[Openstack] Virtual machine starting but never finish
Hello, i've create a new ubuntu 12.04 instance, using as image the cloud images they provide. The problem is that on logs i get this http://pastie.org/4335405 and if i check vnc i just the the cursors (not blinking) Any idea? Best -- Alessandro Tagliapietra | VISup srl piazza 4 novembre 7 20124 Milano http://www.visup.it ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [ANN] Kombu acquires support for AMQP heartbeats and cancel notifications
Ask Solem wrote: I believe this is of interest to the Openstack people. Thanks for keeping us posted ! I've just started maintaining a fork of the amqplib library, that differs by using AMQP 0.9.1 instead of 0.8, and that it supports heartbeats and the RabbitMQ extensions (consumer cancel notifications, publisher confirms and more). Any reason why this could not be contributed to amqplib ? Is that dead/unfriendly ? -- Thierry Carrez (ttx) Official hater of duplication of effort in free and open source software ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] [ceilometer] Metering team meeting agenda for Thursday 26 July, 2012 @ 16:00 UTC
The metering project team holds regular meetings via IRC in #openstack-meeting, Thursdays at 1600 UTC http://www.timeanddate.com/worldclock/fixedtime.html?hour=16min=0sec=0. Everyone is welcome to participate. Agenda: http://wiki.openstack.org/Meetings/MeteringAgenda * Review last week's actions * Discuss priority of maintaining Essex support and find contributor to work on it if we are going to do it * Open discussion If you have any additional topics you would like to cover, please update the agenda in the wiki. Doug ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [openstack-dev] High Available queues in rabbitmq
Hi Eugene, Thanks for the patch. I have a question: it seems to me that this patch is a (good) starting point of a broader change to be able to use HA in active/active configuration with RMQ. As far as I know, with that configuration we need to add some extra logic for consumers to deal with consumer cancellation notification and duplicated messages due to a (potentially) re-send after a failover. Is that correct? Is there some plan to have a blueprint for this change? Regards -- Andrea Rosa -Original Message- From: Eugene Kirpichov [mailto:ekirpic...@gmail.com] Sent: 26 July 2012 00:46 To: Alessandro Tagliapietra; rbry...@redhat.com Cc: Rosa, Andrea (HP Cloud Services); OpenStack Development Mailing List; openstack@lists.launchpad.net Subject: Re: [openstack-dev] [Openstack] High Available queues in rabbitmq Gentlemen, Here is my patch: https://review.openstack.org/#/c/10305/ It also depends on another small patch https://review.openstack.org/#/c/10197 I'd like to ask someone to review it. Also, how to get these changes into nova? It seems that nova has a copy-paste of openstack-common inside it, should I just mirror the changes to nova once they're accepted in openstack-common? I'm cc'ing Russell Bryant because he originally created the openstack-common module. On Wed, Jul 25, 2012 at 3:03 AM, Alessandro Tagliapietra tagliapietra.alessan...@gmail.com wrote: Yup, using as resource is a old way as http://www.rabbitmq.com/ha.html Active/active makes sure that you have no downtime and it's simple as you don't need to use DRBD. 2012/7/25 Rosa, Andrea (HP Cloud Services) andrea.r...@hp.com Sorry for my question, I have just seen from the original thread that we are talking about HA with Active/Active solution. -- Andrea Rosa -Original Message- From: Rosa, Andrea (HP Cloud Services) Sent: 25 July 2012 10:45 To: Eugene Kirpichov Cc: openstack-...@lists.openstack.org; Alessandro Tagliapietra; openstack@lists.launchpad.net Subject: Re: [openstack-dev] [Openstack] High Available queues in rabbitmq Hi Your patch doesn't use a Resource manager, so are you working on an Active/Active configuration using mirrored queues? Or are you working on a cluster configuration? I am really interested in that change, thanks for your help. Regards -- Andrea Rosa -Original Message- From: openstack-bounces+andrea.rosa=hp@lists.launchpad.net [mailto:openstack-bounces+andrea.rosa=hp@lists.launchpad.net] On Behalf Of Alessandro Tagliapietra Sent: 24 July 2012 17:58 To: Eugene Kirpichov Cc: openstack-...@lists.openstack.org; openstack@lists.launchpad.net Subject: Re: [Openstack] High Available queues in rabbitmq Oh, so without the need to put an IP floating between hosts. Good job, thanks for helping Best Alessandro Il giorno 24/lug/2012, alle ore 17:49, Eugene Kirpichov ha scritto: Hi Alessandro, My patch is about removing the need for pacemaker (and it's pacemaker that I denoted with the term TCP load balancer). I didn't submit the patch yesterday because I underestimated the effort to write unit tests for it and found a few issues on the way. I hope I'll finish today. On Tue, Jul 24, 2012 at 12:00 AM, Alessandro Tagliapietra tagliapietra.alessan...@gmail.com wrote: Sorry for the delay, i was out from work. Awesome work Eugene, I don't need the patch instantly as i'm still building the infrastructure. Will it will take alot of time to go in Ubuntu repositories? Why you said you need load balancing? You can use only the master node and in case the rabbitmq-server dies, switch the ip to the new master with pacemaker, that's how I would do. Best Regards Alessadro Il giorno 23/lug/2012, alle ore 21:49, Eugene Kirpichov ha scritto: +openstack-dev@ To openstack-dev: this is a discussion of an upcoming patch about native RabbitMQ H/A support in nova. I'll post the patch for codereview today. On Mon, Jul 23, 2012 at 12:46 PM, Eugene Kirpichov ekirpic...@gmail.com wrote: Yup, that's basically the same thing that Jay suggested :) Obvious in retrospect... On Mon, Jul 23, 2012 at 12:42 PM, Oleg Gelbukh ogelb...@mirantis.com wrote: Eugene, I suggest just add option 'rabbit_servers' that will override 'rabbit_host'/'rabbit_port' pair, if present. This won't break anything, in my understanding. -- Best regards, Oleg Gelbukh Mirantis, Inc. On Mon, Jul 23, 2012 at 10:58 PM, Eugene Kirpichov ekirpic...@gmail.com wrote: Hi, I'm working on a RabbitMQ H/A patch right now. It actually involves more than just using H/A queues (unless you're willing to add a TCP load balancer on top of your RMQ cluster). You also need to add support for multiple RabbitMQ's directly to nova. This is not hard at all, and I have the patch ready and tested in production. Alessandro, if you need this urgently, I can send you the patch right
[Openstack] Issue in retrieving public IP address
Hi all, We need to get the public IP address of an Openstack instance in the startup of the instance. We have added a script to rc.local of the instance so that it invokes http://169.254.169.254/latest/meta-data/public-ipv4; in the script to get the public IP. We keep on starting several instances, and found that the public IP is returned *only* at the creation of the first instance. In subsequent instances publicIP is not returned as expected. Any idea whats the issue is ? -- Best Regards Sajith ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Large image snapshots
I am a bit ignorant about image formats and such. The size of the Ubuntu precise cloud image at http://uec-images.ubuntu.com/precise/current/precise-server-cloudimg-amd64-disk1.img is about 221Mb. If I boot that image with flavor m1.tiny and use image-create I get an image that is 2Gb. If I do the same with flavor m1.large the resulting image is 10Gb. Is there a way to create snapshots that don't result in huge images? -David ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [OpenStack Foundation] Individual Nominations for Foundation Board of Directors
Who is the election official, running this election. Nomination should be an open process, similar to the core dev process. It is currently closed and subject to manipulation. I would also suggest that if you are a candidate, you must not be managing the process. Rick On 07/25/2012 06:44 PM, Jonathan Bryce wrote: Hi everyone, Last Wednesday we started accepting Individual Members for the OpenStack Foundation. We've had an excellent response so far with well over 1,000 Individual Members joining in the first week. I wanted to share some important information about how to nominate and elect the Individual Members for the Board of Directors. The deadline to nominate Individual Directors--August 6--is coming very quickly. Directors elected by the Individual Members will make up 1/3 of the Board or 8 of the 24 seats. You must be an Individual Member to nominate, vote or run for an Individual Member position on the Board of Directors. You can become an Individual Member on our website: http://www.openstack.org/join/ Elections for the Individual Directors will take place August 20-24. To vote in the initial Board election, you must join as an Individual Member by August 15. To appear on the ballot, an Individual Member must receive nominations from 10 other Individual Members. The deadline to nominate an Individual Member is August 6, and all nominations are submitted via email to secret...@openstack.org. We have created a basic page with initial nominees on it, and will be reaching out to nominees so they can add additional information about themselves. To see who is being nominated so you can support current nominees (who need 10 nominations) or recommend additional candidates, go to http://www.openstack.org/community/openstack-foundation-board-2012-election-candidates/ Let us know if you have any questions, Jonathan 210-317-2438 ___ Foundation mailing list foundat...@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/foundation signature.asc Description: OpenPGP digital signature ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [OpenStack Foundation] Individual Nominations for Foundation Board of Directors
Yeah, I'm not sure who nominated me, but it would be helpful to understand a bit more about what is expected from a board member. I found this via google [http://wiki.openstack.org/Governance/Foundation/Structure], but is there any more info?: The Board of Directors provides legal management of the Foundation and its financial resources. The Board oversees Foundation operations, sets overall budget and goals for Foundation staff, and hires the Executive Director. Board members are also expected to advocate for the Foundation and the entire OpenStack community. I'd also advocate for there being some place nominees/candidates can write a statement expressing why they want to be on the board of directors... otherwise such a vote may just up as a personality contest or a company v. company vote, neither of which is good for the community. Thanks, Dan On Thu, Jul 26, 2012 at 8:37 AM, Rick Clark r...@openstack.org wrote: Who is the election official, running this election. Nomination should be an open process, similar to the core dev process. It is currently closed and subject to manipulation. I would also suggest that if you are a candidate, you must not be managing the process. Rick On 07/25/2012 06:44 PM, Jonathan Bryce wrote: Hi everyone, Last Wednesday we started accepting Individual Members for the OpenStack Foundation. We've had an excellent response so far with well over 1,000 Individual Members joining in the first week. I wanted to share some important information about how to nominate and elect the Individual Members for the Board of Directors. The deadline to nominate Individual Directors--August 6--is coming very quickly. Directors elected by the Individual Members will make up 1/3 of the Board or 8 of the 24 seats. You must be an Individual Member to nominate, vote or run for an Individual Member position on the Board of Directors. You can become an Individual Member on our website: http://www.openstack.org/join/ Elections for the Individual Directors will take place August 20-24. To vote in the initial Board election, you must join as an Individual Member by August 15. To appear on the ballot, an Individual Member must receive nominations from 10 other Individual Members. The deadline to nominate an Individual Member is August 6, and all nominations are submitted via email to secret...@openstack.org. We have created a basic page with initial nominees on it, and will be reaching out to nominees so they can add additional information about themselves. To see who is being nominated so you can support current nominees (who need 10 nominations) or recommend additional candidates, go to http://www.openstack.org/community/openstack-foundation-board-2012-election-candidates/ Let us know if you have any questions, Jonathan 210-317-2438 ___ Foundation mailing list foundat...@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/foundation ___ Foundation mailing list foundat...@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/foundation -- ~~~ Dan Wendlandt Nicira, Inc: www.nicira.com twitter: danwendlandt ~~~ ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [openstack-dev] High Available queues in rabbitmq
Hi Andrea, On Thu, Jul 26, 2012 at 4:10 AM, Rosa, Andrea (HP Cloud Services) andrea.r...@hp.com wrote: Hi Eugene, Thanks for the patch. I have a question: it seems to me that this patch is a (good) starting point of a broader change to be able to use HA in active/active configuration with RMQ. As far as I know, with that configuration we need to add some extra logic for consumers to deal with consumer cancellation notification and duplicated messages due to a (potentially) re-send after a failover. Is that correct? Well, we ran fine in production without this extra logic, but perhaps we just didn't hit a situation where it was required. As for consumer cancellation notifications - I need to remember when exactly they happen in an HA setup. Maybe you're right. As for duplicated messages - the situation here is no different whether you have 1 or many rabbits; reconnection logic was already in place. Perhaps something should be done here, but it seems that the lack of this logic didn't hurt anyone so far. Maybe it is because IIRC messages are ack'd immediately and the failure window is very small. Is there some plan to have a blueprint for this change? I don't have such a plan. Should I? Regards -- Andrea Rosa -Original Message- From: Eugene Kirpichov [mailto:ekirpic...@gmail.com] Sent: 26 July 2012 00:46 To: Alessandro Tagliapietra; rbry...@redhat.com Cc: Rosa, Andrea (HP Cloud Services); OpenStack Development Mailing List; openstack@lists.launchpad.net Subject: Re: [openstack-dev] [Openstack] High Available queues in rabbitmq Gentlemen, Here is my patch: https://review.openstack.org/#/c/10305/ It also depends on another small patch https://review.openstack.org/#/c/10197 I'd like to ask someone to review it. Also, how to get these changes into nova? It seems that nova has a copy-paste of openstack-common inside it, should I just mirror the changes to nova once they're accepted in openstack-common? I'm cc'ing Russell Bryant because he originally created the openstack-common module. On Wed, Jul 25, 2012 at 3:03 AM, Alessandro Tagliapietra tagliapietra.alessan...@gmail.com wrote: Yup, using as resource is a old way as http://www.rabbitmq.com/ha.html Active/active makes sure that you have no downtime and it's simple as you don't need to use DRBD. 2012/7/25 Rosa, Andrea (HP Cloud Services) andrea.r...@hp.com Sorry for my question, I have just seen from the original thread that we are talking about HA with Active/Active solution. -- Andrea Rosa -Original Message- From: Rosa, Andrea (HP Cloud Services) Sent: 25 July 2012 10:45 To: Eugene Kirpichov Cc: openstack-...@lists.openstack.org; Alessandro Tagliapietra; openstack@lists.launchpad.net Subject: Re: [openstack-dev] [Openstack] High Available queues in rabbitmq Hi Your patch doesn't use a Resource manager, so are you working on an Active/Active configuration using mirrored queues? Or are you working on a cluster configuration? I am really interested in that change, thanks for your help. Regards -- Andrea Rosa -Original Message- From: openstack-bounces+andrea.rosa=hp@lists.launchpad.net [mailto:openstack-bounces+andrea.rosa=hp@lists.launchpad.net] On Behalf Of Alessandro Tagliapietra Sent: 24 July 2012 17:58 To: Eugene Kirpichov Cc: openstack-...@lists.openstack.org; openstack@lists.launchpad.net Subject: Re: [Openstack] High Available queues in rabbitmq Oh, so without the need to put an IP floating between hosts. Good job, thanks for helping Best Alessandro Il giorno 24/lug/2012, alle ore 17:49, Eugene Kirpichov ha scritto: Hi Alessandro, My patch is about removing the need for pacemaker (and it's pacemaker that I denoted with the term TCP load balancer). I didn't submit the patch yesterday because I underestimated the effort to write unit tests for it and found a few issues on the way. I hope I'll finish today. On Tue, Jul 24, 2012 at 12:00 AM, Alessandro Tagliapietra tagliapietra.alessan...@gmail.com wrote: Sorry for the delay, i was out from work. Awesome work Eugene, I don't need the patch instantly as i'm still building the infrastructure. Will it will take alot of time to go in Ubuntu repositories? Why you said you need load balancing? You can use only the master node and in case the rabbitmq-server dies, switch the ip to the new master with pacemaker, that's how I would do. Best Regards Alessadro Il giorno 23/lug/2012, alle ore 21:49, Eugene Kirpichov ha scritto: +openstack-dev@ To openstack-dev: this is a discussion of an upcoming patch about native RabbitMQ H/A support in nova. I'll post the patch for codereview today. On Mon, Jul 23, 2012 at 12:46 PM, Eugene Kirpichov ekirpic...@gmail.com wrote: Yup, that's basically the same thing that Jay suggested :) Obvious in retrospect... On Mon, Jul 23, 2012 at 12:42 PM, Oleg Gelbukh ogelb...@mirantis.com wrote:
Re: [Openstack] [OpenStack Foundation] Individual Nominations for Foundation Board of Directors
On 07/26/2012 11:08 AM, Dan Wendlandt wrote: I'd also advocate for there being some place nominees/candidates can write a statement expressing why they want to be on the board of directors... otherwise such a vote may just up as a personality contest or a company v. company vote, neither of which is good for the community. +1 -- Robbie Williamson rob...@ubuntu.com robbiew[irc.freenode.net] Don't make me angry...you wouldn't like me when I'm angry. -Bruce Banner ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [OpenStack Foundation] Individual Nominations for Foundation Board of Directors
Hi Rick, On Thu, 2012-07-26 at 10:37 -0500, Rick Clark wrote: Who is the election official, running this election. Nomination should be an open process, similar to the core dev process. It is currently closed and subject to manipulation. I would also suggest that if you are a candidate, you must not be managing the process. All reasonable points, especially for future elections. However, I think Jonathan deserves a break on this - trying to quickly bootstrap something means you can't get everything perfect. I'd prefer to see rapid progress rather than a perfect process for the bootstrap election. Assuming we can all trust that everyone is acting in good faith ... Cheers, Mark. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [OpenStack Foundation] Individual Nominations for Foundation Board of Directors
On 07/26/2012 11:49 AM, Robbie Williamson wrote: Also, it might make sense to confirm with nominees *before* placing them on the list...so at least they know what they are getting into ;). Nevermind...I was just too impatient. :/ -- Robbie Williamson rob...@ubuntu.com robbiew[irc.freenode.net] Don't make me angry...you wouldn't like me when I'm angry. -Bruce Banner ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [OpenStack Foundation] Individual Nominations for Foundation Board of Directors
On 07/26/2012 08:37 AM, Rick Clark wrote: Who is the election official, running this election. Nomination should be an open process, similar to the core dev process. Speaking of that process, it's broken and needs to be fixed ASAP, since we'll have the PTL elections soon. The current nomination process, especially, is broken: it requires way too much manual processing and more than manipulation, it allows mistakes (like in the past election, where I forgot to include one candidate to the list). This is how we ran it last time: http://wiki.openstack.org/Governance/ElectionsSpring2012 Want to help fix it? Let's define a better process and build the tools to automate it all. /stef ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [OpenStack Foundation] Individual Nominations for Foundation Board of Directors
On Thu, Jul 26, 2012 at 1:15 PM, Stefano Maffulli stef...@openstack.org wrote: On 07/26/2012 08:37 AM, Rick Clark wrote: Who is the election official, running this election. Nomination should be an open process, similar to the core dev process. Speaking of that process, it's broken and needs to be fixed ASAP, since we'll have the PTL elections soon. The current nomination process, especially, is broken: it requires way too much manual processing and more than manipulation, it allows mistakes (like in the past election, where I forgot to include one candidate to the list). This is how we ran it last time: http://wiki.openstack.org/Governance/ElectionsSpring2012 Want to help fix it? Yes! Let's define a better process and build the tools to automate it all. David Mertz of the Python Software Foundation is currently working on fixing lots of the same problems that we -- in the OpenStack community -- are now facing or will be soon. Count me in :-) I'll start pulling information and resources together for this, and when I've landed from my travels, I'll send an update to this thread with links. d ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Quota attributes Metadata Items, Injected Files and Injected File Content Bytes
Hi, When editing quotas of a project in Horizon, the attributes Metadata Items, Injected Files and Injected File Content Bytes seems obviously to relate to the metadata service, but is their usage documented anywhere. I couldn't find much out there. Which of those attributes are relevant to OpenStack and which are legacy, and what are the pro's and con's of editing them when setting up projects? Many thanks in advance for any information and apologies if I have missed some obvious docs. Boris ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [nova] [cinder] Nova-volume vs. Cinder in Folsom
