Re: [Openstack] [Folsom Summit] What makes a Session proposal ready to be scheduled?

2012-03-30 Thread Thierry Carrez
Sriram Subramanian wrote: We have submitted a proposal for Nova-Orchestration and are working towards hashing out the blueprint. In today’s call, none of us knew how/ when are the sessions scheduled and what do we need to add to make the session proposal complete (aka ready to be scheduledJ )

[Openstack] Python API Call - Create Server

2012-03-30 Thread Nicolas Odermatt
Hello guys I am trying to write a python script, which creates a new server on a compute node. As information sources I used the Programming OpenStack Compute API - 1.1 guide [1] and the OpenStack Compute Developer Guide - API v2 [2] book. I managed to create API calls for retrieving the api

Re: [Openstack] [Doc] Nova options changes and documentation

2012-03-30 Thread John Garbutt
How else can we parcel out the doc work and track it? Open to any and all ideas here. I think a blueprint for the 'Essex Flags' documentation will help track it. We can then link bugs to the blueprint, and update the blueprint with any additional notes or links. I think a single bug

Re: [Openstack] Distributed rate-limiting

2012-03-30 Thread Day, Phil
Yep - good point Chris Kevin. I hadn't thought of it that way. -Original Message- From: openstack-bounces+philip.day=hp@lists.launchpad.net [mailto:openstack-bounces+philip.day=hp@lists.launchpad.net] On Behalf Of Chris Behrens Sent: 30 March 2012 00:30 To: Kevin L. Mitchell

Re: [Openstack] regarding this Message #09165 (VNC error with latest version of Firefox)

2012-03-30 Thread Diego Parrilla Santamaría
Hi Anthony, yes your fix worked like a charm. We have change the novnc version to the cloudbuilders one in our distro. The nova-manage service command returns that novnc-console status as disabled, but it's a minor bug. We also had some problems with numpy, but now it's working. I have attached

[Openstack] Notification System cotribution

2012-03-30 Thread Juan Lebrijo @Stackops
Hello, At Stackops we are very interested to improve the Notification System in Nova, and the other projects (keystone, quantum,...). Because we have the need to gather all notifications systems for billing and monitoring purposes. We make a blueprint with spec. We want to participate

Re: [Openstack] Quota classes

2012-03-30 Thread Eoghan Glynn
I wanted to let everyone know about a quota classes blueprint I've submitted; you can find the details here: * https://blueprints.launchpad.net/nova/+spec/quota-classes * http://wiki.openstack.org/QuotaClass I've already implemented this blueprint and pushed to Gerrit, but have it

Re: [Openstack] multiple floating ip pools

2012-03-30 Thread Kevin Jackson
I'm also interested in providing multiple floating IP pools. Is this something that is achievable or conceived? My use case is as follows: Each tenant gets its own private VLAN and address space, so intercommunication between each tenant is able to be segregated. On assignment of public

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Guilherme Birk
Thanks for the reply. I've added the flags that you mentioned on my nova.conf file. I'm using a all in one installation, the flags are configured this way. --vncserver_listen=127.0.0.1 --vncserver_proxyclient_address=127.0.0.1 --novncproxy_base_url=http://192.168.100.142:6080/vnc_auto.html The

Re: [Openstack] Performance diagnosis of metadata query

2012-03-30 Thread Sean Dague
On 03/29/2012 02:45 PM, Justin Santa Barbara wrote: I think _we_ should stand behind OpenStack. That said, I understand why it's a tough call. Hopefully most problems can be fixed with a simple-ish SQL script post-release. I've got a fix for the first index issue up in gerrit for master.

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Anthony Young
It does not look like you are running nova-consoleauth. The vnc proxies use that service to verify incoming tokens. Try running that and see if that fixes things. A On Fri, Mar 30, 2012 at 6:50 AM, Guilherme Birk guib...@hotmail.com wrote: Thanks for the reply. I've added the flags that

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Michaël Van de Borne
I've got the same problem. When I try to connect to the instance using VNC through the dashboard, I've got this error. I then went in /var/log/nova/nova-xvpvncproxy.log and it contains nothing related to any attempt to get connected to any instance. It seems this nova-xvpvncproxy process

Re: [Openstack] Admin-ness in Keystone, Nova, et. al.

2012-03-30 Thread Julien Danjou
On Fri, Mar 30 2012, Gabriel Hurley wrote: In practice today, Keystone no longer has global roles, and RBAC implementation isn't fully there yet across the ecosystem. So projects have adopted inconsistent means of determining when and how to grant admin-level privileges to that user. This

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread David Kranz
I am also having problems with vnc console but not using dashboard and of a different kind. First, the documentation says to use the vnc_redux branch but that is evidently diablo-compatible code. So I used master and did the same thing as devstack does (I think) and I can get a console

Re: [Openstack] Quota classes

2012-03-30 Thread Kevin L. Mitchell
On Fri, 2012-03-30 at 08:31 -0400, Eoghan Glynn wrote: A couple of quick questions on how this quota class mechanism is intended to work ... - how is the mapping between project and quota-class established? I was expecting a project_quota_class_association table or some-such in the nova

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Guilherme Birk
Michael, try to install nova-consoleauth, like Anthony said. The old error was fixed when I installed it, now I'm having another issue, but now I think it's related to my network. Date: Fri, 30 Mar 2012 16:36:14 +0200 From: michael.vandebo...@cetic.be To: openstack@lists.launchpad.net Subject:

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Michaël Van de Borne
I'm getting forward here. I installed nova-consoleauth apt-get install nova-consoleauth and I get these settings in nova.conf: --vnc_enabled=true --vncproxy_url=http://172.22.22.1:6080 --vnc_console_proxy_url=http://172.22.22.1:6080 --vncserver_listen=10.18.9.1

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Michaël Van de Borne
Thank you. I installed the package. Now I've got this error when I paste the vnc url (which I got with nova get-vnc-console) in firefox: Traceback (most recent call last): File /usr/lib/python2.7/dist-packages/eventlet/wsgi.py, line 347, in handle_one_response for data in result:

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Anthony Young
On Fri, Mar 30, 2012 at 7:56 AM, David Kranz david.kr...@qrclab.com wrote: I am also having problems with vnc console but not using dashboard and of a different kind. First, the documentation says to use the vnc_redux branch but that is evidently diablo-compatible code. So I used master and

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Anthony Young
On Fri, Mar 30, 2012 at 9:12 AM, Michaël Van de Borne michael.vandebo...@cetic.be wrote: Thank you. I installed the package. Now I've got this error when I paste the vnc url (which I got with nova get-vnc-console) in firefox: Traceback (most recent call last): File

Re: [Openstack] boot from ISO

2012-03-30 Thread Michaël Van de Borne
Does the ISO you prepared contain the XenServer tools? I wonder whether ejecting the CD from your kickstart tool would do the job. -- no. The ISO is just a netinstall.iso from fedora 16 that I bundled myself, and which includes a kickstart file. I'll see if kickstart can manage to eject the

[Openstack] Question on wsgi rate limiting

2012-03-30 Thread Caitlin Bestler
Throughout the discussion on distributed rate limiting I've had the annoying feeling that I've heard this joke before. Basically, are we looking for our keys under the street lamp because the light is good rather than looking for them where they were lost? Has anyone studied the effectiveness

Re: [Openstack] Admin-ness in Keystone, Nova, et. al.

2012-03-30 Thread Vishvananda Ishaya
On Mar 30, 2012, at 7:41 AM, Julien Danjou wrote: On Fri, Mar 30 2012, Gabriel Hurley wrote: In practice today, Keystone no longer has global roles, and RBAC implementation isn't fully there yet across the ecosystem. So projects have adopted inconsistent means of determining when and how to

Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread Jay Pipes
You make some good points about what is the appropriate level in the stack to do rate shaping, but I would just like to have a configurable, manageable and monitorable ratelimit/quota solution that doesn't seem like a giant hack :) Baby steps. -jay On 03/30/2012 01:23 PM, Caitlin Bestler

Re: [Openstack] Admin-ness in Keystone, Nova, et. al.

2012-03-30 Thread Yee, Guang
Does this look familiar? J https://bugs.launchpad.net/keystone/+bug/890411 Guang From: openstack-bounces+guang.yee=hp@lists.launchpad.net [mailto:openstack-bounces+guang.yee=hp@lists.launchpad.net] On Behalf Of Andy Smith Sent: Friday, March 30, 2012 10:27 AM To: Julien

Re: [Openstack] [Doc] Nova options changes and documentation

2012-03-30 Thread Anne Gentle
Yes. This. More below. On Fri, Mar 30, 2012 at 4:06 AM, John Garbutt john.garb...@citrix.comwrote: How else can we parcel out the doc work and track it? Open to any and all ideas here. I think a blueprint for the 'Essex Flags' documentation will help track it. We can then link bugs

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Anthony Young
Lucian, I added a response to your question. There are several issues at play there. A On Fri, Mar 30, 2012 at 9:30 AM, Lucian Thomaz luciantho...@hotmail.comwrote: Anthony, I tried to add this flags there and do some more things but I didn't have sucess yet. I made a question in

Re: [Openstack] multiple floating ip pools

2012-03-30 Thread Vishvananda Ishaya
Floating ip pools allow you to specify a different ip range and bind interface for sets of ips, so it will work for segregation purposes. There isn't policy acl on which pool the ip comes from but it could be added. The policy wrapping in the network layer is very basic right now. The

[Openstack] Mixing Swift authentication (tempauth) with Keystone = Dashboard flakiness

2012-03-30 Thread Lillie Ross-CDSR11
I'm not sure if you can do what I'm trying. I've deployed Openstack Diable (ManagedIT) with Keystone for all service authentication. However to restore S3 API compatibility with Swift, I've modified my proxy server config to use 'tempauth' instead of Keystone. Within the proxy-server.conf,

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Anthony Young
I've proposed doc changes that add a FAQ and also remove references to vnc_redux (thanks for bringing that to my attention). https://review.openstack.org/6002 In the FAQ I also mention the python-numpy noVNC dependency, which appears to be biting you. A On Fri, Mar 30, 2012 at 7:56 AM, David

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Guilherme Birk
I installed the nova-consoleauth service and that resolved the problem of 404 not found. Now I'm getting a cannot connect to the server 127.0.0.1:6080. The IP 127.0.0.1 is strange, because on my nova.conf file I have the following flags: --vncserver_listen=192.168.100.142

Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread andi abes
Caitlin, I'm curious what were the use cases and concerns in DCB? If my memory serves me right (from rate limiting at L2 level) the main issues are guaranteeing QoS, effective bandwidth usage, fair allocation of memory buffer space. All of those goals damaged pretty badly if congestion occurs and

Re: [Openstack] Admin-ness in Keystone, Nova, et. al.

2012-03-30 Thread Jay Pipes
FWIW, it is possible in Glance to set the configuration option admin_role value to something other than admin -- for instance glance:admin -- to use a different role than admin to indicate a role that should only be able to admin Glance and not other endpoints.

Re: [Openstack] Mixing Swift authentication (tempauth) with Keystone = Dashboard flakiness

2012-03-30 Thread Lillie Ross-CDSR11
As a followup. In Dashboard, the overview panel correctly displays the list of running instance. Only when selecting the 'instances' panel do I see problems. -- Ross Lillie ross.lil...@motorolasolutions.commailto:ross.lil...@motorolasolutions.com On Mar 30, 2012, at 1:18 PM, Lillie

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Lucian Thomaz
Anthony, thank you, I saw that. I'm working in it and I'll report if I have success. Lucian Thomaz Date: Fri, 30 Mar 2012 11:18:31 -0700 Subject: Re: [Openstack] Dashboard VNC Console failed to connect to server From: sleepsonthefl...@gmail.com To: luciantho...@hotmail.com CC:

Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread Caitlin Bestler
Caitlin Replies inline /Caitlin -Original Message- From: andi abes [mailto:andi.a...@gmail.com] Sent: Friday, March 30, 2012 11:32 AM To: Jay Pipes; Caitlin Bestler Cc: openstack@lists.launchpad.net Subject: Re: [Openstack] Question on wsgi rate limiting Caitlin, I'm curious what were

Re: [Openstack] Quota classes

2012-03-30 Thread Eoghan Glynn
Eoghan Glynn wrote: A couple of quick questions on how this quota class mechanism is intended to work ... - how is the mapping between project and quota-class established? I was expecting a project_quota_class_association table or some-such in the nova DB. Is this association

