October 2023 - openstack-discuss - lists.openstack.org

[neutron] create_port with fixed_Ips is disallowed by policy
by Satish Patel 18 Oct '23

18 Oct '23

Folks, I am trying to give permission to end users to create fixed IP ports and attach to VMs but so far no luck. Release: Zed (OVN based deployment) I have added following in policy.yml file in neutron server "create_port:fixed_ips": "rule:context_is_advsvc or rule:network_owner or rule:admin_only or rule:shared" "create_port:fixed_ips:ip_address": "rule:context_is_advsvc or rule:network_owner or rule:admin_only or rule:shared" "create_port:fixed_ips:subnet_id": "rule:context_is_advsvc or rule:network_owner or rule:admin_only or rule:shared" $ openstack port create --network public-network-1 --fixed-ip subnet=dba7a427-dccb-4a5a-a8e0-23fcda64666d,ip-address=xx.xx.xx.xx my-port1 ForbiddenException: 403: Client Error for url: http://192.168.18.100:9696/v2.0/ports, (rule:create_port and (rule:create_port:fixed_ips and (rule:create_port:fixed_ips:subnet_id and rule:create_port:fixed_ips:ip_address))) is disallowed by policy I found some reference bug but not sure they are fixed or not: https://bugs.launchpad.net/neutron/+bug/1833455

4 6

[Glance][PTG] Caracal vPTG Schedule
by Pranali Deore 18 Oct '23

18 Oct '23

Hello All, Caracal PTG is going to start next week and we have created our PTG etherpad [1] and also added day wise topics along with timings we are going to discuss. Kindly let me know if you have any concerns with allotted time slots. Friday is reserved for any unplanned discussions. So please feel free to add your topics if you haven't added yet. As a reminder, these are the time slots for our discussion. Tuesday 24 OCT 2023 1400 UTC to 1700 UTC Wednesday 25 OCT 2023 1400 UTC to 1700 UTC Thursday 26 OCT 2023 1400 UTC to 1700 UTC Friday 27 OCT 2023 1400 UTC to 1700 UTC NOTE: At the moment we don't have any sessions scheduled on Friday, if there are any last moment request(s)/topic(s) we will discuss that on Friday else we will conclude our PTG on Thursday 26th OCT. We will be using Gmeet for our discussion. The meeting URL is mentioned in etherpad [1] and will be the same throughout the PTG. [1] https://etherpad.opendev.org/p/oct2023-ptg-glance Hope to see you there!! Thanks & Regards, Pranali Deore

1 0

[horizon] Cancelling Today's Weekly meeting
by vishal manchanda 18 Oct '23

18 Oct '23

Hello Team, As discussed in the last Horizon weekly meeting, there won't be a weekly meeting today. I look forward to seeing you at the PTG. If anything urgent, please reach out to me on IRC. Thanks & regards, Vishal Manchanda

1 0

[horizon] Caracal Virtual PTG Schedule
by vishal manchanda 18 Oct '23

18 Oct '23

Hello Team, Please Find the Schedule for Horizon Caracal PTG in the eherpad [1]. Feel Free to add the topics you want to discuss in the PTG. Don't forget to register for PTG, if not done yet [2]. See you at the PTG! Thanks & Regards, Vishal Manchanda (irc: vishalmanchanda) [1] https://etherpad.opendev.org/p/horizon-caracal-ptg [2] https://openinfra-ptg.eventbrite.com/

1 0

[kolla-ansible][yoga] Cannot authenticate to openstack after deploying self-signed cert
by wodel youchi 18 Oct '23

18 Oct '23

Hi, Our ssl certificate expired a couple of days ago, and we started experiencing failed login, to workaround the problem rapidly we decided to deploy the self-signed certificates generated by kolla. We generated the certificates then we did a reconfigure, but still the problem remains : An error occurred authenticating. Please try again later. on horizon.log we have : [Wed Oct 18 00:25:55.379383 2023] [wsgi:error] [pid 103:tid 140182314505984] [remote 10.10.3.5:40848] Login failed for user "admin" using domain "default", remote address 10.10.3.5 The openstack command line works fine. How can we debug this? The second problem we have is with cloudkitty that refuses to reconfigure with the generated self-signed certificate, we had to ignore it from the reconfiguration process by putting the cloudkitty variable to no before restarting the reconfigure process. How can we debug this? Regards. <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> Virus-free.www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

2 2

[kolla-ansible]
by Franck VEDEL 18 Oct '23

18 Oct '23

I'm coming back to you all to help me with a new problem that I've never had before. I want to show students how to install Openstack with Kolla-ansible. They will each have a computer (DELL Precison 3660 Tower, 32G RAM, 500G SDD). Ubuntu is the system, version 22.04. I want to start with an "all-in-one" installation. So I test my-self first… I follow these procedure https://docs.openstack.org/kolla-ansible/latest/user/quickstart.html . everything works with the parameters I choose for my configuration, until the following problem: ___________________________________________________ ___________________________________________________ TASK [nova-cell : Ensuring config directories exist] ************************************************ ok: [localhost] TASK [nova-cell : Copying over config.json files for nova-cell-bootstrap] *************************** ok: [localhost] TASK [nova-cell : Copying over nova.conf for nova-cell-bootstrap] *********************************** ok: [localhost] TASK [nova-cell : Running Nova cell bootstrap container] ******************************************** ok: [localhost] TASK [nova-cell : Get a list of existing cells] ***************************************************** ok: [localhost] TASK [nova-cell : Extract current cell settings from list] ****************************************** fatal: [localhost]: FAILED! => {"msg": "template error while templating string: Could not load \"extract_cell\": 'extract_cell'. String: {{ existing_cells_list | extract_cell(nova_cell_name) }}. Could not load \"extract_cell\": 'extract_cell'"} NO MORE HOSTS LEFT ********************************************************************************** PLAY RECAP ****************************************************************************************** localhost : ok=146 changed=8 unreachable=0 failed=1 skipped=64 rescued=0 ignored=0 ___________________________________________________ ___________________________________________________ My globals.yml ___________________________________________________ ___________________________________________________ kolla_base_distro = "ubuntu" kolla_internal_vip_address: "172.16.60.15" network_interface : "enp0s31f6" neutron_external_interface: "enp3s0" neutron_plugin_agent: "openvswitch" enable_haproxy: "no" enable_cells: "no" nova_compute_virt_type: « kvm" …. ___________________________________________________ ___________________________________________________ What can be the problem ? Where can this come from ? I think the CPU is OK for virtualization. I have no idea, I don't know where this error could come from. Do you have an idea? Thanks in advance Franck

3 5

[largescale-sig] Next meeting: October 18, 8utc
by Thierry Carrez 18 Oct '23

18 Oct '23

Hi everyone, The Large Scale SIG will be meeting this Wednesday in #openstack-operators on OFTC IRC, at 8UTC, our APAC+EU-friendly time. I will be chairing. You can doublecheck how that UTC time translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20231018T08 Feel free to add topics to the agenda: https://etherpad.opendev.org/p/large-scale-sig-meeting Regards, -- Thierry Carrez

1 1

[cyborg][sahara][senlin][trove][venus][mistral][ec2-api][monasca][openstack-chef]: Next step for 2024.1 cycle leaderless projects
by Ghanshyam Mann 17 Oct '23

17 Oct '23

Hi, As you know, the listed projects in subject/etherpad[1] are leaderless for 2024.1 development cycle. We have PTL volunteer for all those projects now. As next step, I would like to request each volunteer to propose the governance change for their PTL appointment and TC will be discussing the same on gerrit/PTG. Example: https://review.opendev.org/c/openstack/governance/+/896585 [1] https://etherpad.opendev.org/p/2024.1-leaderless -gmann

1 0

[all][tc][policy] RBAC goal discussion in 2024.1 PTG
by Ghanshyam Mann 17 Oct '23

17 Oct '23

Hello Everyone, I have booked the Monday 13-14 UTC slot Austin room for the RBAC goal discussion. Feel free to add the topics/queries to be discussed in vPTG in the below etherpad. Also, add your project related RBAC sessions details in same etherpad. - https://etherpad.opendev.org/p/rbac-2024.1-ptg -gmann

