Re: [Openstack] [OpenStack-Infra] [third-party][openstack][CI] Examples required for "single_node_ci_data.yaml" config file

2016-05-10 Thread Abhishek Shrivastava
Hi Ramy,

The image build seems to be working fine now but while running the
command "*nodepool
image-upload all 'dpc'*" its is failing with the following error:

2016-05-11 10:58:43,233 INFO gear.Connection.nodepool: Disconnected from
127.0.0.1 port 4730
2016-05-11 10:58:43,234 INFO gear.Connection.nodepool: Connected to
127.0.0.1 port 4730
2016-05-11 10:58:43,281 ERROR nodepool.NodePool: Could not upload image dpc
on local_01
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/nodepool/nodepool.py", line
1724, in uploadImage
image_id = images[0].id
IndexError: list index out of range
Traceback (most recent call last):
  File "/usr/local/bin/nodepool", line 10, in 
sys.exit(main())
  File
"/usr/local/lib/python2.7/dist-packages/nodepool/cmd/nodepoolcmd.py", line
397, in main
return npc.main()
  File
"/usr/local/lib/python2.7/dist-packages/nodepool/cmd/nodepoolcmd.py", line
390, in main
self.args.func()
  File
"/usr/local/lib/python2.7/dist-packages/nodepool/cmd/nodepoolcmd.py", line
280, in image_upload
job.waitForCompletion()
AttributeError: 'NoneType' object has no attribute 'waitForCompletion'

Can you please help me with this one to sort it out, what I am really
missing?

On Tue, May 10, 2016 at 11:23 PM, Asselin, Ramy 
wrote:

> It’s documented here:
>
>
> http://docs.openstack.org/infra/openstackci/third_party_ci.html#configure-masterless-puppet
>
>
>
> “Modify /etc/puppet/environments/common.yaml as you need using the
> parameter documentation described in single_node_ci.pp or logserver.pp.
> These are the top level puppet class that is used in site.pp.”
>
>
>
> Which links to:
> http://git.openstack.org/cgit/openstack-infra/puppet-openstackci/tree/manifests/single_node_ci.pp#n104
>
> “# [*oscc_file_contents*]
>
> #   The multi-line contents of os-client-config.
>
> #   This allows the nodepool.yaml file provided to not contain any
> sensitive
>
> #   provider passwords. See configuration guide for more details:
>
> #
> https://git.openstack.org/cgit/openstack/os-client-config/tree/README.rst
>
> “
>
> Which links to os-client-config README ^^
>
>
>
> Patches to improve the documentation are welcome.  Links were intended to
> avoid copy and paste, but perhaps including a base example or the URL
> directly in contrib/single_node_ci_data.yaml would be helpful?
>
>
>
> Ramy
>
>
>
> *From:* Abhishek Shrivastava [mailto:abhis...@cloudbyte.com]
> *Sent:* Tuesday, May 10, 2016 2:19 AM
>
> *To:* Bob Ball 
> *Cc:* openstack-in...@lists.openstack.org; openstack@lists.openstack.org
> *Subject:* Re: [OpenStack-Infra] [third-party][openstack][CI] Examples
> required for "single_node_ci_data.yaml" config file
>
>
>
> Thanks a lot for the help Bob :)
>
>
>
>
>
> On Tue, May 10, 2016 at 2:36 PM, Bob Ball  wrote:
>
> You need your own credentials where I put  - I just didn’t want
> to share my credentials with the whole OpenStack community J
>
>
>
> Bob
>
>
>
> *From:* Abhishek Shrivastava [mailto:abhis...@cloudbyte.com]
> *Sent:* 10 May 2016 10:04
> *To:* Bob Ball 
> *Cc:* openstack-in...@lists.openstack.org; openstack@lists.openstack.org
> *Subject:* Re: [OpenStack-Infra] [third-party][openstack][CI] Examples
> required for "single_node_ci_data.yaml" config file
>
>
>
> Thanks Bob,
>
>
>
> So just need to put the following in the section without any credentials?
>
>
>
> On Tue, May 10, 2016 at 1:35 PM, Bob Ball  wrote:
>
> Hi Abishek,
>
>
>
> I use the following which works well:
>
> oscc_file_contents: |
>
> # Do Not Edit - Generated & Managed by Puppet
>
> clouds:
>
> rax:
>
> profile: rackspace
>
> regions:
>
> - IAD
>
> - ORD
>
> - DWF
>
> auth:
>
> username: 
>
> password: 
>
> project-id: 
>
> #
>
>
>
> Then my nodepool config has “cloud: rax” and “region-name: ‘IAD’” instead
> of any credentials.
>
>
>
> Thanks,
>
>
>
> Bob
>
>
>
> *From:* Abhishek Shrivastava [mailto:abhis...@cloudbyte.com]
> *Sent:* 10 May 2016 07:13
> *To:* openstack-in...@lists.openstack.org; openstack@lists.openstack.org
> *Subject:* [OpenStack-Infra] [third-party][openstack][CI] Examples
> required for "single_node_ci_data.yaml" config file
>
>
>
> Hi Folks,
>
>
>
> I have been configuring the new OpenStack CI and was not able to figure
> out what exactly needed to be put in the section "*oscc_file_contents:*".
> So, if anyone has done the configuration and is running the new OpenStack
> CI please let me know what to put in the configuration.
>
>
>
> Also, need to know how to add slaves to Jenkins using the Nodepool images.
>
>
>
> --
>
> *Thanks & Regards,*
>
> *Abhishek*
>
> *Cloudbyte Inc. *
>
>
>
>
>
>

