Re: [openstack-dev] [keystone][heat] Question re deleting trusts via trust token

If delegation (trusts) were enhanced to be role based, then anyone with the same role as the initial delegator should be able to revoke the delegation regards David On 04/09/2013 05:02, Clint Byrum wrote: Excerpts from Dolph Mathews's message of 2013-09-03 16:12:00 -0700: On Tue, Sep 3, 20

Re: [openstack-dev] [keystone][heat] Question re deleting trusts via trust token

On Tue, Sep 03, 2013 at 06:12:00PM -0500, Dolph Mathews wrote: > On Tue, Sep 3, 2013 at 5:52 PM, Steven Hardy wrote: > > > Hi, > > > > I have a question for the keystone folks re the expected behavior when > > deleting a trust. > > > > Is it expected that you can only ever delete a trust as the u

Re: [openstack-dev] [ceilometer] Wait a minute... I thought we were going to remove Alembic until Icehouse-1?

On Wed, Sep 04 2013, Jay Pipes wrote: Hi Jay, > So I went to do the work I said I was going to do at last week's Ceilometer > meeting -- translate the 2 Alembic migrations in the Ceilometer source into > SA-migrate migrations -- and then rebased my branch only to find 2 more > Alembic migrations

Re: [openstack-dev] [Climate] REST API proposal

I've made some update in the document. Please check it On Tue, Sep 3, 2013 at 10:00 PM, Sergey Lukjanov wrote: > Done > > Sincerely yours, > Sergey Lukjanov > Savanna Technical Lead > Mirantis Inc. > > On Sep 3, 2013, at 21:53, Jay Pipes wrote: > > > On 08/30/2013 04:37 AM, Nikolay Starodubtsev

[openstack-dev] [Glance] v2 api upload image-size issue with rbd backend store

Hi, I'm hitting an issue with v2 api upload() and not sure the best way to fix it so would appreciate some opinions/suggestions. https://bugs.launchpad.net/glance/+bug/1213880 https://bugs.launchpad.net/python-glanceclient/+bug/1220197 So, currently doing cinder upload-to-image fails with v2 gla

[openstack-dev] Session suggestions for the Icehouse Design Summit now open

Hi everyone, TL;DR: The session suggestion website for the Icehouse Design Summit (which will happen at the OpenStack Summit in Hong-Kong) is now open at: http://summit.openstack.org/ Long version: The "Icehouse Design Summit" is a specific event part of the overall "OpenStack Summit" in Hong-Ko

Re: [openstack-dev] [keystone][heat] Question re deleting trusts via trust token

On Wed, Sep 04, 2013 at 09:49:48AM +0100, Steven Hardy wrote: > This final step is the problematic step - atm (unless I'm making a mistake, > which as previously proven is entirely possible! ;) it seems that it's > impossible for anyone except the trustor to delete the trust, even if we > impersona

[openstack-dev] [nova] review request

Hi all, I'd appreciate if any of the nova-core reviewers could take a look at https://review.openstack.org/#/c/39226/, as this add keypair notification events. which is more like a small feature than a bug, I am callling review just in case after feature freeze it can't be accepted. -- Tang Yag

Re: [openstack-dev] [Ceilometer] Need help with HBase backend

No worries at all! I was just curious. =] Sounds great. I appreciate your time. On 9/3/13 5:56 PM, "Stas Maksimov" mailto:[email protected]>> wrote: Hi Thomas, Not yet, sorry. But working on it (in parallel!), was having a bit of an issue setting up a new env with devstack. Will update you a

Re: [openstack-dev] [keystone][heat] Question re deleting trusts via trust token

you can always do anything by impersonating the user. This is why impersonation should never be sanctioned david On 04/09/2013 11:45, Steven Hardy wrote: Ok, apologies, after further testing, it appears I made a mistake and you *can* delete the trust by impersonating the user.

