[openstack-dev] [openstack-ansible] Stepping down from OpenStack-Ansible core

2018-03-26 Thread Major Hayden
breakages. I have learned an incredible amount about OpenStack, Ansible, complex software deployments, and open source communities. I appreciate everyone's support as I worked through the creation of the ansible-hardening role as well as adding CentOS support for OpenStack-Ansible. - -- Major

[openstack-dev] Going but not gone

2018-03-09 Thread Major Hayden
for their continued support. They have been excellent listeners and they took lots of time to consider my suggestions for improvements. I love you all and working in this community has been one of the best experiences in my professional career. :) [0] https://review.openstack.org/#/c/2652/ - -- Major Hayden

[openstack-dev] [openstack-ansible] Limiting pip wheel builds for OpenStack clients

2018-01-24 Thread Major Hayden
)? I've opened a bug: https://bugs.launchpad.net/openstack-ansible/+bug/1745215 -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org

Re: [openstack-dev] [kolla] [tripleo] [openstack-ansible] [deployment] Collaboration at PTG

2017-08-17 Thread Major Hayden
ovements without ruining infra's day. ;) As long as you can put up with a few Dad jokes, I'll be there. -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-re

Re: [openstack-dev] [openstack-ansible][security] To firewalld, or not to firewalld

2017-08-02 Thread Major Hayden
one makes some sense. It would be fairly easy to template the ferm DSL files. [0] http://ferm.foo-projects.org/ [1] http://ferm.foo-projects.org/download/examples/webserver.ferm -- Major Hayden __ OpenStack Development Mailing

Re: [openstack-dev] [OpenStack-Ansible] Not running for Queens PTL

2017-07-31 Thread Major Hayden
ng to continue to mature > and improve the project! We're so thankful that you've put up with us for these past two cycles! :) You've been a beacon for quality within the project and you've carefully fostered a ton of new development within OpenStack-Ansible. Thanks for your efforts! - -- Major Hayd

[openstack-dev] [openstack-ansible][security] To firewalld, or not to firewalld

2017-07-26 Thread Major Hayden
[0] https://review.openstack.org/#/c/479415/ [1] http://docs-draft.openstack.org/15/479415/5/check/gate-openstack-ansible-specs-docs-ubuntu-xenial/6a50e01//doc/build/html/specs/pike/software-firewall.html - -- Major Hayden -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEG/mSZJWWADNpjCUrc3BR4MEBH7EFAll4rkwACg

Re: [openstack-dev] [openstack-ansible] restrictive umask / file permissions in target hosts

2017-07-26 Thread Major Hayden
on works within the openstack-ansible project. This is a good start! :) -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:u

Re: [openstack-dev] [openstack-ansible] restrictive umask / file permissions in target hosts

2017-07-25 Thread Major Hayden
gt; > IIUC, we're using 'ansible-lint' for style checks. Does it make sense to > add a new rule which warns/enforces to set the mode (or group/user)? I'd definitely be in support of that. We should be as explicit as possible when we

Re: [openstack-dev] [OpenStack-Ansible] Proposing Markos Chandras for osa-core

2017-07-18 Thread Major Hayden
g role is solid in my book. ;) Markos has been doing great work and he's automated quite a few things that we used to push around manually. SUSE support has been building out *really* quickly, too. - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGB

Re: [openstack-dev] [openstack-ansible] restrictive umask / file permissions in target hosts

2017-07-17 Thread Major Hayden
chances of problems down the road if distribution defaults change. -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http:/

Re: [openstack-dev] [openstack-ansible][security] Rename openstack-ansible-security role?

2017-05-31 Thread Major Hayden
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 05/23/2017 12:23 PM, Major Hayden wrote: > I'll see if we can move forward with 'ansible-hardening' and keep everyone > updated! :) The repo is up and ready to go: https://github.com/openstack/ansible-hardening There are some p

Re: [openstack-dev] [openstack-ansible][security] Rename openstack-ansible-security role?

2017-05-23 Thread Major Hayden
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 05/17/2017 12:25 PM, Major Hayden wrote: > So my questions are: > > 1) Should the openstack-ansible-security role be > renamed to alleviate confusion? > > 2) If it should be renamed, what's your suggestio

Re: [openstack-dev] [glance][openstack-ansible] Moving on

2017-05-19 Thread Major Hayden
munity. It's time to resign my role as a core reviewer, effective > immediately. > > Thanks for all the fish. You will definitely be missed, Steve! Thanks for everything you've done so far and for helping so many of us level up along the way

[openstack-dev] [openstack-ansible][security] Rename openstack-ansible-security role?

