- openstack-discuss - lists.openstack.org

[qa][ptg] Summary of the discussed topics
by Martin Kopec 26 Apr '21

26 Apr '21

Hi all, here's a summary of the topics we have discussed during QA sessions: * Migration of devstack and Tempest tests to new secure RBAC There was a great discussion about this goal, many good points raised. See the PTG etherpad for more details. * Patrole execution time improvement This is up for a few cycles already and is missing a volunteer. We will discuss next steps towards this goal during one of the following QA office hour meetings. * What FeatureFreeze means for QA projects We have discussed the types of changes we should avoid merging during Feature Freeze. * Tempest plugins should use master tempest in their testing jobs We have noticed that many check/gate CI jobs use latest tempest tag (downloaded form pip) instead of the master branch we may potentially lead to approving changes which are not compatible with the master branch of tempest. * Fix backward compatibility of run-tempest role We deprecated couple of tempest's CLI args and replaced them by new ones in 26.1.0, however, as it turns out the backward compatibility conditions in run-tempest role are not sufficient. We will try to create a stable job variant to be used in jobs with older tempest versions. * Cleanup of duplicated scenario.manager Announcing tempest.scenario.manager a stable interface in tempest 27.0.0 raises a question when to remove the duplicated scenario.manager in plugins' codebase. * Whether to branch tempest No, we won't. We wrote down all pros and cons. The main fact against is that per an agreement all stable releases + master should be tested with the same set of tests. However, we will discuss branching for EM with the release team. Full discussion (PTG etherpad): https://etherpad.opendev.org/p/qa-xena-ptg QA's priority items for Xena cycle: https://etherpad.opendev.org/p/qa-xena-priority Regards, -- Martin Kopec Senior Software Quality Engineer Red Hat EMEA <https://red.ht/sig>

1 0

rocky 2 node installation unable to access internet in instance
by cloud learner 25 Apr '21

25 Apr '21

Dear All, I am new to this, installed rocky on centos 7 with 2 node controller and compute nodes, followed https://docs.openstack.org/neutron/rocky/install/environment-networking-con… as mentioned in the document used vxlan and the Networking option 2: Self service network and used linuxbridge, verified all the steps as mentioned in the document and all things are working fine but i am unable to access the internet in instances. The network layout image attached herewith for reference there are two ports, one is for management and another is a provider network through which the internet is accessible. The provider network is 10.1.0.0/16 and the gateway is 10.1.1.1 which I have set in the external network.. When i run # ip netns command on controller node it shows qdhcp and qrouter [root@controller ~]# ip netns qrouter-2f84ff08-7293-4822-a4c1-57278d80f1cf (id: 2) qdhcp-186cc689-267b-49ca-90a7-b312fd0367f3 (id: 1) qdhcp-513292db-3eb8-4902-974f-4bb9c4757652 (id: 0) but when I run # ip netns command on compute it shows nothing. [root@controller ~]# openstack network agent list +--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+ | ID | Agent Type | Host | Availability Zone | Alive | State | Binary | +--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+ | 0286adac-2a32-4866-8b75-95f190c2c310 | Linux bridge agent | compute1 | None | :-) | UP | neutron-linuxbridge-agent | | 47728860-d7b0-4b15-b3dc-1f8a6bf81125 | Metadata agent | controller | None | :-) | UP | neutron-metadata-agent | | 4957d1b2-ea33-4034-9869-8518438416b0 | L3 agent | controller | nova | :-) | UP | neutron-l3-agent | | a81e4138-0190-41ef-b0a1-bd1b66c01343 | DHCP agent | controller | nova | :-) | UP | neutron-dhcp-agent | | ea43868d-8394-4cf5-a104-edc5ecbaff9e | Linux bridge agent | controller | None | :-) | UP | neutron-linuxbridge-agent | +--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+ Is there any need to create br-int or br-ex on nodes because that is not mentioned in the link which i have followed, if need kindly guide the steps to do that and on which node these steps need to follow.

1 0

How do I delete my account of review.opendev.org?
by Rikimaru Honjo 25 Apr '21

25 Apr '21

Hi, How do I delete my account of review.opendev.org? I couldn't find the UI or documents for it. I'm sorry if I overlooked it. Best regards,

2 4

audit middleware logs
by Basireddy Hanumantha Reddy 25 Apr '21

25 Apr '21

Hi, I am using pike version. I have configured nova service as mentioned in https://docs.openstack.org/keystonemiddleware/pike/audit.html 1. added in api-paste.ini file [ filter : audit ] paste . filter_factory = keystonemiddleware . audit : filter_factory audit_map_file = / etc / nova / api_audit_map . conf 2. verified composite:openstack_compute_api_v2 section. 3. Copied the api_audit_map.conf file to the /etc/nova/ After that I have restared all openstack services. But I couldn't find any audit logs with oslo.messaging.notification.audit.http.request in nova.log file I can see only logs related to oslo.messaging as openstack nova-scheduler[17534]: INFO oslo.messaging.notification.scheduler.select_destinations.start [None req-01612e5a-37d9-4b62-970a-fcf7d3c409ad admin admin] {"event_type": "scheduler.select_destinations.start", "timestamp": "2021-04-25 11:10:40.249260", "payload": {"request_spec": {"instance_properties": {"root_gb": 1, "uuid": "ee4ddae2-9397-401c-b80f-543061e75dd2", "availability_zone": null, "ephemeral_gb": 0, "numa_topology": null, "memory_mb": 512, "vcpus": 1, "project_id": "d078fd26a1204e6abede5faca777da8b", "pci_requests": {"requests": []}}, "instance_type": {"disabled": false, "root_gb": 1, "name": "m1.tiny", "flavorid": "1", "deleted": false, "created_at": "2021-04-22T17:34:26.000000", "ephemeral_gb": 0, "updated_at": null, "memory_mb": 512, "vcpus": 1, "extra_specs": {}, "swap": 0, "rxtx_factor": 1.0, "is_public": true, "deleted_at": null, "vcpu_weight": 0, "id": 6}, "image": {"status": "active", "name": "cirros-0.3.5-x86_64-disk", "container_format": "bare", "created_at": "2021-04-22T17:32:54.000000", "disk_format": "qcow2", "updated_at": "2021-04-22T17:32:55.000000", "id": "e0d062fa-2b3c-4a6e-90e4-3ef796c3a594", "min_disk": 0, "min_ram": 0, "checksum": "f8ab98ff5e73ebab884d80c9dc9c7290", "owner": "d078fd26a1204e6abede5faca777da8b", "properties": {}, "size": 13267968}, "num_instances": 1}}, "priority": "INFO", "publisher_id": "scheduler.openstack", "message_id": "3128ed95-1599-46f8-b110-93fcb0776812"} what I understood that as part of audit middleware, logs should contain oslo.messaging.notification.audit.http.request and oslo.messaging.notification.audit.http.response. Please suggest what I am missing. Thanks, Hanumantha Reddy.

1 0

Recall: [cyborg][ptg] Cyborg vPTG Summary April 2021
by Wang, Xin-ran 25 Apr '21

25 Apr '21

Wang, Xin-ran would like to recall the message, "[cyborg][ptg] Cyborg vPTG Summary April 2021".

1 0

Recall: [cyborg][ptg] Cyborg vPTG Summary April 2021
by Wang, Xin-ran 25 Apr '21

25 Apr '21

Wang, Xin-ran would like to recall the message, "[cyborg][ptg] Cyborg vPTG Summary April 2021".

1 0

[cyborg][ptg] Cyborg vPTG Summary April 2021
by Wang, Xin-ran 25 Apr '21

25 Apr '21

Hi all, Thanks for all your participation! We've conducted a successful meeting last week. Here is the aggregated summary from Cyborg vPTG discussion. Please check it out and feel free to feedback any concerns you might have. We did a retrospective of Wallaby release, including: * We supports more operations supported for a VM with accelerator attached. * We introduced new drivers for Intel x710 NIC and Inspur's NVMe SSD Card. * We implemented a new configuration file allowing more flexible device configuration. Topic discussion: Here's some major discussion and conclusion of Cyborg vPTG. For more details, please refer to the etherpad[1]. * More nova operation supporting: - We prioritized the tasks: 1. suspend/resume. 2. cold migration. 3. live migration. * vGPU support: - We reached an internal agreement on whole workflow which can be apply as a generic framework for mdev device. * API enhancement: Some of the following items requires a new micro-version. - Add refresh policy check for all APIs. - Add device profile update API. - Add ARQ query by multiple instances API. - Add disable/enable device API, this one requires a spec first. - Enhance device profile show API with more information. * Cleanup issue: - This issue comes from the case where one compute node shutdown accidently, and the accelerator records in placement and cyborg DB remains as the orphaned resources. We agreed to implement a mechanism to clean up the orphaned resources, this one also need a spec. [1] https://etherpad.opendev.org/p/cyborg-xena-ptg Thanks, Xin-Ran Wang

1 0

[Ironic] Proposal to move weekly meeting 1 hour earlier
by Kanevsky, Arkady 24 Apr '21

24 Apr '21

Team, On today's PTG Interop meeting we proposed to move weekly Friday meeting 1 hour earlier to 16:00 UTC. Please, respond if the proposed time will or not will work for you. Thanks, Arkady Kanevsky, Ph.D. SP Chief Technologist & DE Dell Technologies office of CTO Dell Inc. One Dell Way, MS PS2-91 Round Rock, TX 78682, USA Phone: 512 7204955

4 3

[nova][placement] Xena PTG results
by Balazs Gibizer 24 Apr '21

24 Apr '21

Hi, Thank you for joining the nova PTG! We recorded our agreements in the etherpad[1]. And I made an export of that etherpad (see attached) to avoid loosing the information. Cheers, gibi [1] https://etherpad.opendev.org/p/nova-xena-ptg

1 0

[keystone][victoria] keystone fernet token not found/recognized
by Shalabh Goel 23 Apr '21

23 Apr '21

Hi, I have installed Openstack victoria on Ubuntu server 20.04. The issue is that other services like nova and neutron are not able to authenticate with the keystone service. In the keystone log, the following lines are appearing. 2021-04-23 13:24:53.217 23331 WARNING keystone.server.flask.application [req-2b575a77-2f9f-444b-9f31-061de41fd602 f3571e3ee8d84fb0ba14bdbe2542916d 930b9693e7694aa68370352c7b911168 - default default] Could not recognize Fernet token: keystone.exception.TokenNotFound: Could not recognize Fernet token Also, I am able to run openstack client commands related to keystone on the server which tells me that keystone related things are working fine. But I am not able to execute commands like openstack compute service list. I am not able to find anything on this after searching online. Can this be an issue with the way haproxy is configured? Since there are 2 servers with keystone installed on them with pacemaker and haproxy. Please tell me what I can do to solve this issue. Thanks Shalabh

2 1

Create OpenStack VMs in few seconds
by open infra 23 Apr '21

23 Apr '21

Hi, I was looking for a way to provision and connect to VMs within a few seconds and ended up in the OpenStack Summit demo on 'OpenStack Virtual Machine Quickly Available in One Second'. I highly appreciate if someone can provide a tutorial or related documentation on how to achieve this? Regards, Danishka

6 16

[TripleO] Xena PTG wrapup and links
by Marios Andreou 23 Apr '21

23 Apr '21

On Friday, April 23, 2021, Marios Andreou <marios(a)redhat.com> wrote: > On Fri, Apr 23, 2021 at 3:37 PM Marios Andreou <marios(a)redhat.com> wrote: > > > > Hello TripleO o/ > > > > a massive ** THANK YOU! ** to everyone that took part in our PTG > meeting and especially the folks that prepared for 18 sessions across four > days. Participants were variable but at most I saw/noticed these numbers: > Monday:54, Tuesday:49, Wednesday:46, Thursday:42 > > > > I've included a condensed listing below [3] for convenience and you can > find the full schedule at [1] > > with session descriptions, links to individual topic etherpads and links > to the daily recordings. Note there is a problem with day 1 recording, I am > waiting to hear back but otherwise that's all we have right now (day 2/3/4 > are complete as far as i can see - didn't watch it all again!). > > > > Our "team photo" from Monday is at [2] apologies to the person who is > hidden behind the jitsi controls. In my defense we did this when we just > switched to meetpad after the initial zoom issues. For what it's worth, if > you send me a link to an updated photo I can add you in again ;) > > > > regards, marios > > > > [1] https://etherpad.opendev.org/p/tripleo-ptg-xena > > > > [2] https://i.imgur.com/mxaGaSf.jpg > > > > [3] DAY 1: > > Topic: Wallaby cycle community retrospective Proposer: marios > > Topic: Plan/Swift removal update Proposer: cloudnull and dropped ramishra here ^^^ sorry ! folks better just refer directly to https://etherpad.opendev.org/p/tripleo-ptg-xena for the correct info seems my copy pasta in this email was not very good i dropped names from the presenters thanks > > Topic: Ephemeral Heat Update Proposer: slagle > > Topic: update and planned work networks & ports v2 "no heat" Proposer: > hjensas > Topic: Ceph Integration Update Proposer: gfidente, fmount > > apologies John: I dropped ", fultonj" on the ceph session in my copy/pasta > > thanks > -- _sent from my mobile - sorry for spacing spelling etc_

1 0

[TripleO] Xena PTG wrapup and links
by Marios Andreou 23 Apr '21

23 Apr '21

Hello TripleO o/ a massive ** THANK YOU! ** to everyone that took part in our PTG meeting and especially the folks that prepared for 18 sessions across four days. Participants were variable but at most I saw/noticed these numbers: Monday:54, Tuesday:49, Wednesday:46, Thursday:42 I've included a condensed listing below [3] for convenience and you can find the full schedule at [1] with session descriptions, links to individual topic etherpads and links to the daily recordings. Note there is a problem with day 1 recording, I am waiting to hear back but otherwise that's all we have right now (day 2/3/4 are complete as far as i can see - didn't watch it all again!). Our "team photo" from Monday is at [2] apologies to the person who is hidden behind the jitsi controls. In my defense we did this when we just switched to meetpad after the initial zoom issues. For what it's worth, if you send me a link to an updated photo I can add you in again ;) regards, marios [1] https://etherpad.opendev.org/p/tripleo-ptg-xena [2] https://i.imgur.com/mxaGaSf.jpg [3] DAY 1: Topic: Wallaby cycle community retrospective Proposer: marios Topic: Plan/Swift removal update Proposer: cloudnull Topic: Ephemeral Heat Update Proposer: slagle Topic: update and planned work networks & ports v2 "no heat" Proposer: hjensas Topic: Ceph Integration Update Proposer: gfidente, fmount DAY2: Topic: Lets move to whole disk overcloud-full images by default Proposer: sbaker Topic: Get rid of the service healthchecks Proposer: Tengu Topic: Tripleo Repos - single sourcing repo setup Proposer: sshaidm, marios, chkumar, rlandy Topic: One yaml to rule all tempest tests Proposer: arxcruz Topic: TripleO.Next Proposer: mwhahaha DAY3: Topic: Get rid of the terrible tripleo-ansible-inventory script Proposer: Tengu Topic: Validation Framework UI Output Proposer: dpeacock/strider/matbu/jpodivin Topic Validation Framework Next Generation Proposer: dpeacock Topic: BGP Routing with FRR Proposer: dsneddon Topic: Consolidate Update/Upgrade Proposer: holser DAY4: Topic: RBAC and TripleO Proposer: LBragstad, HRybacki Topic: What and when to expect w/ CentOS-Stream-9 Proposer: Wes Hayutin Topic: os-migrate brief introduction Proposer: jistr, ccamacho

1 1

Re: [openstack-community] Error in downloading Devstack
by Amy Marrich 23 Apr '21

23 Apr '21

Jean, I'm including the OpenStack Discuss list as it is the appropriate list. In order to help we'll need to know what issues you're seeing. We are finishing up our Project Team Gathering today so it may be a few days to get a response. Thanks, Amy (spotz) On Fri, Apr 23, 2021 at 1:50 AM Jean Richard <wilrichard00(a)gmail.com> wrote: > Dear Openstack Community, > > I am new to Openstack and I am having problems downloading Devstack. I > followed the instructions of "DevStack Docs" and some books. But I am > getting a lot of error messages. Can someone please help me with a good > reference. > I am looking forward to hearing from you. > _______________________________________________ > Community mailing list > Community(a)lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/community >

