- openstack-discuss - lists.openstack.org

[Neutron] Bug deputy report for week of June 3rd
by Jakub Libosvar 10 Jun '24

10 Jun '24

Hi, here is the bug deputy report. There are two bugs that require attention: - One seems to be an old issue with conntrack sync, I put it to the wishlist but maybe can be closed as a duplicate. - Another one doesn’t contain enough information to be triaged, please see below. Kuba Needs attention --------------- * Packets dropped in br-int bridge - https://bugs.launchpad.net/neutron/+bug/2067851 - It seems like report needs help troubleshooting the problem or use some accelerated datapath like DPDK. High ---- * Issue associating floating IP with OVN load balancer - https://bugs.launchpad.net/neutron/+bug/2068644 - Patch proposed by Will Szumski: https://review.opendev.org/c/openstack/neutron/+/921663 * SFC: networking-sfc-tempest failures - https://bugs.launchpad.net/neutron/+bug/2068727 - Patch proposed by Lajos: https://review.opendev.org/c/openstack/networking-sfc/+/921514 * Using "joined" relation on tags can cause slow query times in certain situations - https://bugs.launchpad.net/neutron/+bug/2068761 - Revert proposed by Miro: https://review.opendev.org/c/openstack/neutron/+/921566 Low --- * Neutron should have better regex matching in zuul jobs - https://bugs.launchpad.net/neutron/+bug/2068523 - Assigned to Brian Wishlist -------- * [ovn] Dose L3 router ha support sync conntrack states - https://bugs.launchpad.net/neutron/+bug/2068704 - This was discussed at the last PTG in April and probably can be closed as a duplicate of https://bugs.launchpad.net/neutron/+bug/1365438 Invalid ------- * No support on using domain name for ovn connection string in ml2_conf.ini - https://bugs.launchpad.net/neutron/+bug/2067871 - It’s been pointed out on the bug that the issue is fixed in OVS

1 0

[ironic] Notes from Baremetal SIG, June 5 2024
by Jay Faulkner 10 Jun '24

10 Jun '24

Hi all, The Bare Metal SIG met up Wednesday, June 5 2024 at CERN – one day before the large OpenInfra Days event. There were over 2 dozen Ironic operators and contributors present. Riccardo gave a presentation overviewing Metal3. JayF gave a presentation covering the basics of most Ironic features and highlighted several features which were deprecated. While the talks were recorded, I don't believe the recordings are available yet – I do plan on recreating an updated version of my talk for Youtube in the near future for anyone interested. After the presentations and lunch, participants returned to discuss their use cases and ask questions relating to the earlier presentations. The discussion, as well as specific action items/follow-ups, were documented here: https://etherpad.opendev.org/p/baremetal-sig-cern-june-5-2024 – I will be documenting these action items and RFEs as appropriate over the next week. Add in a short afternoon break to tour the CERN data center, seeing the thousands of machines provisioned by Ironic for CERN, and it was a pleasant day discussing and building rapport with the Ironic community. In my over ten years of working in Ironic, this was the most productive operator/contributor feedback session I've had the pleasure of attending – the attendees were engaged and I'm grateful for their participation and attendance. A special thanks to: - Dmitry Tantsur and Julia Kreger connected up remotely to the session to help field questions. Their expertise was a great help! - Arne Wieback and his team at CERN were gracious hosts and provided us a great VIP tour of the datacenter space. If you were at this event, and have feedback on how we can make future ones better, feel free to reach out here or privately with your ideas. Thanks, Jay Faulkner

1 0

[designate] [neutron] DNS and SSL error 524297
by Francesco Di Nucci 10 Jun '24

10 Jun '24

Hi all, I am using Designate with WSGI and switched to a SSL setup after tests. Somehow now there are floating IPs with a DNS name/entry that do not show in DNS zones, and when I try to release them, the neutron WSGI on network node reports this error: /SSL exception connecting to https://my-controller.example.com:9001/zones?name=zone.cloud.example.com.: HTTPSConnectionPool(host='my-controller.example.com', port=9001): Max retries exceeded with url: /zones?name=zone.cloud.example.com. (Caused by SSLError(SSLError(524297, '[SSL] PEM lib (_ssl.c:4065)')))/ I thought of an SSL config error, but the setup is identical to other working endpoints, and when testing with "/openssl s_client -connect my-controller.example.com:9001"/, everything just works Has anyone encountered this error? Thanks in advance Francesco Di Nucci

1 0

[blazar] Next IRC meeting cancelled
by Pierre Riteau 08 Jun '24

08 Jun '24

Hello, Due to unavailability of key participants, the next IRC meeting scheduled for June 13 is cancelled. We will meet again on June 27. Pierre Riteau (priteau)

1 0

[neutron] Please hold off on merging patches
by Brian Haley 07 Jun '24

07 Jun '24

Hi Neutrinos, It was noticed today by Mohammed Naser that the neutron gate was only running the docs and pep8 jobs. We were able to track it down to the RE2 patches that were recently merged [0]. Until the reverts land please don't +W anything since it could merge untested and would just need to be reverted. Other projects might have similar issues if they updated code using the 'negate' directive for regex recently as we found it doesn't actually work with RE2 when using negative lookahead [1]. Thanks, -Brian [0] https://review.opendev.org/q/topic:"files-negate" [1] https://github.com/google/re2/issues/156

4 8

oslopolicy-policy-generator: what is the namespace to use to get Mgnum policy?
by Michel Jouvin 07 Jun '24

07 Jun '24

Hi, I'd like to see the default Magnum (Oslo) policy used with Magnum. With other services, I use oslopolicy-policy-generator and use the service name as the namespace but for Magnum, "--namespace magnum" returns an error saying that there is no "magnum" namespace. Does anybody know what is the namespace to use with Magnum? Or how to display the currently active policy, preferably in YAML format? Thanks in advance. Cheers, Michel

2 6

[swift] clean up orphan segment parts
by Rafael Tavares Oliveira 07 Jun '24

07 Jun '24

Hey there! We've been using swift and we came across this bug https://bugs.launchpad.net/swift/+bug/1813202. We decided to work it out and have an ongoing patch to solve this issue alongside ronaldo.maia(a)luizalabs.com, we would like to share and get some feedback before we submit it. To solve this, we took inspiration in obj/expirer.py: In S3 controllers we register task objects in an internal account, each task object points to an orphaned slo object, which can be created in two situations, when a multipart-upload is not completed or when a multipart object is overwritten. These tasks will be checked by the daemon (a new one we made called "s3-slo-expirer") after some time and deleted from the base accounts. Rafael

2 2

[all][tc] Eventlet migration: Call to action
by Jay Faulkner 07 Jun '24

07 Jun '24

Hi all, As you may have read in Goutham's TC summary, the existing eventlet goal[0] is unlikely to gain consensus to merge. This appears to be due to the difference in needs between OpenStack projects, and belief that it's unlikely a single solution would serve them all. Our current situation is: 1) Eventlet usage must be discontinued. The temporary maintainers are just that -- temporary -- and we should not expect eventlet to continue to be a valid path moving forward. 2) We have basic agreement that shared tooling, such as oslo libraries, should not dictate a specific threading model. In lieu of specific technical leadership and guidance from the TC, this leaves it to individual projects to decide what threading model to use instead of eventlet monkey patching. The unmerged spec[0] may be a good starting point if you're wondering where to start. Importantly: do not let this work wait! It is a significant change and will take a long time to complete. Thanks, Jay Faulkner 0: https://review.opendev.org/c/openstack/governance/+/902585

6 7

[neutron] Drivers meeting cancelled tomorrow
by Brian Haley 06 Jun '24

06 Jun '24

Hello Neutrinos: Due to the lack of agenda, Friday's drivers meeting is cancelled. Have a nice weekend! -Brian

1 0

[ironic] Failed when writing image to the device file /dev/sda
by James Leong 06 Jun '24

06 Jun '24

Hi all, I have been exploring ironic, with a simple setup. However, I get the following error messages whenever I attempt to deploy an ISO image to my baremetal node. 1. An agent token generation request is being refused as one is already present for the node 2. Writing image to device /dev/sda failed with exit code 32. stdout: . stderr: lsblk: /dev/sda2: not a block device 3. Invalid or missing agent_token received for node I am not quite sure what is required to be set on my node's property other than vendor and cpu_arch. Any help would be appreciated. Best, James

1 0