Re: [Openstack] Swift objects permissions
currently Swift R/W ACL is for container level. make sure that you set ACL on the container test. if you also want to authorize listing that container, add ACL like .r:*,.rlistings. see detailed doc here: http://docs.openstack.org/developer/swift/misc.html#id5 -Edward Zhang CHABANI Mohamed El Hadi chabani.mohamed. To h...@gmail.com openstack@lists.launchpad.net Sent by: openstack@lists.launchpad.net, Openstackcc openstack-bounce s Subject +zhuadl=cn.ibm.co [Openstack] Swift objects m@lists.launchpad permissions .net 2013-07-01 下午 05:39 Hi people, I'm trying to show a picture in my browser from a swift cluser (SAIO), when i do 'http://myadressip:8080/v1/AUTH_test/test/myfiles/test.jpeg' i get This server could not verify that you are authorized to access the document you requested. I set also the Read ACL = .r:* Should i add additional configurations or permissions ? Thank's___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp inline: graycol.gifinline: pic27919.gifinline: ecblank.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Swift] Storage Server Redirection
2) The basic idea is that an object server (via middleware or otherwise) will be given the ability to respond to a request to indicate ‘not me but I know who should handle this’. I’m thinking this makes more sense as a 5xx response with additional information (partition, nodes) about the route included in the response body (as opposed to a 3xx code) My concern is that 5xx response is a kind of error that occurs on server side. The server can't handle the client request due to internal error (500), not implemented (501), bad gateway(502), service unavailable(503), gateway timeout(504) or http version not supported(505). It doesn't make much sense to use it in your context of 'not me but I know who should handle this’. I'm also curious about how could this happen if the object URL is the unique identity. How does the server exactly know what client request is another object? Based on what kind of information? Edward Zhang(张华) Advisory Software Engineer Software Standards Open Source Software Emerging Technology Institute(ETI) IBM China Software Development Lab e-mail: zhu...@cn.ibm.com Luse, Paul E paul.e.luse@inte l.com To Sent by: openstack@lists.launchpad.net Openstack openstack@lists.launchpad.net, openstack-bounce cc s +zhuadl=cn.ibm.co Subject m@lists.launchpad [Openstack] [Swift] Storage Server .net Redirection 2013-06-01 上午 07:53 I’m looking at tacking this item: https://blueprints.launchpad.net/swift/+spec/support-storage-server-redirects and wanted to get some feedback on the following observations/thoughts: 1) This is a capability that would be checked in independent of other blueprints that might use it (2 are mentioned in the link above) and unit test code would be the only way to initially exercise it; it essentially enables other activities at this point 2) The basic idea is that an object server (via middleware or otherwise) will be given the ability to respond to a request to indicate ‘not me but I know who should handle this’. I’m thinking this makes more sense as a 5xx response with additional information (partition, nodes) about the route included in the response body (as opposed to a 3xx code) 3) The proxy server will be modified to process the response accordingly but using the partition, nodes info from the response as opposed to object_ring.get_nodes() to determine which nodes to use 4) Protection will be required to avoid endless redirection loops 5) This applies only to GET operations Appreciate any thoughts/feedback., In addition to the two usages of this capability referenced in the blueprint I think there’s applicable to another Tiering blueprint which interests me as well. Thanks Paul ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp inline: ecblank.gifinline: graycol.gifinline: pic32571.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Swift] Storage Server Redirection
Paul, I might misunderstand your blueprint here. it make sense to me if redirection happens internally b/w proxy server and object server. I have thought this redirection happens b/w client and proxy server, and a new object URL will be sent to client. Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Advisory Software Engineer软件园28号楼 环宇大厦3层 邮编：100193 Software Standards Open Source Address: 3F Ring, Building 28 Software Zhongguancun Software Park, 8 Emerging Technology Institute(ETI)Dongbeiwang West Road, Haidian IBM China Software Development LabDistrict, Beijing, P.R.C.100193 e-mail: zhu...@cn.ibm.com Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 Luse, Paul E paul.e.luse@inte l.com To Hua ZZ Zhang/China/IBM@IBMCN, 06/03/2013 08:14 cc PMopenstack@lists.launchpad.net openstack@lists.launchpad.net, Openstackopenstack-bounces +zhuadl=cn.ibm.com@lists.launchpad. net Subject RE: [Openstack] [Swift] Storage Server Redirection Hi Edward, Can you explain a little more about you mean (example maybe) with “I'm also curious about how could this happen if the object URL is the unique identity. How does the server exactly know what client request is another object? Based on what kind of information?” Thanks Paul From: Hua ZZ Zhang [mailto:zhu...@cn.ibm.com] Sent: Monday, June 03, 2013 2:50 AM To: Luse, Paul E Cc: openstack@lists.launchpad.net; Openstack Subject: Re: [Openstack] [Swift] Storage Server Redirection 2) The basic idea is that an object server (via middleware or otherwise) will be given the ability to respond to a request to indicate ‘not me but I know who should handle this’. I’m thinking this makes more sense as a 5xx response with additional information (partition, nodes) about the route included in the response body (as opposed to a 3xx code) My concern is that 5xx response is a kind of error that occurs on server side. The server can't handle the client request due to internal error (500), not implemented (501), bad gateway(502), service unavailable(503), gateway timeout(504) or http version not supported(505). It doesn't make much sense to use it in your context of 'not me but I know who should handle this’. I'm also curious about how could this happen if the object URL is the unique identity. How does the server exactly know what client request is another object? Based on what kind of information? Edward Zhang(张华) Advisory Software Engineer Software Standards Open Source Software Emerging Technology Institute (ETI) IBM China Software Development Lab e-mail: zhu...@cn.ibm.com
Re: [Openstack] [Swift] Storage Server Redirection
Paul, The blueprint of object-variation is able to allow an object to have variant versions which are derived from the original master object. The access to the master object can be smartly adapted or redirected to matched version for different clients (web browser, mobile app, video player). One possible solution is that you can add system metadata for master object to refer to those variant versions. When proxy server get client information from HTTP headers, it will relay it to object server so that it can determine which version is a better choice based on system metadata. If current version is not good choice, reply a redirect response to tell proxy server the right one. Another solution can be based on object versioning feature to pick up the right version for client based on its request information. Thanks! -Edward Zhang Luse, Paul E paul.e.luse@inte l.com To Sent by: Peter Portante Openstack peter.a.porta...@gmail.com, openstack-bounce cc s openstack@lists.launchpad.net +zhuadl=cn.ibm.co openstack@lists.launchpad.net m@lists.launchpad Subject .net Re: [Openstack] [Swift] Storage Server Redirection 06/03/2013 08:41 PM Hi Peter, I'd ask that Edward may want to chime in on object variation as I may not understand that one correctly - again I'm proposing to just implement the redirect response blueprint and reference object variation as a potential user simply because John mentioned it in his original write-up of the redirect response blueprint. Edward? Wrt your second question, there are copies of the rings on object servers as well and they are used for lookup in various scenarios, replication for one. As an example take a small 6 node cluster where all servers are running all services, if an admin adds/deletes a device from the ring they do so on one of the nodes and then copes the .gz file to all the others. During the window when the first node detects the new ring file and .gz files are copied to all the other nodes and detected/brought into memory, any responses fielded by the proxy service on the other nodes will have older ring info than the first node updated. Another case could be a larger cluster where there's a proxy tier and a capacity tier (not all services running everywhere). The admin could update the ring on any node and copy the ring files on the nodes in any order - if any capacity node gets an update before any proxy node you can run into the same scenario. The ring versions blueprint was John's s! o he may have additions/corrections Thanks Paul -Original Message- From: Peter Portante [mailto:peter.a.porta...@gmail.com] Sent: Monday, June 03, 2013 3:50 AM To: Luse, Paul E Cc: openstack@lists.launchpad.net Subject: Re: [Openstack] [Swift] Storage Server Redirection Hi Paul, Can you explain more about the two use cases referenced? Object Variation seems like a nice idea, but can you clarify how the mechanism would work to get at the variations? Any examples? From the current descriptions, it seems like the LFS Patch could help here without adding anything to the object server. Regarding the ring updates, given that rings are used by the proxy servers, and as far as I can tell, the object servers don't know about the rings, how would object servers have more up-to-date knowledge to perform the redirect? Thanks, -peter On Fri, May 31, 2013 at 7:53 PM, Luse, Paul E paul.e.l...@intel.com wrote: I'm looking at tacking this item: https://blueprints.launchpad.net/swift/+spec/support-storage-server-re directs and wanted to get some feedback on the following observations/thoughts: 1) This is a capability that would be checked in independent of other blueprints that might use it (2 are mentioned in the link above) and unit test code would be the only way to initially exercise it; it essentially enables other activities at this point 2) The basic idea is that an object server (via middleware or otherwise) will be given the ability to respond to a request to
Re: [Openstack] [openstack][quantum] How to understand 'ovs-vsctl show'?
