- openstack-discuss - lists.openstack.org

[nova][release][tooz] Hold your rechecks
by Sylvain Bauza 10 Jan '24

10 Jan '24

Hey folks, FWIW, our grenade check on SLURP upgrades is 100% failing now [1] due to a behavioural change in the tooz library [2] that's pulled by Cinder and which was released [3] and delivered to upper-contraints yesterday [4] There are different possibilities in order to unblock the gate, but until one of them is agreed and merged, please avoid wasting our CI resources by asking to recheck for something which will fail. Thanks, -Sylvain (who will send an email once the job is back up) [1] https://zuul.opendev.org/t/openstack/builds?job_name=grenade-skip-level-alw… [2] https://review.opendev.org/c/openstack/tooz/+/891355 [3] https://review.opendev.org/c/openstack/releases/+/899966 [4] https://review.opendev.org/c/openstack/requirements/+/901131

4 6

[largescale-sig] Next meeting: Jan 10, at 9UTC
by Kristin Barrientos 10 Jan '24

10 Jan '24

Hi everyone, The Large Scale SIG will be meeting this Wednesday in #openstack-operators on OFTC IRC, at 9UTC. Feel free to add topics to the agenda: https://etherpad.opendev.org/p/large-scale-sig-meeting Thanks, Kristin Barrientos Marketing Coordinator OpenInfra Foundation

2 1

Help with [masakari]
by Shubham Kumar Yadav 09 Jan '24

09 Jan '24

Hi, i have recently started working on Masakari (kubernetes in openstack) so i wanted some help with it please i was trying to test the masakari-instance-monitor & masakari-host-monitor but having trouble with it. i have created a pacemaker remote cluster (with pacemaker & corosync on controller nodes and pacemaker remote on compute node). inside masakari-instance-monitor pods i see *cat /etc/masakari/masakarimonitors.conf[DEFAULT]debug = truehostname = lab-11053-26006-cmp-1.cluster.local,lab-11053-26006-cmp-2.cluster.local,lab-11053-26006-cmp-3.cluster.local* but still im getting this error,it is still trying to find the short hostname. *2024-01-05 08:32:39.494 1 WARNING masakarimonitors.ha.masakari [-] Retry sending a notification. (BadRequestException: 400: Client Error for url: http://masakari-api.openstack.svc.cluster.local:15868/v1/9db00e10af034fc6a4… <http://masakari-api.openstack.svc.cluster.local:15868/v1/9db00e10af034fc6a4…>, Host with name lab-11053-26006-cmp-1 could not be found.): openstack.exceptions.BadRequestException: BadRequestException: 400: Client Error for url: http://masakari-api.openstack.svc.cluster.local:15868/v1/9db00e10af034fc6a4… <http://masakari-api.openstack.svc.cluster.local:15868/v1/9db00e10af034fc6a4…>, Host with name lab-11053-26006-cmp-1 could not be found.* do you hvae some suggestions to resolve this *2 - question do i have to create some notification and vmoves in openstack(masakari)?* openstack notification create <type> <hostname> <generated_time> <payload> *3 - host monitor also kinda doesnt work ,*when i tried to test the masakari host monitor by manually powering off the compute node, masakari should move the vms from powered off computes to some running compute but after the compute is powered off vms still remains on the powered off compute. Am i missing some conf? is there any need to add some conf in nova and keystone too? *4 - i have disabled "*pcs property set stonith-enabled=false" does it needs to be enabled and setup? 5- is there any other channels(slack) when i can contact teams directly?

1 0

[tc][all] Inactive projects, new contributors, and core access
by Jay Faulkner 09 Jan '24

09 Jan '24

Hi all, An interesting debate popped up during today's Technical Committee meeting which I thought would be wise to bring before the larger community. I will note, despite this referencing a current event, any discussions about this are about general policies and not any individual persons or situations. Monasca, a recently marked inactive project, has had someone -- a single individual -- volunteer to attempt to maintain the service. There was some debate among the TC about whether or not this was sufficient to consider Monasca an active project again, with two primary concerns. First, there were trust-related concerns -- for a project that would essentially be maintained by a single person, is it acceptable to grant core access or appoint someone DPL/PTL (giving the ability to merge code) who is new to the OpenStack community. Some TC members expressed a concern that granting such access, without a commitment from a trusted community member to act as a mentor or monitor on the project, could open us up to insider attacks against our deliverables, while others made the argument that we should default to trust and ensure our community remains welcome to new contributors. Secondly, there are concerns regarding sustainability -- is it acceptable for an OpenStack project to move from "inactive" to "active" based on the promised maintenance of a single person, with no backup? Some TC members expressed a concern that projects moving from "active" to "inactive" repeatedly are taxing on governance volunteers and not an ideal outcome, while others argued that there is value in keeping projects in the OpenStack release. There was a very involved debate in today's TC meeting about these topics. I encourage interested parties to review this log before replying. https://meetings.opendev.org/meetings/tc/2024/tc.2024-01-09-18.00.log.html#… We have an item on the TC agenda for next meeting, a week from today, to help decide on these items for the sake of Monasca, but it's my hope we can determine a reasonable precedent to apply consistently to these cases going forward. Your input will help guide the decision of the committee on these items. Thanks, Jay Faulkner OpenStack TC Chair

2 1

Team Signup for April 2024 OpenInfra PTG
by Kendall Nelson 09 Jan '24

09 Jan '24

Hello Everyone, Hopefully, you have seen by now, that the next OpenInfra PTG[1] will take place April 8-12, 2024 virtually! *To sign up your team, you must complete the survey[2] by February 18 at 7:00 UTC.* We NEED accurate contact information (email and IRC nickname ideally) for the moderator of your team’s sessions. This is because the survey information will be used to organize the schedule sign ups which will be done via the PTGBot. If you are not on IRC, please get set up[3] on the OFTC network and join #openinfra-events. You are also encouraged to familiarize yourself with the PTGBot documentation[4] as well. If you have any questions, please reach out! Information about signing up for timeslots will be sent to moderators late February after the team sign up deadline. Continue to visit openinfra.dev/ptg for updates. Registration will open soon! -Kendall Nelson (diablo_rojo) [1] PTG Site: https://openinfra.dev/ptg/ [2] Team Survey: https://openinfrafoundation.formstack.com/forms/april2024_ptg_survey [3] Setup IRC: https://docs.openstack.org/contributors/common/irc.html [4] PTGBot README: https://opendev.org/openstack/ptgbot/src/branch/master/README.rst

1 0

Re: [kolla] [skyline] help configuring monitor center
by Satish Patel 09 Jan '24

09 Jan '24

He did something for the monitor center to make it work with prometheus. I was planning to submit a patch. Let's see if he has anything to offer. ( He was planning to submit a patch. Lets see if he has anything to offer. ) On Tue, Jan 9, 2024 at 6:25 PM Satish Patel <satish.txt(a)gmail.com> wrote: > /cc - Nguyen Huu Khoi > > He did something for the monitor center to make it work with prometheus. I > was planning to submit a patch. Lets see if he has anything to offer. > > On Tue, Jan 9, 2024 at 6:17 PM 吴文相 <wu.wenxiang(a)99cloud.net> wrote: > >> Hello, Garcetto >> >> No guide as I known. >> You can create a ticket to ask skyline dev team. >> Beside enable_prometheus, you also need to add other prometheus related >> configuration items, such as url / username / passsword, etc. >> >> Thanks >> >> Best Regrads >> Wu Wenxiang >> >> >> >> Original: >> >> - From：garcetto <garcetto(a)gmail.com> >> - Date：2024-01-08 17:50:17(中国 (GMT+08:00)) >> - To：OpenStack Discuss <openstack-discuss(a)lists.openstack.org> >> - Cc： >> - Subject：[kolla] [skyline] help configuring monitor center >> >> good morning, >> is there a guide to help me configure monitor center for skyline? >> I have already set: >> >> enable_skyline: "yes" >> enable_prometheus: "yes" >> >> >> [image: image.png] >> >> thank you. >> >> >>

1 0

Re:[kolla] [skyline] help configuring monitor center
by 吴文相 09 Jan '24

09 Jan '24

Hello, Garcetto No guide as I known. You can create a ticket to ask skyline dev team. Beside enable_prometheus, you also need to add other prometheus related configuration items, such as url / username / passsword, etc. Thanks Best Regrads Wu Wenxiang Original: From：garcetto <garcetto(a)gmail.com>Date：2024-01-08 17:50:17(中国 (GMT+08:00))To：OpenStack Discuss <openstack-discuss(a)lists.openstack.org>Cc：Subject：[kolla] [skyline] help configuring monitor centergood morning, is there a guide to help me configure monitor center for skyline? I have already set: enable_skyline: "yes" enable_prometheus: "yes" thank you.

1 0

[TripleO][all][tc] Retiring TripleO completely
by Ghanshyam Mann 09 Jan '24

09 Jan '24

Hello Everyone, As you might know TripleO last maintained release was wallaby[1] and accordingly all the deliverables of this project ware marked as deprecated[2] in previous cycle. In today TC meeting, we discussed about the release clarity of its remaining deliverables (stable/wallaby or its needed master only CI repo) and got to know that TripleO team has retired the stable/wallaby ( no longer maintaining it) so we are good to move to next step of TripleO retirement completely . I have proposed the governance change to record the retirement officially. Feel free to provide your feedback in this email or in gerrit change or let TC knows if any of the deliverables you are dependent on and interested to maintain. - https://review.opendev.org/c/openstack/governance/+/905145 [1] https://lists.openstack.org/pipermail/openstack-discuss/2023-February/03208… [2] https://review.opendev.org/c/openstack/governance/+/877132 -gmann

1 0

OpenStack "D" Release Voting
by Kristin Barrientos 09 Jan '24

09 Jan '24

Hi everyone, It’s time to vote for the OpenStack “D” Release! The nominees are: - Dalmatian - Daikon - Dijon Get your votes in here: https://civs1.civs.us/cgi-bin/vote.pl?id=E_28514d041f523c11&akey=c3d26e4bc2… Voting will close on January 12, 2024, at 20:00 UTC. Thanks, Kristin Barrientos Marketing Coordinator OpenInfra Foundation

1 0

[designate] Proposal to deprecate the agent framework and agent based backends
by Michael Johnson 09 Jan '24

09 Jan '24

TLDR: The Designate team would like to deprecate the backend agent framework and the agent based backends due to lack of development and design issues with the current implementation. The following backends would be deprecated: Bind9 (Agent), Denominator, Microsoft DNS (Agent), Djbdns (Agent), Gdnsd (Agent), and Knot2 (Agent). Designate includes many backend DNS server drivers[1], many of which are "native" (also known as xfr type backends) backend implementations. In addition to the "native" backends, Designate has an agent backend[2] that supports other backends via an agent process. To quote the agent backend documentation[2]: This backend uses an extension[3] of the DNS protocol itself to send management requests to the remote agent processes, where the requests will be actioned. The rpc traffic between designate and the agent is both unauthenticated and unencrypted. Do not run this traffic over unsecured networks. Here are the reasons we are proposing to deprecate the agent framework now: 1. The agent protocol used by Designate is using an "unassigned"[4][5] DNS opcode (14) that is causing problems with the dnspython library >= 2.3.0 which is now validating the opcode when building DNS messages. It is a bad practice to use "unassigned" values as they may be officially assigned at any time, likely with an incompatible message format. 2. The agent backends are not tested in the OpenStack jobs[1]. 3. Many of the agent backends have been marked as "Experimental" since 2016 with no additional contributions beyond general repository code maintenance. 4. The protocol between the Designate worker process and the agent process is unauthenticated and unencrypted. 5. We do not know of a development resource to rewrite the agent framework protocol to address issue #1 and #4 above. 6. The introduction of catalog zones[6] may eliminate the need for some of the agent based backend drivers. By marking the agent framework and agent based backends "deprecated" in the Antelope cycle, we would remove the code no earlier than the "C" release of OpenStack (per the OpenStack deprecation policy[7]). In the meantime, issue #1 has been worked around by overriding the dnspython opcode validation[7] as needed in the Designate code (similar to a monkey patch). This is not a sustainable long term solution. The following backend agent based drivers would be marked "deprecated" in addition to the agent framework itself: Bind9 (Agent) Denominator Microsoft DNS (Agent) Djbdns (Agent) Gdnsd (Agent) Knot2 (Agent) We plan to propose patches for the deprecation over the next week, but will not merge them until at least January 24th to allow time for comment from the community. If you have concerns about this deprecation plan or are interested in rewriting the agent framework protocol to address the above issues, please reply to this announcement. Michael [1] https://docs.openstack.org/designate/latest/admin/support-matrix.html [2] https://docs.openstack.org/designate/latest/admin/backends/agent.html [3] https://github.com/openstack/designate/blob/master/designate/backend/privat… [4] https://www.rfc-editor.org/rfc/rfc6895.html#section-2.2 [5] https://www.iana.org/assignments/dns-parameters/dns-parameters.xhtml#dns-pa… [6] https://www.ietf.org/archive/id/draft-ietf-dnsop-dns-catalog-zones-08.txt [7] https://docs.openstack.org/project-team-guide/deprecation.html [8] https://review.opendev.org/c/openstack/designate/+/870678

3 13

[tc] Technical Committee Meeting Jan 9
by Jay Faulkner 09 Jan '24

09 Jan '24

Hi all, The next meeting of the OpenStack Technical Committee is today (sorry for the late email!) Jan 9, at 1800 UTC in #openstack-tc on OFTC. The proposed agenda is: - Roll call - Follow up on tracked action items - Spotz - (due Jan 7 2024) Look into updating https://docs.openstack.org/install-guide/openstack-services.html and report back to TC - Gate health check - Leaderless projects (gmann) - Implementation of Unmaintained branch statuses - TC charter updates and TC votes on OpenInfra Bylaw changes (gmann) - Charter updates: https://review.opendev.org/c/openstack/governance/+/903236/ - Resolution for TC votes: https://review.opendev.org/c/openstack/governance/+/903239/ - 2024.1 TC Tracker - https://etherpad.opendev.org/p/tc-2024.1-tracker - TripleO next steps (fungi) - Stable-branching repos were deprecated but single-branch weren't - We're approaching membership freeze for 2024.1/Caracal and the Release Managers need to know what to do with them - The VMT still gets notified about newly discovered security vulnerabilities from people who think the repos are maintained - Open Discussion and Reviews Thanks, Jay Faulkner OpenStack TC Chair

1 0

[all] OpenInfra Foundation Individual Director Election
by Jeremy Stanley 08 Jan '24

08 Jan '24

Just a heads up that the election to choose representatives for the Individual Members of the OpenInfra Foundation is open through Friday of this week. Ballots have already been sent by E-mail, but there have been reports of delivery challenges for some members. If you believe you should have received a ballot but don't find it in your inbox nor spam/junk folder, see this post on the foundation ML for further instructions: https://lists.openinfra.dev/archives/list/foundation@lists.openinfra.dev/th… Please note, to be considered eligible, you must have been an OpenInfra Foundation member by July 16, 2023. -- Jeremy Stanley

1 0

[tc][all] Technical Committee Charter updated
by Jay Faulkner 08 Jan '24

08 Jan '24

Hi all, I wanted to inform you that the OpenStack Technical Committee Charter was recently updated in coordination with the Open Infrastructure Foundation (OIF) bylaws. As a high level summary, these changes are moving some aspects of OpenStack policy from OIF Bylaws into the OpenStack Technical Committee charter, mirroring the way later OIF projects were configured. As always, the actual changes are recorded directly in git in the governance repo. Please review the changes directly if you want to get deeper than my surface-level summary. The TC Charter update commit is at https://opendev.org/openstack/governance/commit/bead7751833b78600853c22faac… and the resolution expressing support for OIF Bylaws changes is at https://opendev.org/openstack/governance/commit/5c683c25013e5e004bf6f9c9b67… . Thanks, Jay Faulkner OpenStack TC Chair

1 0

[octavia][neutron] ask about LB with DVR
by Nguyễn Hữu Khôi 08 Jan '24

08 Jan '24

Hello guys. I see that more and more people use Octavia but it depends on network nodes which cause bottlenecks or single point of failure . I would like to know if we have some plan to make Octavia works without network nodes. Thank you. Nguyen Huu Khoi

2 4

[Cinder][Glance][Image Encryption] First overall patchset for the image encryption ready
by Josephine Seifert 08 Jan '24

08 Jan '24

Hi everyone, I am happy to announce, that the first patch set of image encryption is ready. If you would like to test and review it, it would be a great help. The patchset can be found under the topic "image encryption": https://review.opendev.org/q/topic:%22image-encryption%22 It contains patches for: - Glance - Cinder - os-brick - openstackclient - cinderclient All patches need to be present for testing. Our test-environment had ceph as a backend, test with other backends would be nice. I hope for feedback from the glance and cinder teams, but also Operator feedback is welcome. Thank you Josephine (Luzi)

1 0

[openstack-helm] Nominate Sergiy Markin as a core reviewer
by Vladimir Kozhukalov 08 Jan '24

08 Jan '24

Hi Openstack-Helm team, I would like to nominate Sergiy Markin as a core reviewer for the project. He's been doing many reviews recently [1]. He also contributed some Mariadb and ingress related improvements. Besides that he has wide experience in Airship which is historically closely related to Openstack-Helm. I believe we as a team will benefit a lot from Sergiy being a core team member. [1] https://www.stackalytics.io/report/contribution?module=openstack-helm-group… -- Best regards, Kozhukalov Vladimir

2 2

LVM Cinder
by Jorge Visentini 08 Jan '24

08 Jan '24

Hi all! My scenario: We currently use oVirt and are studying the possibility of migrating to OpenStack in the future. Today we use Storages Enterprise 3PAR and Dell PowerVault. I've even tried to integrate 3PAR, but it's too complex for me for now... Stupid question... If I work directly with LVM, that is, deliver a LUN to all my hosts, create an LVM and deliver it to Cinter, will I have the Live Migration, HA instances, snapshot and other features ? Cheers! -- Att, Jorge Visentini +55 55 98432-9868

6 10

[publiccloud-sig] Reminder - next meeting January 10th - 0800 UTC
by Felix Kronlage-Dammers 08 Jan '24

08 Jan '24

Hi everyone, This Wednesday (January 10th) the first meeting of the new year of the public cloud sig is going to happen. Since we do every other meeting as a videosession, we’ll be meeting at 0800 UTC here: https://conf.scs.koeln:8443/OIF-public-cloud-sig See also here for all other details: https://wiki.openstack.org/wiki/PublicCloudSIG For the agenda, I have couple of suggestions (that I also added to the etherpad): - FOSDEM is coming up. Maybe we want to meet at FOSDEM? - The last meetings we’ve discussed and worked on user stories regarding discoverability of flavors and features of a public cloud. We should find a way this becomes actionable with concrete next steps (see: https://input.scs.community/ZfP4d2kNTbagN9-Jk2ccEQ?view - this is also linked from the Etherpad: https://etherpad.opendev.org/p/publiccloud-sig-meeting) See you Wednesday! felix -- Felix Kronlage-Dammers Product Owner IaaS & Operations Sovereign Cloud Stack Sovereign Cloud Stack — standardized, built and operated by many Ein Projekt der Open Source Business Alliance - Bundesverband für digitale Souveränität e.V. Tel.: +49-30-206539-205 | Matrix: @fkronlage:matrix.org | fkr(a)osb-alliance.com

1 0

[neutron] Bug Deputy Report January 1 - January 7
by Elvira Garcia Ruiz 08 Jan '24

08 Jan '24

Hi folks! I was the Neutron bug deputy last week. It was a quiet week. See the report below: Medium ----------- https://bugs.launchpad.net/neutron/+bug/2047849 - [RFE] Start using oslo messaging namespaces Unassigned Low ------ https://bugs.launchpad.net/neutron/+bug/2048198 - neutron-lib role enforcer is writing warning messages Unassigned Best regards, Elvira

1 0

[kolla] [skyline] help configuring monitor center
by garcetto 08 Jan '24

08 Jan '24

good morning, is there a guide to help me configure monitor center for skyline? I have already set: enable_skyline: "yes" enable_prometheus: "yes" [image: image.png] thank you.

1 0

beginning with [masakari]
by Shubham Kumar Yadav 08 Jan '24

08 Jan '24

Hi, i have recently started working on Masakari (kubernetes in openstack) so i wanted some help with it please i was trying to test the masakari-instance-monitor & masakari-host-monitor but having trouble with it. i have created a pacemaker remote cluster (with pacemaker & corosync on controller nodes and pacemaker remote on compute node). inside masakari-instance-monitor pods i see *cat /etc/masakari/masakarimonitors.conf[DEFAULT]debug = truehostname = lab-11053-26006-cmp-1.cluster.local,lab-11053-26006-cmp-2.cluster.local,lab-11053-26006-cmp-3.cluster.local* but still im getting this error,it is still trying to find the short hostname. *2024-01-05 08:32:39.494 1 WARNING masakarimonitors.ha.masakari [-] Retry sending a notification. (BadRequestException: 400: Client Error for url: http://masakari-api.openstack.svc.cluster.local:15868/v1/9db00e10af034fc6a4… <http://masakari-api.openstack.svc.cluster.local:15868/v1/9db00e10af034fc6a4…>, Host with name lab-11053-26006-cmp-1 could not be found.): openstack.exceptions.BadRequestException: BadRequestException: 400: Client Error for url: http://masakari-api.openstack.svc.cluster.local:15868/v1/9db00e10af034fc6a4… <http://masakari-api.openstack.svc.cluster.local:15868/v1/9db00e10af034fc6a4…>, Host with name lab-11053-26006-cmp-1 could not be found.* *2 - question do i have to create some notification and vmoves?* openstack notification create <type> <hostname> <generated_time> <payload> *3 - host monitor also kinda doesnt work ,*when i tried to test the masakari host monitor by manually powering off the compute node, masakari should move the vms from powered off computes to some running compute but after the compute is powered off vms still remains on the powered off compute. Am i missing some conf? is there any need to add some conf in nova and keystone too? *4 - i have disabled "*pcs property set stonith-enabled=false" does it needs to be enabled and setup? 5- is there any other channels(slack) when i can contact teams directly?

1 0

Re:
by Rohit Sansiya 07 Jan '24

07 Jan '24

Please answer On Sat, 6 Jan, 2024, 13:47 Rohit Sansiya, <rsansiya(a)gmail.com> wrote: > i hvnt heard about ...how the openstack is getting the dhcp ip without > registration of mac address ? > > > Your message is ready to be sent with the following file or link > attachments: > Rohit Sansiya > https://sites.google.com/view/rpgcloud/research-india > > Note: To protect against computer viruses, e-mail programs may prevent > sending or receiving certain types of file attachments. Check your e-mail > security settings to determine how attachments are handled. >

1 0

[nova] patch delete dangling bdms lead to VM Error
by Sang Tran Quoc 07 Jan '24

07 Jan '24

Hi community, I've got the error with this patch while rebooting VM with volume source from the image, the result VM state is Error with the message "VolumeDeviceNotFound" (Tested with Netapp & PowerStrore iSCSI SAN driver) Please take a look at this! https://review.opendev.org/c/openstack/nova/+/882284

2 2

[kolla] help installing skyline UI
by garcetto 07 Jan '24

07 Jan '24

good evening, i dont find where i can enable the skyline ui frontend could have an help? thank you

3 3

Re: New OpenStack machine on new node not responding
by 韩光宇 07 Jan '24

07 Jan '24

Hi Do you configure security group? The default security group provided by OpenStack denies any incoming traffic. ----------Reply to Message---------- On Tue, Jan 2, 2024 21:54 PM kjme001<kjme001(a)gmail.com> wrote: hello, I added a new node to OpeStack. I can create a new instance on it. The instance creates itself without error, its IP address is assigned. But however, the connection over ssh to this new machine does not work for me, nor does ping. I have the network traffic passed, what else can I check why the new machine is not responding to me network-wise regards

2 1