14:01:37 <SridarK> #startmeeting fwaas 14:01:38 <openstack> Meeting started Thu Jan 18 14:01:37 2018 UTC and is due to finish in 60 minutes. The chair is SridarK. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:01:39 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 14:01:41 <openstack> The meeting name has been set to 'fwaas' 14:01:48 <SridarK> #chair yushiro xgerman_ 14:01:49 <openstack> Current chairs: SridarK xgerman_ yushiro 14:03:19 <SridarK> #topic Queens 14:04:01 <xgerman_> o/ 14:04:08 <SridarK> xgerman_: hi 14:04:12 <yushiro> hi 14:04:35 <SridarK> last week we went thru some patches that are prioritized 14:04:57 <xgerman_> so I told Migueal that we are almost done, so they are closing the blueprint and the reminaing issues will be bugs 14:05:17 <yushiro> +1 14:05:17 <SridarK> xgerman_: ok yes makes sense 14:05:23 <SridarK> #link https://review.openstack.org/#/c/475183 14:06:30 <SridarK> I think we are good - just give me some time to run thru a final check then i can +A 14:06:49 <yushiro> yes, thanks SridarK 14:07:03 <SridarK> annp: anything else to discuss on this ? 14:08:38 <SridarK> ok lets move on to the next 14:08:59 <SridarK> #link https://review.openstack.org/#/c/530450/ 14:09:20 <SridarK> I am good had a small nit on reno 14:09:25 <annp> Please go ahead. I'm online by mobile 14:09:33 <SridarK> annp: no worries 14:09:38 <yushiro> ok 14:09:46 <yushiro> thanks for your review :) 14:09:50 <SridarK> yushiro: so u think that is ok 14:09:58 <annp> Thanks 14:10:06 <SridarK> i just wanted to avoid any confusion on reno 14:10:19 <yushiro> SridarK, Yes. But I always not sure my grammar... 14:10:51 <SridarK> i think just using FWaaS rather than firewall on reno makes it more clear 14:11:34 <yushiro> SridarK, ah, yes. +1 14:11:34 <annp> +1 14:11:44 <xgerman_> +1 14:11:57 <yushiro> always very helpful :) 14:12:29 <SridarK> annp: yushiro: ok once we correct that nit we can merge ? 14:12:45 <SridarK> since we still have time 14:12:54 <SridarK> but otherwise we are good 14:12:56 <xgerman_> yeah, I expect we have about another week 14:12:57 <yushiro> SridarK, Yes. I think it's OK :) 14:13:14 <SridarK> ok great 14:13:35 <xgerman_> (if I work with whoever cuts the release) 14:13:54 <yushiro> xgerman_, oh, sorry, i didn't do that.. 14:14:08 <SridarK> xgerman_: yes sounds good 14:14:31 <xgerman_> Neutron usually cuts Wednesday… 14:14:46 <yushiro> OK 14:15:11 <SridarK> we shd be able to wrap by tomorrow 14:15:17 <SridarK> i think we also had #link https://review.openstack.org/#/c/527044/ 14:15:45 <yushiro> Yes. 14:15:55 <SridarK> supporting ipv6 for netlink 14:16:07 <SridarK> where are we on this - i have not gone thru this 14:17:02 <SridarK> annp: if u can respond from mobile or we can discuss on irc later 14:17:56 <SridarK> yushiro: did u have some inputs 14:18:08 <annp> Please discuss later on irc. 14:18:23 <yushiro> oh, good timing :) 14:18:32 <SridarK> annp: ok no worries during ur daytime we can 14:18:51 <annp> Thanks 14:19:03 <SridarK> annp: no problem at all 14:19:05 <yushiro> SridarK, I just tested this patch before and it worked. But not sure with the latest version. 14:19:14 <SridarK> yushiro: ok 14:20:07 <SridarK> next we had #link https://review.openstack.org/#/c/480265/ 14:20:34 <SridarK> doude: pls go ahead 14:21:03 <SridarK> xgerman_: so from ur conversations with Miguel - u think we are too close ? 