July 2023 - openstack-discuss - lists.openstack.org

[horizon][keystone][kolla-ansible] Authentication failure
by James Leong 04 Jul '23

04 Jul '23

Hi All, I am using the yoga version of OpenStack with the deployment tool of kolla-ansible. I am currently facing the below error when logging in via federated login using Globus Auth. " Login failed: An error occurred authenticating. Please try again later." When attempting to login, we are able to redirect the page to globus and process the request. However, when it comes back to the horizon login page, I am getting an authentication error. I have set up my keystone identity provider in globals.yml as below. keystone_identity_providers: - name: "globus" openstack_domain: "Default" protocol: "openid" identifier: "https://auth.globus.org" public_name: "Authenticate via Globus Auth" attribute_mapping: "globus" metadata_folder: "/home/user/osmetadata" keystone_federation_oidc_jwks_uri: "https://auth.globus.org/jwk.json" keystone_identity_mappings: - name: "globus" file: "/home/user/globus.json" Apart from specifying the identity provider and mapping, below are the other configurations we have set up when deploying. kolla_enable_tls_internal: "no" kolla_enable_tls_external: "yes" kolla_enable_tls_backend: "no" kolla_verify_tls_backend: "yes" Thanks for the help, James

2 1

[keystone] Weekly Meeting Cancelled for 04-Jul-2023
by Dave Wilde 04 Jul '23

04 Jul '23

Sorry for the late notice but I’m cancelling the weekly meeting for today as it’s a public holiday here in the U.S. Please reach out if you need anything. Thanks, /Dave

1 0

[TripleO] - Issue Faced in Building Overcloud Images
by Anirudh Gupta 04 Jul '23

04 Jul '23

Hi Team, I am trying to build openstack wallaby images following the below link: https://docs.openstack.org/project-deploy-guide/tripleo-docs/wallaby/deploy… But following the below issue: 2023-07-04 05:20:25.560 | --> Starting dependency resolution 2023-07-04 05:20:25.632 | --> Finished dependency resolution 2023-07-04 05:20:25.636 | Error: 2023-07-04 05:20:25.636 | Problem: cannot install the best candidate for the job *2023-07-04 05:20:25.636 | - nothing provides pacemaker-libs(x86-64) = 2.1.6-2.el8 needed by pacemaker-remote-2.1.6-2.el8.x86_642023-07-04 05:20:25.636 | (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate*2023-07-04 05:20:26.084 | Unmount /home/stack/image/dib_build.9WnO74VD/mnt/tmp/yum 2023-07-04 05:20:26.111 | Unmount /home/stack/image/dib_build.9WnO74VD/mnt/tmp/in_target.d 2023-07-04 05:20:26.136 | Unmount /home/stack/image/dib_build.9WnO74VD/mnt/sys 2023-07-04 05:20:26.161 | Unmount /home/stack/image/dib_build.9WnO74VD/mnt/proc 2023-07-04 05:20:26.191 | Unmount /home/stack/image/dib_build.9WnO74VD/mnt/dev/pts 2023-07-04 05:20:26.221 | Unmount /home/stack/image/dib_build.9WnO74VD/mnt/dev 2023-07-04 05:20:26.843 | INFO diskimage_builder.block_device.blockdevice [-] State already cleaned - no way to do anything here Exception occured while running the command Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/tripleoclient/command.py", line 34, in run super(Command, self).run(parsed_args) File "/usr/lib/python3.6/site-packages/osc_lib/command/command.py", line 39, in run return super(Command, self).run(parsed_args) File "/usr/lib/python3.6/site-packages/cliff/command.py", line 185, in run return_code = self.take_action(parsed_args) or 0 File "/usr/lib/python3.6/site-packages/tripleoclient/v1/overcloud_image.py", line 120, in take_action manager.build() File "/usr/lib/python3.6/site-packages/tripleo_common/image/build.py", line 85, in build elements, options, packages, extra_options) File "/usr/lib/python3.6/site-packages/tripleo_common/image/image_builder.py", line 140, in build_image raise subprocess.CalledProcessError(process.returncode, cmd) subprocess.CalledProcessError: Command '['disk-image-create', '-a', 'amd64', '-o', './overcloud-full', '-t', 'qcow2', '-p', 'pythoollector,sos,device-mapper-multipath,openstack-heat-agents,os-net-config,jq,python3-dbus', '--min-tmpfs=7', '--mkfs-options', '-s baremetal', 'openvswitch', 'overcloud-agent', 'overcloud-base', 'overcloud-controller', 'overcloud-compute', 'overcloud-ceph-stora'stable-interface-names', 'grub2', 'element-manifest', 'dynamic-login', 'iptables', 'enable-packages-install', 'override-pip-and-venerate', 'remove-machine-id', 'remove-resolvconf', 'openssh', 'disable-nouveau', 'selinux-permissive', 'interface-names']' return 1. I can see the same issue reported in bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=2017520 https://www.mail-archive.com/users@lists.rdoproject.org/msg01009.html Steps to Reproduce: 1. export OS_YAML="/usr/share/openstack-tripleo-common/image-yaml/overcloud-images-centos8.yaml" 2. export DIB_YUM_REPO_CONF="/etc/yum.repos.d/delorean* /etc/yum.repos.d/tripleo-centos-*" 3. export STABLE_RELEASE="wallaby" 4. openstack overcloud image build --config-file /usr/share/openstack-tripleo-common/image-yaml/overcloud-images-python3.yaml --config-file $OS_YAML The same issue is being observed in "XENA" release as well. Can someone please help Regards Anirudh Gupta

1 0

[cinder][drivers] new driver merge freeze question
by 蔡启龙 03 Jul '23

03 Jul '23

2 1

[ironic] Capping off storyboard migration
by Jay Faulkner 03 Jul '23

03 Jul '23

Hey all, I've written a small tool[1] which should (I think; I can't test it all the way until I'm ready to actually change a thing) iterate through stories in a storyboard project, and close any open tasks as invalid with a message. I'd like to point this script at all the Ironic-related Storyboard projects, closing all the issues with a message like the following: "Hello Ironic contributor, thank you for filing this bug! We have migrated to the Launchpad bugtracker, located at https://bugs.launchpad.net/ironic, If this bug remains valid, please open an issue in launchpad with the URL to this story for context." Are folks onboard for having all the tasks closed as invalid in these Ironic-related projects? Any feedback on the messaging? Thanks, Jay Faulkner P.S. For other projects who might want to use the tool as well, wait until I use it for Ironic to help me smooth out any rough edges and then have at it! 1: https://github.com/jayofdoom/sb-issue-closer

5 9

[Neutron] Tap as a service
by altidor JB 03 Jul '23

03 Jul '23

Hello, Can anyone help me with the setup of Tap as a Service on Openstack with Juju and Maas? I've seen tutorials for installing it on DevStack but nothing for large scale setups. So far I've tried doing a similar process to this: https://zhuanlan.zhihu.com/p/101599786 basically install the apt on the neutron_api lxd and on the compute nodes, with configurations that are done in the above tutorial. Sounds simple enough. But the tap_services and tap_flows stay in Down state. Any ideas??? Also I'm open to another way to do port mirroring if this doesn't work. JB

2 3

[kolla] kolla-toolbox Ubuntu 22 Erlang RMQ dependencies
by Bram Kranendonk 03 Jul '23

03 Jul '23

Hi all, I'm trying to build the kolla-toolbox image for Ubuntu 22 source for 2023.1 using kolla v16.0.0 This is however not possible due to broken packages for Erlang/RabbitMQ (tried without package cache): INFO:kolla.common.utils.kolla-toolbox: rabbitmq-server : Depends: erlang-base (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: erlang-base-hipe (< 1:26.0) but it is not installable or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-crypto (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-eldap (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-inets (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-mnesia (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-os-mon (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-parsetools (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-public-key (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-runtime-tools (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-ssl (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-syntax-tools (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-tools (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox: Depends: erlang-xmerl (< 1:26.0) but 1:26.0.2-1rmq1ppa1~ubuntu22.04.1 is to be installed or INFO:kolla.common.utils.kolla-toolbox: esl-erlang (< 1:26.0) but it is not installable INFO:kolla.common.utils.kolla-toolbox:E: Unable to correct problems, you have held broken packages. I saw a recent commit that pins the RabbitMQ version, but this commit was reverted later on. Does anyone has a idea how I can fix this issue? Thanks, . Bram Kranendonk System Engineer <tel:> Oostmaaslaan 71 (15e etage) 3063 AN Rotterdam The Netherlands [team.blue logo]<https://team.blue/?utm_source=signature&utm_medium=email&utm_campaign=team-…>

2 2

[nova] - libvirt - nl_recv returned with error: No buffer space available
by Roberto Bartzen Acosta 03 Jul '23

03 Jul '23

Hi OpenStack folks, We are seeing the following error when creating VMs: Jun 28 19:33:29 SR-0001 libvirtd[5289]: nl_recv returned with error: No buffer space available This problem occurs in deployments with different OS versions, for example: Ubuntu 20.04.4 LTS ii libnl-3-200:amd64 3.4.0-1 ii libvirt-daemon 6.0.0-0ubuntu8.16 Ubuntu 22.04 LTS ii libnl-3-200:amd64 3.5.0-0.1 ii libvirt-daemon 8.0.0-1ubuntu7.5 The hypervisor has around 40 native interfaces (bounds, vlans, tunneling bridges, mgmt bridges, physical NICs, etc), and plus 40 or more tap interfaces (depending on the number of VMs allocated), but we observed errors with more than 40 tap interfaces added to the host. Is anyone else noticing this? more details about the problem [1] Regards, Roberto [1] - https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/2025647 -- _‘Esta mensagem é direcionada apenas para os endereços constantes no cabeçalho inicial. Se você não está listado nos endereços constantes no cabeçalho, pedimos-lhe que desconsidere completamente o conteúdo dessa mensagem e cuja cópia, encaminhamento e/ou execução das ações citadas estão imediatamente anuladas e proibidas’._ * **‘Apesar do Magazine Luiza tomar todas as precauções razoáveis para assegurar que nenhum vírus esteja presente nesse e-mail, a empresa não poderá aceitar a responsabilidade por quaisquer perdas ou danos causados por esse e-mail ou por seus anexos’.*

1 0

[neutron] Bug deputy report for week of June 26th
by Brian Haley 01 Jul '23

01 Jul '23

Hi, I was Neutron bug deputy last week. Below is a short summary about the reported bugs. All but one bug has a patch proposed, so great job with that :) -Brian Critical bugs ------------- * https://bugs.launchpad.net/neutron/+bug/2025126 - Functional MySQL sync test failing with oslo/sqlalchemy master branch - https://review.opendev.org/c/openstack/neutron/+/886961 * https://bugs.launchpad.net/neutron/+bug/2025486 - [stable/wallaby] neutron-tempest-plugin-scenario-ovn-wallaby fails on ovn git clone - https://review.opendev.org/c/openstack/devstack/+/887184 High bugs --------- * https://bugs.launchpad.net/neutron/+bug/2025129 - DvrLocalRouter init references namespace before it is created - https://review.opendev.org/c/openstack/neutron/+/887036 * https://bugs.launchpad.net/neutron/+bug/2025202 - Execute neutron-ovn-db-sync-util report TypeError - https://review.opendev.org/c/openstack/neutron/+/881771 * https://bugs.launchpad.net/neutron/+bug/2025341 - flows lost with noop firewall driver at ovs-agent restart while the db is down - https://review.opendev.org/c/openstack/neutron/+/887257 * https://bugs.launchpad.net/neutron/+bug/2025368 - [sRBAC] Subnets permissions now inherit from the parent resource Network - https://review.opendev.org/c/openstack/neutron/+/887287 Medium bugs ----------- * https://bugs.launchpad.net/neutron/+bug/2025056 - Router ports without IP addresses shouldn't be allowed to deletion using port's API directly - https://review.opendev.org/c/openstack/neutron/+/886983 * https://bugs.launchpad.net/neutron/+bug/2025246 - [OVN] Improve log for the exception handling of ovn_l3/plugin.py - https://review.opendev.org/c/openstack/neutron/+/887153 * https://bugs.launchpad.net/neutron/+bug/2025264 - [ovn][DVR]FIP traffic centralized in DVR environments - https://review.opendev.org/c/openstack/neutron/+/886626 * https://bugs.launchpad.net/neutron/+bug/2025466 - [OVN] OVN agent should register the correct config options - https://review.opendev.org/c/openstack/neutron/+/887363 Low bugs -------- * https://bugs.launchpad.net/neutron/+bug/2025144 - [OVN] ``update_floatingip`` should handle the case when only the QoS policy is updated - https://review.opendev.org/c/openstack/neutron/+/886974 * https://bugs.launchpad.net/neutron/+bug/2025410 - After `openstack port set no-fixed-ip` command, the port's ip and mac's arp are still in qrouter without deletion - Could not reproduce with ML2/OVS, added questions Misc bugs --------- * https://bugs.launchpad.net/neutron/+bug/2024976 - iptable rules restoring error in l3-agent and openvswitch-agent - Not a bug, system issue Wishlist bugs ------------- * https://bugs.launchpad.net/neutron/+bug/2025055 - [rfe][ml2] Add a new API that supports cloning a specified security group - Asked about applicability, mentioned default SG RFE, https://bugs.launchpad.net/neutron/+bug/1983053

1 0