[Openstack] how to configure nova-compute to use an ssh wrapper script?

2014-09-15 Thread Daniel Petersen
Hi, When attempting live migration, I'm seeing this error: ***begin*** Command: ssh mkdir -p /var/lib/nova/instances/7c8cf258-02e7-4fa2-85b0-a3ec26b0ddd6 Exit code: 255 Stdout: '' Stderr: 'Permission denied (gssapi-keyex,gssapi-with-mic).\r\n' ***end*** This error is expected since we use kerbe

[Openstack] 'allow_same_net_traffic=True' seems to have no effect

2014-08-21 Thread Daniel Petersen
Greetings, **brief** two instances X and Y are members of security group A. Despite the following explicit setting in nova.conf: allow_same_net_traffic=True ...the instances are only allowed to communicate according to the rules defined in security group A. **detail** I first noticed this at

Re: [Openstack] Adapting the install guide network setup for production

2014-06-13 Thread Daniel Petersen
t architectures, and > read the Security Guide for securing endpoints and the rest of the cloud. > > Next month we'll have an Architecture Guide to give even more input and > guidance for production clouds. > > Anne > > >> >> >> George >> >>

[Openstack] Adapting the install guide network setup for production

2014-06-12 Thread Daniel Petersen
edit: failed to add '[Openstack]' to the subject line previously. Hopefully avoiding everyone's spam filter this time around! Hi, Using the network strategy from the 'Installation Guide for Ubuntu' here: http://docs.openstack.org/icehouse/install-guide/install/apt/content/basics-networking-neutr

[Openstack] Adapting the install guide network setup for production

2014-06-11 Thread Daniel Petersen
Hi, Using the network strategy from the 'Installation Guide for Ubuntu' here: http://docs.openstack.org/icehouse/install-guide/install/apt/content/basics-networking-neutron.html How might one adapt this for a production setup, perhaps in the context of security? What are the needed configuratio