March 2023 - openstack-discuss - lists.openstack.org

Re: [manila] support for encryption
by Alvaro Soto 14 Mar '23

14 Mar '23

I don't think so, and it also doesn't sound like a feature that Manila should implement; try to do that in your backend storage. Cheers! On Sat, Mar 11, 2023 at 7:10 AM garcetto <garcetto(a)gmail.com> wrote: > good afternoon, > data encryption. > thank you > > Il Ven 10 Mar 2023, 21:48 Alvaro Soto <alsotoes(a)gmail.com> ha scritto: > >> You mean data or token encryption? >> >> Cheers! >> >> On Fri, Mar 10, 2023 at 9:08 AM garcetto <garcetto(a)gmail.com> wrote: >> >>> good afternoon, >>> does manila support encryption in some sort ? >>> >>> thank you >>> >> >> >> -- >> >> Alvaro Soto >> >> *Note: My work hours may not be your work hours. Please do not feel the >> need to respond during a time that is not convenient for you.* >> ---------------------------------------------------------- >> Great people talk about ideas, >> ordinary people talk about things, >> small people talk... about other people. >> > -- Alvaro Soto *Note: My work hours may not be your work hours. Please do not feel the need to respond during a time that is not convenient for you.* ---------------------------------------------------------- Great people talk about ideas, ordinary people talk about things, small people talk... about other people.

1 0

[manila] create snapshot from share not permitted
by garcetto 14 Mar '23

14 Mar '23

good morning, i am using manila and generic driver with dhss true, but cannot create snapshot from shares, any help? where can i look at? (cinder backend is a linux nfs server) thank you $ manila snapshot-create share-01 --name Snapshot1 ERROR: Snapshots cannot be created for share '2c8b1b3d-ef82-4372-94df-678539f0d843' since it does not have that capability. (HTTP 422) (Request-ID: req-cab23a46-37dc-4f2b-b26c-d6b21b7453ba)

2 1

[Diversity] Diversity and Inclusion WG Meeting reminder
by Amy Marrich 14 Mar '23

14 Mar '23

This is a reminder that the Diversity and Inclusion WG will be meeting tomorrow at 14:00 UTC in the #openinfra-diversity channel on OFTC. We hope members of all OpenInfra projects join us as we look at the Code of Conduct, and continue working on planning for the OpenInfra Summit as well as Foundation-wide diversity surveys. Thanks, Amy (spotz) 0 - https://etherpad.opendev.org/p/diversity-wg-agenda

1 0

*Migration)Red Hat Open Stack Migration Lift and Shift
by Adivya Singh 13 Mar '23

13 Mar '23

Hi Team, I am making a plan for Red hat OpenStack migration(Lift and Shift), The Director is in VM sourced in VMware, which we are migrated in other DC, But the IP and VLAN will change Will it be advisable to change the Provisioning IP and other IP , according to the New VLAN designed in the new DC, Configured in the template , Do a introspection of the new design and Configured the Red hat OpenStack, Any addition on this or guidance would be highly usefull Regards Adivya Singh

2 1

[cinder] proposing Jon Bernard for cinder core
by Rajat Dhasmana 13 Mar '23

13 Mar '23

Hello everyone, I would like to propose Jon Bernard as cinder core. Looking at the review stats for the past 60[1], 90[2], 120[3] days, he has been consistently in the top 5 reviewers with a good +/- ratio and leaving helpful comments indicating good quality of reviews. He has been managing the stable branch releases for the past 2 cycles (Zed and 2023.1) and has helped in releasing security issues as well. Jon has been part of the cinder and OpenStack community for a long time and has shown very active interest in upstream activities, be it release liaison, review contribution, attending cinder meetings and also involving in outreachy activities. He will be a very good addition to our team helping out with the review bandwidth and adding valuable input in our discussions. I will leave this thread open for a week and if there are no objections, I will add Jon Bernard to the cinder core team. [1] https://www.stackalytics.io/report/contribution?module=cinder-group&project… [2] https://www.stackalytics.io/report/contribution?module=cinder-group&project… [3] https://www.stackalytics.io/report/contribution?module=cinder-group&project… Thanks Rajat Dhasmana

5 5

[ovn] safely change bridge_mappings
by Tomáš Bredár 13 Mar '23

13 Mar '23

Hi, I have a running production OpenStack deployment - version Wallaby installed using TripleO. I'm using the default OVN/OVS networking. For provider networks I have two bridges on the compute nodes br-ex and br-ex2. Instances mainly use br-ex for provider networks, but there are some instances which started using a provider network which should be mapped to br-ex2, however I didn't specify "bridge_mappings" on ml2_conf.ini, so the traffic wants to flow through the default datacentre:br-ex. My questions is, what services should I restart on the controller and compute nodes after defining bridge_mappings in [ovs] in ml2_conf.ini. And if this operation is safe and if the instances already using br-ex will lose connectivity? Thanks for your help Tomas

2 3

[outreachy][cinder] Cannot access code repository
by Benjamin Faruna 13 Mar '23

13 Mar '23

Hello, good day, I was selected for the outreachy internship program and I want to contribute to cinders' codebase, but I am having trouble accessing it. Whenever I open the code tab on launchpad I get 2 repositories that haven't been updated in a while but the main page shows a lot of activities on the codebase. Please I want to request help setting up and getting started making contributions. The images of what I see is attached to this email.

3 2

[neutron] Openstack Network Interconnection
by Roberto Bartzen Acosta 13 Mar '23

13 Mar '23

Hey folks. Does anyone have ideas on how to interconnect different Openstack deployments? Consider that we have multiple Datacenters and need to interconnect tenant networks. How could this be done in the context of OpenStack (without using VPN) ? We have some ideas about the usage of OVN-IC (OVN Interconnect). It looks like a great solution to create a network layer between DCs/AZs with the help of the OVN driver. However, Neutron does not support the Transit Switches (OVN-IC design) that are required for this application. We've seen references to abandoned projects like [1] [2] [3]. Does anyone use something similar in production or have an idea about how to do it? Imagine that we need to put workloads on two different AZs that run different Openstack installations, and we want to communicate with the local networks without using a FIP. I believe that the most coherent way to maintain databases consistent in each Openstack would be an integration with Neutron, but I haven't seen any movement on that. Regards, Roberto [1] https://www.youtube.com/watch?v=GizLmSiH1Q0 [2] https://specs.openstack.org/openstack/neutron-specs/specs/stein/neutron-int… [3] https://opendev.org/x/neutron-interconnection -- _‘Esta mensagem é direcionada apenas para os endereços constantes no cabeçalho inicial. Se você não está listado nos endereços constantes no cabeçalho, pedimos-lhe que desconsidere completamente o conteúdo dessa mensagem e cuja cópia, encaminhamento e/ou execução das ações citadas estão imediatamente anuladas e proibidas’._ * **‘Apesar do Magazine Luiza tomar todas as precauções razoáveis para assegurar que nenhum vírus esteja presente nesse e-mail, a empresa não poderá aceitar a responsabilidade por quaisquer perdas ou danos causados por esse e-mail ou por seus anexos’.*

2 3

[keystone] Best-practice for (admin) endpoint config
by Christian Rohmann 13 Mar '23

13 Mar '23

Hello Openstack-discuss, I am wondering what the current recommendations / best-practices are in regards to the endpoints of keystone (and other services). There are three types of endpoints: public, internal and admin: * "public" certainly is for API access done by cloud users - so measures like rate limiting are likely in place. * "internal" is an alternative URL to be used by other services. Sounds reasonable to have an alternate path for the internal communication of OpenStack services, like having a management network Also reading https://docs.openstack.org/security-guide/api-endpoints/api-endpoint-config… this seems to be the recommendation. * "admin" - This is the one that gives me a little headache. According to commits 1) https://opendev.org/openstack/keystone/commit/4ec69218454d9f8be7150e2cee50c… 2) https://github.com/openstack/keystone/commit/ecf721a3c176daf67d00536c48e80e… there should actually be no admin endpoint for Keystone anymore. Or should there? But looking at openstack-ansible doing the endpoint config (https://opendev.org/openstack/openstack-ansible-os_keystone/src/commit/a020…) all tree types are still configured? Backwards compatibility for services still expecting this endpoint? 1) Ceilometer - https://bugs.launchpad.net/ceilometer/+bug/1981207 2) Heat - https://review.opendev.org/c/openstack/openstacksdk/+/777343 Apart from Keystone also other services have "admin" endpoints which can be configured and placed as such into the service catalog. What is the reasoning behind that? Thanks and with kind regards, Christian

1 0

[cinder] Openstack-ansible and cinder GPFS backend
by Nicolas Melot 13 Mar '23

13 Mar '23

Hi, I can find doc on using various backends for cinder (https://docs.openstack.org/openstack-ansible-os_cinder/zed/configure-cinder…) and some documentation to configure a GPFS backend for cinder (https://docs.openstack.org/cinder/zed/configuration/block-storage/drivers/i…) but I cannot find any documentation to deploy cinder with GPFS backend using openstack-ansible. Does this exist at all? Is there any documentation? /Nicolas

3 2