[openstack-dev] [Neutron][E2E WANaaS] E2E WAN as a Servcie TechTalk

2015-05-15 Thread Lifengkai (Fengkai)
Hi all, I will give a presentation during the vBrownBag TechTalk about the E2E WANaaS, at 5:15 pm, Tuesday, 19th May, 2015, in room 106. E2E WANaaS is to enable automation of end-to-end connectivity and embedded value-added service provisioning, using User-Centric NaaS API and covering

Re: [openstack-dev] [nova] Can we bump MIN_LIBVIRT_VERSION to 1.2.2 in Liberty?

2015-05-15 Thread Neil Jerram
On 14/05/15 20:23, Matt Riedemann wrote: Regarding RHEL, I think this is a safe bet because in Kilo nova dropped python 2.6 support and RHEL 6 doesn't have py26 so you'd be in trouble running kilo+ nova on RHEL 6.x anyway. I'm personally happy to hear this, because it is a pain supporting

[openstack-dev] New Feature Request : Docker files for Ceilometerclient on Power platform (SLES, RHEL, Ubuntu)

2015-05-15 Thread priya duggirala
Hi, I have written dockerfiles for building Ceilometerclient from source. I have built and tested the source code available on git successfully through the dockerfile for PPC64 Little Endian architecture. The containers successfully run on the following platforms: Ubuntu 14.10 Ubuntu 14.04 SUSE

Re: [openstack-dev] [Neutron] Data-plane performance testing with Shaker

2015-05-15 Thread Vincent JARDIN
On 15/05/2015 05:09, Kevin Benton wrote: Even if your bottleneck is the underlay, it still tells you the performance of the overlay that your tenants will experience, which is the relevant piece of information for a deployer. agreed, it makes sense so it create per se a standard definition of

[openstack-dev] [Neutron] L2 Gateway API released

2015-05-15 Thread Sukhdev Kapur
Folks, L2 Gateway team is pleased to announce the release of L2 Gateway API. This API can be downloaded from [1] If you plan on attending OpenStack summit in Vancouver next week, please attend presentation [2] to find more details about this feature. If you are not able to attend the summit, be

Re: [openstack-dev] [nova] Can we bump MIN_LIBVIRT_VERSION to 1.2.2 in Liberty?

2015-05-15 Thread Kashyap Chamarthy
On Thu, May 14, 2015 at 02:23:25PM -0500, Matt Riedemann wrote: The minimum required version of libvirt in the driver is 0.9.11 still [1]. We've been gating against 1.2.2 in Ubuntu Trusty 14.04 since Juno. The libvirt distro support matrix is here: [2] Can we safely assume the people

Re: [openstack-dev] OpenStack 2015.1.0 for Debian Sid and Jessie

2015-05-15 Thread Neil.Jerram
Out of interest, have you done this by re-releasing the Ubuntu packaging? Or have you taken an independent approach?  Regards,      Neil    Original Message   From: Thomas Goirand Sent: Thursday, 14 May 2015 22:21 To: OpenStack Operators; Openstack; OpenStack Development Mailing List (not for

Re: [openstack-dev] [monasca] [java]

2015-05-15 Thread Thierry Carrez
Dieterly, Deklan wrote: We’ve seen that Swift has introduced components in Go. So, this looks like a precedent for allowing other languages where deemed appropriate. Before we spend many man-hours hacking on the Python components, it seems reasonable to determine if there really exists a

Re: [openstack-dev] [Openstack-operators] [nova] Can we bump MIN_LIBVIRT_VERSION to 1.2.2 in Liberty?

2015-05-15 Thread Daniel P. Berrange
On Thu, May 14, 2015 at 02:23:25PM -0500, Matt Riedemann wrote: The minimum required version of libvirt in the driver is 0.9.11 still [1]. We've been gating against 1.2.2 in Ubuntu Trusty 14.04 since Juno. The libvirt distro support matrix is here: [2] Can we safely assume the people

Re: [openstack-dev] [devstack] What's required to accept a new distro rlease?

2015-05-15 Thread Sean Dague
On 05/15/2015 01:13 AM, Tony Breeds wrote: On Fri, May 15, 2015 at 01:35:06PM +1000, Ian Wienand wrote: On 05/15/2015 01:05 PM, Tony Breeds wrote: I'm wondering what are the requirements for accepting something like: -if [[ ! ${DISTRO} =~

Re: [openstack-dev] OpenStack 2015.1.0 for Debian Sid and Jessie

2015-05-15 Thread David Medberry
Neil, I haven't inspected these packages but historically they are independent. On Fri, May 15, 2015 at 2:37 AM, neil.jer...@metaswitch.com wrote: Out of interest, have you done this by re-releasing the Ubuntu packaging? Or have you taken an independent approach? Regards, Neil

Re: [openstack-dev] OpenStack 2015.1.0 for Debian Sid and Jessie

2015-05-15 Thread David Medberry
and a quick checks shows that there are number of differences just in the nova source package, so I believe they remain independent. On Fri, May 15, 2015 at 5:01 AM, David Medberry openst...@medberry.net wrote: Neil, I haven't inspected these packages but historically they are independent.

Re: [openstack-dev] [Openstack-operators] [nova] Can we bump MIN_LIBVIRT_VERSION to 1.2.2 in Liberty?

2015-05-15 Thread Daniel P. Berrange
On Fri, May 15, 2015 at 11:51:22AM +0100, Daniel P. Berrange wrote: On Thu, May 14, 2015 at 02:23:25PM -0500, Matt Riedemann wrote: The minimum required version of libvirt in the driver is 0.9.11 still [1]. We've been gating against 1.2.2 in Ubuntu Trusty 14.04 since Juno. The libvirt

[openstack-dev] [nova] Unvalidated user input passed to functions

2015-05-15 Thread Matthew Booth
I was looking at the migrations api, and I noticed that the api passes the request query unchecked to get_migrations, where it ultimately ends up in a db query. I was curious and spent a couple of hours checking this morning. There are a few instances of this. I didn't find any security bugs,

Re: [openstack-dev] [Openstack-operators] [nova] Can we bump MIN_LIBVIRT_VERSION to 1.2.2 in Liberty?

2015-05-15 Thread Daniel P. Berrange
On Fri, May 15, 2015 at 11:51:22AM +0100, Daniel P. Berrange wrote: On Thu, May 14, 2015 at 02:23:25PM -0500, Matt Riedemann wrote: The minimum required version of libvirt in the driver is 0.9.11 still [1]. We've been gating against 1.2.2 in Ubuntu Trusty 14.04 since Juno. The libvirt

[openstack-dev] [openstackclient] About my blueprint every-time-record-log-in-file

2015-05-15 Thread Fujita, Daisuke
Dear openstackclient team members, I'm Daisuke Fujita of Fujitsu. I would like to implement following my buleprint. https://blueprints.launchpad.net/python-openstackclient/+spec/every-time-record-log-in-file Python-openstackclient's Blueprints process is following:

Re: [openstack-dev] [nova] Unvalidated user input passed to functions

2015-05-15 Thread John Garbutt
On 15 May 2015 at 14:13, Daniel P. Berrange berra...@redhat.com wrote: On Fri, May 15, 2015 at 12:41:20PM +0100, Matthew Booth wrote: I was looking at the migrations api, and I noticed that the api passes the request query unchecked to get_migrations, where it ultimately ends up in a db query.

Re: [openstack-dev] OpenStack 2015.1.0 for Debian Sid and Jessie

2015-05-15 Thread Ihar Hrachyshka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Are there any attempts to avoid duplication of efforts? I would expect Ubuntu to reuse and extend what is in their upstream distro - Debian. Ihar On 05/15/2015 01:11 PM, David Medberry wrote: and a quick checks shows that there are number of

Re: [openstack-dev] [nova][heat] sqlalchemy-migrate tool to alembic

2015-05-15 Thread Doug Hellmann
Excerpts from Mike Bayer's message of 2015-05-14 21:54:27 -0400: On 5/14/15 7:12 PM, Angus Salkeld wrote: On Fri, May 15, 2015 at 4:46 AM, Mike Bayer mba...@redhat.com mailto:mba...@redhat.com wrote: On 5/14/15 11:58 AM, Doug Hellmann wrote: At one point we

Re: [openstack-dev] [horizon][keystone][heat] Are AVAILABLE_REGIONS and multi-region service catalog mutually exclusive?

2015-05-15 Thread Douglas Fish
Anne Gentle annegen...@justwriteclick.com wrote on 05/14/2015 09:47:25 AM: From: Anne Gentle annegen...@justwriteclick.com To: OpenStack Development Mailing List (not for usage questions) openstack-dev@lists.openstack.org Date: 05/14/2015 10:08 AM Subject: Re: [openstack-dev]

Re: [openstack-dev] [QA] Question about Heat Tempest tests

2015-05-15 Thread Yaroslav Lobankov
Forgot to provide the link to the test results :) http://logs.openstack.org/71/182971/1/gate/gate-tempest-dsvm-heat/241e473/logs/testr_results.html.gz Regards, Yaroslav Lobankov. On Fri, May 15, 2015 at 4:30 PM, Yaroslav Lobankov yloban...@mirantis.com wrote: Angus, If you take a look at the

[openstack-dev] [ceilometer] New Feature Request : Docker files for Power platform (SLES, RHEL, Ubuntu)

2015-05-15 Thread priya duggirala
Hi, I have written dockerfiles for building ceilometer-client from source. I have built and tested the source code available on git successfully through the dockerfile for PPC64 Little Endian architecture. The containers successfully run on the following platforms: Ubuntu 14.10 Ubuntu 14.04 SUSE

Re: [openstack-dev] [nova] Unvalidated user input passed to functions

2015-05-15 Thread Daniel P. Berrange
On Fri, May 15, 2015 at 12:41:20PM +0100, Matthew Booth wrote: I was looking at the migrations api, and I noticed that the api passes the request query unchecked to get_migrations, where it ultimately ends up in a db query. I was curious and spent a couple of hours checking this morning. There

Re: [openstack-dev] [Openstack-operators] [nova] Are we happy with libvirt-python = 1.2.0 ?

2015-05-15 Thread Daniel P. Berrange
On Fri, May 15, 2015 at 02:45:06PM +0100, John Garbutt wrote: On 15 May 2015 at 13:28, Daniel P. Berrange berra...@redhat.com wrote: On Fri, May 15, 2015 at 11:51:22AM +0100, Daniel P. Berrange wrote: On Thu, May 14, 2015 at 02:23:25PM -0500, Matt Riedemann wrote: There are some

Re: [openstack-dev] [QA] Question about Heat Tempest tests

2015-05-15 Thread Yaroslav Lobankov
Angus, If you take a look at the tempest check job check-tempest-dsvm-heat for the patch https://review.openstack.org/#/c/182971/, you will see that all tests are skipped there. I have not found any job anywhere that runs these tests. Regards, Yaroslav Lobankov. On Fri, May 15, 2015 at 2:16 AM,

Re: [openstack-dev] [Openstack-operators] [nova] Are we happy with libvirt-python = 1.2.0 ?

2015-05-15 Thread John Garbutt
On 15 May 2015 at 13:28, Daniel P. Berrange berra...@redhat.com wrote: On Fri, May 15, 2015 at 11:51:22AM +0100, Daniel P. Berrange wrote: On Thu, May 14, 2015 at 02:23:25PM -0500, Matt Riedemann wrote: There are some workarounds in the code [3] I'd like to see removed by bumping the minimum

Re: [openstack-dev] [Murano] [Mistral] [Zaqar] [Keystone] SSH workflow action

2015-05-15 Thread Adam Young
On 05/15/2015 09:56 AM, Zane Bitter wrote: On 14/05/15 23:38, Adam Young wrote: So the mechanisms are there. In the short term we'd need some cross-project co-operation to define a system through which we can do this across projects (i.e. Murano or any other service can create a user and have

Re: [openstack-dev] [Openstack-operators] [nova] Can we bump MIN_LIBVIRT_VERSION to 1.2.2 in Liberty?

2015-05-15 Thread Matt Riedemann
On 5/15/2015 6:28 AM, Daniel P. Berrange wrote: On Fri, May 15, 2015 at 11:51:22AM +0100, Daniel P. Berrange wrote: On Thu, May 14, 2015 at 02:23:25PM -0500, Matt Riedemann wrote: The minimum required version of libvirt in the driver is 0.9.11 still [1]. We've been gating against 1.2.2 in

Re: [openstack-dev] [neutron][lbaas]LBaaSv2 movies / links

2015-05-15 Thread Samuel Bercovici
Was thinking 1-2 minutes. Tomorrow would be fine. From: Vijay Venkatachalam [mailto:vijay.venkatacha...@citrix.com] Sent: Friday, May 15, 2015 6:03 PM To: OpenStack Development Mailing List (not for usage questions); Evgeny Fedoruk; Adam Harwell; Kyle Mestery; Brandon Logan; Johnson, Michael (HP

Re: [openstack-dev] [nova] Unvalidated user input passed to functions

2015-05-15 Thread Eric Blake
On 05/15/2015 05:41 AM, Matthew Booth wrote: I was looking at the migrations api, and I noticed that the api passes the request query unchecked to get_migrations, where it ultimately ends up in a db query. I was curious and spent a couple of hours checking this morning. There are a few

[openstack-dev] devstack local.conf file fro sriov pci nic passthrough

2015-05-15 Thread Kamsali, RaghavendraChari (Artesyn)
Hi, I am bringing up the single node openstack cloud and having pci sriov supported nic controller (intel XL710), created 4virtual functions on top of the nic. My goal is to bring up the cloud setup with neutron and nova network services using devstack. How to configure local.conf file so that

Re: [openstack-dev] [Murano] [Mistral] [Zaqar] [Keystone] SSH workflow action

2015-05-15 Thread Zane Bitter
On 14/05/15 23:38, Adam Young wrote: So the mechanisms are there. In the short term we'd need some cross-project co-operation to define a system through which we can do this across projects (i.e. Murano or any other service can create a user and have Zaqar authorise it for listening on a

Re: [openstack-dev] [Murano] [Mistral] [Zaqar] [Keystone] SSH workflow action

2015-05-15 Thread Fox, Kevin M
And if its tied into nova, perhaps the service account password never is given to the vm, but the vm has a mechanism for fetching fresh keystone tokens, maybe a special url on the metadata server. Thanks, Kevin From: Fox, Kevin M Sent: Friday, May 15,

Re: [openstack-dev] [nova][cinder] can we deprecate the volume CLIs in novaclient?

2015-05-15 Thread John Griffith
On Thu, May 14, 2015 at 8:29 PM, Matt Riedemann mrie...@linux.vnet.ibm.com wrote: This came up while talking about bug 1454369 [1]. This also came up at one point in kilo when we found out the volume CLIs in novaclient didn't work at one point and we broke the cells devstack exercises job

Re: [openstack-dev] [monasca] [java]

2015-05-15 Thread Everett Toews
On May 15, 2015, at 3:49 AM, Thierry Carrez thie...@openstack.org wrote: Dieterly, Deklan wrote: We’ve seen that Swift has introduced components in Go. So, this looks like a precedent for allowing other languages where deemed appropriate. Before we spend many man-hours hacking on the Python

Re: [openstack-dev] [Murano] [Mistral] [Zaqar] [Keystone] SSH workflow action

2015-05-15 Thread Adam Young
On 05/15/2015 11:12 AM, Fox, Kevin M wrote: And if its tied into nova, perhaps the service account password never is given to the vm, but the vm has a mechanism for fetching fresh keystone tokens, maybe a special url on the metadata server. Thanks, Kevin

Re: [openstack-dev] [Murano] [Mistral] [Zaqar] [Keystone] SSH workflow action

2015-05-15 Thread Zane Bitter
On 15/05/15 11:57, Adam Young wrote: It's kind of unfortunate IMHO that the default policy.json files tend to give all users access to non-admin APIs, rather than requiring a specific role (like Member). Working on that. Come to my policy session! This one, I assume:

[openstack-dev] [nova][vmware] Minimum VC version

2015-05-15 Thread Gary Kotton
Hi, We would like to indicate that we do not support versions below 5.1.0 of the VC. Is anyone aware of people using versions below with OpenStack. Patch https://review.openstack.org/#/c/183711/ proposes exiting Nova compute if a lower version is used. Thanks Gary

Re: [openstack-dev] [Openstack-operators] [nova][vmware] Minimum VC version

2015-05-15 Thread Steve Gordon
- Original Message - From: Dan Smith d...@danplanet.com To: OpenStack Development Mailing List (not for usage questions) openstack-dev@lists.openstack.org, But 4.x was EOL over a year ago:

Re: [openstack-dev] [Openstack-operators] [nova] Can we bump MIN_LIBVIRT_VERSION to 1.2.2 in Liberty?

2015-05-15 Thread Robert Collins
On 16 May 2015 at 00:28, Daniel P. Berrange berra...@redhat.com wrote: is not actually working around a bug the libvirt hypervisor. It is in fact a bug in the libvirt-python API binding. As such we don't actually need to increase the min required libvirt to be able to remove that check. In

Re: [openstack-dev] [Openstack-operators] [nova] Are we happy with libvirt-python = 1.2.0 ?

2015-05-15 Thread Matt Riedemann
On 5/15/2015 9:52 AM, Jeremy Stanley wrote: On 2015-05-15 14:54:37 +0100 (+0100), Daniel P. Berrange wrote: Hmm, I didn't know it was listed in global-requirements.txt - I only checked the requirements.txt and test-requirements.txt in Nova itself which does not list libvirt-python.

Re: [openstack-dev] [nova][vmware] Minimum VC version

2015-05-15 Thread Matt Riedemann
On 5/15/2015 4:50 PM, Gary Kotton wrote: Hi, We would like to indicate that we do not support versions below 5.1.0 of the VC. Is anyone aware of people using versions below with OpenStack. Patch https://review.openstack.org/#/c/183711/ proposes exiting Nova compute if a lower version is used.

Re: [openstack-dev] [nova][vmware] Minimum VC version

2015-05-15 Thread Dan Smith
But 4.x was EOL over a year ago: http://kb.vmware.com/selfservice/microsites/search.do?language=en_UScmd=displayKCexternalId=2039567 ...and was released in 2010. We're supporting a minimum version of libvirt from 2014, so I think that dropping support for five-year-old EOL'd VMware is good.

[openstack-dev] [Horizon] Horizon Usage Survey Results

2015-05-15 Thread Michael Krotscheck
Hey everyone! I've compiled some *preliminary* results from the horizon usage survey I'm running. I'll be soliciting more responses during the summit, and if you forgot to contribute, you can still participate. The link is here: http://tinyurl.com/horizon-usage-survey . If you've already

Re: [openstack-dev] [Openstack-operators] [nova][vmware] Minimum VC version

2015-05-15 Thread Dan Smith
The proposed patch also drops support for 5.0, which as I understand it is not EOL'd? The documentation appears to indicate that some functionality will not work with 5.1, but it's not explicitly clear what that it is. Yeah, I guess I assumed that anyone on 5.0 was just late moving to =5.1,

Re: [openstack-dev] [Openstack-operators] [nova][vmware] Minimum VC version

2015-05-15 Thread Gary Kotton
On 5/15/15, 3:57 PM, Dan Smith d...@danplanet.com wrote: The proposed patch also drops support for 5.0, which as I understand it is not EOL'd? The documentation appears to indicate that some functionality will not work with 5.1, but it's not explicitly clear what that it is. Yeah, I guess

[openstack-dev] [Fuel] Please don't close bugs associated with blueprints as Won't Fix

2015-05-15 Thread Dmitry Borodaenko
Fuelers, If a bug is a feature request in disguise, or simply requires a new feature before it can be fixed, please don't close it as Won't Fix after associating it with the corresponding blueprint. Instead, please target it to the same release as the blueprint and leave it in Triaged (if root

Re: [openstack-dev] [Murano] [Mistral] [Zaqar] [Keystone] SSH workflow action

2015-05-15 Thread Adam Young
On 05/15/2015 07:30 PM, Zane Bitter wrote: On 15/05/15 11:57, Adam Young wrote: It's kind of unfortunate IMHO that the default policy.json files tend to give all users access to non-admin APIs, rather than requiring a specific role (like Member). Working on that. Come to my policy session!

Re: [openstack-dev] [Murano] [Mistral] [Zaqar] [Keystone] SSH workflow action

2015-05-15 Thread Fox, Kevin M
I think we have to be very careful with cheep, easy, user provisionable user accounts. I know we've had a hard enough time getting clouds to land at our organization because policies had to be adapted. I think the policies around User account allocation and particularly password strength,

Re: [openstack-dev] [Openstack-operators] [nova] Are we happy with libvirt-python = 1.2.0 ?

2015-05-15 Thread Jeremy Stanley
On 2015-05-15 14:54:37 +0100 (+0100), Daniel P. Berrange wrote: Hmm, I didn't know it was listed in global-requirements.txt - I only checked the requirements.txt and test-requirements.txt in Nova itself which does not list libvirt-python. Previously test-requirements.txt did have it, but we

Re: [openstack-dev] [neutron][lbaas]LBaaSv2 movies / links

2015-05-15 Thread Vijay Venkatachalam
Hi Sam, Thanks for probing. How many seconds/mins you have thought per vendor? By when do you need this? Will tomorrow work fine? Thanks, Vijay V. Sent from Surface From: Samuel Bercovicimailto:samu...@radware.com Sent: ‎Friday‎, ‎15‎ ‎May‎ ‎2015 ‎00‎:‎30 To: OpenStack Development Mailing

[openstack-dev] [Glance] glance social event at Vancouver summit

2015-05-15 Thread Brian Rosmaita
Greetings to all Glance people, kragniz has proposed that we have an informal social event for Glance and Glance-related people attending the summit next week. Please keep your calendars open for about 2 hours or so starting at 7:30 p.m. on Wednesday, May 20. Neither kragniz nor I are familiar

Re: [openstack-dev] [Openstack-operators] [nova] Are we happy with libvirt-python = 1.2.0 ?

2015-05-15 Thread Matt Riedemann
On 5/15/2015 8:54 AM, Daniel P. Berrange wrote: On Fri, May 15, 2015 at 02:45:06PM +0100, John Garbutt wrote: On 15 May 2015 at 13:28, Daniel P. Berrange berra...@redhat.com wrote: On Fri, May 15, 2015 at 11:51:22AM +0100, Daniel P. Berrange wrote: On Thu, May 14, 2015 at 02:23:25PM -0500,

[openstack-dev] [Fuel] python-fuelclient 6.1.0 is released

2015-05-15 Thread Roman Prykhodchenko
Hi folks! I’m glad to announce that the first independent release of Fuel Client was published to PyPi: https://pypi.python.org/pypi/python-fuelclient https://pypi.python.org/pypi/python-fuelclient You can either download it from the web page or install with pip install python-fuelclient.

Re: [openstack-dev] [security] Consensus on security guidance license

2015-05-15 Thread Clark, Robert Graham
Agree Sent from my iPhone On 15 May 2015, at 10:17, Rob Fletcher rfletch@gmail.commailto:rfletch@gmail.com wrote: sgtm On Fri, May 15, 2015 at 10:04 AM, Paul McMillan p...@mcmillan.wsmailto:p...@mcmillan.ws wrote: Works for me. -Paul On May 15, 2015 10:03 AM, Murphy, Grant

Re: [openstack-dev] [nova][all] Architecture Diagrams in ascii art?

2015-05-15 Thread Joe Gordon
On Fri, May 15, 2015 at 2:27 PM, Joe Gordon joe.gord...@gmail.com wrote: On Thu, May 14, 2015 at 3:52 AM, John Garbutt j...@johngarbutt.com wrote: On 12 May 2015 at 20:33, Sean Dague s...@dague.net wrote: On 05/12/2015 01:12 PM, Jeremy Stanley wrote: On 2015-05-12 10:04:11 -0700

Re: [openstack-dev] [neutron] Neutron API rate limiting

2015-05-15 Thread Gal Sagie
Hello Rick, First, we jumped into a different discussion as i was pointed out by Carl so lets continue this on another thread (Sorry everyone) But to your question: There are two topics here, first on a Neutron API level there is no way to define rate-limit for ports (at least that i know of).

Re: [openstack-dev] OpenStack 2015.1.0 for Debian Sid and Jessie

2015-05-15 Thread Thomas Goirand
On 05/15/2015 10:37 AM, neil.jer...@metaswitch.com wrote: Out of interest, have you done this by re-releasing the Ubuntu packaging? Or have you taken an independent approach? Regards, Neil It's been since Folsom that I've released packages on my own in Debian. Absolutely zero

Re: [openstack-dev] [surge] Introducing Surge - rapid deploy/scale stream processing systems on OpenStack

2015-05-15 Thread Jay Pipes
I think the surge is in the number of projects that Cisco seems to be pushing out recently ;) On 05/15/2015 01:13 PM, Debojyoti Dutta wrote: Hi, It gives me a great pleasure to introduce Surge - a system to rapidly deploy and scale a stream processing system on OpenStack. It leverages Vagrant

Re: [openstack-dev] [nova][cinder] can we deprecate the volume CLIs in novaclient?

2015-05-15 Thread Everett Toews
On May 15, 2015, at 10:28 AM, John Griffith john.griffi...@gmail.commailto:john.griffi...@gmail.com wrote: On Thu, May 14, 2015 at 8:29 PM, Matt Riedemann mrie...@linux.vnet.ibm.commailto:mrie...@linux.vnet.ibm.com wrote: This came up while talking about bug 1454369 [1]. This also came up at

Re: [openstack-dev] [nova][cinder] can we deprecate the volume CLIs in novaclient?

2015-05-15 Thread Jay Pipes
On 05/14/2015 10:29 PM, Matt Riedemann wrote: This came up while talking about bug 1454369 [1]. This also came up at one point in kilo when we found out the volume CLIs in novaclient didn't work at one point and we broke the cells devstack exercises job because of it. python-novaclient uses

Re: [openstack-dev] [nova][cinder] can we deprecate the volume CLIs in novaclient?

2015-05-15 Thread Sean Dague
On 05/15/2015 12:28 PM, Everett Toews wrote: On May 15, 2015, at 10:28 AM, John Griffith john.griffi...@gmail.com mailto:john.griffi...@gmail.com wrote: On Thu, May 14, 2015 at 8:29 PM, Matt Riedemann mrie...@linux.vnet.ibm.com mailto:mrie...@linux.vnet.ibm.com wrote: This came up

Re: [openstack-dev] [neutron][lbaas]LBaaSv2 movies / links

2015-05-15 Thread Samuel Bercovici
Here is an example: https://filepile.radware.com/files/5ba-e02-c39 From: Samuel Bercovici [mailto:samu...@radware.com] Sent: Friday, May 15, 2015 7:06 PM To: Vijay Venkatachalam; OpenStack Development Mailing List (not for usage questions); Evgeny Fedoruk; Adam Harwell; Kyle Mestery; Brandon

Re: [openstack-dev] [nova][heat] sqlalchemy-migrate tool to alembic

2015-05-15 Thread Mike Bayer
On 5/14/15 10:34 PM, Angus Salkeld wrote: Thanks. Would you suggest we hold off moving to alembic (in Heat) until you have this ironed out? I just want to make sure we don't do this prematurely. If you need to support running an Alembic-version of Heat against an existing database in

Re: [openstack-dev] [all] [tc] A way for Operators/Users to submit feature requests

2015-05-15 Thread John Garbutt
On 14 May 2015 at 21:55, Boris Pavlovic bo...@pavlovic.me wrote: Robert, So I think we should explicitly leave room for experimentation and divergence, but also encourage a single common path - don't be different to be different, be difference because it is important in this specific case.

Re: [openstack-dev] [nova][heat] sqlalchemy-migrate tool to alembic

2015-05-15 Thread Henry Gessau
On Fri, May 15, 2015, Mike Bayer mba...@redhat.com wrote: On 5/15/15 9:31 AM, Doug Hellmann wrote: This seems more complicated than needed. If we just stop writing the sqlalchemy-migrate scripts and don't change them, then for 1 cycle we have to run both sets of migrations and after that

Re: [openstack-dev] [Openstack-operators] [nova] Can we bump MIN_LIBVIRT_VERSION to 1.2.2 in Liberty?

2015-05-15 Thread John Garbutt
On 15 May 2015 at 12:28, Daniel P. Berrange berra...@redhat.com wrote: One other thing I should have mentioned is that we don't actually have one single minimum libvirt version. We actually have a couple of different minimum versions based on either the architecture or the hypervisor. For

Re: [openstack-dev] [Openstack-operators] [nova] Can we bump MIN_LIBVIRT_VERSION to 1.2.2 in Liberty?

2015-05-15 Thread Daniel P. Berrange
On Fri, May 15, 2015 at 05:27:35PM +0100, John Garbutt wrote: On 15 May 2015 at 11:51, Daniel P. Berrange berra...@redhat.com wrote: On Thu, May 14, 2015 at 02:23:25PM -0500, Matt Riedemann wrote: The minimum required version of libvirt in the driver is 0.9.11 still [1]. We've been gating

Re: [openstack-dev] [neutron][lbaas]LBaaSv2 movies / links

2015-05-15 Thread Doug Wiegley
I would say: 1-2 minutes, no audio, mp4, must highlight lbaas v2 or v2/v1. Anyone is welcome, even encouraged, to submit, likely up until about Sunday I’m guessing. Thanks, doug On May 15, 2015, at 10:05 AM, Samuel Bercovici samu...@radware.com wrote: Was thinking 1-2 minutes. Tomorrow

Re: [openstack-dev] [security] Consensus on security guidance license

2015-05-15 Thread Paul McMillan
Works for me. -Paul On May 15, 2015 10:03 AM, Murphy, Grant grant.mur...@hp.com wrote: At the last OSSG mid-cycle a number of us put together some security guidelines and best practices aimed at developers. We are now attempting to migrate this content to the https://security.openstack.org

[openstack-dev] [security] Consensus on security guidance license

2015-05-15 Thread Murphy, Grant
At the last OSSG mid-cycle a number of us put together some security guidelines and best practices aimed at developers. We are now attempting to migrate this content to the https://security.openstack.org page. However we need to come to agreement on how to license this content. I’m proposing

[openstack-dev] [surge] Introducing Surge - rapid deploy/scale stream processing systems on OpenStack

2015-05-15 Thread Debojyoti Dutta
Hi, It gives me a great pleasure to introduce Surge - a system to rapidly deploy and scale a stream processing system on OpenStack. It leverages Vagrant and Ansible, and supports both OpenStack as well as the local mode (with VirtualBox). https://github.com/CiscoSystems/surge Hope to see a lot

Re: [openstack-dev] [Openstack-operators] [nova] Can we bump MIN_LIBVIRT_VERSION to 1.2.2 in Liberty?

2015-05-15 Thread John Garbutt
On 15 May 2015 at 17:41, Daniel P. Berrange berra...@redhat.com wrote: On Fri, May 15, 2015 at 05:27:35PM +0100, John Garbutt wrote: On 15 May 2015 at 11:51, Daniel P. Berrange berra...@redhat.com wrote: On Thu, May 14, 2015 at 02:23:25PM -0500, Matt Riedemann wrote: The minimum required

Re: [openstack-dev] [nova][heat] sqlalchemy-migrate tool to alembic

2015-05-15 Thread Mike Bayer
On 5/15/15 9:31 AM, Doug Hellmann wrote: This seems more complicated than needed. If we just stop writing the sqlalchemy-migrate scripts and don't change them, then for 1 cycle we have to run both sets of migrations and after that we can just run alembic. Then we have a forever-in-perpetuity

Re: [openstack-dev] Barbican : Unable to execute the curl command for uploading/retrieving the secrets with the latest Barbican code.

2015-05-15 Thread Asha Seshagiri
Thanks John for providing the pointer to the fix and also thank all contributors for providing the quick fix. Thanks and Regards, Asha Seshagiri On Fri, May 15, 2015 at 3:30 PM, John Vrbanac john.vrba...@rackspace.com wrote: Asha, We landed the fix in:

Re: [openstack-dev] [neutron] Neutron API rate limiting

2015-05-15 Thread Tidwell, Ryan
The Nova analog in Neutron is specifically what I was interested in. Makes perfect sense. Thanks! -Ryan -Original Message- From: Russell Bryant [mailto:rbry...@redhat.com] Sent: Friday, May 15, 2015 11:54 AM To: openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] [neutron]

Re: [openstack-dev] Barbican : Unable to execute the curl command for uploading/retrieving the secrets with the latest Barbican code.

2015-05-15 Thread John Vrbanac
Asha, We landed the fix in: https://review.openstack.org/#/c/183391/ Hopefully, that should address the problem you've been seeing. Thanks! John Vrbanac On Thu, 2015-05-14 at 18:14 -0500, Douglas Mendizábal wrote: Hi Asha, The reason we support an Unauthenticated Context in Barbican is

Re: [openstack-dev] [neutron] Neutron API rate limiting

2015-05-15 Thread Tidwell, Ryan
From: Carl Baldwin [c...@ecbaldwin.net] Sent: Thursday, May 14, 2015 9:10 PM To: OpenStack Development Mailing List Subject: Re: [openstack-dev] [neutron] Neutron API rate limiting @Gal, your proposal sounds like packet or flow rate limiting of data

Re: [openstack-dev] [neutron] Neutron API rate limiting

2015-05-15 Thread Russell Bryant
On 05/14/2015 08:32 PM, Kevin Benton wrote: There isn't anything in neutron at this point that does that. I think the assumption so far is that you could rate limit at your load balancer or whatever distributes requests to neutron servers. Right, which a lot of sense given the horizontally

Re: [openstack-dev] [neutron] Neutron API rate limiting

2015-05-15 Thread Rick Jones
On May 14, 2015 9:26 PM, Gal Sagie gal.sa...@gmail.commailto:gal.sa...@gmail.com wrote: Hello Ryan, We have proposed a spec to liberty to add rate limit functionality to security groups [1]. We see two big use cases for it, one as you mentioned is DDoS for east-west and another is brute force

Re: [openstack-dev] [openstackclient] About my blueprint every-time-record-log-in-file

2015-05-15 Thread Dean Troyer
On Fri, May 15, 2015 at 7:04 AM, Fujita, Daisuke fuzita.dais...@jp.fujitsu.com wrote: I would like to implement following my buleprint. https://blueprints.launchpad.net/python-openstackclient/+spec/every-time-record-log-in-file We don't always follow the blueprint process rigidly, but

[openstack-dev] [api] http guideline outline plus ad-hoc plane sprint

2015-05-15 Thread Sean Dague
After many interesting conversations with jaypipes and cdent the last couple of weeks, and a few edge case API change patches in Nova, I decided to try to jump in and help provide context and an outline for the http guidelines in the spec. This is a standard that's clocking in on 20 years, there

Re: [openstack-dev] [neutron][lbaas]LBaaSv2 movies / links

2015-05-15 Thread Samuel Bercovici
Bad link. Here is the correct one: https://filepile.radware.com/files/2cd-953-809 From: Samuel Bercovici [mailto:samu...@radware.com] Sent: Friday, May 15, 2015 7:48 PM To: OpenStack Development Mailing List (not for usage questions); Vijay Venkatachalam; Evgeny Fedoruk; Adam Harwell; Kyle

[openstack-dev] [ceph] Introducing CephEWS

2015-05-15 Thread Debojyoti Dutta
Hi! Its a pleasure to introduce CephEWS, an awesome dashboard for Ceph with a twist - it has ceph health checks and warnings built in along with OSD and CRUSH map viz etc. https://github.com/CiscoSystems/cephEWS Hope to see a lot of pull requests and feedback! thx -Debo~

Re: [openstack-dev] [Openstack-operators] [nova] Can we bump MIN_LIBVIRT_VERSION to 1.2.2 in Liberty?

2015-05-15 Thread John Garbutt
On 15 May 2015 at 11:51, Daniel P. Berrange berra...@redhat.com wrote: On Thu, May 14, 2015 at 02:23:25PM -0500, Matt Riedemann wrote: The minimum required version of libvirt in the driver is 0.9.11 still [1]. We've been gating against 1.2.2 in Ubuntu Trusty 14.04 since Juno. The libvirt

Re: [openstack-dev] devstack local.conf file fro sriov pci nic passthrough

2015-05-15 Thread Robert Li (baoli)
Hi, On your controller node, you can add in local.conf: [[post-config|$NOVA_CONF]] [DEFAULT] scheduler_default_filters = RetryFilter, AvailabilityZoneFilter, RamFilter, ComputeFilter, ComputeCapabilitiesFilter, ImagePropertiesFilter, ServerGroupAntiAffinityFilter, ServerGroupAffinityFilter,

Re: [openstack-dev] [nova][heat] sqlalchemy-migrate tool to alembic

2015-05-15 Thread Mike Bayer
On 5/15/15 1:13 PM, Mike Bayer wrote: On 5/15/15 9:31 AM, Doug Hellmann wrote: This seems more complicated than needed. If we just stop writing the sqlalchemy-migrate scripts and don't change them, then for 1 cycle we have to run both sets of migrations and after that we can just run

Re: [openstack-dev] [surge] Introducing Surge - rapid deploy/scale stream processing systems on OpenStack

2015-05-15 Thread Joe Gordon
On Fri, May 15, 2015 at 10:13 AM, Debojyoti Dutta ddu...@gmail.com wrote: Hi, It gives me a great pleasure to introduce Surge - a system to rapidly deploy and scale a stream processing system on OpenStack. It leverages Vagrant and Ansible, and supports both OpenStack as well as the local

[openstack-dev] [Fuel][Library] Binary Files Installation Finally Moved Into Packages

2015-05-15 Thread Vladimir Kuklin
Folks As I promised before we merged the code that builds packages for binary files like OCF scripts and other things. Starting from now, if you want to put files like OCF scripts, some binaries or services onto the node with puppet - do not do it. Simply use debian/rules or RPM specs to build a

Re: [openstack-dev] [nova][all] Architecture Diagrams in ascii art?

2015-05-15 Thread Joe Gordon
On Tue, May 12, 2015 at 5:25 AM, Thierry Carrez thie...@openstack.org wrote: Sean Dague wrote: They can be modified if you provide source files, or use a source oriented format like SVG, or ISO standard ODG (used by OpenOffice / LibreOffice). There is a reason the spider diagram has ended

Re: [openstack-dev] [nova][all] Architecture Diagrams in ascii art?

2015-05-15 Thread Joe Gordon
On Thu, May 14, 2015 at 3:52 AM, John Garbutt j...@johngarbutt.com wrote: On 12 May 2015 at 20:33, Sean Dague s...@dague.net wrote: On 05/12/2015 01:12 PM, Jeremy Stanley wrote: On 2015-05-12 10:04:11 -0700 (-0700), Clint Byrum wrote: It's a nice up side. However, as others have pointed