March 2024 - openstack-discuss - lists.openstack.org

[openstack][kolla-ansible]about group node config overwrite
by Nguyễn Hữu Khôi 30 Oct '25

30 Oct '25

Hello Koller. I want to ask if we can overwrite config for a group of nodes. For example, compute01 >> compute10 will have the same nova configuration compute11 >> compute20 will have the same nova configuration. It will be very nice if we support this way. Thank you. Regards Nguyen Huu Khoi

4 7

Fwd: DPDK+OVS with OpenStack
by Mark Wittling 23 Apr '25

23 Apr '25

Looking for someone who knows OpenStack with OpenVSwitch, and in addition to that, DPDK with OpenStack and OVS.I am using OpenStack Queens, with OpenVSwitch. The architecture I am using is documented here: https://docs.openstack.org/neutron/queens/admin/deploy-ovs-provider.htmlThe OVS I am using on the Compute Node, is compiled with DPDK, and I have enabled the datapath to netdev (DPDK) on br-prv (provider network bridge), and br-tun (tunneling bridge). But these two bridges, br-tun and br-prv, are patched into another OpenStack bridge, called br-int. I wasn’t actually sure about whether to tinker with this bridge, and wondered what datapath it was using.Then, I realized there is a parameter in the openvswitch_agent.ini file, which I will list here: # OVS datapath to use. 'system' is the default value and corresponds to the # kernel datapath. To enable the userspace datapath set this value to 'netdev'. # (string value) # Possible values: # system - <No description provided> # netdev - <No description provided> #datapath_type = system datapath_type = netdev So in tinkering with this, what I realized, is that when you set this datapath_type to system or netdev, it will adjust the br-int bridge to that datapath type.So here is my question. How can I launch a non-DPDK VM, if all of the bridges are using the netdev datapath type?Here is another question. What if one of the flavors don’t have the largepages property set on them? I assumed OpenStack would revert to a system datapath and not use DPDK for those VM interfaces. Well, I found out in testing, that is not the case. If you set all your bridges up for netdev, and you don’t set the property on the Flavor of the VM (largepages), the VM will launch, but it simply won’t work.Is there no way, on a specific Compute Host, to support both DPDK (netdev datapaths) and non-DPDK (system datapaths)?Either on a VM interface level (VM has one interface that is netdev DPDK and another that is system datapath non-DPDK)?Or on a VM by VM basis (VM 1 has 1 or more netdev datapath interfaces and VM 2 has 1 or more system datapath interfaces)?Am I right here? Once you set up a Compute Host for DPDK, it’s DPDK or nothing on that Compute Host? (edited)

3 2

How to config DPDK compute in OVN
by dangerzone ar 22 Apr '25

22 Apr '25

Hi....as far I understand ovs does support dpdk compute to be deployed. I'm referring to the guideline ' *https://docs.openstack.org/networking-ovn/queens/admin/dpdk.html <https://docs.openstack.org/networking-ovn/queens/admin/dpdk.html>* ' ... It's too brief.. May I know how to config dpdk compute in OVN networking openstack? Hope someone could help what is the config to be done.... Currently compute is run without dpdk over openstack train ovn based. Please need some info on how I can proceed. Thank you

2 1

[oslo] python-consul2 is unmaintained
by Takashi Kajinami 21 Apr '25

21 Apr '25

Hello, I recently noticed that python-consul2 library[1], which is used by the consul coordination driver in tooz, hasn't been updated for 3+ years. Looking at issues in the project, there is an indication that the library is not compatible with ACL API in consul >= 1.11[2]. There is another fork created[3] and this includes fixes to support new API endpoints. Although the driver in tooz does not directly use the feature, I think it's better to discuss our plan to mitigate risks caused by the unmaintained library. As far as I can think of, there are three options now 1. Deprecate consul driver and remove it 2. Keep using python-consul2 now. At least basic functionality is proven to work by our functional tests (Note that the tests do not cover all configuration patterns) 3. Replace python-consul2 by py-consul Before we start the overall discussions I'd like to ask a few questions to the wider audience, as our inputs. - Is anyone using the consul coordination driver now ? - Does anyone have experience with python-consul2 and/or py-consul ? Note that this discussion affects the http messaging driver[4] currently proposed, because it also requires client library to communicate with Consul. Actually I noticed the situation when I noticed that the requirement check job is failing because the library is not part of global requirements list... Thank you, Takashi Kajinami [1] https://github.com/poppyred/python-consul2 [2] https://github.com/poppyred/python-consul2/issues/42 [3] https://github.com/criteo-forks/py-consul [4] https://review.opendev.org/c/openstack/oslo.messaging/+/912499 -- Takashi Kajinami irc: tkajinam github: https://github.com/kajinamit launchpad: https://launchpad.net/~kajinamit

2 3

[octavia] Purging ERROR'ed amphora and load balancers stuck in transitional states
by Paul Browne 11 Apr '25

11 Apr '25

Hello Octavia users, For a while I've been trying to find a systematic way to remove Octavia LBs+Amphora that have become stuck in ERROR or transitional PENDING_* states ; $ openstack loadbalancer amphora list -f value | grep ERROR a2323f14-3aaa-418a-8249-111aaa9c21fe 1fa7bd54-f60c-420c-94f3-d4c02f03d4fe ERROR MASTER 10.8.0.242 192.168.3.247 e5b236ba-e7ee-4ed7-9f58-57ce7a408489 1fa7bd54-f60c-420c-94f3-d4c02f03d4fe ERROR BACKUP 10.8.0.190 192.168.3.247 6b556f28-93c9-49dd-b6ee-4379288e7957 d5e402fe-2c4b-49af-a700-532cb408cee5 ERROR MASTER 10.8.0.39 192.168.3.126 c669db5d-8686-4d5c-9e95-e02030b34301 d5e402fe-2c4b-49af-a700-532cb408cee5 ERROR BACKUP 10.8.0.174 192.168.3.126 $ openstack loadbalancer list -f value | grep -vi active 1fa7bd54-f60c-420c-94f3-d4c02f03d4fe k8s-clusterapi-cluster-default-ci-6386871107-kube-upgrade-kubeapi 3a06571936a0424bb40bc5c672c4ccb1 192.168.3.247 PENDING_UPDATE amphora d5e402fe-2c4b-49af-a700-532cb408cee5 k8s-clusterapi-cluster-default-ci-6386871107-latest-kubeapi 3a06571936a0424bb40bc5c672c4ccb1 192.168.3.126 PENDING_DELETE amphora These resources are marked immutable and so cannot be failed over or deleted; $ openstack loadbalancer amphora failover a2323f14-3aaa-418a-8249-111aaa9c21fe Load Balancer 1fa7bd54-f60c-420c-94f3-d4c02f03d4fe is immutable and cannot be updated. (HTTP 409) (Request-ID: req-6e66c4e8-c3d3-4549-a03c-367017c8c8b3) $ openstack loadbalancer failover 1fa7bd54-f60c-420c-94f3-d4c02f03d4fe Invalid state PENDING_UPDATE of loadbalancer resource 1fa7bd54-f60c-420c-94f3-d4c02f03d4fe (HTTP 409) (Request-ID: req-84b44212-e7a8-4101-a16f-18c774c0577e) The backing Nova instances for these Amphora do seem to exist and be in good working order. Is there any API way to purge these out of Octavia's service state, or would (very careful) DB hackery be required here? Many thanks, Paul Browne ******************* Paul Browne Research Computing Platforms University Information Services Roger Needham Building JJ Thompson Avenue University of Cambridge Cambridge United Kingdom E-Mail: pfb29(a)cam.ac.uk<mailto:pfb29@cam.ac.uk> Tel: 0044-1223-746548 *******************

4 6

[glance][ops] proposal to remove the glance-scrubber
by Brian Rosmaita 20 Jan '25

20 Jan '25

Hello Glance users, The Glance project team wants to determine whether anyone is using the glance-scrubber utility [0]. If not, we are thinking of deprecating it this cycle to be removed in the appropriate future cycle. If you have not previously heard of the glance-scrubber, that's most likely because it's only useful for particular deployment configurations of which yours is not one. See the doc [0] for details if you are curious. Our suspicion is that the glance-scrubber may have outlived its usefulness for modern OpenStack configurations. (The last time I remember it being discussed at a PTG was during the snowstorm in Dublin, which I believe was the Rocky development cycle). On the other hand, the team also has some ideas for improving the scrubber, but there's no point doing that if it's not actually being used in the first place. So if removal of the glance-scrubber would negatively affect you, please respond to this email so we can get some data points. Thanks! [0] https://docs.openstack.org/glance/latest/cli/glancescrubber.html

2 2

[cinder][kubernetes] pvc stuck in reserved state
by Eugen Block 10 Jan '25

10 Jan '25

Hi, we have a couple of k8s clusters in our openstack environment (Victoria) and are facing some problems when pods get moved to different worker nodes. The PVCs get stuck in "reserved" state, and they only get attached after resetting the volumes to "available" state. First I thought it was due to the missing multiattach volume type which seems to work fine in our customer's cluster. I also found the "duplicate connector" error messages in the nova-compute.log: > Unable to update attachment.(Invalid volume: duplicate connectors > detected on volume But after adding the multiattach volume type and retyping the affected volumes, the PVCs still get stuck in "reserved" state while I don't see any error messages on the hypervisors anymore. So it seems that something has changed/improved, but now I don't have a trace where to look next. Could this be a cinder-csi driver issue or something? Our cinder backend is ceph (Pacific). Not sure which information could help so please ask for anything I can provide. Any pointers are highly appreciated! Thanks! Eugen

1 2

ERROR openstack [-] Resource OS::TripleO::Network::Ports::ControlPlaneVipPort maps to type OS::Neutron::Port and the Neutron service is not available when using ephemeral Heat.| Openstack tripleo wallaby version
by Swogat Pradhan 24 Dec '24

24 Dec '24

Hi, I am currently trying to deploy openstack wallaby using tripleo arch. I created the network jinja templates, ran the following commands also: #openstack overcloud network provision --stack overcloud --output networks-deployed-environment.yaml custom_network_data.yaml # openstack overcloud network vip provision --stack overcloud --output vip-deployed-environment.yaml custom_vip_data.yaml # openstack overcloud node provision --stack overcloud --overcloud-ssh-key /home/stack/sshkey/id_rsa overcloud-baremetal-deploy.yaml and used the environment files in the openstack overcloud deploy command: (undercloud) [stack@hkg2director ~]$ cat deploy.sh #!/bin/bash THT=/usr/share/openstack-tripleo-heat-templates/ CNF=/home/stack/ openstack overcloud deploy --templates $THT \ -r $CNF/templates/roles_data.yaml \ -n $CNF/workplace/custom_network_data.yaml \ -e ~/containers-prepare-parameter.yaml \ -e $CNF/templates/node-info.yaml \ -e $CNF/templates/scheduler-hints.yaml \ -e $CNF/workplace/networks-deployed-environment.yaml \ -e $CNF/workplace/vip-deployed-environment.yaml \ -e $CNF/workplace/overcloud-baremetal-deployed.yaml \ -e $CNF/workplace/custom-net-bond-with-vlans.yaml Now when i run the ./deploy.sh script i encounter an error stating: ERROR openstack [-] Resource OS::TripleO::Network::Ports::ControlPlaneVipPort maps to type OS::Neutron::Port and the Neutron service is not available when using ephemeral Heat. The generated environments from 'openstack overcloud baremetal provision' and 'openstack overcloud network provision' must be included with the deployment command.: tripleoclient.exceptions.InvalidConfiguration: Resource OS::TripleO::Network::Ports::ControlPlaneVipPort maps to type OS::Neutron::Port and the Neutron service is not available when using ephemeral Heat. The generated environments from 'openstack overcloud baremetal provision' and 'openstack overcloud network provision' must be included with the deployment command. 2022-04-19 13:47:16.582 735924 INFO osc_lib.shell [-] END return value: 1 Can someone tell me where the mistake is? With regards, Swogat Pradhan

4 4

[kolla] [openeuler] CI jobs status
by Michał Nasiadka 26 Nov '24

26 Nov '24

Hello Koalas, OpenEuler jobs in master (to be Antelope) are failing for a long time. If no one is interested in maintaining OpenEuler support in Kolla-Ansible - I will propose dropping it’s support on Wednesday Kolla meeting. Best regards, Michal

4 3

[horizon][ceph] object storage container storage policy missing
by Satish Patel 25 Nov '24

25 Nov '24

Folks, Openstack Release: Zed Recently I have integrated ceph RGW service with openstack/keystone and testing with command line tool "openstack container create foo1" and it works but when I go to Horizon UI I am seeing it doesn't have storage policy dropdown list and because of that I am not able to create container or upload file from Horizon GUI https://ibb.co/KhYW6Rd It works with commands like but not horizon. $ openstack container create foo1 +---------------------------------------+-----------+------------------------------------------------+ | account | container | x-trans-id | +---------------------------------------+-----------+------------------------------------------------+ | AUTH_d4d82849885e4126aef402c408ad2c5c | foo1 | tx00000c057454841b13497-0065b558b4-42ff2eb-ahm | +---------------------------------------+-----------+------------------------------------------------+ $ openstack container list +------+ | Name | +------+ | foo1 | +------+

2 2

[nova][libvirtd] internal error: unable to execute QEMU command 'query-named-block-nodes'
by Satish Patel 22 Oct '24

22 Oct '24

Folks, I have a ceph cluster and recently I configured rbd-mirror to replicate all data to remove ceph cluster for disaster recovery. Yesterday for POC we did a hard cutover on ceph and point openstack to the new cluster. All other vms came back up fine but 2 vms stuck in this error state in libvirt logs 2024-01-31 22:44:37.591+0000: 474597: error : qemuMonitorJSONCheckErrorFull:399 : internal error: unable to execute QEMU command 'query-named-block-nodes': cannot read image start for probe: Permission denied If it's a wider issue than it should impact all the vms but why only two VM stuck and not starting and libvirt giving me this error in logs nova-compute logs also showing same error 2024-01-31 22:44:40.925 7 INFO nova.compute.manager [None req-b33485b5-8740-48ae-8b5b-a440de3f11a4 c48fcfb9347f413f92fcece065644b00 ca5c652478c7429e964257990800e9cb - - default default] [instance: 2de0f880-77c7-4d2c-9e01-898c57ad3693] Successfully reverted task state from powering-on on failure for instance. 2024-01-31 22:44:40.944 7 ERROR oslo_messaging.rpc.server [None req-b33485b5-8740-48ae-8b5b-a440de3f11a4 c48fcfb9347f413f92fcece065644b00 ca5c652478c7429e964257990800e9cb - - default default] Exception during message handling: libvirt.libvirtError: internal error: unable to execute QEMU command 'query-named-block-nodes': cannot read image start for probe: Permission denied

3 8

Kolla Ansible on Ubuntu 20.04 - cloud-init & other network issues
by Tobias McNulty 10 Oct '24

10 Oct '24

Hi, I'm attempting to use Kolla Ansible 14.6.0 to deploy OpenStack Yoga on a small 3-node Ubuntu 20.04 cluster. The nodes have 128 GB RAM each, dual Xeon processors, and dual 10G Intel NICs. The NICs are connected to access ports on a 10G switch with separate VLANs for the local and external networks. All the playbooks run cleanly, but cloud-init is failing in the Ubuntu 20.04 and 22.04 VMs I attempt to boot. The VM images are unmodified from https://cloud-images.ubuntu.com/, and cloud-init works fine if I mount a second volume with user-data. The error is a timeout attempting to reach 169.254.169.254. This occurs both when booting a VM in an internal routed network and directly in an external network. I tried various neutron plugin agents (ovn, linuxbridge, and openvswitch both with and without firewall_driver = openvswitch <https://docs.openstack.org/kolla-ansible/latest/reference/networking/neutro…>) first with a clean install of the entire OS each time, all with the same result. Running tcpdump looking for 169.254.169.254 shows nothing. As a possible clue, the virtual NICs are unable to pass any traffic (e.g., to reach an external DHCP server) unless I completely disable port security on the interface (even if the associated security group is wide open). But disabling port security does not fix cloud-init (not to mention I don't really want to disable port security). Are there any additional requirements related to deploying OpenStack with Kolla on Ubuntu 20.04? This is a fairly vanilla configuration using the multinode inventory as a starting point. I tried to follow the Quick Start <https://docs.openstack.org/kolla-ansible/yoga/user/quickstart.html> as closely as possible; the only material difference I see is that I'm using the same 3 nodes for control + compute. I am using MAAS so it's easy to get a clean OS install on all three nodes ahead of each attempt. I plan to try again with the standard (non-HWE) kernel just in case, but otherwise I am running out of ideas. In case of any additional clues, here are my globals.yml and inventory file, along with the playbook I'm using to configure the network, images, VMs, etc., after bootstrapping the cluster: https://gist.github.com/tobiasmcnulty/7dbbdbc67abc08cbb013bf5983852ed6 Thank you in advance for any advice! Cheers, Tobias

5 9

Live migration fails
by Szabo, Istvan (Agoda) 07 Aug '24

07 Aug '24

Hi, I have couple of compute nodes where the live migration fails with existing vms. When I quickly spawn a vm and try live migration it works so I assume shouldn't be a big problem with the compute node. However I have many existing vms where it fails with a servername not found. /var/log/nova/nova-conductor.log:2021-04-21 14:47:12.605 227612 ERROR nova.conductor.tasks.migrate [req-f4067a26-a233-4673-8c07-9a8a290980b0 dce35e6eceea4312bb0baa0510cef363 ca7e35079f4440c78bd9870724b9638b - default default] [instance: 1517a2ac-3b51-4d8d-80b3-89a5614d1ae0] Unable to find record for source node servername on servername: ComputeHostNotFound: Compute host servername could not be found. /var/log/nova/nova-conductor.log:2021-04-21 14:47:12.605 227612 WARNING nova.scheduler.utils [req-f4067a26-a233-4673-8c07-9a8a290980b0 dce35e6eceea4312bb0baa0510cef363 ca7e35079f4440c78bd9870724b9638b - default default] Failed to compute_task_migrate_server: Compute host servername could not be found.: ComputeHostNotFound: Compute host servername could not be found. /var/log/nova/nova-conductor.log:2021-04-21 14:47:12.605 227612 WARNING nova.scheduler.utils [req-f4067a26-a233-4673-8c07-9a8a290980b0 dce35e6eceea4312bb0baa0510cef363 ca7e35079f4440c78bd9870724b9638b - default default] [instance: 1517a2ac-3b51-4d8d-80b3-89a5614d1ae0] Setting instance to ACTIVE state.: ComputeHostNotFound: Compute host servername could not be found. /var/log/nova/nova-conductor.log:2021-04-21 14:47:12.672 227612 ERROR oslo_messaging.rpc.server [req-f4067a26-a233-4673-8c07-9a8a290980b0 dce35e6eceea4312bb0baa0510cef363 ca7e35079f4440c78bd9870724b9638b - default default] Exception during message handling: ComputeHostNotFound: Compute host am-osfecn-4025 Tried with this command: nova live-migration --block-migrate id. Any idea? Thank you. ________________________________ This message is confidential and is for the sole use of the intended recipient(s). It may also be privileged or otherwise protected by copyright or other legal rules. If you have received it by mistake please let us know by reply email and delete it from your system. It is prohibited to copy this message or disclose its content to anyone. Any confidentiality or privilege is not waived or lost by any mistaken delivery or unauthorized disclosure of the message. All messages sent to and from Agoda may be monitored to ensure compliance with company policies, to protect the company's interests and to remove potential malware. Electronic messages may be intercepted, amended, lost or deleted, or contain viruses.

5 16

[ptl][tc] OpenStack packages PyPi additional external maintainers audit & cleanup
by Ghanshyam Mann 17 May '24

17 May '24

Hi PTLs, As you might know or have seen for your project package on PyPi, OpenStack deliverables on PyPi have additional maintainers, For example, https://pypi.org/project/murano/, https://pypi.org/project/glance/ We should keep only 'openstackci' as a maintainer in PyPi so that releases of OpenStack deliverables can be managed in a single place. Otherwise, we might face the two sets of maintainers' places and packages might get released in PyPi by additional maintainers without the OpenStack project team knowing about it. One such case is in Horizon repo 'xstatic-font-awesome' where a new maintainer is added by an existing additional maintainer and this package was released without the Horizon team knowing about the changes and release. - https://github.com/openstack/xstatic-font-awesome/pull/2 To avoid the 'xstatic-font-awesome' case for other packages, TC discussed it in their weekly meetings[1] and agreed to audit all the OpenStack packages and then clean up the additional maintainers in PyPi (keep only 'openstackci' as maintainers). To help in this task, TC requests project PTL to perform the audit for their project's repo and add comments in the below etherpad. - https://etherpad.opendev.org/p/openstack-pypi-maintainers-cleanup Thanks to knikolla to automate the listing of the OpenStack packages with additional maintainers in PyPi which you can find the result in output.txt at the bottom of this link. I have added the project list of who needs to check their repo in etherpad. - https://gist.github.com/knikolla/7303a65a5ddaa2be553fc6e54619a7a1 Please complete the audit for your project before March 15 so that TC can discuss the next step in vPTG. [1] https://meetings.opendev.org/meetings/tc/2023/tc.2023-01-11-16.00.log.html#… -gmann

18 27

[kolla-ansible] support for FWaaS/LBaaS?
by garcetto 15 May '24

15 May '24

good morning, does kolla support fwaas or lbaas? thank you

3 4

[all][packaging][release][qa] pep-517 and pip 23
by smooney＠redhat.com 06 May '24

06 May '24

hi folks, TL;DR ----- this is a long email so the tl;dr is we should add pyproject.toml ``` [build-system] requires = ["pbr>=5.7.0", "setuptools>=36.6.0", "wheel"] build-backend = "pbr.build" ``` to all openstack projects to supprot pip 23.1+ Long version ------------ As some of you may know the ptg happend last week an done of hte topic raised there was a know limitation in devstack where GLOBAL_VENV=True does not work on centos/fedora derived distros. while i generally dont use centos/fedora derived distros for my daily work i have been using devstack for over 10 years at this point so when im told it broken i ocationlly will go fix it. In this case the issue is not with devstack (it often isnt) and is actully in our collective reliance on a deprecated functionality and how we package openstack today. Back story, for better or worse when openstack was created the landscape of python packaging was significantly different then it is today. To help corodinate our dependcies the openstack comunity went all in on requirements.txt and developed upper-constraits to manage our requirements and developed PBR (python build Reasonableness). both of those approches have served us well and likely will continue to do so for some time. Since then pyproject.toml has started to gain popularity and pep-517 (A build-system independent format for source trees) has been adotpted but so far openstack as a comunity has not embraced those changes. (although pbr already supprot pep-517 :) ). Until now this has not been a problem however with recent release of pip things are now breaking. Problem Context: - openstack does not provide pyporject.toml files - openstack project configure setuptools to use pbr via setup.py - setuptools support generating scripts form entry points(console_scripts) which we use for project binaries( nova- compute, neutron-server, ...) - openstack api services use a pbr extension know as wsgi_scripts which adds a similar functionality for generating wsgi application mains file - devstack due to coming changes in distro to block "sudo pip install" now installs openstack in a single by default on debian distros. on centos/fedora distros it currently almost functional (but not). - devstack installs in editable mode because that is how most developers use devstack for developemnt What changed: - pip 20.2 deprecated support for falling back to calling setup.py when pyproject.toml is not present - https://pip.pypa.io/en/stable/news/#v20-2 - https://github.com/pypa/pip/issues/8368 - at this point when pyproject.yaml is not called pip calls setup.py install [-e] <path to repo or package name> - setup.py invokes pbr to generate wsgi_scripts and other files - in pip 23.1 the fallback was removed https://pip.pypa.io/en/stable/news/#v23-1 - pip now builds a temp local wheel instead of calling setup.py install when pyproject.toml is not found - in editable mode (-e) the default way the wheel is built does not invoke pbr properly to generate the wsgi files - as a result the wsgi files are not installed to the venv bin dir and this causes devstack to fail to start keystone (or any other wsgi api) The fix, there are a few ways to approch this: - clamp pip (https://review.opendev.org/c/openstack/devstack/+/898845) this is a terible idea and it breaks debian - clamping pip below 23.1 works on centos for now however OVS on debian already requires pep 517 for installing - as such when that version of ovs (or other projects start enforcing that) hits centos it will break - add a minimal pyproject.toml to all openstack project - example for keystone https://review.opendev.org/c/openstack/keystone/+/899519 - this example jsut adds the minium pyproject.toml to enable pbr to be used as the build system - it does not remove supprot for setup.py but it will not be used by default going forward whit new version of pip - all config is still in setup.cfg - add pyproject.toml support but remove setup.py support https://review.opendev.org/c/opendev/bindep/+/816741 - this goes one step futrue and actuly nulls out setup.py - we could take this approach if we want to but its not required. The reason for this email is to get agreement on how to support pip 23.1+ My proposal would be to add pyproject.toml with the minimal config required to enable pip 23.2 but not drop the setup.py support in this cycle. i would suggest that we can deprecate installing via setup.py in caracal if that is desirable but not make that change until the next slurp to give time to projects and packages to catch up. if there are no objections to that i would like to ask what is the preferd way to create and submit the patches for the minimal pyproject.toml ``` [build-system] requires = ["pbr>=5.7.0", "setuptools>=36.6.0", "wheel"] build-backend = "pbr.build" ``` i can propose patches to the main project deployed by devstack by default. i.e. nova/neutron ectra but it might be better if someone form the core teams of each project could take on that task and chasing the reviews. if someone has a script to generate a patch for a set of repos that just add the above pyporject.toml then we can use that to keep a consistent topic/commit message across all patches. my proposal for testing this is two fold. in ci we can test the patches are functional by using a DNM patch to devstack to force enable the gloal venv on centos and depend on the set of patches, i will modify https://review.opendev.org/c/openstack/devstack/+/898845 to do that locally we can test that the patch is functional by doing the following substituting keystone for the relevant project. ``` git clone https://opendev.org/openstack/keystone cd keystone python3 -m venv .venv . .venv/bin/activate python3 -m pip install -U pip python3 -m pip install -e . ls .venv/bin/keystone* ``` the ls will not contain the wsgi script with the addition of the pyproject.toml it should. on debian sid i can reproduce the same issue the problem we are seeing on centos 9 now will start impacting other distos eventually so its good to fix this now. if i start proposing this to glance/nova/neutron/cinder/swift/horizon/placement (to get a default devstack working) can i get cores to review? can cores form each project nominate peopel to review or volenteer to do this work. i have created https://etherpad.opendev.org/p/pep-517-and-pip-23 to track this work i have some other work that i think we can do in parallel like addign pyporject.toml support to the pti requirements if we go this way but that i think we can discuss on a governacne patch to updated it. anyway this is a lot to digest so feedback is welcome. if someone else would like to drive this that is also welcome (i.e. tc/release team) regards sean.

10 27

[largescale-sig] Next meeting: March 27, 9utc
by Thierry Carrez 24 Apr '24

24 Apr '24

Hi everyone, The Large Scale SIG will be meeting this Wednesday in #openstack-operators on OFTC IRC, at 9UTC. Arnaud Morin will be chairing. You can doublecheck how that UTC time translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20240327T09 Feel free to add topics to the agenda: https://etherpad.opendev.org/p/large-scale-sig-meeting Regards, -- Thierry Carrez

2 3

[oslo][release][requirements] broken watch_log_file depends on unmaintained pyinotify
by Takashi Kajinami 19 Apr '24

19 Apr '24

Hello, # This is mainly a oslo topic but I'm adding release team and requirements # team because we likely need new stable/2024.1 release of oslo.log. I looked into an old oslo.log bug[1] during the weekend and noticed that the watch_log_file option in oslo.log has been broken for some time. Looking into the problem further, I leaned that pyinotify[1] library, which is used in this feature, hasn't been updated for 9 years (!!). What is worse, pyinotify dependes on asynccore which has been removed from Python 3.12 and I'm skeptical that we can fix pyinotify to make it work with Python 3.12. There was an old discussion to replace pyinotify by inorify[3] but itnofiy hasn't been updated for 4 years and looks also unmaintained. I think the only option we have here is deprecating the functionality in 2024.1 so that we can remove it in early phase of 2024.2. Because we are quite close to 2024.1 GA, we have to make the decision early. I've already proposed the change for deprecation[4]. If you have any concerns then please reply to this email or leave your comments in the review. Thank you, Takashi [1] https://bugs.launchpad.net/oslo.log/+bug/1740111 [2] https://github.com/seb-m/pyinotify [3] https://github.com/dsoprea/PyInotify [4] https://review.opendev.org/c/openstack/oslo.log/+/914788 -- Takashi Kajinami irc: tkajinam github: https://github.com/kajinamit launchpad: https://launchpad.net/~kajinamit

3 5

[designate] Support for DNSSEC // Bump in the wire signer via BIND9 or Knot
by Christian Rohmann 18 Apr '24

18 Apr '24

Hello, I was wondering is anybody knew about the current state of DNSSEC signing for Designate-managed zones. Since Designate MDNS serves as primary they actually should do the signing / provide already signed zones via zone transfers. Adding support for DNSSEC this was last discussed for Kilo [1], but that spec was never finished, DNSSEC support never implemented. One approach to do this is using a bump in the wire signer [2][3][4] and have an intermediate BIND9 or Knot server doing the signing. Has anybody implemented something of this kind? If so, how do your users receive their initial DS / DNSKEY for the parent zone? Regards Christian [1] https://review.opendev.org/c/openstack/designate-specs/+/132571 [2] https://bind9.readthedocs.io/en/latest/dnssec-guide.html#bump-in-the-wire-s… [3] https://jpmens.net/2023/07/22/adieu-opendnssec-bienvenido-knot-dns/ [4] https://labs.ripe.net/author/anandb/dnssec-signer-migration/

4 7

[heat] Parametrization of Neutron trunk subports scaling down
by Lajos Katona 17 Apr '24

17 Apr '24

Hi, With Hot templates we run into a scaling issue with Neutron trunk subports. The task is to create Neutron trunks with "vlan_count" number of subports, and with stack update be able to add or remove subports of the created trunk. We tried with resourceGroup, and that works well if we increase the number of subports. The problem comes with decrease, as with resourceGroups I can't (my lack of knowledge) tell heat_engine that first update the trunk and remove the subport and after that delete the port. And Neutron API gives back conflict as the port which heat_engine tries to delete is still used by the trunk. Do you know a way to accomplish such an operation with Hot templates? Thanks in advance for the help. Best wishes Lajos Katona (lajoskatona)

2 4

[kolla-ansible][Antelope][Heat] Heat UpdateWaitConditionHandle Issues
by Devin Patterson 16 Apr '24

16 Apr '24

Hello, We are creating a workflow to use Heat auto-scaling groups with wait conditions. The ideal goal would be to have the wait condition clear and require another signal when the Heat stack is updated. Trying to use the resource OS::Heat::UpdateWaitConditionHandle instead of OS::Heat::WaitConditionHandle. This works during initial creation, but when I udpdate the stack with a new configuration, I get the following error. UpdateWaitConditionHandle.update() got an unexpected keyword argument 'new_template_id' Any ideas on how to use wait conditions during stack updates or to fix the above error. Thanks in advance. Devin

2 2

[all][tc] Modernize Python Stack
by Niklas Schwarz 10 Apr '24

10 Apr '24

Hello, I have just ran over the mailing listing post OpenStack 2024.2 testing runtime by Ganshyam Mann [1] on dropping support for python3.8 for the upcoming Openstack 2024.2 release. This post and some small contributions to some openstack components have lead me to write this post. What I would like to suggest to modernize the Python-Stack used for OpenStack. Such a modernization includes: - A current python version - A modern and up to date static code analysis - Introduce type annotations Let me explain what I mean: A current python version: The current supported Python versions are Python 3.8 to Python 3.11 [2]. As of writing, OpenStack Yoga was just moved to unmaintained. To install this release, e.g. on an Ubuntu Jammy operating system the packages are included in the Ubuntu-Packages. The default Python version on an Ubuntu 22.04 operating system is Python3.10. And looking at the support of the Python versions [3] Python 3.8 to 3.10 only receive security updates but the end is near for Python 3.8 to be out of support. The policy defined which Python version should be used for testing [4] will result that Python 3.8 is still used for the OpenStack 2024.1 release [5]. And this will also result in required support for Python3.8 in the upcoming releases of OpenStack. I my opinion the policy should be reworked and the OpenStack releases should be more aggressive on dropping support for older Python versions. Modern features of the language cannot be otherwise be used, therefor improvements in speed, security and general toolchain/ecosystem cannot be fully leveraged. By defining the lower bound of the Python Version we are limiting ourself to this version but we might also reduce the features we can use because of deprecations of the newer versions . A modern and up to date static code analysis: Currently flake8 and pylint are used both of which are modern analysis tools. But their configuration is in my opinion not up to date. Lets have a look at the configuration of the neutron-lib [6]. As seen a lot of rules are disabled by the configuration and are needed at the current moment at the state of the project. In addition some rules need to be adjusted such as the line length (80 characters is a very aggressive limit and on most modern displays a line length of 100 to 120 can fit without any problems, personal opinion). The adjustment of the static code analysis besides opinionated rules will lead me to my third point to modernize the Python stack used Introduce type annotations Python type annotations are well supported in the current Python versions and through the typing package additional types are added. The introduction of type annotations will improve the developer experience. This is also motivated by the Python foundation in pep-484 [7]. Because of the type annotation all modern IDEs can provide (more precise) type hints. The type hints can and in in my experience will reduce the introduction of bugs (accessing members or calling methods, no logical bugs) and will shorten the time to develop a new feature or fix a logical bug and do not run in runtime exceptions. The datatypes passed to a method are clear and we do not need to dig down a rabbithole to find out what is passed to a method. The name of a variable does not always tell the truth. As an example I want to look at a patch [8] for the neutron-vpnaas component. Christian Rohmann and I worked on this patch for the component together (this has also lead me to write this email) to improve the reconciling for VPNaaS. It took as along time to find out that a RouterInformation object is passed in to a method instead of a router but the variable was named router. We both agreed on that in the first place the naming of the variable was wrong but type annotations would have saved us a good amount of time. This does not mean that the naming is not important and that type annotations will save the world, the context which includes the name of variables is important and type annotations will add additional information to the context. And I have just touched the surface on what is possible with the introduction of type annotations, thinking of automatic document generation, test generation, even code generation,... As a reference to my point modernizing the static analysis this can then also include the introduction of mypy to check the types used. Of course such a change cannot be done in one big commit and needs time but I suggest to start adding type annotations and improve the overall code quality of the OpenStack services, starting with the oslo packages as they are used by mostly all OpenStack components. Of course such changes cannot be done for such a huge project in one day. It took a long time to remove support for Python 2. So I do not expect such changes to happen immediately. But it would be nice to have a discussion about it and maybe create a road map and adjust some policy on supported Python versions and create new policies how to write Python code and what additional tools should be used. I can also understand if not everything is possible but the last two points need to be addressed in my opinion. These changes will lead overall to better code quality but most important the introduction to the big code base will be easier for new developers and reviewers will also have a better time. Best regards Niklas [1] https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack… [2] https://docs.openstack.org/tempest/latest/supported_version.html [3] https://devguide.python.org/versions/ [4] https://governance.openstack.org/tc/resolutions/20181024-python-update-proc… [5] https://governance.openstack.org/tc/reference/runtimes/2024.1.html [6] https://github.com/openstack/neutron-lib/blob/master/.pylintrc [7] https://peps.python.org/pep-0484/#rationale-and-goals [8] https://review.opendev.org/c/openstack/neutron-vpnaas/+/875745

15 27

[kolla-ansible][horizon]Create instance default parameters
by Franck VEDEL 10 Apr '24

10 Apr '24

Hi, With horizon, is it possible de have this default parameter when you create an instance: in source, create a new volume: « No ». And.. if it’s possible, how configure this with kolla-ansible ? Thank’s for your help. Franck

2 4

Nova filter based on VM metadata?
by Ken D'Ambrosio 08 Apr '24

08 Apr '24

Hey, all. I'm looking for a way to to filter to a particular aggregate based on arbitrary VM metadata. (E.g., maybe FACTER facts from Puppet that we pass to the VM as metadata.) Could someone point me toward documentation that might outline how to accomplish that? As I see it, there's really one thing I need to understand -- the rest I can probably glean from extant filters: how (or if) a filter could access a given VM's metadata from the API creation request (if that's even possible). Thanks! -Ken

3 3

[openstack-ansible] : Ussuri minor version update.
by keshav bareja 04 Apr '24

04 Apr '24

Hi Team I am planning to update my environment from the current ussuri minor version to the latest minor version available for the Ussuri. I found the procedure below. https://docs.openstack.org/openstack-ansible/ussuri/admin/upgrades/minor-up… I have some queries on this: 1. How to find the current minor release version of the Ussuri deployed on my environment? Is there any command or way that can help? 2. What is the latest minor version available for Ussuri? In the Ussuri release notes page I could see 2.10, can someone please confirm if 2.10 is the latest version? 3. Also I need to know the bug fixes between my current release to the latest minor ussuri release. 4. Can someone confirm what all pre-requisite I need to take care of before going with the update. 5. Anyone having experience with such minor updates , Please share precaution and recommendations, Ussuri Series Release Notes <https://docs.openstack.org/releasenotes/openstack-ansible/victoria.html> <https://docs.openstack.org/releasenotes/openstack-ansible/train.html> <https://bugs.launchpad.net/openstack-ansible/+filebug?field.title=Ussuri%20…> 21.2.10 <https://docs.openstack.org/releasenotes/openstack-ansible/ussuri.html#relno…>Security Issues <https://docs.openstack.org/releasenotes/openstack-ansible/ussuri.html#secur…> - This release eliminates following security issues: - OSSA-2021-005: https://security.openstack.org/ossa/OSSA-2021-005.html - OSSA-2021-006: https://security.openstack.org/ossa/OSSA-2021-006.html

2 5

[freezer] Project status update
by Dmitriy Rabotyagov 02 Apr '24

02 Apr '24

Hey there! In a previous email thread [1] an interest toward reviving the Freezer project was raised. As a result of the thread we've organized a first sync meeting with interested parties. It was a quite productive discussion and we came up with a couple of action points as a result of it. You can find more information in the etherpad [2] Among everything, one of the most important parts for now, is to step into the PTL role or move a project to a distributed leadership. At the moment the project is leadless, since there was no candidacy submitted for this election. We also agreed to schedule the next meeting on April 2 from 16-00 till 17-00 UTC and discuss progress and blockers which were found. I'm attaching an invitation to the meeting to the email. If it doesn't work, you can join on the mentioned time via the link [3] Hope to see you there and thanks for everyone who participated and stepped in for the project! [1] https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack… [2] https://etherpad.opendev.org/p/freezer-status [3] https://meet.google.com/ckc-gevi-epe

1 2

[neutron] Proposing Ihar Hrachyshka as neutron core reviewer
by Brian Haley 02 Apr '24

02 Apr '24

Hello Neutrinos, I would like to nominate Ihar Hrachyshka for Neutron core reviewer (again). He's been leaving some very useful comments lately, moved-up in the reviewer stats over the past 90 days [0], and has a lot of OVN knowledge. Ihar was previously a core reviewer from 2015-2018 so most might already know him. I think he'd be a great re-addition to the team. Please vote with a +1/-1. [0] https://www.stackalytics.io/report/contribution?module=neutron-group&projec… Thanks, -Brian, Neutron PTL

8 8

[qa][ptg] Virtual Dalmatian vPTG Planning
by Martin Kopec 02 Apr '24

02 Apr '24

Hello everyone, here is [1] our etherpad for the Dalmatian/2024.2 virtual PTG. Please, add your topics there if there is anything you would like to discuss / propose ... You can also vote for time slots for our sessions so that they fit your schedule at [2]. We will most likely go with 1-hour slot per day, as they usually fit easier into everyone's schedule. The number of slots will depend on the number of topics proposed in [1]. [1] https://etherpad.opendev.org/p/apr2024-ptg-qa [2] https://framadate.org/pklG59pH47w6ZdJI Thanks, -- Martin Kopec Principal Software Quality Engineer Red Hat EMEA IM: kopecmartin

1 1

openstacksdk, ironicclient, os-fault: Please replace python3-appdirs dependency with platformdirs
by Thomas Goirand 01 Apr '24

01 Apr '24

Hi, 3 bugs have been opened in Debian to get appdirs replaced by platformdirs: https://bugs.debian.org/1067995 https://bugs.debian.org/1067999 https://bugs.debian.org/1068000 Here's the bug report content: > python3-appdirs is dead upstream[1] and its Debian maintainer has > indicated that it should not be included in trixie[2]. A recommended > replacement is python3-platformdirs[3], which is a fork of appdirs > with a very similar API. > > Please migrate from appdirs to platformdirs or some other replacement, > so that appdirs can be removed. > > Thanks, > smcv > > [1] https://github.com/ActiveState/appdirs/commit/8734277956c1df3b85385e6b308e9… > [2] https://bugs.debian.org/1060427 >[3] https://pypi.org/project/platformdirs/ Can we do that in upstream OpenStack, during the Dalmatian cycle? Cheers, Thomas Goirand (zigo)

3 3

[zun][neutron] cannot start container after stopping it
by James Leong 31 Mar '24

31 Mar '24

Hi all, I am having issues with the network being attached to a container. Here's my scenario: when I first created a container via the dashboard, I had a successful running container; then later, I attached a floating IP to it, and when I tried to stop and start the container, I got the following error message. Error response from daemon: Cannot restart container 780688e20528: failed to create endpoint zun-720f2207-86f8-4845-9434-b8f21aeafeb8 on network 8475928f-e65a-4e72-9b15-7de43a5b8853: NetworkDriver.CreateEndpoint: Virtual device creation failed. Any suggestions or recommendations are greatly appreciated. Best, James

2 1

[kolla] weekly meeting on 3rd April 2024 is cancelled
by Michał Nasiadka 30 Mar '24

30 Mar '24

Hello, I’m cancelling next weekly meeting for Kolla (on 3rd April 2024) due to absence of key people (including me). Let’s speak on the PTG sessions the following week. Best regards, Michał Nasiadka mnasiadka(a)gmail.com

1 0

pdb in uwsgi
by Gk Gk 30 Mar '24

30 Mar '24

Hi, I am trying to insert pdb.set_trace() in the file " https://opendev.org/openstack/placement/src/branch/master/placement/objects…" for debugging purposes. But when I manually start the placement service using this command "/openstack/venvs/uwsgi-27.3.0-python3/bin/uwsgi --autoload --ini /etc/uwsgi/placement-api.ini --honour-stdin", it is running as normal but not giving the pdb prompt when launching a nova boot command elsewhere. Is this a uwsgi pdb bug ? Thanks Y.G

2 2

Re: Please Help To Setup Bumblebee VDI project based on DevStack
by Matthew Swigart 29 Mar '24

29 Mar '24

Hi Manuel, Thank you for your kind response. And yes, I fixed my previous issue and was able to access the Django Admin site like you shared a screenshot. Thank you for sharing that.🥰 Also, I contacted Andy and I'm in the same boat with him in the Matrix Element chat app. I've been contacting your former Freibug Univerisity colleagues from several months ago through Matrix Element room, Dirk, Michael Scherle, etc. They are really supportive. 👍 I'm also planning to collaborate on the project: https://github.com/OpenSourceVDI/osvdi . So this is the pre-development step for me So at least I want to try to test this bumblebee VDI based on DevStack on my local first, but Andy has also never tested the bumblebee on Devstack yet. I'm a bit sorry to Freiburg colleagues since they are already experienced in this step and they are forwarding to develop VDI that can support 3D rendering so I don't want to take time from them and want to support them as soon as possible after I pass through this step. For now, I stuck the one issue to create VDI. The issue is when I creating VDI, I got this issue. [image: image.png] I guess there is a problem with setting up the security group. I ran the *setup-openstack.sh* script by setting *CIDR=192.168.174.0/24 <http://192.168.174.0/24>* and setting the *OS_SECGROUPS=bumblebee_desktops* . I'm not sure I did correctly. Could you please let me know *what the would be CIDR value in the setup-openstack.sh and OS_SECGROUPS in the env file*? Let me attach some of my current configuration screenshots for references. Networks: [image: image.png] Security Groups: [image: image.png] bumblebee-desktops security group detail: [image: image.png] Security Group and keypair values: [image: image.png] bumblebee-desktop Security Group detail: [image: image.png] Env file: [image: image.png] I'd appreciate it if you could kindly reply to my email again. Please keep in touch. Much appreciated. Matthew On Thu, Mar 28, 2024 at 5:58 AM Manuel Bentele < development(a)manuel-bentele.de> wrote: > Hi Matthew, > > I fixed the above issue. The issue was happening because when trying to > create an instance through the nova client, input > parameters(security_groups and key_name) were empty. > > Nice to hear that you were able to solve the problem. At some code > locations, Bumblebee could still have better error handling ;) > > I quickly set up a fresh instance of Bumblebee and can't reproduce your > Django admin site access problem. If I use the default settings from the > Docker compose .env file and log in with the admin account, an 'Admin' > button appears in the menu bar: > > If you then click on the 'Admin' button, the Django admin site will load: > > There you can then graphically edit the corresponding objects from the > Bumblebee data model. For example, here is the mask for changing the > Ubuntu Jammy desktop type if you click on 'Desktop types' and then 'jammy': > > You can now do the same for the volumes or other objects. Why access to > the Django admin site doesn't work for you is a mystery to me. The same > also applies to the security groups. So far I have only ever assigned one > security group. Perhaps there is still an error due to a bug in the > Bumblebee logic if several security groups are specified. > > Anyway, I am also fully available on the weekends. I joined in OpenStack > VDI room Matrix element. (https://matrix.to/#/#opensource-vdi:matrix.org) > So hopefully we can discuss more detail through that room. > > Interesting, I haven't heard of that yet. Oh I see that my former > colleagues are also active there. I started this project back then: > https://github.com/OpenSourceVDI/osvdi. And now it seems that the project > is making visible progress. > > In the meantime, I no longer have anything to do with the VDI topic due to > another job. I just saw your question on the mailing list and thought I > could help. I have dealt with Bumblebee in the past and was also in > contact with Andy Botting. He is one of the main developers of Bumblebee and > reads the OpenStack mailing list from time to time. He is always happy to > receive further support for Bumblebee from the community and their > feedback. If you have specific questions, you can also contact him > directly: Andy Botting <andy(a)andybotting.com>. Nevertheless, you can also > ask my former colleagues from the University of Freiburg in the Matrix > room. I put their email addresses in the CC. They can help you too. > > Regards, > Manuel > > On 26.03.24 07:37, Matthew Swigart wrote: > > Hi Manuel, > > I fixed the above issue. The issue was happening because when trying to > create an instance through the nova client, input > parameters(security_groups and key_name) were empty. So I created a new > keypair and added keyname to env, And then I got the security group list by > running the "openstack security group list" command. > [image: image.png] > So I set "bumblebee-desktops" to OS_SECGROUPS in the env file, but I got > this issue -Unable to find security_group with name or id > 'bumblebee-desktops' > [image: image.png] > Here is my current env file screenshot: > [image: image.png] > Do you have any idea how to set the correct OS_SECGROUPS value in the env > file? If you already have the correct env file, then please let me know. > > Thank you, > Matthew > > On Mon, Mar 25, 2024 at 9:45 PM Matthew Swigart < > matthew.swigart35(a)gmail.com> wrote: > >> Hello Manuel, >> >> Appreciate your kind response. To fix the bad UUID, I updated the flavor >> field type from UUID to String instead in the Volume class from model.py. >> Also I created migration for this. So I was able to fix the above issue but >> after that changes, I got the new error. >> Let me attach the screenshot. >> >> Anyway, I am also fully available on the weekends. I joined in OpenStack >> VDI room Matrix element. (https://matrix.to/#/#opensource-vdi:matrix.org >> ) >> So hopefully we can discuss more detail through that room. >> >> Regards, >> Matthew >> >> On Mon, Mar 25, 2024 at 6:00 PM Manuel Bentele < >> development(a)manuel-bentele.de> wrote: >> >>> Hi Matthew, >>> >>> I'm glad that my mail was helpful to you. >>> >>> [...] I tried debugging the value and desktop_type.default_flavor.id >>> value is 2 [...] >>> >>> This seems to be where the error lies. A decimal value is set, but it >>> is not a valid UUID. >>> >>> [...] I tried checking the admin URL (/rcsadmin) but I can't see any >>> link to access DB records.) [...] >>> >>> You are already on the right track. It might be the case that the user >>> does not yet have the appropriate flags in Keycloak to be able to access >>> it. You can double check whether the required attribute "is_staff" is >>> set as stated in the Django documentation (see [3]). This attribute is >>> automatically set in Bumblebee if a user is already assigned the "staff" >>> role in Keycloak. Maybe there is something wrong in the initial setup? >>> >>> Please let me know your discoveries. I don't have much time at the >>> moment, but towards the end of the week I can set up a fresh instance >>> myself and see if access to the Django admin page still works. >>> >>> [3] https://docs.djangoproject.com/en/5.0/ref/contrib/admin/#overview >>> >>> Regards, >>> Manuel >>> >>> On 3/25/24 04:36, Matthew Swigart wrote: >>> >>> Hi Manuel, thank you for your helpful email. >>> >>> Yes, you are correct, so there is an issue when creating a record in DB >>> from vm_manager>vm_functions>create_vm.py>create_volume>Line 122 [1] (I >>> tried debugging the value and desktop_type.default_flavor.id value is >>> 2) and vm_manager>models.py>Volume class Line 138 [2] >>> >>> Could you please let me know how to fix the issue in more detail? >>> >>> And you said, I can access DB records through the Django admin site, >>> could you please let me know how to do it? (I tried checking the admin URL >>> (/rcsadmin) but I can't see any link to access DB records.) >>> >>> [1] >>> https://github.com/NeCTAR-RC/bumblebee/blob/2201540ba50af98838d9285d4659b93… >>> [2] >>> https://github.com/NeCTAR-RC/bumblebee/blob/2201540ba50af98838d9285d4659b93… >>> >>> Regards, >>> Matthew >>> >>> >>> >>> On Sun, Mar 24, 2024 at 2:34 PM Manuel Bentele < >>> development(a)manuel-bentele.de> wrote: >>> >>>> Hi Matthew, >>>> >>>> It looks like a UUID is missing or corrupted in the Django data model >>>> of Bumblebee while creating a volume record for a new VM. >>>> >>>> If we take a look at the model of a Bumblebee volume, we notice that a >>>> valid UUID for the flavor field is required (see [1]). During the VM >>>> creation, a new volume record is created where the volume's flavor field is >>>> set to the resolved UUID of the default flavor from a desktop type (see >>>> [2]). Setting an invalid flavor UUID could be the cause here. >>>> >>>> When setting up bumblebee, did you specify valid flavor names (existing >>>> ones from OpenStack) for all desktop types? >>>> >>>> To check the volume records in the database and adjust them if >>>> necessary, you can simply use the Django admin site. There you can view the >>>> entire data model of Bumblebee and all stored records graphically. >>>> >>>> [1] >>>> https://github.com/NeCTAR-RC/bumblebee/blob/2201540ba50af98838d9285d4659b93… >>>> [2] >>>> https://github.com/NeCTAR-RC/bumblebee/blob/2201540ba50af98838d9285d4659b93… >>>> >>>> Best regards, >>>> Manuel >>>> >>>> On 3/24/24 04:29, Matthew Swigart wrote: >>>> >>>> Hello, >>>> >>>> I'm trying to install the VDI project on my Ubuntu 22.04 LTS Desktop >>>> VMware workstation. >>>> So I chose Bumblebee(https://github.com/NeCTAR-RC/bumblebee) and went >>>> through several steps like configuring the devstack, installing docker, and >>>> Bumblebee project. >>>> >>>> And then, I tried to create a virtual desktop from Bumblebee and I got >>>> the below error: >>>> >>>> ValueError: badly formed hexadecimal UUID string >>>> >>>> Attached error screenshot: >>>> >>>> [image: image.png] >>>> >>>> Anybody has already experienced a similar issue or does anybody have >>>> any idea to solve this problem? Then please help me. >>>> >>>> Looking forward to hearing from you. >>>> >>>> Much appreciated. >>>> Matthew >>>> >>>>

2 1

keystone-manage db_sync problem
by aldavx＠gmail.com 29 Mar '24

29 Mar '24

Hi I'm trying migrate a keystone installation from stein to train and when I'm running : keystone-manage db_sync --check I see the following errors : 2024-03-29 10:48:08.193 469 WARNING py.warnings [-] /usr/lib/python3/dist-packages/sqlalchemy/dialects/mysql/reflection.py:62: SAWarning: Unknown schema content: ' "repository_id" varchar(250) NOT NULL,' util.warn("Unknown schema content: %r" % line) 2024-03-29 10:48:08.194 469 WARNING py.warnings [-] /usr/lib/python3/dist-packages/sqlalchemy/dialects/mysql/reflection.py:62: SAWarning: Unknown schema content: ' "repository_path" text DEFAULT NULL,' util.warn("Unknown schema content: %r" % line) 2024-03-29 10:48:08.194 469 WARNING py.warnings [-] /usr/lib/python3/dist-packages/sqlalchemy/dialects/mysql/reflection.py:62: SAWarning: Unknown schema content: ' "version" int(11) DEFAULT NULL,' util.warn("Unknown schema content: %r" % line) 2024-03-29 10:48:08.197 469 WARNING py.warnings [-] /usr/lib/python3/dist-packages/sqlalchemy/dialects/mysql/reflection.py:62: SAWarning: Unknown schema content: ' "id" int(11) NOT NULL AUTO_INCREMENT,' util.warn("Unknown schema content: %r" % line) : migrate.exceptions.DatabaseNotControlledError: migrate_version 2024-03-29 10:48:08.199 469 WARNING py.warnings [-] /usr/lib/python3/dist-packages/sqlalchemy/dialects/mysql/reflection.py:62: SAWarning: Unknown schema content: ' "service" varchar(64) DEFAULT NULL,' util.warn("Unknown schema content: %r" % line) : migrate.exceptions.DatabaseNotControlledError: migrate_version 2024-03-29 10:48:08.199 469 WARNING py.warnings [-] /usr/lib/python3/dist-packages/sqlalchemy/dialects/mysql/reflection.py:62: SAWarning: Unknown schema content: ' "path" varchar(128) DEFAULT NULL,' util.warn("Unknown schema content: %r" % line) : migrate.exceptions.DatabaseNotControlledError: migrate_version 2024-03-29 10:48:08.200 469 WARNING py.warnings [-] /usr/lib/python3/dist-packages/sqlalchemy/dialects/mysql/reflection.py:62: SAWarning: Unknown schema content: ' "method" varchar(16) DEFAULT NULL,' util.warn("Unknown schema content: %r" % line) : migrate.exceptions.DatabaseNotControlledError: migrate_version 2024-03-29 10:48:08.201 469 CRITICAL keystone [-] Unhandled error: sqlalchemy.exc.NoSuchTableError: access_rule 2024-03-29 10:48:08.201 469 ERROR keystone Traceback (most recent call last): 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/migrate/versioning/schema.py", line 45, in load 2024-03-29 10:48:08.201 469 ERROR keystone self.table = Table(tname, self.meta, autoload=True) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 469, in __new__ 2024-03-29 10:48:08.201 469 ERROR keystone metadata._remove_table(name, schema) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/util/langhelpers.py", line 67, in __exit__ 2024-03-29 10:48:08.201 469 ERROR keystone compat.reraise(exc_type, exc_value, exc_tb) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/util/compat.py", line 277, in reraise 2024-03-29 10:48:08.201 469 ERROR keystone raise value 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 464, in __new__ 2024-03-29 10:48:08.201 469 ERROR keystone table._init(name, metadata, *args, **kw) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 552, in _init 2024-03-29 10:48:08.201 469 ERROR keystone metadata, autoload_with, include_columns, _extend_on=_extend_on 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 590, in _autoload 2024-03-29 10:48:08.201 469 ERROR keystone _extend_on=_extend_on, 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/engine/base.py", line 2125, in run_callable 2024-03-29 10:48:08.201 469 ERROR keystone return conn.run_callable(callable_, *args, **kwargs) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/engine/base.py", line 1596, in run_callable 2024-03-29 10:48:08.201 469 ERROR keystone return callable_(self, *args, **kwargs) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/engine/default.py", line 415, in reflecttable 2024-03-29 10:48:08.201 469 ERROR keystone table, include_columns, exclude_columns, **opts 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/engine/reflection.py", line 639, in reflecttable 2024-03-29 10:48:08.201 469 ERROR keystone raise exc.NoSuchTableError(table.name) 2024-03-29 10:48:08.201 469 ERROR keystone sqlalchemy.exc.NoSuchTableError: migrate_version 2024-03-29 10:48:08.201 469 ERROR keystone 2024-03-29 10:48:08.201 469 ERROR keystone During handling of the above exception, another exception occurred: 2024-03-29 10:48:08.201 469 ERROR keystone 2024-03-29 10:48:08.201 469 ERROR keystone Traceback (most recent call last): 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/oslo_db/sqlalchemy/migration.py", line 128, in db_version 2024-03-29 10:48:08.201 469 ERROR keystone return versioning_api.db_version(engine, repository) 2024-03-29 10:48:08.201 469 ERROR keystone File "<decorator-gen-6>", line 2, in db_version 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/migrate/versioning/util/__init__.py", line 167, in with_engine 2024-03-29 10:48:08.201 469 ERROR keystone return f(*a, **kw) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/migrate/versioning/api.py", line 148, in db_version 2024-03-29 10:48:08.201 469 ERROR keystone schema = ControlledSchema(engine, repository) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/migrate/versioning/schema.py", line 33, in __init__ 2024-03-29 10:48:08.201 469 ERROR keystone self.load() 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/migrate/versioning/schema.py", line 54, in load 2024-03-29 10:48:08.201 469 ERROR keystone exceptions.DatabaseNotControlledError(str(exc)), tb) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/six.py", line 692, in reraise 2024-03-29 10:48:08.201 469 ERROR keystone raise value.with_traceback(tb) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/migrate/versioning/schema.py", line 45, in load 2024-03-29 10:48:08.201 469 ERROR keystone self.table = Table(tname, self.meta, autoload=True) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 469, in __new__ 2024-03-29 10:48:08.201 469 ERROR keystone metadata._remove_table(name, schema) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/util/langhelpers.py", line 67, in __exit__ 2024-03-29 10:48:08.201 469 ERROR keystone compat.reraise(exc_type, exc_value, exc_tb) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/util/compat.py", line 277, in reraise 2024-03-29 10:48:08.201 469 ERROR keystone raise value 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 464, in __new__ 2024-03-29 10:48:08.201 469 ERROR keystone table._init(name, metadata, *args, **kw) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 552, in _init 2024-03-29 10:48:08.201 469 ERROR keystone metadata, autoload_with, include_columns, _extend_on=_extend_on 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 590, in _autoload 2024-03-29 10:48:08.201 469 ERROR keystone _extend_on=_extend_on, 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/engine/base.py", line 2125, in run_callable 2024-03-29 10:48:08.201 469 ERROR keystone return conn.run_callable(callable_, *args, **kwargs) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/engine/base.py", line 1596, in run_callable 2024-03-29 10:48:08.201 469 ERROR keystone return callable_(self, *args, **kwargs) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/engine/default.py", line 415, in reflecttable 2024-03-29 10:48:08.201 469 ERROR keystone table, include_columns, exclude_columns, **opts 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/engine/reflection.py", line 639, in reflecttable 2024-03-29 10:48:08.201 469 ERROR keystone raise exc.NoSuchTableError(table.name) 2024-03-29 10:48:08.201 469 ERROR keystone migrate.exceptions.DatabaseNotControlledError: migrate_version 2024-03-29 10:48:08.201 469 ERROR keystone 2024-03-29 10:48:08.201 469 ERROR keystone During handling of the above exception, another exception occurred: 2024-03-29 10:48:08.201 469 ERROR keystone 2024-03-29 10:48:08.201 469 ERROR keystone Traceback (most recent call last): 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/bin/keystone-manage", line 10, in <module> 2024-03-29 10:48:08.201 469 ERROR keystone sys.exit(main()) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/keystone/cmd/manage.py", line 41, in main 2024-03-29 10:48:08.201 469 ERROR keystone cli.main(argv=sys.argv, developer_config_file=developer_config) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/keystone/cmd/cli.py", line 1370, in main 2024-03-29 10:48:08.201 469 ERROR keystone CONF.command.cmd_class.main() 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/keystone/cmd/cli.py", line 327, in main 2024-03-29 10:48:08.201 469 ERROR keystone sys.exit(DbSync.check_db_sync_status()) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/keystone/cmd/cli.py", line 269, in check_db_sync_status 2024-03-29 10:48:08.201 469 ERROR keystone expand_version = upgrades.get_db_version(repo='expand_repo') 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/keystone/common/sql/upgrades.py", line 236, in get_db_version 2024-03-29 10:48:08.201 469 ERROR keystone session.get_bind(), repo, get_init_version(repo)) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/oslo_db/sqlalchemy/migration.py", line 131, in db_version 2024-03-29 10:48:08.201 469 ERROR keystone meta.reflect(bind=engine) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 4159, in reflect 2024-03-29 10:48:08.201 469 ERROR keystone Table(name, self, **reflect_opts) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 469, in __new__ 2024-03-29 10:48:08.201 469 ERROR keystone metadata._remove_table(name, schema) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/util/langhelpers.py", line 67, in __exit__ 2024-03-29 10:48:08.201 469 ERROR keystone compat.reraise(exc_type, exc_value, exc_tb) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/util/compat.py", line 277, in reraise 2024-03-29 10:48:08.201 469 ERROR keystone raise value 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 464, in __new__ 2024-03-29 10:48:08.201 469 ERROR keystone table._init(name, metadata, *args, **kw) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 552, in _init 2024-03-29 10:48:08.201 469 ERROR keystone metadata, autoload_with, include_columns, _extend_on=_extend_on 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/sql/schema.py", line 574, in _autoload 2024-03-29 10:48:08.201 469 ERROR keystone _extend_on=_extend_on, 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/engine/base.py", line 1596, in run_callable 2024-03-29 10:48:08.201 469 ERROR keystone return callable_(self, *args, **kwargs) 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/engine/default.py", line 415, in reflecttable 2024-03-29 10:48:08.201 469 ERROR keystone table, include_columns, exclude_columns, **opts 2024-03-29 10:48:08.201 469 ERROR keystone File "/usr/lib/python3/dist-packages/sqlalchemy/engine/reflection.py", line 639, in reflecttable 2024-03-29 10:48:08.201 469 ERROR keystone raise exc.NoSuchTableError(table.name) 2024-03-29 10:48:08.201 469 ERROR keystone sqlalchemy.exc.NoSuchTableError: access_rule 2024-03-29 10:48:08.201 469 ERROR keystone I've checked the DB and both tables are there (access_rule and migrate_version). Do you know what could be wrong ? Best Alex

1 0

[ironic][PTG] Ironic Dalmatian 2024.2 PTG schedule
by Riccardo Pittau 29 Mar '24

29 Mar '24

Hello ironicers! We've finalized the schedule for the Ironic Dalmatian (2024.2) virtual PTG happening from Tuesday April 9th to Thursday April 11th. You can find the list of topics and the detailed schedule as well as the link to connect to the event in the etherpad at https://etherpad.opendev.org/p/ironic-ptg-april-2024 See you all there! CIao Riccardo

1 0

[Bobcat][Ansible][AIO] how to inspect lxc logs
by tatsuro.makita.bp＠nttdata.com 29 Mar '24

29 Mar '24

Hi OpenStack Users Group, I am building a single instance of AWS EC2 using OpenStack Ansible AIO (Bobcat). We are trying to build an all-in-one environment and check the functions of Bobcat. Construction Steps: https://docs.openstack.org/openstack-ansible/latest/user/aio/quickstart.html * I could use VLAN on EC2 only one instance. it doesn't multi-instance. Anssible has been successful, and I can access and log in to the Horizon console with a browser. I have been able to register the image, but I get an error when I create a volume from the image. * Even if you create an empty volume, the same error will occur. Wording displayed in the volume creation message: Message Level: ERROR Event Id: VOLUME_VOLUME_001_003 User Message: "all schedulelocate volume:Could not find any available weighted backend." When I tried to refer to the lxc log to debug the environment, Under /var/log/lxc, there is only the log from the first startup, and there are no debug statements that are running during the actual inspection. The lxc-* command does not have a command like "Docker logs", so I am having trouble analyzing logs such as Cinder. When building with Ansible, it is built with "debug:True" defined in /etc/openstacl_deploy/user_variables.yml. Is there any other configuration that outputs Debug logs for each component? Any advice on things to look at when analyzing each component built with lxc would be fine. Furthermore, my environment is as follows. *Instance type: m5a.2xlarge *vCPU8, 32GiB, EBS storage 100GB(root) and 50GB(seccond) *OS:Ubuntu-jammy-22.04 *OpenStack Ansible: 28.0.1 (Bobcat) Thanks regards.

3 5

[barbican][requirements] incompatibility between cryptography and pykmip
by Takashi Kajinami 29 Mar '24

29 Mar '24

Hello, It was recently discovered that the latest pykmip release is not compatible[1][2] with cryptography>42.0.0, which is currently in upper constraints for master and 2024.1. The latest release of pykmip is incompatible with even cryptography >= 39.0.0, because no release has been created since the compatibility fix[2] was merged. The stable/2023.2 branch currently uses cryptography 40.0.2 so the pykmip library has been broken since 2023.2, it seems. I wonder what would be the appropriate step to mitigate the problem, and I would like to ask for opinions. Especially the first question is a bit urgent because we have quite a short period to make deprecation for 2024.1 . 1. (To the barbican team and the operators subscribing this list) Can we deprecate the kmip secret store plugin in 2024.1 so that we can drop it in 2024.2 ? Or does anyone have any concern with removing it in a future release ? 2. (To requirements team) In case the proposed fix[3] is merged and a new pykmip release is created, can we bump the version in 2024.1 u-c and 2023.2 u-c ? As far as I've checked, pykmip is used only by Barbican so bumping it would have quite limited impact. Thank you, Takashi [1] https://meetings.opendev.org/irclogs/%23openstack-barbican/%23openstack-bar… [2] https://github.com/OpenKMIP/PyKMIP/issues/713 [3] https://github.com/OpenKMIP/PyKMIP/commit/652d5cab [4] https://github.com/OpenKMIP/PyKMIP/pull/714 -- Takashi Kajinami irc: tkajinam github: https://github.com/kajinamit launchpad: https://launchpad.net/~kajinamit

2 1

[release] Release countdown for week R+0, Apr 01-05
by Elõd Illés 28 Mar '24

28 Mar '24

Development Focus ----------------- We will be releasing the coordinated OpenStack 2024.1 Caracal release next week, on April 3rd, 2024. Thanks to everyone involved in the 2024.1 Caracal cycle! We are now in pre-release freeze, so no new deliverable will be created until final release, unless a release-critical regression is spotted. Otherwise, teams attending the virtual PTG should start to plan what they will be discussing there, by creating and filling team etherpads. You can access the list of PTG etherpads at: http://ptg.openstack.org/etherpads.html General Information ------------------- On release day, the release team will produce final versions of deliverables following the cycle-with-rc release model, by re-tagging the commit used for the last RC. A patch doing just that will be proposed. PTLs and release liaisons should watch for that final release patch from the release team. While not required, we would appreciate having an ack from each team before we approve it on the 3rd, so that their approval is included in the metadata that goes onto the signed tag. Upcoming Deadlines & Dates -------------------------- Final 2024.1 Caracal release: April 3rd, 2024 2024.2 Dalmatian Virtual PTG: April 8-12, 2024 Előd Illés irc: elodilles @ #openstack-release

1 0

[CloudKitty] Cancelling weekly meeting of 1st of April
by Rafael Weingärtner 28 Mar '24

28 Mar '24

April 1stt is a public holiday for most People who attend the CloudKitty bi-weekly meeting. Therefore, we will be cancelling If you need any assistance until the next meeting, you can reach me via e-mail. Best regards, -- Rafael Weingärtner

1 0

[tc] Resolution regarding 2024.2 Dalmatian election
by Jay Faulkner 28 Mar '24

28 Mar '24

Hi all, There was a difficult situation spawned by the results of the recent TC election; all members, as elected, could not be seated under the TC Charter's diversity of affiliation policy[0][1]. One of the tc-members-elect from Red Hat, Sylvain Bauza, resigned his candidacy to resolve the affiliation issue[2]. As a result, we have a TC resolution up for vote, https://review.opendev.org/c/openstack/governance/+/914024, which adjudicates the election by acknowledging Sylvain's decision and naming Artem Goncharov his replacement under the TC charter rules for filling vacant seats[3]. This email serves as the required notice to the community of this resolution. I'd like to personally thank the Red Hat TC members and members-elect for resolving this issue, with a special thanks to Sylvain for helping to preserve TC affiliation diversity. Thanks, Jay Faulkner OpenStack TC Chair 0: https://governance.openstack.org/tc/reference/charter.html#tc-diversity-req… 1: https://review.opendev.org/c/openstack/governance/+/913912/3#message-728e57… 2: https://review.opendev.org/c/openstack/governance/+/913912/3#message-bb14bf… 3: https://governance.openstack.org/tc/reference/charter.html#election-for-tc-…

4 3

Facing issues in accessing console of Openstack VM's in EDGE sites
by Swogat Pradhan 28 Mar '24

28 Mar '24

Hi, I have set up openstack wallaby using tripleo on 3 different locations using DCN. I have a central site and 2 EDGE sites, when accessing the console of central sites I do not face any issues, but when accessing the console for EDGE sites I face issues sometimes, and then the issue disappears automatically and then comes back again. Attaching screenshot for reference. Can you please suggest what to look at here to fix this issue? With regards, Swogat Pradhan

2 2

[freezer] IRC channel #openstack-freezer has been registered
by Dmitriy Rabotyagov 28 Mar '24

28 Mar '24

Hey folks, After ML [1] some folks joined the #openstack-freezer channel on OFTC network, but I asked ppl to leave it since we had to empty the channel and register it accordingly. I'm glad to announce that this process has been completed (huge kudos to Jeremy Stanley (fungi) for helping with that!) and everyone interested in reviving/contributing to the Freezer project are warmly welcome to join the channel. [1] https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack…

2 1

[Glance] Cancelling Today's Weekly Meeting
by Pranali Deore 28 Mar '24

28 Mar '24

Hello, Cancelling today's meeting since there is nothing much on agenda for today. Thanks & Regards, Pranali Deore

1 0

tool can be used to monitor an OpenStack
by kjme001＠gmail.com 27 Mar '24

27 Mar '24

hello what tool can be used to monitor an OpenStack cluster? Regards

2 1

[tc][ptg] PTG Schedule
by Jay Faulkner 27 Mar '24

27 Mar '24

Hi all, I've put together a tentative schedule for TC topics and times for discussion on the etherpad: https://etherpad.opendev.org/p/apr2024-ptg-os-tc -- it may change if new topics emerge. Please let me know if any of the scheduled times are a hardship or if there are any questions. Thanks, Jay Faulkner OpenStack TC Chair

1 0

[ptl][release] OpenStack Caracal OpenInfra Live
by Allison Price 27 Mar '24

27 Mar '24

Hi everyone, Apologies for the late notice, but I wanted to gather interest from PTLs to participate in an OpenStack Caracal OpenInfra Live next Thursday, April 3 after Wednesday’s release. Like past episodes (you can see Bobcat here [1]), we will give interested PTLs the opportunity to present the progress their team made in Caracal as well as present upcoming priorities for Dalmatian. The episode will air on Thursday at 1400 UTC, so interested participants would need to be available 1330-1500 UTC on Thursday, April 3. If you are interested, please let me know. Thanks! Allison [1] https://www.youtube.com/watch?v=q7WDncK3YuM

6 9

Proposing Pete Zaitcev as Cinder core
by Rajat Dhasmana 27 Mar '24

27 Mar '24

Hello everyone, I would like to nominate Pete Zaitcev for the Cinder core position. Here is a summary of the work done by Pete in the Cinder project: 1. Reviews In the last 90 days[1] (half cycle), he has been the third highest reviewer in number (after 2 cores) and has a decent +/- ratio (stating that he frequently suggests improvements/asks questions in patches) In the last 180 days[2] (one cycle), we see the same pattern. 2. Commits Pete has taken over the backup domain of Cinder, which was not very actively looked at before. He has already completed features and fixes to improve our backup drivers, and is actively looking to improve swift and ceph backup backends which are the most used by OpenStack users. 3. Community Presence Pete consistently attends Cinder upstream events like meetings, festival of XS reviews, midcycles, PTGs etc. Apart from that, Pete also brings expertise from his Swift experience in the object storage domain. Given all the above reasons, I feel Pete is a good candidate for the cinder core team. I will keep this thread open for 1 week and if there are no objections, I will add Pete to the cinder core group. [1] https://www.stackalytics.io/report/contribution?module=cinder-group&project… [2] https://www.stackalytics.io/report/contribution?module=cinder-group&project… Thanks Rajat Dhasmana

5 6

[cinder][PTG] Cinder 2024.2 Dalmatian PTG planning
by Jon Bernard 27 Mar '24

27 Mar '24

Hi All, We will be conducting the Cinder 2024.2 (Dalmatian) PTG in a couple of weeks from Tuesday April 9th to Friday April 12th from 1300-1700 UTC[1]. The etherpad and schedule for Cinder PTG is here[2]. [1] https://ptg.opendev.org/ptg.html [2] https://etherpad.opendev.org/p/dalmatian-ptg-cinder Please add any topics or ideas you wish to propose for discussion to the "planning" section of the etherpad. Once we have the final set of topics, they will be distributed across our available days. Following are the details of the event: Dates: 9 April (Tuesday) - 12 April (Friday), 2024 Time: 1300 - 1700 UTC Room: Newton Video conference Tool: Zoom (Link can be found on the PTG page[1] by clicking on Cinder slot) Thanks! -- Jon

2 1

[cinder] This week's meeting (today) will be in video+IRC
by Rajat Dhasmana 27 Mar '24

27 Mar '24

Hello Argonauts, As we keep last meeting of the month in video + IRC mode, this week's meeting (today) will be held in video + IRC mode with the following details: Date: 27th March, 2024 Time: 1400 UTC Meeting link: https://meet.google.com/zya-oxpp-qre IRC Channel: #openstack-meeting-alt Make sure you're connected to both the gmeet meeting and IRC as discussion can happen at both places depending on how the author wants to conduct it. Thanks Rajat Dhasmana

1 0

Network would be shown to a member but IP allocation would be denied?
by Mika Saari 27 Mar '24

27 Mar '24

Hi, I am currently testing kolla-ansible using the latest release. During the creation of an external/provider network ("public"), I have observed that a non-admin project ("test") can view the network and allocate IP addresses for routers, for example. I would like to restrict this behavior so that the external network is listable (openstack network list), but IP allocation is denied. I have experimented with RBAC rules, creating a new role ("view-only") and assigning it to a user ("user") in the "test" project. I modified the policy.yaml files in both Neutron and Horizon as outlined in the documentation ( https://docs.openstack.org/kolla-ansible/latest/admin/advanced-configuratio… ). Below are the snippets from my neutron/policy.yaml and horizon/neutron_policy.yaml files created following the sample https://docs.openstack.org/neutron/2023.2/configuration/policy-sample.html policy.yaml get_network: "(rule:admin_only) or (role:view_only)" get_subnet: "(rule:admin_only) or (role:view_only)" get_port: "(rule:admin_only) or (role:view_only)" get_router: "(rule:admin_only) or (role:view_only)" neutron_policy.yaml get_network: "(rule:admin_only) or (role:view_only)" get_subnet: "(rule:admin_only) or (role:view_only)" get_port: "(rule:admin_only) or (role:view_only)" get_router: "(rule:admin_only) or (role:view_only)" After deploying Neutron and Horizon, I adjusted the default RBAC policy so that the "External Network" action only affects the "admin" project, not "*". While the admin can still see the public network, the test project user with the "view_only" role cannot see the "public" network. Enabling the RBAC policy for the "test" project allows the network to be visible, but it also enables the member of the project ("user") to reserve IP addresses for network components. I'm seeking guidance on where to find more information about policies to achieve the desired functionality. Should I redeploy all the services, or is depolying Neutron and Horizon sufficient? Am I on the right track with my policy tests, or is there a simpler way to achieve this functionality? Thank you very much for your assistance!

2 6

[ansible][aio][bobcat] How to contract on AWS EC2 instance (Only one instance)
by Tatsuro Makita 27 Mar '24

27 Mar '24

Hi I try to contract using openstack-ansible aio on AWS EC2 instance (only one node). refer to construction steps: https://docs.openstack.org/openstack-ansible/latest/user/aio/quickstart.html but it will occurred some problems with below, i can't proceed on this way. https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack… My purpose is what it checks any functions(version = 28.0.1 or 27.0.1). anyone tell me an easy way to build on a single instance on AWS EC2? Or is there a procedure to build on several instances without VLANs? EC2 does not allow VLANs. Could you support / share any information? Thanks regards.

2 2

[Openstack] [shibboleth] Seeking Advice: Shibboleth Integration with OpenStack
by Abubakur Sait 26 Mar '24

26 Mar '24

Hello, I'm currently engaged in PhD research focused on integrating Shibboleth with OpenStack. I've encountered a challenge as many of the available resources seem to be outdated, with the most recent OpenStack version mentioned being Queens. I'm reaching out to the community for assistance: - Which operating system version are you using for this setup? - What version of OpenStack are you currently running with Shibboleth? Additionally, if you have any up-to-date tutorials or books on Shibboleth that you could recommend, I would greatly appreciate it. Thank you in advance for your help. Best regards, Abubakur Sait

2 1

[nova][ptg] Etherpad for next April vPTG
by Sylvain Bauza 25 Mar '24

25 Mar '24

Hi folks, As a reminder, we'll have another round of nova sessions at the PTG. You'll find all the connection details and the timeslots in the etherpad but you'll also have the opportunity to chime on the discussions by providing your own subjects in the etherpad. Feel free to add your topics with your IRC name at the bottom of https://etherpad.opendev.org/p/nova-dalmatian-ptg The more, the merrier. Thanks, -Sylvain

1 0

[tc][ptg] Topic proposals: Re-visioning OpenStack; Raising the bar for Activity
by Jay Faulkner 25 Mar '24

25 Mar '24

Hi all, I added two semi-related PTG topics to the TC etherpad that I wanted to evangelize to the community. Both have details on https://etherpad.opendev.org/p/apr2024-ptg-os-tc, starting around line 65. The first topic, 'Re-visioning OpenStack aka "What is OpenStack Now?"', is centered around a couple of related things; the last time we made a vision document for OpenStack was 2019 -- five years ago. We need to revisit what our vision for OpenStack is, better defining what projects are in and out of scope of OpenStack. There are more details on the linked etherpad; I look forward to your comments there. The second topic, "Raising the bar for Activity", is centered around a singular focus: preventing us from having another situation where there is a severe security vulnerability in an OpenStack project which cannot be fixed. In fact, when reviewing the OpenInfra Foundation's Project Confirmation Guidelines ( https://board.openinfra.dev/en/ProjectConfirmationGuidelines ) -- a standard OpenStack in the aggregate is supposed to meet -- we have many projects that would not pass this if viewed more singularly. There are more details on the linked etherpad; I look forward to your comments there. Thanks, Jay Faulkner OpenStack TC Chair

1 0

[ironic] canceling meetings April 1st and April 8th
by Riccardo Pittau 25 Mar '24

25 Mar '24

Hello ironicers! We're canceling the ironic weekly meetings for the next 2 weeks: - April 1st is bank holiday in many countries in Europe and America and most of the cores won't be available - April 8th is the first day of the PTG Next meeting will be held on April 15th Ciao Riccardo

1 0

[tc] Next TC Meeting Tomorrow, March 26, 1800 UTC
by Jay Faulkner 25 Mar '24

25 Mar '24

Hi all, The next TC meeting is scheduled for tomorrow at 1800 UTC in #openstack-tc on OFTC. The proposed agenda is: - Roll call - Follow up on tracked action items - Gate health check - Implementation of Unmaintained branch statuses - 2024.2 Dalmatian TC Election - Election results cannot be merged due to affiliation diversity policy https://review.opendev.org/c/openstack/governance/+/913912 - TC vPTG 2024.2 - https://etherpad.opendev.org/p/apr2024-ptg-os-tc - Open Discussion and Reviews Thanks, Jay Faulkner OpenStack TC Chair

1 0

[nova] Instance migration/resize changes availability zone
by Marc Vorwerk 25 Mar '24

25 Mar '24

Dear OpenStack Community, I am reaching out for support with an issue that is specifically affecting a single instance during migration or resize operations in our OpenStack environment. I want to emphasize that this problem is isolated and does not reflect a broader issue within our cloud setup. The issue arises when attempting a resize of the instance's flavor, which only differs in RAM+CPU specification. Unexpectedly, the instance attempts to switch its availability zone from az1 to az2, which is not the intended behavior. The instance entered an error state during the resize or migration process, with a fault message indicating 'ImageNotFound', because after the availability zone change the volume cant be reached. We use seperate ceph clusters per az. To debug this issue we enabled debug logs for the nova scheduler and found that the scheduler does not filter out any node with any of our enabled filter plugins. As a quick test we disabled a couple of compute nodes and could also verify that the ComputeFilter of the nova-scheduler still just returns the full list of all nodes in the cluster. So it seems to us that for some reason the nova-scheduler just ignores all enabled filter plugins for mentioned instance. It's worth noting that other instances with the same flavor on the same compute node do not exhibit these issues, highlighting the unique nature of this problem. Furthermore we checked all relevant database tables to see if for some reason something strange is saved for this instance but it seems to us that the instance has exactly the same attributes as other instances on this node. We are seeking insights or suggestions from anyone who might have experienced similar issues or has knowledge of potential causes and solutions. What specific logs or configuration details would be helpful for us to provide to facilitate further diagnosis? We greatly appreciate any guidance or assistance the community can offer. Best regards, Marc Vorwerk + Maximilian Stinsky

5 6

[neutron] Bug Deputy Report March 18 - March 24
by Lajos Katona 25 Mar '24

25 Mar '24

Hi Neutron Team, I was the bug deputy for Neutron from 18March to 24 March, here comes my report for the week. - https://bugs.launchpad.net/neutron/+bug/2058400 ([ovn-octavia-provider] functional jobs are unstable) - Fernando Royo started to investigate the issues - https://bugs.launchpad.net/neutron/+bug/2058400/comments/2 - https://bugs.launchpad.net/neutron/+bug/2058378 ([devstack-tobiko-neutron] stable/2023.2 periodic broken with ERROR: Cannot install tox==4.13.0, tox==4.14.0 and tox==4.14.1) - https://review.opendev.org/c/x/devstack-plugin-tobiko/+/913746 fixed the failure. - https://bugs.launchpad.net/neutron/+bug/2058712 ([openvswitch-agent] Trunk extension should not be loaded if service plugin is disabled) - In progress: https://review.opendev.org/c/openstack/neutron/+/913979 - https://bugs.launchpad.net/neutron/+bug/2055419 (network autoallocation fails for non-admin user) - Incomplete: It seems something is missing for the reproduction - https://bugs.launchpad.net/neutron/+bug/2058433 (a public network with multi subnets , but based on ovn, They can't communicate with each other) - Incomplete: I try to collect some configurations, but somebody with more OVN background should check it also. Best wishes Lajos Katona (lajoskatona)

1 0

Please Help To Setup Bumblebee VDI project based on DevStack
by Matthew Swigart 24 Mar '24

24 Mar '24

Hello, I'm trying to install the VDI project on my Ubuntu 22.04 LTS Desktop VMware workstation. So I chose Bumblebee(https://github.com/NeCTAR-RC/bumblebee) and went through several steps like configuring the devstack, installing docker, and Bumblebee project. And then, I tried to create a virtual desktop from Bumblebee and I got the below error: ValueError: badly formed hexadecimal UUID string Attached error screenshot: [image: image.png] Anybody has already experienced a similar issue or does anybody have any idea to solve this problem? Then please help me. Looking forward to hearing from you. Much appreciated. Matthew

3 2

[all][elections][ptl] 2024.2 Dalmatian: PTL Election Conclusion & Results
by Ian Y. Choi 24 Mar '24

24 Mar '24

Thank you to the electorate, to all those who voted and to all candidates who put their name forward for Project Team Lead (PTL) in this election. A healthy, open process breeds trust in our decision making capability. Thank you to all those who make this process possible. Now for the results of the PTL election process, please join me in extending congratulations to the following PTLs: * Adjutant - Dale Smith (dalees) * Barbican - Grzegorz Grasza (xek) * Blazar - Pierre Riteau (priteau) * Cinder - Jon Bernard () * Cloudkitty - Rafael Weingartner () * Cyborg - alex song (songwenping) * Designate - Michael Johnson (johnsom) * Glance - Pranali Deore (pdeore) * Heat - Takashi Kajinami (tkajinam) * Horizon - Tatiana Ovchinnikova (tmazur) * Ironic - Riccardo Pittau (rpittau) * Keystone - Dave Wilde (d34dh0r53) * Kolla - Michal Nasiadka (mnasiadka) * Magnum - Jake Yip (jakeyip) * Manila - Carlos Silva (carloss) * Masakari - sam sue () * Mistral - axel vanzaghi () * Monasca - Hasan Acar () * Neutron - Brian Haley (haleyb) * Nova - Sylvain Bauza (bauzas) * Octavia - Gregory Thiemonge (gthiemonge) * OpenStack Helm - Vladimir Kozhukalov (kozhukalov) * OpenStackAnsible - Dmitriy Rabotyagov (noonedeadpunk) * OpenStackSDK - Artem Goncharov (gtema) * Puppet OpenStack - Takashi Kajinami (tkajinam) * Quality Assurance - Martin Kopec (kopecmartin) * Rally - Andrey Kurilin (andreykurilin) * Storlets - Takashi Kajinami (tkajinam) * Sunbeam - Hemanth Nakkina () * Swift - Tim Burke (timburke) * Tacker - Yasufumi Ogawa (yasufum) * Telemetry - Erno Kuvaja (jokke_) * Venus - Eric Zhang () * Vitrage - Dmitriy Rabotyagov (noonedeadpunk) * Zaqar - Hao Wang (wanghao) * Zun - Hongbin Lu () Elections: no election required. For remaining projects (without PTL candidates), TC will work on the appointment. Election process details and results are also available here: https://governance.openstack.org/election/ Thank you to all involved in the PTL election process, Ian Y. Choi, on behalf of the OpenStack Technical Election Officials

1 0

Accessing virsh in openstack wallaby | tripleo
by Swogat Pradhan 24 Mar '24

24 Mar '24

Hi, Can someone please tell me how can i access the virsh utility on the compute node on openstack wallaby? Previously we used nova_libvirt but in wallaby there are multiple containers and i am unable to use virsh utility to edit my domain.xml file. List of containers: [root@dcn01-hci-2 ~]# podman ps | grep nova 10d981158842 172.25.201.68:8787/tripleomaster/openstack-nova-libvirt:current-tripleo kolla_start 2 months ago Up 2 months ago nova_virtlogd_wrapper e91667516afc 172.25.201.68:8787/tripleomaster/openstack-nova-libvirt:current-tripleo kolla_start 2 months ago Up 2 months ago nova_virtsecretd a4b07fe0e833 172.25.201.68:8787/tripleomaster/openstack-nova-libvirt:current-tripleo kolla_start 2 months ago Up 2 months ago nova_virtnodedevd d7e1db393e9c 172.25.201.68:8787/tripleomaster/openstack-nova-libvirt:current-tripleo kolla_start 2 months ago Up 2 months ago nova_virtstoraged 5308a171793e 172.25.201.68:8787/tripleomaster/openstack-nova-libvirt:current-tripleo kolla_start 2 months ago Up 2 months ago nova_virtqemud f490a6249ba1 172.25.201.68:8787/tripleomaster/openstack-nova-libvirt:current-tripleo kolla_start 2 months ago Up 6 weeks ago nova_virtproxyd ab0441e56957 172.25.201.68:8787/tripleomaster/openstack-nova-compute:current-tripleo kolla_start 2 months ago Up 2 months ago (healthy) nova_migration_target f35fbba5b690 172.25.201.68:8787/tripleomaster/openstack-nova-compute:current-tripleo kolla_start 2 months ago Up 6 weeks ago (unhealthy) nova_compute 82bc01993106 172.25.201.68:8787/tripleomaster/openstack-nova-libvirt:current-tripleo /usr/sbin/virtlog... 2 months ago Up 2 months ago Can someone please suggest how I can i edit an instance xml file in this setup? With regards, Swogat Pradhan

2 5

Openstack trove Error launching instance
by Shameem Farhath 23 Mar '24

23 Mar '24

Hi Team, Myself Shameem, on behalf of NerveDigital i am writing this mail. We are provisioning the trove database as a service in our existing infrastructure, and we got an ERROR on launching a DB instance. We have been troubleshooting it for a while and find no hope. Please help us to find a proper resolution for the issue. Please find the attached ERROR while launching the instance. Openstack version: yoga Operating system used: Ubuntu 22.04 Guest operating system: ubuntu jammy (downloaded from opendev tarball) Configuration files: Attached ERROR from the log: Attached *Regards,* *Shameem Farhath A* *9562440781* *www.NerveDigital.net* <http://www.NerveDigital.net>

1 0

[openstack-ansible][horizon][keystone] multidomain - LDAP admins unable to see Horizon Admin Dashboard
by Janet 'Saoirse' Sullivan 23 Mar '24

23 Mar '24

Hi, I have a multi-domain setup (LDAP and Default) and while LDAP users can see the Projects and Identity tabs in the Horizon dashboard, they can't see the Admin tab, even if they are assigned the admin role. The Default domain admin user can see this dashboard just fine. Is there a policy that needs to be changed so LDAP users with the admin role can see the Admin tab in Horizon? Openstack 2023.2.

1 0

[TC][all] Recheck analysis
by Sławek Kapłoński 23 Mar '24

23 Mar '24

Hi Stackers, Some time ago I started monitoring something what we have called "bare rechecks" which are "recheck" comments without any reason given. I was also asking various teams to improve that, try to check failures of the CI jobs and put some kind of reason in the recheck comment. That went pretty well and currently most of the teams are doing pretty good job there. See stats from last 30 days: +--------------------+---------------+--------------+-------------------+ | Team | Bare rechecks | All Rechecks | Bare rechecks [%] | +--------------------+---------------+--------------+-------------------+ | OpenStackSDK | 8 | 8 | 100.0 | | OpenStack-Helm | 41 | 41 | 100.0 | | cloudkitty | 1 | 1 | 100.0 | | monasca | 6 | 6 | 100.0 | | skyline | 2 | 2 | 100.0 | | trove | 1 | 1 | 100.0 | | rally | 1 | 1 | 100.0 | | watcher | 1 | 1 | 100.0 | | mistral | 5 | 8 | 62.5 | | kuryr | 1 | 2 | 50.0 | | zaqar | 1 | 2 | 50.0 | | horizon | 6 | 15 | 40.0 | | swift | 9 | 25 | 36.0 | | manila | 5 | 14 | 35.71 | | kolla | 14 | 68 | 20.59 | | cinder | 15 | 77 | 19.48 | | ironic | 10 | 53 | 18.87 | | glance | 11 | 59 | 18.64 | | requirements | 13 | 73 | 17.81 | | Telemetry | 2 | 12 | 16.67 | | nova | 16 | 105 | 15.24 | | OpenStackAnsible | 5 | 40 | 12.5 | | magnum | 1 | 9 | 11.11 | | neutron | 13 | 118 | 11.02 | | Quality Assurance | 3 | 30 | 10.0 | | Release Management | 1 | 12 | 8.33 | | octavia | 2 | 34 | 5.88 | | keystone | 0 | 1 | 0.0 | | OpenStack Charms | 0 | 1 | 0.0 | | oslo | 0 | 8 | 0.0 | | Puppet OpenStack | 0 | 95 | 0.0 | | barbican | 0 | 2 | 0.0 | | designate | 0 | 4 | 0.0 | | heat | 0 | 7 | 0.0 | | tacker | 0 | 63 | 0.0 | | tripleo | 0 | 4 | 0.0 | +--------------------+---------------+--------------+-------------------+ Now I though that it's time for the "next step" so I spent some time looking at the reasons of the rechecks done in last 30 days. I collected those reasons with script [1] and here are some top reasons found: +----------------------------------------------------------+----------------------+ | Recheck comment | Number of occurences | +----------------------------------------------------------+----------------------+ | recheck unrelated failure | 48 | | recheck irrelevant failure | 45 | | recheck unrelated test failure | 9 | | recheck testing | 9 | | recheck infra-failure | 9 | | recheck tempest-slow-py3 | 8 | | recheck nova-next | 8 | | recheck timeout | 7 | | recheck neutron-functional-with-uwsgi | 7 | | recheck failure not related to this change | 7 | | recheck ovn-octavia-provider-functional-master unrelated | 7 | | recheck jobs running too early | 6 | | recheck dependency updated | 5 | | recheck random failure | 5 | | recheck - bifrost bug | 5 | +----------------------------------------------------------+----------------------+ Those comments as they were put in the gerrit. Of course there was much more different comments there. I just wanted to highlight here some of the most common ones. I also asked ChatGPT to group all of them in some common groups. Below are some of the main categories of the reason found by the ChatGPT: CI/Testing Issues: Timeouts in various tests (e.g., tempest tests, tox tests). Infrastructure failures impacting CI. Kernel panics or guest panics during testing. Dependency-related failures (merged or updated). Unexpected failures or intermittent issues. Dependency Management: Dependency patches merged or updated. Dependency-related failures. Release/Documentation Updates: Release note fixes or updates. Content cleanup or removal. Documentation-related failures. Infrastructure/Tooling: Infrastructure mirror issues. Tooling updates or fixes (e.g., grub2-tools, proliantutils). Issues related to mirror servers. Specific Project/Component Issues: Nova-related failures (e.g., nova-ceph-multistore). Cinder-related failures (e.g., cinder-plugin-ceph-tempest). OpenStack SDK related failures. Configuration/Setup Problems: Problems with deployment or setup (e.g., grub2-tools missing, bifrost bug). Issues with configurations (e.g., host patterns). Network/Connection Problems: DNS resolution issues. Timeout errors related to network operations. Post-Failure Analysis: Attempts to reproduce failures. Investigation into infrastructural problems. Finally some conclusion from this analysis. It seems that our most common reason of the gate instability is something called "unrelated/irrelevant failure" and also things like "infra failure". In both cases we can't really do much to try to improve that as this information is not enough. So I would like to ask all of You to try to be more precise in the recheck comments and give more detailed reasons why You recheck Your patch. If for example You have to recheck the patch due to "unrelated failure", please write there also bug number which cause failure or simply give there name of the unrelated failed test or something like that. That way when I will do similar analysis in e.g. month from now maybe it will be easier to identify most common bugs which are causing "unrelated failures" and try to prioritize somehow work on fix of that bug. [1] https://github.com/slawqo/rechecks-stats/blob/main/rechecks_stats/rechecks_… -- Slawek Kaplonski Principal Software Engineer Red Hat

8 16

[ironic]Server does not accept power operations when running OpenStack Ironic on Redfish
by Junya Noguchi (Fujitsu) 22 Mar '24

22 Mar '24

To whom it may concern. My name is Junya Noguchi. We have the following problems and questions. Please respond. 1. Problems and Questions When we use OpenStack Ironic Redfish driver to manage Redfish capable server, the server may not accept power on operations. Server may or may not power on. We want to clarify whether this is a server-specific issue or an OpenStack Ironic bug. Occurrence event ・Auto-cleaning or instance startup failed. ・Ironic does not power on via Redfish driver (see log) ・We tried increasing the power_state_change in ironic.conf to 30 minutes, but it didn't resolved. ・It does not happen when changing Redfish to IPMI 2. Server information R272-P31 (GIGABYTE Arm Server) CPU : Ampere Altra Max 2.8GHz-3.0GHz 1/128 Memory : 256GB Disk : 1TB/SSDx3/RAID1 Server firmware : MegaRac SP-X：https://www.ami.com/megarac/ ※It states that it is compatible with IPMI/Redfish Openstaack ver : Zed Hardware interface : redfish Power interface : redfish Boot interface : pxe Deploy interface : direct Network interface : flat 3. Log File : /var/log/ironic/ironic-conductor.log 2023-12-19 10:24:47.677 384940 DEBUG sushy.connector [-] HTTP request: GET "Server FQDN"/redfish/v1/Systems/Self; headers: {'OData-Version': '4.0'}; body: None; blocking: False; timeout: 60; session arguments: {}; _op /usr/lib/python3.9/site-packages/sushy/connector.py:118 2023-12-19 10:24:49.975 384940 DEBUG sushy.connector [-] HTTP response for GET "Server FQDN"/redfish/v1/Systems/Self: status code: 200 _op /usr/lib/python3.9/site-packages/sushy/connector.py:226 2023-12-19 10:24:49.976 384940 DEBUG sushy.resources.base [-] Received representation of System /redfish/v1/Systems/Self: {'_actions': {'reset': {'allowed_values': None, 'operation_apply_time_support': {'_maintenance_window_resource': {'resource_uri': '/redfish/v1/Systems/Self'}, 'maintenance_window_duration_in_seconds': 600, 'maintenance_window_start_time': None, 'mapped_supported_values': [<ApplyTime.IMMEDIATE: 'Immediate'>, <ApplyTime.AT_MAINTENANCE_WINDOW_START: 'AtMaintenanceWindowStart'>], 'supported_values': ['Immediate', 'AtMaintenanceWindowStart']}, 'target_uri': '/redfish/v1/Systems/Self/Actions/ComputerSystem.Reset'}}, '_oem_vendors': ['Gbt'], '_settings': None, 'asset_tag': 'Free form asset tag', 'bios_version': 'F31h (SCP: 2.10.20220531)', 'boot': {'allowed_values': ['None', 'Pxe', 'Floppy', 'Cd', 'Usb', 'Hdd', 'BiosSetup', 'Utilities', 'UefiShell', 'UefiTarget', 'SDCard', 'UefiHttp', 'RemoteDrive', 'UefiBootNext'], 'enabled': <BootSourceOverrideEnabled.ONCE: 'Once'>, 'mode': <BootSourceOverrideMode.UEFI: 'UEFI'>, 'target': <BootSource.PXE: 'Pxe'>}, 'description': 'System Self', 'hostname': None, 'identity': 'Self', 'indicator_led': <IndicatorLED.OFF: 'Off'>, 'links': {'oem_vendors': None}, 'maintenance_window': None, 'manufacturer': 'GIGABYTE', 'memory_summary': {'health': 'OK', 'size_gib': 256}, 'name': 'System', 'part_number': '000000000001', 'power_state': <PowerState.OFF: 'Off'>, 'serial_number': 'XXXXXXXXXXXXXX', 'sku': '01234567890123456789AB', 'status': {'health': <Health.OK: 'OK'>, 'health_rollup': <Health.CRITICAL: 'Critical'>, 'state': <State.ENABLED: 'Enabled'>}, 'system_type': <SystemType.PHYSICAL: 'Physical'>, 'uuid': '00000000-0000-4000-8000-D85ED387A8B3'} refresh /usr/lib/python3.9/site-packages/sushy/resources/base.py:689 2023-12-19 10:24:49.976 384940 ERROR oslo.service.loopingcall [-] Dynamic backoff interval looping call 'ironic.conductor.utils.node_wait_for_power_state.<locals>._wait' failed: oslo_service.loopingcall.LoopingCallTimeOut: Looping call timed out after 1490.91 seconds 2023-12-19 10:24:49.976 384940 ERROR oslo.service.loopingcall Traceback (most recent call last): 2023-12-19 10:24:49.976 384940 ERROR oslo.service.loopingcall File "/usr/lib/python3.9/site-packages/oslo_service/loopingcall.py", line 154, in _run_loop 2023-12-19 10:24:49.976 384940 ERROR oslo.service.loopingcall idle = idle_for_func(result, self._elapsed(watch)) 2023-12-19 10:24:49.976 384940 ERROR oslo.service.loopingcall File "/usr/lib/python3.9/site-packages/oslo_service/loopingcall.py", line 349, in _idle_for 2023-12-19 10:24:49.976 384940 ERROR oslo.service.loopingcall raise LoopingCallTimeOut( 2023-12-19 10:24:49.976 384940 ERROR oslo.service.loopingcall oslo_service.loopingcall.LoopingCallTimeOut: Looping call timed out after 1490.91 seconds 2023-12-19 10:24:49.976 384940 ERROR oslo.service.loopingcall 2023-12-19 10:24:49.977 384940 ERROR ironic.conductor.utils [None req-60791dc1-85c6-44c6-a3b7-a60e3242607d 4cb102fe974543b19c3e39916c7e61c1 00cfc520ffcb4533861e005a9a1e694f - - default default] Timed out after 1200 secs waiting for power on on node a357fdab-d8d5-4260-8e72-b444fa7c5cb9.: oslo_service.loopingcall.LoopingCallTimeOut: Looping call timed out after 1490.91 seconds 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils [None req-60791dc1-85c6-44c6-a3b7-a60e3242607d 4cb102fe974543b19c3e39916c7e61c1 00cfc520ffcb4533861e005a9a1e694f - - default default] Failed to prepare node a357fdab-d8d5-4260-8e72-b444fa7c5cb9 for cleaning: Failed to set node power state to power on.: ironic.common.exception.PowerStateFailure: Failed to set node power state to power on. 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils Traceback (most recent call last): 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/ironic/conductor/utils.py", line 183, in node_wait_for_power_state 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils return timer.start(initial_delay=1, timeout=retry_timeout).wait() 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/eventlet/event.py", line 125, in wait 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils result = hub.switch() 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/eventlet/hubs/hub.py", line 313, in switch 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils return self.greenlet.switch() 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/oslo_service/loopingcall.py", line 154, in _run_loop 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils idle = idle_for_func(result, self._elapsed(watch)) 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/oslo_service/loopingcall.py", line 349, in _idle_for 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils raise LoopingCallTimeOut( 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils oslo_service.loopingcall.LoopingCallTimeOut: Looping call timed out after 1490.91 seconds 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils oslo_service.loopingcall.LoopingCallTimeOut: Looping call timed out after 1490.91 seconds 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils During handling of the above exception, another exception occurred: 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils Traceback (most recent call last): 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/ironic/conductor/cleaning.py", line 91, in do_node_clean 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils prepare_result = task.driver.deploy.prepare_cleaning(task) 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/ironic_lib/metrics.py", line 59, in wrapped 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils result = f(*args, **kwargs) 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/ironic/drivers/modules/agent_base.py", line 726, in prepare_cleaning 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils result = deploy_utils.prepare_inband_cleaning( 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/ironic/drivers/modules/deploy_utils.py", line 732, in prepare_inband_cleaning 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils manager_utils.node_power_action(task, states.REBOOT) 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/ironic/conductor/task_manager.py", line 153, in wrapper 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils return f(*args, **kwargs) 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/ironic/conductor/utils.py", line 341, in node_power_action 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils notify_utils.emit_power_set_notification( 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/oslo_utils/excutils.py", line 227, in __exit__ 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils self.force_reraise() 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/oslo_utils/excutils.py", line 200, in force_reraise 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils raise self.value 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/ironic/conductor/utils.py", line 329, in node_power_action 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils task.driver.power.reboot(task, timeout=timeout) 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/ironic/conductor/task_manager.py", line 153, in wrapper 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils return f(*args, **kwargs) 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/ironic/drivers/modules/redfish/power.py", line 166, in reboot 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils _set_power_state(task, system, next_state, timeout=timeout) 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/ironic/drivers/modules/redfish/power.py", line 68, in _set_power_state 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils cond_utils.node_wait_for_power_state(task, target_state, 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils File "/usr/lib/python3.9/site-packages/ironic/conductor/utils.py", line 189, in node_wait_for_power_state 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils raise exception.PowerStateFailure(pstate=new_state) 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils ironic.common.exception.PowerStateFailure: Failed to set node power state to power on. 2023-12-19 10:24:49.989 384940 ERROR ironic.conductor.utils 2023-12-19 10:24:49.991 384940 DEBUG ironic.conductor.utils [None req-60791dc1-85c6-44c6-a3b7-a60e3242607d 4cb102fe974543b19c3e39916c7e61c1 00cfc520ffcb4533861e005a9a1e694f - - default default] Node a357fdab-d8d5-4260-8e72-b444fa7c5cb9 is not fast-track-able because it has an error: Failed to change power state to 'power on' by 'rebooting': Failed to set node power state to power on. is_fast_track /usr/lib/python3.9/site-packages/ironic/conductor/utils.py:1146 ---------------------------------------------------------------- 富士通株式会社先端技術開発本部ソフトウェア開発統括部基盤ソフト開発部野口惇矢(Noguchi Junya) 外線：070-3052-0998 内線：72-6042-3844 mail：noguchi.junya(a)jp.fujitsu.com

3 2

[Trove][kolla] trove db instance failed
by jayesh chaudhari 22 Mar '24

22 Mar '24

Hi All, I have enabled trove in my kolla ansible yoga setup. But my trove database instance is getting stuck in build state and then eventually failed after some time with polling timeout error. I have created trove management network which is my vlan network, also my control plane and data plane traffic is segregated through different interfaces. Now when I am creating db instance in admin tenant, my openstack instance in service tenant which is getting created do not have any network. I have tested trove-guest-image manually which is working fine. Am I missing something here ? Please suggest Thanks, Jayesh

1 0

Questi
by Franck VEDEL 22 Mar '24

22 Mar '24

Good morning, I currently have an Openstack cluster made up of 3 nodes, an iscsi bay (10T), 576 G of Ram, 10T, 288vcpus. This cluster is used by around 150 students, but is reaching its limits. Having obtained a budget to set up a larger cluster, I am wondering about the choice of the number of nodes, their role (how many controllers, network, compute, etc.) and above all what solution for storage. Let's imagine a budget to buy 6 servers with good capacities, is the right choice Ceph storage (with cinder and rdb?) on the Openstack cluster nodes? Do we need 3 servers for a Ceph cluster and 3 for the Openstack part (in this case I lose capacity for the "compute" part)... I don't know what the right choices are and above all, I have a little afraid of going in the wrong directions. Could any of you guide me, or give me links to sites that could help me (and that I haven't seen). Thanks in advance Franck VEDEL Dép. Réseaux Informatiques & Télécoms IUT1 - Univ GRENOBLE Alpes 0476824462 Stages, Alternance, Emploi.

7 15

[release] Release countdown for week R-2, March 25-29
by Herve Beraud 22 Mar '24

22 Mar '24

Development Focus ----------------- We are on the final mile of the 2024.1 Caracal development cycle! Remember that the 2024.1 Caracal final release will include the latest release candidate (for cycle-with-rc deliverables) or the latest intermediary release (for cycle-with-intermediary deliverables) available. March 28 is the deadline for final 2024.1 Caracal release candidates as well as any last cycle-with-intermediary deliverables. We will then enter a quiet period until we tag the final release on April 3, 2024. Teams should be prioritizing fixing release-critical bugs, before that deadline. Otherwise it's time to start planning the 2024.2 Dalmatian development cycle, including discussing Forum and PTG sessions content, in preparation of the 2024.2 Dalmatian Virtual PTG (April 8-12, 2024).. Actions ------- Watch for any translation patches coming through on the stable/2024.1 branch and merge them quickly. If you discover a release-critical issue, please make sure to fix it on the master branch first, then backport the bugfix to the stable/2024.1 branch before triggering a new release. Also merge open release patches like https://review.opendev.org/q/topic:reno-2024.1+status:open. Please drop by #openstack-release with any questions or concerns about the upcoming release ! Upcoming Deadlines & Dates -------------------------- Final 2024.1 Caracal release: April 3, 2024 2024.2 Dalmatian Virtual PTG: April 8-12, 2024 -- Hervé Beraud Senior Software Engineer at Red Hat irc: hberaud https://github.com/4383/

1 0

[watcher][caracal] release critical support for new oslo.db
by James Page 22 Mar '24

22 Mar '24

Hi Watchers Ref: https://bugs.launchpad.net/watcher/+bug/2056181 Watcher 12.0.0 RC1 is not compatible with oslo.db 15.0.0 - the test suite has numerous failures as the DB api module has not been updated for the changes in oslo.db to support SQLAlchemy 2.0+. Raising awareness mainly - I can take a look at this but if anyone else with more experience of this transition can help much appreciated. Cheers James

1 0

[kolla] upgrade from 2023.1 to 2023.2
by Satish Patel 22 Mar '24

22 Mar '24

Folks, I am trying to upgrade kolla-ansible deployment from 2023.1 to 2023.2. During upgrade encounter this error TASK [service-ks-register : cinder | Granting user roles] ******************************************************************************* FAILED - RETRYING: [os-ctrl1]: cinder | Granting user roles (5 retries left). FAILED - RETRYING: [os-ctrl1]: cinder | Granting user roles (4 retries left). FAILED - RETRYING: [os-ctrl1]: cinder | Granting user roles (3 retries left). FAILED - RETRYING: [os-ctrl1]: cinder | Granting user roles (2 retries left). FAILED - RETRYING: [os-ctrl1]: cinder | Granting user roles (1 retries left). failed: [os-ctrl1] (item=cinder -> service -> service) => {"action": "os_user_role", "ansible_loop_var": "item", "attempts": 5, "changed": false, "extra_data": {"data": null, "details": null, "response": "None"}, "item": {"project": "service", "role": "service", "user": "cinder"}, "msg": "No Role found for service"} As per release notes [1] I have noticed it requires a service account but not sure what I have to add in config. [1] https://docs.openstack.org/releasenotes/kolla-ansible/2023.2.html#relnotes-…

2 3

[openstack-helm-infra][mariadb] mysql-exporter installation does not support ServiceMonitor
by mohammadk7798＠gmail.com 21 Mar '24

21 Mar '24

Hi folks. When you enable exporter monitoring, you need to create the ServiceMonitor manually and the whole "enabling monitoring" experience does not feel complete. Do we want to add support for that? I can send a pull request for this feature.

1 0

[PTG] Less than One Month Reminders!
by Kendall Nelson 20 Mar '24

20 Mar '24

Hello Everyone, The April PTG is rapidly approaching and team moderators are signing up for time to meet via the PTGbot. The schedule is filling up and we are excited to see you all! If you have not yet registered, please do so! It's free![1]. Another note about this PTG in particular, Meetpad is the default video conferencing tool. TTeam moderators are able to override the meeting URL if they choose to do so in order to make use of other tools. We do have a few zoom rooms if needed. This is the first PTG we are doing this for, so please give us feedback[2] with as many details as possible if you run into any issues with Meetpad. Open source needs open tools after all! If you have any questions, please let us know via email to ptg(a)openinfra.dev . Thank you! -Kendall Nelson Senior Upstream Developer Advocate The OpenInfra Foundation [1] http://ptg2023.openinfra.dev/ [2] https://etherpad.opendev.org/p/April2024-PTG-Feedback

2 2

[Glance] Cancelling Weekly Meeting (21st March)
by Pranali Deore 20 Mar '24

20 Mar '24

Hello, Since I won't be able to chair tomorrow's meeting and there is nothing much on agenda too, cancelling the meeting. Thanks & Regards, Pranali Deore

1 0

[swift] Can I use oslo.log / oslo.config in swift? Can we make Swift behave like the rest of OpenStack?
by Thomas Goirand 20 Mar '24

20 Mar '24

Hi, Because we had some issues with a bad rebalance in production (we didn't loose any data, but some drives went full...), I attempted to implement the Swift mitigation to prevent disk full scenarios. I found that what upstream recommends [1] is a script that's written in Python 2, and that wouldn't work at all: it's not only very old, it's also a very partial implementation. So I wrote this: https://review.opendev.org/c/openstack/swift/+/907523 But then, I was told (thanks for the review!) that I shouldn't be using oslo.config and/or oslo.log, as other parts of Swift don't do that. I do understand that the rest of Swift is like this, and therefore, the review comment is probably right. However... Back in the days, I would have understood why things would have been written that way: the Oslo libs were young, and not available everywhere, and it was kind of a good idea not to use them. But now, fast forward in 2024, I found that Swift behaving differently from the rest of OpenStack is more a problem than a feature. It's also very frustrating to use the old way with the config_parser, which can't auto-generate the config file and so on. So I am wondering: - is it still the case, that I shouldn't use oslo.config / oslo.log when adding a patch in Swift? - can we revisit this, and convert swift to oslo.config generated config files, and PBR shell-script entry points instead of binary simply dropped into the toplevel bin folder? Can we make swift smarter and behave like the rest of OpenStack? :) Cheers, Thomas Goirand (zigo) [1] https://docs.openstack.org/swift/latest/admin_guide.html#preventing-disk-fu…

2 2

[magnum] Register PTG interest
by Jake Yip 20 Mar '24

20 Mar '24

Hi all, If you are interested in attending the Magnum PTG, please fill up your interest in the planning etherpad [1] The Magnum team is very small and spread across EU and AU/NZ, so it is difficult to find slots that will suit all, but we are going to try :) P.S. There is already a tentative booking for Wed, 10 Apr, 06-08 UTC, which works for the current Cores. I am still open to shifting if there are overwhelming demand. [1] https://etherpad.opendev.org/p/apr2024-ptg-magnum-planning -- Jake Yip Technical Lead, Nectar Research Cloud

1 0

Practical workshop labs for Meetups?
by Julia Kreger 19 Mar '24

19 Mar '24

Hey folks, Yesterday, I took part in the Los Angeles OpenInfra meetup, and a question that came up from some of the organizers was if there are any practical workshop labs we can walk folks through to sort of show some practical/concrete usage aspects of OpenStack? Is anyone aware of any such materials? I ask because we are talking of trying to organize the next meetup in more a workshop style, especially as some participants did also express interest in hands on learning. Thanks in advance, -Julia

6 7

[aodh][ec2-api][sahara][trove][vitrage][watcher] autocommit was (again) removed from LegacyEngineFacade
by Takashi Kajinami 19 Mar '24

19 Mar '24

Hello, Please be aware that LegacyEngineFacade in the latest oslo db release for caracal no longer enables autocommit[1]. Removal was attempted in the previous release, as part of the overall efforts to adapt to sqlalchemy 2.0, but later reverted[2] because multiple projects need more time to adapt to the change. Now the removal is again proposed for caracal and the version currently listed in upper constraints no longer provides that functionality. Quickly searching the current usage by hound, it seems the project listed in this mail title still contains autocommit=True in LegacyEngineFacade, and is likely broken by the change. I'd suggest checking CI status to evaluate the impact. Note 1: The list may be incomplete Note 2: It seems aodh is not actually relying on autocommit and the removal might not be affecting it [1] https://review.opendev.org/c/openstack/oslo.db/+/875986 [2] https://review.opendev.org/c/openstack/oslo.db/+/895631 Thank you, Takashi -- Takashi Kajinami irc: tkajinam github: https://github.com/kajinamit launchpad: https://launchpad.net/~kajinamit

3 4

[horizon] Dalmatian Virtual PTG Schedule
by Tatiana Ovchinnikova 19 Mar '24

19 Mar '24

Hello team! Here's the etherpad for Horizon Dalmatian Virtual PTG: https://etherpad.opendev.org/p/horizon-dalmatian-ptg Feel free to add the topics you want to discuss! Our time slots for the PTG are: Tuesday, April 9, 14 UTC - 16 UTC, room havana Wednesday, April 10, 16 UTC - 17 UTC, room havana The detailed schedule is in the etherpad. Don't forget to register for PTG, if not done yet: https://openinfra.dev/ptg/ See you at the PTG! Regards, Tatiana Ovchinnikova (IRC: tmazur)

1 0

Use Openstack SDK for Swift
by Albert Braden 19 Mar '24

19 Mar '24

I'm writing a script that will use admin credentials to check user projects for containers. I'm already doing something similar for non-swift accounts, doing things like: cloud.network.networks(project_id=projectid): I read here about the Object SDK: https://docs.openstack.org/openstacksdk/latest/user/guides/object_store.html And I tried this: cloud.object_store.containers(project_id=projectid): But I get an error: Invalid query params: project_id I read the Object SDK document here and it doesn't seem to say anything about how to specify a project: https://docs.openstack.org/openstacksdk/latest/user/proxies/object_store.ht… But when I read the Swift API document, I see that I can use "/v1/{account}/{container}", so I'm guessing that there must be a way to do it via the SDK. https://docs.openstack.org/api-ref/object-store/#show-container-details-and… Is it possible to specify the project in an Object SDK call, or do I need to use the old python API for this?

2 2

[NEUTRON] Separating network with Neutron AZ
by Nguyễn Hữu Khôi 19 Mar '24

19 Mar '24

Hello. I am looking for an option to map instances to network which has same az with compute resource. It will look like [cinder]cross_az_attach = False It will be nice if we decide to run edge site Could you tell me that we will have a road map to do it? Thank you. Nguyen Huu Khoi

1 0

Tacker REST API Authentication
by Ravichandran Venkataraman (veravich) 19 Mar '24

19 Mar '24

Hi, Is it possible to use username/password for authentication of Tacker REST API calls? In the tacker.conf, I see both BASIC and OAUTH2 methods for authentication. If I set the auth_type to BASIC and configure the user_name and password values, will I be able to make the REST calls with these username and password? Thanks and regards, Ravichandran

2 3

Yoga Magnum: csi-cinder-controllerplugin-0 fails to initialize properly because of obsolete API
by Michel Jouvin 19 Mar '24

19 Mar '24

Hi, We recently upgraded our cluster to Yoga and since then we cannot successfully start pods in clusters using K8s 1.23 that require a volume. The volume is properly created but attachment fails because it is trying to use v1beta1.CSINode and v1beta1.VolumeAttachment that no longer exists. I found a reference to this in https://github.com/kubernetes/cloud-provider-openstack/issues/1845 but the way to fix it is unclear. I tried to use last version of CSI-related stuff from registry.k8s.io (playing with labels and source), but I then got another problem which may be related (it is my guess) to the fact that I'm using too recent versions. Is somebody using sucessfully Magnum Yoga/K8bs 1.23 combination sucessfully and what is the trick to do it? Thanks in advance for any help. Best regards, Michel

3 12

[skyline] Running a Skyline in "subdirectory"
by Dmitriy Rabotyagov 19 Mar '24

19 Mar '24

Hey folks, I was looking into a way to make both Horizon and Skyline work at the same time, and found out that I'm not really able to make Skyline to run in sub-URL. So for instance the plan was to place Horizon under /horizon (which is easily doable) and then Skyline under /skyline. However so far I haven't found any setting or anything that would allow me to do so. Basically, I've realized that static content is _really_ static, which means it does have hardcoded URIs: https://opendev.org/openstack/skyline-console/src/branch/master/skyline_con… So either I'm just not realizing the very simple technique which allows to overcome hardcoded in static files URIs (like some rewrite?), or just serving Skyline from a subdirectory is not possible by design... Would be great if someone could share their experience about Skyline and if anyone managed to do what I'm looking for. Thanks in advance

2 1

[Freezer] Is Freezer dead?
by pi3.14＠tuta.io 19 Mar '24

19 Mar '24

Hi folks, is Freezer still supported? I don't see any real development going on with it. Is it recommended to use in a production Cloud environment? Are there other free and open source alternatives to Freezer? Thanks Roby

8 19

[publiccloud-sig] Reminder - next meeting March 20th - 0800 UTC
by Felix Kronlage-Dammers 18 Mar '24

18 Mar '24

Hi everyone, This Wednesday (March 20th) the next meeting of the public cloud sig is going to happen. We’ll be meeting at 0800 UTC here: https://meetpad.opendev.org/publiccloud-sig See also here for all other details: https://wiki.openstack.org/wiki/PublicCloudSIG See you Wednesday! felix -- Felix Kronlage-Dammers Product Owner IaaS & Operations Sovereign Cloud Stack Sovereign Cloud Stack — standardized, built and operated by many Ein Projekt der Open Source Business Alliance - Bundesverband für digitale Souveränität e.V. Tel.: +49-30-206539-205 | Matrix: @fkronlage:matrix.org | fkr(a)osb-alliance.com

1 0

[manila] Docs bugsquash: March 19th - 22nd
by Carlos Silva 18 Mar '24

18 Mar '24

Hello, Zorillas! As mentioned in last week's meeting, we are having a bugsquash/hack-a-thon focused on reducing our documentation backlog. I have created an ethercalc with some of the bugs we intend to work on [1]. - We will have the kick-off meeting on March 19th, 15 UTC and we will use meetpad [2] - We will use the Manila upstream meeting slot (March 21st, 15 UTC) as a checkpoint. In case you are planning to join and the bug you intend to work on is not in the ethercalc, please add it. [1] https://ethercalc.net/c9z5705xdeui [2] https://meetpad.opendev.org/ManilaCaracalBugsquash Looking forward to closing some docs bugs with you! Regards, carloss

1 0

[tc] Next Meeting Tomorrow, Tues March 19, 1800 UTC
by Jay Faulkner 18 Mar '24

18 Mar '24

Hi all, The next meeting of the Technical Committee is tomorrow, March 19, at 1800 UTC in #openstack-tc in OFTC. The proposed agenda is: Agenda - Roll call - Follow up on tracked action items - Gate health check - Implementation of Unmaintained branch statuses - TC vPTG 2024.2 / TC Tracker 2024.1 - https://etherpad.opendev.org/p/tc-2024.1-tracker - https://etherpad.opendev.org/p/apr2024-ptg-os-tc - Open Discussion and Reviews Thank you, Jay Faulkner OpenStack TC Chair

1 0

Survey to schedule i18n SIG 2024.04 PTG
by Seongsoo Cho 18 Mar '24

18 Mar '24

Hi i18n SIG I create a survey to schedule i18n SIG 2024.04 PTG. Please let me know, what time and day works best for you. survey: https://framadate.org/tY49ETqtFD9R4LPt Best Regards Seongsoo -- Seongsoo Cho OpenStack Korea User Group / Community Leader IRC #seongsoocho

1 0

[kolla-ansible][2023.2] Need some information about using let's encrypt
by wodel youchi 18 Mar '24

18 Mar '24

Hi, I deployed openstack using a self-signed certificate generated by kolla. I am using the encryption both internally and externally. Then I tried to use let's encrypt on the same platform, and it seemed to work, but only on the external URL of openstack (horizon portal). Then I undeployed my openstack, and I tried to redeploy it again, this time Keystone couldn't be deployed, it complained about not being able to verify the self-signed certificate. I had to disable the let's encrypt lines on the globals.yml to be able to deploy openstack. My question is : - Does using let's encrypt cover both internal and external traffic of openstack on all ports or just the 443? - If it does, how to configure globals.yml , especially the lines concerning the certificates? - If it does not, it covers only Horizon on 443, how could someone combine the use of self-signed to let's encrypt use? is it even possible? Regards.

2 3

[Kolla-ansible][Trove][2023.2] Unable to create datastore when using self-signed certificate
by wodel youchi 18 Mar '24

18 Mar '24

Hi, I am trying to complete trove configuration, by creating a datastore. I am using a self-signed certificate in my deployment. When trying to create a datastore I got : ble but deprecated behaviour. Please set this to True. 2024-03-18 12:26:20.245 35 WARNING keystonemiddleware.auth_token [-] AuthToken middleware is set with keystone_authtoken.service_token_roles_required set to False. This is backwards compatible but deprecated behaviour. Please set this to True. 2024-03-18 12:26:20.249 35 WARNING keystonemiddleware.auth_token [-] Using the in-process token cache is deprecated as of the 4.2.0 release and may be removed in the 5.0.0 release or the 'O' development cycle. The in-process cache causes inconsistent results and high memory usage. When the feature is removed the auth_token middleware will not cache tokens by default which may result in performance issues. It is recommended to use memcache for the auth_token token cache by setting the memcached_servers option. 2024-03-18 12:26:20.685 35 INFO trove.extensions.mgmt.datastores.service [None req-ef8a2f03-8500-40e0-88fe-4fac6ac5c9cb 85c09dd86fc846f98c3b4add7f64d76f 54589053b612438ab9c4d3f800c75000 - - - -] Tenant: '54589053b612438ab9c4d3f800c75000' is adding the datastore version: '5.7.29' to datastore: 'mysql' *2024-03-18 12:26:20.719 35 WARNING keystoneauth.identity.generic.base [None req-ef8a2f03-8500-40e0-88fe-4fac6ac5c9cb 85c09dd86fc846f98c3b4add7f64d76f 54589053b612438ab9c4d3f800c75000 - - - -] Failed to discover available identity versions when contacting https://dashint.cdn.example.com:5000 <https://dashint.cdn.example.com:5000>. Attempting to parse version from URL.: keystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://dashint.cdn.example.com:5000 <https://dashint.cdn.example.com:5000>: HTTPSConnectionPool(host='dashint.cdn.example.com <http://dashint.cdn.example.com>', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')))* *2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi [None req-ef8a2f03-8500-40e0-88fe-4fac6ac5c9cb 85c09dd86fc846f98c3b4add7f64d76f 54589053b612438ab9c4d3f800c75000 - - - -] e85a7be5-6d90-456e-8c24-4125098a6228: Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://dashint.cdn.example.com:5000 <https://dashint.cdn.example.com:5000>: HTTPSConnectionPool(host='dashint.cdn.example.com <http://dashint.cdn.example.com>', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))): keystoneauth1.exceptions.discovery.DiscoveryFailure: Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://dashint.cdn.example.com:5000 <https://dashint.cdn.example.com:5000>: HTTPSConnectionPool(host='dashint.cdn.example.com <http://dashint.cdn.example.com>', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)')))* 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi Traceback (most recent call last): 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/connectionpool.py", line 703, in urlopen 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi httplib_response = self._make_request( 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/connectionpool.py", line 386, in _make_request 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi self._validate_conn(conn) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/connectionpool.py", line 1042, in _validate_conn 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi conn.connect() 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/connection.py", line 419, in connect 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi self.sock = ssl_wrap_socket( 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/util/ssl_.py", line 449, in ssl_wrap_socket 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi ssl_sock = _ssl_wrap_socket_impl( 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/util/ssl_.py", line 493, in _ssl_wrap_socket_impl 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi return ssl_context.wrap_socket(sock, server_hostname=server_hostname) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/eventlet/green/ssl.py", line 446, in wrap_socket 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi return GreenSSLSocket(sock, *a, _context=self, **kw) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/eventlet/green/ssl.py", line 140, in __init__ 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi self.do_handshake() 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/eventlet/green/ssl.py", line 312, in do_handshake 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi return self._call_trampolining( 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/eventlet/green/ssl.py", line 162, in _call_trampolining 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi return func(*a, **kw) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/usr/lib64/python3.9/ssl.py", line 1343, in do_handshake 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi self._sslobj.do_handshake() 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi During handling of the above exception, another exception occurred: 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi Traceback (most recent call last): 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/requests/adapters.py", line 489, in send 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi resp = conn.urlopen( 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/connectionpool.py", line 787, in urlopen 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi retries = retries.increment( 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/urllib3/util/retry.py", line 592, in increment 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi raise MaxRetryError(_pool, url, error or ResponseError(cause)) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host=' dashint.cdn.example.com', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi During handling of the above exception, another exception occurred: 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi Traceback (most recent call last): 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/session.py", line 1014, in _send_request 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi resp = self.session.request(method, url, **kwargs) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/requests/sessions.py", line 587, in request 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi resp = self.send(prep, **send_kwargs) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/requests/sessions.py", line 701, in send 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi r = adapter.send(request, **kwargs) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/requests/adapters.py", line 563, in send 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi raise SSLError(e, request=request) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi requests.exceptions.SSLError: HTTPSConnectionPool(host=' dashint.cdn.example.com', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi During handling of the above exception, another exception occurred: 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi Traceback (most recent call last): 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/identity/generic/base.py", line 133, in _do_create_plugin 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi disc = self.get_discovery(session, 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/identity/base.py", line 605, in get_discovery 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi return discover.get_discovery(session=session, url=url, 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/discover.py", line 1459, in get_discovery 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi disc = Discover(session, url, authenticated=authenticated) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/discover.py", line 539, in __init__ 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi self._data = get_version_data(session, url, 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/discover.py", line 106, in get_version_data 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi resp = session.get(url, headers=headers, authenticated=authenticated) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/session.py", line 1133, in get 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi return self.request(url, 'GET', **kwargs) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/session.py", line 923, in request 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi resp = send(**kwargs) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi File "/var/lib/kolla/venv/lib64/python3.9/site-packages/keystoneauth1/session.py", line 1018, in _send_request 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi raise exceptions.SSLError(msg) 2024-03-18 12:26:20.721 35 ERROR trove.common.wsgi keystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://dashint.cdn.example.com:5000: HTTPSConnectionPool(host=' dashint.cdn.example.com', port=5000): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))) Regards.

1 0

Is direct upgrade from Yoga to Antelope supported?
by Michel Jouvin 18 Mar '24

18 Mar '24

Hi, We are in the process of upgrading our Yoga cloud to Antelope and I was wondering if, Antelope being a SLURP release, it was supported to do it in 1 step or if Antelope was the first release from which it will be possible to skip one release and to go directly to the next SLURP release (Caracal). I didn't find a clear answer in the documentation... Best regards, Michel

5 5

New instance, provider vlan network, network unpredictable
by Mika Saari 18 Mar '24

18 Mar '24

Hi, I am using latest kolla-ansible installation. Network is in openvswitch type. My question is related to my provider network with VLAN type (external HW router, external DHCP, ...). The network is directly connected to the hardware through HW switch <-tagged-> bond0 <-> br-ex1 <-> openvswitch. When I create a new instance (cirros) to this provider network the instance can not connect to the metadata server during the bootup. The dhcp is trying to fetch the address, and I can sniff the data in bond0, br-ex1, br-int and br-tun and the dhcp request leaves the hardware, DHCP server sends the reply, but the reply wont go through back to the instance. If I force a static IP to this cirros instance and try pinging the network, the ICMP doesn't leave the bond0. After around 15 minutes the network starts suddenly to work and dhcp reply goes through and the instance gets the dynamic IP. After this the whole network starts to work fluently. Any ideas what might be the problem? Thank you very much!

3 5

[neutron] Bug Deputy Report March 11 - March 17
by Nurmatov Mamatisa 18 Mar '24

18 Mar '24

Hi team, Below is the week summary of bug report for last week. 1 rfe was proposed. Undecided bugs needs further triage. Details: High ---- - https://bugs.launchpad.net/neutron/+bug/2057492 - [devstack-tobiko-neutron] periodic broken running on ubuntu focal - In progress: https://review.opendev.org/c/x/tobiko/+/912718 - Assigned to Slawek Kaplonski - https://bugs.launchpad.net/neutron/+bug/2057770 - [neutron-dynamic-routing] LBaaS constants still present in older versions of Neutron - Fix released: https://review.opendev.org/c/openstack/neutron-dynamic-routing/+/912737 - Assigned to Rodolfo Alonso - https://bugs.launchpad.net/neutron/+bug/2057914 - [neutron-vpnaas-dashboard] UT failing due to a change in Django - Fix released: https://review.opendev.org/c/openstack/neutron-vpnaas-dashboard/+/912911 - Assigned to Rodolfo Alonso - https://bugs.launchpad.net/neutron/+bug/2057942 - external_gateways KeyError when running add_gw_port_info_to_logical_router_port - In progress: https://review.opendev.org/c/openstack/neutron/+/913408 - Assigned to Brian Haley Medium ------ - https://bugs.launchpad.net/neutron/+bug/2056778 - TestOVNMechanismDriver some ipv6 tests fails if host has ipv6 dns_names configured - Fix released: https://review.opendev.org/c/openstack/neutron/+/912475 (backported to stable/2023.1 , stable/2023.2) - Assigned to Arnau Verdaguer - https://bugs.launchpad.net/neutron/+bug/2057698 - Concurrent routerroute update fails on deletion with AttributeError - In progress: https://review.opendev.org/c/openstack/neutron/+/912629 - Assigned to Sebastian Lohff - https://bugs.launchpad.net/neutron/+bug/2057983 - The HA flag of user defined flavos routers is always set to true - In progress: https://review.opendev.org/c/openstack/neutron/+/913276 - Miguel Lavalle RFE --- - https://bugs.launchpad.net/neutron/+bug/2058006 - [RFE] Allow multiple segments per host in ML2/OVN Undecided --------- - https://bugs.launchpad.net/neutron/+bug/2058018 - AssertionError: do not call blocking functions from the mainloop Best regards, Mamatisa Nurmatov

1 0

[kuryr-libnetwork] Run with a service container or install on the compute node?
by Francesco Di Nucci 18 Mar '24

18 Mar '24

Hello, I am working to install Zun on a OpenStack instance, so I'm required to set up Docker with kuryr-libnetwork. I see that there are three possible approaches: * Running it inside a service container, using the Docker Engine on the compute nodes (https://opendev.org/openstack/kuryr-libnetwork#getting-it-running-with-a-se…) * Installing it directly on the compute nodes (https://opendev.org/openstack/kuryr-libnetwork#getting-it-running-with-a-se…) * Installing it as a Docker plugin (https://opendev.org/openstack/kuryr-libnetwork#getting-it-running-with-a-se…) Does anyone know the advantages/disadvantages of the three approaches? I've tried to find a comparison, but the OpenStack docs only include a procedure to install it on a Ubuntu Compute Node (https://docs.openstack.org/kuryr-libnetwork/latest/install/compute-install-…) Best regards Francesco Di Nucci

1 0

Neutron external connectivity to and from tenant VMs : Help
by KK CHN 16 Mar '24

16 Mar '24

Hi, Neutron external network connection to and from instances.. Problem statement. I have deployed AIO on a Virtual Machine. (Created the demo networks, flavors and images by init-runonce script.) I created a cirros instance with a demo-net instance, and the instance is spawning with 10.0.0.0/24 ips. *inside the cirros Vm I am able to ping its own ip(10.0.0.73) and 10.0.0.1 and the "public1" network gateway 10.176.17.63 .. But unable to ping the Base VM IP 10.176.17.61* Any hints how I can reach the Base VM IP 10.176.17.61 ? from 10.0.0.73 and vice versa .. What steps I missed or I am unaware of? To get the external connection/ping/access..? I have referred many documents and I am at the end of the rope, but couldn't find a solution or what the exact issue is , any guidance much appreciated... Krish. If more information is required : There are two networks by default created 1. public1. with gateway as 10.176.17.63 public1-subnet <http://10.220.0.24/project/networks/subnets/3b9e11ae-4595-4e4c-ba71-1fba209…> 10.176.16.0/23 IPv4 10.176.17.63 2. demo-net demo-subnet <http://10.220.0.24/project/networks/subnets/80e8d33e-6276-450b-bb46-76446dc…> 10.0.0.0/24 IPv4 10.0.0.1 These are the values given in the " kolla_ansible_venv3/share/kolla-ansible/init-runonce" script.. ################################################################################# DEMO_NET_CIDR=${DEMO_NET_CIDR:-'10.0.0.0/24'} DEMO_NET_GATEWAY=${DEMO_NET_GATEWAY:-'10.0.0.1'} DEMO_NET_DNS=${DEMO_NET_DNS:-'8.8.8.8'} ENABLE_EXT_NET=${ENABLE_EXT_NET:-1} EXT_NET_CIDR=${EXT_NET_CIDR:-'10.176.17.0/23'} EXT_NET_RANGE=${EXT_NET_RANGE:-'start=10.176.17.62,end=10.176.17.80'} EXT_NET_GATEWAY=${EXT_NET_GATEWAY:-'10.176.16.1'} ################################################################################ Demo Router: (ee6500a8-039c) <http://10.220.0.24/project/networks/ports/ee6500a8-039c-4ceb-8dc0-b37e2c3a2…> - 10.176.17.63 Active External Gateway UP (bb4c9437-82fa) <http://10.220.0.24/project/networks/ports/bb4c9437-82fa-4689-b125-9edc1987c…> - 10.0.0.1 Active Internal Interface UP (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ grep ^[^#] /etc/kolla/globals.yml --- workaround_ansible_issue_8743: yes config_strategy: "COPY_ALWAYS" kolla_base_distro: "ubuntu" openstack_release: "2023.1" kolla_internal_vip_address: "10.220.0.24" // a free unused IP address in 10.220.0.0/24 segment. kolla_external_vip_address: "{{ kolla_internal_vip_address }}" kolla_container_engine: docker network_interface: "ens224" /// this vNIC is with ip 10.220.0.51 and without internet - a vlan segment for internal experiments. neutron_external_interface: "ens160" // this is the vNIC with my organization dhcp leased ip 10.176.17.61 assigned and up and running neutron_plugin_agent: "openvswitch" nova_compute_virt_type: "qemu" (kolla_ansible_venv3) ubuntu@ub Strange Behaviour: When I create another instance ( Cirros) with the network selected as " public1" network, the instance is spawning the horizon dashboard showing IP as 10.176.17.70 extTestVM <http://10.220.0.24/project/instances/9e744ab1-7a21-4d55-ad03-c01d5631657a/> cirros 10.176.17.70 But inside this VM $ ip a /// lists the IP address of this VM as 169.254.198.1/16 ?? why 169.254 .198.1/16 ? It should be 10.176.17.70 right ?? What's happening ?? Confused ..

3 4

[all][tc][policy] RBAC discussion in 2024.2 PTG
by Ghanshyam Mann 16 Mar '24

16 Mar '24

Hello Everyone, I have booked the Tuesday 15-16 UTC slot Folsom room for the RBAC discussion. Feel free to add the topics/queries to be discussed or your project-related RBAC session info in the below etherpad: - https://etherpad.opendev.org/p/rbac-2024.2-ptg -gmann

1 0

Enabling SNAT for Non-Private Addresses
by Jan Wasilewski 15 Mar '24

15 Mar '24

Hi everyone, I'd like to inquire about SNAT settings for non-private addresses. I've created a network with the subnet 100.70.0.0/24 (please note, it starts with 100, not 10). I'm wondering why all hosts attached to such a network cannot establish an internet connection when the network is connected to a router with an external gateway that has internet access. However, I found documentation here: https://docs.openstack.org/neutron/zed/admin/intro-nat.html, which states that SNAT works only for private addresses (so mine are not included). Is there a way to enable SNAT for my subnet as well, but in a different way than manually configuring iptables settings on top of Neutron nodes? If so, could anyone share it? Thanks in advance for your help. /Jan Wasilewski

2 3

[kolla-ansible][Antelope][Heat] Auto Scaling Group - Cancel Update
by Devin Patterson 15 Mar '24

15 Mar '24

Hello, We are working on a workflow to cancel in progress rolling updates for the resource OS::Heat::AutoScalingGroup When we run the command `openstack stack cancel <stack-id> it cancels the Heat stack update, but the Auto-Scaling group finishes updating all VMs in the group. We need a way to either rollback or completely cancel the Auto Scaling Group update and not replace any additional VMs. Any help would be appreciated. Devin

1 0

[release] Release countdown for week R-2
by Thierry Carrez 15 Mar '24

15 Mar '24

Development Focus ----------------- At this point we should have release candidates (RC1 or recent intermediary release) for all the 2024.1 Caracal deliverables. Teams should be working on any release-critical bugs that would require another RC or intermediary release before the final release. Actions ------- Early in the week, the release team will be proposing stable/2024.1 branch creation for all deliverables that have not branched yet, using the latest available 2024.1 Caracal release as the branch point. If your team is ready to go for creating that branch, please let us know by leaving a +1 on these patches. If you would like to wait for another release before branching, you can -1 the patch and update it later in the week with the new release you would like to use. By the end of the week the release team will merge those patches though, unless an exception is granted. Once stable/2024.1 branches are created, if a release-critical bug is detected, you will need to fix the issue in the master branch first, then backport the fix to the stable/2024.1 branch before releasing out of the stable/2024.1 branch. After all of the cycle-with-rc projects have branched we will branch devstack, grenade, and the requirements repos. This will effectively open them up for 2024.2 Dalmatian development, though the focus should still be on finishing up 2024.1 Caracal until the final release. Opening up the new development cycle is also a good opportunity to teams to revise their zuul jobs and used nodesets and clean up all unnecessary ones. For projects with translations, watch for any translation patches coming through and merge them quickly. A new release should be produced so that translations are included in the final 2024.1 Caracal release. Finally, now is a good time to finalize release notes. In particular, consider adding any relevant "prelude" content. Release notes are targeted for the downstream consumers of your project, so it would be great to include any useful information for those that are going to pick up and use or deploy the 2024.1 Caracal version of your project. Upcoming Deadlines & Dates -------------------------- Final RC deadline: March 28th, 2024 (R-1 week) Final 2024.1 Caracal release: April 3rd, 2024 Dalmatian PTG: April 8-12, 2024 -- Thierry Carrez (ttx)

1 0

[skyline] Pending changes to Kolla-ansible for Skyline
by Jäger Uwe 15 Mar '24

15 Mar '24

Dear Skyline-Team, I have created a couple of changes for Kolla-ansible to have Skyline configured to use the latest features. If you find the time, your are invited to have a look at those changes: 909481: Allow overriding of Skyline logos | https://review.opendev.org/c/openstack/kolla-ansible/+/909481 910514: Skyline configure Prometheus | https://review.opendev.org/c/openstack/kolla-ansible/+/910514 905861: Allow customizing of Skyline configuration | https://review.opendev.org/c/openstack/kolla-ansible/+/905861 905860: Update Skyline configuration to enable SSO | https://review.opendev.org/c/openstack/kolla-ansible/+/905860 909329: Fix Skyline API Server TLS configuration | https://review.opendev.org/c/openstack/kolla-ansible/+/909329 909482: Add more services to nginx.conf | https://review.opendev.org/c/openstack/kolla-ansible/+/909482 If you have any questions or comments, please leave them there or contact me directly. Kind regards Uwe

2 1