Re: [openstack-dev] [nova] [cinder] nova cannot create instance snapshot after ocata upgrade

2017-12-06 Thread Gyorgy Szombathelyi
Hi! > how can i enable the service_token_roles? Add the service role on the service project to the service users (nova, cinder, etc.). > if i cset the service_token_role_required=true for nova, cinder, glance and > neutron nova is unable to start instances. > > i see the curl request form

Re: [openstack-dev] OpenStack-Ansible testing with OpenVSwitch

2017-09-29 Thread Gyorgy Szombathelyi
> > Hello JP, > > Ok, I will do some more testing against the blog post and then hit up the > #openstack-ansible channel. > > I need to finish a presentation on SFC first which is why I am looking into > OpenVSwitch. Hi Michael, If your goal is not openstack-ansible, here's an AIO

Re: [openstack-dev] [ptg] Simplification in OpenStack

2017-09-27 Thread Gyorgy Szombathelyi
Hi, > The install docs still suggest hand configuring machines in 2017. It’s only > after > people fall down that snake pit that they find projects like > TripleO/Ansible/Puppet/Chef, and wonder why everyone doesn’t use this > stuff. I just wondering, too, but about a different thing: the

Re: [openstack-dev] [TripleO][keystone] internal endpoints vs sanity

2017-07-26 Thread Gyorgy Szombathelyi
Hi, > > > > On Mon, Jul 24, 2017 at 10:53 AM, Dmitry Tantsur > wrote: > > > These questions are to the operators, and should be asked on > openstack-operators IMO (maybe with tuning the overall tone to be a bit less > aggressive). > >

[openstack-dev] [Keystone]About auth_uri (again) in devstack

2017-07-21 Thread Gyorgy Szombathelyi
Hi! In the change below: https://review.openstack.org/#/c/458224/ The commit message says that auth_uri is not a keystonemiddleware option. However, it is: http://git.openstack.org/cgit/openstack/keystonemiddleware/tree/keystonemiddleware/auth_token/__init__.py#n583 Without this, all services

Re: [openstack-dev] Access to keystone_authtoken config options (required for Sahara trust)

2017-07-20 Thread Gyorgy Szombathelyi
Hi, > I naively tried (see https://review.openstack.org/#/c/485521/ ) to simply > replace the old config key with the new ones, but this fails with: > oslo_config.cfg.NoSuchOptError: no such option project_name in group > [keystone_authtoken] > > I found this thread on this list, few months

Re: [openstack-dev] [ceilometer]Understandig ceilometer

2017-07-05 Thread Gyorgy Szombathelyi
> On 04/07/17 05:14 AM, Gyorgy Szombathelyi wrote: > > - I understand that there is no collector service now. I know the old > > pipeline > was: compute-agent->notification-agent->collector->storage(gnocchi). > > Now I assumed it should be compute-agent->sto

[openstack-dev] [ceilometer]Understandig ceilometer

2017-07-04 Thread Gyorgy Szombathelyi
Hi! I try to dig into the inner workings of ceilometer, and there are things I couldn't figure out: - I understand that there is no collector service now. I know the old pipeline was: compute-agent->notification-agent->collector->storage(gnocchi). Now I assumed it should be

Re: [openstack-dev] [Keystone][Mistral][Devstack] Confusion between auth_url and auth_uri in keystone middleware

2017-06-15 Thread Gyorgy Szombathelyi
> > > > > auth_url is actually a dynamic parameter and depends on the > keystone > > auth plugin used > > (auth_type=xxx). The plugin which needs this parameter, registers it. > > > > > > > > Based on this http://paste.openstack.org/show/612664/ I would say that > > the plugin doesn't

Re: [openstack-dev] [Keystone][Mistral][Devstack] Confusion between auth_url and auth_uri in keystone middleware

2017-06-15 Thread Gyorgy Szombathelyi
> > auth_url is actually a dynamic parameter and depends on the > keystone auth plugin used > (auth_type=xxx). The plugin which needs this parameter, registers it. > > > > Based on this http://paste.openstack.org/show/612664/ I would say that the > plugin doesn't register it :( It

Re: [openstack-dev] [Keystone][Mistral][Devstack] Confusion between auth_url and auth_uri in keystone middleware

2017-06-15 Thread Gyorgy Szombathelyi
Hi Mikhail, (I'm not from the Keystone team, but did some patches for using keystonauth1). > > 2. Even if auth_url is set, it can't be used later, because it is not > registered in > oslo_config [5] auth_url is actually a dynamic parameter and depends on the keystone auth plugin used

[openstack-dev] [cinder]nova client code

2017-04-27 Thread Gyorgy Szombathelyi
Hi! As we're trying to use the InstanceLocalityFilter in cinder, I encountered some strange issues. I've opened a bug report already: https://bugs.launchpad.net/cinder/+bug/1686616 But further looking at the novaclient code in Cinder, cinder/nova.py smells a bit more. Seems the latest

Re: [openstack-dev] [nova]Placement api on https

2017-02-22 Thread Gyorgy Szombathelyi
ot for usage questions) > <openstack-dev@lists.openstack.org> > Subject: Re: [openstack-dev] [nova]Placement api on https > > > > Le 22/02/2017 05:14, Gyorgy Szombathelyi a écrit : > > Hi! > > > > As the placement API is mandatory in Ocata, I fou

[openstack-dev] [nova]Placement api on https

2017-02-22 Thread Gyorgy Szombathelyi
Hi! As the placement API is mandatory in Ocata, I found out that you cannot give a custom CA cert or skip the validation in its clients. That would be bad, as you can give a custom CA cert in the [keystone_authtoken] section, but not in the [placement] one, so if you're using this feature, you

Re: [openstack-dev] [cinder]Using DEFAULT section to configure drivers is not supported since Ocata

2017-02-03 Thread Gyorgy Szombathelyi
Hello! > > > __ > > > OpenStack Development Mailing List (not for usage questions) > > Unsubscribe: > > openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > >

[openstack-dev] [cinder]Using DEFAULT section to configure drivers is not supported since Ocata

2017-02-02 Thread Gyorgy Szombathelyi
Hi! Because of the deprecated driver configuration in the DEFAULT section doesn't work anymore in Ocata, I would like to ask if any migration tool exists for using the previously created volumes? E.g. if the existing volumes have the attribute os-vol-host-attr:host like hostname#RBD, cinder

Re: [openstack-dev] [OpenStack-docs] [openstack deployment] Adding deployment guides to docs.o.o

2016-11-10 Thread Gyorgy Szombathelyi
> -Original Message- > > We're talking here about deployment guides for official OpenStack projects - > and thus OpenStack-Ansible - that are part of their repositories, > Ah, I just realized that after my email was sent :) Sorry for the noise. > Andreas Br, György

Re: [openstack-dev] [OpenStack-docs] [openstack deployment] Adding deployment guides to docs.o.o

2016-11-10 Thread Gyorgy Szombathelyi
> > Hi everyone, > Hi Alexandra, > > > > If any of the deployment projects are interested in getting involved, let us > know and we can work together to make this transition :) > We have an ansible-based deployment project for Ubuntu. This is used successfully in production at our company,

Re: [openstack-dev] [horizon]New feature: enable/disable port security

2016-10-19 Thread Gyorgy Szombathelyi
lso antoher bugreport which somewhat releates to this wish item: https://bugs.launchpad.net/horizon/+bug/1634836 > > Rob > Cheers, György > On 19 October 2016 at 12:19, Gyorgy Szombathelyi > <gyorgy.szombathe...@doclerholding.com > <mailto:gyorgy.szombathe...@doclerho

[openstack-dev] [horizon]New feature: enable/disable port security

2016-10-19 Thread Gyorgy Szombathelyi
Hi! After I saw the allowed-address-pair handling is added to Horizon, I felt that completely enabling/disabling anti-spoofing rules would be a good addition, too, so I've create a patch: https://review.openstack.org/#/c/388611/ Don't know if it needs a blueprint, or other administration

Re: [openstack-dev] [neutron]Table renames in the contract phase in db upgrade breaks rolling upgrade from Mitaka to Newton

2016-09-06 Thread Gyorgy Szombathelyi
> -Original Message- > From: Ihar Hrachyshka [mailto:ihrac...@redhat.com] > > Gyorgy Szombathelyi <gyorgy.szombathe...@doclerholding.com> wrote: > > > Hi! > > > > Maybe I'm overseeing something, but I'm wondering if table renames > > brea

[openstack-dev] [neutron]Table renames in the contract phase in db upgrade breaks rolling upgrade from Mitaka to Newton

2016-09-06 Thread Gyorgy Szombathelyi
Hi! Maybe I'm overseeing something, but I'm wondering if table renames breaks rolling upgrades. E.g. if I'm upgrading neutron server instances one-by-one, and doing a db expand during the process, the old neutron-server instances will continue to work. However, without the new renamed tables,

Re: [openstack-dev] [keystone]trusts with federated users

2016-06-08 Thread Gyorgy Szombathelyi
> > As an OIDC user, tried to play with Heat and Murano recently. They usually > fail with a trust creation error, noticing that keystone cannot find the > _member_ role while creating the trust. > Hmmm...that should not be the case. The user in question should have a > role on the project, but

[openstack-dev] [keystone]trusts with federated users

2016-06-07 Thread Gyorgy Szombathelyi
Hi! As an OIDC user, tried to play with Heat and Murano recently. They usually fail with a trust creation error, noticing that keystone cannot find the _member_ role while creating the trust. Since a federated user is not really have a role in a project, but it is a member of a group, which

Re: [openstack-dev] [nova-lxd]Nova-lxd with Linuxbridge

2016-05-23 Thread Gyorgy Szombathelyi
> Linuxbridge agent support that needs to be integrated. > > > Thanks > > chuck > > > On Fri, May 20, 2016 at 8:47 AM, Gyorgy Szombathelyi > <gyorgy.szombathe...@doclerholding.com > <mailto:gyorgy.szombathe...@doclerholding.com> > wrote: >

[openstack-dev] [nova-lxd]Nova-lxd with Linuxbridge

2016-05-20 Thread Gyorgy Szombathelyi
Hi! I just have a simple question: is nova-lxd supposed to work with the Linuxbridge agent? As I see, the LXD driver creates veth interface pairs, and vif.py connects it to a normal linux bridge. However the Linuxbridge agent code scans only for tap devices. So the question is: Should the LXD

Re: [openstack-dev] [keystone]Liberty->Mitaka upgrade: is it possible without downtime?

2016-04-14 Thread Gyorgy Szombathelyi
also strongly recommend > a db backup before you start. > > We did this last week from an early liberty commit to stable and had > incompatible db changes and a token format change and only had a brief > keystone outage. > > On Apr 14, 2016 7:39 AM, "Gyorgy Szombathelyi&

Re: [openstack-dev] [keystone]Liberty->Mitaka upgrade: is it possible without downtime?

2016-04-14 Thread Gyorgy Szombathelyi
Hi! > > > > Unknown column 'user.name' in 'field list' > > > > in some operation when the DB is already upgraded to Mitaka, but some > > keystone instances in a HA setup are still Liberty. > > Currently we don't support rolling upgrades in keystone. To do an upgrade, > you need to upgrade all

[openstack-dev] [keystone]Liberty->Mitaka upgrade: is it possible without downtime?

2016-04-14 Thread Gyorgy Szombathelyi
Hi! I just experimenting with upgrading Liberty to Mitaka, and hit an issue: In Mitaka, the user table doesn't have 'name' field, so running mixed versions of Keystone could result in: Unknown column 'user.name' in 'field list' in some operation when the DB is already upgraded to Mitaka, but

Re: [openstack-dev] [Cinder] Mitaka RC2 available

2016-03-29 Thread Gyorgy Szombathelyi
ilable That patch is now approved and in the process of merging; once it is merged, you can propose a backport - if it doesn't make the release, it will at least be one the stable tree. On 29 March 2016 at 16:18, Gyorgy Szombathelyi <gyorgy.szombathe...@doclerholding.com<mailto:gyor

Re: [openstack-dev] [Cinder] Mitaka RC2 available

2016-03-29 Thread Gyorgy Szombathelyi
Hi Thierry, If a new tarball will necessary, is it possible to get this included, too? https://review.openstack.org/#/c/272437/ Seems this is not critical enough, but a straight fix. Br, Gyorgy -Original Message- From: Thierry Carrez [mailto:thie...@openstack.org] Sent: 29 March 2016

Re: [openstack-dev] Reg: Configuration Management tool for Openstack.

2016-03-08 Thread Gyorgy Szombathelyi
Hi, Since I think Ansible is the best config management tool, you should try the openstack-ansible installer, or our Ansible based one: https://github.com/DoclerLabs/openstack Br, György > -Original Message- > From: cool dharma06 [mailto:cooldharm...@gmail.com] > Sent: 2016 március 7,

Re: [openstack-dev] Versions api always returns the listen address

2016-02-23 Thread Gyorgy Szombathelyi
> > keystone session, and the versions API must be lightweight? > > > > If you put a proxy in front of things you need to also set > > osapi_compute_link_prefix - > > > https://github.com/openstack/nova/blob/d8ddecf6e3ed1e8193e5f6dba910 > > eb29bbe6dac6/nova/api/openstack/common.py#L45-L47 > > > >

Re: [openstack-dev] Versions api always returns the listen address

2016-02-23 Thread Gyorgy Szombathelyi
> On 02/23/2016 06:49 AM, Gyorgy Szombathelyi wrote: > > Hi! > > > > Just noticed by a failing > tempest.api.compute.test_versions.TestVersions.test_get_version_details > test: > > The versions answer of the components always return the listen addr

[openstack-dev] Versions api always returns the listen address

2016-02-23 Thread Gyorgy Szombathelyi
Hi! Just noticed by a failing tempest.api.compute.test_versions.TestVersions.test_get_version_details test: The versions answer of the components always return the listen address of the corresponding daemon. Is this the intended behavior? I think it should tell the public endpoint, the

Re: [openstack-dev] [ceilometer]ceilometer-collector high CPU usage

2016-02-17 Thread Gyorgy Szombathelyi
) in eventlet/hubs/hub.py, then the CPU usage drops significantly. Br, György > -Original Message- > From: Gyorgy Szombathelyi > [mailto:gyorgy.szombathe...@doclerholding.com] > Sent: 2016 február 17, szerda 14:47 > To: 'openstack-dev@lists.openstack.org' d...@lists.openstack.org

Re: [openstack-dev] [ceilometer]ceilometer-collector high CPU usage

2016-02-17 Thread Gyorgy Szombathelyi
ith the listeners, the bug[1] should not be closed, I think. Br, György > > [1] https://bugs.launchpad.net/oslo.messaging/+bug/1478135 > > On 17/02/2016 4:14 AM, Gyorgy Szombathelyi wrote: > > Hi! > > > > Excuse me, if the following question/problem is a basic one, already

[openstack-dev] [ceilometer]ceilometer-collector high CPU usage

2016-02-17 Thread Gyorgy Szombathelyi
Hi! Excuse me, if the following question/problem is a basic one, already known problem, or even a bad setup on my side. I just noticed that the most CPU consuming process in an idle OpenStack cluster is ceilometer-collector. When there are only 10-15 samples/minute, it just constantly eats

Re: [openstack-dev] [all] tenant vs. project

2016-02-12 Thread Gyorgy Szombathelyi
Hi, In keystone v2, it was called tenants, in v3, it is projects. It is funny to see the components switched to keystonemiddleware to configure [keystone_authtoken] with v3 settings, but other places still use the v2 terminology (and even the v2 client). Br, György > -Original

Re: [openstack-dev] RFC 2616 was *so* 2010

2016-02-08 Thread Gyorgy Szombathelyi
Hi, > -Original Message- > From: Clay Gerrard [mailto:clay.gerr...@gmail.com] > Sent: 2016 február 5, péntek 21:21 > To: OpenStack Development Mailing List d...@lists.openstack.org> > Subject: [openstack-dev] RFC 2616 was *so* 2010 > > ... really more like 1999, but when OpenStack

Re: [openstack-dev] OpenStack installer

2016-01-28 Thread Gyorgy Szombathelyi
ment Mailing List (not for usage questions) > <openstack-dev@lists.openstack.org> > Subject: Re: [openstack-dev] OpenStack installer > > Hello Gyorgy, > > Few more responses inline: > > On 01/27/2016 02:51 AM, Gyorgy Szombathelyi wrote: > >> > >>

Re: [openstack-dev] OpenStack installer

2016-01-27 Thread Gyorgy Szombathelyi
> On 01/26/2016 11:32 AM, Gyorgy Szombathelyi wrote: > > Hello! > > > > I just want to announce a new installer for OpenStack: > > https://github.com/DoclerLabs/openstack > > It is GPLv3, uses Ansible (currently 1.9.x, 2.0.0.2 has some bugs which has > to

Re: [openstack-dev] OpenStack installer

2016-01-27 Thread Gyorgy Szombathelyi
out. > Thanks, maybe we can work together in the future. > -- > > Kevin Carter > IRC: cloudnull > Br, György > > > From: Gyorgy Szombathelyi <gyorgy.szombathe...@doclerholding.com> > Sent: Tuesday, January 26, 2016 4:3

[openstack-dev] OpenStack installer

2016-01-26 Thread Gyorgy Szombathelyi
Hello! I just want to announce a new installer for OpenStack: https://github.com/DoclerLabs/openstack It is GPLv3, uses Ansible (currently 1.9.x, 2.0.0.2 has some bugs which has to be resolved), has lots of components integrated (of course there are missing ones). Goal was simplicity and also

Re: [openstack-dev] OpenStack installer

2016-01-26 Thread Gyorgy Szombathelyi
Tue, Jan 26, 2016 at 6:32 PM, Gyorgy Szombathelyi > <gyorgy.szombathe...@doclerholding.com > <mailto:gyorgy.szombathe...@doclerholding.com> > wrote: > > > Hello! > > I just want to announce a new installer for OpenStack: > https://github.co