[openstack-dev] [Neutron] Question about create_port

Hello All, I am trying to make my neutron plugin to configure a physical switch(using vlans), while in create_port I am trying to configure the physical switch I see a lot of create_port and delete_port calls appearing in server.log. I am assuming that this may be due to the amount of time req

Re: [openstack-dev] [nova] key management and Cinder volume encryption

On 09/03/2013 09:27 PM, Bryan D. Payne wrote: > > > How can someone use your code without a key manager? > > Some key management mechanism is required although it could be > simplistic. For example, we’ve tested our code internally with > an implementation of t

[openstack-dev] [qa] How to do nova v3 tests in tempest

hi, I'm working on bp:nova-v3-tests in tempest. The nova tests in tempest mostly have been ported into v3 and sent off. but we got some feedbacks that there was mass code duplication and suggested to do this by inheritance. So I have sent another patch to do this by inheritance. But in th

[openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?

whenever I run devstack keystone falies to start because dogpile.cache is not installed; this is easily solved by installing it, but I wonder if it should be in requirements.txt Also, since the cache appears to be disabled by default (and I'm not enabling it in my localrc), I'm not sure why I am hi

Re: [openstack-dev] [keystone][heat] Question re deleting trusts via trust token

On Wed, Sep 4, 2013 at 5:45 AM, Steven Hardy wrote: > On Wed, Sep 04, 2013 at 09:49:48AM +0100, Steven Hardy wrote: > > This final step is the problematic step - atm (unless I'm making a > mistake, > > which as previously proven is entirely possible! ;) it seems that it's > > impossible for anyon

Re: [openstack-dev] [nova] key management and Cinder volume encryption

> External dependencies are fine, obviously. The difference is whether we > actually have code to interface with those external dependencies. We > have code to talk to databases and message queues. There's no code > right now to interface with anything for key management. > Ok, this makes sense

Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?

On Wed, Sep 4, 2013 at 9:14 AM, Salvatore Orlando wrote: > whenever I run devstack keystone falies to start because dogpile.cache is > not installed; this is easily solved by installing it, but I wonder if it > should be in requirements.txt > Also, since the cache appears to be disabled by default

[openstack-dev] [brick] Status and plans for the brick shared volume code

Hello, I was talking with Russell on IRC this morning about Brick code and the current submissions to Nova. We thought it might be a good idea to send out some info on what the intent is with these changes. The idea of Brick was to reduce the duplicated code between Nova and Cinder and provide a

Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?

On Wed, Sep 4, 2013 at 9:58 AM, David Stanek wrote: > > > On Wed, Sep 4, 2013 at 10:23 AM, Dolph Mathews wrote: > >> >> On Wed, Sep 4, 2013 at 9:14 AM, Salvatore Orlando wrote: >> >>> whenever I run devstack keystone falies to start because dogpile.cache >>> is not installed; this is easily solve

Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?

On Wed, Sep 4, 2013 at 10:23 AM, Dolph Mathews wrote: > > On Wed, Sep 4, 2013 at 9:14 AM, Salvatore Orlando wrote: > >> whenever I run devstack keystone falies to start because dogpile.cache is >> not installed; this is easily solved by installing it, but I wonder if it >> should be in requirement

Re: [openstack-dev] [nova] Revert Baremetal v3 API extension?

On 09/04/2013 10:26 AM, Dan Smith wrote: > Hi all, > > As someone who has felt about as much pain as possible from the > dual-maintenance of the v2 and v3 API extensions, I felt compelled to > bring up one that I think we can drop. The baremetal extension was > ported to v3 API before (I think) th

Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?

On Wed, Sep 4, 2013 at 9:34 AM, Salvatore Orlando wrote: > Is the cache module enabled on the devstack gate? If not, it's definetely > an issue on my side - otherwise we would have known about this. > > On a second look, dogpile.cache is actually required by requirements.txt, so you *should* have

Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?

Is the cache module enabled on the devstack gate? If not, it's definetely an issue on my side - otherwise we would have known about this. Salvatore On 4 September 2013 15:23, Dolph Mathews wrote: > > On Wed, Sep 4, 2013 at 9:14 AM, Salvatore Orlando wrote: > >> whenever I run devstack keystone

[openstack-dev] [Savanna]EDP question about Job sources

Hi guys! Yesterday we discussed the problem about additional resources. Our decision was to use the following structure of JobOrigin: { "name":"j_o", "url":"savanna://3bfae02a-87fb-4f5e-bee5-baa135ff4be0" "libs":[swift://example.savanna/lib1.jar, hdfs://user/hadoop/lib2.jar] } But today I realize

Re: [openstack-dev] Cinder Backup documentation - to which doc it should go?

Hi Ronan, I have a bug open (which I am guilty of letting slip) to amend to cinder backup docs: https://bugs.launchpad.net/openstack-manuals/+bug/1205359 I implemented the Ceph backup driver a while back and was intending to have a cleanup of the backup section in the docs while adding info on b

Re: [openstack-dev] [nova] Revert Baremetal v3 API extension?

