| *** vishwanathj has joined #openstack-fwaas | 00:11 | |
| *** SumitNaiksatam has quit IRC | 00:24 | |
| *** mickeys has quit IRC | 00:33 | |
| *** mickeys has joined #openstack-fwaas | 00:34 | |
| *** mickeys has quit IRC | 00:38 | |
| *** diogogmt has joined #openstack-fwaas | 00:43 | |
| *** yamamoto_ has joined #openstack-fwaas | 01:38 | |
| *** SumitNaiksatam has joined #openstack-fwaas | 01:39 | |
| *** SumitNaiksatam has quit IRC | 01:53 | |
| *** yushiro has left #openstack-fwaas | 02:03 | |
| *** yushiro has quit IRC | 02:03 | |
| *** diogogmt has quit IRC | 03:41 | |
| *** yushiro has joined #openstack-fwaas | 04:07 | |
| *** SarathMekala has joined #openstack-fwaas | 04:31 | |
| *** SridarK has joined #openstack-fwaas | 04:39 | |
| SridarK | yushiro: hi | 04:40 |
|---|---|---|
| yushiro | SridarK: Hi, good evening | 04:40 |
| SridarK | yushiro: GM | 04:40 |
| SridarK | i think Armando put a -2 | 04:40 |
| SridarK | for the CLI | 04:41 |
| yushiro | Yes exactly... | 04:41 |
| yushiro | many many apologize for it. hmm, I'm find to do what I can do now. | 04:42 |
| yushiro | *finding | 04:42 |
| SridarK | yushiro: no worries - | 04:42 |
| SridarK | i think u can still address any outstanding comments with Akihiro | 04:42 |
| yushiro | Yes, he also commented at midnight in Japan timezone. | 04:43 |
| SridarK | and u can work with him to have things ready | 04:43 |
| yushiro | yeah. I contacted to him yesterday. | 04:44 |
| yushiro | Maybe you already know, njohnston has posted to remove policy.json in neutron and also posted policy.d in fwaas | 04:45 |
| SridarK | yushiro: cool - i am not sure where we are with things - he may open it up tomorrow - i think since Akihiro is on the review - u can work thru him | 04:45 |
| SridarK | yes that has to get in also - i think today they needed to stop everything to get RC1, bug fixes can go in | 04:46 |
| SridarK | i know i have to take care of the rule update issue | 04:46 |
| SridarK | so dont worry too much i think if the patch is ready - we may still have a chance | 04:47 |
| yushiro | OK. I'll change my mind from now. | 04:47 |
| yushiro | BTW, | 04:47 |
| yushiro | I found another issue when deleting firewall-rule | 04:47 |
| SridarK | yushiro: pls dont be hard on urself, lets stay optimistic | 04:47 |
| yushiro | SridarK: OK, thanks. | 04:48 |
| yushiro | So, let me sync about this issue. | 04:48 |
| yushiro | Just a moment, please. | 04:48 |
| SridarK | yushiro: ah ok - yes there are some issues on the the rule handling - njohnston opened a bug to track it | 04:48 |
| yushiro | Oh, sorry. I didn't check bug report. I'll take a look at launchpad. | 04:49 |
| SridarK | we decided to get it in so we can unblock the dependencies to get the agent patches merged | 04:49 |
| SridarK | if u see something just send me an email, i will start work on the fw rule related issues | 04:49 |
| SridarK | tomorrow i will work on that - tonight i am going to bed early | 04:50 |
| yushiro | SridarK: Sure. If I find a new issue, may I file a bug-report ? | 04:50 |
| SridarK | yushiro: yes pls go ahead | 04:51 |
| SarathMekala | yushiro if need help i can pitch in | 04:51 |
| yushiro | SridarK: OK. I'll do it. | 04:51 |
| yushiro | SarathMekala: many thanks. | 04:51 |
| SridarK | if u can keep the rule related issues in a single bug id that will be good and easier to get in | 04:51 |
| SridarK | i was going to ask everyone to help with more testing and documentation, we can all keep a devstack setup to do more testing | 04:52 |
| SridarK | yushiro: i also updated ur etherpad on the testing and added more curl cmds or we can cherry pick the CLI patch so we get more testing with that | 04:53 |
