Re: [openstack-dev] [kolla] the user in container should NOT have write permission for configuration file

2016-09-26 Thread Jeffrey Zhang
On Mon, Sep 26, 2016 at 11:03 PM, Christian Berendt < bere...@betacloud-solutions.de> wrote: > Confirmed. Please do not make configuration files world readable. > > We use volumes for the configuration file directories. Why do we not > simply use read only volumes? This way we do not have to

Re: [openstack-dev] [qa] tempest-cores update

2016-09-26 Thread Ken'ichi Ohmichi
Hi Hugh, 2016-09-25 22:50 GMT-07:00 Hugh Blemings : > Hi Ohmichi-san, > > Firstly congratulations on becoming PTL for Quality Assurance! Thanks >> As previous mail, Marc has resigned from tempest-cores. >> In addition, David also has done from tempest-cores to concentrate on

[openstack-dev] [Neutron] Preparing RC2

2016-09-26 Thread Armando M.
Neutrinos, A this point, please consider the list of fixes for RC2 [1] final. We are no longer considering adding anything to the list unless it's critical and preventing merges. Zuul is pretty backed up so we need to clear the currently backlog before considering adding anything else. We have a

Re: [openstack-dev] [TripleO] TripleO Core nominations

2016-09-26 Thread Carlos Camacho Gonzalez
Hi guys!!!, This is awesome, I really appreciate all the support/guidance and help from you! The list is quite long, so forth, a big thanks for all of you. Cheers, Carlos On Mon, Sep 26, 2016 at 6:04 PM, Steven Hardy wrote: > On Thu, Sep 15, 2016 at 10:20:07AM +0100, Steven

Re: [openstack-dev] [kolla] the user in container should NOT have write permission for configuration file

2016-09-26 Thread Sam Yaple
On Mon, Sep 26, 2016 at 3:03 PM, Christian Berendt < bere...@betacloud-solutions.de> wrote: > > On 26 Sep 2016, at 16:43, Sam Yaple wrote: > > > > So this actually makes it _less_ secure. The 0600 permissions were > chosen for a reason. The nova.conf file has passwords to the

[openstack-dev] [release][keystone] keystone Newton RC2 available

2016-09-26 Thread Doug Hellmann
Hello everyone, A new release candidate for keystone for the end of the Newton cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/keystone/keystone-10.0.0.0rc2.tar.gz Unless release-critical issues are found that warrant a release candidate respin, this

[openstack-dev] [ironic] weekly subteam report

2016-09-26 Thread Loo, Ruby
Hi, Here is this week's subteam report for Ironic. As usual, this is pulled directly from the Ironic whiteboard[0] and formatted. Bugs (dtantsur) === - Stats (diff between 16 Sep 2016 and 26 Sep 2016) - Ironic: 195 bugs (+9) + 216 wishlist items (+1). 0 new (-1), 159 in progress

[openstack-dev] [Security] New blog post - "Secure Development in Python"

2016-09-26 Thread Travis McPeak
For those that aren't aware the OSSP maintains a blog: http://openstack-security.github.io/. I published a new post today about resources created by the OSSP to help developers write secure Python code. You can view it here:

Re: [openstack-dev] [keystone][nova] "admin" role and "rule:admin_or_owner" confusion

2016-09-26 Thread rezroo
I am still confused how the "cloud admin" role is fulfilled in Liberty release. For example, I used "nova --debug delete" to see how the project:admin/user:admin deletes an instance of the demo project. Basically, we use the project:admin/user:admin token to get a list of instances for all

Re: [openstack-dev] [glance] newton rc-2 deadline

2016-09-26 Thread Nikhil Komawar
Added notes: For all the bugs that are identified likely candidates need to be tagged *newton-rc-potential*. This tag has been added to the official glance bug tags list and can also be used as a filter to view all of the potential rc bugs. References:

Re: [openstack-dev] [kolla] the user in container should NOT have write permission for configuration file

2016-09-26 Thread Jeffrey Zhang
Hey Sam, Yes. world readable is bad. But writable for current running service is also bad. But in nova.conf, the rootwrap_config is configurable. It can be changed to a custom file to gain root permission. # nova.conf rootwrap_config = /tmp/rootrwap.conf # /tmp/rootwrap.conf [DEFAULT]

Re: [openstack-dev] [nova][cinder] Schedule Instances according to Local disk based Volume?

2016-09-26 Thread Joshua Harlow
Huang Zhiteng wrote: On Mon, Sep 26, 2016 at 12:05 PM, Joshua Harlow > wrote: Huang Zhiteng wrote: In eBay, we did some inhouse change to Nova so that our big data type of use case can have physical disks as

[openstack-dev] [puppet] [infra] Request for old branches removal

2016-09-26 Thread Emilien Macchi
Greatings Infra, This is an official request to remove old branches for Puppet OpenStack modules: puppet-ceilometer puppet-cinder puppet-glance puppet-heat puppet-horizon puppet-keystone puppet-neutron puppet-nova puppet-openstack_extras puppet-openstacklib puppet-swift puppet-tempest Please

Re: [openstack-dev] [TripleO] TripleO Core nominations

2016-09-26 Thread Steven Hardy
On Thu, Sep 15, 2016 at 10:20:07AM +0100, Steven Hardy wrote: > Hi all, > > As we work to finish the last remaining tasks for Newton, it's a good time > to look back over the cycle, and recognize the excellent work done by > several new contributors. > > We've seen a different contributor

[openstack-dev] [release][zaqar] zaqar Newton RC2 available

2016-09-26 Thread Doug Hellmann
Hello everyone, A new release candidate for zaqar for the end of the Newton cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/zaqar/zaqar-3.0.0.0rc2.tar.gz Unless release-critical issues are found that warrant a release candidate respin, this candidate

Re: [openstack-dev] [kolla] the user in container should NOT have write permission for configuration file

2016-09-26 Thread Sam Yaple
On Mon, Sep 26, 2016 at 1:18 PM, Jeffrey Zhang wrote: > Using the same user for running service and the configuration files is > a danger. i.e. the service running user shouldn't change the > configuration files. > > a simple attack like: > * a hacker hacked into

[openstack-dev] [murano] IRC Meeting time suggestion

2016-09-26 Thread Omar Shykhkerimov
Hello team! As every big project Murano is getting more contributors working on it. Our current IRC-meetings are held from 5pm till 6pm UTC every Tuesday, but it looks like this time isn't comfortable for every Murano contributor. Here is the suggestion: have alternating meetings: at 5PM UTC on

Re: [openstack-dev] [Glance] Cores using -2 votes

2016-09-26 Thread Flavio Percoco
On 23/09/16 10:12 -0500, Ian Cordasco wrote:   -Original Message- From: Nikhil Komawar Reply: Nikhil Komawar Date: September 23, 2016 at 10:04:51 To: OpenStack Development Mailing List (not for usage questions)

[openstack-dev] Gerrit login issues and zuul-cloner related job failures

2016-09-26 Thread Clark Boylan
Hello, Just a heads up that Launchpad/Ubuntu One's openid services is functioning again and logins for Gerrit and other services should now be functional. We also saw a bunch of failing jobs this morning due to a misconfiguration of zuul-cloner. This change has been reverted and jobs are happy

Re: [openstack-dev] [kolla] the user in container should NOT have write permission for configuration file

2016-09-26 Thread Steven Dake (stdake)
Sam is correct here. This is the why behind the how ☺ Regards -steve From: Sam Yaple Reply-To: "s...@yaple.net" , "OpenStack Development Mailing List (not for usage questions)" Date: Monday, September 26, 2016 at 7:43 AM

[openstack-dev] [all][release][nova][magnum][murano][horizon][searchlight][trove] newton translations

2016-09-26 Thread Doug Hellmann
There are several projects with open translations from the import job this morning. These may trigger additional release candidates, which will need to be filed by Thursday. Please keep an eye on the existing patches [1], as well as any others coming this week, and merge them quickly. Then set up

Re: [openstack-dev] [kolla][fuel][tripleo] Reference architecture to deploy OpenStack on k8s

2016-09-26 Thread Flavio Percoco
On 23/09/16 17:47 +, Steven Dake (stdake) wrote: Flavio, Forgive the top post and lack of responding inline – I am dealing with lookout 2016 which apparently has a bug here [0]. Your question: I can contribute to kolla-kubernetes all you want but that won't give me what I asked for in my

Re: [openstack-dev] [kolla] the user in container should NOT have write permission for configuration file

2016-09-26 Thread Sam Yaple
On Mon, Sep 26, 2016 at 4:32 PM, Jeffrey Zhang wrote: > Hey Sam, > > Yes. world readable is bad. But writable for current running service is > also bad. > > But in nova.conf, the rootwrap_config is configurable. It can be changed > to a custom file to gain root

[openstack-dev] OpenStack Developer Mailing List Digest September 17-23

2016-09-26 Thread Mike Perez
HTML version: http://www.openstack.org/blog/2016/09/openstack-developer-mailing-list-digest-20160923/ Announcing firehose.openstack.org = * A MQTT based unified message bus for infra services. * This allows a single place to go for consuming messages of events

Re: [openstack-dev] [all][elections][TC] TC Candidacy

2016-09-26 Thread Jay Pipes
John, appreciate your candor and candidacy. Some questions inline for you... On 09/26/2016 06:57 AM, John Davidge wrote: Last year, the TC moved OpenStack away from the Integrated Release, and into The Big Tent. This removed the separation between those projects considered integral to

[openstack-dev] Call for Mentors and Mentees!

2016-09-26 Thread Kendall Nelson
Hello All! We are excited to kick off the next round of mentoring sponsored by the Women of OpenStack! Anyone can sign up who is interested in mentoring or in need of a mentor! Mentors! We can set you up as a technical mentor based on your areas of expertise within the community or we can match

Re: [openstack-dev] [all][elections][TC] TC Candidacy

2016-09-26 Thread Jeremy Stanley
On 2016-09-26 15:39:23 -0400 (-0400), Jay Pipes wrote: [...] > >* Reinstate Stackforge as the primary incubator for new projects > > Having Stackforge as a separate Github organization and set of repositories > was a maintenance nightmare due to the awkwardness of renaming projects when > they

[openstack-dev] Pecan Version 1.2

2016-09-26 Thread Dave McCowan (dmccowan)
The Barbican project uses Pecan as our web framework. At some point recently, OpenStack started picking up their new version 1.2. This version [1] changed one of their APIs such that certain calls that used to return 200 now return 204. This has caused immediate problems for Barbican (our

Re: [openstack-dev] [ironic] [qa] Testing config drive creation in our CI

2016-09-26 Thread Dmitry Tantsur
Just bringing QA folks attention: please merge https://review.openstack.org/#/c/375467/ as we've regressed in our testing coverage (see below for details). On 09/23/2016 08:21 PM, Jim Rollenhagen wrote: On Fri, Sep 23, 2016 at 7:37 AM, Dmitry Tantsur wrote: Hi folks!

[openstack-dev] [neutron] [sahara] Unable to ping virtual machines with floating IPs

2016-09-26 Thread Sudipta Biswas
Hi, I am trying an OpenStack Sahara based on OpenStack Mitaka (Lab experiment) - using a single controller and compute node. The controller node is running inside a virtual machine on top of the compute node. (This runs Sahara as well) The controller node has two interfaces - one public via

Re: [openstack-dev] [all] Ocata Design Summit - Proposed slot allocation

2016-09-26 Thread Thierry Carrez
Zhipeng Huang wrote: > Hi Thierry, > > Nomad [1] (not an official project yet :) ) team would like to request > one room for developer meetup, if you have any given-back room available > that would be fantastic :) > > [1]https://wiki.openstack.org/wiki/Nomad Hi Zhipeng, We didn't get that

