[openstack-dev] [tacker] PTL candidacy from yong sheng gong

2018-02-07 Thread Yongsheng Gong
This is my self-nomination to continue running as Tacker PTL for the Rocky cycle. Lots happened in Takcer Queens cycle. More documents, More features are coming in. VNFFG is enhanced, Kubernetes vim and container VNF are introduced. Private Zabbix based application monitoring is done too.

[openstack-dev] [requirements][release] FFE for constraints update for python-tackerclient bug-fix release

2018-02-07 Thread Yongsheng Gong
Hi, The tacker client has na initial queens release which does not have right reno notes. Recently I have added some reno patches. And also the team wants a feature to land in the queens release. I have requested the newer release at https://review.openstack.org/#/c/541638/

Re: [openstack-dev] [Neutron] Route cannot be deleted

2014-08-05 Thread Yongsheng Gong
try to check if there are floatingips on the VMs on that subnet 962b8364-a2b4-46cc-95be-28cbab62b8c2 On Tue, Aug 5, 2014 at 3:24 PM, Sayali Lunkad sayali.92...@gmail.com wrote: Hi, The issue was resolved by following the commands below. neutron port-update port-id --device_owner clear

[openstack-dev] is tenant-id in network API?

2014-07-06 Thread Yongsheng Gong
Hi, Today, I found the ​{tenant_id} is written in neutron API URLs at http://developer.openstack.org/api-ref-networking-v2.html. But when I tried to access it accordingly, it failed. I don't think we have tenant_id in network API URL. any Idea? regards, yong sheng gong UnitedStack Inc.

Re: [openstack-dev] [Neutron]One security issue about floating ip

2014-06-26 Thread Yongsheng Gong
I have reported it on neutron project https://bugs.launchpad.net/neutron/+bug/1334926 On Fri, Jun 27, 2014 at 5:07 AM, Vishvananda Ishaya vishvana...@gmail.com wrote: I missed that going in, but it appears that clean_conntrack is not done on disassociate, just during migration. It sounds like

Re: [openstack-dev] [Neutron] DVR SNAT shortcut

2014-06-25 Thread Yongsheng Gong
Hi, for each compute node to have SNAT to Internet, I think we have the drawbacks: 1. SNAT is done in router, so each router will have to consume one public IP on each compute node, which is money. 2. for each compute node to go out to Internet, the compute node will have one more NIC, which

Re: [openstack-dev] [Neutron][L3] BGP Dynamic Routing Proposal

2014-06-05 Thread Yongsheng Gong
I think maybe we can device a kind of framework so that we can plugin different BGP speakers. On Thu, Jun 5, 2014 at 2:59 PM, YAMAMOTO Takashi yamam...@valinux.co.jp wrote: hi, ExaBgp was our first choice because we thought that run something in library mode would be much more easy to

Re: [openstack-dev] [neutron] Service VMs

2014-04-21 Thread Yongsheng Gong
+1 for its own project for service VM. On Tue, Apr 22, 2014 at 9:41 AM, Kyle Mestery mest...@noironetworks.comwrote: On Mon, Apr 21, 2014 at 4:20 PM, Doug Hellmann doug.hellm...@dreamhost.com wrote: On Mon, Apr 21, 2014 at 3:07 PM, Kyle Mestery mest...@noironetworks.com wrote: For the

Re: [openstack-dev] Neutron error using devstack

2014-03-03 Thread Yongsheng Gong
you need to give the neutron command the login certificate (user name, password, tenant etc) to work. for example: export OS_USERNAME=admin export OS_PASSWORD=password export OS_TENANT_NAME=admin export OS_AUTH_URL=http://localhost:5000/v2.0 On Sun, Mar 2, 2014 at 2:05 AM, abhishek jain

Re: [openstack-dev] [Neutron]Do you think tanent_id should be verified

2014-02-17 Thread Yongsheng Gong
It is not easy to enhance it. If we check the tenant_id on creation, if should we also to do some job when keystone delete tenant? On Mon, Feb 17, 2014 at 6:41 AM, Dolph Mathews dolph.math...@gmail.comwrote: keystoneclient.middlware.auth_token passes a project ID (and name, for convenience)

[openstack-dev] vhost-{pid} takes up cpu

2014-02-14 Thread Yongsheng Gong
Hi deal stackers, I am running a devstack with two nodes: one is controller (no nova-compute running) and other is compute. I am using neutron ml2 plugin and ovs agent with GRE tunnel. I started a VM and tried to run iperf testing: 1. start iperf as server role in the VM, which has a floating

Re: [openstack-dev] multiple external networks not working

2014-02-13 Thread Yongsheng Gong
in order that the router is scheduled to a l3 agent with a given external network, we should create the router and set its gateway interface on that external network just after the router creation. On Thu, Feb 13, 2014 at 3:26 PM, Nick Ma skywalker.n...@gmail.com wrote: I have a multiple

Re: [openstack-dev] [Neutron] Nominate Oleg Bondarev for Core

2014-02-10 Thread Yongsheng Gong
+1 On Tue, Feb 11, 2014 at 7:28 AM, Mark McClain mmccl...@yahoo-inc.comwrote: All- I'd like to nominate Oleg Bondarev to become a Neutron core reviewer. Oleg has been valuable contributor to Neutron by actively reviewing, working on bugs, and contributing code. Neutron cores please

Re: [openstack-dev] [Neutron] Developer documentation - linking to slideshares?

2014-02-08 Thread Yongsheng Gong
My slides are also available to be used. On Thu, Feb 6, 2014 at 2:27 AM, Collins, Sean sean_colli...@cable.comcast.com wrote: On Tue, Feb 04, 2014 at 07:52:22AM -0600, Anne Gentle wrote: Currently the docs contributor sign the same CLA as code contributors. I'd encourage you to use the

Re: [openstack-dev] [Neutron] About ports backing floating IPs

2014-01-14 Thread Yongsheng Gong
for all ports: user can change the device_id and device owner easily, it will cause mess in particularly for system ports, such as router interface and gateway ports, dhcp ports etc. dhcp port: there is not point of updating its security groups, and I don't know the effect when we update its Ip

Re: [openstack-dev] [Neutron] Alembic migrations

2013-12-22 Thread Yongsheng Gong
but mark mcclain https://review.openstack.org/#/dashboard/2592 seems not to agree it. so it is blocked for a long time. On Sun, Dec 22, 2013 at 10:38 PM, Roman Podoliaka rpodoly...@mirantis.comwrote: Hi Gary, It's a known bug (the migration script creating 'agents' table is mistakenly not

Re: [openstack-dev] [neutron] Third party Neutron plugin testing meeting

2013-12-10 Thread Yongsheng Gong
It is 1am beijing time, so I am afraid I will not join. On Wed, Dec 11, 2013 at 10:10 AM, Akihiro Motoki amot...@gmail.com wrote: Thanks Kyle for coordinating the meeting. The time is midnight to me, but it fits everyone except me. I'll try the time but not sure. Anyway I will follow the

Re: [openstack-dev] [neutron] Third party Neutron plugin testing meeting

2013-12-10 Thread Yongsheng Gong
have it at a time friendly to those in Asian timezones. Yong and Akihiro, can you guys propose a timeslot which works for you guys and I'll see about setting the followup meeting up. Thanks, Kyle On Dec 10, 2013, at 8:14 PM, Yongsheng Gong gong...@unitedstack.com wrote: It is 1am beijing

Re: [openstack-dev] {opestack][Neutron - FWaaS] CLI Firewall-Policy-Update Bug

2013-12-10 Thread Yongsheng Gong
try to use: neutron firewall-policy-update dd2c7d33-2c36-4200-b1f8-daaa1ab202d5 --firewall-rules list=true rule1 On Wed, Dec 11, 2013 at 1:37 PM, trinath.soman...@freescale.com trinath.soman...@freescale.com wrote: Hi – I found this issue with FWaaS CLI commands. When I issue the

Re: [openstack-dev] Neutron Distributed Virtual Router

2013-12-09 Thread Yongsheng Gong
If distributed router is good enough, why do we still need non-distributed router? On Tue, Dec 10, 2013 at 9:04 AM, Ian Wells ijw.ubu...@cack.org.uk wrote: I would imagine that, from the Neutron perspective, you get a single router whether or not it's distributed. I think that if a router is

