Re: [Openstack-operators] Neutron IPv6 manual for single-stackinginJuno

2015-08-05 Thread Mike Spreitzer
"Sean M. Collins" wrote on 08/04/2015 10:38:26 PM: > We have adapted the contents of that wiki page into the networking > guide, however I have not seen any work in the Juno release for IPv6 > only networking. > > Brian Haley and I had a talk submission for Tokyo about work that > has been do

Re: [Openstack-operators] Neutron IPv6 manual for single-stackinginJuno

2015-08-05 Thread Sean M. Collins
On Wed, Aug 05, 2015 at 03:26:24AM EDT, Mike Spreitzer wrote: > "Sean M. Collins" wrote on 08/04/2015 10:38:26 PM: > > > We have adapted the contents of that wiki page into the networking > > guide, however I have not seen any work in the Juno release for IPv6 > > only networking. > > > > Bria

[Openstack-operators] [app-catalog] IRC Meeting Thursday August 6th at 17:00UTC

2015-08-05 Thread Christopher Aedo
Hello! Our next OpenStack App Catalog meeting will take place this Thursday August 6th at 17:00 UTC in #openstack-meeting-3 The agenda can be found here: https://wiki.openstack.org/wiki/Meetings/app-catalog Please add agenda items if there's anything specific you would like to discuss. Please jo

[Openstack-operators] Dynamic Policy

2015-08-05 Thread Adam Young
How do you delegate the ability to delegate? Lets say you are running a large cloud (purely hypothetical here) and you want to let a user manage their own project. They are "admin" but they should be able to invite or eject people. In order to do this, an ordinary user needs to be able to ma

Re: [Openstack-operators] Dynamic Policy

2015-08-05 Thread matt
Adam. The second issue is a big one. I think a lot of operators ( especially newer operators ) are not aware of how much cruft builds up in the database over time from left over security policies as tenants are created and removed. It causes issues. I've had to work on software to manually cle

Re: [Openstack-operators] Dynamic Policy

2015-08-05 Thread Fox, Kevin M
As an Op, I've ran into this problem and keep running into it. I would very much like a solution. Its also quite related to the nova instance user issue I've been working on, that's needed by the App Catalog project. So, yes, please keep fighting the good fight. Thanks, Kevin _

Re: [Openstack-operators] Dynamic Policy

2015-08-05 Thread Kris G. Lindgren
We ran into this as well. What we did is create an external to keystone api, that we expose to our end users via a UI. The api will let user create projects (with a specific defined quota) and also add users with the "project admins" role to the project. Those admins can add/remove users from t

Re: [Openstack-operators] Dynamic Policy

2015-08-05 Thread Adam Young
On 08/05/2015 12:01 PM, Kris G. Lindgren wrote: We ran into this as well. What we did is create an external to keystone api, that we expose to our end users via a UI. The api will let user create projects (with a specific defined quota) and also add users with the "project admins" role to the

Re: [Openstack-operators] Dynamic Policy

2015-08-05 Thread Curtis
On Wed, Aug 5, 2015 at 10:01 AM, Kris G. Lindgren wrote: > We ran into this as well. > > What we did is create an external to keystone api, that we expose to our > end users via a UI. The api will let user create projects (with a > specific defined quota) and also add users with the "project admi

Re: [Openstack-operators] Dynamic Policy

2015-08-05 Thread Kris G. Lindgren
See inline. Kris Lindgren Senior Linux Systems Engineer GoDaddy, LLC. On 8/5/15, 11:19 AM, "Adam Young" wrote: >On 08/05/2015 12:01 PM, Kris G. Lindgren wrote: >> We ran into this as well. >> >> What we did is create an external to keystone api, t

[Openstack-operators] [hpc] Tuning KVM

2015-08-05 Thread Tim Bell
FYI, a few suggestions on tuning CPU bound workloads with KVM at http://openstack-in-production.blogspot.fr/2015/08/kvm-and-hyper-v-comparison-for-high.html. The Kilo enhancements looks to be a great help. Tim ___ OpenStack-operators mailing list Ope

Re: [Openstack-operators] Draft Agenda for PAO Ops Meetup (August 18, 19)

2015-08-05 Thread Geoff Arnold
I’d like to see some time spent on specific issues associated with public cloud operations. (This is not the same as Large Deployments.) As Stefano pointed out yesterday: http://maffulli.net/2015/08/04/a-new-push-for-openstack-public-clouds/ this is an area which probably needs more at