Re: [openstack-dev] Devstack, Tempest, and TLS

2016-09-26 Thread Dmitry Tantsur
On 09/24/2016 02:04 AM, Clark Boylan wrote: Earlier this month there was a thread on replacing stud in devstack for the tls-proxy service [0]. Over the last week or so a bunch of work has happened around this so I figured I would send an update. Also noticed that Ironic's devstack plugin

[openstack-dev] [mistral] Team meeting - 09/26/2016

2016-09-26 Thread Renat Akhmerov
Hi team, I’m inviting you to a team meeting today. It will be at #openstack-meeting at 16.00 UTC as usually. Agenda: Review action items Current status (progress, issues, roadblocks, further plans) RC2 release readiness Maintaining Launchpad projects (mistral and python-mistralclient) We need

Re: [openstack-dev] Pecan Version 1.2

2016-09-26 Thread Clay Gerrard
I'm interested to hear how this works out. I thought upper-constraints was somehow supposed to work to prevent this? Like maybe don't install a brand new shiny upstream version on the gate infrastructure test jobs until it passes all our tests? Prevent a fire drill? That bug was active back in

Re: [openstack-dev] [puppet] weekly meeting #91

2016-09-26 Thread Iury Gregory
Hi Puppeteers, If you have any topic to add for this week, please use the etherpad: https://etherpad.openstack.org/p/puppet-openstack-weekly-meeting-20160927 See you tomorrow =) 2016-09-20 12:07 GMT-03:00 Iury Gregory : > No topic/discussion in our agenda. Meeting

Re: [openstack-dev] Pecan Version 1.2

2016-09-26 Thread Matt Riedemann
On 9/26/2016 5:49 PM, Matt Riedemann wrote: On 9/26/2016 5:15 PM, Dave McCowan (dmccowan) wrote: I don't know what triggered the update. Our gates started breaking on September 23, but I can't find a commit around that time that would have caused this to happen. From: Clay Gerrard

Re: [openstack-dev] [kolla] the user in container should NOT have write permission for configuration file

2016-09-26 Thread Christian Berendt
> On 26 Sep 2016, at 16:43, Sam Yaple wrote: > > So this actually makes it _less_ secure. The 0600 permissions were chosen for > a reason. The nova.conf file has passwords to the DB and rabbitmq. If the > configuration files are world readable then those passwords could leak

Re: [openstack-dev] [kolla][fuel][tripleo] Reference architecture to deploy OpenStack on k8s

2016-09-26 Thread Fox, Kevin M
I think some of the disconnect here is a potential misunderstanding about what kolla-kubernetes is Ultimately, to me, kolla-kubernetes is a database of architecture bits to successfully deploy and manage OpenStack on k8s. Its building blocks. Pretty much what you asked for. There are a

Re: [openstack-dev] [nova][cinder] Schedule Instances according to Local disk based Volume?

2016-09-26 Thread Zhenyu Zheng
Hi, Thanks for the reply, actually approach one is not we are looking for, our demands is to attach the real physical volume from compute node to VMs, by this way we can achieve the performance we need for usecases such as big data, this can be done by cinder using BlockDeviceDriver, it is quite

Re: [openstack-dev] [nova][cinder] Schedule Instances according to Local disk based Volume?

2016-09-26 Thread Huang Zhiteng
On Tue, Sep 27, 2016 at 12:00 AM, Joshua Harlow wrote: > Huang Zhiteng wrote: > >> >> On Mon, Sep 26, 2016 at 12:05 PM, Joshua Harlow > > wrote: >> >> Huang Zhiteng wrote: >> >> In eBay, we did some inhouse

Re: [openstack-dev] [nova][cinder] Schedule Instances according to Local disk based Volume?

2016-09-26 Thread Huang Zhiteng
On Tue, Sep 27, 2016 at 9:21 AM, Zhenyu Zheng wrote: > Hi, > > Thanks for the reply, actually approach one is not we are looking for, our > demands is to attach the real physical volume from compute node to VMs, > by this way we can achieve the performance we need for

Re: [openstack-dev] [security] [salt] Removal of Security and OpenStackSalt project teams from the Big Tent

2016-09-26 Thread Flavio Percoco
On 22/09/16 17:15 -0400, Anita Kuno wrote: On 16-09-21 01:11 PM, Doug Hellmann wrote: Excerpts from Clint Byrum's message of 2016-09-21 08:56:24 -0700: I think it might also be useful if we could make the meeting bot remind teams of any pending actions they need to take such as elections upon

Re: [openstack-dev] [security] [salt] Removal of Security and OpenStackSalt project teams from the Big Tent

2016-09-26 Thread Hugh Blemings
Hiya, On 24/09/2016 03:46, Mike Perez wrote: On 11:03 Sep 21, Doug Hellmann wrote: A separate mailing list just for “important announcements” would need someone to decide what is “important”. It would also need everyone to be subscribed, or we would have to cross-post to the existing list.

Re: [openstack-dev] [ironic] [qa] Testing config drive creation in our CI

2016-09-26 Thread Sean Dague
On 09/26/2016 07:15 AM, Dmitry Tantsur wrote: > On 09/26/2016 01:09 PM, Sean Dague wrote: >> This should probably be set at the job level, and not buried inside >> devstack to be different based on hypervisor. That's going to be a lot >> more confusing to unwind later. > > Fair. So should we just

[openstack-dev] [ironic] ironic-inspector-core team update

2016-09-26 Thread Dmitry Tantsur
Hi folks! As you probably know, Imre has decided to leave us for other challenges, so our small core team has become even smaller. I'm removing him on his request. I suggest adding Milan Kovacik (milan or mkovacik on IRC) to the ironic-inspector-core team. He's been pretty active on

Re: [openstack-dev] [ironic] ironic-inspector-core team update

2016-09-26 Thread Sam Betts (sambetts)
+1 from me! Thanks for the contributions Milan :D Sam On 26/09/2016 10:24, "Dmitry Tantsur" wrote: >Hi folks! > >As you probably know, Imre has decided to leave us for other challenges, >so our >small core team has become even smaller. I'm removing him on his request. >

Re: [openstack-dev] [ironic] ironic-inspector-core team update

2016-09-26 Thread Anton Arefiev
+1. Thanks for your work Milan and congrats! On Mon, Sep 26, 2016 at 12:41 PM, Sam Betts (sambetts) wrote: > +1 from me! Thanks for the contributions Milan :D > > Sam > > On 26/09/2016 10:24, "Dmitry Tantsur" wrote: > > >Hi folks! > > > >As you probably

[openstack-dev] [all][elections][TC] TC Candidacy

2016-09-26 Thread John Davidge
Hi everyone, I'd like to submit my candidacy for the OpenStack Technical Committee. You may know me as john-davidge on IRC. I've been an active member of the OpenStack community since 2012 (Folsom). I met many of you for the first time while presenting the Curvature Network Visualization

Re: [openstack-dev] [ironic] [qa] Testing config drive creation in our CI

2016-09-26 Thread Sean Dague
This should probably be set at the job level, and not buried inside devstack to be different based on hypervisor. That's going to be a lot more confusing to unwind later. -Sean On 09/26/2016 04:55 AM, Dmitry Tantsur wrote: > Just bringing QA folks attention: please merge >

Re: [openstack-dev] [ironic] [qa] Testing config drive creation in our CI

2016-09-26 Thread Dmitry Tantsur
On 09/26/2016 01:09 PM, Sean Dague wrote: This should probably be set at the job level, and not buried inside devstack to be different based on hypervisor. That's going to be a lot more confusing to unwind later. Fair. So should we just set DEVSTACK_GATE_CONFIGDRIVE for all our jobs? Do you

Re: [openstack-dev] [ironic] ironic-inspector-core team update

2016-09-26 Thread Miles Gould
On 26/09/16 10:24, Dmitry Tantsur wrote: I suggest adding Milan Kovacik (milan or mkovacik on IRC) to the ironic-inspector-core team. He's been pretty active on ironic-inspector recently, doing meaningful reviews, and he's driving our HA work forward. Please vote with +1/-1. If no objections

Re: [openstack-dev] [ironic] ironic-inspector-core team update

2016-09-26 Thread Jim Rollenhagen
// jim On Mon, Sep 26, 2016 at 5:24 AM, Dmitry Tantsur wrote: > Hi folks! > > As you probably know, Imre has decided to leave us for other challenges, so > our small core team has become even smaller. I'm removing him on his > request. > > I suggest adding Milan Kovacik

Re: [openstack-dev] [ironic] [qa] Testing config drive creation in our CI

2016-09-26 Thread Jim Rollenhagen
On Mon, Sep 26, 2016 at 7:29 AM, Sean Dague wrote: > On 09/26/2016 07:15 AM, Dmitry Tantsur wrote: >> On 09/26/2016 01:09 PM, Sean Dague wrote: >>> This should probably be set at the job level, and not buried inside >>> devstack to be different based on hypervisor. That's going to

Re: [openstack-dev] [ironic] ironic-inspector-core team update

2016-09-26 Thread milanisko k
Thanks guys! :D -- milan po 26. 9. 2016 v 14:46 odesílatel Jim Rollenhagen napsal: > // jim > > > On Mon, Sep 26, 2016 at 5:24 AM, Dmitry Tantsur > wrote: > > Hi folks! > > > > As you probably know, Imre has decided to leave us for other

[openstack-dev] [nova] Setting up vmware workstation 12 vm to have numa nodes and pci devices

2016-09-26 Thread Carlton, Paul (Cloud Services)
Gary/All I run devstack environments in vmware workstation and I'd like to create a vm that has multiple numa nodes and pci devices so I can test nova code that utilizes these features. I've tried playing with the setting documented in the vmware documentation, i.e. adding

Re: [openstack-dev] [kolla] the user in container should NOT have write permission for configuration file

2016-09-26 Thread Jeffrey Zhang
Using the same user for running service and the configuration files is a danger. i.e. the service running user shouldn't change the configuration files. a simple attack like: * a hacker hacked into nova-api container with nova user * he can change the /etc/nova/rootwrap.conf file and

Re: [openstack-dev] [nova] Can all virt drivers provide a disk 'id' for the diagnostics API?

2016-09-26 Thread Alex Xu
2016-09-23 20:38 GMT+08:00 Daniel P. Berrange : > On Fri, Sep 23, 2016 at 07:32:36AM -0500, Matt Riedemann wrote: > > On 9/23/2016 3:54 AM, Daniel P. Berrange wrote: > > > On Thu, Sep 22, 2016 at 01:54:21PM -0500, Matt Riedemann wrote: > > > > Sergey is working on a spec to

[openstack-dev] [packaging][rpm] 3rd-party gates promotion to voting gates

2016-09-26 Thread Haïkel
Hi, following our discussions about 3rd party gates in RPM packaging project, I suggest that we vote in order to promote the following gates as voting: - MOS CI - SUSE CI After promotion, all patchsets submitted will have to validate these gates in order to get merged. And gates maintainers

Re: [openstack-dev] [tripleo] what's up in upgrades?

2016-09-26 Thread mathieu bultel
Hi all, Since we decided to switch on OVB provisioner for the CI, the upgrade jobs is now working really better and consistently. Unfortunately, I can answer now if we will reach the timeout with those jobs because the current state of the upgrade (mitaka to newton) is currently broken due to a

Re: [openstack-dev] [packaging][rpm] 3rd-party gates promotion to voting gates

2016-09-26 Thread Ivan Udovichenko
Hi, Thank you for bringing this topic up! +1 from me. We will do our best to keep services up-and-running from MOS (Mirantis) side. On 09/26/2016 02:48 PM, Haïkel wrote: > Hi, > > following our discussions about 3rd party gates in RPM packaging project, > I suggest that we vote in order to

Re: [openstack-dev] [Nova] Proposal for Nova Integration tests

2016-09-26 Thread Stephen Finucane
On Fri, 2016-09-23 at 13:33 -0400, Prasanth Anbalagan wrote: > Adding the project to email subject. > > Thanks > Prasanth Anbalagan > > On Fri, 2016-09-23 at 12:56 -0400, Prasanth Anbalagan wrote: > > > > Hi, > > > > Continuing the topic on the need for integration style tests for > > Nova > >

[openstack-dev] [OSC] Bug, spec, BP or something else for adding new commands to OSC?