[Openstack] Error: No valid host was found. There are not enough hosts available

2016-05-10 Thread Irfan Sayed
Hello,
I am trying to integrate the Ironic service with other openstack services.
I am using liberty release of openstack.

installed and configured the Ironic service.
here is the setup:

1: all openstack services are deployed on VM
2: controller is on one VM (along with other services) and compute is on
another VM
3: one bare metal machine / desktop is there which i want to provision
using the ironic service.
4: nova compute service which runs on compute node is serving hypervisor
for VMs and another nova compute service which is running on controller is
acting hypervisor for bare metal node ...
5: so actually i have hybrid model of VMs and physical server for openstack
private cloud.
6: i am using pxe_wol driver to boot the node. using ironic service also i
can boot the node.

so, this is the brief about the environment setup which i have as of now ...
the issue is , when i am trying to launch the instance from horizon
dashboard .. i am getting above error

in the scheduler log, here is the output.

2016-05-11 09:17:30.529 15559 INFO nova.filters
[req-6c68100d-420f-43ad-878e-7819a43298e6 5c50e3803049470283f7a9d18e871096
28d5644376ba4d3bab3a30e09a0b28d1 - - -] Filter ExactRamFilter returned 0
hosts
2016-05-11 09:17:30.530 15559 INFO nova.filters
[req-6c68100d-420f-43ad-878e-7819a43298e6 5c50e3803049470283f7a9d18e871096
28d5644376ba4d3bab3a30e09a0b28d1 - - -] Filtering removed all hosts for the
request with reservation ID 'r-mld1goh8' and instance ID
'98c49d72-9d8e-4377-bbe0-6dbef187e75a'. Filter results: ['RetryFilter:
(start: 3, end: 3)', 'AvailabilityZoneFilter: (start: 3, end: 3)',
'ComputeFilter: (start: 3, end: 3)', 'ComputeCapabilitiesFilter: (start: 3,
end: 3)', 'ImagePropertiesFilter: (start: 3, end: 3)', 'ExactRamFilter:
(start: 3, end: 0)']

now i dont understand what is the meaning of "ExactRamFilter  returned 0
hosts"

please help

Regards,
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Discuss]After create 'stack' user by create-stack-user.sh, how to login by stack ?

2016-05-10 Thread yewgang
I don't if it's bug.

After switch to stack, I found I'm located in /opt/stack, and all operation
like create folder is not permited.

stack@gateway-20150605:~$ ls
data  devstack.subunit  logs  requirements
stack@gateway-20150605:~$ pwd
/opt/stack
stack@gateway-20150605:~$ ls
data  devstack.subunit  logs  requirements
stack@gateway-20150605:~$ git clone
https://github.com/openstack-dev/devstack.git
fatal: could not create work tree dir 'devstack'.: Permission denied

2016-05-11 8:46 GMT+08:00 yewgang :

> Thank you !
> That works !
>
> 2016-05-10 19:25 GMT+08:00 Nikolay Starodubtsev <
> nstarodubt...@mirantis.com>:
>
>> Hi,
>> Try to use 'sudo login -f stack'. This may help :)
>>
>>
>>
>> Nikolay Starodubtsev
>>
>> Software Engineer
>>
>> Mirantis Inc.
>>
>>
>> Skype: dark_harlequine1
>>
>> 2016-05-10 13:23 GMT+03:00 yewgang :
>>
>>> Hi,
>>>
>>> I create 'stack' user by create-stack-user.sh, but I don't know how to
>>> login this stack user or how to use it. Could you help me ?
>>>
>>> Thank you.
>>>
>>> ___
>>> Mailing list:
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to : openstack@lists.openstack.org
>>> Unsubscribe :
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>
>>>
>>
>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Discuss]After create 'stack' user by create-stack-user.sh, how to login by stack ?

2016-05-10 Thread yewgang
Thank you !
That works !

2016-05-10 19:25 GMT+08:00 Nikolay Starodubtsev 
:

> Hi,
> Try to use 'sudo login -f stack'. This may help :)
>
>
>
> Nikolay Starodubtsev
>
> Software Engineer
>
> Mirantis Inc.
>
>
> Skype: dark_harlequine1
>
> 2016-05-10 13:23 GMT+03:00 yewgang :
>
>> Hi,
>>
>> I create 'stack' user by create-stack-user.sh, but I don't know how to
>> login this stack user or how to use it. Could you help me ?
>>
>> Thank you.
>>
>> ___
>> Mailing list:
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe :
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>>
>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [all][stable] OpenStack 2015.1.4 released (EOL release)

2016-05-10 Thread Tony Breeds
On Tue, May 10, 2016 at 11:30:30PM +0100, Dave Walker wrote:
> Hi,
> 
> The OpenStack Stable Maintenance team is happy to announce the release
> of the 2015.1.4 stable Kilo release.  We have been busy reviewing and
> accepting backported bugfixes to the stable/kilo branches according
> to the criteria set at:
> https://wiki.openstack.org/wiki/StableBranch

Thanks so much for doing this Dave!

Tony.


signature.asc
Description: PGP signature
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] ip assignment failure !!

2016-05-10 Thread Ahmed Medhat
Hi Guys,

I am using Devstack Kilo release.

I configured vxlan network, and instantiated a simple VM using cirros image.

The Ip address is not assigned to the VM.

 Starting network...
 udhcpc (v1.20.1) started
 Sending discover...
 Sending discover...
 Sending discover...
 Usage: /sbin/cirros-dhcpc 
 No lease, failing


The dhcp-agent is working fine.


Could you please help me ?


Best regards,

Ahmed
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] [all][stable] OpenStack 2015.1.4 released (EOL release)

2016-05-10 Thread Dave Walker
Hi,

The OpenStack Stable Maintenance team is happy to announce the release
of the 2015.1.4 stable Kilo release.  We have been busy reviewing and
accepting backported bugfixes to the stable/kilo branches according
to the criteria set at:
https://wiki.openstack.org/wiki/StableBranch

This is the 2015.1.4 release, consisting of:
  - ceilometer: 7 commits
  - cinder: 4 commits
  - glance: 5 commits
  - heat: 21 commits
  - horizon: 7 commits
  - ironic: 7 commits
  - keystone: 4 commits
  - neutron: 96 commits
  - neutron-lbaas: 4 commits
  - nova: 31 commits
  - sahara: 6 commits

* Please note, that this is the final release of Kilo and no further
updates will be provided *

Two security issues have been identified as part of this release:
 * OSSA 2016-006 Normal user can change image status if
show_multiple_locations has been set to true (CVE-2016-0757)
 * OSSA 2016-007 Host data leak during resize/migrate for raw-backed
instances (CVE-2016-2140)

A total of 101 bugs have been fixed across all projects. These
updates to Kilo are intended to be low risk with no
intentional regressions or API changes. The list of bugs, tarballs and
other milestone information for each project may be found on Launchpad:
https://launchpad.net/ceilometer/kilo/2015.1.4
https://launchpad.net/cinder/kilo/2015.1.4
https://launchpad.net/glance/kilo/2015.1.4
https://launchpad.net/heat/kilo/2015.1.4
https://launchpad.net/horizon/kilo/2015.1.4
https://launchpad.net/ironic/kilo/2015.1.4
https://launchpad.net/keystone/kilo/2015.1.4
https://launchpad.net/neutron/kilo/2015.1.4
https://launchpad.net/nova/kilo/2015.1.4
https://launchpad.net/sahara/kilo/2015.1.4


Tarballs can be retrieved from:
https://tarballs.openstack.org/ceilometer/ceilometer-2015.1.4.tar.gz
https://tarballs.openstack.org/cinder/cinder-2015.1.4.tar.gz
https://tarballs.openstack.org/glance/glance-2015.1.4.tar.gz
https://tarballs.openstack.org/heat/heat-2015.1.4.tar.gz
https://tarballs.openstack.org/horizon/horizon-2015.1.4.tar.gz
https://tarballs.openstack.org/ironic/ironic-2015.1.4.tar.gz
https://tarballs.openstack.org/keystone/keystone-2015.1.4.tar.gz
https://tarballs.openstack.org/neutron/neutron-2015.1.4.tar.gz
https://tarballs.openstack.org/neutron-lbaas/neutron-lbaas-2015.1.4.tar.gz
https://tarballs.openstack.org/nova/nova-2015.1.4.tar.gz
https://tarballs.openstack.org/sahara/sahara-2015.1.4.tar.gz

Further release notes can be found at:
https://wiki.openstack.org/wiki/ReleaseNotes/2015.1.4

--
Kind Regards,
Dave Walker
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are not authorized to perform the requested action.

2016-05-10 Thread magicboiz


Hi


I'm testing this simple template: 
https://github.com/openstack/heat-templates/blob/master/hot/autoscaling.yaml


But please notice that Fuel Health Test autoscale also fails.so I guess 
those trusts and domains might not be correctly deployed...


:(


Regards 

J.



De: Pavlo Shchelokovskyy

Enviado: martes 10 de mayo 20:04

Asunto: Re: [Openstack] Heat autoscaling: heat.engine.resource Forbidden: You 
are not authorized to perform the requested action.

Para: magicb...@hotmail.com

Cc: openstack@lists.openstack.org



Hi,


no, "heat_stack_owner" role is actually not needed in MOS 8.0. Earlier it was 
used as a special role to pass via trusts, but now all roles are passed via 
trust by default. You also do not have to be "admin" either, priviledge 
"escalation" is handled by Heat using Keystone V3 trusts and domains which 
should have been set up automatically during deployment.


One question though - Is by any chance the "heat_stack_user" role assigned to 
the actual ("human") user who is accessing Heat API? It _must_not_ be  - this 
is a special role used by internal Heat-created users (implementation detail), 
and it has _very_ limited privileges in regard Heat API access.


Also, could you show the template you are testing autoscaling with? just in 
case...



Cheers,



Dr. Pavlo Shchelokovskyy


Senior Software Engineer


Mirantis Inc


www.mirantis.com



On Tue, May 10, 2016 at 6:52 PM, magicb...@hotmail.com  
wrote:


Hi again,


these are the roles I have :


#openstack role list   

+--+-+

| ID   | Name    |

+--+-+

| 0d77782f1ae54fa799b0585b267fb746 | ResellerAdmin   |

| 2c0a5b381f2b4f10b42aaa09678210a5 | heat_stack_user |

| 9fe2ff9ee4384b1894a90878d3e92bab | _member_    |

| d819d32c0eba4c86a99241e741c241c1 | admin   |

| e0729bbb6f8544268fd371e50682754a | SwiftOperator   |



So, there is no "heat_stack_owner" role defined in my environment, but you're 
right, in 
http://docs.openstack.org/draft/install-guide-ubuntu/heat-install.html docs 
says:


Add the heat_stack_owner role to the demo project and user to enable stack 
management by the demo user:


$ openstack role add --project demo --user demo heat_stack_owner 



Is this a bug in Mirantis MOS 8.0? 



On 10/05/16 17:05, magicb...@hotmail.com wrote:



Hi Raghavendra,



how can I check those privileges? Even with "admin" user, I get the same 
error. :(


Best regards


J.


On 10/05/16 13:23, raghavendra@accenture.com wrote:




Hi Mag,


 


Please check if you have provided the heat-stack-owner and admin privileges to 
the tenant then try to spin up the Heat stack.


 


Regards,


Raghavendra Lad


 


From: magicb...@hotmail.com [mailto:magicb...@hotmail.com] 

Sent: Tuesday, May 10, 2016 4:30 PM

To: openstack@lists.openstack.org

Subject: [Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are 
not authorized to perform the requested action.


 


Hi


testing Openstack Mitaka (deployed with Mirantis FUEL 8.0), when testing Heat 
Autoscaling, I get this error:


heat.engine.resource Forbidden: You are not authorized to perform the requested 
action.


 


Any ideas on what's going on?


 


Thanks in advance.


J


 


 




This message is for the designated recipient only and may contain privileged, 
proprietary, or otherwise confidential information. If you have received it in 
error, please notify the sender immediately and delete the original. Any other 
use of the e-mail by you is prohibited. Where allowed by local law, electronic 
communications with Accenture and its affiliates, including e-mail and instant 
messaging (including content), may be scanned by our systems for the purposes 
of information security and assessment of internal compliance with Accenture 
policy. 

__


www.accenture.com












___ Mailing list: 
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : 
openstack@lists.openstack.org Unsubscribe : 
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack 










___

Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Post to     : openstack@lists.openstack.org

Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack








___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Control network access between tenant networks in same neutron L3 router?

2016-05-10 Thread Mike Spreitzer
"Hong Hui Xiao"  wrote on 05/09/2016 10:55:17 PM:

> ...
> I think the neutron fwaas can meet your requirement. Try "neutron help | 

> grep firewall" and [1] to see more.
> 
> 
> [1] https://wiki.openstack.org/wiki/Neutron/FWaaS
> 
> 
> HongHui Xiao(肖宏辉)
> 
> 
> 
> From:   "Rui Mao" 
> To: 
> Date:   05/10/2016 09:22
> Subject:[Openstack] Control network access between tenant 
networks 
> in same neutron L3 router?
> 
> 
> 
> For example, tenant network A/B/C/D connect to same neutron L3 router. 
> A/B/C can communicate with D, but A/B/C cannot access each others.
> 
> Is this possible? Any performance issue should be considered?
> 
> Best regards,
> Rui Mao

But remember the discussion in 
http://lists.openstack.org/pipermail/openstack-operators/2016-May/010295.html

Regards,
Mike



___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are not authorized to perform the requested action.

2016-05-10 Thread Pavlo Shchelokovskyy
Hi,

no, "heat_stack_owner" role is actually not needed in MOS 8.0. Earlier it
was used as a special role to pass via trusts, but now all roles are passed
via trust by default. You also do not have to be "admin" either, priviledge
"escalation" is handled by Heat using Keystone V3 trusts and domains which
should have been set up automatically during deployment.

One question though - Is by any chance the "heat_stack_user" role assigned
to the actual ("human") user who is accessing Heat API? It _must_not_ be  -
this is a special role used by internal Heat-created users (implementation
detail), and it has _very_ limited privileges in regard Heat API access.

Also, could you show the template you are testing autoscaling with? just in
case...

