Wednesday, 2025-08-20

open10k8shi folks, i already reported the ovn logging bug https://bugs.launchpad.net/neutron/+bug/2110087 and the conclusion was that it is caused by an known limitation of ovn logging mech.  Today I found that OVN introduced NB_Global.options:default_acl_drop (https://github.com/ovn-org/ovn/commit/acec066091c866fe2aa624c512c780d16d51cc6c) which allows default-deny behavior without a shared drop ACL. I think this allows us to 00:42
open10k8screate explicit per-SG DROP ACLs (with log) if operators want per-SG DROP logging. what do you think?00:42
opendevreviewDoug Goldstein proposed openstack/neutron stable/2024.2: [OVN]: fix ovn-db-sync to include gateway chassis  https://review.opendev.org/c/openstack/neutron/+/95799100:52
opendevreviewyatin proposed openstack/neutron-tempest-plugin master: [CI] Vendor openvswitch_bridge  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/95800805:09
opendevreviewyatin proposed openstack/neutron master: [CI][multinode] Import zuul-jobs roles  https://review.opendev.org/c/openstack/neutron/+/95801005:22
opendevreviewyatin proposed openstack/neutron master: [CI][multinode] Import zuul-jobs roles  https://review.opendev.org/c/openstack/neutron/+/95801005:29
opendevreviewyatin proposed openstack/neutron master: [CI][multinode] Import zuul-jobs roles  https://review.opendev.org/c/openstack/neutron/+/95801005:37
opendevreviewyatin proposed openstack/neutron stable/2025.1: Re Reduce number of routers created in test_gateway_chassis_rebalance  https://review.opendev.org/c/openstack/neutron/+/95801305:43
opendevreviewyatin proposed openstack/neutron stable/2024.2: Re Reduce number of routers created in test_gateway_chassis_rebalance  https://review.opendev.org/c/openstack/neutron/+/95801405:44
opendevreviewyatin proposed openstack/neutron stable/2024.1: Re Reduce number of routers created in test_gateway_chassis_rebalance  https://review.opendev.org/c/openstack/neutron/+/95801505:44
opendevreviewyatin proposed openstack/neutron master: dnm: tests neutron master with osken native  https://review.opendev.org/c/openstack/neutron/+/94150806:30
opendevreviewyatin proposed openstack/neutron master: [DNM] Just for test  https://review.opendev.org/c/openstack/neutron/+/95801907:04
opendevreviewyatin proposed openstack/neutron master: dnm: tests neutron master with osken native  https://review.opendev.org/c/openstack/neutron/+/94150807:04
bcafarelhaleyb: done, I will check also rest of stable branches later today08:00
opendevreviewMerged openstack/neutron stable/2024.2: OVS firewall: only remove security group when truly unused  https://review.opendev.org/c/openstack/neutron/+/95681509:05
opendevreviewyatin proposed openstack/neutron-tempest-plugin master: [CI] Use ovs-vsctl to ensure bridges  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/95800810:14
opendevreviewyatin proposed openstack/neutron master: dnm: tests neutron master with osken native  https://review.opendev.org/c/openstack/neutron/+/94150810:15
opendevreviewJakub Libosvar proposed openstack/neutron-specs master: Propose spec for OVN BGP integration  https://review.opendev.org/c/openstack/neutron-specs/+/95287211:38
haleybbcafarel: ack, thanks12:30
ykarel_haleyb, slaweq mlavalle when you get chance please check https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/95800814:45
ykarel_eolivare, slaweq also in tobiko https://review.opendev.org/q/topic:%22openvswitch_bridge%2214:45
eolivareykarel_, ack. +215:01
slaweqykarel done15:01
bcafarelERROR! couldn't resolve module/action 'openvswitch_bridge'. This often indicates a misspelling, missing collection, or incorrect module path.16:03
bcafarelit seems familiar but I can not find where I saw that one before (this is in 2025.1 https://4943fb2c6c08af91b250-adb2e7ba02c3b7d718c3f664ac85bf1c.ssl.cf1.rackcdn.com/openstack/76f296e6463d4454b444d6c73c367ef5/job-output.txt )16:03
opendevreviewJakub Libosvar proposed openstack/neutron master: WIP: OVN BGP service plugin  https://review.opendev.org/c/openstack/neutron/+/95810016:05
ykarel_bcafarel, yes above patches are the fix for these, triggered by switch to ansible 11 in zuul16:29
haleybhaleyb: ack, done, thanks17:46
jlibosvahaleyb: I guess that message was meant for me and not for you :) Thank you17:54
opendevreviewMerged openstack/neutron-tempest-plugin master: [CI] Use ovs-vsctl to ensure bridges  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/95800817:54
haleybjlibosva: oh, well it merged so all good17:54
opendevreviewMaor Blaustein proposed x/whitebox-neutron-tempest-plugin master: Control interface on tenant VMs for QoS bandwidth tests  https://review.opendev.org/c/x/whitebox-neutron-tempest-plugin/+/95796618:27
opendevreviewMaor Blaustein proposed x/whitebox-neutron-tempest-plugin master: Control interface on tenant VMs for QoS bandwidth tests  https://review.opendev.org/c/x/whitebox-neutron-tempest-plugin/+/95796618:31
opendevreviewMerged openstack/neutron stable/2025.1: Re Reduce number of routers created in test_gateway_chassis_rebalance  https://review.opendev.org/c/openstack/neutron/+/95801319:07
opendevreviewMerged openstack/neutron stable/2024.2: Re Reduce number of routers created in test_gateway_chassis_rebalance  https://review.opendev.org/c/openstack/neutron/+/95801419:25
opendevreviewMerged openstack/neutron stable/2024.1: OVS firewall: only remove security group when truly unused  https://review.opendev.org/c/openstack/neutron/+/95433223:43

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!