| *** longkb has joined #openstack-fwaas | 00:41 | |
| openstackgerrit | Kim Bao Long proposed openstack/neutron-fwaas master: [log] FWaaS L3 Logging driver based iptables https://review.openstack.org/553738 | 01:19 |
|---|---|---|
| *** yushiro has joined #openstack-fwaas | 01:30 | |
| yushiro | Hi all | 01:30 |
| yushiro | I just arrived at my office | 01:30 |
| yushiro | Sorry I was late. | 01:30 |
| hoangcx | yushiro: :) | 01:32 |
| *** yamamoto has joined #openstack-fwaas | 01:48 | |
| *** yamamoto has quit IRC | 01:51 | |
| *** SumitNaiksatam has joined #openstack-fwaas | 01:56 | |
| annp | mlavalle, ping | 02:01 |
| *** mlavalle has joined #openstack-fwaas | 02:01 | |
| mlavalle | o/ | 02:02 |
| yushiro | mlavalle, Hi. | 02:02 |
| mlavalle | Good morning yushiro ! | 02:02 |
| annp | hi mlavalle | 02:02 |
| mlavalle | annp: hi | 02:03 |
| yushiro | mlavalle, Thanks for holding this meeting with super friendly time for Asia. | 02:03 |
| mlavalle | no problem, I am glad to help you :-) | 02:03 |
| longkb | Hi mlavalle :) | 02:03 |
| mlavalle | hi longkb | 02:03 |
| yushiro | :) | 02:03 |
| yushiro | mlavalle, OK, let me sync up current progress of fwg logging. | 02:04 |
| mlavalle | cool | 02:04 |
| mlavalle | these are the patches, right: https://review.openstack.org/#/q/status:open+project:openstack/neutron-fwaas+branch:master+topic:bug/1720727 | 02:05 |
| yushiro | mlavalle, Yes, thanks. | 02:06 |
| yushiro | Please 'reload' this page :) | 02:06 |
| yushiro | We have 7 patches are in review but 3 patches will be merged soon ( SridarK or xgerman_ will put +2) | 02:07 |
| mlavalle | ok | 02:08 |
| mlavalle | I can see that 3 of them have already a +2 | 02:08 |
| yushiro | So, only 4 patch: 3 in fwaas(1 is releasenote) and 1 in python-neutronclient | 02:08 |
| yushiro | mlavalle, Yes. | 02:08 |
| mlavalle | that zuul failure in release note doesn't seem related to the patch, right? | 02:09 |
| SridarK | mlavalle: yushiro: hi | 02:09 |
| SridarK | sorry got delayed | 02:09 |
| mlavalle | SridarK: Hi | 02:09 |
| mlavalle | no problem. glad you made it | 02:10 |
| SridarK | :-) | 02:10 |
| mlavalle | so let me see if I understand correctly.... | 02:10 |
| yushiro | mlavalle, yes. | 02:10 |
| SridarK | yushiro: +1 on the 3 patches | 02:11 |
| mlavalle | out of the patches in https://review.openstack.org/#/q/status:open+project:openstack/neutron-fwaas+branch:master+topic:bug/1720727 | 02:11 |
| mlavalle | we need the 3 that already have a +2 | 02:11 |
| mlavalle | plus the rlease notes | 02:11 |
| mlavalle | is that the situation? | 02:12 |
| annp | yushiro, please rebase release note patch in latest of logging driver patch | 02:12 |
| annp | yushiro, I believe zuul will passed. | 02:12 |
| yushiro | mlavalle, Yes. that's correct. | 02:12 |
| yushiro | annp, Thanks I'll rebase after I fixed some comments. | 02:13 |
| mlavalle | we don't need to worry about the other two patches, correct? | 02:13 |
| annp | yushiro, thanks. | 02:13 |
| SridarK | yushiro: we only had 1 patch that had a zuul issue | 02:13 |
| SridarK | yushiro: i think we are good on the other patches and i think we can try to merge them soon ? | 02:14 |
| yushiro | mlavalle, Ah, we have 1 client patch: https://review.openstack.org/#/c/579466 but I think client deadline is over... | 02:14 |
| longkb | +1 SridarK | 02:14 |
| mlavalle | yeap | 02:14 |
| mlavalle | ok | 02:14 |
| yushiro | SridarK, Yes, I think we can merge soon. | 02:14 |
| yushiro | mlavalle, What time is deadline to wait these patches are merged today?? | 02:16 |
| mlavalle | yeah | 02:16 |
| SridarK | so total of 6 patches | 02:16 |
| *** yushiro has quit IRC | 02:17 | |
| SridarK | yushiro: longkb: correct ? | 02:17 |
| SridarK | oops looks like we lost yushiro | 02:17 |
| *** yushiro has joined #openstack-fwaas | 02:17 | |
| longkb | Yes. SridarK | 02:17 |
| yushiro | Ahhh!! I'm sorry. Suddenly disconnected with unknown error ... | 02:18 |
| hoangcx | yushiro: mlavalle I don't see amotoki_ propose new release hashs yet https://review.openstack.org/#/q/project:openstack/releases+status:open | 02:19 |
| hoangcx | I think amotoki_ is waiting for our patches to be landed | 02:19 |
| SridarK | mlavalle: are u comfortable if we take a day to merge the remaining patches ? | 02:19 |
| mlavalle | SridarK: is that day this one? | 02:19 |
| SridarK | mlavalle: if things are in by Thu morn US time | 02:20 |
| SridarK | or are we stretching the deadline | 02:20 |
| SridarK | yushiro: how is ur comfort level also | 02:20 |
| SridarK | ? | 02:20 |
| mlavalle | SridarK: let me check the latest news from the release team.... hang on | 02:20 |
| SridarK | mlavalle: ok | 02:21 |
| yushiro | SridarK, OK! | 02:22 |
| yushiro | SridarK, I can work all day and review. | 02:22 |
| SridarK | yushiro: ok and i will be available to help merge | 02:23 |
| yushiro | annp, hoangcx and longkb can help as well. | 02:23 |
| annp | yushiro, Sure! | 02:23 |
| hoangcx | Absolutely :) | 02:23 |
| longkb | +infinity | 02:24 |
| yushiro | SridarK, Thanks for your help every cycle :) | 02:24 |
| SridarK | yushiro: oh no worries at all happy to be of any help | 02:25 |
| mlavalle | SridarK, longkb, hoangcx, annp, yushiro: http://lists.openstack.org/pipermail/openstack-dev/2018-August/132864.html | 02:25 |
| mlavalle | Please read the first paragraph | 02:26 |
| SridarK | mlavalle: ah ok so we are cutting it very fine here | 02:27 |
| yushiro | """ deadline is this Thursday, the 9th. """ | 02:27 |
| hoangcx | now is 9:30pm 8th in US | 02:27 |
| yushiro | It is for US time I think.. | 02:27 |
| mlavalle | so our goal should be to have it everything we need merged by Thursday morning US time | 02:28 |
| mlavalle | we have about 12 hours | 02:28 |
| mlavalle | realistically | 02:28 |
| yushiro | mlavalle, I see. 12 hours. | 02:29 |
| hoangcx | mlavalle: Indeed. All of the patches are in shape. | 02:29 |
| hoangcx | yushiro: please rebase your release note patch | 02:29 |
| hoangcx | yushiro: then all in shape | 02:30 |
| yushiro | hoangcx, Yes, I'll fix and rebase it. | 02:30 |
| mlavalle | so let's get together tomorrow morning for the usual fwaas weekly meeting and see what the situation is at that point | 02:30 |
| SridarK | mlavalle: +1 | 02:30 |
| SridarK | mlavalle: sounds good and thx as always for the support | 02:31 |
