Re: [openstack-dev] [OpenStack-Dev] [Cinder] 3'rd party CI systems

2014-08-12 Thread Jesse Pretorius
On 12 August 2014 07:26, Amit Das amit@cloudbyte.com wrote: I would like some guidance in this regards in form of some links, wiki pages etc. I am currently gathering the driver cert test results i.e. tempest tests from devstack in our environment CI setup would be my next step. This

Re: [openstack-dev] [Fuel] Use lrzip for upgrade tarball - reject?

2014-08-22 Thread Jesse Pretorius
On 21 August 2014 18:47, Sergii Golovatiuk sgolovat...@mirantis.com wrote: I think 15 minutes is not too bad. Additionally, it will reduce download time and price for bandwidth. It's worth to leave lrzip for customers, as upgrade is one time operation so user can wait for a while. For

Re: [openstack-dev] Unexpected error in OpenStack Nova

2014-09-04 Thread Jesse Pretorius
Hi Hossein, openstack-dev is a development mailing list, focused around the future of OpenStack and the development thereof. I would recommend that you address your question (with appropriate debug log output) to the openstack-operators mailing list. Best regards, Jesse On 3 September 2014

Re: [openstack-dev] about Distributed OpenStack Cluster

2014-09-08 Thread Jesse Pretorius
On 8 September 2014 14:00, Vo Hoang, Tri t.vo_ho...@telekom.de wrote: Today I am searching for a solution to distribute OpenStack over several geographies/availabilitiy zones and we found one from Huawei in [1]. In short, it’s a classical centralized solution like Eucalyptus cloud [2],

Re: [openstack-dev] anyone using RabbitMQ with active/active mirrored queues?

2014-09-10 Thread Jesse Pretorius
On 10 Sep 2014, at 5:20 PM, Chris Friesen chris.frie...@windriver.com wrote: Has anyone tried using active/active with mirrored queues as recommended by the RabbitMQ developers? If so, what problems did you run into? We've been running like that for over a year, with the only

Re: [openstack-dev] anyone using RabbitMQ with active/active mirrored queues?

2014-09-11 Thread Jesse Pretorius
On 10 September 2014 17:20, Chris Friesen chris.frie...@windriver.com wrote: I see that the OpenStack high availability guide is still recommending the active/standby method of configuring RabbitMQ. Has anyone tried using active/active with mirrored queues as recommended by the RabbitMQ

Re: [openstack-dev] [Nova][Neutron] nova-network in Icehouse and beyond

2014-01-29 Thread Jesse Pretorius
On 29 January 2014 23:13, Vishvananda Ishaya vishvana...@gmail.com wrote: I see the process as going something like this: * Migrate network data from nova into neutron * Turn off nova-network on the node * Run the neutron l3 agent and trigger it to create the required bridges etc. * Use

Re: [openstack-dev] [Nova][Neutron] nova-network in Icehouse and beyond

2014-01-30 Thread Jesse Pretorius
Tasks which we've identified need to be done: 1) Convert existing networks 2) Convert existing port allocations 3) Convert existing security groups 4) Convert existing security rules 5) Convert existing floating IP allocations Additional tasks: 6) Create routers for each network, where

Re: [openstack-dev] [Nova][Neutron] nova-network in Icehouse and beyond

2014-01-30 Thread Jesse Pretorius
Applicable Blueprints: https://blueprints.launchpad.net/neutron/+spec/nova-to-quantum-upgrade https://blueprints.launchpad.net/nova/+spec/deprecate-nova-network https://blueprints.launchpad.net/neutron/+spec/nova-network-to-neutron-recipes Previous Discussions that relate:

Re: [openstack-dev] [Fuel][TripleO] NIC bonding for OpenStack

2014-02-11 Thread Jesse Pretorius
On 11 February 2014 18:42, Andrey Danin ada...@mirantis.com wrote: We are working on link aggregation support in Fuel. We wonder what are the most desirable types of bonding now in datacenters. We had some issues (see below) with OVS bond in LACP mode, and it turned out that standard Linux

Re: [openstack-dev] [TripleO] consistency vs packages in TripleO

2014-02-14 Thread Jesse Pretorius
On 14 February 2014 17:57, Jay Dobies jason.dob...@redhat.com wrote: I am propably repeating much of what James already said already. But I think an operator that makes the decision to do a package base Triplo installation does so e.g. because he is familiar with the tools and conventions of

Re: [openstack-dev] [neutron] Optimizing ML2 - EOS Sync (#12)

2014-03-13 Thread Jesse Pretorius
On 12 March 2014 22:15, Sukhdev Kapur sukhdevka...@gmail.com wrote: Can somebody explain to me the purpose of this email. Is there any action required of me regarding this? On Wed, Mar 12, 2014 at 1:10 PM, openstack-gerrit notificati...@github.com wrote: openstack/neutron uses Gerrit for

Re: [openstack-dev] [db][all] (Proposal) Restorable Delayed deletion of OS Resources

2014-03-17 Thread Jesse Pretorius
On 17 March 2014 20:54, Jay Pipes jaypi...@gmail.com wrote: After hearing from Tim Bell and others, I think that a two-pronged approach is most useful. First, the above-mentioned UI changes to prevent common mistakes, and second, using a consistent, standardized way of undoing certain

Re: [openstack-dev] [nova][scheduler] Availability Zones and Host aggregates..

2014-03-28 Thread Jesse Pretorius
On 27 March 2014 20:52, Chris Friesen chris.frie...@windriver.com wrote: It'd be nice to be able to do a heat template where you could specify things like put these three servers on separate hosts from each other, and these other two servers on separate hosts from each other (but maybe on the

Re: [openstack-dev] OpenStack VM Import/Export

2014-04-07 Thread Jesse Pretorius
On 7 April 2014 09:06, Saju M sajup...@gmail.com wrote: Amazon provides option to Import/Export VM. http://aws.amazon.com/ec2/vm-import/ does OpenStack has same feature ? Have anyone started to implement this in Openstack ?. If yes, Please point me to the blueprint. I would like to work on

Re: [openstack-dev] [horizon] Enhance UX of Launch Instance Form

2013-10-11 Thread Jesse Pretorius
OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- Jesse Pretorius mobile: +27 83 680 5492 email: jesse.pretor...@gmail.com skype: jesse.pretorius ___ OpenStack-dev mailing list OpenStack-dev

[openstack-dev] Migrating to newer full projects from what used to be part of nova

2013-10-31 Thread Jesse Pretorius
Hi everyone, Migrations from Essex to Grizzly/Havana are starting to hit my radar of responsible tasks and I'm disappointed that beyond this old wiki note [1] and a wealth of questions with very few answers [2], there is very little available to support the migrations from what used to be part of

Re: [openstack-dev] Migrating to newer full projects from what used to be part of nova

2013-10-31 Thread Jesse Pretorius
On 31 October 2013 18:46, John Griffith john.griff...@solidfire.com wrote: Is your disappointment that there isn't a path from Essex -- Grizzly/Havana, or are you unhappy with the content? Upgrading Essex-Folsom introduced both the challenge of upgrading nova-volume to cinder and the

Re: [openstack-dev] Migrating to newer full projects from what used to be part of nova

2013-10-31 Thread Jesse Pretorius
On 31 October 2013 19:05, Russell Bryant rbry...@redhat.com wrote: Right, Nova (and probably other projects, too) only supports N to N+1 upgrades. If you need to go to N+2, you'll need to go through N+1 to get there. Dead right, and especially with the aggressive schedule we have this is

Re: [openstack-dev] Nova SSL Apache2 Question

2013-11-14 Thread Jesse Pretorius
On 13 November 2013 23:39, Miller, Mark M (EB SW Cloud - RD - Corvallis) mark.m.mil...@hp.com wrote: I finally found a set of web pages that has a working set of configuration files for the major OpenStack services

Re: [openstack-dev] [nova][scheduler] Proposal: FairShareScheduler.

2014-06-30 Thread Jesse Pretorius
On 30 June 2014 16:05, Eric Frizziero eric.frizzi...@pd.infn.it wrote: In more detail, some features of the FairshareScheduler are: a) It assigns dynamically the proper priority to every new user requests; b) The priority of the queued requests will be recalculated periodically using the

Re: [openstack-dev] [TripleO] [Windows] New Windows Disk Image Builder Project

2014-07-07 Thread Jesse Pretorius
On 7 July 2014 09:57, Kumar, Om (Cloud OS RD) om.ku...@hp.com wrote: We have just finished 1st version of Windows Disk Image Builder tool. This tool is written in PowerShell and uses Batch scripts. Currently, it runs on Windows. That sounds great! Is there somewhere we we can get the code

Re: [openstack-dev] [nova]resize

2014-07-25 Thread Jesse Pretorius
On 24 July 2014 20:38, Vishvananda Ishaya vishvana...@gmail.com wrote: The resize code as written originally did the simplest possible thing. It converts and copies the whole file so that it doesn’t have to figure out how to sync backing files etc. This could definitely be improved,

Re: [openstack-dev] [nova]resize

2014-07-25 Thread Jesse Pretorius
On 25 July 2014 09:50, Li Tianqing jaze...@163.com wrote: But right now, we trigged resize by flavor changed. Do you mean we can split the resize by cpu, by memory, or by disk? No, what I mean is that if the source and target flavor have the same root and ethereal disk size, then check if the

Re: [openstack-dev] [Nova][Neutron][Technical Committee] nova-network - Neutron. Throwing a wrench in the Neutron gap analysis

2014-08-06 Thread Jesse Pretorius
In many cases the users I've spoken to who are looking for a live path out of nova-network on to neutron are actually completely OK with some API service downtime (metadata service is an API service by their definition). A little 'glitch' in the network is also OK for many of them. Contrast

