Re: [Openstack] [nova-network] add-network-to-project

[Ajiva Fan]

Thanks vish

I think it is better not to modify the wsgi file which is depended by
others, it will not be safe for other extensions

My opinion is that only modify the networks extension, for example, add
project-id along with network-id in body, so the NetworkController.add()
use the project-id from body instead from context. (This solution is
mentioned in my mail on Mar 8.)

There is a danger that if a admin:user-project pass the authentication and
since he is a admin role, then he can associate any network to any project,
or i may have some misunderstand of the authentication. If only admin:admin
has a valid authorize on the networks extension, then this is safe.( ps, i
think the option you mentiond to check context.is_admin will have the same
problem if admin:user-project's context will set is_admin to True)


best wish.

ps:
Detail why add project-id in body is not safe is listed bellow:
Here is my knowledge from following the extension's authentication:

in the networks.py
there is a function pointer:
authorize = extensions.extension_authorizer('compute', 'networks')

and in the class NetworkController.add() function, it invokes

authorize(context)

in nova.api.openstack.extension.extension_authorize(), it says: (in essex
it is the same)

def extension_authorizer(api_name, extension_name):
def authorize(context, target=None):
if target is None:
target = {'project_id': context.project_id,
  'user_id': context.user_id}
action = '%s_extension:%s' % (api_name, extension_name)
nova.policy.enforce(context, action, target)
return authorize

in the /etc/nova/policy.json, the networks extension's rule is:
"admin_api": [["is_admin:True"]],
"compute_extension:networks": [["rule:admin_api"]],

the nova.openstack.common.policy will _check_rule(), _check_role() and
_check_generic(), and for the _check_generic, it will check
context["is_admin"] == True.

nova.api.auth.NovaKeystoneContext will instance nova.context.RequestContext
with a self.is_admin = nova.policy.check_is_admin(self.roles), while the
check_is_admin only invoke nova.openstack.common.policy.enforce() to check
if it has a role named "admin", so if
keystone.middleware.auth_token.pyfill the header with a "admin" in
"X-Roles", this will be authorized. Which
i think admin:user-porject will be valid.



On Thu, Mar 28, 2013 at 11:12 PM, Vishvananda Ishaya
wrote:

> I just looked at the code and it appears this is not possible through the
> os_networks extension. This appears to be an oversight. It should probably
> allow a project to be passed in.
>
> Bug report here: https://bugs.launchpad.net/nova/+bug/1161441
>
> That said, the first time a user boots an instance, he automatically gets
> assigned a network, so in many cases it isn't needed.
>
> Another option would be to modify the code you mentioned to allow a
> workaround:
>
> if (context and not context.is_admin and project_id and (project_id !=
> context.project_id)):
>
> Vish
>
> On Mar 28, 2013, at 1:46 AM, Ajiva Fan  wrote:
>
> hello everyone:
>
> i have a very simple question which confuses me for a long time:
> how should i add a network to a project via rest api?
>
> 1) i'm admin of the whole cloud env essex, (i think the folsom is same in
> this case)
> 2) using nova-network:vlan (if using flatdhcp, the associate action is
> meanless)
> 3) a user project "user-project" is created, and the admin:admin is not
> that project's admin (and even not a member of it)
> 4) a network "user-network" is created, but not associated with
> "user-project"
> 5) how to associate the "user-network" with "user-project" ?
>
> i know i can use "nova-manage" via nova-client in the control node,
> but what i need to know is how to do this operation via rest api, like
> curl or in horizon?
>
> the rest api is: http://api.openstack.org/api-ref.html
> POST
> v2/{tenant_id}/os-networks/add
> with a body identifier the network's id
>
> the problem is that, even i have admin:admin token, i *cannot* associate
> the "user-network" with "user-project",
> because from the source code of folsom(and essex) nova, in the
> nova.api.openstack.wsgi.py of line 931, i find this:
>
> project_id = action_args.pop("project_id", None)
> context = request.environ.get('nova.context')
> if (context and project_id and (project_id != context.project_id
> )):
> msg = _("Malformed request url")
> return Fault(webob.exc.HTTPBadRequest(explanation=msg))
>
> since nova.context.project_id is the project admin_id, and the project_id
> is extract from the url,
> so the webob.exc is returned.
>
> please help me, i read a lot, (both document and source code, i just
> cannot understand or just miss something important)
> but still don't know how to do it.
>
> ps: i have sent a mail to openstack-dev on mar 8, but no one reply me. is
> my question nonsense?
> Note this mail is not the exactly same as previous one since i've more
> knowledge of 

Re: [Openstack] [nova-network] add-network-to-project

[Ajiva Fan]

thanks

by compare the doc and the source code, i know the api reference is point
to the current stable, which means folsom.
there is no mistiness for me.
but if there is http://api.openstack.org/essex/api-ref.html,
http://api.openstack.org/folsom/api-ref.html,
http://api.openstack.org/grizzly/api-ref.html and etc, it will be excellent.

i just read the source code of folsom nova, learn from them and make this
extension available in Essex,
so i can use networks extension to create and associate(with a little
difference)
thanks to the contributors

On Thu, Mar 28, 2013 at 9:18 PM, Anne Gentle
wrote:

> In Essex this API extension was unavailable. I apologize that the docs
> site does not currently clarify that. We are working on a solution. In
> Essex you must use the nova-manage commands to manage networks.
>
> Anne Gentle
> Content Stacker
> a...@openstack.org
>
>
> On Mar 28, 2013, at 3:46 AM, Ajiva Fan  wrote:
>
> hello everyone:
>
> i have a very simple question which confuses me for a long time:
> how should i add a network to a project via rest api?
>
> 1) i'm admin of the whole cloud env essex, (i think the folsom is same in
> this case)
> 2) using nova-network:vlan (if using flatdhcp, the associate action is
> meanless)
> 3) a user project "user-project" is created, and the admin:admin is not
> that project's admin (and even not a member of it)
> 4) a network "user-network" is created, but not associated with
> "user-project"
> 5) how to associate the "user-network" with "user-project" ?
>
> i know i can use "nova-manage" via nova-client in the control node,
> but what i need to know is how to do this operation via rest api, like
> curl or in horizon?
>
> the rest api is: http://api.openstack.org/api-ref.html
> POST
> v2/{tenant_id}/os-networks/add
> with a body identifier the network's id
>
> the problem is that, even i have admin:admin token, i *cannot* associate
> the "user-network" with "user-project",
> because from the source code of folsom(and essex) nova, in the
> nova.api.openstack.wsgi.py of line 931, i find this:
>
> project_id = action_args.pop("project_id", None)
> context = request.environ.get('nova.context')
> if (context and project_id and (project_id != context.project_id
> )):
> msg = _("Malformed request url")
> return Fault(webob.exc.HTTPBadRequest(explanation=msg))
>
> since nova.context.project_id is the project admin_id, and the project_id
> is extract from the url,
> so the webob.exc is returned.
>
> please help me, i read a lot, (both document and source code, i just
> cannot understand or just miss something important)
> but still don't know how to do it.
>
> ps: i have sent a mail to openstack-dev on mar 8, but no one reply me. is
> my question nonsense?
> Note this mail is not the exactly same as previous one since i've more
> knowledge of it but the main problem is same
>
> ___
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
>
>
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] private cloud

[Kuo Hugo]

Help Ralph to push to mailing list
Ralph lewis
20:35 (14 小�r前)

*the openstack project i'm trying to do is a school noted project.

I have to make a cloud computing solution using openstack in which for
example, any teacher could run a windows or linux machine with all
ressources allocated. and other extra optional services for student or i
don't know.*

*KAN MELEDJE RALPH LEWIS *
--**-
Master RT Université de Savoie
Elève-ingénieur Réseau & Télécom ESTEM-Casablanca


2013/3/29 Mark Lehrer 

>
>  Could i Have a complete configuration for openstack running in local?
>> (private cloud)
>>
>
>
> http://lmgtfy.com/?q=**openstack+easy+install
>
> I used the Hastexo guide and it was pretty easy.
>
> Mark
>
>
> __**_
> Mailing list: 
> https://launchpad.net/~**openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : 
> https://launchpad.net/~**openstack
> More help   : 
> https://help.launchpad.net/**ListHelp
>



-- 
+Hugo Kuo+
h...@swiftstack.com
tonyt...@gmail.com
+886 935004793
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] [openstack-community] Recruiting - Translation Coordinator

[Hằng Trần]

Dear Daisy,

 

Please register for Vietnam to join the translation team. The info of the 
coordinator is: Hang Tran – hang.t...@dtt.vn - +84 902 127 811. She is also the 
coordinator of Vietnam OpenStack Community. Please let me know if further info 
required. We hope to join your team soon. 

 

Thank you and regards,

Hang

 

 

From: Ying Chun Guo [mailto:guoyi...@cn.ibm.com] 
Sent: Thursday, March 28, 2013 3:22 PM
To: commun...@lists.openstack.org; openstack@lists.launchpad.net
Subject: Re: [openstack-community] Recruiting - Translation Coordinator

 

Hi,

Now we have gotten volunteers for French, Brazilian Portuguese,  Hindi (India), 
and Spanish.

we need more volunteers for Japanese, Spanish, Czech, Vietnamese (Viet Nam), 
Hungarian, Russian, 
Italian, Korean (Korea), Turkish (Turkey), and Catalan.

Please send me mail if you have interests. Thanks.


Ying Chun Guo/China/IBM wrote on 2013/03/26 17:36:07:

> Ying Chun Guo/China/IBM 
> 2013/03/26 17:36
> 
> To
> 
> openstack@lists.launchpad.net, commun...@lists.openstack.org, 
> 
> cc
> 
> Subject
> 
> Recruiting - Translation Coordinator
> 
> Hi, all
> 
> Now the translation of OpenStack message strings and documents is 
> managed by Transifex. The access control in Transifex is set as 
> "Free for all". Anybody can jump in and contribute to the 
> translation. It's easily to attract translators but it's not good 
> for the quality. In order to ensure the quality of translation, 
> there is a plan to enable the role based access control of OpenStack
> project in Transifex. 
> 
> This change will need to set up the translation team for each 
> language, including translators, reviewers and coordinators. The 
> coordinators are the leaders of a translation team. They are 
> responsible for the set up of translation team and the control of 
> quality. Now I send this mail to community and call for coordinators. 
> 
> Responsibilities of coordinators include:
> 1. communicate with translators/reviewers in your team, coordinate 
> the translation and review work among the translators and reviewers 
> in your team.
> 2. control the quality of translation. Review each auto-generated 
> translation patch in Git review tool.
> 3. manage the translation memory and glossary for a certain language.
> 4. communicate with community about requirements, bugs, and issues 
> of translation.

> People, who want to be a coordinator, don't need to worry about:
> 1. the size of the translation team. The translation team can grow 
> from small. If there is only 1 people who is contributing to the 
> translation of a certain language, that people could be the coordinator.
> 2. the usage of tools (Transifex, Git review, and etc.). We have 
> many people who can help you get familiar with the tools.
> 3. translation experiences and coordinator experiences. The 
> community have people with rich experiences who can give you guidance.
> 
> If you have passions and time, if you want to contribute to 
> OpenStack translation, feel free to contact with me.
> 
> Thanks and regards
> Daisy

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] New site for questions http://ask.openstack.org

[billy am]

Hmms .. I realised I been asking too much about the community and
organisation structure and regulations rather than openstack itself. Maybe
because my previous experience with other similar community structure.
Anyway , perhaps I should do more of recruiting people to SG group.

Stefano , pls ignore my previous question. I don't think it matters as of
now. Thanks.

On Fri, Mar 29, 2013 at 9:01 AM, billy am  wrote:

> Great! Hope it will work out. Pls let us know if there are any other ways
> we could help.
>
> On the APAC group , It seems strange no?. Are Malaysia/Indonesia/Singapore
> teams under APAC group too? What about ASEAN group? India?
>
>
> On Thu, Mar 28, 2013 at 11:58 PM, Stefano Maffulli 
> wrote:
>
>> On Wed 27 Mar 2013 11:25:56 PM PDT, billy am wrote:
>>
>>> A natural place to ask would be Chinese and Japanese Teams. Hmms ...
>>> are loco team leaders added to this list by default? Or requested to
>>> join? Perhaps , nominated team members from each team can also be
>>> moderators so that everyone is kept informed of the ongoing community
>>> development process.
>>>
>>
>> There is an APAC/APEC group (see the wiki UserGroups page for details),
>> I've asked there.
>> thanks,
>> stef
>>
>
>
>
> --
> --
>  |
>
> Team Ubuntu Singapore
>
> Wiki: https://wiki.ubuntu.com/SingaporeTeam
> IRC: #ubuntu-sg on irc.freenode.net
> Forum : Singapore Team - Ubuntu 
> Forums
> Mailing List: ubuntu...@lists.ubuntu.com
> Website: http://ubuntu.sg/
> Facebook: http://www.facebook.com/groups/ubuntu.sg
>
> VSP 5 , MCSA (Security) , MCSA , CCNA , LPIC - Lvl 1 , Security+ ,
>  Network+ , A+
>



-- 
--
|

Team Ubuntu Singapore

Wiki: https://wiki.ubuntu.com/SingaporeTeam
IRC: #ubuntu-sg on irc.freenode.net
Forum : Singapore Team - Ubuntu
Forums
Mailing List: ubuntu...@lists.ubuntu.com
Website: http://ubuntu.sg/
Facebook: http://www.facebook.com/groups/ubuntu.sg

VSP 5 , MCSA (Security) , MCSA , CCNA , LPIC - Lvl 1 , Security+ ,
 Network+ , A+
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] New site for questions http://ask.openstack.org

[billy am]

Great! Hope it will work out. Pls let us know if there are any other ways
we could help.

On the APAC group , It seems strange no?. Are Malaysia/Indonesia/Singapore
teams under APAC group too? What about ASEAN group? India?

On Thu, Mar 28, 2013 at 11:58 PM, Stefano Maffulli wrote:

> On Wed 27 Mar 2013 11:25:56 PM PDT, billy am wrote:
>
>> A natural place to ask would be Chinese and Japanese Teams. Hmms ...
>> are loco team leaders added to this list by default? Or requested to
>> join? Perhaps , nominated team members from each team can also be
>> moderators so that everyone is kept informed of the ongoing community
>> development process.
>>
>
> There is an APAC/APEC group (see the wiki UserGroups page for details),
> I've asked there.
> thanks,
> stef
>



-- 
--
|

Team Ubuntu Singapore

Wiki: https://wiki.ubuntu.com/SingaporeTeam
IRC: #ubuntu-sg on irc.freenode.net
Forum : Singapore Team - Ubuntu
Forums
Mailing List: ubuntu...@lists.ubuntu.com
Website: http://ubuntu.sg/
Facebook: http://www.facebook.com/groups/ubuntu.sg

VSP 5 , MCSA (Security) , MCSA , CCNA , LPIC - Lvl 1 , Security+ ,
 Network+ , A+
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Keystone Grizzly RC2 available

[Dolph Mathews]

It wasn't proposed for backporting nor did jenkins link the bug to the
review:

Review: https://review.openstack.org/#/c/24965/

Bug: https://bugs.launchpad.net/keystone/+bug/1159987

Commit:
https://github.com/openstack/keystone/commit/2f0c46179ea2eb7872167941412bdbd5abca08f0

I tagged the bug as grizzly-backport-potential as it's certainly low impact
and desirable.


-Dolph


On Thu, Mar 28, 2013 at 2:40 PM, Brad Topol  wrote:

> Andy,
>
> Was there a blueprint for this function?  Can I get the review ID?   I am
> very interested in the notion of  custom token creation.
>
> Thanks,
>
> Brad
>
> Brad Topol, Ph.D.
> IBM Distinguished Engineer
> OpenStack
> (919) 543-0646
> Internet:  bto...@us.ibm.com
> Assistant: Cindy Willman (919) 268-5296
>
>
>
> From:Andy Smith 
> To:Thierry Carrez 
> Cc:"openstack@lists.launchpad.net" 
> Date:03/28/2013 03:27 PM
> Subject:Re: [Openstack] Keystone Grizzly RC2 available
> Sent by:openstack-bounces+btopol=us.ibm@lists.launchpad.net
> --
>
>
>
> The change I made to build tokens from existing data (rather than
> re-querying it all from the db) didn't go in?
>
> Without it extensions are not able to build custom tokens (meaning just
> about any extension that wants to do something with auth is not possible).
>
>
> On Thu, Mar 28, 2013 at 2:34 AM, Thierry Carrez 
> <*thie...@openstack.org*>
> wrote:
> Hello everyone,
>
> Due to the renaming of the trust extension and a response backward
> compatibility issue, we created a new Grizzly release candidate for
> OpenStack identity ("Keystone").
>
> You can find the RC2 tarball and the list of fixed bugs at:*
> **https://launchpad.net/keystone/grizzly/grizzly-rc2*
>
> This is hopefully the last Grizzly release candidate for Keystone.
> Unless new release-critical regressions are found that warrant another
> release candidate respin, this RC2 will be formally included in the
> common OpenStack 2013.1 final release next week. You are therefore
> strongly encouraged to test and validate this tarball.
>
> Alternatively, you can grab the code at:*
> **https://github.com/openstack/keystone/tree/milestone-proposed*
>
> If you find a regression that could be considered release-critical,
> please file it at 
> *https://bugs.launchpad.net/keystone/+filebug*and
>  tag
> it *grizzly-rc-potential* to bring it to the release crew's attention.
>
> Happy regression hunting,
>
> --
> Thierry Carrez (ttx)
> Release Manager, OpenStack
>
> ___
> Mailing list: 
> *https://launchpad.net/~openstack*
> Post to : *openstack@lists.launchpad.net*
> Unsubscribe : 
> *https://launchpad.net/~openstack*
> More help   : 
> *https://help.launchpad.net/ListHelp*
> ___
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
>
>
> ___
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
>
>
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Keystone Grizzly RC2 available

[Brad Topol]

Andy,

Was there a blueprint for this function?  Can I get the review ID?   I am 
very interested in the notion of  custom token creation.

Thanks,

Brad

Brad Topol, Ph.D.
IBM Distinguished Engineer
OpenStack
(919) 543-0646
Internet:  bto...@us.ibm.com
Assistant: Cindy Willman (919) 268-5296



From:   Andy Smith 
To: Thierry Carrez 
Cc: "openstack@lists.launchpad.net" 
Date:   03/28/2013 03:27 PM
Subject:Re: [Openstack] Keystone Grizzly RC2 available
Sent by:openstack-bounces+btopol=us.ibm@lists.launchpad.net



The change I made to build tokens from existing data (rather than 
re-querying it all from the db) didn't go in?

Without it extensions are not able to build custom tokens (meaning just 
about any extension that wants to do something with auth is not possible).


On Thu, Mar 28, 2013 at 2:34 AM, Thierry Carrez  
wrote:
Hello everyone,

Due to the renaming of the trust extension and a response backward
compatibility issue, we created a new Grizzly release candidate for
OpenStack identity ("Keystone").

You can find the RC2 tarball and the list of fixed bugs at:
https://launchpad.net/keystone/grizzly/grizzly-rc2

This is hopefully the last Grizzly release candidate for Keystone.
Unless new release-critical regressions are found that warrant another
release candidate respin, this RC2 will be formally included in the
common OpenStack 2013.1 final release next week. You are therefore
strongly encouraged to test and validate this tarball.

Alternatively, you can grab the code at:
https://github.com/openstack/keystone/tree/milestone-proposed

If you find a regression that could be considered release-critical,
please file it at https://bugs.launchpad.net/keystone/+filebug and tag
it *grizzly-rc-potential* to bring it to the release crew's attention.

Happy regression hunting,

--
Thierry Carrez (ttx)
Release Manager, OpenStack

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Keystone Grizzly RC2 available

[Andy Smith]

The change I made to build tokens from existing data (rather than
re-querying it all from the db) didn't go in?

Without it extensions are not able to build custom tokens (meaning just
about any extension that wants to do something with auth is not possible).


On Thu, Mar 28, 2013 at 2:34 AM, Thierry Carrez wrote:

> Hello everyone,
>
> Due to the renaming of the trust extension and a response backward
> compatibility issue, we created a new Grizzly release candidate for
> OpenStack identity ("Keystone").
>
> You can find the RC2 tarball and the list of fixed bugs at:
> https://launchpad.net/keystone/grizzly/grizzly-rc2
>
> This is hopefully the last Grizzly release candidate for Keystone.
> Unless new release-critical regressions are found that warrant another
> release candidate respin, this RC2 will be formally included in the
> common OpenStack 2013.1 final release next week. You are therefore
> strongly encouraged to test and validate this tarball.
>
> Alternatively, you can grab the code at:
> https://github.com/openstack/keystone/tree/milestone-proposed
>
> If you find a regression that could be considered release-critical,
> please file it at https://bugs.launchpad.net/keystone/+filebug and tag
> it *grizzly-rc-potential* to bring it to the release crew's attention.
>
> Happy regression hunting,
>
> --
> Thierry Carrez (ttx)
> Release Manager, OpenStack
>
> ___
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
>
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] OpenStack Configuration / Operation Maximums

[Ramon Acedo]

Hi everyone,

I'd be interested in gathering information about configuration and
operation maximums/limits for OpenStack in terms of computational
maximums, storage maximums and network maximums. We have many
subcomponents so it may be a difficult exercise. Maybe some of you are
familiar with the RHEL[1] and VMware[2] maximums, I'd like to work on
something similar for OpenStack.

Any thoughts or feedback is much appreciated.

Ramon

[1] 
http://www.redhat.com/resourcelibrary/articles/virtualization-limits-rhel-hypervisors
[2] http://www.vmware.com/pdf/vsphere5/r50/vsphere-50-configuration-maximums.pdf

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] [Savanna] Weekly meeting (#openstack-meeting-alt)

[Sergey Lukjanov]

Hi,

Today there will be our third weekly community meeting about Savanna at 18:00 
UTC on irc channel #openstack-meeting-alt at freenode.

Come along.

Sergey Lukjanov
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] private cloud

[Mark Lehrer]

Could i Have a complete configuration for openstack running in local? (private 
cloud)



http://lmgtfy.com/?q=openstack+easy+install

I used the Hastexo guide and it was pretty easy.

Mark

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] New site for questions http://ask.openstack.org

[Stefano Maffulli]

On Wed 27 Mar 2013 11:25:56 PM PDT, billy am wrote:

A natural place to ask would be Chinese and Japanese Teams. Hmms ...
are loco team leaders added to this list by default? Or requested to
join? Perhaps , nominated team members from each team can also be
moderators so that everyone is kept informed of the ongoing community
development process.


There is an APAC/APEC group (see the wiki UserGroups page for details), 
I've asked there.

thanks,
stef

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] [nova-network] add-network-to-project

[Vishvananda Ishaya]

I just looked at the code and it appears this is not possible through the 
os_networks extension. This appears to be an oversight. It should probably 
allow a project to be passed in.

Bug report here: https://bugs.launchpad.net/nova/+bug/1161441

That said, the first time a user boots an instance, he automatically gets 
assigned a network, so in many cases it isn't needed.

Another option would be to modify the code you mentioned to allow a workaround:

if (context and not context.is_admin and project_id and (project_id != 
context.project_id)):

Vish

On Mar 28, 2013, at 1:46 AM, Ajiva Fan  wrote:

> hello everyone:
> 
> i have a very simple question which confuses me for a long time:
> how should i add a network to a project via rest api?
> 
> 1) i'm admin of the whole cloud env essex, (i think the folsom is same in 
> this case)
> 2) using nova-network:vlan (if using flatdhcp, the associate action is 
> meanless)
> 3) a user project "user-project" is created, and the admin:admin is not that 
> project's admin (and even not a member of it)
> 4) a network "user-network" is created, but not associated with "user-project"
> 5) how to associate the "user-network" with "user-project" ?
> 
> i know i can use "nova-manage" via nova-client in the control node, 
> but what i need to know is how to do this operation via rest api, like curl 
> or in horizon?
> 
> the rest api is: http://api.openstack.org/api-ref.html
> POST
> v2/{tenant_id}/os-networks/add 
> with a body identifier the network's id
> 
> the problem is that, even i have admin:admin token, i *cannot* associate the 
> "user-network" with "user-project", 
> because from the source code of folsom(and essex) nova, in the 
> nova.api.openstack.wsgi.py of line 931, i find this:
> 
> project_id = action_args.pop("project_id", None)
> context = request.environ.get('nova.context')
> if (context and project_id and (project_id != context.project_id)):
> msg = _("Malformed request url")
> return Fault(webob.exc.HTTPBadRequest(explanation=msg))
> 
> since nova.context.project_id is the project admin_id, and the project_id is 
> extract from the url, 
> so the webob.exc is returned.
> 
> please help me, i read a lot, (both document and source code, i just cannot 
> understand or just miss something important)
> but still don't know how to do it.
> 
> ps: i have sent a mail to openstack-dev on mar 8, but no one reply me. is my 
> question nonsense?
> Note this mail is not the exactly same as previous one since i've more 
> knowledge of it but the main problem is same
> ___
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] How to get around bug 1135948

[Mohammed Amine SAYA]

Hi All,

I am trying to find out how to get around this bug :
https://bugs.launchpad.net/quantum/+bug/1135948  in FOLSOM release.

I saw in the bug's history that it was fixed and released on 2013-03-13,
which means that it's has been included in grizzly-rc1 but unfortunately
grizzly-rc1 packages are not available yet for DEBIAN.

Do you know to get around this bug in FOLSOM or 2013.1~g3-1 packages?

It's the last obstacle, I hope, which prevents me from pinging a VM.

Thanks for your time and help.
Amine.
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] [openstack-community] Recruiting - Translation Coordinator

[Laura Alves]

On Thu, Mar 28, 2013 at 5:21 AM, Ying Chun Guo  wrote:

>  Hi,
>
> Now we have gotten volunteers for French, Brazilian Portuguese,  Hindi
> (India), and Spanish.
>
> we need more volunteers for Japanese, Spanish, Czech, Vietnamese (Viet
> Nam), Hungarian, Russian,
> Italian, Korean (Korea), Turkish (Turkey), and Catalan.
>
> Please send me mail if you have interests. Thanks.
>
>
> Ying Chun Guo/China/IBM wrote on 2013/03/26 17:36:07:
>
> > Ying Chun Guo/China/IBM
> > 2013/03/26 17:36
> >
> > To
> >
> > openstack@lists.launchpad.net, commun...@lists.openstack.org,
> >
> > cc
> >
> > Subject
> >
> > Recruiting - Translation Coordinator
>
> >
> > Hi, all
> >
> > Now the translation of OpenStack message strings and documents is
> > managed by Transifex. The access control in Transifex is set as
> > "Free for all". Anybody can jump in and contribute to the
> > translation. It's easily to attract translators but it's not good
> > for the quality. In order to ensure the quality of translation,
> > there is a plan to enable the role based access control of OpenStack
> > project in Transifex.
> >
> > This change will need to set up the translation team for each
> > language, including translators, reviewers and coordinators. The
> > coordinators are the leaders of a translation team. They are
> > responsible for the set up of translation team and the control of
> > quality. Now I send this mail to community and call for coordinators.
> >
> > Responsibilities of coordinators include:
> > 1. communicate with translators/reviewers in your team, coordinate
> > the translation and review work among the translators and reviewers
> > in your team.
> > 2. control the quality of translation. Review each auto-generated
> > translation patch in Git review tool.
> > 3. manage the translation memory and glossary for a certain language.
> > 4. communicate with community about requirements, bugs, and issues
> > of translation.
>
> > People, who want to be a coordinator, don't need to worry about:
> > 1. the size of the translation team. The translation team can grow
> > from small. If there is only 1 people who is contributing to the
> > translation of a certain language, that people could be the coordinator.
> > 2. the usage of tools (Transifex, Git review, and etc.). We have
> > many people who can help you get familiar with the tools.
> > 3. translation experiences and coordinator experiences. The
> > community have people with rich experiences who can give you guidance.
> >
> > If you have passions and time, if you want to contribute to
> > OpenStack translation, feel free to contact with me.
> >
> > Thanks and regards
> > Daisy
>
>
> ___
> Community mailing list
> commun...@lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/community
>
>
Hi All!

Many of you are know it already, but I just wanted to spread the word in
these lists about the #openstack-translation IRC channel.  Everyone's
invited to lurk around!

There is little activity so far, and we know time zone differences may
prevent interaction among contributors in different locations, but the idea
is also to have real-time communication channel for local or regional
volunteer translators' groups.

All translation and localization (or localisation) -related topics are
welcome.  So feel free to join and spread the word!

See you there!
Thanks!

ladquin
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] Keystone Grizzly RC2 available

[Thierry Carrez]

Hello everyone,

Due to the renaming of the trust extension and a response backward
compatibility issue, we created a new Grizzly release candidate for
OpenStack identity ("Keystone").

You can find the RC2 tarball and the list of fixed bugs at:
https://launchpad.net/keystone/grizzly/grizzly-rc2

This is hopefully the last Grizzly release candidate for Keystone.
Unless new release-critical regressions are found that warrant another
release candidate respin, this RC2 will be formally included in the
common OpenStack 2013.1 final release next week. You are therefore
strongly encouraged to test and validate this tarball.

Alternatively, you can grab the code at:
https://github.com/openstack/keystone/tree/milestone-proposed

If you find a regression that could be considered release-critical,
please file it at https://bugs.launchpad.net/keystone/+filebug and tag
it *grizzly-rc-potential* to bring it to the release crew's attention.

Happy regression hunting,

-- 
Thierry Carrez (ttx)
Release Manager, OpenStack

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] private cloud

[Razique Mahroua]

+1more infos needed :)
Razique Mahroua - Nuage & Corazique.mahr...@gmail.comTel : +33 9 72 37 94 15

Le 28 mars 2013 à 03:52, Kuo Hugo  a écrit :Hi Ralph Lewis , The configuration could be variety . Would you mind which project of OpenStack do you want to try it out ?
1. For a quick and global view , you can try to use http://devstack.org/  . It's not for production though. But you can run it in a VM for testing.   
2. Depends on different openstack project  , there're plenty of configurations . Which project do you want Nova / Glance / Keystone /Swift / Quantum / Cinder ?
Let me know that if I can do anything for you. CheersHugo2013/3/28 Ralph lewis 



Could i Have a complete configuration for openstack running in local? (private cloud)KAN MELEDJE RALPH LEWIS 
---Master RT Université de Savoie
Elève-ingénieur Réseau & Télécom ESTEM-Casablanca 		 	   		  
___
Mailing list: https://launchpad.net/~openstack
Post to     : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp
-- +Hugo Kuo+h...@swiftstack.comtonyt...@gmail.com
+886 935004793

___Mailing list: https://launchpad.net/~openstackPost to : openstack@lists.launchpad.netUnsubscribe : https://launchpad.net/~openstackMore help   : https://help.launchpad.net/ListHelp___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] [nova-network] add-network-to-project

[Ajiva Fan]

hello everyone:

i have a very simple question which confuses me for a long time:
how should i add a network to a project via rest api?

1) i'm admin of the whole cloud env essex, (i think the folsom is same in
this case)
2) using nova-network:vlan (if using flatdhcp, the associate action is
meanless)
3) a user project "user-project" is created, and the admin:admin is not
that project's admin (and even not a member of it)
4) a network "user-network" is created, but not associated with
"user-project"
5) how to associate the "user-network" with "user-project" ?

i know i can use "nova-manage" via nova-client in the control node,
but what i need to know is how to do this operation via rest api, like curl
or in horizon?

the rest api is: http://api.openstack.org/api-ref.html
POST
v2/{tenant_id}/os-networks/add
with a body identifier the network's id

the problem is that, even i have admin:admin token, i *cannot* associate
the "user-network" with "user-project",
because from the source code of folsom(and essex) nova, in the
nova.api.openstack.wsgi.py of line 931, i find this:

project_id = action_args.pop("project_id", None)
context = request.environ.get('nova.context')
if (context and project_id and (project_id != context.project_id)):
msg = _("Malformed request url")
return Fault(webob.exc.HTTPBadRequest(explanation=msg))

since nova.context.project_id is the project admin_id, and the project_id
is extract from the url,
so the webob.exc is returned.

please help me, i read a lot, (both document and source code, i just cannot
understand or just miss something important)
but still don't know how to do it.

ps: i have sent a mail to openstack-dev on mar 8, but no one reply me. is
my question nonsense?
Note this mail is not the exactly same as previous one since i've more
knowledge of it but the main problem is same
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Recruiting - Translation Coordinator

[Ying Chun Guo]

Hi,

Now we have gotten volunteers for French, Brazilian Portuguese,  Hindi
(India), and Spanish.

we need more volunteers for Japanese, Spanish, Czech, Vietnamese (Viet
Nam), Hungarian, Russian,
Italian, Korean (Korea), Turkish (Turkey), and Catalan.

Please send me mail if you have interests. Thanks.


Ying Chun Guo/China/IBM wrote on 2013/03/26 17:36:07:

> Ying Chun Guo/China/IBM
> 2013/03/26 17:36
>
> To
>
> openstack@lists.launchpad.net, commun...@lists.openstack.org,
>
> cc
>
> Subject
>
> Recruiting - Translation Coordinator
>
> Hi, all
>
> Now the translation of OpenStack message strings and documents is
> managed by Transifex. The access control in Transifex is set as
> "Free for all". Anybody can jump in and contribute to the
> translation. It's easily to attract translators but it's not good
> for the quality. In order to ensure the quality of translation,
> there is a plan to enable the role based access control of OpenStack
> project in Transifex.
>
> This change will need to set up the translation team for each
> language, including translators, reviewers and coordinators. The
> coordinators are the leaders of a translation team. They are
> responsible for the set up of translation team and the control of
> quality. Now I send this mail to community and call for coordinators.
>
> Responsibilities of coordinators include:
> 1. communicate with translators/reviewers in your team, coordinate
> the translation and review work among the translators and reviewers
> in your team.
> 2. control the quality of translation. Review each auto-generated
> translation patch in Git review tool.
> 3. manage the translation memory and glossary for a certain language.
> 4. communicate with community about requirements, bugs, and issues
> of translation.

> People, who want to be a coordinator, don't need to worry about:
> 1. the size of the translation team. The translation team can grow
> from small. If there is only 1 people who is contributing to the
> translation of a certain language, that people could be the coordinator.
> 2. the usage of tools (Transifex, Git review, and etc.). We have
> many people who can help you get familiar with the tools.
> 3. translation experiences and coordinator experiences. The
> community have people with rich experiences who can give you guidance.
>
> If you have passions and time, if you want to contribute to
> OpenStack translation, feel free to contact with me.
>
> Thanks and regards
> Daisy___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp