22:02:36 #startmeeting neutron_drivers 22:02:38 Meeting started Thu Apr 20 22:02:36 2017 UTC and is due to finish in 60 minutes. The chair is kevinbenton. Information about MeetBot at http://wiki.debian.org/MeetBot. 22:02:39 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 22:02:41 The meeting name has been set to 'neutron_drivers' 22:03:25 o/ 22:03:28 hi 22:03:46 hi 22:03:55 let's cruise through some RFE's 22:03:59 #link https://bugs.launchpad.net/neutron/+bugs?field.status%3Alist=Triaged&field.tag=rfe 22:04:42 * armax jumps on the boat 22:05:07 #link https://bugs.launchpad.net/neutron/+bug/1558812 22:05:09 Launchpad bug 1558812 in neutron "[RFE] Enable adoption of an existing subnet into a subnetpool" [Wishlist,Triaged] - Assigned to Reedip (reedip-banerjee) 22:05:39 this one has been discussed before and Carl gave a nice outline of what needs to be done 22:05:49 yep, really nice 22:06:15 I thought that was approved at some point 22:06:28 and there is a patchset that was started by tidwellr 22:06:38 yeah 22:06:39 armax: looks like it went from approved to postponed 22:06:47 well the implementation is hairy 22:06:58 and it stalled in making it robust enough to races etc 22:07:08 was the issue locking? 22:07:21 I don’t recall, but Ryan struggled for a while 22:07:39 since we lost both carl and ryan in the process this stalled 22:07:57 the revision plugin may now offer us more guarantees with protection from races now 22:08:12 since all subnet updates increment the network revision as part of their update 22:09:59 i'm okay with approving this and re-examining the implementaiton 22:10:19 I am thinking if we want to take a step back 22:10:45 and look at all RFEs on the radar and try to stab at giving priorities 22:10:58 yeap, I was about to propose the same 22:11:04 and then assess only those we feel like are higher priority for us 22:11:25 with all the causalties lately, we need to look at the big picture 22:11:29 as much as I still believe that priorities are hard to estimate 22:11:32 and regroup 22:11:35 mlavalle: exactly 22:11:38 I was ognna say 22:11:39 right. we need to understand what's the state for things like port bindings and such. 22:11:51 the landscape changed drastically in just a few months 22:12:00 just in this week 22:12:20 we can’t just let folks work on what they fancy 22:12:32 as much as it’s useful 22:12:32 well we can 22:12:37 we have stuff that’s standing incomple 22:12:40 incomplete 22:12:48 and they won't necessarily work on what we fancy is the issue 22:12:51 and that hurts more than something that’s not even started 22:13:15 kevinbenton: I understand 22:13:42 we can force people to work on stuff we want them to work 22:14:03 can't^^^ I think 22:14:08 what I am saying is that out of the lot of open RFEs 22:15:13 rather than treating them at the same priority, we should perhaps look at those that are more critical 22:16:04 isn't that what the priority field is for on blueprints? 22:16:19 at this point these are not blueprints yet though 22:16:33 i like to think of RFEs as sanity checks to see if we can allow them in the platform 22:16:41 ok 22:16:42 setting to rfe-approved doesn't mean we need to land them all 22:16:47 sure 22:16:55 but we approved this one already 22:17:04 so it already makes sense 22:17:18 ok, then we should get rid of rfe-postponed tag probably 22:17:25 no 22:17:33 and just track that with blueprint status 22:17:35 if we have an owner it shoudl go straight back to approved 22:17:44 there’s no point in going back to rfe 22:17:51 the discussion has already happened 22:18:17 then why did we spend 5 minutes talking about approving it? 22:18:22 :) 22:18:31 not this one 22:19:31 never mind, carry on 22:19:32 so what would you like to spend the meeting doing? 