October 2014 - Openstack-stable-maint

Neutron backports for security group performance
by Ihar Hrachyshka 12 Nov '14

12 Nov '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi all, there is a series of Neutron backports in the Juno queue that are intended to significantly improve service performance when handling security groups (one of the issues that are main pain points of current users): - - https://review.openstack.org/130101 - - https://review.openstack.org/130098 - - https://review.openstack.org/130100 - - https://review.openstack.org/130097 - - https://review.openstack.org/130105 The first four patches are optimizing db side (controller), while the last one is to avoid fetching security group rules by OVS agent when firewall is disabled. AFAIK we don't generally backport performance improvements unless they are very significant (though I don't see anything written in stone that says so), but knowing that those patches fix pain hotspots in Neutron, and seem rather isolated, should we consider their inclusion? Should we come up with some "official" rule on how we handle performance enhancement backports? /Ihar -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) iQEcBAEBCgAGBQJUUMAvAAoJEC5aWaUY1u57ZkMIAJmae7GdQ3rhRZVpUZkCGAUK 7i2qPqjVh0Qu++kgcMmbM6YPnT4p//OuOAiU9ak8l46TWdeqw9cC0vsGO4Es4MKC rX8pAT/KBgX4FPzTGxhHBk8g5XpD9i6SutGfdFBmoFwj0eV8BAxNTD2A+hmM2ZHO QLBAcNFYhh/9QSnfpdx885z6M+iQ8n91oo1lqugZEdtmpNdrY2nW0ovFHTfj/9ku qznykok80JBNl1KO15Aaru3aHJUoj8/C8ek+UzLN0VP0W+H2zJQJVbGBny1BIVYm odvijGbxvq2rN90HbtUUqNwcM6Mfbc76fDT/agJo4hIDxXfvzsQpKY8iegiEiOc= =bBLb -----END PGP SIGNATURE-----

6 12

neutron: a new runtime dependency sneaked in via rootwrap filter
by Ihar Hrachyshka 31 Oct '14

31 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi all, it seems that we've missed a new runtime dependency being backported recently into Icehouse. The patch is [1], and it introduced conntrack-tools dependency for L3 agent. This turned out as a problem for existing distributions, specifically RHOSP5 [2] which is built for both RHEL6 and RHEL7. In case of RHEL7, conntrack-tools is not available neither in base OS repos nor in RHOSP5 specific ones. So Red Hat will need to import the package into RHOSP5 repos. That's not convenient but doable. The problem starts when you consider importing the package for RHEL6 too. It may turn out that some support from kernel may be missing (we're going to check that in the very near future). If RHEL6 conntrack-tools won't play nice, we'll be forced to patch the fix out for the platform. I wonder whether we'll consider reverting the patch in upstream if that's the case? So my general point is that we should pay more attention to those kind of runtime dependencies sneaking into stable branches, because it may result in huge problems in downstream. Also, consider this email as a heads-up for other distributions. Should we update release notes for the latest release to include that info? [1]: https://review.openstack.org/#/c/124375/ [2]: https://bugzilla.redhat.com/show_bug.cgi?id=1158871 /Ihar -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) iQEcBAEBCgAGBQJUUjnrAAoJEC5aWaUY1u57EgEH/1+IFY+ungkDPNMlC1ALuL7m nRlqGfj9G6EnSPHdtxcYRfr+6OsVHUsWBGyy10Gscw/A4C4rumvTogSHrsf1h96t 6+RQPNbUi183tSvukX49dt+yZjrlIgTDBfS4yK8Akgmn6ICSaJnGvoL85B8eqojf eIaZsIkFRzotS+aCztj0jCmsl5OardQ3BS6z7pxGPmpImt9/rzje4qtj8Lu1QMu9 FvxvZejiDqimbspOY/gtY854Nm6VuX/eIY4EGskjOVUU6nFp6y0alKHIPNEnA+DU QWeJuJ78gmDE7F0X8h8N2R2Cg1cxGvJC+GnzL1u+Nu6vPiDgQ9ZDJULfrinpXoQ= =ubTF -----END PGP SIGNATURE-----

5 8

regression?
by Ihar Hrachyshka 29 Oct '14

29 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi John/all, it turned out that [1] broke DHCPv6, fixed by [2] (I've backported [2] to Juno). [1] was also backported to Icehouse [3], and I wonder whether we need to backport [2] to the branch. Though the code from [1] is present in the branch, I'm not sure whether we should consider DHCP port not created for IPv6 networks as a bug in Icehouse where we probably didn't have the feature implemented yet. Still, there may be other issues with not backporting the fix to Icehouse, so if you have some bad scenarios in mind, please tell me. [1]: https://review.openstack.org/#/c/116832/ [2]: https://review.openstack.org/#/c/123671/ [3]: https://review.openstack.org/#/c/123074/ Cheers, /Ihar -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) iQEcBAEBCgAGBQJUUO/cAAoJEC5aWaUY1u57wmAH/AvTXZ8d7GqMz094V+GbRWGF ZnRC/rRSwVQe47+YffvLDsGmf4NArUj/ThN2VXWWHiCuDUXXf/G902ZsZV8G6mF5 mSNX4bEF8alp5HUgIaj7yUSNUHqw5gOO24ZxLlPpSOaKKGfPV2qzf7BZl4HVOjfs pWizKD6eRH24nNwrhfdXezJ0ZuSQFqN5A3lQ3GqVgL/hTbnKr2mL+JsGZyoAlGuP 3dmQAo/zBCW1Z1KOI3JyKBY78iiTy26FFwg1HCftht4NfO7RXS6G7qHYVOGf08Oc /EDhwzThcIYSn+lxFhFUP27kAPhCKeiP62m55wAv1c2mDdw2NBe786C9QjW5oQc= =Yqtb -----END PGP SIGNATURE-----

1 0

Stable check of openstack/tempest failed
by jenkins＠openstack.org 29 Oct '14

29 Oct '14

Build failed. - periodic-tempest-dsvm-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-icehou… : FAILURE in 49m 31s - periodic-tempest-dsvm-neutron-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-ice… : SUCCESS in 55m 43s - periodic-tempest-dsvm-postgres-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : SUCCESS in 47m 13s - periodic-tempest-dsvm-full-juno http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-juno/e… : SUCCESS in 47m 11s - periodic-tempest-dsvm-neutron-juno http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-jun… : SUCCESS in 1h 00m 27s - periodic-tempest-dsvm-postgres-full-juno http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : SUCCESS in 44m 54s

2 1

Stable check of openstack/tempest failed
by jenkins＠openstack.org 24 Oct '14

24 Oct '14

Build failed. - periodic-tempest-dsvm-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-icehou… : SUCCESS in 1h 25m 39s - periodic-tempest-dsvm-neutron-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-ice… : SUCCESS in 55m 05s - periodic-tempest-dsvm-postgres-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : FAILURE in 48m 55s - periodic-tempest-dsvm-full-juno http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-juno/b… : SUCCESS in 53m 29s - periodic-tempest-dsvm-neutron-juno http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-jun… : SUCCESS in 59m 33s - periodic-tempest-dsvm-postgres-full-juno http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : SUCCESS in 51m 56s

2 1

stable/juno open for business
by Alan Pevec 18 Oct '14

18 Oct '14

Hi all, just a reminder that stable/juno branches are now open for backports and, as Ihar reminded me: we need to pay attention on whether the patch is included in juno before doing icehouse push from now on! Cheers, Alan

2 1

Stable check of openstack/keystone failed
by jenkins＠openstack.org 18 Oct '14

18 Oct '14

Build failed. - periodic-keystone-docs-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-docs-icehouse/4… : SUCCESS in 3m 22s - periodic-keystone-python26-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python26-icehou… : FAILURE in 29m 51s - periodic-keystone-python27-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python27-icehou… : FAILURE in 26m 49s

4 3

openstack/requirements:icehouse needs update to pass integration job
by Ihar Hrachyshka 17 Oct '14

17 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi all, currently all requirements updates in Icehouse fail as in [1]: 'dib-utils' is not a global requirement but it should be,something went wrong The following patch [2] should be merged to unblock other patches for the branch. Please review, /Ihar [1]: http://logs.openstack.org/48/124648/2/check/check-requirements-integration-… [2]: https://review.openstack.org/#/c/129190/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) iQEcBAEBCgAGBQJUQOWfAAoJEC5aWaUY1u57Y1gIANMBAwAHQVUcuf3h9+cjBIvy 4jiY1XwVTb4mgFchsMA5tLkgSbTZeiSoV2R53z+hC2jD+6YsKXRalPP46yPgEp/X M8VtWkv0ZmX7DAcYK0eqpj1Bpcjg3cke95oGnX/ePvD011Nt+OyISMk0n5RLtYnF JmJ0jr/Ok6mxdoNvUatPxj8gegHG0gG+rqA4Iy+OV0MX/61pffwaM2akZsTGgKBY ze9XM8w+DnjE3U7xzAxpBssaCz8AFiYkvYId5UnI5o9+4eMym+1XiAqrw8hsllhj YwT8k3hOG4/UJrPkc85iXyE6+OVzg8DMK5OxyPho9j5KWHfaf6ePc7FlCgmCOtw= =V0xl -----END PGP SIGNATURE-----

1 0

Stable check of openstack/keystone failed
by jenkins＠openstack.org 16 Oct '14

16 Oct '14

Build failed. - periodic-keystone-docs-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-docs-icehouse/6… : SUCCESS in 2m 44s - periodic-keystone-python26-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python26-icehou… : FAILURE in 23m 35s - periodic-keystone-python27-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python27-icehou… : FAILURE in 28m 09s

2 1

Need to get patch reviewed please ...
by Jay S. Bryant 16 Oct '14

16 Oct '14

All, https://review.openstack.org/126371 <--- This fixes a nasty bug where the swift object auditor can become like a fork bomb. Could we get reviews on this and get it merged please? Thanks! Jay

2 1

Stable check of openstack/glance failed
by jenkins＠openstack.org 15 Oct '14

15 Oct '14

Build failed. - periodic-glance-docs-icehouse http://logs.openstack.org/periodic-stable/periodic-glance-docs-icehouse/165… : SUCCESS in 1m 46s - periodic-glance-python26-icehouse http://logs.openstack.org/periodic-stable/periodic-glance-python26-icehouse… : FAILURE in 19m 40s - periodic-glance-python27-icehouse http://logs.openstack.org/periodic-stable/periodic-glance-python27-icehouse… : SUCCESS in 15m 39s

3 2

Stable check of openstack/tempest failed
by jenkins＠openstack.org 14 Oct '14

14 Oct '14

Build failed. - periodic-tempest-dsvm-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-icehou… : SUCCESS in 53m 19s - periodic-tempest-dsvm-neutron-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-ice… : SUCCESS in 1h 05m 27s - periodic-tempest-dsvm-postgres-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : FAILURE in 49m 10s

1 0

Stable check of openstack/tempest failed
by jenkins＠openstack.org 13 Oct '14

13 Oct '14

Build failed. - periodic-tempest-dsvm-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-icehou… : SUCCESS in 45m 28s - periodic-tempest-dsvm-neutron-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-ice… : FAILURE in 10m 47s - periodic-tempest-dsvm-postgres-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : SUCCESS in 51m 32s

1 0

Stable check of openstack/tempest failed
by jenkins＠openstack.org 12 Oct '14

12 Oct '14

Build failed. - periodic-tempest-dsvm-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-icehou… : SUCCESS in 48m 36s - periodic-tempest-dsvm-neutron-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-ice… : FAILURE in 11m 32s - periodic-tempest-dsvm-postgres-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : SUCCESS in 47m 50s

1 0

Stable check of openstack/tempest failed
by jenkins＠openstack.org 11 Oct '14

11 Oct '14

Build failed. - periodic-tempest-dsvm-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-icehou… : SUCCESS in 54m 22s - periodic-tempest-dsvm-neutron-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-ice… : FAILURE in 10m 32s - periodic-tempest-dsvm-postgres-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : SUCCESS in 55m 32s

1 0

Stable check of openstack/tempest failed
by jenkins＠openstack.org 11 Oct '14

11 Oct '14

Build failed. - periodic-tempest-dsvm-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-icehou… : SUCCESS in 51m 31s - periodic-tempest-dsvm-neutron-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-ice… : FAILURE in 11m 08s - periodic-tempest-dsvm-postgres-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : SUCCESS in 48m 23s

3 2

Icehouse freeze exception request for a Cinder security bug
by Tristan Cacqueray 03 Oct '14

03 Oct '14

Dear Maintainer, One bug [1] about a security issue in Cinder glusterFS code have just been disclosed. The review [2] to fix it have just been pushed according to the proposed disclosure time line. I let you judge if this can be accepted so late. [1] https://bugs.launchpad.net/ossa/+bug/1350504 [2] https://review.openstack.org/125667/ Best Regards, Tristan Cacqueray

5 7

OpenStack 2014.1.3 released
by Adam Gandelman 03 Oct '14

03 Oct '14

Hello everyone, The OpenStack Stable Maintenance team is happy to announce the 2014.1.3 stable Icehouse release. We have been busy reviewing and accepting backported bugfixes to the stable/icehouse branches according to the criteria set at: https://wiki.openstack.org/wiki/StableBranch A total of 131 bugs have been fixed across all projects since 2014.1.2. These updates to Icehouse are intended to be low risk with no intentional regressions or API changes. The list of bugs, tarballs and other milestone information for each project may be found on Launchpad: https://launchpad.net/ceilometer/icehouse/2014.1.3 https://launchpad.net/cinder/icehouse/2014.1.3 https://launchpad.net/glance/icehouse/2014.1.3 https://launchpad.net/heat/icehouse/2014.1.3 https://launchpad.net/horizon/icehouse/2014.1.3 https://launchpad.net/keystone/icehouse/2014.1.3 https://launchpad.net/neutron/icehouse/2014.1.3 https://launchpad.net/nova/icehouse/2014.1.3 https://launchpad.net/trove/icehouse/2014.1.3 Release notes may be found on the wiki: https://wiki.openstack.org/wiki/ReleaseNotes/2014.1.3 The freeze on the stable/icehouse branches will be lifted today as we begin working toward 2014.1.4, which will be released on a TBD date after the Kilo-3 release. Thanks, Adam

1 0

Stable check of openstack/keystone failed
by jenkins＠openstack.org 02 Oct '14

02 Oct '14

Build failed. - periodic-keystone-docs-havana http://logs.openstack.org/periodic-stable/periodic-keystone-docs-havana/b36… : SUCCESS in 2m 43s - periodic-keystone-python26-havana http://logs.openstack.org/periodic-stable/periodic-keystone-python26-havana… : SUCCESS in 17m 39s - periodic-keystone-python27-havana http://logs.openstack.org/periodic-stable/periodic-keystone-python27-havana… : SUCCESS in 12m 03s - periodic-keystone-docs-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-docs-icehouse/0… : SUCCESS in 4m 08s - periodic-keystone-python26-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python26-icehou… : FAILURE in 31m 31s - periodic-keystone-python27-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python27-icehou… : FAILURE in 25m 35s

4 3

Icehouse freeze exception request
by Cedric OLLIVIER 02 Oct '14

02 Oct '14

Dear Maintainers, One bug [1] about ODL mechanism is partially fixed in the current stable/icehouse. To fully fix it, two reviews [2] and [3] should be merged. I let you judge if they can be accepted so late. [1] https://bugs.launchpad.net/neutron/+bug/1325184 [2] https://review.openstack.org/#/c/124914/ [3] https://review.openstack.org/#/c/122932/ Best Regards, Cédric Ollivier

5 4

Icehouse freeze exception request
by Osanai, Hisashi 02 Oct '14

02 Oct '14

Stable maintenance team Folks, I have a request for a Icehouse release exception: https://review.openstack.org/#/c/112806/ This fix is important for deployers who use the swift middleware (swift_middleware.py) in swift env. I confirmed that swift broke when the swift middleware was used with other swift's middlewares (tempurl, staticweb, dlo and slo), I would like to have your check whether we have enough benefits to handle this as an exception from Stable maintenance team point of view. Best Regards, Hisashi Osanai

6 8

Stable check of openstack/tempest failed
by jenkins＠openstack.org 02 Oct '14

02 Oct '14

Build failed. - periodic-tempest-dsvm-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-full-icehou… : SUCCESS in 53m 29s - periodic-tempest-dsvm-neutron-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-neutron-ice… : SUCCESS in 54m 08s - periodic-tempest-dsvm-postgres-full-icehouse http://logs.openstack.org/periodic-stable/periodic-tempest-dsvm-postgres-fu… : FAILURE in 50m 52s

2 1

Stable check of openstack/keystone failed
by jenkins＠openstack.org 02 Oct '14

02 Oct '14

Build failed. - periodic-keystone-docs-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-docs-icehouse/0… : SUCCESS in 4m 29s - periodic-keystone-python26-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python26-icehou… : FAILURE in 23m 59s - periodic-keystone-python27-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python27-icehou… : FAILURE in 29m 37s

1 0

Change in parameters in recent stable release patch
by Thierry Carrez 01 Oct '14

01 Oct '14

Hi stable maints, A change in parameters was backported a couple months ago to stable/icehouse: https://review.openstack.org/#/c/99692/4 As a reminder, we don't change parameters in stable patches to ensure backward compatibility in stable branches. -- Thierry Carrez (ttx)

4 6

Stable check of openstack/keystone failed
by jenkins＠openstack.org 01 Oct '14

01 Oct '14

Build failed. - periodic-keystone-docs-havana http://logs.openstack.org/periodic-stable/periodic-keystone-docs-havana/7cd… : SUCCESS in 2m 27s - periodic-keystone-python26-havana http://logs.openstack.org/periodic-stable/periodic-keystone-python26-havana… : SUCCESS in 21m 26s - periodic-keystone-python27-havana http://logs.openstack.org/periodic-stable/periodic-keystone-python27-havana… : SUCCESS in 12m 03s - periodic-keystone-docs-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-docs-icehouse/7… : SUCCESS in 6m 13s - periodic-keystone-python26-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python26-icehou… : FAILURE in 23m 13s - periodic-keystone-python27-icehouse http://logs.openstack.org/periodic-stable/periodic-keystone-python27-icehou… : FAILURE in 26m 09s

1 0

Stable check of openstack/horizon failed
by jenkins＠openstack.org 01 Oct '14

01 Oct '14

1 0