| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2020-04-25 | |||
| 23:10:38 | openstackgerrit | Ghanshyam Mann proposed openstack/nova-specs master: [Community goal] Update contributor documentation https://review.opendev.org/722393 | |
| #openstack-nova - 2020-04-26 | |||
| 01:16:12 | openstackgerrit | xuyuanhao proposed openstack/nova master: loads pyc files failed,sys.modules support loads py and pyc files as modules https://review.opendev.org/723130 | |
| 06:35:12 | openstackgerrit | Qiu Fossen proposed openstack/python-novaclient master: Remove Babel requirement https://review.opendev.org/723139 | |
| 06:40:56 | openstackgerrit | Qiu Fossen proposed openstack/python-novaclient master: Remove Babel requirement https://review.opendev.org/723139 | |
| 07:18:48 | openstackgerrit | Takashi Natsume proposed openstack/python-novaclient master: Use unittest.mock instead of third party mock https://review.opendev.org/723152 | |
| 07:19:42 | openstackgerrit | Takashi Natsume proposed openstack/python-novaclient master: Remove future imports https://review.opendev.org/723153 | |
| 07:44:04 | openstackgerrit | OpenStack Proposal Bot proposed openstack/nova stable/ussuri: Imported Translations from Zanata https://review.opendev.org/723160 | |
| 07:51:30 | openstackgerrit | OpenStack Proposal Bot proposed openstack/nova master: Imported Translations from Zanata https://review.opendev.org/722644 | |
| 10:12:26 | openstackgerrit | Takashi Natsume proposed openstack/python-novaclient master: Use unittest.mock instead of third party mock https://review.opendev.org/723152 | |
| 10:41:38 | openstackgerrit | Qiu Fossen proposed openstack/python-novaclient master: Remove Babel requirement https://review.opendev.org/723139 | |
| 11:16:43 | openstackgerrit | Andreas Jaeger proposed openstack/nova master: Remove translation sections from setup.cfg https://review.opendev.org/723206 | |
| 11:43:32 | openstackgerrit | Andreas Jaeger proposed openstack/nova master: Remove translation sections from setup.cfg https://review.opendev.org/723206 | |
| 13:27:01 | openstackgerrit | jayaditya gupta proposed openstack/nova master: Support for --force flag for nova-manage placement heal_allocations command https://review.opendev.org/715395 | |
| 19:34:10 | openstackgerrit | jayaditya gupta proposed openstack/nova master: Support for --force flag for nova-manage placement heal_allocations command https://review.opendev.org/715395 | |
| 20:57:50 | openstackgerrit | Luigi Toscano proposed openstack/nova master: DNM a test for a grenade fix https://review.opendev.org/723266 | |
| #openstack-nova - 2020-04-27 | |||
| 00:14:00 | openstackgerrit | Ghanshyam Mann proposed openstack/nova master: zuul: Switch to the Zuulv3 grenade job https://review.opendev.org/704364 | |
| 00:46:30 | openstackgerrit | Kevin Zhao proposed openstack/nova master: [WIP] CI: add tempest-integrated-compute-aarch64 job https://review.opendev.org/714439 | |
| 01:28:19 | openstackgerrit | Brin Zhang proposed openstack/python-novaclient stable/train: Update master for stable/train https://review.opendev.org/723290 | |
| 02:03:42 | openstackgerrit | Brin Zhang proposed openstack/nova stable/train: Update master for stable/train https://review.opendev.org/723295 | |
| 02:44:24 | openstackgerrit | xuyuanhao proposed openstack/nova master: failed to loads pyc file's classes https://review.opendev.org/723301 | |
| 03:40:47 | openstackgerrit | Arthur Dayne proposed openstack/os-resource-classes master: Add new resource class: PSSD, VSSD https://review.opendev.org/723303 | |
| 04:46:47 | openstackgerrit | Arthur Dayne proposed openstack/os-resource-classes master: Add new resource class: SSD https://review.opendev.org/723303 | |
| 05:20:48 | openstackgerrit | Kevin Zhao proposed openstack/nova master: [WIP] CI: add tempest-integrated-compute-aarch64 job https://review.opendev.org/714439 | |
