Friday, 2023-11-10

opendevreviewMiguel Lavalle proposed openstack/neutron master: Router flavors and service type for OVN  https://review.opendev.org/c/openstack/neutron/+/88398801:55
ykarelslaweq, ack05:55
opendevreviewyatin proposed openstack/neutron master: [DNM] Reproduce issue  https://review.opendev.org/c/openstack/neutron/+/90057406:20
opendevreviewLajos Katona proposed openstack/neutron-tempest-plugin master: Tap Mirror API tests  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/88600407:45
opendevreviewLuis Tomas Bolivar proposed openstack/ovn-bgp-agent master: Add support at NB BGP Driver for exposing OVN LBs  https://review.opendev.org/c/openstack/ovn-bgp-agent/+/89912009:21
opendevreviewTakashi Kajinami proposed openstack/os-ken master: Avoid RuntimeError caused by iteration over sys.modules  https://review.opendev.org/c/openstack/os-ken/+/90060109:29
opendevreviewLuis Tomas Bolivar proposed openstack/ovn-bgp-agent master: Add support at NB BGP Driver for exposing tenant IPs  https://review.opendev.org/c/openstack/ovn-bgp-agent/+/89911709:55
opendevreviewLucas Alvares Gomes proposed openstack/neutron master: [OVN] Update the External Ports documentation  https://review.opendev.org/c/openstack/neutron/+/90003010:15
opendevreviewJayce Houtman proposed openstack/neutron master: Change exception messages to error log messages for DNS integration.  https://review.opendev.org/c/openstack/neutron/+/90021213:13
mlavallehaleyb: are we meeting today?13:59
haleybmlavalle: yes, sorry hadn't sent agenda13:59
haleybhopefully we are quick, it's a holiday for me :)14:00
haleyb#startmeeting neutron_drivers14:00
opendevmeetMeeting started Fri Nov 10 14:00:30 2023 UTC and is due to finish in 60 minutes.  The chair is haleyb. Information about MeetBot at http://wiki.debian.org/MeetBot.14:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:00
opendevmeetThe meeting name has been set to 'neutron_drivers'14:00
slaweqo/14:00
obondarev_o/14:00
mlavalleo/14:00
*** obondarev_ is now known as obondarev14:01
mlavallehaleyb: veterans day?14:01
haleybmlavalle: yes, and i didn't even know until yesterday14:01
mlavalleit's in our calendar, but it is not a holiday for us14:02
lajoskatonao/14:02
haleybjlibosva, racosta_: are you around? you have the agenda items today14:02
jlibosvao/14:02
jlibosvaI am14:03
racosta_o/14:03
jlibosvashall I start?14:03
haleybok, i think we have quorom 14:03
racosta_please, go ahead jlibosva.14:03
jlibosvaI'm not familiar with the format of this meeting so I guess once we enter the "on demand agenda" I shall start?14:04
mlavalleyeah go ahead14:05
mlavallewe can improvise a bit14:05
haleybjlibosva: right, we can go right to on-demand14:05
haleyb#topic on-demand14:06
haleyb:)14:06
jlibosvaok, thanks :) so I was told to bring this topic here, it's related to ports and its bindings14:07
jlibosva#link https://review.opendev.org/c/openstack/neutron/+/89281514:07
jlibosvaso we can have multiple mech drivers configured and based on the vif type the driver binds the port on a host14:07
jlibosvathe vif type allows PUT actions (Updated) in the API layer so it's currently possible to change the type while a port is bound14:08
obondarevbut that will not be a correct change, right?14:09
jlibosvanow since API is uses stateless resources - ie we don't know if the updated port is bound or not until we look at the DB, which is layer below API, we can't forbid the update operation on port. So I made the patch to fail changing type if port is bound on the db layer14:09
jlibosvaobondarev: right14:09
jlibosvathere was a bug in Nova too that if user changed the type, the networking went down. From the Nova perspective this should not be an allowed operation too. And I agree14:10
obondarevso it's not an API change to me, just handling an incorrect request14:10
jlibosvaor - if the type is changed we would need to re-bind the port14:10
jlibosvayes, I agree with obondarev. the state a port is in should not allow the change14:11
jlibosvathere are some concerns on the review that would be good to discuss here14:11
jlibosvaRodolfo and Lajos had some concerns and I see Lajos just dropped and Rodolfo is on PTO14:12
