Tuesday, 2025-05-13

*** jimin3shin[m] is now known as JiminShin[m]01:58
JiminShin[m]Hello,... (full message at <https://matrix.org/oftc/media/v1/media/download/AV3T5COxMa4u6f49zbwlV1fwYrsdgfxpv6nicYMErwZrExaAgc4IcO34Yepu_pyHwqhsvregm9Kpb7QhWntks3lCeXD4SwCgAG1hdHJpeC5vcmcvZFhZdklQU2x3dlF6TFZhS1NvQWhYR3Bn>)02:14
opendevreviewyatin proposed openstack/neutron master: [DNM] Check fips job with python requires update  https://review.opendev.org/c/openstack/neutron/+/94664203:08
opendevreviewyatin proposed openstack/neutron master: Switch centos 9-stream jobs to run with python 3.12  https://review.opendev.org/c/openstack/neutron/+/94664205:23
opendevreviewRodolfo Alonso proposed openstack/neutron unmaintained/2023.1: [stable-only] Remove "devstack-tobiko-neutron" job  https://review.opendev.org/c/openstack/neutron/+/94955805:35
opendevreviewRodolfo Alonso proposed openstack/neutron unmaintained/2023.1: [stable-only] Remove "devstack-tobiko-neutron" job  https://review.opendev.org/c/openstack/neutron/+/94955805:36
opendevreviewRodolfo Alonso proposed openstack/neutron unmaintained/zed: [stable-only] Remove "devstack-tobiko-neutron" job  https://review.opendev.org/c/openstack/neutron/+/94955905:36
opendevreviewRodolfo Alonso proposed openstack/neutron-tempest-plugin master: WIP -- Bump advance image to Ubuntu Noble 24.04  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/94952206:53
opendevreviewLajos Katona proposed openstack/neutron master: WIP: OVS Trunk: call _update_trunk_metadata earlier  https://review.opendev.org/c/openstack/neutron/+/94956907:39
opendevreviewLajos Katona proposed openstack/neutron master: WIP: OVS Trunk: call _update_trunk_metadata earlier  https://review.opendev.org/c/openstack/neutron/+/94956907:41
opendevreviewRodolfo Alonso proposed openstack/neutron stable/2025.1: [OVN] Only update the MTU of the router GW LRPs  https://review.opendev.org/c/openstack/neutron/+/94913608:07
noonedeadpunkhey there! I was wondering what is the process to get a patch which fixes the bug reviewed?09:21
noonedeadpunklike set -2 if you don't think it is correct or valid?09:22
noonedeadpunkI really don't understand what are the expectations and if I should even spend any more time on that or just go with own fork further on09:26
noonedeadpunk(https://review.opendev.org/c/openstack/neutron/+/931495)09:26
opendevreviewRodolfo Alonso proposed openstack/neutron master: WIP == [OVN] OVN agent retrieval filter matching improvement  https://review.opendev.org/c/openstack/neutron/+/94958409:34
ralonsohnoonedeadpunk, let me check this patc09:34
ralonsohpatch*09:34
noonedeadpunkralonsoh: thanks!09:38
ykarelralonsoh, can you also check https://review.opendev.org/c/openstack/neutron/+/94664210:10
ralonsohykarel, for sure10:24
ralonsohI've executed the experimental queue, to see neutron-ovn-tempest-ovs-master-centos-9-stream job result10:26
ykarelack i had validated that in previous patch set, but ok to retrigger10:30
opendevreviewRodolfo Alonso proposed openstack/neutron master: WIP == [eventlet-removal] Change the state change WSGI server  https://review.opendev.org/c/openstack/neutron/+/93840410:55
opendevreviewRodolfo Alonso proposed openstack/neutron master: WIP == [eventlet-removal] Change the state change WSGI server  https://review.opendev.org/c/openstack/neutron/+/93840410:56
priteauHello. I am looking into support for OVS to OVN migrations. I saw that the documentation at https://docs.openstack.org/neutron/2024.2/ovn/migration.html got dropped in the TripleO removal, all that is left seems to be https://opendev.org/openstack/neutron/src/branch/master/tools/ovn_migration which hasn't changed in years. Is this still up to date / supported?11:14
opendevreviewMerged openstack/neutron stable/2025.1: Subnet filter by "router:external" needs to be changed to "external"  https://review.opendev.org/c/openstack/neutron/+/94877911:18
ralonsohpriteau, this is script is just a POC. This one left (from a bigger commit) is a reference to perform this migration11:32
ralonsohI don't know if that is even tested in any CI 11:32
ralonsohno, for sure11:32
ralonsohpriteau, that was initially implemented for centos, so if you are using other distro, you'll need to update some commands11:33
priteauralonsoh: Thanks. This is for a Kolla deployment so I think it will need changes11:38
opendevreviewDmitriy Rabotyagov proposed openstack/neutron master: [OVN] Do not supply gateway_port if it's not bound to chassis  https://review.opendev.org/c/openstack/neutron/+/93149511:41
opendevreviewDmitriy Rabotyagov proposed openstack/neutron master: [OVN] Do not supply gateway_port if it's not bound to chassis  https://review.opendev.org/c/openstack/neutron/+/93149511:41
opendevreviewRodolfo Alonso proposed openstack/neutron master: WIP == [eventlet-removal] Change the state change WSGI server  https://review.opendev.org/c/openstack/neutron/+/93840412:39
ralonsoh#startmeeting networking13:00
opendevmeetMeeting started Tue May 13 13:00:16 2025 UTC and is due to finish in 60 minutes.  The chair is ralonsoh. Information about MeetBot at http://wiki.debian.org/MeetBot.13:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.13:00
opendevmeetThe meeting name has been set to 'networking'13:00
ralonsohPing list: bcafarel, elvira, frickler, mlavalle, mtomaska, obondarev, slaweq, tobias-urdin, ykarel, lajoskatona, jlibosva, averdagu, haleyb, ralonsoh, sahid 13:00
ralonsohhello all13:00
obondarevo/13:00
mlavalle\o13:00
mtomaskao/13:00
cbuggyo/13:00
rubasovo/13:00
frickler\o13:01
ralonsohlet's start13:01
ralonsoh#topic announcements13:01
ralonsoh#link https://releases.openstack.org/flamingo/schedule.html13:01
bcafarelo/13:01
ralonsohwe are in R2013:01
ralonsohthat means flamingo-1 milestone13:02
ralonsoha heads-up about the Neutron drivers meeting13:02
lajoskatonao/13:02
ralonsohthe agenda is here: https://wiki.openstack.org/wiki/Meetings/NeutronDrivers13:02
ralonsohif you want to add any topic, please do it before this Friday13:02
elvirao/13:03
slaweqo/13:03
ralonsohBobcat is now unmaintained: https://review.opendev.org/q/topic:%22bobcat-stable%2213:03
fricklerralonsoh: nope, eoled13:03
ralonsohsorry, EOL13:03
ralonsohyes, I was writing that13:03
ralonsohand that's all I have, any other announcement?13:04
ralonsohok, let's move on13:05
ralonsoh#topic bugs13:05
ralonsohlast report was done by mtomaska 13:05
ralonsoh#link https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/thread/MHNCBYOVZPJJS7IETORBQRTLDLJMBGKP/13:05
ralonsohthere are some unassigned bugs13:05
ralonsoh#link https://bugs.launchpad.net/neutron/+bug/211009413:05
ralonsohOVN AgentCache get_agents method filters agents incorrectly if hostname overlaps 13:06
ralonsohwell, not this one, I've proposed a patch today13:06
ralonsohsorry13:06
ralonsoh#link https://bugs.launchpad.net/neutron/+bug/211022513:06
ralonsoh Floating IPs attached to Octavia LB VIPs are not reachable across routers using different external subnets (OVN + Octavia) 13:06
ralonsohThis one has been moved from Octavia to Neutron13:06
mtomaskayep. I am not sure if that is a bug to be honest13:07
ralonsohI didn't have time to reproduce the scenario13:07
ralonsohand maybe it could be done without deploying octavia13:07
ralonsohif I'm not wrong, it is adding an extra subnet to a GW network, right?13:07
mtomaskayes. the GW network (aka public) has two subnets and each subnet is connected to a router which is then connected to its own private network13:08
ralonsohok, I need to spend sometime on this one13:10
ralonsohI know for sure there are some patches related to the presence of two subnets in the GW network in an OVN router13:10
ralonsohbut I need to find them13:10
ralonsohin any case, has anyone time to check this bug?13:10
mtomaskaIll do it13:11
ralonsohmtomaska, thanks!13:11
ralonsohI'll ping you later with the related patches13:11
mtomaskaill setup the network they described13:11
mtomaskaack13:11
ralonsohnext bug13:11
ralonsoh#link https://bugs.launchpad.net/neutron/+bug/211008713:11
ralonsohOVN log plugin merges log records from different log objects across projects 13:11
ralonsohso basically, as written at the end:13:12
mtomaskaI was not 100% sure what the reporter claims as the bug. But I think it is what I posted in my comment13:12
ralonsoh"all log entries are being attributed to only one of the Neutron log objects, despite being from different security groups and different projects/domains"13:12
mtomaskaI.e. we group all logs under the same "neutron object" in the ovn-controller log. 13:12
ralonsohso you tried pinging from vm-a to to vm-b13:13
ralonsohboth with different SGs, right?13:14
mtomaskayes13:14
ralonsohand the logs are always associated to one SG13:14
mtomaskathey got associated to object "neutron-fd9caf20-08b6-40e1-bde8-c33aee1f675a"13:14
ralonsohthat is SGa13:14
