- openstack-discuss - lists.openstack.org

[Trove] Project udpate
by Lingxian Kong 06 Oct '20

06 Oct '20

Hi there, As the official Victoria release is approaching and it has been a long time silence for Trove in the upstream, I think it's good time for me as the Trove PTL for the last 3 dev cycles to have a project update. The things that will be described below have not been achieved in one single dev cycle, but are some significant changes since the 'dark time' of Trove project in the past. Tips hat to those who have made contributions to Trove project ever before. ## Service tenant configuration Service tenant configuration was added in Stein release, before that, it's impossible to deploy Trove in the public cloud (even not for some private cloud due to security concerns) because the user may have access to the guest instance which contains sensitive data in the config files, the users can also perform operations towards either storage or networking resources which may bring much management overhead and make it easy to break the database functionality. With service tenant configuration (which is currently the default setting in devstack), almost all the cloud resources(except the Swift objects for backup data) created for a Trove instance are only visible to the Trove service user. As Trove users, they can only see a Trove instance, but know nothing about the Nova VM, Cinder volume, Neutron management network, and security groups under the hood. The only way to operate Trove instances is to interact with Trove API. ## Message queue security concerns To do database operations, trove controller services communicate with trove-guestagent service inside the instance via message queue service (i.e. RabbitMQ in most environments). In the meantime, trove-guestagent periodically sends status update information to trove-conductor through the same messaging system. In the current design, the RabbitMQ username and password need to be configured in the trove-guestagent config file, which brought significant security concern for the cloud deployers in the past. If the guest instance is compromised, then guest credentials are compromised, which means the messaging system is compromised. As part of the solution, a security enhancement was introduced in the Ocata release, using encryption keys to protect the messages between the control plane and the guest instances. First, the rabbitmq credential should only have access to trove services. Second, even with the rabbitmq credential and the message encryption key of the particular instance, the communication from the guest agent and trove controller services are restricted in the context of that particular instance, other instances are not affected as the malicious user doesn't know their message encryption keys. Additionally, since Ussuri, trove is running in service tenant model in devstack by default which is also the recommended deployment configuration. Most of the cloud resources(except the Swift objects for backup data) created for a trove instance should only be visible to the trove service user, which also could decrease the attack surface. ## Datastore images Before Victoria, Trove provided a bunch of diskimage-builder elements for building different datastore images. As contributors were leaving, most of the elements just became unmaintained except for MySQL and MariaDB. To solve the problem, database containerization was introduced in Victoria dev cycle, so that the database service is running in a docker container inside the guest instance, trove guest agent is pulling container image for a particular datastore when initializing guest instance. Trove is not maintaining those container images. That means, since Victoria, the cloud provider only needs to maintain one single datastore image which only contains common code that is datastore independent. However, for backward compatibility, the cloud provider still needs to create different datastores but using the same Glance image ID. Additionally, using database container also makes it much easier for database operations and management. To upgrade from the older version to Victoria onwards, the Trove user has to create backups before upgrading, then create instances from the backup, so downtime is expected. ## Supported datastores Trove used to support several datastores such as MySQL, MariaDB, PostgreSQL, MongoDB, CouchDB, etc. Most of them became unmaintained because of a lack of maintainers in the community. Currently, only MySQL and MariaDB drivers are fully supported and tested in the upstream. PostgreSQL driver was refactored in Victoria dev cycle and is in experimental status again. Adding extra datastores should be quite easy by implementing the interfaces between trove task manager and guest agent. Again, no need to maintain separate datastore images thanks to the container technology. ## Instance backup At the same time as we were moving to use container for database services, we also moved the backup and restore functions out of trove guest agent code because the backup function is usually using some 3rd party software which we don't want to pre-install inside the datastore image. As a result, we are using container as well for database backup and restore. For more information about the backup container image, see https://lingxiankong.github.io/2020-04-14-database-backup-docker-image.html. ## Others There are many other improvements not mentioned above added to Trove since Train, e.g. * Access configuration for the instance. * The swift backend customization for backup. * Online volume resize support. * XFS disk format for database data volume. * API documentation improvement. * etc. By the way, Catalyst Cloud has already deployed Trove (in Alpha) in our public cloud in New Zealand, we are getting feedback from customers. I believe there are other deployers already have Trove in their production but running an old version because of previous upstream situation in the past. If you are one of them and interested in upgrading to the latest, please either reply to this email or send personal email to me, I would be very happy to provide any help or guidance. For those who are still in evaluation phase, you are also welcome to reach out for any questions. I'm always in the position to help in #openstack-trove IRC channel. --- Lingxian Kong Senior Software Engineer Catalyst Cloud www.catalystcloud.nz

2 1

[tripleo][ci] RFC, supported releases of TripleO
by Wesley Hayutin 06 Oct '20

06 Oct '20

Greetings, I just wanted to give folks the opportunity to speak up before we make any changes. Please review https://releases.openstack.org/ As we are branching master -> victoria it looks like we can definitely remove stable/rocky from both upstream and RDO software factory. Any comments about rocky? Stein is end of maintenance on 2020 November 11th. Any thoughts on dropping stein from upstream and rdo software factory? Thanks! Please be specific if you have comments as to which release you are referring to.

4 5

Modify devstack after basic deployment
by Md. Hejbul Tawhid MUNNA 06 Oct '20

06 Oct '20

Hi, I have deployed a basic openstack using devstack. now I want to install additional component like designate or magnum. What is the way to do that? Regards, Munna

2 1

[nova]: Separation of VM size and extra specs in flavors
by Csatari, Gergely (Nokia - FI/Espoo) 06 Oct '20

06 Oct '20

Hi, During some discussions about CNTT<https://cntt.readthedocs.io/>, where several flavor sizes and extra specs are specified we realized, that the combination of all flavor sizes and the different extra specs results in a very large number of flavors. One idea was to separate the size and the extra specs on the creation of flavors and just define some kind of rules do define how the different sizes and extra specs can be combined. The other idea was just to leave things as they are. Are there any opinions on which idea is better? Thanks, Gerg0

2 1

[tripleo][ussuri][release] bugfix stable/ussuri release for tripleo 'cycle-with-intermediary'
by Marios Andreou 06 Oct '20

06 Oct '20

o/ tripleo On request I made a bugfix stable/ussuri release for the tripleo 'cycle-with-intermediary' repos. If you are interested see [1] for the latest hashes. If you need a release for a different branch reach out to me. thanks, marios [1] https://review.opendev.org/#/c/755718/

1 0

[Neutron] Cancelled QoS team meeting October 6
by Rodolfo Alonso Hernandez 06 Oct '20

06 Oct '20

Hello: Due to the lack of agenda, the Neutron QoS meeting will be cancelled today. Next meeting will be held on October 20. Regards.

1 0

qemu ussuri can't launch instance
by ops＠clustspace.com 06 Oct '20

06 Oct '20

Hello, Does anyone know where to find the problem? Searched few days in google :) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [req-f16a5b6c-3475-4322-a664-45f3bd9c041a cb4c181d25a14dda958e40792968f97e 5242bcab73714ab192cca8d909b72e9a - default default] [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] Instance failed to spawn: libvirt.libvirtError: internal error: cannot load AppArmor$ 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] Traceback (most recent call last): 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/nova/compute/manager.py", line 2614, in _build_resources 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] yield resources 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/nova/compute/manager.py", line 2378, in _build_and_run_instance 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] accel_info=accel_info) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/nova/virt/libvirt/driver.py", line 3580, in spawn 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] power_on=power_on) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/nova/virt/libvirt/driver.py", line 6438, in _create_domain_and_network 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] destroy_disks_on_failure) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/oslo_utils/excutils.py", line 220, in __exit__ 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] self.force_reraise() 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/oslo_utils/excutils.py", line 196, in force_reraise 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] six.reraise(self.type_, self.value, self.tb) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/six.py", line 703, in reraise 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] raise value 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/nova/virt/libvirt/driver.py", line 6410, in _create_domain_and_network 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] post_xml_callback=post_xml_callback) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/nova/virt/libvirt/driver.py", line 6351, in _create_domain 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] guest.launch(pause=pause) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/nova/virt/libvirt/guest.py", line 142, in launch 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] self._encoded_xml, errors='ignore') 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/oslo_utils/excutils.py", line 220, in __exit__ 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] self.force_reraise() 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/oslo_utils/excutils.py", line 196, in force_reraise 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] six.reraise(self.type_, self.value, self.tb) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/six.py", line 703, in reraise 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] raise value 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/nova/virt/libvirt/guest.py", line 137, in launch 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] return self._domain.createWithFlags(flags) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/eventlet/tpool.py", line 193, in doit 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] result = proxy_call(self._autowrap, f, *args, **kwargs) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/eventlet/tpool.py", line 151, in proxy_call 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] rv = execute(f, *args, **kwargs) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/eventlet/tpool.py", line 132, in execute 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] six.reraise(c, e, tb) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/six.py", line 703, in reraise 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] raise value 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/eventlet/tpool.py", line 86, in tworker 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] rv = meth(*args, **kwargs) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] File "/usr/lib/python3/dist-packages/libvirt.py", line 1265, in createWithFlags 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] if ret == -1: raise libvirtError ('virDomainCreateWithFlags() failed', dom=self) 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f] libvirt.libvirtError: internal error: cannot load AppArmor profile 'libvirt-63bb4205-fcbb-4f2b-9ade-e055e7ff966f' 2020-10-05 23:11:04.054 1585 ERROR nova.compute.manager [instance: 63bb4205-fcbb-4f2b-9ade-e055e7ff966f]

3 2

[neutron] Security groups with SR-IOV as a second ML2 mechanism driver
by GABRIEL OMAR GAMERO MONTENEGRO 05 Oct '20

05 Oct '20

Dear all, I'm planning to use the SR-IOV Networking L2 Agent with another L2 Agent as Open vSwitch or Linux Bridge (a configuration with multiple ML2 mechanism drivers). Does anybody know if I can use the Open vSwitch or Linux Bridge L2 agents with security group feature (implemented with iptables firewall driver or Native Open vSwitch firewall driver)? Or am I restricted to apply no security to my instances because SR-IOV L2 agent is being used as a second mechanism driver in the same OpenStack deployment? Thanks in advance, Gabriel Gamero

3 2

[tc] weekly update
by Mohammed Naser 05 Oct '20

05 Oct '20

Hi everyone, Here's an update for what happened in the OpenStack TC this week. You can get more information by checking for changes in openstack/governance repository. # Patches ## Open Reviews - Select Prvisep as the Wallaby Goal https://review.opendev.org/755590 - Add assert:supports-standalone https://review.opendev.org/722399 - Add Ironic charms to OpenStack charms https://review.opendev.org/754099 - Clarify impact on releases for SIGs https://review.opendev.org/752699 - Add election schedule exceptions in charter https://review.opendev.org/751941 ## Project Updates - Retire devstack-plugin-pika project https://review.opendev.org/748730 - Retire openstack/os-loganalyze https://review.opendev.org/753834 ## General Changes - Define TC-approved release in a resolution https://review.opendev.org/752256 - Reorder repos alphabetically https://review.opendev.org/754097 - Remove tc:approved-release tag https://review.opendev.org/749363 - Migrate rpm-packaging to a SIG https://review.opendev.org/752661 # Other Reminders - PTG Brainstorming: https://etherpad.opendev.org/p/tc-wallaby-ptg - PTG Registration: https://october2020ptg.eventbrite.com Thanks for reading! Mohammed & Kendall -- Mohammed Naser VEXXHOST, Inc.

1 0

[tc][all][interop] Removed the 'tc:approved-release' tag in favor of projects.yaml
by Ghanshyam Mann 05 Oct '20

05 Oct '20

Hello Everyone, TC has merged the recent change to remove the 'tc:approved-release' tag[1]. This tag was used as the superset of projects used by the OpenStack Foundation when creating commercial trademark programs. Basically, this tag was used to know if the project under OpenStack governance is mature and follows the defined release model so that it can be considered as a possible candidate for trademark programs. This situation was in the early stage of OpenStack when we used to have incubated vs integrated project status but now everything in projects.yaml[2] file is considered as mature, following release, active. We do not need any changes in the bylaw as all projects listed in projects.yaml file is applicable as bylaw term "OpenStack Technical Committee Approved Release" which is made clear in the resolution also[3]. Interop group can refer to the OpenStack governed projects list for possible candidates for the trademark program. [1] https://review.opendev.org/#/c/749363/ [2] https://governance.openstack.org/tc/reference/projects/ [3] https://governance.openstack.org/tc/resolutions/20200920-tc-approved-releas… -gmann

1 0

[cloudkitty] Joining the "CloudKitty Drivers" Launchpad team
by Pierre Riteau 05 Oct '20

05 Oct '20

Hello, While CloudKitty has moved to Storyboard to track its bugs [1], there is still a lot of content under the Launchpad project [2], including years of bug reports, blueprints, etc. As PTL, I would like to be able to administer the CloudKitty Launchpad project. I have requested access to the "CloudKitty Drivers" Launchpad team [3], but haven't heard back. I see some people have been on the waiting list for years [4]. Since the "OpenStack Administrators" team [5] is the owner "CloudKitty Drivers", would one of its members be able to grant me access? Many thanks, Pierre Riteau (priteau) [1] https://storyboard.openstack.org/#!/project/890 [2] https://launchpad.net/cloudkitty [3] https://launchpad.net/~cloudkitty-drivers [4] https://launchpad.net/~cloudkitty-drivers/+members#proposed [5] https://launchpad.net/~openstack-admins

3 9

Re: [charms] Zaza bundle tests
by Aurelien Lourot 05 Oct '20

05 Oct '20

Wasn't one of the reasons for this that we're striving to have stand-alone / complete bundles? So that we could "just give" the one-file bundle to someone and it would "just work". Anyway I'm also in favour of any solution leading to less repetition, i.e. what was suggested by Xav. Aurelien

1 0

[ptl][release] Wrapping up Victoria
by Sean McGinnis 05 Oct '20

05 Oct '20

Hey everyone, We are getting close to being done with the Victoria development cycle. This is one more reminder that there are just a few days left to finish up any critical work. This Thursday, October 8, is the deadline for any new release candidate releases for any cycle-based services. After Thursday, no new releases should occur for Victoria development until the final coordinated release next Wednesday. After this Thursday, the release team will be proposing a patch to re-tag the last RC release of each deliverable to be the final version for Victoria. We encourage PTLs to +1 this patch to capture that metadata with the release. This is not the time to -1 the patch and ask for more time to push anything final in. After this Thursday, we should basically be done with Victoria development. Only if there is a very, very critical issue discovered will we allow any updates after Thursday and before the final release next Wednesday. Any other bugfixes and important updates will need to wait until after next week's coordinated release to be part of a stable release off of the stable/victoria branch. Please let us know if you have any questions as we wrap things up. --- Sean McGinnis and the entire Release Management Team

1 0

[neutron] Bug deputy report for week of September 28th
by Lajos Katona 04 Oct '20

04 Oct '20

Hi, I was Neutron bug deputy the week before, below is a short summary of the week's reported bugs. - Critical Bugs - https://bugs.launchpad.net/neutron/+bug/1897713 (networking-ovn-tempest-dsvm-ovs-release job fails on stable/train) *Fixed* - https://bugs.launchpad.net/neutron/+bug/1897898 (Scenario test test_multiple_ports_portrange_remote is unstable ) *Unassigned* - https://bugs.launchpad.net/neutron/+bug/1898211 (OVN scenario jobs are failing on Ubuntu Focal due to ebtables-nft used by default ) *In Progress* - High Bugs - https://bugs.launchpad.net/neutron/+bug/1897796 (Scenario test test_subport_connectivity failing from time to time) *Assigned, in Progress* - https://bugs.launchpad.net/neutron/+bug/1897637 (explicity_egress_direct prevents learning of local MACs and causes flooding of ingress packets ) *In Progress*, perhaps duplicate of https://bugs.launchpad.net/neutron/+bug/1884708 - Medium Bugs - https://bugs.launchpad.net/neutron/+bug/1897921 ([OVN] "test_agent_show" failing, chassis not found ) *Fixed* - https://bugs.launchpad.net/neutron/+bug/1897928 (TestOvnDbNotifyHandler test cases failing due to missing attribute "_RowEventHandler__watched_events" ) *Fixed on Master* - Low Bugs - https://bugs.launchpad.net/neutron/+bug/1897546 (binding_levels property is missing from openstack port show command) - Not fully confirmed Bugs - https://bugs.launchpad.net/neutron/+bug/1897580 (SG rules aren't properly applied if CIDR of the tenant network is also matches the host network CIDR), I check it next week again. Iwas a much relaxed week in numbers. One critical bug is unassigned: https://bugs.launchpad.net/neutron/+bug/1897898 Regards Lajos Katona (lajoskatona)

1 0

[all][dev] Python.h not found after openstack-tox-py36 is switch to CentOS8
by Akihiro Motoki 04 Oct '20

04 Oct '20

Hi, openstack-tox-py36 is now run on CentOS-8 after commit 31c4a7a18e2bd43d2893563b992c683c95baed6f was merged. I noticed Python.h is not installed so we cannot install python modules which require compilation. An example is found at [1]. Do individual projects explicitly install python-dev or will we handle it in the common zuul job? Before proposing a fix, I would like to hear our direction. [1] https://zuul.opendev.org/t/openstack/build/696978c5614c41bd88b5b2a1d6c2174a… Thanks, Akihiro Motoki (irc: amotoki)

5 5

Ussuri Octavia load balancer on OVS
by pwm 04 Oct '20

04 Oct '20

Hi, I using the following setup for Octavia load balancer on OVS Ansible openstack_user_config.yml - network: container_bridge: "br-lbaas" container_type: "veth" container_interface: "eth14" host_bind_override: "eth14" ip_from_q: "octavia" type: "flat" net_name: "octavia" group_binds: - neutron_openvswitch_agent - octavia-worker - octavia-housekeeping - octavia-health-manager user_variables.yml octavia_provider_network_name: "octavia" octavia_provider_network_type: flat octavia_neutron_management_network_name: lbaas-mgmt /etc/netplan/50-cloud-init.yaml br-lbaas: dhcp4: no interfaces: [ bond10 ] addresses: [] parameters: stp: false forward-delay: 0 bond10: dhcp4: no addresses: [] interfaces: [ens16] parameters: mode: balance-tlb brctl show bridge name bridge id STP enabled interfaces br-lbaas 8000.d60e4e80f672 no 2ea34552_eth14 bond10 However, I am getting the following error when creating the load balance octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to instance. Retrying.: requests.exceptions.ConnectionError: HTTPSConnectionPool(host='172.29.233.47', port=9443 The Octavia api container unable to connect to the amphora instance. Any missing configuration, cause I need to manually add in the eth14 interface to the br-lbaas bridge in order to fix the connection issue brctl addif br-lbaas eth14 Thanks

2 9

[neutron][requirements] RFE requested for neutron-lib
by Lajos Katona 02 Oct '20

02 Oct '20

Hi, I would like to ask Requirements Freeze Exception for neutron-lib 2.6.1 for Neutron Victoria. neutron-lib 2.6.1 contains a bug fix for Neutron which solves a nova gate issue (on Victoria) coming from a new feature in neutron, see [1]. [1] https://bugs.launchpad.net/neutron/+bug/1882804 (RFE: allow replacing the QoS policy of bound port) Thanks in advance Lajos Katona (lajoskatona)

4 3

[tripleo] TripleO CI Summary: Unified Sprint 33
by Rafael Folco 02 Oct '20

02 Oct '20

Greetings, The TripleO CI team has just completed **Unified Sprint 33** (Sept 11 thru Oct 01). The following is a summary of completed work during this sprint cycle: - Added more jobs to RHOS 16.2 pipelines. - Applied new promoter configuration engine changes to consolidate all promoters into the same code. - Started a PoC implementation of the new dependency pipeline: - https://hackmd.io/iA6AyTn8Rn2ximODx6FmKg - Started elastic-recheck containerization work: - https://hackmd.io/HQ5hyGAOSuG44Le2x6YzUw - Created upstream parent jobs a.k.a content-provider to build containers for multiple jobs: - https://hackmd.io/vRMVeZXZRgK5Vxqi6ENUDg#QampA - Ruck/Rover recorded notes [1]. The planned work for the next sprint puts on hold the work started in the previous sprint and focuses on the following: - Add content-provider jobs to all CI layouts and templates. - Start prep work for stable/victoria branching in RDO. - Continue investigations to fix broken upgrade jobs. The Ruck and Rover for this sprint are Ronelle Landy (rlandy) and Soniya Vyas (soniya29). Please direct questions or queries to them regarding CI status or issues in #tripleo, ideally to whomever has the ‘|ruck’ suffix on their nick. Ruck/rover notes to be tracked in hackmd [2]. Thanks, rfolco [1] https://hackmd.io/7Q0YO5JKS0agcf9qwoD4IQ <https://hackmd.io/7Q0YO5JKS0agcf9qwoD4IQ> [2] https://hackmd.io/1qxCqYzATfudl1cKvaQ8-w -- Folco

1 0

[oslo] PTO next week
by Ben Nemec 02 Oct '20

02 Oct '20

I will be on PTO next week so I won't be around to run the meeting. This might be a good time to start implementing our DPL approach, if someone else wants to pick up the job of meeting coordinator. I believe Herve had mentioned some interest in that. Anyway, I won't be here and I'm stepping down as PTL so y'all can do what you want. ;-) -Ben

2 1

Neutron DVR, service subnets and public IPs
by Taltavull Jean-Francois 02 Oct '20

02 Oct '20

Hi All, Has someone already used successfully neutron service subnets, in a DVR deployment, in order to save internet public IP addresses ? Regards, Jean-Francois

1 0

[tc] weekly meeting
by Mohammed Naser 02 Oct '20

02 Oct '20

Hi everyone, Here’s a summary of what happened in our TC monthly meeting last Thursday, October 1st. # ATTENDEES (LINES SAID) - mnaser (100) - gmann (24) - evrardjp (18) - mugsie (18) - belmoreira (12) - diablo_rojo (11) - njohnston (5) - knikolla (5) - ralonsoh (4) - jungleboyj (4) - fungi (4) - ttx (3) - ricolin_ (3) - openstack (3) - smcginnis (2) - cloudnull (1) # MEETING SUMMARY 1. Roll call (mnaser, 14:00:07) 2. Follow up on past action items (mnaser, 14:07:07) - http://eavesdrop.openstack.org/meetings/tc/2020/tc.2020-09-03-14.01.html (mnaser, 14:07:24) 3. OpenStack User-facing APIs and CLIs (belmoreira) (mnaser, 14:34:35) 4. W cycle goal selection start (mnaser, 14:41:19) 5. Completion of retirement cleanup (gmann) (mnaser, 14:47:51) - https://storyboard.openstack.org/#!/story/2007686 (ralonsoh, 14:47:52) 6. Audit and clean-up tags (gmann) (mnaser, 14:48:23) - https://review.opendev.org/#/c/749363/ (mnaser, 14:48:28) 7. PTG Planning (mnaser, 14:50:54) - https://etherpad.opendev.org/p/tc-wallaby-ptg (mnaser, 14:51:02) 8. Open discussion (mnaser, 14:53:20) 9. Meeting ended at 14:59:58 UTC # ACTION ITEMS - diablo_rojo schedule session with sig-arch and k8s steering committee - mugsie Drive Wallaby cycle community goals - belmoreira draft up title, abstract and moderator for OSC gaps session - mugsie reach out to ralonsoh wrt helping with privsep - gmann to start cleaning-up assert:supports-api-interoperability tag To read the full logs of the meeting, please refer to http://eavesdrop.openstack.org/meetings/tc/2020/tc.2020-10-01-14.00.log.html Thanks! Mohammed -- Mohammed Naser VEXXHOST, Inc.

1 0

[usurri][linbit][drbd] Cinder configuration
by ops＠clustspace.com 02 Oct '20

02 Oct '20

Hello, Does anyone have manuall how to configure drbd+linstor for cinder? Official documentation is very crap. We already tryed week for it and without any results

2 1

[release] Release countdown for week R-1 Oct 5-9
by Sean McGinnis 02 Oct '20

02 Oct '20

Development Focus ----------------- We are on the final mile of the victoria development cycle! Remember that the victoria final release will include the latest release candidate (for cycle-with-rc deliverables) or the latest intermediary release (for cycle-with-intermediary deliverables) available. October 8 is the deadline for final victoria release candidates as well as any last cycle-with-intermediary deliverables. We will then enter a quiet period until we tag the final release on October 14. Teams should be prioritizing fixing release-critical bugs, before that deadline. Otherwise it's time to start planning the Wallaby cycle, including discussing Forum and PTG sessions content, in preparation of Open Infra Summit the week of Oct 19 and the PTG on the week of Oct 26. Actions ------- Watch for any translation patches coming through on the stable/victoria branch and merge them quickly. If you discover a release-critical issue, please make sure to fix it on the master branch first, then backport the bugfix to the stable/victoria branch before triggering a new release. Please drop by #openstack-release with any questions or concerns about the upcoming release! Upcoming Deadlines & Dates -------------------------- Final Victoria RC deadline: October 8 Final Victoria release: October 14 Open Infra Summit: October 19-23 Wallaby PTG: October 26-30

1 0

[election][plt] Hervé Beraud candidacy for Release Management PTL
by Herve Beraud 02 Oct '20

02 Oct '20

Hello everyone, I am submitting my candidacy for Release Management team PTL in the Wallaby cycle. Indeed, I am a core Release Management team member for a few cycles now and I want to involve myself more in this team by proposing me as PTL. During this cycle the main efforts will be around the team building. Indeed, we now have a lot of great tools and automations but we need to recruit new members and mentor them to keep a strong and resilient core team. By recruiting more people we could easily spread the workload on more core members. I plan to dedicate myself on this topic during this cycle. Thanks for your consideration! Hervé -- Hervé Beraud Senior Software Engineer Red Hat - Openstack Oslo irc: hberaud -----BEGIN PGP SIGNATURE----- wsFcBAABCAAQBQJb4AwCCRAHwXRBNkGNegAALSkQAHrotwCiL3VMwDR0vcja10Q+ Kf31yCutl5bAlS7tOKpPQ9XN4oC0ZSThyNNFVrg8ail0SczHXsC4rOrsPblgGRN+ RQLoCm2eO1AkB0ubCYLaq0XqSaO+Uk81QxAPkyPCEGT6SRxXr2lhADK0T86kBnMP F8RvGolu3EFjlqCVgeOZaR51PqwUlEhZXZuuNKrWZXg/oRiY4811GmnvzmUhgK5G 5+f8mUg74hfjDbR2VhjTeaLKp0PhskjOIKY3vqHXofLuaqFDD+WrAy/NgDGvN22g glGfj472T3xyHnUzM8ILgAGSghfzZF5Skj2qEeci9cB6K3Hm3osj+PbvfsXE/7Kw m/xtm+FjnaywZEv54uCmVIzQsRIm1qJscu20Qw6Q0UiPpDFqD7O6tWSRKdX11UTZ hwVQTMh9AKQDBEh2W9nnFi9kzSSNu4OQ1dRMcYHWfd9BEkccezxHwUM4Xyov5Fe0 qnbfzTB1tYkjU78loMWFaLa00ftSxP/DtQ//iYVyfVNfcCwfDszXLOqlkvGmY1/Y F1ON0ONekDZkGJsDoS6QdiUSn8RZ2mHArGEWMV00EV5DCIbCXRvywXV43ckx8Z+3 B8qUJhBqJ8RS2F+vTs3DTaXqcktgJ4UkhYC2c1gImcPRyGrK9VY0sCT+1iA+wp/O v6rDpkeNksZ9fFSyoY2o =ECSj -----END PGP SIGNATURE-----

2 3

[Gnocchi-api] Gnocchi-api can not be found
by WALSH CHANG 01 Oct '20

01 Oct '20

To whom it may concern, I got the error message when I restart gnocchi-api as the official installation guide. Here is the error message I got root@c3macserver2:~# service gnocchi-api start Failed to start gnocchi-api.service: Unit gnocchi-api.service not found. root@c3macserver2:~# whereis gnocchi-api gnocchi-api: /usr/bin/gnocchi-api gnocchi-api is already the newest version (4.3.2-0ubuntu2~cloud0). Someone said the new version doesn't include the gnocchi-api, so I am trying to install the previous version. https://stackoverflow.com/questions/47520779/service-gnocchi-api-not-found Need the help to install the previous version of gnocchi-api. My openstack version : stein Ubuntu 18.0.4 Thanks. Kind regards, Walsh

1 0

user read-only role not working
by its-openstack＠zohocorp.com 01 Oct '20

01 Oct '20

Dear Openstack, We have deployed openstack train branch. This mail is in regards to the default role in openstack. we are trying to create a read-only user i.e, the said user can only view in the web portal(horizon)/using cli commands. the user cannot create an instance or delete an instance , the same with any resource. we created a user in a project test with reader role, but in horizon/cli able to create and delete instance and similar to other access also if you so kindly help us fix this issue would be grateful. the commands used for creation $ openstack user create --domain default --password-prompt mailto:test-reader@test.com $ openstack role add --project test --user mailto:gowtham.sankar@zohocorp.com reader Thanks and Regards sysadmin

3 2

[neutron] Drivers meeting 02.10.2020 cancelled
by Slawek Kaplonski 01 Oct '20

01 Oct '20

Hi, Due to no agenda items for our tomorrow's drivers meeting, I'm cancelling it for this week. See You on the meeting next week. Have a great weekend :) -- Slawek Kaplonski Principal Software Engineer Red Hat

1 0

[cinder][ops] new cinder stable releases address upgrade bug
by Brian Rosmaita 01 Oct '20

01 Oct '20

Greetings: The Cinder project has two new stable releases: - 16.2.0 (Ussuri) - 15.4.0 (Train) (we also have a new Stein, 14.3.0, but it's not relevant to this discussion) Among other things, these address Bug #1893107 [0], which could prevent a cinder database upgrade from Train to Ussuri when the database in question had been (a) unpurged and (b) originally upgraded from Stein to Train. (A purged Stein database upgraded to Train, or a database that was new in Train, would not be subject to this issue.) The 16.2.0 [1] and 15.4.0 [2] release notes outline some strategies for addressing this issue. We recommend that you read both before attempting an upgrade to Ussuri and decide which strategy works best for you and your users. (Of course, you always read all the release notes, but we figured it wouldn't hurt to bring this particular point to your attention.) Thank you for your attention to this matter! [0] https://bugs.launchpad.net/cinder/+bug/1893107 [1] https://docs.openstack.org/releasenotes/cinder/ussuri.html#relnotes-16-2-0-… [2] https://docs.openstack.org/releasenotes/cinder/train.html#relnotes-15-4-0-s…

1 0

[OpenStack-Ansible][OSA][Docs] Project missing from deployment page
by Amy Marrich 01 Oct '20

01 Oct '20

Hey all, Looks like OpenStack-Ansible has dropped from the deployment section again:( https://docs.openstack.org/ussuri/deploy/ Any suggestions on what we need to patch to get back on the page? Thanks, Amy

3 3

[kolla] No Kall today
by Radosław Piliszek 01 Oct '20

01 Oct '20

Hi, Folks! Sorry for the very late notice: today's Kolla Kall is cancelled due to priority of Victoria release reviews. Thank you for understanding. -yoctozepto

1 0

[sahara][stable] EOL Ocata and Pike
by Jeremy Freudberg 01 Oct '20

01 Oct '20

Hello all, I am announcing the intention to EOL the stable/ocata and stable/pike branches for all branched Sahara deliverables. It has been discussed within the Sahara team a couple times, and it was most recently discussed today [*]. Any objections? Thanks, Jeremy [*] http://eavesdrop.openstack.org/meetings/sahara/2020/sahara.2020-10-01-14.01…

1 0

[cloudkitty][election][ptl] PTL non-candidacy
by Pierre Riteau 01 Oct '20

01 Oct '20

Hello, Late in the Victoria cycle, I volunteered to help with the then inactive CloudKitty project, which resulted in becoming its PTL. While I plan to continue contributing to CloudKitty, I will have very limited availability during the beginning of the Wallaby cycle. In particular, I may not even be able to join the PTG. Thus it would be best if someone else ran for CloudKitty PTL this cycle. If you are interested in nominating yourself but aren't sure what is involved, don't hesitate to reach out to me by email or IRC. Thanks, Pierre Riteau (priteau)

3 4

Should ports created by ironic have PXE parameters after deployment?
by Tyler Bishop 01 Oct '20

01 Oct '20

Hi, My issue is i have a neutron network (not discovery or cleaning) that is adding the PXE entries for the ironic pxe server and my baremetal host are rebooting into discovery upon successful deployment. I am curious how the driver implementation works for adding the PXE options to neutron-dhcp-agent configuration and if that is being done to help non flat networks where no SDN is being used? I have several environments using Kolla-Ansible and this one seems to be the only behaving like this. My neutron-dhcp-agent dnsmasq opt file looks like this after a host is deployed. dhcp/7d0b7e78-6506-4f4a-b524-d5c03e4ca4a8/opts cat /var/lib/neutron/dhcp/ffdf5f9b-b4ad-4a53-b154-69eb3b4a81c5/opts tag:subnet-57b772c1-7878-4458-8c60-cf21eac99ac2,option:dns-server,10.60.3.240,10.60.10.240,10.60.1.240 tag:subnet-57b772c1-7878-4458-8c60-cf21eac99ac2,option:classless-static-route,169.254.169.254/32,10.60.66.2,0.0.0.0/0,10.60.66.1 tag:subnet-57b772c1-7878-4458-8c60-cf21eac99ac2,249,169.254.169.254/32,10.60.66.2,0.0.0.0/0,10.60.66.1 tag:subnet-57b772c1-7878-4458-8c60-cf21eac99ac2,option:router,10.60.66.1 tag:port-08908db1-360b-4973-87c7-15049a484ac6,150,10.60.66.11 tag:port-08908db1-360b-4973-87c7-15049a484ac6,210,/tftpboot/ tag:port-08908db1-360b-4973-87c7-15049a484ac6,66,10.60.66.11 tag:port-08908db1-360b-4973-87c7-15049a484ac6,67,pxelinux.0 tag:port-08908db1-360b-4973-87c7-15049a484ac6,option:server-ip-address,10.60.66.11

7 16

[searchlight][election][ptl] PTL non-candidacy
by Trinh Nguyen 01 Oct '20

01 Oct '20

Hi guys, I have been taking the role of Searchlight's PTL since Stein to hopefully making the project sustainable. Over the course of 4 development cycles, I had lots of joy and also learned a lot while doing maintenance & open source contributor recruiting. Unfortunately, I switched to a job that does not involve OpenStack, and that leaves me no time for contributions. That being said, I announce my non-candidacy for the Wallaby cycle. Though not being able to contribute to the project, I'll still be around and help you out whenever I can. Thanks, -- *Trinh Nguyen* *dangtrinh.com <https://dangtrinh.com>*

2 1

[nova][neutron] The nova-next job is broken on master
by Balázs Gibizer 01 Oct '20

01 Oct '20

Hi, The post_test_hook part of the nova-next job is broken[1] on master blocking the nova gate. Please hold your rechecks. We need a new neutronlib release containing the fix [2] to make the job pass. Until that I proposed a patch that temporary disable the failing test steps[3]. Cheers, gibi [1] https://bugs.launchpad.net/nova/+bug/1898035 [2] https://review.opendev.org/#/c/753230 [3] https://review.opendev.org/#/c/755498

1 0

[tripleo] Image build error with missing osops-tools-monitoring-oschecks in CentOS 8
by Ruslanas Gžibovskis 01 Oct '20

01 Oct '20

Hi all, in file: /usr/share/tripleo-puppet-elements/overcloud-opstools/pkg-map should be added before "default", on line 9 following text, to support CentOS 8: "release": { "centos": { "8": { "oschecks_package": "" } } }, so it would not search for osops-tools-monitoring-oschecks not sure where to submit an update, sending here, someone who knows what and where, can do or I can submit it just name where. -- Ruslanas Gžibovskis +370 6030 7030

2 3

[tc] monthly meeting
by Mohammed Naser 30 Sep '20

30 Sep '20

Hi everyone, Here’s the agenda for our monthly TC meeting. It will happen tomorrow (Thursday the 1st) at 1400 UTC in #openstack-tc and I will be your chair. If you can’t attend, please put your name in the “Apologies for Absence” section. https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting * ACTIVE INITIATIVES - Follow up on past action items - OpenStack User-facing APIs and CLIs (belmoreira) - W cycle goal selection start - Completion of retirement cleanup (gmann) https://etherpad.opendev.org/p/tc-retirement-cleanup - Audit and clean-up tags (gmann) - Remove tc:approved-release tag https://review.opendev.org/#/c/749363/ Thanks, Mohammed -- Mohammed Naser VEXXHOST, Inc.

1 0

[election][horizon] PTL candidacy for Wallaby
by Ivan Kolodyazhny 30 Sep '20

30 Sep '20

Hi team, I would like to announce my candidacy for Horizon PTL for the Wallaby cycle. During Victoria cycle we did a good job with stability improvements and feature development but there are still some areas we need to pay attention during Wallaby development cycle: * More cross-project testing. * Find a solution on how to improve UX and make feature gap smaller. * Involve more contributors into the community. Thanks for reading this and helping me making Horizon better during each release, Ivan Kolodyazhny (e0ne)

1 0

[manila] GHC / Canceling the IRC Meeting this week (1st Oct 2020)
by Goutham Pacha Ravi 30 Sep '20

30 Sep '20

Hello Zorillas, A number of us are mentoring attendees of the "Open Source Day" at the Grace Hopper Celebration tomorrow (1st Oct 2020). Since the agenda [1] had no new items, we'll forego the meeting slot and convene next week instead. If there's anything urgent that needs to be discussed, please share your thoughts on #openstack-manila, or as an email here. If you're available tomorrow, and would like to help with GHC as a mentor, please see Amy's email to the list. [2] Thanks, Goutham [1] https://wiki.openstack.org/wiki/Manila/Meetings#Next_meeting [2] http://lists.openstack.org/pipermail/openstack-discuss/2020-September/01768…

1 0

[election][charms] PTL candidacy for Wallaby
by Frode Nordahl 30 Sep '20

30 Sep '20

Hello all, I hereby announce my candidacy for PTL for the Charms project. There is a lot of good movement in the community and I'm really excited about what the next cycle might bring. Apologies for missing the nomination deadline. -- Frode Nordahl

1 0

Mentors needed Tomorrow!!!!
by Amy Marrich 30 Sep '20

30 Sep '20

Hey all, Found out over night the OpenStack session at Grace Hopper Conference's Open Source Day has 78 mentees registered and we have 6-8 stackers mentoring through the day. If you've ever wanted to help mentor the next hopeful generation of Stackers please let me know. We are working to adapt our plans for the day and do have the option of sending some to another track but that's not the OpenStack way! Thanks, Amy (spotz)

2 3

[election][telemetry] PTL candidacy for Wallaby
by Matthias Runge 30 Sep '20

30 Sep '20

Hi there, I'd like to announce my candidacy to become the next PTL for OpenStack Telemetry for the Wallaby cycle. In the past cycles, we have seen a decrease in contribution for Telemetry related projects. We have also seen the lengthy discussion around gnocchi or the lack of a TSDB in OpenStack. A few months ago, I joined the project and helped with reviews and bug fixes. For the next cycle, I would like to address the a few short term but also some longer term issues such as: - finish cleaning up the python2 to python3 migration. - get a better understanding (and a solution) for the various telemetry gates being blocked - recently, heat stopped testing auto-scaling via aodh and gnocchi, because it was too unstable. I'd like to address that as well. - We haven't had a planning or a roadmap for about the last 1.5 cycles. That is something to do in the future. Thank you for your support and your consideration. Matthias Runge

1 1

Make Full Disks read-only in swift object storage
by Hamidreza Hosseini 30 Sep '20

30 Sep '20

Hi, I've some disks on my swift object storage that they filled and I made them read only by /etc/fstab I think this isn't true adjustment, Anyway, can I solve this problem (I mean full disks ) without changing the ring and just by configuring the proxy to send put /get requests to empty disks but just Get requests to empty disk? Best regards.

1 0

[ironic] Proposing returning Jay Faulkner to ironic-core
by Julia Kreger 30 Sep '20

30 Sep '20

Greetings ironic contributors, I'm sure many of you have noticed JayF has been more active on IRC over the past year. Recently he started reviewing and providing feedback on changes in ironic-python-agent as well as some work to add new features and fix some very not fun bugs. Given that he was ironic-core when he departed the community, I believe it is only fair that we return those rights to him. Any objections? -Julia

6 5

Question about faafo
by Jesus Aransay 30 Sep '20

30 Sep '20

Dear all, I know that faafo ( https://opendev.org/openstack/faafo ) is no longer being maintained, but I still use it to present some service deployment in my teaching about cloud systems. The application still runs nicely in Ubuntu1804, but I tried to configure the RabbitMQ queue to be created in the publisher (Service API), instead of in the consumers (Service Worker), but I failed. My intention was to show that messages could be published in the queue without any workers having been deployed yet. I thought adding a "maybe_declare" statement in the publisher "would do the trick": https://github.com/jmaransay/faafo/blob/478428f11d92cc22d1be396afec3c787136… But still the message queue is only created when the first worker machine is deployed. Does anybody still have some clue about why the application was configured like that, or how the queue could be created in the publisher? Any hints would be highly appreciated, thank you very much in advance, Jesús -- Jesús María Aransay Azofra Universidad de La Rioja Dpto. de Matemáticas y Computación tlf.: (+34) 941299438 fax: (+34) 941299460 mail: jesus-maria.aransay(a)unirioja.es web: http://www.unirioja.es/cu/jearansa Edificio Científico Tecnológico-CCT, c/ Madre de Dios, 53 26006, Logroño, España

1 0

[masakari][tc][elections] yoctozepto mode on
by Radosław Piliszek 29 Sep '20

29 Sep '20

Hello, Folks! Letting you know I have proposed myself for TC member [1] and Masakari PTL positions [2]. Please find the relevant letters in references. Thank you for your time. [1] https://opendev.org/openstack/election/raw/branch/master/candidates/wallaby… [2] https://opendev.org/openstack/election/raw/branch/master/candidates/wallaby… -yoctozepto

4 3

[all][elections][ptl][tc] Combined PTL/TC Nominations End
by Jeremy Stanley 29 Sep '20

29 Sep '20

The PTL and TC Nomination period is now over. The official candidate list for PTLs is available on the election website[0] as is the candidate list for TC seats[1]. There are 10 projects without candidates, so according to this resolution[2], the TC will have to decide how the following projects will proceed: Cloudkitty, Karbor, Octavia, OpenStack_Charms, Oslo, Packaging_Rpm, Placement, Qinling, Searchlight, Senlin. There is 1 project which will have elections: Telemetry. Now begins the campaigning period where candidates and electorate may debate their statements. Polling will start Oct 06, 2020 23:45 UTC. Thank you, [0] https://governance.openstack.org/election/#wallaby-ptl-candidates [1] https://governance.openstack.org/election/#wallaby-tc-candidates [2] https://governance.openstack.org/resolutions/20141128-elections-process-for… -- Jeremy Stanley

1 0

[Diversity] Community feedback on Divisive Language stance
by Amy Marrich 29 Sep '20

29 Sep '20

The OSF Diversity & Inclusion WG has been working on creating the OSF's stance concerning divisive language. We will be holding one more meeting before sending the stance to the OSF Board for any changes before bringing it back to the Community. Our goal however is to get your input now to reduce any concerns in the future! Please check out Draft 4 on the etherpad[0] and place your comments there and join us on October 5th (meeting information will be sent out closer to the meeting) Thanks, Amy (spotz) 0 - https://etherpad.opendev.org/p/divisivelanguage

2 2

Ussuri CentOS 8 add mptsas driver to introspection initramfs
by Oliver Weinmann 29 Sep '20

29 Sep '20

Hi, I already asked this question on serverfault. But I guess here is a better place. I have a very ancient hardware with a MPTSAS controller. I use this for TripleO deployment testing. With the release of Ussuri which is running CentOS8, I can no longer provision my overcloud nodes as the MPTSAS driver has been removed in CentOS8: https://www.reddit.com/r/CentOS/comments/d93unk/centos8_and_removal_mpt2sas… I managed to include the driver provided from ELrepo in the introspection image but It is not loaded automatically: All commands are run as user "stack". Extract the introspection image: cd ~ mkdir imagesnew cd imagesnew tar xvf ../ironic-python-agent.tar mkdir ~/ipa-tmp cd ~/ipa-tmp /usr/lib/dracut/skipcpio ~/imagesnew/ironic-python-agent.initramfs | zcat | cpio -ivd | pax -r Extract the contents of the mptsas driver rpm: rpm2cpio ~/kmod-mptsas-3.04.20-3.el8_2.elrepo.x86_64.rpm | pax -r Put the kernel module in the right places. To figure out where the module has to reside I installed the rpm on a already deployed node and used find to locate it. xz -c ./usr/lib/modules/4.18.0-193.el8.x86_64/extra/mptsas/mptsas.ko > ./usr/lib/modules/4.18.0-193.6.3.el8_2.x86_64/kernel/drivers/message/fusion/mptsas.ko.xz mkdir ./usr/lib/modules/4.18.0-193.6.3.el8_2.x86_64/weak-updates/mptsas sudo ln -sf /lib/modules/4.18.0-193.el8.x86_64/extra/mptsas/mptsas.ko lib/modules/4.18.0-193.6.3.el8_2.x86_64/weak-updates/mptsas.ko sudo chown root . -R find . 2>/dev/null | sudo cpio --quiet -c -o | gzip -8 > ~/images/ironic-python-agent.initramfs Upload the new image cd ~/images openstack overcloud image upload --update-existing --image-path /home/stack/images/ Now when I start the introspection and ssh into the host I see no disks: [root@localhost ~]# fdisk -l [root@localhost ~]# lsmod | grep mptsas Once i manually load the driver, I can see the disks: [root@localhost ~]# modprobe mptsas [root@localhost ~]# lsmod | grep mptsas mptsas 69632 0 mptscsih 45056 1 mptsas mptbase 98304 2 mptsas,mptscsih scsi_transport_sas 45056 1 mptsas [root@localhost ~]# fdisk -l Disk /dev/sda: 67.1 GiB, 71999422464 bytes, 140623872 sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes But how can I make it so that it will automatically load on boot? Best Regards, Oliver

3 4

[election][manila] PTL candidacy for Wallaby
by Goutham Pacha Ravi 29 Sep '20

29 Sep '20

Hello Zorillas and all interested stackers, I'd like to submit my candidacy to be the PTL for the OpenStack Manila team through the Wallaby cycle. I am no longer a stranger to this role, and I've had an excellent team to work with during the past two cycles that serving as PTL has become an absolute pleasure besides being an honor. I've learned by experience that a successful project leader is one that has a great team. I seek to lead an aspirational team that goes all distances to grow, as is evidenced by every member spending a substantial amount of their time mentoring new contributors, and providing an on-boarding ramp to OpenStack - whether this is through informal introductions along the sidelines of conferences, or stray explorers finding us on IRC/email, or engaging with invaluable supporters of diversity and curiosity in the likes of Outreachy, Google Summer of Code, and the Grace Hopper Celebration. I seek to lead a committed team that wants to learn and better itself continuously. We've adopted a proactive policy to bug triage that has kept us rooted to users and their pain points; These bug triages have led to effective (and fun) community "doc-a-thon" and "bug-a-thon" events. Many a times, great effort does not result in great glory. I am proud of the work we do to enhance e2e testing. There are no press releases that reflect this, but I assure you that this work matters a lot to our users. I seek to lead an informed team. Innovation arrives here often by standing on the shoulders of the giants. The team works with technology that's been perfected over decades, as well as with novel breakthroughs of the recent years. We participate in adjacent communities, and adapt while also advocating the lessons we learned in this one. So, if you will have me, I wish to serve you through Wallaby and get things done. Apart from our commitment to OpenStack-wide goals, and the improvements we've charted out, I wish to prioritize a few more work items: - Improve fault tolerance - we've identified some gaps in resource health when certain kinds of service disruptions occur, we'll fix these up. - Achieve OpenStackCLI/SDK/UI parity - there's a lot left to do in this space, and we've actively been chipping away at this for the past two cycles. - API policy improvements - work on the "admin-everywhere" problem with the pop-up team and support fine grained policies in tune with the model of multi-tenancy we cater to. Thank you for your support, Goutham Pacha Ravi <gouthampravi(a)gmail.com> IRC: gouthamr

1 0