July 2020 - openstack-discuss - lists.openstack.org

[neutron] Cancelling Monday July 20th weekly team IRC meeting
by Miguel Lavalle 20 Jul '20

20 Jul '20

Dear Neutrinos, I have an agenda conflict so I won't be able to run the weekly team IRC meeting. Let's skip for this week Best regards Miguel

1 0

[qa][dev][all] Gate issues with devstack glance standalone w/o tls-proxy
by Radosław Piliszek 20 Jul '20

20 Jul '20

Morning, Folks! It seems the devstack glance standalone mode (the new default) is broken at the moment if not using tls-proxy. If your jobs break on g-api not coming up, then this is the likely case. So far it seems to have hit Neutron and Nodepool jobs (and hence also SDK and DIB for example). Please refrain from rechecking until solved. -yoctozepto

3 3

[ironic] Cancelling meeting for this week
by Julia Kreger 20 Jul '20

20 Jul '20

Greetings everyone, Sorry for the late notice, but we have OpenDev[0] today which overlaps with our weekly meeting. Since the topic of OpenDev this week is on Hardware Automation, I anticipate most of us will be joining OpenDev this morning gathering new requirements and driving the discussion forward. Thanks everyone! Again, sorry for the late notice. -Julia -- [0] https://www.openstack.org/events/opendev-2020/opendev-schedule-2

1 0

RabbitMQ consumer connection is refused when trying to read notifications
by Anil Jangam 20 Jul '20

20 Jul '20

Hi, I followed the video and the steps provided in this video link and the consumer connection is being refused. https://www.openstack.org/videos/summits/denver-2019/nova-versioned-notific… /etc/nova/nova.conf file changes.. [notifications] notify_on_state_change=vm_state default_level=INFO notification_format=both [oslo_messaging_notifications] driver=messagingv2 transport_url=rabbit://guest:guest@10.30.8.57:5672/ topics=notification retry=-1 The python consume code is as follows (followed the example provided in the video: transport = oslo_messaging.get_notification_transport( cfg.CONF, url='rabbit://guest:guest@10.30.8.57:5672/') targets = [ oslo_messaging.Target(topic='versioned_notifications'), ] Am I missing any other configuration in any of the services in OpenStack? Let me know if you need any other info. /anil.

2 2

[stein][watcher] Running watcher with sample Audit templates
by Sanjay K 19 Jul '20

19 Jul '20

Hello Watcher-dev, Would you please give any pointers on how to run watcher successfully based on my query posted at - ask.openstack.org <https://ask.openstack.org/en/question/128530/running-watcher-audit-template…> If the metric cpu_util is deprecated in the past, how are these sample templates given in the Watcher Stein release going to work? Whether I have to do anything to replace these kinds of deprecated metrics in watcher? Thank you for your help and support. Best regards, Sanjay

1 0

[neutron] Bug deputy report for week of July 13th
by Lajos Katona 19 Jul '20

19 Jul '20

Hi, I was Neutron bug deputy last week. A short summary of the reported bugs: - High bugs - https://bugs.launchpad.net/neutron/+bug/1887815 Neutron API - problem parsing semi-colon in Accept header - In Progress / Assigned - https://bugs.launchpad.net/neutron/+bug/1887992 [neutron-tempest-plugin] glance service failing during the installation - Fixed in Devstack - Medium bugs - https://bugs.launchpad.net/neutron/+bug/1887523 Deadlock detection code can be stale - In Progress (use oslo.b deadlock handling) => https://review.opendev.org/740977 - https://bugs.launchpad.net/neutron/+bug/1887281 [linuxbridge] ebtables delete arp protect chain fails - In Progress / Assigned => https://review.opendev.org/740588 - https://bugs.launchpad.net/neutron/+bug/1887405 Race condition while processing security_groups_member_updated events (ipset) - Unassigned - Low bugs - https://bugs.launchpad.net/neutron/+bug/1887778 neutron-ovn-migration-mtu does not support specifying project/user domain name - Assigned / In Progress => https://review.opendev.org/741410 - https://bugs.launchpad.net/neutron/+bug/1887781 neutron-ovn-migration-mtu does not adjust mtu on gre-networks - Assigned / In Progress => https://review.opendev.org/741414 - https://bugs.launchpad.net/neutron/+bug/1887385 String to byte conversion should provide the encoding type - Assigned / In progress => https://review.opendev.org/740693 - RFE - https://bugs.launchpad.net/neutron/+bug/1887497 Cleanup stale flows by cookie and table_id instead of just by cookie Only 1 is that still unassigned and some more checks are needed: https://bugs.launchpad.net/neutron/+bug/1887405 Lajos (lajoskatona)

1 0

[Zaqar][Project-Update]Encrypted Messages in Queue is coming !
by hao wang 19 Jul '20

19 Jul '20

Hi, stackers, In Victoria, the queue in Zaqar will support to encrypt messages before storing them into storage backends, also could support to decrypt (or not) messages when those are claimed by consumer. This feature will enhance the security of the messaging service. As you may know, currently, Zaqar can't encrypt any messages and just store those messages into storage backends. That'll bring some security issues like information leakage or hacker attack. So depending on this feature, we have a basic mechanism to protect user's data from those security threats. Now we will support the encryption algorithm AES-256 at first, we consider bringing more capacities in the future like supporting RSA and letting users chose what they want to use. Finding more details in [1] and now the code patch is ready for reviewing [2]. Welcome to anyone who's interested in this new feature! [1]https://review.opendev.org/#/c/731102/4 [2]https://review.opendev.org/#/c/738736/

1 0

Re: Floating IP's for routed networks
by Thomas Goirand 18 Jul '20

18 Jul '20

Hi Ryan, If you don't mind, I'm adding the openstack-discuss list in the loop, as this topic may be of interest to others. For mailing list readers, I'm trying to implement this: https://review.opendev.org/#/c/669395/ but I'm having some difficulties. I did a bit of investigation with some added LOG.info() in the code. When doing: > openstack subnet create vm-fip \ > --subnet-range 10.66.20.0/24 \ > --service-type 'network:routed' \ > --service-type 'network:floatingip' \ > --network multisegment1 Here's where neutron-api crashes. in db/ipam_backend_mixin.py: def _validate_segment(self, context, network_id, segment_id, action=None, old_segment_id=None): # TODO(tidwellr) Create and use a constant for the service type segments = subnet_obj.Subnet.get_subnet_segment_ids( context, network_id, filtered_service_type='network:routed') associated_segments = set(segments) if None in associated_segments and len(associated_segments) > 1: raise segment_exc.SubnetsNotAllAssociatedWithSegments( network_id=network_id) SubnetsNotAllAssociatedWithSegments() is raised, as you must already guessed. Here's the values... associated_segments is an array containing 3 values: 2 being the IDs of the segments I added previously, the 3rd one being None. This test is then matched. Where is that None value coming from? Is this the new subnet I'm trying to add? Maybe the filtered_service_type='network:routed' in the call: subnet_obj.Subnet.get_subnet_segment_ids() isn't working as expected? Printing the SQL query that is checked shows: SELECT subnets.segment_id AS subnets_segment_id FROM subnets WHERE subnets.network_id = %(network_id_1)s AND subnets.id NOT IN (SELECT subnet_service_types.subnet_id AS subnet_service_types_subnet_id FROM subnet_service_types WHERE subnets.network_id = %(network_id_2)s AND subnet_service_types.subnet_id = subnets.id AND subnet_service_types.service_type = %(service_type_1)s) though when doing by hand: SELECT subnets.segment_id AS subnets_segment_id FROM subnets the db has only 2 subnets, so it looks like the floating-ip subnet got added before the check, and is then removed when the above test fails. So I just removed the raise, and could add the subnet I wanted, but that's obviously not a long term solution. Your thoughts? Another problem that I'm having, is that neutron-bgp-dragent is not receiving (or processing) the messages from neutron-rpc-server. I've enabled DEBUG mode for oslo_messaging, and found out that when dr-agent starts and prints "Agent has just been revived. Scheduling full sync", it does send a message to neutron-rpc-server, which is replied, but it doesn't look like dr-agent processes the return message in its reply queue, and then prints in the logs: "imeout in RPC method get_bgp_speakers. Waiting for 17 seconds before next attempt. If the server is not down, consider increasing the rpc_response_timeout option as Neutron server(s) may be overloaded and unable to respond quickly enough.: oslo_messaging.exceptions.MessagingTimeout: Timed out waiting for a reply to message ID c1b401c9e10d481bb5e071f2c048e480". What is weird is that a few times (rarely), it worked, and the agent gets the reply. What should I do to investigate further? Cheers, Thomas Goirand (zigo)

3 4

SDK API to get the version of openstack distribution
by Anil Jangam 17 Jul '20

17 Jul '20

Hi, I am able to iterate through the list of hypervisors and servers as follows. for hypervisor in self.connection.list_hypervisors(): for server in self.connection.compute.servers(): However, I could not find an API that returns the version of the OpenStack i.e. whether it is Stein, Train, or Ussuri. Openstack CLI client has command: openstack versions show Thanks, /anil.

1 0

[octavia] Proposal to deprecate the amphora spares pool
by Michael Johnson 17 Jul '20

17 Jul '20

Back at the Victoria PTG the Octavia team discussed deprecating the spares pool capability of the amphora driver[1]. This would follow the standard OpenStack deprecation process[2]. There are a number of reasons this was proposed: 1. It adds a lot of complexity to the code. 2. It can't be used with Active/Standby load balancers due to server group (anti-affinity) limitations in Nova. 3. It provides only 15-30 seconds of speedup when provisioning a new load balancer on production clouds. 4. It makes supporting Octavia availability zones awkward as we have to boot spares instances in each AZ. 5. It can be confusing for people when it is enabled as there are always extra amphora running and being automatically recreated. Due to these reasons a patch has been proposed to deprecate spares pool support in the amphora driver: https://review.opendev.org/741686 Please comment on that patch and/or join the weekly Octavia IRC meeting if you have any concerns with this deprecation plan. Michael [1] https://etherpad.opendev.org/p/octavia-virtual-V-ptg [2] https://governance.openstack.org/tc/reference/tags/assert_follows-standard-…

1 0