- openstack-discuss - lists.openstack.org

[Openstack] [Keystone] [Shibboleth] Assistance with Configuring Multiple IdPs in DevStack with Shibboleth Integration
by Abubakur Sait 29 Sep '24

29 Sep '24

Hi all, I have installed DevStack (release 2023.2) on Ubuntu 22.04 and integrated Shibboleth (the federation solution) with it. Everything works fine for a single IdP. However, I am looking to expand the setup to support multiple IdPs. I have read the Keystone documentation, but it doesn’t seem to cover this specific case. In my current setup, I have DevStack and Shibboleth integrated for a single IdP. I have read the shib-sp documentation as well. It mentions the need for a Discovery Service (DS) if we intend to use multiple IdPs which will be handled by the shib-SP software. This is the issue I am facing right now. Please see the following comments to get my point. Here’s the scenario I have so far: 1. A user accesses Horizon (Service Provider -- SP) at: http://192.168.4.103/dashboard/auth/login/?next=/dashboard/. 2. A drop-down list allows the user to choose the authentication method. The user selects the SAML IdP method. 3. The user is redirected to the IdP’s page where they authenticate. 4. The user is redirected back to the SP and successfully accesses the system. 5. The issue I’m facing is how to configure multiple IdPs so that users can choose from them at step (2). I understand that we can add a list of IdPs in the ~/horizon/openstack_dashboard/local/local_settings.py file to display in Horizon, but this doesn’t fully resolve the issue since the Shibboleth SP application itself doesn’t seem to handle multiple IdPs. Shibboleth SP typically expects a DS for multiple IdPs, but given that we already have a dropdown list in Horizon, do we still need the DS in this case? If not, how can we proceed with adding multiple IdPs in the system? Any guidance or advice would be greatly appreciated. Thank you for your help! Best regards, Bakur Sait

1 0

[octavia] Lose of some jobs by worker
by Payne Max 29 Sep '24

29 Sep '24

Hi, OpenStack community, I’ve faced a problem when some of our jobs can get lost by a worker, for example from the screenshot, SIGTERM was called in several seconds after receiving a job by a worker. [cid:image001.png@01DB1013.D648A630] Then there were no new log messages related to this job. Then our client complained that LB stucked in PENDING_UPDATE for several days and we started investigation. Our MySQL (persistent storage) is clean, but in our Redis, I can see several jobs without TTL and I think they are related to the «lost» jobs. [cid:image002.png@01DB1014.1DFF1BD0] Is it an ok situation? Can it be related to the https://github.com/openstack/octavia/blob/master/octavia/common/base_taskfl… Let’s discuss it!

4 6

kolla-ansible support for Ubuntu 2024.04/ARM64 ?
by dariusz.bursztynowski＠pw.edu.pl 28 Sep '24

28 Sep '24

Hello, Are there plans for kolla-ansible to support Ubuntu 24.04 / ARM64 (e.g., to have LTS support for Raspberry Pi 5)? Best regards, Dariusz Bursztynowski

1 0

[openstack]Problem with launching instances from VMDK
by Nguyễn Hữu Khôi 27 Sep '24

27 Sep '24

Hello I am trying create instance from vmdk but I have this error: The image format was claimed to be 'vmdk' but the image data appears to be in a different format. My cloud is Openstack 2023.1. This happened when We applied patches for CVE-2024-40767. Nguyen Huu Khoi

3 4

[release] Release countdown for week R+0
by Thierry Carrez 27 Sep '24

27 Sep '24

Development Focus ----------------- We will be releasing the coordinated OpenStack 2024.2 Dalmatian release next week, on October 2nd, 2024. Thanks to everyone involved in the Dalmatian cycle! We are now in pre-release freeze, so no new deliverable will be created until final release, unless a release-critical regression is spotted. Otherwise, teams attending the virtual PTG in a few weeks should start to plan what they will be discussing there, by creating and filling team etherpads. You can access the list of PTG etherpads at: https://ptg.opendev.org/etherpads.html General Information ------------------- On release day, the release team will produce final versions of deliverables following the cycle-with-rc release model, by re-tagging the commit used for the last RC. A patch doing just that will be proposed. PTLs and release liaisons should watch for that final release patch from the release team. While not required, we would appreciate having an ack from each team before we approve it on the 2nd, so that their approval is included in the metadata that goes onto the signed tag. Upcoming Deadlines & Dates -------------------------- Final 2024.2 Dalmatian release: October 2nd, 2024 Project Teams Gathering: October 21-25, 2024 -- Thierry Carrez (ttx)

1 0

help
by Gyan Dev Mishra 27 Sep '24

27 Sep '24

hi sir, was facing an issue with launching an instance in OpenStack. When I try to launch an instance using a Ubuntu Server 22.04 ISO image, I am getting the error. Even if I try with the default Cirros image, the instance launches, but when I attempt to access it from the console, I encounter a network error. I was trying to run it using an IP in the 10.x.x range, but it is fetching an IP in the 192.168.x range. I have attached the screenshot for the your reference. How can I resolve this issue? DISCLAIMER: This communication may contain confidential or copyright information. If you are not an intended recipient, you must not keep, forward, copy, use, save or rely on this communication. Any such action is unauthorized and prohibited. If you have received this communication in error please delete it. Reasonable precautions have been taken to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments.

1 0

(외부메일) [heat][heat-cinder] How can I use the Cinder volume extend in Heat?
by 박광우 27 Sep '24

27 Sep '24

3 3

[ptl][release] OpenStack Dalmatian OpenInfra Live
by Allison Price 27 Sep '24

27 Sep '24

Hi everyone, I wanted to gather interest from PTLs to participate in an OpenStack Dalmatian OpenInfra Live on Thursday, October 3 after Wednesday’s release. Like past episodes (you can see Caracal here [1]), we will give interested PTLs the opportunity to present the progress their team made in 2024.2 Dalmatian as well as present upcoming priorities for 2025.1 Epoxy. The episode will air on Thursday at 1400 UTC, so interested participants would need to be available 1330-1500 UTC on Thursday, October 3. If you are interested, please let me know. Thanks! Allison [1 ] https://www.youtube.com/watch?v=3BgAXbFaVqw

5 6

Potential Mentorship Opportunities (Jan - May 2025)
by Kendall Nelson 27 Sep '24

27 Sep '24

Hello Party People! It's very early, but I wanted to float the information ahead of time :) Coming up for the next semester (Spring semester in Northern Hemisphere; Jan to May) we have the opportunity to propose projects to students at North Dakota State University to work on. Students will be in the last couple semesters before graduation with a Bachelor's degree in CS. Good projects would be scoped to a small group of students 3-5 working together for around 4.5 months (maybe 4 with onboarding, midterms etc). Mentors on these projects do not have to work alone - often I have two or three community members working together to mentor the students (ask Manila, they are a good example). I will want to start collecting project proposals (and mentor volunteers) in December before everyone leaves for the holidays but that still gives a fair amount of time for questions if anyone has them. I already have one team interested (Hi, Swift!) but would love a couple others to get involved. Let me know what questions you have or if you are interested in mentoring! -Kendall Nelson (diablo_rojo)

1 0

[ironic] [security] Ironic officially vulnerability-managed
by Jay Faulkner 27 Sep '24

27 Sep '24

Hi all, Although for a long time now, in practice, we've been using the Vulnerability Management team (VMT) process to triage, embargo, and resolve Ironic security bugs, we've now done the legwork needed to be officially managed by the VMT. The following Ironic projects are now VMT-managed[0]: - ironic - ironic-inspector - ironic-python-agent - ironic-lib - networking-baremetal - networking-generic-switch - python-ironicclient - python-ironic-inspector-client - sushy As per VMT policy[1]. the launchpad bug trackers for these projects have been updated to only allow access by the VMT to initial private-security bug reports. If there are any questions, please just ask! Thanks, Jay Faulkner 0: https://opendev.org/openstack/ossa/commit/b68aaa0652ec83b1349dddcdc334b7572… 1: https://security.openstack.org/repos-overseen.html#requirements (number 4)

1 0

[ceilometer] What's the general status / recommendation for Telemetry in OpenStack
by Waines, Greg 26 Sep '24