Cheers,

Dr. Pavlo Shchelokovskyy
Senior Software Engineer
Mirantis Inc
www.mirantis.com

On Tue, May 10, 2016 at 6:52 PM, magicb...@hotmail.com <
magicb...@hotmail.com> wrote:

> Hi again,
>
> these are the roles I have :
>
> #openstack role list
> +--+-+
> | ID   | Name|
> +--+-+
> | 0d77782f1ae54fa799b0585b267fb746 | ResellerAdmin   |
> | 2c0a5b381f2b4f10b42aaa09678210a5 | heat_stack_user |
> | 9fe2ff9ee4384b1894a90878d3e92bab | _member_|
> | d819d32c0eba4c86a99241e741c241c1 | admin   |
> | e0729bbb6f8544268fd371e50682754a | SwiftOperator   |
>
>
> So, there is no "heat_stack_owner" role defined in my environment, but
> you're right, in
> http://docs.openstack.org/draft/install-guide-ubuntu/heat-install.html
> docs says:
>
> *Add the **heat_stack_owner** role to the **demo** project and user to
> enable stack management by the **demo** user:*
>
> *$** openstack role add --project demo --user demo heat_stack_owner*
>
>
> Is this a bug in Mirantis MOS 8.0?
>
>
> On 10/05/16 17:05, magicb...@hotmail.com wrote:
>
> Hi Raghavendra,
>
>
> how can I check those privileges? Even with "admin" user, I get the same
> error. :(
>
> Best regards
>
> J.
> On 10/05/16 13:23, 
> raghavendra@accenture.com wrote:
>
> Hi Mag,
>
>
>
> Please check if you have provided the *heat-stack-owner* and *admin 
> *privileges
> to the tenant then try to spin up the Heat stack.
>
>
>
> Regards,
>
> Raghavendra Lad
>
>
>
> *From:* magicb...@hotmail.com [mailto:magicb...@hotmail.com
> ]
> *Sent:* Tuesday, May 10, 2016 4:30 PM
> *To:* openstack@lists.openstack.org
> *Subject:* [Openstack] Heat autoscaling: heat.engine.resource Forbidden:
> You are not authorized to perform the requested action.
>
>
>
> Hi
>
> testing Openstack Mitaka (deployed with Mirantis FUEL 8.0), when testing
> Heat Autoscaling, I get this error:
>
> *heat.engine.resource Forbidden: You are not authorized to perform the
> requested action.*
>
>
>
> Any ideas on what's going on?
>
>
>
> Thanks in advance.
>
> J
>
>
>
>
>
> --
>
> This message is for the designated recipient only and may contain
> privileged, proprietary, or otherwise confidential information. If you have
> received it in error, please notify the sender immediately and delete the
> original. Any other use of the e-mail by you is prohibited. Where allowed
> by local law, electronic communications with Accenture and its affiliates,
> including e-mail and instant messaging (including content), may be scanned
> by our systems for the purposes of information security and assessment of
> internal compliance with Accenture policy.
>
> __
>
> www.accenture.com
>
>
>
>
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
>
> ___
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are not authorized to perform the requested action.

2016-05-10 Thread magicb...@hotmail.com

Hi again,

these are the roles I have :

#openstack role list
+--+-+
| ID   | Name|
+--+-+
| 0d77782f1ae54fa799b0585b267fb746 | ResellerAdmin   |
| 2c0a5b381f2b4f10b42aaa09678210a5 | heat_stack_user |
| 9fe2ff9ee4384b1894a90878d3e92bab | _member_|
| d819d32c0eba4c86a99241e741c241c1 | admin   |
| e0729bbb6f8544268fd371e50682754a | SwiftOperator   |


So, there is no "heat_stack_owner" role defined in my environment, but 
you're right, in 
http://docs.openstack.org/draft/install-guide-ubuntu/heat-install.html 
docs says:


/Add the //heat_stack_owner//role to the //demo//project and user to 
enable stack management by the //demo//user:/


//

///$//openstack role add --project demo --user demo heat_stack_owner/


Is this a bug in Mirantis MOS 8.0?


On 10/05/16 17:05, magicb...@hotmail.com wrote:


Hi Raghavendra,


how can I check those privileges? Even with "admin" user, I get the 
same error. :(


Best regards

J.

On 10/05/16 13:23, raghavendra@accenture.com wrote:


Hi Mag,

Please check if you have provided the *heat-stack-owner* and *admin 
*privileges to the tenant then try to spin up the Heat stack.


Regards,

Raghavendra Lad

*From:*magicb...@hotmail.com [mailto:magicb...@hotmail.com]
*Sent:* Tuesday, May 10, 2016 4:30 PM
*To:* openstack@lists.openstack.org
*Subject:* [Openstack] Heat autoscaling: heat.engine.resource 
Forbidden: You are not authorized to perform the requested action.


Hi

testing Openstack Mitaka (deployed with Mirantis FUEL 8.0), when 
testing Heat Autoscaling, I get this error:


/heat.engine.resource Forbidden: You are not authorized to perform 
the requested action./


Any ideas on what's going on?

Thanks in advance.

J




This message is for the designated recipient only and may contain 
privileged, proprietary, or otherwise confidential information. If 
you have received it in error, please notify the sender immediately 
and delete the original. Any other use of the e-mail by you is 
prohibited. Where allowed by local law, electronic communications 
with Accenture and its affiliates, including e-mail and instant 
messaging (including content), may be scanned by our systems for the 
purposes of information security and assessment of internal 
compliance with Accenture policy.

__

www.accenture.com




___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are not authorized to perform the requested action.

2016-05-10 Thread magicb...@hotmail.com

Hi Raghavendra,


how can I check those privileges? Even with "admin" user, I get the same 
error. :(


Best regards

J.

On 10/05/16 13:23, raghavendra@accenture.com wrote:


Hi Mag,

Please check if you have provided the *heat-stack-owner* and *admin 
*privileges to the tenant then try to spin up the Heat stack.


Regards,

Raghavendra Lad

*From:*magicb...@hotmail.com [mailto:magicb...@hotmail.com]
*Sent:* Tuesday, May 10, 2016 4:30 PM
*To:* openstack@lists.openstack.org
*Subject:* [Openstack] Heat autoscaling: heat.engine.resource 
Forbidden: You are not authorized to perform the requested action.


Hi

testing Openstack Mitaka (deployed with Mirantis FUEL 8.0), when 
testing Heat Autoscaling, I get this error:


/heat.engine.resource Forbidden: You are not authorized to perform the 
requested action./


Any ideas on what's going on?

Thanks in advance.

J




This message is for the designated recipient only and may contain 
privileged, proprietary, or otherwise confidential information. If you 
have received it in error, please notify the sender immediately and 
delete the original. Any other use of the e-mail by you is prohibited. 
Where allowed by local law, electronic communications with Accenture 
and its affiliates, including e-mail and instant messaging (including 
content), may be scanned by our systems for the purposes of 
information security and assessment of internal compliance with 
Accenture policy.

__

www.accenture.com


___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] [openstack][barbican]barbican github installation failing

2016-05-10 Thread Akshay Kumar Sanghai
Hi,
I have a 4 node working setup of openstack (1 controller, 1 network node, 2
compute node).
I am trying to use ssl offload feature of lbaas v2. For that I need tls
containers, hence barbican.
I did a git clone of barbican repo from
https://github.com/openstack/barbican
Then ./bin/barbican.sh install
I am getting this error

Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/mock/mock.py", line 1305, in
patched
return func(*args, **keywargs)
  File "barbican/tests/queue/test_keystone_listener.py", line 327, in
test_should_wait
msg_server = keystone_listener.MessageServer(self.conf)
  File "barbican/queue/keystone_listener.py", line 156, in __init__
endpoints=[self])
  File "barbican/queue/__init__.py", line 112, in get_notification_server
allow_requeue)
TypeError: __init__() takes exactly 3 arguments (5 given)
Ran 1246 tests in 172.776s (-10.533s)
FAILED (id=1, failures=4, skips=4)
error: testr failed (1)
Starting barbican...
./bin/barbican.sh: line 57: uwsgi: command not found

Please help me.

Thanks
Akshay
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are not authorized to perform the requested action.

2016-05-10 Thread raghavendra.lad
Hi Mag,

Please check if you have provided the heat-stack-owner and admin privileges to 
the tenant then try to spin up the Heat stack.

Regards,
Raghavendra Lad

From: magicb...@hotmail.com [mailto:magicb...@hotmail.com]
Sent: Tuesday, May 10, 2016 4:30 PM
To: openstack@lists.openstack.org
Subject: [Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are 
not authorized to perform the requested action.


Hi

testing Openstack Mitaka (deployed with Mirantis FUEL 8.0), when testing Heat 
Autoscaling, I get this error:

heat.engine.resource Forbidden: You are not authorized to perform the requested 
action.



Any ideas on what's going on?



Thanks in advance.

J







This message is for the designated recipient only and may contain privileged, 
proprietary, or otherwise confidential information. If you have received it in 
error, please notify the sender immediately and delete the original. Any other 
use of the e-mail by you is prohibited. Where allowed by local law, electronic 
communications with Accenture and its affiliates, including e-mail and instant 
messaging (including content), may be scanned by our systems for the purposes 
of information security and assessment of internal compliance with Accenture 
policy.
__

www.accenture.com
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Discuss]After create 'stack' user by create-stack-user.sh, how to login by stack ?

2016-05-10 Thread Nikolay Starodubtsev
Hi,
Try to use 'sudo login -f stack'. This may help :)



Nikolay Starodubtsev

Software Engineer

Mirantis Inc.


Skype: dark_harlequine1

2016-05-10 13:23 GMT+03:00 yewgang :

> Hi,
>
> I create 'stack' user by create-stack-user.sh, but I don't know how to
> login this stack user or how to use it. Could you help me ?
>
> Thank you.
>
> ___
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Discuss]After create 'stack' user by create-stack-user.sh, how to login by stack ?

2016-05-10 Thread Abhishek Shrivastava
Hi Yewgang,

So for which purpose you created this stack use?



On Tue, May 10, 2016 at 3:53 PM, yewgang  wrote:

> Hi,
>
> I create 'stack' user by create-stack-user.sh, but I don't know how to
> login this stack user or how to use it. Could you help me ?
>
> Thank you.
>
> ___
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>


-- 


*Thanks & Regards,*
*Abhishek*
*Cloudbyte Inc. *
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are not authorized to perform the requested action.

2016-05-10 Thread magicb...@hotmail.com

Hi

testing Openstack Mitaka (deployed with Mirantis FUEL 8.0), when testing 
Heat Autoscaling, I get this error:


/heat.engine.resource Forbidden: You are not authorized to perform the 
requested action./



Any ideas on what's going on?


Thanks in advance.

J



___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] [Discuss]After create 'stack' user by create-stack-user.sh, how to login by stack ?

2016-05-10 Thread yewgang
Hi,

I create 'stack' user by create-stack-user.sh, but I don't know how to
login this stack user or how to use it. Could you help me ?

Thank you.
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [OpenStack-Infra] [third-party][openstack][CI] Examples required for "single_node_ci_data.yaml" config file

2016-05-10 Thread Abhishek Shrivastava
Thanks a lot for the help Bob :)


On Tue, May 10, 2016 at 2:36 PM, Bob Ball  wrote:

> You need your own credentials where I put  - I just didn’t want
> to share my credentials with the whole OpenStack community J
>
>
>
> Bob
>
>
>
> *From:* Abhishek Shrivastava [mailto:abhis...@cloudbyte.com]
> *Sent:* 10 May 2016 10:04
> *To:* Bob Ball 
> *Cc:* openstack-in...@lists.openstack.org; openstack@lists.openstack.org
> *Subject:* Re: [OpenStack-Infra] [third-party][openstack][CI] Examples
> required for "single_node_ci_data.yaml" config file
>
>
>
> Thanks Bob,
>
>
>
> So just need to put the following in the section without any credentials?
>
>
>
> On Tue, May 10, 2016 at 1:35 PM, Bob Ball  wrote:
>
> Hi Abishek,
>
>
>
> I use the following which works well:
>
> oscc_file_contents: |
>
> # Do Not Edit - Generated & Managed by Puppet
>
> clouds:
>
> rax:
>
> profile: rackspace
>
> regions:
>
> - IAD
>
> - ORD
>
> - DWF
>
> auth:
>
> username: 
>
> password: 
>
> project-id: 
>
> #
>
>
>
> Then my nodepool config has “cloud: rax” and “region-name: ‘IAD’” instead
> of any credentials.
>
>
>
> Thanks,
>
>
>
> Bob
>
>
>
> *From:* Abhishek Shrivastava [mailto:abhis...@cloudbyte.com]
> *Sent:* 10 May 2016 07:13
> *To:* openstack-in...@lists.openstack.org; openstack@lists.openstack.org
> *Subject:* [OpenStack-Infra] [third-party][openstack][CI] Examples
> required for "single_node_ci_data.yaml" config file
>
>
>
> Hi Folks,
>
>
>
> I have been configuring the new OpenStack CI and was not able to figure
> out what exactly needed to be put in the section "*oscc_file_contents:*".
> So, if anyone has done the configuration and is running the new OpenStack
> CI please let me know what to put in the configuration.
>
>
>
> Also, need to know how to add slaves to Jenkins using the Nodepool images.
>
>
>
> --
>
> *Thanks & Regards,*
>
> *Abhishek*
>
> *Cloudbyte Inc. *
>
>
>
>
>
> --
>
> *Thanks & Regards,*
>
> *Abhishek*
>
> *Cloudbyte Inc. *
>



-- 


*Thanks & Regards,*
*Abhishek*
*Cloudbyte Inc. *
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [OpenStack-Infra] [third-party][openstack][CI] Examples required for "single_node_ci_data.yaml" config file

2016-05-10 Thread Abhishek Shrivastava
Thanks Bob,

So just need to put the following in the section without any credentials?

On Tue, May 10, 2016 at 1:35 PM, Bob Ball  wrote:

> Hi Abishek,
>
>
>
> I use the following which works well:
>
> oscc_file_contents: |
>
> # Do Not Edit - Generated & Managed by Puppet
>
> clouds:
>
> rax:
>
> profile: rackspace
>
> regions:
>
> - IAD
>
> - ORD
>
> - DWF
>
> auth:
>
> username: 
>
> password: 
>
> project-id: 
>
> #
>
>
>
> Then my nodepool config has “cloud: rax” and “region-name: ‘IAD’” instead
> of any credentials.
>
>
>
> Thanks,
>
>
>
> Bob
>
>
>
> *From:* Abhishek Shrivastava [mailto:abhis...@cloudbyte.com]
> *Sent:* 10 May 2016 07:13
> *To:* openstack-in...@lists.openstack.org; openstack@lists.openstack.org
> *Subject:* [OpenStack-Infra] [third-party][openstack][CI] Examples
> required for "single_node_ci_data.yaml" config file
>
>
>
> Hi Folks,
>
>
>
> I have been configuring the new OpenStack CI and was not able to figure
> out what exactly needed to be put in the section "*oscc_file_contents:*".
> So, if anyone has done the configuration and is running the new OpenStack
> CI please let me know what to put in the configuration.
>
>
>
> Also, need to know how to add slaves to Jenkins using the Nodepool images.
>
>
>
> --
>
> *Thanks & Regards,*
>
> *Abhishek*
>
> *Cloudbyte Inc. *
>



