18:00:41 #startmeeting Networking FWaaS 18:00:42 Meeting started Wed Aug 27 18:00:41 2014 UTC and is due to finish in 60 minutes. The chair is SumitNaiksatam. Information about MeetBot at http://wiki.debian.org/MeetBot. 18:00:43 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 18:00:45 The meeting name has been set to 'networking_fwaas' 18:01:01 we are starting a bit ahead of time since most of the fwaas team is already here 18:01:25 #info we an official IRC channel #openstack-fwaas 18:01:28 thanks to armax 18:01:59 #topic Action item review 18:02:05 Yes it was good to have, thanks 18:02:34 there was an AI - SridarK badveli to send email to DVR team/Swami with a proposal on the mitigation plan for scenarion 2a (firewall is present, and then mixed-mode router creation is attempted) 18:03:06 any update? 18:03:11 SumitNaiksatam: Swami is making changes to this effec 18:03:13 t 18:03:24 he is using get_firewalls() 18:03:28 from the plugin 18:03:29 SridarK: nice! 18:03:43 SridarK: is this updated in our fwaas/dvr wiki? 18:03:51 SumitNaiksatam: but has some issue with this - we will sync on this 18:04:11 SumitNaiksatam: lax on the wiki updates - too swamped - will get to this 18:04:22 SumitNaiksatam: apologies 18:04:23 Sridark: Let me check on this 18:04:33 SridarK: no worries 18:04:56 we also need to link the FWaaS/DVR wiki page from the FWaaS wiki 18:05:25 oh we already have 18:05:29 Sumit:We will update the wiki 18:05:37 with the get_firewall 18:05:43 but its linked to the quantum page 18:06:39 SumitNaiksatam: yes i think we need to fix this - badveli & i will take a look 18:07:00 #action badveli to update https://wiki.openstack.org/wiki/Neutron/FWaaS/FWaaS-DVR with details of scenarion 2a (firewall is present, and then mixed-mode router creation is attempted) 18:07:09 i just update the link from the wiki page 18:07:13 Will do sumit 18:07:29 badveli: thanks 18:07:57 next AI - SridarK to add scenarion 1 FWaaS support details to DVR wiki, the suggestion is for the DVR code to call get_firewall_count() function 18:08:10 SridarK: is this different from the earlier AI? 18:08:11 SumitNaiksatam: sounds good 18:08:29 SumitNaiksatam: not really - basically we need to provide the info and will do so 18:08:30 SridarK: the above was AI from the last week 18:09:05 so for scenario1 and 2a, both rely on the same fwaas support? 18:10:36 SumitNaiksatam: yes with scenario 1 covered we should be good 18:11:14 ok 18:11:33 i will still preserve the AI so that we can document it 18:11:51 SridarK: badveli to add scenarion 1 FWaaS support details to DVR wiki, the suggestion is for the DVR code to call get_firewall_count() function 18:12:04 #action SridarK: badveli to add scenarion 1 FWaaS support details to DVR wiki, the suggestion is for the DVR code to call get_firewall_count() function\ 18:12:10 Yes 18:12:14 SumitNaiksatam: yes - i think DVR will do scenario 1 - which is what Swami is working on now 18:12:25 SridarK: ok 18:12:34 next AI - SridarK to request Swami to cross link FWaaS DVR support wiki page from the DVR wiki page 18:13:21 SumitNaiksatam: yes will do 18:13:30 SridarK: okay i can do that 18:13:42 #action SumitNaiksatam to request Swami to cross link FWaaS DVR support wiki page from the DVR wiki page 18:13:56 #topic Bugs 18:14:25 #link https://bugs.launchpad.net/neutron/+bug/1360351 18:14:59 so i think this is moving forward 18:15:16 Yes as we discussed yesterday 18:15:26 SumitNaiksatam: yes we can look for the full solution in Kilo 18:16:11 we need to follow up on #link https://review.openstack.org/#/c/108952 18:16:21 i am looking at the medium priority bugs 18:17:06 #link https://review.openstack.org/#/c/115912/ 18:18:19 ok i think those cover the open high and medium priority bugs 18:18:30 anything else alarming that we noticed? 18:18:41 hopefully no gate failures 18:18:56 Sumit 18:20:12 badveli: yes 18:20:21 is there any way we can have the firewall reviewers 18:20:46 by default if some one post a patch related to firewall code 18:21:31 because we had a conversation with koteswara rao 18:21:50 and after that i was not able to follow up 18:22:02 badveli: good point 18:22:09 badveli: not sure 18:22:10 had a comment on the bug if he is doing the fix 18:22:27 badveli: i think they have aliases like neutron-core 18:22:38 badveli: but i dont think they have for sub teams 18:22:59 lets check with the infra team 18:23:05 badveli: do you want to do that? 18:23:06 Looks like here and then we need to constantly keep on eye 18:23:13 badveli: yeah i agree 18:23:30 badveli: you can ask the question in the #openstack-infra channel 18:23:59 We wanted to atleast participate in this kond of reviews 18:24:10 or we are ready to fix the issues 18:24:17 badveli: you absolutely should 18:24:36 badveli: i think anyone can participate :-) 18:25:00 thanks sumit, i will try to check the bugs very often 18:25:11 #link https://bugs.launchpad.net/neutron/+bug/1326510 18:25:28 this seems to be hitting the gate at times 18:26:06 and is marked a duplicate of #link https://bugs.launchpad.net/neutron/+bug/1328162 18:26:14 the fix for which has been posted 18:26:22 however, it still seems to be hitting the gate 18:26:39 my guess is that this is hitting icehouse since the fix is not backported 18:26:42 but we need to check 18:26:49 enikanorov__: there? 18:27:14 SumitNaiksatam: yes 18:27:32 i'll look at this bug 18:27:38 enikanorov__: the gate shows failures for: Bug 1326510 - tempest.api.network.test_fwaas_extensions.FWaaSExtensionTestJSON fails with 409 18:28:00 enikanorov__: which is a duplicate of #link https://bugs.launchpad.net/neutron/+bug/1328162 18:28:03 enikanorov__: that you fixed 18:28:13 enikanorov__: is the gate showing this issue for icehouse? 18:28:18 interesting 18:29:19 no, i don't see failures in the gate 18:29:25 enikanorov__: i believe its coming from the check-grenade-dsvm-neutron job 18:29:41 grenade may run older code, so it's kind of expected 18:29:52 enikanorov__: ok 18:29:56 enikanorov__: its also showing in check-tempest-dsvm-neutron-pg-full 18:30:21 enikanorov__: and check-tempest-dsvm-neutron-pg 18:30:26 * pcm_ lurking 18:30:30 i see. i need to take a closer look 18:30:51 enikanorov__: and check-tempest-dsvm-neutron-pg-2 18:30:59 pcm_: hi, we started early 18:31:06 np 18:31:24 enikanorov__: i was checking http://status.openstack.org/elastic-recheck/ 18:31:33 enikanorov__: do you check something else for gate failures? 18:32:14 i usually check mostly db-related issues, lockwait timeouts and such 18:33:07 enikanorov__: where? 18:33:32 in the gate, i run queries in logstash to find failures in the logs directly 18:33:40 enikanorov__: ah ok 18:34:11 enikanorov__: http://status.openstack.org/elastic-recheck shoud provide a similar summary as well, right? (assuming people have reported the failure) 18:34:47 the failure fingerprint needs to be committed to elastic-recheck project first 18:35:01 enikanorov__: yes 18:35:07 enikanorov__: but once it makes it there 18:35:21 yes, sure, then it's available in reports 18:35:51 enikanorov__: i believe you prefer being on the bleeding edge (comes with the bug Czar territory! ;-) ) 18:35:57 enikanorov__: thanks 18:36:12 you're welcome 18:36:38 #action SumitNaiksatam to follow up with enikanorov__ and mlavalle on “Bug 1326510 - tempest.api.network.test_fwaas_extensions.FWaaSExtensionTestJSON fails with 409” https://bugs.launchpad.net/neutron/+bug/1328162 18:37:00 SridarK: badveli anything else of bugs/gate failures? 18:37:23 i saw one gate failure 18:37:36 not sure if i am asking in the correct forum 18:37:44 SumitNaiksatam: nothing from me - except we got a response from mlavalle on the generic issue of tempest 18:38:21 SridarK: correct, i think we should follow up, perhaps it will help with the above issue as well (both for create and delete of firewalls) 18:38:31 SumitNaiksatam: we should decide if we want to predicate on the logical resource created for API tests 18:38:39 #action SridarK to respond to mlavalle on tempest test change suggestions 18:39:03 #topic FWaaS support for DVR 18:39:04 SumitNaiksatam: i have sent one response back - saying we are in discussion on the logical resource 18:39:10 #link https://review.openstack.org/#/c/106225/ 18:39:14 SridarK: ok great 18:39:35 Sumit/ Enikanorov_: could you please help what does this mean sed: couldn't open temporary file /opt/stack/new/horizon/openstack_dashboard/sedBmUGse: Permission denied 18:40:05 its happening in check-neutron-dsvm-functional 18:40:06 #link https://review.openstack.org/#/c/113359 18:40:15 sorry wrong link earlier 18:40:46 SumitNaiksatam: testing the last patch 18:40:52 badveli: hang on, does not seem to be fwaas related, lets take it offline :-) 18:40:52 SumitNaiksatam: not done yet 18:40:53 sorry i was referring the gate failures 18:41:06 yes thanks sumit 18:42:02 SumitNaiksatam: plan: 1) validate FW rules apply on different namespaces 18:42:21 2) also check the router after FW scenarios - to see if something missing 18:42:51 SridarK: sounds reasonable, can we document this in the wiki page as well? 18:42:55 in case we havent 18:43:10 SumitNaiksatam: will do and can put the results of the tests there 18:43:19 “FWaaS DVR testing” section may be 18:43:23 SridarK: nice 18:43:40 #action SridarK to add “FWaaS DVR testing” section to #link https://wiki.openstack.org/wiki/Neutron/FWaaS/FWaaS-DVR 18:43:57 SumitNaiksatam: sounds good 18:44:42 SridarK: badveli any other pending items apart from this patch? 18:44:44 Sridar: Should we validate the mixed mode situation and update the wiki accordingly 18:45:31 badveli: yes once the basic test is done - we can look at mixed mode (i am beginning to think we may not have mixed mode) 18:47:12 thanks sridar, as we know we need to update the dnsmasq 18:47:22 to the later version 18:47:52 and test 18:47:59 i will also give a try 18:48:08 badveli: ok sounds good 18:48:37 badveli: just to be sure, you are referring to your local devstack setup, right? 18:48:59 no sumit, the current repository 18:49:07 if you pull the latest code 18:49:16 badveli: ok, you mean when you use the DVR tag? 18:49:42 the dhcp agent is not starting to complete the stack 18:50:15 sumit: sorry what i meant is we cannot stack with the latest repository code 18:50:29 nothing to do with the DVR tag 18:50:51 once you correct the dnsmasq and set the proper flags as mentioned for the single node setup 18:51:07 we can test the dvr patch 18:51:07 badveli: can you document this on the wiki page? 18:51:25 fine sumit, i will take care of this 18:51:32 badveli: great thanks 18:51:51 SridarK: do we need to set up a time with Swami to do the multinode testing? 18:52:24 SumitNaiksatam: yes once this test works - i will ping him but yes good idea to give him a heads up 18:52:43 SumitNaiksatam: i will let him know 18:52:54 SridarK: yeah go to setup a date/time 18:53:04 SumitNaiksatam: agreed 18:53:12 #aciton SridarK to setup a date/time with Swami for multi-node testing 18:53:25 badveli: how is your test setup coming along? 18:54:05 I will be trying with our latest patch on a single node 18:54:14 badveli: ok 18:54:20 as mentioned earlier i do not have two servers 18:54:43 SridarK: is it a good time to test with your patch, or wait a little longer? 18:55:02 SumitNaiksatam: let me be the first guinea pig 18:55:26 SridarK: ok, so we will wait for you your cue 18:55:32 SumitNaiksatam: i will give a heads up by today eve or night 18:55:38 badveli: any chance that you can get another server? 18:55:47 SridarK: thanks, yeah we are short on time 18:55:49 so i can take care of any issues that i might have 18:55:56 SridarK: great 18:55:59 SumitNaiksatam: yes agreed 18:56:41 badveli: hoping that you can still do the testing on multiple nodes 18:56:54 any other loose ends on DVR? 18:57:31 SumitNaiksatam: i think will have a better idea with more testing to make sure 18:57:34 ok thanks 18:57:46 SridarK: sure 18:57:52 #topic Service Objects 18:58:35 #link https://review.openstack.org/#/c/106274 18:58:59 badveli: thanks for pointing to the tempest tests, sorry it kind of slipped my mind 18:59:03 badveli: that really helps 18:59:09 no problem sumit 18:59:18 i had uploaded it a while back 18:59:25 badveli: jenkins failed 18:59:38 yes i was asking a question on gate failure 18:59:45 looks like its not with the patch 19:00:04 badveli: of that was what you were referring to? 19:00:35 sed: couldn't open temporary file /opt/stack/new/horizon/openstack_dashboard/sedBmUGse: Permission denied 19:01:07 yes, some times when we upload another patch 19:01:15 it passes 19:01:32 just wanted to make sure how do i know a bug for this 19:02:05 badveli: you got to check the logs and find what the error is 19:02:58 badveli: then you can look up on: #link http://status.openstack.org/elastic-recheck if you see that error signature somewhere 19:03:03 Yes sumit: went through logs and could not see any reason 19:03:07 rm: cannot remove ‘/opt/stack/status/stack/tr-api.pid’: Permission denied 19:03:17 yes i am trying to figure out the signature 19:03:29 i was asking if you had seen some thing like this 19:04:01 same patch if you upload it will pass 19:04:18 let me check if i can find some thing and ask recheck 19:04:21 badveli: is this the only time you saw this? 19:04:33 badveli: i am thinking if its a transient issue 19:05:14 Yes Sumit, Generally the failure logs used to give some clue 19:05:23 badveli: in which case you can do a “recheck no bug" 19:05:24 to point out the issue 19:05:44 this is not having 19:05:57 fine sumit: if i do recheck no bug 19:06:44 it will automatically rerun the gate and also find out if there is some signature like this or check other reviews posted in this time frame 19:06:49 badveli: any other blocking issues? 19:07:08 badveli: it will rerun the gate 19:07:34 badveli: thanks for addressing the comments 19:07:47 thanks Sridark, Sumit, i am hoping we can get some more core reviews 19:08:03 as you had mentioned in the time we have 19:08:09 badveli: yes, can you please try and ping them on IRC? 19:08:19 i think coming week there is a holiday 19:08:33 badveli: but they will also need to see a +1 from jenkins 19:08:44 Yes sumit, let me rerun 19:08:49 thanks Sumit 19:09:33 should i add a comment with double quotes right? 19:09:39 thanks sumit 19:10:27 badveli: no 19:10:45 no quotes required 19:10:50 #topic Open Discussion 19:11:17 We keep fingers crossed :-) 19:11:28 SridarK: :-) 19:11:39 anything else to bring up? 19:12:02 Nothing from me 19:12:10 alirghty, lets call it a wrap 19:12:15 ok bye all 19:12:19 SridarK: badveli: thanks for all the hard work! 19:12:23 bye 19:12:26 #endmeeting