| *** AlexeyAbashkin has joined #openstack-fwaas | 00:49 | |
| *** AlexeyAbashkin has quit IRC | 00:53 | |
| *** yamamoto has quit IRC | 01:26 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 01:46 | |
| *** AlexeyAbashkin has quit IRC | 01:50 | |
| *** annp has joined #openstack-fwaas | 02:56 | |
| *** yamamoto has joined #openstack-fwaas | 03:39 | |
| *** yamamoto_ has joined #openstack-fwaas | 03:44 | |
| *** yamamoto has quit IRC | 03:47 | |
| *** hoangcx has quit IRC | 03:57 | |
| *** hoangcx has joined #openstack-fwaas | 04:01 | |
| *** yamamoto_ has quit IRC | 04:03 | |
| *** vks1 has joined #openstack-fwaas | 04:06 | |
| *** vks1 has quit IRC | 04:10 | |
| *** yamamoto has joined #openstack-fwaas | 04:21 | |
| *** vks1 has joined #openstack-fwaas | 04:29 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 07:32 | |
| *** yamamoto has quit IRC | 08:05 | |
| *** yamamoto has joined #openstack-fwaas | 08:08 | |
| *** mfranc213 has quit IRC | 08:43 | |
| *** mfranc213 has joined #openstack-fwaas | 08:45 | |
| *** yamamoto has quit IRC | 08:55 | |
| *** yamamoto has joined #openstack-fwaas | 09:15 | |
| *** yamamoto has quit IRC | 09:15 | |
| *** yamamoto has joined #openstack-fwaas | 09:44 | |
| *** AlexeyAbashkin has quit IRC | 11:01 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 11:05 | |
| *** yamamoto has quit IRC | 11:27 | |
| *** yamamoto has joined #openstack-fwaas | 11:50 | |
| *** annp has quit IRC | 12:01 | |
| *** vks1 has quit IRC | 12:19 | |
| *** Placeed has joined #openstack-fwaas | 12:43 | |
| Placeed | Hi all ! I'm trying to launch a firewall in my fresh openstack installation. But it still on pending create. | 12:43 |
|---|---|---|
| Placeed | If I try to delete it, it stay on pending delete | 12:44 |
| Placeed | can't see anything on neutron logs | 12:44 |
| Placeed | someone can help me ? | 12:44 |
| *** vks1 has joined #openstack-fwaas | 12:58 | |
| doude | Hi, is it now the meeting? | 13:06 |
| doude | reedip --^ | 13:07 |
| doude | oops one hour too early | 13:22 |
| *** vks1 has quit IRC | 13:27 | |
| *** vks1 has joined #openstack-fwaas | 13:43 | |
| *** annp has joined #openstack-fwaas | 13:52 | |
| *** SarathMekala has joined #openstack-fwaas | 13:57 | |
| *** yushiro has joined #openstack-fwaas | 14:00 | |
| yushiro | hi | 14:00 |
| annp | hi yushiro | 14:00 |
| yushiro | Let's start today's meeting | 14:00 |
| yushiro | #startmeeting fwaas | 14:00 |
| openstack | Meeting started Thu Oct 12 14:00:54 2017 UTC and is due to finish in 60 minutes. The chair is yushiro. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:00 |
| *** openstack changes topic to " (Meeting topic: fwaas)" | 14:01 | |
| openstack | The meeting name has been set to 'fwaas' | 14:01 |
| yushiro | #chair yushiro xgerman_ | 14:01 |
| openstack | Current chairs: xgerman_ yushiro | 14:01 |
| yushiro | FYI: Sridar cannot attend this meeting. | 14:01 |
| SarathMekala | hi all | 14:01 |
| yushiro | SarathMekala, Hi | 14:02 |
| yushiro | #topic Queens | 14:02 |
| *** openstack changes topic to "Queens (Meeting topic: fwaas)" | 14:02 | |
| yushiro | 1. l2-support | 14:02 |
| yushiro | #link https://review.openstack.org/#/c/323971/ | 14:02 |
| yushiro | I and annp just updated this patch. Currently, I need cedric's reply. | 14:03 |
| doude | hi | 14:04 |
| yushiro | Now, we're ready for review. | 14:04 |
| annp | yushiro, yeah! | 14:04 |
| xgerman_ | o/ | 14:05 |
| yushiro | #link https://etherpad.openstack.org/p/fwaas-v2-l2 | 14:05 |
| yushiro | ^^^ here is local.conf for testing L2-agent and OVS drier | 14:05 |
| yushiro | Please review it :) | 14:05 |
| yushiro | doude, hi :) | 14:05 |
| yushiro | 2. OVS driver | 14:06 |
| yushiro | #link https://review.openstack.org/#/c/447251 | 14:06 |
| xgerman_ | Yeah, everything for Q-1 we need to have merged before Monday | 14:07 |
| annp | Please help us to test and review it, folks. | 14:07 |
| yushiro | Yes. | 14:07 |
| ivasilevskaya | I'll definitely devote the rest of the week to l2 agent\ovs patch but Monday? | 14:07 |
| yushiro | annp, Did you test in latest devstack with OVS driver? I can work it with no error. | 14:08 |
| yushiro | ivasilevskaya, It really helpful for us !!! | 14:08 |
| annp | yushiro, sorry, I haven't had a chance to test it, yet. | 14:09 |
| ivasilevskaya | if Monday deadline doesn't work can we ask for extension or anything? | 14:09 |
| xgerman_ | Likely not | 14:09 |
| xgerman_ | But I can try - armax is in charge | 14:10 |
| yushiro | OK, I'll send e-mail to Sridar about that. ( Monday is deadline ) | 14:10 |
| annp | ivasilevskaya, Have you tested ovs driver patch yet? | 14:10 |
| ivasilevskaya | as long as gate is in trouble now we might get some more days - many patched are blocked now | 14:11 |
| ivasilevskaya | annp: not yet | 14:11 |
| ivasilevskaya | but I will today | 14:11 |
| xgerman_ | I will test, too | 14:11 |
| yushiro | ivasilevskaya, OK, thanks. Here is local.conf : https://etherpad.openstack.org/p/fwaas-v2-l2 | 14:11 |
| yushiro | xgerman_, Thanks :) | 14:11 |
| annp | ivasilevskaya, yeah. Thanks in advance. :) | 14:11 |
| xgerman_ | Let’s merge things | 14:11 |
| yushiro | Yes.. | 14:12 |
| ivasilevskaya | annp: Do I get it right that 2 patches (l2 agent\ovs) have to be tested in a bundle? There is no way to meaningfully test just l2 agent? | 14:12 |
| ivasilevskaya | xgerman_ I think we are blocked on gate too | 14:12 |
| annp | ivasilevskaya, I think we can test l2 agent with loop driver first, then we can test with ovs. | 14:13 |
| yushiro | Yes, gate job is quite serious issue. As far as I know, there is migration period from zuul v2 to v3. | 14:13 |
| xgerman_ | Sadly, yes but we can +A to be ready | 14:14 |
| annp | ivasilevskaya, we can validate functionality of l2 agent with noop driver, i think. | 14:14 |
| ivasilevskaya | yushiro, at least default fwg seems to fail because of https://bugs.launchpad.net/tripleo/+bug/1722872 | 14:15 |
| openstack | Launchpad bug 1722872 in tripleo "Some packages are not installed in gate job" [High,Triaged] | 14:15 |
| yushiro | ivasilevskaya, oh... | 14:16 |
| ivasilevskaya | but good news are - it might give us more days to get the patches ready :) | 14:17 |
| xgerman_ | k, but once things have the right +2 we can babysit - so you please don’t hold back :-) | 14:17 |
| yushiro | K | 14:17 |
| yushiro | ivasilevskaya, about testing, you can easily modify firewall_l2_driver = noop or ovs by using above local.conf. | 14:18 |
| ivasilevskaya | yushiro, got it | 14:19 |
| yushiro | So, we need to merge L2 agent and OVS driver first. | 14:19 |
| yushiro | BTW, SarathMekala , is chandan today? | 14:20 |
| yushiro | 3. Default firewall group | 14:21 |
| SarathMekala | no | 14:21 |
| yushiro | SarathMekala, OK. Thanks. | 14:21 |
| yushiro | #link https://review.openstack.org/#/c/425769/ | 14:22 |
| yushiro | Thanks xgerman_ for +2. ivasilevskaya , reedip Do you have any updates? | 14:22 |
| ivasilevskaya | yushiro: lgtm | 14:23 |
| *** yamamoto has quit IRC | 14:23 | |
| yushiro | sounds good :) | 14:23 |
| yushiro | I'm trying to test in my devstack today. | 14:24 |
| yushiro | If it is good, I'll put +2(but I couldn't put +A because this is my patch :p | 14:26 |
| xgerman_ | Ok. I can do that | 14:26 |
| xgerman_ | After I test | 14:26 |
| yushiro | I'll reach out to Sridar about it. | 14:27 |
| yushiro | OK, anything else? | 14:27 |
| xgerman_ | Horizon? | 14:27 |
| yushiro | xgerman_, Thanks. | 14:28 |
| yushiro | Yes, let me jump into Horizon topic. | 14:28 |
| yushiro | #topic Horizon support | 14:28 |
| *** openstack changes topic to "Horizon support (Meeting topic: fwaas)" | 14:28 | |
| yushiro | #link https://review.openstack.org/#/c/475840/ | 14:29 |
| yushiro | hoangcx, I found 'endless loading' issue of 'Add policy' button. Now, it is fixed. | 14:30 |
| xgerman_ | Ok, will test and comment | 14:30 |
| yushiro | I added 'enable to handle L2 port' for 'Add/Remove port' but it is not good. So, I'll update this feature. | 14:31 |
| SarathMekala | thanks.. it bugged me quite a bit.. is it due to the missing div closure? | 14:31 |
| yushiro | SarathMekala, Yes. <div> didn't close like </div>. But I fixed it and removed script part. | 14:31 |
| SarathMekala | ok | 14:32 |
| SarathMekala | regarding the L2 port support.. | 14:32 |
| yushiro | In addition, I found 'Add port' and 'Remove port' behavior. I wonder we've already tested this button... | 14:32 |
| yushiro | I also fix it. | 14:33 |
| SarathMekala | we need to provide more info to the user now so that he can under stand what type of port he is seeing on the UI | 14:33 |
| yushiro | I think this v2 dashboard patch also need to merge during Q-1. | 14:33 |
| xgerman_ | Yes. That was our goal — | 14:34 |
| SarathMekala | currently we show only the port-id... this needs some enhancement | 14:34 |
| SarathMekala | are there any blockers you see? | 14:34 |
| yushiro | SarathMekala, +1. Like 'device_owner' information? 'router_interface' or 'VM port(compute:nova)' ... | 14:34 |
| xgerman_ | Yes, but would it delay merging? I think we can add that in Q-2 | 14:34 |
| amotoki | hi, the driver meeting was rescheduled. I am here. | 14:35 |
| yushiro | xgerman_, Sure. | 14:35 |
| xgerman_ | I also like to see egress/ingress filtered better | 14:35 |
| yushiro | amotoki, Good evening. | 14:35 |
| xgerman_ | amotoki Welcome | 14:35 |
| SarathMekala | xgerman_, can you eloborate on the egress/ingress filtering | 14:35 |
| amotoki | yushiro: it seems still evening in your timezone :p | 14:35 |
| yushiro | xgerman_, You mean that filtering 'firewall rule' or 'firewall policy' ? | 14:36 |
| yushiro | amotoki, yeah | 14:36 |
| xgerman_ | Policy. I got default, default before we made changes | 14:37 |
| xgerman_ | On Default FWG | 14:37 |
| yushiro | xgerman_, Aha. Yeah, your fix is reasonable I think. It easy to understand what policy is for egress/ingress. | 14:37 |
| SarathMekala | ah.. i see.. default-fwg for egress and ingress | 14:38 |
| xgerman_ | Yep. | 14:38 |
| yushiro | #link https://etherpad.openstack.org/p/fwaas-v2-dashboard Here is note for v2 dashboard. | 14:38 |
| yushiro | Please free to write down in 'Future Improvements:' topic :) | 14:39 |
| xgerman_ | K | 14:39 |
| amotoki | IMHO it is better to land the initial patch and add more features then. | 14:39 |
| amotoki | are we discussing future improvements? | 14:39 |
| xgerman_ | Yes! | 14:39 |
| *** reedip_ has joined #openstack-fwaas | 14:40 | |
| SarathMekala | amotoki, I agree | 14:40 |
| reedip_ | hi | 14:40 |
| xgerman_ | I think we agreed there are no blockers but need to test more... | 14:40 |
| yushiro | amotoki, Yes. We should fix a few blocking issue and merge first. | 14:40 |
| reedip_ | sorry i am late :( | 14:40 |
| xgerman_ | +1 | 14:40 |
| yushiro | reedip_, hi. No problem. | 14:40 |
| amotoki | backlog topics (like future improvements) can be filed as bugs | 14:40 |
| *** Placeed has quit IRC | 14:40 | |
| xgerman_ | Yep. | 14:41 |
| yushiro | xgerman_, SarathMekala 1 blocking point is 'Add port' / 'Remove port' behavior. | 14:41 |
| amotoki | yushiro: what do you think are remaining blockers for the initial patch? | 14:41 |
| xgerman_ | Ouch :-( | 14:41 |
| SarathMekala | yushiro, whats your observation on add/remove port? | 14:42 |
| yushiro | amotoki, I'll fix only this bug until today. Other topics will fix in Q-2. | 14:43 |
| amotoki | so we have only one critical blocker | 14:43 |
| yushiro | amotoki, Yes. | 14:43 |
| yushiro | SarathMekala, Could you see my last comment in https://review.openstack.org/#/c/475840/ | 14:44 |
| yushiro | So, Please skip my concern which I sent you today with attached file(PNG) | 14:45 |
| yushiro | Let's fix in Q-2. | 14:45 |
| SarathMekala | yushiro, I havent implemented the drag and drop functionality for ports | 14:45 |
| xgerman_ | Yep. Let’s get it out of the door | 14:45 |
| yushiro | SarathMekala, Oh, OK. Anyway, let's keep on current implementation :) | 14:46 |
| amotoki | that is just because generate_html('port') is not called, but you can fix it later | 14:46 |
| SarathMekala | amotoki, yes | 14:46 |
| SarathMekala | i did not want to g | 14:46 |
| SarathMekala | waste cycles on it now | 14:47 |
| yushiro | OK, anything else for v2 dashboard? | 14:47 |
| SarathMekala | so whats the final conclusion | 14:48 |
| SarathMekala | are we pushing this patch to Q-1 after testing thoroughly? | 14:48 |
| yushiro | #action yushiro will fix 'Add/Remove port' behavior during Q-1. | 14:49 |
| amotoki | my understanding is to fix the remaining blocker yushiro pointed out for Q-1 and others are deferrred to Q-2 | 14:49 |
| yushiro | amotoki, That's right. | 14:49 |
| SarathMekala | ok.. agreed | 14:50 |
| yushiro | OK, | 14:50 |
| yushiro | ah, 9 minutes left | 14:50 |
| yushiro | but this channel is endless :) | 14:50 |
| yushiro | #topic Stadium Compliance | 14:51 |
| *** openstack changes topic to "Stadium Compliance (Meeting topic: fwaas)" | 14:51 | |
| yushiro | reedip_, Is there any update? | 14:51 |
| reedip_ | Ok, I had a patch for it , but no update in the last few weeks. I will pull it up today. Can I share the update next week for it ? | 14:51 |
| yushiro | reedip_, Yes, please. | 14:52 |
| -openstackstatus- NOTICE: Job log uploads are failing due to lack of inodes. Jobs also fail due to mismatches in gnutls packages. Workarounds for both in progress with proper fixes to follow. | 14:53 | |
| *** ChanServ changes topic to "Job log uploads are failing due to lack of inodes. Jobs also fail due to mismatches in gnutls packages. Workarounds for both in progress with proper fixes to follow." | 14:53 | |
| yushiro | #topic Open Discussion | 14:53 |
| *** openstack changes topic to "Open Discussion (Meeting topic: fwaas)" | 14:53 | |
| reedip_ | any topics ? | 14:55 |
| yushiro | 1 topic. | 14:55 |
| yushiro | folks, please wish for zuul will smile(+1) for us :) | 14:55 |
| xgerman_ | :-) | 14:56 |
| SarathMekala | :) | 14:56 |
| reedip_ | depends if rollback is complete or not ... | 14:56 |
| reedip_ | yushiro : 1 topic, we have some open bugs, someone needs to look into them. I can volunteer but need some help | 14:57 |
| doude | Hi, I started a doc to explain what I proposed for the plugable backend driver | 14:57 |
| yushiro | reedip_, I will help you. You mean into launchpad? | 14:57 |
| reedip_ | yes ... | 14:57 |
| yushiro | doude, OK, great. | 14:57 |
| doude | https://bugs.launchpad.net/neutron/+bug/1702312 | 14:57 |
| openstack | Launchpad bug 1702312 in neutron "[FWaaS v2] Does not work with core plugin non based on Neutron DB model" [Undecided,In progress] - Assigned to Édouard Thuleau (ethuleau) | 14:57 |
| doude | it's just some diagrams | 14:58 |
| reedip_ | doude : thanks, maybe you can add it as an API REF guide in your pluggable backend patch itself | 14:58 |
| yushiro | Thanks for your link. | 14:58 |
| reedip_ | that would help understand the patch and the code | 14:58 |
| doude | I used a google doc for that | 14:58 |
| xgerman_ | Ok. SridarK usually looks into bugs. Let’s have a bug scrub once he is back — | 14:58 |
