)]}'
{"id":"openstack%2Fneutron~991021","triplet_id":"openstack%2Fneutron~stable%2F2026.1~I8655da7f7a0cf033ce4a7145f5345195881238e5","project":"openstack/neutron","branch":"stable/2026.1","attention_set":{},"removed_from_attention_set":{"11975":{"account":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"last_update":"2026-06-03 02:38:32.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I8655da7f7a0cf033ce4a7145f5345195881238e5","subject":"[OVS FW] Clean invalid conntrack entries after OF rules are applied","status":"MERGED","created":"2026-06-02 07:28:53.000000000","updated":"2026-06-03 02:40:35.000000000","submitted":"2026-06-03 02:38:32.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"991021","cherry_pick_of_change":990898,"cherry_pick_of_patch_set":2,"meta_rev_id":"278e2e556cbf1a547aebd3bc3d1e2949f5bf877b","_number":991021,"virtual_id_number":991021,"owner":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},{"value":0,"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-03 02:38:31.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"all":[{"value":2,"date":"2026-06-02 07:47:47.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},{"value":2,"date":"2026-06-03 00:37:00.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"all":[{"value":0,"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},{"value":1,"date":"2026-06-03 00:37:00.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"recommended":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"all":[{"value":1,"date":"2026-06-02 07:47:47.000000000","permitted_voting_range":{"min":1,"max":2},"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},{"value":0,"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","value":1,"default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-06-02 07:47:47.000000000","updated_by":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"reviewer":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"state":"REVIEWER"},{"updated":"2026-06-02 09:31:20.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2026-06-02 09:44:05.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-06-03 00:37:00.000000000","updated_by":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"reviewer":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"state":"REVIEWER"}],"messages":[{"id":"6936b29d0d9e2d90921fdea362fd4c216530fdde","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"date":"2026-06-02 07:28:53.000000000","message":"Patch Set 1: Cherry Picked from branch master.","accounts_in_message":[],"_revision_number":1},{"id":"0e25af7e3d63d43f6a70799865a95b6130ab07a4","author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"date":"2026-06-02 07:47:47.000000000","message":"Patch Set 1: Code-Review+2 Review-Priority+1","accounts_in_message":[],"_revision_number":1},{"id":"ba29ca926d0631e423f068b3b5ae1d1a7e61cc0e","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-02 09:31:20.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/b4e167ec906646d9815e6f8c8e0bf77d\n\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/803fb5313bd64b8bb93e224c5fe7bd3b : SUCCESS in 46m 05s\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/d72460318de94f869107d5ab21a5ea7c : SUCCESS in 27m 02s\n- openstack-tox-py310-arm64 https://zuul.opendev.org/t/openstack/build/8d4d440a3ab94b60bf94fbabddb8dc7c : SUCCESS in 58m 36s","accounts_in_message":[],"_revision_number":1},{"id":"131553c161d15a7adc07f40e715a528ff3d1da66","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-02 09:44:05.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/e61e0a31158044a9be5c9614d166fa2b\n\n- tempest-integrated-networking https://zuul.opendev.org/t/openstack/build/6d6f6efcf2d9422d9374cb7ef7b1450d : SUCCESS in 1h 05m 03s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/1ca883bb6b144c298961423e6cd73b63 : SUCCESS in 49m 25s\n- neutron-tempest-plugin-openvswitch-2026-1 https://zuul.opendev.org/t/openstack/build/c0bd96f8bf0e41218e1502f617e74f6d : SUCCESS in 1h 23m 35s\n- neutron-tempest-plugin-ovn-2026-1 https://zuul.opendev.org/t/openstack/build/4ca45192d6b9435286a214602cacaaa2 : SUCCESS in 2h 13m 46s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/be236ef44479454b9d4219cb39568efc : SUCCESS in 1h 01m 33s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/52c0f10e362341a5b9fe15428b9d393a : SUCCESS in 10m 50s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/0033f55ee08b41a3a3a17a6237985981 : SUCCESS in 27m 17s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/c9a6deb6bce648e4ad2b8636cf2868aa : SUCCESS in 22m 32s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/4df162c2f05945908534ce5b81cf92b3 : SUCCESS in 35m 08s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9604e8191c034a81aff7d8c8e1380c3a : SUCCESS in 8m 56s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/bfa6069d7e594675abd8a23aff98ebbc : SUCCESS in 17m 14s\n- neutron-ovs-grenade-multinode-skip-level https://zuul.opendev.org/t/openstack/build/f5c602da3d0c4ef7bba7ae4c66e8735a : SUCCESS in 49m 37s\n- neutron-ovn-grenade-multinode-skip-level https://zuul.opendev.org/t/openstack/build/76e4e73ebe794790be6d1d27ddf06035 : SUCCESS in 1h 13m 26s\n- neutron-functional https://zuul.opendev.org/t/openstack/build/5729870db8dc46428b6712dc9849c054 : SUCCESS in 1h 33m 11s\n- neutron-ovs-grenade-multinode https://zuul.opendev.org/t/openstack/build/ab4dee3d25254fafbf7af8c3810f4237 : SUCCESS in 42m 38s\n- neutron-ovn-grenade-multinode https://zuul.opendev.org/t/openstack/build/2a10a0a3034c4fa384fa66af6101b7e5 : SUCCESS in 1h 00m 56s\n- neutron-ovs-tempest-multinode-full https://zuul.opendev.org/t/openstack/build/3145f1f0ac2c4203ad7d6c4d9391edee : SUCCESS in 1h 05m 15s\n- neutron-ovs-tempest-dvr-ha-multinode-full https://zuul.opendev.org/t/openstack/build/192efe6ceb4243008d50a4af55cf743d : SUCCESS in 1h 33m 32s\n- neutron-ovn-tempest-ipv6-only-ovs-release https://zuul.opendev.org/t/openstack/build/3da901fe62724136ba1beec095b96972 : SUCCESS in 1h 03m 56s\n- neutron-ovs-rally-task https://zuul.opendev.org/t/openstack/build/c4bd05175b9b41828b1e2ee9d751c2a1 : SUCCESS in 1h 28m 28s\n- neutron-ovn-rally-task https://zuul.opendev.org/t/openstack/build/40b631a77cf8463fa5535d0a88582309 : SUCCESS in 36m 22s","accounts_in_message":[],"_revision_number":1},{"id":"cb4d80bfe3563aecd9ce3b13a5c224e45c38ba56","author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"date":"2026-06-03 00:37:00.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"574445853b83e416a533f2f33d29aeaa2334417b","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 00:37:31.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"8ac157ddecb8cd0082d7cd99006189ad14a467ac","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 02:38:31.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/dced32bdef2044e3a8d126e8b7e9891f\n\n- tempest-integrated-networking https://zuul.opendev.org/t/openstack/build/a258ef289daf441f9f0a8a7b030a393f : SUCCESS in 1h 26m 35s\n- openstacksdk-functional-devstack https://zuul.opendev.org/t/openstack/build/240301fd11bf4868ad717fef455524fb : SUCCESS in 40m 30s\n- neutron-tempest-plugin-ovn-2026-1 https://zuul.opendev.org/t/openstack/build/b4626a84a3814c8bb6606a43c4c73376 : SUCCESS in 2h 00m 25s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/99d5a8abca4241d7a355285a1d785c40 : SUCCESS in 27m 11s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/9843746732f34f94be70ac0b90b3e037 : SUCCESS in 33m 21s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/f3cd0bc4f15f40aa8a6b243e37c9b58d : SUCCESS in 25m 54s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/53df103903b8473291513e29470baace : SUCCESS in 12m 20s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/2a8195d51d6d41c099122cf07f72bd01 : SUCCESS in 19m 13s\n- neutron-functional https://zuul.opendev.org/t/openstack/build/351ca4fe32644660a7057155e95fb9d4 : SUCCESS in 54m 35s\n- neutron-ovs-tempest-multinode-full https://zuul.opendev.org/t/openstack/build/76fe1f3d6f5548c385b465bf81a387b2 : SUCCESS in 1h 10m 46s\n- neutron-ovn-grenade-multinode https://zuul.opendev.org/t/openstack/build/f8a6cbd51db44fcc8b93b67b60f7c144 : SUCCESS in 1h 12m 39s\n- neutron-ovs-grenade-multinode https://zuul.opendev.org/t/openstack/build/1632181f528f4c0889b2a5f8e8d2eb4d : SUCCESS in 1h 13m 01s\n- neutron-ovn-tempest-ipv6-only-ovs-release https://zuul.opendev.org/t/openstack/build/dc04a71829fc4a23a7ddfc529fd23635 : SUCCESS in 48m 07s","accounts_in_message":[],"_revision_number":1},{"id":"c756fc8f4f18447fdc9acb788d38a62978b9a800","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 02:38:32.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"278e2e556cbf1a547aebd3bc3d1e2949f5bf877b","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 02:40:35.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/ddef5abc345f41d2800fc41c462ad2aa\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/0ebf9924a28848cdb73b140352f545ee : SUCCESS in 1m 25s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"895376b513d30f01505a531206061454d35b0db6","revisions":{"895376b513d30f01505a531206061454d35b0db6":{"kind":"REWORK","_number":1,"created":"2026-06-02 07:28:53.000000000","uploader":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"ref":"refs/changes/21/991021/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/neutron","ref":"refs/changes/21/991021/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/neutron refs/changes/21/991021/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/neutron refs/changes/21/991021/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/neutron refs/changes/21/991021/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/neutron refs/changes/21/991021/1"}}},"commit":{"parents":[{"commit":"ec19809a77d2548e05556b2c672018e8c570d2e8","subject":"Merge \"Skip OVNL3 post-fork init in non-API workers\" into stable/2026.1","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/neutron/commit/ec19809a77d2548e05556b2c672018e8c570d2e8"}]}],"author":{"name":"Slawek Kaplonski","email":"skaplons@redhat.com","date":"2026-06-01 10:02:58.000000000","tz":120},"committer":{"name":"Slawek Kaplonski","email":"skaplons@redhat.com","date":"2026-06-02 07:28:53.000000000","tz":0},"subject":"[OVS FW] Clean invalid conntrack entries after OF rules are applied","message":"[OVS FW] Clean invalid conntrack entries after OF rules are applied\n\nThe openvswitch firewall driver has got OF rules to mark some\nconnections as invalid using mark CT_MARK_INVALID in conntrack.\nLater packets which belongs to such invalid connection are dropped by\ndifferent OF rules in br-int.\n\nThe problem is that such conntrack entries were cleaned for each of the\nports for which filters were updated, even with deferred apply on. In\nsuch case new OpenFlow rules are applied in deferred way after all ports\nare processed by the agent.\nThat could lead to the situation where conntrack entries to mark some\nkind of connection as invalid was deleted by the fw driver, but new OF\nrules were not yet applied in the br-int. If during that time the same\npackets were still flowing to/from the port, new conntrack entry to mark\nsuch packets would be added back and that would not be cleaned after OF\nrules were actually applied on the `br-int` bridge.\n\nThis patch fixes that issue be deferring cleanup of the conntrack\nentries for all ports to be done after OF rules are actually updated in\n`br-int`.\n\nAssisted-by: claude-opus-4.6\n\nCloses-bug: #2154561\n\nChange-Id: I8655da7f7a0cf033ce4a7145f5345195881238e5\nSigned-off-by: Slawek Kaplonski \u003cskaplons@redhat.com\u003e\n(cherry picked from commit 8fde7d461a3ee44be266946dd74d3716df714818)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/neutron/commit/895376b513d30f01505a531206061454d35b0db6"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/neutron/commit/895376b513d30f01505a531206061454d35b0db6"}]},"branch":"refs/heads/stable/2026.1","conflicts":{"ours":"ec19809a77d2548e05556b2c672018e8c570d2e8","theirs":"8fde7d461a3ee44be266946dd74d3716df714818","contains_conflicts":false}}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"}},{"label":"Review-Priority","status":"MAY","applied_by":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Review-Priority","description":"Review priority","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"-label:Review-Priority\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":[],"failing_atoms":["label:Review-Priority\u003dMIN"],"atom_explanations":{"label:Review-Priority\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}