Re: [openstack-dev] There are no OpenStack talks submitted to XenCon, CFP ends this week

2013-07-23 Thread Bob Ball
The CFP is at http://events.linuxfoundation.org/events/linuxcon-north-america/program/xen-project-user-summit - this is for the Xen User Summit as part of linuxcon. While it might not have OpenStack in the title, I'm aware of at least one talk which has already been submitted with a strong Open

Re: [openstack-dev] [ceilometer] [horizon] Python client uncapping, currently blocking issues

2013-07-23 Thread Julien Danjou
On Tue, Jul 23 2013, Sean Dague wrote: Hi Sean, > A couple weeks ago after a really *fun* night we started down this road of > uncapping all the python clients to ensure that we're actually testing the > git clients in the gate. We're close, but we need the help of the horizon > and ceilometercli

Re: [openstack-dev] [Blueprint sharing-model-for-external-networks] Define a sharing model for external networks

2013-07-23 Thread Zang MingJie
Hi Salvatore: I have submitted a blueprint zone-based-router [1] intending to solve the problem the bp focus on, it is a totally different approach, where shared network and router are abandoned. It may be a bit hard to implement in havana, but some prepare work still can be done in havana. First

Re: [openstack-dev] Change in openstack/neutron[master]: Add method to get iptables traffic counters

2013-07-23 Thread Sylvain Afchain
Hi Brian, I just realized that my example in the comment of the review was not so good. The currently implementation of the driver already does what you propose. The driver addresses this case: Two labels rules matches a packet; a CIDR of a rule overlaps another one: iptables -N test1 iptables

[openstack-dev] [Swift] Swift Auth systems and Delay Denial

2013-07-23 Thread David Hadas
Hi, Starting from 1.9, Swift has get_info() support allowing middleware to get container and/or account information maintained by Swift. Middleware can use get_info() on a container to retrieve the container metadata. In a similar way, middleware can use get_inf() on an account to retrieve the acc

[openstack-dev] [tripleo] removing sudoers.d rules from disk-image-builder

2013-07-23 Thread Robert Collins
We have a bunch of sudo rules in disk-image-builder. They are there primarily so we could have passwordless sudo on jenkins boxes, but working with the infra team now, it looks like we'd run on devstack-gate nodes, not on jenkins directly, so they aren't needed for that. They don't add appreciable

Re: [openstack-dev] [Neutron] Chalenges with highly available service VMs - port adn security group options.

2013-07-23 Thread Samuel Bercovici
Hi, I agree that the AutZ should be separated and the service provider should be able to control this based on their model. For Service VMs who might be serving ~100-~1000 IPs and might use multiple MACs per port, it would be better to turn this off altogether that to have an IPTABLE rules wit

Re: [openstack-dev] [Ceilometer] Is that possible to implement new APIs for horizon to show the usage report and charts?

2013-07-23 Thread Julien Danjou
On Tue, Jul 23 2013, Brooklyn Chen wrote: > > It would be helpful if ceilometer-api provides following api: > > GET /v2/usages/disk/ > > Parameters: q(list(Query)) Filter rules for the resources to be returned. > Return Type: list(Usage) A list of usage with different tenant,user, > resource > >

[openstack-dev] stable/grizzly 2013.1.3 approaching WAS Re: No Project & release status meeting tomorrow

2013-07-23 Thread Alan Pevec
Hi Thierry, > we'll be skipping the release status > meeting tomorrow at 21:00 UTC I wanted to remind at that meeting about the next stable/grizzly release 2013.1.3, meeting next week would too late so I'll piggy back here. Proposed freeze is Aug 1st and release Aug 8th. Milestone 2013.1.3 has be

[openstack-dev] [Stackalytics] 0.1 release

2013-07-23 Thread Herman Narkaytis
Hello everyone! Mirantis is pleased to announce the release of Stackalytics 0.1. You can find complete details on the Stackalytics wiki page, but here are the brief release notes: - Changed

Re: [openstack-dev] [keystone] Split the Identity Backend blueprint

2013-07-23 Thread Adam Young
On 07/22/2013 09:49 PM, Miller, Mark M (EB SW Cloud - R&D - Corvallis) wrote: Adam, Sorry for the questions, but even though I have been programming for nearly 30 years I am new to Python and I find the code base somewhat difficult to follow. I have noticed that the file keystone.identity.ba

Re: [openstack-dev] [Stackalytics] 0.1 release

2013-07-23 Thread Roman Prykhodchenko
I still think counting lines of code is evil because it might encourage some developers to write longer code just for statistics. On Jul 23, 2013, at 16:58 , Herman Narkaytis wrote: > Hello everyone! > > Mirantis is pleased to announce the release of Stackalytics 0.1. You can find > complete

Re: [openstack-dev] [Nova] support for multiple active scheduler policies/drivers

2013-07-23 Thread Russell Bryant
On 07/23/2013 12:24 AM, Alex Glikson wrote: > Russell Bryant wrote on 23/07/2013 01:04:24 AM: >> > [1] > https://blueprints.launchpad.net/nova/+spec/multiple-scheduler-drivers >> > [2] https://wiki.openstack.org/wiki/Nova/MultipleSchedulerPolicies >> > [3] https://review.openstack.org/#/c/37407/ >

[openstack-dev] Hyper-V Meeting Canceled for Today.

2013-07-23 Thread Peter Pouliot
Hi All, I need to cancel the Hyper-V meeting for today. We will resume next week. Best p Peter J. Pouliot, CISSP Senior SDET, OpenStack Microsoft New England Research & Development Center One Memorial Drive,Cambridge, MA 02142 ppoul...@microsoft.com | Tel: +1

[openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread Henry Nash
Hi As part of bp https://blueprints.launchpad.net/keystone/+spec/policy-on-api-target I have uploaded some example WIP code showing a proposed approach for just a few API calls (one easy, one more complex). I'd appreciate early feedback on this before I take it any further. https://review.op

Re: [openstack-dev] [Nova] support for multiple active scheduler policies/drivers

2013-07-23 Thread Alex Glikson
Russell Bryant wrote on 23/07/2013 05:35:18 PM: > >> #1 - policy associated with a host aggregate > >> > >> This seems very odd to me. Scheduling policy is what chooses hosts, so > >> having a subset of hosts specify which policy to use seems backwards. > > > > This is not what we had in mind.

Re: [openstack-dev] [Heat] Multi region support for Heat

2013-07-23 Thread Clint Byrum
Excerpts from Steve Baker's message of 2013-07-22 21:43:05 -0700: > On 07/23/2013 10:46 AM, Angus Salkeld wrote: > > On 22/07/13 16:52 +0200, Bartosz Górski wrote: > >> Hi folks, > >> > >> I would like to start a discussion about the blueprint I raised about > >> multi region support. > >> I would

Re: [openstack-dev] [keystone] Split the Identity Backend blueprint

2013-07-23 Thread Alexius Ludeman
hi Adam, Can you explain why RoleApi() and ProjectApi() are duplicated in assignment/backends/ldap.py and identity/backends/ldap.py? It would seem duplicating the same class in two files should be refactored into new shared file. thanks lex On Tue, Jul 23, 2013 at 7:21 AM, Adam Young wrote:

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread Dolph Mathews
On Tue, Jul 23, 2013 at 10:40 AM, Henry Nash wrote: > Hi > > As part of bp > https://blueprints.launchpad.net/keystone/+spec/policy-on-api-target I > have uploaded some example WIP code showing a proposed approach for just a > few API calls (one easy, one more complex). I'd appreciate early feedb

Re: [openstack-dev] [Nova] support for multiple active scheduler policies/drivers

2013-07-23 Thread Russell Bryant
On 07/23/2013 12:02 PM, Alex Glikson wrote: > Russell Bryant wrote on 23/07/2013 05:35:18 PM: >> >> #1 - policy associated with a host aggregate >> >> >> >> This seems very odd to me. Scheduling policy is what chooses hosts, so >> >> having a subset of hosts specify which policy to use seems back

[openstack-dev] [savanna] scalable architecture

2013-07-23 Thread Sergey Lukjanov
Hi evereyone, We’ve started working on upgrading Savanna architecture in version 0.3 to make it horizontally scalable. The most part of information is in the wiki page - https://wiki.openstack.org/wiki/Savanna/NextGenArchitecture. Additionally there are several blueprints created for this acti

Re: [openstack-dev] [tripleo] removing sudoers.d rules from disk-image-builder

2013-07-23 Thread Chris Jones
Hi On 23 July 2013 10:52, Robert Collins wrote: > So I'd like to change things to say: > - either run sudo disk-image-create or > This is probably the simplest option, but it does increase the amount of code we're running with elevated privileges, which might be a concern, but probably isn't,

