January 2024 - openstack-discuss - lists.openstack.org

[swift][acl][s3api] Manage Container ACL
by Thiago De Moraes Teixeira 25 Jan '24

25 Jan '24

Hi, How can I grant access for other users in my bucket, using s3api, using tempauth (locally tests) and keystone? With: *aws s3api put-bucket-acl --bucket bucket --grant-full-control id=test:tester* (tempauth) I can confirm that this acl was updated inside the container metadata, in container.db, like this *"X-Container-Sysmeta-S3Api-Acl": [ "{\"Owner\":\"thiago:th\",\"Grant\":[{\"Permission\":\"FULL_CONTROL\",\"Grantee\":\"test:tester\"}]}", "1706210273.48975" ]* But when authenticated by test:tester, I can't read/write to that container. -- _‘Esta mensagem é direcionada apenas para os endereços constantes no cabeçalho inicial. Se você não está listado nos endereços constantes no cabeçalho, pedimos-lhe que desconsidere completamente o conteúdo dessa mensagem e cuja cópia, encaminhamento e/ou execução das ações citadas estão imediatamente anuladas e proibidas’._ * **‘Apesar do Magazine Luiza tomar todas as precauções razoáveis para assegurar que nenhum vírus esteja presente nesse e-mail, a empresa não poderá aceitar a responsabilidade por quaisquer perdas ou danos causados por esse e-mail ou por seus anexos’.*

1 0

[neutron][antelope] neutron has error "/neutron-rootwrap: Unauthorized command: ip netns" after switch from openvswitch to linuxbridge
by dieter.dorra＠hsnr.de 25 Jan '24

25 Jan '24

Initially I've installed Antelope with openvswitch as described in the docs, but after switching back to linuxbridge neutron fails with errors on control: neutron-l3-agent.log: 2024-01-23 21:54:07.364 192544 ERROR neutron_lib.callbacks.manager neutron_lib.exceptions.ProcessExecutionError: Exit code: 99; Cmd: ['ip', 'netns', 'exec', 'qrouter-ce46ba37-9b08-4c08-a31c-0d38ff3d1438', 'env', 'PROCESS_TAG=haproxy-ce46ba37-9b08-4c08-a31c-0d38ff3d1438', 'haproxy', '-f', '/var/lib/neutron/ns-metadata-proxy/ce46ba37-9b08-4c08-a31c-0d38ff3d1438.conf']; Stdin: ; Stdout: ; Stderr: /usr/bin/neutron-rootwrap: Unauthorized command: ip netns exec qrouter-ce46ba37-9b08-4c08-a31c-0d38ff3d1438 env PROCESS_TAG=haproxy-ce46ba37-9b08-4c08-a31c-0d38ff3d1438 haproxy -f /var/lib/neutron/ns-metadata-proxy/ce46ba37-9b08-4c08-a31c-0d38ff3d1438.conf (no filter matched) 2024-01-23 21:54:07.364 192544 ERROR neutron_lib.callbacks.manager neutron-dhcp-agent.log 2024-01-23 21:58:38.754 192061 ERROR neutron.agent.linux.utils [None req-64a0a2f6-ec71-4288-900f-f86f0bd903e0 - - - - - -] Exit code: 99; Cmd: ['ip', 'netns', 'exec', 'qdhcp-ce84c378-6260-455f-8816-bb1d640aa42c', 'env', 'PROCESS_TAG=haproxy-ce84c378-6260-455f-8816-bb1d640aa42c', 'haproxy', '-f', '/var/lib/neutron/ns-metadata-proxy/ce84c378-6260-455f-8816-bb1d640aa42c.conf']; Stdin: ; Stdout: ; Stderr: /usr/bin/neutron-rootwrap: Unauthorized command: ip netns exec qdhcp-ce84c378-6260-455f-8816-bb1d640aa42c env PROCESS_TAG=haproxy-ce84c378-6260-455f-8816-bb1d640aa42c haproxy -f /var/lib/neutron/ns-metadata-proxy/ce84c378-6260-455f-8816-bb1d640aa42c.conf (no filter matched) Any help appreciated.

2 2

Credentials in DEBUG log
by Max Harmathy 25 Jan '24

25 Jan '24

Hi, I am using the python sdk. If I set the loglevel to DEBUG then credentials will land in the log output. Is there a way to have the credentials filtered out? Max

2 1

[largescale-sig] Ops Deep Dive: YOU propose the next episodes!
by Thierry Carrez 25 Jan '24

25 Jan '24

Hi everyone, You may be familiar with the Large Scale SIG's "Ops Deep Dive" series on OpenInfra Live[1], where our recurring hosts (Arnaud Morin, Mohammed Naser, Felix Huttner and Belmiro Moreira) discuss with operator guests the details of their large scale OpenStack deployment or a given operational topic. [1] https://openinfra.dev/live/#all-episodes For 2024, we want to open things up a bit. If YOU have a large scale deployment that you would like to discuss with our hosts, or if YOU have an idea of an operational challenge that you would like to discuss with your peers (and you have secured their interest in joining), please submit your idea to https://ideas.openinfra.live and we'll consider it during our next Large Scale SIG meeting. Hope to see you next on the Ops Deep Dive ! -- Thierry Carrez (ttx)

1 0

[glalnce][ceph] delete snapshot after creating instance
by Satish Patel 25 Jan '24

25 Jan '24

Folks, I have two openstack clouds and both have their own Ceph backend storage.I am trying to migrate instances from openstack A to openstack B. 1. Take a snapshot from A 2. Export snapshot and import to B 3. Create instance on B 4. Delete snapshot - (I am getting error because its in-use) Because it has a parent reference to that volume. How do I remove the reference so it will let me delete a snapshot. Reason I am asking is because I have so many VMs to migrate and don't want glance to have 100s of entities in those snapshots. What is the alternative here? I can try qcow2 if that is the final solution to make it clean. # rbd -p volumes info volume-f2b2aec2-cc57-49e5-aca1-54b5a7ee9f3a rbd image 'volume-f2b2aec2-cc57-49e5-aca1-54b5a7ee9f3a': size 40 GiB in 5120 objects order 23 (8 MiB objects) snapshot_count: 0 id: 5473c827864fed block_name_prefix: rbd_data.5473c827864fed format: 2 features: layering, exclusive-lock, object-map, fast-diff, deep-flatten op_features: flags: create_timestamp: Fri Jan 19 19:03:25 2024 access_timestamp: Wed Jan 24 15:51:04 2024 modify_timestamp: Wed Jan 24 15:52:40 2024 parent: images/3708f961-fb74-49f1-ab9b-40cf7954abed@snap overlap: 40 GiB

3 16

A questionnaire for unmaintained package users
by zhiqingzhong＠link.cuhk.edu.cn 25 Jan '24

25 Jan '24

1 0

[kolla][trove] Best practice to make guest-agent communicate with RPC
by Satish Patel 25 Jan '24

25 Jan '24

Folks, I am trying to find a kolla-ansible doc related to how to implement trove in production with best practices. Especially when a guest-agent (running inside VM) talks to RPC service. How are other folks doing in their environments? In most cases RPC is an internal service and not visible to any guest VMs. Looking for some guidance.

3 21

[Kolla-ansible][Ironic] Ironic PXE boot not working
by Jayesh Chaudhari 25 Jan '24

25 Jan '24

Hi, I have deployed following setup Openstack Version : Yoga Deployment Method : Kolla-ansible Node Provisioning tool : MAAS Now I am trying to integrate ironic service in it for BareMetal as a Service. My configuration for ironic in global.yml is following: enable_ironic: "yes" ironic_dnsmasq_interface: "ens2f0" #10G interface ironic_dnsmasq_dhcp_range: "10.145.50.50,10.145.50.60,255.255.255.192" ironic_cleaning_network: "ironic_provisioning_network" ironic_dnsmasq_default_gateway: 10.145.50.1 ironic_dnsmasq_boot_file: "pxelinux.0" ironic_inspector_kernel_cmdline_extras: ['ipa-lldp-timeout=90.0', 'ipa-collect-lldp=1'] ironic_http_port: "8089" ironic_enable_keystone_integration: "yes" My deployment is successful, but when I try to create openstack instance with baremetal flavor it stuck in pxe boot. If I use my 1G interface as ironic_dnsmasq_interface it pxe boot from MAAS. Is there any way I can use MAAS with ironic ? or how I can proceed with 10G interface? Thanks, Jayesh

1 0

[kolla-ansible][senlin] dashboard help
by garcetto 24 Jan '24

24 Jan '24

good afternoon, i set enable_senlin: "yes" on globals.yaml, but see no senlin dashboard, my fault? thank you.

2 1

[largescale-sig] Next meeting: January 24, 16utc
by Thierry Carrez 24 Jan '24

24 Jan '24

Hi everyone, The Large Scale SIG will be meeting this Wednesday in #openstack-operators on OFTC IRC, at 16UTC, our EU+US-friendly time. You can doublecheck how that UTC time translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20240124T16 Feel free to add topics to the agenda: https://etherpad.opendev.org/p/large-scale-sig-meeting Regards, -- Thierry Carrez

1 1