)]}'
{"id":"openstack%2Fneutron~777873","triplet_id":"openstack%2Fneutron~stable%2Fqueens~I4749fdc6a6cabd253b971bf4010ff76f5593c59c","project":"openstack/neutron","branch":"stable/queens","topic":"bug/1902917-stable/queens","hashtags":[],"change_id":"I4749fdc6a6cabd253b971bf4010ff76f5593c59c","subject":"[OVS FW] Allow egress ICMPv6 only for know addresses","status":"MERGED","created":"2021-02-27 20:17:52.000000000","updated":"2021-03-10 15:49:07.000000000","submitted":"2021-03-10 15:49:07.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"777873-bug/1902917-stable/queens","meta_rev_id":"66cf3d3d17ce981ed5f00bd5916ff50e5eaa30bc","_number":777873,"virtual_id_number":777873,"owner":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},{"value":0,"_account_id":21798,"name":"Bernard Cafarelli","email":"bcafarel@redhat.com","username":"bcafarel"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2021-03-10 15:49:06.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"all":[{"value":2,"date":"2021-03-10 09:58:17.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},{"value":2,"date":"2021-03-04 08:28:09.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":21798,"name":"Bernard Cafarelli","email":"bcafarel@redhat.com","username":"bcafarel"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"all":[{"value":1,"date":"2021-03-10 09:58:17.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},{"value":0,"_account_id":21798,"name":"Bernard Cafarelli","email":"bcafarel@redhat.com","username":"bcafarel"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},{"value":0,"_account_id":21798,"name":"Bernard Cafarelli","email":"bcafarel@redhat.com","username":"bcafarel"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},{"_account_id":21798,"name":"Bernard Cafarelli","email":"bcafarel@redhat.com","username":"bcafarel"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2021-02-27 21:27:13.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2021-03-04 08:21:30.000000000","updated_by":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"reviewer":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"state":"REVIEWER"},{"updated":"2021-03-04 08:28:09.000000000","updated_by":{"_account_id":21798,"name":"Bernard Cafarelli","email":"bcafarel@redhat.com","username":"bcafarel"},"reviewer":{"_account_id":21798,"name":"Bernard Cafarelli","email":"bcafarel@redhat.com","username":"bcafarel"},"state":"REVIEWER"}],"messages":[{"id":"662a56c8beccc2086ca534720639a39ed1d7d2ad","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"date":"2021-02-27 20:17:52.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"b2dbb5def4e2a5c9305a685c2dddda0fe07b2eed","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-02-27 21:27:13.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- neutron-tempest-plugin-scenario-linuxbridge-queens https://zuul.opendev.org/t/openstack/build/33ea0154157347209ccd9be941a16bee : SUCCESS in 50m 51s\n- neutron-tempest-plugin-scenario-openvswitch-queens https://zuul.opendev.org/t/openstack/build/99f9f4c091c54dd687d4e8a37bde37bb : SUCCESS in 50m 20s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/94b8f69eb2854e27945130c1463a8724 : SUCCESS in 8m 39s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/17958c8fdee54b64b396d657888fb7b8 : SUCCESS in 14m 22s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/30fcfa0f1850467aa3801f0f61c23894 : SUCCESS in 20m 22s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/29b40eda2f274ecea89f6c808db36cab : SUCCESS in 5m 58s\n- tempest-full https://zuul.opendev.org/t/openstack/build/b19bc192a5ad47b1b04f0a11074c134a : SUCCESS in 58m 36s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/47ff843feea74050b4717ac43e3dc780 : SUCCESS in 38m 09s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/9cf3b69012bb47d98b88336106eb79b2 : SUCCESS in 54m 20s\n- neutron-functional https://zuul.opendev.org/t/openstack/build/4d3ce7f2a3f84d9d9daec6d25c21d66e : SUCCESS in 31m 51s\n- neutron-rally-neutron https://zuul.opendev.org/t/openstack/build/acdf9a8d93994a78bef3aa33f7b4ef03 : SUCCESS in 1h 06m 30s\n- neutron-tempest-dvr https://zuul.opendev.org/t/openstack/build/e688e76abb4f497bbd2a984bfd11c4f1 : SUCCESS in 56m 09s\n- neutron-tempest-linuxbridge https://zuul.opendev.org/t/openstack/build/34e4c08f858d413a8212c705ed81509b : FAILURE in 1h 03m 49s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/d261276481214849b79788b404ebddab : SUCCESS in 19m 03s","accounts_in_message":[],"_revision_number":1},{"id":"89012a92a30f2e10fce30ba5dd1177b9b19d8fe8","author":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"date":"2021-03-04 07:58:03.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"765172fc96bc903582e87bb45c80e9c55410f82c","author":{"_account_id":21798,"name":"Bernard Cafarelli","email":"bcafarel@redhat.com","username":"bcafarel"},"date":"2021-03-04 08:28:09.000000000","message":"Patch Set 1: Code-Review+2\n\nUnrelated storage test failure","accounts_in_message":[],"_revision_number":1},{"id":"90596d194cab22b33f184fad11b1d4e5d32e74de","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-03-04 09:40:05.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- neutron-tempest-plugin-scenario-linuxbridge-queens https://zuul.opendev.org/t/openstack/build/0716d4cc445f451dbae6483dc15232a2 : SUCCESS in 59m 57s\n- neutron-tempest-plugin-scenario-openvswitch-queens https://zuul.opendev.org/t/openstack/build/e9c07dd478914206a58626b49ed362b5 : SUCCESS in 49m 07s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/4b86a261dfd7482c9fb69d59b8c25067 : SUCCESS in 12m 25s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/2df6281db83a4c428dacf748224568d1 : SUCCESS in 24m 14s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/c86f6842e08f432badddb9f7af162705 : SUCCESS in 26m 50s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/b17998b755b54e15aeb4b656a94f0a87 : SUCCESS in 7m 42s\n- tempest-full https://zuul.opendev.org/t/openstack/build/ddad3bf65f3d45d2b8e9b2dc2ef67262 : SUCCESS in 1h 18m 04s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/bdc8be11e41044a6aa63925f1d1e6f43 : SUCCESS in 52m 06s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/e37f7cff41664095bd2123894c033892 : SUCCESS in 1h 18m 16s\n- neutron-functional https://zuul.opendev.org/t/openstack/build/fc1622154122419686ba297ac3add4d4 : SUCCESS in 40m 35s\n- neutron-rally-neutron https://zuul.opendev.org/t/openstack/build/790b1a469e234fe99391b73af4530e17 : SUCCESS in 1h 36m 42s\n- neutron-tempest-dvr https://zuul.opendev.org/t/openstack/build/17f212ac44794fd5a95151e36a458305 : SUCCESS in 1h 19m 54s\n- neutron-tempest-linuxbridge https://zuul.opendev.org/t/openstack/build/0372392aa1d1473c8089c78a256cf8d4 : SUCCESS in 1h 27m 23s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/f79771644cf94ab980b80cccc9d39004 : SUCCESS in 32m 33s","accounts_in_message":[],"_revision_number":1},{"id":"4adb41477cbadd5df23a883ce73b0113b68360d3","author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"date":"2021-03-10 09:58:17.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"2459824f1ca3cbf6e02dde9bad159c1ed9a95dac","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-03-10 09:58:42.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"d8cb6781e4f684d71e50efed36d7f79a6814bcc7","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-03-10 15:49:06.