Re: [openstack-dev] Nova config drive rebuilding

On Wed, 7 Aug 2013, Uri Simchoni wrote: > > > Date: Wed, 7 Aug 2013 18:25:47 +1200 > > From: robe...@robertcollins.net > > To: openstack-dev@lists.openstack.org > > Subject: Re: [openstack-dev] Nova config drive rebuilding > > > > On 7 August 2013 18:08, Ur

Re: [openstack-dev] Motion to start using Gerrit for TC votes

On 06/08/13 17:32 -0300, Monty Taylor wrote: Hi! Currently, we make motions by email, then we discuss them by mailing list, then we discuss them more in IRC, then we vote on them - at which point the actual thing voted on may or may not get recorded somewhere easy to find. What if instead we ha

Re: [openstack-dev] Nova config drive rebuilding

On Wed, 7 Aug 2013, Robert Collins wrote: > On 7 August 2013 18:08, Uri Simchoni wrote: > > Hi, > > > > As far as I can tell (from testing and looking at the code, at least for > > libvirt driver), the config drive is not rebuilt after initial spawning > > (except for some migration scenarios),

Re: [openstack-dev] class extending tables.DeleteAction not having delete method called

Hello, I actually was dealing with a similar problem the other day. After a little debugging… The solution I found was the Post action was begin caught by the view that the url matched. So to fix this issues I actually created a method under the view… Not sure if this will help… url.py urlpat

[openstack-dev] Blueprint review

Dear all. I've registered a blueprint [1] to improve and extend the current image cache handler on the compute nodes, so that we can have more cache handlers (such as LRU). [1] https://blueprints.launchpad.net/nova/+spec/multiple-image-cache-handlers Would it be possible to review it (and maybe

Re: [openstack-dev] [Heat] The way to use one config file with new oslo module

On Wed, Aug 07 2013, Clint Byrum wrote: > Does oslo.config or anything in oslo-incubator give us some help with > deprecating old config files? No, but as far as I know, it should be compatible anyway since the 3 files just got merged in to one. No options where moved nor syntax changed by this,

Re: [openstack-dev] Motion to start using Gerrit for TC votes

On Tue, Aug 06 2013, Monty Taylor wrote: > This would allow for clear voting by both the TC and others - is > consistent with tooling we ALL know how to use, and has the benefit of > producing a clear published record of the results when it's done. That > way also, TC members and others can do a d

[openstack-dev] [Keystone] Validating UUID tokens with V3 API

Regarding my blueprint https://blueprints.launchpad.net/python-keystoneclient/+spec/keystoneclient-auth-token and Guang's bug https://bugs.launchpad.net/python-keystoneclient/+bug/1207922 (auth_token middleware always use v2.0 to request admin token), i'm trying to make a v3 client capable of valid

Re: [openstack-dev] [Keystone] Validating UUID tokens with V3 API

Hi Jamie, So potentially part of this solution may be one of the blueprints and implementation I am currently working on to allow policy rules to specify fields in the target entity that an API is accessing, see: https://blueprints.launchpad.net/keystone/+spec/policy-on-api-target https://revie

Re: [openstack-dev] [Horizon][Security] BREACH/CRIME Attack Information

Gabriel Hurley wrote: > Many of you have probably heard about the "BREACH" attack/security > vulnerability in HTTPS traffic that was disclosed recently, and I'd like to > take a moment to provide some info about how that affects Horizon. I'm not > following the official vulnerability management

Re: [openstack-dev] rpc.call to nova-conductor NOT return

Ok, we found the reason. We forgot the eventlet.monkeypatch() to patch those system modules to be greenthread-friendly. -Lianhao Lu, Lianhao wrote on 2013-08-07: > Hi guys, > > Sorry to bug, but I have met a problem about the rpc call. I wrote some > python code to rpc.call to nova-condcutor,

Re: [openstack-dev] Motion to start using Gerrit for TC votes

Monty Taylor wrote: > What if instead we had a repo with a bunch of ReStructureText in it - > perhaps a copy of the TC charter and then a dir for additional things > the TC has decided. That repo would be autopublished to a non-wiki > website ... and the core team for the repo was the TC. EXCEPT, w

[openstack-dev] [Nova] Network stuff in Nova API v3

Hi, guys, Currently we have one core and two extensions that related network in Nova API v3. They are ips, attach_interface and multinic. I have two questions for them. The first question is about ips and attach_interface. The below was the index's response of ips and attach_interface: ips:

Re: [openstack-dev] [glance] Should image size/checksum be immutable for active images?

Typically its the not-very-interesting case of changing the size from 0 to the real size after the data has uploaded. That happens before the image state transitions to 'active'. Do u know what cases the 'size' or 'checksum' needs to be modified? I'd hope for immutability in these 2 things

Re: [openstack-dev] Nova config drive rebuilding

On 7 August 2013 18:42, Uri Simchoni wrote: > > Looking at the http-based alternative, can it be made to be more secure? On > my OVS-based system I was able to easily steal the metadata of another > instance on the same network by changing my instance's IP address. It appears > to be suitable

Re: [openstack-dev] Nova config drive rebuilding

On 7 August 2013 19:41, Scott Moser wrote: > Its never ok to update an 'instance-mounted' , and realistically you have > no way of knowing the difference between 'instance-mounted' and > 'instance-attached'. I'd say on reboot and shutdown you can update it, but > thats really hardly useful as a m

Re: [openstack-dev] [Horizon][Security] BREACH/CRIME Attack Information

On 7 August 2013 20:30, Thierry Carrez wrote: > Gabriel Hurley wrote: >> Many of you have probably heard about the "BREACH" attack/security >> vulnerability in HTTPS traffic that was disclosed recently, and I'd like to >> take a moment to provide some info about how that affects Horizon. I'm not

Re: [openstack-dev] [Nova] Network stuff in Nova API v3

multi-nic added an extra virtual interface on a seprate network, like adding a port: http://docs.openstack.org/trunk/openstack-compute/admin/content/using-multi-nics.html I think we need to keep a nova-network focused api extension, and a separate neutron focused api extension, because we have not

Re: [openstack-dev] Nova config drive rebuilding

I have been looking at ConfigDrive and wondering if we should update it. ConfigDrive is only really useful if you can't/don't use DHCP. I have thought about a (slightly messy) alternative: * use ConfigDrive only for basic networking config on the first nic (i.e. just enough to get to the metadata

Re: [openstack-dev] [Neutron] Configuration of Openflow controller reachability information in OVS from Openstack

Hi Ravi- With respect to NICIRA NVP Plugin in Quantum, All the processing is done with respect to Nicira NVP. Also, the Controller cluster arguments are provided from ini file. Can you point me to where the OVS certificates are handled in Nicira code base for quantum. -- Trinath Somanchi - B

Re: [openstack-dev] [Neutron]Connecting a VM from one tenant to a non-shared network in another tenant

Hi Yong, Garry has recommended that I will you the following: In: /opt/stack/nova/nova/network/neutronv2/api.py In the def _get_available_networks function, the developer has added a specific line of code filtering networks by the tenant_id. Around line 123: search_opts = {"tenant_id": project_i

Re: [openstack-dev] [Nova][Cinder] Guest Assisted Snapshots

+1 to Russell's proposal. I came to similar conclusions when looking at snapshots for the XenAPI NFS driver (seems similar to the qemu NFS option, except uses VHD not qcow2). I wondered about, but discarded, the idea about a new cinder-compute worker on each compute node for all volume operations

Re: [openstack-dev] [Savanna] Cluster launch error

Linus, Sorry for taking so long to respond. The cluster machines were removed by rollback which was caused by exception: 2013-08-04 11:08:33.907 3542 INFO savanna.service.instances [-] Cluster 'cluster-test-01' creation rollback (reason: unexpected type for addr arg) Looks like currently code h

Re: [openstack-dev] Nova config drive rebuilding

> Date: Wed, 7 Aug 2013 21:15:26 +1200 > From: robe...@robertcollins.net > To: openstack-dev@lists.openstack.org > Subject: Re: [openstack-dev] Nova config drive rebuilding > > On 7 August 2013 18:42, Uri Simchoni wrote: > >> >> Looking at the http-based al

Re: [openstack-dev] [Heat] The way to use one config file with new oslo module

FYI, I reported a bug about that. https://bugs.launchpad.net/heat/+bug/1209141 Let's start the discussion with Heat developers to see how we could fix that, since it concerns single config file. Emilien Macchi # OpenStack Engineer // eNovanc

[openstack-dev] missing information about change-id in GerritWorkflow wiki?

