Re: [Openstack-operators] Security around enterprise credentials and OpenStack API

2015-03-31 Thread Daniel Comnea
+ developers mailing list, hopefully a developer might be able to chime in. On Wed, Apr 1, 2015 at 3:58 AM, Marc Heckmann wrote: > Hi all, > > I was going to post a similar question this evening, so I decided to just > bounce on Mathieu’s question. See below inline. > > > On Mar 31, 2015, at 8

Re: [Openstack-operators] Security around enterprise credentials and OpenStack API

2015-03-31 Thread Marc Heckmann
Hi all, I was going to post a similar question this evening, so I decided to just bounce on Mathieu’s question. See below inline. > On Mar 31, 2015, at 8:35 PM, Matt Fischer wrote: > > Mathieu, > > We LDAP (AD) with a fallback to MySQL. This allows us to store service > accounts (like nova)

Re: [Openstack-operators] Security around enterprise credentials and OpenStack API

2015-03-31 Thread Matt Fischer
Mathieu, We LDAP (AD) with a fallback to MySQL. This allows us to store service accounts (like nova) and "team accounts" for use in Jenkins/scripts etc in MySQL. We only do Identity via LDAP and we have a forked copy of this driver (https://github.com/SUSE-Cloud/keystone-hybrid-backend) to do this

[Openstack-operators] Security around enterprise credentials and OpenStack API

2015-03-31 Thread Mathieu Gagné
Hi, Lets say I wish to use an existing enterprise LDAP service to manage my OpenStack users so I only have one place to manage users. How would you manage authentication and credentials from a security point of view? Do you tell your users to use their enterprise credentials or do you use an othe

Re: [Openstack-operators] [Openstack-dev][all] how to apply security/back-ported release to Icehouse production

2015-03-31 Thread Daniel Comnea
Thanks all for feedback. Is anyone aware of any documented procedures on how to apply minor releases? Maybe worth having a section in the documentation? Dani On Mon, Mar 30, 2015 at 8:49 PM, Kevin Bringard (kevinbri) < kevin...@cisco.com> wrote: > > > > > Yes, you can run mismatched versions of

Re: [Openstack-operators] What to do when a compute node dies?

2015-03-31 Thread Jay Pipes
Chris, responded on the bug :) Thanks! -jay On 03/31/2015 02:47 AM, Chris Friesen wrote: On 03/30/2015 09:53 PM, Jay Pipes wrote: On 03/30/2015 07:30 PM, Chris Friesen wrote: On 03/30/2015 04:57 PM, Jay Pipes wrote: On 03/30/2015 06:42 PM, Chris Friesen wrote: On 03/30/2015 02:47 PM, Jay Pi

Re: [Openstack-operators] Ops @ Vancouver Summit - agenda brainstorming

2015-03-31 Thread Tim Bell
There is a proposal in https://etherpad.openstack.org/p/YVR-ops-meetup to discuss ceilometer. I think it is important to understand what Gnocchi does and what it will not do in case people feel it will solve all of the problems. Tim > -Original Message- > From: Jason Myers (jasomyer)

Re: [Openstack-operators] Operating Swift

2015-03-31 Thread Eren Türkay
On 31-03-2015 10:02, John Dickinson wrote: > Well this is a big topic, isn't it? :-) Hey John, yeah it's a big topic :) > You could fill a book with info like that. Like this book: > http://shop.oreilly.com/product/0636920033288.do Thank you for your answer. Those links will be helpful for me. I

Re: [Openstack-operators] Operating Swift

2015-03-31 Thread John Dickinson
Well this is a big topic, isn't it? :-) You could fill a book with info like that. Like this book: http://shop.oreilly.com/product/0636920033288.do So with the understanding that anything I say below will be limited by time and space (and is covered in more detail in the book above), here goes.