On Mon, Jul 16, 2012 at 9:08 AM, Thierry Carrez thie...@openstack.org wrote: Using the user committee setup, you don't really need to take authority away from the PTL. You increase the influence of the users on technical decisions. You just provide a clear and official mechanism to represent the interests of the users as a whole. Once you have that, if the PTL or technical committee decides to ignore it, it's a rather strong decision that better has to be well justified. Its better than having some arbitrary percentage of users in a single committee and then have most decisions won by the most largely represented party. If the user committee is an active and respected group, it provides nice checks and balances against developers living in developer bubbles. Most issues we have right now with deployer-friendliness are linked to the fact that the users don't have a clear or official voice. The trick is, of course, to manage to set up such a committee in a way that represents all the users and deployers. It will be all the more influential if it is seen as representing all the users, rather than just a loosely-tied pre-determined subset of large users. I generally agree with your thoughts around a user committee. For my benefit, I'd love to get a feel for what we're doing to make development user friendly? In my fantasies for the Grizzly release it would start something like: A. Grizzly Summit B. From the summit the Tech Committee PTL have community consensus on the overarching goal for the release and the projects' goals. Articulated online in user friendly manner. C. Webinar / OpenStack User Groups get a presentation on the release goals, and channels for input and participation. D. About the half way point in release schedule, development adjusts the online communication to reflect reality, presents an update, and again channels for input and participation. How do things work today? I haven't found much in the wiki. Thanks, -- @lloyddewolf http://www.pistoncloud.com/ ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [OpenStack Foundation] Individual Nominations for Foundation Board of Directors
On Thu, Jul 26, 2012 at 12:08 PM, Jonathan Bryce jbr...@rackspace.com wrote: We have been trying to be open, posting nominations to the page as they come in, sending out emails and tweets to encourage people to nominate, and notifying nominees as they are nominated. If anyone wants to make their nomination public in addition to notifying the secretary they're welcome to do so, ... Thank you everyone for the continued fantastic job! Who receives email sent to secret...@openstack.org? Sorry, I missed who is the acting secretary. It might be nice to include the person's name on the page: http://www.openstack.org/community/openstack-foundation-board-2012-election-candidates/ . Is there currently a draft application being used? Until the actual application is developed: 4.2 (d) (iii) the nominee must have completed an application for a director with information determined by the Board of Directors Although not currently required by the bylaws after the board is established I'd love to revisit public nominations, as typically political nominations are public record. Unnecessary, but consistency is elegance. I'd be very interested to hear arguments against. Thanks, Lloyd -- @lloyddewolf http://www.pistoncloud.com/ ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] [keystone] Multi-tenants per user, authentication tokens and global roles
I'm working on upgrading to essex, which means I need to start using keystone. My use case seems to not fit keystone very well, though... In my environment, one user can be a member of many projects (some users are in up to 20-30 projects). Management of projects is done nearly completely though the web interface, and users may work on resources in multiple projects at the same time. Our web interface can show all or a subset of user's project's resources in the same view. In Nova, using the EC2 API, I could query all resources for a user on their behalf using an admin user, or I could use their access/secret key and change the tenant for requesting each project. From what I can tell in Keystone, when a user authenticates, they get a token directly linked with a tenant. If I want to do API calls on a user's behalf in a tenant, I must authenticate them for that tenant. It seems there's no way for me to make requests on a user's behalf for multiple projects without authenticating them for every single tenant. Is this the case? Is there any way for me to handle this? I'd really like to avoid authenticating a user 30 times on login, then needing to store all 30 of their tokens. I have another issue as well. My environment is meant to be integrated and more of a private-style cloud. We have a group of administrators that should be able to manage all instances, networks, etc. In Nova's auth there were global groups. In Keystone there are no global groups. Will this ever be added into keystone? It's really annoying to need to constantly add/remove ourselves from projects to manage them. - Ryan ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] RFC: Removing iscsitarget from nova/cinder.
Hi, I was wondering if there is an aversion to remove ietadm support from folsom. I have checked the iscsitarget sourceforge site and there hasn't been a new version of iscsitarget in about 2 years. The kernel module doesn't compile on recent versions of Ubuntu. Since tgt is our preferred iscsi target user-space tool as well. Looking at Fedora/Red Hat documentation, tgt seems to be the default. Im assuming it is the same for other distributions as well. As well as the above, tgt seems to be the default for devstack and tgt is also the default iscsi target tool for folsom. Comments, questions, hate mail? Regards chuck ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [keystone] Multi-tenants per user, authentication tokens and global roles
On 07/26/2012 08:30 PM, Ryan Lane wrote: I'm working on upgrading to essex, which means I need to start using keystone. My use case seems to not fit keystone very well, though... In my environment, one user can be a member of many projects (some users are in up to 20-30 projects). Management of projects is done nearly completely though the web interface, and users may work on resources in multiple projects at the same time. Our web interface can show all or a subset of user's project's resources in the same view. In Nova, using the EC2 API, I could query all resources for a user on their behalf using an admin user, or I could use their access/secret key and change the tenant for requesting each project. From what I can tell in Keystone, when a user authenticates, they get a token directly linked with a tenant. If I want to do API calls on a user's behalf in a tenant, I must authenticate them for that tenant. It seems there's no way for me to make requests on a user's behalf for multiple projects without authenticating them for every single tenant. Is this the case? Is there any way for me to handle this? I'd really like to avoid authenticating a user 30 times on login, then needing to store all 30 of their tokens. Not in Essex. When we discussed the Domains blueprint, one issue that I brought up was nested groups/projects. That would solve your problem. It is not currently being developed. I have another issue as well. My environment is meant to be integrated and more of a private-style cloud. We have a group of administrators that should be able to manage all instances, networks, etc. In Nova's auth there were global groups. In Keystone there are no global groups. Will this ever be added into keystone? It's really annoying to need to constantly add/remove ourselves from projects to manage them. Again, this is really a group nesting problem. I am not sure if the domain blueprint would help you out here: https://review.openstack.org/#/c/8114/ https://blueprints.launchpad.net/keystone/+spec/keystone-domains http://etherpad.openstack.org/keystone-domains - Ryan ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [keystone] Multi-tenants per user, authentication tokens and global roles
Not in Essex. When we discussed the Domains blueprint, one issue that I brought up was nested groups/projects. That would solve your problem. It is not currently being developed. Ok. I can deal with handling tens of thousands of tokens, but I need some way to ensure a user doesn't need to continuously authenticate when changing between projects. I'm totally fine saving a long-lived token that can be used for authentication, then re-authenticating with that token to receive other project tokens. This way the web interface can use the long-lived token on the user's behalf for authentication between projects. I'm using the LDAP backend. I'm assuming I'm going to have to modify the authenticate method to handle this. Would doing this be enough to make this work, or will I need to patch more extensively for this solution? I definitely want to solve this legitimately for folsom or grizzly as this completely breaks my use case (and likely the use case of most private cloud users). Again, this is really a group nesting problem. I am not sure if the domain blueprint would help you out here: https://review.openstack.org/#/c/8114/ https://blueprints.launchpad.net/keystone/+spec/keystone-domains http://etherpad.openstack.org/keystone-domains I can likely live with adding/removing admins from groups. I'd prefer not to, but we require this to some extent right now anyway. I'd definitely like to resolve this by grizzly at least, though. - Ryan ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
