*** diogogmt has joined #openstack-fwaas | 00:27 | |
*** hoangcx has joined #openstack-fwaas | 00:37 | |
*** hoangcx has quit IRC | 02:23 | |
*** mickeys has quit IRC | 02:26 | |
*** lnicolas has joined #openstack-fwaas | 02:56 | |
*** mickeys has joined #openstack-fwaas | 03:11 | |
*** hoangcx has joined #openstack-fwaas | 04:24 | |
*** mickeys has quit IRC | 05:05 | |
*** mickeys has joined #openstack-fwaas | 05:06 | |
*** amotoki has joined #openstack-fwaas | 05:51 | |
*** codertux has joined #openstack-fwaas | 07:03 | |
*** korzen has joined #openstack-fwaas | 07:28 | |
*** korzen has quit IRC | 07:56 | |
*** codertux has quit IRC | 09:02 | |
*** mickeys has quit IRC | 09:32 | |
*** codertux has joined #openstack-fwaas | 09:44 | |
*** mickeys has joined #openstack-fwaas | 09:50 | |
*** codertux has quit IRC | 09:53 | |
*** mickeys has quit IRC | 09:56 | |
*** hoangcx has quit IRC | 10:17 | |
*** codertux has joined #openstack-fwaas | 10:23 | |
*** korzen has joined #openstack-fwaas | 10:46 | |
*** codertux has quit IRC | 11:14 | |
*** korzen has quit IRC | 11:26 | |
*** SarathMekala has joined #openstack-fwaas | 12:41 | |
*** andrein has joined #openstack-fwaas | 12:53 | |
*** chandanc_ has joined #openstack-fwaas | 12:55 | |
*** chandanc_ has quit IRC | 13:20 | |
*** andrein has quit IRC | 13:22 | |
*** andrein has joined #openstack-fwaas | 13:25 | |
*** diogogmt has quit IRC | 13:58 | |
*** andrein has quit IRC | 14:31 | |
*** andrein has joined #openstack-fwaas | 14:37 | |
*** yamamoto has joined #openstack-fwaas | 15:03 | |
*** SarathMekala has quit IRC | 15:33 | |
*** diogogmt has joined #openstack-fwaas | 15:46 | |
*** andrein has quit IRC | 15:47 | |
SridarK_ | yamamoto: ping | 15:51 |
---|---|---|
*** SarathMekala has joined #openstack-fwaas | 15:57 | |
SridarK_ | SarathMekala: hi | 15:59 |
*** andrein has joined #openstack-fwaas | 16:03 | |
*** amotoki has quit IRC | 16:07 | |
*** andrein has quit IRC | 16:20 | |
*** andrein has joined #openstack-fwaas | 16:25 | |
*** mickeys has joined #openstack-fwaas | 16:26 | |
*** mickeys has quit IRC | 16:32 | |
*** yamamoto has quit IRC | 16:34 | |
*** yamamoto has joined #openstack-fwaas | 16:43 | |
*** SarathMekala has quit IRC | 16:48 | |
*** yamamoto has quit IRC | 16:48 | |
*** mickeys has joined #openstack-fwaas | 17:23 | |
mfranc213 | SridarK_: ping | 17:30 |
SridarK_ | mfranc213: hi | 17:30 |
SridarK_ | mfranc213: in a mtg, slow response but pls go ahead | 17:30 |
mfranc213 | SridarK_: nope, my question is not critical. will talk to you later :) | 17:31 |
SridarK_ | mfranc213: ok will ping when i am done in abt an hour | 17:31 |
mfranc213 | SridarK_: sounds good. have a good meeting! | 17:31 |
SridarK_ | :-) | 17:31 |
*** SumitNaiksatam has joined #openstack-fwaas | 17:48 | |
*** yamamoto has joined #openstack-fwaas | 18:13 | |
*** yamamoto has quit IRC | 18:19 | |
*** SumitNaiksatam has left #openstack-fwaas | 18:54 | |
*** diogogmt has quit IRC | 18:55 | |
SridarK_ | mfranc213: hi | 18:55 |
mfranc213 | Sridar_K: hello | 18:55 |
mfranc213 | SridarK_: john schwarz was asking me early about the https://review.openstack.org/#/c/391320/ | 18:56 |
mfranc213 | SridarK_: http://eavesdrop.openstack.org/irclogs/%23openstack-neutron/%23openstack-neutron.2016-11-17.log.html#t2016-11-17T15:15:56 | 18:56 |
*** SumitNaiksatam has joined #openstack-fwaas | 18:57 | |
*** diogogmt has joined #openstack-fwaas | 18:57 | |
mfranc213 | SridarK_: by any chance would you have an update i could pass along to jonathan? | 18:57 |
*** SumitNaiksatam has quit IRC | 19:00 | |
SridarK_ | mfranc213: sure just went thru the logs | 19:00 |
mfranc213 | SridrK_: it seems your local env is good, but jenkins has the wrong config value? | 19:01 |
SridarK_ | mfranc213: On https://review.openstack.org/#/c/391320/, the tests are all passing but on Jenkins it fails because all the api extensions are enabled | 19:01 |
mfranc213 | SridarK_: do we (the royal we) know how to fix? | 19:02 |
SridarK_ | so when the tests run for the v1 job, v1 tests pass as expected and v2 tests are supposed to be skipped | 19:02 |
mfranc213 | yeah, makes sense | 19:02 |
SridarK_ | but they are not | 19:02 |
*** diogogmt has quit IRC | 19:02 | |
SridarK_ | and vice versa for the v2 job | 19:02 |
mfranc213 | right. | 19:03 |
SridarK_ | i was abt to ping njohnston for help on this as this is possibly something on the Jenkins job config | 19:03 |
SridarK_ | the skips happen locally | 19:03 |
mfranc213 | SridarK_: something tells me njohnston will appear momentarily :) | 19:04 |
SridarK_ | when njohnston is avail - could we may be take a look at this ? | 19:04 |
SridarK_ | mfranc213: :-) | 19:04 |
SridarK_ | njohnston: ping | 19:04 |
mfranc213 | SridarK_: i have found that njohnston is everywhere at all times, wherever and whenever njohnston is needed | 19:05 |
SridarK_ | mfranc213: absolutely could not agree more | 19:05 |
mfranc213 | maybe njohnston is santa clause? | 19:05 |
SridarK_ | :-) | 19:05 |
SridarK_ | i pushed the patch late last night after verifying that tests were running locally but was a bit unsure on jenkins | 19:06 |
SridarK_ | just had to get on calls in the am and was going to look for njohnston anyways | 19:06 |
SridarK_ | it seems there should be some knob that sets this in the tempest.conf | 19:07 |
SridarK_ | locally it does pick it up from devstack local.conf - or kind of derives it based on what plugins are set | 19:07 |
SridarK_ | and i would have thought that it should be the same on Jenkins | 19:08 |
mfranc213 | SridarK_: i suspect nate will know the answer to this mystery. | 19:08 |
SridarK_ | yes it is all pixie dust, dark magic for me :-) | 19:09 |
SridarK_ | when njohnston is around - we can take a quick look to triage this | 19:10 |
njohnston | I'm back | 19:10 |
SridarK_ | njohnston: hi | 19:10 |
mfranc213 | well, whaddaya know! hi nate :) | 19:11 |
SridarK_ | will let u catch up on the text above - u may know the answer already | 19:11 |
njohnston | I am reading through http://logs.openstack.org/20/391320/8/check/gate-neutron-fwaas-v1-dsvm-tempest/8979b90/console.html ... I see fwaas v1 configured ... and I see the fwaas v2 tests like neutron_fwaas.tests.tempest_plugin.tests.api.test_fwaasv2_extensions.FWaaSv2ExtensionTestJSON.test_create_show_delete_firewall_group running and failing... | 19:13 |
SridarK_ | yes they should be skipped | 19:13 |
SridarK_ | they are not skipped because api_extensions = all in tempest.conf | 19:15 |
SridarK_ | so the skip logic finds that the fwaas_v2 ext is probab set and runs that | 19:15 |
njohnston | I see. That sounds to me like we should change the devstack plugin to manage the api_extensions line | 19:16 |
SridarK_ | hmm, devstack will set the fwaas plugin - which in turn will load the correct ext | 19:17 |
SridarK_ | as happens in my local env | 19:17 |
njohnston | so the tests pass in your local devstack? | 19:18 |
