[openstack-dev] [openstack][nova] an unit test problem
Hi experts, I have an odd unit test issue in the commit https://review.openstack.org/#/c/44639/ the test results are here: http://logs.openstack.org/39/44639/7/check/gate-nova-python27/4ddc671/testr_results.html.gz the not passed test is: nova.tests.compute.test_compute_api.ComputeCellsAPIUnitTestCase.test_delete_in_resized I have two questions about this issue: 1) why it is passed when I run it by 'testr run nova.tests.compute.test_compute_api.ComputeCellsAPIUnitTestCase.test_delete_in_resized' and also 'nosetests ' in my local venv 2) why the other test nova.tests.compute.test_compute_api.ComputeAPIUnitTestCase.test_delete_in_resized is passed, which also inherits from the class '_ComputeAPIUnitTestMixIn' because it is OK in my local venv, so I have no idea to fix it, anybody can give me some advice? Thanks a lot! 2013-09-04 Wangpan___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] I18n meeting tomorrow
Hi, There will be OpenStack I18n team meeting at 0700UTC on Thursday (September 5th) in IRC channel #openstack-meeting. The time, we use Asia/Europe friendly time. Welcome to join the meeting. During the previous several weeks, we have good progress with the infrastructure setting up in Transifex. We have the common glossary shared within all openstack projects. We have Horizon ready for translations. Tomorrow is the string frozen date. Now it's the quite important time for translating now. We want to make sure Horizon can have the high quality internationalized release for Havanna version. If you are interested in translations or tools, welcome to join us. We will cover following topics this time: Action items from the last meeting Horizon I18n version release process Translated document publish process Open discussion For more details, please look into https://wiki.openstack.org/wiki/Meetings/I18nTeamMeeting. You can also contact us through IRC channel #openstack-translation, or mailing address: openstack-i...@list.openstack.org. Please refer to our wiki page for more details: https://wiki.openstack.org/wiki/I18nTeam Best regards Daisy___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [keystone][heat] Question re deleting trusts via trust token
If delegation (trusts) were enhanced to be role based, then anyone with the same role as the initial delegator should be able to revoke the delegation regards David On 04/09/2013 05:02, Clint Byrum wrote: Excerpts from Dolph Mathews's message of 2013-09-03 16:12:00 -0700: On Tue, Sep 3, 2013 at 5:52 PM, Steven Hardy sha...@redhat.com wrote: Hi, I have a question for the keystone folks re the expected behavior when deleting a trust. Is it expected that you can only ever delete a trust as the user who created it, and that you can *not* delete the trust when impersonating that user using a token obtained via that trust? We have some tests in keystone somewhat related to this scenario, but nothing that asserts that specific behavior- https://github.com/openstack/keystone/blob/master/keystone/tests/test_auth.py#L737-L763 The reason for this question, is for the Heat use-case, this may represent a significant operational limitation, since it implies that the user who creates the stack is the only one who can ever delete it. I don't follow this implication-- can you explain further? I don't see how the limitation above (if it exists) would impact this behavior or be a blocker for the design below. The way heatclient works right now, it will obtain a trust from keystone, and then give that trust to Heat to use while it is managing the stack. However, if this user was just one user in a team of users who manage that stack, then when the stack is deleted, neither heat, nor the user who is deleting the stack will be able to delete the trust that was given to Heat. This presents an operational hurdle for Heat users, as they will have to have a stack owner user that is shared amongst a team. Otherwise they may be stuck in a situation where the creating user is not available to delete a stack that must be deleted for some reason. Ideally as a final operation with the trust Heat, or the user doing the delete, would be able to use the trust to delete itself. ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [keystone][heat] Question re deleting trusts via trust token
On Tue, Sep 03, 2013 at 06:12:00PM -0500, Dolph Mathews wrote: On Tue, Sep 3, 2013 at 5:52 PM, Steven Hardy sha...@redhat.com wrote: Hi, I have a question for the keystone folks re the expected behavior when deleting a trust. Is it expected that you can only ever delete a trust as the user who created it, and that you can *not* delete the trust when impersonating that user using a token obtained via that trust? We have some tests in keystone somewhat related to this scenario, but nothing that asserts that specific behavior- https://github.com/openstack/keystone/blob/master/keystone/tests/test_auth.py#L737-L763 The reason for this question, is for the Heat use-case, this may represent a significant operational limitation, since it implies that the user who creates the stack is the only one who can ever delete it. I don't follow this implication-- can you explain further? I don't see how the limitation above (if it exists) would impact this behavior or be a blocker for the design below. As outlined already by Clint, the way Heat uses trusts is: - User requests stack creation, passes token or user/password to Heat - Heat uses the user credentials to create a trust between the user and the Heat service user, the ID of which is encrypted and stored in our DB (instead of the credentials) - We use the trust to perform lifecycle operations, e.g adding a nova instance to an AutoScalingGroup, the Heat service user impersonates the User who created the stack - The user deletes the stack, at which point we delete the trust This final step is the problematic step - atm (unless I'm making a mistake, which as previously proven is entirely possible! ;) it seems that it's impossible for anyone except the trustor to delete the trust, even if we impersonate the trustor. Even a tenant admin, it seems, cannot delete the trust. Current Heat behavior is to allow any user in the same tenant, provided they have the requisite roles, to delete the stack That seems like a reasonable design. With trusts, any user who has been delegated the requisite role on the same tenant should be able to delete the stack. If this is the case, I'd very much like to see some curl examples of this working, in particular these two scenarios: - Deleting a trust by impersonating the trustor (using a token obtained with the trust you're about to delete, which will obviously be invalidated as soon as the delete completes) - Any user other than the trustor deleting the trust, e.g some other user in the same tenant I'll create some minimal reproducers to try to illustrate the issue. which AFAICT atm will not be possible when using trusts. Similar to the above, I don't understand how trusts presents a blocker? Hopefully the above clarifies, we will either leak trusts or have to assert failure on stack delete unless we can delete the trust on behalf of the stack-creating (trustor) user in the case where some other user in the tenant performs the stack delete. Thanks for any further info you can provide! :) Steve ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [ceilometer] Wait a minute... I thought we were going to remove Alembic until Icehouse-1?
On Wed, Sep 04 2013, Jay Pipes wrote: Hi Jay, So I went to do the work I said I was going to do at last week's Ceilometer meeting -- translate the 2 Alembic migrations in the Ceilometer source into SA-migrate migrations -- and then rebased my branch only to find 2 more Alembic migrations added in the last few days: https://review.openstack.org/#/c/42716/ https://review.openstack.org/#/c/42715/ I will note that there is no unit testing of either of these migrations, because neither of them runs on SQLite, which is what the unit tests use (improperly, IMHO). Agreed. That's the reason I jumped in and submitted https://review.openstack.org/#/c/44681/ to add devstack-gate to Ceilometer, so we can catch this in the future. I'm sorry these got in in the mean time, I didn't think about what you were working on when pushing the button and that it would affect you. There is a unique constraint name in one of them (only apparently used in the PostgreSQL driver) that is inconsistent with the naming of unique constraints that is used in the other migration. Note that I am not in favor of the unique constraint naming convention of table_columnA0columnB0columnC0, as I've noted in the upstream oslo.db patch that adds a linter-style check for this convention: https://review.openstack.org/#/c/42307/2 Noted. I thought there was already some sort of convention around this. I thought we were going to translate the existing 2 Alembic migrations to SA-migrate migrations, and then do a switch to Alembic (removing the old SA-migrate versioning) in Icehouse-1? This was supposed to get us past the current mess of having both SA-migrate and Alembic migrations in the same source code base -- which is confusing a bunch of contributors who have written SA-migrate migrations. Can we have a decision on this please? That was my understanding too, as I've also written a new migration using SA-migrate. I thought the plan from last week was: 1) Translate the 2 Alembic migrations to SA-Migrate migrations 2) Remove Alembic support from Ceilometer 3) Add unit tests (pretty much as-is from Glance) that would test the SA-migrate migrations in the unit tests as well as the MySQL and PostgreSQL testers in the gate 4) Add SA-migrate migrations for the remainder of Havana 5) Immediately after the cut of Havana final, do a cutover to Alembic from SA-migrate that would: a) Create an initial Alembic migration that would be the schema state of the Ceilometer database at the last cut of Havana b) Write a simple check for the migrate_version table in the database to check if the database was under SA-migrate control. If so, do nothing other than remove the migrate_version table c) Remove all the ceilometer/storage/sqlalchemy/migrate_repo/* Sounds good to me. Now we need to have the PostgreSQL migration fixed one way or another. Svetlana wrote https://review.openstack.org/#/c/44539/ and I wrote https://review.openstack.org/#/c/44691/ which try to fix the harm done. I think the best call is to drop all of these and let your patch goes in. -- Julien Danjou // Free Software hacker / independent consultant // http://julien.danjou.info signature.asc Description: PGP signature ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Climate] REST API proposal
I've made some update in the document. Please check it On Tue, Sep 3, 2013 at 10:00 PM, Sergey Lukjanov slukja...@mirantis.comwrote: Done Sincerely yours, Sergey Lukjanov Savanna Technical Lead Mirantis Inc. On Sep 3, 2013, at 21:53, Jay Pipes jaypi...@gmail.com wrote: On 08/30/2013 04:37 AM, Nikolay Starodubtsev wrote: Hi, everyone! We have created a proposal for Climate REST API https://docs.google.com/document/d/1U36k5wk0sOUyLl-4Cz8tmk8RQFQGWKO9dVhb87ZxPC8/ And we like to discuss it with everyone. If you enable commenting on the proposal, then we can put comments into the document for you to respond to. Best, -jay ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [Glance] v2 api upload image-size issue with rbd backend store
Hi, I'm hitting an issue with v2 api upload() and not sure the best way to fix it so would appreciate some opinions/suggestions. https://bugs.launchpad.net/glance/+bug/1213880 https://bugs.launchpad.net/python-glanceclient/+bug/1220197 So, currently doing cinder upload-to-image fails with v2 glance api and RBD backend store. This is because v2 uses upload() (as opposed to update() in v1) and does not accept an image-size. The v2 Glance api upload() implementation checks the request content-length (which is currently always zero) and then tries to create an RBD image of size zero then write to it which fails. I have tried different solutions: 1. if image size is zero, resize for each chunk then write. 2. set content-length in glanceclient to size of image Problem with 1 is that this implicitly disables 'Transfer-Encoding: chunked' i.e. disables chunking. Problem with 2 is you get 2RTT of network latency per write plus overhead of a resize. So, I now think the best way to do this would be to modify the update call to allow the glancelcient to send x-image-meta-size so that the backend knows how big the image will be, create the image then write the chunk(s) incrementally (kind of like the swift store). Suggestions? Ed. ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] Session suggestions for the Icehouse Design Summit now open
Hi everyone, TL;DR: The session suggestion website for the Icehouse Design Summit (which will happen at the OpenStack Summit in Hong-Kong) is now open at: http://summit.openstack.org/ Long version: The Icehouse Design Summit is a specific event part of the overall OpenStack Summit in Hong-Kong. It is different from classic tracks in a number of ways. * It happens all 4 days, from Tuesday morning to Friday evening. * There are *no formal presentations or speakers*. The sessions at the design summit are open discussions between contributors on a specific development topic for the upcoming development cycle, generally moderated by the PTL or the person who proposed the session. While it is possible to prepare a few slides to introduce the current status and kick-off the discussion, these should never be formal speaker-to-audience presentations. If that's what you're after, the presentations in the other tracks of the OpenStack Summit are for you. * There is no community voting on the content. The Icehouse Design Summit is split into multiple topics (one for each official OpenStack Program), and the elected program PTL will be ultimately responsible for selecting the content he deems important for the upcoming cycle. If you want to be PTL in place of the PTL, we'll be holding elections for that in the coming weeks :) With all this in mind, please feel free to suggest topics of discussion for this event. The website to do this is open at: http://summit.openstack.org/ You'll need to go through Launchpad SSO to log on that site (same auth we use for review.openstack.org and all our core development infrastructure). If you're lost, try the Help link at the bottom of the page. If all else fails, ping me. Please take extra care when selecting the topic your suggestion belongs in. You can see the complete list of topics at: https://wiki.openstack.org/wiki/Summit/Icehouse You have until mid-October to suggest sessions. Proposed session topics will be reviewed by PTLs afterwards, potentially merged with other suggestions before being scheduled. You can also comment on proposed sessions to suggest scheduling constraints or sessions it could be merged with. More information about the Icehouse Design Summit can be found at: https://wiki.openstack.org/wiki/Summit Cheers, -- Thierry Carrez (ttx) ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [keystone][heat] Question re deleting trusts via trust token
On Wed, Sep 04, 2013 at 09:49:48AM +0100, Steven Hardy wrote: This final step is the problematic step - atm (unless I'm making a mistake, which as previously proven is entirely possible! ;) it seems that it's impossible for anyone except the trustor to delete the trust, even if we impersonate the trustor. Ok, apologies, after further testing, it appears I made a mistake and you *can* delete the trust by impersonating the user. The reason for the confusion is there's an odd issue when authenticating the client using a trust_id. If (and only if) the trust has impersonation=True, you *must* specify the endpoint when initialising the client, otherwise we do not get a token, we get a 401. So I misinterpreted the authentication failure as a 401 on delete, because I'd copied some code and changed impersonate from False to True, which changes the required arguments when consuming the trust. Seems like a bug? I've created a gist containing an example which demonstrates the problem: https://gist.github.com/hardys/6435299 I'm not sure if the bug is that the authenticate works without the endpoint when impersonate=False, or that is doesn't when impersonate=True. Thanks! Steve ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [nova] review request
Hi all, I'd appreciate if any of the nova-core reviewers could take a look at https://review.openstack.org/#/c/39226/, as this add keypair notification events. which is more like a small feature than a bug, I am callling review just in case after feature freeze it can't be accepted. -- Tang Yaguang Canonical Ltd. | www.ubuntu.com | www.canonical.com Mobile: +86 152 1094 6968 gpg key: 0x187F664F ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Ceilometer] Need help with HBase backend