1 0

[tc] TC Meeting for Oct 24 Cancelled due to PTG
by Jay Faulkner 17 Oct '23

17 Oct '23

The weekly TC meeting, scheduled for October 24, has been cancelled to allow all members the freedom to participate in PTG sessions. See you at the PTG! Thanks, Jay Faulkner OpenStack TC Chair

1 0

Installing OpenStack with limited switch ports
by John van Ommen 17 Oct '23

17 Oct '23

Is there an OpenStack installer that offers the option of using tagged VLANs during the installation? I'm building an OpenStack environment that uses redundant hardware, but I have limited space for switches. The idea that I had was to use tagged VLANs for the external network. But all of the installers that I've seen, they only work if each physical port on the server corresponds to a network. IE, one of my physical ports on my server needs to be connected to a management switch, another port needs to be connected to the switch for the external network, etc. I'd like to reduce the physical footprint of the switches, by using a single switch with tagged VLAN: 1) one VLAN for the management network 2) one tagged VLAN for the external network 3) etc Taken to the extreme, it seems like it might be possible to use as few as one or two physical ports for all of the OpenStack networks. Is this possible, and if so, which OpenStack distribution offers this?

3 2

[magnum] Cancelling weekly meetings for 18 and 25 Oct
by Jake Yip 17 Oct '23

17 Oct '23

Hi all, Unfortunately, we will have to cancel the meeting this week as I will be away for a conference. Next week is our vPTG, we will have it at a separate timeslot so the weekly meeting will be cancelled too. I will send vPTG details in a separate email. Regards, Jake

1 0

[nova] [libvirt] About libvirt autoconverge
by hai wu 17 Oct '23

17 Oct '23

Do you enable auto-converge for nova instance live migration on all production hypervisor hosts?

2 4

[OPENSTACK][rabbitmq] using quorum queues
by Nguyễn Hữu Khôi 17 Oct '23

17 Oct '23

Hello guys. IS there any guy who uses the quorum queue for openstack? Could you give some feedback to compare with classic queue? Thank you. Nguyen Huu Khoi

9 19

[neutron] bug deputy report (Oct 9-15)
by Akihiro Motoki 16 Oct '23

16 Oct '23

Hi, I was a bug deputy last week. Here is a report on bugs last week. Three unassigned bugs are worth investigating. We also had three bugs on fwaas related to gate failures. It would be nice if FWaaS folks can look into them. # New disallowed by policy error when user try to create_port with fixed_Ips https://bugs.launchpad.net/neutron/+bug/2039464 This may need a detail investigation. There might be a gap between network RBAC and policy handling like "create_port:fixed_ips". [OVN] Floating IP <=> Floating IP across subnets https://bugs.launchpad.net/neutron/+bug/2038978 Unassigned, but mnaser shared a workaround and proposed a WIP patch. ovsfw: OVS br-int rule disappears from the table=60 after stop/start VM https://bugs.launchpad.net/neutron/+bug/2038931 This needs to be investigated. Liu had an initial look ## FWaaS [neutron-fwaas] "neutron-fwaas-fullstack" job broken https://bugs.launchpad.net/neutron/+bug/2039285 [fwaas] Scenario job fails randomly https://bugs.launchpad.net/neutron/+bug/2039012 [fwaas] CI job "neutron-fwaas-v2-dsvm-tempest-multinode" failing https://bugs.launchpad.net/neutron/+bug/2038936 # In Progress [fullstack] The "dhclient" kill command can take more than 90 seconds https://bugs.launchpad.net/neutron/+bug/2039038 Assigned to ralonsoh openstacksdk-functional-devstack-networking periodic job broken in xena/yoga/zed https://bugs.launchpad.net/neutron/+bug/2039066 Assigned to yatin A patch to skip these tests was merged in yoga and zed. xena job was also fixed not to use the master branch. Looks completed but I would like to wait for yatin. # Fix Released tempest nftables jobs are not running in periodic queue https://bugs.launchpad.net/neutron/+bug/2039027 Thanks, Akihiro Motoki (amotoki)

1 0

[openstack][nova][glance][cinder] Openstack Edge Computing
by Nguyễn Hữu Khôi 16 Oct '23

16 Oct '23

Hello guys. I am studying about Openstack Edge Computing from https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16… http://theansibleguy.com/openstack-glance-with-cinder-multistores-scurry-in… I can separate AZ. Main AZ and Edge AZ for Nova, Neutron and Cinder. Glance Multistore also. But I cannot figure how we can configure to specify which Glance Stored will be used for launch instances from Edge Site. And one more question, Will we need setup glance service in Edge sites too? It will be nice if Glance can be set AZ. I tried GG but not many docs about it. Could someone give me some suggestions about ii? Thank you so much Nguyen Huu Khoi

1 1

[manila] About deleted service network
by Mesut Bayrak 16 Oct '23

16 Oct '23

Hi, Our service network of manila got deleted accidentally, Is there a way to recreate it ? If not, do i have to re-deploy the entire manila operation Thank you guys.

2 1

[tc] Weekly Meeting Tomorrow, Oct 17 1800 UTC
by Jay Faulkner 16 Oct '23

16 Oct '23

Hi OpenStackers, The TC will be meeting for our weekly meeting tomorrow, 1800 UTC, in #openstack-tc on OFTC. Please see the proposed agenda below. Agenda - Roll call - Follow up on tracked action items: https://meetings.opendev.org/meetings/tc/2023/tc.2023-10-10-18.01.html - JayF: Before next video meeting, write up a short document on pros/cons of moving TC video meetings to jitsi-meet. - knikolla Investigate or delegate research on DB usage patterns in Keystone in devstack. Due before PTG. - slaweq to sync with Monasca potential PTL candidate and report back to TC next meeting - rosmaita to engage i18n sig about possibilty of translating governance docs - Gate health check - Leaderless projects (gmann) - PTG Reminder - Open Discussion and Reviews Thanks, Jay Faulkner Technical Committee Chair

1 0

[ironic] Meeting next week cancelled; PTG instead!
by Jay Faulkner 16 Oct '23

16 Oct '23

Hi all, Our regular meeting is cancelled in favor of an entire week of meetings :D. See you at the PTG! - Jay Faulkner Ironic PTG

1 0

[tc] dropping python 3.8 support for 2024.1
by Brian Rosmaita 13 Oct '23

13 Oct '23

I thought about this issue some more after yesterday's TC meeting, and tried to articulate why I think keeping python 3.8 support for 2024.1 is a bad idea on the patch: https://review.opendev.org/c/openstack/governance/+/895160 I don't know if my argument there will change anyone's mind, but since a lot of people have already voted on the gerrit review, I wanted to make sure that people are at least aware of it, to wit: I just don't see that py38 support for 2024.1 makes sense. It's not a default version in Ubuntu 22.04, Debian 12, Debian 11, CentOS Stream 9, or Rocky Linux 9, which are the distros specifically called out in the current 2024.1 PTI that this proposal is patching. While we can use Ubuntu 20.04 to run unit tests, we can't run master (2024.1 development) devstack in it, so it doesn't seem to me that Ubuntu 20.04 is a distribution that we can feasibly use for meaningful 2024.1 testing. This implies, in my opinion, that there is a solid reason for dropping python 3.8 support in advance of it going EOL, as required by [0]. Looking at the Python Update Process resolution [1], python 3.8 does not meet the three criteria set out in the "Unit Tests" section: 1. it's not the latest version of Python 3 available in any distro we can feasibly use for testing 2. It's not the default in any of the Linux distros identified in the 2024.1 PTI 3. It isn't used to run integration tests at the beginning of the 2024.1 (Caracal) cycle Add to that the fact that libraries are beginning to drop support [2], add further that py38 will go EOL roughly 6 months after the 2024.1 release (no more security updates), I don't see a reason to wait until a key library forces us to make a change during the development cycle. I'd prefer to do it now. [0] https://governance.openstack.org/tc/reference/pti/python.html#specific-comm… [1] https://governance.openstack.org/tc/resolutions/20181024-python-update-proc… [2] https://review.opendev.org/c/openstack/requirements/+/884564

8 19

[rally] Need Rally PTL/DPL for this release cycle.
by Ghanshyam Mann 13 Oct '23

13 Oct '23

Hi Andrey, Anyone interested in Rally PTL role, As you know, Rally is leaderless project in this cycle[1], in case you missed the PTL election or any new PTL volunteer, please reply to this email or add your name in below etherpad, or even propose the PTL appointment in governance model. - https://etherpad.opendev.org/p/2024.1-leaderless Also, think about DPL model if election are little overhead for this project with solo maintainer. - https://governance.openstack.org/tc/resolutions/20200803-distributed-projec… -gmann

3 4

[all][infra][tact-sig] Mailman v3 migration for OpenStack mailing lists 2023-10-12
by Jeremy Stanley 12 Oct '23

12 Oct '23

On Thursday, October 12 at 15:30 UTC, the OpenDev Collaboratory systems administrators will be migrating the lists.openstack.org mailing list site from the aging Mailman 2.1.29 server to a newer Mailman 3.3.8 deployment. This maintenance window is expected to last approximately four hours. The key takeaways are as follows: * There will be an extended outage for the site while DNS is updated and configuration, subscriber lists and message archives are imported, but incoming messages should correctly queue at the sender's end and arrive at the conclusion of our work * Because this is on a new server, there are new IP addresses from which list mail will be originating: 162.209.78.70 and 2001:4800:7813:516:be76:4eff:fe04:5423 * Moderation queues will not be copied to the new server, so moderators are encouraged to process any held messages prior to the migration time in order to avoid losing them * Anyone wishing to adjust their list subscriptions, or handle moderation or list configuration after the migration, needs to use the Sign Up button on the Web page to create a new account; it will be linked to your imported roles as soon as you confirm by following a URL from an E-mail message the server sends you, and is global for all sites on the server so you only need to do this once * The software providing Web front-ends for list management and archive browsing is entirely new in Mailman v3 and therefore has a much different appearance, though we've added appropriate redirects and frozen copies of old archives in order to accommodate existing hyperlinks If you have any questions or concerns, feel free to follow up on the service-discuss mailing list or find us in the #opendev channel on the OFTC IRC network. -- Jeremy Stanley

1 2

[Glance] Cancelling IRC Meeting Today
by Pranali Deore 12 Oct '23

12 Oct '23

Hi All, Cancelling today's glance meeting since there is nothing much on agenda & I will also not be around as i've Dr. appointment around the same time. See you next week ! Thanks & Regards, Pranali Deore

1 0

[mistral] Need Mistral PTL/DPL for this release cycle.
by Ghanshyam Mann 11 Oct '23

11 Oct '23

Hi Axel, Anyone interested in Mistral PTL/DPL role, As you know, Mistral is leaderless project in this cycle, in case you missed the PTL election or any new PTL volunteer, please reply to this email or add your name in below etherpad, or even propose the PTL appointment in governance model. - https://etherpad.opendev.org/p/2024.1-leaderless Also, think about DPL model if election are little overhead for this project. - https://governance.openstack.org/tc/resolutions/20200803-distributed-projec… -gmann

2 2

Cinder Bug Report 2023-10-11
by Jon Bernard 11 Oct '23

11 Oct '23

Hello Argonauts, Cinder Bug Meeting Etherpad <https://etherpad.opendev.org/p/cinder-bug-squad-meeting> Undecided - Storwize SVC: Logging chap secret in DEBUG logs <https://bugs.launchpad.net/cinder/+bug/2038466> - Status: New - IBM SVC: Logging error when failed to create SVC host <https://bugs.launchpad.net/cinder/+bug/2038481> - Status: New - i want ask a question, but the label closed <https://bugs.launchpad.net/cinder/+bug/2038714> - Status: New - Reader and member users can list and show group-type <https://bugs.launchpad.net/cinder/+bug/2038805> - Status: New - Volume retype does not have any visibility into its progress <https://bugs.launchpad.net/cinder/+bug/2039015> - Status: New Thanks, -- Jon

1 0