Re: [Openstack-operators] [hpc] Tuning KVM

2015-08-05 Thread Tim Bell
They are workload specific so it is more a suggestion of where to look at optimising rather than a unique HTC profile for any application. So, try them out with your workload and choose which ones make sense. We'll be working with upstream so that the cloud consumer can choose the right opti

Re: [Openstack-operators] [hpc] Tuning KVM

2015-08-05 Thread Matt Joyce
Definitely worth the read. On August 5, 2015 3:22:33 PM EDT, Tim Bell wrote: > >They are workload specific so it is more a suggestion of where to look >at optimising rather than a unique HTC profile for any application. >So, try them out with your workload and choose which ones make sense. > >W

Re: [Openstack-operators] Dynamic Policy

2015-08-05 Thread Geoff Arnold
I suspect that if we audited all OpenStack deployments we’d find that an awful lot of them have built something similar. (In our case we re-used the Cisco Prime Service Catalog system, but that was just a matter of convenience.) It would be nice if we could minimize the need for this, but many o

[Openstack-operators] [neutron] Any users of Neutron's VPN advanced service?

2015-08-05 Thread Kyle Mestery
Operators: We (myself, Paul and Doug) are looking to better understand who might be using Neutron's VPNaaS code. We're looking for what version you're using, how long you're using it, and if you plan to continue deploying it with future upgrades. Any information operators can provide here would be

Re: [Openstack-operators] [neutron] Any users of Neutron's VPN advanced service?

2015-08-05 Thread Erik McCormick
I attempted to run it in Juno a while back and had very little success. I would love to be able to use it though, and will give it another shot once upgraded to Kilo. My issue was that several of the options coded into it for firing up a connection were specific to Freeswan which was deprecated, at

Re: [Openstack-operators] Dynamic Policy

2015-08-05 Thread Marc Heckmann
Echoing what others have said, we too have an abstraction layer in the form of a custom UI to allow project "owners" to create/delete users. As for your questions Adam, having policy in the Keystone database as data seems like a no brainer. As you suggest it enables us to do so much more. For pro

[Openstack-operators] [neutron] Any users of Neutron's VPN advanced service?

2015-08-05 Thread Tamanna Z Sait
rovide here would be fantastic! Thank you! Kyle -- next part -- An HTML attachment was scrubbed... URL: < http://lists.openstack.org/pipermail/openstack-operators/attachments/20150805/e38465b2/attachment.html > ___ OpenSt

Re: [Openstack-operators] Dynamic Policy

2015-08-05 Thread Xav Paice
On 06/08/15 04:01, Kris G. Lindgren wrote: > We ran into this as well. > > What we did is create an external to keystone api, that we expose to our > end users via a UI. The api will let user create projects (with a > specific defined quota) and also add users with the "project admins" role > to

[Openstack-operators] Opportunity for a Ceph expert

2015-08-05 Thread Adam Lawson
I'm reaching out to the community here in hopes there's someone with deep understanding of (and preferably support experience with) Ceph reading this. If that's you, can you please email me offline ASAP? I want to talk to you (whoever you may be) for a quick/lucrative remote consulting opportunity.

Re: [Openstack-operators] Dynamic Policy

2015-08-05 Thread Matt Fischer
Jumping in with another "us too" here. We have some custom Horizon extensions that allow project owners to manage some of this stuff. On Wed, Aug 5, 2015 at 4:14 PM, Marc Heckmann wrote: > Echoing what others have said, we too have an abstraction layer in the > form of a custom UI to allow proje

Re: [Openstack-operators] Draft Agenda for PAO Ops Meetup (August 18, 19)

2015-08-05 Thread Tom Fifield
Thanks Geoff. Which session would you propose to replace? Regards, Tom On 06/08/15 03:14, Geoff Arnold wrote: I’d like to see some time spent on specific issues associated with public cloud operations. (This is not the same as Large Deployments.) As Stefano pointed out yesterday: http://m

Re: [Openstack-operators] [neutron] Any users of Neutron's VPN advanced service?

2015-08-05 Thread Edgar Magana
I know I can’t wear both hats but in this case as Operator as one of the constant moderators for the neutron-related sessions, I can say that I have never received a report about the VPNaaS code from the Operators. This could be means two things, the code is terrific and nobody has issues with i