February 2024 - openstack-discuss

[keystone] Weekly meeting canceled 21-Feb-24
by Dave Wilde 21 Feb '24

21 Feb '24

Hi folks, Due to a family emergency I’m not able to host the keystone weekly meeting this week and so I am canceling it. Please reach out via email if you need anything from me as my ability to access IRC is limited right now. Thanks! /Dave

1 0

Openstack ansible service variables
by Gk Gk 21 Feb '24

21 Feb '24

Hi, We have an OSA setup. I see that common-playbooks/haproxy-service-config.yml has the following: --- - hosts: "{{ service_group }}" gather_facts: false run_once: true tasks: - name: "Temporarily copy haproxy_service_configs value from {{ service_group }} to haproxy_all" add_host: name: "{{ item }}" haproxy_service_configs: "{{ hostvars[inventory_hostname][service_variable] }}" with_items: "{{ groups['haproxy_all'] }}" How does the openstack ansible collect haproxy configuration for a specific service as in this case for repo service ? Where is this defined in the code ? How does it even generate specific haproxy variables for each service ? How does it specifically know what haproxy variables to collect ?

2 1

Haproxy and rabbitmq
by Gk Gk 21 Feb '24

21 Feb '24

Hi, We have the latest version of openstack setup. The rabbitmq backend health check is getting successful even though the curl to its ssl url is failing as shown below: ---- backend rabbitmq_mgmt-back mode http balance leastconn stick-table type ipv6 size 256k expire 10s store http_err_rate(10s) http-request track-sc0 src http-request deny deny_status 429 if { sc_http_err_rate(0) gt 20 } !{ src 192.168.0.0/16 } !{ src 172.16.0.0/12 } !{ src 10.0.0.0/8 } option forwardfor option httpchk HEAD / HTTP/1.0\r\nUser-agent:\ osa-haproxy-healthcheck server rabbit_mq_container-527affef <ip>:15671 check port 15671 inter 12000 rise 3 fall 3 ssl check-ssl verify none server rabbit_mq_container-68b39094 <IP>:15671 check port 15671 inter 12000 rise 3 fall 3 ssl check-ssl verify none server rabbit_mq_container-83661288 <IP>:15671 check port 15671 inter 12000 rise 3 fall 3 ssl check-ssl verify none ------ But the ssl curl to its ip and port 15671 is failing: 1234567 curl -vvv 172.21.152.187:15671 * Trying 172.21.152.187:15671... * TCP_NODELAY set * connect to 172.21.152.187 port 15671 failed: Connection refused * Failed to connect to 172.21.152.187 port 15671: Connection refused * Closing connection 0 curl: (7) Failed to connect to 172.21.152.187 port 15671: Connection refused How then, the haproxy is still able to detect it as green and status ok in the haproxy stats page ?

3 6

How to enable VT in VM(Ubuntu22.04): Nested Virtualization.
by KK CHN 21 Feb '24

21 Feb '24

I am running an ubuntu VM (instance 22.04) on Esxi 7.0 virtualized platform. I am trying to create Linux cloud images on this ubuntu VM by installing virt-manager .. Reference: https://kifarunix.com/create-and-upload-custom-linux-image-into-openstack/?… But on my VM when I execute grep -iE 'vmx|svm' /proc/cpuinfo Returns 0 //means not CPU virtualization enabled ? modprobe: FATAL: Module l not found in directory /lib/modules/5.15.0-25-generic root@ubuntu-VM:/home/ubuntu# lscpu |grep Virtualization Virtualization type: full root@ubuntu-VM:/home/ubuntu# root@ubuntu-VM:/home/ubuntu# grep -iE 'vmx|svm' /proc/cpuinfo root@ubuntu-VM:/home/ubuntu# grep -c '(vmx|svm)' /proc/cpuinfo 0 root@ubuntu-VM:/home/ubuntu# grep -iE 'vmx|svm' /proc/cpuinfo root@ubuntu-VM:/home/ubuntu# root@ubuntu-VM:/home/ubuntu# How can I enable the virtualization support on this VM ?? What to do for Nested Virtualization support in this Virtual Machine ? Any hints welcome. Thank you Krish

4 5

neutron zed security group not applied on node
by Ionuț Bîru 21 Feb '24

21 Feb '24

Hi guys, I have an issue with neutron not applying on host the rules updates or when a new ip is added on the port. I'm using kolla-ansible to deploy Openstack with openvswitch and the only way I got it working is to switch in globals.yml neutron_legacy_iptables: 'yes' or to 'no' depending on what value I had it before for that host. [securitygroup] firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver I checked with: iptables -nL | grep ip When doesn't work nothing is returned. Switching to neutron_legacy_iptables yes or to, then checked again with the same command and I have output. I don't see any errors in logs. Ubuntu 20.04 on host with linux-hwe kernel 5.15.0-79-generic Do you guys have any ideas on how to fix that ? --- Ionuț Bîru - Hosterion

1 0

[tc][murano] Status of the murano project
by Takashi Kajinami 20 Feb '24

20 Feb '24

Hello, As I brought in another thread about yaql library maintenance[1], It seems murano project is not active now, based on the following points. * The changes merged during recent two years but all of these are gate fix * Its CI is currently broken and no one is trying to fix it * I tried reaching the current PTL by email or gerrit review but didn't get any feedback even after waiting for a few weeks I'm wondering if murano project should be added to the inactive projects, or at least its project health and plan needs to be reviewed by TC, before we include this to Caracal deliverables. # Though it might be too later to drop the deliverables now Thank you Takashi Kajinami irc: tkajinam [1] https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack…

4 15

[tc][powervmstacker-sig] Status of the PowerVMStacker SIG
by Takashi Kajinami 20 Feb '24

20 Feb '24

Hello, # I'm adding TC tag because this is a governance topic I happened to notice that none of the repositories[1] owned by the PowerVMStacker sig have not been updated for ~5 years. May I know the current status of this SIG ? The SIG list page[2] says this SIG is active but I don't think it's true now based on the update in these repos. If no one is actually working in the SIG then I'd suggest that we retire the SIG and its repositories. Note: It seems these repositories still have old stable branches(ocata, pike) and we may need some help from the release team with retirement of these branches. Thank you, Takashi Kajinami irc: tkajinam [1] https://opendev.org/openstack/ceilometer-powervm https://opendev.org/openstack/nova-powervm https://opendev.org/openstack/networking-powervm [2] https://governance.openstack.org/sigs/

2 3

Re: [Cinder] PTL non-candidacy
by Rajat Dhasmana 20 Feb '24

20 Feb '24

Thanks everyone! Good to know I was able to do justice to the PTL role and I will continue to be an active contributor in the Cinder project. On Mon, Feb 19, 2024 at 10:31 AM Tilay, Raghavendra < raghavendra-uddhav.tilay(a)hpe.com> wrote: > Thanks Rajat for all the help & guidance. > > > > *From:* Rajat Dhasmana <rdhasman(a)redhat.com> > *Sent:* Friday, February 16, 2024 9:51 PM > *To:* OpenStack Discuss <openstack-discuss(a)lists.openstack.org> > *Subject:* [Cinder] PTL non-candidacy > > > > Hello everyone, > > > > I'm sending this email out to let everyone know that I will not be running > for PTL for the Cinder project during the 2024.2 (Dalmatian) cycle. > > I started my PTL journey with the Zed cycle and it's been a great > experience leading the Cinder project for 4 cycles. > > > > I think it is time for someone else to step up and bring their insights > into the PTL tasks since I believe a new perspective will surely benefit > > the project. > > > > I would like to thank the Cinder team for their support, without which, it > would have been a very hard task to accomplish. > > Last but not the least, Brian and Jay (former Cinder PTLs) helped out a > lot to run things smoothly and in making complex decisions so a special > > thanks for all their help and support. > > > > Thanks > > Rajat Dhasmana >

1 0

Re: [neutron] qrouter namespace missing in controllers - opensack ussuri
by Sławek Kapłoński 20 Feb '24

20 Feb '24

Hi, Please don't drop openstack-discuss ML from the thread. Dnia piątek, 16 lutego 2024 04:39:05 CET keshav bareja pisze: > Hi > > I can see below status in the neutron command: > > [image: image] > > and qrouter namespace is missing in controller nodes for most of the > projects. > so instances are not accessible. > I tried to check errors in l3-agent but no major indication. tried > restarting all neutron services in all the 3 controllers but no success. > Also tried turning ha-mode disabled/enable but it seems qrouter namespace > is not getting generated. > All this issue started after reboot of one of the control nodes. > > How can I trigger the creation of qrouter namespace or any other > suggestions? Is it only qrouter namespace missing? Are snat-<router_id> namespaces for example created fine or also missing? Regarding triggering it manually You can't really do that in other way than restarting L3 agent on the node. But I guess there may be something in logs if the namespaces aren't created fine. Please enable debug logs in L3 agent, restart it and then share its logs with us. > > Regards > Keshav Bareja > > On Thu, Feb 15, 2024 at 9:19 PM keshav bareja <keshav.bareja(a)gmail.com> > wrote: > > > Hi > > > > We have DVR ha-mode activated , router for each project and showing as > > qrouter-() on each of the controller. > > > > For some project router , there is no qrouter-(router-id) in any of the > > controller node. > > > > Regards > > Keshav > > > > > > Sent from my iPhone > > > > > On 15 Feb 2024, at 8:27 PM, Sławek Kapłoński <skaplons(a)redhat.com> > > wrote: > > > > > > Hi, > > > > > > Dnia czwartek, 15 lutego 2024 18:37:01 CET keshav bareja pisze: > > >> Hi Team > > >> > > >> We are experiencing an issue of reachability in some of the projects, > > >> instances in the project are not reachable. It is a project specific > > issue. > > >> I tried to check router details and could observe . > > >> For the project having issues, I checked the router and could see that > > the > > >> qrouter namespace is not present in the command "ip netns" in any of the > > >> controllers. > > >> > > >> Problem started after a reboot of one controller. > > >> > > >> Do any one has faced a similar issue and any suggestions to recover > > this? > > >> > > >> Regards > > >> Keshav Bareja > > >> > > > > > > Any errors in the L3 agent logs on controllers? Are those DVR or > > centralized routers? > > > > > > -- > > > Slawek Kaplonski > > > Principal Software Engineer > > > Red Hat > > > -- Slawek Kaplonski Principal Software Engineer Red Hat

2 1

Red Cinder-volume detaching error
by Rohit Sansiya 20 Feb '24

20 Feb '24

Hello all, please help me i m unable to detach volume with the help of gui. i checked logs also no error it shows. [image: image.png] Your message is ready to be sent with the following file or link attachments: Rohit Sansiya https://sites.google.com/view/rpgcloud/research-india Note: To protect against computer viruses, e-mail programs may prevent sending or receiving certain types of file attachments. Check your e-mail security settings to determine how attachments are handled.

2 1