14:21:04 <doude> Hi all 14:21:22 <yushiro> hi doude 14:21:30 <xgerman_> Miguel just wanted to close the blueprint… 14:21:35 <annp_> hi doude 14:21:36 <doude> nothing much to say than last week 14:21:38 <xgerman_> we cna still merge things 14:21:43 <doude> patch is ready for review 14:21:46 <SridarK> xgerman_: ok 14:21:49 <SridarK> doude: ok 14:22:02 <doude> do you think SridarK that could land for Queens? 14:22:21 <SridarK> doude: i am not sure - i think we will need to get some testing done 14:22:43 <doude> and I just I have to rebase it again :( 14:23:00 <SridarK> i have been going thru it 14:23:10 <doude> and I just realize I have to rebase it again :( 14:23:15 <doude> ok 14:23:36 <SridarK> doude: yes 14:23:46 <yushiro> yeah, your patch tends to be affected other patches.. I know.. 14:24:06 <yushiro> but I'd like to merge this patch until Q.. 14:24:11 <SridarK> worst case we will merge this as soon as we open for R 14:24:53 <xgerman_> #link https://releases.openstack.org/rocky/schedule.html 14:25:06 <SridarK> doude: would that work or is it very critical to get this in ? I feel bad as u have been on this for a while and the PS is alway impacted by any change 14:26:20 <doude> I'm not sure Juniper will continue to contribute on a driver for FWaaS neutron extension if they cannot have it in for Queens 14:26:34 <doude> I've to see with mangment 14:26:39 <HoloIRCUser> Hi 14:26:45 <HoloIRCUser> Reedip here 14:26:49 <xgerman_> ok, maybe we can get it in 14:26:54 <SridarK> doude: fair point 14:26:55 <yushiro> hi 14:27:06 <yushiro> +1 14:27:14 <SridarK> doude: do u think u can work thru some of the testing 14:27:31 <xgerman_> or at least rebase it so we cna test tomorrow 14:27:39 <doude> what do you mean SridarK? 14:27:41 <SridarK> my concern is primarily on potential impact 14:27:52 <xgerman_> +1 14:27:53 <doude> yes I can look on the rebase now 14:28:02 <annp_> +1 14:28:06 <yushiro> great 14:28:08 <xgerman_> we can always release and then backport bug fixes if it’s really close 14:28:08 <SridarK> doude: as xgerman_ says - rebase and then run more tests 14:28:11 <doude> don't know if it's a huge work 14:28:23 <doude> ok 14:28:38 <doude> on my sideI validate unit test and manual functional tests 14:28:49 <doude> and all OpenStack CI goes thru 14:28:59 <SridarK> doude: ok we can all work thru the testing as well 14:29:21 <doude> I don't know which more tests I can do 14:29:58 <SridarK> on the functional side, we will need to evaluate: 1) Basic L3 - CRUD and datapath. 2) Similarly for L2 14:30:24 <doude> tempest tests doesn't do that? 14:30:27 <SridarK> And ensure UI pieces are intact (which is low risk for ur changes IMHO) 14:30:47 <SridarK> doude: our tempest tests are still WIP 14:30:48 <xgerman_> doude our tempest tests are pretty neglected 14:30:52 <doude> yes UI should not be impacted. The APi doesn't change 14:31:01 <doude> ok 14:31:12 <SridarK> we can set an etherpad and run thru some functional tests 14:32:14 <SridarK> we can use: 14:32:15 <SridarK> https://etherpad.openstack.org/p/fwaas-pluggable-backend-testing 14:32:31 <yushiro> sorry all, I'm bad condition now... I'll logout today. I'll see meeting log tomorrow. 14:33:00 <HoloIRCUser> Ok... 14:33:05 <SridarK> ok 14:33:11 <yushiro> so sorry. 14:33:17 <HoloIRCUser> Get well yushiro 14:33:22 <SridarK> doude: maybe u can also check in with ur mgmt 14:33:31 <yushiro> reedip: Thanks... 14:33:31 <doude> ok I'll 14:33:34 <yushiro> Bye all.. 14:33:35 <SridarK> but we can also plan for this after rebase 14:33:57 <SridarK> we can try and populate some of the tests 14:34:23 <SridarK> doude: we can sync on irc/email 14:34:39 <doude> sure 14:34:51 <SridarK> xgerman_: does that sound like a plan ? Anything else u would like to add 14:35:02 <xgerman_> sounds good 14:35:09 <doude> good to me to 14:35:30 <SridarK> ok i think that was all the patches 14:35:52 <chandanc> SridarK: i had a small one 14:35:53 <chandanc> https://review.openstack.org/#/c/535237/1 14:36:13 <chandanc> did not want to touch the onghoing patches 14:36:27 <SridarK> chandanc: sure pls go ahead 14:36:30 <chandanc> but if required i can push it in with any other 14:36:51 <chandanc> Just to make sure the OVS driver is initialized correctly 14:37:09 <chandanc> adds just 5 lines 14:37:18 <SridarK> chandanc: ok 14:37:38 <chandanc> I will add the team for review 14:37:48 <SridarK> i think we can keep it separate - will make it easier for doude on a potential rebase impact 14:38:02 <chandanc> ok 14:38:04 <annp_> chandanc, regarding to your patch, I'd like make fwaas l2 agent extension compatible with OVS and linuxbridge 14:38:43 <annp_> currently, Firewall L2 agent extension is compatible with OVS 14:38:46 <chandanc> annp, our initial check was jut to make sure SG is enabled, it did not check if SG is running on OVS 14:39:50 <chandanc> so even if SG is enabled with hybrid iptables driver, fwaas driver starts in coexistense mode 14:40:09 <annp_> https://bugs.launchpad.net/neutron/+bug/1743463 14:40:11 <openstack> Launchpad bug 1743463 in neutron "linuxbridge scenario job fails with: "AttributeError: 'LinuxbridgeAgentExtensionAPI' object has no attribute 'request_int_br'"" [High,Confirmed] 14:41:03 <chandanc> annp_: this is not for linux bridge 14:41:52 <annp_> yes. I understand your concerning but if we can make fwaas l2 agent extension compatible with linuxbrige and ovs it would be great 14:42:30 <annp_> But It is ok if we do that in other patch 14:42:48 <chandanc> hmm, i would look at it, but not sure i can meet time lines. Lets discuss more on linux bridge 14:42:55 <chandanc> * tomorrow 14:43:03 <annp_> chandanc, ok 14:43:31 <annp_> chandanc, lets discuss on irc tomorrow :) 14:43:33 <annp_> thanks 14:43:42 <SridarK> chandanc: annp_: sounds good 14:43:51 <chandanc> annp_: :) sure no problem 14:44:06 <SridarK> if it is more of a bug fix - we have more time 14:44:42 <chandanc> SridarK: yes it is more of bug fix, but a small one, else we can release note it 14:44:43 <openstackgerrit> Édouard Thuleau proposed openstack/neutron-fwaas master: Implements a plugable backend driver https://review.openstack.org/480265 14:45:08 <SridarK> doude: ^^^ thanks 14:45:20 <doude> SridarK, xgerman_: rebase is done. It was trivial and git auto-merging it itself :) 14:45:34 <doude> I just pushed a new patch set 14:45:34 <xgerman_> sweet 14:45:39 <annp_> +1 14:45:47 <SridarK> it is likely u will have a few more with some of the last L2 PS that are about to merge 14:46:13 <SridarK> ok lets move on 14:46:37 <SridarK> #topic Documentation & Marketing :-) 14:46:48 <SridarK> xgerman_: thanks for raising the profile 14:46:51 <HoloIRCUser> :) 14:46:55 <HoloIRCUser> Nice topic 14:47:10 <SridarK> :-) 14:48:03 <xgerman_> I am more on the marjeting side of things right now ;-) 14:48:04 <SridarK> Two things: 1) a nice youtube demo from chandanc https://youtu.be/6NoIvm0J1W8 higlighting L2 14:48:31 <chandanc> Thanks SridarK 14:48:37 <SridarK> 2) Potential superuser article: https://docs.google.com/document/d/1JMpJI4ypKwU-p7Dh1wGT_eVstD8QPX9xpmBxXXQifRc 14:48:42 <SridarK> from xgerman_ 14:49:21 <SridarK> xgerman_: i also added some edits and will continue to tweak but u had pretty much covered the most important things 14:49:29 <chandanc> xgerman_: SridarK i realized that l2 firewall sounds like mac filtering so updated the youtube 14:49:29 <annp_> chandanc++, xgerman_++ 14:50:19 <xgerman_> yeah, I was thinking of sending it on to the super user team soon 14:50:35 <SridarK> So request to team to look thru as well and suggest/make any edits 14:51:01 <SridarK> xgerman_: is there a deadline that we should be aware off ? 14:51:11 <xgerman_> I don’t know off one 14:51:25 <SridarK> ok but we can try to get to final form in the next few days 14:51:46 <chandanc> +1 14:51:58 <SridarK> ok cool lets move on 14:52:05 <SridarK> #topic Dashboard 14:52:26 <SridarK> SarathMekala: amotoki: pls go ahead 14:52:57 <SarathMekala> I dont have any updates on dashboard for this week 14:53:01 <SridarK> SarathMekala: I think u were going thru some changes to ensure L2 support is in place from the Dashboard 14:53:04 <SridarK> ok 14:53:23 <SridarK> do u see any impact with L2 support 14:53:33 <SridarK> possibly with default FWG 14:53:40 <xgerman_> last time I looked it had the support 14:53:50 <SridarK> ok 14:54:03 <xgerman_> I just think we need to be a bit more user friendly - port id is really confusing 14:54:11 <xgerman_> we shoudl show the server name, too 14:54:16 <xgerman_> vm name 14:54:23 <chandanc> +1 14:54:27 <annp_> +1 14:54:29 <SarathMekala> SridarK: I have a list of enhancements that need to be done... like the ones mentioned by xgerman_ 14:54:37 <xgerman_> :-) 14:54:39 <SarathMekala> will start working on them 14:54:45 <xgerman_> +1 14:54:49 <SridarK> yes that will defn make it more user friendly 14:54:53 <SridarK> thx SarathMekala 14:55:01 <SridarK> ok lets move on 14:55:10 <SridarK> #topic Open Discussion 14:55:46 <annp_> SridarK, regarding to support ipv6 for netlink 14:55:50 <SridarK> So by tomorrow - we can get the few outstanding L2 patches in 14:55:57 <SridarK> annp_: yes pls go ahead 14:56:23 <annp_> It's work in my local environment. 14:56:35 <SridarK> annp_: ok 14:56:54 <SridarK> and this is something we want to get in for Queens ? 14:57:15 <annp_> yes. I think we can get it in Queen 14:57:25 <SridarK> annp_: ok 14:57:40 <SridarK> and doude: we will go thru the reviews on ur PS, but u will also check with ur mgmt 14:57:41 <annp_> but Need your eyes for review :) 14:57:59 <SridarK> and we will all chip in with testing 14:58:48 <SridarK> doude: and u will be available in case we have regressions or any critical bugs that will need addressing during the RC phases ? 14:59:01 <SridarK> annp_: ok 14:59:12 <doude> yes SridarK 14:59:14 <xgerman_> Neutron doesn;t do too many RCs 14:59:14 <annp_> thanks 14:59:20 <xgerman_> so RC-1 might be final 14:59:31 <doude> I'll ask management in few hours (no same tz) 14:59:31 <SridarK> Also on PTG, xgerman_ i think u and yushiro will be there 14:59:41 <SridarK> xgerman_: good point 14:59:45 <SridarK> doude: thx 14:59:49 <xgerman_> yeah, still time to apply or travekl assistance :-) 15:00:14 <SridarK> the alternative will be to get this in as soon as R branch opens to minimize risk 15:00:23 <SridarK> doude: thx 15:00:31 <SridarK> xgerman_: ok 15:00:43 <SridarK> we can plan for pre and post mtg as well 15:00:58 <SridarK> i definitely wont be able to make it due to budget 15:01:04 <SridarK> we are at time 15:01:09 <SridarK> thanks all 15:01:12 <doude> thanks to all 15:01:15 <xgerman_> thanks 15:01:18 <annp_> thanks all 15:01:19 <SarathMekala> bye all O/ 15:01:21 <chandanc> bye 15:01:23 <annp_> see you 15:01:24 <SridarK> #endmeeting