May 2024 - openstack-discuss - lists.openstack.org

CAD applications on OpenStack
by Arne Wiebalck 05 May '24

05 May '24

Dear all, We're looking into integrating the use case of CAD applications, such as CATIA V5/6 or CATIA 3DEXPERIENCE, into our OpenStack deployment, with the goals of increased resource sharing and to reduce the park of individual workstations we have for this at the moment. If anyone has experience running such applications on top of OpenStack (on individual VMs with GPU access, on bare metal servers with concurrent sessions, maybe even containerised ...) and would like to share what they have done, it'd be great if you got in touch with me. Thanks! Arne -- Arne Wiebalck CERN IT

1 0

[magnum-cluster-api] CREATE_IN_PROGRESS never ending
by pahrialtkj＠gmail.com 04 May '24

04 May '24

Hi all, I created a k8s cluster using magnum-cluster-api in openstack bobcat , I used kind for the capi (kind on top of lxc), magnum has been successfully installed along with the cluster-api, but when I create a k8s cluster it is always in the CREATE_IN_PROGRESS status and never completes, if you look at the loadbalancer and the master/worker server has been successfully provisioned, if in the show cluster it looks: status_reason | CAPI Cluster status: Provisioned: Cluster kube-r6jnx is Provisioned. CAPI OpenstackCluster status reason: And when I check the capi-system capi-controller-manager, it always say : http: TLS handshake error from 10.244.0.1:9005: EOF full log https://sprunge.us/DgnUOE Regards, Pahrial

2 6

[magnum-cluster-api] Is it support octavia loadbalancer with ovn driver ?
by pahrialtkj＠gmail.com 04 May '24

04 May '24

Does magnum-cluster-api support with octavia loadbalancer by using ovn driver ?, previously I used amphora driver

4 5

Current Issues on Neutrons
by Cakra Wirabuana 03 May '24

03 May '24

Hi everyone, I am a master's student in computer science at a university in Indonesia. I am interested in writing a thesis related to OpenStack-Neutron because my background is in the networking field. However, I am still having trouble deciding on the right topic other than security. Can I get information here about what's hot on the Neutron network? Maybe for example in terms of measurements (delay, packet drop, jitter), etc. Thank you, Cakra Wirabuana

3 2

[ironic] [docs] Looking for input on how you use Ironic
by Jay Faulkner 03 May '24

03 May '24

Hey all, Ironic is undergoing a project to evaluate our docs with the idea of improving them as a whole. Dave Welsch is a technical writer who is helping us with this effort. We are sending this email out looking for Ironic operators or deployers who are interested in having a short conversation with Dave (and myself, potentially) about how they use Ironic to help us focus our documentation on common use cases. Something that'd be especially valuable is a conversation with anyone who is new to the community (in any capacity) as to their experience with Ironic's documentation. If you're interested in having a one of those conversations, please reach out to me off-list and I'm happy to coordinate. If you have any general input for Ironic docs, feel free to respond directly on this thread. Thanks, Jay Faulkner

1 0

Magnum error after Antelope upgrade
by Michel Jouvin 03 May '24

03 May '24

Hi, In a cloud where all services have been upgraded from Yoga to Antelope, I tried to upgrade Magnum but after the (successful) upgrade, Magnum reports "keystone client errors" when trying to retrieve the status of existing clusters or to create new ones (deletion of existing ones seem to work). The typical error is: ---- 2024-04-29 11:57:39.733 72464 WARNING magnum.service.periodic [-] Skip pulling data from cluster 2e8d6ee8-01cb-42d4-9b6d-0cf242cd4afa due to error: unexpected keystone clie nt error occurred: Forbidden (HTTP 403): magnum.common.exception.AuthorizationFailure: unexpected keystone client error occurred: Forbidden (HTTP 403) 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic Traceback (most recent call last): 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic File "/usr/lib/python3.9/site-packages/magnum/common/exception.py", line 57, in wrapped 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic return func(*args, **kw) 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic File "/usr/lib/python3.9/site-packages/magnum/common/clients.py", line 166, in barbican 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic self._barbican = barbicanclient.Client(session=session, 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic File "/usr/lib/python3.9/site-packages/barbicanclient/client.py", line 186, in Client 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic return client_class(session=session, *args, **kwargs) 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic File "/usr/lib/python3.9/site-packages/barbicanclient/v1/client.py", line 47, in __init__ 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic normalized_microversion = self._get_max_supported_version( 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic File "/usr/lib/python3.9/site-packages/barbicanclient/v1/client.py", line 88, in _get_max_supported_version 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic min_ver, max_ver = self._get_min_max_server_supported_microversion( 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic File "/usr/lib/python3.9/site-packages/barbicanclient/v1/client.py", line 119, in _get_min_max_server_supporte d_microversion 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic return self._get_min_max_version(session, endpoint, '1.1') 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic File "/usr/lib/python3.9/site-packages/barbicanclient/v1/client.py", line 125, in _get_min_max_version 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic resp = discover.get_version_data( 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic File "/usr/lib/python3.9/site-packages/keystoneauth1/discover.py", line 107, in get_version_data 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic resp = session.get(url, headers=headers, authenticated=authenticated) 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic File "/usr/lib/python3.9/site-packages/keystoneauth1/session.py", line 1141, in get 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic return self.request(url, 'GET', **kwargs) 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic File "/usr/lib/python3.9/site-packages/keystoneauth1/session.py", line 986, in request 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic raise exceptions.from_response(resp, method, url) 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic keystoneauth1.exceptions.http.Forbidden: Forbidden (HTTP 403) 2024-04-29 11:57:39.733 72464 ERROR magnum.service.periodic --- Did I miss something in the upgrade procedure? Thanks in advance for any help. Best regards, Michel

4 9

[Barbican] Query on "barbican-manage hsm" command
by rajiv mucheli 02 May '24

02 May '24

Hi, Currently, my setup involves utilizing OpenStack Barbican on the Bobcat release, with the Thales HSM A790 serving as the PKCS11 backend for multi-tenancy purposes. In this configuration, each project has the flexibility to select its preferred backend, allowing for a mix of PKCS11 and simpler cryptographic methods across projects. I'm particularly interested in exploring the possibility of dedicating an HMAC/MKEK key specifically for a project, utilizing the PKCS11 backend. This approach would involve assigning a unique key pair to each project, thereby enabling the creation of a segregated partition within the HSM for enhanced security and management. By establishing dedicated keys per project, I aim to optimize security measures and streamline the management of cryptographic resources within the environment. Your insights on the feasibility and implications of this approach would be greatly appreciated. Looking forward to your response. Regards, Rajiv

1 0

Upgrade Bobcat/Caracal and python3-futurist
by Francesco Di Nucci 02 May '24

02 May '24

Hi all, I'm upgrading from Bobcat to Caracal using RDO repositories. I noticed that the package python3-futurist.noarch was present in centos-openstack-bobcat repo, but it is not in openstack-caracal. So it is not possible to update/reinstall/etc. it as it is "orphaned" once the bobcat repository is disabled. Should it be removed? Is it still a dependency? Best regards Francesco Di Nucci

4 6

[Glance] Cancelling Today's Weekly Meeting
by Pranali Deore 02 May '24

02 May '24

Hello, Cancelling today's weekly meeting since most of the team members are not around. See you next week! Thanks, Pranali D.

1 0

overload factor tunning
by pikajorge＠gmail.com 02 May '24

02 May '24

Greetings Folks! My name is Jorge! and currently I'm tunning a policy, in the past due to a lack of hardware the overload factor was set to 320.00% (3.200000) since we are in the process of reducing the number of the replicas (currently 3.56) to three and also When running: swift-ring-builder object-90210.builder dispersion Dispersion is 0.000000, Balance is 234.102882, Overload is 320.00% Required overload is 233.738772% It's suggesting us to decrease the overload factor, nonetheless if a rebalance is run, this value is once again calculated, and it has suggested 1000%, kindly I'd like for your assistance to help me understand first, how can I estimate the overload factor, and also considering the number of desired replicas and our capacity, how can I set the overload factor to be optimum? or is this a value that will need to be modified everytime? . Thanks in advance for all your help! Warmest regards Jorge!

1 0