me about it | 14:25 |
ralonsoh | just a few tests... | 14:25 |
slaweq | ahh, and once this will be merged we will can say that we completed phase1 of S-RBAC goal | 14:26 |
slaweq | next one is to introduce service-to-service role and identify some APIs for such role | 14:26 |
slaweq | but that's next step | 14:26 |
ralonsoh | that second one is more obscure, we need to identify these calls | 14:26 |
lajoskatona | I forgot from last time, is that task for this cycle (bobcat)? | 14:26 |
ralonsoh | the first one | 14:26 |
lajoskatona | ack | 14:27 |
lajoskatona | so for now the goal is to identify only those calls | 14:27 |
ralonsoh | yeah | 14:27 |
slaweq | lajoskatona actually initial goal was to finish phase1 in Anthelope cycle | 14:27 |
slaweq | but we didn't made it | 14:27 |
slaweq | so we are catching up | 14:27 |
lajoskatona | ok | 14:27 |
lajoskatona | thanks for refreshing the history :-) | 14:27 |
ralonsoh | slaweq, thanks for working on this | 14:28 |
ralonsoh | ok, next one | 14:28 |
ralonsoh | 2) Neutron client deprecation | 14:29 |
ralonsoh | #link https://bugs.launchpad.net/neutron/+bug/1999774 | 14:29 |
lajoskatona | and the usual etherpad: https://etherpad.opendev.org/p/python-neutronclient_deprecation | 14:29 |
lajoskatona | I pushed a patch for fwaas: https://review.opendev.org/c/openstack/python-neutronclient/+/880629 | 14:29 |
lajoskatona | but I have to test a few things on it, so it is WIP | 14:29 |
ralonsoh | I'll add it to the list in the agenda | 14:30 |
lajoskatona | thanks, the ocata patch is still open, but ready for review from Tom Weninger: https://review.opendev.org/c/openstack/octavia/+/866327 | 14:30 |
lajoskatona | octavia, not ocata, sorry | 14:30 |
ralonsoh | ah yes | 14:31 |
slaweq | qq about neutronclient | 14:31 |
slaweq | I see that we finally merged https://review.opendev.org/c/openstack/python-neutronclient/+/871711 | 14:31 |
slaweq | should we maybe propose new release of neutronclient with that removed? or it's not needed? | 14:31 |
ralonsoh | right, we should push a new release with a new mayor version, I think | 14:32 |
lajoskatona | +1 | 14:32 |
ralonsoh | I'll push this patch today | 14:32 |
lajoskatona | good idea | 14:32 |
slaweq | ++ | 14:32 |
ralonsoh | perfect, thanks lajoskatona for working on this | 14:32 |
ralonsoh | ok, let's move to the last topic | 14:33 |
ralonsoh | #topic on_deman | 14:33 |
ralonsoh | ltomasbo, froyo would be interested | 14:33 |
froyo | o/ sure | 14:33 |
ralonsoh | #link https://bugzilla.redhat.com/show_bug.cgi?id=2186758 | 14:33 |
ralonsoh | in a nutshell: a non-admin port in a private network | 14:33 |
ralonsoh | the admin creates a FIP and associates the FIP (admin project) to the non-admin port | 14:34 |
ralonsoh | --> the user cannot delete the port because cannot disassociate the FIP | 14:34 |
ralonsoh | (btw, I'll create a LP bug for this) | 14:34 |
ralonsoh | question | 14:34 |
ralonsoh | should we allow this disassociation in any case? | 14:34 |
ralonsoh | in order to allow the non-admin user to delete his/her port in any case | 14:35 |
ralonsoh | (my opinion: we should allow the disassociation during the port deletion) | 14:36 |
lajoskatona | if it is only to allow to delete the one port for the FIP, why not? | 14:36 |
ralonsoh | because that was an admin action, the association | 14:37 |
ralonsoh | but, IMO, this port belongs to the user | 14:37 |
lajoskatona | ack | 14:37 |
froyo | yeah, the main options are: | 14:38 |
froyo | 1) it was an admin action, it an admin issue... | 14:38 |
froyo | 2) it is a port belong to user, so user can delete it (elevating context to disassociate FIP) | 14:38 |
ralonsoh | ok, I think froyo you can propose 2) in a patch and wait for feedback. IMO, the association is not covered by the policy rules | 14:39 |
ralonsoh | so it should be undone during the deletion | 14:39 |
ralonsoh | slaweq, any feedback? | 14:39 |
slaweq | isn't accociation done as FIP update? | 14:40 |
slaweq | from policy PoV | 14:40 |
ralonsoh | hmmm let me check | 14:40 |
ralonsoh | yes, the association is done during the FIP update | 14:41 |
slaweq | I don't think any special API endpoint for that in https://docs.openstack.org/api-ref/network/v2/index.html | 14:41 |
ralonsoh | no, there isn't | 14:41 |
slaweq | ok, so disassociation of FIP from port is actually removing port_id from fip's attributes, right? | 14:42 |
ralonsoh | yes | 14:42 |
froyo | yes | 14:42 |
slaweq | so who is owner of FIP? is it admin in Your case? | 14:42 |
ralonsoh | yes | 14:42 |
froyo | yes | 14:42 |
slaweq | so by elevating context we will allow regular user to update fip which belongs to other project | 14:42 |
slaweq | I know it's kind of "special" case but I'm not sure we should do that | 14:43 |
frickler | imo 1) is a better option then, just make a proper 403 error instead of 500 | 14:43 |
froyo | just on delete_port (to remove port_id and put FIP in DOWN state) | 14:43 |
slaweq | froyo but still, admin user probably did it for some reason | 14:44 |
froyo | slaweq, sure! | 14:44 |
ralonsoh | ok, let's change then the scope and the output of the server | 14:46 |
ralonsoh | but the port deletion can't be done | 14:46 |
frickler | for the use case, is it mandatory the FIP belongs to admin? they could also create FIP in the tenant project? | 14:46 |
slaweq | maybe better option would then be to introduce some api rule like "PORT_OWNER" and allow update FIPs for port owners | 14:46 |
ralonsoh | this is a particular case | 14:46 |
ralonsoh | that was proposed yes | 14:46 |
slaweq | similar what we have for some port related apis where it can be done by "network owner" | 14:46 |
ralonsoh | the FIp can be assigned to the project | 14:46 |
ralonsoh | that is easier than creating a new particular rule type | 14:46 |
ralonsoh | ok, let's propose the error change to 4xx | 14:46 |
ralonsoh | and you'll probably need to reconsider your deployment and how the FIP is created | 14:47 |
froyo | when the FIP is assigned to the project, the tenant user will be manage it completely? | 14:47 |
ralonsoh | yes | 14:47 |
froyo | good, so move the responsability to the admin ... good for me! | 14:47 |
ralonsoh | cool, thanks! | 14:47 |
ralonsoh | please, open a lp bug for this | 14:48 |
slaweq | I would just try to avoid doing hardcoded context.elevate() as much as possible | 14:48 |
froyo | thanks for comments! | 14:48 |
slaweq | and use API rules as much as we can | 14:48 |
slaweq | it's IMO better for S-RBAC policies | 14:48 |
ralonsoh | right | 14:48 |
ralonsoh | ok, let's move ibn | 14:48 |
ralonsoh | on | 14:48 |
ralonsoh | #link https://review.opendev.org/c/openstack/neutron/+/875809 | 14:48 |
ralonsoh | qq: should we allow to backport this one? | 14:48 |
ralonsoh | this is implicitly an API change | 14:48 |
ralonsoh | but we in the other hand, this limitation is needed | 14:49 |
ralonsoh | because this is a bug fix, I would accept it, but waiting for opinions | 14:49 |
slaweq | I think we would need opinion from stable-maint team on this | 14:50 |
lajoskatona | +1 | 14:50 |
slaweq | maybe elodilles can take a look | 14:50 |
ralonsoh | I'll ping him | 14:50 |
lajoskatona | quite a corner case as ralonsoh said | 14:50 |
mlavalle | yeah, we've sought their opinion before | 14:50 |
frickler | is there an associated api-ref change? | 14:50 |
ralonsoh | no | 14:50 |
ralonsoh | this is an implicit API change | 14:50 |
ralonsoh | because that introduces a limitation | 14:51 |
ralonsoh | that is implicit by the standard, btw | 14:51 |
frickler | but api-ref should specify conditions when api calls fail? | 14:51 |
frickler | or at least it could | 14:51 |
ralonsoh | I don't know if we report that correctly in the API | 14:52 |
ralonsoh | the neutron server logs that correctly | 14:52 |
frickler | that would IMO improve the feasibility of a backport | 14:52 |
ralonsoh | ok, I'll check that first | 14:52 |
ralonsoh | and that's all I have in the agenda | 14:53 |
ralonsoh | anything else?? | 14:53 |
ralonsoh | so thank you very much and see you in 6 mins in the CI meeting (IRC type this week) | 14:53 |
ralonsoh | #endmeeting | 14:53 |
opendevmeet | Meeting ended Tue Apr 25 14:53:45 2023 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 14:53 |
opendevmeet | Minutes: https://meetings.opendev.org/meetings/networking/2023/networking.2023-04-25-14.01.html | 14:53 |
opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/networking/2023/networking.2023-04-25-14.01.txt | 14:53 |
opendevmeet | Log: https://meetings.opendev.org/meetings/networking/2023/networking.2023-04-25-14.01.log.html | 14:53 |
mlavalle | o/ | 14:53 |
lajoskatona | o/ | 14:53 |
mtomaska | o/ | 14:53 |
rubasov | o/ | 14:53 |
frickler | just mentioning I'll be offline for 3 weeks starting thursday | 14:53 |
slaweq | o/ | 14:53 |
frickler | o/ | 14:54 |
mlavalle | slaweq: ci meeting: video or irc? | 14:54 |
ykarel | o/ | 14:54 |
slaweq | mlavalle irc | 14:54 |
mlavalle | ack | 14:54 |
elodilles | slaweq ralonsoh : i haven't looked at the patch, but as a base rule i would say that neutron team needs to think about what issues could cause if that change is backported and deployments are upgraded to it. and on the other hand: what benefit can be achieved if it is backported | 14:56 |
elodilles | if it is risky, then probably better to leave it to deployers to solve the backport downstream if they need it | 14:57 |
ralonsoh | elodilles, I'll check first what is the CLI output | 14:57 |
ralonsoh | tbh, this limitation is more an IP limitation than an API one | 14:58 |
ralonsoh | frickler, have fun! | 14:58 |
frickler | well currently users could still have working v4 with mtu=500 e.g. and only v6 broken. with that patch, the mtu change would fail instead | 14:59 |
frickler | not sure if that's a scenario to care about, though | 14:59 |
ralonsoh | hmmm no, that's right | 14:59 |
ralonsoh | I prefer a broken scenario rather than a new limitation in stable branched | 15:00 |
ralonsoh | branches* | 15:00 |
ralonsoh | no, I don't think we should backport it | 15:00 |
*** iurygregory_ is now known as iurygregory | 15:00 | |
frickler | otoh inconsistent, unpredictable API responses aren't nice for users, too | 15:01 |
slaweq | #startmeeting neutron_ci | 15:01 |
opendevmeet | Meeting started Tue Apr 25 15:01:17 2023 UTC and is due to finish in 60 minutes. The chair is slaweq. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:01 |
opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:01 |
opendevmeet | The meeting name has been set to 'neutron_ci' | 15:01 |
mlavalle | o/ | 15:01 |
slaweq | bcafarel, lajoskatona, mlavalle, mtomaska, ralonsoh, ykarel, jlibosva, elvira | 15:01 |
ralonsoh | hello | 15:01 |
mtomaska | o/ | 15:01 |
slaweq | ci meeting is starting :) | 15:01 |
slaweq | hi | 15:01 |
lajoskatona | o/ | 15:01 |
ykarel | o/ | 15:02 |
slaweq | Grafana dashboard: https://grafana.opendev.org/d/f913631585/neutron-failure-rate?orgId=1 | 15:02 |
slaweq | #topic Actions from previous meetings | 15:02 |
slaweq | slaweq to check dhcp issue in fullstack tests | 15:02 |
slaweq | I still didn't had time for this | 15:02 |
slaweq | sorry | 15:03 |
slaweq | #action slaweq to check dhcp issue in fullstack tests | 15:03 |
slaweq | I will try this week | 15:03 |
slaweq | next one | 15:03 |
slaweq | mtomaska to check and fix "no such process" error in kill cmd | 15:03 |
mtomaska | I posted patch https://review.opendev.org/c/openstack/neutron/+/880893 | 15:03 |
slaweq | thx | 15:03 |
mtomaska | Also AI from week ago needs final review | 15:03 |
slaweq | I will add it to my review's queue | 15:03 |
mtomaska | https://review.opendev.org/c/openstack/neutron/+/878549 | 15:04 |
mtomaska | thank you | 15:04 |
slaweq | and the last one from last week | 15:04 |
slaweq | slaweq to open bug regarding shelve/unshelve failures | 15:04 |