Here's a blog FYI.
http://packetpushers.net/openstack-quantum-network-implementation-in-linux/
Best Regards,
Edward Zhang(张华)
Advisory Software Engineer
Software Standards Open Source
Software
Emerging Technology Institute(ETI)
IBM China Software Development Lab
Qinglong.Meng
mengql112233@gma
il.comTo
Sent by: openstack@lists.launchpad.net,
Openstack china-openstack-user-group@googlegr
openstack-bounce oups.com,
s cc
+zhuadl=cn.ibm.co
m@lists.launchpad Subject
.net [Openstack] [openstack][quantum]
How to understand 'ovs-vsctl show'?
05/21/2013 12:04
PM
Hi all,
Here is output of cmd 'ovs-vsctl show'. But how to explain it. Can
anybody help me?
root@compute01:~# ovs-vsctl show
e98109dd-eb2d-43b0-82f8-e2c733db49d7
Bridge qbr876fed87-40
Port tap876fed87-40
Interface tap876fed87-40
Port qvb876fed87-40
Interface qvb876fed87-40
Port qbr876fed87-40
Interface qbr876fed87-40
type: internal
Bridge br-int
Port br-int
Interface br-int
type: internal
Port qvo876fed87-40
tag: 1
Interface qvo876fed87-40
Port patch-tun
Interface patch-tun
type: patch
options: {peer=patch-int}
Port qvoeeba05d1-fb
tag: 1
Interface qvoeeba05d1-fb
Port tapa27f848c-27
tag: 1
Interface tapa27f848c-27
Port tapb55a3af4-29
tag: 1
Interface tapb55a3af4-29
Bridge br-tun
Port gre-2
Interface gre-2
type: gre
options: {in_key=flow, out_key=flow,
remote_ip=10.10.10.73}
Port patch-int
Interface patch-int
type: patch
options: {peer=patch-tun}
Port gre-1
Interface gre-1
type: gre
options: {in_key=flow, out_key=flow,
remote_ip=10.10.10.72}
Port br-tun
Interface br-tun
type: internal
Bridge virbr0
Port virbr0
Interface virbr0
type: internal
Bridge br-ex
Port eth3
Interface eth3
Port tap15ee53c7-1d
Interface tap15ee53c7-1d
Port br-ex
Interface br-ex
type: internal
Bridge qbreeba05d1-fb
Port tapeeba05d1-fb
Interface tapeeba05d1-fb
Port qvbeeba05d1-fb
Interface qvbeeba05d1-fb
Port qbreeba05d1-fb
Interface qbreeba05d1-fb
type: internal
ovs_version: 1.4.0+build0
Best Regards,
Tks
--
Lawrency Meng
mail: mengql112...@gmail.com
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help :
Re: [Openstack] I release naming (calling APAC community)
+1！ the Chinese character is '伊犁' and can be easily spelled, remembered and pronounced in English. This city name 'ili' is also searchable on google map. It is beautiful city located in the westernmost province of China. There lives people from different ethnic such as Han, Kazak, Uyghur, Hui, Mongol, Xibe. -Zhang Hua(Edward) Wang, Shane shane.wang@intel .com To Sent by: Thierry Carrez Openstack thie...@openstack.org, openstack-bounce openstack@lists.launchpad.net s openstack@lists.launchpad.net, +zhuadl=cn.ibm.co cc m@lists.launchpad .net Subject Re: [Openstack] I release naming (calling APAC community) 2013-05-03 上午 09:22 What about Ili, which is a prefecture name in Xinjiang in China: http://en.wikipedia.org/wiki/Ili_Kazakh_Autonomous_Prefecture -- Shane -Original Message- From: Openstack [mailto:openstack-bounces+shane.wang=intel@lists.launchpad.net] On Behalf Of Thierry Carrez Sent: Thursday, May 02, 2013 10:02 PM To: openstack@lists.launchpad.net Subject: [Openstack] I release naming (calling APAC community) Hi everyone, As you may know, we name our release cycles after cities or counties in the state/country where the corresponding design summit is held. That creates an interesting problem for the I release, since there is no word starting with i in classic transliteration of Chinese words... so not so many candidates. We'll have to get a bit creative and be willing to bend the rules a little. Feel free to suggest names on this thread, or on the wiki page at: https://wiki.openstack.org/wiki/Release_Naming I am especially interested by the input of our APAC community in general and our Chinese members in particular, which are probably the best to let us know which transliteration crime could be acceptable or which name they would particularly like. Cheers, -- Thierry Carrez (ttx) Release Manager, OpenStack ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp inline: graycol.gifinline: pic01131.gifinline: ecblank.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] [swift] RAID Performance Issue
Hi, I have read the admin document of Swift and find there's recommendation of not using RAID 5 or 6 because swift performance degrades quickly with it. Can anyone explain why this could happen? If the RAID is done by hardware RAID controller, will the performance issue still exist? Anyone can share such kind of experience of using RAID with Swift? Appreciated for any suggestion from you. -Zhang Hua___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] [swift] how to configure NWR policy
Hi all, I have a question about swift configuration for NWR policy. According to some documents of Swift, NWR is configurable. The general configuration is: N=3, W=2, R=1 or 2. Swift can provide both models of consistency: strong and eventual. But I can't find where to configure this option. Any suggestion is appreciated! Best Regards, Edward Zhang(张华) IBM China Software Development Lab inline: ecblank.gifinline: 1F033383.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [swift] how to configure NWR policy
Alex, that make sense to me. thanks a lot. :-) Best Regards, Edward Zhang(张华) Alex Yang alex890714@gmail .com To Hua ZZ Zhang/China/IBM@IBMCN, 12/11/2012 11:37 cc AMopenstack@lists.launchpad.net openstack@lists.launchpad.net, Hai HJ Ji/China/IBM@IBMCN Subject Re: [Openstack] [swift] how to configure NWR policy Hi, Zhang, Just add 'X-Newest: Ture' in the HTTP GET request. 2012/12/11 Hua ZZ Zhang zhu...@cn.ibm.com Hi all, I have a question about swift configuration for NWR policy. According to some documents of Swift, NWR is configurable. The general configuration is: N=3, W=2, R=1 or 2. Swift can provide both models of consistency: strong and eventual. But I can't find where to configure this option. Any suggestion is appreciated! Best Regards, Edward Zhang(张华) IBM China Software Development Lab ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -- 杨雨 Email: alex890...@gmail.com GitHub: https://github.com/AlexYangYu Blog:http://alexyang.sinaapp.com Weibo: http://www.weibo.com/alexyangyu inline: ecblank.gifinline: 70384012.gifinline: graycol.gifinline: pic17543.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [swift] how to configure NWR policy
Mike, Thanks for you clarification. I'm interested in how to enable the following combinations. for case 1, can we do it without sending the HTTP head 'X-Newest'? for case 2, how to enable it? N=3, W=2, R=2 (Strong Consistence Mode) N=3, W=3, R=1 (Strict Consistence Mode) Best Regards, Edward Zhang(张华) Michael Barton mike-launchpad@w eirdlooking.com To Sent by: Hua ZZ Zhang/China/IBM@IBMCN, palr...@gmail.com cc Alex Yang alex890...@gmail.com, openstack@lists.launchpad.net 12/11/2012 02:31 openstack@lists.launchpad.net, PMHai HJ Ji/China/IBM@IBMCN Subject Re: [Openstack] [swift] how to configure NWR policy Does any of our documentation say NRW are directly configurable? It's not really quite that simple. N is a property of the cluster, chosen when you build the ring. W is always a simple majority of N. R is generally 1 (eventually consisten reads), but the client can request it be bumped to N ( highly consistent reads) using X-Newest. But then there's stuff like we provide RYW consistency on default reads, which can't really be modeled by NRW notation. - Mike On Mon, Dec 10, 2012 at 9:47 PM, Hua ZZ Zhang zhu...@cn.ibm.com wrote: Alex, that make sense to me. thanks a lot. :-) Best Regards, Edward Zhang(张华) Alex Yang ---12/11/2012 11:37:24 AM---Alex Yang alex890...@gmail.com Alex Yang alex890714@gmail. com To 12/11/2012 11:37 AM Hua ZZ Zhang/China/IBM@IBMCN, cc openstack@lists.launchpad.net openstack@lists.launchpad.net, Hai HJ Ji/China/IBM@IBMCN Subject
Re: [Openstack] [Swift] retrieve tenant-level, account-level and container-level usage information
At least, you can get byes-used and count statistics information by using
GET operation on account/container/object.
here's an example for account level:
Request: GET
http://localhost:8080/v1.0/AUTH_3cf0193e7e5d45e0945d0b377528faed/?format=json
Response:
Headers:
X-Account-Bytes-Used: 291041353
X-Account-Container-Count: 4
X-Account-Object-Count: 574
...
Body:
[{count: 0, bytes: 0, name: audio}, {count: 1, bytes:
129461, name: publicContainer}, {count: 572, bytes: 290757640,
name: rmobjects}, {count: 1, bytes: 154252, name: video}]
Or you can use swift CLI command to get these information:
#swift stat
Account: AUTH_3cf0193e7e5d45e0945d0b377528faed
Containers: 4
Objects: 574
Bytes: 291041353
Accept-Ranges: bytes
X-Timestamp: 1352438477.08951
X-Trans-Id: tx8d25d73cdb7445deb83b9128bfcf8d32
Content-Type: text/plain; charset=utf-8
#swift stat rmobjects
Account: AUTH_3cf0193e7e5d45e0945d0b377528faed
Container: rmobjects
Objects: 572
Bytes: 290757640
Read ACL:
Write ACL:
Sync To:
Sync Key:
Accept-Ranges: bytes
X-Timestamp: 1352686747.07211
X-Trans-Id: tx0500ad5584e54be4917f1b187cca2485
Content-Type: text/plain; charset=utf-8
-Edward Zhang
ning2008wisc
ning2008wisc@gma
il.comTo
Sent by: openstack@lists.launchpad.net,
openstack-bounces cc
+zhuadl=cn.ibm.co
m@lists.launchpad Subject
.net [Openstack] [Swift] retrieve
tenant-level, account-level and
container-level usage information
2012-11-13 上午
10:35
Hello All,
Is there any Swift (GUI or command line) tool that can retrieve the
tenant-level, account-level and container-level usage information
(e.g. how large space has been used under an account, how large
space has been used under a tenant) and also works with keystone?
Thanks,
Ning___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
inline: graycol.gifinline: pic14735.gifinline: ecblank.gif___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Swift] Public Container's file listing
Is this the correct general format? user_username_grpname = password The tempauth format is user_accountname_username = password Is there any way where i can list the containers in a account? I don't see the possibility of doing this without code change. Does .rlistings do the same job as staticweb? IMO, .rlistings directive is implemented as ACL. Staticweb middleware are using customerized metadata web-listings: true to enable listing objects in static web page. But you can get listings in staticweb without setting directive inside of the ACL. If you want to support API level of public listing container, you should use .rlisting directive. Best Regards, Edward Zhang(张华) Sujay M sujay.m17@gmail. com To Hua ZZ Zhang/China/IBM@IBMCN 2012-11-19 15:32 cc openstack@lists.launchpad.net openstack@lists.launchpad.net, openstack-bounces +zhuadl=cn.ibm.com@lists.launchpad. net, openstack-...@lists.openstack.org, openstack-operators@lists.openstack .org Subject Re: [Openstack] [Swift] Public Container's file listing if you are using keystone as Swift authentication, you can create user in an account(project) through horizion or using command keystone user-create ... I am using tempauth where i'm specifying all the account details as below [filter:tempauth] use = egg:swift#tempauth user_admin_admin = admin .admin .reseller_admin user_test_tester = testing .admin user_test2_tester2 = testing2 .admin user_test_tester3 = testing3 Is this the correct general format? user_username_grpname = password For object public write, it seems that the referer is not allowed in ACL: swift post -w '.r:*' publicContainer Don't forget to add directive .rlistings to allow listing the whole public container: swift post -r '.r:*,.rlistings' publicContainer thanks. (Does .rlistings do the same job as staticweb?) On 19 November 2012 11:59, Hua ZZ Zhang zhu...@cn.ibm.com wrote: if you are using keystone as Swift authentication, you can create user in an account(project) through horizion or using command keystone user-create ... For object public write, it seems that the referer is not allowed in ACL: swift post -w '.r:*' publicContainer Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 Advisory Software Engineer中关村软件园28号楼 环宇大厦3层 Software Standards Open 邮编：100193 Source Software Address: 3F Ring, Building 28 Emerging Technology Institute Zhongguancun Software Park, 8 (ETI) Dongbeiwang West Road, Haidian IBM China Software DevelopmentDistrict, Beijing, P.R.C.100193 Lab
Re: [Openstack] [Swift] Public Container's file listing
You can implement access control for objects either for users or accounts using XContainer- Read: accountname and X-Container-Write: accountname:username, which allows any user from the accountname account to read but only allows the username user from the accountname account to write. You can also grant public access to objects stored in OpenStack Object Storage but also limit public access using the Referer header to prevent site-based content theft such as hot-linking (for example, linking to an image filefrom off-site and therefore using other's bandwidth). The public container settings are used as the default authorization over access control lists. For example, using X-Container-Read:referer:any allows anyone to read from the container regardless of other authorization settings. Best Regards, Edward Zhang(张华) Sujay M sujay.m17@gmail. com To Sent by: openstack-operators@lists.openstack openstack-bounces .org, +zhuadl=cn.ibm.co openstack@lists.launchpad.net, m@lists.launchpad openstack-...@lists.openstack.org .net cc Subject 2012-11-19 11:59 [Openstack] [Swift] Public Container's file listing Hi all, Currently it is showing Unauthorized if i give only public container name for listing of files in the public Container 192.168.56.20:8080/v1/AUTH_test/publicContainer/ 192.168.56.20:8080/v1/AUTH_test/publicContainer Unauthorized Is there any way i can list the files publicly? Thanks in advance -- Best Regards, Sujay M Final year B.Tech Computer Engineering NITK Surathkal contact: +918971897571 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp inline: ecblank.gifinline: 32390508.gifinline: graycol.gifinline: pic23265.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Swift] Public Container's file listing
if you are using keystone as Swift authentication, you can create user in an account(project) through horizion or using command keystone user-create ... For object public write, it seems that the referer is not allowed in ACL: swift post -w '.r:*' publicContainer Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Advisory Software Engineer软件园28号楼 环宇大厦3层 邮编：100193 Software Standards Open Source Address: 3F Ring, Building 28 Software Zhongguancun Software Park, 8 Emerging Technology Institute(ETI)Dongbeiwang West Road, Haidian IBM China Software Development LabDistrict, Beijing, P.R.C.100193 e-mail: zhu...@cn.ibm.com Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 Sujay M sujay.m17@gmail. com To Hua ZZ Zhang/China/IBM@IBMCN 2012-11-19 13:43 cc openstack@lists.launchpad.net, openstack-bounces +zhuadl=cn.ibm.com@lists.launchpad. net, openstack-...@lists.openstack.org, openstack-operators@lists.openstack .org Subject Re: [Openstack] [Swift] Public Container's file listing Thanks Edward Zhang, You can implement access control for objects either for users or accounts using XContainer- Read: accountname and X-Container-Write: accountname:username, which allows any user from the accountname account to read but only allows the username user from the accountname account to write. How do i create users in a account? Currently i have only admin:admin account with password admin.(one user per account) You can also grant public access to objects stored in OpenStack Object Storage but also limit public access using the Referer header to prevent site-based content theft such as hot-linking (for example, linking to an image filefrom off-site and therefore using other's bandwidth). The public container settings are used as the default authorization over access control lists. For example, using X-Container-Read:referer:any allows anyone to read from the container regardless of other authorization settings. Can i give public access that allows anyone to store/write the objects into a container. I have used referer for making container as public '.r:*'. Is there anything like this for write? On 19 November 2012 10:36, Hua ZZ Zhang zhu...@cn.ibm.com wrote: You can implement access control for objects either for users or accounts using XContainer- Read: accountname and X-Container-Write: accountname:username, which allows any user from the accountname account to read but only allows the username user from the accountname account to write. You can also grant public access to objects stored in OpenStack Object Storage but also limit public access using the Referer header to prevent site-based content theft such as hot-linking (for example, linking to an image filefrom off
Re: [Openstack] [Swift] Public Container's file listing
Don't forget to add directive .rlistings to allow listing the whole public container: swift post -r '.r:*,.rlistings' publicContainer Best Regards, Edward Zhang(张华) Sujay M sujay.m17@gmail. com To Hua ZZ Zhang/China/IBM@IBMCN 2012-11-19 13:43 cc openstack@lists.launchpad.net, openstack-bounces +zhuadl=cn.ibm.com@lists.launchpad. net, openstack-...@lists.openstack.org, openstack-operators@lists.openstack .org Subject Re: [Openstack] [Swift] Public Container's file listing Thanks Edward Zhang, You can implement access control for objects either for users or accounts using XContainer- Read: accountname and X-Container-Write: accountname:username, which allows any user from the accountname account to read but only allows the username user from the accountname account to write. How do i create users in a account? Currently i have only admin:admin account with password admin.(one user per account) You can also grant public access to objects stored in OpenStack Object Storage but also limit public access using the Referer header to prevent site-based content theft such as hot-linking (for example, linking to an image filefrom off-site and therefore using other's bandwidth). The public container settings are used as the default authorization over access control lists. For example, using X-Container-Read:referer:any allows anyone to read from the container regardless of other authorization settings. Can i give public access that allows anyone to store/write the objects into a container. I have used referer for making container as public '.r:*'. Is there anything like this for write? On 19 November 2012 10:36, Hua ZZ Zhang zhu...@cn.ibm.com wrote: You can implement access control for objects either for users or accounts using XContainer- Read: accountname and X-Container-Write: accountname:username, which allows any user from the accountname account to read but only allows the username user from the accountname account to write. You can also grant public access to objects stored in OpenStack Object Storage but also limit public access using the Referer header to prevent site-based content theft such as hot-linking (for example, linking to an image filefrom off-site and therefore using other's bandwidth). The public container settings are used as the default authorization over access control lists. For example, using X-Container-Read:referer:any allows anyone to read from the container regardless of other authorization settings. Best Regards, Inactive hide details for Sujay M ---2012-11-19 11:59:55---Hi all,Sujay M ---2012-11-19 11:59:55---Hi all, Sujay M
Re: [Openstack] [Netstack] [openstack-dev] [Quantum] Multi-host implementation
hi, I have a question about the ip address consumed by the dhcp services. is it necessary to assign an individual ip for each dhcp daemon? can we reserve only one ip address for all dhcp deamons subject to one subnet since they won't run on the same host? since the dhcp service only need to communicate with local VM instances and local dhcp agent (don't know if it is true for this assumption), can we find a kind of isolation mechanism to avoid ip conflicts and extra consume of ip addresses to implement this feature? Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Staff Software Engineer 软件园28号楼 环宇大厦3层 邮编：100193 TravelTransportation Standards Address: 3F Ring, Building 28 Emerging Technology Institute(ETI)Zhongguancun Software Park, 8 IBM China Software Development LabDongbeiwang West Road, Haidian e-mail: zhu...@cn.ibm.com District, Beijing, P.R.C.100193 Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 MURAOKA Yusuke yus...@jbking.or g To Sent by: Dan Wendlandt d...@nicira.com openstack-bounces cc +zhuadl=cn.ibm.co OpenStack Development Mailing List m@lists.launchpad openstack-...@lists.openstack.org .net , netst...@lists.launchpad.net, openstack@lists.launchpad.net Subject 2012-08-09 00:19 Re: [Openstack] [Netstack] [openstack-dev] [Quantum] Multi-host implementation Hi, I've updated the bp to correspond with current design spec. https://blueprints.launchpad.net/quantum/+spec/quantum-multihost-dhcp I'd know the case of failure, improper, insane, by that. Anyway, comments, discussions are welcome. Thanks. -- MURAOKA Yusuke Mail: yus...@jbking.org 日付：2012年8月7日火曜日、�r刻：2:47、差出人：Nachi Ueno： Hi Dan Thank you for pointing this. Yusuke updated design spec. https://blueprints.launchpad.net/quantum/+spec/quantum-multihost-dhcp 2012/8/6 Dan Wendlandt d...@nicira.com (mailto:d...@nicira.com): Hi Nachi, I've reviewed the code and added comments. I'd like to see at least a basic spec describing the proposed approach (need only be a couple paragraphs, perhaps with a diagram) linked to the blueprint so we can have a design discussion around it. Thanks, Dan On Fri, Aug 3, 2012 at 1:03 PM, Nachi Ueno na...@nttmcl.com ( mailto:na...@nttmcl.com) wrote: Hi folks Sorry. I added openstack-...@lists.openstack.org ( mailto:openstack-...@lists.openstack.org) in this discussion. 2012/8/3 Nati Ueno nati.u...@gmail.com (mailto:nati.u...@gmail.com ): Hi folks Gary Thank you for your comment. I wanna discuss your point on the mailing list. Yusuke pushed Multi-host implementation for review. https://review.openstack.org/#/c/10766/2 This patch changes only quantum-dhcp-agent side. Gary's point is we should have host attribute on the port for scheduling. I agree with Gary. In the nova, vm has available_zone for scheduling. So Instead of using host properties. How about use available_zone for port? Format of availability_zone is something like
Re: [Openstack] [Quantum] Network, Subnet and Port names
All networks information of all tenants are stored in one table. If the name is defined unique, it implicates all tenants have to make sure the name of new network will not be conflict with others even they don't know each other. the system has to tell the tenant that the name has been used already by other tenants, please use another name to creat network. This might be a confusing constraint to user. Network Table Defition: ++--+--+-+-+---+ | Field | Type | Null | Key | Default | Extra | ++--+--+-+-+---+ | tenant_id | varchar(255) | YES | | NULL| | | id | varchar(36) | NO | PRI | NULL| | | name | varchar(255) | YES | | NULL| | | status | varchar(16) | YES | | NULL| | | admin_state_up | tinyint(1) | YES | | NULL| | ++--+--+-+-+---+ Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Staff Software Engineer 软件园28号楼 环宇大厦3层 邮编：100193 TravelTransportation Standards Address: 3F Ring, Building 28 Emerging Technology Institute(ETI)Zhongguancun Software Park, 8 IBM China Software Development LabDongbeiwang West Road, Haidian e-mail: zhu...@cn.ibm.com District, Beijing, P.R.C.100193 Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 Dan Wendlandt d...@nicira.com Sent by: To openstack-bounces gkot...@redhat.com +zhuadl=cn.ibm.co cc m@lists.launchpad openstack@lists.launchpad.net .net Subject Re: [Openstack] [Quantum] Network, Subnet and Port names 2012-07-17 13:27 Hi Gary, this is an example of when I wish openstack APIs had a style-guide to try to ensure some consistency across projects. For those new to the conversation, the original topic of discussion is whether names for API objects should be forced to be unique (presumably within a tenant?) or allowed to be duplicated. The general feeling from the meeting was that since UUIDs are unique, the API itself would not enforce name uniqueness. That also led to the point that names should then be optional, since they are really for informational/display purposes only. Personally, I tend to think that description tends to imply a sentence private network for tenant1, rather than a simple name tenant1-net. There's also the fact that other openstack services like nova and glance use the term name with the similar (I believe) model that a name need not be unique. Would be curious to hear what others think. The only thing I'm quite sure about is that there would be value in creating some notion of openstack API consistency best practices to give a more cohesive feel to APIs across different projects in the openstack family. Dan On Mon, Jul 16, 2012 at 10:05 PM, Gary Kotton gkot...@redhat.com wrote: Hi, If the name is intended to be a description then how about the idea of calling the field description instead. This is far more descriptive and does not lend the user to think that this should be unique. Thanks Gary ___ Mailing list: https
[Openstack] quantumv2 command error
Hi, I'm testing the new quantum API according to the wiki: http://wiki.openstack.org/RunningQuantumV2Api But I got some ERROR report when executing the command of quantumv2. Who can help me on this? Thanks openstack@ubuntu:/opt/stack/devstack$ keystone tenant-list +--++-+ |id|name| enabled | +--++-+ | 0afb2c2149a947709079878f0b092f68 |demo| True | | 36bac58501b349a88444136629d8a9ce | service | True | | 4302dd05187d423cac76e7b447f41775 | admin| True | | c0cbc7bef9344b0db0a78d1e392feeb3 | invisible_to_admin | True | +--++-+ openstack@ubuntu:/opt/stack/devstack$ quantumv2 --os-token ADMIN --os-url http://localhost:9696/ create_net --tenant-id 0afb2c2149a947709079878f0b092f68 mynet ERROR: quantumclient.shell initialize_app() takes exactly 1 argument (2 given) -Zhang Hua___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] WADL [was: v3 API draft (update and questions to the community)]
+1 From the point view of software standards, Openstack API is evolving so quickly and will be mostly likely standardized for IaaS. As a standard interface, it need well described and carefully designed for developers. The basis of a common understanding and agreement is important to adopt and evolve in global. There're tremendous Standards are using Description Languages to achieve this goal, especially for data model and APIs. I believe it will make Openstack API more open, interoperable, easier of integration with, smoothly to evolve. Christopher B Ferris chris...@us.ibm. To com Mark Nottingham m...@mnot.net, Sent by: cc openstack-bounces openstack@lists.launchpad.net +zhuadl=cn.ibm.co openstack@lists.launchpad.net m@lists.launchpad Subject .net [Openstack] WADL [was: v3 API draft (update and questionsto the community)] 2012-06-15 下午 09:57 +1 Over-reliance on WADL will only make it more challenging to gracefully evolve the APIs such that implementations can be forwards and/or backwards compatible, especially when exchanging XML based on an XSD that is not carefully crafted with proper extensibility points incorporated throughout the schema design, unless we were to adopt XSD1.1 which has an optional open content model (but which has not yet seen wide adoption, sadly). Cheers, Christopher Ferris IBM Distinguished Engineer, CTO Industry and Cloud Standards Member, IBM Academy of Technology IBM Software Group, Standards Strategy email: chris...@us.ibm.com Twitter: christo4ferris phone: +1 508 234 2986 -openstack-bounces+chrisfer=us.ibm@lists.launchpad.net wrote: - To: Nguyen, Liem Manh liem_m_ngu...@hp.com From: Mark Nottingham Sent by: openstack-bounces+chrisfer=us.ibm@lists.launchpad.net Date: 06/14/2012 08:34PM Cc: openstack@lists.launchpad.net openstack@lists.launchpad.net Subject: [Openstack] WADL [was: v3 API draft (update and questions to the community)] Hi Liem, I'm one of the folks who helped Marc get WADL off of the ground. At the time, my use cases were exactly as you describe: documentation (e.g., https://github.com/mnot/wadl_stylesheets) and testing. Even back then, there was a lot of discussion in the community; e.g., see: http://bitworking.org/news/193/Do-we-need-WADL http://old.nabble.com/Is-it-a-good-idea-to-make-your-WADL-available--tc6087155r1.html http://www.25hoursaday.com/weblog/CommentView.aspx?guid=f88dc5a6-0aff-44ca-ba42-38c651612092 I think many of the concerns that were expressed then are still valid -- some even within these limited uses. In no particular order: * People can and will use WADL to represent a contract to a service (really, an IDL), and bake client code to a snapshot of it in time. While it's true that the client and server need to have agreement about what goes on the wire and what it means, the assumptions around what guarantees WADL makes are not well-thought-out (in a manner similar to WSDL), making clients generated from it very tightly bound to the snapshot of the server they saw at some point in the past. This, in turn, makes evolution / extension of the API a lot harder than it needs to be. * WADL's primitives are XML Schema datatypes. This is a horrible match for dynamic languages like Python. * WADL itself embodies certain patterns of use that tend to show through if you design for it; these may or may not be the best patterns for a particular use case. This is because HTTP and URLs are very flexible things, and it isn't expressive enough to cover all of that space. As a result, you can end up with convoluted APIs that are designed to fit WADL, rather than do the task at hand. From what I've seen, many developers in OpenStack are profoundly uninterested in working with WADL. YMMV, but AFAICT this results in the WADL being done by other folks, and not matching the reality of the implementation; not a good situation for anyone. What we need, I think, is a specification of the API
Re: [Openstack] how to achieve i18n in horizon
Hi Yuan Ke, you can try to restart Apache server to reload the new compiled file by command: sudo service apache2 restart Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Staff Software Engineer 软件园28号楼 环宇大厦3层 邮编：100193 TravelTransportation Standards Address: 3F Ring, Building 28 Emerging Technology Institute(ETI)Zhongguancun Software Park, 8 IBM China Software Development LabDongbeiwang West Road, Haidian e-mail: zhu...@cn.ibm.com District, Beijing, P.R.C.100193 Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 yuanke wei weiyuanke123@gma il.comTo Sent by: openstack mail list openstack-bounces openstack@lists.launchpad.net +zhuadl=cn.ibm.co cc m@lists.launchpad .net Subject [Openstack] how to achieve i18n in horizon 2012-06-13 18:47 hi, the problem is as follows: I changed some translation in horizon/horizon/locale/zh_CN/LC_MESSAGES/django.po, and then compiled with django-admin compilemessages -l zh_CN. the django.mo file was successfully generated. but as I refresh the horizon web page, it seems nothing have changed with the text. can anyone show me what is the problem and how to achieve i18n in horizon. thanks! ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp inline: 1E641546.gifinline: ecblank.gifinline: graycol.gifinline: pic31264.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] change LANGUAGE_CODE config in horizon
Yuan Ke, you can set the language in settings on the top right of the dashboard. It seems that the horizon won't be able to save your language preference into config file. So you have to set it again when you login. Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Staff Software Engineer 软件园28号楼 环宇大厦3层 邮编：100193 TravelTransportation Standards Address: 3F Ring, Building 28 Emerging Technology Institute(ETI)Zhongguancun Software Park, 8 IBM China Software Development LabDongbeiwang West Road, Haidian e-mail: zhu...@cn.ibm.com District, Beijing, P.R.C.100193 Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 yuanke wei weiyuanke123@gma il.comTo Sent by: openstack mail list openstack-bounces openstack@lists.launchpad.net +zhuadl=cn.ibm.co cc m@lists.launchpad .net Subject [Openstack] change LANGUAGE_CODE config in horizon 2012-06-14 10:28 hi, can anyone show me how to change the LANGUAGE_CODE configuration in horizon??? I changed LANGUAGE_CODE configuration to ja in horizon/openstack_dashboard/settings.py, and also restarted apache web server, but in the template file, such as horizon/templates/horizon/auth/_login.html, the value for LANGUAGE_CODE is still en. so in order to configure LANGUAGE_CODE to ja, what steps should I take?? many thanks. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp inline: 1D913884.gifinline: ecblank.gifinline: graycol.gifinline: pic13122.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] change LANGUAGE_CODE config in horizon
I tested it on my machine and works for me. you need to check your language preference in your web browser(I tested it on Firefox). It seems that Django will also make use of the Request Header of languge to decide the client default language settings. It might be a kind of design which doesn't require storing these preference information in cookie or server side. Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Staff Software Engineer 软件园28号楼 环宇大厦3层 邮编：100193 TravelTransportation Standards Address: 3F Ring, Building 28 Emerging Technology Institute(ETI)Zhongguancun Software Park, 8 IBM China Software Development LabDongbeiwang West Road, Haidian e-mail: zhu...@cn.ibm.com District, Beijing, P.R.C.100193 Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 yuanke wei weiyuanke123@gma il.comTo Hua ZZ Zhang/China/IBM@IBMCN 2012-06-14 11:12 cc openstack mail list openstack@lists.launchpad.net, openstack-bounces +zhuadl=cn.ibm.com@lists.launchpad. net Subject Re: [Openstack] change LANGUAGE_CODE config in horizon thanks for reply. Yuan Ke, you can set the language in settings on the top right of the dashboard. It seems that the horizon won't be able to save your language preference into config file. So you have to set it again when you login. I also noticed that. so what I want to do is to change the default LANGUAGE_CODE in horizon, but just modify settings.py seems not working - 韦远科 wei yuanke(wei) gtalk: weiyuanke...@gmail.com msn: weiyuanke...@hotmail.com On Thu, Jun 14, 2012 at 10:41 AM, Hua ZZ Zhang zhu...@cn.ibm.com wrote: Yuan Ke, you can set the language in settings on the top right of the dashboard. It seems that the horizon won't be able to save your language preference into config file. So you have to set it again when you login. Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 Staff Software Engineer 中关村软件园28号楼 环宇大厦3层 TravelTransportation Standards 邮编：100193 Emerging Technology Institute Address: 3F Ring, Building 28 (ETI) Zhongguancun Software Park, 8 IBM China Software DevelopmentDongbeiwang West Road, Haidian Lab District, Beijing, P.R.C.100193 e-mail: zhu...@cn.ibm.com Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483
