18:01:58 <SumitNaiksatam> #startmeeting networking_policy
18:01:58 <openstack> Meeting started Thu Dec 18 18:01:58 2014 UTC and is due to finish in 60 minutes.  The chair is SumitNaiksatam. Information about MeetBot at http://wiki.debian.org/MeetBot.
18:01:59 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
18:02:02 <openstack> The meeting name has been set to 'networking_policy'
18:02:03 <SumitNaiksatam> s3wong: hi
18:02:07 <s3wong> hello
18:02:31 <SumitNaiksatam> #info agenda https://wiki.openstack.org/wiki/Meetings/Neutron_Group_Policy#Dec_18th.2C_2014
18:02:53 <SumitNaiksatam> we are closing in on the release ;-)
18:03:36 <SumitNaiksatam> so we are on track to wrap up the features and bugs by tomorrow
18:03:50 <SumitNaiksatam> lets go over the details
18:04:14 <SumitNaiksatam> #topic Bugs
18:04:25 <SumitNaiksatam> there is one open critical bug: #link https://bugs.launchpad.net/group-based-policy/+bug/1403577
18:04:57 <SumitNaiksatam> mageshgv: i believe this is addressed
18:04:59 <SumitNaiksatam> ?
18:05:39 <mageshgv> SumitNaiksatam: Yes, Right now this is done in the same patch as hierarchial redirects, May be we want to separate them ?
18:06:11 <SumitNaiksatam> mageshgv: i believe those are related (as far as your implementation is concerned)
18:06:17 <SumitNaiksatam> mageshgv: so i think its fine
18:06:24 <SumitNaiksatam> mageshgv: thanks for working on this
18:06:31 <mageshgv> SumitNaiksatam: yes, thats right. ok
18:06:38 <SumitNaiksatam> we have a bunch of high and medium priority bugs
18:07:04 <SumitNaiksatam> i have a few high on my plate
18:07:12 <SumitNaiksatam> rkukura: you have some, right?
18:07:25 <SumitNaiksatam> some might be targeted for the next release though
18:07:37 <rkukura> SumitNaiksatam: Only one that I think is worth fixing now.
18:07:49 <rkukura> Or may be.
18:07:52 <SumitNaiksatam> rkukura: ok, link?
18:08:11 <rkukura> Lets make sure defering the other two is OK
18:08:24 <rkukura> https://bugs.launchpad.net/group-based-policy/+bug/1158684
18:08:43 <rkukura> This is the nova bug where pre-created ports get deleted on VM delete
18:09:09 <rkukura> ivar-lazzaro had committed a workaround, and I don’t think we need to do anything more right now.
18:09:09 <SumitNaiksatam> rkukura: yes, there is pending patch in Nova
18:09:18 <SumitNaiksatam> rkukura: agree
18:09:43 <rkukura> We need to pressure nova to rebase and review the fix
18:09:54 <SumitNaiksatam> rkukura: yeah its pending for a long time
18:10:00 <rkukura> The other I think we can defer is https://bugs.launchpad.net/group-based-policy/+bug/1383947
18:10:00 <SumitNaiksatam> across releases
18:10:12 <ivar-lazzaro> rkukura: maybe just the delete subnet when BadRequest occurs?
18:11:07 <rkukura> This is the one were subnets get created for overlapping IPs
18:11:29 <ivar-lazzaro> rkukura: ops :)
18:11:33 <rkukura> ivar-lazzaro did a workaround, and the real fix is to use the subnet pool feature planned for neutron in kilo
18:11:46 <SumitNaiksatam> rkukura: got it
18:12:11 <rkukura> the one thing we might do now on this one is to delete the subnet when adding the interface to the router results in BadRequest
18:12:32 <rkukura> with the workaround, this could occur still occur with concurrent threads, but is not likely
18:12:39 <SumitNaiksatam> rkukura: ah ok
18:12:53 <rkukura> so I think we could do that on the stable/juno branch at some point if needed
18:13:11 <SumitNaiksatam> rkukura: can we have a separate bug to track this?
18:13:24 <SumitNaiksatam> rkukura: just the delete subnet
18:13:46 <rkukura> SumitNaiksatam: I think we can use the current bug, since the subnet pools are addressed in the “does not scale” bug
18:14:13 <SumitNaiksatam> rkukura: okay
18:14:24 <rkukura> SumitNaiksatam: Does that make sense? We’d target stable/juno I guess
18:14:42 <rkukura> Last high priority bug is https://bugs.launchpad.net/group-based-policy/+bug/1398674
18:14:55 <SumitNaiksatam> rkukura: yes, for critical bug fixes we plan to back port
18:14:56 <rkukura> This is where updating the L2 policy fails
18:15:11 <SumitNaiksatam> rkukura: yes, you are planning to fix that?
18:15:21 <rkukura> I could do this one today if needed, I think
18:15:40 <SumitNaiksatam> rkukura: okay great, we will have quick review turnaround on this
18:16:02 <rkukura> I’m not clear on whether we really want to allow updating a PTG’s L2P at all for the RMD
18:16:03 <SumitNaiksatam> ideally i would like to clear up the review queue for any non-vendor related patched by EoD (today)
18:16:20 <SumitNaiksatam> tomorrow we can do vendor patches (ODL and Nuage)
18:16:20 <rkukura> We cannot update it if any PTs exist in the PTG
18:16:37 <SumitNaiksatam> rkukura: true since we cannot move the PTs
18:16:44 <rkukura> Is it OK to simpy reject any changes to the PTG’s L2P?
18:17:05 <SumitNaiksatam> yes, perhaps better to codify that in the driver thought?
18:17:09 <SumitNaiksatam> *though
18:17:20 <SumitNaiksatam> in case some other backend is able to support this?
18:17:59 <rkukura> Or do we need to check whether any PTs have been created, and if not, we’d need to tear everything down and recreate the PTG
18:18:09 <rkukura> This check would be the resource_mapping drive
18:18:12 <rkukura> driver
18:18:24 <SumitNaiksatam> rkukura: ok great, i think the former would suffice for now
18:18:37 <rkukura> OK, I’ll whip up a patch today
18:18:47 <SumitNaiksatam> rkukura: perhaps a comment in the code to the effect of the latter (as a possibility)
18:19:04 <rkukura> SumitNaiksatam: agreed
18:19:10 <SumitNaiksatam> rkukura: thanks
18:19:34 <rkukura> SumitNaiksatam: Are we concerned with the medium priority bugs at this point?
18:20:04 <SumitNaiksatam> rkukura: depends, some were classified as medium but turned out to be high
18:20:16 <SumitNaiksatam> rkukura: for the ones you have on your plate i will leave it to your judgement
18:20:22 <SumitNaiksatam> mageshgv: how does it look on your plate in terms of the high priority
18:20:35 <rkukura> SumitNaiksatam: OK, I’ll look them over
18:20:41 <KrishnaK> Have a question related to https://review.openstack.org/#/c/142643/. What is the right way to check if the router id belongs to tenant during L3P creation ?
18:20:44 <SumitNaiksatam> rkukura: great, thanks
18:20:55 <SumitNaiksatam> KrishnaK: one sec, we will come to that
18:20:59 <SumitNaiksatam> mageshgv: any high priority ones for which patches are not posted yet?
18:21:01 <KrishnaK> thx
18:21:18 <SumitNaiksatam> KrishnaK: thanks for joining though, i know you are fighting another releae in paralle! ;-)
18:21:31 <SumitNaiksatam> *release in parallel
18:21:33 <mageshgv> SumitNaiksatam: No, patches are posted for them all, just need some modifications for hierarchial redirect
18:21:38 <rkukura> SumitNaiksatam: I think all the medium and low bugs assigned to me can be defered
18:21:47 <SumitNaiksatam> rkukura: ok thanks
18:21:53 <SumitNaiksatam> mageshgv: great
18:22:13 <SumitNaiksatam> mageshgv: i believe we have a plan on the hierarchical redirect based on the discussion today morning
18:22:21 <SumitNaiksatam> ?
18:22:42 <mageshgv> SumitNaiksatam: yes, will have to factor in those changes
18:23:37 <SumitNaiksatam> mageshgv: ok thanks, looking forward to that patch, since it has the critical bug fix as well
18:23:54 <SumitNaiksatam> mageshgv: worst we might have to break those down (leave it to your judgement)
18:24:09 <SumitNaiksatam> mageshgv: but we need to merge the critical fix by EoD (PST)
18:24:25 <mageshgv> SumitNaiksatam: ok, will see what can be done
18:24:48 <SumitNaiksatam> mageshgv: thanks for your effort fixing the numerous bugs in quick time
18:24:56 <SumitNaiksatam> KrishnaK: your question now
18:25:21 <SumitNaiksatam> “Have a question related to https://review.openstack.org/#/c/142643/. What is the right way to check if the router id belongs to tenant during L3P creation ?”
18:25:39 <KrishnaK> SumitNaiksatam: thx.
18:26:00 <SumitNaiksatam> KrishnaK: i was thinking that if you just checked for the router existence by doing a get and filtering on the tenant_id and the router_id
18:26:04 <SumitNaiksatam> that would not work?
18:26:45 <SumitNaiksatam> rkukura: this is the bug you created for validating the resources that are explicitly provided when creating PT/PTG/L2p?l3P
18:26:58 <SumitNaiksatam> PT and PTG is done
18:27:07 <SumitNaiksatam> KrishnaK is working on L2P and L3P
18:27:09 <KrishnaK> for the router id , tenant id is different for some case.
18:27:17 <KrishnaK> *cases
18:27:25 <SumitNaiksatam> KrishnaK: really, i dont think that would be the case
18:27:46 <SumitNaiksatam> KrishnaK: where did you see that happening?
18:28:49 <KrishnaK> 2014-12-18 10:28:35,249     INFO [neutron.api.v2.resource] create failed (client error): Error while creating L3 Policy : Router id a54b6371-c996-4ab7-8bae-e37fe1e797c6 does not belong to t\ he  tenant id test-tenant. ====================================================================== FAIL: gbp.neutron.tests.unit.services.grouppolicy.test_resource_mapping.TestL3Policy.test_explicit_router_lifecycle
18:29:23 <SumitNaiksatam> rkukura: any chance that you can help KrishnaK with this one?
18:29:41 <rkukura> SumitNaiksatam: I can try
18:29:53 <SumitNaiksatam> i think his changes are breaking the existing UTs
18:30:02 <SumitNaiksatam> rkukura: thanks
18:30:14 <KrishnaK> rkukura: thx
18:30:16 <SumitNaiksatam> KrishnaK: can you do a quick follow after this meeting with rkukura?
18:30:24 <SumitNaiksatam> *follow up
18:30:27 <rkukura> Are these UTs that break related to shared L3Ps?
18:30:28 <KrishnaK> SumitNaiksatam: Thanks.
18:30:58 <KrishnaK> rkukura: I didn't see shared for that router
18:31:03 <rkukura> ok
18:31:22 <KrishnaK> Let me gather more debug data and email you or post in the review.
18:31:36 <SumitNaiksatam> rkukura: i believe the UTs are breaking on in krishnak’s patch where he trying to do a validation
18:31:45 <SumitNaiksatam> on -> only
18:32:06 <SumitNaiksatam> #topic Pending feature merges
18:32:21 <SumitNaiksatam> Hierarchical PRS compostion for redirects: #link https://review.openstack.org/140286
18:32:35 <SumitNaiksatam> some of us met this morning to review this
18:32:46 <SumitNaiksatam> mageshgv: rkukura ivar, thanks for your time
18:33:46 <SumitNaiksatam> if you are not familiar with the above feature, essentially what we are trying to do is allow the admin to introduce redirect constraints for a user’s PRS
18:34:18 <SumitNaiksatam> an example being, the admin can introduce a firewall to inspect traffic
18:34:27 <SumitNaiksatam> yapeng: hi, good to see you here
18:34:42 <SumitNaiksatam> we will come to the ODL part in just a bit
18:34:55 <SumitNaiksatam> mageshgv: thanks for working on the above feature, and to ivar for reviewing it
18:34:59 <yapeng_> hi
18:35:17 <SumitNaiksatam> #topic ODL and Vendor drivers
18:35:53 <SumitNaiksatam> yapeng and yi and the rest of the ODL team are working furiously to get the ODL integration done
18:36:01 <SumitNaiksatam> yapeng: any update for the team here?
18:36:15 <SumitNaiksatam> i believe you are mostly done on the openstack policy driver side?
18:36:19 <yapeng_> ok, single compute node is working now.
18:36:21 <yapeng_> yes
18:36:28 <SumitNaiksatam> yapeng: wohoo!
18:36:36 <yapeng_> i think Yi is working on test case part now.
18:36:41 <SumitNaiksatam> yapeng: awesome
18:36:45 <yapeng_> I am testing multi-compute node setup .
18:36:52 <SumitNaiksatam> yapeng: sweet
18:37:08 <SumitNaiksatam> yapeng: what about the part to raise not supported error for neutron operations?
18:37:30 <yapeng_> I coded it up, will test this afternoon.
18:37:36 <SumitNaiksatam> ah ok
18:37:40 <yapeng_> if works, I will submit my patch
18:37:44 <SumitNaiksatam> is that a new patch, i dont see one posted yet
18:37:54 <yapeng_> i have not posted yet.
18:38:00 <yapeng_> should be today
18:38:18 <SumitNaiksatam> yapeng: ah ok, you might want to post it anyway as WIP, so its on people’s review radar
18:38:24 <s3wong> we are still targeting to get ODL policy driver merged by tonight (PST)?
18:38:35 <SumitNaiksatam> yapeng: thanks to you and yi for working on this
18:38:40 <SumitNaiksatam> s3wong: tomorrow is fine
18:38:40 <yapeng_> sure Sumit.
18:39:01 <SumitNaiksatam> we can have a session tomorrow morning
18:39:10 <SumitNaiksatam> to review the workflow and the code
18:39:40 <s3wong> there is a weekly ODL GBP status meeting tomorrow morning
18:39:51 <SumitNaiksatam> s3wong: okay
18:40:09 <SumitNaiksatam> i think keith can relay the update there
18:40:45 <SumitNaiksatam> i dont believe ronak is here, but i provided some high level comments on his Nuage driver
18:40:48 <banix> s3wong: can you pls send me a link if there is one. if handy otherwise i will find it
18:41:01 <s3wong> banix: a link to the patch?
18:41:16 <SumitNaiksatam> banix: there are two patches
18:41:17 <banix> s3wong: no the the odl gbp call
18:41:20 <s3wong> banix: or to the webex for weekly ODL GBP meeting?
18:41:41 <SumitNaiksatam> #topic Packaging
18:41:45 <SumitNaiksatam> rkukura: over to you
18:42:36 <rkukura> Ok, the openstack-neutron-gbp, python-gbpclient, and python-django-horizon-gbp packages are all officially in fedora, and are based on recent commits
18:42:48 <SumitNaiksatam> rkukura: awesome!!
18:43:03 <rkukura> The openstack-heat-gbp package is still waiting for review, but that should be done tomorrow morning
18:43:09 <SumitNaiksatam> rkukura: ok
18:43:15 <SumitNaiksatam> rkukura: so are able to deploy and test from the UI?
18:43:28 <rkukura> SumitNaiksatam: I have not been able to test the UI yet
18:43:34 <SumitNaiksatam> rkukura: okay
18:44:11 <rkukura> So we need to do more testing, and there are a few small fixes to the packaging to include in the next round of updates
18:44:21 <SumitNaiksatam> rkukura: some sym links have to be created to the gbp horion files, did oyu take that into consideration?
18:44:31 <SumitNaiksatam> *horizon
18:44:45 <rkukura> SumitNaiksatam: No, will need to add the symlinks to the packaging, if that is possible.
18:44:56 <s3wong> banix: I forwarded the ODL weekly meeting invite to your gmail account
18:45:10 <banix> s3wong: thank you
18:45:16 <rkukura> SumitNaiksatam: Is the plan to do a juno-rc1 label?
18:45:35 <SumitNaiksatam> rkukura: see this for what i do in devstack: #link https://github.com/group-policy/devstack/commit/d52f4e7d24f2f733842593a26387ba569d7a85f5#diff-b75b6ca41d002e9482bd7ff12eda0875R136
18:46:06 <SumitNaiksatam> rkukura: there wasnt a plan, but we can discuss
18:46:07 <rkukura> SumitNaiksatam: Thanks
18:46:16 <SumitNaiksatam> rkukura: ideally we should have been in RC1 now
18:46:45 <rkukura> SumitNaiksatam: OK, whether we do an RC1 or go right to the official release, do we have a process to create official tarballs on launchpad?
18:47:10 <SumitNaiksatam> rkukura: i thought you were looking at the tarball part? ;-)
18:47:30 <SumitNaiksatam> rkukura: i figured out adding the tags and creating the branch
18:47:41 <SumitNaiksatam> i have tested adding tags
18:47:46 <SumitNaiksatam> have created a branch
18:47:51 <rkukura> SumitNaiksatam: I’ll work with you on the tarball part
18:47:56 <SumitNaiksatam> rkukura: okay
18:48:19 <SumitNaiksatam> rkukura: i think uploading the tarball is straightforwar, but for creating i guess we have to follow the right process
18:48:33 <SumitNaiksatam> rkukura: there are some release scripts available, but i havent tested those
18:48:38 <rkukura> We really should test all of this with an RC1, because its possible we’ll need to make changes to setup.cfg or something
18:48:45 <SumitNaiksatam> rkukura: ok
18:48:57 <SumitNaiksatam> lets discuss that as a follow up to this meeting
18:49:01 <rkukura> ok
18:49:18 <SumitNaiksatam> please ping me if anyone else has thoughts or suggestions on how we want to go about this (else i will follow up with rkukura)
18:49:24 <SumitNaiksatam> #topic Open Discussion
18:49:42 <SumitNaiksatam> sorry we havent been able to discuss Kilo specs for a while now
18:49:52 <rkukura> The Fedora packages will then be the basis for RDO and RHEL-OSP packages
18:49:56 <SumitNaiksatam> hopefully once we wrap up this release we can restart
18:50:09 <SumitNaiksatam> rkukura: great, good to know the process there
18:50:56 <SumitNaiksatam> rkukura: is this still the right page: #link https://openstack.redhat.com/Neutron_GBP
18:51:06 <SumitNaiksatam> or is there more?
18:51:19 <rkukura> SumitNaiksatam: Yes, but there are some newer package versions on my fedorapeople account
18:52:22 <SumitNaiksatam> rkukura: okay, perhaps when you get some time, can we have a new openstack wiki page for all the pacakges information, and that can in turn point to the above and others pages?
18:53:30 <SumitNaiksatam> anyone else have anything else to bring up for discussion?
18:53:37 <yapeng_> SumitNaiksatam: how's the status of GBP heat part? I have not got chance to integrate heat with OS and ODL GBP yet. If possible, I would like to give it a try.
18:53:40 <rkukura> SumitNaiksatam: That probably makes sense, and should include common stuff like configuring vendor drivers and a usage tutorial
18:53:43 <SumitNaiksatam> oh btw, needless to say, no meeting next week
18:53:47 <banix> guys a quick and perhaps off question
18:53:52 <SumitNaiksatam> rkukura: perfect, thanks!
18:54:02 <SumitNaiksatam> yapeng_: yes its functional
18:54:12 <SumitNaiksatam> yapeng_: the same devstack you are using has heat support
18:54:26 <SumitNaiksatam> banix: sure, go for it
18:54:40 <banix> are we still planning to have the gbp under the networking program or that is not going to be possible
18:54:41 <yapeng_> SumitNaiksatam: do you have some instruction how to verify?
18:55:00 <SumitNaiksatam> banix: we are currently a stackforge project
18:55:12 <SumitNaiksatam> banix: we need to get input from the community on this point
18:55:24 <SumitNaiksatam> banix: until then we continue to function as stackforge
18:55:45 <SumitNaiksatam> banix: in general, the stackforge option is always ongoing since it allows us to experiment
18:55:51 <rkukura> SumitNaiksatam, banix: I think having something the community can acutally use will help us get useful input.
18:56:07 <banix> SumitNaiksatam:  we cannot be in stackforge and under networking? just verifying
18:56:15 <SumitNaiksatam> banix: in parallel, we will continually evaluate in concert with the coummunity as to what goes where
18:56:34 <SumitNaiksatam> banix: we could
18:56:54 <banix> rkukura: i agree and great effort to get here
18:57:18 <SumitNaiksatam> banix: but again i think thats a community call
18:57:19 <banix> SumitNaiksatam: ok thanks
18:57:54 <SumitNaiksatam> community includes us well :-)
18:58:00 <banix> SumitNaiksatam: yes we can talk again; for a project to be under a openstack project, is there a process… going off topic so pls ignore if out of time
18:58:16 <SumitNaiksatam> banix: np
18:58:40 <SumitNaiksatam> banix: actually there was only “integrated” criteria up until now
18:58:55 <SumitNaiksatam> banix: so you were either integrated (like nova, neutron) etc or not
18:59:11 <SumitNaiksatam> banix: and AFAIK, programs were integrated
18:59:23 <SumitNaiksatam> however i believe those policies are being reworked
18:59:36 <SumitNaiksatam> there is also a notion of a “def core”
18:59:42 <SumitNaiksatam> some kind of a validated core
18:59:54 <banix> yeah wondering for example where the lbass and service be and if we can be somewhere similar … we’ll talk more later thanks
19:00:21 <SumitNaiksatam> banix: for lbaas, the code was in neutron and it was split into a new repo
19:00:29 <SumitNaiksatam> banix: but stil neutron program
19:00:46 <SumitNaiksatam> so did not required new incubation process
19:00:54 <SumitNaiksatam> *require
19:00:58 <SumitNaiksatam> ok we are at the hour
19:01:05 <banix> SumitNaiksatam: ok thx
19:01:10 <SumitNaiksatam> happy holidays and happy new year to everyone in advance
19:01:17 <SumitNaiksatam> see you next year, if not before
19:01:17 <s3wong> bye
19:01:22 <SumitNaiksatam> thanks all
19:01:23 <SumitNaiksatam> bye!
19:01:23 <banix> SumitNaiksatam: same to you and the rest of the team
19:01:24 <rkukura> bye
19:01:28 <banix> bye
19:01:29 <yapeng_> bye
19:01:31 <mageshgv> bye
19:01:36 <SumitNaiksatam> #endmeeting