Russell Bryant wrote: > On 09/04/2013 10:26 AM, Dan Smith wrote: >> Hi all, >> >> As someone who has felt about as much pain as possible from the >> dual-maintenance of the v2 and v3 API extensions, I felt compelled to >> bring up one that I think we can drop. The baremetal extension was >> ported

[openstack-dev] [nova] Revert Baremetal v3 API extension?

Hi all, As someone who has felt about as much pain as possible from the dual-maintenance of the v2 and v3 API extensions, I felt compelled to bring up one that I think we can drop. The baremetal extension was ported to v3 API before (I think) the decision was made to make v3 experimental for Havan

[openstack-dev] upgrade tox - now with less slowness!

Hey all! https://review.openstack.org/#/c/42178/2 has landed in nova, which means that nova now requires tox 1.6 or higher (for those folks using tox). We'll be wanting to port the same change to all of the projects, so if you use tox for anything, you'll want to go ahead and upgrade. Why? Becau

[openstack-dev] Incubation Request: Savanna

Hello Technical Committee Members and OpenStack Community, I've sent "Savanna incubation intention" [1] email with the short Savanna overview several weeks ago and now we would like to apply for the incubation! The official Savanna Incubator Application is available on the OpenStack wiki: https

Re: [openstack-dev] upgrade tox - now with less slowness!

On 04/09/13 11:56 -0400, Monty Taylor wrote: Because we landed a patch to tox upstream to use setup.py develop instead of sdist+install like our run_tests.sh scripts do - this means that with the new tox config changes, tox runs should be just as quick as run_tests.sh runs. A W E S O M E!!!

Re: [openstack-dev] Extension to volume creation (filesystem and label)

On 12 August 2013 19:00, Greg Poirier wrote: > I'm not sure that this is any different from: > - Examine current disk devices > - Attach volume > - Examine current disk devices > - Get device ID from diff > - Do something When correctly set up[*] the cinder volume ID appears as the serial number

Re: [openstack-dev] upgrade tox - now with less slowness!

On Wed, Sep 4, 2013 at 10:56 AM, Monty Taylor wrote: > Hey all! > > https://review.openstack.org/#/c/42178/2 has landed in nova, which means > that nova now requires tox 1.6 or higher (for those folks using tox). > We'll be wanting to port the same change to all of the projects, so if > you use t

Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?

This was an intentional design to depend on dogpile.cache due to the mechanism of caching (using decorators). This is partially the nature of the method of caching implementation. It should have been installed in devstack based upon the requirements.txt having it in there. Making it an optional

Re: [openstack-dev] upgrade tox - now with less slowness!

Because we landed a patch to tox upstream to use setup.py develop instead of sdist+install like our run_tests.sh scripts do - this means that with the new tox config changes, tox runs should be just as quick as run_tests.sh runs. Great!! On Wed, Sep 4, 2013 at 8:12 PM, Flavio Percoco wrote: >

Re: [openstack-dev] upgrade tox - now with less slowness!

> Because we landed a patch to tox upstream to use setup.py develop > instead of sdist+install like our run_tests.sh scripts do - this means > that with the new tox config changes, tox runs should be just as quick > as run_tests.sh runs. So. Freaking. Awesome. --Dan _

[openstack-dev] [qa] [neutron] Neutron tests in tempest

It's great that new neutron tests are being submitted to Tempest. There is an issue that the only active neutron tests in the gate are "smoke" tests. Until the full gate can be enabled, please tag any new neutron tests as 'smoke' so they run in the gate jobs. Thanks. -David _

Re: [openstack-dev] upgrade tox - now with less slowness!

NICE!! On Wed, Sep 4, 2013 at 11:05 AM, Dan Smith wrote: > > Because we landed a patch to tox upstream to use setup.py develop > > instead of sdist+install like our run_tests.sh scripts do - this means > > that with the new tox config changes, tox runs should be just as quick > > as run_tests.s

Re: [openstack-dev] [nova] key management and Cinder volume encryption

The following change provides a key manager implementation that reads a static key from the project's configuration: https://review.openstack.org/#/c/45103/ This key manager implementation naturally does not provide the same confidentiality that would be proffered by retrieving keys from a servi

[openstack-dev] [Savanna] Guidance for adding a new plugin (CDH)

Hi guys - I have just started to play with Savanna a few days ago - I'm still going through the code. Next week I want to start to work on a plugin that will deploy CDH using Cloudera Manager. What process should I follow? I'm new to launchpad / Gerrit. Should I start by creating a blueprint and

Re: [openstack-dev] [nova] key management and Cinder volume encryption

On September 4, 2013 12:28:19 PM "Coffman, Joel M." wrote: The following change provides a key manager implementation that reads a static key from the project's configuration: https://review.openstack.org/#/c/45103/ This key manager implementation naturally does not provide the same confiden

Re: [openstack-dev] [savanna] Fwd: Change in stackforge/savanna-extra[master]: Add diskimage-creating script, elements for mirrors

On 09/03/2013 09:42 AM, Ivan Berezovskiy wrote: Hi, 1.We used mvn to create tar.gz and I'll add documentation for that. 2. The command is simple: "parameter1='some_value1' ... parameterN='some_valueN' disk-image-create element1 ... elementM -o image_name". Some files in ~/.cache/image-create/ ar

Re: [openstack-dev] upgrade tox - now with less slowness!

On 09/04/2013 01:22 PM, Dolph Mathews wrote: > > On Wed, Sep 4, 2013 at 10:56 AM, Monty Taylor > wrote: > > Hey all! > > https://review.openstack.org/#/c/42178/2 has landed in nova, which means > that nova now requires tox 1.6 or higher (for those folk

Re: [openstack-dev] [Savanna] Guidance for adding a new plugin (CDH)

On 09/04/2013 04:06 PM, Andrei Savu wrote: Hi guys - I have just started to play with Savanna a few days ago - I'm still going through the code. Next week I want to start to work on a plugin that will deploy CDH using Cloudera Manager. What process should I follow? I'm new to launchpad / Gerrit

Re: [openstack-dev] [Neutron] The three API server multi-worker process patches.

Was any consensus on this ever reached? It appears both reviews are still open. I'm partial to review 37131 as it attacks the problem a more concisely, and, as mentioned, combined the efforts of the two more effective patches. I would echo Carl's sentiments that it's an easy review minus the few

[openstack-dev] OpenLdap for Keystone

Hello, I have been struggling trying to configure OpenLdap to work with Keystone. I have found a gazillion snippets about this topic, but no step-by-step documents on how to install and configure OpenLdap so it will work with current Keystone releases. I am hoping that someone has a tested answ

[openstack-dev] [Nova][vmware] VMwareAPI sub-team reviews update 2013-09-04

It's feature-freeze-eve. Here's where we sit tonight. Many of our blueprints are on the cusp of making it in. For review, rules on Feature freeze. # https://wiki.openstack.org/wiki/FeatureFreeze ... blueprint reviews by readiness ... Needs one more core review/approval: * NEW, https://review.op

[openstack-dev] [Neturon] VPNaaS

Hi folks We could merged VPNaaS DB and Driver and CLI for neutron. # heat support also looks like merged! This is a demo video http://www.youtube.com/watch?v=6qqCRqBwMUY This is latest how to install vpn https://wiki.openstack.org/wiki/Quantum/VPNaaS/HowToInstall The last part is Horizon suppor

[openstack-dev] [CI] can't receive mails from Jenkins

Hi, all I have faced this problem about 15 hours ago. Some activities here now didn't notice me by mails: https://review.openstack.org/#/c/45081/ https://review.openstack.org/#/c/45031/ Is this a personal issue or general one? or an old problem? -- Gareth *Cloud Computing, OpenStack, Fitness,

[openstack-dev] [GATE UPDATE] Gate is slow

Hello you lovely patient folks! We have a bug slowing down the gate. https://bugs.launchpad.net/cinder/+bug/1220436 The important take away from this is that is a volume error and gives: StringException: Empty attachments: If you see a StringException: Empty attachments: error, this is the bug

[openstack-dev] [Neutron] VIP for LBaaS on same port?

Hi, One of the things I'll be looking at in the near future is writing a driver for the neutron lbaas service to talk to a bit of hardware we have. The normal idiom with this hardware is to have a single interface, with multiple IP addresses attached. It doesn't look like this is currently

Re: [openstack-dev] [Neutron] VIP for LBaaS on same port?

Hi Stephen, Currently it's not possible. But we're planning to change this in near future. There is a blueprint which supposes change in vip-pool relationship (change it from 1:1 to m:n), as part of it's implementation, unconditional l2 port creation will be removed from loadbalancer_db.py Here's

Re: [openstack-dev] [CI] can't receive mails from Jenkins

sorry everyone those mails are in my spam box ... On Thu, Sep 5, 2013 at 12:24 PM, Gareth wrote: > Hi, all > > I have faced this problem about 15 hours ago. Some activities here now > didn't notice me by mails: > > https://review.openstack.org/#/c/45081/ > https://review.openstack.org/#/c/4503