[Openstack-operators] Problems with AggregateMultiTenancyIsolation while migrating an instance

Matt Riedemann mriedemos at gmail.com
Tue May 29 17:06:16 UTC 2018


On 5/29/2018 11:10 AM, Jay Pipes wrote:
> The hosts you are attempting to migrate *to* do not have the 
> filter_tenant_id property set to the same tenant ID as the compute host 
> 2 that originally hosted the instance.
> 
> That is why you see this in the scheduler logs when evaluating the 
> fitness of compute host 1 and compute host 3:
> 
> "fails tenant id"
> 
> Best,
> -jay

Hmm, I'm not sure about that. This is the aggregate right?

# nova  aggregate-show 52
+----+-----------+-------------------+--------------------------------------------------------------+----------------------------------------------------------------------------------------------+--------------------------------------+
| Id | Name      | Availability Zone | Hosts 
                             | Metadata 
                                                     | UUID 
                     |
+----+-----------+-------------------+--------------------------------------------------------------+----------------------------------------------------------------------------------------------+--------------------------------------+
| 52 | SgaraPrj1 | nova              | 'compute-01.cloud.pd.infn.it 
<http://compute-01.cloud.pd.infn.it>', 'compute-02.cloud.pd.infn.it 
<http://compute-02.cloud.pd.infn.it>' | 'availability_zone=nova', 
'filter_tenant_id=ee1865a76440481cbcff08544c7d580a', 'size=normal' | 
675f6291-6997-470d-87e1-e9ea199a379f |
+----+-----------+-------------------+--------------------------------------------------------------+----------------------------------------------------------------------------------------------+--------------------------------------+


So compute-01 and compute-02 are in that aggregate for the same tenant 
ee1865a76440481cbcff08544c7d580a.

 From the logs, it skips compute-02 since the instance is already on 
that host.

 > 2018-05-29 11:12:56.375 19428 INFO nova.scheduler.host_manager 
[req-45b8afd5-9683-40a6-8416-295563e37e34 
9bd03f63fa9d4beb8de31e6c2f2c8d12 56c3f5c047e74a78a714\
38c4412e6e13 - - -\
] Host filter ignoring hosts: compute-02.cloud.pd.infn.it 
<http://compute-02.cloud.pd.infn.it>

So it processes compute-01 and compute-03. It should accept compute-01 
since it's in the same tenant-specific aggregate and reject compute-03. 
But the filter rejects both hosts.

It would be useful to know what the tenant_id is when comparing against 
the aggregate metadata:

https://github.com/openstack/nova/blob/stable/ocata/nova/scheduler/filters/aggregate_multitenancy_isolation.py#L50

I'm wondering if the RequestSpec.project_id is null? Like, I wonder if 
you're hitting this bug:

https://bugs.launchpad.net/nova/+bug/1739318

Although if this is a clean Ocata environment with new instances, you 
shouldn't have that problem.

-- 

Thanks,

Matt



More information about the OpenStack-operators mailing list