Re: [openstack-dev] [tripleo] removing sudoers.d rules from disk-image-builder

2013-07-23 Thread Clint Byrum
Excerpts from Robert Collins's message of 2013-07-23 02:52:11 -0700: > We have a bunch of sudo rules in disk-image-builder. They are there > primarily so we could have passwordless sudo on jenkins boxes, but > working with the infra team now, it looks like we'd run on > devstack-gate nodes, not on

Re: [openstack-dev] [savanna] scalable architecture

2013-07-23 Thread Russell Bryant
On 07/23/2013 12:32 PM, Sergey Lukjanov wrote: > Hi evereyone, > > We’ve started working on upgrading Savanna architecture in version 0.3 to > make it horizontally scalable. > > The most part of information is in the wiki page - > https://wiki.openstack.org/wiki/Savanna/NextGenArchitecture. >

Re: [openstack-dev] Hyper-V Meeting Canceled for Today.

2013-07-23 Thread Russell Bryant
On 07/23/2013 11:38 AM, Peter Pouliot wrote: > Hi All, > > > > I need to cancel the Hyper-V meeting for today. We will resume next week. I'd like an update from you guys on all of the hyper-v blueprints targeted for havana-3. I see 6 of them. A few are still marked not started. Do you sti

Re: [openstack-dev] Hyper-V Meeting Canceled for Today.

2013-07-23 Thread Alessandro Pilotti
Hy Russell, Yep, we are on track with the development, I have to update the BP status. There's a fairly big one up for review now https://review.openstack.org/#/c/38160/, the other Nova ones are faster to get ready for review. Thanks, Alessandro On Jul 23, 2013, at 19:47 , Russell Bryant

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread David Chadwick
When writing a previous ISO standard the approach we took was as follows Lie to people who are not authorised. So applying this approach to your situation, you could reply Not Found to people who are authorised to see the object if it had existed but does not, and Not Found to those not author

Re: [openstack-dev] [barbican]

2013-07-23 Thread Tiwari, Arvind
Thanks Jarret for all the good information. It seems KMIP is getting lots of enterprise attention, so I think it may be good candidate for future (as you already mentioned in your email below) Barbican feature, as per the link below it seems our community also expects KMIP to be integrated wit

[openstack-dev] [nova] [baremetal] Mixed bare-metal + hypervisor cloud using grizzly

2013-07-23 Thread Zsolt Haraszti
Hi, We are very interested to set up a small OpenStack cloud with a portion of the servers used as bare-metal servers and the rest used as "normal" KVM hypervisor compute nodes. We are using grizzly, and launch with devstack for simplicity. For a proof-of-concept, I set up an all-in-one node (als

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread David Chadwick
Hi Henry using the XACML processing model, the functionality that you are describing, which you say is currently partly missing from Keystone, is that of the context handler. Its job is to marshall all the attributes that are needed and put them into the request context for calling the policy eng

[openstack-dev] [ironic] Problem When Have Test In Master Branch

2013-07-23 Thread Wentian Jiang
stdout: {{{ GET: /v1/nodes/1be26c0b-03f2-4d2e-ae87-c02d7f33c123 {} GOT:Response: 401 Unauthorized Content-Type: text/plain; charset=UTF-8 Www-Authenticate: Keystone uri='https://127.0.0.1:35357' 401 Unauthorized This server could not verify that you are authorized to access the document you request

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread Adam Young
On 07/23/2013 12:54 PM, David Chadwick wrote: When writing a previous ISO standard the approach we took was as follows Lie to people who are not authorised. Is that your verbage? I am going to reuse that quote, and I would like to get the attribution correct. So applying this approach to

Re: [openstack-dev] Hyper-V Meeting Canceled for Today.

2013-07-23 Thread Russell Bryant
On 07/23/2013 12:55 PM, Alessandro Pilotti wrote: > Hy Russell, > > Yep, we are on track with the development, I have to update the BP status. > > There's a fairly big one up for review > now https://review.openstack.org/#/c/38160/, the other Nova ones are > faster to get ready for review. Thank

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread Adam Young
On 07/23/2013 01:17 PM, David Chadwick wrote: Of course the tricky thing is knowing which object attributes to fetch for which user API requests. In the general case you cannot assume that Keystone knows the format or structure of the policy rules, or which attributes each will need, so you wou

Re: [openstack-dev] [keystone] Split the Identity Backend blueprint

2013-07-23 Thread Adam Young
On 07/23/2013 12:15 PM, Alexius Ludeman wrote: hi Adam, Can you explain why RoleApi() and ProjectApi() are duplicated in assignment/backends/ldap.py and identity/backends/ldap.py? It would seem duplicating the same class in two files should be refactored into new shared file. That is the "

Re: [openstack-dev] [ironic] Problem When Have Test In Master Branch

2013-07-23 Thread Devananda van der Veen
The tests are working for me, and for Jenkins. Several versions of packages in requirements.txt and test-requirements.txt were updated yesterday -- try to update your dev environment with "source .tox/venv/bin/activate & pip install --upgrade -r requirements.txt -r test-requirements.txt" and then

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread Henry Nash
One thing we could do is: - Return Forbidden or NotFound if we can determine the correct answer - When we can't (i.e. the object doesn't exist), then return NotFound unless a new config value 'policy_harden' (?) is set to true (default false) in which case we translate NotFound into Forbidden.

Re: [openstack-dev] A simple way to improve nova scheduler

2013-07-23 Thread Joshua Harlow
Or another idea: Have each compute node write into redis (thus avoiding saturating the MQ & broker/DB with capabilities information) under 2 keys, one that is updated over longer periods and one that is updated frequently. - Possibly like the following compute-$hostname.slow compute-$hostname.

Re: [openstack-dev] [Swift] Swift Auth systems and Delay Denial

2013-07-23 Thread Clay Gerrard
I think delay_denial will have to be maintained for awhile for backwards compatibility no matter what happens. I think existing auth middlewares can and often do reject requests outright without forwarding them to swift (no x-auth-token?). I think get_info and the env caching is relatively new, d

Re: [openstack-dev] [neutron] Neutron Network Statistics

2013-07-23 Thread Brian Haley
Hi Peter, There are some blueprints around getting metering information at the router level, mainly so they can be fed into a billing system. For example: https://blueprints.launchpad.net/neutron/+spec/bandwidth-router-measurement There are patches out for review as well. They are targeted mor

Re: [openstack-dev] KMIP client for volume encryption key management

2013-07-23 Thread Becker, Bill
Thanks for your review and comments on the blueprint. A few comments / clarifications: * There are about a half dozen key manager products on the market that support KMIP. They are offered in different form factors / price points: some are physical appliances (with and without embedded

Re: [openstack-dev] A simple way to improve nova scheduler

2013-07-23 Thread Joe Gordon
On Jul 22, 2013 7:13 PM, "Joshua Harlow" wrote: > > An interesting idea, I'm not sure how useful it is but it could be. > > If you think of the compute node capability information as an 'event stream' then you could imagine using something like apache flume ( http://flume.apache.org/) or storm (ht

Re: [openstack-dev] [savanna] scalable architecture

2013-07-23 Thread Sergey Lukjanov
There is an inaccuracy about savanna-conductor role in this document. Now we have no real reasons to make savanna-conductor as an separated service. The main goal of declaring savanna-conductor in this doc is to illustrate that we want to move all db-related operations to the single module that

Re: [openstack-dev] About fixing old DB migrations

2013-07-23 Thread Vishvananda Ishaya
On Jul 18, 2013, at 4:19 AM, Sean Dague wrote: > On 07/18/2013 05:54 AM, Nikola Đipanov wrote: >> >> Heya, >> >> Rule is because (I believe at least) - in the spirit of continuous >> integration - people should be able to deploy continuously anything on >> master. >> >> Due to the nature of s

[openstack-dev] [Neutron] Proposal to add new neutron-core members

2013-07-23 Thread Mark McClain
All- I'd like to propose that Kyle Mestery and Armando Migliaccio be added to the Neutron core team. Both have been very active with valuable reviews and contributions to the Neutron community. Neutron core team members please respond with +1/0/-1. mark ___

[openstack-dev] [ceilometer] [horizon] Python client uncapping, currently blocking issues

2013-07-23 Thread Lyle, David (Cloud Services)
> Hi Sean, >> A couple weeks ago after a really *fun* night we started down this >> road of uncapping all the python clients to ensure that we're actually >> testing the git clients in the gate. We're close, but we need the help >> of the horizon and ceilometerclient teams to get us there: >> >

