September 2020 - openstack-discuss

[tripleo][ansible] ensure python dependencies on hosts for modules/plugins
by Bogdan Dobrelya 09 Sep '20

09 Sep '20

Since most of tripleo-ansible modules do 'import foobar', we should ensure that we have the corresponding python packages installed on target hosts. Some of them, like python3-dmidecode may be in base Centos8 images. But some may not, especially for custom deployed-servers provided by users for deployments. Those packages must be tracked and ensured to be installed by tripleo (preferred), or validated deploy-time (nah...), or at least documented as the modules get created or changed by devs. That also applies to adding action plugins' deps for python-tripleoclient or tripleo-ansible perhaps. Shall we write a spec for that or just address that as a bug [0]? [0] https://bugs.launchpad.net/tripleo/+bug/1894957 -- Best regards, Bogdan Dobrelya, Irc #bogdando

3 2

Application Credentials with federated users
by Alexander Dibbo - UKRI STFC 09 Sep '20

09 Sep '20

Hi All, Is it possible for a user logging in via an oidc provider to generate application credentials? When I try it I get an error about there being no role for the user in the project. We map the users to groups based on assertions in their tokens. It looks like it would work if we mapped users individually to local users in keystone and then gave those roles. I would prefer to avoid using per user mappings for this if possible as it would be a lot of extra work for my team. Regards Alexander Dibbo - Cloud Architect / Cloud Operations Group Leader For STFC Cloud Documentation visit https://stfc-cloud-docs.readthedocs.io<https://stfc-cloud-docs.readthedocs.io/> To raise a support ticket with the cloud team please email cloud-support(a)gridpp.rl.ac.uk<mailto:cloud-support@gridpp.rl.ac.uk> To receive notifications about the service please subscribe to our mailing list at: https://www.jiscmail.ac.uk/cgi-bin/webadmin?A0=STFC-CLOUD To receive fast notifications or to discuss usage of the cloud please join our Slack: https://stfc-cloud.slack.com/ This email and any attachments are intended solely for the use of the named recipients. If you are not the intended recipient you must not use, disclose, copy or distribute this email or any of its attachments and should notify the sender immediately and delete this email from your system. UK Research and Innovation (UKRI) has taken every reasonable precaution to minimise risk of this email or any attachments containing viruses or malware but the recipient should carry out its own virus and malware checks before opening the attachments. UKRI does not accept any liability for any losses or damages which the recipient may sustain due to presence of any viruses. Opinions, conclusions or other information in this message and attachments that are not related directly to UKRI business are solely those of the author and do not represent the views of UKRI.

2 1

Floating IP problem in HA OVN DVR with TripleO
by Reza Bakhshayeshi 09 Sep '20

09 Sep '20

Hi all, I deployed an environment with TripleO Ussuri with 3 HA Controllers and some Compute nodes with neutron-ovn-dvr-ha.yaml Instances have Internet access through routers with SNAT traffic (in this case traffic is routed via a controller node), and by assigning IP address directly from provider network (not having a router). But in case of assigning FIP from provider to an instance, VM Internet connection is lost. Here is the output of router nat lists, which seems OK: # ovn-nbctl lr-nat-list 587182a4-4d6b-41b0-9fd8-4c1be58811b0 TYPE EXTERNAL_IP EXTERNAL_PORT LOGICAL_IP EXTERNAL_MAC LOGICAL_PORT dnat_and_snat X.X.X.X 192.168.0.153 fa:16:3e:0a:86:4d e65bd8e9-5f95-4eb2-a316-97e86fbdb9b6 snat Y.Y.Y.Y 192.168.0.0/24 I replaced FIP with X.X.X.X and router IP with Y.Y.Y.Y When I remove * EXTERNAL_MAC* and *LOGICAL_PORT*, FIP works fine and as it has to be, but traffic routes from a Controller node and it won't be distributed anymore. Any idea or suggestion would be grateful. Regards, Reza

4 7

[nova] Feature Freeze is coming
by Balázs Gibizer 09 Sep '20

09 Sep '20

Hi, Nova will hit Feature Freeze for Victoria release on Thursday. Feature patches that are approved before end of Thursday can be rechecked and rebased to get them merged. Feature authors having patches that are not approved until the freeze but are close can request Feature Freeze Exception on the ML. Granting FFE requires ready patches and a core sponsor who will review those patches. Please observer that we only have 2 weeks before RC1 so time are short for FFEs. Cheers, gibi

1 0

[Image Encryption] No meeting next week
by Josephine Seifert 09 Sep '20

09 Sep '20

Hi, I will be on vacation next week, so there will be no meeting. Josephine(Luzi)

1 0

[neutron] CI meeting 09/09/2020 cancelled
by Slawek Kaplonski 08 Sep '20

08 Sep '20

Hi, I'm off today and I will not be able to chair our CI meeting this week. So lets cancel it and see You on the meeting next week. -- Slawek Kaplonski Principal software engineer Red Hat

1 0

[blazar] Wallaby PTG
by Pierre Riteau 08 Sep '20

08 Sep '20

Hello, As mentioned in a recent IRC meeting [1], I likely won't be able to attend the PTG this year. Tetsuro Nakamura who is the only other active core reviewer at the moment said he won't have time either. Given that we still have lots of pending tasks on Blazar from the last PTG [2], I propose that we don't plan to meet during the PTG in October 2020. Best wishes, Pierre Riteau (priteau) [1] http://eavesdrop.openstack.org/meetings/blazar/2020/blazar.2020-08-18-09.00… [2] https://etherpad.opendev.org/p/blazar-ptg-victoria

1 0

Tripleo Standalone Deployment Issues - Reproduceable
by yuuta.takanashi＠aol.com 08 Sep '20

08 Sep '20

Hi Experts, I am facing on below issues while following guide of Tripleo Standalone Deployment: https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/deploym… Issue 1) Using custom domain will cause vm instantiation error after machine reboot Description =========== After Openstack installed, it's adding centos82.localdomain on /etc/hosts and causing OVN Southbound (ovn-sbctl show) using this centos82.localdomain. But after the machine rebooted, "ovn-sbctl show" is showing the correct fqdn: centos82.domain.tld, and it is causing VM instantiate error (Refusing to bind port <UUID> due to no OVN chassis for host: centos82.localdomain). Steps to reproduce ================== Base installation: https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/deploym… Tested on Centos 8.2 latest, tested several times on Train and Ussuri. 100% reproduceable. Set the custom FQDN hostname hostnamectl set-hostname centos82.domain.tld hostnamectl set-hostname centos82.domain.tld --transient (also tested with or without this line) cat /etc/hosts 127.0.0.1 centos82.domain.tld localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 centos82.domain.tld localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.156.82 centos82.domain.tld also tested with hostnamectl set-hostname centos82.domain.tld hostnamectl set-hostname centos82.domain.tld --transient (also tested with or without this line) cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.156.82 centos82.domain.tld centos82 also tested with hostnamectl set-hostname centos82.domain.tld hostnamectl set-hostname centos82.domain.tld --transient (also tested with or without this line) cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.156.82 centos82.domain.tld Part of standalone_parameters.yaml for domain: # domain name used by the host NeutronDnsDomain: domain.tld Follow the guide to install (without ceph) (Issue 1B) with ceph was having another error, just tested once on Train: fatal: [undercloud]: FAILED! => { "ceph_ansible_std_out_err": [ "Using /home/stack/standalone-ansible-huva1ccw/ansible.cfg as config file", "ERROR! the playbook: /usr/share/ceph-ansible/site-container.yml.sample could not be found" ], "failed_when_result": true } All will be installed successfully, and able to instantiate VMs and these VMs are able to ping to each other. Then do "reboot" on this standalone host/server. Do instantiate a new VM, and then this new VM status will be ERROR. On Neutron logs: Refusing to bind port <UUID> due to no OVN chassis for host: centos82.localdomain bind_port Found the cause on OVN: Previous after installed (before reboot) [root@centos82 /]# ovn-sbctl show Chassis "<UUID>" hostname: centos82.localdomain Encap geneve ip: "192.168.156.82" options: {csum="true"} [root@centos82 /]# After reboot [root@centos82 /]# ovn-sbctl show Chassis "<UUID>" hostname: centos82.domain.tld Encap geneve ip: "192.168.156.82" options: {csum="true"} [root@centos82 /]# So that the OVN seems could not bind the port to different hostname (that already changed). Environment =========== 1. Exact version of OpenStack you are running: Any, tested Train and Ussuri 2. Centos 8.2 latest update Others (without ceph): https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/deploym… Workaround ========== Don't use custom domain, instead use "localdomain" as on the document hostnamectl set-hostname centos82.localdomain [root@centos82 ~]# cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.156.82 centos82.localdomain centos82 Deploy, test instantiate, reboot, test instantiate, and working perfectly fine. Question: For custom domain, where did I do wrongly? Is it expected or kind of bugs? Issue 2) This is not Openstack issue, perhaps bugs or perhaps my issue, but it is still related with the topic on Tripleo Standalone Deployment. On the same Standalone Deployment Guide (https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/deploym…) with Centos 7.6 or 7.7 with "python-tripleoclient" and this has dependency of Docker 1.13.1, encounters kind of Dns querying issue which I posted here: https://serverfault.com/questions/1032816/centos-7-and-docker-1-13-1-error-… Perhaps if anybody knows how to resolve this. Also, just wondering is there any way for "python-tripleoclient" to use newer docker-ce 1.19.x instead of docker 1.13.1? ThanksBest regards, TY

2 1

Windows 10 instance hostname not updating
by its-openstack＠zohocorp.com 08 Sep '20

08 Sep '20

Dear openstack, I have installed openstack train branch, I am facing issue with windows image. all windows 10 instance dosen't get its hostname updated from the metadata, but able to get the metadata(hostname) from inside the instance using powershell. ``` $ Invoke-WebRequest http://169.254.169.254/latest/meta-data/hostname -UseBasicParsing ``` windows2016 instance no issue. using the stable cloudbase-init package for preparation of windows 10. if you would so kindly help us with this issue Regards sysadmin

1 0

[cloudkitty] Virtual PTG planning
by Pierre Riteau 08 Sep '20

08 Sep '20

Hi, You may know that the next PTG will be held virtually during the week of October 26-30, 2020. I will very likely *not* be available during that time, so I would like to hear from the CloudKitty community: - if you would like to meet and for how long (a half day may be enough depending on the agenda) - what day and time is preferred (see list in https://ethercalc.openstack.org/7xp2pcbh1ncb) - if anyone is willing to chair the discussions (I can help you prepare an agenda before the event) Thanks in advance, Pierre Riteau (priteau)

2 2