[openstack-dev] rating talks (and keynotes) at the OpenStack summit

2015-05-20 Thread Amrith Kumar
I attended a talk by Mark Baker today (http://sched.co/2qbJ) entitled The 
OpenStack Summit Talk Selection Process is Broken and I think it was an 
informative session.

The statistics presented indicated that just under a third of the talks 
submitted got accepted at this summit and that is a very healthy ratio and 
that's a great thing.

One thing that was brought up at the talk was that there was no formal feedback 
mechanism about talks and keynotes at Summit. Is there any way in which we can 
get a feedback mechanism for the talks and sessions at this summit up and 
running? It would be a valuable piece of information if we could get it.

Any thoughts on how this can be done? There were 296 sessions; we obviously 
know the names of the sessions and the speakers. Does our scheduling mechanism 
have a 'ratings module' that can be turned on? Is there some other quick and 
dirty mechanism we can use?

It would be awesome if we could quickly get something in place before we all 
leave Vancouver so we can gather this information and it could serve as a 
valuable form of input for future selection committees.

Thanks,

-amrith

P.S. I gave a talk and if there's no formal mechanism for feedback I welcome 
email on the subject. The talk was about Trove and replication with MySQL on 
Monday evening.
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Neutron] We will have two service chaining feature development design meetings during the Summit

2015-05-20 Thread Cathy Zhang
Hi Everyone,

I got emails asking for the date of the meeting. Sorry that I forgot to mention 
the date of the Neutron work session that we can use for Neutron service chain 
feature discussion. It is at 4:10pm Thursday at room 221 and 9:30am Friday at 
room 306.

Thanks,
Cathy

From: Cathy Zhang [mailto:cathy.h.zh...@huawei.com]
Sent: 19 May 2015 06:37
To: openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org
Subject: We will have two service chaining feature development design meetings 
during the Summit

Hi everyone,

We will have two service chaining feature design meetings during this Summit. 
One at 4:10pm during the Neutron Work session at room 221, the other at 9:30am 
during Neutron Contributors Meetup at room 306.

Bring your questions and requirements, poke holes at the API proposal and 
design, let's have a good deep dive technical discussion.

Thanks,
Cathy
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Barbican] Nominating Chelsea Winfree for Barbican core

2015-05-20 Thread Douglas Mendizábal
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

+1 from me as well.

- - Douglas Mendizábal

On 5/18/15 7:38 AM, John Vrbanac wrote:
 ?+1
 
 
 John Vrbanac 
 --
- --

 
*From:* Chad Lung chad.l...@gmail.com
 *Sent:* Sunday, May 17, 2015 6:34 PM *To:*
 openstack-dev@lists.openstack.org *Subject:* [openstack-dev]
 [Barbican] Nominating Chelsea Winfree for Barbican core
 
 Hi all,
 
 I'd like to nominate Chelsea Winfree for the Barbican core review
 team.
 
 Chelsea has been active in Barbican as a regular contributor of
 code and helping always needed documentation. 
 http://stackalytics.com/?user_id=chelsea-winfreerelease=all
 
 As a reminder to barbican-core members we use the voting process
 outlined in https://wiki.openstack.org/wiki/Barbican/CoreTeam to
 add members to our team.
 
 Thanks,
 
 Chad Lung EMC Cloud Services
 
 
 
 
 __


 
OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribe 
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
 
-BEGIN PGP SIGNATURE-
Comment: GPGTools - https://gpgtools.org
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=Qaep
-END PGP SIGNATURE-

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [puppet] Re: Puppet-OpenStack API providers - Follow up

2015-05-20 Thread Gilles Dubreuil
Hi,

Just wanted to add, for clarification, the need to restructure the
openstacklib.

The use of resource[:auth] parameter is causing the providers to behave
differently depending on the context, as expressed earlier in this thread.

I would to highlight the fact that this change is driven by design.
Therefore the need for a fix, sooner than later, especially at a time of
the entire stack of provider to shift to Keystone V3. And this is
actually a critical time because of patches waiting upon this structural
change.

The bp/auth-consolidation (sorry for the *bad* name) patches show
authentication doesn't have to be using parameters, the latter was a
mistake from a types/providers suitability viewpoint.

The restructure (bp/auth-consolidation) is not only working but also
simplifies the code which is going to make the development/maintenance
of types/providers faster.

If anyone has issues/questions with this please speak up!

Thank you,
Gilles

On 07/05/15 11:50, Gilles Dubreuil wrote:
 
 
 On 07/05/15 11:33, Colleen Murphy wrote:


 On Wed, May 6, 2015 at 6:26 PM, Gilles Dubreuil gil...@redhat.com
 mailto:gil...@redhat.com wrote:

 It seems ~/.openrc is the only default [...]

 The extras module places it at '/root/openrc' [1], so either the extras
 module should be changed or the providers should look in /root/openrc,
 either way it should be consistent.

 
 Agreed.
 
 Let's use ~/openrc for now then.
 
 Colleen

 [1] 
 http://git.openstack.org/cgit/stackforge/puppet-openstack_extras/tree/manifests/auth_file.pp#n86


 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

 
 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
 

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] rating talks (and keynotes) at the OpenStack summit

2015-05-20 Thread John Griffith
On Tue, May 19, 2015 at 11:45 PM, Amrith Kumar amr...@tesora.com wrote:

  I attended a talk by Mark Baker today (http://sched.co/2qbJ) entitled
 “The OpenStack Summit Talk Selection Process is Broken” and I think it was
 an informative session.



 The statistics presented indicated that just under a third of the talks
 submitted got accepted at this summit and that is a very healthy ratio and
 that’s a great thing.



 One thing that was brought up at the talk was that there was no formal
 feedback mechanism about talks and keynotes at Summit. Is there any way in
 which we can get a feedback mechanism for the talks and sessions at this
 summit up and running? It would be a valuable piece of information if we
 could get it.



 Any thoughts on how this can be done? There were 296 sessions; we
 obviously know the names of the sessions and the speakers. Does our
 scheduling mechanism have a ‘ratings module’ that can be turned on? Is
 there some other quick and dirty mechanism we can use?



 It would be awesome if we could quickly get something in place before we
 all leave Vancouver so we can gather this information and it could serve as
 a valuable form of input for future selection committees.



 Thanks,



 -amrith



 P.S. I gave a talk and if there’s no formal mechanism for feedback I
 welcome email on the subject. The talk was about Trove and replication with
 MySQL on Monday evening.

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


​Hi Amrith,

I think this is a great point, there's always informal conversations and
mixed reviews on talks, but it would be really great if we could formalize
this, and use it to aid in the process of choosing talks for the next
summit.

Of course the key is participation and some why of trying to make sure we
actually get info submitted by people that attended the talk.

Anyway, I think it's a great idea and certainly worth looking at possibly
doing for the summit in Tokyo.

Thanks,
John​
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [nova][glance] Format of 'locations' data in image metadata ?

2015-05-20 Thread Daniel P. Berrange
On Wed, May 20, 2015 at 05:43:07PM +0800, Zhi Yan Liu wrote:
 On Wed, May 20, 2015 at 5:23 PM, Zhi Yan Liu lzy@gmail.com wrote:
  On Wed, May 20, 2015 at 5:06 PM, Daniel P. Berrange berra...@redhat.com 
  wrote:
  On Wed, May 20, 2015 at 12:01:37AM +0200, Flavio Percoco wrote:
  On 19/05/15 17:19 +0100, Daniel P. Berrange wrote:
  In Nova we are attempting to model[1] the glance image metadata and
  properties using the Nova object model (now oslo.versionedobjects).
  
  The one item I'm stuck on understanding is the 'locations' field
  and more specifically the 'metadata' element in each location
  entry
  
  
  In the file glance/api/v2/images.py I can see this description
  of the data format:
  
 'locations': {
 'type': 'array',
 'items': {
 'type': 'object',
 'properties': {
 'url': {
 'type': 'string',
 'maxLength': 255,
 },
 'metadata': {
 'type': 'object',
 },
 },
 'required': ['url', 'metadata'],
 },
 'description': _('A set of URLs to access the image file kept 
   in '
  'external store'),
  
  
  As you can see here, 'metadata' is just said to be of type 'object'.
  
  Is there somewhere that actually describes what is valid contents
  for this field ? Is it sufficient to assume the metadata will only
  ever be a dict of strings, or can the metadata be a complex type
  with arbitrarily nested data structures ?
 
  It's just arbitrary metadata for now, we don't have a specific format.
  I'm curious to know if there are folks using this field. We do (did)
  have a use case for it.
 
  Yep, I'd be curious to understand just what it is used for in practice ?
  Is the data to be stored in there determined by python code, or by the
  local administrator or both ?
 
  Yes, It determined by python code in nova as a part of image download
  plugin, and administrator needs to prepare it based on particular
  deployment environment as well. Current a usage is to accelerate image
  download from nfs store to nova compute node, now there is only one
  particular plugin in nova upstream tree [0]. (from the logic in
  _file_system_lookup(), i think a predefined 'id' is needed in the
  metadata of the location entry).
 
  [0] 
  https://github.com/openstack/nova/blob/master/nova/image/download/file.py#L150
 
  zhiyan
 
 Btw, for your question:
 
  Is there somewhere that actually describes what is valid contents
  for this field ? Is it sufficient to assume the metadata will only
  ever be a dict of strings, or can the metadata be a complex type
  with arbitrarily nested data structures ?
 
 for current nova in-tree image download plugin (above [0]), the schema
 of location metadata should be this:
 https://github.com/openstack/glance_store/blob/master/glance_store/_drivers/filesystem.py#L72
 
 zhiyan

Thankyou, that is useful information.


Regards,
Daniel
-- 
|: http://berrange.com  -o-http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org  -o- http://virt-manager.org :|
|: http://autobuild.org   -o- http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org   -o-   http://live.gnome.org/gtk-vnc :|

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Neutron][Magnum] Container + OpenStack Integration

2015-05-20 Thread Adrian Otto
Magnum and Neutron Teams,

If you are in Vancouver today and can help design or implement native 
networking support to obviate the need for overlay networks when using 
containers, please join this design session:

http://sched.co/3CjK (3:30 PM, Room 303)

This will be based on feedback gathered at the Fishbowl session earlier in the 
day: http://sched.co/3B0z (11:00 AM, Room 306)

Thanks,

Adrian
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [neutron] What is a best way to find calls to Neutron API in OVS

2015-05-20 Thread Leo Y
Hello,

Sorry for newbie question. I'm trying to identify all invocations of
neutron API in OVS [1] and get lost. What is a best practice to find in
code all neutron API calls regardless of the method they are done.
I'll appreciate if anyone can reference me to documentation that describes
ways to invoke neutron API calls.



[1]
https://github.com/openstack/neutron/tree/master/neutron/plugins/openvswitch

-- 
Regards,
LeoY
-
I enjoy the massacre of ads. This sentence will slaughter ads without a
messy bloodbath
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [nova][cinder][libvirt] Serious problem of block migration of a hybrid instance (instance based on local disk and cinder volume attached)

2015-05-20 Thread Luo Gangyi
Hi devs,


I find a serious problem when I try to live migrate a hybrid instance (instance 
based on local disk and cinder volume attached) .


In current nova, such operation is allowed.


But I don't think libvirt can deal with such condition correctly.


When block migration of a hybird intance is triggered, nova will initiate a new 
connection to the volume in destination compute node and then
call libvirt to do the block migration.


However, libvirt doesn't distinguish local disk and a network volume, it may 
copy both local disk and cinder volume from source to destination.


It is dangerous  to write the same volume simutaneously on source and 
destination!! and apparently there is no need to do this!




I believe we should do something to correct this, maybe patch libvirt? or just 
forbid user do such operation?


--
Luo Gangyi__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Cinder] Do we have weekly meeting today ?

2015-05-20 Thread Deepak Shetty
Given folks are at the summit, is this mtg happening today ?
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [nova][cinder][libvirt] Serious problem of block migration of a hybrid instance (instance based on local disk and cinder volume attached)

2015-05-20 Thread Daniel P. Berrange
On Wed, May 20, 2015 at 06:11:26PM +0800, Luo Gangyi wrote:
 Hi devs,
 
 
 I find a serious problem when I try to live migrate a hybrid instance
 (instance based on local disk and cinder volume attached) .
 
 
 In current nova, such operation is allowed.
 
 
 But I don't think libvirt can deal with such condition correctly.
 
 
 When block migration of a hybird intance is triggered, nova will initiate
 a new connection to the volume in destination compute node and then
 call libvirt to do the block migration.
 
 However, libvirt doesn't distinguish local disk and a network volume,
 it may copy both local disk and cinder volume from source to destination.
 
 It is dangerous  to write the same volume simutaneously on source and
 destination!! and apparently there is no need to do this!
 
 I believe we should do something to correct this, maybe patch libvirt?
 or just forbid user do such operation?

Both. Nova now forbids this

commit d667b6a63e80b2f8d6311c2cf224ba32628eed84
Author: Chris St. Pierre stpie...@metacloud.com
Date:   Wed Dec 3 16:16:34 2014 -0600

libvirt: Fail when live block migrating instance with volumes

This raises an exception when attempting to live block migrate (nova
live-migration --block-migrate) an instance with attached volumes.
libvirt copies these volumes from themselves to themselves. At a
minimum, this is horribly slow and de-sparses a sparse volume; at
worst, this could cause massive data corruption.

Closes-Bug: 1398999
Change-Id: Ibcd423976bb9fea46e3e1cb23cc8e5cd944d8fc2

And work is being done to allow libvirt to be told to skip cinder
volumes when migrating:

  https://www.redhat.com/archives/libvir-list/2015-May/msg00345.html

Regards,
Daniel
-- 
|: http://berrange.com  -o-http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org  -o- http://virt-manager.org :|
|: http://autobuild.org   -o- http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org   -o-   http://live.gnome.org/gtk-vnc :|

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Fuel] 6.1 HCF delayed, release date to be revised

2015-05-20 Thread Eugene Bogdanov

Hello everyone,

Our HCF milestone date was on May 12th, but unfortunately the amount of 
bugs at this point still does not meet HCF criteria [1]. Our current 
plan is the following:


1. Close the remaining high and critical bugs that fall to HCF criteria. 
Creating filter for these bugs with Launchpad means is tricky, so I am 
just publishing the list of bugs below [2]
2. Achieve at least 70% of passes in automated tests coverage (current 
numbers are 61% for Ubuntu and 42% for CentOS).


We hope to complete these action items by May 22th.

We will revise GA date estimations once we hit the HCF goals. If the GA 
date is changed, I'll send an update.


I realize that I should have sent this earlier, I apologize for the 
delay with communication.


--
EugeneB

[1] Hard Code Freeze criteria: 
https://wiki.openstack.org/wiki/Fuel/Hard_Code_Freeze


[2] List of bugs left to be fixed (valid on May 20th, more bugs can be 
added later on if discovered).


https://bugs.launchpad.net/fuel/+bug/1439686
https://bugs.launchpad.net/fuel/+bug/1456325
https://bugs.launchpad.net/fuel/+bug/1455048
https://bugs.launchpad.net/fuel/+bug/1454763
https://bugs.launchpad.net/fuel/+bug/1455660
https://bugs.launchpad.net/fuel/+bug/1456191
https://bugs.launchpad.net/fuel/+bug/1443925
https://bugs.launchpad.net/fuel/+bug/1454741
https://bugs.launchpad.net/fuel/+bug/1455390
https://bugs.launchpad.net/fuel/+bug/1455539
https://bugs.launchpad.net/fuel/+bug/1456276
https://bugs.launchpad.net/fuel/+bug/1456587
https://bugs.launchpad.net/fuel/+bug/1456634
https://bugs.launchpad.net/fuel/6.1.x/+bug/1441435
https://bugs.launchpad.net/fuel/+bug/1443913
https://bugs.launchpad.net/fuel/+bug/1455661
https://bugs.launchpad.net/fuel/+bug/1456540
https://bugs.launchpad.net/fuel/+bug/1456630
https://bugs.launchpad.net/fuel/+bug/1456791
https://bugs.launchpad.net/fuel/+bug/1456491
https://bugs.launchpad.net/mos/6.1.x/+bug/1422350
https://bugs.launchpad.net/mos/6.1.x/+bug/1456243
https://bugs.launchpad.net/fuel/+bug/1455513
https://bugs.launchpad.net/fuel/+bug/1455923
https://bugs.launchpad.net/fuel/+bug/1456459
https://bugs.launchpad.net/fuel/+bug/1456605
https://bugs.launchpad.net/fuel/+bug/1456746
https://bugs.launchpad.net/fuel/+bug/1456526
https://bugs.launchpad.net/fuel/+bug/1449977
https://bugs.launchpad.net/fuel/+bug/1456805








__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [nova][glance] Format of 'locations' data in image metadata ?

2015-05-20 Thread Daniel P. Berrange
On Wed, May 20, 2015 at 12:01:37AM +0200, Flavio Percoco wrote:
 On 19/05/15 17:19 +0100, Daniel P. Berrange wrote:
 In Nova we are attempting to model[1] the glance image metadata and
 properties using the Nova object model (now oslo.versionedobjects).
 
 The one item I'm stuck on understanding is the 'locations' field
 and more specifically the 'metadata' element in each location
 entry
 
 
 In the file glance/api/v2/images.py I can see this description
 of the data format:
 
'locations': {
'type': 'array',
'items': {
'type': 'object',
'properties': {
'url': {
'type': 'string',
'maxLength': 255,
},
'metadata': {
'type': 'object',
},
},
'required': ['url', 'metadata'],
},
'description': _('A set of URLs to access the image file kept in '
 'external store'),
 
 
 As you can see here, 'metadata' is just said to be of type 'object'.
 
 Is there somewhere that actually describes what is valid contents
 for this field ? Is it sufficient to assume the metadata will only
 ever be a dict of strings, or can the metadata be a complex type
 with arbitrarily nested data structures ?
 
 It's just arbitrary metadata for now, we don't have a specific format.
 I'm curious to know if there are folks using this field. We do (did)
 have a use case for it.

Yep, I'd be curious to understand just what it is used for in practice ?
Is the data to be stored in there determined by python code, or by the
local administrator or both ?


Regards,
Daniel
-- 
|: http://berrange.com  -o-http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org  -o- http://virt-manager.org :|
|: http://autobuild.org   -o- http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org   -o-   http://live.gnome.org/gtk-vnc :|

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [nova][glance] Format of 'locations' data in image metadata ?

2015-05-20 Thread Zhi Yan Liu
On Wed, May 20, 2015 at 5:06 PM, Daniel P. Berrange berra...@redhat.com wrote:
 On Wed, May 20, 2015 at 12:01:37AM +0200, Flavio Percoco wrote:
 On 19/05/15 17:19 +0100, Daniel P. Berrange wrote:
 In Nova we are attempting to model[1] the glance image metadata and
 properties using the Nova object model (now oslo.versionedobjects).
 
 The one item I'm stuck on understanding is the 'locations' field
 and more specifically the 'metadata' element in each location
 entry
 
 
 In the file glance/api/v2/images.py I can see this description
 of the data format:
 
'locations': {
'type': 'array',
'items': {
'type': 'object',
'properties': {
'url': {
'type': 'string',
'maxLength': 255,
},
'metadata': {
'type': 'object',
},
},
'required': ['url', 'metadata'],
},
'description': _('A set of URLs to access the image file kept in 
  '
 'external store'),
 
 
 As you can see here, 'metadata' is just said to be of type 'object'.
 
 Is there somewhere that actually describes what is valid contents
 for this field ? Is it sufficient to assume the metadata will only
 ever be a dict of strings, or can the metadata be a complex type
 with arbitrarily nested data structures ?

 It's just arbitrary metadata for now, we don't have a specific format.
 I'm curious to know if there are folks using this field. We do (did)
 have a use case for it.

 Yep, I'd be curious to understand just what it is used for in practice ?
 Is the data to be stored in there determined by python code, or by the
 local administrator or both ?


 Regards,
 Daniel
 --
 |: http://berrange.com  -o-http://www.flickr.com/photos/dberrange/ :|
 |: http://libvirt.org  -o- http://virt-manager.org :|
 |: http://autobuild.org   -o- http://search.cpan.org/~danberr/ :|
 |: http://entangle-photo.org   -o-   http://live.gnome.org/gtk-vnc :|

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Yes, It determined by python code in nova as a part of image download
plugin, and administrator needs to prepare it based on particular
deployment environment as well. Current a usage is to accelerate image
download from nfs store to nova compute node, now there is only one
particular plugin in nova upstream tree [0]. (from the logic in
_file_system_lookup(), i think a predefined 'id' is needed in the
metadata of the location entry).

[0] 
https://github.com/openstack/nova/blob/master/nova/image/download/file.py#L150

zhiyan

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [nova][glance] Format of 'locations' data in image metadata ?

2015-05-20 Thread Zhi Yan Liu
On Wed, May 20, 2015 at 5:23 PM, Zhi Yan Liu lzy@gmail.com wrote:
 On Wed, May 20, 2015 at 5:06 PM, Daniel P. Berrange berra...@redhat.com 
 wrote:
 On Wed, May 20, 2015 at 12:01:37AM +0200, Flavio Percoco wrote:
 On 19/05/15 17:19 +0100, Daniel P. Berrange wrote:
 In Nova we are attempting to model[1] the glance image metadata and
 properties using the Nova object model (now oslo.versionedobjects).
 
 The one item I'm stuck on understanding is the 'locations' field
 and more specifically the 'metadata' element in each location
 entry
 
 
 In the file glance/api/v2/images.py I can see this description
 of the data format:
 
'locations': {
'type': 'array',
'items': {
'type': 'object',
'properties': {
'url': {
'type': 'string',
'maxLength': 255,
},
'metadata': {
'type': 'object',
},
},
'required': ['url', 'metadata'],
},
'description': _('A set of URLs to access the image file kept 
  in '
 'external store'),
 
 
 As you can see here, 'metadata' is just said to be of type 'object'.
 
 Is there somewhere that actually describes what is valid contents
 for this field ? Is it sufficient to assume the metadata will only
 ever be a dict of strings, or can the metadata be a complex type
 with arbitrarily nested data structures ?

 It's just arbitrary metadata for now, we don't have a specific format.
 I'm curious to know if there are folks using this field. We do (did)
 have a use case for it.

 Yep, I'd be curious to understand just what it is used for in practice ?
 Is the data to be stored in there determined by python code, or by the
 local administrator or both ?


 Regards,
 Daniel
 --
 |: http://berrange.com  -o-http://www.flickr.com/photos/dberrange/ :|
 |: http://libvirt.org  -o- http://virt-manager.org :|
 |: http://autobuild.org   -o- http://search.cpan.org/~danberr/ :|
 |: http://entangle-photo.org   -o-   http://live.gnome.org/gtk-vnc :|

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


 Yes, It determined by python code in nova as a part of image download
 plugin, and administrator needs to prepare it based on particular
 deployment environment as well. Current a usage is to accelerate image
 download from nfs store to nova compute node, now there is only one
 particular plugin in nova upstream tree [0]. (from the logic in
 _file_system_lookup(), i think a predefined 'id' is needed in the
 metadata of the location entry).

 [0] 
 https://github.com/openstack/nova/blob/master/nova/image/download/file.py#L150

 zhiyan

Btw, for your question:

 Is there somewhere that actually describes what is valid contents
 for this field ? Is it sufficient to assume the metadata will only
 ever be a dict of strings, or can the metadata be a complex type
 with arbitrarily nested data structures ?

for current nova in-tree image download plugin (above [0]), the schema
of location metadata should be this:
https://github.com/openstack/glance_store/blob/master/glance_store/_drivers/filesystem.py#L72

zhiyan

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [heat] Can't make it to the summit.

2015-05-20 Thread Anant Patil
Hi,

Due to some visa issues, my travel to Vancouver summit is canceled.

I will miss meeting the Heat team and the planned session on convergence
phase 2. Kanagaraj M has some context on the phase 2 plans and he should
be able to drive it. Hope you will have a good discussion.

- Anant

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [oslo] needed, driver for oslo.db thursday session

2015-05-20 Thread Davanum Srinivas
Thanks Jeremy,

Mike, Roman, Victor, Please see remote connection details in:
https://etherpad.openstack.org/p/YVR-oslo-db-plans

The schedule time for the session is in:
https://libertydesignsummit.sched.org/event/3571aa54b364c62e097da8cd32d97258

Hope you can make it :) yes, please pick one of the 2 choices there
(either sip or google hangout) and drop a note in the etherpad which
one you want me to connect to

thanks,
dims


On Tue, May 19, 2015 at 10:17 AM, Jeremy Stanley fu...@yuggoth.org wrote:
 On 2015-05-19 09:06:56 -0700 (-0700), Davanum Srinivas wrote:
 Ouch. Thanks for the heads up Roman

 We have https://wiki.openstack.org/wiki/Infrastructure/Conferencing
 which we used yesterday to successfully bridge Clark B. into an I18n
 tooling session via Jitsi over the normal conference wireless
 network with the built-in mic/speaker in Jim's laptop. Feel free to
 use it in your sessions, just try to pick a random conference number
 between 6000 and 7999 so nobody steps on the toes of other sessions
 which might be using it (maybe add your conference room number to
 6000 or something?). Let me or other Infra people know if you have
 any questions about or trouble using it!
 --
 Jeremy Stanley

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



-- 
Davanum Srinivas :: https://twitter.com/dims

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Manila] Question to driver maintainers

2015-05-20 Thread Silvan Kaiser
Hello Igor,
share extending works without interruption in Quobyte storage.
Best regards
Silvan


2015-05-18 10:15 GMT+02:00 Igor Malinovskiy imalinovs...@mirantis.com:

 Hello, everyone!

 My letter is mainly addressed to driver maintainers, but could be
 interesting to everybody.

 As you probably know, on Kilo midcycle meetup we discussed share resize
 functionality (extend and shrink) and I already have implemented 'extend'
 API in Generic driver (https://review.openstack.org/182383/). After
 implementation review we

 noticed that some backends are able to resize a share without causing
 disruptions, but others might only be able to do it disruptively (Generic
 driver case).

 So I want to ask driver maintainers here:

 Will your driver be able to do share extending without loss of
 connectivity?

 Depending on your answers, we will handle this situation differently.

 Best regards,

 Igor Malinovskiy (IRC: u_glide)
 Manila Core Team

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




-- 
Dr. Silvan Kaiser
Quobyte GmbH
Boyenstr. 41 - 10115 Berlin-Mitte - Germany
+49-30-814 591 800 - www.quobyte.comhttp://www.quobyte.com/
Amtsgericht Berlin-Charlottenburg, HRB 149012B
Management board: Dr. Felix Hupfeld, Dr. Björn Kolbeck, Dr. Jan Stender

-- 

--
*Quobyte* GmbH
Hardenbergplatz 2 - 10623 Berlin - Germany
+49-30-814 591 800 - www.quobyte.com
Amtsgericht Berlin-Charlottenburg, HRB 149012B
management board: Dr. Felix Hupfeld, Dr. Björn Kolbeck, Dr. Jan Stender
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [App-Catalog] Planning/working session Wednesday in Vancouver

2015-05-20 Thread Christopher Aedo
[Cross-posting to both dev and operators list because I believe this
is important to both groups]

For those of us who have been working on the OpenStack Community App
Catalog (http://apps.openstack.org) yesterday was really exciting.  We
had a chance to do a quick demo and walk through during they keynote,
followed by a longer talk in the afternoon (slides here:
http://www.slideshare.net/aedocw/openstack-community-app-catalog-httpappsopenstackorg)

The wiki page with more details is here:
https://wiki.openstack.org/wiki/App-Catalog

If you are in Vancouver and are interested in helping improve the
Community App Catalog please join us for this working session:

http://sched.co/3Rk4 (11:50 room 116/117)
Etherpad: https://etherpad.openstack.org/YVR-app-catalog-plans

If you can't join the session but have ideas or thoughts you would
like to see discussed please add them to the etherpad.  I've put down
a few of the ideas that have come up so far, but it's definitely not a
comprehensive list.

We got really great feedback yesterday afternoon and found a lot of
people are interested in contributing to the catalog and working
together to add improvements.  Hopefully you can join us today!

-Christopher

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [trove][zaqar] Trove and Zaqar integration. Summit working session

2015-05-20 Thread Georgy Okrokvertskhov
Hi,

What is the final decision about this discussion? When will it happen?

thanks
Gosha

On Thu, May 14, 2015 at 3:49 PM, Douglas Mendizábal 
douglas.mendiza...@rackspace.com wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 I'm very much interested in talking with some Keystone folks about
 this auth issue.  I would be willing to dedicate a Barbican Working
 Session to this discussion if there is a time slot that works for all
 the interested parties.

 - - Douglas Mendizabal

 On 5/14/15 3:13 PM, Fox, Kevin M wrote:
  If there's a free session, can we dedicate a session specifically
  to the zaqar, barbican, sahara, heat, trove, guestagent, keystone
  auth thingy so everyone's all together?
 
  Thanks, Kevin  From: Flavio
  Percoco [fla...@redhat.com] Sent: Thursday, May 14, 2015 12:15 PM
  To: Sergey Lukjanov Cc: OpenStack Development Mailing List (not for
  usage questions) Subject: Re: [openstack-dev] [trove][zaqar] Trove
  and Zaqar integration. Summit working session
 
  On 14/05/15 10:07 -0700, Sergey Lukjanov wrote:
  Hey,
 
  in Sahara we're looking on using Zaqar as a transport for agent
  some day as well. Unfortunately this section overlaps with Sahara
  sessions.
 
  Sergey,
 
  We still have some free sessions, we'd be happy to dedicate one to
  Sahara. Any slot that looks good for you?
 
  http://libertydesignsummit.sched.org/overview/type/design+summit/Zaqar
 #.VVT0CvYU9hE
 
   Thanks, Flavio
 
 
  On Thu, May 14, 2015 at 12:19 AM, Flavio Percoco
  fla...@redhat.com wrote:
 
  On 13/05/15 18:06 +, Fox, Kevin M wrote:
 
  Sahara also has the same problem, but worse, since they currently
  only support ssh with their agent, so its either assign floating
  ip's to all nodes, or your sahara controller must be on your one
  and only network node so it can tunnel. :/
 
  Should we have a chat with them too?
 
 
  We've scheduled a discussion with Trove's team on Thursday at
  5pm. It'd be great to have this discussion once and together to
  know what the common issues are and what things need to be done.
 
  I'll ping folks from both teams to invite them to this session.
  If they can't make it, I'm happy to use another working session
  slot.
 
  Cheers, Flavio
 
  http://libertydesignsummit.sched.org/event/59dc6ec910a732cdbf5970b679
 2e1cef
 
 
 #.VVRL0PYU9hE
 
 
 
 
  Thanks, Kevin  From: Zane
  Bitter [zbit...@redhat.com] Sent: Wednesday, May 13, 2015 10:26
  AM To: openstack-dev@lists.openstack.org Subject: Re:
  [openstack-dev] [trove][zaqar] Trove and Zaqar integration.
  Summit working session
 
  On 11/05/15 05:49, Flavio Percoco wrote:
 
  On 08/05/15 00:45 -0700, Nikhil Manchanda wrote:
 
  3)  The trove-guest-agent is in vm. it is connected by
  taskmanager by rabbitmq. We designed it. But is there some
  prectise to do this? how to make the vm be connected in
  vm-network and management network?
 
 
  Most deployments of Trove that I am familiar with set up a
  separate RabbitMQ server in cloud that is used by Trove. It is
  not recommended to use the same infrastructure RabbitMQ server
  for Trove for security reasons. Also most deployments of Trove
  set up a private (neutron) network that the RabbitMQ server and
  guests are connected to, and all RPC messages are sent over this
  network.
 
 
  We've discussed trove+zaqar in the past and I believe some folks
  from the Trove team have been in contact with Fei Long lately
  about this. Since one of the projects goal's for this cycle is to
  provide support to other projects and contribute to the adoption,
  I'm wondering if any of the members of the trove team would be
  willing to participate in a Zaqar working session completely
  dedicated to this integration?
 
 
  +1
 
  I learned from a concurrent thread ([Murano] [Mistral] SSH
  workflow action) that Murano are doing exactly the same thing
  with a separate RabbitMQ server to communicate with guest agents.
  It's a real waste of energy when multiple OpenStack projects all
  have to solve the same problem from scratch, so a single answer
  to this would be great.
 
  In that thread I suggested (and Murano developers agreed with)
  making the transport pluggable so that operators could choose
  Zaqar instead. I would strongly support doing the same here.
 
 
  +1 :)
 
  Flavio
 
 
 
 
  cheers, Zane.
 
 
  It'd be a great opportunity to figure out what's really needed,
  edge cases and get some work done on this specific case.
 
  Thanks, Flavio
 
 
 
  _
 _
 
 
 OpenStack Development Mailing List (not for usage questions)
  Unsubscribe: openstack-dev-requ...@lists.openstack.org?
  subject:unsubscribe
  http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
 
 
 
 
 
 
 
 __
  OpenStack Development Mailing List (not for usage 

Re: [openstack-dev] [neutron][vpnaas] Supporting multiple local subnets for VPN connections

2015-05-20 Thread Mathieu Rohon
However after thinking about it more deeply, option A might be suitable if
the vpn-service becomes more generic, and usable by other vpn objects
(ipsec-site-connection, bgpvpn-connection).
I would become an object that the tenant can update to attach CIDR it wants
to export in its VPN.
To transform the vpn-service object in a generic vpn description, we need
to remove the mandatory ROUTER attribute, so that we can use it for l2vpn
either.

Hope we can discuss that on friday morning

On Wed, May 20, 2015 at 5:12 PM, Paul Michali p...@michali.net wrote:

 Hi Mathieu,

 In Kilo, VPNaaS APIs were no longer marked as experimental. We need to
 understand the implication of changing the API. I'm not sure how much
 VPNaaS is being used by OpenStack users at this time, either.  I'm hoping
 to seek out answers to this at the summit.

 If anyone has suggestions, comments, information on this, please chime in. 
 I'll
 likely make a BP for multiple subnets, when I get back from the summit.

 Lastly, I'm planning on trying to get people interested in VPN to meet on
 Friday morning at the summit to discuss all the VPN topics that have been
 coming up.

 Regards,

 Paul Michali (pc_m)

 On Wed, May 20, 2015 at 7:54 AM Mathieu Rohon mathieu.ro...@gmail.com
 wrote:

 Hi paul,

 this is also something that we would like to introduce for BGP/MPLS VPNs
 [2].

 We choose to allow tenants to attach existing networks ( it might evolve
 to subnets) to bgpvpn-connection objects, by updating the bgpvpn-connection
 object, which is the equivalent of the ipsec-site-connection object.

 So I think that Option B is suitable here.

 Concerning backward compatibility, I think VPNaas is still considered as
 experimental, am I wrong? Do you have to provide backward compatbility in
 this case?

 Mathieu

 [2] https://review.openstack.org/#/c/177740/

 On Wed, May 13, 2015 at 8:59 PM, Paul Michali p...@michali.net wrote:

 Hi,

 There has been, over the years, some mention about having VPN IPSec
 connections supporting multiple CIDRs for local (left side) private
 networks, in addition to the current support for multiple peer CIDRs (right
 side).

 I'm raising the question again with these goals:

 1) Determine if the reference IPSec implementations support this
 capability
 2) Determine if there is a community desire to enhance VPN to support
 this capability (for all VPN types)
 3) See what would be the best way to handle this (changes to API and
 model)
 4) Identify any consequences of making this change.

 Note: My assumption here is something that could be used for any type of
 VPN connection - current IPSec, future BGP/MPLS VPN, DM VPN, etc.

 Here is some information that was gathered from people on the VPN team
 so far. Please correct any inaccuracies and comment on the items...

 (1) It looks like OpenSwan and Libreswan will support this capability.
 StrongSwan will support this with IKEv2. For IKEv1, a Cisco Unity plugin
 extensions is needed. I'm not sure what that implies [1].

 (2) Do we, as a community, want to enhance VPNaaS to provide this
 capability of N:M subnets for VPN implementations? Putting on my vendor
 hat, I can see cases where customers want to be able to only create one
 connection and reference multiple subnets on each end. Is there a desire to
 do this and bake it into the reference implementation (thus making it
 available for other implementations)?

 (3) Currently, the vpn service API includes the router and subnet ID.
 The IPSec connection command includes the peer CIDR(s). For reference, here
 are two of the APIs:

 usage: neutron vpn-service-create [-h] [-f
 {html,json,shell,table,value,yaml}]
   [-c COLUMN] [--max-width integer]
   [--prefix PREFIX]
   [--request-format {json,xml}]
   [--tenant-id TENANT_ID]
 [--admin-state-down]
   [--name NAME] [--description
 DESCRIPTION]
   ROUTER SUBNET

 usage: neutron ipsec-site-connection-create [-h]
 [-f
 {html,json,shell,table,value,yaml}]
 [-c COLUMN]
 [--max-width integer]
 [--prefix PREFIX]
 [--request-format {json,xml}]
 [--tenant-id TENANT_ID]
 [--admin-state-down] [--name
 NAME]
 [--description DESCRIPTION]
 [--mtu MTU]
 [--initiator
 {bi-directional,response-only}]
 [--dpd
 action=ACTION,interval=INTERVAL,timeout=TIMEOUT]
 --vpnservice-id 

Re: [openstack-dev] [all][oslo] disabling pypy unit test jobs for oslo

2015-05-20 Thread Robert Collins
On 11 May 2015 at 23:51, Sean Dague s...@dague.net wrote:
 It appears that we've basically run out of interest / time in
 realistically keeping pypy working in our system.

 With the focus on really getting python 3.4 working, it seems like it
 would just be better to drop pypy entirely in the system. In the last
 couple of years we've not seen any services realistically get to the
 point of being used for any of the services. And as seen by this last
 failure, pypy is apparently not keeping up with upstream tooling changes.

So pypy is useful for clients - so that folk using pypy can talk to
OpenStack. I don't have a view on the servers today - certainly the
majority of our servers are not CPU bound.

I asked for volunteers on Twitter - people that about openstack and
pypy, and got two, one of whom helped us with the current glitch -
which was all fixed by using modern virtualenv, so it was easy :).

I've put a web page together summarising my understanding of the
situation: https://wiki.openstack.org/wiki/PyPy

I think we should make the jobs voting again (checking that each one
is passing first, of course).

-Rob

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [barbican] Nominating Kaitlin Farr for barbican-core

2015-05-20 Thread Juan Antonio Osorio
+1 from my side.

On Wed, May 20, 2015 at 3:09 AM, Douglas Mendizábal 
douglas.mendiza...@rackspace.com wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 Hi All,

 I would like to nominate Kaitlin Farr for barbican-core.

 Kaitlin has been contributing to the project for a long time, both by
 contributing code to Barbican, python-barbicanclient and Castellan,
 and also by providing valuable reviews. [1]

 As a reminder to the rest of the core team, we use the process
 outlined in https://wiki.openstack.org/wiki/Barbican/CoreTeam to add
 members to the barbican-core team.

 Thanks,
 Douglas Mendizábal

 [1] http://stackalytics.com/report/contribution/barbican-group/90
 -BEGIN PGP SIGNATURE-
 Comment: GPGTools - https://gpgtools.org

 iQIcBAEBCgAGBQJVW9CgAAoJEB7Z2EQgmLX7u6kP/22G3NqsnJmKRsnw065btt8z
 /Sb7OqFa2RKuIKk88a9yehwRuunh2YCdfLmXta1+XXpucghG9dbflfFVGU4/VujX
 VG/B3yUXTBYT2kn72mtwpKk4S6mYXBPn+fpKGR7iJrifYSg55XO7a2c2m/xIC8pO
 R9+d5/8ZztxS1UbmhNuqLwBDpo9FIG+5CoWOfYPTAQ1TxB/SIs2ltk4jzLaU05yb
 5LTG3uq5K3CT+LvM3Rl6SCZ7bIiTmaTuPsXMnqqLiqhya90U63VJGGXUE1yjW11G
 Kgm7yxUV8DkcESHXEe0aW8hpLMuGKda/f83XetGN27+YpM3/G1z8N656zLX9sF3t
 oVU7dWnARn9NsByFP9ASg8BCk8iWr/mCeB/fajwXT95C+OXAicNWn5jXKowXQhQH
 v4XaFrjafROLdJocgH0mfcoEbTXZXlsKyHYtnZdwAO+T06RNd21c/lnNiG1rMYeh
 2Yl48nzxxx33YprizHDRMEhABIb11HO040+j+EHNCvbsGSJGZIZmzzbxNe2QGXkx
 q++JvMBW60pPd6pi7nEVjbjSEZhb6f6xHs13/y+nZ9NCSNkUPx1UoxKz18JRtrLi
 /XDZLv6D92Trlaxae9mpVlWTM1elYPWSm3QVMxMrSP9wtAYbUIoq0PN+WwKk/1J7
 WaeQpFjA1SdFHj5uPNZk
 =1OIW
 -END PGP SIGNATURE-

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




-- 
Juan Antonio Osorio R.
e-mail: jaosor...@gmail.com
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [keystone][nova][barbican] VM-spec discussion

2015-05-20 Thread Douglas Mendizábal
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi All,

Kevin Fox and I were wondering if there's a good time today where we
could get together with someone from Keystone and Nova to talk through
the vm-integration spec. [1]

This is the spec to be able to have credentials which are unique to
each new vm so that the vm is able to access a secret in Barbican.

Thanks,

Douglas Mendizábal

[1] https://review.openstack.org/#/c/159571/
-BEGIN PGP SIGNATURE-
Comment: GPGTools - https://gpgtools.org

iQIcBAEBCgAGBQJVXLnnAAoJEB7Z2EQgmLX73nIQAIBJNosFdyYIjhfOg5v51B82
ADZa0PCoTPW9/LWceYw2iqWCgF5CjXcUkj1t//dtjUCIRlGHFQzLAji8nlYl7KqH
lnCTjsoFmEZxbNXp+XaJkm8k20IekbOUWz+voQI8tBn4K4f5QxZqQOkmnHpjoJhE
VQOI2Gf/3F/bpR3rzLDqgxOts5c97GXJJP5oigg1lUavgnVEnWKwrGjF8RQPB54I
SQPWEuY2iHqXCIWPkbBT6+Z9ehETnRzP42ja9I3h88ye2f8OxJCh5ICKjHP2EnQv
lFbW5GVtX/NH+edoOsxeCPCZjq20bxe0im+5WIjZqAbzvcC5k0/wJvATasGSKEuf
UbypM7Lv5cSfTWEEEvZEniDC6TGEnpBzr7ummG6YANlYnC6piM6/Q9GytHPZR3f3
JBWM24vextpOb73H3HltWNxfNkeQ8FtAMlANuN1E38/Mzt59g2WtNpyTCXKURqwn
HxxvXFkejXBBFpsT4mNYk5UaJ//XVIcVUxTeTssqk+2Ci/6jl7h+WctHV9kUkm3k
z+yyw8TVFI7VtdaVETBexwgJ1e04Z+LTkqauq8xqOMNjdxrz7oZALDWDJrDMN1HW
OoYf+J/mk4Xdx2GGhkw+UJMFbcBER/EqWyA7jd/6g+hEUTFMRn0b1/bN9g26Xjw1
+YI3dIpxfd9cFOvrdVMM
=Hn3b
-END PGP SIGNATURE-

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [oslo] Inviting Robert Collins to Oslo core

2015-05-20 Thread Julien Danjou
On Wed, May 20 2015, Davanum Srinivas wrote:

 I'd like to invite Robert Collins (aka lifeless) as an Oslo core.
 Robert has been a long time contributor to a whole bunch of OpenStack
 projects and a member of our TC. Robert indicated that he can help
 across Oslo projects this cycle, so let's please welcome him. Here's
 my +1.

