Re: [openstack-dev] [cinder][glance][ironic][keystone][neutron][nova][edge] PTG summary on edge discussions

2018-09-26 Thread James Penick
Hey Colleen, >This sounds like it is based on the customizations done at Oath, which to my recollection did not use the actual federation implementation in keystone due to its reliance on Athenz (I think?) as an identity manager. Something similar can be accomplished in standard keystone with the

Re: [openstack-dev] [all] Switching to longer development cycles

2017-12-15 Thread James Penick
On Thu, Dec 14, 2017 at 7:07 AM, Dan Smith wrote: > > > Agreed. The first reaction I had to this proposal was pretty much what > you state here: that now the 20% person has a 365-day window in which > they have to keep their head in the game, instead of a 180-day one. > >

Re: [openstack-dev] [keystone][nova] Persistent application credentials

2017-10-30 Thread James Penick
Big +1 to re-evaluating this. In my environment we have many users deploying and managing a number of different apps in different tenants. Some of our users, such as Yahoo Mail service engineers could be in up to 40 different tenants. Those service engineers may change products as their careers

Re: [openstack-dev] Supporting SSH host certificates

2017-10-05 Thread James Penick
Hey Pino, mriedem pointed me to the vendordata code [1] which shows some fields are passed (such as project ID) and that SSL is supported. So that's good. The docs on vendordata suck. But I think it'll do what you're looking for. Michael Still wrote up a helpful post titled "Nova vendordata

[openstack-dev] OpenStack upstream specs - Invitation to edit

2016-10-18 Thread James Penick (via Google Docs)
I've shared an item with you: OpenStack upstream specs https://docs.google.com/document/d/1oZzTLFBASwSydy2NNUXJlBA1nRNB-qvoJF_H49utNc4/edit?usp=sharing=CJOpnqIJ=58069599 It's not an attachment -- it's stored online. To open this item, just click the link above.

Re: [openstack-dev] Reasoning behind my vote on the Go topic

2016-06-07 Thread James Penick
>rather than making progress on OpenStack, we'll spend the next 4 years bikeshedding broadly about which bits, if any, should be rewritten in Go. 100% agreed, and well said. On Tue, Jun 7, 2016 at 12:00 PM, Monty Taylor wrote: > This text is in my vote, but as I'm sure

Re: [openstack-dev] [Openstack-operators] [all] A proposal to separate the design summit

2016-02-22 Thread James Penick
On Mon, Feb 22, 2016 at 8:32 AM, Matt Fischer wrote: > Cross-post to openstack-operators... > > As an operator, there's value in me attending some of the design summit > sessions to provide feedback and guidance. But I don't really need to be in > the room for a week

Re: [openstack-dev] [Ironic] [Nova] continuing the "multiple compute host" discussion

2015-12-16 Thread James Penick
>Affinity is mostly meaningless with baremetal. It's entirely a >virtualization related thing. If you try and group things by TOR, or >chassis, or anything else, it's going to start meaning something entirely >different than it means in Nova, I disagree, in fact, we need TOR and power

Re: [openstack-dev] [Ironic] [Nova] continuing the "multiple compute host" discussion

2015-12-16 Thread James Penick
Wed, Dec 16, 2015 at 12:40 PM, James Penick <jpen...@gmail.com> wrote: > >Affinity is mostly meaningless with baremetal. It's entirely a > >virtualization related thing. If you try and group things by TOR, or > >chassis, or anything else, it's going to start meaning someth

Re: [openstack-dev] [Ironic] [Nova] continuing the "multiple compute host" discussion

2015-12-16 Thread James Penick
at that time. Right >now, this is the best plan I have, that we can commit to completing in a >reasonable timeframe. I respect that you're trying to solve the problem we have right now to make operators lives Suck Less. But I think that a short term decision made now would hurt a lot more later

Re: [openstack-dev] [Ironic] [Nova] continuing the "multiple compute host" discussion

2015-12-15 Thread James Penick
the options to me. -James [1] http://git.openstack.org/cgit/openstack/gantt/tree/README.rst On Mon, Dec 14, 2015 at 5:28 PM, Jim Rollenhagen <j...@jimrollenhagen.com> wrote: > On Mon, Dec 14, 2015 at 04:15:42PM -0800, James Penick wrote: > > I'm very much against it. > > &g

Re: [openstack-dev] [Ironic] [Nova] continuing the "multiple compute host" discussion

2015-12-14 Thread James Penick
I'm very much against it. In my environment we're going to be depending heavily on the nova scheduler for affinity/anti-affinity of physical datacenter constructs, TOR, Power, etc. Like other operators we need to also have a concept of host aggregates and availability zones for our baremetal as

Re: [openstack-dev] Compute API (Was Re: [nova][cinder] how to handle AZ bug 1496235?)

2015-09-28 Thread James Penick
>I see a clear line between something that handles the creation of all ancillary resources needed to boot a VM and then the creation of the VM itself. I agree. To me the line is the difference between creating a top level resource, and adding a host to that resource. For example, I do expect a

Re: [openstack-dev] [nova][cinder] how to handle AZ bug 1496235?

2015-09-24 Thread James Penick
On Thu, Sep 24, 2015 at 2:22 PM, Sam Morrison wrote: > > Yes an AZ may not be considered a failure domain in terms of control > infrastructure, I think all operators understand this. If you want control > infrastructure failure domains use regions. > > However from a resource

[openstack-dev] Compute API (Was Re: [nova][cinder] how to handle AZ bug 1496235?)

2015-09-24 Thread James Penick
> > > At risk of getting too offtopic I think there's an alternate solution to > doing this in Nova or on the client side. I think we're missing some sort > of OpenStack API and service that can handle this. Nova is a low level > infrastructure API and service, it is not designed to handle these

Re: [openstack-dev] On an API proxy from baremetal to ironic

2014-09-11 Thread James Penick
We manage a fairly large nova-baremetal installation at Yahoo. And while we've developed tools to hit the nova-bm API, we're planning to move to ironic without any support for the nova BM API. Definitely no interest in the proxy API from our end.  Sometimes you just need to let a thing die. 

Re: [openstack-dev] What does NASA not using OpenStack mean to OS's future

2014-08-26 Thread James Penick
Don't feed the troll. :)   :)= On Monday, August 25, 2014 12:39 PM, Joshua Harlow harlo...@outlook.com wrote: So to see if we can get something useful from this thread. What was your internal analysis, can it be published? Even negative analysis is useful to make openstack better... It'd

Re: [openstack-dev] running VM manually using openstack

2014-05-13 Thread James Penick
Hey Sonia,  Do the backing file and instance directory exist? -drive file=/opt/stack/data/nova/instances/3765ec4d-48d0-4f0b-9f7d-2f73ee3a3852/disk implies that both that directory exists and the instance image is contained within it.  -James On Tuesday, May 13, 2014 6:22 AM, sonia verma

Re: [openstack-dev] deliver the vm-level HA to improve the business continuity with openstack

2014-04-14 Thread James Penick
Enterprise! We drive the ³VM=Cattle² message pretty hard. Part of onboarding a property to our cloud, and allowing them to serve traffic from VMs is explaining the transient nature of VMs. I broadcast the message that all compute resources die, and if your day/week/month is ruined because of a