Re: [Openstack-operators] Rescheduling neutron dhcp agents?

2017-08-06 Thread Xav Paice
Yeah, it's an odd one for sure, in my experience at least they do need to be manually re-scheduled. On Sun, 6 Aug 2017 at 11:27 Curtis wrote: > I'm in the process of testing out moving around some neutron services. > I'm starting with dhcp-agent. I've got neutron set to have 3 dhcp > instances p

Re: [Openstack-operators] Ubuntu package for Octavia

2016-10-12 Thread Xav Paice
I highly recommend looking in to Giftwrap for that, until there's UCA packages. The thing missing from the packages that Giftwrap will produce is init scripts, config file examples, and the various user and directory setup stuff. That's easy enough to put into config management or a separate pack

Re: [Openstack-operators] [openstack-operators][ceph][nova] How do you handle Nova on Ceph?

2016-10-10 Thread Xav Paice
On Mon, 2016-10-10 at 13:29 +, Adam Kijak wrote: > Hello, > > We use a Ceph cluster for Nova (Glance and Cinder as well) and over > time, > more and more data is stored there. We can't keep the cluster so big > because of  > Ceph's limitations. Sooner or later it needs to be closed for adding

Re: [Openstack-operators] Rados Gateway to Swift migration

2016-10-05 Thread Xav Paice
lem may be gone now. > Thanks, > Kevin > ________ > From: Xav Paice [xavpa...@gmail.com] > Sent: Wednesday, October 05, 2016 12:12 PM > To: George Mihaiescu > Cc: OpenStack Operators > Subject: Re: [Openstack-operators] Rados Gateway to Swift migra

Re: [Openstack-operators] Rados Gateway to Swift migration

2016-10-05 Thread Xav Paice
very far and that's one of the reasons for using Swift instead. There were limitations with permissions that we found very difficult to get around, without having a data collection user added to each and every project. > Thank you, > George > > > On Oct 5, 2016, at 1:57 AM, Xav

Re: [Openstack-operators] Rados Gateway to Swift migration

2016-10-04 Thread Xav Paice
On Wed, 2016-10-05 at 15:42 +1100, Blair Bethwaite wrote: > Nice! But I'm curious, why the need to migrate? Hmm. I want to be diplomatic since both are great for their thing. For us, the main reason was simply that we wanted replication of the object storage between regions (we started the proce

Re: [Openstack-operators] Rados Gateway to Swift migration

2016-10-04 Thread Xav Paice
On Wed, 2016-10-05 at 13:28 +1300, Xav Paice wrote: > On Tue, 2016-10-04 at 17:48 -0600, Curtis wrote: > > Maybe you have someone on staff who loves writing lua (for haproxy)? :) > > > > Well, maybe not that far, but yeah we're now thinking down that route. > If we

Re: [Openstack-operators] Rados Gateway to Swift migration

2016-10-04 Thread Xav Paice
On Tue, 2016-10-04 at 17:48 -0600, Curtis wrote: > Maybe you have someone on staff who loves writing lua (for haproxy)? :) > Well, maybe not that far, but yeah we're now thinking down that route. If we get there, I'll quickly write something up about it. Many thanks for the suggestion :) _

Re: [Openstack-operators] Rados Gateway to Swift migration

2016-10-04 Thread Xav Paice
__________ > From: Xav Paice [xavpa...@gmail.com] > Sent: Tuesday, October 04, 2016 2:45 PM > To: Curtis > Cc: OpenStack Operators > Subject: Re: [Openstack-operators] Rados Gateway to Swift migration > > On Tue, 2016-10-04 at 07:18 -0600, Curtis wrote: > >

Re: [Openstack-operators] Rados Gateway to Swift migration

2016-10-04 Thread Xav Paice
On Tue, 2016-10-04 at 07:18 -0600, Curtis wrote: > On Mon, Oct 3, 2016 at 3:31 PM, Xav Paice wrote: > > Hi, > > > > We're in the process of migrating our object storage from Rados Gateway > > to Swift, and I was wondering if anyone has experiences with the data >

[Openstack-operators] Rados Gateway to Swift migration

2016-10-03 Thread Xav Paice
Hi, We're in the process of migrating our object storage from Rados Gateway to Swift, and I was wondering if anyone has experiences with the data migration steps from one to the other? In particular, we're currently copying each object and container one by one, but the process of inspecting each

Re: [Openstack-operators] Kilo ->-> Mitaka anyone have notes :)