Hi, I just completely messed up in here. Was reading a manual about Gerrit workflow: https://wiki.openstack.org/wiki/Gerrit_Workflow#Committing_Changes And then there's link to here about how to build commit messages: https://wiki.openstack.org/wiki/GitCommitMessages and I'm starting to see "

Re: [openstack-dev] [Keystone] V3 Extensions Discoverability

Please excuse me for being vague with many parts of this reply. Since I'm still learning the terminology used throughout this project, I chose to be non-specific rather than risk using the wrong name and distract from the points I'm trying to make. >From a client perspective, the most important

Re: [openstack-dev] missing information about change-id in GerritWorkflow wiki?

Roman, Basically, that is explained in Gerrit built-in documentation, for example: https://review.openstack.org/Documentation/user-changeid.html I guess, the Wiki pages assumes that reader has some grade of experience with Gerrit, and require more context to be added to them. Hope that helps.

Re: [openstack-dev] [DevStack] Python dependencies: PyPI vs distro packages

On 08/06/2013 11:39 PM, Robert Collins wrote: > On 7 August 2013 14:36, Monty Taylor wrote: >> >> >> On 08/06/2013 11:14 PM, Robert Collins wrote: >>> On 7 August 2013 11:22, Jay Buffington wrote: >>> ln -s /usr/lib64/python2.6/site-packages/libvirtmod_qemu.so $(VENV)/lib/python2.

Re: [openstack-dev] [climate] Mirantis proposal to extend Climate to support virtual resources reservation

Hello, Patrick, Scott! I'll try to answer all your comments and show what vision we have now (after some internal discussions lasted all yesterday). As for now we're under strong impression that the main consumer of Reservation-as-a-Service (as long as virtual resources are concerned) will be HEA

Re: [openstack-dev] [climate] Mirantis proposal to extend Climate to support virtual resources reservation

Patrick, responding to your comments: 1) Dina mentioned "start automatically" and "start manually" only as examples of how these politics may look like. It doesn't seem to be a correct approach to put orchestration functionality (that belongs to Heat) in Climate. That's why now we can implement th

Re: [openstack-dev] [climate] Mirantis proposal to extend Climate to support virtual resources reservation

Scott, thank you so much for taking part in our discussion! 0) Introducing the eviction mechanism is really interesting idea, it potentially makes reservation service more flexible and well organized. But we need to think about the case - if user, who has already created a reservation, has lower p

Re: [openstack-dev] [Nova] Network stuff in Nova API v3

On 2013年08月07日 17:38, John Garbutt wrote: multi-nic added an extra virtual interface on a seprate network, like adding a port: http://docs.openstack.org/trunk/openstack-compute/admin/content/using-multi-nics.html That just describe create instance with multinic, that we will support. Still have

Re: [openstack-dev] missing information about change-id in GerritWorkflow wiki?

The git review -s step earlier on the Gerrit_Workflow page is what I generally use to install the Change-Id commit hook. I added some additional notes on the wiki page to explain that. -Ben On 2013-08-07 07:44, Roman Gorodeckij wrote: Hi, I just completely messed up in here. Was reading a

Re: [openstack-dev] [Horizon][Security] BREACH/CRIME Attack Information

My understanding of such attacks is that they require a point-of-presence within the browser to perform the injection which in turn enables the side channel. As clients/users won't be interacting with the API using a browser I'm not 100% convinced that we need to worry about defending against BREAC

[openstack-dev] [Nova] Review requests

Hi, At the moment we have some blocking bugs with the VMware drivers. Would it be possible to get some reviews for this: https://review.openstack.org/#/c/39046/ - tempest tests fail with rescue/unrescue https://review.openstack.org/#/c/40105/ - attempting to attach/detach a volume causes an exce

Re: [openstack-dev] [Nova] Hypervisor Version Support

On 08/06/2013 10:08 PM, Kaushik Chandrashekar wrote: > Hi All, > > We are working on adding hypervisors version support for xen, > https://blueprints.launchpad.net/nova/+spec/xen-support-for-hypervisor-versions > > The initial design is, > > 1. The image would have a property with hypervisor ve

