Re: [Openstack] [Horizon][Keystone] Migration to keystone v3

2018-09-29 Thread Davide Panarese
I found the source of the issue. Into keystone configuration I set allow_rescope_scoped_token to false. Setting true this value horizon compute tab works. But now the question is: Why horizon try to rescope authentication token only for compute information? Thanks Davide Panarese Cloud

Re: [Openstack] [Horizon][Keystone] Migration to keystone v3

2018-09-28 Thread Davide Panarese
It’s not nova-compute that report the issue but keystone authentication on computing tab. As I said before, openstack cli working properly with all services, nova included. Davide Panarese Cloud & Solution Architect Enter | The open network and cloud provider Via privata Stefanard

Re: [Openstack] [Horizon][Keystone] Migration to keystone v3

2018-09-28 Thread Davide Panarese
@Paul Yes keystone:5000 is my endpoint. @Eugen OPENSTACK_KEYSTONE_URL = "http://%s/v3 <http://%s/v3>" % OPENSTACK_HOST Still not working. Davide Panarese > On 28 Sep 2018, at 13:50, Eugen Block wrote: > > Hi, > > what is your current horizon confi

[Openstack] [Horizon][Keystone] Migration to keystone v3

2018-09-28 Thread Davide Panarese
den: You are not authorized to perform the requested action: rescope a scoped token. (HTTP 403)" All other tabs works properly. I think that is a keystone issue but i don't understand why with openstack client works perfectly and with horizon not. Anyone can explain what i missed in migrat

[Openstack] [Manila] Metrics about shares into ceilometer/gnocchi

2018-09-05 Thread Davide Panarese
Hi, I’m testing Manila Queens service with CEPHFS backend and it’s quite good. But I don’t understand if there are metrics about shares into ceilometer. I configured notification sections like other services but I can’t see anything about my shares into ceilometer meter-list. I’m using Ceilomete

[Openstack] [Keystone][Federation] Configure Keystone to Keystone Federation

2017-02-21 Thread Davide Panarese
Hi All, anyone try to configure two keystone, one as Identity and the other as Service provider? Did Service Provider communicate properly with Keystone identity provider? How can i use openstack client to test it? Documentation is very incompletely. If someone want to help me would be great.

Re: [Openstack] [Heat] Authentication required error in kilo with keystone v2 APIs

2017-02-03 Thread Davide Panarese
tml> In > keystone v2 we cant create domains as mentioned in this document. Is there > any suitable document for keystone v2 that I can follow? Please let me know > how can I check if keystone store the token properly? > > Regards, > NareshA. > > On Thu, Feb 2, 201

Re: [Openstack] [Heat] Authentication required error in kilo with keystone v2 APIs

2017-02-02 Thread Davide Panarese
s, > NareshA. > > On Wed, Feb 1, 2017 at 4:07 PM, NareshA kumar <mailto:n...@criterionnetworks.com>> wrote: > Davide, > Yes I am using the heat credentials as you have mentioned. But still I am > getting Authentication required error. > > Regards, > N

Re: [Openstack] [Heat] Authentication required error in kilo with keystone v2 APIs

2017-02-01 Thread Davide Panarese
, > line 117, in _list > body = self.client.get(url).json() > File "/usr/lib/python2.7/dist-packages/heatclient/common/http.py", line > 292, in get > return self.client_request("GET", url, **kwargs) > File "/usr/lib/python2.7/dist-packages/heatclien

Re: [Openstack] [Heat] Authentication required error in kilo with keystone v2 APIs

2017-02-01 Thread Davide Panarese
Could you debug heat api call with heat —debug stack-list? Did you associate heat user to service tenant and give it admin role? Davide > On 31 Jan 2017, at 19:54, NareshA kumar wrote: > > Hi, > I am installing heat in kilo with keystone v2 APIs. As per document I have > configured the endpoint

[Openstack] Different Openstack services version cooperation

2017-01-31 Thread Davide Panarese
Hi Guys, i’m thinking about using different versions for OS services into our infrastructure. I mean for example have Keystone to Newton release and Neutron/Nova to Liberty or Mitaka. That’s because i’m not sure that is necessary upgrade everytime all services to last release. Maybe is a stupid

