14:29:52 <njohnston> #startmeeting fwaas
14:29:53 <openstack> Meeting started Tue Jan 10 14:29:52 2017 UTC and is due to finish in 60 minutes.  The chair is njohnston. Information about MeetBot at http://wiki.debian.org/MeetBot.
14:29:54 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
14:29:57 <openstack> The meeting name has been set to 'fwaas'
14:30:07 <njohnston> ok, so we can get logs for the second half of the meeting :-)
14:30:16 <yushiro> NP :)
14:30:16 <njohnston> #chair SridarK_ yushiro xgerman
14:30:18 <openstack> Current chairs: SridarK_ njohnston xgerman yushiro
14:30:44 <SridarK_> So padkrish and i discussed this before the holidays
14:30:45 <xgerman> unless we repost everuthing here ;-)
14:30:55 <SridarK_> :-)
14:31:23 <njohnston> #link https://etherpad.openstack.org/p/fwaas-meeting meeting notes, look at this for the first half of the meeting
14:31:41 <SridarK_> i will connect with him today or tomorrow to see where we are with the changes
14:32:02 <njohnston> very good
14:32:05 <yushiro> SridarK_, could you join me into this L2 agent patch?  I'd like to help.
14:32:06 <SridarK_> it is mostly in decent shape the db interaction piece needs to get fixed
14:32:16 <SridarK_> yushiro: yes definitely
14:32:59 <xgerman> I have some cycles as well…
14:33:23 <SridarK_> cool
14:34:12 <SridarK_> i think padkrish was also pulled into other things earlier so will appreciate any help
14:34:25 <xgerman> k
14:34:29 <yushiro> OK
14:34:45 <xgerman> I also like to get that policy thing merged
14:35:25 <SridarK_> yes lets discuss that
14:35:46 <yushiro> xgerman, Yes, I'd like to get agreement in this meeting.
14:35:47 <SridarK_> so looks like as the tests exist we need to make some tweaks based on role
14:35:56 <yushiro> #link https://review.openstack.org/#/c/404942/
14:36:06 <xgerman> or the tests are wrong
14:36:33 <xgerman> yushiro suggested that we should not allow any longer to have shared rules changed by non-admin'
14:36:38 <SridarK_> xgerman: that is what i meant on tweaks
14:36:57 <SridarK_> which makes sense to me
14:36:59 <xgerman> oh, ok - I read role as tweaks on the policy
14:37:08 <SridarK_> xgerman: no sorry
14:37:19 <xgerman> n.p.
14:37:27 <yushiro> +1
14:37:38 <yushiro> I think a little change is enough.
14:37:42 <yushiro> for UT.
14:37:47 <SridarK_> so the tests can be changed to accomodate that
14:38:09 <SridarK_> yushiro: oh ok - i thought it is a tempest issue
14:38:42 <xgerman> no, it’s UT
14:39:05 <yushiro> SridarK_, I think it's UT but I don't look tempest one..
14:39:25 <SridarK_> oh ok sorry i am bit confused on this
14:39:48 <SridarK_> it seems that we have tempest failures on the patch
14:40:17 <yushiro> SridarK_, OK.  I'll take a look in tempest test after.
14:40:44 <njohnston> ok, looks like we are ripe to move on
14:40:53 <xgerman> +1
14:41:08 <SridarK_> yushiro: xgerman lets discuss offline
14:41:15 <xgerman> k
14:41:17 <njohnston> not much going on with neutron-lib except for the efforts required by the stadium, so I will skip the neutron-lib topic
14:41:18 <yushiro> OK
14:41:27 <njohnston> #topic performance improvement for v1
14:41:37 <njohnston> #link https://review.openstack.org/#/c/389654/
14:41:42 <tuhv> hi
14:42:02 <njohnston> This change has cycled a few times recently, I think it is looking good, but I haven't had a chance to pull  it into my own env to test it
14:42:08 <tuhv> This week I changed the configuration to be not depend on Neutron
14:42:31 <tuhv> njohnston: You are welcome :)
14:42:46 <tuhv> But it makes tempest failed
14:43:16 <SridarK_> tuhv: just the multinode
14:43:34 <tuhv> It's OK now, because of https://review.openstack.org/#/c/392014/
14:43:35 <SridarK_> which seems to be an issue that we can discuss next
14:43:38 <njohnston> yes, you can ignore the grenade job, that is all that fails
14:44:29 <tuhv> yes, it still depends on Neutron, but now it does not make Neutron inversly depends on FWaaS as https://review.openstack.org/#/c/392014/8
14:44:44 <njohnston> I saw the privsep change... why does that need to go into neutron?  Can't we just add it in FWaaS so we don't make all of neutron subject to privsep?
14:44:55 <njohnston> Then again, I am not very knowledgeable about what privsep is
14:45:29 <tuhv> njohnston: privsep provides root priviledge
14:45:46 <tuhv> it does as rootwrap, but rootwrap is using for Linux command
14:45:56 <njohnston> yes, I would want to avoid adding that to neutron if at all possible
14:46:09 <njohnston> so we don't add privsep even in cases where fwaas is not enabled
14:46:24 <tuhv> njohnston: yes, now it is in this direction
14:46:52 <njohnston> so privsep is just needed in the L3 context?  Could we initialize privsep in the fwaas l3 agent extension?
14:47:08 <njohnston> I should say, the L3 agent context
14:47:08 <tuhv> njohnston: https://review.openstack.org/#/c/416474/
14:47:38 <tuhv> njohnston: I tested with L3 context
14:48:08 <tuhv> njohnston: May I will do with l3 agent extension :)
14:48:47 <tuhv> I have not checked with l3 agent extension, but it is a good suggestion
14:49:30 <tuhv> But https://review.openstack.org/#/c/416474/ also helps avoid making Neutron inversly depends on FWaaS
14:49:33 <njohnston> yes in the FWaaSL3AgentExtension class here: https://github.com/openstack/neutron-fwaas/blob/master/neutron_fwaas/services/firewall/agents/l3reference/firewall_l3_agent.py#L63
14:50:04 <njohnston> 416474 is good
14:50:17 <tuhv> njohnston: I will do tomorrow VST (+7), because I am not in company
14:50:25 <njohnston> 392014 is what should be changed to go into https://github.com/openstack/neutron-fwaas/blob/master/neutron_fwaas/services/firewall/agents/l3reference/firewall_l3_agent.py#L63 instead
14:50:29 <njohnston> just to be clear
14:51:08 <tuhv> njohnston: I will try :)
14:51:13 <njohnston> :-)
14:51:27 <njohnston> Ok, with nine  inutes left...
14:51:31 <njohnston> #topic Open Discussion
14:52:00 <SridarK_> we had sporadic failures on multinode tempest - is that issue resolved ?
14:52:01 <njohnston> Any other thoughts?
14:52:08 <yushiro> tuhv, quick question. Can  https://review.openstack.org/#/c/389654/ start reviewing?
14:52:21 <njohnston> SridarK_: I haven't seen those in a few days
14:52:29 <yushiro> tuhv, or need to wait?
14:52:41 <SridarK_> njohnston: ok so something in infra must have fixed it :-)
14:52:53 <njohnston> I think so
14:52:58 <tuhv> yushiro: it passes Jenkins
14:53:02 <SridarK_> Also looks like i may be able to go PTG
14:53:14 <SridarK_> xgerman: will u be there ?
14:53:24 <njohnston> I am definitely going to be able to make it to PTG, I just found out
14:53:34 <xgerman> not sure yet - they are still working on a travel budget
14:53:35 <SridarK_> njohnston: ok great
14:53:45 <yushiro> SridarK_, njohnston Great!
14:53:51 <tuhv> yushiro: I will test on l3 agent extension as johnston suggest, or we keep depending on https://review.openstack.org/392014
14:53:54 <xgerman> but I bought a ticket on eventbrite ;-)
14:54:04 <SridarK_> i am not sure if there is something we need to cover there but atleast we will have some presence
14:54:06 <yushiro> I'm still waiting travel support program's reply.
14:54:24 <SridarK_> yushiro: ok lets hope
14:54:48 <njohnston> In other news
14:54:48 <xgerman> +1
14:54:49 <njohnston> #link http://lists.openstack.org/pipermail/openstack-dev/2016-December/109047.html Nate is now a Neutron lieutenant for "Service", which seems to mean *-aaS
14:54:50 <SridarK_> we can try to do some Pike planning f2f
14:55:08 <xgerman> njohnston congrats
14:55:11 <njohnston> So feel free to ping me for +2 in neutron for FWaaS, or any *-aaS stuff
14:55:12 <SridarK_> njohnston: congrats
14:55:18 <njohnston> I live to serve
14:55:20 <yushiro> njohnston, awesome!!
14:55:25 <SarathMekala> :) congrats
14:55:43 <xgerman> also Armando is stepping down
14:55:59 <xgerman> so if you feel motivated to become PTL…
14:56:06 * njohnston nominates xgerman
14:56:11 <xgerman> ha
14:56:12 <SridarK_> xgerman: yes i saw that :-( armax has really helped our cause
14:56:24 <xgerman> yeah, he was awesome
14:56:31 <yushiro> indeed :)
14:56:32 <SridarK_> it is indeed a tough job
14:57:32 <njohnston> OK, looks like our time is just about up.
14:57:36 <SarathMekala> Guys update from my side...
14:57:38 <SridarK_> Hope all had a good break and it is nice to be back to work
14:57:45 <SarathMekala> I made some progress on the FWaaS V2 Horizon UI.. sent across a mail with a screenshot of the current progress
14:57:54 <SridarK_> SarathMekala: great
14:57:57 <xgerman> wow
14:57:58 <yushiro> SridarK_, wow!
14:58:05 <yushiro> SarathMekala, Wow!!
14:58:06 <njohnston> Ah yes!  I forgot to make a topic for that.  That is great!
14:58:10 <SridarK_> if we can get this in for O that will be great
14:58:17 <xgerman> yeah, truly awesome
14:58:22 <SarathMekala> I think it can make to O
14:58:41 <njohnston> excellent!
14:58:42 <SarathMekala> will try to get something running soon
14:58:58 <SridarK_> ok definitely having a GUI gets attention of the decision makers :-)
14:59:00 <njohnston> do you have a change in gerrit we can look at?
14:59:29 <SarathMekala> no.. dont have a PR either
14:59:35 <SarathMekala> will raise one
14:59:48 <njohnston> definitely, so we can get reviewers looking at it soon!
14:59:54 <njohnston> need those +2s
15:00:09 <njohnston> time's up! thanks all!
15:00:10 <SarathMekala> we already have one :)
15:00:14 <yushiro> see you.
15:00:16 <njohnston> #endmeeting