[openstack-dev] [cinder][conductor] Creating a new service

2013-06-27 Thread Nikolay Starodubtsev
Hi, everyone! In the begining of June I create a blueprint about cinder-conductor. Can anyone take a look at it? Here it is: https://blueprints.launchpad.net/cinder/+spec/no-db-volume ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http:/

Re: [openstack-dev] OpenStack Programs

2013-06-27 Thread Thierry Carrez
Tom Fifield wrote: >> Translations is another "horizontal effort", something that applies to >> all projects, like release management or vulnerability handling, but >> where contributions actually end up being applied as patches to other >> projects, rather than having their own repos. Another exam

[openstack-dev] [Nova]Discussion about resize and migrate status separation

2013-06-27 Thread guohliu
Greetings, I apologize if this question was already covered and I missed it, as we know the migrate and resize share the same code path as well as instance status, notification message etc in current code base, somehow it might confuse the user when he/she perform migrate but get VERIFY_RESIZE

Re: [openstack-dev] [Ceilometer]How to change Keystone properties

2013-06-27 Thread Julien Danjou
On Wed, Jun 26 2013, Pendergrass, Eric wrote: > [keystone] [keystone_authtoken] if Adam's answer isn't clear enough :) -- Julien Danjou ;; Free Software hacker ; freelance consultant ;; http://julien.danjou.info signature.asc Description: PGP signature ___

[openstack-dev] [Neutron] Quantum renamed to Neutron on Launchpad

2013-06-27 Thread Thierry Carrez
Hi everyone, Note that Quantum was renamed to Neutron on Launchpad: https://launchpad.net/neutron https://launchpad.net/python-neutronclient You may have to adjust links to match. Expect some disruption in bug status updates and other scripts/reports while we align everything. -- Thierry Carrez

[openstack-dev] [Ceilometer] Meeting agenda for Thu Jun 27th at 1500 UTC

2013-06-27 Thread Julien Danjou
The Ceilometer project team holds a meeting in #openstack-meeting, see https://wiki.openstack.org/wiki/Meetings/MeteringAgenda for more details. Next meeting is on Thu Jun 27th at 1500 UTC Please add your name with the agenda item, so we know who to call on during the meeting. * Review Havana-2

Re: [openstack-dev] [Nova] Nominating John Garbutt for nova-core

2013-06-27 Thread Mate Lakat
+1 On Wed, Jun 26, 2013 at 11:09:34AM -0400, Russell Bryant wrote: > Greetings, > > I would like to nominate John Garbutt for the nova-core team. > > John has been involved with nova for a long time now. He's primarily > known for his great work on the xenapi driver. However, he has been > con

Re: [openstack-dev] OpenStack Programs

2013-06-27 Thread Stefano Maffulli
On 06/27/2013 10:10 AM, Thierry Carrez wrote: > It's not as clear of a slam dunk as the other (initial) programs due to > the nature of their "deliverable", which is consumed by the projects > themselves, so it's a bit of a corner case. Additionally, the reach of > the Technical Committee is suppos

Re: [openstack-dev] [Nova] Nominating John Garbutt for nova-core

2013-06-27 Thread Bob Ball
+1 from me too. From: Russell Bryant [rbry...@redhat.com] Sent: 26 June 2013 16:09 To: OpenStack Development Mailing List Subject: [openstack-dev] [Nova] Nominating John Garbutt for nova-core Greetings, I would like to nominate John Garbutt for the nova-co

Re: [openstack-dev] [Nova]Discussion about resize and migrate status separation

2013-06-27 Thread John Garbutt
I haven't seen any plans to change this. The way I see it, the states make most sense for resize, which is the end-user facing operation. Personally I see migrate as a more admin focused operation. So to help simplify the code, I am OK with slightly confusing states for those users. The exception

[openstack-dev] CFP: IJDSN Special Issue on Emerging Sensor-Cloud Technology for Pervasive Services and Applications

2013-06-27 Thread Dr. Mohammad Mehedi Hassan
[Apologies in advance, if you receive multiple copies of this CFP due to cross-posting] International Journal of Distributed Sensor Networks Special Issue on Emerging Sensor-Cloud Technology for Pervasive Services and Applications URL: http://www.hindawi.com/journals/ijdsn/si/161297/cfp/ C