| yushiro | mlavalle, OK, I see. Hope to merge all patches. | 02:31 |
| SridarK | yushiro: shall we sync up in a few hours ? | 02:31 |
| hoangcx | SridarK: Can you have to land 3 patch with +2. It will have to save time : | 02:31 |
| mlavalle | SridarK: can I ask you a favor? | 02:31 |
| yushiro | SridarK, Sure. | 02:31 |
| SridarK | hoangcx: yes absolutely will work with yushiro | 02:31 |
| SridarK | mlavalle: yes pls go ahead | 02:31 |
| hoangcx | s/have/help | 02:32 |
| SridarK | hoangcx: +1 | 02:32 |
| mlavalle | SridarK: I am going to China next week to visit the mother ship.... one question they have is the road map of fwaas. would you send me an email to miguel.lavalle@huawei.com with what you see as roadmap of the next few cycle? | 02:32 |
| mlavalle | hoangcx: the same for vpnaas ^^^^ | 02:33 |
| SridarK | mlavalle: will do | 02:33 |
| hoangcx | mlavalle: Yeah. I will need to sync with yamamoto | 02:33 |
| yushiro | Let me help about that, SridarK :) | 02:34 |
| SridarK | yushiro: sounds good | 02:34 |
| mlavalle | SridarK, hoangcx: if I can have it by the end of this week, would be great | 02:34 |
| SridarK | mlavalle: yes for sure | 02:35 |
| yushiro | mlavalle, Safety and enjoy your business trip in China :p | 02:35 |
| mlavalle | Thanks guys | 02:35 |
| yushiro | Thanks a lot, mlavalle | 02:35 |
| SridarK | sounds good thx all | 02:35 |
| SridarK | yushiro: will sync with u in abt 2 hrs and we can check on status | 02:36 |
| yushiro | OK, SridarK many thanks. | 02:36 |
| mlavalle | talk to you tomorrow morning guys | 02:37 |
| mlavalle | Goooooooood luck! | 02:37 |
| SridarK | mlavalle: thx | 02:37 |
| yushiro | mlavalle, Yes. Thank you so much | 02:37 |
| longkb | Thanks a lot mlavalle :) | 02:37 |
| yushiro | SridarK, OK, Let me explain to you about https://review.openstack.org/#/q/status:open+branch:master+topic:bug/1720727 | 02:37 |
| mlavalle | Thanks for all your hard work! | 02:37 |
| annp | mlavalle, SridarK, thanks a ton! | 02:38 |
| SridarK | yushiro: i will need to step away for a bit | 02:38 |
| SridarK | yushiro: will ping u in a bit | 02:38 |
| yushiro | SridarK, OK. please ping me :) | 02:38 |
| SridarK | and we can discuss | 02:38 |
| SridarK | yushiro: thx | 02:38 |
| annp | mlavalle, Why don't you go to vietnam after china's trip ? :) | 02:38 |
| yushiro | annp, +1 | 02:39 |
| mlavalle | annp: that's actually a good idea. I won't be able to do it during this trip, but maybe next one | 02:39 |
| annp | mlavalle, OK! So I'm waiting you for next time :) | 02:40 |
| annp | mlavalle, beer! | 02:40 |
| mlavalle | annp: sure | 02:40 |
| annp | mlavalle, thanks for your kindness for waiting for logging. | 02:43 |
| mlavalle | annp: thanks for your hard work. That's where the kindness is :-) | 02:44 |
| annp | mlavalle, I guess it must be quite late in your timezone, right now. | 02:44 |
| mlavalle | annp: 9:45pm | 02:45 |
| annp | mlavalle, So see you at 9:00 PM IST | 02:45 |
| mlavalle | annp: yeap, have a nice day | 02:46 |
| longkb | Good night mlavalle :D | 02:46 |
| annp | mlavalle: thanks, G9! | 02:46 |
| mlavalle | longkb: you too have a nice day | 02:46 |
| *** mlavalle has quit IRC | 02:53 | |
| *** yushiro is now known as yushiro_lunch | 03:02 | |
| *** yushiro_lunch is now known as yushiro | 04:00 | |
| openstackgerrit | Kim Bao Long proposed openstack/neutron-fwaas master: Add python binding for libnetfilter_log https://review.openstack.org/530694 | 04:06 |
| openstackgerrit | Kim Bao Long proposed openstack/neutron-fwaas master: [log] FWaaS L3 Logging driver based iptables https://review.openstack.org/553738 | 04:06 |
| openstackgerrit | Kim Bao Long proposed openstack/neutron-fwaas master: Add releasenote for FWaaS v2 logging https://review.openstack.org/589991 | 04:06 |
| reedip|afk | IST???? | 04:29 |
| reedip|afk | is mlavalle in India ?? | 04:29 |
| *** reedip|afk is now known as reedip | 04:29 | |
| *** SridarK has quit IRC | 04:37 | |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: Add releasenote for FWaaS v2 logging https://review.openstack.org/589991 | 05:16 |
| *** SridarK has joined #openstack-fwaas | 06:09 | |
| SridarK | yushiro: hi | 06:09 |
| SridarK | yushiro: sorry i had to be out of home for some time | 06:09 |
| yushiro | SridarK, Hi | 06:09 |
| SridarK | back now | 06:09 |
| yushiro | SridarK, No problem. I think your timezone is night. | 06:10 |
| SridarK | yes | 06:10 |
| SridarK | no worries | 06:10 |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: Add releasenote for FWaaS v2 logging https://review.openstack.org/589991 | 06:11 |
| yushiro | SridarK, Now I just updated releasenote patch. | 06:11 |
| yushiro | So, I need your help for review: https://review.openstack.org/#/q/topic:bug/1720727+(status:open+) | 06:12 |
| SridarK | yushiro: on it | 06:13 |
| yushiro | (1/6) Add log validator for FWaaS v2 logging: https://review.openstack.org/532792 | 06:13 |
| yushiro | (2/6) [log]: Add rpc stuff for logging: https://review.openstack.org/530715 | 06:14 |
| SridarK | back in 5 min | 06:14 |
| yushiro | (3/6) Adding resources callback handler for FWaaS v2 logging: https://review.openstack.org/580976 | 06:14 |
| yushiro | (4/6) Add python binding for libnetfilter_log: https://review.openstack.org/530694 | 06:14 |
| yushiro | (5/6) [log] FWaaS L3 Logging driver based iptables: https://review.openstack.org/553738 | 06:15 |
| yushiro | (6/6) Add releasenote for FWaaS v2 logging: https://review.openstack.org/589991 | 06:15 |
| SridarK | yushiro: ok | 06:19 |
| yushiro | These patches are target. And first 3 patches are almost OK for me.(putting +2) | 06:19 |
| SridarK | yushiro: ok - i did go thru - i am good - but will defer to u based on ur tests | 06:20 |
| yushiro | As you know, CLI patch hasn't been merged in this cycle. So, I added some limitation into release note. | 06:20 |
| yushiro | SridarK, Sure. Of course. Let me share my test cases. | 06:22 |
| yushiro | Just a moment.. | 06:28 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/neutron-fwaas-dashboard master: Imported Translations from Zanata https://review.openstack.org/590121 | 06:31 |
| reedip | need any help? | 06:32 |
| SridarK | reedip: hi | 06:36 |
| SridarK | yushiro: ok 1 - 3 are good | 06:37 |
| SridarK | I will let u +A in case u need to check on something | 06:37 |
