Re: [openstack-dev] [openstack-tc][deb-packaging] Updated proposal for OpenStack deb packages

2015-07-28 Thread Thomas Goirand
On 07/24/2015 11:07 AM, Thierry Carrez wrote:
 Igor Yozhikov wrote:
 Hello again to everyone, resending this letter due to typo in the topic
 of the previous letter, apologize for this.
 *
 Introductory words:*
  I want to present renewed proposal for packaging of OpenStack
 components for deb based Linux distributions.
 In case of stackforge retirement, I believe that new repositories for
 deb specs should appears under the //openstack// name-space instead of
 //stackforge//.
 This and further steps was also advised by dhellmann, anteaya and
 angdraug at #openstack-meeting irc channel during/after
 TechnicalCommittee meeting http://paste.openstack.org/show/399927/
 yesterday 21 of Jul 2015.
 Also it would be great to discuss all of this during next TC meeting
 July 28th.
 
 Igor,
 
 The following was proposed to the TC, but needs a revision to match what
 you propose here:
 
 https://review.openstack.org/#/c/185187/
 
 Would you mind updating the proposed change there ? That way we could
 discuss it at the TC next week...

Done.

Please note that package repository names are based on actual source
package names in Debian. For example, /openstack/openstack-trove and not
just trove, which refers to a Java library in Debian.

Thomas

P.S: I'd also would like to add that I've seen people bike-shedding
around the name openstack-pkg-tools. The rename of this tool is *not*
open for discussion (it would be too much work). Yes, it's Debian
specific, but maybe it wont at some point, as there are tools that may
be interesting for RPM guys. Even if we never do that, this (Debian
native) package is prefixed by deb- like every other Git repository,
so there's no way to be confused. Finally, this has *nothing* to do with
the actual TC discussion, so let's discuss this issue *separately*,
shall we?


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] The proposed Neutron API extension for packet forwarding has a lot of duplication to the Neutron SFC API

2015-07-28 Thread Anita Kuno
On 07/27/2015 07:15 PM, Cathy Zhang wrote:
 Hi Anita,
 
 Not sure if you read the logs. The concern on 
 https://review.openstack.org/#/c/186663/ and duplication were brought up by 
 Sean.
 The goal is to have one set of API instead of multiple APIs with minor 
 differences. The consensus is that the SFC API seems more general than the 
 forwarding API, the forwarding API can be covered by the chain API, and the 
 forwarding API is just a chain of 1 (a special case of chain API). Here are 
 some snips of the meeting log related to this discussion. Per my action items 
 of the meeting, I am sending out an email updating everyone about our 
 discussion and consensus. No one can force anyone else to do anything. This 
 community project team have done diligence to reach out to authors of 
 https://review.openstack.org/#/c/186663/ multiple times before about 
 collaboration and convergence of APIs (Please refer to previous meeting 
 logs). 
 
 ---
 17:11:55 pcarver vikram: it's not the same but it has a lot in common. If 
 we're going to have both there will need to be extremely clear documentation 
 to guide operators and tenants on when to use each.
 17:12:16 pcarver Especially if the two can interact in unpredictable ways
 17:12:19 vikram pcarver: i agree..
 17:12:23 sc68cal I just feel like there are some things that are in common, 
 the idea of redirecting traffic - the mechanics may be different but I don't 
 like this idea of oh it's just a little bit different, therefore a whole new 
 separate API is justified
 17:12:52 vikram sc68cal: h
 17:13:20 pcarver cathy_: I understand the desire to not have too many 
 dependencies, but it may make sense to have a have one be a degenerate case 
 of the other
 17:13:42 pcarver as opposed to two unrelated things that appear similar to 
 the user
 17:14:04 LouisF sc68cal: the sfc is more general than the forwarding spec
 17:14:30 LouisF its functionality can be covered by the sfc spec
 17:14:36 vikram sc68cal, pcarver: I agree, service function chaining can 
 achieve the use case defined in forwarding spec 
 17:15:06 pcarver LouisF, vikram: I haven't reviewed 186663 before looking 
 at it just now, but is there a reason why it couldn't be implemented as a 
 trivially simple service chain?
 
 --
 17:15:31 cathy_ vikram:agree with you. Would you like to talk with Yuji on 
 that ?
 17:15:32 vikram pcarver: I believe it can
 17:15:36 LouisF pcarver: yes I think that can be done
 17:16:03 sc68cal yeah I mean I could be stupid but the forwarding API is 
 basically just a chain of 1
 --
 17:16:11 vikram cathy_: We can put our concerns over the etherpad link 
 shared for this spec
 17:16:14 sc68cal and BTW - fwaas is going to be a chain of 1
 17:16:26 vikram https://etherpad.openstack.org/p/forwarding-rule
 17:16:27 sc68cal if we're inserting a firewall between an instance and the 
 rest of the network
 17:16:52 sc68cal I had hoped to consume SFC, to look into making fwaas more 
 flexible
 17:17:00 vikram sc68cal:+++100
 17:17:41 pcarver sc68cal: +1, security functions are a primary example of 
 the reason for SFC, although not all chained functions are firewallish
 17:17:55 jwarendt +1
 17:18:27 cathy_ So we all agree that the service chain API can cover the 
 functionality needed in https://review.openstack.org/#/c/186663/
 17:18:41 LouisF +1
 17:18:58 pcarver I'm also hearing requirements from the NFV side wanting to 
 replicate hub and spoke topologies. I'm viewing that also as a subset of SFC
 -
 17:21:16 cathy_ So how should we make sure there is no duplicate API? Maybe 
 Vikram can communicate this with Yuji? Suggestion?
 17:22:13 sc68cal I'd say maybe an e-mail to the ML, with the results of 
 this meeting, and say that we want to try and converge where there is 
 commonality
 17:22:19 vikram cathy_: sure.. i have posted a comment on the spec.. will 
 try to catch him tomorrow over IRC as wekk

I'm suggesting to both yourself and Louis that a bit of humility would
be a welcome consideration to your communications.

Thank you,
Anita.


 
 
 
 -Original Message-
 From: Anita Kuno [mailto:ante...@anteaya.info] 
 Sent: Monday, July 27, 2015 2:20 PM
 To: openstack-dev@lists.openstack.org
 Subject: Re: [openstack-dev] The proposed Neutron API extension for packet 
 forwarding has a lot of duplication to the Neutron SFC API
 
 On 07/24/2015 06:50 PM, Cathy Zhang wrote:
 Hi Everyone,
 In our last networking-sfc project IRC meeting, an issue was brought up that 
 the API proposed in https://review.openstack.org/#/c/186663/ has a lot of 
 duplication to the SFC API https://review.openstack.org/#/c/192933/ that is 
 being currently implemented. In the IRC meeting, the project team reached 
 consensus that we only need one API and the service chain API can cover the 
 functionality needed by https://review.openstack.org/#/c/186663/. Please 
 refer to 

[openstack-dev] [all] Cross-Project meeting, Tue July 28th, 21:00 UTC

2015-07-28 Thread John Garbutt
Dear PTLs, cross-project liaisons and anyone else interested,

We'll have a cross-project meeting today at 21:00 UTC.
I have agreed to chair it this week.

Here is the agenda:
* Team announcements (horizontal, vertical, diagonal)
* API Guidelines that are ready for final review [1]
* Cross project specs
** No global admin [2]
** Uniform public methods for clients [3]
** Return request-id to caller - tpatil [4]
* Open discussion

[1] http://lists.openstack.org/pipermail/openstack-dev/2015-July/069765.html
[2] https://review.openstack.org/#/c/205629
[3] https://review.openstack.org/#/c/202586
[4] https://review.openstack.org/#/c/156508

If you're from an horizontal team (Release management, QA, Infra, Docs,
Security, I18n...) or a vertical team (Nova, Swift, Keystone...) and
have something to communicate to the other teams, feel free to abuse the
relevant sections of that meeting and make sure it gets #info-ed by the
meetbot in the meeting summary.

See you there!

For more details on this meeting, please see:
https://wiki.openstack.org/wiki/Meetings/CrossProjectMeeting

Thanks,
johnthetubaguy

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [glance] Removing python-swiftclient from requirements.txt

2015-07-28 Thread Kuvaja, Erno
I do agree, we don't depend or are cleaning the other clients out of the glance 
dependencies as well and I think swift should not be there either.

The default store is filesystem store and if something is depending on the 
actual store clients it should be either glance_store or deployer (well for 
example our gate) glance itself should not have hard dependencies for 'em.


-  Erno

From: William M Edmonds [mailto:edmon...@us.ibm.com]
Sent: Monday, July 27, 2015 10:42 PM
To: openstack-dev@lists.openstack.org
Subject: [openstack-dev] [glance] Removing python-swiftclient from 
requirements.txt


python-swiftclient is only needed by operators that are using the swift 
backend, so it really doesn't belong in requirements.txt. Listing it in 
requirements forces all operators to install it, even if they're not going to 
use the swift backend. When I proposed a change [1] to move this from 
requirements to test-requirements (would still be needed there because of tests 
using the swift backend), others raised concerns about the impact this could 
have on operators who use the swift backend today and would be upgrading to 
Liberty. I believe everyone agreed this should not be in requirements, but the 
fact is that it has been, so operators may have (incorrectly) been depending on 
that during upgrades. If we remove it in Liberty, and there are changes in 
Liberty that require a newer version of swiftclient, how would those operators 
know that they need to upgrade swiftclient?

The optional dependencies spec [2] could definitely help here. I don't think we 
should have to wait for that, though. This is an issue we obviously already 
have today for other backends, which indicates folks can deal with it without 
an optional dependencies implementation.

This would be a new concern for operators using the default swift backend, 
though. So how do we get the message out to those operators? And do we need to 
put out a message about this change in Liberty and then wait until Mitaka to 
actually remove this, or can we go ahead and remove in Liberty?

[1] https://review.openstack.org/#/c/203242
[2] 
http://specs.openstack.org/openstack/oslo-specs/specs/liberty/optional-deps.html

-Matthew
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [puppet] Proposing Yanis Guenane core

2015-07-28 Thread Gaël Chamoulaud
On 27/Jul/2015 .::. 15:06, Emilien Macchi wrote:
 Puppet group,
 
 Yanis has been working in our group for a while now.
 He has been involved in a lot of tasks, let me highlight some of them:
 
 * Many times, involved in improving consistency across our modules.
 * Strong focus on data binding, backward compatibility and flexibility.
 * Leadership on cookiebutter project [1].
 * Active participation to meetings, always with actions, and thoughts.
 * Beyond the stats, he has a good understanding of our modules, and
 quite good number of reviews, regularly.
 
 Yanis is for our group a strong asset and I would like him part of our
 core team.
 I really think his involvement, regularity and strong knowledge in
 Puppet OpenStack will really help to make our project better and stronger.
 
 I would like to open the vote to promote Yanis part of Puppet OpenStack
 core reviewers.
 
 Best regards,
 
 [1] https://github.com/openstack/puppet-openstack-cookiecutter
 -- 
 Emilien Macchi
 

A Strong +1 :-)

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Best Regards, Gaël.

-- 
Gaël Chamoulaud
Openstack Engineering
Mail: [gchamoul|gael] at redhat dot com
IRC: strider/gchamoul (Red Hat), gchamoul (Freenode)
GnuPG Key ID: 7F4B301
C75F 15C2 A7FD EBC3 7B2D CE41 0077 6A4B A7F4 B301

Freedom...Courage...Commitment...Accountability


signature.asc
Description: PGP signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Horizon][Neutron] how to configure horizon to use lbaas api v2?

2015-07-28 Thread Wilence Yao
 Hi all,
In devstack, I configured
enable_plugin neutron-lbaas
https://git.openstack.org/openstack/neutron-lbaas
ENABLED_SERVICES+=,q-lbaasv2

so, I can use lbaasv2 api in neutronclient. But I see the agent that's name
is q-lbaasv2 not q-lbaas in screen, and horizon can  recognize it . So I
cann't use resource about lbaas in horizon.
What should to let horizon recognize q-lbaasv2?

Wilence Yao
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [Openstack-operators] Is the neutron port-security extension available for ML2 linux-bridge?

2015-07-28 Thread Charles 'Boyo
Thanks for the response James.

  The port-security extension was implemented for ML2 with OVS in Kilo
 but I cannot seem to find any similar implementation for linux-bridge.​

 It also works with LinuxBridge in Kilo. To gain this functionality, you'll
 need to upgrade the environment from Juno to Kilo.

Though I have never tried code patches to my environment before, I have to
ask: is it possible to bring just enough of the changes in Kilo ML2 into
the current Juno install? If so, how could I go about that?

Charles
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


[openstack-dev] Dragonflow - Weekly IRC Meeting

2015-07-28 Thread Gal Sagie
Hello Everyone,

If you are not familiar with Dragonflow, it is a lightweight SDN controller
embedded in Neutron
that tries to solve distributed virtual routing the SDN way.

Dragonflow is officially part of Neutron big tent starting at Kilo, you can
read more information
about it in the following blog posts [1], [2] and [3].

We are currently under going scale testing and performance tuning using
shaker [4] and big scale
Openstack environment.

There are many future features and ideas coming and we want to make our
discussion as
transparent and visible to everyone that is interested and hopefully
prioritize things based
on inputs from the community.

We would like to conduct a weekly IRC meeting, If you are interested in the
project
and planning to attend, please suggest what is the best day/time to do the
meeting.

Thanks
Gal.

[1] http://blog.gampel.net/2015/01/dragonflow-sdn-based-distributed.html
[2]
http://galsagie.github.io/sdn/openstack/ovs/dragonflow/2015/05/09/dragonflow-1/
[3]
http://galsagie.github.io/sdn/openstack/ovs/dragonflow/2015/05/11/dragonflow-2/
[4] https://github.com/stackforge/shaker
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [Openstack-operators] [openstack-dev] Which is the correct way to set ha queues in RabbitMQ

2015-07-28 Thread vishal yadav
You're welcome :)

On Tue, Jul 28, 2015 at 1:15 PM, Alvise Dorigo alvise.dor...@pd.infn.it
wrote:

  thank you very much Vishal.

 A.


 On 28/07/2015 09:41, vishal yadav wrote:

ha_all vs. HA.
  which one is correct ?

 That's the policy name, you can name anything...

  Excerpt from 'man rabbitmqctl'
 ...
 set_policy [-p vhostpath] {name} {pattern} {definition} [priority]
Sets a policy.

name
The name of the policy.

pattern
The regular expression, which when matches on a given
 resources causes the policy to apply.

definition
The definition of the policy, as a JSON term. In most
 shells you are very likely to need to quote this.

priority
The priority of the policy as an integer, defaulting to 0.
 Higher numbers indicate greater precedence.
 ...

  Regards,
  Vishal


 On Tue, Jul 28, 2015 at 12:47 PM, Alvise Dorigo alvise.dor...@pd.infn.it
 wrote:

  Hi,
 I read these two documents:


 http://docs.openstack.org/high-availability-guide/content/_configure_rabbitmq.html

 https://www.rdoproject.org/RabbitMQ

 To configure the queues in HA mode, the two docs suggests two slightly
 different commands;

 The first one says:

 rabbitmqctl set_policy ha-all '^(?!amq\.).*' '{ha-mode: all}'


 while the second one says:

 rabbitmqctl set_policy HA '^(?!amq\.).*' '{ha-mode: all}'


 ha_all vs. HA.

 which one is correct ?

 thanks,

 Alvise

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


Re: [openstack-dev] [fuel] Fuel plugin as docker containers images

2015-07-28 Thread Evgeniy L
Hi Konstantin,

I'm not sure if we track such feature anywhere. But one of the reasons
to use containers on the master was to deliver plugin specific containers,
so they don't intersect and don't break Fuel master dependencies.
Do you have some specific use case for that?

Thanks,

On Mon, Jul 27, 2015 at 4:58 PM, Konstantin Danilov kdani...@mirantis.com
wrote:

 Hi,

 Is there a plans to allow plugin to be delivered as docker container
 images?

 Thanks

 --
 Kostiantyn Danilov aka koder.ua
 Principal software engineer, Mirantis

 skype:koder.ua
 http://koder-ua.blogspot.com/
 http://mirantis.com

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [cinder][nova] snapshot and cloning for NFS backend

2015-07-28 Thread Kekane, Abhishek
Hi Devs,

There is an NFS backend driver for cinder, which supports only limited volume 
handling features. Specifically, snapshot and cloning features are missing.

Eric Harney has proposed a feature of NFS driver snapshot [1][2][3], which 
was approved on Dec 2014 but not implemented yet.

[1] blueprint https://blueprints.launchpad.net/cinder/+spec/nfs-snapshots
[2] cinder-specs https://review.openstack.org/#/c/133074/  - merged for Kilo 
but moved to Liberty
[3] implementation https://review.openstack.org/#/c/147186/  - WIP

As of now [4] nova patch is a blocker for this feature.
I have tested this feature by applying [4] nova patch and it is working as per 
expectation.

[4] https://review.openstack.org/#/c/149037/

IMO this is a very useful feature and I want to know communities 
opinion/direction about getting it merged during liberty time-frame.

Thanks  Regards,

Abhishek Kekane

__
Disclaimer: This email and any attachments are sent in strictest confidence
for the sole use of the addressee and may contain legally privileged,
confidential, and proprietary data. If you are not the intended recipient,
please advise the sender by replying promptly to this email and then delete
and destroy this email and any attachments without any further use, copying
or forwarding.__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [Openstack-operators] [puppet] module dependencies and different openstack versions

2015-07-28 Thread Cynthia Lopes
Hi,

I have same feedback as Robert, we use the openstack/puppet-[project]
modules and they are quiet independent. We have our own module that
integrates those modules as we need and we even deploy each service on
different nodes so we need them to be independent and we could achieve it.

Kind regards,
Cynthia Lopes do Sacramento


2015-07-28 9:43 GMT+02:00 Van Leeuwen, Robert rovanleeu...@ebay.com:

 
 We currently use our own custom puppet modules to deploy openstack, I
 have been looking into the official openstack modules and have a few
 barriers to switching.
 
 We are looking at doing this at a project at a time but the modules have
 a lot of dependencies. Eg. they all depend on the keystone module and try
 to do things in keystone suck as create users, service endpoints etc.
 
 This is a pain as I don¹t want it to mess with keystone (for one we don¹t
 support setting endpoints via an API) but also we don¹t want to move to
 the official keystone module at the same time. We have some custom
 keystone stuff which means we¹ll may never move to the official keystone
 puppet module.
 
 The neutron module pulls in the vswitch module but we don¹t use vswitch
 and it doesn¹t seem to be a requirement of the module so maybe doesn¹t
 need to be in metadata dependencies?
 
 It looks as if all the openstack puppet modules are designed to all be
 used at once? Does anyone else have these kind of issues? It would be
 great if eg. the neutron module would just manage neutron and not try and
 do things in nova, keystone, mysql etc.
 
 
 The other issue we have is that we have different services in openstack
 running different versions. Currently we have Kilo, Juno and Icehouse
 versions of different bits in the same cloud. It seems as if the puppet
 modules are designed just to manage one openstack version? Is there any
 thoughts on making it support different versions at the same time? Does
 this work?



 Hi,

 In my experience (I am setting up a new environment) the modules can be
 used ³stand-alone².
 It is the OpenStack module itself that comes with a combined server
 example.
 The separate modules (nova, glance, etc) are very configurable and don¹t
 necessarily need to setup e.g. keystone.

 From the OpenStack module you can modify the profiles and it will not do
 the keystone stuff / database, etc..
 E.g. Remove the ³:nova::keystone::auth² part in the nova profile.

 We use r10k to select which versions to install and it should be trivial
 to use Juno / Kilo stuff together (have not tested this myself).


 Regarding the vswich module I *guess* that that is regulated by the
 following:
 neutron/manifests/agents/ml2/ovs.pp: if
 $::neutron::params::ovs_agent_package
 So unsetting that variable should not pull the package.

 Cheers,
 Robert van Leeuwen


 ___
 OpenStack-operators mailing list
 OpenStack-operators@lists.openstack.org
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators

___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-28 Thread Evgeniy L
Hi Alexander, I don't agree with your statements

 [1] - I just uses % and % to substitute values.

It's what templating is about, you have some text preprocessor to
substitute values.

 That is not ERB style template language.

ERB uses the same syntax, hence it Is ERB style.

 [2] - We are not using Jinja templating (it is just yaml file, not html
template), we are using Jinja placeholder substitution.

We *are using* jinja templating (I don't understand why you mention here
html),
with all it's features and here is the proof [1].

 And in current code we have a problem with content at first parsed from
yaml and that parser treats { and [ as a start if a dict or an array.

key: {{blha}}

 [3] - Templates are for people who do not care about Jinja/ERB (maybe
some familiar with Puppet/Chef), so no confusion.

That is not correct, every template has it's own syntax, so people have to
care about
specific implementation i.e. Jinja or ERB, and there will be confusion when
somebody will
try to use ERB specific features, and she/he will fail because you hide
Jinja under ERB
syntax.

[1]
https://github.com/stackforge/fuel-web/blob/master/nailgun/nailgun/objects/node.py#L854-L855


On Tue, Jul 28, 2015 at 11:29 AM, Alexander Kostrikov 
akostri...@mirantis.com wrote:

 Completely agree with Sergey.

 Currently network template uses ERB [1] style template language,
 but in fact it's Jinja [2], it was agreed to change it [3], no to confuse
 the user

 [1] - I just uses % and % to substitute values. That is not ERB style
 template language.
 [2] - We are not using Jinja templating (it is just yaml file, not html
 template), we are using Jinja placeholder substitution. And in current code
 we have a problem with content at first parsed from yaml and that parser
 treats { and [ as a start if a dict or an array.
 [3] - Templates are for people who do not care about Jinja/ERB (maybe some
 familiar with Puppet/Chef), so no confusion.




 On Tue, Jul 28, 2015 at 10:57 AM, Sergey Vasilenko 
 svasile...@mirantis.com wrote:


 On Mon, Jul 27, 2015 at 1:10 PM, Evgeniy L e...@mirantis.com wrote:

 Currently network template uses ERB [1] style template language,
 but in fact it's Jinja [2], it was agreed to change it [3], no to confuse
 the user, with ERB which is in fact jinja and doesn't have any ERB
 features.


 we have not so much syntax choices for  convenient templating. Network
 temptales will be used by system administrators.
 The '%  %' pair is a de-facto standart in this area. In the puppet
 world. Not every system administrator will meaning ERB when seeing '% %'
 pair.
 Another pairs (i.e. '$ $' , ' ', etc) looks more
 non-standart. Plenty of syntax features are annoy and make usability of
 product less convenient.
 I propose do not make extra essences on the clean area...

 We never say in the docs about ERB. IMHO it's enough for leave '%  %'
 as is.


 /sv

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




 --

 Kind Regards,

 Alexandr Kostrikov,

 Mirantis, Inc.

 35b/3, Vorontsovskaya St., 109147, Moscow, Russia


 Tel.: +7 (495) 640-49-04
 Tel.: +7 (925) 716-64-52 %2B7%20%28906%29%20740-64-79

 Skype: akostrikov_mirantis

 E-mail: akostri...@mirantis.com elogut...@mirantis.com

 *www.mirantis.com http://www.mirantis.ru/*
 *www.mirantis.ru http://www.mirantis.ru/*

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Fuel][RabbitMQ][puppet] Kilo status of the heartbeats implementation

2015-07-28 Thread Dmitry Mescheryakov
Bogdan,

Answering your questions, in MOS 7.0 source code heartbeats are enabled by
default (with heartbeat_timeout_threshold value set to 60). We patched our
version of upstream stable/kilo to do so. So, in installed env heartbeats
are enabled for every component except Neutron, for which puppet manifests
explicitly disable heartbeats, as you already noted.

Regarding how should we proceed, right now we are testing how upstream
implementation performs in our environments. I suggest to postpone the
decision until we have enough data.

Thanks,

Dmitry

2015-07-28 12:06 GMT+03:00 Bogdan Dobrelya bdobre...@mirantis.com:

 Folks, it seems the situation with Kilo support for RabbitMQ heartbeats
 should be elaborated.
 There is a bug [0] and a ML [1] related. The questions are:

 a) Should Fuel 7.0 with Kilo *explicitly* disable via puppet the
 upstream implementation of heartbeats for all OpenStack components
 (Neutron example [2]) and keep the MOS specific implementation of
 heartbeats configured the same way as it was for Juno?

 b) Or should we change nothing additionally allowing Oslo defaults for
 Kilo being populated for heartbeats settings out of box? Related
 question - what are upstream heartbeat defaults in MOS, do they differ
 to upstream ones?

 [0] https://bugs.launchpad.net/fuel/+bug/1477689
 [1]
 http://lists.openstack.org/pipermail/openstack-dev/2015-July/068751.html
 [2] https://review.openstack.org/#/c/194381/

 --
 Best regards,
 Bogdan Dobrelya,
 Irc #bogdando

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] Announcing HyperStack project

2015-07-28 Thread Adrian Otto
Jay,

Yes, it is on the agenda.

Thanks,

Adrian

On Jul 27, 2015, at 8:32 AM, Jay Lau 
jay.lau@gmail.commailto:jay.lau@gmail.com wrote:

Adrian,

Can we put hyper as a topic for this week's (Tomorrow) meeting? I want to have 
some discussion with you.

Thanks

2015-07-27 0:43 GMT-04:00 Adrian Otto 
adrian.o...@rackspace.commailto:adrian.o...@rackspace.com:
Peng,

For the record, the Magnum team is not yet comfortable with this proposal. This 
arrangement is not the way we think containers should be integrated with 
OpenStack. It completely bypasses Nova, and offers no Bay abstraction, so there 
is no user selectable choice of a COE (Container Orchestration Engine). We 
advised that it would be smarter to build a nova virt driver for Hyper, and 
integrate that with Magnum so that it could work with all the different bay 
types. It also produces a situation where operators can not effectively bill 
for the services that are in use by the consumers, there is no sensible 
infrastructure layer capacity management (scheduler), no encryption management 
solution for the communication between k8s minions/nodes and the k8s master, 
and a number of other weaknesses. I’m not convinced the single-tenant approach 
here makes sense.

To be fair, the concept is interesting, and we are discussing how it could be 
integrated with Magnum. It’s appropriate for experimentation, but I would not 
characterize it as a “solution for cloud providers” for the above reasons, and 
the callouts I mentioned here:

http://lists.openstack.org/pipermail/openstack-dev/2015-July/069940.html

Positioning it that way is simply premature. I strongly suggest that you attend 
the Magnum team meetings, and work through these concerns as we had Hyper on 
the agenda last Tuesday, but you did not show up to discuss it. The ML thread 
was confused by duplicate responses, which makes it rather hard to follow.

I think it’s a really bad idea to basically re-implement Nova in Hyper. Your’e 
already re-implementing Docker in Hyper. With a scope that’s too wide, you 
won’t be able to keep up with the rapid changes in these projects, and anyone 
using them will be unable to use new features that they would expect from 
Docker and Nova while you are busy copying all of that functionality each time 
new features are added. I think there’s a better approach available that does 
not require you to duplicate such a wide range of functionality. I suggest we 
work together on this, and select an approach that sets you up for success, and 
gives OpenStack could operators what they need to build services on Hyper.

Regards,

Adrian

On Jul 26, 2015, at 7:40 PM, Peng Zhao p...@hyper.shmailto:p...@hyper.sh 
wrote:

Hi all,
I am glad to introduce the HyperStack project to you.
HyperStack is a native, multi-tenant CaaS solution built on top of OpenStack. 
In terms of architecture, HyperStack = Bare-metal + Hyper + Kubernetes + Cinder 
+ Neutron.
HyperStack is different from Magnum in that HyperStack doesn't employ the Bay 
concept. Instead, HyperStack pools all bare-metal servers into one singe 
cluster. Due to the hypervisor nature in Hyper, different tenants' applications 
are completely isolated (no shared kernel), thus co-exist without security 
concerns in a same cluster.
Given this, HyperStack is a solution for public cloud providers who want to 
offer the secure, multi-tenant CaaS.
Ref: 
https://trello-attachments.s3.amazonaws.com/55545e127c7cbe0ec5b82f2b/1258x535/1c85a755dcb5e4a4147d37e6aa22fd40/upload_7_23_2015_at_11_00_41_AM.png
The next step is to present a working beta of HyperStack at Tokyo summit, which 
we submitted a presentation: 
https://www.openstack.org/summit/tokyo-2015/vote-for-speakers/Presentation/4030.
 Please vote if you are interested.
In the future, we want to integrate HyperStack with Magnum and Nova to make 
sure one OpenStack deployment can offer both IaaS and native CaaS services.
Best,
Peng
-- Background 
---
Hyper is a hypervisor-agnostic Docker runtime. It allows to run Docker images 
with any hypervisor (KVM, Xen, Vbox, ESX). Hyper is different from the 
minimalist Linux distros like CoreOS by that Hyper runs on the physical box and 
load the Docker images from the metal into the VM instance, in which no guest 
OS is present. Instead, Hyper boots a minimalist kernel in the VM to host the 
Docker images (Pod).
With this approach, Hyper is able to bring some encouraging results, which are 
similar to container:
- 300ms to boot a new HyperVM instance with a pod of Docker images
- 20MB for min mem footprint of a HyperVM instance
- Immutable HyperVM, only kernel+images, serves as atomic unit (Pod) for 
scheduling
- Immune from the shared kernel problem in LXC, isolated by VM
- Work seamlessly with OpenStack components, Neutron, Cinder, due to the 
hypervisor nature
- BYOK, bring-your-own-kernel is somewhat mandatory for a public cloud platform


Re: [openstack-dev] [all] [oslo] Suggestion to change verbose=false to true in oslo.log by default

2015-07-28 Thread Dmitry Tantsur

On 07/27/2015 02:11 PM, Sean Dague wrote:

Honestly, I think deprecating and removing 'verbose' is probably the
best option. INFO is probably the right default behavior, and it's not
really verbose in any real openstack usage. It is unlikely that anyone
would want that to be in the off state, and if so, they can do that via
python logging config.


Thanks!

As I saw no objections, I went ahead and proposed 
https://review.openstack.org/#/c/206437/




On 07/27/2015 06:32 AM, Dmitry Tantsur wrote:

Hi all!

I didn't find the discussion on the ML so I feel like starting one.
What was the reason of setting verbose to false by default? The patch
[1] does not provide any reasoning for it.

We all know that software does fail from time to time. While the default
level of WARN might give some signal to an operator that *something* is
wrong, it usually does not give much clues on *what* and *why*. Our logs
guidelines define INFO as units of work, and the default means that
operators/people debugging their logs won't even be able to track
transitions in their system that lead to an error/warning.

Of all people I know 100% are using DEBUG level by default, the only
post I've found here on this topic [2] seems to state the same. I
realize that DEBUG might give too much information to process (though I
always request people to enable debugging log before sending my any bug
reports). But is there really a compelling reason to disable INFO?

Examples of INFO logs from ironic tempest run:
ironic cond:
http://logs.openstack.org/62/202562/7/check/gate-tempest-dsvm-ironic-pxe_ssh/090871b/logs/screen-ir-cond.txt.gz?level=INFO

nova cpu:
http://logs.openstack.org/62/202562/7/check/gate-tempest-dsvm-ironic-pxe_ssh/090871b/logs/screen-n-cpu.txt.gz?level=INFO

and the biggest one neutron agt:
http://logs.openstack.org/62/202562/7/check/gate-tempest-dsvm-ironic-pxe_ssh/090871b/logs/screen-q-agt.txt.gz?level=INFO


As you can see, these logs are so small, you can just read through them
without any tooling! Of course it's not a real world example, but I'm
dealing with hundrer-of-megabytes debug-level text logs from nova +
ironic nearly every day. It's still manangeable for me, grep handles it
pretty well (to say nothing about journalctl).

WDYT about changing this default on oslo.log level?

Thanks,
Dmitry

[1] https://review.openstack.org/#/c/18110/
[2]
http://lists.openstack.org/pipermail/openstack-operators/2014-March/004156.html


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev






__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] Which is the correct way to set ha queues in RabbitMQ

2015-07-28 Thread Alvise Dorigo

Hi,
I read these two documents:

http://docs.openstack.org/high-availability-guide/content/_configure_rabbitmq.html

https://www.rdoproject.org/RabbitMQ

To configure the queues in HA mode, the two docs suggests two slightly 
different commands;


The first one says:

rabbitmqctl set_policy ha-all '^(?!amq\.).*' '{ha-mode: all}'


while the second one says:

rabbitmqctl set_policy HA '^(?!amq\.).*' '{ha-mode: all}'


ha_all vs. HA.

which one is correct ?

thanks,

Alvise
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-28 Thread Sergey Vasilenko
On Mon, Jul 27, 2015 at 1:10 PM, Evgeniy L e...@mirantis.com wrote:

 Currently network template uses ERB [1] style template language,
 but in fact it's Jinja [2], it was agreed to change it [3], no to confuse
 the user, with ERB which is in fact jinja and doesn't have any ERB
 features.


we have not so much syntax choices for  convenient templating. Network
temptales will be used by system administrators.
The '%  %' pair is a de-facto standart in this area. In the puppet world.
Not every system administrator will meaning ERB when seeing '% %' pair.
Another pairs (i.e. '$ $' , ' ', etc) looks more non-standart. Plenty
of syntax features are annoy and make usability of product less convenient.
I propose do not make extra essences on the clean area...

We never say in the docs about ERB. IMHO it's enough for leave '%  %' as
is.


/sv
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [Openstack-operators] [openstack-dev] Which is the correct way to set ha queues in RabbitMQ

2015-07-28 Thread Alvise Dorigo

Hi Vishal,
do you have a effective recipe to test if the rabbitmq's HA ?
I've three instances of it; I've also nova, cinder and neutron 
configured with rabbit_ha_queues = true.


Just restarting a rabbit instance seems not to be sufficient to test a 
real case scenario, is it ?


any advice ?

thanks,

Alvise

On 28/07/2015 09:46, vishal yadav wrote:

You're welcome :)

On Tue, Jul 28, 2015 at 1:15 PM, Alvise Dorigo 
alvise.dor...@pd.infn.it mailto:alvise.dor...@pd.infn.it wrote:


thank you very much Vishal.

A.


On 28/07/2015 09:41, vishal yadav wrote:

 ha_all vs. HA.
 which one is correct ?

That's the policy name, you can name anything...

Excerpt from 'man rabbitmqctl'
...
set_policy [-p vhostpath] {name} {pattern} {definition} [priority]
   Sets a policy.

   name
   The name of the policy.

   pattern
   The regular expression, which when matches on a
given resources causes the policy to apply.

   definition
   The definition of the policy, as a JSON term. In
most shells you are very likely to need to quote this.

   priority
   The priority of the policy as an integer,
defaulting to 0. Higher numbers indicate greater precedence.
...

Regards,
Vishal


On Tue, Jul 28, 2015 at 12:47 PM, Alvise Dorigo
alvise.dor...@pd.infn.it mailto:alvise.dor...@pd.infn.it wrote:

Hi,
I read these two documents:


http://docs.openstack.org/high-availability-guide/content/_configure_rabbitmq.html

https://www.rdoproject.org/RabbitMQ

To configure the queues in HA mode, the two docs suggests two
slightly different commands;

The first one says:

rabbitmqctl set_policy ha-all '^(?!amq\.).*' '{ha-mode: all}'


while the second one says:

rabbitmqctl set_policy HA '^(?!amq\.).*' '{ha-mode: all}'


ha_all vs. HA.

which one is correct ?

thanks,

Alvise


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev







___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


Re: [openstack-dev] [cinder][nova] snapshot and cloning for NFS backend

2015-07-28 Thread Jordan Pittier
Hi

The patch [4] has been abandoned but it's not clear why. I too think that
having a full fledged NFS driver would be great !

[4] https://review.openstack.org/#/c/149037/

Jordan

On Tue, Jul 28, 2015 at 10:00 AM, Kekane, Abhishek 
abhishek.kek...@nttdata.com wrote:

  Hi Devs,



 There is an NFS backend driver for cinder, which supports only limited
 volume handling features. Specifically, snapshot and cloning features
 are missing.



 Eric Harney has proposed a feature of NFS driver snapshot [1][2][3],
 which was approved on Dec 2014 but not implemented yet.



 [1] blueprint https://blueprints.launchpad.net/cinder/+spec/nfs-snapshots

 [2] cinder-specs https://review.openstack.org/#/c/133074/  - merged for
 Kilo but moved to Liberty

 [3] implementation https://review.openstack.org/#/c/147186/  - WIP



 As of now [4] nova patch is a blocker for this feature.

 I have tested this feature by applying [4] nova patch and it is working as
 per expectation.



 [4] https://review.openstack.org/#/c/149037/



 IMO this is a very useful feature and I want to know communities
 opinion/direction about getting it merged during liberty time-frame.



 Thanks  Regards,



 Abhishek Kekane

 __
 Disclaimer: This email and any attachments are sent in strictest confidence
 for the sole use of the addressee and may contain legally privileged,
 confidential, and proprietary data. If you are not the intended recipient,
 please advise the sender by replying promptly to this email and then delete
 and destroy this email and any attachments without any further use, copying
 or forwarding.

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-28 Thread Sergey Vasilenko
On Tue, Jul 28, 2015 at 11:52 AM, Evgeniy L e...@mirantis.com wrote:

 Hi Alexander, I don't agree with your statements

  [1] - I just uses % and % to substitute values.

 It's what templating is about, you have some text preprocessor to
 substitute values.


Network templates feature don't mean any  text preprocessor actions. Only
value substitutions


  That is not ERB style template language.

 ERB uses the same syntax, hence it Is ERB style.


... hence it looks like ERB. not more.
Not only ruby used for programming. Non only EBD -- is template language. ;)


  [2] - We are not using Jinja templating (it is just yaml file, not html
 template), we are using Jinja placeholder substitution.

 We *are using* jinja templating (I don't understand why you mention here
 html),
 with all it's features and here is the proof [1].


We don't promise use Junja (or whatever) template language for this feature.
If some jinja features allowed for parsing Network template -- it's a bug.
We should check it and fix it.
Only value substitutions should allow in the network templates.


  [3] - Templates are for people who do not care about Jinja/ERB (maybe
 some familiar with Puppet/Chef), so no confusion.

 That is not correct, every template has it's own syntax, so people have to
 care about
 specific implementation i.e. Jinja or ERB, and there will be confusion
 when somebody will
 try to use ERB specific features, and she/he will fail because you hide
 Jinja under ERB
 syntax.


I, partially, agree with you. But please honored to following facts:
* In the deployers world used Jinja and ERB syntax.
* ERB used more often, because Ansible (I don't know another popular
deployers tools with Jinja templating) is to young.
* Plenty of syntax features is a really hell.

In the Network templates we don't suppose anything other than a simple
substitution variable values.
All logic of template processing implementing on Nailgun side. Now on the
template parsing, later -- on the network manipulation class.
Allowance of mix template language and Nailgun logic may lead to heavy
diagnostic issues.
Meantime I don't see any cases, where required something more, than
substitution.



/sv
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [cinder][nova] snapshot and cloning for NFS backend

2015-07-28 Thread Kekane, Abhishek
Hi Jordan,

The patch [4] is abandoned by the owner because as of now as it’s not an 
appropriate way to fix this issue and it need to be fixed using some other way.
Nova members please let us know your suggestions about the same.

Thank you,

Abhishek Kekane

From: Jordan Pittier [mailto:jordan.pitt...@scality.com]
Sent: 28 July 2015 14:24
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] [cinder][nova] snapshot and cloning for NFS backend

Hi

The patch [4] has been abandoned but it's not clear why. I too think that 
having a full fledged NFS driver would be great !

[4] https://review.openstack.org/#/c/149037/

Jordan

On Tue, Jul 28, 2015 at 10:00 AM, Kekane, Abhishek 
abhishek.kek...@nttdata.commailto:abhishek.kek...@nttdata.com wrote:
Hi Devs,

There is an NFS backend driver for cinder, which supports only limited volume 
handling features. Specifically, snapshot and cloning features are missing.

Eric Harney has proposed a feature of NFS driver snapshot [1][2][3], which 
was approved on Dec 2014 but not implemented yet.

[1] blueprint https://blueprints.launchpad.net/cinder/+spec/nfs-snapshots
[2] cinder-specs https://review.openstack.org/#/c/133074/  - merged for Kilo 
but moved to Liberty
[3] implementation https://review.openstack.org/#/c/147186/  - WIP

As of now [4] nova patch is a blocker for this feature.
I have tested this feature by applying [4] nova patch and it is working as per 
expectation.

[4] https://review.openstack.org/#/c/149037/

IMO this is a very useful feature and I want to know communities 
opinion/direction about getting it merged during liberty time-frame.

Thanks  Regards,

Abhishek Kekane

__
Disclaimer: This email and any attachments are sent in strictest confidence
for the sole use of the addressee and may contain legally privileged,
confidential, and proprietary data. If you are not the intended recipient,
please advise the sender by replying promptly to this email and then delete
and destroy this email and any attachments without any further use, copying
or forwarding.

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: 
openstack-dev-requ...@lists.openstack.org?subject:unsubscribehttp://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
Disclaimer: This email and any attachments are sent in strictest confidence
for the sole use of the addressee and may contain legally privileged,
confidential, and proprietary data. If you are not the intended recipient,
please advise the sender by replying promptly to this email and then delete
and destroy this email and any attachments without any further use, copying
or forwarding.
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Fuel][python-fuelclient] Implementing new commands

2015-07-28 Thread Sebastian Kalinowski
It looks like most people agree on option C (implement features in fuel and
fuel2) and in the meantime
we should slowly progress with moving fuel to fuel2.

2015-07-27 16:12 GMT+02:00 Sergii Golovatiuk sgolovat...@mirantis.com:

 Hi,

 Every functionality should be applied to both clients. Core developers
 should set -1 if it's not applied to second version of plugin. Though I
 believe we should completely get rid of first version of CLI in Fuel 8.0

 --
 Best regards,
 Sergii Golovatiuk,
 Skype #golserge
 IRC #holser

 On Fri, Jul 24, 2015 at 11:41 AM, Oleg Gelbukh ogelb...@mirantis.com
 wrote:

 FWIW, I'm for option B, combined with clear timeline for porting features
 of fuel-variant to fuel2. For example, we are developing client-side
 functions for fuel-octane (cluster upgrade) extensions only for fuel2, and
 don't plan to implement it for 'fuel'.

 The main reason why we can't just drop 'fuel', or rather switch it to
 fuel2 syntax, IMO, is the possibility that someone somewhere uses its
 current syntax for automation. However, if the function is completely new,
 the automation of this function should be implemented with the new version
 of syntax.

 --
 Best regards,
 Oleg Gelbukh

 On Fri, Jul 24, 2015 at 12:09 PM, Fedor Zhadaev fzhad...@mirantis.com
 wrote:

 Hi all,

 I think that in current situation the best solution will be to add new
 features for the both versions of client. It may cause a little slowing
 down of developing each feature, but we won't have to return to them in
 future.

 2015-07-24 11:58 GMT+03:00 Igor Kalnitsky ikalnit...@mirantis.com:

 Hello,

 My 2 cents on it.

 Following plan C requires a huge effort from developer, and it may be
 unacceptable when FF is close and there're a lot of work to do. So it
 looks like the plan B is most convenient for us and eventually we will
 have all features in fuel2.

 Alternatively we can go with C.. but only if implementing support in
 either fuel or fuel2 may be postponed to SCF.

 Thanks,
 Igor

 On Fri, Jul 24, 2015 at 10:58 AM, Evgeniy L e...@mirantis.com wrote:
  Hi Sebastian, thanks for clarification, in this case I think we
  should follow plan C, new features should not slow us down
  in migration from old to new version of the client.
 
  On Thu, Jul 23, 2015 at 8:52 PM, Sebastian Kalinowski
  skalinow...@mirantis.com wrote:
 
  2015-07-23 18:28 GMT+02:00 Stanislaw Bogatkin 
 sbogat...@mirantis.com:
 
  Hi,
 
  can we just add all needed functionality from old fuel client that
 fuel2
  needs, then say that old fuel-client is deprecated now and will not
 support
  some new features, then add new features to fuel2 only? It seems
 like best
  way for me, cause with this approach:
  1. Clients will can use only one version of client (new one) w/o
  switching between 2 clients with different syntax
  2. We won't have to add new features to two clients.
 
 
  Stas, of course moving it all to new fuel2 would be the best way to
 do it,
  but this refactoring took place in previous release. There is no one
 that
  ported a single command (except new ones) since then and there is no
 plan
  for doing so since other activities have higher priority. And
 features are
  still coming so it would be nice to have a policy for the time all
 commands
  will move to new fuel2.
 
 
 
  On Thu, Jul 23, 2015 at 9:19 AM, Evgeniy L e...@mirantis.com
 wrote:
 
  Hi,
 
  The best option is to add new functionality to fuel2 only, but I
  don't think that we can do that if there is not enough
 functionality
  in fuel2, we should not ask user to switch between fuel and fuel2
  to get some specific functionality.
  Do we have some list of commands which is not covered in fuel2?
  I'm just wondering how much time will it take to implement all
  required commands in fuel2.
 
 
  So to compare: this is a help message for old fuel [1] and new
 fuel2
  [2]. There are only node, env and task actions covered and
 even they
  are not covered in 100%.
 
  [1] http://paste.openstack.org/show/404439/
  [2] http://paste.openstack.org/show/404440/
 
 
 
 
  Thanks,
 
  On Thu, Jul 23, 2015 at 1:51 PM, Sebastian Kalinowski
  skalinow...@mirantis.com wrote:
 
  Hi folks,
 
  For a some time in python-fuelclient we have two CLI apps: `fuel`
 and
  `fuel2`. It was done as an implementation of blueprint [1].
  Right now there is a situation where some new features are added
 just
  to old `fuel`, some to just `fuel2`, some to both. We cannot
 simply switch
  completely to new `fuel2` as it doesn't cover all old commands.
  As far as I remember there was no agreement how we should proceed
 with
  adding new things to python-fuelclient, so to keep all
 development for new
  commands I would like us to choose what will be our approach.
 There are 3
  ways to do it (with some pros and cons):
 
  A) Add new features only to old `fuel`.
  Pros:
   - Implement feature in one place
   - Almost all features are covered there
  Cons:
   - Someone will need to port this features to new 

Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-28 Thread Evgeniy L
Hi Sergey,

Thanks, now I see why we had misunderstanding. The problem is currently
all set of features which Jinja2 provides is available for the user. As far
as
I know there is no way in Jinja to disable all of the functionality except
just
substitution.

If we need only substitution, probably it's better to use standard
templating
in python [1], there is a way to redefine tokens, so you will be able to use
% % syntax if you want to.

[1] https://docs.python.org/2.6/library/string.html#template-strings
https://docs.python.org/dev/library/string.html#template-strings
[2] http://pymotw.com/2/string/#advanced-templates

On Tue, Jul 28, 2015 at 12:25 PM, Sergey Vasilenko svasile...@mirantis.com
wrote:


 On Tue, Jul 28, 2015 at 11:52 AM, Evgeniy L e...@mirantis.com wrote:

 Hi Alexander, I don't agree with your statements

  [1] - I just uses % and % to substitute values.

 It's what templating is about, you have some text preprocessor to
 substitute values.


 Network templates feature don't mean any  text preprocessor actions.
 Only value substitutions


  That is not ERB style template language.

 ERB uses the same syntax, hence it Is ERB style.


 ... hence it looks like ERB. not more.
 Not only ruby used for programming. Non only EBD -- is template language.
 ;)


  [2] - We are not using Jinja templating (it is just yaml file, not
 html template), we are using Jinja placeholder substitution.

 We *are using* jinja templating (I don't understand why you mention here
 html),
 with all it's features and here is the proof [1].


 We don't promise use Junja (or whatever) template language for this
 feature.
 If some jinja features allowed for parsing Network template -- it's a bug.
 We should check it and fix it.
 Only value substitutions should allow in the network templates.


  [3] - Templates are for people who do not care about Jinja/ERB (maybe
 some familiar with Puppet/Chef), so no confusion.

 That is not correct, every template has it's own syntax, so people have
 to care about
 specific implementation i.e. Jinja or ERB, and there will be confusion
 when somebody will
 try to use ERB specific features, and she/he will fail because you hide
 Jinja under ERB
 syntax.


 I, partially, agree with you. But please honored to following facts:
 * In the deployers world used Jinja and ERB syntax.
 * ERB used more often, because Ansible (I don't know another popular
 deployers tools with Jinja templating) is to young.
 * Plenty of syntax features is a really hell.

 In the Network templates we don't suppose anything other than a simple
 substitution variable values.
 All logic of template processing implementing on Nailgun side. Now on the
 template parsing, later -- on the network manipulation class.
 Allowance of mix template language and Nailgun logic may lead to heavy
 diagnostic issues.
 Meantime I don't see any cases, where required something more, than
 substitution.



 /sv

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Ironic] Let's talk about API versions

2015-07-28 Thread Dmitry Tantsur

On 07/27/2015 10:41 PM, Sean Dague wrote:

On 07/27/2015 04:35 PM, Jim Rollenhagen wrote:

Hi friends.

Ironic implemented API micro versions in Kilo. We originally did this
to allow for breaking changes in the API while allowing users to opt in
to the breakage.

Since then, we've had a default version for our client that we bump to
something sensible with each release. Currently it is at 1.8.
Negotiation is done with the server to figure out what is supported and
adjust accordingly.

Now we've landed a patch[0] with a new version (1.11) that is not
backward compatible. It causes newly added Node objects to begin life in
the ENROLL state, rather than AVAILABLE. This is a good thing, and
people should want this! However, it is a breaking change. Automation
that adds nodes to Ironic will need to do different things after the
node-create call.

Our API versioning scheme makes this opt-in (by specifying the API
version). However, some folks have a problem with releasing this change
as-is. The logic is that we might release a client that defaults to 1.11
or higher, or the user may request 1.12 later to get a new feature, thus
breaking their application that enrolls nodes.

This is clearly backwards. Users should read release notes and be aware
of what changes between versions in the API. Users need to be aware of
the fact that our API is versioned, and use that to their advantage.

It seems to me that the goal of the version negotiation in our client
has been to pretend that our API versions don't exist, from a user
perspective. We need to stop doing this and force users to think about
what they are doing when they interact with our API.

It seems to me we have a few options here:

1) Default the python client and CLI to the earliest supported version.
This will never break users by default.

2) Default the python client and CLI to use the special version
'latest'. This will always use the latest API version, and always
break people when a new server version (that is not backwards
compatible) is deployed.

