Re: [Openstack] ceilometer statistics timeout
Hi again after rebooting all my three controllers, now "ceilometer statistics" works, but I'm worried about the time it takes to do the job: time ceilometer statistics -q "timestamp>2016-06-01" -m vcpus ++-++-+-+---+--+---++++ | Period | Period Start| Period End | Max | Min | Avg | Sum | Count | Duration | Duration Start | Duration End | ++-++-+-+---+--+---++++ | 0 | 2016-06-01T00:00:00 | 2016-06-30T13:00:56.394000 | 4.0 | 1.0 | 1.28571428571 | 81.0 | 63| 578920.533 | 2016-06-23T20:12:15.861000 | 2016-06-30T13:00:56.394000 | ++-++-+-+---+--+---++++ real0m24.516s user0m0.423s sys0m0.077s 24sec!! (We are only running some instances.less than 20 in total) Questions: - How can I improve mongoDB in order to improve this? - How can I configure ceilometer-api in order to wait > 60 sec for mongodb? Thanks J. On 30/06/16 10:18, magicb...@hotmail.com wrote: Hi there I'm facing a strange ceilometer-api behavior. While I can query ceilometer-api for "meter-list"/"sample-list" (or even openstack usage show) very fast, it looks like ceilometer cli (or api) struggles with "ceilometer statistics" gettting always a timeout [user1@ubuntu ~]$ ceilometer statistics -q "project=6294315f9df1491fa9345701d2642c96;timestamp>2016-06-20T14:30" -m vcpus --period 60 b'Gateway Timeout (HTTP 504)' Would you happen to know why? Any idea/clue? Thanks. J [user1@ubuntu ~]$ time openstack usage show Usage from 2016-06-02 to 2016-07-01 on project 6294315f9df1491fa9345701d2642c96: +---+---+ | Field | Value | +---+---+ | CPU Hours | 164.21| | Disk GB-Hours | 16420.51 | | RAM MB-Hours | 168146.07 | | Servers | 1 | +---+---+ real0m2.204s user0m1.490s sys0m0.113s [user1@ubuntu ~]$ time ceilometer meter-list +-++---+---+--+--+ | Name| Type | Unit | Resource ID | User ID | Project ID | +-++---+---+--+--+ | cpu | cumulative | ns| 5c305833-fbd2-44cb-b517-789641c2a5db | eb12445c73ae4093b7c7105ebe3f1216 | 6294315f9df1491fa9345701d2642c96 | | cpu.delta | delta | ns| 5c305833-fbd2-44cb-b517-789641c2a5db | eb12445c73ae4093b7c7105ebe3f1216 | 6294315f9df1491fa9345701d2642c96 | . | vcpus | gauge | vcpu | 5c305833-fbd2-44cb-b517-789641c2a5db | eb12445c73ae4093b7c7105ebe3f1216 | 6294315f9df1491fa9345701d2642c96 | +-++---+---+--+--+ real0m2.088s user0m0.897s sys0m0.057s [user1@ubuntu ~]$ time ceilometer sample-list -q "timestamp>2016-06-1T00:00" +--+---+-+++---++ | ID | Resource ID | Name| Type | Volume | Unit | Timestamp | +--+---+-+++---++ | e81ed112-3e99-11e6-b12c-52540086048d | 6294315f9df1491fa9345701d2642c96 | storage.objects.containers | gauge | 0.0| container | 2016-06-30T08:09:02.663000 | .. | 9b50bb52-3e99-11e6-90d4-52540086048d | instance-02d6-5c305833-fbd2-44cb-b517-789641c2a5db-tapdefa1d28-b5 | network.o
[Openstack] ceilometer statistics timeout
Hi there I'm facing a strange ceilometer-api behavior. While I can query ceilometer-api for "meter-list"/"sample-list" (or even openstack usage show) very fast, it looks like ceilometer cli (or api) struggles with "ceilometer statistics" gettting always a timeout [user1@ubuntu ~]$ ceilometer statistics -q "project=6294315f9df1491fa9345701d2642c96;timestamp>2016-06-20T14:30" -m vcpus --period 60 b'Gateway Timeout (HTTP 504)' Would you happen to know why? Any idea/clue? Thanks. J [user1@ubuntu ~]$ time openstack usage show Usage from 2016-06-02 to 2016-07-01 on project 6294315f9df1491fa9345701d2642c96: +---+---+ | Field | Value | +---+---+ | CPU Hours | 164.21| | Disk GB-Hours | 16420.51 | | RAM MB-Hours | 168146.07 | | Servers | 1 | +---+---+ real0m2.204s user0m1.490s sys0m0.113s [user1@ubuntu ~]$ time ceilometer meter-list +-++---+---+--+--+ | Name| Type | Unit | Resource ID | User ID | Project ID | +-++---+---+--+--+ | cpu | cumulative | ns| 5c305833-fbd2-44cb-b517-789641c2a5db | eb12445c73ae4093b7c7105ebe3f1216 | 6294315f9df1491fa9345701d2642c96 | | cpu.delta | delta | ns| 5c305833-fbd2-44cb-b517-789641c2a5db | eb12445c73ae4093b7c7105ebe3f1216 | 6294315f9df1491fa9345701d2642c96 | . | vcpus | gauge | vcpu | 5c305833-fbd2-44cb-b517-789641c2a5db | eb12445c73ae4093b7c7105ebe3f1216 | 6294315f9df1491fa9345701d2642c96 | +-++---+---+--+--+ real0m2.088s user0m0.897s sys0m0.057s [user1@ubuntu ~]$ time ceilometer sample-list -q "timestamp>2016-06-1T00:00" +--+---+-+++---++ | ID | Resource ID | Name| Type | Volume | Unit | Timestamp | +--+---+-+++---++ | e81ed112-3e99-11e6-b12c-52540086048d | 6294315f9df1491fa9345701d2642c96 | storage.objects.containers | gauge | 0.0| container | 2016-06-30T08:09:02.663000 | .. | 9b50bb52-3e99-11e6-90d4-52540086048d | instance-02d6-5c305833-fbd2-44cb-b517-789641c2a5db-tapdefa1d28-b5 | network.outgoing.packets.gb | cumulative | 2.654269337654114e-07 | gb| 2016-06-30T08:06:53.70 | +--+---+-+++---++ real0m2.373s user0m0.977s sys0m0.073s ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] Ceph RadosGW and Object Storage meters: storage.objects.incoming|outgoing.bytes
Hi is there a way to get meters like storage.objects.(incoming|outgoing).bytes when using ceph radosgw service instead of swift on openstack? thanks in advance. J. ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] keystone: change from fernet tokens to uuid
Hi
yes, I've configured Horizon to use V3 identity endpoint. And after
applying latests updates from liberty, everything works as expected (v2
o v3), so I guess it was some kind of bug
Thanks for your help.
J.
On 23/05/16 09:44, Eugen Block wrote:
Hi
Can I run "su -s /bin/sh -c "keystone-manage db_sync" keystone"
without loosing any data (current users, roles, permissions, etc)??
I wouldn't guarantee that nothing happens to your database (if you're
unsure make a backup), but I have executed this command without any
impact on my database.
Based on your statement
executing the same command through V3 indentity admin interface
(/export OS_IDENTITY_API_VERSION=3/) it works
I would suggest to follow Adam's advice to use V3 API.
Regards,
Eugen
Zitat von magicb...@hotmail.com:
Hi Eugen
I have admin_token set, but token_provider isn't set.
Can I run "su -s /bin/sh -c "keystone-manage db_sync" keystone"
without loosing any data (current users, roles, permissions, etc)??
J.
On 20/05/16 12:42, Eugen Block wrote:
Hi,
I had a similar issue, in Liberty I used uuid tokens, then I
upgraded to Mitaka and also switched to fernet tokens. Because of
some kind of inconsistency I wanted to switch back to uuid.
Do you have an admin_token set in your keystone.conf?
I compared my current conf file to the liberty conf and I can't see
another difference except admin_token and token_provider.
I followed [1] to get keystone to work with uuid tokens in Liberty.
If I understand correctly, you'll have to populate the keystone
database "su -s /bin/sh -c "keystone-manage db_sync" keystone" and
enable the required services.
In my case, I managed to switch back to uuid, but in the meantime
I'm back to fernet tokens.
Hope this helps!
[1]
http://docs.openstack.org/liberty/install-guide-obs/keystone-install.html#install-and-configure-components
Regards,
Eugen
Zitat von magicb...@hotmail.com:
Hi
I've deployed FUEL 8.0 (liberty) on my lab and noticed that FUEL
works with fernet tokens. Because I have an old app which only
works with UUID, I have changed /etc/keyston/keyston.conf
from:
[token]
provider = keystone.token.providers.fernet.Provider
to:
[token]
provider = keystone.token.providers.uuid.Provider
But now, I'm facing a strange behavior:
as admin user, executing a simple "keystone user-list" doesn't work
and shows this error:
/.
RESP BODY: {"error": {"message": "Non-default domain is not
supported (Disable debug mode to suppress these details.)", "code":
401, "title": "Unauthorized"}}
//.//
/Executing "openstack user list" also gets the same error:
/Non-default domain is not supported (Disable debug mode to
suppress these details.) (HTTP 401) (Request-ID:
req-8285b64d-353a-4188-949f-679bbfaa1114)/
Also from Horizon dashboard, I cannot retrieve the user list.
But the funny/strange thing is that executing the same command
through V3 indentity admin interface (/export
OS_IDENTITY_API_VERSION=3/) it works:
/root@node-1:~# openstack user list
+--+---+
| ID | Name |
+--+---+
| 06c80b0440034f49a674bd0ef56385e1 | heat_admin|
| 1b5ae288f1494efd91aa67cadd290939 | sahara|
| 2c71b7342bfe421abdb1af34a05988ac | heat-cfn |
| 4722750675d6416082be67a7cf9b03c3 | murano|
| 6b020f2c8328430b9bc71400e8a8b661 | cinder|
| 958dd93f02614f38b4575c05833b0884 | heat |
| 97c015a3d9b2432090992027fdb16e44 | ceilometer|
| 9fb385d757324bc0a62b502f4c3ae67c | swift |
| cc1395223fd74ea2aa59242fccb279de | admin |
| dc325906c9b6446a801a9d4914472b51 | neutron |
| df265ea710294923991a5d10006dd9cb | nova |
| ebcf0d3439c143d098d95212fa587b6a | glance|
| fc804ae3614349ea80f844bc7f102a59 | fuel_stats_user |
+--+---+
/
Anyone could help me?
thanks in advance.
J
___
Mailing list:
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe :
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] keystone: change from fernet tokens to uuid
Hi Adam
What do you mean with "upgrade the Fuel code to use the V3 Keystone
API"?? Afaik I'm running the latest FUEL distro released, which is fuel
8.0is there any new version available?
On 20/05/16 17:16, Adam Young wrote:
On 05/20/2016 06:14 AM, magicb...@hotmail.com wrote:
Hi
I've deployed FUEL 8.0 (liberty) on my lab and noticed that FUEL
works with fernet tokens. Because I have an old app which only works
with UUID, I have changed /etc/keyston/keyston.conf
from:
[token]
provider = keystone.token.providers.fernet.Provider
to:
[token]
provider = keystone.token.providers.uuid.Provider
But now, I'm facing a strange behavior:
as admin user, executing a simple "keystone user-list" doesn't work
and shows this error:
/.
RESP BODY: {"error": {"message": "Non-default domain is not supported
(Disable debug mode to suppress these details.)", "code": 401,
"title": "Unauthorized"}}
//.//
/Executing "openstack user list" also gets the same error:
/Non-default domain is not supported (Disable debug mode to suppress
these details.) (HTTP 401) (Request-ID:
req-8285b64d-353a-4188-949f-679bbfaa1114)/
Also from Horizon dashboard, I cannot retrieve the user list.