SridarK_ | yes | 19:18 |
SridarK_ | the skips happen correctly | 19:18 |
SridarK_ | maybe a quick call so i can share my screen | 19:18 |
njohnston | no, I don't think that would help, yet | 19:19 |
SridarK_ | ok | 19:20 |
SridarK_ | let me paste the contents of tempest.conf as in my local env | 19:20 |
SridarK_ | http://paste.openstack.org/show/589636/ | 19:22 |
SridarK_ | this is the section in my local tempest.conf corresponding to api_ext | 19:23 |
SridarK_ | compare that with: | 19:24 |
SridarK_ | http://logs.openstack.org/20/391320/8/check/gate-neutron-fwaas-v2-dsvm-tempest-nv/e95eb51/logs/tempest_conf.txt.gz | 19:24 |
SridarK_ | u will see api_extensions = all | 19:24 |
njohnston | right | 19:26 |
njohnston | so we need that to be set to something we control | 19:26 |
SridarK_ | it seems so, i would have thought that all this should be controlled by the devstack tag for v1 or v2 that is set in the fwaas jobs | 19:27 |
SridarK_ | clearly that does take effect as the v2 tests pass in the v2 job and v1 tests pass in the v1 job | 19:27 |
njohnston | I think we need to escalate this to infra, or else figure out a different way to skip | 19:28 |
njohnston | but look at this: api_extensions | 19:28 |
njohnston | oops | 19:28 |
njohnston | this: https://github.com/openstack-infra/devstack-gate/blob/master/devstack-vm-gate.sh#L802-L810 | 19:28 |
njohnston | it seems to me that the stanza I just linked to would exit if api_extensions was set to 'all' when on master | 19:30 |
SridarK_ | but it does seem to run thru | 19:30 |
njohnston | right, which confounds me | 19:31 |
SridarK_ | sigh yes :-( | 19:31 |
njohnston | all right, let me approach infra with this | 19:32 |
SridarK_ | njohnston: many thanks | 19:32 |
njohnston | perhaps sc68cal can help, it seems he has deep devstack magic | 19:32 |
SridarK_ | yes that is for sure, but i think this may also be an infra thing as well | 19:33 |
SridarK_ | because devstack clearly does the right thing locally | 19:33 |
sc68cal | hmm? | 19:33 |
njohnston | hello sc68cal | 19:33 |
SridarK_ | sc68cal: hi, ur fwaas buddies hound u :-) | 19:34 |
njohnston | we are confounded by the way devstack-vm-gate.sh works | 19:34 |
* sc68cal reads scrollback | 19:35 | |
SridarK_ | sc68cal: let me summarize | 19:39 |
SridarK_ | 1) we have a v1 job that runs v1 tempest tests and a v2 job that runs v2 tempest | 19:39 |
SridarK_ | 2) by virtue of devstack settings for which plugin is loaded, on the v1 job, v2 tests will be skipped and on the v2 job, v1 tests will be skipped | 19:39 |
SridarK_ | 3) The skip is controlled by the ext loaded (which should be either v1 or v2) but it seems tempest.conf on jenkins has api_extensions set to all so the skip does not happen. | 19:40 |
SridarK_ | 4) works fine on local devstack env | 19:40 |
sc68cal | right but d-g sets api_extensions to all | 19:40 |
SridarK_ | so something about how api_extensions get set on the gate | 19:40 |
sc68cal | so you guys end up having failures | 19:40 |
SridarK_ | sc68cal: yes exactly | 19:40 |
njohnston | sc68cal: what is the meaning of this stanza? It looks like it will die if api_extensions=all https://github.com/openstack-infra/devstack-gate/blob/master/devstack-vm-gate.sh#L802-L810 | 19:41 |
sc68cal | Take a look at NETWORK_API_EXTENSIONS setting in devstack | 19:42 |
sc68cal | it defaults to "all" | 19:42 |
njohnston | ok so if we set that in the devstack plugin we should be able to work | 19:42 |