slaweq | I opened https://bugs.launchpad.net/nova/+bug/2016967 | 15:04 |
slaweq | but nobody from nova team checked it | 15:05 |
slaweq | #topic Stable branches | 15:06 |
slaweq | bcafarel is on different meeting but he told me that all seems good with stable branches this week | 15:06 |
slaweq | anything You have to add there or can we move on to next topics? | 15:06 |
ralonsoh | nothing | 15:07 |
slaweq | ok, lets move on then | 15:07 |
slaweq | #topic Stadium projects | 15:07 |
slaweq | odl and bagpipe's periodic jobs are red this week | 15:08 |
ralonsoh | could be related to the py3.8 issue? | 15:08 |
ralonsoh | or the mirror issues? | 15:09 |
lajoskatona | yes, for bagpipe I think it is only not master from sfc, but have to check in details | 15:09 |
lajoskatona | for ODL, I had no time to check, but it is also sqlalachemy2.0 | 15:09 |
slaweq | ok | 15:09 |
lajoskatona | I dont't think it is related to py38 | 15:09 |
lajoskatona | and nothing more from me | 15:10 |
slaweq | ok, thx | 15:10 |
slaweq | #topic Grafana | 15:11 |
slaweq | here I see that all our neutron-tempest-plugin jobs are still broken | 15:11 |
slaweq | also functional and py38 jobs were broken yesterday but those are already good | 15:11 |
lajoskatona | so graphana shows us real data :-) | 15:12 |
slaweq | yeah | 15:12 |
lajoskatona | as those were/are really broken | 15:12 |
slaweq | and our gate is broken now | 15:12 |
ralonsoh | wait for https://review.opendev.org/c/openstack/requirements/+/881433/2 (and the previous patch) | 15:12 |
ykarel | yes once https://review.opendev.org/c/openstack/requirements/+/881466 merges scenario jobs should be green again | 15:14 |
slaweq | that will be great | 15:14 |
slaweq | thx guys for working on all those issues | 15:14 |
slaweq | anything else regarding grafana? or can we move on? | 15:15 |
mlavalle | let's move on | 15:15 |
slaweq | #topic Rechecks | 15:15 |
slaweq | avg recheckes from last week looked good (0.33) | 15:16 |
slaweq | bare rechecks: 9/22 were bare so pretty many but not dramatic :) | 15:16 |
ralonsoh | if you find bare rechecks, comment that in the patch | 15:17 |
slaweq | sure | 15:17 |
slaweq | ++ | 15:17 |
ralonsoh | I don't think all neutron developers are aware of that | 15:17 |
mlavalle | or sometimes we need reminders | 15:18 |
lajoskatona | good idea, I will keep my eyes open | 15:18 |
slaweq | thx all | 15:18 |
slaweq | ok, lets move on | 15:18 |
slaweq | #topic fullstack/functional | 15:18 |
slaweq | here I have only one issue to mention | 15:18 |
slaweq | neutron.tests.functional.agent.ovn.extensions.test_qos_hwol.OVSInterfaceEventTestCase.test_port_creation_and_deletion | 15:18 |
slaweq | https://7e36fd2cde2eb81dcf41-647b4a42ed353e16c17ad589257e07eb.ssl.cf5.rackcdn.com/877831/13/check/neutron-functional-with-uwsgi/0610ffa/testr_results.html | 15:18 |
slaweq | https://storage.gra.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_4d6/878527/9/check/neutron-functional-with-uwsgi/4d6adb2/testr_results.html | 15:18 |
ralonsoh | I've pushed a patch | 15:19 |
slaweq | those are 2 examples but I think I saw same error few more times | 15:19 |
ralonsoh | https://review.opendev.org/c/openstack/neutron/+/880934 | 15:19 |
ralonsoh | if that patch doesn't work, I'll mark it as unstable | 15:20 |
slaweq | thx | 15:20 |
slaweq | I added it to review list | 15:20 |
slaweq | for tomorrow morning | 15:20 |
lajoskatona | me too | 15:21 |
slaweq | so we can move on I guess | 15:21 |
slaweq | #topic Tempest/Scenario | 15:21 |
slaweq | here I don't have any specific issues for today | 15:21 |
slaweq | but ralonsoh wanted to talk about migration of neutron-tempest-plugin jobs to Jammy | 15:22 |
slaweq | is the nova patch mentioned by ykarel the only think we need? | 15:22 |
ralonsoh | well, I think we have discussed that during the last meeting | 15:22 |
ralonsoh | yes, this patch | 15:22 |
ralonsoh | and ykarel is testing that in neutron | 15:22 |
ralonsoh | one sec | 15:22 |
ralonsoh | https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/881391 | 15:22 |
ykarel | also i prepared https://etherpad.opendev.org/p/jammy-issues to have details together | 15:22 |
ralonsoh | linux bridge tests seems unstable | 15:23 |
ralonsoh | more than OVS or OVN | 15:23 |
ralonsoh | Am I right? | 15:23 |
ykarel | so would need nova patch + jobs rework in neutron side(current idea is split slow tests in seperate job) and as per results seems to work better | 15:24 |
lajoskatona | is that related to the py38/nested virt issues? | 15:24 |
ralonsoh | yes it is | 15:24 |
ralonsoh | so create new jobs for slow tests? | 15:24 |
ykarel | ralonsoh, yes till now seen 1 failure and that is in linuxbridge https://6b56f02e616b126f480f-032ac4cea892347a8142b5cb4ce2d8a7.ssl.cf2.rackcdn.com/881391/3/check/neutron-tempest-plugin-linuxbridge-4/00c563b/testr_results.html | 15:25 |
ralonsoh | with concurrency = 1? | 15:25 |
ykarel | current tests are with concurrency = 2 and working fine | 15:25 |
ralonsoh | ok | 15:25 |
slaweq | but do we want to have slow jobs for each variant? LIke openvswitch, ovn, openvswitch-iptables_hybdir, linuxbridge? | 15:25 |
slaweq | so 4 new jobs running on every patch? | 15:25 |
slaweq | or how? | 15:25 |
ykarel | so if there is some other idea then slow jobs, we can rework | 15:26 |
ralonsoh | we can execute then in periodic only | 15:26 |
lajoskatona | as temporary solution? | 15:26 |
ralonsoh | so far you have identified 6 tests | 15:27 |
slaweq | are those times mentioned in https://etherpad.opendev.org/p/jammy-issues on nodes with really enabled nested virt? | 15:27 |
slaweq | I don't think it takes that much time currently | 15:27 |
ykarel | slaweq, those are non non-nested virt nodes or nested-virts(with qemu not kvm) | 15:27 |
slaweq | ahh, ok | 15:27 |
ykarel | nested virts results are far better, like 2-3 times better | 15:27 |
slaweq | so because it is using qemu instead of kvm it is so slow | 15:28 |
ykarel | yes | 15:28 |
slaweq | good | 15:28 |
ralonsoh | so what do you think about having these 4 new jobs executing the slow tests? | 15:29 |
slaweq | are "slow" tests the same ones as those which requires advanced image | 15:29 |
slaweq | ? | 15:29 |
ykarel | yes most of them are those only | 15:30 |
slaweq | ok, that makes sens | 15:30 |
ralonsoh | but where do we execute these jobs? | 15:30 |
slaweq | I would then move those new jobs to periodic queue probably | 15:30 |
ralonsoh | ^^ right | 15:30 |
slaweq | I don't think we should have 4 more jobs in check/gate queue | 15:30 |
ralonsoh | for sure no | 15:30 |
slaweq | it's a lot of resources on every patch | 15:30 |
lajoskatona | ok, and when this libvirt /nested issue is fixed we can move them back to regular check/gate queue? | 15:31 |
ralonsoh | no, I don't think so | 15:32 |
ykarel | yes if Team is ok i think we can move back, from infra side it's not recommended to rely on those nodes as they are best effort only | 15:32 |
ykarel | as those worked great for almost an year for us | 15:32 |
ralonsoh | but this policy will change, iif I'm not wrong | 15:32 |
ykarel | if it's policy change then we have no option | 15:33 |
ralonsoh | I mean it is not recommended to use these nodes (or have them as non voting) | 15:33 |
slaweq | ok, so lets do this | 15:33 |
lajoskatona | ack | 15:33 |
slaweq | ykarel will You propose patches? | 15:34 |
ykarel | slaweq, will discuss it in nova meeting today and update nova patch as per that | 15:34 |
ykarel | and then update neutron jobs | 15:34 |
slaweq | ++ thx | 15:34 |
ykarel | till then just will have tests in test patch | 15:34 |
lajoskatona | thanks ykarel | 15:34 |
slaweq | #action ykarel to discuss with nova team and update neutron-tempest-plugin jobs | 15:35 |
mlavalle | thanks! | 15:35 |
slaweq | and that's all what I had for today | 15:35 |
slaweq | any other CI topics You want to discuss today? | 15:35 |
