*** vkozhukalov has joined #openstack-neutron | 00:10 | |
*** networkstatic has joined #openstack-neutron | 00:13 | |
*** harlowja_away is now known as harlowja | 00:31 | |
*** harlowja is now known as harlowja_away | 00:32 | |
*** vkozhukalov has quit IRC | 00:40 | |
*** dims has quit IRC | 01:02 | |
*** dims has joined #openstack-neutron | 01:03 | |
*** banix has joined #openstack-neutron | 01:12 | |
*** layer427expert has joined #openstack-neutron | 01:12 | |
*** dave_tucker is now known as dave_tucker_zzz | 01:32 | |
*** banix has quit IRC | 01:32 | |
*** nati_ueno has joined #openstack-neutron | 01:55 | |
*** clev has joined #openstack-neutron | 02:36 | |
*** markwash has joined #openstack-neutron | 02:39 | |
*** nati_ueno has quit IRC | 03:07 | |
*** nati_ueno has joined #openstack-neutron | 03:09 | |
*** clev has quit IRC | 03:16 | |
*** networkstatic has quit IRC | 03:42 | |
*** networkstatic has joined #openstack-neutron | 03:42 | |
*** dguitarbite_ has joined #openstack-neutron | 03:45 | |
*** mrsnivvel has joined #openstack-neutron | 04:11 | |
*** Mierdin has joined #openstack-neutron | 04:18 | |
*** harlowja_away has quit IRC | 04:27 | |
*** ashaikh has joined #openstack-neutron | 04:59 | |
*** mrsnivvel has quit IRC | 05:00 | |
*** mrsnivvel has joined #openstack-neutron | 05:01 | |
*** mrsnivvel has quit IRC | 05:02 | |
*** mrsnivvel has joined #openstack-neutron | 05:03 | |
*** chandankumar has joined #openstack-neutron | 05:03 | |
*** chandankumar has quit IRC | 05:25 | |
*** markwash has quit IRC | 05:34 | |
openstackgerrit | Dazhao Yu proposed a change to openstack/neutron: Calculate stateless IPv6 address https://review.openstack.org/56184 | 05:42 |
---|---|---|
*** markwash has joined #openstack-neutron | 05:49 | |
*** ashaikh has quit IRC | 05:58 | |
*** ashaikh has joined #openstack-neutron | 06:03 | |
*** markwash has quit IRC | 06:25 | |
*** yfried has joined #openstack-neutron | 06:26 | |
*** ashaikh has quit IRC | 06:34 | |
openstackgerrit | Jenkins proposed a change to openstack/neutron: Imported Translations from Transifex https://review.openstack.org/63877 | 06:36 |
*** sc68cal has quit IRC | 06:38 | |
*** ashaikh has joined #openstack-neutron | 06:52 | |
*** garyk has joined #openstack-neutron | 07:03 | |
*** sc68cal has joined #openstack-neutron | 07:13 | |
*** sc68cal has quit IRC | 07:15 | |
openstackgerrit | A change was merged to openstack/neutron: Add post-mortem debug option for tests https://review.openstack.org/43776 | 07:27 |
*** irenab_ has joined #openstack-neutron | 07:28 | |
*** ashaikh has quit IRC | 07:32 | |
*** nati_ueno has quit IRC | 07:39 | |
*** nati_ueno has joined #openstack-neutron | 07:40 | |
*** nati_ueno has quit IRC | 07:44 | |
*** sc68cal has joined #openstack-neutron | 07:46 | |
*** chandankumar has joined #openstack-neutron | 07:57 | |
*** zz_ajo is now known as ajo | 08:01 | |
*** chandankumar has quit IRC | 08:02 | |
*** evgenyf has joined #openstack-neutron | 08:06 | |
*** gongysh has joined #openstack-neutron | 08:16 | |
*** lowkey has quit IRC | 08:20 | |
*** lowk3y has joined #openstack-neutron | 08:21 | |
*** chandankumar has joined #openstack-neutron | 08:41 | |
openstackgerrit | Jianing Yang proposed a change to openstack/neutron: Implement basic functionalities for port forwarding https://review.openstack.org/60512 | 08:45 |
*** irenab_ has quit IRC | 08:49 | |
*** zhhuabj has joined #openstack-neutron | 08:58 | |
*** salv-orlando has quit IRC | 09:00 | |
*** safchain has joined #openstack-neutron | 09:08 | |
*** Qlawy has quit IRC | 09:32 | |
*** Qlawy has joined #openstack-neutron | 09:34 | |
openstackgerrit | garyk proposed a change to openstack/neutron: Update RPC code from oslo https://review.openstack.org/64419 | 09:48 |
openstackgerrit | Evgeny Fedoruk proposed a change to openstack/neutron: Multiple service providers with same driver https://review.openstack.org/64139 | 09:49 |
openstackgerrit | garyk proposed a change to openstack/neutron: Update RPC code from oslo https://review.openstack.org/64419 | 09:53 |
openstackgerrit | garyk proposed a change to openstack/neutron: Update RPC code from oslo https://review.openstack.org/64419 | 09:56 |
*** safchain has quit IRC | 09:57 | |
openstackgerrit | Jianing Yang proposed a change to openstack/neutron: Implement basic functionalities for port forwarding https://review.openstack.org/60512 | 09:58 |
*** dims has quit IRC | 10:06 | |
*** dims has joined #openstack-neutron | 10:09 | |
*** dguitarbite_ has quit IRC | 10:10 | |
*** dguitarbite_ has joined #openstack-neutron | 10:13 | |
yfried | SumitNaiksatam: ping\ | 10:14 |
SumitNaiksatam | yfried: hi | 10:14 |
yfried | SumitNaiksatam: can you log to *-qa? I would like to ask you some tempest questions | 10:15 |
SumitNaiksatam | yfried: i am about to hit the sack, its 2.15 AM in my time zone | 10:16 |
SumitNaiksatam | yfried: perhaps you can send me an email | 10:16 |
yfried | SumitNaiksatam: sorry. didn't know. where is that? can you point to someone else I could ask about FWaaS? | 10:17 |
SumitNaiksatam | yfried: i am PST | 10:17 |
*** sc68cal has quit IRC | 10:17 | |
SumitNaiksatam | yfried: i don't think anyone else working on FWaaS is currently online | 10:17 |
SumitNaiksatam | yfried: what's it about? | 10:18 |
yfried | your mail and review - I want to know if there's anywhere I can read about the status of FWaaS in tempest and list myself down to contribute some tests. Also - when will the gate be able to accept these test | 10:19 |
yfried | s | 10:19 |
SumitNaiksatam | yfried: were you able to get the tests to work in your local setup? | 10:21 |
yfried | SumitNaiksatam: ofcourse - wouldn't push them otherwise :) | 10:21 |
yfried | SumitNaiksatam: but I'm currently working on a RHOS-Havana | 10:22 |
SumitNaiksatam | yfried: so whats the problem with the gate? | 10:22 |
yfried | SumitNaiksatam: it doesn't have fwaas enabled and the tests fail | 10:22 |
yfried | SumitNaiksatam: I was told it broke down the gate last time it was enabled | 10:23 |
SumitNaiksatam | yfried: ah ok...i was aware that there was an explicit step to enable this | 10:24 |
*** sc68cal has joined #openstack-neutron | 10:24 | |
SumitNaiksatam | yfried: is this a configuration on the gate? | 10:24 |
*** safchain has joined #openstack-neutron | 10:25 | |
yfried | SumitNaiksatam: I think so - enable q-fwaas in devstack | 10:25 |
SumitNaiksatam | yfried: ah you mean, devstack | 10:25 |
SumitNaiksatam | yfried: okay, so we have fwaas support in devstack, i believe its a matter of telling the gate folks to add q-fwaas in their config | 10:26 |
SumitNaiksatam | yfried: localrc config that is | 10:26 |
SumitNaiksatam | yfried: i believe you did the same in your local setup? | 10:26 |
yfried | SumitNaiksatam: I didn't use devstack for this - I changed neturon.conf | 10:27 |
yfried | neutorn.conf | 10:28 |
SumitNaiksatam | yfried: ok | 10:28 |
SumitNaiksatam | yfried: but i think for the gate we would have to ask the qa folks to turn fwaas on, lets check with them, and they might instruct as to do a dry run using devstack and tempest to check if just turning it on breaks anything | 10:29 |
yfried | SumitNaiksatam: when you say qa folks - you mean tempest-core group? | 10:30 |
SumitNaiksatam | yfried: yeah | 10:30 |
SumitNaiksatam | yfried: actually, not sure, if its them or the infra team | 10:31 |
SumitNaiksatam | yfried: probably its the CI infra team | 10:31 |
yfried | SumitNaiksatam: I talked with clarkb in infra - he's afraid that it will break down again, and wants to know what has changed | 10:32 |
yfried | SumitNaiksatam: I was hoping you would know that | 10:32 |
SumitNaiksatam | yfried: again? | 10:33 |
yfried | SumitNaiksatam: but I've kept you long enough. | 10:33 |
SumitNaiksatam | yfried: i don't think fwaas was ever turned on | 10:33 |
yfried | SumitNaiksatam: just repeating what he said | 10:33 |
SumitNaiksatam | yfried: at least not that i know of | 10:33 |
SumitNaiksatam | yfried: do you want to start email thread with him and cc me as well? | 10:33 |
yfried | (09:32:37 PM) clarkb: the last time they enabled it the gate fell apart | 10:33 |
yfried | SumitNaiksatam: I did start an email thread - you responded to that | 10:34 |
SumitNaiksatam | yfried: yeah | 10:34 |
yfried | SumitNaiksatam: you are tired - you need to sleep... :) | 10:34 |
SumitNaiksatam | yfried: perhaps sending the email specifically to clarkb might catch his attention | 10:35 |
SumitNaiksatam | yfried: i don't think he in on now | 10:35 |
yfried | I think he has said his piece. I will ask him to respond to the mail. | 10:36 |
SumitNaiksatam | yfried: okay, anything else? | 10:36 |
yfried | SumitNaiksatam: just so I know - are you a neutron guy? you are part of FWaaS and you are unaware of the gate issue? | 10:36 |
yfried | SumitNaiksatam: trying to understand if this is something that was caught early and so - wasn't known to most. | 10:37 |
SumitNaiksatam | yfried: i am in neutron team, and also the sub team lead for fwaas, but i am not aware of the gate issue; no one in the fwaas sub team was in the loop on that (i might have missed emails on that if there were any) | 10:38 |
SumitNaiksatam | yfried: so it could be the case that this was caught early as you mention | 10:38 |
yfried | SumitNaiksatam: tnx. I will ask clarkb to explain this on the thread | 10:39 |
SumitNaiksatam | yfried: however there were no tempest tests for fwaas before this | 10:39 |
SumitNaiksatam | yfried: thanks for following up on this, i will get back to this tomorrow | 10:40 |
SumitNaiksatam | yfried: ttyl, bye | 10:40 |
yfried | SumitNaiksatam: I know. one last thing - do you know if there's anywhere I can register to write these tests apart from the summit pad | 10:40 |
SumitNaiksatam | yfried: we have a fwaas wiki page | 10:40 |
SumitNaiksatam | yfried: that has links to blueprints we are working on | 10:41 |
SumitNaiksatam | yfried: i was currently signed up for the api tests | 10:42 |
SumitNaiksatam | yfried: but you beat me to it, so go ahead and continue with your work | 10:42 |
yfried | SumitNaiksatam: please send me the link so it doesn't happen again | 10:42 |
SumitNaiksatam | yfried: #link https://wiki.openstack.org/wiki/Neutron/FWaaS | 10:43 |
yfried | SumitNaiksatam: tnx. good night | 10:44 |
SumitNaiksatam | yfried: bye | 10:45 |
*** gongysh has quit IRC | 10:45 | |
openstackgerrit | Sylvain Afchain proposed a change to openstack/neutron: Add param and iptables rules to protect dnsmasq ports https://review.openstack.org/61994 | 10:57 |
*** dims has quit IRC | 11:20 | |
*** dims has joined #openstack-neutron | 11:24 | |
*** amuller has joined #openstack-neutron | 11:26 | |
*** markwash has joined #openstack-neutron | 11:33 | |
*** irenab_ has joined #openstack-neutron | 11:36 | |
*** markwash has quit IRC | 11:37 | |
*** markwash has joined #openstack-neutron | 11:39 | |
*** Mierdin has quit IRC | 11:40 | |
*** markwash has quit IRC | 11:41 | |
*** fouxm_ has joined #openstack-neutron | 11:41 | |
*** Mierdin has joined #openstack-neutron | 11:42 | |
*** fouxm has quit IRC | 11:43 | |
*** fouxm_ is now known as fouxm | 11:46 | |
*** dims has quit IRC | 11:47 | |
*** fouxm_ has joined #openstack-neutron | 11:48 | |
*** dims has joined #openstack-neutron | 11:51 | |
*** fouxm_ has quit IRC | 11:53 | |
*** HenryG_ has joined #openstack-neutron | 12:00 | |
*** enikanorov__ has joined #openstack-neutron | 12:01 | |
*** dims has quit IRC | 12:05 | |
*** Qlawy_ has joined #openstack-neutron | 12:05 | |
*** zhhuabj has quit IRC | 12:06 | |
*** Qlawy has quit IRC | 12:06 | |
*** HenryG has quit IRC | 12:06 | |
*** AndreyGrebenniko has quit IRC | 12:06 | |
*** kruskakli has quit IRC | 12:06 | |
*** dguitarbite_ has quit IRC | 12:07 | |
*** enikanorov_ has quit IRC | 12:07 | |
*** larsks has quit IRC | 12:07 | |
*** AndreyGrebenniko has joined #openstack-neutron | 12:07 | |
*** dims has joined #openstack-neutron | 12:07 | |
*** dguitarbite__ has joined #openstack-neutron | 12:08 | |
*** amuller has quit IRC | 12:10 | |
*** amuller has joined #openstack-neutron | 12:10 | |
*** zhhuabj has joined #openstack-neutron | 12:11 | |
*** larsks has joined #openstack-neutron | 12:11 | |
*** Mierdin has quit IRC | 12:13 | |
*** dguitarbite__ has quit IRC | 12:14 | |
*** dguitarbite_ has joined #openstack-neutron | 12:17 | |
*** Qlawy_ is now known as Qlawy | 12:23 | |
*** Qlawy has joined #openstack-neutron | 12:24 | |
*** jroovers has joined #openstack-neutron | 12:25 | |
*** dims has quit IRC | 12:32 | |
*** dims has joined #openstack-neutron | 12:37 | |
openstackgerrit | Jianing Yang proposed a change to openstack/neutron: Implement basic functionalities for port forwarding https://review.openstack.org/60512 | 12:38 |
jroovers | hi anteaya, let me know when you are around - got a question about Montreal code sprint | 12:53 |
openstackgerrit | mouad benchchaoui proposed a change to openstack/neutron: Make the metadata namespace proxy transparent https://review.openstack.org/28137 | 12:59 |
*** mrsnivvel has quit IRC | 13:06 | |
*** ekarlso has quit IRC | 13:20 | |
*** ekarlso has joined #openstack-neutron | 13:20 | |
*** dave_tucker_zzz is now known as dave_tucker | 13:20 | |
*** mrsnivvel has joined #openstack-neutron | 13:23 | |
*** networkstatic is now known as networkstatic_zZ | 13:24 | |
*** banix has joined #openstack-neutron | 13:40 | |
*** banix has quit IRC | 13:57 | |
*** irenab_ has quit IRC | 13:58 | |
anteaya | I'm here | 14:00 |
*** dave_tucker is now known as dave_tucker_zzz | 14:01 | |
*** yfried has quit IRC | 14:06 | |
*** chandankumar has quit IRC | 14:12 | |
jroovers | anteaya, ok, let's continue here then :-) | 14:13 |
anteaya | thanks | 14:15 |
anteaya | so let's start from the beginning | 14:15 |
anteaya | what is happening | 14:15 |
jroovers | ok | 14:15 |
jroovers | so, initially I made some changes using this change | 14:16 |
jroovers | https://review.openstack.org/#/c/62867/ | 14:16 |
jroovers | related to Quotas negative testing | 14:16 |
anteaya | mlavalle: when you are around, https://etherpad.openstack.org/p/icehouse-summit-qa-neutron has grown too large to be useable, I am unable to open it | 14:18 |
anteaya | can you break it into more manageable pieces please | 14:18 |
anteaya | and also tell me how many lines it has grown to? We didn't know that etherpads have an upper bound | 14:19 |
anteaya | jroovers: and then? | 14:19 |
jroovers | so for this to work, I needed to make a few changes to the XML network Client to support the right API calls | 14:19 |
jroovers | enikanorov suggested however, to wait for another patch to merge first | 14:19 |
jroovers | that basically took care of that in a more generic way | 14:19 |
jroovers | that change has been merged now | 14:19 |
jroovers | so I wanted to adjust my change to incorporate that new code | 14:19 |
jroovers | but since I'm not really a Git genius, I couldn't get it to work like I wanted, and I was a little afraid to mess the change set up - so I created a new one | 14:19 |
jroovers | and abandoned the old one with a comment referring to the new one | 14:19 |
anteaya | jroovers: ah ha, this is were asking questions is the best way forward | 14:19 |
anteaya | *where | 14:19 |
anteaya | noone expects you to be a git genius | 14:20 |
jroovers | https://review.openstack.org/#/c/64434/ | 14:20 |
anteaya | but making sure that patches keep their history is very important, it saves time and is more efficient in the long run | 14:20 |
anteaya | because the new patch doesn't automatically link back to the old patch | 14:21 |
jroovers | mlavalle, I agree with anteyea, the file is also unusable to me | 14:21 |
anteaya | so the history is lost | 14:21 |
anteaya | or potentially lost | 14:21 |
anteaya | so what to do now | 14:22 |
jroovers | anteaya, well, now I just submitted to new patch, and it is in review | 14:22 |
anteaya | please join me in #openstack-infra | 14:22 |
*** WackoRobie has joined #openstack-neutron | 14:22 | |
jroovers | anteaya, new change: https://review.openstack.org/#/c/64434/ | 14:23 |
anteaya | jroovers: let's chat in #openstack-infra, please | 14:25 |
jroovers | anteaya, so I'm a little confused now - did I do right (i.e. is is ok?) to submit it as a new change | 14:25 |
anteaya | no | 14:25 |
jroovers | or should I have fixed it in the original change | 14:25 |
anteaya | please stop creating new changes to deal with git issues | 14:25 |
anteaya | please join me in #openstack-infra | 14:26 |
anteaya | waiting for you to join me in #openstack-infra | 14:28 |
*** aymenfrikha has joined #openstack-neutron | 14:29 | |
jroovers | anteaya, understood | 14:30 |
jroovers | anteaya, well, I don't know. We could leave it like this as it is not that big of a change or we could go back, reopen the old patch, figure out the required git changes, and abondon the current one. | 14:32 |
jroovers | anteaya, IMHO though, that will confuse even more | 14:32 |
anteaya | please join me in #openstack-infra | 14:32 |
anteaya | I'm waiting to discuss this with you in that channel | 14:33 |
anteaya | does this create a problem for you? | 14:34 |
jroovers | mlavalle, anteaya, I removed all the empty lines in the etherpad, it is good now: https://etherpad.openstack.org/p/icehouse-summit-qa-neutron | 14:43 |
jroovers | kinda annoying that etherpad automatically adds lines when you scroll though | 14:44 |
*** jroovers has quit IRC | 14:44 | |
*** sc68cal has quit IRC | 14:44 | |
*** pcm_ has joined #openstack-neutron | 14:45 | |
*** jroovers has joined #openstack-neutron | 14:46 | |
*** pcm_ has quit IRC | 14:48 | |
*** pcm_ has joined #openstack-neutron | 14:49 | |
*** safchain has quit IRC | 14:49 | |
*** sc68cal has joined #openstack-neutron | 14:50 | |
*** otherwiseguy has joined #openstack-neutron | 14:54 | |
*** dims has quit IRC | 14:56 | |
*** dims has joined #openstack-neutron | 14:57 | |
*** banix has joined #openstack-neutron | 14:57 | |
*** networkstatic_zZ has quit IRC | 15:01 | |
*** networkstatic has joined #openstack-neutron | 15:01 | |
anteaya | jroovers: the blank lines in the etherpad are an artifact of it having problems loading in a browser, possibly my browser | 15:06 |
anteaya | if I try to open it again, I would put money on those blank lines reappearing | 15:06 |
jroovers | anteaya: yeah, they seem to reappear | 15:06 |
anteaya | yeah | 15:06 |
jroovers | ctrl+shift+arrow right | 15:07 |
jroovers | selects all lines until the end | 15:07 |
jroovers | and then delete | 15:07 |
jroovers | not really a fix, but temporary workaround to make the etherpad usable | 15:07 |
*** yfried has joined #openstack-neutron | 15:13 | |
*** WackoRobie has quit IRC | 15:19 | |
*** WackoRobie has joined #openstack-neutron | 15:19 | |
*** safchain has joined #openstack-neutron | 15:28 | |
*** safchain has quit IRC | 15:29 | |
*** otherwiseguy has quit IRC | 15:29 | |
*** safchain has joined #openstack-neutron | 15:32 | |
*** jaypipes has joined #openstack-neutron | 15:56 | |
*** garyk has quit IRC | 15:57 | |
*** evgenyf has quit IRC | 16:03 | |
*** otherwiseguy has joined #openstack-neutron | 16:12 | |
*** dguitarbite_ has quit IRC | 16:16 | |
*** thedodd has joined #openstack-neutron | 16:17 | |
*** jroovers has quit IRC | 16:28 | |
*** mlavalle has joined #openstack-neutron | 16:30 | |
*** WackoRobie has quit IRC | 16:41 | |
*** lowk3y is now known as lowkey | 16:43 | |
*** WackoRobie has joined #openstack-neutron | 16:47 | |
*** SumitNaiksatam has quit IRC | 16:48 | |
*** WackoRobie has quit IRC | 16:48 | |
*** dave_tucker_zzz is now known as dave_tucker | 16:48 | |
*** mlavalle has quit IRC | 16:53 | |
*** dave_tucker is now known as dave_tucker_zzz | 16:53 | |
*** jhurlbert has joined #openstack-neutron | 17:01 | |
*** amuller has quit IRC | 17:24 | |
*** nati_ueno has joined #openstack-neutron | 17:29 | |
*** WackoRobie has joined #openstack-neutron | 17:33 | |
*** safchain has quit IRC | 17:33 | |
*** clev has joined #openstack-neutron | 17:41 | |
*** nati_ueno has quit IRC | 17:47 | |
*** nati_uen_ has joined #openstack-neutron | 17:47 | |
*** garyk has joined #openstack-neutron | 17:59 | |
*** WackoRobie has quit IRC | 17:59 | |
*** layer427expert has quit IRC | 18:04 | |
*** harlowja has joined #openstack-neutron | 18:14 | |
*** bladee has joined #openstack-neutron | 18:15 | |
*** bladee has quit IRC | 18:19 | |
*** alagalah has quit IRC | 18:23 | |
*** mlavalle has joined #openstack-neutron | 18:23 | |
*** clev has quit IRC | 18:27 | |
*** layer427expert has joined #openstack-neutron | 18:35 | |
*** Mierdin has joined #openstack-neutron | 18:39 | |
*** nati_ueno has joined #openstack-neutron | 18:40 | |
*** nati_uen_ has quit IRC | 18:42 | |
*** polfilm has joined #openstack-neutron | 18:49 | |
*** sdague has quit IRC | 18:50 | |
*** nati_ueno has quit IRC | 19:12 | |
*** nati_ueno has joined #openstack-neutron | 19:13 | |
*** SumitNaiksatam has joined #openstack-neutron | 19:17 | |
*** nati_ueno has quit IRC | 19:18 | |
*** polfilm has quit IRC | 19:22 | |
*** polfilm has joined #openstack-neutron | 19:23 | |
*** jroovers has joined #openstack-neutron | 19:26 | |
*** jorisroovers has joined #openstack-neutron | 19:27 | |
*** dave_tucker_zzz is now known as dave_tucker | 19:31 | |
*** jroovers has quit IRC | 19:31 | |
*** mlavalle has quit IRC | 19:35 | |
*** layer427expert has quit IRC | 19:36 | |
*** networkstatic is now known as networkstatic_zZ | 19:37 | |
*** garyk has quit IRC | 19:40 | |
*** WackoRobie has joined #openstack-neutron | 20:06 | |
*** nati_ueno has joined #openstack-neutron | 20:09 | |
yfried | SumitNaiksatam: hi | 20:12 |
yfried | SumitNaiksatam: sleep well? | 20:12 |
*** polfilm has quit IRC | 20:13 | |
SumitNaiksatam | yfried: hi | 20:14 |
yfried | SumitNaiksatam: This might be a stupid question, and if it is explained somewhere please just link to it, but - | 20:15 |
yfried | how is fwaas better than security groups? | 20:15 |
yfried | SumitNaiksatam: what can you get with fwaas that cannot be done by applying a secgroup to a router port? | 20:16 |
SumitNaiksatam | yfried: current fwaas is limited to perimeter firewall | 20:17 |
SumitNaiksatam | yfried: but that is just one default/reference implementation | 20:17 |
SumitNaiksatam | yfried: the api and resource model opens the possibility for supporting richer firewall backends and also opens the possibility of L2 and bump-in-the-wire firewalls | 20:18 |
yfried | SumitNaiksatam: I am unfamiliar with the 2 last things you mentioned. | 20:21 |
yfried | SumitNaiksatam: when you say "Open the possibility", do you mean - after significant changes to the existing feature? | 20:22 |
SumitNaiksatam | yfried: firewalls work in different modes depending on where they are inserted into the network | 20:22 |
SumitNaiksatam | yfried: we have a base resource model to support iptables-based firewalls | 20:23 |
yfried | SumitNaiksatam: meaning - based on series of allow/deny rules? | 20:23 |
yfried | SumitNaiksatam: ^iptables-based firewalls | 20:24 |
SumitNaiksatam | yfried: we plan to add several extensions like zones, address objects, application policies | 20:24 |
SumitNaiksatam | yfried: which will enable the richer use cases | 20:24 |
SumitNaiksatam | yfried: in addition we are trying to introduce the different insertion modes as well | 20:25 |
SumitNaiksatam | yfried: all firewall policies will ultimately break down to a sequence of rules | 20:25 |
yfried | SumitNaiksatam: cool. so right now it isn't different than applying secgroup to router port? Just making sure I'm not missing something | 20:25 |
SumitNaiksatam | yfried: we might support additional actions in addition to allow/deny in the future | 20:25 |
SumitNaiksatam | yfried: with sec groups you have to choose which port to apply the rules on | 20:27 |
SumitNaiksatam | yfried: with fwaas, you define the rules and policies, and the backend figures out what it needs to do | 20:28 |
SumitNaiksatam | yfried: with the current implementation of fwaas backend, the ultimate result might be very similar to what you descrive | 20:28 |
SumitNaiksatam | *describe | 20:28 |
*** nati_ueno has quit IRC | 20:29 | |
*** dave_tucker is now known as dave_tucker_zzz | 20:30 | |
*** nati_ueno has joined #openstack-neutron | 20:30 | |
yfried | SumitNaiksatam: ok. great. I will look into this on the blueprints. We were wondering about this at the office (both dev and qa ppl). Now I can give everyone an answer | 20:32 |
yfried | SumitNaiksatam: thank you for your patience | 20:32 |
yfried | SumitNaiksatam: I'm trying to create a devstack instance on a fedora19 VM to test fwaas | 20:33 |
SumitNaiksatam | yfried: sure | 20:33 |
yfried | SumitNaiksatam: I keep failing. do you have a localrc file I could try? | 20:33 |
SumitNaiksatam | yfried: whats the failure you see? | 20:34 |
yfried | SumitNaiksatam: I'm getting a cinder issue - lib/cinder:180 No suitable rootwrap found | 20:34 |
SumitNaiksatam | yfried: hmmm | 20:34 |
SumitNaiksatam | yfried: that should be unrelated to turning fwaas on | 20:34 |
yfried | SumitNaiksatam: I'm completely unfamiliar with devstack, as I usually work on rhos | 20:34 |
*** nati_ueno has quit IRC | 20:34 | |
yfried | SumitNaiksatam: I assume | 20:34 |
yfried | so | 20:34 |
SumitNaiksatam | yfried: okay, but how about trying with turning cinder to start with? | 20:35 |
SumitNaiksatam | yfried: turning off i meant | 20:35 |
yfried | SumitNaiksatam: I will | 20:35 |
*** alagalah has joined #openstack-neutron | 20:36 | |
SumitNaiksatam | yfried: adding q-fwaas to the list of enabled services should be all that you would need to do turn fwaas on | 20:36 |
SumitNaiksatam | yfried: i mean in the localrc | 20:37 |
yfried | SumitNaiksatam: AFAIK you need to add stuff to make neutron work, as it doesn't use it by default | 20:37 |
*** alagalah has quit IRC | 20:37 | |
yfried | SumitNaiksatam: I'm off to bed now. thank you for you time | 20:38 |
SumitNaiksatam | yfried: sure | 20:38 |
SumitNaiksatam | yfried: btw, i was curious, how were you planning to add sec group to the router port? | 20:38 |
SumitNaiksatam | yfried: we can catch up later | 20:38 |
yfried | SumitNaiksatam: you can sign a port to secgroup same as you do VM. now I really need to go | 20:39 |
SumitNaiksatam | yfried: ttyl, bye | 20:39 |
*** mtaylor is now known as mordred | 20:44 | |
*** WackoRobie has quit IRC | 20:45 | |
*** jmeridth has joined #openstack-neutron | 20:48 | |
*** WackoRobie has joined #openstack-neutron | 20:51 | |
*** sdague has joined #openstack-neutron | 20:54 | |
*** dave_tucker_zzz is now known as dave_tucker | 20:57 | |
*** otherwiseguy has quit IRC | 20:58 | |
*** nati_ueno has joined #openstack-neutron | 21:02 | |
*** pcm_ has quit IRC | 21:02 | |
*** WackoRobie has quit IRC | 21:18 | |
*** dave_tucker is now known as dave_tucker_zzz | 21:25 | |
*** layer427expert has joined #openstack-neutron | 21:29 | |
*** salv-orlando has joined #openstack-neutron | 21:30 | |
*** banix has quit IRC | 21:31 | |
*** dguitarbite_ has joined #openstack-neutron | 21:33 | |
*** networkstatic_zZ is now known as networkstatic | 21:34 | |
*** dguitarbite_ has quit IRC | 21:44 | |
*** dave_tucker_zzz is now known as dave_tucker | 21:52 | |
*** aymenfrikha has left #openstack-neutron | 21:54 | |
jorisroovers | hi everyone, just added some negative tests for neutron agent management to tempest. Any feedback/review is very much appreciated! https://review.openstack.org/#/c/64476/ | 21:54 |
*** otherwiseguy has joined #openstack-neutron | 21:55 | |
enikanorov__ | jorisroovers: afaik Sean Dague was -1 to new negative tests patches due to the effort of making the auto-generated from schema | 21:56 |
jorisroovers | enikanorov__, I was not aware | 21:57 |
jorisroovers | enikanorov__, mm, I'm afraid that will impact both the patches I worked on today | 21:57 |
jorisroovers | sdague, are you here? | 21:58 |
jorisroovers | enikanorov__, I just saw the remark about negative tests on https://etherpad.openstack.org/p/icehouse-summit-qa-neutron | 22:00 |
jorisroovers | enikanorov__, missed that before :( | 22:00 |
jorisroovers | anteaya, are you around for some advice? | 22:04 |
*** WackoRobie has joined #openstack-neutron | 22:29 | |
anteaya | jorisroovers: go ahead | 22:31 |
layer427expert | I have a question on unit tests... anyone around who can answer? | 22:32 |
jorisroovers | well anteaya, I'm looking for some guidance on where to focus next. I just heard from enikanorov__ that the negative API tests that I've been working on are going to be replaced by automatically generated tests | 22:33 |
anteaya | layer427expert: ask your question, if someone is able to respond they will up in | 22:33 |
*** WackoRobie has quit IRC | 22:33 | |
jorisroovers | anteaya, so I've already commit 3 patches, but haven't been able to get anything merged yet | 22:33 |
anteaya | jorisroovers: yes, the negative tests for tempest is a bit of a trip hazard | 22:33 |
jorisroovers | *commited | 22:33 |
anteaya | at one point, there was an exception for -neutron | 22:33 |
jorisroovers | anteaya, uhu, that is what I just learned | 22:33 |
anteaya | it seems that exception has closed, though I don't know when | 22:34 |
anteaya | I needed to see that you were willing to spend some time on tempest | 22:34 |
anteaya | so for selfish reasons, I needed you to continue | 22:34 |
anteaya | since that was your current direction | 22:34 |
jorisroovers | anteaya, ok... | 22:34 |
layer427expert | For LBAAS drivers there is not valid unit test for the main driver if you can not call utilize the appliance API. How can we construct an acceptable UNit test? | 22:34 |
anteaya | and you did learn how to rebase as well as learn how to ask questions | 22:34 |
anteaya | both very useful skills which will serve you well going forward | 22:35 |
jorisroovers | anteaya, yeah, I must admit that it is kinda frustrating hitting these walls | 22:35 |
anteaya | jorisroovers: given that I only have 2 days left before I am offline, I couldn't redirect you to something and then run away | 22:35 |
anteaya | jorisroovers: yes it is | 22:35 |
anteaya | I agree with you | 22:35 |
jorisroovers | anteaya, but at the same time, I've learned a tremendous amount already | 22:36 |
anteaya | good | 22:36 |
anteaya | jorisroovers: you have submitted 3 patches to gerrit | 22:36 |
anteaya | none have them have been commited yet, yes? | 22:36 |
jorisroovers | anteaya, correct, none have been merged | 22:36 |
anteaya | jorisroovers: okay, so at least doing the work you have done you have learned more about tempest than you did previously | 22:37 |
jorisroovers | anteaya, agreed :-) | 22:37 |
anteaya | jorisroovers: is there anything on the etherpad that speaks to you? | 22:37 |
* jorisroovers takes another look | 22:38 | |
jorisroovers | anteaya, well the API and scenario tests | 22:39 |
jorisroovers | anteaya, but it doesn't matter that much | 22:39 |
jorisroovers | I think the most important thing is to have a feeling of accomplishment before leaving for Montreal | 22:40 |
jorisroovers | anteaya, aka, getting something merged | 22:40 |
anteaya | jorisroovers: you can get something merged in Montreal | 22:40 |
anteaya | if you have a few patches up ready to be merged | 22:41 |
jorisroovers | anteaya, fair enough | 22:41 |
anteaya | so API or scenario? | 22:41 |
anteaya | which do you like? | 22:41 |
anteaya | layer427expert: can you find an example of a unit test in other drivers that would be a good example? | 22:41 |
jorisroovers | let's go for API as I have most familiarity with that, I'll spend some time later this week looking at how the scenario testing works | 22:41 |
anteaya | layer427expert: can you find anything in here? http://git.openstack.org/cgit/openstack/neutron/tree/neutron/tests/unit | 22:43 |
anteaya | jorisroovers: focusing on API is fine | 22:43 |
jorisroovers | anteaya, ok | 22:43 |
anteaya | jorisroovers: you can just concentrate on one API test to start | 22:43 |
anteaya | is there one specific API test you want to work on? | 22:43 |
layer427expert | I have been looking at them but it seems that there is little value in the test that I saw. | 22:43 |
anteaya | layer427expert: care to share the url of the test you saw? | 22:44 |
layer427expert | Looking at the radware test. http://git.openstack.org/cgit/openstack/neutron/tree/neutron/tests/unit/services/loadbalancer/drivers/radware/test_plugin_driver.py | 22:45 |
layer427expert | It seams that mocking up the driver device interaction is good but it actually does not fully test the system. | 22:46 |
anteaya | layer427expert: do expand your critque of this file | 22:46 |
*** networkstatic has quit IRC | 22:46 | |
jorisroovers | anteaya, mm, I think I'll need to do a little bit of reading about the exact functionality that is tested for most of them | 22:46 |
layer427expert | The code is fine in the file. | 22:46 |
*** networkstatic has joined #openstack-neutron | 22:47 | |
layer427expert | It is just the value of testing in a MOCK API environment. | 22:47 |
jorisroovers | anteaya, perhaps "5.1 Create a network from an administrative user specifying provider extended attributes" | 22:47 |
anteaya | layer427expert: please expand on your point | 22:47 |
anteaya | jorisroovers: put your name beside it and go to town | 22:47 |
layer427expert | Most of the errors that I have observed only come from the device side of the system. | 22:47 |
jorisroovers | anteaya, ok will do | 22:48 |
anteaya | jorisroovers: thank you | 22:48 |
anteaya | layer427expert: such as? | 22:48 |
layer427expert | sorry trying to have two conversations at once... | 22:48 |
anteaya | layer427expert: okay | 22:48 |
jorisroovers | anteaya, ok thanks. I'm gonna call it a day here, get myself a beer :-) | 22:49 |
layer427expert | The main point is if tempest test passes then what is the value of the unit test? | 22:49 |
anteaya | jorisroovers: enjoy | 22:49 |
anteaya | layer427expert: unit tests test the function | 22:49 |
anteaya | tempest tests test the api, or should once they are written | 22:49 |
jorisroovers | anteaya, thanks again for the help. I'm positive I'll get something merged soon. If I don't talk to you any more, see you in Montreal. Looking forward to it! | 22:50 |
anteaya | jorisroovers: awesome | 22:50 |
anteaya | my pleasure | 22:50 |
anteaya | consider me offline from Jan. 1st through to code sprint | 22:50 |
layer427expert | I get the but is the function not tested during the tempest testing? I understand why it is done in other context but the driver layer is the only layer that i am talking about. | 22:50 |
anteaya | it has to work for the tempest tests to return useful values | 22:52 |
anteaya | if it isn't tested by itself and the tempest test fails, on what level did the failure occur? | 22:52 |
layer427expert | So I guess the main point just around the driver layer is it double effort if tempest returns a pass? | 22:52 |
anteaya | I'm not clear on why you feel the driver layer should be given differential treatment for testing | 22:53 |
anteaya | please expand on this | 22:53 |
*** thedodd has quit IRC | 22:55 | |
layer427expert | because the point of the driver layer is to interact with a non native system. If the point of the unit test is to measure the reliability of the code then the tempest test should provide this since the native environment is present and has to be fully operational. With that said it was just a thought. | 22:55 |
anteaya | it fair to talk about testing and the purpose behind it | 22:56 |
anteaya | unfortunately I don't have the level of experience with drivers that you do | 22:57 |
anteaya | what I am seeing in -neutron as a whole is a lack of cohesiveness, especially regarding testing, since everyone seems to feel their code is an exception to the rule | 22:57 |
anteaya | so we have more exceptions that we have rules in the project | 22:58 |
anteaya | so that is the perspective that I am coming from | 22:58 |
layer427expert | I can appreciate that perspective. | 22:58 |
anteaya | thanks | 22:58 |
layer427expert | Neutron because of the (sw|hw) appliances makes it a special case in general. | 22:59 |
anteaya | and one of the overarching features of openstack is that the projects are integrated, meaning the code is tested together as a unit in the gate, before it can be merged | 22:59 |
anteaya | layer427expert: it is less of a special case than people want it to be | 23:00 |
layer427expert | :) | 23:00 |
anteaya | focusing on the value of of being integrated with the rest of the openstack projects | 23:00 |
anteaya | seems to be something that neutron contributors take for granted | 23:01 |
anteaya | rather than recognizing it is something that has to be focused on, with every commit | 23:01 |
anteaya | not treated as an afterthought for someone else to do, because "I am too busy with more important things. | 23:01 |
anteaya | " | 23:01 |
anteaya | because I/me/my code is an exception | 23:02 |
layer427expert | I would not say taken for granted. | 23:02 |
layer427expert | I would not say that people feel that they are special as much as question why something has to occur. | 23:03 |
layer427expert | It is about optimization. | 23:03 |
layer427expert | thanks | 23:03 |
*** layer427expert has quit IRC | 23:03 | |
anteaya | np | 23:03 |
sc68cal | anteaya: I usually say that you need unit tests AND tempest because python isn't going to stop you if you call a function with the incorrect # of arguements | 23:08 |
sc68cal | or the wrong order, etc. | 23:08 |
sc68cal | and unit tests is going to be the first place you catch it :) | 23:08 |
* sc68cal has done it thousands of times | 23:08 | |
*** jorisroovers has quit IRC | 23:10 | |
anteaya | sc68cal: good points | 23:11 |
anteaya | too bad layer427expert left before he could hear them | 23:11 |
anteaya | yes, the different layers of tests provide different functions | 23:12 |
anteaya | I'm still a bit foggy on the perspective of why drivers don't need to have unit tests | 23:12 |
anteaya | not that I would agree, but as a process toward understanding | 23:13 |
sc68cal | hmmm - which type of drivers do not have unit tests? | 23:14 |
sc68cal | the ones that just call Vendor APIs or devices? | 23:15 |
sc68cal | they should at least have unit tests to verify they create valid HTTP or RPC calls to their hardware/software | 23:15 |
anteaya | well I think the point was that they do, but that layer427expert was operating from the perspective that they are less than the most efficient approach | 23:16 |
anteaya | sc68cal: again, good point | 23:16 |
*** dave_tucker is now known as dave_tucker_zzz | 23:28 | |
*** RajeshMohan has joined #openstack-neutron | 23:29 | |
*** aymenfrikha has joined #openstack-neutron | 23:32 | |
*** dave_tucker_zzz is now known as dave_tucker | 23:39 | |
*** markwash has joined #openstack-neutron | 23:40 | |
*** clev has joined #openstack-neutron | 23:41 | |
openstackgerrit | Sukhdev Kapur proposed a change to openstack/neutron: This is just a test for Gerrit for third party testing- plz ignore https://review.openstack.org/62771 | 23:43 |
*** mili has joined #openstack-neutron | 23:50 | |
*** clev has quit IRC | 23:53 | |
*** banix has joined #openstack-neutron | 23:54 | |
*** mili has quit IRC | 23:57 | |
*** banix has quit IRC | 23:57 | |
*** banix has joined #openstack-neutron | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!