Re: [Openstack] security group rules

2016-04-11 Thread rezroo
In neutron a security group rule can have different types of "remote" - either a CIDR or another security group. The rule means that your "remote" is another security group - so any VM in security group "default" can reach any port in this security group - so "default" has opened all its ports

Re: [Openstack] [ceilometer] Polling interval behaving differently between Juno and Liberty

2016-04-09 Thread rezroo
pu" every 1 minute and it's impossible to configure "please write down cpu Sample to db only once in 10 minutes, ignore all other occurrence of cpu Sample, use it only for transformation". Sorry for bad news. I hope that this behaviour will be discussed soon on the Su

Re: [Openstack] [keystone] publicurl vs adminurl reachability

2016-04-08 Thread rezroo
Hi - Can you or anyone else explain the technical reason for admin endpoint being deprecated? Is it because domain admins have to create user/project using public endpoint, or something more benign - like we don't think it matters in terms of security, and are deprecating the admin endpoint? T

[Openstack] [ceilometer] Polling interval behaving differently between Juno and Liberty

2016-04-08 Thread rezroo
Hi - I have been using ceilometer in devstack for a while, and what I used to be able to do is modify pipeline.yaml to set the polling interval for "name: cpu_source" to 60, and then publish it using udp. The diff for the changes are below for the Liberty pipeline.yaml: /stack@vlab:/etc/cei