| SarathMekala | sure will bring up my devstack setup today and will do some testing | 04:53 |
| SridarK | ok great thx | 04:53 |
| yushiro | SridarK: OK. I'll check it. | 04:54 |
| yushiro | Now, we can test both CLI and server-side behavior :) | 04:54 |
| SridarK | yushiro: yes exactly | 04:54 |
| *** mickeys has joined #openstack-fwaas | 04:55 | |
| SridarK | yushiro: after this i will ask u for some more explanation on osc-utils - that seem to give me some issues when i was trying to see why Jenkins failure happened on ur patch yesterday | 04:55 |
| SridarK | but may next week or after | 04:55 |
| SridarK | ok i am going to sign off early tonight | 04:56 |
| yushiro | SridarK: quick question. If I file a bug, is 'fwaas' tag OK? | 04:56 |
| SridarK | pls send me an email if something needs my attention | 04:56 |
| SridarK | yushiro: yes that is good | 04:56 |
| yushiro | OK, I got it! Please have a break. Good night!! | 04:56 |
| *** chandanc_ has joined #openstack-fwaas | 04:57 | |
| SridarK | chandanc_: hi, thx for the help - we made the merge in the nick of time | 04:57 |
| chandanc_ | hey SridarK , ya just saw that | 04:58 |
| SridarK | :-) | 04:58 |
| chandanc_ | it was great | 04:58 |
| chandanc_ | what is the plan now ? | 04:58 |
| SridarK | we do more testing | 04:58 |
| *** yamamoto_ has quit IRC | 04:58 | |
| SridarK | we shd atleast try fix the critical bugs | 04:59 |
| chandanc_ | ok sure, and how long do we have for that ? | 04:59 |
| SridarK | may be a week or so | 04:59 |
| chandanc_ | oh | 04:59 |
| SridarK | i dont recall - but will be best to focus on critical issues only to avoid any regression | 05:00 |
| chandanc_ | I just realized that we totaly forgot about the router port delete | 05:00 |
| SridarK | ? | 05:00 |
| chandanc_ | cleaning up fw rules on router port delete | 05:01 |
| SridarK | oh yes | 05:01 |
| SridarK | that can be a bug worth fixing | 05:01 |
| chandanc_ | would like to fix it for sure | 05:01 |
| SridarK | could u look at that and also do some testing around that | 05:01 |
| yushiro | chandanc_: you mean 'remove-router-interface' for router? | 05:01 |
| chandanc_ | sure | 05:01 |
| chandanc_ | yes yushiro | 05:01 |
| yushiro | ah, I see. | 05:02 |
| yushiro | thanks | 05:02 |
| SridarK | yushiro: yes then we will need to clean out the stale rules | 05:02 |
| chandanc_ | sorry yushiro , i could not test your CLI, i will pick it up next | 05:02 |
| SridarK | chandanc_: yes i think we can all test with the CLI patch | 05:02 |
| SridarK | yushiro: one question | 05:02 |
| yushiro | SridarK: OK | 05:03 |
| SridarK | the v1 CLI will be intact correct ? | 05:03 |
| SridarK | because we are keeping v1 as the default | 05:03 |
| chandanc_ | hmm, i think we can have a confusion on the rule and policy | 05:04 |
| chandanc_ | which are common in v1 and v2 | 05:04 |
| SridarK | yes | 05:04 |
| yushiro | SridarK: Hmm, there are some differences b/w v1 and v2. Akihiro said that we should align OSC format/options . | 05:05 |
| SridarK | we could call it firewall-group-rules and firewall-group-policy (worst case) | 05:05 |
| SridarK | yushiro: ok - u know best on that | 05:06 |
| chandanc_ | +1 | 05:06 |
| yushiro | create policy-delete policy-show rule-list update | 05:06 |
| yushiro | delete policy-insert-rule policy-update rule-show | 05:06 |
| yushiro | list policy-list rule-create rule-update | 05:06 |
| yushiro | policy-create policy-remove-rule rule-delete show | 05:06 |
| yushiro | These are v1 potentials | 05:06 |
| yushiro | group create group show policy list rule create rule show | 05:07 |
| yushiro | group delete policy create policy remove rule rule delete | 05:07 |
| yushiro | group list policy delete policy set rule list | 05:07 |
| yushiro | group set policy insert rule policy show rule set | 05:07 |
| yushiro | These are v2 potentials(latest patch) | 05:07 |
| SridarK | ok | 05:07 |
| SridarK | so they can coexist | 05:08 |
| chandanc_ | i see the 2nd one is OSC style, 1st one is neutron cli | 05:08 |
| chandanc_ | right ? | 05:08 |
| yushiro | right. | 05:08 |
| -openstackstatus- NOTICE: The logs volume is full causing jobs to fail with POST_FAILURE. This is being worked on, please do not recheck until notified. | 05:08 | |
| *** ChanServ changes topic to "The logs volume is full causing jobs to fail with POST_FAILURE. This is being worked on, please do not recheck until notified." | 05:08 | |
| chandanc_ | will we ever convert v1 to OSC | 05:08 |
| chandanc_ | ? | 05:09 |
| yushiro | I think it is also necessary | 05:09 |
| yushiro | IMO, the goal is both v1 and v2 commands can use with OSC. | 05:10 |
| chandanc_ | oh, in that case will there be a conflict between the v1 and v2 | 05:10 |
| SridarK | for v2 - where u say group (is that actually firewall-group) | 05:11 |
| yushiro | SridarK: correct. sorry I pasted after typing 'firewall' | 05:11 |
| SridarK | ok | 05:12 |
| yushiro | Please add 'firewall ' as a prefix | 05:12 |
| chandanc_ | is it possible to have "firewall_v2 " as prefix ? just a thought | 05:13 |
| SridarK | or u could consider firewall-group as the prefix | 05:14 |
| SridarK | and if at all we move v1 to OSC - that can have firewall as the prefix | 05:14 |
| yushiro | chandanc_, SridarK : adding prefix is good idea. | 05:15 |
| chandanc_ | +1 | 05:15 |
| yushiro | SridarK,: ah, that's good idea. now: firewall group ... your idea: 'firewall group' ... | 05:15 |
| SridarK | can it be firewall-group ? | 05:16 |
| yushiro | SridarK: ah, maybe OSC can not specify '-' (hyphen) as a command. It seems space separated commands. | 05:17 |
| SridarK | ah also firewall_group is not allowed ? | 05:17 |
| chandanc_ | SridarK, that will make commands like firewall_group group create :( | 05:18 |
| SridarK | ok i think Akihiro will have a good idea - in the past he has helped me to define some of these very clearly | 05:18 |
| yushiro | I'll try it but I think it's difficult. | 05:18 |
| SarathMekala | how about this: | 05:18 |
| SarathMekala | firewall group | 05:18 |
| SarathMekala | firewall policy | 05:18 |
| SarathMekala | firewall rule | 05:18 |
| SridarK | chandanc_: then there will be no group | 05:18 |
| SarathMekala | is this the current impl? | 05:19 |
| chandanc_ | no group will be there, but word repetation :) | 05:19 |
| yushiro | command definition is as follows: | 05:19 |
| SridarK | chandanc_: ok got it i see what u are saying now | 05:19 |
| yushiro | firewall_group_create = neutronclient.osc.v2.fwaas.firewallgroup:CreateFirewallGroup | 05:19 |
| yushiro | at setup.cfg | 05:20 |
| chandanc_ | ok that makes it clear | 05:20 |
| chandanc_ | they are spliting at _ | 05:20 |
| yushiro | IMO, no specify '-' or '_" or ' ', just 'firewallgroup' like lbaasv2 command | 05:20 |
| yushiro | (openstack) firewall | 05:21 |
| yushiro | firewallgroup create firewallpolicy delete firewallrule create | 05:21 |
| yushiro | firewallgroup delete firewallpolicy insert rule firewallrule delete | 05:21 |
| yushiro | firewallgroup list firewallpolicy list firewallrule list | 05:21 |
| yushiro | firewallgroup set firewallpolicy remove rule firewallrule set | 05:21 |
| yushiro | firewallgroup show firewallpolicy set firewallrule show | 05:21 |
| yushiro | firewallpolicy create firewallpolicy show | 05:21 |
| yushiro | I just editted setup.cfg | 05:21 |
| chandanc_ | hey why not firewallv2 like lbasv2 | 05:21 |
| SarathMekala | yushiro, is it possible to define it like -- firewall group create -- its very similar to CLI on the devices | 05:22 |
