Friday, 2021-07-23

opendevreviewMerged openstack/neutron master: doc: Do not use dvr_snat on computes  https://review.opendev.org/c/openstack/neutron/+/80150305:26
opendevreviewliuxie proposed openstack/neutron master: [OVN] Implement router gateway IP QoS  https://review.opendev.org/c/openstack/neutron/+/74901207:04
*** rpittau|afk is now known as rpittau07:35
bcafarelralonsoh: hi looking at https://bugs.launchpad.net/neutron/+bug/1917487 is https://review.opendev.org/c/openstack/neutron/+/778735 worth backporting ? I don't remember if it fixed the issue completely or not (if yes we can probably update the LP)07:57
bcafarelthe mentioned pyroute2 change was long ago so if that fix helps in master it should probably be good for many stable branches07:58
ralonsohbcafarel, I think it gave some stability when creating namespaces07:58
ralonsohwe always had this problem in the CI07:58
ralonsohI think it's worth to backport it07:59
bcafarelralonsoh: ack thanks, I am on it then :)07:59
opendevreviewBernard Cafarelli proposed openstack/neutron stable/wallaby: Implement namespace creation method  https://review.opendev.org/c/openstack/neutron/+/80188008:01
opendevreviewBernard Cafarelli proposed openstack/neutron stable/victoria: Implement namespace creation method  https://review.opendev.org/c/openstack/neutron/+/80188108:01
opendevreviewBernard Cafarelli proposed openstack/neutron stable/ussuri: Implement namespace creation method  https://review.opendev.org/c/openstack/neutron/+/80188208:02
opendevreviewBernard Cafarelli proposed openstack/neutron stable/ussuri: Implement namespace creation method  https://review.opendev.org/c/openstack/neutron/+/80188208:09
opendevreviewBernard Cafarelli proposed openstack/neutron stable/train: Implement namespace creation method  https://review.opendev.org/c/openstack/neutron/+/80198808:11
opendevreviewBernard Cafarelli proposed openstack/neutron stable/ussuri: Implement namespace creation method  https://review.opendev.org/c/openstack/neutron/+/80188208:13
opendevreviewBernard Cafarelli proposed openstack/python-neutronclient master: Set ML2/OVS backend explicitly for functional job  https://review.opendev.org/c/openstack/python-neutronclient/+/80199709:27
viks__hi,  when creating a port, i see a option vnic type. i.e. `VNIC type for this port (direct | direct-physical | macvtap | normal | baremetal | virtio-forwarder, default: normal)`. I'm really not sure what is the use case of each of them... i tried to google around, but did not find any related info.. So where can i get more info on these things? basically i  want to understand what exactly these different option does?10:03
opendevreviewBernard Cafarelli proposed openstack/neutron stable/ussuri: Implement namespace creation method  https://review.opendev.org/c/openstack/neutron/+/80188210:56
opendevreviewBernard Cafarelli proposed openstack/neutron stable/train: Implement namespace creation method  https://review.opendev.org/c/openstack/neutron/+/80198810:57
opendevreviewSlawek Kaplonski proposed openstack/neutron master: DNM It's just a test of the tempest patch  https://review.opendev.org/c/openstack/neutron/+/80200811:25
opendevreviewyangjianfeng proposed openstack/neutron-lib master: Adds l3-ndp-proxy extension api definition  https://review.opendev.org/c/openstack/neutron-lib/+/74752311:28
opendevreviewyangjianfeng proposed openstack/neutron-lib master: Adds l3-ndp-proxy extension api definition  https://review.opendev.org/c/openstack/neutron-lib/+/74752311:33
*** elvira is now known as elvira-lunch12:00
*** mgoddard- is now known as mgoddard12:18
*** elvira-lunch is now known as elvia12:36
*** elvia is now known as elvira12:36
*** ramishra_ is now known as ramishra12:49
slaweqralonsoh: if You would have few minutes, please check https://review.opendev.org/c/openstack/neutron-lib/+/747523/13:26
slaweqthx in advance13:26
slaweqamotoki: and maybe also You can ^^ :)13:26
ralonsohslaweq, I was reviewing it now13:27
ralonsohI know we are going to push a new version13:27
slaweqralonsoh++ thx a lot13:27
ralonsohslaweq, +2. I didn't +W, waiting for more reviews13:32
ralonsohif not, ping me and I'll +W it13:32
ralonsoh(or yourself)13:32
slaweqthx ralonsoh13:33
slaweqmaybe mlavalle or amotoki will take a look at it too13:33
ralonsohperfect13:33
slaweq#startmeeting neutron_drivers14:00
opendevmeetMeeting started Fri Jul 23 14:00:11 2021 UTC and is due to finish in 60 minutes.  The chair is slaweq. Information about MeetBot at http://wiki.debian.org/MeetBot.14:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:00
opendevmeetThe meeting name has been set to 'neutron_drivers'14:00
mlavalleo/14:00
slaweqhi14:00
slaweqthx mlavalle for taking care of the meeting 2 weeks ago :)14:00
mlavalleO-)14:00
obondarevhi14:00
ralonsohhi14:00
mlavalleUnluckily we didn't have quorum large enough to take care or ralonsoh's rfe14:01
ramishrahi14:01
slaweqlet's see if we will have quorum today14:02
slaweqI know haleyb will not be here14:02
johnsomo/14:02
slaweqbut lets wait for njohnston, amotoki and yamamoto14:02
slaweqmlavalle: btw. can You take a look at https://review.opendev.org/c/openstack/neutron-lib/+/747523/ when You will have some time?14:04
slaweqthx in advance14:04
johnsomslaweq I am joining today to chat about the quota RFE. I think there might be a bit of confusion on it.14:04
amotokihi, sorry for late14:04
mlavalleslaweq: will do14:04
slaweqjohnsom: which quota rfe?14:04
njohnstono/14:05
ralonsohslaweq, https://bugs.launchpad.net/neutron/+bug/193640814:05
johnsomhttps://bugs.launchpad.net/neutron/+bug/193640814:05
ralonsohbut maybe we won't have time today14:05
johnsomYeah, that one.14:05
slaweqjohnsom: it's not on today's agenda14:05
slaweqbut lets talk about it when we will have some time at the end14:05
slaweqok?14:05
johnsomOk14:06
slaweqok, so lets talk about ralonsoh's rfe first14:06
slaweq#topic RFEs14:06
slaweqhttps://bugs.launchpad.net/neutron/+bug/193351714:06
ralonsohthank you14:06
ralonsohthe link for the spec14:07
ralonsohhttps://review.opendev.org/c/openstack/neutron-specs/+/79919814:07
ralonsohin a nuthsell14:07
ralonsohwhat we are trying is to create a port connected to br-int14:07
ralonsohand provide at the same time an ofport (in the interface)14:07
ralonsohwhen we have a VM, the tap port is created by libvirt14:08
ralonsohthis is done at the end of the live-migration process14:08
ralonsohwith this bridge in the middle14:08
ralonsoh(same as with hybrid plug but with an OVS birdge)14:09
ralonsohthe br-int port has an interface with an ofport inmediatly assigned14:09
ralonsohthat triggers in OVN the port UP method14:09
ralonsohthat means the port is provisioned14:09
ralonsohwhen the TAP port is connected (at the other side of this bridge)14:09
ralonsohthe backend is ready to continue the communication14:10
ralonsohthat's my summary14:10
opendevreviewBence Romsics proposed openstack/neutron-lib master: multi-ext-gw: api-def and api-ref  https://review.opendev.org/c/openstack/neutron-lib/+/80202914:10
ralonsohany question is welcome14:11
slaweqI read the spec already and I'm ok with this.14:11
ralonsohthank you14:12
slaweqI had some questions but it was already discussed in the spec14:12
slaweqjust to clarify - You will do that only for OVN backend, at least for now14:12
ralonsohright14:12
ralonsohit could be extended to OVS14:12
amotokidoes it apply to all VMs even without live migration? I think yes but it is just to clarify.14:12
ralonsohbut the scope is OVN now14:12
ralonsohamotoki, yes, to any VM14:12
obondarevcould ml2-ovs benefit from such plugging as well? In live-migration case (to avoid packet loss)14:12
slaweqand second thing - there will be no many changes in the Neutron really, most of the job will be done by os-vif, correct?14:12
obondarevah, I see reply already14:13
ralonsohobondarev, could be in a future, for sure14:13
ralonsohslaweq, there will be14:13
ralonsohbecause now we can send the event vif-plugged when the port is provisioned14:13
ralonsohthat means, when Neutron server receives the port UP event from OVN14:13
*** rpittau is now known as rpittau|afk14:13
slaweqahh, notification... :)14:13
ralonsohmuch better than now14:13
slaweqso that will really fix those notifications for OVN backend finally, right?14:14
ralonsohyes, instead of sending the event when the port is updated (with migration_to in the vif details)14:14
ralonsohwe send it at the right moment14:15
slaweq++14:15
njohnston+1 for me, all the questions I had when reading the spec have been covered already14:15
mlavalleso, is it a question of fixing the timing of when the flows are created?14:16
ralonsohexactly14:16
ralonsohthat's the key point here14:16
mlavalleso we are ready when the vm is unpaused, right?14:17
ralonsohwe don't now because the TAP port is not created in the dest host14:17
ralonsohit is when the VM is unpaused14:17
ralonsohand this is when the ofport is assigned14:17
ralonsoh(too late)14:17
mlavalleyeah, we just want to be ahead of all this14:17
ralonsohexactly14:17
amotokiwhat happens for existing VMs? and what happens for live-migration for existing VMs?14:18
ralonsohbad yuyu14:18
ralonsohok no14:18
ralonsohif you update the server14:18
ralonsohand os-vif14:19
ralonsohthe intermediate bridge will be created in the new VM in the dest host14:19
ralonsohand, btw, this option will be configurable14:19
ralonsohthere is no need for a VM running now to have this bridge14:19
ralonsohit is needed in the dest host14:19
amotokiyeah, makes sense.14:20
amotokiin addition, os-vif needs to handle both cases perperly when deleting ports14:20
ralonsohthat's a corner case...14:21
ralonsohgood catch14:21
ralonsohI'll add this info in the os-vif patch14:21
amotokino it is not a special corner case. it usually happens for existing VMs14:21
ralonsohif you update the nova compute and os-vif in this host14:22
ralonsohonly in this acse14:22
ralonsohbut we usually use live-migration to move VMs to updated servers14:22
amotokiwhen we upgrade openstack only, we don't need to move VMs using live-migration 14:23
slaweqbut we have multiple port bindings, so during live-migration wouldn't this binding be changed?14:23
slaweqso on dest node it will already be plugged in the new way14:23
ralonsohthe binding doesn't change14:23
ralonsohthe VIF is the same14:23
slaweqyes, but still You will have active and inactive binding for port14:24
slaweqon different hosts14:24
ralonsohamotoki, in any case, this is something that must be considered in the os-vif patch for sure14:24
amotokiralonsoh: ack14:24
slaweqso one can have new details conifgured, to be plugged in own bridge, no?14:24
ralonsohthe binding information is the same14:24
slaweqok14:24
ralonsohthis is an option in the os-vif library14:24
ralonsohnot a hybrid-plug option in vif details14:25
ralonsoh(as in OVS with hybrid-plug)14:25
ralonsohthis should be transparent14:25
ralonsoh(with the change in the vif-plugged event)14:25
ralonsohbut even the OVN QoS is the same14:25
slaweqI'm +1 for this RFE, as njohnston14:27
amotoki+1 for the RFE. 14:28
amotokimy point on upgrade can be covered by the spec. I will add a comment to the spec.14:28
ralonsohamotoki, of course and thank you14:29
slaweqthx amotoki14:29
slaweqmlavalle: what about You? Any questions/comments?14:29
mlavalle+1 from me as well14:29
slaweqthx14:29
ralonsohthank you all14:29
slaweqso I will mark that as approved14:29
slaweqthx ralonsoh14:29
slaweqlet's move on to the next one14:30
slaweqhttps://bugs.launchpad.net/neutron/+bug/193322214:30
slaweqthis one was discussed on last meeting14:30
ralonsohfor me the RFE is valid, I had some concerns in the implementation14:31
ralonsohbut for sure we can address that in the patches14:31
slaweqpersonally I would like to see some detailed diagram with details how this will be implemented14:31
ralonsohexactly14:31
slaweqbut in general, I'm ok with the idea if it would be optional extension to the OVS agent14:32
amotokisame opinion. it is generally okay. Our previous discussion focused on clarifying the detail. the spec needs to clarify the detail.14:34
slaweqamotoki: yes, I think that spec is for sure needed for that one14:34
mlavalle+1 for clarifying during spec pahse14:35
slaweqnjohnston: any questions/comments on that one?14:35
amotokione question on testing. we have distributed version of dhcp and will have metadata. Do we want to enable them in DVR tests?14:36
ralonsohwe'll need new jobs, right?14:36
amotokinew jobs would work but I am just afraid having more jobs...14:37
njohnstonslaweq: I am a definite +1 on the idea, but diagrams and spec discussion is a definite must for a change like this14:37
slaweqamotoki: I don't think we need that in the dvr job14:37
slaweqIMO we can enabled those features in one of the existing ovs jobs14:38
slaweqwe have couple of them already14:38
amotokiokay. thanks14:38
slaweqbut that's good point about testing :)14:38
slaweqso I assume that we all agreed to mark that one as approved14:39
slaweqand follow up in the spec now14:39
slaweqI will comment on it after the meeting14:40
slaweqnow we have 3rd one:14:40
slaweqhttps://bugs.launchpad.net/neutron/+bug/193584714:40
ramishrathanks slaweq14:40
slaweqamotoki had some good comments there already14:41
slaweqand also I think that obondarev's question is very interesting14:41
slaweqI was also thinking about it yesterday while reading this rfe14:41
ramishraironic has something similar in-tree, I've not seen any req from other services/projects14:42
amotokiobondarev's point is similar to my 2nd point in comment #4.14:42
slaweqramishra: if ironic have it and now neutron would have it - maybe it's worth to do it as part of oslo or something like that?14:42
obondarev+114:43
ramishraSo the intent is to make standalone neutron more usable for certain use-cases in near term14:43
amotokiit is not specific to neutron, so you can use an existing basic-auth middleware or develop a new one for example under oslo or outside fo openstack.14:43
ramishrawe can probably think of having an implementation is oslo later that can be used by all projects14:44
amotokiramishra: did you consider using an exisitng middleware for basic auth instead of implementing it in neutron?14:44
amotokifor example wsgi-basic-auth I mentioned in the comment.14:45
slaweqramishra: You said that ironic have it already, can't You just import and use it in neutron's pipeline in Your use case?14:45
slaweqthat would be fastest way to have it, no?14:45
ramishraamotoki: I guess the one you mentioned does not support bcrypt hash for passwords14:45
amotokiramishra: okay but it does not mean we should have it in the neutron repo14:46
slaweqI tend to agree with amotoki here :)14:46
ralonsohthe idea of having it implement in oslo.middleware is interesting14:47
ralonsohironic will use it too14:47
ramishraIMO expecting standalone users to maintain a middleware separtely won't be big ask?14:47
amotokigeneraly speaking, we should avoid copying implementations. if ironic already has it and it can be re-used by otherr projects, we can consider oslo14:47
obondarevthat's what oslo is all about14:48
amotokiramishra: we already uses many libraries from outside of OpenStack, so "maintain a middleware separately" is not a big risk.14:48
ramishraIt would have been better if ironic would have proposed to oslo, but they did not in-tree14:49
ralonsohoslo people are nicer than us hehehe14:49
slaweqralonsoh: LOL14:49
ramishranot sure if they proposed to oslo14:49
ralonsohif you present this idea next monday14:49
ramishraand was rejected14:50
ralonsohthe will accept if for sure14:50
ralonsohyou can check next monday14:50
ralonsohI'll be there too14:50
ralonsohat 1500 UTC14:50
obondarevI think ironic might thought they are the only OSt project needed it at that moment14:50
slaweqobondarev: but now it will be at least 2 so things have changed :)14:51
obondarevslaweq: right14:51
amotokibased on your input, at least ironic and neutron need a middleware for basic-auth, so it is a good to have it in oslo.14:51
ramishraOK, we can try that. But I thought for standalone services dependency external implementation or oslo should be less14:51
amotokiperhaps cinder standalone may use it.14:51
obondarevneutron already depends on oslo heavily anyway14:52
mlavalleyeap14:52
amotokineutron standalone already depends on pyroute externally maintained (outside of OpenStack) :p14:52
slaweqobondarev: exactly - if You install neutron You will have oslo.middleware installed14:52
amotokiso I don't think one more dependency is not a matter....14:53
slaweqso I'm -1 for this rfe in Neutron, it should be probably part of oslo IMO, or completly external thing14:53
mlavalleAgree14:53
ramishraAs it's non-invasive middleware, IMHO having in-tree is the best thing. But I take your point, if it's to be used by other services, better keep it in neutron14:54
amotoki+1 as I already commented14:54
ramishra*keep it oslo14:54
slaweqralonsoh: njohnston: any thoughts?14:54
mlavalleamotoki: +1 to the -1, right?14:54
ralonsoh+1 in oslo.middleware, -1 in Neutron14:54
amotokihehe. -114:54
amotoki-1 for neutorn14:54
slaweqthat's how I understood it too :)14:54
njohnstonagreed with the consensus14:54
slaweqok, so we are done with this one, I will comment on it after the meeting14:55
ramishraok thanks folks!14:55
slaweqthx ramishra for discussing it with us14:55
slaweqok, let's quickly discuss johnsom's rfe14:55
slaweqhttps://bugs.launchpad.net/neutron/+bug/193640814:55
ralonsohyeah, this is mine14:55
johnsomha, not mine14:56
slaweqok, sorry14:56
johnsomI just wanted to make sure it is clear, the octavia team is not asking for this change.14:56
ralonsohthe point of this feature is to check the available resources when modifying the quota limits14:56
ralonsohof course, this API change will be configurable14:56
ralonsohthe default behaviour will be the one we have now, do NOT check anything14:56
ralonsohthe description is easy, the problem is the implementation (but this is out of scope here, I think)14:57
johnsomIt seemed there might be some confusion since this change was requested of octavia in addition to neutron, as we both implement the quota api in the same way.14:57
slaweqralonsoh: I think You told me some day that e.g. nova behaves in the way like You are proposing now14:57
slaweqcorrect?14:57
ralonsohyes14:57
njohnstonI am wondering why this change is being requested - is this coming from the API working group to establish uniformity?14:57
slaweqso it seems that there are 2 "fractions" in the OpenStack14:57
ralonsohbut please, I'm NOT proposing any change in the current API14:58
ralonsohI'm proposing make it configurable14:58
ralonsohvia plugin or a parameter in the CLI14:58
slaweqmaybe we should send email and discuss it with the wider audience? to make it maybe consistent across all projects14:58
ralonsohof course I'll do14:58
slaweqok, we are on the top of the hour now. I think we can thing about it and get back to it on next meeting14:59
njohnston+114:59
slaweqbtw. I will be on pto next week (again)14:59
slaweqmlavalle: will You be able to chair the meeting? or should I cancel it and we will meet in 2 weeks?15:00
mlavallethat's good. this way you will keep young and pretty for a long time15:00
ralonsohhehehe15:00
slaweqmlavalle: LOL, sure :)15:00
mlavalleslaweq: yeah, I can chair the meeting15:00
slaweqmlavalle: ok, thx15:00
slaweqI will send You an email about it later tonight15:01
slaweqbefore I will leave15:01
mlavallecool15:01
slaweqok, thx for attending the meeting15:01
mlavallewith a reminder, right?15:01
slaweqhave a great weekend15:01
slaweq#endmeeting15:01
opendevmeetMeeting ended Fri Jul 23 15:01:29 2021 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:01
opendevmeetMinutes:        https://meetings.opendev.org/meetings/neutron_drivers/2021/neutron_drivers.2021-07-23-14.00.html15:01
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/neutron_drivers/2021/neutron_drivers.2021-07-23-14.00.txt15:01
opendevmeetLog:            https://meetings.opendev.org/meetings/neutron_drivers/2021/neutron_drivers.2021-07-23-14.00.log.html15:01
mlavalleo/15:01
slaweqmlavalle: yes15:01
ralonsohhave a nice weekend!15:01
johnsomo/15:01
amotokio/15:01
njohnstono/15:01
obondarevo/15:02
opendevreviewSlawek Kaplonski proposed openstack/neutron master: [DVR] Set arp entries only for IPs from the correct subnet  https://review.opendev.org/c/openstack/neutron/+/80203715:09
opendevreviewMerged openstack/ovn-octavia-provider master: Add Health Monitor support  https://review.opendev.org/c/openstack/ovn-octavia-provider/+/71325315:46
opendevreviewMerged openstack/neutron stable/victoria: Implement namespace creation method  https://review.opendev.org/c/openstack/neutron/+/80188116:17
opendevreviewBrian Haley proposed openstack/ovn-octavia-provider stable/wallaby: Add Health Monitor support  https://review.opendev.org/c/openstack/ovn-octavia-provider/+/80189016:42
opendevreviewMerged openstack/neutron stable/wallaby: Implement namespace creation method  https://review.opendev.org/c/openstack/neutron/+/80188017:17
gmannslaweq: bcafarel amotoki can either of you merge these oftc nits (proejct config chages for zuul +1 or so are merged now), it will help me to complete this migration https://review.opendev.org/c/openstack/neutron-fwaas/+/800140 https://review.opendev.org/c/openstack/networking-midonet/+/800142  https://review.opendev.org/c/openstack/neutron-fwaas-dashboard/+/800141  19:03
gmannhttps://review.opendev.org/c/openstack/neutron-vpnaas/+/80014519:03
opendevreviewMerged openstack/neutron-fwaas master: Moving IRC network reference to OFTC  https://review.opendev.org/c/openstack/neutron-fwaas/+/80014019:27
opendevreviewMerged openstack/networking-midonet master: Moving IRC network reference to OFTC  https://review.opendev.org/c/openstack/networking-midonet/+/80014219:27
opendevreviewMerged openstack/neutron-fwaas-dashboard master: Moving IRC network reference to OFTC  https://review.opendev.org/c/openstack/neutron-fwaas-dashboard/+/80014119:28
slaweqgmann: done19:28
gmannslaweq: thanks19:28
opendevreviewMerged openstack/neutron-vpnaas master: Moving IRC network reference to OFTC  https://review.opendev.org/c/openstack/neutron-vpnaas/+/80014519:37
opendevreviewMerged openstack/neutron master: use payloads for PORT and FLOATING_IP  https://review.opendev.org/c/openstack/neutron/+/80060421:28

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!