[openstack-dev] [tacker] PTL candidacy from yong sheng gong

This is my self-nomination to continue running as Tacker PTL for the Rocky cycle. Lots happened in Takcer Queens cycle. More documents, More features are coming in. VNFFG is enhanced, Kubernetes vim and container VNF are introduced. Private Zabbix based application monitoring is done too. Openstac

[openstack-dev] [requirements][release] FFE for constraints update for python-tackerclient bug-fix release

Hi, The tacker client has na initial queens release which does not have right reno notes. Recently I have added some reno patches. And also the team wants a feature to land in the queens release. I have requested the newer release at https://review.openstack.org/#/c/541638/

Re: [openstack-dev] [Neutron] Route cannot be deleted

try to check if there are floatingips on the VMs on that subnet 962b8364-a2b4-46cc-95be-28cbab62b8c2 On Tue, Aug 5, 2014 at 3:24 PM, Sayali Lunkad wrote: > Hi, > > The issue was resolved by following the commands below. > > neutron port-update --device_owner clear > neutron port-delete > neut

[openstack-dev] is tenant-id in network API?

Hi, Today, I found the ​{tenant_id} is written in neutron API URLs at http://developer.openstack.org/api-ref-networking-v2.html. But when I tried to access it accordingly, it failed. I don't think we have tenant_id in network API URL. any Idea? regards, yong sheng gong UnitedStack Inc. ___

Re: [openstack-dev] [Neutron]One security issue about floating ip

I have reported it on neutron project https://bugs.launchpad.net/neutron/+bug/1334926 On Fri, Jun 27, 2014 at 5:07 AM, Vishvananda Ishaya wrote: > I missed that going in, but it appears that clean_conntrack is not done on > disassociate, just during migration. It sounds like we should remove th

Re: [openstack-dev] [Neutron] DVR SNAT shortcut

Hi, for each compute node to have SNAT to Internet, I think we have the drawbacks: 1. SNAT is done in router, so each router will have to consume one public IP on each compute node, which is money. 2. for each compute node to go out to Internet, the compute node will have one more NIC, which connec

Re: [openstack-dev] [Neutron][L3] BGP Dynamic Routing Proposal

I think maybe we can device a kind of framework so that we can plugin different BGP speakers. On Thu, Jun 5, 2014 at 2:59 PM, YAMAMOTO Takashi wrote: > hi, > > > ExaBgp was our first choice because we thought that run something in > > library mode would be much more easy to deal with (especiall

Re: [openstack-dev] [neutron] Service VMs

+1 for its own project for service VM. On Tue, Apr 22, 2014 at 9:41 AM, Kyle Mestery wrote: > On Mon, Apr 21, 2014 at 4:20 PM, Doug Hellmann > wrote: > > On Mon, Apr 21, 2014 at 3:07 PM, Kyle Mestery > wrote: > >> For the upcoming Summit there are 3 sessions filed around "Service > >> VMs" in

Re: [openstack-dev] Neutron error using devstack

you need to give the neutron command the login certificate (user name, password, tenant etc) to work. for example: export OS_USERNAME=admin export OS_PASSWORD=password export OS_TENANT_NAME=admin export OS_AUTH_URL=http://localhost:5000/v2.0 On Sun, Mar 2, 2014 at 2:05 AM, abhishek jain wrote:

Re: [openstack-dev] [Neutron]Do you think tanent_id should be verified

It is not easy to enhance it. If we check the tenant_id on creation, if should we also to do some job when keystone delete tenant? On Mon, Feb 17, 2014 at 6:41 AM, Dolph Mathews wrote: > keystoneclient.middlware.auth_token passes a project ID (and name, for > convenience) to the underlying appl

[openstack-dev] vhost-{pid} takes up cpu

Hi deal stackers, I am running a devstack with two nodes: one is controller (no nova-compute running) and other is compute. I am using neutron ml2 plugin and ovs agent with GRE tunnel. I started a VM and tried to run iperf testing: 1. start iperf as server role in the VM, which has a floating ip

Re: [openstack-dev] multiple external networks not working

in order that the router is scheduled to a l3 agent with a given external network, we should create the router and set its gateway interface on that external network just after the router creation. On Thu, Feb 13, 2014 at 3:26 PM, Nick Ma wrote: > I have a multiple external networks environmen

Re: [openstack-dev] [Neutron] Nominate Oleg Bondarev for Core

+1 On Tue, Feb 11, 2014 at 7:28 AM, Mark McClain wrote: > All- > > I'd like to nominate Oleg Bondarev to become a Neutron core reviewer. > Oleg has been valuable contributor to Neutron by actively reviewing, > working on bugs, and contributing code. > > Neutron cores please reply back with +1/0

Re: [openstack-dev] [Neutron] Developer documentation - linking to slideshares?

My slides are also available to be used. On Thu, Feb 6, 2014 at 2:27 AM, Collins, Sean < sean_colli...@cable.comcast.com> wrote: > On Tue, Feb 04, 2014 at 07:52:22AM -0600, Anne Gentle wrote: > > Currently the docs contributor sign the same CLA as code contributors. > I'd > > encourage you to us

Re: [openstack-dev] [Neutron] About ports backing floating IPs

for all ports: user can change the device_id and device owner easily, it will cause mess in particularly for system ports, such as router interface and gateway ports, dhcp ports etc. dhcp port: there is not point of updating its security groups, and I don't know the effect when we update its Ip ad

Re: [openstack-dev] [Neutron] Alembic migrations

but mark mcclain seems not to agree it. so it is blocked for a long time. On Sun, Dec 22, 2013 at 10:38 PM, Roman Podoliaka wrote: > Hi Gary, > > It's a known bug (the migration script creating 'agents' table is > mistakenly not applied when runnin

Re: [openstack-dev] {opestack][Neutron - FWaaS] CLI Firewall-Policy-Update Bug

try to use: neutron firewall-policy-update dd2c7d33-2c36-4200-b1f8-daaa1ab202d5 --firewall-rules list=true rule1 On Wed, Dec 11, 2013 at 1:37 PM, trinath.soman...@freescale.com < trinath.soman...@freescale.com> wrote: > Hi – > > > > I found this issue with FWaaS CLI commands. > > > > When I is

Re: [openstack-dev] [neutron] Third party Neutron plugin testing meeting

; at a time friendly to those in Asian timezones. Yong and Akihiro, can > you guys propose a timeslot which works for you guys and I'll see > about setting the followup meeting up. > > Thanks, > Kyle > > On Dec 10, 2013, at 8:14 PM, Yongsheng Gong > wrote: > > > It is

Re: [openstack-dev] [neutron] Third party Neutron plugin testing meeting

It is 1am beijing time, so I am afraid I will not join. On Wed, Dec 11, 2013 at 10:10 AM, Akihiro Motoki wrote: > Thanks Kyle for coordinating the meeting. > > The time is midnight to me, but it fits everyone except me. I'll try the > time but not sure. Anyway I will follow the log. > > 2013年12

Re: [openstack-dev] Neutron Distributed Virtual Router

If distributed router is good enough, why do we still need non-distributed router? On Tue, Dec 10, 2013 at 9:04 AM, Ian Wells wrote: > I would imagine that, from the Neutron perspective, you get a single > router whether or not it's distributed. I think that if a router is > distributed - rega

Re: [openstack-dev] [neutron] only one subnet_id is allowed behind a router for vpnservice object

ok, My pleasure to help, I created a bp for it: https://blueprints.launchpad.net/neutron/+spec/vpn-multiple-subnet On Fri, Dec 6, 2013 at 2:11 PM, Nachi Ueno wrote: > Hi Yong > > Yes, to support multiple subnet is on the roadmap. > I'll definitely welcome your help :P > &

[openstack-dev] [neutron] only one subnet_id is allowed behind a router for vpnservice object

I think we should allow more than subnet_id in one vpnservice object. but the model below limits only one subnet_id is used. https://github.com/openstack/neutron/blob/master/neutron/extensions/vpnaas.py RESOURCE_ATTRIBUTE_MAP = { 'vpnservices': { 'id': {'allow_post': False, 'allow_put'

Re: [openstack-dev] [Neutron] Rename 'tenant' to 'project' as per Keystone?

who can tell me the whole story about keystone(or openstack) changes between project->tenant->project? On Wed, Dec 4, 2013 at 9:58 AM, Adam Young wrote: > On 11/26/2013 12:07 PM, Maru Newby wrote: > >> Keystone is almost finished replacing the term 'tenant' with 'project' >> (see recent thread

Re: [openstack-dev] [Neutron] DHCP Agent Reliability

another way is to have a large agent_down_time, by default it is 9 secs. On Wed, Dec 4, 2013 at 7:55 AM, Carl Baldwin wrote: > Stephen, all, > > I agree that there may be some opportunity to split things out a bit. > However, I'm not sure what the best way will be. I recall that Mark > mention

[openstack-dev] whey cannot we update vpn service and IPsecSiteConnection when they are in pending_create state

currently, when vpn service and IPsecSiteConnection are created, their state is PENDING_CREATE, which disallows updating at: def assert_update_allowed(self, obj): status = getattr(obj, 'status', None) _id = getattr(obj, 'id', None) if utils.in_pending_status(status):

Re: [openstack-dev] Reg : Security groups implementation using openflows in quantum ovs plugin

Is the open flow rule stateful? On Tue, Nov 19, 2013 at 6:26 AM, Kanthi P wrote: > Hi All, > > We are planning to implement quantum security groups using openflows for > ovs plugin instead of iptables which is the case now. > > Doing so we can avoid the extra linux bridge which is connected bet

Re: [openstack-dev] [Neutron] Plugin and Driver Inclusion Requirements

For third party testing, I am afraid these tests will make the patch merge process much longer since each patch, which even has nothing to do with the specific plugins, will triggers the unwanted third party testing jobs. On Fri, Nov 15, 2013 at 4:20 AM, Mark McClain wrote: > tl;dr > - > The

Re: [openstack-dev] [Glance] Summit Session Summaries

great, thanks On Sat, Nov 16, 2013 at 5:10 AM, Mark Washenberger < mark.washenber...@markwash.net> wrote: > Hi folks, > > My summary notes from the OpenStack Design Summit Glance sessions follow. > Enjoy, and please help correct any misunderstandings. > > > > Image State Consistency: > -

Re: [openstack-dev] [neutron] [ml2] What is the router plugin for ml2

the router extension is now a service plugin for core ML2 plugin: service_plugins = neutron.services.l3_router.l3_router_plugin.L3RouterPlugin On Thu, Oct 31, 2013 at 11:46 AM, Xu Zhongxing wrote: > I noticed that the ml2 plugin does not support router extension itself. In > README, it says "It

[openstack-dev] About ryu neutron plugin

Hi, I am trying to set up a deployment via neutron ryu plugin, but it seems there is no way to set up it right with the latest neutron code and the latest ryu code . And the document about ryu with openstack is not updated for a long time. https://github.com/osrg/ryu/wiki/OpenStack Who is maintai

Re: [openstack-dev] [Neutron][LBaaS] LBaaS plans for Icehouse

HI, the following time is ok for me: UTC+8: 6:00-23:00 UTC: 22:00-15:00 If it is scheduled during these time slot, I will join. Thanks Yong Sheng Gong On Wed, Oct 23, 2013 at 4:50 PM, Eugene Nikanorov wrote: > Hi Neutron folks! > > We're going to have an IRC meeting where we will discuss devel

Re: [openstack-dev] [Neutron] Tenant's info from plugin/services

I think this should be done in keystone. maybe you need a CLI command: keystone tenant-get On Thu, Oct 17, 2013 at 6:55 AM, Ivar Lazzaro wrote: > Hello Everyone, > > ** ** > > I was wondering if there’s a “standard” way within Neutron to retrieve > tenants’ specific information (e.g. “name

Re: [openstack-dev] Tricky questions - 1/2 Quantum Network Object

networks with more than subnets. > ** > > Best Regards > > ** ** > > Marco > > ** ** > > ** ** > > *From:* Yongsheng Gong [mailto:gong...@unitedstack.com] > *Sent:* den 11 oktober 2013 10:56 > *To:* OpenStack Development

Re: [openstack-dev] Tricky questions - 2/2 NOVA COMPUTE: are Booted VMs independent by other openstack/quantum services?

On Fri, Oct 11, 2013 at 4:41 PM, Marco Fornaro wrote: > Hi All, > > ** ** > > (I already posted this on openstack mail list, but perhaps it’s more a > developer stuff J) > > Some Tricky questions I ask help for (email 2 of 2): > > ** ** > > (please refer to a scenario with Openstack+Q

Re: [openstack-dev] Tricky questions - 1/2 Quantum Network Object

On Fri, Oct 11, 2013 at 4:41 PM, Marco Fornaro wrote: > Hi All, > > ** ** > > (I already posted this on openstack mail list, but perhaps it’s more a > developer stuff J) > > Some Tricky questions I ask help for (email 1 of 2): > > ** ** > > ** ** > > *Quantum Network object* > > In th

Re: [openstack-dev] VM instances Can not connect to external

have u enable the port interface of br-ex? For example ifconfig eth1 up On Fri, Sep 27, 2013 at 7:26 PM, Jeff Cai wrote: > I did all that the doc tells me to do, which includes > > setting up a bridge in the network node. > > ** ** > > Just like > http://docs.openstack.org/grizzly/basic

Re: [openstack-dev] [LBaaS][Horizon] Subnet for VIP?

VIP can be on a different subnet than the members are on. But we need to set up a router so that the haproxy can work. On Tue, Sep 24, 2013 at 11:40 PM, wrote: > I didn't know current lbaas plugin has such limitation. Although I think > the UI should not incur such limitation as the lbaas API d

Re: [openstack-dev] unable to run tox due to the '--pre' argument

n/pip --version pip 1.3.1 from /mnt/data/opt/stack/python-neutronclient/.tox/py27/lib/python2.7/site-packages/pip-1.3.1-py2.7.egg (python 2.7) It is changed back!!! Regards, Yong Sheng Gong On Thu, Sep 19, 2013 at 9:02 AM, Jeremy Stanley wrote: > On 2013-09-19 08:12:47 +0800 (+0

[openstack-dev] unable to run tox due to the '--pre' argument

Hi, I tried to run tests after I changed some codes in python neutron client, But I failed. Could someone please help me out? $ tox -e py27 GLOB sdist-make: /mnt/data/opt/stack/python-neutronclient/setup.py py27 create: /mnt/data/opt/stack/python-neutronclient/.tox/py27 py27 installdeps: -r/mnt/da

Re: [openstack-dev] reg. Multihost dhcp feature in Havana ?

no, we don't get agreement on the implementation. You can get some ideas from comments of https://review.openstack.org/#/c/37919/ Yong Sheng Gong Unitedstack Inc. On Thu, Sep 12, 2013 at 4:57 PM, Gopi Krishna B wrote: > > > > On Tue, Sep 10, 2013 at 1:46 PM, Gopi Krishna B wrote: > >> Hi >> Wa

Re: [openstack-dev] [Neutron] - Evacuate a agent node

To implement the 'evacuation' is also possible. On Thu, Sep 12, 2013 at 3:43 PM, Yongsheng Gong wrote: > set the agent's admin status to False will empty up the agent's resources. > but it will not move the owned resources. > > > On Thu, Sep 12, 2013 at 3:36

Re: [openstack-dev] [Neutron] - Evacuate a agent node

set the agent's admin status to False will empty up the agent's resources. but it will not move the owned resources. On Thu, Sep 12, 2013 at 3:36 PM, Endre Karlson wrote: > Is it possible to get a "evacuation" command for a node running agents ? > Say moving all the agents owned resources from n

Re: [openstack-dev] About multihost patch review

ffort . > Vish > > > > > So, to Edgar's question - is there a reason other than 'be like > nova-network' for requiring neutron multi-host to be configured per-network? > > > > > > m. > > > > 1: > http://docs.openstack.org/trunk/opens

Re: [openstack-dev] [neutron] Why does nova.network.neutronv2.get_client(context, admin=True) drop auth_token?

For admin, we must use admin token. In general, the token from API context is not of role admin. I think the BP can help https://blueprints.launchpad.net/keystone/+spec/reuse-token On Thu, Aug 29, 2013 at 8:12 AM, Roman Verchikov wrote: > Hi stackers! > > Sorry for the stupid question, but why

Re: [openstack-dev] About multihost patch review

On Tue, Aug 27, 2013 at 1:23 PM, Maru Newby wrote: > > On Aug 26, 2013, at 9:39 PM, Yongsheng Gong > wrote: > > > First 'be like nova-network' is a merit for some deployments. > > I'm afraid 'merit' is a bit vague for me. Would you please el

Re: [openstack-dev] About multihost patch review

. > > 1: > http://docs.openstack.org/trunk/openstack-compute/admin/content/existing-ha-networking-options.html > > > > I could be totally wrong and crazy, so please provide some feedback. > > > > Thanks, > > > > Edgar > > > > > > From: Y

Re: [openstack-dev] About multihost patch review

extensions/multihostnetwork.py I have commented back, what is your opinion about it? Regards, Yong Sheng Gong On Fri, Aug 16, 2013 at 9:28 PM, Kyle Mestery (kmestery) wrote: > Hi Yong: > > I'll review this and try it out today. > > Thanks, > Kyle > > On Aug 15, 201

Re: [openstack-dev] [keystone] Two BPs for managing the tokens

>> > >> I would think you would want to reuse the same token but update the > expiration time as if it were the first time the token had been generated. > > > > > > That wouldn't work for PKI tokens, as the resulting signature would have > to change. >

Re: [openstack-dev] [heat] Propose Liang Chen for heat-core

+1 On Fri, Aug 23, 2013 at 4:03 PM, Thomas Hervé wrote: > > On Thu, Aug 22, 2013 at 5:57 PM, Steven Hardy wrote: > >> Hi, >> >> I'd like to propose that we add Liang Chen to the heat-core team[1] >> >> Liang has been doing some great work recently, consistently providing good >> review feedbac

[openstack-dev] [keystone] Two BPs for managing the tokens

Hi, Talked with Henry Nash and Jamie Lennox on IRC, I have created two BPs to manage the keystone tokens: 1. https://blueprints.launchpad.net/keystone/+spec/periodically-flush-expired-token which is used to delete expired token 2. https://blueprints.launchpad.net/keystone/+spec/reuse-token which w

[openstack-dev] oauth and keystone

Hi, I have seen the code about oauth in the keystone but I cannot find the document about how to setup keystone and other openstack services to enable oauth. Can anyone tell me how to setup an env like this? Thanks Yong Sheng Gong ___ OpenStack-dev mai