March 2024 - openstack-discuss - lists.openstack.org

[tacker][FFE] Mgmt driver sample for deploying Cilium
by Yasufumi Ogawa 08 Mar '24

08 Mar '24

Hi, I'd like to request FFE in this cycle for the update for introducing a sample of management driver for deploying Cilium with K8s VIM as I proposed at the previous IRC meeting. Please let me know if you have any comment although there was nothing opposite then. https://review.opendev.org/c/openstack/tacker/+/911639 Thanks, Yasufumi

1 0

[neutron] Is the vxlan(overlay) network a Provider network or a self-service network
by 韩光宇 08 Mar '24

08 Mar '24

Hi, In neutron install doc[1], I got the concept of Provider network and Self-service network. And I got that: - Provider network bridges virtual networks to physical networks and relies on physical network infrastructure for layer-3 (routing) services - Self-service network routes virtual networks to physical networks using Network Address Translation (NAT) So I understand: Flat/Vlan network are Provide network and vxlan/gre network are Self-service network. But, in openstack cmd, I found that all network types are classified as provider network types. ``` openstack network create --help ... --provider-network-type <provider-network-type> The physical mechanism by which the virtual network is implemented. For example: flat, geneve, gre, local, vlan, vxlan. ``` I am confused, why do vxlan and gre appear in the **provider network type**? According to the installation doc[1], overlay networks should not all be self-service networks Or is the provider network in cmd not the same as the provider network in the installation document, the provider network here is only different from the tenant network? Can someone help me distinguish between these concepts, or suggest questions that I can read: why vxlan is provider network I will appreciate for any help. Best wishes, Han Guangyu [1] https://docs.openstack.org/neutron/latest/install/controller-install-obs.ht…

2 1

[magnum] Speaker Requested for OpenInfra Day Türkiye
by Allison Price 07 Mar '24

07 Mar '24

Hi Magnum community, The organizers of OpenInfra Day Türkiye have reached out mentioning that Magnum has garnered great interest in Türkiye and would like to offer a keynote to any contributor who can provide an overview, new features and the roadmap of the project. The event is May 20 at Boğaziçi University in Istanbul. More information is available here: https://openinfraturkiye.org.tr/ Please let me know if you have any questions. If you represent another OpenStack project and are interested in providing an update, please feel free to reach out. Cheers, Allison Allison Price VP of Marketing & Community OpenInfra Foundation <https://openinfra.dev/> p: +1-214-686-6821

1 0

[cinder][glance][nova][telemetry][monasca][oslo][vmware] Can we deprecate(and remove) VMWare support ?
by Takashi Kajinami 07 Mar '24

07 Mar '24

Hi all, As you might know, some of the OpenStack projects currently support usage of VMWare component. However recently the VMware virt driver in nova was marked experimental in 2023.2 release [1] and it has been discussed that the driver will be removed in 2023.2 release[2], after deprecation is backported to 2023.1. (Please someone from nova team correct me if I'm wrong) So my current question is; Does it make sense to deprecate all of the features to support VMWare component ? My understanding is that these features were added to be used along with VMWare virt driver in nova, but once the virt driver is removed this use case is voided. I'll list up the features within the discussion scope below. nova: VMWare virt driver (this is already experimental by [1]) cinder: VMware Storage Driver (vmdk) glance: VMWare Datastore (I proposed deprecating this in [3][4]) ceilometer: VMWare virt driver (this was deprecated by [5]) os-brick: VmdkConnector monasca-agent: vcenter collector (*1) oslo.vmware: the whole project NOTE: These features are found based on dependency on oslo.vmware but there can be a few not listed here. Outside of OpenStack's governance, there are two projects dependent on oslo.vmware, networking-vsphere and vmware-nsx but both of these look inactive. Because of SLURP, we have to complete deprecation during in 2024.1 release so that we can drop the feature right after 2024.1. If we fail then we have to maintain these features until 2025.1 (the features already deprecated can be removed earlier, though). So I'd like to get feedback and decision before deadline for 2024.1 Thank you, Takashi (*1) Monasca is now inactive so I doubt anyone would work on this topic before it is retired. [1] https://review.opendev.org/c/openstack/nova/+/863911 [2] https://review.opendev.org/c/openstack/nova/+/897017 [3] https://review.opendev.org/c/openstack/glance_store/+/893696 [4] https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack… [5] https://review.opendev.org/c/openstack/ceilometer/+/894540

