- openstack-discuss - lists.openstack.org

[cinder] festival of XS reviews 27th May 2022
by Rajat Dhasmana 27 May '22

27 May '22

Hello Argonauts, We will be having our monthly festival of XS reviews today i.e. 27th May (Friday) from 1400-1600 UTC. Following are some additional details: Date: 27th May, 2022 Time: 1400-1600 UTC Meeting link: https://meetpad.opendev.org/cinder-festival-of-reviews etherpad: https://etherpad.opendev.org/p/cinder-festival-of-reviews Thanks and regards Rajat Dhasmana

1 0

Openstack-Ansible - Test Cluster on VirtualBox Hosts
by Dave Hall 27 May '22

27 May '22

Hello, Sorry for a beginner question. I am trying to deploy a 3-host minimal test cluster on VirtualBox hosts via OpenStack-Ansible. My purpose is to first build this test cluster and then to deploy a production cluster on physical hardware. The test cluster will be used first to learn, and then to validate changes prior to deploying them on the production cluster. I started with Vagrant-Openstack, but it is still based on Stein and not easily adaptable to Xena. Right now I'm working with Xena and OpenStack-Ansible 24.x on Debian 10 with a deployment host running Debian 11. All 4 systems are native VirtualBox VMs I've managed to deploy a couple of nearly functional clusters this way, but never fully functional and stable. Any guidelines or recommendations for this kind of deployment would be sincerely appreciated. Thanks. -Dave

2 1

[qa][requirements] Tempest Gate blocked for py3.6|7 support
by Ghanshyam Mann 26 May '22

26 May '22

Hello Everyone, As we know, in Zed cycle we have dropped the support of py3.6|7 from OpenStack which is why projects, lib like oslo started dropping it and made new releases. For example, oslo.log 5.0.0 does not support py3.6|7. Tempest being branchless and still supporting stable/victoria onwards stable branches thought of keeping the py36|7 support. But with the oslo dropped py3.6|7 and upper constraint has been updated to the oslo lib latest version made Tempest unit py3.6|7 test jobs failed. - https://bugs.launchpad.net/tempest/+bug/1975036 We have two options here: 1. requirements repo maintain different constraints for py3.6|7 and py3.8|9 which fix the Tempest py3.6| jobs and we can keep the python3.6|7 support in Tempest. Example: oslo.log which fixed the gate[1] but we might need to do the same for Tempest's other deps - https://review.opendev.org/c/openstack/requirements/+/842820 2. Drop the support of py3.6|7 from Tempest If the requirement team is not ok with the above solution then we can think of dropping the py3.6|7 support from Tempest too. This will stop Tempest to run on py3.6|7 but it will not block Tempest to test the OpenStack running on py3.6|7 as that can be done by running the Tempest in virtual env. Opinion? NOTE: Until we figure this out, I have proposed to temporarily stop running py3.6|7 on tempest gate, (especially to get c9s volume detach failure fix to merged otherwise that will block other projects gate too) - https://review.opendev.org/c/openstack/tempest/+/842821 [1] https://review.opendev.org/c/openstack/tempest/+/842819 -gmann

2 3

[neutron] Drivers meeting agenda - 27.05.2022.
by Lajos Katona 26 May '22

26 May '22

Hi Neutron Drivers, The agenda for tomorrow's drivers meeting is at [1]. We have one RFE to discuss tomorrow: * [RFE] Allow setting --dst-port for all port based protocols at once (#link https://bugs.launchpad.net/neutron/+bug/1973487) On Demand agenda: * (lajoskatona): meaning of option "router_auto_schedule" is ambiguous (#link https://bugs.launchpad.net/neutron/+bug/1973656 ) [1] https://wiki.openstack.org/wiki/Meetings/NeutronDrivers#Agenda See you at the meeting tomorrow. Lajos Katona (lajoskatona)

1 0

[neutron][neutron-vpnaas][release] dropping feature/lbaasv2 branch
by Mohammed Naser 26 May '22

26 May '22

Hi there, It looks like we've managed to track along a feature/lbaasv2 branch into neutron-vpnaas all the way from 2014 :) I'd like to request for the release team to delete that branch if possible. :) Thanks, Mohammed -- Mohammed Naser VEXXHOST, Inc.

5 4

openstack queens how increase dashboard threads
by Ignazio Cassano 26 May '22

26 May '22

Hello, I'd like to increase on centos queens the threads for openstack dashboard. At this time my /etc/httpd/conf.d/openstack-dashboard.conf is the following: WSGIDaemonProcess dashboard WSGIProcessGroup dashboard WSGISocketPrefix run/wsgi WSGIApplicationGroup %{GLOBAL} WSGIScriptAlias /dashboard /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi Alias /dashboard/static /usr/share/openstack-dashboard/static <Directory /usr/share/openstack-dashboard/openstack_dashboard/wsgi> Options All AllowOverride All Require all granted </Directory> <Directory /usr/share/openstack-dashboard/static> Options All AllowOverride All Require all granted </Directory> I tired to modify the first line like this: WSGIDaemonProcess dashboard user=apache group=apache processes=3 threads=10 I restartded httpd but now I am not able to log on the the dashboard. I am sure keystone is working because I am able do execute all commands with command line. Any help, please ? Regards Ignazio

1 0

horizon security group page bug
by Parsa Aminian 26 May '22

26 May '22

On the horizon user setting section there is an option called 'Items per page' that changes the number of items per page . It seems it does not work on security_groups page and on that page all of the security groups will be loaded and that causes a bad gateway error timeout on the browser .

1 0

[all][tc] Technical Committee next weekly meeting on May 26, 2022 at 1500 UTC
by Ghanshyam Mann 26 May '22

26 May '22

Hello Everyone, Technical Committee's next weekly meeting is scheduled for May 26, 2022 at 1500 UTC. If you would like to add topics for discussion, please add them to the below wiki page by Wednesday, May 25, at 2100 UTC. https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting -gmann

1 1

[Triple0] Undercloud Restore Failed
by Lokendra Rathour 25 May '22

25 May '22

Back Up and Restore the Director Undercloud Red Hat OpenStack Platform 16.2 | Red Hat Customer Portal <https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16…> Hi Team, Was trying to restore the Undercloud from the backup but restore is getting failed with the error message: "", "stdout: ", "stderr: + sudo -E kolla_set_configs", "sudo: unable to send audit message: Operation not permitted", "INFO:__main__:Loading config file at /var/lib/kolla/config_files/config.json", "INFO:__main__:Validating config file", "INFO:__main__:Kolla config strategy set to: COPY_ALWAYS", "INFO:__main__:Copying service configuration files", "ERROR:__main__:MissingRequiredSource: /var/lib/kolla/config_files/src/* file is not found", "", "Error executing ['podman', 'container', 'exists', 'rabbitmq']: returned 1", "Did not find container with \"['podman', 'ps', '-a', '--filter', 'label=container_name=rabbitmq', '--filter', 'label=config_id=tripleo_step1', '--format', '{{.Names}}']\" - retrying without config_id", "Did not find container with \"['podman', 'ps', '-a', '--filter', 'label=container_name=rabbitmq', '--format', '{{.Names}}']\"", "Created symlink /etc/systemd/system/multi-user.target.wants/tripleo_rabbitmq.service \u2192 /etc/systemd/system/tripleo_rabbitmq.service." ], "_ansible_no_log": false, "attempts": 4, "changed": false } ] ] Also, we checked for the path ("ERROR:__main__:MissingRequiredSource: /var/lib/kolla/config_files/src/* file is not found",) in the original server , there also it is not existing. Document followed: Back Up and Restore the Director Undercloud Red Hat OpenStack Platform 16.2 | Red Hat Customer Portal <https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16…> Openstack release: Train Any lead would be helpful. --lokendra skype: lokendrarathour

1 1

[largescale-sig] Next meeting: May 25th, 15utc
by Thierry Carrez 25 May '22

25 May '22

Hi everyone, The Large Scale SIG will be meeting this Wednesday in #openstack-operators on OFTC IRC, at 15UTC. You can check how that time translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20220525T15 Feel free to add topics to the agenda: https://etherpad.openstack.org/p/large-scale-sig-meeting Regards, -- Thierry Carrez

1 1

[neutron] Propose Yatin Karel for Neutron core team
by Lajos Katona 25 May '22

25 May '22

Hi Neutrinos, I would like to propose Yatin Karel (IRC: ykarel) as a member of the Neutron core team. Yatin is a long time Openstack developer, and started concentrating to Networking projects in the last few cycles. His experience, proactivity and sharp eye proved to be very helpful both in reviews and fixing issues. His reviews are really valuable and reflect his experience and helpfulness. I am sure that he will be a great addition to the core team. Please vote for his nomination by answering this mail till next Tuesday. Lajos Katona (lajoskatona)

7 6

Need help
by Gk Gk 25 May '22

25 May '22

Hi All, In this link https://docs.openstack.org/nova/queens/user/aggregates.html , there is a warning section about availability zones: "That last rule can be very error-prone. Since the user can see the list of availability zones, they have no way to know whether the default availability zone name (currently *nova*) is provided because an host belongs to an aggregate whose AZ metadata key is set to *nova*, or because there are at least one host belonging to no aggregate. Consequently, it is highly recommended for users to never ever ask for booting an instance by specifying an explicit AZ named *nova* and for operators to never set the AZ metadata for an aggregate to *nova*. That leads to some problems due to the fact that the instance AZ information is explicitly attached to *nova* which could break further move operations when either the host is moved to another aggregate or when the user would like to migrate the instance." My questions are, 1. If a host belongs to an aggregate whose AZ metadata key is set to nova, why is it not possible to know if a default AZ is provided or not ? 2. Why is it a problem when the host is moved to another aggregate ? We can move hosts from one aggregate to another. Right ? 3. Why is it a problem when we migrate the instance ? Thanks Kumar

3 2

[cinder] Bug deputy report for week of 05-25-2022
by Sofia Enriquez 25 May '22

25 May '22

This is a bug report from 05-18-2022 to 05-25-2022. Agenda: https://etherpad.opendev.org/p/cinder-bug-squad-meeting ----------------------------------------------------------------------------------------- No meeting today! High - https://bugs.launchpad.net/cinder/+bug/1974078 "Scheduler doesn't consume space properly for create_volume." Unassigned. Incomplete - https://bugs.launchpad.net/cinder/+bug/1974092 "Cinder-backup tries to take incremental backups of failed previous backups." Unassigned. Cheers, -- Sofía Enriquez she/her Software Engineer Red Hat PnT <https://www.redhat.com> IRC: @enriquetaso @RedHat <https://twitter.com/redhat> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc> <https://www.redhat.com>

1 0

[tripleo] gate blocker - openstacksdk library - please hold rechecks
by Ronelle Landy 25 May '22

25 May '22

Hello All, We have a blocker on TripleO check/gate/integration jobs detailed in: https://bugs.launchpad.net/tripleo/+bug/1975646 - tripleo tests are failing os_tempest with "openstacksdk library MUST be >=0.99." There is a proposed fix in test now: https://review.opendev.org/c/openstack/tripleo-ci/+/843220. Please hold rechecks until we can either merge the fix or revert the breaking change. Thank you, TripleO CI.

2 1

[nova] Snapshot Image Format
by Ammad Syed 25 May '22

25 May '22

Hi, I am using nova 24.0. I have an image in raw format in glance store. I have created a volume backed instance from raw image. Then I have created the server image using nova api below with *createImage* . https://docs.openstack.org/api-ref/compute/?expanded=create-image-createima… OR via openstack server image create --name <name> <server uuid> The created image I see in glance store is in qcow2 format. I have set this option snapshot_image_format in nova.conf but still it creates the images in qcow2 format. How config need to be done if i need to save server image in raw format ? Ammad

1 0

Re: [GLANCE][VICTORIA] - Multi-backend support with ceph backed swift.
by Gaël THEROND 25 May '22

25 May '22

Sure! However it is specified two times within the official glance configuration, once in glance_store and once in glance.store.swift.store but that last section is really not that well documented. https://docs.openstack.org/glance/latest/configuration/glance_api.html#glan… Le mar. 24 mai 2022 à 17:54, Abhishek Kekane <akekane(a)redhat.com> a écrit : > Hi Gaël, > > Can you try moving default_swift_reference from glance_store section to > particular swift store section, i.e. cold as per your configs. > > I guess that is the issue. > > Abhishek > > On Tue, 24 May 2022 at 7:30 PM, Gaël THEROND <gael.therond(a)bitswalk.com> > wrote: > >> Hi everyone, >> >> I'm currently enabling glance multi backend support for one of our >> platforms and we're facing a weird situation. >> >> This platform is a CentOS 8 Stream based Openstack VICTORIA and when we >> enable the multi-backends feature, the swift store isn't working properly. >> >> When we try to send an image to this store we end up with the following >> error message: >> *"ERROR glance_store._drivers.swift.store - A value for >> swift_store_auth_address is required."* >> >> Here is the complete log trace: >> https://paste.opendev.org/show/bGeCJjSB1C5GwD6JYFvu/ >> >> I'm a bit surprised because according to the error message and the >> glance_store code it means that either my *default_swift_reference* or >> *auth_address *fromthe *default_swift_reference *isn't set. >> >> >> https://opendev.org/openstack/glance_store/src/branch/stable/victoria/glanc… >> >> However as you can see on my glance-api.conf file I've (seems so) >> correctly set the glance_store directive and the store settings: >> >> glance-api.conf: https://paste.opendev.org/show/bjFAPCjlCG6MqINGsIlK/ >> glance-swift.conf: https://paste.opendev.org/show/bcCfBQDj32T3qgiJj3P7/ >> >> I'm only using a single tenant glance container within the admin project. >> What's really weird is this issue still arise and exist with any known >> (to me) combination of configuration. >> >> I've tried to declare the store right within the glance-api.conf file, >> but it's not working. >> I've tried to declare the store right within the glance-api.conf file and >> with the deprecated swift_store_auth_address directive instead of the >> auth_address one, it's not working. >> I've tried to declare the store right within the glance-api.conf file and >> with the deprecated swift_store_auth_address directive plus the >> auth_address one, it's not working. >> I've tried to replace auth_address directive with the deprecated >> swift_store_auth_address within the glance-swift.conf, same error and issue >> again. >> >> When I replace the default_backend value with performance, uploading an >> image works perfectly. >> >> I know that my swift CEPH RGW backed endpoint works as I use it already >> to store data. I've even tried to push an image on it both using CLI >> (openstack object) and cURL API call and it works. >> I'm a bit lost here, so if anyone is having thoughts on this I would be >> happy to hear you! >> >> Thanks a lot everyone! >> > -- > Thanks & Best Regards, > > Abhishek Kekane >

2 6

[ops][heat][rbac] Call for feedback: Splitting stack to "system" stack and "project" stack
by Takashi Kajinami 24 May '22

24 May '22

Hello, tl;dr We are looking for some feedback from anyone developing their tool/software creating/managing heat stacks, about the new requirement we are considering. Recently we've been discussing the issue with Heat and Secure RBAC work[1]. The current target of SRBAC work requires the appropriate scope according to the resources. - Project resources like instance, volume or network can be created by project-scoped token - Project resources like flavor, user, project or role can be created by system-scoped token This is causing a problem with heat stacks which have both project resources and system resources, because heat currently uses the single token provided by the user in a single stack API call. As part of discussions we have discussed the "split stack" concept, which requires creating separate stacks per scope. This means If you want to create project resources and system resources by Heat, you should create two separate heat stacks and call heat stack api separately using different credentials. While we still need to investigate the feasibility of this option (eg. how smooth we can make the migration), we'd like to hear any feedback about the impact of the "split stack" concept on any external toolings depending on Heat, because this would require some workflow/architecture change in the toolings. If we hear many negative feedback/concerns then we would examine different approaches. Thank you, Takashi [1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rb…

1 1

[GLANCE][VICTORIA] - Multi-backend support with ceph backed swift.
by Gaël THEROND 24 May '22

24 May '22

Hi everyone, I'm currently enabling glance multi backend support for one of our platforms and we're facing a weird situation. This platform is a CentOS 8 Stream based Openstack VICTORIA and when we enable the multi-backends feature, the swift store isn't working properly. When we try to send an image to this store we end up with the following error message: *"ERROR glance_store._drivers.swift.store - A value for swift_store_auth_address is required."* Here is the complete log trace: https://paste.opendev.org/show/bGeCJjSB1C5GwD6JYFvu/ I'm a bit surprised because according to the error message and the glance_store code it means that either my *default_swift_reference* or *auth_address *fromthe *default_swift_reference *isn't set. https://opendev.org/openstack/glance_store/src/branch/stable/victoria/glanc… However as you can see on my glance-api.conf file I've (seems so) correctly set the glance_store directive and the store settings: glance-api.conf: https://paste.opendev.org/show/bjFAPCjlCG6MqINGsIlK/ glance-swift.conf: https://paste.opendev.org/show/bcCfBQDj32T3qgiJj3P7/ I'm only using a single tenant glance container within the admin project. What's really weird is this issue still arise and exist with any known (to me) combination of configuration. I've tried to declare the store right within the glance-api.conf file, but it's not working. I've tried to declare the store right within the glance-api.conf file and with the deprecated swift_store_auth_address directive instead of the auth_address one, it's not working. I've tried to declare the store right within the glance-api.conf file and with the deprecated swift_store_auth_address directive plus the auth_address one, it's not working. I've tried to replace auth_address directive with the deprecated swift_store_auth_address within the glance-swift.conf, same error and issue again. When I replace the default_backend value with performance, uploading an image works perfectly. I know that my swift CEPH RGW backed endpoint works as I use it already to store data. I've even tried to push an image on it both using CLI (openstack object) and cURL API call and it works. I'm a bit lost here, so if anyone is having thoughts on this I would be happy to hear you! Thanks a lot everyone!

1 0

[Monasca] correlating monasca-api metrics resource_id to instance id
by Ivo Palli 24 May '22

24 May '22

Hi all, I'm new to openstack and monasca. I've gotten so far as to retrieve instances with their ID's via the REST API, but I'm running into trouble with getting metrics. The issue is that metrics: - show to which hostname they belong - and you can limit results to a project id But if you have 2 or more servers with the same hostname, you can't link them 1:1 with an instance. Is there a way how I can get that 1:1 link? Regards, Ivo Palli

1 0

Creating VM directly on external network.
by Russell Stather 24 May '22

24 May '22

Hi I have a charm based OpenStack setup. The network topology is as below. Creating vms on the internal network and adding floating ips works as expected. Adding vms on directly on to the ext_net does not. openstack allows me to do it, but I get host is unreachable when trying to connect. Is there some configuration I have missed? Thanks [cid:3699cab3-ea6a-45eb-91c3-65e91056fd71]

4 4

Recreate virsh xml
by Szabo, Istvan (Agoda) 24 May '22

24 May '22

Hi, I have a node which has been live-migrated to another node and it is running on the new node BUT there isn't any xml definition file (/etc/libvirt/qemu/instance-*.xml) of it which is automatically generated. How I solve this issue normally is to respawn that vm with the same disk and ip that it has before, but I wonder is there any easier way to just simply recreate the automatically generated definition file. The file which I'm talking about auto generated is this one: /etc/libvirt/qemu/instance-*.xml starts like this so I guess I can't create by myself.  <domain type='kvm'> <name>instance-00006580</name> <uuid>ac8cf83e-6819-417a-9f83-de73c28567e9</uuid> <metadata> .... Thank you ________________________________ This message is confidential and is for the sole use of the intended recipient(s). It may also be privileged or otherwise protected by copyright or other legal rules. If you have received it by mistake please let us know by reply email and delete it from your system. It is prohibited to copy this message or disclose its content to anyone. Any confidentiality or privilege is not waived or lost by any mistaken delivery or unauthorized disclosure of the message. All messages sent to and from Agoda may be monitored to ensure compliance with company policies, to protect the company's interests and to remove potential malware. Electronic messages may be intercepted, amended, lost or deleted, or contain viruses.

2 1

Question about lp 1950186
by Seyeong Kim 24 May '22

24 May '22

Hello, I have a question about lp https://bugs.launchpad.net/nova/+bug/1950186 if this can be fixed in near future or if there is any plan? Thanks in advance.

2 1

[neutron][neutron-vpnaas] neutron-tempest-plugin coverage
by Mohammed Naser 24 May '22

24 May '22

Hiya, As part of cleaning up VPNaaS, I decided to explore fixing the longstanding failures of the `neutron-tempest-plugin-vpnaas-libreswan-centos` job that was always failing and non-voting. Upon trying to flip the switch on it in a test change[1], I noticed that much of the test results seem to be simply exercising the API[2], essentially making the fact that we run that job on CentOS a bit redundant. The tests that actually exercise more than the API and validate connectivity are the functional tests, which currently run for "StrongSwan" only on Ubuntu. My question to the Neutron team is: 1. Should we get rid of the functional jobs and move them into neutron-tempest-plugin, and run that for different platforms? 2. Should we get rid of the neutron-tempest-plugin job under CentOS and add functional jobs for CentOS? My inclination seems to be #2, since that is what other stadium projects seem to be doing (no one seems to run platform-specific neutron-tempest-plugin jobs). It also keeps maintainability simpler since it remains in the hands of the VPNaaS team. Thanks Mohammed [1]: https://review.opendev.org/c/openstack/neutron-vpnaas/+/843005 [2]: https://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/… -- Mohammed Naser VEXXHOST, Inc.

2 1

[qa][openeuler] QA wants to drop openeuler job
by Martin Kopec 24 May '22

24 May '22

Hi everyone, we're considering dropping the devstack-platform-openEuler-20.03-SP2 job. It's been failing for a long time and based on the fact that no one has complained about it, we assume that there isn't much interest in having the job around. If that's not the case, please, reach out and let's discuss updating the job. Thanks, -- Martin Kopec Senior Software Quality Engineer Red Hat EMEA IM: kopecmartin

1 1

[cinder] This week's meeting will be in video+IRC
by Rajat Dhasmana 24 May '22

24 May '22

Hello Argonauts, This week's meeting will be held in video + IRC mode with details as follows: Date: 25th May, 2022 Time: 1400 UTC Meeting link: https://bluejeans.com/556681290 IRC Channel: #openstack-meeting-alt Make sure you're connected to both the bluejeans meeting and IRC since we do roll call and also summarize the discussion points on IRC. Note: Every last meeting of the month is held in video + IRC mode to provide flexibility to communicate their thoughts via written or verbal way. It also acts as a medium to meet the team (virtually) every month. Thanks and regards Rajat Dhasmana

1 0

[Neutron] CI meeting - 24.05.2022
by Slawek Kaplonski 24 May '22

24 May '22

Hi, Just quick reminder that today at 1500 UTC we will have Neutron CI meeting. It will be on Jitsi [1] this week. Agenda can be found at [2]. See You there :) [1] https://meetpad.opendev.org/neutron-ci-meetings[1] [2] https://etherpad.opendev.org/p/neutron-ci-meetings[2] -- Slawek Kaplonski Principal Software Engineer Red Hat -------- [1] https://meetpad.opendev.org/neutron-ci-meetings [2] https://etherpad.opendev.org/p/neutron-ci-meetings

1 0

skyline dashboard filter issue
by Parsa Aminian 24 May '22

24 May '22

hello On Skyline dashboard of openstack there is no way to search instances base on fixed ip address . is there anyway that I can add fixed ip filter to this dashboard ? thanks

2 1

[puppet][tripleo][neutron] Deprecating support for networking-ansible
by Takashi Kajinami 24 May '22

24 May '22

Hello Currently puppet-neutron supports deploying networking-ansible[1]. However I noticed the project looks unmaintained. - No release was made since stable/victoria - Its job template has not been updated still points openstack-python3-wallaby-jobs (likely because of no release activity) - setup.cfg still indicates support for Python 2 while it does not support 3.6/7/9 Although the repo got a few patches merged 6 months ago, I've not seen any interest in maintaining the repository. Based on the above observations, I'd propose deprecating the support in Zed and removing it in the post-Zed release. TripleO also supports networking-ansible but that will be also deprecated and removed because the dependent implementation will be removed. (That's why I added the tripleo tag) If you have any concerns then please let me know. If we don't hear any concerns in a few weeks then I'll propose the deprecation. I'm adding the [neutron] tag in case anybody in the team is interested in fixing the maintenance status. IIUC networking-ansible is not part of the stadium but I'm not aware of any good alternatives... [1] https://opendev.org/x/networking-ansible Thank you, Takashi

1 1

SSL verify failed | Overcloud deploy step 4 | Wallaby | tripleo
by Swogat Pradhan 23 May '22

23 May '22

Hi, I am currently stuck in deploy step 4 with the following error: FATAL | Clean up legacy Cinder keystone catalog entries | undercloud | item={'service_name': 'cinderv3', 'service_type': 'volume'} | error={"ansible_index_var": "cinder_api_service", "ansible_loop_var": "item", "changed": false, "cinder_api_service": 1, "item": {"service_name": "cinderv3", "service_type": "volume"}, "module_stderr": "Failed to discover available identity versions when contacting https://overcloud.bdxworld.com:13000. Attempting to parse version from URL.\nTraceback (most recent call last):\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 677, in urlopen\n chunked=chunked,\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 381, in make_request\n self._validate_conn(conn)\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 978, in _validate_conn\n conn.connect()\n File \"/usr/lib/python3.6/site-packages/urllib3/connection.py\", line 371, in connect\n ssl_context=context,\n File \"/usr/lib/python3.6/site-packages/urllib3/util/ssl.py\", line 384, in ssl_wrap_socket\n return context.wrap_socket(sock, server_hostname=server_hostname)\n File \"/usr/lib64/python3.6/ssl.py\", line 365, in wrap_socket\n context=self, _session=session)\n File \"/usr/lib64/python3.6/ssl.py\", line 776, in __init\n self.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 1036, in do_handshake\n self._sslobj.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 648, in do_handshake\n self._sslobj.do_handshake()\nssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897) Attached details: With regrads, Swogat pradhan

1 0

[keystone][swift] audit logs
by Sharath Ck 23 May '22

23 May '22

Hi, I am currently trying to add keystone audit middleware in Swift. Middleware is managed in swift proxy server, hence I have added the audit filter in proxy server conf and have mentioned audit_middleware_notifications driver as log in swift.conf . I can see REST API call flow reaching audit middleware and constructing the audit event with minimal data as Swift is not loading service catalog information. But the audit event is not getting notified as per audit_middleware_notifications. I tried adding oslo_messaging_notifications with the driver as log, but audit events are not getting notified. Below are the changes in swift_proxy_server container, proxy-server.conf [pipeline:main] pipeline = catch_errors gatekeeper healthcheck cache container_sync bulk tempurl ratelimit formpost authtoken keystoneauth audit container_quotas account_quotas slo dlo keymaster encryption proxy-server [filter:audit] paste.filter_factory = keystonemiddleware.audit:filter_factory audit_map_file = /etc/swift/api_audit_map.conf swift.conf [oslo_messaging_notifications] driver = log [audit_middleware_notifications] driver = log Kindly confirm whether the configuration changes are enough or need more changes. Regards, Sharath

2 3

[neutron] Bug deputy report - week of May 16th
by Slawek Kaplonski 23 May '22

23 May '22

Hi, I was Neutron bug deputy last week. It was pretty busy week this time. Below is summary of new bugs opened during that time: ## High * https://bugs.launchpad.net/neutron/+bug/1973783 - [devstack] Segment plugin reports Traceback as placement client not configured - assigned to Yatin, in progress * https://bugs.launchpad.net/neutron/+bug/1974144 - [sqlalchemy-20] Missing DB context in "_get_dvr_hosts_for_subnets" - assigned to Rodolfo, in progress * https://bugs.launchpad.net/neutron/+bug/1974142 - [sqlalchemy-20] Missing DB context in "_update_subnet_postcommit" - assigned to Rodolfo, in progress * https://bugs.launchpad.net/neutron/+bug/1974057 - [neutron-dynamic-routing] Plugin RPC queue should be consumed by RPC workers - assigned to Renat Nurgaliyev, in progress ## Medium * https://bugs.launchpad.net/neutron/+bug/1973726 - [DB] "SubnetPool" exact match queries to non-indexed columns - *needs assignment* * https://bugs.launchpad.net/neutron/+bug/1973765 - LB creation failed due to address already in use - assigned to Fernando, fix proposed https://review.opendev.org/c/openstack/ovn-octavia-provider/+/842107 * https://bugs.launchpad.net/neutron/+bug/1974183 - Neutron allows creation of trunks for VIF_TYPE_HW_VEB ports - *needs assignment* * https://bugs.launchpad.net/neutron/+bug/1974149 - [FT] Test "test_agent_updated_at_use_nb_cfg_timestamp" failing - assigned to Rodolfo, in progress * https://bugs.launchpad.net/neutron/+bug/1974052 - Load Balancer remains in PENDING_CREATE - assigned to Fernando Royo, in progress ## Low * https://bugs.launchpad.net/neutron/+bug/1973656 - meaning of option "router_auto_schedule" is ambiguous - *needs assignment *but I think we need to discuss about it in the team meeting first to decide what naming/behaviour we really want to have, * https://bugs.launchpad.net/neutron/+bug/1973731 - [UT] Error output in "test_metadata_port_on_network_delete" - assigned to Rodolfo * https://bugs.launchpad.net/neutron/+bug/1973780 - PEP 632 – Deprecate distutils module - assigned to Rodolfo, fixes already proposed https://review.opendev.org/c/openstack/neutron/+/842133 and https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/842135 ## Whishlist (RFEs) * https://bugs.launchpad.net/neutron/+bug/1973487 - [RFE] Allow setting --dst-port for all port based protocols at once And that's all. -- Slawek Kaplonski Principal Software Engineer Red Hat

1 0

SSL verify failed | Overcloud deploy step 4 | Wallaby | tripleo
by Swogat Pradhan 23 May '22

23 May '22

Hi, I am currently stuck in deploy step 4 with the following error: FATAL | Clean up legacy Cinder keystone catalog entries | undercloud | item={'service_name': 'cinderv3', 'service_type': 'volume'} | error={"ansible_index_var": "cinder_api_service", "ansible_loop_var": "item", "changed": false, "cinder_api_service": 1, "item": {"service_name": "cinderv3", "service_type": "volume"}, "module_stderr": "Failed to discover available identity versions when contacting https://overcloud.bdxworld.com:13000. Attempting to parse version from URL.\nTraceback (most recent call last):\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 677, in urlopen\n chunked=chunked,\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 381, in make_request\n self._validate_conn(conn)\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 978, in _validate_conn\n conn.connect()\n File \"/usr/lib/python3.6/site-packages/urllib3/connection.py\", line 371, in connect\n ssl_context=context,\n File \"/usr/lib/python3.6/site-packages/urllib3/util/ssl.py\", line 384, in ssl_wrap_socket\n return context.wrap_socket(sock, server_hostname=server_hostname)\n File \"/usr/lib64/python3.6/ssl.py\", line 365, in wrap_socket\n context=self, _session=session)\n File \"/usr/lib64/python3.6/ssl.py\", line 776, in __init\n self.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 1036, in do_handshake\n self._sslobj.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 648, in do_handshake\n self._sslobj.do_handshake()\nssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File \"/usr/lib/python3.6/site-packages/requests/adapters.py\", line 449, in send\n timeout=timeout\n File \"/usr/lib/python3.6/site-packages/urllib3/connectionpool.py\", line 727, in urlopen\n method, url, error=e, _pool=self, _stacktrace=sys.exc_info()[2]\n File \"/usr/lib/python3.6/site-packages/urllib3/util/retry.py\", line 439, in increment\n raise MaxRetryError(_pool, url, error or ResponseError(cause))\nurllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='overcloud.bdxworld.com', port=13000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 1022, in _send_request\n resp = self.session.request(method, url, *kwargs)\n File \"/usr/lib/python3.6/site-packages/requests/sessions.py\", line 542, in request\n resp = self.send(prep, **send_kwargs)\n File \"/usr/lib/python3.6/site-packages/requests/sessions.py\", line 655, in send\n r = adapter.send(request, **kwargs)\n File \"/usr/lib/python3.6/site-packages/requests/adapters.py\", line 514, in send\n raise SSLError(e, request=request)\nrequests.exceptions.SSLError: HTTPSConnectionPool(host='overcloud.bdxworld.com', port=13000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/generic/base.py\", line 138, in _do_create_plugin\n authenticated=False)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/base.py\", line 610, in get_discovery\n authenticated=authenticated)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/discover.py\", line 1452, in get_discovery\n disc = Discover(session, url, authenticated=authenticated)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/discover.py\", line 536, in __init_\n authenticated=authenticated)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/discover.py\", line 102, in get_version_data\n resp = session.get(url, headers=headers, authenticated=authenticated)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 1141, in get\n return self.request(url, 'GET', **kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 931, in request\n resp = send(**kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 1026, in _send_request\n raise exceptions.SSLError(msg)\nkeystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://overcloud.bdxworld.com:13000: HTTPSConnectionPool(host='overcloud.bdxworld.com', port=13000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File \"<stdin>\", line 102, in <module>\n File \"<stdin>\", line 94, in _ansiballz_main\n File \"<stdin>\", line 40, in invoke_module\n File \"/usr/lib64/python3.6/runpy.py\", line 205, in run_module\n return _run_module_code(code, init_globals, run_name, mod_spec)\n File \"/usr/lib64/python3.6/runpy.py\", line 96, in _run_module_code\n mod_name, mod_spec, pkg_name, script_name)\n File \"/usr/lib64/python3.6/runpy.py\", line 85, in _run_code\n exec(code, run_globals)\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/modules/catalog_service.py\", line 185, in <module>\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/modules/catalog_service.py\", line 181, in main\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/module_utils/openstack.py\", line 407, in __call_\n authenticated=authenticated)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/discover.py\", line 102, in get_version_data\n resp = session.get(url, headers=headers, authenticated=authenticated)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 1141, in get\n return self.request(url, 'GET', **kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 931, in request\n resp = send(**kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 1026, in _send_request\n raise exceptions.SSLError(msg)\nkeystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://overcloud.bdxworld.com:13000: HTTPSConnectionPool(host='overcloud.bdxworld.com', port=13000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File \"<stdin>\", line 102, in <module>\n File \"<stdin>\", line 94, in _ansiballz_main\n File \"<stdin>\", line 40, in invoke_module\n File \"/usr/lib64/python3.6/runpy.py\", line 205, in run_module\n return _run_module_code(code, init_globals, run_name, mod_spec)\n File \"/usr/lib64/python3.6/runpy.py\", line 96, in _run_module_code\n mod_name, mod_spec, pkg_name, script_name)\n File \"/usr/lib64/python3.6/runpy.py\", line 85, in _run_code\n exec(code, run_globals)\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/modules/catalog_service.py\", line 185, in <module>\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/modules/catalog_service.py\", line 181, in main\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/module_utils/openstack.py\", line 407, in __call__\n File \"/tmp/ansible_openstack.cloud.catalog_service_payload_yfxm9irl/ansible_openstack.cloud.catalog_service_payload.zip/ansible_collections/openstack/cloud/plugins/modules/catalog_service.py\", line 141, in run\n File \"/usr/lib/python3.6/site-packages/openstack/cloud/_identity.py\", line 517, in search_services\n services = self.list_services()\n File \"/usr/lib/python3.6/site-packages/openstack/cloud/_identity.py\", line 492, in list_services\n if self._is_client_version('identity', 2):\n File \"/usr/lib/python3.6/site-packages/openstack/cloud/openstackcloud.py\", line 460, in _is_client_version\n client = getattr(self, client_name)\n File \"/usr/lib/python3.6/site-packages/openstack/cloud/_identity.py\", line 32, in _identity_client\n 'identity', min_version=2, max_version='3.latest')\n File \"/usr/lib/python3.6/site-packages/openstack/cloud/openstackcloud.py\", line 407, in _get_versioned_client\n if adapter.get_endpoint():\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/adapter.py\", line 291, in get_endpoint\n return self.session.get_endpoint(auth or self.auth, **kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/session.py\", line 1243, in get_endpoint\n return auth.get_endpoint(self, **kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/base.py\", line 380, in get_endpoint\n allow_version_hack=allow_version_hack, **kwargs)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/base.py\", line 271, in get_endpoint_data\n service_catalog = self.get_access(session).service_catalog\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/base.py\", line 134, in get_access\n self.auth_ref = self.get_auth_ref(session)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/generic/base.py\", line 206, in get_auth_ref\n self._plugin = self._do_create_plugin(session)\n File \"/usr/lib/python3.6/site-packages/keystoneauth1/identity/generic/base.py\", line 161, in _do_create_plugin\n 'auth_url is correct. %s' % e)\nkeystoneauth1.exceptions.discovery.DiscoveryFailure: Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://overcloud.bdxworld.com:13000: HTTPSConnectionPool(host=' overcloud.bdxworld.com', port=13000): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))\n", "module_stdout": "", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 1} *Catalog list:* +-----------+----------------+--------------------------------------------------------------------------------------+ | Name | Type | Endpoints | +-----------+----------------+--------------------------------------------------------------------------------------+ | aodh | alarming | regionOne | | | | internal: http://172.25.201.250:8042 | | | | regionOne | | | | public: http://172.25.201.150:8042 | | | | regionOne | | | | admin: http://172.25.201.250:8042 | | | | | | placement | placement | regionOne | | | | admin: http://172.25.201.250:8778/placement | | | | regionOne | | | | internal: http://172.25.201.250:8778/placement | | | | regionOne | | | | public: http://172.25.201.150:8778/placement | | | | | | gnocchi | metric | regionOne | | | | public: http://172.25.201.150:8041 | | | | regionOne | | | | internal: http://172.25.201.250:8041 | | | | regionOne | | | | admin: http://172.25.201.250:8041 | | | | | | glance | image | regionOne | | | | internal: http://172.25.201.250:9292 | | | | regionOne | | | | admin: http://172.25.201.250:9292 | | | | regionOne | | | | public: http://172.25.201.150:9292 | | | | | | keystone | identity | regionOne | | | | internal: http://172.25.201.250:5000 | | | | regionOne | | | | admin: http://172.25.201.250:35357 | | | | regionOne | | | | public: https://overcloud.bdxworld.com:13000 | | | | | | heat-cfn | cloudformation | regionOne | | | | internal: http://172.25.201.250:8000/v1 | | | | regionOne | | | | public: http://172.25.201.150:8000/v1 | | | | regionOne | | | | admin: http://172.25.201.250:8000/v1 | | | | | | neutron | network | regionOne | | | | admin: http://172.25.201.250:9696 | | | | regionOne | | | | public: http://172.25.201.150:9696 | | | | regionOne | | | | internal: http://172.25.201.250:9696 | | | | | | heat | orchestration | regionOne | | | | internal: http://172.25.201.250:8004/v1/5d922243077045c48fe4b075e386551b | | | | regionOne | | | | public: http://172.25.201.150:8004/v1/5d922243077045c48fe4b075e386551b | | | | regionOne | | | | admin: http://172.25.201.250:8004/v1/5d922243077045c48fe4b075e386551b | | | | | | octavia | load-balancer | regionOne | | | | public: http://172.25.201.150:9876 | | | | regionOne | | | | admin: http://172.25.201.250:9876 | | | | regionOne | | | | internal: http://172.25.201.250:9876 | | | | | | cinderv3 | volumev3 | regionOne | | | | internal: http://172.25.201.250:8776/v3/5d922243077045c48fe4b075e386551b | | | | regionOne | | | | public: http://172.25.201.150:8776/v3/5d922243077045c48fe4b075e386551b | | | | regionOne | | | | admin: http://172.25.201.250:8776/v3/5d922243077045c48fe4b075e386551b | | | | | | swift | object-store | regionOne | | | | public: http://172.25.201.150:8080/swift/v1/AUTH_5d922243077045c48fe4b075e386551b | | | | regionOne | | | | admin: http://172.25.202.50:8080/swift/v1/AUTH_5d922243077045c48fe4b075e386551b | | | | regionOne | | | | internal: http://172.25.202.50:8080/swift/v1/AUTH_5d922243077045c48fe4b075e386551b | | | | | | nova | compute | regionOne | | | | admin: http://172.25.201.250:8774/v2.1 | | | | regionOne | | | | internal: http://172.25.201.250:8774/v2.1 | | | | regionOne | | | | public: http://172.25.201.150:8774/v2.1 | | | | *Host entries:* [stack@hkg2director ~]$ cat /etc/hosts # START_HOST_ENTRIES_FOR_STACK: overcloud 172.25.201.68 hkg2director.ctlplane.bdxworld.com hkg2director.ctlplane hkg2director.ctlplane.bdxcloud.bdxworld.com 172.25.201.91 overcloud.ctlplane.bdxworld.com 172.25.202.50 overcloud.storage.bdxworld.com 172.25.202.90 overcloud.storagemgmt.bdxworld.com 172.25.201.250 overcloud.internalapi.bdxworld.com 172.25.201.150 overcloud.bdxworld.com 172.25.201.212 overcloud-controller-0.bdxworld.com overcloud-controller-0 172.25.202.13 overcloud-controller-0.storage.bdxworld.com overcloud-controller-0.storage 172.25.202.75 overcloud-controller-0.storagemgmt.bdxworld.com overcloud-controller-0.storagemgmt 172.25.201.212 overcloud-controller-0.internalapi.bdxworld.com overcloud-controller-0.internalapi 172.25.202.143 overcloud-controller-0.tenant.bdxworld.com overcloud-controller-0.tenant 172.25.201.144 overcloud-controller-0.external.bdxworld.com overcloud-controller-0.external 172.25.201.106 overcloud-controller-0.ctlplane.bdxworld.com overcloud-controller-0.ctlplane 172.25.201.205 overcloud-controller-1.bdxworld.com overcloud-controller-1 172.25.202.18 overcloud-controller-1.storage.bdxworld.com overcloud-controller-1.storage 172.25.202.76 overcloud-controller-1.storagemgmt.bdxworld.com overcloud-controller-1.storagemgmt 172.25.201.205 overcloud-controller-1.internalapi.bdxworld.com overcloud-controller-1.internalapi 172.25.202.142 overcloud-controller-1.tenant.bdxworld.com overcloud-controller-1.tenant 172.25.201.149 overcloud-controller-1.external.bdxworld.com overcloud-controller-1.external 172.25.201.105 overcloud-controller-1.ctlplane.bdxworld.com overcloud-controller-1.ctlplane 172.25.201.201 overcloud-controller-2.bdxworld.com overcloud-controller-2 172.25.202.12 overcloud-controller-2.storage.bdxworld.com overcloud-controller-2.storage 172.25.202.74 overcloud-controller-2.storagemgmt.bdxworld.com overcloud-controller-2.storagemgmt 172.25.201.201 overcloud-controller-2.internalapi.bdxworld.com overcloud-controller-2.internalapi 172.25.202.149 overcloud-controller-2.tenant.bdxworld.com overcloud-controller-2.tenant 172.25.201.139 overcloud-controller-2.external.bdxworld.com overcloud-controller-2.external 172.25.201.97 overcloud-controller-2.ctlplane.bdxworld.com overcloud-controller-2.ctlplane 172.25.201.209 overcloud-controller-no-ceph-3.bdxworld.com overcloud-controller-no-ceph-3 172.25.202.17 overcloud-controller-no-ceph-3.storage.bdxworld.com overcloud-controller-no-ceph-3.storage 172.25.202.79 overcloud-controller-no-ceph-3.storagemgmt.bdxworld.com overcloud-controller-no-ceph-3.storagemgmt 172.25.201.209 overcloud-controller-no-ceph-3.internalapi.bdxworld.com overcloud-controller-no-ceph-3.internalapi 172.25.202.135 overcloud-controller-no-ceph-3.tenant.bdxworld.com overcloud-controller-no-ceph-3.tenant 172.25.201.137 overcloud-controller-no-ceph-3.external.bdxworld.com overcloud-controller-no-ceph-3.external 172.25.201.103 overcloud-controller-no-ceph-3.ctlplane.bdxworld.com overcloud-controller-no-ceph-3.ctlplane 172.25.201.202 overcloud-novacompute-0.bdxworld.com overcloud-novacompute-0 172.25.202.19 overcloud-novacompute-0.storage.bdxworld.com overcloud-novacompute-0.storage 172.25.201.202 overcloud-novacompute-0.internalapi.bdxworld.com overcloud-novacompute-0.internalapi 172.25.202.140 overcloud-novacompute-0.tenant.bdxworld.com overcloud-novacompute-0.tenant 172.25.201.107 overcloud-novacompute-0.ctlplane.bdxworld.com overcloud-novacompute-0.ctlplane 172.25.201.207 overcloud-novacompute-1.bdxworld.com overcloud-novacompute-1 172.25.202.15 overcloud-novacompute-1.storage.bdxworld.com overcloud-novacompute-1.storage 172.25.201.207 overcloud-novacompute-1.internalapi.bdxworld.com overcloud-novacompute-1.internalapi 172.25.202.144 overcloud-novacompute-1.tenant.bdxworld.com overcloud-novacompute-1.tenant 172.25.201.112 overcloud-novacompute-1.ctlplane.bdxworld.com overcloud-novacompute-1.ctlplane 172.25.201.200 overcloud-novacompute-2.bdxworld.com overcloud-novacompute-2 172.25.202.20 overcloud-novacompute-2.storage.bdxworld.com overcloud-novacompute-2.storage 172.25.201.200 overcloud-novacompute-2.internalapi.bdxworld.com overcloud-novacompute-2.internalapi 172.25.202.138 overcloud-novacompute-2.tenant.bdxworld.com overcloud-novacompute-2.tenant 172.25.201.100 overcloud-novacompute-2.ctlplane.bdxworld.com overcloud-novacompute-2.ctlplane 172.25.201.199 overcloud-novacompute-3.bdxworld.com overcloud-novacompute-3 172.25.202.9 overcloud-novacompute-3.storage.bdxworld.com overcloud-novacompute-3.storage 172.25.201.199 overcloud-novacompute-3.internalapi.bdxworld.com overcloud-novacompute-3.internalapi 172.25.202.141 overcloud-novacompute-3.tenant.bdxworld.com overcloud-novacompute-3.tenant 172.25.201.104 overcloud-novacompute-3.ctlplane.bdxworld.com overcloud-novacompute-3.ctlplane 172.25.201.198 overcloud-novacompute-4.bdxworld.com overcloud-novacompute-4 172.25.202.16 overcloud-novacompute-4.storage.bdxworld.com overcloud-novacompute-4.storage 172.25.201.198 overcloud-novacompute-4.internalapi.bdxworld.com overcloud-novacompute-4.internalapi 172.25.202.139 overcloud-novacompute-4.tenant.bdxworld.com overcloud-novacompute-4.tenant 172.25.201.109 overcloud-novacompute-4.ctlplane.bdxworld.com overcloud-novacompute-4.ctlplane 172.25.202.14 overcloud-cephstorage-0.bdxworld.com overcloud-cephstorage-0 172.25.202.14 overcloud-cephstorage-0.storage.bdxworld.com overcloud-cephstorage-0.storage 172.25.202.72 overcloud-cephstorage-0.storagemgmt.bdxworld.com overcloud-cephstorage-0.storagemgmt 172.25.201.101 overcloud-cephstorage-0.ctlplane.bdxworld.com overcloud-cephstorage-0.ctlplane 172.25.202.6 overcloud-cephstorage-1.bdxworld.com overcloud-cephstorage-1 172.25.202.6 overcloud-cephstorage-1.storage.bdxworld.com overcloud-cephstorage-1.storage 172.25.202.78 overcloud-cephstorage-1.storagemgmt.bdxworld.com overcloud-cephstorage-1.storagemgmt 172.25.201.92 overcloud-cephstorage-1.ctlplane.bdxworld.com overcloud-cephstorage-1.ctlplane 172.25.202.11 overcloud-cephstorage-2.bdxworld.com overcloud-cephstorage-2 172.25.202.11 overcloud-cephstorage-2.storage.bdxworld.com overcloud-cephstorage-2.storage 172.25.202.85 overcloud-cephstorage-2.storagemgmt.bdxworld.com overcloud-cephstorage-2.storagemgmt 172.25.201.111 overcloud-cephstorage-2.ctlplane.bdxworld.com overcloud-cephstorage-2.ctlplane 172.25.202.10 overcloud-cephstorage-3.bdxworld.com overcloud-cephstorage-3 172.25.202.10 overcloud-cephstorage-3.storage.bdxworld.com overcloud-cephstorage-3.storage 172.25.202.87 overcloud-cephstorage-3.storagemgmt.bdxworld.com overcloud-cephstorage-3.storagemgmt 172.25.201.96 overcloud-cephstorage-3.ctlplane.bdxworld.com overcloud-cephstorage-3.ctlplane 172.25.201.68 hkg2director.ctlplane.bdxworld.com hkg2director.ctlplane hkg2director.ctlplane.bdxcloud.bdxworld.com # END_HOST_ENTRIES_FOR_STACK: overcloud # START_HOST_ENTRIES_FOR_STACK: undercloud 172.25.201.68 hkg2director.bdxworld.com hkg2director 172.25.201.68 hkg2director.external.bdxworld.com hkg2director.external 172.25.201.68 hkg2director.ctlplane.bdxworld.com hkg2director.ctlplane 172.25.201.68 bdxworld.com 172.25.201.68 bdxworld.com # END_HOST_ENTRIES_FOR_STACK: undercloud 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 172.25.201.68 hkg2director.bdxworld.com hkg2director bdxworld.com NOTE: my overcloud nodes are in the DMZ. Any help would be appreciated. With regards, Swogat Pradhan

1 0

Octavia Amphora staying in PENDING_CREATE forever.
by Russell Stather 23 May '22

23 May '22

4 6

Issue creating octavia loadbalancer
by Russell Stather 22 May '22

22 May '22

Hi Trying to create a load balancer. Get the following error. igadmin@ig-umh-maas:~$ openstack loadbalancer create -f value -c vip_port_id --name lb1 --vip-subnet-id 66690e99-44b2-4233-8f16-d539c8a05090 Provider 'amphora' reports error: Port security must be enabled on the VIP network. (HTTP 500) (Request-ID: req-642a4b4d-0d45-4a08-ba47-d4232a350703) igadmin@ig-umh-maas:~$ !1067 openstack network set --enable-port-security int_net BadRequestException: 400: Client Error for url: https://10.0.110.231:9696/v2.0/networks/be5f8494-1964-466b-a47a-8e5430976009, Unrecognized attribute(s) 'port_security_enabled' Anyone come across this issue? Thanks Russell

2 2

Magnum CSI Cinder Plugin broken in Yoga?
by Oliver Weinmann 21 May '22

21 May '22

Hi, I just updated to Yoga in order to fix the problem with the broken metrics-server, but now I had problems deploying GITLAB and the errors lead to problems with mounting PVs. So I had a look at the csi-cinder-plugin and saw this: kolla-yoga) [oliweilocal@gedasvl99 images]$ kubectl get pods -n kube-system | grep -i csi csi-cinder-controllerplugin-0 4/5 CrashLoopBackOff 168 (4m53s ago) 14h csi-cinder-nodeplugin-7kh9q 2/2 Running 0 14h csi-cinder-nodeplugin-q5bfq 2/2 Running 0 14h csi-cinder-nodeplugin-x4vrk 2/2 Running 0 14h I re-deployed the cluster and the error stays. Is there anything known about this? I have a small Ceph Pacific cluster. I can do some testing with an NFS backend as well and see if the problem goes away. Best Regards, Oliver

2 3

updating the overcloud domain in undercloud.conf | Wallaby | Tripleo
by Swogat Pradhan 21 May '22

21 May '22

Hi, I am currently deploying openstack wallaby using tripleo method, and my overcloud is up, now i want to change the overcloud domain specified in the udercloud domain and then redeploy the overcloud again. So if I change the undercloud.conf to the new domain and run openstack undercloud install, will it affect the already inspected nodes, provisioned network, ceph and nodes? Do I have to do introspection and other activities again? My plan was to : 1. change the domain in undercloud.conf 2. run openstack undercloud install (hoping it doesn't affect anything else and just updates the domain name) 3. redeploy overcloud stack only using openstack overcloud deploy (no introspection, no node provision and other activities ). With regards, Swogat Pradhan

1 0

[all][tc] What's happening in Technical Committee: summary May 20, 2022: Reading: 5 min
by Ghanshyam Mann 20 May '22

20 May '22

Hello Everyone, Here is this week's summary of the Technical Committee activities. 1. TC Meetings: ============ * We had this week's meeting on May 19. Most of the meeting discussions are summarized in this email. Meeting summary logs are available @https://meetings.opendev.org/meetings/tc/2022/tc.2022-05-19-15.00.log.html * Next TC weekly meeting will be on May 26 Thursday at 15:00 UTC, feel free to add the topic on the agenda[1] by May 25. 2. What we completed this week: ========================= * Changed new release cadence terminology from tick-tock to "SLURP" [2][3]. 3. Activities In progress: ================== TC Tracker for Zed cycle ------------------------------ * Zed tracker etherpad includes the TC working items[4], we have started the many items. Open Reviews ----------------- * Seven open reviews for ongoing activities[5]. Change OpenStack release naming policy proposal ----------------------------------------------------------- As the next step, we will have a voice call to figure out how to use the number/name in our development cycle/tooling. Meeting detail is shared in ML[6] New release cadence "SLURP" open items -------------------------------------------------- 1. release notes strategy: Brian will be proposing the agreed approach for release notes for the "SLURP" releases. Improve project governance --------------------------------- Slawek has the proposal the framework up and it is under review[7]. New ELK service dashboard: e-r service ----------------------------------------------- Not much update in this than last week. TripleO team and dpawlik are working on the e-r repo merge and hosting part. Consistent and Secure Default RBAC ------------------------------------------- We will have our next call on May 24[8], feel free to add the topic you would like to discuss in etherpad[9]. We will try to cover the heat topic if there is feedback on Takashi sent an email asking the feedback about the 'split stack' approach[10] 2021 User Survey TC Question Analysis ----------------------------------------------- No update on this. The survey summary is up for review[11]. Feel free to check and provide feedback. Zed cycle Leaderless projects ---------------------------------- No updates on this. Only Adjutant project is leaderless/maintainer-less. We will check Adjutant's the situation again on ML and hope Braden will be ready with their company side permission[12]. Fixing Zuul config error ---------------------------- Requesting projects with zuul config error to look into those and fix them which should not take much time[13][14]. Project updates ------------------- * None 4. How to contact the TC: ==================== If you would like to discuss or give feedback to TC, you can reach out to us in multiple ways: 1. Email: you can send the email with tag [tc] on openstack-discuss ML[15]. [2] https://governance.openstack.org/tc/goals/selected/fips.html 2. Weekly meeting: The Technical Committee conduct a weekly meeting every Thursday 15 UTC [16] 3. Ping us using 'tc-members' nickname on #openstack-tc IRC channel. [1] https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting [2] https://review.opendev.org/c/openstack/governance/+/840354 [3] http://lists.openstack.org/pipermail/openstack-discuss/2022-May/028540.html [4] https://etherpad.opendev.org/p/tc-zed-tracker [5] https://review.opendev.org/q/projects:openstack/governance+status:open [6] http://lists.openstack.org/pipermail/openstack-discuss/2022-May/028618.html [7] https://review.opendev.org/c/openstack/governance/+/839880 [8] https://wiki.openstack.org/wiki/Consistent_and_Secure_Default_Policies_Popu… [9] https://etherpad.opendev.org/p/rbac-zed-ptg#L97 [10] http://lists.openstack.org/pipermail/openstack-discuss/2022-May/028490.html [11] https://review.opendev.org/c/openstack/governance/+/836888 [12] http://lists.openstack.org/pipermail/openstack-discuss/2022-March/027626.ht… [13] https://etherpad.opendev.org/p/zuul-config-error-openstack [14] http://lists.openstack.org/pipermail/openstack-discuss/2022-May/028603.html [15] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-discuss [16] http://eavesdrop.openstack.org/#Technical_Committee_Meeting -gmann

1 0

[stable][glance] backport exception request for external HTTP API response code change
by Brian Rosmaita 20 May '22

20 May '22

Hello stable maintenance core team, We recently noticed that an Image API call implemented in Yoga, which returns no content, is returning a 200 instead of a 202 (as the design [0] had specified). We would like to correct this in master (Zed development) and in the stable/yoga branch. Here are our reasons why we think this is a legitimate exception to the no-http-api-changes-backport policy: (1) Even ignoring the lack of a response body, a 200 (OK) is misleading because operation initiated by the PUT /v2/cache/{image_id} request may not succeed. A 202 (Accepted) signals more clearly to the operator that some followup is necessary to be sure the image has been cached. (2) This is intended as an admin-only API call; the default policy is admin-only. So it has not been exposed to end-users. (3) The change [1] was first released in Yoga and there has not been much time for admins to begin consuming this feature. Further, there has not yet been a release from stable/yoga after glance 24.0.0. For these reasons, we request that the glance team be allowed to make this change. Thank you for considering this proposal! [0] https://opendev.org/openstack/glance-specs/blame/commit/2638ada23d92f714f54… [1] https://review.opendev.org/c/openstack/glance/+/792022

3 2

Call for OpenStack projects virtual updates
by Sunny Cai 20 May '22

20 May '22

Hi everyone, As the Berlin Summit is approaching in June, we are collecting project update recordings from each OpenInfa community to showcase what each project has accomplished in the past year/release. Please let me know if you’re interested in doing a prerecorded video of your project’s most recent updates. We will post all recordings on the OpenInfra Foundation YouTube channel and promote them at the Summit. Recordings will also be posted in the project navigator. We recommend the recordings to be less than 10 minutes long. If you would like to present with slides, here is a slide deck template if you need [1]. If you can submit your project recording to me by Friday, May 27, we’d love to promote them at the upcoming Berlin Summit. If you prefer to submit it after the Summit, I’ll send out another reminder on June 15 to collect any reminding recordings. Please let me know if you have any questions. [1] https://docs.google.com/presentation/d/1SlWayfGc9CYAsKnS43UxVjO8NYr1pR-0Gi4… Thanks, Sunny Cai OpenInfra Foundation Marketing & Community

1 1

[release] Release countdown for week R-19, May 23 - 27
by Előd Illés 20 May '22

20 May '22

Development Focus ----------------- We are now past the Zed-1 milestone. Teams should now be focused on feature development. General Information ------------------- Our next milestone in this development cycle will be Zed-2, on July 14th, 2022. This milestone is when we freeze the list of deliverables that will be included in the Zed final release, so if you plan to introduce new deliverables in this release, please propose a change to add an empty deliverable file in the deliverables/zed directory of the openstack/releases repository. Now is also generally a good time to look at bugfixes that were introduced in the master branch that might make sense to be backported and released in a stable release. If you have any question around the OpenStack release process, feel free to ask on this mailing-list or on the #openstack-release channel on IRC. Upcoming Deadlines & Dates -------------------------- Zed-2 Milestone: July 14th, 2022 OpenInfra Summit: June 7-9, 2022 (Berlin) Előd Illés irc: elodilles

1 0

Re: [TripleO] Support of PTP in Openstack Train
by Anirudh Gupta 20 May '22

20 May '22

Hi Team, Is there any Support for PTP in Openstack TripleO ? When I was executing the Overcloud deployment script, passing the PTP yaml, it gave the following option at the starting *service OS::TripleO::Services::Ptp is enabled in /usr/share/openstack-tripleo-heat-templates/environments/services/ptp.yaml. Deprecated in favour of OS::TripleO::Services::TimesyncDo you still wish to continue with deployment [y/N]* even if passing Y, it starts executing for sometime and the gives the following error *Error: Evaluation Error: Error while evaluating a Function Call, Could not find class ::tripleo::profile::base::time::ptp for overcloud-controller-0.localdomain (file: /var/lib/tripleo-config/puppet_step_config.pp, line: 41, column: 1) on node* overcloud-controller-0.localdomain"], "stdout": "", "stdout_lines": []} Can someone suggest some pointers in order to resolve this issue and move forward? Regards Anirudh Gupta On Fri, May 6, 2022 at 3:50 PM Anirudh Gupta <anyrude10(a)gmail.com> wrote: > Hi Team, > > I have installed Undercloud with Openstack Train Release successfully. > I need to enable PTP service while deploying the overcloud for which I > have included the service in my deployment > > openstack overcloud deploy --templates \ > -n /home/stack/templates/network_data.yaml \ > -r /home/stack/templates/roles_data.yaml \ > -e /home/stack/templates/environment.yaml \ > -e /home/stack/templates/environments/network-isolation.yaml \ > -e /home/stack/templates/environments/network-environment.yaml \ > -e > /usr/share/openstack-tripleo-heat-templates/environments/services/ironic-conductor.yaml > \ > -e > /usr/share/openstack-tripleo-heat-templates/environments/services/ironic-inspector.yaml > \ > -e > /usr/share/openstack-tripleo-heat-templates/environments/services/ironic-overcloud.yaml > \ > * -e > /usr/share/openstack-tripleo-heat-templates/environments/services/ptp.yaml > \* > -e /home/stack/templates/ironic-config.yaml \ > -e > /usr/share/openstack-tripleo-heat-templates/environments/docker-ha.yaml \ > -e > /usr/share/openstack-tripleo-heat-templates/environments/podman.yaml \ > -e /home/stack/containers-prepare-parameter.yaml > > But it gives the following error > > 2022-05-06 11:30:10.707655 | 5254001f-9952-7fed-4a6d-000000002fde | FATAL > | Wait for puppet host configuration to finish | overcloud-controller-0 | > error={"ansible_job_id": "5188783868.37685", "attempts": 3, "changed": > true, "cmd": "set -o pipefail; puppet apply > --modulepath=/etc/puppet/modules:/opt/stack/puppet-modules:/usr/share/openstack-puppet/modules > --detailed-exitcodes --summarize --color=false > /var/lib/tripleo-config/puppet_step_config.pp 2>&1 | logger -s -t > puppet-user", "delta": "0:00:04.440700", "end": "2022-05-06 > 11:30:12.685508", "failed_when_result": true, "finished": 1, "msg": > "non-zero return code", "rc": 1, "start": "2022-05-06 11:30:08.244808", > "stderr": "<13>May 6 11:30:08 puppet-user: Warning: The function 'hiera' is > deprecated in favor of using 'lookup'. See > https://puppet.com/docs/puppet/6.14/deprecated_language.html\n<13>May 6 > 11:30:08 puppet-user: (file & line not available)\n<13>May 6 11:30:08 > puppet-user: Warning: /etc/puppet/hiera.yaml: Use of 'hiera.yaml' version 3 > is deprecated. It should be converted to version 5\n<13>May 6 11:30:08 > puppet-user: (file: /etc/puppet/hiera.yaml)\n<13>May 6 11:30:08 > puppet-user: Warning: Undefined variable '::deploy_config_name'; \n<13>May > 6 11:30:08 puppet-user: (file & line not available)\n<13>May 6 11:30:08 > puppet-user: Warning: Unknown variable: '::deployment_type'. (file: > /etc/puppet/modules/tripleo/manifests/profile/base/database/mysql/client.pp, > line: 89, column: 8)\n<13>May 6 11:30:08 puppet-user: error: Could not > connect to controller: Connection refused\n<13>May 6 11:30:08 puppet-user: > Error: Evaluation Error: Error while evaluating a Function Call, Could not > find class ::tripleo::profile::base::time::ptp for > overcloud-controller-0.localdomain (file: > /var/lib/tripleo-config/puppet_step_config.pp, line: 41, column: 1) on node > overcloud-controller-0.localdomain", "stderr_lines": ["<13>May 6 11:30:08 > puppet-user: Warning: The function 'hiera' is deprecated in favor of using > 'lookup'. See https://puppet.com/docs/puppet/6.14/deprecated_language.html", > "<13>May 6 11:30:08 puppet-user: (file & line not available)", "<13>May 6 > 11:30:08 puppet-user: Warning: /etc/puppet/hiera.yaml: Use of 'hiera.yaml' > version 3 is deprecated. It should be converted to version 5", "<13>May 6 > 11:30:08 puppet-user: (file: /etc/puppet/hiera.yaml)", "<13>May 6 11:30:08 > puppet-user: Warning: Undefined variable '::deploy_config_name'; ", > "<13>May 6 11:30:08 puppet-user: (file & line not available)", "<13>May 6 > 11:30:08 puppet-user: Warning: Unknown variable: '::deployment_type'. > (file: > /etc/puppet/modules/tripleo/manifests/profile/base/database/mysql/client.pp, > line: 89, column: 8)", "<13>May 6 11:30:08 puppet-user: error: Could not > connect to controller: Connection refused", "<13>May 6 11:30:08 > puppet-user: *Error: Evaluation Error: Error while evaluating a Function > Call, Could not find class ::tripleo::profile::base::time::ptp for > overcloud-controller-0.localdomain (file: > /var/lib/tripleo-config/puppet_step_config.pp, line: 41, column: 1) on node* > overcloud-controller-0.localdomain"], "stdout": "", "stdout_lines": []} > > > Can someone please help in resolving this issue? > > Regards > Anirudh Gupta > >

2 19

[tripleo] hold recheck tripleo-heat-templates gate blocker tox-py36 - opendev infra mirrors?
by Marios Andreou 20 May '22

20 May '22

Hello Unfortunately instead of happy friday \o/ we get a tripleo-heat-templates gate blocker on the tox-py36 job (bug is at [1]). We cannot reproduce this locally and suspect there may be an issue with pypi mirrors in opendev infra? We are digging here but please refrain from recheck until we find a workaround thank you for your help o/ regards, marios (for the tripleo-ci team) [1] https://bugs.launchpad.net/tripleo/+bug/1974244

1 1

[stable][glance] Proposing Cyril for stable branch core
by Abhishek Kekane 19 May '22

19 May '22

Hi All, Cyril Roelandt is helping a lot in the review process on master as well as stable branches. I would like to have him in our 'glance-stable-maint' team. Could you please help me to add 'cyril(a)redhat.com' to the stable core team. Thanks & Best Regards, Abhishek Kekane

2 2

[keystone] Gerrit Group Updates
by Douglas Mendizabal 19 May '22

19 May '22

Hi openstack-discuss, The Keystone team is doing a big of housekeeping with our Gerrit groups: For keystone-core we'll be removing folks who have not reviewed any patches in 60+ days. [1] This is going to leave us with 3 active core reviewers, so we are actively looking for folks who want to help review patches. Let us know if you're interested! For keystone-stable-int [2], I need to figure out who owns this group to get myself added as current PTL. Unfortunately, Colleen is no longer contributing to the project and Lance has not been able to review stable branch patches recently. Please let me know if you can help me get this group updated. Thanks, - Douglas Mendizábal Keystone PTL [1] https://www.stackalytics.io/report/contribution?module=keystone-group&proje… [2] https://review.opendev.org/admin/groups/ed7e98cd14f0ec4dfd09d10bbb64e1bd3ac…

2 1

Save the Date: PTG October 2022
by Erin Disney 19 May '22

19 May '22

We are very excited to announce our first in-person Project Teams Gathering (PTG) since Shanghai in 2019! Can’t wait to get everyone back together again this October 17-20th at the Hyatt Regency in lovely Columbus, Ohio. The venue is located in the heart of downtown, within walking distance of local sports arenas and the Short North Arts District that hosts dozens of restaurants, coffee shops, bars, art galleries and shops. Kendall Nelson will be reaching out soon to start collecting team sign ups so everyone knows who is planning on meeting in Columbus. We will also have registration, reduced rate hotel block, and sponsorship information coming soon, all of which will be posted to openinfra.dev/ptg <http://openinfra.dev/ptg> once available. Stay tuned and we can’t wait to see you all in Columbus! Erin Disney Event Marketing Open Infrastructure Foundation

1 0

[neutron] Drivers meeting agenda - 20.05.2022.
by Lajos Katona 19 May '22

19 May '22

Hi Neutron Drivers, The agenda for tomorrow's drivers meeting is at [1]. We have one RFE to discuss tomorrow: * [RFE] Allow setting --dst-port for all port based protocols at once (#link https://bugs.launchpad.net/neutron/+bug/1973487) [1] https://wiki.openstack.org/wiki/Meetings/NeutronDrivers#Agenda See you at the meeting tomorrow. Lajos Katona (lajoskatona)

1 0

[ironic] [requirements] broken libvirt-python on yoga on stream 9
by Dmitry Tantsur 19 May '22

19 May '22

Hi all, It is happening again, the Bifrost CI is broken because libvirt-python cannot be built from source, this time on Stream 9. Missing type converters: int *:1 ERROR: failed virDomainQemuMonitorCommandWithFiles I created a gist with a reproducer: https://gist.github.com/dtantsur/835303c6a68ed77157016f5955183115. I cannot count how many times we had to deal with similar errors. I assume, libvirt-python has to be newer than the installed Python (8.2.0 in CS9, 8.0.0 in constraints). Should we stop constraining libvirt-python? Any other ideas? Dmitry -- Red Hat GmbH <https://www.redhat.com/de/global/dach>, Registered seat: Werner von Siemens Ring 14, D-85630 Grasbrunn, Germany Commercial register: Amtsgericht Muenchen/Munich, HRB 153243,Managing Directors: Ryan Barnhart, Charles Cachera, Michael O'Neill, Amy Ross

5 7

[TripleO] Gate blocker on Master - standalone-on-multinode-ipa failing
by Sandeep Yadav 19 May '22

19 May '22

Hello All, We have a check/gate blocker on Master branch - standalone-on-multinode-ipa[0] job is failing with bug[1]. Please hold rechecks on master till [1] resolves. [0] https://zuul.openstack.org/builds?job_name=tripleo-ci-centos-9-standalone-o… [1] https://bugs.launchpad.net/bugs/1973863 Thank you Sandeep(on behalf of tripleo-ci)

1 1

[keystone][nova][placement] audit logs
by Sharath Ck 19 May '22

19 May '22

Hi, Placement does not have an api-paste.ini configuration file. Also Placement does not have a placeholder to mention or add middleware. Hence keystone audit middleware is not supported in Placement ? Need to collect the audit events from Nova itself. Can anyone please confirm this. Regards, Sharath

2 2

[magnum] [xena] [IPv6]
by Namrata Sitlani 19 May '22

19 May '22

Hello All, We run release Xena, and we have deployed Kubernetes version 1.21.10 on Magnum with Fedora CoreOS version 34 and we are trying to have IPv6 support for that Kubernetes cluster, as Kubernetes 1.21 and later versions have dual-stack(IPv4/IPv6) support enabled by default. To achieve the same, we used a network with both IPv4 and IPv6 subnets and we got a successful creation of the cluster. The compute instances of the cluster get both IPv4 and IPv6 addresses, but the master and minion nodes get IPv4 as external IP, and also the container does not get an IPv6 address. Can someone please help us with the information, what changes are required to be made at the magnum client-side to have an IPv6 supported Kubernetes Cluster? Thanks, Namrata

1 0