3) Do what Nova does[1]. Default CLI to latest and python client to
earliest. This assumes that CLI is typically used for one-time commands
(and it isn't a big deal if we break a one-off command once), and the
python client is used for applications.


Actually what Nova is doing is slight different than this, the CLI will
default to latest on the server. There will be an extra round trip to
figure out what that is. And the CLI will (long term) just not present
commands that aren't available at the server level you are talking to.

Consider the CLI an auto negotiating microversion application of the
python API client. And, realistically, should solve some of the issues
of people running nova foo and getting cryptic errors from the server
when they are hitting an old version of Nova that doesn't know how to foo.

So the CLI should actually break less often, and will expose the most
functionality you can get out of your cloud.


What I find weird about this and similar approaches is that we treat CLI 
and any different from other ways to use API. And I *suspect* this is 
because we, the developers, use it the most and point newcomers to it. 
And I agree it's troublesome to explain that to use manage provision 
verb you have to provide --ironic-api-version 1.6. Or was 1.6 for 
inspect? Hmm, I really don't remember.


CLI is not different, CLI is not special and CLI is not an auto 
negotiating microversion application of the python API client. By 
saying any of these we just refusing it eat our dog's food. If we 
consciously believe (I personally don't) that versioning is the right 
thing to do for people using our API - lets stop dodging it ourselves. 
Otherwise it looks like we've invented an architecture that people 
presumably dream of, but we don't know if it's even usable (to say 
nothing about useful). I tried writing versioning-aware code for our 
devstack yesterday, and it wasn't that nice and shiny.


If our versioning requires negotiations, lets have it on API level, so 
that all users get it. Actually, server has the same level of 
information as the client. Let's have X-OpenStack-XXX-Version: 
negotiate figure out a proper version for us - or refuse to process a 
request if it's not possible. And if we think that versioning as it is 
now is unusable at all, lets rework the whole idea.


tl;dr my vote if for CLI to strictly follow whatever server API does. 
That is, default to the lowest version, require explicit version 
argument to get new features. (it's up to a follow up discussion what to 
do during the deprecation period).




-Sean




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [all] cross project communication: Return request-id to caller

2015-07-28 Thread Gorka Eguileor
On Fri, Jul 24, 2015 at 10:08:45AM -0400, Doug Hellmann wrote:
 Excerpts from Kekane, Abhishek's message of 2015-07-24 06:33:00 +:
  Hi Devs,
  
  X-Openstack-Request-Id. We have analysed python-cinderclient, 
  python-glanceclient, python-novaclient, python-keystoneclient and 
  python-neutronclient to check the return types.
  
  There are 9 ways return values are returned from python clients:
  1. List
  2. Dict
  3. Resource class object
  4. None
  5. Tuple
  6. Exception
  7. Boolean (True/False, for keystoneclient)
  8. Generator (for list api's in glanceclient)
  9. String (for novaclient)
  
  Out of 9 we have solution for all return types except generator.
  In case of glance-client list api's are returning generator which is 
  immutable. So it is not possible to return request-id in this case, which 
  is a blocker for adopting the solution.
  
  I have added detail analysis for above return types in etherpad [2] as 
  solution #3.
  
  If you have any suggestion in case of generation type then please let me 
  know.
 
 It should be possible to create a new class to wrap the existing
 generator and implement the iterator protocol [3].
 
 [3] 
 https://docs.python.org/2/reference/expressions.html#generator-iterator-methods
 
 Doug
 

Unless I'm missing something I think we wouldn't even need to create a
new class that implements the iterator protocol, we can just return a
generator that generates from the other one.

For example, for each of the requests, if we get the generator in
variable *result* that returns dictionaries and we want to add *headers*
to each dictionary:

return (DictWithHeaders(resource, headers) for resource in result)

Wouldn't that work?

Cheers,
Gorka.


  
  
  [1] 
  http://eavesdrop.openstack.org/meetings/crossproject/2015/crossproject.2015-07-07-21.01.log.html
  [2] https://etherpad.openstack.org/p/request-id
  
  
  Thanks  Best Regards,
  
  Abhishek Kekane
  
 
 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [fuel] [FFE] FF Exception request for Deploy nova-compute (VCDriver) feature

2015-07-28 Thread Aleksandr Didenko
Hi,

I agree with Sergii, the patch had some problems only with tests which are
already resolved. So I vote for FFE.

P.S. We've just merged it.

Regards,
Alex

On Mon, Jul 27, 2015 at 3:30 PM, Sergii Golovatiuk sgolovat...@mirantis.com
 wrote:

 Hi,

 I have checked the code. After fixing tests, this patch maybe included to
 FFE as it has minimal impact on core functionality. +1 for FFE for
 https://review.openstack.org/#/c/196114/

 --
 Best regards,
 Sergii Golovatiuk,
 Skype #golserge
 IRC #holser

 On Mon, Jul 27, 2015 at 1:38 PM, Vladimir Kuklin vkuk...@mirantis.com
 wrote:

 There is a slight change needed, e.g. fixing of noop tests. Then we can
 merge it and accept for FFE, I think.

 On Fri, Jul 24, 2015 at 1:34 PM, Andrian Noga an...@mirantis.com wrote:

 Colleagues,
 actually, i'm tottaly agree with Mike. We can merge
 https://review.openstack.org/#/c/196114/ w/o additional Ceilometer
 support (will be moved to next release). So if we merge it today we dont
 need FFE for this feature.


 Regards,
 Andrian

 On Fri, Jul 24, 2015 at 1:18 AM, Mike Scherbakov 
 mscherba...@mirantis.com wrote:

 Since we are in FF state already, I'd like to have urgent estimate from
 one of fuel-library cores:
 - holser
 - alex_didenko
 - aglarendil
 - bogdando

 aglarendil is on vacation though. Guys, please take a look at
 https://review.openstack.org/#/c/196114/ - can we accept it as
 exception? Seems to be good to go...

 I still think that additional Ceilometer support should be moved to the
 next release.

 Thanks,

 On Thu, Jul 23, 2015 at 1:56 PM Mike Scherbakov 
 mscherba...@mirantis.com wrote:

 Hi Andrian,
 this is High priority blueprint [1] for 7.0 timeframe. It seems we
 still didn't merge the main part [2], and need FF exception for additional
 stuff.

 The question is about quality. If we focus on enhancements, then we
 don't focus on bugs. Which whether means to deliver work with lower 
 quality
 of slip the release.

 My opinion is rather don't give FF exception in this case, and don't
 have Ceilometer support for this new feature.

 [1] https://blueprints.launchpad.net/fuel/+spec/compute-vmware-role
 [2] https://review.openstack.org/#/c/196114/

 On Thu, Jul 23, 2015 at 1:39 PM Andrian Noga an...@mirantis.com
 wrote:

 Hi,

 The patch patch for fuel-library
 https://review.openstack.org/#/c/196114/  that implements
 'compute-vwmare' role (https://mirantis.jira.com/browse/PROD-627) 
 requires
 additional work to do (ceilometer support.), but as far as I can see it
 doesn't affect any other parts of the product.

 We plan to implement it in 3 working days (2 for implementation, 1
 day for writing system test and test runs), it should not be hard since 
 we
 already support ceilometer compute agent deployment on controller
 nodes.

 We need 1 DevOps engineer and 1 QA engineer to be engaged for this
 work.

 So I think it's ok to accept this feature as an exception for feature
 freeze.

 Regards,
 Andrian Noga
 Project manager
 Partner Centric Engineering
 Mirantis, Inc

 Mob.phone: +38 (063) 966-21-24

 Email: an...@mirantis.com
 Skype: bigfoot_ua

 --
 Mike Scherbakov
 #mihgen

 --
 Mike Scherbakov
 #mihgen




 --
 --
 Regards,
 Andrian
 Mirantis, Inc

 Mob.phone: +38 (063) 966-21-24
 Email: an...@mirantis.com
 Skype: bigfoot_ua


 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




 --
 Yours Faithfully,
 Vladimir Kuklin,
 Fuel Library Tech Lead,
 Mirantis, Inc.
 +7 (495) 640-49-04
 +7 (926) 702-39-68
 Skype kuklinvv
 35bk3, Vorontsovskaya Str.
 Moscow, Russia,
 www.mirantis.com http://www.mirantis.ru/
 www.mirantis.ru
 vkuk...@mirantis.com

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-28 Thread Aleksey Kasatkin

 We don't promise use Junja (or whatever) template language for this
 feature.
 If some jinja features allowed for parsing Network template -- it's a bug.
 We should check it and fix it.
 Only value substitutions should allow in the network templates.


Yes, we just use jinja for values substitution. We could replace it with
anything else suitable here.
I don't see any reason to stick to jinja anyhow.

That is not correct, every template has it's own syntax, so people have to
 care about
 specific implementation i.e. Jinja or ERB, and there will be confusion
 when somebody will
 try to use ERB specific features, and she/he will fail because you hide
 Jinja under ERB
 syntax.


Format of template should be defined in docs finally. It is defined in spec
and there is explanation in slides for Demo.
It is not about jinja or ERB. It is just a token for substitution of
values. There is no jinja nor ERB features granted within template language.



Aleksey Kasatkin


On Tue, Jul 28, 2015 at 12:25 PM, Sergey Vasilenko svasile...@mirantis.com
wrote:


 On Tue, Jul 28, 2015 at 11:52 AM, Evgeniy L e...@mirantis.com wrote:

 Hi Alexander, I don't agree with your statements

  [1] - I just uses % and % to substitute values.

 It's what templating is about, you have some text preprocessor to
 substitute values.


 Network templates feature don't mean any  text preprocessor actions.
 Only value substitutions


  That is not ERB style template language.

 ERB uses the same syntax, hence it Is ERB style.


 ... hence it looks like ERB. not more.
 Not only ruby used for programming. Non only EBD -- is template language.
 ;)


  [2] - We are not using Jinja templating (it is just yaml file, not
 html template), we are using Jinja placeholder substitution.

 We *are using* jinja templating (I don't understand why you mention here
 html),
 with all it's features and here is the proof [1].


 We don't promise use Junja (or whatever) template language for this
 feature.
 If some jinja features allowed for parsing Network template -- it's a bug.
 We should check it and fix it.
 Only value substitutions should allow in the network templates.


  [3] - Templates are for people who do not care about Jinja/ERB (maybe
 some familiar with Puppet/Chef), so no confusion.

 That is not correct, every template has it's own syntax, so people have
 to care about
 specific implementation i.e. Jinja or ERB, and there will be confusion
 when somebody will
 try to use ERB specific features, and she/he will fail because you hide
 Jinja under ERB
 syntax.


 I, partially, agree with you. But please honored to following facts:
 * In the deployers world used Jinja and ERB syntax.
 * ERB used more often, because Ansible (I don't know another popular
 deployers tools with Jinja templating) is to young.
 * Plenty of syntax features is a really hell.

 In the Network templates we don't suppose anything other than a simple
 substitution variable values.
 All logic of template processing implementing on Nailgun side. Now on the
 template parsing, later -- on the network manipulation class.
 Allowance of mix template language and Nailgun logic may lead to heavy
 diagnostic issues.
 Meantime I don't see any cases, where required something more, than
 substitution.



 /sv

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Neutron][L3] Representing a networks connected by routers

2015-07-28 Thread Kevin Benton
Also, in my proposal, it is more the router that is the grouping mechanism.

I can't reconcile this with all of the points you make in the rest of your
email. You want the collection of subnets that a network represents, but
you don't want any other properties of the network.

that the network object is currently the closest thing we have to
representing the L3 part of the network.

The L3 part of a network is the subnets. You can't have IP addresses
without the subnets, you can't have floating IPs without the subnets, etc.

A Neutron network is an L2 construct that encapsulates L3 things. By
encapsulating them it also provides an implicit grouping. The routed
networks proposal basically wants that implicit grouping without the
encapsulation or the L2 part.

We don't associate floating ips with a network because we want to arp for
them.  You're taking a consequence of the current model and its constraints
and presenting that as the motivation for the model. We do so because there
is no better L3 object to associate it to.

Don't make assumptions about how people use floating IPs now just because
it doesn't fit your use-case well. When an external network is implemented
as a real Neutron network (leaving external_network_bridge blank like we
suggest in the networking guide), normal ports can be attached and can
co-exist/communicate with the floating IPs because it behaves as an L2
network exactly as implied by the API. The current model works quite well *if
*your fabric can extend the external network everywhere it needs to be.

If you don't want floating IPs to be reachable on the network they are
associated with, then let's stop associating them with a network and
instead start associating them with a group of subnets from which they
allocate IPs.

If we insist on a new object for the L3 part of a network then I'd say we
had better have an L3 only port to connect to it.

I don't think a new port type is necessary. We can just make the network ID
nullable for a port to indicate that it isn't attached to a Neutron network
since it won't be. It would then have a relationship to its associated
subnet via fixed_ips as it does now.

The subnet is not the L3 object that we're looking for.  You may wish it
were but that does not make it so.

I never said a subnet is what we are looking for. The group of subnets is
what we seem to be after.

Ignoring the forced dependence on L2, the subnets still don't stand alone
to describe just the L3 part, they must be linked to a network to make any
sense.

They don't need to be. If we made the network_id nullable on ports and
subnets, we could still have ports associated with subnets. The network
portion is the L2 portion. You don't want L2 so don't ask for the network.

I understand that we want a way to reference collections of subnets and
create ports that allocate IPs from them. Networks provide that now, but
they imply an L2 domain for the ports, which we don't want. So we are
trying to change what a network implies for this one special case, which is
going to have ripple effects everywhere.

Here are some areas where I can already see we will need special-casing:

   - DHCP agent scheduling - broadcast doesn't work on L3 networks, every
   compute node will need to use the direct tap attachment logic Neil brought
   up.
   - DHCP lease generation - a port can't get the normal subnet mask for
   the L3 network it's attached to because it would try to ARP for addresses
   in the same subnet, which are actually somewhere else.
   - Router interface attachment - what happens when a user attaches one
   interface to a regular network and one to an L3 network? Before they were
   all L2 networks so it didn't matter, but now none of the ports will be
   reachable on the L3 network without route table manipulation.
   - (or) Router creation - to avoid the above you can have different
   router types that can only attach to one or the other.
   - Every L2 attribute related to networks - we will need logic in the API
   that hides these fields or marks them as invalid and to generate an error
   if the user tries to update them.
   - Multi-provider segments - We can't let a user add an L3 segment to a
   network with L2 segments (e.g. VXLAN, VLAN). Same goes for the inverse.
   - Hierarchical port binding - coordinating ToRs for VXLAN+VLAN is l2
   encap. L3 would need route propagation logic instead.
   - Every plugin, service, tool, etc, built on the assumption that a
   Neutron network is L2.
   - Port creation - If you aren't doing the full l3 like Neil's proposal,
   you need to intercept port creation requests and schedule the port to one
   of the underlying regular networks. The port then has a different
   network_id than the one requested, or we have more special-casing to hide
   that.

All of those will be branches in the codebase to handle current Neutron
networks vs L3 networks. If we go down this route, it will be even worse
than the conditionals we have to 

[Openstack] networking-ovs-dpdk

2015-07-28 Thread Dave Johnston
Hi,

I was wondering if anyone was aware of the state of 'networking-ovs-dpdk' 
https://github.com/stackforge/networking-ovs-dpdk
I've been trying to get it running with Kilo, but with little success so far.

Can this just be installed on compute nodes, or does the controller require 
changes as well.  
I'm trying to understand if /usr/bin/networking-ovs-dpdk-agent should run in 
place of the neutron-openvswitch-agent?



Dave Johnston 
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack-operators] [puppet] module dependencies and different openstack versions

2015-07-28 Thread Van Leeuwen, Robert

We currently use our own custom puppet modules to deploy openstack, I
have been looking into the official openstack modules and have a few
barriers to switching.

We are looking at doing this at a project at a time but the modules have
a lot of dependencies. Eg. they all depend on the keystone module and try
to do things in keystone suck as create users, service endpoints etc.

This is a pain as I don¹t want it to mess with keystone (for one we don¹t
support setting endpoints via an API) but also we don¹t want to move to
the official keystone module at the same time. We have some custom
keystone stuff which means we¹ll may never move to the official keystone
puppet module.

The neutron module pulls in the vswitch module but we don¹t use vswitch
and it doesn¹t seem to be a requirement of the module so maybe doesn¹t
need to be in metadata dependencies?

It looks as if all the openstack puppet modules are designed to all be
used at once? Does anyone else have these kind of issues? It would be
great if eg. the neutron module would just manage neutron and not try and
do things in nova, keystone, mysql etc.


The other issue we have is that we have different services in openstack
running different versions. Currently we have Kilo, Juno and Icehouse
versions of different bits in the same cloud. It seems as if the puppet
modules are designed just to manage one openstack version? Is there any
thoughts on making it support different versions at the same time? Does
this work?



Hi, 

In my experience (I am setting up a new environment) the modules can be
used ³stand-alone².
It is the OpenStack module itself that comes with a combined server
example.
The separate modules (nova, glance, etc) are very configurable and don¹t
necessarily need to setup e.g. keystone.

From the OpenStack module you can modify the profiles and it will not do
the keystone stuff / database, etc..
E.g. Remove the ³:nova::keystone::auth² part in the nova profile.

We use r10k to select which versions to install and it should be trivial
to use Juno / Kilo stuff together (have not tested this myself).


Regarding the vswich module I *guess* that that is regulated by the
following:
neutron/manifests/agents/ml2/ovs.pp: if
$::neutron::params::ovs_agent_package
So unsetting that variable should not pull the package.

Cheers,
Robert van Leeuwen


___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


Re: [openstack-dev] [glance] Removing python-swiftclient from requirements.txt

2015-07-28 Thread Thomas Goirand
On 07/27/2015 11:42 PM, William M Edmonds wrote:
 python-swiftclient is only needed by operators that are using the swift
 backend, so it really doesn't belong in requirements.txt. Listing it in
 requirements forces all operators to install it, even if they're not
 going to use the swift backend. When I proposed a change [1] to move
 this from requirements to test-requirements (would still be needed there
 because of tests using the swift backend), others raised concerns about
 the impact this could have on operators who use the swift backend today
 and would be upgrading to Liberty. I believe everyone agreed this should
 not be in requirements, but the fact is that it has been, so operators
 may have (incorrectly) been depending on that during upgrades. If we
 remove it in Liberty, and there are changes in Liberty that require a
 newer version of swiftclient, how would those operators know that they
 need to upgrade swiftclient?

Even if swiftclient was removed from requirements.txt, I would still
keep it as a hard Depends: in Debian, so it would not change anything
for (Debian) users.

Thomas


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-28 Thread Alexander Kostrikov
Completely agree with Sergey.

Currently network template uses ERB [1] style template language,
but in fact it's Jinja [2], it was agreed to change it [3], no to confuse
the user

[1] - I just uses % and % to substitute values. That is not ERB style
template language.
[2] - We are not using Jinja templating (it is just yaml file, not html
template), we are using Jinja placeholder substitution. And in current code
we have a problem with content at first parsed from yaml and that parser
treats { and [ as a start if a dict or an array.
[3] - Templates are for people who do not care about Jinja/ERB (maybe some
familiar with Puppet/Chef), so no confusion.




On Tue, Jul 28, 2015 at 10:57 AM, Sergey Vasilenko svasile...@mirantis.com
wrote:


 On Mon, Jul 27, 2015 at 1:10 PM, Evgeniy L e...@mirantis.com wrote:

 Currently network template uses ERB [1] style template language,
 but in fact it's Jinja [2], it was agreed to change it [3], no to confuse
 the user, with ERB which is in fact jinja and doesn't have any ERB
 features.


 we have not so much syntax choices for  convenient templating. Network
 temptales will be used by system administrators.
 The '%  %' pair is a de-facto standart in this area. In the puppet
 world. Not every system administrator will meaning ERB when seeing '% %'
 pair.
 Another pairs (i.e. '$ $' , ' ', etc) looks more
 non-standart. Plenty of syntax features are annoy and make usability of
 product less convenient.
 I propose do not make extra essences on the clean area...

 We never say in the docs about ERB. IMHO it's enough for leave '%  %' as
 is.


 /sv

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




-- 

Kind Regards,

Alexandr Kostrikov,

Mirantis, Inc.

35b/3, Vorontsovskaya St., 109147, Moscow, Russia


Tel.: +7 (495) 640-49-04
Tel.: +7 (925) 716-64-52 %2B7%20%28906%29%20740-64-79

Skype: akostrikov_mirantis

E-mail: akostri...@mirantis.com elogut...@mirantis.com

*www.mirantis.com http://www.mirantis.ru/*
*www.mirantis.ru http://www.mirantis.ru/*
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] Python 3: 5 more projects with a py34 voting gate, only 4 remaing

2015-07-28 Thread Roman Vasilets
I have updated it. Thank you for sharing a link.

On Mon, Jul 27, 2015 at 3:44 PM, Victor Stinner vstin...@redhat.com wrote:

 Hi,

 On 27/07/2015 12:35, Roman Vasilets wrote:

 Hi, just what to share with you. Rally project also have voting py34
 jobs. Thank you.


 Cool! I don't know if Rally port the Python 3 is complete or not, so I
 wrote work in progress. Please update the wiki page if the port is done:
 https://wiki.openstack.org/wiki/Python3#OpenStack_applications


 Victor

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Fuel][RabbitMQ][puppet] Kilo status of the heartbeats implementation

2015-07-28 Thread Bogdan Dobrelya
Folks, it seems the situation with Kilo support for RabbitMQ heartbeats
should be elaborated.
There is a bug [0] and a ML [1] related. The questions are:

a) Should Fuel 7.0 with Kilo *explicitly* disable via puppet the
upstream implementation of heartbeats for all OpenStack components
(Neutron example [2]) and keep the MOS specific implementation of
heartbeats configured the same way as it was for Juno?

b) Or should we change nothing additionally allowing Oslo defaults for
Kilo being populated for heartbeats settings out of box? Related
question - what are upstream heartbeat defaults in MOS, do they differ
to upstream ones?

[0] https://bugs.launchpad.net/fuel/+bug/1477689
[1] http://lists.openstack.org/pipermail/openstack-dev/2015-July/068751.html
[2] https://review.openstack.org/#/c/194381/

-- 
Best regards,
Bogdan Dobrelya,
Irc #bogdando

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-28 Thread Sergey Vasilenko

 If we need only substitution, probably it's better to use standard
 templating
 in python [1], there is a way to redefine tokens, so you will be able to
 use
 % % syntax if you want to.

 [1] https://docs.python.org/2.6/library/string.html#template-strings
 https://docs.python.org/dev/library/string.html#template-strings
 [2] http://pymotw.com/2/string/#advanced-templates


I think it's a better solution for this issue.

/sv
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [glance] Removing python-swiftclient from requirements.txt

2015-07-28 Thread William M Edmonds

 From: Flavio Percoco fla...@redhat.com
 To: OpenStack Development Mailing List (not for usage questions)
 openstack-dev@lists.openstack.org
 Date: 07/28/2015 07:36 AM
 Subject: Re: [openstack-dev] [glance] Removing python-swiftclient
 from requirements.txt

 On 28/07/15 09:15 +, Kuvaja, Erno wrote:
 I do agree, we don’t depend or are cleaning the other clients out
 of the glance
 dependencies as well and I think swift should not be there either.
 
 
 
 The default store is filesystem store and if something is depending on
the
 actual store clients it should be either glance_store or deployer (well
for
 example our gate) glance itself should not have hard dependencies for
‘em.

 Agreed!

 William, would it be possible for you to spend some more time and
 create a single patch that removes all non-required dependencies?

 Cheers,
 Flavio


This all started when I opened a bug [1] saying we needed to pull out
oslo.vmware. Louis quickly threw up a patch [2] to remove that, but it was
pointed out that swiftclient falls into the same category. So I created a
separate patch to remove swiftclient [3]. Looking over what else is in
requirements.txt and running a few searches, it looks like we may also be
able to remove greenlet, kombu, and posix-ipc. Does anyone know if any of
those (greenlet?) are needed for some reason other than a direct import? In
which case I can add a comment to clarify that while I'm removing the
others.

I'd originally included the removal of oslo.vmware in [3], but I pulled
that out thinking we could go ahead and merge [2] while we were having this
discussion. But that didn't seem to fly, so I guess we want to make all
these changes together under [3] and abandon [2]? Or should we go ahead and
merge [2] while we're figuring out whether to remove greenlet, kombu, and
posix-ipc as well under [3]?

Just to be clear, it sounds to me like Flavio and Erno agree we should pull
swiftclient out of requirements.txt immediately. I'd like to see a reply
from Ian and Louis to round things out, make sure we're all on the same
page and we won't be fighting over this in the review...

[1] https://launchpad.net/bugs/1475737
[2] https://review.openstack.org/#/c/203200/
[3] https://review.openstack.org/#/c/203242/

 
 
 
 -  Erno
 
 
 
 From: William M Edmonds [mailto:edmon...@us.ibm.com]
 Sent: Monday, July 27, 2015 10:42 PM
 To: openstack-dev@lists.openstack.org
 Subject: [openstack-dev] [glance] Removing python-swiftclient from
 requirements.txt
 
 
 
 python-swiftclient is only needed by operators that are using the swift
 backend, so it really doesn't belong in requirements.txt. Listing it in
 requirements forces all operators to install it, even if they're not
going to
 use the swift backend. When I proposed a change [1] to move this from
 requirements to test-requirements (would still be needed there
 because of tests
 using the swift backend), others raised concerns about the impact this
could
 have on operators who use the swift backend today and would be upgrading
to
 Liberty. I believe everyone agreed this should not be in
 requirements, but the
 fact is that it has been, so operators may have (incorrectly) been
 depending on
 that during upgrades. If we remove it in Liberty, and there are changes
in
 Liberty that require a newer version of swiftclient, how would
 those operators
 know that they need to upgrade swiftclient?
 
 The optional dependencies spec [2] could definitely help here. I
 don't think we
 should have to wait for that, though. This is an issue we obviously
already
 have today for other backends, which indicates folks can deal with it
without
 an optional dependencies implementation.
 
 This would be a new concern for operators using the default swift
backend,
 though. So how do we get the message out to those operators? And dowe
need to
 put out a message about this change in Liberty and then wait until
Mitaka to
 actually remove this, or can we go ahead and remove in Liberty?
 
 [1] https://review.openstack.org/#/c/203242
 [2] http://specs.openstack.org/openstack/oslo-specs/specs/liberty/
 optional-deps.html
 
 -Matthew
 


__
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


 --
 @flaper87
 Flavio Percoco
 [attachment attdy18a.dat deleted by William M Edmonds/Raleigh/IBM]

__
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: 

Re: [openstack-dev] [Ironic] Let's talk about API versions

2015-07-28 Thread Julia Kreger
On Tue, Jul 28, 2015 at 5:30 PM, Jim Rollenhagen j...@jimrollenhagen.com
wrote:

 On Tue, Jul 28, 2015 at 09:19:46PM +, Devananda van der Veen wrote:
  On Tue, Jul 28, 2015 at 1:57 PM Jim Rollenhagen j...@jimrollenhagen.com
  wrote:
 
   On Tue, Jul 28, 2015 at 08:23:34PM +, Devananda van der Veen wrote:
On Mon, Jul 27, 2015 at 4:58 PM Sean Dague s...@dague.net wrote:
   
 On 07/27/2015 07:10 PM, Jim Rollenhagen wrote:
  On Mon, Jul 27, 2015 at 03:28:49PM -0700, Clint Byrum wrote:
  Excerpts from Sean Dague's message of 2015-07-27 13:41:20 -0700:
  So the CLI should actually break less often, and will expose
 the
   most
  functionality you can get out of your cloud.
 
 
  What I find odd about this is that I want the CLI to be a
 faithful
  representation of the API, because many times the CLI is the
 only
   way I
  can access the API for integration purposes.
 
  Faithful representation of the API is an interesting way to put
   it; it
  is a faithful representation either way. This way is a
   representation
  of the newest state of the API. It sounds like you're expecting a
  representation of the oldest state, or the state that you're
 used to
  (the hardest to predict).
 
 
  So lets say I just want a very simple bash script to do
 something
   with
  nodes:
 
  id=$(ironic node-create ...|getid)
  while true ; do
state=$(ironic node-get $id | get_state)
case $state in
AVAILABLE)
  break;;
ERROR)
  # retry or something
  ;;
*)
  splode(UNKNOWN STATE)
  ;;
esac
  done
 
  Then the script is going to start exploding with a CLI that
 shows me
  ENROLL state.
 
  So I'm not sure having the CLI go faster than the python client
 is a
  great way to avoid breakage. It might be the opposite of that,
 and
   that
  might just be a large burden on users.
 
  I tend to think that folks using the CLI for automation should be
  pinning the version in that automation. A quick
   IRONIC_API_VERSION=1.8
  or whatever would solve this problem. When new versions are
   available,
  read the notes for that version and adjust your code as
 necessary. Or
  just leave it at the same version until it breaks. :)

 Yeh, it's a cli, not a bash API. Having had to maintain devstack
 exercise code for a while, I'll tell you that the above is just a
 time
 bomb waiting to go off. None of the CLIs have that kind of
 contract,
   nor
 should they. Inflicting the bad UX of today on future generations
 because someone thinks, incorrectly, that it's a bash SDK is not a
 good
 trade off.


And people script against that CLI all. the. time.
   
Is it pretty? No. But is it something that people do? Yep.
   
Does that mean we should try to care? Yea, I think so, and I think
 that
means we should try to avoid breaking it when reasonably possible.
   
   
 If you want to pin things, explicitly, like jroll said, do that.
 And
 microversions lets you until your clouds uplift past your legacy
 code.

   
if you want to pin the version != all users must explicitly
 specify
   the
version
   
I believe Jim is advocating for the latter. I'm advocating for the
   former.
  
   The problem that I'm now seeing is you're advocating not just that
   people should be able to pin a version. You're advocating for:
  
   1. People don't need to pin the version. Fine.
  1.1. Side note: perhaps you're actually advocating for people
 should
   not need to pin the version? It's starting to sound that way.
   2. The client should always default to the most recent compatible
 version. Fine.
   3. We should never break a user. Fine.
   4. 1-3 must all be true always. Not fine.
  
   We can't reasonably make progress while having the latest API version
 be
   compatible with the previous API version. The combination above breaks
   down when we also want to continue to produce software (preferably
   quickly). We need to let one of those things go; they can't all be true
   at the same time.
  
   I think the best thing to let go is 1 or 2, personally. Where we are
   today is letting 3 go, and that's why we're stuck here.
  
  
  Mmmm, close. I think I expanded on that in my last email (replying to
  Dmitry) ... but... tldr;
 
  1. yes
  2. no -- the client should default to the minimum supported version. We
 got
  that wrong previously, and that's what is hurting us now.

 So if we do this, simply shipping the code doesn't break anyone. Nobody
 has disagreed on this yet, best I can tell.

 So let's ship some code. :)

 // jim


I'm not sure we can just ship some code, unless I've missed something in
the discussion, at some point a user/operator workflow could still break if
a future user client is upgraded with the current 

Re: [openstack-dev] [Ironic] Let's talk about API versions

2015-07-28 Thread Jim Rollenhagen
On Tue, Jul 28, 2015 at 09:55:03PM -0400, Julia Kreger wrote:
  So if we do this, simply shipping the code doesn't break anyone. Nobody
  has disagreed on this yet, best I can tell.
 
  So let's ship some code. :)
 
  // jim
 
 
 I'm not sure we can just ship some code, unless I've missed something in
 the discussion, at some point a user/operator workflow could still break if
 a future user client is upgraded with the current server code.   Now if
 this is something the Ironic community is willing to accept, as I
 personally thought was originally the case, then that is another matter.
 
 My $0.02 is that forcing a workflow change should be handled with a
 deprecation period while avoiding the hard breaking change for the user
 workflow, because it is akin to taking away a feature, or in this case,
 forcing the user to use a feature they may not want nor need.
 
 What if we revert 523da21cd3f5fc3299f9b91ac6d885f0fb54eddb and
 1410e59228c3835cfc4f89db1ec482137a3cfa10 in order to cut a release, then
 revert the reverts while layering on top a server side fix to remove the
 hard break for users?

So that's the other part here - even if we have a way to make 1.11
easier for users to swallow, we can't. There are people that deploy
master out there, so we need to treat master as already released. If we
change how the enroll API works (again), that needs to be 1.12. If we
revert it, that also needs to be 1.12, with 1.11 carrying the current
code.

// jim

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas v2

2015-07-28 Thread Jain, Vivek
Hi Folks,

Screenshots are uploaded. Please review and leave your feedback:

https://openstack.invisionapp.com/d/main#/projects/4237816

Thanks,
vivek

From: Jain, Vivek vivekj...@ebay.commailto:vivekj...@ebay.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 28, 2015 at 4:14 PM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Thanks Doug. We are planning to submit initial review version by end of day 
today.

Also, we will be uploading LBaaS wireframes for review here:
https://openstack.invisionapp.com/d/main#/projects/4237816

Thanks,
Vivek


From: Doug Wiegley 
doug...@parksidesoftware.commailto:doug...@parksidesoftware.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 28, 2015 at 4:04 PM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

The repo is now live.  Initial review is here: 
https://review.openstack.org/#/c/206757 , please make any near-term reviews 
dependent on that, unless you’re replacing the skeleton. Vivek, when do you 
think we can get some initial code in there to start iterating on?

Thanks,
doug


On Jul 16, 2015, at 6:27 AM, Jain, Vivek 
vivekj...@ebay.commailto:vivekj...@ebay.com wrote:

A quick reminder that we will be meeting today at 16:00UTC (9:00 am PDT) in 
#openstack-lbaas to discuss Horizon LBaaS v2 UI.

Thanks,
Vivek

From: Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Wednesday, July 15, 2015 at 10:35 AM
To: Eichberger, German 
german.eichber...@hp.commailto:german.eichber...@hp.com, OpenStack 
Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

I agree with German. Let’s keep things together for now. Susanne

From: Eichberger, German
Sent: Wednesday, July 15, 2015 1:31 PM
To: OpenStack Development Mailing List (not for usage questions)
Cc: Balle, Susanne; Tonse, Milan
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Hi,

Let’s move it into the LBaaS repo that seems like the right place for me —

Thanks,
German

From: Jain, Vivek vivekj...@ebay.commailto:vivekj...@ebay.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 14, 2015 at 10:22 AM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Balle Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com, 
Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Thanks Akihiro. Currently lbaas panels are part of horizon repo. If there is a 
easy way to de-couple lbaas dashboard from horizon? I think that will simplify 
development efforts. What does it take to separate lbaas dashboard from horizon?

Thanks,
Vivek

From: Akihiro Motoki amot...@gmail.commailto:amot...@gmail.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 14, 2015 at 10:09 AM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com, 
Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Another option is to create a project under openstack.
designate-dashboard project takes this approach,
and the core team of the project is both horizon-core and designate-core.
We can do the similar approach. Thought?

I have one question.
Do we have a separate place forever or do we want to merge horizon repo
once the implementation are available.
If we have a separate repo for LBaaS v2 panel, we need to release it separately.

I am not sure I am available at LBaaS meeting, but I would like to help
this efforts as a core from horizon and 

Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas v2

2015-07-28 Thread Jain, Vivek
Thanks Doug. We are planning to submit initial review version by end of day 
today.

Also, we will be uploading LBaaS wireframes for review here:
https://openstack.invisionapp.com/d/main#/projects/4237816

Thanks,
Vivek


From: Doug Wiegley 
doug...@parksidesoftware.commailto:doug...@parksidesoftware.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 28, 2015 at 4:04 PM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

The repo is now live.  Initial review is here: 
https://review.openstack.org/#/c/206757 , please make any near-term reviews 
dependent on that, unless you’re replacing the skeleton. Vivek, when do you 
think we can get some initial code in there to start iterating on?

Thanks,
doug


On Jul 16, 2015, at 6:27 AM, Jain, Vivek 
vivekj...@ebay.commailto:vivekj...@ebay.com wrote:

A quick reminder that we will be meeting today at 16:00UTC (9:00 am PDT) in 
#openstack-lbaas to discuss Horizon LBaaS v2 UI.

Thanks,
Vivek

From: Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Wednesday, July 15, 2015 at 10:35 AM
To: Eichberger, German 
german.eichber...@hp.commailto:german.eichber...@hp.com, OpenStack 
Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

I agree with German. Let’s keep things together for now. Susanne

From: Eichberger, German
Sent: Wednesday, July 15, 2015 1:31 PM
To: OpenStack Development Mailing List (not for usage questions)
Cc: Balle, Susanne; Tonse, Milan
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Hi,

Let’s move it into the LBaaS repo that seems like the right place for me —

Thanks,
German

From: Jain, Vivek vivekj...@ebay.commailto:vivekj...@ebay.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 14, 2015 at 10:22 AM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Balle Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com, 
Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Thanks Akihiro. Currently lbaas panels are part of horizon repo. If there is a 
easy way to de-couple lbaas dashboard from horizon? I think that will simplify 
development efforts. What does it take to separate lbaas dashboard from horizon?

Thanks,
Vivek

From: Akihiro Motoki amot...@gmail.commailto:amot...@gmail.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 14, 2015 at 10:09 AM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com, 
Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Another option is to create a project under openstack.
designate-dashboard project takes this approach,
and the core team of the project is both horizon-core and designate-core.
We can do the similar approach. Thought?

I have one question.
Do we have a separate place forever or do we want to merge horizon repo
once the implementation are available.
If we have a separate repo for LBaaS v2 panel, we need to release it separately.

I am not sure I am available at LBaaS meeting, but I would like to help
this efforts as a core from horizon and neutron.

Akihiro


2015-07-15 1:52 GMT+09:00 Doug Wiegley 
doug...@parksidesoftware.commailto:doug...@parksidesoftware.com:
I’d be good submitting it to the neutron-lbaas repo, under a horizon/ 
directory. We can iterate there, and talk with the Horizon team about how best 
to integrate. Would that work?

Thanks,
doug

 On Jul 13, 2015, at 3:05 PM, Jain, Vivek 
 vivekj...@ebay.commailto:vivekj...@ebay.com wrote:

 Hi German,

 We integrated UI with LBaaS v2 GET APIs. We have created all panels for
 CREATE and UPDATE as well.
 Plan is to share our code with community on stackforge for more
 collaboration from the community.

 So far Ganesh from cisco has shown interest in 

Re: [openstack-dev] [horizon] [stable] Freeze exception

2015-07-28 Thread Lin Hua Cheng
The patch fixes a bug that prevent user from using N1KV network, and the
change is low risk and minimal.

I think it would be good to backport.

Thanks,
Lin

On Tue, Jul 28, 2015 at 3:20 PM, Saksham Varma (sakvarma) 
sakva...@cisco.com wrote:

  Hi all,

  I would like to request for a freeze exception for the this bug:
 https://bugs.launchpad.net/horizon/+bug/1474618

  This is the patch:
 https://review.openstack.org/#/c/206184/

  It’s a critical bug, which has already been merged to master, and needs
 to be back ported to kilo.

  Thanks,
 Saksham

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [Openstack] [Fuel] changing assigned VLANs after install

2015-07-28 Thread Fabrizio Soppelsa

Can we add this to the official documentation?


On 07/27/2015 08:39 AM, Alexander Liemieshko wrote:

Changing VLAN


___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [openstack-dev] [fuel] Fuel plugin as docker containers images

2015-07-28 Thread Konstantin Danilov
Andrew,

On deployed env. Yep, plugin can install docker, but
docker installation usually harder, than just 'apt-get docker'.
That's why I'm asking about fuel team plans.

The main (and the real one for now) reason to have a VSM in container
- is to not poisoning
controller node with it outdated dependencies. I think that fixing
dependency hell is one of main reason
for using containers at all.

Yep, that is clear, that container and plugin, as results, would be quite large.

Thanks


On Tue, Jul 28, 2015 at 11:41 PM, Andrew Woodward xar...@gmail.com wrote:
 I'm still confused are you wanting to add a container to the master node, or
 a deployed env?

 For the master node, the latest fuel-plugin-builder allows for post-install
 scripts, you could load a container image from here
 For nodes in a deployed ENV, there is no formal target to support
 containers, you would need to install the container manager and containers
 yourself.

 However I would note that not packaging the applications dependencies
 because it's in a container is not a good practice as it quickly becomes
 very difficult to work with versioning and updates. It may be acceptable for
 a dev build of the plugin, but should be avoided in validated versions of
 the plugin. The container its self should also be contained within a package
 so that it's versioning can be tracked with operator familiar tools. Lastly,
 containers with python are quite large, so if you can get the versioning to
 work I'd avoid putting it into a container all together as you will end up
 with 150-300mb container mostly just because of python.

 On Tue, Jul 28, 2015 at 7:26 AM Konstantin Danilov kdani...@mirantis.com
 wrote:

 Evgene,

 I'm sure you understand this, but just to be clear - now FUEL uses
 containers on master node,
 not on cluster nodes. I'm asking about plugin containers on cluster nodes.

 Yep, there a particular example - VSM (Intel ceph management tool). It
 requires a set of packages,
 like python2.6, old django, etc, which I would rather not install on
 master node directly.

 Thanks

 On Tue, Jul 28, 2015 at 10:47 AM, Evgeniy L e...@mirantis.com wrote:
  Hi Konstantin,
 
  I'm not sure if we track such feature anywhere. But one of the reasons
  to use containers on the master was to deliver plugin specific
  containers,
  so they don't intersect and don't break Fuel master dependencies.
  Do you have some specific use case for that?
 
  Thanks,
 
  On Mon, Jul 27, 2015 at 4:58 PM, Konstantin Danilov
  kdani...@mirantis.com
  wrote:
 
  Hi,
 
  Is there a plans to allow plugin to be delivered as docker container
  images?
 
  Thanks
 
  --
  Kostiantyn Danilov aka koder.ua
  Principal software engineer, Mirantis
 
  skype:koder.ua
  http://koder-ua.blogspot.com/
  http://mirantis.com
 
 
  __
  OpenStack Development Mailing List (not for usage questions)
  Unsubscribe:
  openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
  http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
 
 
 
 
  __
  OpenStack Development Mailing List (not for usage questions)
  Unsubscribe:
  openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
  http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
 



 --
 Kostiantyn Danilov aka koder.ua
 Principal software engineer, Mirantis

 skype:koder.ua
 http://koder-ua.blogspot.com/
 http://mirantis.com

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

 --

 --

 Andrew Woodward

 Mirantis

 Fuel Community Ambassador

 Ceph Community


 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




-- 
Kostiantyn Danilov aka koder.ua
Principal software engineer, Mirantis

skype:koder.ua
http://koder-ua.blogspot.com/
http://mirantis.com

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [glance] Removing python-swiftclient from requirements.txt

2015-07-28 Thread Doug Hellmann
Excerpts from William M Edmonds's message of 2015-07-28 18:34:29 -0400:
 
  From: Flavio Percoco fla...@redhat.com
  To: OpenStack Development Mailing List (not for usage questions)
  openstack-dev@lists.openstack.org
  Date: 07/28/2015 07:36 AM
  Subject: Re: [openstack-dev] [glance] Removing python-swiftclient
  from requirements.txt
 
  On 28/07/15 09:15 +, Kuvaja, Erno wrote:
  I do agree, we don’t depend or are cleaning the other clients out
  of the glance
  dependencies as well and I think swift should not be there either.
  
  
  
  The default store is filesystem store and if something is depending on
 the
  actual store clients it should be either glance_store or deployer (well
 for
  example our gate) glance itself should not have hard dependencies for
 ‘em.
 
  Agreed!
 
  William, would it be possible for you to spend some more time and
  create a single patch that removes all non-required dependencies?
 
  Cheers,
  Flavio
 
 
 This all started when I opened a bug [1] saying we needed to pull out
 oslo.vmware. Louis quickly threw up a patch [2] to remove that, but it was
 pointed out that swiftclient falls into the same category. So I created a
 separate patch to remove swiftclient [3]. Looking over what else is in
 requirements.txt and running a few searches, it looks like we may also be
 able to remove greenlet, kombu, and posix-ipc. Does anyone know if any of
 those (greenlet?) are needed for some reason other than a direct import? In
 which case I can add a comment to clarify that while I'm removing the
 others.
 
 I'd originally included the removal of oslo.vmware in [3], but I pulled
 that out thinking we could go ahead and merge [2] while we were having this
 discussion. But that didn't seem to fly, so I guess we want to make all
 these changes together under [3] and abandon [2]? Or should we go ahead and
 merge [2] while we're figuring out whether to remove greenlet, kombu, and
 posix-ipc as well under [3]?
 
 Just to be clear, it sounds to me like Flavio and Erno agree we should pull
 swiftclient out of requirements.txt immediately. I'd like to see a reply
 from Ian and Louis to round things out, make sure we're all on the same
 page and we won't be fighting over this in the review...

I replied on both patches, but I'll repeat it here for a broader
audience:

Please set up an extras entry for each backend instead of just
removing the dependencies.  That will signal to users that you know
what dependencies there are for a backend, but that they are optional,
and still allow someone to do the equivalent of pip install
glance[vmware] or pip install glance[swift] to get those
dependencies.  Nova and oslo.versionedobjects have examples in their
setup.cfg if you need a template.

I didn't mention in the reviews, but this will also make integration
tests in our gate easier, since you can put .[vmware] or .[swift] in
the tox.ini to pull in those dependencies.

Doug

 
 [1] https://launchpad.net/bugs/1475737
 [2] https://review.openstack.org/#/c/203200/
 [3] https://review.openstack.org/#/c/203242/
 
  
  
  
  -  Erno
  
  
  
  From: William M Edmonds [mailto:edmon...@us.ibm.com]
  Sent: Monday, July 27, 2015 10:42 PM
  To: openstack-dev@lists.openstack.org
  Subject: [openstack-dev] [glance] Removing python-swiftclient from
  requirements.txt
  
  
  
  python-swiftclient is only needed by operators that are using the swift
  backend, so it really doesn't belong in requirements.txt. Listing it in
  requirements forces all operators to install it, even if they're not
 going to
  use the swift backend. When I proposed a change [1] to move this from
  requirements to test-requirements (would still be needed there
  because of tests
  using the swift backend), others raised concerns about the impact this
 could
  have on operators who use the swift backend today and would be upgrading
 to
  Liberty. I believe everyone agreed this should not be in
  requirements, but the
  fact is that it has been, so operators may have (incorrectly) been
  depending on
  that during upgrades. If we remove it in Liberty, and there are changes
 in
  Liberty that require a newer version of swiftclient, how would
  those operators
  know that they need to upgrade swiftclient?
  
  The optional dependencies spec [2] could definitely help here. I
  don't think we
  should have to wait for that, though. This is an issue we obviously
 already
  have today for other backends, which indicates folks can deal with it
 without
  an optional dependencies implementation.
  
  This would be a new concern for operators using the default swift
 backend,
  though. So how do we get the message out to those operators? And dowe
 need to
  put out a message about this change in Liberty and then wait until
 Mitaka to
  actually remove this, or can we go ahead and remove in Liberty?
  
  [1] https://review.openstack.org/#/c/203242
  [2] http://specs.openstack.org/openstack/oslo-specs/specs/liberty/
  optional-deps.html
  

Re: [openstack-dev] [glance] Removing python-swiftclient from requirements.txt

2015-07-28 Thread Clay Gerrard
Doug,

I believe our glance friends are not the only project with some open
questions on dealing with the required dependency for optional plugin
use-case.  You've made a recommendation to leverage some python tooling
functionality that I'm not familiar with.  I was hoping I could probe you
to elaborate so I can try and educate myself more?

... inline

On Tue, Jul 28, 2015 at 4:55 PM, Doug Hellmann d...@doughellmann.com
wrote:



 Please set up an extras entry for each backend instead of just
 removing the dependencies.  That will signal to users that you know
 what dependencies there are for a backend,


You referenced nova [1], and oslo.versionedobjects [2] for examples - but
I'd be more curious for the documentation if you have any idea where I
might look for it?  Is this a feature of pkg_resources, distutils,
setuptools, pbr?  What exactly does describing dependencies via this
extras key afford?


 but that they are optional,
 and still allow someone to do the equivalent of pip install
 glance[vmware] or pip install glance[swift] to get those
 dependencies.


I'm not familiar with that syntax for pip or it's equivalent!  That sounds
awesome!  Can you do like [extras:pluginname] in your setup.cfg and pip
install project[pluginname] just works!?  OMGBBQ!


 Nova and oslo.versionedobjects have examples in their
 setup.cfg if you need a template.


Hrm... I'm missing how either one of those setup.cfg's [1, 2] include an
example relevant to this use-case (i.e. required dependency for optional
backend plugin)?



 I didn't mention in the reviews, but this will also make integration
 tests in our gate easier, since you can put .[vmware] or .[swift] in
 the tox.ini to pull in those dependencies.


Hrm... yes testing.  So that's part just a new -e for the tox.ini - but
I'm not quite sure I follow how each environment would specify different
dependencies for the virtualenv?

I hope you can point me to some more information on the subject.

Thank you very much for pushing this out to a wider audience,

clayg

1. https://github.com/openstack/nova/blob/master/setup.cfg
2.
https://github.com/openstack/oslo.versionedobjects/blob/master/setup.cfg#L25
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [openstack-infra][Infra][Neutron] Nominating intel-networking-ci for voting rights

2015-07-28 Thread Znoinski, Waldemar
Hi Kyle, Neutron Cores and Infra Team,


a)  Was there a final decision/conclusion on the matter?

b)  Do we make jodavidg’s suggestion[1] a rule and we change it in Neutron 
third party policy[2].

c)   I can’t see any recent changes in policy[2] and if there are no plans 
to change the guidelines on how/whether to get voting rights Infra please 
continue with the setup of the voting rights for Intel Networking CI. I’ll 
disable -1 voting depending on b).

[1] http://lists.openstack.org/pipermail/openstack-dev/2015-June/068202.html
[2] 
http://git.openstack.org/cgit/openstack/neutron/tree/doc/source/policies/thirdparty-ci.rst


From: Znoinski, Waldemar
Sent: Friday, June 26, 2015 9:58 AM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.org
Subject: RE: [openstack-dev] [openstack-infra][Infra][Neutron] Nominating 
intel-networking-ci for voting rights

Thanks Kyle.

Yes, I’d wait with further processing of this request till we have a consensus 
on the thread.

