Earlier  
Later
New Search
Posted Nick Remark
#openstack-nova - 2020-02-07
20:59:30 sean-k-mooney this is what i tested with the fake driver today
20:59:32 sean-k-mooney http://paste.openstack.org/show/789306/
20:59:56 sean-k-mooney Sundar: resize to same flavor should be blocked in the api
21:00:00 sean-k-mooney it is in the client
21:00:13 sean-k-mooney you can migrate but resize to same flavor is invalid
21:01:22 Sundar remove-vol/net: unrelated to Cyborg, right?
21:01:50 sean-k-mooney yes but you blocked them in your patch that check for the flavor extra spec
21:01:56 sean-k-mooney they seam to work fine
21:02:05 Sundar Suspend will not work with real FPGAs, because libvirt will error out with: Domain has assigned non-USB devices.
21:02:07 sean-k-mooney at least with the fake dirver
21:02:38 sean-k-mooney suspend shoudl do a managed save which will detach all hostdev devices
21:02:46 Sundar delete failed?
21:02:49 sean-k-mooney yes
21:03:12 sean-k-mooney it failed in the last versions too
21:03:34 sean-k-mooney the conductor explodes with an unexpected respoce form cyborg
21:03:48 sean-k-mooney when it tries to delete /unbind the arqs
21:04:03 Sundar Hmm, please send me the logs. I do deletes all the time, but your sequence of ops probably triggered something.
21:04:39 sean-k-mooney i found that was broken just with boot then delete two days ago
21:04:56 sean-k-mooney ill need to unstack and stack to be able to test it again
21:05:18 Sundar I'll try boot + delete. Was it hard reboot?
21:06:36 sean-k-mooney no just boot then delete
21:06:47 sean-k-mooney hardreboot seams to be fine
21:08:23 sean-k-mooney Sundar: https://etherpad.openstack.org/p/sean-cyborg-testing-delete-logs
21:08:36 sean-k-mooney paste.openstack.org isnt loadign for me
21:08:44 sean-k-mooney but that is all the nova and cyborg logs
21:10:19 sean-k-mooney it look like the cyborg api returned a 401
21:12:19 Sundar devstack@cyborg-api.service[26903]: 2020-02-07 20:56:05.719 .... Authorization failed for token: keystonemiddleware.auth_token._exceptions.InvalidToken: Token authorization failed.
21:12:53 sean-k-mooney yep
21:13:35 sean-k-mooney so the call to cyborg either need an admin token which i dont think is correct or the token expired and you need to handel that
21:14:29 sean-k-mooney deleting the vm again does not fix it by they way
21:14:40 sean-k-mooney but i can create and delete non cyborg vms
21:15:05 sean-k-mooney i get the same 401 reponce on the second attempt
21:15:13 sean-k-mooney but i can delete hte arq myself
21:15:58 Sundar What does it take to handle an expired token? BTW: https://opendev.org/openstack/cyborg/src/branch/master/cyborg/common/policy.py#L86 applies defuault rule for ARQ deletes
21:16:39 Sundar *default rule: rule:admin_or_owner
21:17:02 sean-k-mooney so there is basically two ways to try and resovle it or you can raise an error
21:17:38 sean-k-mooney if service tokens are configured youc an fall back to using those alternitvly you can have an admin token for the servcie in the nova conf and escalate
21:17:42 sean-k-mooney or you can fail
21:17:51 sean-k-mooney but in this can my token was not expired
21:18:14 sean-k-mooney when i did it again i was issue a new token and it failed again
21:18:58 sean-k-mooney my devstack also issue tokesn that last for an hour so it shoudl be fine
21:20:41 sean-k-mooney anyway im done for the day o/
21:21:21 Sundar Ok. Not sure what is going wrong here. I'll try it out as non-admin.
21:21:34 Sundar Thanks a lot for all your efforts. ;) Have a good weekend!
21:43:38 Sundar efried: Re. "blocking unsupported operations", the objection seems to be that each change requires microversion changes.
21:45:49 Sundar FWIW, I think any further changes after this series will be few and far between. We could put in a microversion change now. Any further changes should be clumped together as much as possible, based on operator requirements.
#openstack-nova - 2020-02-08
03:02:28 openstackgerrit HYSong proposed openstack/nova master: fix bug 1861964 https://review.opendev.org/706647
03:02:28 openstack bug 1861964 in OpenStack Compute (nova) "availability_zone in request_specs not updated when live migrate vm from one availability zone to another" [Undecided,New] https://launchpad.net/bugs/1861964
05:15:09 openstackgerrit HYSong proposed openstack/nova master: fix format https://review.opendev.org/706655
16:16:26 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing admin_password policies https://review.opendev.org/701629
16:17:09 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing admin_password policies https://review.opendev.org/701629
16:17:17 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Introduce scope_types in os-admin-password https://review.opendev.org/701630
16:17:32 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-admin-password policies https://review.opendev.org/701639
16:20:05 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-agents policies https://review.opendev.org/701648
17:02:18 openstackgerrit Merged openstack/nova master: Fix instance.hidden migration and querying https://review.opendev.org/706331
18:24:10 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-agents policies https://review.opendev.org/701648
18:24:26 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Pass the actual target in os-agents policy https://review.opendev.org/701649
18:37:36 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-atttach-inerfaces policies https://review.opendev.org/706672
19:15:02 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-atttach-inerfaces policies https://review.opendev.org/706672
19:24:02 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing admin_password policies https://review.opendev.org/701629
22:48:08 openstackgerrit Merged openstack/nova stable/train: Fix instance.hidden migration and querying https://review.opendev.org/706582
23:05:04 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Introduce scope_types in os-admin-password https://review.opendev.org/701630
23:05:16 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-admin-password policies https://review.opendev.org/701639
23:31:26 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing availability-zone policies https://review.opendev.org/706682
23:51:01 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Fix os-availability-zone policy to be admin https://review.opendev.org/706683
#openstack-nova - 2020-02-09
00:59:28 gmann melwitt: dansmith one question on GET AZ permission. Currently GET os-availability-zone (list) is admin_or_owner but allowed for everyone(details in bug)- https://bugs.launchpad.net/nova/+bug/1862484
00:59:28 openstack Launchpad bug 1862484 in OpenStack Compute (nova) "GET os-availability-zone API policy is allowed for everyone even policy defaults is admin_or_owner" [Undecided,In progress] - Assigned to Ghanshyam Mann (ghanshyammann)
01:01:19 gmann I am changing it to Admin (like GET os-avalability-zone/detail but that is admin because that has the host information also). I am not sure if changing it to admin by default is right or we should keep is open for everyone as AZ is end-user things.
01:02:42 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing availability-zone policies https://review.opendev.org/706682
01:22:48 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-agents policies https://review.opendev.org/701648
01:25:06 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-availability-zone policies https://review.opendev.org/706684
01:27:45 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Introduce scope_types in os-availability-zone https://review.opendev.org/706684
01:49:31 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-availability-zone policies https://review.opendev.org/706686
02:17:56 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing os-console-auth-tokens policies https://review.opendev.org/706687
02:29:28 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Introduce scope_types in os-console-auth-tokens https://review.opendev.org/706688
02:49:49 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-console-auth-tokens policies https://review.opendev.org/706689
03:03:33 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Pass the actual target in os-console-auth-tokens policy https://review.opendev.org/706690
03:14:28 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Pass the actual target in os-availability-zone policy https://review.opendev.org/706691
17:45:00 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/queens: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706714
17:45:51 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/pike: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706715
17:51:31 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/rocky: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706716
18:05:51 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/rocky: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706716
18:06:54 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/queens: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706714
18:07:11 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/pike: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706715
19:15:07 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/rocky: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706716
21:29:24 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/queens: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706714
21:30:05 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/pike: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706715
#openstack-nova - 2020-02-10
00:55:29 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing console_output policies https://review.opendev.org/706724
01:07:33 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Fix os-console-output policy to be admin_or_owner https://review.opendev.org/706725
01:07:57 gmann melwitt: alex_xu another bug in policy - https://review.opendev.org/706725
01:17:16 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing console_output policies https://review.opendev.org/706724
01:45:29 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing create_backup policies https://review.opendev.org/706726
01:49:30 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing console_output policies https://review.opendev.org/706724
01:59:35 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Fix os-create-backup policy to be admin_or_owner https://review.opendev.org/706727
02:00:14 gmann melwitt: alex_xu this is another. I think most of the admin_or_owner are buggy - https://review.opendev.org/706727
02:36:32 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing create_backup policies https://review.opendev.org/706726
02:59:04 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Fix os-console-output policy to be admin_or_owner https://review.opendev.org/706725
03:02:42 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing console_output policies https://review.opendev.org/706724
03:05:12 gmann efried: melwitt dansmith lyarwood stephenfin these are the fixes to unblock the stable/pike|queens|rocky nova gate - https://review.opendev.org/#/q/topic:fix-stable-gate+(status:open+OR+status:merged)+projects:openstack/nova
03:44:55 openstackgerrit jichenjc proposed openstack/nova master: set default value to 0 instead of '' https://review.opendev.org/706730

Earlier   Later