September 2020 - openstack-discuss

Re: [neutron][networking-midonet] Maintainers needed
by Sebastian Saemann 11 Sep '20

11 Sep '20

Hi Slawek, we at NETWAYS are running most of our neutron networking on top of midonet and wouldn't be too happy if it gets deprecated and removed. So we would like to take over the maintainer role for this part. Please let me know how to proceed and how we can be onboarded easily. Best regards, Sebastian -- Sebastian Saemann Head of Managed Services NETWAYS Managed Services GmbH | Deutschherrnstr. 15-19 | D-90429 Nuernberg Tel: +49 911 92885-0 | Fax: +49 911 92885-77 CEO: Julian Hein, Bernd Erk | AG Nuernberg HRB25207 https://netways.de | sebastian.saemann(a)netways.de ** NETWAYS Web Services - https://nws.netways.de **

6 17

[neutron] Drivers meeting 11.09.2020 cancelled
by Slawek Kaplonski 10 Sep '20

10 Sep '20

Hi, There is no any RFE for tomorrow drivers meeting so lets cancel it and focus on review of the opened patches during that time. See You all next week on the meetings. Have a great weekend :) -- Slawek Kaplonski Principal software engineer Red Hat

1 0

[Keystone] TypeError: list indices must be integers or slices, not str
by Tony Liu 10 Sep '20

10 Sep '20

Any clues to this error? 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context Traceback (most recent call last): 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/server/flask/request_processing/middleware/auth_context.py", line 103, in _inner 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context return method(self, request) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/server/flask/request_processing/middleware/auth_context.py", line 353, in process_request 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context resp = super(AuthContextMiddleware, self).process_request(request) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystonemiddleware/auth_token/__init__.py", line 411, in process_request 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context allow_expired=allow_expired) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystonemiddleware/auth_token/__init__.py", line 445, in _do_fetch_token 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context data = self.fetch_token(token, **kwargs) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/server/flask/request_processing/middleware/auth_context.py", line 248, in fetch_token 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context token, access_rules_support=ACCESS_RULES_MIN_VERSION) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/common/manager.py", line 115, in wrapped 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context __ret_val = __f(*args, **kwargs) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/token/provider.py", line 146, in validate_token 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context self._is_valid_token(token, window_seconds=window_seconds) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/token/provider.py", line 199, in _is_valid_token 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context self.check_revocation(token) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/common/manager.py", line 115, in wrapped 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context __ret_val = __f(*args, **kwargs) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/token/provider.py", line 137, in check_revocation 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context return self.check_revocation_v3(token) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/common/manager.py", line 115, in wrapped 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context __ret_val = __f(*args, **kwargs) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/token/provider.py", line 133, in check_revocation_v3 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context token_values = self.revoke_api.model.build_token_values(token) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/models/revoke_model.py", line 245, in build_token_values 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context if token.roles is not None: 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/models/token_model.py", line 458, in roles 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context roles = self._get_project_roles() 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/models/token_model.py", line 423, in _get_project_roles 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context roles.append({'id': r['id'], 'name': r['name']}) 2020-09-10 11:03:44.913 30 ERROR keystone.server.flask.request_processing.middleware.auth_context TypeError: list indices must be integers or slices, not str Thanks! Tony

1 0

[cinder][stable] branch freeze for ocata, pike
by Brian Rosmaita 10 Sep '20

10 Sep '20

tl;dr - do not approve any backports to stable/ocata or stable/pike in any Cinder project deliverable stable/ocata has been tagged with ocata-eol in cinder, os-brick, python-cinderclient, and python-brick-cinderclient-ext. Nothing should be merged into stable/ocata in any of these repositories during the interim period before the branches are deleted. stable/pike: the changes discussed in [0] have merged, and I've proposed the pike-eol tags [1]. Nothing should be merged into stable/pike in any of our code repositories from now until the branches are deleted. [0] http://lists.openstack.org/pipermail/openstack-discuss/2020-July/016076.html [1] https://review.opendev.org/#/c/742523/

4 6

[Keystone] KeyError: 'domain_id'
by Tony Liu 10 Sep '20

10 Sep '20

Here is another exception. Any clues? 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context [req-534d9855-8113-450d-8f9f-d93c0d961d24 113ee63a9ed0466794e24d069efc302c 4c142a681d884010ab36a7ac687d910c - default default] 'domain_id': KeyError: 'domain_id' 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context Traceback (most recent call last): 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/server/flask/request_processing/middleware/auth_context.py", line 103, in _inner 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context return method(self, request) 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/server/flask/request_processing/middleware/auth_context.py", line 353, in process_request 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context resp = super(AuthContextMiddleware, self).process_request(request) 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystonemiddleware/auth_token/__init__.py", line 411, in process_request 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context allow_expired=allow_expired) 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystonemiddleware/auth_token/__init__.py", line 445, in _do_fetch_token 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context data = self.fetch_token(token, **kwargs) 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/server/flask/request_processing/middleware/auth_context.py", line 248, in fetch_token 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context token, access_rules_support=ACCESS_RULES_MIN_VERSION) 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/common/manager.py", line 115, in wrapped 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context __ret_val = __f(*args, **kwargs) 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/token/provider.py", line 145, in validate_token 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context token = self._validate_token(token_id) 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "</usr/lib/python3.6/site-packages/decorator.py:decorator-gen-26>", line 2, in _validate_token 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/dogpile/cache/region.py", line 1360, in get_or_create_for_user_func 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context key, user_func, timeout, should_cache_fn, (arg, kw) 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/dogpile/cache/region.py", line 962, in get_or_create 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context async_creator, 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/dogpile/lock.py", line 187, in __enter__ 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context return self._enter() 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/dogpile/lock.py", line 94, in _enter 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context generated = self._enter_create(value, createdtime) 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/dogpile/lock.py", line 180, in _enter_create 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context return self.creator() 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/dogpile/cache/region.py", line 916, in gen_value 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context *creator_args[0], **creator_args[1] 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/token/provider.py", line 179, in _validate_token 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context token.mint(token_id, issued_at) 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/models/token_model.py", line 580, in mint 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context self._validate_token_user() 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/models/token_model.py", line 503, in _validate_token_user 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context if not self.user_domain.get('enabled'): 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context File "/usr/lib/python3.6/site-packages/keystone/models/token_model.py", line 141, in user_domain 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context self.user['domain_id'] 2020-09-10 10:16:45.050 28 ERROR keystone.server.flask.request_processing.middleware.auth_context KeyError: 'domain_id' Thanks! Tony

1 0

[gance_store][FFE] Cinder multiple stores support
by Rajat Dhasmana 10 Sep '20

10 Sep '20

Hi Team, Last week we released glance_store 2.3.0 which adds support for configuring cinder multiple stores as glance backend. While adding functional tests in glance for the same [1], we have noticed that it is failing with some hard requirements from oslo side to use project_id instead of tenant and user_id instead of user. It is really strange behavior as this failure occurs only in functional tests but works properly in the actual environment without any issue. The fix is proposed in glance_store [2] to resolve this issue. I would like to apply for FFE with this glance_store patch [2] to be approved and release a new version of glance_store 2.3.1. Kindly provide approval for the same. [1] https://review.opendev.org/#/c/750144/ [2] https://review.opendev.org/#/c/750131/ Thanks and Regards, Rajat Dhasmana

2 2

Farewell Party for Monty
by corvus＠inaugust.com 10 Sep '20

10 Sep '20

Hi, Monty is starting a new gig and won't be spending as much time with us. Since we all haven't seen each other in a while, let's have one more beer[1] together and say farewell. Join us for a virtual going-away party on meetpad tomorrow (Friday) at 21:00 UTC at this URL: https://meetpad.opendev.org/farewell-mordred Stop by and chat for old time's sake. -Jim [1] Bring your own beer.

1 0

[requirements][FFE] Cinder multiple stores support
by Rajat Dhasmana 10 Sep '20

10 Sep '20

Hi Team, Last week we released glance_store 2.3.0 which adds support for configuring cinder multiple stores as glance backend. While adding functional tests in glance for the same [1], we have noticed that it is failing with some hard requirements from oslo side to use project_id instead of tenant and user_id instead of user. It is really strange behavior as this failure occurs only in functional tests but works properly in the actual environment without any issue. The fix is proposed in glance_store [2] to resolve this issue. I would like to apply for FFE with this glance_store patch [2] to be approved and release a new version of glance_store 2.3.1. Kindly provide approval for the same. [1] https://review.opendev.org/#/c/750144/ [2] https://review.opendev.org/#/c/750131/ Thanks and Regards, Rajat Dhasmana

2 2

Moving on
by Monty Taylor 10 Sep '20

10 Sep '20

Hi everybody, After 10 years of OpenStack, the time has come for me to move on to the next challenge. Actually, the time came a few weeks ago, but writing farewells has always been something I’m particularly bad at. My last day at Red Hat was actually July 31 and I’m now working in a non-OpenStack job. I’m at a loss for words as to what more to say. I’ve never done anything for 10 years before, and I’ll be very surprised if I do anything else for 10 years again. While I’m excited about the new things on my plate, I’ll obviously miss everyone. As I am no longer being paid by an OpenStack employer, I will not be doing any OpenStack things as part of my day job. I’m not sure how much spare time I’ll have to be able to contribute. I’m going to hold off on resigning core memberships pending a better understanding of that. I think it’s safe to assume I won’t be able to continue on as SDK PTL though. I wish everyone all the best, and I hope life conspires to keep us all connected. Thank you to everyone for an amazing 10 years. Monty

16 15

[tc] meeting summary
by Mohammed Naser 10 Sep '20

10 Sep '20

Hi everyone, Here's a summary of what happened in our TC monthly meeting last Thursday, September 3. # ATTENDEES (LINES SAID) - mnaser (72) - gmann (35) - ttx (22) - diablo_rojo (19) - belmoreira (18) - knikolla (16) - njohnston (11) - fungi (7) - smcginnis (2) - ricolin (2) # MEETING SUMMARY 1. Rollcall (mnaser, 14:01:13) 2. Follow up on past action items (mnaser, 14:04:27) - http://eavesdrop.openstack.org/meetings/tc/2020/tc.2020-08-06-14.00.html (mnaser, 14:04:59) 3. OpenStack User-facing APIs and CLIs (belmoreira, 14:11:33) 4. W cycle goal selection start (mnaser, 14:33:43) 5. Completion of retirement cleanup (gmann, 14:34:45) - https://etherpad.opendev.org/p/tc-retirement-cleanup (mnaser, 14:34:52) - https://review.opendev.org/#/c/745403/ (mnaser, 14:35:06) 6. Audit and clean-up tags (gmann, 14:37:25) - https://review.opendev.org/#/c/749363/ (mnaser, 14:37:35) 7. open discussion (mnaser, 14:43:54) # ACTION ITEMS - tc-members to follow up and review "Resolution to define distributed leadership for projects". - mnaser schedule session with sig-arch and k8s steering committee. - njohnston to find someone to work with on getting goals groomed/proposed for W cycle. - belmoreira/knikolla figure out logistics of a document with gaps within osc. - diablo_rojo help schedule forum session for OSC gaps. To read the full logs of the meeting, please refer to http://eavesdrop.openstack.org/meetings/tc/2020/tc.2020-09-03-14.01.log.html Thanks, Mohammed -- Mohammed Naser VEXXHOST, Inc.

1 0

[largescale-sig] Next meeting: September 9, 16utc
by Thierry Carrez 10 Sep '20

10 Sep '20

Hi everyone, Our next meeting will be a EU-US-friendly meeting, today Wednesday, September 9 at 16 UTC[1] in the #openstack-meeting-3 channel on IRC: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20200909T16 Feel free to add topics to our agenda at: https://etherpad.openstack.org/p/large-scale-sig-meeting A reminder of the TODOs we had from last meeting, in case you have time to make progress on them: - all to contact US large deployment friends to invite them to next EU-US meeting - ttx to request Forum/PTG sessions - belmoreira, ttx to push for OSops resurrection - all to describe briefly how you solved metrics/billing in your deployment in https://etherpad.openstack.org/p/large-scale-sig-documentation - masahito to push latest patches to oslo.metrics - ttx to look into a basic test framework for oslo,metrics - amorin to see if oslo.metrics could be tested at OVH Talk to you all later, -- Thierry Carrez

1 1

Cloudinit resets network scripts to default configuration DHCP once Config Drive is removed after sometime on Openstack platform
by Vijayendra R Radhakrishna 10 Sep '20

10 Sep '20

1 0

[all][PTL][release] Victoria Cycle Highlights
by Kendall Nelson 09 Sep '20

09 Sep '20

Hello Everyone! It's time to start thinking about calling out 'cycle-highlights' in your deliverables! As PTLs, you probably get many pings and emails from various parties (marketing, management, journalists, etc) asking for highlights of what is new and what significant changes are coming in the new release. By putting them all in the same place it makes them easy to reference because they get compiled into a pretty website like this from the last few releases: Rocky[1], Stein[2], Train[3], Ussuri[4]. As usual, we don't need a fully fledged marketing message, just a few highlights (3-4 ideally), from each project team. Looking through your release notes is a good place to start. *The deadline for cycle highlights is the end of the R-5 week [5] on Sept 11th.* How To Reminder: ------------------------- Simply add them to the deliverables/train/$PROJECT.yaml in the openstack/releases repo like this: cycle-highlights: - Introduced new service to use unused host to mine bitcoin. The formatting options for this tag are the same as what you are probably used to with Reno release notes. Also, you can check on the formatting of the output by either running locally: tox -e docs And then checking the resulting doc/build/html/train/highlights.html file or the output of the build-openstack-sphinx-docs job under html/train/ highlights.html. Can't wait to see what you've accomplished! -Kendall Nelson (diablo_rojo) [1] https://releases.openstack.org/rocky/highlights.html [2] https://releases.openstack.org/stein/highlights.html [3] https://releases.openstack.org/train/highlights.html [4] https://releases.openstack.org/ussuri/highlights.html [5] htt <https://releases.openstack.org/train/schedule.html#t-cycle-highlights> https://releases.openstack.org/victoria/schedule.html

1 1

[cinder][requirements] FFE request for os-brick
by Brian Rosmaita 09 Sep '20

09 Sep '20

Hello Requirements Team, The victoria release of os-brick 4.0.0 that we did last week contained a bugfix that requires a heavyweight binary dependency. Unfortunately, we did not realize this until yesterday. The cinder team reverted that patch [0] and replaced it with a lightweight fix [1] that does not require any new dependencies and has proposed the release of os-brick 4.0.1 [2]. We are asking for a requirements freeze exception so that os-brick 4.0.1 can be included in the victoria openstack release. [0] https://review.opendev.org/750649 [1] https://review.opendev.org/750655 [2] https://review.opendev.org/#/c/750808/ thank you, brian

2 1

[tc] [all] Topics for Cross Community Discussion with Kubernetes ...
by Jay Bryant 09 Sep '20

09 Sep '20

All, Recently, the OpenStack TC has reached out to the Kubernetes Steering Committee for input as we have proposed adding a starter-kit:kubernetes-in-virt tag for projects in OpenStack. This request was received positively and as a result the TC has started brainstorming other topics that we could approach with the k8s community in this [1] etherpad. If you have topics that may be appropriate for this discussion please see the etherpad and add your ideas. Thanks! Jay IRC: jungleboyj [1] https://etherpad.opendev.org/p/kubernetes-cross-community-topics

3 3

[infra][tact-sig] October 2020 vPTG space for TaCT SIG work
by Jeremy Stanley 09 Sep '20

09 Sep '20

Just one last quick check, does anyone think we need dedicated TaCT SIG space in the vPTG schedule? I can snag some for us if so. There seemed to be some consensus on IRC that the OpenStack Testing and Collaboration Tools SIG can just glom onto OpenDev and OpenStack QA team vPTG sessions where relevant, which seems entirely prudent to me, and means we don't need our own separate times to talk about things which are neither relevant to OpenDev nor QA (which I estimate to be roughly nil). -- Jeremy Stanley

1 0

[tc] monthly meeting
by Mohammed Naser 09 Sep '20

09 Sep '20

Hi everyone, Here’s the agenda for our monthly TC meeting. It will happen tomorrow (Thursday the 3rd) at 1400 UTC in #openstack-tc and I will be your chair. If you can’t attend, please put your name in the “Apologies for Absence” section. https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting ## ACTIVE INITIATIVES * Follow up on past action items * OpenStack User-facing APIs and CLIs (belmoreira) * W cycle goal selection start * Completion of retirement cleanup (gmann): https://etherpad.opendev.org/p/tc-retirement-cleanup * Audit and clean-up tags (gmann) + Remove tc:approved-release tag https://review.opendev.org/#/c/749363 Thank you, Mohammed -- Mohammed Naser VEXXHOST, Inc.

2 1

[nova] Changes for out-of-tree drivers
by Stephen Finucane 09 Sep '20

09 Sep '20

We're aiming to remove the long-deprecated XenAPI driver before Victoria ends. With that removed, there are a number of XenAPI-specific virt driver APIs that we plan to remove in follow-ups. These are noted at [1]. If you maintain an out-of-tree driver, you will need to account for these changes. Cheers, Stephen [1] https://review.opendev.org/#/c/749300/1/nova/virt/driver.py

1 0

[summit] Schedule is Live for the 2020 Virtual Open Infrastructure Summit
by Thierry Carrez 09 Sep '20

09 Sep '20

Hi everyone, We are excited to announce that the schedule[1] for the virtual 2020 Open Infrastructure Summit is now live featuring keynotes and sessions from users like Volvo, Workday, Société Générale and Ant Group: [1] https://www.openstack.org/summit/2020/summit-schedule The virtual event takes place October 19-23 and includes more than 100 sessions and thousands of attendees are expected to participate, representing 30+ open source communities from more than 100 countries. Sessions for the virtual summit are led by users from global enterprises and research institutions building and operating open infrastructure at scale. The Summit includes: - Sessions spanning 30+ open source projects from technical community leaders and organizations including Alibaba Cloud, AT&T, China Mobile, CERN, European Weather Cloud, GE Digital and Volvo Cars and many more. - Collaborative sessions with project leaders and open source communities, including Airship, Ansible, Ceph, Docker, Kata Containers, Kubernetes, ONAP, OpenStack, Open vSwitch, OPNFV, StarlingX, and Zuul. - Get hands on workshops around open source technologies directly from the developers and operators building the software. - Familiarize with the updated Certified OpenStack Administrator (COA) exam and test your OpenStack knowledge at the COA sessions, sponsored by the OpenStack Foundation, in collaboration with Mirantis. Now what? Register[2] for your free virtual Summit pass and meet the users, developers, and vendors who are building and operating open infrastructure on October 19-23! [2] https://www.eventbrite.com/e/open-infrastructure-summit-2020-tickets-969672… Thank you to our Summit Headline, Premier and Exhibitor sponsors: Huawei, Cisco, InMotion Hosting, Trilio and ZTE. Event sponsors gain visibility with a wide array of open source infrastructure developers, operators and decision makers. Download the Open Infrastructure Summit sponsor prospectus[3] for more information. [3] https://www.openstack.org/summit/2020/sponsors/ Questions? Reach out to summit(a)openstack.org “See you” in October! Cheers, -- Thierry Carrez (ttx)

1 0

[tc] weekly update
by Mohammed Naser 09 Sep '20

09 Sep '20

Hi everyone, Here's an update for what happened in the OpenStack TC this week. You can get more information by checking for changes in openstack/governance repository. We've also included a few references to some important mailing list threads that you should check out. # Patches ## Open Reviews - Add openstack/osops to Ops Docs and Tooling SIG https://review.opendev.org/749835 - Reinstate weekly meetings https://review.opendev.org/749279 - Create starter-kit:kubernetes-in-virt tag https://review.opendev.org/736369 - Resolution to define distributed leadership for projects https://review.opendev.org/744995 - Add assert:supports-standalone https://review.opendev.org/722399 - Retire devstack-plugin-pika project https://review.opendev.org/748730 - Remove tc:approved-release tag https://review.opendev.org/749363 - Retire the devstack-plugin-zmq project https://review.opendev.org/748731 ## Project Updates - Add openstack-helm-deployments to openstack-helm https://review.opendev.org/748302 - Add openstack-ansible/os_senlin role https://review.opendev.org/748677 - kolla-cli: deprecation - Mark as deprecated https://review.opendev.org/749694 - Move ansible-role-XXX-hsm projects to Barbican team https://review.opendev.org/748027 ## General Changes - Drop all exceptions for legacy validation https://review.opendev.org/745403 ## Abandoned Changes - kolla-cli: deprecation - Mark kolla-cli as Deprecated https://review.opendev.org/749746 # Email Threads - Focal Goal Update #4: http://lists.openstack.org/pipermail/openstack-discuss/2020-September/01707… - Forum Submissions Open: http://lists.openstack.org/pipermail/openstack-discuss/2020-September/01693… # Other Reminders - Forum CFP closes Sept 14th! - PTG Signup closes Sept 11th! Thanks for reading! Mohammed & Kendall -- Mohammed Naser VEXXHOST, Inc.

1 0

[tripleo][ansible] ensure python dependencies on hosts for modules/plugins
by Bogdan Dobrelya 09 Sep '20

09 Sep '20

Since most of tripleo-ansible modules do 'import foobar', we should ensure that we have the corresponding python packages installed on target hosts. Some of them, like python3-dmidecode may be in base Centos8 images. But some may not, especially for custom deployed-servers provided by users for deployments. Those packages must be tracked and ensured to be installed by tripleo (preferred), or validated deploy-time (nah...), or at least documented as the modules get created or changed by devs. That also applies to adding action plugins' deps for python-tripleoclient or tripleo-ansible perhaps. Shall we write a spec for that or just address that as a bug [0]? [0] https://bugs.launchpad.net/tripleo/+bug/1894957 -- Best regards, Bogdan Dobrelya, Irc #bogdando

3 2

Application Credentials with federated users
by Alexander Dibbo - UKRI STFC 09 Sep '20

09 Sep '20

Hi All, Is it possible for a user logging in via an oidc provider to generate application credentials? When I try it I get an error about there being no role for the user in the project. We map the users to groups based on assertions in their tokens. It looks like it would work if we mapped users individually to local users in keystone and then gave those roles. I would prefer to avoid using per user mappings for this if possible as it would be a lot of extra work for my team. Regards Alexander Dibbo - Cloud Architect / Cloud Operations Group Leader For STFC Cloud Documentation visit https://stfc-cloud-docs.readthedocs.io<https://stfc-cloud-docs.readthedocs.io/> To raise a support ticket with the cloud team please email cloud-support(a)gridpp.rl.ac.uk<mailto:cloud-support@gridpp.rl.ac.uk> To receive notifications about the service please subscribe to our mailing list at: https://www.jiscmail.ac.uk/cgi-bin/webadmin?A0=STFC-CLOUD To receive fast notifications or to discuss usage of the cloud please join our Slack: https://stfc-cloud.slack.com/ This email and any attachments are intended solely for the use of the named recipients. If you are not the intended recipient you must not use, disclose, copy or distribute this email or any of its attachments and should notify the sender immediately and delete this email from your system. UK Research and Innovation (UKRI) has taken every reasonable precaution to minimise risk of this email or any attachments containing viruses or malware but the recipient should carry out its own virus and malware checks before opening the attachments. UKRI does not accept any liability for any losses or damages which the recipient may sustain due to presence of any viruses. Opinions, conclusions or other information in this message and attachments that are not related directly to UKRI business are solely those of the author and do not represent the views of UKRI.

2 1

Floating IP problem in HA OVN DVR with TripleO
by Reza Bakhshayeshi 09 Sep '20

09 Sep '20

Hi all, I deployed an environment with TripleO Ussuri with 3 HA Controllers and some Compute nodes with neutron-ovn-dvr-ha.yaml Instances have Internet access through routers with SNAT traffic (in this case traffic is routed via a controller node), and by assigning IP address directly from provider network (not having a router). But in case of assigning FIP from provider to an instance, VM Internet connection is lost. Here is the output of router nat lists, which seems OK: # ovn-nbctl lr-nat-list 587182a4-4d6b-41b0-9fd8-4c1be58811b0 TYPE EXTERNAL_IP EXTERNAL_PORT LOGICAL_IP EXTERNAL_MAC LOGICAL_PORT dnat_and_snat X.X.X.X 192.168.0.153 fa:16:3e:0a:86:4d e65bd8e9-5f95-4eb2-a316-97e86fbdb9b6 snat Y.Y.Y.Y 192.168.0.0/24 I replaced FIP with X.X.X.X and router IP with Y.Y.Y.Y When I remove * EXTERNAL_MAC* and *LOGICAL_PORT*, FIP works fine and as it has to be, but traffic routes from a Controller node and it won't be distributed anymore. Any idea or suggestion would be grateful. Regards, Reza

4 7

[nova] Feature Freeze is coming
by Balázs Gibizer 09 Sep '20

09 Sep '20

Hi, Nova will hit Feature Freeze for Victoria release on Thursday. Feature patches that are approved before end of Thursday can be rechecked and rebased to get them merged. Feature authors having patches that are not approved until the freeze but are close can request Feature Freeze Exception on the ML. Granting FFE requires ready patches and a core sponsor who will review those patches. Please observer that we only have 2 weeks before RC1 so time are short for FFEs. Cheers, gibi

1 0

[Image Encryption] No meeting next week
by Josephine Seifert 09 Sep '20

09 Sep '20

Hi, I will be on vacation next week, so there will be no meeting. Josephine(Luzi)

1 0