Re: [openstack-dev] [keystone] LDAP identity driver with groups from local DB

2015-07-24 Thread Julian Edwards
On 24 July 2015 at 14:50, Steve Martinelli wrote: > The LDAP driver for identity shouldn't require write access to look up > groups. It'll only require write access if you want to allow Keystone to > create/delete/update new groups. > Not sure what you mean by "requires an LDAP admin to set up gro

Re: [openstack-dev] [keystone] LDAP identity driver with groups from local DB

2015-07-24 Thread Julian Edwards
On 24 July 2015 at 14:51, Matt Fischer wrote: > Julian, > > You want this hybrid backend driver. Bind against LDAP for auth, store > everything else in mysql: > > https://github.com/SUSE-Cloud/keystone-hybrid-backend > > We maintain our own fork with has a few small differences. I do not use the >

Re: [openstack-dev] [CI] Jenkins jobs are not executed when setting up a new CI system.

2015-07-24 Thread Zaro
That is correctly, the Jenkins UI will not show any info about the gearman queue. If job is pending in Jenkins that means it's been added to the gearman queue and has been moved to the jenkins build queue. The jenkins UI will only show the job once it's in the jenkins queue. Hmm. What happens w

Re: [openstack-dev] [keystone] LDAP identity driver with groups from local DB

2015-07-24 Thread Henry Nash
Matt, Your hybrid driver seems to be doing something different than what Julian was asking - namely providing some “automatic role assignments” for users stored in LDAP (unless I am not understanding your patch)? I guess you could argue that’s a restricted version of being able to create group

Re: [openstack-dev] [fuel] FF Exception request for Fernet tokens support

2015-07-24 Thread Bogdan Dobrelya
> Fuel Library team, I expect your immediate reply here. > > I'd like upgrades team to take a look at this one, as well as at the one > which moves Keystone under Apache, in order to check that there are no > issues here. > > -1 from me for this time in the cycle. I'm concerned about: > >1.

Re: [openstack-dev] [CI] Jenkins jobs are not executed when setting up a new CI system.

2015-07-24 Thread Tang Chen
Hi Zaro, Thanks to reply. On 07/24/2015 03:06 PM, Zaro wrote: That is correctly, the Jenkins UI will not show any info about the gearman queue. If job is pending in Jenkins that means it's been added to the gearman queue and has been moved to the jenkins build queue. The jenkins UI will onl

Re: [openstack-dev] [TripleO] Moving instack upstream

2015-07-24 Thread Derek Higgins
On 24/07/15 00:56, James Slagle wrote: On Thu, Jul 23, 2015 at 2:40 AM, Derek Higgins wrote: See below On 21/07/15 20:29, Derek Higgins wrote: Hi All, Something we discussed at the summit was to switch the focus of tripleo's deployment method to deploy using instack using images buil

Re: [openstack-dev] [Fuel][python-fuelclient] Implementing new commands

2015-07-24 Thread Evgeniy L
Hi Sebastian, thanks for clarification, in this case I think we should follow plan C, new features should not slow us down in migration from old to new version of the client. On Thu, Jul 23, 2015 at 8:52 PM, Sebastian Kalinowski < [email protected]> wrote: > 2015-07-23 18:28 GMT+02:00 Stan

Re: [openstack-dev] [CI] Jenkins jobs are not executed when setting up a new CI system.

2015-07-24 Thread Tang Chen
On 07/24/2015 03:36 PM, Tang Chen wrote: Hi Zaro, Thanks to reply. On 07/24/2015 03:06 PM, Zaro wrote: That is correctly, the Jenkins UI will not show any info about the gearman queue. If job is pending in Jenkins that means it's been added to the gearman queue and has been moved to the jen

Re: [openstack-dev] [fuel] [FFE] FF Exception request for Env Upgrade feature

2015-07-24 Thread Evgeniy L
Hi, If we have a rule that feature freeze exceptions should have essential priority, I'm not sure if it matters how risky it's, the risk is low, but it's not zero. Thanks, On Thu, Jul 23, 2015 at 9:09 PM, Mike Scherbakov wrote: > Oleg, > considering that your feature is essential for the relea

Re: [openstack-dev] [keystone] LDAP identity driver with groups from local DB

2015-07-24 Thread Dave Walker
On 24 July 2015 at 05:00, Julian Edwards wrote: > Hello, > > I am relatively new to Openstack and Keystone so please forgive me any > crazy misunderstandings here. > > One of the problems with the existing LDAP Identity driver that I see > is that for group management it needs write access to the

Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-24 Thread Aleksey Kasatkin
Yes, it is the only CR left (https://review.openstack.org/#/c/204321/). It is tested manually, is on review and should be merged today or the next workday. Aleksey Kasatkin On Thu, Jul 23, 2015 at 9:18 PM, Mike Scherbakov wrote: > Looks like the only CLI part left: > https://review.openstack.