| SridarK | ok i have to step away - i will look at the logs in the morning | 05:22 |
| chandanc_ | Sure SridarK , thanks for all the help in debugging :) | 05:22 |
| SridarK | i think we have the problem definition clear, after ur discussion - yushiro u can also get somee inputs from Akihiro | 05:23 |
| yushiro | SridarK: Sure. I'll contact with him more deeply. | 05:23 |
| SridarK | chandanc_: no thank u for all the help - was a bit crazy but glad we got that in | 05:23 |
| SridarK | it will make our case stronger for the CLI patch also | 05:23 |
| chandanc_ | :) ya true | 05:23 |
| yushiro | SarathMekala: I think it's the most simple | 05:23 |
| SridarK | ok talk to u all tomorrow | 05:24 |
| yushiro | chandanc_: Lbaas v2 is not specified 'v2'. | 05:25 |
| yushiro | as a command. | 05:25 |
| yushiro | e.g. lbaas-loadbalancer-create | 05:25 |
| yushiro | lbaas-loadbalancer-delete | 05:26 |
| chandanc_ | oh, they dont have any conflict ? | 05:26 |
| yushiro | they don't have OSC plugin, however, they can avoid conflict using 'prefix' | 05:27 |
| yushiro | v1: lb-healthmonitor-show v2: lbaas-healthmonitor-show | 05:27 |
| chandanc_ | ya, prefix is the correct solution | 05:27 |
| yushiro | However, I'm not sure OSC can use '-'(hyphen) or not. | 05:28 |
| chandanc_ | better to avoid - or _ | 05:28 |
| yushiro | for example: | 05:28 |
| yushiro | I defined firewallpolicy_insert_rule = neutronclient.osc.v2.fwaas.firewallpolicy:FirewallPolicyInsertRule | 05:29 |
| yushiro | oops, sorry | 05:29 |
| yushiro | firewallv2_policy_insert_rule = neutronclient.osc.v2.fwaas.firewallpolicy:FirewallPolicyInsertRule | 05:29 |
| yushiro | (openstack) firewallv2 policy | 05:30 |
| yushiro | create delete insert rule list remove rule set show | 05:30 |
| yushiro | Result is above. | 05:30 |
| yushiro | The point is 'insert rule' is one word. | 05:30 |
| chandanc_ | got it | 05:31 |
| yushiro | What I'd like to say is that 1st and 2nd command should be separated '_' | 05:31 |
| yushiro | I mean 'firewall_group_create" ---> firewall group create 'firewall_policy_insert_rule' -> firewall policy 'insert rule' | 05:31 |
| chandanc_ | firewallv2_policy_insertrule | 05:31 |
| chandanc_ | ugly :( | 05:32 |
| yushiro | really? It's not ugly ;) | 05:32 |
| chandanc_ | ok :) | 05:32 |
| yushiro | hmm, I still confusing.. It's difficult | 05:33 |
| chandanc_ | i think we understand the issue, you can propose your suggestion in mail , | 05:34 |
| chandanc_ | yes agree | 05:34 |
| chandanc_ | you have something in mind ? | 05:34 |
| yushiro | firewallv2 group create : I feel 'we create the group of 'firewallv2'' | 05:34 |
| *** ChanServ changes topic to "#openstack-fwaas" | 05:34 | |
| -openstackstatus- NOTICE: Space has been freed up on the log server. If you have POST_FAILURE results it is now safe to issue a 'recheck' | 05:34 | |
| yushiro | I think that ' we create 'firewall group' | 05:34 |
| yushiro | How do you think? | 05:35 |
| chandanc_ | firewallv2 group create LGTM | 05:35 |
| yushiro | 1. We will create the group of firewallv2 | 2. We will create 'firewall group' | 05:35 |
| yushiro | chandanc_, : OK, thanks for your opinion. | 05:36 |
| chandanc_ | another option is fwaas(v1) vs firewall(v2) | 05:36 |
| chandanc_ | again, better propose in mail | 05:37 |
| yushiro | oh, sorry. I talked much. | 05:37 |
| chandanc_ | :) not at all | 05:37 |
| chandanc_ | njohnston, and mfranc213 can also help | 05:38 |
| yushiro | Yes. | 05:38 |
| chandanc_ | yushiro, I will test the CLI patch and let you know. | 05:38 |
| chandanc_ | AFK for 30 mins | 05:39 |
| yushiro | chandanc_: thanks. | 05:39 |
| *** chandanc_ is now known as chandanc_afk | 05:39 | |
