Re: [Openstack] [Openstack-operators] nova-network NAT question
Nova assumes that the cloud operator will want to separate the VMs from the physical infrastructure So the address range on the physical nodes and VM are 'Foreign' to each other. For VMs to be able to communicate with the outside world in this environment, snat is required. There's no real way in Essex to disable that. Why do you want to avoid NAT? On Aug 31, 2012, at 2:37, Igor Laskovy igor.lask...@gmail.com wrote: Hey. Well, what the type of network manager used? For example with FlatManager virtual nic can only put in the according bridge on the node and that's it. Anything you should do manually. Igor Laskovy facebook.com/igor.laskovy Kiev, Ukraine On Aug 30, 2012 2:24 PM, Sergio Ariel de la Campa Saiz saca...@gmv.com wrote: Hi: I have a doubt about nova-network and NAT: UVirtual machines (that only have privates IPs and no floating IP) always use NAT to communicate with machines out of OpenStack cloud? Regards… image008.png image003.gif Sergio Ariel de la Campa Saiz Ingeniero de Infraestructuras / Infrastucture Engineer / GMV Isaac Newton, 11 P.T.M. Tres Cantos E-28760 Madrid Tel. +34 91 807 21 00 Fax +34 91 807 21 99 www.gmv.com image004.gif image005.gif image006.gif image007.gif P Please consider the environment before printing this e-mail. This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener información clasificada por su emisor como confidencial en el marco de su Sistema de Gestión de Seguridad de la Información siendo para uso exclusivo del destinatario, quedando prohibida su divulgación copia o distribución a terceros sin la autorización expresa del remitente. Si Vd. ha recibido este mensaje erróneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboración. Esta mensagem, incluindo qualquer ficheiro anexo, pode conter informação confidencial, de acordo com nosso Sistema de Gestão de Segurança da Informação, sendo para uso exclusivo do destinatário e estando proibida a sua divulgação, cópia ou distribuição a terceiros sem autorização expressa do remetente da mesma. Se recebeu esta mensagem por engano, por favor avise de imediato o remetente e apague-a. Obrigado pela sua colaboração. ___ OpenStack-operators mailing list openstack-operat...@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators ___ OpenStack-operators mailing list openstack-operat...@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [OpenStack Foundation] Orchestration with Openstack
(switching to the openstack list, the foundation list is meant for the organization of the openstack foundation) There are some efforts around using Chef from opscode, and tools built around it to do what I think you describe - look in the mailing list archive ( which is also a good way to identify the right list to use) On Mar 26, 2012, at 4:26 AM, Rahul Bhardwaj bhardwaj.rahu...@gmail.com wrote: I am new to this list so not sure about the relevance of question, forum or discusstion topic. I apologize if there is mismatch anywhere above. I was wondering about the possible ways of getting VM provisioning activity defined as a workflow and than managing it using the orchestrator. I have tried mCollective and celery but none worked. I was thinking, will Puppet+mCollective do the trick or maybe one of the opensource tools such as orchestra or archipel can be used to automate the workflow. Looking for some suggestions. -Rahul ___ Foundation mailing list foundat...@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/foundation ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] is this a bug in milestone-proposed keystone ? (cannotget endpoint-list, nor create endpoint)
Can you include your config?
The behavior you're describing seems to be consistent with a missing backers
configuration ...
Something like:
[identity]
driver = keystone.identity.backends.sql.Identity
[catalog]
driver = keystone.catalog.backends.sql.Catalog
Also, where/how are you installing?
On Mar 26, 2012, at 6:56 AM, Mandar Vaze mandar.v...@vertex.co.in wrote:
I’m also getting the same error on latest master branch (updated today)
Using setup created by devstack
-Mandar
From: openstack-bounces+mandar.vaze=vertex.co...@lists.launchpad.net
[mailto:openstack-bounces+mandar.vaze=vertex.co...@lists.launchpad.net] On
Behalf Of .?o 0 O??
Sent: Monday, March 26, 2012 12:45 PM
To: Pierre Amadio
Cc: openstack
Subject: Re: [Openstack] is this a bug in milestone-proposed keystone ?
(cannotget endpoint-list, nor create endpoint)
hi,
I don't know if it is a bug but I come across the same problem and wondering
how to solve it.
-- Original --
From: Pierre Amadiopierre.ama...@canonical.com;
Date: Sun, Mar 25, 2012 04:35 AM
To: openstackopenstack@lists.launchpad.net;
Subject: [Openstack] is this a bug in milestone-proposed keystone ?
(cannotget endpoint-list, nor create endpoint)
Hi there !
I wanted to give a try to the milestone-proposed branch of keystone and
got stuck quite fast.
I am not sure if i hit a bug and should report it, or if i'm doing
something wrong.
With previous version of keystone (read packaged on ubuntu precise), i
was able to create endpoint the following way once keystone has been
installed:
1) setting some env variables:
export KEYSTONE_IP=192.168.122.102 # IP of your keystone API server
export SERVICE_ENDPOINT=http://$KEYSTONE_IP:35357/v2.0/
export SERVICE_TOKEN=999888777666
export NOVA_PUBLIC_URL=http://$NOVA_IP:8774/v1.1/%(tenant_id)s
export NOVA_ADMIN_URL=$NOVA_PUBLIC_URL
export NOVA_INTERNAL_URL=$NOVA_PUBLIC_URL
2) creating services:
keystone service-create --name nova --type compute --description
'OpenStack Compute Service'
keystone service-create --name swift --type object-store --description
'OpenStack Storage Service'
keystone service-create --name glance --type image --description
'OpenStack Image Service'
keystone service-create --name keystone --type identity --description
'OpenStack Identity Service'
3) creating an endpoint for those services, starting with the compute
service:
ID=$(keystone service-list | grep -i compute | awk '{print $2}')
keystone endpoint-create --region RegionOne --service_id $ID --publicurl
$NOVA_PUBLIC_URL --adminurl $NOVA_ADMIN_URL --internalurl $NOVA_INTERNAL_URL
When i run this command with milestone-proposed, i experience the following:
No handlers could be found for logger keystoneclient.client
The action you have requested has not been implemented. (HTTP 501)
Strangely enough, i experience a similar error message when running a
simple keystone endpoint-list whereas command such as keystone
user-list works all right.
here is what i have in the keystone logs when trying endpoint-list:
2012-03-24 20:30:09DEBUG [routes.middleware] Matched GET /endpoints
2012-03-24 20:30:09DEBUG [routes.middleware] Route path:
'{path_info:.*}', defaults: {'controller':
keystone.contrib.admin_crud.core.CrudExtension object at 0x2b215d0}
2012-03-24 20:30:09DEBUG [routes.middleware] Match dict:
{'controller': keystone.contrib.admin_crud.core.CrudExtension object at
0x2b215d0, 'path_info': '/endpoints'}
2012-03-24 20:30:09DEBUG [routes.middleware] Matched GET /endpoints
2012-03-24 20:30:09DEBUG [routes.middleware] Route path:
'/endpoints', defaults: {'action': u'get_endpoints', 'controller':
keystone.catalog.core.EndpointController object at 0x2b21210}
2012-03-24 20:30:09DEBUG [routes.middleware] Match dict: {'action':
u'get_endpoints', 'controller':
keystone.catalog.core.EndpointController object at 0x2b21210}
2012-03-24 20:30:09DEBUG [keystone.common.wsgi] arg_dict: {}
2012-03-24 20:30:09 WARNING [keystone.common.wsgi] The action you have
requested has not been implemented.
2012-03-24 20:30:09DEBUG [keystone.common.wsgi]
RESPONSE HEADERS
2012-03-24 20:30:09DEBUG [keystone.common.wsgi] Content-Type =
application/json
2012-03-24 20:30:09DEBUG [keystone.common.wsgi] Vary = X-Auth-Token
2012-03-24 20:30:09DEBUG [keystone.common.wsgi] Content-Length = 109
2012-03-24 20:30:09DEBUG [keystone.common.wsgi]
2012-03-24 20:30:09DEBUG [keystone.common.wsgi]
RESPONSE BODY
I try to add some debug in
keystone.catalog.core.EndpointController.get_endpoints() method:
def get_endpoints(self, context):
LOG.debug(PLOP get_endpoints)
self.assert_admin(context)
LOG.debug(PLOP STILL HERE) # = LAST DEBUG LINE
endpoint_list =
Re: [Openstack] Docs: credentials create FAILURE
Of by testing authentication, you mean verifying that correct user/ password combinations are allowed, and incorrect ones are not, then look here: http://docs.openstack.org/diablo/openstack-compute/install/content/verifying-identity-install.html Only valid creds will return a token. On Feb 26, 2012, at 10:11 PM, Alexey Eromenko al4...@gmail.com wrote: It does not yet contain the instructions for EC2 credentials with the keystone client: keystone ec2-credentials-create --tenant_id=$ADMIN_TENANT --user=$ADMIN_USER keystone ec2-credentials-create --tenant_id=$DEMO_TENANT --user=$DEMO_USER Will Essex have traditional authentication mechanism ? (nova-auth or whatever OpenStack had before keystone) Or keystone only ? If keystone only, then how-do I test authentication ? (this thing is unclear in the docs) Looked at os-identity-starter-guide-trunk.pdf, but can't find keystone docs for testing authentication. -- -Alexey Eromenko Technologov ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Dashboard shows Keystone and Glance as localhost but they are not
Might be worth checking how those services are registered in keystone.. On Feb 27, 2012, at 7:06 AM, i3D.net - Tristan van Bokkem tristanvanbok...@i3d.nl wrote: Guys, My dashboard shows keystone and glance as localhost (127.0.0.1) but they are not locally installed and therefor showing offline. I have checked and double checked every config I could find and all are pointing to the actual location where keynote and glance are installed. (192.168.0.8) Here are my configs: keystone.conf: http://pastebin.com/NcgczLCd glance-registry.conf: http://pastebin.com/aRKGzMRb glance-api.conf: http://pastebin.com/gZMQHsQg glance-scrubber.conf: http://pastebin.com/HGCdMPz4 nova.conf: http://pastebin.com/2jc9aqDu local_settings.py (/etc/openstack-dashboard/ /usr/share/openstack-dashboard/local/) : http://pastebin.com/iPwbxeab What am I missing? Best regards, Tristan van Bokkem Datacenter Operations Contact: E-mail Personal: tristanvanbok...@i3d.net E-mail Support: i...@i3d.net E-mail NOC: n...@i3d.net Website: http://www.i3d.net Office: Interactive 3D B.V. Meent 93b 3011 JG Rotterdam The Netherlands Visit www.smartdc.net – SmartDC is our in-house 36,000 sq. ft. datacenter in Rotterdam, The Netherlands. High density hosting – multiple fiber carriers in-house – Level3 PoP. Interactive 3D (i3D.net) is a company registered in The Netherlands at Meent 93b, Rotterdam. Registration #: 14074337 - VAT # NL 8202.63.886.B01. Interactive 3D (i3D.net) is CDSA certified on content protection and security. We are ranked in the Deloitte Technology Fast 50 as one of the fastest growing technology companies. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Docs: credentials create FAILURE
adminTenant is the default tenant name, so it is also a variable.
On Feb 27, 2012, at 7:55 AM, Alexey Eromenko al4...@gmail.com wrote:
On Mon, Feb 27, 2012 at 2:50 PM, Andiabes andi.a...@gmail.com wrote:
Of by testing authentication, you mean verifying that correct user/ password
combinations are allowed, and incorrect ones are not, then look here:
http://docs.openstack.org/diablo/openstack-compute/install/content/verifying-identity-install.html
Only valid creds will return a token.
I see this:
curl -d '{auth: {tenantName: adminTenant,
passwordCredentials:{username: adminUser, password:
secretword}}}' -H Content-type: application/json
http://192.168.206.130:35357/v2.0/tokens | python -mjson.tool
What are constants and what are variables ?
Maybe it should becomes this:
curl -d '{auth: {tenantName: adminTenant,
passwordCredentials:{username: adminUser, password:
admin_password}}}' -H Content-type: application/json
http://192.168.206.130:35357/v2.0/tokens | python -mjson.tool
I added:
adminUser and admin_password.
Correct ?
About my previous Q: Does legacy auth scheme supported in Essex ? Or
keystone only ?
--
-Alexey Eromenko Technologov
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Howto Nova setup with HA?
with a simple rsync script that runs on a periodic interval that syncs the image data. Compute servers * Each run their own copy of nova-api (only instances running on the node use this) No. Compute nodes run nova-compute, not nova-api. I think the intent here was to have access to the metadata service on each compute node - hence running both n-compute and n-API (this also avoids issues in getting metadata requests between nodes) * nova-network (multi-host configuration) with private network -- Needs its own discussion I guess. Keystone * How about keystone, same as glance I guess? Similar to glance-registry. Cheers, -jay Best regards, Tristan van Bokkem Datacenter Operations Contact: E-mail Personal: tristanvanbok...@i3d.net mailto:tristanvanbok...@i3d.net E-mail Support: i...@i3d.net mailto:i...@i3d.net E-mail NOC: n...@i3d.net mailto:n...@i3d.net Website: http://www.i3d.net Office: Interactive 3D B.V. Meent 93b 3011 JG Rotterdam The Netherlands Visit www.smartdc.net – SmartDC is our in-house 36,000 sq. ft. datacenter in Rotterdam, The Netherlands. High density hosting – multiple fiber carriers in-house – Level3 PoP. Interactive 3D (i3D.net) is a company registered in The Netherlands at Meent 93b, Rotterdam. Registration #: 14074337 - VAT # NL 8202.63.886.B01. Interactive 3D (i3D.net) is CDSA certified on content protection and security. We are ranked in the Deloitte Technology Fast 50 as one of the fastest growing technology companies. *From:* Dan Wendlandt [mailto:d...@nicira.com] *To:* Ghe Rivero [mailto:ghe.riv...@stackops.com] *Cc:* netst...@lists.launchpad.net, darren.birk...@gmail.com, openstack@lists.launchpad.net *Sent:* Tue, 21 Feb 2012 18:13:55 +0100 *Subject:* Re: [Openstack] Howto Nova setup with HA? 2012/2/21 Ghe Rivero ghe.riv...@stackops.com mailto:ghe.riv...@stackops.com BigSwitch and Nicira have created different blueprints in quantum to add their plugins for essex-4 about ten days ago, Cisco already have it included almost from the beginning. No news of them for the moment, but i really hope that both of them make it in time! Ghe Rivero https://blueprints.launchpad.net/quantum/+spec/quantum-nvp-plugin https://blueprints.launchpad.net/quantum/+spec/quantum-bigswitch-plugin To be clear, there are several more existing and planned plugins for Quantum, even beyond the three you mention. Each plugin will make its own trade-offs in terms of HA for control plane and data plane components. I'm planning on organizing a talk at the Folsom summit/conference where people have a chance to talk about their plugins. No need for a flame war here :) One other point of confusion that I'd like to address is that there is NO requirement that a plugin be merged into the main Quantum repo for it to be a valid plugin. I know of several plugins that are used despite not being merged in (in fact, at the summit, we're going to discuss if ANY plugins should remain in the main repo... this is likely a larger decision that should be made consistently across all openstack projects). Dan 2012/2/21 Diego Parrilla Santamaría diego.parrilla.santama...@gmail.com mailto:diego.parrilla.santama...@gmail.com This is the kind of flame war I love... ;-) if you think the HA challenges in Openstack Nova are at MySQL and Rabbit level, you are not putting the focus on the right components. The biggest HA (and scalability) challenges in Nova are in the networking side. There are a lot of companies tackling the networking challenges of Nova (BigSwitch, Nicira, Cisco, etc...), and I would like to see how they evolve in the future and how they will address this problem. Right now, only promises. Fight! -- Diego Parrilla http://www.stackops.com/*CEO* **www.stackops.com* http://www.stackops.com/ | *diego.parri...@stackops.com mailto:diego.parri...@stackops.com| +34 649 94 43 29 tel:%2B34%20649%2094%2043%2029 | skype:diegoparrilla* * http://www.stackops.com/ ** On Tue, Feb 21, 2012 at 1:04 PM, i3D.net - Tristan van Bokkem tristanvanbok...@i3d.nl mailto:tristanvanbok...@i3d.nl wrote: __ Hi Darren, No, I am not looking at a performance increasment at this moment. Just trying to make the different components Nova is build on redundant. Of course a master/master setup of mysql / rabbitmq with a floating IP will
Re: [Openstack] Swift S3 with Keystone anyone?
Take a peek here ( this is for diablo/stable) https://github.com/dellcloudedge/barclamp-keystone/blob/master/chef/cookbooks/keystone/recipes/server.rb#L160 On Feb 9, 2012, at 9:10 PM, Pete Zaitcev zait...@redhat.com wrote: On Thu, 2 Feb 2012 19:03:54 +0900 Akira Yoshiyama akirayoshiy...@gmail.com wrote: I modified the wiki: http://wiki.openstack.org/Keystone-BP-S3Token I added authtoken in main pipeline just now. I am still unable to figure out how to add the right password. So far, the only thing I figured out is that you do not use the Swift password that I expected. Instead, something like this happens: keystone/logic/service.py: def authenticate_s3(self, credentials): creds = self.credential_manager.get_by_access(credentials.access) # c.access is zaitcev above keystone/backends/sqlalchemy/api/credentials.py: def get_by_access(self, access, session=None): result = session.query(models.Credentials).\ filter_by(type=EC2, key=access).first() So, clearly keystone-manage user add zaitcev passw0rd admten is not sufficient. Would you share the proper incarnation for keystone-manage to add a EC2 type password? Yours, -- Pete ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [CHEF] Aligning Cookbook Efforts
Jesse, right. The results are here: https://github.com/dellcloudedge/crowbar/tree/openstack-os-build/barclamps . With separate repos for nova, swift, keystone and horizon ( at this location, they're git submodules) The v1.2 tag deploys diablo/stable. Most Cookbooks are written to be useable within and without crowbar, thoug we mostly test within crowbar. (writing from home, hence the gmail, rather than @dell address) On Feb 6, 2012, at 9:37 PM, Jesse Andrews anotherje...@gmail.com wrote: I know that the RCB deploy team works with the Crowbar team on chef recipes for that project. Regarding the github.com/ansolabs github.com/rcb recipes - I'll have to delegate to Vishy who worked on those. Jesse On Mon, Feb 6, 2012 at 6:07 PM, Jay Pipes jaypi...@gmail.com wrote: Hi Stackers, tl;dr - There are myriad Chef cookbooks out there in the ecosystem and locked up behind various company firewalls. It would be awesome if we could agree to: * Align to a single origin repository for OpenStack cookbooks * Consolidate OpenStack Chef-based deployment experience into a single knowledge base * Have branches on the origin OpenStack cookbooks repository that align with core OpenStack projects * Automate the validation and testing of these cookbooks on multiple supported versions of the OpenStack code base Details --- Current State of Forks == Matt Ray and I tried to outline the current state of the various OpenStack Chef cookbooks this past Thursday, and we came up with the following state of affairs: ** The official OpenStack Chef cookbooks ** https://github.com/openstack/openstack-chef These chef cookbooks are the ones maintained mostly by Dan Prince and Brian Lamar and these are the cookbooks used by the SmokeStack project. The cookbooks contained in the above repo can install all the core OpenStack projects with the exception of Swift and Horizon. This repo is controlled by the Gerrit instance at review.openstack.org just like other core OpenStack projects. However, these cookbooks DO NOT currently have a stable/diablo branch -- they are updated when the development trunks of any OpenStack project merges a commit that requires deployment or configuration-related changes to their associated cookbook. Important note: it's easy for Dan and Brian to know when updates to these cookbooks are necessary -- SmokeStack will bomb out if a deployment-affecting configuration change hits a core project trunk :) These cookbooks are the ONLY cookbooks that contain stuff for deploying with XenServer, AFAICT. ** NTT PF Lab Diablo Chef cookbooks ** https://github.com/ntt-pf-lab/openstack-chef/ So, NTT PF Lab forked the upstream Chef cookbooks back in Nov 11, 2011, because they needed a set of Chef cookbooks for OpenStack that functioned for the Diablo code base. While Nov 11, 2011, is not the *exact* date of the Diablo release, these cookbooks do in fact work for a Diablo install -- Nati Ueno is using them for the FreeCloud deployment so we know they work... ** OpsCode OpenStack Chef Cookbooks ** Matt Ray from OpsCode created a set of cookbooks for OpenStack for the Cactus release of OpenStack: https://github.com/mattray/openstack-cookbooks http://wiki.opscode.com/display/chef/Deploying+OpenStack+with+Chef These cookbooks were forked from the Anso Labs' original OpenStack cookbooks from the Bexar release and were the basis for the Chef work that Dell did for Crowbar. Crowbar was originally based on Cactus, and according to Matt, the repositories of OpenStack cookbooks that OpsCode houses internally and uses most often are Cactus-based cookbooks. (Matt, please correct me if I am wrong here...) ** Rackspace CloudBuilders OpenStack Chef Cookbooks ** The RCB team also has a repository of OpenStack Chef cookbooks: https://github.com/cloudbuilders/openstack-cookbooks Now, GitHub *says* that these cookbooks were forked from the official upstream cookbooks, but I do not think that is correct. Looking at this repo, I believe that this repo was *actually* forked from the Anso Labs OpenStack Chef Cookbooks, as the list of cookbooks is virtually identical. ** Anso Labs OpenStack Chef Cookbooks ** These older cookbooks are in this repo: https://github.com/ansolabs/openstack-cookbooks/tree/master/cookbooks Interestingly, this repo DOES contain a cookbook for Swift. Current State of Documentation == Documentation for best practices on using Chef for your OpenStack deployments is, well, a bit scattered. Matt Ray has some good information on the README on his cookbook repo and the OpsCode wiki: https://github.com/mattray/openstack-cookbooks/blob/cactus/README.md http://wiki.opscode.com/display/chef/Deploying+OpenStack+with+Chef But it is unfortunately not going to help people looking to deploy Diablo and later versions of OpenStack. Most
Re: [Openstack] [CHEF] Aligning Cookbook Efforts
The alignment proposal sounds great, and would definitely help reduce redundancy. However, it might be useful to define clear goals of the resulting deployment using these cookbooks. As an example - Looking at the anso recipes for swift - they appear to deploy a SAIO swift cluster. The Crowbar cookbook assumes a multi node deployment. Similarly for nova - the official cookbooks appear to focus only on flat networking (unless I'm missing something) while the Crowbar version supports multiple network configs ( e.g. Vlan). OTH, the official recipes support both MySQL and Postgres, while crowbar only supports MySQL. ( the above not intended to recommend brands of sliced bread ;) The above raises a few questions ( and I'm sure there might be more): - SAIO or multi node ? - possibly repeat of the above - are the cookbooks to be used beyond unit testing, or just serve as an example? - what coverage for the breadth of options ? Or stated differently - are the cookbooks prescriptive and opinionated about deployments, or flexible? - does the above apply just to openstack components, or 3rd party dependencies ? A. On Feb 6, 2012, at 11:53 PM, Vishvananda Ishaya vishvana...@gmail.com wrote: On Feb 6, 2012, at 6:37 PM, Jesse Andrews wrote: I know that the RCB deploy team works with the Crowbar team on chef recipes for that project. Regarding the github.com/ansolabs github.com/rcb recipes - I'll have to delegate to Vishy who worked on those. They were the basis of dan and matt's cookbooks, but they are now ancient history. i've been using them as a repository for a few helper devstack recipes, but waldon pulled those out into a separate repo so it is fine if we torch them. Jesse On Mon, Feb 6, 2012 at 6:07 PM, Jay Pipes jaypi...@gmail.com wrote: Hi Stackers, tl;dr - There are myriad Chef cookbooks out there in the ecosystem and locked up behind various company firewalls. It would be awesome if we could agree to: * Align to a single origin repository for OpenStack cookbooks * Consolidate OpenStack Chef-based deployment experience into a single knowledge base * Have branches on the origin OpenStack cookbooks repository that align with core OpenStack projects * Automate the validation and testing of these cookbooks on multiple supported versions of the OpenStack code base Details --- Current State of Forks == Matt Ray and I tried to outline the current state of the various OpenStack Chef cookbooks this past Thursday, and we came up with the following state of affairs: ** The official OpenStack Chef cookbooks ** https://github.com/openstack/openstack-chef These chef cookbooks are the ones maintained mostly by Dan Prince and Brian Lamar and these are the cookbooks used by the SmokeStack project. The cookbooks contained in the above repo can install all the core OpenStack projects with the exception of Swift and Horizon. This repo is controlled by the Gerrit instance at review.openstack.org just like other core OpenStack projects. However, these cookbooks DO NOT currently have a stable/diablo branch -- they are updated when the development trunks of any OpenStack project merges a commit that requires deployment or configuration-related changes to their associated cookbook. Important note: it's easy for Dan and Brian to know when updates to these cookbooks are necessary -- SmokeStack will bomb out if a deployment-affecting configuration change hits a core project trunk :) These cookbooks are the ONLY cookbooks that contain stuff for deploying with XenServer, AFAICT. ** NTT PF Lab Diablo Chef cookbooks ** https://github.com/ntt-pf-lab/openstack-chef/ So, NTT PF Lab forked the upstream Chef cookbooks back in Nov 11, 2011, because they needed a set of Chef cookbooks for OpenStack that functioned for the Diablo code base. While Nov 11, 2011, is not the *exact* date of the Diablo release, these cookbooks do in fact work for a Diablo install -- Nati Ueno is using them for the FreeCloud deployment so we know they work... ** OpsCode OpenStack Chef Cookbooks ** Matt Ray from OpsCode created a set of cookbooks for OpenStack for the Cactus release of OpenStack: https://github.com/mattray/openstack-cookbooks http://wiki.opscode.com/display/chef/Deploying+OpenStack+with+Chef These cookbooks were forked from the Anso Labs' original OpenStack cookbooks from the Bexar release and were the basis for the Chef work that Dell did for Crowbar. Crowbar was originally based on Cactus, and according to Matt, the repositories of OpenStack cookbooks that OpsCode houses internally and uses most often are Cactus-based cookbooks. (Matt, please correct me if I am wrong here...) ** Rackspace CloudBuilders OpenStack Chef Cookbooks ** The RCB team also has a repository of OpenStack Chef cookbooks: https://github.com/cloudbuilders/openstack-cookbooks Now, GitHub *says*
Re: [Openstack] OpenStack Identity: Keystone API Proposal
It might be useful to include in the API guide some information about authentication to keystone itself. I.e when requesting a list of users,tenants etc the requestor should somehow authenticate itself I'm guessing that the flow involve acquiring a token that authenticates the user to keystone as a user who has privileges to manage the relevant entities.? Sent from my iPad On Jun 10, 2011, at 7:24 PM, Ziad Sawalha ziad.sawa...@rackspace.com wrote: Time flies! It's June 10th already. In my last email to this community I had proposed today as the day to lock down the Keystone API so we can finalize implementation by Diablo-D2 (June 30th). We've been working on this feverishly over the past couple of weeks and have just pushed out a proposed API here: https://github.com/rackspace/keystone/raw/master/keystone/content/identitydevguide.pdf For any and all interested, the original source and code is on Github (https://github.com/rackspace/keystone), along with the current implementation of Keystone, examples, sample data, tests, instructions, and all the goodies we could muster to put together. The project also lives on Launchpad at http://launchpad.net/keystone. The API we just put out there is still a proposal. We're going to be focusing on the implementation, but would still love to get community input, feedback, and participation. Have a great weekend and regards to all, Ziad Confidentiality Notice: This e-mail message (including any attached or embedded documents) is intended for the exclusive and confidential use of the individual or entity to which this message is addressed, and unless otherwise expressly indicated, is confidential and privileged information of Rackspace. Any dissemination, distribution or copying of the enclosed material is prohibited. If you receive this transmission in error, please notify us immediately by e-mail at ab...@rackspace.com, and delete the original message. Your cooperation is appreciated. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] null ring gz files?
Curious to know what is this empty ring useful for Sent from my iPad On Jun 3, 2011, at 7:49 PM, Jon Slenk jsl...@internap.com wrote: hi, solution: don't get confused/mislead into trying rebalance. just do write_ring. thanks. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
