Re: [openstack-dev] OpenStack-Ansible testing with OpenVSwitch

[Michael Gale]

I use openstack-ansible for all of my OpenStack testing and deployment
needs currently so if there was an AIO that I could use as a reference that
would be awesome. I personally found that having scenarios available in the
AIO helps drive upgrades and adoptions of new features. As an example I
deployed an AIO with the Magnum add-on to do a Kubernetes demo during an
innovation day.

Michael

On Mon, Oct 2, 2017 at 4:13 AM, Jean-Philippe Evrard <
jean-phili...@evrard.me> wrote:

> Well, there are ppl already running OpenVSwitch on openstack-ansible,
> so I guess it's just a question of a few bug fixes and adding a
> scenario to make sure this is working forever :p
>
> On Fri, Sep 29, 2017 at 8:22 AM, Gyorgy Szombathelyi
>  wrote:
> >
> >>
> >> Hello JP,
> >>
> >> Ok, I will do some more testing against the blog post and then hit
> up the
> >> #openstack-ansible channel.
> >>
> >> I need to finish a presentation on SFC first which is why I am looking
> into
> >> OpenVSwitch.
> >
> > Hi Michael,
> >
> > If your goal is not openstack-ansible, here's an AIO installer for Pike
> with OpenVSwitch:
> > https://github.com/DoclerLabs/openstack
> > (needs vagrant and VirtualBox)
> >
> > Br,
> > György
> >
> >>
> >> Thanks
> >> Michael
> >>
> >
> > 
> __
> > OpenStack Development Mailing List (not for usage questions)
> > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:
> unsubscribe
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



-- 

“The Man who says he can, and the man who says he can not.. Are both
correct”
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] OpenStack-Ansible testing with OpenVSwitch

[Michael Gale]

Hello JP,

Ok, I will do some more testing against the blog post and then hit up
the #openstack-ansible channel.

I need to finish a presentation on SFC first which is why I am looking into
OpenVSwitch.

Thanks
Michael

On Wed, Sep 27, 2017 at 6:25 AM, Jean-Philippe Evrard <
jean-phili...@evrard.me> wrote:

> Hello,
>
> We currently don't have a full scenario for openvswitch for an easy
> "one line" install.
> It still deserves more love. You could come on our channel in
> #openstack-ansible to discuss about it if you want. But the general
> idea should be close to the same explained in the blog post.
>
> Best regards,
> JP
>
> On Wed, Sep 27, 2017 at 12:13 AM, Michael Gale <gale.mich...@gmail.com>
> wrote:
> > Hello,
> >
> > I am trying to build a Pike All-in-One instance for OpenStack Ansible
> > testing, currently I have a few OpenStack versions being deployed using
> the
> > default Linux Bridge implementation.
> >
> > However I need a test environment to validate OpenVSwitch
> implementation, is
> > there a simple method to get an AIO installed?
> >
> > I tried following
> > https://medium.com/@travistruman/configuring-openstack-ansible-for-open-
> vswitch-b7e70e26009d
> > however Neutron is blowing up because it can't determine the name for the
> > Neutron Server. I am not sure if that is my issue or not, a reference
> > implementation of OpenStack AIO with OpenVSwitch would help me a lot.
> >
> > Thanks
> > Michael
> >
> > 
> __
> > OpenStack Development Mailing List (not for usage questions)
> > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:
> unsubscribe
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> >
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



-- 

“The Man who says he can, and the man who says he can not.. Are both
correct”
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] OpenStack-Ansible and Trove support

[Michael Gale]

Hello JP,

At this point in time I am only looking for a PoC environment, if it is
part of the AIO that is perfect for now.

I would also like to communicate within my organization that we could start
using Trove after X release cycle. We currently have no dependency on it's
availability.

Michael

On Wed, Sep 27, 2017 at 6:29 AM, Jean-Philippe Evrard <
jean-phili...@evrard.me> wrote:

> Hello Michael,
>
> On top of that, we intend to have a "role maturity" that will include
> when the role was proposed and it's current maturity phase, for more
> clarity, not unlike openstack project navigator.
>
> Our os_trove role has not received many commits recently, and the
> "maintenance mode" of Trove will probably impact you in the future.
> Do you intend to keep a trove installation in production, or do you
> want to do a PoC?
>
> Best regards,
> JP
>
> On Wed, Sep 27, 2017 at 12:24 AM, Amy Marrich <a...@demarco.com> wrote:
> > Michael,
> >
> > There are release notes for each release that will go over what's new,
> > what's on it's way out or even gone as well as bug fixes and other
> > information. Here's a link to the Ocata release notes for
> OpenStack-Ansible
> > which includes the announcement of the Trove role.
> >
> > https://docs.openstack.org/releasenotes/openstack-ansible/ocata.html
> >
> > Thanks,
> >
> > Amy (spotz)
> >
> > On Tue, Sep 26, 2017 at 6:04 PM, Michael Gale <gale.mich...@gmail.com>
> > wrote:
> >>
> >> Hello,
> >>
> >>Based on github and
> >> https://docs.openstack.org/openstack-ansible-os_trove/latest/ it looks
> like
> >> OpenStack-Ansible will support Trove under the Ocata release.
> >>
> >> Is that assumption correct? is there a better method to determine when a
> >> software component will likely be included in a release?
> >>
> >> Michael
> >>
> >> 
> __
> >> OpenStack Development Mailing List (not for usage questions)
> >> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:
> unsubscribe
> >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> >>
> >
> >
> > 
> __
> > OpenStack Development Mailing List (not for usage questions)
> > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:
> unsubscribe
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> >
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



-- 

“The Man who says he can, and the man who says he can not.. Are both
correct”
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

[openstack-dev] OpenStack-Ansible testing with OpenVSwitch

[Michael Gale]

Hello,

I am trying to build a Pike All-in-One instance for OpenStack Ansible
testing, currently I have a few OpenStack versions being deployed using the
default Linux Bridge implementation.

