| yushiro | OK, anyway, let's bump to Q-3. | 00:00 |
|---|---|---|
| yushiro | 2. OVS firewall driver :https://review.openstack.org/#/c/447251 | 00:00 |
| xgerman_ | Q-2 | 00:02 |
| yushiro | For my point of view, this patch works correctly with 'single' mode (without sg). I think it's OK to merge in this timing. | 00:02 |
| xgerman_ | +1 | 00:03 |
| yushiro | xgerman_, yeah. SridarK How about you? | 00:03 |
| yushiro | Ah, BTW, do we need reno about that? (only works on fwg without sg) | 00:05 |
| SridarK | yushiro: yes (1) will be Q-3 | 00:05 |
| SridarK | agreed | 00:06 |
| SridarK | (2) yes we are good since it is in | 00:06 |
| SridarK | so i think we have basic support in | 00:06 |
| SridarK | lets do more testing and the plan for co-existence patch soon | 00:07 |
| yushiro | OK | 00:08 |
| yushiro | Ah, so, is it OK to merge OVS firewall driver without reno? | 00:08 |
| xgerman_ | can we get reno? | 00:09 |
| SridarK | hmm | 00:09 |
| yushiro | xgerman_, SridarK I'm afraid of describing supported config for this patch. | 00:10 |
| xgerman_ | ok | 00:10 |
| SridarK | Will need to describe it carefully | 00:12 |
| SridarK | now can that go as a separate patch ? | 00:12 |
| yushiro | SridarK, You mean "ovs driver" patch and "adding reno" patch ? | 00:12 |
| SridarK | yes | 00:12 |
| SridarK | sorry i have not done release notes in the recent past - cant recollect | 00:13 |
| yushiro | I think it's better to include ovs driver patch. I can update it ASAP but I'm afraid of my English... I need your help about reno description. | 00:14 |
| yushiro | Could you write some help sentence into etherpad? :) | 00:15 |
| SridarK | yushiro: sure i can do that | 00:15 |
| xgerman_ | +1 | 00:16 |
| yushiro | SridarK, Thanks! Now I'm updating reno ( multi-task mode :) ) | 00:16 |
| SridarK | since the driver merged, what are u planning | 00:16 |
| SridarK | yushiro: no problem | 00:16 |
| yushiro | OK, let's move on. | 00:17 |
| yushiro | 4. [WIP] Adds remote firewall group: https://review.openstack.org/521207 | 00:17 |
| xgerman_ | That’s Q-3 for sure | 00:18 |
| SridarK | yushiro: sorry pls clarify on the plan u were thinking for reno | 00:18 |
| yushiro | :) | 00:18 |
| SridarK | I can defn help with writing the sections | 00:18 |
| SridarK | but not clear on how we will get that in | 00:18 |
| SridarK | yushiro: i may step away shortly to drive back home to avoid some traffic - but we can work thru this later today | 00:20 |
| SridarK | On (4) yes Q-3 for sure | 00:20 |
| yushiro | SridarK, Sure. My point is that "ovs driver patch" has an 'issues' https://docs.openstack.org/reno/latest/user/usage.html#editing-a-release-note | 00:20 |
| yushiro | SridarK, I got it. | 00:21 |
| xgerman_ | ;-) | 00:21 |
| yushiro | OK, let's move on. | 00:22 |
| yushiro | 5. Adding unique constraint for port_id: https://review.openstack.org/512154 | 00:22 |
| SridarK | yushiro: i think right now basically all other thing remaining (conntrack, service driver, remote group) are all Q-3 | 00:22 |
| yushiro | SridarK, Yes. OK, we're on same page. | 00:22 |
| yushiro | Regarding 5., I think this is bug and OK to merge in Q-2. | 00:23 |
| SridarK | (5) is something we can push - i will review it - | 00:23 |
| SridarK | yushiro: yes same thinking :-) | 00:23 |
| xgerman_ | +1 | 00:23 |
| yushiro | SridarK, OK. I just handled this patch and can put +2 only. So, please review it :) | 00:24 |