mtomaskawhich is wrong... and I think that is the core of this bug13:14
ralonsohright, I think that deserves a question in the ovn mailing group13:15
mtomaskayes in this case. What I saw is that it will always be the first uuid of the first neutron object name13:15
mtomaska^ that seems wrong13:16
ralonsohqq: when should we see logs from the other SG?13:16
mtomaskaIDK :) . I dont know too much about this feature to tell what is wrong and what is right :)13:16
ralonsohbecause I see no logs related to the ping in the other direction13:16
ralonsohelvira, maybe you can check this one first?13:17
mtomaskaI'll talk to elvira13:17
ralonsohright13:17
mtomaskaright13:17
fricklercould this be an information leak? i.e. is this a security issue?13:17
ralonsohit doesn'13:17
ralonsohdoesn't look like a security issue13:17
ralonsohbut a lack of logging13:17
elvirasure, I can take a look13:17
mtomaskafrickler I dont think so. After all, only admins should have access to ovn-controller.log, right?13:17
mtomaskaelvira: let discuss offline. Maybe a quick video call or something13:18
fricklermtomaska: ah, right13:18
ralonsohcool, thanks, let's talk about this one offline13:18
ralonsohthe last one is13:18
ralonsoh#link https://bugs.launchpad.net/neutron/+bug/211030613:18
elviraNote that dropped traffic will be logged for all sec groups since we have that traffic being monitored by the general drop acl13:18
elvirawill continue offline :)13:19
ralonsoh[RFE][OVN] subnet onboarding is not supported13:19
ralonsohso this is a RFE13:19
mtomaskaseems like a decision for RFE to me. 13:19
ralonsohhmmm13:19
ralonsohmaybe is just a matter of adding the extension to OVN13:20
ralonsohbecauseI think this is only API related13:20
ralonsoh(I think)13:20
mtomaskawhat is really subnet onboarding? :)13:20
ralonsoh"The subnet onboard feature allows you to take existing subnets that have been created outside of a subnet pool and move them into an existing subnet pool. "13:20
fricklerit changes the address scope, so maybe OVN will have to do something?13:21
lajoskatonahttps://docs.openstack.org/neutron/latest/admin/config-subnet-onboard.html13:21
ralonsohfrickler, yeah, that maybe would need some driver interaction, not just API actions13:22
ralonsohok, I'll check it after the meeting13:22
ralonsohif this bug requires any kind of driver interaction, that will be a RFE for sure13:23
ralonsohotherwise, it will be just a oneliner patch13:23
mtomaskaack13:23
ralonsohand that's all I have13:23
ralonsohany other bug you want to discuss?13:23
ralonsohand the "winner" this week is bcafarel, next week will be elvira13:24
ralonsohack?13:24
elviraack13:24
bcafarelwhat is the winning prize? :)13:24
bcafarel(and also ack for this week)13:25
ralonsohspend wonderful time reviewing launchpad...13:25
mtomaskabcafarel: 10+ bugs assigned13:25
ralonsohok, let's move to the next topic13:25
ralonsoh#topic community-goals13:26
ralonsohthe first one is the Neutronclient deprecation13:26
ralonsohlajoskatona, any update?13:26
lajoskatonanothing this week13:26
lajoskatonaI pinged hoeirzon team, thats all13:26
ralonsohlink to any patch?13:26
lajoskatonahorizon13:26
lajoskatonahttps://review.opendev.org/c/openstack/horizon/+/94626913:27
ralonsohcool thanks!13:27
lajoskatonato go back to fullstack I had no time13:27
lajoskatonaFYI: https://review.opendev.org/c/openstack/neutron/+/94785113:27
ralonsohah yes, complex one13:28
ralonsohthe next one goal is the eventlet removal13:28
ralonsohI've pushed a new patch this week, related to the L3 agent LP13:29
ralonsoh#link https://review.opendev.org/c/openstack/neutron/+/94913513:29
lajoskatonathe bigest proble is tha I have no idea how to do no-auth connection with SDK, and seems it is not easy and known by somebody13:29
ralonsohlajoskatona, this? 13:29
ralonsohhttps://review.opendev.org/c/openstack/neutron/+/947851/1/neutron/tests/fullstack/resources/process.py13:29
lajoskatonayes, exactly13:30
lajoskatonabut sorry go ahaead with eventlet, that's i t from me for SDK13:30
ralonsohlajoskatona, qq: did you bring this topic to any team meeting?13:30
ralonsohslaweq, ^ could be in TC?13:30
lajoskatonaralonsoh: you mean the SDK vs no-auth question?13:31
ralonsohsorry, not TC, SDK13:31
slaweqralonsoh I am not in TC anymore and didn't attend meetings recently13:31
ralonsohsorry, not TC, my bad13:31
lajoskatonaI asked on SDK channel, but plan to ask more to see if it is possible at all13:31
slaweqfrickler should know better maybe13:32
fricklerI also only know that it seems to be difficult13:32
ralonsohbut that was possible with neutronclient13:32
lajoskatonawe call that progress usually (sorry just sarcasm....)13:33
ralonsohhahahaha13:33
ralonsohmaybe, just for testing, I would be needed to implement this in SDK13:33
ralonsohI'll ping stephenfin after this meeting13:34
lajoskatonaI run another round with SDK people, how should we progress with it13:34
lajoskatonathanks, I had a chat with gtema last week, or before about this13:34
ralonsohok, about the L3 patch (https://review.opendev.org/c/openstack/neutron/+/949135). Just a bit of context:13:34
ralonsohit is described in the commit message. With the oslo.service threading backend (patch under review), the service (l3 agent) is forked in the start method13:35
ralonsohany object created in the init method will be forked too13:35
ralonsohbut RPC clients doesn't like this13:36
ralonsohI've moved all the RPC client initialization to the init_host method, that is called from Service.start()13:36
ralonsohthat patch MUST work with both backends (in the CI is working now with eventlet)13:36
ralonsohin the upper patch is working with theading backends13:37
ralonsohthat's all13:37
ralonsohany other comment?13:37
lajoskatonathanks ralonsoh, I check this one, I played also with dhcp-agent and the oslo.service patch13:37
ralonsohyeah, that will need exactly the same13:37
lajoskatonabut just locally at the moment13:37
ralonsohto move all RPC clients to the init_host methods13:38
lajoskatonaI was able to start the agent with it, with some exceptions, but will check yours of course13:38
ralonsohdid you use the oslo.service patch?13:38
lajoskatonayes, I did13:38
ralonsohcool!13:38
ralonsohit seems that we'll have it soon in a new oslo.service release13:39
ralonsohthat will be easier for testing13:39
lajoskatona+113:39
ralonsohok, let's move to the last topic13:39
ralonsoh#topic on-demand13:39
ralonsohanything you want to add?13:39
ralonsohOk, I'm closing the meeting for today. Thank you all for attending!13:40
ralonsoh#endmeeting13:40
opendevmeetMeeting ended Tue May 13 13:40:53 2025 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)13:40
opendevmeetMinutes:        https://meetings.opendev.org/meetings/networking/2025/networking.2025-05-13-13.00.html13:40
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/networking/2025/networking.2025-05-13-13.00.txt13:40
opendevmeetLog:            https://meetings.opendev.org/meetings/networking/2025/networking.2025-05-13-13.00.log.html13:40
mlavalle\o13:40
ralonsohbye13:40
mtomaskao/13:40
lajoskatonaBye13:40
cbuggyo/13:41
opendevreviewMerged openstack/neutron master: Switch centos 9-stream jobs to run with python 3.12  https://review.opendev.org/c/openstack/neutron/+/94664213:44
opendevreviewRodolfo Alonso proposed openstack/neutron-tempest-plugin master: Bump advance image to Ubuntu Jammy Server 22.04  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/94914014:34
opendevreviewRodolfo Alonso proposed openstack/neutron-tempest-plugin master: Pin "designate-tempest-plugin" to zed-last in Zed branch  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/94964315:09
opendevreviewRodolfo Alonso proposed openstack/neutron-tempest-plugin master: Bump advance image to Ubuntu Jammy Server 22.04  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/94914015:16
opendevreviewMerged openstack/neutron unmaintained/2023.1: [stable-only] Remove "devstack-tobiko-neutron" job  https://review.opendev.org/c/openstack/neutron/+/94955815:55
opendevreviewRodolfo Alonso proposed openstack/neutron master: WIP == [eventlet-removal] Change the state change WSGI server  https://review.opendev.org/c/openstack/neutron/+/93840416:02
*** ralonsoh is now known as ralonsoh_out16:03
opendevreviewMerged openstack/neutron-tempest-plugin master: Revert "Mark "neutron-tempest-plugin-designate-scenari" as non voting"  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/94860718:18
opendevreviewKevin Carter proposed openstack/neutron master: feat(OVN): add new mode to only add when missing  https://review.opendev.org/c/openstack/neutron/+/94182419:03
opendevreviewMerged openstack/neutron stable/2025.1: [OVN] Change the OVN QoS rule priority for floating IPs  https://review.opendev.org/c/openstack/neutron/+/94931223:08

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!