- openstack-discuss - lists.openstack.org

Designate and neutron - only creating records for floating ips and not servers or ports
by Russell Stather 23 May '23

23 May '23

Hi We have a problem where we can create a floating ip and the neutron integration happily creates the dns record. However, if we create a port or a server the record does not get created. This is a charm installation, with designate using designate-bind as the backend. Any suggestions or places to look would be appreciated. I can't see any errors in the designate logs or the neutron logs. Thanks Russell

2 1

Does Openstack have the notion of tenant admin?
by wodel youchi 23 May '23

23 May '23

Hi, Does Openstack have the notion of tenant admin? If not, can a role be created to simulate such notion? Regards. <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> Virus-free.www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

4 5

multi-region deployment
by wodel youchi 23 May '23

23 May '23

Hi, I have been reading about multi-region in openstack. >From my understanding, that keystone and horizon are shared and deployed only in the first region. Is this correct? If yes, what happens if the first region goes down? Regards.

3 2

[tc] Technical Committee next weekly meeting on May 23, 2023
by Nikolla, Kristi 23 May '23

23 May '23

Hi all, This is a reminder that the next weekly Technical Committee meeting is to be held on Tuesday, May 23, 2023 at 1800 UTC on #openstack-tc on OFTC IRC. Please propose items to the agenda by editing the wiki page at https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting At the end of the day I will send out an email with the finalized agenda. Thank you, Kristi Nikolla

1 1

[publiccloud-sig] Reminder - next meeting May 24th - 0700 UTC
by Felix Kronlage-Dammers 22 May '23

22 May '23

Hi everyone, tomorrow is the next meeting of the public cloud sig. We meet on IRC in #openstack-operators at 0700 UTC (see my mail from couple weeks ago regarding the shift during summer time: https://lists.openstack.org/pipermail/openstack-discuss/2023-May/033623.html) A preliminary agenda can be found in the pad: https://etherpad.opendev.org/p/publiccloud-sig-meeting See also here for all other details: https://wiki.openstack.org/wiki/PublicCloudSIG read you on wednesday! felix

1 0

[cinder][dev] Add support in driver - Active/Active High Availability
by U T, Raghavendra 22 May '23

22 May '23

Hi, We wish to add Active/Active High Availability to: 1] HPE 3par driver - cinder/cinder/volume/drivers/hpe/hpe_3par_common.py 2] Nimble driver - cinder/cinder/volume/drivers/hpe/nimble.py Checked documentation at https://docs.openstack.org/cinder/latest/contributor/high_availability.html https://docs.openstack.org/cinder/latest/contributor/high_availability.html… https://docs.openstack.org/cinder/latest/contributor/high_availability.html… Summary of steps: 1] In driver code, set SUPPORTS_ACTIVE_ACTIVE = True 2] Split the method failover_host() into two methods: failover() and failover_completed() 3] In cinder.conf, specify cluster name in [DEFAULT] section cluster = <cluster_name> 4] Configure atleast two nodes in HA and perform testing Is this sufficient or anything else required ? Note: For Nimble driver, replication feature is not yet added. So can the above step 2 be skipped? Appreciate any suggestions / pointers. Regards, Raghavendra Tilay.

3 3

[manila] Bobcat hackathon: tackling tech debt
by Carlos Silva 22 May '23

22 May '23

Hello, Zorillas and interested stackers! As discussed in the previous week's weekly meeting, we will be starting our hackathon tomorrow, which will be an effort to work on tech debt items [1]. The kick-off meeting will be at 15 UTC in a jitsi bridge [2]. Over tomorrow's meeting, we will be assigning the topics to work on. We can work with small teams or get items to work on things individually. We will use our upstream weekly meeting slot as a checkpoint for the assigned tasks, and the hackathon will run until this Friday (May 26th). [1] https://etherpad.opendev.org/p/zorilla-bobcat-hackathon [2] https://meetpad.opendev.org/ManilaBobcatHackathon Looking forward to it! Regards, carloss

1 0

Mixing IDE and VIRTIO volumes
by Work Ceph 22 May '23

22 May '23

Hello guys, We have a situation where an image requires an IDE bus in KVM. Therefore, we configured it in OpenStack to have the IDE bus being used. However, when we add new volumes to this VM (server), all of them are being allocated as IDE volumes; therefore, we are limited to 4 volumes in total in the VM. Is it possible to mix different types of volumes in a VM in OpenStack? I know that in other platforms, such as when we use KVM directly, proxmox, Apache CloudStack, we can do such combinations, but we were not able to achieve it in OpenStack. Have you guys worked with similar use cases? I know that I can convert the image to use virtIO or iSCSI bus, and to do that I need to fix/patch the operating system inside the image. However, I would like to check if there is a method to use a root volume of a VM as IDE, and other volumes as virtio to avoid the limit of volumes that IDE has.

4 4

[tc] August 2023 OpenInfra Board Sync
by Jeremy Stanley 22 May '23

22 May '23

The Open Infrastructure Foundation Board of Directors is endeavoring to engage in regular check-ins with official OpenInfra projects. The goal is for a loosely structured discussion one-hour in length, involving members of the board and the OpenStack TC, along with other interested community members. This is not intended to be a formal presentation, and no materials need to be prepared in advance. I've started an Etherpad where participants can brainstorm potential topics of conversation, time-permitting: https://etherpad.opendev.org/p/2023-08-board-openstack-sync At the end of the May 10 discussion, we tentatively agreed to schedule the next call for 18:00 UTC on Wednesday, August 9. I've attached a calendar file which can serve as a convenient schedule hold for this, in case anyone needs it. -- Jeremy Stanley

1 0

Opentack + FCP Storages
by Jorge Visentini 22 May '23

22 May '23

Hello. Today in our environment we only use FCP 3PAR Storages. Is there a "friendly" way to use FCP Storages with Openstack? I know and I've already tested Ceph, so I can say that it's the best storage integration for Openstack, but it's not my case hehe All the best! -- Att, Jorge Visentini +55 55 98432-9868

3 3

Discuss Fix for Bug #2003179
by Saad, Tony 22 May '23

22 May '23

Hello, I am reaching out to start a discussion about Bug #2003179 https://bugs.launchpad.net/cinder/+bug/2003179 The password is getting leaked in plain text from https://opendev.org/openstack/oslo.privsep/src/commit/9c026804de74ae23a60ab…. This logger line does not always contain a password so using mask_password() and mask_dict_password() from https://docs.openstack.org/oslo.utils/latest/reference/strutils.html is probably not the best solution. Anyone have any thoughts on how to stop the password from appearing in plain text? Thanks, Tony Internal Use - Confidential

3 2

[ptl][tc] New approach for project update presentations
by Jeremy Stanley 22 May '23

22 May '23

I'm reaching out to you about the video recordings that the OpenInfra Foundation has been collecting to capture a project update from each OpenInfa community (including those for individual OpenStack Project Teams). These videos were previously collected leading up to the OpenInfra Summits to showcase what each project had accomplished in the past year/release. This year we are implementing a change to the cadence of collecting this video content, to better fit with the communities' timeline, milestones and achievements. It will also help us better promote the new content, without it getting lost among the news and buzz around the OpenInfra Summit. Moving forward, OpenStack Project Teams will need to make decisions about items, such as the cadence and format of recording the project updates. Cadence: There are various options to pick from. Teams can define a periodic schedule, or stick to bigger milestones like major releases and project anniversaries. Format: Teams can produce pre-recorded presentations with slide materials, and share that. If enough content and volunteers are available, they could also talk about their latest project news and updates during an OpenInfra Live episode. We will post all recordings on the OpenInfra Foundation YouTube channel and promote them through relevant social media accounts. Timeline: The new process will start after this year's OpenInfra Summit, which will happen on June 13-15 in Vancouver, Canada. After the event, I will reach out to help the Technical Committee and individual teams decide on the above items and take next steps in the process. Please let me know if you have any questions in the meantime. -- Jeremy Stanley on behalf of the OpenInfra Foundation Staff

1 0

[manila] Architecture: separation between share and ctl nodes
by Jan Wasilewski 22 May '23

22 May '23

Hi, I would like to integrate Manila with our current OpenStack cloud. In the architecture and configuration instructions, it is mentioned that the share node and controller node should be located on separate nodes. However, in our environment, each service is located on a separate VM, so I'm wondering if it would be reasonable to integrate the controller node and share node on a single node. Especially since we are using Huawei Dorado as our backend, and from our tests, we have not observed significant traffic generated by it. Therefore, I would like to know if it is a sensible approach to have everything located on a single node or if we may have missed something important in this integration. Thank you in advance for your insights and advice. Best regards, Jan

2 2

[neutron] Bug Deputy Report May 15 - May 21
by Elvira Garcia Ruiz 22 May '23

22 May '23

Hi everyone! I was the bug deputy last week. There are two critical bugs reported, both have fixes ready for review. Find the full report below: Critical --------- - https://bugs.launchpad.net/neutron/+bug/2019802/ - [master] Not all fullstack tests running in CI Fix proposed by yatin: https://review.opendev.org/c/openstack/neutron/+/883120 - https://bugs.launchpad.net/neutron/+bug/2019946 - [S-RBAC] context.elevated() method from neutron-lib should ensure all required roles are set in context object Fix: https://review.opendev.org/c/openstack/neutron-lib/+/883345 Assigned to Slawek High ------ https://bugs.launchpad.net/neutron/+bug/2020050 - [sqlalchemy-20] Use a ``TextClause`` object for the empty strings in the DB model definitions Assigned to Rodolfo https://bugs.launchpad.net/neutron/+bug/2020195 - [ovn-octavia-provider] functional test intermittently fail with DB error: Cursor needed to be reset because of commit/rollback and can no longer be fetched from. Related commit: https://review.opendev.org/c/openstack/ovn-octavia-provider/+/883662 Assigned to Fernando - https://bugs.launchpad.net/neutron/+bug/2020215 - ml2/ovn refuses to bind port due to dead agent randomly in the nova-live-migrate ci job Fix: https://review.opendev.org/c/openstack/neutron/+/883687 Assigned to Sean Mooney Medium ----------- - https://bugs.launchpad.net/neutron/+bug/2019887 - [OVN] Log object deletion fails if related security group was simultaneously modified Fix: https://review.opendev.org/c/openstack/neutron/+/883102 Assigned to Elvira - https://bugs.launchpad.net/neutron/+bug/2019859 - stable/xena regression - NotImplementedError: Operator 'getitem' is not supported on this expression Fix: https://review.opendev.org/c/openstack/neutron/+/883288 Assigned to Rodolfo - https://bugs.launchpad.net/neutron/+bug/2019948 - [alembic] Alembic operations require keywords only arguments Fix: https://review.opendev.org/c/openstack/neutron/+/883340 Assigned to Rodolfo - https://bugs.launchpad.net/neutron/+bug/2020058 - [OVN][OVN-BGP-AGENT] Expose port hosting information for virtual ports In Progress Assigned to Lucas Alvares - https://bugs.launchpad.net/neutron/+bug/2020114 - [sqlalchemy-20] ``Engine`` class no longer inherits from ``Connectable`` Fix proposed: https://review.opendev.org/c/openstack/neutron/+/883521 Assigned to Rodolfo Wishlist ----------- - https://bugs.launchpad.net/neutron/+bug/2019960 - [RFE] Can't protect the "default" security group from regular users Unassigned Undecided -------------- - https://bugs.launchpad.net/neutron/+bug/2020001 - Neutron Dynamic Routing : vip is not advertised via BGP Marked incomplete by Jens Harbott so I decided to wait on their opinion - https://bugs.launchpad.net/neutron/+bug/2020060 - Stateless Feature of Security Group Not Functioning in Case of other Port same compute use stateful Rodolfo is discussing with the reporter more information about this but, since it is linux bridge driver I was not sure about confirming Assigned to Slawek - https://bugs.launchpad.net/neutron/+bug/2020168 - [OVN][SRIOV] traffic problems when sriov and non-sriov ports are bound on the same hypervisor The reporter is not sure if this is a bug in Neutron or in OVN. Someone with SRIOV knowledge might be able to help better. Unassigned Kind regards, Elvira

1 0

[kolla-ansible] Plugin pulling from other repositories
by James Leong 21 May '23

21 May '23

Hi everyone, How can I change the location where the repositories are being git pulled? I am using kolla-ansible as my deployment tool for deploying the yoga version of OpenStack. It seems like all plugins, such as zun_ui, blazar_dashboard, etc., are all being pulled from this path " https://opendev.org/openstack." I have attempted to change the variable kolla_dev_repos_git in globals.yml from "https://opendev.org/openstack" to point to my GitHub repository. However, it did not work. Is there a place where I can override the default path to pull plugins from my repository? Thanks for your help, James

2 1

Re: OVS-DPDK poor performance with Intel 82599
by Soheil D.Amiri 20 May '23

20 May '23

Dear satish About your topic on openstack.org by subject of "OVS-DPDK poor performance with Intel 82599". I have the same problem. I could not get good performance on my compute node. Did you solve your problem ? Would you please guide me about this problem https://lists.openstack.org/pipermail/openstack-discuss/2020-November/01912… Best Regards Soheil Amiri

1 0

[OSA][NEUTRON] Doubts about network setup
by Murilo Morais 19 May '23

19 May '23

Good evening everyone! I'm trying to set up a lab for testing using Openstack Ansible (OSA) and I'm having a lot of trouble understanding/setting up the network. I'm trying something similar to AIO (All-in-one) but with customizations (2 compute node). I'm using Debian 11 as OS. My problem is that I need the instances to communicate through VLANs that are being delivered directly to the interface of each compute node, as I need the same instances to participate in an existing network. I have a lot of doubts about this type of setup and how the configuration of provider_networks would be. Thanks in advance!

2 1

[kolla-ansible] Adding a USB device to a Docker container
by Bram Kranendonk 19 May '23

19 May '23

Hi OpenStack Discuss, I'm looking for a way to mount an USB device to a kolla-ansible Docker container. Is there a way to achieve this using the kolla-ansible configuration global vars? I couldn't find a way to do so. Thanks in advance, . Bram Kranendonk System Engineer <tel:> Oostmaaslaan 71 (15e etage) 3063 AN Rotterdam The Netherlands [team.blue logo]<https://team.blue/?utm_source=signature&utm_medium=email&utm_campaign=team-…>

1 0

[neutron] policy rules: filter on name field
by Paolo Emilio Mazzon 19 May '23

19 May '23

Hello, I'm trying to understand if this is feasible: I would like to avoid a regular user from tampering the "default" security group of a project. Specifically I would like to prevent him from deleting sg rules *from the default sg only* I can wite a policy.yaml like this # Delete a security group rule # DELETE /security-group-rules/{id} # Intended scope(s): project "delete_security_group_rule": "role:project_manager and project_id:%(project_id)s" but this is sub-optimal since the regular member can still *add* rules... Is it possible to create a rule like "sg_is_default" : ...the sg group whose name is 'default' so I can write "delete_security_group_rule": "not rule:sg_is_default" ? Thanks! Paolo -- Paolo Emilio Mazzon System and Network Administrator paoloemilio.mazzon[at]unipd.it PNC - Padova Neuroscience Center https://www.pnc.unipd.it Via Orus 2/B - 35131 Padova, Italy +39 049 821 2624

4 7

[cinder] festival of feature reviews 19 May 2023
by Rajat Dhasmana 19 May '23

19 May '23

Hello Argonauts, We will be having our monthly festival of reviews today i.e. 19th May (Friday) from 1400-1600 UTC. Following are some additional details: Date: 19th May, 2023 Time: 1400-1600 UTC Meeting link: will be shared in #openstack-cinder around 1400 UTC etherpad: https://etherpad.opendev.org/p/cinder-festival-of-reviews Thanks Rajat Dhasmana

1 0

[neutron] Drivers meeting
by Rodolfo Alonso Hernandez 19 May '23

19 May '23

Hello Neutrinos: Remember this afternoon we have the drivers meeting at 14UTC. The agenda has one topic: https://wiki.openstack.org/wiki/Meetings/NeutronDrivers As commented during the last team meeting, I also want you to review the open specs. Please spend some minutes on them: * https://review.opendev.org/q/project:openstack%252Fneutron-specs+status:open * https://review.opendev.org/c/openstack/nova-specs/+/859290 Regards.

1 0

[oslo.metrics][nova][oslo][oslo.messaging] oslo.metrics patch not working
by hai wu 18 May '23

18 May '23

I tried to backport this particular patch in order to add support for 'oslo.metrics' on openstack controller node first: https://github.com/openstack/oslo.messaging/commit/bdbb6d62ee20bfd5ffc59f87…. But it does not work. After adding the following configs in /etc/nova/nova.conf: [DEFAULT] default_log_levels = oslo.messaging=DEBUG [oslo_messaging_metrics] metrics_enabled = True I could only see messages related to 'oslo.messaging._drivers' in nova log files, and there's nothing related to 'oslo.messaging._metrics', or any other ones under 'oslo.messaging'. What else is needed for this back-ported patch to work on the controller?

1 0

[ironic] Core team updates
by Jay Faulkner 18 May '23

18 May '23

Hey all, I wanted to let you know that Shivanand Tendulker let me know they will no longer be working on Ironic. I've removed them from the ironic-core group as a result. As usual, with former Ironic core reviewers, Shivanand will be welcomed back quickly if they return to work on Ironic. Thank you for years of helping us keep things maintained! -- Jay Faulkner Ironic PTL TC Vice-Chair

1 0

[kolla] [train] haproxy and controller restart causes user impact
by Albert Braden 18 May '23

18 May '23

We have our haproxy and controller nodes on KVM hosts. When those KVM hosts are restarted, customers who are building or deleting VMs see impact. VMs may go into error status, fail to get DNS records, fail to delete, etc. The obvious reason is because traffic that is being routed to the haproxy on the restarting KVM is lost. If we manually fail over haproxy before restarting the KVM, will that be sufficient to stop traffic being lost, or do we also need to do something with the controller?

3 13

Re: 答复: [ptl] Need PTL volunteer for OpenStack Sahara
by Ghanshyam Mann 17 May '23

17 May '23

Thanks Jerry, Brin for the updates and showing interest in Sahara project. In PTG discussion, there were some concern on Sahara maintenance even we had PTL volunteer to lead this project but not much things got merged and gate was broken many times. But let me discuss it in TC meeting tomorrow and update here. -gmann ---- On Mon, 10 Apr 2023 00:22:08 -0700 Brin Zhang(张百林) wrote --- > Hi Gmann, > Jerry Zhou works the same company as qiujunting (Qiujunting has out of the office, so he cannot response us, I am so sorry), and he will be involved in Sahara. > Hope TC can add him in Sahara team, let him gradually complete the maintenance of the Sahara project. > Thanks. > > brinzhang > > -----邮件原件----- > 发件人: Jerry Zhou (周鑫勇) zhouxinyong(a)inspur.com> > 发送时间: 2023年4月7日 11:10 > 收件人: gmann(a)ghanshyammann.com; Juntingqiu Qiujunting (邱军婷) qiujunting(a)inspur.com> > 抄送: openstack-discuss(a)lists.openstack.org; Tom Guo(郭涛2810) guotao.bj(a)inspur.com>; Brin Zhang(张百林) zhangbailin(a)inspur.com>; Weiting Kong (孔维亭) kongweiting(a)inspur.com> > 主题: 答复: [ptl] Need PTL volunteer for OpenStack Sahara > > Hi Gmann, > I can lead this project. > > -----邮件原件----- > 发件人: Ghanshyam Mann gmann(a)ghanshyammann.com> > 发送时间: 2023年3月23日 2:35 > 收件人: Qiujunting qiujunting(a)inspur.com>; openstack-discuss openstack-discuss(a)lists.openstack.org> > 主题: [ptl] Need PTL volunteer for OpenStack Sahara > > Hi Qiu, > > I am reaching out to you as you were PTL for OpenStack Sahara project in the last cycle. > > There is no PTL candidate for the next cycle (2023.2), and it is on the leaderless project list. Please check if you or anyone you know would like to lead this project. > > - https://etherpad.opendev.org/p/2023.2-leaderless > > Also, if anyone else would like to help leading this project, this is time to let TC knows. > > -gmann > >

4 7