Re: [openstack-dev] [neutron] only one subnet_id is allowed behind a router for vpnservice object

2013-12-05 Thread Yongsheng Gong
Yongsheng Gong gong...@unitedstack.com: I think we should allow more than subnet_id in one vpnservice object. but the model below limits only one subnet_id is used. https://github.com/openstack/neutron/blob/master/neutron/extensions/vpnaas.py RESOURCE_ATTRIBUTE_MAP = { 'vpnservices

Re: [openstack-dev] [Neutron] DHCP Agent Reliability

2013-12-03 Thread Yongsheng Gong
another way is to have a large agent_down_time, by default it is 9 secs. On Wed, Dec 4, 2013 at 7:55 AM, Carl Baldwin c...@ecbaldwin.net wrote: Stephen, all, I agree that there may be some opportunity to split things out a bit. However, I'm not sure what the best way will be. I recall that

Re: [openstack-dev] [Neutron] Rename 'tenant' to 'project' as per Keystone?

2013-12-03 Thread Yongsheng Gong
who can tell me the whole story about keystone(or openstack) changes between project-tenant-project? On Wed, Dec 4, 2013 at 9:58 AM, Adam Young ayo...@redhat.com wrote: On 11/26/2013 12:07 PM, Maru Newby wrote: Keystone is almost finished replacing the term 'tenant' with 'project' (see

[openstack-dev] whey cannot we update vpn service and IPsecSiteConnection when they are in pending_create state

2013-12-01 Thread Yongsheng Gong
currently, when vpn service and IPsecSiteConnection are created, their state is PENDING_CREATE, which disallows updating at: def assert_update_allowed(self, obj): status = getattr(obj, 'status', None) _id = getattr(obj, 'id', None) if utils.in_pending_status(status):

Re: [openstack-dev] Reg : Security groups implementation using openflows in quantum ovs plugin

2013-11-18 Thread Yongsheng Gong
Is the open flow rule stateful? On Tue, Nov 19, 2013 at 6:26 AM, Kanthi P pavuluri.kan...@gmail.com wrote: Hi All, We are planning to implement quantum security groups using openflows for ovs plugin instead of iptables which is the case now. Doing so we can avoid the extra linux bridge

Re: [openstack-dev] [Neutron] Plugin and Driver Inclusion Requirements

2013-11-17 Thread Yongsheng Gong
For third party testing, I am afraid these tests will make the patch merge process much longer since each patch, which even has nothing to do with the specific plugins, will triggers the unwanted third party testing jobs. On Fri, Nov 15, 2013 at 4:20 AM, Mark McClain

Re: [openstack-dev] [Glance] Summit Session Summaries

2013-11-15 Thread Yongsheng Gong
great, thanks On Sat, Nov 16, 2013 at 5:10 AM, Mark Washenberger mark.washenber...@markwash.net wrote: Hi folks, My summary notes from the OpenStack Design Summit Glance sessions follow. Enjoy, and please help correct any misunderstandings. Image State Consistency:

Re: [openstack-dev] [neutron] [ml2] What is the router plugin for ml2

2013-10-30 Thread Yongsheng Gong
the router extension is now a service plugin for core ML2 plugin: service_plugins = neutron.services.l3_router.l3_router_plugin.L3RouterPlugin On Thu, Oct 31, 2013 at 11:46 AM, Xu Zhongxing xu_zhong_x...@163.comwrote: I noticed that the ml2 plugin does not support router extension itself. In

Re: [openstack-dev] [Neutron][LBaaS] LBaaS plans for Icehouse

2013-10-23 Thread Yongsheng Gong
HI, the following time is ok for me: UTC+8: 6:00-23:00 UTC: 22:00-15:00 If it is scheduled during these time slot, I will join. Thanks Yong Sheng Gong On Wed, Oct 23, 2013 at 4:50 PM, Eugene Nikanorov enikano...@mirantis.comwrote: Hi Neutron folks! We're going to have an IRC meeting where

Re: [openstack-dev] [Neutron] Tenant's info from plugin/services

2013-10-16 Thread Yongsheng Gong
I think this should be done in keystone. maybe you need a CLI command: keystone tenant-get On Thu, Oct 17, 2013 at 6:55 AM, Ivar Lazzaro i...@embrane.com wrote: Hello Everyone, ** ** I was wondering if there’s a “standard” way within Neutron to retrieve tenants’ specific information

Re: [openstack-dev] Tricky questions - 1/2 Quantum Network Object

2013-10-14 Thread Yongsheng Gong
Regards ** ** Marco ** ** ** ** *From:* Yongsheng Gong [mailto:gong...@unitedstack.com] *Sent:* den 11 oktober 2013 10:56 *To:* OpenStack Development Mailing List *Subject:* Re: [openstack-dev] Tricky questions - 1/2 Quantum Network Object ** ** ** ** ** ** On Fri

Re: [openstack-dev] Tricky questions - 1/2 Quantum Network Object

2013-10-11 Thread Yongsheng Gong
On Fri, Oct 11, 2013 at 4:41 PM, Marco Fornaro marco.forn...@huawei.comwrote: Hi All, ** ** (I already posted this on openstack mail list, but perhaps it’s more a developer stuff J) Some Tricky questions I ask help for (email 1 of 2): ** ** ** ** *Quantum Network

Re: [openstack-dev] Tricky questions - 2/2 NOVA COMPUTE: are Booted VMs independent by other openstack/quantum services?

2013-10-11 Thread Yongsheng Gong
On Fri, Oct 11, 2013 at 4:41 PM, Marco Fornaro marco.forn...@huawei.comwrote: Hi All, ** ** (I already posted this on openstack mail list, but perhaps it’s more a developer stuff J) Some Tricky questions I ask help for (email 2 of 2): ** ** (please refer to a scenario

Re: [openstack-dev] VM instances Can not connect to external

2013-09-27 Thread Yongsheng Gong
have u enable the port interface of br-ex? For example ifconfig eth1 up On Fri, Sep 27, 2013 at 7:26 PM, Jeff Cai jeff_...@symantec.com wrote: I did all that the doc tells me to do, which includes setting up a bridge in the network node. ** ** Just like

Re: [openstack-dev] [LBaaS][Horizon] Subnet for VIP?

2013-09-24 Thread Yongsheng Gong
VIP can be on a different subnet than the members are on. But we need to set up a router so that the haproxy can work. On Tue, Sep 24, 2013 at 11:40 PM, f...@vmware.com wrote: I didn't know current lbaas plugin has such limitation. Although I think the UI should not incur such limitation as

[openstack-dev] unable to run tox due to the '--pre' argument

2013-09-18 Thread Yongsheng Gong
Hi, I tried to run tests after I changed some codes in python neutron client, But I failed. Could someone please help me out? $ tox -e py27 GLOB sdist-make: /mnt/data/opt/stack/python-neutronclient/setup.py py27 create: /mnt/data/opt/stack/python-neutronclient/.tox/py27 py27 installdeps:

Re: [openstack-dev] unable to run tox due to the '--pre' argument

2013-09-18 Thread Yongsheng Gong
/python-neutronclient/.tox/py27/lib/python2.7/site-packages/pip-1.3.1-py2.7.egg (python 2.7) It is changed back!!! Regards, Yong Sheng Gong On Thu, Sep 19, 2013 at 9:02 AM, Jeremy Stanley fu...@yuggoth.org wrote: On 2013-09-19 08:12:47 +0800 (+0800), Yongsheng Gong wrote: [...] $ tox -e py27

Re: [openstack-dev] [Neutron] - Evacuate a agent node

2013-09-12 Thread Yongsheng Gong
set the agent's admin status to False will empty up the agent's resources. but it will not move the owned resources. On Thu, Sep 12, 2013 at 3:36 PM, Endre Karlson endre.karl...@gmail.comwrote: Is it possible to get a evacuation command for a node running agents ? Say moving all the agents

Re: [openstack-dev] [Neutron] - Evacuate a agent node

2013-09-12 Thread Yongsheng Gong
To implement the 'evacuation' is also possible. On Thu, Sep 12, 2013 at 3:43 PM, Yongsheng Gong gong...@unitedstack.comwrote: set the agent's admin status to False will empty up the agent's resources. but it will not move the owned resources. On Thu, Sep 12, 2013 at 3:36 PM, Endre Karlson

Re: [openstack-dev] reg. Multihost dhcp feature in Havana ?

