18:00:41 <SumitNaiksatam> #startmeeting Networking FWaaS
18:00:42 <openstack> Meeting started Wed Aug 27 18:00:41 2014 UTC and is due to finish in 60 minutes.  The chair is SumitNaiksatam. Information about MeetBot at http://wiki.debian.org/MeetBot.
18:00:43 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
18:00:45 <openstack> The meeting name has been set to 'networking_fwaas'
18:01:01 <SumitNaiksatam> we are starting a bit ahead of time since most of the fwaas team is already here
18:01:25 <SumitNaiksatam> #info we an official IRC channel #openstack-fwaas
18:01:28 <SumitNaiksatam> thanks to armax
18:01:59 <SumitNaiksatam> #topic Action item review
18:02:05 <badveli> Yes it was good to have, thanks
18:02:34 <SumitNaiksatam> there was an AI - SridarK badveli to send email to DVR team/Swami with a proposal on the mitigation plan for scenarion 2a (firewall is present, and then mixed-mode router creation is attempted)
18:03:06 <SumitNaiksatam> any update?
18:03:11 <SridarK> SumitNaiksatam: Swami is making changes to this effec
18:03:13 <SridarK> t
18:03:24 <SridarK> he is using get_firewalls()
18:03:28 <SridarK> from the plugin
18:03:29 <SumitNaiksatam> SridarK: nice!
18:03:43 <SumitNaiksatam> SridarK: is this updated in our fwaas/dvr wiki?
18:03:51 <SridarK> SumitNaiksatam: but has some issue with this - we will sync on this
18:04:11 <SridarK> SumitNaiksatam: lax on the wiki updates - too swamped - will get to this
18:04:22 <SridarK> SumitNaiksatam: apologies
18:04:23 <badveli> Sridark: Let me check on this
18:04:33 <SumitNaiksatam> SridarK: no worries
18:04:56 <SumitNaiksatam> we also need to link the FWaaS/DVR wiki page from the FWaaS wiki
18:05:25 <SumitNaiksatam> oh we already have
18:05:29 <badveli> Sumit:We will update the wiki
18:05:37 <badveli> with the get_firewall
18:05:43 <SumitNaiksatam> but its linked to the quantum page
18:06:39 <SridarK> SumitNaiksatam: yes i think we need to fix this - badveli & i will take a look
18:07:00 <SumitNaiksatam> #action badveli to update https://wiki.openstack.org/wiki/Neutron/FWaaS/FWaaS-DVR with details of scenarion 2a (firewall is present, and then mixed-mode router creation is attempted)
18:07:09 <SumitNaiksatam> i just update the link from the wiki page
18:07:13 <badveli> Will do sumit
18:07:29 <SumitNaiksatam> badveli: thanks
18:07:57 <SumitNaiksatam> next AI - SridarK to add scenarion 1 FWaaS support details to DVR wiki, the suggestion is for the DVR code to call get_firewall_count() function
18:08:10 <SumitNaiksatam> SridarK: is this different from the earlier AI?
18:08:11 <SridarK> SumitNaiksatam: sounds good
18:08:29 <SridarK> SumitNaiksatam: not really - basically we need to provide the info and will do so
18:08:30 <SumitNaiksatam> SridarK: the above was AI from the last week
18:09:05 <SumitNaiksatam> so for scenario1 and 2a, both rely on the same fwaas support?
18:10:36 <SridarK> SumitNaiksatam: yes with scenario 1 covered we should be good
18:11:14 <SumitNaiksatam> ok
18:11:33 <SumitNaiksatam> i will still preserve the AI so that we can document it
18:11:51 <SumitNaiksatam> SridarK: badveli  to add scenarion 1 FWaaS support details to DVR wiki, the suggestion is for the DVR code to call get_firewall_count() function
18:12:04 <SumitNaiksatam> #action SridarK: badveli  to add scenarion 1 FWaaS support details to DVR wiki, the suggestion is for the DVR code to call get_firewall_count() function\
18:12:10 <badveli> Yes
18:12:14 <SridarK> SumitNaiksatam: yes - i think DVR will do scenario 1 - which is what Swami is working on now
18:12:25 <SumitNaiksatam> SridarK: ok
18:12:34 <SumitNaiksatam> next AI - SridarK to request Swami to cross link FWaaS DVR support wiki page from the DVR wiki page
18:13:21 <SridarK> SumitNaiksatam: yes will do
18:13:30 <SumitNaiksatam> SridarK: okay i can do that
18:13:42 <SumitNaiksatam> #action SumitNaiksatam to request Swami to cross link FWaaS DVR support wiki page from the DVR wiki page
18:13:56 <SumitNaiksatam> #topic Bugs
18:14:25 <SumitNaiksatam> #link https://bugs.launchpad.net/neutron/+bug/1360351
18:14:59 <SumitNaiksatam> so i think this is moving forward
18:15:16 <badveli> Yes as we discussed yesterday
18:15:26 <SridarK> SumitNaiksatam: yes we can look for the full solution in Kilo
18:16:11 <SumitNaiksatam> we need to follow up on #link https://review.openstack.org/#/c/108952
18:16:21 <SumitNaiksatam> i am looking at the medium priority bugs
18:17:06 <SumitNaiksatam> #link https://review.openstack.org/#/c/115912/
18:18:19 <SumitNaiksatam> ok i think those cover the open high and medium priority bugs
18:18:30 <SumitNaiksatam> anything else alarming that we noticed?
18:18:41 <SumitNaiksatam> hopefully no gate failures
18:18:56 <badveli> Sumit
18:20:12 <SumitNaiksatam> badveli: yes
18:20:21 <badveli> is there any way we can have the firewall reviewers
18:20:46 <badveli> by default if some one post a patch related to firewall code
18:21:31 <badveli> because we had a conversation with koteswara rao
18:21:50 <badveli> and after that i was not able to follow up
18:22:02 <SumitNaiksatam> badveli: good point
18:22:09 <SumitNaiksatam> badveli: not sure
18:22:10 <badveli> had a comment on the bug if he is doing the fix
18:22:27 <SumitNaiksatam> badveli: i think they have aliases like neutron-core
18:22:38 <SumitNaiksatam> badveli: but i dont think they have for sub teams
18:22:59 <SumitNaiksatam> lets check with the infra team
18:23:05 <SumitNaiksatam> badveli: do you want to do that?
18:23:06 <badveli> Looks like here and then we need to constantly keep on eye
18:23:13 <SumitNaiksatam> badveli: yeah i agree
18:23:30 <SumitNaiksatam> badveli: you can ask the question in the #openstack-infra channel
18:23:59 <badveli> We wanted to atleast participate in this kond of reviews
18:24:10 <badveli> or we are ready to fix the issues
18:24:17 <SumitNaiksatam> badveli: you absolutely should
18:24:36 <SumitNaiksatam> badveli: i think anyone can participate :-)
18:25:00 <badveli> thanks sumit, i will try to check the bugs very often
18:25:11 <SumitNaiksatam> #link https://bugs.launchpad.net/neutron/+bug/1326510
18:25:28 <SumitNaiksatam> this seems to be hitting the gate at times
18:26:06 <SumitNaiksatam> and is marked a duplicate of #link https://bugs.launchpad.net/neutron/+bug/1328162
18:26:14 <SumitNaiksatam> the fix for which has been posted
18:26:22 <SumitNaiksatam> however, it still seems to be hitting the gate
18:26:39 <SumitNaiksatam> my guess is that this is hitting icehouse since the fix is not backported
18:26:42 <SumitNaiksatam> but we need to check
18:26:49 <SumitNaiksatam> enikanorov__: there?
18:27:14 <enikanorov__> SumitNaiksatam: yes
18:27:32 <enikanorov__> i'll look at this bug
18:27:38 <SumitNaiksatam> enikanorov__: the gate shows failures for: Bug 1326510 - tempest.api.network.test_fwaas_extensions.FWaaSExtensionTestJSON fails with 409
18:28:00 <SumitNaiksatam> enikanorov__: which is a duplicate of #link https://bugs.launchpad.net/neutron/+bug/1328162
18:28:03 <SumitNaiksatam> enikanorov__: that you fixed
18:28:13 <SumitNaiksatam> enikanorov__: is the gate showing this issue for icehouse?
18:28:18 <enikanorov__> interesting
18:29:19 <enikanorov__> no, i don't see failures in the gate
18:29:25 <SumitNaiksatam> enikanorov__: i believe its coming from the check-grenade-dsvm-neutron job
18:29:41 <enikanorov__> grenade may run older code, so it's kind of expected
18:29:52 <SumitNaiksatam> enikanorov__: ok
18:29:56 <SumitNaiksatam> enikanorov__: its also showing in check-tempest-dsvm-neutron-pg-full
18:30:21 <SumitNaiksatam> enikanorov__: and check-tempest-dsvm-neutron-pg
18:30:26 * pcm_ lurking
18:30:30 <enikanorov__> i see. i need to take a closer look
18:30:51 <SumitNaiksatam> enikanorov__: and check-tempest-dsvm-neutron-pg-2
18:30:59 <SumitNaiksatam> pcm_: hi, we started early
18:31:06 <pcm_> np
18:31:24 <SumitNaiksatam> enikanorov__: i was checking http://status.openstack.org/elastic-recheck/
18:31:33 <SumitNaiksatam> enikanorov__: do you check something else for gate failures?
18:32:14 <enikanorov__> i usually check mostly db-related issues, lockwait timeouts and such
18:33:07 <SumitNaiksatam> enikanorov__: where?
18:33:32 <enikanorov__> in the gate, i run queries in logstash to find failures in the logs directly
18:33:40 <SumitNaiksatam> enikanorov__: ah ok
18:34:11 <SumitNaiksatam> enikanorov__: http://status.openstack.org/elastic-recheck shoud provide a similar summary as well, right? (assuming people have reported the failure)
18:34:47 <enikanorov__> the failure fingerprint needs to be committed to elastic-recheck project first
18:35:01 <SumitNaiksatam> enikanorov__: yes
18:35:07 <SumitNaiksatam> enikanorov__: but once it makes it there
18:35:21 <enikanorov__> yes, sure, then it's available in reports
18:35:51 <SumitNaiksatam> enikanorov__: i believe you prefer being on the bleeding edge (comes with the bug Czar territory! ;-) )
18:35:57 <SumitNaiksatam> enikanorov__: thanks
18:36:12 <enikanorov__> you're welcome
18:36:38 <SumitNaiksatam> #action SumitNaiksatam to follow up with enikanorov__ and mlavalle on “Bug 1326510 - tempest.api.network.test_fwaas_extensions.FWaaSExtensionTestJSON fails with 409” https://bugs.launchpad.net/neutron/+bug/1328162
18:37:00 <SumitNaiksatam> SridarK: badveli anything else of bugs/gate failures?
18:37:23 <badveli> i saw one gate failure
18:37:36 <badveli> not sure if i am asking in the correct forum
18:37:44 <SridarK> SumitNaiksatam: nothing from me - except we got a response from mlavalle on the generic issue of tempest
18:38:21 <SumitNaiksatam> SridarK: correct, i think we should follow up, perhaps it will help with the above issue as well (both for create and delete of firewalls)
18:38:31 <SridarK> SumitNaiksatam: we should decide if we want to predicate on the logical resource created for API tests
18:38:39 <SumitNaiksatam> #action SridarK to respond to mlavalle on tempest test change suggestions
18:39:03 <SumitNaiksatam> #topic FWaaS support for DVR
18:39:04 <SridarK> SumitNaiksatam: i have sent one response back - saying we are in discussion on the logical resource
18:39:10 <SumitNaiksatam> #link https://review.openstack.org/#/c/106225/
18:39:14 <SumitNaiksatam> SridarK: ok great
18:39:35 <badveli> Sumit/ Enikanorov_: could you please help what does this mean  sed: couldn't open temporary file /opt/stack/new/horizon/openstack_dashboard/sedBmUGse: Permission denied
18:40:05 <badveli> its happening in check-neutron-dsvm-functional
18:40:06 <SumitNaiksatam> #link https://review.openstack.org/#/c/113359
18:40:15 <SumitNaiksatam> sorry wrong link earlier
18:40:46 <SridarK> SumitNaiksatam: testing the last patch
18:40:52 <SumitNaiksatam> badveli: hang on, does not seem to be fwaas related, lets take it offline :-)
18:40:52 <SridarK> SumitNaiksatam: not done yet
18:40:53 <badveli> sorry i was referring the gate failures
18:41:06 <badveli> yes thanks sumit
18:42:02 <SridarK> SumitNaiksatam: plan: 1) validate FW rules apply on different namespaces
18:42:21 <SridarK> 2) also check the router after FW scenarios - to see if something missing
18:42:51 <SumitNaiksatam> SridarK: sounds reasonable, can we document this in the wiki page as well?
