- openstack-discuss - lists.openstack.org

[ops] Shanghai Forum / Ops Day sessions
by Erik McCormick 20 Sep '19

20 Sep '19

Greetings! We are coming up on the Shanghai Summit and need to plan out a few sessions for forum submissions (yeah I know, late as always). We are also trying to see if there's enough traction to do an Ops day on Thursday after the summit. This is a bit freeform, but if there are enough attendees interested, we can make it happen. Please visit the following etherpad and suggest topics for both. +1 those you like the most. We will submit the forum sessions on Friday so there's not a lot of time for that part. Things for the Ops day can go on being entered until that day. https://etherpad.openstack.org/p/PVG-OPS-Forum-Brainstorming Thanks, Erik

1 1

RE: [cinder][FFE] Feature Freeze Exceptions
by Ryan.Liang＠dell.com 20 Sep '19

20 Sep '19

Sorry. Sending to the mailing list. Hi, I’d like to request FFE for the following Cinder Unity driver review: Unity: Add replication support. https://review.opendev.org/#/c/633451/ This change is limited to our Unity driver. Thanks, -Ryan From: Sean McGinnis <sean.mcginnis(a)gmail.com> Sent: Friday, September 20, 2019 9:02 PM To: Liang, Ryan Cc: Jay Bryant; Sun, Hao; Karthik, Rajini Subject: Re: [cinder][FFE] Feature Freeze Exceptions [EXTERNAL EMAIL] Hey Ryan, I think that should be fine, but you need to post this to the mailing list, not directly to Jay. Sean On Fri, Sep 20, 2019 at 1:13 AM <Ryan.Liang(a)dell.com<mailto:Ryan.Liang@dell.com>> wrote: Hi Jay and Sean, I’d like to request FFE for the following Cinder Unity driver review: Unity: Add replication support. https://review.opendev.org/#/c/633451/ This change is limited to our Unity driver. Thanks, -Ryan

1 0

[kolla] Kayobe Train planning meeting
by Mark Goddard 20 Sep '19

20 Sep '19

Hi, Just as the rest of the world is wrapping up the Train release, we find ourselves having just released Stein and starting on Train development. Given the timing of CentOS 8 which we intend to support in the kolla Train release, we have some time to do some feature development in kayobe. I've set up a Doodle poll [1] with two hour slots next week to plan the next release. [1] https://doodle.com/poll/y7fakbhbkfx5hqyk Cheers, Mark

1 2

[openstack-dev][cinder] question on cinder-volume A/A configuration
by Chen CH Ji 20 Sep '19

20 Sep '19

3 2

[oslo] run outlasted interval
by Ignazio Cassano 20 Sep '19

20 Sep '19

Hello, I have an openstack queens installation on centos 7 and starting from last night I got some warnings in several service: nova conductor reports: 2019-09-19 17:37:54.091 161110 WARNING oslo.service.loopingcall [-] Function 'nova.servicegroup.drivers.db.DbDriver._report_state' run outlasted interval by 29.88 sec 2019-09-19 17:37:54.092 161108 WARNING oslo.service.loopingcall [-] Function 'nova.servicegroup.drivers.db.DbDriver._report_state' run outlasted interval by 29.88 sec 2019-09-19 17:37:54.093 161118 WARNING oslo.service.loopingcall [-] Function 'nova.servicegroup.drivers.db.DbDriver._report_state' run outlasted interval by 29.88 sec 2019-09-19 17:37:54.095 161116 WARNING oslo.service.loopingcall [-] Function 'nova.servicegroup.drivers.db.DbDriver._report_state' run outlasted interval by 29.88 sec 2019-09-19 17:37:54.096 161109 WARNING oslo.service.loopingcall [-] Function 'nova.servicegroup.drivers.db.DbDriver._report_state' run outlasted interval by 29.88 sec 2019-09-19 17:37:54.097 161107 WARNING oslo.service.loopingcall [-] Function 'nova.servicegroup.drivers.db.DbDriver._report_state' run outlasted interval by 29.88 sec openvswitch agent reports: 019-09-19 17:16:14.499 26115 WARNING oslo.service.loopingcall [-] Function 'neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent.OVSNeutronAgent._report_state' run outlasted interval by 3.57 sec 2019-09-19 17:23:44.200 26115 WARNING oslo.service.loopingcall [-] Function 'neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent.OVSNeutronAgent._report_state' run outlasted interval by 29.71 sec 2019-09-19 17:37:54.077 26115 WARNING oslo.service.loopingcall [-] Function 'neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent.OVSNeutronAgent._report_state' run outlasted interval by 9.91 sec Please, anyone could help me ? Regards Ignazio

