May 2023 - openstack-discuss - lists.openstack.org

[neutron] policy rules: filter on name field
by Paolo Emilio Mazzon 19 May '23

19 May '23

Hello, I'm trying to understand if this is feasible: I would like to avoid a regular user from tampering the "default" security group of a project. Specifically I would like to prevent him from deleting sg rules *from the default sg only* I can wite a policy.yaml like this # Delete a security group rule # DELETE /security-group-rules/{id} # Intended scope(s): project "delete_security_group_rule": "role:project_manager and project_id:%(project_id)s" but this is sub-optimal since the regular member can still *add* rules... Is it possible to create a rule like "sg_is_default" : ...the sg group whose name is 'default' so I can write "delete_security_group_rule": "not rule:sg_is_default" ? Thanks! Paolo -- Paolo Emilio Mazzon System and Network Administrator paoloemilio.mazzon[at]unipd.it PNC - Padova Neuroscience Center https://www.pnc.unipd.it Via Orus 2/B - 35131 Padova, Italy +39 049 821 2624

4 7

[cinder] festival of feature reviews 19 May 2023
by Rajat Dhasmana 19 May '23

19 May '23

Hello Argonauts, We will be having our monthly festival of reviews today i.e. 19th May (Friday) from 1400-1600 UTC. Following are some additional details: Date: 19th May, 2023 Time: 1400-1600 UTC Meeting link: will be shared in #openstack-cinder around 1400 UTC etherpad: https://etherpad.opendev.org/p/cinder-festival-of-reviews Thanks Rajat Dhasmana

1 0

[neutron] Drivers meeting
by Rodolfo Alonso Hernandez 19 May '23

19 May '23

Hello Neutrinos: Remember this afternoon we have the drivers meeting at 14UTC. The agenda has one topic: https://wiki.openstack.org/wiki/Meetings/NeutronDrivers As commented during the last team meeting, I also want you to review the open specs. Please spend some minutes on them: * https://review.opendev.org/q/project:openstack%252Fneutron-specs+status:open * https://review.opendev.org/c/openstack/nova-specs/+/859290 Regards.

1 0

[oslo.metrics][nova][oslo][oslo.messaging] oslo.metrics patch not working
by hai wu 18 May '23

18 May '23

I tried to backport this particular patch in order to add support for 'oslo.metrics' on openstack controller node first: https://github.com/openstack/oslo.messaging/commit/bdbb6d62ee20bfd5ffc59f87…. But it does not work. After adding the following configs in /etc/nova/nova.conf: [DEFAULT] default_log_levels = oslo.messaging=DEBUG [oslo_messaging_metrics] metrics_enabled = True I could only see messages related to 'oslo.messaging._drivers' in nova log files, and there's nothing related to 'oslo.messaging._metrics', or any other ones under 'oslo.messaging'. What else is needed for this back-ported patch to work on the controller?

1 0

[ironic] Core team updates
by Jay Faulkner 18 May '23

18 May '23

Hey all, I wanted to let you know that Shivanand Tendulker let me know they will no longer be working on Ironic. I've removed them from the ironic-core group as a result. As usual, with former Ironic core reviewers, Shivanand will be welcomed back quickly if they return to work on Ironic. Thank you for years of helping us keep things maintained! -- Jay Faulkner Ironic PTL TC Vice-Chair

1 0

[kolla] [train] haproxy and controller restart causes user impact
by Albert Braden 18 May '23

18 May '23

We have our haproxy and controller nodes on KVM hosts. When those KVM hosts are restarted, customers who are building or deleting VMs see impact. VMs may go into error status, fail to get DNS records, fail to delete, etc. The obvious reason is because traffic that is being routed to the haproxy on the restarting KVM is lost. If we manually fail over haproxy before restarting the KVM, will that be sufficient to stop traffic being lost, or do we also need to do something with the controller?

3 13

Re: 答复: [ptl] Need PTL volunteer for OpenStack Sahara
by Ghanshyam Mann 18 May '23

18 May '23

Thanks Jerry, Brin for the updates and showing interest in Sahara project. In PTG discussion, there were some concern on Sahara maintenance even we had PTL volunteer to lead this project but not much things got merged and gate was broken many times. But let me discuss it in TC meeting tomorrow and update here. -gmann ---- On Mon, 10 Apr 2023 00:22:08 -0700 Brin Zhang(张百林) wrote --- > Hi Gmann, > Jerry Zhou works the same company as qiujunting (Qiujunting has out of the office, so he cannot response us, I am so sorry), and he will be involved in Sahara. > Hope TC can add him in Sahara team, let him gradually complete the maintenance of the Sahara project. > Thanks. > > brinzhang > > -----邮件原件----- > 发件人: Jerry Zhou (周鑫勇) zhouxinyong(a)inspur.com> > 发送时间: 2023年4月7日 11:10 > 收件人: gmann(a)ghanshyammann.com; Juntingqiu Qiujunting (邱军婷) qiujunting(a)inspur.com> > 抄送: openstack-discuss(a)lists.openstack.org; Tom Guo(郭涛2810) guotao.bj(a)inspur.com>; Brin Zhang(张百林) zhangbailin(a)inspur.com>; Weiting Kong (孔维亭) kongweiting(a)inspur.com> > 主题: 答复: [ptl] Need PTL volunteer for OpenStack Sahara > > Hi Gmann, > I can lead this project. > > -----邮件原件----- > 发件人: Ghanshyam Mann gmann(a)ghanshyammann.com> > 发送时间: 2023年3月23日 2:35 > 收件人: Qiujunting qiujunting(a)inspur.com>; openstack-discuss openstack-discuss(a)lists.openstack.org> > 主题: [ptl] Need PTL volunteer for OpenStack Sahara > > Hi Qiu, > > I am reaching out to you as you were PTL for OpenStack Sahara project in the last cycle. > > There is no PTL candidate for the next cycle (2023.2), and it is on the leaderless project list. Please check if you or anyone you know would like to lead this project. > > - https://etherpad.opendev.org/p/2023.2-leaderless > > Also, if anyone else would like to help leading this project, this is time to let TC knows. > > -gmann > >

4 7

[Yoga][Magnum] change boot disk storage for COE VMs
by wodel youchi 18 May '23

18 May '23

Hi, When creating Magnum clusters, two disks are created for each VM sda and sdb, the sda is the boot disk and the sdb is for docker images. By default the sda is created (at least in my deployment) in nova vms pool, as ephemeral disks, the second disk sdb is created in cinder volume. Is it possible to move the sda from nova vms to cinder volume? I tried with default_boot_volume_type, but it didn't work. default_boot_volume_type = MyCinderPool Regards.

2 1

Installation openstack Multi node
by BEDDA Fadhel 17 May '23

17 May '23

Good morning, I am looking for a complete video or digital procedure that allows me to set up an openstack multi node test environment on vamware workstation. THANKS

4 3

[largescale-sig] Next meeting: May 17, 15utc
by Thierry Carrez 17 May '23

17 May '23

Hi everyone, The Large Scale SIG will be meeting this Wednesday in #openstack-operators on OFTC IRC, at 15UTC, our EU+US-friendly time. Kristin will be chairing. You can doublecheck how that UTC time translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20230517T15 Feel free to add topics to the agenda: https://etherpad.opendev.org/p/large-scale-sig-meeting Regards, -- Thierry Carrez

1 1