| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2026-08-26 | |||
| 15:14:09 | gibi | and add some +w if needed | |
| 15:14:15 | gmaan | ok | |
| 15:14:43 | gmaan | thanks for review on the bug fixes, let me check your comment today and fix but I see things are merging at least | |
| 15:15:06 | gibi | yeah we merged some TDX patches | |
| 15:15:27 | gmaan | yeah i saw those very first thing in morning :) | |
| 15:15:45 | sean-k-mooney | about half | |
| 15:15:57 | sean-k-mooney | i saw gibi already rechecked the failures | |
| 15:16:02 | gibi | yep | |
| 15:16:07 | gibi | I'm keeping an eye of that series | |
| 15:16:22 | gibi | a/of/on/ | |
| 15:16:25 | gmaan | yeah, will continue in my TZ | |
| 15:17:07 | sean-k-mooney | i assume we will apply our normal rules, if its +2w'd before FF we can recheck without a FFE until monday if requried | |
| 15:17:18 | sean-k-mooney | then talk about it in the meeting | |
| 15:18:04 | melwitt | that is my understanding | |
| 15:18:23 | sean-k-mooney | as an aside obviously wont be around friday but ill be off on monday as well | |
| 15:18:38 | melwitt | same for me | |
| 15:18:44 | gibi | I can do some recheck on Friday too | |
| 15:20:50 | Uggla | Upstream bug triage in ~10mn (I not prepared) | |
| 15:20:53 | stephenfin | sean-k-mooney: melwitt: Is there any time we *shouldn't* be sending service tokens when talking to other services? | |
| 15:21:09 | stephenfin | I assume not, but just checking in case I've missed something | |
| 15:21:30 | sean-k-mooney | stephenfin: my understanding is only if its not configured in the config or explcitly disabled in teh config | |
| 15:21:53 | sean-k-mooney | stephenfin: but nova requries them to be able to talks to cidner and manage attachment | |
| 15:21:57 | sean-k-mooney | and to cybrog | |
| 15:22:12 | sean-k-mooney | so i think we shoudl expect that its more or less alwasy configured | |
| 15:22:45 | melwitt | yeah I remember we had to require it for cinder, for deleting attachments | |
| 15:22:46 | gmaan | stephenfin: sean-k-mooney we should always, i know we had a temporary config option not to send it but that was added only for transition purpose and suppose to be removed (which did not happen) | |
| 15:22:53 | Uggla | link: meet.google.com/zjr-rxus-hzj (triage) | |
| 15:23:11 | gmaan | Uggla: in horizon meeting, might be little late | |
| 15:23:17 | sean-k-mooney | melwitt: ya so eventully we shoudl not require the service token to talk to cinder and cybrog | |
| 15:23:25 | Uggla | gmaan nw | |
| 15:23:29 | sean-k-mooney | but that requries chagne to nova and cinder | |
| 15:23:53 | sean-k-mooney | we abused the service token for security to close cves | |
| 15:24:27 | melwitt | what's the alternative? nova service user only or? | |
| 15:24:35 | sean-k-mooney | but nova shoudl eventually all nova iwth its own token with the service role instead and use the 2.1 microversion instead of 2.0 to bind/unbind ARQs | |
| 15:25:21 | sean-k-mooney | melwitt: yes exactly nova shoudl use its own token (with the service role) to do the privdage service ot service calls | |
| 15:25:26 | elodilles | Uggla: will there be an Upstream bug triage meeting today? | |
| 15:25:34 | melwitt | ok, yeah. I had to set that up with vtpm live migration "deployment" mode although we did not end up usingi t | |
| 15:25:51 | Uggla | elodilles yes | |
| 15:26:11 | elodilles | Uggla: sorry, forgot to scroll o:) just a heads up: i don't have any update, but i'll listen in o:) | |
| 15:26:28 | Uggla | elodilles no worries. | |
| 15:26:55 | melwitt | same, no update from me | |
| 15:31:31 | stephenfin | sean-k-mooney: I thought the point of the additional service token was for long-running operations? Isn't Nova's token (with or without the service role) subject to the same issue? | |