ralonsoh | no thansk | 15:35 |
lajoskatona | nothing from me | 15:36 |
ykarel | just a small one | 15:36 |
ykarel | https://review.opendev.org/c/openstack/neutron/+/881464 | 15:36 |
ralonsoh | ah yes, sure | 15:36 |
slaweq | approved :) | 15:37 |
ralonsoh | 15:37 | |
ralonsoh | should we remove the py38 jobs there? | 15:37 |
slaweq | IMO not until we support py38 | 15:37 |
ralonsoh | I know we didn't migrate yet | 15:37 |
ralonsoh | ok then | 15:37 |
lajoskatona | good question, and shall we push the changes for the stadiums? or that would brake the tempest jobs? | 15:38 |
slaweq | it's just UT job so no big deal IMO to keep it for a bit longer | 15:38 |
lajoskatona | ok, so keep everything else | 15:38 |
ralonsoh | py39 should work in stadium | 15:38 |
lajoskatona | I check if with dnm patch | 15:38 |
slaweq | thx lajoskatona | 15:39 |
slaweq | #action lajoskatona to check with dnm patch stadium projects with py39 | 15:39 |
ykarel | if openstack-python3 template is used py39 jobs should be already running in stadium | 15:39 |
ykarel | openstack-python3-jobs | 15:39 |
ykarel | k i see openstack-python3-jobs-neutron template is being used | 15:40 |
lajoskatona | yes, agree, what I am not sure what will happen with tempest if the project says "hey I am min py39" | 15:40 |
lajoskatona | for stadiums we have less tempest tests, so it should be ok | 15:41 |
ykarel | https://opendev.org/openstack/openstack-zuul-jobs/src/branch/master/zuul.d/project-templates.yaml#L802 | 15:41 |
ykarel | lajoskatona, stadium projects too running jobs on focal? | 15:42 |
lajoskatona | thanks | 15:42 |
lajoskatona | ykarel: hmmm, good question, I have to check that | 15:42 |
ralonsoh | yes, they are inheriting from neutron and n-t-p | 15:42 |
ralonsoh | or manually setting the nodeset | 15:43 |
ralonsoh | to focal | 15:43 |
ykarel | ok if there is no reason to run on focal then those can be moved to jammy | 15:43 |
lajoskatona | ok, I propose patches and let's see | 15:43 |
ykarel | +1 | 15:43 |
lajoskatona | trial and error :-) | 15:44 |
slaweq | ++ | 15:44 |
slaweq | anything else for today? | 15:44 |
slaweq | if not, I will give You 15 minutes back today | 15:44 |
slaweq | ok, so thanks for attending the meeting and have a nice week | 15:45 |
slaweq | #endmeeting | 15:45 |
opendevmeet | Meeting ended Tue Apr 25 15:45:14 2023 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:45 |
opendevmeet | Minutes: https://meetings.opendev.org/meetings/neutron_ci/2023/neutron_ci.2023-04-25-15.01.html | 15:45 |
opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/neutron_ci/2023/neutron_ci.2023-04-25-15.01.txt | 15:45 |
opendevmeet | Log: https://meetings.opendev.org/meetings/neutron_ci/2023/neutron_ci.2023-04-25-15.01.log.html | 15:45 |
mlavalle | o/ | 15:45 |
ralonsoh | bye! | 15:45 |
slaweq | o/ | 15:45 |
lajoskatona | Bye | 15:45 |
mtomaska | o/ | 15:45 |
ykarel | o/ | 15:46 |
opendevreview | Lucas Alvares Gomes proposed openstack/neutron master: [OVN] Retry retrieving metadata port during PortBindingChassisEvent https://review.opendev.org/c/openstack/neutron/+/881487 | 15:55 |
opendevreview | Merged openstack/neutron master: Add py39 jobs to tox override template https://review.opendev.org/c/openstack/neutron/+/881464 | 17:03 |
opendevreview | Rodolfo Alonso proposed openstack/neutron master: [DNM] Test loki https://review.opendev.org/c/openstack/neutron/+/881459 | 17:09 |
opendevreview | Miguel Lavalle proposed openstack/neutron master: Add rate-limiting to metadata agents https://review.opendev.org/c/openstack/neutron/+/858879 | 19:57 |
opendevreview | Merged openstack/neutron master: [ovn] Drop use of OVN_GW_PORT_EXT_ID_KEY https://review.opendev.org/c/openstack/neutron/+/877831 | 20:06 |
opendevreview | Miguel Lavalle proposed openstack/neutron master: Add rate-limiting to metadata agents https://review.opendev.org/c/openstack/neutron/+/858879 | 22:45 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!