February 2020 - openstack-discuss

[operators][cinder][nova][glance] possible data loss situation (bug 1852106)
by Brian Rosmaita 19 Feb '20

19 Feb '20

tl;dr: If you are running the OpenStack Train release, add the following to the [DEFAULT]non_inheritable_image_properties configuration option [0] in your nova.conf: cinder_encryption_key_id,cinder_encryption_key_deletion_policy About Your nova.conf ==================== - if you already have a value set for non_inheritable_image_properties, add the above to what you currently have - if non_inheritable_image_properties is *not* set in your current nova.conf, you must set its value to include BOTH the above properties AND the default values (which you can see when you generate a sample nova configuration file [1]) NOTE: At a minimum, the non_inheritable_image_properties list should contain: - the properties used for image-signature-validation (these are not transferrable from image to image): * img_signature_hash_method * img_signature * img_signature_key_type * img_signature_certificate_uuid - the properties used to manage the keys for images of cinder encrypted volumes: * cinder_encryption_key_id * cinder_encryption_key_deletion_policy - review the documentation to determine whether you want to include the other default properties: * cache_in_nova * bittorrent Details ======= This issue is being tracked as Launchpad bug 1852106 [2]. This is probably a low-occurrence situation, because in order for the issue to occur, all of the following must happen: (0) using the OpenStack Train release (or code from master (Ussuri development)) (1) cinder_encryption_key_id and cinder_encryption_key_deletion_policy are NOT included in the non_inheritable_image_properties setting in nova.conf (which they aren't, by default) (2) a user has created a volume of an encrypted volume-type in the Block Storage service (cinder). Call this Volume-1 (3) using the Block Storage service, the user has uploaded the encrypted volume as an image to the Image service (glance). Call this Image-1 (4) using the Compute service (nova), the user has attempted to directly boot a server from the image. (Note: this is an unsupported action, the supported workflow is to use the image to boot-from-volume.) (5) although an unsupported action, if a user does (4), it currently results in a server in status ACTIVE but which is unusable because the operating system can't be found (6) using the Compute service, the user requests the createImage action on the unusable (yet ACTIVE) server, resulting in Image-2 (7) using the Image service, the user deletes Image-2 (which has inherited the cinder_encryption_key_* properties from Image-1) upon which the encryption key is deleted, thereby rendering Image-1 non-decryptable so that it can no longer be used in the normal boot-from-volume workflow NOTE 1: the cinder_encryption_key_deletion_policy image property was introduced in Train. In pre-Train releases, deleting the useless Image-2 in step (7) does NOT result in encryption key deletion. NOTE 2: Volume-1 created in step (2) has a *different* encryption key ID than the one associated with Image-1. Thus, even in the scenario where Image-1 becomes non-decryptable, Volume-1 is not affected. Workaround ========== When cinder_encryption_key_id,cinder_encryption_key_deletion_policy are added to the non_inheritable_image_properties setting in nova.conf, the useless Image-2 created in step (6) above will not have the image properties on it that enable Glance to delete the encryption key still in use by Image-1. This does not, however, protect images for which steps (4)-(6) have been performed before the deployment of this workaround. The safest way to deal with images created before the workaround is deployed is to remove the cinder_encryption_key_deletion_policy image property from any image that has it (or to change its value to 'do_not_delete'). While it is possible to use other image properties to identify images created by Nova as opposed to images created by Cinder, this is not guaranteed to be reliable because image properties may have been modified or removed by the image owner. Proposed Longer-term Fixes ========================== - In the Ussuri release, the unsupported action in step (4) above will result in a 400 rather than an active yet unusable server. Hence it will no longer be possible to create the image of the unusable server that causes the issue. [3] - Additionally, given that the image properties associated with cinder encrypted volumes and image signature validation are specific to a single image and should not be inherited by server snapshots under any circumstances, in Ussuri these "absolutely non-inheritable image properties" will no longer be required to appear in the non_inheritable_image_properties configuration setting in order to prevent them from being propagated to server snapshots. [4] References ========== [0] https://docs.openstack.org/nova/train/configuration/config.html#DEFAULT.non… [1] https://docs.openstack.org/nova/train/configuration/sample-config.html [2] https://bugs.launchpad.net/nova/+bug/1852106 [3] https://review.opendev.org/#/c/707738/ [4] https://review.opendev.org/#/c/708126/

2 1

[operators][cinder] driver removal policy update
by Brian Rosmaita 19 Feb '20

19 Feb '20

The Cinder driver removal policy has been updated [0]. Drivers eligible for removal, at the discretion of the team, may remain in the code repository as long as they continue to pass OpenStack CI testing. When such a driver blocks the CI check or gate, it will be removed immediately. The intent of the policy revision is twofold. First, it gives vendors a longer grace period in which to make the necessary changes to have their drivers reinstated as ‘supported’. Second, keeping these drivers in-tree longer should make life easier for operators who have deployed storage backends with drivers that have been marked as ‘unsupported’. Please see the full statement of the policy [0] for details. [0] https://docs.openstack.org/cinder/latest/drivers-all-about.html#driver-remo…

1 0

[cinder] volume-local-cache spec - last call
by Brian Rosmaita 19 Feb '20

19 Feb '20

The volume-local-cache spec [0], which was granted a Cinder spec-freeze exception, currently has two +2s. It's been reviewed by a lot of people, and as far as I can tell, everyone's concerns have been addressed at this point. However, I'd like to give people one last opportunity to verify this for themselves. Unless a substantive objection is raised, I intend to approve the spec around 12:30 UTC tomorrow (Thursday) so that it can be merged before the Nova meeting at 14:00 UTC. cheers, brian [0] https://review.opendev.org/#/c/684556/

1 0

[kolla] Following Nova with XenAPI deprecation
by Radosław Piliszek 19 Feb '20

19 Feb '20

Hello fellow OpenStackers! There exists some logic in Kolla Ansible that handles XenAPI-specific overrides and bootstrapping with os-xenapi. It is one of those murky, untested features that we prefer to remove as soon as possible. :-) Hence we follow Nova in deprecating this functionality for removal. We will do the removal in Victoria. If you are using XenAPI with recent Kolla-Ansible, please let us know. I will be proposing deprec changes later today. As far as other deployment projects are concerned, DevStack, OpenStack-Helm and Puppet-OpenStack seem to still handle XenAPI specifics. -yoctozepto

1 0

[OSSA-2020-001] Nova can leak consoleauth token into log files (CVE-2015-9543)
by Jeremy Stanley 19 Feb '20

19 Feb '20

============================================================= OSSA-2020-001: Nova can leak consoleauth token into log files ============================================================= :Date: February 19, 2020 :CVE: CVE-2015-9543 Affects ~~~~~~~ - Nova: <18.2.4,>=19.0.0<19.1.0,>=20.0.0<20.1.0 Description ~~~~~~~~~~~ Paul Carlton from HP reported a vulnerability in Nova. An attacker with read access to the serviceâ€™s logs may obtain tokens used for console access. All Nova setups using novncproxy are affected. Patches ~~~~~~~ - https://review.opendev.org/707845 (Queens) - https://review.opendev.org/704255 (Rocky) - https://review.opendev.org/702181 (Stein) - https://review.opendev.org/696685 (Train) - https://review.opendev.org/220622 (Ussuri) Credits ~~~~~~~ - Paul Carlton from HP (CVE-2015-9543) References ~~~~~~~~~~ - https://launchpad.net/bugs/1492140 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9543 Notes ~~~~~ - The stable/queens branch is under extended maintenance and will receive no new point releases, but a patch for it is provided as a courtesy. -- Jeremy Stanley, on behalf of OpenStack Vulnerability Management

1 0

[oslo][release] oslo.limit mistakenly released as 1.0.0
by Ben Nemec 19 Feb '20

19 Feb '20

Hi, We seem to have created a bit of a problem with the latest oslo.limit release. In keeping with our general policy of bumping the major version when we release libraries without py2 support, oslo.limit got bumped to 1.0. Unfortunately, being a pre-1.0 library it should have only had the minor version bumped. This puts us in an awkward situation since the library is still under heavy development and we expect the API will change, possibly multiple times, before we're ready to commit to a stable API. We also need the ability to continue doing releases during development so we can test the library with consuming projects. I can think of a few options, although I won't guarantee all of these are even possible: * Unpublish 1.0.0 and do further pre-1.0 development on a feature branch cut from before we released 1.0.0. Once we're ready for "1.0", we merge the feature branch to master and release it as 2.0.0. * Stick a big disclaimer in the 1.0.0 docs that it is still under development and proceed to treat 1.0 the same as we would have treated a pre-1.0 library. Again, when ready for "1.0" we tag it 2.0.0. * Make our breaking changes as needed and just continue bumping the major version every release. This unfortunately makes it hard to communicate via the version when the library is ready for use. :-/ * [some better idea that you suggest :-)] Any input on the best way to handle this is greatly appreciated. Thanks. -Ben

9 22

[vmware][hyperv][kolla] Is there any interest? (or should we deprecate and remove?)
by Radosław Piliszek 19 Feb '20

19 Feb '20

Hello Fellow Stackers, In Kolla and Kolla-Ansible we have some support for VMware (both hypervisor and networking controller stuff) and Hyper-V. The issue is the relevant code is in pretty bad shape and we had no recent reports about these being used nor working at all for that matter and we are looking into dropping support for these. Please respond if you are interested in these. Long term we would require access to some CI running these to really keep things in shape. -yoctozepto

1 1

Re: [openstack-dev][kuryr] Not working in ARM64 (as Node)
by mdulko＠redhat.com 19 Feb '20

19 Feb '20

Hi, So from this run you need the kuryr-controller logs. Apparently the pod never got annotated with an information about the VIF. Thanks, Michał On Fri, 2020-02-07 at 05:14 +0000, VeeraReddy wrote: > Hi mdulko, > Thanks for your support. > > As you mention i removed readinessProbe and > livenessProbe from Kuryr pod definitions. Still i am facing issue , unable to create pod. > > > > > Attached kubelet and kuryr-cni logs. > > > > Regards, > Veera. > > > On Thursday, 6 February, 2020, 05:19:12 pm IST, <mdulko(a)redhat.com> wrote: > > > Hm, nothing too troubling there too, besides Kubernetes not answering > on /healthz endpoint. Are those full logs, including the moment you > tried spawning a container there? It seems like you only pasted the > fragments with tracebacks regarding failures to read /healthz endpoint > of kube-apiserver. That is another problem you should investigate - > that causes Kuryr pods to restart. > > At first I'd disable the healthchecks (remove readinessProbe and > livenessProbe from Kuryr pod definitions) and try to get fresh set of > logs. > > On Thu, 2020-02-06 at 10:46 +0000, VeeraReddy wrote: > > Hi mdulko, > > Please find kuryr-cni logs > > http://paste.openstack.org/show/789209/ > > > > > > Regards, > > Veera. > > > > > > On Thursday, 6 February, 2020, 04:08:35 pm IST, <mdulko(a)redhat.com> wrote: > > > > > > Hi, > > > > The logs you provided doesn't seem to indicate any issues. Please > > provide logs of kuryr-daemon (kuryr-cni pod). > > > > Thanks, > > Michał > > > > On Thu, 2020-02-06 at 07:09 +0000, VeeraReddy wrote: > > > Hi, > > > I am trying to run kubelet in arm64 platform > > > 1. Generated kuryr-cni successfullly. using kur-cni Dockerfile > > > 2. Generated kuryr-cni-arm64 container. > > > 3. my kube-kuryr-arm64.yml (http://paste.openstack.org/show/789208/) > > > > > > My master node in x86 installed successfully using devstack > > > > > > While running kubelet in arm platform , not able to create kubelet interface (kubelet logs: http://paste.openstack.org/show/789206/) > > > > > > COntroller logs: http://paste.openstack.org/show/789209/ > > > > > > Please help me to fix the issue > > > > > > Veera. > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, > > > Veera. > > > > > >

2 6

Virtio memory balloon driver
by Albert Braden 18 Feb '20

18 Feb '20

When we build a Centos 7 VM with 1.4T RAM it fails with "[ 17.797177] BUG: unable to handle kernel paging request at ffff988b19478000" I asked in #centos and they asked me to show a list of devices from a working VM (if I use 720G RAM it works). This is the list: [root@alberttest1 ~]# lspci 00:00.0 Host bridge: Intel Corporation 440FX - 82441FX PMC [Natoma] (rev 02) 00:01.0 ISA bridge: Intel Corporation 82371SB PIIX3 ISA [Natoma/Triton II] 00:01.1 IDE interface: Intel Corporation 82371SB PIIX3 IDE [Natoma/Triton II] 00:01.2 USB controller: Intel Corporation 82371SB PIIX3 USB [Natoma/Triton II] (rev 01) 00:01.3 Bridge: Intel Corporation 82371AB/EB/MB PIIX4 ACPI (rev 03) 00:02.0 VGA compatible controller: Cirrus Logic GD 5446 00:03.0 Ethernet controller: Red Hat, Inc. Virtio network device 00:04.0 SCSI storage controller: Red Hat, Inc. Virtio block device 00:05.0 SCSI storage controller: Red Hat, Inc. Virtio block device 00:06.0 SCSI storage controller: Red Hat, Inc. Virtio block device 00:07.0 Unclassified device [00ff]: Red Hat, Inc. Virtio memory balloon [root@alberttest1 ~]# lsusb Bus 001 Device 002: ID 0627:0001 Adomax Technology Co., Ltd Bus 001 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub They suspect that the "Virtio memory balloon" driver is causing the problem, and that we should disable it. I googled around and found this: http://www.linux-kvm.org/page/Projects/auto-ballooning It looks like memory ballooning is deprecated. How can I get rid of the driver? Also they complained about my host bridge device; they say that we should have a newer one: 00:00.0 Host bridge: Intel Corporation 440FX - 82441FX PMC [Natoma] (rev 02) Where can I specify the host bridge? <bugs_> ok ozzzo one of the devices is called "virtio memory balloon" [13:18:12] <bugs_> do you see that? [13:18:21] <ozzzo> yes [13:18:47] <bugs_> i suggest you google that and read about what it does - i think it would [13:19:02] <bugs_> be worth trying to disable that device on your larger vm to see what happens [13:19:18] <ozzzo> ok I will try that, thank you [13:19:30] * Altiare (~Altiare@unaffiliated/altiare) has quit IRC (Quit: Leaving) [13:21:45] * Sheogorath[m] (sheogora1(a)gateway/shell/matrix.org/x-uiiwpoddodtgrwwz) joins #centos [13:22:06] <@TrevorH> I also notice that the VM seems to be using the very old 440FX and there's a newer model of hardware available that might be worth checking [13:22:21] <@TrevorH> 440FX chipset is the old old pentium Pro chipset! [13:22:32] <@TrevorH> I had one of those in about 1996

4 11

ops meetups team meeting 2020-2-18
by Chris Morgan 18 Feb '20

18 Feb '20

The OpenStack Ops Meetups team meeting was held today on IRC, minutes linked below. Key links vancouver opendev+ptg : https://www.openstack.org/events/opendev-ptg-2020/ South Korea Ops Meetup proposal : https://etherpad.openstack.org/p/ops-meetup-2nd-korea-2020 OpenInfra summit 2020 announced for Berlin, Oct 19-23 : https://superuser.openstack.org/articles/inside-open-infrastructure-the-lat… The meetups team will be proposing content for Vancouver and will shortly solicit feedback on preferred dates for the Ops Meetups even in South Korea. Please follow https://twitter.com/osopsmeetup for more announcements. Minutes: <•openstack> Meeting ended Tue Feb 18 15:37:42 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) 10:37 AM Minutes: http://eavesdrop.openstack.org/meetings/ops_meetup_team/2020/ops_meetup_tea… 10:37 AM Minutes (text): http://eavesdrop.openstack.org/meetings/ops_meetup_team/2020/ops_meetup_tea… 10:37 AM Log: http://eavesdrop.openstack.org/meetings/ops_meetup_team/2020/ops_meetup_tea… Chris Morgan - on behalf of the OpenStack Ops Meetups team ( https://wiki.openstack.org/wiki/Ops_Meetups_Team) -- Chris Morgan <mihalis68(a)gmail.com>

1 0

Re: [Release-job-failures] Release of openstack/puppet-keystone for ref refs/tags/16.1.0 failed
by Thierry Carrez 18 Feb '20

18 Feb '20

We had a series of failures uploading Puppet artifacts to the forge: Forge API failed to upload tarball with code: 500 errors: An error was encountered while processing your request, please try again later. This affected: openstack/puppet-ceilometer (16.1.0) https://zuul.opendev.org/t/openstack/build/5b0b890d777545c098ea88b70eb89b52 openstack/puppet-panko (16.1.0) https://zuul.opendev.org/t/openstack/build/073cbb3b72ac4241aa1802ccbaf4ada5 openstack/puppet-murano (16.1.0) https://zuul.opendev.org/t/openstack/build/b07a78bd59c84176bb7d9d2f1e0f635c openstack/puppet-keystone (16.1.0) https://zuul.opendev.org/t/openstack/build/be7510a717d3413ab008ab3d34db3672 As a result the tarballs were not uploaded to tarballs.openstack.org either. I think we should reenqueue the tag reference to retrigger the release-openstack-puppet job for those ? -- Thierry Carrez (ttx)

2 1

[neutron] Can br-ex and br-tun use the same interface?
by Zhengyu Pan 18 Feb '20

18 Feb '20

hi, I have only two physical interfaces. In my deploying, network node and compute node are the same. Can Bridge br-tun and br-ex use the same interface when using vxlan network type ? management network use the other interface?

