- openstack-discuss - lists.openstack.org

[Openstack] [Keystone] [Shibboleth] Assistance with Configuring Multiple IdPs in DevStack with Shibboleth Integration
by Abubakur Sait 28 Sep '24

28 Sep '24

Hi all, I have installed DevStack (release 2023.2) on Ubuntu 22.04 and integrated Shibboleth (the federation solution) with it. Everything works fine for a single IdP. However, I am looking to expand the setup to support multiple IdPs. I have read the Keystone documentation, but it doesn’t seem to cover this specific case. In my current setup, I have DevStack and Shibboleth integrated for a single IdP. I have read the shib-sp documentation as well. It mentions the need for a Discovery Service (DS) if we intend to use multiple IdPs which will be handled by the shib-SP software. This is the issue I am facing right now. Please see the following comments to get my point. Here’s the scenario I have so far: 1. A user accesses Horizon (Service Provider -- SP) at: http://192.168.4.103/dashboard/auth/login/?next=/dashboard/. 2. A drop-down list allows the user to choose the authentication method. The user selects the SAML IdP method. 3. The user is redirected to the IdP’s page where they authenticate. 4. The user is redirected back to the SP and successfully accesses the system. 5. The issue I’m facing is how to configure multiple IdPs so that users can choose from them at step (2). I understand that we can add a list of IdPs in the ~/horizon/openstack_dashboard/local/local_settings.py file to display in Horizon, but this doesn’t fully resolve the issue since the Shibboleth SP application itself doesn’t seem to handle multiple IdPs. Shibboleth SP typically expects a DS for multiple IdPs, but given that we already have a dropdown list in Horizon, do we still need the DS in this case? If not, how can we proceed with adding multiple IdPs in the system? Any guidance or advice would be greatly appreciated. Thank you for your help! Best regards, Bakur Sait

1 0

[octavia] Lose of some jobs by worker
by Payne Max 28 Sep '24

28 Sep '24

Hi, OpenStack community, I’ve faced a problem when some of our jobs can get lost by a worker, for example from the screenshot, SIGTERM was called in several seconds after receiving a job by a worker. [cid:image001.png@01DB1013.D648A630] Then there were no new log messages related to this job. Then our client complained that LB stucked in PENDING_UPDATE for several days and we started investigation. Our MySQL (persistent storage) is clean, but in our Redis, I can see several jobs without TTL and I think they are related to the «lost» jobs. [cid:image002.png@01DB1014.1DFF1BD0] Is it an ok situation? Can it be related to the https://github.com/openstack/octavia/blob/master/octavia/common/base_taskfl… Let’s discuss it!

4 6

kolla-ansible support for Ubuntu 2024.04/ARM64 ?
by dariusz.bursztynowski＠pw.edu.pl 28 Sep '24

28 Sep '24

Hello, Are there plans for kolla-ansible to support Ubuntu 24.04 / ARM64 (e.g., to have LTS support for Raspberry Pi 5)? Best regards, Dariusz Bursztynowski

1 0

[openstack]Problem with launching instances from VMDK
by Nguyễn Hữu Khôi 27 Sep '24

27 Sep '24

Hello I am trying create instance from vmdk but I have this error: The image format was claimed to be 'vmdk' but the image data appears to be in a different format. My cloud is Openstack 2023.1. This happened when We applied patches for CVE-2024-40767. Nguyen Huu Khoi

3 4

[release] Release countdown for week R+0
by Thierry Carrez 27 Sep '24

27 Sep '24

Development Focus ----------------- We will be releasing the coordinated OpenStack 2024.2 Dalmatian release next week, on October 2nd, 2024. Thanks to everyone involved in the Dalmatian cycle! We are now in pre-release freeze, so no new deliverable will be created until final release, unless a release-critical regression is spotted. Otherwise, teams attending the virtual PTG in a few weeks should start to plan what they will be discussing there, by creating and filling team etherpads. You can access the list of PTG etherpads at: https://ptg.opendev.org/etherpads.html General Information ------------------- On release day, the release team will produce final versions of deliverables following the cycle-with-rc release model, by re-tagging the commit used for the last RC. A patch doing just that will be proposed. PTLs and release liaisons should watch for that final release patch from the release team. While not required, we would appreciate having an ack from each team before we approve it on the 2nd, so that their approval is included in the metadata that goes onto the signed tag. Upcoming Deadlines & Dates -------------------------- Final 2024.2 Dalmatian release: October 2nd, 2024 Project Teams Gathering: October 21-25, 2024 -- Thierry Carrez (ttx)

1 0

help
by Gyan Dev Mishra 27 Sep '24

27 Sep '24

hi sir, was facing an issue with launching an instance in OpenStack. When I try to launch an instance using a Ubuntu Server 22.04 ISO image, I am getting the error. Even if I try with the default Cirros image, the instance launches, but when I attempt to access it from the console, I encounter a network error. I was trying to run it using an IP in the 10.x.x range, but it is fetching an IP in the 192.168.x range. I have attached the screenshot for the your reference. How can I resolve this issue? DISCLAIMER: This communication may contain confidential or copyright information. If you are not an intended recipient, you must not keep, forward, copy, use, save or rely on this communication. Any such action is unauthorized and prohibited. If you have received this communication in error please delete it. Reasonable precautions have been taken to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments.

1 0

(외부메일) [heat][heat-cinder] How can I use the Cinder volume extend in Heat?
by 박광우 26 Sep '24

26 Sep '24

3 3

[ptl][release] OpenStack Dalmatian OpenInfra Live
by Allison Price 26 Sep '24

26 Sep '24

Hi everyone, I wanted to gather interest from PTLs to participate in an OpenStack Dalmatian OpenInfra Live on Thursday, October 3 after Wednesday’s release. Like past episodes (you can see Caracal here [1]), we will give interested PTLs the opportunity to present the progress their team made in 2024.2 Dalmatian as well as present upcoming priorities for 2025.1 Epoxy. The episode will air on Thursday at 1400 UTC, so interested participants would need to be available 1330-1500 UTC on Thursday, October 3. If you are interested, please let me know. Thanks! Allison [1 ] https://www.youtube.com/watch?v=3BgAXbFaVqw

5 6

Potential Mentorship Opportunities (Jan - May 2025)
by Kendall Nelson 26 Sep '24

26 Sep '24

Hello Party People! It's very early, but I wanted to float the information ahead of time :) Coming up for the next semester (Spring semester in Northern Hemisphere; Jan to May) we have the opportunity to propose projects to students at North Dakota State University to work on. Students will be in the last couple semesters before graduation with a Bachelor's degree in CS. Good projects would be scoped to a small group of students 3-5 working together for around 4.5 months (maybe 4 with onboarding, midterms etc). Mentors on these projects do not have to work alone - often I have two or three community members working together to mentor the students (ask Manila, they are a good example). I will want to start collecting project proposals (and mentor volunteers) in December before everyone leaves for the holidays but that still gives a fair amount of time for questions if anyone has them. I already have one team interested (Hi, Swift!) but would love a couple others to get involved. Let me know what questions you have or if you are interested in mentoring! -Kendall Nelson (diablo_rojo)

1 0

[ironic] [security] Ironic officially vulnerability-managed
by Jay Faulkner 26 Sep '24

26 Sep '24

Hi all, Although for a long time now, in practice, we've been using the Vulnerability Management team (VMT) process to triage, embargo, and resolve Ironic security bugs, we've now done the legwork needed to be officially managed by the VMT. The following Ironic projects are now VMT-managed[0]: - ironic - ironic-inspector - ironic-python-agent - ironic-lib - networking-baremetal - networking-generic-switch - python-ironicclient - python-ironic-inspector-client - sushy As per VMT policy[1]. the launchpad bug trackers for these projects have been updated to only allow access by the VMT to initial private-security bug reports. If there are any questions, please just ask! Thanks, Jay Faulkner 0: https://opendev.org/openstack/ossa/commit/b68aaa0652ec83b1349dddcdc334b7572… 1: https://security.openstack.org/repos-overseen.html#requirements (number 4)

1 0