+1

-- 
Julien Danjou
-- Free Software hacker
-- http://julien.danjou.info


signature.asc
Description: PGP signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Nova][libvirt] Understand why we lookup libvirt domains by instance name

2015-05-20 Thread Michael Still
I note that we use instance.name to lookup the libvirt domain a bunch
in the driver. I'm wondering why we don't just use instance.uuid all
the time -- the code for that already exists. Is there a good reason
to not move to always using the uuid?

I ask because instance.name is not guaranteed to be unique depending
on how weird the nova deployment is.

Michael

-- 
Rackspace Australia

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [oslo] Inviting Robert Collins to Oslo core

2015-05-20 Thread Michael Still
I am +1 on this.

Michael

On Wed, May 20, 2015 at 2:37 PM, Julien Danjou jul...@danjou.info wrote:
 On Wed, May 20 2015, Davanum Srinivas wrote:

 I'd like to invite Robert Collins (aka lifeless) as an Oslo core.
 Robert has been a long time contributor to a whole bunch of OpenStack
 projects and a member of our TC. Robert indicated that he can help
 across Oslo projects this cycle, so let's please welcome him. Here's
 my +1.

 +1

 --
 Julien Danjou
 -- Free Software hacker
 -- http://julien.danjou.info

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




-- 
Rackspace Australia

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [trove][zaqar] Trove and Zaqar integration. Summit working session

2015-05-20 Thread Nikhil Manchanda
The session where we're planning to discuss this is at 5:00 pm on Thursday in 
Room 302.

Thanks,
Nikhil


 On May 20, 2015, at 11:09 AM, Georgy Okrokvertskhov 
 gokrokvertsk...@mirantis.com wrote:
 
 I think Sergey will present Murano team. I added him to CC as he probably 
 filters out Zaqar and Trove e-mails.
 
 Thanks
 Gosha
 
 On Wed, May 20, 2015 at 10:34 AM, Georgy Okrokvertskhov 
 gokrokvertsk...@mirantis.com wrote:
 Hi,
 
 What is the final decision about this discussion? When will it happen?
 
 thanks
 Gosha
 
 On Thu, May 14, 2015 at 3:49 PM, Douglas Mendizábal 
 douglas.mendiza...@rackspace.com wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512
 
 I'm very much interested in talking with some Keystone folks about
 this auth issue.  I would be willing to dedicate a Barbican Working
 Session to this discussion if there is a time slot that works for all
 the interested parties.
 
 - - Douglas Mendizabal
 
 On 5/14/15 3:13 PM, Fox, Kevin M wrote:
  If there's a free session, can we dedicate a session specifically
  to the zaqar, barbican, sahara, heat, trove, guestagent, keystone
  auth thingy so everyone's all together?
 
  Thanks, Kevin  From: Flavio
  Percoco [fla...@redhat.com] Sent: Thursday, May 14, 2015 12:15 PM
  To: Sergey Lukjanov Cc: OpenStack Development Mailing List (not for
  usage questions) Subject: Re: [openstack-dev] [trove][zaqar] Trove
  and Zaqar integration. Summit working session
 
  On 14/05/15 10:07 -0700, Sergey Lukjanov wrote:
  Hey,
 
  in Sahara we're looking on using Zaqar as a transport for agent
  some day as well. Unfortunately this section overlaps with Sahara
  sessions.
 
  Sergey,
 
  We still have some free sessions, we'd be happy to dedicate one to
  Sahara. Any slot that looks good for you?
 
  http://libertydesignsummit.sched.org/overview/type/design+summit/Zaqar
 #.VVT0CvYU9hE
 
   Thanks, Flavio
 
 
  On Thu, May 14, 2015 at 12:19 AM, Flavio Percoco
  fla...@redhat.com wrote:
 
  On 13/05/15 18:06 +, Fox, Kevin M wrote:
 
  Sahara also has the same problem, but worse, since they currently
  only support ssh with their agent, so its either assign floating
  ip's to all nodes, or your sahara controller must be on your one
  and only network node so it can tunnel. :/
 
  Should we have a chat with them too?
 
 
  We've scheduled a discussion with Trove's team on Thursday at
  5pm. It'd be great to have this discussion once and together to
  know what the common issues are and what things need to be done.
 
  I'll ping folks from both teams to invite them to this session.
  If they can't make it, I'm happy to use another working session
  slot.
 
  Cheers, Flavio
 
  http://libertydesignsummit.sched.org/event/59dc6ec910a732cdbf5970b679
 2e1cef
 
 
 #.VVRL0PYU9hE
 
 
 
 
  Thanks, Kevin  From: Zane
  Bitter [zbit...@redhat.com] Sent: Wednesday, May 13, 2015 10:26
  AM To: openstack-dev@lists.openstack.org Subject: Re:
  [openstack-dev] [trove][zaqar] Trove and Zaqar integration.
  Summit working session
 
  On 11/05/15 05:49, Flavio Percoco wrote:
 
  On 08/05/15 00:45 -0700, Nikhil Manchanda wrote:
 
  3)  The trove-guest-agent is in vm. it is connected by
  taskmanager by rabbitmq. We designed it. But is there some
  prectise to do this? how to make the vm be connected in
  vm-network and management network?
 
 
  Most deployments of Trove that I am familiar with set up a
  separate RabbitMQ server in cloud that is used by Trove. It is
  not recommended to use the same infrastructure RabbitMQ server
  for Trove for security reasons. Also most deployments of Trove
  set up a private (neutron) network that the RabbitMQ server and
  guests are connected to, and all RPC messages are sent over this
  network.
 
 
  We've discussed trove+zaqar in the past and I believe some folks
  from the Trove team have been in contact with Fei Long lately
  about this. Since one of the projects goal's for this cycle is to
  provide support to other projects and contribute to the adoption,
  I'm wondering if any of the members of the trove team would be
  willing to participate in a Zaqar working session completely
  dedicated to this integration?
 
 
  +1
 
  I learned from a concurrent thread ([Murano] [Mistral] SSH
  workflow action) that Murano are doing exactly the same thing
  with a separate RabbitMQ server to communicate with guest agents.
  It's a real waste of energy when multiple OpenStack projects all
  have to solve the same problem from scratch, so a single answer
  to this would be great.
 
  In that thread I suggested (and Murano developers agreed with)
  making the transport pluggable so that operators could choose
  Zaqar instead. I would strongly support doing the same here.
 
 
  +1 :)
 
  Flavio
 
 
 
 
  cheers, Zane.
 
 
  It'd be a great opportunity to figure out what's really needed,
  edge cases and get some work done on this specific case.
 
  Thanks, Flavio
 
 
 

Re: [openstack-dev] [trove][zaqar] Trove and Zaqar integration. Summit working session

2015-05-20 Thread Fox, Kevin M
Perfect. Thanks.

Kevin


From: Nikhil Manchanda
Sent: Wednesday, May 20, 2015 1:18:13 PM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] [trove][zaqar] Trove and Zaqar integration. Summit 
working session

The session where we're planning to discuss this is at 5:00 pm on Thursday in 
Room 302.

Thanks,
Nikhil


On May 20, 2015, at 11:09 AM, Georgy Okrokvertskhov 
gokrokvertsk...@mirantis.commailto:gokrokvertsk...@mirantis.com wrote:

I think Sergey will present Murano team. I added him to CC as he probably 
filters out Zaqar and Trove e-mails.

Thanks
Gosha

On Wed, May 20, 2015 at 10:34 AM, Georgy Okrokvertskhov 
gokrokvertsk...@mirantis.commailto:gokrokvertsk...@mirantis.com wrote:
Hi,

What is the final decision about this discussion? When will it happen?

thanks
Gosha

On Thu, May 14, 2015 at 3:49 PM, Douglas Mendizábal 
douglas.mendiza...@rackspace.commailto:douglas.mendiza...@rackspace.com 
wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

I'm very much interested in talking with some Keystone folks about
this auth issue.  I would be willing to dedicate a Barbican Working
Session to this discussion if there is a time slot that works for all
the interested parties.

- - Douglas Mendizabal

On 5/14/15 3:13 PM, Fox, Kevin M wrote:
 If there's a free session, can we dedicate a session specifically
 to the zaqar, barbican, sahara, heat, trove, guestagent, keystone
 auth thingy so everyone's all together?

 Thanks, Kevin  From: Flavio
 Percoco [fla...@redhat.commailto:fla...@redhat.com] Sent: Thursday, May 14, 
 2015 12:15 PM
 To: Sergey Lukjanov Cc: OpenStack Development Mailing List (not for
 usage questions) Subject: Re: [openstack-dev] [trove][zaqar] Trove
 and Zaqar integration. Summit working session

 On 14/05/15 10:07 -0700, Sergey Lukjanov wrote:
 Hey,

 in Sahara we're looking on using Zaqar as a transport for agent
 some day as well. Unfortunately this section overlaps with Sahara
 sessions.

 Sergey,

 We still have some free sessions, we'd be happy to dedicate one to
 Sahara. Any slot that looks good for you?

 http://libertydesignsummit.sched.org/overview/type/design+summit/Zaqar
#.VVT0CvYU9hEhttp://libertydesignsummit.sched.org/overview/type/design+summit/Zaqar#.VVT0CvYU9hE

  Thanks, Flavio


 On Thu, May 14, 2015 at 12:19 AM, Flavio Percoco
 fla...@redhat.commailto:fla...@redhat.com wrote:

 On 13/05/15 18:06 +, Fox, Kevin M wrote:

 Sahara also has the same problem, but worse, since they currently
 only support ssh with their agent, so its either assign floating
 ip's to all nodes, or your sahara controller must be on your one
 and only network node so it can tunnel. :/

 Should we have a chat with them too?


 We've scheduled a discussion with Trove's team on Thursday at
 5pm. It'd be great to have this discussion once and together to
 know what the common issues are and what things need to be done.

 I'll ping folks from both teams to invite them to this session.
 If they can't make it, I'm happy to use another working session
 slot.

 Cheers, Flavio

 http://libertydesignsummit.sched.org/event/59dc6ec910a732cdbf5970b679
2e1cefhttp://libertydesignsummit.sched.org/event/59dc6ec910a732cdbf5970b6792e1cef


#.VVRL0PYU9hE




 Thanks, Kevin  From: Zane
 Bitter [zbit...@redhat.commailto:zbit...@redhat.com] Sent: Wednesday, May 
 13, 2015 10:26
 AM To: 
 openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org 
 Subject: Re:
 [openstack-dev] [trove][zaqar] Trove and Zaqar integration.
 Summit working session

 On 11/05/15 05:49, Flavio Percoco wrote:

 On 08/05/15 00:45 -0700, Nikhil Manchanda wrote:

 3)  The trove-guest-agent is in vm. it is connected by
 taskmanager by rabbitmq. We designed it. But is there some
 prectise to do this? how to make the vm be connected in
 vm-network and management network?


 Most deployments of Trove that I am familiar with set up a
 separate RabbitMQ server in cloud that is used by Trove. It is
 not recommended to use the same infrastructure RabbitMQ server
 for Trove for security reasons. Also most deployments of Trove
 set up a private (neutron) network that the RabbitMQ server and
 guests are connected to, and all RPC messages are sent over this
 network.


 We've discussed trove+zaqar in the past and I believe some folks
 from the Trove team have been in contact with Fei Long lately
 about this. Since one of the projects goal's for this cycle is to
 provide support to other projects and contribute to the adoption,
 I'm wondering if any of the members of the trove team would be
 willing to participate in a Zaqar working session completely
 dedicated to this integration?


 +1

 I learned from a concurrent thread ([Murano] [Mistral] SSH
 workflow action) that Murano are doing exactly the same thing
 with a separate RabbitMQ server to communicate with guest agents.
 It's a 

Re: [openstack-dev] [akanda] design session

2015-05-20 Thread sean roberts
Neutron sessions moved, so we need to move to 4:30-5:20pm today, dev lounge
by room 220.

On Wednesday, May 20, 2015, sean roberts seanrobert...@gmail.com wrote:

 today, Wednesday 20 may, 14:40-15:20, Dev lounge outside room 220
 https://etherpad.openstack.org/p/liberty-akanda-design


 --
 ~sean



-- 
~sean
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [barbican] Nominating Kaitlin Farr for barbican-core

2015-05-20 Thread John Vrbanac
+1

John Vrbanac


From: Douglas Mendizábal douglas.mendiza...@rackspace.com
Sent: Tuesday, May 19, 2015 7:09 PM
To: OpenStack Development Mailing List (not for usage questions)
Subject: [openstack-dev] [barbican] Nominating Kaitlin Farr for barbican-core

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi All,

I would like to nominate Kaitlin Farr for barbican-core.

Kaitlin has been contributing to the project for a long time, both by
contributing code to Barbican, python-barbicanclient and Castellan,
and also by providing valuable reviews. [1]

As a reminder to the rest of the core team, we use the process
outlined in https://wiki.openstack.org/wiki/Barbican/CoreTeam to add
members to the barbican-core team.

Thanks,
Douglas Mendizábal

[1] http://stackalytics.com/report/contribution/barbican-group/90
-BEGIN PGP SIGNATURE-
Comment: GPGTools - https://gpgtools.org
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=1OIW
-END PGP SIGNATURE-

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [trove][zaqar] Trove and Zaqar integration. Summit working session

2015-05-20 Thread Georgy Okrokvertskhov
I think Sergey will present Murano team. I added him to CC as he probably
filters out Zaqar and Trove e-mails.

Thanks
Gosha

On Wed, May 20, 2015 at 10:34 AM, Georgy Okrokvertskhov 
gokrokvertsk...@mirantis.com wrote:

 Hi,

 What is the final decision about this discussion? When will it happen?

 thanks
 Gosha

 On Thu, May 14, 2015 at 3:49 PM, Douglas Mendizábal 
 douglas.mendiza...@rackspace.com wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 I'm very much interested in talking with some Keystone folks about
 this auth issue.  I would be willing to dedicate a Barbican Working
 Session to this discussion if there is a time slot that works for all
 the interested parties.

 - - Douglas Mendizabal

 On 5/14/15 3:13 PM, Fox, Kevin M wrote:
  If there's a free session, can we dedicate a session specifically
  to the zaqar, barbican, sahara, heat, trove, guestagent, keystone
  auth thingy so everyone's all together?
 
  Thanks, Kevin  From: Flavio
  Percoco [fla...@redhat.com] Sent: Thursday, May 14, 2015 12:15 PM
  To: Sergey Lukjanov Cc: OpenStack Development Mailing List (not for
  usage questions) Subject: Re: [openstack-dev] [trove][zaqar] Trove
  and Zaqar integration. Summit working session
 
  On 14/05/15 10:07 -0700, Sergey Lukjanov wrote:
  Hey,
 
  in Sahara we're looking on using Zaqar as a transport for agent
  some day as well. Unfortunately this section overlaps with Sahara
  sessions.
 
