November 2021 - openstack-discuss

[all] Stable Core Team Process changed
by Ghanshyam Mann 10 Nov '21

10 Nov '21

Hello Everyone, We discussed this in many PTG (Shanghai and in Xena) to decentralize the stable branch process and make it more distributed towards projects. The technical Committee has merged the resolution on this and I thought of putting it on ML in case you have not read it. With the new process, the individual project teams can manage their own stable core team in the same way that the regular core team. Also, project teams will be empowered to create/enforce polices that best meet the needs of that project. Existing stable policies stay valid and will serve the purpose as it is doing currently. And if you have any questions or seeking guidance regarding stable policies, you can reach out to the existing "Extended Maintenance" SIG which will be renamed to "Stable Maintenance". [1] https://governance.openstack.org/tc/resolutions/20210923-stable-core-team.h… -gmann

1 0

[all][tc] Technical Committee next weekly meeting on Nov 11th at 1500 UTC
by Ghanshyam Mann 10 Nov '21

10 Nov '21

Hello Everyone, Technical Committee's next weekly meeting is scheduled for Nov 11th at 1500 UTC. If you would like to add topics for discussion, please add them to the below wiki page by Wednesday, Nov 10th, at 2100 UTC. https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting -gmann

1 1

[cinder][kolla][OSA][release] Xena cycle-trailing release deadline
by Előd Illés 10 Nov '21

10 Nov '21

Hello teams with deliverables following the cycle-trailing release model! This is just a reminder to wrap up your trailing deliverables for Xena. A few cycles ago the deadline for cycle-trailing projects was extended to give more time. The deadline for Xena is *16 December, 2021* [1]. If things are ready sooner than that though, all the better for our downstream consumers. For reference, the following cycle-trailing deliverables will need final releases at some point until the above deadline: cinderlib kayobe kolla-ansible kolla openstack-ansible-roles openstack-ansible Thanks! Előd Illés irc: elodilles [1] https://releases.openstack.org/yoga/schedule.html#y-cycle-trail

2 1

[largescale-sig] Next meeting: Nov 10th, 15utc
by Thierry Carrez 10 Nov '21

10 Nov '21

Hi everyone, The Large Scale SIG meeting is back this Wednesday in #openstack-operators on OFTC IRC, at 15UTC. It will be chaired by Belmiro Moreira. You can doublecheck how that time translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20211110T15 Feel free to add topics to our agenda at: https://etherpad.openstack.org/p/large-scale-sig-meeting Regards, -- Thierry Carrez

2 1

[all][tc] Continuing the RBAC PTG discussion
by Ghanshyam Mann 10 Nov '21

10 Nov '21

Hello Everyone, As decided in PTG, we will continue the RBAC discussion from where we left in PTG. We will have a video call next week based on the availability of most of the interested members. Please vote your available time in below doodle vote by Thursday (or Friday morning central time). - https://doodle.com/poll/6xicntb9tu657nz7 NOTE: this is not specific to TC or people working in RBAC work but more to wider community to get feedback and finalize the direction (like what we did in PTG session). Meanwhile, feel free to review the lance's updated proposal for community-wide goal - https://review.opendev.org/c/openstack/governance/+/815158 -gmann

1 3

[cinder] Bug deputy report for week of 11-10-2021
by Sofia Enriquez 10 Nov '21

10 Nov '21

This is a bug report from 10-03-2021 to 11-10-2021. Agenda: https://etherpad.opendev.org/p/cinder-bug-squad-meeting ----------------------------------------------------------------------------------------- Medium - https://bugs.launchpad.net/cinder/+bug/1950291 tempest-integrated-compute-centos-8-stream fails with version conflict in boto. Unassigned. Incomplete - https://bugs.launchpad.net/cinder/+bug/1950134 InstanceLocality filter use results in AttributeError: 'Client' object has no attribute 'list_extensions'. Unassigned. Invalid - https://bugs.launchpad.net/cinder/+bug/1950128 NFS backend initialisation fails because an immutable directory exists. Unassigned. -- Sofía Enriquez she/her Software Engineer Red Hat PnT <https://www.redhat.com> IRC: @enriquetaso @RedHat <https://twitter.com/redhat> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc> <https://www.redhat.com>

1 0

OVN with SSL
by nabeel.tariq＠rapidcompute.com 10 Nov '21

10 Nov '21

Hi, We have configured OVN with SSL which is working while using SSL from third party. When we implement self-signed certificate, it shows certificate verification failed in logs. ERROR LOG: 2021-11-10 10:11:14.703 88854 ERROR neutron.service OpenSSL.SSL.Error: [('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')] By using openssl verify command selfsigned server is showing verified. openssl verify -verbose -CAfile <self-signed-cacertificate>.pem <main>.crt

1 0

[sdk]: Get server fault message
by dmeng 10 Nov '21

10 Nov '21

Hello there, Hope everything is going well. I'm wondering if there is any method that could show the error message of a server whose status is "ERROR"? Like from openstack cli, "openstack server show server_name", if the server is in "ERROR" status, this will return a field "fault" with a message shows the error. I tried the compute service get_server and find_server, but neither of them show the error messages. Thanks and have a great day! Catherine

2 1

[puppet] Propose retiring puppet-senlin
by Takashi Kajinami 09 Nov '21

09 Nov '21

Hello, I remember I raised a similar discussion recently[1] but we need the same for a different module. puppet-selin was introduced back in 2018, but the module has had only the portion made by cookiecutter and has no capability to manage fundamental resources yet. Because we haven't seen any interest in creating implementations to support even basic usage, I'll propose retiring this module. I'll be open for any feedback for a while, and will propose a series of patches for retirement if no concern is raised here for one week. Thank you, Takashi [1] http://lists.openstack.org/pipermail/openstack-discuss/2021-September/02468… [2] https://opendev.org/openstack/puppet-senlin

2 2

[keystone] failed auth takes a while
by Tony Liu 09 Nov '21

09 Nov '21

Hi, I am using Keystone 17.0.0 with Ussuri. When issue a request by openstack cli (eg. network list) with wrong password, it takes 1+ minute to get auth failure 401 back. After correct the password, for the first request, it still takes 1+ minute to return success. After that, all following request is as fast as usual, around 1s. "openstack user password set" also takes that much time to return success. Any clues? Thanks! Tony

1 0

[qa] Moving office hour one hour later
by Martin Kopec 09 Nov '21

09 Nov '21

Hi everyone, we have decided to move the weekly office hour (held on Tuesdays) one later to 15:00 UTC effective November 16th [1]. It was discussed during our last office hour [2]. [1] https://review.opendev.org/c/opendev/irc-meetings/+/817224 [2] https://meetings.opendev.org/meetings/qa/2021/qa.2021-11-09-14.00.log.html#… Regards, -- Martin Kopec Senior Software Quality Engineer Red Hat EMEA

1 0

[openstack-helm] No meeting tomorrow
by Gage Hugo 08 Nov '21

08 Nov '21

Hey team, Since there are no agenda items [0] for the IRC meeting tomorrow, the meeting is cancelled. Our next meeting will be November 16th. Thanks [0] https://etherpad.opendev.org/p/openstack-helm-weekly-meeting

1 0

Opendaylight integration Openstack
by Hojii GZNI 08 Nov '21

08 Nov '21

Hi everyone I am trying to use Opendaylight as an Openstack SDN controller but have this error for "mechanism_dirver". Xena Ubuntu 20.04 Opendaylight 8 /etc/neutron/plugins/ml2/ml2_conf.ini mechanism_drivers = opendaylight Neutron server log: CRITICAL neutron.plugins.ml2.managers [-] The following mechanism drivers were not found: {'opendaylight'} All configuration is in my Github[1] Regards, Hojat. [1]: https://github.com/hojat-gazestani/openstack

2 1

OpenInfra Live - November 11 at 9am CT
by Ashlee Ferguson 08 Nov '21

08 Nov '21

Hi everyone, This week’s OpenInfra Live episode is brought to you by the OpenStack Community. The 2021 User Survey shows that the footprint of OpenStack clouds grew by 66% over the last year, totaling over 25 million cores in production. This increase has been contributed by organizations of all sizes around the world. During this episode of OpenInfra Live, we are going to talk to operators from Kakao, LINE, Schwarz IT, NeCTAR and T-Systems about what’s causing this OpenStack growth at their organization. Episode: OpenStack Is Alive: Explosive Growth Among Production Deployments Date and time: November 11 at 9am CT (1500 UTC) You can watch us live on: YouTube: https://www.youtube.com/watch?v=RhMJO82lDxc <https://www.youtube.com/watch?v=RhMJO82lDxc> LinkedIn: https://www.linkedin.com/feed/update/urn:li:ugcPost:6862068514526756864 <https://www.linkedin.com/feed/update/urn:li:ugcPost:6862068514526756864> Facebook: https://www.facebook.com/104139126308032/posts/4493822407339660/ <https://www.facebook.com/104139126308032/posts/4493822407339660/> WeChat: recording will be posted on OpenStack WeChat after the live stream Speakers: Paul Coddington (ARDC Nectar) Reedip Banerjee (LINE) Yushiro Furukawa (LINE) Andrew Kong (Kakao) Nils Magnus (T-Systems) Adrian Seiffert (Schwarz) Marvin Titus (Schwarz) Carmel Walsh (ARDC Nectar) Have an idea for a future episode? Share it now at ideas.openinfra.live <https://openinfrafoundation.formstack.com/forms/openinfralive>. Register now for OpenInfra Live: Keynotes, a special edition of OpenInfra Live on November 17-18th starting at 1500 UTC: https://openinfralivekeynotes.eventbrite.com/ Thanks, Ashlee OpenInfra Foundation Community & Events ashlee(a)openinfra.dev

1 0

[ironic] Proposing Aija Jauntēva for sushy-core
by Iury Gregory 08 Nov '21

08 Nov '21

Hello everyone! I would like to propose Aija Jauntēva (irc: ajya) to be added to the sushy-core group. Aija has been in the ironic community for a long time, she has a lot of knowledge about redfish and is always providing good reviews. ironic-cores please vote with +/- 1. -- *Att[]'sIury Gregory Melo Ferreira * *MSc in Computer Science at UFCG* *Part of the ironic-core and puppet-manager-core team in OpenStack* *Software Engineer at Red Hat Czech* *Social*: https://www.linkedin.com/in/iurygregory *E-mail: iurygregory(a)gmail.com <iurygregory(a)gmail.com>*

8 8

[neutron] Neutron drivers Meeting - vote on time of the meeting
by Lajos Katona 08 Nov '21

08 Nov '21

Hi Neutrinos, As we discussed during the PTG, let's start a poll to see which time fits best the need of the team for the Neutron drivers meeting. I prepared a doodle, please check which time slot would be best for you: https://doodle.com/poll/6vdugxp7g54smdv6?utm_source=poll&utm_medium=link The dates for the doodle now for next week, but please ignore that. Lajos Katona (lajoskatona)

1 0

[kuryr] Using kuryr-kubernetes CNI without neutron agent(s)?
by Jason Anderson 08 Nov '21

08 Nov '21

Hello all, I’m interested in letting Neutron provide the network configuration frontend for networks realized on k8s kubelets. I have been reading a lot about kuryr-kubernetes and it looks like it fits the bill, but some of the older architecture diagrams I’ve seen indicate that OVS and the neutron-openvswitch-agent (or similar) must also run on the kubelet node. Is this still accurate? I am hoping to avoid this because my understanding is that running the OVS agent means giving the kubelet node access to RabbitMQ and potentially storing admin keystone creds on the node as well. Can kuryr-kubernetes work without such an agent co-located? Thanks! Jason Anderson --- Chameleon DevOps Lead Department of Computer Science, University of Chicago Mathematics and Computer Science, Argonne National Laboratory

2 5

[neutron] Bug deputy report (week starting on 2021-11-01)
by Bernard Cafarelli 08 Nov '21

08 Nov '21

Hey neutrinos, Now that we are past the biannual DST calendar mess, it is also time for a new bug deputy rotation! Here is the list of bugs reported for last week, kudos to Rodolfo for both reporting most of them and also having a fix for them! All bugs have assignees, almost have patches and some are just waiting for CI Critical * "neutron-tempest-plugin-scenario-ovn" job timing out frequently - https://bugs.launchpad.net/neutron/+bug/1949557 Change merged increasing timeout by ralonsoh: https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/816438 * "openstack-tox-py38" CI job is timing out frequently in gate - https://bugs.launchpad.net/neutron/+bug/1949704 Timeout change by ralonsoh in https://review.opendev.org/c/openstack/neutron/+/816631 * [CI] "neutron-ovs-rally-task" job failing due to an authentication problem - https://bugs.launchpad.net/neutron/+bug/1949945 Change to create keystone endpoint merged by ralonsoh: https://review.opendev.org/c/openstack/neutron/+/816792 High * [OVN] Stateless SG Extension Support - https://bugs.launchpad.net/neutron/+bug/1949451 Extension missing in the OVN supported extensions list, fix by Ihar https://review.opendev.org/c/openstack/neutron/+/816612 * "openstack-tox-py39" is timing out frequently - https://bugs.launchpad.net/neutron/+bug/1949476 Similar fix as py38 in https://review.opendev.org/c/openstack/neutron/+/816631 Medium * [OVS][QoS] Dataplane enforcement is limited to minimum bandwidth egress rule - https://bugs.launchpad.net/neutron/+bug/1949607 Patch in progress by ralonsoh: https://review.opendev.org/c/openstack/neutron/+/816530 * FIP ports count into quota as they get a project_id set - https://bugs.launchpad.net/neutron/+bug/1949767 Change in train bulk port binding, suggested fix https://review.opendev.org/c/openstack/neutron/+/816722 * [OVN] OVN mech driver does not map new segments - https://bugs.launchpad.net/neutron/+bug/1949967 WIP patch by ralonsoh https://review.opendev.org/c/openstack/neutron/+/816856 Low * [OVN] Check OVN support for stateless NAT - https://bugs.launchpad.net/neutron/+bug/1949494 Patch in progress by ralonsoh: https://review.opendev.org/c/openstack/neutron/+/816376 * [OVN] Check OVN support virtual port type - https://bugs.launchpad.net/neutron/+bug/1949496 Patch in progress by ralonsoh: https://review.opendev.org/c/openstack/neutron/+/816383 * direct-physical port creation fails with QoS minimum bandwidth rule - https://bugs.launchpad.net/neutron/+bug/1949877 Assigned to gibi -- Bernard Cafarelli

1 0

[neutron] Neutron Team meeting - vote on time of the meeting
by Lajos Katona 08 Nov '21

08 Nov '21

Hi Neutrinos As we discussed during the PTG, let's start a poll to see which time fits best the need of the team for the Neutron Team meeting. I prepared a doodle, please check which time slot would be best for you: https://doodle.com/poll/m973q9eyag8k385w?utm_source=poll&utm_medium=link The dates for the doodle now for next week, but please ignore that. Lajos Katona (lajoskatona)

1 0

[all][tc] What's happening in Technical Committee: summary 5th Nov, 21: Reading: 10 min
by Ghanshyam Mann 05 Nov '21

05 Nov '21

Hello Everyone, Here is this week's summary of the Technical Committee activities. 1. TC Meetings: ============ * TC this week IRC meeting held on Nov 5th Thursday. * Most of the meeting discussions are summarized below (Completed or in-progress activities section). Meeting full recording are available @ - https://www.youtube.com/watch?v=4bt6iNaR3oI - IRC chat summary (topics and links): https://meetings.opendev.org/meetings/tc/2021/tc.2021-11-04-15.02.log.html * Next week's meeting will be on IRC on Nov 11th, Thursday 15:00 UTC, feel free the topic on agenda[1] by Nov 10th. 2. What we completed this week: ========================= * Retired kolla-cli [2] * Removed oslo independent deliverables from stable policy[3] * Magnum PTL is changed from Feilong Wang to Spryos[4] 3. Activities In progress: ================== TC Tracker for Yoga cycle ------------------------------ * I have started the etherpad to collect the Yoga cycle targets for TC[5]. Open Reviews ----------------- * Eleven open reviews for ongoing activities[6]. RBAC discussion: continuing from PTG ---------------------------------------------- We had a discussion on Wed and sort out the many points especially on get-all-project resources or system and project scoped isolation. Complete notes are in this etherpad[7]. Lance is re-working on the goal and new implementation/details, feel free to review it for more feedback[8]. We will continue the discussion on next Wed Nov 10th same time[9], feel free to join for any additional query related to your project specific and we will also discuss about what all bits we can do in Yoga cycle and what all to move as next targets. Decouple the community-wide goals from cycle release ----------------------------------------------------------------- * As discussed in PTG, we are de-coupling the community-wide goals from release cycle so that we can improve the community-wide goal selection and its completion workflow where goals are multi-cycle like RBAC etc. * Proposal is up, please review and add your feedback[10]. Yoga release community-wide goal ----------------------------------------- * With the continuing the discussion on RBAC, we are re-working on the RBAC goal, please wait until we finalize the implementation[11] * There is one more goal proposal for 'FIPS compatibility and compliance'[12]. Adjutant need maintainers and PTLs ------------------------------------------- You might have seen the email[13] from Adrian to call the maintainer for Adjutant project, please reply to that email or here or on openstack-tc channel if you are interested to maintain this project. We will wait for next week also and if no-one shows up for help then we will start the retirement process. New project 'Skyline' proposal ------------------------------------ * We discussed it in TC PTG and there are few open points about python packaging, repos, and plugins plan which we are discussion on ML. * Still waiting from skyline team to work on the above points[14]. Updating the Yoga testing runtime ---------------------------------------- * As centos stream 9 is released, I have updated the Yoga testing runtime[15] with: 1. Add Debian 11 as tested distro 2. Change centos stream 8 -> centos stream 9 3. Bump lowest python version to test to 3.8 and highest to python 3.9 Stable Core team process change --------------------------------------- * Current proposal is under review[16]. Feel free to provide early feedback if you have any. * This is ready to merge and I will do that week early, feel free to add feedback if any. Merging 'Technical Writing' SIG Chair/Maintainers to TC ------------------------------------------------------------------ * Work to merge this SIG to TC is up for review[17]. * No response on usage and maintaining help for openstack/training-labs repo[18] and in TC meeting we decided to retire it next week. If you use or would like to maintain this, this is last chance to raise hand. TC tags analysis ------------------- * TC agreed to remove the framework and it is communicated in ML[19]. Project updates ------------------- * Retiring js-openstack-lib [20] 4. How to contact the TC: ==================== If you would like to discuss or give feedback to TC, you can reach out to us in multiple ways: 1. Email: you can send the email with tag [tc] on openstack-discuss ML[21]. 2. Weekly meeting: The Technical Committee conduct a weekly meeting every Thursday 15 UTC [22] 3. Office hours: The Technical Committee offers a weekly office hour every Tuesday at 0100 UTC [23] 4. Ping us using 'tc-members' nickname on #openstack-tc IRC channel. [1] https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting [2] https://review.opendev.org/c/openstack/governance/+/814603 [3] https://review.opendev.org/c/openstack/governance/+/816828 [4] https://review.opendev.org/c/openstack/governance/+/816431 [5] https://etherpad.opendev.org/p/tc-yoga-tracker [6] https://review.opendev.org/q/projects:openstack/governance+status:open [7] https://etherpad.opendev.org/p/policy-popup-yoga-ptg [8] https://review.opendev.org/c/openstack/governance/+/815158 [9] http://lists.openstack.org/pipermail/openstack-discuss/2021-November/025666… [10] https://review.opendev.org/c/openstack/governance/+/816387 [11] https://review.opendev.org/c/openstack/governance/+/815158 [12] https://review.opendev.org/c/openstack/governance/+/816587 [13] http://lists.openstack.org/pipermail/openstack-discuss/2021-October/025555.… [14] https://review.opendev.org/c/openstack/governance/+/814037 [15] https://review.opendev.org/c/openstack/governance/+/815851 [16] https://review.opendev.org/c/openstack/governance/+/810721 [17] https://review.opendev.org/c/openstack/governance/+/815869 [18] http://lists.openstack.org/pipermail/openstack-discuss/2021-October/025586.… [19] http://lists.openstack.org/pipermail/openstack-discuss/2021-October/025571.… [20] https://review.opendev.org/c/openstack/governance/+/807163 [21] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-discuss [22] http://eavesdrop.openstack.org/#Technical_Committee_Meeting [23] http://eavesdrop.openstack.org/#Technical_Committee_Office_hours -gmann

1 0

[docs] Double headings on every page
by Peter Matulis 04 Nov '21

04 Nov '21

Hi, I'm hitting an oddity in one of my projects where the titles of all pages show up twice. Example: https://docs.openstack.org/project-deploy-guide/charm-deployment-guide/wall… Source file is here: https://opendev.org/openstack/charm-deployment-guide/src/branch/master/depl… Does anyone see what can be causing this? It appears to happen only for the current stable release ('wallaby') and 'latest'. Thanks, Peter

5 6

[neutron] Drivers meeting - Friday 5.11.2021 - cancelled
by Lajos Katona 04 Nov '21

04 Nov '21

Hi Neutron Drivers! Due to the lack of agenda, let's cancel tomorrow's drivers meeting. See You on the meeting next week. Lajos Katona (lajoskatona)

1 0

[baremetal-sig][ironic] Tue Nov 9, 2021, 2pm UTC: Hardware burn-in
by Arne Wiebalck 04 Nov '21

04 Nov '21

Dear all, The Bare Metal SIG will meet next week on Tue Nov 9, 2021, at 2pm UTC on zoom. The meeting will feature a "topic-of-the-day" presentation by Emmanouil Bagakis (CERN) on "Hardware Burn-in with Ironic" As usual, all details on https://etherpad.opendev.org/p/bare-metal-sig Everyone is welcome! Cheers, Arne

1 0

[barbican] Simple Crypto Plugin kek issue
by Ammad Syed 03 Nov '21

03 Nov '21

Hi, I have installed barbican and using it with openstack magnum. When I am using the default kek describe in document below, works fine and magnum cluster creation goes successful. https://docs.openstack.org/barbican/latest/install/barbican-backend.html But when I generate a new kek with below command. python3 -c "from cryptography.fernet import Fernet ; key = Fernet.generate_key(); print(key)" and put it in barbican.conf, the magnum cluster failed to create and I see below logs in barbican. 2021-10-29 12:53:28.932 568554 INFO barbican.plugin.crypto.simple_crypto [req-aaac01e9-82af-421b-b85a-ff998d904972 ad702ac807f44c73a32a9b7a795b693c d782069f335041138f0cb141fde9933f - default default] Software Only Crypto initialized 2021-10-29 12:53:28.932 568554 DEBUG barbican.model.repositories [req-aaac01e9-82af-421b-b85a-ff998d904972 ad702ac807f44c73a32a9b7a795b693c d782069f335041138f0cb141fde9933f - default default] Getting session... get_session /usr/lib/python3/dist-packages/barbican/model/repositories.py:364 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers [req-aaac01e9-82af-421b-b85a-ff998d904972 ad702ac807f44c73a32a9b7a795b693c d782069f335041138f0cb141fde9933f - default default] Secret creation failure seen - please contact site administrator.: cryptography.fernet.InvalidToken 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers Traceback (most recent call last): 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/cryptography/fernet.py", line 113, in _verify_signature 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers h.verify(data[-32:]) 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/hmac.py", line 70, in verify 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers ctx.verify(signature) 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/hmac.py", line 76, in verify 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers raise InvalidSignature("Signature did not match digest.") 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers cryptography.exceptions.InvalidSignature: Signature did not match digest. 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers During handling of the above exception, another exception occurred: 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers Traceback (most recent call last): 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/barbican/api/controllers/__init__.py", line 102, in handler 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers return fn(inst, *args, **kwargs) 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/barbican/api/controllers/__init__.py", line 88, in enforcer 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers return fn(inst, *args, **kwargs) 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/barbican/api/controllers/__init__.py", line 150, in content_types_enforcer 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers return fn(inst, *args, **kwargs) 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/barbican/api/controllers/secrets.py", line 456, in on_post 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers new_secret, transport_key_model = plugin.store_secret( 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/barbican/plugin/resources.py", line 108, in store_secret 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers secret_metadata = _store_secret_using_plugin(store_plugin, secret_dto, 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/barbican/plugin/resources.py", line 279, in _store_secret_using_plugin 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers secret_metadata = store_plugin.store_secret(secret_dto, context) 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/barbican/plugin/store_crypto.py", line 96, in store_secret 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers response_dto = encrypting_plugin.encrypt( 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/barbican/plugin/crypto/simple_crypto.py", line 76, in encrypt 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers kek = self._get_kek(kek_meta_dto) 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/barbican/plugin/crypto/simple_crypto.py", line 73, in _get_kek 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers return encryptor.decrypt(kek_meta_dto.plugin_meta) 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/cryptography/fernet.py", line 76, in decrypt 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers return self._decrypt_data(data, timestamp, ttl, int(time.time())) 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/cryptography/fernet.py", line 125, in _decrypt_data 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers self._verify_signature(data) 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers File "/usr/lib/python3/dist-packages/cryptography/fernet.py", line 115, in _verify_signature 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers raise InvalidToken 2021-10-29 12:53:28.991 568554 ERROR barbican.api.controllers cryptography.fernet.InvalidToken Any advise how to fix it ? - Ammad

2 1

[all][tc] Technical Committee next weekly meeting on Nov 4th at 1500 UTC
by Ghanshyam Mann 03 Nov '21

03 Nov '21

Hello Everyone, Technical Committee's next weekly meeting is scheduled for Nov 4th at 1500 UTC. If you would like to add topics for discussion, please add them to the below wiki page by Wednesday, Nov 3rd, at 2100 UTC. https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting -gmann

1 1