Re: [openstack-dev] [Nova][blueprint] Accelerate the booting process of a number of vms via VMThunder

2014-04-17 Thread Jesse Pretorius
On 17 April 2014 11:11, Zhi Yan Liu lzy@gmail.com wrote: As I said currently Nova already has image caching mechanism, so in this case P2P is just an approach could be used for downloading or preheating for image caching. I think P2P transferring/pre-caching sounds a good way to go, as

Re: [openstack-dev] [Nova][Neutron] Nova-network to Neutron migration: issues with libvirt

2014-04-22 Thread Jesse Pretorius
On 22 April 2014 14:58, Salvatore Orlando sorla...@nicira.com wrote: From previous requirements discussions, There's a track record of discussions on the whiteboard here: https://blueprints.launchpad.net/neutron/+spec/nova-to-quantum-upgrade ___

Re: [openstack-dev] [Nova][Neutron] Nova-network to Neutron migration: issues with libvirt

2014-04-30 Thread Jesse Pretorius
On 30 April 2014 16:30, Oleg Bondarev obonda...@mirantis.com wrote: I've tried updating interface while running ssh session from guest to host and it was dropped :( The drop is not great, but ok if the instance is still able to be communicated to after the arp tables refresh and the

Re: [openstack-dev] [Fuel-dev] access-control-master-node

2014-05-27 Thread Jesse Pretorius
On 27 May 2014 13:42, Lukasz Oles lo...@mirantis.com wrote: Hello fuelers, we(I and Kamil) would like start discussion about Enforce access control for Fuel UI blueprint https://blueprints.launchpad.net/fuel/+spec/access-control-master-node. First question to David, as he proposed this bp.

Re: [openstack-dev] [FUEL] OpenStack patching and FUEL upgrade follow-up meeting minutes

2014-06-05 Thread Jesse Pretorius
On 5 June 2014 16:27, Vladimir Kuklin vkuk...@mirantis.com wrote: 1. We need strict EOS and EOL rules to decide how many maintenance releases there will be for each series or our QA team and infrastructure will not ever be available to digest it. Agreed. Would it not be prudent to keep with

Re: [openstack-dev] [Keystone] Should Keystone emit notifications by default?

2014-06-05 Thread Jesse Pretorius
On 5 June 2014 16:46, Assaf Muller amul...@redhat.com wrote: Keystone started emitting notifications [1] for users and tenants being created / updated / deleted during the Havana cycle. This was in response to bug [2], the fact that OpenStack doesn't clean up after itself when tenants are

[openstack-dev] [nova] AggregateMultiTenancyIsolation scheduler filter - bug, or new feature proposal?

2014-06-09 Thread Jesse Pretorius
Hi everyone, We have a need to be able to dedicate a specific host aggregate to a list of tenants/projects. If the aggregate is marked as such, the aggregate may only be used by that specified list of tenants and those tenants may only be scheduled to that aggregate. The

Re: [openstack-dev] [nova] AggregateMultiTenancyIsolation scheduler filter - bug, or new feature proposal?

2014-06-10 Thread Jesse Pretorius
On 9 June 2014 15:18, Belmiro Moreira moreira.belmiro.email.li...@gmail.com wrote: I would say that is a documentation bug for the “AggregateMultiTenancyIsolation” filter. Great, thanks. I've logged a bug for this: https://bugs.launchpad.net/openstack-manuals/+bug/1328400 When this was

Re: [openstack-dev] [nova] AggregateMultiTenancyIsolation scheduler filter - bug, or new feature proposal?

2014-06-10 Thread Jesse Pretorius
On 10 June 2014 12:11, John Garbutt j...@johngarbutt.com wrote: There was a spec I read that was related to this idea of excluding things that don't match the filter. I can't seem to find that, but the general idea makes total sense. As a heads up, the scheduler split means we are wanting to

Re: [openstack-dev] [Fuel] Using saltstack as orchestrator for fuel

2014-06-11 Thread Jesse Pretorius
On 11 June 2014 08:38, Dmitriy Shulyak dshul...@mirantis.com wrote: Yes, in my opinion salt can completely replace astute/mcollective/rabbitmq. Listen and respond to the events generated by nailgun, or any other plugin - not a problem. There is already some kind of plugin for salt that adds

Re: [openstack-dev] [Fuel] CentOS falls into interactive mode: Unsupported hardware

2014-11-17 Thread Jesse Pretorius
On Mon, Nov 17, 2014 at 4:41 PM, Matthew Mosesohn mmoses...@mirantis.com wrote: I actually reported this to CentOS back in May: https://bugs.centos.org/view.php?id=7136 It's a bug/feature in Anaconda. It can be worked around quite easily by adding unsupported_hardware to kernel params or

Re: [openstack-dev] How to redirect the user from Horizon to a particular endpoint

2013-09-10 Thread Jesse Pretorius
On 10 September 2013 18:02, D.Selvaraj ds...@kent.ac.uk wrote: I am working in providing federated access to Horizon. As of now I have got a dropdown form that displays the list of Identity providers available in teh Keystone. But I am confused on how to redirect the user to the server that

Re: [openstack-dev] [Horizon] [UX] Curvature interactive virtual network design

2014-12-17 Thread Jesse Pretorius
Yes please. :) On Fri, 7 Nov 2014 at 16:19 John Davidge (jodavidg) jodav...@cisco.com wrote: As discussed in the Horizon contributor meet up, here at Cisco we’re interested in upstreaming our work on the Curvature dashboard into Horizon. We think that it can solve a lot of issues around

Re: [openstack-dev] Deprecation of in tree EC2 API in Nova for Kilo release

2015-02-02 Thread Jesse Pretorius
On 2 February 2015 at 16:29, Sean Dague s...@dague.net wrote: It's really easy to say someone should do this, but the problem is that none of the core team is interested, neither is anyone else. Most of the people that once were interested have left being active in OpenStack. EC2

Re: [openstack-dev] [nova] Priority resizing instance on same host

2015-02-11 Thread Jesse Pretorius
, is that some logic is put in to determine whether the disk size remains the same while the cpu/ram size is changing - if so, then resize the instance on the host without the disk snapshot and copy. -- Jesse Pretorius mobile: +44 7586 906045 email: jesse.pretor...@gmail.com skype: jesse.pretorius

Re: [openstack-dev] The state of nova-network to neutron migration

2015-01-09 Thread Jesse Pretorius
On 9 January 2015 at 02:57, Tom Fifield t...@openstack.org wrote: On 09/01/15 08:06, Maru Newby wrote: The fact that operators running nova-network would like the upstream community to pay for implementing an automated migration solution for them is hardly surprising. It is less clear to me

Re: [openstack-dev] [Nova][Neutron] Status of the nova-network to Neutron migration work

2015-03-30 Thread Jesse Pretorius
On 28 March 2015 at 00:41, Steve Wormley openst...@wormley.com wrote: So, I figured I'd weigh in on this as an employee of a nova-network using company. Nova-network allowed us to do a couple things simply. 1. Attach openstack networks to our existing VLANs using our existing

Re: [openstack-dev] [os-ansible-deployment] Nominating Nolan Brubaker for core team

2015-03-30 Thread Jesse Pretorius
On 25 March 2015 at 15:24, Kevin Carter kevin.car...@rackspace.com wrote: I would like to nominate Nolan Brubaker (palendae on IRC) for the os-ansible-deployment-core team. Nolan has been involved with the project for the last few months and has been an active reviewer with solid reviews.

Re: [openstack-dev] problems with instance consoles and novnc

2015-01-30 Thread Jesse Pretorius
On 29 January 2015 at 04:57, Chris Friesen chris.frie...@windriver.com wrote: On 01/28/2015 10:33 PM, Mathieu Gagné wrote: On 2015-01-28 11:13 PM, Chris Friesen wrote: Anyone have any suggestions on where to start digging? We have a similar issue which has yet to be properly diagnosed on

Re: [openstack-dev] [os-ansible-deployment] Core team nomination

2015-06-14 Thread Jesse Pretorius
__ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- Jesse Pretorius mobile: +44 7586 906045 email: jesse.pretor...@gmail.com skype: jesse.pretorius

Re: [openstack-dev] Nominating Serge van Ginderachter to the os-ansible-deployment core team

2015-05-29 Thread Jesse Pretorius
On 29 May 2015 at 00:01, Kevin Carter kevin.car...@rackspace.com wrote: I would like to nominate Serge (svg on IRC) for the os-ansible-deployment-core team. Serge has been involved with the greater Ansible community for some time and has been working with the OSAD project for the last couple

Re: [openstack-dev] [os-ansible-deployment] Feedback on Keystone Federation Spec

2015-07-06 Thread Jesse Pretorius
and all that). If you pop into #openstack-ansible and there will usually be someone there who can assist. -- Jesse Pretorius IRC: odyssey4me __ OpenStack Development Mailing List (not for usage questions) Unsubscribe

Re: [openstack-dev] [Compass] Call for contributors

2015-08-13 Thread Jesse Pretorius
On 12 August 2015 at 17:23, Weidong Shao weidongs...@gmail.com wrote: Compass is not new to OpenStack community. We started it as an OpenStack deployment tool at the HongKong summit. We then showcased it at the Paris summit. However, the project has gone through some changes recently. We'd

Re: [openstack-dev] [devstack] Possible issues cryptography 1.0 and os-client-config 1.6.2

2015-08-17 Thread Jesse Pretorius
Do we want to make it a default to True for users of DevStack? I think it may be worth considering since I'm not familiar with this issue with crypto and having something that protects devs who are trying to work on stuff and using DevStack , sounds good. Less cryptic day to day

[openstack-dev] [os-ansible-deployment] Feedback on Keystone Federation Spec

2015-06-30 Thread Jesse Pretorius
-sp-adfs-idp -- Jesse Pretorius IRC: odyssey4me __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin

[openstack-dev] [os-ansible-deployment][openstack-ansible] Release review/bug list for tomorrow's meeting

2015-07-29 Thread Jesse Pretorius
it or not in time for the release. We’ll discuss everything in the list in the meeting and decide on the best course of action. -- Jesse Pretorius IRC: odyssey4me __ OpenStack Development Mailing List (not for usage

Re: [openstack-dev] [openstack-ansible] [os-ansible-deployment] Kilo - Liberty Upgrade Problems

2015-07-31 Thread Jesse Pretorius
I'm adding openstack-operators too as this is a discussion that I think it would be useful to have their input for. On 30 July 2015 at 19:18, Ian Cordasco ian.corda...@rackspace.com wrote: Hey all, As you may have seen elsewhere on openstack-dev, OpenStack is changing the versioning for the

Re: [openstack-dev] [Fuel][Puppet] Keystone V2/V3 service endpoints

2015-07-31 Thread Jesse Pretorius
With regards to converting all services to use Keystone v3 endpoints, note the following: 1) swift-dispersion currently does not support consuming Keystone v3 endpoints [1]. There is a patch merged to master [2] to fix that, but a backport to kilo is yet to be done. 2) Each type (internal, admin,

Re: [openstack-dev] [os-ansible-deployment][openstack-ansible] Release review/bug list for tomorrow's meeting

2015-07-31 Thread Jesse Pretorius
On 29 July 2015 at 22:04, Jesse Pretorius jesse.pretor...@gmail.com wrote: The following reviews are in-flight and are important for the upcoming releases, and therefore there is a need for more reviews and in some cases backports once the master patches have landed: https

Re: [openstack-dev] [openstack-ansible] [os-ansible-deployment] Kilo - Liberty Upgrade Problems

2015-07-31 Thread Jesse Pretorius
On 31 July 2015 at 16:59, Ian Cordasco ian.corda...@rackspace.com wrote: So, I'm not proposing that yaprt be updated to forcibly add epochs or anything else. What yaprt will generate is exactly what upstream specifies. For example, glance would be version 11.0.0, nova would be 12.0.0, etc.

Re: [openstack-dev] [Keystone] [Horizon] Federated Login

2015-08-11 Thread Jesse Pretorius
On 6 August 2015 at 10:02, David Chadwick d.w.chadw...@kent.ac.uk wrote: this is a value judgement that admins take. I think we should allow this to be configurable, by either improving the policy engine to allow a public access rule (coarse grained), or adding a public/private flag to each

[openstack-dev] [openstack-ansible][keystone] Federation beyond Shibboleth

2015-08-11 Thread Jesse Pretorius
Hi everyone, Yesterday we released implementing Keystone as a Federated Service Provider as part of the openstack-ansible deployment tooling [1]. This is a starting implementation which was purposefully scoped to only use Shibboleth and only support SAML2. The scope was limited due to the

[openstack-dev] [openstack-ansible] Release: Kilo 11.1.0

2015-08-10 Thread Jesse Pretorius
Hi everyone, The openstack-ansible community is pleased to announce our release of the Kilo 11.1.0 milestone. This release fixes 57 bugs and implements 4 major blueprints, including: * Keystone as a Federated Identity Provider * Keystone as a Federated Service Provider * Horizon Federation

Re: [openstack-dev] [os-ansible-deployment] [openstack-ansible] [Searchlight] Specs for Liberty (v12.0.0)

2015-07-24 Thread Jesse Pretorius
to the weekly meeting for the purpose of discussion and to open it up to questions. -- Jesse Pretorius mobile: +44 7586 906045 email: jesse.pretor...@gmail.com skype: jesse.pretorius __ OpenStack Development Mailing List (not for usage

Re: [openstack-dev] [os-ansible-deployment] Core nomination for Matt Kassawara (sam-i-am)

2015-07-20 Thread Jesse Pretorius
On 17 July 2015 at 16:14, Kevin Carter kevin.car...@rackspace.com wrote: I would like to nominate Matt Kassawara (IRC: sam-i-am) to the OpenStack Ansible deployment core team. Matt has been instrumental in building out our current install and use documentation[0], he is just about always in

Re: [openstack-dev] [os-ansible-deployment] Core nomination for Matt Kassawara (sam-i-am)

2015-07-20 Thread Jesse Pretorius
On 20 July 2015 at 15:33, Ian Cordasco ian.corda...@rackspace.com wrote: Yes, Matt should be doing more reviews. The difference is that (as I understand it) we want to include Matt as a documentation core more than as a core reviewer for playbooks. Matt's reviews have all pertained to

[openstack-dev] [openstack-ansible] Bug Triage (27 Oct) and Project Meeting (29 Oct) cancelled

2015-10-23 Thread Jesse Pretorius
-- Jesse Pretorius IRC: odyssey4me __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo

Re: [openstack-dev] [stable][all] Keeping Juno "alive" for longer.

2015-11-13 Thread Jesse Pretorius
On 9 November 2015 at 14:42, Sean Dague wrote: > > So lets figure out where the snags are. I'm pretty uninterested in > threads that just scream LTS without a list of upgrade bugs that have > been filed to describe why rapid upgrade isn't the right long term > solution. I agree

Re: [openstack-dev] [openstack-ansible][security] Next steps: openstack-ansible-security

2015-11-16 Thread Jesse Pretorius
On 9 November 2015 at 19:38, Major Hayden wrote: > > What would you propose as the final steps to get the blueprint marked as > completed? Should documentation be added into openstack-ansible about > integrating openstack-ansible-security or should a script be provided for >

Re: [openstack-dev] [openstack-ansible] Converting the AIO bootstrap script to Ansible

2015-11-16 Thread Jesse Pretorius
On 6 November 2015 at 21:34, Major Hayden wrote: > Feel free to critique it and I'll get to work on making the changes. The > spec[2] should answer most of the questions about the effort. > > Thanks! :) > > [1] https://review.openstack.org/#/c/239525/ > [2] >

[openstack-dev] [openstack-ansible] Mitaka Summit Summary

2015-11-17 Thread Jesse Pretorius
Hi everyone, I've put together some thoughts based on the Mitaka Summit from the OpenStack-Ansible point of view: http://odyssey4me.github.io/openstack/ansible/mitaka/summit/2015/11/17/mitaka-summit.html Please feel free to ping me with any feedback! Thanks, -- Jesse Pretorius IRC: odyssey4me

Re: [openstack-dev] Using openstack-ansible to install Neutron LBaaS v2

2015-11-01 Thread Jesse Pretorius
ible/install-guide/configure-lbaas.html HTH! -- Jesse Pretorius mobile: +44 7586 906045 email: jesse.pretor...@gmail.com skype: jesse.pretorius __ OpenStack Development Mailing List (not for usage questions) Unsubscribe:

Re: [openstack-dev] [openstack-ansible][security] Creating a CA for openstack-ansible deployments?

2015-11-02 Thread Jesse Pretorius
On 29 October 2015 at 12:43, Major Hayden wrote: > On 10/29/2015 04:33 AM, McPeak, Travis wrote: > > The only potential security drawback is that we are introducing a new > > asset to protect. If we create the tools that enable a deployer to > > easily create and administer a

Re: [openstack-dev] [openstack-ansible][security] Next steps: openstack-ansible-security

2015-11-06 Thread Jesse Pretorius
use-cases. I think that the best option for now will be to add the implementation of the security role as an additional use-case. Depending on the results there we can figure out whether the role should be a default in all use cases. -- Jesse Pretorius mobile: +44 7586 906045 email: jesse.pretor...

Re: [openstack-dev] [openstack-ansible][security] Creating a CA for openstack-ansible deployments?

2015-11-06 Thread Jesse Pretorius
n issue I don't think. What matters more is whether the role is functional for the purpose of building an integration test use-case. -- Jesse Pretorius mobile: +44 7586 906045 email: jesse.pretor...@gmail.com skype: jesse.pretorius _

[openstack-dev] [openstack-ansible][openstack-infra] Ansible Role Testing

2015-11-02 Thread Jesse Pretorius
Hi everyone, Currently there are jenkins macros for Ansible role testing that cover syntax [1] and lint [2] tests. I'd like to add a generic ansible playbook 'run' test which executes a test playbook for the role, and perhaps an 'idempotence' test which executes the test playbook twice and checks

[openstack-dev] [openstack-ansible] Using python venvs for keystone, nova, glance, swift, heat, neutron, ceilometer

2015-10-08 Thread Jesse Pretorius
Hi everyone, We've identified that it would be better for us to make use of python venvs for various reasons as outlined in the blueprint [1] and in more detail in the spec [2] for the implementation. We'd like to solicit feedback from anyone in the community who has experience running OpenStack

[openstack-dev] [openstack-ansible] Mitaka Summit Schedule

2015-10-15 Thread Jesse Pretorius
? We are very interested in gathering feedback from a broad group of OpenStack operators based on the above topics and would love to have your feedback! -- Jesse Pretorius IRC: odyssey4me __ OpenStack Development Mailing List

Re: [openstack-dev] [all] DevStack switching from MySQL-python to PyMySQL

2015-10-12 Thread Jesse Pretorius
On 15 June 2015 at 12:30, Sean Dague wrote: > > As a heads up for where we stand. The switch was flipped, but a lot of > neutron jobs (rally & tempest) went into a pretty high failure rate > after it was (all the other high volume jobs seemed fine). > > We reverted the change