No worries at all! I was just curious. =] Sounds great. I appreciate your time. On 9/3/13 5:56 PM, Stas Maksimov maksi...@gmail.commailto:maksi...@gmail.com wrote: Hi Thomas, Not yet, sorry. But working on it (in parallel!), was having a bit of an issue setting up a new env with devstack. Will update you as soon as I have some results. Thanks, Stas On 3 September 2013 23:00, Thomas Maddox thomas.mad...@rackspace.commailto:thomas.mad...@rackspace.com wrote: Hey Stas, Were you ever able to get any answers on this? :) Thanks! -Thomas On 8/12/13 9:42 AM, Thomas Maddox thomas.mad...@rackspace.commailto:thomas.mad...@rackspace.com wrote: Happens all of the time. I haven't been able to get a single meter stored. :( From: Stas Maksimov maksi...@gmail.commailto:maksi...@gmail.com Reply-To: OpenStack Development Mailing List openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org Date: Monday, August 12, 2013 9:34 AM To: OpenStack Development Mailing List openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] [Ceilometer] Need help with HBase backend Is it sporadic or happens all the time? In my case my Ceilometer VM was different from HBase VM, so I'm not sure if DHCP issues can affect localhost connections. Thanks, Stas On 12 August 2013 15:29, Thomas Maddox thomas.mad...@rackspace.commailto:thomas.mad...@rackspace.com wrote: Hmmm, that's interesting. That would effect an all-in-one deployment? It's referencing localhost right now; not distributed. My Thrift server is hbase://127.0.0.1:9090/http://127.0.0.1:9090/. Or would that still effect it, because it's a software facilitated localhost reference and I'm doing dev inside of a VM (in the cloud) rather than a hardware host? I really appreciate your help! -Thomas From: Stas Maksimov maksi...@gmail.commailto:maksi...@gmail.com Reply-To: OpenStack Development Mailing List openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org Date: Monday, August 12, 2013 9:17 AM To: OpenStack Development Mailing List openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] [Ceilometer] Need help with HBase backend Aha, so here it goes. The problem was not caused by monkey-patching or multithreading issues, it was caused by the DevStack VM losing its connection and getting a new address from the DHCP server. Once I fixed the connection issues, the problem with eventlet disappeared. Hope this helps, Stas On 12 August 2013 14:49, Stas Maksimov maksi...@gmail.commailto:maksi...@gmail.com wrote: Hi Thomas, I definitely saw this before, iirc it was caused by monkey-patching somewhere else in ceilometer. It was fixed in the end before i submitted hbase implementation. At this moment unfortunately that's all I can recollect on the subject. I'll get back to you if I have an 'aha' moment on this. Feel free to contact me off-list regarding this hbase driver. Thanks, Stas. Hey team, I am working on a fix for retrieving the latest metadata on a resource rather than the first with the HBase implementation, and I'm running into some trouble when trying to get my dev environment to work with HBase. It looks like a concurrency issue when it tries to store the metering data. I'm getting the following error in my logs (summary): 013-08-11 18:52:33.980 2445 ERROR ceilometer.collector.dispatcher.database [req-3b3c65c9-1a1b-4b5d-bba5-8224f074b176 None None] Second simultaneous read on fileno 7 detected. Unless you really know what you're doing, make sure that only one greenthread can read any particular socket. Consider using a pools.Pool. If you do know what you're doing and want to disable this error, call eventlet.debug.hub_prevent_multiple_readers(False) Full traceback: http://paste.openstack.org/show/43872/ Has anyone else run into this lovely little problem? It looks like the implementation needs to use happybase.ConnectionPool, unless I'm missing something. Thanks in advance for help! :) -Thomas ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.orgmailto:OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.orgmailto:OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.orgmailto:OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [keystone][heat] Question re deleting trusts via trust token
you can always do anything by impersonating the user. This is why impersonation should never be sanctioned david On 04/09/2013 11:45, Steven Hardy wrote: Ok, apologies, after further testing, it appears I made a mistake and you *can* delete the trust by impersonating the user. ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [Neutron] Question about create_port
Hello All, I am trying to make my neutron plugin to configure a physical switch(using vlans), while in create_port I am trying to configure the physical switch I see a lot of create_port and delete_port calls appearing in server.log. I am assuming that this may be due to the amount of time required to configure/commit on the physical switch is higher, and nova may be trying multiple times to create port (and deleting port when response does not arrive within a timeout period). Is there a timeout value in neutron or nova that can be altered so that the client can wait for the create_port to finish instead of sending multiple create/delete port? Thanks Chandan ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [nova] key management and Cinder volume encryption
On 09/03/2013 09:27 PM, Bryan D. Payne wrote: How can someone use your code without a key manager? Some key management mechanism is required although it could be simplistic. For example, we’ve tested our code internally with an implementation of the key manager interface that returns a single, constant key. That works for testing but doesn't address: the current dearth of key management within OpenStack does not preclude the use of our existing work within a production environment My understanding here is that users are free to use any key management mechanism that they see fit. This can be a simple return a static key option. Or it could be using something more feature rich like Barbican. Or it could be something completely home grown that is suited to a particular OpenStack deployment. I don't understand why we are getting hung up on having a key manager as part of OpenStack in order to accept this work. Clearly there are other pieces of OpenStack that have external dependencies (message queues, to name one). External dependencies are fine, obviously. The difference is whether we actually have code to interface with those external dependencies. We have code to talk to databases and message queues. There's no code right now to interface with anything for key management. The request here is for something that allows this to be used without having to modify or add code to Nova. I, for one, am looking forward to using this feature and would be very disappointed to see it pushed back for yet another release. It's not like I'm happy about it, but it needs more code. Is a feature complete if no one can use it? I am happy with a less then secure but fully functional key manager. But with no key manager that can be used in a real deployment, what is the value of including this code? Of course people can use it. They just need to integrate with some solution of the deployment's choosing that provides key management capabilities. And, of course, if you choose to not use the volume encryption then you don't need to worry about it at all. As noted above, the integration effort takes code. We need that code so that the feature can be used. I've watched this feature go through many, many iterations throughout both the Grizzly and Havana release cycles. The authors have been working hard to address everyone's concerns. In fact, they have navigated quite a gauntlet to get this far. And what they have now is an excellent, working solution. Let's accept this nice security enhancement and move forward. I agree that they have worked hard. It's much appreciated. We have held other features to this same standard. See the discussion about live snapshots / cloning fairly recently for one such example. We require that there be code in the tree that makes the feature usable. That's where we are with this. If a simple return a static key is deemed useful, I suspect that could be put together in time. From talking to Joel on IRC, it seemed that it wasn't worth it. This is one of those cases where we have to make a tough call, but after reviewing the concerns raised, the answer is that without some additional code to make it usable without modifications or additions, the feature is deferred to Icehouse. -- Russell Bryant ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [qa] How to do nova v3 tests in tempest
hi, I'm working on bp:nova-v3-tests in tempest. The nova tests in tempest mostly have been ported into v3 and sent off. but we got some feedbacks that there was mass code duplication and suggested to do this by inheritance. So I have sent another patch to do this by inheritance. But in this way, another issue is not easy to drop v2 client and tests. I want to get more feedbacks about this blue-print to make sure we do this in the right way, which is the better one or is there another better way? I'd appreciate every suggestion and comment. the first way to do this in separate files: https://review.openstack.org/#/c/39609/ and https://review.openstack.org/#/c/39621/6 the second way to do this by inheritance. https://review.openstack.org/#/c/44876/ Thanks Best Regards Ivan ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?
whenever I run devstack keystone falies to start because dogpile.cache is not installed; this is easily solved by installing it, but I wonder if it should be in requirements.txt Also, since the cache appears to be disabled by default (and I'm not enabling it in my localrc), I'm not sure why I am hitting this error, as I would expect the caching module to not be loaded at all. any help will be appreciated Salvatore keystone rev: ead4f98 devstack rev: 3644724 ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?
On Wed, Sep 4, 2013 at 9:14 AM, Salvatore Orlando sorla...@nicira.comwrote: whenever I run devstack keystone falies to start because dogpile.cache is not installed; this is easily solved by installing it, but I wonder if it should be in requirements.txt Also, since the cache appears to be disabled by default (and I'm not enabling it in my localrc), I'm not sure why I am hitting this error, as I would expect the caching module to not be loaded at all. That sounds like a bug! It should only be a hard requirement if keystone.conf [cache] enabled=True any help will be appreciated Salvatore keystone rev: ead4f98 devstack rev: 3644724 ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- -Dolph ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?
On Wed, Sep 4, 2013 at 9:58 AM, David Stanek dsta...@dstanek.com wrote: On Wed, Sep 4, 2013 at 10:23 AM, Dolph Mathews dolph.math...@gmail.comwrote: On Wed, Sep 4, 2013 at 9:14 AM, Salvatore Orlando sorla...@nicira.comwrote: whenever I run devstack keystone falies to start because dogpile.cache is not installed; this is easily solved by installing it, but I wonder if it should be in requirements.txt Also, since the cache appears to be disabled by default (and I'm not enabling it in my localrc), I'm not sure why I am hitting this error, as I would expect the caching module to not be loaded at all. That sounds like a bug! It should only be a hard requirement if keystone.conf [cache] enabled=True Currently keystone.assignment.core imports keystone.common.cache with ends up depending on dogpile. The current implementation does depend on dogpile even if caching isn't being used. ++ I just poked around with making it an optional dependency and it looks like it would require quite a bit of refactoring... probably too much this late in the cycle. -- David blog: http://www.traceback.org twitter: http://twitter.com/dstanek www: http://dstanek.com ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- -Dolph ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [nova] Revert Baremetal v3 API extension?
On 09/04/2013 10:26 AM, Dan Smith wrote: Hi all, As someone who has felt about as much pain as possible from the dual-maintenance of the v2 and v3 API extensions, I felt compelled to bring up one that I think we can drop. The baremetal extension was ported to v3 API before (I think) the decision was made to make v3 experimental for Havana. There are a couple of patches up for review right now that make obligatory changes to one or both of the versions, which is what made me think about this. Since Ironic is on the horizon and was originally slated to deprecate the in-nova-tree baremetal support for Havana, and since v3 is only experimental in Havana, I think we can drop the baremetal extension for the v3 API for now. If Nova's baremetal support isn't ready for deprecation by the time we're ready to promote the v3 API, we can re-introduce it at that time. Until then, I propose we avoid carrying it for a soon-to-be-deprecated feature. Thoughts? Sounds reasonable to me. Anyone else have a differing opinion about it? -- Russell Bryant ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?
On Wed, Sep 4, 2013 at 9:34 AM, Salvatore Orlando sorla...@nicira.comwrote: Is the cache module enabled on the devstack gate? If not, it's definetely an issue on my side - otherwise we would have known about this. On a second look, dogpile.cache is actually required by requirements.txt, so you *should* have it installed, even though it won't be used :-/ https://github.com/openstack/keystone/blob/6979ae010d1fa20caeda13c8f88cdf6dbfa259c6/requirements.txt#L22 Salvatore On 4 September 2013 15:23, Dolph Mathews dolph.math...@gmail.com wrote: On Wed, Sep 4, 2013 at 9:14 AM, Salvatore Orlando sorla...@nicira.comwrote: whenever I run devstack keystone falies to start because dogpile.cache is not installed; this is easily solved by installing it, but I wonder if it should be in requirements.txt Also, since the cache appears to be disabled by default (and I'm not enabling it in my localrc), I'm not sure why I am hitting this error, as I would expect the caching module to not be loaded at all. That sounds like a bug! It should only be a hard requirement if keystone.conf [cache] enabled=True any help will be appreciated Salvatore keystone rev: ead4f98 devstack rev: 3644724 ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- -Dolph ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- -Dolph ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?
Is the cache module enabled on the devstack gate? If not, it's definetely an issue on my side - otherwise we would have known about this. Salvatore On 4 September 2013 15:23, Dolph Mathews dolph.math...@gmail.com wrote: On Wed, Sep 4, 2013 at 9:14 AM, Salvatore Orlando sorla...@nicira.comwrote: whenever I run devstack keystone falies to start because dogpile.cache is not installed; this is easily solved by installing it, but I wonder if it should be in requirements.txt Also, since the cache appears to be disabled by default (and I'm not enabling it in my localrc), I'm not sure why I am hitting this error, as I would expect the caching module to not be loaded at all. That sounds like a bug! It should only be a hard requirement if keystone.conf [cache] enabled=True any help will be appreciated Salvatore keystone rev: ead4f98 devstack rev: 3644724 ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- -Dolph ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] Cinder Backup documentation - to which doc it should go?
Hi Ronan, I have a bug open (which I am guilty of letting slip) to amend to cinder backup docs: https://bugs.launchpad.net/openstack-manuals/+bug/1205359 I implemented the Ceph backup driver a while back and was intending to have a cleanup of the backup section in the docs while adding info on backup to Ceph. Did you get round to implementing your changes? If so can we get info on ceph backup in there too? (if not I'll get my arse in gear and do it myself). Ed. On 03/09/13 11:50, Ronen Kat wrote: I noticed the complains about code submission without appropriate documentation submission, so I am ready to do my part for Cinder backup I have just one little question. Not being up to date on the current set of OpenStack manuals, and as I noticed that the block storage admin guide lost a lot of content, to which document(s) should I add the Cinder backup documentation? The documentation includes: 1. Backup configuration 2. General description of Cinder backup (commands, features, etc) 3. Description of the available backup drivers Should all three go to the same place? Or different documents? Thanks, Regards, __ Ronen I. Kat Storage Research IBM Research - Haifa Phone: +972.3.7689493 Email: ronen...@il.ibm.com ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [nova] Revert Baremetal v3 API extension?
Russell Bryant wrote: On 09/04/2013 10:26 AM, Dan Smith wrote: Hi all, As someone who has felt about as much pain as possible from the dual-maintenance of the v2 and v3 API extensions, I felt compelled to bring up one that I think we can drop. The baremetal extension was ported to v3 API before (I think) the decision was made to make v3 experimental for Havana. There are a couple of patches up for review right now that make obligatory changes to one or both of the versions, which is what made me think about this. Since Ironic is on the horizon and was originally slated to deprecate the in-nova-tree baremetal support for Havana, and since v3 is only experimental in Havana, I think we can drop the baremetal extension for the v3 API for now. If Nova's baremetal support isn't ready for deprecation by the time we're ready to promote the v3 API, we can re-introduce it at that time. Until then, I propose we avoid carrying it for a soon-to-be-deprecated feature. Thoughts? Sounds reasonable to me. Anyone else have a differing opinion about it? +1 -- Thierry Carrez (ttx) ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?
This was an intentional design to depend on dogpile.cache due to the mechanism of caching (using decorators). This is partially the nature of the method of caching implementation. It should have been installed in devstack based upon the requirements.txt having it in there. Making it an optional import is likely going to take a significant amount of refactoring. My guess is that it's going to be a bit late in the cycle, but we will see what comes up. --Morgan Fainberg IRC: morganfainberg On Wed, Sep 4, 2013 at 8:21 AM, Dolph Mathews dolph.math...@gmail.comwrote: On Wed, Sep 4, 2013 at 9:58 AM, David Stanek dsta...@dstanek.com wrote: On Wed, Sep 4, 2013 at 10:23 AM, Dolph Mathews dolph.math...@gmail.comwrote: On Wed, Sep 4, 2013 at 9:14 AM, Salvatore Orlando sorla...@nicira.comwrote: whenever I run devstack keystone falies to start because dogpile.cache is not installed; this is easily solved by installing it, but I wonder if it should be in requirements.txt Also, since the cache appears to be disabled by default (and I'm not enabling it in my localrc), I'm not sure why I am hitting this error, as I would expect the caching module to not be loaded at all. That sounds like a bug! It should only be a hard requirement if keystone.conf [cache] enabled=True Currently keystone.assignment.core imports keystone.common.cache with ends up depending on dogpile. The current implementation does depend on dogpile even if caching isn't being used. ++ I just poked around with making it an optional dependency and it looks like it would require quite a bit of refactoring... probably too much this late in the cycle. -- David blog: http://www.traceback.org twitter: http://twitter.com/dstanek www: http://dstanek.com ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- -Dolph ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] upgrade tox - now with less slowness!
Because we landed a patch to tox upstream to use setup.py develop instead of sdist+install like our run_tests.sh scripts do - this means that with the new tox config changes, tox runs should be just as quick as run_tests.sh runs. So. Freaking. Awesome. --Dan ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [qa] [neutron] Neutron tests in tempest
It's great that new neutron tests are being submitted to Tempest. There is an issue that the only active neutron tests in the gate are smoke tests. Until the full gate can be enabled, please tag any new neutron tests as 'smoke' so they run in the gate jobs. Thanks. -David ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] upgrade tox - now with less slowness!
NICE!! On Wed, Sep 4, 2013 at 11:05 AM, Dan Smith d...@danplanet.com wrote: Because we landed a patch to tox upstream to use setup.py develop instead of sdist+install like our run_tests.sh scripts do - this means that with the new tox config changes, tox runs should be just as quick as run_tests.sh runs. So. Freaking. Awesome. --Dan ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [nova] key management and Cinder volume encryption
The following change provides a key manager implementation that reads a static key from the project's configuration: https://review.openstack.org/#/c/45103/ This key manager implementation naturally does not provide the same confidentiality that would be proffered by retrieving keys from a service like Barbican or a KMIP server, but it still provides protection against certain attacks like intercepting iSCSI traffic between the compute and storage host and lost / stolen disks. From: Bryan D. Payne [mailto:bdpa...@acm.org] Sent: Wednesday, September 04, 2013 9:47 AM To: OpenStack Development Mailing List Subject: Re: [openstack-dev] [nova] key management and Cinder volume encryption External dependencies are fine, obviously. The difference is whether we actually have code to interface with those external dependencies. We have code to talk to databases and message queues. There's no code right now to interface with anything for key management. Ok, this makes sense. I generally assume that people deploying OpenStack have some integration work to do anyway. So, for me, writing a few python methods isn't much different than writing a configuration file. Having said this, I do understand where you are coming from here. I do believe that a static key configuration is a useful starting place for a lot of users. I spoke with Joel this morning and I think he is going to try to put together an example key management driver that does this today. Such a solution would allow deployers to use their existing orchestration tools to write a key to a configuration file. Cheers, -bryan ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] upgrade tox - now with less slowness!
On 09/04/2013 01:22 PM, Dolph Mathews wrote: On Wed, Sep 4, 2013 at 10:56 AM, Monty Taylor mord...@inaugust.com mailto:mord...@inaugust.com wrote: Hey all! https://review.openstack.org/#/c/42178/2 has landed in nova, which means that nova now requires tox 1.6 or higher (for those folks using tox). We'll be wanting to port the same change to all of the projects, so if you use tox for anything, you'll want to go ahead and upgrade. Why? Because we landed a patch to tox upstream to use setup.py develop instead of sdist+install like our run_tests.sh scripts do - this means that with the new tox config changes, tox runs should be just as quick as run_tests.sh runs. Other than speed, it also gets more correctness, as before the process ran sdist with system python, even if that wasn't the python that was to be used for the test run. YAY! Can we kill run_tests.sh now? Probably in another cycle - there are still things we need from the testr ui that we have to punt to run_tests.sh for now. For instance, running a single test in debug mode right now is WAY easier in run_tests.sh. Enjoy! Monty ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org mailto:OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- -Dolph ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Savanna] Guidance for adding a new plugin (CDH)
On 09/04/2013 04:06 PM, Andrei Savu wrote: Hi guys - I have just started to play with Savanna a few days ago - I'm still going through the code. Next week I want to start to work on a plugin that will deploy CDH using Cloudera Manager. What process should I follow? I'm new to launchpad / Gerrit. Should I start by creating a blueprint and a bug / improvement request? Savanna is following all OpenStack community practices so you can check out https://wiki.openstack.org/wiki/How_To_Contribute to get a good idea of what to do. In short, yes please use launchpad and gerrit and create a blueprint. Is there any public OpenStack deployment that I can use for testing? Should 0.2 work with Grizzly at trystack.org http://trystack.org? 0.2 will work with Grizzly. I've not tried trystack so let us know if it works. Best, matt ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Neutron] The three API server multi-worker process patches.
Was any consensus on this ever reached? It appears both reviews are still open. I'm partial to review 37131 as it attacks the problem a more concisely, and, as mentioned, combined the efforts of the two more effective patches. I would echo Carl's sentiments that it's an easy review minus the few minor behaviors discussed on the review thread today. We feel very strongly about these making it into Havana -- being confined to a single neutron-server instance per cluster or region is a huge bottleneck--essentially the only controller process with massive CPU churn in environments with constant instance churn, or sudden large batches of new instance requests. In Grizzly, this behavior caused addresses not to be issued to some instances during boot, due to quantum-server thinking the DHCP agents timed out and were no longer available, when in reality they were just backlogged (waiting on quantum-server, it seemed). Is it realistically looking like this patch will be cut for h3? -- Brian Cline Software Engineer III, Product Innovation SoftLayer, an IBM Company 4849 Alpha Rd, Dallas, TX 75244 214.782.7876 direct | bcl...@softlayer.com -Original Message- From: Baldwin, Carl (HPCS Neutron) [mailto:carl.bald...@hp.com] Sent: Wednesday, August 28, 2013 3:04 PM To: Mark McClain Cc: OpenStack Development Mailing List Subject: [openstack-dev] [Neutron] The three API server multi-worker process patches. All, We've known for a while now that some duplication of work happened with respect to adding multiple worker processes to the neutron-server. There were a few mistakes made which led to three patches being done independently of each other. Can we settle on one and accept it? I have changed my patch at the suggestion of one of the other 2 authors, Peter Feiner, in attempt to find common ground. It now uses openstack common code and therefore it is more concise than any of the original three and should be pretty easy to review. I'll admit to some bias toward my own implementation but most importantly, I would like for one of these implementations to land and start seeing broad usage in the community earlier than later. Carl Baldwin PS Here are the two remaining patches. The third has been abandoned. https://review.openstack.org/#/c/37131/ https://review.openstack.org/#/c/36487/ ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [Nova][vmware] VMwareAPI sub-team reviews update 2013-09-04
It's feature-freeze-eve. Here's where we sit tonight. Many of our blueprints are on the cusp of making it in. For review, rules on Feature freeze. # https://wiki.openstack.org/wiki/FeatureFreeze ... blueprint reviews by readiness ... Needs one more core review/approval: * NEW, https://review.openstack.org/#/c/30282/ ,'VMware: Multiple cluster support using single compute service' https://blueprints.launchpad.net/nova/+spec/multiple-clusters-managed-by-one-service core votes,1, non-core votes,4, down votes, 0 Ready for core reviewer: * NEW, https://review.openstack.org/#/c/37819/ ,'VMware image clone strategy settings and overrides' https://blueprints.launchpad.net/nova/+spec/vmware-image-clone-strategy core votes,0, non-core votes,6, down votes, 0 Needs reviews: * NEW, https://review.openstack.org/#/c/35633/ ,'Enhance the vCenter driver to support FC volume attach' https://blueprints.launchpad.net/nova/+spec/fc-support-for-vcenter-driver core votes,0, non-core votes,2, down votes, 0 Havana Blueprints by order of importance: === #1. https://blueprints.launchpad.net/nova/+spec/multiple-clusters-managed-by-one-service * https://review.openstack.org/#/c/30282/ - one more +2 #2 https://blueprints.launchpad.net/nova/+spec/vmware-nova-cinder-support * https://review.openstack.org/#/c/40105/ - Merged! * https://review.openstack.org/#/c/40245/ - has +2s waiting? * https://review.openstack.org/#/c/41387/ - needs +2s #3 https://blueprints.launchpad.net/cinder/+spec/vmware-vmdk-cinder-driver * https://review.openstack.org/#/c/41600/ - Merged! * https://review.openstack.org/#/c/43465/ - needs rebase (merge failed) #4 https://blueprints.launchpad.net/nova/+spec/deploy-vcenter-templates-from-vmware-nova-driver * https://review.openstack.org/#/c/34903/ - needs revision #5 https://blueprints.launchpad.net/nova/+spec/improve-vmware-disk-usage * https://review.openstack.org/#/c/37659/ - needs revision #6 https://blueprints.launchpad.net/nova/+spec/vmware-image-clone-strategy * https://review.openstack.org/#/c/37819/ - needs +2s === Meeting info: * https://wiki.openstack.org/wiki/Meetings/VMwareAPI * If anything is missing, add 'hartsocks' as a reviewer to the patch so I can examine it. * We hang out in #openstack-vmware if you need to chat. # Shawn Hartsock ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [Neturon] VPNaaS
Hi folks We could merged VPNaaS DB and Driver and CLI for neutron. # heat support also looks like merged! This is a demo video http://www.youtube.com/watch?v=6qqCRqBwMUY This is latest how to install vpn https://wiki.openstack.org/wiki/Quantum/VPNaaS/HowToInstall The last part is Horizon support. https://review.openstack.org/#/c/34882/ so it is great if we can help test VPNaaS function and Horizon. It is also helpful if you could test it with existing network gears also. Best Nachi ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [CI] can't receive mails from Jenkins
Hi, all I have faced this problem about 15 hours ago. Some activities here now didn't notice me by mails: https://review.openstack.org/#/c/45081/ https://review.openstack.org/#/c/45031/ Is this a personal issue or general one? or an old problem? -- Gareth *Cloud Computing, OpenStack, Fitness, Basketball* *OpenStack contributor* *Company: UnitedStack http://www.ustack.com* *My promise: if you find any spelling or grammar mistakes in my email from Mar 1 2013, notify me * *and I'll donate $1 or ￥1 to an open organization you specify.* ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [Openstack] Does openstack python API support vsphere?
Install python-suds on the nodes to speak to the vsphere API. See http://docs.openstack.org/trunk/openstack-compute/admin/content/vmware.html Hope this helps. On Wed, Sep 4, 2013 at 3:03 AM, openstack learner openstacklea...@gmail.com wrote: Hi all, I am new to openstack, can anyone tell me if the openstack nova python API support vsphere? Thanks a lot xin ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] I18n meeting tomorrow
Hi, There will be OpenStack I18n team meeting at 0700UTC on Thursday (September 5th) in IRC channel #openstack-meeting. The time, we use Asia/Europe friendly time. Welcome to join the meeting. During the previous several weeks, we have good progress with the infrastructure setting up in Transifex. We have the common glossary shared within all openstack projects. We have Horizon ready for translations. Tomorrow is the string frozen date. Now it's the quite important time for translating now. We want to make sure Horizon can have the high quality internationalized release for Havanna version. If you are interested in translations or tools, welcome to join us. We will cover following topics this time: Action items from the last meeting Horizon I18n version release process Translated document publish process Open discussion For more details, please look into https://wiki.openstack.org/wiki/Meetings/I18nTeamMeeting. You can also contact us through IRC channel #openstack-translation, or mailing address: openstack-i...@list.openstack.org. Please refer to our wiki page for more details: https://wiki.openstack.org/wiki/I18nTeam Best regards Daisy___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] Neutron limitations with free/libre plugins. What are they ?
Looking here http://openstack.redhat.com/Neutron_with_OVS_and_VLANs I can read the following: Numerous limitations have been identified which prevent using free/libre plugins such as OpenVSwitch or LinuxBridge for large scale deployments. Can someone ellaborate on these limitations ? One question comes to my mind, what happens when a VM is migrated from one compute node to another. Thanks in advance Chris ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] Informations aboute Trove
Dear all, I am a developer interested to the Databases as a Service, and in particular for creation of relational and non-relational databases. So I joined the Trove project ( https://wiki.openstack.org/wiki/Trove#Mission_Statement). Using the latest release of Openstack and Trove, it seems that I can't create either a non-relational database or a relational database using another engine (eg, Postgres) . 1) Is there a mailing list relate to the Trove project in which I can forward questions about it? For example, I would modify the source code in order to allow the use of others engine. 2) When the Trove project will be inserted into the new releas of Openstack? Thank you very much. Giuiseppe ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Cinder question
unfortunately, I don't think so Mark Razique Mahroua-Nuage Corazique.mahr...@gmail.comTel: +33 9 72 37 94 15 Le 4 sept. 2013 à 01:25, Mark Brown ntdeveloper2...@yahoo.com a écrit :Hello,I had a Cinder question, and maybe its pretty basic:-)Isn't there a way to attach the same Cinder volume to two different VMs, whether same physical server or different? I don't mean across different data centers, but any domain (zone, or whatever) within the same data center?Thanks.___Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstackPost to : openstack@lists.openstack.orgUnsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack signature.asc Description: Message signed with OpenPGP using GPGMail ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Managing iptables with OpenStack Folsom (using Quantum)
That's rightNot redone everytime but updated and checked non-stopWhen you restart the services then yes, everything is flushed and redone, so if you manually enter some iptables rules, they won't persist afterwards :) Razique Mahroua-Nuage Corazique.mahr...@gmail.comTel: +33 9 72 37 94 15 Le 3 sept. 2013 à 19:31, Craig E. Ward cw...@isi.edu a écrit :Razique,Thanks for the response.If I understand you correctly, you're saying that the iptables rules are redone by nova-compute or the quantum agents every time a network is added or removed and because of that, static rules will be lost. Is that correct?The installation I'm working with provides pre-configured networks for instances to use. If the available networks is stable, should not the static rules survive?CraigOn 08/29/2013 03:36 PM, Razique Mahroua wrote:That means you shouldn't use iptables for your custom rules since OpenStackmanages iptables and everytime the network is updated, iptables is impacted. Ifyou restart nova-netork for instance, then all the iptables rules are flushedand recreated according to your network topology.The iptables service doesn't need to be turned off (is that even possible?),just make sure not to create routing rules manually that might conflict with therules OpenStack sets :)*Razique Mahroua** - **Nuage Co*razique.mahr...@gmail.com mailto:razique.mahr...@gmail.comTel : +33 9 72 37 94 15Le 28 août 2013 à 19:08, Craig E. Ward cw...@isi.edu mailto:cw...@isi.edu aécrit :I have an OpenStack Folsom, with Quantum networking, installation that I'mhaving trouble getting additional rules into the iptables on nova-computenodes. The online manual(http://docs.openstack.org/trunk/openstack-ops/content/iptables.html) statesthat "You must use OpenStack to manage iptables." What it doesn't include isany indication of how that is done. How can iptables be managed with OpenStack?When I add rules to the file /etc/sysconfig/iptables, sometimes thenova-compute service fails to work properly. A new instance on the node maynot get an IP address or the vnc service in Horizon does not respond. Theinstance is listed in the database with an assigned IP, but the address is notreachable.Does the iptables service need to be "off" in the context of chkconfig? Thatis, don't let it start through the rc sequence, but let nova-compute start itand populate the rules?If iptables is started in the rc sequence, then are there some rules thatshould not be in /etc/sysconfig/iptables?If the rc sequence is not used, how do ports unrelated to OpenStack servicesget enabled?Does the default response for a packet sent to non-OpenStack related port dropthe packet or let it pass?Thanks,Craig--Craig E. WardInformation Sciences InstituteUniversity of Southern Californiacw...@isi.edu mailto:cw...@isi.edu___Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstackPost to : openstack@lists.openstack.orgUnsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-- Craig E. WardInformation Sciences InstituteUniversity of Southern Californiacw...@isi.edu signature.asc Description: Message signed with OpenPGP using GPGMail ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] [Cloudpipe] where can I find Cloudpipe blueprint or wiki ?
Thanks . ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] Minutes from the Technical Committee meeting (Sept 3)
The OpenStack Technical Committee (TC) met in #openstack-meeting at 20:00 UTC yesterday. Here is a quick summary of the outcome of this meeting: * The Marconi project (queue service) was approved for incubation during the Icehouse cycle * The Trove project (database as a service) graduated from incubation and will be part of the OpenStack Icehouse integrated release in Spring 2014. See details and full logs at: http://eavesdrop.openstack.org/meetings/tc/2013/tc.2013-09-03-20.01.html More information on the Technical Committee at: http://wiki.openstack.org/Governance/TechnicalCommittee -- Thierry Carrez (ttx) Chair, OpenStack Technical Committee ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] [Cloudpipe] where can I find Cloudpipe blueprint or wiki ?
Thanks. ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Cinder question
This is a must!! It would be great to attach 1 volume, to multiple instances!! Sounds pretty basic, since it uses iSCSI, there is no reason to not allow this... Cheers! Thiago On 3 September 2013 20:25, Mark Brown ntdeveloper2...@yahoo.com wrote: Hello, I had a Cinder question, and maybe its pretty basic:-) Isn't there a way to attach the same Cinder volume to two different VMs, whether same physical server or different? I don't mean across different data centers, but any domain (zone, or whatever) within the same data center? Thanks. ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Help - swift with low IOPS
Hi, If all your requests are PUT, then the expected network bandwidth should be: 3000*500/1024*8 = 11718.75Mbps , which means more than 10Gbps According to your environment, there are 2 proxies ( giga network?) and that is far away from the expectation. For example, in our production there are also 2 proxies with giga network bandwith, 5 nodes each with 3T*12. The limit of the performance is about 600Mbps. We think that hit the bottleneck of the network. Uploading large objects will consume more network bandwidth and lower CPU, so 1st step you'd better improve your network to meet your requirement. Best Regards, Jonathan Lu On 2013/9/4 16:18, pangj wrote: Hi, How does a setup make swift have the capability of 3000 TPS, for the average size 500KB of files? What architecture, hardware, network etc will be expected? Thanks for any suggestion. On 2013-9-3 17:11, pangj wrote: Thanks for the info. I have checked this one days ago. Given the case, in the production environment, we have 3 nodes with SSD for account/container servers, 5 nodes each with 2T * 10 for object storage servers. Currently having two proxies. All servers are 16 core CPU powered, storage server (account/container/object) has 48GB memory, proxy has 16GB memory. The average size for an object is about 500KB, there are many containers (more than 100 millions), but objects under each container are few (less than 20). There is only one account for TempAuth. Is there any better way to optimize the architecture? Regards. ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] [Cloudpipe] where can I find Cloudpipe blueprint or wiki ?
http://docs.openstack.org/trunk/openstack-compute/admin/content/cloudpipe-per-project-vpns.htmlhttp://docs.openstack.org/developer/nova/devref/cloudpipe.html Razique Mahroua-Nuage Corazique.mahr...@gmail.comTel: +33 9 72 37 94 15 Le 4 sept. 2013 à 10:09, happy idea guolongcang.w...@gmail.com a écrit :Thanks. ___Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstackPost to : openstack@lists.openstack.orgUnsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack signature.asc Description: Message signed with OpenPGP using GPGMail ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] Update Swift to 1.9
Hi all, currently i used swift 1.6.0, how can i update to recent swift 1.9 ? thanks -- Regards, Mahardhika Gilang ** ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Cinder question
Guys, You might want to have a look at https://blueprints.launchpad.net/cinder/+spec/multi-attach-volume Its already proposed Best Regards, Swapnil Kulkarni swapnilkulkarni2...@gmail.com +91-87960 10622(c) http://in.linkedin.com/in/coolsvap On Wed, Sep 4, 2013 at 2:24 PM, Razique Mahroua razique.mahr...@gmail.comwrote: It doesn't necessarily uses iscsi, but yes I definitely agree man ! Le 4 sept. 2013 à 10:37, Martinx - ジェームズ thiagocmarti...@gmail.com a écrit : This is a must!! It would be great to attach 1 volume, to multiple instances!! Sounds pretty basic, since it uses iSCSI, there is no reason to not allow this... Cheers! Thiago On 3 September 2013 20:25, Mark Brown ntdeveloper2...@yahoo.com wrote: Hello, I had a Cinder question, and maybe its pretty basic:-) Isn't there a way to attach the same Cinder volume to two different VMs, whether same physical server or different? I don't mean across different data centers, but any domain (zone, or whatever) within the same data center? Thanks. ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] [cinder] Where is current Dell EqualLogic eqlx.py driver?
Hi All, I'm trying to find the cinder DellEQLSanISCSIDriver for either Grizzly or Havana (grizzly for preference). I thought this was brought into the main tree at https://github.com/openstack/cinder.git but I seem to be wrong about that. I've also looked in a bunch of Dell and Mirantis github barclamp-cinder repos which have the eqlx.py file I need but it hasn't been updated in 10 months and is importing things from all the wrong places (well a couple of wrong places), their pretty fixable places but it's probably unwise to be 10 months behind in other ways too. Given the people behind this I doubt it's gone away, can someone point me to where it's gone to? -Jon ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] [cinder] Where is current Dell EqualLogic eqlx.py driver?
got a quick answer on IRC though (thanks eharney), for any who find this thread in the future answer is it is currently under review at https://review.openstack.org/#/c/43944/ On Wed, Sep 4, 2013 at 8:14 AM, Jonathan Proulx j...@jonproulx.com wrote: Hi All, I'm trying to find the cinder DellEQLSanISCSIDriver for either Grizzly or Havana (grizzly for preference). I thought this was brought into the main tree at https://github.com/openstack/cinder.git but I seem to be wrong about that. I've also looked in a bunch of Dell and Mirantis github barclamp-cinder repos which have the eqlx.py file I need but it hasn't been updated in 10 months and is importing things from all the wrong places (well a couple of wrong places), their pretty fixable places but it's probably unwise to be 10 months behind in other ways too. Given the people behind this I doubt it's gone away, can someone point me to where it's gone to? -Jon ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Quantum/Grizzly - Instance doesn't get IP
Hi Happy, thanks for your reply.
I checked this guide, but I already have dhcp-agent installed.
root@network:~# apt-get -y install quantum-plugin-openvswitch-agent
quantum-dhcp-agent quantum-l3-agent quantum-metadata-agent
Reading package lists... Done
Building dependency tree
Reading state information... Done
quantum-dhcp-agent is already the newest version.
quantum-l3-agent is already the newest version.
quantum-metadata-agent is already the newest version.
quantum-plugin-openvswitch-agent is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
I also checked the settings that this guide and I added some options
that I had not configured. Now the error No active DHCP agents doesn't
appears more, but the error (in the Controler (quantum-server)) still
appears below:
2013-09-04 08:25:48 WARNING [quantum.db.agentschedulers_db] Fail
scheduling network {'status': u'ACTIVE', 'subnets':
[u'80b21701-4b05-4585-985a-60905ff42531'], 'name': u'public',
'provider:physical_network': None, 'admin_state_up': True, 'tenant_id':
u'27d2b93f11ac4e91a3edb26edb28fb6b', 'provider:network_type': u'gre',
'router:external': True, 'shared': False, 'id':
u'b3e465b7-b5a2-45d5-8b24-aa8bea0ab0a0', 'provider:segmentation_id': 2L}
And in all hosts (computer, networking and controller), I have the error:
# quantum agent-list
Unknown command ['agent-list']
At my network node:
tail -n 10 /var/log/openvswitch/ovs-vswitchd.log
Sep 04 09:27:23|09614|netdev_linux|WARN|ioctl(SIOCGIFINDEX) on
tap91e05e25-7f device failed: No such device
Sep 04 09:27:32|09615|netdev|WARN|Dropped 253 log messages in last 12
seconds (most recently, 1 seconds ago) due to excessive rate
Sep 04 09:27:32|09616|netdev|WARN|failed to get flags for network device
tap91e05e25-7f: No such device
Sep 04 09:27:33|09617|netdev_linux|WARN|Dropped 7 log messages in last
10 seconds (most recently, 5 seconds ago) due to excessive rate
Sep 04 09:27:33|09618|netdev_linux|WARN|ioctl(SIOCGIFINDEX) on
tap91e05e25-7f device failed: No such device
Sep 04 09:27:44|09619|netdev|WARN|Dropped 231 log messages in last 12
seconds (most recently, 1 seconds ago) due to excessive rate
Sep 04 09:27:44|09620|netdev|WARN|failed to get flags for network device
tap91e05e25-7f: No such device
Sep 04 09:27:48|09621|netdev_linux|WARN|Dropped 11 log messages in last
15 seconds (most recently, 5 seconds ago) due to excessive rate
Sep 04 09:27:48|09622|netdev_linux|WARN|ioctl(SIOCGIFINDEX) on
tap91e05e25-7f device failed: No such device
(quantum) net-list
+--+--+---+
| id | name |
subnets |
+--+--+---+
| a8f7c937-e8d0-4952-bff6-7d364335df22 | demo-net |
fd7f324c-25ec-4134-ab97-e827fcf12824 10.5.5.0/24 |
| b3e465b7-b5a2-45d5-8b24-aa8bea0ab0a0 | public |
80b21701-4b05-4585-985a-60905ff42531 xxx.xxx.xxx.0/24 |
+--+--+---+
(quantum) port-list
+--+--+---++
| id | name | mac_address |
fixed_ips |
+--+--+---++
| 65c5b6cf-5eef-483e-8b32-8cd07bb83e6d | | fa:16:3e:58:29:31 |
{subnet_id: 80b21701-4b05-4585-985a-60905ff42531, ip_address:
xxx.xxx.xxx.166} |
| 806b3d3e-35fe-4356-a833-a8a3d44ec9ca | | fa:16:3e:7c:00:24 |
{subnet_id: fd7f324c-25ec-4134-ab97-e827fcf12824, ip_address:
10.5.5.1}|
| 91e05e25-7f7b-4399-9da2-42fef05afe31 | | fa:16:3e:fe:63:6c |
{subnet_id: fd7f324c-25ec-4134-ab97-e827fcf12824, ip_address:
10.5.5.2}|
| a9043279-dd30-40b7-a1e3-8d340c5408c3 | | fa:16:3e:71:60:57 |
{subnet_id: 80b21701-4b05-4585-985a-60905ff42531, ip_address:
xxx.xxx.xxx.165} |
+--+--+---++
(quantum) router-list
+--+-++
| id | name|
external_gateway_info |
+--+-++
| 3a703f92-e1d5-4f06-8970-8ae899d40a99 | demo-router | {network_id:
b3e465b7-b5a2-45d5-8b24-aa8bea0ab0a0} |
+--+-++
(quantum)
[Openstack] Problem with floating IP
Hi everybody, I'm trying to deploy Openstack with Quantum networking on one node. I did all-in-one installation, then disabled nova-networking and installed Quantum networking. I configured internal networking with network address: 192.168.32.0/24. My host is connected to 10.133.31.128/27 company network in which I have few empty addresses which can be assigned to my VM's. I used my eth0 interface on host (which is in company network) as an external bridge and my eth1 as an internal bridge for VM's. I was following configuration written in this topic http://openstack.redhat.com/forum/discussion/comment/611 My topology is: http://s8.postimg.org/iaastbzx1/topology.jpg When I do 2 VM I can successfully assigned them with Internal addresses an also floating IP's. I can ping between them using internal address, but I can't ping my br-int address and cannot ping VM's from my host, floating addresses are useless. I cannot understand one thing. When I'm on server SV1 and want to ping VM1. Theoretically they are on the same subnet (10.133.31.128/27, beacuse I use free adresses from this subnet). But the real path is by the **br-ex and then OpenStack router**. How my SV1 and also switch SW know the correct path to VM1? Is floating IP telling the switch that the path to VM1 is on the same interface as it can reach br-ex (eth0) interface? Here is screenshot of my instances: http://s11.postimg.org/5btsqsfzm/instances.jpg and my network topology: http://s21.postimg.org/dkfhbgepj/network.jpg Thank you for your help. ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] Quantum/Grizzly - Instance doesn't get IP
Hi Marcelo!
Seems that you haven't got quantum client installed, and probably you have
some missing packages as well.
My advice is, restart from scratch again but follow the guide that Happy
advised you
https://github.com/mseknibilel/OpenStack-Grizzly-Install-Guide/blob/OVS_Mul
tiNode/OpenStack_Grizzly_Install_Guide.rst
https://github.com/mseknibilel/OpenStack-Grizzly-Install-Guide/blob/OVS_Mult
iNode/OpenStack_Grizzly_Install_Guide.rst
Good luck
Claudio Marques
mailto:clau...@onesource.pt clau...@onesource.pt
http://www.onesource.pt/ http://www.onesource.pt/
.
Hi Happy, thanks for your reply.
I checked this guide, but I already have dhcp-agent installed.
root@network:~# apt-get -y install quantum-plugin-openvswitch-agent
quantum-dhcp-agent quantum-l3-agent quantum-metadata-agent
Reading package lists... Done
Building dependency tree
Reading state information... Done
quantum-dhcp-agent is already the newest version.
quantum-l3-agent is already the newest version.
quantum-metadata-agent is already the newest version.
quantum-plugin-openvswitch-agent is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
I also checked the settings that this guide and I added some options that I
had not configured. Now the error No active DHCP agents doesn't appears
more, but the error (in the Controler (quantum-server)) still appears below:
2013-09-04 08:25:48 WARNING [quantum.db.agentschedulers_db] Fail scheduling
network {'status': u'ACTIVE', 'subnets':
[u'80b21701-4b05-4585-985a-60905ff42531'], 'name': u'public',
'provider:physical_network': None, 'admin_state_up': True, 'tenant_id':
u'27d2b93f11ac4e91a3edb26edb28fb6b', 'provider:network_type': u'gre',
'router:external': True, 'shared': False, 'id':
u'b3e465b7-b5a2-45d5-8b24-aa8bea0ab0a0', 'provider:segmentation_id': 2L}
And in all hosts (computer, networking and controller), I have the error:
# quantum agent-list
Unknown command ['agent-list']
At my network node:
tail -n 10 /var/log/openvswitch/ovs-vswitchd.log
Sep 04 09:27:23|09614|netdev_linux|WARN|ioctl(SIOCGIFINDEX) on
tap91e05e25-7f device failed: No such device
Sep 04 09:27:32|09615|netdev|WARN|Dropped 253 log messages in last 12
seconds (most recently, 1 seconds ago) due to excessive rate
Sep 04 09:27:32|09616|netdev|WARN|failed to get flags for network device
tap91e05e25-7f: No such device
Sep 04 09:27:33|09617|netdev_linux|WARN|Dropped 7 log messages in last 10
seconds (most recently, 5 seconds ago) due to excessive rate
Sep 04 09:27:33|09618|netdev_linux|WARN|ioctl(SIOCGIFINDEX) on
tap91e05e25-7f device failed: No such device
Sep 04 09:27:44|09619|netdev|WARN|Dropped 231 log messages in last 12
seconds (most recently, 1 seconds ago) due to excessive rate
Sep 04 09:27:44|09620|netdev|WARN|failed to get flags for network device
tap91e05e25-7f: No such device
Sep 04 09:27:48|09621|netdev_linux|WARN|Dropped 11 log messages in last 15
seconds (most recently, 5 seconds ago) due to excessive rate
Sep 04 09:27:48|09622|netdev_linux|WARN|ioctl(SIOCGIFINDEX) on
tap91e05e25-7f device failed: No such device
(quantum) net-list
+--+--+-
--+
| id | name | subnets
|
+--+--+-
--+
| a8f7c937-e8d0-4952-bff6-7d364335df22 | demo-net |
fd7f324c-25ec-4134-ab97-e827fcf12824 10.5.5.0/24 |
| b3e465b7-b5a2-45d5-8b24-aa8bea0ab0a0 | public |
80b21701-4b05-4585-985a-60905ff42531 xxx.xxx.xxx.0/24 |
+--+--+-
--+
(quantum) port-list
+--+--+---+-
---+
| id | name | mac_address |
fixed_ips
|
+--+--+---+-
---+
| 65c5b6cf-5eef-483e-8b32-8cd07bb83e6d | | fa:16:3e:58:29:31 |
{subnet_id: 80b21701-4b05-4585-985a-60905ff42531, ip_address:
xxx.xxx.xxx.166} |
| 806b3d3e-35fe-4356-a833-a8a3d44ec9ca | | fa:16:3e:7c:00:24 |
{subnet_id: fd7f324c-25ec-4134-ab97-e827fcf12824, ip_address:
10.5.5.1}|
| 91e05e25-7f7b-4399-9da2-42fef05afe31 | | fa:16:3e:fe:63:6c |
{subnet_id: fd7f324c-25ec-4134-ab97-e827fcf12824, ip_address:
10.5.5.2}|
| a9043279-dd30-40b7-a1e3-8d340c5408c3 | | fa:16:3e:71:60:57 |
{subnet_id: 80b21701-4b05-4585-985a-60905ff42531, ip_address:
xxx.xxx.xxx.165} |
+--+--+---+-
---+
(quantum) router-list
[Openstack] Novnc does not really work
Hi everybody, I'm running a grizzly openstack infrastructure and after some times and reboot i can't use novnc console from dashboard. I got a workaround with : $ nova list To get my instance ID $ nova get-vnc-console $ID novnc Then the url retrieve with last command works fiine. I took a look at nova-consolauth logs and i found no errors... Someone has an idea ? Thanks in advance. -- Yannick smime.p7s Description: S/MIME cryptographic signature ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Novnc does not really work
What browser are you using? To use the VNC client with the dashboard, the browser must support HTML5 Canvas and HTML5 WebSockets. For details about browsers that support noVNC, see https://github.com/kanaka/noVNC/blob/master/README.md, and https://github.com/kanaka/noVNC/wiki/Browser-support, respectively. On Wed, Sep 4, 2013 at 9:43 AM, Yannick Foeillet yannick.foeil...@alterway.fr wrote: Hi everybody, I'm running a grizzly openstack infrastructure and after some times and reboot i can't use novnc console from dashboard. I got a workaround with : $ nova list To get my instance ID $ nova get-vnc-console $ID novnc Then the url retrieve with last command works fiine. I took a look at nova-consolauth logs and i found no errors... Someone has an idea ? Thanks in advance. -- Yannick ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Novnc does not really work
Thanks Anne,I tried with browers below :- firefox- chrome- safariI saw novnc console to work before.And with the url given by nova it works...I continue my investigations .Le 4 sept. 2013 à 17:09, Anne Gentle a...@openstack.org a écrit :What browser are you using? To use the VNC client with the dashboard, the browser must support HTML5 Canvas and HTML5 WebSockets. For details about browsers that support noVNC, seehttps://github.com/kanaka/noVNC/blob/master/README.md, andhttps://github.com/kanaka/noVNC/wiki/Browser-support, respectively. On Wed, Sep 4, 2013 at 9:43 AM, Yannick Foeillet yannick.foeil...@alterway.fr wrote: Hi everybody,I'm running a grizzly openstack infrastructure and after some times and reboot i can't use novnc console from dashboard. I got a workaround with :$ nova listTo get my instance ID$ nova get-vnc-console $ID novncThen the url retrieve with last command works fiine. I took a look at nova-consolauth logs and i found no errors...Someone has an idea ?Thanks in advance. --Yannick___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack --Yannick FoeilletConsultant Expert InfrastructureAlter Way1 rue royale 92210 Saint-CloudAfin de contribuer au respect de l'environnement,merci de n'imprimer ce mail qu'en cas de nécessité smime.p7s Description: S/MIME cryptographic signature ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Update Swift to 1.9
additional information : - Build the package by your self(The Swift-core PPA was deprecated) : Custom Debian Packagehttp://docs.openstack.org/developer/swift/debian_package_guide.html#instructions-for-building-debian-packages-for-swift - From Ubuntu Cloud Archive repo : CloudArchivehttps://wiki.ubuntu.com/ServerTeam/CloudArchive I check the current Havana-Staging includes 1.9.0, and 1.9.1 was proposed : Cloud Archive Team on Launchpadhttps://launchpad.net/~ubuntu-cloud-archive/+archive/havana-staging/+index?batch=75memo=75start=75 Hope it help +Hugo Kuo+ h...@swiftstack.com tonyt...@gmail.com +886 935004793 2013/9/4 Clay Gerrard clay.gerr...@gmail.com If you installed via packages from RDO or Cloud Archive - they probably have 1.8 grizzly available. If you installed from source (or build your own packages) you can just fetch the updates from github [3] and checkout the 1.9.2 tag [4]. 1. http://openstack.redhat.com/ 2. https://wiki.ubuntu.com/ServerTeam/CloudArchive 3. https://github.com/openstack/swift 4. https://github.com/openstack/swift/tree/1.9.2 -Clay On Wed, Sep 4, 2013 at 2:32 AM, Mahardhika mahardika.gil...@andalabs.comwrote: Hi all, currently i used swift 1.6.0, how can i update to recent swift 1.9 ? thanks -- Regards, Mahardhika Gilang ** ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] [Swift] Small cluster size
I'd like to get input from the community on a 'realistic' size of a small Swift cluster that might be deployed used in the field for production. SAIO / test / lab setups aren't a consideration. I'm interested in hearing about both private and public cluster sizes that are deployed for actual. 4 nodes or fewer doesn't seems pretty small - 6 or 8 seems like a more realistic size of a small cluster. But I don't have any actual data/customer experience for those assumptions. Followup questions: Given that cluster size, do all nodes act as both Swift proxy and storage nodes? I assume they do. How big does a cluster get before node roles are separated? Thanks for the input, Tim ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] [Grizzly] Unable to reboot instance after Migrate
Just to check, How did you do this part? 7. Configure your firewall to allow libvirt to communicate between nodes. Thank you. 2013/9/3 happy idea guolongcang.w...@gmail.com follow this page's guide *carefully* , http://docs.openstack.org/trunk/openstack-compute/admin/content/configuring-live-migrations.html replace 'NOVA-INST-DIR' with '/var/lib/nova' 2013/9/4 Guilherme Russi luisguilherme...@gmail.com Hey there, I made my NFS configuration again, I made this way: Controller node: 1- mkdir -p /local2/instances 2- mount --bind /var/lib/nova/instances /local2/instances 3- added this inside /etc/exports /var/lib/nova/instances 192.168.3.0/24(rw,sync,fsid=0,no_root_squash,no_subtree_check) /local2/instances 192.168.3.0/24(rw,sync,fsid=0,no_root_squash,no_subtree_check,nohide) 4- added this inside /etc/fstab /var/lib/nova/instances /local2/instances none bind 0 0 Compute node: 1- added inside /etc/fstab 192.168.3.1://var/lib/nova/instances nfs4 defaults 0 0 2- mount -t nfs4 192.168.3.1:/ /var/lib/nova/instances/ Do I need to do anything else? Regards. Guilherme. 2013/9/1 happy idea guolongcang.w...@gmail.com 2013-08-30 14:42:51.569 12667 ERROR nova.virt.libvirt.driver [-] Getting disk size of instance-007d: [Errno 2] No such file or directory: '/var/lib/nova/instances/72ec37a3-b209-4729-b628- 005fdcea5a3c/disk' *I think may be your NFS config is not correct.* 2013/8/31 Guilherme Russi luisguilherme...@gmail.com Hello Happy, these are my logs: 2013-08-30 14:42:51.402 12667 AUDIT nova.compute.resource_tracker [-] Auditing locally available compute resources 2013-08-30 14:42:51.562 12667 ERROR nova.virt.libvirt.driver [-] Getting disk size of instance-0084: [Errno 2] No such file or directory: '/var/lib/nova/instances/c9e1c5ed-a108-4196-bfbc-24495e2e71bd/disk' 2013-08-30 14:42:51.564 12667 ERROR nova.virt.libvirt.driver [-] Getting disk size of instance-0077: [Errno 2] No such file or directory: '/var/lib/nova/instances/483f98e3-8ef5-43e2-8c3a-def55abdabcd/disk' 2013-08-30 14:42:51.567 12667 ERROR nova.virt.libvirt.driver [-] Getting disk size of instance-00bd: [Errno 2] No such file or directory: '/var/lib/nova/instances/66abd40e-fb19-4cbe-a248-61d968fd84b7/disk' 2013-08-30 14:42:51.569 12667 ERROR nova.virt.libvirt.driver [-] Getting disk size of instance-007d: [Errno 2] No such file or directory: '/var/lib/nova/instances/72ec37a3-b209-4729-b628-005fdcea5a3c/disk' 2013-08-30 14:42:51.679 12667 AUDIT nova.compute.resource_tracker [-] Free ram (MB): 2746 2013-08-30 14:42:51.679 12667 AUDIT nova.compute.resource_tracker [-] Free disk (GB): 53 2013-08-30 14:42:51.679 12667 AUDIT nova.compute.resource_tracker [-] Free VCPUS: 1 2013-08-30 14:42:51.773 12667 INFO nova.compute.resource_tracker [-] Compute_service record updated for caos:caos 2013-08-30 14:42:51.774 12667 INFO nova.compute.manager [-] Updating host status And here the output when I run the command: ERROR: Live migration of instance c9af3e9e-87b1-4aa3-95aa-22700e1091e4 to host tiresias failed (HTTP 400) (Request-ID: req-630d7837-6886-4e23-bc3d-a9fccc4a8868) My destiny host awsers ping when I ping. I've been fighting against it a quite while without success. Regards. Guilherme. 2013/8/29 happy idea guolongcang.w...@gmail.com OK. 2013/8/30 Guilherme Russi luisguilherme...@gmail.com I am too, if I find something I'll let you know. Regards. 2013/8/29 happy idea guolongcang.w...@gmail.com I am trying to figure out what cause the bug. 2013/8/30 Guilherme Russi luisguilherme...@gmail.com Well mine are: ii nova-api 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - API frontend ii nova-cert 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - certificate management ii nova-common 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - common files ii nova-conductor 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - conductor service ii nova-consoleauth 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - Console Authenticator ii nova-novncproxy 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - NoVNC proxy ii nova-scheduler 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - virtual machine scheduler ii python-nova 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute Python libraries ii python-novaclient 1:2.13.0-0ubuntu1~cloud0 2013/8/29 happy idea guolongcang.w...@gmail.com Thank you. 2013/8/29 Razique Mahroua razique.mahr...@gmail.com Looks like a bug to me, definitely…. but i can be wrong though *Razique Mahroua** - **Nuage Co* razique.mahr...@gmail.com Tel : +33 9 72 37 94 15 Le 29 août 2013 à 11:29, happy idea guolongcang.w...@gmail.com a écrit : Thank you. -- Forwarded message -- From: happy idea guolongcang.w...@gmail.com
Re: [Openstack] Quantum/Grizzy - Instance doesn't get IP
Hi, yes, I have dnsmasq installed on Network Node.
root@network:~# apt-get install dnsmasq
Reading package lists... Done
Building dependency tree
Reading state information... Done
dnsmasq is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
root@network:~# ps aux | grep -i dnsmasq
dnsmasq 3807 0.0 0.1 28820 980 ?S15:29 0:00
/usr/sbin/dnsmasq -x /var/run/dnsmasq/dnsmasq.pid -u dnsmasq -r
/var/run/dnsmasq/resolv.conf -7
/etc/dnsmasq.d,.dpkg-dist,.dpkg-old,.dpkg-new
nobody 26040 0.0 0.2 28820 1004 ?S15:45 0:00 dnsmasq
--no-hosts --no-resolv --strict-order --bind-interfaces
--interface=tap91e05e25-7f --except-interface=lo
--pid-file=/var/lib/quantum/dhcp/a8f7c937-e8d0-4952-bff6-7d364335df22/pid --dhcp-hostsfile=/var/lib/quantum/dhcp/a8f7c937-e8d0-4952-bff6-7d364335df22/host
--dhcp-optsfile=/var/lib/quantum/dhcp/a8f7c937-e8d0-4952-bff6-7d364335df22/opts
--dhcp-script=/usr/bin/quantum-dhcp-agent-dnsmasq-lease-update
--leasefile-ro --dhcp-range=set:tag0,10.5.5.0,static,120s --conf-file=
--domain=openstacklocal
root 26041 0.0 0.0 28792 244 ?S15:45 0:00 dnsmasq
--no-hosts --no-resolv --strict-order --bind-interfaces
--interface=tap91e05e25-7f --except-interface=lo
--pid-file=/var/lib/quantum/dhcp/a8f7c937-e8d0-4952-bff6-7d364335df22/pid --dhcp-hostsfile=/var/lib/quantum/dhcp/a8f7c937-e8d0-4952-bff6-7d364335df22/host
--dhcp-optsfile=/var/lib/quantum/dhcp/a8f7c937-e8d0-4952-bff6-7d364335df22/opts
--dhcp-script=/usr/bin/quantum-dhcp-agent-dnsmasq-lease-update
--leasefile-ro --dhcp-range=set:tag0,10.5.5.0,static,120s --conf-file=
--domain=openstacklocal
I restarted the service dnsmasq, but occured the same problem when I
started a new instance.
2013-09-04 15:39:44 WARNING [quantum.db.agentschedulers_db] Fail
scheduling network {'status': u'ACTIVE', 'subnets':
[u'80b21701-4b05-4585-985a-60905ff42531'], 'name': u'public',
'provider:physical_network': None, 'admin_state_up': True, 'tenant_id':
u'27d2b93f11ac4e91a3edb26edb28fb6b', 'provider:network_type': u'gre',
'router:external': True, 'shared': False, 'id':
u'b3e465b7-b5a2-45d5-8b24-aa8bea0ab0a0', 'provider:segmentation_id': 2L}
2013-09-04 15:47:00 WARNING [quantum.db.agentschedulers_db] Fail
scheduling network {'status': u'ACTIVE', 'subnets':
[u'80b21701-4b05-4585-985a-60905ff42531'], 'name': u'public',
'provider:physical_network': None, 'admin_state_up': True, 'tenant_id':
u'27d2b93f11ac4e91a3edb26edb28fb6b', 'provider:network_type': u'gre',
'router:external': True, 'shared': False, 'id':
u'b3e465b7-b5a2-45d5-8b24-aa8bea0ab0a0', 'provider:segmentation_id': 2L}
Thanks.
Marcelo Dieder
On 09/04/2013 11:15 AM, Hathaway.Jon wrote:
Do you have dnsmasq installed? I found that it isnt installed as a
dependency. Without it i never received dhcp either.
Sent from my iPhone
On Sep 3, 2013, at 10:31 PM, happy idea guolongcang.w...@gmail.com
mailto:guolongcang.w...@gmail.com wrote:
you didn't install the dhcp agent, please refer to this guide
https://github.com/mseknibilel/OpenStack-Grizzly-Install-Guide/blob/OVS_MultiNode/OpenStack_Grizzly_Install_Guide.rst
2013/9/4 Marcelo Dieder marcelodie...@gmail.com
mailto:marcelodie...@gmail.com
Hi All!
I have a ambient with 3 hosts (Network, Controller and Node1
(Qemu)). I created an ambient based this tutorial
(http://docs.openstack.org/grizzly/basic-install/apt/content/basic-install_controller.html).
My problem is when I create a instance. The instance Instance
doesn't get IP address.
checkinghttp://169.254.169.254/20090404/instanceid
failed 1/20: up 187.68. request failed
failed 2/20: up 190.06. request failed
failed 3/20: up 192.24. request failed
failed 4/20: up 194.43. request failed
failed 5/20: up 196.61. request failed
failed 6/20: up 198.82. request failed
failed 7/20: up 201.03. request failed
failed 8/20: up 203.22. request failed
failed 9/20: up 205.42. request failed
failed 10/20: up 207.64. request failed
failed 11/20: up 209.87. request failed
failed 12/20: up 212.08. request failed
failed 13/20: up 214.29. request failed
failed 14/20: up 216.49. request failed
failed 15/20: up 218.70. request failed
failed 16/20: up 220.91. request failed
failed 17/20: up 223.13. request failed
failed 18/20: up 225.38. request failed
failed 19/20: up 227.62. request failed
failed 20/20: up 229.87. request failed
failed to read iid from metadata. tried 20
no results found for mode=net. up 232.10. searched: nocloud configdrive ec2
failed to get instanceid of datasource
Starting dropbear sshd: generating rsa key... generating dsa key... OK
=== network info ===
ifinfo: lo,up,127.0.0.1,8,::1
ifinfo: eth0,up,,8,fe80::f816:3eff:fef3:2a6d
=== datasource: None None ===
At the controller I received the warning:
2013-09-04
[Openstack] Mapping - keystone to Swift
Hello, Is there any documentation about what is the mapping between keystone constructs and Swift constructs? Keystone has tenants, users, roles and Swift has accounts. Tenants map 1-1 to Swift accounts, and users within a tenant(or account) can access each others objects and containers if they are admin(role). What does a user map to in Swift though, or is it just used within Keystone, for local or say, AD users? Also, does a role map to anything within Swift? It is a bit confusing, because Swift requires admin access to create objects, is that only specific to keystone as an auth. Some clarity around this would really help. Cheers.___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Cinder question
On Wed, Sep 4, 2013 at 1:21 PM, Mark Brown ntdeveloper2...@yahoo.comwrote: It definitely would be something useful. Dont know why it is not already implemented. -- *From:* Swapnil Kulkarni swapnilkulkarni2...@gmail.com *To:* Razique Mahroua razique.mahr...@gmail.com *Cc:* Openstack Openstack openstack@lists.openstack.org *Sent:* Wednesday, September 4, 2013 2:44 AM *Subject:* Re: [Openstack] Cinder question Guys, You might want to have a look at https://blueprints.launchpad.net/cinder/+spec/multi-attach-volume Its already proposed Best Regards, Swapnil Kulkarni swapnilkulkarni2...@gmail.com +91-87960 10622(c) http://in.linkedin.com/in/coolsvap On Wed, Sep 4, 2013 at 2:24 PM, Razique Mahroua razique.mahr...@gmail.com wrote: It doesn't necessarily uses iscsi, but yes I definitely agree man ! Le 4 sept. 2013 à 10:37, Martinx - ジェームズ thiagocmarti...@gmail.com a écrit : This is a must!! It would be great to attach 1 volume, to multiple instances!! Sounds pretty basic, since it uses iSCSI, there is no reason to not allow this... Cheers! Thiago On 3 September 2013 20:25, Mark Brown ntdeveloper2...@yahoo.com wrote: Hello, I had a Cinder question, and maybe its pretty basic:-) Isn't there a way to attach the same Cinder volume to two different VMs, whether same physical server or different? I don't mean across different data centers, but any domain (zone, or whatever) within the same data center? Thanks. ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to: openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Very useful, and we had hoped to have had it for H but there are a number of folks that have concerns so it's getting further analysis for I. ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Slow API operations
Thank you all guys. 2013/9/3 Jay Pipes jaypi...@gmail.com On 09/03/2013 03:12 PM, Clint Byrum wrote: Excerpts from Guilherme Russi's message of 2013-09-03 11:52:39 -0700: Query OK, 502150 rows affected (32 min 2.77 sec) and nothing has changed, lol. There's also indexes in Havana that help a lot, you might consider adding them manually: ALTER TABLE token ADD INDEX ix_token_valid (valid); ALTER TABLE token ADD INDEX ix_token_expires (expires); Note that a 500,000 row delete is _brutal_ on your server. We use this in TripleO: https://git.openstack.org/**cgit/openstack/tripleo-image-** elements/tree/elements/**keystone/cleanup-keystone-**tokens.shhttps://git.openstack.org/cgit/openstack/tripleo-image-elements/tree/elements/keystone/cleanup-keystone-tokens.sh It allows space in between the deletes for other things to happen, and also deletes in a more efficient way to not thrash around the table deleting things in index order. Also, if you don't need the content of your token table for audit purposes and you can afford the RAM, you should definitely consider switching to the memcached backend for tokens. +1000. memcached is the superior option for tokens. -jay __**_ Mailing list: http://lists.openstack.org/**cgi-bin/mailman/listinfo/** openstack http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/**cgi-bin/mailman/listinfo/** openstack http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Openstack HongKong Summit Speakers
Hi Alan, Design session proposal has opened today at summit.openstack.org; on the other hand conference session proposal closed on July 31st. I believe voting closed at some point last week (possibly August 29th). Accepted talks should be announced in a few days. The voting system was available at www.openstack.org/rate Regards, Salvatore On 4 September 2013 22:31, Alan Kavanagh alan.kavan...@ericsson.com wrote: Hi fellow Stackers ** ** I was wondering if it has been decided on the selected Speakers for the Openstack Hong Kong Summit and where can I find the “voting system” for the Suggested Speaker Presentations? ** ** BR Alan ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Openstack HongKong Summit Speakers
For me, http://www.openstack.org/rate gets re-directed to http://www.openstack.org/. On Wed, Sep 4, 2013 at 2:57 PM, Salvatore Orlando sorla...@nicira.comwrote: Hi Alan, Design session proposal has opened today at summit.openstack.org; on the other hand conference session proposal closed on July 31st. I believe voting closed at some point last week (possibly August 29th). Accepted talks should be announced in a few days. The voting system was available at www.openstack.org/rate Regards, Salvatore On 4 September 2013 22:31, Alan Kavanagh alan.kavan...@ericsson.comwrote: Hi fellow Stackers ** ** I was wondering if it has been decided on the selected Speakers for the Openstack Hong Kong Summit and where can I find the “voting system” for the Suggested Speaker Presentations? ** ** BR Alan ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Openstack HongKong Summit Speakers
Chosen speakers will get notified around September 23. Nick On 9/4/2013 5:57 PM, Salvatore Orlando wrote: Hi Alan, Design session proposal has opened today at summit.openstack.org http://summit.openstack.org; on the other hand conference session proposal closed on July 31st. I believe voting closed at some point last week (possibly August 29th). Accepted talks should be announced in a few days. The voting system was available at www.openstack.org/rate http://www.openstack.org/rate Regards, Salvatore On 4 September 2013 22:31, Alan Kavanagh alan.kavan...@ericsson.com mailto:alan.kavan...@ericsson.com wrote: Hi fellow Stackers __ __ I was wondering if it has been decided on the selected Speakers for the Openstack Hong Kong Summit and where can I find the “voting system” for the Suggested Speaker Presentations? __ __ BR Alan ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org mailto:openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] Anyone using openstack nova/vmware api?
hi all, I am trying to use the nova/vmware and i saw the code here https://github.com/openstack/nova/blob/master/nova/virt/vmwareapi/vif.py in which nova.virt.vmwareapi is imported. but i did not find any documents online about the nova.virt.vmwareapi pakage. Anyone have a link or any document for that? thanks a lot xin ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Anyone using openstack nova/vmware api?
nova.virt.vmwareapi is the package that holds the VMware drivers. There are two drivers one for ESX and one for vCenter. The two products are known collectively as vSphere which is part of the larger VMwareAPI suite. So, sometimes the documentation refers to ESX, ESXi, vCenter, VC, vSphere, and VMwareAPI. It depends on precisely what you are trying to do when. You'll find official documentation here: http://docs.openstack.org/trunk/openstack-compute/admin/content/vmware.html # Shawn Hartsock - Original Message - From: openstack learner openstacklea...@gmail.com To: openstack@lists.openstack.org Sent: Wednesday, September 4, 2013 7:11:57 PM Subject: [Openstack] Anyone using openstack nova/vmware api? hi all, I am trying to use the nova/vmware and i saw the code here https://github.com/openstack/nova/blob/master/nova/virt/vmwareapi/vif.py in which nova.virt.vmwareapi is imported. but i did not find any documents online about the nova.virt.vmwareapi pakage. Anyone have a link or any document for that? thanks a lot xin ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] Keystone 'NoneType' object is unsubscriptable error
I am trying to install the RDO OpenStack distribution on a RHEL 6.4 system.
The install is failing during keystone configuration as follows:
^[[1;35merr: /Stage[main]/Cinder::Keystone::Auth/Keystone_service[cinder]:
Could not evaluate: Execution of '/usr/bin/keystone --endpoint
http://127.0.0.1:35357/v2.0/ service-list' returned 1: 'NoneType' object is
unsubscriptable
If I run the command interactively I get the same error:
# brutus1 /etc/keystone export
OS_SERVICE_TOKEN=49c056f8688540fcb933cf7335537676
# brutus1 /etc/keystone export OS_SERVICE_ENDPOINT=http://127.0.0.1:35357/v2.0
# brutus1 /etc/keystone keystone service-list
'NoneType' object is unsubscriptable
The keystone service appears to be running and connected to the mysql database:
# brutus1 /root ps -ef|grep keystone
keystone 8451 1 0 17:20 ?00:00:00 /usr/bin/python
/usr/bin/keystone-all --config-file /etc/keystone/keystone.conf
# brutus1 /root lsof -i|grep keystone
keystone- 8451 keystone4u IPv4 21614 0t0 TCP *:35357 (LISTEN)
keystone- 8451 keystone6u IPv4 21616 0t0 TCP *:commplex-main
(LISTEN)
keystone- 8451 keystone8u IPv4 21961 0t0 TCP
ebrutus1:54531-ebrutus1:mysql (ESTABLISHED)
The mysql database appears to have been properly initialized though hardly any
of the tables have anything in them.
mysql use keystone;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A
Database changed
mysql show tables;
++
| Tables_in_keystone |
++
| credential |
| domain |
| ec2_credential |
| endpoint |
| group |
| group_domain_metadata |
| group_project_metadata |
| migrate_version|
| policy |
| project|
| role |
| service|
| token |
| trust |
| trust_role |
| user |
| user_domain_metadata |
| user_group_membership |
| user_project_metadata |
++
19 rows in set (0.00 sec)
mysql select * from service;
Empty set (0.00 sec)
I cranked up the debug level in the keystone log file and here is what I see:
2013-09-04 17:37:48DEBUG [keystone.common.wsgi]
REQUEST ENVIRON
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SCRIPT_NAME = /v2.0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] webob.adhoc_attrs =
{'response': Response at 0x2373510 200 OK}
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] REQUEST_METHOD = GET
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] PATH_INFO =
/OS-KSADM/services
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SERVER_PROTOCOL = HTTP/1.0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_X_AUTH_TOKEN =
49c056f8688540fcb933cf7335537676
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_USER_AGENT =
python-keystoneclient
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] eventlet.posthooks = []
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SERVER_NAME = 127.0.0.1
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] REMOTE_ADDR = 127.0.0.1
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] eventlet.input =
eventlet.wsgi.Input object at 0x236b8d0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.url_scheme = http
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SERVER_PORT = 35357
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.input =
eventlet.wsgi.Input object at 0x236b8d0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_HOST = 127.0.0.1:35357
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.multithread = True
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_ACCEPT = */*
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.version = (1, 0)
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] openstack.context =
{'token_id': '49c056f8688540fcb933cf7335537676', 'is_admin': True}
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] GATEWAY_INTERFACE = CGI/1.1
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.run_once = False
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.errors = open file
'stderr', mode 'w' at 0x2aae81e0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.multiprocess = False
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] CONTENT_TYPE = text/plain
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_ACCEPT_ENCODING =
identity, deflate, compress, gzip
2013-09-04 17:37:48DEBUG [keystone.common.wsgi]
2013-09-04 17:37:48DEBUG [keystone.common.wsgi]
REQUEST BODY
2013-09-04 17:37:48DEBUG [keystone.common.wsgi]
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] arg_dict: {}
2013-09-04 17:37:48 INFO [sqlalchemy.engine.base.Engine] SELECT service.id
AS service_id, service.type AS
Re: [Openstack] Keystone 'NoneType' object is unsubscriptable error
As far I know and have seen keystone is listing on port 5000 you may want to
check that and see if that's your case
Remo
Inviato da iPad ()
Il giorno Sep 4, 2013, alle ore 20:39, Goldstone, Robin J.
goldsto...@llnl.gov ha scritto:
I am trying to install the RDO OpenStack distribution on a RHEL 6.4 system.
The install is failing during keystone configuration as follows:
^[[1;35merr: /Stage[main]/Cinder::Keystone::Auth/Keystone_service[cinder]:
Could not evaluate: Execution of '/usr/bin/keystone --endpoint
http://127.0.0.1:35357/v2.0/ service-list' returned 1: 'NoneType' object is
unsubscriptable
If I run the command interactively I get the same error:
# brutus1 /etc/keystone export
OS_SERVICE_TOKEN=49c056f8688540fcb933cf7335537676
# brutus1 /etc/keystone export
OS_SERVICE_ENDPOINT=http://127.0.0.1:35357/v2.0
# brutus1 /etc/keystone keystone service-list
'NoneType' object is unsubscriptable
The keystone service appears to be running and connected to the mysql
database:
# brutus1 /root ps -ef|grep keystone
keystone 8451 1 0 17:20 ?00:00:00 /usr/bin/python
/usr/bin/keystone-all --config-file /etc/keystone/keystone.conf
# brutus1 /root lsof -i|grep keystone
keystone- 8451 keystone4u IPv4 21614 0t0 TCP *:35357 (LISTEN)
keystone- 8451 keystone6u IPv4 21616 0t0 TCP *:commplex-main
(LISTEN)
keystone- 8451 keystone8u IPv4 21961 0t0 TCP
ebrutus1:54531-ebrutus1:mysql (ESTABLISHED)
The mysql database appears to have been properly initialized though hardly
any of the tables have anything in them.
mysql use keystone;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A
Database changed
mysql show tables;
++
| Tables_in_keystone |
++
| credential |
| domain |
| ec2_credential |
| endpoint |
| group |
| group_domain_metadata |
| group_project_metadata |
| migrate_version|
| policy |
| project|
| role |
| service|
| token |
| trust |
| trust_role |
| user |
| user_domain_metadata |
| user_group_membership |
| user_project_metadata |
++
19 rows in set (0.00 sec)
mysql select * from service;
Empty set (0.00 sec)
I cranked up the debug level in the keystone log file and here is what I see:
2013-09-04 17:37:48DEBUG [keystone.common.wsgi]
REQUEST ENVIRON
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SCRIPT_NAME = /v2.0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] webob.adhoc_attrs =
{'response': Response at 0x2373510 200 OK}
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] REQUEST_METHOD = GET
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] PATH_INFO =
/OS-KSADM/services
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SERVER_PROTOCOL = HTTP/1.0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_X_AUTH_TOKEN =
49c056f8688540fcb933cf7335537676
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_USER_AGENT =
python-keystoneclient
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] eventlet.posthooks = []
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SERVER_NAME = 127.0.0.1
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] REMOTE_ADDR = 127.0.0.1
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] eventlet.input =
eventlet.wsgi.Input object at 0x236b8d0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.url_scheme = http
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SERVER_PORT = 35357
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.input =
eventlet.wsgi.Input object at 0x236b8d0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_HOST =
127.0.0.1:35357
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.multithread = True
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_ACCEPT = */*
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.version = (1, 0)
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] openstack.context =
{'token_id': '49c056f8688540fcb933cf7335537676', 'is_admin': True}
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] GATEWAY_INTERFACE =
CGI/1.1
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.run_once = False
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.errors = open file
'stderr', mode 'w' at 0x2aae81e0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.multiprocess = False
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] CONTENT_TYPE = text/plain
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_ACCEPT_ENCODING =
identity, deflate, compress, gzip
2013-09-04 17:37:48DEBUG
[Openstack] Call for presentations for the linux.conf.au 2014 OpenStack mini-conference
linux.conf.au will be hosting the second OpenStack mini-conference to run in Australia. The first one was well attended, and this mini-conference will be the first OpenStack conference to be held on Australia's west coast. The mini-conference is a day long event focusing on OpenStack development and operations, and is available to attendees of linux.conf.au. The mini-conference is therefore calling for proposals for content. Speakers at the mini-conference must be registered for linux.conf.au 2014 as delegates, or discuss their needs with the mini-conference organizers if that isn't possible. Some examples of talks we're interested in are: talks from OpenStack developers about what features they are working on for IceHouse; talks from deployers of OpenStack about their experiences and how others can learn from them; talks covering the functionality of OpenStack and how it can be used in new and interesting ways. Some important details: * linux.conf.au runs from 6 to 10 January 2014 in Perth, Australia at the University of Western Australia * the mini-conference will be on Tuesday the 7th of January * proposals are due to the mini-conference organizer no later than 1 November * there are two types of talks -- full length (45 minutes) and half length (20 minutes) CFP submissions are made by completing this online form: https://docs.google.com/forms/d/1iqwt6a2jWZ1yBGswoTt6Mfdw1j-RcuTN_u8qWZtpMiM/viewform If you have questions about this call for presentations, please contact Michael Still at openstack-lca2...@lists.stillhq.com for more details. Thanks, Michael -- Rackspace Australia ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Keystone 'NoneType' object is unsubscriptable error
What happens after you add a service,
curl -X POST -H X-Auth-Token: auth-token -H Content-type:
application/json --data '{OS-KSADM:service:
{name:Test,type:test,extra:{}}}'
http://0.0.0.0:35357/v2.0/OS-KSADM/services
Sean
On Thu, 2013-09-05 at 00:39 +, Goldstone, Robin J. wrote:
I am trying to install the RDO OpenStack distribution on a RHEL 6.4
system. The install is failing during keystone configuration as
follows:
^[[1;35merr: /Stage[main]/Cinder::Keystone::Auth/Keystone_service[cinder]:
Could not evaluate: Execution of '/usr/bin/keystone --endpoint
http://127.0.0.1:35357/v2.0/ service-list' returned 1: 'NoneType' object is
unsubscriptable
If I run the command interactively I get the same error:
# brutus1 /etc/keystone export
OS_SERVICE_TOKEN=49c056f8688540fcb933cf7335537676
# brutus1 /etc/keystone export
OS_SERVICE_ENDPOINT=http://127.0.0.1:35357/v2.0
# brutus1 /etc/keystone keystone service-list
'NoneType' object is unsubscriptable
The keystone service appears to be running and connected to the mysql
database:
# brutus1 /root ps -ef|grep keystone
keystone 8451 1 0 17:20 ?
00:00:00 /usr/bin/python /usr/bin/keystone-all
--config-file /etc/keystone/keystone.conf
# brutus1 /root lsof -i|grep keystone
keystone- 8451 keystone4u IPv4 21614 0t0 TCP *:35357
(LISTEN)
keystone- 8451 keystone6u IPv4 21616 0t0 TCP
*:commplex-main (LISTEN)
keystone- 8451 keystone8u IPv4 21961 0t0 TCP
ebrutus1:54531-ebrutus1:mysql (ESTABLISHED)
The mysql database appears to have been properly initialized though
hardly any of the tables have anything in them.
mysql use keystone;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A
Database changed
mysql show tables;
++
| Tables_in_keystone |
++
| credential |
| domain |
| ec2_credential |
| endpoint |
| group |
| group_domain_metadata |
| group_project_metadata |
| migrate_version|
| policy |
| project|
| role |
| service|
| token |
| trust |
| trust_role |
| user |
| user_domain_metadata |
| user_group_membership |
| user_project_metadata |
++
19 rows in set (0.00 sec)
mysql select * from service;
Empty set (0.00 sec)
I cranked up the debug level in the keystone log file and here is what
I see:
2013-09-04 17:37:48DEBUG [keystone.common.wsgi]
REQUEST ENVIRON
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SCRIPT_NAME
= /v2.0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] webob.adhoc_attrs
= {'response': Response at 0x2373510 200 OK}
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] REQUEST_METHOD =
GET
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] PATH_INFO
= /OS-KSADM/services
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SERVER_PROTOCOL =
HTTP/1.0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_X_AUTH_TOKEN
= 49c056f8688540fcb933cf7335537676
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_USER_AGENT =
python-keystoneclient
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] eventlet.posthooks
= []
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SERVER_NAME =
127.0.0.1
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] REMOTE_ADDR =
127.0.0.1
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] eventlet.input =
eventlet.wsgi.Input object at 0x236b8d0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.url_scheme =
http
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SERVER_PORT =
35357
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.input =
eventlet.wsgi.Input object at 0x236b8d0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_HOST =
127.0.0.1:35357
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.multithread =
True
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_ACCEPT = */*
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.version = (1,
0)
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] openstack.context
= {'token_id': '49c056f8688540fcb933cf7335537676', 'is_admin': True}
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] GATEWAY_INTERFACE
= CGI/1.1
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.run_once =
False
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.errors =
open file 'stderr', mode 'w' at 0x2aae81e0
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.multiprocess
= False
2013-09-04 17:37:48DEBUG [keystone.common.wsgi] CONTENT_TYPE =
text/plain
2013-09-04 17:37:48DEBUG [keystone.common.wsgi]
HTTP_ACCEPT_ENCODING = identity, deflate,
Re: [Openstack] Openstack HongKong Summit Speakers
Cheers Salvatore It was the conference speakers presentations I was looking to see if its yet announced who was accepted, I noted it was stated it would be announced in mid-september, but I guess I was looking to see if they had at least listed all the submitted speaker presentations for the summit. /Alan From: Salvatore Orlando [mailto:sorla...@nicira.com] Sent: September-04-13 5:58 PM To: Alan Kavanagh Cc: openstack@lists.openstack.org Subject: Re: [Openstack] Openstack HongKong Summit Speakers Hi Alan, Design session proposal has opened today at summit.openstack.orghttp://summit.openstack.org; on the other hand conference session proposal closed on July 31st. I believe voting closed at some point last week (possibly August 29th). Accepted talks should be announced in a few days. The voting system was available at www.openstack.org/ratehttp://www.openstack.org/rate Regards, Salvatore On 4 September 2013 22:31, Alan Kavanagh alan.kavan...@ericsson.commailto:alan.kavan...@ericsson.com wrote: Hi fellow Stackers I was wondering if it has been decided on the selected Speakers for the Openstack Hong Kong Summit and where can I find the voting system for the Suggested Speaker Presentations? BR Alan ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.orgmailto:openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Quantum/Grizzly - Instance doesn't get IP
well. my suggestion is to follow this guide
https://github.com/mseknibilel/OpenStack-Grizzly-Install-Guide/blob/OVS_MultiNode/OpenStack_Grizzly_Install_Guide.rst
,
and reinstall your openstall completely.
If you are using Ubuntu 13.04:
after upgrade/dist-upgrade you have to reboot the host , now the system
had integreted Linux target framework , so now you shoudn't install the
package iscsitarget and iscsitarget-dkms on the controller node , and the
cinder conf file shoud like this:
/etc/cinder/cinder.conf :
[DEFAULT]
rootwrap_config=/etc/cinder/rootwrap.conf
sql_connection = mysql://cinderUser:cinderPass@10.10.10.51/cinder
api_paste_config = /etc/cinder/api-paste.iniiscsi_helper=tgtadm
volume_name_template = volume-%s
volume_group = cinder-volumes
verbose = True
auth_strategy = keystone
iscsi_ip_address=10.10.10.51
rabbit_host = 10.10.10.51
2013/9/4 Marcelo Dieder marcelodie...@gmail.com
Hi Happy, thanks for your reply.
I checked this guide, but I already have dhcp-agent installed.
root@network:~# apt-get -y install quantum-plugin-openvswitch-agent
quantum-dhcp-agent quantum-l3-agent quantum-metadata-agent
Reading package lists... Done
Building dependency tree
Reading state information... Done
quantum-dhcp-agent is already the newest version.
quantum-l3-agent is already the newest version.
quantum-metadata-agent is already the newest version.
quantum-plugin-openvswitch-agent is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
I also checked the settings that this guide and I added some options that
I had not configured. Now the error No active DHCP agents doesn't appears
more, but the error (in the Controler (quantum-server)) still appears below:
2013-09-04 08:25:48 WARNING [quantum.db.agentschedulers_db] Fail
scheduling network {'status': u'ACTIVE', 'subnets':
[u'80b21701-4b05-4585-985a-60905ff42531'], 'name': u'public',
'provider:physical_network': None, 'admin_state_up': True, 'tenant_id':
u'27d2b93f11ac4e91a3edb26edb28fb6b', 'provider:network_type': u'gre',
'router:external': True, 'shared': False, 'id':
u'b3e465b7-b5a2-45d5-8b24-aa8bea0ab0a0', 'provider:segmentation_id': 2L}
And in all hosts (computer, networking and controller), I have the error:
# quantum agent-list
Unknown command ['agent-list']
At my network node:
tail -n 10 /var/log/openvswitch/ovs-vswitchd.log
Sep 04 09:27:23|09614|netdev_linux|WARN|ioctl(SIOCGIFINDEX) on
tap91e05e25-7f device failed: No such device
Sep 04 09:27:32|09615|netdev|WARN|Dropped 253 log messages in last 12
seconds (most recently, 1 seconds ago) due to excessive rate
Sep 04 09:27:32|09616|netdev|WARN|failed to get flags for network device
tap91e05e25-7f: No such device
Sep 04 09:27:33|09617|netdev_linux|WARN|Dropped 7 log messages in last 10
seconds (most recently, 5 seconds ago) due to excessive rate
Sep 04 09:27:33|09618|netdev_linux|WARN|ioctl(SIOCGIFINDEX) on
tap91e05e25-7f device failed: No such device
Sep 04 09:27:44|09619|netdev|WARN|Dropped 231 log messages in last 12
seconds (most recently, 1 seconds ago) due to excessive rate
Sep 04 09:27:44|09620|netdev|WARN|failed to get flags for network device
tap91e05e25-7f: No such device
Sep 04 09:27:48|09621|netdev_linux|WARN|Dropped 11 log messages in last 15
seconds (most recently, 5 seconds ago) due to excessive rate
Sep 04 09:27:48|09622|netdev_linux|WARN|ioctl(SIOCGIFINDEX) on
tap91e05e25-7f device failed: No such device
(quantum) net-list
+--+--+---+
| id | name |
subnets |
+--+--+---+
| a8f7c937-e8d0-4952-bff6-7d364335df22 | demo-net |
fd7f324c-25ec-4134-ab97-e827fcf12824 10.5.5.0/24 |
| b3e465b7-b5a2-45d5-8b24-aa8bea0ab0a0 | public |
80b21701-4b05-4585-985a-60905ff42531 xxx.xxx.xxx.0/24 |
+--+--+---+
(quantum) port-list
+--+--+---++
| id | name | mac_address |
fixed_ips
|
+--+--+---++
| 65c5b6cf-5eef-483e-8b32-8cd07bb83e6d | | fa:16:3e:58:29:31 |
{subnet_id: 80b21701-4b05-4585-985a-60905ff42531, ip_address:
xxx.xxx.xxx.166} |
| 806b3d3e-35fe-4356-a833-a8a3d44ec9ca | | fa:16:3e:7c:00:24 |
{subnet_id: fd7f324c-25ec-4134-ab97-e827fcf12824, ip_address:
10.5.5.1}|
| 91e05e25-7f7b-4399-9da2-42fef05afe31 | | fa:16:3e:fe:63:6c |
{subnet_id:
Re: [Openstack] [Grizzly] Unable to reboot instance after Migrate
o ...I just disable the firewall.$ufw disable 2013/9/5 Guilherme Russi luisguilherme...@gmail.com Just to check, How did you do this part? 7. Configure your firewall to allow libvirt to communicate between nodes. Thank you. 2013/9/3 happy idea guolongcang.w...@gmail.com follow this page's guide *carefully* , http://docs.openstack.org/trunk/openstack-compute/admin/content/configuring-live-migrations.html replace 'NOVA-INST-DIR' with '/var/lib/nova' 2013/9/4 Guilherme Russi luisguilherme...@gmail.com Hey there, I made my NFS configuration again, I made this way: Controller node: 1- mkdir -p /local2/instances 2- mount --bind /var/lib/nova/instances /local2/instances 3- added this inside /etc/exports /var/lib/nova/instances 192.168.3.0/24(rw,sync,fsid=0,no_root_squash,no_subtree_check) /local2/instances 192.168.3.0/24(rw,sync,fsid=0,no_root_squash,no_subtree_check,nohide) 4- added this inside /etc/fstab /var/lib/nova/instances /local2/instances none bind 0 0 Compute node: 1- added inside /etc/fstab 192.168.3.1://var/lib/nova/instances nfs4 defaults 0 0 2- mount -t nfs4 192.168.3.1:/ /var/lib/nova/instances/ Do I need to do anything else? Regards. Guilherme. 2013/9/1 happy idea guolongcang.w...@gmail.com 2013-08-30 14:42:51.569 12667 ERROR nova.virt.libvirt.driver [-] Getting disk size of instance-007d: [Errno 2] No such file or directory: '/var/lib/nova/instances/72ec37a3-b209-4729-b628- 005fdcea5a3c/disk' *I think may be your NFS config is not correct.* 2013/8/31 Guilherme Russi luisguilherme...@gmail.com Hello Happy, these are my logs: 2013-08-30 14:42:51.402 12667 AUDIT nova.compute.resource_tracker [-] Auditing locally available compute resources 2013-08-30 14:42:51.562 12667 ERROR nova.virt.libvirt.driver [-] Getting disk size of instance-0084: [Errno 2] No such file or directory: '/var/lib/nova/instances/c9e1c5ed-a108-4196-bfbc-24495e2e71bd/disk' 2013-08-30 14:42:51.564 12667 ERROR nova.virt.libvirt.driver [-] Getting disk size of instance-0077: [Errno 2] No such file or directory: '/var/lib/nova/instances/483f98e3-8ef5-43e2-8c3a-def55abdabcd/disk' 2013-08-30 14:42:51.567 12667 ERROR nova.virt.libvirt.driver [-] Getting disk size of instance-00bd: [Errno 2] No such file or directory: '/var/lib/nova/instances/66abd40e-fb19-4cbe-a248-61d968fd84b7/disk' 2013-08-30 14:42:51.569 12667 ERROR nova.virt.libvirt.driver [-] Getting disk size of instance-007d: [Errno 2] No such file or directory: '/var/lib/nova/instances/72ec37a3-b209-4729-b628-005fdcea5a3c/disk' 2013-08-30 14:42:51.679 12667 AUDIT nova.compute.resource_tracker [-] Free ram (MB): 2746 2013-08-30 14:42:51.679 12667 AUDIT nova.compute.resource_tracker [-] Free disk (GB): 53 2013-08-30 14:42:51.679 12667 AUDIT nova.compute.resource_tracker [-] Free VCPUS: 1 2013-08-30 14:42:51.773 12667 INFO nova.compute.resource_tracker [-] Compute_service record updated for caos:caos 2013-08-30 14:42:51.774 12667 INFO nova.compute.manager [-] Updating host status And here the output when I run the command: ERROR: Live migration of instance c9af3e9e-87b1-4aa3-95aa-22700e1091e4 to host tiresias failed (HTTP 400) (Request-ID: req-630d7837-6886-4e23-bc3d-a9fccc4a8868) My destiny host awsers ping when I ping. I've been fighting against it a quite while without success. Regards. Guilherme. 2013/8/29 happy idea guolongcang.w...@gmail.com OK. 2013/8/30 Guilherme Russi luisguilherme...@gmail.com I am too, if I find something I'll let you know. Regards. 2013/8/29 happy idea guolongcang.w...@gmail.com I am trying to figure out what cause the bug. 2013/8/30 Guilherme Russi luisguilherme...@gmail.com Well mine are: ii nova-api 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - API frontend ii nova-cert 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - certificate management ii nova-common 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - common files ii nova-conductor 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - conductor service ii nova-consoleauth 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - Console Authenticator ii nova-novncproxy 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - NoVNC proxy ii nova-scheduler 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute - virtual machine scheduler ii python-nova 1:2013.1-0ubuntu2.1~cloud0 OpenStack Compute Python libraries ii python-novaclient 1:2.13.0-0ubuntu1~cloud0 2013/8/29 happy idea guolongcang.w...@gmail.com Thank you. 2013/8/29 Razique Mahroua razique.mahr...@gmail.com Looks like a bug to me, definitely…. but i can be wrong though *Razique Mahroua** - **Nuage Co* razique.mahr...@gmail.com Tel : +33 9 72 37 94 15 Le 29 août 2013 à 11:29, happy idea guolongcang.w...@gmail.com a écrit : Thank you.
[Openstack] How does Nova determine parameters to kvm?
Hi, I broke my test OpenStack Grizzly environment some time ago and, rather than start again, I'm trying to understand why it's broken. I'm trying to make sure I understand each component and how it works. Basically, the symptom is that kvm is being called without a -netdev argument, which results in no ethernet device in the instance, and the tap not being created and no patch to br-int. I listed this question on OpenStack but didn't get very far. The only suggestion was that my libvirt_type should be kvm and not qemu, but this didn't make any difference. So, earlier instance calls looked like: LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin QEMU_AUDIO_DRV=none /usr/bin/kvm -name instance-0005 -S -M pc-1.0 -cpu ... -NETDEV TAP,FD=25,ID=HOSTNET0 -DEVICE VIRTIO-NET-PCI,NETDEV=HOSTNET0,ID=NET0,MAC=FA:16:3E:C5:F1:6B,BUS=PCI.0,ADDR=0X3 -chardev file,id=charserial0,path=/var/lib/nova/instances/instance-0005/console.log -device isa-serial,chardev=charserial0,id=serial0 -chardev pty,id=charserial1 -vnc 0.0.0.0:0 -k en-us -vga cirrus -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x5 whereas now my instance calls look like: LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin QEMU_AUDIO_DRV=none /usr/bin/kvm -name instance-0011 -S -M pc-1.0 -cpu core2duo,+erms,+smep,+fsgsbase,+lahf_lm,+rdtscp,+rdrand,+f16c,+avx,+osxsave,+xsave,+aes,+tsc-deadline,+popcnt,+x2apic,+sse4.2,+sse4.1,+pcid,+pdcm,+xtpr,+cx16,+tm2,+est,+smx,+vmx,+ds_cpl,+dtes64,+pclmuldq,+pbe,+tm,+ht,+ss,+acpi,+ds -enable-kvm -m 2048 -smp 1,sockets=1,cores=1,threads=1 -uuid e366f347-9f47-4bf9-a4eb-4567d4f9deb8 -smbios type=1,manufacturer=OpenStack Foundation,product=OpenStack Nova,version=2013.1.2,serial=a1378421-8208-e211-a941-0010185aae5d,uuid=e366f347-9f47-4bf9-a4eb-4567d4f9deb8 -nodefconfig -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/instance-0011.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc,driftfix=slew -no-kvm-pit-reinjection -no-shutdown -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -drive file=/var/lib/nova/instances/e366f347-9f47-4bf9-a4eb-4567d4f9deb8/disk,if=none,id=drive-virtio-disk0,format=qcow2,cache=none -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x3,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -chardev file,id=charserial0,path=/var/lib/nova/instances/e366f347-9f47-4bf9-a4eb-4567d4f9deb8/console.log -device isa-serial,chardev=charserial0,id=serial0 -chardev pty,id=charserial1 -device isa-serial,chardev=charserial1,id=serial1 -device usb-tablet,id=input0 -vnc 0.0.0.0:0 -k en-us -vga cirrus -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x4 (In other words, no -netdev argument) My nova.conf looks like: [DEFAULT] logdir=/var/log/nova state_path=/var/lib/nova lock_path=/var/lock/nova rootwrap_config=/etc/nova/rootwrap.conf verbose=True #dhcpbridge_flagfile=/etc/nova/nova.conf #dhcpbridge=/usr/bin/nova-dhcpbridge #fixed_range=10.0.0.0/8 #flat_network_bridge=br-eth1 #flat_interface=eth1 #flat_injected=False #public_interface=eth0 # MySQL Connection # sql_connection=mysql://nova:password@10.0.0.1/nova # nova-scheduler # rabbit_host=10.0.0.1 rabbit_password=password scheduler_driver=nova.scheduler.filter_scheduler.FilterScheduler # nova-api # cc_host=10.0.0.1 auth_strategy=keystone s3_host=10.0.0.1 ec2_host=10.0.0.1 nova_url=http://10.0.0.1:8774/v1.1/ ec2_url=http://10.0.0.1:8773/services/Cloud keystone_ec2_url=http://10.0.0.1:5000/v2.0/ec2tokens api_paste_config=/etc/nova/api-paste.ini allow_admin_api=true use_deprecated_auth=false ec2_private_dns_show_ip=True dmz_cidr=192.168.50.250/32 #dmz_cidr=169.254.169.254/32 ec2_dmz_host=10.0.0.1 metadata_host=10.0.0.1 metadata_listen=0.0.0.0 enabled_apis=ec2,osapi_compute,metadata # Networking # network_api_class=nova.network.quantumv2.api.API quantum_url=http://10.0.0.1:9696 quantum_auth_strategy=keystone quantum_admin_tenant_name=service quantum_admin_username=quantum quantum_admin_password=password quantum_admin_auth_url=http://10.0.0.1:35357/v2.0 libvirt_vif_driver=nova.virt.libvirt.vif.LibvirtHybridOVSBridgeDriver linuxnet_interface_driver=nova.network.linux_net.LinuxOVSInterfaceDriver firewall_driver=nova.virt.libvirt.firewall.IptablesFirewallDriver #Testing values linuxnet_ovs_integration_bridge=br-int dns_server=['192.168.50.240'] forward_bridge_interface=['eth1'] gateway=192.168.50.240 public_interface=eth1 routing_source_ip=192.168.50.250 # Compute # compute_driver=libvirt.LibvirtDriver connection_type=libvirt libvirt_type=kvm # Cinder # volume_api_class=nova.volume.cinder.API # Glance # glance_api_servers=10.0.0.1:9292 image_service=nova.image.glance.GlanceImageService # novnc # novnc_enable=true novncproxy_base_url=http://192.168.50.250:6080/vnc_auto.html vncserver_proxyclient_address=10.1.0.2 vncserver_listen=0.0.0.0 How does Nova determine what parameters to enable when calling the
[Openstack] Grizzy - Planning Help
Hi, I have been asked to setup a Grizzly Instance for academic research. This project will evolve as it goes, so I don't have a clear set of requirements, my initial plan is to try installing using Neutron configured as Single Flat Network http://docs.openstack.org/trunk/openstack-network/admin/content/app_demo_flat.htmlusing the Open vSwitch Plugin. The equipment I have is 3 Nodes (2 Nic's per node ), with a switch for a physically isolated node subnet and access to other switches for the rest of our network. The nodes have Fast CPU's with a decent number of Cores and more RAM than we should need So currently I am picturing a setup like this Network subnet 1 - openstack management subnet 2 - openstack data subnet 3 - Public Network Nodes A (Controller + Storage + Compute) Keystone Glance Horizon Neutron Compute Cinder Shared Storage/NFS Swift storage Swift Proxy (any other needed services) B (Network + Compute) Neutron Compute Swift Storage C (Network + Compute) Neutron Compute Swift Storage So my questions 1. Does anything seem fundamentally broken with this approach? 2. Is there anything else that I haven't mentioned that I should be thinking about before making a start? 3. Do people see any advantages for a use case like ours sticking with nova-network, or using an alternate plugin with Quantum such as Linux Bridge Plugin? 4. Is it possible / practical to merge the management and data networks? 5. Currently the isolated switch is 1G, is this likely to be a significant bottleneck to getting a small number of VM's running? Thanks for your time, and any insight you are willing to share. Clint ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] Instance CPU frequency resizing
Hi, In my test scenario, I need two medium ubuntu instance. The only difference between the instances is CPU frequency. For example instance1's CPU operates at 2GHz, whereas instance2's CPU operates at 1GHz. Is it possible to do this cpu frequency control through openstack/devstack? Regards, Batsayan Das Tata Consultancy Services Mailto: batsayan@tcs.com Website: http://www.tcs.com Experience certainty. IT Services Business Solutions Consulting =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Keystoner as Certificate Authority
On Thu, Sep 5, 2013 at 12:40 AM, Somanchi Trinath-B39208 b39...@freescale.com wrote: Can we use Keystone as Certificate Authority. Kindly help me in I can't answer if it can be used to issue certs, but I can tell you it should not be. That portion of the infrastructure needs to be segregated with a well defined security zone or boundary. Jeff ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