2017-05-17 Thread Major Hayden
-security role and that's the reason I'm bringing this up on the list. So my questions are: 1) Should the openstack-ansible-security role be renamed to alleviate confusion? 2) If it should be renamed, what's your suggestion? Thanks! - -- Major Hayden [0] https://www.openstack.org

[openstack-dev] [openstack-ansible] Need a new owner for the Thursday meeting

2017-03-28 Thread Major Hayden
on most Thursdays. ;) If you're new to running meetings and you want some tips on how to run a good meeting, please let me know. I'll be happy to do some brief training! Thanks! [0] https://wiki.openstack.org/wiki/Meetings/openstack-ansible - -- Major Hayden -BEGIN PGP SIGNATURE- Version

[openstack-dev] [openstack-ansible] Monitoring script framework PoC

2017-03-01 Thread Major Hayden
to read. I'd really love to get some feedback on it and see if it's useful for others. [0] https://etherpad.openstack.org/p/osa-ptg-pike-monitoring [1] https://review.openstack.org/#/c/436498/ [2] https://github.com/major/monitorstack - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2

Re: [openstack-dev] [openstack-ansible] So long, farewell, auf wiedersehen

2017-02-22 Thread Major Hayden
gt; and I’ll no longer be able to invest the time and energy required to maintain > my involvement in the community. Thanks for all you've done for the project and for all you've done for the OpenStack-Ansible community members, too. We wish you the best in your future endeavors! :)

Re: [openstack-dev] [ansible]Octavia ansible script

2017-02-07 Thread Major Hayden
work to be done. [0] http://specs.openstack.org/openstack/openstack-ansible-specs/specs/mitaka/lbaasv2.html [1] https://review.openstack.org/#/c/417210/ - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJYmdSOAAoJEHNwUeDBAR+xk

Re: [openstack-dev] [openstack-ansible] Propose Marc Gariepy as core reviewer

2017-02-03 Thread Major Hayden
+1 Anyone who gets into the SELinux trenches with me that many times is worth having as a core. ;) -- Major Hayden On Fri, Feb 3, 2017 at 7:33 AM, Jesse Pretorius <jesse.pretor...@rackspace.co.uk> wrote: > I’d like to propose Marc Gariepy [1] as a core reviewer for > OpenStack-

Re: [openstack-dev] [requirements][ffe] Jinja2 2.9.5 upper constraint

2017-01-30 Thread Major Hayden
ents list will > then be wrong. I've gone ahead and abandoned the patch for now. It's not critical at the moment and 2.8.1 should be acceptable for Ocata. Thanks, though! - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJYj7SnAAoJEHNwUeDBAR+xpGcP/24gEQq//FL

[openstack-dev] [requirements][ffe] Jinja2 2.9.5 upper constraint

2017-01-30 Thread Major Hayden
changed for Ocata? Thanks! [0] https://review.openstack.org/#/c/426857/ [1] https://review.openstack.org/#/c/418494/ [2] https://github.com/pallets/jinja/releases/tag/2.9.5 [3] https://github.com/pallets/jinja/pull/624 - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2

Re: [openstack-dev] [openstack-ansible] Proposing Amy Marrich for core

2017-01-27 Thread Major Hayden
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 01/27/2017 08:29 AM, Alexandra Settle wrote: > I would like to propose Amy Marrich for the core team for OpenStack-Ansible. +3.14 - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJYi15kAAoJEHNwUeD

Re: [openstack-dev] [openstack-ansible] Ocata deployed on CentOS 7!

2017-01-19 Thread Major Hayden
time. =) Correct! The Ocata release of OpenStack-Ansible will certainly support Ubuntu 16.04 as the primary OS, but there is a subset of us who are trying to get it working well on CentOS 7 as well. ;) -- Major Hayden __ Ope

Re: [openstack-dev] [openstack-ansible] Ocata deployed on CentOS 7!

2017-01-19 Thread Major Hayden
ded with LXC containers I'm still working on reducing some of these bugs down into something tangible but I hope to do that soon. [0] https://bugs.launchpad.net/ubuntu/+source/python2.7/+bug/1638695 [1] https://bugs.launchpad.net/openstack-ansible/+bug/1637494 --

[openstack-dev] [openstack-ansible] Ocata deployed on CentOS 7!

2017-01-19 Thread Major Hayden
THOROUGHLY ABOUT THIS ALREADY. SERIOUSLY. I'M WORKING ON IT! SHEESH! -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http

Re: [openstack-dev] [openstack-ansible] Can someone run tomorrow's (2016-01-12) meeting for me?

2017-01-11 Thread Major Hayden
On 01/11/2017 10:08 AM, Alexandra Settle wrote: > I can run the meeting tomorrow ☺ Thanks so much, Alex! :) -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-r

[openstack-dev] [openstack-ansible] Can someone run tomorrow's (2016-01-12) meeting for me?

2017-01-11 Thread Major Hayden
Hey folks, A conflict came up and I won't be available to run tomorrow's weekly meeting in IRC. Would someone else be able to take over this meeting for me? -- Major Hayden __ OpenStack Development Mailing List

Re: [openstack-dev] STIG Tools

2017-01-09 Thread Major Hayden
per release notes will be provided. Here are some helpful links: https://github.com/openstack/openstack-ansible-security http://docs.openstack.org/developer/openstack-ansible-security/ If you'd like to talk on IRC, hop into #openst

[openstack-dev] [openstack-ansible][security] Need reviewers/testers for new STIG content

2016-12-08 Thread Major Hayden
a look at the queue of patches[2]. I've tried my best to break up the patches into the smallest pieces possible so that they're easier to review. THANKS! - --- Thanks to everyone who has helped make this role a success with patches, reviews, testing, and general encouragement. ;) - -- Major

Re: [openstack-dev] [osa] [docs] OpenStack-Ansible deploy guide live!

2016-11-30 Thread Major Hayden
Great work by everyone involved. ;) -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [openstack-ansible] Debugging slow Xenial gate

2016-11-10 Thread Major Hayden
On 11/02/2016 08:51 AM, Major Hayden wrote: > At this point, I'm still trying to test some additional theories. Does anyone > have any other ideas? Here's an update for today. There are a few bugs open now: OpenStack-Ansible bug: https://bugs.launchpad.net/openstack-ansible/+bug/1

Re: [openstack-dev] [openstack-ansible] Debugging slow Xenial gate

2016-11-02 Thread Major Hayden
On 10/28/2016 04:02 AM, Major Hayden wrote: > On the topic of threads, the sysbench output from both Trusty and Xenial are > nearly identical with the exception of threads. Trusty is usually about > 15-20% faster on that benchmark than Xenial. I spoke with a few other people and it s

[openstack-dev] [openstack-ansible][octavia] Spec: Deploy Octavia with OpenStack-Ansible

2016-11-02 Thread Major Hayden
! :) [0] https://review.openstack.org/392205 [1] http://docs-draft.openstack.org/05/392205/2/check/gate-openstack-ansible-specs-docs-ubuntu-xenial/8f1eec1//doc/build/html/specs/ocata/octavia.html -- Major Hayden signature.asc Description: OpenPGP digital signature

[openstack-dev] [openstack-ansible] Team photo from Barcelona

2016-10-28 Thread Major Hayden
Hey there, Monty was kind enough to take a photo of some of the OpenStack-Ansible team members at the OpenStack Summit in Barcelona. Here's a link to the photo: http://i.imgur.com/5wOOAhe.jpg -- Major Hayden signature.asc Description: OpenPGP digital signature

Re: [openstack-dev] [openstack-ansible] Debugging slow Xenial gate

2016-10-28 Thread Major Hayden
On 10/28/2016 10:17 AM, Major Hayden wrote: >> Also, when running the tests on both systems, track cpu usage and number >> > of threads to see if one has more restrictions than the other. > Almost no difference here. On the topic of threads, the sysbench output from both

Re: [openstack-dev] [openstack-ansible] Debugging slow Xenial gate

2016-10-28 Thread Major Hayden
assuming that the two virtual machines are identical (CPU type, memory, > threads, virtio, etc)." They are! We've seen this occur in the OpenStack CI jobs (with KVM), and I've also tested this with Xen and bare metal. -- Maj

[openstack-dev] [openstack-ansible] Debugging slow Xenial gate

2016-10-27 Thread Major Hayden
(16.04 was about half of 14.04). I set them both to the same value but the performance testing didn't change. Does anyone else have any ideas of what might be causing this? -- Major Hayden signature.asc Description: OpenPGP digital signature

[openstack-dev] [openstack-ansible] What's Happening in OpenStack-Ansible (WHOA) - September 2016

2016-09-30 Thread Major Hayden
OpenStack-Ansible training from Hastexo! Previous reports are always available via the 'whoa' tag: https://major.io/tag/whoa/ Please send over any feedback you have. I wish everyone safe travels to Barcelona in a few weeks! :) -- Major Hayden signature.asc Description: OpenPGP digital

Re: [openstack-dev] [security] [salt] Removal of Security and OpenStackSalt project teams from the Big Tent