[openstack-dev] Need your check whether these bps are OK for Liberty

2015-07-24 Thread liuxinguo
Hi Mike, I kindly need your help to have a check whether the following blueprints are OK to be merged in Liberty: https://blueprints.launchpad.net/cinder/+spec/huawei-storage-volume-migration-support https://blueprints.launchpad.net/cinder/+spec/huawei-driver-fc-zone-enhancement https://blueprint

Re: [openstack-dev] [fuel] [FFE] FF Exception request for Custom node attributes feature

2015-07-24 Thread Igor Kalnitsky
Fuelers, I'm ok to go with CLI part of this story. It's already implemented and was actively reviewed yesterday. As for labels serialisation to astute.yaml.. I don't know it seems pretty easy to implement, but we must be strict and do not accept any exceptions because it's easy to implement. Othe

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Daniel P. Berrange
On Thu, Jul 23, 2015 at 05:55:36PM +0300, mhorban wrote: > Hi all, > > During development process in nova I faced with an issue related with config > options. Now we have lists of config options and registering options mixed > with source code in regular files. > From one side it can be convenient

Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-24 Thread Evgeniy L
Hi, Since the feature is essential, and changes are small, we can accept it as a, feature freeze exceptions. But as far as I know there is a very important ticket [1] which was created in order to get patches merged faster, also I still have concerns regarding to ERB style template "<% if3 %>" wh

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Daniel P. Berrange
On Thu, Jul 23, 2015 at 11:57:01AM -0500, Michael Still wrote: > In fact, I did an example of what I thought it would look like already: > > https://review.openstack.org/#/c/205154/ > > I welcome discussion on this, especially from people who couldn't make > it to the mid-cycle. Its up to y'a

Re: [openstack-dev] [Fuel][python-fuelclient] Implementing new commands

2015-07-24 Thread Igor Kalnitsky
Hello, My 2 cents on it. Following plan C requires a huge effort from developer, and it may be unacceptable when FF is close and there're a lot of work to do. So it looks like the plan B is most convenient for us and eventually we will have all features in fuel2. Alternatively we can go with C..

Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-24 Thread Igor Kalnitsky
Greetings, The issue [1] looks like a feature to me. I'd move it to next release. Let's focus on what's important right now - stability. Thanks, Igor [1]: https://bugs.launchpad.net/fuel/+bug/1476779 On Fri, Jul 24, 2015 at 11:53 AM, Evgeniy L wrote: > Hi, > > Since the feature is essential, a

Re: [openstack-dev] [openstack-tc][deb-packaging] Updated proposal for OpenStack deb packages

2015-07-24 Thread Thierry Carrez
Igor Yozhikov wrote: > Hello again to everyone, resending this letter due to typo in the topic > of the previous letter, apologize for this. > * > Introductory words:* > I want to present renewed proposal for packaging of OpenStack > components for deb based Linux distributions. > In case of stack

Re: [openstack-dev] [Fuel] Question about unique default hostname for node

2015-07-24 Thread Evgeniy L
Hi Andrew, I don't agree with you, user should be able to name the node any way he wants why there should be a constraint which is related to some internal id in Nailgun database? For example if he deleted node-5 and then he wants to replace this node with another one, he can and should be able to

Re: [openstack-dev] [Fuel][python-fuelclient] Implementing new commands

2015-07-24 Thread Fedor Zhadaev
Hi all, I think that in current situation the best solution will be to add new features for the both versions of client. It may cause a little slowing down of developing each feature, but we won't have to return to them in future. 2015-07-24 11:58 GMT+03:00 Igor Kalnitsky : > Hello, > > My 2 cen

Re: [openstack-dev] [cross-project] "Admin" ness not properly scoped

2015-07-24 Thread Thierry Carrez
Adam Young wrote: > [...] > There should be no "Global Admin Tokens." They are a security risk, > and violate the principal of Least Privilege. > https://en.wikipedia.org/wiki/Principle_of_least_privilege. Thanks for taking on this long-standing issue. Should we have some cross-project spec to

Re: [openstack-dev] [Fuel][python-fuelclient] Implementing new commands

2015-07-24 Thread Oleg Gelbukh
FWIW, I'm for option B, combined with clear timeline for porting features of fuel-variant to fuel2. For example, we are developing client-side functions for fuel-octane (cluster upgrade) extensions only for fuel2, and don't plan to implement it for 'fuel'. The main reason why we can't just drop 'f

Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-24 Thread Evgeniy L
Hi Igor, I don't agree with you, some basic validation is essential part of any handler and our API, currently it's easy to get meaningless 500 error (which is unhandled exception) from the backend or get the error that there is something wrong with the template only after you press deploy button.

Re: [openstack-dev] [neutron] why do we gate tempest using q-vpn not q-l3?

2015-07-24 Thread Ihar Hrachyshka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/23/2015 05:52 PM, Armando M. wrote: > > On 23 July 2015 at 05:25, Ihar Hrachyshka > wrote: > > Hi all, > > I've stumbled on this one. It turns out we gate neutron against > openstack installation that runs vpn-a

Re: [openstack-dev] [Fuel Zabbix in deployment tasks

2015-07-24 Thread Evgeniy L
Hi, I've read the tickets and wondering, how can we remove zabbix completely from Nailgun/UI? We still have old environments which should be able to support zabbix, or it is not the case for experimental? In this case we should warn the user, that after upgrade he will not be able manage his previ

Re: [openstack-dev] [fuel] [FFE] FF Exception request for Custom node attributes feature

2015-07-24 Thread Andrey Danin
I apologize for my hasty email earlier. Thank you all who tried to help me but I have to revoke my additions to this feature. I completely missed the fact that labels may be changed after the deployment is done. It creates inconsistency between label values and actual values in astute.yaml on the

Re: [openstack-dev] [fuel] [FFE] FF Exception request for Custom node attributes feature

2015-07-24 Thread Roman Prykhodchenko
+1 to merging the CLI part, if all our comments there are filed as High priority bugs and then fixed ASAP - romcheg > 24 лип. 2015 о 07:58 Mike Scherbakov написав(ла): > > Colleagues, > it sounds like we need to complete what was requested by Julia here (and it > would take about a day as I

Re: [openstack-dev] [fuel] [FFE] FF Exception request for Deploy nova-compute (VCDriver) feature

2015-07-24 Thread Andrian Noga
Colleagues, actually, i'm tottaly agree with Mike. We can merge https://review.openstack.org/#/c/196114/ w/o additional Ceilometer support (will be moved to next release). So if we merge it today we dont need FFE for this feature. Regards, Andrian On Fri, Jul 24, 2015 at 1:18 AM, Mike Scherbakov

[openstack-dev] [Infra][CI] gate-{name}-requirements job fails on stable/juno

2015-07-24 Thread Roman Podoliaka
Hi all, In oslo.db we recently hit a requirements checking job failure [0]. It's caused by the fact the job tries to import a module from openstack_requirements package, which is missing in stable/juno branch of requirements project [1]. The job must have been broken for stable/juno since [2] was

[openstack-dev] [fuel] FF Exception for LP-1464656 fix (update ceph PG calculation algorithm)

2015-07-24 Thread Konstantin Danilov
Team, I would like to request an exception from the Feature Freeze for [1] fix. It requires changes in fuel-web [2], fuel-library [3] and in UI. [2] and [3] are already tested, I'm fixing UT now. BP - [4] Code has backward-compatibility mode. I need one more week to finish it. Also I'm asking som

Re: [openstack-dev] [Fuel] Question about unique default hostname for node

2015-07-24 Thread Oleg Gelbukh
The problem is that hostnames of nodes appear in /etc/hosts files, and entries in those files have to be unique to make any sense. Thus, we either need to provide a user with ability to create their own generators of node names (not sure that's makes sense), require a user to provide a name for eve

Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-24 Thread Sebastian Kalinowski
I agree here with Evgeniy. Even if it's not a trivial change, we cannot leave a new API in such shape. 2015-07-24 11:41 GMT+02:00 Evgeniy L : > Hi Igor, > > I don't agree with you, some basic validation is essential part of > any handler and our API, currently it's easy to get meaningless 500 err

Re: [openstack-dev] [Infra][CI] gate-{name}-requirements job fails on stable/juno

2015-07-24 Thread Ihar Hrachyshka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/24/2015 12:37 PM, Roman Podoliaka wrote: > Hi all, > > In oslo.db we recently hit a requirements checking job failure > [0]. It's caused by the fact the job tries to import a module from > openstack_requirements package, which is missing in s

Re: [openstack-dev] [fuel] [FFE] FF Exception request for Env Upgrade feature

2015-07-24 Thread Sebastian Kalinowski
+1 for this exception - as Evgeniy said it is developed not in the core but in extension and risk is low. 2015-07-24 10:17 GMT+02:00 Evgeniy L : > Hi, > > If we have a rule that feature freeze exceptions should have essential > priority, > I'm not sure if it matters how risky it's, the risk is lo

Re: [openstack-dev] [Fuel] Nominating Vladimir Kozhukalov to core reviewers of fuel-main

2015-07-24 Thread Andrey Danin
+1 On Fri, Jul 24, 2015 at 2:00 AM, Vitaly Kramskikh wrote: > +1 > > 2015-07-24 1:56 GMT+03:00 Sergey Vasilenko : > >> +1 >> >> __ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: >> openstack-

Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-24 Thread Aleksey Kasatkin
I agree, guys, we need at least some basic validation for template when it is being loaded. Ivan Kliuk started to work on this task. And we agreed to test other types of delimiters (it is regarding ERB style template) but we have some more important issues. Evgeniy, is your meaning to include those

Re: [openstack-dev] [Neutron] What are problems of Distributed SNAT?

