March 2022 - openstack-discuss - lists.openstack.org

[tripleo] Dynamically generating firewall rules for the haproxy host on behalf of a deployed service
by Brent Eagles 02 Mar '22

02 Mar '22

Hi all, Designate has a requirement that appears to be a first for TripleO. It needs to deploy miniDNS instances on the internal network but each are accessible from the public network so external bind instances can sync with them. This is done by mapping port numbers on the VIP to each miniDNS instances [1] e.g. 10.0.0.5:16000 --> 172.16.2.184:5354 10.0.0.5:16001 --> 172.16.2.185:5354 10.0.0.5:16002 --> 172.16.2.186:5354 . . . <for each controller> The haproxy configuration is relatively straightforward [2]. There would be no problem if it the haproxy puppet managed the firewall rules, but for typical deployments we appear to disable this [3] and rely on the tripleo.firewall ansible module instead. The complicating factors are: a. the ports range depends on the number of miniDNS instances. b. the miniDNS deployment needs to set firewall rules wherever haproxy happens to live as they are not guaranteed to be on the same host. AFAICT, our ansible based firewall rule mechanism doesn't allow for setting firewall rules on hosts in addition to the ones that the service is being deployed on. Possible solutions I've been considering: a. Have haproxy puppet create firewall rules on the public API network and use tripleo.firewall for everything else. I think we generally don't distinguish which networks firewall rules are applicable to so this would be an "interesting", pervasive change. This is in PID 1's wheelhouse and I'd be interested in how they feel about this. b. Somehow create a jinja-ed firewall rule for haproxy that gets processed at deploy time so details could be filled in using cloud information. This seems like it would be kind of fragile, may not even be possible and depends on details of the framework I'm not familiar with. c. Extend tripleo.firewall or tripleo.iptables to process jinja'd rules - but that's problematic because it needs to be set on the haproxy host, and miniDNS is elsewhere. d. Create some ansible that gets run in the haproxy hosts that generates the firewall rules based on cloud info. I feel this is a bit ugly. Does anyone have any suggestions on other solutions or thoughts on the above? Cheers, Brent 1. https://bugzilla.redhat.com/show_bug.cgi?id=1897319 The TripleO HAProxy instance needs to be configured for BIND->miniDNS AXFR 2. https://review.opendev.org/c/openstack/puppet-tripleo/+/828169 Designate: create proxy ports on external VIP to access miniDNS workers. 3. https://bugs.launchpad.net/tripleo/+bug/1961799 haproxy template tasks to apply IPTables rules are no ops. -- Brent Eagles Principal Software Engineer Red Hat Inc.

3 2

[largescale-sig] Next meeting: Mar 2nd, 15utc
by Thierry Carrez 02 Mar '22

02 Mar '22

Hi everyone, The Large Scale SIG will be meeting this Wednesday in #openstack-operators on OFTC IRC, at 15UTC. You can doublecheck how that time translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20220302T15 Feel free to add topics to the agenda: https://etherpad.openstack.org/p/large-scale-sig-meeting Regards, -- Thierry Carrez

1 1

[cinder] Bug deputy report for week of 03-02-2022
by Sofia Enriquez 02 Mar '22

02 Mar '22

This is a bug report from 02-23-2022 to 03-02-2022. Agenda: https://etherpad.opendev.org/p/cinder-bug-squad-meeting ----------------------------------------------------------------------------------------- Low - https://bugs.launchpad.net/cinder/+bug/1962221 "[lightos] Compression handling in lightos driver while default compression enabled." Fix proposed to master. Incomplete - https://bugs.launchpad.net/cinder/+bug/1962607 "IndexError when creating Backups." Fix proposed to master. Cheers -- Sofía Enriquez she/her Software Engineer Red Hat PnT <https://www.redhat.com> IRC: @enriquetaso @RedHat <https://twitter.com/redhat> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc> <https://www.redhat.com>

1 0

[TripleO] centos9 jobs only for master, centos 8 & 9 for wallaby
by Marios Andreou 02 Mar '22

02 Mar '22

Hello TripleO o/ During the last period the tripleo-ci team has been working on getting tripleo CI jobs to run centos-9. On master branches across all TripleO repos we now run C9 exclusively (since [1]). On Wallaby branches, after the work at [2] (in particular after https://review.opendev.org/c/openstack/tripleo-ci/+/830132 merges) we will run both C8 and C9 jobs. I started an etherpad at [3] thinking this would be a PTG topic, but I think we'll want to have this conversation way before then. There is a tripleo-heat-templates example in the etherpad that shows what we can expect from the job runs (note the exact jobs that run will vary per repo and even between changes depending on the files touched - but generally there will be duplication between 8 and 9 jobs). The current proposal is that we keep a minimal subset on C8 Wallaby, with C9 wallaby having the full set of jobs. Two factors that will affect our decisions are (there may be more?) i) Upgrades requirements - are we supporting upgrading to Wallaby on 8? For example, the coming undercloud-upgrade-ffu job will be train 8 to wallaby 8. In which case we definitely need to keep at least some subset of 8 jobs (and can't entertain the removal of 8 from Wallaby completely). ii) Are we importing from Wallaby 8 or Wallaby 9? Currently it is 8 but this will soon switch. For the wallaby c8 'subset of jobs' e.g. multinode, vanilla standalone (no scenarios? some subset of them?), undercloud-ffu, minor update. This is just to start the conversation so please reply if you have thoughts or comments about any of the above. We are planning to discuss this in the coming tripleo-ci community call this coming Tuesday at 1330 UTC - meeting link at [4] so please join us if you can and would like to participate, regards, marios [1] https://review.opendev.org/q/topic:c8_teardown_master [2] https://review.opendev.org/q/topic:c9_wallaby_gates [3] https://etherpad.opendev.org/p/tripleoci-wallaby-centos-8-9 [4] https://meet.google.com/bqx-xwht-wky

4 7

[horizon][customization]
by Mathilde Hermet 02 Mar '22

02 Mar '22

Hello Openstack team, I'm currently working on customizing the Horizon (xena) dashboard to use the OVHcloud assets: logo.svg and logo-splash.svg. I've been following this documentation https://docs.openstack.org/horizon/latest/configuration/themes.html I added the ovhcloud theme in horizon/openstack_dashboard/local/local_settings.py in AVAILABLE_THEMES, I created the subdir ovhcloud in horizon/openstack_dashboard/themes and I created a ovhcloud/img with logo.svg and logo-splash.svg in it. I put a _variables.scss and a _styles.scss in /themes/ovhcloud/ Then I executed python manage.py collectstatic It put all the files in horizon-sources/horizon.../static/themes/ovhcloud But then when trying to connect with the session cookie theme="ovhcloud", I have a 500 error. i don't think it comes from images because i've been puting it in /horizon-souurces/horizon.../static/dashbaord.img and they were displayed correctly. Do you have any idea about the misconfiguration I've done ? Best regards, Mathilde Hermet

4 3

[release][requirements][oslo][kuryr][keystone] RFE request
by Előd Illés 02 Mar '22

02 Mar '22

Hi, It turned out that kuryr [1] and keystoneauth [2] deliverables were missed at non-client libraries final release period. So we need to release them now and request Requirement Freeze Exception for them. (PTLs / release liaisons of kuryr and keystoneauth: please review the patches [1][2] as soon as possible) Also I want to mention here oslo.context as well, to formally include it to RFE. (It seems versions >=4.0.0 break things, see thread [3] and [4].) [1] https://review.opendev.org/c/openstack/releases/+/831025 [2] https://review.opendev.org/c/openstack/releases/+/831024 [3] http://lists.openstack.org/pipermail/openstack-discuss/2022-February/027455… [4] http://lists.openstack.org/pipermail/openstack-discuss/2022-March/027480.ht… Előd

3 2

Re: [horizon][customization]
by Laurent Dumont 01 Mar '22

01 Mar '22

Hi! That is possible. Which version of the doc we're you looking at? I think those are able to be modified through merge requests. On Tue, Mar 1, 2022 at 9:07 AM Mathilde Hermet <mathilde.hermet(a)ovhcloud.com> wrote: > Hello, > > > I manage to find that the problem in your documentation is that you forgot > to tell that command "$python manage.py compress --force" must be run after > collecting statics. > > I run it and then my custom themes worked. > > This appears to be required in earlier version of horizon that is why > documentation is may be not up to date. > > > Thanks > > > Mathilde > On 3/1/22 00:25, Laurent Dumont wrote: > > Salut! > > A 500 from Horizon is a bit strange. What do the Horizon logs say? > > If you remove your customization and restart Horizon, does it recover? > > On Mon, Feb 28, 2022 at 11:17 AM Mathilde Hermet < > mathilde.hermet(a)ovhcloud.com> wrote: > >> Hello Openstack team, >> >> >> I'm currently working on customizing the Horizon (xena) dashboard to use >> the OVHcloud assets: logo.svg and logo-splash.svg. >> >> I've been following this documentation >> https://docs.openstack.org/horizon/latest/configuration/themes.html >> >> I added the ovhcloud theme in >> horizon/openstack_dashboard/local/local_settings.py in AVAILABLE_THEMES, >> >> I created the subdir ovhcloud in horizon/openstack_dashboard/themes and >> I created a ovhcloud/img with logo.svg and logo-splash.svg in it. >> >> I put a _variables.scss and a _styles.scss in /themes/ovhcloud/ >> >> Then I executed python manage.py collectstatic >> >> It put all the files in horizon-sources/horizon.../static/themes/ovhcloud >> >> >> But then when trying to connect with the session cookie >> theme="ovhcloud", I have a 500 error. >> >> i don't think it comes from images because i've been puting it in >> /horizon-souurces/horizon.../static/dashbaord.img and they were >> displayed correctly. >> >> >> Do you have any idea about the misconfiguration I've done ? >> >> >> Best regards, >> >> >> Mathilde Hermet >> >> >>

1 0

How OpenStack is Used in Academia - OpenInfra Live
by Sunny Cai 01 Mar '22

01 Mar '22

Hi everyone, This week on OpenInfra Live episode, we are featuring topics on how OpenStack is used in Academic space Open source cloud computing has gained a lot of adoption momentum due to advantages including low cost, flexibility, scalability, and more. Since the early days of OpenStack with NASA’s direct involvement, OpenStack has been deployed in various notable academic institutions all over the world for their infrastructure needs. For this episode, we have invited experts from Oregon State University, Monash University, Télécom Paris, and OpenStack Scientific SIG to talk about how they use OpenStack in academia. Episode: How OpenStack is Used in Academia Date and time: Thursday, March 3 at 9am CT (1500 UTC) You can watch us live on YouTube [1], LinkedIn [2] and Facebook[3]. Host: Kendall Nelson, Senior Upstream Developer Advocate at the OpenInfra Foundation Speakers: • Stig Telfer, Scientific SIG Chair and CTO at StackHPC Ltd • Steve Quenette, Deputy Director at Monash eResearch Centre, Monash University • Rémi Sharrock, Researcher and Lecturer at Télécom Paris & Marc Jeanmougin, Research Engineer at Télécom Paris • Lance Albertson, Director at Oregon State University Open Source Lab Have an idea for a future episode? Share it now at ideas.openinfra.live [4]. [1] https://www.youtube.com/watch?v=xqGvMn0B7jc&ab_channel=OpenInfrastructureFo… [2] https://www.linkedin.com/video/event/urn:li:ugcPost:6902672962731016192/ [3] https://www.facebook.com/104139126308032/posts/4883571768364720/ [4] https://openinfrafoundation.formstack.com/forms/openinfralive Thanks, Sunny Cai OpenInfra Foundation Marketing & Community

1 0

[nova][octavia][masakari][designate][oslo][requirements] oslo.context>=4.0.0 seems to need updated tests
by Matthew Thode 01 Mar '22

01 Mar '22

The update to see what's breaking is here https://review.opendev.org/829599 Feel free to make that patch depend on your fix to test (with rechecks) -- Matthew Thode

4 6

[neutron] CI meeting - agenda for 1.03.2022
by Slawek Kaplonski 01 Mar '22

01 Mar '22

Hi, Agenda for today's Neutron CI meeting is at [1]. Please remember that we will meet on the video call today [2]. See You all there at 1500 UTC [1] https://etherpad.opendev.org/p/neutron-ci-meetings [2] https://meetpad.opendev.org/neutron-ci-meetings -- Slawek Kaplonski Principal Software Engineer Red Hat

1 0