Re: [Openstack-operators] [openstack-dev] [Octavia] [Kolla] SSL errors polling amphorae and missing tenant network interface

2018-10-25 Thread Michael Johnson
FYI, I took some time out this afternoon and wrote a detailed certificate configuration guide. Hopefully this will help. https://review.openstack.org/613454 Reviews would be welcome! Michael On Thu, Oct 25, 2018 at 7:00 AM Tobias Urdin wrote: > > Might as well throw it out here. > > After a

Re: [Openstack-operators] Glance Image Visibility Issue? - Non admin users can see private images from other tenants

2018-10-25 Thread Moore, Michael Dane (GSFC-720.0)[BUSINESS INTEGRA, INC.]
I have dug deep into the code for glance, shoving debug outputs to see what I can find in our queens environment. Here is my debug code (I have a lot more but this is the salient part) LOG.debug("in enforce(), action='%s', policyvalues='%s'", action, context.to_policy_values())

Re: [Openstack-operators] [openstack-dev] [nova][limits] Does ANYONE at all use the quota class functionality in Nova?

2018-10-25 Thread William M Edmonds
melanie witt wrote on 10/25/2018 02:14:40 AM: > On Thu, 25 Oct 2018 14:12:51 +0900, ボーアディネシュ[bhor Dinesh] wrote: > > We were having a similar use case like *Preemptible Instances* called as > > *Rich-VM’s* which > > > > are high in resources and are deployed each per hypervisor. We have a > >

Re: [Openstack-operators] [octavia][rocky] Octavia and VxLAN without DVR

2018-10-25 Thread Fox, Kevin M
Can you use a provider network to expose galera to the vm? alternately, you could put a db out in the vm side. You don't strictly need to use the same db for every component. If crossing the streams is hard, maybe avoiding crossing at all is easier? Thanks, Kevin

Re: [Openstack-operators] [octavia][rocky] Octavia and VxLAN without DVR

2018-10-25 Thread Florian Engelmann
you mean deploy octavia into an openstack project? But I will than need to connect the octavia services with my galera DBs... so same problem. Am 10/25/18 um 5:31 PM schrieb Fox, Kevin M: Would it make sense to move the control plane for this piece into the cluster? (vm in a mangement

Re: [Openstack-operators] [octavia][rocky] Octavia and VxLAN without DVR

2018-10-25 Thread Florian Engelmann
I managed to configure o-hm0 on the compute nodes and I am able to communicate with the amphorae: # create Octavia management net openstack network create lb-mgmt-net -f value -c id # and the subnet openstack subnet create --subnet-range 172.31.0.0/16 --allocation-pool

Re: [Openstack-operators] [octavia][rocky] Octavia and VxLAN without DVR

2018-10-25 Thread Fox, Kevin M
Would it make sense to move the control plane for this piece into the cluster? (vm in a mangement tenant?) Thanks, Kevin From: Florian Engelmann [florian.engelm...@everyware.ch] Sent: Thursday, October 25, 2018 7:39 AM To:

Re: [Openstack-operators] [octavia][rocky] Octavia and VxLAN without DVR

2018-10-25 Thread Florian Engelmann
It looks like devstack implemented some o-hm0 interface to connect the physical control host to a VxLAN. In our case there is no VxLAN at the control nodes nor is OVS. Is it a option to deploy those Octavia services needing this conenction to the compute or network nodes and use o-hm0? Am

Re: [Openstack-operators] [openstack-dev] [Octavia] [Kolla] SSL errors polling amphorae and missing tenant network interface

2018-10-25 Thread Tobias Urdin
Might as well throw it out here. After a lot of troubleshooting we were able to narrow our issue down to our test environment running qemu virtualization, we moved our compute node to hardware and used kvm full virtualization instead. We could properly reproduce the issue where generating a

[Openstack-operators] [publiccloud-wg] Reminder weekly meeting Public Cloud WG

2018-10-25 Thread Tobias Rydberg
Hi everyone, Time for a new meeting for PCWG - today 1400 UTC in #openstack-publiccloud! Agenda found at https://etherpad.openstack.org/p/publiccloud-wg Cheers, Tobias -- Tobias Rydberg Senior Developer Twitter & IRC: tobberydberg www.citynetwork.eu | www.citycloud.com INNOVATION THROUGH

Re: [Openstack-operators] [octavia][rocky] Octavia and VxLAN without DVR

2018-10-25 Thread Florian Engelmann
Or could I create lb-mgmt-net as VxLAN and connect the control nodes to this VxLAN? How to do something like that? Am 10/25/18 um 10:03 AM schrieb Florian Engelmann: Hmm - so right now I can't see any routed option because: The gateway connected to the VLAN provider networks (bond1 on the

Re: [Openstack-operators] [octavia][rocky] Octavia and VxLAN without DVR

2018-10-25 Thread Florian Engelmann
Hmm - so right now I can't see any routed option because: The gateway connected to the VLAN provider networks (bond1 on the network nodes) is not able to route any traffic to my control nodes in the spine-leaf layer3 backend network. And right now there is no br-ex at all nor any "streched"

Re: [Openstack-operators] [openstack-dev] [nova][limits] Does ANYONE at all use the quota class functionality in Nova?

2018-10-25 Thread melanie witt
On Thu, 25 Oct 2018 14:12:51 +0900, ボーアディネシュ[bhor Dinesh] wrote: We were having a similar use case like *Preemptible Instances* called as *Rich-VM’s* which are high in resources and are deployed each per hypervisor. We have a custom code in production which tracks the quota for such

Re: [Openstack-operators] [openstack-dev] [nova][limits] Does ANYONE at all use the quota class functionality in Nova?

2018-10-25 Thread melanie witt
On Wed, 24 Oct 2018 12:54:00 -0700, Melanie Witt wrote: On Wed, 24 Oct 2018 13:57:05 -0500, Matt Riedemann wrote: On 10/24/2018 10:10 AM, Jay Pipes wrote: I'd like to propose deprecating this API and getting rid of this functionality since it conflicts with the new Keystone /limits endpoint,