December 2020 - openstack-discuss

[all][tc][policy] Progress report of consistent and secure default policies pop-up team
by Ghanshyam Mann 10 Dec '20

10 Dec '20

Hello Everyone, Please find this month's progress on 'Consistent and Secure Default Policies Popup Team'. Meeting notes: ============ * We discussed progress on policy format migration from JSON->YAML and updates required in oslo.upgradecheck is merged now. * As you saw in another email thread by Lance[1], he has started the work on many projects. We will be adding the test coverage also in those, I will be able to help lance on some of them in next month. * We will define the common personas in oslo.policy for reusing it on the service side[2] * Below are the 'Action items, by person': ** gmann to check with abhishekk on glance point in meeting agenda ** gmann to push common persona on oslo policy and release 3.6.1 and lbragstad to review that ** lbragstad/gmann to push common persona on Oslo policy and release 3.6.1 and lbragstad to review that ** lbragstad to finish placement as first ** raildo to update https://review.opendev.org/#/c/743318/ Progress so far: ============ * Popup team meet twice in a month and discuss and work on progress and pre-work to do. - https://wiki.openstack.org/wiki/Consistent_and_Secure_Default_Policies_Popu… * Pre-work to provide a smooth migration path to the new policy <here we will add any pre-work we need to do before more project start moving towards new policy> ** Migrate Default Policy Format from JSON to YAML - This is now a community-wide goal, refer my separate ML thread for progress - https://review.opendev.org/q/topic:%22policy-json-to-yaml%22+(status:open%2… ** Improving documentation about target resources (oslo.policy) - https://bugs.launchpad.net/oslo.policy/+bug/1886857 - raildo pushed the patch which is under review: https://review.opendev.org/#/c/743318/ * Team Progress: (list of a team interested or have volunteer to work) ** Keystone (COMPLETED; use as a reference) ** Nova (COMPLETED; use as a reference) ** Cyborg (COMPLETED) ** Work started in other projects *** https://review.opendev.org/q/topic:%22secure-rbac%22+(status:open%20OR%20st… [1] http://lists.openstack.org/pipermail/openstack-discuss/2020-December/019313… [2] https://review.opendev.org/c/openstack/oslo.policy/+/766536 -gmann

1 0

Multiple VM ports on provider networks / dhcp fails
by Eric K. Miller 10 Dec '20

10 Dec '20

Hi, We ran into an issue recently that I haven't been able to figure out (this environment is on Stein which uses DVR). It involves an environment with many provider networks that connect to a legacy environment as well as many tenant networks. We create a server on a tenant network and add ports to this afterwards with each port attached to its respective provider network. The provider networks have "None" for the "gateway" property, so we don't have multiple default routes added to the routing table. We have a single subnet which has DHCP enabled and a proper allocation pool on its subnet. Note that this is a CentOS 8 server we are testing with, which has "no" ifcfg files for the additional ports, and so we rely on CentOS using DHCP by default. After adding the first port, the DHCP client does its job and requests an IP, which succeeds - so the DHCP server in the respective network namespace is responding fine. However, after adding the second port, it appears the DHCP client is sending requests out the network (we can see this traffic when tcpdump'ing the respective tap interface on the host), but the DHCP server is not replying. After looking at OpenVSwitch flows, it appears that DHCP broadcast traffic is being dropped for the second network. This does NOT happen with tenant networks. I can add multiple ports, each connected to its respective tenant network, and an IP is assigned to each interface that appears in CentOS immediately after the port has been added. Is there something special that is blocking the creation of the DHCP flow for subsequent provider network ports? NOTE that non-DHCP traffic flows fine if we create an ifcfg file with a static IP set to the address that DHCP should have set the interface to - it just appears that DHCP traffic is not flowing to the DHCP namespace for second and subsequent ports/networks. Thanks! Eric

1 0

[all][stable] bandit 1.6.3 drops py2 support
by Lee Yarwood 10 Dec '20

10 Dec '20

Hello all, $subject [1][2] is breaking various <= stable/train jobs where we attempt to pull bandit in while still using py2. This has been reported upstream and it looks like the 1.6.3 release may end up being yanked. If it isn't I've proposed the following requirements change to try to cap bandit to the 1.6.2 release, assuming this is safe to do on stable: Cap bandit at 1.6.2 when using py2 https://review.opendev.org/c/openstack/requirements/+/766170 Cheers, [1] https://github.com/PyCQA/bandit/releases/tag/1.6.3 [2] https://github.com/PyCQA/bandit/pull/615 [3] https://github.com/PyCQA/bandit/issues/663 -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76

5 12

Fwd: [SAVE THE DATE] End of Year Contributor Celebration Event
by Kendall Nelson 10 Dec '20

10 Dec '20

Hello Everyone! Wanted to take a moment to extend this invite to the k8s end of year celebration to the OpenStack community :) Their TOC asked me to invite our TC, but since they call out wanting both friends and family to attend, mnaser and I thought to invite all of you as well :) Hope to see you there! -Kendall Nelson (diablo_rojo) ---------- Forwarded message --------- From: Alison Dowdney <alison(a)alisondowdney.com> Date: Fri, Nov 13, 2020 at 1:53 PM Subject: [SAVE THE DATE] End of Year Contributor Celebration Event To: <kubernetes-dev(a)googlegroups.com>, <leads(a)kubernetes.io> Hey there everyone, Thanks for your feedback! When we asked what you wanted to do for a “contributor summit”, most of you overwhelmingly chose to do something social to bring the community together. With that, we’d like to announce that this year’s “summit” will be a Contributor Celebration. There will be 🎂 TL;DR - “Hallway track” event after 1.20 release, December 10-13th - Event will use Discord <https://discord.com>[1] - Games and other social activities (taking suggestions) - Hangouts and hackathons - Friends and family are invited - Event website <https://k8s.dev/celebration>[2] - Registration form <https://forms.gle/51tqQgxuHxLaeU1P8>[3] It's been a rough year, and without any in person events we've lost the best part of the Contributor Summits - the Hallway Track. The Kubernetes Contributor Celebration is an attempt to reclaim that and celebrate our accomplishments. It's a time for us to relax, chat, and do something fun with your fellow contributors! 🏖 We realize that some of you may not be into games/trivia, so this year we’re going full casual. This isn’t meant to be stressful or yet-another-virtual event. If you just want to come and hang out in chat, or listen in on the trivia, then that’s ok. We’re also leaving enough open options to do fun things, for example someone wanted to play a saxophone for the community, that’s totally an option 🎷. The event website <https://k8s.dev/celebration>[2] will be the source of truth for all event information with updates being sent to the list. [1]: https://discord.com [2]: https://k8s.dev/celebration [3]: https://forms.gle/51tqQgxuHxLaeU1P8 Many Thanks, Alison on behalf of the Contributor Celebration Team -- You received this message because you are subscribed to the Google Groups "Kubernetes developer/contributor discussion" group. To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-dev+unsubscribe(a)googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-dev/CALLkKiDfDah-YykTkyxKsC-nO… <https://groups.google.com/d/msgid/kubernetes-dev/CALLkKiDfDah-YykTkyxKsC-nO…> .

1 0

[manila] No IRC meeting on 24th and 31st Dec 2020
by Goutham Pacha Ravi 10 Dec '20

10 Dec '20

Hi there zorillas, As discussed during the weekly IRC meeting today, we're not going to meet on 24th and 31st December due to these dates coinciding with holidays in many parts of the world where our contributors live. If you have concerns in the meantime, please let us know on this mailing list, or on the #openstack-manila IRC channel on freenode. We're meeting on IRC as usual at 1500 UTC next Thursday, 17th Dec 2020 on #openstack-meeting-alt. [1] Since we'll be in a holiday mood, we'd love to see you all in ugly sweaters and mismatched socks during this meeting. Thanks, Goutham [1] https://wiki.openstack.org/wiki/Manila/Meetings

1 0

[nova-compute] Failed to publish message to topic 'scheduler_fanout'
by Tony Liu 10 Dec '20

10 Dec '20

Hi, With Ussuri, failed to launch VM and saw such error from nova-compute. Didn't see any error in nova-api, nova-conductor and nova-scheduler. Did some search and not found any similar cases. Wondering anyone has ever hit this issue? ================================================= 2020-12-09 13:24:29.333 8 ERROR oslo.messaging._drivers.impl_rabbit [req-4226ac03-a5b7-446a-a74b-2785f9818927 - - - - -] [3830bc00-1541-4951-b4ed-e73faafaa78c] AMQP server on 10.6.20.21:5672 is unreachable: connection already closed. Trying again in 1 seconds.: amqp.exceptions.RecoverableConnectionError: connection already closed 2020-12-09 13:24:30.361 8 INFO oslo.messaging._drivers.impl_rabbit [req-4226ac03-a5b7-446a-a74b-2785f9818927 - - - - -] [3830bc00-1541-4951-b4ed-e73faafaa78c] Reconnected to AMQP server on 10.6.20.21:5672 via [amqp] client with port 55524. 2020-12-09 13:26:28.377 8 ERROR oslo.messaging._drivers.impl_rabbit [req-4226ac03-a5b7-446a-a74b-2785f9818927 - - - - -] Failed to publish message to topic 'scheduler_fanout': : amqp.exceptions.MessageNacked 2020-12-09 13:26:28.377 8 ERROR oslo.messaging._drivers.impl_rabbit [req-4226ac03-a5b7-446a-a74b-2785f9818927 - - - - -] Unable to connect to AMQP server on 10.6.20.21:5672 after inf tries: : amqp.exceptions.MessageNacked 2020-12-09 13:26:28.378 8 ERROR oslo_service.periodic_task [req-4226ac03-a5b7-446a-a74b-2785f9818927 - - - - -] Error during ComputeManager._sync_scheduler_instance_info: oslo_messaging.exceptions.MessageDeliveryFailure: Unable to connect to AMQP server on 10.6.20.21:5672 after inf tries: ================================================= Thanks! Tony

2 2

[openstack-helm] No meetings for the rest of 2020
by Gage Hugo 10 Dec '20

10 Dec '20

Hello everyone, With holidays approaching and people being out, we are going to cancel the openstack-helm meetings for the remainder of the year. We will meet again in 2021 on Jan 5th. Have a Happy Holidays and Happy New Year! Stay Safe!

1 0

[security] Security SIG meetings cancelled until 2021
by Gage Hugo 10 Dec '20

10 Dec '20

Hello everyone, With holidays approaching and people being out, we are going to cancel the security sig meetings for the remainder of the year. We will meet again in 2021 on Jan 7th. Have a Happy Holidays and Happy New Year! Stay Safe!

1 0

[neutron] Drivers meeting agenda - Friday 11.12.2020
by Slawek Kaplonski 10 Dec '20

10 Dec '20

Hi, For tomorrow drivers meeting we have 3 RFEs to discuss: * https://bugs.launchpad.net/neutron/+bug/1905295 * https://bugs.launchpad.net/neutron/+bug/1905391 * https://bugs.launchpad.net/neutron/+bug/1907089 If You have anything else to discuss with the drivers team, please add it to the "On Demand" agenda at https://wiki.openstack.org/wiki/Meetings/NeutronDrivers Please read them and see You tomorrow on the meeting :) -- Slawek Kaplonski Principal Software Engineer Red Hat

1 0

[release] weekly meeting skip
by Herve Beraud 10 Dec '20

10 Dec '20

Hello everyone, Since we don't have specific actions to manage for this week and nothing took place in our corresponding agenda, we will be skipping week's meeting. Also notice that the meeting of the next 3 weeks will be skipped too as we haven't specific actions to manage. If an emergency happens I'll let you know and I'll trigger a meeting next week. It's a good opportunity for us to take a look to see what action items defined during our PTG session remains to be done. At first glance more or less everything seems already done. If you plan to take PTO during the next few weeks then please let us know by updating the 'Team availability notes' that correspond to the given weeks, it could help us to avoid the "Bystander effect". Thanks for reading, Regards, -- Hervé Beraud Senior Software Engineer at Red Hat irc: hberaud https://github.com/4383/ https://twitter.com/4383hberaud -----BEGIN PGP SIGNATURE----- wsFcBAABCAAQBQJb4AwCCRAHwXRBNkGNegAALSkQAHrotwCiL3VMwDR0vcja10Q+ Kf31yCutl5bAlS7tOKpPQ9XN4oC0ZSThyNNFVrg8ail0SczHXsC4rOrsPblgGRN+ RQLoCm2eO1AkB0ubCYLaq0XqSaO+Uk81QxAPkyPCEGT6SRxXr2lhADK0T86kBnMP F8RvGolu3EFjlqCVgeOZaR51PqwUlEhZXZuuNKrWZXg/oRiY4811GmnvzmUhgK5G 5+f8mUg74hfjDbR2VhjTeaLKp0PhskjOIKY3vqHXofLuaqFDD+WrAy/NgDGvN22g glGfj472T3xyHnUzM8ILgAGSghfzZF5Skj2qEeci9cB6K3Hm3osj+PbvfsXE/7Kw m/xtm+FjnaywZEv54uCmVIzQsRIm1qJscu20Qw6Q0UiPpDFqD7O6tWSRKdX11UTZ hwVQTMh9AKQDBEh2W9nnFi9kzSSNu4OQ1dRMcYHWfd9BEkccezxHwUM4Xyov5Fe0 qnbfzTB1tYkjU78loMWFaLa00ftSxP/DtQ//iYVyfVNfcCwfDszXLOqlkvGmY1/Y F1ON0ONekDZkGJsDoS6QdiUSn8RZ2mHArGEWMV00EV5DCIbCXRvywXV43ckx8Z+3 B8qUJhBqJ8RS2F+vTs3DTaXqcktgJ4UkhYC2c1gImcPRyGrK9VY0sCT+1iA+wp/O v6rDpkeNksZ9fFSyoY2o =ECSj -----END PGP SIGNATURE-----

1 0