2013-09-12 Thread Yongsheng Gong
no, we don't get agreement on the implementation. You can get some ideas from comments of https://review.openstack.org/#/c/37919/ Yong Sheng Gong Unitedstack Inc. On Thu, Sep 12, 2013 at 4:57 PM, Gopi Krishna B gopi97...@gmail.com wrote: On Tue, Sep 10, 2013 at 1:46 PM, Gopi Krishna B

Re: [openstack-dev] About multihost patch review

2013-08-29 Thread Yongsheng Gong
could be totally wrong and crazy, so please provide some feedback. Thanks, Edgar From: Yongsheng Gong gong...@unitedstack.com Date: Monday, August 26, 2013 2:58 PM To: Kyle Mestery (kmestery) kmest...@cisco.com, Aaron Rosen aro...@nicira.com, Armando Migliaccio amigliac

Re: [openstack-dev] About multihost patch review

2013-08-28 Thread Yongsheng Gong
On Tue, Aug 27, 2013 at 1:23 PM, Maru Newby ma...@redhat.com wrote: On Aug 26, 2013, at 9:39 PM, Yongsheng Gong gong...@unitedstack.com wrote: First 'be like nova-network' is a merit for some deployments. I'm afraid 'merit' is a bit vague for me. Would you please elaborate? second

Re: [openstack-dev] [neutron] Why does nova.network.neutronv2.get_client(context, admin=True) drop auth_token?

2013-08-28 Thread Yongsheng Gong
For admin, we must use admin token. In general, the token from API context is not of role admin. I think the BP can help https://blueprints.launchpad.net/keystone/+spec/reuse-token On Thu, Aug 29, 2013 at 8:12 AM, Roman Verchikov rverchi...@mirantis.comwrote: Hi stackers! Sorry for the

Re: [openstack-dev] About multihost patch review

2013-08-27 Thread Yongsheng Gong
From: Yongsheng Gong gong...@unitedstack.com Date: Monday, August 26, 2013 2:58 PM To: Kyle Mestery (kmestery) kmest...@cisco.com, Aaron Rosen aro...@nicira.com, Armando Migliaccio amigliac...@vmware.com, Akihiro MOTOKI amot...@gmail.com, Edgar Magana emag...@plumgrid.com, Maru Newby ma

Re: [openstack-dev] About multihost patch review

2013-08-26 Thread Yongsheng Gong
/multihostnetwork.py I have commented back, what is your opinion about it? Regards, Yong Sheng Gong On Fri, Aug 16, 2013 at 9:28 PM, Kyle Mestery (kmestery) kmest...@cisco.com wrote: Hi Yong: I'll review this and try it out today. Thanks, Kyle On Aug 15, 2013, at 10:01 PM, Yongsheng Gong gong

[openstack-dev] [keystone] Two BPs for managing the tokens

2013-08-23 Thread Yongsheng Gong
Hi, Talked with Henry Nash and Jamie Lennox on IRC, I have created two BPs to manage the keystone tokens: 1. https://blueprints.launchpad.net/keystone/+spec/periodically-flush-expired-token which is used to delete expired token 2. https://blueprints.launchpad.net/keystone/+spec/reuse-token which

Re: [openstack-dev] [keystone] Two BPs for managing the tokens

2013-08-23 Thread Yongsheng Gong
but update the expiration time as if it were the first time the token had been generated. That wouldn't work for PKI tokens, as the resulting signature would have to change. Mark From: Yongsheng Gong [mailto:gong...@unitedstack.com] Sent: Friday, August 23, 2013 12:40 AM

[openstack-dev] oauth and keystone

2013-08-20 Thread Yongsheng Gong
Hi, I have seen the code about oauth in the keystone but I cannot find the document about how to setup keystone and other openstack services to enable oauth. Can anyone tell me how to setup an env like this? Thanks Yong Sheng Gong ___ OpenStack-dev