Earlier  
Posted Nick Remark
#openstack-nova - 2026-08-26
15:25:21 sean-k-mooney melwitt: yes exactly nova shoudl use its own token (with the service role) to do the privdage service ot service calls
15:25:26 elodilles Uggla: will there be an Upstream bug triage meeting today?
15:25:34 melwitt ok, yeah. I had to set that up with vtpm live migration "deployment" mode although we did not end up usingi t
15:25:51 Uggla elodilles yes
15:26:11 elodilles Uggla: sorry, forgot to scroll o:) just a heads up: i don't have any update, but i'll listen in o:)
15:26:28 Uggla elodilles no worries.
15:26:55 melwitt same, no update from me
15:31:31 stephenfin sean-k-mooney: I thought the point of the additional service token was for long-running operations? Isn't Nova's token (with or without the service role) subject to the same issue?
15:31:49 stephenfin Or do we assume a token is minted each time so that shouldn't ever happen?
15:33:21 opendevreview Leo Jenkins proposed openstack/nova-specs master: Support for Hostname-based Ceph Mon References https://review.opendev.org/c/openstack/nova-specs/+/1000098
15:33:34 sean-k-mooney stephenfin: it is but the service user tokens are never cached and reused we create them on every request (where we dont share the client instnatce)
15:34:17 sean-k-mooney stephenfin: basiclly if the dest compute needt to call cinder to compelte the volume attachment on a live migration
15:34:29 sean-k-mooney it will use the user token for that and generate a new service token at that point
15:34:55 sean-k-mooney so the user token coudl be long expired at that point but the service user token will be freshly issued for that request
15:35:41 sean-k-mooney so the primay usecase for the service_user token is lifetime exstension of the users token
15:37:42 sean-k-mooney stephenfin: since the service_user token is alwasy created form config we can alwasy mint a new one when required as well
15:42:24 stephenfin Okay so "Or do we assume a token is minted each time so that shouldn't ever happen?" is the case
15:42:31 stephenfin fair enough
16:05:59 opendevreview sean mooney proposed openstack/placement master: bump min version of os-traits https://review.opendev.org/c/openstack/placement/+/1002526
16:07:03 sean-k-mooney ^ that bumps to 3.9.0 with the NVME and TDX traits
16:07:29 sean-k-mooney previous min was 3.3.0
16:08:50 gibi we bumped on the nova side but not on the placemnet side
16:08:53 gibi thanks Se
16:08:55 gibi Sean
16:09:49 sean-k-mooney on the cybog side we will need 3.9.0 if i end up merging the nvme driver but currently testing it so it might slip but it wont need nova's min to change
16:10:19 sean-k-mooney we also need to supprot older placemeent anyway but its nice to have a standard set of traits for any given release
16:20:10 opendevreview Balazs Gibizer proposed openstack/nova master: Lock on DB url in functional test https://review.opendev.org/c/openstack/nova/+/1002529
16:20:53 gibi sean-k-mooney: melwitt: gmaan: here is a gate fix (and it parents) to look at ^^
16:21:43 gmaan gibi: nice, will check
16:21:44 melwitt sean-k-mooney: do we need to bump nova too for nvme traits? I guess you said no it would not?
16:22:06 sean-k-mooney melwitt: nova will never report them so not a depency for it
16:22:17 melwitt oh I see, cool
16:22:36 sean-k-mooney cyborg need it for the constant adn placmenet so we can say 2026.2 will alwasy have them
16:22:58 sean-k-mooney techinally the standard traits can be newer if placment has a newer os-tratis installed
16:23:25 melwitt gotcha
16:23:27 sean-k-mooney that why it was working in ci we alwasy use whatever is allwoed by UC
16:24:08 gibi I stopping for today. o/
16:24:21 sean-k-mooney o/
16:24:33 opendevreview Clif Houck proposed openstack/nova master: perf(ironic): eliminate O(N²) ProviderTree deepcopy at startup https://review.opendev.org/c/openstack/nova/+/980676
16:24:34 opendevreview Clif Houck proposed openstack/nova master: Parallelize per-node resource updates https://review.opendev.org/c/openstack/nova/+/980679
16:24:43 sean-k-mooney ill be swaping to watcher review sortly too and tomorrow ill be mainly focusing on watcher and cyborg
16:57:24 opendevreview Clif Houck proposed openstack/nova master: Parallelize per-node resource updates https://review.opendev.org/c/openstack/nova/+/980679
17:04:46 opendevreview Merged openstack/nova master: Switch Cyborg client from keystoneauth1 to openstacksdk https://review.opendev.org/c/openstack/nova/+/1002007
17:30:48 opendevreview Merged openstack/nova master: libvirt: Launch security Intel TDX https://review.opendev.org/c/openstack/nova/+/999249
17:31:02 opendevreview Merged openstack/nova master: doc: Add documentation for Intel TDX https://review.opendev.org/c/openstack/nova/+/1000081
17:48:51 opendevreview melanie witt proposed openstack/nova master: Remove workaround for ServiceAuthTokenWrapper get_endpoint_data() https://review.opendev.org/c/openstack/nova/+/1002540
17:52:10 opendevreview melanie witt proposed openstack/nova master: Remove workaround for ServiceAuthTokenWrapper get_endpoint_data() https://review.opendev.org/c/openstack/nova/+/1002540
17:52:42 melwitt stephenfin, sean-k-mooney: seems to work fine ^ tested on my devstack
18:42:06 opendevreview Ghanshyam Maan proposed openstack/nova master: Fix race between RPC method completion and task tracking updates https://review.opendev.org/c/openstack/nova/+/1002432
19:29:31 opendevreview Merged openstack/placement master: bump min version of os-traits https://review.opendev.org/c/openstack/placement/+/1002526
20:46:17 opendevreview melanie witt proposed openstack/nova master: tests: Functional reproducer for bug 2088831 https://review.opendev.org/c/openstack/nova/+/935565
20:46:18 opendevreview melanie witt proposed openstack/nova master: Include image in unified limits quota check https://review.opendev.org/c/openstack/nova/+/1002553
21:14:27 opendevreview Merged openstack/nova master: Stabilize TestSerialConsoleLiveMigrate https://review.opendev.org/c/openstack/nova/+/1002477
21:14:39 opendevreview Merged openstack/nova master: Stabilize live migration tests https://review.opendev.org/c/openstack/nova/+/1002493
21:14:54 opendevreview Merged openstack/nova master: Lock on DB url in functional test https://review.opendev.org/c/openstack/nova/+/1002529
22:38:29 opendevreview Goutham Pacha Ravi proposed openstack/nova master: Support cold migration with virtiofs shares https://review.opendev.org/c/openstack/nova/+/989633
22:38:30 opendevreview Goutham Pacha Ravi proposed openstack/nova master: Reconcile stale Manila share access rules https://review.opendev.org/c/openstack/nova/+/1001916
22:59:42 opendevreview Merged openstack/nova master: libvirt: reject_mem_enc_instances https://review.opendev.org/c/openstack/nova/+/1000082
#openstack-nova - 2026-08-27
00:41:56 opendevreview Ghanshyam Maan proposed openstack/nova master: Fix graceful shutdown functional unstable tests https://review.opendev.org/c/openstack/nova/+/1002223
01:07:09 opendevreview Takashi Kajinami proposed openstack/nova master: libvirt: Add functional tests for TDX capability report https://review.opendev.org/c/openstack/nova/+/998525
03:19:03 opendevreview Merged openstack/nova master: Stub kernel support check of AMD-SEV in tests https://review.opendev.org/c/openstack/nova/+/999780
05:41:15 opendevreview Merged openstack/nova master: libvirt: Check only x86_64 arch for Intel TDX https://review.opendev.org/c/openstack/nova/+/1000805
06:27:39 opendevreview Merged openstack/nova master: Remove unused default argument https://review.opendev.org/c/openstack/nova/+/922073
07:51:29 gibi antia: TDX landed. Thanks for the contribution!
08:16:21 gibi a bunch of stabilization bug fix landed. I now took https://bugs.launchpad.net/nova/+bug/2165150 as the next to work on
08:16:33 opendevreview Takashi Kajinami proposed openstack/nova master: libvirt: Add functional tests for TDX capability report https://review.opendev.org/c/openstack/nova/+/998525
08:30:47 antia gibi: Amazing! Thanks for all your effort on this
08:32:01 gibi now that both TDX and SNP is in the tree I will buy a slice of cake after lunch. It was a nice cooperation across timezones, companies, and even vendors. I would like to see more such feature development in the future in openstack
08:33:17 gibi thanks tkajinam antia sean-k-mooney gmaan bauzas and others in the background who are not on IRC to make it happen
09:48:38 opendevreview Takashi Kajinami proposed openstack/nova master: libvirt: Add functional tests for TDX capability report https://review.opendev.org/c/openstack/nova/+/998525
12:16:27 gmaan \o/
12:24:18 gibi I think I found a race that is not test only but a real race in the compute(s) https://bugs.launchpad.net/nova/+bug/2165318
12:35:46 opendevreview Ghanshyam Maan proposed openstack/nova master: Add event.set cleanup in test_graceful_shutdown https://review.opendev.org/c/openstack/nova/+/1002638
12:38:35 gmaan gibi: ^^ followup for self.addCleanup event.set
12:40:05 gibi thanks
13:25:33 opendevreview Lajos Katona proposed openstack/nova master: libvirt: Preserve queue_size during live migration https://review.opendev.org/c/openstack/nova/+/995841
13:52:26 opendevreview Merged openstack/nova master: Remove workaround for ServiceAuthTokenWrapper get_endpoint_data() https://review.opendev.org/c/openstack/nova/+/1002540
14:29:09 stephenfin melwitt: I'd appreciate your eyes on https://review.opendev.org/c/openstack/nova/+/1002359 while you still have ksa know-how fresh in your head 🙏
14:29:43 melwitt stephenfin: ah yes thanks for reminding. writing it down this time
14:49:37 opendevreview Stephen Finucane proposed openstack/nova master: conf: Deprecated http_retries options https://review.opendev.org/c/openstack/nova/+/1002657
14:49:38 opendevreview Stephen Finucane proposed openstack/nova master: WIP: network: Simplify client creation https://review.opendev.org/c/openstack/nova/+/1002658
15:10:20 melwitt gmaan: can I get a sanity check regarding a stable backport proposed? it would change a HTTP 403 to a HTTP 400. I believe this should be ok for stable bc it is remaining a 4xx status still, but wanted to check with you https://review.opendev.org/c/openstack/nova/+/996878
15:11:23 gmaan melwitt: sure, will check after internal meeting.
15:11:51 gmaan melwitt: thanks for review on gate fixes, this one also ready https://review.opendev.org/c/openstack/nova/+/1002223
15:12:06 melwitt cool thank you
15:12:31 gmaan melwitt: stephenfin and this one you had reviewed earlier, i need to rebase it due to code refactor on this https://review.opendev.org/c/openstack/nova/+/986477
15:12:36 melwitt gmaan: thanks for the fixes! I'm very happy for the improvements. thanks I will review that one too
15:12:42 gmaan thanks
15:21:29 melwitt gmaan: regarding this review comment https://review.opendev.org/c/openstack/nova/+/1002223/comment/9997bc1c_41882d81/ doesn't that mean that the _wait_for_service_parameter will not actually wait at all? if the service reports "up" before the first heartbeat, wouldn't this _wait_for_service_parameter just return immediately seeing "up" and not actually wait?
15:23:01 opendevreview Stephen Finucane proposed openstack/nova master: conf: Deprecate http_retries options https://review.opendev.org/c/openstack/nova/+/1002657
15:23:07 opendevreview Stephen Finucane proposed openstack/nova master: WIP: network: Simplify client creation https://review.opendev.org/c/openstack/nova/+/1002658
15:23:33 gmaan melwitt: yes, it will immediately return as service is up. one issue i found where it was waiting was when we restart the service. in restart test failed as service did not came as 'up' just after restart
15:24:07 gmaan but yes, after service start, it will be up till first heartbeat is there or service_down_time elapsed
15:25:27 melwitt thanks
15:25:51 melwitt I wondered if it could somehow be a problem for the tests if it doesn't actually wait but I guess not
15:30:03 stephenfin melwitt: I agree that it would be good to document this. As noted on the review, my understanding is that it's okay to change an error response status code but not to add a new code
15:30:26 stephenfin hopefully I have that right
15:31:05 melwitt I think you are right
15:32:16 melwitt I had been thinking of something else where I wonder if it's not cool to go across code "levels" in certain directions. like it's cool to go from 500 => 400 but not to go from 400 => 500
15:33:30 melwitt and going from a 4xx to a different 4xx stays within a level (in addition to being an error code that is already currently being returned)

Earlier   Later