August 2020 - openstack-discuss - lists.openstack.org

[monasca] Deprecate monasca-transform repository
by Witek Bedyk 25 Aug '20

25 Aug '20

Hello, this message is to announce the deprecation of openstack/monasca-transform repository. The project will not accept new development on master branch but accept fixes on stable branches. It will follow the process described in Project Team Guide [1]. Please reply to this message until Sept. 7 if you would like to take over the development and maintenance of this repository. Thanks Witek [1] https://docs.openstack.org/project-team-guide/repository.html#deprecating-a…

1 0

Openstack with Nginx Support
by HARISH KUMAR Ivaturi 25 Aug '20

25 Aug '20

Hi I am Harish Kumar, Master Student at BTH, Karlskrona, Sweden. I am working on my Master thesis at BTH and my thesis topic is Performance evaluation of OpenStack with HTTP/3. I have successfully built curl and nginx with HTTP/3 support and I am performing some commands using curl for generating tokens so i could access the services of OpenStack. OpenStack relies with the Apache web server and I could not get any results using Nginx HTTP/3 . I would like to ask if there is any official documentation on OpenStack relying with Nginx?, I have searched in the internet reg. this info but could not get any, I would like to use nginx instead of apache web server , so I could get some results by performing curl and commands and nginx web server (with http/3 support). Please let me know and if there is any content please share with me. I hope you have understood this. It would be helpful for my Master Thesis. BR Harish Kumar

1 0

[ironic] RFC: deprecate the iSCSI deploy interface?
by Dmitry Tantsur 25 Aug '20

25 Aug '20

Hi all, Side note for those lacking context: this proposal concerns deprecating one of the ironic deploy interfaces detailed in https://docs.openstack.org/ironic/latest/admin/interfaces/deploy.html. It does not affect the boot-from-iSCSI feature. I would like to propose deprecating and removing the 'iscsi' deploy interface over the course of the next 2 cycles. The reasons are: 1) The iSCSI deploy is a source of occasional cryptic bugs when a target cannot be discovered or mounted properly. 2) Its security is questionable: I don't think we even use authentication. 3) Operators confusion: right now we default to the iSCSI deploy but pretty much direct everyone who cares about scalability or security to the 'direct' deploy. 4) Cost of maintenance: our feature set is growing, our team - not so much. iscsi_deploy.py is 800 lines of code that can be removed, and some dependencies that can be dropped as well. As far as I can remember, we've kept the iSCSI deploy for two reasons: 1) The direct deploy used to require Glance with Swift backend. The recently added [agent]image_download_source option allows caching and serving images via the ironic's HTTP server, eliminating this problem. I guess we'll have to switch to 'http' by default for this option to keep the out-of-box experience. 2) Memory footprint of the direct deploy. With the raw images streaming we no longer have to cache the downloaded images in the agent memory, removing this problem as well (I'm not even sure how much of a problem it is in 2020, even my phone has 4GiB of RAM). If this proposal is accepted, I suggest to execute it as follows: Victoria release: 1) Put an early deprecation warning in the release notes. 2) Announce the future change of the default value for [agent]image_download_source. W release: 3) Change [agent]image_download_source to 'http' by default. 4) Remove iscsi from the default enabled_deploy_interfaces and move it to the back of the supported list (effectively making direct deploy the default). X release: 5) Remove the iscsi deploy code from both ironic and IPA. Thoughts, opinions, suggestions? Dmitry

6 11

[cliff] [dev] Cliff auto completion not working inside interactive mode
by sandeep 25 Aug '20

25 Aug '20

Hi Team, In my system, I am trying auto completion for my CLI application. CLIFF version - cliff==3.4.0 Auto complete works fine on bash prompt. But inside the interactive shell, auto complete does not work. Below is the output for the help command inside the interactive shell. (appcli) help Miscellaneous help topics: ========================== help Application commands (type help <topic>): ========================================= complete snapshot list reports service restart service-object-type app2 service restart service-object-type app3 service restart service-object-type app4 service show state service-object-type app1 service show state service-object-type app2 service show state service-object-type app3 service show state service-object-type app4 swm rollback node swm cancel sw-update swm downgrade node swm list sw-info swm show sw-info swm start sw-update file swm start sw-downgrade help Now, if I type swm and press tab, it lists all the sub commands under it. (appcli) swm cancel sw-update list sw-info start sw-update file downgrade node rollback node show sw-info start sw-downgrade But if i type, (appcli) swm s<tab> gives below output, (appcli) swm "s It stops at this point and further pressing tab does not autocomplete. Could you please let me know what could be the problem? Is this a known issue? or Am i missing something? Thanks, Sandeep

1 0

Scaling control nodes
by Benjamin Zapiec 25 Aug '20

25 Aug '20

Hello everyone, while trying openstack i referred to the red hat installation documentation which is okay but lead to one question. It looks like there is no problem in scaling compute nodes if you run out of resources. But scaling the controller nodes is not supported by red hat. Since I'm using the official tripleo openstack version and not the red hat version i was wondering if this is not supported by the openstack project. Having in mind that red hat doesn't support this i was looking for something that tells me that it is supported (or not) by the tripleo openstack project. But i didn't found anything explicit. So may you tell me if it is possible to scale up Controller Nodes? And if not which component is not scalable by tripleo? Is it possible to create an controller profile that is scalable? Best regards -- Benjamin Zapiec <benjamin.zapiec(a)gonicus.de> (System Engineer) * GONICUS GmbH * Moehnestrasse 55 (Kaiserhaus) * D-59755 Arnsberg * Tel.: +49 2932 916-0 * Fax: +49 2932 916-245 * http://www.GONICUS.de * Sitz der Gesellschaft: Moehnestrasse 55 * D-59755 Arnsberg * Geschaeftsfuehrer: Rainer Luelsdorf, Alfred Schroeder * Vorsitzender des Beirats: Juergen Michels * Amtsgericht Arnsberg * HRB 1968 Wir erfüllen unsere Informationspflichten zum Datenschutz gem. der Artikel 13 und 14 DS-GVO durch Veröffentlichung auf unserer Internetseite unter: https://www.gonicus.de/datenschutz oder durch Zusendung auf Ihre formlose Anfrage.

1 0

[Kolla Ansible] host maintenance
by Tony Liu 25 Aug '20

25 Aug '20

Hi, I wonder if it's supported by Kolla Ansible to deploy a specific host and add it into existing cluster, like replace a control host or compute host? Thanks! Tony

5 10

[Monasca] Kolla docker image on Docker Hub
by Tony Liu 25 Aug '20

25 Aug '20

Hi, Are those Monasca Kolla container images kolla/centos-binary-monasca-* on Docker Hub? I only see kolla/centos-binary-monasca-grafana. I am running Kolla Ansible to deploy Monasca and got this failure. ======== docker.errors.ImageNotFound: 404 Client Error: Not Found (\"pull access denied for kolla/centos-binary-monasca-api, repository does not exist or may require \\'docker login\\': denied: requested access to the resource is denied\") ======== Thanks! Tony

3 2

Cliff auto completion not working inside interactive mode
by sandeep 25 Aug '20

25 Aug '20

Hi Team, In my system, I am trying auto completion for my CLI application. *CLIFF version - cliff==3.4.0* Auto complete works fine on bash prompt. But inside the interactive shell, auto complete does not work. Below is the screenshot for the help command inside the interactive shell. [image: image.png] Now, if I type swm and press tab, it lists all the sub commands under it. But, swm s<tab> gives swm "s and further command auto completion does not work. [image: image.png] Could you please let me know what could be the problem? Is this a known issue? or Am i missing something? Thanks, Sandeep

1 1

[neutron][ops] q-agent-notifier exchanges without bindings.
by Fabian Zimmermann 25 Aug '20

25 Aug '20

Hi, im currently on the way to analyse some rabbitmq-issues. atm im taking a look on "unroutable messages", so I * created an Alternative Exchange and Queue: "unroutable" * created a policy to send all unroutable msgs to this exchange/queue. * wrote a script to show me the msgs placed here.. currently I get Seems like my neutron is placing msgs in these exchanges, but there is nobody listening/binding to: -- 20 Exchange: q-agent-notifier-network-delete_fanout, RoutingKey: 226 Exchange: q-agent-notifier-port-delete_fanout, RoutingKey: 88 Exchange: q-agent-notifier-port-update_fanout, RoutingKey: 388 Exchange: q-agent-notifier-security_group-update_fanout, RoutingKey: -- Is someone able to give me a hint where to look at / how to debug this? Fabian

2 2

[tacker] IRC meeting
by Yasufumi Ogawa 25 Aug '20

25 Aug '20

Hi tacker team, I am not available to join IRC meeting today unfortunately. I would like to suggest to anyone host the meeting, or skip it if no items. Thanks, Yasufumi

2 1

[blazar] IRC meetings cancelled this week
by Pierre Riteau 24 Aug '20

24 Aug '20

Hello, Apologies for the short notice: due to scheduling conflicts, I am not available to chair either of the Blazar IRC meetings this week. I propose that we cancel them. Thanks, Pierre Riteau (priteau)

1 0

[nova][neutron][oslo][ops] rabbit bindings issue
by Arnaud Morin 24 Aug '20

24 Aug '20

Hey all, I would like to ask the community about a rabbit issue we have from time to time. In our current architecture, we have a cluster of rabbits (3 nodes) for all our OpenStack services (mostly nova and neutron). When one node of this cluster is down, the cluster continue working (we use pause_minority strategy). But, sometimes, the third server is not able to recover automatically and need a manual intervention. After this intervention, we restart the rabbitmq-server process, which is then able to join the cluster back. At this time, the cluster looks ok, everything is fine. BUT, nothing works. Neutron and nova agents are not able to report back to servers. They appear dead. Servers seems not being able to consume messages. The exchanges, queues, bindings seems good in rabbit. What we see is that removing bindings (using rabbitmqadmin delete binding or the web interface) and recreate them again (using the same routing key) brings the service back up and running. Doing this for all queues is really painful. Our next plan is to automate it, but is there anyone in the community already saw this kind of issues? Our bug looks like the one described in [1]. Someone recommands to create an Alternate Exchange. Is there anyone already tried that? FYI, we are running rabbit 3.8.2 (with OpenStack Stein). We had the same kind of issues using older version of rabbit. Thanks for your help. [1] https://groups.google.com/forum/#!newtopic/rabbitmq-users/rabbitmq-users/zF… -- Arnaud Morin

9 29

[security] Security SIG Meeting Aug 27th Cancelled
by Gage Hugo 24 Aug '20

24 Aug '20

Good morning, The security SIG meeting for Thursday, Aug 27th 2020 will be cancelled. We will meet next week at the usual time.

1 0

[openstack-helm] OpenStack-Helm Meeting Aug 25th Cancelled
by Gage Hugo 24 Aug '20

24 Aug '20

Good morning, The openstack-helm meeting for tomorrow, Aug 25th 2020 will be cancelled, we will see you all next week!

1 0

[ovn][neutron][ussuri] DPDK support on OVN Openstack? Openstack Doc contradictive Information?
by Popoi Zen 24 Aug '20

24 Aug '20

I want to implement DPDK on my Openstack using OVN as mechanism driver. I read 2 documentation: [1] https://docs.openstack.org/neutron/ussuri/admin/ovn/dpdk.html [2] https://docs.openstack.org/neutron/ussuri/admin/config-ovs-dpdk.html In first doc [1], it is said that DPDK has been supported on OVN. But in second doc [2] it is said `The support of this feature is not yet present in ML2 OVN and ODL mechanism drivers.` Which one is true? because I have TCP checksum issue when implement DPDK on OVN same like this: https://bugs.launchpad.net/neutron/+bug/1832021. It has patched on OVS but not work on OVN. Regards,

3 3

About Devstack
by 李志远 24 Aug '20

24 Aug '20

I'm sorry to disturb you. Recently, I tried to install openstack through devstack. When I input "./stack.sh". I can install openstack successfully. Then I tried to create a cloud instance and use the public network 172.24.4.0/24 which is created during installation( this subnet is created by default, I didn't configure network informartion in local.conf before installation). And the instance can access to the Internet smoothly. But the instance will not access the Internet when I reboot my server  (physical machine). After rebooting, I input "sudo ifconfig br-ex 172.24.4.1/24 up", the instance can access my server IP, but it can't PING the gateway addresses of my server. Of course, the instance also can't access the Internet. But my server can PING it's gateway and access to the Internet. Finally, the cloud instance can only communicate with my server. I tried many methods to restore the network environment of my openstack. But I can't find the reason. So I need your help. I install the version of devstack is stable/train. Thank you very much!

3 2

[Nova] We are dropping the 'delete_instance_files' virt driver interface
by Zhong, Luyao 24 Aug '20

24 Aug '20

Hi all especially maintainers of out-of-tree drivers, Please pay attention to this change. https://review.opendev.org/#/c/714653/ We are dropping 'delete_instance_files' virt driver interface, and will use "cleanup_instance" to take charge of lingering instance cleanup, including instance files deleting and whatever we add in the future. Best Regards, Luyao

1 0

[MURANO] Murano Class error when try to deploy WordPress APP
by İzzettin Erdem 24 Aug '20

24 Aug '20

Hello everyone, WordPress needs Mysql, HTTP and Zabbix Server/Agent. These apps run individually with succes but when I try to deploy WordPress App on Murano it gives the error about Apache HTTP that mentioned below. How can I fix this? Do you have any suggestions? Error: http://paste.openstack.org/show/796980/ http://paste.openstack.org/show/796983/ (cont.)

2 1

[neutron] Bug Deputy Report Aug 17-24
by Lucas Alvares Gomes 24 Aug '20

24 Aug '20

Hi, This is the Neutron bug report of the week of 2020-08-17. High: * https://bugs.launchpad.net/neutron/+bug/1891673 - "qrouter ns ip rules not deleted when fip removed from vm" Assigned to: hopem * https://bugs.launchpad.net/neutron/+bug/1892017 - "Neutron server logs are too big in the gate jobs" Assigned to: slaweq * https://bugs.launchpad.net/neutron/+bug/1892477 - "[OVN] Avoid nb_cfg update notification flooding during agents health check" Assigned to: lucasagomes * https://bugs.launchpad.net/neutron/+bug/1892489 - "[Prefix delegation] When subnet with PD enabled is added to the router, L3 agent fails on waiting for LLAs to be available" Assigned to: slaweq Needs further triage: * https://bugs.launchpad.net/neutron/+bug/1892405 - "Removing router interface causes router to stop routing between all" Unassigned * https://bugs.launchpad.net/neutron/+bug/1892496 - "500 on SG deletion: Cannot delete or update a parent row" Unassigned Medium: * https://bugs.launchpad.net/neutron/+bug/1892364 - "L3 agent prefix delegation - adding new subnet to the router fails" Assigned to: brian-haley * https://bugs.launchpad.net/neutron/+bug/1892362 - "Restarting L3 agent when PD is used fails due to IPAddressAlreadyExists error" Assigned to: slaweq Wishlist: * https://bugs.launchpad.net/neutron/+bug/1892200 - "Make keepalived healthcheck more configurable" Unassigned

1 0

[keystone] openstack token auth scpore system Question
by Mingi Jo 23 Aug '20

23 Aug '20

Hi, I'm studying OpenStack.If you use OpenStack and use it with a keystone token on all computers,If there is a project in the endpoint URL, the api request cannot be made properly.The error message is output at 400, and the request fails. We've looked into this, and I've found out,https://bugs.launchpad.net/cinder/+bug/1745905Here's the bug reporting, and I think it's done with the paperwork.However, various services such as cinder, swift, and probe are required to include projects in the endpoint url of the installation guide, which is considered contradictory.Is there any way to fix this?

1 0

python-zunclient
by mahdi abbasi 22 Aug '20

22 Aug '20

Hi openstack development team, I installed python-zunclient successfully but openstack appcontainer command steal return not found. Please help me. Best regards Mahdi

2 2

RE: Using os_token
by Eric K. Miller 22 Aug '20

22 Aug '20

I happened to run across an unrelated github issue: https://github.com/terraform-providers/terraform-provider-openstack/issu es/271 which gave me a clue to what I was missing. I needed to include some additional variables (see steps 7 through 9 below). Revised steps - which works fine with the OpenStack Client: 0) set appropriate OS_* variables for password authentication 1) create a token using "openstack token issue" 2) unset all OS_* environment variables 3) set OS_TOKEN to the token's value provided in #1 4) set OS_AUTH_TYPE to "v3token" 5) set OS_AUTH_URL to the respective KeyStone endpoint 6) set OS_IDENTITY_API_VERSION to "3" 7) set OS_PROJECT_DOMAIN_ID as appropriate 8) set OS_PROJECT_NAME as appropriate 9) set OS_REGION_NAME as appropriate 10) use the CLI as normal This shaves anywhere from 0.2 to 0.6 seconds off of a test command I'm running when compared to password authentication (which normally takes about 2.5 seconds to run), where a new token is issued each time. openstack token revoke works as expected too. Eric

2 2

Nova Docker
by mahdi abbasi 21 Aug '20

21 Aug '20

Hi openstack development team, Given that the nova-docker peoject is np longer availble, is there any solution for creating a docker instanace in openstack? Best regards Mahdi

2 2

Can't fetch from opendev.
by Daniel Bengtsson 21 Aug '20

21 Aug '20

Hi everyone, I have tried to fetch the repository tripleo-heat-templates from opendev. I was not able to do that: http://paste.openstack.org/show/796882/ With github it works. I have asked to another colleague to try, he have the same problem.

3 7

[cinder] reviewing priorities for next few weeks
by Brian Rosmaita 21 Aug '20

21 Aug '20

Hello Cinderinos, We're near the end of week R-8, and people are getting antsy about having their changes reviewed. So here are the Cinder project reviewing priorities over the next few weeks. (1) os-brick The Victoria release of os-brick must take place during week R-6 (i.e., by 31 August). Hence, os-brick reviews are the project's TOP PRIORITY right now. Among os-brick reviews, these are the most important changes: - support for volume-local-cache feature https://review.opendev.org/663549 - support for cinderlib RBD use https://review.opendev.org/#/q/topic:cinderlib-changes+status:open - code cleanup (should be quick reviews) https://review.opendev.org/#/q/status:open+project:openstack/os-brick+branc… There are some other open reviews in master; if they interest you, go for it. But the above are release-critical. (2) cinder features requiring python-cinderclient support The Victoria release of python-cinderclient must take place during week R-5 (i.e., by 7 September). - project-level default volume-types cinder: https://review.opendev.org/737707 cinderclient: https://review.opendev.org/739223/ - active-active support https://review.opendev.org/#/q/topic:a-a-support+status:open There are other open reviews in master for python-cinderclient that could use some eyes. I didn't see anything major, but it would be good to look in case I missed something. (3) other features (including drivers) The feature freeze is the end of R-5 (i.e., 8 September) - Use the blueprints to find these: https://blueprints.launchpad.net/cinder/victoria And we'll be reviewing everything else also, but items in the 3 categories above get priority. If your patch is in category (3) or not-prioritized, you can always help speed things up by reviewing the higher-priority items. We're almost at the end of the Victoria cycle. Let's have a productive few weeks! brian

1 0