| doude | https://docs.google.com/presentation/d/1_9KkNgIbWYE6tucoym8N7J2xfcQ1XwN8Zuu-ALEUD3U/edit#slide=id.g27fa2ac987_0_66 | 14:58 |
| reedip_ | hmm ... share the link please ?? :) | 14:58 |
| doude | still in progress | 14:58 |
| yushiro | Yes | 14:58 |
| doude | https://docs.google.com/presentation/d/1_9KkNgIbWYE6tucoym8N7J2xfcQ1XwN8Zuu-ALEUD3U/edit?usp=sharing | 14:59 |
| yushiro | doude, Thanks for your link. I'll take a look. | 14:59 |
| doude | ok | 15:00 |
| yushiro | Ok, it's time now. Thanks all!! | 15:00 |
| yushiro | #endmeeting | 15:00 |
| *** openstack changes topic to "#openstack-fwaas" | 15:00 | |
| openstack | Meeting ended Thu Oct 12 15:00:10 2017 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:00 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/fwaas/2017/fwaas.2017-10-12-14.00.html | 15:00 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/fwaas/2017/fwaas.2017-10-12-14.00.txt | 15:00 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/fwaas/2017/fwaas.2017-10-12-14.00.log.html | 15:00 |
| doude | on my dise still waiting merge to rebase my review | 15:00 |
| openstackgerrit | Édouard Thuleau proposed openstack/neutron-fwaas master: Implements a plugable backend driver https://review.openstack.org/480265 | 15:06 |
| *** AlexeyAbashkin has quit IRC | 15:07 | |
| *** SarathMekala has quit IRC | 15:13 | |
| *** SarathMekala has joined #openstack-fwaas | 15:15 | |
| *** reedip_ has quit IRC | 15:17 | |
| *** yamamoto has joined #openstack-fwaas | 15:24 | |
| *** reedip_ has joined #openstack-fwaas | 15:26 | |
| *** yamamoto has quit IRC | 15:31 | |
| *** annp has quit IRC | 15:37 | |
| *** reedip_ has quit IRC | 15:40 | |
| *** reedip_ has joined #openstack-fwaas | 15:43 | |
| *** yamamoto has joined #openstack-fwaas | 15:45 | |
| *** yamamoto has quit IRC | 15:45 | |
| *** SarathMekala has quit IRC | 15:48 | |
| *** reedip_ has quit IRC | 16:24 | |
| *** yamamoto has joined #openstack-fwaas | 16:45 | |
| *** yamamoto has quit IRC | 16:52 | |
| *** vks1 has quit IRC | 17:39 | |
| *** SumitNaiksatam has joined #openstack-fwaas | 17:43 | |
| *** Swami has joined #openstack-fwaas | 17:49 | |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas-dashboard master: FWaaS V2 Horizon Dashboard https://review.openstack.org/475840 | 17:51 |
| *** yushiro has quit IRC | 17:54 | |
| *** SumitNaiksatam has quit IRC | 19:08 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 20:05 | |
| *** AlexeyAbashkin has quit IRC | 20:09 | |
| xgerman_ | https://www.irccloud.com/pastebin/PAshSORa/ | 20:11 |
| xgerman_ | ^ ivasilevskaya pretty sure I am doing something wrong | 20:13 |
| *** AlexeyAbashkin has joined #openstack-fwaas | 20:44 | |
| *** AlexeyAbashkin has quit IRC | 20:48 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 21:43 | |
| *** AlexeyAbashkin has quit IRC | 21:47 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/neutron-fwaas master: Updated from global requirements https://review.openstack.org/510105 | 21:57 |
| *** yamamoto has joined #openstack-fwaas | 21:59 | |
| *** reedip has quit IRC | 22:01 | |
| *** reedip has joined #openstack-fwaas | 22:03 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 22:43 | |
| *** AlexeyAbashkin has quit IRC | 22:47 | |
| *** reedip has quit IRC | 22:54 | |
| -openstackstatus- NOTICE: Workarounds are in place for libcurl and similar dependency errors due to stale ubuntu mirroring, and for POST_FAILURE results stemming from runaway inode utilization on the logs site; feel free to recheck failing changes for either of these problems now | 23:02 | |
| *** reedip has joined #openstack-fwaas | 23:06 | |
| *** Swami has quit IRC | 23:29 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 23:42 | |
| *** AlexeyAbashkin has quit IRC | 23:46 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!