| yushiro | reedip, Thanks :) SridarK I'm just updating how to deploy test environment.. | 06:38 |
| SridarK | So we will live with some limitation on the CLI - users can always use the API | 06:38 |
| SridarK | yushiro: no worries | 06:38 |
| SridarK | 5 still has issues with zuul | 06:39 |
| yushiro | SridarK, For more detail, client cannot run with a combination. --resource-type firewall_group --resource <ID of firewall group> for CLI. | 06:39 |
| SridarK | yushiro: yes and ur release note reflects that - as i just saw | 06:40 |
| yushiro | SridarK, OK. So, my answer is Yes. We need to use RESTAPI if we want to set specific firewall group for logging. | 06:41 |
| SridarK | ok | 06:41 |
| SridarK | and so on the CLI, what we can get is logging corresponding to a specified port | 06:42 |
| SridarK | but we cannot get logging corresponding to all ports that a fwg is on | 06:42 |
| yushiro | SridarK, We can specify portID as --target option. | 06:43 |
| SridarK | yes | 06:43 |
| SridarK | ok | 06:43 |
| yushiro | SridarK, If we run $openstack network log create --resource-type firewall_group my-log, All of L3 ports which is associated with firewall group are target. | 06:44 |
| yushiro | SridarK, reedip : https://github.com/longkb/logging/blob/master/Ingration%20guideline%20for%20logging%20service%20in%20FWaaS.rst | 06:44 |
| SridarK | yushiro: thx | 06:46 |
| yushiro | Here is recipe of logging environment for devstack. 1 NOTE. Please refer local.conf as document not paste.openstack.org. | 06:46 |
| yushiro | OK, go back to talk about logging target. | 06:46 |
| yushiro | For example, VM0(fwg1) ----- (fwg2)router0 ---- VM1 | 06:47 |
| yushiro | ah, sorry | 06:47 |
| yushiro | VM1(port1)(fwg1) ----- (fwg2)(port0)router0 ---- (port2)VM2 | 06:48 |
| yushiro | If we create log-resource with --target port1, then raised an exeption because L2 port hasn't supported yet. | 06:49 |
| yushiro | If we create log-resource with --target port0(router port), then log-resource should create with no error. | 06:50 |
| yushiro | If we create log-resource with no --target option, then log-resource should create with no error and port0 is targeted for logging. | 06:51 |
| yushiro | Regarding logging validator, I've tested above cases. | 06:51 |
| SridarK | yushiro: ok | 06:51 |
| yushiro | reedip, If you have bandwidth, it will be great if you try to deploy devstack and check some behavior :) | 06:54 |
| SridarK | yushiro: one question - if the fwg is associated with multiple ports | 06:55 |
| reedip | I can..., what do u need to check? | 06:55 |
| SridarK | yushiro: and if create a log-resource with no --target option | 06:55 |
| SridarK | then what happens ? | 06:55 |
| SridarK | are all ports associated with the fwg targetted for logging ? | 06:56 |
| yushiro | SridarK, Correct. However, if the fwg is associated with L2 port and L3 port, only L3 port are targeted for logging. | 06:56 |
| SridarK | yushiro: yes that is good | 06:57 |
| SridarK | but i think right now we prevent a fwg being on L3 and L2 ports | 06:57 |
| SridarK | same fwg on L3 & L2 ports | 06:57 |
| SridarK | but yes agreed that would be correct | 06:57 |
| yushiro | ah, yes. But I wonder we would implement some validation to avoid associating both L2 and L3... :p | 06:58 |
| yushiro | reedip, Basic logic for logging. We wrote fundamental scenario for logging at github page. | 06:58 |
| yushiro | reedip, BTW, what is your OS for devstack? | 06:59 |
| yushiro | SridarK, I tested and turned out that we can spceify both L2/L3 port on same firewall group. | 07:01 |
| SridarK | yushiro: i thought we had that validation before but no worries | 07:02 |
| yushiro | In this case, we can create log-resource with no --target. | 07:02 |
| SridarK | yushiro: i think for now that is okay | 07:02 |
| SridarK | lets not worry abt it | 07:02 |
| yushiro | SridarK, I see. But your point is reasonable. we need to consider it. | 07:02 |
| SridarK | yushiro: i think somewhere along the changes - this may have gotten updated - but we can re-evaluate in Stein | 07:03 |
| yushiro | SridarK, Yes. | 07:04 |
| yushiro | SridarK, BTW, regarding roadmap for fwaas, can we discuss today's IRC meeting ?? | 07:04 |
| SridarK | yushiro: yes lets do that | 07:04 |
| SridarK | or if we have to spend time on release or logging related - we can talk after the mtg | 07:05 |
| SridarK | during ur day time | 07:05 |
| SridarK | we need to have it by weekend i think | 07:06 |
| yushiro | SridarK, Yes. Miguel wants us within this week :) | 07:06 |
| SridarK | yushiro: on logging on the remaining 2 patches | 07:06 |
| yushiro | (2/6) [log]: Add rpc stuff for logging: https://review.openstack.org/530715 | 07:06 |
| hoangcx | yushiro: SridarK for patches got +2 from both of you, I think it is ok to +A to save time. Since sometime gate is :( | 07:07 |
| yushiro | (3/6) Adding resources callback handler for FWaaS v2 logging: https://review.openstack.org/580976 | 07:07 |
| SridarK | hoangcx: +1 yes better to do it soon before US daytime | 07:07 |
| SridarK | the gate will get more backlogged | 07:07 |
| SridarK | yushiro: so these 3 are ready to go | 07:08 |
| *** velizarx has joined #openstack-fwaas | 07:09 | |
| yushiro | SridarK, Yes, basic part is OK for me. I need to check carefully in driver side. | 07:09 |
| *** yamamoto has joined #openstack-fwaas | 07:11 | |
| yushiro | Other 3 patches are necessary to deploy devstack and check iptables in namespace... | 07:12 |
| yushiro | watch, tailf and journalctl commands helped me but my eyes are dried :p Haha | 07:12 |
| annp | yushiro :) | 07:13 |
| SridarK | yushiro: ok :-) | 07:21 |
| SridarK | so shall i check for patch 4 & patch 5 in my morn | 07:21 |
| *** yamamoto has quit IRC | 07:22 | |
| SridarK | before the mtg ? | 07:22 |
| reedip | yushiro : centos | 07:22 |
| yushiro | reedip, Perfect! | 07:23 |
| reedip | hmm | 07:23 |
| yushiro | reedip, I'm using Ubuntu16.04. So, it is very helpful. | 07:23 |
| SridarK | reedip: is now a redhat guy !! | 07:23 |
| reedip | what do I need to checkout | 07:23 |
| reedip | I mean the devstack configuration | 07:24 |
| SridarK | he may get into trouble with ubuntu distro ;-) | 07:24 |
| reedip | Oh sorry, I have CentOS on my Laptop, but have Ubuntu on the Devstack VM :P | 07:24 |