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/59df302c27154785a975320d82792e93 : SUCCESS in 14m 11s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/6b945a93a6c04f93941d7e28f02dbbb5 : SUCCESS in 25m 45s\n- openstack-tox-py35 https://zuul.opendev.org/t/openstack/build/cef301bd65ac4681b185411a615f552c : SUCCESS in 22m 58s\n- build-openstack-sphinx-docs https://zuul.opendev.org/t/openstack/build/3f509e5bdc2d4f7ba07a71420e881dfb : SUCCESS in 8m 00s\n- tempest-full https://zuul.opendev.org/t/openstack/build/6ad44382ba59428e90d7995914176cc6 : SUCCESS in 56m 02s\n- neutron-grenade https://zuul.opendev.org/t/openstack/build/5649d36259cf4913b0f9e158f8c2fd03 : SUCCESS in 35m 46s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/780b31882c434c47bb46bb546dc0d427 : SUCCESS in 1h 01m 39s\n- neutron-functional https://zuul.opendev.org/t/openstack/build/9a706d4f20424fc2b85f9e359fc13c4d : SUCCESS in 42m 27s\n- neutron-tempest-dvr https://zuul.opendev.org/t/openstack/build/e7817267220d46f68d33f352420b8a27 : SUCCESS in 1h 28m 57s\n- neutron-tempest-linuxbridge https://zuul.opendev.org/t/openstack/build/24f567bd869546aea64fc8284d8de24b : SUCCESS in 1h 13m 05s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/15103d1fdf194442a278f4ea73a93015 : SUCCESS in 31m 38s","accounts_in_message":[],"_revision_number":1},{"id":"66cf3d3d17ce981ed5f00bd5916ff50e5eaa30bc","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-03-10 15:49:07.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"7b1f0dd1aed68f98b5472c2dfa821e9338f286f0","revisions":{"7b1f0dd1aed68f98b5472c2dfa821e9338f286f0":{"kind":"REWORK","_number":1,"created":"2021-02-27 20:17:52.000000000","uploader":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"ref":"refs/changes/73/777873/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/neutron","ref":"refs/changes/73/777873/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/neutron refs/changes/73/777873/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/neutron refs/changes/73/777873/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/neutron refs/changes/73/777873/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/neutron refs/changes/73/777873/1"}}},"commit":{"parents":[{"commit":"2e52d3f554240b74ef528f1d6bdf173f9563393a","subject":"Fix losses of ovs flows when ovs is restarted","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/neutron/commit/2e52d3f554240b74ef528f1d6bdf173f9563393a"}]}],"author":{"name":"Slawek Kaplonski","email":"skaplons@redhat.com","date":"2021-02-19 10:35:02.000000000","tz":60},"committer":{"name":"Slawek Kaplonski","email":"skaplons@redhat.com","date":"2021-02-27 20:17:05.000000000","tz":60},"subject":"[OVS FW] Allow egress ICMPv6 only for know addresses","message":"[OVS FW] Allow egress ICMPv6 only for know addresses\n\nBefore that patch it was possible to send ICMPv6 packets like e.g.\n    neutron_lib.constants.ICMPV6_TYPE_MLD_QUERY,\n    neutron_lib.constants.ICMPV6_TYPE_RS,\n    neutron_lib.constants.ICMPV6_TYPE_NS,\n    neutron_lib.constants.ICMPV6_TYPE_NA\n\nAnd that could cause some security issues as instance could advertise\nthat it owns IPv6 address which really don\u0027t belong to it.\n\nNow rules in table\u003d71 which allows that traffic are \"per mac/ipaddress\"\nand are allowed only for fixed ips allocated to port and port\u0027s\nallowed_address_pairs.\n\nConflicts:\n    neutron/agent/linux/openvswitch_firewall/firewall.py\n    neutron/tests/unit/agent/linux/openvswitch_firewall/test_firewall.py\n\nCloses-Bug: #1902917\nChange-Id: I4749fdc6a6cabd253b971bf4010ff76f5593c59c\n(cherry picked from commit 4b5bcff64c4725b37f094dfd2613ec58f723d304)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/neutron/commit/7b1f0dd1aed68f98b5472c2dfa821e9338f286f0"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/neutron/commit/7b1f0dd1aed68f98b5472c2dfa821e9338f286f0"}]},"branch":"refs/heads/stable/queens"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"}},{"label":"Review-Priority","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}