14:01:37 <SridarK> #startmeeting fwaas
14:01:38 <openstack> Meeting started Thu Jan 18 14:01:37 2018 UTC and is due to finish in 60 minutes.  The chair is SridarK. Information about MeetBot at http://wiki.debian.org/MeetBot.
14:01:39 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
14:01:41 <openstack> The meeting name has been set to 'fwaas'
14:01:48 <SridarK> #chair yushiro xgerman_
14:01:49 <openstack> Current chairs: SridarK xgerman_ yushiro
14:03:19 <SridarK> #topic Queens
14:04:01 <xgerman_> o/
14:04:08 <SridarK> xgerman_: hi
14:04:12 <yushiro> hi
14:04:35 <SridarK> last week we went thru some patches that are prioritized
14:04:57 <xgerman_> so I told Migueal that we are almost done, so they are closing the blueprint and the reminaing issues will be bugs
14:05:17 <yushiro> +1
14:05:17 <SridarK> xgerman_: ok yes makes sense
14:05:23 <SridarK> #link https://review.openstack.org/#/c/475183
14:06:30 <SridarK> I think we are good - just give me some time to run thru a final check then i can +A
14:06:49 <yushiro> yes, thanks SridarK
14:07:03 <SridarK> annp: anything else to discuss on this ?
14:08:38 <SridarK> ok lets move on to the next
14:08:59 <SridarK> #link https://review.openstack.org/#/c/530450/
14:09:20 <SridarK> I am good had a small nit on reno
14:09:25 <annp> Please go ahead. I'm online by mobile
14:09:33 <SridarK> annp: no worries
14:09:38 <yushiro> ok
14:09:46 <yushiro> thanks for your review :)
14:09:50 <SridarK> yushiro: so u think that is ok
14:09:58 <annp> Thanks
14:10:06 <SridarK> i just wanted to avoid any confusion on reno
14:10:19 <yushiro> SridarK, Yes.  But I always not sure my grammar...
14:10:51 <SridarK> i think just using FWaaS rather than firewall on reno makes it more clear
14:11:34 <yushiro> SridarK, ah, yes. +1
14:11:34 <annp> +1
14:11:44 <xgerman_> +1
14:11:57 <yushiro> always very helpful :)
14:12:29 <SridarK> annp: yushiro: ok once we correct that nit we can merge ?
14:12:45 <SridarK> since we still have time
14:12:54 <SridarK> but otherwise we are good
14:12:56 <xgerman_> yeah, I expect we have about another week
14:12:57 <yushiro> SridarK, Yes.  I think it's OK :)
14:13:14 <SridarK> ok great
14:13:35 <xgerman_> (if I work with whoever cuts the release)
14:13:54 <yushiro> xgerman_, oh, sorry,  i didn't do that..
14:14:08 <SridarK> xgerman_: yes sounds good
14:14:31 <xgerman_> Neutron usually cuts Wednesday…
14:14:46 <yushiro> OK
14:15:11 <SridarK> we shd be able to wrap by tomorrow
14:15:17 <SridarK> i think we also had #link https://review.openstack.org/#/c/527044/
14:15:45 <yushiro> Yes.
14:15:55 <SridarK> supporting ipv6 for netlink
14:16:07 <SridarK> where are we on this - i have not gone thru this
14:17:02 <SridarK> annp: if u can respond from mobile or we can discuss on irc later
14:17:56 <SridarK> yushiro: did u have some inputs
14:18:08 <annp> Please discuss later on irc.
14:18:23 <yushiro> oh, good timing :)
14:18:32 <SridarK> annp: ok no worries during ur daytime we can
14:18:51 <annp> Thanks
14:19:03 <SridarK> annp: no problem at all
14:19:05 <yushiro> SridarK,  I just tested this patch before and it worked.  But not sure with the latest version.
14:19:14 <SridarK> yushiro: ok
14:20:07 <SridarK> next we had #link  https://review.openstack.org/#/c/480265/
14:20:34 <SridarK> doude: pls go ahead
14:21:03 <SridarK> xgerman_: so from ur conversations with Miguel - u think we are too close ?
14:21:04 <doude> Hi all
14:21:22 <yushiro> hi doude
14:21:30 <xgerman_> Miguel just wanted to close the blueprint…
14:21:35 <annp_> hi doude
14:21:36 <doude> nothing much to say than last week
14:21:38 <xgerman_> we cna still merge things
14:21:43 <doude> patch is ready for review
14:21:46 <SridarK> xgerman_: ok
14:21:49 <SridarK> doude: ok
14:22:02 <doude> do you think SridarK that could land for Queens?
14:22:21 <SridarK> doude: i am not sure - i think we will need to get some testing done
14:22:43 <doude> and I just I have to rebase it again :(
14:23:00 <SridarK> i have been going thru it
14:23:10 <doude> and I just realize I have to rebase it again :(
14:23:15 <doude> ok
14:23:36 <SridarK> doude: yes
14:23:46 <yushiro> yeah, your patch tends to be affected other patches..  I know..
14:24:06 <yushiro> but I'd like to merge this patch until Q..
14:24:11 <SridarK> worst case we will merge this as soon as we open for R
14:24:53 <xgerman_> #link https://releases.openstack.org/rocky/schedule.html
14:25:06 <SridarK> doude: would that work or is it very critical to get this in ? I feel bad as u have been on this for a while and the PS is alway impacted by any change
14:26:20 <doude> I'm not sure Juniper will continue to contribute on a driver for FWaaS neutron extension if they cannot have it in for Queens
14:26:34 <doude> I've to see with mangment
14:26:39 <HoloIRCUser> Hi
14:26:45 <HoloIRCUser> Reedip here
14:26:49 <xgerman_> ok, maybe we can get it in
14:26:54 <SridarK> doude: fair point
14:26:55 <yushiro> hi
14:27:06 <yushiro> +1
14:27:14 <SridarK> doude: do u think u can work thru some of the testing
14:27:31 <xgerman_> or at least rebase it so we cna test tomorrow
14:27:39 <doude> what do you mean SridarK?
14:27:41 <SridarK> my concern is primarily on potential impact
14:27:52 <xgerman_> +1
14:27:53 <doude> yes I can look on the rebase now
14:28:02 <annp_> +1
14:28:06 <yushiro> great
14:28:08 <xgerman_> we can always release and then backport bug fixes if it’s really close
14:28:08 <SridarK> doude: as xgerman_ says - rebase and then run more tests
14:28:11 <doude> don't know if it's a huge work
14:28:23 <doude> ok
14:28:38 <doude> on my sideI validate unit test and manual functional tests
14:28:49 <doude> and all OpenStack CI goes thru
14:28:59 <SridarK> doude: ok we can all work thru the testing as well
14:29:21 <doude> I don't know which more tests I can do
14:29:58 <SridarK> on the functional side, we will need to evaluate: 1) Basic L3 - CRUD and datapath. 2) Similarly for L2
14:30:24 <doude> tempest tests doesn't do that?
14:30:27 <SridarK> And ensure UI pieces are intact (which is low risk for ur changes IMHO)
14:30:47 <SridarK> doude: our tempest tests are still WIP
14:30:48 <xgerman_> doude our tempest tests are pretty neglected
14:30:52 <doude> yes UI should not be impacted. The APi doesn't change
14:31:01 <doude> ok
14:31:12 <SridarK> we can set an etherpad and run thru some functional tests
14:32:14 <SridarK> we can use:
14:32:15 <SridarK> https://etherpad.openstack.org/p/fwaas-pluggable-backend-testing
14:32:31 <yushiro> sorry all,  I'm bad condition now...  I'll logout today.   I'll see meeting log tomorrow.
14:33:00 <HoloIRCUser> Ok...
14:33:05 <SridarK> ok
14:33:11 <yushiro> so sorry.
14:33:17 <HoloIRCUser> Get well yushiro
14:33:22 <SridarK> doude: maybe u can also check in with ur mgmt
14:33:31 <yushiro> reedip: Thanks...
14:33:31 <doude> ok I'll
14:33:34 <yushiro> Bye all..
14:33:35 <SridarK> but we can also plan for this after rebase
14:33:57 <SridarK> we can try and populate some of the tests
14:34:23 <SridarK> doude: we can sync on irc/email
14:34:39 <doude> sure
14:34:51 <SridarK> xgerman_: does that sound like a plan ? Anything else u would like to add
14:35:02 <xgerman_> sounds good
14:35:09 <doude> good to me to
14:35:30 <SridarK> ok i think that was all the patches
14:35:52 <chandanc> SridarK: i had a small one
14:35:53 <chandanc> https://review.openstack.org/#/c/535237/1
14:36:13 <chandanc> did not want to touch the onghoing patches
14:36:27 <SridarK> chandanc: sure pls go ahead
14:36:30 <chandanc> but if required i can push it in with any other
14:36:51 <chandanc> Just to make sure the OVS driver is initialized correctly
14:37:09 <chandanc> adds just 5 lines
14:37:18 <SridarK> chandanc: ok
14:37:38 <chandanc> I will add the team for review
14:37:48 <SridarK> i think we can keep it separate - will make it easier for doude on a potential rebase impact
14:38:02 <chandanc> ok
14:38:04 <annp_> chandanc, regarding to your patch, I'd like make fwaas l2 agent extension compatible with OVS and linuxbridge
14:38:43 <annp_> currently, Firewall L2 agent extension is compatible with OVS
14:38:46 <chandanc> annp, our initial check was jut to make sure SG is enabled, it did not check if SG is running on OVS
14:39:50 <chandanc> so even if SG is enabled with hybrid iptables driver, fwaas driver starts in coexistense mode
14:40:09 <annp_> https://bugs.launchpad.net/neutron/+bug/1743463
14:40:11 <openstack> Launchpad bug 1743463 in neutron "linuxbridge scenario job fails with: "AttributeError: 'LinuxbridgeAgentExtensionAPI' object has no attribute 'request_int_br'"" [High,Confirmed]
14:41:03 <chandanc> annp_: this is not for linux bridge
14:41:52 <annp_> yes. I understand your concerning but if we can make fwaas l2 agent extension compatible with linuxbrige and ovs it would be great
14:42:30 <annp_> But It is ok if we do that in other patch
14:42:48 <chandanc> hmm, i would look at it, but not sure i can meet time lines. Lets discuss more on linux bridge
14:42:55 <chandanc> * tomorrow
14:43:03 <annp_> chandanc, ok
14:43:31 <annp_> chandanc, lets discuss on irc tomorrow :)
14:43:33 <annp_> thanks
14:43:42 <SridarK> chandanc: annp_: sounds good
14:43:51 <chandanc> annp_: :) sure no problem
14:44:06 <SridarK> if it is more of a bug fix - we have more time
14:44:42 <chandanc> SridarK: yes it is more of bug fix, but a small one, else we can release note it
14:44:43 <openstackgerrit> Édouard Thuleau proposed openstack/neutron-fwaas master: Implements a plugable backend driver  https://review.openstack.org/480265
14:45:08 <SridarK> doude: ^^^ thanks
14:45:20 <doude> SridarK, xgerman_: rebase is done. It was trivial and git auto-merging it itself :)
14:45:34 <doude> I just pushed a new patch set
14:45:34 <xgerman_> sweet
14:45:39 <annp_> +1
14:45:47 <SridarK> it is likely u will have a few more with some of the last L2 PS that are about to merge
14:46:13 <SridarK> ok lets move on
14:46:37 <SridarK> #topic Documentation & Marketing :-)
14:46:48 <SridarK> xgerman_: thanks for raising the profile
14:46:51 <HoloIRCUser> :)
14:46:55 <HoloIRCUser> Nice topic
14:47:10 <SridarK> :-)
14:48:03 <xgerman_> I am more on the marjeting side of things right now ;-)
14:48:04 <SridarK> Two things: 1) a nice youtube demo from chandanc https://youtu.be/6NoIvm0J1W8 higlighting L2
14:48:31 <chandanc> Thanks SridarK
14:48:37 <SridarK> 2) Potential superuser article: https://docs.google.com/document/d/1JMpJI4ypKwU-p7Dh1wGT_eVstD8QPX9xpmBxXXQifRc
14:48:42 <SridarK> from xgerman_
14:49:21 <SridarK> xgerman_: i also added some edits and will continue to tweak but u had pretty much covered the most important things
14:49:29 <chandanc> xgerman_: SridarK  i realized that l2 firewall sounds like mac filtering so updated the youtube
14:49:29 <annp_> chandanc++, xgerman_++
14:50:19 <xgerman_> yeah, I was thinking of sending it on to the super user team soon
14:50:35 <SridarK> So request to team to look thru as well and suggest/make any edits
14:51:01 <SridarK> xgerman_: is there a deadline that we should be aware off ?
