Re: [Openstack-operators] Inverted drive letters on block devices that use virtio-scsi

2018-01-25 Thread Logan V.
uld it be as easy > as changing the drive order in the database? > > > Jean-Philippe Méthot > Openstack system administrator > Administrateur système Openstack > PlanetHoster inc. > > > > > Le 26 janv. 2018 à 13:06, Logan V.

Re: [Openstack-operators] Inverted drive letters on block devices that use virtio-scsi

2018-01-25 Thread Logan V.
If you are running Ocata or later, please see https://bugs.launchpad.net/nova/+bug/1729584 There seems to be a broken series of patches related to virtio-scsi that were backported to Ocata resulting in some unresolved virtio-scsi drive ordering bugs. I see it primarily on virtio-scsi based instanc

Re: [Openstack-operators] Ubuntu Kernel with Meltdown mitigation SSL issues

2018-01-18 Thread Logan V.
We upgraded our control plane to 4.4.0-109 + intel-microcode 3.20180108.0~ubuntu16.04.2 several days ago, and are about 1/2 of the way thru upgrading our compute hosts with these changes. We use Ocata for all services, and no issue like this has been observed yet on our env. Control hosts are E5-26

Re: [Openstack-operators] [Openstack] [Openstack-ansible] openstack ansible HA solution

2017-04-27 Thread Logan V.
Hello, Yes openstack-ansible does support deploying keepalived along with haproxy. The keepalived role is run just before the haproxy role in this playbook: https://github.com/openstack/openstack-ansible/blob/master/playbooks/haproxy-install.yml#L27-L31 You can see an example keepalived configur

Re: [Openstack-operators] Policy Updates

2017-02-23 Thread Logan V.
I think this actually started in Newton. Yes it ships blank, however there is still a default policy implemented as before with similar defaults separating the admin and user roles. The default policy is implemented in the nova code base (https://github.com/openstack/nova/tree/stable/newton/nova/po

Re: [Openstack-operators] HTTP/S Termination with Haproxy + Keystone

2017-02-22 Thread Logan V.
It is also possible to use oslo_middleware ssl filter in your API paste file with cinder like: [filter:ssl] paste.filter_factory = oslo_middleware.ssl:SSLMiddleware.factory [pipeline:apiversions] pipeline = ssl faultwrap osvolumeversionapp On Wed, Feb 22, 2017 at 2:54 PM Mathieu Gagné wrote: >

Re: [Openstack-operators] [openstack-ansible] Unbound problem

2017-02-08 Thread Logan V.
Hi Andreas, Thanks for reporting this. I just pushed a patch to resolve this here https://review.openstack.org/#/c/431110/. If you are able to start with a fresh environment this should resolve the issue. The unbound service should only be installed in the containers, not the hosts, so that was th

Re: [Openstack-operators] libvirt: make snapshot use RBD snapshot/clone when available

2016-09-02 Thread Logan V.
Have been using it since kilo. It was a clean pick into Liberty and worked great for me. Logan On Friday, September 2, 2016, Saverio Proto wrote: > Hello, > > this is merged upstream in Mitaka: > > https://review.openstack.org/#/c/287954/ > > anyone already did a cherry pick in Liberty and is r

Re: [Openstack-operators] Move Persistent Ceph Volumes between Openstack Instances

2015-08-07 Thread Logan V.
I recently needed to do this for a very limited number of volumes, so I used this manual process: -deattach the old volume from instance -prep a volume in the new instance of the same size - rbd mv pool/volume-$NEW_UUID pool/volume-$NEW_UUID-delete - rbd mv pool/volume-$OLD_UUID pool/volume-$NEW_U