18:42:55 <SumitNaiksatam> in case we havent
18:43:10 <SridarK> SumitNaiksatam: will do and can put the results of the tests there
18:43:19 <SumitNaiksatam> “FWaaS DVR testing” section may be
18:43:23 <SumitNaiksatam> SridarK: nice
18:43:40 <SumitNaiksatam> #action SridarK to add “FWaaS DVR testing” section to #link https://wiki.openstack.org/wiki/Neutron/FWaaS/FWaaS-DVR
18:43:57 <SridarK> SumitNaiksatam: sounds good
18:44:42 <SumitNaiksatam> SridarK: badveli any other pending items apart from this patch?
18:44:44 <badveli> Sridar: Should we validate the mixed mode situation and update the wiki accordingly
18:45:31 <SridarK> badveli: yes once the basic test is done - we can look at mixed mode (i am beginning to think we may not have mixed mode)
18:47:12 <badveli> thanks sridar, as we know we need to update the dnsmasq
18:47:22 <badveli> to the later version
18:47:52 <badveli> and test
18:47:59 <badveli> i will also give a try
18:48:08 <SridarK> badveli: ok sounds good
18:48:37 <SumitNaiksatam> badveli: just to be sure, you are referring to your local devstack setup, right?
18:48:59 <badveli> no sumit, the current repository
18:49:07 <badveli> if you pull the latest code
18:49:16 <SumitNaiksatam> badveli: ok, you mean when you use the DVR tag?
18:49:42 <badveli> the dhcp agent is not starting to complete the stack
18:50:15 <badveli> sumit: sorry what i meant is we cannot stack with the latest repository code
18:50:29 <badveli> nothing to do with the DVR tag
18:50:51 <badveli> once you correct the dnsmasq and set the proper flags as mentioned for the single node setup
18:51:07 <badveli> we can test the dvr patch
18:51:07 <SumitNaiksatam> badveli: can you document this on the wiki page?
18:51:25 <badveli> fine sumit, i will take care of this
18:51:32 <SumitNaiksatam> badveli: great thanks
18:51:51 <SumitNaiksatam> SridarK: do we need to set up a time with Swami to do the multinode testing?
18:52:24 <SridarK> SumitNaiksatam: yes once this test works - i will ping him but yes good idea to give him a heads up
18:52:43 <SridarK> SumitNaiksatam: i will let him know
18:52:54 <SumitNaiksatam> SridarK: yeah go to setup a date/time
18:53:04 <SridarK> SumitNaiksatam: agreed
18:53:12 <SumitNaiksatam> #aciton SridarK to setup a date/time with Swami for multi-node testing
18:53:25 <SumitNaiksatam> badveli: how is your test setup coming along?
18:54:05 <badveli> I will be trying with our latest patch on a single node
18:54:14 <SumitNaiksatam> badveli: ok
18:54:20 <badveli> as mentioned earlier i do not have two servers
18:54:43 <SumitNaiksatam> SridarK: is it a good time to test with your patch, or wait a little longer?
18:55:02 <SridarK> SumitNaiksatam: let me be the first guinea pig
18:55:26 <SumitNaiksatam> SridarK: ok, so we will wait for you your cue
18:55:32 <SridarK> SumitNaiksatam:  i will give a heads up by today eve or night
18:55:38 <SumitNaiksatam> badveli: any chance that you can get another server?
18:55:47 <SumitNaiksatam> SridarK: thanks, yeah we are short on time
18:55:49 <SridarK> so i can take care of any issues that i might have
18:55:56 <SumitNaiksatam> SridarK: great
18:55:59 <SridarK> SumitNaiksatam: yes agreed
18:56:41 <SumitNaiksatam> badveli: hoping that you can still do the testing on multiple nodes
18:56:54 <SumitNaiksatam> any other loose ends on DVR?