Re: [openstack-dev] OpenStack Programs

2013-06-27 Thread Thierry Carrez
Stefano Maffulli wrote: > On 06/27/2013 10:10 AM, Thierry Carrez wrote: >> Mind you, I'm not closing the door or anything: translations can >> certainly apply to become a program (once/when we establish them). The >> goal of the "initial batch" is to catch up with the current state of >> "official

Re: [openstack-dev] [Keystone] Unified logging and Eventlet conflict

2013-06-27 Thread Davanum Srinivas
Lance, "is eventlet installed" a strong enough check? given that folks may pick up a python install that has eventlet installed w/o realizing it? Is there a way to check if the openstack process the code is running in is using eventlet or not? or the other choice is a flag in logging conf to swit

[openstack-dev] feature to attach USB on Guest VM

2013-06-27 Thread Shyam Goud
All, Please ignore if its a wrong alias. I am using grizzly. I have a requirement to attach USB to guest VM. Is this feature committed yet ? Tried following link, but not succeeded. https://bugs.launchpad.net/openstack-manuals/+bug/1106421 root@nvp:/home/nvp# glance image-update 59ce4

Re: [openstack-dev] [Keystone] Unified logging and Eventlet conflict

2013-06-27 Thread Doug Hellmann
This isn't something the deployer controls, so I don't know if we want it to go into a config setting. If we can't detect eventlet being used automatically, we could provide an initialization function in the locals module so projects could change the behavior when a process starts. The default mod

Re: [openstack-dev] [Keystone] Unified logging and Eventlet conflict

2013-06-27 Thread Davanum Srinivas
Lance, Doug, Looks like eventlet.patcher.is_monkey_patched(thread) is a reasonable check to switch to to a thread-local implementation. Doug, did you mean threading.local with WeakValueDictionary? -- dims On Thu, Jun 27, 2013 at 8:15 AM, Doug Hellmann wrote: > This isn't something the deployer

[openstack-dev] CLI command to figure out security-group's association to particular tenant/user

2013-06-27 Thread Rahul Sharma
Hi All, I have a query regarding the security-groups. Whenever I create a new tenant, a default security-group is created for that tenant. Now I want to find out which security-group is for which tenant? If I run "quantum security-group-list", then it shows me the security-groups is below format:-

[openstack-dev] [Networking] devstack broken with GRE tunnels?

2013-06-27 Thread Simon Pasquier
Am I right in assuming that devstack using tunneling is currently broken due to VXLAN modifications [1]? In particular the tunnel_type parameter in the [agent] section is not set by devstack. Is anybody working on this issue? If not I can do it. [1] https://review.openstack.org/#/c/30319/ --

Re: [openstack-dev] Http library usage by clients

2013-06-27 Thread Thierry Carrez
Adam Young wrote: > Right now Keystone provides so called bearer tokens: This means that whoever > has a token can do whatever the token entitles him to do. If I > manage to get somebody's token I can do whatever this person is able to do. Right. Tokens are considered secrets for that reason. >

[openstack-dev] [marconi] Today's meeting @ 1900 UTC

2013-06-27 Thread Kurt Griffiths
Folks, quick reminder that Marconi contributors will be holding our regular meeting today at 1900 UTC in #openstack-meeting-alt If you'd like to add anything to the agenda, just edit the wiki, respond to me in email, and/or catch either myself or Flavio (flaper87) in #openstack-marconi https://wi

Re: [openstack-dev] OpenStack Programs

2013-06-27 Thread Anne Gentle
I'd really like to see Translation be the first program we bring in after bringing in the first batch. Translation and localization meets the criteria for a program. Their inclusion in a second round will help us learn how to bring in a valuable program, identify the right owners, and promote the a

Re: [openstack-dev] Http library usage by clients

2013-06-27 Thread Jay Pipes
On 06/26/2013 12:55 PM, Adam Young wrote: Glance: - Uses httplib for communication - Uses keystoneclient within cli - Checks that socket is patched before importing eventlet for httplib. For the record, Glance uses httplib, not httplib2, for its request/response handling because httplib2 does

Re: [openstack-dev] [Networking] devstack broken with GRE tunnels?

