[openstack-dev] I18n meeting tomorrow

Hi, There will be OpenStack I18n team meeting at 0700UTC on Thursday (September 5th) in IRC channel #openstack-meeting. The time, we use Asia/Europe friendly time. Welcome to join the meeting. During the previous several weeks, we have good progress with the infrastructure setting up in Transi

[openstack-dev] [openstack][nova] an unit test problem

Hi experts, I have an odd unit test issue in the commit https://review.openstack.org/#/c/44639/ the test results are here: http://logs.openstack.org/39/44639/7/check/gate-nova-python27/4ddc671/testr_results.html.gz the not passed test is: nova.tests.compute.test_compute_api.ComputeCellsAPIUnitT

[openstack-dev] [ceilometer] Wait a minute... I thought we were going to remove Alembic until Icehouse-1?

So I went to do the work I said I was going to do at last week's Ceilometer meeting -- translate the 2 Alembic migrations in the Ceilometer source into SA-migrate migrations -- and then rebased my branch only to find 2 more Alembic migrations added in the last few days: https://review.openstac

Re: [openstack-dev] [keystone][heat] Question re deleting trusts via trust token

Excerpts from Dolph Mathews's message of 2013-09-03 16:12:00 -0700: > On Tue, Sep 3, 2013 at 5:52 PM, Steven Hardy wrote: > > > Hi, > > > > I have a question for the keystone folks re the expected behavior when > > deleting a trust. > > > > Is it expected that you can only ever delete a trust as

Re: [openstack-dev] [nova] key management and Cinder volume encryption

On Tue, Sep 3, 2013 at 6:44 PM, John Griffith wrote: > > > > On Tue, Sep 3, 2013 at 7:27 PM, Bryan D. Payne wrote: > >> >> > How can someone use your code without a key manager? Some key management mechanism is required although it could be simplistic. For example, we’ve test

Re: [openstack-dev] [nova] key management and Cinder volume encryption

On Tue, Sep 3, 2013 at 7:27 PM, Bryan D. Payne wrote: > > > How can someone use your code without a key manager? >>> >>> Some key management mechanism is required although it could be >>> simplistic. For example, we’ve tested our code internally with an >>> implementation of the key manager

Re: [openstack-dev] [nova] key management and Cinder volume encryption

> > How can someone use your code without a key manager? >> >> Some key management mechanism is required although it could be >> simplistic. For example, we’ve tested our code internally with an >> implementation of the key manager interface that returns a single, constant >> key. >> > That wo

[openstack-dev] Join the online meeting for moderators of Ask OpenStack

We are holding an online meeting for all the people that use Ask OpenStack. On Thursday Sept. 5 from 6PM to 7PM Pacific Time on IRC freenode.net #openstack-community The main intention is to share best practices and in the long term improve the objective of Ask OpenStack: to provide the bes

Re: [openstack-dev] [Ceilometer] Need help with HBase backend

Hi Thomas, Not yet, sorry. But working on it (in parallel!), was having a bit of an issue setting up a new env with devstack. Will update you as soon as I have some results. Thanks, Stas On 3 September 2013 23:00, Thomas Maddox wrote: > Hey Stas, > > Were you ever able to get any answers

Re: [openstack-dev] [Neutron] Security groups with OVS instead of iptables?

It is possible to enforce security groups on OVS provided you have Openflow Controller instead of neutron agent managing the OVS switches. On Tue, Sep 3, 2013 at 10:29 AM, Scott Devoid wrote: > +1 for an answer to this. > > The reference documentation suggests running Neutron OVS with a total o

[openstack-dev] [keystone][heat] Question re deleting trusts via trust token

Hi, I have a question for the keystone folks re the expected behavior when deleting a trust. Is it expected that you can only ever delete a trust as the user who created it, and that you can *not* delete the trust when impersonating that user using a token obtained via that trust? The reason for

Re: [openstack-dev] [nova] key management and Cinder volume encryption

On 09/03/2013 06:26 PM, Bhandaru, Malini K wrote: > The issue here is the key manager, barbican, under development is in > incubation. > Folks can download and use barbican. The barbican team has worked deligently > to produce the system. > In fact, folks can download and use and vote for Joel's

Re: [openstack-dev] [nova] key management and Cinder volume encryption

On 09/03/2013 05:41 PM, Coffman, Joel M. wrote: >> How can someone use your code without a key manager? > > Some key management mechanism is required although it could be > simplistic. For example, we’ve tested our code internally with an > implementation of the key manager interface that returns

Re: [openstack-dev] [Neutron] Security groups with OVS instead of iptables?