2016-09-21 Thread Major Hayden
e helpful and the information contained within them is used when we improve OSA. The Security Guide is also extremely useful for deployers who need advice on configuring OpenStack in a secure way. -- Major Hayden signature.asc Description: OpenPGP digital

[openstack-dev] [openstack-ansible] What's Happening in OpenStack-Ansible (WHOA) - August 2016

2016-08-24 Thread Major Hayden
-- send me some! :) - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIsBAEBCAAWBQJXvaBPDxxtYWpvckBtaHR4Lm5ldAAKCRBzcFHgwQEfsXC3D/0W NzygxrJ0YQH4feQBTRWbtMP3mtlCX740nSjM4F1TV0OyH9I7y4xE4SotSVvsOtjB E0dEp8WPNpfxcmzb1ORu5kMgCYWjyDMs+c9Dk40G3dV3dXwJ/D1xWOOMcwKCzyQr

Re: [openstack-dev] [openstack-ansible][security] Adding RHEL 7 STIG to openstack-ansible-security

2016-08-18 Thread Major Hayden
, Mark! :) - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIsBAEBCAAWBQJXteJHDxxtYWpvckBtaHR4Lm5ldAAKCRBzcFHgwQEfscaxD/9g gL9yvPldW8rICf+WNw2nEUsVI5omtknza0n7BJLOlWe0m600rLJWgtvFTROXbaAq Yjsoz3gsS9i8wZTooeTW3cYfJp/TCQwGQAO3YYjVZVxrwtGwZbplWLrRsQbLyRCF Rot0m0PIyjK8u0doYR7qQR016X+Kd5i

Re: [openstack-dev] [openstack-ansible][security] Adding RHEL 7 STIG to openstack-ansible-security

2016-08-12 Thread Major Hayden
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/04/2016 12:45 PM, Major Hayden wrote: > The existing openstack-ansible-security role uses security configurations > from the Security Technical Implementation Guide (STIG) and the new Red Hat > Enterprise Linux 7 STIG is due

[openstack-dev] [openstack-ansible][security] Adding RHEL 7 STIG to openstack-ansible-security

2016-08-04 Thread Major Hayden
help! I plan to put a spec together once I get some feedback. - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJXo38iAAoJEHNwUeDBAR+xH5YP/0kmhZC4a1FAyV+OlEWcKM4p qYZhHscgWqtmYHLgX5q51IyGEas9ae89cxF2ThskvF+LZ37+RfwaUAjpCwFR6wgB

Re: [openstack-dev] [openstack-ansible] Project Mascot

2016-07-21 Thread Major Hayden
the Etherpad: https://etherpad.openstack.org/p/osa-mascot -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.opensta

Re: [openstack-dev] [openstack-ansible] Nominating Jean-Philippe Evrard for core in openstack-ansible and all openstack-ansible-* roles

2016-07-18 Thread Major Hayden
ing excellent work. - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJXjT6hAAoJEHNwUeDBAR+xeDMP/2Q0SGZFaLmrI1tQ6KJjmp7F yzxg1KTpc27sI1yPsAfAxk6kjCIyPAxEkY0rzS0QrOM1mBbrn1PvxEzoVqF6UWD0 4VPS20Gy256pF0BBBLEdmGsctIELvO36AAmmQjMq8PQIismvjHezePhiE16MzSol urWOOrIJP5WFxDjD

Re: [openstack-dev] [openstack-ansible] OpenStack-Ansible and Open vSwitch

2016-07-06 Thread Major Hayden
ommunity begins building scenario-based documentation. Thanks for writing this, Travis! It's really easy to follow along and I plan to give this a run-through in the lab in the next week or two. :) - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJXfU1dAAoJEHNwUe

Re: [openstack-dev] [openstack-ansible] Change of default database collation

2016-06-24 Thread Major Hayden
performance concerns documented[1], but they don't look huge. [1] http://stackoverflow.com/questions/766809/whats-the-difference-between-utf8-general-ci-and-utf8-unicode-ci - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJXbSsXAAoJEHNwUeDBAR+x8KYP/01HJ3P2Sqjs

[openstack-dev] [openstack-ansible] What's Happening in OpenStack-Ansible - June 2016

2016-06-16 Thread Major Hayden
he first edition for June 2016 is here: https://major.io/2016/06/15/whats-happening-openstack-ansible-whoa-june-2016/ - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJXYqkyAAoJEHNwUeDBAR+xCUsP+wXzKva4jeNCpjQgQhj5m/3L +vEhsProy9pIlouqJ+ITZ2MBMuy/u8rlvh

