Re: [openstack-dev] [heat][neutron] OS::Heat::AutoScalingGroup and OS::Neutron::PoolMember?

2014-03-13 Thread Stephen Gran
: { SecurityGroupIngress: [ { SourceSecurityGroupId: mumbleuuid, IpProtocol: tcp, ToPort: 8080, FromPort: 8080 }, ], GroupDescription: Test } } } } Cheers, -- Stephen Gran Senior Systems Integrator

Re: [openstack-dev] [neutron][rootwrap] Performance considerations, sudo?

2014-03-07 Thread Stephen Gran
rootwrap (with its CPython startup overhead) once and send new commands to be run later over UNIX socket. This way we won't need learn new language (C/C++), adopt new toolchain (RPython, Cython, whatever else) and still get secure way to run commands with root priviledges. -- Stephen Gran Senior

Re: [openstack-dev] stored userdata

2014-03-07 Thread Stephen Gran
to go back and retrieve it. I think this would be a regression, and be unexpected behavior. Cheers, -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email. -- Visit

Re: [openstack-dev] Proposal to move from Freenode to OFTC

2014-03-04 Thread Stephen Gran
have a longer plan ? Like advertisement bots that would advise every n hours to join the right servers ? Why not just set /topic to tell people to connect to OFTC and join there? Cheers, -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing

Re: [openstack-dev] [oslo] memoizer aka cache

2014-01-23 Thread Stephen Gran
? -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email. -- Visit theguardian.com On your mobile, download the Guardian iPhone app theguardian.com/iphone and our iPad

Re: [openstack-dev] [Neutron] Partially Shared Networks

2014-01-13 Thread Stephen Gran
://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email. -- Visit theguardian.com On your mobile, download the Guardian

Re: [openstack-dev] [Nova] [Neutron] How do we know a host is ready to have servers scheduled onto it?

2013-12-12 Thread Stephen Gran
, the neutron openvswitch agent running on the same hardware, although that being in good shape is necessary to be able to start instances and have them be useful. This kind of cross-project state coordination doesn't exist right now, AFAIK. Cheers, -- Stephen Gran Senior Systems Integrator

Re: [openstack-dev] [Neutron][LBaaS] Vote required for certificate as first-class citizen - SSL Termination (Revised)

2013-12-05 Thread Stephen Gran
Stephen, To make sure I understand, which model is fine Basic/Simple or New. Thanks, -Sam. -Original Message- From: Stephen Gran [mailto:stephen.g...@theguardian.com] Sent: Thursday, December 05, 2013 8:22 AM To: openstack-dev@lists.openstack.org Subject: Re: [openstack-dev

Re: [openstack-dev] [heat] Heat API v2 - Removal of template_url?

2013-12-05 Thread Stephen Gran
, -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email. -- Visit theguardian.com On your mobile, download the Guardian iPhone app theguardian.com/iphone and our iPad

Re: [openstack-dev] [Neutron][LBaaS] Vote required for certificate as first-class citizen - SSL Termination (Revised)

2013-12-04 Thread Stephen Gran
-- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email. -- Visit theguardian.com On your mobile, download the Guardian iPhone app theguardian.com/iphone and our iPad edition

Re: [openstack-dev] [Neutron] DHCP Agent Reliability

2013-12-03 Thread Stephen Gran
into the API). Doing all of those tasks, and doing it largely single threaded, is just asking for overload. Cheers, -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email

Re: [openstack-dev] [Neutron][LBaaS] SSL Termination write-up

2013-11-20 Thread Stephen Gran
With the default being c). Cheers, -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email. -- Visit theguardian.com On your mobile, download the Guardian iPhone app theguardian.com

Re: [openstack-dev] [Neutron][LBaaS] SSL Termination write-up

2013-11-20 Thread Stephen Gran
as plain fields as they felt that this is not secured enough. Do you say, that you are OK with storing SSL certificates in the OpenStack database? -Sam. -Original Message- From: Stephen Gran [mailto:stephen.g...@theguardian.com] Sent: Wednesday, November 20, 2013 10:15 AM

Re: [openstack-dev] [Neutron][LBaaS] SSL Termination write-up

2013-11-20 Thread Stephen Gran
pattern - we have a dev wildcard cert that is self-signed, and is used for lots of VIPs. When we get a system that can store certificates (ex: Barbican), we will add support to it in the LBaaS model. It probably doesn't need anything that complicated, does it? Cheers, -- Stephen Gran Senior Systems

Re: [openstack-dev] [Neutron][LBaaS] Loadbalancer instance design.

2013-11-15 Thread Stephen Gran
updates, so is a bit racy. Cheers, -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email. -- Visit theguardian.com On your mobile, download the Guardian iPhone app

Re: [openstack-dev] [Heat] Continue discussing multi-region orchestration

2013-11-15 Thread Stephen Gran
to reach some endpoints, they'll set up a local heat that can reach those endpoints and deploy their stack through that one, right? Cheers, -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email

Re: [openstack-dev] how can I know a new instance is created from the code ?

2013-11-15 Thread Stephen Gran
://ask.openstack.org/en/question/2224/novaquantum-notifications-in-rabbitmq/ for an example. Cheers, -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email. -- Visit

Re: [openstack-dev] [scheduler] [heat] Policy specifics

2013-09-27 Thread Stephen Gran
to know about these). Cheers, -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email. -- Visit theguardian.com On your mobile, download the Guardian iPhone app

Re: [openstack-dev] [scheduler] [heat] Policy specifics

2013-09-27 Thread Stephen Gran
On 27/09/13 14:27, Mike Spreitzer wrote: Stephen Gran stephen.g...@theguardian.com wrote on 09/27/2013 04:26:37 AM: I think that your use case for anti-collocation (which is a very good and important use case, don't get me wrong) is covered by using availability zones/cells/regions

[openstack-dev] [Neutron] VIP for LBaaS on same port?

2013-09-05 Thread Stephen Gran
. This would also give us the flexibility to attach security groups to that single port more easily, but that's a nice side effect. Does this sound possible? What would be the best way of achieving this, given the way things work currently? Cheers, -- Stephen Gran Senior Systems Integrator

Re: [openstack-dev] [Neutron] VIP for LBaaS on same port?

2013-09-05 Thread Stephen Gran
to look at :) Cheers, -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email. -- Visit theguardian.com On your mobile, download the Guardian iPhone app

Re: [openstack-dev] [neutron] Why is network and subnet modeled separately?

2013-08-15 Thread Stephen Gran
run dual stacked, ie, ipv4 and ipv6. Supporting these use cases necessitates modeling them separately. Cheers, -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email

Re: [openstack-dev] [Neutron] FWaaS: Support for explicit commit

2013-08-03 Thread Stephen Gran
of the currently committed rules, and also the pending changes. Kindly respond if you have any comments on this. Cheers, -- Stephen Gran Senior Systems Integrator - theguardian.com Please consider the environment before printing this email

Re: [openstack-dev] [keystone] sqlite doesn't support migrations

2013-07-15 Thread Stephen Gran
one release to the next. Why not just change the default for Debian? Sqlite isn't particularly useful for actual deployments anyway. Cheers, -- Stephen Gran Senior Systems Integrator - guardian.co.uk Please consider the environment before printing this email