  Sergey,
 
  We still have some free sessions, we'd be happy to dedicate one to
  Sahara. Any slot that looks good for you?
 
  http://libertydesignsummit.sched.org/overview/type/design+summit/Zaqar
 #.VVT0CvYU9hE
 http://libertydesignsummit.sched.org/overview/type/design+summit/Zaqar#.VVT0CvYU9hE
 
   Thanks, Flavio
 
 
  On Thu, May 14, 2015 at 12:19 AM, Flavio Percoco
  fla...@redhat.com wrote:
 
  On 13/05/15 18:06 +, Fox, Kevin M wrote:
 
  Sahara also has the same problem, but worse, since they currently
  only support ssh with their agent, so its either assign floating
  ip's to all nodes, or your sahara controller must be on your one
  and only network node so it can tunnel. :/
 
  Should we have a chat with them too?
 
 
  We've scheduled a discussion with Trove's team on Thursday at
  5pm. It'd be great to have this discussion once and together to
  know what the common issues are and what things need to be done.
 
  I'll ping folks from both teams to invite them to this session.
  If they can't make it, I'm happy to use another working session
  slot.
 
  Cheers, Flavio
 
  http://libertydesignsummit.sched.org/event/59dc6ec910a732cdbf5970b679
 2e1cef
 http://libertydesignsummit.sched.org/event/59dc6ec910a732cdbf5970b6792e1cef
 
 
 #.VVRL0PYU9hE
 
 
 
 
  Thanks, Kevin  From: Zane
  Bitter [zbit...@redhat.com] Sent: Wednesday, May 13, 2015 10:26
  AM To: openstack-dev@lists.openstack.org Subject: Re:
  [openstack-dev] [trove][zaqar] Trove and Zaqar integration.
  Summit working session
 
  On 11/05/15 05:49, Flavio Percoco wrote:
 
  On 08/05/15 00:45 -0700, Nikhil Manchanda wrote:
 
  3)  The trove-guest-agent is in vm. it is connected by
  taskmanager by rabbitmq. We designed it. But is there some
  prectise to do this? how to make the vm be connected in
  vm-network and management network?
 
 
  Most deployments of Trove that I am familiar with set up a
  separate RabbitMQ server in cloud that is used by Trove. It is
  not recommended to use the same infrastructure RabbitMQ server
  for Trove for security reasons. Also most deployments of Trove
  set up a private (neutron) network that the RabbitMQ server and
  guests are connected to, and all RPC messages are sent over this
  network.
 
 
  We've discussed trove+zaqar in the past and I believe some folks
  from the Trove team have been in contact with Fei Long lately
  about this. Since one of the projects goal's for this cycle is to
  provide support to other projects and contribute to the adoption,
  I'm wondering if any of the members of the trove team would be
  willing to participate in a Zaqar working session completely
  dedicated to this integration?
 
 
  +1
 
  I learned from a concurrent thread ([Murano] [Mistral] SSH
  workflow action) that Murano are doing exactly the same thing
  with a separate RabbitMQ server to communicate with guest agents.
  It's a real waste of energy when multiple OpenStack projects all
  have to solve the same problem from scratch, so a single answer
  to this would be great.
 
  In that thread I suggested (and Murano developers agreed with)
  making the transport pluggable so that operators could choose
  Zaqar instead. I would strongly support doing the same here.
 
 
  +1 :)
 
  Flavio
 
 
 
 
  cheers, Zane.
 
 
  It'd be a great opportunity to figure out what's really needed,
  edge cases and get some work done on this specific case.
 
  Thanks, Flavio
 
 
 
  

Re: [openstack-dev] [heat] Can't make it to the summit.

2015-05-20 Thread Angus Salkeld
On Wed, May 20, 2015 at 1:08 AM, Anant Patil anant.pa...@hp.com wrote:

 Hi,

 Due to some visa issues, my travel to Vancouver summit is canceled.


Sorry to hear it, we will try and fill you in as best as possible.

-Angus


 I will miss meeting the Heat team and the planned session on convergence
 phase 2. Kanagaraj M has some context on the phase 2 plans and he should
 be able to drive it. Hope you will have a good discussion.

 - Anant

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [oslo] Inviting Robert Collins to Oslo core

2015-05-20 Thread Davanum Srinivas
Hi Team,

I'd like to invite Robert Collins (aka lifeless) as an Oslo core.
Robert has been a long time contributor to a whole bunch of OpenStack
projects and a member of our TC. Robert indicated that he can help
across Oslo projects this cycle, so let's please welcome him. Here's
my +1.

thanks,
Dims

[1] http://stackalytics.com/?user_id=lifelessrelease=all
[2] https://www.openstack.org/foundation/tech-committee/
-- 
Davanum Srinivas :: https://twitter.com/dims

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Solum] OpenStack Design Summit Solum sessions

2015-05-20 Thread Devdatta Kulkarni
Hi Mark,

As Adrian mentioned in another email on this chain,
hopefully we can have a session for the next summit.

In the meantime, you can check out current capabilities of Solum here:
https://solum.readthedocs.org/en/latest/getting_started/index.html

We also have a vagrant environment where you can try out Solum.
A screencast of some of the key current features and details on getting the 
vagrant environment up are
available here:
https://wiki.openstack.org/wiki/Solum/solum_kilo_demo

If you have specific questions/comments, feel free to reach out to us here or 
on #solum on freenode.

Regards,
Devdatta


From: Mark Carlson m...@carlson.net
Sent: Wednesday, May 20, 2015 10:03 AM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] [Solum] OpenStack Design Summit Solum sessions

Sad but true. Are you here in Vancouver?

Did you see Adrian give his demos on stage yesterday?

He seems to have gone off into Container-Land now

-- mark

On 5/20/15 8:48 AM, Gilbert Pilz wrote:
 Looking at the Design Summit schedule and list of Etherpads it appears that 
 there are no sessions scheduled for Solum. Is this correct?

 ~ gp
 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [oslo] Inviting Robert Collins to Oslo core

2015-05-20 Thread Joshua Harlow

+1

Robert is really great, helpful, and always welcoming!

Get er' done :-)

Davanum Srinivas wrote:

Hi Team,

I'd like to invite Robert Collins (aka lifeless) as an Oslo core.
Robert has been a long time contributor to a whole bunch of OpenStack
projects and a member of our TC. Robert indicated that he can help
across Oslo projects this cycle, so let's please welcome him. Here's
my +1.

thanks,
Dims

[1] http://stackalytics.com/?user_id=lifelessrelease=all
[2] https://www.openstack.org/foundation/tech-committee/


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [oslo] Inviting Robert Collins to Oslo core

2015-05-20 Thread ozamiatin

+1 from me

5/20/15 22:23, Joshua Harlow пишет:

+1

Robert is really great, helpful, and always welcoming!

Get er' done :-)

Davanum Srinivas wrote:

Hi Team,

I'd like to invite Robert Collins (aka lifeless) as an Oslo core.
Robert has been a long time contributor to a whole bunch of OpenStack
projects and a member of our TC. Robert indicated that he can help
across Oslo projects this cycle, so let's please welcome him. Here's
my +1.

thanks,
Dims

[1] http://stackalytics.com/?user_id=lifelessrelease=all
[2] https://www.openstack.org/foundation/tech-committee/


__ 


OpenStack Development Mailing List (not for usage questions)
Unsubscribe: 
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe

http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [oslo] Inviting Robert Collins to Oslo core

2015-05-20 Thread Doug Hellmann
Excerpts from Davanum Srinivas (dims)'s message of 2015-05-20 12:16:50 -0700:
 Hi Team,
 
 I'd like to invite Robert Collins (aka lifeless) as an Oslo core.
 Robert has been a long time contributor to a whole bunch of OpenStack
 projects and a member of our TC. Robert indicated that he can help
 across Oslo projects this cycle, so let's please welcome him. Here's
 my +1.

+1 very much

Doug


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [akanda] design session

2015-05-20 Thread sean roberts
today, Wednesday 20 may, 14:40-15:20, Dev lounge outside room 220
https://etherpad.openstack.org/p/liberty-akanda-design


-- 
~sean
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] rating talks (and keynotes) at the OpenStack summit

2015-05-20 Thread Steve Gordon
- Original Message -
 From: Amrith Kumar amr...@tesora.com
 To: openst...@lists.openstack.org, OpenStack Development Mailing List (not 
 for usage questions)
 
 I attended a talk by Mark Baker today (http://sched.co/2qbJ) entitled The
 OpenStack Summit Talk Selection Process is Broken and I think it was an
 informative session.
 
 The statistics presented indicated that just under a third of the talks
 submitted got accepted at this summit and that is a very healthy ratio and
 that's a great thing.
 
 One thing that was brought up at the talk was that there was no formal
 feedback mechanism about talks and keynotes at Summit. Is there any way in
 which we can get a feedback mechanism for the talks and sessions at this
 summit up and running? It would be a valuable piece of information if we
 could get it.
 
 Any thoughts on how this can be done? There were 296 sessions; we obviously
 know the names of the sessions and the speakers. Does our scheduling
 mechanism have a 'ratings module' that can be turned on? Is there some other
 quick and dirty mechanism we can use?

For Red Hat Summit we have something like this built into the official app and 
speakers are encouraged to remind people to use it to submit feedback at the 
end. Users have the choice of just leaving a rating in a couple of categories 
or also entering written comments. I have found the feedback quite useful in 
the past for helping me to better target the presentations I do at that 
particular event and think it would be great if there was something like this 
for OpenStack summit.

Thanks,

Steve

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] rating talks (and keynotes) at the OpenStack summit

2015-05-20 Thread Maish Saidel-Keesing



On 05/20/15 11:42, Steve Gordon wrote:

- Original Message -

From: Amrith Kumar amr...@tesora.com
To: openst...@lists.openstack.org, OpenStack Development Mailing List (not for 
usage questions)

I attended a talk by Mark Baker today (http://sched.co/2qbJ) entitled The
OpenStack Summit Talk Selection Process is Broken and I think it was an
informative session.

The statistics presented indicated that just under a third of the talks
submitted got accepted at this summit and that is a very healthy ratio and
that's a great thing.

One thing that was brought up at the talk was that there was no formal
feedback mechanism about talks and keynotes at Summit. Is there any way in
which we can get a feedback mechanism for the talks and sessions at this
summit up and running? It would be a valuable piece of information if we
could get it.

Any thoughts on how this can be done? There were 296 sessions; we obviously
know the names of the sessions and the speakers. Does our scheduling
mechanism have a 'ratings module' that can be turned on? Is there some other
quick and dirty mechanism we can use?

For Red Hat Summit we have something like this built into the official app and 
speakers are encouraged to remind people to use it to submit feedback at the 
end. Users have the choice of just leaving a rating in a couple of categories 
or also entering written comments. I have found the feedback quite useful in 
the past for helping me to better target the presentations I do at that 
particular event and think it would be great if there was something like this 
for OpenStack summit.

Thanks,

Steve

I would highly recommend that we start accepting the input from the 
participants with regards to their experience - during the sessions, 
Keynote speakers, food, venue everything.


This feedback can be used by the foundation to evaluate what was 
amazing, what was wrong, and in addition also help the track leads 
during the session selection process.

--
Best Regards,
Maish Saidel-Keesing

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Fuel] Speed Up RabbitMQ Recovering

2015-05-20 Thread Vladimir Kuklin
Actually, we are not skipping 'Started' state - we just consider resource
as started when beam is powered up and rabbitmq start_app/stop_app action
succeeds. Such a node is considered as a good one that can be marked as
'Master' to which the nodes should connect and then all the cluster
join/leave actions are handled using multi-state notification mechanism.

On Wed, May 20, 2015 at 5:05 AM, Andrew Beekhof abeek...@redhat.com wrote:


  On 20 May 2015, at 6:05 am, Andrew Woodward xar...@gmail.com wrote:
 
 
 
  On Thu, May 7, 2015 at 5:01 PM Andrew Beekhof abeek...@redhat.com
 wrote:
 
   On 5 May 2015, at 1:19 pm, Zhou Zheng Sheng / 周征晟 
 zhengsh...@awcloud.com wrote:
  
   Thank you Andrew.
  
   on 2015/05/05 08:03, Andrew Beekhof wrote:
   On 28 Apr 2015, at 11:15 pm, Bogdan Dobrelya bdobre...@mirantis.com
 wrote:
  
   Hello,
   Hello, Zhou
  
   I using Fuel 6.0.1 and find that RabbitMQ recover time is long after
   power failure. I have a running HA environment, then I reset power
 of
   all the machines at the same time. I observe that after reboot it
   usually takes 10 minutes for RabittMQ cluster to appear running
   master-slave mode in pacemaker. If I power off all the 3
 controllers and
   only start 2 of them, the downtime sometimes can be as long as 20
 minutes.
   Yes, this is a known issue [0]. Note, there were many bugfixes, like
   [1],[2],[3], merged for MQ OCF script, so you may want to try to
   backport them as well by the following guide [4]
  
   [0] https://bugs.launchpad.net/fuel/+bug/1432603
   [1] https://review.openstack.org/#/c/175460/
   [2] https://review.openstack.org/#/c/175457/
   [3] https://review.openstack.org/#/c/175371/
   [4] https://review.openstack.org/#/c/170476/
   Is there a reason you’re using a custom OCF script instead of the
 upstream[a] one?
   Please have a chat with David (the maintainer, in CC) if there is
 something you believe is wrong with it.
  
   [a]
 https://github.com/ClusterLabs/resource-agents/blob/master/heartbeat/rabbitmq-cluster
  
   I'm using the OCF script from the Fuel project, specifically from the
   6.0 stable branch [alpha].
 
  Ah, I’m still learning who is who... i thought you were part of that
 project :-)
 
  
   Comparing with upstream OCF code, the main difference is that Fuel
   RabbitMQ OCF is a master-slave resource. Fuel RabbitMQ OCF does more
   bookkeeping, for example, blocking client access when RabbitMQ cluster
   is not ready. I beleive the upstream OCF should be OK to use as well
   after I read the code, but it might not fit into the Fuel project. As
   far as I test, the Fuel OCF script is good except sometimes the full
   reassemble time is long, and as I find out, it is mostly because the
   Fuel MySQL Galera OCF script keeps pacemaker from promoting RabbitMQ
   resource, as I mentioned in the previous emails.
  
   Maybe Vladimir and Sergey can give us more insight on why Fuel needs a
   master-slave RabbitMQ.
 
  That would be good to know.
  Browsing the agent, promote seems to be a no-op if rabbit is already
 running.
 
 
  To the master / slave reason due to how the ocf script is structured to
 deal with rabbit's poor ability to handle its self in some scenarios.
 Hopefully the state transition diagram [5] is enough to clarify what's
 going on.
 
