14:00:21 <slaweq> #startmeeting networking
14:00:22 <openstack> Meeting started Tue Jan 26 14:00:21 2021 UTC and is due to finish in 60 minutes.  The chair is slaweq. Information about MeetBot at http://wiki.debian.org/MeetBot.
14:00:23 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
14:00:25 <openstack> The meeting name has been set to 'networking'
14:00:30 <mlavalle> o/
14:00:41 <obondarev> hi
14:00:42 <slaweq> hello at the team meeting :)
14:01:24 <rubasov> hi
14:01:36 <slaweq> lets wait few more minutes for others to join
14:03:27 <ralonsoh> hi
14:04:25 <slaweq> ok, lets start
14:04:31 <slaweq> #topic announcements
14:04:47 <slaweq> I don't have many annoncements for today
14:04:56 <slaweq> just schedule reminder
14:04:59 <slaweq> We just reached W-2 milestone, next milestone will be in March 8th
14:05:13 <slaweq> so we are going to Wallaby-3 now
14:05:21 <slaweq> we are closer and closer to Wallaby release :)
14:05:27 <slaweq> please keep that in mind
14:05:43 <slaweq> bcafarel also proposed new releases for stable branches
14:05:51 <slaweq> I +1'ed them today
14:06:00 <slaweq> so we should have new releases soon I think
14:06:19 <slaweq> and that are all announcements from me today
14:06:24 <slaweq> anything else You want to add?
14:06:32 <mlavalle> not from me
14:06:40 <ralonsoh> no
14:07:20 <slaweq> ok, so let's go to the next topic
14:07:30 <slaweq> #topic Blueprints
14:07:36 <slaweq> https://bugs.launchpad.net/neutron/+milestone/wallaby-3
14:07:50 <slaweq> I moved opened BPs from Wallaby-2 to 3 for now
14:08:03 <bcafarel> one reboot later, late o/
14:08:07 <slaweq> and I closed https://blueprints.launchpad.net/neutron/+spec/enginefacade-switch finally
14:08:30 <slaweq> there is still networking-midonet patch related to that BP but gate of that project is broken currently
14:08:42 <slaweq> I don't see any point to keep this BP open anymore
14:08:49 <slaweq> 4 years is enough :)
14:08:59 <slaweq> thx ralonsoh, mlavalle and others for help with that
14:09:05 <ralonsoh> yw
14:09:08 <mlavalle> \o/
14:09:27 <slaweq> regarding https://blueprints.launchpad.net/neutron/+spec/secure-bac-roles
14:09:34 <slaweq> sorry https://blueprints.launchpad.net/neutron/+spec/secure-rbac-roles
14:09:50 <slaweq> we are slowly merging patches which deprecates old policies
14:09:55 <slaweq> https://review.opendev.org/q/topic:%2522secure-rbac%2522+(status:open+OR+status:merged)+project:openstack/neutron,
14:10:09 <slaweq> for many of them there is one +2 already
14:10:16 <slaweq> so we need another one
14:10:25 <slaweq> please review them if You have some time
14:10:29 <mlavalle> I'll take a look today
14:10:33 <slaweq> thx mlavalle
14:11:10 <slaweq> I will talk with lbragstad about testing of those new policies and will start working on it ASAP
14:11:30 <lajoskatona> Hi
14:11:41 <slaweq> hi lajoskatona
14:11:49 <slaweq> and last thing from me
14:11:51 <lajoskatona> sorry for being late....
14:12:00 <slaweq> regarding https://blueprints.launchpad.net/neutron/+spec/default-dns-zone-per-tenant
14:12:11 <slaweq> there is patch https://review.opendev.org/#/c/686343/ which is ready for review
14:12:20 <slaweq> please also take a look at it when You will have time
14:12:35 <slaweq> it's low priority BP but it's old one and I would like to close it finally
14:12:40 <mlavalle> added to my pile
14:12:44 <slaweq> thx mlavalle
14:12:55 <slaweq> that's all from me regarding BPs for today
14:13:01 <slaweq> any other updates?
14:13:05 <mlavalle> Regarding address groups...
14:13:46 <mlavalle> I am implementing RBAC for it. I have this neutron-lib API definition patch ready for review: https://review.opendev.org/c/openstack/neutron-lib/+/771892
14:14:19 <mlavalle> Hopefully we can merge AND realease it soon, so implementtion can move forward smoothly on the Neutron side
14:14:35 <slaweq> I will review that ASAP
14:14:45 <mlavalle> Also have the Neutron side in a WIP patch: https://review.opendev.org/c/openstack/neutron/+/772460
14:15:09 <mlavalle> I will clean it up today and tomorrow and hopefully will be ready for review later this week
14:15:34 <mlavalle> That's all from me
14:15:39 <slaweq> https://review.opendev.org/c/openstack/neutron/+/757650 is also ready for review, right?
14:16:02 <ralonsoh> (I need to review that one...)
14:17:19 <slaweq> me too :)
14:17:32 <slaweq> I see know that Hang Yang replied to my last comments there
14:17:38 <slaweq> I will review it asap
14:18:03 <slaweq> ok, I think we can move on to the next topic
14:18:12 <slaweq> #topic Community Goals
14:18:29 <slaweq> I'm not sure if amotoki is here today
14:18:38 <slaweq> but regarding Migrate RBAC Policy Format from JSON to YAML
14:18:47 <slaweq> we already merged both listed patches
14:18:52 <slaweq> so I think we are good with this one
14:19:09 <slaweq> ralonsoh: any updates about rootwrap?
14:19:16 <ralonsoh> yes, one sec
14:19:28 <ralonsoh> https://review.opendev.org/c/openstack/neutron/+/772068
14:19:36 <ralonsoh> apart from an error in FT, should work
14:19:53 <slaweq> right, I saw this functional tests failure today :)
14:20:42 <ralonsoh> and then I'll write a mail about what to do with those commands executed inside a service
14:20:52 <amotoki> slaweq: your understanding is correct. (i discused py27 gate faiure in #-qa)
14:21:08 <slaweq> amotoki: thx for confirmation :)
14:21:10 <ralonsoh> because we can't use privsep if those processes are going to be long lived processes
14:21:29 <ralonsoh> (but that could be addressed in a mail)
14:21:30 <bcafarel> stable gate failure was bound to happen, things were fine for more than a week
14:22:40 <slaweq> ralonsoh: ok, thx for update
14:22:48 <slaweq> lets move on to the next topic then
14:22:52 <slaweq> #topic Bugs
14:23:04 <rubasov> report: http://lists.openstack.org/pipermail/openstack-discuss/2021-January/020008.html
14:23:11 <slaweq> thx rubasov
14:23:16 <slaweq> You were faster than me :)
14:23:21 <rubasov> :-)
14:23:27 <slaweq> any bugs You want to highlight today?
14:23:30 <rubasov> there's only I wanted to mention
14:23:52 <rubasov> this lost ovs flow bug is unassigned: https://bugs.launchpad.net/neutron/+bug/1912651
14:23:54 <openstack> Launchpad bug 1912651 in neutron "ovs flows are not readded when ovsdb-server/ovs-vswitchd are restarted." [Medium,Confirmed]
14:24:16 <ralonsoh> I need to debug this one but I didn't have timee
14:24:20 <ralonsoh> sorry
14:24:29 <rubasov> np, thanks already
14:24:35 <ralonsoh> (I'll take it)
14:24:53 <slaweq> I remember I was fixing some similar issues but IIRC it was for some dvr related flows
14:25:11 <slaweq> here it seems to be related to firewall
14:25:20 <ralonsoh> but this is related to conj(1/2) flows
14:25:31 <ralonsoh> anyway, should be debugged
14:25:35 <slaweq> yep
14:25:46 <slaweq> I can also take a look if I will have time
14:26:23 <rubasov> and I forgot to add one bug to the report, sorry for that: https://bugs.launchpad.net/neutron/+bug/1912747
14:26:24 <openstack> Launchpad bug 1912747 in neutron "security group does not verify the tenant id" [High,Confirmed] - Assigned to zhanghao (zhanghao2)
14:26:56 <ralonsoh> I didn't have any reply from keystone guys about what user should be used there
14:27:07 <ralonsoh> but as you commented, the api-paste feature can be used
14:27:20 <ralonsoh> note: nova user should have "system" role
14:27:32 <ralonsoh> (this is configured by default in devstack)
14:27:37 <slaweq> rubasov: patch which I mentioned require some configuration changes
14:27:49 <slaweq> maybe it wasn't applied in the reporter's env?
14:27:55 <rubasov> I was just about to ask if I was missing something
14:28:20 <rubasov> but then it's probably not applied to my env either ;-)
14:29:21 <slaweq> ok, I see now that there are also some errors 500 when on e.g. GET requests
14:29:26 <slaweq> so that can be different issue
14:29:27 <rubasov> slaweq: can you please add a comment there about what configuration is needed?
14:29:38 <slaweq> rubasov: sure, I will
14:29:40 <rubasov> then I can re-check
14:29:44 <rubasov> thank you
14:30:12 <ralonsoh> I said that: you need to add the api-paste plugin and configure nova with "system" role
14:30:40 <rubasov> oh ok
14:30:59 <rubasov> thanks
14:31:54 <rubasov> that's all I wanted to bring up here
14:32:00 <slaweq> thx rubasov
14:32:06 <rubasov> sure
14:32:09 <slaweq> this week our bug deputy is ralonsoh
14:32:44 <mlavalle> we are in good hands!
14:32:49 <slaweq> yep
14:33:06 <slaweq> bcafarel: amotoki: You mentioned some new gate failure in stable branches
14:33:10 <slaweq> is it rerported somewhere?
14:33:15 <slaweq> *reported
14:33:29 <amotoki> https://bugs.launchpad.net/devstack/+bug/1913283
14:33:30 <openstack> Launchpad bug 1913283 in devstack "get-pip.py no longer supports py27" [Critical,Triaged]
14:33:37 <bcafarel> "pip 21 heads-up (Python 2 support gone)" on openstack-discuss
14:33:42 <bcafarel> ah LP link is better :)
14:33:44 <amotoki> it is caused by get-pip.py with py27.
14:33:49 <slaweq> amotoki: thx
14:34:05 <amotoki> devstack in train and older branches are now broken
14:34:08 <slaweq> so (yet another) chapter of the py2.7 drama :)
14:34:51 <slaweq> I see that patches are already proposed
14:34:51 <bcafarel> yes, these strange folks still using py2 in 2021 :)
14:35:02 <slaweq> so it should be fixed soon I hope
14:35:09 <slaweq> bcafarel: exactly
14:35:17 <slaweq> who cares about stable branches :P
14:35:28 <slaweq> let's kill them all with fire!
14:35:30 <slaweq> ;)
14:35:54 <bcafarel> you heard the PTL, folks! :)
14:36:01 <slaweq> LOL
14:36:03 <amotoki> :)
14:36:15 <slaweq> damm, I forgot that I'm ptl here :P
14:36:37 <slaweq> ok
14:36:45 <slaweq> and seriously, thx for taking care of it
14:36:54 <slaweq> anything else You want to discuss today?
14:37:14 <slaweq> if not, I will give You few minutes back
14:37:19 <ralonsoh> no thanks
14:38:05 <slaweq> ok
14:38:18 <slaweq> so thx for attending the meeting today
14:38:18 * bcafarel goes to fetch coffee before ci meeting
14:38:25 <slaweq> and have a great week
14:38:26 <lajoskatona> +1
14:38:27 <slaweq> o/
14:38:29 <ralonsoh> bye
14:38:30 <slaweq> #endmeeting