2015-07-24 Thread Miyagishi, Takanori
Dear Carl, Thank you for your information! I checked the etherpad, and I propose a new idea of Distributed SNAT implementation. Following figure is my idea, "Shared SNAT Address per Tenant per Compute Node". +---+---+--+ | |eth| Tenant

Re: [openstack-dev] [Neutron] Proposing Cedric Brandily to Neutron Core Reviewer Team

2015-07-24 Thread Paul Michali
Great to see you added as a core! On Thu, Jul 23, 2015 at 3:02 AM Somanchi Trinath < [email protected]> wrote: > Congratulations Cedric. J > > > > *From:* Miguel Lavalle [mailto:[email protected]] > *Sent:* Wednesday, July 22, 2015 10:32 PM > *To:* OpenStack Development Mailing L

Re: [openstack-dev] [fuel] [FFE] FF Exception request for Env Upgrade feature

2015-07-24 Thread Aleksey Kasatkin
+1 for an exception. Do we have time estimate though? Aleksey Kasatkin On Fri, Jul 24, 2015 at 2:46 PM, Sebastian Kalinowski < [email protected]> wrote: > +1 for this exception - as Evgeniy said it is developed not in the core > but in extension and risk is low. > > 2015-07-24 10:17 GMT

Re: [openstack-dev] [Infra][CI] gate-{name}-requirements job fails on stable/juno

2015-07-24 Thread Roman Podoliaka
Oh, I missed that one! Thank you, Ihar! On Fri, Jul 24, 2015 at 2:45 PM, Ihar Hrachyshka wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > On 07/24/2015 12:37 PM, Roman Podoliaka wrote: >> Hi all, >> >> In oslo.db we recently hit a requirements checking job failure >> [0]. It's caus

Re: [openstack-dev] [Fuel] Get rid of fuelmenu

2015-07-24 Thread Vladimir Kozhukalov
Guys, thanks a lot for your opinions. Now it is quite clear for me that vim+text UX is definitely not our way even though many developers (not all) prefer this. Vladimir Kozhukalov On Fri, Jul 24, 2015 at 12:47 AM, Fabrizio Soppelsa wrote: > Hello Vladimir, from me -1. > > We can discuss if en

Re: [openstack-dev] [Fuel] Nominating Vladimir Kozhukalov to core reviewers of fuel-main

2015-07-24 Thread Vladimir Sharshov
+1 On Fri, Jul 24, 2015 at 2:58 PM, Andrey Danin wrote: > +1 > > On Fri, Jul 24, 2015 at 2:00 AM, Vitaly Kramskikh > wrote: > >> +1 >> >> 2015-07-24 1:56 GMT+03:00 Sergey Vasilenko : >> >>> +1 >>> >>> >>> __ >>> OpenStack D

Re: [openstack-dev] [fuel] librarian-puppet integration, need help with build tasks for fuel-library

2015-07-24 Thread Alex Schultz
Unfortunately we got stuck with package availability issues. It was successful without using librarian packages for building, but since we need to leverage packages the work to get packaged versions of the code has unfortunately blocked this. I've got the packages built, but the time to get them to

Re: [openstack-dev] [Fuel] Question about unique default hostname for node

2015-07-24 Thread Oleg Gelbukh
Evgeniy, The replacement node use case seems significantly different from node renaming case to me. It's not only about the hostname of the node. I guess that eventually we'll have to invent a way to retain other metadata of the original node, not only a hostname. The described use case is more li

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Doug Hellmann
Excerpts from Daniel P. Berrange's message of 2015-07-24 09:48:15 +0100: > On Thu, Jul 23, 2015 at 05:55:36PM +0300, mhorban wrote: > > Hi all, > > > > During development process in nova I faced with an issue related with config > > options. Now we have lists of config options and registering opti

Re: [openstack-dev] [keystone] LDAP identity driver with groups from local DB

2015-07-24 Thread Matt Fischer
On Fri, Jul 24, 2015 at 1:10 AM, Henry Nash wrote: > Matt, > > Your hybrid driver seems to be doing something different than what Julian > was asking - namely providing some “automatic role assignments” for users > stored in LDAP (unless I am not understanding your patch)? I guess you > could ar

Re: [openstack-dev] [keystone] LDAP identity driver with groups from local DB

2015-07-24 Thread Matt Fischer
On Fri, Jul 24, 2015 at 1:01 AM, Julian Edwards wrote: > On 24 July 2015 at 14:51, Matt Fischer wrote: > > Julian, > > > > You want this hybrid backend driver. Bind against LDAP for auth, store > > everything else in mysql: > > > > https://github.com/SUSE-Cloud/keystone-hybrid-backend > > > > We

Re: [openstack-dev] [all] cross project communication: Return request-id to caller

2015-07-24 Thread Doug Hellmann
Excerpts from Kekane, Abhishek's message of 2015-07-24 06:33:00 +: > Hi Devs, > > X-Openstack-Request-Id. We have analysed python-cinderclient, > python-glanceclient, python-novaclient, python-keystoneclient and > python-neutronclient to check the return types. > > There are 9 ways return v

Re: [openstack-dev] [fuel] [FFE] FF Exception request for Env Upgrade feature

2015-07-24 Thread Oleg Gelbukh
Alexey, Thank you for the vote. We expect to spend 2 more days on patch [1] and [2], and then another 2 days to finish patch [3]. With reviewers help, [1] and [2] will land by Wednesday, while [3] is due Thursday. [1] https://review.openstack.org/#/c/202969/ [2] https://review.openstack.org/#/c/2

Re: [openstack-dev] [fuel] FF Exception request for Templates for Networking feature

2015-07-24 Thread Evgeniy L
Aleksey, Yes, my point is those parts should be also included in the scope of FFE. Regarding to template format, it's easy to fix and after release you will not be able to change it, or you can change it, but you will have to support both format, not to brake backward compatibility. So I would pre

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Daniel P. Berrange
On Fri, Jul 24, 2015 at 09:56:41AM -0400, Doug Hellmann wrote: > Excerpts from Daniel P. Berrange's message of 2015-07-24 09:48:15 +0100: > > On Thu, Jul 23, 2015 at 05:55:36PM +0300, mhorban wrote: > > > Hi all, > > > > > > During development process in nova I faced with an issue related with >

Re: [openstack-dev] [Fuel] Nominating Vladimir Kozhukalov to core reviewers of fuel-main

2015-07-24 Thread Dmitry Pyzhov
If there will be no objections Vladimir will became core reviewer for fuel-main from Monday, 27th On Fri, Jul 24, 2015 at 4:10 PM, Vladimir Sharshov wrote: > +1 > > On Fri, Jul 24, 2015 at 2:58 PM, Andrey Danin wrote: > >> +1 >> >> On Fri, Jul 24, 2015 at 2:00 AM, Vitaly Kramskikh < >> vkramsk.

Re: [openstack-dev] [keystone] LDAP identity driver with groups from local DB

2015-07-24 Thread Boris Bobrov
On Friday 24 July 2015 09:29:32 Dave Walker wrote: > On 24 July 2015 at 05:00, Julian Edwards wrote: > Tl;DR is that the *User* management can come from LDAP via the > Identity driver, but the Project/Tenants and Roles on these come from > the *Assignment* driver via SQL - almost as an overlay. >

Re: [openstack-dev] [keystone] LDAP identity driver with groups from local DB

2015-07-24 Thread Fox, Kevin M
I think the issue is groups are very nice for managing sets of users through the web ui but users can only be in groups maintained by the same backend, and ldap backends tend to be readonly. It would be very handy if groups could include users from other domains. Maybe the db could be extended t

Re: [openstack-dev] [Neutron][SFC] Wiki update - deleting old SFC API

2015-07-24 Thread Sean M. Collins
On Thu, Jul 23, 2015 at 10:45:50PM EDT, Paul Carver wrote: > On a general topic of wiki cleanup, what's the preferred mechanism for > documenting APIs? I prefer that the APIs be submitted in a spec, so that they are published on http://specs.openstack.org/openstack/neutron-specs/ At least there

Re: [openstack-dev] [neutron] 'routed' network type, DHCP agent + devstack support - review requested

2015-07-24 Thread Neil Jerram
On 20/07/15 18:50, Ian Wells wrote: > On 20 July 2015 at 10:21, Neil Jerram > wrote: > > Hi Ian, > > On 20/07/15 18:00, Ian Wells wrote: > > On 19 July 2015 at 03:46, Neil Jerram > >

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Doug Hellmann
Excerpts from Daniel P. Berrange's message of 2015-07-24 15:11:19 +0100: > On Fri, Jul 24, 2015 at 09:56:41AM -0400, Doug Hellmann wrote: > > Excerpts from Daniel P. Berrange's message of 2015-07-24 09:48:15 +0100: > > > On Thu, Jul 23, 2015 at 05:55:36PM +0300, mhorban wrote: > > > > Hi all, > > >

Re: [openstack-dev] [keystone] LDAP identity driver with groups from local DB

2015-07-24 Thread Dave Walker
On 24 July 2015 at 15:26, Boris Bobrov wrote: > On Friday 24 July 2015 09:29:32 Dave Walker wrote: >> On 24 July 2015 at 05:00, Julian Edwards wrote: >> Tl;DR is that the *User* management can come from LDAP via the >> Identity driver, but the Project/Tenants and Roles on these come from >> the *

[openstack-dev] talk proposal for Tokyo Summit: "Interconnecting Neutron and BGP-based operator VPNs"

2015-07-24 Thread thomas.morin
Salut à tous, On propose un talk "Interconnecting Neutron and BGP-based operator VPNs" pour le summit de Tokyo. Ca aidera si on a des votes, merci d'avance ! ** https://www.openstack.org/summit/tokyo-2015/vote-for-speakers/Presentation/5747

Re: [openstack-dev] [CI] Jenkins jobs are not executed when setting up a new CI system.

2015-07-24 Thread Zaro
Tang, Have you tried to look at the function registrations and gearman queue on the gearman server as i suggested? The instructions are in the wiki i referenced (in 'Starting the gearman workers' section). What you are seeing from the gear_client could also be from passing in a function name that

Re: [openstack-dev] [fuel] librarian-puppet integration, need help with build tasks for fuel-library

2015-07-24 Thread Alex Schultz
Just to followup since the required packages are finally available, the patches have been updated and are passing CI now. https://review.openstack.org/#/c/202763/ -Alex On Fri, Jul 24, 2015 at 8:32 AM, Alex Schultz wrote: > Unfortunately we got stuck with package availability issues. It was >

Re: [openstack-dev] [glance][api] Response when a illegal body is sent

2015-07-24 Thread Ian Cordasco
On 7/23/15, 19:38, "michael mccune" wrote: >On 07/23/2015 12:43 PM, Ryan Brown wrote: >> On 07/23/2015 12:13 PM, Jay Pipes wrote: >>> On 07/23/2015 10:53 AM, Bunting, Niall wrote: Hi, Currently when a body is passed to an API operation that explicitly does not allow bodies G

[openstack-dev] OPENSTACK with CEPH storage backend cant down size an instance

2015-07-24 Thread James Galvin
Hi All I am having some trouble with down sizing an instance, I can resize the instance from say small flavour to medium flavour but when trying to resize the instance back from medium to small I get the following : Error: Failed to perform requested operation on instance "jg-10", the instance

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Joshua Harlow
Daniel P. Berrange wrote: On Thu, Jul 23, 2015 at 05:55:36PM +0300, mhorban wrote: Hi all, During development process in nova I faced with an issue related with config options. Now we have lists of config options and registering options mixed with source code in regular files. From one side it

[openstack-dev] [requirements] propose adding Robert Collins to requirements-core

2015-07-24 Thread Doug Hellmann
Requirements reviewers, I propose that we add Robert Collins (lifeless) to the requirements-core review team. Robert has been doing excellent work this cycle with updating pip and our requirements repository to support constraints. As a result he has a full understanding of the sorts of checks we

Re: [openstack-dev] [requirements] propose adding Robert Collins to requirements-core

2015-07-24 Thread Thierry Carrez
Doug Hellmann wrote: > Requirements reviewers, > > I propose that we add Robert Collins (lifeless) to the requirements-core > review team. > > Robert has been doing excellent work this cycle with updating pip and > our requirements repository to support constraints. As a result he has a > full un

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Doug Hellmann
Excerpts from Joshua Harlow's message of 2015-07-24 09:07:13 -0700: > Daniel P. Berrange wrote: > > On Thu, Jul 23, 2015 at 05:55:36PM +0300, mhorban wrote: > >> Hi all, > >> > >> During development process in nova I faced with an issue related with > >> config > >> options. Now we have lists of c

Re: [openstack-dev] [requirements] propose adding Robert Collins to requirements-core

2015-07-24 Thread Davanum Srinivas
+1 from me. Thanks for the hard work @lifeless -- dims On Fri, Jul 24, 2015 at 12:21 PM, Doug Hellmann wrote: > Requirements reviewers, > > I propose that we add Robert Collins (lifeless) to the requirements-core > review team. > > Robert has been doing excellent work this cycle with updating pi

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Daniel P. Berrange
On Fri, Jul 24, 2015 at 12:29:56PM -0400, Doug Hellmann wrote: > Excerpts from Joshua Harlow's message of 2015-07-24 09:07:13 -0700: > > Daniel P. Berrange wrote: > > > On Thu, Jul 23, 2015 at 05:55:36PM +0300, mhorban wrote: > > >> Hi all, > > >> > > >> During development process in nova I faced w

Re: [openstack-dev] [fuel] [FFE] FF Exception request for Custom node attributes feature

2015-07-24 Thread Julia Aranovich
The fuelclient request was merged with all needed +1s. Known issues are filed to Launchpad: https://bugs.launchpad.net/fuel/+bugs?field.tag=feature-node-labels-cli So, we'll have a support of custom node labels both in Fuel UI and CLI in 7.0. Thank you guys all who contributed to the feature and

Re: [openstack-dev] OPENSTACK with CEPH storage backend cant down size an instance

2015-07-24 Thread Jon Bernard
* James Galvin wrote: > Hi All > > I am having some trouble with down sizing an instance, > > I can resize the instance from say small flavour to medium flavour but > when trying to resize the instance back from medium to small > > I get the following : > > Error: Failed to perform requested o

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Joshua Harlow
Doug Hellmann wrote: Excerpts from Joshua Harlow's message of 2015-07-24 09:07:13 -0700: Daniel P. Berrange wrote: On Thu, Jul 23, 2015 at 05:55:36PM +0300, mhorban wrote: Hi all, During development process in nova I faced with an issue related with config options. Now we have lists of config

[openstack-dev] [Fuel] version.yaml in the context of packages

2015-07-24 Thread Vladimir Kozhukalov
Dear colleagues, Although we are focused on fixing bugs during next few weeks I still have to ask everyone's opinion about /etc/fuel/version.yaml. We introduced this file when all-inclusive ISO image was the only way of delivering Fuel. We had to have somewhere the information about SHA commits fo

Re: [openstack-dev] [fuel] FF Exception request for Fernet tokens support

2015-07-24 Thread Aleksandr Didenko
Hi, we were not able to get a working deployment with fernet token support patches, mostly due to issues with keys generation and deployment mechanism. I've also spend some time debugging problems with this and I think it's too risky to land it in 7.0. So I vote for postponing it till 8.0. Regard

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Doug Hellmann
Excerpts from Joshua Harlow's message of 2015-07-24 10:09:10 -0700: > Doug Hellmann wrote: > > Excerpts from Joshua Harlow's message of 2015-07-24 09:07:13 -0700: > >> Daniel P. Berrange wrote: > >>> On Thu, Jul 23, 2015 at 05:55:36PM +0300, mhorban wrote: > Hi all, > > During develo

