Re: [Openstack-operators] User Survey - Deadline Apr 8

2015-03-25 Thread Tom Fifield
On 26/03/15 12:51, Mathieu Gagné wrote: > On 2015-03-25 11:35 PM, Tom Fifield wrote: >> >> The deadline to complete the survey and be part of the next report is >> April 8 at 23:00 UTC. >> >> Questions? Check out the FAQ [https://www.openstack.org/user-survey/faq] >> or contact me ;) >> > > Thanks

Re: [Openstack-operators] OpenStack services and ca certificate config entries

2015-03-25 Thread Mike Dorman
I have struggled with this stuff in the past, too. And have had situations where certs come from different CAs, so I can see some value in an ability to override the global defaults for specific services. However, for the small fraction of use cases that would cover, I think the cert concatena

Re: [Openstack-operators] User Survey - Deadline Apr 8

2015-03-25 Thread Mathieu Gagné
On 2015-03-25 11:35 PM, Tom Fifield wrote: > > The deadline to complete the survey and be part of the next report is > April 8 at 23:00 UTC. > > Questions? Check out the FAQ [https://www.openstack.org/user-survey/faq] > or contact me ;) > Thanks for the reminder Tom. I'm currently updating my

Re: [Openstack-operators] OpenStack services and ca certificate config entries

2015-03-25 Thread Erik McCormick
I'll start by saying I went the system bundle route also and have thus far had no issues with it. I'll also say that I'm using RDO packages still and not doing anything with venvs or pip installed stuff. On Wed, Mar 25, 2015 at 6:33 PM, Michael Still wrote: > Thanks for starting this thread Jess

[Openstack-operators] User Survey - Deadline Apr 8

2015-03-25 Thread Tom Fifield
Hi all, As you know, before previous summits we have been running a survey of OpenStack users. We’re doing it again, and we need your help! If you are running an OpenStack cloud, please participate in the survey [http://www.openstack.org/user-survey]. If you already completed the survey before, y

Re: [Openstack-operators] OpenStack services and ca certificate config entries

2015-03-25 Thread Michael Still
Thanks for starting this thread Jesse. I agree that heat looks like a good model for other projects to model themselves on here. Can anyone think of a use case for having a per client / driver CA file? I can't, but perhaps I'm missing something. Michael On Thu, Mar 26, 2015 at 5:13 AM, Jesse Kea

Re: [Openstack-operators] OpenStack services and ca certificate config entries

2015-03-25 Thread Jesse Keating
We were adding our CA to the bundle, we are using python-requests. python-requests is getting installed via pip in a venv, and it includes it's own CA bundle. So we were creating a symlink from the system bundle to the venv requests bundle. Then something upgraded python-requests in the venv, which

Re: [Openstack-operators] OpenStack services and ca certificate config entries

2015-03-25 Thread Morgan Fainberg
This sounds like something we can bake into the session object to make it easier / more consistent. --Morgan Sent via mobile > On Mar 25, 2015, at 14:03, John Dewey wrote: > > I faced this very issue in the past. We solved the problem by adding the CA > to the system bundle (as you stated)

Re: [Openstack-operators] OpenStack services and ca certificate config entries

2015-03-25 Thread John Dewey
I faced this very issue in the past. We solved the problem by adding the CA to the system bundle (as you stated). We also ran into problems where python would still not validate the CA. However, this turned out to be a permissions error with cacerts.txt[1] when httplib2 was installed through

[Openstack-operators] OpenStack services and ca certificate config entries

2015-03-25 Thread Jesse Keating
We're facing a bit of a frustration. In some of our environments, we're using a self-signed certificate for our ssl termination (haproxy). We have our various services pointing at the haproxy for service cross-talk, such as nova to neutron or nova to glance or nova to cinder or neutron to nova or c

[Openstack-operators] Fwd: [openstack-dev] [release] oslo.messaging 1.8.1

2015-03-25 Thread Davanum Srinivas
FYI. for those waiting to try oslo.messaging rabbitmq heartbeat support. -- dims -- Forwarded message -- From: Doug Hellmann Date: Wed, Mar 25, 2015 at 10:13 AM Subject: [openstack-dev] [release] oslo.messaging 1.8.1 To: "OpenStack Development Mailing List (not for usage question