26 Sep '24

Hey ... I am working in OpenStack StarlingX which supports a Kubernetes cluster and a containerized OpenStack cluster (via openstack-helm). Our OpenStack offering is fairly simple ... only running Nova, Cinder, Neutron, Keystone, Glance, Horizon and Heat ... @ Antelope. In a predecessor of StarlingX, maybe in the Queens(?) timeframe ... we had a Telemetry solution that consisted of: - Ceilometer (for basic data polling, notifications and collection) - Panko (for event DB) - Gnocchi (for time-series DB) - Aodh (for alarming based on metric thresholds, etc.) HOWEVER ... today (Caracal) ... - I think Gnocchi is still alive and well ... https://github.com/gnocchixyz/gnocchi * but maintained outside of OpenStack - I think OpenStack Panko was deprecated in ~ Wallaby ? * and don't think(?) it is maintained outside of OpenStack ? - The OpenStack Landscape at https://www.openstack.org/software/ * shows only Ceilometer and Aodh MY QUESTIONs : ----------------------- - so what are the current recommendations for OpenStack Telemetry ? - is it just Ceilometer and Aodh ? * Does Ceilometer provide DBs ? (like it used to a long time ago) - is Gnocchi (although maintained outside of OpenStack) still supported in the OpenStack environment as a DB option ? - what is used for event DB ? ... now that panko is gone ... Gnocchi ? Ceilometer ? - are there actually multiple options/solutions for OpenStack Telemetry ? e.g. * Ceilometer / Gnocchi / Aodh * Ceilometer / External Elastic Solution / Aodh * Others ? Greg.

5 5

[powerflex][glance]Dell PowerFlex: After setting the Glance backend to PowerFlex Cinder, uploading an image and creating an image volume does not result in the image volume being created correctly.
by cuiye.liu＠dell.com 26 Sep '24

26 Sep '24

Description of customer infrastructure (Environment) - MANDATORY PowerFlex 3.6.2, 4.5.2 2023.2(Bobcat) Issue/problem detail and customer impact (Description, Impact, Steps to reproduce the issue, How often it happens) - MANDATORY Provide a clear description of the issue After setting the Glance backend to PowerFlex Cinder, uploading an image and creating an image volume does not result in the image volume being created correctly. Clear statement of customer impact unable to use PowerFlex as the backend for Glance, so additional storage is needed Steps to reproduce the issue i.e. commands #openstack volume create --size 8 --type powerflex --image cirros_flex --bootable test_image_volume2 Frequency of the issue everytime The error information is as following: 2024-09-19 07:03:46.320 24 DEBUG cinder.volume.flows.manager.create_volume [None req-c0a6a1fb-e26e-4925-a338-a4c9a68952f1 9c7543d67e184d51a6a77d5046c9e8a1 379ea5a5d4824c7f85e51e77d7c12add - - - -] Volume 37a4ef47-93b5-4395-8cdc-d04498fde0a0: re-scheduling SchedulerAPI.create_volume attempt 3 due to Failed to download image 87ea548b-80ff-4f7b-802b-042debaae696, reason: IOError: 32 Corrupt image download. Hash was cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e expected 1b03ca1bc3fafe448b90583c12f367949f8b0e665685979d95b004e48574b953316799e23240f4f739d1b5eb4c4ca24d38fdc6f4f9d8247a2bc64db25d6bbdb2 _reschedule /var/lib/kolla/venv/lib64/python3.9/site-packages/cinder/volume/flows/manager/create_volume.py:162 It is similar to this bug that is submmited in 2021: 1936314 – Glance image download fails with the error [Errno 32] Corrupt image download. (redhat.com) https://bugzilla.redhat.com/show_bug.cgi?id=1936314 Does anyone knows if it is fixed?

1 0

Openstack deployment on a single node server
by Gyan Dev Mishra 25 Sep '24

25 Sep '24

Hi, I am a newbie to OpenStack deployment, we are looking for a deployment strategy for OpenStack to test all our cloud-based apps to save on testing expenses. I tried it with microstack where I faced some issues related to Available Zones which was always empty. So, is it possible to use only one node to deploy and use complete OpenStack or do we need to follow some different strategy. I am having one server machine on which I want to deploy the complete cloud solutions. Kindly provide me with the necessary insights. I really appreciate any help you can provide. Gyan dev, Sr. Software Developer at eCosmos Solutions DISCLAIMER: This communication may contain confidential or copyright information. If you are not an intended recipient, you must not keep, forward, copy, use, save or rely on this communication. Any such action is unauthorized and prohibited. If you have received this communication in error please delete it. Reasonable precautions have been taken to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments.

3 2

Retire sqlalchemy-migrate
by Thomas Goirand 25 Sep '24

25 Sep '24

Hi, As much as I know, there's no active OpenStack project using sqlalchemy-migrate anymore. Can someone retire the project, or at least push some indication in the README.rst that the project is retired? When looking at: https://opendev.org/x/sqlalchemy-migrate nothing says so... Cheers, Thomas Goirand (zigo)

3 3

[trove][zaqar][vitrage] What to do with projects not supporting SQLAlchemy 2.x ?
by Thomas Goirand 25 Sep '24

25 Sep '24

Hi, A number of project still don't have support for SQLAlchemy 2.x, which is currently in Debian testing/unstable, and which will be the version in Debian 13 (aka: Trixie). If these project don't get quickly support for SQLAlchemy 2.x, they are going to drop (well, in fact, they were already kicked out of Debian Testing). Are these project still maintained? IMO, no support for SQLAlchemy 2.x is a reason good enough to declare they aren't... Cheers, Thomas Goirand (zigo)

2 2

Network MTU setting in ovn/ovs
by Łukasz Chrustek 25 Sep '24

25 Sep '24

Hi, I have a question about increasing MTU for tenant network. Now it set to 1442 by default on geneve baked tenant network. Is there any drawbacks or it is some kind of bad practice to increase this MTU to 1500 bytes or higher ? We had an issue with one migrated instance from older version of openstack (where was linuxbrigde configured), there mtu was set to 1500, so the settings for i.e. docker inside the vm was set respectively to the higher value. -- Best regards Lukasz Chrustek

4 11

[oslo.db][magnum] QueuePool hangs in Caracal
by Mohammed Naser 25 Sep '24

25 Sep '24

Hi there! The community has identified a bug (https://bugs.launchpad.net/magnum/+bug/2067345) which makes Magnum unusable / entirely broken in Caracal. There is a proposed workaround here: https://bugs.launchpad.net/magnum/+bug/2067345/comments/35 The majority of the issue seems to be around when the changes to remove autocommit were done, I've attempted to switch to enginefacade to prevent these issues (same as Ironic) but with no avail: https://review.opendev.org/c/openstack/magnum/+/927446 There is also a greenthread stacktrace there which shows where/how it's hanging, would it be possible to have someone who might have a bit more insight to help point us in the right direction? I'm more than happy to take this on and keep pushing it forward but I'm not sure if I know where the fix can go at this point. Thanks, Mohammed

2 1

[release][zun][kuryr-libnetwork][kuryr-kubernetes] Immediate action required for 2024.2 (Dalmatian) release
by Dmitriy Rabotyagov 25 Sep '24

25 Sep '24

Hi, As you might know, R-2 week where Release Candidates for all projects following cycle-with-rc cadence should be created has already passed. Nevertheless there are a couple of projects, which do have broken Zuul Jobs[1], which prevents them from being released (tagged with RC1 and create a stable/2024.2 branch). There is a hard deadline by the end of this week (September 27, 2024) to merge required fixes into projects and update corresponsive release patches [2][3][4] in order to be included into the Dalmatian release. Otherwise the Technical Committee will have to take action on the mentioned projects, which can include preventing them from being released and marking them as Inactive ones. So everyone interested in the future of these projects - please take a look at the gate health and help core teams out fixing outstanding issues. Core teams - please prioritise review of proposed patches or come up with fixes during this week. [1] https://review.opendev.org/q/topic:dalmatian-rc1-deadline+is:open [2] https://review.opendev.org/c/openstack/releases/+/928531 [3] https://review.opendev.org/c/openstack/releases/+/928532 [4] https://review.opendev.org/c/openstack/releases/+/928575

1 0

[manila] Propose Gireesh Awasthi to manila core
by Carlos Silva 25 Sep '24

25 Sep '24

Hello everyone, I would like to add Gireesh Awasthi to the OpenStack Manila core team. Gireesh started his OpenStack journey a couple of cycles ago, and caused great impact from the get go while working on some complex features that impacted all of the manila code base. He's also been consistently participative in the latest PTGs. With the knowledge acquired in the code base, he then started contributing more to reviews, and became a go-to person for providing feedback on the NetApp ONTAP driver changes, and/or third party driver changes. It is important to note that this is yet another step into maintaining a healthy community with people from different affiliations sharing the responsibility of maintaining an open source project. In case there are no objections, I will add him to the core team in 1 week from now. [1] https://bit.ly/manila-reviews-90-days Thank you! Regards, carloss

2 2

[cyborg][zun][masakari][tacker][venus] Pending removal of LegacyEngineFacade
by Stephen Finucane 25 Sep '24

25 Sep '24

o/ Just a heads up to the listed projects that oslo.db's LegacyEngineFacade is pending removal in the Epoxy cycle. I would encourage you to migrate asap to avoid a broken CI. For a minimal example of how to do this, I'd encourage you to look at [1]. Cheers, Stephen [1] https://review.opendev.org/c/openstack/mistral/+/926420

1 0

Looking forward to work with Real-world project!
by Artemio Mendoza 24 Sep '24

24 Sep '24

Hi OpenStackers, As a new OpenStack community member, I read your email very carefully and looking for an opportunity that I can support. After graduating from university, I got a BS degree in computer science. I have been working on web/mobile app development for 10 years and have some reasonable experience in AWS, Azure, and other cloud environments. But I was really interested in OpenStack cloud computing so I started researching this last year and I'm actively keeping an eye on this community email, and trying to find some clues and new ideas about what I am going to do. I'm especially interested in Ceph and VDI development based on OpenStack. For my experience, I have tried to set up devstack on my laptop(20 core i7th, 32GB RAM), and tried run Bumblebee ( https://github.com/NeCTAR-RC/bumblebee) but failed. :( So for now, I'm still going to learn OpenStack doc. But I want to practice myself by jumping into real-world projects. If you are interested in me or looking for someone who can collaborate/research, then I will absolutely dedicate myself to that as a volunteer. Looking forward to hearing many good suggestions. Please feel free to reach out to me through Skype (huknamatata21) or this number (+15124877569) Regards, Artemio (Hony)

1 0

[Neutron] Bug deputy Sept 16 - 23
by Jakub Libosvar 24 Sep '24

24 Sep '24

Hi, I was the bug deputy last week. Was calm, only 3 bugs reported. Here is the breakdown: High ---- * security-groups-rules-belongs-to-default-sg slows down SG GET operations - https://bugs.launchpad.net/neutron/+bug/2081173 - I marked it as high because it’s a performance regression Medium ------ * Tighten / improve rally SG tests to catch performance regressions - mostly a placeholder to improve rally scenarios to prevent regressing in performance - https://bugs.launchpad.net/neutron/+bug/2081108 Wishlist -------- * Neutron OVN support for CARP - https://bugs.launchpad.net/neutron/+bug/2081643 - sounds like a new feature but it also requires some enhancements in the core OVN first

1 0

[publiccloud-sig] Heads-Up: next meeting September 25th - 0700 UTC
by Felix Kronlage-Dammers 23 Sep '24

23 Sep '24

Hi everyone, We are adjusting the schedule for the publiccloud-sig and will switch to odd instead of even weeks. This Wednesday (September 25th) the next meeting of the publiccloud-sig is going to happen. Thanks to Artem (gtema) and Joern (joek-office) who helped prepare the meeting agenda for this wednesday: - Housekeeping - Upcoming vPTG - Reminder to sign up for PTG: https://openinfra.dev/ptg/ - IAM Federation - combination of functional requirements (every CSP is having unique use case so we want to find similarities and differencies to determine the roadmap for Keystone) If you’re interesting in IAM federation, be sure to join! We’ll be meeting at 0700 UTC here: https://meetpad.opendev.org/publiccloud-sig <https://meetpad.opendev.org/publiccloud-sig> See also here for all other details: https://wiki.openstack.org/wiki/PublicCloudSIG <https://wiki.openstack.org/wiki/PublicCloudSIG> See you on Wednesday! felix -- Felix Kronlage-Dammers Sovereign Cloud Stack — standardized, built and operated by many Ein Projekt der Open Source Business Alliance - Bundesverband für digitale Souveränität e.V. Tel.: +49-30-206539-205 | Matrix: @fkronlage:matrix.org | fkr(a)osb-alliance.com

1 0

Openstack power off/on process
by Michael Knox 23 Sep '24

23 Sep '24

Hey Folks. I am working through a scenario that requires us to have Openstack in a Pelican Case and deployed in the "field" on a semi regular basis. I guess, portal "edge cloud" if you will? The problem I am trying to clean up is the startup process. We use kolla-ansible and rocky with zed (though we have one with ubuntu and wallaby) in this specific use case. We do the shutdown nicely, kolla-ansible -i inventory stop, then power off the control nodes (we have 3 in the setup). The problem is on the start up. All the containers start and then we still *have* to run the kolla-ansible -i inventory mariadb_recovery step to get the cloud back into a usable state. No matter the order of shut down or start up, MariaDB seems to always need a recovery. Are there any people here doing this or something similar? Is there a more efficient startup process I am not aware of or should consider? The folks in the field aren't Openstack admins, so hoping to figure out a solution that is less dependent on their knowledge of Openstack's undercloud tooling. Thanks in advance Michael

2 2

[cinder][CI] Can't start zuul service
by xuq.fnstxz＠fujitsu.com 23 Sep '24

23 Sep '24

Hello every one, I'm building a CI system on my ubuntu 22 system. Now I've installed the zuul using 'pip install zuul' and configured it. But after running command 'zuul-scheduler', I saw a lot of errors like following in the log. It seems that there is something error in my config file that prevents access to the repo. > 2024-09-20 13:05:06,010 ERROR zuul.TenantParser: Error processing cat job > Traceback (most recent call last): > File "/home/stack/.local/lib/python3.10/site-packages/zuul/configloader.py", line 2157, in _cacheTenantYAML > self._processCatJob(abide, tenant, loading_errors, job, > File "/home/stack/.local/lib/python3.10/site-packages/zuul/configloader.py", line 2249, in _processCatJob > raise TimeoutError(f"Cat job {job} timed out; consider setting " > TimeoutError: Cat job <zuul.zk.event_queues.JobResultFuture object at 0x7fb770341510> timed out; consider setting merger.git_timeout in zuul.conf Following is my zuul.conf. > [zookeeper] > hosts=ZOOKEEPER_HOST > tls_cert=/cert/client-cert.pem > tls_key=/cert/client-key.pem > tls_ca=/cert/ca-cert.pem > > [database] > # Use variable interpolation to supply the password from the > # docker-compose file. > # https://zuul-ci.org/docs/zuul/latest/configuration.html > dburi=mysql+pymysql://DB_USER:DB_PASS@DB_HOST/ZUUL_DB > > [keystore] > password=secret > > [web] > listen_address=0.0.0.0 > port=9000 > root=http://localhost:9000 > log_config=/etc/zuul/logging.conf > > [webclient] > url=http://localhost:9000 > verify_ssl=false > > [scheduler] > tenant_config=/etc/zuul/main.yaml > log_config=/etc/zuul/logging.conf > [merger] > git_user_email=git_user(a)example.com > git_user_name=git_user > log_config=/etc/zuul/logging.conf > > [executor] > private_key_file=/home/stack/.ssh/id_rsa > default_username=executor_user > trusted_rw_paths=/srv/static/logs > > [connection gerrit] > driver=gerrit > server=review.opendev.org > user=git_user > sshkey=/ssh/id_rsa And the following is the tenant_config file. > - tenant: > name: myCI > source: > gerrit: > untrusted-projects: > - openstack/cinder Could you please tell me what I need to modify or add in the config file? Thanks and Regards, Inori.

2 2