14:00:56 #startmeeting fwaas 14:00:56 Meeting started Thu Oct 18 14:00:56 2018 UTC and is due to finish in 60 minutes. The chair is annp_. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:00:57 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 14:00:59 The meeting name has been set to 'fwaas' 14:01:19 xgerman_ hi 14:02:40 o/ 14:02:52 #chair xgerman_ annp 14:02:53 Warning: Nick not in channel: annp 14:02:54 Current chairs: annp annp_ xgerman_ 14:03:04 annp_: thanks for starting - you like to run the meeting? 14:03:42 xgerman_ ok. let me try :-) 14:03:47 #topic announcements 14:04:07 Next week is Stein-1 milestone (October 22nd - 26th) 14:04:30 and please note that less than one month than a month away from the Summit in Berlin. 14:05:02 xgerman_ do you have any other announcement? 14:05:34 hi hongbin 14:05:42 o/ 14:06:06 hongbin, do you have any other announcement? 14:06:19 annp_: no, i don't 14:06:42 #link https://docs.openstack.org/oslo.policy/latest/user/usage.html#naming-policies 14:06:53 not sure if that will drive changes for us 14:07:13 #link https://www.irccloud.com/irc/freenode/channel/link 14:07:31 haven’t read through that but might mean work for our dashboard 14:07:48 in other news dims from the OpenStack TC got elected to the k8s steering committee 14:08:03 that’s all 14:08:30 xgerman_, thanks for your inform. 14:09:20 yeah, http://lists.openstack.org/pipermail/openstack-dev/2018-October/135805.html 14:09:33 ^^ that’s the link for the last one - copy&paste error 14:10:32 xgerman_ no worries. 14:14:05 xgerman_, do we need to a CI plugin for neutron-fwaas-dashboard? 14:16:48 likely 14:17:14 xgerman_, I see. 14:17:22 but I haven’t checked with neutron/mlavalle 14:17:39 or amotoki for that matter 14:18:10 xgerman_ ok. let reach out them first. 14:18:19 +1 14:18:49 even if I take care of the tempest plugin, we need volunteers to write actual tests? 14:20:34 yep 14:21:31 amotoki, may be I can help you write actual test. 14:21:44 thanks 14:21:47 amotoki, please reach out me when you start 14:22:22 annp_: you don't need to wait me :) I don't have much bandwidth on horizon plugins in this release. 14:23:26 amotoki, Ok. I will to start and reach out you if i don't understand something. :-) 14:23:44 Shall we move on? 14:23:55 +1 14:24:07 #topic specs 14:24:26 hongbin: do you have any update? 14:24:44 annp_: ack 14:25:19 just a bit update, the specs i proposed received a few feedback from reviewers 14:26:03 introduce action 'redirect': https://review.openstack.org/#/c/600563/ 14:26:18 add support for dynamic rules https://review.openstack.org/#/c/597724/ 14:26:30 extend firewall group inclusion https://review.openstack.org/#/c/600261/ 14:26:40 yes 14:26:45 hongbin: sorry, I haven't check your spec yet. 14:26:56 annp_: np 14:27:19 right now, i have enough feedback to digest :) 14:27:33 i will work on address the comments in the next a few weeks 14:28:00 hongbin, +1 14:28:04 thanks. +1 14:28:04 annp_: that is all from my side 14:28:13 you work so hard, hongbin :) 14:28:19 hongbin, thanks for bring it up. 14:28:30 np, thanks for the feedback team 14:28:39 Hi wkite 14:28:56 fwaas 2.0 address groups support https://review.openstack.org/557137 14:29:16 this one already merge in rocky. 14:29:38 but I haven't see any reference implementation for it. 14:30:15 wkite: Do you have a plan to implement this feature? 14:31:08 he seems not around here. 14:31:49 annp_: please go ahead :) 14:32:21 #topic bugs 14:32:45 L3 HA: https://bugs.launchpad.net/neutron/+bug/1759773 14:32:45 Launchpad bug 1759773 in neutron "FWaaS: Invalid port error on associating L3 ports (Router in HA) to firewall group" [Undecided,Confirmed] - Assigned to Sridar Kandaswamy (skandasw) 14:33:20 last week, we've just landed the fix for this bug at https://review.openstack.org/#/c/580552/. 14:34:08 thank SridarK, longkb, and yushiro for your great effort 14:34:51 next: Don't bind FWG on vm port if no firewall_l2_driver 14:34:51 thanks annp :) 14:35:03 https://review.openstack.org/#/c/605988/ 14:35:32 xgerman_, amotoki, Could you take a look at it? 14:37:04 will add it to my lisy 14:37:07 From my understanding, there seems difficult to check firewall_l2_driver is noop or not at server side. 14:37:39 xgerman_ +1 14:38:39 so I've just replied on the patch. Let's waiting feedback from author of this patch. 14:38:48 if you really need to check the firewall driver you can query it via RPC, but it needs to be done carefully 14:39:13 IIRC there was a similar thing in fwaas v1 code. 14:39:21 amotoki, yes. 14:40:35 amotoki, Is it worth to check via RPC? 14:41:17 I'm afraid "No". 14:41:36 annp_: I haven't checked the full context. I just responded to your comment "there seems difficult to check firewall l2 driver is noop at the server side." 14:42:41 amotoki, I see. So could you help us to push some comment on this after go through the patch. 14:42:53 annp_: ack 14:43:04 amotoki, thanks a ton. 14:43:31 next: https://bugs.launchpad.net/neutron/+bug/1798577 14:43:31 Launchpad bug 1798577 in neutron "[FWaas-DVR]wrong port name in iptables rules" [Undecided,New] 14:44:01 actually, I haven't had much experience on DVR. 14:44:41 yeah, me neither 14:44:54 (or no positive experience) 14:45:19 xgerman_, yeah. So I will learn more and will give comment on this one. 14:45:34 thanks 14:45:41 amotoki, Do you have any experience on DVR case? 14:45:53 Sridark has some experience 14:46:04 so we can always wait until he is back 14:46:08 xgerman_, Yeah. 14:46:10 annp_: I have less unfortunately 14:46:53 amotoki, No worries. No one can know everything. 14:46:57 :-) 14:47:25 I will ping SridarK when he is back. 14:47:51 #topic Open Discussion 14:48:25 Anything else we should discuss today? 14:49:47 if there no things need to discussion. 14:49:56 Shall we close the meeting? 14:50:08 thanks everyone for show up. 14:50:15 yeah, let’s close 14:50:19 it's my first run the meeting 14:50:24 thanks everyone and thanks annp_ for running the meeting 14:51:11 xgerman_ thank you for giving me a chance to run the meeting. 14:51:16 :-) 14:51:24 thanks annp_ 14:51:30 annp_: thnx 14:51:43 #end meeting 14:51:55 wrong command :) 14:52:02 no space is needed 14:52:24 amotoki thanks a lot 14:52:27 :-) 14:52:33 #endmeeting