April 2019 - openstack-discuss - lists.openstack.org

kube_cluster_deploy fails
by Pawel Konczalski 02 May '19

02 May '19

Hi, i try to deploy a kubernetes cluster on OpenStack rocky with Magnum. All Heat steps runs fine except for the last one "kube_cluster_deploy": kube_cluster_deploy c3a79e96-87d8-442e-83f1-91d7a1acd896 1 minute Create Failed CREATE aborted (Task create from SoftwareDeployment "kube_cluster_deploy" Stack "kubernetes-cluster9-l4ol4ger3key" [b17bfab3-f46a-477b-921f-4719bfd8df06] Timed out) The cluster contains three control / compute nodes, Octavia is also installed and works fine as far as I can see. Atomic Image: https://dl.fedoraproject.org/pub/alt/atomic/stable/Fedora-Atomic-27-2018041… The command was: openstack coe cluster template create kubernetes-cluster-template \ --image fedora-atomic-latest \ --external-network public \ --dns-nameserver 8.8.8.8 \ --master-flavor m1.small \ --flavor m1.large \ --coe kubernetes \ --docker-volume-size 10 \ --tls-disabled \ --floating-ip-enabled openstack coe cluster create kubernetes-cluster \ --cluster-template kubernetes-cluster-template \ --master-count 1 \ --node-count 1 \ --timeout 30 \ --keypair mykey Did someone run also into this Problem or know how to fix it? BR Pawel

3 4

[openstack-dev] [neutron] PTG agenda
by Miguel Lavalle 02 May '19

02 May '19

Hi Neutrinos,, I took your proposals for PTG topics and organized them in an agenda. Please look at https://etherpad.openstack.org/p/openstack-networking-train-ptg. Let's have a very productive meeting! Best regards Miguel

2 3

[glance] [ops] Issue sharing an image with another project (something related to get_image_location)
by Massimo Sgaravatto 02 May '19

02 May '19

I have a small Rocky installation where Glance is configured with 2 backends (old images use the 'file' backend while new ones use the rbd backend, which is the default) show_multiple_locations is true but I have these settings in policy.json: # grep _image_location /etc/glance/policy.json "delete_image_location": "role:admin", "get_image_location": "role:admin", "set_image_location": "role:admin", This was done because of: https://wiki.openstack.org/wiki/OSSN/OSSN-0065 If an unpriv user tries to share a private image: $ openstack image add project 3194a04b-ffc8-4aaf-b6c8-adc24e3d3fe6 e81df4c0b493439abb8b85bfd4cbe071 403 Forbidden: Not allowed to create members for image 3194a04b-ffc8-4aaf-b6c8-adc24e3d3fe6. (HTTP 403) In the log file it looks like that the problem is related to the get_image_location operation: /var/log/glance/api.log:2019-04-29 16:06:54.523 8220 WARNING glance.api.v2.image_members [req-dd93cdc9-767d-4c51-8e5a-edf746c02264 ab573ba3ea014b778193b6922ffffe6d ee1865a76440481cbcff08544c7d580a - default default] Not allowed to create members for image 3194a04b-ffc8-4aaf-b6c8-adc24e3d3fe6.: Forbidden: You are not authorized to complete get_image_location action. But actually the sharing operation succeeded: $ glance member-list --image-id 3194a04b-ffc8-4aaf-b6c8-adc24e3d3fe6 +--------------------------------------+----------------------------------+---------+ | Image ID | Member ID | Status | +--------------------------------------+----------------------------------+---------+ | 3194a04b-ffc8-4aaf-b6c8-adc24e3d3fe6 | e81df4c0b493439abb8b85bfd4cbe071 | pending | +--------------------------------------+----------------------------------+---------+ Cheers, Massimo

2 3

[OpenStack-Ansible][OSA] Team Dinner Denver
by Amy Marrich 01 May '19

01 May '19

We are looking at having our official team dinner Wednesday evening. Please visit this etherpad: https://etherpad.openstack.org/p/osa-team-dinner-plan To add your name and vote on restaurants so I can get a head count and make a reservation. Thanks, Amy (spotz)

2 1

[devstack] Identity URL problem
by Neil Jerram 01 May '19

01 May '19

Does anyone know what causes this problem at [1]: 2019-04-30 16:34:03.137 | +++ functions-common:oscwrap:2346 : command openstack role add admin --user neutron --project service --user-domain Default --project-domain Default 2019-04-30 16:34:03.139 | +++ functions-common:oscwrap:2346 : openstack role add admin --user neutron --project service --user-domain Default --project-domain Default 2019-04-30 16:34:04.331 | Failed to discover available identity versions when contacting http://104.239.175.234/identity. Attempting to parse version from URL. 2019-04-30 16:34:04.331 | Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. Not Found (HTTP 404) [1] http://logs.openstack.org/79/638479/3/check/networking-calico-tempest-dsvm/… I think there are loads of uses of that URL, before where the networking-calico plugin uses it, so I can't see why the plugin's use hits that error. Thanks, Neil

2 3

[ptg][sig][upgrades] Train PTG Upgrades SIG session
by James Page 01 May '19

01 May '19

Hi All I've finally found time to create an etherpad for the Upgrades SIG session at the upcoming PTG in Denver (on the train on my way to LHR to catch my flight). https://etherpad.openstack.org/p/upgrade-sig-ptg-train I've added a few proposed topics but if you're at the PTG (or summit) and have anything upgrade related to discuss please add your topic to the etherpad over the next few days - I'll then put together a rough schedule for our half day of upgrades discussion on Thursday morning in room 201. IRC meetings never really got restarted since the last PTG but I know that the promise of getting together to discuss upgrade successes and challenges generally appeals to us all based on prior sessions! Thanks in advance and see you all in Denver! Cheers James

1 1

[Ceilometer]: cpu_util meter not being calculated as expected leading to delay in scaling
by Arvind Kumar 30 Apr '19

30 Apr '19

Hi, A design issue is observed in ceilometer service of Openstack. Setup include multiple compute nodes and 3 controller nodes. Meters from each compute node are sent to all the 3 ceilometer instances via RabbitMQ in round robin fashion at an interval of 10 min. After transformation of cumulative cpu meter data, cpu_util is generated by ceilometer instance at controller node and is published to the http address configured in ceilometer pipeline configuration. cpu_util is used by the application to take the decision if scaling of VM needs to be triggered or not. Ceilometer instance calculates cpu_util for a VM from the difference between cumulative cpu usage of VM at two timestamp divided by the timestamp difference. Let's say 1 compute node send the cumulative cpu usage of a VM (C1, C2, C3, C4) at timestamp T1, T2, T3, T4 (difference between any two timestamp is 10 min). Now (C1,T1) & (C4,T4) tuple is received by ceilometer instance 1, (C2,T2) by instance 2, (C3,T3) by instance 3. Here even if CPU usage of VM is increased between T1 & T2, cpu_util is calculated for 30 min duration (T1 & T4) rather than as expected for 10 min. This leads to scaling getting triggered after T4 that too when CPU usage is consistently above the threshold between T1 and T4. Please suggest how could this issue could be resolved. Do we have any solution to bind VM or compute node meter data to specific ceilometer instance for processing? Regards, Arvind. "Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s). are confidential and may be privileged. If you are not the intended recipient. you are hereby notified that any review. re-transmission. conversion to hard copy. copying. circulation or other use of this message and any attachments is strictly prohibited. If you are not the intended recipient. please notify the sender immediately by return email. and delete this message and any attachments from your system. Virus Warning: Although the company has taken reasonable precautions to ensure no viruses are present in this email. The company cannot accept responsibility for any loss or damage arising from the use of this email or attachment."

