[Openstack-operators] (no subject)

[Zeeshan Ali Shah]

Hi All,

What is the suggestion to monitor (resource, security) of a large scale OS
deployment.

1) For Resource :
I tried Nagios and Zabbix they are good at certain extent but is there any
other suggestion ?


2) For Security /logging etc, i am planning to use Ossec and  Elastic
search . any suggestion for here ?


-- 

Regards

Zeeshan Ali Shah
System Administrator - PDC HPC
PhD researcher (IT security)
Kungliga Tekniska Hogskolan
+46 8 790 9115
http://www.pdc.kth.se/members/zashah
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators

[Openstack-operators] (no subject)

[mobile parmenides]

Hi,


I am trying to deploy openstack following the guide "OpenStack Installation 
Guide for Ubuntu" in Ubuntu 14.04 LTS. I have two nodes: one is for controller, 
the other for compute. But, I have got stucked at neutron. After finishing 
configration, the results of 'neutron agent-list' command displayed the birdge 
of controller can not start. 


+--+++---
| id   | agent_type | host  
   | availability_zone  | alive  | 
+--+++---
|| DHCP agent | controller | nova| :-)  
| 
|| Metadata agent | controller |  | 
:-)  | 
|| L3 agent   | controller | nova| :-)  
| 
|| Linux bridge agent | compute   | 
 | :-)  | 
+--+++---

I have checked the '/etc/neutron/plugins/ml2/linuxbridge_agent.ini' file which 
is in accordance with the guid.


[linux_bridge]
physical_interface_mappings = provider:eth0

[securitygroup]
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

[vxlan]
enable_vxlan = True
local_ip = 192.168.6.2
l2_population = True

Then, I checked the log file '/var/log/neutron/neutron-linuxbridge-agent.log', 
and there is an error message repeated many times as follows:

2016-07-07 00:28:01.872 6 ERROR neutron Traceback (most recent call last):
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/bin/neutron-linuxbridge-agent", line 10, in 
2016-07-07 00:28:01.872 6 ERROR neutron sys.exit(main())
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/neutron/cmd/eventlet/plugins/linuxbridge_neutron_agent.py",
 line 21, in main
2016-07-07 00:28:01.872 6 ERROR neutron agent_main.main()
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/neutron/plugins/ml2/drivers/linuxbridge/agent/linuxbridge_neutron_agent.py",
 line 898, in main
2016-07-07 00:28:01.872 6 ERROR neutron manager = 
LinuxBridgeManager(bridge_mappings, interface_mappings)
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/neutron/plugins/ml2/drivers/linuxbridge/agent/linuxbridge_neutron_agent.py",
 line 76, in __init__
2016-07-07 00:28:01.872 6 ERROR neutron self.check_vxlan_support()
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/neutron/plugins/ml2/drivers/linuxbridge/agent/linuxbridge_neutron_agent.py",
 line 628, in check_vxlan_support
2016-07-07 00:28:01.872 6 ERROR neutron if self.vxlan_ucast_supported():
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/neutron/plugins/ml2/drivers/linuxbridge/agent/linuxbridge_neutron_agent.py",
 line 591, in vxlan_ucast_supported
2016-07-07 00:28:01.872 6 ERROR neutron test_iface = 
self.ensure_vxlan(seg_id)
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/neutron/plugins/ml2/drivers/linuxbridge/agent/linuxbridge_neutron_agent.py",
 line 286, in ensure_vxlan
2016-07-07 00:28:01.872 6 ERROR neutron return None
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/oslo_utils/excutils.py", line 220, in __exit__
2016-07-07 00:28:01.872 6 ERROR neutron self.force_reraise()
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/oslo_utils/excutils.py", line 196, in 
force_reraise
2016-07-07 00:28:01.872 6 ERROR neutron six.reraise(self.type_, 
self.value, self.tb)
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/neutron/plugins/ml2/drivers/linuxbridge/agent/linuxbridge_neutron_agent.py",
 line 276, in ensure_vxlan
2016-07-07 00:28:01.872 6 ERROR neutron **args)
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/neutron/agent/linux/ip_lib.py", line 243, in 
add_vxlan
2016-07-07 00:28:01.872 6 ERROR neutron self._as_root([], 'link', cmd)
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/neutron/agent/linux/ip_lib.py", line 94, in 
_as_root
2016-07-07 00:28:01.872 6 ERROR neutron 
log_fail_as_error=self.log_fail_as_error)
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/neutron/agent/linux/ip_lib.py", line 103, in 
_execute
2016-07-07 00:28:01.872 6 ERROR neutron 
log_fail_as_error=log_fail_as_error)
2016-07-07 00:28:01.872 6 ERROR neutron   File 
"/usr/lib/python2.7/dist-packages/neutron/agent/linux/utils.py", line 140, in 
exe

[Openstack-operators] (no subject)

[Serguei Bezverkhi (sbezverk)]

Hello folks,

I am curious if any of you allow your cliens to access let's say glance API by 
using glance client cli. If you do, I would appreciate if you could share how 
it is done. Do you expose glance api ports to outside with some sort of 
authentication proxy protection or it is done differently.

