- openstack-discuss - lists.openstack.org

[keystone][cache] How to tune role cache
by Eugen Block 09 Nov '22

09 Nov '22

Hi *, one of our customers has two almost identical clouds (Victoria), the only difference is that one of them has three control nodes (HA via pacemaker) and the other one only one control node. They use terraform to deploy lots of different k8s clusters and other stuff. In the HA cloud they noticed keystone errors when they purged a project (cleanly) and started the redeployment immediately after that. We did some tests to find out which exact keystone cache it is and it seems to be the role cache (default 600 seconds) which leads to an error in terraform, it reports that the project was not found and refers to the previous ID of the project. The same deployment seems to work in the single-control environment without these errors, it just works although the cache is enabled as well. I already tried to reduce the cache_time to 30 seconds but that doesn't help (although it takes more than 30 seconds until terraform is ready after the prechecks). But the downside of disabling the role cache entirely leads to significantly longer response times when using the dashboard or querying the APIs. Is there any way to tune the role cache in a way so we could have both a reasonable performance as well as being able to redeploy projects without a "sleep 600"? Any comments or recommendations are appreciated! Regards, Eugen

1 1

[Yoga][Cloudkitty] Some projects have their rate to 0 on some services
by wodel youchi 08 Nov '22

08 Nov '22

Hi, I deployed Cloudkitty with the following metrics.yml file : metrics: cpu: unit: instance alt_name: instance groupby: - id - user_id - project_id metadata: - flavor_name - flavor_id - vcpus mutate: NUMBOOL extra_args: aggregation_method: mean resource_type: instance force_granularity: 300 image.size: unit: MiB factor: 1/1048576 groupby: - id - user_id - project_id metadata: - container_format - disk_format extra_args: aggregation_method: mean resource_type: image force_granularity: 300 * volume.size: unit: GiB groupby: - id - user_id - project_id metadata: - volume_type extra_args: aggregation_method: mean resource_type: volume force_granularity: 300* I created a service for volume.size following the example here : https://docs.openstack.org/cloudkitty/yoga/user/rating/hashmap.html I added the user cloudkitty to the admin project and to another project named Project01. When showing the rates I have 0 rate on the Project01. For example : executing this command : * openstack rating dataframes get | grep volume.size* This volume belongs to an instance in the Admin project, as you can see rating is 4.5: | 2022-11-02T18:25:00 | 2022-11-02T18:30:00 | 31bfb5bcf7b7413da269d7a35a2fe69a |* [{'rating': '4.5', 'service': 'volume.size*', 'desc': {'volume_type': '246853e3-1215-4147-aef2-54012221ecc9', 'id': ' *07811807-474a-4eb5-91b5-ce2dcdd7be26*', 'project_id': '31bfb5bcf7b7413da269d7a35a2fe69a', 'user_id': '2a3f2478e334473e85527102b76f7a2e'}, 'volume': '3.0', 'rate_value': '1.5000'}, {'rating': '4.5', 'service': 'volume.size', 'desc': {'volume_type': '246853e3-1215-4147-aef2-54012221ecc9', 'id': '8a345711-0486-4733-b8bc-fd1966678aec', 'project_id': '31bfb5bcf7b7413da269d7a35a2fe69a', 'user_id': '2a3f2478e334473e85527102b76f7a2e'}, 'volume': '3.0', 'rate_value': '1.5000'}, {'rating': '4.5', 'service': 'volume.size', 'desc': {'volume_type': '246853e3-1215-4147-aef2-54012221ecc9', 'id': 'afd22819-8faa-47ee-8c09-75290d2cf18e', 'project_id': '31bfb5bcf7b7413da269d7a35a2fe69a', 'user_id': '2a3f2478e334473e85527102b76f7a2e'}, 'volume': '3.0', 'rate_value': '1.5000'}] This volume belongs to an instance in the Project01 project, as you can see rating is 0.0 : | 2022-11-03T10:35:00 | 2022-11-03T10:40:00 | 2e80eb3b3d344ef9993065ce689395d9 | *[{'rating': '0.0'*, 'service': 'volume.size', 'desc': {'volume_type': '246853e3-1215-4147-aef2-54012221ecc9', 'id': ' *1c396d46-8954-4e8c-b3e8-8e5e4eb6aba4*', 'project_id': '2e80eb3b3d344ef9993065ce689395d9', 'user_id': 'd9e5696e99954ae1ac87db9cca82c839'}, 'volume': '20.0', 'rate_value': '0.0000'}] I don't understand why it works for one and not the other? More info : (yogavenv) [deployer@rscdeployer ~]$ openstack rating hashmap service list +------------------------+--------------------------------------+ | Name | Service ID | +------------------------+--------------------------------------+ | instance | 06e17b49-8cd4-4cb9-8965-cb929ee12909 | | network.incoming.bytes | 634069b2-ca42-4a28-8778-ac69144fcc23 | | network.outgoing.bytes | 6c1fdaa7-15cb-41b4-be0e-109d64810dde | | volume.size | b6934ab1-8326-4281-89b9-f80294430321 | | image.size | d3652e08-8645-45fd-b7db-b710ae716876 | +------------------------+--------------------------------------+ (yogavenv) [deployer@rscdeployer ~]$ openstack rating hashmap mapping list -s b6934ab1-8326-4281-89b9-f80294430321 +--------------------------------------+-------+--------------------------------+------+----------+--------------------------------------+----------+------------+ | Mapping ID | Value | Cost | Type | Field ID | Service ID |* Group ID | Project ID* | +--------------------------------------+-------+--------------------------------+------+----------+--------------------------------------+----------+------------+ | f81aea1e-0651-4c0a-b043-496fdd892635 | None | 1.5000000000000000000000000000 | flat | None | b6934ab1-8326-4281-89b9-f80294430321 | *None | None * | +--------------------------------------+-------+--------------------------------+------+----------+--------------------------------------+----------+------------+ Regards.

2 1

[Keystone] Confusion about the admin role
by 韩光宇 08 Nov '22

08 Nov '22

Hi, I'd like to ask some questions about the admin role. When I grant the admin role to a user in a project, that user can also get the admin role for other projects in the same domain. If I do the following： ```shell openstack project create --domain default --description "Demo Project" myproject openstack user create --domain default --password-prompt myuser openstack role add --project myproject --user myuser admin ``` Then, the myuser user has the permission to grant himself the admin role of another project in the same domain. I used to understand that 'openstack role add --project myproject --user myuser admin' was simply granted to myuser as admin within the myproject project, but now I find that This is equivalent to having the admin role for the entire domain. Can I ask the design idea here, or what I think is wrong？ Thanks, Han Guangyu

2 2

[barbican] Meeting canceled today (2022-11-08)
by Grzegorz Grasza 08 Nov '22

08 Nov '22

Hi Team, I'm canceling the meeting today, since I'm attending an internal conference/meetup. Looking at the agenda, I see there is the storyboard issue we need to discuss, but this can surely wait another week. / Greg

1 0

[neutron] CI meeting 8th Nov cancelled
by Slawek Kaplonski 08 Nov '22

08 Nov '22

Hi, I can't chair CI meeting this week too. As there is nothing urgent really to speak about I talked with Rodolfo and we agreed to cancel this week's meeting. See You on the meeting next week (Nov 15th) -- Slawek Kaplonski Principal Software Engineer Red Hat

1 0

(openstack-ansible) Container installation in openstack
by Adivya Singh 08 Nov '22

08 Nov '22

Hi Team, Any input on this, to install container service in openstack using ansible. standard global parametre Regards Adivya Singh

2 5

this is a openstack swift error(s)
by 无数的星球 08 Nov '22

08 Nov '22

After installing swift, I run "swift --debug stat" A serious error occurred, HTTP 401 error. The output information is shown below （ root@controller:~# swift --debug stat DEBUG:keystoneclient.auth.identity.v3.base:Making authentication request to http://controller:5000/v3/auth/tokens DEBUG:urllib3.connectionpool:Starting new HTTP connection (1): controller:5000 DEBUG:urllib3.connectionpool:http://controller:5000 "POST /v3/auth/tokens HTTP/1.1" 201 5316 DEBUG:keystoneclient.auth.identity.v3.base:{"token": {"methods": ["password"], "user": {"domain": {"id": "default", "name": "Default"}, "id": "ebe0c2002931431c9f6057f216c9aad1", "name": "swift", "password_expires_at": null}, "audit_ids": ["uxfmM8EtSDuf4TjLXur8LQ"], "expires_at": "2022-11-04T10:03:08.000000Z", "issued_at": "2022-11-04T09:03:08.000000Z", "project": {"domain": {"id": "default", "name": "Default"}, "id": "6c50811c608f44ebb32132f039fd3ac0", "name": "service"}, "is_domain": false, "roles": [{"id": "8eb2665e258844bdb6daa7826ff7fd96", "name": "reader"}, {"id": "527a74431f6349738de18528c6d445e1", "name": "admin"}, {"id": "101015b8b34e41b4962b31440cf61520", "name": "member"}], "catalog": [{"endpoints": [{"id": "6e624d24e7e046e8bda14929bbb345c5", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:5000/v3/", "region": "RegionOne"}, {"id": "bcdb2ad98de94420926cae68b27e4ccc", "interface": "public", "region_id": "RegionOne", "url": "http://controller:5000/v3/", "region": "RegionOne"}, {"id": "cc52757d98b04bdd88026d1087ae9a5d", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:5000/v3/", "region": "RegionOne"}], "id": "03943f266612412ebd2ea111596cfb75", "type": "identity", "name": "keystone"}, {"endpoints": [{"id": "68950739e40340768da67915b2cf6aac", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:9696", "region": "RegionOne"}, {"id": "8a68f4ac2d4845959e9515304dd75eb3", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:9696", "region": "RegionOne"}, {"id": "da32e6e91bff4279bafa3329053e3704", "interface": "public", "region_id": "RegionOne", "url": "http://controller:9696", "region": "RegionOne"}], "id": "33f2243a764d4bdc9a157e6a9d5a9c6a", "type": "network", "name": ""}, {"endpoints": [{"id": "166e07fa638e49b987595323bd3bcf61", "interface": "public", "region_id": "RegionOne", "url": "http://controller:9292", "region": "RegionOne"}, {"id": "cbb01761367e4acf83c658333e2de386", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:9292", "region": "RegionOne"}, {"id": "db8dd3cb0dd04b29bfb96a608fb72d99", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:9292", "region": "RegionOne"}], "id": "4f86e32926a64fb99de6e6919c714926", "type": "image", "name": ""}, {"endpoints": [{"id": "93e135f5a0824caa8b8fc9fa0df74bd4", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:8776/v2/6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}, {"id": "f21e50d72b914333952b7d3d8fd2578d", "interface": "public", "region_id": "RegionOne", "url": "http://controller:8776/v2/6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}, {"id": "f669072bd0a84c5b85ca70714e6b212d", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:8776/v2/6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}], "id": "554089befdd94ee1a87a03de006a33c6", "type": "volumev2", "name": ""}, {"endpoints": [{"id": "7f0d59134e60478ab7fbb0b72772cbab", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:8774/v2.1", "region": "RegionOne"}, {"id": "ac50c3fb0af947508497d8344b8e6d0a", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:8774/v2.1", "region": "RegionOne"}, {"id": "b41204a96b7a43f68a7f8f2613163df3", "interface": "public", "region_id": "RegionOne", "url": "http://controller:8774/v2.1", "region": "RegionOne"}], "id": "5e09e36a7744495389ea6159048eef5e", "type": "compute", "name": ""}, {"endpoints": [{"id": "1e56c094a9ea4e7a80132280df1925f4", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:8778", "region": "RegionOne"}, {"id": "896c40aa1ada41ed82bcb0c39d87d8f5", "interface": "public", "region_id": "RegionOne", "url": "http://controller:8778", "region": "RegionOne"}, {"id": "b4d50334c3174633aa1372f13b7c19ed", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:8778", "region": "RegionOne"}], "id": "90e53b94f1b84b99ae6fa03c793a30b1", "type": "placement", "name": ""}, {"endpoints": [{"id": "50653fa05fde458c9e04be6410d3407f", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:8776/v3/6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}, {"id": "794a0750211b4034bc40d4095fab09df", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:8776/v3/6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}, {"id": "951627fca8974f27a21fcb0a075cecc1", "interface": "public", "region_id": "RegionOne", "url": "http://controller:8776/v3/6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}], "id": "d8cca1398508471f937533ab72ffae96", "type": "volumev3", "name": ""}, {"endpoints": [{"id": "29c38e196a6743aa9ff92c7a26362bb2", "interface": "public", "region_id": "RegionOne", "url": "http://controller:8080/v1/AUTH_6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}, {"id": "adce2914f26f4d1ead7036255a690d42", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:8080/v1/AUTH_6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}, {"id": "bc4246d33f3146be87c49fd47af98172", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:8080/v1", "region": "RegionOne"}], "id": "f256c47fcfaa48f78baaf34066c54960", "type": "object-store", "name": "swift"}]}} DEBUG:urllib3.connectionpool:Starting new HTTP connection (1): controller:8080 DEBUG:urllib3.connectionpool:http://controller:8080 "HEAD /v1/AUTH_6c50811c608f44ebb32132f039fd3ac0 HTTP/1.1" 401 0 INFO:swiftclient:REQ: curl -i http://controller:8080/v1/AUTH_6c50811c608f44ebb32132f039fd3ac0 -I -H "X-Auth-Token: gAAAAABjZNVMHpSugcariFAL92JRrJXtfLTk8sAtac7CZY9BEUoOxg3hnI2xKyv-DBkYuFQNVEAQiL68-5in7gfh3SrWTn_P5s3QB_GWOVGMOobkSYXiiKtqzL46nUySqLKpJiG0IMd06ufiC3ILCZguXu5yfoAA9U9Z--XhBmyhXmcWLaQ1Ybo" INFO:swiftclient:RESP STATUS: 401 Unauthorized INFO:swiftclient:RESP HEADERS: {'Content-Type': 'text/html; charset=UTF-8', 'Www-Authenticate': 'Swift realm="AUTH_6c50811c608f44ebb32132f039fd3ac0"', 'Content-Length': '0', 'X-Trans-Id': 'txe65f29e7acb04920bb9f6-006364d54c', 'X-Openstack-Request-Id': 'txe65f29e7acb04920bb9f6-006364d54c', 'Date': 'Fri, 04 Nov 2022 09:03:08 GMT'} DEBUG:keystoneclient.auth.identity.v3.base:Making authentication request to http://controller:5000/v3/auth/tokens DEBUG:urllib3.connectionpool:Starting new HTTP connection (1): controller:5000 DEBUG:urllib3.connectionpool:http://controller:5000 "POST /v3/auth/tokens HTTP/1.1" 201 5316 DEBUG:keystoneclient.auth.identity.v3.base:{"token": {"methods": ["password"], "user": {"domain": {"id": "default", "name": "Default"}, "id": "ebe0c2002931431c9f6057f216c9aad1", "name": "swift", "password_expires_at": null}, "audit_ids": ["_gjaOZg2TquDXq7PTISWNA"], "expires_at": "2022-11-04T10:03:09.000000Z", "issued_at": "2022-11-04T09:03:09.000000Z", "project": {"domain": {"id": "default", "name": "Default"}, "id": "6c50811c608f44ebb32132f039fd3ac0", "name": "service"}, "is_domain": false, "roles": [{"id": "527a74431f6349738de18528c6d445e1", "name": "admin"}, {"id": "8eb2665e258844bdb6daa7826ff7fd96", "name": "reader"}, {"id": "101015b8b34e41b4962b31440cf61520", "name": "member"}], "catalog": [{"endpoints": [{"id": "6e624d24e7e046e8bda14929bbb345c5", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:5000/v3/", "region": "RegionOne"}, {"id": "bcdb2ad98de94420926cae68b27e4ccc", "interface": "public", "region_id": "RegionOne", "url": "http://controller:5000/v3/", "region": "RegionOne"}, {"id": "cc52757d98b04bdd88026d1087ae9a5d", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:5000/v3/", "region": "RegionOne"}], "id": "03943f266612412ebd2ea111596cfb75", "type": "identity", "name": "keystone"}, {"endpoints": [{"id": "68950739e40340768da67915b2cf6aac", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:9696", "region": "RegionOne"}, {"id": "8a68f4ac2d4845959e9515304dd75eb3", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:9696", "region": "RegionOne"}, {"id": "da32e6e91bff4279bafa3329053e3704", "interface": "public", "region_id": "RegionOne", "url": "http://controller:9696", "region": "RegionOne"}], "id": "33f2243a764d4bdc9a157e6a9d5a9c6a", "type": "network", "name": ""}, {"endpoints": [{"id": "166e07fa638e49b987595323bd3bcf61", "interface": "public", "region_id": "RegionOne", "url": "http://controller:9292", "region": "RegionOne"}, {"id": "cbb01761367e4acf83c658333e2de386", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:9292", "region": "RegionOne"}, {"id": "db8dd3cb0dd04b29bfb96a608fb72d99", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:9292", "region": "RegionOne"}], "id": "4f86e32926a64fb99de6e6919c714926", "type": "image", "name": ""}, {"endpoints": [{"id": "93e135f5a0824caa8b8fc9fa0df74bd4", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:8776/v2/6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}, {"id": "f21e50d72b914333952b7d3d8fd2578d", "interface": "public", "region_id": "RegionOne", "url": "http://controller:8776/v2/6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}, {"id": "f669072bd0a84c5b85ca70714e6b212d", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:8776/v2/6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}], "id": "554089befdd94ee1a87a03de006a33c6", "type": "volumev2", "name": ""}, {"endpoints": [{"id": "7f0d59134e60478ab7fbb0b72772cbab", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:8774/v2.1", "region": "RegionOne"}, {"id": "ac50c3fb0af947508497d8344b8e6d0a", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:8774/v2.1", "region": "RegionOne"}, {"id": "b41204a96b7a43f68a7f8f2613163df3", "interface": "public", "region_id": "RegionOne", "url": "http://controller:8774/v2.1", "region": "RegionOne"}], "id": "5e09e36a7744495389ea6159048eef5e", "type": "compute", "name": ""}, {"endpoints": [{"id": "1e56c094a9ea4e7a80132280df1925f4", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:8778", "region": "RegionOne"}, {"id": "896c40aa1ada41ed82bcb0c39d87d8f5", "interface": "public", "region_id": "RegionOne", "url": "http://controller:8778", "region": "RegionOne"}, {"id": "b4d50334c3174633aa1372f13b7c19ed", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:8778", "region": "RegionOne"}], "id": "90e53b94f1b84b99ae6fa03c793a30b1", "type": "placement", "name": ""}, {"endpoints": [{"id": "50653fa05fde458c9e04be6410d3407f", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:8776/v3/6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}, {"id": "794a0750211b4034bc40d4095fab09df", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:8776/v3/6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}, {"id": "951627fca8974f27a21fcb0a075cecc1", "interface": "public", "region_id": "RegionOne", "url": "http://controller:8776/v3/6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}], "id": "d8cca1398508471f937533ab72ffae96", "type": "volumev3", "name": ""}, {"endpoints": [{"id": "29c38e196a6743aa9ff92c7a26362bb2", "interface": "public", "region_id": "RegionOne", "url": "http://controller:8080/v1/AUTH_6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}, {"id": "adce2914f26f4d1ead7036255a690d42", "interface": "internal", "region_id": "RegionOne", "url": "http://controller:8080/v1/AUTH_6c50811c608f44ebb32132f039fd3ac0", "region": "RegionOne"}, {"id": "bc4246d33f3146be87c49fd47af98172", "interface": "admin", "region_id": "RegionOne", "url": "http://controller:8080/v1", "region": "RegionOne"}], "id": "f256c47fcfaa48f78baaf34066c54960", "type": "object-store", "name": "swift"}]}} DEBUG:urllib3.connectionpool:Starting new HTTP connection (1): controller:8080 DEBUG:urllib3.connectionpool:http://controller:8080 "HEAD /v1/AUTH_6c50811c608f44ebb32132f039fd3ac0 HTTP/1.1" 401 0 INFO:swiftclient:REQ: curl -i http://controller:8080/v1/AUTH_6c50811c608f44ebb32132f039fd3ac0 -I -H "X-Auth-Token: gAAAAABjZNVNWPHppqLAGxDFedVVT4FiMam_wPsK0HL2siFsQhBz2-LewBYcX5FCspKLclWzrGRj0ChEE2Rd-6auT_fpiI5uHFt11zOpDZRN83zxvGTp_FgtN5p7h5dG6I1yvPVi6ICurC8MhfK7SpfKupdK5TZVt7r2hZkdjd7TdHj3-m-Bgdc" INFO:swiftclient:RESP STATUS: 401 Unauthorized INFO:swiftclient:RESP HEADERS: {'Content-Type': 'text/html; charset=UTF-8', 'Www-Authenticate': 'Swift realm="AUTH_6c50811c608f44ebb32132f039fd3ac0"', 'Content-Length': '0', 'X-Trans-Id': 'txff99e52141174a038c7d1-006364d54d', 'X-Openstack-Request-Id': 'txff99e52141174a038c7d1-006364d54d', 'Date': 'Fri, 04 Nov 2022 09:03:09 GMT'} ERROR:swiftclient.service:Account HEAD failed: http://controller:8080/v1/AUTH_6c50811c608f44ebb32132f039fd3ac0 401 Unauthorized (txn: txff99e52141174a038c7d1-006364d54d) Traceback (most recent call last):   File "/usr/lib/python3/dist-packages/swiftclient/service.py", line 555, in stat     items, headers = get_future_result(stats_future)   File "/usr/lib/python3/dist-packages/swiftclient/service.py", line 251, in get_future_result     res = f.result(timeout=timeout)   File "/usr/lib/python3.8/concurrent/futures/_base.py", line 444, in result     return self.__get_result()   File "/usr/lib/python3.8/concurrent/futures/_base.py", line 389, in __get_result     raise self._exception   File "/usr/lib/python3.8/concurrent/futures/thread.py", line 57, in run     result = self.fn(*self.args, **self.kwargs)   File "/usr/lib/python3/dist-packages/swiftclient/multithreading.py", line 201, in conn_fn     return fn(*conn_args, **kwargs)   File "/usr/lib/python3/dist-packages/swiftclient/command_helpers.py", line 24, in stat_account     headers = conn.head_account(headers=req_headers)   File "/usr/lib/python3/dist-packages/swiftclient/client.py", line 1902, in head_account     return self._retry(None, head_account, headers=headers)   File "/usr/lib/python3/dist-packages/swiftclient/client.py", line 1856, in _retry     rv = func(self.url, self.token, *args,   File "/usr/lib/python3/dist-packages/swiftclient/client.py", line 924, in head_account     raise ClientException.from_response(resp, 'Account HEAD failed', body) swiftclient.exceptions.ClientException: Account HEAD failed: http://controller:8080/v1/AUTH_6c50811c608f44ebb32132f039fd3ac0 401 Unauthorized (txn: txff99e52141174a038c7d1-006364d54d) Account HEAD failed: http://controller:8080/v1/AUTH_6c50811c608f44ebb32132f039fd3ac0 401 Unauthorized Failed Transaction ID: txff99e52141174a038c7d1-006364d54d ） The output of "tail -f/var/log/*"  is as follows Nov 4 13:49:42 controller proxy-server: - - 04/Nov/2022/13/49/42 HEAD /v1/AUTH_6c50811c608f44ebb32132f039fd3ac0%3Fformat%3Djson HTTP/1.0 200 - Swift - - - - tx967ed9b9c29b4828b646d-0063651876 - 0.0039 RL - 1667569782.696980715 1667569782.700921297 - Nov 4 13:49:42 controller proxy-server: 192.168.100.10 192.168.100.10 04/Nov/2022/13/49/42 HEAD /v1/AUTH_6c50811c608f44ebb32132f039fd3ac0%3Fformat%3Djson HTTP/1.0 401 - python-swiftclient-3.11.0 gAAAAABjZRh2... - - - tx967ed9b9c29b4828b646d-0063651876 - 0.0055 - - 1667569782.696368933 1667569782.701885939 - Nov 4 13:49:44 controller proxy-server: 192.168.100.10 192.168.100.10 04/Nov/2022/13/49/44 HEAD /v1/AUTH_6c50811c608f44ebb32132f039fd3ac0%3Fformat%3Djson HTTP/1.0 401 - python-swiftclient-3.11.0 gAAAAABjZRh4... - - - tx4ac048f132544deaaac45-0063651878 - 0.0009 - - 1667569784.155652046 1667569784.156536341 - If you need/etc/swift/proxy-server.conf Please receive in the attachment thank you!!!

2 1

Neutron
by sajeyks mwangi 07 Nov '22

07 Nov '22

Hello! I installed openstack on Ubuntu using devstack and after running "./stack.sh" I tried to log in the dashboard and I got the error "Connection to neutron failed"

2 1

[cinder][kolla][OpenstackAnsible] Zed Cycle-Trailing Release Deadline
by Herve Beraud 07 Nov '22

07 Nov '22

Hello teams with trailing projects, The Zed cycle-trailing release deadline is in ~1 months [1], and all projects following the cycle-trailing release model must release their Zed deliverables by 16 Dec, 2022. The following trailing projects haven't been released yet for Zed (aside the release candidates versions if exists). Cinder team's deliverables: - cinderlib OSA team's deliverables: - openstack-ansible-roles - openstack-ansible Kolla team's deliverables: - kayobe - kolla - kolla-ansible - ansible-collection-kolla This is just a friendly reminder to allow you to release these projects in time. Do not hesitate to ping us if you have any questions or concerns. Thanks for your time. -- Hervé Beraud Senior Software Engineer at Red Hat irc: hberaud https://github.com/4383/ https://twitter.com/4383hberaud

1 0

[Heat] X-OpenStack-Request-ID changed during request processing
by Vadym Markov 07 Nov '22

07 Nov '22

Hi everyone Found that Heat doesn't keep the value of X-OpenStack-Request-ID header during request processing. Simple stack delete leads to 4 different request id, only the last of them corresponds to heat engine processing the request. Investigation shows that req-id "duplicates" twice - when client goes via redirect response returned by API and at version negotiation at every connect to API endpoint. I assume that this situation is not expected, and it really spoils work with heat api logs. Any ideas on how to make the situation more clear? Also looks like that header name is case-dependent in some places, and Oslo-middleware and Heat handles them differently. However, it needs additional investigation. I propose to turn off logging for successful negotiation and re-use req-id in keystoneuth during redirect. If it is ok, I plan to submit corresponding patches to upstream. Here is a piece of log related to stack delete. Only "req-843ac3a4..." exists in the heat-engine log. лис 07 12:21:59 ubuntu devstack(a)h-api.service[172816]: DEBUG heat.api.middleware.version_negotiation [None req-5b613e29-8dd9-458d-b908-4802f90c0b2f admin admin] Processing request: DELETE /heat-api/v1/8a76e6c8cc714288823dfe3677174893/stacks/stack_1 Accept: application/json {{(pid=172816) process_request /opt/stack/heat/heat/api/middleware/version_negotiation.py:57}} лис 07 12:21:59 ubuntu devstack(a)h-api.service[172816]: DEBUG heat.api.middleware.version_negotiation [None req-5b613e29-8dd9-458d-b908-4802f90c0b2f admin admin] Matched versioned URI. Version: 1.0 {{(pid=172816) process_request /opt/stack/heat/heat/api/middleware/version_negotiation.py:69}} лис 07 12:21:59 ubuntu devstack(a)h-api.service[172816]: INFO heat.common.wsgi [None req-ec73b5d8-5025-40e0-90d7-4010d39cb450 admin admin] Processing request: DELETE /heat-api/v1/8a76e6c8cc714288823dfe3677174893/stacks/stack_1 лис 07 12:21:59 ubuntu devstack(a)h-api.service[172816]: DEBUG heat.common.wsgi [None req-ec73b5d8-5025-40e0-90d7-4010d39cb450 admin admin] Calling StackController.lookup {{(pid=172816) __call__ /opt/stack/heat/heat/common/wsgi.py:823}} лис 07 12:21:59 ubuntu devstack(a)h-api.service[172816]: [pid: 172816|app: 0|req: 12/24] 192.168.123.5 () {66 vars in 1391 bytes} [Mon Nov 7 12:21:59 2022] DELETE /heat-api/v1/8a76e6c8cc714288823dfe3677174893/stacks/stack_1 => generated 377 bytes in 167 msecs (HTTP/1.1 302) 5 headers in 289 bytes (1 switches on core 3) лис 07 12:21:59 ubuntu devstack(a)h-api.service[172815]: DEBUG heat.api.middleware.version_negotiation [None req-f1eb3c1b-b76c-42fa-8998-31bb2cc43030 admin admin] Processing request: DELETE /heat-api/v1/8a76e6c8cc714288823dfe3677174893/stacks/stack_1/05e56d91-6b11-4e20-83f3-e2923667019b Accept: application/json {{(pid=172815) process_request /opt/stack/heat/heat/api/middleware/version_negotiation.py:57}} лис 07 12:21:59 ubuntu devstack(a)h-api.service[172815]: DEBUG heat.api.middleware.version_negotiation [None req-f1eb3c1b-b76c-42fa-8998-31bb2cc43030 admin admin] Matched versioned URI. Version: 1.0 {{(pid=172815) process_request /opt/stack/heat/heat/api/middleware/version_negotiation.py:69}} лис 07 12:21:59 ubuntu devstack(a)h-api.service[172815]: INFO heat.common.wsgi [None req-843ac3a4-408d-4473-844f-f4b109ad1725 admin admin] Processing request: DELETE /heat-api/v1/8a76e6c8cc714288823dfe3677174893/stacks/stack_1/05e56d91-6b11-4e20-83f3-e2923667019b лис 07 12:21:59 ubuntu devstack(a)h-api.service[172815]: DEBUG heat.common.wsgi [None req-843ac3a4-408d-4473-844f-f4b109ad1725 admin admin] Calling StackController.delete {{(pid=172815) __call__ /opt/stack/heat/heat/common/wsgi.py:823}} лис 07 12:21:59 ubuntu devstack(a)h-api.service[172815]: [pid: 172815|app: 0|req: 13/25] 192.168.123.5 () {66 vars in 1502 bytes} [Mon Nov 7 12:21:59 2022] DELETE /heat-api/v1/8a76e6c8cc714288823dfe3677174893/stacks/stack_1/05e56d91-6b11-4e20-83f3-e2923667019b => generated 0 bytes in 118 msecs (HTTP/1.1 204) 2 headers in 112 bytes (1 switches on core 0)

1 0