May 2022 - openstack-discuss - lists.openstack.org

Fwd: DPDK+OVS with OpenStack
by Mark Wittling 23 Apr '25

23 Apr '25

Looking for someone who knows OpenStack with OpenVSwitch, and in addition to that, DPDK with OpenStack and OVS.I am using OpenStack Queens, with OpenVSwitch. The architecture I am using is documented here: https://docs.openstack.org/neutron/queens/admin/deploy-ovs-provider.htmlThe OVS I am using on the Compute Node, is compiled with DPDK, and I have enabled the datapath to netdev (DPDK) on br-prv (provider network bridge), and br-tun (tunneling bridge). But these two bridges, br-tun and br-prv, are patched into another OpenStack bridge, called br-int. I wasn’t actually sure about whether to tinker with this bridge, and wondered what datapath it was using.Then, I realized there is a parameter in the openvswitch_agent.ini file, which I will list here: # OVS datapath to use. 'system' is the default value and corresponds to the # kernel datapath. To enable the userspace datapath set this value to 'netdev'. # (string value) # Possible values: # system - <No description provided> # netdev - <No description provided> #datapath_type = system datapath_type = netdev So in tinkering with this, what I realized, is that when you set this datapath_type to system or netdev, it will adjust the br-int bridge to that datapath type.So here is my question. How can I launch a non-DPDK VM, if all of the bridges are using the netdev datapath type?Here is another question. What if one of the flavors don’t have the largepages property set on them? I assumed OpenStack would revert to a system datapath and not use DPDK for those VM interfaces. Well, I found out in testing, that is not the case. If you set all your bridges up for netdev, and you don’t set the property on the Flavor of the VM (largepages), the VM will launch, but it simply won’t work.Is there no way, on a specific Compute Host, to support both DPDK (netdev datapaths) and non-DPDK (system datapaths)?Either on a VM interface level (VM has one interface that is netdev DPDK and another that is system datapath non-DPDK)?Or on a VM by VM basis (VM 1 has 1 or more netdev datapath interfaces and VM 2 has 1 or more system datapath interfaces)?Am I right here? Once you set up a Compute Host for DPDK, it’s DPDK or nothing on that Compute Host? (edited)

3 2

How to config DPDK compute in OVN
by dangerzone ar 22 Apr '25

22 Apr '25

Hi....as far I understand ovs does support dpdk compute to be deployed. I'm referring to the guideline ' *https://docs.openstack.org/networking-ovn/queens/admin/dpdk.html <https://docs.openstack.org/networking-ovn/queens/admin/dpdk.html>* ' ... It's too brief.. May I know how to config dpdk compute in OVN networking openstack? Hope someone could help what is the config to be done.... Currently compute is run without dpdk over openstack train ovn based. Please need some info on how I can proceed. Thank you

2 1

ERROR openstack [-] Resource OS::TripleO::Network::Ports::ControlPlaneVipPort maps to type OS::Neutron::Port and the Neutron service is not available when using ephemeral Heat.| Openstack tripleo wallaby version
by Swogat Pradhan 24 Dec '24

24 Dec '24

Hi, I am currently trying to deploy openstack wallaby using tripleo arch. I created the network jinja templates, ran the following commands also: #openstack overcloud network provision --stack overcloud --output networks-deployed-environment.yaml custom_network_data.yaml # openstack overcloud network vip provision --stack overcloud --output vip-deployed-environment.yaml custom_vip_data.yaml # openstack overcloud node provision --stack overcloud --overcloud-ssh-key /home/stack/sshkey/id_rsa overcloud-baremetal-deploy.yaml and used the environment files in the openstack overcloud deploy command: (undercloud) [stack@hkg2director ~]$ cat deploy.sh #!/bin/bash THT=/usr/share/openstack-tripleo-heat-templates/ CNF=/home/stack/ openstack overcloud deploy --templates $THT \ -r $CNF/templates/roles_data.yaml \ -n $CNF/workplace/custom_network_data.yaml \ -e ~/containers-prepare-parameter.yaml \ -e $CNF/templates/node-info.yaml \ -e $CNF/templates/scheduler-hints.yaml \ -e $CNF/workplace/networks-deployed-environment.yaml \ -e $CNF/workplace/vip-deployed-environment.yaml \ -e $CNF/workplace/overcloud-baremetal-deployed.yaml \ -e $CNF/workplace/custom-net-bond-with-vlans.yaml Now when i run the ./deploy.sh script i encounter an error stating: ERROR openstack [-] Resource OS::TripleO::Network::Ports::ControlPlaneVipPort maps to type OS::Neutron::Port and the Neutron service is not available when using ephemeral Heat. The generated environments from 'openstack overcloud baremetal provision' and 'openstack overcloud network provision' must be included with the deployment command.: tripleoclient.exceptions.InvalidConfiguration: Resource OS::TripleO::Network::Ports::ControlPlaneVipPort maps to type OS::Neutron::Port and the Neutron service is not available when using ephemeral Heat. The generated environments from 'openstack overcloud baremetal provision' and 'openstack overcloud network provision' must be included with the deployment command. 2022-04-19 13:47:16.582 735924 INFO osc_lib.shell [-] END return value: 1 Can someone tell me where the mistake is? With regards, Swogat Pradhan

4 4

Live migration fails
by Szabo, Istvan (Agoda) 07 Aug '24

07 Aug '24

Hi, I have couple of compute nodes where the live migration fails with existing vms. When I quickly spawn a vm and try live migration it works so I assume shouldn't be a big problem with the compute node. However I have many existing vms where it fails with a servername not found. /var/log/nova/nova-conductor.log:2021-04-21 14:47:12.605 227612 ERROR nova.conductor.tasks.migrate [req-f4067a26-a233-4673-8c07-9a8a290980b0 dce35e6eceea4312bb0baa0510cef363 ca7e35079f4440c78bd9870724b9638b - default default] [instance: 1517a2ac-3b51-4d8d-80b3-89a5614d1ae0] Unable to find record for source node servername on servername: ComputeHostNotFound: Compute host servername could not be found. /var/log/nova/nova-conductor.log:2021-04-21 14:47:12.605 227612 WARNING nova.scheduler.utils [req-f4067a26-a233-4673-8c07-9a8a290980b0 dce35e6eceea4312bb0baa0510cef363 ca7e35079f4440c78bd9870724b9638b - default default] Failed to compute_task_migrate_server: Compute host servername could not be found.: ComputeHostNotFound: Compute host servername could not be found. /var/log/nova/nova-conductor.log:2021-04-21 14:47:12.605 227612 WARNING nova.scheduler.utils [req-f4067a26-a233-4673-8c07-9a8a290980b0 dce35e6eceea4312bb0baa0510cef363 ca7e35079f4440c78bd9870724b9638b - default default] [instance: 1517a2ac-3b51-4d8d-80b3-89a5614d1ae0] Setting instance to ACTIVE state.: ComputeHostNotFound: Compute host servername could not be found. /var/log/nova/nova-conductor.log:2021-04-21 14:47:12.672 227612 ERROR oslo_messaging.rpc.server [req-f4067a26-a233-4673-8c07-9a8a290980b0 dce35e6eceea4312bb0baa0510cef363 ca7e35079f4440c78bd9870724b9638b - default default] Exception during message handling: ComputeHostNotFound: Compute host am-osfecn-4025 Tried with this command: nova live-migration --block-migrate id. Any idea? Thank you. ________________________________ This message is confidential and is for the sole use of the intended recipient(s). It may also be privileged or otherwise protected by copyright or other legal rules. If you have received it by mistake please let us know by reply email and delete it from your system. It is prohibited to copy this message or disclose its content to anyone. Any confidentiality or privilege is not waived or lost by any mistaken delivery or unauthorized disclosure of the message. All messages sent to and from Agoda may be monitored to ensure compliance with company policies, to protect the company's interests and to remove potential malware. Electronic messages may be intercepted, amended, lost or deleted, or contain viruses.

5 16

[puppet] Proposing core team clean up
by Takashi Kajinami 23 Aug '23

23 Aug '23

Hello, I went through the current core reviewers and found out that the current list includes some people no longer working in the OpenStack community. I'd like to propose removing the following persons from the core reviewer team as we haven't seen these people making any activity in the community recently. * Pradeep Kilambi - puppet-aodh, puppet-ceilometer, puppet-gnocchi, puppet-panko * Richard Megginson - puppet-keystone * Denis Egorenko - puppet-murano * Serg Melikyan - puppet-murano * Sergey Kolekonov - puppet-neutron * David Moreau Simard - puppet-openstack-integration * Yu xingchao - all modules Also, I confirmed that Wes Hayutin is no longer working for OpenStack and he agreed to retire from the core reviewer position. Thus I'll remove him as well. I'll be open for any feedback for one week to hear any thoughts/feedback about this removal. I'd like to take this moment to thank all people for their past work. We always welcome them back if they resume their work in this project. Thank you, Takashi KAJINAMI

3 4

live resize
by Parsa Aminian 15 Mar '23

15 Mar '23

hello on openstack with ceph backend is it possible to live resize instances ? I want to change flavor without any down time .

5 6

[designate] How to avoid NXDOMAIN or stale data during cold start of a (new) machine
by Christian Rohmann 23 Nov '22

23 Nov '22

Hello openstack-discuss, I have a designate setup using bind9 as the user-serving DNS server. When starting a machine with either very old or no zones at all, NXDOMAIN or other actually stale data is sent out to clients as designate is not done doing an initial full sync / reconciliation. * What is the "proper" way to tackle this cold-start issue and to keep the bind from serving wrong data? ** Did I miss on any options to handle this startup case? * What is the usual runtime for an initial sync that you observe in case the backend DNS server has no zones at all anymore? Regards Christian

2 7

[all] Deprecated Zuul queue syntax
by Clark Boylan 16 Sep '22

16 Sep '22

Hello, Zuul deprecated declaring shared queues at a pipeline level with release 4.1.0 [0]. Zuul's current plan is to stop accepting this form of configuration with a future 7.0.0 release. More details on what needs to change can be found in Zuul's reminder notice on the Zuul mailing list [1]. I expect we have about a month before the v7 release which should give us plenty of time to fix this. If we don't fix this before the v7 release the expected fallout will be that these project branches will not have any pipelines defined, which means no Zuul jobs will run against that project branch until the configs are updated. I've marked this for everyone because 98 repositories are affected, and I'm not sure listing them all in the subject would be productive. Here is the list of affected repos: openstack/adjutant openstack/ansible-collection-kolla openstack/ansible-role-collect-logs openstack/ansible-role-tripleo-modify-image openstack/barbican openstack/barbican-tempest-plugin openstack/barbican-ui openstack/blazar openstack/blazar-tempest-plugin openstack/ceilometer openstack/cinderlib openstack/cloudkitty openstack/cloudkitty-tempest-plugin openstack/cyborg-tempest-plugin openstack/designate openstack/designate-dashboard openstack/designate-tempest-plugin openstack/devstack-gate openstack/ec2-api openstack/ec2api-tempest-plugin openstack/freezer openstack/freezer-tempest-plugin openstack/heat openstack/heat-dashboard openstack/heat-tempest-plugin openstack/horizon openstack/ironic openstack/ironic-inspector openstack/ironic-lib openstack/ironic-prometheus-exporter openstack/ironic-python-agent openstack/ironic-tempest-plugin openstack/kayobe openstack/kayobe-config openstack/kayobe-config-dev openstack/kolla openstack/kolla-ansible openstack/kuryr openstack/magnum openstack/magnum-tempest-plugin openstack/manila openstack/manila-tempest-plugin openstack/masakari openstack/masakari-monitors openstack/mistral openstack/mistral-tempest-plugin openstack/monasca-api openstack/monasca-common openstack/monasca-events-api openstack/monasca-log-api openstack/monasca-tempest-plugin openstack/murano openstack/murano-tempest-plugin openstack/networking-generic-switch openstack/octavia openstack/octavia-tempest-plugin openstack/openstack-chef openstack/os-net-config openstack/os-win openstack/oswin-tempest-plugin openstack/paunch openstack/project-config openstack/puppet-pacemaker openstack/puppet-tripleo openstack/python-designateclient openstack/python-ironicclient openstack/python-saharaclient openstack/python-tripleoclient openstack/python-troveclient openstack/sahara openstack/sahara-tests openstack/senlin openstack/senlin-tempest-plugin openstack/solum openstack/solum-tempest-plugin openstack/telemetry-tempest-plugin openstack/tenks openstack/tripleo-ci openstack/tripleo-ci-health-queries openstack/tripleo-common openstack/tripleo-heat-templates openstack/tripleo-quickstart openstack/tripleo-quickstart-extras openstack/tripleo-upgrade openstack/trove openstack/trove-tempest-plugin openstack/vitrage openstack/vitrage-tempest-plugin openstack/watcher openstack/watcher-tempest-plugin openstack/zaqar openstack/zaqar-tempest-plugin openstack/zun openstack/zun-tempest-plugin windmill/windmill windmill/windmill-backup x/neutron-classifier x/vmware-nsx I'll go ahead and push changes to windmill/* and x/* as those are leftovers from splitting things up into tenants and haven't ended up in their own tenants yet. But it would be great if OpenStack can work on cleaning up this deprecated syntax in the OpenStack repos. I've attached a file with a listing that includes more details for each repo (branches and specific config files) to make it easier for people to find where the old syntax is located so that it can be replaced with the new syntax. [0] https://zuul-ci.org/docs/zuul/latest/releasenotes.html#relnotes-4-1-0-depre… [1] https://lists.zuul-ci.org/pipermail/zuul-discuss/2022-May/001801.html

2 2

[all] Dynamic Zuul results table in Gerrit 3
by Radosław Piliszek 04 Aug '22

04 Aug '22

Hello Fellow OpenStack and OpenDev Folks! TL;DR click on [3] and enjoy. I am starting this thread to not hijack the discussion happening on [1]. First of all, I would like to thank gibi (Balazs Gibizer) for hacking a way to get the place to render the table in the first place (pun intended). I have been a long-time-now user of [2]. I have improved and customised it for myself but never really got to share back the changes I made. The new Gerrit obviously broke the whole script so it was of no use to share at that particular state. However, inspired by gibi's work, I decided to finally sit down and fix it to work with Gerrit 3 and here it comes: [3]. Works well on Chrome with Tampermonkey. Not tested others. I hope you will enjoy this little helper (I do). I know the script looks super fugly but it generally boils down to a mix of styles of 3 people and Gerrit having funky UI rendering. Finally, I'd also like to thank hrw (Marcin Juszkiewicz) for linking me to the original Michel's script in 2019. [1] http://lists.openstack.org/pipermail/openstack-discuss/2020-November/019051… [2] https://opendev.org/x/coats/src/commit/444c95738677593dcfed0cfd9667d4c4f0d5… [3] https://gist.github.com/yoctozepto/7ea1271c299d143388b7c1b1802ee75e Kind regards, -yoctozepto

5 7

[adjutant][tc][all] Call for volunteers to be a PTL and maintainers
by Slawek Kaplonski 14 Jul '22

14 Jul '22

Hi, After last PTL elections [1] Adjutant project don't have any PTL. It also didn't had PTL in the Yoga cycle already. So this is call for maintainters for Adjutant. If You are using it or interested in it, and if You are willing to help maintaining this project, please contact TC members through this mailing list or directly on the #openstack-tc channel @OFTC. We can talk possibilities to make someone a PTL of the project or going with this project to the Distributed Project Leadership [2] model. [1] http://lists.openstack.org/pipermail/openstack-discuss/2022-February/027411… [2] https://governance.openstack.org/tc/resolutions/20200803-distributed-projec… -- Slawek Kaplonski Principal Software Engineer Red Hat

4 8

[all] PyCharm Licenses Renewed till July 2021
by Swapnil Kulkarni 13 Jul '22

13 Jul '22

Hello, Happy to inform you the open source developer license for Pycharm has been renewed for 1 additional year till July 2021. Best Regards, Swapnil Kulkarni coolsvap at gmail dot com

8 13

Nova not updating to new size of an extended in-use / attached cinder volume (Ceph RBD) to guest
by Christian Rohmann 28 Jun '22

28 Jun '22

Hello Openstack-Discuss, after some digging I found out that cinder learned to resize attached (in-use) volumes quite a while ago with the introduction of the initial "extend 'in-use' volume" feature: https://review.opendev.org/c/openstack/cinder/+/454287/ The support was then extended to also cover Ceph RBD backed volumes with: https://review.opendev.org/c/openstack/nova/+/613039/ Since this is only about the cinder part, I was wondering if nova would ever find out and would actively rescan the device / volume and quintessentially present an increased new size to the guest. Apparently this is where a certain volume-extended event comes into play: https://review.opendev.org/c/openstack/nova/+/454322/ that is to be emitted by cinder when a volume had been extened. I then went head and tried this with the openstack cli (as Horizon does not seem to support / offer to resize in-use volumes. I run Openstack Train with Ceph RBD as storage. First I ran into an issue with the openstack cli (https://bugs.launchpad.net/cinder/+bug/1871759/comments/2 <https://bugs.launchpad.net/cinder/+bug/1871759/comments/2>) but using cinder extend $volumeid $newsize I was able to resize in-use volumes just fine. The only thing missing was the propagation to the guest. I played around with SCSI rescans, but that did not work, reboots also failed to do anyting in this regards. Stopping and starting the VM did work, but why having the capability to online-resize an attached volume when not being able to resize the guest volume as well? Apparently there seems to be an old and somewhat similar observation / bug with https://bugs.launchpad.net/nova/+bug/1369465 So I was simply wondering if this is expected to be working? Are there any special settings / options I need to set to enable this feature? Thanks and with kind regards Christian

4 9

[Ceph Rados Gateway] 403 when using S3 client
by Taltavull Jean-François 27 Jun '22

27 Jun '22

Hi All, I get an http 403 error code when I try to get the bucket list with Ubuntu (Focal) S3 client (awscli). S3 api has been activated in radosgw config file and EC2 credentials have been created and put in S3 client config file. Otherwise, everything is working fine with OpenStack client. My deployment: - OSA 23.2.0 - OpenStack Wallaby - Ceph and Rados GW Octopus Has any of you already experienced this kind of behaviour ? Many thanks, Jean-Francois

3 6

[vmware-nsx] Missing releases and project status
by Takashi Kajinami 25 Jun '22

25 Jun '22

Hello, I recently noticed that the vmware-nsx repo doesn't have the stable/wallaby branch and the stable/yoga branch. Also, no release has been created since victoria release. There is a bug fix recently merged directly to stable/xena, and this was backported to ussuri and train with victoria skipped. https://review.opendev.org/c/x/vmware-nsx/+/836034 I'm quite confused with this because it looks like master and victoria are no longer maintained. May I ask for some clarification about the current status of the project, especially regarding the following points. - Is there any plan to create stable/wallaby and stable/yoga ? - Is there any plan to create a release for stable/wallaby and later ? - May I know the maintenance status of each branch ? - What is the future plan of that repo? Will you have stable/zed release ? I'm asking this because the plugin is supported by puppet-neutron but we are thinking of deprecating/removing the implementation if the plugin will be unmaintained. I'd appreciate your input on this. Thank you, Takashi

1 1

[oslo] Propose to EOL stable/queens, stable/rocky on all the oslo scope
by Herve Beraud 24 Jun '22

24 Jun '22

Hi, On our last meeting of the oslo team we discussed the problem with broken stable branches (rocky and older) in oslo's projects [1]. Indeed, almost all these branches are broken. Előd Illés kindly generated a list of periodic-stable errors on Oslo's stable branches [2]. Given the lack of active maintainers on Oslo and given the current status of the CI in those branches, I propose to make them End Of Life. I will wait until the end of month for anyone who would like to maybe step up as maintainer of those branches and who would at least try to fix CI of them. If no one will volunteer for that, I'll EOLing those branches for all the projects under the oslo umbrella. Let us know your thoughts. Thank you for your attention. [1] https://meetings.opendev.org/meetings/oslo/2021/oslo.2021-10-04-15.00.log.t… [2] http://lists.openstack.org/pipermail/openstack-discuss/2021-July/023939.html -- Hervé Beraud Senior Software Engineer at Red Hat irc: hberaud https://github.com/4383/ https://twitter.com/4383hberaud

5 5

[heat-translator][tacker] Propose Hiromu Asahina (h-asahina) for heat-translator core team
by Yoshito Ito 24 Jun '22

24 Jun '22

Hi heat-translator team! I would like to propose Hiromu Asahina (h-asahina) as a member of the heat-translator core team. I'm now not able to actively contribute to heat-translator, and he can lead the team instead of me. He is mainly contributing to Tacker by fixing issues, refactoring existing codes, and a lot of helpful reviews, with his experience as a research engineer in NTT. Tacker highly depends on heat-translator in its main functionality, so I believe he can manage it with his knowledge of Tacker. Please vote for his nomination by answering this mail till June 1st. Best Regards, Yoshito Ito

7 10

R: R: R: [Devstack][Gnocchi][Ceilometer] Not able to retrieve metrics using ceilometer and gnocchi
by Molka Gharbaoui 22 Jun '22

22 Jun '22

3 4

Re: ERROR openstack [-] Resource OS::TripleO::Network::Ports::ControlPlaneVipPort maps to type OS::Neutron::Port and the Neutron service is not available when using ephemeral Heat.| Openstack tripleo wallaby version
by Lokendra Rathour 08 Jun '22

08 Jun '22

Hi Swogat, Thanks once again. with the files as shown below I am running the overcloud deploy for wallaby using this command: (undercloud) [stack@undercloud ~]$ cat deploy_overcloud_working_1.sh openstack overcloud deploy --templates \ -n /home/stack/templates/network_data.yaml \ -r /home/stack/templates/roles_data.yaml \ -e /home/stack/templates/environment.yaml \ -e /home/stack/templates/environments/network-isolation.yaml \ -e /home/stack/templates/environments/network-environment.yaml \ -e /usr/share/openstack-tripleo-heat-templates/environments/services/ironic-conductor.yaml \ -e /usr/share/openstack-tripleo-heat-templates/environments/services/ironic-inspector.yaml \ -e /usr/share/openstack-tripleo-heat-templates/environments/services/ironic-overcloud.yaml \ -e /home/stack/templates/ironic-config.yaml \ -e /usr/share/openstack-tripleo-heat-templates/environments/docker-ha.yaml \ -e /usr/share/openstack-tripleo-heat-templates/environments/podman.yaml \ -e /home/stack/containers-prepare-parameter.yaml (undercloud) [stack@undercloud ~]$ This deployment is on ipv6 using triple0 wallaby, templates, as mentioned below, are generated using rendering steps and the network_data.yaml the roles_data.yaml Steps used to render the templates: cd /usr/share/openstack-tripleo-heat-templates/ ./tools/process-templates.py -o ~/openstack-tripleo-heat-templates-rendered_at_wallaby -n /home/stack/templates/network_data.yaml -r /home/stack/templates/roles_data.yaml *Now if i try adding the related to VIP port I do get the error as:* 2022-05-30 10:37:12.792 979387 WARNING tripleoclient.v1.overcloud_deploy.DeployOvercloud [-] rendering j2 template to file: /home/stack/overcloud-deploy/overcloud/tripleo-heat-templates/puppet/controller-role.yaml 2022-05-30 10:37:12.792 979387 WARNING tripleoclient.v1.overcloud_deploy.DeployOvercloud [-] rendering j2 template to file: /home/stack/overcloud-deploy/overcloud/tripleo-heat-templates/puppet/compute-role.yaml 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud [-] Exception occured while running the command: ValueError: The environment is not a valid YAML mapping data type. 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud Traceback (most recent call last): 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud File "/usr/lib/python3.6/site-packages/tripleoclient/command.py", line 34, in run 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud super(Command, self).run(parsed_args) 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud File "/usr/lib/python3.6/site-packages/osc_lib/command/command.py", line 39, in run 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud return super(Command, self).run(parsed_args) 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud File "/usr/lib/python3.6/site-packages/cliff/command.py", line 185, in run 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud return_code = self.take_action(parsed_args) or 0 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud File "/usr/lib/python3.6/site-packages/tripleoclient/v1/overcloud_deploy.py", line 1189, in take_action 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud stack, parsed_args, new_tht_root, user_tht_root) 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud File "/usr/lib/python3.6/site-packages/tripleoclient/v1/overcloud_deploy.py", line 227, in create_env_files 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud created_env_files, parsed_args, new_tht_root, user_tht_root) 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud File "/usr/lib/python3.6/site-packages/tripleoclient/v1/overcloud_deploy.py", line 204, in build_image_params 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud cleanup=(not parsed_args.no_cleanup)) 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud File "/usr/lib/python3.6/site-packages/tripleoclient/utils.py", line 1929, in process_multiple_environments 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud env_path=env_path, include_env_in_files=include_env_in_files) 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud File "/usr/lib/python3.6/site-packages/heatclient/common/template_utils.py", line 326, in process_environment_and_files 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud env = environment_format.parse(raw_env) 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud File "/usr/lib/python3.6/site-packages/heatclient/common/environment_format.py", line 50, in parse 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud raise ValueError(_('The environment is not a valid ' 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud ValueError: The environment is not a valid YAML mapping data type. 2022-05-30 10:37:14.455 979387 ERROR tripleoclient.v1.overcloud_deploy.DeployOvercloud 2022-05-30 10:37:14.457 979387 ERROR openstack [-] The environment is not a valid YAML mapping data type. 2022-05-30 10:37:14.457 979387 INFO osc_lib.shell [-] END return value: 1 (undercloud) [stack@undercloud ~]$ This is more of a syntax error where it is not able to understand the passed VIP data file: undercloud) [stack@undercloud ~]$ cat /home/stack/templates/vip-data-default-network-isolation.yaml - dns_name: overcloud network: internal_api - dns_name: overcloud network: external - dns_name: overcloud network: ctlplane - dns_name: overcloud network: oc_provisioning - dns_name: overcloud network: j3mgmt Please advise, also please note that similar templates generated in prior releases such as train/ussuri works perfectly. Please check the list of *templates *files: drwxr-xr-x. 2 stack stack 68 May 30 09:22 environments -rw-r--r--. 1 stack stack 265 May 27 13:47 environment.yaml -rw-rw-r--. 1 stack stack 297 May 27 13:47 init-repo.yaml -rw-r--r--. 1 stack stack 570 May 27 13:47 ironic-config.yaml drwxrwxr-x. 4 stack stack 4096 May 27 13:53 network -rw-r--r--. 1 stack stack 6370 May 27 14:26 network_data.yaml -rw-r--r--. 1 stack stack 11137 May 27 13:53 roles_data.yaml -rw-r--r--. 1 stack stack 234 May 30 09:23 vip-data-default-network-isolation.yaml (undercloud) [stack@undercloud templates]$ cat environment.yaml parameter_defaults: OvercloudControllerFlavor: control OvercloudComputeFlavor: compute ControllerCount: 3 ComputeCount: 1 TimeZone: 'Asia/Kolkata' NtpServer: ['30.30.30.3'] NeutronBridgeMappings: datacentre:br-tenant NeutronFlatNetworks: datacentre (undercloud) [stack@undercloud templates]$ (undercloud) [stack@undercloud templates]$ cat ironic-config.yaml parameter_defaults: NovaSchedulerDefaultFilters: - AggregateInstanceExtraSpecsFilter - AvailabilityZoneFilter - ComputeFilter - ComputeCapabilitiesFilter - ImagePropertiesFilter IronicEnabledHardwareTypes: - ipmi - redfish IronicEnabledPowerInterfaces: - ipmitool - redfish IronicEnabledManagementInterfaces: - ipmitool - redfish IronicCleaningDiskErase: metadata IronicIPXEEnabled: true IronicInspectorSubnets: - ip_range: 172.23.3.100,172.23.3.150 (undercloud) [stack@undercloud templates]$ cat network_data.yaml - name: J3Mgmt name_lower: j3mgmt vip: true vlan: 400 ipv6: true ipv6_subnet: 'fd80:fd00:fd00:4000::/64' ipv6_allocation_pools: [{'start': 'fd80:fd00:fd00:4000::10', 'end': 'fd80:fd00:fd00:4000:ffff:ffff:ffff:fffe'}] mtu: 9000 - name: InternalApi name_lower: internal_api vip: true vlan: 418 ipv6: true ipv6_subnet: 'fd00:fd00:fd00:2000::/64' ipv6_allocation_pools: [{'start': 'fd00:fd00:fd00:2000::10', 'end': 'fd00:fd00:fd00:2000:ffff:ffff:ffff:fffe'}] mtu: 9000 - name: External vip: true name_lower: external vlan: 408 ipv6: true gateway_ipv6: 'fd00:fd00:fd00:9900::1' ipv6_subnet: 'fd00:fd00:fd00:9900::/64' ipv6_allocation_pools: [{'start': 'fd00:fd00:fd00:9900::10', 'end': 'fd00:fd00:fd00:9900:ffff:ffff:ffff:fffe'}] mtu: 9000 - name: OCProvisioning vip: true name_lower: oc_provisioning vlan: 412 ip_subnet: '172.23.3.0/24' allocation_pools: [{'start': '172.23.3.10', 'end': '172.23.3.50'}] mtu: 9000 (undercloud) [stack@undercloud templates]$ cat roles_data.yaml ############################################################################### # File generated by TripleO ############################################################################### ############################################################################### # Role: Controller # ############################################################################### - name: Controller description: | Controller role that has all the controller services loaded and handles Database, Messaging, and Network functions. CountDefault: 1 tags: - primary - controller # Create external Neutron bridge for SNAT (and floating IPs when using # ML2/OVS without DVR) - external_bridge networks: External: subnet: external_subnet InternalApi: subnet: internal_api_subnet OCProvisioning: subnet: oc_provisioning_subnet J3Mgmt: subnet: j3mgmt_subnet # For systems with both IPv4 and IPv6, you may specify a gateway network for # each, such as ['ControlPlane', 'External'] default_route_networks: ['External'] HostnameFormatDefault: '%stackname%-controller-%index%' RoleParametersDefault: OVNCMSOptions: "enable-chassis-as-gw" # Deprecated & backward-compatible values (FIXME: Make parameters consistent) # Set uses_deprecated_params to True if any deprecated params are used. uses_deprecated_params: True deprecated_param_extraconfig: 'controllerExtraConfig' deprecated_param_flavor: 'OvercloudControlFlavor' deprecated_param_image: 'controllerImage' deprecated_nic_config_name: 'controller.yaml' update_serial: 1 ServicesDefault: - OS::TripleO::Services::Aide - OS::TripleO::Services::AodhApi - OS::TripleO::Services::AodhEvaluator .. . ..############################################################################### # Role: Compute # ############################################################################### - name: Compute description: | Basic Compute Node role CountDefault: 1 # Create external Neutron bridge (unset if using ML2/OVS without DVR) tags: - compute - external_bridge networks: InternalApi: subnet: internal_api_subnet J3Mgmt: subnet: j3mgmt_subnet HostnameFormatDefault: '%stackname%-novacompute-%index%' RoleParametersDefault: FsAioMaxNumber: 1048576 TunedProfileName: "virtual-host" # Deprecated & backward-compatible values (FIXME: Make parameters consistent) # Set uses_deprecated_params to True if any deprecated params are used. # These deprecated_params only need to be used for existing roles and not for # composable roles. uses_deprecated_params: True deprecated_param_image: 'NovaImage' deprecated_param_extraconfig: 'NovaComputeExtraConfig' deprecated_param_metadata: 'NovaComputeServerMetadata' deprecated_param_scheduler_hints: 'NovaComputeSchedulerHints' deprecated_param_ips: 'NovaComputeIPs' deprecated_server_resource_name: 'NovaCompute' deprecated_nic_config_name: 'compute.yaml' update_serial: 25 ServicesDefault: - OS::TripleO::Services::Aide - OS::TripleO::Services::AuditD - OS::TripleO::Services::BootParams (undercloud) [stack@undercloud templates]$ cat environments/network-environment.yaml #This file is an example of an environment file for defining the isolated #networks and related parameters. resource_registry: # Network Interface templates to use (these files must exist). You can # override these by including one of the net-*.yaml environment files, # such as net-bond-with-vlans.yaml, or modifying the list here. # Port assignments for the Controller OS::TripleO::Controller::Net::SoftwareConfig: OS::Heat::None # Port assignments for the Compute OS::TripleO::Compute::Net::SoftwareConfig: OS::Heat::None parameter_defaults: # This section is where deployment-specific configuration is done # ServiceNetMap: IronicApiNetwork: oc_provisioning IronicNetwork: oc_provisioning # This section is where deployment-specific configuration is done ControllerNetworkConfigTemplate: 'templates/bonds_vlans/bonds_vlans.j2' ComputeNetworkConfigTemplate: 'templates/bonds_vlans/bonds_vlans.j2' # Customize the IP subnet to match the local environment J3MgmtNetCidr: 'fd80:fd00:fd00:4000::/64' # Customize the IP range to use for static IPs and VIPs J3MgmtAllocationPools: [{'start': 'fd80:fd00:fd00:4000::10', 'end': 'fd80:fd00:fd00:4000:ffff:ffff:ffff:fffe'}] # Customize the VLAN ID to match the local environment J3MgmtNetworkVlanID: 400 # Customize the IP subnet to match the local environment InternalApiNetCidr: 'fd00:fd00:fd00:2000::/64' # Customize the IP range to use for static IPs and VIPs InternalApiAllocationPools: [{'start': 'fd00:fd00:fd00:2000::10', 'end': 'fd00:fd00:fd00:2000:ffff:ffff:ffff:fffe'}] # Customize the VLAN ID to match the local environment InternalApiNetworkVlanID: 418 # Customize the IP subnet to match the local environment ExternalNetCidr: 'fd00:fd00:fd00:9900::/64' # Customize the IP range to use for static IPs and VIPs # Leave room if the external network is also used for floating IPs ExternalAllocationPools: [{'start': 'fd00:fd00:fd00:9900::10', 'end': 'fd00:fd00:fd00:9900:ffff:ffff:ffff:fffe'}] # Gateway router for routable networks ExternalInterfaceDefaultRoute: 'fd00:fd00:fd00:9900::1' # Customize the VLAN ID to match the local environment ExternalNetworkVlanID: 408 # Customize the IP subnet to match the local environment OCProvisioningNetCidr: '172.23.3.0/24' # Customize the IP range to use for static IPs and VIPs OCProvisioningAllocationPools: [{'start': '172.23.3.10', 'end': '172.23.3.50'}] # Customize the VLAN ID to match the local environment OCProvisioningNetworkVlanID: 412 # List of Neutron network types for tenant networks (will be used in order) NeutronNetworkType: 'geneve,vlan' # Neutron VLAN ranges per network, for example 'datacentre:1:499,tenant:500:1000': NeutronNetworkVLANRanges: 'datacentre:1:1000' # Customize bonding options, e.g. "mode=4 lacp_rate=1 updelay=1000 miimon=100" # for Linux bonds w/LACP, or "bond_mode=active-backup" for OVS active/backup. BondInterfaceOvsOptions: "bond_mode=active-backup" (undercloud) [stack@undercloud templates]$ (undercloud) [stack@undercloud templates]$ cat environments/network-isolation.yaml # NOTE: This template is now deprecated, and is only included for compatibility # when upgrading a deployment where this template was originally used. For new # deployments, set "ipv6: true" on desired networks in network_data.yaml, and # include network-isolation.yaml. # # Enable the creation of Neutron networks for isolated Overcloud # traffic and configure each role to assign ports (related # to that role) on these networks. resource_registry: # networks as defined in network_data.yaml OS::TripleO::Network::J3Mgmt: ../network/j3mgmt_v6.yaml OS::TripleO::Network::InternalApi: ../network/internal_api_v6.yaml OS::TripleO::Network::External: ../network/external_v6.yaml OS::TripleO::Network::OCProvisioning: ../network/oc_provisioning.yaml # Port assignments for the VIPs OS::TripleO::Network::Ports::J3MgmtVipPort: ../network/ports/j3mgmt_v6.yaml OS::TripleO::Network::Ports::InternalApiVipPort: ../network/ports/internal_api_v6.yaml OS::TripleO::Network::Ports::ExternalVipPort: ../network/ports/external_v6.yaml OS::TripleO::Network::Ports::OCProvisioningVipPort: ../network/ports/oc_provisioning.yaml # Port assignments by role, edit role definition to assign networks to roles. # Port assignments for the Controller OS::TripleO::Controller::Ports::J3MgmtPort: ../network/ports/j3mgmt_v6.yaml OS::TripleO::Controller::Ports::InternalApiPort: ../network/ports/internal_api_v6.yaml OS::TripleO::Controller::Ports::ExternalPort: ../network/ports/external_v6.yaml OS::TripleO::Controller::Ports::OCProvisioningPort: ../network/ports/oc_provisioning.yaml # Port assignments for the Compute OS::TripleO::Compute::Ports::J3MgmtPort: ../network/ports/j3mgmt_v6.yaml OS::TripleO::Compute::Ports::InternalApiPort: ../network/ports/internal_api_v6.yaml parameter_defaults: # Enable IPv6 environment for Manila ManilaIPv6: True (undercloud) [stack@undercloud templates]$ On Tue, May 24, 2022 at 5:04 PM Lokendra Rathour <lokendrarathour(a)gmail.com> wrote: > Thanks, I'll check them out. > will let you know in case it works out. > > On Tue, May 24, 2022 at 2:37 PM Swogat Pradhan <swogatpradhan22(a)gmail.com> > wrote: > >> Hi, >> Please find the below templates: >> These are for openstack wallaby release: >> >> (undercloud) [stack@hkg2director workplace]$ cat custom_network_data.yaml >> - name: Storage >> name_lower: storage >> vip: true >> mtu: 1500 >> subnets: >> storage_subnet: >> ip_subnet: 172.25.202.0/26 >> allocation_pools: >> - start: 172.25.202.6 >> end: 172.25.202.20 >> vlan: 1105 >> - name: StorageMgmt >> name_lower: storage_mgmt >> vip: true >> mtu: 1500 >> subnets: >> storage_mgmt_subnet: >> ip_subnet: 172.25.202.64/26 >> allocation_pools: >> - start: 172.25.202.72 >> end: 172.25.202.87 >> vlan: 1106 >> - name: InternalApi >> name_lower: internal_api >> vip: true >> mtu: 1500 >> subnets: >> internal_api_subnet: >> ip_subnet: 172.25.201.192/26 >> allocation_pools: >> - start: 172.25.201.198 >> end: 172.25.201.212 >> vlan: 1104 >> - name: Tenant >> vip: false # Tenant network does not use VIPs >> mtu: 1500 >> name_lower: tenant >> subnets: >> tenant_subnet: >> ip_subnet: 172.25.202.128/26 >> allocation_pools: >> - start: 172.25.202.135 >> end: 172.25.202.150 >> vlan: 1108 >> - name: External >> name_lower: external >> vip: true >> mtu: 1500 >> subnets: >> external_subnet: >> ip_subnet: 172.25.201.128/26 >> allocation_pools: >> - start: 172.25.201.135 >> end: 172.25.201.150 >> gateway_ip: 172.25.201.129 >> vlan: 1103 >> >> (undercloud) [stack@hkg2director workplace]$ cat custom_vip_data.yaml >> - network: ctlplane >> #dns_name: overcloud >> ip_address: 172.25.201.91 >> subnet: ctlplane-subnet >> - network: external >> #dns_name: overcloud >> ip_address: 172.25.201.150 >> subnet: external_subnet >> - network: internal_api >> #dns_name: overcloud >> ip_address: 172.25.201.250 >> subnet: internal_api_subnet >> - network: storage >> #dns_name: overcloud >> ip_address: 172.25.202.50 >> subnet: storage_subnet >> - network: storage_mgmt >> #dns_name: overcloud >> ip_address: 172.25.202.90 >> subnet: storage_mgmt_subnet >> >> (undercloud) [stack@hkg2director workplace]$ cat >> overcloud-baremetal-deploy.yaml >> - name: Controller >> count: 4 >> defaults: >> networks: >> - network: ctlplane >> vif: true >> - network: external >> subnet: external_subnet >> - network: internal_api >> subnet: internal_api_subnet >> - network: storage >> subnet: storage_subnet >> - network: storage_mgmt >> subnet: storage_mgmt_subnet >> - network: tenant >> subnet: tenant_subnet >> network_config: >> template: /home/stack/templates/controller.j2 >> default_route_network: >> - external >> instances: >> - hostname: overcloud-controller-0 >> name: dc1-controller2 >> #provisioned: false >> - hostname: overcloud-controller-1 >> name: dc2-controller2 >> #provisioned: false >> - hostname: overcloud-controller-2 >> name: dc1-controller1 >> #provisioned: false >> - hostname: overcloud-controller-no-ceph-3 >> name: dc2-ceph2 >> #provisioned: false >> #- hostname: overcloud-controller-3 >> #name: dc2-compute3 >> #provisioned: false >> >> - name: Compute >> count: 5 >> defaults: >> networks: >> - network: ctlplane >> vif: true >> - network: internal_api >> subnet: internal_api_subnet >> - network: tenant >> subnet: tenant_subnet >> - network: storage >> subnet: storage_subnet >> network_config: >> template: /home/stack/templates/compute.j2 >> instances: >> - hostname: overcloud-novacompute-0 >> name: dc2-compute1 >> #provisioned: false >> - hostname: overcloud-novacompute-1 >> name: dc2-ceph1 >> #provisioned: false >> - hostname: overcloud-novacompute-2 >> name: dc1-compute1 >> #provisioned: false >> - hostname: overcloud-novacompute-3 >> name: dc1-compute2 >> #provisioned: false >> - hostname: overcloud-novacompute-4 >> name: dc2-compute3 >> #provisioned: false >> >> - name: CephStorage >> count: 4 >> defaults: >> networks: >> - network: ctlplane >> vif: true >> - network: internal_api >> subnet: internal_api_subnet >> - network: storage >> subnet: storage_subnet >> - network: storage_mgmt >> subnet: storage_mgmt_subnet >> network_config: >> template: /home/stack/templates/ceph-storage.j2 >> instances: >> - hostname: overcloud-cephstorage-0 >> name: dc2-controller1 >> #provisioned: false >> # - hostname: overcloud-cephstorage-1 >> # name: dc2-ceph2 >> - hostname: overcloud-cephstorage-1 >> name: dc1-ceph1 >> # provisioned: false >> - hostname: overcloud-cephstorage-2 >> name: dc1-ceph2 >> #provisioned: false >> - hostname: overcloud-cephstorage-3 >> name: dc2-compute2 >> #provisioned: false >> >> >> You must use these templates to provision network, vip and nodes. >> You must use the output files generated during the provisioning step in >> openstack overcloud deploy command using -e parameter. >> >> With regards, >> Swogat Pradhan >> >> >> On Mon, May 23, 2022 at 8:33 PM Lokendra Rathour < >> lokendrarathour(a)gmail.com> wrote: >> >>> Hi Swogat, >>> I tried checking your solution and my templates but could not relate >>> much. >>> But issue seems the same >>> >>> http://lists.openstack.org/pipermail/openstack-discuss/2022-May/028401.html >>> >>> I tried somemore ways but looks like some issue with templates. >>> Can you please share the templates used to deploy the overcloud. >>> >>> Mysetup have 3 controller and 1 compute. >>> >>> Thanks once again for reading my mail. >>> >>> Waiting for your reply. >>> >>> -Lokendra >>> >>> On Fri, 20 May 2022, 08:25 Swogat Pradhan, <swogatpradhan22(a)gmail.com> >>> wrote: >>> >>>> Hi, >>>> Yes I was able to find the issue and fix it. >>>> The issue was with the overcloud-baremetal-deployed.yaml file i was >>>> trying to provision controller-0, controller-1 and controller-3 and kept >>>> controller-2 aside for later, but the tripleo scripts are built in such a >>>> way that they were taking controller- 0, 1 and 2 inplace of controller-3, >>>> so the network ports and vip were created for controller 0,1 and 2 but not >>>> for 3 , so this error was popping off. Also i would request you to check >>>> the jinja nic templates and once the node provisioning is done check the >>>> /etc/os-net-config/config.json/yaml file for syntax if using bonded nic >>>> template. >>>> If you need any more infor please let me know. >>>> >>>> With regards, >>>> Swogat Pradhan >>>> >>>> >>>> >>>> On Fri, May 20, 2022 at 8:01 AM Lokendra Rathour < >>>> lokendrarathour(a)gmail.com> wrote: >>>> >>>>> Hi Swogat, >>>>> Thanks for raising this issue. >>>>> Did you find any solution? to this problem ? >>>>> >>>>> Please let me know it might be helpful >>>>> >>>>> >>>>> On Tue, Apr 19, 2022 at 12:43 PM Swogat Pradhan < >>>>> swogatpradhan22(a)gmail.com> wrote: >>>>> >>>>>> Hi, >>>>>> I am currently trying to deploy openstack wallaby using tripleo arch. >>>>>> I created the network jinja templates, ran the following commands >>>>>> also: >>>>>> >>>>>> #openstack overcloud network provision --stack overcloud --output >>>>>> networks-deployed-environment.yaml custom_network_data.yaml >>>>>> # openstack overcloud network vip provision --stack overcloud >>>>>> --output vip-deployed-environment.yaml custom_vip_data.yaml >>>>>> # openstack overcloud node provision --stack overcloud >>>>>> --overcloud-ssh-key /home/stack/sshkey/id_rsa >>>>>> overcloud-baremetal-deploy.yaml >>>>>> >>>>>> and used the environment files in the openstack overcloud deploy >>>>>> command: >>>>>> >>>>>> (undercloud) [stack@hkg2director ~]$ cat deploy.sh >>>>>> #!/bin/bash >>>>>> THT=/usr/share/openstack-tripleo-heat-templates/ >>>>>> CNF=/home/stack/ >>>>>> openstack overcloud deploy --templates $THT \ >>>>>> -r $CNF/templates/roles_data.yaml \ >>>>>> -n $CNF/workplace/custom_network_data.yaml \ >>>>>> -e ~/containers-prepare-parameter.yaml \ >>>>>> -e $CNF/templates/node-info.yaml \ >>>>>> -e $CNF/templates/scheduler-hints.yaml \ >>>>>> -e $CNF/workplace/networks-deployed-environment.yaml \ >>>>>> -e $CNF/workplace/vip-deployed-environment.yaml \ >>>>>> -e $CNF/workplace/overcloud-baremetal-deployed.yaml \ >>>>>> -e $CNF/workplace/custom-net-bond-with-vlans.yaml >>>>>> >>>>>> Now when i run the ./deploy.sh script i encounter an error stating: >>>>>> >>>>>> ERROR openstack [-] Resource >>>>>> OS::TripleO::Network::Ports::ControlPlaneVipPort maps to type >>>>>> OS::Neutron::Port and the Neutron service is not available when using >>>>>> ephemeral Heat. The generated environments from 'openstack overcloud >>>>>> baremetal provision' and 'openstack overcloud network provision' must be >>>>>> included with the deployment command.: >>>>>> tripleoclient.exceptions.InvalidConfiguration: Resource >>>>>> OS::TripleO::Network::Ports::ControlPlaneVipPort maps to type >>>>>> OS::Neutron::Port and the Neutron service is not available when using >>>>>> ephemeral Heat. The generated environments from 'openstack overcloud >>>>>> baremetal provision' and 'openstack overcloud network provision' must be >>>>>> included with the deployment command. >>>>>> 2022-04-19 13:47:16.582 735924 INFO osc_lib.shell [-] END return >>>>>> value: 1 >>>>>> >>>>>> Can someone tell me where the mistake is? >>>>>> >>>>>> With regards, >>>>>> Swogat Pradhan >>>>>> >>>>> >>>>> >>>>>

3 8

[all][tc] Change OpenStack release naming policy proposal
by Slawek Kaplonski 03 Jun '22

03 Jun '22

Hi, During the last PTG in April 2022 in the TC meeting we were discussing our release naming policy [1]. It seems that choosing appropriate name for every releases is very hard and time consuming. There is many factors which needs to be taken into consideration there like legal but also meaning of the chosen name in many different languages. Finally we decided that now, after Zed release, when we will go all round through alphabet it is very good time to change this policy and use only numeric version with "year"."release in the year". It is proposed in [2]. This is also good timing for such change because in the same release we are going to start our "Tick Tock" release cadence which means that every Tick release will be release with .1 (like 2023.1, 2024.1, etc.) and every Tock release will be one with .2 (2023.2, 2024.2, etc.). [1] https://etherpad.opendev.org/p/tc-zed-ptg#L265[1] [2] https://review.opendev.org/c/openstack/governance/+/839897[2] -- Slawek Kaplonski Principal Software Engineer Red Hat -------- [1] https://etherpad.opendev.org/p/tc-zed-ptg#L265 [2] https://review.opendev.org/c/openstack/governance/+/839897

16 42

Fwd: [Forum] Meet the Projects Session!
by Kendall Nelson 03 Jun '22

03 Jun '22

Hello :) I wanted to take a moment to invite project maintainers, core contributors, PTLs, governance officials, etc to a meet the projects (projects being the OIF top level ones- Kata, Zuul, OpenStack, StarlingX, and Airship) session during the Forum at the upcoming Summit in Berlin. It will take place Tue, June 7, 11:20am - 12:30pm local in A - A06. The idea is to gather in a single place so that newer members of the community or people unfamiliar with the project can come and meet some of the active participants and ask questions. It's all really informal so there is no need to prepare anything ahead of time. I realize it is pretty late in everyone's planning their schedules for the summit, but if you have a few minutes to spare to come hang out and meet some people and network, please do! We would love to see you there. -Kendall

5 4

[all][tc] Technical Committee next weekly meeting on June 2, 2022 at 1500 UTC
by Ghanshyam Mann 02 Jun '22

02 Jun '22

Hello Everyone, The technical Committee's next weekly meeting is scheduled for June 2, 2022, at 1500 UTC. If you would like to add topics for discussion, please add them to the below wiki page by Wednesday, June 1, at 2100 UTC. https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting -gmann

1 1

[all][tc] Lets talk about Flake8 E501
by Miro Tomaska 01 Jun '22

01 Jun '22

Hello All, This is probably going to be a hot topic but I was wondering if the community ever considered raising the default 79 characters line limit. I have seen some places where even a very innocent line of code needs to be split into two lines. I have also seen some code where I feel like variable names were abbreviated on purpose to squeeze everything into one line. How does the community feel about raising the E501 limit to 119 characters? The 119 character limit is the second most popular limit besides the default one. It's long enough to give a developer enough room for descriptive variables without being forced to break lines too much. And it is short enough for a diff between two files to look OK. The only downside I can see right now is that it's not easy to convert an existing code. So we will end up with files where the new code is 79+ characters and the "old" code is <=79. I can also see an argument where someone might have trouble reviewing a patch on a laptop screen (assuming standard 14" screen) ? Here is an example of one extreme, a diff of two files maxing out at 119 characters https://review.opendev.org/c/opendev/sandbox/+/843697/1..2 Thank you for your time and I am looking forward to this conversation :) -- Miro Tomaska irc: mtomaska Red Hat

9 11

Novice question
by tim+openstack.org＠coote.org 01 Jun '22

01 Jun '22

Hullo Naïve question follows. Sorry. I’m trying a minimal OS install on a Virtualbox VM on a mac. I’d like to get to the point where I can launch a compute node. I’ve failed with `packstack` and I’m trying `devstack`. Should this work out of the box: ie Spin up a vm with vagrant: I’m using Centos Stream 9 to ensure that I get a current(ish) version of Python. It has 9GB RAM Ensure that SELinux and firewalls are turned off Clone devstack, cd to the directory and run `stack.sh` as user `vagrant` (this fails 1/3 of the time as some repo or other resets a connection. `stack.sh` doesn’t seem to be idempotent as reinvoking it may or may not install and run the OS environment Upload a ssh keypair through the web interface Use the web interface to launch the m1.nano flavor with Cirros image (I think that this flavor is quite new as some of the documentation refers to creating such a flavor with 64MB, whereas this one has 128MB. I did try the 64MB route [with `packstack`] and concluded that at least 96MB was needed and the documentation was wrong. I couldn’t log into launchpad.net <http://launchpad.net/> to report this ☹ At this point the launch process fails with the error message: “Build of instance 157bfa1d-7f8c-4a6c-ba3a-b02fb4f4b6a9 aborted: Failed to allocate the network(s), not rescheduling.” In the web ui Afaict, the vm has enough memory (just: it’s using a bit of swap, but more cache, so it could reclaim that). I’d expected the instance to launch, and I can well believe that I’ve missed something, but the documentation seems to point all over the place for various logs. Should this approach work? Is there an alternative that’s better (e.g. use Ubuntu: I’m not keen on apt/dpkg/.deb based distros as I’ve been tripped up in the past over the dependency handling and systemd integration, so I’ve avoided this, but I can see that Canonical is spending money on OS. But so is IBM/Redhat)? Where can I find info on how to trouble shoot the failing process? tia Tim

3 5

error creating image from volume
by Russell Stather 01 Jun '22

01 Jun '22

Hi Trying to create an image from a volume. Getting this very unhelpful error message. igadmin@ig-umh-maas:~$ openstack image create --volume 57bc3efa-6cdc-4e2d-a0e2-262340cc6180 commvaultimage upload_to_image() got an unexpected keyword argument 'visibility' Anyone seen this before? Thanks Russell

3 2

[kolla][Yoga][ubuntu][kolla-toolbox] kolla-toolbox build image Failed with status: error
by Vishwanath 31 May '22

31 May '22

Hello, I am trying to upgrade Xena to Yoga, as a per-requisite i have upgraded kolla to 14.0.0 and started kolla-build for 14.0.0. *kolla: 14.0.0* *Distributor ID: UbuntuDescription: Ubuntu 20.04.3 LTSRelease: 20.04Codename: focal* *upgrading to : Yoga* *upgrading from: xena* *kolla-build -t source kolla-toolbox -b ubuntu* following is the error message during the image build, issue occurs only on ubuntu whereas centos has no issues, In my environment we use ubuntu. How can this issue be resolved? INFO:kolla.common.utils.kolla-toolbox:ca-certificates is already the newest version (20210119~20.04.2). INFO:kolla.common.utils.kolla-toolbox:Some packages could not be installed. This may mean that you have INFO:kolla.common.utils.kolla-toolbox:requested an impossible situation or if you are using the unstable INFO:kolla.common.utils.kolla-toolbox:distribution that some required packages have not yet been created INFO:kolla.common.utils.kolla-toolbox:or been moved out of Incoming. INFO:kolla.common.utils.kolla-toolbox:The following information may help to resolve the situation: INFO:kolla.common.utils.kolla-toolbox:The following packages have unmet dependencies: INFO:kolla.common.utils.kolla-toolbox: rabbitmq-server : Depends: erlang-base (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: erlang-base-hipe (< 1:25.0) but it is not going to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-crypto (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-eldap (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-inets (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-mnesia (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-os-mon (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-parsetools (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-public-key (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-runtime-tools (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-ssl (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-syntax-tools (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-tools (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-xmerl (< 1:25.0) but 1:25.0-1rmq1ppa1~ubuntu20.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:25.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox:E: Unable to correct problems, you have held broken packages. INFO:kolla.common.utils.kolla-toolbox: INFO:kolla.common.utils.kolla-toolbox:Removing intermediate container 7ea161d0dbbd ERROR:kolla.common.utils.kolla-toolbox:Error'd with the following message ERROR:kolla.common.utils.kolla-toolbox:The command '/bin/sh -c apt-get update && apt-get -y install --no-install-recommends build-essential ca-certificates crudini gdisk git jq libffi-dev libssl-dev libxslt1-dev openvswitch-switch python3-dev rabbitmq-server && apt-get clean && rm -rf /var/lib/apt/lists/*' returned a non-zero code: 100 INFO:kolla.common.utils:========================= INFO:kolla.common.utils:Successfully built images INFO:kolla.common.utils:========================= INFO:kolla.common.utils:base INFO:kolla.common.utils:=========================== INFO:kolla.common.utils:Images that failed to build INFO:kolla.common.utils:=========================== ERROR:kolla.common.utils:kolla-toolbox Failed with status: error INFO:kolla.common.utils:========================================= Thanks Vish

2 2

[blazar] IRC meeting of June 2 is cancelled
by Pierre Riteau 31 May '22

31 May '22

Hello, Due to unavailability of the usual participants, the Blazar IRC meeting of June 2 is cancelled. The next meeting will be on June 16. Thanks, Pierre Riteau (priteau)

1 0

[nova][placement] June 7th Meeting is CANCELLED
by Sylvain Bauza 31 May '22

31 May '22

Some of us will be traveling at the OIF Summit so we won't have a quorum for next week. The nova meeting will be back on June 15th. Thanks, -Sylvain

1 0

[qa][stable][gate] Gate fix for stable/ussuri and Tempest pin for stable/victoria
by Ghanshyam Mann 31 May '22

31 May '22

Hello Everyone, You might know the stable/ussuri gate is broken because we dropped the py36 support in zed cycle and Tempest master is used to test it which uses master constraints. To fix this, I am pinning Tempest 26.1.0 in stable/ussuri and tested it with compatible stable/ussuri constraints and tempest plugins. - https://review.opendev.org/q/topic:ussuri-pin-tempest at the same time, I am also pinning tempest in stable/victoria too as it is also in EM state - https://review.opendev.org/q/topic:victoria-pin-tempest Both stable branches pining is working fine and ready to merge now. I have proposed the fixes for a few tempest plugins and stable branches, and request them to merge because we are going to merge the tempest and devstack changes. Below is the complete set of changes we need: QA patches need to go first: - Tempest - https://review.opendev.org/c/openstack/tempest/+/843045 - https://review.opendev.org/c/openstack/tempest/+/843293/2 - Devstack: - https://review.opendev.org/c/openstack/devstack/+/838051 - https://review.opendev.org/c/openstack/devstack/+/843295 - Devstack-plugin-ceph - https://review.opendev.org/c/openstack/devstack-plugin-ceph/+/843354 - https://review.opendev.org/c/openstack/devstack-plugin-ceph/+/843355 (it is +A and waiting for depends-on devstack patch to merge) - Devstack-gate - https://review.opendev.org/c/openstack/devstack-gate/+/843689 Cinder: - https://review.opendev.org/c/openstack/cinder/+/843305 - https://review.opendev.org/c/openstack/cinder/+/843092 (it is +A and waiting for depends-on devstack patch to merge) - https://review.opendev.org/c/openstack/cinder-tempest-plugin/+/843319 (merged) Cyborg: no action is needed - https://review.opendev.org/c/openstack/cyborg-tempest-plugin/+/843329 (it is +A and waiting for depends-on devstack patch to merge) Neutron: need review - https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/838053 Designate: need review - https://review.opendev.org/c/openstack/designate/+/843709 - https://review.opendev.org/c/openstack/designate/+/843710 -gmann

1 1

[cinder] Zed R-18 virtual mid cycle on 1st June
by Rajat Dhasmana 31 May '22

31 May '22

Hello Argonauts, The first Zed mid cycle R-18 will be held on 1st June with the following details: Date: 01st June 2022 Time: 1400-1600 UTC Meeting link: https://bluejeans.com/556681290 Etherpad: https://etherpad.opendev.org/p/cinder-zed-midcycles Please add topics to the etherpad and also mark the date and time on your calendar. Thanks and regards Rajat Dhasmana

1 0

SSL verify failed | Overcloud deploy step 4 | Wallaby | tripleo
by Swogat Pradhan 31 May '22

31 May '22

Hi, I am facing the below issue in step4 ' TASK | Clean up legacy Cinder keystone catalog entries': FATAL | Clean up legacy Cinder keystone catalog entries | undercloud | item={'service_name': 'cinderv2', 'service_type': 'volumev2'} | error={"ansible_index_var": "cinder_api_service", "ansible_loop_var": "item", "changed": false, "cinder_api_service": 0, "item": {"service_name": "cinderv2", "service_type": "volumev2"}, "module_stderr": "Failed to discover available identity versions when contacting https://overcloud.bdxworld.com:13000. Attempting to parse version from URL.\nTraceback (most recent call last):\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 677, in urlopen\n chunked=chunked,\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 381, in _make_request\n self._validate_conn(conn)\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 978, in _validate_conn\n conn.connect()\n File \"/usr/lib/python3.6/site-packages/urllib3/connection.py\", line 371, in connect\n ssl_context=context,\n File \"/usr/lib/python3.6/site-packages/urllib3/util/ssl_.py\", line 384, in ssl_wrap_socket\n return context.wrap_socket(sock, server_hostname=server_hostname)\n File \"/usr/lib64/python3.6/ssl.py\", line 365, in wrap_socket\n _context=self, _session=session)\n File \"/usr/lib64/python3.6/ssl.py\", line 776, in __init__\n self.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 1036, in do_handshake\n self._sslobj.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 648, in do_handshake\n self._sslobj.do_handshake()\nssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897) Can you please suggest a workaround? With regards, Swogat pradhan

2 2

Ansible OpenStack Collection 2.0.0 and OpenStack SDK 1.0.0/0.99.0
by Jakob Meng 31 May '22

31 May '22

Hello contributors and users of the Ansible OpenStack collection [1]! This week a release candidate of the upcoming first major release of OpenStack SDK has been released [2],[3]. It streamlined and improved large parts of its codebase. For example, its Connection interface now consistently uses the Resource interfaces under the hood. This required breaking changes from older SDK releases though. The Ansible OpenStack collection is heavily based on OpenStack SDK. With OpenStack SDK becoming backward incompatible (for the better), so does our Ansible OpenStack collection. We simply lack the devpower to maintain a backward compatible interface in Ansible OpenStack collection across several SDK releases. We already split our codebase into two separate git branches: master and stable/1.0.0. The former will track the upcoming 2.x.x releases of Ansible OpenStack collection which will be compatible with OpenStack SDK 1.x.x (and its rcs 0.99.x) *only*. Our stable/1.0.0 branch will track the current 1.x.x releases of Ansible OpenStack collection which is compatible with OpenStack SDK prior to 0.99.0 *only*. Both branches will be developed in parallel for the time being. Our 2.0.0 release is currently under development and we still have a long way to go. "We" mainly are a couple of Red Hat employees working part-time on the collection. If you use modules of Ansible OpenStack collection and want to help us with porting them to the new SDK, please contact us! If you want to help, please reach out to us (e.g. [7],[8]) and we can give you a quick introduction into everything. We have extensive documentation on why, what and how we are adopting and reviewing the new modules [4], how to set up a working DevStack environment for hacking on the collection [5] and, most importantly, a list of modules where we are coordinating our porting efforts [6]. We are also hanging around on irc.oftc.net/#openstack-ansible-sig and #oooq 😎 [1] https://opendev.org/openstack/ansible-collections-openstack [2] https://github.com/openstack/openstacksdk/releases/tag/0.99.0 [3] https://pypi.org/project/openstacksdk/0.99.0/ [4] https://hackmd.io/szgyWa5qSUOWw3JJBXLmOQ?view [5] https://hackmd.io/PI10x-iCTBuO09duvpeWgQ?view [6] https://hackmd.io/7NtovjRkRn-tKraBXfz9jw?view [7] Rafael Castillo <rcastill(a)redhat.com> (rcastillo) [8] Jakob Meng <mail(a)jakobmeng.de>, <jmeng(a)redhat.com> (jm1) Best, Jakob

2 2

[dev][nova] How to add a column in table of Nova Database
by 韩光宇 31 May '22

31 May '22

Hi, I'm a beginner in OpenStack development. I would like to try modifying by adding a property to the 'Instances' database table. But I didn't find description in the documentation of the data model mechanism and how to extend the database. https://docs.openstack.org/nova/latest/ Now, I know that it involves versined object model and alembic. My question is: What is the process of adding a column to a table in the database? Could someone show me the process of modifying a database table or recommend me the relevant documentation Best wishes, Han

2 2

OpenStack logs on Opensearch - storage problem
by Daniel Pawlik 31 May '22

31 May '22

Hello, In the last few days there is increase amount of CI jobs that are running on Zuul CI gates, where later logs are pushed into the Opensearch cluster [1]. The current cluster storage is almost full, which causes one of the actions to be performed: temporarily changing log retention (currently it is set to 14 days) or removing temporary non-essential logs [2]. I recommend removing not important logs, so if projects leaders could check whether entries related to the project are needed, it would be really helpful. Otherwise, we will temporarily change log retention to 12 days. Dan [1] https://opensearch.logs.openstack.org/_dashboards/app/discover?security_ten… [2] https://opendev.org/openstack/ci-log-processing/src/branch/master/logscrape…

2 2

[sdk][stable][gate] openstacksdk-functional-devstack is broken in stable/ussuri branch
by Ghanshyam Mann 31 May '22

31 May '22

Hello Everyone, With the recent update in 'coverage' constraints to 6.4[1], openstacksdk-functional-devstack is broken in stable/ussuri branch. openstacksdk-functional-devstack running on stable branches use the master SDK and master constraints and in stable/ussuri this job runs on bionic/py3.6 and now fail for 'coverage' 6.4 version conflict. - https://zuul.opendev.org/t/openstack/build/3d3c21d804ec498e957c1c64470c991b… - https://storyboard.openstack.org/#!/story/2010057 As we know requirements generate constraints for py3.8|9 so if we want this job to run with master constraints then it needs to run on compatible python and distro. This is why I am proposing to run this job on focal - https://review.opendev.org/c/openstack/openstacksdk/+/843968 But clark made a good point in IRC that we should test this job with all python versions supported by the stable branch which we can do by testing this job with stable branch constraints and see if still, master SDK runs on those python versions and stable constraints. This is something we can improve if SDK team agrees or have the bandwidth. Anyways please do not recheck on stable/ussuri until this job is fixed (843968 is merged). [1] https://review.opendev.org/c/openstack/requirements/+/843722/3/upper-constr… -gmann

1 1

[ironic] Group Dinner in Berlin - OIS
by Iury Gregory 30 May '22

30 May '22

Hello Ironicers and fellow stackers! Since some of us will be at the Open Infrastructure Summit in Berlin, I think this would be a great opportunity to have a group dinner in Berlin with our friends (like the one we had during the Ironic Mid-Cycle at CERN). I've created an etherpad to track who would be interested in it [1] and also choose the best day. [1] https://etherpad.opendev.org/p/ironic-dinner-ois2022Berlin -- *Att[]'sIury Gregory Melo Ferreira * *MSc in Computer Science at UFCG* *Part of the ironic-core and puppet-manager-core team in OpenStack* *Senior Software Engineer at Red Hat Brasil* *Social*: https://www.linkedin.com/in/iurygregory *E-mail: iurygregory(a)gmail.com <iurygregory(a)gmail.com>*

1 1

[tripleo] stable/wallaby gate blocker for centos-8 standalone - please hold recheck
by Marios Andreou 30 May '22

30 May '22

Hi folks fyi there is a wallaby gate blocker at https://bugs.launchpad.net/tripleo/+bug/1976247 Seems like ansible-role-python_venv_build is trying to install master upper constraints and that is causing a conflict for oslo-db===11.3.0 (comfing via stackviz installation) we are trying to find a workaround but please hold recheck until we do grateful for any pointers or suggestions here or on the launchpad o/ thanks, marios

1 1

[nova][stable] nova-stable-core team changes
by Sylvain Bauza 30 May '22

30 May '22

Hi, After discussing with all our Nova stable cores, we agreed the below : - Welcome Sean Mooney as a new nova-stable-core team member - Welcome Balazs Gibizer as a new nova-stable-core team member - Welcome Stephen Finucane as a new nova-stable-core team member. I would also like to take the opportunity to thank Matt Riedemann and Lee Yarwood for their important and awesome contributions to the Nova Stable Team. Without them, we saw the impact of their misses, hence the above ^. Lee, Matt, you can anytime return to the nova-stable-core team if you express so, but in the meantime, I'll remove you from the members list. Changes to https://review.opendev.org/admin/groups/540,members will occur literally seconds after I send this email. -Sylvain (on behalf of the Nova Stable team)

1 1

[ops][nova] Problems with AggregateMultiTenancyIsolation/AggregateInstanceExtraSpecsFilter after Train --> Yoga update
by Massimo Sgaravatto 30 May '22

30 May '22

Dear all We have the following use case: - reserve 3 hypervisors for VMs with "big" flavors (whatever the users of these instances are) - partition the rest of the hypervisors according to the project (so projects A1,A2..,An can use only subset S1 of hypervisors, project B1,B2,..,Bm can use only subset S2 of hypervisors) We implemented this: 1- by setting an aggregate_instance_extra_spec 'size' property (with value 'normal' or 'big') for each flavor [*] 2- by creating a BigVMs HostAggregate for size=big [**] 3- by creating an HostAggregate for size=normal for each project, such as this one [***] This used to work. A few days ago we updated our infrastructure from Train to Yoga This was an offline Fast Forward Update: we went through the intermediate releases just to do the dbsyncs. Since this update the instantiation of VMs with flavors with the size=big property doesn't work anymore This is what I see in nova-scheduler log: 2022-05-27 08:38:02.058 5273 INFO nova.filters [req-f92c0e38-262a-4d22-a7fd-8874c4265401 e237e43716fb490db5bda4b777835669 32b5d42c02b0411b8ebf2c33079eeecf - default default] Filtering removed all hosts for the request with instance ID '2412e188-9d5f-4812-ad21-195769a3c220'. Filter results: ['AggregateMultiTenancyIsolation: (start: 59, end: 10)', 'AggregateInstanceExtraSpecsFilter: (start: 10, end: 0)'] Only modifying the property of the BigVMs HA using the filter_tenant_id adding the relevant project: [root@cld-ctrl-01 ~]# openstack aggregate show BigVMs | grep prop | properties | filter_tenant_id='32b5d42c02b0411b8ebf2c33079eeecf', size='big' | the scheduling works Specifying each project and keeping the list up-to-date would be a problem. Moreover if I am not wrong there is a maximum length for the property field. Any hints ? I didn't find anything related to this issue in the nova release notes for Openstack releases > Train These are the filters that we enabled: [filter_scheduler] enabled_filters = AggregateMultiTenancyIsolation,AggregateInstanceExtraSpecsFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ServerGroupAntiAffinityFilter,ServerGro\ upAffinityFilter,PciPassthroughFilter,NUMATopologyFilter Thanks a lot, Massimo [*] E.g. [root@cld-ctrl-01 ~]# openstack flavor show cldareapd.medium | grep prope | properties | aggregate_instance_extra_specs:size='normal' |[root@cld-ctrl-01 ~]# openstack flavor show cloudvenetocloudveneto.40cores128GB25-bigunipd | grep prop | properties | aggregate_instance_extra_specs:size='big' | [**] [root@cld-ctrl-01 ~]# openstack aggregate show BigVMs +-------------------+---------------------------------------------------------------------------------------+ | Field | Value | +-------------------+---------------------------------------------------------------------------------------+ | availability_zone | nova | | created_at | 2018-06-20T06:54:51.000000 | | deleted_at | None | | hosts | cld-blu-08.cloud.pd.infn.it, cld-blu-09.cloud.pd.infn.it, cld-blu-10.cloud.pd.infn.it | | id | 135 | | is_deleted | False | | name | BigVMs | | properties |size='big' | | updated_at | None | | uuid | 4b593395-1c76-441c-9022-d421f4ea2dfb | +-------------------+---------------------------------------------------------------------------------------+ [***] [root@cld-ctrl-01 ~]# openstack aggregate show Unipd-AdminTesting-Unipd +-------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | Field | Value | +-------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | availability_zone | nova | | created_at | 2018-04-12T07:31:01.000000 | | deleted_at | None | | hosts | cld-blu-01.cloud.pd.infn.it, cld-blu-02.cloud.pd.infn.it, cld-blu-05.cloud.pd.infn.it, cld-blu-06.cloud.pd.infn.it, cld-blu-07.cloud.pd.infn.it, cld-blu-11.cloud.pd.infn.it, cld-blu-12.cloud.pd.infn.it, cld-blu-13.cloud.pd.infn.it, cld-blu-14.cloud.pd.infn.it, cld-blu-15.cloud.pd.infn.it, cld-blu-16.cloud.pd.infn.it | | id | 126 | | is_deleted | False | | name | Unipd-AdminTesting-Unipd | | properties | filter_tenant_id='32b5d42c02b0411b8ebf2c33079eeecf', size='normal' | | updated_at | 2018-06-08T09:06:20.000000 | | uuid | 38f6a0d4-77ab-42e0-abeb-57e06ba13cca | +-------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ [root@cld-ctrl-01 ~]#

3 5

[Image Encryption] No meeting today
by Josephine Seifert 30 May '22

30 May '22

Hi, I have a time conflict, so there will be no meeting today. greetings Josephine (Luzi)

1 0

[neutron] Bug deputy report (week starting on 2022-05-23)
by Bernard Cafarelli 30 May '22

30 May '22

Hey neutrinos, I was the bug deputy last week, here are the reported bugs. All high/critical bugs have patches merged (and backports in progress for some), most of the other bugs have patches up for review or merged Critical * Compute tests are failing with failed to reach ACTIVE status and task state "None" within the required time. - https://bugs.launchpad.net/neutron/+bug/1964940 Revert pushed by ykarel https://review.opendev.org/c/openstack/neutron/+/843426 merged High * Open vSwitch agent - does not report to the segment plugin - https://bugs.launchpad.net/neutron/+bug/1975542 DHCP agent issue with routed provider networks, once an agent is running, new segment mappings are not added for new networks Fix by ralonsoh https://review.opendev.org/c/openstack/neutron/+/843294 merged * [sqlalchemy-20] Missing DB context in L2pop methods - https://bugs.launchpad.net/neutron/+bug/1975797 Fix by ralonsoh https://review.opendev.org/c/openstack/neutron/+/843413 merged * ``ovn_revision_bumbers_db._ensure_revision_row_exist`` is mixing DB contexts - https://bugs.launchpad.net/neutron/+bug/1975837 Also fix by ralonsoh https://review.opendev.org/c/openstack/neutron/+/843478 also merged Medium * Neutron RBAC not sharing subnet - https://bugs.launchpad.net/neutron/+bug/1975603 Reported around last week's meeting time, lajos looking into it? * Neutron agent blocks during VM deletion when a remote security group is involved - https://bugs.launchpad.net/neutron/+bug/1975674 Happening with OVS firewall and large number of VMS, suggested fix for deferred https://review.opendev.org/c/openstack/neutron/+/843253 * OVN migration failed due to unhandled error in neutron_ovn_db_sync_util - https://bugs.launchpad.net/neutron/+bug/1975692 Patch by ralonsoh https://review.opendev.org/c/openstack/neutron/+/843263 merged * difference in execution time between admin/non-admin call - https://bugs.launchpad.net/neutron/+bug/1975828 Follow-up to https://bugs.launchpad.net/neutron/+bug/1973349 (that added an index to ports.network_id) Unassigned * ML2 OVN - Creating an instance with hardware offloaded port is broken - https://bugs.launchpad.net/neutron/+bug/1975743 Suggested fix by fnordahl - https://review.opendev.org/c/openstack/neutron/+/843601 Have a nice week! -- Bernard Cafarelli

1 0

[magnum] [xena] [IPv6] What is needed to make dual-stack IPv4/6 work in Magnum-managed Kubernetes 1.21+?
by Namrata Sitlani 30 May '22

30 May '22

Hello All, We run release Xena, and we have deployed Kubernetes version 1.21.10 on Magnum with Fedora CoreOS version 34 and we are trying to have IPv6 support for that Kubernetes cluster, as Kubernetes 1.21 and later versions have dual-stack(IPv4/IPv6) support enabled by default. To achieve the same, we used a network with both IPv4 and IPv6 subnets and we got a successful creation of the cluster. The compute instances of the cluster get both IPv4 and IPv6 addresses, but the master and minion nodes get IPv4 as external IP, and also the container does not get an IPv6 address. Can someone please help us with the information, what changes are required to be made at the magnum client-side to have an IPv6 supported Kubernetes Cluster? Thanks, Namrata

2 2

[all][tc] What's happening in Technical Committee: summary May 27, 2022: Reading: 5 min
by Ghanshyam Mann 27 May '22

27 May '22

Hello Everyone, Here is this week's summary of the Technical Committee activities. 1. TC Meetings: ============ * We had this week's meeting on May 26. Most of the meeting discussions are summarized in this email. Meeting summary logs are available @https://meetings.opendev.org/meetings/tc/2022/tc.2022-05-26-15.00.log.html * Next TC weekly meeting will be on June 3 Thursday at 15:00 UTC, feel free to add the topic on the agenda[1] by June 2. 2. What we completed this week: ========================= * Update governance documentation to try the DPL model for leaderless projects [2]. After election, TC used to search for PTL for leaderless projects but from now onwards we will try if such projects can be moved to the DPL model. 3. Activities In progress: ================== TC Tracker for Zed cycle ------------------------------ * Zed tracker etherpad includes the TC working items[3], we have started the many items. Open Reviews ----------------- * Seven open reviews for ongoing activities[4]. Change OpenStack release naming policy proposal ----------------------------------------------------------- We had a call on Tuesday and figured out how to use the number/name in our development cycle/tooling. I am adding the agreement in resolution[5] and also the documentation about using the release number and names [6]. New release cadence "SLURP" open items -------------------------------------------------- 1. release notes strategy: Brian proposal for ""SLURP release notes approach is up for review[7]. Improve project governance --------------------------------- Slawek has the proposal the framework up and it is under review[8]. New ELK service dashboard: e-r service ----------------------------------------------- A small summary from dpawlik: "the opensearch cluster space seems to be stable right now (there is enough space). For the elastic search recheck, I'm working on ansible role for deploying the e-r and push it to the ci-log-processing project." TripleO team and dpawlik are working on the e-r repo merge. Consistent and Secure Default RBAC ------------------------------------------- We had call on May 24 and discussed the new defaults approach clarification for designate and octavia[9]. Takashi sent a reminder for the feedback about the 'split stack' approach[10]. We will also plan to bring it to the ops meetup in Berlin (Most of us not travelling there but we will find someone who can discuss it). I will schedule the next call and will update the timing on email and wiki[11] 2021 User Survey TC Question Analysis ----------------------------------------------- No update on this. The survey summary is up for review[12]. Feel free to check and provide feedback. Zed cycle Leaderless projects ---------------------------------- No updates on this. Only Adjutant project is leaderless/maintainer-less. We will check Adjutant's the situation again on ML and hope Braden will be ready with their company side permission[13]. Fixing Zuul config error ---------------------------- Requesting projects with zuul config error to look into those and fix them which should not take much time[14][15]. Project updates ------------------- * Add a repository for the Large Scale SIG[16] 4. How to contact the TC: ==================== If you would like to discuss or give feedback to TC, you can reach out to us in multiple ways: 1. Email: you can send the email with tag [tc] on openstack-discuss ML[17]. 2. Weekly meeting: The Technical Committee conduct a weekly meeting every Thursday 15 UTC [18] 3. Ping us using 'tc-members' nickname on #openstack-tc IRC channel. [1] https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting [2] https://review.opendev.org/c/openstack/governance/+/840363 [3] https://etherpad.opendev.org/p/tc-zed-tracker [4] https://review.opendev.org/q/projects:openstack/governance+status:open [5] https://review.opendev.org/c/openstack/governance/+/843214 [6] https://review.opendev.org/c/openstack/governance/+/841800/ [7] https://review.opendev.org/c/openstack/project-team-guide/+/843457 [8] https://review.opendev.org/c/openstack/governance/+/839880 [9] https://etherpad.opendev.org/p/rbac-zed-ptg#L97 [10] http://lists.openstack.org/pipermail/openstack-discuss/2022-May/028677.html [11] https://wiki.openstack.org/wiki/Consistent_and_Secure_Default_Policies_Popu… [12] https://review.opendev.org/c/openstack/governance/+/836888 [13] http://lists.openstack.org/pipermail/openstack-discuss/2022-March/027626.ht… [14] https://etherpad.opendev.org/p/zuul-config-error-openstack [15] http://lists.openstack.org/pipermail/openstack-discuss/2022-May/028603.html [16] https://review.opendev.org/c/openstack/project-config/+/843534 [17] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-discuss [18] http://eavesdrop.openstack.org/#Technical_Committee_Meeting -gmann

1 0

[neutron][neutron-vpnaas] retiring train/ussuri/victoria branches
by Mohammed Naser 27 May '22

27 May '22

Hi everyone, At the moment, the VPNaaS team is a bit low on people and in order to be able to handle the workload, I'd like to opt to only keeping maintained releases active. I propose retiring those branches unless someone steps up to fix and clean them up: https://review.opendev.org/c/openstack/releases/+/843167 Please respond to this email if you are running those releases and you are willing to maintain those older branches. Thanks Mohammed -- Mohammed Naser VEXXHOST, Inc.

2 1

[all][oslo] Generation of sample policy files broken since oslo.policy 3.12.0
by Pierre Riteau 27 May '22

27 May '22

Hello, While updating sample policy files (those with all rules commented out and including comments) in CloudKitty, I discovered that the functionality was broken: oslo.policy generates an actual policy file instead [1]. This issue was first introduced in 3.12.0. I submitted a fix [2] which I assume will ship in the next release. I thought this was worth sharing since any project using output from oslopolicy-sample-generator in their docs or repository could be impacted. A workaround is to stick to oslo.policy 3.11.0 in your genpolicy tox environment. Cheers, Pierre Riteau (priteau) [1] https://bugs.launchpad.net/oslo.policy/+bug/1975682 [2] https://review.opendev.org/c/openstack/oslo.policy/+/843250

1 0

[cinder] festival of XS reviews 27th May 2022
by Rajat Dhasmana 27 May '22

27 May '22

Hello Argonauts, We will be having our monthly festival of XS reviews today i.e. 27th May (Friday) from 1400-1600 UTC. Following are some additional details: Date: 27th May, 2022 Time: 1400-1600 UTC Meeting link: https://meetpad.opendev.org/cinder-festival-of-reviews etherpad: https://etherpad.opendev.org/p/cinder-festival-of-reviews Thanks and regards Rajat Dhasmana

1 0

Openstack-Ansible - Test Cluster on VirtualBox Hosts
by Dave Hall 27 May '22

27 May '22

Hello, Sorry for a beginner question. I am trying to deploy a 3-host minimal test cluster on VirtualBox hosts via OpenStack-Ansible. My purpose is to first build this test cluster and then to deploy a production cluster on physical hardware. The test cluster will be used first to learn, and then to validate changes prior to deploying them on the production cluster. I started with Vagrant-Openstack, but it is still based on Stein and not easily adaptable to Xena. Right now I'm working with Xena and OpenStack-Ansible 24.x on Debian 10 with a deployment host running Debian 11. All 4 systems are native VirtualBox VMs I've managed to deploy a couple of nearly functional clusters this way, but never fully functional and stable. Any guidelines or recommendations for this kind of deployment would be sincerely appreciated. Thanks. -Dave

2 1

[qa][requirements] Tempest Gate blocked for py3.6|7 support
by Ghanshyam Mann 26 May '22

26 May '22

Hello Everyone, As we know, in Zed cycle we have dropped the support of py3.6|7 from OpenStack which is why projects, lib like oslo started dropping it and made new releases. For example, oslo.log 5.0.0 does not support py3.6|7. Tempest being branchless and still supporting stable/victoria onwards stable branches thought of keeping the py36|7 support. But with the oslo dropped py3.6|7 and upper constraint has been updated to the oslo lib latest version made Tempest unit py3.6|7 test jobs failed. - https://bugs.launchpad.net/tempest/+bug/1975036 We have two options here: 1. requirements repo maintain different constraints for py3.6|7 and py3.8|9 which fix the Tempest py3.6| jobs and we can keep the python3.6|7 support in Tempest. Example: oslo.log which fixed the gate[1] but we might need to do the same for Tempest's other deps - https://review.opendev.org/c/openstack/requirements/+/842820 2. Drop the support of py3.6|7 from Tempest If the requirement team is not ok with the above solution then we can think of dropping the py3.6|7 support from Tempest too. This will stop Tempest to run on py3.6|7 but it will not block Tempest to test the OpenStack running on py3.6|7 as that can be done by running the Tempest in virtual env. Opinion? NOTE: Until we figure this out, I have proposed to temporarily stop running py3.6|7 on tempest gate, (especially to get c9s volume detach failure fix to merged otherwise that will block other projects gate too) - https://review.opendev.org/c/openstack/tempest/+/842821 [1] https://review.opendev.org/c/openstack/tempest/+/842819 -gmann

2 3

[neutron] Drivers meeting agenda - 27.05.2022.
by Lajos Katona 26 May '22

26 May '22

Hi Neutron Drivers, The agenda for tomorrow's drivers meeting is at [1]. We have one RFE to discuss tomorrow: * [RFE] Allow setting --dst-port for all port based protocols at once (#link https://bugs.launchpad.net/neutron/+bug/1973487) On Demand agenda: * (lajoskatona): meaning of option "router_auto_schedule" is ambiguous (#link https://bugs.launchpad.net/neutron/+bug/1973656 ) [1] https://wiki.openstack.org/wiki/Meetings/NeutronDrivers#Agenda See you at the meeting tomorrow. Lajos Katona (lajoskatona)

1 0

[neutron][neutron-vpnaas][release] dropping feature/lbaasv2 branch
by Mohammed Naser 26 May '22

26 May '22

Hi there, It looks like we've managed to track along a feature/lbaasv2 branch into neutron-vpnaas all the way from 2014 :) I'd like to request for the release team to delete that branch if possible. :) Thanks, Mohammed -- Mohammed Naser VEXXHOST, Inc.

5 4

openstack queens how increase dashboard threads
by Ignazio Cassano 26 May '22

26 May '22

Hello, I'd like to increase on centos queens the threads for openstack dashboard. At this time my /etc/httpd/conf.d/openstack-dashboard.conf is the following: WSGIDaemonProcess dashboard WSGIProcessGroup dashboard WSGISocketPrefix run/wsgi WSGIApplicationGroup %{GLOBAL} WSGIScriptAlias /dashboard /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi Alias /dashboard/static /usr/share/openstack-dashboard/static <Directory /usr/share/openstack-dashboard/openstack_dashboard/wsgi> Options All AllowOverride All Require all granted </Directory> <Directory /usr/share/openstack-dashboard/static> Options All AllowOverride All Require all granted </Directory> I tired to modify the first line like this: WSGIDaemonProcess dashboard user=apache group=apache processes=3 threads=10 I restartded httpd but now I am not able to log on the the dashboard. I am sure keystone is working because I am able do execute all commands with command line. Any help, please ? Regards Ignazio

1 0

horizon security group page bug
by Parsa Aminian 26 May '22

26 May '22

On the horizon user setting section there is an option called 'Items per page' that changes the number of items per page . It seems it does not work on security_groups page and on that page all of the security groups will be loaded and that causes a bad gateway error timeout on the browser .

1 0

[all][tc] Technical Committee next weekly meeting on May 26, 2022 at 1500 UTC
by Ghanshyam Mann 25 May '22

25 May '22

Hello Everyone, Technical Committee's next weekly meeting is scheduled for May 26, 2022 at 1500 UTC. If you would like to add topics for discussion, please add them to the below wiki page by Wednesday, May 25, at 2100 UTC. https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting -gmann

1 1

[Triple0] Undercloud Restore Failed
by Lokendra Rathour 25 May '22

25 May '22

Back Up and Restore the Director Undercloud Red Hat OpenStack Platform 16.2 | Red Hat Customer Portal <https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16…> Hi Team, Was trying to restore the Undercloud from the backup but restore is getting failed with the error message: "", "stdout: ", "stderr: + sudo -E kolla_set_configs", "sudo: unable to send audit message: Operation not permitted", "INFO:__main__:Loading config file at /var/lib/kolla/config_files/config.json", "INFO:__main__:Validating config file", "INFO:__main__:Kolla config strategy set to: COPY_ALWAYS", "INFO:__main__:Copying service configuration files", "ERROR:__main__:MissingRequiredSource: /var/lib/kolla/config_files/src/* file is not found", "", "Error executing ['podman', 'container', 'exists', 'rabbitmq']: returned 1", "Did not find container with \"['podman', 'ps', '-a', '--filter', 'label=container_name=rabbitmq', '--filter', 'label=config_id=tripleo_step1', '--format', '{{.Names}}']\" - retrying without config_id", "Did not find container with \"['podman', 'ps', '-a', '--filter', 'label=container_name=rabbitmq', '--format', '{{.Names}}']\"", "Created symlink /etc/systemd/system/multi-user.target.wants/tripleo_rabbitmq.service \u2192 /etc/systemd/system/tripleo_rabbitmq.service." ], "_ansible_no_log": false, "attempts": 4, "changed": false } ] ] Also, we checked for the path ("ERROR:__main__:MissingRequiredSource: /var/lib/kolla/config_files/src/* file is not found",) in the original server , there also it is not existing. Document followed: Back Up and Restore the Director Undercloud Red Hat OpenStack Platform 16.2 | Red Hat Customer Portal <https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16…> Openstack release: Train Any lead would be helpful. --lokendra skype: lokendrarathour

1 1

[largescale-sig] Next meeting: May 25th, 15utc
by Thierry Carrez 25 May '22

25 May '22

Hi everyone, The Large Scale SIG will be meeting this Wednesday in #openstack-operators on OFTC IRC, at 15UTC. You can check how that time translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20220525T15 Feel free to add topics to the agenda: https://etherpad.openstack.org/p/large-scale-sig-meeting Regards, -- Thierry Carrez

1 1

[neutron] Propose Yatin Karel for Neutron core team
by Lajos Katona 25 May '22

25 May '22

Hi Neutrinos, I would like to propose Yatin Karel (IRC: ykarel) as a member of the Neutron core team. Yatin is a long time Openstack developer, and started concentrating to Networking projects in the last few cycles. His experience, proactivity and sharp eye proved to be very helpful both in reviews and fixing issues. His reviews are really valuable and reflect his experience and helpfulness. I am sure that he will be a great addition to the core team. Please vote for his nomination by answering this mail till next Tuesday. Lajos Katona (lajoskatona)

7 6

Need help
by Gk Gk 25 May '22

25 May '22

Hi All, In this link https://docs.openstack.org/nova/queens/user/aggregates.html , there is a warning section about availability zones: "That last rule can be very error-prone. Since the user can see the list of availability zones, they have no way to know whether the default availability zone name (currently *nova*) is provided because an host belongs to an aggregate whose AZ metadata key is set to *nova*, or because there are at least one host belonging to no aggregate. Consequently, it is highly recommended for users to never ever ask for booting an instance by specifying an explicit AZ named *nova* and for operators to never set the AZ metadata for an aggregate to *nova*. That leads to some problems due to the fact that the instance AZ information is explicitly attached to *nova* which could break further move operations when either the host is moved to another aggregate or when the user would like to migrate the instance." My questions are, 1. If a host belongs to an aggregate whose AZ metadata key is set to nova, why is it not possible to know if a default AZ is provided or not ? 2. Why is it a problem when the host is moved to another aggregate ? We can move hosts from one aggregate to another. Right ? 3. Why is it a problem when we migrate the instance ? Thanks Kumar

3 2

[cinder] Bug deputy report for week of 05-25-2022
by Sofia Enriquez 25 May '22

25 May '22

This is a bug report from 05-18-2022 to 05-25-2022. Agenda: https://etherpad.opendev.org/p/cinder-bug-squad-meeting ----------------------------------------------------------------------------------------- No meeting today! High - https://bugs.launchpad.net/cinder/+bug/1974078 "Scheduler doesn't consume space properly for create_volume." Unassigned. Incomplete - https://bugs.launchpad.net/cinder/+bug/1974092 "Cinder-backup tries to take incremental backups of failed previous backups." Unassigned. Cheers, -- Sofía Enriquez she/her Software Engineer Red Hat PnT <https://www.redhat.com> IRC: @enriquetaso @RedHat <https://twitter.com/redhat> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc> <https://www.redhat.com>

1 0

[tripleo] gate blocker - openstacksdk library - please hold rechecks
by Ronelle Landy 25 May '22

25 May '22

Hello All, We have a blocker on TripleO check/gate/integration jobs detailed in: https://bugs.launchpad.net/tripleo/+bug/1975646 - tripleo tests are failing os_tempest with "openstacksdk library MUST be >=0.99." There is a proposed fix in test now: https://review.opendev.org/c/openstack/tripleo-ci/+/843220. Please hold rechecks until we can either merge the fix or revert the breaking change. Thank you, TripleO CI.

2 1

[nova] Snapshot Image Format
by Ammad Syed 25 May '22

25 May '22

Hi, I am using nova 24.0. I have an image in raw format in glance store. I have created a volume backed instance from raw image. Then I have created the server image using nova api below with *createImage* . https://docs.openstack.org/api-ref/compute/?expanded=create-image-createima… OR via openstack server image create --name <name> <server uuid> The created image I see in glance store is in qcow2 format. I have set this option snapshot_image_format in nova.conf but still it creates the images in qcow2 format. How config need to be done if i need to save server image in raw format ? Ammad

1 0

Re: [GLANCE][VICTORIA] - Multi-backend support with ceph backed swift.
by Gaël THEROND 25 May '22

25 May '22

Sure! However it is specified two times within the official glance configuration, once in glance_store and once in glance.store.swift.store but that last section is really not that well documented. https://docs.openstack.org/glance/latest/configuration/glance_api.html#glan… Le mar. 24 mai 2022 à 17:54, Abhishek Kekane <akekane(a)redhat.com> a écrit : > Hi Gaël, > > Can you try moving default_swift_reference from glance_store section to > particular swift store section, i.e. cold as per your configs. > > I guess that is the issue. > > Abhishek > > On Tue, 24 May 2022 at 7:30 PM, Gaël THEROND <gael.therond(a)bitswalk.com> > wrote: > >> Hi everyone, >> >> I'm currently enabling glance multi backend support for one of our >> platforms and we're facing a weird situation. >> >> This platform is a CentOS 8 Stream based Openstack VICTORIA and when we >> enable the multi-backends feature, the swift store isn't working properly. >> >> When we try to send an image to this store we end up with the following >> error message: >> *"ERROR glance_store._drivers.swift.store - A value for >> swift_store_auth_address is required."* >> >> Here is the complete log trace: >> https://paste.opendev.org/show/bGeCJjSB1C5GwD6JYFvu/ >> >> I'm a bit surprised because according to the error message and the >> glance_store code it means that either my *default_swift_reference* or >> *auth_address *fromthe *default_swift_reference *isn't set. >> >> >> https://opendev.org/openstack/glance_store/src/branch/stable/victoria/glanc… >> >> However as you can see on my glance-api.conf file I've (seems so) >> correctly set the glance_store directive and the store settings: >> >> glance-api.conf: https://paste.opendev.org/show/bjFAPCjlCG6MqINGsIlK/ >> glance-swift.conf: https://paste.opendev.org/show/bcCfBQDj32T3qgiJj3P7/ >> >> I'm only using a single tenant glance container within the admin project. >> What's really weird is this issue still arise and exist with any known >> (to me) combination of configuration. >> >> I've tried to declare the store right within the glance-api.conf file, >> but it's not working. >> I've tried to declare the store right within the glance-api.conf file and >> with the deprecated swift_store_auth_address directive instead of the >> auth_address one, it's not working. >> I've tried to declare the store right within the glance-api.conf file and >> with the deprecated swift_store_auth_address directive plus the >> auth_address one, it's not working. >> I've tried to replace auth_address directive with the deprecated >> swift_store_auth_address within the glance-swift.conf, same error and issue >> again. >> >> When I replace the default_backend value with performance, uploading an >> image works perfectly. >> >> I know that my swift CEPH RGW backed endpoint works as I use it already >> to store data. I've even tried to push an image on it both using CLI >> (openstack object) and cURL API call and it works. >> I'm a bit lost here, so if anyone is having thoughts on this I would be >> happy to hear you! >> >> Thanks a lot everyone! >> > -- > Thanks & Best Regards, > > Abhishek Kekane >

2 6

[ops][heat][rbac] Call for feedback: Splitting stack to "system" stack and "project" stack
by Takashi Kajinami 24 May '22

24 May '22

Hello, tl;dr We are looking for some feedback from anyone developing their tool/software creating/managing heat stacks, about the new requirement we are considering. Recently we've been discussing the issue with Heat and Secure RBAC work[1]. The current target of SRBAC work requires the appropriate scope according to the resources. - Project resources like instance, volume or network can be created by project-scoped token - Project resources like flavor, user, project or role can be created by system-scoped token This is causing a problem with heat stacks which have both project resources and system resources, because heat currently uses the single token provided by the user in a single stack API call. As part of discussions we have discussed the "split stack" concept, which requires creating separate stacks per scope. This means If you want to create project resources and system resources by Heat, you should create two separate heat stacks and call heat stack api separately using different credentials. While we still need to investigate the feasibility of this option (eg. how smooth we can make the migration), we'd like to hear any feedback about the impact of the "split stack" concept on any external toolings depending on Heat, because this would require some workflow/architecture change in the toolings. If we hear many negative feedback/concerns then we would examine different approaches. Thank you, Takashi [1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rb…

1 1

[GLANCE][VICTORIA] - Multi-backend support with ceph backed swift.
by Gaël THEROND 24 May '22

24 May '22

Hi everyone, I'm currently enabling glance multi backend support for one of our platforms and we're facing a weird situation. This platform is a CentOS 8 Stream based Openstack VICTORIA and when we enable the multi-backends feature, the swift store isn't working properly. When we try to send an image to this store we end up with the following error message: *"ERROR glance_store._drivers.swift.store - A value for swift_store_auth_address is required."* Here is the complete log trace: https://paste.opendev.org/show/bGeCJjSB1C5GwD6JYFvu/ I'm a bit surprised because according to the error message and the glance_store code it means that either my *default_swift_reference* or *auth_address *fromthe *default_swift_reference *isn't set. https://opendev.org/openstack/glance_store/src/branch/stable/victoria/glanc… However as you can see on my glance-api.conf file I've (seems so) correctly set the glance_store directive and the store settings: glance-api.conf: https://paste.opendev.org/show/bjFAPCjlCG6MqINGsIlK/ glance-swift.conf: https://paste.opendev.org/show/bcCfBQDj32T3qgiJj3P7/ I'm only using a single tenant glance container within the admin project. What's really weird is this issue still arise and exist with any known (to me) combination of configuration. I've tried to declare the store right within the glance-api.conf file, but it's not working. I've tried to declare the store right within the glance-api.conf file and with the deprecated swift_store_auth_address directive instead of the auth_address one, it's not working. I've tried to declare the store right within the glance-api.conf file and with the deprecated swift_store_auth_address directive plus the auth_address one, it's not working. I've tried to replace auth_address directive with the deprecated swift_store_auth_address within the glance-swift.conf, same error and issue again. When I replace the default_backend value with performance, uploading an image works perfectly. I know that my swift CEPH RGW backed endpoint works as I use it already to store data. I've even tried to push an image on it both using CLI (openstack object) and cURL API call and it works. I'm a bit lost here, so if anyone is having thoughts on this I would be happy to hear you! Thanks a lot everyone!

1 0

[Monasca] correlating monasca-api metrics resource_id to instance id
by Ivo Palli 24 May '22

24 May '22

Hi all, I'm new to openstack and monasca. I've gotten so far as to retrieve instances with their ID's via the REST API, but I'm running into trouble with getting metrics. The issue is that metrics: - show to which hostname they belong - and you can limit results to a project id But if you have 2 or more servers with the same hostname, you can't link them 1:1 with an instance. Is there a way how I can get that 1:1 link? Regards, Ivo Palli

1 0

Creating VM directly on external network.
by Russell Stather 24 May '22

24 May '22

Hi I have a charm based OpenStack setup. The network topology is as below. Creating vms on the internal network and adding floating ips works as expected. Adding vms on directly on to the ext_net does not. openstack allows me to do it, but I get host is unreachable when trying to connect. Is there some configuration I have missed? Thanks [cid:3699cab3-ea6a-45eb-91c3-65e91056fd71]

4 4

Recreate virsh xml
by Szabo, Istvan (Agoda) 24 May '22

24 May '22

Hi, I have a node which has been live-migrated to another node and it is running on the new node BUT there isn't any xml definition file (/etc/libvirt/qemu/instance-*.xml) of it which is automatically generated. How I solve this issue normally is to respawn that vm with the same disk and ip that it has before, but I wonder is there any easier way to just simply recreate the automatically generated definition file. The file which I'm talking about auto generated is this one: /etc/libvirt/qemu/instance-*.xml starts like this so I guess I can't create by myself.  <domain type='kvm'> <name>instance-00006580</name> <uuid>ac8cf83e-6819-417a-9f83-de73c28567e9</uuid> <metadata> .... Thank you ________________________________ This message is confidential and is for the sole use of the intended recipient(s). It may also be privileged or otherwise protected by copyright or other legal rules. If you have received it by mistake please let us know by reply email and delete it from your system. It is prohibited to copy this message or disclose its content to anyone. Any confidentiality or privilege is not waived or lost by any mistaken delivery or unauthorized disclosure of the message. All messages sent to and from Agoda may be monitored to ensure compliance with company policies, to protect the company's interests and to remove potential malware. Electronic messages may be intercepted, amended, lost or deleted, or contain viruses.

2 1

Question about lp 1950186
by Seyeong Kim 24 May '22

24 May '22

Hello, I have a question about lp https://bugs.launchpad.net/nova/+bug/1950186 if this can be fixed in near future or if there is any plan? Thanks in advance.

2 1

[neutron][neutron-vpnaas] neutron-tempest-plugin coverage
by Mohammed Naser 24 May '22

24 May '22

Hiya, As part of cleaning up VPNaaS, I decided to explore fixing the longstanding failures of the `neutron-tempest-plugin-vpnaas-libreswan-centos` job that was always failing and non-voting. Upon trying to flip the switch on it in a test change[1], I noticed that much of the test results seem to be simply exercising the API[2], essentially making the fact that we run that job on CentOS a bit redundant. The tests that actually exercise more than the API and validate connectivity are the functional tests, which currently run for "StrongSwan" only on Ubuntu. My question to the Neutron team is: 1. Should we get rid of the functional jobs and move them into neutron-tempest-plugin, and run that for different platforms? 2. Should we get rid of the neutron-tempest-plugin job under CentOS and add functional jobs for CentOS? My inclination seems to be #2, since that is what other stadium projects seem to be doing (no one seems to run platform-specific neutron-tempest-plugin jobs). It also keeps maintainability simpler since it remains in the hands of the VPNaaS team. Thanks Mohammed [1]: https://review.opendev.org/c/openstack/neutron-vpnaas/+/843005 [2]: https://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/… -- Mohammed Naser VEXXHOST, Inc.

2 1

[qa][openeuler] QA wants to drop openeuler job
by Martin Kopec 24 May '22

24 May '22

Hi everyone, we're considering dropping the devstack-platform-openEuler-20.03-SP2 job. It's been failing for a long time and based on the fact that no one has complained about it, we assume that there isn't much interest in having the job around. If that's not the case, please, reach out and let's discuss updating the job. Thanks, -- Martin Kopec Senior Software Quality Engineer Red Hat EMEA IM: kopecmartin

1 1

[cinder] This week's meeting will be in video+IRC
by Rajat Dhasmana 24 May '22

24 May '22

Hello Argonauts, This week's meeting will be held in video + IRC mode with details as follows: Date: 25th May, 2022 Time: 1400 UTC Meeting link: https://bluejeans.com/556681290 IRC Channel: #openstack-meeting-alt Make sure you're connected to both the bluejeans meeting and IRC since we do roll call and also summarize the discussion points on IRC. Note: Every last meeting of the month is held in video + IRC mode to provide flexibility to communicate their thoughts via written or verbal way. It also acts as a medium to meet the team (virtually) every month. Thanks and regards Rajat Dhasmana

1 0

[Neutron] CI meeting - 24.05.2022
by Slawek Kaplonski 24 May '22

24 May '22

Hi, Just quick reminder that today at 1500 UTC we will have Neutron CI meeting. It will be on Jitsi [1] this week. Agenda can be found at [2]. See You there :) [1] https://meetpad.opendev.org/neutron-ci-meetings[1] [2] https://etherpad.opendev.org/p/neutron-ci-meetings[2] -- Slawek Kaplonski Principal Software Engineer Red Hat -------- [1] https://meetpad.opendev.org/neutron-ci-meetings [2] https://etherpad.opendev.org/p/neutron-ci-meetings

1 0

skyline dashboard filter issue
by Parsa Aminian 24 May '22

24 May '22

hello On Skyline dashboard of openstack there is no way to search instances base on fixed ip address . is there anyway that I can add fixed ip filter to this dashboard ? thanks

2 1

[puppet][tripleo][neutron] Deprecating support for networking-ansible
by Takashi Kajinami 24 May '22

24 May '22

Hello Currently puppet-neutron supports deploying networking-ansible[1]. However I noticed the project looks unmaintained. - No release was made since stable/victoria - Its job template has not been updated still points openstack-python3-wallaby-jobs (likely because of no release activity) - setup.cfg still indicates support for Python 2 while it does not support 3.6/7/9 Although the repo got a few patches merged 6 months ago, I've not seen any interest in maintaining the repository. Based on the above observations, I'd propose deprecating the support in Zed and removing it in the post-Zed release. TripleO also supports networking-ansible but that will be also deprecated and removed because the dependent implementation will be removed. (That's why I added the tripleo tag) If you have any concerns then please let me know. If we don't hear any concerns in a few weeks then I'll propose the deprecation. I'm adding the [neutron] tag in case anybody in the team is interested in fixing the maintenance status. IIUC networking-ansible is not part of the stadium but I'm not aware of any good alternatives... [1] https://opendev.org/x/networking-ansible Thank you, Takashi

1 1

SSL verify failed | Overcloud deploy step 4 | Wallaby | tripleo
by Swogat Pradhan 23 May '22

23 May '22

Hi, I am currently stuck in deploy step 4 with the following error: FATAL | Clean up legacy Cinder keystone catalog entries | undercloud | item={'service_name': 'cinderv3', 'service_type': 'volume'} | error={"ansible_index_var": "cinder_api_service", "ansible_loop_var": "item", "changed": false, "cinder_api_service": 1, "item": {"service_name": "cinderv3", "service_type": "volume"}, "module_stderr": "Failed to discover available identity versions when contacting https://overcloud.bdxworld.com:13000. Attempting to parse version from URL.\nTraceback (most recent call last):\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 677, in urlopen\n chunked=chunked,\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 381, in make_request\n self._validate_conn(conn)\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 978, in _validate_conn\n conn.connect()\n File \"/usr/lib/python3.6/site-packages/urllib3/connection.py\", line 371, in connect\n ssl_context=context,\n File \"/usr/lib/python3.6/site-packages/urllib3/util/ssl.py\", line 384, in ssl_wrap_socket\n return context.wrap_socket(sock, server_hostname=server_hostname)\n File \"/usr/lib64/python3.6/ssl.py\", line 365, in wrap_socket\n context=self, _session=session)\n File \"/usr/lib64/python3.6/ssl.py\", line 776, in __init\n self.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 1036, in do_handshake\n self._sslobj.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 648, in do_handshake\n self._sslobj.do_handshake()\nssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897) Attached details: With regrads, Swogat pradhan

1 0

[keystone][swift] audit logs
by Sharath Ck 23 May '22

23 May '22

Hi, I am currently trying to add keystone audit middleware in Swift. Middleware is managed in swift proxy server, hence I have added the audit filter in proxy server conf and have mentioned audit_middleware_notifications driver as log in swift.conf . I can see REST API call flow reaching audit middleware and constructing the audit event with minimal data as Swift is not loading service catalog information. But the audit event is not getting notified as per audit_middleware_notifications. I tried adding oslo_messaging_notifications with the driver as log, but audit events are not getting notified. Below are the changes in swift_proxy_server container, proxy-server.conf [pipeline:main] pipeline = catch_errors gatekeeper healthcheck cache container_sync bulk tempurl ratelimit formpost authtoken keystoneauth audit container_quotas account_quotas slo dlo keymaster encryption proxy-server [filter:audit] paste.filter_factory = keystonemiddleware.audit:filter_factory audit_map_file = /etc/swift/api_audit_map.conf swift.conf [oslo_messaging_notifications] driver = log [audit_middleware_notifications] driver = log Kindly confirm whether the configuration changes are enough or need more changes. Regards, Sharath

2 3

[neutron] Bug deputy report - week of May 16th
by Slawek Kaplonski 23 May '22

23 May '22

Hi, I was Neutron bug deputy last week. It was pretty busy week this time. Below is summary of new bugs opened during that time: ## High * https://bugs.launchpad.net/neutron/+bug/1973783 - [devstack] Segment plugin reports Traceback as placement client not configured - assigned to Yatin, in progress * https://bugs.launchpad.net/neutron/+bug/1974144 - [sqlalchemy-20] Missing DB context in "_get_dvr_hosts_for_subnets" - assigned to Rodolfo, in progress * https://bugs.launchpad.net/neutron/+bug/1974142 - [sqlalchemy-20] Missing DB context in "_update_subnet_postcommit" - assigned to Rodolfo, in progress * https://bugs.launchpad.net/neutron/+bug/1974057 - [neutron-dynamic-routing] Plugin RPC queue should be consumed by RPC workers - assigned to Renat Nurgaliyev, in progress ## Medium * https://bugs.launchpad.net/neutron/+bug/1973726 - [DB] "SubnetPool" exact match queries to non-indexed columns - *needs assignment* * https://bugs.launchpad.net/neutron/+bug/1973765 - LB creation failed due to address already in use - assigned to Fernando, fix proposed https://review.opendev.org/c/openstack/ovn-octavia-provider/+/842107 * https://bugs.launchpad.net/neutron/+bug/1974183 - Neutron allows creation of trunks for VIF_TYPE_HW_VEB ports - *needs assignment* * https://bugs.launchpad.net/neutron/+bug/1974149 - [FT] Test "test_agent_updated_at_use_nb_cfg_timestamp" failing - assigned to Rodolfo, in progress * https://bugs.launchpad.net/neutron/+bug/1974052 - Load Balancer remains in PENDING_CREATE - assigned to Fernando Royo, in progress ## Low * https://bugs.launchpad.net/neutron/+bug/1973656 - meaning of option "router_auto_schedule" is ambiguous - *needs assignment *but I think we need to discuss about it in the team meeting first to decide what naming/behaviour we really want to have, * https://bugs.launchpad.net/neutron/+bug/1973731 - [UT] Error output in "test_metadata_port_on_network_delete" - assigned to Rodolfo * https://bugs.launchpad.net/neutron/+bug/1973780 - PEP 632 – Deprecate distutils module - assigned to Rodolfo, fixes already proposed https://review.opendev.org/c/openstack/neutron/+/842133 and https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/842135 ## Whishlist (RFEs) * https://bugs.launchpad.net/neutron/+bug/1973487 - [RFE] Allow setting --dst-port for all port based protocols at once And that's all. -- Slawek Kaplonski Principal Software Engineer Red Hat

1 0

SSL verify failed | Overcloud deploy step 4 | Wallaby | tripleo
by Swogat Pradhan 23 May '22

23 May '22

Hi, I am currently stuck in deploy step 4 with the following error: FATAL | Clean up legacy Cinder keystone catalog entries | undercloud | item={'service_name': 'cinderv3', 'service_type': 'volume'} | error={"ansible_index_var": "cinder_api_service", "ansible_loop_var": "item", "changed": false, "cinder_api_service": 1, "item": {"service_name": "cinderv3", "service_type": "volume"}, "module_stderr": "Failed to discover available identity versions when contacting https://overcloud.bdxworld.com:13000. Attempting to parse version from URL.\nTraceback (most recent call last):\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 677, in urlopen\n chunked=chunked,\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 381, in make_request\n self._validate_conn(conn)\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 978, in _validate_conn\n conn.connect()\n File \"/usr/lib/python3.6/site-packages/urllib3/connection.py\", line 371, in connect\n ssl_context=context,\n File \"/usr/lib/python3.6/site-packages/urllib3/util/ssl.py\", line 384, in ssl_wrap_socket\n return context.wrap_socket(sock, server_hostname=server_hostname)\n File \"/usr/lib64/python3.6/ssl.py\", line 365, in wrap_socket\n context=self, _session=session)\n File \"/usr/lib64/python3.6/ssl.py\", line 776, in __init\n self.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 1036, in do_handshake\n self._sslobj.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 648, in do_handshake\n self._sslobj.do_handshake()\nssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File \"/usr/lib/python3.6/site-packages/requests/adapters.py\", line 449, in send\n timeout=timeout\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 727, in urlopen\n method, url, error=e, _pool=self, _stacktrace=sys.exc_info()[2]\n File \"/usr/lib/python3.6/site-packages/urllib3/util/retry.py\", line 439, in increment\n raise MaxRetryError(_pool, url, error or ResponseError(cause))\nurllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='overcloud.bdxworld.com', port=13000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 1022, in _send_request\n resp = self.session.request(method, url, *kwargs)\n File \"/usr/lib/python3.6/site-packages/requests/sessions.py\", line 542, in request\n resp = self.send(prep, **send_kwargs)\n File \"/usr/lib/python3.6/site-packages/requests/sessions.py\", line 655, in send\n r = adapter.send(request, **kwargs)\n File \"/usr/lib/python3.6/site-packages/requests/adapters.py\", line 514, in send\n raise SSLError(e, request=request)\nrequests.exceptions.SSLError: HTTPSConnectionPool(host='overcloud.bdxworld.com', port=13000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/generic/base.py\", line 138, in _do_create_plugin\n authenticated=False)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/base.py\", line 610, in get_discovery\n authenticated=authenticated)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/discover.py\", line 1452, in get_discovery\n disc = Discover(session, url, authenticated=authenticated)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/discover.py\", line 536, in __init_\n authenticated=authenticated)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/discover.py\", line 102, in get_version_data\n resp = session.get(url, headers=headers, authenticated=authenticated)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 1141, in get\n return self.request(url, 'GET', **kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 931, in request\n resp = send(**kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 1026, in _send_request\n raise exceptions.SSLError(msg)\nkeystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://overcloud.bdxworld.com:13000: HTTPSConnectionPool(host='overcloud.bdxworld.com', port=13000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File \"<stdin>\", line 102, in <module>\n File \"<stdin>\", line 94, in _ansiballz_main\n File \"<stdin>\", line 40, in invoke_module\n File \"/usr/lib64/python3.6/runpy.py\", line 205, in run_module\n return _run_module_code(code, init_globals, run_name, mod_spec)\n File \"/usr/lib64/python3.6/runpy.py\", line 96, in _run_module_code\n mod_name, mod_spec, pkg_name, script_name)\n File \"/usr/lib64/python3.6/runpy.py\", line 85, in _run_code\n exec(code, run_globals)\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/modules/catalog_service.py\", line 185, in <module>\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/modules/catalog_service.py\", line 181, in main\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/module_utils/openstack.py\", line 407, in __call_\n authenticated=authenticated)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/discover.py\", line 102, in get_version_data\n resp = session.get(url, headers=headers, authenticated=authenticated)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 1141, in get\n return self.request(url, 'GET', **kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 931, in request\n resp = send(**kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 1026, in _send_request\n raise exceptions.SSLError(msg)\nkeystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://overcloud.bdxworld.com:13000: HTTPSConnectionPool(host='overcloud.bdxworld.com', port=13000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File \"<stdin>\", line 102, in <module>\n File \"<stdin>\", line 94, in _ansiballz_main\n File \"<stdin>\", line 40, in invoke_module\n File \"/usr/lib64/python3.6/runpy.py\", line 205, in run_module\n return _run_module_code(code, init_globals, run_name, mod_spec)\n File \"/usr/lib64/python3.6/runpy.py\", line 96, in _run_module_code\n mod_name, mod_spec, pkg_name, script_name)\n File \"/usr/lib64/python3.6/runpy.py\", line 85, in _run_code\n exec(code, run_globals)\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/modules/catalog_service.py\", line 185, in <module>\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/modules/catalog_service.py\", line 181, in main\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/module_utils/openstack.py\", line 407, in __call__\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/modules/catalog_service.py\", line 141, in run\n File \"/usr/lib/python3.6/site-packages/openstack/cloud/_identity.py\", line 517, in search_services\n services = self.list_services()\n File \"/usr/lib/python3.6/site-packages/openstack/cloud/_identity.py\", line 492, in list_services\n if self._is_client_version('identity', 2):\n File \"/usr/lib/python3.6/site-packages/openstack/cloud/openstackcloud.py\", line 460, in _is_client_version\n client = getattr(self, client_name)\n File \"/usr/lib/python3.6/site-packages/openstack/cloud/_identity.py\", line 32, in _identity_client\n 'identity', min_version=2, max_version='3.latest')\n File \"/usr/lib/python3.6/site-packages/openstack/cloud/openstackcloud.py\", line 407, in _get_versioned_client\n if adapter.get_endpoint():\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/adapter.py\", line 291, in get_endpoint\n return self.session.get_endpoint(auth or self.auth, **kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 1243, in get_endpoint\n return auth.get_endpoint(self, **kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/base.py\", line 380, in get_endpoint\n allow_version_hack=allow_version_hack, **kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/base.py\", line 271, in get_endpoint_data\n service_catalog = self.get_access(session).service_catalog\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/base.py\", line 134, in get_access\n self.auth_ref = self.get_auth_ref(session)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/generic/base.py\", line 206, in get_auth_ref\n self._plugin = self._do_create_plugin(session)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/generic/base.py\", line 161, in _do_create_plugin\n 'auth_url is correct. %s' % e)\nkeystoneauth1.exceptions.discovery.DiscoveryFailure: Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://overcloud.bdxworld.com:13000: HTTPSConnectionPool(host=' overcloud.bdxworld.com', port=13000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))\n", "module_stdout": "", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 1} *Catalog list:* +-----------+----------------+--------------------------------------------------------------------------------------+ | Name | Type | Endpoints | +-----------+----------------+--------------------------------------------------------------------------------------+ | aodh | alarming | regionOne | | | | internal: http://172.25.201.250:8042 | | | | regionOne | | | | public: http://172.25.201.150:8042 | | | | regionOne | | | | admin: http://172.25.201.250:8042 | | | | | | placement | placement | regionOne | | | | admin: http://172.25.201.250:8778/placement | | | | regionOne | | | | internal: http://172.25.201.250:8778/placement | | | | regionOne | | | | public: http://172.25.201.150:8778/placement | | | | | | gnocchi | metric | regionOne | | | | public: http://172.25.201.150:8041 | | | | regionOne | | | | internal: http://172.25.201.250:8041 | | | | regionOne | | | | admin: http://172.25.201.250:8041 | | | | | | glance | image | regionOne | | | | internal: http://172.25.201.250:9292 | | | | regionOne | | | | admin: http://172.25.201.250:9292 | | | | regionOne | | | | public: http://172.25.201.150:9292 | | | | | | keystone | identity | regionOne | | | | internal: http://172.25.201.250:5000 | | | | regionOne | | | | admin: http://172.25.201.250:35357 | | | | regionOne | | | | public: https://overcloud.bdxworld.com:13000 | | | | | | heat-cfn | cloudformation | regionOne | | | | internal: http://172.25.201.250:8000/v1 | | | | regionOne | | | | public: http://172.25.201.150:8000/v1 | | | | regionOne | | | | admin: http://172.25.201.250:8000/v1 | | | | | | neutron | network | regionOne | | | | admin: http://172.25.201.250:9696 | | | | regionOne | | | | public: http://172.25.201.150:9696 | | | | regionOne | | | | internal: http://172.25.201.250:9696 | | | | | | heat | orchestration | regionOne | | | | internal: http://172.25.201.250:8004/v1/5d922243077045c48fe4b075e386551b | | | | regionOne | | | | public: http://172.25.201.150:8004/v1/5d922243077045c48fe4b075e386551b | | | | regionOne | | | | admin: http://172.25.201.250:8004/v1/5d922243077045c48fe4b075e386551b | | | | | | octavia | load-balancer | regionOne | | | | public: http://172.25.201.150:9876 | | | | regionOne | | | | admin: http://172.25.201.250:9876 | | | | regionOne | | | | internal: http://172.25.201.250:9876 | | | | | | cinderv3 | volumev3 | regionOne | | | | internal: http://172.25.201.250:8776/v3/5d922243077045c48fe4b075e386551b | | | | regionOne | | | | public: http://172.25.201.150:8776/v3/5d922243077045c48fe4b075e386551b | | | | regionOne | | | | admin: http://172.25.201.250:8776/v3/5d922243077045c48fe4b075e386551b | | | | | | swift | object-store | regionOne | | | | public: http://172.25.201.150:8080/swift/v1/AUTH_5d922243077045c48fe4b075e386551b | | | | regionOne | | | | admin: http://172.25.202.50:8080/swift/v1/AUTH_5d922243077045c48fe4b075e386551b | | | | regionOne | | | | internal: http://172.25.202.50:8080/swift/v1/AUTH_5d922243077045c48fe4b075e386551b | | | | | | nova | compute | regionOne | | | | admin: http://172.25.201.250:8774/v2.1 | | | | regionOne | | | | internal: http://172.25.201.250:8774/v2.1 | | | | regionOne | | | | public: http://172.25.201.150:8774/v2.1 | | | | *Host entries:* [stack@hkg2director ~]$ cat /etc/hosts # START_HOST_ENTRIES_FOR_STACK: overcloud 172.25.201.68 hkg2director.ctlplane.bdxworld.com hkg2director.ctlplane hkg2director.ctlplane.bdxcloud.bdxworld.com 172.25.201.91 overcloud.ctlplane.bdxworld.com 172.25.202.50 overcloud.storage.bdxworld.com 172.25.202.90 overcloud.storagemgmt.bdxworld.com 172.25.201.250 overcloud.internalapi.bdxworld.com 172.25.201.150 overcloud.bdxworld.com 172.25.201.212 overcloud-controller-0.bdxworld.com overcloud-controller-0 172.25.202.13 overcloud-controller-0.storage.bdxworld.com overcloud-controller-0.storage 172.25.202.75 overcloud-controller-0.storagemgmt.bdxworld.com overcloud-controller-0.storagemgmt 172.25.201.212 overcloud-controller-0.internalapi.bdxworld.com overcloud-controller-0.internalapi 172.25.202.143 overcloud-controller-0.tenant.bdxworld.com overcloud-controller-0.tenant 172.25.201.144 overcloud-controller-0.external.bdxworld.com overcloud-controller-0.external 172.25.201.106 overcloud-controller-0.ctlplane.bdxworld.com overcloud-controller-0.ctlplane 172.25.201.205 overcloud-controller-1.bdxworld.com overcloud-controller-1 172.25.202.18 overcloud-controller-1.storage.bdxworld.com overcloud-controller-1.storage 172.25.202.76 overcloud-controller-1.storagemgmt.bdxworld.com overcloud-controller-1.storagemgmt 172.25.201.205 overcloud-controller-1.internalapi.bdxworld.com overcloud-controller-1.internalapi 172.25.202.142 overcloud-controller-1.tenant.bdxworld.com overcloud-controller-1.tenant 172.25.201.149 overcloud-controller-1.external.bdxworld.com overcloud-controller-1.external 172.25.201.105 overcloud-controller-1.ctlplane.bdxworld.com overcloud-controller-1.ctlplane 172.25.201.201 overcloud-controller-2.bdxworld.com overcloud-controller-2 172.25.202.12 overcloud-controller-2.storage.bdxworld.com overcloud-controller-2.storage 172.25.202.74 overcloud-controller-2.storagemgmt.bdxworld.com overcloud-controller-2.storagemgmt 172.25.201.201 overcloud-controller-2.internalapi.bdxworld.com overcloud-controller-2.internalapi 172.25.202.149 overcloud-controller-2.tenant.bdxworld.com overcloud-controller-2.tenant 172.25.201.139 overcloud-controller-2.external.bdxworld.com overcloud-controller-2.external 172.25.201.97 overcloud-controller-2.ctlplane.bdxworld.com overcloud-controller-2.ctlplane 172.25.201.209 overcloud-controller-no-ceph-3.bdxworld.com overcloud-controller-no-ceph-3 172.25.202.17 overcloud-controller-no-ceph-3.storage.bdxworld.com overcloud-controller-no-ceph-3.storage 172.25.202.79 overcloud-controller-no-ceph-3.storagemgmt.bdxworld.com overcloud-controller-no-ceph-3.storagemgmt 172.25.201.209 overcloud-controller-no-ceph-3.internalapi.bdxworld.com overcloud-controller-no-ceph-3.internalapi 172.25.202.135 overcloud-controller-no-ceph-3.tenant.bdxworld.com overcloud-controller-no-ceph-3.tenant 172.25.201.137 overcloud-controller-no-ceph-3.external.bdxworld.com overcloud-controller-no-ceph-3.external 172.25.201.103 overcloud-controller-no-ceph-3.ctlplane.bdxworld.com overcloud-controller-no-ceph-3.ctlplane 172.25.201.202 overcloud-novacompute-0.bdxworld.com overcloud-novacompute-0 172.25.202.19 overcloud-novacompute-0.storage.bdxworld.com overcloud-novacompute-0.storage 172.25.201.202 overcloud-novacompute-0.internalapi.bdxworld.com overcloud-novacompute-0.internalapi 172.25.202.140 overcloud-novacompute-0.tenant.bdxworld.com overcloud-novacompute-0.tenant 172.25.201.107 overcloud-novacompute-0.ctlplane.bdxworld.com overcloud-novacompute-0.ctlplane 172.25.201.207 overcloud-novacompute-1.bdxworld.com overcloud-novacompute-1 172.25.202.15 overcloud-novacompute-1.storage.bdxworld.com overcloud-novacompute-1.storage 172.25.201.207 overcloud-novacompute-1.internalapi.bdxworld.com overcloud-novacompute-1.internalapi 172.25.202.144 overcloud-novacompute-1.tenant.bdxworld.com overcloud-novacompute-1.tenant 172.25.201.112 overcloud-novacompute-1.ctlplane.bdxworld.com overcloud-novacompute-1.ctlplane 172.25.201.200 overcloud-novacompute-2.bdxworld.com overcloud-novacompute-2 172.25.202.20 overcloud-novacompute-2.storage.bdxworld.com overcloud-novacompute-2.storage 172.25.201.200 overcloud-novacompute-2.internalapi.bdxworld.com overcloud-novacompute-2.internalapi 172.25.202.138 overcloud-novacompute-2.tenant.bdxworld.com overcloud-novacompute-2.tenant 172.25.201.100 overcloud-novacompute-2.ctlplane.bdxworld.com overcloud-novacompute-2.ctlplane 172.25.201.199 overcloud-novacompute-3.bdxworld.com overcloud-novacompute-3 172.25.202.9 overcloud-novacompute-3.storage.bdxworld.com overcloud-novacompute-3.storage 172.25.201.199 overcloud-novacompute-3.internalapi.bdxworld.com overcloud-novacompute-3.internalapi 172.25.202.141 overcloud-novacompute-3.tenant.bdxworld.com overcloud-novacompute-3.tenant 172.25.201.104 overcloud-novacompute-3.ctlplane.bdxworld.com overcloud-novacompute-3.ctlplane 172.25.201.198 overcloud-novacompute-4.bdxworld.com overcloud-novacompute-4 172.25.202.16 overcloud-novacompute-4.storage.bdxworld.com overcloud-novacompute-4.storage 172.25.201.198 overcloud-novacompute-4.internalapi.bdxworld.com overcloud-novacompute-4.internalapi 172.25.202.139 overcloud-novacompute-4.tenant.bdxworld.com overcloud-novacompute-4.tenant 172.25.201.109 overcloud-novacompute-4.ctlplane.bdxworld.com overcloud-novacompute-4.ctlplane 172.25.202.14 overcloud-cephstorage-0.bdxworld.com overcloud-cephstorage-0 172.25.202.14 overcloud-cephstorage-0.storage.bdxworld.com overcloud-cephstorage-0.storage 172.25.202.72 overcloud-cephstorage-0.storagemgmt.bdxworld.com overcloud-cephstorage-0.storagemgmt 172.25.201.101 overcloud-cephstorage-0.ctlplane.bdxworld.com overcloud-cephstorage-0.ctlplane 172.25.202.6 overcloud-cephstorage-1.bdxworld.com overcloud-cephstorage-1 172.25.202.6 overcloud-cephstorage-1.storage.bdxworld.com overcloud-cephstorage-1.storage 172.25.202.78 overcloud-cephstorage-1.storagemgmt.bdxworld.com overcloud-cephstorage-1.storagemgmt 172.25.201.92 overcloud-cephstorage-1.ctlplane.bdxworld.com overcloud-cephstorage-1.ctlplane 172.25.202.11 overcloud-cephstorage-2.bdxworld.com overcloud-cephstorage-2 172.25.202.11 overcloud-cephstorage-2.storage.bdxworld.com overcloud-cephstorage-2.storage 172.25.202.85 overcloud-cephstorage-2.storagemgmt.bdxworld.com overcloud-cephstorage-2.storagemgmt 172.25.201.111 overcloud-cephstorage-2.ctlplane.bdxworld.com overcloud-cephstorage-2.ctlplane 172.25.202.10 overcloud-cephstorage-3.bdxworld.com overcloud-cephstorage-3 172.25.202.10 overcloud-cephstorage-3.storage.bdxworld.com overcloud-cephstorage-3.storage 172.25.202.87 overcloud-cephstorage-3.storagemgmt.bdxworld.com overcloud-cephstorage-3.storagemgmt 172.25.201.96 overcloud-cephstorage-3.ctlplane.bdxworld.com overcloud-cephstorage-3.ctlplane 172.25.201.68 hkg2director.ctlplane.bdxworld.com hkg2director.ctlplane hkg2director.ctlplane.bdxcloud.bdxworld.com # END_HOST_ENTRIES_FOR_STACK: overcloud # START_HOST_ENTRIES_FOR_STACK: undercloud 172.25.201.68 hkg2director.bdxworld.com hkg2director 172.25.201.68 hkg2director.external.bdxworld.com hkg2director.external 172.25.201.68 hkg2director.ctlplane.bdxworld.com hkg2director.ctlplane 172.25.201.68 bdxworld.com 172.25.201.68 bdxworld.com # END_HOST_ENTRIES_FOR_STACK: undercloud 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 172.25.201.68 hkg2director.bdxworld.com hkg2director bdxworld.com NOTE: my overcloud nodes are in the DMZ. Any help would be appreciated. With regards, Swogat Pradhan

1 0

Octavia Amphora staying in PENDING_CREATE forever.
by Russell Stather 22 May '22

22 May '22

4 6

Issue creating octavia loadbalancer
by Russell Stather 22 May '22

22 May '22

Hi Trying to create a load balancer. Get the following error. igadmin@ig-umh-maas:~$ openstack loadbalancer create -f value -c vip_port_id --name lb1 --vip-subnet-id 66690e99-44b2-4233-8f16-d539c8a05090 Provider 'amphora' reports error: Port security must be enabled on the VIP network. (HTTP 500) (Request-ID: req-642a4b4d-0d45-4a08-ba47-d4232a350703) igadmin@ig-umh-maas:~$ !1067 openstack network set --enable-port-security int_net BadRequestException: 400: Client Error for url: https://10.0.110.231:9696/v2.0/networks/be5f8494-1964-466b-a47a-8e5430976009, Unrecognized attribute(s) 'port_security_enabled' Anyone come across this issue? Thanks Russell

2 2

Magnum CSI Cinder Plugin broken in Yoga?
by Oliver Weinmann 21 May '22

21 May '22

Hi, I just updated to Yoga in order to fix the problem with the broken metrics-server, but now I had problems deploying GITLAB and the errors lead to problems with mounting PVs. So I had a look at the csi-cinder-plugin and saw this: kolla-yoga) [oliweilocal@gedasvl99 images]$ kubectl get pods -n kube-system | grep -i csi csi-cinder-controllerplugin-0 4/5 CrashLoopBackOff 168 (4m53s ago) 14h csi-cinder-nodeplugin-7kh9q 2/2 Running 0 14h csi-cinder-nodeplugin-q5bfq 2/2 Running 0 14h csi-cinder-nodeplugin-x4vrk 2/2 Running 0 14h I re-deployed the cluster and the error stays. Is there anything known about this? I have a small Ceph Pacific cluster. I can do some testing with an NFS backend as well and see if the problem goes away. Best Regards, Oliver

2 3

updating the overcloud domain in undercloud.conf | Wallaby | Tripleo
by Swogat Pradhan 21 May '22

21 May '22

Hi, I am currently deploying openstack wallaby using tripleo method, and my overcloud is up, now i want to change the overcloud domain specified in the udercloud domain and then redeploy the overcloud again. So if I change the undercloud.conf to the new domain and run openstack undercloud install, will it affect the already inspected nodes, provisioned network, ceph and nodes? Do I have to do introspection and other activities again? My plan was to : 1. change the domain in undercloud.conf 2. run openstack undercloud install (hoping it doesn't affect anything else and just updates the domain name) 3. redeploy overcloud stack only using openstack overcloud deploy (no introspection, no node provision and other activities ). With regards, Swogat Pradhan

1 0

[all][tc] What's happening in Technical Committee: summary May 20, 2022: Reading: 5 min
by Ghanshyam Mann 20 May '22

20 May '22

Hello Everyone, Here is this week's summary of the Technical Committee activities. 1. TC Meetings: ============ * We had this week's meeting on May 19. Most of the meeting discussions are summarized in this email. Meeting summary logs are available @https://meetings.opendev.org/meetings/tc/2022/tc.2022-05-19-15.00.log.html * Next TC weekly meeting will be on May 26 Thursday at 15:00 UTC, feel free to add the topic on the agenda[1] by May 25. 2. What we completed this week: ========================= * Changed new release cadence terminology from tick-tock to "SLURP" [2][3]. 3. Activities In progress: ================== TC Tracker for Zed cycle ------------------------------ * Zed tracker etherpad includes the TC working items[4], we have started the many items. Open Reviews ----------------- * Seven open reviews for ongoing activities[5]. Change OpenStack release naming policy proposal ----------------------------------------------------------- As the next step, we will have a voice call to figure out how to use the number/name in our development cycle/tooling. Meeting detail is shared in ML[6] New release cadence "SLURP" open items -------------------------------------------------- 1. release notes strategy: Brian will be proposing the agreed approach for release notes for the "SLURP" releases. Improve project governance --------------------------------- Slawek has the proposal the framework up and it is under review[7]. New ELK service dashboard: e-r service ----------------------------------------------- Not much update in this than last week. TripleO team and dpawlik are working on the e-r repo merge and hosting part. Consistent and Secure Default RBAC ------------------------------------------- We will have our next call on May 24[8], feel free to add the topic you would like to discuss in etherpad[9]. We will try to cover the heat topic if there is feedback on Takashi sent an email asking the feedback about the 'split stack' approach[10] 2021 User Survey TC Question Analysis ----------------------------------------------- No update on this. The survey summary is up for review[11]. Feel free to check and provide feedback. Zed cycle Leaderless projects ---------------------------------- No updates on this. Only Adjutant project is leaderless/maintainer-less. We will check Adjutant's the situation again on ML and hope Braden will be ready with their company side permission[12]. Fixing Zuul config error ---------------------------- Requesting projects with zuul config error to look into those and fix them which should not take much time[13][14]. Project updates ------------------- * None 4. How to contact the TC: ==================== If you would like to discuss or give feedback to TC, you can reach out to us in multiple ways: 1. Email: you can send the email with tag [tc] on openstack-discuss ML[15]. [2] https://governance.openstack.org/tc/goals/selected/fips.html 2. Weekly meeting: The Technical Committee conduct a weekly meeting every Thursday 15 UTC [16] 3. Ping us using 'tc-members' nickname on #openstack-tc IRC channel. [1] https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting [2] https://review.opendev.org/c/openstack/governance/+/840354 [3] http://lists.openstack.org/pipermail/openstack-discuss/2022-May/028540.html [4] https://etherpad.opendev.org/p/tc-zed-tracker [5] https://review.opendev.org/q/projects:openstack/governance+status:open [6] http://lists.openstack.org/pipermail/openstack-discuss/2022-May/028618.html [7] https://review.opendev.org/c/openstack/governance/+/839880 [8] https://wiki.openstack.org/wiki/Consistent_and_Secure_Default_Policies_Popu… [9] https://etherpad.opendev.org/p/rbac-zed-ptg#L97 [10] http://lists.openstack.org/pipermail/openstack-discuss/2022-May/028490.html [11] https://review.opendev.org/c/openstack/governance/+/836888 [12] http://lists.openstack.org/pipermail/openstack-discuss/2022-March/027626.ht… [13] https://etherpad.opendev.org/p/zuul-config-error-openstack [14] http://lists.openstack.org/pipermail/openstack-discuss/2022-May/028603.html [15] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-discuss [16] http://eavesdrop.openstack.org/#Technical_Committee_Meeting -gmann

1 0

[stable][glance] backport exception request for external HTTP API response code change
by Brian Rosmaita 20 May '22

20 May '22

Hello stable maintenance core team, We recently noticed that an Image API call implemented in Yoga, which returns no content, is returning a 200 instead of a 202 (as the design [0] had specified). We would like to correct this in master (Zed development) and in the stable/yoga branch. Here are our reasons why we think this is a legitimate exception to the no-http-api-changes-backport policy: (1) Even ignoring the lack of a response body, a 200 (OK) is misleading because operation initiated by the PUT /v2/cache/{image_id} request may not succeed. A 202 (Accepted) signals more clearly to the operator that some followup is necessary to be sure the image has been cached. (2) This is intended as an admin-only API call; the default policy is admin-only. So it has not been exposed to end-users. (3) The change [1] was first released in Yoga and there has not been much time for admins to begin consuming this feature. Further, there has not yet been a release from stable/yoga after glance 24.0.0. For these reasons, we request that the glance team be allowed to make this change. Thank you for considering this proposal! [0] https://opendev.org/openstack/glance-specs/blame/commit/2638ada23d92f714f54… [1] https://review.opendev.org/c/openstack/glance/+/792022

3 2

Call for OpenStack projects virtual updates
by Sunny Cai 20 May '22

20 May '22

Hi everyone, As the Berlin Summit is approaching in June, we are collecting project update recordings from each OpenInfa community to showcase what each project has accomplished in the past year/release. Please let me know if you’re interested in doing a prerecorded video of your project’s most recent updates. We will post all recordings on the OpenInfra Foundation YouTube channel and promote them at the Summit. Recordings will also be posted in the project navigator. We recommend the recordings to be less than 10 minutes long. If you would like to present with slides, here is a slide deck template if you need [1]. If you can submit your project recording to me by Friday, May 27, we’d love to promote them at the upcoming Berlin Summit. If you prefer to submit it after the Summit, I’ll send out another reminder on June 15 to collect any reminding recordings. Please let me know if you have any questions. [1] https://docs.google.com/presentation/d/1SlWayfGc9CYAsKnS43UxVjO8NYr1pR-0Gi4… Thanks, Sunny Cai OpenInfra Foundation Marketing & Community

1 1

[release] Release countdown for week R-19, May 23 - 27
by Előd Illés 20 May '22

20 May '22

Development Focus ----------------- We are now past the Zed-1 milestone. Teams should now be focused on feature development. General Information ------------------- Our next milestone in this development cycle will be Zed-2, on July 14th, 2022. This milestone is when we freeze the list of deliverables that will be included in the Zed final release, so if you plan to introduce new deliverables in this release, please propose a change to add an empty deliverable file in the deliverables/zed directory of the openstack/releases repository. Now is also generally a good time to look at bugfixes that were introduced in the master branch that might make sense to be backported and released in a stable release. If you have any question around the OpenStack release process, feel free to ask on this mailing-list or on the #openstack-release channel on IRC. Upcoming Deadlines & Dates -------------------------- Zed-2 Milestone: July 14th, 2022 OpenInfra Summit: June 7-9, 2022 (Berlin) Előd Illés irc: elodilles

1 0

Re: [TripleO] Support of PTP in Openstack Train
by Anirudh Gupta 20 May '22

20 May '22

Hi Team, Is there any Support for PTP in Openstack TripleO ? When I was executing the Overcloud deployment script, passing the PTP yaml, it gave the following option at the starting *service OS::TripleO::Services::Ptp is enabled in /usr/share/openstack-tripleo-heat-templates/environments/services/ptp.yaml. Deprecated in favour of OS::TripleO::Services::TimesyncDo you still wish to continue with deployment [y/N]* even if passing Y, it starts executing for sometime and the gives the following error *Error: Evaluation Error: Error while evaluating a Function Call, Could not find class ::tripleo::profile::base::time::ptp for overcloud-controller-0.localdomain (file: /var/lib/tripleo-config/puppet_step_config.pp, line: 41, column: 1) on node* overcloud-controller-0.localdomain"], "stdout": "", "stdout_lines": []} Can someone suggest some pointers in order to resolve this issue and move forward? Regards Anirudh Gupta On Fri, May 6, 2022 at 3:50 PM Anirudh Gupta <anyrude10(a)gmail.com> wrote: > Hi Team, > > I have installed Undercloud with Openstack Train Release successfully. > I need to enable PTP service while deploying the overcloud for which I > have included the service in my deployment > > openstack overcloud deploy --templates \ > -n /home/stack/templates/network_data.yaml \ > -r /home/stack/templates/roles_data.yaml \ > -e /home/stack/templates/environment.yaml \ > -e /home/stack/templates/environments/network-isolation.yaml \ > -e /home/stack/templates/environments/network-environment.yaml \ > -e > /usr/share/openstack-tripleo-heat-templates/environments/services/ironic-conductor.yaml > \ > -e > /usr/share/openstack-tripleo-heat-templates/environments/services/ironic-inspector.yaml > \ > -e > /usr/share/openstack-tripleo-heat-templates/environments/services/ironic-overcloud.yaml > \ > * -e > /usr/share/openstack-tripleo-heat-templates/environments/services/ptp.yaml > \* > -e /home/stack/templates/ironic-config.yaml \ > -e > /usr/share/openstack-tripleo-heat-templates/environments/docker-ha.yaml \ > -e > /usr/share/openstack-tripleo-heat-templates/environments/podman.yaml \ > -e /home/stack/containers-prepare-parameter.yaml > > But it gives the following error > > 2022-05-06 11:30:10.707655 | 5254001f-9952-7fed-4a6d-000000002fde | FATAL > | Wait for puppet host configuration to finish | overcloud-controller-0 | > error={"ansible_job_id": "5188783868.37685", "attempts": 3, "changed": > true, "cmd": "set -o pipefail; puppet apply > --modulepath=/etc/puppet/modules:/opt/stack/puppet-modules:/usr/share/openstack-puppet/modules > --detailed-exitcodes --summarize --color=false > /var/lib/tripleo-config/puppet_step_config.pp 2>&1 | logger -s -t > puppet-user", "delta": "0:00:04.440700", "end": "2022-05-06 > 11:30:12.685508", "failed_when_result": true, "finished": 1, "msg": > "non-zero return code", "rc": 1, "start": "2022-05-06 11:30:08.244808", > "stderr": "<13>May 6 11:30:08 puppet-user: Warning: The function 'hiera' is > deprecated in favor of using 'lookup'. See > https://puppet.com/docs/puppet/6.14/deprecated_language.html\n<13>May 6 > 11:30:08 puppet-user: (file & line not available)\n<13>May 6 11:30:08 > puppet-user: Warning: /etc/puppet/hiera.yaml: Use of 'hiera.yaml' version 3 > is deprecated. It should be converted to version 5\n<13>May 6 11:30:08 > puppet-user: (file: /etc/puppet/hiera.yaml)\n<13>May 6 11:30:08 > puppet-user: Warning: Undefined variable '::deploy_config_name'; \n<13>May > 6 11:30:08 puppet-user: (file & line not available)\n<13>May 6 11:30:08 > puppet-user: Warning: Unknown variable: '::deployment_type'. (file: > /etc/puppet/modules/tripleo/manifests/profile/base/database/mysql/client.pp, > line: 89, column: 8)\n<13>May 6 11:30:08 puppet-user: error: Could not > connect to controller: Connection refused\n<13>May 6 11:30:08 puppet-user: > Error: Evaluation Error: Error while evaluating a Function Call, Could not > find class ::tripleo::profile::base::time::ptp for > overcloud-controller-0.localdomain (file: > /var/lib/tripleo-config/puppet_step_config.pp, line: 41, column: 1) on node > overcloud-controller-0.localdomain", "stderr_lines": ["<13>May 6 11:30:08 > puppet-user: Warning: The function 'hiera' is deprecated in favor of using > 'lookup'. See https://puppet.com/docs/puppet/6.14/deprecated_language.html", > "<13>May 6 11:30:08 puppet-user: (file & line not available)", "<13>May 6 > 11:30:08 puppet-user: Warning: /etc/puppet/hiera.yaml: Use of 'hiera.yaml' > version 3 is deprecated. It should be converted to version 5", "<13>May 6 > 11:30:08 puppet-user: (file: /etc/puppet/hiera.yaml)", "<13>May 6 11:30:08 > puppet-user: Warning: Undefined variable '::deploy_config_name'; ", > "<13>May 6 11:30:08 puppet-user: (file & line not available)", "<13>May 6 > 11:30:08 puppet-user: Warning: Unknown variable: '::deployment_type'. > (file: > /etc/puppet/modules/tripleo/manifests/profile/base/database/mysql/client.pp, > line: 89, column: 8)", "<13>May 6 11:30:08 puppet-user: error: Could not > connect to controller: Connection refused", "<13>May 6 11:30:08 > puppet-user: *Error: Evaluation Error: Error while evaluating a Function > Call, Could not find class ::tripleo::profile::base::time::ptp for > overcloud-controller-0.localdomain (file: > /var/lib/tripleo-config/puppet_step_config.pp, line: 41, column: 1) on node* > overcloud-controller-0.localdomain"], "stdout": "", "stdout_lines": []} > > > Can someone please help in resolving this issue? > > Regards > Anirudh Gupta > >

2 19

[tripleo] hold recheck tripleo-heat-templates gate blocker tox-py36 - opendev infra mirrors?
by Marios Andreou 20 May '22

20 May '22

Hello Unfortunately instead of happy friday \o/ we get a tripleo-heat-templates gate blocker on the tox-py36 job (bug is at [1]). We cannot reproduce this locally and suspect there may be an issue with pypi mirrors in opendev infra? We are digging here but please refrain from recheck until we find a workaround thank you for your help o/ regards, marios (for the tripleo-ci team) [1] https://bugs.launchpad.net/tripleo/+bug/1974244

1 1

[stable][glance] Proposing Cyril for stable branch core
by Abhishek Kekane 19 May '22

19 May '22

Hi All, Cyril Roelandt is helping a lot in the review process on master as well as stable branches. I would like to have him in our 'glance-stable-maint' team. Could you please help me to add 'cyril(a)redhat.com' to the stable core team. Thanks & Best Regards, Abhishek Kekane

2 2

[keystone] Gerrit Group Updates
by Douglas Mendizabal 19 May '22

19 May '22

Hi openstack-discuss, The Keystone team is doing a big of housekeeping with our Gerrit groups: For keystone-core we'll be removing folks who have not reviewed any patches in 60+ days. [1] This is going to leave us with 3 active core reviewers, so we are actively looking for folks who want to help review patches. Let us know if you're interested! For keystone-stable-int [2], I need to figure out who owns this group to get myself added as current PTL. Unfortunately, Colleen is no longer contributing to the project and Lance has not been able to review stable branch patches recently. Please let me know if you can help me get this group updated. Thanks, - Douglas Mendizábal Keystone PTL [1] https://www.stackalytics.io/report/contribution?module=keystone-group&proje… [2] https://review.opendev.org/admin/groups/ed7e98cd14f0ec4dfd09d10bbb64e1bd3ac…

2 1

Save the Date: PTG October 2022
by Erin Disney 19 May '22

19 May '22

We are very excited to announce our first in-person Project Teams Gathering (PTG) since Shanghai in 2019! Can’t wait to get everyone back together again this October 17-20th at the Hyatt Regency in lovely Columbus, Ohio. The venue is located in the heart of downtown, within walking distance of local sports arenas and the Short North Arts District that hosts dozens of restaurants, coffee shops, bars, art galleries and shops. Kendall Nelson will be reaching out soon to start collecting team sign ups so everyone knows who is planning on meeting in Columbus. We will also have registration, reduced rate hotel block, and sponsorship information coming soon, all of which will be posted to openinfra.dev/ptg <http://openinfra.dev/ptg> once available. Stay tuned and we can’t wait to see you all in Columbus! Erin Disney Event Marketing Open Infrastructure Foundation

1 0

[neutron] Drivers meeting agenda - 20.05.2022.
by Lajos Katona 19 May '22

19 May '22

Hi Neutron Drivers, The agenda for tomorrow's drivers meeting is at [1]. We have one RFE to discuss tomorrow: * [RFE] Allow setting --dst-port for all port based protocols at once (#link https://bugs.launchpad.net/neutron/+bug/1973487) [1] https://wiki.openstack.org/wiki/Meetings/NeutronDrivers#Agenda See you at the meeting tomorrow. Lajos Katona (lajoskatona)

1 0

[ironic] [requirements] broken libvirt-python on yoga on stream 9
by Dmitry Tantsur 19 May '22

19 May '22

Hi all, It is happening again, the Bifrost CI is broken because libvirt-python cannot be built from source, this time on Stream 9. Missing type converters: int *:1 ERROR: failed virDomainQemuMonitorCommandWithFiles I created a gist with a reproducer: https://gist.github.com/dtantsur/835303c6a68ed77157016f5955183115. I cannot count how many times we had to deal with similar errors. I assume, libvirt-python has to be newer than the installed Python (8.2.0 in CS9, 8.0.0 in constraints). Should we stop constraining libvirt-python? Any other ideas? Dmitry -- Red Hat GmbH <https://www.redhat.com/de/global/dach>, Registered seat: Werner von Siemens Ring 14, D-85630 Grasbrunn, Germany Commercial register: Amtsgericht Muenchen/Munich, HRB 153243,Managing Directors: Ryan Barnhart, Charles Cachera, Michael O'Neill, Amy Ross

5 7

[TripleO] Gate blocker on Master - standalone-on-multinode-ipa failing
by Sandeep Yadav 19 May '22

19 May '22

Hello All, We have a check/gate blocker on Master branch - standalone-on-multinode-ipa[0] job is failing with bug[1]. Please hold rechecks on master till [1] resolves. [0] https://zuul.openstack.org/builds?job_name=tripleo-ci-centos-9-standalone-o… [1] https://bugs.launchpad.net/bugs/1973863 Thank you Sandeep(on behalf of tripleo-ci)

1 1

[keystone][nova][placement] audit logs
by Sharath Ck 19 May '22

19 May '22

Hi, Placement does not have an api-paste.ini configuration file. Also Placement does not have a placeholder to mention or add middleware. Hence keystone audit middleware is not supported in Placement ? Need to collect the audit events from Nova itself. Can anyone please confirm this. Regards, Sharath

2 2

[magnum] [xena] [IPv6]
by Namrata Sitlani 19 May '22

19 May '22

Hello All, We run release Xena, and we have deployed Kubernetes version 1.21.10 on Magnum with Fedora CoreOS version 34 and we are trying to have IPv6 support for that Kubernetes cluster, as Kubernetes 1.21 and later versions have dual-stack(IPv4/IPv6) support enabled by default. To achieve the same, we used a network with both IPv4 and IPv6 subnets and we got a successful creation of the cluster. The compute instances of the cluster get both IPv4 and IPv6 addresses, but the master and minion nodes get IPv4 as external IP, and also the container does not get an IPv6 address. Can someone please help us with the information, what changes are required to be made at the magnum client-side to have an IPv6 supported Kubernetes Cluster? Thanks, Namrata

1 0

[all][tc] Technical Committee next weekly meeting on May 19, 2022 at 1500 UTC
by Ghanshyam Mann 19 May '22

19 May '22

Hello Everyone, Technical Committee's next weekly meeting is scheduled for May 19, 2022 at 1500 UTC. If you would like to add topics for discussion, please add them to the below wiki page by Wednesday, May 18, at 2100 UTC. https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting -gmann

1 1

[infra][stable] reopened old, EOL'd branches
by Előd Illés 18 May '22

18 May '22

Hi Infra team, I need some help / advice from you. Some time ago I realized that there are multiple open stable/newton (and some older) branches as well for some projects. I see there multiple kind of open EOL'd branches: 1. where there were no *-eol tag at all and thus branch is still open 2. where there exist *-eol tag, but the branch was not deleted 3. where there exist *-eol tag, the branch was probably deleted but then reopened and some generated patch created a new branch from the same branching point where the original stable/* branch was branched from. (some example generated patches: * OpenDev Migration Patch * Replace openstack.org git:// URLs with https:// see specific example [1]) To clean up this I think we need some decision and manual tagging and branch deletion, because our tooling (openstack/releases) does not allow to tag on a branch that has an EOL state. For this I would - push release patches where that is missing from openstack/release (this will not do the work, as mentioned above, but needs some manual tagging / branch deletion afterwards) - this is only to have a better view of the tags and branches from openstack/releases repository - tag branches with *-eol where that is missing - delete branches that have already *-eol tag, even if that means we lose some patches (like the above mentioned generated patches) Is this acceptable? What do you think? (Or should the two latter be done by Infra team via a list that I could collect?) [1] https://paste.opendev.org/show/bCnJaKgdTrlZwDzcP3VM/ Thanks in advance, Előd (irc: elodilles)

2 2

Can external API endpoints be registered in Openstack Keystone service catalogue/registry?
by Milan Paul 18 May '22

18 May '22

Hi All, We are developing few wrapper APIs (in SpringBoot and Python) on top of Openstack components like Nova, Neutron and glance. As Keystone works as a service registry for internal Openstack APIs, is it possible to register our custom wrapper APIs in keystone registry? Basically, we want to use keystone as an API registry without having another API gateway. Any help would be highly appreciated. Regards.

2 1

octavia_rsyslog service fails/keeps restarting | Openstack Wallaby | Tripleo
by Swogat Pradhan 18 May '22

18 May '22

Hi, I am currently trying to deploy octavia in openstack wallaby, but the octavia_rsyslog service is malfunctioning it seems. And I am checking the logs but am not sure how to fix the issue. Attached log for reference. With regards, Swogat Pradhan

3 2

[ Triple0 - NETWORKS ] Openstack Network getting created from wrong network segment range
by Lokendra Rathour 18 May '22

18 May '22

Hi Team, We have deployed tripl0 Train using two tenant networks by configuring the parameters for additional networks. environments.yaml: *NeutronBridgeMappings: datacentre:br-tenant,datacentre2:br-extratenant* in environments/network-environment.yaml * NeutronNetworkVLANRanges: 'datacentre:1:500,datacentre2:501:1000'* and have also isolated and separated the physical nic configuration for ovs in network/config/bond-with-vlans/compute.yaml with this setting, overcloud is deployed and the network is getting created, Checking further, in Controller configs(/etc/neutron/plugins/ml2/) we see the changes as below, which looks fine: *[ml2_type_vlan]* *network_vlan_ranges=datacentre:1:500,datacentre2:501:1000* *but it is also allowing* the network to be created from the wrong network segment range. For example, while creating a network: - openstack network create --share --provider-network-type vlan --provider-physical-network datacentre2 --provider-segment 420 datacenter_2_420 -provider-physical-network- *"datacentre2"* is having VLAN range from 501-1000 and if I am passing the provider segment as 420(which is out of range) then *also a network is getting created.* This does not look fine. please help share any inputs on the same. -- ~ Lokendra skype: lokendrarathour

2 1

[horizon] Cancelling Today's Weekly meeting
by vishal manchanda 18 May '22

18 May '22

Hello team, Since there is no topic added for discussion in the agenda etherpad[1] for today's meeting. So let's cancel it. If anyone like to discuss anything, ping me on IRC channel(#openstack-horizon). See you next week! Thanks & regards, Vishal Manchanda(irc:vishalmanchanda) [1] https://etherpad.opendev.org/p/horizon-release-priorities#L38

1 0