Re: [openstack-dev] [CI]How to set proxy for nodepool

Hi Ramy, Thanks for your help. I have already confirmed proxy setting again, and it works fine(no matter whether the NODEPOOL_ variables are declared or not): 1) not only in the host machine on which DIB run, 2) but also in the first half part of DIB(before the DIB running chroot).

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

On 3 August 2015 at 20:53, Clint Byrum wrote: > Excerpts from Devananda van der Veen's message of 2015-08-03 08:53:21 > -0700: > Also on a side note, I think Cinder's need for this is really subtle, > and one could just accept that sometimes it's going to break when it does > two things to one re

Re: [openstack-dev] [devstack][neutron] How to give nested VM access to outside network?

Can you try answer 1 of [1]? I've never tried it, but I heard from folks who configured it like that. With this masquerading, your vm should be able to reach your 192.x network. But as it's NAT it won't work the other way round (e.g. establish a connection from outside into your vm) The proper wa

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

On Tue, Aug 04, 2015 at 10:32:40AM +0300, Duncan Thomas wrote: > On 3 August 2015 at 20:53, Clint Byrum wrote: > > > Excerpts from Devananda van der Veen's message of 2015-08-03 08:53:21 > > -0700: > > Also on a side note, I think Cinder's need for this is really subtle, > > and one could just ac

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

On Mon, Aug 03, 2015 at 06:12:23PM +, Fox, Kevin M wrote: > For example, to parallel the conversation with databases: > > "We want a database". Well, that means mongodb, postgres, mysql, berkeleydb, > etc > > "Oh, well, I need it to be a relational db", Well, that means postgresq, > mys

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

On Tue, Aug 04, 2015 at 05:47:44AM +1000, Morgan Fainberg wrote: > > > > On Aug 4, 2015, at 01:42, Fox, Kevin M wrote: > > > > I'm usually for abstraction layers, but they don't always pay off very well > > due to catering to the lowest common denominator. > > > > Lets clearly define the prob

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

> If we end up using a DLM then we have to detect when the connection to > the DLM is lost on a node and stop all ongoing operations to prevent > data corruption. > > It may not be trivial to do, but we will have to do it in any solution > we use, even on my last proposal that only uses the DB in

Re: [openstack-dev] [nova][ironic] Scheduler filtering based on instances

Hi, > Our initial solution [1] was to simply disable instance queries in the > IronicHostManager, as they were never needed, and were painful to > execute. But subsequent discussion on IRC brought up some potential > (although not very likely) use cases where this might not be true. One > example

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

On 04/08/15 10:50 +0200, Philipp Marek wrote: If we end up using a DLM then we have to detect when the connection to the DLM is lost on a node and stop all ongoing operations to prevent data corruption. It may not be trivial to do, but we will have to do it in any solution we use, even on my las

[openstack-dev] [nova] [FFE] Feature Freeze Exception Request for 'Volume Snapshot Improvements'

Hello Nova cores, I would like to request feature freeze exception for the volume snapshot improvements blueprint [1] This bp was proposed in Juno, but could not be implemented then, hence was pushed to Liberty, and the patches [2] for the same have been on review for the last 2+ months a

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

Its been explained for Cinder, but not for other OpenStack projects that also have needs in this area. Thanks, Kevin From: Gorka Eguileor Sent: Tuesday, August 04, 2015 1:39:07 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [open

[openstack-dev] [neutron][qos][ml2] extensions swallow exceptions

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi all, in feature/qos, we use ml2 extension drivers to handle additional qos_policy_id field that can be provided thru API: http://git.openstack.org/cgit/openstack/neutron/tree/neutron/plugins/ml2 /extensions/qos.py?h=feature/qos What we do in qo

Re: [openstack-dev] [nova] Thoughts on things that don't make freeze cutoffs

On 3 August 2015 at 20:44, Jesse Cook wrote: > On 7/29/15, 2:13 PM, "Matt Riedemann" wrote: >>We talked a bit about this at the nova mid-cycle last week but I can't >>say I completely remember all of the points made, since I feel like we >>talked ourselves into a circle that got us back to more o

Re: [openstack-dev] [pbr] [stable] [infra] How to generate .Z version increments on stable/liberty commits

Clark Boylan wrote: > On Mon, Aug 3, 2015, at 05:46 AM, Thierry Carrez wrote: >> In order to make this work, it looks like we'd require: >> >> * pbr changes so that it supports a mode where every commit on the >> branch increments .Z >> >> * infra changes to automatically push the corresponding tag

Re: [openstack-dev] [stable] [infra] How to auto-generate stable release notes

Doug Hellmann wrote: > Excerpts from Robert Collins's message of 2015-08-04 06:43:48 +1200: >> On 4 August 2015 at 02:46, Alexis Lee wrote: >>> Whichever solution we pick - should we also adopt it on master? Naively >>> it sounds useful to be able to generate release notes for master too. >>> And

[openstack-dev] [Fuel] SSL for master node API

Hi guys, in overall movement of Fuel to use secure sockets we think about wrapping master node UI and API calls to SSL. But there are next caveat: a) fuel-nailgun-agent cannot work via SSL now and need to be rewritten a little. But if it will be rewritten in 7.0 and HTTPS on master node will be fo

[openstack-dev] [Keystone] [Horizon] Attribute Mapping GUI for Horizon

Hi Marek, Done. ;) Regards, Ioram 2015-08-03 8:07 GMT+01:00 Marek Denis : > Hi Ioram, > > How about moving this discussion to the mailing list? Maybe others will > find it useful too. > > cheers, > Marek > > On 02.08.2015 11:28, Ioram Schechtman Sette wrote: > >> Hi Marek, hi all, >> >> Just t

Re: [openstack-dev] [Keystone] [Horizon] UI for Keystone dynamic policies editing

Hi All Ioram has built a complete set of wireframe policy GUI screens for comment. He has uploaded them to InVision https://openstack.invisionapp.com/share/HQ3QN2123#/screens Please comment on these in InVision regards David On 03/08/2015 21:39, Lin Hua Cheng wrote: > Hi Timur, > > Thanks fo

Re: [openstack-dev] [Fuel] SSL for master node API

Hi, +1 to 2nd solution, in this case old environments will work without additional actions. Agents for new environments, CLI and UI will use SSL. But probably for UI we will have to perform redirect on JS level. Thanks, On Tue, Aug 4, 2015 at 1:32 PM, Stanislaw Bogatkin wrote: > Hi guys, > in

Re: [openstack-dev] [nova] Thoughts on things that don't make freeze cutoffs

John Garbutt wrote: > [...] > Personally I find a mix of coding and reviewing good to keep a decent > level of empathy and sanity. I don't have time for any coding this > release (only a bit of documenting), and its not something I can > honestly recommend as a best practice. If people don't mainta

[openstack-dev] [python-neutronclient][neutron] sub-project client extensions

Folks, In networking-plumgrid project, we intend to implement client side for some of the vendor specific extensions. Looking at the current implementation for client side for some vendors, I see the code is part of python-neutronclient tree [1]. I do see this change [2] talking about a way to loa

Re: [openstack-dev] [nova] Thoughts on things that don't make freeze cutoffs

+1 to "pushing for is creating Nova subteams with their own core reviewers, which would be experts and trusted to +2 on a defined subset of code." Oslo has cores who can +2 any of the oslo libraries and each Oslo library has its own cores as well. We tend to elevate karma quickly for cores between

[openstack-dev] [nova] API for getting connection info from console token

There is an API (os-console-auth-tokens) which returns the connection info which correspond to a given console token. However this API works only for RDP consoles: https://github.com/openstack/nova/blob/master/nova/api/openstack/compute/plugins/v3/console_auth_tokens.py#L49 Why do we have thi

Re: [openstack-dev] [Fuel] SSL for master node API

I am for 2nd option for 7.0 and for 3rd for 8.0 But I would suggest that we add an option to astute.yaml that a user can set to true to force ssl and then he will need to install updated nailgun-agent for older environments. In this case user will do this concisely, knowing about potential caveats

Re: [openstack-dev] [puppet] Move to rspec-puppet 2.2.0

On Tue, Jun 09, 2015 at 12:38:55PM (-0700), Cody Herriges wrote: > Seemingly simple proposition of moving from rspec-puppet 2.1.0 to 2.2.0 > so as to address the issue of helper library loading that is shipped as > part of a few of our modules. In my specific case, puppet-vswitch's > puppetx libra

Re: [openstack-dev] [Fuel] SSL for master node API

Hi, +1 to 2nd solution too. On Tue, Aug 4, 2015 at 1:45 PM, Evgeniy L wrote: > Hi, > > +1 to 2nd solution, in this case old environments will work without > additional > actions. Agents for new environments, CLI and UI will use SSL. > But probably for UI we will have to perform redirect on JS l

Re: [openstack-dev] [Fuel] SSL for master node API

+1 to #2 *From:* Vladimir Kuklin [mailto:vkuk...@mirantis.com] *Sent:* Tuesday, August 04, 2015 6:25 AM *To:* OpenStack Development Mailing List (not for usage questions) < openstack-dev@lists.openstack.org> *Subject:* Re: [openstack-dev] [Fuel] SSL for master node API I am for 2nd option for

Re: [openstack-dev] [Keystone] [Horizon] UI for Keystone dynamic policies editing

Hi All, The correct link is: https://openstack.invisionapp.com/share/9Z3RI8OD7#/screens Regards, Ioram 2015-08-04 11:42 GMT+01:00 David Chadwick : > Hi All > > Ioram has built a complete set of wireframe policy GUI screens for > comment. He has uploaded them to InVision > > https://openstack.in

[openstack-dev] (no subject)

On Tue, Aug 4, 2015 at 1:02 PM, Ihar Hrachyshka wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Hi all, > > in feature/qos, we use ml2 extension drivers to handle additional > qos_policy_id field that can be provided thru API: > > http://git.openstack.org/cgit/openstack/neutron/tre

Re: [openstack-dev] [neutron][qos][ml2] extensions swallow exceptions

Don't know why subject wasn't set automatically.. On Tue, Aug 4, 2015 at 3:30 PM, Mike Kolesnik wrote: > > > On Tue, Aug 4, 2015 at 1:02 PM, Ihar Hrachyshka > wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >> >> Hi all, >> >> in feature/qos, we use ml2 extension drivers to handl

Re: [openstack-dev] [designate] and [lbaas] - GSLB API and backend support

Sure, we need the other cores to merge it - I cannot merge my own change. If you are OK with the current version, you can leave a comment on the pull request, which helps cores decide if the PR is ready. Thanks, Graham On 03/08/15 18:10, Gandhi, Kunal wrote: > Hi Graham, > > Can we have your G

[openstack-dev] [nova] Nova API improvement plan

On the plane home from the Nova midcycle meetup I spent a chunk of time reading our API docs that are now in tree: https://github.com/openstack/nova/blob/master/doc/source/v2/2.0_server_concepts.rst and it got me concerned that documentation improvements don't seem to be the top priority on the API

[openstack-dev] [GSLB][GLB] Meeting today @ 16:00 UTC

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Reminder that we have a meeting today at 16:00 UTC in #openstack-meeting-4 The Agenda is as follows: API Spec: * https://github.com/gslb/gslb-specs/pull/1 * Can cores review + merge? Polaris Abstract: * https://github.com/polaris-gslb/polaris-

Re: [openstack-dev] [python-neutronclient][neutron] sub-project client extensions

I started down the path of making a python-neutronclient extension, but got stuck on the lack of support for child resource extensions as described here https://bugs.launchpad.net/python-neutronclient/+bug/1446428. I submitted a bugfix here https://review.openstack.org/#/c/202597/?. Amir ___

Re: [openstack-dev] [nova][ironic] Scheduler filtering based on instances

On Tue, Aug 04, 2015 at 09:52:40AM +0100, Lucas Alvares Gomes wrote: > Hi, > > > Our initial solution [1] was to simply disable instance queries in the > > IronicHostManager, as they were never needed, and were painful to > > execute. But subsequent discussion on IRC brought up some potential > >

Re: [openstack-dev] [Keystone][Fernet] HA SQL backend for Fernet keys

On Tue, Aug 4, 2015 at 1:37 AM, Boris Bobrov wrote: > On Monday 03 August 2015 21:05:00 David Stanek wrote: > > > On Sat, Aug 1, 2015 at 8:03 PM, Boris Bobrov > wrote: > > > > On Sat, Aug 1, 2015 at 3:41 PM, Clint Byrum wrote: > > > > > This too is overly complex and will cause failures. If you

Re: [openstack-dev] [Fuel] SSL for master node API

FYI: There is Strict-Transport-Security header which can also be useful here (unless we want to make SSL for master node optional) 2015-08-04 15:07 GMT+03:00 Vladimir Sharshov : > Hi, > > +1 to 2nd solution too. > > On Tue, Aug 4, 201

[openstack-dev] [Fuel] Console messages in Mirantis 6.1

Fuel team, One of Fuel 6.1 users found a very annoying bug: I’ve installed new Mirantis 6.1 a couple of weeks ago and I’m seeing the > following message on both Controller and Compute node consoles. > > “netlink: 20 bytes leftover after parsing attributes” > > There are several references to this

Re: [openstack-dev] [pbr] [stable] [infra] How to generate .Z version increments on stable/liberty commits