I am not entirely sure that any of the open source plugins available in the neutron source tree currently provides the ability of ensuring security groups through OVS flow management. But I might be missing some out-of-tree plugin, of which I have little to no knowledge. To answer the initial ques

Re: [openstack-dev] [keystone][heat] Question re deleting trusts via trust token

On Tue, Sep 3, 2013 at 5:52 PM, Steven Hardy wrote: > Hi, > > I have a question for the keystone folks re the expected behavior when > deleting a trust. > > Is it expected that you can only ever delete a trust as the user who > created it, and that you can *not* delete the trust when impersonatin

Re: [openstack-dev] [nova] key management and Cinder volume encryption

The issue here is the key manager, barbican, under development is in incubation. Folks can download and use barbican. The barbican team has worked deligently to produce the system. In fact, folks can download and use and vote for Joel's patch to be merged. And do give us feedback on barbican. The

Re: [openstack-dev] [nova] key management and Cinder volume encryption

On Tue, Sep 3, 2013 at 5:41 PM, Coffman, Joel M. wrote: > > How can someone use your code without a key manager? > > Some key management mechanism is required although it could be simplistic. > For example, we’ve tested our code internally with an implementation of the > key manager interface

Re: [openstack-dev] [Ceilometer] Need help with HBase backend

Hey Stas, Were you ever able to get any answers on this? :) Thanks! -Thomas On 8/12/13 9:42 AM, "Thomas Maddox" mailto:thomas.mad...@rackspace.com>> wrote: Happens all of the time. I haven't been able to get a single meter stored. :( From: Stas Maksimov mailto:maksi...@gmail.com>> Reply-To:

Re: [openstack-dev] [nova] key management and Cinder volume encryption

> How can someone use your code without a key manager? Some key management mechanism is required although it could be simplistic. For example, we've tested our code internally with an implementation of the key manager interface that returns a single, constant key. I think the underlying issue is

Re: [openstack-dev] [Ceilometer] Documentation and patches

On Tue, Sep 3, 2013 at 10:14 AM, Thierry Carrez wrote: > Anne Gentle wrote: > > Nova is the overall "winner" (cough) with 110 doc bugs followed by > > keystone with 26. 110 doc bugs indicates a serious need. > > Ouch. > > > Teams, please follow through on docs and see how you can help. > > > > htt

[openstack-dev] [nova] key management and Cinder volume encryption

We have fully implemented support for transparently encrypting Cinder volumes from within Nova (see https://review.openstack.org/#/c/30976/), but the lack of a secure key manager within OpenStack currently precludes us from in

Re: [openstack-dev] [nova] key management and Cinder volume encryption

On Tue, Sep 3, 2013 at 4:38 PM, Coffman, Joel M. wrote: > We have fully implemented support for transparently encrypting Cinder > volumesfrom > within Nova (see > https://review.openstack.org/#/c/30976/), but the lack of a secure

Re: [openstack-dev] Backwards incompatible migration changes - Discussion

On Wed, Sep 4, 2013 at 1:54 AM, Vishvananda Ishaya wrote: > > +1 I think we should be reconstructing data where we can, but keeping track of > deleted data in a backup table so that we can restore it on a downgrade seems > like overkill. I guess it comes down to use case... Do we honestly expect

[openstack-dev] Recent Keystone OpenLDAP install documentation

Hello, I am looking for recent OpenLDAP installation and configuration documentation to use with Keystone Havana H2. Please let me know if you have a pointer to some. Regards, Mark Miller ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.

