Wednesday, 2025-04-23

opendevreviewOpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/openstack-ansible/+/94790102:39
opendevreviewMerged openstack/ansible-role-httpd master: Add ability to supply extra packages providing modules  https://review.opendev.org/c/openstack/ansible-role-httpd/+/94767203:21
noonedeadpunknarnuvi: hey, what's up?06:37
opendevreviewMerged openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/openstack-ansible/+/94790106:48
opendevreviewIvan Anfimov proposed openstack/openstack-ansible master: docs: minor fixes with RabbitMQ and HAProxy  https://review.opendev.org/c/openstack/openstack-ansible/+/94756907:43
derekokeeffe85Morning all. Good news, I finally got neutron fixed and have a working cluster. noonedeadpunk suggested adding a small bit of config and I removed the neutron container. Re ran the playbooks and all worked :) I do have some questions though, when trying to attach a sec group to an instance I get 'Port' object has no attribute 'security_groups'. Any ideas please10:13
noonedeadpunkderekokeeffe85: is that via horizon?10:32
noonedeadpunkas there were quite some bugs in it recently10:32
derekokeeffe85Yep noonedeadpunk. Did it via cli and got an error as well. Will re do now and send the error10:35
derekokeeffe85https://paste.openstack.org/show/bqHRhbR26rgAczPRBQFL/ noonedeadpunk he's the output10:39
derekokeeffe85*here's10:39
noonedeadpunkhm, it's weird indeed11:01
noonedeadpunkhave you tried to attach it to the port directly?11:01
noonedeadpunkAs attaching to the server is kind of a weird workaround tbh11:02
noonedeadpunkas it will just apply to all ports11:02
derekokeeffe85Oh no I haven't. We've been running openstack for years and none of our users do that :) I'll try it now11:21
noonedeadpunkas I can imagine that some api changes in neutron could lead to mess in client as well...11:30
noonedeadpunkbut dunno - I close to never use security group to server assignment11:30
noonedeadpunkas you do a normal neutron operation through nova API this way11:30
derekokeeffe85No worries, I can se the sec group on the port now so all good that way 11:31
noonedeadpunkhorizon was atched already btw11:32
noonedeadpunkso matter of correct version more or less11:32
derekokeeffe85Ok thanks11:33
derekokeeffe85Last thing I need to call this done from my side!! I created a vlan on the switch that the cluster is on. vlan51, it's routable and the gateway is up and pingable. I created a network in Openstack, segmentation id 51, gave it the subnet (/28) and set the gateway to the switch gateway. I have bond0.51 created as well and br-vlan, set it as physnet1 which is in my openvswitch & ml2 configs "plugins/ml2/openvswitch_ag11:33
derekokeeffe85ent.ini:bridge_mappings = physnet1:br-vlan" & "plugins/ml2/ml2_conf.ini:network_vlan_ranges = physnet1:51:51" anyting glarlingly obvious?11:33
derekokeeffe85Sorry I should say anll the VMs on the network can ping each other I just can't ping the gateway or ping in to the VMs11:34
noonedeadpunkum, yes, smth is off, imo.11:34
noonedeadpunkbut not really sure what exactly :D11:35
noonedeadpunkI'm specifically concerned about bond0.51 and that you named it as br-vlan11:35
noonedeadpunkas that is gonna be a flat network them11:35
noonedeadpunkbut also - you should not have had created br-vlan11:36
noonedeadpunkso it;s all really confusing11:36
derekokeeffe85Hmmmok I did that wrong too so. How did I ever get the other ones configured :( I need to run now but I'll come back to you on this if that's ok. I have a busy rest of the week so I'll pop back when I can. Thanks as always11:47
derekokeeffe85Had a few spare min to test something noonedeadpunk, delted the network, recreated it as flat (only need one network on this) it works as expected. Thanks for allyour help :)12:52
spatelmnasiadka https://review.opendev.org/c/openstack/kolla-ansible/+/94790012:58
spatelwhat else I need to do to get it out? 12:58
spatelDid i miss anything ?12:58
spatelThere are other roles also having issue and I am going to submit patch 12:59
NeilHanlonspatel: wrong channel ;) 13:15
spatellol13:40
drarveseHello! I'm trying to setup a new 2024.2 deployment with OVN and I'm wrapping my head around everything. I've done a number of deployments with LXB but this is my first attempt using OVN.18:25
drarveseEverything installs successfully, but all ports that I create show up as down, and instance creation eventually fails when trying to allocate the network.18:26
drarveseI can see the port getting created, added to the bridge, and bound to the compute node with the OVN show commands, but instance creation eventually times out. I suspect the interface/bridge mappings aren't correct, but I'm not sure what they should be.18:26
drarveseThe bridge mappings from ovn-sbctl are "flat:eth12,provider:br-vlan"18:26
drarveseI'm really confused about the host_bind_override and network_interface options. The docs seem to be really inconsistent. The reference architecture docs say that host_bind_override is for LXB and network_interface is for OVS/OVN deployments, but the test & production examples use host_bind_override.18:26
drarveseI'm following the OSA Neutron + OVN example -- what would the global_overrides -> provider_networks look like in that example?18:26
drarveseHere are some pastes:18:26
drarveseRelevant parts of regopenstack_user_config.yml: https://paste.openstack.org/show/bgSKeVLzL1yVXtW7GuBq/18:26
drarveseuser_variables.yml: https://paste.openstack.org/show/b4KRlxxhaHJVn2KKQsON/18:26
drarvesenetplan interfaces: https://paste.openstack.org/show/bkoW19TL9r6Jog0Cy52u/18:26
mgariepydrarvese, the host_bind override is to specify the host interface name19:10
mgariepyfor example i do have a bride for something on my controller to host the services in lxc.19:11
mgariepycontainer_bride will create the container interface in that bride, container_interface is to have the same intercace for the same netowrk on all the containers.19:12
mgariepyand host_bind_override is to specify the netowrk interface , with ovn you don't really need bridges on the hosts as it's ovn that to them,19:12

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!