| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2025-09-02 | |||
| 16:37:43 | Uggla | gibi, the mic is your if you'd like to share someting. | |
| 16:37:44 | gibi | so n-sch, n-api, n-metadata is done and tested in nova-next. | |
| 16:38:08 | gibi | the n-conductor patch missed the FF due to a late futurist bug that is since fixed but we will only try n-cond in G | |
| 16:38:49 | gibi | the py312-threading job is the last piece for F making it voting is on the gate as we speak. This runs the majority of our unit test without eventlet | |
| 16:39:09 | gibi | plans for G is in the PTG etherpad | |
| 16:39:22 | gibi | expect a tight schedule :) | |
| 16:39:53 | Uggla | 👍 | |
| 16:39:56 | gibi | that is it | |
| 16:39:59 | gibi | back to you Uggla | |
| 16:40:58 | Uggla | thx gibi, it's great you manage to do that. I think it will give confidence for the next steps. | |
| 16:40:59 | JayF | gibi: I'll note that futurist bug was fixed and released and added to requirements :) | |
| 16:41:09 | gibi | JayF: correct | |
| 16:41:15 | JayF | May not change your internal status for conductor, but wanted to make sure folks knew | |
| 16:41:41 | gibi | thanks JayF | |
| 16:42:10 | sean-k-mooney | o/ sorry was in an internal meeting | |
| 16:42:32 | Uggla | #topic Open discussion | |
| 16:42:59 | Uggla | Sean would like to discuss about https://bugs.launchpad.net/nova/+bug/2060916 | |
| 16:43:07 | Uggla | So please go ahead. | |
| 16:43:17 | sean-k-mooney | this is short | |
| 16:43:36 | sean-k-mooney | basically the truest_vif feature for years required custom policy ot use | |
| 16:43:55 | sean-k-mooney | in 2025.1 neutron finally fixed that with a proper api exentions | |
| 16:44:08 | sean-k-mooney | nova now jsut need to use it | |
| 16:44:14 | sean-k-mooney | my question is | |
| 16:44:29 | sean-k-mooney | shoudl we treat this as a security hardening opertuity/bug | |
| 16:44:36 | sean-k-mooney | or a specless blueprint | |
| 16:44:53 | sean-k-mooney | i.e. would we consier backporting it or master only | |
| 16:45:30 | sean-k-mooney | we could also defer that to the ptg but to me this is either whishlest rfe bug | |
| 16:45:44 | sean-k-mooney | or a very small specles blueprint but i dont know what people would prefer | |
| 16:46:56 | gibi | I cannot really tell without checking how this will look like | |
| 16:47:10 | gmaan | in that case, should not neutron policy for "binding:profile" needs to be change the default to admin-or-service? | |
| 16:47:15 | gibi | I guess we need to depend on the new neutron API | |
| 16:47:30 | gmaan | that is what they have for many other APIs | |
| 16:47:31 | bauzas | that's a new extension ? | |
| 16:47:34 | sean-k-mooney | gmaan: its curent admin only and it shoudl eventually be service only yes | |
| 16:47:44 | bauzas | if so, I'm afraid of any backport | |
| 16:47:54 | gmaan | sean-k-mooney: service only or admin-or-service? | |
| 16:47:57 | sean-k-mooney | what i can do is make time to do a poc | |
| 16:48:04 | sean-k-mooney | gmaan: it shoudl be service only eventually | |
| 16:48:10 | sean-k-mooney | humans shoudl never modify its content | |
| 16:48:27 | sean-k-mooney | only nova ironic or zun shoudl ever modify binding:profile | |
| 16:48:56 | sean-k-mooney | and hta twas the sechruity issue. you had to relax access to people to modify its content to use trusted_vif | |
| 16:49:30 | gmaan | i see | |
| 16:49:49 | Uggla | I have the feeling that a specless BP looks more adequate. | |
| 16:49:52 | sean-k-mooney | what i can do is see if i can find time to do a poc before the ptg or a future irc meeting | |
| 16:50:01 | sean-k-mooney | and we can revisit then | |
| 16:50:33 | sean-k-mooney | note we treated a similer issue for hardware offloaded ovs as a securyt hardining bug | |
| 16:50:37 | sean-k-mooney | that why i asked | |
| 16:50:46 | gmaan | neutron API extension is done this cycle? | |
| 16:51:20 | sean-k-mooney | https://bugs.launchpad.net/nova/+bug/2020813 | |
| 16:51:32 | sean-k-mooney | gmaan: it was done in 2025.1 i belive so epoxy | |
| 16:52:35 | gmaan | yeah, since 2025.1 https://github.com/openstack/neutron-lib/blob/stable/2025.1/neutron_lib/api/definitions/port_trusted_vif.py | |
| 16:52:50 | sean-k-mooney | https://review.opendev.org/c/openstack/neutron/+/926068 | |
| 16:53:07 | sean-k-mooney | the neutron change is older? not sure but i see 2024.2 | |
| 16:54:06 | sean-k-mooney | anyway i just wanted to get an initial read form folks | |
| 16:54:13 | sean-k-mooney | to me it was the same as https://bugs.launchpad.net/nova/+bug/2020813 | |
| 16:54:38 | gmaan | I think till we have neutron API available, we can backport it but not beyond that | |
| 16:55:11 | sean-k-mooney | we can also defer the backporting question until we see what the patch looks like | |
| 16:55:27 | gmaan | ++ | |
| 16:55:33 | sean-k-mooney | it shoudl be small and non invaisves in general but i have not witten it yet | |
| 16:57:11 | Uggla | ok, bauzas, you would like to discuss something. I hope it will be ok in the remaing time. | |
| 16:57:22 | bauzas | just a quick one | |
| 16:57:30 | bauzas | but let's discuss this in the next meeting | |
| 16:57:56 | bauzas | (about the pavilion on the openinfra summit, whether we would want to be there) | |
| 16:59:39 | sean-k-mooney | waht is that? | |
| 17:00:03 | sean-k-mooney | do you mean the fourm sessions that used to be part fo sumit? | |
| 17:00:10 | bauzas | https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/thread/MM4OJO5CCC4GHMYUN3OJBDHTSZNB32H2/ | |
| 17:00:17 | bauzas | but let's discuss this next ween | |
| 17:00:23 | bauzas | I have another TC meeting now | |
| 17:00:52 | sean-k-mooney | oh its effectivly lightnight talks or showcases | |
| 17:01:03 | sean-k-mooney | for project to have tiem in a shared presenting space | |
| 17:01:17 | sean-k-mooney | sure we can think on that and revisit next week | |
| 17:01:41 | sean-k-mooney | `The deadline to sign up is 26 September!` ok so we also have time | |
| 17:01:47 | sean-k-mooney | to respond to this ask | |
| 17:01:54 | Uggla | yep. | |
| 17:03:37 | Uggla | We’ve reached the top of the hour, so thanks to everyone attending this meeting. | |
| 17:03:46 | gibi | thanks Uggla | |
| 17:04:00 | Uggla | #endmeeting | |
| 17:04:00 | opendevmeet | Meeting ended Tue Sep 2 17:04:00 2025 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | |
| 17:04:00 | opendevmeet | Minutes: https://meetings.opendev.org/meetings/nova/2025/nova.2025-09-02-16.00.html | |
| 17:04:00 | opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/nova/2025/nova.2025-09-02-16.00.txt | |
| 17:04:00 | opendevmeet | Log: https://meetings.opendev.org/meetings/nova/2025/nova.2025-09-02-16.00.log.html | |
| 17:04:08 | elodilles | thanks o/ | |
| 20:20:12 | opendevreview | Merged openstack/nova master: Add service version for Falmingo https://review.opendev.org/c/openstack/nova/+/959184 | |
| 20:20:47 | opendevreview | Merged openstack/nova master: Fix pci_tracker.save to delete all removed devs https://review.opendev.org/c/openstack/nova/+/953972 | |
| 22:12:55 | gmaan | Uggla: commented in this, I am ok to fix this as bug and no need to bump microversion. I think you are planning to backport also https://review.opendev.org/c/openstack/nova/+/952895 | |
| 22:13:13 | gmaan | some suggestion to fix comment and explain detail in commit msg otherwise fix lgtm | |
| #openstack-nova - 2025-09-03 | |||
| 08:05:37 | opendevreview | ribaudr proposed openstack/nova master: Reproducer for bug 2114951 https://review.opendev.org/c/openstack/nova/+/952894 | |
| 08:05:38 | opendevreview | ribaudr proposed openstack/nova master: Fix bug 2114951 https://review.opendev.org/c/openstack/nova/+/952895 | |
| 08:25:03 | opendevreview | ribaudr proposed openstack/nova master: Add Flamingo prelude section https://review.opendev.org/c/openstack/nova/+/959188 | |
| 10:00:15 | opendevreview | Tobias Urdin proposed openstack/nova master: Prevent leaking host info when HostMappingNotFound https://review.opendev.org/c/openstack/nova/+/959296 | |
| 10:23:46 | opendevreview | ribaudr proposed openstack/nova master: Add Flamingo prelude section https://review.opendev.org/c/openstack/nova/+/959188 | |
| 10:24:07 | opendevreview | Merged openstack/nova master: Fix duplicate words https://review.opendev.org/c/openstack/nova/+/959136 | |
| 10:24:39 | nate | Hi ! I have a question regarding compute nodes and cinder volume encryption. We use a ceph backend with RBD with LUKS encrypted volume with encryption keys stored in barbican. At volume creation, the key belong to the end-user creating the volume. But our compute node, who has a dedicated compute-nodeX openstack user, can access this key. How does this magic happen in term of | |
| 10:24:41 | nate | rights, since our compute nodes do not have any admin role ? | |
| 10:31:32 | nate | Our compute nodes have the service role on the service project, as well as a custom admin-compute role that only has two extra policies in neutron | |
| 10:40:41 | opendevreview | Merged openstack/nova master: [CI]Make nova-tox-py312-threading voting https://review.opendev.org/c/openstack/nova/+/955791 | |
| 11:41:11 | gibi | Uggla: re ceph volume creation gate issue. I filed https://bugs.launchpad.net/cinder/+bug/2121941 | |
| 11:41:41 | gibi | it happens about 30% of the time | |
| 11:48:32 | gibi | Uggla: as the patch making the py312-threading job voting landed I marked https://blueprints.launchpad.net/nova/+spec/eventlet-removal-part-1 as implemented and opened https://blueprints.launchpad.net/nova/+spec/eventlet-removal-gazpacho as the continuation | |
| 12:03:23 | sean-k-mooney | nate: the comput and admin cannot access the key, we store it in libvirt using the enduser access when the vm is creatd | |