From: Kyle Mestery [mailto:mest...@mestery.com]
Sent: Thursday, June 25, 2015 8:11 PM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] [openstack-infra][Infra][Neutron] Nominating 
intel-networking-ci for voting rights

On Wed, Jun 24, 2015 at 12:22 PM, Znoinski, Waldemar 
waldemar.znoin...@intel.commailto:waldemar.znoin...@intel.com wrote:
Hi Kyle and Neutron Cores,

I would like to nominate Intel-Networking-CI 
(https://wiki.openstack.org/wiki/ThirdPartySystems/Intel-Networking-CI) to have 
voting (non-gating) rights.
It’s been commenting on each proposed patch-set in Neutron since Feb 10 ’15: 
https://review.openstack.org/#/q/reviewer:%22Intel+Networking+CI+%253Copenstack-networking-ci%2540intel.com%253E%22,n,00333e9b0002530a
Any issues with it were resolved within 1-2 working days.

A recent cut from history – although a full one is at 
https://review.openstack.org/#/q/reviewer:%22Intel+Networking+CI+%253Copenstack-networking-ci%2540intel.com%253E%22,n,z
 :

https://review.openstack.org/#/c/194441/ - 
http://intel-openstack-ci-logs.ovh/networking-ci/refs/changes/41/194441/6/
https://review.openstack.org/#/c/173001/ - 
http://intel-openstack-ci-logs.ovh/networking-ci/refs/changes/01/173001/14/
https://review.openstack.org/#/c/195218/ - 
http://intel-openstack-ci-logs.ovh/networking-ci/refs/changes/18/195218/1/
https://review.openstack.org/#/c/194455/ - 
http://intel-openstack-ci-logs.ovh/networking-ci/refs/changes/55/194455/4/
https://review.openstack.org/#/c/195045/ - 
http://intel-openstack-ci-logs.ovh/networking-ci/refs/changes/45/195045/1/

Let me know if there are any other requirements we should be fulfilling and/or 
approve if no questions.



+1 from me. See the recent thread [1] about this topic, however, and decide if 
you really want to vote or not.
Thanks!
Kyle

[1] http://lists.openstack.org/pipermail/openstack-dev/2015-June/067992.html

Waldek


--
Intel Shannon Limited
Registered in Ireland
Registered Office: Collinstown Industrial Park, Leixlip, County Kildare
Registered Number: 308263
Business address: Dromore House, East Park, Shannon, Co. Clare

This e-mail and any attachments may contain confidential material for the sole 
use of the intended recipient(s). Any review or distribution by others is 
strictly prohibited. If you are not the intended recipient, please contact the 
sender and delete all copies.

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: 
openstack-dev-requ...@lists.openstack.org?subject:unsubscribehttp://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

--
Intel Shannon Limited
Registered in Ireland
Registered Office: Collinstown Industrial Park, Leixlip, County Kildare
Registered Number: 308263
Business address: Dromore House, East Park, Shannon, Co. Clare

This e-mail and any attachments may contain confidential material for the sole 
use of the intended recipient(s). Any review or distribution by others is 
strictly prohibited. If you are not the intended recipient, please contact the 
sender and delete all copies.

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[Openstack-operators] [nova] Quota per flavor, availability zone or a combination

2015-07-28 Thread Meghal .B. Gosalia
A lot of us have had use cases where a cloud-admin wanted to set -
1. Quota per flavor
2. Quota per Availability Zone
3. Quota per flavor_az (flavor and availability zone)

All of these use cases requires an update to the quota module.
Currently, quota module only tracks static resources like core, ram, disk
which are hardcoded in the quota module.
All quota calculations during quota commit is made using static resources.

If we need the ability to set Quota per X, we need the ability to add a
quota resource dynamically during quota-update.
So, Vliobh Meshram, Josh Harlow and myself have been working on a spec to
support dynamic quota resources in nova, which will staisfy all use cases
above.

Here is the link to the spec - https://review.openstack.org/#/c/206160/
This spec talks about
1. Providing capability to create dynamic quota resource
2. Update metadata (flavor and AZ) for dynamic quota resource
3. Incrementing/Decrementing dynamic quota resource value during instance
creation and deletion.

It would be great if we could get input from dev and operators on the spec.
This is a problem that we have been trying hard at Yahoo to solve and we
would love to get your feedback.

Operators mailing list was not included in my email (sent yesterday) to dev
mailing list.
So, sending this email to operators mailing list.

Thanks,
Meghal
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


Re: [openstack-dev] [Neutron][L3] Representing a networks connected by routers

2015-07-28 Thread Ryan Moats
If that's the case, then I'd say let's just solve this right way and create
a new construct rather...

Ryan Moats

Kevin Benton blak...@gmail.com wrote on 07/28/2015 06:44:53 PM:

 From: Kevin Benton blak...@gmail.com
 To: OpenStack Development Mailing List (not for usage questions)
 openstack-dev@lists.openstack.org
 Date: 07/28/2015 06:46 PM
 Subject: Re: [openstack-dev] [Neutron][L3] Representing a networks
 connected by routers

 We need to work on that code quite a bit anyway for other features
 (get me a network, VLAN trunk ports) so adding a different parameter
 shouldn't be bad. Even if Nova doesn't initially buy in, we can
 always pre-create the port and pass it to Nova boot as a UUID.

 On Tue, Jul 28, 2015 at 6:15 AM, Ryan Moats rmo...@us.ibm.com wrote:
 Kevin, doesn't this in itself create technical debt on the nova side
 in the sense of what an instance attaches to?
 I agree that it looks like less technical debt than conditionally
 redefining a network, but without nova buy-in, it looks
 like a non-starter...

 Ryan

 Kevin Benton blak...@gmail.com wrote on 07/28/2015 02:15:13 AM:

 [snip]

  I would rather see something to reference a group of subnets that
  can be used for floating IP allocation and port creation in lieu of
  a network ID than the technical debt that conditionally redefining a
  network will bring.




__
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




 --
 Kevin Benton

__
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas v2

2015-07-28 Thread Fox, Kevin M
One of the features I'm looking forward to most in v2 is multiple ports on one 
lb. Like 80 and 443. The ui doesnt look to easily support that?

Thanks,
Kevin


From: Jain, Vivek
Sent: Tuesday, July 28, 2015 6:19:25 PM
To: OpenStack Development Mailing List (not for usage questions)
Cc: Tonse, Milan
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Hi Folks,

Screenshots are uploaded. Please review and leave your feedback:

https://openstack.invisionapp.com/d/main#/projects/4237816

Thanks,
vivek

From: Jain, Vivek vivekj...@ebay.commailto:vivekj...@ebay.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 28, 2015 at 4:14 PM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Thanks Doug. We are planning to submit initial review version by end of day 
today.

Also, we will be uploading LBaaS wireframes for review here:
https://openstack.invisionapp.com/d/main#/projects/4237816

Thanks,
Vivek


From: Doug Wiegley 
doug...@parksidesoftware.commailto:doug...@parksidesoftware.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 28, 2015 at 4:04 PM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

The repo is now live.  Initial review is here: 
https://review.openstack.org/#/c/206757 , please make any near-term reviews 
dependent on that, unless you’re replacing the skeleton. Vivek, when do you 
think we can get some initial code in there to start iterating on?

Thanks,
doug


On Jul 16, 2015, at 6:27 AM, Jain, Vivek 
vivekj...@ebay.commailto:vivekj...@ebay.com wrote:

A quick reminder that we will be meeting today at 16:00UTC (9:00 am PDT) in 
#openstack-lbaas to discuss Horizon LBaaS v2 UI.

Thanks,
Vivek

From: Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Wednesday, July 15, 2015 at 10:35 AM
To: Eichberger, German 
german.eichber...@hp.commailto:german.eichber...@hp.com, OpenStack 
Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

I agree with German. Let’s keep things together for now. Susanne

From: Eichberger, German
Sent: Wednesday, July 15, 2015 1:31 PM
To: OpenStack Development Mailing List (not for usage questions)
Cc: Balle, Susanne; Tonse, Milan
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Hi,

Let’s move it into the LBaaS repo that seems like the right place for me —

Thanks,
German

From: Jain, Vivek vivekj...@ebay.commailto:vivekj...@ebay.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 14, 2015 at 10:22 AM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Balle Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com, 
Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Thanks Akihiro. Currently lbaas panels are part of horizon repo. If there is a 
easy way to de-couple lbaas dashboard from horizon? I think that will simplify 
development efforts. What does it take to separate lbaas dashboard from horizon?

Thanks,
Vivek

From: Akihiro Motoki amot...@gmail.commailto:amot...@gmail.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 14, 2015 at 10:09 AM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com, 
Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Another option is to create a project under openstack.
designate-dashboard project takes this approach,
and the core team of the 

Re: [openstack-dev] Barbican : Unable to create the secret after Integrating Barbican with HSM HA

2015-07-28 Thread Asha Seshagiri
Thanks John for your response :)
I am currently working on the reconfiguring the HSM in different way.
Shall let you know once my stuff is working.

Thanks and Regards,
Asha Seshagiri

On Tue, Jul 28, 2015 at 11:31 AM, John Vrbanac john.vrba...@rackspace.com
wrote:

  Asha,

 I'm not sure what went wrong. Something must have happened during your HA
 setup. You might check a couple different things, first you might check out
 your HA policies and HA group setup. The other thing you might make sure is
 that you only generate one mkek and hmac on one hsm (I use direct slot and
 not the HA virtual slot for this) and then replicate (vtl haAdmin
 -synchronize). If the HA group is setup properly it should replicate your
 mkek and hmac across the other HSMs in the HA group. As a side note, the
 pkcs11 plugin in Barbican currently retrieves the mkek and hmac by label,
 so make sure you don't have multiple keys in the HSM with the same label.


 John Vrbanac
  --
 *From:* Asha Seshagiri asha.seshag...@gmail.com
 *Sent:* Tuesday, July 28, 2015 9:22 AM
 *To:* John Vrbanac
 *Cc:* openstack-dev; John Wood; Douglas Mendizabal; Reller, Nathan S.
 *Subject:* Re: Barbican : Unable to create the secret after Integrating
 Barbican with HSM HA

Hi John ,

  Any help would highly be appreciated.

  Thanks and Regards,
  Asha Seshagiri

 On Mon, Jul 27, 2015 at 3:10 PM, Asha Seshagiri asha.seshag...@gmail.com
 wrote:

   Hi John ,

  Thanks  a lot for providing me the response:)
  I followed the link[1] for configuring the HA SETUP
 [1] : http://docs.aws.amazon.com/cloudhsm/latest/userguide/ha-setup.html

  the final step in the above link  is haAdmin command which is run on the
 client side(on Barbican) .
 The slot 6 is the virtual slot(only on the client side and not visible on
 LUNA SA ) and 1 and 2 are actual slots on LUNA SA HSM

  Please find the response below :

 [root@HSM-Client bin]# ./vtl haAdmin show



   HA Global Configuration Settings ===


  HA Proxy: disabled

 HA Auto Recovery: disabled

 Maximum Auto Recovery Retry: 0

 Auto Recovery Poll Interval: 60 seconds

 HA Logging: disabled

 Only Show HA Slots: no



   HA Group and Member Information 


  HA Group Label: barbican_ha

 HA Group Number: 1489361010

 HA Group Slot #: 6

 Synchronization: enabled

 Group Members: 489361010, 489361011

 Standby members: none


  Slot # Member S/N Member Label Status

 == ==  ==

 1 489361010 barbican2 alive

 2 489361011 barbican3 alive

 After knowing the virtual slot HA number , I ran the
 pkcs11-key-generation with slot number 6 which did create mkek and hmac in
 slot/partition 1 and 2 automatically . I am not sure why do we have to
 replicate the keys between  partitions? Configured the slot 6 on the
 barbican.conf as mentioned in my first email

 Not sure what might be the issue and

 It would be great if you could tell me the steps or where I would have
 gone wrong.

 Thanks and Regards,

 Asha Seshagiri

 On Mon, Jul 27, 2015 at 2:36 PM, John Vrbanac john.vrba...@rackspace.com
  wrote:

  Asha,

 I've used the Safenet HSM HA virtual slot setup and it does work.
 However, the setup is very interesting because you need to generate the
 MKEK and HMAC on a single HSM and then replicate it to the other HSMs out
 of band of anything we have in Barbican. If I recall correctly, the Safenet
 Luna docs mention how to replicate keys or partitions between HSMs.


 John Vrbanac
  --
 *From:* Asha Seshagiri asha.seshag...@gmail.com
 *Sent:* Monday, July 27, 2015 2:00 PM
 *To:* openstack-dev
 *Cc:* John Wood; Douglas Mendizabal; John Vrbanac; Reller, Nathan S.
 *Subject:* Barbican : Unable to create the secret after Integrating
 Barbican with HSM HA

  Hi All ,

  I am working on Integrating Barbican with HSM HA set up.
  I have configured slot 1 and slot 2 to be on HA on Luna SA set up .
 Slot 6 is a virtual slot on the client side which acts as the proxy for the
 slot 1 and 2. Hence on the Barbican side , I mentioned the slot number 6
 and its password which is identical to that of the passwords of slot1 and
 slot 2 in barbican.conf file.

  Please find the contents of the file  :

 # = Secret Store Plugin ===
 [secretstore]
 namespace = barbican.secretstore.plugin
 enabled_secretstore_plugins = store_crypto

 # = Crypto plugin ===
 [crypto]
 namespace = barbican.crypto.plugin
 enabled_crypto_plugins = p11_crypto

 [simple_crypto_plugin]
 # the kek should be a 32-byte value which is base64 encoded
 kek = 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY='

 [dogtag_plugin]
 pem_path = '/etc/barbican/kra_admin_cert.pem'
 dogtag_host = localhost
 dogtag_port = 8443
 nss_db_path = '/etc/barbican/alias'
 nss_db_path_ca = '/etc/barbican/alias-ca'
 nss_password = 'password123'
 simple_cmc_profile = 

Re: [openstack-dev] [Neutron][L3] Representing a networks connected by routers

2015-07-28 Thread Kevin Benton
We need to work on that code quite a bit anyway for other features (get me
a network, VLAN trunk ports) so adding a different parameter shouldn't be
bad. Even if Nova doesn't initially buy in, we can always pre-create the
port and pass it to Nova boot as a UUID.

On Tue, Jul 28, 2015 at 6:15 AM, Ryan Moats rmo...@us.ibm.com wrote:

 Kevin, doesn't this in itself create technical debt on the nova side in
 the sense of what an instance attaches to?
 I agree that it looks like less technical debt than conditionally
 redefining a network, but without nova buy-in, it looks
 like a non-starter...

 Ryan

 Kevin Benton blak...@gmail.com wrote on 07/28/2015 02:15:13 AM:

 [snip]

  I would rather see something to reference a group of subnets that
  can be used for floating IP allocation and port creation in lieu of
  a network ID than the technical debt that conditionally redefining a
  network will bring.



 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




-- 
Kevin Benton
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[Openstack-operators] [neutron][extra-dhcp-opt]How to use extra-dhcp-opt when the opt_name=static-route and opt_name=classless-static-route?

2015-07-28 Thread ????
Hi all,
When using the extr-dhcp-opt, I find the function works well when 
opt_name=mtu and opt_name=router. The vm created will use the assigned mtu 
value or the assigned gateway. But when I create port using
 --extra-dhcp-opt  
opt_name=static-route,opt_value=192.168.0.0/24 2.2.2.2
the vm won't use this route. The opt_name=classless-static-route shows the 
same result.Do i use them in the wrong way?



Any suggestion will be grateful.
Thank you.___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


Re: [openstack-dev] [fuel] Fuel plugin as docker containers images

2015-07-28 Thread Konstantin Danilov
Evgene,

I'm sure you understand this, but just to be clear - now FUEL uses
containers on master node,
not on cluster nodes. I'm asking about plugin containers on cluster nodes.

Yep, there a particular example - VSM (Intel ceph management tool). It
requires a set of packages,
like python2.6, old django, etc, which I would rather not install on
master node directly.

Thanks

On Tue, Jul 28, 2015 at 10:47 AM, Evgeniy L e...@mirantis.com wrote:
 Hi Konstantin,

 I'm not sure if we track such feature anywhere. But one of the reasons
 to use containers on the master was to deliver plugin specific containers,
 so they don't intersect and don't break Fuel master dependencies.
 Do you have some specific use case for that?

 Thanks,

 On Mon, Jul 27, 2015 at 4:58 PM, Konstantin Danilov kdani...@mirantis.com
 wrote:

 Hi,

 Is there a plans to allow plugin to be delivered as docker container
 images?

 Thanks

 --
 Kostiantyn Danilov aka koder.ua
 Principal software engineer, Mirantis

 skype:koder.ua
 http://koder-ua.blogspot.com/
 http://mirantis.com

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




-- 
Kostiantyn Danilov aka koder.ua
Principal software engineer, Mirantis

skype:koder.ua
http://koder-ua.blogspot.com/
http://mirantis.com

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Neutron][L3] Representing a networks connected by routers

2015-07-28 Thread Ryan Moats
Kevin, doesn't this in itself create technical debt on the nova side in the
sense of what an instance attaches to?
I agree that it looks like less technical debt than conditionally
redefining a network, but without nova buy-in, it looks
like a non-starter...

Ryan

Kevin Benton blak...@gmail.com wrote on 07/28/2015 02:15:13 AM:

[snip]

 I would rather see something to reference a group of subnets that
 can be used for floating IP allocation and port creation in lieu of
 a network ID than the technical debt that conditionally redefining a
 network will bring.

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [infra][puppet] Keeping common set of file synchronized across puppet modules

2015-07-28 Thread Yanis Guenane
In PuppetOpenstack we have a common set of filesthat are shared across
all our modules.
We would like to have an easy way to keep those set of filessynchronized.
Based on some discussions on #openstack-infra, infra might also be
interested by this problematic.

They are (at least) two approaches for that matter :

  * The Puppet community have developed a tool specifically for that
matter called modulesync[1] widely used in the Puppet community. One
needs to create a repo[2] with a specific layout, and then running msync
will ensure all files across every modules specified in the
managed_modules.yml file are synchronized, and if not will create a
commit to synchronized them.
  
  * The openstack-infra way : Based on my understanding, we would have
to create a repo much like this one[3] with all the common files in
there. puppet_update.sh[4] would need to be modified so that in the for
loop all the common files are copied and then the regular git workflow
happens.

The advantage I see relying on modulesync is that all the logic is taken
care of by modulesync, and the logic of the hook itself holds in one
line[5], making it pretty simple, to follow, understand and eventually
debug.

A review have been submitted[6] on infra, relying on a
propose_msync_update.sh script rather than the propose_update.sh script,
one of the comment was I suggest to enhance that file (ie.
jenkins/scripts/propose_update.sh) instead of creating a new syncing 
setup.

As I see it, using msync and propose_update.sh while keeping the pattern
it has today is incompatible - as they overlap a lot (projects.txt vs.
managed_modules.yml, the git worflow, etc..) hence I would rather stick
with the propose_msync_update.sh patch. Using just the bit of modulesync
for its templating feature and relying on propose_update.sh for the git
workflow sounds a bit over complicated here.

Though my hope would be havingboth PuppetOpenstack and Infra to rely on
the same tooling here as it will make it consistent.I'd like to have
your feedbacks/ideas, on how best to deal with  that problematic.

Thank you,

[1] https://github.com/puppet-community/modulesync
[2] https://github.com/openstack/puppet-modulesync-configs
[3] https://github.com/pabelanger/puppet-modules-sync
[4]
https://github.com/openstack-infra/project-config/blob/master/jenkins/scripts/propose_update.sh
[5]
https://review.openstack.org/gitweb?p=openstack-infra/project-config.git;a=blob;f=jenkins/scripts/propose_msync_update.sh;h=602615f41a6c09741f953e3310bf1512033dde0c;hb=7ff5fa189392709486bc544273a1949ece4da049#l82
[6] https://review.openstack.org/#/c/189216

--
Yanis Guenane

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] Announcing HyperStack project

2015-07-28 Thread Jay Lau
Thanks Matt, though proposed but nova team think that this should belong to
Magnum ;-) We can check where is the best place for hyper.

2015-07-27 16:06 GMT-04:00 Matt Riedemann mrie...@linux.vnet.ibm.com:



 On 7/26/2015 11:43 PM, Adrian Otto wrote:

 Peng,

 For the record, the Magnum team is not yet comfortable with this
 proposal. This arrangement is not the way we think containers should be
 integrated with OpenStack. It completely bypasses Nova, and offers no
 Bay abstraction, so there is no user selectable choice of a COE
 (Container Orchestration Engine). We advised that it would be smarter to
 build a nova virt driver for Hyper, and integrate that with Magnum so
 that it could work with all the different bay types. It also produces a


 The nova-hyper virt driver idea has already been proposed:

 http://lists.openstack.org/pipermail/openstack-dev/2015-June/067501.html

  situation where operators can not effectively bill for the services that
 are in use by the consumers, there is no sensible infrastructure layer
 capacity management (scheduler), no encryption management solution for
 the communication between k8s minions/nodes and the k8s master, and a
 number of other weaknesses. I’m not convinced the single-tenant approach
 here makes sense.

 To be fair, the concept is interesting, and we are discussing how it
 could be integrated with Magnum. It’s appropriate for experimentation,
 but I would not characterize it as a “solution for cloud providers” for
 the above reasons, and the callouts I mentioned here:

 http://lists.openstack.org/pipermail/openstack-dev/2015-July/069940.html

 Positioning it that way is simply premature. I strongly suggest that you
 attend the Magnum team meetings, and work through these concerns as we
 had Hyper on the agenda last Tuesday, but you did not show up to discuss
 it. The ML thread was confused by duplicate responses, which makes it
 rather hard to follow.

 I think it’s a really bad idea to basically re-implement Nova in Hyper.
 Your’e already re-implementing Docker in Hyper. With a scope that’s too
 wide, you won’t be able to keep up with the rapid changes in these
 projects, and anyone using them will be unable to use new features that
 they would expect from Docker and Nova while you are busy copying all of
 that functionality each time new features are added. I think there’s a
 better approach available that does not require you to duplicate such a
 wide range of functionality. I suggest we work together on this, and
 select an approach that sets you up for success, and gives OpenStack
 could operators what they need to build services on Hyper.

 Regards,

 Adrian

  On Jul 26, 2015, at 7:40 PM, Peng Zhao p...@hyper.sh

 mailto:p...@hyper.sh wrote:

 Hi all,
 I am glad to introduce the HyperStack project to you.
 HyperStack is a native, multi-tenant CaaS solution built on top of
 OpenStack. In terms of architecture, HyperStack = Bare-metal + Hyper +
 Kubernetes + Cinder + Neutron.
 HyperStack is different from Magnum in that HyperStack doesn't employ
 the Bay concept. Instead, HyperStack pools all bare-metal servers into
 one singe cluster. Due to the hypervisor nature in Hyper, different
 tenants' applications are completely isolated (no shared kernel), thus
 co-exist without security concerns in a same cluster.
 Given this, HyperStack is a solution for public cloud providers who
 want to offer the secure, multi-tenant CaaS.
 Ref:

 https://trello-attachments.s3.amazonaws.com/55545e127c7cbe0ec5b82f2b/1258x535/1c85a755dcb5e4a4147d37e6aa22fd40/upload_7_23_2015_at_11_00_41_AM.png
 
 https://trello-attachments.s3.amazonaws.com/55545e127c7cbe0ec5b82f2b/1258x535/1c85a755dcb5e4a4147d37e6aa22fd40/upload_7_23_2015_at_11_00_41_AM.png
 
 The next step is to present a working beta of HyperStack at Tokyo
 summit, which we submitted a presentation:

 https://www.openstack.org/summit/tokyo-2015/vote-for-speakers/Presentation/4030
 .
 Please vote if you are interested.
 In the future, we want to integrate HyperStack with Magnum and Nova to
 make sure one OpenStack deployment can offer both IaaS and native CaaS
 services.
 Best,
 Peng
 -- Background

 ---
 Hyper is a hypervisor-agnostic Docker runtime. It allows to run Docker
 images with any hypervisor (KVM, Xen, Vbox, ESX). Hyper is different
 from the minimalist Linux distros like CoreOS by that Hyper runs on
 the physical box and load the Docker images from the metal into the VM
 instance, in which no guest OS is present. Instead, Hyper boots a
 minimalist kernel in the VM to host the Docker images (Pod).
 With this approach, Hyper is able to bring some encouraging results,
 which are similar to container:
 - 300ms to boot a new HyperVM instance with a pod of Docker images
 - 20MB for min mem footprint of a HyperVM instance
 - Immutable HyperVM, only kernel+images, serves as atomic unit (Pod)
 for scheduling
 - Immune from the shared 

Re: [openstack-dev] Announcing HyperStack project

2015-07-28 Thread Jay Lau
Thanks Adrian, we can talk later in the IRC meeting.

2015-07-28 4:07 GMT-04:00 Adrian Otto adrian.o...@rackspace.com:

  Jay,

  Yes, it is on the agenda.

  Thanks,

  Adrian

  On Jul 27, 2015, at 8:32 AM, Jay Lau jay.lau@gmail.com wrote:

   Adrian,

  Can we put hyper as a topic for this week's (Tomorrow) meeting? I want to
 have some discussion with you.

  Thanks

 2015-07-27 0:43 GMT-04:00 Adrian Otto adrian.o...@rackspace.com:

 Peng,

  For the record, the Magnum team is not yet comfortable with this
 proposal. This arrangement is not the way we think containers should be
 integrated with OpenStack. It completely bypasses Nova, and offers no Bay
 abstraction, so there is no user selectable choice of a COE (Container
 Orchestration Engine). We advised that it would be smarter to build a nova
 virt driver for Hyper, and integrate that with Magnum so that it could work
 with all the different bay types. It also produces a situation where
 operators can not effectively bill for the services that are in use by the
 consumers, there is no sensible infrastructure layer capacity management
 (scheduler), no encryption management solution for the communication
 between k8s minions/nodes and the k8s master, and a number of other
 weaknesses. I’m not convinced the single-tenant approach here makes sense.

  To be fair, the concept is interesting, and we are discussing how it
 could be integrated with Magnum. It’s appropriate for experimentation, but
 I would not characterize it as a “solution for cloud providers” for the
 above reasons, and the callouts I mentioned here:

  http://lists.openstack.org/pipermail/openstack-dev/2015-July/069940.html

  Positioning it that way is simply premature. I strongly suggest that
 you attend the Magnum team meetings, and work through these concerns as we
 had Hyper on the agenda last Tuesday, but you did not show up to discuss
 it. The ML thread was confused by duplicate responses, which makes it
 rather hard to follow.

  I think it’s a really bad idea to basically re-implement Nova in Hyper.
 Your’e already re-implementing Docker in Hyper. With a scope that’s too
 wide, you won’t be able to keep up with the rapid changes in these
 projects, and anyone using them will be unable to use new features that
 they would expect from Docker and Nova while you are busy copying all of
 that functionality each time new features are added. I think there’s a
 better approach available that does not require you to duplicate such a
 wide range of functionality. I suggest we work together on this, and select
 an approach that sets you up for success, and gives OpenStack could
 operators what they need to build services on Hyper.

  Regards,

  Adrian

   On Jul 26, 2015, at 7:40 PM, Peng Zhao p...@hyper.sh wrote:

 Hi all,
  I am glad to introduce the HyperStack project to you.
  HyperStack is a native, multi-tenant CaaS solution built on top of
 OpenStack. In terms of architecture, HyperStack = Bare-metal + Hyper +
 Kubernetes + Cinder + Neutron.
  HyperStack is different from Magnum in that HyperStack doesn't employ
 the Bay concept. Instead, HyperStack pools all bare-metal servers into one
 singe cluster. Due to the hypervisor nature in Hyper, different tenants'
 applications are completely isolated (no shared kernel), thus co-exist
 without security concerns in a same cluster.
  Given this, HyperStack is a solution for public cloud providers who want
 to offer the secure, multi-tenant CaaS.
  Ref:
 https://trello-attachments.s3.amazonaws.com/55545e127c7cbe0ec5b82f2b/1258x535/1c85a755dcb5e4a4147d37e6aa22fd40/upload_7_23_2015_at_11_00_41_AM.png
  The next step is to present a working beta of HyperStack at Tokyo
 summit, which we submitted a presentation:
 https://www.openstack.org/summit/tokyo-2015/vote-for-speakers/Presentation/4030.
 Please vote if you are interested.
  In the future, we want to integrate HyperStack with Magnum and Nova to
 make sure one OpenStack deployment can offer both IaaS and native CaaS
 services.
  Best,
 Peng
  -- Background
 ---
  Hyper is a hypervisor-agnostic Docker runtime. It allows to run Docker
 images with any hypervisor (KVM, Xen, Vbox, ESX). Hyper is different from
 the minimalist Linux distros like CoreOS by that Hyper runs on the physical
 box and load the Docker images from the metal into the VM instance, in
 which no guest OS is present. Instead, Hyper boots a minimalist kernel in
 the VM to host the Docker images (Pod).
  With this approach, Hyper is able to bring some encouraging results,
 which are similar to container:
 - 300ms to boot a new HyperVM instance with a pod of Docker images
 - 20MB for min mem footprint of a HyperVM instance
 - Immutable HyperVM, only kernel+images, serves as atomic unit (Pod) for
 scheduling
 - Immune from the shared kernel problem in LXC, isolated by VM
 - Work seamlessly with OpenStack components, Neutron, Cinder, due to 

Re: [Openstack-operators] [openstack-dev] [glance] Removal of Catalog Index Service from Glance

2015-07-28 Thread Flavio Percoco

On 27/07/15 19:24 +, Ian Cordasco wrote:



On 7/27/15, 11:29, Louis Taylor lo...@kragniz.eu wrote:


On Fri, Jul 17, 2015 at 07:50:55PM +0100, Louis Taylor wrote:

Hi operators,

In Kilo, we added the Catalog Index Service as an experimental API in
Glance.
It soon became apparent this would be better suited as a separate
project, so
it was split into the Searchlight project:

https://wiki.openstack.org/wiki/Searchlight

We've now started the process of removing the service from Glance for
the
Liberty release. Since the service was originally had the status of
being
experimental, we felt it would be okay to remove it without a cycle of
deprecation.

Is this something that would cause issues for any existing deployments?
If you
have any feelings about this one way or the other, feel free to share
your
thoughts on this mailing list or in the review to remove the code:

https://review.openstack.org/#/c/197043/


Some time has passed and no one has complained about this, so I propose
we go
ahead and remove it in liberty.

Cheers,
Louis



+1


Commented on the review! +2



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


--
@flaper87
Flavio Percoco


pgp27Jqj0N95q.pgp
Description: PGP signature
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


Re: [openstack-dev] [Openstack-operators] [glance] Removal of Catalog Index Service from Glance

2015-07-28 Thread Flavio Percoco

On 27/07/15 19:24 +, Ian Cordasco wrote:



On 7/27/15, 11:29, Louis Taylor lo...@kragniz.eu wrote:


On Fri, Jul 17, 2015 at 07:50:55PM +0100, Louis Taylor wrote:

Hi operators,

In Kilo, we added the Catalog Index Service as an experimental API in
Glance.
It soon became apparent this would be better suited as a separate
project, so
it was split into the Searchlight project:

https://wiki.openstack.org/wiki/Searchlight

We've now started the process of removing the service from Glance for
the
Liberty release. Since the service was originally had the status of
being
experimental, we felt it would be okay to remove it without a cycle of
deprecation.

Is this something that would cause issues for any existing deployments?
If you
have any feelings about this one way or the other, feel free to share
your
thoughts on this mailing list or in the review to remove the code:

https://review.openstack.org/#/c/197043/


Some time has passed and no one has complained about this, so I propose
we go
ahead and remove it in liberty.

Cheers,
Louis



+1


Commented on the review! +2



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


--
@flaper87
Flavio Percoco


pgpMBSqpUI4k3.pgp
Description: PGP signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [nova][glance][stable] Stable exception for bug #1447215: Allow ramdisk/kernel_id to be None

2015-07-28 Thread Flavio Percoco

Greetings,

We recently found a bug in the Nova-Glance interaction that prevents
booting snapshots using Glance's V2 API. The bug is that Nova creates
the snapshot and sets the ramdisk_id/kernel_id to None when it's not
available.

While this was ok in V1, it causes a failure for V2 since the current
schema-properties file doesn't allow both fields to be None. The right
fix would be for Nova not to set these fields at all if no value is
found.

Nonetheless, we have a workaround that would make this work. The
workaround landed in master and it's been proposed for kilo.
Therefore, I'm asking for a stable exception to merge this patch,
which is backwards compatible (unless I'm missing something). The
exception is being requested because it does change the API.

The change proposed is to allow these fields to be None.

The review: https://review.openstack.org/#/c/205432/

Cheers,
Flavio

--
@flaper87
Flavio Percoco


pgpLJLj9mYSWg.pgp
Description: PGP signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [murano] eslint cleanup

2015-07-28 Thread Michael Krotscheck
Well, the reasons those rules are deactivated is because they simply had no
equivalent in the previous tool, and we didn't want to force the Horizon
team to suddenly take on a far more aggressive style correction job than
they'd signed up for. Once their job goes green, I'm going to start
updating those rules one by one to slowly tighten the rules set.

With that in mind though: You can always extend the openstack rules and add
your own additional restrictions. So: Best of both worlds :), just make
sure you keep track of what's coming in from upstream.

Michael

On Tue, Jul 28, 2015 at 3:58 AM Kirill Zaitsev kzait...@mirantis.com
wrote:

 Thanks Michael,
 I’m actually watching this process closely, and considering switching to
 these rules, as soon as the job goes green. =)

 The upside of not doing so is that, since our (murano) js code base is
 significantly smaller than that of horizon — we can impose slightly
 stricter rule set, than horizon currently does. But switching to it
 completely is something, that I do consider and it is on the roadmap =)

 --
 Kirill Zaitsev
 Murano team
 Software Engineer
 Mirantis, Inc

 On 28 Jul 2015 at 03:00:40, Michael Krotscheck (krotsch...@gmail.com)
 wrote:

  FYI, those rules have been moved into OpenStack under the QA program.
 I'm currently working on getting npm publish jobs to function so we can
 release those rules as well.

 http://git.openstack.org/cgit/openstack/eslint-config-openstack/

 Michael

  On Mon, Jul 27, 2015 at 4:13 PM Kirill Zaitsev kzait...@mirantis.com
 wrote:

  Since there was some interest in my side activity (which is described
 in https://blueprints.launchpad.net/murano/+spec/add-js-lint-jobs) I’ve
 created an etherpad with files, that are yet to be cleaned up.

  Here is the link https://etherpad.openstack.org/p/murano-escleanup
  So I suggest, that if you’re willing to help — add yourself in front of
 the file you’d like to cleanup so that we would not do the same job twice.

  When adding rule configs I try to refer to
 https://github.com/krotscheck/eslint-config-openstack/blob/master/.eslintrc

  (I’m considering switching to it completely, but that is a story for a
 different letter =))

  --
 Kirill Zaitsev
 Murano team
 Software Engineer
 Mirantis, Inc

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [neutron][extra-dhcp-opt]How to use extra-dhcp-opt when the opt_name=static-route and opt_name=classless-static-route?

2015-07-28 Thread ????
Hi all,
When using the extr-dhcp-opt, I find the function works well when 
opt_name=mtu and opt_name=router. The vm created will use the assigned mtu 
value or the assigned gateway. But when I create port using 
 --extra-dhcp-opt  
opt_name=static-route,opt_value=192.168.0.0/24 2.2.2.2
the vm won't use this route. The opt_name=classless-static-route shows the 
same result. Do i use them in the wrong way?



Any suggestion will be grateful.
Thank you.__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Ironic] Let's talk about API versions

2015-07-28 Thread Lucas Alvares Gomes
Hi,

 Could you combine 1 and 4?

 Deprecate not specifying the version, but pin to the oldest one for now?
 That way users get the warnings that they need to adapt, but things keep
 working? Could be switched to just 4 after a few months.


This is similar to what I would like to suggest. But I would leave the
pin at the current version we have right now (which is 1.9 [1])
instead of the earliest one; We then add some deprecation messages
when the user do not specify a version. Otherwise we may break people
that are currently using the features up to version we have pinned
right now.

In the long run I think that option 4. is the best option. As @Jim
already pointed out from a UX point of view it's not that it will make
anything worse since we already require a number of arguments. This
will also makes users understand the versions we provide and pin his
environment at a specific version, that way it will not break due
future changes to our API and he/she can, at his/her own pace, update
his/her systems to a newest version knowing that he/she already has a
version that works.

 I say that having just added some IP addresses to a server with iproute2,
 which has been telling me for probably 10 years that _not_ adding /32
 to single IP's will eventually be deprecated...


Heh we should be faster than that (-:


[1] 
https://github.com/openstack/python-ironicclient/blob/52f4ba68ba8a2e45875783c3240fe58f27fa54c6/ironicclient/common/http.py#L40

Cheers,
Lucas

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[Openstack] (no subject)

2015-07-28 Thread sumanth udupa
sumanth0...@gmail.com
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [openstack-dev] Which is the correct way to set ha queues in RabbitMQ

2015-07-28 Thread Alex Schultz
https://www.rabbitmq.com/ha.html

Both?  I think ha_all/HA is just the policy name and so it can be whatever
you want.

-Alex

On Tue, Jul 28, 2015 at 2:17 AM, Alvise Dorigo alvise.dor...@pd.infn.it
wrote:

  Hi,
 I read these two documents:


 http://docs.openstack.org/high-availability-guide/content/_configure_rabbitmq.html

 https://www.rdoproject.org/RabbitMQ

 To configure the queues in HA mode, the two docs suggests two slightly
 different commands;

 The first one says:

 rabbitmqctl set_policy ha-all '^(?!amq\.).*' '{ha-mode: all}'


 while the second one says:

 rabbitmqctl set_policy HA '^(?!amq\.).*' '{ha-mode: all}'


 ha_all vs. HA.

 which one is correct ?

 thanks,

 Alvise

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [all] cross project communication: Return request-id to caller

2015-07-28 Thread Doug Hellmann
Excerpts from Gorka Eguileor's message of 2015-07-28 10:37:42 +0200:
 On Fri, Jul 24, 2015 at 10:08:45AM -0400, Doug Hellmann wrote:
  Excerpts from Kekane, Abhishek's message of 2015-07-24 06:33:00 +:
   Hi Devs,
   
   X-Openstack-Request-Id. We have analysed python-cinderclient, 
   python-glanceclient, python-novaclient, python-keystoneclient and 
   python-neutronclient to check the return types.
   
   There are 9 ways return values are returned from python clients:
   1. List
   2. Dict
   3. Resource class object
   4. None
   5. Tuple
   6. Exception
   7. Boolean (True/False, for keystoneclient)
   8. Generator (for list api's in glanceclient)
   9. String (for novaclient)
   
   Out of 9 we have solution for all return types except generator.
   In case of glance-client list api's are returning generator which is 
   immutable. So it is not possible to return request-id in this case, which 
   is a blocker for adopting the solution.
   
   I have added detail analysis for above return types in etherpad [2] as 
   solution #3.
   
   If you have any suggestion in case of generation type then please let me 
   know.
  
  It should be possible to create a new class to wrap the existing
  generator and implement the iterator protocol [3].
  
  [3] 
  https://docs.python.org/2/reference/expressions.html#generator-iterator-methods
  
  Doug
  
 
 Unless I'm missing something I think we wouldn't even need to create a
 new class that implements the iterator protocol, we can just return a
 generator that generates from the other one.
 
 For example, for each of the requests, if we get the generator in
 variable *result* that returns dictionaries and we want to add *headers*
 to each dictionary:
 
 return (DictWithHeaders(resource, headers) for resource in result)
 
 Wouldn't that work?

That would work, but it wouldn't be consistent with the way I read
[2] as describing how the other methods are being updated.

For example, a method that now returns a list() will return a
ListWithHeaders(), and only that returned object will have the
headers, not its contents. A caller could do:

  response = client.some_method_returning_a_list()
  print reponse.headers

but could not do

  print response[0].headers

and get the same values.

Creating a GeneratorWithHeaders class mirrors that behavior for
methods that return generators instead of lists.

Doug

   [2] https://etherpad.openstack.org/p/request-id

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [nova][glance][stable] Stable exception for bug #1447215: Allow ramdisk/kernel_id to be None

2015-07-28 Thread Kuvaja, Erno
 -Original Message-
 From: Flavio Percoco [mailto:fla...@redhat.com]
 Sent: Tuesday, July 28, 2015 3:15 PM
 To: openstack-dev@lists.openstack.org
 Subject: [openstack-dev] [nova][glance][stable] Stable exception for bug
 #1447215: Allow ramdisk/kernel_id to be None
 
 Greetings,
 
 We recently found a bug in the Nova-Glance interaction that prevents
 booting snapshots using Glance's V2 API. The bug is that Nova creates the
 snapshot and sets the ramdisk_id/kernel_id to None when it's not available.
 
 While this was ok in V1, it causes a failure for V2 since the current schema-
 properties file doesn't allow both fields to be None. The right fix would be 
 for
 Nova not to set these fields at all if no value is found.
 
 Nonetheless, we have a workaround that would make this work. The
 workaround landed in master and it's been proposed for kilo.
 Therefore, I'm asking for a stable exception to merge this patch, which is
 backwards compatible (unless I'm missing something). The exception is being
 requested because it does change the API.

+1

In my understanding as well we would be backwards compatible and this would 
make the future upgrades so much easier in the case nova starts consuming v2 
Image API.

- Erno

 
 The change proposed is to allow these fields to be None.
 
 The review: https://review.openstack.org/#/c/205432/
 
 Cheers,
 Flavio
 
 --
 @flaper87
 Flavio Percoco
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] Barbican : Unable to create the secret after Integrating Barbican with HSM HA

2015-07-28 Thread Asha Seshagiri
Hi John ,

Any help would highly be appreciated.

Thanks and Regards,
Asha Seshagiri

On Mon, Jul 27, 2015 at 3:10 PM, Asha Seshagiri asha.seshag...@gmail.com
wrote:

 Hi John ,

 Thanks  a lot for providing me the response:)
 I followed the link[1] for configuring the HA SETUP
 [1] : http://docs.aws.amazon.com/cloudhsm/latest/userguide/ha-setup.html

 the final step in the above link  is haAdmin command which is run on the
 client side(on Barbican) .
 The slot 6 is the virtual slot(only on the client side and not visible on
 LUNA SA ) and 1 and 2 are actual slots on LUNA SA HSM

 Please find the response below :

 [root@HSM-Client bin]# ./vtl haAdmin show



   HA Global Configuration Settings ===


  HA Proxy: disabled

 HA Auto Recovery: disabled

 Maximum Auto Recovery Retry: 0

 Auto Recovery Poll Interval: 60 seconds

 HA Logging: disabled

 Only Show HA Slots: no



   HA Group and Member Information 


  HA Group Label: barbican_ha

 HA Group Number: 1489361010

 HA Group Slot #: 6

 Synchronization: enabled

 Group Members: 489361010, 489361011

 Standby members: none


  Slot # Member S/N Member Label Status

 == ==  ==

 1 489361010 barbican2 alive

 2 489361011 barbican3 alive

 After knowing the virtual slot HA number , I ran the pkcs11-key-generation
 with slot number 6 which did create mkek and hmac in slot/partition 1 and 2
 automatically . I am not sure why do we have to replicate the keys between
 partitions? Configured the slot 6 on the barbican.conf as mentioned in my
 first email

 Not sure what might be the issue and

 It would be great if you could tell me the steps or where I would have
 gone wrong.

 Thanks and Regards,

 Asha Seshagiri

 On Mon, Jul 27, 2015 at 2:36 PM, John Vrbanac john.vrba...@rackspace.com
 wrote:

  Asha,

 I've used the Safenet HSM HA virtual slot setup and it does work.
 However, the setup is very interesting because you need to generate the
 MKEK and HMAC on a single HSM and then replicate it to the other HSMs out
 of band of anything we have in Barbican. If I recall correctly, the Safenet
 Luna docs mention how to replicate keys or partitions between HSMs.


 John Vrbanac
  --
 *From:* Asha Seshagiri asha.seshag...@gmail.com
 *Sent:* Monday, July 27, 2015 2:00 PM
 *To:* openstack-dev
 *Cc:* John Wood; Douglas Mendizabal; John Vrbanac; Reller, Nathan S.
 *Subject:* Barbican : Unable to create the secret after Integrating
 Barbican with HSM HA

Hi All ,

  I am working on Integrating Barbican with HSM HA set up.
  I have configured slot 1 and slot 2 to be on HA on Luna SA set up . Slot
 6 is a virtual slot on the client side which acts as the proxy for the slot
 1 and 2. Hence on the Barbican side , I mentioned the slot number 6 and its
 password which is identical to that of the passwords of slot1 and slot 2 in
 barbican.conf file.

  Please find the contents of the file  :

 # = Secret Store Plugin ===
 [secretstore]
 namespace = barbican.secretstore.plugin
 enabled_secretstore_plugins = store_crypto

 # = Crypto plugin ===
 [crypto]
 namespace = barbican.crypto.plugin
 enabled_crypto_plugins = p11_crypto

 [simple_crypto_plugin]
 # the kek should be a 32-byte value which is base64 encoded
 kek = 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY='

 [dogtag_plugin]
 pem_path = '/etc/barbican/kra_admin_cert.pem'
 dogtag_host = localhost
 dogtag_port = 8443
 nss_db_path = '/etc/barbican/alias'
 nss_db_path_ca = '/etc/barbican/alias-ca'
 nss_password = 'password123'
 simple_cmc_profile = 'caOtherCert'















 *[p11_crypto_plugin] # Path to vendor PKCS11 library library_path =
 '/usr/lib/libCryptoki2_64.so' # Password to login to PKCS11 session login =
 'test5678' # Label to identify master KEK in the HSM (must not be the same
 as HMAC label) mkek_label = 'ha_mkek' # Length in bytes of master KEK
 mkek_length = 32 # Label to identify HMAC key in the HSM (must not be the
 same as MKEK label) hmac_label = 'ha_hmac' # HSM Slot id (Should correspond
 to a configured PKCS11 slot). Default: 1 slot_id = 6 *
 *Was able to create MKEK and HMAC successfully for the slots 1 and 2 on
 the HSM when we run the *
 *pkcs11-key-generation script  for slot 6 which should be the expected
 behaviour. *

 [root@HSM-Client bin]# python pkcs11-key-generation --library-path
 '/usr/lib/libCryptoki2_64.so'  --passphrase 'test5678' --slot-id 6 mkek
 --label 'ha_mkek'
 Verified label !
 MKEK successfully generated!
 [root@HSM-Client bin]# python pkcs11-key-generation --library-path
 '/usr/lib/libCryptoki2_64.so' --passphrase 'test5678' --slot-id 6 hmac
 --label 'ha_hmac'
 HMAC successfully generated!
 [root@HSM-Client bin]#

 Please find the HSM commands and responses to show the details of the
 partitions and partitions contents :

 root@HSM-Client bin]# ./vtl verify


  The following Luna SA 

[Openstack] VM goes for cyclic reboot

2015-07-28 Thread varun bhatnagar
Hi,

I am having Juno multinode setup with 1Controller, 1 Network and 10 Compute
nodes. There are 12 VMs running on that setup.

After some time one of my VM starts printing some strange messages on
console repeatedly, which says:

[78943.168505] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78946.592786] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78946.594413] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78947.617555] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78948.642004] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78949.600762] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78950.689530] Dead loop on virtual device vnf_sig_sp, fix it urgently!

vnf_sig_sp is one interface created internally on that VM (not by neutron).

After this VM runs in Kernel panic and then VM goes for a cyclic reboot.
I am attaching the logs as well.

Can anyone please suggest what should be done to fix this.

Thanks in advance!

BR,
Varun
[78943.168505] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78946.592786] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78946.594413] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78947.617555] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78948.642004] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78949.600762] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78950.689530] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78952.290076] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78954.660765] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78955.592326] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78956.920754] Dead loop on virtual device vnf_sig_sp, fix it urgently!
[78984.036141] Stack:
[78984.036846] Call Trace:
[78984.037802] Code: 19 e1 df ff 5b c3 0f 1f 80 00 00 00 00 53 48 89 fb e8 77 
34 c0 ff b8 00 00 01 00 f0 0f c1 03 0f b7 d0 c1 e8 10 39 c2 74 07 f3 90 0f b7 
13 eb f5 5b c3 66 66 2e 0f 1f 84 00 00 00 00 00 53 48 89 
[78984.040002] Kernel panic - not syncing: softlockup: hung tasks
[78984.040002] Pid: 1342, comm: java Tainted: PF  ENX 
3.0.101-0.47.52-default #1
[78984.040002] Call Trace:
[78984.040002]  [81004b95] dump_trace+0x75/0x300
[78984.040002]  [81461d43] dump_stack+0x69/0x6f
[78984.040002]  [81461ddc] panic+0x93/0x201
[78984.040002]  [810c8261] watchdog_timer_fn+0x181/0x190
[78984.040002]  [8108842e] __run_hrtimer+0xbe/0x1a0
[78984.040002]  [81088739] hrtimer_interrupt+0xd9/0x210
[78984.040002]  [81026f43] smp_apic_timer_interrupt+0x63/0xa0
[78984.040002]  [8146d573] apic_timer_interrupt+0x13/0x20
[78984.040002]  [81464e6e] _raw_spin_lock_bh+0x1e/0x30
[78984.060008] BUG: soft lockup - CPU#1 stuck for 22s! [java:1345]
[78984.060009] Modules linked in: multimmap(PEN) tcp_diag inet_diag sch_htb 
xt_DROPDST(EN) ip_set_rule_ipportipportproto(EN) xt_set(E) ip_set_hash_ip(E) 
ip_set(E) ip_vs_rr(EN) ip6t_REJECT ipt_REJECT af_packet xt_tcpudp 
evip_sctpd(PFEN) nf_conntrack_ipv6(E) nf_defrag_ipv6 xfrm_user xt_multiport 
xt_connmark xt_state xt_mark xt_conntrack ip6table_mangle ip6table_filter 
iptable_filter ip_vs(EN) crc32c libcrc32c nf_conntrack_netlink nfnetlink 
ip6_tunnel(E) tunnel6 macvlan ev_drv(PEN) nf_conntrack_ipv4 nf_conntrack 
nf_defrag_ipv4 xt_HMARK(EN) ip6_tables(E) iptable_mangle ip_tables x_tables 
binfmt_misc mperf tipc(EX) softdog fuse loop dm_mod joydev usbhid hid sg sr_mod 
cdrom ata_generic ata_piix libata ipv6 ipv6_lib uhci_hcd rtc_cmos ehci_hcd 
xen_platform_pci acpiphp pci_hotplug processor thermal_sys hwmon serio_raw 
pcspkr scsi_mod usbcore button i2c_piix4 i2c_core usb_common nfs lockd fscache 
auth_rpcgss nfs_acl sunrpc virtio_balloon virtio_blk virtio_net virtio_pci 
virtio_ring virtio intel_agp intel_gtt floppy [last unloaded: multimmap]
[78984.060044] Supported: No, Proprietary and Unsupported modules are loaded
[78984.060045] CPU 1 
[78984.060046] Modules linked in: multimmap(PEN) tcp_diag inet_diag sch_htb 
xt_DROPDST(EN) ip_set_rule_ipportipportproto(EN) xt_set(E) ip_set_hash_ip(E) 
ip_set(E) ip_vs_rr(EN) ip6t_REJECT ipt_REJECT af_packet xt_tcpudp 
evip_sctpd(PFEN) nf_conntrack_ipv6(E) nf_defrag_ipv6 xfrm_user xt_multiport 
xt_connmark xt_state xt_mark xt_conntrack ip6table_mangle ip6table_filter 
iptable_filter ip_vs(EN) crc32c libcrc32c nf_conntrack_netlink nfnetlink 
ip6_tunnel(E) tunnel6 macvlan ev_drv(PEN) nf_conntrack_ipv4 nf_conntrack 
nf_defrag_ipv4 xt_HMARK(EN) ip6_tables(E) iptable_mangle ip_tables x_tables 
binfmt_misc mperf tipc(EX) softdog fuse loop dm_mod joydev usbhid hid sg sr_mod 
cdrom ata_generic ata_piix libata ipv6 ipv6_lib uhci_hcd rtc_cmos ehci_hcd 
xen_platform_pci acpiphp pci_hotplug processor thermal_sys hwmon serio_raw 
pcspkr scsi_mod usbcore button i2c_piix4 i2c_core usb_common nfs lockd fscache 
auth_rpcgss nfs_acl sunrpc virtio_balloon virtio_blk 

[openstack-dev] [Fuel][Plugins] Feedback

2015-07-28 Thread Sergii Golovatiuk
Hi,

I have started digging into plugins recently. There are many positive
things though I would like to point to some problem areas

1. Documentation

a. It doesn't include the features of 7.0. There are many outstanding
features, though I needed to ping the developers to ask how these features
work. It means that it's almost impossible to develop plugins for upcoming
releases. The external developer needs to wait for documentation so it
creates a lag between release and plugin release.

b. in [1] the statement about 'For Ubuntu 12.04.2 LTS' should be extended
to 14.04. Also we don't need to add PATCH version as 12.04.2 is equivalent
to 12.04

c. There is no documentation how to install fpb from github master branch.
It's very useful for developers who want to use latest version. We should
add something

2. Github repository [2] is messed up
a. We are doing the same mistake putting all things into one basket. There
should be 2 repositories. One for examples and one for fpb. What's the goal
of keeping fpb in directory and examples on top? This breaks a couple of
things

b. I cannot build fpm with simple

pip install git+https://

Instead I am forced to do

git clone https://
cd fuel-plugins
pip install .

c. There is no tags as I can see only stable/6.0
d. There are no tests to improve code quality pep8 flask8, code coverage
e. Repository doesn't follow community standards.

3. Setting tab

When plugin is installed, it's very hard to find in. In setting tab it's
somewhere between A and Z
How is user supposed to find it? There should be a separator between Core
features and plugins. User must easily find, configure, enable/disable them.

P.S. I am asking everyone to add own concerns so we'll be able to make a
plan how to address them.

Thank you in advance.

[1] https://wiki.openstack.org/wiki/Fuel/Plugins#Installation
[2] https://github.com/stackforge/fuel-plugins
--
Best regards,
Sergii Golovatiuk,
Skype #golserge
IRC #holser
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-28 Thread Aleksey Kasatkin
AFAIU, string.Template doesn't help.

This seems to be helpful:

import re
def interp(string, params):
  for item in re.findall(r'#\{([^}]*)\}', string):
string = string.replace('#{%s}' % item, str(eval(item, {}, params)))
  return string


Evgeniy, do you know some better options for this?



Aleksey Kasatkin


On Tue, Jul 28, 2015 at 1:12 PM, Sergey Vasilenko svasile...@mirantis.com
wrote:

 If we need only substitution, probably it's better to use standard
 templating
 in python [1], there is a way to redefine tokens, so you will be able to
 use
 % % syntax if you want to.

 [1] https://docs.python.org/2.6/library/string.html#template-strings
 https://docs.python.org/dev/library/string.html#template-strings
 [2] http://pymotw.com/2/string/#advanced-templates


 I think it's a better solution for this issue.

 /sv

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [puppet] Proposing Yanis Guenane core

2015-07-28 Thread Emilien Macchi


On 07/28/2015 11:35 AM, Colleen Murphy wrote:
 
 
 On Mon, Jul 27, 2015 at 12:06 PM, Emilien Macchi emil...@redhat.com
 mailto:emil...@redhat.com wrote:
 
 Puppet group,
 
 Yanis has been working in our group for a while now.
 He has been involved in a lot of tasks, let me highlight some of them:
 
 * Many times, involved in improving consistency across our modules.
 * Strong focus on data binding, backward compatibility and flexibility.
 * Leadership on cookiebutter project [1].
 * Active participation to meetings, always with actions, and thoughts.
 * Beyond the stats, he has a good understanding of our modules, and
 quite good number of reviews, regularly.
 
 Yanis is for our group a strong asset and I would like him part of our
 core team.
 I really think his involvement, regularity and strong knowledge in
 Puppet OpenStack will really help to make our project better and
 stronger.
 
 I would like to open the vote to promote Yanis part of Puppet OpenStack
 core reviewers.
 
 Best regards,
 
 [1] https://github.com/openstack/puppet-openstack-cookiecutter
 --
 Emilien Macchi
 
 
 +1, Yanis has been a strong contributor for a long time.

5 positive reviews from core-reviewers on my proposal, I guess we can
approve it.

Congratulations Yanis, you're now part of Puppet OpenStack core group!
-- 
Emilien Macchi



signature.asc
Description: OpenPGP digital signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-28 Thread Aleksey Kasatkin
Evgeniy, do we need to remove jinja before July 30th ?


Aleksey Kasatkin


On Tue, Jul 28, 2015 at 6:40 PM, Aleksey Kasatkin akasat...@mirantis.com
wrote:

 AFAIU, string.Template doesn't help.

 This seems to be helpful:

 import re
 def interp(string, params):
   for item in re.findall(r'#\{([^}]*)\}', string):
 string = string.replace('#{%s}' % item, str(eval(item, {}, params)))
   return string


 Evgeniy, do you know some better options for this?



 Aleksey Kasatkin


 On Tue, Jul 28, 2015 at 1:12 PM, Sergey Vasilenko svasile...@mirantis.com
  wrote:

 If we need only substitution, probably it's better to use standard
 templating
 in python [1], there is a way to redefine tokens, so you will be able to
 use
 % % syntax if you want to.

 [1] https://docs.python.org/2.6/library/string.html#template-strings
 https://docs.python.org/dev/library/string.html#template-strings
 [2] http://pymotw.com/2/string/#advanced-templates


 I think it's a better solution for this issue.

 /sv

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Fuel][CI] CI on commit message

2015-07-28 Thread Sergii Golovatiuk
Hi,

It looks like our CI is not configured to set +1/-1 automatically, when
only commit message is changed. It would be nice to have +1 automatically
when I change Commit Message only instead of waiting hours on CI. It would
save some hardware resources to save some energy and help environment
protection movement.

--
Best regards,
Sergii Golovatiuk,
Skype #golserge
IRC #holser
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [puppet] Proposing Yanis Guenane core

2015-07-28 Thread Colleen Murphy
On Mon, Jul 27, 2015 at 12:06 PM, Emilien Macchi emil...@redhat.com wrote:

 Puppet group,

 Yanis has been working in our group for a while now.
 He has been involved in a lot of tasks, let me highlight some of them:

 * Many times, involved in improving consistency across our modules.
 * Strong focus on data binding, backward compatibility and flexibility.
 * Leadership on cookiebutter project [1].
 * Active participation to meetings, always with actions, and thoughts.
 * Beyond the stats, he has a good understanding of our modules, and
 quite good number of reviews, regularly.

 Yanis is for our group a strong asset and I would like him part of our
 core team.
 I really think his involvement, regularity and strong knowledge in
 Puppet OpenStack will really help to make our project better and stronger.

 I would like to open the vote to promote Yanis part of Puppet OpenStack
 core reviewers.

 Best regards,

 [1] https://github.com/openstack/puppet-openstack-cookiecutter
 --
 Emilien Macchi


 +1, Yanis has been a strong contributor for a long time.

Colleen
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[Openstack] [Security][LP# 1471161] Designate mDNS DoS through incorrect handling of large RecordSets

2015-07-28 Thread Kiall Mac Innes
Launchpad Number: 1471161
CVE: TBA
Date: July 28, 2015
Title: Designate mDNS DoS through incorrect handling of large RecordSets
Reporter: Florian Weimer (Red Hat)
Products: Designate
Versions: 2015.1.0 through 1.0.0.0b1

Description:
Florian Weimer from Red Hat reported a vulnerability in Designate.
By creating a single RecordSet that exceeds the configured max allowed
DNS packet size, an authenticated user may cause the Designate mDNS
service to enter an infinite loop, triggering a DoS.

Liberty (development branch) fix:
https://review.openstack.org/206578

Kilo fix:
https://review.openstack.org/206580

Notes:
This fix will be included in a future 1.0.0.0b2 release.

References:
https://launchpad.net/bugs/1471161

-- Kiall Mac Innes, OpenStack Designate PTL


0x6DD192A2.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] Cinder volume from vmware sparse vmdk

2015-07-28 Thread Brent Troge
I have an openstack created instance running within my vmware compute node.

The vmdk boot image I used to create this instance, is stored in glance and
contains the below disk properties:

adapter type =  lsiLogic
disk type = sparse

Now, if I use this image to boot an instance, all works as expected. No
problems.
If I create a volume with this image and try to boot from this volume, the
hypervisor complains that no operating system is found. If I attach the
volume to a running linux instance fdisk reports that no partition table is
found.

So I guess the question is, what step  am I missing when I create a volume
from a sparse vmdk image ?When I create a volume from a preallocated
image, everything works fine. So some step is missing when using sparse
images to create a working cinder volume.

Thanks!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [openstack-dev] [Openstack-operators] [glance] Removal of Catalog Index Service from Glance

2015-07-28 Thread matt
yeah that really didn't belong in glance at all.

On Tue, Jul 28, 2015 at 10:05 AM, Flavio Percoco fla...@redhat.com wrote:

 On 27/07/15 19:24 +, Ian Cordasco wrote:



 On 7/27/15, 11:29, Louis Taylor lo...@kragniz.eu wrote:

  On Fri, Jul 17, 2015 at 07:50:55PM +0100, Louis Taylor wrote:

 Hi operators,

 In Kilo, we added the Catalog Index Service as an experimental API in
 Glance.
 It soon became apparent this would be better suited as a separate
 project, so
 it was split into the Searchlight project:

 https://wiki.openstack.org/wiki/Searchlight

 We've now started the process of removing the service from Glance for
 the
 Liberty release. Since the service was originally had the status of
 being
 experimental, we felt it would be okay to remove it without a cycle of
 deprecation.

 Is this something that would cause issues for any existing deployments?
 If you
 have any feelings about this one way or the other, feel free to share
 your
 thoughts on this mailing list or in the review to remove the code:

 https://review.openstack.org/#/c/197043/


 Some time has passed and no one has complained about this, so I propose
 we go
 ahead and remove it in liberty.

 Cheers,
 Louis



 +1


 Commented on the review! +2


 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


 --
 @flaper87
 Flavio Percoco

 ___
 OpenStack-operators mailing list
 openstack-operat...@lists.openstack.org
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [fuel] OS_SERVICE_TOKEN usage in Fuel

2015-07-28 Thread Oleksiy Molchanov
Hello all,

We need to discuss removal of OS_SERVICE_TOKEN usage in Fuel after
deployment. This came from https://bugs.launchpad.net/fuel/+bug/1430619. I
guess not all of us have an access to this bug, so to be short:

# A shared secret that can be used to bootstrap Keystone.
# This token does not represent a user, and carries no
# explicit authorization. To disable in production (highly
# recommended), remove AdminTokenAuthMiddleware from your
# paste application pipelines (for example, in keystone-
# paste.ini). (string value)

After removing this and testing we found out that OSTF fails because it
uses admin token.

What do you think if we create ostf user like for workloads, but with wider
permissions?

BR,
Oleksiy.
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [midcycle][kolla] Kolla-Palooza Midcycle Event July 28th, July 29th

2015-07-28 Thread Steven Dake (stdake)
Today at 10:00 AM PST our Kola-Palooza Midcycle event begins!  Please join us 
remotely if you are not able to make it on site if you have an interest in 
deploying OpenStack using Ansible within Docker container technology.  If you 
are attending in person, please appear before 9:30 so we can get you checked in 
and settled.

The full midcyce information including remote attendance via Webex information 
Is here:
https://wiki.openstack.org/wiki/Sprints/KollaLibertySprint

A map is present in the above link if your Uber driver has trouble finding 
building D.

The full agenda is present here:
https://etherpad.openstack.org/p/liberty-kolla-midcycle

Note if we are running early/late during the day, we wont “block” and wait to 
synchronize times, so if there is only one session your interested in, you may 
try joining our IRC channel #kolla where we will list off the topics as they 
come up so you know when to join.

Looking forward to seeing folks there!

Regards
-steve

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [Openstack-operators] [openstack-dev] [glance] Removal of Catalog Index Service from Glance

2015-07-28 Thread matt
yeah that really didn't belong in glance at all.

On Tue, Jul 28, 2015 at 10:05 AM, Flavio Percoco fla...@redhat.com wrote:

 On 27/07/15 19:24 +, Ian Cordasco wrote:



 On 7/27/15, 11:29, Louis Taylor lo...@kragniz.eu wrote:

  On Fri, Jul 17, 2015 at 07:50:55PM +0100, Louis Taylor wrote:

 Hi operators,

 In Kilo, we added the Catalog Index Service as an experimental API in
 Glance.
 It soon became apparent this would be better suited as a separate
 project, so
 it was split into the Searchlight project:

 https://wiki.openstack.org/wiki/Searchlight

 We've now started the process of removing the service from Glance for
 the
 Liberty release. Since the service was originally had the status of
 being
 experimental, we felt it would be okay to remove it without a cycle of
 deprecation.

 Is this something that would cause issues for any existing deployments?
 If you
 have any feelings about this one way or the other, feel free to share
 your
 thoughts on this mailing list or in the review to remove the code:

 https://review.openstack.org/#/c/197043/


 Some time has passed and no one has complained about this, so I propose
 we go
 ahead and remove it in liberty.

 Cheers,
 Louis



 +1


 Commented on the review! +2


 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


 --
 @flaper87
 Flavio Percoco

 ___
 OpenStack-operators mailing list
 OpenStack-operators@lists.openstack.org
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


Re: [Openstack-operators] [puppet] module dependencies and different openstack versions

2015-07-28 Thread Mike Dorman
We use the OpenStack modules, but glue everything together with a 
monolithic composition module (our own.)  We do want to get to a place 
where we can upgrade/apply config/etc. each OpenStack component 
separately, but have’t tackled it yet.  I think it will be possible, but 
will take some work.  I have heard of a few others who have been working 
toward the same thing, though I don’t think there’s really anything 
concrete in the upstream modules yet.

WRT the dependencies, we use r10k with a manually populated Puppetfile, so 
we don’t rely on the module metadata to determine which modules to pull 
in.  That’s one way to get exactly what you want rather than all the 
dependency sprawl.

Mike





On 7/27/15, 5:10 PM, Sam Morrison sorri...@gmail.com wrote:


 On 27 Jul 2015, at 11:25 pm, Emilien Macchi emil...@redhat.com wrote:
 
 
 
 On 07/27/2015 02:32 AM, Sam Morrison wrote:
 We currently use our own custom puppet modules to deploy openstack, I 
have been looking into the official openstack modules and have a few 
barriers to switching.
 
 We are looking at doing this at a project at a time but the modules 
have a lot of dependencies. Eg. they all depend on the keystone module 
and try to do things in keystone suck as create users, service 
endpoints etc.
 
 This is a pain as I don’t want it to mess with keystone (for one we 
don’t support setting endpoints via an API) but also we don’t want to 
move to the official keystone module at the same time. We have some 
custom keystone stuff which means we’ll may never move to the official 
keystone puppet module.
 
 Well, in that case it's going to be very hard for you to use the
 modules. Trying to give up forks and catch-up to upstream is really
 expensive and challenging (Fuel is currently working on this).
 
 What I suggest is:
 1/ have a look at the diff between your manifests and upstream ones.
 2/ try to use upstream modules with the maximum number of classes, and
 put the rest in a custom module (or a manifest somewhere).
 3/ submit patches if you think we're missing something in the modules.
 The neutron module pulls in the vswitch module but we don’t use 
vswitch and it doesn’t seem to be a requirement of the module so maybe 
doesn’t need to be in metadata dependencies?
 
 AFIK there is no conditional in metadata.json, so we need the module
 anyway. It should not cause any trouble to you, except if you have a
 custom 'vswitch' module.

Yeah it would be nice if you could specify dependencies as well as 
recommended much like debian packages do. We use librarian-puppet to 
manage all our modules and you can’t disable it installing all the 
dependencies. But that is another issue…

 It looks as if all the openstack puppet modules are designed to all be 
used at once? Does anyone else have these kind of issues? It would be 
great if eg. the neutron module would just manage neutron and not try 
and do things in nova, keystone, mysql etc.
 
 We try to design our modules to work together because Puppet OpenStack
 is a single project composed of modules that are supposed to -together-
 deploy OpenStack.

All the puppet modules we use are very modular (hence the name), the 
openstack modules aren’t at this stage. Ideally each module would be self 
contained and then if people wanted to deploy “openstack” there could be 
an “openstack” module that would pull in all the individual project 
modules and make them work together.

It’s the first tip for writing a module listed at 
https://docs.puppetlabs.com/puppet/latest/reference/modules_fundamentals.h
tml#tips

I guess I’m just wondering if other people are having the same issue I 
am? and if so is there a way forward to make the puppet modules more 
modular or do I just stick with my own modules.

 In your case, I would just install the module from source (git) and not
 trying to pull them from Puppetforge.
 
 
 The other issue we have is that we have different services in 
openstack running different versions. Currently we have Kilo, Juno and 
Icehouse versions of different bits in the same cloud. It seems as if 
the puppet modules are designed just to manage one openstack version? 
Is there any thoughts on making it support different versions at the 
same time? Does this work?
 
 1/ you're running Kilo, Juno and Icehouse in the same cloud? Wow. You're
 brave!

We are a large deployment spanning multiple data centres and 1000+ hosts 
so upgrading in one big bang isn’t an option. I don’t think this is brave 
it is the norm for people running large openstack clouds in production.

 2/ Puppet modules do not hardcode OpenStack packages version. Though our
 current master is targeting Liberty, but we have stable/kilo,
 stable/juno, etc. You can even disable the package dependency in most of
 the classes.

The packages aren’t the issue it’s more the configs that get pushed out 
and so on, when config variables change location etc. with different 
versions this becomes hard.

 I'm not sure this is an issue here, 

Re: [openstack-dev] [puppet] Proposing Yanis Guenane core

2015-07-28 Thread Mathieu Gagné
+1

On 2015-07-27 3:06 PM, Emilien Macchi wrote:
 Puppet group,
 
 Yanis has been working in our group for a while now.
 He has been involved in a lot of tasks, let me highlight some of them:
 
 * Many times, involved in improving consistency across our modules.
 * Strong focus on data binding, backward compatibility and flexibility.
 * Leadership on cookiebutter project [1].
 * Active participation to meetings, always with actions, and thoughts.
 * Beyond the stats, he has a good understanding of our modules, and
 quite good number of reviews, regularly.
 
 Yanis is for our group a strong asset and I would like him part of our
 core team.
 I really think his involvement, regularity and strong knowledge in
 Puppet OpenStack will really help to make our project better and stronger.
 
 I would like to open the vote to promote Yanis part of Puppet OpenStack
 core reviewers.
 
 Best regards,
 
 [1] https://github.com/openstack/puppet-openstack-cookiecutter
 
 
 
 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
 


-- 
Mathieu

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[Openstack] [OSSA 2015-013] Glance task flow may fail to delete image from backend

2015-07-28 Thread Grant Murphy
=
OSSA-2015-013: Glance task flow may fail to delete image from backend
=

:Date: July 28, 2015
:CVE: CVE-2015-3289


Affects
~~~
- Glance: versions 2015.1.0


Description
~~~
Abhishek Kekane from NTT reported a vulnerability in Glance. By
creating numerous images using the import task flow API and deleting
them, an authenticated attacker may accumulate untracked image data in
the backend resulting in potential resource exhaustion and denial of
service. All glance setups are affected.


Patches
~~~
- https://review.openstack.org/#/c/181816/ (Kilo)
- https://review.openstack.org/#/c/181345/ (Liberty)


Credits
~~~
- Abhishek Kekane from NTT (CVE-2015-3289)


References
~~
- https://launchpad.net/bugs/1454087
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3289


Notes
~
- This fix will be included in the future 2015.1.1 (kilo) release.


pgpKiuuPbeRq7.pgp
Description: PGP signature
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [openstack-dev] [puppet] Proposing Yanis Guenane core

2015-07-28 Thread Clayton O'Neill
+1

On Tue, Jul 28, 2015 at 9:00 AM, Sebastien Badia s...@sebian.fr wrote:

 On Mon, Jul 27, 2015 at 03:06:56PM (-0400), Emilien Macchi wrote:
  I would like to open the vote to promote Yanis part of Puppet OpenStack
  core reviewers.

 Hi,

 Yes, of course!
 A big +1

 Seb

 --
 Sebastien Badia

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[Openstack-operators] RE : Can't launch docker instance, Unexpected vif_type=binding_failed.

2015-07-28 Thread Asmaa Chebba
openvswitch agent is running and the logs in compute2 are as follow:

1. OVS-cleanup.log
2015-06-20 12:52:19.976 1529 INFO neutron.agent.ovs_cleanup_util [-] OVS 
cleanup completed successfully
2015-06-23 15:48:43.401 1332 INFO neutron.common.config [-] Logging enabled!
2015-06-23 15:48:43.893 1332 INFO neutron.agent.ovs_cleanup_util [-] Cleaning 
br-int
2015-06-23 15:48:44.520 1332 INFO neutron.agent.ovs_cleanup_util [-] OVS 
cleanup completed successfully
2015-06-24 11:49:21.423 1770 INFO neutron.common.config [-] Logging enabled!
2015-06-24 11:49:22.123 1770 INFO neutron.agent.ovs_cleanup_util [-] Cleaning 
br-int
2015-06-24 11:49:22.628 1770 INFO neutron.agent.ovs_cleanup_util [-] OVS 
cleanup completed successfully
2015-06-25 00:21:55.634 1337 INFO neutron.common.config [-] Logging enabled!
2015-06-25 00:21:56.858 1337 INFO neutron.agent.ovs_cleanup_util [-] Cleaning 
br-int
2015-06-25 00:21:57.900 1337 INFO neutron.agent.ovs_cleanup_util [-] OVS 
cleanup completed successfully
2015-07-07 16:43:42.608 1457 INFO neutron.common.config [-] Logging enabled!
2015-07-07 16:43:43.399 1457 INFO neutron.agent.ovs_cleanup_util [-] Cleaning 
br-int
2015-07-07 16:43:43.792 1457 INFO neutron.agent.ovs_cleanup_util [-] OVS 
cleanup completed successfully
2015-07-08 15:04:31.954 1351 INFO neutron.common.config [-] Logging enabled!
2015-07-08 15:04:32.888 1351 INFO neutron.agent.ovs_cleanup_util [-] Cleaning 
br-int
2015-07-08 15:04:33.235 1351 INFO neutron.agent.ovs_cleanup_util [-] OVS 
cleanup completed successfully
2015-07-20 13:25:20.300 1550 INFO neutron.common.config [-] Logging enabled!
2015-07-20 13:25:22.665 1550 INFO neutron.agent.ovs_cleanup_util [-] Cleaning 
br-int
2015-07-20 13:25:22.770 1550 INFO neutron.agent.ovs_cleanup_util [-] OVS 
cleanup completed succe

2. Openvswitch-agent.log
2015-07-28 13:23:29.151 4615 ERROR neutron.agent.linux.ovsdb_monitor [-] Error 
received from ovsdb monitor: 
2015-07-28T11:23:29Z|1|fatal_signal|WARN|terminating with signal 15 
(Terminated)
2015-07-28 13:23:29.190 4615 ERROR neutron.agent.linux.utils [-] 
Command: ['ps', '--ppid', '4764', '-o', 'pid=']
Exit code: 1
Stdout: ''
Stderr: ''
2015-07-28 13:23:29.835 4615 CRITICAL neutron 
[req-dbf6bc78-c2df-4454-9e19-5f09bf688ee9 None] AssertionError: Trying to 
re-send() an already-triggered event.
2015-07-28 13:23:29.835 4615 TRACE neutron Traceback (most recent call last):
2015-07-28 13:23:29.835 4615 TRACE neutron   File 
/usr/bin/neutron-openvswitch-agent, line 10, in module
2015-07-28 13:23:29.835 4615 TRACE neutron sys.exit(main())
2015-07-28 13:23:29.835 4615 TRACE neutron   File 
/usr/lib/python2.7/dist-packages/neutron/plugins/openvswitch/agent/ovs_neutron_agent.py,
 line 1565, in main
2015-07-28 13:23:29.835 4615 TRACE neutron agent.daemon_loop()
2015-07-28 13:23:29.835 4615 TRACE neutron   File 
/usr/lib/python2.7/dist-packages/neutron/plugins/openvswitch/agent/ovs_neutron_agent.py,
 line 1485, in daemon_loop
2015-07-28 13:23:29.835 4615 TRACE neutron self.rpc_loop(polling_manager=pm)
2015-07-28 13:23:29.835 4615 TRACE neutron   File 
/usr/lib/python2.7/contextlib.py, line 24, in __exit__
2015-07-28 13:23:29.835 4615 TRACE neutron self.gen.next()
2015-07-28 13:23:29.835 4615 TRACE neutron   File 
/usr/lib/python2.7/dist-packages/neutron/agent/linux/polling.py, line 39, in 
get_polling_manager
2015-07-28 13:23:29.835 4615 TRACE neutron pm.stop()
2015-07-28 13:23:29.835 4615 TRACE neutron   File 
/usr/lib/python2.7/dist-packages/neutron/agent/linux/polling.py, line 106, in 
stop
2015-07-28 13:23:29.835 4615 TRACE neutron self._monitor.stop()
2015-07-28 13:23:29.835 4615 TRACE neutron   File 
/usr/lib/python2.7/dist-packages/neutron/agent/linux/async_process.py, line 
89, in stop
2015-07-28 13:23:29.835 4615 TRACE neutron self._kill()
2015-07-28 13:23:29.835 4615 TRACE neutron   File 
/usr/lib/python2.7/dist-packages/neutron/agent/linux/ovsdb_monitor.py, line 
99, in _kill
2015-07-28 13:23:29.835 4615 TRACE neutron super(SimpleInterfaceMonitor, 
self)._kill(*args, **kwargs)
2015-07-28 13:23:29.835 4615 TRACE neutron   File 
/usr/lib/python2.7/dist-packages/neutron/agent/linux/async_process.py, line 
116, in _kill
2015-07-28 13:23:29.835 4615 TRACE neutron self._kill_event.send()
2015-07-28 13:23:29.835 4615 TRACE neutron   File 
/usr/lib/python2.7/dist-packages/eventlet/event.py, line 150, in send
2015-07-28 13:23:29.835 4615 TRACE neutron assert self._result is NOT_USED, 
'Trying to re-send() an already-triggered event.'
2015-07-28 13:23:29.835 4615 TRACE neutron AssertionError: Trying to re-send() 
an already-triggered event.
2015-07-28 13:23:29.835 4615 TRACE neutron 
2015-07-28 13:23:32.197 6195 INFO neutron.common.config [-] Logging enabled!
2015-07-28 13:23:33.005 6195 INFO oslo.messaging._drivers.impl_rabbit [-] 
Connecting to AMQP server on controller:5672
2015-07-28 13:23:33.120 6195 INFO oslo.messaging._drivers.impl_rabbit [-] 
Connected to AMQP server on 

Re: [openstack-dev] [murano] eslint cleanup

2015-07-28 Thread Kirill Zaitsev
Thanks Michael,
I’m actually watching this process closely, and considering switching to these 
rules, as soon as the job goes green. =)

The upside of not doing so is that, since our (murano) js code base is 
significantly smaller than that of horizon — we can impose slightly stricter 
rule set, than horizon currently does. But switching to it completely is 
something, that I do consider and it is on the roadmap =)

-- 
Kirill Zaitsev
Murano team
Software Engineer
Mirantis, Inc

On 28 Jul 2015 at 03:00:40, Michael Krotscheck (krotsch...@gmail.com) wrote:

FYI, those rules have been moved into OpenStack under the QA program. I'm 
currently working on getting npm publish jobs to function so we can release 
those rules as well.

http://git.openstack.org/cgit/openstack/eslint-config-openstack/

Michael

On Mon, Jul 27, 2015 at 4:13 PM Kirill Zaitsev kzait...@mirantis.com wrote:
Since there was some interest in my side activity (which is described in 
https://blueprints.launchpad.net/murano/+spec/add-js-lint-jobs) I’ve created an 
etherpad with files, that are yet to be cleaned up. 

Here is the link https://etherpad.openstack.org/p/murano-escleanup
So I suggest, that if you’re willing to help — add yourself in front of the 
file you’d like to cleanup so that we would not do the same job twice. 

When adding rule configs I try to refer to 
https://github.com/krotscheck/eslint-config-openstack/blob/master/.eslintrc 
(I’m considering switching to it completely, but that is a story for a 
different letter =))
 
-- 
Kirill Zaitsev
Murano team
Software Engineer
Mirantis, Inc
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
__  
OpenStack Development Mailing List (not for usage questions)  
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe  
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev  
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [glance] Removing python-swiftclient from requirements.txt

2015-07-28 Thread Flavio Percoco

On 28/07/15 10:29 +0200, Thomas Goirand wrote:

On 07/27/2015 11:42 PM, William M Edmonds wrote:

python-swiftclient is only needed by operators that are using the swift
backend, so it really doesn't belong in requirements.txt. Listing it in
requirements forces all operators to install it, even if they're not
going to use the swift backend. When I proposed a change [1] to move
this from requirements to test-requirements (would still be needed there
because of tests using the swift backend), others raised concerns about
the impact this could have on operators who use the swift backend today
and would be upgrading to Liberty. I believe everyone agreed this should
not be in requirements, but the fact is that it has been, so operators
may have (incorrectly) been depending on that during upgrades. If we
remove it in Liberty, and there are changes in Liberty that require a
newer version of swiftclient, how would those operators know that they
need to upgrade swiftclient?


Even if swiftclient was removed from requirements.txt, I would still
keep it as a hard Depends: in Debian, so it would not change anything
for (Debian) users.


I think this is perfectly find and it's a good thing. Upstream
packages don't need to follow everything that happens downstream. From
a downstream perspective, it's a requirement that is not needed
neither in the CI nor in most of the development environments.

Cheers,
Flavio



Thomas


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


--
@flaper87
Flavio Percoco


pgppnN17ZocFu.pgp
Description: PGP signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [nova][cinder] Would anyone from Nova Core be able to join the Cinder mid-cycle meetup?

2015-07-28 Thread Murray, Paul (HP Cloud)
Hi jay,

There are a few Nova people in HP who intend to work on this area (perhaps you 
have heard that from Scott or Duncan). In fact I brought up that this would be 
coming up in Vancouver and that we intend to support it. Unfortunately none of 
us are available that week. I would like to be kept involved and will have to 
catch up with the other HP guys after the event.

In the meantime, if you want names to be involved beyond the cinder mid-cycle 
you can put down as a place holder for HP and I will sort out people to be 
involved when we are all back from vacation.

Paul

-Original Message-
From: Jay S. Bryant [mailto:jsbry...@electronicjungle.net] 
Sent: 24 July 2015 22:50
To: OpenStack Development Mailing List (not for usage questions)
Subject: [openstack-dev] [nova][cinder] Would anyone from Nova Core be able to 
join the Cinder mid-cycle meetup?

All,

I had the opportunity to chat with John Garbutt when he was here in Rochester 
for the Nova mid-cycle meet-up.  We discussed the fact that there was much to 
be gained by improving the communication between the Cinder and Nova teams.

With that idea in mind, it was suggested that the Cinder team open an 
invitation to Nova members to attend our mid-cycle meet-up.  The mid-cycle 
meet-up, of course, is not a secret.  A member of the Nova team has always been 
welcome to join, just hoping that an explicit invitation here may spark some 
interest.  :-)  Note:  John considered attending but is unable to do so.

The mid-cycle meet-up for Cinder is 8/4 through 8/7 at the HP site in Fort 
Collins, CO .  Friday is an optional code sprint day for those who are able to 
stay that long.  Details about the meet-up can be seen on our mid-cycle meetup 
planning etherpad [1].

If you are able to join us and help us work through the various challenges we 
are having between Cinder and Nova it would be greatly appreciated!

Jay

[1] https://etherpad.openstack.org/p/cinder-liberty-midcycle-meetup

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [nova][cinder] Would anyone from Nova Core be able to join the Cinder mid-cycle meetup?

2015-07-28 Thread Murray, Paul (HP Cloud)
 In the meantime, if you want names to be involved beyond the cinder mid-cycle 
 you can put down as a place holder for HP and I will sort out people to be 
 involved when we are all back from vacation.

Of course I meant you can put ME down :)

Paul

-Original Message-
From: Murray, Paul (HP Cloud) 
Sent: 28 July 2015 12:52
To: 'jsbry...@electronicjungle.net'; OpenStack Development Mailing List (not 
for usage questions)
Cc: Rosa, Andrea (HP Cloud Services)
Subject: RE: [openstack-dev] [nova][cinder] Would anyone from Nova Core be able 
to join the Cinder mid-cycle meetup?

Hi jay,

There are a few Nova people in HP who intend to work on this area (perhaps you 
have heard that from Scott or Duncan). In fact I brought up that this would be 
coming up in Vancouver and that we intend to support it. Unfortunately none of 
us are available that week. I would like to be kept involved and will have to 
catch up with the other HP guys after the event.

In the meantime, if you want names to be involved beyond the cinder mid-cycle 
you can put down as a place holder for HP and I will sort out people to be 
involved when we are all back from vacation.

Paul

-Original Message-
From: Jay S. Bryant [mailto:jsbry...@electronicjungle.net] 
Sent: 24 July 2015 22:50
To: OpenStack Development Mailing List (not for usage questions)
Subject: [openstack-dev] [nova][cinder] Would anyone from Nova Core be able to 
join the Cinder mid-cycle meetup?

All,

I had the opportunity to chat with John Garbutt when he was here in Rochester 
for the Nova mid-cycle meet-up.  We discussed the fact that there was much to 
be gained by improving the communication between the Cinder and Nova teams.

With that idea in mind, it was suggested that the Cinder team open an 
invitation to Nova members to attend our mid-cycle meet-up.  The mid-cycle 
meet-up, of course, is not a secret.  A member of the Nova team has always been 
welcome to join, just hoping that an explicit invitation here may spark some 
interest.  :-)  Note:  John considered attending but is unable to do so.

The mid-cycle meet-up for Cinder is 8/4 through 8/7 at the HP site in Fort 
Collins, CO .  Friday is an optional code sprint day for those who are able to 
stay that long.  Details about the meet-up can be seen on our mid-cycle meetup 
planning etherpad [1].

If you are able to join us and help us work through the various challenges we 
are having between Cinder and Nova it would be greatly appreciated!

Jay

[1] https://etherpad.openstack.org/p/cinder-liberty-midcycle-meetup

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [puppet] Proposing Yanis Guenane core

2015-07-28 Thread Sebastien Badia
On Mon, Jul 27, 2015 at 03:06:56PM (-0400), Emilien Macchi wrote:
 I would like to open the vote to promote Yanis part of Puppet OpenStack
 core reviewers.

Hi,

Yes, of course!
A big +1

Seb

-- 
Sebastien Badia


signature.asc
Description: Digital signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [glance] Removing python-swiftclient from requirements.txt

2015-07-28 Thread Flavio Percoco

On 28/07/15 09:15 +, Kuvaja, Erno wrote:

I do agree, we don’t depend or are cleaning the other clients out of the glance
dependencies as well and I think swift should not be there either.



The default store is filesystem store and if something is depending on the
actual store clients it should be either glance_store or deployer (well for
example our gate) glance itself should not have hard dependencies for ‘em.


Agreed!

William, would it be possible for you to spend some more time and
create a single patch that removes all non-required dependencies?

Cheers,
Flavio





-  Erno



From: William M Edmonds [mailto:edmon...@us.ibm.com]
Sent: Monday, July 27, 2015 10:42 PM
To: openstack-dev@lists.openstack.org
Subject: [openstack-dev] [glance] Removing python-swiftclient from
requirements.txt



python-swiftclient is only needed by operators that are using the swift
backend, so it really doesn't belong in requirements.txt. Listing it in
requirements forces all operators to install it, even if they're not going to
use the swift backend. When I proposed a change [1] to move this from
requirements to test-requirements (would still be needed there because of tests
using the swift backend), others raised concerns about the impact this could
have on operators who use the swift backend today and would be upgrading to
Liberty. I believe everyone agreed this should not be in requirements, but the
fact is that it has been, so operators may have (incorrectly) been depending on
that during upgrades. If we remove it in Liberty, and there are changes in
Liberty that require a newer version of swiftclient, how would those operators
know that they need to upgrade swiftclient?

The optional dependencies spec [2] could definitely help here. I don't think we
should have to wait for that, though. This is an issue we obviously already
have today for other backends, which indicates folks can deal with it without
an optional dependencies implementation.

This would be a new concern for operators using the default swift backend,
though. So how do we get the message out to those operators? And do we need to
put out a message about this change in Liberty and then wait until Mitaka to
actually remove this, or can we go ahead and remove in Liberty?

[1] https://review.openstack.org/#/c/203242
[2] http://specs.openstack.org/openstack/oslo-specs/specs/liberty/
optional-deps.html

-Matthew




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



--
@flaper87
Flavio Percoco


pgpAKKS5Gzx_m.pgp
Description: PGP signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Horizon][Neutron] how to configure horizon to use lbaas api v2?

2015-07-28 Thread Jakub Libosvar
On 07/28/2015 12:09 PM, Wilence Yao wrote:
 Hi all,
 In devstack, I configured
 enable_plugin neutron-lbaas
 https://git.openstack.org/openstack/neutron-lbaas
 ENABLED_SERVICES+=,q-lbaasv2
 
 so, I can use lbaasv2 api in neutronclient. But I see the agent that's
 name is q-lbaasv2 not q-lbaas in screen, and horizon can  recognize it .
 So I cann't use resource about lbaas in horizon.
 What should to let horizon recognize q-lbaasv2?
 
 Wilence Yao
 
 
 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
 

This question was asked recently:
http://lists.openstack.org/pipermail/openstack-dev/2015-July/070066.html

Related BP: https://blueprints.launchpad.net/horizon/+spec/lbaas-v2-panel

Kuba

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas v2

2015-07-28 Thread Jain, Vivek
Hi Kevin,
It is supported by the UI workflow we proposed. User can select existing IP 
(VIP) when creating a new Load Balancer (IP drop down in first tab)

https://openstack.invisionapp.com/d/main#/console/4237816/92203875/comments

That selection will reuse the VIP but use different port and other configs.

Thanks,
Vivek

From: Fox, Kevin M kevin@pnnl.govmailto:kevin@pnnl.gov
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 28, 2015 at 7:18 PM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

One of the features I'm looking forward to most in v2 is multiple ports on one 
lb. Like 80 and 443. The ui doesnt look to easily support that?

Thanks,
Kevin


From: Jain, Vivek
Sent: Tuesday, July 28, 2015 6:19:25 PM
To: OpenStack Development Mailing List (not for usage questions)
Cc: Tonse, Milan
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Hi Folks,

Screenshots are uploaded. Please review and leave your feedback:

https://openstack.invisionapp.com/d/main#/projects/4237816

Thanks,
vivek

From: Jain, Vivek vivekj...@ebay.commailto:vivekj...@ebay.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 28, 2015 at 4:14 PM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Thanks Doug. We are planning to submit initial review version by end of day 
today.

Also, we will be uploading LBaaS wireframes for review here:
https://openstack.invisionapp.com/d/main#/projects/4237816

Thanks,
Vivek


From: Doug Wiegley 
doug...@parksidesoftware.commailto:doug...@parksidesoftware.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 28, 2015 at 4:04 PM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

The repo is now live.  Initial review is here: 
https://review.openstack.org/#/c/206757 , please make any near-term reviews 
dependent on that, unless you’re replacing the skeleton. Vivek, when do you 
think we can get some initial code in there to start iterating on?

Thanks,
doug


On Jul 16, 2015, at 6:27 AM, Jain, Vivek 
vivekj...@ebay.commailto:vivekj...@ebay.com wrote:

A quick reminder that we will be meeting today at 16:00UTC (9:00 am PDT) in 
#openstack-lbaas to discuss Horizon LBaaS v2 UI.

Thanks,
Vivek

From: Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Wednesday, July 15, 2015 at 10:35 AM
To: Eichberger, German 
german.eichber...@hp.commailto:german.eichber...@hp.com, OpenStack 
Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

I agree with German. Let’s keep things together for now. Susanne

From: Eichberger, German
Sent: Wednesday, July 15, 2015 1:31 PM
To: OpenStack Development Mailing List (not for usage questions)
Cc: Balle, Susanne; Tonse, Milan
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Hi,

Let’s move it into the LBaaS repo that seems like the right place for me —

Thanks,
German

From: Jain, Vivek vivekj...@ebay.commailto:vivekj...@ebay.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 14, 2015 at 10:22 AM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Balle Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com, 
Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Thanks Akihiro. Currently lbaas panels are part of horizon repo. If there is a 
easy way to de-couple lbaas dashboard from 

[openstack-dev] [docs] [security-guide] RST Navigation Sidebar

2015-07-28 Thread Dillon, Nathaniel
Docs Team,

While doing the RST migration we noticed that the navigation sidebar from the 
current DocBook version was not there. After continued editing we came to the 
conclusion that navigation pane was REALLY useful. My understanding is that 
there is no RST equivalent yet. Is that accurate? If so, is there any 
possibility of implementing one?

Thanks,

Nathaniel
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [Openstack] Python API for Dynamic Large Objects in Swift

2015-07-28 Thread Mark Kirkwood
On 25/07/15 00:28, Vincenzo Pii wrote:
 To upload a Dynamic Large Object with the Swift CLI one can just do
 
 swift upload newcont -S 1048576000 large_object
 
 but, is there any equivalent in the swift python APIs (swiftclient module
 from https://github.com/openstack/python-swiftclient)?
 
 The content_length parameter of put_object will just truncate the content...
 

The general approach is outlined here (Swift API section):

https://www.mirantis.com/blog/large-objects-in-cloud-storages/


I have attached a rather simple sample program that uses the idea.

regards

Mark

#!/usr/bin/python

import swiftclient
import os
import argparse

parser = argparse.ArgumentParser()
parser.add_argument(-c, --container, help=container, default=con)
parser.add_argument(-o, --obj, help=object, default=file)
parser.add_argument(-s, --segsize, help=segment size, type=int, default=104857600)
parser.add_argument(-u, --user, help=user, default=demo:demo)
parser.add_argument(-k, --key, help=key, default=password)
parser.add_argument(-r, --region, help=region, default=RegionOne)
parser.add_argument(-a, --authurl, help=auth url, default=http://192.168.122.31:35357/v2.0;)
args = parser.parse_args()

options = {'tenant_name': args.user.split(':')[0], 'region_name': args.region}

conn = swiftclient.Connection(
user = args.user,
key = args.key,
authurl = args.authurl,
insecure = True,
auth_version = 2,
os_options = options,
)

# figure out how many segments to use
obj_name = args.obj
obj_size = os.path.getsize(obj_name)
seg_size = args.segsize
segs = (obj_size / seg_size) + 1

# create the container, and the segment container
con_name = args.container
seg_con_name = con_name + '_segments'
print container {0}.format(con_name)
conn.put_container(con_name)
print container {0}.format(seg_con_name)
conn.put_container(seg_con_name)

# start upload of each segment
print begin segment upload of  + obj_name
print size  + str(obj_size) + ,  + str(segs) +  segs

fp = open(obj_name, 'r')
for n in range(1, segs + 1):
seg_name = '%s/%08d' % (obj_name, n)
if (obj_size - (n - 1) * seg_size  seg_size):
size = obj_size - (n - 1) * seg_size
else:
size = seg_size
fp.seek((n - 1) * seg_size)
print   upload segment  + str(n) +  size  + str(size)
conn.put_object(seg_con_name,
seg_name,
fp,
content_length=size,
   )

print end segment upload

print create manifest
obj_manifest_header = {}
obj_manifest_header['x-object-manifest'] = '%s/%s/' % (seg_con_name, obj_name)
conn.put_object(con_name,
obj_name,
None,
content_length=obj_size,
headers=obj_manifest_header,
   )
print done

fp.close()
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack-operators] Cinder volume on lvm volume

2015-07-28 Thread pra devOPS
Hi All:

I have  lvm volume /dev/mapper/centos-images on  allinOne installation
(Cenots7, openstack icehouse) machine.

I wanted to make this to configure in cinder to get ebs for instances.

Can i do that? is there any document apart to do the  same?

Any references will be highly appreciated.

Thanks,
Dev
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas v2

2015-07-28 Thread Jain, Vivek
Initial code for horizon lbaas v2 dashboard submitted:

https://review.openstack.org/#/c/206797

Thanks,
vivek

From: Jain, Vivek vivekj...@ebay.commailto:vivekj...@ebay.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 28, 2015 at 6:19 PM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Hi Folks,

Screenshots are uploaded. Please review and leave your feedback:

https://openstack.invisionapp.com/d/main#/projects/4237816

Thanks,
vivek

From: Jain, Vivek vivekj...@ebay.commailto:vivekj...@ebay.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 28, 2015 at 4:14 PM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Thanks Doug. We are planning to submit initial review version by end of day 
today.

Also, we will be uploading LBaaS wireframes for review here:
https://openstack.invisionapp.com/d/main#/projects/4237816

Thanks,
Vivek


From: Doug Wiegley 
doug...@parksidesoftware.commailto:doug...@parksidesoftware.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 28, 2015 at 4:04 PM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

The repo is now live.  Initial review is here: 
https://review.openstack.org/#/c/206757 , please make any near-term reviews 
dependent on that, unless you’re replacing the skeleton. Vivek, when do you 
think we can get some initial code in there to start iterating on?

Thanks,
doug


On Jul 16, 2015, at 6:27 AM, Jain, Vivek 
vivekj...@ebay.commailto:vivekj...@ebay.com wrote:

A quick reminder that we will be meeting today at 16:00UTC (9:00 am PDT) in 
#openstack-lbaas to discuss Horizon LBaaS v2 UI.

Thanks,
Vivek

From: Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Wednesday, July 15, 2015 at 10:35 AM
To: Eichberger, German 
german.eichber...@hp.commailto:german.eichber...@hp.com, OpenStack 
Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

I agree with German. Let’s keep things together for now. Susanne

From: Eichberger, German
Sent: Wednesday, July 15, 2015 1:31 PM
To: OpenStack Development Mailing List (not for usage questions)
Cc: Balle, Susanne; Tonse, Milan
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Hi,

Let’s move it into the LBaaS repo that seems like the right place for me —

Thanks,
German

From: Jain, Vivek vivekj...@ebay.commailto:vivekj...@ebay.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 14, 2015 at 10:22 AM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Balle Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com, 
Tonse, Milan mto...@ebay.commailto:mto...@ebay.com
Subject: Re: [openstack-dev] [neutron][lbaas] Horizon support for neutron-lbaas 
v2

Thanks Akihiro. Currently lbaas panels are part of horizon repo. If there is a 
easy way to de-couple lbaas dashboard from horizon? I think that will simplify 
development efforts. What does it take to separate lbaas dashboard from horizon?

Thanks,
Vivek

From: Akihiro Motoki amot...@gmail.commailto:amot...@gmail.com
Reply-To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Date: Tuesday, July 14, 2015 at 10:09 AM
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Cc: Balle, Susanne susanne.ba...@hp.commailto:susanne.ba...@hp.com, 
Tonse, Milan 

Re: [openstack-dev] [Fuel] Get rid of fuelmenu

2015-07-28 Thread Mike Scherbakov
Guys,
how do we deal with use case provide in this bug:
https://bugs.launchpad.net/fuel/7.0.x/+bug/1438658
?
Looks like Fuel Menu can't solve this one. Is there workaround possible
(even with worse UX)?

On Fri, Jul 24, 2015 at 5:26 AM Vladimir Kozhukalov 
vkozhuka...@mirantis.com wrote:

 Guys, thanks a lot for your opinions. Now it is quite clear for me that
 vim+text UX is definitely not our way even though many developers (not all)
 prefer this.

 Vladimir Kozhukalov

 On Fri, Jul 24, 2015 at 12:47 AM, Fabrizio Soppelsa 
 fsoppe...@mirantis.com wrote:

  Hello Vladimir, from me -1.

 We can discuss if enable fuelmenu=yes or not in grub, but I wouldn't get
 rid of it. I've never heard complaints against fuelmenu from users, and
 it's widely used for basic settings afterinstall.

 If the users had to manually edit another configuration file, should they
 remember to run a validator tool over it every time after editing the file?
 Or do we add a futher layer that invokes $EDITOR and after :wq, some
 validator performs a check...? IMO that's poor UX, and why reimplement it,
 in fuelmenu there are already nice fixed choices and check commands that
 restricts potential human mistakes.

 F.



 On 07/23/2015 04:23 AM, Vladimir Kozhukalov wrote:

  Dear colleagues,

  What do you think of getting rid of fuelmenu and substituting it with
 thoroughly commented text file + some validation + vim? The major pro of
 this is that text file is easier to extend and edit. Many people prefer vim
 UX instead of wandering through the semi-graphical interface. And it is not
 so hard to implement syntax and logic checking for the text file.

  Please give your opinions about this.

  Vladimir Kozhukalov


 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: 
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribehttp://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

-- 
Mike Scherbakov
#mihgen
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


  1   2   >