May 2014 - Openstack-stable-maint

Preparing for 2014.1.1 and design summit session summary
by Alan Pevec 08 Jun '14

08 Jun '14

Hi all, at "Stable branches maintenance" design summit session[1] dates for stable/icehouse release were confirmed, I've put them in our wiki[2] First release is coming fast and starting today we are in freeze period, but given the current patch queue[3] I propose we start with soft-freeze until end of day Friday. Soft-freeze is to allow patches currently under review to get merged but no new patches should be accepted. As always, feel free to raise exception requests on stable-maint list. Other points which were discussed: * scripted freeze enforcement - infra team said this could be automated now using Gerrit 2.8 REST API, details TBD * no changes to the patch acceptance policy[4] but exception requests can be raised any time on stable-maint list and will be decided on case-by-case basis + database migrations might be allowed as an exception (it was done recently for a serious Keystone performance issue[5]) in projects using sqlalchemy-migrate and reserving[6] a range of migrations for backports. Mark McClain will document how to do it with Alembic. * starting with Icehouse support period is extended to 15 months + made possible with branchless Tempest + we will establish "stablesec" a subset of stable-maint which will work with VMT on backports of security patches. Anyone interested please contact me. * Chuck Short will be joining stable release managers Cheers, Alan [1] http://junodesignsummit.sched.org/event/a936d7718d1c4b1dd8dcb9dc6a671e9c https://etherpad.openstack.org/p/StableIcehouse [2] https://wiki.openstack.org/wiki/StableBranchRelease#Planned_stable.2Ficehou… [3] https://review.openstack.org/#/q/status:open+AND+branch:stable/icehouse+AND… [4] https://wiki.openstack.org/wiki/StableBranch#Appropriate_Fixes [5] https://wiki.openstack.org/wiki/ReleaseNotes/2013.2.2#Keystone [6] https://review.openstack.org/70153

5 18

Missing plugin .ini files in setup.cfg
by Ihar Hrachyshka 30 May '14

30 May '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, it turned out recently that for Neutron we miss several .ini files in data_files directive inside setup.cfg, meaning we don't install those files via distutils. I've fixed the issue in master [1], and now I've backported the fix to both stable/icehouse [2] and stable/havana [3]. Please consider [2] and [3] for merge so that distributions can package those files from install dir. [1]: https://review.openstack.org/96465 [2]: https://review.openstack.org/96688 [3]: https://review.openstack.org/96689 Cheers, /Ihar -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCgAGBQJTiEwnAAoJEC5aWaUY1u579cQIAJz0AgP2GgZyN9VFJ3o8rE/W HB72PUgonv7IY4M9djZeowCDvuUXr7JEuyjI3k0WYiF5blIJKZ7N0VOawbYQzbYc K+MuLBU5/clQgxl9j7Aljdih3NC96nfccNJ3raaTTBcGlrQ1VTg0fZ+9F+DZa+MT hgE+HX61RI1ih8oHQzlWNVfwFUSE2t18AcbNu6E5Nh7KSJA39xebIjJ3ooQ41J5e DZhLtFsj0R3IdfNvBUDmANM5swUdR0NAEqgHNWvFuXvjELzDlUCOF0COV8TTC+BV 2aHSCmG8iqHp6abCmltSVS1nKz57KxRNGb+IW0qiqXh4Y1GySnU5o1xjNiHZlI4= =PJHj -----END PGP SIGNATURE-----

1 0

Stable exception
by Paul Ward 29 May '14

29 May '14

Sent this to the wrong list the first time, my bad. See below. Paul Ward/Rochester/IBM wrote on 05/28/2014 02:12:10 PM: > From: Paul Ward/Rochester/IBM > To: openstack-dev(a)lists.openstack.org, > Date: 05/28/2014 02:12 PM > Subject: [Openstack-stable-maint] Stable exception > > I'll start by saying that we don't need this ported to icehouse as we've > included it in our distro, as Alan suggested. > > However, I would like to explain why we needed it. We do generate > cert files for the controller node. However, for cases where the different > services are all running on the controller node, we use 127.0.0.1 as the > address they communicate on. Since the cert was based on hostname, > this will fail unless we have the api_insecure flag set. And since we're > communicating on 127.0.0.1, it's ok to ignore ssl errors. > > Since this is in Juno, and we've patched it in Icehouse for our distro, we > have no pressing need to backport this one. Thanks for keeping an > eye on it! > > Alan Pevec wrote: > > https://bugs.launchpad.net/neutron/+bug/1306822 > > https://bugs.launchpad.net/neutron/+bug/1309694 > > > > Those bugs describe the missing options, but do not do a great job of > > describing the impact of not having them. My guess is that without those > > parameters, you have to rely on system certificates (as you can't > > provide your own and you can't disable the check). Is that a correct > > assumption ? Who is impacted by these bugs ? > > I think you're right that 1309694 can be worked around by using system > cert store. > Disabling cert check bug 1306822 is definitely not needed - why would > you use certs if you don't check them? > So unless more justification is provided in the bugs (importance of > both is Undecided) I don't think we have the case for granting the > exception. > > Distributions are of course free to take those patches, if it suits > their policies. > BTW having such backports proposed is fine even if denied for stable > merge, we can use stable reviews as a mean to share patches among > distros. > > > If my interpretation is correct, then this falls a bit in a grey area: > > it is a "feature" to allow your own certificate to be provided, but it > > could be seen as a bug (feature gap) if Neutron was the only project in > > Icehouse not having that feature (and people would generally expect > > those parameters to be present). Is Neutron the only project that misses > > those parameters ? > > Currently yes, only Neutron has a new feature in Icehouse to send port > events to Nova but Cinder will need to same to properly fix the race > with volumes during VM setup. > > Cheers, > Alan

1 0

Stable exception
by Mark McClain 28 May '14

28 May '14

All- I’d like propose that we grant an exception for new configuration options for these backports to stable/icehouse https://review.openstack.org/#/c/88437/ https://review.openstack.org/#/c/90626/ mark

3 2

Broken Neutron functional voting gate test in stable/icehouse
by Jakub Libosvar 27 May '14

27 May '14

Hello, currently there is a failure in functional test everytime when someone pushes a new patch to stable/icehouse branch of Neutron. I backported a patch [1] and I think it should be merged ASAP. Without this patch we will be getting -1 from Jenkins on every patchset. May I ask mostly core team members to take a look at this patch and eventually approve? Thank you very much. Kuba [1] https://review.openstack.org/#/c/95507/

1 0

Maintaining stable and master branches ...
by Sandy Walsh 23 May '14

23 May '14

Hey y'all, Quick question. We've recently moved StackTach to StackForge and were wondering about maintaining the Stable branch. Is it ok to squash merge the changes from master into stable or is it best to cherry-pick each change and re-submit each review? I'm assuming the latter for things so you can easily revert ... but I guess the review can just be a rubber-stamp to keep the review process light? Thanks! -S

2 1

Re: [Openstack-stable-maint] [openstack-dev] PTL Election Conclusion and Results
by Alan Pevec 15 May '14

15 May '14

Hi all, > Now for the results of the PTL election process, please join me in > extending congratulations to the following PTLs: > > * Compute (Nova) > ** Michael Still > * Networking (Neutron) > ** Kyle Mestery > * Metering/Monitoring (Ceilometer) > ** Eoghan Glynn > * Orchestration (Heat) > ** Zane Bitter > * Database Service (Trove) > ** Nikhil Manchanda I've added new PTLs to the stable-maint team[1] Eoghan was already stable-maint member and I wanted to welcome Michael, Kyle, Zane and Nikhil ! Please have a look at the StableBranch[2] wiki and join design session[3] today 5pm in B301 if you're in Atlanta. I'd like to encourage departing exPTLs to stay helping in stable branch maintenance but let me know if you want to be removed. Cheers, Alan [1] https://review.openstack.org/#/admin/groups/120,members [2] https://wiki.openstack.org/wiki/StableBranch [3] https://etherpad.openstack.org/p/StableIcehouse

1 0

Large logs block gate commits
by Ihar Hrachyshka 07 May '14

07 May '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi all, please consider [1] for stable/icehouse to unblock merge for [2] that is already approved and was pushed to gate. Gate checks failed due to large sub_unit.log files generated for neutron. I've also cherry-picked [3] the patch to reduce logs to stable/havana though I haven't seen similar failures there yet. Cheers, /Ihar [1]: https://review.openstack.org/#/c/92533/ [2]: https://review.openstack.org/#/c/90096/ [3]: https://review.openstack.org/#/c/92569/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCgAGBQJTaiPPAAoJEC5aWaUY1u57HJIH/3ZmqEGd0O9vPlu1IFD06ZZj vikEFef7NXPBb844QOqy6Gh1p9L+ODzD99eNVAiTRylwtAVjmIkb7vntsw3Fpur8 N5XuuPT2aYJxJx/9RYsGkEpKMyqp6MktvtKMA48G77sYil7yqg3BVUW8igLXH6kk dXMUnTo2PCrp3byaSU85p70Ml1mute5U6JX6OEmfWgenLmuyrLTscn4/AosvxZ9n Y8+kaxO6A0W2kQc5swmLt1MYLVMlv5dcjws2dO7iJHe9vu1KN8STUaCNqb2svX0P ejgPbOzV9sT57f4/tuJR2Xd27Yb55/M9apoxcMMSqMXecROWAa/fcY9LPFeeG3k= =J8a3 -----END PGP SIGNATURE-----

2 2

stable/havana gate blockers heat+glance
by Adam Gandelman 02 May '14

02 May '14

Hi- Had a hard time getting the 2013.2.3 -> 2013.2.4 version bump through the stable/havana gate. All are bumped with the exception of Heat and Glance. I've put up two backports that should fix the issues there, any help getting these merged would be appreciated: Heat https://review.openstack.org/91684 https://review.openstack.org/89438 Glance https://review.openstack.org/90273 https://review.openstack.org/89437 Cheers Adam

1 0