2016-09-26 Thread Sergey Belous
Hello everyone. I started working on this blueprint "Implement neutron quota commands" [1] and now there is a patch, that adds quota delete command to python-openstackclient [2] (I will also very appreciate if you will look on it when will have a free time, thanks :) But some times ago I had

Re: [openstack-dev] [nova] Can all virt drivers provide a disk 'id' for the diagnostics API?

2016-09-26 Thread Daniel P. Berrange
On Mon, Sep 26, 2016 at 09:31:39PM +0800, Alex Xu wrote: > 2016-09-23 20:38 GMT+08:00 Daniel P. Berrange : > > > On Fri, Sep 23, 2016 at 07:32:36AM -0500, Matt Riedemann wrote: > > > On 9/23/2016 3:54 AM, Daniel P. Berrange wrote: > > > > On Thu, Sep 22, 2016 at 01:54:21PM

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

2016-09-26 Thread Stephen Finucane
On Wed, 2016-09-21 at 11:16 -0400, Doug Hellmann wrote: > Excerpts from Matt Riedemann's message of 2016-09-21 09:49:29 -0500: > > > > Nova has policy defaults in code now and we can generate the > > sample  > > using oslopolicy-sample-generator but we'd like to get the default  > > policy sample

Re: [openstack-dev] [packaging][rpm] 3rd-party gates promotion to voting gates

2016-09-26 Thread Anita Kuno
On 16-09-26 07:48 AM, Haïkel wrote: Hi, following our discussions about 3rd party gates in RPM packaging project, I suggest that we vote in order to promote the following gates as voting: - MOS CI - SUSE CI After promotion, all patchsets submitted will have to validate these gates in order to

Re: [openstack-dev] [nova][cinder] Schedule Instances according to Local disk based Volume?

2016-09-26 Thread Erlon Cruz
On Fri, Sep 23, 2016 at 10:19 PM, Zhenyu Zheng wrote: > Hi, > > Thanks all for the information, as for the filter Erlon( > InstanceLocalityFilter) mentioned, this only solves a part of the problem, > we can create new volumes for existing instances using this filter

Re: [openstack-dev] [Nova] Proposal for Nova Integration tests

2016-09-26 Thread Prasanth Anbalagan
Stehen Yes. These will be additional to functional/unit and exist outside tempest (due to the low-level nature of the tests). Unlike third-party CI, the plan is to keep all efforts upstream since the tests would focus completely on open technology. So we are open to where the tests need to

Re: [openstack-dev] Pecan Version 1.2

2016-09-26 Thread Dave McCowan (dmccowan)
I don't know what triggered the update. Our gates started breaking on September 23, but I can't find a commit around that time that would have caused this to happen. From: Clay Gerrard > Reply-To: "OpenStack Development Mailing List (not

[openstack-dev] [nova] First Ocata blueprint completion

2016-09-26 Thread Matt Riedemann
The award goes to the hyper-v storage QoS feature: https://blueprints.launchpad.net/nova/+spec/hyperv-storage-qos It's been around for a long time, sorry it took this long to get it in but thanks to the hyper-v subteam for persisting with that one and being quick to respond to comments and

[openstack-dev] Meeting Tuesday September 27th at 19:00 UTC

2016-09-26 Thread Elizabeth K. Joseph
Hi everyone, The OpenStack Infrastructure (Infra) team is having our next weekly meeting on Tuesday September 27th, at 19:00 UTC in #openstack-meeting Meeting agenda available here: https://wiki.openstack.org/wiki/Meetings/InfraTeamMeeting#Agenda_for_next_meeting Anyone is welcome to to add

Re: [openstack-dev] [ironic] ironic-inspector-core team update

2016-09-26 Thread Zhenguo Niu
+1, well deserved! On Mon, Sep 26, 2016 at 8:55 PM, milanisko k wrote: > Thanks guys! :D > > -- > milan > > po 26. 9. 2016 v 14:46 odesílatel Jim Rollenhagen > napsal: > >> // jim >> >> >> On Mon, Sep 26, 2016 at 5:24 AM, Dmitry Tantsur

[openstack-dev] [tricircle]Tricircle session planning for Barcelonda design summit

2016-09-26 Thread joehuang
Hello, Fortunately Tricircle will have two workroom slots for the design discussion in Barcelonda design summit, let's planning the design topics to be discussed in the summit. Note: if there are still some topics need to be discussed, we can continue the discussion at round-table with online

[openstack-dev] [oslo][all] Oslo specs review weeks[Sept 27 - Oct 7]

2016-09-26 Thread ChangBo Guo
Hi ALL, We will release Newton in Oct 6, and we have been working hard to fix bugs and prepare the release. I think it's good time to review good ideas. As we discussed in the Oslo weekly meeting [1], we would like to proposal an event of Oslo specs review weeks(Sept27 - Oct 7) Welecom oslo

Re: [openstack-dev] [nova][cinder] Schedule Instances according to Local disk based Volume?

2016-09-26 Thread Joshua Harlow
Huang Zhiteng wrote: On Tue, Sep 27, 2016 at 12:00 AM, Joshua Harlow > wrote: Huang Zhiteng wrote: On Mon, Sep 26, 2016 at 12:05 PM, Joshua Harlow

Re: [openstack-dev] [nova] Latest news on placement API and Ocata rough goals

2016-09-26 Thread Jay Pipes
On 09/23/2016 05:07 PM, Sylvain Bauza wrote: Le 23/09/2016 18:41, Jay Pipes a écrit : 5. Nested resource providers Things like SR-IOV PCI devices are actually resource providers that are embedded within another resource provider (the compute node itself). In order to tag things like SR-IOV PFs

Re: [openstack-dev] Pecan Version 1.2

2016-09-26 Thread Matt Riedemann
On 9/26/2016 5:15 PM, Dave McCowan (dmccowan) wrote: I don't know what triggered the update. Our gates started breaking on September 23, but I can't find a commit around that time that would have caused this to happen. From: Clay Gerrard >

[openstack-dev] [ceilometer] [Congress] ceilometer client `alarms.list()` HTTPException (HTTP N/A)

2016-09-26 Thread Eric K
Hi all, Looking for some help to resolve a breakage in Congress ceilometer-driver. When Congress attempts to perform `alarms.list()` on ceilometer client, the following exception is generated. First suspicion is Congress-end configuration problem, but it¹s only `alarms.list()` that fails. Others

Re: [openstack-dev] Pecan Version 1.2

2016-09-26 Thread Jeremy Stanley
On 2016-09-26 15:03:19 -0700 (-0700), Clay Gerrard wrote: [...] > I thought upper-constraints was somehow supposed to work to prevent this? > Like maybe don't install a brand new shiny upstream version on the gate > infrastructure test jobs until it passes all our tests? Prevent a fire > drill?

Re: [openstack-dev] Pecan Version 1.2

2016-09-26 Thread Ryan Petrello
Apologies for the trouble this caused. As Dave mentioned, this change warranted a new major version of pecan, and I missed it. I've reverted the offending commit and re-released a new version of pecan (1.2.1) to PyPI:

[openstack-dev] [ironic] Ocata is open

2016-09-26 Thread Jim Rollenhagen
Hi friends, The newton branch was cut last week. It was an amazing cycle, with tons of awesome features. Thanks to everyone that contributed and focused to get so much done! :) Details are here: http://docs.openstack.org/releasenotes/ironic/newton.html Now, on to Ocata. The branch is open, and