Re: [openstack-dev] [Tatu][Nova] Handling instance destruction

2018-03-15 Thread Pino de Candia
Hi Michael, Thanks for your message... and thanks for your vendordata work! About your question, Tatu listens to events on the oslo message bus. Specifically, it reacts to compute.instance.delete.end by cleaning up per-instance resources. It also listens to project creation and user role assignme

[openstack-dev] [tatu] Tatu devstack plugin ready

2018-03-10 Thread Pino de Candia
Hi Folks, Tatu's devstack plugin is finally working (but I've only tested it on Ubuntu 16 with Fedora25 VM image). Try it out with this local.conf: https://github.com/openstack/tatu/blob/master/devstack/local.conf And then follow these (minimal) steps to set up your client's ssh certificate and

Re: [openstack-dev] [docs] Permissions to upload a PNG for my new project page

2018-03-06 Thread Pino de Candia
Hi Jeremy, that worked (succeeded in uploading and no more capthca). Thanks! On Tue, Mar 6, 2018 at 8:21 AM, Jeremy Stanley wrote: > On 2018-03-05 10:35:00 -0600 (-0600), Pino de Candia wrote: > [...] > > But when I try to upload the file I get this error: > > > > "

[openstack-dev] [docs] Permissions to upload a PNG for my new project page

2018-03-05 Thread Pino de Candia
Hi Folks, I'm creating a project page for Tatu (SSH as a Service). I created a link to a logo in my page source like this: [[File:Project_Tatu_Logo.png|right]] But when I try to upload the file I get this error: "You do not have permission to upload this file, for the following reason: The a

Re: [openstack-dev] [security] Security PTG Planning, x-project request for topics.

2018-03-05 Thread Pino de Candia
Luke > > > On Mon, Feb 12, 2018 at 8:45 AM, Luke Hinds wrote: > >> >> >> On Sun, Feb 11, 2018 at 4:01 PM, Pino de Candia < >> giuseppe.decan...@gmail.com> wrote: >> >>> I uploaded the demo video (https://youtu.be/y6ICCPO08d8) and

[openstack-dev] [tatu] Integration with Uber's pam-ussh module (and Stripe's KRL)

2018-03-03 Thread Pino de Candia
Hi Folks, I integrated Uber's pam-ussh module in Tatu. With this, if the user's SSH certificate is revoked while they're logged into the VM, they lose sudo access (btw, I don't know how to close their session, which would be even better). Here's the demo video: https://youtu.be/yjwWdYJRTM0

[openstack-dev] [infra] Please delete branch "notif" of project tatu

2018-02-26 Thread Pino de Candia
Hi OpenStack-Infra Team, Please delete branch "notif" of openstack/tatu. The project was recently created/imported from my private repo and only the master branch is needed for the community project. thanks for your help! Pino

Re: [openstack-dev] [security] Security PTG Planning, x-project request for topics.

2018-02-14 Thread Pino de Candia
either way. thanks! Pino On Mon, Feb 12, 2018 at 2:45 AM, Luke Hinds wrote: > > > On Sun, Feb 11, 2018 at 4:01 PM, Pino de Candia < > giuseppe.decan...@gmail.com> wrote: > >> I uploaded the demo video (https://youtu.be/y6ICCPO08d8) and linked it >> from the sl

Re: [openstack-dev] [infra] Please add me to Tatu's Gerrit groups

2018-02-11 Thread Pino de Candia
Thanks! On Fri, Feb 9, 2018 at 1:21 PM, Jeremy Stanley wrote: > On 2018-02-09 10:00:25 -0600 (-0600), Pino de Candia wrote: > > I'd like to be added to the recently created tatu-core and > > tatu-release Gerrit groups. > > Since your Gerrit account is the one which pr

Re: [openstack-dev] [security] Security PTG Planning, x-project request for topics.

2018-02-11 Thread Pino de Candia
I uploaded the demo video (https://youtu.be/y6ICCPO08d8) and linked it from the slides. On Fri, Feb 9, 2018 at 5:51 PM, Pino de Candia wrote: > Hi Folks, > > here are the slides for the Tatu presentation: https://docs. > google.com/presentation/d/1HI5RR3SNUu1If-A5Zi4EMvjl-3TKsBW

Re: [openstack-dev] [security] Security PTG Planning, x-project request for topics.

2018-02-09 Thread Pino de Candia
Hi Folks, here are the slides for the Tatu presentation: https://docs.google.com/presentation/d/1HI5RR3SNUu1If-A5Zi4EMvjl-3TKsBW20xEUyYHapfM I meant to record the demo video as well but I haven't gotten around to editing all the bits. Please stay tuned. thanks, Pino On Tue, Feb 6, 2018 at 10:5

[openstack-dev] [infra] Please add me to Tatu's Gerrit groups

2018-02-09 Thread Pino de Candia
Hi Infra Team, I'd like to be added to the recently created tatu-core and tatu-release Gerrit groups. Thanks! Pino __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.opens

[openstack-dev] [midonet] NAT64 support

2015-12-18 Thread Giuseppe (Pino) de Candia
Hi Devs, MidoNet does not support IPv6 (in overlay or underlay). As a small and practical first step towards supporting IPv6, I'm proposing support for NAT64. The idea is that a Tenant can configure NAT64 for any Floating IPv4. The Operator should have control over the IPv6 prefix (well-known pre

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

2015-11-02 Thread Giuseppe (Pino) de Candia
On Mon, Nov 2, 2015 at 9:56 PM, Cathy Zhang wrote: > > > > > *From:* Giuseppe (Pino) de Candia [mailto:gdecan...@midokura.com] > *Sent:* Saturday, October 31, 2015 10:08 PM > *To:* Cathy Zhang > *Cc:* Henry Fourie; OpenStack Development Mailing List (not for usage > q

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

2015-10-31 Thread Giuseppe (Pino) de Candia
On Oct 29, 2015 08:37, "Cathy Zhang" wrote: > > Hi Giuseppe, > > > > Please see inline, > > > > Regards, > > Cathy > > > > From: Giuseppe (Pino) de Candia [mailto:gdecan...@midokura.com] > Sent: Wednesday, October 28, 2015 5:15 PM >

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

2015-10-31 Thread Giuseppe (Pino) de Candia
On Oct 28, 2015 19:17, "Russell Bryant" wrote: > > On 10/28/2015 05:14 PM, Giuseppe (Pino) de Candia wrote: > > On Wed, Oct 28, 2015 at 4:20 PM, Russell Bryant > <mailto:rbry...@redhat.com>> wrote: > > > > I read through the proposed SFC A

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

2015-10-31 Thread Giuseppe (Pino) de Candia
o, > > Just one note on the order of the pipeline, shouldnt the security part be > before the service chaining (and also after)? > (Unless you only meant egress security and you still do the ingress before) > > Gal. > > On Wed, Oct 28, 2015 at 10:14 AM, Giuseppe (Pino) de Ca

Re: [openstack-dev] [neutron][networking-sfc] API clarification questions

2015-10-28 Thread Giuseppe (Pino) de Candia
On Wed, Oct 28, 2015 at 4:20 PM, Russell Bryant wrote: > I read through the proposed SFC API here: > > http://docs.openstack.org/developer/networking-sfc/api.html > > I'm looking at implementing what would be required to support this API > in OVN. I have a prototype, but I had to make some prett