Re: [Openstack-operators] [OpenStack-docs] [OpenStack-operators] [docs][upgrades] time to add official docs for upgrading services?

2016-11-18 Thread Steve Martinelli
On Thu, Nov 17, 2016 at 11:04 PM, darren chan wrote: > Good timing, I was about to send a follow-up email about this spec. > > I agree, this content needs to be more visible, which is why the spec > proposed to move upgrade notes to the Upgrades chapter in the Operations > Guide. However, it seem

Re: [Openstack-operators] [EXTERNAL] Re: Tenant/Project naming restrictions

2016-10-07 Thread Steve Martinelli
Sr/SAIC Lead 09321 > Common Engineering Environment > dgv...@sandia.gov > > -Original Message- > From: Saverio Proto [mailto:ziopr...@gmail.com] > Sent: Thursday, October 6, 2016 1:21 AM > To: Steve Martinelli > Cc: Vigil, David Gabriel ; openstack-operators@lists. > o

Re: [Openstack-operators] Tenant/Project naming restrictions

2016-10-05 Thread Steve Martinelli
There are some restrictions. 1. The project name cannot be longer than 64 characters. 2. Within a domain, the project name is unique. So you can have project "foo" in the "default" domain, and in any other domain. On Wed, Oct 5, 2016 at 5:16 PM, Vigil, David Gabriel wrote: > What, if any, are t

Re: [Openstack-operators] [Openstack-Operators] Keystone cache strategies

2016-06-21 Thread Steve Martinelli
FWIW, we have refactored the revocation tree into a list, this should speed up the revocation process time significantly ( https://review.openstack.org/#/c/311652/) There is no way to disable revocations, since that would open up a security hole. On Tue, Jun 21, 2016 at 8:55 PM, Sam Morrison wro

Re: [Openstack-operators] [keystone] Need info on the correct location to place the certificates / correct tags to specify the same

2016-05-12 Thread Steve Martinelli
Oops, forgot to reply-all. On Fri, May 13, 2016 at 1:43 AM, Rahul Sharma wrote: > Thank you Steve for pointing me in right direction. That was really > helpful. > > - Rahul > > > On Fri, May 13, 2016 at 1:02 AM, Steve Martinelli > wrote: > >> These options are

[Openstack-operators] keystoneclient 3.0.0 will *not* bundle a CLI

2016-04-15 Thread Steve Martinelli
are advised to use the `openstackclient` CLI ( https://pypi.python.org/pypi/python-openstackclient ) which has parity for all keystone commands. Thanks, Steve Martinelli OpenStack Keystone Project Team Lead ___ OpenStack-operators mailing list OpenStack

[Openstack-operators] Fw: [openstack-dev] [keystone] Does anybody need OAuth1 API in keystone?

2016-03-20 Thread Steve Martinelli
done with OAuth APIs. The spec can be found here: http://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-oauth1-ext.html Thanks, Steve Martinelli OpenStack Keystone Project Team Lead - Forwarded by Steve Martinelli/Toronto/IBM on 2016/03/17 06:53 AM - From

[Openstack-operators] [keystone] mitaka release recap

2016-03-15 Thread Steve Martinelli
them) To everyone who participated in contributing to Keystone during the Mitaka release, I cannot thank you enough for your time and effort. Thanks, Steve Martinelli OpenStack Keystone Project Team Lead ___ OpenStack-operators mailing list OpenStack-oper

Re: [Openstack-operators] What are you excited for in Mitaka?

2016-03-10 Thread Steve Martinelli
We actually just sneaked in an enhancement to keystone-manage bootstrap; a user may optionally pass in the URLs needed to create the keystone/identity service in the service catalog. After running the single command, you'll be able to authenticate with the admin user name and password and start cr

Re: [Openstack-operators] [glance] Remove `run_tests.sh` and `tools/*`

2016-03-04 Thread Steve Martinelli
feedback from a broader audience and give a heads up to folks that might be using this code. Any objections? Something I'm missing? Flavio -- @flaper87 Flavio Percoco [attachment "signature.asc" deleted by Steve Martinelli/Toronto/IBM] ___ Op

Re: [Openstack-operators] [openstack-dev] OpenStack Contributor Awards

2016-02-21 Thread Steve Martinelli
limited edition (and hilarious) t-shirts are always fun :) ++ on raspberry pis, those are always a hit. stevemar From: Hugh Blemings To: "OpenStack Development Mailing List (not for usage questions)" , OpenStack Operators Date: 2016/02/21 09:54 PM Subject:

Re: [Openstack-operators] how to get glance images for a specific tenant with the openstack client ?

2016-01-25 Thread Steve Martinelli
You can also use `openstack image list --long` -- this should include the owner ID (which is the project ID) and do some grepping and cutting for that output. Not the cleanest, but it'll work. $ openstack image list --long --format value | grep $project_id | cut -f 1 -d " " Adding to Thomas' sug

[Openstack-operators] [keystone] removing keystoneclient.middleware (in favor of keystonemiddleware)

2015-12-10 Thread Steve Martinelli
keystoneclient (v3.0.0)? Patch to remove the code: https://review.openstack.org/#/c/250669/2 [0] https://pypi.python.org/pypi/keystonemiddleware/1.0.0 [1] https://github.com/openstack/python-keystoneclient/commit/5c9b13d4c7222b71084a0b4fd836e1fdda0edaf7 Thanks, Steve Martinelli OpenStack

Re: [Openstack-operators] [openstack-dev] [keystone] RBAC usage at production

2015-12-09 Thread Steve Martinelli
icy/commit/b5f07dfe4cd4a5d12c7fecbc3954694d934de642 Thanks, Steve Martinelli OpenStack Keystone Project Team Lead From: Timothy Symanczyk To: "OpenStack Development Mailing List (not for usage questions)" , "Kris G. Lindgren" , Oguz Yarimtepe ,

Re: [Openstack-operators] [openstack-dev] [keystone] Removing functionality that was deprecated in Kilo and upcoming deprecated functionality in Mitaka

2015-12-07 Thread Steve Martinelli
d upcoming deprecated functionality in Mitaka On Tue, Dec 1, 2015 at 12:57 AM, Steve Martinelli wrote: Trying to summarize here... - There isn't much interest in keeping eventlet around. - Folks are OK with running keystone in a WSGI server, but feel they are constrained by Ap

Re: [Openstack-operators] [keystone] Removing functionality that was deprecated in Kilo and upcoming deprecated functionality in Mitaka

2015-11-30 Thread Steve Martinelli
to look into this scenario and have suggestions? - jlk On Mon, Nov 30, 2015 at 10:26 AM, Steve Martinelli < steve...@ca.ibm.com> wrote: This post is being sent again to the operators mailing list, and i apologize if it's duplicated fo

[Openstack-operators] [keystone] Removing functionality that was deprecated in Kilo and upcoming deprecated functionality in Mitaka

2015-11-30 Thread Steve Martinelli
uth/tokens) potentially sticking around for longer. * for a complete list: https://blueprints.launchpad.net/keystone/+spec/deprecated-as-of-mitaka If you have ANY concern about the following, please speak up now and let us know! Thanks! Steve Martinelli OpenStack Keystone Project Team Lead [0] https://