obondarevso what happens currently when someone updates vif_type of a bound port?14:14
haleybthis is vnic_type right?14:14
slaweqwhy do we want to allow changing that on unbound ports? Maybe it would be better (and easier) to simply forbid that on the API level for all types of ports, wdyt?14:15
jlibosvayes, the attribute is vnic_type, sorry14:15
jlibosvaslaweq: the only scenario I could think of would be that someone wants to create a port (like SR-IOV) and forgets to set the type. so instead of deleting the resource and re-creating one can just update, if it's not bound14:16
obondarevjust like any other update I think14:16
slaweqbut in such case user can easily delete and then create port again14:16
obondarevnot save 1 API call at least :)14:16
obondarevto*14:16
jlibosvaas for what happens, I think there will be inconsistency when mechanism drivers or agents query that attribute14:17
lajoskatonasorry seems I have some network issue14:18
haleybare there any other questions?14:23
mlavalleso let me attempt to summarize the issue: over the years, we, the Neutron community, allowed a certain specific case of a port update and now we realize we shouldn't have14:23
jlibosvaso I guess there are two ways how to approach it? 1) disallow to update the attribute on API level 2) always check if the port is bound if the attribute is updated on the DB level (the linked patch)14:23
lajoskatona1I think I have now working network, sorry for popping up and down14:24
obondarevcan 2 also include api-ref note?14:24
haleyband if 2) does it need to be discoverable with an extension14:24
lajoskatona1yes my concern was to add an extension to show the users that hey the api behaves deifferently14:24
mlavalleso we want to fix the bahavior but we worry about changing the behavior. Let's make that behavior discoverable and maybe optional14:24
lajoskatona1Iyes good summary14:25
obondarevbut could anyone used it for any good reason?14:25
lajoskatona1I am not sure to be that rigid and even for bug fix add extension14:25
lajoskatona1perhaps not necessary and better to fix it14:25
mlavalleobondarev: it doesn't seem logical, but we just don't know14:25
slaweqI'm not sure we need extension for that - we will just prevent users from doing something what can lead only to the bad things finally so IMO release note would be enough in this case14:26
lajoskatona1so my goal was to discuss it and have consensus before just doing anything unchangble14:26
obondarevagree with slaweq14:26
mlavalleI would be ok with just fixing it. I was not advicating a position, just weighing the alternatives14:27
lajoskatona1as I remember from ralonsoh's comment he had the concern14:27
jlibosva#link https://bugs.launchpad.net/nova/+bug/198181314:27
jlibosvathere is the nova portion and how it was discovered14:27
haleybright, if the change results in an unusable resource i would think an error is appropriate14:27
haleybin my opinion14:28
obondarev+14:28
lajoskatona1+114:28
mlavalle+114:29
haleybi was going to ask for a vote, but there it is14:29
lajoskatona1and if there is no API extension we can backport it14:29
lajoskatona1as I see from the nova bug the fix was backported14:29
mlavalleteah, that's a plus14:30
mlavalleyeah14:30
haleybso we proceed as a bug fix and don't require an extension14:31
haleybslaweq: opinion?14:31
slaweqI'm good with that, no extension needed IMO14:31
haleybok, i'll take the +1's as consensus on moving forward without an extension14:32
slaweqregarding backport - I think we should maybe ask stable core team for opinion also14:32
slaweqbut personally I don't see reason why we shouldn't backport it14:32
haleybgood discussion on the topic14:32
jlibosvathanks everyone14:32
mlavallejlibosva: thanks for bringing it up :-)14:32
jlibosvathe credit goes to lajoskatona1 :)14:33
lajoskatona1I stopped the thing, sorry for that14:33
mlavalleyeah, but you also took the time to chat with us today14:33
jlibosvathat's always a pleasure14:33
haleybslaweq: it seems like the nova-related change was backported, so i would +1 a backport14:33
haleybof course that was a CVE14:34
slaweqgood for me then14:34
mlavalleyeah, otherwise the whole thing is useless14:34
lajoskatona1+1 for backport with re-no14:34
jlibosvawell, afaiu Nova doesn't need the Neutron patch. They basically just made Nova aware that the type can be changed in Neutron. Which they didn't count with before14:35
jlibosvajust to make it clear :)14:35
haleybjlibosva: so just to confirm - change is good, but add rlease note, and you will update the api-ref?14:35
jlibosvahaleyb: yesir14:35
haleyback, thanks14:36
haleybracosta_: ok, we can move on to your items14:36
racosta_ok, thanks.14:36
racosta_Although I added the same topics I presented at PTG, I believe that's required a formal ack for RFE's in driver meetings.14:36
racosta_# RFE: BGP peer connect mode. I think we're on track in this one.14:37
racosta_#link https://review.opendev.org/c/openstack/neutron-specs/+/89921014:37
racosta_It is basically a new configurable parameter to keep the connection with the BGP peer 'active' and avoid unnecessary disconnections if it enters an idle state on the switch side.14:37
haleyb#link https://bugs.launchpad.net/neutron/+bug/200614514:37
racosta_It's a trivial change on the n-d-r side, and will be configurable to allow compatibility with anyone who uses the default passive default.14:39
racosta_*passive mode14:40
racosta_Any questions or comments on this?14:40
lajoskatona1nothing from me14:41
haleybnot from me, thinks it fixes a valid issue14:42
mlavalle+114:42
haleyb+114:42
obondarevno questions14:42
obondarev+114:42
slaweqIIRC obondarev had some concerns in the spec review, right?14:42
obondarevah, did I? Let me check14:43
slaweqno, I think I messed it with some other spec, sorry :)14:43
obondarevok, no worries :)14:43
haleybslaweq, lajoskatona1: votes? to make it official14:44
slaweq+114:44
lajoskatona1+114:44
haleybok, thanks, i've marked it rfe-approved14:45
racosta_ok, thanks. we can move on to the next14:45
racosta_#RFE: BGP speaker peer sessions resilient. This one is related to RMQ/Infra failures.14:45
racosta_# LP: https://bugs.launchpad.net/neutron/+bug/200614514:46
racosta_#link https://review.opendev.org/c/openstack/neutron-specs/+/89920914:46
racosta_It's a little more complex. The goal is to introduce a new speaker cache logic for the DRAgent can keep the speaker settings and the BGP peer sessions in case of RPC Exceptions, and/or reestablishment of communication via RPC. Basically: a new config option 'speaker_cache_timeout'. 14:46
racosta_In the RFE proposal, the cache timeout time is configurable and can be adjusted according to the time it actually takes for the RMQ to respond correctly again (transient time after RMQ/Infra comes back - cluster convergence, mysql issues, etc.)14:47
racosta_There would be another way to do it, as Felix's suggestion.14:47
racosta_It could be implemented as long as we noticed when the RMQ was offline and online, but I didn't find how to obtain this information via oslo_messaging (it would only be possible to experience timeouts in this case).14:48
racosta_I think the cache timeout solves transient RMQ issues.14:49
racosta_Any questions or comments on this?14:49
haleybi think mine were answered in the bug14:51
racosta_yeah14:51
lajoskatona1If i understand well in case of such rmq issue the agent removed the bgp settings?14:53
obondarevI'm a bit confused, https://bugs.launchpad.net/neutron/+bug/2006145 does not sound like an RFE, but rather like a bug description14:54
racosta_yesh, it can remove the complete BGP speaker confg if the RPC return is empty value14:54
obondarevand it was already marked as approved14:54
lajoskatona1I like the idea to keep these settings till the agent can connect again (if it is below the timeout)14:55
lajoskatona1so +1 from me to the proposal14:55
mlavalle+1 from me as well14:56
haleybobondarev: i maybe should have marked it rfe-triaged14:57
racosta_this was an old thread in the original bug obondarev, issue or RFE? IMO this is a BUG, but as there was no consensus I proposed as RFE...14:57
haleyband since adding the config option was necessary i believe was the reason14:58
obondarevI see, so there are 2 specs for a single RFE https://bugs.launchpad.net/neutron/+bug/2006145?14:58
obondarevhttps://review.opendev.org/c/openstack/neutron-specs/+/899209 and https://review.opendev.org/c/openstack/neutron-specs/+/89921014:59
racosta_no no, are different cases.14:59
obondarevah, sorry, my bad15:00
racosta_no worries, but the two are related to the n-d-r (BGP sessions). 15:00
obondarevI just had 2 same tabs opened :)15:01
obondarevI'm ok with this RFE and spec, +115:02
haleyb+1 from me too15:02
slaweq+1 from me too15:02
lajoskatona1+115:02
haleybok, thanks15:02
mlavalle+115:02
haleyband since that was all on the agenda, and we're over time, we are done15:03
slaweqo/15:03
haleybthanks everyone for attending, have a good weekend15:03
haleyb#endmeeting15:03
opendevmeetMeeting ended Fri Nov 10 15:03:38 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:03
opendevmeetMinutes:        https://meetings.opendev.org/meetings/neutron_drivers/2023/neutron_drivers.2023-11-10-14.00.html15:03
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/neutron_drivers/2023/neutron_drivers.2023-11-10-14.00.txt15:03
opendevmeetLog:            https://meetings.opendev.org/meetings/neutron_drivers/2023/neutron_drivers.2023-11-10-14.00.log.html15:03
lajoskatona1o/15:03
lajoskatona1bye15:03
mlavalleo/15:03
racosta_thanks folks, have a nice weekend! enjoy your holiday haleyb!15:03
* haleyb is out today but feel free to approve any of my changes that fix bugz15:04
obondarevo/15:04
sebaI still have a problem with a core_plugin.get_port() breaking my transaction. how does transaction concurrency work? what happens if someone creates a new db session in an already running transaction?15:26
sebaexplicitly it looks like the TrunkPlugin has a resource_extend that creates its own db session15:27
sebahttps://opendev.org/openstack/neutron/src/commit/26f173423986ca6c110ee517bae8d5db844d6ad6/neutron/services/trunk/plugin.py#L84-L8515:27
sebaI have not found any other resource_extend that extends a port that needs a db session that creates its own context. in most cases they seem to be using the db object's session?15:28
seba(if they need one at all)15:28
ykarelslaweq, when you get chance pleace check https://review.opendev.org/c/openstack/neutron/+/90046615:35
slaweqykarel approved15:37
ykarelthx15:45
slaweqykarel please approve https://review.opendev.org/c/openstack/neutron/+/900406 then :)15:45
ykarelslaweq, done, i had a qestion there regarding backport to stable/2023.215:50
slaweqykarel yes, I was going to propose backport once this patch will be merged in u/s15:50
ykarelack thx15:51
slaweqit's just tests change so there's no any reason not to backport it15:51
ykarel+115:51
*** ykarel is now known as ykarel|away15:51
spatelFolks, I have very odd requirement. If I have my all compute nodes dedicatedly assigned for sriov workload in that case do I still need neutron-openvswitch-agent running on all compute nodes?  I only need neutron-sriov-agent on compute nodes which by pass PCI to vm. 16:01
spatelAre there any issue if not deploy neutron-openvswitch-agent on sriov compute nodes?  16:02
opendevreviewMerged openstack/neutron master: Revert "Make job openstack-tox-py310-with-sqlalchemy-master non-voting temporary"  https://review.opendev.org/c/openstack/neutron/+/90046616:02
* SvenKieske is wondering this as well (never deployed sriov only nodes before)16:05
opendevreviewLajos Katona proposed openstack/neutron-tempest-plugin master: Tap Mirror API and scenario tests  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/88600416:21
opendevreviewLajos Katona proposed openstack/neutron-tempest-plugin master: Tap Mirror API and scenario tests  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/88600416:23
opendevreviewLajos Katona proposed openstack/tap-as-a-service master: Add pyproject.toml to support pip 23.1  https://review.opendev.org/c/openstack/tap-as-a-service/+/90063917:13
opendevreviewMerged openstack/neutron master: [Fullstack] Drop all linuxbridge scenarios from fullstack tests  https://review.opendev.org/c/openstack/neutron/+/90040617:56
opendevreviewLajos Katona proposed openstack/neutron-tempest-plugin master: Tap Mirror API and scenario tests  https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/88600418:35

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!