6 21

[oslo][requirements] RFE for new tooz release
by Takashi Kajinami 07 Mar '24

07 Mar '24

Hello, We have identified a regression[1] in tooz 6.0.0, which is the latest version in 2024.1 u-c. I have identified its cause and prepared the bug fix[2] and the follow up change to fix CI coverage[3]. I'll create 6.0.1 release once both of these two land. I'm sending this email to get early approval to bump tooz version in caracal requirements. The bug is at least known to be blocking kolla, but would affect any deployment which is using redis sentinel as tooz backend. Thank you, Takashi [1] https://bugs.launchpad.net/python-tooz/+bug/2056429 [2] https://review.opendev.org/c/openstack/tooz/+/911648 [3] https://review.opendev.org/c/openstack/tooz/+/911682 [4] https://review.opendev.org/c/openstack/releases/+/911711 -- Takashi Kajinami irc: tkajinam github: https://github.com/kajinamit launchpad: https://launchpad.net/~kajinamit

1 0

RE: openstack-discuss Digest, Vol 65, Issue 27
by Asma Naz Shariq 07 Mar '24

07 Mar '24

Hello team, I am intending to deploy Openstack AIO (zed) release, directly at ubuntu 20.04 BareMetal server. The issue I am facing as below: RUNNING HANDLER [MariaDB : Wait for MariaDB service port liveness] Failed - Retrying : [Localhost]: Wait for MariaDB service port liveness ( 10 retries left) Fatal: [localhost]: FAILED! => {"attempts": 10, "changed": false, "elapsed": 60, "msg": "Timeout when waiting for search string MariaDB in ip address:3306"} I need assistance to resolve this issue, -----Original Message----- From: openstack-discuss-request(a)lists.openstack.org <openstack-discuss-request(a)lists.openstack.org> Sent: Thursday, March 7, 2024 5:12 AM To: openstack-discuss(a)lists.openstack.org Subject: openstack-discuss Digest, Vol 65, Issue 27 Send openstack-discuss mailing list submissions to openstack-discuss(a)lists.openstack.org To subscribe or unsubscribe via email, send a message with subject or body 'help' to openstack-discuss-request(a)lists.openstack.org You can reach the person managing the list at openstack-discuss-owner(a)lists.openstack.org When replying, please edit your Subject line so it is more specific than "Re: Contents of openstack-discuss digest..." Today's Topics: 1. [ansible][aio][glance] Cannot create image, TypeError: Response is undefined (Tang Chai Keong) 2. Devstack (BEDDA Fadhel) 3. Re: [kolla-ansible][2023.2] Manila cephFS NFS ganesha need some clarifications (Goutham Pacha Ravi) 4. Re: Devstack (Alvaro Soto) ---------------------------------------------------------------------- Message: 1 Date: Thu, 7 Mar 2024 06:40:20 +0800 From: Tang Chai Keong <tchaikeong(a)gmail.com> Subject: [ansible][aio][glance] Cannot create image, TypeError: Response is undefined To: openstack-discuss(a)lists.openstack.org Message-ID: <CADnLa1bZ7AAy+FsxggR3up+3XhooNCuJZteTzj3vijXnL_sG9w(a)mail.gmail.com> Content-Type: text/plain; charset="UTF-8" I deployed openstack-ansible AIO and is trying to create a new image but is encountering "TypeError: Response is undefined" and "Error: Unable to create the image". The image creation task is just stuck in the "queued" mode forever after that. I also do not see any of the service logs in the lxc containers under /var/logs/ folder. Appreciate any advice on how I can troubleshoot this. Thank you. Regards, Ben ------------------------------ Message: 2 Date: Wed, 6 Mar 2024 23:48:35 +0100 From: BEDDA Fadhel <fadhel.bedda(a)gmail.com> Subject: Devstack To: openstack-discuss(a)lists.openstack.org Message-ID: <CAE1GhS7rhRi_qZt_vvwViSaHXoFUzkse5V+=hof+NcR7s-cnYg(a)mail.gmail.com> Content-Type: multipart/alternative; boundary="000000000000e690e2061305c23f" Good morning, as part of a test lab, I installed DevStack on Ubuntu. and I want to start linux and windows instances. I created the images and instances. but none that starts. on the console I have: boot from disk and nothing happens Thank you for your help

