Re: [Openstack-operators] Specifying multiple tenants for aggregate_multitenancy_isolation_filter

2015-01-27 Thread Tim Bell
+1 for commas. Configuration files with JSON is OK but commas for CLIs. Tim From: John Dewey [mailto:j...@dewey.ws] Sent: 27 January 2015 23:12 To: Jesse Keating Cc: openstack-operators@lists.openstack.org Subject: Re: [Openstack-operators] Specifying multiple tenants for aggregate_multitenancy_

Re: [Openstack-operators] How to allow users to list services by modifying the policy.json file of Keystone

2015-01-27 Thread Lance Bragstad
Hi Christian, There were changes proposed recently that documented this behavior [1] [2], but they haven't been merged yet. You're using v2.0, correct? The v2.0 API enforces policy/context at the controller layer [3], which calls assert_admin. By the looks of it, assert_admin is hardcoded to che

[Openstack-operators] [Large deployment] Meetings

2015-01-27 Thread Matt Van Winkle
Hey folks, I dropped the ball following the holidays and didn't get a doodle out to pick a time for the APAC friendly meeting this month. And, I missed the 3rd Thursday to boot – sorry folks. That being said, I'd still like to get together this week to catch up for January. We can find out if

Re: [Openstack-operators] :document an OpenStack production environment

2015-01-27 Thread evanlinwood evanlinwood
Hi Dani, I’m currently working on development of a product that supports complex hardware solution design, resulting in ‘active diagrams’ having detailed knowledge of configured riser cards, adapters, processor trays, drive bays, physical cabling etc. It also then assists management of or

Re: [Openstack-operators] :document an OpenStack production environment

2015-01-27 Thread Daniel Comnea
If anyone can share more info will be much appreciated. Thanks, Dani On Mon, Jan 26, 2015 at 8:55 PM, Daniel Comnea wrote: > Excellent input, please keep it going. > > Maybe someone from HP will shed more light on their cmdb? > > > Dani > > On Mon, Jan 26, 2015 at 4:28 PM, j wrote: > >> I use

[Openstack-operators] Fwd: Requesting user speakers for Melbourne CONNECT 2015 event

2015-01-27 Thread Tom Fifield
Forwarded Message Subject:Requesting user speakers for Melbourne CONNECT 2015 event Date: Tue, 27 Jan 2015 12:58:52 -0600 (CST) From: Kathy Cacciatore To: openstack-operators-ow...@lists.openstack.org The OpenStack Foundation extends an offer to speak on the va

Re: [Openstack-operators] Specifying multiple tenants for aggregate_multitenancy_isolation_filter

2015-01-27 Thread John Dewey
On Tuesday, January 27, 2015 at 2:03 PM, Jesse Keating wrote: > On 1/27/15 1:54 PM, Sam Morrison wrote: > > Hi operators, > > > > I have a review up to fix this filter to allow multiple tenants, there > > are 2 proposed ways in which this can be specified. > > > > 1. using a comma e.g., tena

Re: [Openstack-operators] Specifying multiple tenants for aggregate_multitenancy_isolation_filter

2015-01-27 Thread Mathieu Gagné
On 2015-01-27 5:03 PM, Jesse Keating wrote: Which one do you think is better? What do the other various things that take lists expect? I'd say that's more of a consideration too, uniformity across the inputs. +1 again -- Mathieu ___ OpenStack-o

Re: [Openstack-operators] Specifying multiple tenants for aggregate_multitenancy_isolation_filter

2015-01-27 Thread Mathieu Gagné
On 2015-01-27 4:54 PM, Sam Morrison wrote: Hi operators, I have a review up to fix this filter to allow multiple tenants, there are 2 proposed ways in which this can be specified. 1. using a comma e.g., tenantid1,tenantid2 2. Using a json list eg. [“tenantid1”, “tenantid2”] Which one do you th

Re: [Openstack-operators] Specifying multiple tenants for aggregate_multitenancy_isolation_filter

2015-01-27 Thread Jesse Keating
On 1/27/15 1:54 PM, Sam Morrison wrote: Hi operators, I have a review up to fix this filter to allow multiple tenants, there are 2 proposed ways in which this can be specified. 1. using a comma e.g., tenantid1,tenantid2 2. Using a json list eg. [“tenantid1”, “tenantid2”] Which one do you think

Re: [Openstack-operators] Packaging sample config versions

2015-01-27 Thread Tom Fifield
Hi all, Based on Gustavo's excellent work below, talking with many ops, and after a brief chats with Jeremey and a few other TC folks, here's what I'd propose as an end goal: * A git repository that has raw, sample configs in it for each project that will be automagically updated * Raw configs

[Openstack-operators] Specifying multiple tenants for aggregate_multitenancy_isolation_filter

2015-01-27 Thread Sam Morrison
Hi operators, I have a review up to fix this filter to allow multiple tenants, there are 2 proposed ways in which this can be specified. 1. using a comma e.g., tenantid1,tenantid2 2. Using a json list eg. [“tenantid1”, “tenantid2”] Which one do you think is better? https://review.openstack.org

Re: [Openstack-operators] RHEL 7 / CentOS 7 instances losing their network gateway

2015-01-27 Thread Joe Topjian
Hi George, All instances have only a single interface. Thanks, Joe On Tue, Jan 27, 2015 at 1:38 PM, George Shuklin wrote: > How many network interfaces have your instance? If more than one - check > settings for second network (subnet). It can have own dhcp settings which > may mess up with r

Re: [Openstack-operators] RHEL 7 / CentOS 7 instances losing their network gateway

2015-01-27 Thread George Shuklin
How many network interfaces have your instance? If more than one - check settings for second network (subnet). It can have own dhcp settings which may mess up with routes for the main network. On 01/27/2015 06:08 PM, Joe Topjian wrote: Hello, I have run into two different OpenStack clouds whe

[Openstack-operators] [Telco][NFV] Meeting reminder - Wednesday 28th @ 1400 UTC in #openstack-meeting-alt

2015-01-27 Thread Steve Gordon
Hi all, Just a friendly reminder that this week's OpenStack Telco Working Group meeting is tomorrow, Wednesday the 28th, at 1400 UTC in #openstack-meeting-alt. Please add any items you wish to discuss to the agenda at: https://etherpad.openstack.org/p/nfv-meeting-agenda Marc Koderer has ki

Re: [Openstack-operators] RHEL 7 / CentOS 7 instances losing their network gateway

2015-01-27 Thread Joe Topjian
Thanks, Kris. I'm going to see if there's any oddities between the version of dnsmasq packaged with 12.04/Icehouse and systemd-dhcp. On Tue, Jan 27, 2015 at 9:25 AM, Kris G. Lindgren wrote: > I can't help as we use config-drive to set networking and are just > starting to roll out Cent7 vm's.

Re: [Openstack-operators] [openstack-dev][openstack-operators]flush expired tokens and moves deleted instance

2015-01-27 Thread Fischer, Matt
On 1/27/15, 10:21 AM, "gustavo panizzo (gfa)" wrote: > > >On 01/28/2015 01:13 AM, Fischer, Matt wrote: >> Our keystone database is clustered across regions, so we have this job >> running on node1 in each site on alternating hours. I don¹t think you¹d >> want a bunch of cron jobs firing off all a

Re: [Openstack-operators] [openstack-dev] [Telco][NFV] Meeting facilitator for January 28th

2015-01-27 Thread Steve Gordon
- Original Message - > From: "Marc Koderer" > To: "OpenStack Development Mailing List (not for usage questions)" > > > Hi Steve, > > I can host it. > > Regards > Marc Thanks Marc! ___ OpenStack-operators mailing list OpenStack-operators@li

Re: [Openstack-operators] [openstack-dev][openstack-operators]flush expired tokens and moves deleted instance

2015-01-27 Thread Jesse Keating
On 1/27/15 9:21 AM, gustavo panizzo (gfa) wrote: i prefer a cronjob to something on the code that i have to test, configure and possible troubleshot besides, i think is well documented. i don't see a problem there. maybe distributions could ship the script into /etc/cron.daily by default? i wo

Re: [Openstack-operators] [openstack-dev][openstack-operators]flush expired tokens and moves deleted instance

2015-01-27 Thread gustavo panizzo (gfa)
On 01/28/2015 01:13 AM, Fischer, Matt wrote: > Our keystone database is clustered across regions, so we have this job > running on node1 in each site on alternating hours. I don’t think you’d > want a bunch of cron jobs firing off all at once to cleanup tokens on > multiple clustered nodes. That’

Re: [Openstack-operators] [openstack-dev][openstack-operators]flush expired tokens and moves deleted instance

2015-01-27 Thread Jesse Keating
On 1/27/15 9:13 AM, Fischer, Matt wrote: Our keystone database is clustered across regions, so we have this job running on node1 in each site on alternating hours. I don’t think you’d want a bunch of cron jobs firing off all at once to cleanup tokens on multiple clustered nodes. That’s one reason

Re: [Openstack-operators] Configuration file validator

2015-01-27 Thread Anne Gentle
On Tue, Jan 27, 2015 at 1:45 AM, Christian Berendt wrote: > Do you think there is a need for a configuration file validator? > This topic has come up at the last couple of operators sessions I've been to, both at the summit and the midcycle, so I think there's a need you'll meet with one! Sounds

Re: [Openstack-operators] [openstack-dev][openstack-operators]flush expired tokens and moves deleted instance

2015-01-27 Thread Fischer, Matt
Our keystone database is clustered across regions, so we have this job running on node1 in each site on alternating hours. I don’t think you’d want a bunch of cron jobs firing off all at once to cleanup tokens on multiple clustered nodes. That’s one reason I know not to put this in the code. Ar

Re: [Openstack-operators] How to allow users to list services by modifying the policy.json file of Keystone

2015-01-27 Thread Fischer, Matt
On 1/26/15, 8:46 AM, "Christian Berendt" wrote: >On 01/26/2015 04:02 PM, Fischer, Matt wrote: >> Is there any reason that the user can¹t just run keystone catalog which >> does not require admin permissions? > >Matt, this is just an example. We tried it with different list methods >and it is also

Re: [Openstack-operators] RHEL 7 / CentOS 7 instances losing their network gateway

2015-01-27 Thread Kris G. Lindgren
I can't help as we use config-drive to set networking and are just starting to roll out Cent7 vm's. However, a huge change from Cent6 to Cent7 was the switch from upstart/dhclient to systemd/systemd-dhcp. Kris Lindgren Senior Linux Systems Engineer G

Re: [Openstack-operators] RHEL 7 / CentOS 7 instances losing their network gateway

2015-01-27 Thread Jesse Keating
At first guess, I would say it's the client trying to refresh it's lease and the lease is coming back without a gateway, due to a bug in dnsmasq. Just a guess though. We are running 12.04 as well, but I don't recall running into this situation. We're on Neutron (havana for now, juno very soon)

[Openstack-operators] RHEL 7 / CentOS 7 instances losing their network gateway

2015-01-27 Thread Joe Topjian
Hello, I have run into two different OpenStack clouds where instances running either RHEL 7 or CentOS 7 images are randomly losing their network gateway. There's nothing in the logs that show any indication of why. There's no DHCP hiccup or anything like that. The gateway has just disappeared. I

Re: [Openstack-operators] Configuration file validator

2015-01-27 Thread Christian Berendt
On 01/27/2015 09:01 AM, j wrote: > IMHO this should be built in per daemon. ex: apachectl -t At the moment you can specify the type of the configuration file you want to check (e.g. '--config-file /etc/nova/nova.conf --type nova'). This way it is only necessary to implement one utility to check t

Re: [Openstack-operators] Configuration file validator

2015-01-27 Thread Daniele Venzano
An external tool is probably able to cross-check across different openstack services. But in any form I would welcome something that tells me: - OK this configuration is consistent and makes sense - This option doesn’t do anything in this context - Setting X is missin

Re: [Openstack-operators] Configuration file validator

2015-01-27 Thread j
IMHO this should be built in per daemon. ex: apachectl -t On 2015-01-27 02:45, Christian Berendt wrote: > Do you think there is a need for a configuration file validator? > > Sometimes I have nasty issues in manual created configuration files > (e.g. a parameter in a wrong section or a mist