PLeaase upgrade the Fuel code to use the V3 Keystone API. It looks
like Fernet was forgiving on something it should not have been. The
"non-default-domain" error is due to passing a non default domain
along with a V2 token.
But the funny/strange thing is that executing the same command
through V3 indentity admin interface (/export
OS_IDENTITY_API_VERSION=3/) it works:
/root@node-1:~# openstack user list
+--+---+
| ID | Name |
+--+---+
| 06c80b0440034f49a674bd0ef56385e1 | heat_admin|
| 1b5ae288f1494efd91aa67cadd290939 | sahara|
| 2c71b7342bfe421abdb1af34a05988ac | heat-cfn |
| 4722750675d6416082be67a7cf9b03c3 | murano|
| 6b020f2c8328430b9bc71400e8a8b661 | cinder|
| 958dd93f02614f38b4575c05833b0884 | heat |
| 97c015a3d9b2432090992027fdb16e44 | ceilometer|
| 9fb385d757324bc0a62b502f4c3ae67c | swift |
| cc1395223fd74ea2aa59242fccb279de | admin |
| dc325906c9b6446a801a9d4914472b51 | neutron |
| df265ea710294923991a5d10006dd9cb | nova |
| ebcf0d3439c143d098d95212fa587b6a | glance|
| fc804ae3614349ea80f844bc7f102a59 | fuel_stats_user |
+--+---+
/
Anyone could help me?
thanks in advance.
J
___
Mailing list:http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to :openstack@lists.openstack.org
Unsubscribe :http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] keystone: change from fernet tokens to uuid
Hi Eugen
I have admin_token set, but token_provider isn't set.
Can I run "su -s /bin/sh -c "keystone-manage db_sync" keystone" without
loosing any data (current users, roles, permissions, etc)??
J.
On 20/05/16 12:42, Eugen Block wrote:
Hi,
I had a similar issue, in Liberty I used uuid tokens, then I upgraded
to Mitaka and also switched to fernet tokens. Because of some kind of
inconsistency I wanted to switch back to uuid.
Do you have an admin_token set in your keystone.conf?
I compared my current conf file to the liberty conf and I can't see
another difference except admin_token and token_provider.
I followed [1] to get keystone to work with uuid tokens in Liberty. If
I understand correctly, you'll have to populate the keystone database
"su -s /bin/sh -c "keystone-manage db_sync" keystone" and enable the
required services.
In my case, I managed to switch back to uuid, but in the meantime I'm
back to fernet tokens.
Hope this helps!
[1]
http://docs.openstack.org/liberty/install-guide-obs/keystone-install.html#install-and-configure-components
Regards,
Eugen
Zitat von magicb...@hotmail.com:
Hi
I've deployed FUEL 8.0 (liberty) on my lab and noticed that FUEL
works with fernet tokens. Because I have an old app which only works
with UUID, I have changed /etc/keyston/keyston.conf
from:
[token]
provider = keystone.token.providers.fernet.Provider
to:
[token]
provider = keystone.token.providers.uuid.Provider
But now, I'm facing a strange behavior:
as admin user, executing a simple "keystone user-list" doesn't work
and shows this error:
/.
RESP BODY: {"error": {"message": "Non-default domain is not supported
(Disable debug mode to suppress these details.)", "code": 401,
"title": "Unauthorized"}}
//.//
/Executing "openstack user list" also gets the same error:
/Non-default domain is not supported (Disable debug mode to suppress
these details.) (HTTP 401) (Request-ID:
req-8285b64d-353a-4188-949f-679bbfaa1114)/
Also from Horizon dashboard, I cannot retrieve the user list.