| SridarK | yushiro: yes will do | 00:25 |
| xgerman_ | +1 | 00:25 |
| SridarK | i only was puzzled because I recalled having the check for it earlier | 00:25 |
| SridarK | but not as a constraint on the db | 00:26 |
| SridarK | i just wanted to refresh my memory on that | 00:26 |
| SridarK | will look and +A later today | 00:26 |
| xgerman_ | k | 00:26 |
| SridarK | i suspect some validation logic may be in the plugin | 00:27 |
| SridarK | but this is good | 00:27 |
| yushiro | 1 port can be associated only 1 fwg. This was our design. However, we can associate the port to multiple firewall_groups. | 00:27 |
| SridarK | or rather a FWG can be on multiple ports | 00:28 |
| xgerman_ | yep | 00:28 |
| SridarK | but a port can have only one FWG | 00:28 |
| yushiro | It should be guarded at DB layer because this occurs race-condition. | 00:28 |
| SridarK | but we are good all of us on the same page | 00:29 |
| SridarK | oh yes L2 introduces a different workflow too | 00:29 |
| yushiro | For earlier design, we thought port has multiple fwgs like SG. But we decided to associate only 1 fwg because it is so complicated an "order" of each firewall_groups. | 00:30 |
| yushiro | OK | 00:30 |
| xgerman_ | ok | 00:30 |
| yushiro | 6. Add configurable option for default_fwg association: https://review.openstack.org/#/c/475183 | 00:31 |
| yushiro | This patch should be merged in to Q-3. | 00:31 |
| xgerman_ | k | 00:32 |
| yushiro | I can update it. | 00:32 |
| SridarK | +1 | 00:32 |
| yushiro | If 6. is merged, we can handle L2 and default fwg with automatic association into L2-port. | 00:32 |
| SridarK | ok | 00:33 |
| xgerman_ | yushiro can we resurrect that | 00:33 |
| xgerman_ | looks like armax script marked it for abandon | 00:33 |
| yushiro | xgerman_, Of course. DOne | 00:34 |
| xgerman_ | thanks - awesome | 00:34 |
| yushiro | haha, time flies!! | 00:34 |
| SridarK | :-) | 00:35 |
| xgerman_ | :-) | 00:35 |
| yushiro | OK, do you have any patches to discuss? | 00:35 |
| SridarK | No, we can follow up with SarathMekala on some fixes needed for dashboard | 00:35 |
| SridarK | we can get those in for Q-3 | 00:36 |
| xgerman_ | yep — we are punting quite a few to Q-3 which increases risk so we need to carefully manage | 00:36 |
| *** yamamoto has quit IRC | 00:36 | |
| yushiro | xgerman_, SridarK OK, I see. | 00:36 |
| SridarK | And some more testing - that i can hopefully convert to tempest | 00:36 |
| SridarK | xgerman_: yes | 00:36 |
| xgerman_ | tempest would be awesome ;-) | 00:36 |
| yushiro | My A.I is to update OVS firewall driver patch with adding reno. | 00:36 |
| SridarK | yushiro: ok | 00:37 |
| xgerman_ | +1 | 00:37 |
| SridarK | and i will help u write the text for that | 00:37 |
| xgerman_ | sweet | 00:37 |
| yushiro | SridarK, xgerman_ BTW, Wednesday means wednesday in UTC ?? | 00:37 |
| SridarK | yushiro: go ahead and update a Patch with some basic strawman | 00:37 |
| yushiro | SridarK, Sure. | 00:37 |
| SridarK | and i will update with comments | 00:37 |
| yushiro | SridarK, yes, it's better. | 00:38 |
| *** yamamoto has joined #openstack-fwaas | 00:38 | |
| SridarK | yushiro: i think it may be Pacific time (usually the it should be wed in some time zone) | 00:38 |
| SridarK | Pacific is probab the latest | 00:38 |
| SridarK | but lets try to wrap this later today or tomorrow | 00:39 |
| yushiro | Oh, thanks. In Japan, today is Tuesday 09:38am. Anyway, I'll do it within 1 hour. | 00:39 |
| xgerman_ | yep, and maybe something makes Q-2 slip… so will do some testing maybe we can squeeze some more in ;-) | 00:39 |
| yushiro | xgerman_, sure. | 00:39 |
| yushiro | I also commented on "Adding unique constraint for port_id: https://review.openstack.org/512154". I'll ping annp about that. | 00:40 |
| SridarK | ok no worries | 00:41 |
| SridarK | and i will review and comments by night my time (it is 4:39pm here) | 00:41 |
| SridarK | Mon | 00:41 |
| SridarK | ok i will sign off my commute will already be horrible | 00:41 |
| SridarK | i will be sitting in parking lot - i cant wait for the self driving cars to become affordable | 00:41 |
| SridarK | :-) | 00:41 |
| SridarK | ok | 00:41 |
| xgerman_ | yeah, I wish I could have a Tesla, too | 00:41 |
| yushiro | :) | 00:42 |
| SridarK | :-) | 00:42 |
| yushiro | I think it is colder than Japan.. Plz take care :) | 00:42 |
| xgerman_ | +1 | 00:43 |
| *** yamamoto has quit IRC | 00:44 | |
| *** SridarK has quit IRC | 00:46 | |
| *** hoangcx has joined #openstack-fwaas | 00:50 | |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: Add reno for "OVS based l2 Firewall driver for FWaaS v2" https://review.openstack.org/525357 | 01:14 |
| *** yushiro has quit IRC | 01:17 | |
| *** yamamoto has joined #openstack-fwaas | 01:41 | |
| *** yamamoto has quit IRC | 01:46 | |
| *** annp has joined #openstack-fwaas | 02:33 | |
| *** threestrands has joined #openstack-fwaas | 03:27 | |
| *** yamamoto has joined #openstack-fwaas | 03:49 | |
| *** threestrands has quit IRC | 05:25 | |
| *** vishwana_ has joined #openstack-fwaas | 05:41 | |
| *** vishwanathj has quit IRC | 05:45 | |
| *** SridarK has joined #openstack-fwaas | 06:39 | |
| *** vks1 has joined #openstack-fwaas | 07:00 | |
| *** vishwana_ has quit IRC | 08:04 | |
| *** vishwanathj has joined #openstack-fwaas | 08:04 | |
| *** eN_Guruprasad_Rn has joined #openstack-fwaas | 08:37 | |
| *** SridarK has quit IRC | 10:32 | |
| *** annp has quit IRC | 10:33 | |
| *** hoangcx has quit IRC | 10:49 | |
| *** hoangcx has joined #openstack-fwaas | 11:05 | |
| *** yamamoto has quit IRC | 11:28 | |
| *** vks1 has quit IRC | 11:31 | |
| *** yamamoto has joined #openstack-fwaas | 12:28 | |
| *** yamamoto has quit IRC | 12:31 | |
| *** yamamoto has joined #openstack-fwaas | 12:31 | |
| *** yamamoto has quit IRC | 12:38 | |
| *** yamamoto has joined #openstack-fwaas | 12:40 | |
| *** hoangcx_ has joined #openstack-fwaas | 13:29 | |
| *** yamamoto has quit IRC | 13:47 | |
| *** eN_Guruprasad_Rn has quit IRC | 13:50 | |
| *** yamamoto has joined #openstack-fwaas | 14:11 | |
| *** vks1 has joined #openstack-fwaas | 14:24 | |
| *** lnicolas has quit IRC | 14:32 | |
| *** lnicolas has joined #openstack-fwaas | 14:35 | |
| *** hoangcx_ has quit IRC | 15:00 | |
| *** openstackgerrit has quit IRC | 15:48 | |
| *** vks1 has quit IRC | 17:44 | |
| *** yamamoto has quit IRC | 19:27 | |
| *** SumitNaiksatam has joined #openstack-fwaas | 19:31 | |
| *** yamamoto has joined #openstack-fwaas | 20:28 | |
| *** yamamoto has quit IRC | 20:35 | |
| *** threestrands has joined #openstack-fwaas | 22:05 | |
| *** threestrands has quit IRC | 22:05 | |
| *** threestrands has joined #openstack-fwaas | 22:05 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!