[Openstack-operators] [openstack-ansible] pip issues

Hi all, Context: openstact-ansible newton, tag: 14.0.1 OS: ubuntu 16.04 LTS the pip command is unable to download packages form the repo container. I can reach the repo container from within galera container through the port 8181: *root@node01:~# lxc-attach -n node01_galera_container-368f269ar

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

Hi Jesse and Jean-Philippe, Thank you both for your responses. @Jesse I am just having one node for the infra and one repo, for now: root@maas:/opt/openstack-ansible/playbooks# ansible repo_all -m shell -a "du -sh /var/www/repo/*" Variable files: "-e @/etc/openstack_deploy/user_secrets.yml -e @

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

Hi Achi, Can you list the files in /var/www/repo/os-release? ansible repo_all -m shell -a "find /var/www/repo/os-releases -type f" Thanks, Jesse IRC: odyssey4me From: Achi Hamza Date: Thursday, November 17, 2016 at 10:01 AM To: "[email protected]" , "openstack-...@lists

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

Hi Jesse, Yes, i can: root@maas:/opt/openstack-ansible/playbooks# ansible repo_all -m shell -a "find /var/www/repo/os-releases -type f" Variable files: "-e @/etc/openstack_deploy/user_secrets.yml -e @/etc/openstack_deploy/user_variables.yml " node01_repo_container-82b4e1f6 | SUCCESS | rc=0 >> /va

[Openstack-operators] Using Openstack-ansible to deploy hosts on mutliple br-vxlan/br-vlan/br-provider/br-mgmt l3 networks

Hello, I’ll start by answering the last questions: “Is that kind of deployment possible? If not possible, is this or could this be in the roadmap of the project?” It’s been a while that we discussed the limitations of the user-friendliness of our inventory. So, yes it’s part of our long term r

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

Please continue to make use of the list instead of going off list. The list archives are a reference point for others who may find themselves in the same situation. Right, so the service is up. The load balancer is up, so we’re down to networking issues or perhaps something a little more obscur

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

Thank you for the remainder regarding the mailing list, i just forgot about that. Yes, i can reach them but without data form curl: *root@maas:/opt/openstack-ansible/playbooks# ansible repo_all -m shell -a "curl http://172.16.1.2:8181/os-releases/14.0.1/requirements_constraints.txt

Re: [Openstack-operators] Audit Logging - Interested? What's missing?

Same need here, I want to know who changed a security group and what change was done. Just the logged POST on the API is not enough to properly audit the operation. > On Nov 16, 2016, at 19:51, Kris G. Lindgren wrote: > > I need to do a deeper dive on audit logging. > > However, we have a re

Re: [Openstack-operators] need feedback about Glance image 'visibility' migration in Ocata

On 11/17/16, 1:39 AM, "Sam Morrison" mailto:[email protected]>> wrote: On 17 Nov. 2016, at 3:49 pm, Brian Rosmaita mailto:[email protected]>> wrote: Ocata workflow: (1) create an image with default visibility, (2) change its visibility to 'shared', (3) add image members Unsure why

Re: [Openstack-operators] [Fuel] Add new controllers

Hi Andrew, Thanks for your quick response! 2016-11-16 18:08 GMT+01:00 Andrew Woodward : > Absolutely, versions higher than 4.1 support this by default. Keep in mind > that you should maintain an odd number for quorum as even will lead to > split brain. Also, if you are using multiple node groups

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

Thank you Jesse, but these iptables rules are just applied on the deployment node not the host nodes. do i have to omit these rules even on the deployment node ? Thank you On 17 November 2016 at 14:25, Jesse Pretorius < [email protected]> wrote: > *From: *Achi Hamza > > > > I have

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

From: Achi Hamza Date: Thursday, November 17, 2016 at 1:57 PM To: Jesse Pretorius , "[email protected]" Subject: Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues Thank you Jesse, but these iptables rules are just applied on the deployment node

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

It works on the repo itself: *root@maas:/opt/openstack-ansible/playbooks# ansible repo_all -m shell -a "curl http://localhost:8181/os-releases/ "* Variable files: "-e @/etc/openstack_deploy/user_secrets.yml -e @/etc/openstack_deploy/user_variables.yml " node01_r

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

It also works on the internal interface of the containers, i can fetch from the repo container to the host on the internal IP of the container: *root@maas:/opt/openstack-ansible/playbooks# ansible hosts -m shell -a "curl http://10.0.3.92:8181/os-releases/ "* Var

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

It also works on the Public IP of the repo: root@maas:/opt/openstack-ansible/playbooks# ansible hosts -m shell -a "curl http://*172.16.1.222*:8181/os-releases/"; Variable files: "-e @/etc/openstack_deploy/user_secrets.yml -e @/etc/openstack_deploy/user_variables.yml " node01 | SUCCESS | rc=0 >> In

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

Have you tried tcpdumping on the deployment node and trying to connect in from the container to see if the packets even get there? If the packets do get there, have you looked at the webserver logs to see if they provide any insight?

