March 2024 - openstack-discuss - lists.openstack.org

[dev][ops][neutron] - Securing traffic in colocation env with E2E encryption
by Filip Dobrovolný 15 Mar '24

15 Mar '24

Dear OpenStack Community, I am currently contributing to the Sovereign Cloud Stack (SCS—https://scs.community/) initiative, specifically focusing on enhancing the security of our services through End-to-End (E2E) encryption, particularly in environments where the networking infrastructure isn't directly managed or owned by the OpenStack operator. This scenario is common in colocation settings, Our servers may span multiple racks or buildings that are not entirely under our control. My current focus has been on developing a threat model that addresses potential Man In The Middle (MITM) attacks, such as wiretapping or spoofing, could target physical cables or networking devices. This model is inspired by the security considerations in RFC 8926 I have detailed this model in a GitHub issue: https://github.com/SovereignCloudStack/issues/issues/532#issuecomment-19909… if someone would like to take a deeper look at it and provide feedback. We would greatly value your expertise and feedback on this, either directly on GitHub or via this mailing list. Considering the technical implementation, I'm inclined to employ IPSec, inspired by its usage in TripleO: https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/feature… I'd like to hear your insights, recommendations, or experiences regarding the threat model. Are there other potential threats that should be on our radar? If you're aware of any existing solutions or have faced similar challenges, your guidance would be immensely helpful. Thank you in advance for your valuable contributions. I look forward to your feedback. Best Regards, Filip Dobrovolný

1 0

[cinder] Festival of XS reviews (15 March)
by Rajat Dhasmana 15 Mar '24

15 Mar '24

Hello Argonauts, We will be having our monthly festival of reviews this Friday i.e. 15th March (Friday) from 1400-1600 UTC. This will be the last festival for the 2024.1 Caracal cycle. Following are the details: Date: 15th March, 2024 Time: 1400-1600 UTC Meeting link: https://meet.google.com/jqg-eigw-rku etherpad: https://etherpad.opendev.org/p/cinder-festival-of-reviews Thanks Rajat Dhasmana

1 0

[tacker] Patches cannot pass zuul check for RC1
by Yasufumi Ogawa 15 Mar '24

15 Mar '24

Hi team, We still have several patches remained for unexpected failures on zuul check tests. All the failures happen in codes other than we updated and are not always happened. It might be the difficulty we usually meet at the end of releases because of lack of resources on the environment. Unfortunately, it's already over the deadline of RC1 although it can be merged if we have enough time to recheck unitll it's passsed. So, I'd like to fix Tacker's Caracal release and propose to backport the remained patches later. Thank you for your contribution. https://review.opendev.org/c/openstack/tacker/+/908878 https://review.opendev.org/c/openstack/tacker/+/910504 https://review.opendev.org/c/openstack/tacker/+/911639 https://review.opendev.org/c/openstack/tacker/+/907022 https://review.opendev.org/c/openstack/tacker/+/907025 https://review.opendev.org/c/openstack/tacker/+/908752 https://review.opendev.org/c/openstack/tacker/+/907026 https://review.opendev.org/c/openstack/tacker/+/907694 Regards, Yasufumi

1 0

OSSN-0093: Unresolved Vulnerability in OpenStack Murano
by Jeremy Stanley 14 Mar '24

14 Mar '24

OSSN-0093 Unresolved Vulnerability in OpenStack Murano ### Summary ### A severe security vulnerability in all versions of the Murano service will be disclosed at a later date. Murano is an inactive project[*], so no fix is currently under development for this vulnerability. It is strongly recommended that any OpenStack deployments disable or fully remove Murano, if installed, at the earliest opportunity. This security note will be amended at the time of public disclosure to include further details and context, but action should be taken as soon as possible in order to minimize the risk it poses. [*] https://governance.openstack.org/tc/reference/emerging-technology-and-inact… ### Affected Services / Software ### - murano: all versions ### Discussion ### This security note is a redacted placeholder, and will be amended with complete details once the associated bug report becomes public. ### Recommended Actions ### Disable the Murano service in, or fully remove it from, all OpenStack deployments at the earliest opportunity. ### Credits ### Not yet disclosed. ### Contacts / References ### Authors: - Jeremy Stanley, OpenStack Vulnerability Coordinator This OSSN: https://wiki.openstack.org/wiki/OSSN/OSSN-0093 Original bug: https://launchpad.net/bugs/2048114 (not yet public) Mailing List : [security-sig] openstack-discuss(a)lists.openstack.org -- Jeremy Stanley, OpenStack Vulnerability Coordinator

1 1

[requirements][releases][heat][mistral][murano] Requirements freeze exception for yaql
by Takashi Kajinami 14 Mar '24

14 Mar '24

Hello, I have another exception request... A critical security issue[1] was discovered recently and we are updating yaql to fix the issue. The required change was already merged into yaql and I've proposed a new yaql release[2]. I'd like to request a requirement freeze exception to pull the fixed version into upper constraints for 2024.1. Please let me know if you have any concern. Thank you, Takashi [1] https://bugs.launchpad.net/yaql/+bug/2048114 [2] https://review.opendev.org/c/openstack/releases/+/913230 -- Takashi Kajinami irc: tkajinam github: https://github.com/kajinamit launchpad: https://launchpad.net/~kajinamit

3 2

[nova][placement] Zombie placement allocations DB records
by hai wu 14 Mar '24

14 Mar '24

Sometimes there are zombie placement allocations records left for hypervisors, meaning there are no mapping VMs running on those hosts, but the placement allocation records still show up in the database. Does this mean that nova conductor/scheduler would still think those resources have already been allocated, while in reality, there's no existing VMs mapped to those zombie placement allocations records?

3 3

[openstack][octavia] Multi LB Management Networks
by Nguyễn Hữu Khôi 14 Mar '24

14 Mar '24

Hello. Is there any way to configure multi lb mnt network for amphorae instances? I am planning to design multiple AZs with separate networks for my system. I am reading this link: https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/17… Thank you. Nguyen Huu Khoi

2 2

[Zun] Docker in rootless mode
by Francesco Di Nucci 14 Mar '24

14 Mar '24

Hello, I am working on a 2023.2 instance to install Zun. While we're still in the design phase, I was wondering if it is possible to run Docker as a non-root user together with Kata Containers for enhanced security. Has anyone tried this solution? Regards Francesco Di Nucci

2 4

[cloudkitty][ptg] Virtual Dalmatian vPTG Planning
by Rafael Weingärtner 14 Mar '24

14 Mar '24

Hello guys, Here is [1] our etherpad for the Dalmatian/2024.2 virtual PTG. Please, add your topics there if there is anything you would like to discuss/propose. I have already created a basic structure in the etherpad. I already scheduled the room and time slots. If you guys have any other suggestions, please let me know. [1] https://etherpad.opendev.org/p/apr2024-ptg-cloudkitty -- Rafael Weingärtner

1 0

What deployment tools do you use? What do you like in them?
by Ruslanas Gžibovskis 13 Mar '24

13 Mar '24

Hi team, Could you, please, share your opinion and your experience with deployment methods. Also what are the tools you use? I have some deployments running TripleO tool. What I like is that we can deploy on empty servers and customizable OpenStack Installation. Sadly TripleO stopped working on new releases last year. Question: Which deployment method you would recommend which would support deploying on empty servers? My plan is to use CentOS Stream as base OS. My setup: 3x controller and 10+ computes. All with generic things except cinder, I do not have volumes and telemetry. But this year I need to add SR-IOV and some computes with RT kernels. Suggestions? My research: OSP-ansible - looks like it could deploy without containerization (I find it as a benefit). (could someone share sample config you use?) Kolla-ansible - looks like old time here and most used? (could someone share sample config you use?) But all above are deploying on existing OS. Tho I have found the Kayobe, quite new to me, have you tried? How multi-controller and multicompute deployment config looks like? Thank you for your opinion or sharing your experience with the tools you use. -- Ruslanas Gžibovskis +370 6030 7030

3 4

[Cinder] Storage not detected when instance boots from ISO
by Francesco Di Nucci 13 Mar '24

13 Mar '24

Hello, premised that probably I am misunderstanding default behavior, I'm experiencing a weird issue with storage/volumes: * Cinder storage has only a NFS backend, with "cinder.volume.drivers.nfs.NfsDriver" driver * When I launch an instance through Horizon from a QCOW2 cloud image and with an associated volume, everything is ok (instances start, changes to the instance are persistent and remain through reboots etc) * But if I launch an instance from an ISO (CentOS, Debian, Ubuntu - DVD or minimal, seems to be OS-independent) and with an associated volume, I can use the installer through the noVNC console but it does not detect disks. Even if the volume is attached, the OS booted from ISO does not report/find it, and the installation can't proceed Is this normal/default behavior or is something wrong with my install? Best regards Francesco Di Nucci

1 0

Security Group Rules on Octavia Amphorae
by Kees Meijs | Nefos 13 Mar '24

13 Mar '24

Hello list, When creating a new load balancer using Octavia, I noticed the VIP network port gets assigned a dynamic created Security Group. The Security Group does not contain a rule allowing ICMP, therefore the VIP not being "pingable". Other than harder diagnostics, it could pose PMTU issues and such. Is it maybe possible to either just enable ICMP, or maybe template the dynamic Security Groups? Thanks in advance! Cheers, Kees

2 2

[swift] Increase part power on account/container ring
by Thiago De Moraes Teixeira 13 Mar '24

13 Mar '24

Morning, Here we have a cluster with Accounts/Containers ring with part power 8 and our Objects ring with part power 20 (builted later). Now we want to migrate the 'old' Accounts/Containers ring to a new one, with higher part power, like 20. Is there a better way to do this? I'm doing some crazy tests with SAIO and multiples storage nodes, based in build a new ring with part power 20 and just swap the old files (account/container.ring.gz) with the new ones and let the replicators do their jobs, moving *.db files to their new home partition. Until today these tests worked fine, but I don't know how to do it on a large scale, with some terabytes of data. Just wondering about some ways to do that :) And before/after this change, is there any command in swift that i can audit this entire process, ensuring that cluster data remains the same? Thanks! -- _‘Esta mensagem é direcionada apenas para os endereços constantes no cabeçalho inicial. Se você não está listado nos endereços constantes no cabeçalho, pedimos-lhe que desconsidere completamente o conteúdo dessa mensagem e cuja cópia, encaminhamento e/ou execução das ações citadas estão imediatamente anuladas e proibidas’._ * **‘Apesar do Magazine Luiza tomar todas as precauções razoáveis para assegurar que nenhum vírus esteja presente nesse e-mail, a empresa não poderá aceitar a responsabilidade por quaisquer perdas ou danos causados por esse e-mail ou por seus anexos’.*

3 8

[swift] Multi-policy container
by m.victorello＠luizalabs.com 13 Mar '24

13 Mar '24

Hello, Is there any plan to support multi-policy containers? Why the container's database have a 'storage_policy_index' column for objects? As far as I know the policy index comes from the container (broker.get_info). I don't know that much about changing the policy of a container, i think those are related.

2 1

[magnum] ClusterAPI driver out of tree
by Jake Yip 13 Mar '24

13 Mar '24

Hi all, After the previous discussions[1] on the ML, Magnum and StackHPC have decided to create and maintain separate repos[2] for StackHPC's contributed cluster api driver. The repos are currently 1. magnum-capi-helm - driver implementation 2. magnum-capi-helm-charts - helm charts used by driver This will allow the driver to be out of tree, yet still be in governance. StackHPC and Magnum Core team will work together to test the driver in CI. I hope this will please everyone and be a way forward. Regards, Jake [1] https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack… [2] https://review.opendev.org/c/openstack/governance/+/910240 [3] https://review.opendev.org/c/openstack/project-config/+/910239 -- Jake Yip Technical Lead, ARDC Nectar Research Cloud

1 0

opensearch dashboards example
by Satish Patel 12 Mar '24

12 Mar '24

Folks, Recently I have deployed opensearch logging for ELK replacement and trying to create some visualization dashboard but its new tool and learning curve. Will appreciate If anyone has any example dashboard or visualizer for logging etc. ~S

1 0

Re: [keystone] application creds issue with permission
by Satish Patel 12 Mar '24

12 Mar '24

Hi Artem, You are 100% correct here, I have noticed as soon as I give the reader the role it works. Thank you! On Tue, Mar 12, 2024 at 4:02 PM Artem Goncharov <artem.goncharov(a)gmail.com> wrote: > Can you please check which roles are bound to the appcred? The reason I am > asking is https://review.opendev.org/c/openstack/keystone/+/910337 (wrong > treatment of implied roles when you create appcred explicitly specifying > role that implies another role (basically if you create appcred with member > role - reader role is not given) > > ---- > typed from mobile, auto-correct typos assumed > ---- > > On Tue, Mar 12, 2024, 20:57 Satish Patel <satish.txt(a)gmail.com> wrote: > >> Folks, >> >> I am running the 2023.1 release of openstack using kolla-ansible. I have >> integrated with LDAP and everything works fine. But today when I created >> application creds and used that to access openstack api I got all kinds of >> strange auth errors. >> >> #!/usr/bin/env bash >> export OS_AUTH_TYPE=v3applicationcredential >> export OS_AUTH_URL=https://openstack-eng.example.com:5000 >> export OS_IDENTITY_API_VERSION=3 >> export OS_REGION_NAME="eng" >> export OS_INTERFACE=public >> export OS_APPLICATION_CREDENTIAL_ID=ee17300916b1401f912f6140ce9cd642 >> export OS_APPLICATION_CREDENTIAL_SECRET=XXXXXXXXX >> >> # openstack server list >> ForbiddenException: 403: Client Error for url: >> https://openstack-eng.example.com:8774/v2.1/servers/detail?deleted=False, >> Policy doesn't allow os_compute_api:servers:detail to be performed. >> >> >> # openstack image list >> ForbiddenException: 403: Client Error for url: >> https://openstack-eng.example.com:9292/v2/images, You are not authorized >> to complete get_images action.<br /><br /> >> >> What is wrong here because I have one more setup of openstack which is >> not using LDAP but in that cloud application creds working fine. >> >> # cat /etc/keystone/keystone.conf >> >> [DEFAULT] >> debug = False >> transport_url = hiding.... >> log_file = /var/log/kolla/keystone/keystone.log >> use_stderr = True >> >> [oslo_middleware] >> enable_proxy_headers_parsing = True >> >> [database] >> connection = mysql+pymysql:// >> keystone:hiding...@openstack-eng.example.com:3306/keystone >> connection_recycle_time = 10 >> max_pool_size = 1 >> max_retries = -1 >> >> [identity] >> domain_specific_drivers_enabled = true >> domain_config_dir = /etc/keystone/domains >> >> [token] >> revoke_by_id = False >> provider = fernet >> expiration = 86400 >> allow_expired_window = 172800 >> >> [fernet_tokens] >> max_active_keys = 3 >> >> [cache] >> backend = oslo_cache.memcache_pool >> enabled = True >> memcache_servers = 10.0.25.201:11211,10.0.25.202:11211,10.0.25.203:11211 >> >> [oslo_messaging_notifications] >> transport_url = rabbit://openstack:hiding.... >> driver = noop >> >> [oslo_messaging_rabbit] >> heartbeat_in_pthread = True >> amqp_durable_queues = true >> rabbit_quorum_queue = true >> kombu_reconnect_delay = 0.5 >> rabbit_transient_queues_ttl = 60 >> >> >> # cat /etc/keystone/domains/keystone.eng.conf >> >> # Ansible managed >> >> [identity] >> driver = ldap >> >> [ldap] >> debug_level = 4095 >> group_allow_create = False >> group_allow_delete = False >> group_allow_update = False >> group_id_attribute = cn >> hiding.... >> hiding.... >> >>

1 0

[keystone] application creds issue with permission
by Satish Patel 12 Mar '24

12 Mar '24

Folks, I am running the 2023.1 release of openstack using kolla-ansible. I have integrated with LDAP and everything works fine. But today when I created application creds and used that to access openstack api I got all kinds of strange auth errors. #!/usr/bin/env bash export OS_AUTH_TYPE=v3applicationcredential export OS_AUTH_URL=https://openstack-eng.example.com:5000 export OS_IDENTITY_API_VERSION=3 export OS_REGION_NAME="eng" export OS_INTERFACE=public export OS_APPLICATION_CREDENTIAL_ID=ee17300916b1401f912f6140ce9cd642 export OS_APPLICATION_CREDENTIAL_SECRET=XXXXXXXXX # openstack server list ForbiddenException: 403: Client Error for url: https://openstack-eng.example.com:8774/v2.1/servers/detail?deleted=False, Policy doesn't allow os_compute_api:servers:detail to be performed. # openstack image list ForbiddenException: 403: Client Error for url: https://openstack-eng.example.com:9292/v2/images, You are not authorized to complete get_images action.<br /><br /> What is wrong here because I have one more setup of openstack which is not using LDAP but in that cloud application creds working fine. # cat /etc/keystone/keystone.conf [DEFAULT] debug = False transport_url = hiding.... log_file = /var/log/kolla/keystone/keystone.log use_stderr = True [oslo_middleware] enable_proxy_headers_parsing = True [database] connection = mysql+pymysql:// keystone:hiding...@openstack-eng.example.com:3306/keystone connection_recycle_time = 10 max_pool_size = 1 max_retries = -1 [identity] domain_specific_drivers_enabled = true domain_config_dir = /etc/keystone/domains [token] revoke_by_id = False provider = fernet expiration = 86400 allow_expired_window = 172800 [fernet_tokens] max_active_keys = 3 [cache] backend = oslo_cache.memcache_pool enabled = True memcache_servers = 10.0.25.201:11211,10.0.25.202:11211,10.0.25.203:11211 [oslo_messaging_notifications] transport_url = rabbit://openstack:hiding.... driver = noop [oslo_messaging_rabbit] heartbeat_in_pthread = True amqp_durable_queues = true rabbit_quorum_queue = true kombu_reconnect_delay = 0.5 rabbit_transient_queues_ttl = 60 # cat /etc/keystone/domains/keystone.eng.conf # Ansible managed [identity] driver = ldap [ldap] debug_level = 4095 group_allow_create = False group_allow_delete = False group_allow_update = False group_id_attribute = cn hiding.... hiding....

1 0

[ansible][aio][glance] Cannot create image, TypeError: Response is undefined
by Tang Chai Keong 11 Mar '24

11 Mar '24

I deployed openstack-ansible AIO and is trying to create a new image but is encountering "TypeError: Response is undefined" and "Error: Unable to create the image". The image creation task is just stuck in the "queued" mode forever after that. I also do not see any of the service logs in the lxc containers under /var/logs/ folder. Appreciate any advice on how I can troubleshoot this. Thank you. Regards, Ben

2 2

[tc] Next Meeting Tomorrow, March 12, 1800 UTC
by Jay Faulkner 11 Mar '24

11 Mar '24

Hi all, the next weekly meeting of the OpenStack Technical Committee is tomorrow, March 12, at 1800 UTC. It will be held on #openstack-tc in OFTC. *US-based contributors please note that the meeting time does not change with DST.* The proposed agenda is: - Roll call - Follow up on tracked action items - Gate health check - Implementation of Unmaintained branch statuses - Testing runtime for 2024.2 release (gmann) - https://review.opendev.org/c/openstack/governance/+/908862 - TC vPTG 2024.2 / TC Tracker 2024.1 - https://etherpad.opendev.org/p/tc-2024.1-tracker - https://etherpad.opendev.org/p/apr2024-ptg-os-tc - Open Discussion and Reviews Thanks, Jay Faulkner OpenStack TC Chair

1 0

[swift][s3api] put-object-acl in SLO objects
by Thiago De Moraes Teixeira 11 Mar '24

11 Mar '24

Hi, I've got this error when trying to put acl in objects that are a multipart upload with s3api client. *aws s3api put-object-acl --bucket ramac --key darwin --acl public-readAn error occurred (BadDigest) when calling the PutObjectAcl operation (reached max retries: 4): The Content-MD5 you specified did not match what we received.* And for objects greater than 5Gb the error is: *An error occurred (EntityTooLarge) when calling the PutObjectAcl operation: Your proposed upload exceeds the maximum allowed object size.* I noticed this is happening because s3 middleware did not recognize this object as an SLO, so when the request reaches the ServerSideCopyMiddleware, the request did not have the query param "multipart-manifest". I tried this swift patch, to solve this problem, identifying if the object is an SLO, on head object in acl_handlers.py class, and retrieving this information before request transformation to swift_request, adding the query param. While this patch resolves the immediate issue, I believe there's room for improvement. I welcome any suggestions or feedback on enhancing this patch further. Your insights would be greatly appreciated. https://paste.openstack.org/show/bd2nAHIHPtUtDNbWLorD/ Best regards -- _‘Esta mensagem é direcionada apenas para os endereços constantes no cabeçalho inicial. Se você não está listado nos endereços constantes no cabeçalho, pedimos-lhe que desconsidere completamente o conteúdo dessa mensagem e cuja cópia, encaminhamento e/ou execução das ações citadas estão imediatamente anuladas e proibidas’._ * **‘Apesar do Magazine Luiza tomar todas as precauções razoáveis para assegurar que nenhum vírus esteja presente nesse e-mail, a empresa não poderá aceitar a responsabilidade por quaisquer perdas ou danos causados por esse e-mail ou por seus anexos’.*

1 0

[swift][middleware][s3] Content-type of s3api versioning response
by m.victorello＠luizalabs.com 11 Mar '24

11 Mar '24

Hello, We are having some compatibility problems caused by the lack of content-type in this part: https://github.com/openstack/swift/blob/5e5fde12400fc76b9df43b3fcd13eb8a226… def GET(self, req): """ Handles GET Bucket versioning. """ sysmeta = req.get_container_info(self.app).get('sysmeta', {}) elem = Element('VersioningConfiguration') if sysmeta.get('versions-enabled'): SubElement(elem, 'Status').text = ( 'Enabled' if config_true_value(sysmeta['versions-enabled']) else 'Suspended') body = tostring(elem) return HTTPOk(body=body, content_type=None) Is there a reason for it?

1 0

[swift][s3][multipart] S3 multipart re-upload leaves orphan segments
by m.victorello＠luizalabs.com 11 Mar '24

11 Mar '24

Hello, I understand that this is a known issue for some time, but I dont know if it has been resolved. As far as I know stable/2023.2 still has this problem, is there any related work? We think there are two fronts: - Segments of incomplete multipart, forgotten by the user - Completed re-uploads We plan to fix those: - Using the object-expirer in a new middleware - Deploying workers to review all files, checking if they are still in use What are your thoughts?

1 0

[kolla-ansible] Building images from source
by wodel youchi 11 Mar '24

11 Mar '24

Hi, I am trying to build kolla's container images from source, especially octavia's images. I've read the kolla-build documentation, then I tried to follow along but I am having some problems. I am not a developper, my goal is to be able to push patches to kolla images if something goes wrong. For example now I am having a problem with octavia not being able to create an LB when using a self-signed certificate. I searched and I found a patch and I wanted to test-it. https://bugs.launchpad.net/kolla-ansible/+bug/2046382 https://launchpadlibrarian.net/706867161/octavia.patch Here are the steps I followed : - I am using podman - I've created a local registry - pyhton3.9 -m venv kollavnenv/2023.2 - source kollavnenv/2023.2/bin/activate - pip install kolla - pip install podman - I downloaded octavia source code from git 2023.2 version - https://github.com/openstack/octavia/tree/stable/2023.2 - I've prepared kolla_build.conf like this - [octavia] type = local location = /root/work/octavia - And I started the build like this - kolla-build --registry 192.168.2.35:4000 --push -b rocky --tag 2023.2-1 --engine podman --config-file ./kolla_build.conf octavia - Results - (2023.2) [root@r9localrepo work]# podman images REPOSITORY TAG IMAGE ID CREATED SIZE 192.168.2.35:4000/kolla/octavia-driver-agent 2023.2-1 1a6217ad71b4 22 minutes ago 1.31 GB 192.168.2.35:4000/kolla/octavia-api 2023.2-1 41ad8e1760a2 22 minutes ago 1.31 GB 192.168.2.35:4000/kolla/octavia-health-manager 2023.2-1 4922b7f0259f 22 minutes ago 1.28 GB 192.168.2.35:4000/kolla/octavia-housekeeping 2023.2-1 8b5a4785fc18 22 minutes ago 1.28 GB 192.168.2.35:4000/kolla/octavia-worker 2023.2-1 46107a14e78d 22 minutes ago 1.28 GB 192.168.2.35:4000/kolla/octavia-base 2023.2-1 23963c04eda7 22 minutes ago 1.28 GB 192.168.2.35:4000/kolla/openstack-base 2023.2-1 add627cfde2f 25 minutes ago 1.14 GB 192.168.2.35:4000/kolla/base 2023.2-1 a8299a02411a 29 minutes ago 580 MB <none> <none> 0421c38fd25c 8 hours ago 1.14 GB docker.io/library/registry 2 a8781fe3b7a2 6 weeks ago 26 MB quay.io/rockylinux/rockylinux 9 da830f5e2510 3 months ago 181 MB - The problem : - When exploring the octavia-api images for example (podman save),* and verifying the modified file I didn't find the patched-code* It seems that the build process is not using the local code? What am I missing? I think that my kolla_build.conf is wrong or not complete ... any ideas? Regards.

1 2

[kolla-ansible][2023.2] Cloudkitty support for Openseach?
by wodel youchi 11 Mar '24

11 Mar '24

Hi, Does Cloudkitty now support Opensearch as a storage backend in kolla? Regards.

2 1