Re: [openstack-dev] Neutron + Grenade (or other upgrade testing)

On 08/27/2013 01:20 PM, Maru Newby wrote: On Aug 26, 2013, at 10:23 AM, Dean Troyer wrote: On Mon, Aug 26, 2013 at 10:50 AM, Maru Newby wrote: Is anyone working on/planning on adding support for neutron to grenade? Or is there any other automated upgrade testing going on for neutron? We d

[openstack-dev] Teaching me to fish

Hi OpenStack Developers, I started working with OpenStack, November 2011 coming from five years working on WordPress. Part of my motivation was to get deeper in the stack. Wow, in these 1.5 years have I gone deep! Thank you for your patience in providing my the best education. Working with you an

[openstack-dev] [marconi] Q&A section added to incubation request

Folks, I've attempted to consolidate recent questions and answers re Marconi at the bottom of our incubation request: http://goo.gl/msB8l0 Please take a look and let me know if there's anything I missed or if you have any corrections. Cheers, Kurt __

Re: [openstack-dev] Gate breakage process - Let's fix! (related but not specific to neutron)

On 08/17/2013 12:26 AM, Clint Byrum wrote: Excerpts from Maru Newby's message of 2013-08-16 16:42:23 -0700: On Aug 16, 2013, at 11:44 AM, Clint Byrum wrote: Excerpts from Maru Newby's message of 2013-08-16 11:25:07 -0700: Neutron has been in and out of the gate for the better part of the pa

Re: [openstack-dev] [Infra] Meeting Tuesday September 3rd at 19:00 UTC

On Mon, Sep 2, 2013 at 9:53 AM, Elizabeth Krumbach Joseph wrote: > The OpenStack Infrastructure (Infra) team is hosting our weekly > meeting tomorrow, Tuesday September 3rd, at 19:00 UTC in > #openstack-meeting Meeting minutes and logs: Minutes: http://eavesdrop.openstack.org/meetings/infra/201

Re: [openstack-dev] [Climate] REST API proposal

On 08/30/2013 04:37 AM, Nikolay Starodubtsev wrote: Hi, everyone! We have created a proposal for Climate REST API https://docs.google.com/document/d/1U36k5wk0sOUyLl-4Cz8tmk8RQFQGWKO9dVhb87ZxPC8/ And we like to discuss it with everyone. If you enable commenting on the proposal, then we can put c

Re: [openstack-dev] [Neutron] Security groups with OVS instead of iptables?

+1 for an answer to this. The reference documentation suggests running Neutron OVS with a total of 6 software switches between the VM and public NAT addresses. [1] What are the performances differences folks see with this configuration vs. the 2 software switch configuration for linux bridge? [1]

Re: [openstack-dev] [Climate] REST API proposal

Done Sincerely yours, Sergey Lukjanov Savanna Technical Lead Mirantis Inc. On Sep 3, 2013, at 21:53, Jay Pipes wrote: > On 08/30/2013 04:37 AM, Nikolay Starodubtsev wrote: >> Hi, everyone! >> We have created a proposal for Climate REST API >> https://docs.google.com/document/d/1U36k5wk0sOUyLl-4

[openstack-dev] [Nova][vmware] VMwareAPI sub-team reviews update 2013-09-03

Feature freeze is on the 5th! Let's try and get these last few reviews through ASAP! To that end, here's the reviews first in priority order based on blueprint ... then again in order based on up/down votes. If there's something that needs discussion and you're stuck, feel free to reach out to

[openstack-dev] Hyper-V Meeting Minutes

Hi everyone, Here are the minutes from today's Hyper-V meeting. Meeting ended Tue Sep 3 17:01:15 2013 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) Minutes: http://eavesdrop.openstack.org/meetings/hyper_v/2013/hyper_v.2013-09-03-16.01.html Minutes (text)

Re: [openstack-dev] [savanna] cluster scaling on the 0.2 branch

Found an error in the HDP validation code affecting the node count of the additional (new) node group. Looked at the savanna core code and realized the nature of the way the node groups were being scaled up (both existing and additional) and that pointed me to the issue. -- Jon On Aug 30, 201

[openstack-dev] Hyper-V meeting

Hi All, Today's Hyper-V meeting agenda will be the following. * Current review backlog * Puppet Hyper-V module status Best, Peter J. Pouliot, CISSP Senior SDET, OpenStack Microsoft New England Research & Development Center One Memorial Drive,Cambridge, MA 02142 ppoul...@

Re: [openstack-dev] Backwards incompatible migration changes - Discussion

On Sep 2, 2013, at 4:24 AM, Joshua Hesketh wrote: > Howdy, > > At the moment database migrations are required to implement a downgrade > method to ensure updates can be rolled back. Currently downgrades are only > being tested by Jenkins/tox against sqlite databases. MySQL and Postgresql > are

Re: [openstack-dev] Questions related to live migration without target host

I made a comment on the review, but don't we still need this check if we do live migration with a target host? Vish On Sep 2, 2013, at 3:59 PM, Guangya Liu wrote: > Greetings, > > There is an issue related to "live migration without target host" might want > to get more discussion/feedback f

Re: [openstack-dev] [Ceilometer] Documentation and patches

Anne Gentle wrote: > Nova is the overall "winner" (cough) with 110 doc bugs followed by > keystone with 26. 110 doc bugs indicates a serious need. Ouch. > Teams, please follow through on docs and see how you can help. > > https://bugs.launchpad.net/openstack-manuals/+bugs/?field.tag=nova > https

[openstack-dev] Clarification of XenServer versions

I've received a number of questions recently about XenServer and XCP and how they are different - particularly now that XS 6.2 has been released - so thought I should try and get the answers all in one place. XenServer: As of XS 6.2, it was announced that it will be fully open sourced[1] and all

[openstack-dev] [Neutron][Smokestack] Review 40296 hit by Torpedo

Hi, We are removing the schema autogeneration capability from Neutron [1]. The patch however did not pass Torpedo tests on Smokestack; looking at the logs it seems Firestack deploys Neutron but the db is empty, which is consistent with firestack leveraging schema auto-generation capabilities. I'

Re: [openstack-dev] [Ceilometer] Documentation and patches

On Mon, Sep 2, 2013 at 3:51 AM, Thierry Carrez wrote: > Lorin Hochstein wrote: > > Would it help if doc bugs were associated with the relevant OpenStack > > project, in addition to the openstack-manauls project? For example, we > > could mark nova-related doc bugs as "nova" project bugs in additi

Re: [openstack-dev] Confused about GroupAntiAffinityFilter and GroupAffinityFilter

I've done a wrong copy&paste, see correction inline. Le 03/09/2013 12:34, Simon Pasquier a écrit : Hello, Thanks for the reply. First of all, do you agree that the current documentation for these filters is inaccurate? My test environment has 2 compute nodes: compute1 and compute3. First, I l

Re: [openstack-dev] [savanna] Fwd: Change in stackforge/savanna-extra[master]: Add diskimage-creating script, elements for mirrors

Hi, 1.We used mvn to create tar.gz and I'll add documentation for that. 2. The command is simple: "parameter1='some_value1' ... parameterN='some_valueN' disk-image-create element1 ... elementM -o image_name". Some files in ~/.cache/image-create/ are owned by root (for example, it is file SHA256SUM

[openstack-dev] [Neutron] Security groups with OVS instead of iptables?

(Also asked at https://ask.openstack.org/en/question/4718/security-groups-with-ovs-instead-of-iptables/ ) The only security group implementations in neutron seem to be iptables-based. Is it technically possible to implement security groups using openvswitch flow rules, instead of iptables rules?

Re: [openstack-dev] Cinder Backup documentation - to which doc it should go?

On Tue, Sep 3, 2013 at 7:07 AM, Ronen Kat wrote: > Hi Emilien, > > I have looked at the block guide - the master branch it is mostly empty, > most of the content was moved to the OpenStack configuration reference. > Any suggestion on relation what should be in the configuration reference > vs. th

[openstack-dev] [savanna] Fwd: Change in stackforge/savanna-extra[master]: Add diskimage-creating script, elements for mirrors

Long weekend here in the US, so I didn't get a chance to comment before this was merged, so... Re Oozie - How did you create the oozie-3.3.2.tar.gz? Re sudo image-cache - That's not the case for me, the wget is run without sudo. How are you running disk-image-create? Re DIB_work - it's best

Re: [openstack-dev] Cinder Backup documentation - to which doc it should go?

Hi Emilien, I have looked at the block guide - the master branch it is mostly empty, most of the content was moved to the OpenStack configuration reference. Any suggestion on relation what should be in the configuration reference vs. the block admin guide - which is now practically empty. Regards

Re: [openstack-dev] Cinder Backup documentation - to which doc it should go?

Hi Ronen, The best place for your documentation is in the OpenStack Bloc Storage guide [1]. If you need help with OpenStack manuals, we have a dedicated wiki page [2]. Please let us know if you need support. Regards, [1] https://github.com/openstack/openstack-manuals/tree/master/doc/src/docbkx

[openstack-dev] [Nova] review request for bp improve-block-device-handling

Hi folks, I'd greatly appreciate if we could get the remaining two patches reviewed and hopefully merged for the upcoming freeze this Wednesday. Both patches have been up for a long time and have seen a number of revisions and several +2 already. The patches in question are: https://review.opens

Re: [openstack-dev] [Heat] Instance naming in IG/ASG and problems related to UpdatePolicy

Hi Winson, On Fri, Aug 30, 2013 at 02:23:18PM +, Chan, Winson C wrote: > Regarding the last set of comments on the UpdatePolicy, I want to bring your > attention to a few items. I already submitted a new patch set and didn't > want to reply on the old patch set so that's why I emailed. Sor

[openstack-dev] Cinder Backup documentation - to which doc it should go?

I noticed the complains about code submission without appropriate documentation submission, so I am ready to do my part for Cinder backup I have just one little question. Not being up to date on the current set of OpenStack manuals, and as I noticed that the block storage admin guide lost a l

Re: [openstack-dev] Confused about GroupAntiAffinityFilter and GroupAffinityFilter

Hello, Thanks for the reply. First of all, do you agree that the current documentation for these filters is inaccurate? My test environment has 2 compute nodes: compute1 and compute3. First, I launch 1 instance (not being tied to any group) on each node: $ nova boot --flavor m1.tiny --image

Re: [openstack-dev] Openstack Folsom + Quantum + XenServer 6.1.0 + Windows VM

Hi Dbarros, Could you look at this blog post: http://blogs.citrix.com/2013/06/14/openstack-networking-quantum-on-xenserver-from-notworking-to-networking/ I would not expect Grizzly to work with XenServer + Quantum without some extra patches. Let me know if you have further questions: Mate On

Re: [openstack-dev] Confused about GroupAntiAffinityFilter and GroupAffinityFilter

Hi, Hopefully I will be able to address your questions. First lets start with the group anti-affinity. This was added towards the end of the Grizzly release cycle as a scheduling hint. At the last summit we sat and agreed on a more formal approach to deal with this and we proposed and developed htt

[openstack-dev] [Murano] Murano v0.2.5 release planning

Hello folks, Development process for Murano v0.2 is finished. Thus, today I would like to start discussion about the next version of Murano v0.2.5 (while we are fixing bugs in v0.2 and polishing our documentation). Here is our ROADMAP [1]. As you can see, I already created a section for Murano v0

Re: [openstack-dev] Code review

Ah, Will do! Thx! /Peter On 3 September 2013 08:56, Flavio Percoco wrote: > On 03/09/13 08:28 +0200, Peter Liljenberg wrote: > >> Hi, >> >> Could someone review this (Added support for JaCoCo plugin Publisher). >> >> https://review.openstack.org/#**/c/44705/

[openstack-dev] Reminder: Project & release status meeting - 21:00 UTC

Today in the project/release status meeting, we are one day away from the dreaded FeatureFreeze. We'll look into havana-3 project roadmaps and check what can still make it in the next day, what might require a feature freeze exception, and what is likely to be deferred. The "almost feature complete

Re: [openstack-dev] Questions related to live migration without target host

I tend to agree with Jake that this check is likely to conflict with the scheduler, and should be removed. Regards, Alex From: Guangya Liu To: openstack-dev@lists.openstack.org, Date: 03/09/2013 02:03 AM Subject:[openstack-dev] Questions related to live migration without ta

[openstack-dev] Confused about GroupAntiAffinityFilter and GroupAffinityFilter

Reposting to openstack-dev as I got no answer on the general mailing list. Message original Sujet: [Openstack] Confused about GroupAntiAffinityFilter and GroupAffinityFilter Date : Mon, 2 Sep 2013 11:19:58 +0200 De : Simon Pasquier Organisation : Bulll SAS Pour : Hello, I

Re: [openstack-dev] Code review

On 03/09/13 08:28 +0200, Peter Liljenberg wrote: Hi, Could someone review this (Added support for JaCoCo plugin Publisher). https://review.openstack.org/#/c/44705/ /Peter Hi, When asking for Code Reviews, pls, tag the email subject with the project in matter. Cheers, FF -- @flaper87 Flav