However I need a test environment to validate OpenVSwitch implementation,
is there a simple method to get an AIO installed?

I tried following
https://medium.com/@travistruman/configuring-openstack-ansible-for-open-vswitch-b7e70e26009d
however Neutron is blowing up because it can't determine the name for the
Neutron Server. I am not sure if that is my issue or not, a reference
implementation of OpenStack AIO with OpenVSwitch would help me a lot.

Thanks
Michael
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

[openstack-dev] OpenStack-Ansible and Trove support

[Michael Gale]

Hello,

   Based on github and
https://docs.openstack.org/openstack-ansible-os_trove/latest/ it looks like
OpenStack-Ansible will support Trove under the Ocata release.

Is that assumption correct? is there a better method to determine when a
software component will likely be included in a release?

Michael
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [networking-sfc]

[Michael Gale]

Hello Bernard,
I believe the design docs and API parts are good and once I had the
environment up and running I didn't have any problems following the
examples or running the commands.

My biggest hurdle was around getting the devstack environment functioning,
I was following the steps here:
https://wiki.openstack.org/wiki/Neutron/ServiceInsertionAndChaining

I think the issues are related to using Ubuntu 16.04 instead of Ubuntu
14.04 and devstack now recommends 16.04. So the OVS steps seem out of place
and in my local.conf file I needed to set:
--snip--
export SFC_UPDATE_OVS=False
# Disable security groups
Q_USE_SECGROUP=False
LIBVIRT_FIREWALL_DRIVER=nova.virt.firewall.NoopFirewallDriver
enable_plugin networking-sfc git://
git.openstack.org/openstack/networking-sfc stable/newton
--snip--

This could be related to my lack of experience with Devstack, also I was
concerned with having to set SFC_UPDATE_OVS=False in the configuration. Is
this affecting the underlying functionality of SFC.

Also the link to the Horizon add-on would be great.

Thanks
Michael


On Tue, Jan 24, 2017 at 6:30 AM, Bernard Cafarelli <bcafa...@redhat.com>
wrote:

> On 20 January 2017 at 00:06, Michael Gale <gale.mich...@gmail.com> wrote:
> > Hello,
> >
> > Are there updated install docs for sfc? The only install steps for a
> > testbed I can find are here and they seem outdated:
> > https://wiki.openstack.org/wiki/Neutron/ServiceInsertionAndChaining
> There is also a SFC chapter in the networking guide:
> http://docs.openstack.org/newton/networking-guide/config-sfc.html
>
> Which parts do you find outdated? Some references to Ubuntu/OVS
> versions may need a cleanup, but the design and API parts should still
> be OK
> (OSC client, SFC graph API, symmetric ports and other goodies are
> still under review and not yed merged)
>
> > Also from the conference videos there seems to be some Horizon menu /
> > screens that are available?
> Not for networking-sfc directly, but there is a SFC tab in the tacker
> horizon plugin (or will be, someone from the tacker team can confirm
> that)
>
>
> --
> Bernard Cafarelli
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



-- 

“The Man who says he can, and the man who says he can not.. Are both
correct”
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

[openstack-dev] [networking-sfc]

[Michael Gale]

Hello,

Are there updated install docs for sfc? The only install steps for a
testbed I can find are here and they seem outdated:
https://wiki.openstack.org/wiki/Neutron/ServiceInsertionAndChaining

Also from the conference videos there seems to be some Horizon menu /
screens that are available?

Michael
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

[openstack-dev] openstacksdk and compute limits for projects

[Michael Gale]

Hello,

Does anyone know what the equivalent of the following command would be
via the API?
`openstack limits show --absolute --project `

I am using an admin account to pull stats and information from a Mitaka
environment, now I can run the above command in bash, looping over each
project that exist. However I would like to get the information using the
openstacksdk via Python.

I can use:
`connection.compute.get_limits()`
 however that only works for the project I logged in with.
Michael
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

[openstack-dev] devstack with neutron, OVS and sfc?

[Michael Gale]

Hello,

I used posted this on the openstack user list but it might be a better
question for this group.

Does anyone know if neutron-sfc is working in devstack?

I started to follow the instructions here:
https://wiki.openstack.org/wiki/Neutron/ServiceInsertionAndChaining#
Single_Host_networking-sfc_installation_steps_and_testbed_setup

I ended up with a working devstack instance using:
- Ubuntu 16.04
- newton stable branches for devstack and networking-sfc
- I set an environment var to disable OVS recompile since 16.04 comes with
OVS 2.5.0 and the recompil was failing during the build.

I could build VM's, networks and I believe I setup a sfc implementation
correctly (portpairs, portgroups, portclassification, etc). I created a
ServiceVM on the same internal network as my source VM and used an neutron
router to access the outside world. I tried to route all outbound traffic
on port 80 through my ServiceVM.

The issue I ran into was that my ServiceVM would only see the initial
outbound SYN's after that the return traffic and data packets would always
go between the source VM and the external web server only.

>From the different test scenarios I ran, I could always see the initial
outbound SYN packets however it always seems that the neutron router would
route the return packets back via the normal routing rules and ignore my
sfc setup

Michael
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev