February 2024 - openstack-discuss

OpenStack SAML Integration and Application Cred, CLI usage
by Nazan Cengiz 15 Feb '24

15 Feb '24

Hello I want to do SAML integration in OpenStack keystone. How can SAML integration be done? How can I use Application credential and OpenStack CLI with SAML-OpenStack integration? Environment version openstack:stein keystone: 15.0.1-0ubuntu1~cloud0 keystone federation: SAML Authentication Flows: SAML2.0 WebSSO Apache authentication method: Mellon

1 0

[neutron] qrouter namespace missing in controllers - opensack ussuri
by keshav bareja 15 Feb '24

15 Feb '24

Hi Team We are experiencing an issue of reachability in some of the projects, instances in the project are not reachable. It is a project specific issue. I tried to check router details and could observe . For the project having issues, I checked the router and could see that the qrouter namespace is not present in the command "ip netns" in any of the controllers. Problem started after a reboot of one controller. Do any one has faced a similar issue and any suggestions to recover this? Regards Keshav Bareja

2 2

[Kolla][Ironic] Ironic node validation failed
by Jayesh Chaudhari 15 Feb '24

15 Feb '24

Hi All, I am following the below document for implementing Ironic in my Kolla-Ansible Cloud which is on yoga version. https://docs.openstack.org/kolla-ansible/yoga/reference/bare-metal/ironic-g… I can add a baremetal node with this in the "baremetal node list" and make it available. But when I am trying to create a nova server it fails trying to find the host. I tried to troubleshoot and find that "openstack baremetal node validate <nodeid>" command shows 1. bios - Driver ipmi does not support bios (disabled or not implemented) 2. console - Driver ipmi does not support console (disabled or not implemented) 3. deploy - Node failed to validate deploy image info. Some parameters were missing. Missing are ['instance_info.image_source'] 4. inspect - Driver ipmi does not support inspect (disabled or not implemented) 5. raid - Driver ipmi does not support raid (disabled or not implemented) 6. rescue - Driver ipmi does not support rescue (disabled or not implemented) Can you please guide me with documentation for setting these options. Or correct me if I am missing anything. Also above documents show steps to create deploy-vmlinuz and deploy-initrd only. Please guide me for steps creating deploy_kernel and deploy_ramdisk. Thanks, Jayesh

3 4

Encountering a live migration issue on Kolla Ansible Deployment
by khurshidsx＠gmail.com 15 Feb '24

15 Feb '24

Hello all, I recently set up a cluster using Kolla Ansible, but I'm encountering a live migration issue. I would appreciate any advice or insights you can provide. Error Message is rule:create_port_binding is disallowed by policy Neutron server returns request_ids: ['req-dce2d22c-349b-4759-a0f2-8bebbfbb1aee'] Here are some logs: 2024-01-25 04:55:51.599 23 INFO neutron.api.v2.resource [req-a380e1bc-a94b-4935-be0d-76fcc94becc4 req-dce2d22c-349b-4759-a0f2-8bebbfbb1aee 636854b888d7441eafcd21255e1378f1 b07c4b6d7b2241c187ed84f30b163817 - - default default] create failed (client error): Access was denied to this resource. 2024-01-25 04:55:51.601 23 INFO neutron.wsgi [req-a380e1bc-a94b-4935-be0d-76fcc94becc4 req-dce2d22c-349b-4759-a0f2-8bebbfbb1aee 636854b888d7441eafcd21255e1378f1 b07c4b6d7b2241c187ed84f30b163817 - - default default] 192.168.252.254,192.168.252.12 "POST /v2.0/ports/e70fab29-d0cd-4db4-8fbc-a572da1bff64/bindings HTTP/1.1" status: 403 len: 308 time: 0.0207033 Neutron server returns request_ids: ['req-dce2d22c-349b-4759-a0f2-8bebbfbb1aee'] 2024-01-25 04:55:51.815 19 ERROR nova.conductor.manager Neutron server returns request_ids: ['req-dce2d22c-349b-4759-a0f2-8bebbfbb1aee'] 2024-01-25 04:55:51.815 19 ERROR nova.conductor.manager Neutron server returns request_ids: ['req-dce2d22c-349b-4759-a0f2-8bebbfbb1aee'] Neutron server returns request_ids: ['req-dce2d22c-349b-4759-a0f2-8bebbfbb1aee']: nova.exception.Forbidden: rule:create_port_binding is disallowed by policy

3 5

The issue of not being able to create application credentials with federated users
by Nazan Cengiz 15 Feb '24

15 Feb '24

Hello, I implemented Cyberark integration in OpenStack. I used the SAML protocol during the integration. I created user groups in Active Directory and defined these groups in Openstack. I added users to the created groups. My goal is to send requests to the OpenStack API by creating application credentials. However, the federated user added to the groups created as a result of the Cyberark integration cannot create and use application credentials. It gives the following error: Unable to create application credential. Inventory openstack:stein keystone: 15.0.1-0ubuntu1~cloud0 Can you help me solve this problem? Thanks

1 0

[cinder] 2024.1 Caracal Midcycle-2 Summary
by Rajat Dhasmana 15 Feb '24

15 Feb '24

Hello Argonauts, Following is the summary of the 2024.1 Caracal Midcycle-2 held on 14th February, 2024. https://wiki.openstack.org/wiki/CinderCaracalMidCycleSummary#Session_Two:_R… Please go through the discussion points and action items assigned to you and let me know if any modification is required. Thanks Rajat Dhasmana

1 0

[elections][tc] Self-nomination for a TC seat
by Sylvain Bauza 15 Feb '24

15 Feb '24

Howdy folks, That's now been a long time I'm thinking about running for a TC seat but I never really thought about it until today. Now, I think this is the best time for me asking you to accept me as a TC member and I'll explain why below. First, in case you don't know me yet, I'm Sylvain Bauza (bauzas on IRC), working on OpenStack since... wow, 11 years already ? I first started to test OpenStack Diablo and Essex for a SME company but eventually moved to another (and then another) position and became contributor, first to the Blazar (that time named Climate) project and then Nova for 10 years now, eventually becoming nova-core and PTL. Time flies and now I'm still there, happy with what OpenStack became. Of course, it changed. But honestly, I haven't seen more operators using it previously than now, which means that we succeeded as a team to make OpenStack useful for our users. As a Nova PTL for the previous cycles, I know how important it is to get feedback from our operators and how much this is crucial to provide help for them. The last discussions I had with the community led to me think that this motto needs to be addressed as a whole and not only on a per-project basis, hence convincing myself that I should run for a TC seat. As someone evolving from a operations position in a SME company to a core developer working with large cloud deployments, I wish I could help the TC driving some efforts into shortening the feedback loop within the community. I'd also want to help the TC provide some guidance on the new SLURP release cadence model to all the projects so that we could really achieve a skip-release upgrade that would benefit to our operators. There are a couple of other stuff I do really care and I wish to help them. CI gate stability is one of them. Having transient failures close to a milestone is not a good experience for us and we need to really address those failures as top priorities when they occur. We should somehow recognize the very fews who dedicate time on chasing those issues and fixing them, as their contributors are mostly valuable, since not a single code of code can't merge when a gate is down. Maintaining our code is another important aspect to me. Recent experiences on not-so-well-maintained dependencies led us force to evaluate all the options and those decisions aren't easy to make. As someone caring about maintaining our code for stable releases, I wish I could help the TC to correctly identify risks and benefits of breaking changes and evaluate the impact it may have on our feature delivery. Enough talk, I'll end up here, saying that after those 10 years in the community, I'm still enjoying being part of it and how much I do love working with all of you. Cheers, -Sylvain

1 0

nova-compute error
by Rohit Sansiya 14 Feb '24

14 Feb '24

Hii Sir, my all 3 compute nodes are down. and error is shown " 2024-02-15 10:27:36.467 4154697 ERROR oslo.messaging._drivers.impl_rabbit [req-650474a9-f2f3-4e05-ade4-cbedf826d16e - - - - -] Connection failed: timed out (retrying in 5.0 seconds): socket.timeout: timed out" [image: image.png] Your message is ready to be sent with the following file or link attachments: Rohit Sansiya https://sites.google.com/view/rpgcloud/research-india Note: To protect against computer viruses, e-mail programs may prevent sending or receiving certain types of file attachments. Check your e-mail security settings to determine how attachments are handled.

1 0

[qa][centos] devstack-platform-centos-9 jobs failing
by Martin Kopec 14 Feb '24

14 Feb '24

Hello, centos-9 jobs started failing a week ago for various reasons, most often I see that tempest tests failed with 'No valid host found' https://zuul.openstack.org/builds?job_name=tempest-full-centos-9-stream&job… Any ideas what went wrong with centos? Thanks, -- Martin Kopec Principal Software Quality Engineer Red Hat EMEA IM: kopecmartin

4 3

Cinder-volume
by Rohit Sansiya 14 Feb '24

14 Feb '24

Hi sir, I am unable to attach and detach the volume through gui, When I tried so it was stuck and error shows that it is unable to attach or detach. help me how to attach and detach through gui. but I can attach and detach through cmd. Your message is ready to be sent with the following file or link attachments: Rohit Sansiya https://sites.google.com/view/rpgcloud/research-india Note: To protect against computer viruses, e-mail programs may prevent sending or receiving certain types of file attachments. Check your e-mail security settings to determine how attachments are handled.

3 3