Re: [openstack-dev] [openstack-ansible] Deeper diffs in OSA releases

2016-06-14 Thread Major Hayden
ode so that it works for both. > I think the ops repo is the right one - we just need to get the scaffolding > in place. I'll put a review up shortly. Thanks, Jesse! :) -- Major Hayden __ OpenStack Development

[openstack-dev] [openstack-ansible] Deeper diffs in OSA releases

2016-06-14 Thread Major Hayden
/ - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJXX/2sAAoJEHNwUeDBAR+xSJ0P/3H188yIgGYUDCW1Wt3Qddum +2UNPxWSAJSMjAJhp5EeOXPR4XKvVqI5WIcn6r0ymk0Bq19GwiYe5FToXTRR4jPM B2nI6xWDHMBpK8mF05pqfISHeKd1bxq0HZUSkhA5IgZkp39Rld3QFszfcg5XQcoT H6KxY21OnlH

Re: [openstack-dev] [openstack-ansible] Mid-cycle date selection (need input!)

2016-06-13 Thread Major Hayden
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 06/09/2016 01:51 PM, Major Hayden wrote: > Once we get that sorted out, we can fire up an etherpad for everyone to sign > up for a spot. As promised, here's a link to the etherpad: https://etherpad.openstack.org/p/osa-midcycle-newton

Re: [openstack-dev] [openstack-ansible] Mid-cycle date selection (need input!)

2016-06-10 Thread Major Hayden
ng within that range. I'm not sure if hugging a weekend or sitting in the middle of the week is best for us. I'd imagine that folks outside the US might appreciate a weekend to recover from time zone changes before or after. -- Maj

[openstack-dev] [openstack-ansible] Mid-cycle date selection (need input!)

2016-06-09 Thread Major Hayden
that sorted out, we can fire up an etherpad for everyone to sign up for a spot. - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJXWbqdAAoJEHNwUeDBAR+xMUYP/1/SN69gCraGCO2XxR52ZKIN NWzbeY7mw44eQyoeUBXtJLLo/qFxeQniR6ybaz/zMhqhxOliOys0rDn3Q1Xawtkn Mq8IN

Re: [openstack-dev] [openstack-ansible] LBaaSv2 / Octavia support

2016-05-16 Thread Major Hayden
have folks in the channel around the clock, so feel free to jump in and ask questions. -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subj

Re: [openstack-dev] [openstack-ansible] LBaaSv2 / Octavia support

2016-05-13 Thread Major Hayden
k deployments, but we find new things that surprise us from time to time. :) Feel free to join #openstack-ansible on Freenode or hang out with us during our IRC meetings on Thursday[2]. [1] https://github.com/major/openstack-ansible/tree/octavia [2] https://wiki.openstack.org/wiki/Meetin

Re: [openstack-dev] [openstack-ansible] LBaaSv2 / Octavia support

2016-05-11 Thread Major Hayden
consume it once it's available? - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJXMyaMAAoJEHNwUeDBAR+xYwUP/iLfOuSOgW4TeOZ/pN0hkXuR H0L1suY6R+oGjDT+xuxox2uDcAADIWbHxBKosV/1jQHJRPoWfKhBhke4W2/MOsTV miqBrCKILLzJxdcXHrG54QHPb0FBqSLcmJIaFfysW1Rw3rH2b

Re: [openstack-dev] [openstack-ansible] Nominate Major Hayden for core in openstack-ansible-security

2016-05-06 Thread Major Hayden
ct, I can think of no better addition to the > core reviewer team. Thanks for all the kind words in the thread! :) - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJXLNmtAAoJEHNwUeDBAR+xVI0P/0qPXf+Th0Rw

Re: [openstack-dev] [all][stackalytics] Gaming the Stackalytics stats

2016-04-08 Thread Major Hayden
TLs on these projects to reach out to these users and share gerrit dashboard[1] links? A PTL shared some of these with me and it certainly helped me focus better on the right reviews. [1] https://github.com/openstack/gerrit-dash-cre

Re: [openstack-dev] [all][stackalytics] Gaming the Stackalytics stats

2016-04-08 Thread Major Hayden
em to learn how to > contribute in a way that has value. I'll take a sample of the folks listed there and contact them. Hopefully I can provide some general results here soon. -- Major Hayden __ OpenStack Development Mailing L

Re: [openstack-dev] [all][stackalytics] Gaming the Stackalytics stats

2016-04-08 Thread Major Hayden
ts, we could possibly reach out to them as well. Perhaps I'm being too optimistic. :) But, as Dolph said earlier, leaving this issue alone certainly makes it easier to single out the folks who are doing something unproductiv

[openstack-dev] [openstack-ansible][security] Update: Host security hardening

2016-04-04 Thread Major Hayden
hanks! [1] http://docs.openstack.org/developer/openstack-ansible-security/ [2] https://review.openstack.org/#/c/301152/ -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstac

Re: [openstack-dev] [openstack-ansible][security] Security hardening backport to Liberty desirable?

2016-03-07 Thread Major Hayden
in the Liberty release that explains how to enable the role with that release? -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?

[openstack-dev] [openstack-ansible][security] Security hardening backport to Liberty desirable?

2016-03-04 Thread Major Hayden
://review.openstack.org/#/c/273257/ [2] http://docs.openstack.org/developer/openstack-ansible-security/ -- Major Hayden signature.asc Description: OpenPGP digital signature __ OpenStack Development Mailing List (not for usage questions

Re: [openstack-dev] [openstack-ansible] network question and documentation

2016-02-19 Thread Major Hayden
e > /etc/network/interfaces for both controller node (br-vxlan, br-storage: > manual without IP) and compute node (br-vxlan, br-storage: static with IP). That makes sense. Would you be able to open a bug for us? I'll be glad to help you write some documentation if you're inter

Re: [openstack-dev] [openstack-ansible] : Steps to upgrade the current setup from Kilo to Liberty

2016-02-18 Thread Major Hayden
you received? That should help us figure out if it's a problem in Ansible or within your OS configuration. -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.o

Re: [openstack-dev] [openstack-ansible]Review of Bug "1535536"

2016-02-17 Thread Major Hayden
Andy has given you some feedback there in the review that should help. If not, feel free to make additional comments in that review and we will have a look. ;) -- Major Hayden __ OpenStack Development Mailing List (not for usage quest

[openstack-dev] [lbaas][octavia] Security/networking questions

2016-02-08 Thread Major Hayden
as a customer tenant network is challenging and bridging those networks could allow an attacker to gain access to other things on that admin tenant network. Thanks in advance for your time. - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWuLpuAAoJEHNwUeDBAR+xSF8P/j

Re: [openstack-dev] [openstack-ansible][security] Should the playbook stop on certain tasks?

2016-02-08 Thread Major Hayden
. It's a shame that Ubuntu doesn't have a comprehensive XCCDF profile available as the other distributions do. :/ - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWuJmjAAoJEHNwUeDBAR+x7BYP/2Cv31QL7enVAXgEzHThc1Wb ov3phFoEYCY8FFmcOoH6grSK3DsRPmPc33ma2I6bMMKWpz8j+

Re: [openstack-dev] [OpenStack-Ansible] Mid Cycle Sprint

2016-02-04 Thread Major Hayden
nd the Video Conference invitations to, so please get a Remote > Partitipation ticket in Eventbrite [2] if you intend to join us through this > facility. Thanks for getting the remote participation put together for the event! :

Re: [openstack-dev] [openstack-ansible] LBaaSv2 / Octavia support

2016-01-28 Thread Major Hayden
49/ I appreciate any and all feedback! :) - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWqoIyAAoJEHNwUeDBAR+xjuEP/2TSZoziJFTbKCsu3LvfkXir qaC/J0XZTSZVfCFB1gjqdXAsSYQT0T8gxRvEAtWkjXQ9IjbNdn+JP1TS5KntZnLc PB5+Fg90zj00IG7RHTaeMirv9FHqRwVOwI8AQmLZRovD+t8QFIGMAFWzHY

[openstack-dev] [openstack-ansible][security] Security hardening is now integrated!

2016-01-27 Thread Major Hayden
] http://docs.openstack.org/developer/openstack-ansible-security/controls.html -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org

[openstack-dev] [openstack-ansible] LBaaSv2 / Octavia support

2016-01-26 Thread Major Hayden
to have this feature available? [1] http://docs.openstack.org/developer/devstack/guides/devstack-with-lbaas-v2.html - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWp8usAAoJEHNwUeDBAR+xXk8P/37tkHZujAbbX3SY5X4dR2wX cmR1DN

Re: [openstack-dev] [openstack-ansible] LBaaSv2 / Octavia support

2016-01-26 Thread Major Hayden
rver instead of the agent container. It doesn't need any special connections to isolated networks since it talks to neutron/nova to get that done. - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWp85iAAoJEHNwUeDBAR+x/BoP/RDR8dS4Z8/qf3xBPV6/Poff ujj2ld7OgNDj+eZKsHNRnFZcoBxy

Re: [openstack-dev] [openstack-ansible] LBaaSv2 / Octavia support

2016-01-26 Thread Major Hayden
run both versions concurrently. Brandon might be able to share a little more about the reasons why. - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWp9HwAAoJEHNwUeDBAR+x1vEP/A7b+3u42wo9Xf+YUxk83gzr gWghI6Q/hSy/cF7lqzOUAPzm+vu/ThpLOx7x5AEbxMYIDXgNZVmU0wExhmRodH

[openstack-dev] [openstack-ansible][security] Improving SSL/TLS in OpenStack-Ansible

2016-01-15 Thread Major Hayden
-October/077877.html [3] https://review.openstack.org/#/c/243332/ [4] https://etherpad.openstack.org/p/openstack-ansible-tls-improvement - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWmP+9AAoJEHNwUeDBAR+xZpwP/Ana9JFTEGRvZSzKQHv/jQeY

Re: [openstack-dev] [openstack-ansible][security] Should the playbook stop on certain tasks?

2016-01-14 Thread Major Hayden
ot sure if we can add this to a role by itself. - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWl6O9AAoJEHNwUeDBAR+xCUMQAIg+eZudAHowbFXqwBu3XQ74 Kov9gD2hwd3wq6LPzpeFVjrd61vlw+GOMQUwJlvf5jeM0oXlw7/oRHtJWaHvLcLc mFQDW2QTfA/jX1gGOSYctkFF6nTahNmWuSQ3G01Om0WkjNBGrZLJ

[openstack-dev] [openstack-ansible][security] Should the playbook stop on certain tasks?

2016-01-13 Thread Major Hayden
/auth.yml#L60-L87 - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWlmjbAAoJEHNwUeDBAR+x7zAP/RfGnihciZV0m7Jf+hVKSrzf PEc4gauKRA1mZEFdgX4Ib137Vrztu9p1mPB29bRx9GN8aMcY2TtRwrR1QKmUOHX9 gtrjif9m5XgCM0ja/DMbj82j7pPpIQC5Tby0+CIhX27ZdgGxBpo/9UOj1Dns39Mg DzOdNGkGVO6ngmBKdqKetjkT

[openstack-dev] [openstack-ansible] Tracking jenkins jobs

2016-01-08 Thread Major Hayden
] https://docs.google.com/spreadsheets/d/1YZC6ng-AIHqbHHHeGPC2mar_JPYunvFm4BzqfAEOYLI/edit#gid=0 - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWkCTcAAoJEHNwUeDBAR+xyKgP+wc4EC74SNjkz5wcwjJjR67L KfA3y719XXVLmuYyB2PllDHC9cDYTxVJFM57/tR0xM4O5ubHm3ywjDD0G0iFQZWl

Re: [openstack-dev] [oslo][osdk] PrettyTable needs a home in OpenStack

2016-01-08 Thread Major Hayden
s and some of them are > not in the oslo namespace > > 2) OpenStack Client team as they maintain cliff already and it'd > perhaps make more sense to have this library there. #2 makes the most sense to me. Thanks for taking action to keep PrettyTable alive! :) - -- Major Hayden -BE

Re: [openstack-dev] [openstack-ansible] Mid Cycle Sprint

2015-12-09 Thread Major Hayden
wouldn't pass up a trip to London either (if it's in the cards). ;) -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http:/

Re: [openstack-dev] [openstack-ansible] Install Openstack-Ansible

2015-12-04 Thread Major Hayden
nstack-ansible-specs/specs/mitaka/security-hardening.html [3]  https://github.com/openstack/openstack-ansible-specs/blob/master/specs/template.rst [4]  http://specs.openstack.org/openstack/openstack-ansible-specs/specs/mitaka/independen

Re: [openstack-dev] [openstack-ansible] Install Openstack-Ansible

2015-12-01 Thread Major Hayden
s well with the other services (like authentication with keystone). [1]  https://github.com/openstack/openstack-ansible/tree/master/etc/openstack_deploy/env.d [2]  https://github.com/openstack/openstack-ansible/tree/master/playbooks/roles

Re: [openstack-dev] Install Openstack-Ansible

2015-12-01 Thread Major Hayden
aster/specs/template.rst -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [OpenStack-Ansible] Building a dev env with AIO

2015-11-27 Thread Major Hayden
GB VM's with a highly specialized configuration that limits resource usage but there's not enough RAM left over for building VM's. [1] http://docs.openstack.org/developer/openstack-ansible/developer- docs/quickstart-aio.html -- Major Hayden ___