18:57:31 <SridarK> SumitNaiksatam: i think will have a better idea with more testing to make sure
18:57:34 <badveli> ok thanks
18:57:46 <SumitNaiksatam> SridarK: sure
18:57:52 <SumitNaiksatam> #topic Service Objects
18:58:35 <SumitNaiksatam> #link https://review.openstack.org/#/c/106274
18:58:59 <SumitNaiksatam> badveli: thanks for pointing to the tempest tests, sorry it kind of slipped my mind
18:59:03 <SumitNaiksatam> badveli: that really helps
18:59:09 <badveli> no problem sumit
18:59:18 <badveli> i had uploaded it a while back
18:59:25 <SumitNaiksatam> badveli: jenkins failed
18:59:38 <badveli> yes i was asking a question on gate failure
18:59:45 <badveli> looks like its not with the patch
19:00:04 <SumitNaiksatam> badveli: of that was what you were referring to?
19:00:35 <badveli> sed: couldn't open temporary file /opt/stack/new/horizon/openstack_dashboard/sedBmUGse: Permission denied
19:01:07 <badveli> yes, some times when we upload another patch
19:01:15 <badveli> it passes
19:01:32 <badveli> just wanted to make sure how do i know a bug for this
19:02:05 <SumitNaiksatam> badveli: you got to check the logs and find what the error is
19:02:58 <SumitNaiksatam> badveli: then you can look up on: #link  http://status.openstack.org/elastic-recheck if you see that error signature somewhere
19:03:03 <badveli> Yes sumit: went through logs and could not see any reason
19:03:07 <badveli> rm: cannot remove ‘/opt/stack/status/stack/tr-api.pid’: Permission denied
19:03:17 <badveli> yes i am trying to figure out the signature
19:03:29 <badveli> i was asking if you had seen some thing like this
19:04:01 <badveli> same patch if you upload it will pass
19:04:18 <badveli> let me check if i can find some thing and ask recheck
19:04:21 <SumitNaiksatam> badveli: is this the only time you saw this?
19:04:33 <SumitNaiksatam> badveli: i am thinking if its a transient issue
19:05:14 <badveli> Yes Sumit, Generally the failure logs used to give some clue
19:05:23 <SumitNaiksatam> badveli: in which case you can do a “recheck no bug"
19:05:24 <badveli> to point out the issue
19:05:44 <badveli> this is not having
19:05:57 <badveli> fine sumit: if i do recheck no bug
19:06:44 <badveli> it will automatically rerun the gate and also find out if there is some signature like this or check other reviews posted in this time frame
19:06:49 <SumitNaiksatam> badveli: any other blocking issues?
19:07:08 <SumitNaiksatam> badveli: it will rerun the gate
19:07:34 <SridarK> badveli: thanks for addressing the comments
19:07:47 <badveli> thanks Sridark, Sumit, i am hoping we can get some more core reviews
19:08:03 <badveli> as you had mentioned in the time we have
19:08:09 <SumitNaiksatam> badveli: yes, can you please try and ping them on IRC?
19:08:19 <badveli> i think coming week there is a holiday
19:08:33 <SumitNaiksatam> badveli: but they will also need to see a +1 from jenkins
19:08:44 <badveli> Yes sumit, let me rerun
19:08:49 <badveli> thanks Sumit
19:09:33 <badveli> should i add a comment with double quotes right?
19:09:39 <badveli> thanks sumit
19:10:27 <SumitNaiksatam> badveli: no
19:10:45 <SumitNaiksatam> no quotes required
19:10:50 <SumitNaiksatam> #topic Open Discussion
19:11:17 <SridarK> We keep fingers crossed :-)
19:11:28 <SumitNaiksatam> SridarK: :-)
19:11:39 <SumitNaiksatam> anything else to bring up?
19:12:02 <SridarK> Nothing from me
19:12:10 <SumitNaiksatam> alirghty, lets call it a wrap
19:12:15 <SridarK> ok bye all
19:12:19 <SumitNaiksatam> SridarK: badveli: thanks for all the hard work!
19:12:23 <SumitNaiksatam> bye
19:12:26 <SumitNaiksatam> #endmeeting