[Openstack] [Neutron] Unable to update provider information for external network

2017-01-31 Thread Davide Panarese
Hello guys, i’m trying to reconfigure our network infrastructure to able to create multiple external network private to single tenant. We run Openstack Kilo actually. Now we have a simple configuration for public network that use VXLAN as provider:network-type and use br-ex with two bonded interf

Re: [Openstack] [NEUTRON][DHCP] iptables chain rate limit dhcp connection

2016-12-31 Thread Davide Panarese
Sorry Gary, i don’t use this driver and however i can’t find in the code. Thanks Davide > On 30 Dec 2016, at 20:00, Gary Kotton wrote: > > https://github.com/openstack/vmware-nsx > > On 12/30/16, 6:36 PM, "Davide Panarese" wrote: > >Hello everyone, >

[Openstack] [NEUTRON][DHCP] iptables chain rate limit dhcp connection

2016-12-30 Thread Davide Panarese
Hello everyone, anyone know where is the source code of neutron that create seguent CHAIN in iptables into dhcp namespaces? -A INPUT -p udp -m udp --dport 67 -m hashlimit --hashlimit-above 5/min --hashlimit-burst 5 --hashlimit-mode srcip --hashlimit-name LIMIT_DHCP_UDP -j DROP -A INPUT -p tcp -

[Openstack] [Ceilometer] Upgrade Ceilometer Juno to Kilo database issue

2016-12-16 Thread Davide Panarese
Hello everyone, we're upgrading ceilometer to kilo. We have tested upgrade in our dev environment and it's works fine. Then we upgrade in production environment but when i start ceilometer-api this error appear: 2016-12-16 19:20:47.025 30700 ERROR ceilometer.api.hooks [-] Failed to connect to

Re: [Openstack] [Opestack][Cinder] Private volume types

2016-11-15 Thread Davide Panarese
es volume type access for the given project. >type-create Creates a volume type. > > Good luck! > > On Tue, Nov 15, 2016 at 10:03 AM, Davide Panarese <mailto:dpanar...@enter.eu>> wrote: >> Hello, >> anyone of us have tried private volume types? How are

[Openstack] [Opestack][Cinder] Private volume types

2016-11-15 Thread Davide Panarese
Hello, anyone of us have tried private volume types? How are they work? I know that were introduced from Kilo release and you can use with Cinder API v2. But who can define these? Just admins i guess, right? In API command you can choose only if is public or not and not the owner. In DB schema

[Openstack] [Neutron] Juno Neutron VPNaaS unstable

2016-09-26 Thread Davide Panarese
Hello, we have big problems with VPNaaS in multiregion Production environment on Openstack Juno with unstable connection between vrouters or vrouter to external pfSense for example.  On network nodes we have different kernel parameters. Anyone knows which should be exactly kernel parameters to c

[Openstack] Problems with RabbitMQ Connection

2016-09-06 Thread Davide Panarese
Hi all, we run Openstack Juno (2014.2.4) on HA configuration. After we have updated RabbitMQ to last release (3.6.5) we have had huge problems with ceilometer, neutron and nova. RabbitMQ shows thousand unacked messages on the most used queues, specially metering, conductor and q-plugin.  Most p

[Openstack] [Heat] Upgrade Heat don't work properly

2015-12-29 Thread Davide Panarese
Hi guys, i've an issue with heat upgrade from icehouse to juno. two region of my infrastructure is ok, upgrade is done. In the third when i do a request one out of three gets OK, 2 requests go in timeout anyone have the same? In the other region i didn’t have any problem. response of client is:

[Openstack] Glance doesn't delete snapshots in Swift

2015-09-11 Thread Davide Panarese
Hi guys, I have an issue with Glance that sometimes mark as deleted in his DB but doesn’t delete snapshots in Swift. Anyone have the same problem or can help me to troubleshoot that? Thanks a lot, Davide ___ Mailing list: http://lists.openstack.org/cgi-