3 5

[tacker] Feature Freeze Exception Request - Add VNF packages support
by Patil, Tushar 19 Sep '19

19 Sep '19

Hi Dharmendra and all Core reviewers In train cycle ,we are committed to implement spec “VNF packages support for VNF onboarding” [1]. All patches [2] are uploaded on the gerrit and code review is in progress but as we have dependency on tosca-parser library, patches are not yet merged. Now, tosca-parser library new version 1.6.0. is released but we are waiting for patch [3] to merge which will update the constraints of tosca-parser to 1.6.0 in requirements project. Once that happens, we will make changes to the tacker patch [4] to update the lower constraints of tosca-parser to 1.6.0 which will run all functional and unit tests added for this feature successfully on the CI job. I would like to request feature freeze exception for “VNF packages support for VNF onboarding” [1]. We will make sure all the review comments on the patches will be fixed promptly so that we can merge them as soon as possible. [1] : https://review.opendev.org/#/c/582930/ [2] : https://review.opendev.org/#/q/topic:bp/tosca-csar-mgmt-driver+(status:open… [3] : https://review.opendev.org/#/c/681819/ [4]: https://review.opendev.org/#/c/675600/ Thanks, tpatil Disclaimer: This email and any attachments are sent in strictest confidence for the sole use of the addressee and may contain legally privileged, confidential, and proprietary data. If you are not the intended recipient, please advise the sender by replying promptly to this email and then delete and destroy this email and any attachments without any further use, copying or forwarding.

2 2

[tripleo][ci] gate jobs killed / reset
by Wesley Hayutin 19 Sep '19

19 Sep '19

Greetings, The zuul jobs in the TripleO gate queue were put out of their misery approximately at 20:14 UTC Sept 17 2019. The TripleO jobs were timing out [1] and causing the gate queue to be delayed about 24 hours [2]. We are hoping a revert [3] will restore TripleO jobs back to their usual run times. Please hold off on any rechecks or workflowing patches until [3] is merged and the status on #tripleo is no longer "RED" We appreciate your patience while we work through this issue, the jobs that were in the gate will be restored once we have confirmed and verified the solution. Thank you [1] https://bugs.launchpad.net/tripleo/+bug/1844446 [2] http://dashboard-ci.tripleo.org/d/YRJtmtNWk/cockpit?orgId=1&fullscreen&pane… [3] https://review.opendev.org/#/c/682729/

2 4

[release] Release countdown for week R-3, September 23-27
by Sean McGinnis 19 Sep '19

19 Sep '19

Development Focus ----------------- The Release Candidate (RC) deadline is next Thursday, September 26th. Work should be focused on fixing any release-critical bugs. General Information ------------------- All deliverables released under a cycle-with-rc model should have a first release candidate by the end of the week, from which a stable/train branch will be cut. This branch will track the Train release. Once stable/train has been created, master will will be ready to switch to Ussuri development. While master will no longer be feature-frozen, please prioritize any work necessary for completing Train plans. Release-critical bugfixes will need to be merged in the master branch first, then backported to the stable/train branch before a new release candidate can be proposed. Actions --------- Early in the week, the release team will be proposing RC1 patches for all cycle-with-rc projects, using the latest commit from master. If your team is ready to go for cutting RC1, please let us know by leaving a +1 on these patches. If there are still a few more patches needed before RC1, you can -1 the patch and update it later in the week with the new commit hash you would like to use. Remember, stable/train branches will be created with this, so you will want to make sure you have what you need included to avoid needing to backport changes from master (which will technically then be Ussuri) to this stable branch for any additional RCs before the final release. The release team will also be proposing releases for any deliverable following a cycle-with-intermediary model that has not produced any Train release so far. Upcoming Deadlines & Dates -------------------------- RC1 deadline: September 26 (R-3 week) Final RC deadline: October 10 (R-1 week) Final Train release: October 16 Forum+PTG at Shanghai summit: November 4

1 0

[tripleo] TripleO CI Summary: Sprint 36
by Rafael Folco 19 Sep '19

19 Sep '19

Greetings, The TripleO CI team has just completed Sprint 36 / Unified Sprint 15 (Aug 29 thru Sep 18). The following is a summary of completed work during this sprint cycle: - Addressed issues for scenario{001,002} jobs for RHEL8 in the periodic pipeline. RHEL 8 scen003, scen004 have CIX issues and are being worked on by the ruck/rovers. - Merged multi-arch container tagging support and implemented changes in the promoter code to push manifests with annotated metadata for architecture in addition to the arch tagged containers strategy. - Implemented the provisioning and staging promoter setup to an RDO job for testing changes in the promoter server. Next sprint will close-out the tests for the staging promotion workflow. The planned work for the next sprint [1] are: - Complete the manifest implementation with a test strategy for not breaking promotion workflow. - Design and implement tests for verifying a full promotion workflow running on the staging environment. - Design CI jobs in zuul to build and run tests against ceph-ansible and podman pull requests in github. - Train release branching preparation work. - Prepare CentOS8 node for upcoming distro release support across TripleO CI jobs. The Ruck and Rover for this sprint are Arx Cruz (arxcruz) and Sorin Sbarnea (zbr). Please direct questions or queries to them regarding CI status or issues in #tripleo, ideally to whomever has the ‘|ruck’ suffix on their nick. Ruck/rover notes are being tracked in etherpad [2]. Thanks, rfolco [1] https://tree.taiga.io/project/tripleo-ci-board/taskboard/unified-sprint-16 [2] https://etherpad.openstack.org/p/ruckroversprint16

1 0

[all][release] Proposed release schedule for Ussuri
by Sean McGinnis 19 Sep '19

19 Sep '19

Hey everyone, Now that we have a date for the next event [0], it might be a good time to finalize the release cycle schedule for the Ussuri release. I have put up a proposal for the schedule here: https://review.opendev.org/#/c/679822/ Please take a look and give any feedback if you see any issues with where the milestone dates align with any major holidays or other external factors that we should consider. For your viewing convenience, here is the rendered output from the docs job: https://openstack.fortnebula.com:13808/v1/AUTH_e8fd161dc34c421a979a9e6421f8… Thanks! Sean [0] http://lists.openstack.org/pipermail/foundation/2019-September/002794.html

1 0

[Security] Security SIG Newsletter
by Gage Hugo 19 Sep '19

19 Sep '19

Past couple weeks were a bit slow, but this week has some updates! #Date: 19 Sept 2019 - Security SIG Meeting Info: http://eavesdrop.openstack.org/#Security_SIG_meeting - Weekly on Thursday at 1500 UTC in #openstack-meeting - Agenda: https://etherpad.openstack.org/p/security-agenda - https://security.openstack.org/ - https://wiki.openstack.org/wiki/Security-SIG #Meeting Notes - Summary: http://eavesdrop.openstack.org/meetings/security/2019/security.2019-09-19-1… - Discussed the recently public big here: https://bugs.launchpad.net/horizon/+bug/1842930 - Current path forward is to clear up documentation to warn about this and provide info about caching settings. - nickthetait is currently working on https://bugs.launchpad.net/ossp-security-documentation/+bug/1703353 - Will create a page describing the usage and functionality of the audit middleware & CADF notifications #VMT Reports - A full list of publicly marked security issues can be found here: https://bugs.launchpad.net/ossa/ - Deleted user still can delete volumes in Horizon: https://bugs.launchpad.net/horizon/+bug/1842930

1 0

[cinder][FFE] Feature Freeze Exceptions
by Rajat Dhasmana 19 Sep '19

19 Sep '19

Hi, I would like to request FFE for the following cinder feature : - Untyped to Default Volume Type: https://review.opendev.org/#/c/639180 <https://review.opendev.org/#/c/639180/39> Thanks and Regards Rajat Dhasmana

2 3

[ironic] FFE: PXE boot retry
by Dmitry Tantsur 19 Sep '19

19 Sep '19

Hi folks, I would like to ask a late FFE for https://storyboard.openstack.org/#!/story/2005167 - retry PXE boot on timeout. Random PXE failures have long been haunting both our consumers and our CI. This change may be a big relief for everyone. Since we're very late in the cycle, and the change is on the critical path, I'm making it off by default (except for the CI) with the intend to reconsider it in Ussuri. The patch https://review.opendev.org/#/c/683127/ has been tested locally, I will finish unit tests and a release note tomorrow (CEST) morning. Please let me know if you have any concerns or questions. Dmitry

3 3

[release][ironic] Some Ironic deliverables might need a refresh before final Train release
by Thierry Carrez 19 Sep '19

19 Sep '19

Hi everyone, Quick reminder that for deliverables following the cycle-with-intermediary model, the release team will use the latest train release available on release week. The following deliverables have done a train release, but it was not refreshed in the last two months: - bifrost (last released on 2019-06-06) - ironic-inspector (last released on 2019-07-09) - ironic-python-agent (last released on 2019-07-09) - ironic (last released on 2019-06-21) You should consider making a new one very soon, so that we don't use an outdated version for the final release. Thanks in advance, -- Thierry Carrez (ttx)

2 2

[tc] new chair
by Mohammed Naser 19 Sep '19

19 Sep '19

Hi everyone, With the new TC roster, JP and I both volunteered to be chairs of the TC which resulted in a CIVS vote between the TC, where the outcome was that JP won: http://lists.openstack.org/pipermail/openstack-discuss/2019-September/00948… Thanks for letting me serve for the past 6 months. Regards, Mohammed -- Mohammed Naser — vexxhost ----------------------------------------------------- D. 514-316-8872 D. 800-910-1726 ext. 200 E. mnaser(a)vexxhost.com W. http://vexxhost.com

3 2

[horizon] FFE request for allow-users-change-expired-password
by Radomir Dopieralski 19 Sep '19

19 Sep '19

Hello everyone, I would like to request a feature freeze exception for Horizon for the allow-users-change-expired-password blueprint. The blueprint consists of three patches, of which one, implementing the actual password change form, is already merged, and the other two, implementing the redirect to that form when the password is expired, and adding documentation and release notes, have been already tested, reviewed and accepted (but can't be merged due to the freeze). Thank you, -- Radomir Dopieralski

3 2

[Tacker] {TOSCA] Regarding attaching persistent volume to a VDU in Tosca Template
by Nehal Bansal 19 Sep '19

19 Sep '19

Hi, I want to keep a backup of the data that my VNF creates. For this, I wanted to create a persistent volume such that if a VNF gets deleted and a new one gets launched, it can access the data created by the previous VNF. Is there a way to do this? Thanks. Nehal

2 1

[mistral] cron triggers execution fails on identity:validate_token with non-admin users
by Francois Scheurer 19 Sep '19

19 Sep '19

Dear All We are using Mistral 7.0.1.1 with Openstack Rocky. (with federated users) We can create and execute a workflow via horizon, but cron triggers always fail with this error: { "result": "The action raised an exception [ action_ex_id=ef878c48-d0ad-4564-9b7e-a06f07a70ded, action_cls='<class 'mistral.actions.action_factory.NovaAction'>', attributes='{u'client_method_name': u'servers.find'}', params='{ u'action_region': u'ch-zh1', u'name': u'42724489-1912-44d1-9a59-6c7a4bebebfa' }' ] \n NovaAction.servers.find failed: You are not authorized to perform the requested action: identity:validate_token. (HTTP 403) (Request-ID: req-ec1aea36-c198-4307-bf01-58aca74fad33) " } Adding the role *admin* or *service* to the user logged in horizon is "fixing" the issue, I mean that the cron trigger then works as expected, but it would be obviously a bad idea to do this for all normal users ;-) So my question: is it a config problem on our side ? is it a known bug? or is it a feature in the sense that cron triggers are for normal users? After digging in the keystone debug logs (see at the end below), I found that RBAC check identity:validate_token an deny the authorization. But according to the policy.json (in keystone and in horizon), rule:owner should be enough to grant it...: "identity:validate_token": "rule:service_admin_or_owner", "service_admin_or_owner": "rule:service_or_admin or rule:owner", "service_or_admin": "rule:admin_required or rule:service_role", "service_role": "role:service", "owner": "user_id:%(user_id)s or user_id:%(target.token.user_id)s", Thank you in advance for your help. Best Regards Francois Scheurer Keystone logs: 2019-09-05 09:38:00.902 29 DEBUG keystone.policy.backends.rules [req-1a276b9d-8276-4ec3-b516-f51f86cd1df6 fsc fscproject - testdom testdom] enforce identity:validate_token: { 'service_project_id':None, 'service_user_id':None, 'service_user_domain_id':None, 'service_project_domain_id':None, 'trustor_id':None, 'user_domain_id':u'testdom', 'domain_id':None, 'trust_id':u'mytrustid', 'project_domain_id':u'testdom', 'service_roles':[], 'group_ids':[], 'user_id':u'fsc', 'roles':[ u'_member_', u'creator', u'reader', u'heat_stack_owner', u'member', u'load-balancer_member'], 'system_scope':None, 'trustee_id':None, 'domain_name':None, 'is_admin_project':True, 'token':<TokenModel (audit_id=0LAsW_0dQMWXh2cTZTLcWA, audit_chain_id=[u'0LAsW_0dQMWXh2cTZTLcWA']) at 0x7f208f4a3bd0>, 'project_id':u'fscproject' } enforce /var/lib/kolla/venv/local/lib/python2.7/site-packages/keystone/policy/backends/rules.py:33 2019-09-05 09:38:00.920 29 WARNING keystone.common.wsgi [req-1a276b9d-8276-4ec3-b516-f51f86cd1df6 fsc fscproject - testdom testdom] You are not authorized to perform the requested action: identity:validate_token.: *ForbiddenAction: You are not authorized to perform the requested action: identity:validate_token.* -- EveryWare AG François Scheurer Senior Systems Engineer Zurlindenstrasse 52a CH-8003 Zürich tel: +41 44 466 60 00 fax: +41 44 466 60 10 mail: francois.scheurer(a)everyware.ch web: http://www.everyware.ch

3 5

[tc] Results of the two TC CIVS polls
by Graham Hayes 19 Sep '19

19 Sep '19

Hi All, We had two votes running for the TC - V->Z naming, and the TC Chair. The results are as follows: Release Naming: 1. Tied: Do not change current model of geographic names - No review Name releases after major cities - https://review.opendev.org/#/c/677745/ 3. Name releases after the ICAO alphabet - https://review.opendev.org/#/c/677746/ Full results: https://civs.cs.cornell.edu/cgi-bin/results.pl?num_winners=1&id=E_0a9abdade… TC Chair: 1. JP Evrard - https://review.opendev.org/#/c/681285/ 2. Mohammed Naser - https://review.opendev.org/#/c/680414/ Full results: https://civs.cs.cornell.edu/cgi-bin/results.pl?num_winners=1&id=E_e6963bddd… Thanks all for taking the time to vote, and for the candidates and people who put forward the options for the naming poll. Thanks, Graham

3 4

[horizon] exception for the allow-users-change-expired-password blueprint
by Radomir Dopieralski 19 Sep '19

19 Sep '19

Hello y'all, I would like to ask for an FEE for the allow-users-change-expired-password blueprint ( https://blueprints.launchpad.net/horizon/+spec/allow-users-change-expired-p…) The feature is important for users, and the code is reviewed and ready to merge. There are three patches, of which one, containing the form itself, is already merged, one contains the redirect on login failure, and one contains the documentation: https://review.opendev.org/#/c/672315/ https://review.opendev.org/#/c/676167/ Thank you, -- Radomir Dopieralski

1 1

[neutron]IPv6 Prefix Delegation could not be activated in newest version Neutron
by Shuai Zhao 18 Sep '19

18 Sep '19

Hi All, I'm working on validate the IPv6 PD in newest Neutron. What I want is to offer the Global Unified address to the VM and I find PD is the good solutions for me. I follow the guide *https://docs.openstack.org/neutron/latest/admin/config-ipv6.html <https://docs.openstack.org/neutron/latest/admin/config-ipv6.html> *to setup PD and dibbler-server and devstack, but I find I could not to trigger the PD process. *The Dibbler server print nothing when attach the Subnet to router has external gateway.* All procedure has recorded to the bug: https://bugs.launchpad.net/neutron/+bug/1844123. Thanks for your action and help in advance!

1 1

Nova causes MySQL timeouts
by Albert Braden 18 Sep '19

18 Sep '19

It looks like nova is keeping mysql connections open until they time out. How are others responding to this issue? Do you just ignore the mysql errors, or is it possible to change configuration so that nova closes and reopens connections before they time out? Or is there a way to stop mysql from logging these aborted connections without hiding real issues? Aborted connection 10726 to db: 'nova' user: 'nova' host: 'asdf' (Got timeout reading communication packets)

9 14

[cinder][FFE] Feature Freeze Exceptions agreed to in Weekly Meeting ....
by Jay Bryant 18 Sep '19

18 Sep '19

All, In our weekly meeting we discussed patches that required an FFE and decided to approve them there. This note is just to document that the FFE's were approved. The patches: * https://review.opendev.org/#/c/668825/(ZhengMa) - Leverage hw accelerator in image compression * https://review.opendev.org/#/c/673013 PowerMax Driver - Volume & Snapshot Metadata * https://review.opendev.org/#/c/677945/3Par -- Add Peer Persistence Support Please let us know if there are any concerns with these planned FFEs. Thanks! Jay (irc: jungleboyj)

1 0

[i18n][mogan][neutron][swift][tc][valet] Cleaning up IRC logging for defunct channels
by Jeremy Stanley 18 Sep '19

18 Sep '19

Freenode imposes a hard limit of 120 simultaneously joined channels for any single account. We've once again reached that limit with our channel-logging meetbot. As a quick measure, I've proposed a bit of cleanup: https://review.opendev.org/682500 Analysis of IRC channel logs indicates the following have seen 5 or fewer non-bot comments posted in the past 12 months and are likely of no value to continue logging: 5 #openstack-vpnaas 2 #swift3 2 #openstack-ko 1 #openstack-deployment 1 #midonet 0 #openstack-valet 0 #openstack-swg 0 #openstack-mogan Please let me know either here on the ML or with a comment on the review linked above if you have a reason to continue logging any of these channels. I'd like to merge it later this week if possible. Thanks! -- Jeremy Stanley

5 8

Re: [zuul3] zuul2 -> zuul3 migration
by Aditi Dukle1 18 Sep '19

18 Sep '19

Hi Lenny, Even I am working on zuulv2 to v3 migration for IBM PowerKVM - https://wiki.openstack.org/wiki/ThirdPartySystems/IBMPowerKVMCI and so far we have setup a test VM wherein we have installed zuulv3 and Nodepool version: 3.7.2 and have migrated 4 of our jenkins jobs to ansible to work with zuulv3. Zuulv3 doesn't have much info online apart from the official documentation but I found the following blogs quite useful while doing the migration: https://zuul-ci.org/docs/zuul/admin/quick-start.html - This is a very good installation tutorial to get a hang of zuulv3 that needs a single VM and it installs different components in docker containers. I started with this which helped me to understand how different components are configured. Also, the following articles are good read. 1. https://www.softwarefactory-project.io/cicd-workflow-offered-by-zuulnodepoo… 2. https://www.softwarefactory-project.io/zuul-hands-on-part-2-your-first-gate… 3. https://www.softwarefactory-project.io/zuul-hands-on-part-3-use-the-zuul-jo… Openstack has migrated to zuulv3, so you can also check out their project configuration here - https://opendev.org/openstack/project-config I am planning to write my experience of migration in a blog which I will let you know once complete. Let me know if you got any doubts while setting up zuulv3 Thanks and Regards, Aditi Dukle

1 0