2013-06-27 Thread Kyle Mestery (kmestery)
On Jun 27, 2013, at 9:00 AM, Simon Pasquier wrote: > > Am I right in assuming that devstack using tunneling is currently broken due > to VXLAN modifications [1]? > In particular the tunnel_type parameter in the [agent] section is not set by > devstack. > > Is anybody working on this issue? If

Re: [openstack-dev] [cinder][conductor] Creating a new service

2013-06-27 Thread Russell Bryant
On 06/27/2013 02:56 AM, Nikolay Starodubtsev wrote: > Hi, everyone! In the begining of June I create a blueprint about > cinder-conductor. Can anyone take a look at it? > Here it is: https://blueprints.launchpad.net/cinder/+spec/no-db-volume It's not immediately obvious why it's a problem for cind

Re: [openstack-dev] [Networking] devstack broken with GRE tunnels?

2013-06-27 Thread Mark McClain
Simon- This is actually two issues. 1) It looks like there is a backwards incompatibility that we introduced during H1. Kyle is working on an update to fix the incompatibility. 2) Devstack itself is not broken. It just doesn't have support for a newer feature of the OVS plugin. It would be

Re: [openstack-dev] [cinder][conductor] Creating a new service

2013-06-27 Thread John Griffith
On Thu, Jun 27, 2013 at 9:56 AM, John Griffith wrote: > > > > On Thu, Jun 27, 2013 at 9:47 AM, Russell Bryant wrote: > >> On 06/27/2013 02:56 AM, Nikolay Starodubtsev wrote: >> > Hi, everyone! In the begining of June I create a blueprint about >> > cinder-conductor. Can anyone take a look at it? >

Re: [openstack-dev] [cinder][conductor] Creating a new service

2013-06-27 Thread John Griffith
On Thu, Jun 27, 2013 at 9:47 AM, Russell Bryant wrote: > On 06/27/2013 02:56 AM, Nikolay Starodubtsev wrote: > > Hi, everyone! In the begining of June I create a blueprint about > > cinder-conductor. Can anyone take a look at it? > > Here it is: https://blueprints.launchpad.net/cinder/+spec/no-db

Re: [openstack-dev] [Networking] devstack broken with GRE tunnels?

2013-06-27 Thread Kyle Mestery (kmestery)
On Jun 27, 2013, at 10:49 AM, Mark McClain wrote: > > Simon- > > This is actually two issues. > > 1) It looks like there is a backwards incompatibility that we introduced > during H1. Kyle is working on an update to fix the incompatibility. > > 2) Devstack itself is not broken. It just does

Re: [openstack-dev] [Networking] Allocation of IPs

2013-06-27 Thread Aaron Rosen
Hi Edgar, In this case if you don't associate a subnet with a network you should achieve that. Why doesn't that work? Thanks, Aaron On Thu, Jun 20, 2013 at 1:51 PM, Edgar Magana wrote: > Could it be possible to add a flag to disable the allocation for the IP? > If the "no allocation" flag

Re: [openstack-dev] [Networking] devstack broken with GRE tunnels?

2013-06-27 Thread Simon Pasquier
Le 27/06/2013 17:45, Kyle Mestery (kmestery) a écrit : On Jun 27, 2013, at 9:00 AM, Simon Pasquier wrote: Am I right in assuming that devstack using tunneling is currently broken due to VXLAN modifications [1]? In particular the tunnel_type parameter in the [agent] section is not set by devst

Re: [openstack-dev] [Networking] devstack broken with GRE tunnels?

2013-06-27 Thread Kyle Mestery (kmestery)
On Jun 27, 2013, at 11:18 AM, Simon Pasquier wrote: > Le 27/06/2013 17:45, Kyle Mestery (kmestery) a écrit : >> On Jun 27, 2013, at 9:00 AM, Simon Pasquier wrote: >>> Am I right in assuming that devstack using tunneling is currently broken >>> due to VXLAN modifications [1]? >>> In particular th

Re: [openstack-dev] [OpenStack][python-quantumclient] unit test question

2013-06-27 Thread Ilya Shakhat
KC, it looks like I've found the cause, and it is related to the way how firewall_rules_list is serialized/deserialized. After fixing issue with plural form of firewall_policy (quantum/v2_0/__init__.py line # 511), tox fails only with one error in test_create_firewall_policy_with_all_params for xm

Re: [openstack-dev] New BP - ServiceId binding with role definition

2013-06-27 Thread Tiwari, Arvind
All, I have added my comments to the questions raised in below etherpad, please take a look and share your feedback. Arvind From: Tiwari, Arvind Sent: Monday, June 24, 2013 4:19 PM To: 'OpenStack Development Mailing List' Subject: RE: New BP - ServiceId binding with role definition All, Added

[openstack-dev] Configuring dm-crypt inside Host

2013-06-27 Thread Benjamin, Bruce P.
Tauqeer, You need to add the volume encryption code into the repository, since it hasn't been accepted yet into the OpenStack master branch. Info is below from Nate Reller on how to set this up. Also, to answer your other question, encrypting data in a VM is currently possible, but it needs

Re: [openstack-dev] OpenStack Programs

2013-06-27 Thread Stefano Maffulli
On 06/27/2013 05:04 PM, Anne Gentle wrote: > Let's do it! (On Thierry's timetable so that we get valuable practice > talking about onboarding programs.) Sounds good to me as long as we all agree that Localization/Translations are a technical issue and that they're part of OpenStack's mission to em

Re: [openstack-dev] [Openstack] CLI command to figure out security-group's association to particular tenant/user

2013-06-27 Thread Aaron Rosen
Hi Rahul, The issue is that you are running as an admin user so it shows all the security groups for every tenant. If you want to list the security groups for just one particular tenant you can do this: quantum security-group-list -- --tenant-id= Aaron On Thu, Jun 27, 2013 at 5:54 AM, Rah

Re: [openstack-dev] feature to attach USB on Guest VM

2013-06-27 Thread Vishvananda Ishaya
The property is hw_disk_bus. See https://bugs.launchpad.net/nova/+bug/1132739 Note that this will force the root disk to be on the usb bus instead of using virtio. I'm not sure if this is what you want, but it should work in grizzly. Vish On Jun 27, 2013, at 5:14 AM, Shyam Goud wrote: > > Al

Re: [openstack-dev] [Networking] devstack broken with GRE tunnels?

2013-06-27 Thread Mark McClain
Kyle- Oops. I missed your upstream devstack patch. Thanks for pointing it out. mark On Jun 27, 2013, at 11:58 AM, Kyle Mestery (kmestery) wrote: > On Jun 27, 2013, at 10:49 AM, Mark McClain wrote: >> >> Simon- >> >> This is actually two issues. >> >> 1) It looks like there is a backwards

[openstack-dev] [State-Management] Agenda for todays meeting at 2000 UTC

2013-06-27 Thread Joshua Harlow
Hi all, The [state-management] project team holds a weekly meeting in #openstack-meeting on thursdays, 2000 UTC. The next meeting is today, June 27!!! As usual, everyone is welcome :-) Link: https://wiki.openstack.org/wiki/Meetings/StateManagement ## Agenda (30-60 mins): ## 2013-06-27: Contin

[openstack-dev] [Savanna] Savanna meeting minutes

2013-06-27 Thread Sergey Lukjanov
Thanks everyone who have joined today's Savanna meeting. Here are the logs from today's meeting: Minutes: http://eavesdrop.openstack.org/meetings/savanna/2013/savanna.2013-06-27-18.06.html Minutes (text): http://eavesdrop.openstack.org/meetings/savanna/2013/savanna.2013-06-27-18.06.txt Log: ht

Re: [openstack-dev] Http library usage by clients

2013-06-27 Thread Robert Collins
On 27 June 2013 04:55, Adam Young wrote: > Right now Keystone provides so called bearer tokens: This means that whoever > has a token can do whatever the token entitles him to do. If I > manage to get somebody's token I can do whatever this person is able to do. > To fix it, the other services tha

Re: [openstack-dev] [OpenStack][python-quantumclient] unit test question

2013-06-27 Thread Kuang-Ching Wang
Ilya, thanks for digging this far! Any advice on how to fix this issue? Thanks! KC On Jun 27, 2013, at 9:42 AM, Ilya Shakhat wrote: > KC, it looks like I've found the cause, and it is related to the way how > firewall_rules_list is serialized/deserialized. > > After fixing issue with plural

[openstack-dev] [Nova] RBAC (policy) in compute.api.get_all

2013-06-27 Thread Burt Holzman
Hi, While working on https://review.openstack.org/33782, I saw that compute.api.get_all does a policy check that is essentially a no-op (the default policy for compute is admin_or_owner, so this is always true): - #TODO(bcwaldon): determine the best argument for target here

[openstack-dev] [State-Management] Collecting more requirements for a task system.