Re: [openstack-dev] [Nova] Hypervisor Version Support

On 08/07/13 at 07:38am, Kaushik Chandrashekar wrote: Hi All, We are working on adding hypervisors version support for xen, https://blueprints.launchpad.net/nova/+spec/xen-support-for-hypervisor-versions The initial design is, 1. The image would have a property with hypervisor version require

Re: [openstack-dev] [Neutron] Configuration of Openflow controller reachability information in OVS from Openstack

Hi Trinath, I could get this information from Grizzly installation guide - Register this Hypervisor Transport Node (Open vSwitch) with Nicira NVP: # Set the open

Re: [openstack-dev] [Nova] Hypervisor Version Support

On 08/07/2013 10:14 AM, Andrew Laski wrote: > On 08/07/13 at 07:38am, Kaushik Chandrashekar wrote: >> Hi All, >> >> We are working on adding hypervisors version support for xen, >> https://blueprints.launchpad.net/nova/+spec/xen-support-for-hypervisor-versions >> >> >> The initial design is, >> >>

Re: [openstack-dev] Blueprint for Nova native image building

On 08/06/2013 06:06 PM, Ian McLeod wrote: > On Tue, 2013-08-06 at 16:02 -0300, Monty Taylor wrote: > The proof of concept approach is limited to full-virt hypervisors. It's > unclear to me if there's a way we can make this work for Xen-backed > installs without the kind of lower level access to th

Re: [openstack-dev] Blueprint for Nova native image building

On Tue, Aug 06, 2013 at 12:20:00PM -0400, Russell Bryant wrote: > On 08/06/2013 11:53 AM, Ian Mcleod wrote: > > Hello, > > > > A blueprint has been registered regarding API additions to Nova to > > enable the creation of base images from external OS install sources. > > This provides a way to buil

Re: [openstack-dev] Blueprint for Nova native image building

On 08/07/2013 10:34 AM, Russell Bryant wrote: >>> That said - if we did service-ify the tool, wouldn't glance be a more >>> appropriate place for that sort of thing? >> >> Possibly, though the proof of concept (and we hope our proposed >> nova-based re-implementation) can build both glance images a

Re: [openstack-dev] Blueprint for Nova native image building

On 6 August 2013 23:06, Ian McLeod wrote: > The proof of concept approach is limited to full-virt hypervisors. It's > unclear to me if there's a way we can make this work for Xen-backed > installs without the kind of lower level access to the virt environment > that we'll get if we exist inside o

Re: [openstack-dev] Blueprint for Nova native image building

On Wed, Aug 07, 2013 at 10:34:57AM -0400, Russell Bryant wrote: > On 08/06/2013 06:06 PM, Ian McLeod wrote: > > On Tue, 2013-08-06 at 16:02 -0300, Monty Taylor wrote: > > The proof of concept approach is limited to full-virt hypervisors. It's > > unclear to me if there's a way we can make this wor

Re: [openstack-dev] [Nova] Hypervisor Version Support

I guess this is the same issue we faced with the capabilities filters and things, when drivers don't report stats in a consistent format. If we dictate the driver reports things in a standard format, it will make our lives much easier, I think. Currently, some report their own format, and a few (

Re: [openstack-dev] Blueprint for Nova native image building

On Wed, Aug 07, 2013 at 10:44:29AM -0400, Russell Bryant wrote: > On 08/07/2013 10:34 AM, Russell Bryant wrote: > >>> That said - if we did service-ify the tool, wouldn't glance be a more > >>> appropriate place for that sort of thing? > >> > >> Possibly, though the proof of concept (and we hope ou

Re: [openstack-dev] Motion to start using Gerrit for TC votes

On Wed, Aug 7, 2013 at 3:58 AM, Thierry Carrez wrote: > Monty Taylor wrote: > > What if instead we had a repo with a bunch of ReStructureText in it - > > perhaps a copy of the TC charter and then a dir for additional things > > the TC has decided. That repo would be autopublished to a non-wiki > >

Re: [openstack-dev] [Neutron] Configuration of Openflow controller reachability information in OVS from Openstack

Hi Ravi- We want achieve the same from Quantum Client through Quantum OVS Agent. Is there any such implementation available for the same with openstack. I think, the below manual mentions the manual configuration using ovs cli. Thanking you. -- Trinath Somanchi - B39208 trinath.soman...@free

Re: [openstack-dev] [Nova] Hypervisor Version Support

- Original Message - > From: "Russell Bryant" > To: openstack-dev@lists.openstack.org > Sent: Wednesday, August 7, 2013 10:36:04 AM > Subject: Re: [openstack-dev] [Nova] Hypervisor Version Support > > On 08/07/2013 10:14 AM, Andrew Laski wrote: > > On 08/07/13 at 07:38am, Kaushik Chandra

Re: [openstack-dev] [Nova] Hypervisor Version Support

On the Hyper-V side we are also interested in this feature as for example VHDX images are supported starting with Hyper-V Server 2012. On the versioning convention, I don't see particular issues as long as the version ordering arithmetic works. Said that, I'd vote for a consistent numeric only

Re: [openstack-dev] [Keystone] V3 Extensions Discoverability

On Wed, Aug 7, 2013 at 7:58 AM, Sam Harwell wrote: > Please excuse me for being vague with many parts of this reply. Since I'm > still learning the terminology used throughout this project, I chose to be > non-specific rather than risk using the wrong name and distract from the > points I'm trying

Re: [openstack-dev] [Nova] Hypervisor Version Support

On 08/07/13 at 08:17am, Shawn Hartsock wrote: - Original Message - From: "Russell Bryant" To: openstack-dev@lists.openstack.org Sent: Wednesday, August 7, 2013 10:36:04 AM Subject: Re: [openstack-dev] [Nova] Hypervisor Version Support On 08/07/2013 10:14 AM, Andrew Laski wrote: > On 0

Re: [openstack-dev] [DevStack] Python dependencies: PyPI vs distro packages

I agree triple-o will help a lot here although I would disagree that package rollback is an illusion. I would call it more of a hard problem instead since nothing is really impossible :) If say yum had a git "like" log then I don't think it would be impossible to yum "checkout" a previous syste

[openstack-dev] Devstack + ML2 setup issue

Hi, all! Following request from ML2 team discussed during weekly IRC meeting, i'm writing about issue with devstack and ML2 setup. I have clear Ubuntu 12.04 installation and devstack just cloned from repository. In devstack folder there is localrc file with basic options to enable ML2. According to

Re: [openstack-dev] [glance] Should image size/checksum be immutable for active images?

Stuart, when property protections are available in Havana, a provider can choose to make these immutable. Or are you thinking that this is too important to leave up to provider configuration? From: stuart.mcla...@hp.com [stuart.mcla...@hp.com] Sent: Wedn

Re: [openstack-dev] Blueprint for Nova native image building

On 08/07/2013 10:46 AM, Daniel P. Berrange wrote: > On Tue, Aug 06, 2013 at 12:20:00PM -0400, Russell Bryant wrote: >> On 08/06/2013 11:53 AM, Ian Mcleod wrote: >>> Hello, >>> >>> A blueprint has been registered regarding API additions to Nova to >>> enable the creation of base images from external

Re: [openstack-dev] Devstack + ML2 setup issue

Hi Dmitry, This is known problem. It is being addressed by https://bugs.launchpad.net/neutron/+bug/1209151 https://review.openstack.org/#/c/40636/1 Thanks, Eugene. On Wed, Aug 7, 2013 at 7:59 PM, Dmitriy Andrushko wrote: > Hi, all! > Following request from ML2 team discussed during weekly IRC

Re: [openstack-dev] Motion to start using Gerrit for TC votes

Thierry Carrez writes: > Monty Taylor wrote: >> What if instead we had a repo with a bunch of ReStructureText in it - >> perhaps a copy of the TC charter and then a dir for additional things >> the TC has decided. That repo would be autopublished to a non-wiki >> website ... and the core team for

Re: [openstack-dev] missing information about change-id in GerritWorkflow wiki?

Roman Gorodeckij writes: > Hi, > > I just completely messed up in here. > > Was reading a manual about Gerrit workflow: > https://wiki.openstack.org/wiki/Gerrit_Workflow#Committing_Changes > And then there's link to here about how to build commit messages: > https://wiki.openstack.org/wiki/Git

[openstack-dev] [keystone] Feature Proposal Freeze: August 28th

With regard to: https://wiki.openstack.org/wiki/FeatureProposalFreeze This is an optional deadline that at least two other projects are enforcing: Nova (Aug 21) and Neutron (Aug 23). Although it's a bit late in cycle, I'd like to ask keystone contributors to follow the same, albeit at a slightl

Re: [openstack-dev] [DevStack] Python dependencies: PyPI vs distro packages

On 2013-08-07 15:53:54 + (+), Joshua Harlow wrote: > I agree triple-o will help a lot here although I would disagree > that package rollback is an illusion. I would call it more of a > hard problem instead since nothing is really impossible :) [...] SCO OpenServer (shudder) for all its iss

Re: [openstack-dev] [glance] Should image size/checksum be immutable for active images?

Excerpts from stuart.mclaren's message of 2013-08-07 02:13:15 -0700: > > Typically its the not-very-interesting case of changing > the size from 0 to the real size after the data has uploaded. > > That happens before the image state transitions to 'active'. > Shouldn't the size be NULL, not 0,

[openstack-dev] [Swift] Swift 1.9.9 RC available

Today we have released Swift 1.9.1 (RC1). The tarball for the RC is at http://tarballs.openstack.org/swift/swift-milestone-proposed.tar.gz This release was initially prompted by a bug found by Peter Portante (https://bugs.launchpad.net/swift/+bug/1196932) and includes a patch for it. All clusters

Re: [openstack-dev] missing information about change-id in GerritWorkflow wiki?

On 2013-08-07 11:31, jebl...@openstack.org wrote: As mentioned in another reply, just run "git review -s" and it will install it for you. Moreover, the first time you run "git review", git-review itself will install the hook and amend your commit if needed to add the Change-Id header. Ah, I wi

Re: [openstack-dev] Motion to start using Gerrit for TC votes

On 2013-08-07 09:35:33 +0200 (+0200), Flavio Percoco wrote: [...] > Would it make sense to have a copy of the votes at the end of that RST > file (or somewhere in that commit) ? This will replicate vote results > to our repo instead of just keeping them in Gerrit - in case the later > goes down. [.

Re: [openstack-dev] [DevStack] Python dependencies: PyPI vs distro packages

Interesting, I should look into conary. I was hoping that DNF (the yum rewrite) would be a little better at this stage, but it still seems a ways off. And I'm also not sure if DNF is attempting to even address this kind of stuff, although I don't quite see how RH if they plan on selling RDO can a

Re: [openstack-dev] Motion to start using Gerrit for TC votes

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/07/2013 04:51 AM, Julien Danjou wrote: > On Tue, Aug 06 2013, Monty Taylor wrote: > >> This would allow for clear voting by both the TC and others - is >> consistent with tooling we ALL know how to use, and has the >> benefit of producing a c

Re: [openstack-dev] Motion to start using Gerrit for TC votes

On 08/07/2013 05:58 AM, Thierry Carrez wrote: > Monty Taylor wrote: >> What if instead we had a repo with a bunch of ReStructureText in it - >> perhaps a copy of the TC charter and then a dir for additional things >> the TC has decided. That repo would be autopublished to a non-wiki >> website ..

Re: [openstack-dev] [Neutron] Configuration of Openflow controller reachability information in OVS from Openstack

Right, Nicira controller needs manual OVS certificate addition. >From my earlier mail *"Nicira approach today is to add ovs certificates onto ovs controller manually."* Hence, I like Srini's proposal. I suggest to write extensions to your custom plugin. Once accepted it can be part of the core.

Re: [openstack-dev] [DevStack] Python dependencies: PyPI vs distro packages

On 08/07/2013 12:53 PM, Joshua Harlow wrote: > I agree triple-o will help a lot here although I would disagree that > package rollback is an illusion. I would call it more of a hard > problem instead since nothing is really impossible :) illusion with current packaging systems yum/rpm and apt/dp

Re: [openstack-dev] Blueprint for Nova native image building

Excerpts from Ian McLeod's message of 2013-08-06 15:06:34 -0700: > On Tue, 2013-08-06 at 16:02 -0300, Monty Taylor wrote: > > > > On 08/06/2013 03:46 PM, Russell Bryant wrote: > > > On 08/06/2013 12:20 PM, Russell Bryant wrote: > > >> On 08/06/2013 11:53 AM, Ian Mcleod wrote: > > >>> Hello, > > >>

Re: [openstack-dev] [climate] Mirantis proposal to extend Climate to support virtual resources reservation

Hi Scott, Thanks for your inputs. Please see some comments below. BR, Patrick On 8/6/13 6:58 PM, Scott Devoid wrote: Some thoughts: 0. Should Climate also address the need for an eviction service? That is, a service that can weight incoming requests and existing resource allocations using som

[openstack-dev] [Nova][Blueprint] Network Aware scheduler

Hi, Please let us know if any one working on this blueprint https://blueprints.launchpad.net/nova/+spec/network-aware-scheduler Thanks, -Ravi. ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/l

Re: [openstack-dev] [DevStack] Python dependencies: PyPI vs distro packages

Ya, something like that would be super awesome. Yum has something like a LVM snapshot plugin, idk if it works. I was talking with angus about this, and I still think there is hope that DNF might have something like that (peasee). Making a package manager that has interaction with a commit lo

Re: [openstack-dev] Keystone Split Backend LDAP Configuration Question

Hello, I am trying to figure out what to use for the "user_enabled_*" attributes for the HP Enterprise Directory servers. It looks like the enabled attribute values in the keystone.conf file are expected to have numerical values. From(URL http://docs.openstack.org/trunk/openstack-compute/admin

Re: [openstack-dev] Motion to start using Gerrit for TC votes

Jeremy Stanley writes: > On 2013-08-07 09:35:33 +0200 (+0200), Flavio Percoco wrote: > [...] >> Would it make sense to have a copy of the votes at the end of that RST >> file (or somewhere in that commit) ? This will replicate vote results >> to our repo instead of just keeping them in Gerrit - i

[openstack-dev] [marconi] Agenda for tomorrow's meeting at 1900 UTC

The Marconi project team holds a weekly meeting in #openstack-meeting-alt on Thursdays, 1900 UTC. The next meeting is tomorrow, August 8. Everyone is welcome. However, please take a minute to review the wiki before attending for the first time: http://wiki.openstack.org/marconi ## Agenda (60

Re: [openstack-dev] Keystone Split Backend LDAP Hang Problem

Hello, I ran into an issue/problem with keystone and it is ok to simply tell me to "don't do that", but I am wondering how others approach this problem. I have the keystone H-2 split backend code connected the HP Enterprise Directory which is humongous in size. From that directory I have only o

Re: [openstack-dev] Keystone Split Backend LDAP Configuration Question

Hi Guang, Thank you for the reply. Would you be a little more specific or give me an example of a configurable LDAP query filter? Right now the keystone SQL database does not keep much information on users that come from the LDAP server. The only entry I could find was one in the user_project_m

Re: [openstack-dev] [Nova][Blueprint] Network Aware scheduler

Hi Ravi, I don’t know about that BP – but current the group scheduler BP will be including network affinity as one of its policies at some point: https://blueprints.launchpad.net/nova/+spec/instance-group-api-extension and there is also another active BP to make network bandwidth a consumable

[openstack-dev] Requirements updates

You may have just noticed a bunch of requirements updates patches. These are mostly not urgent - although once jenkins comes back +1 on them, they're safe to merge, because they will have been gated. Right now I'm testing the script that we'll use. Moving forward, patches will be proposed automatic

Re: [openstack-dev] [Neutron] FWaaS: Support for explicit commit

We had some discussion on this during the Neutron IRC meeting, and per that discussion I have created a blueprint for this: https://blueprints.launchpad.net/neutron/+spec/neutron-fwaas-explicit-commit Further comments can be posted on the blueprint whiteboard and/or the design spec doc. Thanks, ~

Re: [openstack-dev] Blueprint review

Can you provide more detail in the BP, there isn't very much to review it on right now. On Wed, Aug 7, 2013 at 12:48 AM, Álvaro López García < alvaro.lopez.gar...@cern.ch> wrote: > Dear all. > > I've registered a blueprint [1] to improve and extend the current > image cache handler on the compu

Re: [openstack-dev] [nova][glance] Future of nova's image API

It looks like everyone is in agreement on this, so here is the patch: https://review.openstack.org/#/c/40565/ On Tue, Aug 6, 2013 at 4:36 AM, Roman Bogorodskiy wrote: > Joe Gordon wrote: > > > On Mon, Aug 5, 2013 at 9:11 AM, Roman Bogorodskiy < > rbogorods...@mirantis.com > > > wrote: > > > >

Re: [openstack-dev] Keystone Split Backend LDAP Configuration Question

On 08/07/2013 04:38 PM, Miller, Mark M (EB SW Cloud - R&D - Corvallis) wrote: Hello, I am trying to figure out what to use for the "user_enabled_*" attributes for the HP Enterprise Directory servers. It looks like the enabled attribute values in the keystone.conf file are expected to have nu

Re: [openstack-dev] Dropping or weakening the 'only import modules' style guideline - H302

On Tue, Aug 6, 2013 at 1:44 PM, Morgan Fainberg wrote: > While I'm torn on this as a developer, it comes down to an ease of > understanding the code. In all cases, it is easier to understand where > something comes from if you only import modules. Enforcing the import of > modules tends to also

Re: [openstack-dev] [Horizon][Security] BREACH/CRIME Attack Information

On 8 August 2013 02:07, Clark, Robert Graham wrote: > My understanding of such attacks is that they require a > point-of-presence within the browser to perform the injection which in > turn enables the side channel. As clients/users won't be interacting > with the API using a browser I'm not 100%

Re: [openstack-dev] Keystone Split Backend LDAP Hang Problem

That's been a "don't do that" for quite a while, but we might finally have a solution in havana: https://blueprints.launchpad.net/keystone/+spec/pagination-backend-support On Wed, Aug 7, 2013 at 3:56 PM, Miller, Mark M (EB SW Cloud - R&D - Corvallis) wrote: > Hello, > > ** ** > > I ran

Re: [openstack-dev] Keystone Split Backend LDAP Hang Problem

I have been thinking about the keystone user lookup GET API for a split LDAP/SQL backend when you are using a read only LDAP backend: http://15.253.58.165:35357/v3/auth/tokens A suggestion has been made to add additional lookup constraints via a filter. The problem with read onl

Re: [openstack-dev] [Neutron] FWaaS: Support for explicit commit

Hi Sumit, Neutron has a concept of a bulk creation where multiple things can be created in one api request rather that N (and then be implemented atomically on the backend). In my opinion, I think it would be better to implement a bulk update/delete operation rather than a commit. I think that hav

Re: [openstack-dev] [Nova][Blueprint] Network Aware scheduler

Thanks, I will go through these BPs and see if my use case fits. -Ravi. On Wed, Aug 7, 2013 at 2:31 PM, Day, Phil wrote: > Hi Ravi, > > ** ** > > I don’t know about that BP – but current the group scheduler BP will be > including network affinity as one of its policies at some point: >

Re: [openstack-dev] Keystone Split Backend LDAP Configuration Question

On 08/07/2013 05:26 PM, Miller, Mark M (EB SW Cloud - R&D - Corvallis) wrote: Hi Guang, Thank you for the reply. Would you be a little more specific or give me an example of a configurable LDAP query filter? Right now the keystone SQL database does not keep much information on users that com

Re: [openstack-dev] Keystone Split Backend LDAP Hang Problem

On 08/07/2013 08:05 PM, Miller, Mark M (EB SW Cloud - R&D - Corvallis) wrote: I have been thinking about the keystone user lookup GET API for a split LDAP/SQL backend when you are using a read only LDAP backend: http://15.253.58.165:35357/v3/auth/tokens A suggestion has been made to add addi

[openstack-dev] Glance tests failed

Hi stackers, I found a error after run glance tests. One of them is: == ERROR: glance.tests.unit.test_store_image.TestStoreAddToBackend.test_bad_metadata_not_dict -

[openstack-dev] [Heat] as-update-policy implementation details

Proposal for the implementation is documented at https://wiki.openstack.org/wiki/Heat/Blueprints/as-update-policy. Please review and provide feedback. ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/

Re: [openstack-dev] [Nova] Network stuff in Nova API v3

On 2013年08月07日 21:42, Alex Xu wrote: On 2013年08月07日 17:38, John Garbutt wrote: multi-nic added an extra virtual interface on a seprate network, like adding a port: http://docs.openstack.org/trunk/openstack-compute/admin/content/using-multi-nics.html That just describe create instance with mult

Re: [openstack-dev] [Nova] Network stuff in Nova API v3

On 2013年08月07日 22:24, John Garbutt wrote: Hey, On 7 August 2013 14:42, Alex Xu wrote: On 2013年08月07日 17:38, John Garbutt wrote: multi-nic added an extra virtual interface on a seprate network, like adding a port: http://docs.openstack.org/trunk/openstack-compute/admin/content/using-multi-nic