1 0

Openstack installation on Virtual Machines: External network issue
by KK CHN 07 Mar '24

07 Mar '24

Hi OpenStackers, I am just beginning with openstack. I am trying kolla-ansible all-in-on installation on a Virtual Machine(on an Ubuntu 22.04 VM hosted by ESXi Server). Deployment success, able to create VMs and networks. Base VM Ubuntu-22.04 ( kolla-ansible all-in-one installation) Network details. [image: image.png] From the base VM, I am able to ping tenant VMs through network namespace from base VM . But from a tenant VM, I can't ping to 10.176.17.61( the base VM address) [image: image.png] I am unable to ping to my base VM IP from my tenant VM, whether my deployment is wrong ? How to check? also how to test internet connectivity from Tenant VM ( all VMs are default cirros VMs). [image: image.png] *Note: Why ovs-vsctl not found on base VM ? Do I need to explicitly install, apt get install openvswitch-switch ?* Kolla-ansible won't install it by default?? (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ ovs-vsctl show Command 'ovs-vsctl' not found, but can be installed with: sudo apt install openvswitch-switch (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ If any more details are required other than the following, I can provide. # Include files from /etc/network/interfaces.d: source /etc/network/interfaces.d/* auto lo iface lo inet loopback auto ens224 iface ens224 inet static address 10.220.0.51 netmask 255.255.255.0 gateway 10.220.0.1 dns-nameserver 0.0.0.0 auto ens160 iface ens160 inet static address 10.176.17.61 netmask 255.255.254.0 gateway 10.176.16.1 dns-nameserver 10.176.0.11 auto ens192 iface ens192 inet manual up ip link set dev ens192 up down ip link set dev ens192 down globals.yml (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ grep ^[^#] /etc/kolla/globals.yml --- workaround_ansible_issue_8743: yes config_strategy: "COPY_ALWAYS" kolla_base_distro: "ubuntu" openstack_release: "2023.1" kolla_internal_vip_address: "10.220.0.24" kolla_external_vip_address: "{{ kolla_internal_vip_address }}" kolla_container_engine: docker network_interface: "ens224" neutron_external_interface: "ens192" neutron_plugin_agent: "openvswitch" nova_compute_virt_type: "qemu" (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ BUT why brctl shows nothing enabled state as "no" (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ brctl show bridge name bridge id STP enabled interfaces qbr1f4a7fde-87 8000.525b9c0d0f71 no qvb1f4a7fde-87 tap1f4a7fde-87 qbr6800c928-bb 8000.82aaa756a3cc no qvb6800c928-bb tap6800c928-bb qbr83937c49-06 8000.16da67140926 no qvb83937c49-06 tap83937c49-06 qbr9304eb11-59 8000.fa7e2e6ca3e3 no qvb9304eb11-59 tap9304eb11-59 (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ +--------------------------------------+-----------------------------------------------+ (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ nova list nova CLI is deprecated and will be a removed in a future release +--------------------------------------+--------------+--------+------------+-------------+--------------------+ | ID | Name | Status | Task State | Power State | Networks | +--------------------------------------+--------------+--------+------------+-------------+--------------------+ | d402d554-a56e-4cc6-af06-694ea913c939 | greenboxes-1 | ACTIVE | - | Running | GREEN=10.10.10.177 | | a69e4c16-e02f-4b5c-b6b1-e929ec309495 | greenboxes-2 | ACTIVE | - | Running | GREEN=10.10.10.6 | | 6b4d4b5d-2cc6-463d-89d9-5180f16ec3e3 | redboxes-1 | ACTIVE | - | Running | RED=20.20.20.104 | | a29576e8-46ca-4311-93ad-f2ca540a9880 | redboxes-2 | ACTIVE | - | Running | RED=20.20.20.121 | +--------------------------------------+--------------+--------+------------+-------------+--------------------+ (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ neutron port-list -c id -c fixed_ips neutron CLI is deprecated and will be removed in the Z cycle. Use openstack CLI instead. +--------------------------------------+------------------------------------------------------ (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ neutron port-list -c id -c fixed_ips neutron CLI is deprecated and will be removed in the Z cycle. Use openstack CLI instead. +--------------------------------------+-------------------------------------------------------------------------------------+ | id | fixed_ips | +--------------------------------------+-------------------------------------------------------------------------------------+ | 02344545-8003-4f0c-bc58-b0812d400939 | {"subnet_id": "754de697-6cdb-4277-9d87-0b3fbabb9744", "ip_address": "20.20.20.2"} | | 1f4a7fde-87dc-4547-9ea2-cd0084cd68ff | {"subnet_id": "754de697-6cdb-4277-9d87-0b3fbabb9744", "ip_address": "20.20.20.104"} | | 6800c928-bbac-4c9f-9db0-5d6126a4f46f | {"subnet_id": "b3f4fb8c-a926-4fc0-a9b5-28d7c2ac649b", "ip_address": "10.10.10.177"} | | 83937c49-06a0-4fc6-b34c-76a627989fb2 | {"subnet_id": "b3f4fb8c-a926-4fc0-a9b5-28d7c2ac649b", "ip_address": "10.10.10.6"} | | 9304eb11-5970-4197-b589-2c04a158fad9 | {"subnet_id": "754de697-6cdb-4277-9d87-0b3fbabb9744", "ip_address": "20.20.20.121"} | | 9fcaebab-36a7-401e-97dc-06755b20e817 | {"subnet_id": "b3f4fb8c-a926-4fc0-a9b5-28d7c2ac649b", "ip_address": "10.10.10.2"} | +--------------------------------------+------------------------------------------------------------------------------- (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ openstack network list +--------------------------------------+-------+--------------------------------------+ | ID | Name | Subnets | +--------------------------------------+-------+--------------------------------------+ | 20374e5f-6639-4e90-8241-2c3ddec72684 | RED | 754de697-6cdb-4277-9d87-0b3fbabb9744 | | 35fe9fe1-05d1-42ea-a3cb-e8f7588ca571 | EXT1 | c35e54e2-4ff5-4775-ab4e-21b24074745b | | 515ec17a-16fa-4be2-ae5f-afc4af388c3d | GREEN | b3f4fb8c-a926-4fc0-a9b5-28d7c2ac649b | +--------------------------------------+-------+--------------------------------------+ (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ Thank you, Krish

1 0

[tacker] FFE request for tacker-horizon's patch and obsoleting Legacy API patch
by Ayumu Ueha (Fujitsu) 07 Mar '24

07 Mar '24

Hi tacker team, As we talked about in today's regular IRC, I would like to request FFE in the 2024.1 Caracal cycle for the following patch: 908983: Support NFV Orchestration API v2.0 | https://review.opendev.org/c/openstack/tacker-horizon/+/908983 910104: Obsolete Legacy APIs excluding VIM feature | https://review.opendev.org/c/openstack/tacker/+/910104 Reasons: [Support NFV Orchestration API v2.0] The tacker-horizon patch provides GUI of NFV Orchestration API V2.0 operations that are very useful to users and developers. This is a major feature addition to tacker-horizon which has not been maintained for a long time, but change is green and now usable. [Obsolete Legacy APIs excluding VIM feature] I could not check Zuul CI pass due to some gate issue that occurred before the Feature freeze and my work was stopped to resolve the issue. The removal of the Legacy API has been declared since the 2023.1 Antelope release, so I would like to merge it if possible in this 2024.1 Caracal cycle. Regards, Ayumu

2 1

[tacker] FFE request for RBAC change for project personas
by Ghanshyam Mann 07 Mar '24

07 Mar '24

Hi Team, I would like to request the Feature freeze exception for the Tacker RBAC work for project personas. - https://review.opendev.org/q/topic:%22bp/implement-project-personas%22+stat… Reason: All the changes are green, including the testing framework/tests for existing RBAC. Finishing the RBAC works for project personas in this cycle will help enable the new defaults and remove the old ones in coming cycles. We are already behind the schedule for RBAC community-wide goal -gmann

2 1

[kolla][cinder][nfs] NFS backend error for volumes
by Satish Patel 07 Mar '24

07 Mar '24

Folks, I am configuring NFS for the cinder backend but somehow it doesn't go well. I am running kolla-ansible with the 2023.1 release. cinder.conf [DEFAULT] enabled_backends = volumes-ssd,volumes-nfs [volumes-nfs] volume_driver = cinder.volume.drivers.nfs.NfsDriver volume_backend_name = volumes-nfs nfs_shares_config = /etc/cinder/nfs_shares nfs_snapshot_support = True nas_secure_file_permissions = False nas_secure_file_operations = False Inside the cinder_volume docker container I can see it mounts NFS automatically and directory permissions is also cinder:cinder also I am able to write on NFS share also so it's not a permission issue also. $ docker exec -it cinder_volume mount | grep nfs 192.168.18.245:/volume1/NFS on /var/lib/cinder/mnt/1ec32c051aa5520a1ff679ce879da332 type nfs (rw,relatime,vers=3,rsize=131072,wsize=131072,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,mountaddr=192.168.18.245,mountvers=3,mountport=892,mountproto=udp,local_lock=none,addr=192.168.18.245) But service is still showing down. | cinder-volume | os-ctrl2@volumes-nfs | nova | enabled | down | 2024-02-28T04:13:11.000000 | In logs I am seeing these 3 lines but then no activity in logs even after restarting the container so that is very strange. 2024-02-28 04:13:12.995 153 ERROR os_brick.remotefs.remotefs [None req-6bcb8eab-6aa6-4c36-9a7a-ed673c39dcbc - - - - - -] Failed to mount 192.168.18.245:/volume1/NFS, reason: mount.nfs: Protocol not supported : oslo_concurrency.processutils.ProcessExecutionError: Unexpected error while running command. 2024-02-28 04:13:13.501 153 WARNING cinder.volume.drivers.nfs [None req-6bcb8eab-6aa6-4c36-9a7a-ed673c39dcbc - - - - - -] The NAS file permissions mode will be 666 (allowing other/world read & write access). This is considered an insecure NAS environment. Please see https://docs.openstack.org/cinder/latest/admin/blockstorage-nfs-backend.html for information on a secure NFS configuration. 2024-02-28 04:13:13.501 153 WARNING cinder.volume.drivers.nfs [None req-6bcb8eab-6aa6-4c36-9a7a-ed673c39dcbc - - - - - -] The NAS file operations will be run as root: allowing root level access at the storage backend. This is considered an insecure NAS environment. Please see https://docs.openstack.org/cinder/latest/admin/blockstorage-nfs-backend.html for information on a secure NAS configuration. Has anyone configured NFS and noticed any behavior?

3 12