Re: [Openstack] change LANGUAGE_CODE config in horizon
Yuan ke, Great! there're something to clarify here, I guess. If it is wrong, correct me. :-) yes, it has something to do with the language preference of the web browser. after I changed to IE, the configuration for LANGUAGE_CODE in settings.py takes effects. This configuration of LANGUAGE_CODE in settings.py is a global setting which won't take much effect. that means it mostly likedly will be overrided by user preferences such as Brower, Session. the latter is probably done on the GUI of dashboard settings. If the horizon can't get any clue of user language preference, it will use the global setting. Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Staff Software Engineer 软件园28号楼 环宇大厦3层 邮编：100193 TravelTransportation Standards Address: 3F Ring, Building 28 Emerging Technology Institute(ETI)Zhongguancun Software Park, 8 IBM China Software Development LabDongbeiwang West Road, Haidian e-mail: zhu...@cn.ibm.com District, Beijing, P.R.C.100193 Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 yuanke wei weiyuanke123@gma il.comTo Hua ZZ Zhang/China/IBM@IBMCN 2012-06-14 13:02 cc openstack mail list openstack@lists.launchpad.net, openstack-bounces +zhuadl=cn.ibm.com@lists.launchpad. net Subject Re: [Openstack] change LANGUAGE_CODE config in horizon thanks very much, that solved my problem. I tested it on my machine and works for me. you need to check your language preference in your web browser(I tested it on Firefox). It seems that Django will also make use of the Request Header of languge to decide the client default language settings. It might be a kind of design which doesn't require storing these preference information in cookie or server side. yes, it has something to do with the language preference of the web browser. after I changed to IE, the configuration for LANGUAGE_CODE in settings.py takes effects. - 韦远科 中国科学院 计算机网络信息中心 wei yuanke(wei) CNIC, Chinese Academy of Sciences gtalk: weiyuanke...@gmail.com msn: weiyuanke...@hotmail.com On Thu, Jun 14, 2012 at 12:37 PM, Hua ZZ Zhang zhu...@cn.ibm.com wrote: I tested it on my machine and works for me. you need to check your language preference in your web browser(I tested it on Firefox). It seems that Django will also make use of the Request Header of languge to decide the client default language settings. It might be a kind of design which doesn't require storing these preference information in cookie or server side. Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 Staff Software Engineer 中关村软件园28号楼 环宇大厦3层 TravelTransportation Standards 邮编：100193 Emerging Technology Institute Address: 3F Ring, Building 28 (ETI
Re: [Openstack] [Horizon][Swift]Cloudfile API
Hi Wu Ke, It seems that there is no such kind of full filter feature in Swift API. You have to implement it as a seperate component by yourself. But you can look at Glance image API to see how to implement it since Glance are using Swift to store VM images with Registry and Query features. Specifically you can refer to image-list API. Another suggestion, you need to think about indexing capability since the container will most likely contain millions of objects. If the filtering is based on the full set of objects, it is challenging for performance. Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Staff Software Engineer 软件园28号楼 环宇大厦3层 邮编：100193 TravelTransportation Standards Address: 3F Ring, Building 28 Emerging Technology Institute(ETI)Zhongguancun Software Park, 8 IBM China Software Development LabDongbeiwang West Road, Haidian e-mail: zhu...@cn.ibm.com District, Beijing, P.R.C.100193 Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 Ke Wu ke...@ibeca.me Sent by: To openstack-bounces openstack@lists.launchpad.net +zhuadl=cn.ibm.co cc m@lists.launchpad .net Subject [Openstack] [Horizon][Swift]Cloudfile API 2012-06-12 04:18 Hi everyone, I am currently working on the Horizon's Swift containers/objects dashboard. On the dashboard user could retrieve, upload and delete objects which are in a Swift container. I tried to use Cloud File's Python API to connect to a Swift container and retrieve the objects, it all worked well. However, when I headed to implement filtering object function, I couldn't found a Filter API provided natively. The get_objects function of the Container object in the API does have a prefix parameter to allow me do some basic filter, but it's far from enough for a full functional filter. So what I am doing now is to retrieve a list of objects by get_objects method and filter the objects by name. This method is a bad hack, would lead to many problems such as breaking pagination, or too much resource consuming if the objects list is long. Was I missing some APIs? Or is there any other way that I can do this? Any thoughts would be helpful. Please kindly spare any spelling/grammar errors :) Thanks a lot! -Ke Wu ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp inline: 45837058.gifinline: ecblank.gifinline: graycol.gifinline: pic15616.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] search on the mailing list
you can try google search with site prefix like: YourKeyWord site:lists.launchpad.net/openstack/. perhaps it is not so perfect, but it is better to have none. :-) - Edward Massimo Canonico m...@di.unipmn.it To Sent by: openstack@lists.launchpad.net, openstack-bounces cc +zhuadl=cn.ibm.co m@lists.launchpad Subject .net [Openstack] search on the mailing list 2012-06-01 下午 04:05 Hi, I'm having a problem deleting my running instance and I would like to search on the mailing list in order to figure out if someone had already had this problem (i'm quite sure). So I went to https://lists.launchpad.net/openstack/ with my credentials, but I did not find any search button. Am I wrong? M ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp inline: graycol.gifinline: pic22416.gifinline: ecblank.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] glance nova and keystone clients in horizon dashboard
You could try to use the essex Git repository address to replace the master one in stackrc. Or you could use your local Git repository path. Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Staff Software Engineer 软件园28号楼 环宇大厦3层 邮编：100193 TravelTransportation Standards Address: 3F Ring, Building 28 Emerging Technology Institute(ETI)Zhongguancun Software Park, 8 IBM China Software Development LabDongbeiwang West Road, Haidian e-mail: zhu...@cn.ibm.com District, Beijing, P.R.C.100193 Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 Vijay vija...@yahoo.co m To Sent by: openstack@lists.launchpad.net openstack-bounces cc +zhuadl=cn.ibm.co m@lists.launchpad Subject .net [Openstack] glance nova and keystone clients in horizon dashboard 2012-05-16 05:25 Please respond to vija...@yahoo.com Hello, I have installed essex released version of openstack. When I install horizon, as part of installation it installs everything in pip-requires. This file clones glance, nova and keystone clients from the git site which is dev version and overrides my earlier base essex versions. If git cloning is commented out, then, dashboard cannot be accessed from browser. It says improperly configured no module novaclient. Is there a way to properly configure dashboard with the current existing clients without having to clone it from the git site? Thanks, -vj ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp inline: 45812732.gifinline: ecblank.gifinline: graycol.gifinline: pic26868.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [nova-volumes] relationship between nova-volumes and swift?
+me :-) Swift is much like Amazon S3(Simple Storage Service), and Nova-volume is much like Amazon EBS (Elastic Block Store). Swift is used as object store of VM images in OpenStack. but Nova-volume is used to store persistent data of VM instances which means even the instance was destroyed, the volume data will still be available for user. for example, it can be attached to another instance instead. Swift data model is a kind of Container/Object and providing unlimited number of objects, but Nova-volume is block device (much like a hard drive). The interesting thing is that Amazon ESB could provide snapshots of volumes which can be persisted to Amazon S3. So the same snopshot can spawn as many volumes as you want. Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Staff Software Engineer 软件园28号楼 环宇大厦3层 邮编：100193 TravelTransportation Standards Address: 3F Ring, Building 28 Emerging Technology Institute(ETI)Zhongguancun Software Park, 8 IBM China Software Development LabDongbeiwang West Road, Haidian e-mail: zhu...@cn.ibm.com District, Beijing, P.R.C.100193 Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 Oleg Gelbukh ogelbukh@miranti s.com To Sent by: Eric Luo nextf...@gmail.com openstack-bounces cc +zhuadl=cn.ibm.co openstack@lists.launchpad.net m@lists.launchpad Subject .net Re: [Openstack] [nova-volumes] relationship between nova-volumes and swift? 2012-04-28 15:47 Hello, Eric Swift is actually an object store rather then volume store. It is used for storing any types of objects as files in underlying file system. This files can be anything, including binary images of block volumes. HTTP is used for transporting objects to and from the store. Nova-volume service is totally different. It allows to attach virtual block devices to VMs by providing correct parameters for nova-compute's 'attach_volume' method. It has a number of drivers that can manage different storage back-ends (Linux LVs, SAN virtual disks, distributed storage systems), but all these back-ends must be able to provide a virtual block device to VMs, which Swift is not capable of. Primary integration point between Swift and nova-volume is a way to store snapshots of virtual volumes to Swift store as files: https://blueprints.launchpad.net/nova/+spec/store-snapshots-to-swift. Status of work on this blueprint is unknown to me. -- Best regards, Oleg On Sat, Apr 28, 2012 at 10:15 AM, Eric Luo nextf...@gmail.com wrote: Hello ,all I am a little confused about the nova-volumes service and the swift.I know both are about the volume store,but what's the relationship between them ?Can some one please explain it to me please :) Thanks! Eric Luo 2012-04-28 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https
Re: [Openstack] I18n issue for OpenStack
+1 The exception is used for flow control when it happens. yes, that's right but not completed.:-) When you look into the current design of exceptions such as nova exceptions, they include message content which is meaningful and useful. Apparently, the exception is not only used for flow control, but also for showing user why this could happen. It is not bad smell for code or conflict with MVC design pattern, I think. Add another separate layer is complex and not necessary. The gettext tookit allow the message to be translated or untranslated. It depends on the user requirements on this that we can't ignore. nova/nova/exception.py: ... class DecryptionFailure(NovaException): message = _(Failed to decrypt text) class ImagePaginationFailed(NovaException): message = _(Failed to paginate through images from image service) class VirtualInterfaceCreateException(NovaException): message = _(Virtual Interface creation failed) class VirtualInterfaceMacAddressException(NovaException): message = _(5 attempts to create virtual interface with unique mac address failed) class GlanceConnectionFailed(NovaException): message = _(Connection to glance failed) + : %(reason)s class MelangeConnectionFailed(NovaException): message = _(Connection to melange failed) + : %(reason)s ... Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Staff Software Engineer 软件园28号楼 环宇大厦3层 邮编：100193 TravelTransportation Standards Address: 3F Ring, Building 28 Emerging Technology Institute(ETI)Zhongguancun Software Park, 8 IBM China Software Development LabDongbeiwang West Road, Haidian e-mail: zhu...@cn.ibm.com District, Beijing, P.R.C.100193 Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 Joshua Harlow harlowja@yahoo-i nc.comTo Hua ZZ Zhang/China/IBM@IBMCN, 2012-04-13 01:33 Thierry Carrez thie...@openstack.org cc openstack-bounces +zhuadl=cn.ibm.com@lists.launchpad. net openstack-bounces +zhuadl=cn.ibm.com@lists.launchpad. net, openstack openstack@lists.launchpad.net Subject Re: [Openstack] I18n issue for OpenStack So u have just touched on another issue, I would still say that exception messages should not be translated (+1), haha. If this is needed, then there is something wrong with the code and how exceptions are used instead (ie the bad code smell). Exceptions should be meant for error control flow, what they were designed for, not for user facing messages. I think it is more common to have a layer that translates exceptions into meaningful localized messages, but there needs to be a separation between exceptions and there localized messages (they should not be combined). This is a common thing afaik, its called separation of model and view, aka, mvc, (think of the exceptions
Re: [Openstack] I18n issue for OpenStack
My cents: Apache HTTP is not so equivelant to OpenStack here. Generally it doesn't care about the application errors or exceptions thrown by web applications. In openstack, exceptions have been defined in nova, horizon, keystone etc. The messages of these exceptions are important for different users to understand what has happened. These messages always need to be localized, returned and displayed on user interface, not just be logged in backend system. It is very common practice for a global software project. Sean Dague wrote: If we want to think about OpenStack as a basic building block like Apache, i18n is critical. Otherwise there are regions that won't adopt it solely because of a lack of i18n. Note that Apache HTTPd, for instance, does not seem to internationalize its error messages. Only the (enduser-facing) HTML pages it gives back in response to invalid requests are. Best Regards, Edward Zhang(张华)地址:北京市海淀区东北旺西路8号 中关村 Staff Software Engineer 软件园28号楼 环宇大厦3层 邮编：100193 TravelTransportation Standards Address: 3F Ring, Building 28 Emerging Technology Institute(ETI)Zhongguancun Software Park, 8 IBM China Software Development LabDongbeiwang West Road, Haidian e-mail: zhu...@cn.ibm.com District, Beijing, P.R.C.100193 Notes ID: Hua ZZ Zhang/China/IBM Tel: 86-10-82450483 Thierry Carrez thierry@openstac k.org To Sent by: openstack@lists.launchpad.net openstack-bounces cc +zhuadl=cn.ibm.co m@lists.launchpad Subject .net Re: [Openstack] I18n issue for OpenStack 2012-04-12 16:47 Sean Dague wrote: If we want to think about OpenStack as a basic building block like Apache, i18n is critical. Otherwise there are regions that won't adopt it solely because of a lack of i18n. Note that Apache HTTPd, for instance, does not seem to internationalize its error messages. Only the (enduser-facing) HTML pages it gives back in response to invalid requests are. Is there a metric on the completeness so far? Something automated that could be a jenkins coverage kind of test? Oddly enough, it's not a question of completeness of translations. Piggybacking on the awesome Launchpad Translations community always gave us great coverage. It's more a code support and CI integration issue. -- Thierry Carrez (ttx) Release Manager, OpenStack ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp inline: 36224036.gifinline: ecblank.gifinline: graycol.gifinline: pic09216.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
