May 2020 - openstack-discuss - lists.openstack.org

[Neutron] How to change the MAC address of Gateway interface of the router
by Rahul Sharma 20 May '20

20 May '20

Hi, I have setup a multi-host openstack cloud on AWS consisting of 3 servers i.e. Controller, Compute & Network Everything is working as expected. My requirement is that the compute instances should be able to communicate with the internet and vice-versa. However, AWS due to its security policies will drop all traffic that is sourced from the VMs because the VM traffic will have the MAC address of the gateway interface of the router when it hits the AWS switch. This MAC address is not know to AWS hence it drops this traffic. AWS will allow only that traffic that contains the registered MAC address as its source address So I need to change the MAC address of the gateway interface of the L3 router on the network node. I tried googling but could not find any solution. Is there any solution/command to do this ? Thanks, Kaushik

2 2

[largescale-sig] Next meeting: May 20, 8utc
by Thierry Carrez 20 May '20

20 May '20

Hi everyone, The Large Scale SIG will have a meeting this week on Wednesday, May 20 at 8 UTC[1] in the #openstack-meeting-3 channel on IRC: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20200520T08 Feel free to add topics to our agenda at: https://etherpad.openstack.org/p/large-scale-sig-meeting A reminder of the TODOs we had from last meeting, in case you have time to make progress on them: - amorin to propose patch against Nova doc - ttx to create an empty oslo-metric repository - masahito to finalize oslo.metric POC code release Talk to you all on Wednesday, -- Thierry Carrez

1 1

[operators] multi release upgrades?
by Fabian Zimmermann 20 May '20

20 May '20

Hi, Does anybody did already some multi release upgrades f.e. queens->train and is able to share his knowhow? Thanks, Fabian

3 2

Re: [Cyborg][PTG]Virtual PTG Planning
by yumeng bao 19 May '20

19 May '20

Hi team, I have booked the following slots for Cyborg Virtual PTG [1] based on the doodle poll results. * June 2 Tuesday 6:00 UTC - 8:00 UTC, Room Cactus * June 3 Wednesday 6:00 UTC - 8:00 UTC,Room Cactus * June 4 Thursday 6:00 UTC - 8:00 UTC,Room Cactus *June 5 Friday 6:00 UTC - 8:00 UTC,Room Bexar Moreover, I have synced with Slaweq and gibi, and we agreed to have a Nova-Neutron-Cyborg cross project discussion on Friday from 14:00 UTC to 15:00 UTC in Room Juno (Thanks to Nova for sharing this time slot!) There are two weeks to go before the virtual PTG. So I would like to encourage you to LOOK AT the etherpad[2] and ADD YOUR NAME to the Attendance section if you are planning to attend! If you have topics for the PTG, please try to start discussing them now either in the etherpad[2] or in a spec or just on the ML. (Such preparation is especially necessary for those cross project topics to get agreements/directions internally first, we have very limited time to conclude the topics during the PTG.) Let’s continue discussing this at tomorrow’s weekly meeting. [1] https://ethercalc.openstack.org/126u8ek25noy [2] https://etherpad.opendev.org/p/cyborg-victoria-goals Regards， Yumeng

1 0

[tripleo][ci] remove upstream multinode scenario jobs (queens, rocky)
by Wesley Hayutin 19 May '20

19 May '20

Greetings, I'd like to propose that we start removing multinode ( 2 node ) based scenario jobs from the upstream that still exist in queens and rocky. We will continue to support a basic multinode deployment [1 ] across all the branches. From stable/stein on we only maintain one multinode job, and the scenarios have all been migrated to single node deployments. The loss of coverage will be augmented by the RDO promotion pipeline [2] that should be verifying all the upstream check/gate jobs across the branches. Issues will be caught periodically vs. on a per patch basis. Issues will be reported, debugged and sent to the appropriate teams. I am not proposing we do this overnight or in one giant patch, but over time start to remove the upstream coverage. We also need to ensure that the upstream version is properly covered in RDO software factory. WHY??? Two node deployments in upstream infrastructure are very unreliable and often timeout. Generally devolving into noise and wasted resources and time spent by developers trying to land patches [3]. Comments / Questions?? [1] tripleo-ci-centos-[7,8]-containers-multinode [2] https://review.rdoproject.org/zuul/builds?pipeline=openstack-periodic-wedne… [3] https://bugs.launchpad.net/tripleo/+bug/1879565

1 0

Virtual PTG Schedule Live & Registration Reminder
by Kendall Waters 19 May '20

19 May '20

Hey everyone, The June 2020 Project Teams Gathering is right around the corner! The official schedule has now been posted on the PTG website [1], the PTGbot has been updated[2], and we have also attached it to this email. Friendly reminder, if you have not already registered, please do so [3]. It is important that we get everyone to register for the event as this is how we will contact you about tooling information and other event details. Please let us know if you have any questions. Cheers, The Kendalls (diablo_rojo & wendallkaters) [1] www.openstack.org/ptg <http://www.openstack.org/ptg> [2] http://ptg.openstack.org/ptg.html <http://ptg.openstack.org/ptg.html> [3] https://virtualptgjune2020.eventbrite.com <https://virtualptgjune2020.eventbrite.com/>

1 0

[ironic] trusted delgation cores?
by Julia Kreger 19 May '20

19 May '20

Greetings awesome people and AIs! Earlier today, I noticed Iury (iurygregory) only had +1 rights on the ironic-prometheus-exporter. I noted this in IRC and went to go see about adding him to the group, and realized we didn't have a separate group already defined for ironic-prometheus-exporter, which left a question, do we create a new group, or just grant ironic-core membership. And the question of starting to engage in trusted delegation of core rights came up in IRC[0]. I think it makes a lot of sense, but wanted to see what everyone thought? Specifically in Iury's case: I feel he has proven himself, in ironic and non-ironic cases, and I think it makes sense to grant him core rights under the premise that he is unlikely to approve non-trivial changes to merge that he is not confident in. Thoughts, concerns, congratulations? For both questions? -Julia [0]: http://eavesdrop.openstack.org/irclogs/%23openstack-ironic/%23openstack-iro…

6 5

[tripleo][ptg] schedule posted
by Wesley Hayutin 19 May '20

19 May '20

Greetings owls, Victoria Schedule has been posted [1]. There are a lot of great topics so we're going to limit the time slots to 1/2 hour each. Creating a blueprint and spec for your topic prior to the PTG will help you make your point and win the game of influence [2]. Please feel free to self sign up on the schedule, I will cross check any unassigned topics prior to the event and punt them to the last day. For now we're going to close adding new topics to fit the schedule. There is spare time on the calendar for Q&A and random ad hoc topics [3] if needed. To prepare for your presentations please ensure you are comfortable w/ the video conferencing [4] as much as possible. Looking forward to seeing you all Thanks!! [1] https://etherpad.opendev.org/p/tripleo-ptg-victoria [2] https://review.opendev.org/#/q/project:openstack/tripleo-specs+status:open https://blueprints.launchpad.net/tripleo [3] https://ethercalc.openstack.org/126u8ek25noy [4] https://meetpad.opendev.org/

1 0

[keystone] scope enforcement ready for prime time?
by Mark Goddard 19 May '20

19 May '20

Hi, I have a use case which I think could be fulfilled by scoped tokens: Allow an operator to delegate the ability to an actor to create users within a domain, without giving them the keys to the cloud. To do this, I understand I can assign a user the admin role for a domain. It seems that for this to work, I need to set [oslo_policy] enforce_scope = True in keystone.conf. The Train cycle highlights suggest this is now fully implemented in keystone, but other most projects lack support for scopes. Does this mean that in the above case, the user would have full cloud admin privileges in other services that lack support for scopes? i.e. while I expect it's safe to enable scope enforcement in keystone, is it "safe" to use it? Cheers, Mark

3 3

[Watcher]IRC meeting on May 20
by licanwei 19 May '20

19 May '20

Hi, Tomorrow at 08:00 UTC on #openstack-meeting-alt. pls update the meeting agenda if you have something want to be discussed. thanks, | | licanwei_cn | | 邮箱：licanwei_cn(a)163.com | 签名由网易邮箱大师定制

1 0