Re: [openstack-dev] [all] DevStack switching from MySQL-python to PyMySQL

2015-10-12 Thread Jesse Pretorius
On 12 October 2015 at 17:16, Sean Dague wrote: > > Yes, the last patch was landed on June 16th. We've been running on > pymysql for most of the liberty development cycle. Great news! Thanks Sean. __

Re: [openstack-dev] [openstack-ansible][compass] Support of Offline Install

2015-09-15 Thread Jesse Pretorius
On 15 September 2015 at 05:36, Weidong Shao wrote: > Compass, an openstack deployment project, is in process of using osad > project in the openstack deployment. We need to support a use case where > there is no Internet connection. The way we handle this is to split the >

Re: [openstack-dev] [openstack-ansible] PTL Non-Candidacy

2015-09-15 Thread Jesse Pretorius
On 14 September 2015 at 22:02, Kevin Carter wrote: > > TL;DR - I'm sending this out to announce that I won't be running for PTL > of the OpenStack-Ansible project in the upcoming cycle. Although I won't be > running for PTL, with community support, I intend to remain

Re: [openstack-dev] [openstack-ansible] Security hardening

2015-09-14 Thread Jesse Pretorius
On 10 September 2015 at 19:21, Clint Byrum wrote: > Excerpts from Major Hayden's message of 2015-09-10 09:33:27 -0700: > > Hash: SHA256 > > > > On 09/10/2015 11:22 AM, Matthew Thode wrote: > > > Sane defaults can't be used? The two bugs you listed look fine to me > as > > >

[openstack-dev] [openstack-ansible] Proposing Steve Lewis (stevelle) for core reviewer

2015-09-30 Thread Jesse Pretorius
input to be valuable. -- Jesse Pretorius IRC: odyssey4me __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi

[openstack-dev] [stackalytics] Broken stats after project rename

2015-09-30 Thread Jesse Pretorius
Hi everyone, After the rename of os-ansible-deployment to openstack-ansible it appears that all git-related stats (eg: commits) prior to the rename have been lost. http://stackalytics.com/?metric=commits=openstack-ansible Can anyone assist with rectifying this? -- Jesse Pretorius IRC

[openstack-dev] [openstack-ansible] Mitaka Summit sessions

2015-09-21 Thread Jesse Pretorius
/openstack-ansible-specs+status:open,n,z -- Jesse Pretorius IRC: odyssey4me __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http

Re: [openstack-dev] [openstack-ansible] To NTP, or not to NTP, that is the question

2015-09-22 Thread Jesse Pretorius
On 22 September 2015 at 01:45, Major Hayden wrote: > On 09/21/2015 07:14 PM, Sergii Golovatiuk wrote: > > Are any chance to configure chrony instead of ntpd? It acts more > predictable on virtual environments. > > That's my plan, if I can find an upstream Ansible galaxy role to

Re: [openstack-dev] [openstack-ansible] To NTP, or not to NTP, that is the question

2015-09-21 Thread Jesse Pretorius
On 18 September 2015 at 14:03, Major Hayden wrote: > Hey there, > > I start working on a bug[1] last night about adding a managed NTP > configuration to openstack-ansible hosts. My patch[2] gets chrony up and > running with configurable NTP servers, but I'm still struggling to

Re: [openstack-dev] Regarding Designate install through Openstack-Ansible

2015-12-08 Thread Jesse Pretorius
On 8 December 2015 at 08:26, Sharma Swati6 wrote: > Hi *Major, Jean, Jesse and Kevin,* Howdy! > I have been interacting with you lately on openstack mailing lists and IRC > chats regarding *Designate component inclusion in Openstack-Ansible*, so > that its deployment

[openstack-dev] [openstack-ansible] Mid Cycle Sprint

2015-12-09 Thread Jesse Pretorius
, testing, how to develop a new role, etc) - Upgrade Framework [2] - Multi-OS Support [3] [1] https://etherpad.openstack.org/p/oa-install-docs [2] https://etherpad.openstack.org/p/openstack-ansible-upgrade-framework [3] https://etherpad.openstack.org/p/openstack-ansible-multi-os-support -- Jesse

Re: [openstack-dev] [openstack-ansible] Mid Cycle Sprint

2015-12-17 Thread Jesse Pretorius
Hi everyone, Thank you all for responding and giving your feedback. Given that the Ops Mid Cycle [1] is in the UK (15-16 Feb) and AnsibleFest [2] is also in the UK (18 Feb), and also that everyone seems ok with the UK as a location for the mid cycle then we shall have it in the UK! The Ops Mid

Re: [openstack-dev] [ansible] tox functional testing rename

2016-01-06 Thread Jesse Pretorius
On 20 December 2015 at 19:24, Paul Belanger wrote: > > > I've proposed a series of patches[1] to rename tox -eansible-functional to > tox -efunctional. While the change is trival, it is meant to workaround an > interpreter issue with tox[2]. Additionally, the change brings

Re: [openstack-dev] [openstack-ansible][designate] Regarding Designate install through Openstack-Ansible

2016-01-06 Thread Jesse Pretorius
t; Thanks & Regards > Swati Sharma > System Engineer > Tata Consultancy Services > Mailto: sharma.swa...@tcs.com > Website: http://www.tcs.com > ____ > Experience certainty. IT Services > Business Solutions > Consulting > ___

Re: [openstack-dev] Regarding Designate install through Openstack-Ansible

2015-12-17 Thread Jesse Pretorius
f what you're trying > to do and allows other people on the project to point out areas of > concern and improvement. > > > To add the new roles in openstack-ansible repository, shall I create > > the directory looking at what is there for keystone or other > > components a

[openstack-dev] [openstack-ansible] Documentation update planning

2015-11-18 Thread Jesse Pretorius
to the etherpad [2], respond to this email and ideally be in the meeting. :) [1] https://wiki.openstack.org/wiki/Meetings/openstack-ansible#Agenda_for_next_meeting [2] https://etherpad.openstack.org/p/oa-install-docs -- Jesse Pretorius IRC: odyssey4me

[openstack-dev] [openstack-ansible] Fedora/CentOS/other Support

2015-11-18 Thread Jesse Pretorius
to volunteer to assist with the work, please feel free to add a note to that effect on the etherpad. [1] https://wiki.openstack.org/wiki/Meetings/openstack-ansible#Agenda_for_next_meeting [2] https://etherpad.openstack.org/p/openstack-ansible-multi-os-support -- Jesse Pretorius IRC: odyssey4me

Re: [openstack-dev] [tc][infra][neutron] branches for release-independent projects targeting Openstack release X

2015-11-20 Thread Jesse Pretorius
On 19 November 2015 at 09:43, Thierry Carrez wrote: > > So we have three models. The release:independent model is for projects > that don't follow the common development cycle, and therefore won't make > a "liberty" release. The release:cycle-with-milestones model is the >

Re: [openstack-dev] [openstack-ansible] Random ssh errors in gate check jobs

2015-11-23 Thread Jesse Pretorius
On 23 November 2015 at 01:36, Major Hayden wrote: > Hey folks, > > Some of my recent reviews have been frequent fliers in the land of CI gate > jobs and I've spent a fair amount of time diagnosing random ssh failures to > containers in AIO builds. The error I get most often is

Re: [openstack-dev] [openstack-ansible] Mid-cycle date selection (need input!)

2016-06-10 Thread Jesse Pretorius
On 9 June 2016 at 19:51, Major Hayden wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Hey folks, > > I've been able to secure a few dates at Rackspace's headquarters in San > Antonio, Texas: > > 1) August 10-12 > 2) August 22-26 > 3) August 29 - September 2 >

Re: [openstack-dev] [openstack-ansible] Deeper diffs in OSA releases

2016-06-14 Thread Jesse Pretorius
On 14 June 2016 at 13:50, Major Hayden wrote: > > > Every OpenStack-Ansible release consists of SHA bumps for roles as well as > OpenStack services (like keystone, nova, and glance). However, tracking > the diffs of the changes in those OpenStack services can be challenging. >

Re: [openstack-dev] [stable][all] Tagging kilo-eol for "the world"

2016-06-02 Thread Jesse Pretorius
__ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/op

Re: [openstack-dev] [openstack-ansible] Helion HLM on GitHub and what next?

2016-02-08 Thread Jesse Pretorius
Darragh - thanks for sharing your thoughts. We look forward to working with you! On 1 February 2016 at 14:20, Bailey, Darragh wrote: > > My initial thoughts are that the first 2 places to focus for alignment > (assuming people agree with the idea of life cycle phases) would be:

Re: [openstack-dev] [openstack-ansible][security] Security hardening is now integrated!

2016-02-08 Thread Jesse Pretorius
On 27 January 2016 at 13:29, Major Hayden wrote: > > After four months and 80+ gerrit reviews, the security hardening > configurations provided by the openstack-ansible-security role are now > integrated with OpenStack-Ansible! The Jenkins gate jobs for > OpenStack-Ansible are

Re: [openstack-dev] [openstack-ansible][security] Should the playbook stop on certain tasks?

2016-02-08 Thread Jesse Pretorius
On 13 January 2016 at 15:10, Major Hayden wrote: > > For example, the STIG requires[1] that all system accounts other than root > are locked. This could be dangerous on a running production system as > Ubuntu has non-root accounts that are not locked. At the moment, the >

Re: [openstack-dev] Use of restricted and multiverse in the gate

2016-02-08 Thread Jesse Pretorius
On 7 February 2016 at 14:11, Monty Taylor wrote: > We're working on getting per-region APT mirrors stood up for the nodepool > nodes to use in the gate. As part of working on this, it struck me that we > currently have restricted and multiverse enabled in our sources.list

  1   2   >