January 2024 - openstack-discuss - lists.openstack.org

Instances Shutting down themselves
by Karera Tony 26 Jan '24

26 Jan '24

Hello Team, For some reason today morning VMs on one of my compute Nodes started shutting down themselves. When I checked in Horizon, I realized that that particular Compute was disabled and I enabled it. I restarted the Instances and all is well now. I have attached the Logs for nova-compute in case someone would like to help. Regards Tony Karera

2 1

[masakari] [masakari-monitors] Feature to monitor hosts by kubernetes
by 김도균 25 Jan '24

25 Jan '24

1 0

[masakari] [masakari-monitors] Feature to monitor hosts by kubernetes
by 김도균 25 Jan '24

25 Jan '24

1 0

[masakari] [masakari-monitors] Feature to monitor hosts by kubernetes
by d0gyun.kim＠samsung.com 25 Jan '24

25 Jan '24

Hi team masakari I'm do-gyun kim working on SAMSUNG SDS in Seoul. We are using openstack on kubernetes and also masakari for HA. We have developed a function internally to masakari-monitors for k8s-native openstack and want to contribute! blueprint: https://blueprints.launchpad.net/masakari/+spec/host-monitors-by-kubernetes

1 0

[swift][acl][s3api] Manage Container ACL
by Thiago De Moraes Teixeira 25 Jan '24

25 Jan '24

Hi, How can I grant access for other users in my bucket, using s3api, using tempauth (locally tests) and keystone? With: *aws s3api put-bucket-acl --bucket bucket --grant-full-control id=test:tester* (tempauth) I can confirm that this acl was updated inside the container metadata, in container.db, like this *"X-Container-Sysmeta-S3Api-Acl": [ "{\"Owner\":\"thiago:th\",\"Grant\":[{\"Permission\":\"FULL_CONTROL\",\"Grantee\":\"test:tester\"}]}", "1706210273.48975" ]* But when authenticated by test:tester, I can't read/write to that container. -- _‘Esta mensagem é direcionada apenas para os endereços constantes no cabeçalho inicial. Se você não está listado nos endereços constantes no cabeçalho, pedimos-lhe que desconsidere completamente o conteúdo dessa mensagem e cuja cópia, encaminhamento e/ou execução das ações citadas estão imediatamente anuladas e proibidas’._ * **‘Apesar do Magazine Luiza tomar todas as precauções razoáveis para assegurar que nenhum vírus esteja presente nesse e-mail, a empresa não poderá aceitar a responsabilidade por quaisquer perdas ou danos causados por esse e-mail ou por seus anexos’.*

1 0

[neutron][antelope] neutron has error "/neutron-rootwrap: Unauthorized command: ip netns" after switch from openvswitch to linuxbridge
by dieter.dorra＠hsnr.de 25 Jan '24

25 Jan '24

Initially I've installed Antelope with openvswitch as described in the docs, but after switching back to linuxbridge neutron fails with errors on control: neutron-l3-agent.log: 2024-01-23 21:54:07.364 192544 ERROR neutron_lib.callbacks.manager neutron_lib.exceptions.ProcessExecutionError: Exit code: 99; Cmd: ['ip', 'netns', 'exec', 'qrouter-ce46ba37-9b08-4c08-a31c-0d38ff3d1438', 'env', 'PROCESS_TAG=haproxy-ce46ba37-9b08-4c08-a31c-0d38ff3d1438', 'haproxy', '-f', '/var/lib/neutron/ns-metadata-proxy/ce46ba37-9b08-4c08-a31c-0d38ff3d1438.conf']; Stdin: ; Stdout: ; Stderr: /usr/bin/neutron-rootwrap: Unauthorized command: ip netns exec qrouter-ce46ba37-9b08-4c08-a31c-0d38ff3d1438 env PROCESS_TAG=haproxy-ce46ba37-9b08-4c08-a31c-0d38ff3d1438 haproxy -f /var/lib/neutron/ns-metadata-proxy/ce46ba37-9b08-4c08-a31c-0d38ff3d1438.conf (no filter matched) 2024-01-23 21:54:07.364 192544 ERROR neutron_lib.callbacks.manager neutron-dhcp-agent.log 2024-01-23 21:58:38.754 192061 ERROR neutron.agent.linux.utils [None req-64a0a2f6-ec71-4288-900f-f86f0bd903e0 - - - - - -] Exit code: 99; Cmd: ['ip', 'netns', 'exec', 'qdhcp-ce84c378-6260-455f-8816-bb1d640aa42c', 'env', 'PROCESS_TAG=haproxy-ce84c378-6260-455f-8816-bb1d640aa42c', 'haproxy', '-f', '/var/lib/neutron/ns-metadata-proxy/ce84c378-6260-455f-8816-bb1d640aa42c.conf']; Stdin: ; Stdout: ; Stderr: /usr/bin/neutron-rootwrap: Unauthorized command: ip netns exec qdhcp-ce84c378-6260-455f-8816-bb1d640aa42c env PROCESS_TAG=haproxy-ce84c378-6260-455f-8816-bb1d640aa42c haproxy -f /var/lib/neutron/ns-metadata-proxy/ce84c378-6260-455f-8816-bb1d640aa42c.conf (no filter matched) Any help appreciated.

2 2

Credentials in DEBUG log
by Max Harmathy 25 Jan '24

25 Jan '24

Hi, I am using the python sdk. If I set the loglevel to DEBUG then credentials will land in the log output. Is there a way to have the credentials filtered out? Max

2 1

[largescale-sig] Ops Deep Dive: YOU propose the next episodes!
by Thierry Carrez 25 Jan '24

25 Jan '24

Hi everyone, You may be familiar with the Large Scale SIG's "Ops Deep Dive" series on OpenInfra Live[1], where our recurring hosts (Arnaud Morin, Mohammed Naser, Felix Huttner and Belmiro Moreira) discuss with operator guests the details of their large scale OpenStack deployment or a given operational topic. [1] https://openinfra.dev/live/#all-episodes For 2024, we want to open things up a bit. If YOU have a large scale deployment that you would like to discuss with our hosts, or if YOU have an idea of an operational challenge that you would like to discuss with your peers (and you have secured their interest in joining), please submit your idea to https://ideas.openinfra.live and we'll consider it during our next Large Scale SIG meeting. Hope to see you next on the Ops Deep Dive ! -- Thierry Carrez (ttx)

1 0

[glalnce][ceph] delete snapshot after creating instance
by Satish Patel 24 Jan '24

24 Jan '24

Folks, I have two openstack clouds and both have their own Ceph backend storage.I am trying to migrate instances from openstack A to openstack B. 1. Take a snapshot from A 2. Export snapshot and import to B 3. Create instance on B 4. Delete snapshot - (I am getting error because its in-use) Because it has a parent reference to that volume. How do I remove the reference so it will let me delete a snapshot. Reason I am asking is because I have so many VMs to migrate and don't want glance to have 100s of entities in those snapshots. What is the alternative here? I can try qcow2 if that is the final solution to make it clean. # rbd -p volumes info volume-f2b2aec2-cc57-49e5-aca1-54b5a7ee9f3a rbd image 'volume-f2b2aec2-cc57-49e5-aca1-54b5a7ee9f3a': size 40 GiB in 5120 objects order 23 (8 MiB objects) snapshot_count: 0 id: 5473c827864fed block_name_prefix: rbd_data.5473c827864fed format: 2 features: layering, exclusive-lock, object-map, fast-diff, deep-flatten op_features: flags: create_timestamp: Fri Jan 19 19:03:25 2024 access_timestamp: Wed Jan 24 15:51:04 2024 modify_timestamp: Wed Jan 24 15:52:40 2024 parent: images/3708f961-fb74-49f1-ab9b-40cf7954abed@snap overlap: 40 GiB

3 16

A questionnaire for unmaintained package users
by zhiqingzhong＠link.cuhk.edu.cn 24 Jan '24

24 Jan '24

1 0

[kolla][trove] Best practice to make guest-agent communicate with RPC
by Satish Patel 24 Jan '24

24 Jan '24

Folks, I am trying to find a kolla-ansible doc related to how to implement trove in production with best practices. Especially when a guest-agent (running inside VM) talks to RPC service. How are other folks doing in their environments? In most cases RPC is an internal service and not visible to any guest VMs. Looking for some guidance.

3 21

[Kolla-ansible][Ironic] Ironic PXE boot not working
by Jayesh Chaudhari 24 Jan '24

24 Jan '24

Hi, I have deployed following setup Openstack Version : Yoga Deployment Method : Kolla-ansible Node Provisioning tool : MAAS Now I am trying to integrate ironic service in it for BareMetal as a Service. My configuration for ironic in global.yml is following: enable_ironic: "yes" ironic_dnsmasq_interface: "ens2f0" #10G interface ironic_dnsmasq_dhcp_range: "10.145.50.50,10.145.50.60,255.255.255.192" ironic_cleaning_network: "ironic_provisioning_network" ironic_dnsmasq_default_gateway: 10.145.50.1 ironic_dnsmasq_boot_file: "pxelinux.0" ironic_inspector_kernel_cmdline_extras: ['ipa-lldp-timeout=90.0', 'ipa-collect-lldp=1'] ironic_http_port: "8089" ironic_enable_keystone_integration: "yes" My deployment is successful, but when I try to create openstack instance with baremetal flavor it stuck in pxe boot. If I use my 1G interface as ironic_dnsmasq_interface it pxe boot from MAAS. Is there any way I can use MAAS with ironic ? or how I can proceed with 10G interface? Thanks, Jayesh

1 0

[kolla-ansible][senlin] dashboard help
by garcetto 24 Jan '24

24 Jan '24

good afternoon, i set enable_senlin: "yes" on globals.yaml, but see no senlin dashboard, my fault? thank you.

2 1

[largescale-sig] Next meeting: January 24, 16utc
by Thierry Carrez 24 Jan '24

24 Jan '24

Hi everyone, The Large Scale SIG will be meeting this Wednesday in #openstack-operators on OFTC IRC, at 16UTC, our EU+US-friendly time. You can doublecheck how that UTC time translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20240124T16 Feel free to add topics to the agenda: https://etherpad.opendev.org/p/large-scale-sig-meeting Regards, -- Thierry Carrez

1 1

[keystone] meeting canceled this week (24-Jan-2024)
by Dave Wilde 24 Jan '24

24 Jan '24

Hi folks, Sorry for the late notice but I unfortunately need to cancel the Keystone weekly meeting for today. Please add any agenda items here [1] and ping me via email or at d34dh0r53 on IRC. Thanks! 1: https://etherpad.opendev.org/p/keystone-weekly-meeting /Dave

1 0

[ops] help with openstack horizon
by Shubham Yadav 24 Jan '24

24 Jan '24

I have a question, is it possible to set in Horizon just one language - English? I mean that if you are new and login to openstack it will automatically set the language according to your browser. This could be sometimes confusing when you want to navigate by phone somebody with low expertise in OpenStack. is there any conf i can add in my horizon or theres any other way that stops browser from changing language in horizon? Hope to hear from you soon Thank You!

1 0

Re:RE: Mapping local SSD to virtual machine persistently
by 龚永生 24 Jan '24

24 Jan '24

How about ephemeral storage with the ssd? 龚永生浙江九州未来信息科技有限公司 99CLOUD Co. Ltd. 邮箱（Email）：gong.yongsheng(a)99cloud.net 地址：海淀区上地六街研华大厦5层南侧手机（Mobile)：+86-18618199879 公司网址（WebSite）：http://99cloud.net 发件人：Sang Tran Quoc <SangTQ8(a)fpt.com> 发送日期：2024-01-24 11:06:28 收件人：Karl Kloppenborg <kkloppenborg(a)resetdata.com.au>,"smooney(a)redhat.com" <smooney(a)redhat.com>,"openstack-discuss(a)lists.openstack.org" <openstack-discuss(a)lists.openstack.org> 抄送人：Cuong Truong Tran Quoc <CuongTTQ(a)fpt.com> 主题：RE: Mapping local SSD to virtual machine persistently Hi @smooney@redhat.com , and @Karl Kloppenborg Thanks for your helps. I also have questions regarding to your suggestion as below: @smooney@redhat.com Did you mention about cinder-volume with LVM driver? I tested it before, but the performance does not meet the requirement cause of the transportation of data via iSCSI protocol and it hard to compare with direct attach via libvirt. Your second idea are using flavor with ephemeral disk, right? @Karl Kloppenborg Your workaround suggestion looks good to me; I will search around for the accurate RabbitMQ event as you mentioned. Best Regards Sang. From: Karl Kloppenborg <kkloppenborg(a)resetdata.com.au> Sent: Wednesday, January 24, 2024 6:45 AM To: smooney(a)redhat.com; Sang Tran Quoc <SangTQ8(a)fpt.com>; openstack-discuss(a)lists.openstack.org Subject: Re: Mapping local SSD to virtual machine persistently Hey guys, One suggestion which might help you as a work around: Libvirt regenerates the xml’s based on nova receiving events via the RabbitMQ event bus. One option (which will require a bit of programming on your part) is to listen to the events that might impact the libvirt generation and execute the commands on your behalf. This would necessitate knowing/storing that VM->Device mapping somewhere, i.e a database. Thanks, Karl. From: smooney(a)redhat.com <smooney(a)redhat.com> Date: Tuesday, 23 January 2024 at 10:04 pm To: Sang Tran Quoc <SangTQ8(a)fpt.com>, openstack-discuss(a)lists.openstack.org <openstack-discuss(a)lists.openstack.org> Subject: Re: Mapping local SSD to virtual machine persistently On Tue, 2024-01-23 at 10:30 +0000, Sang Tran Quoc wrote: > > Hello community, > > I've got a question related to the raw device mapping to the OpenStack virtual machine. The situation is I have > several SSDs along with my compute node and I would like to attach these SSDs to my virtual machine for enhancing the > disk performance. My current solution is using command "virsh attach-disk <dom> <host-device> <guest-device>" but it > not persistently and need to manual re-attach after hard-rebooting which lead to re-generate the xml vm structure. > So, I wonder if there is an official solution for my problems. Thank you and welcome for every help in our community. This is currenly not supported in openstack. we have discussed adding local storage functionality to nova in the past but its non triavial since we woudl need a new rest api to allow attaching/detaching them and schduelr intengration. unfortuntly that means that today you cannot achive your goal. if you need to attach addtional storage dynamically your only option is cinder volumes. you can provide addtional storage in the flavor but only statical > > Best regards, > Sang Tran

3 2

[Glance] Weekly Meeting Cancelled for this Week
by Pranali Deore 24 Jan '24

24 Jan '24

Hello, As discussed during the last meeting[1], the glance meeting is cancelled for this week. See you next week ! [1]: https://meetings.opendev.org/irclogs/%23openstack-meeting/%23openstack-meet… Thanks & Regards, Pranali D.

1 0

Re: Security Group
by Rodolfo Alonso Hernandez 24 Jan '24

24 Jan '24

Hello Benyamin: Please check the Neutron security group documentation. What you are doing is to filter by an inport, traffic type (IPv4, TCP) and a dst port. This is something that you can done using the SG API: https://docs.openstack.org/python-openstackclient/pike/cli/command-objects/… . Regards. On Wed, Jan 24, 2024 at 10:15 AM benyamin sam khanyani < bsamkhaniyani(a)gmail.com> wrote: > Hello Rodolf: > > As an example, I have added an ACL rule by following command: > > ovn-nbctl acl-add c56beb58-5eca-4c16-ad75-b28ff2b33b83 to-lport 1002 > "outport == @pg_55bcfed5_3355_4de7_a5c3_53f256f83e81 && ip4 && ip4.src == > 0.0.0.0/0 && tcp && tcp.dst == 555" allow-related > > I can see it when I run the "ovn-nbctl list acl" command and it works > properly in my environment. Now, I want to make it permanent but as you > said, it's not possible and the only source of truth is Neutron. > > As a result, none of ovn-nbctl commands work permanently and everything > must be changed by Neutron. So, I want to ask you if it is possible to have > a way to make these commands permanent. I think the db_sync function can be > enhanced and it can facilitate networking in OpenStack because there are a > variety of changes we can apply by ovn-nbctl commands and these are not > possible by using Neutron. > > Best, > Ben > > On Tue, 23 Jan 2024 at 20:08, Rodolfo Alonso Hernandez < > ralonsoh(a)redhat.com> wrote: > >> Hello Benyamin: >> >> Can you specify what rules are you manually creating the OVN database? >> >> The code you are referring to is the sync tool. The goal of this tool is >> to sync both databases, OVN and Neutron. But please remember that Neutron >> is the CMS, is the only source of truth and it controls the network >> backend, in this case OVN. Any definition should be done in Neutron and any >> manual change in the OVN database will be restored or the environment will >> fail. >> >> Regards. >> >> On Tue, Jan 23, 2024 at 11:15 AM benyamin sam khanyani < >> bsamkhaniyani(a)gmail.com> wrote: >> >>> Thanks for your comprehensive reply. >>> >>> I apply completely similar rules to what Neutron installs on OVN >>> Northbound Database and I think it is compatible with LB, OVS, and OVN. I >>> think the main issue is the sync mechanism between Neutron DB and OVN >>> Northbound DB[1](Line 244). Clearly, It's not a bug but I think this >>> function can be enhanced in order to support changes which can be defined >>> directly in OVN Northbound DB. As there are a variety of functionalities in >>> ovn-nbctl and ovn-sbctl command line tools, I believe that it could be >>> beneficial. >>> >>> [1] >>> https://github.com/openstack/neutron/blob/dad8c3fecc4e97764a92f558d9df510fa… >>> >>> >>> On Mon, 22 Jan 2024 at 18:31, Rodolfo Alonso Hernandez < >>> ralonsoh(a)redhat.com> wrote: >>> >>>> Hello Benyamin: >>>> >>>> I'm guessing from your mail that you are referring to Neutron security >>>> groups and you are using ML2/OVN. Any SG rule should be defined in Neutron, >>>> not in OVN directly. The Neutron SG rules are translated to ACLs and >>>> applied to a port group. If you are interested in how this is done, please >>>> check [1]. >>>> >>>> If you want to add any new functionality to the SG rules, you should >>>> create a LP bug [2] with a RFE. This RFE should be a high level description >>>> of what want to implement. Be aware that we have multiple mechanism drivers >>>> in-tree: LB, OVS and OVN. This feature should be compatible with all of >>>> them. The RFE can be discussed during the Neutron drivers meetings [3]. >>>> >>>> Regards. >>>> >>>> [1] >>>> https://github.com/openstack/neutron/blob/master/neutron/plugins/ml2/driver… >>>> [2]https://bugs.launchpad.net/neutron/ >>>> [3]https://meetings.opendev.org/#Neutron_drivers_Meeting >>>> >>>> On Mon, Jan 22, 2024 at 3:41 PM benyamin sam khanyani < >>>> bsamkhaniyani(a)gmail.com> wrote: >>>> >>>>> Hi, >>>>> >>>>> I am working on the security group and aim to extend its functionality >>>>> by applying custom rules based on source and destination ports, arbitrary >>>>> match criteria, actions, and so on. I did it by using ovn-nbctl commands >>>>> and everything worked well. Unfortunately, the only issue is that I can not >>>>> see my custom rules in MariaDB and I didn't find any other solution for >>>>> defining security group rules with my desired options. So, I want to ask >>>>> you how I can tackle this issue? >>>>> >>>>> Regards, >>>>> Benjamin Sam >>>>> >>>>

1 0

Instances shutting themselves down
by Karera Tony 24 Jan '24

24 Jan '24

Hello Team, I have an openstack environment with 4 compute Nodes however yesterday out of the blue, the Instances on one of the compute nodes started shutting themselves down. Then I realized the the compute service was disabled when I checked in Horizon. I enabled it and restarted the instances and all was well but I cant figure out what caused it. I have attached the nova_compute logs here incase someone would like to support https://paste.openstack.org/show/bxqpgjvqT3DlOYWoeejc/ Regards Tony Karera

2 1

Mapping local SSD to virtual machine persistently
by Sang Tran Quoc 23 Jan '24

23 Jan '24

Hello community, I've got a question related to the raw device mapping to the OpenStack virtual machine. The situation is I have several SSDs along with my compute node and I would like to attach these SSDs to my virtual machine for enhancing the disk performance. My current solution is using command "virsh attach-disk <dom> <host-device> <guest-device>" but it not persistently and need to manual re-attach after hard-rebooting which lead to re-generate the xml vm structure. So, I wonder if there is an official solution for my problems. Thank you and welcome for every help in our community. Best regards, Sang Tran

3 3

Openstack-Ansible External Networking OVN (Br-ex)
by jjjamesg 23 Jan '24

23 Jan '24

I can't for the life of me get external connectivity working, openstack itself works i just cant get external connectivity working, I can see ovs has created br-ex with bond1 attached. ovs-vsctl get open . external_ids:ovn-bridge-mapping shows: "physnst1:br-ex" I have tried creating the network with both: openstack network create --share --external --provider-physical-network physnet1 --provider-network-type vlan --provider-segment 233 public openstack network create --share --external --provider-physical-network physnet1 --provider-network-type flat publicnet-flat Only errors i can see is in the neutron container when i try and either create an instance on said network or attach a fip is is: (similar errors from a vlan type network this is just the error i pulled at the time) ERROR neutron.plugins.ml2.managers [req-de7f1cb8-ac8e-4dd6-ad2a-e14afdb152b5 req-c6a2aaff-ccf9-4ef3-9ef 7-1a8e4c7a1e41 9c27de6bdc4449abbbbcd5e5c4951bb9 2fced1ff77f5428eb2b63879bdd608cc - - default default] Failed to bind port 03cc1708-d4a2-4b11-bca2-40ebe0acff60 on host 02 for vnic_type normal using segments [{'id': '2ef64682-b5ff-472b-935d-a3c2b615d70f', 'network_type': 'flat', 'physical_network': 'physnet1', 'segmentation_id': None, 'network_id': '52b4f4e9-47f3-431b-8c45-ec8cc17f561d'}] WARNING neutron.scheduler.dhcp_agent_scheduler [None req-aafa81d9-479c-4f56-be6f-54d4ab3b42aa 1b29a 2297a224cdcaaba84e0eac30205 bafabcf2414d4adf98cab165c3f3de12 - - default default] No more DHCP agents WARNING neutron.api.rpc.agentnotifiers.dhcp_rpc_agent_api [None req-aafa81d9-479c-4f56-be6f-54d4ab3b42aa 1b29a2297a224cdcaaba84e0eac30205 bafabcf2414d4adf98cab165c3f3de12 - - default default] Unable to schedule network 5fa049f5-0ed4-4287-9c63-dd753c853c35: no agents available; will retry on subsequent port and subnet creation events. I just cant figure out WHY this isn't working.. Below is my config: ############# ### /etc/network/interfaces: ############# auto bond1 iface bond1 inet manual bond-slaves eno2 eno4 bond-mode 802.3ad bond-miimon 100 bond-downdelay 200 bond-updelay 200 bond-lacp-rate 1 mtu 9000 auto bond1.30 iface bond1.30 inet manual vlan-raw-device bond1 ## (br-pubv is for my public vip) auto bond1.232 iface bond1.232 inet manual vlan-raw-device bond1 auto br-overlay iface br-overlay inet static bridge_stp off bridge_waitport 0 bridge_fd 0 bridge_ports bond1.30 address auto br-pubv iface br-pubv inet static address gateway bridge_stp off bridge_waitport 0 bridge_fd 0 bridge_ports bond1.232 ############# ### openstack_user_config.yml: ############# - network: container_bridge: "br-ex" network_interface: "bond1" type: "vlan" range: "232:332" net_name: "physnet1" group_binds: - neutron_ovn_controller ############# ### user_variables.yml ############# neutron_plugin_type: ml2.ovn neutron_plugin_base: - ovn-router - qos - neutron.services.ovn_l3.plugin.OVNL3RouterPlugin - neutron_dynamic_routing.services.bgp.bgp_plugin.BgpPlugin - vpnaas - metering - firewall_v2 neutron_ml2_drivers_type: "vlan,local,geneve,flat" neutron_provider_networks: network_types: "geneve" network_geneve_ranges: "1:1000" network_vlan_ranges: "physnet1" network_mappings: "physnet1:br-ex" network_interface_mappings: "br-ex:bond1" Bond1 is a trunk port (no native vlan), that has access to both overlay vlan and the 232:332 vlan range which both work when setting either network as a bridge on bond1 so connectivity is there. I have network-northd/gateway_hosts defined as well as: neutron_neutron_conf_overrides: ovn: enable_distributed_floating_ip: True openstack_host_specific_kernel_modules: - name: "openvswitch" pattern: "CONFIG_OPENVSWITCH" This should by all accounts just work, but for some reason for me it's not, what steps have i missed?

1 0

Re: Security Group
by Rodolfo Alonso Hernandez 23 Jan '24

23 Jan '24

Hello Benyamin: Can you specify what rules are you manually creating the OVN database? The code you are referring to is the sync tool. The goal of this tool is to sync both databases, OVN and Neutron. But please remember that Neutron is the CMS, is the only source of truth and it controls the network backend, in this case OVN. Any definition should be done in Neutron and any manual change in the OVN database will be restored or the environment will fail. Regards. On Tue, Jan 23, 2024 at 11:15 AM benyamin sam khanyani < bsamkhaniyani(a)gmail.com> wrote: > Thanks for your comprehensive reply. > > I apply completely similar rules to what Neutron installs on OVN > Northbound Database and I think it is compatible with LB, OVS, and OVN. I > think the main issue is the sync mechanism between Neutron DB and OVN > Northbound DB[1](Line 244). Clearly, It's not a bug but I think this > function can be enhanced in order to support changes which can be defined > directly in OVN Northbound DB. As there are a variety of functionalities in > ovn-nbctl and ovn-sbctl command line tools, I believe that it could be > beneficial. > > [1] > https://github.com/openstack/neutron/blob/dad8c3fecc4e97764a92f558d9df510fa… > > > On Mon, 22 Jan 2024 at 18:31, Rodolfo Alonso Hernandez < > ralonsoh(a)redhat.com> wrote: > >> Hello Benyamin: >> >> I'm guessing from your mail that you are referring to Neutron security >> groups and you are using ML2/OVN. Any SG rule should be defined in Neutron, >> not in OVN directly. The Neutron SG rules are translated to ACLs and >> applied to a port group. If you are interested in how this is done, please >> check [1]. >> >> If you want to add any new functionality to the SG rules, you should >> create a LP bug [2] with a RFE. This RFE should be a high level description >> of what want to implement. Be aware that we have multiple mechanism drivers >> in-tree: LB, OVS and OVN. This feature should be compatible with all of >> them. The RFE can be discussed during the Neutron drivers meetings [3]. >> >> Regards. >> >> [1] >> https://github.com/openstack/neutron/blob/master/neutron/plugins/ml2/driver… >> [2]https://bugs.launchpad.net/neutron/ >> [3]https://meetings.opendev.org/#Neutron_drivers_Meeting >> >> On Mon, Jan 22, 2024 at 3:41 PM benyamin sam khanyani < >> bsamkhaniyani(a)gmail.com> wrote: >> >>> Hi, >>> >>> I am working on the security group and aim to extend its functionality >>> by applying custom rules based on source and destination ports, arbitrary >>> match criteria, actions, and so on. I did it by using ovn-nbctl commands >>> and everything worked well. Unfortunately, the only issue is that I can not >>> see my custom rules in MariaDB and I didn't find any other solution for >>> defining security group rules with my desired options. So, I want to ask >>> you how I can tackle this issue? >>> >>> Regards, >>> Benjamin Sam >>> >>

1 0

[ops] help with multiattach volume type in cinder
by Shubham Yadav 23 Jan '24

23 Jan '24

Hi, i have a question/issue related to multiattach feature in cinder i have an openstack cluster and i have configured multiattach in the openstack cinder now when i create 1 volume (with volume type multiattach) and attach it to 2 instances test1 and test2 *on test1 sudo mkfs -t ext4 /dev/sdb sudo mkdir /mnt/mydisk sudo mount /dev/sdb /mnt/mydisk touch /mnt/mydisk/shared_file echo "This is some shared content" | sudo tee /mnt/mydisk/shared_fileon test2 sudo mkdir /mnt/mydisksudo mount /dev/sdb /mnt/mydiskls /mnt/mydisk/cat /mnt/mydisk/shared_file* i can see the shared_file now when i add new files on test1 im not able to see it on test2 untill i unmount the volume with directory and mount the directory again to the volume on test2. what could be the solution for it? how can i make the volume share datas instantly between all the instances connected to the volume i have tried with ext4 and xfs file system Hope to hear from you soon Thank you!

2 1

[tc] Next Technical Committee Meeting Jan 23 2024 1800 UTC
by Jay Faulkner 22 Jan '24

22 Jan '24

Hi all, The next meeting of the Technical Committee will be held on Tuesday, Jan 23 2024 at 1800 UTC. It will be held in #openstack-tc on OFTC. The proposed agenda is: Agenda - Roll call - Follow up on tracked action items - JayF - Email Skyline PTL about status as an emerging project; ask about future plans and investments. - slaweq - Propose patches to retire Monasca - Reach out to potential new outside-OpenStack Monasca maintainers, instruct on next-steps for reviving it in a new OpenDev namespace. - gmann - Attempt, again, to engage Senlin maintainer about next steps for the inactive Senlin project. - Gate health check - Implementation of Unmaintained branch statuses - 2024.1 TC Tracker - https://etherpad.opendev.org/p/tc-2024.1-tracker - Open Discussion and Reviews Thanks, Jay Faulkner OpenStack TC Chair

1 0