-- 


*Thanks & Regards,*
*Abhishek*
*Cloudbyte Inc. *
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [OpenStack-Infra] [third-party][openstack][CI] Examples required for "single_node_ci_data.yaml" config file

2016-05-10 Thread Bob Ball
You need your own credentials where I put  - I just didn’t want to 
share my credentials with the whole OpenStack community ☺

Bob

From: Abhishek Shrivastava [mailto:abhis...@cloudbyte.com]
Sent: 10 May 2016 10:04
To: Bob Ball 
Cc: openstack-in...@lists.openstack.org; openstack@lists.openstack.org
Subject: Re: [OpenStack-Infra] [third-party][openstack][CI] Examples required 
for "single_node_ci_data.yaml" config file

Thanks Bob,

So just need to put the following in the section without any credentials?

On Tue, May 10, 2016 at 1:35 PM, Bob Ball 
mailto:bob.b...@citrix.com>> wrote:
Hi Abishek,

I use the following which works well:
oscc_file_contents: |
# Do Not Edit - Generated & Managed by Puppet
clouds:
rax:
profile: rackspace
regions:
- IAD
- ORD
- DWF
auth:
username: 
password: 
project-id: 
#

Then my nodepool config has “cloud: rax” and “region-name: ‘IAD’” instead of 
any credentials.

Thanks,

Bob

From: Abhishek Shrivastava 
[mailto:abhis...@cloudbyte.com]
Sent: 10 May 2016 07:13
To: 
openstack-in...@lists.openstack.org;
 openstack@lists.openstack.org
Subject: [OpenStack-Infra] [third-party][openstack][CI] Examples required for 
"single_node_ci_data.yaml" config file

Hi Folks,

I have been configuring the new OpenStack CI and was not able to figure out 
what exactly needed to be put in the section "oscc_file_contents:". So, if 
anyone has done the configuration and is running the new OpenStack CI please 
let me know what to put in the configuration.

Also, need to know how to add slaves to Jenkins using the Nodepool images.

--
[https://docs.google.com/uc?export=download&id=0Byq0j7ZjFlFKV3ZCWnlMRXBCcU0&revid=0Byq0j7ZjFlFKa2V5VjdBSjIwUGx6bUROS2IrenNwc0kzd2IwPQ]
Thanks & Regards,
Abhishek
Cloudbyte Inc.



--
[https://docs.google.com/uc?export=download&id=0Byq0j7ZjFlFKV3ZCWnlMRXBCcU0&revid=0Byq0j7ZjFlFKa2V5VjdBSjIwUGx6bUROS2IrenNwc0kzd2IwPQ]
Thanks & Regards,
Abhishek
Cloudbyte Inc.
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [OpenStack-Infra] [third-party][openstack][CI] Examples required for "single_node_ci_data.yaml" config file

2016-05-10 Thread Bob Ball
Hi Abishek,

I use the following which works well:
oscc_file_contents: |
# Do Not Edit - Generated & Managed by Puppet
clouds:
rax:
profile: rackspace
regions:
- IAD
- ORD
- DWF
auth:
username: 
password: 
project-id: 
#

Then my nodepool config has “cloud: rax” and “region-name: ‘IAD’” instead of 
any credentials.

Thanks,

Bob

From: Abhishek Shrivastava [mailto:abhis...@cloudbyte.com]
Sent: 10 May 2016 07:13
To: openstack-in...@lists.openstack.org; openstack@lists.openstack.org
Subject: [OpenStack-Infra] [third-party][openstack][CI] Examples required for 
"single_node_ci_data.yaml" config file

Hi Folks,

I have been configuring the new OpenStack CI and was not able to figure out 
what exactly needed to be put in the section "oscc_file_contents:". So, if 
anyone has done the configuration and is running the new OpenStack CI please 
let me know what to put in the configuration.

Also, need to know how to add slaves to Jenkins using the Nodepool images.

--
[https://docs.google.com/uc?export=download&id=0Byq0j7ZjFlFKV3ZCWnlMRXBCcU0&revid=0Byq0j7ZjFlFKa2V5VjdBSjIwUGx6bUROS2IrenNwc0kzd2IwPQ]
Thanks & Regards,
Abhishek
Cloudbyte Inc.
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] how can i upgrade Mariadb galera cluster for icehouse openstack installed in centos 6.5?

2016-05-10 Thread ??????
hello,
  
 I have installed mariadb galera cluster 5.5.37 for icehouse, but I find a lot 
of bug for 5.5.37, So, I want to upgrade it to mariadb 5.5.49, how can i 
upgrade Mariadb galera cluster for icehouse openstack installed in centos 6.5?
  
 any help.
  
 Thanks___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack