[openstack-dev] port-create with network from a different tenant does not fail

2015-02-10 Thread Varun Lodaya
Hi, We were seeing this issue where if the user role is admin in 2 tenants A and B and he issues neutron port-create network-id in tenant A where network-id is in tenant B, it ends up creating that port. Ideally, it should have failed since you cannot have the port/network in different

Re: [openstack-dev] [OpenStack-Infra] Cross-Repo Dependencies in Zuul

2015-02-10 Thread Boris Pavlovic
James, Awesome! Amazing! You guys rock!=) Best regards, Boris Pavlovic On Wed, Feb 11, 2015 at 1:26 AM, James E. Blair cor...@inaugust.com wrote: Hi, We have added support for cross-repo dependencies (CRD) in Zuul. The important bits: * To use them, include Depends-On:

[openstack-dev] [neutron] - port-create with network from a different tenant does not fail

2015-02-10 Thread Varun Lodaya
Adding the right subject line. From: Varun Lodaya varun_lod...@symantec.commailto:varun_lod...@symantec.com Date: Tuesday, February 10, 2015 at 2:26 PM To: OpenStack Development Mailing List (not for usage questions) openstack-dev@lists.openstack.orgmailto:openstack-dev@lists.openstack.org

Re: [openstack-dev] [neutron] - port-create with network from a different tenant does not fail

2015-02-10 Thread Kevin Benton
You can have ports from different tenants in a network. It's an admin-only capability unless the network is marked as shared. On Tue, Feb 10, 2015 at 2:30 PM, Varun Lodaya varun_lod...@symantec.com wrote: Adding the right subject line. From: Varun Lodaya varun_lod...@symantec.com Date:

Re: [openstack-dev] [Fuel] Cache for packages on master node

2015-02-10 Thread Andrew Woodward
previously we used squid in 3.0 and before. The main problem is that the deployment would proceeded even if not all the packages where cached or even available on the remote. This often lead to broken deployments that where hard to debug and a waste of alot of time. This _MUST_ be resolved or we

Re: [openstack-dev] Cross-Repo Dependencies in Zuul

2015-02-10 Thread Ihar Hrachyshka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 So cool! A comment inline. On 02/10/2015 11:26 PM, James E. Blair wrote: Hi, We have added support for cross-repo dependencies (CRD) in Zuul. The important bits: * To use them, include Depends-On: gerrit-change-id in the footer of your

Re: [openstack-dev] [neutron] - port-create with network from a different tenant does not fail

2015-02-10 Thread Kevin Benton
Unfortunately shared networks right now have no fine-grained control so every single tenant can attach to a network once it is marked as shared. So if you have one tenant who wants to have another tenant attach a few servers to his/her network, the only choice is to have the admin do it via the

Re: [openstack-dev] [Fuel] Distribution of keys for environments

2015-02-10 Thread Andrew Woodward
We need to be highly security conscious here doing this in an insecure manner is a HUGE risk so rsync over ssh from the master node is usually (or scp) OK but rsync protocol from the node in the cluster will not be BAD (it leaves the certs exposed on an weak service.) I could see this being

Re: [openstack-dev] [Keystone] Proposing Marek Denis for the Keystone Core Team

2015-02-10 Thread Jamie Lennox
+1 - Original Message - From: Guang Yee guang@hp.com To: OpenStack Development Mailing List (not for usage questions) openstack-dev@lists.openstack.org Sent: Wednesday, 11 February, 2015 10:45:07 AM Subject: Re: [openstack-dev] [Keystone] Proposing Marek Denis for the Keystone

Re: [openstack-dev] The API WG mission statement

2015-02-10 Thread Everett Toews
On Feb 9, 2015, at 9:28 PM, Jay Pipes jaypi...@gmail.commailto:jaypi...@gmail.com wrote: On 02/02/2015 02:51 PM, Stefano Maffulli wrote: On Fri, 2015-01-30 at 23:05 +, Everett Toews wrote: To converge the OpenStack APIs to a consistent and pragmatic RESTful design by creating guidelines that

Re: [openstack-dev] [heat] Repeating stack-delete many times

2015-02-10 Thread Steven Hardy
On Tue, Feb 10, 2015 at 03:04:39PM +0400, Kairat Kushaev wrote: Hi all, During the analysis of the following bug: https://bugs.launchpad.net/heat/+bug/1418878 i figured out that orchestration engine doesn't work properly in some cases. The case is the following:A

Re: [openstack-dev] [nova] release request for python-novaclient

2015-02-10 Thread Sean Dague
On 02/09/2015 10:55 PM, Michael Still wrote: The previous policy is that we do a release when requested or when a critical bug fix merges. I don't see any critical fixes awaiting release, but I am not opposed to a release. The reason I didn't do this yesterday is that Joe wanted some time to

Re: [openstack-dev] [nova][neutron] Create VM using port-create vs nova boot only?

2015-02-10 Thread Czesnowicz, Przemyslaw
There seemed to be two ways to create a VM via cli: 1) use neutron command to create a port first and then use nova command to attach the vm to that port(neutron port-create.. followed by nova boot --nic port-id=) 2)Just use nova command and a port will implicitly be created for you(nova boot

[openstack-dev] [Fuel] Merge code before spec is merged?

2015-02-10 Thread Evgeniy L
Hi, Recently we've had discussions in the ML [1] and on weekly IRC meeting [2] about specs and whether they should be merged before or after the patches for feature get merged. Lets continue the discussion in this thread. [1]

Re: [openstack-dev] [nova] [devstack] configuring https for glance client

2015-02-10 Thread Rob Crittenden
Andrew Lazarev wrote: Hi Nova experts, Some time ago I figured out that devstack fails to stack with USE_SSL=True option because it doesn't configure nova to work with secured glace [1]. Support of secured glance was added to nova in Juno cycle [2], but it looks strange for me. Glance

Re: [openstack-dev] docstring standard?

2015-02-10 Thread Jeremy Stanley
On 2015-02-10 11:57:18 -0800 (-0800), Min Pae wrote: I think most people would agree documentation is a good thing, and consistency is generally a good thing…  is there an accepted standard on layout and minimum required fields? [...] Across OpenStack projects it probably varies a bit. For

Re: [openstack-dev] Cross-Repo Dependencies in Zuul

2015-02-10 Thread Jeremy Stanley
On 2015-02-11 00:33:03 +0100 (+0100), Ihar Hrachyshka wrote: Long term, I can't agree more. Short term, while we decouple stuff and in the middle of the process, that's too idealistic to be true. [...] By implementing features to support the way we all generally agree things _should_ be rather

[openstack-dev] [all][PTLs] Stop releasing libraries/clients without capping stable global requirements

2015-02-10 Thread Joe Gordon
Hi, As you know a few of us have been spending way too much time digging stable/juno out of the ditch its currently in. And just when we thought we were in the clear a new library was released without a requirements cap in stable global-requirements and broke stable/juno grenade. Everytime this

Re: [openstack-dev] Cross-Repo Dependencies in Zuul

2015-02-10 Thread Ihar Hrachyshka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/11/2015 12:09 AM, Sean Dague wrote: On 02/10/2015 05:47 PM, Ihar Hrachyshka wrote: So cool! A comment inline. On 02/10/2015 11:26 PM, James E. Blair wrote: Hi, We have added support for cross-repo dependencies (CRD) in Zuul. The

[openstack-dev] [all] Replace eventlet with asyncio

2015-02-10 Thread Victor Stinner
Hi, I wrote a second version of my cross-project specification Replace eventlet with asyncio. It's now open for review: https://review.openstack.org/#/c/153298/ I copied it below if you prefer to read it and/or comment it by email. Sorry, I'm not sure that the spec will be correctly formatted

Re: [openstack-dev] [Fuel] Merge code before spec is merged?

2015-02-10 Thread Igor Kalnitsky
Fuelers, I see no problems here. I think it's ok if some parts of feature were merged before the spec, because it means the feature is under development. Moreover, if we merge specs asap there's a chance that we'll miss something. Therefore, the chance that it will be found and discussed at the

<    1   2