18:35:47 #startmeeting Networking FWaaS 18:35:48 Meeting started Wed Mar 4 18:35:47 2015 UTC and is due to finish in 60 minutes. The chair is SumitNaiksatam. Information about MeetBot at http://wiki.debian.org/MeetBot. 18:35:49 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 18:35:53 The meeting name has been set to 'networking_fwaas' 18:35:58 #info metting agenda https://wiki.openstack.org/wiki/Meetings/FWaaS#Agenda_for_Next_Meeting 18:36:18 so it seems there were issues with the gate yesterday evening 18:36:38 i noticed that some of the fwaas patches are still in the queue 18:36:49 SumitNaiksatam: yes i one of them 18:36:55 so if you submitted a patch yesterday, and wondering why jenkins did not vote 18:36:57 * I am 18:37:02 check the gate queue 18:37:14 some of my patches were bumped out of the queue 18:37:20 so i have to “recheck” them in 18:37:24 queue is really deep... 18:37:33 pc_m: i was just about to say 18:37:43 so subsequently the queue built up to be really long 18:37:43 been waiting 5+ hours on one job. 18:38:00 pc_m: true 18:38:00 some CI failed because pip server 503 for some time. 18:38:08 the longest is 12 hours now 18:38:19 yalie1: yes, gerrit was down i believe 18:38:38 may be pypi as well 18:38:42 not sure 18:38:49 yes 18:38:53 anyway, that was just a heads up in case you were wondering 18:38:55 thankfully today is not Mar 17 or near there :-) 18:39:04 grenade was broken, fix merged last night. 18:39:06 SridarK: yes, but... 18:39:13 :0) 18:39:19 pc_m: ah, thats where all the patches were stuck 18:39:31 march 18th is too far 18:39:44 and fully expect that these kind of things will happen in the next few days 18:40:10 also since this is the last milestone before feature freeze, everyone will try to get in 18:40:12 review 160913 fixed (reverted the devstack changes) 18:40:21 pc_m: ah ok, good to know 18:40:29 anything else, anyone want to share? 18:40:39 in terms of announcements 18:40:53 #topic Bugs and Docs 18:41:16 the new high priority doc bug is #link https://bugs.launchpad.net/openstack-api-site/+bug/1425658 18:41:18 Launchpad bug 1425658 in openstack-api-site "FWaaS needs WADL doc to be available in the API reference" [High,Confirmed] - Assigned to Sumit Naiksatam (snaiksat) 18:41:26 this came out of the discussion in last week’s meeting 18:41:50 badveli: you said you were looking at #link https://bugs.launchpad.net/neutron/+bug/1427465 18:41:50 Launchpad bug 1427465 in neutron "vArmour fwaas agent broken, unit tests skipped, CI not running" [Undecided,New] - Assigned to badveli_vishnuus (badveli-vishnuus) 18:42:10 yes 18:42:26 there is a patch available 18:42:30 badveli: just a suggestion - good to provide an update on the bug report 18:42:34 badveli: ah nice 18:42:59 ok, just wanted to check with the team before 18:43:10 i dont see the patch linked to the bug report 18:43:14 have you posted the patch? 18:43:25 updating the RouterInfo is taking some mandatory parameters 18:43:46 not yet but i have it ready 18:44:10 badveli: okay 18:44:18 badveli: any reason not to post it right away? 18:44:53 wanted to check with the team, i am adding the mandatory parameters agent.conf and interface.driver 18:45:06 does any one had the same issue 18:46:31 badveli: this will be in vendor code ? 18:46:40 i believe they are using mock.ANY for this 18:46:49 yes 18:49:22 badveli: are we good on this? 18:49:40 yes, looks like i had ran the unit tests and its fine 18:49:47 will post the patch 18:50:04 i am good on this 18:50:26 badveli: ok 18:50:29 #link https://bugs.launchpad.net/neutron/+bug/1418196 18:50:30 Launchpad bug 1418196 in neutron "fwaas: driver base class is stale" [Undecided,In progress] - Assigned to yalei wang (yalei-wang) 18:50:57 FYI: Review 147744 has refactored namespaces for routers. I found that is breaking some VPN code using RouterInfo. 