2016-06-24 Thread Xav Paice
FWIW, I did that with Cinder and it was great except for one DB change we had to make regarding the server name for volumes - http://dischord.org/2015/12/22/cinder-multi-backend-with-multiple-ceph-pools/ is a pretty good description of what I saw. I suspect that was just a poor configuration from

Re: [Openstack-operators] Packaging Virtualenvs

2016-06-23 Thread Xav Paice
Can I suggest that using the tool https://github.com/openstack/giftwrap might make live a bunch easier? I went down a similar path with building Debs in a venv using dh_virtualenv, with some good success when I sorted the shebang. I later found that the debs produced by Giftwrap are not only very

Re: [Openstack-operators] VPNaaS and FWaaS

2016-05-02 Thread Xav Paice
On 3 May 2016 at 05:03, Matt Jarvis wrote: > Thanks for the clarification Kyle. > > On 2 May 2016 at 14:33, Kyle Mestery wrote: > >> On Fri, Apr 29, 2016 at 8:01 AM, Matt Jarvis >> wrote: >> > I know there are operators relying on these functions, particularly in >> the >> > public cloud space

Re: [Openstack-operators] Cloud Upgrade Strategies

2016-03-09 Thread Xav Paice
On 10 March 2016 at 19:26, Yuriy Brodskiy wrote: > building a new cloud is not practical for real production environments. > even if you can afford it, how do you migrate data? > > We have been doing upgrades for a while now, and came up with few basic > principles: > 1) you don't have to upgrade

Re: [Openstack-operators] [ceilometer][keystone][billing] RBAC restrictions of Ceilometer's Event API prevents billing of Openstack cloud

2015-12-07 Thread Xav Paice
I don't fully understand the architecture of our rating project, but as I understand it we use a service with rights to read ceilometer info (in our case, pollsters and notifications) and then aggregate that into another database which we query to get the actual billing information. We bill month

Re: [Openstack-operators] Service Catalog TNG urls

2015-12-07 Thread Xav Paice
On 7 December 2015 at 14:33, Clint Byrum wrote: > > Indeed, this is one paradigm where it actually creates a hardened core, > not a squisy one, so I think it's not a terrible idea. > > I tend to agree, just wish we were already there :) > > > What I mean is, you'd just have two completely separ

Re: [Openstack-operators] Service Catalog TNG urls

2015-12-06 Thread Xav Paice
On 7 December 2015 at 05:38, Clint Byrum wrote: > Excerpts from Xav Paice's message of 2015-12-05 13:26:23 -0800: > > > > > I respect that this is what works for you and we shouldn't require you to > change your ways without good reason. However, I just want to point out > that if you don't trust

Re: [Openstack-operators] Service Catalog TNG urls

2015-12-05 Thread Xav Paice
> > > >> SecurityAuditing/Accounting: > >> Having a separate internal API (for the OpenStack services) from the > >> Public API (for humans and remote automation), allows the operator to > >> apply a strict firewall in front of the public API to restrict access > >> from outside the cloud. Such a d

[Openstack-operators] Neutron getting stuck creating namespaces

2015-11-23 Thread Xav Paice
Hi, Over the last few months we've had a few incidents where the process to create network namespaces (Neutron, OVS) on the network nodes gets 'stuck' and prevents not only the router it's trying to create from finishing, but all further namespace operations too. This has usually finished up with

Re: [Openstack-operators] Running mixed stuff Juno & Kilo , Was: cinder-api with rbd driver ignores ceph.conf

2015-11-18 Thread Xav Paice
We're running mixed Juno and Kilo, and upgrading one component at a time. Two issues with that so far: 1. The puppet modules don't play nice together (Juno/Kilo) - there was some serious re-factor done between those releases and they don't work at all together. I hacked the Juno modules to write K

[Openstack-operators] Fwd: OPs Midcycle location discussion.

2015-11-16 Thread Xav Paice
For us NZ (and maybe Aus) folk to attend, getting to Europe is (literally) twice the distance of US, but Asia is about the same (language aside).I find the Summit really valuable in that a large and diverse group get together and the discussion is live, and in the same time zone - I'd be sad to

Re: [Openstack-operators] [puppet] Can we install OpenStack components using puppet but through source?

2015-11-13 Thread Xav Paice
It's possible to do this if you build your own packages and name them the same as the distro packages - then make sure that you have all the deps etc as well. I'm making packages for Ubuntu by re-using some of the Ubuntu Cloud Archive, some of Debian, and some of my own packaging code, and buildin

Re: [Openstack-operators] Kilo upgrade challenges

2015-11-11 Thread Xav Paice
, 2015 at 4:43 PM, Leslie-Alexandre DENIS < > cont...@ladenis.fr> wrote: > >> Le 11/11/2015 05:46, Xav Paice a écrit : >> >> Hi, >> >> Late to the party, I'm only just doing the Kilo upgrade now (with a >> couple of projects going direct to Liber

[Openstack-operators] Kilo upgrade challenges

2015-11-10 Thread Xav Paice
Hi, Late to the party, I'm only just doing the Kilo upgrade now (with a couple of projects going direct to Liberty). I seem to have hit a bit of a snag, and I've now spent a bit too long banging my head against this, was wondering if anyone else has advice/experiences to share. If it's a "you Mu

Re: [Openstack-operators] Informal Ops Meetup?

2015-10-29 Thread Xav Paice
Suits me :) On 29 October 2015 at 16:39, Kris G. Lindgren wrote: > Hello all, > > I am not sure if you guys have looked at the schedule for Friday… but its > all working groups. I was talking with a few other operators and the idea > came up around doing an informal ops meetup tomorrow. So I w

Re: [Openstack-operators] [neutron] Any users of Neutron's VPN advanced service?

2015-08-06 Thread Xav Paice
On 06/08/15 07:56, Kyle Mestery wrote: > Operators: > > We (myself, Paul and Doug) are looking to better understand who might > be using Neutron's VPNaaS code. We're looking for what version you're > using, how long you're using it, and if you plan to continue deploying > it with future upgrades. A

Re: [Openstack-operators] Dynamic Policy

2015-08-05 Thread Xav Paice
On 06/08/15 04:01, Kris G. Lindgren wrote: > We ran into this as well. > > What we did is create an external to keystone api, that we expose to our > end users via a UI. The api will let user create projects (with a > specific defined quota) and also add users with the "project admins" role > to

Re: [Openstack-operators] Problem with migration from Havana to IceHouse

2015-01-21 Thread Xav Paice
On 21/01/15 23:43, Alvise Dorigo wrote: > Hi, > I've an Havana IaaS composed by: > > 1 controller node > 1 network node > 1 compute node > > and using Neutron as networking, and rabbitmq as AMQP. > > The network node runs the agents (dhcp, l3, openvswitch, metadata). > The controller runs Keystone,

Re: [Openstack-operators] Small openstack

2014-12-21 Thread Xav Paice
On 21/12/14 11:16, George Shuklin wrote: > Hello. > > I've suddenly got request for small installation of openstack (about > 3-5 computes). > > They need almost nothing (just a management panel to span simple > instances, few friendly tennants), and I curious, is nova-network good > solution for th

Re: [Openstack-operators] Graphite dashboard

2014-12-02 Thread Xav Paice
On 03/12/14 13:34, Michael Dorman wrote: > I’m curious what people are using for a Graphite front-end? We’re > finally getting around to recording a bunch of metrics, and now we > need something good for visualization. > > > > > ___ > OpenStack-operators

Re: [Openstack-operators] Operations project: Packaging

2014-11-17 Thread Xav Paice
On 18/11/14 19:16, Michael Chapman wrote: > Hi all, > > Packaging was one of the biggest points of interest in the Friday > Paris meeting, and I'd like to use this thread to have a centralised > discussion and/or argument regarding whether there is a packaging > system that is flexible enough that

Re: [Openstack-operators] Proposal for an 'Operations' project

2014-11-06 Thread Xav Paice
On 07/11/14 01:42, Michael Dorman wrote: > This same thing came up at the mid-cycle Ops meet up at RAX in August. > There wasn’t much action that came from it, but we did set up a new > org in GitHub for collecting this type of common stuff: > https://github.com/osops > Excellent! Wish I'd notice

Re: [Openstack-operators] Neutron metering agent

2014-09-07 Thread Xav Paice
better open a bug report at least, if noone else is seeing this. I was kind of hoping someone might tell me I'm an idiot and doing it wrong :) > > On 09/07/2014 10:06 AM, Xav Paice wrote: >> Hi, >> >> A quick query if anyone is using the neutron metering agent to measu

[Openstack-operators] Neutron metering agent

2014-09-07 Thread Xav Paice
Hi, A quick query if anyone is using the neutron metering agent to measure traffic in/out of routers: When adding the metering label and rules, on some, but not all, of our routers, I get a traceback in the metering_agent.log pointing at "TRACE neutron.openstack.common.rpc.amqp TypeError: cannot