1 0

OpenStack Wallaby for Ubuntu 21.04 and Ubuntu 20.04 LTS
by Corey Bryant 23 Apr '21

23 Apr '21

The Ubuntu OpenStack team at Canonical is pleased to announce the general availability of OpenStack Wallaby on Ubuntu 21.04 (Hirsute Hippo) and Ubuntu 20.04 LTS (Focal Fossa) via the Ubuntu Cloud Archive. Details of the Wallaby release can be found at: https://www.openstack.org/software/wallaby. To get access to the Ubuntu Wallaby packages: == Ubuntu 21.04 == OpenStack Wallaby is available by default for installation on Ubuntu 21.04. == Ubuntu 20.04 LTS == The Ubuntu Cloud Archive for OpenStack Wallaby can be enabled on Ubuntu 20.04 by running the following command: sudo add-apt-repository cloud-archive:wallaby The Ubuntu Cloud Archive for Wallaby includes updates for: aodh, barbican, ceilometer, ceph (16.2.0), cinder, designate, designate-dashboard, dpdk (20.11.1), glance, gnocchi, heat, heat-dashboard, horizon, ironic, ironic-ui, keystone, magnum, magnum-ui, manila, manila-ui, masakari, mistral, murano, murano-dashboard, networking-arista, networking-bagpipe, networking-baremetal, networking-bgpvpn, networking-hyperv, networking-l2gw, networking-mlnx, networking-odl, networking-sfc, neutron, neutron-dynamic-routing, neutron-vpnaas, nova, octavia, octavia-dashboard, openstack-trove, openvswitch (2.15.0), ovn (20.12.0), ovn-octavia-provider, panko, placement, sahara, sahara-dashboard, senlin, swift, trove-dashboard, vmware-nsx, vitrage, watcher, watcher-dashboard, zaqar, and zaqar-ui. For a full list of packages and versions, please refer to: http://reqorts.qa.ubuntu.com/reports/ubuntu-server/cloud-archive/wallaby_ve… == Reporting bugs == If you have any issues please report bugs using the ‘ubuntu-bug’ tool to ensure that bugs get logged in the right place in Launchpad: sudo ubuntu-bug nova-conductor Thank you to everyone who contributed to OpenStack Wallaby. Enjoy and see you in Xena! Corey (on behalf of the Ubuntu OpenStack Engineering team)

2 4

[kuryr] vPTG April 2021
by Maysa De Macedo Souza 23 Apr '21

23 Apr '21

Hello, Two sessions were scheduled for Kuryr on the upcoming PTG: - 7-8 UTC on April 20 - 2-3 UTC on April 22 Everyone is more than welcome to join the sessions and check our future plans, give feedback or discuss anything regarding Kuryr. Even though participation is free registration is needed[1]. Regards, Maysa Macedo. [1] https://april2021-ptg.eventbrite.com

2 2

[largescale-sig] PTG meeting: April 21, 15utc
by Thierry Carrez 23 Apr '21

23 Apr '21

Hi everyone, Our next Large Scale SIG meeting will be this Wednesday at 15utc in the Ocata meeting room from the virtual PTG[1]. You can doublecheck how it translates locally at: https://www.timeanddate.com/worldclock/fixedtime.html?iso=20210421T15 Please register[2] to the PTG if you haven't already, it will give you access to communications explaining how to join. We'll do a general presentation of the Large Scale SIG activities, show off our "Large Scale Journey" documentation, and discuss the topics of our next video meeting(s). Feel free to add other topics to our PTG meeting agenda at: https://etherpad.opendev.org/p/apr2021-ptg-large-scale See you there! [1] http://ptg.openstack.org/ptg.html [2] https://www.openstack.org/ptg/ Regards, -- Thierry Carrez

1 1

[ironic] Ironic Whiteboard v2 call for reviews
by Jay Faulkner 23 Apr '21

23 Apr '21

Hi all, Iury and I spent some time this morning updating the Ironic whiteboard etherpad to include more immediately useful information to contributors. We placed this updated whiteboard at https://etherpad.opendev.org/p/IronicWhiteBoardv2 -- our approach was to prune any outdated/broken links or information, and focus on making the first part of the whiteboard an easy one-click place for folks to see easy ways to contribute. All the rest of the information was carried over and reformatted. Once there is consensus from the team about this being a positive change, we should either replace the existing IronicWhiteBoard with the contents of the v2 page, or just update links to point to the new one instead. What do you all think? Thanks, Jay Faulkner

4 6

Placement service error on one of the controller nodes
by Shalabh Goel 22 Apr '21

22 Apr '21

Hi, I am setting up an Openstack environment with 2 controller nodes. I have installed placement service on both by following the steps from https://docs.openstack.org/placement/victoria/install/install-ubuntu.html#c… My first node is 192.168.2.14 and second is 192.168.2.15 with the virtual IP as 192.168.2.100 on which haproxy is used for listening. After restarting apache2 service, placement service is running on one first node ( 192.168.2.14) but is giving the following error on second one ( 192.168.2.15): 2021-04-23 10:39:03.314524 2021-04-23 10:39:03.314 8299 WARNING placement.db_api [-] TransactionFactory already started, not reconfiguring.\x1b[00m 2021-04-23 10:39:03.322774 2021-04-23 10:39:03.322 8299 WARNING keystonemiddleware.auth_token [-] AuthToken middleware is set with keystone_authtoken.service_token_roles_required set to False. This is backwards compatible but deprecated behaviour. Pl ease set this to True.\x1b[00m 2021-04-23 10:39:03.391538 2021-04-23 10:39:03.391 8299 WARNING keystonemiddleware.auth_token [-] Configuring www_authenticat e_uri to point to the public identity endpoint is required; clients may not be able to authenticate against an admin endpoint \x1b[00m 2021-04-23 10:39:03.394729 mod_wsgi (pid=8299): Failed to exec Python script file '/usr/bin/placement-api'. 2021-04-23 10:39:03.394771 mod_wsgi (pid=8299): Exception occurred processing WSGI script '/usr/bin/placement-api'. The second issue is that I am not able to use openstack compute command. It throws authentication error but I am able to use other openstack commands. I found this line on placement-api log in apache directory 2021-04-23 10:46:08.450216 2021-04-23 10:46:08.449 1421 WARNING keystonemiddleware.auth_token [req-f17428d0-183f-4e3d-8343-74b04dad7944 - - - - -] Authorization failed for token: keystonemiddleware.auth_token._exceptions.InvalidToken\x1b[00 How can I solve these issues. Are any other details needed? Thanks -- Shalabh Goel

1 0

Regarding whether sushy will support etag
by hus.fnst＠fujitsu.com 22 Apr '21

22 Apr '21

Dear maintainers: Hello, I am Hu Shuai from FNST. I am sending this email to know if sushy<https://opendev.org/openstack/sushy> will support etag<http://redfish.dmtf.org/schemas/DSP0266_1.11.0.html#etags>. For now sushy does not support etag. However etag is useful for reducing network data and redfish dmtf organization also recommends redfish to support etag. In addition, I raised an issue<https://storyboard.openstack.org/#!/story/2008810> about this question before but I have not received a reply. Thanks for your reading and I am looking forward to your opinions about this question. Best regards! Hu Shuai

1 0

Diversity & Inclusion Social Hour at the PTG sponsored by RDO
by Kendall Waters 22 Apr '21

22 Apr '21

Hey everyone, On behalf of the RDO Community, please join us for an hour of Trivia on Thursday April 22 at 17:00 UTC. We will have trivia related to OpenStack and the other OIF projects as well as the cities we've held events. Time permitting we'll have some Pop Culture trivia as well. Prizes for the first 3 placings and registration is Free! https://eventyay.com/e/5f05de57 <https://eventyay.com/e/5f05de57> Cheers, Kendall Kendall Waters Perez Community Partnerships Manager Open Infrastructure Foundation

1 0

RE: [kolla] VM build fails after Train-Ussuri upgrade
by Braden, Albert 22 Apr '21

22 Apr '21

Can anyone help with this upgrade issue? From: Braden, Albert Sent: Monday, April 19, 2021 8:20 AM To: openstack-discuss(a)lists.openstack.org Subject: [kolla] VM build fails after Train-Ussuri upgrade I upgraded my Train test cluster to Ussuri following these instructions: OpenStack Docs: Operating Kolla<https://docs.openstack.org/kolla-ansible/latest/user/operating-kolla.html#u…> The upgrade completed successfully with no failures, and the existing VMs are fine, but new VM build fails with rados.Rados.connect\nrados.PermissionDeniedError: Ubuntu Pastebin<https://paste.ubuntu.com/p/MJhzgjYbW8/> I'm running external ceph so I looked at this document: OpenStack Docs: External Ceph<https://docs.openstack.org/kolla-ansible/latest/reference/storage/external-…> It says that I need the following in /etc/kolla/config/glance/ceph.conf: auth_cluster_required = cephx auth_service_required = cephx auth_client_required = cephx I didn't have that, so I added it and then redeployed, but still can't build VMs. I tried adding the same to all copies of ceph.conf and redeployed again, but that didn't help. Does anything else need to change in my ceph config when upgrading from Train to Ussuri? I see some cryptic talk about ceph in the release notes but it's not obvious what I'm being asked to change: OpenStack Docs: Ussuri Series Release Notes<https://docs.openstack.org/releasenotes/kolla-ansible/ussuri.html#relnotes-…> I read the bug that it refers to: Bug #1904062 "external ceph cinder volume config breaks volumes ..." : Bugs : kolla-ansible (launchpad.net)<https://bugs.launchpad.net/kolla-ansible/+bug/1904062> But I already have "backend_host=rbd:volumes" so I don't think I'm hitting that. Also I read these sections but I don't see anything obvious here that needs to be changed: * For cinder (cinder-volume and cinder-backup), glance-api and manila keyrings behavior has changed and Kolla Ansible deployment will not copy those keys using wildcards (ceph.*), instead will use newly introduced variables. Your environment may render unusable after an upgrade if your keys in /etc/kolla/config do not match default values for introduced variables. * The default behavior for generating the cinder.conf template has changed. An rbd-1 section will be generated when external Ceph functionality is used, i.e. cinder_backend_ceph is set to true. Previously it was only included when Kolla Ansible internal Ceph deployment mechanism was used. * The rbd section of nova.conf for nova-compute is now generated when nova_backend is set to "rbd". Previously it was only generated when both enable_ceph was "yes" and nova_backend was set to "rbd". My ceph keys have the default name and are in the default locations. I have cinder_backend_ceph: "yes". I don't have a nova_backend setting but I have nova_backend_ceph: "yes" I added nova_backend: "rbd" and redeployed and now I get a different error: rados.Rados.connect\nrados.ObjectNotFound Ubuntu Pastebin<https://paste.ubuntu.com/p/2kdKCW7npw/> I apologize for the nonsense below. I have not been able to stop it from being attached to my external emails. E-MAIL CONFIDENTIALITY NOTICE: The contents of this e-mail message and any attachments are intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the intended recipient of this message or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are notified that any use, dissemination, distribution, copying, or storage of this message or any attachment is strictly prohibited.

1 0

[nova][placement] introducing review priority label in gerrit
by Balazs Gibizer 22 Apr '21

22 Apr '21

Hi, As we discussed yesterday in the retro we would like to start using the review priority label in gerrit as a replacement of the runway process. Sean proposed the project config changes for this[1]. I added couple of questions / suggestions to that patch to start a discussion about the process. Let's try to agree in the review. Then I will document the process in tree. Cheers, gibi [1] https://review.opendev.org/c/openstack/project-config/+/787523

1 0

unable to access internet in instance
by cloud learner 22 Apr '21

22 Apr '21

Dear All, I have installed rocky on centos 7, as documented at openstack with 2 node controller and compute nodes, as mentioned in the document used vxlan and verified all the steps as mentioned in the document and all things are working fine but i am unable to access the internet in instances. kindly help me sort out this issue. Thanks

2 1

RE: cinder + Unity
by Huang, Yong 22 Apr '21

22 Apr '21

Hi Albert, Could you execute the `cinder get-pools` command to check if Unity driver report the valid pools correctly? the output should be: -------------------------------------------------- stack@ubuntu-xenial:/opt/stack/cinder$ cinder get-pools +----------+--------------------------------+ | Property | Value | +----------+--------------------------------+ | name | ubuntu-xenial@unity#Flash_Pool | +----------+--------------------------------+ +----------+---------------------------------+ | Property | Value | +----------+---------------------------------+ | name | ubuntu-xenial@unity#Manila_Pool | +----------+---------------------------------+ +----------+---------------------------------+ | Property | Value | +----------+---------------------------------+ | name | ubuntu-xenial@unity#Cinder_Pool | +----------+---------------------------------+ -------------------------------------------------- If no valid pools, one possibility is Unity driver not initialized successfully, if the driver initialized successfully, there should be a log in cinder-volume.log like: -------------------------------------------------- Apr 21 03:20:07 ubuntu-xenial cinder-volume[29607]: INFO cinder.volume.manager [None req-4b345a29-0d78-4cf7-8bae-ae541a48aaf3 None None] Driver post RPC initialization completed successfully. -------------------------------------------------- Did you install the storops library which Unity driver relies on? Please check the version info of storops: -------------------------------------------------- stack@ubuntu-xenial:/opt/stack/cinder$ pip show storops Name: storops Version: 1.2.8 Summary: Python API for VNX and Unity. Home-page: https://github.com/emc-openstack/storops Author: Cedric Zhuang Author-email: cedric.zhuang(a)gmail.com<mailto:cedric.zhuang@gmail.com> License: Apache Software License Location: /usr/local/lib/python2.7/dist-packages Requires: requests, python-dateutil, persist-queue, cachez, bitmath, enum34, six, PyYAML, retryz -------------------------------------------------- Thanks Yong Huang [EXTERNAL EMAIL] Hi Albert, On Mon, Apr 19, 2021 at 11:45 PM Albert Shih <Albert.Shih(a)obspm.fr<mailto:Albert.Shih@obspm.fr>> wrote: Hi everyone, I'm a total newbie with openstack, currently I'm trying to put a POC with a Unity storage element, 4 computes, and few servers (cinder, keystone, glance, neutron, nova, placement and horizon). I think my keystone, glance, placement are working (at least they past the test). Currently I'm trying to make cinder working with my Unity (480), the objectif are to use iSCSI. Here the configuration of my /etc/cinder/cinder.conf [DEFAULT] rootwrap_config = /etc/cinder/rootwrap.conf api_paste_confg = /etc/cinder/api-paste.ini iscsi_helper = tgtadm volume_name_template = volume-%s volume_group = cinder-volumes verbose = True auth_strategy = keystone state_path = /var/lib/cinder lock_path = /var/lock/cinder volumes_dir = /var/lib/cinder/volumes enabled_backends = unity transport_url = rabbit://openstack:XXXXXX@amqp-cloud.private.FQDN/openstack auth_strategy = keystone debug = True verbose = True [database] connection = mysql+pymysql://cinder:XXXXXXX@mariadb-cloud.private.FQDN/cinder [keystone_authtoken] www_authenticate_uri = http://keystone.private.FQDN:5000/v3 [keystone.private.fqdn]<https://urldefense.com/v3/__http:/keystone.private.FQDN:5000/v3__;!!LpKI!x3…> auth_url = http://keystone.private.FQDN:5000 [keystone.private.fqdn]<https://urldefense.com/v3/__http:/keystone.private.FQDN:5000__;!!LpKI!x37Ut…> identity_uri = http://keystone.private.FQDN:5000 [keystone.private.fqdn]<https://urldefense.com/v3/__http:/keystone.private.FQDN:5000__;!!LpKI!x37Ut…> memcached_servers = memcached-cloud.private.FQDN:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = cinder password = XXXXXX [oslo_concurrency] lock_path = /var/lib/cinder/tmp [unity] # Storage protocol storage_protocol = iSCSI # Unisphere IP san_ip = onering-remote.FQDN # Unisphere username and password san_login = openstack san_password = "XXXXX" # Volume driver name volume_driver = cinder.volume.drivers.dell_emc.unity.Driver # backend's name volume_backend_name = Unitiy_ISCSI This might be something to look at with the wrong spelling causing mismatch. unity_io_ports = *_enp1s0 unity_storage_pool_names = onering When I'm trying to create a storage through a openstack volume create volumetest --type thick_volume_type --size 100 I don't even see (with tcpdump) the cinder server trying to connect to onering-remote.FQDN Inside my /var/log/cinder/cinder-scheduler.log I have 2021-04-19 18:06:56.805 21315 INFO cinder.scheduler.base_filter [req-4808cc9d-b9c3-44cb-8cae-7503db0b0256 f5e5c9ea20064b17851f07c276d71aee b1d58ebae6b84f7586ad63b94203d7ae - - -] Filtering removed all hosts for the request with volume ID '06e5f07d-766f-4d07-b3bf-6153a2cf6abd'. Filter results: AvailabilityZoneFilter: (start: 0, end: 0), CapacityFilter: (start: 0, end: 0), CapabilitiesFilter: (start: 0, end: 0) This log mentions that no host is valid to pass the 3 filters in the scheduler. 2021-04-19 18:06:56.806 21315 WARNING cinder.scheduler.filter_scheduler [req-4808cc9d-b9c3-44cb-8cae-7503db0b0256 f5e5c9ea20064b17851f07c276d71aee b1d58ebae6b84f7586ad63b94203d7ae - - -] No weighed backend found for volume with properties: {'id': '5f16fc1f-76ff-41ee-8927-56925cf7b00f', 'name': 'thick_volume_type', 'description': None, 'is_public': True, 'projects': [], 'extra_specs': {'provisioning:type': 'thick', 'thick_provisioning_support': 'True'}, 'qos_specs_id': None, 'created_at': '2021-04-19T15:07:09.000000', 'updated_at': None, 'deleted_at': None, 'deleted': False} 2021-04-19 18:06:56.806 21315 INFO cinder.message.api [req-4808cc9d-b9c3-44cb-8cae-7503db0b0256 f5e5c9ea20064b17851f07c276d71aee b1d58ebae6b84f7586ad63b94203d7ae - - -] Creating message record for request_id = req-4808cc9d-b9c3-44cb-8cae-7503db0b0256 2021-04-19 18:06:56.811 21315 ERROR cinder.scheduler.flows.create_volume [req-4808cc9d-b9c3-44cb-8cae-7503db0b0256 f5e5c9ea20064b17851f07c276d71aee b1d58ebae6b84f7586ad63b94203d7ae - - -] Failed to run task cinder.scheduler.flows.create_volume.ScheduleCreateVolumeTask;volume:create: No valid backend was found. No weighed backends available: cinder.exception.NoValidBackend: No valid backend was found. No weighed backends available It seem (for me) cinder don't try to use unity.... The cinder-volume service is responsible for communicating with the backend and this create request fails on scheduler only, hence no sign of it. Any help ? Regards Looking at the scheduler logs, there are a few things you can check: 1) execute ``cinder-manage service list`` command and check the status of cinder-volume service if it's active or not. If it shows an X sign then check in cinder-volume logs for any startup failure. 2) Check the volume type properties and see if ``volume_backend_name`` is set to the right value i.e. Unitiy_ISCSI (which looks suspicious because the spelling is wrong and there might be a mismatch somewhere) Also it's good to mention the openstack version you're using since the code changes every cycle and it's hard to track the issues with every release. Thanks and regards Rajat Dhasmana -- Albert SHIH Observatoire de Paris Heure local/Local time: Mon Apr 19 08:01:37 PM CEST 2021

1 0

Error with Placement and oslo_config
by Maxime d'Estienne 22 Apr '21

22 Apr '21

Hello, I'm deploying the Wallaby release, after configuring Placement, I have this error when running placement-status upgrade check File "/usr/lib/python3/dist-packages/oslo_config/cfg.py", line 2543, in find_file raise NotInitializedError() oslo_config.cfg.NotInitializedError: call expression on parser has not been invoked It seems like migrations have been made, connection to database seems ok from the placement.conf file. I added this environment variable : OS_PLACEMENT_DATABASE__CONNECTION=mysql+pymysql://placement:placementPASSWD@controller1/placement (With the right password) I don't understand this error as I used the installation guide to install Placement. Do you know where I could dig ? Thanks a lot !

2 2

[nova] No weekly meeting today
by Balazs Gibizer 22 Apr '21

22 Apr '21

Hi, Today's nova weekly IRC meeting is canceled as we will be meeting via the PTG sessions. Cheers, gibi

1 0

[tripleo][ci] All CentOS-7 jobs are blocked
by Wesley Hayutin 21 Apr '21

21 Apr '21

FYI, Infra put up a change for docker that has busted CentOS-7 jobs, a fix is in the works. https://bugs.launchpad.net/tripleo/+bug/1925372 Thanks

2 2

[neutron][all] PTG session about OVN as default backend in Devstack
by Slawek Kaplonski 21 Apr '21

21 Apr '21

Hi, We discussed this topic couple of times in the Neutron team and with wider community also. And now we really feel like it is good time to pull the trigger and switch default Neutron backend in Devstack from ML2/OVS to ML2/ OVN. Lucas already prepared patches for that and all should be already in goo shape. But before we will do that, we want to have PTG session about it. It is scheduled to be on Thursday 22nd of April at 13:00 UTC time in the Neutron session. We want to give some short summary of current status of this but also we would like to do something like "AMA" about it for people from other projects. So if You have any questions/concerns about that, please go to that session on Thursday to discuss that with us. -- Slawek Kaplonski Principal Software Engineer Red Hat

1 1

[heat][PTG] PTG will start soon (in 30 mins) 14:00-16:00 (UTC time)
by Rico Lin 21 Apr '21

21 Apr '21

Dear all, Heat PTG will starts at 14:00-16:00 (UTC time) today. Feel free to join: https://etherpad.opendev.org/p/xena-ptg-heat *Rico Lin* OIF Board director, OpenStack TC, Multi-arch SIG chair, Heat PTL, Senior Software Engineer@EasyStack

1 0

[Neutron][Interop] request for 15-30 min on Xena PTG for Interop
by Kanevsky, Arkady 21 Apr '21

21 Apr '21

Brian, As chair of OpenStack Interop WG, Interop/Refstack would like 15-30 min on PTG meeting to go over Interop testing and any changes for neutron tempest or tempest configuration in Wallaby cycle or changes planned for Xena. Once on agenda one of the Interop WG person will attend and lead the discussion. Thanks, Arkady Arkady Kanevsky, Ph.D. SP Chief Technologist & DE Dell Technologies office of CTO Dell Inc. One Dell Way, MS PS2-91 Round Rock, TX 78682, USA Phone: 512 7204955

3 7

[cyborg] IRC meeting cancelled in next 2 weeks
by Wang, Xin-ran 21 Apr '21

21 Apr '21

Hi all, As we have virtual PTG this week, let's cancel the Cyborg weekly meeting this week. And due to the International Labor Day vacation (1st - 5th May 2021), the IRC meeting in next week will also be cancelled. Thanks, Xin-Ran

1 0

[wallaby] placement-status upgrade check error
by tjoen 20 Apr '21

20 Apr '21

oslo.upgradecheck-1.3.0 Python-3.9.4 Got very basic Ussuri and Train working, skipped Victoria Stuck on https://docs.openstack.org/placement/wallaby/install/verify.html $ placement-status upgrade check Error: Traceback (most recent call last): File "/usr/lib/python3.9/site-packages/oslo_upgradecheck/upgradecheck.py", line 196, in run return conf.command.action_fn() File "/usr/lib/python3.9/site-packages/oslo_upgradecheck/upgradecheck.py", line 104, in check result = func_name(self, **kwargs) File "/usr/lib/python3.9/site-packages/oslo_upgradecheck/common_checks.py", line 41, in check_policy_json policy_path = conf.find_file(conf.oslo_policy.policy_file) File "/usr/lib/python3.9/site-packages/oslo_config/cfg.py", line 2543, in find_file raise NotInitializedError() oslo_config.cfg.NotInitializedError: call expression on parser has not been invoked

3 2

[ptg][cinder] backend drivers' day at the PTG
by Brian Rosmaita 20 Apr '21

20 Apr '21

Hello Cinder third-party storage backend driver developers, maintainers, their managers, and any other interested parties: Thursday 22 April is Cinder Drivers' Day at the PTG. We kick off at 1300 UTC with Adam Krpan talking about his experiences deploying Software Factory to set up the third-party CI for Pure Storage. Anyone running an aging infrastructure for their third-party CI should be interested in this topic. See the Cinder project Xena PTG etherpad for the other Drivers' Day topics and the connection info to join the discussion: https://etherpad.opendev.org/p/apr2021-ptg-cinder

1 0

Re: cinder + Unity
by Albert Shih 20 Apr '21

20 Apr '21

Le 20/04/2021 à 00:33:56+0530, Rajat Dhasmana a écrit Hi, Me again... > This might be something to look at with the wrong spelling causing mismatch. > Just one thing ... > > unity_io_ports = *_enp1s0 What's that ? I didn't find a right configuration for that. Let them empty make cinder working well. But it's little frustrating. What's unity_io_ports should be ? My intend if to use iSCSI only so no FC ports. Just the «regular» ethernet 10Gbit/s ports. So I try enp1s0 (the name of the interface), spa_enp1s0, *_enps1s0 etc...every thing I can think of end up with a error. I don't event understand why I need this information because the cinder server don't «mount» anything. Regards -- Albert SHIH Observatoire de Paris xmpp: jas(a)obspm.fr Heure local/Local time: Tue Apr 20 03:36:24 PM CEST 2021

2 1

Why doesn't identity providers have separate IDs and Names in Openstack?
by Kabai Zoltán 20 Apr '21

20 Apr '21

Dear Community, I just have a question what I couldn't resolve with my colleagues: Why doesn't identity providers have separate IDs and Names in Openstack? I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why doesn't identity providers have separate IDs and Names? Are there other objects like this? Is there a rule why specific entities must have both IDs and Names while others can live without a separate Name? $ openstack identity provider list +----------------+---------+-------------+ | ID | Enabled | Description | +----------------+---------+-------------+ | cloud1 | True | None | +----------------+---------+-------------+ Br, Zoltán Gábor Kabai kabaiz(a)gmail.com

1 0

[Keystone][Interop] request for 15-30 min on Xena PTG for Interop
by Kanevsky, Arkady 20 Apr '21

20 Apr '21

Kristi, As chair of OpenStack Interop WG, Interop/Refstack would like 15-30 min on PTG meeting to go over Interop testing and any changes for Keystone tempest or tempest configuration in Wallaby cycle or changes planned for Xena. Once on agenda one of the Interop WG person will attend and lead the discussion. Thanks, Arkady Kanevsky, Ph.D. SP Chief Technologist & DE Dell Technologies office of CTO Dell Inc. One Dell Way, MS PS2-91 Round Rock, TX 78682, USA Phone: 512 7204955

2 2

dynamic vendor data and cloud-init
by Manish Mahalwal 20 Apr '21

20 Apr '21

Hi All, I am working with OpenStack Pike and cloud-init 21.1. I am able to successfully pass dynamic vendor data to the config drive of an instance. However, cloud-init 21.1 just reads all the 'x' bytes of the vendor_data2.json but it doesn't execute the contents of the json. Although, static vendor data works perfectly fine and the YAML file in the JSON is executed as expected by cloud-init 21.1 * Now, the person who wrote the code for handling dynamic vendordata in cloud-init (https://github.com/canonical/cloud-init/pull/777) says that the JSON cloud-init expects is of the form: > {"cloud-init": "#cloud-config\npackage_upgrade: True\npackages:\n - > black\nfqdn: cloud-overridden-by-vendordata2.example.org."} > * I believe that the JSON should have another outer key (as mentioned here https://specs.openstack.org/openstack/nova-specs/specs/newton/implemented/v…) which is the name of the microservice specified in nova.conf file and that the inner key should be cloud-init. In nova.conf: vendordata_dynamic_targets=name1@ http://example.com,name2@http://example2.com <http://example.com,name2@http//example2.com> { > "name1": { > "cloud-init": "#cloud-config\n..." > }, > "name2": { > "cloud-init": "#cloud-config\n..." > } > } >>Who is right and who is wrong? To read more on this please go through the following: https://bugs.launchpad.net/cloud-init/+bug/1841104

2 3

[neutron] bug deputy report for week of 2021-04-12
by Bence Romsics 20 Apr '21

20 Apr '21

Hi Neutron Team, We had the following new bugs last week: Critical * https://bugs.launchpad.net/neutron/+bug/1923633 Neutron-tempest-plugin scenario jobs failing due to metadata issues gate failure, Slawek and Rodolfo added extra logs and are analyzing them High * https://bugs.launchpad.net/neutron/+bug/1923453 and * https://bugs.launchpad.net/neutron/+bug/1923870 Some Neutron commands do not initilize privsep fix merged: https://review.opendev.org/c/openstack/neutron/+/786272 fix in the gate: https://review.opendev.org/c/openstack/neutron/+/786282 * https://bugs.launchpad.net/neutron/+bug/1924789 Since the migration to new engine facade, some operations that shouldn't be executing within a txn, are logging a "session semantic violated" warning unassigned Medium * https://bugs.launchpad.net/neutron/+bug/1923700 Report correct error when external DNS(designate) recordset quota limit exceeds fix proposed (waiting for neutron-lib release): https://review.opendev.org/c/openstack/neutron/+/786175 Low * https://bugs.launchpad.net/neutron/+bug/1923423 l3_router.service_providers DriverController's _attrs_to_driver is not py3 compatible fix merged: https://review.opendev.org/c/openstack/neutron/+/785830 Stable * https://bugs.launchpad.net/neutron/+bug/1924315 [stable/rocky] neutron-tempest-plugin-scenario-openvswitch-iptables_hybrid-rocky job fails gate failure, fix proposed: https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/786657 * https://bugs.launchpad.net/neutron/+bug/1923412 [stable/stein] Tempest fails with unrecognized arguments: --exclude-regex gate failure, unassigned * https://bugs.launchpad.net/neutron/+bug/1923644 OVN agent delete support should be backported to pre-wallaby releases backport with many dependencies, recommended for stable reviewers Neutron-Dynamic-Routing * https://bugs.launchpad.net/neutron/+bug/1924237 TypeError when formating IP address for BGP plugin fix merged: https://review.opendev.org/c/openstack/neutron-dynamic-routing/+/786371 micro-RFE * https://bugs.launchpad.net/neutron/+bug/1923592 [Routed networks] Router routes to other segment CIDRs should have a gateway IP Edit still following up with the triage: * https://bugs.launchpad.net/neutron/+bug/1924776 [ovn] use of address scopes does not automatically disable router snat * https://bugs.launchpad.net/neutron/+bug/1924765 [ovn] fip assignment to instance via router with snat disabled is broken * https://bugs.launchpad.net/neutron/+bug/1922089 [ovn] enable_snat cannot be disabled once enabled Cheers, Bence

1 0

[Multi-arch SIG] success to run full tempest tests on Arm64 env. What's next?
by Rico Lin 19 Apr '21

19 Apr '21

Dear all, I'm glad to tell everyone that we finally succeeded to build Devstack and run full tempest tests on it [1]. As the test build result shows [2], the job is stable enough to run. For earlier 13+ job results. (will do more recheck later) One Timeout, and two failure cases (Which are targeted by increase `BUILD_TIMEOUT` to 900 secs). The job `devstack-platform-arm64` runs around 2.22 hrs to 3.04 hrs, which is near two times slower than on x86 environment. It's not a solid number as the performance might change a lot with different cloud environments and different hardware. But I think this is a great chance for us to make more improvements. At least now we have a test job ready (Not merged yet) for you to do experiments with. And we should also add suggestions to Multi-arch SIG documentation so once we make improvements, other architecture can share the efforts too. *So please join us if you are also interested in help tuning the performance :)* *Also, we need to discuss what kind of way we should run this job, should we separate it into small jobs? Should we run it as a periodic job? voting?* *On the other hand, I would hope to collect more ideas on how we should move forward.* *Please provide your idea for this on our Xena PTG etherpad* *https://etherpad.opendev.org/p/xena-ptg-multi-arch-sig <https://etherpad.opendev.org/p/xena-ptg-multi-arch-sig>* Our PTG is scheduled around 4/20 Tuesday from 07:00-08:00 and 15:00-16:00 (UTC time) If you plan to join our PTG, feel free to update our PTG etherpad to suggest other topics. And our Meeting time is scheduled biweekly on Tuesday (host on demand) Please join our IRC #openstack-multi-arch [1] https://review.opendev.org/c/openstack/devstack/+/708317 [2] https://zuul.openstack.org/builds?job_name=devstack-platform-arm64+ *Rico Lin* OIF Board director, OpenStack TC, Multi-arch SIG chair, Heat PTL, Senior Software Engineer@EasyStack

3 2

[Multi-arch SIG][PTG] Multi-arch SIG PTG 07:00 and 15:00 UTC today!
by Rico Lin 19 Apr '21

19 Apr '21

Dear all Multi-arch SIG will have our PTG session from 07:00-08:00 and 15:00-16:00 (UTC time) Feel free to join us PTG: http://ptg.openstack.org/ptg.html Etherpad: https://etherpad.opendev.org/p/xena-ptg-multi-arch-sig *Rico Lin* OIF Board director, OpenStack TC, Multi-arch SIG chair, Heat PTL, Senior Software Engineer@EasyStack

1 0

[ptg][swift][ops] Operator feedback session 21 Apr 13:00-14:00 UTC
by Timothy Burke 19 Apr '21

19 Apr '21

Later this week, the Swift community will have an operator feedback session during one of our PTG slots [0]. If you're running a swift cluster, large or small, we'd love to see you there! As we've done in the past [1], we'll have an etherpad going [2] -- feel free to start filling it in and adding discussion items today! Even if you won't make the meeting, we'd appreciate your feedback. Looking forward to hearing from you! Tim [0] 21 Apr at 1300 UTC in https://www.openstack.org/ptg/rooms/ocata [1] https://wiki.openstack.org/wiki/Swift/Etherpads#List_of_Ops_Feedback_Etherp… [2] https://etherpad.opendev.org/p/swift-xena-ops-feedback

1 0

[tacker] PTG meeting
by Yasufumi Ogawa 19 Apr '21

19 Apr '21

Hi team, As a reminder, we will have PTG meeting from 6am UTC (3pm JST/KST) today [1]. You can find the link of room from here [2]. I'd like to skip irc meeting this week without if we have something to discuss after the meeting. [1] https://etherpad.opendev.org/p/tacker-xena-ptg [2] http://ptg.openstack.org/ptg.html Thanks, Yasufumi

1 0

[ops][nova][victoria] Migrate cross CPU?
by DHilsbos＠performair.com 19 Apr '21

19 Apr '21

All; I seem to have generated another issue for myself... I built our Victoria cloud initially on Intel Atom servers. We recently received the first of our AMD Epyc (7002 series) servers, which are intended to take over the Nova Compute responsibilities. I've had success in the past doing live migrates, but live migrating from one of the Atom servers to the new server fails, with an error indicating CPU compatibility problems. Ok, I can understand that. My problem is that I don't seem to understand the openstack server migrate command (non-live). It doesn't seem to do anything, whether the instance is Running or Shut Down. I can't find errors in the logs from the API / conductor / scheduler host. I also can't find an option to pass to the openstack server start command which requests a specific host. Can I get these existing instances moved from the Atom servers to the Epyc server(s), or do I need to recreate them to do this? Thank you, Dominic L. Hilsbos, MBA Director - Information Technology Perform Air International Inc. DHilsbos(a)PerformAir.com www.PerformAir.com

2 8

cinder + Unity
by Albert Shih 19 Apr '21

19 Apr '21

Hi everyone, I'm a total newbie with openstack, currently I'm trying to put a POC with a Unity storage element, 4 computes, and few servers (cinder, keystone, glance, neutron, nova, placement and horizon). I think my keystone, glance, placement are working (at least they past the test). Currently I'm trying to make cinder working with my Unity (480), the objectif are to use iSCSI. Here the configuration of my /etc/cinder/cinder.conf [DEFAULT] rootwrap_config = /etc/cinder/rootwrap.conf api_paste_confg = /etc/cinder/api-paste.ini iscsi_helper = tgtadm volume_name_template = volume-%s volume_group = cinder-volumes verbose = True auth_strategy = keystone state_path = /var/lib/cinder lock_path = /var/lock/cinder volumes_dir = /var/lib/cinder/volumes enabled_backends = unity transport_url = rabbit://openstack:XXXXXX@amqp-cloud.private.FQDN/openstack auth_strategy = keystone debug = True verbose = True [database] connection = mysql+pymysql://cinder:XXXXXXX@mariadb-cloud.private.FQDN/cinder [keystone_authtoken] www_authenticate_uri = http://keystone.private.FQDN:5000/v3 auth_url = http://keystone.private.FQDN:5000 identity_uri = http://keystone.private.FQDN:5000 memcached_servers = memcached-cloud.private.FQDN:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = cinder password = XXXXXX [oslo_concurrency] lock_path = /var/lib/cinder/tmp [unity] # Storage protocol storage_protocol = iSCSI # Unisphere IP san_ip = onering-remote.FQDN # Unisphere username and password san_login = openstack san_password = "XXXXX" # Volume driver name volume_driver = cinder.volume.drivers.dell_emc.unity.Driver # backend's name volume_backend_name = Unitiy_ISCSI unity_io_ports = *_enp1s0 unity_storage_pool_names = onering When I'm trying to create a storage through a openstack volume create volumetest --type thick_volume_type --size 100 I don't even see (with tcpdump) the cinder server trying to connect to onering-remote.FQDN Inside my /var/log/cinder/cinder-scheduler.log I have 2021-04-19 18:06:56.805 21315 INFO cinder.scheduler.base_filter [req-4808cc9d-b9c3-44cb-8cae-7503db0b0256 f5e5c9ea20064b17851f07c276d71aee b1d58ebae6b84f7586ad63b94203d7ae - - -] Filtering removed all hosts for the request with volume ID '06e5f07d-766f-4d07-b3bf-6153a2cf6abd'. Filter results: AvailabilityZoneFilter: (start: 0, end: 0), CapacityFilter: (start: 0, end: 0), CapabilitiesFilter: (start: 0, end: 0) 2021-04-19 18:06:56.806 21315 WARNING cinder.scheduler.filter_scheduler [req-4808cc9d-b9c3-44cb-8cae-7503db0b0256 f5e5c9ea20064b17851f07c276d71aee b1d58ebae6b84f7586ad63b94203d7ae - - -] No weighed backend found for volume with properties: {'id': '5f16fc1f-76ff-41ee-8927-56925cf7b00f', 'name': 'thick_volume_type', 'description': None, 'is_public': True, 'projects': [], 'extra_specs': {'provisioning:type': 'thick', 'thick_provisioning_support': 'True'}, 'qos_specs_id': None, 'created_at': '2021-04-19T15:07:09.000000', 'updated_at': None, 'deleted_at': None, 'deleted': False} 2021-04-19 18:06:56.806 21315 INFO cinder.message.api [req-4808cc9d-b9c3-44cb-8cae-7503db0b0256 f5e5c9ea20064b17851f07c276d71aee b1d58ebae6b84f7586ad63b94203d7ae - - -] Creating message record for request_id = req-4808cc9d-b9c3-44cb-8cae-7503db0b0256 2021-04-19 18:06:56.811 21315 ERROR cinder.scheduler.flows.create_volume [req-4808cc9d-b9c3-44cb-8cae-7503db0b0256 f5e5c9ea20064b17851f07c276d71aee b1d58ebae6b84f7586ad63b94203d7ae - - -] Failed to run task cinder.scheduler.flows.create_volume.ScheduleCreateVolumeTask;volume:create: No valid backend was found. No weighed backends available: cinder.exception.NoValidBackend: No valid backend was found. No weighed backends available It seem (for me) cinder don't try to use unity.... Any help ? Regards -- Albert SHIH Observatoire de Paris Heure local/Local time: Mon Apr 19 08:01:37 PM CEST 2021

1 0

[victoria][neutron][ovn] Iperf3 Retransmits
by Ammad Syed 19 Apr '21

19 Apr '21

Hi, I am using openstack victoria and neutron with ovn latest releases. I was trying to assess network performance between the vms first. I have created two ubuntu 20.04 VMs installed iperf3 in them and executed a bidirectional test between VMs. The instance are on same network and network type is geneve. Both VMs are on same host. I have tested by keeping VM to different compute hosts, but results are same. Here are the results. root@iperf3-1:~# iperf3 -c 192.168.100.50 --bidir Connecting to host 192.168.100.50, port 5201 [ 5] local 192.168.100.120 port 53156 connected to 192.168.100.50 port 5201 [ 7] local 192.168.100.120 port 53158 connected to 192.168.100.50 port 5201 [ ID][Role] Interval Transfer Bitrate Retr Cwnd [ 5][TX-C] 0.00-1.00 sec 311 MBytes 2.61 Gbits/sec 407 1.41 MBytes [ 7][RX-C] 0.00-1.00 sec 627 MBytes 5.26 Gbits/sec [ 5][TX-C] 1.00-2.00 sec 1.07 GBytes 9.18 Gbits/sec 2638 1.71 MBytes [ 7][RX-C] 1.00-2.00 sec 778 MBytes 6.53 Gbits/sec [ 5][TX-C] 2.00-3.00 sec 1.14 GBytes 9.75 Gbits/sec 603 1.98 MBytes [ 7][RX-C] 2.00-3.00 sec 922 MBytes 7.73 Gbits/sec [ 5][TX-C] 3.00-4.00 sec 1.00 GBytes 8.62 Gbits/sec 594 2.16 MBytes [ 7][RX-C] 3.00-4.00 sec 935 MBytes 7.84 Gbits/sec [ 5][TX-C] 4.00-5.00 sec 988 MBytes 8.29 Gbits/sec 2431 1.42 MBytes [ 7][RX-C] 4.00-5.00 sec 932 MBytes 7.82 Gbits/sec [ 5][TX-C] 5.00-6.00 sec 879 MBytes 7.37 Gbits/sec 599 991 KBytes [ 7][RX-C] 5.00-6.00 sec 996 MBytes 8.36 Gbits/sec [ 5][TX-C] 6.00-7.00 sec 721 MBytes 6.05 Gbits/sec 389 1.10 MBytes [ 7][RX-C] 6.00-7.00 sec 963 MBytes 8.08 Gbits/sec [ 5][TX-C] 7.00-8.00 sec 901 MBytes 7.56 Gbits/sec 33 1.54 MBytes [ 7][RX-C] 7.00-8.00 sec 1.02 GBytes 8.79 Gbits/sec [ 5][TX-C] 8.00-9.00 sec 889 MBytes 7.44 Gbits/sec 376 1.33 MBytes [ 7][RX-C] 8.00-9.00 sec 1.14 GBytes 9.78 Gbits/sec [ 5][TX-C] 9.00-10.00 sec 671 MBytes 5.64 Gbits/sec 1017 984 KBytes [ 7][RX-C] 9.00-10.00 sec 975 MBytes 8.19 Gbits/sec - - - - - - - - - - - - - - - - - - - - - - - - - [ ID][Role] Interval Transfer Bitrate Retr [ 5][TX-C] 0.00-10.00 sec 8.44 GBytes 7.25 Gbits/sec 9087 sender [ 5][TX-C] 0.00-10.00 sec 8.44 GBytes 7.25 Gbits/sec receiver [ 7][RX-C] 0.00-10.00 sec 9.13 GBytes 7.84 Gbits/sec 7914 sender [ 7][RX-C] 0.00-10.00 sec 9.12 GBytes 7.84 Gbits/sec receiver Here is the xmldump of instance interface. <interface type='bridge'> <mac address='fa:16:3e:02:bc:33'/> <source bridge='br-int'/> <virtualport type='openvswitch'> <parameters interfaceid='73e9f047-70de-4d9f-a656-e311dd54975f'/> </virtualport> <target dev='tap73e9f047-70'/> <model type='virtio'/> <driver name='vhost' queues='8'/> <mtu size='1442'/> <alias name='net0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> My overlay network IP interface mtu is 1500. Please advise if there is any network performance tuning required ? -- Regards, Syed Ammad Ali

1 0

[nova] Nominate sean-k-mooney for nova-specs-core
by Stephen Finucane 19 Apr '21

19 Apr '21

Hey, Sean has been working on nova for what seems like yonks now. Each cycle, they spend a significant amount of time reviewing proposed specs and contributing to discussions at the PTG. This is important work and their contributions provide everyone with a deep pool of knowledge on all things networking and hardware upon which to draw. I think the nova project would benefit from their addition to the specs core reviewer team and I therefore propose we add Sean to nova- specs-core. Assuming there are no objections, I'll work with gibi to add Sean to nova-specs- core next week. Cheers, Stephen

9 9

[openstack-community] [neutron] Adding support for elliptic curve in DH groups for key agreement protocol
by Matúš Brandys 19 Apr '21

19 Apr '21

Hi everyone, I was looking at neutron VPN implementation and found out that the current neutron implementation supports only creating VPN using DH up to group 15. For example, strongswan drivers support except regular group also Elliptic Curve Groups also NIST and Brainpool Elliptic Curve Groups. https://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites#Diff…. I would like to know, if there is some limitation using Elliptic Curve groups for VPN or is this only an implementation issue? Thanks, Matus

1 0

[Scientific] Scientific SIG meetings during the OpenStack PTG next week
by Martial Michel 19 Apr '21

19 Apr '21

The Scientific SIG will have two meetings next week during the PTG. Details on those meetings are as follows: Session 1 - Cactus room - April 21st - 14:00-15:00 UTC Main session, topic discussion (note we only have one hour) Session 2 - Cactus room - April 21st - 21:00-22:00 UTC Lightning Talks: Bring a LT on something you've been doing or would like to present (10 minutes per talk, including questions. Note we only have one hour, so strict timekeeping will have to be enforced ) As a reminder the Scientific SIG has a Slack. Please contact me directly (martialmichel(a)datamachines.io) if you want to join our slack or our meeting and need joining information. Thank you and looking forward to seeing a few stackers next week -- Martial

3 2

[release] PTG meeting
by Herve Beraud 19 Apr '21

19 Apr '21

Hello, The release team PTG will be on Jitsi https://meetpad.opendev.org/relmgt-xena-ptg See you there at 2pm UTC. -- Hervé Beraud Senior Software Engineer at Red Hat irc: hberaud https://github.com/4383/ https://twitter.com/4383hberaud -----BEGIN PGP SIGNATURE----- wsFcBAABCAAQBQJb4AwCCRAHwXRBNkGNegAALSkQAHrotwCiL3VMwDR0vcja10Q+ Kf31yCutl5bAlS7tOKpPQ9XN4oC0ZSThyNNFVrg8ail0SczHXsC4rOrsPblgGRN+ RQLoCm2eO1AkB0ubCYLaq0XqSaO+Uk81QxAPkyPCEGT6SRxXr2lhADK0T86kBnMP F8RvGolu3EFjlqCVgeOZaR51PqwUlEhZXZuuNKrWZXg/oRiY4811GmnvzmUhgK5G 5+f8mUg74hfjDbR2VhjTeaLKp0PhskjOIKY3vqHXofLuaqFDD+WrAy/NgDGvN22g glGfj472T3xyHnUzM8ILgAGSghfzZF5Skj2qEeci9cB6K3Hm3osj+PbvfsXE/7Kw m/xtm+FjnaywZEv54uCmVIzQsRIm1qJscu20Qw6Q0UiPpDFqD7O6tWSRKdX11UTZ hwVQTMh9AKQDBEh2W9nnFi9kzSSNu4OQ1dRMcYHWfd9BEkccezxHwUM4Xyov5Fe0 qnbfzTB1tYkjU78loMWFaLa00ftSxP/DtQ//iYVyfVNfcCwfDszXLOqlkvGmY1/Y F1ON0ONekDZkGJsDoS6QdiUSn8RZ2mHArGEWMV00EV5DCIbCXRvywXV43ckx8Z+3 B8qUJhBqJ8RS2F+vTs3DTaXqcktgJ4UkhYC2c1gImcPRyGrK9VY0sCT+1iA+wp/O v6rDpkeNksZ9fFSyoY2o =ECSj -----END PGP SIGNATURE-----

1 0