2 2

[Zun] openstack appcontainer create Error
by Alejandro Ruiz Bermejo 30 Apr '19

30 Apr '19

Hi, i'm installing Zun in Openstack Queens with Ubuntu 18.04.1 LTS, i already have configured docker and kuyr-libnetwork. I'm following the guide at https://docs.openstack.org/zun/queens/install/index.html. I followed all the steps of the installation at controller node and everything resulted without problems. After finished the installation direction at compute node the *systemctl status zun-compute* have the following errors root@compute /h/team# systemctl status zun-compute ● zun-compute.service - OpenStack Container Service Compute Agent Loaded: loaded (/etc/systemd/system/zun-compute.service; enabled; vendor preset: enabled) Active: active (running) since Tue 2019-04-30 16:46:56 UTC; 4h 26min ago Main PID: 2072 (zun-compute) Tasks: 1 (limit: 4915) CGroup: /system.slice/zun-compute.service └─2072 /usr/bin/python /usr/local/bin/zun-compute Apr 30 16:46:56 compute systemd[1]: Started OpenStack Container Service Compute Agent. Apr 30 16:46:57 compute zun-compute[2072]: 2019-04-30 16:46:57.929 2072 INFO zun.cmd.compute [-] Starting server in PID 2072 Apr 30 16:46:57 compute zun-compute[2072]: 2019-04-30 16:46:57.941 2072 INFO zun.container.driver [-] Loading container driver 'docker.driver.DockerDriver' Apr 30 16:46:58 compute zun-compute[2072]: 2019-04-30 16:46:58.028 2072 INFO zun.container.driver [-] Loading container driver 'docker.driver.DockerDriver' Apr 30 16:48:33 compute zun-compute[2072]: 2019-04-30 16:48:33.645 2072 INFO zun.image.driver [req-7e0b8325-1e09-4410-80f4-af807cbc0420 a16c6ef0319b4643a4ec8e56a1d025cb 59065d8f970b467aa94ef7b35f1edab5 default - -] Loading container image driver 'glance' Apr 30 16:48:33 compute zun-compute[2072]: 2019-04-30 16:48:33.911 2072 INFO zun.image.driver [req-7e0b8325-1e09-4410-80f4-af807cbc0420 a16c6ef0319b4643a4ec8e56a1d025cb 59065d8f970b467aa94ef7b35f1edab5 default - -] Loading container image driver 'glance' Apr 30 16:48:35 compute zun-compute[2072]: 2019-04-30 16:48:35.455 2072 INFO zun.image.driver [req-7e0b8325-1e09-4410-80f4-af807cbc0420 16c6ef0319b4643a4ec8e56a1d025cb 59065d8f970b467aa94ef7b35f1edab5 default - -] Loading container image driver 'glance' Apr 30 16:48:35 compute zun-compute[2072]: 2019-04-30 16:48:35.939 2072 ERROR zun.image.glance.driver [req-7e0b8325-1e09-4410-80f4-af807cbc0420 a16c6ef0319b4643a4ec8e56a1d025cb 59065d8f970b467aa94ef7b35f1edab5 default - -] Imae cirros was not found in glance: ImageNotFound: Image cirros could not be found. Apr 30 16:48:35 compute zun-compute[2072]: 2019-04-30 16:48:35.940 2072 INFO zun.image.driver [req-7e0b8325-1e09-4410-80f4-af807cbc0420 a16c6ef0319b4643a4ec8e56a1d025cb 59065d8f970b467aa94ef7b35f1edab5 default - -] Loading container image driver 'docker' Apr 30 16:48:55 compute zun-compute[2072]: 2019-04-30 16:48:55.011 2072 ERROR zun.compute.manager [req-7bfa764a-45b8-4e2f-ac70-84d8bb71b135 - - - - -] Error occurred while calling Docker create API: Docker internal error: 500 Server Error: Internal Server Error ("failed to update store for object typpe *libnetwork.endpointCnt: client: etcd member http://controller:2379 has no leader").: DockerError: Docker internal error: 500 Server Error: Internal Server Error ("failed to update store for object type *libnetwork.endpointtCnt: client: etcd member http://controller:2379 has no leader"). Also *systemctl status docker* show the next output root@compute /h/team# systemctl status docker ● docker.service - Docker Application Container Engine Loaded: loaded (/lib/systemd/system/docker.service; enabled; vendor preset: enabled) Drop-In: /etc/systemd/system/docker.service.d └─docker.conf, http-proxy.conf, https-proxy.conf Active: active (running) since Tue 2019-04-30 16:46:25 UTC; 4h 18min ago Docs: https://docs.docker.com Main PID: 1777 (dockerd) Tasks: 21 CGroup: /system.slice/docker.service └─1777 /usr/bin/dockerd --group zun -H tcp://compute:2375 -H unix:///var/run/docker.sock --cluster-store etcd://controller:2379 Apr 30 16:46:20 compute dockerd[1777]: time="2019-04-30T16:46:20.815305836Z" level=warning msg="Your kernel does not support cgroup rt runtime" Apr 30 16:46:20 compute dockerd[1777]: time="2019-04-30T16:46:20.815933695Z" level=info msg="Loading containers: start." Apr 30 16:46:24 compute dockerd[1777]: time="2019-04-30T16:46:24.378526837Z" level=info msg="Default bridge (docker0) is assigned with an IP address 17 Apr 30 16:46:24 compute dockerd[1777]: time="2019-04-30T16:46:24.572558877Z" level=info msg="Loading containers: done." Apr 30 16:46:25 compute dockerd[1777]: time="2019-04-30T16:46:25.198101219Z" level=info msg="Docker daemon" commit=e8ff056 graphdriver(s)=overlay2 vers Apr 30 16:46:25 compute dockerd[1777]: time="2019-04-30T16:46:25.198211373Z" level=info msg="Daemon has completed initialization" Apr 30 16:46:25 compute dockerd[1777]: time="2019-04-30T16:46:25.232286069Z" level=info msg="API listen on /var/run/docker.sock" Apr 30 16:46:25 compute dockerd[1777]: time="2019-04-30T16:46:25.232318790Z" level=info msg="API listen on 10.8.9.58:2375" Apr 30 16:46:25 compute systemd[1]: Started Docker Application Container Engine. Apr 30 16:48:55 compute dockerd[1777]: time="2019-04-30T16:48:55.009820439Z" level=error msg="Handler for POST /v1.26/networks/create returned error: failed to update store for object type *libnetwork.endpointCnt: client: etcd member http://controller:2379 has no leader" When i try to launch an app container as the guide says it shows an Error state and when i run opentack appcontainer show this is the reason of the error status_reason | Docker internal error: 500 Server Error: Internal Server Error ("failed to update store for object type *libnetwork.endpointCnt: client: etcd member http://controller:2379 has no leader") I had some troubles installing Kuryr-libnetwork besides that i didn't had any othet problem during the installation of Zun

2 1

[openstack-dev] [neutron] Neutron team dinner at Denver PTG
by Miguel Lavalle 30 Apr '19

30 Apr '19

Hi Neutrinos, After extensive consultations with the community, we decided that pizza and beer is always a crowd pleaser among a bunch of software engineers. So our team dinner will take place at Mellow Mushroom Pizza Bakers, located at 1201 16th Street, Denver, CO 80202, phone number (720) 328-9114. There is a reservation under "Miguel" at 7pm on Friday May 3rd. Here you will find walking directions from the Convention Center: https://goo.gl/maps/G63j6FmuoyBKjA7RA If you haven't done so already and are planning to attend the team dinner, please register your name at the top of this etherpad: https://etherpad.openstack.org/p/openstack-networking-train-ptg Looking forward to see you there!

1 0

["Neutron"] Create subnet gives ERROR "Body contains invalid data"
by Kelam, Koteswara Rao 30 Apr '19

30 Apr '19

Tried to create a subnet with following curl command $ curl -s $END_POINT/neutron/v2.0/subnets -X POST -H "Content-Type: application/json" -H "Accept: application/json" -H "X-Auth-Token: $AUTH_TOKEN" -d '{'subnet': {'name': '8c7993a8-905e-4ad4-be3b-11c692e38317', 'network_id': '8f5f7cff-a320-40ba-9903-0c4e6dd80c0c', 'ip_version': 4, 'cidr': '169.254.3.1/32', 'enable_dhcp': 'false'}}' And got following ERROR: {"NeutronError": {"message": "Body contains invalid data", "type": "HTTPBadRequest", "detail": ""}} But when I tried with DOUBLE quotes in the body it got succeeded. $ curl -s $END_POINT/neutron/v2.0/subnets -X POST -H "Content-Type: application/json" -H "Accept: application/json" -H "X-Auth-Token: $AUTH_TOKEN" -d '{"subnet": {"name": "8c7993a8-905e-4ad4-be3b-11c692e38317", "network_id": "8f5f7cff-a320-40ba-9903-0c4e6dd80c0c", "ip_version": 4, "cidr": "169.254.3.1/32", "enable_dhcp": 'false'}}' {"subnet":{"description":"","enable_dhcp":false,"tags":[],"network_id":"8f5f7cff-a320-40ba-9903-0c4e6dd80c0c","tenant_id":"39f81bc21a9f4eb7b87586d983b6ec3d","created_at":"2019-04-29T11:56:57Z","segment_id":null,"dns_nameservers":[],"updated_at":"2019-04-29T11:56:57Z","gateway_ip":"169.254.3.2","ipv6_ra_mode":null,"allocation_pools":[{"start":"169.254.3.1","end":"169.254.3.1"}],"host_routes":[],"revision_number":0,"ip_version":4,"ipv6_address_mode":null,"cidr":"169.254.3.1/32","project_id":"39f81bc21a9f4eb7b87586d983b6ec3d","id":"33de75fb-fa10-460a-9123-577ae62a771a","subnetpool_id":null,"name":"8c7993a8-905e-4ad4-be3b-11c692e38317"}} Single quotes not allowed in requested body? Only double quotes allowed?? Single quotes also used to work for me with older versions on neutron. -Koteswar

4 3

[ptg] [interop] [refstack] Interop Forum and PTG sessions
by Egle Sigler 29 Apr '19

29 Apr '19

Hello Everyone, If you in Denver for the summit this week, please join the interop working group team for our forum session on Tuesday, 4:20 pm – 5:00 pm meeting room 507: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23657/i… PTG: Friday, 9:00 am – 10:45 am, Room 112 Thank you, Egle Sigler

1 0

[Zun] deploying zun error at kuryr installation
by Alejandro Ruiz Bermejo 29 Apr '19

29 Apr '19

Hi i've installed Openstack Queens on Ubuntu 18.04 and i'm following the Zun Installation Guide to deploy a container infrastructure. I'm following the steps to install kuryr-libnetwork (I've already installed docker on the compute node and it's working fine). The kuryr installation process had no errors but when i try to verify the operation as it's said in the guide docker network create --driver kuryr --ipam-driver kuryr \ --subnet 10.10.0.0/16 --gateway=10.10.0.1 test_net I'm Getting this error *Error* response from daemon: legacy plugin: Post http://10.8.9.54:23750/Plugin.Activate: dial tcp 10.8.9.54:23750: connect: connection refused I tryed to find the error wit **journalctl -u kuryr-libnetwork Apr 27 13:11:12 compute systemd[1]: Started Kuryr-libnetwork - Docker network plugin for Neutron. Apr 27 13:11:13 compute kuryr-server[10736]: 2019-04-27 13:11:13.273 10736 *WARNING* keystoneauth.identity.generic.base [-] Failed to discover available identity versions when contacting http://controller:35357. Attempting to parse version from URL.: ConnectFailure: Unable to establish connection to http://controller:35357: HTTPConnectionPool(host='controller', port=35357): MTTPConnectionPool(host='controller', port=35357): Max retries exceeded with url: / (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7fecef1a8090>: Failed to establish a new connection: [Errno 111] Connection refused',)) Apr 27 13:11:13 compute kuryr-server[10736]: 2019-04-27 13:11:13.274 10736 *CRITICAL* kuryr [-] Unhandled error: DiscoveryFailure: Could not determine a suitable URL for the plugin Apr 27 13:11:13 compute kuryr-server[10736]: 2019-04-27 13:11:13.274 10736 *ERROR* kuryr Traceback (most recent call last): This is the relevant content of my /etc/kuryr/kuryr.conf *[DEFAULT]* bindir = /usr/local/libexec/kuryr *[neutron]* www_authenticate_uri = http://controller:5000 auth_url = http://controller:35357 username = kuryr user_domain_name = default password = 123 project_name = service project_domain_name = default auth_type = password And this is the one at /usr/lib/docker/plugins/kuryr/kuryr.spec: http://conrtoller:23750 Btw compute node have connectivity with controller. I already have worked with the environment and launched kvm VMs on it Can someone help troubleshoot this error?? *UPDATE1* I checked open ports on controller node and 23750 isn't open. I followed the directions at the guide, any recommendation? Also in the compute node when i run systemctl status kuryr-libnetwork this is the output ● kuryr-libnetwork.service - Kuryr-libnetwork - Docker network plugin for Neutron Loaded: loaded (/etc/systemd/system/kuryr-libnetwork.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Sat 2019-04-27 16:06:21 UTC; 2min 39s ago Process: 17450 ExecStart=/usr/local/bin/kuryr-server --config-file /etc/kuryr/kuryr.conf (code=exited, status=1/FAILURE) Main PID: 17450 (code=exited, status=1/FAILURE) Apr 27 16:06:21 compute kuryr-server[17450]: 2019-04-27 16:06:21.497 17450 ERROR kuryr File "/usr/lib/python2.7/dist-packages/keystoneauth1/identity/base.py", line 134, in get_access Apr 27 16:06:21 compute kuryr-server[17450]: 2019-04-27 16:06:21.497 17450 ERROR kuryr self.auth_ref = self.get_auth_ref(session) Apr 27 16:06:21 compute kuryr-server[17450]: 2019-04-27 16:06:21.497 17450 ERROR kuryr File "/usr/lib/python2.7/dist-packages/keystoneauth1/identity/generic/base.py", line 199, in get_auth_ref Apr 27 16:06:21 compute kuryr-server[17450]: 2019-04-27 16:06:21.497 17450 ERROR kuryr self._plugin = self._do_create_plugin(session) Apr 27 16:06:21 compute kuryr-server[17450]: 2019-04-27 16:06:21.497 17450 ERROR kuryr File "/usr/lib/python2.7/dist-packages/keystoneauth1/identity/generic/base.py", line 194, in _do_create_plugin Apr 27 16:06:21 compute kuryr-server[17450]: 2019-04-27 16:06:21.497 17450 ERROR kuryr raise exceptions.DiscoveryFailure('Could not determine a suiable URL ' Apr 27 16:06:21 compute kuryr-server[17450]: 2019-04-27 16:06:21.497 17450 ERROR kuryr DiscoveryFailure: Could not determine a suitable URL for the plugin Apr 27 16:06:21 compute kuryr-server[17450]: 2019-04-27 16:06:21.497 17450 ERROR kuryr Apr 27 16:06:21 compute systemd[1]: kuryr-libnetwork.service: Main process exited, code=exited, status=1/FAILURE Apr 27 16:06:21 compute systemd[1]: kuryr-libnetwork.service: Failed with result 'exit-code'. *UPDATE2* I tried the recommendations given by **hongbin034** and confirm that i had a problem with Keystone. when i run openstack token issue after exporting the neutron environment varibles i get the following output Failed to discover available identity versions when contacting http://controller:35357. Attempting to parse version from URL. Could not determine a suitable URL for the plugin I checked and the port 35357 isn't even open at the controller node. But at the controller node installation there isn't any step configuring such port

2 1

[scientific-sig] ROOM CHANGE - SIG session at 3:50pm moved to 4E/4F
by Stig Telfer 29 Apr '19

29 Apr '19

Hi All - To get us a projector for our SIG session, we are moving from 507 to 4E/4F Sorry for the late notice! Cheers, Stig

1 0

[sahara][all] Sahara Train Virtual PTG is SCHEDULED
by Jeremy Freudberg 29 Apr '19

29 Apr '19

Hi all, Sahara will have a virtual PTG on Monday, May 6, beginning at 15:00 UTC. Best guess is that it will run two hours. Come and go as you need to. The etherpad is here: https://etherpad.openstack.org/p/sahara-train-ptg Please take a moment to add some topics, and, if you plan to attend, your name. The session will be hosted by Bluejeans: https://bluejeans.com/6304900378 (Take a moment to make sure your browser and peripherals are configured nicely) All interested parties are welcome. Outcomes will appear on openstack-discuss and on the etherpad itself. Till then, Jeremy

1 0

Third party CI and Zuul at OpenInfra Summit
by corvus＠inaugust.com 29 Apr '19

29 Apr '19

Hi, I'd like to invite any third-party CI operators as well as anyone else running Zuul or interested in running Zuul to join us in a discussion about reusing Zuul jobs in a downstream context at the Zuul working group session on Tuesday: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23736/z… -Jim

1 0

[placement][ptg] Envisioning other technologies
by Chris Dent 29 Apr '19

29 Apr '19

>From the etherpad [1]: ("My" in here is edleafe) * The more we get into the complexities of modeling nested providers, the more it seems to me that we are not using the best technology for this task. My brief experiments with graph databases last year showed a great deal of promise, but the whole extraction process pushed that to the side. * Perhaps we might try some parallel development, where resources are modeled in both relational and graph DBs. Then we might be able to compare the different solutions to complex queries on the same data sets. This is an invitation to discuss other potentially useful technologies, the relative cost of exploring them, and benefits we might get from that exploration (even if we don't end up using the other tech). And anything else anyone else wants to add. [1] https://etherpad.openstack.org/p/placement-ptg-train -- Chris Dent ٩◔̯◔۶ https://anticdent.org/ freenode: cdent tw: @anticdent

2 1

[scientific-sig] Denver BoF lightning talks today!
by Blair Bethwaite 29 Apr '19

29 Apr '19

Hi all, There's still space available for extra lightning talks in the Scientific SIG BoF today, so if you've a quick story to tell please add your name to the etherpad here: https://etherpad.openstack.org/p/scientific-sig-denver19-bof -- Cheers, ~Blairo

1 0

[neutron] Bug deputy report April 22 - 28
by Boden Russell 29 Apr '19

29 Apr '19

Below is a summary of bugs from last week. Based on the rotation list [1], Nate is up this week. Thanks Confirmed/In-Progress: - https://bugs.launchpad.net/neutron/+bug/1826726 [L3] stale device/process remain in network node after router removed - https://bugs.launchpad.net/neutron/+bug/1826695 [L3][QoS] cache does not removed when router is down or deleted - https://bugs.launchpad.net/neutron/+bug/1826570 Error in "tc_lib._handle_from_hex_to_string" formatting - https://bugs.launchpad.net/neutron/+bug/1826565 "tc_lib.add_tc_policy_class" must always assign a default value to "min_kbps" - https://bugs.launchpad.net/neutron/+bug/1826480 High latency on delete_subnets with increasing load and concurrency - https://bugs.launchpad.net/neutron/+bug/1825787 [L3][HA] agent HA router count should not include dvr local router Under investigation: - https://bugs.launchpad.net/neutron/+bug/1826644 ha router goes to standby mode only when they are created by heat - https://bugs.launchpad.net/neutron/+bug/1826419 dhcp agent configured with mismatching domain and host entries Incomplete: - https://bugs.launchpad.net/neutron/+bug/1826066 Iptables rules for unbound ports removed during agent sync RFE: - https://bugs.launchpad.net/neutron/+bug/1826396 [RFE] Atomic Extraroute API - https://bugs.launchpad.net/neutron/+bug/1825943 [RFE] Implement "stop agent" hook script support in Neutron [1] https://wiki.openstack.org/wiki/Network/Meetings

2 1

[tripleo] default ceph migrating from luminous to nautilus
by John Fulton 29 Apr '19

29 Apr '19

We're going to be making some updates in TripleO and RDO so that the default version of Ceph in Stein is Nautilus. Part of this involves temporarily disabling the standalone 001/004 jobs. Our reviews are lined up and linked with additional details on the TripleO Integration Squad etherpad [1]. We'll be waiting until the 3rd party checks are green [2] before we start merging. John [1] https://etherpad.openstack.org/p/tripleo-integration-squad-status [2] https://etherpad.openstack.org/p/ruckroversprint9

2 2

[placement][ptg] Aggregate on root spans whole tree policy:
by Chris Dent 29 Apr '19

29 Apr '19

>From the etherpad [1]: * Last PTG for Stein, we decided the following policies and have done so in Stein A) Aggregate on root spans whole tree for ``members_of=`` requests in 'GET /allocation_candidates' B) This spanning policy doesn't apply to granular requests ``members_of<N>=`` or to requests in 'GET /resource_providers' C) This change is a bug fix without microversion However, I now feel the policy B is weird. Consider a case where only granular requests are used in the request. If operator puts aggA on root, aggA applies the child or not depends on cases how you created the request. That's very difficult for operators to debug... This is from Tetsuro, so perhaps he can add some additional info, but basically I think what's being requested here is some discussion on whether changing B is warranted. [1] https://etherpad.openstack.org/p/placement-ptg-train -- Chris Dent ٩◔̯◔۶ https://anticdent.org/ freenode: cdent tw: @anticdent

4 7

[placement][nova][ptg] Resource provider - request group mapping
by Chris Dent 28 Apr '19

28 Apr '19

This is about this spec [1] "Resource provider - request group mapping in allocation candidate" which didn't get approved in Stein and will need to find its appropriate home (in placement) at some point. This topic is from the cross project etherpad [2]. The questions associated with this are of two forms: * How should the data be presented in the allocation candidates response? * How best to capture the pending discussion on a nova spec as is moved to becoming a placement spec. There's quite a lot of useful information on the spec, including multiple alternatives and reasons why those alternatives are good or not good. This is one those API changes where we need to be careful to be general and within the existing grammar of placement and not simply evolving reactively to increased complexity in Nova. Obviously Placement needs to be evolve in response to Nova, but carefully. What might be useful is for people who feel some ownership for the various proposed structures to discuss their merits, here. Or go the other way: If there are some structures you dislike, why? [1] https://review.openstack.org/#/c/597601/ [2] https://etherpad.openstack.org/p/ptg-train-xproj-nova-placement -- Chris Dent ٩◔̯◔۶ https://anticdent.org/ freenode: cdent tw: @anticdent

6 10

[cinder] Team Dinner Update ...
by Jay Bryant 28 Apr '19

28 Apr '19

Team, A slight update to our team dinner plans. I could not get a reservation for 6 due to an Avalanche game happening. I was able to get a reservation for 7:15 instead. I have updated the etherpad: https://etherpad.openstack.org/p/cinder-train-dinner-plan Look forward to seeing you all there! Jay

1 0

[ops] OpenStack Operators & Beer
by David Medberry 28 Apr '19

28 Apr '19

Reminder, Monday night at Open Infra Summit, OpenStack Ops are invited to hangout at Wynkoop Brewery. Reservation under my name for 7:30pm. This is a casual, unsponsored gathering (much as we have done at prior Operator Meetups). There is dining on the first floor and there will also be a pool table reserved on the second floor. (This is all AFTER the Open Infra Marketplace kick-off.) -dave David Medberry OpenStack Guy and Frisbee Flinger

1 0

[cinder][vendors][cinderlib] Validating Cinder driver for usage with cinderlib
by Gorka Eguileor 27 Apr '19

27 Apr '19

Hi, This is a call to Storage vendors and application developers that, with the excitement of the Stein release, may have missed the first cinderlib release [1][2] under the OpenStack umbrella that happened on the 16th. Cinderlib is doing cycle trailing releases. Using Cinder drivers out of OpenStack has been a frequent request by developers wanting to leverage Cinder's storage management capabilities without all the extra features that Cinder provides, such as quotas, replication, migrations, etc. The answer from the Cinder team has been to create a Python library that provides an object oriented abstraction around Cinder’s storage drivers to allow their direct usage without running any of the Cinder services (API, Scheduler, Volume) or surrounding services (KeyStone, MySQL, RabbitMQ). Even though cinderlib has just been released as a Tech Preview, there are already 2 projects using it: - oVirt: in the Managed Block Storage functionality [3] - Ember-CSI: providing storage for Kubernetes, Mesos, Docker swarm, cloud foundry, etc. [4] This means that with a single Cinder driver vendors can support multiple platforms: - OpenStack - oVirt - Containers: Kubernetes, Mesos, Docker swarm, cloud foundry, etc. Cinderlib works around the limitations that prevented direct usage of the drivers. One of these are driver "particularities", and that's why we recommend vendors that want to ensure compatibility with the library to run the cinderlib functional tests at the gate. These tests take but a minute to run. We have some documentation under review [5] going over the process of doing manual validation of a driver, running the tests as jobs of the cinderlib project, or as an additional step of the Cinder tempest run. The cinderlib project currently has 2 backends running the functional tests, LVM and Ceph, and we have patches up to run them as part of the LVM [6] and Ceph [7] Cinder jobs as well. If you are interested in using project, validating your driver, or just have some feedback or questions feel free to drop me an email or DM me (twitter @geguileo) and I'll be more than happy help. If you are going to the Open Infrastructure Summit we can meet in person, and if you feel adventurous we can even do the manual validation. Cheers, Gorka. [1]: https://docs.openstack.org/cinderlib/latest/index.html [2]: https://pypi.org/project/cinderlib/ [3]: https://ovirt.org/develop/release-management/features/storage/cinderlib-int… [4]: https://ember-csi.io [5]: https://review.opendev.org/#/c/651880/ [6]: https://review.opendev.org/#/c/620671/ [7]: https://review.opendev.org/#/c/645182/

1 0

[dev][keystone] Keystone Team Update - Week of 22 April 2019
by Colleen Murphy 27 Apr '19

27 Apr '19

# Keystone Team Update - Week of 22 April 2019 ## News ### Keystone Ocata in Pike are in Extended Maintenance The stable/ocata and stable/stein branches went into Extended Maintenance mode this month[1][2] in accordance with the new-ish maintenance phase procedure[3]. This means that those branches won't be released any more. However, they are still open to land backports. If and when those branches become too difficult to maintain, we will discuss putting them in the Unmaintained phase. [1] https://review.opendev.org/650467 [2] https://review.opendev.org/652905 [3] https://docs.openstack.org/project-team-guide/stable-branches.html ### No meetings next two weeks We agreed to skip the next two IRC meetings[4]. [4] http://lists.openstack.org/pipermail/openstack-discuss/2019-April/005531.ht… ### Forum Sessions and Summit Presentations Forum sessions that you should be aware of if you're interested in the future of keystone: Keystone Application Credentials: Status and Planning: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23643/k… Keystone Operator Feedback: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23644/k… Change ownership of resources - followup: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23675/c… Project Resource Cleanup - followup: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23674/p… Increasing API accessibility with granular policy and default roles: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23642/i… Unified limits update and migration: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23641/u… Presentations related to keystone that you may be interested in: You can't make a (Denver) omelette without breaking eggs: Using OpenStack policies for great good: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23535/y… Lessons learnt federating OpenStack powered Supercomputers: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23106/l… Leveraging OpenStack Keystone for Multi-Tenancy Support in Kubernetes: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23673/l… Keystone - Project Update: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23710/k… Bridging Clouds with Keystone to Keystone Federation: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23285/b… Keystone JWS Tokens: Past, Present, and Future: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23585/k… Keystone - Project Onboarding: https://www.openstack.org/summit/denver-2019/summit-schedule/events/23730/k… ### PTG Agenda I rearranged the PTG agenda[5] a bit now that we have scheduled some meetings with other teams. The schedule is still fluid and subject to change. [5] https://etherpad.openstack.org/p/keystone-train-ptg ### Team Dinner We're having out team dinner on Wednesday evening[6] in Denver. If you'd like to join us and haven't yet RSVP'd, please let me know, we'd be glad to have you. [6] http://lists.openstack.org/pipermail/openstack-discuss/2019-April/005549.ht… ## Open Specs Train specs: https://bit.ly/2uZ2tRl Ongoing specs: https://bit.ly/2OyDLTh ## Recently Merged Changes Search query: https://bit.ly/2pquOwT We merged 8 changes this week. ## Changes that need Attention Search query: https://bit.ly/2tymTje There are 27 changes that are passing CI, not in merge conflict, have no negative reviews and aren't proposed by bots. ## Bugs This week we opened 2 new bugs and closed 0. Bugs opened (2) Bug #1825867 (keystone:Undecided) opened by Abhishek Sharma M https://bugs.launchpad.net/keystone/+bug/1825867 Bug #1826197 (python-keystoneclient:Undecided) opened by jacky06 https://bugs.launchpad.net/python-keystoneclient/+bug/1826197 Bugs closed (0) Bugs fixed (0) ## Milestone Outlook https://releases.openstack.org/train/schedule.html The schedule for keystone has been posted. The next deadline is the spec proposal freeze at milestone 1 which is in a few weeks. ## Shout-outs See many of you next week! ## Help with this newsletter Help contribute to this newsletter by editing the etherpad: https://etherpad.openstack.org/p/keystone-team-newsletter

1 1