2013-06-27 Thread Joshua Harlow
Howday all, Rackspace and Y! (and others) have been working on taskflow library and we have been trying to fill out requirements (while at the same time filling out the library itself). Currently we have some insight into how cinder can currently benef

Re: [openstack-dev] Http library usage by clients

2013-06-27 Thread Jamie Lennox
On Fri, 2013-06-28 at 07:01 +1200, Robert Collins wrote: > On 27 June 2013 04:55, Adam Young wrote: > > Right now Keystone provides so called bearer tokens: This means that whoever > > has a token can do whatever the token entitles him to do. If I > > manage to get somebody's token I can do whatev

Re: [openstack-dev] Http library usage by clients

2013-06-27 Thread Jamie Lennox
On Thu, 2013-06-27 at 11:39 -0400, Jay Pipes wrote: > On 06/26/2013 12:55 PM, Adam Young wrote: > > Glance: > > - Uses httplib for communication > > - Uses keystoneclient within cli > > - Checks that socket is patched before importing eventlet for httplib. > > For the record, Glance uses httplib,

Re: [openstack-dev] Http library usage by clients

2013-06-27 Thread Jamie Lennox
On Thu, 2013-06-27 at 16:35 +0200, Thierry Carrez wrote: > Adam Young wrote: > > Right now Keystone provides so called bearer tokens: This means that > > whoever has a token can do whatever the token entitles him to do. If I > > manage to get somebody's token I can do whatever this person is able

Re: [openstack-dev] Http library usage by clients

2013-06-27 Thread Clint Byrum
On 2013-06-27 16:28, Jamie Lennox wrote: On Fri, 2013-06-28 at 07:01 +1200, Robert Collins wrote: On 27 June 2013 04:55, Adam Young wrote: Right now Keystone provides so called bearer tokens: This means that whoever has a token can do whatever the token entitles him to do. If I manage to get

[openstack-dev] [Metrics][Nova] Another take on review turnaround stats

2013-06-27 Thread Russell Bryant
Greetings, The key metric I have been using for knowing whether we are keeping up with review requests is the average wait time for getting a review. In a previous thread, we set a goal of keeping that under 4 days (at least by the end of the week, may be higher after a weekend). This is calcula

Re: [openstack-dev] Http library usage by clients

2013-06-27 Thread Simo Sorce
On Thu, 2013-06-27 at 17:49 -0700, Clint Byrum wrote: > On 2013-06-27 16:28, Jamie Lennox wrote: > > On Fri, 2013-06-28 at 07:01 +1200, Robert Collins wrote: > >> On 27 June 2013 04:55, Adam Young wrote: > >>> Right now Keystone provides so called bearer tokens: This means that > >>> whoever > >>

Re: [openstack-dev] [Keystone] Unified logging and Eventlet conflict

2013-06-27 Thread Adam Young
On 06/27/2013 08:43 AM, Davanum Srinivas wrote: Lance, Doug, Looks like eventlet.patcher.is_monkey_patched(thread) is a reasonable check to switch to to a thread-local implementation. Doesn't it make more sense to have anything Eventlet based explicitly activated? For Keystone, we have isolat

Re: [openstack-dev] [Keystone] Unified logging and Eventlet conflict

2013-06-27 Thread Lance D Bragstad
Hey all, I went ahead and pushed up a WIP patch taking into account suggestions from Dims and Doug. I just saw the email from Adam before I put up the patch. Let me know if this is somewhat the direction that we want to take: https://review.openstack.org/#/c/34834/ Thanks all for your time in r

Re: [openstack-dev] [Openstack] CLI command to figure out security-group's association to particular tenant/user

2013-06-27 Thread Rahul Sharma
Hi Aaron, Thanks for the CLI. I have a query related to that. I have a multinode openstack-deployment. To allow all the ports of VM accessible from outside, I need to add a rule "*TCP port-range 1-65535 Allow*" using Horizon dashboard. Now this rule is pushed to Quantum database as well as Nova da