Re: [openstack-dev] [openstack-ansible] Random ssh errors in gate check jobs

2015-11-24 Thread Major Hayden
ence in results or performance between using > paramiko or turning ssh pipelining off? I tried running some jobs with pipelining on and off, but the errors still appeared. It seems like the ssh client itself is part of the problem. I haven't looked to see if Ubuntu has updated sshd recently i

[openstack-dev] [openstack-ansible] Random ssh errors in gate check jobs

2015-11-22 Thread Major Hayden
to be moving along fairly quickly. [1] https://github.com/ansible/ansible/blob/devel/lib/ansible/plugins/connection/ssh.py#L245-L260 [2] https://review.openstack.org/#/c/248361/ -- Major Hayden __ OpenStack Development Mailing

Re: [openstack-dev] [openstack-ansible] Fedora/CentOS/other Support

2015-11-19 Thread Major Hayden
ate, not tested -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [openstack-ansible][security] Next steps: openstack-ansible-security

2015-11-16 Thread Major Hayden
That sounds good. I'll hopefully get time to take a crack at that along with the check mode enhancements this week. -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-re

Re: [openstack-dev] [openstack-ansible][security] Next steps: openstack-ansible-security

2015-11-09 Thread Major Hayden
d be a default in all use cases. What would you propose as the final steps to get the blueprint marked as completed? Should documentation be added into openstack-ansible about integrating openstack-ansible-security or should a script be provided for quicker integrat

Re: [openstack-dev] [openstack-ansible][security] Creating a CA for openstack-ansible deployments?

2015-11-06 Thread Major Hayden
esting, but it has quite a few dependencies that may be a bit heavy resource-wise within the average openstack-ansible environment. I'm still on the hunt for a good solution but I appreciate the input so far! [1] https://github.com/debop

[openstack-dev] [openstack-ansible] Converting the AIO bootstrap script to Ansible

2015-11-06 Thread Major Hayden
://review.openstack.org/#/c/239525/ [2] http://specs.openstack.org/openstack/openstack-ansible-specs/specs/mitaka/convert-aio-bootstrap-to-ansible.html -- Major Hayden __ OpenStack Development Mailing List (not for usage questions

[openstack-dev] [openstack-ansible][security] Next steps: openstack-ansible-security

2015-11-06 Thread Major Hayden
like a decent plan? Let me know if that makes sense and I'll get to work. [1] http://docs.openstack.org/developer/openstack-ansible-security/ - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWPSDTAAoJEHNwUeDBAR+x0/sP/iOO29N5wqLmbI/LU5FlGK6l

Re: [openstack-dev] [openstack-ansible][security] Creating a CA for openstack-ansible deployments?

2015-10-29 Thread Major Hayden
CA certificates in the deployment configuration and those will be used instead of generating self-signed certificates. -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@list

[openstack-dev] [openstack-ansible][security] Creating a CA for openstack-ansible deployments?

2015-10-26 Thread Major Hayden
to bring their own certificates. Does this approach make sense? -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http

[openstack-dev] [openstack-ansible][security] All STIGs proposed -- time for reviews!

2015-10-13 Thread Major Hayden
://review.openstack.org/#/q/status:open+project:openstack/openstack-ansible-security,n,z - -- Major Hayden -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWHVIrAAoJEHNwUeDBAR+xFsEQAIs+UTOGLwdHQKk90Xn2zyg9 4+7UQCmWjHZG3NQb+ydlenhkAVWiPYsKqcmldEVzZu+BGAbdkhIbn777SoCcMqRD DWv1NjJuIHcAzkf4pgjQ

[openstack-dev] [openstack-ansible] Reviews needed: openstack-ansible-security

2015-10-08 Thread Major Hayden
+project:openstack/openstack-ansible-security,n,z [2] https://www.stigviewer.com/stig/red_hat_enterprise_linux_6/ -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ

[openstack-dev] [openstack-ansible] Security spec status update

2015-10-02 Thread Major Hayden
://www.stigviewer.com/stig/red_hat_enterprise_linux_6/ -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http

Re: [openstack-dev] [openstack-ansible] To NTP, or not to NTP, that is the question

2015-09-21 Thread Major Hayden
On 09/21/2015 07:14 PM, Sergii Golovatiuk wrote: > Are any chance to configure chrony instead of ntpd? It acts more predictable > on virtual environments. That's my plan, if I can find an upstream Ansible galaxy role to use. ;) -- Major

[openstack-dev] [openstack-ansible] To NTP, or not to NTP, that is the question

2015-09-18 Thread Major Hayden
from other folks. [1] https://bugs.launchpad.net/openstack-ansible/+bug/1413018 [2] https://review.openstack.org/#/c/225006/ -- Major Hayden __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstac

  1   2   >