| 15:31:49 | stephenfin | Or do we assume a token is minted each time so that shouldn't ever happen? | |
| 15:33:21 | opendevreview | Leo Jenkins proposed openstack/nova-specs master: Support for Hostname-based Ceph Mon References https://review.opendev.org/c/openstack/nova-specs/+/1000098 | |
| 15:33:34 | sean-k-mooney | stephenfin: it is but the service user tokens are never cached and reused we create them on every request (where we dont share the client instnatce) | |
| 15:34:17 | sean-k-mooney | stephenfin: basiclly if the dest compute needt to call cinder to compelte the volume attachment on a live migration | |
| 15:34:29 | sean-k-mooney | it will use the user token for that and generate a new service token at that point | |
| 15:34:55 | sean-k-mooney | so the user token coudl be long expired at that point but the service user token will be freshly issued for that request | |
| 15:35:41 | sean-k-mooney | so the primay usecase for the service_user token is lifetime exstension of the users token | |
| 15:37:42 | sean-k-mooney | stephenfin: since the service_user token is alwasy created form config we can alwasy mint a new one when required as well | |
| 15:42:24 | stephenfin | Okay so "Or do we assume a token is minted each time so that shouldn't ever happen?" is the case | |
| 15:42:31 | stephenfin | fair enough | |
| 16:05:59 | opendevreview | sean mooney proposed openstack/placement master: bump min version of os-traits https://review.opendev.org/c/openstack/placement/+/1002526 | |
| 16:07:03 | sean-k-mooney | ^ that bumps to 3.9.0 with the NVME and TDX traits | |
| 16:07:29 | sean-k-mooney | previous min was 3.3.0 | |
| 16:08:50 | gibi | we bumped on the nova side but not on the placemnet side | |
| 16:08:53 | gibi | thanks Se | |
| 16:08:55 | gibi | Sean | |
| 16:09:49 | sean-k-mooney | on the cybog side we will need 3.9.0 if i end up merging the nvme driver but currently testing it so it might slip but it wont need nova's min to change | |
| 16:10:19 | sean-k-mooney | we also need to supprot older placemeent anyway but its nice to have a standard set of traits for any given release | |
| 16:20:10 | opendevreview | Balazs Gibizer proposed openstack/nova master: Lock on DB url in functional test https://review.opendev.org/c/openstack/nova/+/1002529 | |
| 16:20:53 | gibi | sean-k-mooney: melwitt: gmaan: here is a gate fix (and it parents) to look at ^^ | |
| 16:21:43 | gmaan | gibi: nice, will check | |
| 16:21:44 | melwitt | sean-k-mooney: do we need to bump nova too for nvme traits? I guess you said no it would not? | |
| 16:22:06 | sean-k-mooney | melwitt: nova will never report them so not a depency for it | |
| 16:22:17 | melwitt | oh I see, cool | |
| 16:22:36 | sean-k-mooney | cyborg need it for the constant adn placmenet so we can say 2026.2 will alwasy have them | |
| 16:22:58 | sean-k-mooney | techinally the standard traits can be newer if placment has a newer os-tratis installed | |
| 16:23:25 | melwitt | gotcha | |
| 16:23:27 | sean-k-mooney | that why it was working in ci we alwasy use whatever is allwoed by UC | |
| 16:24:08 | gibi | I stopping for today. o/ | |
| 16:24:21 | sean-k-mooney | o/ | |
| 16:24:33 | opendevreview | Clif Houck proposed openstack/nova master: perf(ironic): eliminate O(N²) ProviderTree deepcopy at startup https://review.opendev.org/c/openstack/nova/+/980676 | |
| 16:24:34 | opendevreview | Clif Houck proposed openstack/nova master: Parallelize per-node resource updates https://review.opendev.org/c/openstack/nova/+/980679 | |
| 16:24:43 | sean-k-mooney | ill be swaping to watcher review sortly too and tomorrow ill be mainly focusing on watcher and cyborg | |
| 16:57:24 | opendevreview | Clif Houck proposed openstack/nova master: Parallelize per-node resource updates https://review.opendev.org/c/openstack/nova/+/980679 | |
| 17:04:46 | opendevreview | Merged openstack/nova master: Switch Cyborg client from keystoneauth1 to openstacksdk https://review.opendev.org/c/openstack/nova/+/1002007 | |
| 17:30:48 | opendevreview | Merged openstack/nova master: libvirt: Launch security Intel TDX https://review.opendev.org/c/openstack/nova/+/999249 | |
| 17:31:02 | opendevreview | Merged openstack/nova master: doc: Add documentation for Intel TDX https://review.opendev.org/c/openstack/nova/+/1000081 | |
| 17:48:51 | opendevreview | melanie witt proposed openstack/nova master: Remove workaround for ServiceAuthTokenWrapper get_endpoint_data() https://review.opendev.org/c/openstack/nova/+/1002540 | |
| 17:52:10 | opendevreview | melanie witt proposed openstack/nova master: Remove workaround for ServiceAuthTokenWrapper get_endpoint_data() https://review.opendev.org/c/openstack/nova/+/1002540 | |
| 17:52:42 | melwitt | stephenfin, sean-k-mooney: seems to work fine ^ tested on my devstack | |
| 18:42:06 | opendevreview | Ghanshyam Maan proposed openstack/nova master: Fix race between RPC method completion and task tracking updates https://review.opendev.org/c/openstack/nova/+/1002432 | |
| 19:29:31 | opendevreview | Merged openstack/placement master: bump min version of os-traits https://review.opendev.org/c/openstack/placement/+/1002526 | |
| 20:46:17 | opendevreview | melanie witt proposed openstack/nova master: tests: Functional reproducer for bug 2088831 https://review.opendev.org/c/openstack/nova/+/935565 | |
| 20:46:18 | opendevreview | melanie witt proposed openstack/nova master: Include image in unified limits quota check https://review.opendev.org/c/openstack/nova/+/1002553 | |
| 21:14:27 | opendevreview | Merged openstack/nova master: Stabilize TestSerialConsoleLiveMigrate https://review.opendev.org/c/openstack/nova/+/1002477 | |
| 21:14:39 | opendevreview | Merged openstack/nova master: Stabilize live migration tests https://review.opendev.org/c/openstack/nova/+/1002493 | |
| 21:14:54 | opendevreview | Merged openstack/nova master: Lock on DB url in functional test https://review.opendev.org/c/openstack/nova/+/1002529 | |
| 22:38:29 | opendevreview | Goutham Pacha Ravi proposed openstack/nova master: Support cold migration with virtiofs shares https://review.opendev.org/c/openstack/nova/+/989633 | |
| 22:38:30 | opendevreview | Goutham Pacha Ravi proposed openstack/nova master: Reconcile stale Manila share access rules https://review.opendev.org/c/openstack/nova/+/1001916 | |
| 22:59:42 | opendevreview | Merged openstack/nova master: libvirt: reject_mem_enc_instances https://review.opendev.org/c/openstack/nova/+/1000082 | |
| #openstack-nova - 2026-08-27 | |||
| 00:41:56 | opendevreview | Ghanshyam Maan proposed openstack/nova master: Fix graceful shutdown functional unstable tests https://review.opendev.org/c/openstack/nova/+/1002223 | |
| 01:07:09 | opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Add functional tests for TDX capability report https://review.opendev.org/c/openstack/nova/+/998525 | |
| 03:19:03 | opendevreview | Merged openstack/nova master: Stub kernel support check of AMD-SEV in tests https://review.opendev.org/c/openstack/nova/+/999780 | |
| 05:41:15 | opendevreview | Merged openstack/nova master: libvirt: Check only x86_64 arch for Intel TDX https://review.opendev.org/c/openstack/nova/+/1000805 | |
| 06:27:39 | opendevreview | Merged openstack/nova master: Remove unused default argument https://review.opendev.org/c/openstack/nova/+/922073 | |
| 07:51:29 | gibi | antia: TDX landed. Thanks for the contribution! | |
| 08:16:21 | gibi | a bunch of stabilization bug fix landed. I now took https://bugs.launchpad.net/nova/+bug/2165150 as the next to work on | |
| 08:16:33 | opendevreview | Takashi Kajinami proposed openstack/nova master: libvirt: Add functional tests for TDX capability report https://review.opendev.org/c/openstack/nova/+/998525 | |