Re: [openstack-dev] [Neutron] Proposal to add new neutron-core members

2013-07-23 Thread Gary Kotton
A big +2 for both! They have been doing a great job as of late. -Original Message- From: Mark McClain [mailto:mark.mccl...@dreamhost.com] Sent: Tuesday, July 23, 2013 10:15 PM To: OpenStack Development Mailing List Subject: [openstack-dev] [Neutron] Proposal to add new neutron-core member

Re: [openstack-dev] [Neutron] Proposal to add new neutron-core members

2013-07-23 Thread Aaron Rosen
+1 I think both Kyle and Armando would be a great addition to the team. On Tue, Jul 23, 2013 at 12:15 PM, Mark McClain wrote: > All- > > I'd like to propose that Kyle Mestery and Armando Migliaccio be added to > the Neutron core team. Both have been very active with valuable reviews > and cont

Re: [openstack-dev] Revert Pass instance host-id to Quantum using port bindings extension.

2013-07-23 Thread Vishvananda Ishaya
On Jul 19, 2013, at 3:37 PM, Ian Wells wrote: >> [arosen] - sure, in this case though then we'll have to add even more >> queries between nova-compute and quantum as nova-compute will need to query >> quantum for ports matching the device_id to see if the port was already >> created and if not t

Re: [openstack-dev] [Neutron] Proposal to add new neutron-core members

2013-07-23 Thread Nachi Ueno
Great News! +1 for both guys 2013/7/23 Aaron Rosen : > +1 > > I think both Kyle and Armando would be a great addition to the team. > > > On Tue, Jul 23, 2013 at 12:15 PM, Mark McClain > wrote: >> >> All- >> >> I'd like to propose that Kyle Mestery and Armando Migliaccio be added to >> the Neutr

Re: [openstack-dev] [ceilometer] [horizon] Python client uncapping, currently blocking issues

2013-07-23 Thread Sean Dague
On 07/23/2013 03:19 PM, Lyle, David (Cloud Services) wrote: Hi Sean, A couple weeks ago after a really *fun* night we started down this road of uncapping all the python clients to ensure that we're actually testing the git clients in the gate. We're close, but we need the help of the horizon a

Re: [openstack-dev] A simple way to improve nova scheduler

2013-07-23 Thread Ian Wells
> * periodic updates can overwhelm things. Solution: remove unneeded updates, > most scheduling data only changes when an instance does some state change. It's not clear that periodic updates do overwhelm things, though. Boris ran the tests. Apparently 10k nodes updating once a minute extend the

Re: [openstack-dev] [Neutron] Chalenges with highly available service VMs - port adn security group options.

2013-07-23 Thread Aaron Rosen
I agree too. I've posted a work in progress of this here if you want to start looking at it: https://review.openstack.org/#/c/38230/ Thanks, Aaron On Tue, Jul 23, 2013 at 4:21 AM, Samuel Bercovici wrote: > Hi, > > ** ** > > I agree that the AutZ should be separated and the service provide

Re: [openstack-dev] A simple way to improve nova scheduler

2013-07-23 Thread Joe Gordon
On Jul 23, 2013 3:44 PM, "Ian Wells" wrote: > > > * periodic updates can overwhelm things. Solution: remove unneeded updates, > > most scheduling data only changes when an instance does some state change. > > It's not clear that periodic updates do overwhelm things, though. > Boris ran the tests.

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread David Chadwick
On 23/07/2013 18:36, Adam Young wrote: On 07/23/2013 01:17 PM, David Chadwick wrote: Of course the tricky thing is knowing which object attributes to fetch for which user API requests. In the general case you cannot assume that Keystone knows the format or structure of the policy rules, or whi

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread David Chadwick
On 23/07/2013 18:31, Adam Young wrote: On 07/23/2013 12:54 PM, David Chadwick wrote: When writing a previous ISO standard the approach we took was as follows Lie to people who are not authorised. Is that your verbage? I am going to reuse that quote, and I would like to get the attribution

Re: [openstack-dev] KMIP client for volume encryption key management

2013-07-23 Thread Clark, Robert Graham
All of the main IaaS services are looking to bring in encryption of one form or another. I believe that KMIP support for HSM integration at the Barbican backend is going to be very important to some deployers but the outstanding requirement has to be to solve the key management problem in a sma

Re: [openstack-dev] [Neutron] Proposal to add new neutron-core members

2013-07-23 Thread Edgar Magana
+1 Absolutely for both! BTW. I also would like to propose to Eugene Nikanorov Thanks, Edgar On 7/23/13 12:15 PM, "Mark McClain" wrote: >All- > >I'd like to propose that Kyle Mestery and Armando Migliaccio be added to >the Neutron core team. Both have been very active with valuable reviews >a

Re: [openstack-dev] [Neutron] Proposal to add new neutron-core members

2013-07-23 Thread Robert Kukura
On 07/23/2013 03:15 PM, Mark McClain wrote: > All- > > I'd like to propose that Kyle Mestery and Armando Migliaccio be added to the > Neutron core team. Both have been very active with valuable reviews and > contributions to the Neutron community. > > Neutron core team members please respond w

Re: [openstack-dev] A simple way to improve nova scheduler

2013-07-23 Thread Boris Pavlovic
Ian, There are serious scalability and performance problems with DB usage in current scheduler. Rapid Updates + Joins makes current solution absolutely not scalable. Bleuhost example just shows personally for me just a trivial thing. (It just won't work) We will add tomorrow antother graphic: Av

Re: [openstack-dev] A simple way to improve nova scheduler

2013-07-23 Thread Mike Wilson
Just some added info for that talk, we are using qpid as our messaging backend. I have no data for RabbitMQ, but our schedulers are _always_ behind on processing updates. It may be different with rabbit. -Mike On Tue, Jul 23, 2013 at 1:56 PM, Joe Gordon wrote: > > On Jul 23, 2013 3:44 PM, "Ian

Re: [openstack-dev] A simple way to improve nova scheduler

2013-07-23 Thread Joe Gordon
On Tue, Jul 23, 2013 at 1:09 PM, Boris Pavlovic wrote: > Ian, > > There are serious scalability and performance problems with DB usage in > current scheduler. > Rapid Updates + Joins makes current solution absolutely not scalable. > > Bleuhost example just shows personally for me just a trivial t

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread David Chadwick
On 23/07/2013 19:02, Henry Nash wrote: One thing we could do is: - Return Forbidden or NotFound if we can determine the correct answer - When we can't (i.e. the object doesn't exist), then return NotFound unless a new config value 'policy_harden' (?) is set to true (default false) in which cas

Re: [openstack-dev] [Nova] support for multiple active scheduler policies/drivers

2013-07-23 Thread Alex Glikson
Russell Bryant wrote on 23/07/2013 07:19:48 PM: > I understand the use case, but can't it just be achieved with 2 flavors > and without this new aggreagte-policy mapping? > > flavor 1 with extra specs to say aggregate A and policy Y > flavor 2 with extra specs to say aggregate B and policy Z I

Re: [openstack-dev] A simple way to improve nova scheduler

2013-07-23 Thread Boris Pavlovic
Joe, Sure we will. Mike, Thanks for sharing information about scalability problems, presentation was great. Also could you say what do you think is 150 req/sec is it big load for qpid or rabbit? I think it is just nothing.. Best regards, Boris Pavlovic --- Mirantis Inc. On Wed, Jul 24, 2013 a

Re: [openstack-dev] [keystone] Split the Identity Backend blueprint

2013-07-23 Thread Alexius Ludeman
Perhaps I'm confused but there does not appear to be a shim for ProjectApi(): https://github.com/openstack/keystone/blob/master/keystone/assignment/backends/ldap.py#L270 https://github.com/openstack/keystone/blob/master/keystone/identity/backends/ldap.py#L277 I believe this holds true for RoleApi

Re: [openstack-dev] [Neutron] Proposal to add new neutron-core members

2013-07-23 Thread Dan Wendlandt
+1's from this emeritus member of the core team :) On Tue, Jul 23, 2013 at 1:04 PM, Robert Kukura wrote: > On 07/23/2013 03:15 PM, Mark McClain wrote: > > All- > > > > I'd like to propose that Kyle Mestery and Armando Migliaccio be added to > the Neutron core team. Both have been very active w

Re: [openstack-dev] [Neutron] Proposal to add new neutron-core members

2013-07-23 Thread Salvatore Orlando
totally +1 for mestery +1 for Armax only if he stops serially -1'ing my patches. Cheers, Salvatore PS: of course the official vote is +1 for both. On 23 July 2013 13:37, Dan Wendlandt wrote: > +1's from this emeritus member of the core team :) > > > On Tue, Jul 23, 2013 at 1:04 PM, Robert Kuk

[openstack-dev] Python 3

2013-07-23 Thread Logan McNaughton
I'm sure this has been asked before, but what exactly is the plan for Python 3 support? Is the plan to support 2 and 3 at the same time? I was looking around for a blue print or something but I can't seem to find anything. If Python 3 support is part of the plan, can I start running 2to3 and maki

Re: [openstack-dev] Python 3

2013-07-23 Thread Eric Windisch
On Tue, Jul 23, 2013 at 4:41 PM, Logan McNaughton wrote: > I'm sure this has been asked before, but what exactly is the plan for > Python 3 support? > > Is the plan to support 2 and 3 at the same time? I was looking around for > a blue print or something but I can't seem to find anything. > > I su

Re: [openstack-dev] A simple way to improve nova scheduler

2013-07-23 Thread Mike Wilson
Again I can only speak for qpid, but it's not really a big load on the qpidd server itself. I think the issue is that the updates come in serially into each scheduler that you have running. We don't process those quickly enough for it to do any good, which is why the lookup from db. You can see thi

Re: [openstack-dev] Python 3

2013-07-23 Thread Doug Hellmann
On Tue, Jul 23, 2013 at 4:41 PM, Logan McNaughton wrote: > I'm sure this has been asked before, but what exactly is the plan for > Python 3 support? > > Is the plan to support 2 and 3 at the same time? I was looking around for > a blue print or something but I can't seem to find anything. > > If P

Re: [openstack-dev] [Nova] support for multiple active scheduler policies/drivers

2013-07-23 Thread Russell Bryant
On 07/23/2013 04:24 PM, Alex Glikson wrote: > Russell Bryant wrote on 23/07/2013 07:19:48 PM: > >> I understand the use case, but can't it just be achieved with 2 flavors >> and without this new aggreagte-policy mapping? >> >> flavor 1 with extra specs to say aggregate A and policy Y >> flavor 2

Re: [openstack-dev] A simple way to improve nova scheduler

2013-07-23 Thread Clint Byrum
Excerpts from Boris Pavlovic's message of 2013-07-19 07:52:55 -0700: > Hi all, > > > > In Mirantis Alexey Ovtchinnikov and me are working on nova scheduler > improvements. > > As far as we can see the problem, now scheduler has two major issues: > > > 1) Scalability. Factors that contribute t

Re: [openstack-dev] [Heat] Multi region support for Heat

2013-07-23 Thread Randall Burt
On Jul 23, 2013, at 11:03 AM, Clint Byrum wrote: > Excerpts from Steve Baker's message of 2013-07-22 21:43:05 -0700: >> On 07/23/2013 10:46 AM, Angus Salkeld wrote: >>> On 22/07/13 16:52 +0200, Bartosz Górski wrote: Hi folks, I would like to start a discussion about the blueprin

Re: [openstack-dev] Python 3

2013-07-23 Thread Brian Curtin
On Jul 23, 2013, at 3:51 PM, Eric Windisch mailto:e...@cloudscaling.com>> wrote: On Tue, Jul 23, 2013 at 4:41 PM, Logan McNaughton mailto:lo...@bacoosta.com>> wrote: I'm sure this has been asked before, but what exactly is the plan for Python 3 support? Is the plan to support 2 and 3 at

Re: [openstack-dev] A simple way to improve nova scheduler

2013-07-23 Thread Joshua Harlow
I like the idea clint. It appears to me that the kind of scheduler 'buckets' that are being established allow for different kind of policies around how accurate and how 'global' the deployer wants scheduling to be (which might be a differing policies depending on the deployer). All of these kind o

Re: [openstack-dev] [Horizon] Navigation UX Enhancements - Collecting Issues

2013-07-23 Thread Tim Schnell
Most of my navigation related issues can be summed up into 3 problems. 1. Not having a secondary level of navigation in the left-nav really restricts the level of granularity that can be achieved through the navigation. Having an accordion-like nav structure would help this as well as setting

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread Henry Nash
...the problem is that if the object does not exists we might not be able tell whether the use is authorized or not (since authorization might depend on attributes of the object itself)so how do we know wether to lie or not? Henry On 23 Jul 2013, at 21:23, David Chadwick wrote: > > > On 2

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread Tiwari, Arvind
Hi Henry, Do you have etherpad to capture these stuff? Arvind -Original Message- From: Henry Nash [mailto:hen...@linux.vnet.ibm.com] Sent: Tuesday, July 23, 2013 4:48 PM To: David Chadwick Cc: OpenStack Development Mailing List Subject: Re: [openstack-dev] [keystone] Extending policy

Re: [openstack-dev] [Neutron] Proposal to add new neutron-core members

2013-07-23 Thread Sumit Naiksatam
+1, congrats and welcome Kyle and Armando. ~Sumit. On Tue, Jul 23, 2013 at 12:15 PM, Mark McClain wrote: > All- > > I'd like to propose that Kyle Mestery and Armando Migliaccio be added to the > Neutron core team. Both have been very active with valuable reviews and > contributions to the Neu

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread Simo Sorce
On Tue, 2013-07-23 at 23:47 +0100, Henry Nash wrote: > ...the problem is that if the object does not exists we might not be able > tell whether the use is authorized or not (since authorization might depend > on attributes of the object itself)so how do we know wether to lie or not? If the e

Re: [openstack-dev] [Neutron] Proposal to add new neutron-core members

2013-07-23 Thread Akihiro MOTOKI
+1, Welcome to the team, Kyle and Armando! Akihiro 2013/7/24 Sumit Naiksatam > +1, congrats and welcome Kyle and Armando. > > ~Sumit. > > On Tue, Jul 23, 2013 at 12:15 PM, Mark McClain > wrote: > > All- > > > > I'd like to propose that Kyle Mestery and Armando Migliaccio be added to > the Neu

Re: [openstack-dev] [ironic] Problem When Have Test In Master Branch

2013-07-23 Thread Wentian Jiang
Thank you:), it works when requirements builds. On Tue, Jul 23, 2013 at 2:04 PM, Devananda van der Veen < devananda@gmail.com> wrote: > The tests are working for me, and for Jenkins. > > Several versions of packages in requirements.txt and test-requirements.txt > were updated yesterday -- tr

[openstack-dev] [Swift] question on Application class concurrency; paste.app_factory mechanism

2013-07-23 Thread Luse, Paul E
Trying to understand a bit more about the Application class defined in proxy/server.py. Looks like it instantiated by means of paste deploy application factories which I know really nothing about. Using the saio environment it looks like a class is instantiated when the service is started f

Re: [openstack-dev] [Heat] Multi region support for Heat

2013-07-23 Thread Adrian Otto
Clint, On Jul 23, 2013, at 10:03 AM, Clint Byrum wrote: > Excerpts from Steve Baker's message of 2013-07-22 21:43:05 -0700: >> On 07/23/2013 10:46 AM, Angus Salkeld wrote: >>> On 22/07/13 16:52 +0200, Bartosz Górski wrote: Hi folks, I would like to start a discussion about the b

Re: [openstack-dev] [Neutron] Proposal to add new neutron-core members

2013-07-23 Thread P Balaji-B37839
+1 for Kyle and +1 for Armando Both are going to adding muscle to Neutron Core Team. Congrats Guys! On 07/23/2013 03:15 PM, Mark McClain wrote: > All- > > I'd like to propose that Kyle Mestery and Armando Migliaccio be added to the > Neutron core team. Both have been very active with valuabl

Re: [openstack-dev] Proposal for API version discovery

2013-07-23 Thread Jamie Lennox
On Thu, 2013-05-02 at 00:46 +, Gabriel Hurley wrote: > Based on input from several of the PTLs (and others), I'd like to propose the > following outline for how version discovery should be handled across > heterogeneous clouds: > > https://etherpad.openstack.org/api-version-discovery-proposa

Re: [openstack-dev] [Heat] Multi region support for Heat

2013-07-23 Thread Clint Byrum
Excerpts from Adrian Otto's message of 2013-07-23 21:22:14 -0700: > Clint, > > On Jul 23, 2013, at 10:03 AM, Clint Byrum > wrote: > > > Excerpts from Steve Baker's message of 2013-07-22 21:43:05 -0700: > >> On 07/23/2013 10:46 AM, Angus Salkeld wrote: > >>> On 22/07/13 16:52 +0200, Bartosz Górs