[openstack-dev] [devstack][python/pip][octavia] pip failure during octavia/pike image build by devstack

2018-05-18 Thread rezroo
Hi - let's try this again - this time with pike :-) Any suggestions on how to get the image builder to create a larger loop device? I think that's what the problem is. Thanks in advance. 2018-05-19 05:03:04.523 | 2018-05-19 05:03:04.523 INFO diskimage_builder.block_device.level1.mbr [-]

[openstack-dev] [devstack][python/pip][octavia] pip failure during octavia/ocata image build by devstack

2018-05-17 Thread rezroo
Hello - I'm trying to install a working local.conf devstack ocata on a new server, and some python packages have changed so I end up with this error during the build of octavia image: 2018-05-18 01:00:26.276 |   Found existing installation: Jinja2 2.8 2018-05-18 01:00:26.280 |

Re: [openstack-dev] [keystone][nova] "admin" role and "rule:admin_or_owner" confusion

2016-09-26 Thread rezroo
line 3 admin_or_owner definition requires is_admin to be true: /"admin_or_owner": "is_admin:True or project_id:%(project_id)s",/ which if my understanding is correct, is never true unless the keystone admin_token is used, and is certainly not true the token I got usi

[openstack-dev] [keystone][nova] "admin" role and "rule:admin_or_owner" confusion

2016-09-02 Thread rezroo
Hello - I'm using Liberty release devstack for the below scenario. I have created project "abcd" with "john" as Member. I've launched one instance, I can use curl to list the instance. No problem. I then modify /etc/nova/policy.json and redefine "admin_or_owner" as follows:

[openstack-dev] [neutron][networking-ovn] OVN vs. OpenDayLight

2016-06-09 Thread rezroo
I'm trying to reconcile differences and similarities between OVN and OpenDayLight in my head. Can someone help me compare these two technologies and explain if they solve the same problem, or if there are fundamental differences between them? Thanks, Reza

Re: [openstack-dev] [magnum][keystone][all] Using Keystone /v3/credentials to store TLS certificates

2016-04-13 Thread rezroo
Interesting conversation, and I think I have more of a question than a comment. With my understanding of OpenStack architecture, I don't understand the point about making "Magnum dependent on Barbican". Wouldn't this issue be completely resolved using a driver model, such as delegating the

Re: [Openstack] security group rules

2016-04-11 Thread rezroo
In neutron a security group rule can have different types of "remote" - either a CIDR or another security group. The rule means that your "remote" is another security group - so any VM in security group "default" can reach any port in this security group - so "default" has opened all its

Re: [Openstack] [keystone] publicurl vs adminurl reachability

2016-04-08 Thread rezroo
Hi - Can you or anyone else explain the technical reason for admin endpoint being deprecated? Is it because domain admins have to create user/project using public endpoint, or something more benign - like we don't think it matters in terms of security, and are deprecating the admin endpoint?

[Openstack] [ceilometer] Polling interval behaving differently between Juno and Liberty

2016-04-08 Thread rezroo
Hi - I have been using ceilometer in devstack for a while, and what I used to be able to do is modify pipeline.yaml to set the polling interval for "name: cpu_source" to 60, and then publish it using udp. The diff for the changes are below for the Liberty pipeline.yaml:

Re: [openstack-dev] [keystone] Using multiple token formats in a one openstack cloud

2016-03-08 Thread rezroo
. On 3/8/2016 8:06 AM, Matt Fischer wrote: This would be complicated to setup. How would the Openstack services validate the token? Which keystone node would they use? A better question is why would you want to do this? On Tue, Mar 8, 2016 at 8:45 AM, rezroo <openst...@roodsari.us <mailto:

[openstack-dev] [keystone] Using multiple token formats in a one openstack cloud

2016-03-08 Thread rezroo
Keystone supports both tokens and ec2 credentials simultaneously, but as far as I can tell, will only do a single token format (uuid, pki/z, fernet) at a time. Is it possible or advisable to configure keystone to issue multiple token formats? For example, I could configure two keystone

Re: [openstack-dev] [neutron][external networks] neutron net-external-list returns empty list after restart of neutron-server

2014-01-06 Thread rezroo
? Thanks, Reza On 01/05/2014 02:16 AM, Eugene Nikanorov wrote: Hi rezoo, This is a known bug for HAavana, which has been fixed (but was not backported), please see: https://bugs.launchpad.net/neutron/+bug/1254555 Thanks, Eugene. On Sun, Jan 5, 2014 at 1:25 AM, rezroo r...@dslextreme.com

[openstack-dev] [neutron][external networks] neutron net-external-list returns empty list after restart of neutron-server

2014-01-04 Thread rezroo
Hi all, I'm testing the Havana devstack and I noticed that after killing and restarting the neutron server public networks are not returned when queried via horizon or command line, which in Grizzly devstack the query returns the external network even after a quantum-server restart: