[openstack-dev] [Keystone] [Horizon] Attribute Mapping GUI for Horizon

2015-08-04 Thread Ioram Schechtman Sette
Hi Marek, Done. ;) Regards, Ioram 2015-08-03 8:07 GMT+01:00 Marek Denis marek.de...@cern.ch: Hi Ioram, How about moving this discussion to the mailing list? Maybe others will find it useful too. cheers, Marek On 02.08.2015 11:28, Ioram Schechtman Sette wrote: Hi Marek, hi all,

Re: [openstack-dev] [Keystone] [Horizon] UI for Keystone dynamic policies editing

2015-08-04 Thread David Chadwick
Hi All Ioram has built a complete set of wireframe policy GUI screens for comment. He has uploaded them to InVision https://openstack.invisionapp.com/share/HQ3QN2123#/screens Please comment on these in InVision regards David On 03/08/2015 21:39, Lin Hua Cheng wrote: Hi Timur, Thanks for

[openstack-dev] [python-neutronclient][neutron] sub-project client extensions

2015-08-04 Thread Fawad Khaliq
Folks, In networking-plumgrid project, we intend to implement client side for some of the vendor specific extensions. Looking at the current implementation for client side for some vendors, I see the code is part of python-neutronclient tree [1]. I do see this change [2] talking about a way to

Re: [openstack-dev] [nova] Thoughts on things that don't make freeze cutoffs

2015-08-04 Thread Davanum Srinivas
+1 to pushing for is creating Nova subteams with their own core reviewers, which would be experts and trusted to +2 on a defined subset of code. Oslo has cores who can +2 any of the oslo libraries and each Oslo library has its own cores as well. We tend to elevate karma quickly for cores between

[openstack-dev] [nova] API for getting connection info from console token

2015-08-04 Thread Radoslav Gerganov
There is an API (os-console-auth-tokens) which returns the connection info which correspond to a given console token. However this API works only for RDP consoles: https://github.com/openstack/nova/blob/master/nova/api/openstack/compute/plugins/v3/console_auth_tokens.py#L49 Why do we have

Re: [openstack-dev] [stable] [infra] How to auto-generate stable release notes

2015-08-04 Thread Thierry Carrez
Doug Hellmann wrote: Excerpts from Robert Collins's message of 2015-08-04 06:43:48 +1200: On 4 August 2015 at 02:46, Alexis Lee alex...@hp.com wrote: Whichever solution we pick - should we also adopt it on master? Naively it sounds useful to be able to generate release notes for master too.

[openstack-dev] [Fuel] SSL for master node API

2015-08-04 Thread Stanislaw Bogatkin
Hi guys, in overall movement of Fuel to use secure sockets we think about wrapping master node UI and API calls to SSL. But there are next caveat: a) fuel-nailgun-agent cannot work via SSL now and need to be rewritten a little. But if it will be rewritten in 7.0 and HTTPS on master node will be

Re: [openstack-dev] [Fuel] SSL for master node API

2015-08-04 Thread Evgeniy L
Hi, +1 to 2nd solution, in this case old environments will work without additional actions. Agents for new environments, CLI and UI will use SSL. But probably for UI we will have to perform redirect on JS level. Thanks, On Tue, Aug 4, 2015 at 1:32 PM, Stanislaw Bogatkin sbogat...@mirantis.com

Re: [openstack-dev] [nova] Thoughts on things that don't make freeze cutoffs

2015-08-04 Thread Thierry Carrez
John Garbutt wrote: [...] Personally I find a mix of coding and reviewing good to keep a decent level of empathy and sanity. I don't have time for any coding this release (only a bit of documenting), and its not something I can honestly recommend as a best practice. If people don't maintain a

[openstack-dev] [nova] Nova API improvement plan

2015-08-04 Thread Sean Dague
On the plane home from the Nova midcycle meetup I spent a chunk of time reading our API docs that are now in tree: https://github.com/openstack/nova/blob/master/doc/source/v2/2.0_server_concepts.rst and it got me concerned that documentation improvements don't seem to be the top priority on the

Re: [openstack-dev] [nova][ironic] Scheduler filtering based on instances

2015-08-04 Thread Jim Rollenhagen
On Tue, Aug 04, 2015 at 09:52:40AM +0100, Lucas Alvares Gomes wrote: Hi, Our initial solution [1] was to simply disable instance queries in the IronicHostManager, as they were never needed, and were painful to execute. But subsequent discussion on IRC brought up some potential (although

Re: [openstack-dev] [Fuel] SSL for master node API

2015-08-04 Thread Vladimir Sharshov
Hi, +1 to 2nd solution too. On Tue, Aug 4, 2015 at 1:45 PM, Evgeniy L e...@mirantis.com wrote: Hi, +1 to 2nd solution, in this case old environments will work without additional actions. Agents for new environments, CLI and UI will use SSL. But probably for UI we will have to perform

Re: [openstack-dev] [Fuel] SSL for master node API

2015-08-04 Thread Sheena Gregson
+1 to #2 *From:* Vladimir Kuklin [mailto:vkuk...@mirantis.com] *Sent:* Tuesday, August 04, 2015 6:25 AM *To:* OpenStack Development Mailing List (not for usage questions) openstack-dev@lists.openstack.org *Subject:* Re: [openstack-dev] [Fuel] SSL for master node API I am for 2nd option for

[openstack-dev] (no subject)

2015-08-04 Thread Mike Kolesnik
On Tue, Aug 4, 2015 at 1:02 PM, Ihar Hrachyshka ihrac...@redhat.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi all, in feature/qos, we use ml2 extension drivers to handle additional qos_policy_id field that can be provided thru API:

Re: [openstack-dev] [designate] and [lbaas] - GSLB API and backend support

2015-08-04 Thread Hayes, Graham
Sure, we need the other cores to merge it - I cannot merge my own change. If you are OK with the current version, you can leave a comment on the pull request, which helps cores decide if the PR is ready. Thanks, Graham On 03/08/15 18:10, Gandhi, Kunal wrote: Hi Graham, Can we have your

Re: [openstack-dev] [python-neutronclient][neutron] sub-project client extensions

2015-08-04 Thread Amir Sadoughi
I started down the path of making a python-neutronclient extension, but got stuck on the lack of support for child resource extensions as described here https://bugs.launchpad.net/python-neutronclient/+bug/1446428. I submitted a bugfix here https://review.openstack.org/#/c/202597/?. Amir

[openstack-dev] [GSLB][GLB] Meeting today @ 16:00 UTC

2015-08-04 Thread Hayes, Graham
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Reminder that we have a meeting today at 16:00 UTC in #openstack-meeting-4 The Agenda is as follows: API Spec: * https://github.com/gslb/gslb-specs/pull/1 * Can cores review + merge? Polaris Abstract: *

[openstack-dev] [nova] [FFE] Feature Freeze Exception Request for 'Volume Snapshot Improvements'

2015-08-04 Thread Deepak Shetty
Hello Nova cores, I would like to request feature freeze exception for the volume snapshot improvements blueprint [1] This bp was proposed in Juno, but could not be implemented then, hence was pushed to Liberty, and the patches [2] for the same have been on review for the last 2+ months

Re: [openstack-dev] [nova] Thoughts on things that don't make freeze cutoffs

2015-08-04 Thread John Garbutt
On 3 August 2015 at 20:44, Jesse Cook jesse.c...@rackspace.com wrote: On 7/29/15, 2:13 PM, Matt Riedemann mrie...@linux.vnet.ibm.com wrote: We talked a bit about this at the nova mid-cycle last week but I can't say I completely remember all of the points made, since I feel like we talked

Re: [openstack-dev] [Openstack-operators] [Neutron][L3] [Large Deployments Team] Representing a networks connected by routers

2015-08-04 Thread Ryan Moats
I will be there for my lightning talk, and I think armax and kevin_benton will be there - it would be good to find some time for us to pow-wow, along with some teleconference so that carl_baldwin and mestery can join in... Ryan Moats (regXboi) Mike Dorman mdor...@godaddy.com wrote on 08/03/2015

[openstack-dev] [Fuel] Console messages in Mirantis 6.1

2015-08-04 Thread Evgeniya Shumakher
Fuel team, One of Fuel 6.1 users found a very annoying bug: I’ve installed new Mirantis 6.1 a couple of weeks ago and I’m seeing the following message on both Controller and Compute node consoles. “netlink: 20 bytes leftover after parsing attributes” There are several references to this

[openstack-dev] [Ceilometer][AODH] Timeout Event Alarms

2015-08-04 Thread Igor Degtiarov
Hi folks, On our meatup we agreed to add timeout event alarms [1](Event-Base Alarming part). In ToDo task Сhoose the optimal way for timeout alerting implementation Now we have two proposition for implementation: - first is to add timeout param in event pipeline (transformer part) [2] --

Re: [openstack-dev] [Fuel] SSL for master node API

2015-08-04 Thread Stanislaw Bogatkin
Seems that second solution is okay. Sebastian, I'll try to fix it before SCF. On Tue, Aug 4, 2015 at 4:25 PM, Sebastian Kalinowski skalinow...@mirantis.com wrote: +1 for option 2) But I have a question: how do we fit with this into the scope of Feature Freeze and Soft Code Freeze this

Re: [openstack-dev] [Openstack-operators] [Neutron][L3] [Large Deployments Team] Representing a networks connected by routers

2015-08-04 Thread Kyle Mestery
Can you also try to have some sort of remote option? I'd like to attend this, and I'd like Carl to try and attend as well. Thanks! On Tue, Aug 4, 2015 at 8:50 AM, Ryan Moats rmo...@us.ibm.com wrote: I will be there for my lightning talk, and I think armax and kevin_benton will be there - it

Re: [openstack-dev] [Fuel] Console messages in Mirantis 6.1

2015-08-04 Thread Alex Schultz
Hey Evgeniya, On Tue, Aug 4, 2015 at 8:59 AM, Evgeniya Shumakher eshumak...@mirantis.com wrote: Fuel team, One of Fuel 6.1 users found a very annoying bug: I’ve installed new Mirantis 6.1 a couple of weeks ago and I’m seeing the following message on both Controller and Compute node

Re: [openstack-dev] [nova] Bug Triage Day - Liberty

2015-08-04 Thread Markus Zoeller
This is a short reminder that we intend to do a bug triage day tomorrow, Wednesday 5th. Would be great if you could participate. Regards, Markus Zoeller (markus_z) John Garbutt j...@johngarbutt.com wrote on 07/29/2015 07:21:31 PM: From: John Garbutt j...@johngarbutt.com To: OpenStack

[openstack-dev] [manila] [third-party][qa]: Tempest plugin concept: 3rd party CI

2015-08-04 Thread Marc Koderer
Hello Manila team, as discussed in the Manila mid-cycle we want to move forward with the tempest plugin porting. The initial patch is already up and ready for review [1]. For more details please see [2]. Please note that 3rd party CI systems may need to be adapted. All tests are currently moved

Re: [openstack-dev] [Keystone][Fernet] HA SQL backend for Fernet keys

2015-08-04 Thread Boris Bobrov
On Monday 03 August 2015 21:05:00 David Stanek wrote: On Sat, Aug 1, 2015 at 8:03 PM, Boris Bobrov bbob...@mirantis.com wrote: On Sat, Aug 1, 2015 at 3:41 PM, Clint Byrum cl...@fewbar.com wrote: This too is overly complex and will cause failures. If you replace key 0, you will

Re: [openstack-dev] [CI]How to set proxy for nodepool

2015-08-04 Thread Xie, Xianshan
Hi Ramy, Thanks for your help. I have already confirmed proxy setting again, and it works fine(no matter whether the NODEPOOL_ variables are declared or not): 1) not only in the host machine on which DIB run, 2) but also in the first half part of DIB(before the DIB running chroot).

Re: [openstack-dev] [Keystone][Fernet] HA SQL backend for Fernet keys

2015-08-04 Thread Andrew Beekhof
On 3 Aug 2015, at 8:02 pm, Sergii Golovatiuk sgolovat...@mirantis.com wrote: Hi, I agree with Bogdan that key rotation procedure should be part of HA solution. These things don’t usually have to be an either/or situation. Why not create one script that does the work and can be called

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Duncan Thomas
On 3 August 2015 at 20:53, Clint Byrum cl...@fewbar.com wrote: Excerpts from Devananda van der Veen's message of 2015-08-03 08:53:21 -0700: Also on a side note, I think Cinder's need for this is really subtle, and one could just accept that sometimes it's going to break when it does two

Re: [openstack-dev] [devstack][neutron] How to give nested VM access to outside network?

2015-08-04 Thread Andreas Scheuring
Can you try answer 1 of [1]? I've never tried it, but I heard from folks who configured it like that. With this masquerading, your vm should be able to reach your 192.x network. But as it's NAT it won't work the other way round (e.g. establish a connection from outside into your vm) The proper

Re: [openstack-dev] [nova][ironic] Scheduler filtering based on instances

2015-08-04 Thread Lucas Alvares Gomes
Hi, Our initial solution [1] was to simply disable instance queries in the IronicHostManager, as they were never needed, and were painful to execute. But subsequent discussion on IRC brought up some potential (although not very likely) use cases where this might not be true. One example was

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Flavio Percoco
On 04/08/15 10:50 +0200, Philipp Marek wrote: If we end up using a DLM then we have to detect when the connection to the DLM is lost on a node and stop all ongoing operations to prevent data corruption. It may not be trivial to do, but we will have to do it in any solution we use, even on my

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Gorka Eguileor
On Tue, Aug 04, 2015 at 10:32:40AM +0300, Duncan Thomas wrote: On 3 August 2015 at 20:53, Clint Byrum cl...@fewbar.com wrote: Excerpts from Devananda van der Veen's message of 2015-08-03 08:53:21 -0700: Also on a side note, I think Cinder's need for this is really subtle, and one could

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Gorka Eguileor
On Tue, Aug 04, 2015 at 05:47:44AM +1000, Morgan Fainberg wrote: On Aug 4, 2015, at 01:42, Fox, Kevin M kevin@pnnl.gov wrote: I'm usually for abstraction layers, but they don't always pay off very well due to catering to the lowest common denominator. Lets clearly define the

[openstack-dev] [neutron][qos][ml2] extensions swallow exceptions

2015-08-04 Thread Ihar Hrachyshka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi all, in feature/qos, we use ml2 extension drivers to handle additional qos_policy_id field that can be provided thru API: http://git.openstack.org/cgit/openstack/neutron/tree/neutron/plugins/ml2 /extensions/qos.py?h=feature/qos What we do in

Re: [openstack-dev] [Fuel] SSL for master node API

2015-08-04 Thread Vladimir Kuklin
I am for 2nd option for 7.0 and for 3rd for 8.0 But I would suggest that we add an option to astute.yaml that a user can set to true to force ssl and then he will need to install updated nailgun-agent for older environments. In this case user will do this concisely, knowing about potential

Re: [openstack-dev] [puppet] Move to rspec-puppet 2.2.0

2015-08-04 Thread Sebastien Badia
On Tue, Jun 09, 2015 at 12:38:55PM (-0700), Cody Herriges wrote: Seemingly simple proposition of moving from rspec-puppet 2.1.0 to 2.2.0 so as to address the issue of helper library loading that is shipped as part of a few of our modules. In my specific case, puppet-vswitch's puppetx library

Re: [openstack-dev] [pbr] [stable] [infra] How to generate .Z version increments on stable/liberty commits

2015-08-04 Thread Doug Hellmann
Excerpts from Clark Boylan's message of 2015-08-03 11:54:06 -0700: On Mon, Aug 3, 2015, at 05:46 AM, Thierry Carrez wrote: Hi everyone, A month ago the stable branch team decided to move away from synchronized stable point releases and enable continuous stable branch delivery instead.

Re: [openstack-dev] [Fuel] SSL for master node API

2015-08-04 Thread Sebastian Kalinowski
+1 for option 2) But I have a question: how do we fit with this into the scope of Feature Freeze and Soft Code Freeze this week? Any ETAs? 2015-08-04 15:06 GMT+02:00 Vitaly Kramskikh vkramsk...@mirantis.com: FYI: There is Strict-Transport-Security

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Gorka Eguileor
On Tue, Aug 04, 2015 at 09:28:58AM +, Fox, Kevin M wrote: Its been explained for Cinder, but not for other OpenStack projects that also have needs in this area. For that, Flavio started a new thread Does OpenStack need a common solution for DLM? We are discussing Cinder specifics on

Re: [openstack-dev] [all] Does OpenStack need a common solution for DLM? (was: Re: [Cinder] A possible solution for HA Active-Active)

2015-08-04 Thread Mark Voelker
On Aug 3, 2015, at 6:09 PM, Flavio Percoco fla...@redhat.com wrote: On 03/08/15 19:48 +0200, Gorka Eguileor wrote: On Mon, Aug 03, 2015 at 03:42:48PM +, Fox, Kevin M wrote: I'm usually for abstraction layers, but they don't always pay off very well due to catering to the lowest common

Re: [openstack-dev] [nova] Thoughts on things that don't make freeze cutoffs

2015-08-04 Thread Sahid Orentino Ferdjaoui
On Tue, Aug 04, 2015 at 12:54:34PM +0200, Thierry Carrez wrote: John Garbutt wrote: [...] Personally I find a mix of coding and reviewing good to keep a decent level of empathy and sanity. I don't have time for any coding this release (only a bit of documenting), and its not something I

Re: [openstack-dev] [Fuel] Console messages in Mirantis 6.1

2015-08-04 Thread Sergii Golovatiuk
Evgeniya, These bug doesn't affect any functionality. These bugs are warnings only that's why they were moved to 8.0. In 8.0 we are switching dynamically built bootstrap based on Ubuntu 14.04 or Centos 7. These warnings will have gone automatically. -- Best regards, Sergii Golovatiuk, Skype

Re: [openstack-dev] [fuel][fuel-library] Librarian changes

2015-08-04 Thread Alex Schultz
To follow up on the merge schedule as we've merged some items and the apt mirror issue has been resolved. Friday 7/31 (COMPLETE) librarian - https://review.openstack.org/#/c/202763/ stdlib - https://review.openstack.org/#/c/203386/ Monday 8/3 (COMPLETE) concat -

Re: [openstack-dev] [Keystone][Fernet] HA SQL backend for Fernet keys

2015-08-04 Thread Boris Bobrov
On Tuesday 04 August 2015 08:06:21 Lance Bragstad wrote: On Tue, Aug 4, 2015 at 1:37 AM, Boris Bobrov bbob...@mirantis.com wrote: On Monday 03 August 2015 21:05:00 David Stanek wrote: On Sat, Aug 1, 2015 at 8:03 PM, Boris Bobrov bbob...@mirantis.com wrote: Also, come on, does

[openstack-dev] [all][api] New API Guidelines read for cross project review

2015-08-04 Thread michael mccune
hey all, we have 2 API Guidelines that are ready for final review. 1. No project uses f_ prefix in filter params https://review.openstack.org/#/c/198547/ 2. RFC 5789 doesn't specify certain uses of PUT https://review.openstack.org/#/c/199597/ if the API Working Group hasn't received any

Re: [openstack-dev] [Keystone][Fernet] HA SQL backend for Fernet keys

2015-08-04 Thread Lance Bragstad
On Tue, Aug 4, 2015 at 9:28 AM, Boris Bobrov bbob...@mirantis.com wrote: On Tuesday 04 August 2015 08:06:21 Lance Bragstad wrote: On Tue, Aug 4, 2015 at 1:37 AM, Boris Bobrov bbob...@mirantis.com wrote: On Monday 03 August 2015 21:05:00 David Stanek wrote: On Sat, Aug 1, 2015 at 8:03

Re: [openstack-dev] [Openstack-operators] [Neutron][L3] [Large Deployments Team] Representing a networks connected by routers

2015-08-04 Thread Mike Dorman
Ok, cool. We plan to discuss this during the LDT time slot at 1330-1500 Pacific on Tuesday 8/18. We can have this as the first agenda item so there’s a defined start time for those who are remote. I'll take ownership of setting up a hangout (or whatever.) Do people have a preference on what

[openstack-dev] Hyper-V 2008 R2 support

2015-08-04 Thread Alessandro Pilotti
Hi guys, Just a quick note on the Windows editions support matrix updates for the Nova Hyper-V driver and Neutron networking-hyperv ML2 agent: We are planning to drop legacy Windows Server / Hyper-V Server 2008 R2 support starting with Liberty. Windows Server / Hyper-V Server 2012 and above

Re: [openstack-dev] [Openstack-operators] [Neutron][L3] [Large Deployments Team] Representing a networks connected by routers

2015-08-04 Thread Kyle Mestery
Google Hangout should work fine! And Carl and I will both be at Linuxcon and together, so we can dial in together. This time should work for us, so thanks for taking us into consideration Mike! Kyle On Tue, Aug 4, 2015 at 9:29 AM, Mike Dorman mdor...@godaddy.com wrote: Ok, cool. We plan to

Re: [openstack-dev] [nova] Nova API improvement plan

2015-08-04 Thread Anne Gentle
On Tue, Aug 4, 2015 at 7:48 AM, Sean Dague s...@dague.net wrote: On the plane home from the Nova midcycle meetup I spent a chunk of time reading our API docs that are now in tree: https://github.com/openstack/nova/blob/master/doc/source/v2/2.0_server_concepts.rst and it got me concerned that

Re: [openstack-dev] [nova] Proposal for an Experiment

2015-08-04 Thread Ed Leafe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 08/03/2015 02:24 PM, Jesse Cook wrote: Performance tests against 1000 node clusters being setup by OSIC? Sounds like you have a playground for your tests. Unfortunately, the consensus of the nova cores during the mid-cycle meetup was that

Re: [openstack-dev] Hyper-V 2008 R2 support

2015-08-04 Thread Daniel P. Berrange
On Tue, Aug 04, 2015 at 02:34:19PM +, Alessandro Pilotti wrote: Hi guys, Just a quick note on the Windows editions support matrix updates for the Nova Hyper-V driver and Neutron networking-hyperv ML2 agent: We are planning to drop legacy Windows Server / Hyper-V Server 2008 R2

Re: [openstack-dev] Would people see a value in the cve-check-tool?

2015-08-04 Thread Reshetova, Elena
Hi Adam, Thank you for your suggestion! I will send also this proposal to openstack-security@. I have previously attached the wrapper python class to the email, but it seems that it didn’t reach people. Let me try again (now in a form of an archive) and see if it goes through this time.

Re: [openstack-dev] [pbr] [stable] [infra] How to generate .Z version increments on stable/liberty commits

2015-08-04 Thread Thierry Carrez
Clark Boylan wrote: On Mon, Aug 3, 2015, at 05:46 AM, Thierry Carrez wrote: In order to make this work, it looks like we'd require: * pbr changes so that it supports a mode where every commit on the branch increments .Z * infra changes to automatically push the corresponding tag when the

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Gorka Eguileor
On Mon, Aug 03, 2015 at 06:12:23PM +, Fox, Kevin M wrote: For example, to parallel the conversation with databases: We want a database. Well, that means mongodb, postgres, mysql, berkeleydb, etc Oh, well, I need it to be a relational db, Well, that means postgresq, mysql,

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Philipp Marek
If we end up using a DLM then we have to detect when the connection to the DLM is lost on a node and stop all ongoing operations to prevent data corruption. It may not be trivial to do, but we will have to do it in any solution we use, even on my last proposal that only uses the DB in

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Fox, Kevin M
Its been explained for Cinder, but not for other OpenStack projects that also have needs in this area. Thanks, Kevin From: Gorka Eguileor Sent: Tuesday, August 04, 2015 1:39:07 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re:

Re: [openstack-dev] [Keystone][Fernet] HA SQL backend for Fernet keys

2015-08-04 Thread Lance Bragstad
On Tue, Aug 4, 2015 at 1:37 AM, Boris Bobrov bbob...@mirantis.com wrote: On Monday 03 August 2015 21:05:00 David Stanek wrote: On Sat, Aug 1, 2015 at 8:03 PM, Boris Bobrov bbob...@mirantis.com wrote: On Sat, Aug 1, 2015 at 3:41 PM, Clint Byrum cl...@fewbar.com wrote: This too is

Re: [openstack-dev] [Fuel] SSL for master node API

2015-08-04 Thread Vitaly Kramskikh
FYI: There is Strict-Transport-Security https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security header which can also be useful here (unless we want to make SSL for master node optional) 2015-08-04 15:07 GMT+03:00 Vladimir Sharshov vshars...@mirantis.com: Hi, +1 to 2nd solution too. On

[openstack-dev] [Fuel] Console messages in Mirantis 6.1

2015-08-04 Thread Evgeniya Shumakher
Fuel team, One of Fuel 6.1 users found a very annoying bug: I’ve installed new Mirantis 6.1 a couple of weeks ago and I’m seeing the following message on both Controller and Compute node consoles. “netlink: 20 bytes leftover after parsing attributes” There are several references to this

Re: [openstack-dev] [Keystone] [Horizon] UI for Keystone dynamic policies editing

2015-08-04 Thread Ioram Schechtman Sette
Hi All, The correct link is: https://openstack.invisionapp.com/share/9Z3RI8OD7#/screens Regards, Ioram 2015-08-04 11:42 GMT+01:00 David Chadwick d.w.chadw...@kent.ac.uk: Hi All Ioram has built a complete set of wireframe policy GUI screens for comment. He has uploaded them to InVision

Re: [openstack-dev] [neutron][qos][ml2] extensions swallow exceptions

2015-08-04 Thread Mike Kolesnik
Don't know why subject wasn't set automatically.. On Tue, Aug 4, 2015 at 3:30 PM, Mike Kolesnik mkole...@redhat.com wrote: On Tue, Aug 4, 2015 at 1:02 PM, Ihar Hrachyshka ihrac...@redhat.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi all, in feature/qos, we use ml2

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Joshua Harlow
Duncan Thomas wrote: On 3 August 2015 at 20:53, Clint Byrum cl...@fewbar.com mailto:cl...@fewbar.com wrote: Excerpts from Devananda van der Veen's message of 2015-08-03 08:53:21 -0700: Also on a side note, I think Cinder's need for this is really subtle, and one could just

Re: [openstack-dev] Hyper-V 2008 R2 support

2015-08-04 Thread Alessandro Pilotti
On 04 Aug 2015, at 17:56, Daniel P. Berrange berra...@redhat.com wrote: On Tue, Aug 04, 2015 at 02:34:19PM +, Alessandro Pilotti wrote: Hi guys, Just a quick note on the Windows editions support matrix updates for the Nova Hyper-V driver and Neutron networking-hyperv ML2 agent:

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Joshua Harlow
Philipp Marek wrote: If we end up using a DLM then we have to detect when the connection to the DLM is lost on a node and stop all ongoing operations to prevent data corruption. It may not be trivial to do, but we will have to do it in any solution we use, even on my last proposal that only

Re: [openstack-dev] Would people see a value in the cve-check-tool?

2015-08-04 Thread Matthew Thode
On 08/03/2015 04:08 PM, Reshetova, Elena wrote: Hi, We would like to ask opinions if people find it valuable to include a cve-check-tool into the OpenStack continuous integration process? A tool can be run against the package and module dependencies of OpenStack components and

Re: [openstack-dev] [nova] Thoughts on things that don't make freeze cutoffs

2015-08-04 Thread Sylvain Bauza
Le 4 août 2015 13:18, Davanum Srinivas dava...@gmail.com a écrit : +1 to pushing for is creating Nova subteams with their own core reviewers, which would be experts and trusted to +2 on a defined subset of code. Oslo has cores who can +2 any of the oslo libraries and each Oslo library has

Re: [openstack-dev] [puppet] weekly meeting #45

2015-08-04 Thread Emilien Macchi
On 08/03/2015 04:31 PM, Emilien Macchi wrote: Hello, Here's an initial agenda for our weekly meeting, tomorrow at 1500 UTC in #openstack-meeting-4: https://etherpad.openstack.org/p/puppet-openstack-weekly-meeting-20150804 Please add additional items you'd like to discuss. If our

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Joshua Harlow
Clint Byrum wrote: Excerpts from Devananda van der Veen's message of 2015-08-03 08:53:21 -0700: On Mon, Aug 3, 2015 at 8:41 AM Joshua Harlowharlo...@outlook.com wrote: Clint Byrum wrote: Excerpts from Gorka Eguileor's message of 2015-08-02 15:49:46 -0700: On Fri, Jul 31, 2015 at 01:47:22AM

Re: [openstack-dev] [Neutron][L3] [Large Deployments Team] Representing a networks connected by routers

2015-08-04 Thread Carl Baldwin
On Mon, Aug 3, 2015 at 9:07 PM, Mike Dorman mdor...@godaddy.com wrote: I hope we can move this idea moving forward. I was disappointed to see the spec abandoned. While I think the ship has sailed for Liberty, this is going to be my top priority for for Mitaka. Abandoning the spec may have

Re: [openstack-dev] [Ceilometer][AODH] Timeout Event Alarms

2015-08-04 Thread liusheng
Hi, Maybe the event transformer is needed in some use cases to generate new events or do transformations like the samples handling. but for this timeout event alarming requirement, the 'timeout' of alarms will be various, it not a good idea of changing event_pipeline.yaml to generate new

Re: [openstack-dev] [all] Does OpenStack need a common solution for DLM?

2015-08-04 Thread Joshua Harlow
Morgan Fainberg wrote: On Tue, Aug 4, 2015 at 8:44 AM, Joshua Harlow harlo...@outlook.com mailto:harlo...@outlook.com wrote: Flavio Percoco wrote: On 03/08/15 19:48 +0200, Gorka Eguileor wrote: On Mon, Aug 03, 2015 at 03:42:48PM +, Fox, Kevin M wrote:

[openstack-dev] [neutron][lbaas] Review request for minor updates in NetScaler v2 driver.

2015-08-04 Thread Santosh Sharma
Please find following change list for review. https://review.openstack.org/#/c/194304/ NetScaler CI is up and CI logs for mentioned change list is updated. Thanks Santosh __ OpenStack Development Mailing List (not for

Re: [openstack-dev] [all] Does OpenStack need a common solution for DLM?

2015-08-04 Thread Flavio Percoco
On 04/08/15 21:14 -0700, Joshua Harlow wrote: Morgan Fainberg wrote: On Tue, Aug 4, 2015 at 8:44 AM, Joshua Harlow harlo...@outlook.com mailto:harlo...@outlook.com wrote: Flavio Percoco wrote: On 03/08/15 19:48 +0200, Gorka Eguileor wrote: On Mon, Aug 03, 2015 at

[openstack-dev] [heat][ec2tokens] Questions about ec2tokens under keystone v3 api.

2015-08-04 Thread Ethan Lynn
I post a question to ask.openstack.org but got no answers yet, so I repost it here. https://ask.openstack.org/en/question/79509/heat-autoscaling-aws-authentication-failure-under-keystone-v3/ I'm using kilo codes and we wanna keystone v3 instead of keystone v2 in our product. So we change

Re: [openstack-dev] Proposing Kanagaraj Manickam and Ethan Lynn for heat-core

2015-08-04 Thread Ethan Lynn
Thank you guys! I learns a lot from this project and you guys, and I will keep on contributing codes for this awesome project ;) 2015-07-31 23:33 GMT+08:00 Zane Bitter zbit...@redhat.com: You forgot the [heat] tag ;) On 31/07/15 00:35, Steve Baker wrote: I believe the heat project would

Re: [openstack-dev] [Neutron] Common Base class for agents

2015-08-04 Thread Sukhdev Kapur
We discussed this in ML2 sub-team meeting last week and felt the best approach is to implement this agent in a separate repo. There is already an on-going effort/plan for modular L2 agent. This agent would be a perfect candidate to take on that effort and implement it for macvtap agent. Once

[openstack-dev] [nova] FFE Request - VMware better display names

2015-08-04 Thread Gary Kotton
Hi, I would like to request a FFE for the following BP https://blueprints.launchpad.net/nova/+spec/vmware-better-display-names The code is self contained within the Vmware driver. It enables an vCenter admin to have better visibility of the OpenStack deployment. This is super useful for

[openstack-dev] [QA] Meeting Thursday August 6th at 9:00 UTC

2015-08-04 Thread Ken'ichi Ohmichi
Hi everyone, As Matt said on http://lists.openstack.org/pipermail/openstack-dev/2015-July/070213.html , the alternative time slot of QA meeting is changed to 9:00 UTC. Please reminder that the weekly OpenStack QA team IRC meeting will be tomorrow Thursday, August 6th at 9:00 UTC in the

Re: [openstack-dev] [all] Does OpenStack need a common solution for DLM?

2015-08-04 Thread Morgan Fainberg
On Tue, Aug 4, 2015 at 8:44 AM, Joshua Harlow harlo...@outlook.com wrote: Flavio Percoco wrote: On 03/08/15 19:48 +0200, Gorka Eguileor wrote: On Mon, Aug 03, 2015 at 03:42:48PM +, Fox, Kevin M wrote: I'm usually for abstraction layers, but they don't always pay off very well due to

Re: [openstack-dev] [puppet] Liberty support in Puppet modules: blocked by packaging

2015-08-04 Thread Emilien Macchi
I made progress today: I tested Liberty with our all Puppet modules that have acceptance tests, using RDO trunk (centos) and Liberty Staging (trusty). This is the status of the patches: https://review.openstack.org/#/q/status:open+branch:master+topic:puppet/acceptance-liberty,n,z And the

Re: [openstack-dev] [Ironic] Let's talk about API versions

2015-08-04 Thread Ramakrishnan G
Thanks for giving me a chance to vote. I don't have any experience talking to production/live Ironic using a client and only talk to my own devstack. Personally I vote for a *no* (for such a 1.12) the reasons that have been cited in the previous threads that 1) we need users to be aware of API

Re: [openstack-dev] [murano] [mistral] [yaql] Prepare to Yaql 1.0 release

2015-08-04 Thread Stan Lagun
Dmitry, this depends on how you're going to use yaql. yaql 1.0 has so called legacy mode that is a layer on top of yaql that brings nearly full backward compatibility including some of the things that were wrong in yaql 0.2. Use this mode when backward compatibility is a must. Without it the

Re: [openstack-dev] [CI]How to set proxy for nodepool

2015-08-04 Thread Asselin, Ramy
Hi Xiexs, You might need to configure pip to use your proxy. I added my own element here: cache-devstack/install.d/98-setup-pip Basically: set -eux mkdir -p /root/.pip/ cat EOF /root/.pip/pip.conf [global] proxy = your proxy EOF cp -f /root/.pip/pip.conf /etc/ Ramy From: Xie, Xianshan

Re: [openstack-dev] [mistral] [murano] An online YAQL evaluator

2015-08-04 Thread Stan Lagun
Dmitry, yaql 1.0 has both str() and len() and much much more so there is no need to support them explicitly since Mistral is going to switch to yaql 1.0 and yaqluator.com is going to do the same Sincerely yours, Stan Lagun Principal Software Engineer @ Mirantis sla...@mirantis.com On Tue, Aug

Re: [openstack-dev] [Keystone] [Horizon] Federated Login

2015-08-04 Thread Jamie Lennox
- Original Message - From: Steve Martinelli steve...@ca.ibm.com To: OpenStack Development Mailing List (not for usage questions) openstack-dev@lists.openstack.org Sent: Wednesday, August 5, 2015 3:59:34 AM Subject: Re: [openstack-dev] [Keystone] [Horizon] Federated Login

Re: [openstack-dev] Would people see a value in the cve-check-tool?

2015-08-04 Thread Reshetova, Elena
Arguably also 3. lots of CVEs which aren't applicable for some reason, so we likely need a means to whitelist those and filter them from the report. cve-check-tool supports whitelisting and won't report the CVEs that have been marked as ignore. The temporal faux format that I am filling in the

Re: [openstack-dev] [Neutron][L3] Representing a networks connected by routers

2015-08-04 Thread Kevin Benton
You're right but in the current model you can't have IP addresses without the network either which is actually the point I'm trying to make. Definitely, but it's not because the network has properties that IPAM depends on. It's only because a subnet has a non-nullable foreign key relationship to

[openstack-dev] [Magnum] Networking Subteam Meeting Update

2015-08-04 Thread Daneyon Hansen (danehans)
All, This week’s Magnum Networking Subteam Meeting will be canceled due to the Midcycle [1]. Sub team meetings [2] will resume on 8/13 at 1800 UTC. We have two container networking sessions on the midcycle agenda. WebEx has been setup if you would like to attend the midcycle remotely. We look

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Fox, Kevin M
Ah. Ok. Thanks. Kevin From: Gorka Eguileor [gegui...@redhat.com] Sent: Tuesday, August 04, 2015 6:33 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [Cinder] A possiblesolutionfor HA

Re: [openstack-dev] [Ironic] Let's talk about API versions

2015-08-04 Thread Jim Rollenhagen
On Mon, Jul 27, 2015 at 01:35:25PM -0700, Jim Rollenhagen wrote: Now we've landed a patch[0] with a new version (1.11) that is not backward compatible. It causes newly added Node objects to begin life in the ENROLL state, rather than AVAILABLE. This is a good thing, and people should want

[openstack-dev] [Neutron] VPNaaS and DVR compatibility

2015-08-04 Thread Sergey Kolekonov
Hi, I'd like to clarify a situation around VPNaaS and DVR compatibility in Neutron. In non-DVR case VMs use a network node to access each other and external network. So with VPNaaS enabled we just have additional setup steps performed on network nodes to establish VPN connection between VMs. With

Re: [openstack-dev] [Cinder] A possible solution for HA Active-Active

2015-08-04 Thread Clint Byrum
Excerpts from Duncan Thomas's message of 2015-08-04 00:32:40 -0700: On 3 August 2015 at 20:53, Clint Byrum cl...@fewbar.com wrote: Excerpts from Devananda van der Veen's message of 2015-08-03 08:53:21 -0700: Also on a side note, I think Cinder's need for this is really subtle, and one

Re: [openstack-dev] [Keystone] [Horizon] Federated Login

2015-08-04 Thread Lance Bragstad
On Tue, Aug 4, 2015 at 10:52 AM, Douglas Fish drf...@us.ibm.com wrote: Hi David, This is a cool looking UI. I've made a minor comment on it in InVision. I'm curious if this is an implementable idea - does keystone support large numbers of 3rd party idps? is there an API to retreive the list

Re: [openstack-dev] [Magnum] Container Networking Spec

2015-08-04 Thread Daneyon Hansen (danehans)
All, The container networking spec below has gone through a fairly significant design change in the past few days. To summarize, Magnum will not create any new network plugins or network-specific abstractions to support container networking. Instead, the spec suggests standardizing on

Re: [openstack-dev] [Keystone] [Horizon] Federated Login

2015-08-04 Thread Lin Hua Cheng
Hi David, There was a similar effort in Kilo to design the flow in the login page for federated login[1]. WebSSO feature[2] was implemented in Kilo, it allows the user to perform federated login by selecting an IdP protocol. This have tested with kerberos and saml2. There is a proposal to

Re: [openstack-dev] [Keystone] [Horizon] Federated Login

2015-08-04 Thread Steve Martinelli
Right, but that API is/should be protected. If we want to list IdPs *before* authenticating a user, we either need: 1) a new API for listing public IdPs or 2) a new policy that doesn't protect that API. Thanks, Steve Martinelli OpenStack Keystone Core From: Lance Bragstad

  1   2   >