Re: [Openstack-operators] need feedback about Glance image 'visibility' migration in Ocata

On Thu, Nov 17, 2016 at 01:27:39PM +, Brian Rosmaita wrote: :On 11/17/16, 1:39 AM, "Sam Morrison" mailto:[email protected]>> wrote: : :On 17 Nov. 2016, at 3:49 pm, Brian Rosmaita mailto:[email protected]>> wrote: : :Ocata workflow: (1) create an image with default visibility, (2)

[Openstack-operators] VM monitoring suggestions

Hi, We are currently exploring monitoring solutions for the VMs we deploy for our customers in production. What I have been asked to deploy would be something akin to how you can see openvz container usage: you get memory usage, bandwidth, load and so forth for each container. I know that ce

[Openstack-operators] Missing Glance metadef_resource_types table

Hi We have just done the update Kilo --> Liberty --> Mitaka of our Cloud. We went through Liberty just for the migration of the databases. In the updated (to Mitaka) installation, if I click "Update metadata" on a image, I am told: Error: Unable to retrieve the namespaces. In the glance api log

Re: [Openstack-operators] VM monitoring suggestions

We have some custom scripts that run on the hypervisors which poll: virsh dominfo virsh domiflist etc The memory stats with "virsh dommemstat" are, AFAIK, not accurate since there's nothing triggering kvm / the vm to release unused memory. But all other virsh stuff works well for us. We don't re

[Openstack-operators] [recognition] AUC Recognition WG meeting today (11/10) @ 1900 UTC

Hi everyone, The AUC Recognition WG team will be meeting today at 1900 UTC, which is an hour earlier in locations where daylight savings time just ended. Details can be found on our wiki[1]. See you there. *Agenda* * AUC Activities recap from OpenStack Summit (maishk) ** https://etherpad.opensta

Re: [Openstack-operators] Missing Glance metadef_resource_types table

This is a manual step to load them. If your installation was complete, you should have a bunch of json files in /etc/glance/metadefs. You need to load them with glance-manage db_load_metadefs > On Nov 17, 2016, at 9:12 AM, Massimo Sgaravatto > wrote: > > Hi > > We have just done the update Ki

Re: [Openstack-operators] [openstack-dev] [nova] More file injection woes

On 11/14/2016 4:16 AM, Daniel P. Berrange wrote: On Fri, Nov 11, 2016 at 07:11:51PM -0600, Matt Riedemann wrote: Chris Friesen reported a bug [1] where injected files on a server aren't in the guest after it's evacuated to another compute host. This is because the injected files aren't persisted

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

Hi Jesse and Lindgren, Thank you both for the responses. think i figured out the root cause of the problem, which is SSL. But first the answers of your questions: Are you deploying haproxy onto the same host as the repo container, or a different host? Yes, it is on the same host. Have you bound t

[Openstack-operators] Using novaclient, glanceclient, etc, from python

Hello. I can't find proper documentation about how to use openstack clients from inside python application. All I can find is just examples and rather abstract (autogenerated) reference. Is there any normal documentation about proper way to use openstack clients from python applications? T

Re: [Openstack-operators] Missing Glance metadef_resource_types table

Thanks Actually I have just realized that db_sync prints an error in the api.log: 2016-11-17 17:20:21.895 43516 CRITICAL glance [-] ValueError: Tables "task_info,tasks" have non utf8 collation, please make sure all tables are CHARSET=utf8 2016-11-17 18:21 GMT+01:00 Abel Lopez : > This is a m

Re: [Openstack-operators] Using novaclient, glanceclient, etc, from python

Hi, do you mean that information in [1] is not adequate to your needs? BR, Konstantin [1] http://docs.openstack.org/user-guide/sdk.html > On Nov 17, 2016, at 7:17 PM, George Shuklin wrote: > > Hello. > > I can't find proper documentation about how to use openstack clients from > inside pyt

[Openstack-operators] feedback on pymysql

As a part of our upgrades to Newton we are transitioning our services to use pymysql rather than the deprecated MySQL-Python [1]. I believe pymsql has been the default in devstack and the gate for sometime now and that MySQL-Python is essentially untested and not updated, hence our desire to switch

Re: [Openstack-operators] feedback on pymysql

In one of our cells we are running nova with pymsql. It actually helped when we had some db connectivity issues that we were trying to figure out. This is because it wouldn’t block the entire green thread for x seconds while it waits for the db to time out. For us what would happen is db conn

Re: [Openstack-operators] Using novaclient, glanceclient, etc, from python

You may find the 'shade' library a straight forward choice: http://docs.openstack.org/infra/shade/ Excerpts from George Shuklin's message of 2016-11-17 20:17:08 +0200: > Hello. > > I can't find proper documentation about how to use openstack clients > from inside python application. All I can f

Re: [Openstack-operators] Using novaclient, glanceclient, etc, from python

API documentation is available here: http://developer.openstack.org/api-guide/quick-start/ Cheers, Marcus. On 18 Nov 2016 05:21, "George Shuklin" wrote: > Hello. > > I can't find proper documentation about how to use openstack clients from > inside python application. All I can find is just ex

[Openstack-operators] [ceilometer] what is cpu_util: directly measured or derived?

There seem to be two different notions of cpu_util. One is the thing computed by the rate_of_change transformer in the cpu_sink sink defined in pipeline.yaml, and the other is a direct measurement by the CPUUtilPollster. The latter is masked by the former, as far as I can tell, though changing the

Re: [Openstack-operators] need feedback about Glance image 'visibility' migration in Ocata

Hi Brian, I don't think the user can shoot themselves in the foot here. If they are adding a member to an image it is pretty clear it means they want to share it. Yes I can see the case when you want to disable sharing but I don't think the 'visibility' attribute is the way to do it. What if you

Re: [Openstack-operators] Audit Logging - Interested? What's missing?

Hi, We had a similar security crazy thing too, and my colleague did a LT on this in Barcelona. https://youtu.be/dCKh7Gxj3wQ?t=3160 Shintaro On 2016/11/17 21:26, George Mihaiescu wrote: Same need here, I want to know who changed a security group and what change was done. Just the logged POS

[Openstack-operators] [scientific-wg] SC16 get together - P.F. Chang's @ 8.30pm tonight

Hi all - In the fashion of JITS (just in time scheduling), we OpenStack+HPC folk are planning to converge at P.F. Chang's (https://goo.gl/maps/YN8v26CBctp - West 300 South) at 8.30pm following on from the technical programme reception. Hope to see you there! Cheers, Blair ___

Re: [Openstack-operators] [openstack-operators][neutron] neutron-plugin-openvswitch-agent and neutron-openvswitch-agent

On 11/16/2016 10:48 PM, Akshay Kumar Sanghai wrote: > Hi, > I installed a kilo version before and now I am installing mitaka. The > installation document for mitaka uses linuxbridge agent and not ovs. In > kilo, it says to install neutron-plugin-openvswitch-agent. In mitaka, > for linuxbridge, it s

Re: [Openstack-operators] [OpenStack-docs] [OpenStack-operators] [docs][upgrades] time to add official docs for upgrading services?

Good timing, I was about to send a follow-up email about this spec. I agree, this content needs to be more visible, which is why the spec proposed to move upgrade notes to the Upgrades chapter in the Operations Guide. However, it seems like the general consensus is to keep content in project repo

Re: [Openstack-operators] need feedback about Glance image 'visibility' migration in Ocata

On 11/17/16, 7:09 PM, "Sam Morrison" mailto:[email protected]>> wrote: Hi Brian, I don't think the user can shoot themselves in the foot here. If they are adding a member to an image it is pretty clear it means they want to share it. Yes I can see the case when you want to disable sharing but

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] pip issues

No Jesse, you got me wrong. My external_lv_vip_address and internal_vip_lb_address are the same (172.16.1.2), which is also the IP address of node01 on which haproxy is running. This is how it looks on my openstack_user_config.yml file: global_overrides: internal_lb_vip_address: 172.16.1.2 ext