October 2022 - openstack-discuss - lists.openstack.org

Kroxvx rsvxfzwql
by nobody 09 Oct '22

09 Oct '22

This message has been removed.

1 0

Failed to create user port error
by Monish Selvaraj 08 Oct '22

08 Oct '22

Hi, Iam recently enabled trove in our kolla-ansible openstack. I can't create an instance in trove. It seems *Failed to create User port for instance 54ab3ff2-ecec-4b22-a736-3c36972542e3: Subnet 98a65c6e-2473-48f1-a578-702a08649c73 is not associated with router.* Also added the following parameter in trove.conf and restarted the docker container. But it's not working. [network] enable_access_check = False [image: image.png]

1 0

[all][tc] What's happening in Technical Committee: summary 2022 Oct 7: Reading: 5 min
by Ghanshyam Mann 07 Oct '22

07 Oct '22

Hello Everyone, Here is this week's summary of the Technical Committee activities. 1. TC Meetings: ============ * We had this week's meeting on Oct 6. Most of the meeting discussions are summarized in this email. Meeting recording is present @ https://www.youtube.com/watch?v=HhL67mf4uAY&t=464s and summary logs are available @ https://meetings.opendev.org/meetings/tc/2022/tc.2022-10-06-15.00.log.html * Next TC weekly meeting will be a video call on Oct 13 Thursday at 15:00 UTC, feel free to add the topic on the agenda[1] by Oct 12. 2. What we completed this week: ========================= * Dedicated Zed release to Ilya Etingof[2] * Selected Ghanshyam as chair [3] 3. Activities In progress: ================== TC Tracker for Zed cycle ------------------------------ * Zed tracker etherpad includes the TC working items[4], Five are completed and other items are in-progress. Open Reviews ----------------- * Six open reviews for ongoing activities[5]. New community-wide goal "Migration CI/CD to Ubuntu 22.04" -------------------------------------------------------------------------------------- Dmitriy proposed to select this goal for 2023.1 cycle [6]. 2023.1 cycle Leaderless projects & TC Chair ---------------------------------------------------- * Zun project PTL appointment is under review[7][8]. * Slaweq volunteer to serve as Vice chair[9]. 2023.1 cycle TC PTG planning ------------------------------------ * Etherpads to add the topics: ** https://etherpad.opendev.org/p/tc-2023-1-ptg ** https://etherpad.opendev.org/p/tc-leaders-interaction-2023-1 * I sent an email about the 'Operator Hours' slots in this PTG, please check and reserve the operator hour slot for your project[10] 2021 User Survey TC Question Analysis ----------------------------------------------- No update on this. The survey summary is up for review[11]. Feel free to check and provide feedback. Fixing Zuul config error ---------------------------- We request projects having zuul config error to fix them, Keep supported stable branches as priority and Extended maintenance stable branch as low priority[12][13]. Project updates ------------------- * None. 4. How to contact the TC: ==================== If you would like to discuss or give feedback to TC, you can reach out to us in multiple ways: 1. Email: you can send the email with tag [tc] on openstack-discuss ML[14]. 2. Weekly meeting: The Technical Committee conduct a weekly meeting every Thursday 15 UTC [15] 3. Ping us using 'tc-members' nickname on #openstack-tc IRC channel. [1] https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting [2] https://review.opendev.org/c/openstack/governance/+/859464 [3] https://review.opendev.org/c/openstack/governance/+/858957 [4] https://etherpad.opendev.org/p/tc-zed-tracker [5] https://review.opendev.org/q/projects:openstack/governance+status:open [6] https://review.opendev.org/c/openstack/governance/+/860040 [7] https://review.opendev.org/c/openstack/governance/+/858980 [8] https://review.opendev.org/c/openstack/governance/+/860759 [9] https://review.opendev.org/c/openstack/governance/+/860352 [10] https://lists.openstack.org/pipermail/openstack-discuss/2022-September/0303… [11] https://review.opendev.org/c/openstack/governance/+/836888 [12] https://lists.openstack.org/pipermail/openstack-discuss/2022-September/0305… [13] https://etherpad.opendev.org/p/zuul-config-error-openstack [14] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-discuss [15] http://eavesdrop.openstack.org/#Technical_Committee_Meeting -gmann

1 0

[horizon] Antelope PTG Schedule
by vishal manchanda 07 Oct '22

07 Oct '22

Hello Team, Please Find the Schedule for Horizon PTG in the eherpad [1]. Feel Free to add the topics you want to discuss in the PTG. Don't forget to register for PTG, if not done yet [2]. See you at the PTG! Thanks & Regards, Vishal Manchanda (irc: vishalmanchanda) [1] https://etherpad.opendev.org/p/horizon-antelope-ptg [2] https://openinfra-ptg.eventbrite.com/

1 0

[neutron] Drivers meeting agenda -06.10.2022.
by Lajos Katona 06 Oct '22

06 Oct '22

Hi Neutron Drivers, The agenda for tomorrow's drivers meeting is at [1]. We have the following RFE to discuss: [RFE] Strict minimum bandwidth support for tunnelled networks (#link https://bugs.launchpad.net/neutron/+bug/1991965 ) [1] https://wiki.openstack.org/wiki/Meetings/NeutronDrivers#Agenda See you at the meeting tomorrow. Lajos Katona (lajoskatona)

1 0

[neutron][tempest][all] Broken CI, any job inherited from "devstack"
by Rodolfo Alonso Hernandez 06 Oct '22

06 Oct '22

Hello all: I broke the OpenStack CI (good start as Neutron PTL). I pushed [1] testing only against the Neutron CI. After making the needed changes [2], I thought any other job would be safe. I've opened [3]. The default OVN version installed in the CI, using Ubuntu 20.04, is v20.03, that is a bit old. I've proposed to bump to v21.06, extensively tested in the Neutron CI. Any tempest job from any project is inherited from this one. Once we have migrated to Ubuntu 22.04 during this cycle, we'll remove this forced OVN installation from source. Regards. [1]https://review.opendev.org/c/openstack/neutron/+/859642 [2]https://review.opendev.org/c/openstack/neutron/+/860078/ [3]https://bugs.launchpad.net/devstack/+bug/1991952 [4]https://review.opendev.org/c/openstack/devstack/+/860577

5 8

Limit Access to a Group for a Project- Openstack 13 & 17
by samir oukessou 06 Oct '22

06 Oct '22

Dears, I have a question regarding Openstack, is it possible to limit access for a user to get read only on a specific project that he can only see the instances in that project and eliminate the actions edit,start,stop or delete instance ? i have tried some tests grant *member* role only to the group but all users in the group were able to do everything with the instances thank you in advance, Samir

2 1

[nova][cinder][glance][manila][masakari][tacker][oslo] Configurable soft-delete
by Stephen Finucane 06 Oct '22

06 Oct '22

👋 I'm planning on bringing this up in the nova rooms at the PTG in a few weeks, but I'm also raising it here since this potentially affects other service projects and I can't attend all of those room :) Many projects use the concept of "soft delete" in their database models. A soft deletable model typically has two additional columns, 'deleted' and 'deleted_at'. When deleting such a model, instead of actually deleting the database row (i.e. 'DELETE FROM table WHERE condition'), we set 'deleted' to 'True' and populate the 'deleted_at' column. This is helpful for auditing purposes (e.g. you can inspect all resources ever created, even after they've been "deleted") but bad for database performance (your tables can grow without bound). To work around the performance issues, most projects implement some kind of archive or purge command that will allow operators to periodically clean up these deleted resources. However, at least in nova, we've long since come to the conclusion that soft deleting isn't as useful as initially suspected and the need to run these commands is additional work for no benefit. We've moved toward not using it for all new models. With this said, it's going to be difficult to get away from soft-delete quickly. Not only are there database migrations involved, but operators will need to rework their tooling to adapt to a new, no-soft-delete world. As such, I'd like to propose a half-way measure of making soft-delete configurable. To do this, I'd like to add a new flag in oslo.db, '[database] enable_soft_delete'. When set to 'False' anyone using the 'SoftDeleteMixin' from oslo.db would see these models hard deleted rather than soft deleted when calling 'soft_delete'. This would avoid the need for operators to run the various project-specific purge tooling. The RFC patch for this is available for review [1]. I can also do this on a project-specific basis and have proposed a similar patch for nova [2], however, doing it in oslo.db means every project that uses 'SoftDeleteMixin' in their models will get this for free. Projects that don't (glance, cinder) can switch to using this mixin and also get it for free. As noted above, I intend to discuss this in the nova room at the PTG, but I'd be interested in people's thoughts ahead of time. Do you think this is a good idea? Should we proceed with it? Perhaps there are there better ways to do this? Let me know! Cheers, Stephen [1] https://review.opendev.org/c/openstack/oslo.db/+/860407 [2] https://review.opendev.org/c/openstack/nova/+/860401

7 9

[zed] OpenInfra Live - October 6 at 1400 UTC
by Allison Price 06 Oct '22

06 Oct '22

Hi everyone, This week’s OpenInfra Live episode is brought to you by the OpenStack community who just delivered its 26th on-time release today! Join us to learn about the latest from community leaders about what was delivered in Zed and what we can expect in Antelope, OpenStack's 27th release targeting early 2023. Episode: OpenStack Zed: The End of the Alphabet, The Beginning of a New Era Date and time: October 6 at 1400 UTC You can watch us live on: YouTube: https://www.youtube.com/watch?v=MSbB3L9_MeY <https://www.youtube.com/watch?v=MSbB3L9_MeY> LinkedIn: https://www.linkedin.com/video/event/urn:li:ugcPost:6982723169144950786/ <https://www.linkedin.com/video/event/urn:li:ugcPost:6982723169144950786/> Facebook: https://www.facebook.com/events/390328576642133 <https://www.facebook.com/events/390328576642133> WeChat: recording will be posted on OpenStack WeChat after the live stream Speakers: Kendall Nelson, OpenInfra Foundation Carlos Silva, Manila Jay Faulkner, Ironic Sylvain Bauza, Nova Lajos Katona, Neutron Wu Wenxiang, Skyline Martin Kopec, Interop Working Group Liye Pang, Venus Have an idea for a future episode? Share it now at ideas.openinfra.live <https://openinfrafoundation.formstack.com/forms/openinfralive>. Thanks, Allison

1 1

[SECURITY] Openstack Security Assessments
by jackdaw blues 06 Oct '22

06 Oct '22

Hi all, I am currently leading a team of offensive security engineers and we are trying to create a checklist for each component of Openstack in the context of Security Assessment. At the end of the day what we want to end up with is common exploitable configuration weaknesses for each component. It will be against configuration or installation mistakes that result in unintended privileges or information disclosure, etc. Patch management isn't in scope. Not the exact output, but these links can give a good idea of the contents of the security assessment we are planning (these are for AWS): http://flaws.cloud/ http://flaws2.cloud/ Has anyone had any experience regarding the topic above? If so please feel free to connect. Regardless of the experience, if you want to contribute and at mark zero just like we are, you are still welcome and we can help each other create this assessment checklist. Cheers, Asil

2 1