[Openstack] Swift, Keystone, and S3 pipeline configuration

2012-03-27 Thread Lillie Ross-CDSR11
I'm trying to get the S3 api working with Swift using Keystone authentication. My setup is based on the patched Diablo release using the ManagedIT packages, with an additional package (keystone2) that support2 v.2 authentication between swift and keystone. I'm (as usual) confused as to what a

Re: [Openstack] Swift, Keystone, and S3 pipeline configuration

2012-03-27 Thread Lillie Ross-CDSR11
> Hi Ross, > > On Tue, Mar 27, 2012 at 9:14 PM, Lillie Ross-CDSR11 > wrote: >> I'm trying to get the S3 api working with Swift using Keystone >> authentication. My setup is based on the patched Diablo release using the > > This wouldn't work on Diablo, you wo

Re: [Openstack] Swift, Keystone, and S3 pipeline configuration

2012-03-29 Thread Lillie Ross-CDSR11
a bug with these patches (fixed in Essex) that means > that data uploaded using S3 is in a different namespace to data uploaded with > the OpenStack API. > > Regards, > > Tom > > On 03/28/2012 07:37 PM, Lillie Ross-CDSR11 wrote: >> Tom, >> >> Th

[Openstack] Mixing Swift authentication (tempauth) with Keystone = Dashboard flakiness

2012-03-30 Thread Lillie Ross-CDSR11
I'm not sure if you can do what I'm trying. I've deployed Openstack Diable (ManagedIT) with Keystone for all service authentication. However to restore S3 API compatibility with Swift, I've modified my proxy server config to use 'tempauth' instead of Keystone. Within the proxy-server.conf, I'

Re: [Openstack] Mixing Swift authentication (tempauth) with Keystone = Dashboard flakiness

2012-03-30 Thread Lillie Ross-CDSR11
As a followup. In Dashboard, the overview panel correctly displays the list of running instance. Only when selecting the 'instances' panel do I see problems. -- Ross Lillie ross.lil...@motorolasolutions.com<mailto:ross.lil...@motorolasolutions.com> On Mar 30, 2012, at 1:18

Re: [Openstack] Mixing Swift authentication (tempauth) with Keystone = Dashboard flakiness

2012-03-30 Thread Lillie Ross-CDSR11
Also... unable to start a new instance from dashboard. /ross -- Ross Lillie ross.lil...@motorolasolutions.com<mailto:ross.lil...@motorolasolutions.com> On Mar 30, 2012, at 1:33 PM, Lillie Ross-CDSR11 wrote: As a followup. In Dashboard, the overview panel correctly displays the l

[Openstack] Best approach for deploying Essex?

2012-04-03 Thread Lillie Ross-CDSR11
With the pending release of Essex, I'm making plans to upgrade our internal cloud infrastructure. My question is what will be the best approach? Our cloud is being used to support internal research activities and thus needs to be 'relatively' stable, however as new features become available (ma

Re: [Openstack] Best approach for deploying Essex?

2012-04-03 Thread Lillie Ross-CDSR11
iling list? Thanks again, Ross On Apr 3, 2012, at 1:21 PM, Adam Gandelman wrote: > On 04/03/2012 08:20 AM, Lillie Ross-CDSR11 wrote: >> My question is, should I base our new installation directly off the Essex >> branch in the git repository, or use the packages that will be depl

Re: [Openstack] Best approach for deploying Essex?

2012-04-04 Thread Lillie Ross-CDSR11
Precise are rock-solid and can vouch for the Ubuntu packaging following quite quickly behind the devs. I highly recommend this approach. Kev On 3 April 2012 20:02, Lillie Ross-CDSR11 mailto:ross.lil...@motorolasolutions.com>> wrote: Hi Adam, Thanks for the update. Actually, I'

[Openstack] Swift & Keystone configuration in Essex release and possible logging issue

2012-04-17 Thread Lillie Ross-CDSR11
When configuring the paste pipeline for Swift's proxy, it appears that you must explicitly state the service and authentication protocol as http if you're not using an SSL connection, as this is the default. The current configuration section of the keystone documentation doesn't make this clear

[Openstack] Unable to download images using Glance+Keystone+Swift

2012-04-26 Thread Lillie Ross-CDSR11
This is probably a configuration bug or a general lack of understanding, but I can't seem to find the problem. I've installed the latest Essex release (on instances running in Diablo) to verify my upgrade tasks. However, I'm unable to get Glance to download images (which prevents running insta

Re: [Openstack] Unable to download images using Glance+Keystone+Swift

2012-04-26 Thread Lillie Ross-CDSR11
Also, as a followup, if I try to retrieve an images raw data and don't specify a content-type on the request, I receive the following error message: First, get image details… root@essex3:/etc/glance# curl -v -I -H 'X-Auth-Token: 04e74eab602f4e48954a3ed1404f223b' -H 'Content-type: application/js

[Openstack] Fwd: Unable to download images using Glance+Keystone+Swift

2012-04-26 Thread Lillie Ross-CDSR11
Swift CLI using my glance tenant, username, and password. However, the Glance REST call fails. All other REST calls work fine. I'm stumped. Ross On Apr 26, 2012, at 11:55 AM, Jay Pipes wrote: On 04/26/2012 11:54 AM, Lillie Ross-CDSR11 wrote: 4. However, when I try to download the same

Re: [Openstack] Unable to download images using Glance+Keystone+Swift

2012-04-26 Thread Lillie Ross-CDSR11
12, at 1:40 PM, "Jay Pipes" wrote: > On 04/26/2012 02:37 PM, Lillie Ross-CDSR11 wrote: >> Hi Jay, >> >> Cut and paste error. It still doesn't work. If I issue the simple command >> (without the pipe or content-type header) I get the follow

Re: [Openstack] Unable to download images using Glance+Keystone+Swift

2012-04-27 Thread Lillie Ross-CDSR11
g to fix it: > https://bugs.launchpad.net/glance/+bug/979745 > > Cheers, > Sam > > > > On Fri, Apr 27, 2012 at 9:53 AM, Lillie Ross-CDSR11 > wrote: >> Jay, >> >> These are the Ubuntu 12.04 packages from the beta with all known updates. >> I'

[Openstack] Nova volume service and the nova client command

2012-05-01 Thread Lillie Ross-CDSR11
I've configured the nova_volume service using the the Ubuntu 12.04LTS packages, and am able to create/delete volumes using the euca2ools package. However, dashboard is not able to retrieve volume info or perform volume operations with the nova client. If I issue the 'nova volume-list' command,

Re: [Openstack] Nova volume service and the nova client command

2012-05-01 Thread Lillie Ross-CDSR11
allow the nova-api service running on one node to correctly control the nova-volume backend on another node? Thanks in advance! Ross On May 1, 2012, at 3:15 PM, Lillie Ross-CDSR11 wrote: > I've configured the nova_volume service using the the Ubuntu 12.04LTS > packages, and am abl

Re: [Openstack] Nova volume service and the nova client command

2012-05-01 Thread Lillie Ross-CDSR11
ost(s) running the nova-api front end. Nova-volume listens to the appropriate AMQP channel to perform the necessary LVM commands. Am I missing anything? Sorry for all questions. I just needed to think things through a bit more… /ross On May 1, 2012, at 3:15 PM, Lillie Ross-CDSR11 wrote: &

[Openstack] Configuring Openstack (Essex) to use existing Dynamic DNS servers

2012-06-12 Thread Lillie Ross-CDSR11
All, I'm finally starting the upgrade to our internal cloud to the Essex release that's part of Ubuntu 12.04LTS. I'd like to setup the cloud to register instance names with our existing internal DNS servers. While there's some mention of this searching the Web, I haven't stumbled across anyth

[Openstack] Dashboard (Ubuntu 12.04/Essex)

2012-06-18 Thread Lillie Ross-CDSR11
All, I've upgraded our cloud, but am stymied on one last configuration issue. >From the dashboard, I'm unable to display images and/or snapshots. However, I >can display loaded images using the nova and glance command line tools with no >problems. For example, 'glance index' displays the foll

Re: [Openstack] Dashboard (Ubuntu 12.04/Essex)

2012-06-18 Thread Lillie Ross-CDSR11
el.hurley=nebula@lists.launchpad.net<mailto:nebula@lists.launchpad.net>] On Behalf Of Lillie Ross-CDSR11 Sent: Monday, June 18, 2012 9:32 AM To: openstack@lists.launchpad.net<mailto:openstack@lists.launchpad.net> Subject: [Openstack] Dashboard (Ubuntu 12.04/Essex) All, I&#

Re: [Openstack] Timeout during image build (task Networking)

2012-06-19 Thread Lillie Ross-CDSR11
Any idea on something that may have crept in recently? This wasn't happening a week or so ago, AFAICT. Best, -jay On 06/18/2012 06:03 PM, Lillie Ross-CDSR11 wrote: I'm receiving RPC timeouts when trying to launch an instance. My installation is the Essex release running on Ubuntu 12.04. Wh

[Openstack] VlanManager issues...

2012-01-25 Thread Lillie Ross-CDSR11
I'm setting up a modest cloud for internal use. Currently I have the following configuration: Server1 (nova) is running all nova services EXCEPT nova compute. Server 2 (nova1) is running only nova-compute. Servers3-12 are idle, but will eventually run nova-compute Server 1 is configured with pu

[Openstack] Glance authentication with Keystone woes...

2012-01-31 Thread Lillie Ross-CDSR11
I'm reinstalling the various Openstack services from packages in the ManagedIT PPA to pull in the latest Diablo bug fixes. I'm following the latest directions in the newly release installation guide as I perform these upgrades (http://docs.openstack.org/diablo/openstack-compute/install/content/

Re: [Openstack] Glance authentication with Keystone woes...

2012-02-01 Thread Lillie Ross-CDSR11
getting started with keystone integration. Thanks in advance for any insight... Regards, Ross On Jan 31, 2012, at 6:48 PM, Jay Pipes wrote: > On 01/31/2012 06:28 PM, Lillie Ross-CDSR11 wrote: >> I'm reinstalling the various Openstack services from packages in the >> ManagedI

[Openstack] Keystone installation with ManagedIT packages...

2012-02-02 Thread Lillie Ross-CDSR11
ilter legacy_auth RAX-KEY-extension service_api versus what is specified in the installation guide. Does this difference matter? What are the differences? Regards, Ross On Feb 1, 2012, at 10:31 AM, Lillie Ross-CDSR11 wrote: > Hi Jay, > > Yes, this confused me, however I get the sa

[Openstack] Nova command line versus Euca2ools

2012-02-06 Thread Lillie Ross-CDSR11
I currently have OpenStack installed (using the ManagedIT PPA) to use Keystone for authentication. However I'm still receiving a number of "Malformed request URL" messages, both in Dashboard as well as when using the Nova command line client. Also, some of the Euca2ools command run OK, others

Re: [Openstack] Nova command line versus Euca2ools

2012-02-07 Thread Lillie Ross-CDSR11
loud Architect, Emerging Solutions IBM Systems & Technology Group From:Lillie Ross-CDSR11 mailto:ross.lil...@motorolasolutions.com>> To: "openstack@lists.launchpad.net<mailto:openstack@lists.launchpad.net>" mailto:openstack@lists.launchpad.net>>

[Openstack] Swift/Keystone authorization question

2012-02-22 Thread Lillie Ross-CDSR11
I've successfully installed all OpenStack components with Keystone authorization (well, mostly at least), but am now seeing an interesting problem for new accounts (created in Dashboard). Using my admin account, I issue a swift stat command and get the expected response back from swift-proxy:

Re: [Openstack] Swift/Keystone authorization question

2012-02-23 Thread Lillie Ross-CDSR11
all combinations of access to swift storage. Works great. /ross On Feb 22, 2012, at 3:26 PM, Lillie Ross-CDSR11 wrote: As a followup, additional info… Both the admin and glance accounts, that successfully authenticate against keystone, were created via the command line. Both accounts also have a

[Openstack] Swift container ACLs and container visibility question

2012-02-23 Thread Lillie Ross-CDSR11
I'm setting up Swift storage for an internal project. For the project's use of Swift, I want all members of the project to be able to see what's stored in Swift. Applying suitable ACLs, it's possible for user's to see the contents of the projects container. However, is there any way to allow

Re: [Openstack] Swift container ACLs and container visibility question

2012-02-23 Thread Lillie Ross-CDSR11
Sorry, I should have mentioned my setup. I'm using Keystone from the managedit repository combined with a swift keystone plugin to allow the proxy to use version 2 authentication. Ross (finger tapped on my iPhone) On Feb 23, 2012, at 4:38 PM, "Chmouel Boudjnah" wrote: > On Thu, Feb 23, 2012

Re: [Openstack] Swift/Keystone authorization question

2012-02-24 Thread Lillie Ross-CDSR11
at 2:52 PM, Lillie Ross-CDSR11 wrote: I've successfully installed all OpenStack components with Keystone authorization (well, mostly at least), but am now seeing an interesting problem for new accounts (created in Dashboard). Using my admin account, I issue a swift stat command and get th

Re: [Openstack] Swift/Keystone authorization question

2012-02-24 Thread Lillie Ross-CDSR11
gh hopes. Just another data point. Ross On Feb 22, 2012, at 2:52 PM, Lillie Ross-CDSR11 wrote: I've successfully installed all OpenStack components with Keystone authorization (well, mostly at least), but am now seeing an interesting problem for new accounts (created in Dashboard). Using my ad

Re: [Openstack] Swift/Keystone authorization question

2012-02-24 Thread Lillie Ross-CDSR11
OK, is this a 'role' grant issue? /ross On Feb 22, 2012, at 2:52 PM, Lillie Ross-CDSR11 wrote: I've successfully installed all OpenStack components with Keystone authorization (well, mostly at least), but am now seeing an interesting problem for new accounts (created in Dashbo

[Openstack] Nova instance and cloud-init

2012-02-28 Thread Lillie Ross-CDSR11
All, I've built a custom image according to the various directions available in the nova docs. The instance is loaded into glance and boots fine. When building the image, openssh-server and cloud-init packages are installed. So far so good. However, when I start the image, cloud-init does n