14:51:11 <xgerman_> I don’t know off one
14:51:25 <SridarK> ok but we can try to get to final form in the next few days
14:51:46 <chandanc> +1
14:51:58 <SridarK> ok cool lets move on
14:52:05 <SridarK> #topic Dashboard
14:52:26 <SridarK> SarathMekala: amotoki: pls go ahead
14:52:57 <SarathMekala> I dont have any updates on dashboard for this week
14:53:01 <SridarK> SarathMekala: I think u were going thru some changes to ensure L2 support is in place from the Dashboard
14:53:04 <SridarK> ok
14:53:23 <SridarK> do u see any impact with L2 support
14:53:33 <SridarK> possibly with default FWG
14:53:40 <xgerman_> last time I looked it had the support
14:53:50 <SridarK> ok
14:54:03 <xgerman_> I just think we need to be a bit more user friendly - port id is really confusing
14:54:11 <xgerman_> we shoudl show the server name, too
14:54:16 <xgerman_> vm name
14:54:23 <chandanc> +1
14:54:27 <annp_> +1
14:54:29 <SarathMekala> SridarK: I have a list of enhancements that need to be done... like the ones mentioned by xgerman_
14:54:37 <xgerman_> :-)
14:54:39 <SarathMekala> will start working on them
14:54:45 <xgerman_> +1
14:54:49 <SridarK> yes that will defn make it more user friendly
14:54:53 <SridarK> thx SarathMekala
14:55:01 <SridarK> ok lets move on
14:55:10 <SridarK> #topic Open Discussion
14:55:46 <annp_> SridarK, regarding to support ipv6 for netlink
14:55:50 <SridarK> So by tomorrow - we can get the few outstanding L2 patches in
14:55:57 <SridarK> annp_: yes pls go ahead
14:56:23 <annp_> It's work in my local environment.
14:56:35 <SridarK> annp_: ok
14:56:54 <SridarK> and this is something we want to get in for Queens ?
14:57:15 <annp_> yes. I think we can get it in Queen
14:57:25 <SridarK> annp_: ok
14:57:40 <SridarK> and doude: we will go thru the reviews on ur PS, but u will also check with ur mgmt
14:57:41 <annp_> but Need your eyes for review :)
14:57:59 <SridarK> and we will all chip in with testing
14:58:48 <SridarK> doude: and u will be available in case we have regressions or any critical bugs that will need addressing during the RC phases ?
14:59:01 <SridarK> annp_: ok
14:59:12 <doude> yes SridarK
14:59:14 <xgerman_> Neutron doesn;t do too many RCs
14:59:14 <annp_> thanks
14:59:20 <xgerman_> so RC-1 might be final
14:59:31 <doude> I'll ask management in few hours (no same tz)
14:59:31 <SridarK> Also on PTG, xgerman_ i think u and yushiro will be there
14:59:41 <SridarK> xgerman_: good point
14:59:45 <SridarK> doude: thx
14:59:49 <xgerman_> yeah, still time to apply or travekl assistance :-)
15:00:14 <SridarK> the alternative will be to get this in as soon as R branch opens to minimize risk
15:00:23 <SridarK> doude: thx
15:00:31 <SridarK> xgerman_: ok
15:00:43 <SridarK> we can plan for pre and post mtg as well
15:00:58 <SridarK> i definitely wont be able to make it due to budget
15:01:04 <SridarK> we are at time
15:01:09 <SridarK> thanks all
15:01:12 <doude> thanks to all
15:01:15 <xgerman_> thanks
15:01:18 <annp_> thanks all
15:01:19 <SarathMekala> bye all O/
15:01:21 <chandanc> bye
15:01:23 <annp_> see you
15:01:24 <SridarK> #endmeeting