Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-31 Thread Devananda van der Veen
On the ceilometer integration front, I think that, over the course of Icehouse, the proposed Ironic driver API for gathering metrics was fleshed out and agreed upon internally. I am hoping that work can be completed early in Juno, at which point we'll be looking to Ceilometer to start consuming it.

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-26 Thread Eoghan Glynn
> I haven't gotten to my email back log yet, but want to point out that I agree > with everything Robert just said. I also raised these concerns on the > original ceilometer BP, which is what gave rise to all the work in ironic > that Haomeng has been doing (on the linked ironic BP) to expose the

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-26 Thread Gergely Matefi
Also, some systems have more sophisticated IPMI topology than a single node instance, like in case of chassis-based systems. Some other systems might use vendor-specific IPMI extensions or alternate platform management protocols, that could require vendor-specific drivers to terminate. Going for

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-26 Thread Eoghan Glynn
- Original Message - > On 27 March 2014 06:28, Eoghan Glynn wrote: > > > > > >> On 3/25/2014 1:50 PM, Matt Wagner wrote: > >> > This would argue to me that the easiest thing for Ceilometer might be > >> > to query us for IPMI stats, if the credential store is pluggable. > >> > "Fetch the

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-26 Thread Devananda van der Veen
I haven't gotten to my email back log yet, but want to point out that I agree with everything Robert just said. I also raised these concerns on the original ceilometer BP, which is what gave rise to all the work in ironic that Haomeng has been doing (on the linked ironic BP) to expose these metrics

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-26 Thread Robert Collins
On 27 March 2014 06:28, Eoghan Glynn wrote: > > >> On 3/25/2014 1:50 PM, Matt Wagner wrote: >> > This would argue to me that the easiest thing for Ceilometer might be >> > to query us for IPMI stats, if the credential store is pluggable. >> > "Fetch these bare metal statistics" doesn't seem too of

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-26 Thread Jay Faulkner
Comments inline. On 3/26/14, 10:28 AM, Eoghan Glynn wrote: > >> On 3/25/2014 1:50 PM, Matt Wagner wrote: >>> This would argue to me that the easiest thing for Ceilometer might be >>> to query us for IPMI stats, if the credential store is pluggable. >>> "Fetch these bare metal statistics" doesn't s

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-26 Thread Eoghan Glynn
> On 3/25/2014 1:50 PM, Matt Wagner wrote: > > This would argue to me that the easiest thing for Ceilometer might be > > to query us for IPMI stats, if the credential store is pluggable. > > "Fetch these bare metal statistics" doesn't seem too off-course for > > Ironic to me. The alternative is t

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-25 Thread Jay Faulkner
On 3/25/2014 1:50 PM, Matt Wagner wrote: This would argue to me that the easiest thing for Ceilometer might be to query us for IPMI stats, if the credential store is pluggable. "Fetch these bare metal statistics" doesn't seem too off-course for Ironic to me. The alternative is that Ceilometer and

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-25 Thread Matt Wagner
On 25/03/14 12:23 +, Lucas Alvares Gomes wrote: Hi, Right now Ironic is being responsible for storing the credentials for the IPMI and SSH drivers (and potentially other drivers in the future), I wonder if we should delegate this task to Keystone. The Keystone V3 API now has a /credentials e

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-25 Thread Dolph Mathews
On Tue, Mar 25, 2014 at 12:49 PM, Jay Pipes wrote: > On Tue, 2014-03-25 at 17:39 +, Miller, Mark M (EB SW Cloud - R&D - > Corvallis) wrote: > > Why not use Barbican? It stores credentials after encrypting them. > > No reason not to add a Barbican driver as well. > > If Keystone's /v3/credenti

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-25 Thread Douglas Mendizabal
Yes, this is exactly the use case we’re trying to address with Barbican. I think this is something that definitely belongs in Barbican, especially now that we are an incubated project. We’d love to help out with any integration questions you may have. -Doug Mendizabal On 3/25/14, 12:49 PM, "Jay

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-25 Thread Jay Pipes
On Tue, 2014-03-25 at 17:39 +, Miller, Mark M (EB SW Cloud - R&D - Corvallis) wrote: > Why not use Barbican? It stores credentials after encrypting them. No reason not to add a Barbican driver as well. Best, -jay ___ OpenStack-dev mailing list Ope

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-25 Thread Miller, Mark M (EB SW Cloud - R&D - Corvallis)
Why not use Barbican? It stores credentials after encrypting them. > -Original Message- > From: Jay Pipes [mailto:jaypi...@gmail.com] > Sent: Tuesday, March 25, 2014 9:50 AM > To: openstack-dev@lists.openstack.org > Subject: Re: [openstack-dev] [Ironic][Keystone] Move driv

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-25 Thread Jay Pipes
On Tue, 2014-03-25 at 12:23 +, Lucas Alvares Gomes wrote: > Hi, > > Right now Ironic is being responsible for storing the credentials for > the IPMI and SSH drivers (and potentially other drivers in the > future), I wonder if we should delegate this task to Keystone. The > Keystone V3 API now

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-25 Thread Eoghan Glynn
> Hi, > > Right now Ironic is being responsible for storing the credentials for the > IPMI and SSH drivers (and potentially other drivers in the future), I wonder > if we should delegate this task to Keystone. The Keystone V3 API now has a > /credentials endpoint which would allow us to specify

[openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-25 Thread Lucas Alvares Gomes
Hi, Right now Ironic is being responsible for storing the credentials for the IPMI and SSH drivers (and potentially other drivers in the future), I wonder if we should delegate this task to Keystone. The Keystone V3 API now has a /credentials endpoint which would allow us to specify arbitrary type