[Openstack] Inconsistent official docs for enabling LBaas and Fwaas

2014-07-23 Thread Xianyi Ye
Hi all, Is there anyone knows how to enable LBaas and Fwaas simultaneously? Currently, I'm totally confused by 2 different config doc. One is from http://docs.openstack.org/admin-guide-cloud/content/install_neutron-fwaas-ag ent.html which told me to modify neutron.conf as below. service_p

Re: [Openstack] Inconsistent official docs for enabling LBaas and Fwaas

2014-07-23 Thread trinath.soman...@freescale.com
Follow [1] [1] http://docs.openstack.org/admin-guide-cloud/content/install_neutron-fwaas-agent.html -- Trinath Somanchi - B39208 trinath.soman...@freescale.com | extn: 4048 From: Xianyi Ye [mailto:yexia...@sina.com] Sent: Wednesday, July 23, 2014 2:19 PM To: openstack@lists.openstack.org Subjec

Re: [Openstack] Inconsistent official docs for enabling LBaas and Fwaas

2014-07-23 Thread Chinasubbareddy M
Hi, I have configured both of them and it was working fine in Havana. Here is the way I mentioned in config file , # Advanced service modules # service_plugins = service_plugins = neutron.services.loadbalancer.plugin.LoadBalancerPlugin service_plugins = neutron.services.firewall.fwaas_plugin.Fir

[Openstack] Heat - engine high-availability and stack management

2014-07-23 Thread Marica Antonacci
Dear all, I would like to ask you for some insight about how heat handles the changes of the stack states, in particular what happens if the daemon "heat-engine" crashes during the creation of a stack. Currently, I am implementing the high availability of Heat services using load balancing (h

[Openstack] [OpenStack] [Cinder] Volume encryption

2014-07-23 Thread Giuseppe Galeota
Dear all, using which tool can I execute Cinder volume encryption nowadays? Can I use key managers or volume encryptors? For example, Cinder is not capable today to use the key manager Barbican. Is there an alternative? Thank you very much, Giuseppe ___

Re: [Openstack] [Swift] API changes in v2 vs v1

2014-07-23 Thread Adam Lawson
This makes perfect sense to me John. But consistency across the project would be a nice-to-have for those who design and communicate the platform to decision makers who don't understand why they're signing off v1 of this, v2 of that, v1 of this other one... It portrays a sense of program incongruit

Re: [Openstack] [Swift] API changes in v2 vs v1

2014-07-23 Thread John Dickinson
Adam, that sounds you're talking about the API versions. So a user is consuming eg Keystone v2, Nova v3, and Swift v1 (not to mention all the other projects). Are you asking for a singular "OpenStack API"? Or maybe a common API version number across projects (similar to how the requirements are

Re: [Openstack] [TripleO]Overcloud won't use nova command like "nova list"

2014-07-23 Thread Jerry Xinyu Zhao
Have you run init-keystone and setup-endpoints? You need to run them after overcloud is deployed. Quote from http://openstack.redhat.com/TripleO_VM_Setup Overcloud Steps Once your Overcloud is up and running, it needs some initial orchestration to set it up. After that, you can deploy vm's on it

[Openstack] Floating IP Address Location

2014-07-23 Thread Luan Lucas
Hi, how are you ? So, I'm in a project and I need to know where the information about the floating IP addresses are stored, a log, a file, a table in database, something like that, because I need to connect the IP address information with the tenant that owns it. Thank you.

[Openstack] Deploying to a specific host using scheduler_hints

2014-07-23 Thread Joe D'Andrea
I have a need to deploy a given VM on a specific host in my OpenStack Icehouse cluster, bypassing availability zones entirely. To help with this, I've attempted the following: 1. Created Host Aggregate. Each contains a single host and metadata of the form 'host=hostname' (e.g., 'host=myhost').

Re: [Openstack] Deploying to a specific host using scheduler_hints

2014-07-23 Thread Mike Spreitzer
"Joe D'Andrea" wrote on 07/23/2014 04:23:21 PM: > I have a need to deploy a given VM on a specific host in my > OpenStack Icehouse cluster, bypassing availability zones entirely. Can you be a little more explicit about your issue with availability zones? Did you know that you can specify the

[Openstack] While running nova-manage, SQLalchemy is throwing an error

2014-07-23 Thread Jeff Silverman
When I run nova-manage, it fails. The message in /var/log/nova/nova-manage.log is 2014-07-23 13:16:28.276 31278 CRITICAL nova [-] AttributeError: 'module' object has no attribute 'DatabaseNotControlledError' Digging into the code with the python debugger leads me to ​Traceback (most recent call

Re: [Openstack] Deploying to a specific host using scheduler_hints

2014-07-23 Thread Joe D'Andrea
On Jul 23, 2014, at 4:34 PM, Mike Spreitzer wrote: > Did you know that you can specify the host to use by abusing the parameter > named "availability_zone" ... I sure do! That's partially what led me to looking at scheduler hints (more below). There were two issues, actually. 1. At first, I

[Openstack] [Murano] Introduction to the Application Catalog

2014-07-23 Thread Ekaterina Chernova
Hi all! You have a chance to get to know Murano project better with no hassle. Today we are starting to publish a series of Murano screencasts. Those videos are short and informative. We’ll try to cover all questions you might have about Murano. The first video [1] g

Re: [Openstack] While running nova-manage, SQLalchemy is throwing an error

2014-07-23 Thread Jeff Silverman
What I have found is if I invoke the nova-manage program from within the Bourne shell while logged in as root sh-4.1# python /usr/bin/nova-manage db sync nova which is what I think the intent of the command su -s /bin -c "nova-manage db sync" nova is trying to do. File "/usr/lib/python2.6/site-

[Openstack] openstack and MFA

2014-07-23 Thread Abdelhakim OUHSAYN
Please can someone tell me that Openstack support MFA for authentication? Thanks in advance -- Abdelhakim OUHSAYN ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe :

Re: [Openstack] [TripleO]Overcloud won't use nova command like "nova list"

2014-07-23 Thread 严超
That was what I missed. Thank you so much for reminding me. *Best Regards!* *Chao Yan--**My twitter:Andy Yan @yanchao727 * *My Weibo:http://weibo.com/herewearenow --* 2014-07-24 3:02 GMT+08:00 Jerry Xinyu

Re: [Openstack] openstack and MFA

2014-07-23 Thread Clint Dilks
Hi a quick Google Search seems to show that some form of this has been supported since Grizzly. See http://docs.openstack.org/security-guide/content/identity.html for more information or https://www.google.com/search?q=multifactor+authentication+keystone&gws_rd=ssl On Thu, Jul 24, 2014 at 12:06

Re: [Openstack] router cannot communicate with external

2014-07-23 Thread ZHOU TAO A
Hi, I have installed icehouse with ovs vlan configuration. Network node and controller node coexists. The problem is I can ping the public IP address of my router but cannot ping external gateway from my instance. My instance has internal IP 192.48.1.51 and a floating IP 135.252.167.187. My

Re: [Openstack] [Swift] API changes in v2 vs v1

2014-07-23 Thread Adam Lawson
Well, please don't mistake my question as a personal resistance to how things are currently done. I am however curious if standardizing things across the ecosystem is possible so the perceived message is consistent. Versioning of the programs themselves is different since folks seem to be picking u

Re: [Openstack] [Swift] API changes in v2 vs v1

2014-07-23 Thread John Dickinson
Although there is an integrated release of OpenStack twice a year, that release is the aggregate of different projects and different code repositories that are managed by different subsets of the overall developer community. And there are new projects added all the time. I don't think it's a tec

Re: [Openstack] router cannot communicate with external

2014-07-23 Thread Chinasubbareddy M
Hi, Can you please share the routes at router and instance , ip netns exec qrouter-e3119ff4-2fac-4226-9e63-009cfce8ac4c route -n also share the route of qdhcp and the instance. Regards, Subbareddy, Persistent systems ltd. From: ZHOU TAO A [mailto:tao.a.z...@alcatel-lucent.com] Sent: Thursday, J

Re: [Openstack] Inconsistent official docs for enabling LBaas and Fwaas

2014-07-23 Thread Kelam, Koteswara Rao
You can use multiple no. of service plugins by specifying them in single line separated by comma. If you specify them in multiple lines, the last one will overwrite all I think. service_plugins = neutron.services.loadbalancer.plugin.LoadBalancerPlugin, neutron.services.firewall.fwaas_plugin.Fire

Re: [Openstack] router cannot communicate with external

2014-07-23 Thread Remo Mattei
just to add the following as well > ip netns exec qrouter-e3119ff4-2fac-4226-9e63-009cfce8ac4c ifconfig On Jul 23, 2014, at 21:56, Chinasubbareddy M wrote: > Hi, > > Can you please share the routes at router and instance , > > ip netns exec qrouter-e3119ff4-2fac-4226-9e63-009cfce8ac4cr

Re: [Openstack] Inconsistent official docs for enabling LBaas and Fwaas

2014-07-23 Thread foss geek
Hi, What about this: http://lmohanphy.livejournal.com/1797.html Thanks On Wed, Jul 23, 2014 at 2:19 PM, Xianyi Ye wrote: > Hi all, > > > > Is there anyone knows how to enable LBaas and Fwaas simultaneously? > > Currently, I’m totally confused by 2 different config doc. > > > > One is from > ht