Earlier  
Posted Nick Remark
#openstack-nova - 2021-03-16
17:08:47 kashyap Luzi_: I need to head out for a walk, but feel free to gather your thoughts in a file.
17:10:11 kashyap (And email here, or post them in a non-expiring pastebin somewhere. I'll come back and check.)
17:13:48 kashyap Luzi_: In short, use either manual approach or the dynamic filters. See the "Gathering libvirt logs..." section here: https://kashyapc.fedorapeople.org/virt/openstack/request-nova-libvirt-qemu-debug-logs.txt
17:15:27 Luzi_ I need to head out too, so I just complete the bug report and maybe add some more tomorrow
17:20:22 gibi bauzas: ack, I will review what you pushed
17:20:28 gibi bauzas: have a nice PTO tomorrow
17:20:33 bauzas thanks
17:33:55 openstackgerrit Merged openstack/nova master: Remove VFSLocalFS https://review.opendev.org/c/openstack/nova/+/778506
19:41:53 openstackgerrit Stephen Finucane proposed openstack/nova master: libvirt: Delegate OVS plug to os-vif https://review.opendev.org/c/openstack/nova/+/602432
19:55:17 melwitt gmann: hey, wondering if you have seen this tempest-slow-py3 gate failure before ""tempest.scenario.test_network_v6.TestGettingAddress Bad router request: Cidr 2001:db8::/64 of subnet f3908f8d-a960-444f-9708-78ae906fbd63 overlaps with cidr 2001:db8::/64 of subnet d8fe1d15-5cdd-40e1-96e5-d1ac105253c3" I only see it on stable/stein in nova
19:55:37 melwitt https://zuul.opendev.org/t/openstack/build/0d21e41fc0294f1d891c484dea84adb6/logs
20:19:14 frickler melwitt: this looks related https://review.opendev.org/c/openstack/neutron/+/777389
20:20:28 melwitt frickler: that does look like it, thank you!
20:39:48 openstackgerrit Stephen Finucane proposed openstack/nova master: api: Block unsupported actions with vDPA https://review.opendev.org/c/openstack/nova/+/780333
20:39:48 openstackgerrit Stephen Finucane proposed openstack/nova master: pci: Add vDPA vnic to PCI request mapping and filtering https://review.opendev.org/c/openstack/nova/+/778350
20:39:49 openstackgerrit Stephen Finucane proposed openstack/nova master: Add release note for vDPA https://review.opendev.org/c/openstack/nova/+/780866
20:39:49 openstackgerrit Stephen Finucane proposed openstack/nova master: tests: Add functional test for vDPA device https://review.opendev.org/c/openstack/nova/+/780112
21:13:07 openstackgerrit Merged openstack/nova master: libvirt: Deprecate `live_migration_tunnelled` https://review.opendev.org/c/openstack/nova/+/780908
22:21:01 spotz Is there a maximum number of security groups you cane have? Not talking about quota restricted
22:37:02 melwitt spotz: security groups will be a question for the neutron team, nova hasn't done them since the olden days of nova-network
22:37:29 spotz haha thanks melwitt!
22:37:40 melwitt yw
22:47:21 openstackgerrit melanie witt proposed openstack/nova stable/stein: [stable-only] Specify IPv6 CIDR in tempest-slow-py3 https://review.opendev.org/c/openstack/nova/+/780991
#openstack-nova - 2021-03-17
00:57:12 melwitt lyarwood, elod: fix for tempest-slow-py3 on stable/stein for your consideration pls ^
07:24:30 openstackgerrit Josephine Seifert proposed openstack/nova master: Add config parameter 'live_migration_scheme' to live migration with tls guide https://review.opendev.org/c/openstack/nova/+/781030
07:31:42 Luzi kashyap, fungi i added a patch ^ for the documentation
08:21:41 gibi Luzi: thanks for that ^^
08:22:15 gibi stephenfin: an important doc fix ^^
08:23:46 gibi Luzi: will you propose the backports of that doc fix to stable branches?
08:23:55 gibi (after it merges to master?)
08:25:31 Luzi gibi, uh i've never done this, but i can try
08:26:14 gibi Luzi: cool, so when the fix merged to master, you can click cherry-pick on the gerrit web interface and select stable/victoria as target
08:26:27 Luzi okay thank you for the info :)
08:26:42 gibi just ping me if you get stuck
08:27:02 gibi we do the backport one stable branch at a time going backward in time so first we merge it to stable/victoria
08:27:29 gibi as far as I see the fix is applicable back until stable/stein
08:27:38 Luzi okay, i know we have to go back to at least train
08:28:12 Luzi yeah i will have a look into the code, when the change for the config option took place
08:35:54 gibi gmann: hi do I understand correctly that https://bugs.launchpad.net/nova/+bug/1918945 is not a regression so we don't need to mark it wallaby-rc-potential ?
08:35:56 openstack Launchpad bug 1918945 in OpenStack Compute (nova) "Nova API fails with 500s when called with non-project-scoped keystone tokens" [Undecided,New]
09:09:26 kashyap Luzi: Mornin; looking
09:09:41 kashyap Nit: The commit message's formatting is completely off
09:14:08 openstackgerrit Brin Zhang proposed openstack/nova master: Add missed accel_uuids for _poll_shelved_instances https://review.opendev.org/c/openstack/nova/+/778440
09:20:57 kashyap And yes, as Gibi says, backports are worth it.
09:36:17 brinzhang_ gibi: thanks
09:42:09 lyarwood bauzas: https://review.opendev.org/c/openstack/nova/+/757098 - another easy stable review if you have time this morning, trying to get the series moving back to stable/queens
09:42:37 bauzas lyarwood: on PTO today actually :(
09:45:58 lyarwood bauzas: ah sorry I did see that fly past yesterday, enjoy!
09:46:02 lyarwood ./kick bauzas
09:46:08 lyarwood :)
09:46:10 bauzas ;)
09:46:27 bauzas Sophie is turning 40 like me, so I need to help her to not crying :p
09:46:48 lyarwood ^_^
09:47:15 gibi :)
09:48:17 kashyap bauzas: It's like fine wine :)
09:50:57 lyarwood gibi: https://review.opendev.org/c/openstack/nova/+/780333/ - I'm going to hold off on this until stephenfin has sobered up and is back online. I missed that sean had wanted to keep 403 tbh so I think stephenfin just needs to confirm why he changed to 409.
09:54:05 gibi lyarwood: ack, I also would like to consult stephenfin and maybe even with gmann about that return code
09:54:35 gibi lyarwood: we really should approve that patch latest Friday
09:58:10 lyarwood ack
10:51:09 elod lyarwood: I've backported (clean cherry pick o:)) your patch to pike as well: https://review.opendev.org/c/openstack/nova/+/780852
10:51:48 elod could you please have a look? o:)
10:52:16 elod (this is to unblock stable/pike)
10:54:20 Luzi kashyap, i addressed your points https://review.opendev.org/c/openstack/nova/+/781030
11:09:13 mgoddard lyarwood: https://review.opendev.org/c/openstack/nova/+/781079
11:09:48 mgoddard lyarwood: I noticed you assigned https://bugs.launchpad.net/nova/+bug/1917498 to yourself, thought I'd propose my patch before you start working on it
11:09:50 openstack Launchpad bug 1917498 in OpenStack Compute (nova) "Cold migration/resize failure with encrypted volumes can leave instance in error and volumes attaching" [Medium,Triaged] - Assigned to Lee Yarwood (lyarwood)
11:27:59 kashyap Luzi: Looks good; thanks!
12:03:28 lyarwood mgoddard: ah awesome thanks! I'll look in a min
12:09:37 lyarwood mgoddard: so the check LGTM *but* this on the compute itself after we cast (and return 202) from the API
12:09:56 lyarwood mgoddard: AFAICT we should be able to check this before we cast over in the compute API using the bdms
12:10:37 lyarwood mgoddard: its just better UX IMHO, instead of getting a 202 back the caller gets an instant failure
12:11:04 mgoddard lyarwood: agreed, that would be better. Is there precedent for accessing barbican from the API?
12:13:45 lyarwood mgoddard: https://github.com/openstack/nova/blob/2dc26edfc52c791e760f8a7320fdc8be3061d1fe/nova/compute/api.py#L1877-L1889 - yeah looks like it's used with the current ephemeral encryption implementation to create a secret during instance creation
12:14:45 lyarwood that isn't widely used but I think it's still valid for the API to have access to the key manager if configured
12:14:59 lyarwood I *think* c-api also does this ahead of c-vol creating an encrypted volume FWIW
12:18:44 mgoddard lyarwood: right, I think c-api creates the secret
13:32:38 fungi Luzi: gibi: kashyap: when i looked yesterday, it appeared that option was first added in ocata (nova 15.0.0), obviously not a lot of point in backporting to branches that old but you can pretty well backport as far as you want to go
13:33:18 fungi the change to implement it merged in january 2017
13:33:41 kashyap fungi: Yep; indeed it was done during Ocata. Perhaps we can settle on backporting it to the oldest supported stable
13:35:21 fungi that would be consistent with our usual approach to security support for openstack, yeah
13:36:50 gibi fungi: ack
14:54:57 openstackgerrit Nicolas Parquet proposed openstack/nova master: Allow @ and dot (.) characters in keypair name https://review.opendev.org/c/openstack/nova/+/781076
15:09:32 melwitt thanks for the review lyarwood :) elod, in case you missed my ping from yesterday: https://review.opendev.org/c/openstack/nova/+/780991
15:17:31 lyarwood anytime
15:18:43 lyarwood melwitt: https://review.opendev.org/c/openstack/nova/+/757098 & https://review.opendev.org/c/openstack/nova/+/758733 could use stable core reviews if you have time in return :)
15:19:06 melwitt lyarwood: sure thing
15:19:59 lyarwood thanks
15:30:05 gmann gibi: on https://bugs.launchpad.net/nova/+bug/1918945
15:30:06 openstack Launchpad bug 1918945 in OpenStack Compute (nova) "Nova API fails with 500s when called with non-project-scoped keystone tokens" [Undecided,New]
15:31:24 gmann gibi: yes this is not regression, it is as per keystone current design for system scope. we will discuss about that more before and then in PTG. i have added this in etherpad L220 https://etherpad.opendev.org/p/nova-xena-ptg
15:32:27 gmann gibi: may be we should add this as cross project topic with keystone. lbragstad dansmith ?
15:32:57 gmann gibi: lyarwood ack 780333, I will check after my breakfast
15:33:08 dansmith it's fodder for the conversation about system scope for sure
15:33:23 dansmith figured that one that lbragstad has the etherpad for is probably cross-project already
15:33:28 elod melwitt: sorry, i did miss it somehow :S ...but now it's +2+W'd
15:33:45 lbragstad i haven't created any etherpads, yet
15:34:02 lbragstad just the one for summarizing the issue
15:34:16 lbragstad but i didn't target it to be a topic for the PTG officially or anything
15:35:11 melwitt elod: thanks! question for you, how did you figure out that stable/pike was failing for lack of https://review.opendev.org/c/openstack/nova/+/780852 ? just curious bc I can't figure it out. the error I see in nova-live-migration there is "Error EINVAL: bad entity name" and I was curious how you knew what was happening
15:35:20 dansmith lbragstad: https://etherpad.opendev.org/p/nova-xena-ptg L220, I thought that was you but I guess it was sean

Earlier   Later