Thank you

Serguei

___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators

[Openstack-operators] (no subject)

[Amy Marrich]

Hi everyone,

If you’re running OpenStack, please participate in the User Survey
 to share more about the technology
you are using and provide feedback for the community by *August 21 - hurry,
it’s next week!!* By completing a deployment, you will qualify as an AUC
and receive a $300 USD ticket to the two upcoming Summits.

Please help us spread the word. a we're trying to gather as much real-world
deployment data as possible to share back with both the operator and
developer communities.

We are only conducting one survey this year, and the report will be
published at the Berlin Summit
.  II you would like
OpenStack user data in the meantime, check out the analytics dashboard
 updates in real time, throughout the
year.

The information provided is confidential and will only be presented in
aggregate unless you consent to make it public.

The deadline to complete the survey and be part of the next report is
next *Tuesday,
August 21** at 23:59 UTC.*

   - You can login and complete the OpenStack User Survey here:
   http://www.openstack.org/user-survey
   
   - If you’re interested in joining the OpenStack User Survey Working
   Group to help with the survey analysis, please complete this form:
   https://openstackfoundation.formstack.com/forms/user_survey_working_group
   

   - Help us promote the User Survey: https://twitter.com/Op
   enStack/status/993589356312088577
   


Please let me know if you have any questions.

Thanks,
Amy

Amy Marrich (spotz)
OpenStack User Committee
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators

Re: [Openstack-operators] (no subject)

[David Moreau Simard]

For monitoring, there seems to be a lot of buzz/interest about the new Monasca 
project (https://wiki.openstack.org/wiki/Monasca) but you're probably going to 
get as many different solutions are there are products.
You can have a look at the etherpad from the Paris Ops summit session on 
monitoring to give you an idea: 
https://etherpad.openstack.org/p/kilo-summit-ops-monitoring

We've found Shinken to be able to scale pretty well and cope without too much 
problems to the thousands of services we're throwing at it. We use Graphite for 
data collection and Grafana for data visualization.

For logging, the Openstack Infra team uses the ELK stack (Elastic search, 
Logstash, Kibana) for collecting/aggregating/visualizing/searching logs: 
http://ci.openstack.org/logstash.html

I'll let the other operators chime in on the security side of things.
--
David Moreau Simard

From: Zeeshan Ali Shah mailto:zas...@kth.se>>
Date: Monday, January 12, 2015 at 6:57 AM
To: 
"openstack-operators@lists.openstack.org<mailto:openstack-operators@lists.openstack.org>"
 
mailto:openstack-operators@lists.openstack.org>>
Subject: [Openstack-operators] (no subject)

Hi All,

What is the suggestion to monitor (resource, security) of a large scale OS 
deployment.

1) For Resource :
I tried Nagios and Zabbix they are good at certain extent but is there any 
other suggestion ?


2) For Security /logging etc, i am planning to use Ossec and  Elastic search . 
any suggestion for here ?


--

Regards

Zeeshan Ali Shah
System Administrator - PDC HPC
PhD researcher (IT security)
Kungliga Tekniska Hogskolan
+46 8 790 9115
http://www.pdc.kth.se/members/zashah
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators

Re: [Openstack-operators] (no subject)

[Joseph Bajin]

We let our people access the Glance API.  Glance uses Keystone, so user
authentication is done the same way all the other services are done within
OpenStack.  We allow the glance api ports to be available to them so they
can use the service.

What are you thinking that would prevent you from offering this to your
customers?  I'm curious to know as glance is used in a lot of places.

On Fri, Jul 29, 2016 at 4:30 PM, Serguei Bezverkhi (sbezverk) <
sbezv...@cisco.com> wrote:

>
> Hello folks,
>
> I am curious if any of you allow your cliens to access let's say glance
> API by using glance client cli. If you do, I would appreciate if you could
> share how it is done. Do you expose glance api ports to outside with some
> sort of authentication proxy protection or it is done differently.
>
> Thank you
>
> Serguei
>
> ___
> OpenStack-operators mailing list
> OpenStack-operators@lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators