October 2021 - openstack-discuss - lists.openstack.org

[TripleO] Timeout while introspecting Overcloud Node
by Anirudh Gupta 12 Oct '21

12 Oct '21

Hi Team, We were trying to provision Overcloud Nodes using the Tripleo wallaby release. For this, on Undercloud machine (Centos 8.4), we downloaded the ironic-python and overcloud images from the following link: https://images.rdoproject.org/centos8/wallaby/rdo_trunk/current-tripleo/ After untarring, we executed the command *openstack overcloud image upload* This command setted the images at path /var/lib/ironic/images folder successfully. Then we uploaded our instackenv.json file and executed the command *openstack overcloud node introspect --all-manageable* On the overcloud node, we are getting the Timeout error while getting the agent.kernel and agent.ramdisk image. *http://10.0.1.10/8088/agent.kernel......Connection <http://10.0.1.10/8088/agent.kernel......Connection> timed out (http://ipxe.org/4c0a6092 <http://ipxe.org/4c0a6092>)* *http://10.0.1.10/8088/agent.kernel......Connection <http://10.0.1.10/8088/agent.kernel......Connection> timed out (http://ipxe.org/4c0a6092 <http://ipxe.org/4c0a6092>)* However, from another test machine, when I tried *wget http://10.0.1.10/8088/agent.kernel <http://10.0.1.10/8088/agent.kernel>* - It successfully worked Screenshot is attached for the reference Can someone please help in resolving this issue. Regards Anirudh Gupta

1 1

[TripleO] Issue in running Pre-Introspection
by Anirudh Gupta 12 Oct '21

12 Oct '21

Hi Team, I tried installing Undercloud using the below link: https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/deploym… I am getting the following error: (undercloud) [stack@undercloud ~]$ openstack tripleo validator run --group pre-introspection Selected log directory '/home/stack/validations' does not exist. Attempting to create it. +--------------------------------------+---------------------------------+--------+------------+-----------------+-------------------+-------------+ | UUID | Validations | Status | Host_Group | Status_by_Host | Unreachable_Hosts | Duration | +--------------------------------------+---------------------------------+--------+------------+-----------------+-------------------+-------------+ | 7029c1f6-5ab4-465d-82d7-3f29058012ce | check-cpu | PASSED | localhost | localhost | | 0:00:02.531 | | db059017-30f1-4b97-925e-3f55b586d492 | check-disk-space | PASSED | localhost | localhost | | 0:00:04.432 | | e23dd9a1-90d3-4797-ae0a-b43e55ab6179 | check-ram | PASSED | localhost | localhost | | 0:00:01.324 | | 598ca02d-258a-44ad-b78d-3877321cdfe6 | check-selinux-mode | PASSED | localhost | localhost | | 0:00:01.591 | | c4435b4c-b432-4a1e-8a99-00638034a884 | *check-network-gateway | FAILED* | undercloud | *No host matched* | | | | cb1eed23-ef2f-4acd-a43a-86fb09bf0372 | *undercloud-disk-space | FAILED* | undercloud | *No host matched* | | | | abde5329-9289-4b24-bf16-c4d82b03e67a | *undercloud-neutron-sanity-check | FAILED* | undercloud | *No host matched* | | | | d0e5fdca-ece6-4a37-b759-ed1fac31a10f | *ctlplane-ip-range | FAILED* | undercloud | No host matched | | | | 91511807-225c-4852-bb52-6d0003c51d49 | *dhcp-introspection | FAILED* | undercloud | No host matched | | | | e96f7704-d2fb-465d-972b-47e2f057449c |* undercloud-tokenflush | FAILED *| undercloud | No host matched | | | As per the validation link, https://docs.openstack.org/tripleo-validations/wallaby/validations-pre-intr… check-network-gateway If gateway in undercloud.conf is different from local_ip, verify that the gateway exists and is reachable Observation - In my case IP specified in local_ip and gateway, both are pingable, but still this error is being observed ctlplane-ip-range¶ <https://docs.openstack.org/tripleo-validations/wallaby/validations-pre-intr…> Check the number of IP addresses available for the overcloud nodes. Verify that the number of IP addresses defined in dhcp_start and dhcp_end fields in undercloud.conf is not too low. - ctlplane_iprange_min_size: 20 Observation - In my case I have defined more than 20 IPs Similarly for disk related issue, I have dedicated 100 GB space in /var and / Filesystem Size Used Avail Use% Mounted on devtmpfs 12G 0 12G 0% /dev tmpfs 12G 84K 12G 1% /dev/shm tmpfs 12G 8.7M 12G 1% /run tmpfs 12G 0 12G 0% /sys/fs/cgroup /dev/mapper/cl-root 100G 2.5G 98G 3% / /dev/mapper/cl-home 47G 365M 47G 1% /home /dev/mapper/cl-var 103G 1.1G 102G 2% /var /dev/vda1 947M 200M 747M 22% /boot tmpfs 2.4G 0 2.4G 0% /run/user/0 tmpfs 2.4G 0 2.4G 0% /run/user/1000 Despite setting al the parameters, still I am not able to pass pre-introspection checks. *"NO Host Matched" *is found in the table. Regards Anirudh Gupta

2 3

[neutron] OVN and dynamic routing
by Francois 12 Oct '21

12 Oct '21

Hello Neutron! I am looking into running stacks with OVN on a leaf-spine network, and have some floating IPs routed between racks. Basically each rack is assigned its own set of subnets. Some VLANs are stretched across all racks: the provisioning VLAN used by tripleo to deploy the stack, and the VLANs for the controllers API IPs. However, each tenant subnet is local to a rack: for example each OVN chassis has a ovn-encap-ip with an IP of the tenant subnet of its own rack. Traffic between 2 racks is sent to a spine, and leaves and spines run some eVPN-like thing: each pair of ToR is a vtep, traffic is encapsulated as VXLAN, and routes between vteps are exchanged with BGP. I am looking into supporting floating IPs in there: I expect floating IPs to be able to move between racks, as such I am looking into publishing the route for a FIP towards an hypervisor, through BGP. Each fip is a /32 subnet with an hypervisor tenant's IP as next hop. It seems there are several ideas to achieve this (it was discussed [before][1] in ovs conference) - using [neutron-dynamic-routing][2] - that seems to have some gaps for OVN. It uses os-ken to talk to switches and exchange routes - using [OVN BGP agent][3] that uses FRR, it seems there is a related [RFE][4] for integration in tripleo There is btw also a [BGPVPN][5] project (it does not match my usecase as far as I tried to understand it) that also has some code that talks BGP to switches, already integrated in tripleo. For my tests, I was able to use the neutron-dynamic-routing project (almost) as documented, with a few changes: - for traffic going from VMs to outside the stack, the hypervisor was trying to resolve the "gateway of fIPs" with ARP request which does not make any sense. I created a dummy port with the mac address of the virtual router of the switches: ``` $ openstack port list --mac-address 00:1c:73:00:00:11 -f yaml - Fixed IP Addresses: - ip_address: 10.64.254.1 subnet_id: 8f37 ID: 4028 MAC Address: 00:1c:73:00:00:11 Name: lagw Status: DOWN ``` this prevent the hypervisor to send ARP requests to a non existent gateway - for traffic coming back, we start the neutron-bgp-dragent agent on the controllers. We create the right bgp speaker, peers, etc. - neutron-bgp-dragent seems to work primarily with ovs ml2 plugin, it selects fips and join with ports owned by a "floatingip_agent_gateway" which does not exist on OVN. We can define ourselves some ports so that the dragent is able to find the tenant IP of a host: ``` openstack port create --network provider --device-owner network:floatingip_agent_gateway --host cpu35d.cloud --fixed-ip ip-address=10.64.245.102 ag2 ``` - when creating a floating IP and assigning a port to it, Neutron reads changes from OVN SB and fills the binding information into the port: ``` $ openstack port show -c binding_host_id `openstack floating ip show 10.64.254.177 -f value -c port_id` +-----------------+----------------------------------------+ | Field | Value | +-----------------+----------------------------------------+ | binding_host_id | cpu35d.cloud | +-----------------+----------------------------------------+ ``` this allows the dragent to publish the route for the fip ``` $ openstack bgp speaker list advertised routes bgpspeaker +------------------+---------------+ | Destination | Nexthop | +------------------+---------------+ | 10.64.254.177/32 | 10.64.245.102 | +------------------+---------------+ ``` - traffic reaches the hypervisor but (for reason I don't understand) I had to add a rule ``` $ ip rule 0: from all lookup local 32765: from all iif vlan1234 lookup ovn 32766: from all lookup main 32767: from all lookup default $ ip route show table ovn 10.64.254.177 dev vlan1234 scope link ``` so that the traffic coming for the fip is not immediately discarded by the hypervisor (it's not an ideal solution but it is a workaround that makes my one fIP work!) So all in all it seems it would be possible to use the neutron-dynamic-routing agent, with some minor modifications (eg: to also publish the fip of the OVN L3 gateway router). I am wondering whether I have overlooked anything, and if such kind of deployment (OVN + neutron dynamic routing or similar) is already in use somewhere. Does it make sense to have a RFE for better integration between OVN and neutron-dynamic-routing? Thanks Francois [1]: https://www.openvswitch.org/support/ovscon2020/slides/OVS-CONF-2020-OVN-WIT… [2]: https://docs.openstack.org/neutron/latest/admin/config-bgp-dynamic-routing.… [3]: https://ltomasbo.wordpress.com/2021/02/04/openstack-networking-with-bgp/ [4]: https://specs.openstack.org/openstack/tripleo-specs/specs/wallaby/triplo-bg… [5]: https://github.com/openstack/tripleo-heat-templates/blob/master/environment…

4 5

After rebuilding Queens clusters on Train, race condition causes Designate record creation to fail
by Braden, Albert 12 Oct '21

12 Oct '21

Hello everyone. It's great to be back working on OpenStack again. I'm at Verisign now. I can hardly describe how happy I am to have an employer that does not attach nonsense to the bottom of my emails! We are rebuilding our clusters from Queens to Train. On the new Train clusters, customers are complaining that deleting a VM and then immediately creating a new one with the same name (via Terraform for example) intermittently results in a missing DNS record. We can duplicate the issue by building a VM with terraform, tainting it, and applying. Before applying the change, we see the DNS record in the recordset: $ openstack recordset list dva3.vrsn.com. --all |grep openstack-terra | f9aa73c1-84ba-4854-be71-cbb616de672c | 8d1c84082a044a53abe0d519ed9e8c60 | openstack-terra-test-host.dev-ostck.dva3.vrsn.com. | A | 10.220.4.89 | ACTIVE | NONE | $ and we can pull it from the DNS server on the controllers: $ for i in {1..3}; do dig @dva3-ctrl${i}.cloud.vrsn.com -t axfr dva3.vrsn.com. |grep openstack-terra; done openstack-terra-test-host.dev-ostck.dva3.vrsn.com. 1 IN A 10.220.4.89 openstack-terra-test-host.dev-ostck.dva3.vrsn.com. 1 IN A 10.220.4.89 openstack-terra-test-host.dev-ostck.dva3.vrsn.com. 1 IN A 10.220.4.89 After applying the change, we don't see it: $ openstack recordset list dva3.vrsn.com. --all |grep openstack-terra | f9aa73c1-84ba-4854-be71-cbb616de672c | 8d1c84082a044a53abe0d519ed9e8c60 | openstack-terra-test-host.dev-ostck.dva3.vrsn.com. | A | 10.220.4.89 | ACTIVE | NONE | $ $ for i in {1..3}; do dig @dva3-ctrl${i}.cloud.vrsn.com -t axfr dva3.vrsn.com. |grep openstack-terra; done $ openstack recordset list dva3.vrsn.com. --all |grep openstack-terra $ We see this in the logs: 2021-10-09 01:53:44.307 27 ERROR oslo_messaging.notify.dispatcher oslo_db.exception.DBDuplicateEntry: (pymysql.err.IntegrityError) (1062, "Duplicate entry 'c70e693b4c47402db088c43a5a177134-openstack-terra-test-host.de...' for key 'unique_recordset'") 2021-10-09 01:53:44.307 27 ERROR oslo_messaging.notify.dispatcher [SQL: INSERT INTO recordsets (id, version, created_at, zone_shard, tenant_id, zone_id, name, type, ttl, reverse_name) VALUES (%(id)s, %(version)s, %(created_at)s, %(zone_shard)s, %(tenant_id)s, %(zone_id)s, %(name)s, %(type)s, %(ttl)s, %(reverse_name)s)] 2021-10-09 01:53:44.307 27 ERROR oslo_messaging.notify.dispatcher [parameters: {'id': 'dbbb904c347241a791aa01ca33a87b23', 'version': 1, 'created_at': datetime.datetime(2021, 10, 9, 1, 53, 44, 182652), 'zone_shard': 3184, 'tenant_id': '8d1c84082a044a53abe0d519ed9e8c60', 'zone_id': 'c70e693b4c47402db088c43a5a177134', 'name': 'openstack-terra-test-host.dev-ostck.dva3.vrsn.com.', 'type': 'A', 'ttl': None, 'reverse_name': '.moc.nsrv.3avd.kctso-ved.tsoh-tset-arret-kcatsnepo'}] It appears that Designate is trying to create the new record before the deletion of the old one finishes. Is anyone else seeing this on Train? The same set of actions doesn't cause this error in Queens. Do we need to change something in our Designate config, to make it wait until the old records are finished deleting before attempting to create the new ones?

2 6

[Octavia] Can not create LB on SRIOV network
by Zhang, Jing C. (Nokia - CA/Ottawa) 12 Oct '21

12 Oct '21

I can not create Octavia LB on SRIOV network in Train. I went to Octavia story board, did a search but was unable to figure out (the story for SRIOV...). I left a comment under this story, I re-post my questions there, hoping someone knows the answer. Thank you so much Jing https://storyboard.openstack.org/#!/story/2006886 Add VM SRIOV Interface Config Guide (Openstack) Hi, In Openstack train release, creating Octavia LB on SRIOV network fails. I come here to search if there is already a plan to add this support, and see this story. This story gives the impression that the capability is already supported, it is a matter of adding user guide. So, my question is, in which Openstack release, creating LB on SRIOV network is supported? Thank you

3 7

[Xena] It works!
by tjoen 12 Oct '21

12 Oct '21

Just testing every release since Train on an LFS system with Python-3.9 cryptography-35.0.0 is necessary Thank you all

3 5

[ironic] No weekly meeting on Oct18
by Iury Gregory 12 Oct '21

12 Oct '21

Hello ironicers! Just a reminder that on Oct 18, we won't have our weekly meeting because we have a session in the PTG. -- *Att[]'sIury Gregory Melo Ferreira * *MSc in Computer Science at UFCG* *Part of the ironic-core and puppet-manager-core team in OpenStack* *Software Engineer at Red Hat Czech* *Social*: https://www.linkedin.com/in/iurygregory *E-mail: iurygregory(a)gmail.com <iurygregory(a)gmail.com>*

1 0

[nova & libvirt] about attach disk on aarch64
by Jaze Lee 12 Oct '21

12 Oct '21

Hello, We run stein openstack in our environment. And already set libvirt value in nova.conf hw_machine_type=aarch64=virt num_pcie_ports = 15 We test and find sometimes disks can not be attached correctly. For example, Built vm with 6 disks, only three disk be there. The others will be inactive in virsh. No obvious error can be found in nova-compute, libvirt, vm os logs. libvirt:5.0.0 qemu:2.12.0-44 openstack-nova: 19.3.2 librbd1:ibrbd1-14.2.16-1.el7.aarch64 Any Suggestions? Thanks a lot

2 1

[wallaby][neutron] Distributed floating IP
by Ammad Syed 12 Oct '21

12 Oct '21

Hi, I am using openstack wallaby. I have seen an issue not sure if its a bug or configuration related issue. I am using ml2/ovn backend with distributed floating IP enabled. I have made my compute node 1 as a gateway chassis where the routers are scheduled. I have then created an instance and NATed a public IP. The instance deployed on compute 2. When I see the IP address via curl ipinfo.io it shows the floating IP that I have NATed. Then I migrated the instance to compute node 1. I had many ping drops for a couple of seconds then its back to normal. I have then seen the IP address via curl ipinfo.io. It showed me the SNAT IP address of router. Then I migrated the instance back to compute node 2, I had ping drops for 20 seconds and then the instance came back. I have seen the IP via curl, it showed the floating IP that I have nated with instance. Is it the expected behavior ? Ammad

2 2

[docs] Keystone docs missing for Xena
by Ben Nemec 12 Oct '21

12 Oct '21

Hey, I was just looking for the Keystone docs and discovered that they are not listed on https://docs.openstack.org/xena/projects.html. If I s/wallaby/xena/ on the wallaby version then it resolves, so it looks like the docs are published they just aren't included in the index for some reason. -Ben

2 1

[kuryr] Virtual PTG October 2021
by Maysa De Macedo Souza 12 Oct '21

12 Oct '21

Hello, I booked the following slots for Kuryr during the Yoga PTG: Oct 19 7-8 UTC and Oct 22 13-14 UTC. If you have any topic ideas you would like to discuss, please include them in the etherpad[1], also it would be interesting to include your name there if you plan to attend any Kuryr session. See you on the next PTG. Cheers, Maysa. [1] https://etherpad.opendev.org/p/kuryr-yoga-ptg

1 2

Restarting Openstack Victoria using kolla-ansible
by Karera Tony 12 Oct '21

12 Oct '21

Hello Team, I am trying to deploy openstack Victoria ..... Below I install kolla-ansible on the deployment server , I first clone the * git clone --branch stable/victoria https://opendev.org/openstack/kolla-ansible* but when I run the deployment without uncommenting openstack_release .. By default it deploys wallaby And when I uncomment and type victoria ...Some of the containers keep restarting esp Horizon Any idea on how to resolve this ? Even the kolla content that I use for deployment, I get it from the kolla-ansible directory that I cloned Regards Tony Karera

2 2

Edge sessions at the upcoming PTG
by Ildiko Vancsa 11 Oct '21

11 Oct '21

Hi, I’m reaching out to you to share the agenda of the OpenInfra Edge Computing Group that we put together for the upcoming PTG. I would like to invite everyone who is interested in discussing edge challenges and finding solutions! We summarized our plans for the event in a short blog post to give some context to each of the topic that we picked to discuss in details. We picked key areas like security, networking, automation and tools, containers and more: https://superuser.openstack.org/articles/the-project-teams-gathering-is-com… Our etherpad for the sessions: https://etherpad.opendev.org/p/ecg-ptg-october-2021 Please let me know if you have any questions about the agenda or topics. Thanks and Best Regards, Ildikó

1 2

[TripleO] PTG proposed schedule
by James Slagle 11 Oct '21

11 Oct '21

I have put up a tentative schedule in the etherpad for each of our proposed sessions: https://etherpad.opendev.org/p/tripleo-yoga-topics If there are any scheduling conflicts with other sessions, please let me know and we will do our best to adjust. We also have time to add a 4th session on Monday, Tuesday, Wednesday, so if you have some last minute topics, feel free to add them. Thanks, and looking forward to seeing (virtually) everyone next week! -- -- James Slagle --

1 0

OpenInfra Live - October 14, 2021 at 9am CT
by Ashlee Ferguson 11 Oct '21

11 Oct '21

Hi everyone, This week’s OpenInfra Live episode is brought to you by the OpenStack community. Networking is complex, and Neutron is one of the most difficult parts of OpenStack to scale. In this episode of the Large Scale OpenStack show, we will explore early architectural choices you can make, recommended drivers, features to avoid if your ultimate goal is to scale to a very large deployment. Join OpenStack developers and operators as they share their Neutron scaling best practices. Episode: Large Scale OpenStack: Neutron scaling best practices Date and time: October 14, 2021 at 9am CT (1400 UTC) You can watch us live on: YouTube: https://www.youtube.com/watch?v=4ZLqILbLIpQ <https://www.youtube.com/watch?v=4ZLqILbLIpQ> LinkedIn: https://www.linkedin.com/video/event/urn:li:ugcPost:6851936962715222016/ <https://www.linkedin.com/video/event/urn:li:ugcPost:6851936962715222016/> Facebook: https://www.facebook.com/104139126308032/posts/4407685335953368/ <https://www.facebook.com/104139126308032/posts/4407685335953368/> WeChat: recording will be posted on OpenStack WeChat after the live stream Speakers: Thierry Carrez (OpenInfra Foundation) David Comay (Bloomberg) Ibrahim Derraz (Exaion) Slawek Kaplonski (Red Hat) Lajos Katona (Ericsson) Mohammed Naser (VEXXHOST) Michal Nasiadka (StackHPC) Have an idea for a future episode? Share it now at ideas.openinfra.live <https://openinfrafoundation.formstack.com/forms/openinfralive>. Register now for OpenInfra Live: Keynotes, a special edition of OpenInfra Live on November 17-18th starting at 1500 UTC: https://openinfralivekeynotes.eventbrite.com/ <https://openinfralivekeynotes.eventbrite.com/> Thanks! Ashlee

1 0

[Barbican] HSM integration with FIPS Operation Enabled
by rajiv mucheli 11 Oct '21

11 Oct '21

Hi, I looked into the available documentation and article but i had no luck validating if Openstack Barbican integration with FIPS Operation mode Enabled works. Any suggestions? The below barbican backend guide shares the available plugins with HSM : https://docs.openstack.org/security-guide/secrets-management/barbican.html Does Barbican now support module generated IV ? which is required for FIPS support in Thales A790 HSM. Regards, Rajiv

1 0

[all][PTG] October 2021 - PTGbot, Etherpads, & IRC
by Ashlee Ferguson 11 Oct '21

11 Oct '21

Hello! We just wanted to take a second to point out a couple things that have changed since the last PTG as we all get ready for the next PTG. Firstly, the PTGbot is up to date and ready to go *at it's new URL[1]*-- as are the autogenerated etherpads! There you can find the schedule page, etherpads, etc. If you/your team have already created an etherpad, please feel free to use the PTGbot to override the default, auto-generated one[2]. Secondly, just a reminder that with the migration to being more inclusive of all Open Infrastructure Foundation projects we will be using the #openinfra-events IRC channel on the OFTC network! And again, if you haven't yet, please register[3]! Its free and important for getting the zoom information, etc. Thanks! Ashlee (ashferg) and Kendall (diablo_rojo) [1] PTGbot: https://ptg.opendev.org/ [2] PTGbot Etherpad Override Command: https://opendev.org/openstack/ptgbot/src/branch/master/README.rst#etherpad [3] PTG Registration: https://openinfra-ptg.eventbrite.com

1 0

[neutron] Bug deputy, report of week 2021-10-4
by Rodolfo Alonso Hernandez 11 Oct '21

11 Oct '21

Hello Neutrinos: This is the last week report: High: - https://bugs.launchpad.net/neutron/+bug/1946187: HA routers not going to be "primary" at all. Unassigned. - https://bugs.launchpad.net/neutron/+bug/1931696. ovs offload broken from neutron 16.3.0 onwards. Assigned. - https://review.opendev.org/c/openstack/neutron/+/812641 - https://bugs.launchpad.net/neutron/+bug/1946318: [ovn] Memory consumption grows over time due to MAC_Binding entries in SB database. Assigned. - https://review.opendev.org/c/openstack/neutron/+/812805 - https://bugs.launchpad.net/neutron/+bug/1946456: [OVN] Scheduling of HA Chassis Group for external port does not work when no chassis has 'enable-chassis-as-gw' option set. Unassigned. - https://bugs.launchpad.net/neutron/+bug/1946588: [OVN]Metadata get warn logs after boot instance server about "MetadataServiceReadyWaitTimeoutException". Assigned. - https://review.opendev.org/c/openstack/neutron/+/813376 Medium: - https://bugs.launchpad.net/neutron/+bug/1946186: Fullstack test neutron.tests.fullstack.test_l3_agent.TestHAL3Agent.test_router_fip_qos_after_admin_state_down_up failing intermittently. Unassigned. - https://bugs.launchpad.net/neutron/+bug/1946479: [OVN migration] qr- interfaces and trunk subports aren't cleaned after migration to ML2/OVN. Assigned. - https://review.opendev.org/c/openstack/neutron/+/813186 - https://review.opendev.org/c/openstack/neutron/+/813187 - https://bugs.launchpad.net/neutron/+bug/1946589: [OVN] localport might not be updated when create multiple subnets for its network. Unassigned. Low: - https://bugs.launchpad.net/neutron/+bug/1945954: [os-ken] Missing subclass for SUBTYPE_RIB_*_MULTICAST in mrtlib. Assigned. - https://review.opendev.org/c/openstack/os-ken/+/812293 - https://bugs.launchpad.net/neutron/+bug/1946023: [OVN] Check OVN Port_Group compatibility. Assigned. - https://review.opendev.org/c/openstack/neutron/+/812176 - https://bugs.launchpad.net/neutron/+bug/1946250: Neutron API reference should explain the intended behavior of port security extension. Unassigned. Whishlist: - https://bugs.launchpad.net/neutron/+bug/1946251: [RFE] API: allow to disable anti-spoofing but not SGs. Assigned. Duplicated: - https://bugs.launchpad.net/neutron/+bug/1945646: Nova fails to live migrate instance with upper-case port MAC Incomplete: - https://bugs.launchpad.net/neutron/+bug/1946535: Segment plugin disabled delete network will raise exception. - Maybe “segments” plugin is loaded in this deployment. - https://bugs.launchpad.net/neutron/+bug/1946624: OVSDB Error: Transaction causes multiple rows in "Port_Group" table to have identical values. - Maybe duplicated of https://bugs.launchpad.net/neutron/+bug/1938766. Regards.

1 0

[kolla] parent tags
by Sam Morrison 11 Oct '21

11 Oct '21

I’m trying to be able to build a projects container without having to rebuild the parents which have different tags. The workflow I’m trying to achieve is: Build base and openstack-base with a tag of wallaby Build a container image for barbican with a tag of the version of barbican that is returned when doing `git describe` Build a container image for nova with a tag of the version of barbican that is returned when doing `git describe` etc.etc. I don’t seem to be able to do this without having to also build a new base and openstack-base with the same tag which is slow and also means a lot of disk space. Just wondering how other people do this sort of stuff? Any ideas? Thanks, Sam

3 4

[Horizon] Yoga PTG Schedule
by vishal manchanda 10 Oct '21

10 Oct '21

Hello everyone, I have booked the below slots for Horizon Yoga PTG: Monday, October 18, 15:00 - 17:00 UTC Tuesday, October 19, 15:00 - 17:00 UTC Wednesday, October 20, 16:00 - 17:00 UTC I have also created Etherpad to collect topics for ptg discussion [1]. Feel free to add your topics. Please Let me know in case you have any topics to discuss and the above schedule doesn't work for you and We will see how to manage that. Also Please register for PTG if you haven't done it yet [2]. Thank you, Vishal Manchanda(irc: vishalmanchanda) [1] https://etherpad.opendev.org/p/horizon-yoga-ptg [2] https://www.eventbrite.com/e/project-teams-gathering-october-2021-tickets-1…

1 0

[sdk]: Remove volumes stuck in error deleting status
by dmeng 09 Oct '21

09 Oct '21

Hello there, Hope everything is going well. I would like to know if there is any method that could remove the volume stuck in the "error-deleting" status? We are using the chameleon openstack cloud but we are not the admin user there, so couldn't use the "cinder force-delete" or "cinder reset-state" command. Wondering if there is any other method we could use to remove those volumes in our own project? And also wondering what might cause this "error-deleting" problem? We use openstacksdk block storage service, "cinder.delete_volume()" method to remove volumes, and it works fine before. Thanks and have a great day! Catherine

2 1

Why is kolla-kubernetes not maintained anymore？
by fusco lu 09 Oct '21

09 Oct '21

hi,everyone Can you tell me the reason for not being maintained?

1 0

[kolla][wallaby][cinder] netapp driver failed do create volume from images
by Ignazio Cassano 09 Oct '21

09 Oct '21

Hello, I've just updated my kolla wallaby with latest images. When I create volume from image on ceph it works. When I create volume from image on nfs netapp ontap, it does not work. The following is reported in cinder-volume.log: 2021-10-08 13:11:20.590 26 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.8/site-packages/cinder/volume/flows/manager/create_volume.py", line 950, in _create_from_image_cache_or_download 2021-10-08 13:11:20.590 26 ERROR oslo_messaging.rpc.server model_update = self._create_from_image_download( 2021-10-08 13:11:20.590 26 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.8/site-packages/cinder/volume/flows/manager/create_volume.py", line 766, in _create_from_image_download 2021-10-08 13:11:20.590 26 ERROR oslo_messaging.rpc.server volume_utils.copy_image_to_volume(self.driver, context, volume, 2021-10-08 13:11:20.590 26 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.8/site-packages/cinder/volume/volume_utils.py", line 1158, in copy_image_to_volume 2021-10-08 13:11:20.590 26 ERROR oslo_messaging.rpc.server raise exception.ImageCopyFailure(reason=ex.stderr) 2021-10-08 13:11:20.590 26 ERROR oslo_messaging.rpc.server cinder.exception.ImageCopyFailure: Failed to copy image to volume: qemu-img: /var/lib/cinder/mnt/55fcb53b884ca983ed3d6fa8aac57810/volume-68fd6214-c24a-4104-ae98-e9d0b60aa136: error while converting raw: Failed to lock byte 101 Any help please ? Ignazio

2 7

[all][tc] What's happening in Technical Committee: summary 8th Oct, 21: Reading: 5 min
by Ghanshyam Mann 08 Oct '21

08 Oct '21

Hello Everyone, Here is this week's summary of the Technical Committee activities. 1. TC Meetings: ============ * TC this week video meeting held on Oct 7th Thursday. * Most of the meeting discussions are summarized below (Completed or in-progress activities section). We forgot to record the meeting, an apology for that. I am summarizing each topic discussion, or you can also check some summary and transcript (these are autogenerated and not so perfect, though) @ - https://meetings.opendev.org/meetings/tc/2021/tc.2021-10-07-15.01.log.html - https://review.opendev.org/c/openstack/governance/+/813112/1/reference/tc-m… * We will have next week's IRC meeting on Oct 14th, Thursday 15:00 UTC, feel free the topic in agenda[1] by Oct 13th. 2. What we completed this week: ========================= * Added the cinder-netapp charm to Openstack charms[2] * Retired puppet-freezer[3] 3. Activities In progress: ================== TC Tracker for Xena cycle ------------------------------ * TC is using the etherpad[4] for Xena cycle working item. We will be checking and updating the status biweekly on the same etherpad. * Current status is: 9 completed, 3 to-be-discussed in PTG, 1 in-progress Open Reviews ----------------- * Four open reviews for ongoing activities[5]. Place to maintain the external hosted ELK, E-R, O-H services ------------------------------------------------------------------------- * We continue the discussion[6] on final checks and updates from Allison. Below is the summary: * Allison updated on the offer of the donated credits (45k/year from AWS) to run the ELK services. * Current ELK stack will be migrated on OpenSearch (an open source fork of Elasticsearch) cluster on AWS managed services. * We discussed and agreed to start/move these ELK service work under TACT SIG with the help of Daniel Pawlik, Ross Tomlinson, and Allison (along with Jeremy, Clark as backup/helping in migration). * Allison will continue work on setting up the accounts. * A huge thanks to Allison for driving and arranging the required resources. Add project health check tool ----------------------------------- * Using stats of review/code should not be the only criteria to decide the project health as it depends on many other factors, including the nature of project. * We agreed to use the generated stats only as an early warning tool and not to publish those anywhere which can be wrongly interpreted as project health or so. * We will continue discussing it in PTG for the next steps on this and what to do on TC liaison things. * Meanwhile, we are reviewing Rico proposal on collecting stats tool[7]. Stable Core team process change --------------------------------------- * Current proposal is under review[8]. Feel free to provide early feedback if you have any. Call for 'Technical Writing' SIG Chair/Maintainers ---------------------------------------------------------- * As you might have read in the email from Elod[9], Stephen, who is the current chair for this SIG is not planning to continue to chair. * This SIG has accomplished the work for what it was formed, and now most of the documentation are managed on projects side. TC agreed to move this SIG to complete state and move the repos under TC (tc members will be added to core group in those repos). * Any advisory work on documentation which is what this SIG was doing, will be handle in TC. TC tags analysis ------------------- * Operator feedback is asked on open infra newsletter too, and we will continue the discussion in PTG and will take the final decision based on feedback we receive, if any[10]. Project updates ------------------- * Retiring js-openstack-lib [11] Yoga release community-wide goal ----------------------------------------- * Please add the possible candidates in this etherpad [12]. * Current status: "Secure RBAC" is selected for Yoga cycle[13]. PTG planning ---------------- * We are collecting the PTG topics in etherpad[14], feel free to add any topic you would like to discuss. * We discussed the live stream of one of the TC PTG sessions like we did last time. Once we have more topics in etherpad, then we can select the appropriate one. Test support for TLS default: ---------------------------------- * Rico has started a separate email thread over testing with tls-proxy enabled[15], we encourage projects to participate in that testing and help to enable the tls-proxy in gate testing. 4. How to contact the TC: ==================== If you would like to discuss or give feedback to TC, you can reach out to us in multiple ways: 1. Email: you can send the email with tag [tc] on openstack-discuss ML[16]. 2. Weekly meeting: The Technical Committee conduct a weekly meeting every Thursday 15 UTC [17] 3. Office hours: The Technical Committee offers a weekly office hour every Tuesday at 0100 UTC [18] 4. Ping us using 'tc-members' nickname on #openstack-tc IRC channel. [1] https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting [2] https://review.opendev.org/c/openstack/governance/+/809011 [3] https://review.opendev.org/c/openstack/governance/+/808679 [4] https://etherpad.opendev.org/p/tc-xena-tracke [5] https://review.opendev.org/q/projects:openstack/governance+status:open [6] https://etherpad.opendev.org/p/elk-service-maintenance-plan [7] https://review.opendev.org/c/openstack/governance/+/810037 [8] https://review.opendev.org/c/openstack/governance/+/810721 [9] http://lists.openstack.org/pipermail/openstack-discuss/2021-October/025161.… [10] https://governance.openstack.org/tc/reference/tags/index.html [11] https://review.opendev.org/c/openstack/governance/+/798540 [12] https://review.opendev.org/c/openstack/governance/+/807163 [13] https://etherpad.opendev.org/p/y-series-goals [14] https://etherpad.opendev.org/p/tc-yoga-ptg [15] http://lists.openstack.org/pipermail/openstack-discuss/2021-June/023000.html [16] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-discuss [17] http://eavesdrop.openstack.org/#Technical_Committee_Meeting [18] http://eavesdrop.openstack.org/#Technical_Committee_Office_hours -gmann

1 0

Introducing Hubtty, a Gertty fork for Github code reviews
by Martin André 08 Oct '21

08 Oct '21

Hi all, First off, apologies if this isn't the right forum, this has nothing to do with OpenStack development. I'm trying to reach out to the many Gertty users hiding here who might want a similar tool for their Github code reviews. I'm happy to announce the first release of Hubtty [1], a fork of Gertty that I adapted to the Github API and workflow. It has the same look and feel but differs in a few things I detailed in the release changelog [2]. This first version focuses on porting Gertty to Github and works reasonably well. Myself and other intrepid developers already use it every day and I personally find it very convenient for managing incoming PR reviews. In the coming versions I'd like to integrate better with the Github features and improve UX. Try it with `pip install hubtty` and let me know what you think of it. Note that Hubtty can't submit reviews to repositories for which the parent organization has enabled third-party application restrictions without explicitly allowing hubtty [3]. I'm working around the issue by using a token generated by the `gh` app. Martin [1] https://github.com/hubtty/hubtty [2] https://github.com/hubtty/hubtty/blob/v0.1/CHANGELOG.md [3] https://github.com/hubtty/hubtty/issues/20

1 0