May 2023 - openstack-discuss - lists.openstack.org

Discuss Fix for Bug #2003179
by Saad, Tony 22 May '23

22 May '23

Hello, I am reaching out to start a discussion about Bug #2003179 https://bugs.launchpad.net/cinder/+bug/2003179 The password is getting leaked in plain text from https://opendev.org/openstack/oslo.privsep/src/commit/9c026804de74ae23a60ab…. This logger line does not always contain a password so using mask_password() and mask_dict_password() from https://docs.openstack.org/oslo.utils/latest/reference/strutils.html is probably not the best solution. Anyone have any thoughts on how to stop the password from appearing in plain text? Thanks, Tony Internal Use - Confidential

3 2

[ptl][tc] New approach for project update presentations
by Jeremy Stanley 22 May '23

22 May '23

I'm reaching out to you about the video recordings that the OpenInfra Foundation has been collecting to capture a project update from each OpenInfa community (including those for individual OpenStack Project Teams). These videos were previously collected leading up to the OpenInfra Summits to showcase what each project had accomplished in the past year/release. This year we are implementing a change to the cadence of collecting this video content, to better fit with the communities' timeline, milestones and achievements. It will also help us better promote the new content, without it getting lost among the news and buzz around the OpenInfra Summit. Moving forward, OpenStack Project Teams will need to make decisions about items, such as the cadence and format of recording the project updates. Cadence: There are various options to pick from. Teams can define a periodic schedule, or stick to bigger milestones like major releases and project anniversaries. Format: Teams can produce pre-recorded presentations with slide materials, and share that. If enough content and volunteers are available, they could also talk about their latest project news and updates during an OpenInfra Live episode. We will post all recordings on the OpenInfra Foundation YouTube channel and promote them through relevant social media accounts. Timeline: The new process will start after this year's OpenInfra Summit, which will happen on June 13-15 in Vancouver, Canada. After the event, I will reach out to help the Technical Committee and individual teams decide on the above items and take next steps in the process. Please let me know if you have any questions in the meantime. -- Jeremy Stanley on behalf of the OpenInfra Foundation Staff

1 0

[manila] Architecture: separation between share and ctl nodes
by Jan Wasilewski 22 May '23

22 May '23

Hi, I would like to integrate Manila with our current OpenStack cloud. In the architecture and configuration instructions, it is mentioned that the share node and controller node should be located on separate nodes. However, in our environment, each service is located on a separate VM, so I'm wondering if it would be reasonable to integrate the controller node and share node on a single node. Especially since we are using Huawei Dorado as our backend, and from our tests, we have not observed significant traffic generated by it. Therefore, I would like to know if it is a sensible approach to have everything located on a single node or if we may have missed something important in this integration. Thank you in advance for your insights and advice. Best regards, Jan

2 2

[neutron] Bug Deputy Report May 15 - May 21
by Elvira Garcia Ruiz 22 May '23

22 May '23

Hi everyone! I was the bug deputy last week. There are two critical bugs reported, both have fixes ready for review. Find the full report below: Critical --------- - https://bugs.launchpad.net/neutron/+bug/2019802/ - [master] Not all fullstack tests running in CI Fix proposed by yatin: https://review.opendev.org/c/openstack/neutron/+/883120 - https://bugs.launchpad.net/neutron/+bug/2019946 - [S-RBAC] context.elevated() method from neutron-lib should ensure all required roles are set in context object Fix: https://review.opendev.org/c/openstack/neutron-lib/+/883345 Assigned to Slawek High ------ https://bugs.launchpad.net/neutron/+bug/2020050 - [sqlalchemy-20] Use a ``TextClause`` object for the empty strings in the DB model definitions Assigned to Rodolfo https://bugs.launchpad.net/neutron/+bug/2020195 - [ovn-octavia-provider] functional test intermittently fail with DB error: Cursor needed to be reset because of commit/rollback and can no longer be fetched from. Related commit: https://review.opendev.org/c/openstack/ovn-octavia-provider/+/883662 Assigned to Fernando - https://bugs.launchpad.net/neutron/+bug/2020215 - ml2/ovn refuses to bind port due to dead agent randomly in the nova-live-migrate ci job Fix: https://review.opendev.org/c/openstack/neutron/+/883687 Assigned to Sean Mooney Medium ----------- - https://bugs.launchpad.net/neutron/+bug/2019887 - [OVN] Log object deletion fails if related security group was simultaneously modified Fix: https://review.opendev.org/c/openstack/neutron/+/883102 Assigned to Elvira - https://bugs.launchpad.net/neutron/+bug/2019859 - stable/xena regression - NotImplementedError: Operator 'getitem' is not supported on this expression Fix: https://review.opendev.org/c/openstack/neutron/+/883288 Assigned to Rodolfo - https://bugs.launchpad.net/neutron/+bug/2019948 - [alembic] Alembic operations require keywords only arguments Fix: https://review.opendev.org/c/openstack/neutron/+/883340 Assigned to Rodolfo - https://bugs.launchpad.net/neutron/+bug/2020058 - [OVN][OVN-BGP-AGENT] Expose port hosting information for virtual ports In Progress Assigned to Lucas Alvares - https://bugs.launchpad.net/neutron/+bug/2020114 - [sqlalchemy-20] ``Engine`` class no longer inherits from ``Connectable`` Fix proposed: https://review.opendev.org/c/openstack/neutron/+/883521 Assigned to Rodolfo Wishlist ----------- - https://bugs.launchpad.net/neutron/+bug/2019960 - [RFE] Can't protect the "default" security group from regular users Unassigned Undecided -------------- - https://bugs.launchpad.net/neutron/+bug/2020001 - Neutron Dynamic Routing : vip is not advertised via BGP Marked incomplete by Jens Harbott so I decided to wait on their opinion - https://bugs.launchpad.net/neutron/+bug/2020060 - Stateless Feature of Security Group Not Functioning in Case of other Port same compute use stateful Rodolfo is discussing with the reporter more information about this but, since it is linux bridge driver I was not sure about confirming Assigned to Slawek - https://bugs.launchpad.net/neutron/+bug/2020168 - [OVN][SRIOV] traffic problems when sriov and non-sriov ports are bound on the same hypervisor The reporter is not sure if this is a bug in Neutron or in OVN. Someone with SRIOV knowledge might be able to help better. Unassigned Kind regards, Elvira

1 0

[kolla-ansible] Plugin pulling from other repositories
by James Leong 21 May '23

21 May '23

Hi everyone, How can I change the location where the repositories are being git pulled? I am using kolla-ansible as my deployment tool for deploying the yoga version of OpenStack. It seems like all plugins, such as zun_ui, blazar_dashboard, etc., are all being pulled from this path " https://opendev.org/openstack." I have attempted to change the variable kolla_dev_repos_git in globals.yml from "https://opendev.org/openstack" to point to my GitHub repository. However, it did not work. Is there a place where I can override the default path to pull plugins from my repository? Thanks for your help, James

2 1

Re: OVS-DPDK poor performance with Intel 82599
by Soheil D.Amiri 20 May '23

20 May '23

Dear satish About your topic on openstack.org by subject of "OVS-DPDK poor performance with Intel 82599". I have the same problem. I could not get good performance on my compute node. Did you solve your problem ? Would you please guide me about this problem https://lists.openstack.org/pipermail/openstack-discuss/2020-November/01912… Best Regards Soheil Amiri

1 0

[OSA][NEUTRON] Doubts about network setup
by Murilo Morais 20 May '23

20 May '23

Good evening everyone! I'm trying to set up a lab for testing using Openstack Ansible (OSA) and I'm having a lot of trouble understanding/setting up the network. I'm trying something similar to AIO (All-in-one) but with customizations (2 compute node). I'm using Debian 11 as OS. My problem is that I need the instances to communicate through VLANs that are being delivered directly to the interface of each compute node, as I need the same instances to participate in an existing network. I have a lot of doubts about this type of setup and how the configuration of provider_networks would be. Thanks in advance!

2 1

[kolla-ansible] Adding a USB device to a Docker container
by Bram Kranendonk 19 May '23

19 May '23

Hi OpenStack Discuss, I'm looking for a way to mount an USB device to a kolla-ansible Docker container. Is there a way to achieve this using the kolla-ansible configuration global vars? I couldn't find a way to do so. Thanks in advance, . Bram Kranendonk System Engineer <tel:> Oostmaaslaan 71 (15e etage) 3063 AN Rotterdam The Netherlands [team.blue logo]<https://team.blue/?utm_source=signature&utm_medium=email&utm_campaign=team-…>

1 0

[neutron] policy rules: filter on name field
by Paolo Emilio Mazzon 19 May '23

19 May '23

Hello, I'm trying to understand if this is feasible: I would like to avoid a regular user from tampering the "default" security group of a project. Specifically I would like to prevent him from deleting sg rules *from the default sg only* I can wite a policy.yaml like this # Delete a security group rule # DELETE /security-group-rules/{id} # Intended scope(s): project "delete_security_group_rule": "role:project_manager and project_id:%(project_id)s" but this is sub-optimal since the regular member can still *add* rules... Is it possible to create a rule like "sg_is_default" : ...the sg group whose name is 'default' so I can write "delete_security_group_rule": "not rule:sg_is_default" ? Thanks! Paolo -- Paolo Emilio Mazzon System and Network Administrator paoloemilio.mazzon[at]unipd.it PNC - Padova Neuroscience Center https://www.pnc.unipd.it Via Orus 2/B - 35131 Padova, Italy +39 049 821 2624

4 7

[cinder] festival of feature reviews 19 May 2023
by Rajat Dhasmana 19 May '23

19 May '23

Hello Argonauts, We will be having our monthly festival of reviews today i.e. 19th May (Friday) from 1400-1600 UTC. Following are some additional details: Date: 19th May, 2023 Time: 1400-1600 UTC Meeting link: will be shared in #openstack-cinder around 1400 UTC etherpad: https://etherpad.opendev.org/p/cinder-festival-of-reviews Thanks Rajat Dhasmana

1 0