Re: [Openstack-operators] Delegating quota management for all projects to a user without the admin role?

2017-01-26 Thread Tim Bell
I think you could do something with policy.json to define which operations a given role would have access to. We have used this to provide the centre operator with abilities such as stop/start. The technical details are described at

[Openstack-operators] OpenStack Days East Looking for Sponsors & Leads!

2017-01-26 Thread Haisam Ido
Dear OpenStack Users, Operators, and Community, We are excited to announce that OpenStack Days East 2017 will be in the city of Washington, DC, with the tentative dates of Aug 15-16, 2017, which are flexible. The two day event will have

[Openstack-operators] Delegating quota management for all projects to a user without the admin role?

2017-01-26 Thread Edmund Rhudy (BLOOMBERG/ 120 PARK)
I'm looking for a way to allow a user that does not have the admin role to be able to view and set quota (both Nova/Cinder) for all projects in an OpenStack cluster. For us, the boundary of a Keystone region is coterminous with an OpenStack cluster - we don't currently use any sort of federated

[Openstack-operators] User Committee Elections February 2017

2017-01-26 Thread Shilla Saebi
Hello Everyone, You may have already heard the exciting news that the OpenStack Board of Directors recently approved the User Committee (UC) bylaws and charter . These remarkable changes will bring the first elected UC representatives

[Openstack-operators] [keystone] Field 'domain_id' doesn't have a default value

2017-01-26 Thread Eduardo Gonzalez
Hi. I’m testing upgrades from Newton to master branch using keystone’s zero-downtime upgrade method: keystone-manage db_sync --expand keystone-manage db_sync --migrate keystone-manage db_sync --contract After upgrade is made with no errors in logs, I cannot create users. Other keystone commands

[Openstack-operators] Ops Midcycle - Seating Limited Reserve Your Spot!

2017-01-26 Thread Melvin Hillsman
Good day everyone, We have been hard at work planning another great Ops Mid-cycle! Seating is limited so you will want to rush over to - https://opsmidcycle_march2017.eventbrite.com - to reserve your spot. Also, we still want your feedback on the sessions and we need your +1s. We are in

Re: [Openstack-operators] [Neutron] Prefer local Neutron nodes?

2017-01-26 Thread Saverio Proto
Hello Adam, this feature you describe makes sense only if the tenant VMs are also aggregated in the same rack. Is this your scenario ? Given that you could have 3 network nodes running the L3-agent, then you can make some scripting to stick the specific router (linux namespace) to the specific

Re: [Openstack-operators] [openstack-dev] [openstack-ansible] Live migration issue

2017-01-26 Thread Andy McCrae
Hi Fabrice, Firstly, I've moved this over to the ops mailing list (dev in bcc - just so anybody following along knows where it's gone!) - I think it's more of an operational issue than a dev one. That does seem weird - so the error is: > 2017-01-25 11:03:58.475 113231 ERROR