[Openstack-operators] Setting IOthreads on a Nova Instance

2015-06-11 Thread pushpesh sharma
Hi list, I need some expert opinion on some problem I am facing with OpenStack+Ceph environment. I running a 3+ node cluster with OpenStack Juno. It is using ceph RBDs as cinder volumes. Functionally setup is working fine. However my expectation are related to block performance of RBDs inside a V

[Openstack-operators] [Glance] [glance_store] Feedback requested from users of the HTTP Store

2015-06-11 Thread Ian Cordasco
Hey all, For the Liberty development cycle, I've proposed a specification for a refactor of Glance's HTTP Store - https://review.openstack.org/#/c/189537/. In short, currently Glance's HTTP Store driver does not verify HTTPS connections. This allows for a couple of attacks of varying severity. We

Re: [Openstack-operators] Allow user to see instances of other users

2015-06-11 Thread Mathieu Gagné
haha, you are right. Should this also be changed so you don't end up with "admin" privileges on all tenants? From: "admin_or_owner": "is_admin:True or project_id:%(project_id)s", To: "admin_or_owner": "role:admin or project_id:%(project_id)s", Note: I'm trying to find a temporary way to

Re: [Openstack-operators] Allow user to see instances of other users

2015-06-11 Thread Sławek Kapłoński
Hello, But AFAIK this will add someone with role "special_role" same priviliges as someone who has got "admin" role, right? -- Pozdrawiam / Best regards Sławek Kapłoński sla...@kaplonski.pl Dnia czwartek, 11 czerwca 2015 18:08:38 Mathieu Gagné pisze: > You can add your new role to this policy:

Re: [Openstack-operators] Allow user to see instances of other users

2015-06-11 Thread Mathieu Gagné
You can add your new role to this policy: "context_is_admin": "role:admin or role:special_role", It will set "is_admin" to True in the context. I'm not sure of the side-effect to be honest. Use at your own risk... Mathieu On 2015-06-11 4:59 PM, George Shuklin wrote: > Thank you! > > You sav

[Openstack-operators] [Neutron][L3] Modular L3 Discussion

2015-06-11 Thread Carl Baldwin
Hi all, Cross posting to openstack-dev and openstack-operators We discussed supporting multiple types of routers within a Neutron in the L3 meeting this morning [1]. The team would like more feedback from the community in order to refine use cases and also to consider possible approaches to achi

Re: [Openstack-operators] Allow user to see instances of other users

2015-06-11 Thread George Shuklin
Thank you! You saved me a day of the work. Well, we'll move a script to admin user instead of normal user with the special role. PS And thanks for filling a bugreport too. On 06/11/2015 10:40 PM, Sławek Kapłoński wrote: Hello, I don't think it is possible because in nova/db/sqlalchemy/api.p

Re: [Openstack-operators] nova-no-nd-relfection error

2015-06-11 Thread pra devOPS
Hi Can Somebody help me with this please When I start the instance I get the following error ERROR nova.compute.manage Error: operation failed: filter 'nova-no-nd-reflection' already exists with uuid 875067c3-84df-46b2-a8ea-b8996c06e8e7 I am using legacy nova-network , The bridge that got crea

Re: [Openstack-operators] Allow user to see instances of other users

2015-06-11 Thread Sławek Kapłoński
Hello, I thought so but I was not sure :) I just made bug report for that: https://bugs.launchpad.net/nova/+bug/1464381 -- Pozdrawiam / Best regards Sławek Kapłoński sla...@kaplonski.pl Dnia czwartek, 11 czerwca 2015 13:02:16 Clint Byrum pisze: > Excerpts from Sławek Kapłoński's message of 2015

Re: [Openstack-operators] Allow user to see instances of other users

2015-06-11 Thread Clint Byrum
Excerpts from Sławek Kapłoński's message of 2015-06-11 12:40:36 -0700: > Hello, > > I don't think it is possible because in nova/db/sqlalchemy/api.py in function > instance_get_all_by_filters You have something like: > > if not context.is_admin: > # If we're not admin context, add approp

Re: [Openstack-operators] Allow user to see instances of other users

2015-06-11 Thread Sławek Kapłoński
Hello, I don't think it is possible because in nova/db/sqlalchemy/api.py in function instance_get_all_by_filters You have something like: if not context.is_admin: # If we're not admin context, add appropriate filter.. if context.project_id: filters['project_id'] = con

[Openstack-operators] Allow user to see instances of other users

2015-06-11 Thread George Shuklin
Hello. I'm trying to allow a user with special role to see all instances of all tenants without giving him admin privileges. My initial attempt was to change policy.json for nova to "compute:get_all_tenants": "role:special_role or is_admin:True". But it didn't work well. The command (nova

Re: [Openstack-operators] Gentoo image availability

2015-06-11 Thread Matthew Thode
On 06/11/2015 04:11 AM, Eren Türkay wrote: > On 10-06-2015 02:14, George Shuklin wrote: >> Aw. Don't discriminate DHCP. It has many nice features (for example, if you >> add >> new interface to existing VM, cloud-init with static config will ignore it, >> but >> DHCP will works like magic). >> >>

Re: [Openstack-operators] SSH to a VM instance created

2015-06-11 Thread Eren Türkay
On 11-06-2015 12:32, Abhishek Talwar wrote: > Now I want to SSH the VM's created and install some application on it. My > doubit > is how to SSH the VM's as I don't have a dashboard and therefore don't have a > console for the VM's created. Hello, Normally, you add an ssh key and instruct VM t

[Openstack-operators] SSH to a VM instance created

2015-06-11 Thread Abhishek Talwar
Hi Folks, I have an OpenStack Kilo multinode setup witha controller, network and 2 compute nodes. I am able to boot VM instances and they are going to active state. Now I want to SSH the VM's created and install some application on it. My doubit is how to SSH the VM's as I don't have

Re: [Openstack-operators] Gentoo image availability

2015-06-11 Thread Eren Türkay
On 10-06-2015 02:14, George Shuklin wrote: > Aw. Don't discriminate DHCP. It has many nice features (for example, if you > add > new interface to existing VM, cloud-init with static config will ignore it, > but > DHCP will works like magic). > > I don't know how it works in Gentoo, but in Debian

Re: [Openstack-operators] Small Operators

2015-06-11 Thread Eren Türkay
On 09-06-2015 21:16, Brendan Johnson wrote: > I am looking for other small OpenStack operators with whom to share > experiences, configurations and discuss issues. Paragus Strategic IT, the > company I work for, recently went live with a small OpenStack based cloud > which we are using to provide

Re: [Openstack-operators] [ops][tags][packaging] ops:packaging tag - a little common sense, please

2015-06-11 Thread Thierry Carrez
Jay Pipes wrote: > [...] > = Packaging tags should be release-specific, or they will be wrong = > > For these packaging tags, the release must be part of the tag itself, > otherwise the information it denotes would be indeterminate. > > As an example, suppose you have a tag that looks like this:

[Openstack-operators] Live-migration multinode Kilo

2015-06-11 Thread Abhishek Talwar
Hi Folks,I have a multinode openStack kilo installation with a controller, network and 2 compute nodes. I am trying live-migration of an instance, the migration happens successfully but the instance still appears to be on the same host.What can be the reason ? How to proceed further to encounter th