[openstack-dev] [Fuel][Plugins] Plugins on separate launchpad projects

2015-07-24 Thread Patrick Petit
Hi There, I have been thinking that it would make a lot of sense to have separate launchpad projects for Fuel plugins. The main benefits I foresee…. - Fuel project will be less of a bottleneck for bug triage and it should be more effective to have team members do the bug triage. After all, the

Re: [openstack-dev] [cross-project] "Admin" ness not properly scoped

2015-07-24 Thread Adam Young
On 07/24/2015 05:10 AM, Thierry Carrez wrote: Adam Young wrote: [...] There should be no "Global Admin Tokens." They are a security risk, and violate the principal of Least Privilege. https://en.wikipedia.org/wiki/Principle_of_least_privilege. Thanks for taking on this long-standing issue. S

Re: [openstack-dev] [fuel] FF Exception request for Fernet tokens support

2015-07-24 Thread Mike Scherbakov
Thanks guys. Feature Freeze exception request is declined then. Let's polish this work before the next release, merge changes to upstream puppet-openstack, and then just use librarian in the next release. I'd like to comment Bogdan's email - unless we fully switch to librarian, I don't agree with:

Re: [openstack-dev] OPENSTACK with CEPH storage backend cant down size an instance

2015-07-24 Thread Clint Byrum
Excerpts from James Galvin's message of 2015-07-24 09:08:36 -0700: > Hi All > > I am having some trouble with down sizing an instance, > > I can resize the instance from say small flavour to medium flavour but when > trying to resize the instance back from medium to small > > I get the followin

Re: [openstack-dev] [fuel] FF Exception request for Fernet tokens support

2015-07-24 Thread Davanum Srinivas
Mike, Thanks! +1 to "Let's polish this work before the next release, merge changes to upstream puppet-openstack, and then just use librarian in the next release." -- dims On Fri, Jul 24, 2015 at 1:39 PM, Mike Scherbakov wrote: > Thanks guys. Feature Freeze exception request is declined then. Le

Re: [openstack-dev] [Neutron] What are problems of Distributed SNAT?

2015-07-24 Thread Brian Haley
On 07/24/2015 08:17 AM, Miyagishi, Takanori wrote: Dear Carl, Thank you for your information! I checked the etherpad, and I propose a new idea of Distributed SNAT implementation. Following figure is my idea, "Shared SNAT Address per Tenant per Compute Node". I think this is the "One IP Addre

Re: [openstack-dev] [keystone] LDAP identity driver with groups from local DB

2015-07-24 Thread Adam Young
On 07/24/2015 12:00 AM, Julian Edwards wrote: Hello, I am relatively new to Openstack and Keystone so please forgive me any crazy misunderstandings here. One of the problems with the existing LDAP Identity driver that I see is that for group management it needs write access to the LDAP server,

Re: [openstack-dev] [keystone] LDAP identity driver with groups from local DB

2015-07-24 Thread Matt Fischer
On Fri, Jul 24, 2015 at 12:02 PM, Adam Young wrote: > On 07/24/2015 12:00 AM, Julian Edwards wrote: > >> Hello, >> >> I am relatively new to Openstack and Keystone so please forgive me any >> crazy misunderstandings here. >> >> One of the problems with the existing LDAP Identity driver that I see

Re: [openstack-dev] [glance][api] Response when a illegal body is sent

2015-07-24 Thread Clint Byrum
Excerpts from Ian Cordasco's message of 2015-07-24 08:58:06 -0700: > > On 7/23/15, 19:38, "michael mccune" wrote: > > >On 07/23/2015 12:43 PM, Ryan Brown wrote: > >> On 07/23/2015 12:13 PM, Jay Pipes wrote: > >>> On 07/23/2015 10:53 AM, Bunting, Niall wrote: > Hi, > > Currently wh

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Michael Still
On Fri, Jul 24, 2015 at 3:55 AM, Daniel P. Berrange wrote: > On Thu, Jul 23, 2015 at 11:57:01AM -0500, Michael Still wrote: > > In fact, I did an example of what I thought it would look like already: > > > > https://review.openstack.org/#/c/205154/ > > > > I welcome discussion on this, especi

Re: [openstack-dev] [glance][api] Response when a illegal body is sent

2015-07-24 Thread Ian Cordasco
On 7/24/15, 13:16, "Clint Byrum" wrote: >Excerpts from Ian Cordasco's message of 2015-07-24 08:58:06 -0700: >> >> On 7/23/15, 19:38, "michael mccune" wrote: >> >> >On 07/23/2015 12:43 PM, Ryan Brown wrote: >> >> On 07/23/2015 12:13 PM, Jay Pipes wrote: >> >>> On 07/23/2015 10:53 AM, Bunting,

Re: [openstack-dev] [glance][api][tc] Response when a illegal body is sent

2015-07-24 Thread Clint Byrum
Excerpts from Ian Cordasco's message of 2015-07-24 11:22:33 -0700: > > On 7/24/15, 13:16, "Clint Byrum" wrote: > > >Excerpts from Ian Cordasco's message of 2015-07-24 08:58:06 -0700: > >> > >> On 7/23/15, 19:38, "michael mccune" wrote: > >> > >> >On 07/23/2015 12:43 PM, Ryan Brown wrote: > >>

Re: [openstack-dev] OPENSTACK with CEPH storage backend cant down size an instance

2015-07-24 Thread Monty Taylor
On 07/24/2015 12:47 PM, Clint Byrum wrote: > Excerpts from James Galvin's message of 2015-07-24 09:08:36 -0700: >> Hi All >> >> I am having some trouble with down sizing an instance, >> >> I can resize the instance from say small flavour to medium flavour but when >> trying to resize the instance

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Doug Hellmann
Excerpts from Michael Still's message of 2015-07-24 13:15:15 -0500: > On Fri, Jul 24, 2015 at 3:55 AM, Daniel P. Berrange > wrote: > > > On Thu, Jul 23, 2015 at 11:57:01AM -0500, Michael Still wrote: > > > In fact, I did an example of what I thought it would look like already: > > > > > > htt

[openstack-dev] [os-ansible-deployment] [openstack-ansible] [Searchlight] Specs for Liberty (v12.0.0)

2015-07-24 Thread Ian Cordasco
Hey all, It looks like we've started accepting specifications for Liberty development. Is this accurate? If so, I'd like to start writing one to add Searchlight. Anyone experimenting with Glance's Catalog Index Search in Kilo will want Searchlight in Liberty. Cheers, Ian

Re: [openstack-dev] [openstack][nova] Streamlining of config options in nova

2015-07-24 Thread Michael Still
On Fri, Jul 24, 2015 at 2:19 PM, Doug Hellmann wrote: > > One idea I've tossed around a bit is having options defined in data > files that ship with the code, rather than being inside the Python > code itself. Maybe a first pass at that would be to offload the > help to a separate file? If that se

Re: [openstack-dev] [Neutron][SFC] Wiki update - deleting old SFC API

2015-07-24 Thread Cathy Zhang
Hi Paul, -Original Message- From: Paul Carver [mailto:[email protected]] Sent: Thursday, July 23, 2015 7:46 PM To: [email protected] Subject: Re: [openstack-dev] [Neutron][SFC] Wiki update - deleting old SFC API On a general topic of wiki cleanup, what's the preferred

Re: [openstack-dev] [Neutron][SFC] Wiki update - deleting old SFC API

2015-07-24 Thread Cathy Zhang
Hi Sean, -Original Message- From: Sean M. Collins [mailto:[email protected]] Sent: Friday, July 24, 2015 7:45 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [Neutron][SFC] Wiki update - deleting old SFC API On Thu, Jul 23, 2015 at 10:45:

[openstack-dev] [neutron][testing] How to modify DSVM tests to use a DevStack plugin?

2015-07-24 Thread Paul Michali
Hi, I've created a DevStack plugin for the neutron-vpnaas repo. Now, I'm trying to remove the q-vpn service setup from the DevStack repo ( https://review.openstack.org/#/c/201119/). However, I'm hitting an issue in that (almost) every test that uses DevStack fails, because it is no longer setting

Re: [openstack-dev] [neutron][testing] How to modify DSVM tests to use a DevStack plugin?

2015-07-24 Thread Clark Boylan
On Fri, Jul 24, 2015, at 02:05 PM, Paul Michali wrote: > Hi, > > I've created a DevStack plugin for the neutron-vpnaas repo. Now, I'm > trying > to remove the q-vpn service setup from the DevStack repo ( > https://review.openstack.org/#/c/201119/). > > However, I'm hitting an issue in that (almos

Re: [openstack-dev] talk proposal for Tokyo Summit: "Interconnecting Neutron and BGP-based operator VPNs"

2015-07-24 Thread Emilien Macchi
You probably wanted to use another mailing-list (internal maybe?) but otherwise this ML is in English and do not promote talk proposals, but rather focus on OpenStack development. Though I'll vote for your talk, it looks really cool :-) On Fri, Jul 24, 2015 at 11:40 AM, wrote: > Salut à tous,

[openstack-dev] [nova][cinder] Would anyone from Nova Core be able to join the Cinder mid-cycle meetup?

2015-07-24 Thread Jay S. Bryant
All, I had the opportunity to chat with John Garbutt when he was here in Rochester for the Nova mid-cycle meet-up. We discussed the fact that there was much to be gained by improving the communication between the Cinder and Nova teams. With that idea in mind, it was suggested that the Cinde

Re: [openstack-dev] [os-ansible-deployment] [openstack-ansible] [Searchlight] Specs for Liberty (v12.0.0)

2015-07-24 Thread Jesse Pretorius
On Friday, July 24, 2015, Ian Cordasco wrote: > Hey all, > > It looks like we've started accepting specifications for Liberty > development. Is this accurate? Most certainly. We track master based on SHA updates typically once every two weeks, so if the code has merged upstream then you can alr

  1   2   >