| 05:53:51 | openstackgerrit | Arthur Dayne proposed openstack/os-resource-classes master: Add new resource class: SSD https://review.opendev.org/723303 | |
| 06:15:27 | bauzas | gibi: I'm taking an half-day PTO this morning, see you this afternoon | |
| 06:46:17 | openstackgerrit | Andrey Volkov proposed openstack/nova master: [WIP] Image auto signature https://review.opendev.org/723320 | |
| 07:05:34 | gibi | bauzas: good morning. ACK. | |
| 07:33:31 | zigo | With ussuri, I'm getting: | |
| 07:33:31 | zigo | root@C1-z-controller-1>_ ~ # openstack flavor create --format shell octavia_65 --private --id 65 --ram 2048 --disk 4 --vcpus 1 | |
| 07:33:32 | zigo | Policy doesn't allow os_compute_api:os-flavor-manage:create to be performed. (HTTP 403) (Request-ID: req-30fe38ae-deb9-451f-9234-58edd691696b) | |
| 07:33:56 | zigo | Is there something wrong with the scope enforcement? It's by default to False as it should be ... | |
| 07:36:16 | zigo | When I set rule:admin_api instead, then it works. So something's wrong in oslo.policy or what? | |
| 07:38:19 | gibi | zigo: there was a wide change in the policy handling in Ussuri but the new behavior should be off by default | |
| 07:38:44 | zigo | Which is what I'm saying, it shouldn't be enforced by default, but it looks like it is! | |
| 07:45:29 | gibi | zigo: did you use a admin token in the failed case? | |
| 07:45:48 | zigo | I'm doing this as an admin user indeed. | |
| 07:49:56 | gibi | I have default policy config and it works for me http://paste.openstack.org/show/792738/ | |
| 07:52:09 | zigo | gibi: You can try with the Debian packages, maybe ? :) | |
| 07:52:42 | zigo | For Buster: | |
| 07:52:42 | zigo | deb http://buster-ussuri.debian.net/debian buster-ussuri-backports main | |
| 07:52:42 | zigo | deb http://buster-ussuri.debian.net/debian buster-ussuri-backports-nochange main | |
| 07:52:53 | zigo | Or if you are more adventurous, just from Experimental! :P | |
| 07:56:46 | gibi | zigo: I have to jump on a call for a while, gmann, johnthetubaguy, stephenfin if you can help zigo in the meantime that would be appreciated | |
| 07:57:37 | gibi | zigo: I would check oslo.policy version as there was a late change there as well | |
| 07:57:57 | gibi | zigo: and you can try to rollback https://review.opendev.org/#/c/714822 maybe, but I'm not sure | |
| 07:58:18 | zigo | # dpkg-query -W python3-oslo.policy | |
| 07:58:18 | zigo | python3-oslo.policy 3.1.0-1~bpo10+1 | |
| 07:59:33 | zigo | So that's latest release ... | |
| 07:59:41 | gibi | yepp, that is the last one | |
| 08:09:10 | zigo | Reverting that patch doesn't fix the problem. | |
| 08:09:46 | gibi | zigo: ack, then I'm out of ideas at the moment | |
| 08:10:04 | gibi | and sitting on a call so will be slow responding | |
| 08:20:50 | zigo | I can switch the packaging from rule:system_admin_api to rule:admin_api in the default policy.conf, but obviously, something is wrong that needs to be fixed. | |
| 08:21:33 | zigo | Or is there a way to give the system_scope:all to my admin user? | |
| 08:24:37 | frickler | zigo: you can call for system scoped tokens in the openstack client command | |
| 08:25:03 | zigo | frickler: How? | |
| 08:27:44 | frickler | zigo: in devstack there is a "devstack-system-admin" section in /etc/openstack/config.yaml, let me try to do that manually | |
| 08:29:43 | frickler | openstack --os-auth-url https://192.168.42.13/identity --os-username admin --os-system-scope all --os-user-domain-name default token issue | |
| 08:41:50 | nightmare_unreal | hello what's greynade-py3 error for? my zuul build failed and it shows grenade-py3 FAILURE | |
| 08:47:41 | lyarwood | nightmare_unreal: link? | |
| 08:47:51 | lyarwood | I see https://review.opendev.org/#/c/548936/ landed, hopefully that didn't break the older jobs | |
| 08:48:04 | nightmare_unreal | lyarwood: https://review.opendev.org/#/c/715395/ | |
| 08:48:58 | openstackgerrit | Lee Yarwood proposed openstack/nova master: zuul: Switch to the Zuulv3 grenade job https://review.opendev.org/704364 | |
| 08:53:05 | lyarwood | nightmare_unreal: I'm not, appears a few other runs have hit that as well. It's unrelated to your change so for now feel free to recheck. The above ^ switch to a zuulv3 job might also correct it so feel free to rebase on to that change | |
| 08:53:10 | lyarwood | I'm not sure* | |
| 08:54:05 | nightmare_unreal | lyarwood: okay thanks :) so I can trigger the build again ? | |
| 08:54:19 | lyarwood | nightmare_unreal: yes | |
| 08:54:58 | nightmare_unreal | how can I trigger it ? | |
| 09:03:46 | lyarwood | nightmare_unreal: recheck | |
| 09:04:04 | nightmare_unreal | okay | |
| 09:04:15 | lyarwood | nightmare_unreal: ^ leave a comment with just that and zuul will rerun the jobs | |
| 09:04:30 | nightmare_unreal | thanks :) | |
| 09:04:31 | lyarwood | nightmare_unreal: you can watch them here https://zuul.opendev.org/t/openstack/status | |
| 09:04:43 | lyarwood | nightmare_unreal: just use the 715395 change id | |
| 09:49:31 | gibi | zigo: did you manage to solve the issue with frickler's help? | |
| 09:51:04 | zigo | gibi: No ... | |
| 09:51:20 | zigo | Scope should not be enforced, but it is. | |
| 09:51:31 | zigo | This breaks all sorts of things, including in my puppet stuff. | |
| 09:54:09 | zigo | Also: | |
| 09:54:09 | zigo | # openstack --os-system-scope all hypervisor list | |
| 09:54:09 | zigo | Policy doesn't allow os_compute_api:os-hypervisors:list-detail to be performed. (HTTP 403) (Request-ID: req-981105e1-a7aa-4fa2-9e52-ee7082ae7165) | |
| 09:54:33 | zigo | policy.conf has rule:system_reader_api | |
| 09:54:46 | zigo | If I switch that to rule:admin_api then it works... | |
| 09:55:21 | gibi | zigo: does it work with the default policy? (without having anything in the policy file) | |
| 09:55:48 | zigo | gibi: As in, "rm /etc/nova/policy.json" ? | |
| 09:56:24 | zigo | root@C1-z-controller-1>_ ~ # rm /etc/nova/policy.json | |
| 09:56:25 | zigo | root@C1-z-controller-1>_ ~ # openstack hypervisor list | |
| 09:56:25 | zigo | The server has either erred or is incapable of performing the requested operation. (HTTP 500) (Request-ID: req-ccfb9f31-7cd9-439c-ad02-ae76f7c8c0d5) | |
| 09:56:31 | zigo | Not great ... :( | |
| 10:03:45 | gibi | I don't have any policy.json for nova in devstack | |
| 10:04:35 | gibi | do you have a stacktrace for the above HTTP 500? | |
| 10:21:07 | gibi | lyarwood: thanks for the stable/stein release proposal, I'm +1, when you have time, could you hit https://review.opendev.org/#/q/topic:create-ussuri+(status:open+OR+status:merged)+project:openstack/nova ? | |
| 11:04:40 | frickler | zigo: your command confuses me, do you have other options set via environment? setting some project option will override system-scope without a warning. make sure that with "token issue" you see a system scoped token, not project or domain | |
| 11:04:53 | zigo | Yes I do ! :) | |
| 11:05:17 | zigo | Ok, will try. | |
| 11:05:51 | zigo | I've restarted a cluster deployment from scratch, to see if Ussuri can be setup fully automatically again with my system, so can't try right now... | |
| 11:06:00 | zigo | Later this afternoon. | |
| 11:25:16 | frickler | zigo: fyi, I don't get your error by default in devstack, but I do get it if I add "[oslo_policy] enforce_scope = True" into nova.conf. in that case, creating a flavor only works with system scope | |
| 11:46:06 | gibi | avolkov: hi! I asked for some clarification in https://bugs.launchpad.net/nova/+bug/1875287 | |
| 11:46:06 | openstack | Launchpad bug 1875287 in OpenStack Compute (nova) "VM unshelve failed if verify_glance_signatures enabled" [Undecided,Incomplete] - Assigned to Andrey Volkov (avolkov) | |