18:51:00 i think yalie1 has updated the commit message to point to the correct commit id 18:51:12 pc_m: okay, good to know 18:51:24 yes 18:51:25 SridarK: probably good to make note of that ^^^ 18:51:30 yalie1: i will look into ti 18:51:36 thanks 18:51:47 SumitNaiksatam: I pulled a view with that neutron pass and have been working on a fix. 18:51:56 SumitNaiksatam: yes pc_m - added me to his review already - so will gauge implications - 18:52:18 We had a discussion yesterday about neutron commits breaking *aaS 18:52:33 pc_m: ah good 18:52:37 #link https://review.openstack.org/#/c/147396 18:52:39 Some talk about pinning to a specific commit on Neutron. 18:52:52 Plan is to discuss at next Neutron meeting. 18:53:03 pc_m: yeah that might help (for the time being until we have a coordinated gate) 18:53:16 is yushiro here? 18:53:23 SumitNaiksatam, yes. 18:53:39 i tried to reproduce the above and noticed another issue in the policy.json, so i fixed that first 18:54:08 after fixing that, i think yushiro’s patch makes more sense 18:54:21 yushiro: so i will try to get back to that at the earliest 18:54:28 thanks for your patience on this 18:55:02 yushiro: the UT is still failing on that patch though 18:55:28 vishwanathj: was your doc patch merged? 18:55:36 SumitNaiksatam, yes. this UT needs https://review.openstack.org/#/c/157355/ 18:55:47 SumitNaiksatam, yes 18:56:07 https://review.openstack.org/#/c/158943/ 18:56:37 vishwanathj: nice 18:56:56 yushiro: ah did not realize there was a dependency 18:57:23 yushiro: sorry will check that patch, seems like SridarK already voted on it 18:57:36 should the depends-on be added to the commit message 18:57:42 SumitNaiksatam, Sorry. I didn't know how2 make "dependency" 18:57:46 any other important bugs that we missed? 18:57:54 vishwanathj: yushiro: in this case you cant 18:57:55 SumitNaiksatam, yes. 18:58:02 they are across repos 18:58:12 or at least i am not aware of 18:58:17 SumitNaiksatam, I've already posted the fix about policy.json 18:58:45 yushiro: sorry, which one are you talking about? 18:58:56 SumitNaiksatam: yeah, can depends-on across repos. 18:59:04 I'm talking about https://review.openstack.org/#/c/145998 18:59:05 can't 18:59:45 pc_m: yeah, my understanding too 18:59:58 yushiro: okay got it, the fix i made was to the policy.json 19:00:22 yushiro: thanks for all the good work here, the team owes you the reviews 19:00:30 +1 19:00:40 one suggesstion on depends-on across repos, you can always state that in the commit message 19:01:10 vishwanathj: perhaps you can help yushiro with the some of the reviews? 19:01:39 the ideal think to do would be to set up a devstack, patch the fix, and then check that it works 19:02:00 SumitNaiksatam, sure, I will give it a try 19:02:07 vishwanathj: great thanks! 19:02:18 SridarK: badveli: did we miss any other bugs? 19:02:34 SumitNaiksatam: no i believe u have covered them all 19:02:38 SumitNaiksatam, vishwanathj, thank you. 19:02:49 SridarK: okay good 19:03:05 #topic Firewall Router Association 19:03:07 i did not see 19:04:13 SridarK: i know you have been working hard on this 19:04:32 SumitNaiksatam: thanks to all folks for the reviews 19:04:33 i believe you have most of the feature implemented and are working through some of the UT issues 19:05:11 SumitNaiksatam: yes that is correct - i have the code for the optional use of the new attribute to pick up all routers on the tenant 19:05:18 SumitNaiksatam: i have tested this on devstack 19:05:21 SridarK: nice 19:05:33 SumitNaiksatam: i am working thru the UT to cover this 19:05:39 SridarK: with that change, do the existing tempest tests pass? 19:05:54 my expectation is taht they would 19:05:56 SumitNaiksatam: i think it should 19:06:30 SumitNaiksatam: as in that case - i query the tenant for its routers and use that as the router list 19:06:59 SumitNaiksatam: this will go in to the router association db 19:07:06 with validation 19:07:23 SridarK: ok, i kind of lost track if the tempest test is only an API test, or is it more functional in nature 19:07:39 SumitNaiksatam: it is only API i believe 19:07:42 SridarK, can you please briefly explain the "optional use of the new attribute to pick up all routers on the tenant" and how it is differnt from not specifying any router_ids at all 19:07:47 SridarK: yeah, i guessed as much 19:08:07 vishwanathj: its the same, the discussion we had in the meeting last week 19:08:14 vishwanathj: that is what it is when u don't specify --router-ids 19:08:35 vishwanathj: if you dont specify the router_ids list, the existing behavior is preserved 19:08:42 SridarK, ok, got it 19:08:48 ok cool 19:09:14 On vendor impacts - i have reached out folks with code in the repo 19:09:24 freescale - no impacts 19:09:42 but their CI fails - they said it is some other issue 19:09:58 SridarK: will the tempest senaro test cases moved into fwaas? 19:10:05 brocade - had discussed this with vishwanathj & Karthik 19:10:10 SridarK, appreciate your time and initiative walking through Brocade FWaaS impacts 19:10:30 some minor impacts and we will cover that 19:10:48 on varmour - have brought this up with badveli & yisun 19:11:04 on vendors with reviews in progress 19:11:22 intel - yalie1 - pls do look at this and we can discuss impacts 19:11:35 on cisco - discussed this with SridarK 19:11:38 :-) 19:11:43 yalie1: yes we need to do that, and i was going to touch on that a little 19:12:02 yalie1: yes as SumitNaiksatam mentions, sorry wanted to finish up my updates 19:12:02 SumitNaiksatam: thanks 19:12:26 SridarK: thanks 19:12:38 SridarK: thanks for the update, and great work! 19:12:39 so i am hoping we can close any vendor implications today or tomorrow 19:12:54 SumitNaiksatam: no worries - keeping fingers crossed 19:13:05 SumitNaiksatam: i am done 19:13:18 since we are so close to wrapping this up, i am assuming that if you havent heard from a vendor, then there is no impact 19:13:36 i hope that is a reasonable assumption 19:13:39 SumitNaiksatam: i will assume that 19:13:53 SumitNaiksatam: also their UT's all pass 19:13:53 SridarK, great work!! :-) 19:13:54 vishwanathj: per our email discussion, did you get a chance to look at the horizon changes? 19:14:12 yushiro: thx :-) 19:14:34 unfortunately yanping got pulled into something else, and she could not pursue this 19:14:45 SumitNaiksatam, started looking at the blueprint link that was sent out this morning 19:15:10 hope to have an initial analysis and questions compiled by tomorrow 19:15:21 vishwanathj: okay, i believe the requirement is to post it before a certain date 19:15:33 vishwanathj: its a process thing 19:15:35 SumitNaiksatam, what is that date? 19:15:46 vishwanathj: Mar 9 i believe 19:15:50 for the blueprint, right? 19:16:01 vishwanathj: yeah ^^^, but thats hearing from others 19:16:23 vishwanathj: hmm i think u need a code patch 19:16:30 vishwanathj: in case you have the time, and if the horizon meeting for this week hasnt already happened, may be you can check in during that meeting 19:16:53 SumitNaiksatam, SridarK, Code patch before march 9th could be a challenge though 19:17:05 but will give it my best 19:17:13 vishwanathj: yes i completely understand 19:17:24 vishwanathj: i am not also 100% sure 19:17:44 vishwanathj: that said, i think you will find that you will be following a lot existing implementation 19:17:47 let me get a blue print spec draft as soon as I can 19:18:05 vishwanathj: i dont know to what detail they expect the blueprint 19:18:17 vishwanathj: and i dont think they follow the gerrit spec process either 19:18:30 vishwanathj: i will also ask if yanping can help u on the bp 19:18:38 so i believe its just a launchpad blueprint, but good to confirm 19:18:51 SumitNaiksatam, alteast that gives me the confidence that I have complete understanding 19:18:54 vishwanathj: may be u can also just reply to her email 19:19:00 vishwanathj: yes 19:19:06 SridarK: good suggestion 19:19:16 SridarK: can we also add abishek to the thread? 19:19:23 to get confirmed answers 19:19:32 SumitNaiksatam: yes i have reached out to him privately as well 19:19:37 SridarK, I was hoping to dedicate time this afternoon and tomorrow morning to spend time before I email her 19:19:43 on his availability etc 19:19:59 SridarK: thanks, this one just for responding to procedural questions 19:20:02 ok moving on 19:20:14 vishwanathj: thanks for stepping on this at a very short notice! 19:20:22 * stepping up 19:20:38 SumitNaiksatam, Thanks for the opportunity, hope to live upto the expectation 19:20:53 #topic FWaaS functional testing gate 19:21:15 pc_m: so i believe, we still need to do the same things for fwaas, as you did for vpnaas 19:21:36 i am hoping to get on to this immediately after this meeting 19:21:56 yeah, setup a functional gate job to run the dsvm-functional test 19:21:58 pc_m: will you be available to provide guidance if required? 19:22:02 sure 19:22:08 See that wiki link I made. 19:22:10 pc_m: great, i will ping you on IRC 19:22:20 pc_m: yes, i went through that 19:22:22 https://wiki.openstack.org/wiki/Neutron/FunctionalGateSetup 19:22:24 pc_m: i will start there 19:22:39 SumitNaiksatam: sure. I'm around. 19:23:12 pc_m: in case you know this (and to yalie1’s question earlier), do you know if there is an immediate plan to move the existing tempest tests to the neutron and neutron_*aaS repos? 19:24:11 SumitNaiksatam: So... not allowed to add *aaS to tempest repo. Maru is working on migrating tests to Neutron 19:24:33 Then, *aaS test modules can be moved to respective repos. 19:25:00 will it completed in kilo? 19:25:01 Note: They are making a tempest library. It is really crude at this point, so limited functionality. 19:25:02 pc_m: yes, i know about the “not allowed to add" part 19:25:25 pc_m: yes, i thought that the tempest lib was the blocker, but perhaps not any more 19:25:29 yalie1: That's the goal, but I'm not sure. Maru will know how that is going. 19:25:48 SumitNaiksatam: They have the lib, but it only has some simple things available. 19:26:08 pc_m: but he is not moving the neutron_*aaS tempest tests, right? 19:26:21 SumitNaiksatam: They told us (Nikolay from Cisco is doing a scenario test) to try duplicate some of what tempest does. 19:26:33 pc_m: they being? 19:26:38 SumitNaiksatam: correct, but it should be easy, once it works udner neutron. 19:26:45 Infra folks 19:26:48 pc_m: okay 19:26:58 Matt 19:26:58 pc_m: i was asking more from the perspective of time lines 19:27:17 pc_m: thanks 19:27:21 My guess is the tempest lib won't be really usable for Kilo 19:28:01 pc_m: it seems that there are no immediate timelines set for moving existing neutron_*aaS tempest test out of tempest into neutron_*aaS projects 19:28:14 pc_m: or at least that is our collective understanding? 19:28:52 correct. Only to get tempest to neutron. (and I haven't seen any dates) 19:29:23 ok cool 19:29:31 FYI: https://github.com/openstack/tempest-lib 19:29:40 There is not much in there. 19:29:50 pc_m: thanks for the pointer, and the earlier information 19:29:56 we have one minute left 19:30:00 #topic Open Discussion 19:30:13 badveli: i noticed you posted WIP patch for service objects, thanks 19:30:26 any other parting thoughts from anyone? 19:30:28 there are two patches 19:30:55 https://review.openstack.org/#/c/159692/ 19:31:18 https://review.openstack.org/#/c/161076/ 19:31:33 badveli: thanks! 19:31:42 we are a minute over 19:31:51 thanks everyone for your time today 19:31:58 its crunch time now! ;-) 19:31:59 back to work 19:32:01 the firewall patch is a bit not sure how to implement 19:32:03 bye all 19:32:12 bye 19:32:16 badveli: we can take it to #openstack-fwaas 19:32:17 ok, i will follow up by email 19:32:23 badveli: sure 19:32:26 thanks sumit 19:32:28 #endmeeting