22:19:40 we can prioritize blueprings 22:19:44 blueprints 22:20:03 #link https://blueprints.launchpad.net/neutron 22:20:15 #link https://blueprints.launchpad.net/neutron/+spec/adopt-oslo-versioned-objects-for-db 22:20:15 that’s fine, let’s go back to RFEs 22:20:47 so this one got hit pretty hard by cut back of intel/rackspace 22:21:43 ihrachys: how many people do we have left working on OVO? 22:21:49 1.5 22:22:01 me and manjeet (I am .5 if you ask) 22:22:01 ack 22:22:07 but that I am going to close. but I will fall back on some other upgrade related things. 22:22:16 like the api extensions convergence 22:22:25 I am going to postpone/defer/abandon that one 22:22:32 wasn't manjeets hit by the OSIC debacle? 22:22:44 mlavalle, he is one of those lucky who are not OSIC 22:22:47 but ODL 22:22:50 electrocucuracha has this handy spreadsheet he sent me https://docs.google.com/spreadsheets/d/1FeeQlQITsZSj_wpOXiLbS36dirb_arX0XEWBdFVPMB8/edit#gid=1434170112 22:22:51 so he stays (for now) 22:22:54 ahhh nice! 22:24:03 ihrachys: is it possible for you to write-up an email highlighting what patches need volunteers to take over? 22:24:09 ihrachys: and send it to the list 22:24:12 ok ok 22:25:14 #link https://blueprints.launchpad.net/neutron/+spec/neutron-lib-networking-l2gw 22:25:24 armax: that is still in progress, right? 22:25:37 the link doesn't reflect the title 22:25:43 let me fix tht 22:26:02 I am heavily behind 22:26:07 but I still intend to work on it 22:26:09 if time lets me 22:26:24 do you think high priority status is necessary? 22:26:30 kevinbenton: btw we should bump the milestones 22:26:35 we’re in p-2 right? 22:26:47 this isn't blocking anything other than stopping neutron imports 22:27:07 armax: you broke that link above 22:27:11 I did 22:27:12 armax: share us the new one please 22:27:19 https://blueprints.launchpad.net/neutron/+spec/neutron-lib-dynr 22:28:37 armax: so what do you think about lowering the priority of this one since it's not operator/user visible 22:29:51 ok 22:29:54 leaving it for now 22:29:55 fine by me 22:30:00 this one is the worrying one now 22:30:02 #link https://blueprints.launchpad.net/neutron/+spec/live-migration-portbinding 22:30:13 the sense of urgency came from the idea of accelerating the adoption of neutron-lib 22:30:18 but that’s not going to happen 22:30:22 i think we need to higher the priority of this portbinding work 22:30:36 because it's actually going to address multiple things 22:30:45 ++ 22:30:46 migrations between vif types IIUC requires this 22:30:59 and Anindita was affected by the OSIC stuuf 22:31:04 and we need migrations between vif types to switch between mech drivers (as part of an upgrade) 22:31:13 and also firewalls afaik 22:31:15 or as part of a switch between technologies (e.g. ref impl to OVN) 22:31:25 (iptables -> ovs native) 22:31:28 ihrachys: ++ 22:32:20 I totally agree that should get High, but we need to understand if nova still thinks the same about it. 22:32:34 johnthetubaguy: you awake? 22:32:40 probably not 22:33:02 we should ask ijw if he has resources he can spare 22:33:05 to work on this 22:33:14 he has a stake in this 22:33:41 +1, he was adamant at the PTG that all was needed was approval of the work 22:33:42 armax, we may also have someone for the cause 22:34:15 woot 22:34:22 but not nova side :) 22:34:29 (at least I am not aware of anyone yet) 22:35:46 i would like to put the priority of this one at medium 22:35:46 https://blueprints.launchpad.net/neutron/+spec/instance-ingress-bw-limit 22:35:49 kevinbenton, I think Anindita is with us till end of next week, so it may make sense to dump her brain on the matter before she potentially leaves us 22:36:04 ihrachys: ack 22:36:19 ihrachys: i will reach out to her 22:36:39 kevinbenton: two priorities to chose from 22:36:41 low and higj 22:36:46 high 22:36:50 i see more 22:36:54 i will use more! 22:36:56 for that qos one, we have a patch I believe 22:37:00 ihrachys: right 22:37:06 ihrachys: i've looked at it a couple of times 22:37:09 https://review.openstack.org/#/c/449831/ 22:37:13 yeah, it's pretty good 22:37:15 I did too 22:37:16 kevinbenton: it’s pointless to use more than two 22:37:33 armax: well pretend all of them are low that aren't high 22:37:36 armax: problem solved 22:37:48 it doesn't implement backend though I believe 22:37:56 (facepalm) 22:38:12 oh there is another one for ovs bits https://review.openstack.org/#/c/457816/ 22:39:33 i've heard multiple requests for this qos one, so it would be good if we can land it 22:39:36 re prio, I am fine with High but will review nevertheless 22:39:50 MEDIUM 22:40:18 que qos guys have a bi-weekly meeting, which I've been attending lately 22:40:28 next one is this coming Tuesday 22:40:36 I can communicate to them 22:40:43 this bump in priority 22:40:57 I am moving them back to LOW :) 22:41:13 mlavalle: looks like they are moving along pretty well already, but yeah tell them we are targeting PIke for sure 22:41:17 #link https://blueprints.launchpad.net/neutron/+spec/port-data-plane-status 22:41:22 IIRC this merged 22:41:27 yes, it is done 22:41:44 docs/tests/all good? 22:41:53 hmm, not sure about docs 22:41:59 i think tests and whatnot were part of it 22:42:07 api-ref? 22:42:13 api ref was merged 22:42:20 yeah I see it 22:42:27 in neutron lib before the neutron side 22:42:27 as this is assigned to me as approved 22:42:29 then I guess can be closed 22:42:29 approver 22:42:35 I should know the answer to these questions 22:42:44 I’ll find out and provide an update on teh whiteboard 22:42:46 armax: ok, i'll let you go through and identify the gaps 22:42:46 the only missing piece is docs 22:43:30 #link https://blueprints.launchpad.net/neutron/+spec/native-l2pop 22:43:37 this may need a priority bump 22:44:00 is the assignee still around? 22:44:01 i'm still working out the issues, but trying to trigger l2pop functionality inside of push notiifcations is becoming really hacky and burdensome 22:44:14 ihrachys: we still have venkata right? 22:44:18 or is he OVN? 22:44:18 kevinbenton, ofc 22:44:25 I think he is mostly with us 22:44:43 but I can check 22:44:46 ack 22:44:53 I’ll like you to expand on teh hackiness but offline 22:45:26 well the issue is l2pop does things based on a magical hidden state machine of (STATUS, host_id) tuples 22:45:44 OFFLINE! 22:45:58 so if you fail to perform the correct incantations, the doors to connectivity fail to open 22:46:01 ok :) 22:46:26 everything else on that list is fine with me for priority 22:46:38 #link https://blueprints.launchpad.net/neutron/+spec/fetch-hostkey-from-port 22:46:50 that belongs to an RFE mlavalle and i discussed last week a bit 22:47:11 monty has even volunteered to help work it 22:47:14 modred showed up yesterday in the Neutron channel 22:47:32 thinking the meeting was yesterday 22:47:37 not sure what that means 22:47:41 do we have anything written beyond this one sentence description? 22:47:44 is there more documented somewhere? 