| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2025-05-27 | |||
| 17:16:37 | Uggla | thanks gmaan | |
| 17:16:52 | Uggla | Sorry I close the meeting a bit too quickly | |
| 17:17:47 | Uggla | Anyway time for me to afk, see you tomorrow. | |
| 17:17:50 | gmaan | its fine, actually 17 UTC, TC meeting start so difficult to respond here on time :) | |
| 17:19:19 | Uggla | no worries, I think I would close the meeting without bug triage because we were almost on top of the hour. | |
| 17:21:35 | sean-k-mooney | i set it to incomplete | |
| 17:21:39 | sean-k-mooney | we can come back next week | |
| 17:22:00 | Uggla | ok sean-k-mooney | |
| 17:22:03 | sean-k-mooney | but i suspect if the neutorn issue is fixed nova will do the right thing | |
| 21:04:30 | opendevreview | Callum Dickinson proposed openstack/nova master: Add image meta to libvirt XML metadata https://review.opendev.org/c/openstack/nova/+/942766 | |
| 21:04:30 | opendevreview | Callum Dickinson proposed openstack/nova master: Fix image ID in libvirt metadata when unshelving https://review.opendev.org/c/openstack/nova/+/942973 | |
| 21:09:05 | opendevreview | Callum Dickinson proposed openstack/nova master: Add more flavor metadata to libvirt guest XML https://review.opendev.org/c/openstack/nova/+/942974 | |
| 21:09:49 | Callum027 | sean-k-mooney: I know it's not strictly necessary but I've rebased the branches to make sure they're fine to merge with the newer master branch | |
| 21:10:05 | Callum027 | (the image meta blueprint ones, and the bugfix for image ID in libvirt metadata) | |
| 21:10:32 | Callum027 | Also added some more detail to the release notes as discussed in the meeting | |
| #openstack-nova - 2025-05-28 | |||
| 05:12:38 | opendevreview | Takashi Kajinami proposed openstack/nova master: Remove unused validator for uri element https://review.opendev.org/c/openstack/nova/+/951084 | |
| 09:05:39 | opendevreview | DongHun, Kim proposed openstack/nova master: Fix PCI device mapping leak after evacuate for GPU VMs https://review.opendev.org/c/openstack/nova/+/951099 | |
| 09:09:34 | opendevreview | DongHun, Kim proposed openstack/nova master: Fix PCI device mapping leak after evacuate for GPU VMs https://review.opendev.org/c/openstack/nova/+/951099 | |
| 10:26:33 | sean-k-mooney | Callum027: thanks ill see if i can review them this morning before i get distracted by other things | |
| 10:27:19 | sean-k-mooney | Callum027: i would suggest putting https://review.opendev.org/c/openstack/nova/+/942974 in the same seriese as the rest given its indicating it will be in merge conflcit with it | |
| 10:28:57 | sean-k-mooney | perhaps put the image ones on top or put this on top of them either way works | |
| 12:04:40 | opendevreview | Balazs Gibizer proposed openstack/nova master: Return HTTP400 for multi spec pci alias if PCI in Placement https://review.opendev.org/c/openstack/nova/+/951007 | |
| 12:04:41 | opendevreview | Balazs Gibizer proposed openstack/nova master: Multiple spec per PCI alias limitation https://review.opendev.org/c/openstack/nova/+/944062 | |
| 12:24:51 | opendevreview | DongHun, Kim proposed openstack/nova master: Fix PCI device mapping leak after evacuate for GPU VMs https://review.opendev.org/c/openstack/nova/+/951099 | |
| 12:46:33 | opendevreview | Balazs Gibizer proposed openstack/nova master: Multiple spec per PCI alias limitation https://review.opendev.org/c/openstack/nova/+/944062 | |
| 12:46:33 | opendevreview | Balazs Gibizer proposed openstack/nova master: Return HTTP400 for multi spec pci alias if PCI in Placement https://review.opendev.org/c/openstack/nova/+/951007 | |
| 12:46:34 | opendevreview | Balazs Gibizer proposed openstack/nova master: Validated that PCI alias has proper ids https://review.opendev.org/c/openstack/nova/+/951129 | |
| 12:50:01 | opendevreview | Balazs Gibizer proposed openstack/nova master: Validated that PCI alias has proper ids https://review.opendev.org/c/openstack/nova/+/951129 | |
| 12:50:31 | gibi | dansmith: ^^ FYI | |
| 13:22:27 | dansmith | gibi: nice | |
| 13:48:19 | opendevreview | Balazs Gibizer proposed openstack/nova master: Validate [pci]alias at service startup https://review.opendev.org/c/openstack/nova/+/951143 | |
| 13:48:19 | opendevreview | Balazs Gibizer proposed openstack/nova master: Validated that PCI alias has proper ids https://review.opendev.org/c/openstack/nova/+/951129 | |
| 14:49:48 | opendevreview | Balazs Gibizer proposed openstack/nova master: Cache [pci]alias parsing https://review.opendev.org/c/openstack/nova/+/951151 | |
| 14:49:48 | opendevreview | Balazs Gibizer proposed openstack/nova master: Validate [pci]alias at service startup https://review.opendev.org/c/openstack/nova/+/951143 | |
| 14:50:22 | gibi | sean-k-mooney: ^^ with caching included :) | |
| 15:44:37 | sean-k-mooney | gibi: very nice. il take a look | |
| 21:34:43 | Callum027 | sean-k-mooney: Ah, right, of course, good idea, I'll do that shortly (and hopefully Gerrit starts working for me soon because I'm getting load failures) | |
| 23:19:01 | opendevreview | Callum Dickinson proposed openstack/nova master: Fix image ID in libvirt metadata when unshelving https://review.opendev.org/c/openstack/nova/+/942973 | |
| 23:19:02 | opendevreview | Callum Dickinson proposed openstack/nova master: Add image meta to libvirt XML metadata https://review.opendev.org/c/openstack/nova/+/942766 | |
| 23:19:02 | opendevreview | Callum Dickinson proposed openstack/nova master: Add more flavor metadata to libvirt guest XML https://review.opendev.org/c/openstack/nova/+/942974 | |
| #openstack-nova - 2025-05-29 | |||
| 00:15:52 | opendevreview | Ghanshyam proposed openstack/nova-specs master: Propose API policy manager role spec https://review.opendev.org/c/openstack/nova-specs/+/937650 | |
| 00:23:12 | opendevreview | Ghanshyam proposed openstack/nova-specs master: Propose API policy service role spec https://review.opendev.org/c/openstack/nova-specs/+/951218 | |
| 00:23:42 | opendevreview | Ghanshyam proposed openstack/nova-specs master: Re-propose API policy service role spec https://review.opendev.org/c/openstack/nova-specs/+/951218 | |
| 00:27:09 | opendevreview | Ghanshyam proposed openstack/nova-specs master: Propose API policy manager role spec https://review.opendev.org/c/openstack/nova-specs/+/937650 | |
| 00:34:33 | gmaan | sean-k-mooney: ^^ proposed the manager role spec (fixing the review comment from code/last cycle review) and also re-proposing the service role spec, please review. proposed both spec separately | |
| 00:37:00 | gmaan | I added the new policies proposal also to filter out the host-thing from manager permission | |
| 02:43:10 | opendevreview | Callum Dickinson proposed openstack/nova master: Add image meta to libvirt XML metadata https://review.opendev.org/c/openstack/nova/+/942766 | |
| 03:51:48 | opendevreview | sean mooney proposed openstack/nova-specs master: Add cpu-teiring with cpu_shares spec https://review.opendev.org/c/openstack/nova-specs/+/951222 | |
| 05:05:28 | opendevreview | Takashi Kajinami proposed openstack/nova master: Replace license classifier https://review.opendev.org/c/openstack/nova/+/951226 | |
| 05:20:04 | opendevreview | Callum Dickinson proposed openstack/nova master: Add image meta to libvirt XML metadata https://review.opendev.org/c/openstack/nova/+/942766 | |
| 06:47:31 | opendevreview | Kamil Sambor proposed openstack/nova master: Replace eventlet.event.Event with threading.Event https://review.opendev.org/c/openstack/nova/+/949754 | |
| 09:09:51 | roger_wang | I wonder if anyone could review this patch of Improve Error Handling for Placement API Responses (https://review.opendev.org/c/openstack/nova/+/943530). much appreciated. | |
| 13:09:55 | opendevreview | Takashi Kajinami proposed openstack/nova master: Replace license classifier https://review.opendev.org/c/openstack/nova/+/951226 | |
| 16:11:06 | opendevreview | Merged openstack/nova-specs master: Re-propose vTPM live migration https://review.opendev.org/c/openstack/nova-specs/+/947542 | |
| 16:42:46 | gmaan | sean-k-mooney: thanks for reviews on RBAC specs, I would like to highlight this and if you feel strong to change it? https://review.opendev.org/c/openstack/nova-specs/+/951218/2/specs/2025.2/approved/policy-service-role-default.rst#49 | |
| 16:48:22 | sean-k-mooney | gmaan: so orgianlly i ithink i suggested starting with service or admin for upgrade reaons | |
| 16:48:37 | gmaan | yeah | |
| 16:48:38 | sean-k-mooney | if we think we can miniums the upgred impact such that we can directly go to service | |
| 16:48:46 | sean-k-mooney | then im ok to try that | |
| 16:49:24 | sean-k-mooney | the real concern is it required cinder, neutron and cyborg | |
| 16:49:33 | sean-k-mooney | to be deploywed with teh service role for there own user | |
| 16:49:46 | sean-k-mooney | which they should have but that is the main upgrade impact in my view | |
| 16:50:11 | gmaan | ok, having old defaults still supported and there is a way to keep admin perform these operation, my first preference is to go with 'service' only | |
| 16:50:14 | sean-k-mooney | i expect most deployment tools shoudl have made that chane already but i have not checked | |
| 16:50:28 | gmaan | yeah but honestly saying that is what we want to restrict, no user should use these APIs | |
| 16:50:56 | sean-k-mooney | right | |
| 16:51:15 | sean-k-mooney | so if other are also ok with this proposal then lets try going directly to the desired state | |
| 16:51:25 | gmaan | I am working on job to enable it 'service' only token from cinder, neutron so let's see how that testing goes | |
| 16:51:30 | sean-k-mooney | we jsut need to coridate the changes in devstack ectra to make this work | |
| 16:51:32 | gmaan | ack | |
| 16:51:36 | gmaan | yeah | |
| 16:52:16 | melwitt | sean-k-mooney: thanks from me also for the spec review | |
| 16:52:21 | sean-k-mooney | our new downstream installer deployws all service user with both admin an service so it is prepared for the change but not prepared to drop the admin role any tiem soon | |
| 16:53:37 | sean-k-mooney | melwitt: it was on my todo list all week but im glad i got to it before firday at like 6 pm :) | |
| 16:54:34 | melwitt | that is a win :) | |
| 16:55:33 | sean-k-mooney | my spec review brian is more or less spent for today which is why im makign the terible desion to update a jira thick isntead. | |
| 16:58:33 | sean-k-mooney | gmaan: stephenfin has two small spec related to the api that you may have interest in https://review.opendev.org/c/openstack/nova-specs/+/940440 and https://review.opendev.org/c/openstack/nova-specs/+/947210 | |
| 16:58:54 | sean-k-mooney | the latter came form a code review as part of the openapi schema work | |
| 17:00:23 | gmaan | sure, will check today | |
| 18:03:52 | gmaan | sean-k-mooney: replied for the evacuate policy change, that is something we should discuss more. especially if that can be used to know infra/service info. | |
| 18:03:57 | gmaan | gibi: when you have time, can you provide your opinion on evacuate policy default change (specially on Does it leak information about infra/services? part) https://review.opendev.org/c/openstack/nova-specs/+/937650/7/specs/2025.2/approved/policy-manager-role-default.rst#127 | |
| 18:04:41 | gmaan | we do return 400 if evacuate is tried and compute is up but host info are returned in error message | |
| 18:11:53 | sean-k-mooney | gmaan: i dont think we would return a 400 | |
| 18:12:23 | sean-k-mooney | for a normal user they will get a 403 or 401 but an admin i would expect to get a 409 | |
| 18:12:27 | gmaan | 409? | |
| 18:12:36 | sean-k-mooney | if the host was up ya | |
| 18:12:41 | sean-k-mooney | it might be a 400 | |
| 18:12:51 | gmaan | yeah, that is something I was thikning why we did not return 409 in this case | |
| 18:12:58 | sean-k-mooney | i.e. it may be one of the api we missed when we treid to use 409 better | |
| 18:13:07 | gmaan | yeah | |
| 18:14:39 | sean-k-mooney | gmaan: is the concern that tehy will knwo the mangment of the host is still up? | |
| 18:15:01 | sean-k-mooney | like if they try to evacuate and the nova-compute is up | |
| 18:15:10 | gmaan | sean-k-mooney: that one + current code return instance' host in the error message which we can change | |
| 18:15:18 | sean-k-mooney | then they could just cold/live migratiate instead right? | |
| 18:15:53 | sean-k-mooney | gmaan: oh right i didnt look at the respocne | |
| 18:16:24 | gmaan | they can migrate other way but it is that they will have a way to know compute service is up | |
| 18:17:08 | gmaan | which they know indirectly because instance is up :) that is why I am not 100% sure if this is infra info leak or not | |
| 18:17:12 | sean-k-mooney | well they can infer but doint instnace actions on the instnace | |
| 18:17:18 | sean-k-mooney | like server diagnostics | |
| 18:17:30 | gmaan | that is admin only | |