April 2022 - openstack-discuss - lists.openstack.org

[kolla-ansible][Xena][Magnum] dns configured in template is not pushed into cluster instances
by wodel youchi 07 Apr '22

07 Apr '22

Hi, I deployed Xena using kolla-ansible. Then I deployed Magnum, then created a kubernetes template with --dns-nameserver ip_of_my_dns_server That dns server does not get pushed into the master instance, and I get : Apr 07 13:57:32 k8simplekubf34-bnczkwda7z5d-master-0 podman[2153]: Authorization failed: *Unable to establish connection to https://dash.cloud.example.local:5000/v3/auth/tokens <https://dash.cloud.example.local:5000/v3/auth/tokens>* Apr 07 13:57:32 k8simplekubf34-bnczkwda7z5d-master-0 podman[2153]: Source [heat] Unavailable. Apr 07 13:57:32 k8simplekubf34-bnczkwda7z5d-master-0 podman[2153]: /var/lib/os-collect-config/local-data not found. Skipping In the master's /etc/resolv.conf I have google's dns 8.8.8.8 I am using fedora-core 34 for my cluster. Regards.

1 0

Re: [neutron] exposing ip address of external Network from
by A Monster 07 Apr '22

07 Apr '22

I tried attaching that public interface directly to the instance, and use that same ip address to configure the port manually inside the instance, but it doesn't work.

2 1

[neutron] PTG - Thursday
by Lajos Katona 07 Apr '22

07 Apr '22

Hi, As we have no topics we have no meeting today. We have the Nova-Neutron cross project meeting on Friday 14:00 UTC: https://etherpad.opendev.org/p/neutron-zed-ptg#L308 Cheers Lajos Katona (lajoskatona)

1 0

[tc][tacker][heat-translator] Discusssion about heat-translater maintenance
by ueha.ayumu＠fujitsu.com 07 Apr '22

07 Apr '22

Hi Bob, I’m Ayumu Ueha, I work as a core of Tacker. Previously, some member of Tacker team participated to the core of heat-translator. Since LiangLu has left the Tacker project, I would like to participate the core of heat-translator from the Tacker team instead of him and maintain it. Is it OK? This is agreed within the Tacker team at the Zed vPTG. >heat-translator >- yoshito-ito (yoshito.itou.dr(a)hco.ntt.co.jp<mailto:yoshito.itou.dr@hco.ntt.co.jp>) >- LiangLu (lu.liang(a)jp.fujitsu.com<mailto:lu.liang@jp.fujitsu.com>) *** change to ueha (ueha.ayumu(a)fujitsu.com<mailto:ueha.ayumu@fujitsu.com>) *** Best regards, Ueha

4 4

[neutron] exposing ip address of external Network from within the virtual machine
by A Monster 07 Apr '22

07 Apr '22

I have two networks, one internal to openstack " internal_network" 10.10.10.0/24 and an external Network "public" which is connected to an external network 192.168.100.0/24 in order to connect instances to "public" network, I created a router of which the gateway is public network, and also connected to internal_network, and used floating ip to access vm instances from the external network (public), but the problem I have encountered now is that I want to expose the and Ip from the external network inside the vm instance , but when I try to directly attach an interface from the external network to the instance, I don't get and Ip address inside the instance, and even if I assign it manually it still doesn't work, I can't use enable DHCP with public network because it already has its own external dhcp server. How can I solve this problem?

2 1

Wireguard setup between a server and a aio
by Adivya Singh 07 Apr '22

07 Apr '22

Hi Team, i m trying to set a wireguard setup between a web server and a AIO server with a public IP I have created a tunnel interface between 2 servers with Endpoint as AIP public IP range, but still I am unable to reach the Public IP of AIO. Note : Please note that IT has not allowed public IP range for AIO Regards Adivya Singh

2 1

[TripleO] Gate blockers - C8 Wallaby & C9 Master|Wallaby
by Dariusz Smigiel 06 Apr '22

06 Apr '22

Hey! TripleO team noticed two separate issues which hit gates about 5h ago: * C8 Wallaby https://bugs.launchpad.net/tripleo/+bug/1967943 * C9 Master|Wallaby: https://bugs.launchpad.net/tripleo/+bug/1967945 Please withhold rechecking until further notice. Thanks, Dariusz

2 3

plain text config parameters encryption feature
by Alexander Yeremko 06 Apr '22

06 Apr '22

Dear OpenStack community, we are developing plain text config secrets encryption feature according to the next specification: https://specs.openstack.org/openstack/openstack-ansible-specs/specs/xena/pr… We started from Glance OS service and submitted two patchsets already: https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/814865 Now we have two questions that we need to clarify to proceed our work on that feature and finish our development: 1. Is it correct that we need to develop more patchsets to rework some logic of encryption mechanism according to comment to 'files/encypt_secrets.py' script that arised at the second patchset (PatchSet 2) dated Nov/30/2021 ? Comment is by Dmitry Rabotyagov: "We _really_ should make it as an ansible plugin and re-work logic" 2. We wish to have such feature in previous releases also, not just in upcoming Yoga or Zed. Stein, Train and Victoria - it would be excellent to have plain text secrets encryption with these releases also. So question is how is it possible to use our feature in those releases also? Can we push some backports to those releases openstack-ansible repo? Could someone be so kind and give us answers? Best regards and wishes, Alex Yeremko This E-Mail (including any attachments) may contain privileged or confidential information. It is intended only for the addressee(s) indicated above. The sender does not waive any of its rights, privileges or other protections respecting this information. Any distribution, copying or other use of this E-Mail or the information it contains, by other than an intended recipient, is not sanctioned and is prohibited. If you received this E-Mail in error, please delete it and advise the sender (by return E-Mail or otherwise) immediately. Any calls held by you with Connectria may be recorded by an automated note taking system to ensure prompt follow up and for information collection purposes, and your attendance on any calls with Connectria confirms your consent to this. Any E-mail received by or sent from Connectria is subject to review by Connectria supervisory personnel.

4 6

[swift][ptg] Ops feedback session - Apr 7 at 13:00 UTC
by Timothy Burke 06 Apr '22

06 Apr '22

As in PTGs past, we're getting devs and ops together to talk about Swift: what's working, what isn't, and what would be most helpful to improve. We're meeting in Havana (https://www.openstack.org/ptg/rooms/havana) on Apr 7 at 13:00UTC -- if you run a Swift cluster, we hope to see you there! Even if you can't make it, I'd appreciate if you can offer some feedback on this PTG's etherpad (https://etherpad.opendev.org/p/swift-zed-ops-feedback) Tim

3 2

[ptg][ptl][largescale-sig][all] PTG session: "The Scaling Journey" - Wednesday, April 6 15utc - kilo room
by Belmiro Moreira 06 Apr '22

06 Apr '22

Hi, the Large Scale SIG is organizing a PTG session to discuss "The Scaling Journey". The SIG worked in a "scaling journey" to guide and help operators to scale their OpenStack deployments. Definitely, there are different ways to scale OpenStack! and the challenges to move from a few hundreds cores to thousands or now millions cores are completely different. Based on the experience of several operators, we tried to answer different common questions and identify the pain points. https://wiki.openstack.org/wiki/Large_Scale_SIG If you are interested in scalability it would be great to have your feedback. Also, it's important that PTLs join because they can give the project vision for scalability and advise on how to overcome possible bottlenecks. To discuss all of this we will have a "zoom" session on Wednesday, April 6 15utc - "kilo room". See you there! cheers, Belmiro on behalf of the Large Scale SIG

2 1