Excerpts from Clark Boylan's message of 2015-08-03 11:54:06 -0700: > On Mon, Aug 3, 2015, at 05:46 AM, Thierry Carrez wrote: > > Hi everyone, > > > > A month ago the stable branch team decided to move away from > > synchronized stable point releases and enable continuous stable branch > > delivery

Re: [openstack-dev] [Fuel] SSL for master node API

+1 for option 2) But I have a question: how do we fit with this into the scope of Feature Freeze and Soft Code Freeze this week? Any ETAs? 2015-08-04 15:06 GMT+02:00 Vitaly Kramskikh : > FYI: There is Strict-Transport-Security > head

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

On Tue, Aug 04, 2015 at 09:28:58AM +, Fox, Kevin M wrote: > Its been explained for Cinder, but not for other OpenStack projects that also > have needs in this area. > For that, Flavio started a new thread "Does OpenStack need a common solution for DLM?" We are discussing Cinder specifics on

Re: [openstack-dev] [all] Does OpenStack need a common solution for DLM? (was: Re: [Cinder] A possible solution for HA Active-Active)

On Aug 3, 2015, at 6:09 PM, Flavio Percoco wrote: > > On 03/08/15 19:48 +0200, Gorka Eguileor wrote: >> On Mon, Aug 03, 2015 at 03:42:48PM +, Fox, Kevin M wrote: >>> I'm usually for abstraction layers, but they don't always pay off very well >>> due to catering to the lowest common denominat

Re: [openstack-dev] [nova] Thoughts on things that don't make freeze cutoffs

On Tue, Aug 04, 2015 at 12:54:34PM +0200, Thierry Carrez wrote: > John Garbutt wrote: > > [...] > > Personally I find a mix of coding and reviewing good to keep a decent > > level of empathy and sanity. I don't have time for any coding this > > release (only a bit of documenting), and its not somet

Re: [openstack-dev] [Openstack-operators] [Neutron][L3] [Large Deployments Team] Representing a networks connected by routers

I will be there for my lightning talk, and I think armax and kevin_benton will be there - it would be good to find some time for us to pow-wow, along with some teleconference so that carl_baldwin and mestery can join in... Ryan Moats (regXboi) Mike Dorman wrote on 08/03/2015 10:07:23 PM: > From

[openstack-dev] [Fuel] Console messages in Mirantis 6.1

> Fuel team, > > One of Fuel 6.1 users found a very annoying bug: > > I’ve installed new Mirantis 6.1 a couple of weeks ago and I’m seeing the >> following message on both Controller and Compute node consoles. >> >> “netlink: 20 bytes leftover after parsing attributes” >> >> There are several refer

[openstack-dev] [Ceilometer][AODH] Timeout Event Alarms

Hi folks, On our meatup we agreed to add timeout event alarms [1](Event-Base Alarming part). In ToDo task "Сhoose the optimal way for timeout alerting implementation" Now we have two proposition for implementation: - first is to add timeout param in event pipeline (transformer part) [2] -- wea

Re: [openstack-dev] [Fuel] SSL for master node API

Seems that second solution is okay. Sebastian, I'll try to fix it before SCF. On Tue, Aug 4, 2015 at 4:25 PM, Sebastian Kalinowski < skalinow...@mirantis.com> wrote: > +1 for option 2) > > But I have a question: how do we fit with this into the scope of Feature > Freeze and Soft Code Freeze this

Re: [openstack-dev] [Openstack-operators] [Neutron][L3] [Large Deployments Team] Representing a networks connected by routers

Can you also try to have some sort of remote option? I'd like to attend this, and I'd like Carl to try and attend as well. Thanks! On Tue, Aug 4, 2015 at 8:50 AM, Ryan Moats wrote: > I will be there for my lightning talk, and I think armax and kevin_benton > will be there - it would be good to f

Re: [openstack-dev] [Fuel] Console messages in Mirantis 6.1

Hey Evgeniya, On Tue, Aug 4, 2015 at 8:59 AM, Evgeniya Shumakher wrote: > > Fuel team, >> >> One of Fuel 6.1 users found a very annoying bug: >> >> I’ve installed new Mirantis 6.1 a couple of weeks ago and I’m seeing the >>> following message on both Controller and Compute node consoles. >>> >

Re: [openstack-dev] [nova] Bug Triage Day - Liberty

This is a short reminder that we intend to do a "bug triage day" tomorrow, Wednesday 5th. Would be great if you could participate. Regards, Markus Zoeller (markus_z) John Garbutt wrote on 07/29/2015 07:21:31 PM: > From: John Garbutt > To: "OpenStack Development Mailing List (not for usage ques

Re: [openstack-dev] [Fuel] Console messages in Mirantis 6.1

Evgeniya, These bug doesn't affect any functionality. These bugs are warnings only that's why they were moved to 8.0. In 8.0 we are switching dynamically built bootstrap based on Ubuntu 14.04 or Centos 7. These warnings will have gone automatically. -- Best regards, Sergii Golovatiuk, Skype #gols

Re: [openstack-dev] [Keystone][Fernet] HA SQL backend for Fernet keys

On Tuesday 04 August 2015 08:06:21 Lance Bragstad wrote: > On Tue, Aug 4, 2015 at 1:37 AM, Boris Bobrov wrote: > > On Monday 03 August 2015 21:05:00 David Stanek wrote: > > > On Sat, Aug 1, 2015 at 8:03 PM, Boris Bobrov > > > > wrote: > > > > Also, come on, does http://paste.openstack.org/show/4

Re: [openstack-dev] [Openstack-operators] [Neutron][L3] [Large Deployments Team] Representing a networks connected by routers

Ok, cool. We plan to discuss this during the LDT time slot at 1330-1500 Pacific on Tuesday 8/18. We can have this as the first agenda item so there’s a defined start time for those who are remote. I'll take ownership of setting up a hangout (or whatever.) Do people have a preference on what

[openstack-dev] Hyper-V 2008 R2 support

Hi guys, Just a quick note on the Windows editions support matrix updates for the Nova Hyper-V driver and Neutron networking-hyperv ML2 agent: We are planning to drop legacy Windows Server / Hyper-V Server 2008 R2 support starting with Liberty. Windows Server / Hyper-V Server 2012 and above wi

[openstack-dev] [all][api] New API Guidelines read for cross project review

hey all, we have 2 API Guidelines that are ready for final review. 1. No project uses f_ prefix in filter params https://review.openstack.org/#/c/198547/ 2. RFC 5789 doesn't specify certain uses of PUT https://review.openstack.org/#/c/199597/ if the API Working Group hasn't received any furthe

Re: [openstack-dev] [Openstack-operators] [Neutron][L3] [Large Deployments Team] Representing a networks connected by routers

Google Hangout should work fine! And Carl and I will both be at Linuxcon and together, so we can dial in together. This time should work for us, so thanks for taking us into consideration Mike! Kyle On Tue, Aug 4, 2015 at 9:29 AM, Mike Dorman wrote: > Ok, cool. We plan to discuss this during t

Re: [openstack-dev] [nova] Nova API improvement plan

On Tue, Aug 4, 2015 at 7:48 AM, Sean Dague wrote: > On the plane home from the Nova midcycle meetup I spent a chunk of time > reading our API docs that are now in tree: > > https://github.com/openstack/nova/blob/master/doc/source/v2/2.0_server_concepts.rst > and it got me concerned that documenta

Re: [openstack-dev] [nova] Proposal for an Experiment

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 08/03/2015 02:24 PM, Jesse Cook wrote: > Performance tests against 1000 node clusters being setup by OSIC? > Sounds like you have a playground for your tests. Unfortunately, the consensus of the nova cores during the mid-cycle meetup was that w

Re: [openstack-dev] [fuel][fuel-library] Librarian changes

To follow up on the merge schedule as we've merged some items and the apt mirror issue has been resolved. Friday 7/31 (COMPLETE) librarian - https://review.openstack.org/#/c/202763/ stdlib - https://review.openstack.org/#/c/203386/ Monday 8/3 (COMPLETE) concat - https://review.openstack.org/#/c/2

Re: [openstack-dev] [Keystone][Fernet] HA SQL backend for Fernet keys

On Tue, Aug 4, 2015 at 9:28 AM, Boris Bobrov wrote: > On Tuesday 04 August 2015 08:06:21 Lance Bragstad wrote: > > On Tue, Aug 4, 2015 at 1:37 AM, Boris Bobrov > wrote: > > > On Monday 03 August 2015 21:05:00 David Stanek wrote: > > > > On Sat, Aug 1, 2015 at 8:03 PM, Boris Bobrov > > > > > > w

Re: [openstack-dev] Hyper-V 2008 R2 support

On Tue, Aug 04, 2015 at 02:34:19PM +, Alessandro Pilotti wrote: > Hi guys, > > Just a quick note on the Windows editions support matrix updates for the Nova > Hyper-V driver and Neutron networking-hyperv ML2 agent: > > We are planning to drop legacy Windows Server / Hyper-V Server 2008 R2 s

Re: [openstack-dev] Would people see a value in the cve-check-tool?

Hi Adam, Thank you for your suggestion! I will send also this proposal to openstack-security@. I have previously attached the wrapper python class to the email, but it seems that it didn’t reach people. Let me try again (now in a form of an archive) and see if it goes through this time.

Re: [openstack-dev] Would people see a value in the cve-check-tool?

On 08/03/2015 04:08 PM, Reshetova, Elena wrote: > Hi, > > > > We would like to ask opinions if people find it valuable to include a > cve-check-tool into the OpenStack continuous integration process? > > A tool can be run against the package and module dependencies of OpenStack > components a

Re: [openstack-dev] [nova] Thoughts on things that don't make freeze cutoffs

Le 4 août 2015 13:18, "Davanum Srinivas" a écrit : > > +1 to "pushing for is creating Nova subteams with their own core > reviewers, which would be experts and trusted to +2 on a defined > subset of code." > > Oslo has cores who can +2 any of the oslo libraries and each Oslo > library has its own

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

Duncan Thomas wrote: On 3 August 2015 at 20:53, Clint Byrum mailto:cl...@fewbar.com>> wrote: Excerpts from Devananda van der Veen's message of 2015-08-03 08:53:21 -0700: Also on a side note, I think Cinder's need for this is really subtle, and one could just accept that sometimes

Re: [openstack-dev] Hyper-V 2008 R2 support

> On 04 Aug 2015, at 17:56, Daniel P. Berrange wrote: > > On Tue, Aug 04, 2015 at 02:34:19PM +, Alessandro Pilotti wrote: >> Hi guys, >> >> Just a quick note on the Windows editions support matrix updates for the Nova >> Hyper-V driver and Neutron networking-hyperv ML2 agent: >> >> We ar

Re: [openstack-dev] [puppet] weekly meeting #45

On 08/03/2015 04:31 PM, Emilien Macchi wrote: > Hello, > > Here's an initial agenda for our weekly meeting, tomorrow at 1500 UTC > in #openstack-meeting-4: > > https://etherpad.openstack.org/p/puppet-openstack-weekly-meeting-20150804 > > Please add additional item

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

Philipp Marek wrote: If we end up using a DLM then we have to detect when the connection to the DLM is lost on a node and stop all ongoing operations to prevent data corruption. It may not be trivial to do, but we will have to do it in any solution we use, even on my last proposal that only uses

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

Clint Byrum wrote: Excerpts from Devananda van der Veen's message of 2015-08-03 08:53:21 -0700: On Mon, Aug 3, 2015 at 8:41 AM Joshua Harlow wrote: Clint Byrum wrote: Excerpts from Gorka Eguileor's message of 2015-08-02 15:49:46 -0700: On Fri, Jul 31, 2015 at 01:47:22AM -0700, Mike Perez wr

Re: [openstack-dev] [Neutron][L3] [Large Deployments Team] Representing a networks connected by routers

On Mon, Aug 3, 2015 at 9:07 PM, Mike Dorman wrote: > I hope we can move this idea moving forward. I was disappointed to see > the spec abandoned. While I think the ship has sailed for Liberty, this is going to be my top priority for for Mitaka. Abandoning the spec may have sent the wrong messag

Re: [openstack-dev] [all] Does OpenStack need a common solution for DLM?

Flavio Percoco wrote: On 03/08/15 19:48 +0200, Gorka Eguileor wrote: On Mon, Aug 03, 2015 at 03:42:48PM +, Fox, Kevin M wrote: I'm usually for abstraction layers, but they don't always pay off very well due to catering to the lowest common denominator. Lets clearly define the problem space

Re: [openstack-dev] [Keystone] [Horizon] Federated Login

Hi David, This is a cool looking UI. I've made a minor comment on it in InVision. I'm curious if this is an implementable idea - does keystone support large numbers of 3rd party idps? is there an API to retreive the list of idps or does this require carefully coordinated configuration between Hor

Re: [openstack-dev] [Ironic] Let's talk about API versions

On Mon, Jul 27, 2015 at 01:35:25PM -0700, Jim Rollenhagen wrote: > > Now we've landed a patch[0] with a new version (1.11) that is not > backward compatible. It causes newly added Node objects to begin life in > the ENROLL state, rather than AVAILABLE. This is a good thing, and > people should wan

Re: [openstack-dev] [Keystone] [Horizon] Federated Login

Hi Doug On 04/08/2015 16:52, Douglas Fish wrote: > Hi David, > > This is a cool looking UI. I've made a minor comment on it in InVision. thanks > > I'm curious if this is an implementable idea It has to be, since there are many existing federations with 100s of IDPs. Simply displaying a list

Re: [openstack-dev] [pbr] [stable] [infra] How to generate .Z version increments on stable/liberty commits

On Tue, Aug 4, 2015, at 06:22 AM, Doug Hellmann wrote: > Excerpts from Clark Boylan's message of 2015-08-03 11:54:06 -0700: > > On Mon, Aug 3, 2015, at 05:46 AM, Thierry Carrez wrote: > > > Hi everyone, > > > > > > A month ago the stable branch team decided to move away from > > > synchronized s

[openstack-dev] [Neutron] VPNaaS and DVR compatibility

Hi, I'd like to clarify a situation around VPNaaS and DVR compatibility in Neutron. In non-DVR case VMs use a network node to access each other and external network. So with VPNaaS enabled we just have additional setup steps performed on network nodes to establish VPN connection between VMs. With

Re: [openstack-dev] [pbr] [stable] [infra] How to generate .Z version increments on stable/liberty commits

Excerpts from Clark Boylan's message of 2015-08-04 09:28:00 -0700: > > On Tue, Aug 4, 2015, at 06:22 AM, Doug Hellmann wrote: > > Excerpts from Clark Boylan's message of 2015-08-03 11:54:06 -0700: > > > On Mon, Aug 3, 2015, at 05:46 AM, Thierry Carrez wrote: > > > > Hi everyone, > > > > > > > > A

Re: [openstack-dev] [Keystone] [Horizon] Federated Login

Hi David, There was a similar effort in Kilo to design the flow in the login page for federated login[1]. WebSSO feature[2] was implemented in Kilo, it allows the user to perform federated login by selecting an IdP protocol. This have tested with kerberos and saml2. There is a proposal to exte

[openstack-dev] [nfv][telco] Meeting canceled 2015-08-05

Hi all, I am traveling and unable to facilitate the Telco Working Group meeting this week and was unable to find a backup, as such the meeting is canceled fro 2015-08-05 (Wednesday). Thanks! Steve __ OpenStack Development

Re: [openstack-dev] [Neutron][L3] Representing a networks connected by routers

>You're right but in the current model you can't have IP addresses without the network either which is actually the point I'm trying to make. Definitely, but it's not because the network has properties that IPAM depends on. It's only because a subnet has a non-nullable foreign key relationship to

[openstack-dev] [Magnum] Networking Subteam Meeting Update

All, This week’s Magnum Networking Subteam Meeting will be canceled due to the Midcycle [1]. Sub team meetings [2] will resume on 8/13 at 1800 UTC. We have two container networking sessions on the midcycle agenda. WebEx has been setup if you would like to attend the midcycle remotely. We look f

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

Excerpts from Duncan Thomas's message of 2015-08-04 00:32:40 -0700: > On 3 August 2015 at 20:53, Clint Byrum wrote: > > > Excerpts from Devananda van der Veen's message of 2015-08-03 08:53:21 > > -0700: > > Also on a side note, I think Cinder's need for this is really subtle, > > and one could ju

Re: [openstack-dev] [Keystone] [Horizon] Federated Login

On Tue, Aug 4, 2015 at 10:52 AM, Douglas Fish wrote: > Hi David, > > This is a cool looking UI. I've made a minor comment on it in InVision. > > I'm curious if this is an implementable idea - does keystone support large > numbers of 3rd party idps? is there an API to retreive the list of idps or

Re: [openstack-dev] [mistral] [murano] An online YAQL evaluator

Awesome! Really. Thank you folks for doing this. I am so much looking forward to moving it to 1.0 with more built-in functions and more power to extend it... Note that Mistral has a few extensions, like `str`, `len`, which are not in the scope of evaluator. DZ> On Aug 2, 2015, at 12:44 PM

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

Ah. Ok. Thanks. Kevin From: Gorka Eguileor [gegui...@redhat.com] Sent: Tuesday, August 04, 2015 6:33 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [Cinder] A possiblesolutionfor HA

Re: [openstack-dev] [Keystone] [Horizon] Federated Login

Right, but that API is/should be protected. If we want to list IdPs *before* authenticating a user, we either need: 1) a new API for listing public IdPs or 2) a new policy that doesn't protect that API. Thanks, Steve Martinelli OpenStack Keystone Core From: Lance Bragstad To: "OpenStac

Re: [openstack-dev] [Magnum] Container Networking Spec

All, The container networking spec below has gone through a fairly significant design change in the past few days. To summarize, Magnum will not create any new network plugins or network-specific abstractions to support container networking. Instead, the spec suggests standardizing on libnetwor

Re: [openstack-dev] Would people see a value in the cve-check-tool?

Hi Elena, This is interesting work, thanks for posting it (and for posting it here on openstack-dev, we are trying to wind down the security ML) though maybe use the [Security] tag in the subject line next time. I think this is a very interesting project, though it’s unclear to me who might be

Re: [openstack-dev] [neutron][qos][ml2] extensions swallow exceptions

There is this review[1] trying to solve exactly what you¹re asking for. I think it makes sense for the exceptions to be propagated all the way back to the user instead of swallowing them and then roll back the transaction. Does it even make sense to continue after a failure? [1] https://review.op

Re: [openstack-dev] [murano] [mistral] [yaql] Prepare to Yaql 1.0 release

This is great news Alex, was looking forward to it, will be happy to migrate Mistral. Some heads-up on what syntactically changed would be much appreciated to pass on to our users; we likely will catch much of them with Mistral tests, but some may bubble up. DZ. On Jul 27, 2015, at 2:04 AM

Re: [openstack-dev] [mistral] BPMN support

Hi Noy, The short answer is No, BPMN is currently not supported, and No, we didn’t hear requests to support it yet. It is architecturally feasible but is a substantial effort, and not on the current roadmap. The longer answer is: Both Mistral DSL and BPMN come from the common root of workflo

Re: [openstack-dev] [neutron][qos][ml2] extensions swallow exceptions

The process_[create|update]_() extension driver methods are intended to validate user input. Exceptions raised by these need to be returned to users so they know what they did wrong. These exceptions should not be logged as anything higher than info level, since user errors generally are not of

Re: [openstack-dev] [Ceilometer][AODH] Timeout Event Alarms

hi Igor, i would suggest you go with second option as i believe your implementation will overlap and reuse some of the functionality Ryota would code for his alarm spec [1]. also, since Aodh is working on an independent release cycle, it'll give you some more time as i don't think we'd be abl

Re: [openstack-dev] [Neutron][L3] Representing a networks connected by routers

Kevin, This is just a final top-post to say that I'm going to spend the next week noodling over this discussion in more detail and trying to flesh it out into a proposal. I think we're pretty much in agreement about where the problems are in the model. It feels like we'll just be beating a dead

Re: [openstack-dev] [Openstack-operators] [Neutron][L3] [Large Deployments Team] Representing a networks connected by routers

I will be in China that week for the bug hackathon. I will be happy to dial in though assuming it's a reasonable time (e.g. morning PST). On Tue, Aug 4, 2015 at 10:39 AM, Kyle Mestery wrote: > Google Hangout should work fine! And Carl and I will both be at Linuxcon > and together, so we can dial

Re: [openstack-dev] [nova] Thoughts on things that don't make freeze cutoffs

On 8/4/2015 8:47 AM, Sahid Orentino Ferdjaoui wrote: On Tue, Aug 04, 2015 at 12:54:34PM +0200, Thierry Carrez wrote: John Garbutt wrote: [...] Personally I find a mix of coding and reviewing good to keep a decent level of empathy and sanity. I don't have time for any coding this release (only

Re: [openstack-dev] Would people see a value in the cve-check-tool?

On 2015-08-04 18:17:13 + (+), Clark, Robert Graham wrote: [...] > As I write this I’ve realised that there would be an interesting > possibility in the former case (putting this in the upstream > OpenStack gates). It would be interesting to see something running > that regularly checks for

Re: [openstack-dev] Would people see a value in the cve-check-tool?

On 8/4/15, 13:17, "Clark, Robert Graham" wrote: >Hi Elena, > >This is interesting work, thanks for posting it (and for posting it here >on openstack-dev, we are trying to wind down the security > ML) though maybe use the [Security] tag in the subject line next time. > >I think this is a very

Re: [openstack-dev] [nova] Proposal for an Experiment

Rally? Something else? What can we do to measure this? Of cause, if you looking for instrument for measure performance - Rally is the best choice! On Tue, Aug 4, 2015 at 5:38 PM, Ed Leafe wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 08/03/2015 02:24 PM, Jesse Cook wrote: > >

Re: [openstack-dev] Would people see a value in the cve-check-tool?

On 2015-08-04 20:37:37 + (+), Ian Cordasco wrote: [...] > When I tried bumping the version for the first two, we had a discussion > about the impact to OpenStack and it was decided that there wasn't a > necessity to bump the version. There was no need to have a discussion > about 3 because

  1   2   >