| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2023-05-09 | |||
| 19:53:54 | bauzas | missed that the first test failing is actually a teardownclass | |
| 19:53:59 | bauzas | yeah that | |
| 19:54:17 | dansmith | yeah | |
| 19:54:57 | bauzas | roger and do we have the cirros bug report ? | |
| 19:56:06 | bauzas | nvm, found it https://bugs.launchpad.net/nova/+bug/1939108 | |
| 19:58:26 | dansmith | actually I have a newer one | |
| 19:58:48 | dansmith | although my kernel crash looks different than the one you have here | |
| 19:59:12 | dansmith | yours looks like that one in the above bug indeed | |
| 19:59:25 | bauzas | yup | |
| 19:59:26 | dansmith | mine is quite different, but we see it a fair bit too | |
| 19:59:45 | dansmith | https://bugs.launchpad.net/nova/+bug/2018612\ | |
| 19:59:47 | dansmith | https://bugs.launchpad.net/nova/+bug/2018612 | |
| 20:00:19 | bauzas | I see | |
| 20:00:23 | bauzas | different problem indeed | |
| 20:00:30 | bauzas | kernel taintaing | |
| 20:00:35 | bauzas | tainting* | |
| 20:00:38 | dansmith | yours looks like crash on startup, mine is on attach, I think | |
| 20:00:42 | bauzas | yes | |
| 20:00:47 | bauzas | the acpi boot fails | |
| 20:01:12 | bauzas | we also have a problem with udhcpd leases, related to cirros too | |
| 20:01:30 | dansmith | yeaj | |
| 20:41:58 | opendevreview | sean mooney proposed openstack/os-vif master: remove focal based jobs https://review.opendev.org/c/openstack/os-vif/+/882755 | |
| 23:54:06 | opendevreview | Merged openstack/nova master: Revert "Debug Nova APIs call failures" https://review.opendev.org/c/openstack/nova/+/882052 | |
| 23:54:22 | dansmith | last time's a charm ^ | |
| 23:56:03 | melwitt | lol finally | |
| #openstack-nova - 2023-05-10 | |||
| 05:54:27 | opendevreview | Amit Uniyal proposed openstack/nova master: Allow swap resize from non-zero to zero https://review.opendev.org/c/openstack/nova/+/857339 | |
| 07:38:50 | opendevreview | Amit Uniyal proposed openstack/nova master: WIP: Reproducer for dangling volumes https://review.opendev.org/c/openstack/nova/+/881457 | |
| 07:38:50 | opendevreview | Amit Uniyal proposed openstack/nova master: WIP: Delete dangling bdms https://review.opendev.org/c/openstack/nova/+/882284 | |
| 08:54:39 | opendevreview | Sahid Orentino Ferdjaoui proposed openstack/nova master: [wip]network: convert usage of neutronclient to openstacksdk https://review.opendev.org/c/openstack/nova/+/882714 | |
| 11:10:58 | opendevreview | Sahid Orentino Ferdjaoui proposed openstack/nova master: [wip]network: convert usage of neutronclient to openstacksdk https://review.opendev.org/c/openstack/nova/+/882714 | |
| 13:20:19 | sean-k-mooney | sahid: when you have time can you take a look at https://review.opendev.org/c/openstack/os-vif/+/881751 and https://review.opendev.org/c/openstack/os-vif/+/882755 | |
| 14:19:05 | sahid | sean-k-mooney: sure, sorry I just have noticed your message | |
| 14:23:21 | sean-k-mooney | sahid: no rush | |
| 14:40:26 | opendevreview | Dan Smith proposed openstack/nova master: Use force=True for os-brick disconnect during delete https://review.opendev.org/c/openstack/nova/+/882847 | |
| 14:53:25 | opendevreview | melanie witt proposed openstack/nova master: Enable use of service user token with admin context https://review.opendev.org/c/openstack/nova/+/882852 | |
| 14:57:43 | opendevreview | melanie witt proposed openstack/nova stable/2023.1: Use force=True for os-brick disconnect during delete https://review.opendev.org/c/openstack/nova/+/882858 | |
| 14:57:44 | opendevreview | melanie witt proposed openstack/nova stable/2023.1: Enable use of service user token with admin context https://review.opendev.org/c/openstack/nova/+/882859 | |
| 14:59:46 | opendevreview | melanie witt proposed openstack/nova stable/zed: Use force=True for os-brick disconnect during delete https://review.opendev.org/c/openstack/nova/+/882860 | |
| 14:59:47 | opendevreview | melanie witt proposed openstack/nova stable/zed: Enable use of service user token with admin context https://review.opendev.org/c/openstack/nova/+/882861 | |
| 15:00:51 | opendevreview | melanie witt proposed openstack/nova stable/yoga: Use force=True for os-brick disconnect during delete https://review.opendev.org/c/openstack/nova/+/882863 | |
| 15:00:52 | opendevreview | melanie witt proposed openstack/nova stable/yoga: Enable use of service user token with admin context https://review.opendev.org/c/openstack/nova/+/882864 | |
| 15:03:26 | opendevreview | melanie witt proposed openstack/nova stable/xena: Use force=True for os-brick disconnect during delete https://review.opendev.org/c/openstack/nova/+/882867 | |
| 15:03:27 | opendevreview | melanie witt proposed openstack/nova stable/xena: Enable use of service user token with admin context https://review.opendev.org/c/openstack/nova/+/882868 | |
| 15:05:58 | opendevreview | melanie witt proposed openstack/nova stable/wallaby: Use force=True for os-brick disconnect during delete https://review.opendev.org/c/openstack/nova/+/882869 | |
| 15:05:59 | opendevreview | melanie witt proposed openstack/nova stable/wallaby: Enable use of service user token with admin context https://review.opendev.org/c/openstack/nova/+/882870 | |
| 17:01:57 | dansmith | need another quick +W on this to avoid a regression introduced in the CVE fix: https://review.opendev.org/c/openstack/nova/+/882852/1 | |
| 17:01:59 | dansmith | sean-k-mooney: ^ | |
| 17:02:07 | dansmith | gmann: ^ | |
| 17:05:18 | gmann | dansmith: sure, checking | |
| 17:23:21 | gmann | dansmith: so this is not that CVE fix regression but before also this exist right? I mean admin token was not made as service token ? | |
| 17:23:34 | gmann | or cinder had put the check about service token instead of just admin | |
| 17:24:10 | dansmith | gmann: we didn't need service token for these admins contexts before.. there was literally no reason, | |
| 17:24:16 | dansmith | so it's not a regression without the CVE fix (from cinder) | |
| 17:24:34 | dansmith | however now we *do* need service users for things other than long-running user activities | |
| 17:24:35 | gmann | I see, so now cinder API check service token or not. | |
| 17:24:38 | dansmith | right | |
| 17:24:43 | gmann | got it | |
| 17:26:14 | gmann | +W | |
| 17:26:46 | dansmith | gmann: thanks :) | |
| 17:29:34 | sean-k-mooney | dansmith: sorry distracted but i was starting to review those now too | |
| 17:29:52 | dansmith | ack, I think we're good now | |
| 17:30:20 | dansmith | sailed through zuul first time.. probably because some awesome guy did a bunch of volume test hardening the last few weeks :P | |
| 17:30:32 | dansmith | or luck. yeah, it's probably luck :) | |
| 17:30:44 | sean-k-mooney | :) | |
| 17:31:04 | sean-k-mooney | there is a serprising amouth of doc updates in the previos patch | |
| 17:31:05 | gmann | I am sure its a special treatment given for volume test fixes :) | |
| 17:31:29 | dansmith | sean-k-mooney: yeah it's a pretty big change required for deployers | |
| 17:31:40 | sean-k-mooney | not that im complaing really but i was expecing ti to be more targeted | |
| 17:31:51 | sean-k-mooney | ack i have not read it all yet but that was just my intial reaction | |
| 17:31:57 | dansmith | no real option to be targeted unfortunately | |
| 17:32:12 | dansmith | a bunch of smart people spent the last 90 days trying to figure out a better way to do it | |
| 17:33:33 | sean-k-mooney | ok so the service user is now required | |
| 17:33:54 | sean-k-mooney | ok | |
| 17:34:45 | dansmith | the ossa went to the ML with more summary which might be good reading | |
| 17:35:01 | sean-k-mooney | ill read that after | |
| 17:35:12 | sean-k-mooney | we debated making the service user required in the past | |
| 17:35:26 | sean-k-mooney | not that it is we can use that for other usecases going forward | |
| 17:35:32 | dansmith | yup | |
| 17:35:42 | sean-k-mooney | like the manila stuff | |
| 17:35:57 | dansmith | yup, it was hard not to mention this during that discussion :) | |
| 17:36:11 | dansmith | seems like we could extend that to neutron and avoid nova having to be admin too | |
| 17:36:12 | sean-k-mooney | or any other interaction with other service where we need service to service interaction | |
| 17:36:18 | dansmith | yup | |
| 17:36:25 | sean-k-mooney | yep | |
| 17:36:43 | sean-k-mooney | we could simply nova config ot just need service user and no other sections for other services | |
| 17:36:50 | sean-k-mooney | at least by defualt | |
| 17:36:53 | dansmith | it's unfortunate to have to force that on a bunch of old deployments without a grace period, but.. not much choice | |
| 17:37:23 | sean-k-mooney | for what its worth i think many installer tools started using the service user a few years ago by default | |
| 17:37:37 | dansmith | yeah tripleo did | |
| 17:37:41 | sean-k-mooney | i think downstream its on by default in 17/train | |
| 17:37:50 | dansmith | and 16 | |
| 17:37:57 | dansmith | but it's not just the service user that is required, but also the role on that user | |
| 17:38:05 | sean-k-mooney | sorry 16/train ya | |
| 17:38:24 | sean-k-mooney | OSA and kolla have supprot but i dont know if its on by default | |
| 17:38:46 | dansmith | s'gonna be soon :) | |
| 17:39:54 | sean-k-mooney | unfortunetly it looks like no but looking at there config | |
| 17:40:11 | melwitt | oh huh, is stable/wallaby ci known to not work? | |
| 17:40:30 | sean-k-mooney | when the service user is not configred it may have been possibel to fallback to the info form the keystone authtoken section | |
| 17:40:52 | gmann | melwitt: what is failing, it should be green | |
| 17:40:54 | sean-k-mooney | melwitt: no but devstack might not have service users configred htere | |