14:01:17 <yushiro> #startmeeting fwaas
14:01:18 <openstack> Meeting started Thu Nov  8 14:01:17 2018 UTC and is due to finish in 60 minutes.  The chair is yushiro. Information about MeetBot at http://wiki.debian.org/MeetBot.
14:01:20 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
14:01:22 <openstack> The meeting name has been set to 'fwaas'
14:01:48 <yushiro> Let's start weekly meeting.
14:02:09 <yushiro> #topic announcements
14:03:11 <annp_> Hi yushiro
14:03:31 <yushiro> A name of "T" cycle may be "train" :p hahaha
14:03:41 <yushiro> annp_: Hi
14:03:51 <yushiro> SridarK is not here today.
14:04:26 <yushiro> #topic Stein
14:04:32 <annp_> :D
14:04:58 <annp_> Hi SridarK,
14:04:58 <SridarK> Hi All
14:05:04 <SridarK> Sorry to be late
14:05:22 <annp_> no worries. we've just start
14:05:32 <yushiro> #chair SridarK xgerman_
14:05:33 <openstack> Current chairs: SridarK xgerman_ yushiro
14:05:43 <yushiro> SridarK: Hi. Yes, No warries :)
14:05:50 <SridarK> :-)
14:05:55 <yushiro> Long time, SridarK
14:06:09 <SridarK> Yes was on PTO had to travel
14:06:29 <SridarK> so could not attend last few mtgs
14:06:33 <yushiro> SridarK: Wow, sounds great!! I hope your travel was good :)
14:06:44 <SridarK> yes hectic
14:06:46 <SridarK> thx yushiro
14:07:52 <yushiro> :)
14:08:38 <yushiro> #topic specs
14:09:25 <yushiro> Fwaas: add support for dynamic rules: https://review.openstack.org/#/c/597724/
14:09:40 <yushiro> Fwaas: extend firewall group inclusion: https://review.openstack.org/#/c/600261/
14:09:55 <yushiro> Today I don't see hongbin.
14:10:29 <SridarK> There was one more
14:10:43 <SridarK> on policy priority
14:11:03 <yushiro> Aha, yes.
14:11:05 <SridarK> #link https://review.openstack.org/#/c/600870/
14:11:16 <SridarK> i added some comments on that last night
14:11:31 <yushiro> Policy priority: https://review.openstack.org/#/c/600870/
14:11:34 <yushiro> SridarK: Thanks.
14:11:53 <yushiro> I will check it.
14:12:12 <SridarK> yushiro: yes thx
14:12:39 <SridarK> had some more clarifications and then can move fwd
14:12:48 <yushiro> OK
14:14:27 <yushiro> BTW SridarK, I'd like to check current patches in neutron-fwaas today.
14:15:10 <yushiro> https://review.openstack.org/#/q/project:openstack/neutron-fwaas+status:open+branch:master
14:15:14 <SridarK> yushiro: yes i saw some updates yday
14:15:48 <yushiro> Make OVS the default option for L2 FWaaS V2: https://review.openstack.org/605866
14:16:16 <yushiro> I updated a little for xgerman_'s patch but got some errors due to impl miss :p
14:17:05 <SridarK> yushiro: ok
14:17:12 <yushiro> When we create VM instances, default FWG will be associated automatically.  Therefore, in order to test with self-created fwg, we have to unset all ports from default fwg at once.
14:17:53 <SridarK> yushiro: yes exactly
14:18:17 <yushiro> annp_: I don't have an environment for tempest testing in my local.  Do you know how to make it ?
14:18:33 <yushiro> WIP: Removing FWaaS v1 source code: https://review.openstack.org/616410
14:18:49 <annp_> yushiro, yes. I will let you know tomorrow morning.
14:18:49 <yushiro> Thanks annp_ for your patch.
14:19:16 <annp_> yushiro for bring it up.
14:20:19 <annp_> I will remove WIP after this ready for review.
14:20:33 <yushiro> OK
14:20:43 <yushiro> Add python 3.6 unit test job: https://review.openstack.org/615904
14:20:52 <yushiro> I think it's OK to merge it.  Just put +2
14:20:54 <SridarK> We will need to prepare for a funeral for v1 :-(
14:21:33 <yushiro> Aha
14:21:48 <annp_> SridarK :-)
14:22:04 <SridarK> Done for 615904
14:22:09 <yushiro> SridarK: +1
14:22:18 <SridarK> :-)
14:24:31 <yushiro> https://review.openstack.org/#/c/614950/   (Update min tox version to 2.0)  This patch is duplicated for https://review.openstack.org/#/c/613299/  and it has already been merged.
14:24:53 <yushiro> So, I'll put some comments for it.
14:25:27 <yushiro> In DVR model the port name binding iptables rules is not correct.: https://review.openstack.org/#/c/606007/
14:26:14 <yushiro> SridarK: This patch needs your review :)  I and annp have commented on it but need to sync up more.
14:26:36 <yushiro> DVR case
14:27:00 <SridarK> yushiro: ok got it, will review this today
14:27:13 <yushiro> Thank you !
14:27:17 <SridarK> I think there was one where Swami asked a question too
14:27:20 <annp_> +1
14:27:28 <SridarK> I will catch up today
14:28:10 <yushiro> when i restart l3-agent,inactive group will change to acitve: https://review.openstack.org/#/c/585688/8
14:29:04 <yushiro> This patch fixes wrong status transition when restarting l3-agent.  I commented on this patch and want to fix commit msg.
14:29:46 <yushiro> Don't bind FWG on vm port if no firewall_l2_driver.: https://review.openstack.org/605988
14:30:00 <SridarK> yushiro: yes ur comments are good - will look for it
14:30:47 <yushiro> I and annp_ discussed with Wang and explained on launchpad: https://bugs.launchpad.net/neutron/+bug/1798713   This is not a bug.
14:30:47 <openstack> Launchpad bug 1798713 in neutron "[fwaas]wrong judgment in _is_supported_by_fw_l2_driver method" [Low,Invalid] - Assigned to Wang Weijia (wangweij)
14:32:21 <annp_> yushiro, +1
14:32:45 <SridarK> yes agreed
14:33:11 <yushiro> Default firewall rules from configuration file: https://review.openstack.org/#/c/612617/3
14:34:51 <yushiro> This patch enables to configure default firewall rules.  However, I think it is more better to define not into source code but conf file (neutron_fwaas.conf etc..)
14:35:23 <annp_> Yeah, I think it make sense.
14:35:36 <yushiro> I'll comment it later.
14:35:53 <SridarK> yes i think so too that is better
14:36:01 <yushiro> OK :)
14:36:05 <annp_> +1
14:37:09 <yushiro> Others are failed in zuul
14:37:51 <yushiro> https://review.openstack.org/#/q/f8e4a193e7930c2e9ef169c6e3be53a3e2a39dbe
14:37:58 <yushiro> Fix associating firewall group with DVR/L3HA port
14:38:54 <yushiro> Thanks SridarK for your review and I'm sorry for confusing.  annp_ has tested my patch and worked correctly.
14:39:57 <yushiro> Unfortunately, there was some error with zuul on stable branch.
14:40:13 <SridarK> yes ok - will look also
14:40:45 <annp_> ok, I will take a look also
14:41:18 <annp_> zuul gate in Rocky stable branch ok
14:42:53 <yushiro> http://logs.openstack.org/69/613669/4/check/openstack-tox-py27/09ed3b5/job-output.txt.gz#_2018-10-29_23_55_21_289000
14:44:00 <yushiro> Oh, I forgot 1 patch from me: https://review.openstack.org/#/c/614091/
14:44:26 <yushiro> Currently, when we test in local with 'tox -epyxx', it will be raised an error.
14:46:35 <yushiro> But still got 2 errors.  It was due to 'fake_notifier' has moved from neutron to neutron-lib.  Notification events are not registered correctly...  I think it's 1 way to skip these 2 tests until this bug has fixed :p
14:47:26 <SridarK> yushiro: ok
14:49:12 <annp_> +1
14:51:23 <yushiro> #topic Open Discussion
14:51:37 <yushiro> Thanks SridarK and annp_ for clean-up existing patches.
14:51:55 <SridarK> yushiro: no thx for tracking all of them
14:52:00 <annp_> yushiro, Thank you too.
14:52:09 <SridarK> yushiro: annp_: are u going to Berlin ?
14:52:22 <annp_> SridarK, I won't go there
14:52:30 <annp_> Will you be there?
14:52:34 <yushiro> Me either.
14:52:46 <SridarK> annp_: yushiro: My travel is also not sure
14:53:11 <SridarK> initially i was going to - but some changes at work - so a bit uncertain
14:53:39 <SridarK> it is very close - will know only by tomorrow
14:54:02 <yushiro> Aha.
14:54:27 <yushiro> SridarK: In fact, we maybe change our job field unfortunately.
14:54:43 <SridarK> yushiro: oh really
14:55:12 <yushiro> Maybe next week, it is clarified I think.
14:55:20 <SridarK> yushiro: oh ok
14:55:33 <SridarK> both u & annp ?
14:56:26 <yushiro> SridarK: Yes.  We maybe move to k8s.
14:56:37 <SridarK> yushiro: ah ok
14:57:11 <SridarK> yushiro: ok will talk more
14:57:18 <SridarK> later
14:57:20 <yushiro> yeah
14:57:44 <SridarK> I should sign off - have a mtg right after
14:57:50 <yushiro> OK, let's close this meeting.
14:57:52 <SridarK> will exchange email
14:58:01 <yushiro> SridarK: Sure
14:58:02 <SridarK> thx yushiro annp_
14:58:04 <annp_> OK.
14:58:05 <yushiro> #endmeeting