Re: [Openstack] [keystone] publicurl vs adminurl reachability

2016-04-07 Thread Shinobu Kinjo
Thank you for good input. Cheers, S On Fri, Apr 8, 2016 at 2:14 PM, Morgan Fainberg wrote: > > > On Fri, Apr 8, 2016 at 1:06 AM, Shinobu Kinjo wrote: >> >> On Fri, Apr 8, 2016 at 1:46 PM, Morgan Fainberg >> wrote: >> > >> > >> > On Thu, Apr 7, 2016 at 6:07 PM, Remo Mattei wrote: >> >> >> >> I

Re: [Openstack] [keystone] publicurl vs adminurl reachability

2016-04-07 Thread Morgan Fainberg
On Fri, Apr 8, 2016 at 1:06 AM, Shinobu Kinjo wrote: > On Fri, Apr 8, 2016 at 1:46 PM, Morgan Fainberg > wrote: > > > > > > On Thu, Apr 7, 2016 at 6:07 PM, Remo Mattei wrote: > >> > >> I did a project where we had all three of them in a sep VLAN, sep net. > >> > >> So to answer your question, t

Re: [Openstack] [keystone] publicurl vs adminurl reachability

2016-04-07 Thread Shinobu Kinjo
On Fri, Apr 8, 2016 at 1:46 PM, Morgan Fainberg wrote: > > > On Thu, Apr 7, 2016 at 6:07 PM, Remo Mattei wrote: >> >> I did a project where we had all three of them in a sep VLAN, sep net. >> >> So to answer your question, this depends how much you want to secure, what >> is the requirements of y

Re: [Openstack] [keystone] publicurl vs adminurl reachability

2016-04-07 Thread Morgan Fainberg
On Thu, Apr 7, 2016 at 6:07 PM, Remo Mattei wrote: > I did a project where we had all three of them in a sep VLAN, sep net. > > So to answer your question, this depends how much you want to secure, what > is the requirements of your env, with access etc.. > here is one of the answer from OpenStac

Re: [Openstack] [keystone] publicurl vs adminurl reachability

2016-04-07 Thread Remo Mattei
I did a project where we had all three of them in a sep VLAN, sep net. So to answer your question, this depends how much you want to secure, what is the requirements of your env, with access etc.. here is one of the answer from OpenStack Keep in mind that public URL are just read only in most

Re: [Openstack] [keystone] publicurl vs adminurl reachability

2016-04-07 Thread Jitendra Kumar Bhaskar
Hi Joe, Are you using the different FQDN for admin than internal/public for keystone endpoints ? Regards *Jitendra* +91-9989743042 On Fri, Apr 8, 2016 at 3:18 AM, Kaustubh Kelkar < kaustubh.kel...@casa-systems.com> wrote: > > -Original Message- > From: D'ANDREA, JOE (JOE) [mailto:jd

Re: [Openstack] [keystone] publicurl vs adminurl reachability

2016-04-07 Thread Kaustubh Kelkar
-Original Message- From: D'ANDREA, JOE (JOE) [mailto:jdand...@research.att.com] Sent: Thursday, April 7, 2016 4:28 PM To: openstack@lists.openstack.org Subject: [Openstack] [keystone] publicurl vs adminurl reachability More to the point: It's unclear to me whether adminurl endpoints are

[Openstack] [keystone] publicurl vs adminurl reachability

2016-04-07 Thread D'ANDREA, JOE (JOE)
Does anyone out there restrict their adminurl endpoints to private networks (e.g., reachable only from within the cluster hosts themselves)? I ask because I'm working on a cluster where the publicurl endpoints are reachable from my workstation, but the adminurl endpoints aren't. As such, a requ

[Openstack] [nova] Hyperv devstack

2016-04-07 Thread Paul Carlton
Claudiu You may remember I've been trying to get the hyperv working with devstack. You shared with me the local.conf from your CI job but I still can't get it to work. It fails with 2016-04-07 10:56:40.612 | + lib/neutron-legacy:_move_neutron_addresses_route:881 : sudo ovs-vsctl --may-ex

Re: [Openstack] Swift accounts and container replication

2016-04-07 Thread Carlos Rodrigues
Hi, Thank you people for your answers. I have 3 policies plus storage-policy:0 that is deprecated. The default policy have ring with nodes from one site but i have one policy with nodes from both sites, that are in use by some containers and replication of objects works well. But for accounts a