- openstack-discuss - lists.openstack.org

[ptl][election][cinder] PTL candidacy for 2024.2
by Jon Bernard 27 Feb '24

27 Feb '24

Hi All, I would like to announce my candidacy for PTL of the Cinder project for the 2024.2 cycle. I think Rajat has done an excellent job serving the project and I would like to carry existing efforts forward while continuing to focus maintaining a healthy and productive community around the Cinder project. I've been contributing to the Cinder project in varying capacity for close to 10 years. I've worked on migration and replication at the driver layer, mentored new contributors from the outreachy project, and provided bug fixes and reviews wherever possible. I'm a core reviewer and also a stable core. I have served as the release liaison for the last 2 cycles and run a weekly bug squashing meeting to help maintain our launchpad backog. We continue to face review bandwidth pressure. Emphasis should be placed on encouraging contributors to do code reviews and to recognize the efforts of those currently participating. There are several potential core reviewers and I feel that empowering the community is one way to increase engagement and the quality of our releases. 3rd party CI continues to be crucial resource for evaluating driver-specific changes. Maintaining good 3rd party CI for the drivers supported in Cinder by providing clear documentation and requirements will be a focus. Additionally, we have room for improvement in our backup and restore use case. My goal is to improve the entire backup/restore situation so that it can be leveraged by users in production environments. Our customers are using 3rd party backup products to backup workloads and volumes and I think this is one are where improvements here can directly benefit users. In summary, I would like to continue the efforts made by Rajat and continue to focus the areas most in need of attention for the 2024.2 cycle. I will do my best to make a positive contribution to both the technical and community aspects of Cinder during my time as PTL. Thank you for your consideration. -- Jon Bernard (jbernard)

1 0

Enabling external connectivity to VMs
by KK CHN 27 Feb '24

27 Feb '24

List, I am a bit confused with the OpenStack Networking configuration for Created virtual machines on a (Kolla-ansible all-in-one on an Ubuntu 22.04 VM ) openstack installation. I am able to create virtual machines through the dashboard as well as CLI. I have used the default network/cirros images created from init-runonce script. But Real time, how can I configure these new VMs to communicate with Base VM or external world by ping, ssh or make internet connection etc. Base VM is Ubuntu22.04 - with IPs ens192=>10.170.16.128(with Internet), second interface => ens224 => 10.220.0.51 and ens160 up and running without IP address for neutron_external_interface: All the VMs which I created getting IP addresses in series (10.0.0.X). But How to allocate Internet and make external world communication to and from these VMs ? Any hints/directions towards this much appreciated. Greetings, Krish If required more inputs here follows the additional information. (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ grep ^[^#] /etc/kolla/globals.yml --- workaround_ansible_issue_8743: yes config_strategy: "COPY_ALWAYS" kolla_base_distro: "ubuntu" openstack_release: "2023.1" kolla_internal_vip_address: "10.220.0.24" kolla_external_vip_address: "{{ kolla_internal_vip_address }}" kolla_container_engine: docker network_interface: "ens224" neutron_external_interface: "ens160" neutron_plugin_agent: "openvswitch" nova_compute_virt_type: "qemu" (kolla_ansible_venv3) ubuntu@ubuntu-VM:~$ Additional inputs: There are 3 virtual interfaces on the base Ubuntu22.04 Virtual Machine. ens192->10.170.16.128 with internet, ens224->10.220.0.51 , ens160 up without IP 1. First Interface contain IP address from My organizations DHCP lease from LAN(10.16.16.0) Which has Internet connectivity. ens192: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 00:0c:29:33:18:3c brd ff:ff:ff:ff:ff:ff altname enp11s0 inet 10.170.16.128/23 brd 10.170.17.255 scope global dynamic noprefixroute ens192 valid_lft 786963sec preferred_lft 786963sec inet6 fe80::cd1a:bc6c:b129:f91f/64 scope link noprefixroute valid_lft forever preferred_lft forever3 2. Interface I have 10.220.0.51 ens224: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 00:0c:29:33:18:46 brd ff:ff:ff:ff:ff:ff altname enp19s0 inet 10.220.0.51/24 brd 10.220.0.255 scope global noprefixroute ens224 valid_lft forever preferred_lft forever inet 10.220.0.24/32 scope global ens224 valid_lft forever preferred_lft forever inet6 fe80::a8b6:f094:c47:8282/64 scope link noprefixroute valid_lft forever preferred_lft forever 3. ens160 without any IP address which is up and running configured for Kolla neutron_external_interface: "ens160" ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master ovs-system state UP group default qlen 1000 link/ether 00:0c:29:33:18:32 brd ff:ff:ff:ff:ff:ff altname enp3s0 1. What networks need to be created additionally ? 2. Bridges and bonds required here or not ? 3. To enable these New VMs to talk to external world( ssh, ping, internet connection to all these VMs ) what all the steps need to be performed or I left out ?

2 1

Re: Use Openstack SDK for Swift
by gtema 27 Feb '24

27 Feb '24

> I didn't see a response to this email so I am re-sending. That's interesting because I responded. My Email client decided by default to respond to a single person dropping discuss, but response to you went out. Anyway, reposting my answer On Thursday, 22 February 2024 12:11:31 CET you wrote: > Hey > > this is a tricky thing explained by a single auth concept: in OpenStack when > you connect to the cloud as a regular user you request certain scope which > normally grants you access to the single domain or the project. Moreover > with this authorization you get list of endpoints you can communicate with > and for Swift this is a project bound endpoint that look somehow like > https:// swift.example.com/v1/AUTH_<project_id>. But the "AUTH_" part may > be actually different since it is part of the swift config. If you are an > admin the situation is a bit different > > In summary that means that you want to do something in the way the API was > not designed for. > > Solutions: > > generally first question you must address is the authorization: is your user > able to access containers of different projects or not. If not you have no > chance and you need to establish new connection with another credentials > When the answer is "yes" you have some options: > > - switch your authorization using > https://opendev.org/openstack/openstacksdk/ > src/branch/master/openstack/cloud/openstackcloud.py#L123. That gives you > new session for a different project that you can use in scope of a certain > project > > - use you single session for pure API calls. This has a disadvantage that > you have raw API communication and need to do lot of tricky things yourself > ``` > conn.get("../AUTH_<another_project_id>/") > ``` > > Unfortunately there is nothing else what could help you, but even with > alternative API wrappers you have the same issue. > > Hope this helps, > Artem > > On Tuesday, 20 February 2024 21:59:19 CET Albert Braden wrote: > > I'm writing a script that will use admin credentials to check user > > projects > > for containers. I'm already doing something similar for non-swift > > accounts, > > doing things like: > > > > cloud.network.networks(project_id=projectid): > > > > I read here about the Object SDK: > > > > https://docs.openstack.org/openstacksdk/latest/user/guides/object_store.ht > > ml > > > > And I tried this: > > > > cloud.object_store.containers(project_id=projectid): > > > > But I get an error: > > > > Invalid query params: project_id > > > > I read the Object SDK document here and it doesn't seem to say anything > > about how to specify a project: > > > > https://docs.openstack.org/openstacksdk/latest/user/proxies/object_store.h > > tm l > > > > But when I read the Swift API document, I see that I can use > > "/v1/{account}/{container}", so I'm guessing that there must be a way to > > do > > it via the SDK. > > > > https://docs.openstack.org/api-ref/object-store/#show-container-details-an > > d-> list-objects > > > > Is it possible to specify the project in an Object SDK call, or do I need > > to use the old python API for this?

2 1

[cinder] This week's meeting will be in video+IRC
by Rajat Dhasmana 27 Feb '24

27 Feb '24

Hello Argonauts, As we keep last meeting of the month in video + IRC mode, this week's meeting (tomorrow) will be held in video + IRC mode with the following details: Date: 28th February, 2024 Time: 1400 UTC Meeting link: https://meet.google.com/xqc-ekpa-dao IRC Channel: #openstack-meeting-alt Make sure you're connected to both the gmeet meeting and IRC. Thanks Rajat Dhasmana

1 0

[Kolla][Ironic] Ironic inspector ignore BareMetal node mac address
by Jayesh5.Chaudhari＠ril.com 27 Feb '24

27 Feb '24

Hi All, I have implemented ironic in my kolla ansible yoga cloud. When I am adding new BareMetal node, it's getting added successfully. But the ironic inspector put the ignore label in the data directory in front of its mac address. I tried to remove it manually, but inspector immediately reverted it. Please help me, how I can proceed from here? Thanks, Jayesh "Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s). are confidential and may be privileged. If you are not the intended recipient. you are hereby notified that any review. re-transmission. conversion to hard copy. copying. circulation or other use of this message and any attachments is strictly prohibited. If you are not the intended recipient. please notify the sender immediately by return email. and delete this message and any attachments from your system. Virus Warning: Although the company has taken reasonable precautions to ensure no viruses are present in this email. The company cannot accept responsibility for any loss or damage arising from the use of this email or attachment."

2 1

Reg Snapshot
by Rohit Sansiya 27 Feb '24

27 Feb '24

Hii all, I am trying to upload a volume to an image but it has uploading as a snapshot but I want to upload my snapshot to an image "type". how to do that help me asap through cmd or openstack dashboard please help Your message is ready to be sent with the following file or link attachments: Rohit Sansiya https://sites.google.com/view/rpgcloud/research-india Note: To protect against computer viruses, e-mail programs may prevent sending or receiving certain types of file attachments. Check your e-mail security settings to determine how attachments are handled.

2 1

[tc][elections] Candidacy for the TC
by gtema 27 Feb '24

27 Feb '24

Hi All, I'd like to announce my candidacy for the Technical Committee. I have never applied for a TC seat so far and decided to do it this time. My relations with OpenStack started not terribly long ago, on the other side 6 years are also not less in my eyes. During that time I became PTL for OpenStackSDK/CLI (and to some extend OpenStack Ansible Modules). I think many of you have noticed my strong push to improve the user experience of OpenStack users. For that I took the PTL role over all those mentioned projects which are focused primarily on the users. You may have noticed my push on introduction of the OpenAPI to the whole OpenStack with the intention to serve those who work with OpenStack. What I currently observe is that there are a lot of representatives and voices from maintainers and operators in TC, but since combining of the TC and User Committee focus end users voice slowly disappeared. That is why I decided to apply for Technical Committee to ensure this aspect is not forgotten. Some of you know me as a "maker" and not as a "talker", so this position is not going to be trivial for me, but I believe it is necessary to have engineers and architects in the politics otherwise laws are just serving wrong targets. My stand point is that policies should not hinder the progress, but instead we should make policies that serve ourselves to be efficient and successful. OpenStack is not existing to keep maintainers happy, but because someone (operators and users) needs it. So let us focus on that. Thank you for considering my candidacy, Regards, Artem (irc: gtema)

1 0

[ironic] Control Power using PoE?
by Kai Jellinghaus 26 Feb '24

26 Feb '24

Hello, I'm looking into using ironic to control a bunch of low-power compute. I'm wondering whether it'd be possible, or even the right approach, to control power states via the PoE switch. This would only allow completely cutting off power, and I'm not sure that's the right kind of control for ironic. I'd combine this with PXE/iPXE, but the way I understand ironic that shouldn't make a difference. Has anyone worked with PoE? Is that even a reasonable approach? Kind Regards, Kai Jellinghaus

1 0

[ptl][election][horizon] PTL candidacy for 2024.2
by Tatiana Ovchinnikova 26 Feb '24

26 Feb '24

Hi all, I would like to announce my candidacy for PTL of the Horizon project for the 2024.2 (Dalmatian) cycle. During the Caracal cycle we did a great job on integration tests improvement, feature implementation, bug fixing, and have completed migration from Django 3.2 to Django 4.2. For the Dalmatian cycle, I would like to focus on the following: * Continue working with feature gap, * Switch from current integration tests to new pytest-based selenium tests, * Switch to OpenSDK * Triage more bugs * Involve more contributors into the community. Thank you for your consideration. Tatiana Ovchinnikova (tmazur)

1 0

[ptl][election][neutron] PTL candidacy for 2024.2
by Brian Haley 26 Feb '24

26 Feb '24

Hello Openstack Community, I am writing to submit my candidacy for the Neutron PTL position during the 2024.2 cycle, continuing in my role from the 2024.1 cycle. A lot of my priorities as PTL are the same as the 2024.1 cycle: * Always make sure the stable branches are consumable downstream. With the introduction of unmaintained branches, the community has extended the lifecycle in a new direction. As a member of the downstream community that relies on these branches, I will continue to dedicate part of my time to reviewing backports and keeping them maintained. * Continue pursuing CI stability. * Keep working on ongoing specs. We did a good job of getting some of the larger specs done this cycle, but there are still a few in our review pipeline. I would set a goal to get these completed next cycle if they fail to make 2024.1: ** Active-active L3 Gateway with Multihoming (LP #2002687) ** Multiple back-end support for L3 routers in ML2/OVN (LP #2020823) * Reduce the bug backlog. Over the past cycle we were able to keep our bug backlog constant through the continued great work of a lot of contributors. Having a reduction, either through verification or bug fixes, would be one of my goals. * Making sure we are good stewards of gate resources. * Always welcome new contributors. Thanks for your support. -Brian Haley (haleyb, haleyb.dev(a)gmail.com)

1 0