sc68cal | you might be able to define NETWORK_API_EXTENSIONS=router,fwaas[v1,v2] in your job configs | 19:42 |
sc68cal | not in the plugin | 19:42 |
sc68cal | in project-config | 19:42 |
njohnston | ah, ok | 19:43 |
sc68cal | I think. | 19:43 |
sc68cal | i'm speed grepping | 19:43 |
SridarK_ | ok that makes sense - there are not many scenarios where we may need an either or on api ext | 19:43 |
sc68cal | I think at the very least NETWORK_API_EXTENSIONS will need to be something like | 19:44 |
sc68cal | NETWORK_API_EXTENSIONS="router,fwaas[v1,v2]" | 19:44 |
SridarK_ | sc68cal: will network, port, subnet get picked up by default or we need to specify them too | 19:45 |
sc68cal | SridarK_: those are core api resources | 19:45 |
SridarK_ | ok so that should be good | 19:45 |
sc68cal | https://github.com/openstack-infra/project-config/blob/master/jenkins/jobs/neutron-fwaas.yaml#L78 ? | 19:46 |
SridarK_ | sc68cal: many thanks | 19:48 |
njohnston | https://review.openstack.org/399207 | 19:48 |
njohnston | sc68cal: Thanks much! | 19:49 |
SridarK_ | njohnston: many thanks, just reviewed | 19:50 |
SridarK_ | njohnston: how would we test this | 19:51 |
njohnston | I think it is untestable, since adding a Depends-On to your patch won't make the project-config take effect just for your change, in my impression. | 19:51 |
SridarK_ | yes exactly | 19:52 |
njohnston | we just have to wait for it to merge | 19:52 |
SridarK_ | ok that works - we can iterate if needed - looking at the tempest.conf will tell us for sure | 19:53 |
njohnston | revved it | 19:53 |
njohnston | indeed | 19:53 |
SridarK_ | dang hang on, we may need one more ext for v1 | 19:55 |
njohnston | something l3 related? | 19:58 |
SridarK_ | for fwaas v1 we also need the routerinsertion ext | 20:00 |
SridarK_ | i am hoping with this and all the core stuff we are good | 20:00 |
njohnston | firewallrouterinsertion or just routerinsertion | 20:01 |
njohnston | SridarK_: ^^ | 20:02 |
SridarK_ | hmm checking | 20:03 |
SridarK_ | https://github.com/openstack/neutron-fwaas/blob/master/neutron_fwaas/services/firewall/fwaas_plugin.py#L146 | 20:04 |
SridarK_ | i had the right thing posted in the review | 20:05 |
SridarK_ | fwaasrouterinsertion | 20:05 |
SridarK_ | njohnston: http://paste.openstack.org/show/589636/ | 20:06 |
SridarK_ | this is from my local devstack | 20:06 |
njohnston | fixed | 20:06 |
SridarK_ | i went thru the list and i think most of the other things may not really be needed | 20:06 |
njohnston | that paste shows fwaas_v2; I thought yous aid this was only needed for v1? | 20:07 |
SridarK_ | although i see project-id | 20:07 |
SridarK_ | yes that is from a v2 deployment | 20:08 |
SridarK_ | we dont need fwaasrouterinsertion for that | 20:08 |
njohnston | right | 20:08 |
SridarK_ | now i am not sure we need project-id | 20:08 |
SridarK_ | lets go with this perhaps some folks on infra can add some light too | 20:10 |
njohnston | ok | 20:10 |
mfranc213 | well, i'll just keep +1'ing it :) | 20:11 |
SridarK_ | :-) | 20:11 |
SridarK_ | since u are the infra liason so u should be able to get this in quickly, | 20:12 |
*** andrein has quit IRC | 20:12 | |
njohnston | power has it's privileges ;-) | 20:12 |
SridarK_ | :-) | 20:17 |
SridarK_ | sc68cal: , njohnston: thx for the learning | 20:18 |
SridarK_ | the project-config stuff has always been a mystery to me - i can see some light now :-) | 20:19 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!