| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2026-08-26 | |||
| 15:21:30 | sean-k-mooney | stephenfin: my understanding is only if its not configured in the config or explcitly disabled in teh config | |
| 15:21:53 | sean-k-mooney | stephenfin: but nova requries them to be able to talks to cidner and manage attachment | |
| 15:21:57 | sean-k-mooney | and to cybrog | |
| 15:22:12 | sean-k-mooney | so i think we shoudl expect that its more or less alwasy configured | |
| 15:22:45 | melwitt | yeah I remember we had to require it for cinder, for deleting attachments | |
| 15:22:46 | gmaan | stephenfin: sean-k-mooney we should always, i know we had a temporary config option not to send it but that was added only for transition purpose and suppose to be removed (which did not happen) | |
| 15:22:53 | Uggla | link: meet.google.com/zjr-rxus-hzj (triage) | |
| 15:23:11 | gmaan | Uggla: in horizon meeting, might be little late | |
| 15:23:17 | sean-k-mooney | melwitt: ya so eventully we shoudl not require the service token to talk to cinder and cybrog | |
| 15:23:25 | Uggla | gmaan nw | |
| 15:23:29 | sean-k-mooney | but that requries chagne to nova and cinder | |
| 15:23:53 | sean-k-mooney | we abused the service token for security to close cves | |
| 15:24:27 | melwitt | what's the alternative? nova service user only or? | |
| 15:24:35 | sean-k-mooney | but nova shoudl eventually all nova iwth its own token with the service role instead and use the 2.1 microversion instead of 2.0 to bind/unbind ARQs | |
| 15:25:21 | sean-k-mooney | melwitt: yes exactly nova shoudl use its own token (with the service role) to do the privdage service ot service calls | |
| 15:25:26 | elodilles | Uggla: will there be an Upstream bug triage meeting today? | |
| 15:25:34 | melwitt | ok, yeah. I had to set that up with vtpm live migration "deployment" mode although we did not end up usingi t | |
| 15:25:51 | Uggla | elodilles yes | |
| 15:26:11 | elodilles | Uggla: sorry, forgot to scroll o:) just a heads up: i don't have any update, but i'll listen in o:) | |
| 15:26:28 | Uggla | elodilles no worries. | |
| 15:26:55 | melwitt | same, no update from me | |
| 15:31:31 | stephenfin | sean-k-mooney: I thought the point of the additional service token was for long-running operations? Isn't Nova's token (with or without the service role) subject to the same issue? | |
| 15:31:49 | stephenfin | Or do we assume a token is minted each time so that shouldn't ever happen? | |
| 15:33:21 | opendevreview | Leo Jenkins proposed openstack/nova-specs master: Support for Hostname-based Ceph Mon References https://review.opendev.org/c/openstack/nova-specs/+/1000098 | |
| 15:33:34 | sean-k-mooney | stephenfin: it is but the service user tokens are never cached and reused we create them on every request (where we dont share the client instnatce) | |
| 15:34:17 | sean-k-mooney | stephenfin: basiclly if the dest compute needt to call cinder to compelte the volume attachment on a live migration | |
| 15:34:29 | sean-k-mooney | it will use the user token for that and generate a new service token at that point | |
| 15:34:55 | sean-k-mooney | so the user token coudl be long expired at that point but the service user token will be freshly issued for that request | |
| 15:35:41 | sean-k-mooney | so the primay usecase for the service_user token is lifetime exstension of the users token | |
| 15:37:42 | sean-k-mooney | stephenfin: since the service_user token is alwasy created form config we can alwasy mint a new one when required as well | |
| 15:42:24 | stephenfin | Okay so "Or do we assume a token is minted each time so that shouldn't ever happen?" is the case | |
| 15:42:31 | stephenfin | fair enough | |
| 16:05:59 | opendevreview | sean mooney proposed openstack/placement master: bump min version of os-traits https://review.opendev.org/c/openstack/placement/+/1002526 | |
| 16:07:03 | sean-k-mooney | ^ that bumps to 3.9.0 with the NVME and TDX traits | |
| 16:07:29 | sean-k-mooney | previous min was 3.3.0 | |
| 16:08:50 | gibi | we bumped on the nova side but not on the placemnet side | |
| 16:08:53 | gibi | thanks Se | |
| 16:08:55 | gibi | Sean | |
| 16:09:49 | sean-k-mooney | on the cybog side we will need 3.9.0 if i end up merging the nvme driver but currently testing it so it might slip but it wont need nova's min to change | |
| 16:10:19 | sean-k-mooney | we also need to supprot older placemeent anyway but its nice to have a standard set of traits for any given release | |
| 16:20:10 | opendevreview | Balazs Gibizer proposed openstack/nova master: Lock on DB url in functional test https://review.opendev.org/c/openstack/nova/+/1002529 | |
| 16:20:53 | gibi | sean-k-mooney: melwitt: gmaan: here is a gate fix (and it parents) to look at ^^ | |
| 16:21:43 | gmaan | gibi: nice, will check | |
| 16:21:44 | melwitt | sean-k-mooney: do we need to bump nova too for nvme traits? I guess you said no it would not? | |
| 16:22:06 | sean-k-mooney | melwitt: nova will never report them so not a depency for it | |
| 16:22:17 | melwitt | oh I see, cool | |
| 16:22:36 | sean-k-mooney | cyborg need it for the constant adn placmenet so we can say 2026.2 will alwasy have them | |
| 16:22:58 | sean-k-mooney | techinally the standard traits can be newer if placment has a newer os-tratis installed | |
| 16:23:25 | melwitt | gotcha | |
| 16:23:27 | sean-k-mooney | that why it was working in ci we alwasy use whatever is allwoed by UC | |
| 16:24:08 | gibi | I stopping for today. o/ | |
| 16:24:21 | sean-k-mooney | o/ | |
| 16:24:33 | opendevreview | Clif Houck proposed openstack/nova master: perf(ironic): eliminate O(N²) ProviderTree deepcopy at startup https://review.opendev.org/c/openstack/nova/+/980676 | |
| 16:24:34 | opendevreview | Clif Houck proposed openstack/nova master: Parallelize per-node resource updates https://review.opendev.org/c/openstack/nova/+/980679 | |
| 16:24:43 | sean-k-mooney | ill be swaping to watcher review sortly too and tomorrow ill be mainly focusing on watcher and cyborg | |
| 16:57:24 | opendevreview | Clif Houck proposed openstack/nova master: Parallelize per-node resource updates https://review.opendev.org/c/openstack/nova/+/980679 | |
| 17:04:46 | opendevreview | Merged openstack/nova master: Switch Cyborg client from keystoneauth1 to openstacksdk https://review.opendev.org/c/openstack/nova/+/1002007 | |
| 17:30:48 | opendevreview | Merged openstack/nova master: libvirt: Launch security Intel TDX https://review.opendev.org/c/openstack/nova/+/999249 | |
| 17:31:02 | opendevreview | Merged openstack/nova master: doc: Add documentation for Intel TDX https://review.opendev.org/c/openstack/nova/+/1000081 | |
| 17:48:51 | opendevreview | melanie witt proposed openstack/nova master: Remove workaround for ServiceAuthTokenWrapper get_endpoint_data() https://review.opendev.org/c/openstack/nova/+/1002540 | |
| 17:52:10 | opendevreview | melanie witt proposed openstack/nova master: Remove workaround for ServiceAuthTokenWrapper get_endpoint_data() https://review.opendev.org/c/openstack/nova/+/1002540 | |
| 17:52:42 | melwitt | stephenfin, sean-k-mooney: seems to work fine ^ tested on my devstack | |
| 18:42:06 | opendevreview | Ghanshyam Maan proposed openstack/nova master: Fix race between RPC method completion and task tracking updates https://review.opendev.org/c/openstack/nova/+/1002432 | |
| 19:29:31 | opendevreview | Merged openstack/placement master: bump min version of os-traits https://review.opendev.org/c/openstack/placement/+/1002526 | |
| 20:46:17 | opendevreview | melanie witt proposed openstack/nova master: tests: Functional reproducer for bug 2088831 https://review.opendev.org/c/openstack/nova/+/935565 | |
| 20:46:18 | opendevreview | melanie witt proposed openstack/nova master: Include image in unified limits quota check https://review.opendev.org/c/openstack/nova/+/1002553 | |
| 21:14:27 | opendevreview | Merged openstack/nova master: Stabilize TestSerialConsoleLiveMigrate https://review.opendev.org/c/openstack/nova/+/1002477 | |
| 21:14:39 | opendevreview | Merged openstack/nova master: Stabilize live migration tests https://review.opendev.org/c/openstack/nova/+/1002493 | |
| 21:14:54 | opendevreview | Merged openstack/nova master: Lock on DB url in functional test https://review.opendev.org/c/openstack/nova/+/1002529 | |
| 22:38:29 | opendevreview | Goutham Pacha Ravi proposed openstack/nova master: Support cold migration with virtiofs shares https://review.opendev.org/c/openstack/nova/+/989633 | |
| 22:38:30 | opendevreview | Goutham Pacha Ravi proposed openstack/nova master: Reconcile stale Manila share access rules https://review.opendev.org/c/openstack/nova/+/1001916 | |
| 22:59:42 | opendevreview | Merged openstack/nova master: libvirt: reject_mem_enc_instances https://review.opendev.org/c/openstack/nova/+/1000082 | |
| #openstack-nova - 2026-08-27 | |||
| 00:41:56 | opendevreview | Ghanshyam Maan proposed openstack/nova master: Fix graceful shutdown functional unstable tests https://review.opendev.org/c/openstack/nova/+/1002223 | |
| 01:07:09 | opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Add functional tests for TDX capability report https://review.opendev.org/c/openstack/nova/+/998525 | |
| 03:19:03 | opendevreview | Merged openstack/nova master: Stub kernel support check of AMD-SEV in tests https://review.opendev.org/c/openstack/nova/+/999780 | |
| 05:41:15 | opendevreview | Merged openstack/nova master: libvirt: Check only x86_64 arch for Intel TDX https://review.opendev.org/c/openstack/nova/+/1000805 | |
| 06:27:39 | opendevreview | Merged openstack/nova master: Remove unused default argument https://review.opendev.org/c/openstack/nova/+/922073 | |
| 07:51:29 | gibi | antia: TDX landed. Thanks for the contribution! | |
| 08:16:21 | gibi | a bunch of stabilization bug fix landed. I now took https://bugs.launchpad.net/nova/+bug/2165150 as the next to work on | |
| 08:16:33 | opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Add functional tests for TDX capability report https://review.opendev.org/c/openstack/nova/+/998525 | |
| 08:30:47 | antia | gibi: Amazing! Thanks for all your effort on this | |
| 08:32:01 | gibi | now that both TDX and SNP is in the tree I will buy a slice of cake after lunch. It was a nice cooperation across timezones, companies, and even vendors. I would like to see more such feature development in the future in openstack | |
| 08:33:17 | gibi | thanks tkajinam antia sean-k-mooney gmaan bauzas and others in the background who are not on IRC to make it happen | |
| 09:48:38 | opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Add functional tests for TDX capability report https://review.opendev.org/c/openstack/nova/+/998525 | |
| 12:16:27 | gmaan | \o/ | |
| 12:24:18 | gibi | I think I found a race that is not test only but a real race in the compute(s) https://bugs.launchpad.net/nova/+bug/2165318 | |
| 12:35:46 | opendevreview | Ghanshyam Maan proposed openstack/nova master: Add event.set cleanup in test_graceful_shutdown https://review.opendev.org/c/openstack/nova/+/1002638 | |
| 12:38:35 | gmaan | gibi: ^^ followup for self.addCleanup event.set | |
| 12:40:05 | gibi | thanks | |
| 13:25:33 | opendevreview | Lajos Katona proposed openstack/nova master: libvirt: Preserve queue_size during live migration https://review.opendev.org/c/openstack/nova/+/995841 | |
| 13:52:26 | opendevreview | Merged openstack/nova master: Remove workaround for ServiceAuthTokenWrapper get_endpoint_data() https://review.opendev.org/c/openstack/nova/+/1002540 | |
| 14:29:09 | stephenfin | melwitt: I'd appreciate your eyes on https://review.opendev.org/c/openstack/nova/+/1002359 while you still have ksa know-how fresh in your head 🙏 | |
| 14:29:43 | melwitt | stephenfin: ah yes thanks for reminding. writing it down this time | |
| 14:49:37 | opendevreview | Stephen Finucane proposed openstack/nova master: conf: Deprecated http_retries options https://review.opendev.org/c/openstack/nova/+/1002657 | |
| 14:49:38 | opendevreview | Stephen Finucane proposed openstack/nova master: WIP: network: Simplify client creation https://review.opendev.org/c/openstack/nova/+/1002658 | |
| 15:10:20 | melwitt | gmaan: can I get a sanity check regarding a stable backport proposed? it would change a HTTP 403 to a HTTP 400. I believe this should be ok for stable bc it is remaining a 4xx status still, but wanted to check with you https://review.opendev.org/c/openstack/nova/+/996878 | |
| 15:11:23 | gmaan | melwitt: sure, will check after internal meeting. | |
| 15:11:51 | gmaan | melwitt: thanks for review on gate fixes, this one also ready https://review.opendev.org/c/openstack/nova/+/1002223 | |
| 15:12:06 | melwitt | cool thank you | |
| 15:12:31 | gmaan | melwitt: stephenfin and this one you had reviewed earlier, i need to rebase it due to code refactor on this https://review.opendev.org/c/openstack/nova/+/986477 | |