| yushiro | CRUD can run | 05:39 |
| yushiro | (I'm reflecting the comment from akihiro.) | 05:41 |
| *** mickeys has quit IRC | 05:51 | |
| *** yamamoto_ has joined #openstack-fwaas | 05:55 | |
| *** mickeys has joined #openstack-fwaas | 06:32 | |
| *** vishwanathj is now known as vishwanathj_zzz | 06:45 | |
| *** mickeys has quit IRC | 08:01 | |
| *** _SarathMekala_ has joined #openstack-fwaas | 08:06 | |
| *** SarathMekala has quit IRC | 08:09 | |
| *** mickeys has joined #openstack-fwaas | 08:16 | |
| *** mickeys has quit IRC | 08:17 | |
| *** mickeys has joined #openstack-fwaas | 08:17 | |
| *** mickeys has quit IRC | 08:21 | |
| *** SarathMekala_ has joined #openstack-fwaas | 09:05 | |
| *** _SarathMekala_ has quit IRC | 09:08 | |
| *** yushiro has quit IRC | 09:30 | |
| *** yamamoto_ has quit IRC | 09:38 | |
| *** SarathMekala_ has quit IRC | 09:49 | |
| *** SarathMekala has joined #openstack-fwaas | 10:07 | |
| *** _SarathMekala_ has joined #openstack-fwaas | 10:08 | |
| *** SarathMekala_ has joined #openstack-fwaas | 10:11 | |
| *** SarathMekala has quit IRC | 10:12 | |
| *** SarathMekala has joined #openstack-fwaas | 10:15 | |
| *** _SarathMekala_ has quit IRC | 10:15 | |
| *** SarathMekala_ has quit IRC | 10:18 | |
| *** chandanc_afk has quit IRC | 11:03 | |
| *** chandanc_afk has joined #openstack-fwaas | 11:04 | |
| *** chandanc_afk has quit IRC | 11:10 | |
| *** chandanc_ has joined #openstack-fwaas | 11:10 | |
| *** xdcc has joined #openstack-fwaas | 11:11 | |
| *** _SarathMekala_ has joined #openstack-fwaas | 11:30 | |
| *** SarathMekala has quit IRC | 11:32 | |
| *** _SarathMekala_ has quit IRC | 11:35 | |
| *** chandanc_ has quit IRC | 12:31 | |
| *** chandanc_ has joined #openstack-fwaas | 13:23 | |
| *** mickeys has joined #openstack-fwaas | 14:04 | |
| *** mickeys has quit IRC | 14:20 | |
| *** diogogmt has joined #openstack-fwaas | 14:28 | |
| -openstackstatus- NOTICE: The Gerrit service on review.openstack.org is restarting quickly to relieve resource pressure and restore normal performance | 15:21 | |
| *** mickeys has joined #openstack-fwaas | 15:38 | |
| *** mickeys has quit IRC | 15:49 | |
| njohnston | I'm not missing something - the statement "FWaaS management options are available in the Dashboard." is false, right? | 16:45 |
| njohnston | Just asking because that is what is stated here: http://docs.openstack.org/admin-guide/networking-introduction.html#enable-fwaas | 16:46 |
| chandanc_ | you mean v2 right ? | 16:47 |
| SridarK | njohnston: for v1 we do have complete Horizon support | 16:54 |
| *** mickeys has joined #openstack-fwaas | 17:09 | |
| *** mickeys has quit IRC | 17:10 | |
| *** SridarK has quit IRC | 17:23 | |
| -openstackstatus- NOTICE: The infrastructure team is taking Gerrit offline for maintenance, beginning shortly after 18:00 UTC for a potentially 4 hour maintenance window. | 17:37 | |
| -openstackstatus- NOTICE: Gerrit is now going offline for maintenance, reserving a maintenance window through 22:00 UTC. | 18:03 | |
| *** ChanServ changes topic to "Gerrit is now going offline for maintenance, reserving a maintenance window through 22:00 UTC." | 18:03 | |
| *** SridarK has joined #openstack-fwaas | 18:38 | |
| *** ChanServ changes topic to "#openstack-fwaas" | 19:12 | |
| -openstackstatus- NOTICE: Gerrit is completing an online re-index, you may encounter slowness until it is complete | 19:12 | |
| *** chandanc_ has quit IRC | 19:30 | |
| *** SridarK has quit IRC | 19:34 | |
| *** xdcc has quit IRC | 19:59 | |
| *** SridarK_ has joined #openstack-fwaas | 21:54 | |
| *** SridarK_ has quit IRC | 22:02 | |
| *** SridarK_ has joined #openstack-fwaas | 23:14 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!