  [5] http://goo.gl/PPNrw7

 Not really.
 It seems to be under the impression you can skip started and go directly
 from stopped to master.
 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




-- 
Yours Faithfully,
Vladimir Kuklin,
Fuel Library Tech Lead,
Mirantis, Inc.
+7 (495) 640-49-04
+7 (926) 702-39-68
Skype kuklinvv
35bk3, Vorontsovskaya Str.
Moscow, Russia,
www.mirantis.com http://www.mirantis.ru/
www.mirantis.ru
vkuk...@mirantis.com
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Manila] Question to driver maintainers

2015-05-20 Thread Luis Pabon
Hi guys, I am a little confused and would like to maybe clear some things up.  
GlusterFS (the storage system) does support the ability to resize volumes.  I 
will talk to Csaba and see what he means, and we will get back to you soon.

- Original Message -
From: Ben Swartzlander b...@swartzlander.org
To: OpenStack Development Mailing List (not for usage questions) 
openstack-dev@lists.openstack.org
Sent: Tuesday, May 19, 2015 12:41:31 PM
Subject: Re: [openstack-dev] [Manila] Question to driver maintainers

On 05/19/2015 10:42 AM, Csaba Henk wrote:
 Hi Igor,

 From: Igor Malinovskiy imalinovs...@mirantis.com
 To: OpenStack Development Mailing List (not for usage questions)
 openstack-dev@lists.openstack.org
 Sent: Monday, May 18, 2015 10:15:25 AM
 Subject: [openstack-dev] [Manila] Question to driver maintainers
 ...
 So I want to ask driver maintainers here:
 Will your driver be able to do share extending without loss of connectivity?
 Currenty:

 - glusterfs driver can
 - glusterfs-native won't support share extension (*)

 in Liberty timeframe, we are to unify the glusterfs* drivers' backend
 management logic, so both glusterfs driver style and glusterfs-native
 driver style backend management will be available for both drivers
 (actual choice made in configuration). So when this will be in place,
 the answer modifies as follows:

 - glusterfs and glusterfs-native will either support non-disruptive
share extension, or won't support share resize at all (*) (depending
on configuration)

Csaba, this is a truly interesting set of limitations! I'm trying to 
understand what's going on down in the storage system to prevent the 
extension. Is it a case of not having enough free space? Or can you 
support creating new (larger) shares on the same backend while 
simultaneously not being able to resize an existing share? Is there some 
mapping to physical resources that's immutable once configured? What is 
your recommendation to customers who run out of space in a glusterfs 
share today (independent of Manila)?

If your system can't support this case then I'm worried others may have 
similar problems and we could end up having to choose between making 
extend an optional operation (a choice I don't like) or making the 
glusterfs-native driver and possibly other drivers unsupported (also an 
option I don't like).

-Ben

 (*) There are efforts to remove this limitation in GlusterFS, but too
 vague at this point to make a statement on it.

 Csaba


 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [nova][cinder][libvirt] Serious problem of block migration of a hybrid instance (instance based on local disk and cinder volume attached)

2015-05-20 Thread Matthew Gilliard
The change Dan refers to merged in Kilo. I assume that if you actually
found this problem then you're using an earlier OpenStack, so it's
worth noting that there's an outstanding backport:
https://review.openstack.org/#/c/176768/

Matthew


On Wed, May 20, 2015 at 3:21 AM, Daniel P. Berrange berra...@redhat.com wrote:
 On Wed, May 20, 2015 at 06:11:26PM +0800, Luo Gangyi wrote:
 Hi devs,


 I find a serious problem when I try to live migrate a hybrid instance
 (instance based on local disk and cinder volume attached) .


 In current nova, such operation is allowed.


 But I don't think libvirt can deal with such condition correctly.


 When block migration of a hybird intance is triggered, nova will initiate
 a new connection to the volume in destination compute node and then
 call libvirt to do the block migration.

 However, libvirt doesn't distinguish local disk and a network volume,
 it may copy both local disk and cinder volume from source to destination.

 It is dangerous  to write the same volume simutaneously on source and
 destination!! and apparently there is no need to do this!

 I believe we should do something to correct this, maybe patch libvirt?
 or just forbid user do such operation?

 Both. Nova now forbids this

 commit d667b6a63e80b2f8d6311c2cf224ba32628eed84
 Author: Chris St. Pierre stpie...@metacloud.com
 Date:   Wed Dec 3 16:16:34 2014 -0600

 libvirt: Fail when live block migrating instance with volumes

 This raises an exception when attempting to live block migrate (nova
 live-migration --block-migrate) an instance with attached volumes.
 libvirt copies these volumes from themselves to themselves. At a
 minimum, this is horribly slow and de-sparses a sparse volume; at
 worst, this could cause massive data corruption.

 Closes-Bug: 1398999
 Change-Id: Ibcd423976bb9fea46e3e1cb23cc8e5cd944d8fc2

 And work is being done to allow libvirt to be told to skip cinder
 volumes when migrating:

   https://www.redhat.com/archives/libvir-list/2015-May/msg00345.html

 Regards,
 Daniel
 --
 |: http://berrange.com  -o-http://www.flickr.com/photos/dberrange/ :|
 |: http://libvirt.org  -o- http://virt-manager.org :|
 |: http://autobuild.org   -o- http://search.cpan.org/~danberr/ :|
 |: http://entangle-photo.org   -o-   http://live.gnome.org/gtk-vnc :|

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [mistral] Mistral fishbowl sessions - Thursday 4.10 - 5.40pm

2015-05-20 Thread Renat Akhmerov
Hi OpenStack Summit attendees,

I’d like to announce two Mistral fishbowl sessions scheduled for tomorrow:
4.10 pm - Mistral: Where is Mistral Today - Intro, Demo, QA (Subtype: mistral) 
https://libertydesignsummit.sched.org/event/3066ec2ddd824d9134fecfcd0466d399 
5.00 pm - Mistral: Features, Liberty Roadmap + Open Mike (Subtype: mistral) 
https://libertydesignsummit.sched.org/event/6b72209b698a55abbedc3bb961ef987c

The first session will be mostly devoted to Live Demo of Mistral for 
autoscaling OpenStack shown by James Fryman from StackStorm. We also want to 
discuss a high-level roadmap for Liberty with a wider audience.

Thanks

Renat Akhmerov
@ Mirantis Inc.



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Nova][libvirt] Understand why we lookup libvirt domains by instance name

2015-05-20 Thread Robert Collins
On 21 May 2015 at 10:01, Michael Still mi...@stillhq.com wrote:
 I note that we use instance.name to lookup the libvirt domain a bunch
 in the driver. I'm wondering why we don't just use instance.uuid all
 the time -- the code for that already exists. Is there a good reason
 to not move to always using the uuid?

 I ask because instance.name is not guaranteed to be unique depending
 on how weird the nova deployment is.

I don't know. I know that we had issues with nova-baremetal and around
the start of Ironic and IIRC moved to uuids everywhere as a result.

-Rob

-- 
Robert Collins rbtcoll...@hp.com
Distinguished Technologist
HP Converged Cloud

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [akanda] design session

2015-05-20 Thread sean roberts
The neutron work sessions schedule changed last minute today, so we needed
to adapt. It looks like 1:30pm tomorrow is the remaining time slot where no
time conflicts exist. Plan to meet outside room 220 in the developer lounge
area as it has been a bit less crowded. We can move a bit deeper into the
lounge as if space is available.

On Wed, May 20, 2015 at 1:49 PM, sean roberts seanrobert...@gmail.com
wrote:

 Neutron sessions moved, so we need to move to 4:30-5:20pm today, dev
 lounge by room 220.


 On Wednesday, May 20, 2015, sean roberts seanrobert...@gmail.com wrote:

 today, Wednesday 20 may, 14:40-15:20, Dev lounge outside room 220
 https://etherpad.openstack.org/p/liberty-akanda-design


 --
 ~sean



 --
 ~sean




-- 

~ sean
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [neutron][vpnaas] Supporting multiple local subnets for VPN connections

2015-05-20 Thread loy wolfe
Extra subnets is suitable for attribute of IKE connections, but not
the whole VPN service. Because customer usually want fine-grained
control of which local subnet could communicate to remote subnets.

On Wed, May 20, 2015 at 11:21 PM, Mathieu Rohon mathieu.ro...@gmail.com wrote:
 However after thinking about it more deeply, option A might be suitable if
 the vpn-service becomes more generic, and usable by other vpn objects
 (ipsec-site-connection, bgpvpn-connection).
 I would become an object that the tenant can update to attach CIDR it wants
 to export in its VPN.
 To transform the vpn-service object in a generic vpn description, we need to
 remove the mandatory ROUTER attribute, so that we can use it for l2vpn
 either.

 Hope we can discuss that on friday morning

 On Wed, May 20, 2015 at 5:12 PM, Paul Michali p...@michali.net wrote:

 Hi Mathieu,

 In Kilo, VPNaaS APIs were no longer marked as experimental. We need to
 understand the implication of changing the API. I'm not sure how much VPNaaS
 is being used by OpenStack users at this time, either.  I'm hoping to seek
 out answers to this at the summit.

 If anyone has suggestions, comments, information on this, please chime in.
 I'll likely make a BP for multiple subnets, when I get back from the summit.

 Lastly, I'm planning on trying to get people interested in VPN to meet on
 Friday morning at the summit to discuss all the VPN topics that have been
 coming up.

 Regards,

 Paul Michali (pc_m)

 On Wed, May 20, 2015 at 7:54 AM Mathieu Rohon mathieu.ro...@gmail.com
 wrote:

 Hi paul,

 this is also something that we would like to introduce for BGP/MPLS VPNs
 [2].

 We choose to allow tenants to attach existing networks ( it might evolve
 to subnets) to bgpvpn-connection objects, by updating the bgpvpn-connection
 object, which is the equivalent of the ipsec-site-connection object.

 So I think that Option B is suitable here.

 Concerning backward compatibility, I think VPNaas is still considered as
 experimental, am I wrong? Do you have to provide backward compatbility in
 this case?

 Mathieu

 [2] https://review.openstack.org/#/c/177740/

 On Wed, May 13, 2015 at 8:59 PM, Paul Michali p...@michali.net wrote:

 Hi,

 There has been, over the years, some mention about having VPN IPSec
 connections supporting multiple CIDRs for local (left side) private
 networks, in addition to the current support for multiple peer CIDRs (right
 side).

 I'm raising the question again with these goals:

 1) Determine if the reference IPSec implementations support this
 capability
 2) Determine if there is a community desire to enhance VPN to support
 this capability (for all VPN types)
 3) See what would be the best way to handle this (changes to API and
 model)
 4) Identify any consequences of making this change.

 Note: My assumption here is something that could be used for any type of
 VPN connection - current IPSec, future BGP/MPLS VPN, DM VPN, etc.

 Here is some information that was gathered from people on the VPN team
 so far. Please correct any inaccuracies and comment on the items...

 (1) It looks like OpenSwan and Libreswan will support this capability.
 StrongSwan will support this with IKEv2. For IKEv1, a Cisco Unity plugin
 extensions is needed. I'm not sure what that implies [1].

 (2) Do we, as a community, want to enhance VPNaaS to provide this
 capability of N:M subnets for VPN implementations? Putting on my vendor 
 hat,
 I can see cases where customers want to be able to only create one
 connection and reference multiple subnets on each end. Is there a desire to
 do this and bake it into the reference implementation (thus making it
 available for other implementations)?

 (3) Currently, the vpn service API includes the router and subnet ID.
 The IPSec connection command includes the peer CIDR(s). For reference, here
 are two of the APIs:

 usage: neutron vpn-service-create [-h] [-f
 {html,json,shell,table,value,yaml}]
   [-c COLUMN] [--max-width integer]
   [--prefix PREFIX]
   [--request-format {json,xml}]
   [--tenant-id TENANT_ID]
 [--admin-state-down]
   [--name NAME] [--description
 DESCRIPTION]
   ROUTER SUBNET

 usage: neutron ipsec-site-connection-create [-h]
 [-f
 {html,json,shell,table,value,yaml}]
 [-c COLUMN]
 [--max-width integer]
 [--prefix PREFIX]
 [--request-format
 {json,xml}]
 [--tenant-id TENANT_ID]
 [--admin-state-down] [--name
 NAME]
 [--description DESCRIPTION]
 

Re: [openstack-dev] [neutron][vpnaas] Supporting multiple local subnets for VPN connections

2015-05-20 Thread Paul Michali
Loy, yeah, that is why I was thinking option B, as user has flexibility to
specify what subnet(s) are used for a connection.  Ideally, we want to
consider different VPN connection types.

Regards,
Paul Michali (pc_m)


On Wed, May 20, 2015 at 5:34 PM loy wolfe loywo...@gmail.com wrote:

 Extra subnets is suitable for attribute of IKE connections, but not
 the whole VPN service. Because customer usually want fine-grained
 control of which local subnet could communicate to remote subnets.

 On Wed, May 20, 2015 at 11:21 PM, Mathieu Rohon mathieu.ro...@gmail.com
 wrote:
  However after thinking about it more deeply, option A might be suitable
 if
  the vpn-service becomes more generic, and usable by other vpn objects
  (ipsec-site-connection, bgpvpn-connection).
  I would become an object that the tenant can update to attach CIDR it
 wants
  to export in its VPN.
  To transform the vpn-service object in a generic vpn description, we
 need to
  remove the mandatory ROUTER attribute, so that we can use it for l2vpn
  either.
 
  Hope we can discuss that on friday morning
 
  On Wed, May 20, 2015 at 5:12 PM, Paul Michali p...@michali.net wrote:
 
  Hi Mathieu,
 
  In Kilo, VPNaaS APIs were no longer marked as experimental. We need to
  understand the implication of changing the API. I'm not sure how much
 VPNaaS
  is being used by OpenStack users at this time, either.  I'm hoping to
 seek
  out answers to this at the summit.
 
  If anyone has suggestions, comments, information on this, please chime
 in.
  I'll likely make a BP for multiple subnets, when I get back from the
 summit.
 
  Lastly, I'm planning on trying to get people interested in VPN to meet
 on
  Friday morning at the summit to discuss all the VPN topics that have
 been
  coming up.
 
  Regards,
 
  Paul Michali (pc_m)
 
  On Wed, May 20, 2015 at 7:54 AM Mathieu Rohon mathieu.ro...@gmail.com
  wrote:
 
  Hi paul,
 
  this is also something that we would like to introduce for BGP/MPLS
 VPNs
  [2].
 
  We choose to allow tenants to attach existing networks ( it might
 evolve
  to subnets) to bgpvpn-connection objects, by updating the
 bgpvpn-connection
  object, which is the equivalent of the ipsec-site-connection object.
 
  So I think that Option B is suitable here.
 
  Concerning backward compatibility, I think VPNaas is still considered
 as
  experimental, am I wrong? Do you have to provide backward compatbility
 in
  this case?
 
  Mathieu
 
  [2] https://review.openstack.org/#/c/177740/
 
  On Wed, May 13, 2015 at 8:59 PM, Paul Michali p...@michali.net wrote:
 
  Hi,
 
  There has been, over the years, some mention about having VPN IPSec
  connections supporting multiple CIDRs for local (left side) private
  networks, in addition to the current support for multiple peer CIDRs
 (right
  side).
 
  I'm raising the question again with these goals:
 
  1) Determine if the reference IPSec implementations support this
  capability
  2) Determine if there is a community desire to enhance VPN to support
  this capability (for all VPN types)
  3) See what would be the best way to handle this (changes to API and
  model)
  4) Identify any consequences of making this change.
 
  Note: My assumption here is something that could be used for any type
 of
  VPN connection - current IPSec, future BGP/MPLS VPN, DM VPN, etc.
 
  Here is some information that was gathered from people on the VPN team
  so far. Please correct any inaccuracies and comment on the items...
 
  (1) It looks like OpenSwan and Libreswan will support this capability.
  StrongSwan will support this with IKEv2. For IKEv1, a Cisco Unity
 plugin
  extensions is needed. I'm not sure what that implies [1].
 
  (2) Do we, as a community, want to enhance VPNaaS to provide this
  capability of N:M subnets for VPN implementations? Putting on my
 vendor hat,
  I can see cases where customers want to be able to only create one
  connection and reference multiple subnets on each end. Is there a
 desire to
  do this and bake it into the reference implementation (thus making it
  available for other implementations)?
 
  (3) Currently, the vpn service API includes the router and subnet ID.
  The IPSec connection command includes the peer CIDR(s). For
 reference, here
  are two of the APIs:
 
  usage: neutron vpn-service-create [-h] [-f
  {html,json,shell,table,value,yaml}]
[-c COLUMN] [--max-width integer]
[--prefix PREFIX]
[--request-format {json,xml}]
[--tenant-id TENANT_ID]
  [--admin-state-down]
[--name NAME] [--description
  DESCRIPTION]
ROUTER SUBNET
 
  usage: neutron ipsec-site-connection-create [-h]
  [-f
  {html,json,shell,table,value,yaml}]
  [-c COLUMN]
   

[openstack-dev] [glance] [kolla] [magnum] [nova] [neutron] Vancouver Summit Operations Containers Session

2015-05-20 Thread Richard Raseley
I apologize if this message is inappropriately broad, but I wanted to 
share the results of the Vancouver Summit operations containers 
session[0] we held yesterday with all of the projects which were mentioned.


This was a great discussion with approximately two-dozen individuals in 
attendance. Most of the conversation was captured pretty well on the 
etherpad, which can be found here:


https://etherpad.openstack.org/p/YVR-ops-containers

A big thank you to everyone who participated - it was really informative.

Regards,

Richard Raseley

SysOps Engineer @ Puppet Labs

[0] - http://sched.co/3B45

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [pbr] 1.0.1 released

2015-05-20 Thread fumihiko kakuma
Hi openstack-dev team,

Can you also release latest oslo.config to allow pbr 1.0.1?
In my convenience I want to use it.


Thanks,
kakuma

On Wed, 20 May 2015 11:07:36 +1200
Robert Collins robe...@robertcollins.net wrote:

 We are super psyched to announce the release of:
 
 pbr 1.0.1: Python Build Reasonableness
 
 With source available at:
 
 http://git.openstack.org/cgit/openstack-dev/pbr
 
 For more details, please see the git log history below and:
 
 http://launchpad.net/pbr/+milestone/1.0.1
 
 Please report issues through launchpad:
 
 http://bugs.launchpad.net/pbr
 
 Changes in pbr 1.0.0..1.0.1
 ---
 
 b72e446 Remove self.pre_run calls in packaging.py
 8e87679 Update hacking to 0.10.x series
 
 Diffstat (except docs and test files)
 -
 
 pbr/packaging.py  | 2 --
 test-requirements.txt | 2 +-
 2 files changed, 1 insertion(+), 3 deletions(-)
 
 
 Requirements updates
 
 
 diff --git a/test-requirements.txt b/test-requirements.txt
 index 2b33504..6e4521c 100644
 --- a/test-requirements.txt
 +++ b/test-requirements.txt
 @@ -4 +4 @@ fixtures=0.3.14
 -hacking=0.9.2,0.10
 +hacking=0.10.0,0.11
 
 
 
 -- 
 Robert Collins rbtcoll...@hp.com
 Distinguished Technologist
 HP Converged Cloud
 
 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

-- 
fumihiko kakuma kak...@valinux.co.jp



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [lbaas] [octavia] [barbican] Relationship between Octavia and Barbican and Octavia 1.0 questions

2015-05-20 Thread Daniel Comnea
+1

On Tue, May 19, 2015 at 8:05 AM, Maish Saidel-Keesing mais...@maishsk.com
wrote:

  Hello all,

 Going over today's presentation Load Balancing as a Service, Kilo and
 Beyond[1] (great presentation!!) - there are a few questions I have
 regarding the future release:

 For Octavia 1.0:

 1. Can someone explain to me how the flow would work for spinning up a a
 new Amphora with regards to interaction between Neutron, LBaaS and Barbican?
 Same question as well regarding how the standby is created and its
 relationship with Barbican.

 2. Will the orchestration (Heat) also be implemented when Octavia 1.0 is
 released or only further down the line?
 If not what would you suggest be the way to orchestrate LBaaS until this
 is ready?

 3. Is there some kind of hook into Security groups also planned for the
 Amphora to also protect the Load Balancer?

 I think that based on the answers to these questions above - additional
 questions will follow.

 Thanks

 [1] https://www.youtube.com/watch?v=-eAKur8lErU
 --
 Best Regards,
 Maish Saidel-Keesing

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Puppet] puppet-openstack_zeromq module

2015-05-20 Thread Richard Raseley

Harish Kumar wrote:

Hello All,

I have written a puppet-openstack_zeromq module using which one can
install/configure openstack zeromq reciever.

I would like to know if it make sense to host that code with other
openstack related puppet module.

Please see the code - https://github.com/jiocloud/puppet-openstack_zeromq

Thanks,
Harish

--

To unsubscribe from this group and stop receiving emails from it, send
an email to puppet-openstack+unsubscr...@puppetlabs.com
mailto:puppet-openstack+unsubscr...@puppetlabs.com.


Harish,

Quick note that we've moved Puppet-OpenStack related conversation to the 
OpenStack development mailing list


Thank you so much for this contribution - it is certainly much 
appreciated. At this time, as I understand it, we are only hosting the 
OpenStack-specific modules (e.g. Nova, Neutron, etc.).


While someone very well might want to use your module for deploying 
OpenStack, I think it would be treated in the same way as our other 
supporting modules (e.g. MySQL, RabbitMQ, etc.) - which is that they 
would live under your (or your company's namespace).


Do you feel comfortable publishing this module on the Puppet Forge? I 
would be more than happy to help with that process if necessary.


Regards,

Richard

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [glance] [kolla] [magnum] [nova] [neutron] Vancouver Summit Operations Containers Session

2015-05-20 Thread Daniel Comnea
Great info, thanks for sharing.

Since i couldn't attend the summit, are there any AIs which needs to
happen/ take place and which i can keep an eye on?

thanks,
Dani

On Thu, May 21, 2015 at 4:45 AM, Richard Raseley rich...@raseley.com
wrote:

 I apologize if this message is inappropriately broad, but I wanted to
 share the results of the Vancouver Summit operations containers session[0]
 we held yesterday with all of the projects which were mentioned.

 This was a great discussion with approximately two-dozen individuals in
 attendance. Most of the conversation was captured pretty well on the
 etherpad, which can be found here:

 https://etherpad.openstack.org/p/YVR-ops-containers

 A big thank you to everyone who participated - it was really informative.

 Regards,

 Richard Raseley

 SysOps Engineer @ Puppet Labs

 [0] - http://sched.co/3B45

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] Why need br-int and br-tun in openstack neutron

2015-05-20 Thread Na Zhu


Dear,


When OVS plugin is used with GRE option in Neutron, I see that each
compute
node has br-tun and br-int bridges created.

I'm trying to understand why we need the additional br-tun bridge here.
Can't we create tunneling ports in br-int bridge, and have br-int relay
traffic between VM ports and tunneling ports directly? Why do we have to
introduce another br-tun bridge?


Regards,
Juno Zhu
Staff Software Engineer, System Networking
China Systems and Technology Lab (CSTL), IBM Wuxi
Email: na...@cn.ibm.com__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [lbaas] [octavia] [barbican] Relationship between Octavia and Barbican and Octavia 1.0 questions

2015-05-20 Thread Doug Wiegley
Hi Maish,

Thanks for the feedback, some answers below.  Please also be aware of the lbaas 
use cases session tomorrow at 9am (yuck, I know), 
https://etherpad.openstack.org/p/YVR-neutron-lbaas-use-cases 
https://etherpad.openstack.org/p/YVR-neutron-lbaas-use-cases


 On May 19, 2015, at 12:05 AM, Maish Saidel-Keesing mais...@maishsk.com 
 wrote:
 
 Hello all,
 
 Going over today's presentation Load Balancing as a Service, Kilo and 
 Beyond[1] (great presentation!!) - there are a few questions I have 
 regarding the future release:
 
 For Octavia 1.0:
 
 1. Can someone explain to me how the flow would work for spinning up a a new 
 Amphora with regards to interaction between Neutron, LBaaS and Barbican?
 Same question as well regarding how the standby is created and its 
 relationship with Barbican.

The lbaas API runs inside neutron-server.  The general flow is:

- User interacts with neutron CLI/API or horizon (in liberty), and creates an 
LB.
- Lbaas plugin in neutron creates logical models, fetches cert data from 
barbican, and calls the backend lbaas driver.
- The backend driver does what it needs to to instantiate the LB. Today this is 
a synchronous call that waits for the nova boot, but by Liberty, it will likely 
be an async call to the octavia controller to finish the job.

Once Octavia has control, it is doing:

- Get REST calls for objects,
- Talk to nova, spin up an amphora image,
- Talk to neutron, plumb in the networks,
- Send the amphora its config.

 
 2. Will the orchestration (Heat) also be implemented when Octavia 1.0 is 
 released or only further down the line?
 If not what would you suggest be the way to orchestrate LBaaS until this is 
 ready?

We need to talk to the Heat folks and coordinate this, which we are planning to 
do soon.

 
 3. Is there some kind of hook into Security groups also planned for the 
 Amphora to also protect the Load Balancer?

Not at present, but I recorded this in the feature list on the etherpad above.

 
 I think that based on the answers to these questions above - additional 
 questions will follow.
 
 Thanks
 
 [1] https://www.youtube.com/watch?v=-eAKur8lErU 
 https://www.youtube.com/watch?v=-eAKur8lErU
 -- 
 Best Regards,
 Maish Saidel-Keesing
 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Solum] OpenStack Design Summit Solum sessions

2015-05-20 Thread Mark Carlson

Sad but true. Are you here in Vancouver?

Did you see Adrian give his demos on stage yesterday?

He seems to have gone off into Container-Land now

-- mark

On 5/20/15 8:48 AM, Gilbert Pilz wrote:

Looking at the Design Summit schedule and list of Etherpads it appears that 
there are no sessions scheduled for Solum. Is this correct?

~ gp
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [puppet] Re: Puppet-OpenStack API providers - Follow up

2015-05-20 Thread Rich Megginson

On 05/20/2015 12:17 AM, Gilles Dubreuil wrote:

Hi,

Just wanted to add, for clarification, the need to restructure the
openstacklib.

The use of resource[:auth] parameter is causing the providers to behave
differently depending on the context, as expressed earlier in this thread.

I would to highlight the fact that this change is driven by design.
Therefore the need for a fix, sooner than later, especially at a time of
the entire stack of provider to shift to Keystone V3. And this is
actually a critical time because of patches waiting upon this structural
change.

The bp/auth-consolidation (sorry for the *bad* name) patches show
authentication doesn't have to be using parameters, the latter was a
mistake from a types/providers suitability viewpoint.

The restructure (bp/auth-consolidation) is not only working but also
simplifies the code which is going to make the development/maintenance
of types/providers faster.


The current proposal for puppet-openstacklib is 
https://review.openstack.org/#/c/180407/


This breaks the published API in Juno as used by puppet-keystone. For 
example, the Juno branch code:

https://github.com/stackforge/puppet-keystone/blob/stable/juno/lib/puppet/provider/openstack.rb

def request(service, action, object, credentials, *properties)

but in the new code, there is no object request method, only self.request:

defself.request(service,action,*args)

Is it ok to break this API?  I don't think anyone is actually using it, 
but I have no idea.


Doing it this way also means that the change cannot be implemented 
incrementally - all of the type/provider/spec/other code has to be 
changed at the same time in a single commit (or live with failing gate 
tests).  Is this ok?


I have been working on the Keystone v3 code for a long time, and had a 
working implementation.
Does the Puppet OpenStack community think that it is the right thing to 
do to wait for the new authentication restructuring code to be merged, 
before the Keystone v3 code is merged?





If anyone has issues/questions with this please speak up!

Thank you,
Gilles

On 07/05/15 11:50, Gilles Dubreuil wrote:


On 07/05/15 11:33, Colleen Murphy wrote:


On Wed, May 6, 2015 at 6:26 PM, Gilles Dubreuil gil...@redhat.com
mailto:gil...@redhat.com wrote:

 It seems ~/.openrc is the only default [...]

The extras module places it at '/root/openrc' [1], so either the extras
module should be changed or the providers should look in /root/openrc,
either way it should be consistent.


Agreed.

Let's use ~/openrc for now then.


Colleen

[1] 
http://git.openstack.org/cgit/stackforge/puppet-openstack_extras/tree/manifests/auth_file.pp#n86


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Solum] OpenStack Design Summit Solum sessions

2015-05-20 Thread Adrian Otto
Gil,

That’s right. We’ll pick up again at the M Summit in Tokyo. If you’d like to 
meet on anything Solum related this week, I’d be happy to arrange the right 
contributors to have those talks.

Adrian

 On May 20, 2015, at 7:48 AM, Gilbert Pilz gilbert.p...@oracle.com wrote:
 
 Looking at the Design Summit schedule and list of Etherpads it appears that 
 there are no sessions scheduled for Solum. Is this correct?
 
 ~ gp
 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [neutron][vpnaas] Supporting multiple local subnets for VPN connections

2015-05-20 Thread Paul Michali
Hi Mathieu,

In Kilo, VPNaaS APIs were no longer marked as experimental. We need to
understand the implication of changing the API. I'm not sure how much
VPNaaS is being used by OpenStack users at this time, either.  I'm hoping
to seek out answers to this at the summit.

If anyone has suggestions, comments, information on this, please chime in. I'll
likely make a BP for multiple subnets, when I get back from the summit.

Lastly, I'm planning on trying to get people interested in VPN to meet on
Friday morning at the summit to discuss all the VPN topics that have been
coming up.

Regards,

Paul Michali (pc_m)

On Wed, May 20, 2015 at 7:54 AM Mathieu Rohon mathieu.ro...@gmail.com
wrote:

 Hi paul,

 this is also something that we would like to introduce for BGP/MPLS VPNs
 [2].

 We choose to allow tenants to attach existing networks ( it might evolve
 to subnets) to bgpvpn-connection objects, by updating the bgpvpn-connection
 object, which is the equivalent of the ipsec-site-connection object.

 So I think that Option B is suitable here.

 Concerning backward compatibility, I think VPNaas is still considered as
 experimental, am I wrong? Do you have to provide backward compatbility in
 this case?

 Mathieu

 [2] https://review.openstack.org/#/c/177740/

 On Wed, May 13, 2015 at 8:59 PM, Paul Michali p...@michali.net wrote:

 Hi,

 There has been, over the years, some mention about having VPN IPSec
 connections supporting multiple CIDRs for local (left side) private
 networks, in addition to the current support for multiple peer CIDRs (right
 side).

 I'm raising the question again with these goals:

 1) Determine if the reference IPSec implementations support this
 capability
 2) Determine if there is a community desire to enhance VPN to support
 this capability (for all VPN types)
 3) See what would be the best way to handle this (changes to API and
 model)
 4) Identify any consequences of making this change.

 Note: My assumption here is something that could be used for any type of
 VPN connection - current IPSec, future BGP/MPLS VPN, DM VPN, etc.

 Here is some information that was gathered from people on the VPN team so
 far. Please correct any inaccuracies and comment on the items...

 (1) It looks like OpenSwan and Libreswan will support this capability.
 StrongSwan will support this with IKEv2. For IKEv1, a Cisco Unity plugin
 extensions is needed. I'm not sure what that implies [1].

 (2) Do we, as a community, want to enhance VPNaaS to provide this
 capability of N:M subnets for VPN implementations? Putting on my vendor
 hat, I can see cases where customers want to be able to only create one
 connection and reference multiple subnets on each end. Is there a desire to
 do this and bake it into the reference implementation (thus making it
 available for other implementations)?

 (3) Currently, the vpn service API includes the router and subnet ID. The
 IPSec connection command includes the peer CIDR(s). For reference, here are
 two of the APIs:

 usage: neutron vpn-service-create [-h] [-f
 {html,json,shell,table,value,yaml}]
   [-c COLUMN] [--max-width integer]
   [--prefix PREFIX]
   [--request-format {json,xml}]
   [--tenant-id TENANT_ID]
 [--admin-state-down]
   [--name NAME] [--description
 DESCRIPTION]
   ROUTER SUBNET

 usage: neutron ipsec-site-connection-create [-h]
 [-f
 {html,json,shell,table,value,yaml}]
 [-c COLUMN]
 [--max-width integer]
 [--prefix PREFIX]
 [--request-format {json,xml}]
 [--tenant-id TENANT_ID]
 [--admin-state-down] [--name
 NAME]
 [--description DESCRIPTION]
 [--mtu MTU]
 [--initiator
 {bi-directional,response-only}]
 [--dpd
 action=ACTION,interval=INTERVAL,timeout=TIMEOUT]
 --vpnservice-id VPNSERVICE
 --ikepolicy-id IKEPOLICY
 --ipsecpolicy-id IPSECPOLICY
 --peer-address PEER_ADDRESS
 --peer-id PEER_ID --peer-cidr
 PEER_CIDRS --psk PSK

 I could envision several ways to handle this (feel free to add more).
 Here are some thoughts on this...

 A) Allow multiple subnets for the vpn service API. The implication here
 is that all types of VPN 

Re: [openstack-dev] [security] Nominating Mike McCune as Security-Doc Core

2015-05-20 Thread Andreas Jaeger

On 05/20/2015 02:20 AM, Dillon, Nathaniel wrote:

To the Security and Docs groups as well as other interested parties,

I would like to nominate Mike McCune to the Security Guide core. He has been 
contributing to the Security Guide for about six months now, and he has been a 
consistent participant improving content and helping new submittors. In 
addition, he knows the inner workings of the guide, having created and merged 
for the security guide the chapter on Sahara.

Please chime in with your agreement, or concerns.


+1,

Andreas
--
 Andreas Jaeger aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi
  SUSE LINUX GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany
   GF: Felix Imendörffer, Jane Smithard, Dilip Upmanyu, Graham Norton,
   HRB 21284 (AG Nürnberg)
GPG fingerprint = 93A3 365E CE47 B889 DF7F  FED1 389A 563C C272 A126


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Solum] OpenStack Design Summit Solum sessions

2015-05-20 Thread Gilbert Pilz
Looking at the Design Summit schedule and list of Etherpads it appears that 
there are no sessions scheduled for Solum. Is this correct?

~ gp
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [neutron][vpnaas] Supporting multiple local subnets for VPN connections

2015-05-20 Thread Mathieu Rohon
Hi paul,

this is also something that we would like to introduce for BGP/MPLS VPNs
[2].

We choose to allow tenants to attach existing networks ( it might evolve to
subnets) to bgpvpn-connection objects, by updating the bgpvpn-connection
object, which is the equivalent of the ipsec-site-connection object.

So I think that Option B is suitable here.

Concerning backward compatibility, I think VPNaas is still considered as
experimental, am I wrong? Do you have to provide backward compatbility in
this case?

Mathieu

[2] https://review.openstack.org/#/c/177740/

On Wed, May 13, 2015 at 8:59 PM, Paul Michali p...@michali.net wrote:

 Hi,

 There has been, over the years, some mention about having VPN IPSec
 connections supporting multiple CIDRs for local (left side) private
 networks, in addition to the current support for multiple peer CIDRs (right
 side).

 I'm raising the question again with these goals:

 1) Determine if the reference IPSec implementations support this capability
 2) Determine if there is a community desire to enhance VPN to support this
 capability (for all VPN types)
 3) See what would be the best way to handle this (changes to API and model)
 4) Identify any consequences of making this change.

 Note: My assumption here is something that could be used for any type of
 VPN connection - current IPSec, future BGP/MPLS VPN, DM VPN, etc.

 Here is some information that was gathered from people on the VPN team so
 far. Please correct any inaccuracies and comment on the items...

 (1) It looks like OpenSwan and Libreswan will support this capability.
 StrongSwan will support this with IKEv2. For IKEv1, a Cisco Unity plugin
 extensions is needed. I'm not sure what that implies [1].

 (2) Do we, as a community, want to enhance VPNaaS to provide this
 capability of N:M subnets for VPN implementations? Putting on my vendor
 hat, I can see cases where customers want to be able to only create one
 connection and reference multiple subnets on each end. Is there a desire to
 do this and bake it into the reference implementation (thus making it
 available for other implementations)?

 (3) Currently, the vpn service API includes the router and subnet ID. The
 IPSec connection command includes the peer CIDR(s). For reference, here are
 two of the APIs:

 usage: neutron vpn-service-create [-h] [-f
 {html,json,shell,table,value,yaml}]
   [-c COLUMN] [--max-width integer]
   [--prefix PREFIX]
   [--request-format {json,xml}]
   [--tenant-id TENANT_ID]
 [--admin-state-down]
   [--name NAME] [--description DESCRIPTION]
   ROUTER SUBNET

 usage: neutron ipsec-site-connection-create [-h]
 [-f
 {html,json,shell,table,value,yaml}]
 [-c COLUMN]
 [--max-width integer]
 [--prefix PREFIX]
 [--request-format {json,xml}]
 [--tenant-id TENANT_ID]
 [--admin-state-down] [--name
 NAME]
 [--description DESCRIPTION]
 [--mtu MTU]
 [--initiator
 {bi-directional,response-only}]
 [--dpd
 action=ACTION,interval=INTERVAL,timeout=TIMEOUT]
 --vpnservice-id VPNSERVICE
 --ikepolicy-id IKEPOLICY
 --ipsecpolicy-id IPSECPOLICY
 --peer-address PEER_ADDRESS
 --peer-id PEER_ID --peer-cidr
 PEER_CIDRS --psk PSK

 I could envision several ways to handle this (feel free to add more). Here
 are some thoughts on this...

 A) Allow multiple subnets for the vpn service API. The implication here is
 that all types of VPN connections would be able to support multiple subnets.

 vpn-service-create ... ROUTER LOCAL_CIDRS

 Issue here is that, if a change is desired on a subnet for a specific
 connection, the service must be updated.

 Today, I think one has to delete the connections from the service, and
 then can update the service. Would need to have ability to update a
 service, but still there is concern about the effect on other connections.
 It just doesn't seem like the right thing to me.


 B) Remove the subnet from the vpn service API and add it to the IPSec
 connection API, like is done with peer CIDR selection, allowing multiples.
 Different VPN types could do the same thing for their connection API.

 

Re: [openstack-dev] [oslo] needed, driver for oslo.db thursday session

2015-05-20 Thread Mike Bayer



On 5/20/15 9:31 AM, Davanum Srinivas wrote:

Thanks Jeremy,

Mike, Roman, Victor, Please see remote connection details in:
https://etherpad.openstack.org/p/YVR-oslo-db-plans

The schedule time for the session is in:
https://libertydesignsummit.sched.org/event/3571aa54b364c62e097da8cd32d97258

Hope you can make it :) yes, please pick one of the 2 choices there
(either sip or google hangout) and drop a note in the etherpad which
one you want me to connect to


probably google hangout, maybe my cats can join in that way also.

confirming this is 2:20 PM PDT and 5:20 PM EDT for me.

I've updated my calendar, talk to you tomorrow.






thanks,
dims


On Tue, May 19, 2015 at 10:17 AM, Jeremy Stanley fu...@yuggoth.org wrote:

On 2015-05-19 09:06:56 -0700 (-0700), Davanum Srinivas wrote:

Ouch. Thanks for the heads up Roman

We have https://wiki.openstack.org/wiki/Infrastructure/Conferencing
which we used yesterday to successfully bridge Clark B. into an I18n
tooling session via Jitsi over the normal conference wireless
network with the built-in mic/speaker in Jim's laptop. Feel free to
use it in your sessions, just try to pick a random conference number
between 6000 and 7999 so nobody steps on the toes of other sessions
which might be using it (maybe add your conference room number to
6000 or something?). Let me or other Infra people know if you have
any questions about or trouble using it!
--
Jeremy Stanley

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev






__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [neutron] How should edge services APIs integrate into Neutron?

2015-05-20 Thread Vikram Choudhary
Hi Keshava,

Please find my response iniline.

Thanks
Vikram

On Tue, May 19, 2015 at 10:10 PM, A, Keshava keshav...@hp.com wrote:

  Hi Vikarm





 1.   What are the use case of “ Dynamic Routing Framework” ?

 https://blueprints.launchpad.net/neutron/+spec/bgp-dynamic-routing

 You are thinking of running both IGP and BGP in the same neutron ?

 Vikram: I didn't get you question. Can you please elaborate.

  In which kind of scenario we need this ? It is better have more
 information.

We also need to think do we really need IGP with in the cloud, or we only
 need BGP for external connectivity .

 In that scenario, we may not go for Routing Framework, and not to
 complicate things too much.

 *If some things works well with L2 with in the cloud lets not touch those
 area. We may need to see where there are real problem.*

 Vikram Usecase is discussed in 
https://review.openstack.org/#/c/125401/;


  2.   What is the use case of “Prefix Clashing” ? You are thinking of
 running multiple routing protocol and they will learn “same prefix +
 Route” ?


 https://blueprints.launchpad.net/neutron/+spec/prefix-clashing-issue-with-dynamic-routing-protocol

 In my opinion, with in the cloud we may not such deployment scenario.



 Vikram Usecase is discussed in 
https://review.openstack.org/#/c/180267/;

  *Let us not mix underlay network with overlay network .
 Both will go as different solution provider, so different business domain.*



 This is my thoughts .



 keshava



 *From:* Vikram Choudhary [mailto:vikram.choudh...@huawei.com]
 *Sent:* Wednesday, May 06, 2015 10:45 AM
 *To:* p...@michali.net; openstack-dev@lists.openstack.org
 *Cc:* Kalyankumar Asangi
 *Subject:* Re: [openstack-dev] [neutron] How should edge services APIs
 integrate into Neutron?



 Hi Paul,



 Thanks for starting this mail thread.  We are also eyeing for supporting
 MPBGP in neutron and will like to actively participate in this discussion.

 Please let me know about the IRC channels which we will be following for
 this discussion.



 Currently, I am following below BP’s for this work.

 https://blueprints.launchpad.net/neutron/+spec/edge-vpn

 https://blueprints.launchpad.net/neutron/+spec/bgp-dynamic-routing

 https://blueprints.launchpad.net/neutron/+spec/dynamic-routing-framework


 https://blueprints.launchpad.net/neutron/+spec/prefix-clashing-issue-with-dynamic-routing-protocol



 Moreover, a similar kind of work is being headed by Cathy for defining an
 intent framework which can extended for various use case. Currently it will
 be leveraged for SFC but I feel the same can be used for providing intend
 VPN use case.


 https://blueprints.launchpad.net/neutron/+spec/intent-based-service-chaining



 Thanks

 Vikram



 *From:* Paul Michali [mailto:p...@michali.net p...@michali.net]
 *Sent:* 06 May 2015 01:38
 *To:* OpenStack Development Mailing List (not for usage questions)
 *Subject:* [openstack-dev] [neutron] How should edge services APIs
 integrate into Neutron?



 There's been talk in VPN land about new services, like BGP VPN and DM VPN.
 I suspect there are similar things in other Advanced Services. I talked to
 Salvatore today, and he suggested starting a ML thread on this...



 Can someone elaborate on how we should integrate these API extensions into
 Neutron, both today, and in the future, assuming the proposal that
 Salvatore has is adopted?



 I could see two cases. The first, and simplest, is when a feature has an
 entirely new API that doesn't leverage off of an existing API.



 The other case would be when the feature's API would dovetail into the
 existing service API. For example, one may use the existing vpn_service API
 to create the service, but then create BGP VPN or DM VPN connections for
 that service, instead of the IPSec connections we have today.



 If there are examples already of how to extend an existing API extension
 that would help in understanding how to do this.



 I see that there are RESOURCE_ATTRIBUTE_MAPs with the information on the
 API, and I see that the plugin has a supported_extension_aliases, but
 beyond that, I'm not really sure how it all hooks up, and how to extend an
 existing extension.



 I'm assuming that the python-neutronclient would also need to be updated.





 So... the intent here is to start some discussion on how we do this, such
 that we have some things figured out before the summit and can save some
 time.



 Thanks in advance,



 Paul Michali (pc_m)

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: