March 2023 - openstack-discuss - lists.openstack.org

[ovn] safely change bridge_mappings
by Tomáš Bredár 13 Mar '23

13 Mar '23

Hi, I have a running production OpenStack deployment - version Wallaby installed using TripleO. I'm using the default OVN/OVS networking. For provider networks I have two bridges on the compute nodes br-ex and br-ex2. Instances mainly use br-ex for provider networks, but there are some instances which started using a provider network which should be mapped to br-ex2, however I didn't specify "bridge_mappings" on ml2_conf.ini, so the traffic wants to flow through the default datacentre:br-ex. My questions is, what services should I restart on the controller and compute nodes after defining bridge_mappings in [ovs] in ml2_conf.ini. And if this operation is safe and if the instances already using br-ex will lose connectivity? Thanks for your help Tomas

2 3

[outreachy][cinder] Cannot access code repository
by Benjamin Faruna 13 Mar '23

13 Mar '23

Hello, good day, I was selected for the outreachy internship program and I want to contribute to cinders' codebase, but I am having trouble accessing it. Whenever I open the code tab on launchpad I get 2 repositories that haven't been updated in a while but the main page shows a lot of activities on the codebase. Please I want to request help setting up and getting started making contributions. The images of what I see is attached to this email.

3 2

[neutron] Openstack Network Interconnection
by Roberto Bartzen Acosta 13 Mar '23

13 Mar '23

Hey folks. Does anyone have ideas on how to interconnect different Openstack deployments? Consider that we have multiple Datacenters and need to interconnect tenant networks. How could this be done in the context of OpenStack (without using VPN) ? We have some ideas about the usage of OVN-IC (OVN Interconnect). It looks like a great solution to create a network layer between DCs/AZs with the help of the OVN driver. However, Neutron does not support the Transit Switches (OVN-IC design) that are required for this application. We've seen references to abandoned projects like [1] [2] [3]. Does anyone use something similar in production or have an idea about how to do it? Imagine that we need to put workloads on two different AZs that run different Openstack installations, and we want to communicate with the local networks without using a FIP. I believe that the most coherent way to maintain databases consistent in each Openstack would be an integration with Neutron, but I haven't seen any movement on that. Regards, Roberto [1] https://www.youtube.com/watch?v=GizLmSiH1Q0 [2] https://specs.openstack.org/openstack/neutron-specs/specs/stein/neutron-int… [3] https://opendev.org/x/neutron-interconnection -- _‘Esta mensagem é direcionada apenas para os endereços constantes no cabeçalho inicial. Se você não está listado nos endereços constantes no cabeçalho, pedimos-lhe que desconsidere completamente o conteúdo dessa mensagem e cuja cópia, encaminhamento e/ou execução das ações citadas estão imediatamente anuladas e proibidas’._ * **‘Apesar do Magazine Luiza tomar todas as precauções razoáveis para assegurar que nenhum vírus esteja presente nesse e-mail, a empresa não poderá aceitar a responsabilidade por quaisquer perdas ou danos causados por esse e-mail ou por seus anexos’.*

2 3

[keystone] Best-practice for (admin) endpoint config
by Christian Rohmann 13 Mar '23

13 Mar '23

Hello Openstack-discuss, I am wondering what the current recommendations / best-practices are in regards to the endpoints of keystone (and other services). There are three types of endpoints: public, internal and admin: * "public" certainly is for API access done by cloud users - so measures like rate limiting are likely in place. * "internal" is an alternative URL to be used by other services. Sounds reasonable to have an alternate path for the internal communication of OpenStack services, like having a management network Also reading https://docs.openstack.org/security-guide/api-endpoints/api-endpoint-config… this seems to be the recommendation. * "admin" - This is the one that gives me a little headache. According to commits 1) https://opendev.org/openstack/keystone/commit/4ec69218454d9f8be7150e2cee50c… 2) https://github.com/openstack/keystone/commit/ecf721a3c176daf67d00536c48e80e… there should actually be no admin endpoint for Keystone anymore. Or should there? But looking at openstack-ansible doing the endpoint config (https://opendev.org/openstack/openstack-ansible-os_keystone/src/commit/a020…) all tree types are still configured? Backwards compatibility for services still expecting this endpoint? 1) Ceilometer - https://bugs.launchpad.net/ceilometer/+bug/1981207 2) Heat - https://review.opendev.org/c/openstack/openstacksdk/+/777343 Apart from Keystone also other services have "admin" endpoints which can be configured and placed as such into the service catalog. What is the reasoning behind that? Thanks and with kind regards, Christian

1 0

[cinder] Openstack-ansible and cinder GPFS backend
by Nicolas Melot 13 Mar '23

13 Mar '23

Hi, I can find doc on using various backends for cinder (https://docs.openstack.org/openstack-ansible-os_cinder/zed/configure-cinder…) and some documentation to configure a GPFS backend for cinder (https://docs.openstack.org/cinder/zed/configuration/block-storage/drivers/i…) but I cannot find any documentation to deploy cinder with GPFS backend using openstack-ansible. Does this exist at all? Is there any documentation? /Nicolas

3 2

[outreachy][cinder]
by Desire Barine 13 Mar '23

13 Mar '23

Hello Sofia Enriquez, I'm Desire Barine, an Outreachy applicant. I would love to work on Extend automated validation of API reference request/response samples project. I would like to get started with the contribution. I am currently going over the instructions on contributions given. This is my first time contributing on an open source project but I'm really excited to get started. I'm proficient in python, bash and have worked on Rest api creation before. I would love to hear from you. Desire.

2 1

[cinder][PTG] Cinder 2023.2 (Bobcat) PTG Planning
by Rajat Dhasmana 13 Mar '23

13 Mar '23

Hello All, The 2023.2 (Bobcat) virtual PTG is approaching and will be held between 27-31 March, 2023. I've created a planning etherpad[1] and a PTG etherpad[2] to gather topics for the PTG. Note that you only need to add topics in the planning etherpad and those will be arranged in the PTG etherpad later. Dates: Tuesday (28th March) to Friday (31st March) 2023 Time: 1300 to 1700 UTC Etherpad: https://etherpad.opendev.org/p/bobcat-ptg-cinder-planning Please add the topics as early as possible as finalizing and arranging topics would require some buffer time. [1] https://etherpad.opendev.org/p/bobcat-ptg-cinder-planning [2] https://etherpad.opendev.org/p/bobcat-ptg-cinder Thanks Rajat Dhasmana

1 1

[Outreachy] Setting up development envirenment
by Khadija 12 Mar '23

12 Mar '23

Hi Sofia! I have made myself familiar with the launchpad, storyboard and gerrit. I have also experimented in the Sandbox projects. I was trying to set up my development environment following https://docs.openstack.org/cinder/latest/contributor/development.environmen… but I was unable to run unit tests, on running command 'tox -e py3' I get error saying AttributeError: module 'py' has no attribute 'io' Kindly help me with this so that I can start working on my first issue :) Thank you!

4 6

Allow user access calendar
by vincent lee 12 Mar '23

12 Mar '23

Hi all, I am using kolla-ansible for openstack deployment in yoga version. Is it possible to allow normal user (member role) to view the calendar graph under reservation (lease)? Best Vincent

1 0

Member access calendar
by vincent lee 12 Mar '23

12 Mar '23

Hi all, I am using kolla-ansible for openstack deployment in yoga version. Is it possible to allow normal user (member role) to view the calendar graph under reservation (lease)? Best Vincent

1 0