October 2020 - openstack-discuss - lists.openstack.org

[magnum] error when trying to overwrite master_lb_enabled in cluster create
by Ionut Biru 19 Oct '20

19 Oct '20

Hi guys, In template i have master_lb_disabled and i want to overwrite this option using: » openstack coe cluster create cluster002 --cluster-template b7e0be01-bf3b-4c32-af60-98b9edefa0be --keypair ioni --master-count 2 --node-count 2 --master-lb-enabled master_count must be 1 when master_lb_enabled is False (HTTP 400) (Request-ID: req-608b8634-d98e-4efd-b0e4-543ebc9eb315 Looking at the code https://opendev.org/openstack/magnum/src/branch/master/magnum/api/controlle… https://opendev.org/openstack/magnum/src/branch/master/magnum/api/attr_vali… It seems that the validator doesn't take in consideration the new cluster dictionary. I've modified the validator with: cluster.get('master_lb_enabled', cluster_template['master_lb_enabled']): and it seems to work fine Not sure if it is the right fix. -- Ionut Biru - https://fleio.com

1 0

approach to deploying rhosp 16.1 with octavia on standalone
by Chen Sagi 19 Oct '20

19 Oct '20

Hi, I am trying to figure out if I am able to deploy Red Hat Openstack platform with one physical server available, included with the Octavia solution. For now I have been trying to use the "openstack triplo deploy -standalone" command (with various environment files) and it Is unable to install Octavia without an undercloud available. Is it even possible? If so, I would love to hear some suggestions. Thanks, Chen Sagi.

2 3

Fwd: [ops] [cinder] __DEFAULT__ volume type
by Rajat Dhasmana 19 Oct '20

19 Oct '20

Sorry i forgot to include openstack discuss mailing list with my reply. ---------- Forwarded message --------- From: Rajat Dhasmana <rdhasman(a)redhat.com> Date: Sun, Oct 18, 2020 at 1:06 PM Subject: Re: [ops] [cinder] __DEFAULT__ volume type To: Eugen Block <eblock(a)nde.ag> Hi Eugen, On Sun, Oct 18, 2020 at 12:54 PM Eugen Block <eblock(a)nde.ag> wrote: > Hi, > > I also was confused about that during our upgrade to Train. I noticed > that many volumes in our cloud didn't have any volume type defined at > all, so I had to update the respective table before I could continue > the upgrade process. What do you mean by "updating the respective table"? The optimal way to update a volume with a volume type is: 1) create a volume type pointing to the backend in which the volume currently is 2) retype the volume to that volume type > I have also defined a different volume type in > cinder.conf but I don't think you can just delete the __DEFAULT__ > type, The functionality to delete the __DEFAULT__ type is only available since cinder train >= 15.4.0 (See the releasenotes for more info regarding the __DEFAULT__ type[1]) Also you need to have a valid value defined with ``default_volume_type`` in cinder.conf Let me know if you have respective settings and still not able to delete the __DEFAULT__ type. > I'm not sure anymore but I think I also tried that. But it > doesn't really hurt if you have one of your own types as default. > > Regards, > Eugen > > [1] https://docs.openstack.org/releasenotes/cinder/train.html#relnotes-15-4-0-s… Regards Rajat Dhasmana

2 1

[Image Encryption] No meeting this week and next week
by Josephine Seifert 19 Oct '20

19 Oct '20

Hi, due to the Summit and the PTG, there will be no meeting today and no meeting next week. Next meeting will be at November 2nd. greeting Josephine (Luzi)

1 0

Sorry for the stupid question... it’s been a while
by Florian Rommel 18 Oct '20

18 Oct '20

Hey everyone. So, I have developed openstack, wrote installers and fixed parts in the raw phytonutrients.. but... so I am , for fun and refreshing my memory, building an openstack deployment by hand, the hood old fashioned way. I have a few servers and I get everything working perfectly EXCEPT neutron ovs with dvr integration. I am using Ubuntu focal with ussuri release. When I deploy neutron i get the agents to show up and register with UP. The neutron-openvswitch-agent crashes with physical network floating to br-public not found. I am wondering how in need to configure the bridge in order to make this work. I have a empty interface (internet facing) which I added to br-public but where do I define the floating network name? Yes it’s stupid but I been banging my head against the wall:) Thanks already for help and sorry to anyone else for the dumb question:) //Florian

3 2

[ops] [cinder] __DEFAULT__ volume type
by Massimo Sgaravatto 18 Oct '20

18 Oct '20

I have recently updated my Cloud from Rocky to Train (I am running Cinder v. 15.4.0) I have a question concerning the __DEFAULT__ volume type, that I don't remember to have seen before. Since: - I have no volumes using this volume type - I defined in in the [DEFAULT] section of cinder.conf the attribute "default_volume_type" to a value different than "__DEFAULT___" I assume that I can safely delete the __DEFAULT__ volume type Is this correct? Thanks, Massimo

2 1

[glance][devstack] Problem with stack.sh in devsatck install
by James 17 Oct '20

17 Oct '20

hi guys：       I met some problems in installing devstack . the details please refers to "Errors" listed as below.     The environment: 1) Win 10 ; 2) VMware workstation ;3) ubuntu-18.04.5-desktop-amd64;4)devstack          The installation processes refer to the devstack quick start (https://docs.openstack.org/devstack/latest/) Could you give me the solution to solve the problem. Error : Installing collected packages: oslo.rootwrap, retrying, os-win, oslo.privsep, os-brick, simplejson, python-cinderclient, glance-store Attempting uninstall: simplejson Found existing installation: simplejson 3.13.2 ERROR: Cannot uninstall 'simplejson'. It is a distutils installed project and thus we cannot accurately determine which files belong to it which would lead to only a partial uninstall. +inc/python:pip_install:1 exit_trap +./stack.sh:exit_trap:489 local r=1 ++./stack.sh:exit_trap:490 jobs -p +./stack.sh:exit_trap:490 jobs= +./stack.sh:exit_trap:493 [[ -n '' ]] +./stack.sh:exit_trap:499 '[' -f '' ']' +./stack.sh:exit_trap:504 kill_spinner +./stack.sh:kill_spinner:399 '[' '!' -z '' ']' +./stack.sh:exit_trap:506 [[ 1 -ne 0 ]] +./stack.sh:exit_trap:507 echo 'Error on exit' Error on exit +./stack.sh:exit_trap:509 type -p generate-subunit +./stack.sh:exit_trap:510 generate-subunit 1589476087 780 fail +./stack.sh:exit_trap:512 [[ -z /opt/stack/logs ]] +./stack.sh:exit_trap ...

2 1

Your Virtual PTG Checklist
by Kendall Waters 16 Oct '20

16 Oct '20

REGISTRATION If you haven't done so, please register for the PTG! This is how we will be able to provide you with the tooling information and passwords. Register here: https://october2020ptg.eventbrite.com <https://october2020ptg.eventbrite.com/> FINAL SCHEDULE The final schedule [1] for the event is set here and in the PTGBot [2]. IRC The main form of synchronous communication between attendees during the PTG is on IRC. If you are not on IRC, learn how to get started here [3]. The main PTG IRC channel is #openstack-ptg on Freenode. It's used to interact with the PTGbot, and Foundation staff will be present to help answer questions. PTGBOT The PTGbot [3] is an open source tool that PTG track moderators use to surface what's currently happening at the event. Track moderators will send messages to the bot via IRC, and from that information, the bot publishes a webpage with several sections of information: - The discussion topics currently discussed in the room ("now") - An indicative set of discussion topics coming up next ("next") - The schedule for the day with available extra slots you can book Learn more about the ptgbot via the documentation here [4]. HELP DESK We are here to help! If you have any questions during the event week, we encourage you to join the #openstack-ptg IRC channel and ask them there. You can ping Kendall Waters (wendallkaters) and Kendall Nelson(diablo_rojo) directly on IRC. We will also have a dedicated Zoom room, but ONLY FOR MONDAY, October 26 where an OSF staff member will be available to answer your event related questions. You can also always reach someone at ptg(a)openstack.org if you are unable to connect to IRC. FEEDBACK We have preemptively created an etherpad[5] to collect all of your feedback throughout the event. Please add your thoughts as the week goes on. GAME TIME! Since we all know that coming together as a community to hang out and play games is part of what makes the PTG great, we are going to try something new this time around. This PTG, we are going to have two 'game nights'- obviously time zones are hard and it might not be night for everyone, but the times are as follows. - Thursday, October 29 at 19:00 UTC - Friday, October 30 at 10:00 UTC - Friday, October 30 at 23:00 UTC If you are interested in participating, write your name in the etherpad [6]. We will use it to coordinate games for each of the timeslots. [1] PTG schedule: https://object-storage-ca-ymq-1.vexxhost.net/swift/v1/6e4619c416ff4bd19e1c0… <https://object-storage-ca-ymq-1.vexxhost.net/swift/v1/6e4619c416ff4bd19e1c0…> [2] PTGbot: http://ptg.openstack.org/ptg.html <http://ptg.openstack.org/ptg.html> [3] How to get started on IRC: https://docs.openstack.org/contributors/common/irc.html <https://docs.openstack.org/contributors/common/irc.html> [4] PTGbot documentation: https://github.com/openstack/ptgbot/blob/master/README.rst <https://github.com/openstack/ptgbot/blob/master/README.rst> [5] Feedback Etherpad: https://etherpad.opendev.org/p/October2020-PTG-Feedback <https://etherpad.opendev.org/p/October2020-PTG-Feedback> [6] Game Time Etherpad: https://etherpad.opendev.org/p/October2020-PTG-Games <https://etherpad.opendev.org/p/October2020-PTG-Games>

1 0

[OSSA-2020-007] Blazar: Remote code execution in blazar-dashboard (CVE-2020-26943)
by Pierre Riteau 16 Oct '20

16 Oct '20

======================================================== OSSA-2020-007: Remote code execution in blazar-dashboard ======================================================== :Date: October 12, 2020 :CVE: CVE-2020-26943 Affects ~~~~~~~ - Blazar-dashboard: <1.3.1, ==2.0.0, ==3.0.0 Description ~~~~~~~~~~~ Lukas Euler (Positive Security) reported a vulnerability in blazar-dashboard. A user allowed to access the Blazar dashboard in Horizon may trigger code execution on the Horizon host as the user the Horizon service runs under. This may result in Horizon host unauthorized access and further compromise of the Horizon service. All setups using the Horizon dashboard with the blazar-dashboard plugin are affected. Patches ~~~~~~~ - https://review.opendev.org/755814 (Stein) - https://review.opendev.org/755813 (Train) - https://review.opendev.org/755812 (Ussuri) - https://review.opendev.org/756064 (Victoria) - https://review.opendev.org/755810 (Wallaby) Credits ~~~~~~~ - Lukas Euler from Positive Security (CVE-2020-26943) References ~~~~~~~~~~ - https://launchpad.net/bugs/1895688 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26943

1 0

[glance] No IRC meetings next 2 weeks
by Abhishek Kekane 16 Oct '20

16 Oct '20

Hello All, As discussed in yesterday's weekly meeting, we will not be conducting our next 2 weekly IRC meetings on 22 October and 29 October because of the Summit and the PTG. See you all during PTG discussions, below are the details about glance schedule during PTG. Topics/Plans: https://etherpad.opendev.org/p/Glance-Wallaby-PTG-planning Schedule: http://ptg.openstack.org/ptg.html Dates and Times: * Oct 27th 2020: Tuesday 1400-1700 UTC * Oct 28th 2020: Wednesday 1400-1700 UTC * Oct 29th 2020: Thursday 1400-1700 UTC * Oct 30th 2020: Friday 1400-1700 UTC Thanks and Best Regards, Abhishek

1 0