But the funny/strange thing is that executing the same command
through V3 indentity admin interface (/export
OS_IDENTITY_API_VERSION=3/) it works:
/root@node-1:~# openstack user list
+--+---+
| ID | Name |
+--+---+
| 06c80b0440034f49a674bd0ef56385e1 | heat_admin|
| 1b5ae288f1494efd91aa67cadd290939 | sahara|
| 2c71b7342bfe421abdb1af34a05988ac | heat-cfn |
| 4722750675d6416082be67a7cf9b03c3 | murano|
| 6b020f2c8328430b9bc71400e8a8b661 | cinder|
| 958dd93f02614f38b4575c05833b0884 | heat |
| 97c015a3d9b2432090992027fdb16e44 | ceilometer|
| 9fb385d757324bc0a62b502f4c3ae67c | swift |
| cc1395223fd74ea2aa59242fccb279de | admin |
| dc325906c9b6446a801a9d4914472b51 | neutron |
| df265ea710294923991a5d10006dd9cb | nova |
| ebcf0d3439c143d098d95212fa587b6a | glance|
| fc804ae3614349ea80f844bc7f102a59 | fuel_stats_user |
+--+---+
/
Anyone could help me?
thanks in advance.
J
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] keystone: change from fernet tokens to uuid
Hi
I've deployed FUEL 8.0 (liberty) on my lab and noticed that FUEL works
with fernet tokens. Because I have an old app which only works with
UUID, I have changed /etc/keyston/keyston.conf
from:
[token]
provider = keystone.token.providers.fernet.Provider
to:
[token]
provider = keystone.token.providers.uuid.Provider
But now, I'm facing a strange behavior:
as admin user, executing a simple "keystone user-list" doesn't work and
shows this error:
/.
RESP BODY: {"error": {"message": "Non-default domain is not supported
(Disable debug mode to suppress these details.)", "code": 401, "title":
"Unauthorized"}}
//.//
/Executing "openstack user list" also gets the same error:
/Non-default domain is not supported (Disable debug mode to suppress
these details.) (HTTP 401) (Request-ID:
req-8285b64d-353a-4188-949f-679bbfaa1114)/
Also from Horizon dashboard, I cannot retrieve the user list.
But the funny/strange thing is that executing the same command through
V3 indentity admin interface (/export OS_IDENTITY_API_VERSION=3/) it works:
/root@node-1:~# openstack user list
+--+---+
| ID | Name |
+--+---+
| 06c80b0440034f49a674bd0ef56385e1 | heat_admin|
| 1b5ae288f1494efd91aa67cadd290939 | sahara|
| 2c71b7342bfe421abdb1af34a05988ac | heat-cfn |
| 4722750675d6416082be67a7cf9b03c3 | murano|
| 6b020f2c8328430b9bc71400e8a8b661 | cinder|
| 958dd93f02614f38b4575c05833b0884 | heat |
| 97c015a3d9b2432090992027fdb16e44 | ceilometer|
| 9fb385d757324bc0a62b502f4c3ae67c | swift |
| cc1395223fd74ea2aa59242fccb279de | admin |
| dc325906c9b6446a801a9d4914472b51 | neutron |
| df265ea710294923991a5d10006dd9cb | nova |
| ebcf0d3439c143d098d95212fa587b6a | glance|
| fc804ae3614349ea80f844bc7f102a59 | fuel_stats_user |
+--+---+
/
Anyone could help me?
thanks in advance.
J
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] keystone admin endpoint
Thanks Hugo. I was worried about whether I had to create some endpoints in addition to the NAT task Thanks. J. On 19/05/16 15:37, Tonytkdk wrote: Yes, the NAT works as you want. Regards // Hugo "magicb...@hotmail.com" 於 2016年5月19日 20:02 寫道： Hi in my keystone.conf I have "admin_endpoint = http://192.168.0.2:35357";, but I need to access from public IP address space to this endpoint. Is it valid to just configure a NAT which translates <> <192.168.0.2:35357> ?? Thanks J. ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] keystone admin endpoint
Hi in my keystone.conf I have "admin_endpoint = http://192.168.0.2:35357";, but I need to access from public IP address space to this endpoint. Is it valid to just configure a NAT which translates <> <192.168.0.2:35357> ?? Thanks J. ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are not authorized to perform the requested action.
Hi again, these are the roles I have : #openstack role list +--+-+ | ID | Name| +--+-+ | 0d77782f1ae54fa799b0585b267fb746 | ResellerAdmin | | 2c0a5b381f2b4f10b42aaa09678210a5 | heat_stack_user | | 9fe2ff9ee4384b1894a90878d3e92bab | _member_| | d819d32c0eba4c86a99241e741c241c1 | admin | | e0729bbb6f8544268fd371e50682754a | SwiftOperator | So, there is no "heat_stack_owner" role defined in my environment, but you're right, in http://docs.openstack.org/draft/install-guide-ubuntu/heat-install.html docs says: /Add the //heat_stack_owner//role to the //demo//project and user to enable stack management by the //demo//user:/ // ///$//openstack role add --project demo --user demo heat_stack_owner/ Is this a bug in Mirantis MOS 8.0? On 10/05/16 17:05, magicb...@hotmail.com wrote: Hi Raghavendra, how can I check those privileges? Even with "admin" user, I get the same error. :( Best regards J. On 10/05/16 13:23, raghavendra@accenture.com wrote: Hi Mag, Please check if you have provided the *heat-stack-owner* and *admin *privileges to the tenant then try to spin up the Heat stack. Regards, Raghavendra Lad *From:*magicb...@hotmail.com [mailto:magicb...@hotmail.com] *Sent:* Tuesday, May 10, 2016 4:30 PM *To:* openstack@lists.openstack.org *Subject:* [Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are not authorized to perform the requested action. Hi testing Openstack Mitaka (deployed with Mirantis FUEL 8.0), when testing Heat Autoscaling, I get this error: /heat.engine.resource Forbidden: You are not authorized to perform the requested action./ Any ideas on what's going on? Thanks in advance. J This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. __ www.accenture.com ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are not authorized to perform the requested action.
Hi Raghavendra, how can I check those privileges? Even with "admin" user, I get the same error. :( Best regards J. On 10/05/16 13:23, raghavendra@accenture.com wrote: Hi Mag, Please check if you have provided the *heat-stack-owner* and *admin *privileges to the tenant then try to spin up the Heat stack. Regards, Raghavendra Lad *From:*magicb...@hotmail.com [mailto:magicb...@hotmail.com] *Sent:* Tuesday, May 10, 2016 4:30 PM *To:* openstack@lists.openstack.org *Subject:* [Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are not authorized to perform the requested action. Hi testing Openstack Mitaka (deployed with Mirantis FUEL 8.0), when testing Heat Autoscaling, I get this error: /heat.engine.resource Forbidden: You are not authorized to perform the requested action./ Any ideas on what's going on? Thanks in advance. J This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. __ www.accenture.com ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] Heat autoscaling: heat.engine.resource Forbidden: You are not authorized to perform the requested action.
Hi testing Openstack Mitaka (deployed with Mirantis FUEL 8.0), when testing Heat Autoscaling, I get this error: /heat.engine.resource Forbidden: You are not authorized to perform the requested action./ Any ideas on what's going on? Thanks in advance. J ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] Heat: error in templates related with JSON
Hi
I've setup an small lab based on Liberty (FUEL 8.0), and started to test
some heat-templates:
/git clone https://github.com/openstack/heat-templates.git/
I've detected that all resources type "OS::Heat::SoftwareConfig" which
have references to external files like "config: { get_file:
db_install.sh }" aren't accepted by the heat server with an error
related with JSON:
/[user1@linux wordpress]$openstack orchestration template validate -t
WordPress_software-config_2-instances.yaml //
//b"#!/bin/bash -v\n\nyum -y install mariadb mariadb-server\ntouch
/var/log/mariadb/mariadb.log\nchown mysql.mysql
/var/log/mariadb/mariadb.log\nsystemctl start mariadb.service\n\n# Setup
MySQL root password and create a user\nmysqladmin -u root password
$db_rootpassword\ncat << EOF | mysql -u root
--password=$db_rootpassword\nCREATE DATABASE $db_name;\nGRANT ALL
PRIVILEGES ON $db_name.* TO '$db_user'@'%'\nIDENTIFIED BY
'$db_password';\nFLUSH PRIVILEGES;\nEXIT\nEOF\n" is not JSON serializable/
It looks like the engine isn't able to serialize the content of the
referenced files.
Any ideas? Thanks in advance
J.
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] LBaasv2 in Mirantis Openstack 8.0
with liberty? great to know, but in the near future it should be dprecated: https://wiki.openstack.org/wiki/ReleaseNotes/Liberty#Deprecated_Features_11 J On 03/03/16 16:19, Jose Manuel Ferrer Mosteiro wrote: I have LBaasv1 with haproxy enabled. Look for lbaas in this page: https://github.com/paradigmadigital/ansible-openstack-vcenter/blob/master/etc_ansible/roles/networking-compute-controller/tasks/main.yml In Ubuntu with OVS: * install neutron-lbaas-agent * in lbaas_agent.ini set interface_driver and device_driver * in neutron_lbaas.conf uncomment your service_provider * reboot ;-) I use it to deploy OpenShift clusters and it works like a charm. Enjoy! On 2016-03-03 15:48, magicb...@hotmail.com wrote: I think I got it: I need to re-run "neutron-db-management" "neutron-db-manage --service lbaas --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugin.ini upgrade head" Can anoyone else confirm please? Thanks in advance. J On 03/03/16 14:34, Shake Chen wrote: Horizon not support lbaas v2 in liberty. On Thu, Mar 3, 2016 at 8:13 PM, magicb...@hotmail.com mailto:magicb...@hotmail.com>> wrote: Hi, is it possible to enable LBaaSv2 in MOS8.0 (based on Liberty)? after a fuel deployment, i have: - installed neutron-lbaasv2-agent package (with apt) on each controller, - configured neutron.conf adding neutron_lbaas.services.loadbalancer.plugin.LoadBalancerPluginv2 to service_plugins option list - configured neutron_lbaas.conf to include "service_provider=LOADBALANCERV2:Haproxy:neutron_lbaas.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver:default" - modified /etc/init/neutron-lbaasv2-agent.conf to include "--config=/etc/neutron/metadata_agent.ini" - modified lbaas_agent.ini to include - corrert "device_driver = neutron_lbaas.services.loadbalancer.drivers.haproxy.namespace_driver.HaproxyNSDriver" - correct "interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver" - restarted neutron-server and neutron-lbaasv2-agent services but now, I'm getting this message, which is to hard for me: ERROR neutron ProgrammingError: (_mysql_exceptions.ProgrammingError) (1146, "Table 'neutron.lbaas_loadbalancers' doesn't exist") Any ideas? Thanks in advance. J ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org <mailto:openstack@lists.openstack.org> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack -- Shake Chen ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org <mailto:openstack@lists.openstack.org> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] LBaasv2 in Mirantis Openstack 8.0
I think I got it: I need to re-run "neutron-db-management" "neutron-db-manage --service lbaas --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugin.ini upgrade head" Can anoyone else confirm please? Thanks in advance. J On 03/03/16 14:34, Shake Chen wrote: Horizon not support lbaas v2 in liberty. On Thu, Mar 3, 2016 at 8:13 PM, magicb...@hotmail.com <mailto:magicb...@hotmail.com> <mailto:magicb...@hotmail.com>> wrote: Hi, is it possible to enable LBaaSv2 in MOS8.0 (based on Liberty)? after a fuel deployment, i have: - installed neutron-lbaasv2-agent package (with apt) on each controller, - configured neutron.conf adding neutron_lbaas.services.loadbalancer.plugin.LoadBalancerPluginv2 to service_plugins option list - configured neutron_lbaas.conf to include "service_provider=LOADBALANCERV2:Haproxy:neutron_lbaas.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver:default" - modified /etc/init/neutron-lbaasv2-agent.conf to include "--config=/etc/neutron/metadata_agent.ini" - modified lbaas_agent.ini to include - corrert "device_driver = neutron_lbaas.services.loadbalancer.drivers.haproxy.namespace_driver.HaproxyNSDriver" - correct "interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver" - restarted neutron-server and neutron-lbaasv2-agent services but now, I'm getting this message, which is to hard for me: ERROR neutron ProgrammingError: (_mysql_exceptions.ProgrammingError) (1146, "Table 'neutron.lbaas_loadbalancers' doesn't exist") Any ideas? Thanks in advance. J ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org <mailto:openstack@lists.openstack.org> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack -- Shake Chen ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Re: [Openstack] LBaasv2 in Mirantis Openstack 8.0
Hi All I want is LBaasv2 with command line..(it's sad to know horizon doesn't support lbaasv2 because I think Lbaasv1 isn't supported by libertyisn't it?). J On 03/03/16 14:34, Shake Chen wrote: Horizon not support lbaas v2 in liberty. On Thu, Mar 3, 2016 at 8:13 PM, magicb...@hotmail.com <mailto:magicb...@hotmail.com> <mailto:magicb...@hotmail.com>> wrote: Hi, is it possible to enable LBaaSv2 in MOS8.0 (based on Liberty)? after a fuel deployment, i have: - installed neutron-lbaasv2-agent package (with apt) on each controller, - configured neutron.conf adding neutron_lbaas.services.loadbalancer.plugin.LoadBalancerPluginv2 to service_plugins option list - configured neutron_lbaas.conf to include "service_provider=LOADBALANCERV2:Haproxy:neutron_lbaas.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver:default" - modified /etc/init/neutron-lbaasv2-agent.conf to include "--config=/etc/neutron/metadata_agent.ini" - modified lbaas_agent.ini to include - corrert "device_driver = neutron_lbaas.services.loadbalancer.drivers.haproxy.namespace_driver.HaproxyNSDriver" - correct "interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver" - restarted neutron-server and neutron-lbaasv2-agent services but now, I'm getting this message, which is to hard for me: ERROR neutron ProgrammingError: (_mysql_exceptions.ProgrammingError) (1146, "Table 'neutron.lbaas_loadbalancers' doesn't exist") Any ideas? Thanks in advance. J ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org <mailto:openstack@lists.openstack.org> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack -- Shake Chen ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] LBaasv2 in Mirantis Openstack 8.0
Hi, is it possible to enable LBaaSv2 in MOS8.0 (based on Liberty)? after a fuel deployment, i have: - installed neutron-lbaasv2-agent package (with apt) on each controller, - configured neutron.conf adding neutron_lbaas.services.loadbalancer.plugin.LoadBalancerPluginv2 to service_plugins option list - configured neutron_lbaas.conf to include "service_provider=LOADBALANCERV2:Haproxy:neutron_lbaas.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver:default" - modified /etc/init/neutron-lbaasv2-agent.conf to include "--config=/etc/neutron/metadata_agent.ini" - modified lbaas_agent.ini to include - corrert "device_driver = neutron_lbaas.services.loadbalancer.drivers.haproxy.namespace_driver.HaproxyNSDriver" - correct "interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver" - restarted neutron-server and neutron-lbaasv2-agent services but now, I'm getting this message, which is to hard for me: ERROR neutron ProgrammingError: (_mysql_exceptions.ProgrammingError) (1146, "Table 'neutron.lbaas_loadbalancers' doesn't exist") Any ideas? Thanks in advance. J ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
[Openstack] Liberty + DVR and LBaasv2
Hello, would you happen to know whether LBaasv2 (Octavia/Haproxy) is compatible with Distributed Routing (DVR) in Liberty release? Maturity? thanks in advance! J. ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
