- openstack-discuss - lists.openstack.org

Fw: [all][InteropWG] Please verify if Core Project needs any updates for Interop testing of user APIs
by prakash RAMCHANDRAN 03 Jun '20

03 Jun '20

Hi OpenStack Core team members, Please bring this to your PTG meetings if needed. Aassign a volunteer to complete the verification and/or submit patch (if updates are needed). We are trying to run our ambassadors or volunteers to your meetings, but if we miss please reply with "Confirmed OK" to submit these draft to be merged for "OpenStack Powered Compute" approval. Drfat to patch if you need updates is shown below.https://opendev.org/openstack/interop/src/branch/master/2020.06.json Line 100-178 (has all core API capability listed for you to verify)https://opendev.org/openstack/interop/src/branch/master/2020.06.json… All API Ussuri Release notes available on - https://docs.openstack.org/api-ref/ Following Core Team members can Confirm OK? Yes if you do not have any updatex Keystone:ConfirmOK ? or Submit patch for 2020.06.json ? Glance:ConfirmOK ? or Submit patch for 2020.06.json ? Nova:ConfirmOK ? or Submit patch for 2020.06.json ? Neutron:ConfirmOK ? or Submit patch for 2020.06.json ? Cinder:ConfirmOK ? or Submit patch for 2020.06.json ? We are trying to run our ambassadors to your meetings, but if we miss please reply with "Confirmed OK - Yes" to submit these draft for approvals to merge asap. ThanksInterop WG chair: Prakash& Vice chair: Mark

1 0

[kolla] voting on Victoria priorities
by Mark Goddard 03 Jun '20

03 Jun '20

Hi, Thanks to everyone who attended the Kolla PTG sessions, we covered a lot of ground. The Etherpad is available at [1]. At the end of the sessions we agreed on some candidate features for prioritisation during the Victoria cycle. I have moved these across to a second Etherpad [2]. Now is the time to vote! Please add your name against a maximum of 12 items across the 3 deliverables (kolla, kolla-ansible, kayobe) in the priorities [2] Etherpad. [1] https://etherpad.opendev.org/p/kolla-victoria-ptg [2] https://etherpad.opendev.org/p/kolla-victoria-priorities Thanks, Mark

1 0

[OSSN-0086] Dell EMC ScaleIO/VxFlex OS Backend Credentials Exposure
by Brian Rosmaita 03 Jun '20

03 Jun '20

Dell EMC ScaleIO/VxFlex OS Backend Credentials Exposure --- ### Summary ### This vulnerability is present when using Cinder with a Dell EMC ScaleIO or VxFlex OS storage backend. Note: The Dell EMC "ScaleIO" driver was rebranded as "VxFlex OS" in the Train release. ### Affected Services / Software ### Cinder / Ocata, Pike, Queens, Rocky, Stein, Train, Ussuri This vulnerability applies only when using a Dell EMC ScaleIO/VxFlex OS Backend with Cinder. Other drivers are not impacted. ### Discussion ### When using Cinder with the Dell EMC ScaleIO or VxFlex OS backend storage driver, credentials for the entire backend are exposed in the ``connection_info`` element in all Block Storage v3 Attachments API calls containing that element. This enables an end user to create a volume, make an API call to show the attachment detail information, and retrieve a username and password that may be used to connect to another user's volume. Additionally, these credentials are valid for the ScaleIO or VxFlex OS Management API, should an attacker discover the Management API endpoint. This issue was reported by David Hill and Eric Harney of Red Hat. ### Recommended Actions ### Remediation of this issue consists of the following: 1. Patching the ScaleIO or VxFlex OS Cinder driver so that it no longer provides the password to Cinder when a Block Storage v3 Attachments API response is constructed. 2. Patching the ScaleIO connector in the os-brick library so that it retrieves the password from a configuration file readable only by root. (Note: the connector was not rebranded; both ScaleIO and VxFlex OS backends use the 'scaleio' os-brick connector.) 3. Patching the ScaleIO os-brick privileged file that allows the scaleio connector to escalate privileges for specific operations; this is necessary to allow the connector process to access the configuration file that is readable only by root. 4. Deploying a configuration file containing the password (and replication password, if applicable) to all compute nodes, cinder nodes, and anywhere you would perform a volume attachment in your deployment. To refresh database information, all volumes should be detached and reattached. Because this remediation consists of deploying credentials in a root-readable-only file, it is not suitable for the use case of attaching a volume to a bare metal host. Thus, the Dell EMC ScaleIO/VxFlex OS storage backend for Cinder is *not recommended* for use with bare metal hosts. Note: The Ocata, Pike, Queens, and Rocky branches of OpenStack are in the Extended Maintenance phase. Point releases are no longer made from these branches and security patches are produced only on a reasonable effort basis. Patches for Queens and Rocky are provided as a courtesy. Patches for Ocata and Pike are not available. #### Patches #### Both cinder and os-brick must be patched. Documentation is provided as part of the cinder patch concerning the new configuration file that must be deployed to all compute nodes, cinder nodes, and anywhere you would perform a volume attachment in your deployment. Queens * cinder: https://review.opendev.org/733110 * os-brick: https://review.opendev.org/733104 Rocky * cinder: https://review.opendev.org/733109 * os-brick: https://review.opendev.org/733103 Stein * cinder: https://review.opendev.org/733108 * os-brick: https://review.opendev.org/733102 Train * cinder: https://review.opendev.org/733107 * os-brick: https://review.opendev.org/733100 Ussuri * cinder: https://review.opendev.org/733106 * os-brick: https://review.opendev.org/733099 Alternatively, point releases for Stein, Train, and Ussuri will be made as soon as possible. These will be: Stein: cinder 14.0.5, requires os-brick 2.8.5 Train: cinder 15.1.1, requires os-brick 2.10.3 Ussuri: cinder 16.0.1, requires os-brick 3.0.2 ### Contacts / References ### Author: Brian Rosmaita, Red Hat This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0086 Original LaunchPad Bug : https://bugs.launchpad.net/cinder/+bug/1823200 Mailing List : [Security] tag on openstack-discuss(a)lists.openstack.org OpenStack Security Project : https://launchpad.net/~openstack-ossg CVE: CVE-2020-10755

1 0

[all] OpenStack versions that can't practically be run with Python 3 ?
by Neil Jerram 03 Jun '20

03 Jun '20

Does anyone know the most recent OpenStack version that _can't_ easily be run with Python 3? I think the full answer to this may have to consider distro packaging, as well as the underlying code support. For example, I was just looking at switching an existing Queens setup, on Ubuntu Bionic, and it can't practically be done because all of the scripts - e.g. /usr/bin/nova-compute - have a hashbang line that says "python2". So IIUC Queens is a no for Python 3, at least in the Ubuntu packaging. Do you know if this is equally true for later versions than Queens? Or alternatively, if something systematic was done to address this problem in later releases? E.g. is there a global USE_PYTHON3 switch somewhere, or was the packaging for later releases changed to hardcode "python3" instead of "python2"? If so, when did that happen? Many thanks for any information around this! Best wishes, Neil

6 7

[keystone] Keystone PTG Schedule
by Nikolla, Kristi 03 Jun '20

03 Jun '20

Hi all, The Keystone team will be meeting Thursday and Friday 1300-1700 UTC. The schedule[0] can be found below and provides information on how to register and attend. In addition, I'm hoping to organize a team meetup Wednesday, Thursday or Friday on 1700UTC. Please fill in the doodle at [1]. More general PTG information can be found at [2]. [0]. https://etherpad.opendev.org/p/victoria-ptg-keystone [1]. https://doodle.com/poll/z7diwe6qyq4mbghe [2]. http://lists.openstack.org/pipermail/openstack-discuss/2020-May/015054.html

1 1

[cyborg][nova][neutron]Summaries of Smartnic support integration
by yumeng bao 03 Jun '20

03 Jun '20

Hi all, In cyborg pre-PTG meeting conducted last week[0],shaohe from Intel introduced SmartNIC support integrations,and we've reached some initial agreements: The workflow for a user to create a server with network acceleartor(accelerator is managed by Cyborg) is: 1. create a port with accelerator request specified into binding_profile field NOTE: Putting the accelerator request(device_profile) into binding_profile is one possible solution implemented in our POC. Another possible solution,adding a new attribute to port object for cyborg specific use instead of using binding_profile, is discussed in shanghai Summit[1]. This needs check with neutron team, which neutron team would suggest? 2.create a server with the port created Cyborg-nova-neutron integration workflow can be found on page 3 of the slide[2] presented in pre-PTG. And we also record the introduction! Please find the pre-PTG meeting vedio record in [3] and [4], they are the same, just for different region access. [0]http://lists.openstack.org/pipermail/openstack-discuss/2020-May/014987.ht… [1]https://etherpad.opendev.org/p/Shanghai-Neutron-Cyborg-xproj [2]pre-PTG slides:https://docs.qq.com/slide/DVm5Jakx5ZlJXY3lw [3]pre-PTG vedio records in Youtube:https://www.youtube.com/watch?v=IN4haOK7sQg&feature=youtu.be [4]pre-PTG vedio records in Youku:http://v.youku.com/v_show/id_XNDY5MDA4NjM2NA==.html?x&sharefrom=iphon… Regards， Yumeng

5 7

[nova][neutron][cyborg][ptg] Nova changing from Jitsi to Zoom
by Balázs Gibizer 03 Jun '20

03 Jun '20

Hi, As multiple people reported problem with Jitsi from PRC [1][2] the Nova team is switching back to Zoom. We will use the Juno Zoom room [3] during this week. Cheers, gibi [1] http://lists.openstack.org/pipermail/openstack-discuss/2020-June/015207.html [2] http://eavesdrop.openstack.org/irclogs/%23openstack-nova/%23openstack-nova.… [3] https://www.openstack.org/ptg/rooms/juno

1 0

[all] Week Out PTG Details & Registration Reminder
by Kendall Nelson 02 Jun '20

02 Jun '20

Hello Everyone! We are so excited to see you next week at our first virtual PTG! Below are all the details you need to have a fun and successful event. First and foremost: PLEASE REGISTER; https://virtualptgjune2020.eventbrite.com/ If you don't register for the event, we have no way of sending you information about the event, specifically the passwords that we will have set on the zoom rooms. Registration is free. =Final Schedule= The final schedule for the event is available here[1] and in the PTGBot[2]. =Tooling & Passwords= For each virtual PTG meeting room, we will provide an official Zoom videoconference room, which will be reused by various groups across the day. Please make sure to leave the room at the end of your team meeting! We will be setting passwords on the rooms to prevent vandalism/harassment, and we will send those out 24 hours before the start of the event. OpenDev's Jitsi Meet instance is also available at https://meetpad.opendev.org as an alternative tooling option to create team-specific meetings. This is more experimental and may not work as well for larger groups, but has the extra benefit of including etherpad integration (the videoconference doubles as an etherpad document, avoiding jumping between windows). PTGBot can be used to publish the chosen meeting URL if you decide to not use the official Zoom one. The OpenDev Sysadmins can be reached in the #opendev IRC channel if any problems arise. We recommend you try out Zoom and Meetpad ahead of the PTG to solve audio/video issues. =IRC= The main form of synchronous communication between attendees during the PTG is on IRC. If you are not on IRC, learn how to get started here [3]. The main PTG IRC channel is #openstack-ptg on Freenode, and it's used to interact with the PTGbot. The OpenStack Foundation (OSF) staff will be present to help answer questions. =PTGbot= The PTGbot[2] is an open source tool that PTG room moderators use to surface what's currently happening at the event. Room moderators will send messages to the bot via IRC, and from that information the bot publishes a webpage with several sections of information: - The discussion topics currently discussed in the room ("now") - An indicative set of discussion topics coming up next ("next") - The schedule for the day with available extra slots you can book Learn more about the PTGbot via the documentation here [4]. =Help Desk= We are here to help! If you have any questions during the event week, we will have a dedicated Zoom room where an OSF staff member will be available to answer your event related questions. If a staff member is not there to help, you can always reach someone at ptg(a)openstack.org or on IRC in the #openstack-ptg channel. =Feedback= We have created an etherpad[5] to collect all of your feedback throughout the event. Please add your thoughts so we can continue improving our virtual events! =Virtual Event Best Practices= Check out our list of virtual event best practices[6] prior to the event to help make the most of your time at the PTG. =Code of Conduct= The PTG is for everyone. We have zero tolerance for harassment and other violations of the OSF Community Code of Conduct. Before the PTG begins, please review the Code of Conduct[7] and know how to report an issue. -The Kendalls (diablo_rojo & wendallkaters) [1] Schedule: https://www.openstack.org/ptg#tab_schedule [2] Live PTGBot: http://ptg.openstack.org/ptg.html [3] IRC Setup: https://docs.openstack.org/contributors/common/irc.html [4] PTGBot Documentation: https://github.com/openstack/ptgbot/blob/master/README.rst [5] Feedback Etherpad: https://etherpad.opendev.org/p/June2020-PTG-Feedback [6] PTG Best Practices: https://etherpad.opendev.org/p/virtual-ptg-best-practices [7] Code of Conduct: https://www.openstack.org/legal/community-code-of-conduct/

11 18

[cinder] virtual happy hour on Thursday 4 June
by Brian Rosmaita 02 Jun '20

02 Jun '20

The People have spoken and they have said that Thursday is the day we should hold the virtual happy hour. It's therefore scheduled for 15:30 UTC in the "Diablo room" (which is what I'm now calling my BlueJeans room): https://bluejeans.com/3228528973 This is an opportunity for us to have some informal virtual face-to-face time. Since the virtual drinks are unlimited, everyone is welcome, even if you don't contribute to cinder in the course of your normal work activities. The event will *not* be recorded :) See you there! brian

1 0

[tripleo] PTG day 3
by Emilien Macchi 02 Jun '20

02 Jun '20

Hi Folks For day 3, we'll stay on Zoom, it seems like the best option for our group so far. The agenda looks like it: 13:00 UTC Topic: Speeding up deployments, updates and upgrades Presenter: Jesse Pretorius (odyssey4me), Sofer Athlan (chem) 13:30 UTC Topic: Ceph requirements Presenter: fmount, fultonj, gfidente 14:00 UTC Topic: Running validations from within a container Presenter: cjeanneret (Tengu) 14:30 UTC Topic: Auto --limit scale-up of Compute nodes Presenter: Luke Short (ekultails) 15:00 UTC Topic: TripleO usability enhancements Presenter: Wes Hayutin 15:30 UTC Topic: Improvements in TLS Everywhere/ CI Presenter: rlandy, alee 16:00 UTC Topic: Container Security in TripleO Presenter: Grzegorz Grasza (xek), alee 16:30 UTC free slot Since we have a free slot, feel free to propose any new topic otherwise we'll finish earlier (could also be appreciated, specially for folks in EMEA/APAC). Thanks and see you tomorrow! -- Emilien Macchi

1 0

[diversity] Hour of Healing
by Amy Marrich 02 Jun '20

02 Jun '20

The OSF Diversity and Inclusion Working Group recognizes that this is a trying time for our communities and colleagues. We would like to invite you to 'An Hour of Healing' on Thursday (June 4th at 17:30 - 18:30 UTC) where you can talk to others in a safe place. We invite you to use this time to express your feelings, or to just be able to talk to others without being judged. This session will adhere to the OSF Code of Conduct <https://www.openstack.org/legal/community-code-of-conduct/>and zero tolerance for harassment policy, which means we will not be judging or condemning others (individuals or groups) inside OR outside of our immediate community. We will come together to heal, in mutually respectful dialogue, keeping in mind that while there are many different individual viewpoints, we all share pain collectively and can heal together. We will be using https://meetpad.opendev.org/PTGDiversityAndInclusion for this gathering. The OSF Diversity and Inclusion WG

1 0

[barbican] Core Team updates
by Douglas Mendizabal 02 Jun '20

02 Jun '20

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 All, I would like to welcome Moisés Guimarães to the barbican-core group. I'm looking forward to more of Moisés' contributions for the Victoria cycle. I've also removed a few members from the core team that have moved on to other things and are no longer contributing to Barbican. The up-to-date team roster can be found here: https://review.opendev.org/#/admin/groups/178,members I'd also like to invite anyone who is interested in Barbican development to reach out to the team. We would love to see more developers join the core group, and I am personally willing to help mentor folks who are interested. Thanks, Douglas Mendizábal Barbican PTL -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwcapj5oGTj2zd3XogB6WFOq/OrcFAl7Wke0ACgkQgB6WFOq/ Orfzzw//TcXOOhIYhmEoJm2XlrYQWbcLId8/0tZLieZexDz3U8zZ3+Mox9GQXWtr bU4EPvUU43e+cimDdyIrMU8CWwtIWf5NolzH+YVCDeXe82vPvPvh9s8RTZ2+qmU2 01799bjWYftgK1FLeB6itHH/Mm9vwRWs9IrfUA5lnwzGZDzsjPhgJkWMogYhqsFz nz2RnRG9GWXrxNV+fyMm/Vlmdb0fq+CPnLDWfN0gJVmtCDE4Prz7Beo4Ys3GwQ2K TIU+r6PyZPwTCUetnn5xTZ1zPJ8zmmpDdgzdziX3vgS1X8NRh90D5pqFZl9ggDgO 7DgFU4yEgDFQa66atqm/0gPMHOvJmDYn2ubWnYn0LDsoXMPwDRbBjXX6IFNEXwGF OfuUWcJQIOvvAHp/V8nLGX3DNXXcoCvkY1z/MkeN1vglV0lmBUIpz373Xnm4rbLL 29RGdI+cZVVPVNras3d1TZlXl3YN2sIrZjYc5n7PXAttOIKuqTfgUrn1hFGsGR2O eXkRVWKvPKHp7hSwh+IckdPjdptq3CNIuJdfh2eNrAYvV/jFFsQjMcoEnKXUeYWR jJRYdPJFxEGLUQJMKh0k33jW3n5PZN4Rlo1/940tMReDiVEAVIpHtTyrHfFEos+0 VGl+ykqqTxgV7yGkqfg7nqER8VGvVDF4PyWh23/WG2Ys1hAL7BM= =NP6P -----END PGP SIGNATURE-----

1 0

[cinder] [ironic] Any update on Cinder Ceph ISCSI Driver?
by kevinz 02 Jun '20

02 Jun '20

Hi Cinder, We are looking forward to the IRONIC boot from Cinder Ceph Volume. I went through the mailist and found the conversation last year, the main gap for the Ironic boot from Cinder volume(Ceph BACKEND) is lacking Cinder Ceph iscsi driver. http://lists.openstack.org/pipermail/openstack-discuss/2019-May/006041.html So I'm sending to ask the current status for this. We are from Linaro, all our machines are under Ironic and we use Ceph as backend storage. Recently we are looking at the Diskless server boot plan from the Ceph cluster. Any info or update or advice, I really appreciate it. Look forward to hearing from you.

3 4

[cinder][security] propose Rajat Dhasmana for cinder coresec
by Brian Rosmaita 02 Jun '20

02 Jun '20

Jay Bryant is stepping down from the Cinder core security team due to time constraints. I am proposing to replace him with Rajat Dhasmana (whoami-rajat on IRC). Rajat is has been a cinder core since January 2019 and is a thorough and respected reviewer and developer. Additionally, he'll extend our time zone coverage so that there will always be someone available to review/work on security patches around the clock. I intend to add Rajat to cinder coresec on Tuesday, 2 June; please communicate any concerns to me before then. cheers, brian

4 4

[tripleo] trying Jitsi for PTG day 2
by Emilien Macchi 02 Jun '20

02 Jun '20

Hi folks, Tomorrow we'll try to use https://meetpad.opendev.org/tripleo-ptg-victoria instead of Zoom. Today we reached ~50 attendees, let's see if Jitsi can handle it and if not we will roll back to the Zoom link. See you tomorrow! -- Emilien Macchi

2 2

[Virtual PTG][nova][sdk] Future of microversion support in SDK
by Artom Lifshitz 02 Jun '20

02 Jun '20

tl;dr Artom to work on catching up the SDK to Nova's latest microversion, any new Nova microversion should come with a corresponding SDK patch. Hello folks, In the SDK/CLI room today we discussed making openstackclient (osc form now on) the main client for interacting with an OpenStack cloud and eventually getting rid of the python-*clients. For context, openstacksdk (sdk from now on) currently has microversion support similar to how python-*clients handle it: autonegotiate with the server to the greatest common microversion. Osc, on the other hand, defaults to 2.1 - anything higher than that needs to be specified on the command line. The long term plan is to move osc to consume sdk. In light of all this, we decided that the best way to achieve the goal stated in the first paragraph is to: 1. Catch up sdk to Nova. This isn't as daunting as it looks, as the latest microversion sdk currently supports is 2.72. This means there's "only" two cycles of catchup to do before we reach Nova's current max of 2.87. I (Artom) have signed on to do that work, and Mordred has kindly promised quick review. 2. Officialise a Nova policy of "any new microverison should come with a corresponding SDK patch." This is essentially what [1] is aiming for, and it already has wide buy-in from the Nova community. Converting osc to consume sdk is left to the osc/sdk community, though obviously any help there will be appreciated, I'm sure. Please keep me honest if I said anything wrong :) Cheers! [1] https://review.opendev.org/#/c/717722/

2 2

[cinder] survey for backend driver maintainers/developers
by Brian Rosmaita 02 Jun '20

02 Jun '20

We're scheduled to have a Drivers Retrospective for Ussuri tomorrow (see the etherpad for details, projected time): https://etherpad.opendev.org/p/victoria-ptg-cinder Here is the quick survey (only 3 questions, should only take a few minutes): https://rosmaita.wufoo.com/forms/cinder-ussuri-retrospective-survey-for-dri… Please fill out the survey even if you can't attend, the feedback will be helpful. cheers, brian

1 0

[cyborg][ptg] Cyborg PTG Summary for the Day — Come in series
by yumeng bao 02 Jun '20

02 Jun '20

Hi all, Thanks for all your participation! We’ve conducted a successful meeting on the first day despite some network crash during the meeting. Zoom Records will be uploaded and shared later at the end of PTG. Today, We’ve mainly discussed: 1. more nova operations support [Agreement] In the victoria release, we will work on rebuild/evcaute, suspend/resume, shelve/unshelve and resize operations. binding/unbinding will be left for future release, but as a longterm goal, we can keep discussion once there are good ideas. [Action] bring up nova operations to nova-cyborg cross project sessions: https://etherpad.opendev.org/p/nova-victoria-ptg 2. placement/cyborg-db data consistency: [Agreement] We need decouple placement data report and cyborg-db update in conductor diff. [Solution discussed] add a new object such as placement_object to sync with placement, and do placement diff independently. But how to collect the cyborg-specific data from placement? get all and filter in cyborg??? We will continue this issue tomorrow. Tomorrow, we will discuss: 1. Placement and cyborg-db consistency issue; 2. Support new drivers: Intel QAT and Inspur FPGA drovers; 3. Driver Program API; 4. Should we support API attribute? See you tomorrow at 6:00 UTC! For More details please see https://etherpad.opendev.org/p/cyborg-victoria-goals Regards， Yumeng

1 0

[Watcher] no IRC meeting tomorrow
by licanwei 02 Jun '20

02 Jun '20

1 0

[neutron][qos] Bi-weekly meeting canceled due to PTG
by Rodolfo Alonso Hernandez 02 Jun '20

02 Jun '20

Hello: Today there won't be the Neutron QoS meeting. Regards. Rodolfo Alonso.

1 0

[nova] Weekly meeting canceled due to PTG
by Balázs Gibizer 02 Jun '20

02 Jun '20

Hi, There won't be weekly IRC meeting this week. Cheers, gibi

1 0

[tacker][ptg] PTG schedule update
by Yasufumi Ogawa 01 Jun '20

01 Jun '20

Hi team, I've added a timetable simply because we have many topics during this vPTG[1]. Thank you for your proposals and joining. I'd like also to skip IRC meeting this week because we can have a talk at vPTG instead. [1] https://etherpad.opendev.org/p/Tacker-PTG-Victoria Thanks, Yasufumi

1 1

[neutron] Neutron Bug Deputy Report May 25-31
by Rodolfo Alonso Hernandez 01 Jun '20

01 Jun '20

Hello: This is the Neutron bug report of week 22 (25 May - 31 May). Untriaged: - "OVN Router sending ARP instead of sending traffic to the gateway" * https://bugs.launchpad.net/neutron/+bug/1881041 - "the accepted-egress-direct-flows can't be deleted when the VM is deleted" * https://bugs.launchpad.net/neutron/+bug/1881070 * Assigned to Li YaJie High: - ""rpc_response_max_timeout" configuration variable not present in Linux Bridge agent" * https://bugs.launchpad.net/neutron/+bug/1880934 * Assigned to Tamerlan Abu * Patch proposed: https://review.opendev.org/#/c/731194 - "[tempest] Error in "test_reuse_ip_address_with_other_fip_on_other_router" with duplicated floating IP" * https://bugs.launchpad.net/neutron/+bug/1880976 * Assigned to Rodolfo * Patch proposed: https://review.opendev.org/731267 - "Neutron ovs agent fails on rpc_loop iteration:1" * https://bugs.launchpad.net/neutron/+bug/1881424 * Assigned to Terry Wilson * Patch proposed: https://review.opendev.org/#/c/732081 Medium: - "interrupted vlan connection after live migration" * https://bugs.launchpad.net/neutron/+bug/1880455 * Unassigned - "SSH issues during ML2/OVS to ML2/OVN migration" * https://bugs.launchpad.net/neutron/+bug/1881029 * Assigned to Brian Haley * Patch proposed: https://review.opendev.org/#/c/731367/ - "[OVN] Router availability zones support" * https://bugs.launchpad.net/neutron/+bug/1881095 * Assigned to Lucas Alvares * Patch proposed: https://review.opendev.org/#/c/727791/ - "[OVS][FW] Remote SG IDs left behind when a SG is removed" * https://bugs.launchpad.net/neutron/+bug/1881157 * Assigned to Rodolfo Low: - "Comments for stateless security group are misleading" * https://bugs.launchpad.net/neutron/+bug/1880691 * Assigned to Slawek * Patch proposed: https://review.opendev.org/#/c/730793/ - "[fullstack] Error assigning IPv4 (network address) in "test_gateway_ip_changed" * https://bugs.launchpad.net/neutron/+bug/1880845 * Assigned to Rodolfo - "Creating FIP takes time" * https://bugs.launchpad.net/neutron/+bug/1880969 * Unassigned - "[OVN] In stable branches we don't run neutron-tempest-plugin tests" * https://bugs.launchpad.net/neutron/+bug/1881283 * Unassigned - "Neutron agents process name changed after neutron-server setproctitle change" * https://bugs.launchpad.net/neutron/+bug/1881297 * Unassigned Wishlist: - "[RFE]L3 Router should support ECMP" * https://bugs.launchpad.net/neutron/+bug/1880532 * Assigned to XiaoYu Zhu * Discussed in the Neutron Drivers Meeting on May 25 Regards.

2 1

[cyborg] Cyborg IRC weekly meeting cancelled on June 4
by yumeng bao 01 Jun '20

01 Jun '20

Hi, Cyborg weekly meeting on June 4 will be cancelled due to the virtual PTG event. All cyborg members and cores will be attending the PTG events. Next week, we will resume the weekly meeting. See you next week! Regards， Yumeng

1 0

[cyborg][ptg] Cyborg PTG Starts in less than 3 hours!
by yumeng bao 01 Jun '20

01 Jun '20

Hi team, We got less than three hours to go before our PTG session stars! Please check the up-to-date schedule : https://etherpad.opendev.org/p/cyborg-victoria-goals. You can find topic schedules, zoom/meetpad urls there! See you soon! Regards， Yumeng

1 0

Re: [Openstack-mentoring] Neutron subnet with DHCP relay
by Amy Marrich 01 Jun '20

01 Jun '20

Hey Tom, Forwarding to the OpenStack discuss list where you might get more assistance. Thanks, Amy (spotz) On Thu, May 28, 2020 at 3:32 PM Thomas King <thomas.king(a)gmail.com> wrote: > Good day, > > We have Ironic running and connected via VLANs to nearby machines. We want > to extend this to other parts of our product development lab without > extending VLANs. > > Using DHCP relay, we would point to a single IP address to serve DHCP > requests but I'm not entirely sure of the Neutron network/subnet > configuration, nor which IP address should be used for the relay agent on > the switch. > > Is DHCP relay supported by Neutron? > > My guess is to add a subnet in the provisioning network and point the > relay agent to the linuxbridge interface's IP: > 14: brq467f6775-be: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc > noqueue state UP group default qlen 1000 > link/ether e2:e9:09:7f:89:0b brd ff:ff:ff:ff:ff:ff > inet 10.10.0.1/16 scope global brq467f6775-be > valid_lft forever preferred_lft forever > inet6 fe80::5400:52ff:fe85:d33d/64 scope link > valid_lft forever preferred_lft forever > > Thank you, > Tom King > _______________________________________________ > openstack-mentoring mailing list > openstack-mentoring(a)lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-mentoring >

5 8

[qa] No office hour this week
by Masayuki Igawa 01 Jun '20

01 Jun '20

Hi team, We won't be holding the weekly office hour on Tuesday 2 June since we'll be meeting at the virtual PTG instead. Please find the etherpad for more information: https://etherpad.opendev.org/p/qa-victoria-ptg -- Masayuki Igawa

1 0

[First Contact] [SIG] PTG Meeting
by Kendall Nelson 01 Jun '20

01 Jun '20

Hello Everyone! I updated our PTG URL to be a meetpad[1] meeting room. If that doesn't work, we can fall back to zoom. There isn't much on the agenda and a lot of it will be shaped by who is around. Hope to see you all there at 23:00 UTC! -Kendall (diablo_rojo) [1] https://meetpad.opendev.org/victoria-ptg-first-contact

1 0

[manila][ptg] Schedule change announcement
by Goutham Pacha Ravi 01 Jun '20

01 Jun '20

Hello Zorillas, Thank you for joining today's call, and driving interesting and informative discussions! We have a schedule update to accommodate a conflicting session. On Tuesday, 2nd June 2020, we will meet between 15:00 and 15:45 and again between 21:00 and 23:00 UTC. On Friday, 5th June 2020, we will meet between 1300 UTC and 1700 UTC (the Happy Hour is between 1600 UTC and 1700 UTC) The schedule for Tuesday is below for your reference: === Tuesday, 2nd June 2020 === 15:00 - 15:45 UTC - cephfs updates (vkmc) 21:00 - 23:00 UTC - Add/Delete/Update security services for in-use share networks (dviroel/carloss) - Create shares with two (or more) subnets (dviroel) - TC Tags applications (gouthamr) You'll find the rest of the schedule updates made on the planning etherpad [1] Thanks! Goutham Pacha Ravi [1] https://etherpad.opendev.org/p/vancouver-ptg-manila-planning

1 0

[ptg][swift][ops] Operator feedback session tomorrow, 2 Jun 13:00-14:00 UTC
by Tim Burke 01 Jun '20

01 Jun '20

Tomorrow(/later today, depending on timezone) the Swift community will have an operator feedback session during our PTG slot [0]. If you're running a swift cluster, large or small, we'd love to see you there! As we've done in the past [1], we'll have an etherpad going [2] -- feel free to start filling it in and adding discussion items today! Even if you won't make the meeting, we'd appreciate your feedback. Looking forward to hearing from you! Tim [0] 1300 UTC in https://www.openstack.org/ptg/rooms/liberty [1] https://wiki.openstack.org/wiki/Swift/Etherpads#List_of_Ops_Feedback_Etherp… [2] https://etherpad.opendev.org/p/swift-victoria-ops-feedback

1 0

[cinder] yet another PTG schedule update
by Brian Rosmaita 01 Jun '20

01 Jun '20

Apologies, hopefully this is the final update. Thanks to Jay for helping me test out recording in meetpad. We decided that it will be a way better experience for all concerned to move the Cinder part of the PTG to BlueJeans, in which we have had good experiences as a team holding virtual meetings in the past. Plus, the resulting recordings have been really good. As usual, they'll be posted to the Cinder Youtube channel, where anyone can access them. So, the key links for the Cinder sessions, Tuesday-Friday 1300-1600 UTC: etherpad: https://etherpad.opendev.org/p/victoria-ptg-cinder meeting: https://bluejeans.com/3228528973 BlueJeans has a groovy red dot that will indicate when the session is being recorded. Contact me on #openstack-cinder if you have any questions. cheers, brian

1 0

[cinder] virtual happy hour poll
by Brian Rosmaita 01 Jun '20

01 Jun '20

There was some interest expressed at the Cinder meeting last week for us to have some informal virtual face-to-face time during the PTG. I've put together a doodle poll to pick a day/time: https://doodle.com/poll/2emp9hru5neqzsei Please take the poll before 21:00 UTC tomorrow (2 June). There will be unlimited virtual beverages and virtual hors d'oeuvres. Unfortunately, if you would like a real beverage or snack, it's strictly bring-your-own. thanks, brian

1 0

[multi-arch-sig] Reminder for PTG time table
by Rico Lin 01 Jun '20

01 Jun '20

Dear all I just like to remind you that we reserved PTG room for the following schedule. Tuesday 0600-0800 UTC @ Icehouse Tuesday 1400-1600 UTC @ Icehouse room Thursday 0600-0800 UTC @ Icehouse Please join us if you find any valid time for you. For more information: Etherpad: https://etherpad.opendev.org/p/Multi-arch-2020-VPTG rest PTG information http://ptg.openstack.org/ptg.html -- May The Force of OpenStack Be With You, *Rico Lin*irc: ricolin

1 0

[blazar] Victoria PTG
by Pierre Riteau 01 Jun '20

01 Jun '20

Hello, As a reminder, the Blazar project (Resource Reservation as a Service) will meet several times this week as part of the Victoria virtual PTG. With our contributors located across the world, we have scheduled three separate meetings slots: 1. Tuesday June 2, 2020 6-8 UTC in Bexar room (Asia / Europe) 2. Tuesday June 2, 2020 13-14 UTC in Icehouse room (all timezones) 3. Thursday June 4, 2020 13-15 UTC in Cactus room (Europe / Americas) I would like to hold a Ussuri retrospective during session #2, since all active contributors have confirmed they are able to attend. All details can be found on the following Etherpad: https://etherpad.opendev.org/p/blazar-ptg-victoria Everyone who is interested in Blazar is welcome to join. I am looking forward to talking with you! Cheers, Pierre Riteau (priteau)

1 0

[cinder] no weekly team meeting on 3 June
by Brian Rosmaita 01 Jun '20

01 Jun '20

We won't be holding the weekly team meeting on Wednesday 3 June. Instead, we'll be meeting at the virtual PTG. See the etherpad for more information: https://etherpad.opendev.org/p/victoria-ptg-cinder

1 0

[cinder] PTG schedule update
by Brian Rosmaita 01 Jun '20

01 Jun '20

The *times* all remain the same. We'll be using Meetpad (not zoom) for our meetings: https://meetpad.opendev.org/victoria-ptg-cinder About recording -- PLEASE READ: Because Meetpad does not have a native recording function, I will be using a third party chrome plugin to record the meeting. This means that there will not be a fancy red dot to warn you that a recording is happening. So when you join, *you should assume that you are being recorded*. I will remind everyone of this at the beginning of each session, but if you join late, or course, you won't hear the reminder. So for the duration of the PTG, by joining the Cinder PTG Meetpad sessions, you are consenting to be part of the recording. Contact me on #openstack-cinder if you have any questions. Just as a reminder about what the times are: Tuesday-Friday 1300-1600 UTC. The full Cinder schedule is on the official Cinder etherpad for the PTG: https://etherpad.opendev.org/p/victoria-ptg-cinder cheers, brian

1 0

UC meeting this week
by Mohamed Elsakhawy 01 Jun '20

01 Jun '20

Hi All, The UC meeting this week will be held as part of the PTG in the Bexar room on June 4th, 13-15 UTC Thanks Mohamed

1 0

[tc] changing meeting time
by Mohammed Naser 01 Jun '20

01 Jun '20

Hello everyone, The PTG is happening online next week, on the same day as our TC monthly meeting. Since the PTG is only every six months, and we will meet the month after, how does everyone feel about skipping this month's meeting and considering the PTG as our meeting instead? Your comments are appreciated, Thanks, -- Mohammed Naser VEXXHOST, Inc.

5 4

[nova][ptg] Documentation in nova
by Stephen Finucane 01 Jun '20

01 Jun '20

Hi, [This is a topic from the PTG etherpad [0]. As the PTG time is intentionally kept short, let's try to discuss it or even conclude it before the PTG] Our documentation in nova is suffering from bit rot, the ongoing effects of the documentation migration during Pike (I think), and general lack of attention. I've been working to tackle this but progress has been very slow. I suggested this a couple of PTGs ago, but once again I'd like to explore going on a solo run with these by writing and self-approving (perhaps after a agreed interval) *multiple* large doc refactors. I've left some notes below, copied from the Etherpad, but in summary I believe this is the only realistic way we will ever be able to fix our documentation. Cheers, Stephen [0] https://etherpad.opendev.org/p/nova-victoria-ptg --- Documentation reviews are appreciated but are generally seen as low priority. See: * https://review.opendev.org/667165 (docs: Rewrite quotas documentation) * https://review.opendev.org/667133 (docs: Rewrite host aggregate, availability zone docs) * https://review.opendev.org/664396 (docs: Document how to revert, confirm a cold migration) * https://review.opendev.org/635243 (docs: Rework the PCI passthrough guides) * https://review.opendev.org/640730 (docs: Rework all things metadata'y) * https://review.opendev.org/625878 (doc: Rework 'resize' user doc) * ... I (stephenfin) want permission to iterate on documentation and merge unilaterally unless someone expresses a clear interest Pros: * Documentation gets better * I can iterate *much* faster Cons: * Possibility of mistakes or "bad documentation is worse than no documentation" * Counterpoint: Our documentation is already bad/wrong and is getting worse due to bitrot. * Better is subjective * Counterpoints: The general structure of the patches I listed above was accepted in each case, I have other projects I have authored to point to (e.g. patchwork.readthedocs.io/) * Merge conflicts * Counterpoint: It's docs. Just drop these (non-functional) hunks if it's awkward.

4 4

[neutron] Drivers meeting on Friday 5.06.2020 cancelled
by Slawek Kaplonski 01 Jun '20

01 Jun '20

Hi, It's PTG time so lets cancel this week meeting. -- Slawek Kaplonski Senior software engineer Red Hat

1 0

[neutron] CI meeting on Wednesday 03.06.2020 cancelled
by Slawek Kaplonski 01 Jun '20

01 Jun '20

Hi, It's PTG time so lets cancel this week CI meeting. -- Slawek Kaplonski Senior software engineer Red Hat

1 0

[neutron] Team meeting on Tuesday 02.06.2020 cancelled
by Slawek Kaplonski 01 Jun '20

01 Jun '20

Hi, We have PTG sessions in same time, so lets cancel IRC meeting this week. See You all on the PTG sessions :) -- Slawek Kaplonski Senior software engineer Red Hat

1 0

[keystone] is_admin_project=true although no admin project configured
by Bernd Bausch 01 Jun '20

01 Jun '20

This is on a stable/ussuri Devstack that I spun up about ten days ago. The documentation for Keystone config option admin_project_name says [1] "If left unset, then there is no admin project". It is not set in my cloud, as evidenced by this: $ sudo journalctl -u devstack@keystone |grep admin_project_name Jun 01 11:49:55 ussuri devstack(a)keystone.service[806]: DEBUG uwsgi [-] *resource.admin_project_name = None *{{(pid=2063) log_opt_values /usr/local/lib/python3.6/dist-packages/oslo_config/cfg.py:2589}} However, when authenticating with any project, I see 'is_admin_project': True in the log, for example here user /linda /with a project-scoped token for project /moon/: Jun 01 13:55:09 ussuri devstack(a)keystone.service[806]: DEBUG keystone.server.flask.request_processing.middleware.auth_context [None req-4d730134-9544-4475-a72f-b2394863345e *moon linda*] RBAC: auth_context: {'token': <TokenModel (audit_id=1Ie2AyIdRb2WUkaSjSzDoQ, audit_chain_id=['1Ie2AyIdRb2WUkaSjSzDoQ']) at 0x7fca69b75c88>, 'domain_id': None, 'trust_id': None, 'trustor_id': None, 'trustee_id': None, 'domain_name': None, 'group_ids': [], 'user_id': 'a8c3559f67094f38a5f0d2d0b581f159', 'user_domain_id': 'default', 'system_scope': None, 'project_id': '163b41b499aa4ac78f2ed968e7fe2a0d', 'project_domain_id': 'default', 'roles': ['admin', 'reader', 'member'], *'is_admin_project': True*, 'service_user_id': None, 'service_user_domain_id': None, 'service_project_id': None, 'service_project_domain_id': None, 'service_roles': []} {{(pid=2062) fill_context /opt/stack/keystone/keystone/server/flask/request_processing/middleware/auth_context.py:478}} It gets worse. When I configure admin_project_name=admin and admin_project_domain_name=Default, I do see is_admin_project: false in the log, as expected. Still, /linda/, who has the admin role in the /moon /project,//seems to have cloud admin powers. I tested this by creating a Cinder volume type and by listing all instances in the cloud. So it seems to me that Keystone's old behaviour is in effect: I have admin powers if I have the /admin /role in any project. To me, this looks like a clash between reality and documentation. Am I missing something? Thanks for comments. Bernd [1] https://docs.openstack.org/keystone/latest/configuration/config-options.htm…

1 1

[openstack-helm] IRC Meeting Cancelled - June 02nd
by Gage Hugo 31 May '20

31 May '20

Hello everyone, The openstack-helm meeting this week, June 02nd, will be cancelled due to the PTG happening this week. We will continue regular meetings again next week.

1 0

[security] Security SIG meeting June 04th Cancellation
by Gage Hugo 31 May '20

31 May '20

Hello everyone, The Security SIG meeting this week, June 04th, will be cancelled due to the PTG happening this week. We will continue regular meetings again next week.

1 0

[openstack-helm] OpenStack-Helm PTG Schedule
by Gage Hugo 31 May '20

31 May '20

Hello, The OpenStack-Helm team will be meeting for the PTG on Tue, June 2nd and Wednesday, June 3rd from 1300-1700 UTC. The current agenda etherpad can be found here[0]. Hope to see you there! [0] https://etherpad.opendev.org/p/openstack-helm-ptg-victoria

1 0

[security] Security SIG PTG Schedule
by Gage Hugo 31 May '20

31 May '20

Hello, The Security SIG will be meeting for the PTG on Monday, June 1st from 1500-1700 UTC & 2100-2300 UTC. The current agenda etherpad can be found here[0]. Hope to see you there! [0] https://etherpad.opendev.org/p/security-sig-ptg-victoria

1 0

[neutron] Drivers meeting on Friday 5.06.2020 cancelled
by Slawek Kaplonski 31 May '20

31 May '20

Hi, It's PTG time so lets cancel this week meeting. -- Slawek Kaplonski Senior software engineer Red Hat

1 0

[neutron] CI meeting on Wednesday 03.06.2020 cancelled
by Slawek Kaplonski 31 May '20

31 May '20

Hi, It's PTG time so lets cancel this week CI meeting. -- Slawek Kaplonski Senior software engineer Red Hat

1 0

[neutron] Team meeting on Tuesday 02.06.2020 cancelled
by Slawek Kaplonski 31 May '20

31 May '20

Hi, We have PTG sessions in same time, so lets cancel IRC meeting this week. See You all on the PTG sessions :) -- Slawek Kaplonski Senior software engineer Red Hat

1 0