April 2022 - openstack-discuss - lists.openstack.org

[neutron][ovn] Need VM accessible on Internet, and able to access DC resources
by Chris DiLorenzo 13 Apr '22

13 Apr '22

To Internet To Data Center Resources (10.x) - -/ - -/ / -/ / -/ / -/ -/ -/ / -/ / Public Provider Network / Private Provider Network / +------------------------+ +-------------------------+ | | | | | | | | | Router #1 |--------------| Router #2 | | SNAT Enabled | .2| SNAT Enabled | | | | | | | | | +------------------------+ +-------------------------+ | 192.168.1.1 | | | | | | | | | 192.168.1.10 (FIP: Public IP) +---------|-------------+ | | | | | | | VM | | | | | +-----------------------+ I am running Openstack Xena with OVN and distributed FIP enabled. We are trying to come up with a way to make a VM accessible from the Internet and still have it able to access internal Data Center services. Our thought is to setup a router between the tenant network and an internet accessible provider network. We'll assign a FIP to the VM. Then, we create an additional router that connects to the same tenant network but routes to a provider network that has access to everything inside the DC. We would then add a static route on Router #1 like 10.0.0.0/8 nexthop 192.168.1.2. I've tried setting this up in our lab, but it's not working. I can't ping to anything inside the DC. Should this work? Any best practice here we should look at? Thanks Chris

1 0

[cinder] Bug deputy report for week of 04-13-2022
by Sofia Enriquez 13 Apr '22

13 Apr '22

This is a bug report from 03-30-2022 to 04-13-2022. Agenda: https://etherpad.opendev.org/p/cinder-bug-squad-meeting ----------------------------------------------------------------------------------------- High - https://bugs.launchpad.net/os-brick/+bug/1967790 " Encryptor connect_volume not changing the symlink." Fix proposed to marter. Medium - https://bugs.launchpad.net/cinder/+bug/1968746 "cinder-manage db sync fails due to row size too large." Unassigned. - https://bugs.launchpad.net/cinder/+bug/1968645 "Concurrent migration of vms with the same multiattach volume fails." Unassigned. Low - https://bugs.launchpad.net/cinder/+bug/1968170 "reimage_volume failure message action does not exist." Unassigned. Cheers, -- Sofía Enriquez she/her Software Engineer Red Hat PnT <https://www.redhat.com> IRC: @enriquetaso @RedHat <https://twitter.com/redhat> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc> <https://www.redhat.com>

1 0

Error while creating attached to an external interface
by A Monster 13 Apr '22

13 Apr '22

I'm trying to launch an instance attached to an external network, but I get an all host exhausted error message, and the neutron log file show the following error : *ERROR neutron.plugins.ml2.managers [req-6979d5fd-8e6a-4802-a758-e4882b7ac5b6 397fa0267ae340e1b24a3a96ae302f32 05b9f31fca434f7a96b63a1d17e8b14c - default default] Failed to bind port d57ac8f5-7904-495f-a4b9-9b23df681634 on host compute1.localdomain for vnic_type normal using segments [{'id': '475c70c2-6a35-4721-a726-cbf8c0b7e778', 'network_type': 'flat', 'physical_network': 'physnet2', 'segmentation_id': None, 'network_id': 'a1c2cc8f-6a04-48ce-9d87-a351da1d3f3e'}]* But when I try to launch an instance using another external network, it works just fine.

1 0

[neutron] Zed PTG Summary
by Lajos Katona 13 Apr '22

13 Apr '22

Hi, I will try to summarize the Neutron PTG sessions during the last week. The etherpad which we used: https://etherpad.opendev.org/p/neutron-zed-ptg # Day 1 (Monday April 4.) ## Yoga retrospective (I just list here the topics, not every discussion under them): * Good things ** New active people around the team ** Revived project: neutron-fwaas ** video CI meetings every second week are very good IMO ** OVN backend is getting more and more attention and there are less gaps between OVN and OVS backends * Bad / Not so good: ** less and less active people ** to much depends on Red Hat - ~66% of reviews, ~62% of commits (in Neutron official projects) ** lack of maintainers for some stadium projects (neutron-vpnaas) and some backends/drivers (linuxbridge) * As action we previously decided to have a forum session during the Berlin Summit to discuss the lack of activity/maintainers for some backends and stadium projects hopefully with some operators also. ## Short update on bgp related blueprints https://etherpad.opendev.org/p/neutron-zed-ptg#L111 The development of these blueprints are stopped, we will revert the already merged code. # Day 2 (Tuesday April 5.) ## Have nova / os-vif delete the trunk bridges to avoid race conditions The creation of trunk bridges now done by os-vif, and the deletion is done by Neutron, to avoid the race condition we agreed to have both operations done by os-vif. ## skip-level upgrade (tick-tick) We discussed together how this affects Neutron, what is working currently and what is in front of us. We have periodic jobs for ovs and ovn backend. Actions: * Make ovn grenade upgrade jobs green ## When we say something is not supported? * Recently from the Neutron stadium neutron-vpnaas project was that lost all maintainers. Neutron core team keeps an eye on the gate of networking projects, and keep them green, but if there is nobody with specific knowledge for the given area we can't solve the bugs. * We have similar problems with "in-tree" drivers also, a good example is the linuxbridge driver. Agreement was to keep the current approach for stadium project, so send out mail to openstack-discuss, asking for help, and if nobody appears, make the project retired and delete the code but keep git history for it. For in-tree code (drivers, extensions....): * We keep existing jobs for linuxbridge driver for example, but when the tests start to fail we skip them and finally we stop the job also. To make it clear for operators we add warning logs highlighting that the given feature/driver is experimental, and introduce cfg option to enable such features explicitly. We plan to discuss these questions during the Berlin Summit with operators. ## Prefix delegation for Openstack Neutron aka: dibbler tool for dhcpv6 is concluded The original bug: https://bugs.launchpad.net/neutron/+bug/1916428 * The tool behind PD, Dibbler is no more maintained and the suggested tool ISC Kea has no DHCP client actually. * this feature is not tested in upstream CI Due to these we decided to mark prefix delegation as experimental feature. # Day 3 (Wednesday April 6.) ## neutron-dynamic-routing + OVN Redhat works on a BGP solution for OVN, that is ovn-bgp-agent, and currently it doesn't need the existing API in neutron-dynamic-routing. The current approach to make neutron-dynamic-routing work with OVN will be checked. ## Option for OVN to disable DHCP/DNS and use dhcp-agent instead Technically it is possible, a new RFE will be proposed and the drivers team will discuss the usecase behind it. ## CI status / zuul job config errors In the list of zuul cfg errors ( https://zuul.opendev.org/t/openstack/config-errors ) old Neutron stadium branches are listed. * Decision was to EOL these old branches where fixing is not possible. Another topic was from Slawek if we want to have neutron-tempest-plugin-api-ovs job, and the agreement was to merge OVS scenario and API jobs. ## inconsistencies in OVS firewall on an agent restart We will go for a cfg option to select between OVS flow installation in batches and per port, and operators can select which is best for their environment. ## Pain Points TC started a discussion to cover the collected operator pain points, last week we checked again the list for Neutron ( https://etherpad.opendev.org/p/pain-point-elimination#L268) * neutron (via python calls) and OVN (via C calls) can have different ideas about what the hostname is, particulary if a deployer (rightly or wrongly) sets their hostname to be an FQDN ** it was fixed: https://review.opendev.org/q/Iea2533f4c52935b4ecda9ec22fb619c131febfa1 * Useful error msg when network deletion fails due to existing resources on it ** done: https://review.opendev.org/c/openstack/neutron/+/821935 * Open vSwitch Agent excess logging at INFO level ** we check if we can change some to debug, Slawek create a DNM job with only info logs to discuss during one of the coming meetings. * OVN: Spoofing of DNS reponses seems very wrong behavior ** We agreed that for this we need an RFE (see above for disabling OVN DNS/DHCP) ## Edge topics Together with the Designate team we agreed that this is more a documentation problem based on our current understanding. Based on Redhat downstream bugs for edge deployments we try to cover these in this cycle. # Day 4 (Thursday April 7.) We have no sassions. # Day 5 (Friday April 8.) ## Nova - Neutron xproject ### How to require ml2 plugins to implement multiple port bindings The problem is that there are old drivers (hyperv perhaps and others) that do not implement it and this cause a lot of extra code path in Nova. Sean suggested a Forum topic for Berlin to discuss it with operators also. ### Is heal_instance_info_cache_interval still needed? Let's create a job which sets heal_instance_info_cache_interval to 0, and decide the next steps based on the results. The happy moment with the team screenshot: https://photos.app.goo.gl/P6YuYgxzqEiv2gHt8 I hope next time we can meet in person :-) Thanks to everybody for the great discussions. Lajos Katona (lajoskatona)

1 0

[horizon] Cancelling Today's Weekly meeting
by vishal manchanda 13 Apr '22

13 Apr '22

Hello Team, I won't be able to chair today's horizon weekly meeting due to some travel. So if someone from team can host it on my behalf or we can skip this week meeting. Note: I will join office from thrusday so if anything urgent please reach out to horizon core team. Thanks & regards, Vishal Manchanda

1 0

[Trove][Xena] Errors when creating postgresql insances
by wodel youchi 12 Apr '22

12 Apr '22

Hi, I defined a postgresql data store with two versions 10 and 12. When creating db instances I am getting different errors : *For Postgresql 10, I am getting : * Traceback (most recent call last): File "/var/lib/kolla/venv/lib/python3.6/site-packages/trove/taskmanager/models.py", line 436, in wait_for_instance time_out=timeout) File "/var/lib/kolla/venv/lib/python3.6/site-packages/trove/common/utils.py", line 223, in poll_until return wait_for_task(task) File "/var/lib/kolla/venv/lib/python3.6/site-packages/trove/common/utils.py", line 207, in wait_for_task return polling_task.wait() File "/var/lib/kolla/venv/lib/python3.6/site-packages/eventlet/event.py", line 125, in wait result = hub.switch() File "/var/lib/kolla/venv/lib/python3.6/site-packages/eventlet/hubs/hub.py", line 313, in switch return self.greenlet.switch() File "/var/lib/kolla/venv/lib/python3.6/site-packages/oslo_service/loopingcall.py", line 150, in _run_loop result = func(*self.args, **self.kw) File "/var/lib/kolla/venv/lib/python3.6/site-packages/trove/common/utils.py", line 194, in poll_and_check obj = retriever() File "/var/lib/kolla/venv/lib/python3.6/site-packages/trove/taskmanager/models.py", line 791, in _service_is_active raise TroveError(_("Service not active, status: %s") % status) trove.common.exception.TroveError: Service not active, status: failed to spawn ==> trove-conductor.log <== 2022-04-13 00:26:52.334 124 ERROR trove.conductor.manager [-] Guest exception on request req-b5bd49e8-e147-41b2-8292-2900bb4022a1: ['Traceback (most recent call last):\n', ' File "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/manager.py", line 218, in prepare\n ds_version=ds_version)\n', ' File "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/manager.py", line 234, in _prepare\n cluster_config, snapshot, ds_version=ds_version)\n', ' File "/opt/guest-agent-venv/lib/python3.6/site-packages/osprofiler/profiler.py", line 160, in wrapper\n result = f(*args, **kwargs)\n', ' File "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/manager.py", line 161, in do_prepare\n self.app.start_db(ds_version=ds_version, command=command)\n', ' File "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", line 229, in start_db\n raise exception.TroveError("Failed to start database service")\n', *'trove.common.exception.TroveError: Failed to start database service\n']* *And for Postgresql 12, I am getting :* Server type: guest Traceback (most recent call last): File "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/manager.py", line 845, in create_user self.adm.create_users(users) File "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", line 516, in create_users self.create_user(models.PostgreSQLUser.deserialize(user), None) File "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", line 549, in create_user [models.PostgreSQLSchema.deserialize(db) for db in user.databases]) File "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", line 558, in _grant_access [db.name for db in databases], File "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", line 432, in grant_access database=database, File "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", line 723, in psql return self.connection.execute(statement) File "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", line 763, in execute autocommit=True) File "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", line 776, in _execute_stmt cursor.execute(cmd, data_values) psycopg2.errors.InvalidCatalogName: database "dbweb01" does not exist And this error from > ==> trove-conductor.log <== > 2022-04-12 23:58:11.689 46 ERROR trove.conductor.manager [-] Guest > exception on request req-7c0e005a-2b02-4acf-bdc5-e9d7a964cd7e: > ['Traceback (most recent call last):\n', ' File > "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/manager.py", > line 808, in create_database\n return > self.adm.create_databases(databases)\n', ' File > "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", > line 464, in create_databases\n > self.create_database(models.PostgreSQLSchema.deserialize(database))\n', ' > File > "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", > line 477, in create_database\n collation=database.collate,\n', ' File > "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", > line 723, in psql\n return self.connection.execute(statement)\n', ' > File > "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", > line 763, in execute\n autocommit=True)\n', ' File > "/opt/guest-agent-venv/lib/python3.6/site-packages/trove/guestagent/datastore/postgres/service.py", > line 776, in _execute_stmt\n cursor.execute(cmd, data_values)\n', > 'psycopg2.errors.ActiveSqlTransaction: *CREATE DATABASE cannot run inside > a transaction block\n\n']* > Regards.

1 0

[openstack-helm] Dropping train support
by Gage Hugo 12 Apr '22

12 Apr '22

Hi all, One of the topics from the latest PTG discussions[0] was looking to drop support of the Train release from our charts due to a lack of interest in maintaining them and several issues with broken images due to dependencies. As a result of those discussions, we'd like to make dropping Train support a goal for this cycle. If anyone is still using Train and has a pressing issue where they cannot upgrade, please reach out and we can discuss a path forward. [0] https://etherpad.opendev.org/p/openstack-helm-zed-ptg Thanks

1 0

[openstack-helm] openstack-helm-addons and docs repository retirement
by Gage Hugo 12 Apr '22

12 Apr '22

Hey everyone, We recently had a PTG session and one of the topics that was discussed was the retirement of the openstack-helm-addons and openstack-helm-docs repositories. This topic has been mentioned now for several PTGs and from our discussion at the latest one, it was determined that due to the lack of updates to the repos as well as the charts themselves receiving no real maintenance, we would look to retire both these repositories this cycle. If anyone is still using the 3 charts that still exist in the repos and would like to maintain them, please let us know. Thanks!

1 0

[nova] final release before Victoria Extended Maintenance transition?
by Előd Illés 12 Apr '22

12 Apr '22

Hi Nova folks! We have released from stable/victoria quite recently, but there are still many open bug fixes on it [1]. If anyone from vendors / operators / developers would like to have any bugfix to be released in Victoria before the Extended Maintenance transition, please feel free to add it / mark them at our nova-stable-victoria-em etherpad [1]. Please consider that the transition deadline is in 2 weeks, so this needs to be ready as soon as possible. Nova stable cores are also welcome to review any patches. If there will be merged patches that we could release before the deadline, then I'll prepare the release patch. [1] https://etherpad.opendev.org/p/nova-stable-victoria-em Thanks, Előd

1 0

Network Node Scaling
by Adivya Singh 12 Apr '22

12 Apr '22

Hi Team, Is there any specified link available which i can go through and do "Network Node Scaling" in my Environment. We are running Openstack Xena in my environment Regards Adivya Singh

3 3

[TripleO] please stop posting patches for tripleo* stable/ussuri (going EOL)
by Marios Andreou 12 Apr '22

12 Apr '22

Hello TripleO As proposed at [1] and also discussed in yesterday's TripleO Z PTG meet [2] we are going to move stable/ussuri for all tripleo repos to EOL. In order to move ahead we need to have no open patches against stable/ussuri. ** please stop posting patches to stable/ussuri tripleo repos ** If you have open patches can you please either get them merged, or abandon them by next Tuesday 12th. After this we will have to abandon any open patches (e.g. folks moved on/not even looking there) and then I can update the EOL proposal at [3] with the latest commit hashes so we can proceed. For reference the repos with open reviews at time of writing are at [4] below. Please speak up if you need more time or with any other comments regards, marios [1] http://lists.openstack.org/pipermail/openstack-discuss/2022-April/028025.ht… [2] https://etherpad.opendev.org/p/tripleo-zed-ci-load [3] https://review.opendev.org/c/openstack/releases/+/834049 [4] ( list of repos with open reviews for stable/ussuri): * https://review.opendev.org/q/project:openstack%252Fos-net-config+status:ope… * https://review.opendev.org/q/project:openstack%252Fpaunch+status:open+branc… * https://review.opendev.org/q/project:openstack%252Fpuppet-tripleo+status:op… * https://review.opendev.org/q/project:openstack%252Fpython-tripleoclient+sta… * https://review.opendev.org/q/project:openstack%252Ftripleo-ansible+status:o… * https://review.opendev.org/q/project:openstack%252Ftripleo-common+status:op… * https://review.opendev.org/q/project:openstack%252Ftripleo-heat-templates+s… * https://review.opendev.org/q/project:openstack%252Ftripleo-puppet-elements+… * https://review.opendev.org/q/project:openstack%252Ftripleo-validations+stat…

1 1

[Kolla-ansible][Xena] Test Trove module
by wodel youchi 12 Apr '22

12 Apr '22

Hi, I am testing the deployment of Xena, and part of my testing is to test the different modules. I am trying to test the Trove module and for now there is no dev image for Xena here : https://tarballs.opendev.org/openstack/trove/images/ So I decided to build the image, my base system is Rocky Linux, I followed the documentation here : https://docs.openstack.org/trove/latest/admin/building_guest_images.html#bu… But when executing the build command [deployer@rscdeployer scripts]$ ./trovestack build-image ubuntu bionic true ubuntu $HOME/images/trove-guest-ubuntu-bionic-dev.qcow2 ******************************************************************************* Params for cmd_build_image function: ubuntu bionic true ubuntu /home/deployer/images/trove-guest-ubuntu-bionic-dev.qcow2 ******************************************************************************* *Ensuring we have all packages needed to build image.sudo: apt-get: command not found* *I got this : sudo: apt-get: command not found * Do I have to build the image on an ubuntu system? I thought that it is similar to building the octavia image, that it is not tied to the Linux distro you are using. Regards. <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> Virus-free. www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

3 5

(Ansible Galaxy) Assign static ip to build a sever
by borges.ds＠gmail.com 12 Apr '22

12 Apr '22

Hi folks, I am using the server module to build/decomm virtual machines. However I am only able to build VMs using dynamic IP assignment.. Whenever I try to assign a static using float ips, the instruction is ignored. Could you help me to figure this out? The collection documentation is not clear about that... -- Aguardo sua resposta, David Borges de Sousa (3374-9157 / 87846638)

1 0

Resize instance vm Linux error
by Joao Oliveira 12 Apr '22

12 Apr '22

How I can Resize a Instance in the dashboard ?? [cid:image004.png@01D84B6B.A5B5F960] I try this and it is not working. Any sugestions ?? Thanks João de Deus Oliveira Ingeniero de Infraestructura [Descripción: Descripción: Descripción: Logo ITC Servicios] Informática, Tecnología & Comunicaciones Edificio ITC Tower Av. Las Ramblas #100, Torre B Barrio Equipetrol Norte Santa Cruz - Bolivia Tel: +(591) 3 344-4424 Ext. 4368 Fax: +(591) 3-344-4433 Móvil: +(591) 67011038 E-mail: joliveira(a)itcservicios.com<mailto:joliveira@itcservicios.com> Web: www.itc-e.com<http://www.itc-e.com/> AVISO DE CONFIDENCIALIDAD Y PRIVACIDAD: El uso de la información transmitida en este correo electrónico está limitado a la persona a la cual va dirigido. El correo puede contener información privada, privilegiada, confidencial o exenta de revelación bajo las leyes aplicables. Si usted no es el destinatario pretendido o sospecha que el mensaje le hubiera sido enviado sin la debida autorización, queda avisado que está estrictamente prohibido cualquier uso, diseminación o copia de esta información. Si usted ha recibido este mensaje por equivocación le pedimos notificarnos a vuelta de correo y borrar el mensaje. CONFIDENTIALITY AND PRIVACY NOTICE: This email is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law. If you are not the intended recipient or it appears that this mail has been forwarded to you without proper authority, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us via reply email and delete this message. De: Abhishek Kekane <akekane(a)redhat.com> Enviado el: jueves, 7 de abril de 2022 14:33 Para: Anurag Singh Rajawat <anuragsinghrajawat22(a)gmail.com> CC: OpenStack Discuss <openstack-discuss(a)lists.openstack.org> Asunto: Re: [glance] Outreachy 2022 Hi Anurag, Sorry that we were not able to address you on IRC. Currently glance team is busy in PTG which will end tomorrow evening and that is why we might have missed your ping on IRC. I would suggest to share your failures so that we can guide you. I think from Monday onwards everyone will be back to their daily routine so outreachy glance team will help you to resolve your queries. Meanwhile if it is urgent then you can share your doubts and I will try my best to resolve them. Thanks and Regards, Abhishek On Thu, 7 Apr, 2022, 22:30 Anurag Singh Rajawat, <anuragsinghrajawat22(a)gmail.com<mailto:anuragsinghrajawat22@gmail.com>> wrote: Dear glance team, I'd setup glance, glance-store and glance-client on my local setup, but some tests for glance were failing, also is there any good first issues so that I can understand the project more clearly? I also asked about it in IRC but doesn't got response. Thanks Sincerely Anurag

2 2

[qa][ptg] PTG Summary
by Martin Kopec 12 Apr '22

12 Apr '22

Hello everyone, thank you to all who participated in the PTG discussions and shared their thoughts and opinions. It's very much appreciated! Here is the summary of the discussions [1]: * Yoga Retrospective ** more details in [1] * Secure RBAC ** Devstack - mostly done, it has already options to enable enforce scope ** Tempest - tests will need to be migrated *** will be started after Keystone and Nova are migrated * FIPS current status and next plans ** Tempest will use ecdsa keys by default (instead of rsa) ** QA team will help reviewing related patches *** https://etherpad.opendev.org/p/qa-zed-ptg-fips * Tempest tests in mixed-architecture environments ** there is no support in Zuul for a testing like this ** still in a brainstorming phase looking for a potential solution, if you have any ideas, feel free to reach out * Direction on replacing the scenario manager ** in progress, the plan is to finish it (merge related patches) sooner in the cycle * Retirement of QA projects ** openstack-health ** tempest-lib ** os-testr *** ostestr command was removed from os-testr repo * Future of Centos Stream support ** we'd like to create at least an experimental job on Rocky linux ** during the Zed cycle we would like to deprecated Centos 8 Stream and influence projects to start using Centos 9 Stream jobs The discussed topics are transformed into priority items [2] we will be focusing on this cycle. [1] https://etherpad.opendev.org/p/qa-zed-ptg [2] https://etherpad.opendev.org/p/qa-zed-priority Regards, -- Martin Kopec Senior Software Quality Engineer Red Hat EMEA IM: kopecmartin