| yushiro | reedip, please check https://github.com/longkb/logging/blob/master/Ingration%20guideline%20for%20logging%20service%20in%20FWaaS.rst on Devstack local.conf section. | 07:24 |
| reedip | Nothing like that SridarK :D | 07:24 |
| SridarK | he he | 07:24 |
| reedip | Why is it Ingration ??? Wont it be Integration ?? | 07:25 |
| reedip | yushiro ^^ | 07:25 |
| longkb | oops | 07:25 |
| reedip | :P | 07:25 |
| SridarK | +1 | 07:25 |
| reedip | :D | 07:25 |
| yushiro | reedip, Good catch :D | 07:25 |
| longkb | Thanks for your reviewing kkk | 07:25 |
| longkb | :P | 07:25 |
| reedip | hehehe | 07:25 |
| reedip | Ok, I have that Link. Let me pull up devstack and see some stuff | 07:26 |
| SridarK | yushiro: let me know if u need me to stay up for patch 4 or 5 | 07:26 |
| SridarK | else i will go to bed and check in the morn | 07:26 |
| yushiro | reedip, Did you get a hat of red color? :) | 07:26 |
| reedip | waiting for it | 07:26 |
| reedip | :) | 07:26 |
| yushiro | SridarK, Thank you so much. | 07:27 |
| SridarK | yushiro: no worries at all | 07:27 |
| yushiro | SridarK, BTW, could you put +A for first 3 patches?? If you feel there is no problem. | 07:28 |
| yushiro | As hoangcx said, gate is not stable ... | 07:28 |
| SridarK | yushiro: sure no issue - i thought u would +A | 07:28 |
| yushiro | SridarK, Aha :) | 07:28 |
| yushiro | SridarK, Thanks. I forgot I was core :P | 07:28 |
| SridarK | i can if u want - i thought if u wanted to double check something | 07:29 |
| SridarK | yushiro: :-) i think u are very tired | 07:29 |
| yushiro | SridarK, Maybe Yes. I wanna sleep in a hammock :D | 07:29 |
| hoangcx | SridarK: yushiro has been working throughout for a week | 07:29 |
| SridarK | yushiro: :-) | 07:29 |
| SridarK | hoangcx: +1 | 07:30 |
| annp | yushiro: you're superman :) | 07:30 |
| yushiro | OK, if we finish testing another 3 patches, I'll ping you before IRC meeting. | 07:30 |
| longkb | Super Yushiro :P | 07:30 |
| SridarK | hoangcx: all of u have been doing a superb job | 07:30 |
| yushiro | Hahaha. thanks. I think fwaas team are all super for me :P | 07:31 |
| SridarK | :-) | 07:31 |
| SridarK | ok good then i will get some sleep - be up a bit early b4 IRC mtg | 07:31 |
| SridarK | yushiro: if u will be offline - just send an email to me | 07:32 |
| yushiro | SridarK, Sure!!!! Thank you. | 07:32 |
| longkb | Hi folks, I have updated the guideline. Please check it :) | 07:32 |
| longkb | https://github.com/longkb/logging/blob/master/integration_guideline_for_logging_service_in_FWaaS.rst | 07:32 |
| SridarK | ideally if we can get things in the queue before or during the mtg it will be good | 07:32 |
| SridarK | i will leave my IRC - so i can catch up quickly in a few hours | 07:33 |
| yushiro | OK, thanks. Good night. | 07:33 |
| longkb | good night SridarK :D | 07:33 |
| SridarK | yushiro: longkb annp hoangcx all thx | 07:33 |
| annp | SriarK, yushiro: thanks a ton. | 07:34 |
| *** velizarx has quit IRC | 07:46 | |
| annp | reedip: thanks for great help also :) | 07:50 |
| *** velizarx has joined #openstack-fwaas | 07:53 | |
| reedip | annp: I didnt do anything :D | 07:55 |
| annp | reedip, at least you reviewed for integration guide line :) | 07:58 |
| annp | reedip, thanks | 07:59 |
| reedip | eh , that was just a simple thing :) You guys have been so involved in the actual code, this is just a visual fix :) | 07:59 |
| annp | reedip: From my opinion, the document should be good at first to get more attractive from contributor. :) | 08:00 |
| reedip | :D | 08:01 |
| reedip | Thats true :) | 08:01 |
| annp | :) | 08:01 |
| reedip | I am running the devstack, lets see | 08:03 |
| reedip | yushiro: ping | 08:23 |
| reedip | annp: ping | 08:23 |
| yushiro | reedip, pong | 08:23 |
| reedip | Would the loggable resource be present once Devstack is finished? | 08:24 |
| yushiro | Yes, you mean network loggable resources list ? | 08:25 |
| reedip | Yes | 08:25 |
| yushiro | Yes, you can run after deployed devstack. | 08:27 |
| reedip | Then there seems to be an issue...After the devstack run | 08:27 |
| reedip | $ openstack network loggable resources list | 08:27 |
| reedip | The resource could not be found. | 08:27 |
| reedip | Neutron server returns request_ids: ['req-c4869d8a-5218-4c9e-bba5-182f3806346d'] | 08:27 |
| reedip | Ok, checking some other stuff as well | 08:28 |
| yushiro | can you check /etc/neutron/neutron.conf and "log" exist on service_plugins ? | 08:28 |
| reedip | Yeah, checking that. Its not present | 08:28 |
| reedip | fixing it | 08:28 |
| reedip | Also, network_log is not present in the /etc/neutron/l3_agent.ini | 08:30 |
| reedip | but fwaas_v2_log is | 08:30 |
| yushiro | [network_log] is optional. If you'd like to output packet log to dedicated file, you can specify on /etc/neutron/l3_agent.ini with [network_log]local_output_log_base = /path/to/logfile | 08:31 |
| reedip | ohk | 08:34 |
| openstackgerrit | Merged openstack/neutron-fwaas master: Add log validator for FWaaS v2 logging https://review.openstack.org/532792 | 08:47 |
| openstackgerrit | Merged openstack/neutron-fwaas-dashboard master: Update reno for stable/rocky https://review.openstack.org/589982 | 08:52 |
| openstackgerrit | Merged openstack/neutron-fwaas-dashboard master: Imported Translations from Zanata https://review.openstack.org/590121 | 08:56 |
| openstackgerrit | Merged openstack/neutron-fwaas master: [log]: Add rpc stuff for logging https://review.openstack.org/530715 | 09:07 |
| openstackgerrit | Merged openstack/neutron-fwaas master: Adding resources callback handler for FWaaS v2 logging https://review.openstack.org/580976 | 09:07 |
| reedip | One change here : https://github.com/longkb/logging/blob/master/Ingration%20guideline%20for%20logging%20service%20in%20FWaaS.rst | 09:19 |
| reedip | Change "You can test firewall loging with the following arguments" to "You can test firewall logging with the following arguments" | 09:19 |
| yushiro | +1 reedip :) | 09:31 |
| longkb | fixed. Thanks reedip | 10:06 |
| *** wkite has joined #openstack-fwaas | 10:37 | |
| *** wkite has quit IRC | 10:37 | |
| openstackgerrit | Kim Bao Long proposed openstack/neutron-fwaas master: Add python binding for libnetfilter_log https://review.openstack.org/530694 | 10:44 |
| openstackgerrit | Kim Bao Long proposed openstack/neutron-fwaas master: [log] FWaaS L3 Logging driver based iptables https://review.openstack.org/553738 | 10:44 |
| openstackgerrit | Kim Bao Long proposed openstack/neutron-fwaas master: Add releasenote for FWaaS v2 logging https://review.openstack.org/589991 | 10:44 |
| openstackgerrit | Yushiro FURUKAWA proposed openstack/neutron-fwaas master: Add releasenote for FWaaS v2 logging https://review.openstack.org/589991 | 11:06 |
| *** yushiro has quit IRC | 11:18 | |
| reedip | Its no problem , I am just helping on the small stuff :) | 11:18 |
| *** longkb has quit IRC | 11:40 | |
| *** annp has quit IRC | 11:42 | |
| *** yamamoto has joined #openstack-fwaas | 11:57 | |
| *** velizarx has quit IRC | 12:13 | |
| *** velizarx has joined #openstack-fwaas | 12:15 | |
| xgerman_ | o/ | 13:01 |
| *** velizarx has quit IRC | 13:02 | |
| *** velizarx has joined #openstack-fwaas | 13:03 | |
| *** yushiro has joined #openstack-fwaas | 13:06 | |
| yushiro | Hi | 13:06 |
| reedip | \o | 13:11 |
| yushiro | reedip, Hi. I'm home and logged-in :) | 13:12 |
| reedip | yushiro : I am at home , attending meetings :D | 13:17 |
| yushiro | +1 | 13:19 |
| *** hoangcx_ has joined #openstack-fwaas | 13:30 | |
| yushiro | reedip, Again, congratus for working at RH! | 13:30 |
| reedip | :) | 13:30 |
| reedip | thanks .. | 13:30 |
| *** yamamoto has quit IRC | 13:31 | |
| yushiro | If you come to Japan, please ping me. Let's go hotspring or eating Sushi :p | 13:31 |
| reedip | I want to :) maybe next year . I will definitely ping you | 13:34 |
| yushiro | yeah | 13:36 |
| yushiro | I always play with Octavia's friend when he come back to Japan. Hehe. I'll introduce him :) | 13:37 |
| yushiro | introduce you to him ? ... introduce him to you ?? .. oh | 13:37 |
| reedip | both are same :) | 13:37 |
| reedip | in a way | 13:37 |
| yushiro | he he | 13:38 |
| *** reedip is now known as reedip|afk | 13:38 | |
| SridarK | yushiro: hi | 13:39 |
| xgerman_ | hi | 13:39 |
| SridarK | xgerman_: hi | 13:39 |
| SridarK | yushiro: how are things | 13:39 |
| *** annp has joined #openstack-fwaas | 13:39 | |
| *** njohnston has joined #openstack-fwaas | 13:40 | |
| yushiro | SridarK, xgerman_ hi | 13:40 |
| yushiro | Yeah, I've been testing all day :) Currently, all patches look good and +1 zuul. | 13:41 |
| SridarK | yushiro: ok | 13:42 |
| annp | yushiro, thanks a lot for your great review and testing. | 13:43 |
| annp | all patches look good now! | 13:44 |
| SridarK | #link https://review.openstack.org/#/c/530694/ | 13:44 |
| SridarK | good | 13:44 |
| yushiro | annp, NP. SridarK and xgerman_ also gave us great review. | 13:44 |
| SridarK | ready to +A ? | 13:44 |
| xgerman_ | annp: +1 | 13:44 |
| annp | SridarK, thanks! | 13:45 |
| annp | xgerman_, thanks. :) | 13:45 |
| yushiro | SridarK, Yes. ready :) | 13:45 |
| yushiro | xgerman_, BTW, python-neutonclient gate issue ( due to osc-lib) has fixed. Maybe zuul will smile if you rebased your patch. | 13:47 |
| SridarK | ok good on both patches | 13:49 |
| yushiro | Ah!! SridarK you had +2. I didn't realize. Thanks. | 13:49 |
| SridarK | xgerman_: anything u wanted to check ? | 13:49 |
| SridarK | before +A | 13:49 |
| yushiro | Yes, I'd like to ask xgerman_ about it as well. | 13:49 |
| xgerman_ | no, I am good | 13:49 |
| yushiro | xgerman_, Thanks. | 13:49 |
| *** longkb has joined #openstack-fwaas | 13:51 | |
| hoangcx_ | yushiro: Please +A the patches. Time is clocking | 13:52 |
| yushiro | OK, thanks SridarK and xgerman_ | 13:52 |
| longkb | I am having a dinner ^_^ | 13:52 |
| annp | longkb, me too :) | 13:52 |
| SridarK | hoangcx_: done | 13:53 |
| hoangcx_ | SridarK: Perfect! We were tested the patches for all today :) | 13:53 |
| annp | SridarK, thanks a ton. | 13:53 |
| yushiro | SridarK, xgerman_ releasenote patch is mine. So, could you review +2 and +A? https://review.openstack.org/#/c/589991 | 13:53 |
| SridarK | folks no issues | 13:54 |
| SridarK | yushiro: shd we wait for these 2 patches to merge before we +A the release note | 13:54 |
| yushiro | SridarK, OK | 13:54 |
| yushiro | I'm afraid of grammar... | 13:55 |
| xgerman_ | ok, can you fix the pep8 commnt | 13:56 |
| SridarK | yes - but looks like zuul gave a +1 | 13:56 |
| SridarK | but meantime while these 2 merge | 13:57 |
| yushiro | longkb, you though over 80 cols violates pep8 error, don't you? I think 80 cols is only source code. | 13:58 |
| yushiro | s/though/thought | 13:58 |
| longkb | Yeah, right :) | 13:58 |
| xgerman_ | ok, +A | 13:58 |
| longkb | I have check pep8 in releasenote, and it passed :D | 13:59 |
| yushiro | xgerman_, So, there is no problem I think :D | 13:59 |
| *** wkite has joined #openstack-fwaas | 13:59 | |
| amotoki_ | yushiro: if doc8 is enabled, it complains >80 char line | 13:59 |
| hoangcx_ | We need to keep watching in releases in case we missed something from amotoki_ | 14:00 |
| hoangcx_ | https://review.openstack.org/#/q/project:openstack/releases+status:open | 14:00 |
| annp | yushiro, but I think making it more pretty is good. :) | 14:00 |
| amotoki_ | but I think it is the case for code-blocks so it is not the case. | 14:00 |
| amotoki_ | hoangcx_: I haven't push a release patch yet | 14:00 |
| hoangcx_ | amotoki_: yeah. I have just wonder about that | 14:00 |
| amotoki_ | meeting time? | 14:00 |
| yushiro | amotoki_, I see. Thanks. aha, yes. | 14:01 |
| *** amotoki_ is now known as amotoki | 14:01 | |
| yushiro | OK, let's start | 14:01 |
| yushiro | #startmeeting fwaas | 14:01 |
| openstack | Meeting started Thu Aug 9 14:01:18 2018 UTC and is due to finish in 60 minutes. The chair is yushiro. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:01 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:01 |
| openstack | The meeting name has been set to 'fwaas' | 14:01 |
| yushiro | #chair SridarK xgerman_ | 14:01 |
| openstack | Current chairs: SridarK xgerman_ yushiro | 14:01 |
| yushiro | I'm sorry SridarK xgerman_ . Who is today's turn? I just forgot :p | 14:01 |
| yushiro | my turn ? | 14:02 |
| xgerman_ | I think with logging yushiro should take the turn. On the other hand I am gone the next two weeks | 14:02 |
| SridarK | no worries | 14:02 |
| yushiro | xgerman_, Sure. Thanks. | 14:02 |
| SridarK | yushiro: pls go ahead | 14:02 |
| yushiro | EYS! | 14:03 |
| yushiro | s/EYS/YES | 14:03 |
| yushiro | OK, let's start | 14:03 |
| yushiro | #topi announcements | 14:03 |
| yushiro | #topic announcements | 14:03 |
| yushiro | Today (9th) is the deadline for release. Miguel told us about that. | 14:04 |
| *** mlavalle has joined #openstack-fwaas | 14:04 | |
| mlavalle | o/ | 14:04 |
| annp | hi mlavalle | 14:04 |
| yushiro | mlavalle, Hi o/ | 14:04 |
| njohnston | o/ | 14:04 |
| SridarK | mlavalle: njohnston: hi | 14:04 |
| amotoki | seems time for o/ | 14:05 |
| SridarK | amotoki: hi | 14:05 |
| hoangcx_ | Indeed o/ | 14:05 |
| amotoki | :) | 14:05 |
| mlavalle | LOL | 14:05 |
| mlavalle | so I see 3 patches in flight | 14:06 |
| longkb | hi mlavalle :D | 14:06 |
| SridarK | mlavalle: :-) this is a tight race and very near the finish line | 14:06 |
| yushiro | mlavalle, Yes. But it just started so.. | 14:07 |
| SridarK | a prayer to the gate gods | 14:07 |
| amotoki | #link https://review.openstack.org/#/q/topic:bug/1720727+(status:open+OR+status:merged) | 14:07 |
| mlavalle | so we need the 3 patches in flight here? | 14:08 |
| yushiro | mlavalle, You're right. We need these patches. | 14:08 |
| mlavalle | ok, here's what I propose amotoki...... | 14:09 |
| -amotoki- is looking at the gate progress :) | 14:09 | |
| mlavalle | since it is getting late for you, why don't you push a release patch with what we have already merged and mark it wip | 14:09 |
| mlavalle | I will track down these 3 patches in flight during my day time | 14:10 |
| mlavalle | and if / when they land, I will amend the patch | 14:10 |
| mlavalle | does that work? | 14:10 |
| amotoki | okay, I am preparing a release patch. let you know it when i push it | 14:10 |
| amotoki | yes, it works fine | 14:10 |
| yushiro | +1 mlavalle and amotoki Thank you so much | 14:11 |
| mlavalle | amotoki: note that in Neutron https://review.openstack.org/#/c/589573 landed | 14:11 |
| amotoki | for the neutronclient patch, it is not covered to FFE. it will be a part of early Stein of neutronclient | 14:11 |
| amotoki | mlavalle: yeah, I know that. | 14:11 |
| yushiro | amotoki, OK, I see about client patch. | 14:12 |
| annp | amotoki, mlavalle: thanks a lot. | 14:12 |
| mlavalle | SridarK: my other request is that during the day, you stay reachable here, in case unexpected things arise and you and I need to talk | 14:12 |
| SridarK | mlavalle: will do | 14:12 |
| xgerman_ | I am around, too, if you need votes | 14:13 |
| yushiro | I will... | 14:13 |
| mlavalle | xgerman_: great! | 14:13 |
| mlavalle | to make things easier for me, I am using this query: https://review.openstack.org/#/q/status:open+project:openstack/neutron-fwaas+branch:master+topic:bug/1720727 | 14:13 |
| mlavalle | These are the 3 patches, right? | 14:13 |
| yushiro | mlavalle, Correct! | 14:14 |
| * mlavalle has a small brain that cannot handle lists with more than 3 items ;-) | 14:14 | |
| SridarK | :-) | 14:14 |
| annp | mlavalle :-) | 14:14 |
| yushiro | haha :) | 14:15 |
| amotoki | it looks simple as we can check whether the number of patches is empty or not :) heh | 14:15 |
| SridarK | What is a list ? :-) | 14:15 |
| mlavalle | ok, this looks like a plan for the day in the US | 14:15 |
| SridarK | hopefully these will merge soon | 14:15 |
| mlavalle | yushiro, annp, hoangcx_, longkb, SridarK: thanks for your efforts! hopefully we will wrestle this thing into submission today | 14:16 |
| mlavalle | and thanks to amotoki for his patience :-) | 14:17 |
| longkb | mlavalle: sure :D | 14:17 |
| amotoki | no worries. we are the community for a same goal :) | 14:17 |
| annp | mlavalle: thanks. :) | 14:17 |
| yushiro | mlavalle, amotoki You too. Super appreciated at any time anywhere :) | 14:18 |
| annp | amotoki, +100 | 14:18 |
| xgerman_ | +1 | 14:18 |
| SridarK | +1 | 14:19 |
| yushiro | OK, I hope their flight are safety and a little earlier. | 14:20 |
| mlavalle | ok guys, running to pay attention to something else | 14:21 |
| SridarK | mlavalle: thx for the support as always | 14:21 |
| mlavalle | have a good night / day | 14:21 |
| yushiro | Thanks mlavalle | 14:21 |
| yushiro | OK, let's continue | 14:22 |
| yushiro | #topic Rocky | 14:22 |
| yushiro | Almost finished ! | 14:23 |
| amotoki | yushiro: could you share the link of the meeting agenda etherpad? | 14:23 |
| yushiro | amotoki, OK | 14:23 |
| yushiro | #link https://etherpad.openstack.org/p/fwaas-meeting | 14:23 |
| SridarK | So one request with the lot of changes going in | 14:23 |
| amotoki | thanks | 14:23 |
| yushiro | SridarK, yes. | 14:23 |
| SridarK | to have some sanity testing done with the RC | 14:23 |
| SridarK | to make sure our basic functionality works including the datapath | 14:24 |
| yushiro | SridarK, +1 | 14:24 |
| SridarK | just in case there is some regression | 14:24 |
| yushiro | #agree it is really important point. | 14:25 |
| yushiro | SridarK, Currently, our repository refers a master branch of neutron for zuul job(sphinx-docs, lower-constraints) | 14:26 |
| yushiro | After released neutron-rc1, is it better to revert to use pip package of neutron? | 14:27 |
| SridarK | yushiro: yes i know u had to do this with amotoki | 14:27 |
| amotoki | It is okay with either. | 14:27 |
| yushiro | For testing perspective, I think it's better. | 14:28 |
| amotoki | if you use pip package of neutron, you are not affected by a sudden master change in neutorn | 14:28 |
| amotoki | if you consume master neutron, you don't need to wait milestone/rc releases | 14:28 |
| amotoki | they are pros and cons, so it is up to the team | 14:28 |
| yushiro | amotoki, yes. I'd like to discuss with you, SridarK and xgerman_ about that. | 14:29 |
| SridarK | amotoki: are there implications once the release happens ? | 14:29 |
| amotoki | SridarK: could you elaborate a bit more? I didn't get you | 14:30 |
| SridarK | amotoki: sorry i would think we want to be associated with the pip package on release | 14:31 |
| hoangcx_ | SridarK: AFAIK, neutron and fwaas released together. So, we don;t need to care about it | 14:31 |
| SridarK | hoangcx_: ok got it | 14:31 |
| hoangcx_ | SridarK: That is the reason amotoki said either way is OK | 14:32 |
| amotoki | hoangcx_: correct | 14:32 |
| SridarK | ok thx just want to be sure | 14:32 |
| amotoki | yeah, that's the point which usually confuses us | 14:32 |
| hoangcx_ | I vote for the master based :p | 14:33 |
| SridarK | no thx for clarifying | 14:33 |
| yushiro | What about neutron-lib ? | 14:33 |
| amotoki | there is one tricky point when we use neutron master. | 14:34 |
| amotoki | tox jobs (like py27/py35 and so on) works as-is in the gate | 14:34 |
| yushiro | Yes | 14:34 |
| amotoki | but you need to install neutron master manaully after creating tox env | 14:34 |
| amotoki | to pass py27/py35 tests | 14:35 |
| hoangcx_ | yushiro: AFAIK, neutron-lib is considered as library. So we can't do with master | 14:35 |
| yushiro | hoangcx_, OK. | 14:35 |
| amotoki | hoangcx_: yes, this case is considered as corner case | 14:35 |
| amotoki | neutron-lbi exposes an interfaces | 14:36 |
| amotoki | in this case, we depends on internal behaviors of neutron which is not exposed as an interface, so we needed to use neutron master. | 14:36 |
| reedip|afk | o/ | 14:36 |
| amotoki | so it sometimes happens | 14:37 |
| yushiro | OK, I see. | 14:37 |
| -amotoki- wonders how reedip|afk can type even though afk | 14:38 | |
| hoangcx_ | LOL | 14:38 |
| longkb | :)) | 14:38 |
| SridarK | he he :-) | 14:38 |
| yushiro | I think he is typing with magic arm :) | 14:38 |
| amotoki | he might type with voice :) | 14:39 |
| yushiro | haha | 14:39 |
| yushiro | OK, so, I think it's better to keep on using master branch of neutron. | 14:40 |
| amotoki | returning to the topic, we don't need to care lower bound of neutron pypi | 14:40 |
| amotoki | as neutron and fwaas are released together. | 14:40 |
| yushiro | Ok | 14:40 |
| amotoki | what was the problem in the docs job? | 14:41 |
| *** hongbin has joined #openstack-fwaas | 14:41 | |
| hoangcx_ | amotoki: the docs job encountered tricky issue | 14:41 |
| yushiro | amotoki, Even if we referred master neutron, apidoc doesn't refer master but old version of neutron. | 14:41 |
| hoangcx_ | amotoki: I tried to ask in #openstack-infra for help but no luck | 14:42 |
| hoangcx_ | http://eavesdrop.openstack.org/irclogs/%23openstack-infra/%23openstack-infra.2018-08-08.log.html#t2018-08-08T01:15:01 | 14:42 |
| amotoki | ah... docs and releasenotes jobs are different from other jobs | 14:42 |
| amotoki | they might not honor required-projects | 14:43 |
| amotoki | we need to check openstack-zuul-jobs (and/or zuul-jobs) carefully | 14:43 |
| yushiro | maybe it still refers pip package... | 14:43 |
| amotoki | yeah, perhaps so | 14:43 |
| yushiro | Thanks hoangcx_ for your research :) | 14:44 |
| amotoki | so perhaps do we need to drop required-project for the docs job and revert some workaround after RC1 cut? | 14:44 |
| hoangcx_ | amotoki: yes. That will be my task | 14:45 |
| hoangcx_ | amotoki: because I proposed it :p | 14:45 |
| amotoki | thnx for clarfication | 14:45 |
| yushiro | Regarding docs job, we should drop required-project. | 14:46 |
| hoangcx_ | yushiro: no worries, I will do it | 14:46 |
| yushiro | Ah, sorry. yes, it's OK. | 14:46 |
| yushiro | hoangcx_, thanks | 14:46 |
| yushiro | Good discussion. THanks | 14:47 |
| yushiro | today, let me skip specs topics and talk about horizon first | 14:48 |
| yushiro | #topic Horizon support | 14:48 |
| yushiro | amotoki, Thanks for pushing some patches. | 14:48 |
| amotoki | I just push maintenance patches :) | 14:49 |
| amotoki | neutron-fwaas-dashboard rocky was released yesterday and the stable branch was cut | 14:50 |
| yushiro | I'll definitely check them. | 14:50 |
| SridarK | We need to add work items for Stein - i think we have a few things that need to be covered | 14:50 |
| yushiro | SridarK, +1 horizon is also work item :) | 14:51 |
| amotoki | logging support might be a feature gap which should go to horizon repo. | 14:51 |
| hoangcx_ | Do we have plan to meet in person for next PTG? | 14:52 |
| yushiro | Currently, I don't have any plan but want to talk with amotoki and horizon team about that. | 14:53 |
| yushiro | oh, 5 minutes left. | 14:54 |
| yushiro | #topic Open Discussion | 14:54 |
| yushiro | Today, I'd like to talk about fwaas roadmap for Stein. | 14:54 |
| yushiro | s/talk/discuss | 14:54 |
| amotoki | i have one thing to raise | 14:55 |
| yushiro | amotoki, go a head | 14:55 |
| amotoki | as of now, neutron server fails to start when we enable both neutron fwaas and vpnaas. | 14:56 |
| yushiro | oh | 14:56 |
| amotoki | service provider configurations fail to be loaded. | 14:56 |
| amotoki | it would be nice if someone can look into the detail. | 14:56 |
| yushiro | amotoki, o/ Is there bug-report? | 14:57 |
| amotoki | at least neutron log says FIREWALL_V2 cannot be found, but vpnaas devstack might override the service provider. | 14:57 |
| amotoki | yushiro: not yet | 14:57 |
| amotoki | I just noticed it when preparing horizon for translation check | 14:57 |
| hoangcx_ | amotoki: with latest neutron and enable fwaas_v2,vpnaas together? | 14:57 |
| SridarK | yushiro: i just added a section to the meeting etherpad for stein topics | 14:57 |
| njohnston | implementing fwaas as an agent extension was supposed to avoid that issue | 14:57 |
| SridarK | njohnston: +1 | 14:58 |
| njohnston | I wonder how vpnaas's binding into the neutron agent is implemented | 14:58 |
| annp | njohnston, ++ | 14:58 |
| SridarK | i am not sure if such an effort happend with vpnaas | 14:58 |
| yushiro | SridarK, +100 | 14:58 |
| yushiro | hoangcx_, Do you know about that? | 14:58 |
| hoangcx_ | njohnston: the same for vpnaas, I am the one who implemented that | 14:58 |
| amotoki | hoangcx_: yes, for example local.conf http://paste.openstack.org/show/727445/ | 14:58 |
| SridarK | hoangcx_: ah ok | 14:59 |
| njohnston | hoangcx_: excellent! good to have the original author. :-) | 14:59 |
| hoangcx_ | amotoki: I will try with that tomorrow | 15:00 |
| amotoki | hoangcx_: thanks | 15:00 |
| yushiro | Oh, it's time. | 15:00 |
| yushiro | #endmeeting | 15:00 |
| openstack | Meeting ended Thu Aug 9 15:00:39 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:00 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/fwaas/2018/fwaas.2018-08-09-14.01.html | 15:00 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/fwaas/2018/fwaas.2018-08-09-14.01.txt | 15:00 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/fwaas/2018/fwaas.2018-08-09-14.01.log.html | 15:00 |
| SridarK | thx all | 15:00 |
| SridarK | yushiro: will keep an eye on the patches | 15:00 |
| yushiro | SridarK, Thanks. I will as much as possible :) | 15:01 |
| SridarK | yushiro: may be good if u check in here when u wake up | 15:01 |
| yushiro | SridarK, Thanks ! | 15:01 |
| SridarK | in case we have some difficulty | 15:01 |
| SridarK | fingers crossed | 15:01 |
| yushiro | yeah | 15:01 |
| yushiro | hoangcx_, I have one question. | 15:02 |
| yushiro | about vpnaas | 15:02 |
| yushiro | now, I've deployed devstack with fwaas. (no vpnaas) | 15:02 |
| *** Swami has joined #openstack-fwaas | 15:03 | |
| yushiro | In order to enable vpnaas, should I clone vpnaas and 'sudo python setup.py install' and configure service_plugins... anything else?? | 15:03 |
| yushiro | Ah, forgot to restart agents. | 15:03 |
| hoangcx_ | yushiro: https://docs.openstack.org/neutron/latest/admin/vpnaas-scenario.html | 15:04 |
| yushiro | hoangcx_, perfect | 15:06 |
| yushiro | hoangcx_, In my environment, q-svc could restart | 15:14 |
| yushiro | with fwaas and vpnaas | 15:14 |
| yushiro | However, | 15:15 |
| hoangcx_ | yushiro: what amotoki means is that he tried to build with devstack with http://paste.openstack.org/show/727445/ . Not manual after you have fwaas_v2 in hand already | 15:16 |
| amotoki | hoangcx_: exactlly | 15:16 |
| *** wkite has quit IRC | 15:17 | |
| yushiro | I see. | 15:18 |
| *** hoangcx_ has quit IRC | 15:20 | |
| openstackgerrit | Merged openstack/neutron-fwaas master: Add python binding for libnetfilter_log https://review.openstack.org/530694 | 15:24 |
| yushiro | yes!!!! | 15:24 |
| longkb | great!!! | 15:24 |
| annp | wow | 15:25 |
| longkb | let's pray for the rest :D | 15:25 |
| annp | :) | 15:25 |
| yushiro | Yes, | 15:28 |
| yushiro | longkb, annp hoangcx Thanks for your great work, again. | 15:28 |
| annp | We did it. :) | 15:28 |
| *** reedip|afk is now known as reedip | 15:29 | |
| longkb | We did it together :) super yushiro :D | 15:29 |
| annp | yushiro, thank you super hero yushiro. :) | 15:30 |
| openstackgerrit | Merged openstack/neutron-fwaas master: [log] FWaaS L3 Logging driver based iptables https://review.openstack.org/553738 | 15:30 |
| openstackgerrit | Merged openstack/neutron-fwaas master: Add releasenote for FWaaS v2 logging https://review.openstack.org/589991 | 15:30 |
| annp | Done! | 15:30 |
| longkb | wow | 15:31 |
| longkb | congrad guys :D | 15:31 |
| amotoki | all patches landed :) | 15:32 |
| yushiro | Wow, faster! | 15:33 |
| yushiro | longkb, annp you too :) | 15:33 |
| mlavalle | https://review.openstack.org/#/q/status:open+project:openstack/neutron-fwaas+branch:master+topic:bug/1720727 GONE WITH THE WIND!!!!! | 15:36 |
| mlavalle | Great job | 15:36 |
| yushiro | mlavalle, we did it! thanks! | 15:37 |
| longkb | mlavalle: thanks a lot :D | 15:37 |
| annp | mlavalle: ++ | 15:38 |
| longkb | +oo thanks to annp, yushiro | 15:38 |
| mlavalle | SridarK, xgerman_: everything landed. we are good | 15:39 |
| xgerman_ | sweet!!! | 15:39 |
| yushiro | SridarK, xgerman_ yeah :) | 15:40 |
| annp | I need more challenges beside logging :) | 15:41 |
| yushiro | :) | 15:43 |
| annp | yushiro, I guess you need to sleep now :) | 15:44 |
| annp | Thanks for great work. Good night everyone. | 15:45 |
| longkb | +2 annp. Our super yushiro has work 1000% this week :D | 15:45 |
| longkb | Good night yushiro :D | 15:45 |
| annp | longkb: Yessss! | 15:45 |
| *** annp has quit IRC | 15:46 | |
| longkb | bye guys :D | 15:51 |
| *** longkb has quit IRC | 15:55 | |
| *** SumitNaiksatam has quit IRC | 15:59 | |
| yushiro | amotoki, I hit same exeption " No providers specified for 'FIREWALL_V2' service, exiting" | 16:09 |
| yushiro | Could not load neutron_vpnaas.services.vpn.service_drivers.ipsec.IPsecVPNDriver | 16:11 |
| yushiro | command line: /usr/local/bin/neutron-server --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini --config-file /etc/neutron/neutron_vpnaas.conf | 16:12 |
| yushiro | neutron_fwaas.conf didn't load. | 16:13 |
| *** velizarx has quit IRC | 16:16 | |
| amotoki | yushiro: surprisingly, if you only enable fwaas in local.conf, you don't see neutron_fwaas.conf in the command line of neutorn-server. | 16:18 |
| amotoki | yushiro: http://paste.openstack.org/show/727750/ | 16:18 |
| amotoki | yushiro: however, fwaas v2 API works well. | 16:18 |
| amotoki | yushiro: I am wondering how service provider for fwaas v2 is configured or it is not necessary. | 16:19 |
| yushiro | amotoki, Yes. there is no neutron_fwaas.conf with --config-file option. | 16:19 |
| yushiro | amotoki, me too.. | 16:20 |
| amotoki | yushiro: I see no neutron_fwaas.conf with fwaas without vpnaas. is it expected? | 16:21 |
| yushiro | I think no. It should be loaded as --config-file for q-svc. | 16:21 |
| amotoki | i haven't checked in case of q-svc. | 16:22 |
| amotoki | I now use neutron-api in local.conf (and disable q-svc) | 16:22 |
| yushiro | ah, sorry. neutron-api was correct. | 16:26 |
| yushiro | I just editted devstack@neutron-api and added --config-file /etc/neutron/neutron_fwaas.conf, then it worked correctly. | 16:27 |
| yushiro | Maybe devstack plugin.sh in fwaas has some issue... | 16:28 |
| yushiro | I'll check it tomorrow again :p | 16:28 |
| yushiro | Thanks amotoki | 16:28 |
| yushiro | good night! | 16:28 |
| *** yushiro has quit IRC | 16:28 | |
| *** hongbin has quit IRC | 16:37 | |
| *** Swami has quit IRC | 16:37 | |
| SridarK | mlavalle: great all good so we are set | 16:42 |
| SridarK | hats off to yushiro annp hoangcx longkb | 16:43 |
| xgerman_ | +10000 | 16:46 |
| reedip | o/ | 16:57 |
| *** reedip has quit IRC | 17:14 | |
| *** SridarK has quit IRC | 17:20 | |
| *** SumitNaiksatam has joined #openstack-fwaas | 18:00 | |
| *** SridarK has joined #openstack-fwaas | 19:02 | |
| *** SumitNaiksatam has left #openstack-fwaas | 19:25 | |
| *** njohnston has quit IRC | 21:19 | |
| openstackgerrit | OpenStack Release Bot proposed openstack/neutron-fwaas master: Update reno for stable/rocky https://review.openstack.org/590567 | 21:53 |
| *** yamamoto has joined #openstack-fwaas | 22:04 | |
| *** mlavalle has left #openstack-fwaas | 22:13 | |
| *** yamamoto has quit IRC | 22:21 | |
| *** SridarK has quit IRC | 22:26 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!