22:47:45 ihrachys: yeah 22:47:46 rfe 22:47:47 one sec 22:47:58 #link https://bugs.launchpad.net/neutron/+bug/1682247 22:48:00 Launchpad bug 1682247 in neutron "Neutron should be able to fetch hostkeys for ports" [Wishlist,Triaged] 22:48:15 tl;dr is give users of booted instances a secure ish way to get the hostkey so that you don't have to blindly trust on first boot 22:48:18 which has a link to an even more detailed spec 22:48:21 yeah, he submitted the spec before the rfe 22:48:56 I am not sure I appreciate why that service must be neutron 22:49:13 I’ll look at https://review.openstack.org/#/c/456394/ 22:49:24 it requires a network probing of some sort 22:49:33 here is the digital ocean RFE :) https://digitalocean.uservoice.com/forums/136585-digitalocean/suggestions/9307569-return-the-droplet-s-ssh-public-key-as-part-of-api 22:50:41 kevinbenton: probing such as? 22:51:06 armax: connecting to the instance on a TCP port to retrieve the ssh key 22:51:17 so something from inside neutron (that would guarantee correct endpoint) fetch ssh fingers and expose via api? 22:51:26 ihrachys: yep 22:51:37 ssh-keyscan as a service 22:51:42 SKaaS 22:51:48 lol 22:51:52 kevinbenton: this makes no sense 22:52:05 at least at first glance 22:52:26 armax: i want an API to retrieve the ssh key of a server 22:52:27 you poke a TCP port and an ssh key is handed over to you? 22:52:34 armax: yes, this is how ssh works 22:52:40 but then why neutron? 22:52:47 this might as well be nova 22:52:49 armax, I am not sure you can safely do that from outside neutron (or nova) perimeter. 22:52:52 armax: neutron is the thing with access to the network 22:53:01 armax: nova does not have access 22:53:03 the service runs in a vm 22:53:18 unless it doesn't 22:53:20 armax: what service? 22:53:26 the scanning thing? 22:53:27 assh 22:53:29 ssh 22:53:42 that’s ok, I’ll look at the spec 22:53:49 no need to digress here 22:54:05 I, as a user, want to know the SSH hostkey of a new instance so I don't have to trust the first thing i get when i connect 22:54:44 I understand, all I am wondering at this point is whether this logic actually resides in neutron or not 22:54:58 I can have many ports connected to a VM 22:55:13 wouldn’t I get the same key for if two ports were connected to the same VM? 22:55:31 most of the time, yes 22:55:34 I suspect it's configurable 22:55:45 i'm sure you could configure sshd to listen differently on different ports 22:56:06 dunno if I ever saw that in practice 22:56:11 sounds like a nightmare 22:56:31 quoting someone from stackoverflow "You can actually change where the SSH server looks for the key in the /etc/ssh/sshd_config file with the HostKey /path/to/host/key setting." 22:56:33 anyway I am surprised we bypassed the RFE process altogether and give this blueprint for granted 22:56:45 we didn't 22:56:48 pay attention! 22:56:51 I see no RFE bug 22:56:59 linked here 22:57:00 https://blueprints.launchpad.net/neutron/+spec/fetch-hostkey-from-port 22:57:11 #link https://bugs.launchpad.net/neutron/+bug/1682247 22:57:12 Launchpad bug 1682247 in neutron "Neutron should be able to fetch hostkeys for ports" [Wishlist,Triaged] 22:57:13 armax: that is because modred didn't know about the RFE process 22:57:21 so he submitted the spec first 22:57:26 I see 22:57:38 in fact, he wants to attend the meeting next week 22:57:53 he couldn't make it today (he thought it was yesterday) 22:58:03 and discuss the rfe 22:58:12 well that will give everyone time to read the RFE and think about it 22:58:18 sounds good 22:58:38 a project could potentially live outside of neutron an leverage the neutron interface drivers to attach to tenant networks with admin privileges 22:59:13 kevinbenton, or os-vif? :) 22:59:44 ihrachys: yeah, if they are willing to accept use cases that aren't VMs 23:00:16 time 23:00:18 ihrachys: early on i had suggested in a review to address agent-style plugging and they weren't interested 23:00:19 ack 23:00:27 #endmeeting