1 0

[openstack-ansible][PTG] Zed PTG results
by Dmitriy Rabotyagov 12 Apr '22

12 Apr '22

Hi everyone! Thanks everybody for taking time and attending a session. Despite we didn't have much topics in our agenda, I believe it we had great discussion about further steps in project development. We have defined topics that we aim to implement before releasing Yoga: * Move os_octavia role to use PKI role * Implement keystone RBAC support and switch services role to `service`. Be ready for final migration in Zed. * Start implementing support for encrypting connection between haproxy and it's backends * We will also try to get Ubuntu 22.04 support before release, despite in general we add Ubuntu LTS support in autumn. Following plans regarding Zed release were set: * Add unit testing of collections and common roles, with molecule. At same time we should use dependencies from integrated repo for that. * We will support concept of Tick/Tock releases and add testing for jumping through releases. * Implement shared queues for our jobs and see effect from that * Fix repo server to _really_ support multiple distros in the same environment * We should revise in AA PTL if we should keep support for non-SSL deployments, and keep upgrade path in Zed. There was an agreement to EOL Pike and Queens releases in nearest future. We also move Victoria to EM soon. With lack of contributions/interest regarding some of features we are reaching to community and interested parties to help out with support of: * Installation path from distro packages * Support of CentOS distributions If you're interested in continuation of being these part of OSA, please reach us out via ML or IRC to get more information about how you can help out. -- Kind regards, Dmitriy Rabotyagov

1 0

[all] New CFN(Computing Force Network) SIG Proposal
by niujie 12 Apr '22

12 Apr '22

Hi all I'm from China Mobile, China Mobile is recently working on build a new information infrastructure focusing on connectivity, computing power, and capabilities, this new information infrastructure is called Computing Force Network, we think OpenStack community which gathers global wisdom together is a perfect platform to discuss topics like CFN, so we are proposing to create a new SIG for CFN(Computing Force Network). Below is CFN brief introduction and initial SIG scope. With the flourish of new business scenarios such as hybrid cloud, multi-cloud, AI, big data processing, edge computing, building a new information infrastructure based on multiple key technologies that converged cloud and network, will better support global digital transformation. This new infrastructure is not only relates to cloud, it is getting more and more connected with network, and at the same time, we also need to consider how to converge multiple technologies like AI, Blockchain, big data, security to provide this all-in-one service. Computing Force Network(CFN) is a new information infrastructure that based on network, focused on computing, deeply converged Artificial intelligence, Block chain, Cloud, Data, Network, Edge computing, End application, Security(ABCDNETS), providing all-in-one services. Xiaodong Duan, Vice president of China Mobile Research Institute, introduced the vision and architecture of Computing Force Network in 2021 November OpenInfra Live Keynotes by his presentation Connection + Computing + Capability Opens a New Era of Digital Infrastructure, he proposed the new era of CFN. We are expecting to work with OpenStack on how to build this new information infrastructure, and how to promote the development and implementation of next generation infrastructure, achieve ubiquitous computing force, computing & network convergence, intelligence orchestration, all-in-one service. Then computing force will become common utilities like water and electric step by step, computing force will be ready for access upon use and connected by single entry point. The above vision of CFN , from technical perspective, will mainly focus on unified management and orchestration of computing + network integrated system, computing and network deeply converged in architecture, form and protocols aspect, bringing potential changes to OpenStack components. CFN is aiming to achieve seamlessly migration of any application between any heterogeneous platforms, it's a challenge for the industry currently, we feel that in pursuit of CFN could potentially contributes to the development and evolution of OpenStack. In this CFN SIG, we will mainly focus on discussing how to build the new information infrastructure of CFN, related key technologies, and what's the impact on OpenStack brought by the network & could convergence trend , the topics are including but not limited to: 1, A computing basement for unified management of container, VM and Bare Metal 2, Computing infrastructure which eliminated the difference between heterogeneous hardware 3, Measurement criteria and scheduling scheme based on unified computing infrastructure 4, Network solutions for SDN integrating smart NIC for data center 5, Unified orchestration & management for "network + cloud", and "cloud + edge + end" integrated scheduling solution We will have regular meetings to investigate and discuss business scenarios, development trend, technical scheme, release technical documents, technical proposal and requirements for OpenStack Projects, and propose new project when necessary. We will also collaborate with other open source projects like LFN, CNCF, LFE, to have a consistent plan across communities, and align with global standardization organization like ETSI, 3GPP, IETF, to promote CFN related technical scheme become the standard in industry. If you have any thoughts, interests, questions, requirements, we can discuss by this mailing list. Any suggestions are welcomed, and we are really hoping to hear from anyone, and work with you. Jie Niu China Mobile

1 0

[Kolla-ansible][Xena] How to undeploy (remove) a service
by wodel youchi 12 Apr '22

12 Apr '22

Hi, How can I remove a deployed service with kolla-ansible? Regards. <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> Virus-free. www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

2 1

[nova][placement] Zed PTG summary
by Sylvain Bauza 12 Apr '22

12 Apr '22

Yet again, let me try to provide you a summary about our previous PTG, this time for the Zed release. You can see all the notes thanks to this read-only etherpad : https://etherpad.opendev.org/p/r.75a986ce3ac43bb74b93c5de63d84fe9 ### Cross-project discussions ### # Neutron cross-project discussion with Nova - The nova community asked how to require Neutron backends to support a list of Neutron API extensions (for example multiple port bindings). We discussed whether it was rather a documentation issue or a code issue, but eventually it was rather a supporting concern as we don't test all of the backends for Nova. We then agreed on discussing this during the next OpenInfra Summit in Berlin with operators then, if possible. - We agreed on providing a new job for verifying whether heal_instance_info_cache_interval is no longer needed. # Cinder cross-project discussion with Nova - We discussed how we could remove the os-brick rootwrap config from nova and rather moving the config into directly os-brick. We eventually agreed on trying to rather implement the rootwrap->privsep transition, hopefully, thanks to some Stephen's help ;) # Cyborg cross-project discussion with Nova - We agreed on continuing to accept to provide traits for Resource Providers for owners (OWNER_NOVA at least). Context is https://review.opendev.org/c/openstack/nova-specs/+/836583 and we discussed about some implementation nits. ### Nova specific topics ### # Procedural discussions - We discussed on Yoga retrospective. We were happy to not have a RC2, to have new contributors and to have provided features to Placement for the last two cycles. We agreed to stopping to accept blind rechecks and to use the review priority label. Eventually we agreed on maybe adding new stable cores. - We need to fix Placement tests that verify the number of traits as for the moment it creates some issues. We agreed on relaxing those tests and to add a PTL doc saying we would bump os-traits and os-resource-classes usage in placement before RC1. - We agreed on having the same deadlines that for the last cycle, which are, Spec approval freeze for Zed-2 milestone (July 14th), and FeatureFreeze for Zed-3 (Sep 1st). We will have two spec review days - We agreed on keeping the same release model for os-vif - We agreed on continuing to use the review priority label in Gerrit and encourage contributors to use it (once we land the necessary changes in Gerrit) - Follow-up discussion on the novaclient CLI deprecation we agreed on Yoga. We'll modify the spec template to ask for rather updating OSC instead of the shell, and how to return some warnings if you use the shell. - We agreed on having some bug triage rotation between our contributors. I'll explain it in our next team meeting today :-) - We agreed on saying 'Unsupported' instead of 'Deprecated" for some features that need help if we don't want to remove them :-) - Again, we loudly said ***NO FOR BLIND RECHECKS*** https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-te… # New Release cadence (ie. the tick-tock release balance) - We agreed on writing some guidelines in our Nova documentation explaining the differences between tick and tock releases from a nova perspective and what people could do. We agreed on *not* bumping the compute minimum supported version in a tick release. That would also be super cool if we could have some sphinx directive in reno that contributors would use if they add/modify things in a tock release but want operators to know in the next tick. # Planned API modifications - We agreed on testing new policy defaults in the gate and not yet enforce new scopes until we are sure everything works correctly. Devstack will need modifications for those enablements and proper communication has to be made to deployment projects to make sure they're on the same page before we change anything. - We agreed on deprecating the possibility to generate new keypairs thru the Nova API. Only keypair imports will be accepted in the future. - We agreed on some usecase for adding network domain name in our metadata API. Things have to be further discussed in a spec but the direction sounds reasonable. - We agreed on letting userdata be editables. Details were discussed about the limits of this new mutable field (configdrive et when to apply) but spec will be updated accordingly. - Being able to unshelve an instance by passing a destination seems a valid usecase, spec has to be reviewed besides the implementation. - We'll try to somehow ensure that renaming tenant_id into project_id in our API isn't yet again deferred to the next cycle, even tho the series is large and merge conflicts are important. - Manila shares could be attached or detached to instances thru a new API and notifications would be emitted # Other - Centos9 will be tested on a weekly basis in our gate at first - Nova healthcheck is definitely a thing we want, but we miss hands on deck. - having PCI devices being tracked in Placement is also something we'd love to see arriving on this cycle - we'll continue further testing emulated hardware. Maybe some blueprints would come up but we also said we'll try to give visibility on the periodic gate runs by looking at them in our weekly meeting. - We discussed a very interesting case with the Scaphandre project that needs to use virtio-fs for passing system usage to the guests. We eventually agreed on two possible directions, with one preferred, which is to reuse the Manila shares support we're going to add in Zed. - We can be smarter on placing guest CPUs on physical cores or dies, but this requires a blueprint at least as we agreed on providing some flavor extraspec or image property for letting operators to define the CPU placement. - Windows guests would benefit from new enlightenments in Zed if we merge some small change - Having CPU cores be externally managed by a daemon that would turn them on/off based on consumption seems a valid usecase. We discussed about some details but spec has to be reproposed. That's it. If you reached this line, kudos, you're brave. I tried to be short, but it looks to me I failed. Anyway, the source of truth remains the etherpad, just please avoid to amend it now. -Sylvain

1 0

[openstack-helm] No meeting this week
by Gage Hugo 12 Apr '22

12 Apr '22

Hey team, Since there is nothing on the agenda the meeting for this week is cancelled. We will meet next week at the usual time.

1 0

Infrastructure and Virtual Resources utilisation tool for openstack cloud
by KK CHN 12 Apr '22

12 Apr '22

List, Can anyone point out the best metering and monitoring tool/tool combination for the complete infrastructure statistics and ( for report generation) as well as virtual resources utilization (including health check of virtual machines / virtual resources ) report generation tools which can be integrated with OpenStack middleware. ? any suggestions most welcome. Thanks in advance, Krish

1 0

[all][tc] Canceling TC this week meetings
by Ghanshyam Mann 12 Apr '22

12 Apr '22

Hello Everyone, TC will not have this week meeting and will continue the weekly meeting from April 21st onwards. -gmann

1 0

[neutron][ops] OVN scale issues and reviving midonet plugin
by Sam Morrison 12 Apr '22

12 Apr '22

Hi, We recently tried to migrate our install from ML2 midonet -> OVN driver on our Victoria Openstack install with ~1000 hypervisors. Victoria was the last release where midonet plugin was supported so was a good motivation to move. Unfortunately when we changed the neutron-server config over to use OVN in our production install everything went very bad. We got lots of things like: ovsdbapp.exceptions.TimeoutException: Commands [<neutron.plugins.ml2.drivers.ovn.mech_driver.ovsdb.commands.CheckRevisionNumberCommand object at 0x7fa3b84bd8b0>, <neutron.plugins.ml2.drivers.ovn.mech_driver.ovsdb.commands.SetLSwitchPortCommand object at 0x7fa37b04cf40>, <ovsdbapp.schema.ovn_northbound.commands.PgDelPortCommand object at 0x7fa375ae0fd0>] exceeded timeout 180 seconds, cause: TXN queue is ful ovsdbapp.exceptions.TimeoutException: Commands [<neutron.plugins.ml2.drivers.ovn.mech_driver.ovsdb.commands.CheckRevisionNumberCommand object at 0x7f0ee5197dc0>, <neutron.plugins.ml2.drivers.ovn.mech_driver.ovsdb.commands.SetLSwitchPortCommand object at 0x7f0ee50a92e0>, <ovsdbapp.schema.ovn_northbound.commands.PgAddPortCommand object at 0x7f0ee5181760>] exceeded timeout 180 seconds, cause: Result queue is empty ovsdbapp.exceptions.TimeoutException: Commands [<ovsdbapp.backend.ovs_idl.command.DbDestroyCommand object at 0x7fcd99f9ea90>] exceeded timeout 180 seconds, cause: Result queue is empt among other things, which forced us to roll back. Our next approach is to get everything up to yoga and try again, (with some better live testing before we make the switch somehow) In the mean time we have revived the networking-midonet plugin in our own branch but just wanted to check to see if anyone else is in this situation and are or have looked into running midonet on wallaby and beyond? Cheers, Sam

1 0

[manila][ussuri] Manila return 404 resource not found after simple install
by CHANU ROMAIN 11 Apr '22

11 Apr '22

Hello, I tried to install manila on Ubuntu servers and I'm stuck during the first steps. I followed this documentation: https://docs.openstack.org/manila/ussuri/install/install-controller-ubuntu.… When I tried to verify the operation I always get the same message: # manila service-list ERROR: Not Found (HTTP 404) In manila-api.log 2022-04-11 12:12:56.533 125 INFO eventlet.wsgi.server [req-c03111de- 46bb-40e1-9440-2f62a94a61f0 ee3ae5e43b4c6246c4d95264b2978bf05dce57920b6b852d62b450ad6e7fb392 59bc7ad25c364c809a97c1a55caec161 - - -] IP_CLIENT,IP_LB "GET /v2/services HTTP/1.1" status: 404 len: 228 time: 0.1233838 If I use -d #manila -d service-list DEBUG (connectionpool:208) Starting new HTTP connection (1): FQDN DEBUG (connectionpool:396) http://FQDN:8786 "GET /v2/services HTTP/1.1" 404 112 RESP: [404] {'Content-Length': '112', 'Content-Type': 'application/json', 'Date': 'Mon, 11 Apr 2022 12:14:51 GMT'} RESP BODY: {"message": "The resource could not be found.<br /><br />\n\n\n", "code": "404 Not Found", "title": "Not Found"} Services are running, database is populated, rabbitmq has some exchanges... I currently run out of ideas... Did someone already face this issue? Best regards, Romain

2 1

Re: [neutron] exposing ip address of external Network from
by A Monster 11 Apr '22

11 Apr '22

Hi, indeed I have dhcp disabled for this network, and that's because I have an external dhcp server which attributes ip addresses to hosts on this network, so I cannot check the dhcp option when creating subnets for this public network.

1 0