Re: [Openstack-operators] need feedback about Glance image 'visibility' migration in Ocata

> On 17 Nov. 2016, at 3:49 pm, Brian Rosmaita > wrote: > > Ocata workflow: (1) create an image with default visibility, (2) change > its visibility to 'shared', (3) add image members Unsure why this can’t be done in 2 steps, when someone adds an image member to

[Openstack-operators] [openstack-operators][neutron] neutron-plugin-openvswitch-agent and neutron-openvswitch-agent

Hi, I installed a kilo version before and now I am installing mitaka. The installation document for mitaka uses linuxbridge agent and not ovs. In kilo, it says to install neutron-plugin-openvswitch-agent. In mitaka, for linuxbridge, it says to install neuton-linuxbridge-agent. Is there any

Re: [Openstack-operators] sync power states and externally shut off VMs

As a follow up on this. You can configure the host to shutdown and start up in a way that all the VM’s are shutdown and started up automatically. To do this you need to do a few things: 1.) Ensure that nova-compute is configured to stopped before libvirt-guests. Make sure libvirt-guests

Re: [Openstack-operators] sync power states and externally shut off VMs

If you are interested in manually mucking around with local virsh domain states, and you don't want nova to interfere, you can just stop the local nova-compute service and it won't be doing any syncing. Once you get those instances back into their desired state, you can restart nova-compute

[Openstack-operators] need feedback about Glance image 'visibility' migration in Ocata

Hello Operators, The long-awaited implementation of "community images" in Glance [0] is just around the corner, but before we can merge it, we need to make a decision about how the database migration of the image 'visibility' field will work. We could use your help. Here's what's at issue: Up

Re: [Openstack-operators] Audit Logging - Interested? What's missing?

Anybody using http://docs.openstack.org/developer/keystonemiddleware/audit.html ?? > On 17 Nov. 2016, at 11:51 am, Kris G. Lindgren wrote: > > I need to do a deeper dive on audit logging. > >

Re: [Openstack-operators] Audit Logging - Interested? What's missing?

I need to do a deeper dive on audit logging. However, we have a requirement for when someone changes a security group that we log what the previous security group was and what the new security group is and who changed it. I don’’t know if this is specific to our crazy security people or if

Re: [Openstack-operators] Audit Logging - Interested? What's missing?

Hi Tom, It would be great if the logs were formatted as such that could convey the following: - Fault classification/types - Potential root Causes - Latest state before failure/crash The above can help with automation and self healing. This is part of our Fault Genes WG mission to get to

Re: [Openstack-operators] Audit Logging - Interested? What's missing?

rather, here: https://openstackmountainwest2016.sched.org/event/8AkE/osdef-devops-driven-approach-to-securing-a-cloud-infrastructure-using-bigdata?iframe=no==yes=no On Wed, Nov 16, 2016 at 5:07 PM, David Medberry wrote: > more info here: >

Re: [Openstack-operators] Audit Logging - Interested? What's missing?

more info here: http://www.openstackdaysmw.com/schedule/ On Wed, Nov 16, 2016 at 5:06 PM, David Medberry wrote: > We've added ELK to our cloud (but of course it largely relies on the > existing logging.) There will be a talk about this next month at OpenStack > Days

[Openstack-operators] Audit Logging - Interested? What's missing?

Hi Ops, Was chatting with Department of Defense in Australia the other day, and one of their pain points is Audit Logging. Some bits of OpenStack just don't leave enough information for proper audit. So, thought it might be a good idea to gather people who are interested to brainstorm how to

Re: [Openstack-operators] sync power states and externally shut off VMs

Typically, you should not be managing your VMs by virsh. After a power outage, I would recommend sending a start API call to instances that are housed on that specific hypervisor Sent from my iPhone > On Nov 16, 2016, at 4:26 PM, Gustavo Randich > wrote: > > When

[Openstack-operators] sync power states and externally shut off VMs

When a VM is shutdown without using nova API (kvm process down, libvirt failed to start instance on host boot, etc.), Openstack "freezes" the shutdown power state in the DB, and then re-applies it if the VM is not started via API, e.g.: # virsh shutdown [ sync power states -> stop instance via

Re: [Openstack-operators] [Fuel] Add new controllers

Absolutely, versions higher than 4.1 support this by default. Keep in mind that you should maintain an odd number for quorum as even will lead to split brain. Also, if you are using multiple node groups, the controllers must be in the same one for fail over of the vip addresses On Wed, Nov 16,

[Openstack-operators] [app-catalog] App Catalog IRC meeting Thursday November 17th

Join us tomorrow (Thursday) for our weekly meeting, scheduled for November 17th at 17:00UTC in #openstack-meeting-3 The agenda can be found here, and please add to if you want to discuss something with the Community App Catalog team: https://wiki.openstack.org/wiki/Meetings/app-catalog Now that

[Openstack-operators] [Fuel] Add new controllers

Hi, It is possible to add new controllers node to an existing cluster of openstack deployed with fuel? Thanks, Fran. ___ OpenStack-operators mailing list OpenStack-operators@lists.openstack.org

[Openstack-operators] [neutron] [vpnaas] vpnaas no longer part of the neutron governance

Hi, As of today, the project neutron-vpnaas is no longer part of the neutron governance. This was a decision reached after the project saw a dramatic drop in active development over a prolonged period of time. What does this mean in practice? - From a visibility point of view, release notes

[Openstack-operators] FW: [openstack-dev] [openstack-ansible] How do you haproxy?

Hello David (and dear Operators!), You are 100% correct, this topic could be interesting for operators. Here is food for thoughts on “How do you haproxy for openstack-ansible?”: https://etherpad.openstack.org/p/openstack-ansible-haproxy-improvements Feel free to comment there! Best regards,

Re: [Openstack-operators] [publicClouds-wg] Public Cloud Working Group

I'm interested as well :) From: matt Jarvis Sent: Tuesday, November 15, 2016 11:43 AM To: OpenStack Operators; user-committee Subject: [Openstack-operators] [publicClouds-wg] Public Cloud Working Group So after input from a