3 5

[nova][cinder] What should the behaviour of extend_volume be with attached encrypted volumes?
by Lee Yarwood 18 Feb '20

18 Feb '20

Hello all, The following bug was raised recently regarding a failure to extend attached encrypted volumes: Failing to extend an attached encrypted volume https://bugs.launchpad.net/nova/+bug/1861071 I've worked up a series below that resolves this for LUKSv1 volumes by taking the LUKSv1 header into account before calling Libvirt to resize the block device within the instance: https://review.opendev.org/#/q/topic:bug/1861071 This results in the instance visable block device being resized to a size just smaller than that requested through Cinder's API. My question to the list is if that behaviour is acceptable given the same call to extend an attached unencrypted volume *will* grow the instance visable block device to the requested size? Many thanks in advance, -- Lee Yarwood A5D1 9385 88CB 7E5F BE64 6618 BCA6 6E33 F672 2D76

1 1

[kolla][zun] Zun image source
by Hongbin Lu 18 Feb '20

18 Feb '20

Hi Kolla team, I was looking into the CentOS Zun image downloaded from DockerHub. It looks the source code is from stable/train branch: $ docker run kolla/centos-source-zun-compute:master cat zun/zun.egg-info/pbr.json {"git_version": "25e56636", "is_release": false} The git_version points to the stable/train branch, but I think it should point to the master branch. FWIW, I also checked the Ubuntu image and the git version in there looks correct: $ docker run kolla/ubuntu-source-zun-compute:master cat zun/zun.egg-info/pbr.json {"git_version": "6fbf52ae", "is_release": false} Any suggestion? Best regards, Hongbin

2 1

[tripleo] deep-dive containers & tooling
by Emilien Macchi 17 Feb '20

17 Feb '20

Hi folks, On Friday I'll do a deep-dive on where we are with container tools. It's basically an update on the removal of Paunch, what will change etc. I'll be on Bluejeans at 2pm UTC, anyone is welcome to join and ask questions or give feedback. https://bluejeans.com/6007759543 Link of the slides: https://docs.google.com/presentation/d/111sEwyIKxx2NCqTIQizdPNVaRbv0HAT5YeM… -- Emilien Macchi

2 4

Re: [Ask OpenStack] 7 updates about "galera", "rabbiitmq", "auth_token", "keysone", "swift-proxy" and more
by Gaurav Goyal 17 Feb '20

17 Feb '20

Dear Openstack Experts, We are using a big openstack setup in our organization and different operation teams adds new computes nodes to it. We as system admin of this Openstack environment wants to audit the configuration parameters on all the nodes. Can you please help to suggest a better way (Tools) to audit this environment? Awaiting your kind reply. Regards Gaurav Goyal On Wed, Feb 12, 2020 at 10:26 PM <communitymngr(a)openstack.org> wrote: > Dear Gaurav Goyal, > > Ask OpenStack has these updates, please have a look: > > - Kubernetes cluster created with Magnum doesn't work > <https://ask.openstack.org/en/question/126164/kubernetes-cluster-created-wit…> (new > question) > - how do i list the top objects consuming more space in the swift > container > <https://ask.openstack.org/en/question/126161/how-do-i-list-the-top-objects-…> (new > question) > - action requests is empty > <https://ask.openstack.org/en/question/126160/action-requests-is-empty/?sort…> (new > question) > - How to Migrate OpenStack Instance from one Tenant to another > <https://ask.openstack.org/en/question/126159/how-to-migrate-openstack-insta…> (new > question) > - Architecture of keystone, swift and memcached together > <https://ask.openstack.org/en/question/126158/architecture-of-keystone-swift…> (3 > rev) > - why is octavia not using keystone public endpoint to validate tokens? > <https://ask.openstack.org/en/question/126156/why-is-octavia-not-using-keyst…> (new > question) > - Error while launching instance on openstack > <https://ask.openstack.org/en/question/126150/error-while-launching-instance…> (2 > rev, 1 ans, 3 ans rev) > > To change frequency and content of these alerts, please visit your user > profile > <https://ask.openstack.org/en/users/18141/gaurav-goyal/subscriptions/>. > To unsubscribe, visit this page > <https://ask.openstack.org/en/users/unsubscribe/?key=89e52fdededaf7e8066737b…> > If you believe that this message was sent in an error, please email about > it the forum administrator at communitymngr(a)openstack.org. > ------------------------------ > > Sincerely, > Ask OpenStack Administrator > > To unsubscribe: there's a big "Stop Email" button in the link to your user > profile above. >

1 0

[neutron] bug deputy report (Feb 10-17)
by Akihiro Motoki 17 Feb '20

17 Feb '20

Hi, Here is a neutron bug deputy report last week. While 15 new bugs were reported, several bugs needs further investigation and are not triaged yet. I will look into them but it would be great if they need attentions. --- Undecided - https://bugs.launchpad.net/neutron/+bug/1862611 Neutron try to register invalid host to nova aggregate for ironic routed network Undecided It was covered by the last week report, but it needs more eyes familiar with routed network. - https://bugs.launchpad.net/neutron/+bug/1862851 update_floatingip_statuses: StaleDataError: UPDATE statement on table 'standardattributes' expected to update 1 row(s); 0 were matched. Undecided Needs to be checked by folks familiar with DVR. It looks like a race condition. - https://bugs.launchpad.net/neutron/+bug/1862932 [neutron-bgp-dragent] passive agents send wrong number of routes Undecided Needs attention by folks familiar with dynamic-routing stuff. - https://bugs.launchpad.net/neutron/+bug/1863068 Dublicated Neutron Meter Rules in different projects kills metering Undecided - https://bugs.launchpad.net/neutron/+bug/1863091 IPVS setup fails with openvswitch firewall driver, works with iptables_hybrid Undecided - https://bugs.launchpad.net/neutron/+bug/1863110 2/3 snat namespace transitions to master Undecided - https://bugs.launchpad.net/neutron/+bug/1863201 stein regression listing security group rules Undecided - https://bugs.launchpad.net/neutron/+bug/1863213 Spawning of DHCP processes fail: invalid netcat options Undecided ralonsoh assigned himself. Any update on this? Incomplete - https://bugs.launchpad.net/neutron/+bug/1863206 Port is reported with 'port_security_enabled=True' without port-security extension Incomplete I think the bug author misunderstood the default of port-security extension behavior. Double check would be appreciated. Confirmed - https://bugs.launchpad.net/neutron/+bug/1863577 [ovn] tempest.scenario.test_network_v6.TestGettingAddress tests failing 100% times Confirmed, High In Progress - https://bugs.launchpad.net/neutron/+bug/1862618 [OVN] functional test test_virtual_port_delete_parents is unstable In Progress, Medium - https://bugs.launchpad.net/neutron/+bug/1862703 Neutron remote security group does not work In Progress, High - https://bugs.launchpad.net/neutron/+bug/1862648 [OVN] Reduce the number of tables watched by MetadataProxyHandler High, Fix Released - https://bugs.launchpad.net/neutron/+bug/1862893 [OVN]Updating a QoS policy for a port will cause a KeyEerror In Progress, Low Fix Released - https://bugs.launchpad.net/neutron/+bug/1862927 "ncat" rootwrap filter is missing Fix Released The root cause turned out that we need to specify rootwrap filter config by abspath.

1 0

[charms] OpenStack Charms 20.02 release is now available
by Peter Matulis 17 Feb '20

17 Feb '20

The 20.02 release of the OpenStack Charms is now available. This release brings several new features to the existing OpenStack Charms deployments for Queens, Rocky, Stein, Train, and many other stable combinations of Ubuntu + OpenStack. Please see the Release Notes for full details: https://docs.openstack.org/charm-guide/latest/2002.html == Highlights == * New charm: manila-ganesha There is a new charm to support Ganesha for use with Manila and CephFS: manila-ganesha. This charm, as well as the requisite manila and ceph-fs charms, have been promoted to supported status. * Swift global cluster With OpenStack Newton or later, support for a global cluster with Swift is available as a tech preview. * OVN With OpenStack Train or later, support for integration with Open Virtual Network (OVN) is available as a tech preview. * MySQL8 With Ubuntu 19.10 or later, support for MySQL 8 is available as a tech preview. * New charms: watcher and watcher-dashboard There are two new charms to support Watcher, the resource optimization service for multi-tenant OpenStack-based clouds: watcher and watcher-dashboard. This is the first release of these charms and they are available as a tech preview. * Policy overrides The policy overrides feature provides operators with a mechanism to override policy defaults on a per-service basis. The last release (19.10) introduced the feature for a number of charms. This release adds support for openstack-dashboard and octavia charms. * Disabling snapshots as a boot source for the OpenStack dashboard Snapshots can be disabled as valid boot sources for launching instances in the dashboard. This is done via the new 'disable-instance-snapshot' configuration option in the openstack-dashboard charm. == OpenStack Charms team == The OpenStack Charms team can be contacted on the #openstack-charms IRC channel on Freenode. == Thank you == Lots of thanks to the below 49 charm contributors who squashed 53 bugs, enabled support for a new release of OpenStack, improved documentation, and added exciting new functionality! Liam Young Corey Bryant Peter Matulis Sahid Orentino Ferdjaoui Frode Nordahl Alex Kavanagh David Ames Chris MacNaughton Stamatis Katsaounis inspurericzhang Tiago Pasqualini Andrew McLeod ShangXiao Ryan Beisner James Page Felipe Reyes kangyufei Edward Hope-Morley Adam Dyess Xuan Yandong Arif Ali Chris Johnston wangfaxin Aurelien Lourot Alexandros Soumplis Jose Guedez Qitao Tytus Kurek Seyeong Kim Dongdong Tao Haw Loeung Jorge Niedbalski Qiu Fossen Yanos Angelopoulos Syed Mohammad Adnan Karim JiaSiRui Xiyue Wang Adam Dyess Jose Delarosa Alexander Balderson Andreas Jaeger Dmitrii Shcherbakov Jacek Nykis Thobias Trevisan Hemanth Nakkina Shuo Liu Drew Freiberger zhangboye Aggelos Kolaitis -- OpenStack Charms Team

1 0

[blazar] Spec for flexible reservation policy enforcement
by Jason Anderson 17 Feb '20

17 Feb '20

Hi all, Last week I introduced a final version of the flexible reservation usage spec[1]. This builds on the original spec proposed by Pierre Riteau some months ago. The purpose of the functionality is to allow operators to define various limits or more sophisticated policies around advanced reservations, in order to prevent e.g., a single user from reserving all resources for an indefinite amount of time. Instead of a quota-based approach, the decisions are delegated to an external service; a future improvement could be providing a default implementation (perhaps using quotas and some default time limits) that can be deployed alongside Blazar. I would appreciate reviews from the core team and feedback from others as to the design. This work is planned for Ussuri pending spec approval. Thanks, /Jason [1]: https://review.opendev.org/#/c/707042/ -- Jason Anderson Chameleon DevOps Lead Consortium for Advanced Science and Engineering, The University of Chicago Mathematics & Computer Science Division, Argonne National Laboratory

1 0

[goals][Drop Python 2.7 Support] Week R-13 Update (we are at deadline)
by Ghanshyam Mann 17 Feb '20

17 Feb '20

Hello Everyone, Below is the progress on "Drop Python 2.7 Support" at end of R-13 week. Schedule: https://governance.openstack.org/tc/goals/selected/ussuri/drop-py27.html#sc… Highlights: ======== * Deadline was M-2 (R-13 week). * Things are breaking and being fixed daily. * Do not worry about the gate failure, it is better to break it now and fix so that we can smoothly release Ussuri. * Tempest has dropped the py2 and stop running the py2 jobs and so does devstack. * tempest-full job has been moved to py2 (it started running on py3 when devstack default to py3). This job is not supposed to run on master gate (except d-g which should keep running on py2 jobs). tempest-full-py3 is the py3 version of it. But few master jobs derived from tempest-full needs to either start using tempest-full-py3 or explicitly enable py3. I will be working on those next week. * Bugs & Status: No open bugs as of now. Below is the status of last week's bugs. ** QA dropped py3.5 support also from many tooling like stackviz etc which are branchless and should keep working on stable py3.5 env. We have reverted the dropping py3.5 and working now. ** Nova stable branches are still falling for the u-c reason on nova-live-migration. Fixes are up[2] *** Fixed and gate is green. * * Tempest tox 'all-plugin' usage issue[3] *** Fixed and gate is green. ** neutron-vpass in-tree plugin issue *** Fixed and gate is green. NOTE: I know few py2.7 drop patches are failing on few projects, I will continue debugging those. Help from the failing project will be greatly appreciated to meet the deadline. Project wise status and need reviews: ============================ Phase-1 status: The OpenStack services have not merged the py2 drop patches: NOTE: This was supposed to be completed by milestone-1 (Dec 13th, 19). * Adjutant ** https://review.opendev.org/#/c/706723/ * Masakari ** https://review.opendev.org/#/c/694551/ * Qinling ** https://review.opendev.org/#/c/694687/ Phase-2 status: By today, we should be completing the phase-2 work which is nothing but drop py2 from everything except requirement repo. But we have few repos to merge the patches on priority. * Open review: https://review.opendev.org/#/q/topic:drop-py27-support+status:open How you can help: ============== - Review the patches. Push the patches if I missed any repo. [1] http://lists.openstack.org/pipermail/openstack-discuss/2020-February/012463… [2] https://review.opendev.org/#/q/I8190f93e0a754fa59ed848a3a230d1ef63a06abc [3] https://bugs.launchpad.net/tempest/+bug/1862240 [4] https://review.opendev.org/#/q/topic:bug/1862240+(status:open+OR+status:mer… -gmann

2 2

[cinder][nova] volume-local-cache meeting results
by Brian Rosmaita 16 Feb '20

16 Feb '20

Thanks to everyone who attended this morning, we had a productive meeting. If you missed it and want to know what happened: etherpad: https://etherpad.openstack.org/p/volume-local-cache recording: https://youtu.be/P9bouCCoqVo Liang Fang will be updating the specs to reflect what was discussed: cinder spec: https://review.opendev.org/#/c/684556/ nova spec: https://review.opendev.org/#/c/689070/ cheers, brian

2 1

Automatically remove /var/log directory from the openstack instance
by Md. Ziaul Haque 15 Feb '20

15 Feb '20

Hello, During few days we have faced that from the instance /var/log directory log have been removed automatically after the unexpected reboot. We have faced this issue with centos and ubuntu images. Openstack version is rocky and qemu-kvm version 2.12.0 . If anybody has faced the same issue, kindly help us for solving this issue Thanks & Regards Ziaul

1 0

[queens][config_drive] not working for ubuntu bionic
by Ignazio Cassano 15 Feb '20

15 Feb '20

Hello, I configured config drive and centos instances works fine with it. Ubuntu bionic tries to get metadata from network and cloud-init does not set hostname and does not insert keys for ssh. Any help, please Ignazio

4 10

[queens]neutron][metadata] configuration
by Ignazio Cassano 15 Feb '20

15 Feb '20

Hello everyone, in my installation of Queees I am using many provider networks. I don't use openstack router but only dhcp. I would like my instances to reach the metadata agent without the 169.154.169.254 route, so I would like the provider networks to directly reach the metadata agent on the internal api vip. How can I get this configuration? Thank you Ignazio

3 7

UC Nominations now open
by Amy Marrich 14 Feb '20

14 Feb '20

The nomination period for the February User Committee elections is now open. Any individual member of the Foundation who is an Active User Contributor (AUC) can propose their candidacy (except the two sitting UC members elected in the previous election). Self-nomination is common; no third party nomination is required. Nominations can be made by sending an email to the user-committee(a)lists.openstack.org mailing-list[0], with the subject: “UC candidacy” by February 16, 23:59 UTC aa voting will begin on February 17. The email can include a description of the candidate platform. The candidacy is then confirmed by one of the election officials, after verification of the electorate status of the candidate. Criteria for AUC status can be found at https://superuser.openstack.org/articles/auc-community/. If you are still not sure of your status and would like to verify in advance please email myself(amy(a)demarco.com) and Rain Leander(rleander(a)redhat.com) as we are serving as the Election Officials. Thanks, Amy Marrich (spotz) 0 - Please make sure you are subscribed to this list before sending in your nomination.

1 1

[tripleo] RDO image server migration
by Wesley Hayutin 14 Feb '20

14 Feb '20

FYI... Possible interruption on 3rd party ovb jobs. ---------- Forwarded message --------- From: Daniel Pawlik <dpawlik(a)redhat.com> Date: Fri, Feb 14, 2020 at 8:47 AM Subject: [rdo-dev] [rdo-users] [infra] RDO image server migration To: <dev(a)lists.rdoproject.org> Hello, We are going to migrate images.rdoproject.org to our new cloud provider, starting on February 17th at 10 AM UTC. Migration should be transparent to the end user (scripts and job definition are using new image server). However, you have to keep in mind the unforeseen events that may occur. Write access to the old server will be disabled and until DNS propagation is not done, you could have read-only access. If you have any doubts or concerns, please do not hesitate to contact: - Daniel Pawlik <dpawlik(a)redhat.com> - Javier Pena <jpena(a)redhat.com> Regards, Daniel _______________________________________________ dev mailing list dev(a)lists.rdoproject.org http://lists.rdoproject.org/mailman/listinfo/dev To unsubscribe: dev-unsubscribe(a)lists.rdoproject.org

1 0

[tripleo] RDO image server migration
by Daniel Pawlik 14 Feb '20

14 Feb '20

Hello, We are going to migrate images.rdoproject.org to our new cloud provider, starting on February 17th at 10 AM UTC. Migration should be transparent to the end user (scripts and job definition are using new image server). However, you have to keep in mind the unforeseen events that may occur. Write access to the old server will be disabled and until DNS propagation is not done, you could have read-only access. If you have any doubts or concerns, please do not hesitate to contact: - Daniel Pawlik <dpawlik(a)redhat.com> - Javier Pena <jpena(a)redhat.com> Regards, Daniel

1 0

[security] Vancouver PTG Planning - Security SIG
by Gage Hugo 14 Feb '20

14 Feb '20

Hello, It's about that time again, to start planning for the next PTG. To help gauge interest and track any topics that anyone is interested in, I've created an etherpad: https://etherpad.openstack.org/p/yvr-ptg-security-sig Please add your name if you plan to attend and any topic ideas that you are interested in. Thanks!

1 0

[release] Release countdown for week R-12, February 17-21
by Sean McGinnis 14 Feb '20

14 Feb '20

Development Focus ----------------- We are now past the Ussuri-2 milestone, and entering the last development phase of the cycle. Teams should be focused on implementing planned work for the cycle. Now is a good time to review those plans and reprioritize anything if needed based on the what progress has been made and what looks realistic to complete in the next few weeks. General Information ------------------- Looking ahead to the end of the release cycle, please be aware of the feature freeze dates. Those vary depending on deliverable type: * General libraries (except client libraries) need to have their last feature release before Non-client library freeze (April 2). Their stable branches are cut early. * Client libraries (think python-*client libraries) need to have their last feature release before Client library freeze (April 9) * Deliverables following a cycle-with-rc model (that would be most services) observe a Feature freeze on that same date, April 9. Any feature addition beyond that date should be discussed on the mailing-list and get PTL approval. After feature freeze, cycle-with-rc deliverables need to produce a first release candidate (and a stable branch) before RC1 deadline (April 23) * Deliverables following cycle-with-intermediary model can release as necessary, but in all cases before Final RC deadline (May 7) Upcoming Deadlines & Dates -------------------------- Non-client library freeze: April 2 (R-6 week) Client library freeze: April 9 (R-5 week) Ussuri-3 milestone: April 9 (R-5 week) OpenDev+PTG Vancouver: June 8-11

1 0

[tripleo] TripleO CI Summary: Sprint 42
by Rafael Folco 14 Feb '20

14 Feb '20

Greetings, The TripleO CI team has just completed Sprint 42 / Unified Sprint 21 (Jan 23 thru Feb 12). The following is a summary of completed work during this sprint cycle: - Started refactoring Promoter code into a modular implementation w/ testing oriented design and accommodating the changes for the new promotion pipeline. - Completed building CentOS8 containers with required repositories. This is still an unofficial build as some of the repositories (like Ceph) are not from RDO/TripleO. - Refined the component pipeline design [3] w/ the new aggregated hash containing all promoted components. Continued to implement the downstream version of the component pipeline. - Translated get-hash into a separated role in ci-config repo, de-attaching from promote-hash role in config. Added support for the new component and integration jobs. - Made improvements to the collect-logs plugin as part of the shared goals for the combined CI team. - Built CI workflow to follow successful manual standalone deployment using an IPA server. The TLS CI job is not running yet and still needs to be activated. Ruck/Rover Notes: - There were at least four upstream gate outages during this sprint. All have been resolved at this time. Notes are here [4]. The planned work for the next sprint [1] extends the work started in the previous sprint and focuses on the following: - Build the CentOS8 pipeline starting with the base jobs to build containers and promote hashes. - Replicate the component jobs to all available components and build the new promotion pipeline in CentOS8. - Continue the promoter code refactoring and converting the legacy code in a modular implementation that can be tested more efficiently. - Continue the collect-logs effort to make it a shared tool used by multiple teams. - Collaborate with the RDO team in migrating 3rd party CI to vexxhost. The Ruck and Rover for this sprint are Wesley Hayutin (weshay) and Marios Andreou (marios). Please direct questions or queries to them regarding CI status or issues in #tripleo, ideally to whomever has the ‘|ruck’ suffix on their nick. Ruck/rover notes to be tracked in etherpad [2]. Thanks, rfolco [1] https://tree.taiga.io/project/tripleo-ci-board/taskboard/unified-sprint-22 [2] https://etherpad.openstack.org/p/ruckroversprint22 [3] https://hackmd.io/5uYRmLaOTI2raTbHWsaiSQ [4] https://etherpad.openstack.org/p/ruckroversprint21

1 0

[Outreachy] Call for mentors, projects by Feb 25
by Samuel de Medeiros Queiroz 14 Feb '20

14 Feb '20

Hi all, TL;DR OpenStack is participating of Outreachy! Mentors, please submit project proposals by Feb 25. More info: https://www.outreachy.org/communities/cfp/openstack/ Outreachy's goal is to support people from groups underrepresented in the technology industry. The upcoming round runs from May to August 2020. Now that we are confirmed as a participating community, we welcome experienced community contributors to help out as mentors, who need to submit project proposals. Therefore, if you have an interesting project that meets the criteria, please submit it as soon as possible. You can find more information about the program, project criteria, mentor requirements, and submit your project at the Call for mentors page <https://www.outreachy.org/communities/cfp/openstack/> [1]. I have participated twice of Outreachy as a mentor and I can tell you it was a great opportunity to get someone onboard the community and, of course, to learn from them. Besides getting work done (which is great), we happen to make our community more diverse, while helping with its continuity. Please let me know if you have any questions. Thanks, Samuel [1] https://www.outreachy.org/communities/cfp/openstack/

1 0

[keystone] Keystone Team Update - Week of 10 February 2020
by Vishakha Agarwal 13 Feb '20

13 Feb '20

# Keystone Team Update - Week of 10 February 2020 ## News ### YVR PTG Keystone People can write down the topics in etherpad [1] to have a brief discussion with the team. [1] https://etherpad.openstack.org/p/yvr-ptg-keystone ### User Support and Bug Duty Every week the duty is being rotated between the members. The person-in-charge for bug duty for current and upcoming week can be seen on the etherpad [2] [2] https://etherpad.openstack.org/p/keystone-l1-duty ## Open Specs Ussuri specs: https://bit.ly/2XDdpkU Ongoing specs: https://bit.ly/2OyDLTh ## Recently Merged Changes Search query: https://bit.ly/2pquOwT We merged 10 changes this week. ## Changes that need Attention Search query: https://bit.ly/2tymTje There are 21 changes that are passing CI, not in merge conflict, have no negative reviews and aren't proposed by bots. ### Priority Reviews * Ussuri Roadmap Stories - Groups in keystone SAML assertion https://tree.taiga.io/project/keystone-ussuri-roadmap/us/33 https://review.opendev.org/#/c/588211/ Add openstack_groups to assertion - Add support for modifying resource options to CLI tool https://tree.taiga.io/project/keystone-ussuri-roadmap/us/53 https://review.opendev.org/#/c/697444/ Adding options to user cli ## Bugs This week we opened 3 new bugs and closed 2. Bugs opened (3) Bug #1862802 (keystone:Wishlist): Avoid the default domain usage when the Domain is not specified in the project creation - Opened by Raildo Mascena de Sousa Filho https://bugs.launchpad.net/keystone/+bug/1862802 Bug #1862606 (keystone:Undecided): LDAP support broken if UTF8 characters in DN (python2) - Opened by Rafal Ramocki https://bugs.launchpad.net/keystone/+bug/1862606 Bug #1863098 (keystone:Undecided): Install and configure in keystone - Opened by Assassins! https://bugs.launchpad.net/keystone/+bug/1863098 Bugs closed (2) Bug #1808305 (python-keystoneclient:Won't Fix) https://bugs.launchpad.net/python-keystoneclient/+bug/1808305 Bug #1823258 (keystone:Undecided): RFE: Immutable Resources - Fixed by Colleen Murphy https://bugs.launchpad.net/keystone/+bug/1823258 ## Milestone Outlook https://releases.openstack.org/ussuri/schedule.html This week marks the milestone 2 spec freeze. Feature proposal freeze is in week of March 9. This means code implementing approved specs needs to be in a reviewable, non-WIP state. ## Help with this newsletter Help contribute to this newsletter by editing the etherpad: https://etherpad.openstack.org/p/keystone-team-newsletter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Re: RHOSP-like installation
by Amy Marrich 13 Feb '20

13 Feb '20

Adding the discuss list back in On Thu, Feb 13, 2020 at 5:16 PM Amy Marrich <amy(a)demarco.com> wrote: > Volodymyr, > > I'm sure someone from the TripleO team will pipe in, but TripleO is closer > to RHOSP then RDO. When I was playing with it in the past I found Keith > Tenzer's blogs helpful. There might be more recent ones then this but > here's a link to one: > > > https://keithtenzer.com/2015/10/14/howto-openstack-deployment-using-tripleo… > > Thanks, > > Amy Marrich (spotz) > > On Thu, Feb 13, 2020 at 5:05 PM Volodymyr Litovka <doka.ua(a)gmx.com> wrote: > >> Dear colleagues, >> >> while having a good experience with Openstack on Ubuntu, we're facing a >> plenty of questions re RHOSP installation. >> >> The primary requirement for our team re RHOSP is to get a knowledge on >> RHOSP - how to install it and maintain. As far as I understand, RDO is >> the closest way to reach this target but which kind of installation it's >> better to use? - >> * plain RDO installation as described in generic Openstack guide at >> https://docs.openstack.org/install-guide/index.html (specifics in >> RHEL/CentOS sections) >> * or TripleO installation as described in http://tripleo.org/install/ >> * or, may be, it is possible to use RHOSP in kind of trial mode to get >> enough knowledge on this platform? >> >> Our lab consists of four servers (64G RAM, 16 cores@2GHz) which we're >> going to use in "ultraconverged" mode - as both controller and agent >> (compute/network/storage) nodes (controllers, though, can be in >> virsh-controlled VMs). In case of TripleO scenario, 4th server can be >> used for undercloud role. This installation is intended not for >> production use, but rather for learning purposes, so no special >> requirements for productivity. The only special requirement - to be >> functionally as much as close to canonical RHOSP platform. >> >> I will highly appreciate your suggestions on this issue. >> >> Thank you. >> >> -- >> Volodymyr Litovka >> "Vision without Execution is Hallucination." -- Thomas Edison >> >> >>

2 1

[all][PTL][tc] U Community Goal: Project PTL & Contrib Docs Update #2
by Kendall Nelson 13 Feb '20

13 Feb '20

Hello! First off I want to say thank you to the 4 projects that have already gotten started/completed the goal! Good work Glance, Neutron, Searchlight, and Watcher :) For the rest of the projects, thankfully we have more time to work on this goal than for the dropping py2 goal given that its documentation we aren't restricted to it being completed by feature freeze. That said, the sooner the better :) One thing I did want to draw attention to was the discussion around adding an include for CONTRIBUTING.rst to doc/source/contributor/contributing.rst[4] and the patch I have to add it to the template[5]. I also pushed a patch to clarify doc/source/contributor/contributing.rst vs CONTRIBUTING.rst -Kendall (diablo_rojo) [1] Goal: https://governance.openstack.org/tc/goals/selected/ussuri/project-ptl-and-c… [2] Docs Template: https://opendev.org/openstack/cookiecutter/src/branch/master/%7b%7bcookiecu… [3] Tracking: https://storyboard.openstack.org/#!/story/2007236 [4] TC Discussion: http://eavesdrop.openstack.org/irclogs/%23openstack-tc/%23openstack-tc.2020… [5] Patch to add include: https://review.opendev.org/#/c/707735/ [6] contributing.rst vs CONTRIBUTING.rst clarification patch: https://review.opendev.org/#/c/707736/

1 0

[tripleo] CI is RED py27 related
by Wesley Hayutin 13 Feb '20

13 Feb '20

Greetings, Most of the jobs went RED a few minutes ago. Again it's related to python27. Nothing is going to pass CI until this is fixed. See: https://etherpad.openstack.org/p/ruckroversprint21 We'll update the list when we have the required patches in. Thanks

2 5

[release] Release countdown for week R-13, February 10-14
by Sean McGinnis 13 Feb '20

13 Feb '20

Development Focus ----------------- The Ussuri-2 milestone is next week, on February 13! Ussuri-related specs should now be finalized so that teams can move to implementation ASAP. Some teams observe specific deadlines on the second milestone (mostly spec freezes): please refer to https://releases.openstack.org/ussuri/schedule.html for details. General Information ------------------- Libraries need to be released at least once per milestone period. Next week, the release team will propose releases for any library that has not been otherwise released since milestone 1. PTL's and release liaisons, please watch for these and give a +1 to acknowledge them. If there is some reason to hold off on a release, let us know that as well. A +1 would be appreciated, but if we do not hear anything at all by the end of the week, we will assume things are OK to proceed. Remember that non-library deliverables that follow the cycle-with-intermediary release model should have an intermediary release before milestone-2. Those who haven't will be proposed to switch to the cycle-with-rc model, which is more suited to deliverables that are released only once per cycle. Next week is also the deadline to freeze the contents of the final release. All new 'Ussuri' deliverables need to have a deliverable file (https://opendev.org/openstack/releases/src/branch/master/deliverables/ussuri ) and need to have done a release by milestone-2. The following new deliverables have not had a release yet, and will not be included in Ussuri unless a release is requested for them in the coming week: - adjutant, adjutant-ui, python-adjutantclient (Adjutant) - barbican-ui (Barbican) - js-openstack-lib (OpenStackSDK) - ovn-octavia-provider (Neutron) - sushy-cli (Ironic) - tripleo-operator-ansible (TripleO) Changes proposing those deliverables for inclusion in Ussuri have been posted, please update them with an actual release request before the milestone-2 deadline if you plan on including that deliverable in Ussuri, or -1 if you need one more cycle to be ready. Upcoming Deadlines & Dates -------------------------- Ussuri-2 Milestone: February 13 (R-13 week)

1 1

[nova] API updates week 20-7
by Ghanshyam Mann 13 Feb '20

13 Feb '20

Hello Everyone, Please find the Nova API updates of this week. Please add if I missed any BPs/API related work. API Related BP : ============ COMPLETED: 1. Add image-precache-support spec: - https://blueprints.launchpad.net/nova/+spec/image-precache-support Code Ready for Review: ------------------------------ 1. Nova API policy improvement - Topic: https://review.opendev.org/#/q/topic:bp/policy-defaults-refresh+(status:ope… - Weekly Progress: API till D is covered and ready for review. Fixed 5 bugs in policy while working on new defaults. - Review guide over ML - http://lists.openstack.org/pipermail/openstack-discuss/2019-August/008504.h… 2. Non-Admin user can filter their instance by availability zone: - Topic: https://review.opendev.org/#/q/topic:bp/non-admin-filter-instance-by-az+(st… - Weekly Progress: Code under review. efried needs to remove his -2 now as spec is merge 3. Boot from volume instance rescue - Topic: https://review.opendev.org/#/q/topic:bp/virt-bfv-instance-rescue+(status:op… - Weekly Progress: Code is in progress. Lee Yarwood has removed the WIP from patches so ready for review. 4. Add action event fault details -Topic: https://review.opendev.org/#/q/topic:bp/action-event-fault-details+(status:… - Weekly Progress: Spec is merged and code is ready for review. Specs are merged and code in-progress: ------------------------------ ------------------ - None Spec Ready for Review or Action from Author: --------------------------------------------------------- 1. Support specifying vnic_type to boot a server -Spec: https://review.opendev.org/#/c/672400/ - Weekly Progress: Stephen summarized the comment about not in scope of nova. I will remove it from this list from next report. 2. Allow specify user to reset password -Spec: https://review.opendev.org/#/c/682302/5 - Weekly Progress: One +2 on this but other are disagree on this idea. More discussion on review. 3. Support re-configure deleted_on_termination in server -Spec: https://review.openstack.org/#/c/580336/ - Weekly Progress: This is old spec and there is no consensus on this till now. Others: 1. None Bugs: ==== I started fixing policy bugs while working on policy-defaults-refresh BP. 5 bugs have been identified till now and fix up for review. - https://bugs.launchpad.net/nova/+bugs?field.tag=policy-defaults-refresh NOTE- There might be some bug which is not tagged as 'api' or 'api-ref', those are not in the above list. Tag such bugs so that we can keep our eyes. -gmann

1 0

[neutron][metering] Dublicated Neutron Meter Rules in different projects kills metering
by merlin.blom＠bertelsmann.de 13 Feb '20

13 Feb '20

I want to use Neutron Meter with gnocchi to report the egress bandwidth used for public traffic. So I created neutron meter labels and neutron meter rules to include all ipv4 traffic: +-------------------+------------------------------------------------------- ---------------------------------------------+ | Field | Value | +-------------------+------------------------------------------------------- ---------------------------------------------+ | direction | egress | | id | f2c9b9a8-0af3-40a5-a718-6e841bad111d | | is_excluded | False | | location | cloud='', project.domain_id='default', project.domain_name=, | | | project.id='80120067cd7949908e44dce45aeb7712', project.name='billing', region_name='xxx', | | | zone= | | metering_label_id | d0068fc8-4a3e-4108-aa11-e3c171d4d1e1 | | name | None | | project_id | None | | remote_ip_prefix | 0.0.0.0/0 | +-------------------+------------------------------------------------------- ---------------------------------------------+ And excluded all private nets: +-------------------+------------------------------------------------------- ---------------------------------------------+ | Field | Value | +-------------------+------------------------------------------------------- ---------------------------------------------+ | direction | egress | | id | 838c9631-665b-42b6-b1e9-539983a38573 | | is_excluded | True | | location | cloud='', project.domain_id='default', project.domain_name=, | | | project.id='80120067cd7949908e44dce45aeb7712', project.name='billing', region_name='xxx', | | | zone= | | metering_label_id | 435652e6-e985-4351-a31a-954bace9eea0 | | name | None | | project_id | None | | remote_ip_prefix | 10.0.0.0/8 | +-------------------+------------------------------------------------------- ---------------------------------------------+ It works fine for just one project but if I apply it to all projects it fails and no measures are recorded in gnocchi. The neutron-metering-agent.log shows the following warning: Feb 13 09:14:18 xxx_host neutron-metering-agent: 2020-02-13 09:14:09.648 4732 WARNING neutron.agent.linux.iptables_manager [req-4c38f1f5-2db4-4d4a-9c1f-9585b1b50427 65c6d4bdcbc7469a910f6361b7f70f27 80120067cd7949908e44dce45aeb7712 - - -] Duplicate iptables rule detected. This may indicate a bug in the iptables rule generation code. Line: -A neutron-meter-r-28155d45-d16 -s 10.0.0.0/8 -o qg-c61bafef-ea -j RETURN I would expect that it is possible to have similar rules for different projects. What do you think? Is it part of the rule creation code? In the iptables_manager code the function is criticized: <https://github.com/openstack/neutron/blob/86e4f141159072421a19080455caba1b0 efef776/neutron/agent/linux/iptables_manager.py> https://github.com/openstack/neutron/blob/86e4f141159072421a19080455caba1b0e fef776/neutron/agent/linux/iptables_manager.py # TODO(kevinbenton): remove this function and the next one. They are # just oversized brooms to sweep bugs under the rug!!! We generate the # rules and we shouldn't be generating duplicates. def _weed_out_duplicates(line): if line in seen_lines: thing = 'chain' if line.startswith(':') else 'rule' LOG.warning("Duplicate iptables %(thing)s detected. This " "may indicate a bug in the iptables " "%(thing)s generation code. Line: %(line)s", {'thing': thing, 'line': line}) return False seen_lines.add(line) # Leave it alone return True <https://bugs.launchpad.net/neutron/+bug/1863068> https://bugs.launchpad.net/neutron/+bug/1863068 Merlin Blom

1 0

[Watcher]IRC meeting at 8:00 UTC today
by licanwei 13 Feb '20

13 Feb '20

2 2

[openstack-dev][kuryr] Kubelet error in ARM64
by VeeraReddy 13 Feb '20

13 Feb '20

Hi I am getting following error in kubelet in arm64 platform Feb 13 07:16:32 node-2088 kubelet[16776]: E0213 07:16:32.493458 16776 machine.go:288] failed to get cache information for node 0: open /sys/devices/system/cpu/cpu0/cache/index0/size: no such file or directoryFeb 13 07:16:32 node-2088 kubelet[16776]: I0213 07:16:32.493600 16776 gce.go:44] Error while reading product_name: open /sys/class/dmi/id/product_name: no such file or directory Help me in fixing above issue. Regards, Veera.

2 1

[operators][cinder] RSD and Swordfish drivers being abandoned
by Brian Rosmaita 12 Feb '20

12 Feb '20

Greetings operators, The current maintainers of the Intel Rack Scale Design (RSD) driver announced at this week's Cinder meeting that the driver will be marked as UNSUPPORTED in Ussuri and that the driver will no longer be maintained. The Swordfish driver, which was under active development, but not yet merged to Cinder, is also being abandoned as well as the os-brick modifications to support NVMeoF. Finally, the third-party CI system for the RSD driver is being dismantled. We want you to be aware of these changes, but more optimistically, we are hoping that there would be some interest in the community in picking these up. If you are or know of such a person, please contact us right away so that we can get a technology transfer going before the current development group has been dispersed to other projects. For more information, please contact: Ivens Zambrano (ivens.zambrano(a)intel.com / IRC:IvensZambrano) David Shaughnessy (david.shaughnessy(a)intel.com / IRC: davidsha) thanks, brian

1 0

[qa][ptg] QA PTG, Vancouver Planning
by Ghanshyam Mann 12 Feb '20

12 Feb '20

Hello Everyone, I have started the Vancouver PTG planning for QA[1]. The very first step is to reserve the space based on number of attendees. For that, please write your name in the etherpad. I know it might not be confirmed yet or the travel process has not started, still, you can write your probability of attending. It is not necessary to be 100% in QA but if you are planning to spend some time in QA PTG, still write your name with comment. [1] https://etherpad.openstack.org/p/qa-victoria-ptg -gmann

1 0

[cinder][ptg] Victoria (Vancouver 2020) PTG headcount
by Brian Rosmaita 12 Feb '20

12 Feb '20

I need to get a rough headcount to submit to the PTG planning committee. Please take a minute to put your name on this etherpad if you think/hope/plan to attend (no commitment--we just want to increase the likelihood that we'll have enough seats for the Cinder team): https://etherpad.openstack.org/p/cinder-victoria-ptg-planning While you're on that etherpad, if you have a topic idea already, feel free to add it. I need the headcount info by 19:00 UTC on 28 February. (But do it now before you forget.) thanks, brian

1 0

[largescale-sig] Meeting summary and next actions
by Thierry Carrez 12 Feb '20

12 Feb '20

Hi everyone, The Large Scale SIG held a meeting today. We had a small attendance, and blame holidays for that. But you can catch up with the summary and logs of the meeting at: http://eavesdrop.openstack.org/meetings/large_scale_sig/2020/large_scale_si… We started with a presentation by oneswig of the integration of HAProxy telemetry via Monasca on a Kolla-Ansible-based deployment, and how that can help us derive latency information based on the API server called, the HTTP method and the HTTP code result across all HAProxy-fronted servers in a deployment. Slides are available at: http://www.stackhpc.com/resources/HAproxy-telemetry.pdf Regarding progress on our "Documenting large scale operations" goal, some doc links were proposed and all seem relevant to our collection. On the "Scaling within one cluster, and instrumentation of the bottlenecks" goal, the draft of the oslo.metrics spec got a first round of comments. masahito will refresh it based on those initial comments, but it would be good for SIG members to also weigh in at that early stage. In other news, we discussed the SIG's involvement in the "Large-scale Usage of Open Source Infrastructure Software" track at the OpenDev event in Vancouver in June. We plan to have SIG members directly involved and have discussions around our two goals for 2020. TODOs between now and next meeting: - masahito to update spec based on initial feedback - everyone to review and comment on https://review.opendev.org/#/c/704733/ The next meeting will happen on February 26, at 9:00 UTC on #openstack-meeting. Cheers, -- Thierry Carrez (ttx)

1 0

[scientific-sig] No Scientific SIG meeting today
by Stig Telfer 12 Feb '20

12 Feb '20

Hi All - Unfortunately there will not be a Scientific SIG IRC meeting today, owing to other commitments and availability. Apologies, Stig

1 0

How to Migrate OpenStack Instance from one Tenant to another
by Pradeep Antil 12 Feb '20

12 Feb '20

Hi Folks, I am using Mitaka OpenStack and VLAN as network type driver for tenant VMs. Initially i have provisioned all the VMs (Including Customer VMs) inside the admin. I want to segregate my internal VMs and Customer VMs, for this to accomplish i have created different tenant names and now i want customer VMs from admin tenant to Customer tenant, On Google , i have a found a script which migrates the VMs but that script doesn't update network and security group details, Can anyone help me and suggest what steps needs to executed to update network , security group and attached Volumes ..? Below is the exact script: #!/bin/bash for i do if [ "$i" != "$1" ]; then echo "moving instance id " $i " to project id" $1; mysql -uroot -s -N <<query use nova; update instances set project_id="$1" where uuid="$i"; query else #get project id of the instance before update old_proj_id=$(mysql -uroot -s -N <<query use nova; select project_id from instances where uuid="$2"; query ) #get user id of the instance before update user_id=$(mysql -uroot -s -N <<query use nova; select user_id from instances where uuid="$2"; query ) fi done echo "quota_resync " $old_proj_id; ./quota_resync.sh $old_proj_id $user_id; echo "quota_resync " $1; ./quota_resync.sh $1 $user_id; root@xxxx:/mnt# cat quota_resync.sh #!/bin/bash count=$(mysql -uroot -s -N <<query use nova; select count(*) from instances where project_id="$1" and vm_state="active"; query ) memory=$(mysql -uroot -s -N <<query use nova; select sum(memory_mb) from instances where project_id="$1" and vm_state="active"; query ) vcpu=$(mysql -uroot -s -N <<query use nova; select sum(vcpus) from instances where project_id="$1" and vm_state="active"; query ) echo "count" $count; echo "vcpus" $vcpu; echo "Ram" $memory; update=$(mysql -uroot -s -N <<query use nova; update quota_usages set in_use=$count where project_id="$1" and user_id="$2" and resource="instances"; update quota_usages set in_use=$memory where project_id="$1" and user_id="$2" and resource="ram"; update quota_usages set in_use=$vcpu where project_id="$1" and user_id="$2" and resource="cores"; query ) root@xxxx:/mnt# Script Execution Method : # /vm_move.sh "destination_tenant_id" "VM_id" -- Best Regards Pradeep Kumar

1 0

Re: [ospurge] looking for project owners / considering adoption
by Artem Goncharov 11 Feb '20

11 Feb '20

Hi, I am thinking to submit (not found possibility so far) a forum-like session for that again in Vancouver, where I would present current status of implementation and we can plan further steps. Unfortunately I have still no confirmation from my employer, that I will be allowed to go. Any ideas/objections? Regards, Artem > On 3. Nov 2019, at 02:34, Tobias Rydberg <tobias.rydberg(a)citynetwork.eu> wrote: > > Hi, > > Sounds really good Artem! Will you be at the session at the Summit? If not, I will bring the information from you to the session... > > Cheers, > Tobias > > Tobias Rydberg > Senior Developer > Twitter & IRC: tobberydberg > > www.citynetwork.eu <http://www.citynetwork.eu/> | www.citycloud.com <http://www.citycloud.com/> > > INNOVATION THROUGH OPEN IT INFRASTRUCTURE > ISO 9001, 14001, 27001, 27015 & 27018 CERTIFIED > On 2019-11-02 16:26, Artem Goncharov wrote: >> Hi Tobby, >> >> As I mentioned, if Monty does not start work, I will start it in few weeks latest (mid November). I need this now in my project, therefore I will be definitely able to spend time on implementation in both SDK and OSC. >> >> P.S. mailing this to you, since I will not be on the Summit. >> >> Regards, >> Artem >> >>> On 2. Nov 2019, at 09:19, Tobias Rydberg <tobias.rydberg(a)citynetwork.eu <mailto:tobias.rydberg@citynetwork.eu>> wrote: >>> >>> Hi, >>> >>> A Forum session is planned for this topic, Monday 11:40. Suites perfect to continue the discussions there as well. >>> >>> https://www.openstack.org/summit/shanghai-2019/summit-schedule/events/24407… <https://www.openstack.org/summit/shanghai-2019/summit-schedule/events/24407…> >>> BR, >>> Tobias >>> >>> Tobias Rydberg >>> Senior Developer >>> Twitter & IRC: tobberydberg >>> >>> www.citynetwork.eu <http://www.citynetwork.eu/> | www.citycloud.com <http://www.citycloud.com/> >>> >>> INNOVATION THROUGH OPEN IT INFRASTRUCTURE >>> ISO 9001, 14001, 27001, 27015 & 27018 CERTIFIED >>> On 2019-10-30 15:43, Artem Goncharov wrote: >>>> Hi Adam, >>>> >>>> Since I need this now as well I will start working on implementation how it was agreed (in SDK and in OSC) during last summit by mid of November. There is no need for discussing this further, it just need to be implemented. Sad that we got no progress in half a year. >>>> >>>> Regards, >>>> Artem (gtema). >>>> >>>>> On 30. Oct 2019, at 14:26, Adam Harwell <flux.adam(a)gmail.com <mailto:flux.adam@gmail.com>> wrote: >>>>> >>>>> That's too bad that you won't be at the summit, but I think there may still be some discussion planned about this topic. >>>>> >>>>> Yeah, I understand completely about priorities and such internally. Same for me... It just happens that this IS priority work for us right now. :) >>>>> >>>>> >>>>> On Tue, Oct 29, 2019, 07:48 Adrian Turjak <adriant(a)catalyst.net.nz <mailto:adriant@catalyst.net.nz>> wrote: >>>>> My apologies I missed this email. >>>>> >>>>> Sadly I won't be at the summit this time around. There may be some public cloud focused discussions, and some of those often have this topic come up. Also if Monty from the SDK team is around, I'd suggest finding him and having a chat. >>>>> >>>>> I'll help if I can but we are swamped with internal work and I can't dedicate much time to do upstream work that isn't urgent. :( >>>>> >>>>> On 17/10/19 8:48 am, Adam Harwell wrote: >>>>>> That's interesting -- we have already started working to add features and improve ospurge, and it seems like a plenty useful tool for our needs, but I think I agree that it would be nice to have that functionality built into the sdk. I might be able to help with both, since one is immediately useful and we (like everyone) have deadlines to meet, and the other makes sense to me as a possible future direction that could be more widely supported. >>>>>> >>>>>> Will you or someone else be hosting and discussion about this at the Shanghai summit? I'll be there and would be happy to join and discuss. >>>>>> >>>>>> --Adam >>>>>> >>>>>> On Tue, Oct 15, 2019, 22:04 Adrian Turjak <adriant(a)catalyst.net.nz <mailto:adriant@catalyst.net.nz>> wrote: >>>>>> I tried to get a community goal to do project deletion per project, but >>>>>> we ended up deciding that a community goal wasn't ideal unless we did >>>>>> build a bulk delete API in each service: >>>>>> https://review.opendev.org/#/c/639010/ <https://review.opendev.org/#/c/639010/> >>>>>> https://etherpad.openstack.org/p/community-goal-project-deletion <https://etherpad.openstack.org/p/community-goal-project-deletion> >>>>>> https://etherpad.openstack.org/p/DEN-Deletion-of-resources <https://etherpad.openstack.org/p/DEN-Deletion-of-resources> >>>>>> https://etherpad.openstack.org/p/DEN-Train-PublicCloudWG-brainstorming <https://etherpad.openstack.org/p/DEN-Train-PublicCloudWG-brainstorming> >>>>>> >>>>>> What we decided on, but didn't get a chance to work on, was building >>>>>> into the OpenstackSDK OS-purge like functionality, as well as reporting >>>>>> functionality (of all project resources to be deleted). That way we >>>>>> could have per project per resource deletion logic, and all of that >>>>>> defined in the SDK. >>>>>> >>>>>> I was up for doing some of the work, but ended up swamped with internal >>>>>> work and just didn't drive or push for the deletion work upstream. >>>>>> >>>>>> If you want to do something useful, don't pursue OS-Purge, help us add >>>>>> that official functionality to the SDK, and then we can push for bulk >>>>>> deletion APIs in each project to make resource deletion more pleasant. >>>>>> >>>>>> I'd be happy to help with the work, and Monty on the SDK team will most >>>>>> likely be happy to as well. :) >>>>>> >>>>>> Cheers, >>>>>> Adrian >>>>>> >>>>>> On 1/10/19 11:48 am, Adam Harwell wrote: >>>>>> > I haven't seen much activity on this project in a while, and it's been >>>>>> > moved to opendev/x since the opendev migration... Who is the current >>>>>> > owner of this project? Is there anyone who actually is maintaining it, >>>>>> > or would mind if others wanted to adopt the project to move it forward? >>>>>> > >>>>>> > Thanks, >>>>>> > --Adam Harwell >>>> >>

2 1

Galera and haproxy fail; keystone error 'Lost connection to MySQL server during query'
by Albert Braden 11 Feb '20

11 Feb '20

If I run galera without haproxy and point everything to 1 server, it seems to work fine, but we want to load-balance it with haproxy. After setting up haproxy we had lots of errors in nova, neutron and keystone, but I got rid of those by setting haproxy timeout values to 10 minutes. The remaining errors are in keystone. In /var/log/keystone/keystone-wsgi-public.log I see "Loaded 2 Fernet keys" every 5 minutes and this is frequently accompanied by a mysql error 'Lost connection to MySQL server during query' I tried changing various config items in haproxy, galera and keystone, but nothing seems to help. How can I fix these errors? Errors: https://f.perl.bot/p/pbq26k https://f.perl.bot/p/1tnh78 https://f.perl.bot/p/fuxmwo Haproxy config: https://f.perl.bot/p/gu2lil Mysql timeout values: https://f.perl.bot/p/i6l7tn Keystone config (minus commented lines): https://f.perl.bot/p/o6fdht

2 3

[ptl][keystone] cmurphy afk week of February 17
by Colleen Murphy 11 Feb '20

11 Feb '20

I will be on vacation the week of February 17 and will not be computering. Kristi Nikolla (knikolla) has graciously agreed to act as stand-in PTL for keystone during that time and will chair next week's meeting. If necessary I will be reachable by email or IRC but with some delay (hours or days). Colleen

1 0

[keystone] YVR PTG planning
by Colleen Murphy 11 Feb '20

11 Feb '20

Hi all, It's time to start planning the next PTG. Unlike Shanghai, I'm tentatively assuming that we will be able to hold this one in person. I've created an etherpad to start tracking it: https://etherpad.openstack.org/p/yvr-ptg-keystone Please add your name to the etherpad if you have a hunch you'll be attending and participating in keystone-related discussions, and please also add your topic ideas to the list. Colleen

1 0

[neutron][ironic][nova][routed_network] what's normal workflow when ironic host added to nova from neutron?
by 양유석 11 Feb '20

11 Feb '20

Hi stacker, I'm trying to use ironic routed network from stein. I do not sure how the normal workflow works in nova/neutron/ironic side for routed network, so I sent this mail to get more information. >From what I understand for ironic routed network, what I did - Enable segment plugin in Neutron - Add ironic 'node' - Add ironic port with physical network - network-baremetal plugin reports neutron from all ironic nodes. - It sent 'physical_network' and 'ironic node uuid' to Neutron - It make 'segmenthostmapping' entry with ('node uuid', 'segment_id') - Add segment for the subnet. At last step, I encountered the strange. In detail, - Neutron subnet update callback call nova inventory registration - Neutron ask placement to create resource provider for segment - Neutron ask nova to create aggregate for segment - Neutron request placement to associate nova aggregate to resource provider. - (Bug?) Neutron add hosts came from 'segmenthostmapping' to nova aggregate Since 'segmenthostmapping' has 'ironic node uuid' for host, nova deny to register the host to aggregate emitting the exception like below Returning 404 to user: Compute host 27004f76-2606-4e4a-980e-a385a01f04de could not be found. __call__ What's strange for me is why neutron ask 'ironic node uuid' for host when nova aggregate only look for host from HostMapping which came from 'host' in compute_nodes. I could not find the code related to how 'ironic node uuid' can be registered in nova aggregate. Please someone who knows what's going on shed light on me. Thanks.

2 4

[tripleo] rework of triple squads and the tripleo mtg.
by Wesley Hayutin 11 Feb '20

11 Feb '20

Greetings, As mentioned at the previous tripleo meeting [1], we're going to revisit the current tripleo squads and the expectations for those squads at the tripleo meeting. Currently we have the following squads.. 1. upgrades 2. edge 3. integration 4. validations 5. networking 6. transformation 7. ci A reasonable update could include the following.. 1. validations 2. transformation 3. mistral-to-ansible 4. CI 5. Ceph / Integration?? maybe just Ceph? 6. others?? The squads should reflect major current efforts by the TripleO team IMHO. For the meetings, I would propose we use this time and space to give context to current reviews in progress and solicit feedback. It's also a good time and space to discuss any upstream blockers for those reviews. Let's give this one week for comments etc.. Next week we'll update the etherpad list and squads. The etherpad list will be a decent way to communicate which reviews need attention. Thanks all!!! [1] http://eavesdrop.openstack.org/meetings/tripleo/2020/tripleo.2020-01-07-14.…

7 7

[infra][neutron] Removing networking-calico from OpenStack governance
by Neil Jerram 11 Feb '20

11 Feb '20

Hi all, networking-calico is the code that integrates Project Calico [1] with Neutron. It has been an OpenStack project for several years, but we, i.e. its developers [2], would like now to remove it from OpenStack governance and instead manage it like the other Project Calico projects under https://github.com/projectcalico/. In case anyone has any concerns about this, please let me know very soon! Please could infra folk confirm that https://docs.openstack.org/infra/manual/drivers.html#retiring-a-project is the correct procedure for winding up the OpenStack side of this transition? Many thanks, Neil [1] https://www.projectcalico.org/ [2] That means mostly me, with some help from my colleagues here at Tigera. We do have some other contributors but I will take care that they are also on board with this change.

3 6

UC Elections Reminder
by Amy Marrich 10 Feb '20

10 Feb '20

Hey All! Just a reminder that the nomination period for the upcoming User Committee elections is open. See the original email below! Thanks, Amy (spotz) The nomination period for the February User Committee elections is now open. Any individual member of the Foundation who is an Active User Contributor (AUC) can propose their candidacy (except the two sitting UC members elected in the previous election). Self-nomination is common; no third party nomination is required. Nominations can be made by sending an email to the user-committee(a)lists.openstack.org mailing-list[0], with the subject: “UC candidacy” by February 16, 23:59 UTC aa voting will begin on February 17. The email can include a description of the candidate platform. The candidacy is then confirmed by one of the election officials, after verification of the electorate status of the candidate. Criteria for AUC status can be found at https://superuser.openstack.org/articles/auc-community/. If you are still not sure of your status and would like to verify in advance please email myself(amy(a)demarco.com) and Rain Leander(rleander(a)redhat.com) as we are serving as the Election Officials. Thanks, Amy Marrich (spotz) 0 - Please make sure you are subscribed to this list before sending in your nomination.

1 0

Nominating Maysa De Macedo Souza for kuryr-kubernetes core
by mdulko＠redhat.com 10 Feb '20

10 Feb '20

Hi, I'd like to nominate Maysa to be core reviewer in Kuryr-Kubernetes project. Maysa shown numerous examples of diligent and valuable work in terms of code contribution (e.g. in network policy support), project maintenance and reviews [1]. Please express support or objections by replying to this email. Assuming that there will be no pushback, I'll proceed with granting Maysa core powers by the end of this week. Thanks, Michał [1] https://www.stackalytics.com/?module=kuryr-kubernetes&release=ussuri

3 3

[oslo] PTG Attendance
by Ben Nemec 10 Feb '20

10 Feb '20

Hi, As discussed in the meeting this morning, we need to decide if we want to request a room at the Vancouver PTG. Since I'm not expecting to be there this time someone else would need to organize it. I realize travel plans are not finalized for most people, but if you expect to be there and would like to have formal Oslo discussions please let me know ASAP. Thanks. -Ben

1 0

[neutron] Bug deputy report Feb 3-10
by Nate Johnston 10 Feb '20

10 Feb '20

Nate bug deputy notes - 2020-02-03 to 2020-02-10 ------------------------------------------------ It was a very quiet week - almost half of these were filed today, this report was looking very short as recently as yesterday. Thanks to amotoki for the next shift as bug deputy. Untriaged: - "Neutron try to register invalid host to nova aggregate for ironic routed network" * URL: https://bugs.launchpad.net/bugs/1862611 * Version: stable/stein * lajoskatona responded to the bug but I was not able to reproduce it; I don't have an ironic setup to verify the bug report. Critical: - "Neutron incorrectly selects subnet" * URL: https://bugs.launchpad.net/bugs/1862374 * Marked Incomplete by haleyb but there is still a significant chance there is a real issue here, it might just be in the SDK as opposed to neutron. Waiting for reported to respond. High: - "Fullstack tests failing due to "hang" neutron-server process" (slaweq) * URL: https://bugs.launchpad.net/bugs/1862178 * Unassigned - "Fullstack tests failing due to problem with connection to the fake placement service" * URL: https://bugs.launchpad.net/bugs/1862177 * Assigned: lajoskatona * Fix proposed: https://review.opendev.org/706500 - "Sometimes VMs can't get IP when spawned concurrently" * URL: https://bugs.launchpad.net/bugs/1862315 * Version: stable/stein * Assigned: obondarev - "[OVN] Reduce the number of tables watched by MetadataProxyHandler" * URL: https://bugs.launchpad.net/bugs/1862648 * Assigned: lucasgomes Medium: - "[OVN] functional test test_virtual_port_delete_parents is unstable" * URL: https://bugs.launchpad.net/bugs/1862618 * Assigned: sapana45 Invalid: - "placement in neutron_lib could not process keystone exceptions" * URL: https://bugs.launchpad.net/bugs/1862565 * Marked as duplicate of https://bugs.launchpad.net/neutron/+bug/1828543 (lajoskatona) RFE: - "Add RBAC for subnet pools" * URL: https://bugs.launchpad.net/bugs/1862032 * Cross-project with the nova team, nova has a patch up for their part. Last week's report by tidwellr: http://lists.openstack.org/pipermail/openstack-discuss/2020-February/012332…

1 0

Re: [Release-job-failures] release-post job for openstack/releases for ref refs/heads/master failed
by Sean McGinnis 10 Feb '20

10 Feb '20

On 2/10/20 9:08 AM, zuul(a)openstack.org wrote: > Build failed. > > - tag-releases https://zuul.opendev.org/t/openstack/build/8796e6c046a84688b3dd9dc756f4a15d : FAILURE in 6m 13s > - publish-tox-docs-static https://zuul.opendev.org/t/openstack/build/None : SKIPPED > > _______________________________________________ > Release-job-failures mailing list > Release-job-failures(a)lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/release-job-failures This failure was actually on the removal of a deliverable file for something that is no longer active. This can be safely ignored. Sean

1 0

[neutron] 11.02.2020 team meeting cancelled
by Slawek Kaplonski 10 Feb '20

10 Feb '20

Hi, I will not be able to chair our tomorrow’s team meeting. So lets cancel it and see You all on Monday 17.02.2020. — Slawek Kaplonski Senior software engineer Red Hat

1 0

[largescale-sig] Next meeting: Feb 12, 9utc
by Thierry Carrez 10 Feb '20

10 Feb '20

Hi everyone, The Large Scale SIG will have a meeting this week on Wednesday, Feb 12 at 9 UTC[1] in #openstack-meeting on IRC: [1] https://www.timeanddate.com/worldclock/fixedtime.html?iso=20200212T09 As always, the agenda for our meeting is available at: https://etherpad.openstack.org/p/large-scale-sig-meeting Feel free to add topics to it. We'll start with a show-and-tell by Stig (oneswig), followed by a status update on the various TODOs we had from last meeting, in particular: - Reviewing oslo.metrics draft at https://review.opendev.org/#/c/704733/ and comment so that we can iterate on it - Reading page on golden signals at https://landing.google.com/sre/sre-book/chapters/monitoring-distributed-sys… Talk to you all on Wednesday, -- Thierry Carrez

1 0

[heat][tacker] After Stack is Created, will it change nested stack Id?
by Patil, Tushar 10 Feb '20

10 Feb '20

Hi All, In tacker project, we are using heat API to create stack. Consider a case where we want to add OS::Heat::AutoScalingGroup in which there are two servers and the desired capacity is set to 2. So internally heat will create two nested stacks and add following resources to it:- child stack1 VDU1 - OS::Nova::Server CP1 - OS::Neutron::Port VDU2 - OS::Nova::Server CP2- OS::Neutron::Port child stack2 VDU1 - OS::Nova::Server CP1 - OS::Neutron::Port VDU2 - OS::Nova::Server CP2- OS::Neutron::Port Now, as part of tacker heal API, we want to heal VDU1 from child stack2. To do this, we will mark the status of the resources from "child stack2" as unhealthy and then update "child stack2" stack. Since VDU1 resource is present in the two nested stacks, I want to keep the nested stack id information in tacker so that after the stack is updated, I can pull physical resource id of the resources from the nested child stack directly. My question is after the stack is created for the first time, will it ever change the nested child stack id? Thank you. Regards, tpatil Disclaimer: This email and any attachments are sent in strictest confidence for the sole use of the addressee and may contain legally privileged, confidential, and proprietary data. If you are not the intended recipient, please advise the sender by replying promptly to this email and then delete and destroy this email and any attachments without any further use, copying or forwarding.

2 2

[goals][Drop Python 2.7 Support] Week R-14 Update (1 week left to complete)
by Ghanshyam Mann 09 Feb '20

09 Feb '20

Hello Everyone, Below is the progress on "Drop Python 2.7 Support" at end of R-14 week. Schedule: https://governance.openstack.org/tc/goals/selected/ussuri/drop-py27.html#sc… Highlights: ======== * 1 week left to finish the work. * This week was very dramatic and full of failure as expected or more than that :). ** With that, I am expecting more issues to occur, dropping py2 from every repo asap is suggested so that we can stabilize the things well before m-3. * Do not worry about the gate failure, it is better to break it now and fix so that we can smoothly release Ussuri. * Oslo dropped the py2, which caused multiple failures on 1. tempest testing on stable branches 2. projects still running py2 jobs on the master. ** we did not opt to cap the oslo lib for <py3.6 and decided to fix the issue instead. **1. Tempest testing is fixed and stable branches gate is green now. **2. TripleO was one project that failed for this and py2 jobs are dropped now. If any project facing the same issue and waiting for some general fix, need to drop py2 job asap. * Bugs & Issues: ** Stable/ocata|pike|queens|rocky gate is up now. u-c issue on pinned Tempest is resolved now[1] *** http://lists.openstack.org/pipermail/openstack-discuss/2020-February/012462… ** Nova stable branches are still falling for the u-c reason on nova-live-migration. Fixes are up[2] * * Tempest tox 'all-plugin' usage issue[3] *** designate stable branches fixes are up. If any project job faces the same issue, you can apply the same fix.[4] ** neutron-vpass in-tree plugin issue *** slaweq, amotoki and I are discussing the best possible fix. NOTE: I know few py2.7 drop patches are failing on few projects, I will continue debugging those. Help from the failing project will be greatly appreciated to meet the deadline. Project wise status and need reviews: ============================ Phase-1 status: The OpenStack services have not merged the py2 drop patches: NOTE: This was supposed to be completed by milestone-1 (Dec 13th, 19). * Adjutant * Masakari * Qinling Phase-2 status: This is ongoing work and I think most of the repo have patches up to review. Try to review them on priority. If any query and I missed to respond on review, feel free to ping me in irc. * Open review: https://review.opendev.org/#/q/topic:drop-py27-support+status:open How you can help: ============== - Review the patches. Push the patches if I missed any repo. [1] http://lists.openstack.org/pipermail/openstack-discuss/2020-February/012463… [2] https://review.opendev.org/#/q/I8190f93e0a754fa59ed848a3a230d1ef63a06abc [3] https://bugs.launchpad.net/tempest/+bug/1862240 [4] https://review.opendev.org/#/q/topic:bug/1862240+(status:open+OR+status:mer… -gmann

1 0

openstack-dpdk installation
by mesut aygün 09 Feb '20

09 Feb '20

Hey, I am working over dpdk installation with openstack ocata release. How can I use the neutron-openvswitch-agent-dpdk or anything else instead of neutron-openvswitch-agent? Which can I choose the correct packages with os dpdk versions? I couldn't use the devstack versions!! Best regards

2 3

[nova] nova stable pike|queens|rocky is still failing on Tempest u-c: Do not recheck
by Ghanshyam Mann 09 Feb '20

09 Feb '20

After fixing the stable/pike|queens|rocky integrated jobs[1], on using the stable u-c for pinned Tempest run, nova-live-migration fail on these stable branch on nova. I have proposed the fixes[2], wait for recheck till those are merged. [1] https://review.opendev.org/#/q/topic:fix-stable-gate+status:merged [2] https://review.opendev.org/#/q/topic:fix-stable-gate+status:open+projects:o… -gmann

1 0

[qa][stable][tempest-plugins]: Tempest & plugins py2 jobs failure for stable branches (1860033: the EOLing python2 drama)
by Ghanshyam Mann 09 Feb '20

09 Feb '20

Hello Everyone, This is regarding bug: https://bugs.launchpad.net/tempest/+bug/1860033. Using Radosław's fancy statement of 'EOLing python2 drama' in subject :). neutron tempest plugin job on stable/rocky started failing as neutron-lib dropped the py2. neutron-lib 2.0.0 is py3 only and so does u-c on the master has been updated to 2.0.0. All tempest and its plugin uses the master u-c for stable branch testing which is the valid way because of master Tempest & plugin is being used to test the stable branches which need u-c from master itself. These failed jobs also used master u-c[1] which is trying to install the latest neutron-lib and failing. This is not just neutron tempest plugin issue but for all Tempest plugins jobs. Any lib used by Tempest or plugins can drop the py2 now and leads to this failure. Its just neutron-lib raised the flag first before I plan to hack on Tempest & plugins jobs for py2 drop from master and kepe testing py2 on stable bracnhes. We have two way to fix this: 1. Separate out the testing of python2 jobs with python2 supported version of Tempest plugins and with respective u-c. For example, test all python2 job with tempest plugin train version (or any latest version if any which support py2) and use u-c from stable/train. This will cap the Tempest & plugins with respective u-c for stable branches testing. 2. Second option is to install the tempest and plugins in py3 env on py2 jobs also. This should be an easy and preferred way. I am trying this first[2] and testing[3]. [1] https://zuul.opendev.org/t/openstack/build/fb8a928ed3614e09a9a3cf4637f2f6c2… [2] https://review.opendev.org/#/c/703011/ [3] https://review.opendev.org/#/c/703012/ -gmanne

5 17

[all] Gate status: Stable/ocata|pike|queens|rocky is broken: Avoid recheck
by Ghanshyam Mann 08 Feb '20

08 Feb '20

Hello Everyone, Stable/ocata, pike, queens, rocky gate is broken now due to Temepst dependency require >=py3.6. I summarized the situation in ML[1]. Do not recheck on failed patches of those branches until the job is explicitly disabling Tempest. Fixes are in progress, I will update the status here once fixes are merged. [1]http://lists.openstack.org/pipermail/openstack-discuss/2020-February/0123… -gmann

1 1

Regarding OpenStack
by HARISH KUMAR Ivaturi 08 Feb '20

08 Feb '20

Hi I am Harish Kumar, Master Student at BTH, Karlskrona, Sweden. I have started my Master thesis at BTH and my thesis topic is Performance evaluation of OpenStack with HTTP/3. My solutions will take some time (few months) and i would like to request you that could you add me as a contributor to your github repository , so after completing my thesis i could push my codes in that repository. You can contact me for further details. Thanks and Regards Harish Kumar

2 1

[cinder][nova] volume-local-cache meeting day/time set
by Brian Rosmaita 08 Feb '20

08 Feb '20

I picked the day/time with the most votes (9/10, sorry Rajat), but as gibi pointed out in the other thread, it may not have been obvious what you actually voted for. The good news is that the selected day is late in the week, so if you look at this time and say WTF?, let me know and we can scramble to try to find another day/time (though hopefully not--we're trying to find a time that works stretching from Minneapolis to Shanghai). Meeting time: 13:30-14:00 UTC Thursday 13 February 2020 Location: https://bluejeans.com/3228528973 Topic: volume-local-cache specs: cinder: https://review.opendev.org/#/c/684556/ nova: https://review.opendev.org/#/c/689070/ Etherpad: https://etherpad.openstack.org/p/volume-local-cache The meeting will be recorded. Feel free to leave comments on the etherpad if you can't make it but want something addressed. cheers, brian

2 1

[cinder][nova] volume-local-cache proposal cross-project meeting
by Brian Rosmaita 08 Feb '20

08 Feb '20

Liang Fang's volume-local-cache spec has gotten stuck because the Cinder team doesn't want to approve something that won't get approved on the Nova side and vice-versa. We discussed the spec at this week's Cinder meeting and there's sufficient interest to continue with it. In order to keep things moving along, we'd like to have a cross-project video conference next week instead of waiting for the PTG. I think we can get everything covered in a half-hour. I've put together a doodle poll to find a reasonable day and time: https://doodle.com/poll/w8ttitucgyqwe5yc Please take the poll before 17:00 UTC on Saturday 8 February. I'll send out an announcement shortly after that letting you know what time's been selected. I'll send out connection info once the meeting's been set. The meeting will be recorded and interested parties who can't make it can always leave notes on the discussion etherpad. Info: - cinder spec: https://review.opendev.org/#/c/684556/ - nova spec: https://review.opendev.org/#/c/689070/ - etherpad: https://etherpad.openstack.org/p/volume-local-cache cheers, brian

2 2

[Queens][neutron] multiple networks with same vlan id
by Ignazio Cassano 08 Feb '20

08 Feb '20

Hello, I trying to create multiple networks with the same vlan id and different address but it is impossibile because neutron returns vlan id is already present. I tried with success on vcenter and it works. On openstack I can create more subnets with different adresses under the same vlan id, but instances receive static routes from dhcp for all subnets. Any workaround ? I am also trying with segments but they do not seem to fit my case. Regards Ignazio

4 5

[quuens] neutron vxlan to vxlan
by Ignazio Cassano 08 Feb '20

08 Feb '20

Hello, I have an openstack installation and a vcenter installation with nsxv. Vcenter is not under openstack Any solution for vxlan to vxlan communication between them? Regards Ignazio

2 2

Re: [Release-job-failures] Release of openstack/mox3 for ref refs/tags/1.0.0 failed
by Sean McGinnis 07 Feb '20

07 Feb '20

On Fri, Feb 07, 2020 at 01:16:38PM +0000, zuul(a)openstack.org wrote: > Build failed. > > - release-openstack-python https://zuul.opendev.org/t/openstack/build/720dc1833f464e2db76b90d1c8437883 : SUCCESS in 3m 48s > - announce-release https://zuul.opendev.org/t/openstack/build/d85b18ed6e2a47f98e96c1ad168ae98a : FAILURE in 4m 00s > - propose-update-constraints https://zuul.opendev.org/t/openstack/build/c2abc022840846c7a87b5804580492ee : SUCCESS in 3m 51s > > _______________________________________________ > Release-job-failures mailing list > Release-job-failures(a)lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/release-job-failures There was a temporary SMTP failure in sending the release announcement for mox3. All other release activities were successful, so I think this error can safely be ignored. Sean

1 0

[all] Nominations for the "W" release name
by Sean McGinnis 07 Feb '20

07 Feb '20

Hello all, We get to be a little proactive this time around and get the release name chosen for the "W" release. Time to start thinking of good names again! Process Changes --------------- There are a couple of changes to be aware of with our naming process. In the past, we had always based our naming criteria on something geographically local to the Summit location. With the event changes to no longer have two large Summit-type events per year, we have tweaked our process to open things up and make it hopefully a little easier to pick a good name that the community likes. There are a couple of significant changes. First, names can now be proposed for anything that starts with the appropriate letter. It is no longer tied to a specific geographic region. Second, in order to simplify the process, the electorate for the poll will be the OpenStack Technical Committee. Full details of the release naming process can be found here: https://governance.openstack.org/tc/reference/release-naming.html Name Selection -------------- With that, the nomination period for the "W" release name is now open. Please add suitable names to: https://wiki.openstack.org/wiki/Release_Naming/W_Proposals We will accept nominations until February 7, 202 at 23:59:59 UTC. We will then have a brief period for any necessary discussions and to get the poll set up, with the TC electorate voting starting by February 17, 2020 and going no longer than February 23, 2020. Based on past timing with trademark and copyright reviews, we will likely have an official release name by mid to late March. Happy naming! Sean

2 2

[Neutron][segments]
by Ignazio Cassano 07 Feb '20

07 Feb '20

Hello, I am reading about openstack neutron routed provider networks. If I understood well, using segments I can create more subnets within the same provider net vlan id. Correct? In documentation seems I must use different physical network for each segment. I am using only one physical network ...in other words I created an openvswitch with a bridge (br-ex) with an interface on which I receive all my vlans (trunk). Why must I use different physical net? Sorry, but my net skill is poor. Ignazio

2 2

[keystone] Keystone Team Update - Week of 3 February 2020
by Vishakha Agarwal 06 Feb '20

06 Feb '20

# Keystone Team Update - Week of 3 February 2020 ## News ### User Support and Bug Duty Every week the duty is being rotated between the members. The person-in-charge for bug duty for current and upcoming week can be seen on the etherpad [1] [1] https://etherpad.openstack.org/p/keystone-l1-duty ## Open Specs Ussuri specs: https://bit.ly/2XDdpkU Ongoing specs: https://bit.ly/2OyDLTh ## Recently Merged Changes Search query: https://bit.ly/2pquOwT We merged 13 changes this week. ## Changes that need Attention Search query: https://bit.ly/2tymTje There are 27 changes that are passing CI, not in merge conflict, have no negative reviews and aren't proposed by bots. ### Priority Reviews * Ussuri Roadmap Stories - Groups in keystone SAML assertion https://tree.taiga.io/project/keystone-ussuri-roadmap/us/33 https://review.opendev.org/#/c/588211/ Add openstack_groups to assertion - Add support for modifying resource options to CLI tool https://tree.taiga.io/project/keystone-ussuri-roadmap/us/53 https://review.opendev.org/#/c/697444/ Adding options to user cli * Special Requests https://review.opendev.org/#/c/705887/ Drop py3.5 from tempest plugins ## Bugs This week we opened 2 new bugs and closed 3. Bugs opened (2) Bug #1861695 (keystoneauth:Undecided): Programming error choosing an endpoint. - Opened by Raphaël Droz https://bugs.launchpad.net/keystoneauth/+bug/1861695 Bug #1862035 (keystoneauth:Undecided): Make possible to pass TCP_USER_TIMEOUT in keystoneauth1 session - Opened by Anton Kurbatov https://bugs.launchpad.net/keystoneauth/+bug/1862035 Bugs closed (3) Bug #1756190 (python-keystoneclient:Undecided) https://bugs.launchpad.net/python-keystoneclient/+bug/1756190 Bug #1853839 (python-keystoneclient:Undecided) https://bugs.launchpad.net/python-keystoneclient/+bug/1853839 Bug #1856286 (python-keystoneclient:Undecided) https://bugs.launchpad.net/python-keystoneclient/+bug/1856286 ## Milestone Outlook https://releases.openstack.org/ussuri/schedule.html Next week is spec freeze. One month from now is feature proposal freeze, by which point all code for new features should be proposed and ready for review - no WIPs. This will give us 4 weeks to review. ## Help with this newsletter Help contribute to this newsletter by editing the etherpad: https://etherpad.openstack.org/p/keystone-team-newsletter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

[tripleo] no rechecks
by Chandan kumar 06 Feb '20

06 Feb '20

Hello, TripleO jobs are failing with following bug. upstream tripleo jobs using os_tempest failing with ERROR: No matching distribution found for oslo.db===7.0.0 -> https://bugs.launchpad.net/tripleo/+bug/1862134 Fix is in progress: https://review.opendev.org/#/c/706196/ We need this patch to land before it's safe to blindly recheck. We appreciate your patience while we resolve the issues. Thanks, Chandan Kumar

1 1

[all][PTL][tc] U Community Goal: Project PTL & Contrib Docs Update #1
by Kendall Nelson 06 Feb '20

06 Feb '20

Hello All! At last a dedicated update solely to the Contrib & PTL Docs community goal! Get excited :) At this point the goal has been accepted[1], and the template[2] has been created and merged! So, the next step is for all projects to use the cookiecutter template[2] and fill in the extra details after you generate the .rst that should auto populate some of the information. As you are doing that, please assign yourself the associated tasks in the story I created[3]. If you have any questions or concerns, please let me know! -Kendall Nelson (diablo_rojo) [1] Goal: https://governance.openstack.org/tc/goals/selected/ussuri/project-ptl-and-c… [2] Docs Template: https://opendev.org/openstack/cookiecutter/src/branch/master/%7b%7bcookiecu… [3] Tracking: https://storyboard.openstack.org/#!/story/2007236

2 2

[neutron][ptg] Vancouver attendance and planning
by Slawek Kaplonski 06 Feb '20

06 Feb '20

Hi Neutrinos, As You probably know, Victoria PTG will be in Vancouver in June. I have been asked by organisers how much space and time we will need for Neutron so I started etherpad [1]. Please put there Your name if You are planning to go to Vancouver. Even if it’s not confirmed yet. I need to have number of people before Sunday, March 2nd. Also if You have any ideas about topics which we should discuss there, please write them in this etherpad too. [1] https://etherpad.openstack.org/p/neutron-victoria-ptg — Slawek Kaplonski Senior software engineer Red Hat

1 0

[all][requirements][monasca][gnocchi] ujson, not maintained for over 4 years, has compiler issues
by Radosław Piliszek 06 Feb '20

06 Feb '20

This is a spinoff discussion of [1] to attract more people. As the subject goes, the situation of ujson is bad. Still, monasca and gnocchi (both server and client) seem to be using it which may break depending on compiler. The original issue is that the released version of ujson is in non-spec-conforming C which may break randomly based on used compiler and linker. There has been no release of ujson for more than 4 years. Based on general project activity, Monasca is probably able to fix it but Gnocchi not so surely... [1] http://lists.openstack.org/pipermail/openstack-discuss/2020-January/thread.… -yoctozepto

5 10

[nova][ptg] Vancouver Planning
by Eric Fried 06 Feb '20

06 Feb '20

Nova- I've started an etherpad for the Victoria PTG [1]. I've been asked to let the organizers know how much space and time we're going to need within the next few weeks, so please register your attendance and add any topics you know of as soon as possible. Thanks, efried [1] https://etherpad.openstack.org/p/nova-victoria-ptg

1 0

[nova] Ussuri spec push (and scrub)
by Eric Fried 06 Feb '20

06 Feb '20

Hi all. Ahead of spec freeze next Thursday (Feb 13) we've agreed to do a review day next Tuesday, Feb 11th. If you own a blueprint [1] that isn't already Design:Approved (there are 20 as of this writing) and are still interested in landing it in Ussuri, please make sure your spec is review-ready, and plan to be present in #openstack-nova on Tuesday so we can work through any issues quickly. If you are a nova maintainer, please plan as much time as possible on Tuesday to review open specs [2] and discuss them in IRC. As a reminder, soon after spec freeze I would like to scrub the list of Design:Approved blueprints ("if we're going to do this, here's how") to decide which should be Direction:Approved ("we're going to do this in Ussuri") and which should be deferred. I will send a separate email about this after the milestone. Thanks, efried [1] https://blueprints.launchpad.net/nova/ussuri [2] https://review.opendev.org/#/q/project:openstack/nova-specs+path:%255Especs…

1 0

[tc] February meeting agenda
by Rico Lin 06 Feb '20

06 Feb '20

Hello everyone, Our next meeting is happening this Thursday (the 6th), and the agenda is, as usual, on the wiki! Here is a primer of the agenda for this month: - Report on large scale sig - Report on tc/uc merge - report on the post for the analysis of the survey - Report on the convo Telemetry - Report on multi-arch SIG - report on infra liaison and static hosting - report on stable branch policy work - report on the oslo metrics project - report on the community goals for U and V, py2 drop - report on release naming - report on the ideas repo - report on charter change - Report on whether SIG guidelines worked - volunteers to represent OpenStack at the OpenDev advisory board - Report on the OSF board initiatives - Dropping side projects: using golden signals See you all in meeting:) -- May The Force of OpenStack Be With You, *Rico Lin*irc: ricolin

1 1

[openstack-dev][kuryr] Not working in ARM64 (as Node)
by VeeraReddy 06 Feb '20

06 Feb '20

Hi,I am trying to run kubelet in arm64 platform1. Generated kuryr-cni successfullly. using kur-cni Dockerfile2. Generated kuryr-cni-arm64 container.3. my kube-kuryr-arm64.yml (http://paste.openstack.org/show/789208/) My master node in x86 installed successfully using devstack While running kubelet in arm platform , not able to create kubelet interface (kubelet logs: http://paste.openstack.org/show/789206/) COntroller logs: http://paste.openstack.org/show/789209/ Please help me to fix the issue Veera. Regards, Veera.

2 3

[ops][cinder] Moving volume to new type
by Jonathan Proulx 06 Feb '20

06 Feb '20

Hi All, I'm currently languishing on Mitaka so perhaps further back than help can reach but...if anyone can tell me if this is something dumb I'm doing or a know bug in mitaka that's preventing me for movign volumes from one type to anyother it'd be a big help. In the further past I did a cinder backend migration by creating a new volume type then changing all the existign volume sto the new type. This is how we got from iSCSI to RBD (probably in Grizzly or Havana). Currently I'm starting to move from one RBD pool to an other and seems like this should work in the same way. Both pools and types exist and I can create volumes in either but when I run: openstack volume set --type ssd test-vol it rather silently fails to do anything (CLI returns 0), looking into schedulerlogs I see: # yup 2 "hosts" to check DEBUG cinder.scheduler.base_filter Starting with 2 host(s) get_filtered_objects DEBUG cinder.scheduler.base_filter Filter AvailabilityZoneFilter returned 2 host(s) get_filtered_objects DEBUG cinder.scheduler.filters.capacity_filter Space information for volume creation on host nimbus-1@ssdrbd#ssdrbd (requested / avail): 8/47527.78 host_passes DEBUG cinder.scheduler.base_filter Filter CapacityFilter returned 2 host(s) get_filtered_objects /usr/lib/python2.7/dist-packages/cinder/scheduler/base DEBUG cinder.scheduler.filters.capabilities_filter extra_spec requirement 'ssdrbd' does not match 'rbd' _satisfies_extra_specs /usr/lib/python2.7/dist- DEBUG cinder.scheduler.filters.capabilities_filter host 'nimbus-1@rbd#rbd': free_capacity_gb: 71127.03, pools: None fails resource_type extra_specs req DEBUG cinder.scheduler.base_filter Filter CapabilitiesFilter returned 1 host(s) get_filtered_objects /usr/lib/python2.7/dist-packages/cinder/scheduler/ # after filtering we have one DEBUG cinder.scheduler.filter_scheduler Filtered [host 'nimbus-1@ssdrbd#ssdrbd': free_capacity_gb: 47527.78, pools: None] _get_weighted_candidates # but it fails? ERROR cinder.scheduler.manager Could not find a host for volume 49299c0b-8bcf-4cdb-a0e1-dec055b0e78c with type bc2bc9ad-b0ad-43d2-93db-456d750f194d. successfully creating a volume in ssdrbd is identical to that point, except rather than ERROR on the last line it goes to: # Actually chooses 'nimbus-1@ssdrbd#ssdrbd' as top host DEBUG cinder.scheduler.filter_scheduler Filtered [host 'nimbus-1@ssdrbd#ssdrbd': free_capacity_gb: 47527.8, pools: None] _get_weighted_candidates DEBUG cinder.scheduler.filter_scheduler Choosing nimbus-1@ssdrbd#ssdrbd _choose_top_host # then goes and makes volume DEBUG oslo_messaging._drivers.amqpdriver CAST unique_id: 1b7a9d88402a41f8b889b88a2e2a198d exchange 'openstack' topic 'cinder-volume' _send DEBUG cinder.scheduler.manager Task 'cinder.scheduler.flows.create_volume.ScheduleCreateVolumeTask;volume:create' (e70dcc3f-7d88-4542-abff-f1a1293e90fb) transitioned into state 'SUCCESS' from state 'RUNNING' with result 'None' _task_receiver Anyone recognize this situation? Since I'm retiring the old spinning disks I can also "solve" this on the Ceph side by changing the crush map such that the old rbd pool just picks all ssds. So this isn't critical, but in the transitional period until I have enough SSD capacity to really throw *everything* over, there are some hot spot volumes it would be really nice to move this way. Thanks, -Jon

2 1

[charms] modular deployment
by Florian Rommel 06 Feb '20

06 Feb '20

Hi, we are starting to look into deploying Openstack with Charms ,however there seems to be NO documentation on how to separate ceph osd and mon out of the Openstack-base bundle. We already have a ceph cluster so we would like to reuse that instead of hyperconverging. Is there any way do do this with charms or do we need to look into openstack ansible? Thank you and best regards, //F

2 2

Active-Active Cinder + RBD driver + Co-ordination
by Paul Browne 06 Feb '20

06 Feb '20

Hi list, I had a quick question about Active-Active in cinder-volume and cinder-backup stable/stein and RBD driver, if anyone can help. Using only the Ceph RBD driver for volume backends, is it required to run A-A cinder services with clustering configuration so that they form a cluster? And, if so, is an external coordinator (redis/etcd/Consul) necessary, again only using RBD driver? Best docs I could find on this so far were; https://docs.openstack.org/cinder/latest/contributor/high_availability.html , I support more aimed at devs/contributoers than operators, but it's not 100% clear to me on these questions Thanks, Paul -- ******************* Paul Browne Research Computing Platforms University Information Services Roger Needham Building JJ Thompson Avenue University of Cambridge Cambridge United Kingdom E-Mail: pfb29(a)cam.ac.uk Tel: 0044-1223-746548 *******************

2 1

Re: [queens]cinder][iscsi] issue
by Ignazio Cassano 06 Feb '20

06 Feb '20

Hello , On centos kvm nodes, setting skip_kpartx no in multipath.conf solved the problem and now os_brick can flush maps Ignazio Il giorno lun 3 feb 2020 alle ore 15:13 Ignazio Cassano < ignaziocassano(a)gmail.com> ha scritto: > Hello all we are testing openstack queens cinder driver for Unity iscsi > (driver cinder.volume.drivers.dell_emc.unity.Driver). > > The unity storage is a Unity600 Version 4.5.10.5.001 > > We are facing an issue when we try to detach volume from a virtual machine > with two or more volumes attached (this happens often but not always). > > We also facing the same issue live migrating a virtual machine. > > > Multimaph -f does not work because it returns "map in use" and the volume > is not detached. > > Attached here there hare nova-compute e volume logs in debug mode. > > Could anyone help me ? > > Ignazio > > >

1 0

[kolla] All services stats DOWN after re-launch whole cluster.
by Eddie Yen 06 Feb '20

06 Feb '20

Hi everyone, We have the Kolla Openstack site, which is 3 HCI (Controller+Compute) + 3 Storage (Ceph OSD) site without internet. We did the shutdown few days ago since CNY holidays. Today we re-launch whole cluster back. First we met the issue that MariaDB containers keep restarting, and we fixed by using mariadb_recovery command. After that we check the status of each services, and found that all services shown at Admin > System > System Information are DOWN. Strange is no MariaDB, AMQP connection, or other error found when check the downed service log. We tried reboot each servers but the situation still a same. Then we found the RabbitMQ log not updating, the last log still stayed at the date we shutdown. Logged in to RabbitMQ container and type "rabbitmqctl status" shows connection refused, and tried access its web manager from <VIP>:15672 on browser just gave us "503 Service unavailable" message. Also no port 5672 listening. I searched this issue on the internet but only few information about this. One of solution is delete some files in mnesia folder, another is remove rabbitmq container and its volume then re-deploy. But both are not sure. Does anyone know how to solve it? Many thanks, Eddie.

4 8

[Ironic] [Sushy] [CI] 3rd Party CI
by Rajini.Karthik＠Dell.com 05 Feb '20

05 Feb '20

Announcing Dell 3rd Party Ironic CI is now functional for Openstack/Sushy library. Please take a look at https://review.opendev.org/#/c/705289/ Regards Rajini

1 0

[sahara] Cancelling Sahara meeting February 6
by Jeremy Freudberg 05 Feb '20

05 Feb '20

Hi all, There will be no Sahara meeting 2020-02-06, the principal reason being that I am on PTO. Holler if you need anything. Thanks, Jeremy

1 0

Sponsorship Prospectus is Now Live - OpenDev+PTG Vancouver 2020
by Kendall Waters 05 Feb '20

05 Feb '20

Hi everyone, The sponsorship prospectus <https://object-storage-ca-ymq-1.vexxhost.net/swift/v1/6e4619c416ff4bd19e1c0…> for the upcoming OpenDev + PTG event <https://www.openstack.org/events/opendev-ptg-2020/> happening in Vancouver, BC on June 8-11 is now live! We expect this to be an important event for sponsors, and will have a place for sponsors to have a physical presence (embedded in the event rather in a separate sponsors hall), as well as branding throughout the event and the option for a keynote in the morning for headline sponsors. OpenDev + PTG is a collaborative event organized by the OpenStack Foundation (OSF) gathering developers, system architects, and operators to address common open source infrastructure challenges. OpenDev will take place June 8-10 and the PTG will take place June 8-11. Each day will be broken into three parts: Short kickoff with all attendees to set the goals for the day or discuss the outcomes of the previous day. Think of this like a mini-keynote, challenging your thoughts around the topic areas before you head into real collaborative sessions. OpenDev: Morning discussions covering projects like Airship, Ansible, Ceph, Kata Containers, Kubernetes, OpenStack, StarlingX, Zuul and more centered around one of four different topics: Hardware Automation Large-scale Usage of Open Source Infrastructure Software Containers in Production Key challenges for open source in 2020 PTG: Afternoon working sessions for project teams and SIGs to continue the morning’s discussions. The sponsorship contract will be available to sign starting tomorrow, February 5 at 9:30am PST at https://www.openstack.org/events/opendev-ptg-2020/sponsors <https://www.openstack.org/events/opendev-ptg-2020/sponsors>. Please let me know if you have any questions. Cheers, Kendall Kendall Waters Perez OpenStack Marketing & Events kendall(a)openstack.org

1 1

Help Shape the Track Content for OpenDev + PTG, June 8-11 in Vancouver
by Ashlee Ferguson 05 Feb '20

05 Feb '20

Hi everyone, Hopefully by now you’ve heard about our upcoming event, OpenDev + PTG Vancouver, June 8-11, 2020 <https://opendevptg2020.eventbrite.com/>. We need your help shaping this event! Our vision is for the content to be programmed by you-- the community. OSF is looking to kick things off by selecting members for OpenDev Programming Committees for each Track. That Program Committee will then select Moderators who will lead interactive discussions on a particular topic within the track. Below you'll have the opportunity to nominate yourself for a position on the Programming Committee, as a Moderator, or both, as well as suggesting specific Topics within each Track. PTG programming will kick off in the coming weeks. If you’re interested in volunteering as an OpenDev Programming Committee member, discussion Moderator, or would like to suggest topics for moderated discussions within a particular Track, please read the details below, and then fill out this form <https://openstackfoundation.formstack.com/forms/opendev_vancouver2020_volun…>. We’re looking for subject matter experts on the following OpenDev Tracks: - Hardware Automation (accelerators, provisioning hardware, networking) - Large-scale Usage of Open Source Infrastructure Software (scale pain points, multi-location, CI/CD) - Containers in Production (isolation, virtualization, telecom containers) - Key Challenges for Open Source in 2020 (beyond licensing, public clouds, ethics) OpenDev Programming Committee members will: Work with other Committee members, which will include OSF representatives, to curate OpenDev content based on subject expertise, community input, and relevance to open source infrastructure Promote the individual Tracks within your networks Review community input and suggestions for Track discussions Solicit moderators from your network if you know someone who is a subject matter expert Ensure diversity of speakers and companies represented in your Track Focus topics around on real-world user stories and technical, in-the-trenches experiences Programming Committee members need to be available during the following dates/time commitments: 8 - 10 hours from February - May for bi-weekly calls with your Track's Programming Committee (plus a couple of OSF representatives to facilitate the call) OpenDev, June 8 - 10, 2020 (not required, but preferred) Programming Committee members will receive a complimentary pass to the event Programming Committees will be comprised of a few people per Track who will work to select a handful of topics and moderators for each Track. The exact topic counts will be determined before Committees begin deciding. OpenDev Discussion Moderators will Be appointed by the Programming Committees Facilitate discussions within a particular Track Have adequate knowledge and experience to lead and moderate discussion around certain topics during the event Work with Programming Committee to decide focal point of discussion Moderators need to be available to attend OpenDev, June 8 - 10, 2020, and will receive a complimentary pass. Programming Committee nominations are open until February 11. Deadlines to volunteer to be a moderator and suggest topics will be in late February. Nominate yourself or suggest discussion topics here: https://openstackfoundation.formstack.com/forms/opendev_vancouver2020_volun… <https://openstackfoundation.formstack.com/forms/opendev_vancouver2020_volun…> Cheers, The OpenStack Foundation

1 1

[tripleo] py27 tests are being removed
by Wesley Hayutin 05 Feb '20

05 Feb '20

Greetings, Just in case you didn't see or hear about it. TripleO is removing all the py27 tox tests [1]. See the bug for details why. We really need to get CentOS-8 jobs in place ASAP for ussuri and train, that will continue to be the upstream CI teams focus until it's done. Thank you [1] https://review.opendev.org/#/q/topic:1861803+(status:open+OR+status:merged)

3 2

[cinder] anyone using Software Factory for third-party CI?
by 野村和正 / NOMURA，KAZUMASA 05 Feb '20

05 Feb '20

Hi everyone, I work in Hitachi, Ltd as cinder driver development member. I am trying to build cinder third-party CI by using Software Factory. Is there anyone already used Software Factory for cinder third-party CI? If you have already built it, I want to get you to give me the information how to build it. If you are trying to build it, I want to share settings and procedures for building it and cooperate with anyone trying to build it. Please contact me if you are trying to build third-party CI by using Software Factory. Thanks, Kazumasa Nomura E-mail: kazumasa.nomura.rx(a)hitachi.com

4 6

[magnum] Help / Pointers on mirroring https://opendev.org/starlingx in github.com for CNCF certification of starlingx
by Waines, Greg 04 Feb '20

04 Feb '20

Hello, I am working in the OpenStack StarlingX team. We are working on getting StarlingX certified through the CNCF conformance program, https://www.cncf.io/certification/software-conformance/ . ( in the same way that you guys, OpenStack Magnum project, got certified with CNCF ) As you know, in order for the logo to be shown as based on open-source, CNCF requires that the code be mirrored on github.com . e.g. https://github.com/openstack/magnum The openstack foundation guys did provide some info on how to do this: The further steps for the project owner to take: * create a dedicated account for zuul * create the individual empty repos * add a job to each repo to do the mirroring, like: * https://opendev.org/airship/deckhand/src/commit/51dcea4fa12b0bcce65c381c286… Also, you can find documentation for the parent job here: https://zuul-ci.org/docs/zuul-jobs/general-jobs.html#job-upload-git-mirror ... maybe it’s cause I don’t know anything about zuul jobs, but these instructions are not super clear to me. Is the person who did this for magnum available to provide some more detailed instructions or help on doing this ? Let me know ... any help is much appreciated, Greg.

3 2

Problem with juju osd deploy
by Alain Vivó 04 Feb '20

04 Feb '20

I tried to deploy ceph-osd with juju for the openstack installation in this guide https://docs.openstack.org/project-deploy-guide/charm-deployment-guide/rock… but, when i depoy ceph-osd and ceph-mon, osd not acquire sdv disk, my 4 nodes have a sdb with 2 TB, but vm not add this storage. And another question, osd should not be installed on the host?

2 1

[manila] Manila Drivers and CI Status
by Douglas 04 Feb '20

04 Feb '20

Hi all, In the past months we have been analyzing drivers that are not reporting any status on patches submitted to the master branch of the openstack/manila repository [1]. We would like to request to driver maintainers to pay attention on the following warnings: 1. CI's that are not running and qualifying changes on master branch will be marked as `Not Qualified` on Manila's wiki page [2]. This annotation should help clarify to deployers/operators what drivers have been tested. A link to this will be created within Manila's administrator and user documentation [3]. 2. Python runtimes for Train and Ussuri cycles have been published by the OpenStack TC and we expect vendor CIs to adhere to these [4][5]. That said, no CIs should be running master (Ussuri) with python < 3.6. 3. If your CI system, and recheck trigger are missing from the Third Party CI wiki page [6], please add it. As has been the norm, no vendor driver changes will be allowed to merge without Third Party CI assuring us that the change has been tested for regressions. If you have any questions/concerns regarding CI and testing your drivers, please reach out to us here (openstack-discuss(a)lists.openstack.org) or on #openstack-manila [1] https://docs.google.com/spreadsheets/d/1dBSCqtQKoyFMX6oWTahhP9Z133NRFW3ynez… [2] https://wiki.openstack.org/wiki/Manila [3] https://docs.openstack.org/manila/latest/index.html [4] https://governance.openstack.org/tc/reference/runtimes/train.html [5] https://governance.openstack.org/tc/reference/runtimes/ussuri.html [6] https://wiki.openstack.org/wiki/ThirdPartySystems Thanks! Douglas Viroel (dviroel)

1 0

Re: Migration to Openstack from Proxmox
by Erik McCormick 04 Feb '20

04 Feb '20

+list again :) On Tue, Feb 4, 2020, 8:46 AM <jmacer(a)42iso.com> wrote: > Thanks for the reply. > > So if I understand you, swift is not an acceptable storage solution to > couple with OpenStack? I also think that I missed something in your first > paragraph "whereas you may be used concept being native in Proxmox." Are > you talking about how Proxmox has the local storage on the server AND the > NFS storage? > Swift is an Openstack project so sure it's good to use with Openstack or even on it's own. It is Object Storage (like AWS S3). If you want volumes you'll want some other system like Ceph, some NFS server, etc. Proxmox is capable of deploying Ceph and that's what I was referring to. > All of our VM's are the standard VM. We do have a few "templates" but > those are not really anything special. I do have quite a few images > pre-built, so that is my biggest concern with a migration. > You can easily import those images into Glance (Openstack image service);and then launch instances using them. > I know, just from looking at the docs/videos out there that OpenStack is > definitely more akin to AWS than it is ProxMox, but would you say it is > worth it from a manage a multi-location hardware environment to switch to > OpenStack from proxmox? > This is mainly a matter of your use case. Openstack is complex; more complex than Proxmox by quite a bit. It is also extremely powerful and has many projects to provide lots of cloudy services. Many of those services are analogous to ones found in AWS and other public clouds. It is well suited to orchestrate large numbers of instances, volumes, networks, etc. across many hypervisors, Proxmox, as far as I recall, is more of a straight virtualization platform. I also recall it being fairly simple and reliable. If it meets your needs, don't complicate your life. You may want to sign up for a trial at an Openstack-based public cloud provider to get familiar with the functionality before committing to building your own. You can find a list here: https://www.openstack.org/passport/ Cheers, Erik Thanks! > > > Jason > > -------- Original Message -------- > Subject: Re: Migration to Openstack from Proxmox > Date: 2020-02-04 07:33 > From: Erik McCormick <emccormick(a)cirrusseven.com> > To: jmacer(a)42iso.com > > > > > On Mon, Feb 3, 2020, 3:28 PM <jmacer(a)42iso.com> wrote: > > We currently are using proxmox for a envrionment management, and while we > were looking at DFS options we came across openstack, and we've decided to > start looking at it as a replacement for proxmox. Has anyone made this > migration before? > > > Keep on mind that you're still going to need a storage system like Ceph > separate from Openstack whereas you may be used concept being native in > Proxmox. > > Besides that, migration is pretty straightforward. I assume you're already > running on KVM, so you should be able to snapshot and import your current > instances, volumes, etc. > > > > Currently we're running a few Windows Server 12/16/19 virtual machines, > but mostly centOS7 virtual machines, however what we are developing are > micro-services that ideally would be deployed using k8s. > > Openstack and k8s are great together. Check out the Openstack Magnum > project, cloudprovider-openstack, and if you're trying to so multiattach > persistent volumes, Manila. > > > Does anyone have any experience migrating between the two, or any other > recommendation when considering openstack? > > Follow one of the install guides on docs.openstack.org to do a manual > install so you get familiar with all the bits and bobs under the hood. > After that, pick a deployment project to create your production cluster. > Kolla-ansible, Openstack-ansible, Triple-O, and Juju are some popular ones. > > Cheers, > Erik > > > > >

1 0

[goals][Drop Python 2.7 Support] Week R-15 2nd Update (# 2 weeks left to complete)
by Ghanshyam Mann 04 Feb '20

04 Feb '20

Hello Everyone, Below is the progress on "Drop Python 2.7 Support" at end of R-15 week. Schedule: https://governance.openstack.org/tc/goals/selected/ussuri/drop-py27.html#sc… Highlights: ======== * 2 weeks left to finish the work. * QA tooling: ** Tempest is dropping py3.5[1]. Tempest plugins can drop py3.5 now if they still support it. ** Updating tox with basepython python3 [2]. ** Pining stable/rocky testing with 23.0.0[3]. ** Updating neutron-tempest-plugins rocky jobs to run with py3 on master and py2 on stable/rocky gate. ** Ironic-tempest-plugin jobs are failing on uploading image on glance. Debugging in progress. * zipp failure fix on py3.5 job is merged. * 5 services listed below still not merged the patches, I request PTLs to review it on priority. Project wise status and need reviews: ============================ Phase-1 status: The OpenStack services have not merged the py2 drop patches: NOTE: This was supposed to be completed by milestone-1 (Dec 13th, 19). * Adjutant * ec2-api * Karbor * Masakari * Qinling * Tricircle Phase-2 status: This is ongoing work and I think most of the repo have patches up to review. Try to review them on priority. If any query and I missed to respond on review, feel free to ping me in irc. * Most of the tempest plugins and python client patches are good to merge. * Open review: https://review.opendev.org/#/q/topic:drop-py27-support+status:open How you can help: ============== - Review the patches. Push the patches if I missed any repo. [1] https://review.opendev.org/#/c/704840/ [2] https://review.opendev.org/#/c/704688/ [3] https://review.opendev.org/#/c/705098/ -gmann

1 1

Migration to Openstack from Proxmox
by jmacer＠42iso.com 04 Feb '20

04 Feb '20

We currently are using proxmox for a envrionment management, and while we were looking at DFS options we came across openstack, and we've decided to start looking at it as a replacement for proxmox. Has anyone made this migration before? Currently we're running a few Windows Server 12/16/19 virtual machines, but mostly centOS7 virtual machines, however what we are developing are micro-services that ideally would be deployed using k8s. Does anyone have any experience migrating between the two, or any other recommendation when considering openstack?

2 1