Re: [Openstack] Mixing Swift authentication (tempauth) with Keystone = Dashboard flakiness

2012-03-30 Thread Lillie Ross-CDSR11
Also... unable to start a new instance from dashboard. /ross -- Ross Lillie ross.lil...@motorolasolutions.commailto:ross.lil...@motorolasolutions.com On Mar 30, 2012, at 1:33 PM, Lillie Ross-CDSR11 wrote: As a followup. In Dashboard, the overview panel correctly displays the list of

Re: [Openstack] Quota classes

2012-03-30 Thread Kevin L. Mitchell
On Fri, 2012-03-30 at 14:41 -0400, Eoghan Glynn wrote: I envisioned that, ultimately, the quota_class would be set by the authentication processing middleware(s), but I'm not against adding an association to nova to manage that. Presumably we'd also need some additional logic in the

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread David Kranz
Thanks, Anthony. All is well now. Presumably once this feature is really in essex there will be a novnc package that will take care of the numpy dependency when it is installed. -David On 3/30/2012 2:23 PM, Anthony Young wrote: I've proposed doc changes that add a FAQ and also remove

Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread andi abes
Caitlin, alas, you missed my point. The intent of rate limiting API calls in OS goes well beyond limiting network traffic. It's intended to ensure that no one tenant/user consumes unduly high resources throughout the system. These resources are not just network bandwidth, but the myriad of

Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread Caitlin Bestler
-Original Message- From: andi abes [mailto:andi.a...@gmail.com] Sent: Friday, March 30, 2012 12:12 PM To: Caitlin Bestler Cc: Jay Pipes; openstack@lists.launchpad.net Subject: Re: [Openstack] Question on wsgi rate limiting Caitlin, alas, you missed my point. The intent of rate

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-30 Thread Anthony Young
On Fri, Mar 30, 2012 at 11:29 AM, Guilherme Birk guib...@hotmail.com wrote: I installed the nova-consoleauth service and that resolved the problem of 404 not found. Now I'm getting a cannot connect to the server 127.0.0.1:6080. The IP 127.0.0.1 is strange, because on my nova.conf file I have

Re: [Openstack] Python API Call - Create Server

2012-03-30 Thread Jay Pipes
Hi! Easy mistake to make :) You need to change your personality value to a list not a dict. So, instead of this: personality: {path: /etc/banner.txt, contents: I am a text in a banner} you need: personality: [{path: /etc/banner.txt, contents: I am a text in a banner}] Both validate in

Re: [Openstack] Quota classes

2012-03-30 Thread Eoghan Glynn
Presumably we'd also need some additional logic in the quota-classes API extension to allow tenant-to-quota-class mappings be established and torn down? Well, yeah :) Cool, captured in https://bugs.launchpad.net/nova/+bug/969537 I'll propose a patch early next week. Cheers, Eoghan

Re: [Openstack] Admin-ness in Keystone, Nova, et. al.

2012-03-30 Thread Yee, Guang
I think the fat Keystone implemented this naming hack. But why place a constraint on the names (i.e. may not be i18n friend) where we can do it right at once? Guang -Original Message- From: openstack-bounces+guang.yee=hp@lists.launchpad.net

Re: [Openstack] Admin-ness in Keystone, Nova, et. al.

2012-03-30 Thread Jay Pipes
Agreed :) I was just pointing out a quick solution since folks in the bug report have been talking about what can be done in the Essex timeframe... -jay On 03/30/2012 03:59 PM, Yee, Guang wrote: I think the fat Keystone implemented this naming hack. But why place a constraint on the names

[Openstack] Glance 2012.1 RC2 available

2012-03-30 Thread Thierry Carrez
Hello everyone, The tarball for the second (and hopefully last) release candidate for OpenStack Image Service (Glance) 2012.1 is now available at: https://launchpad.net/glance/essex/essex-rc2 This RC2 will be formally released as the 2012.1 (Essex) final version next week, unless a critical

[Openstack] OpenStack Community Newsletter –March 30, 2012

2012-03-30 Thread Stefano Maffulli
OpenStack Community Newsletter –March 30, 2012 HIGHLIGHTS * Submit session proposals for OpenStack Folsom Design Summit https://lists.launchpad.net/openstack/msg08674.html * OpenStack Spring 2012 Conference Schedule

Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread David Goetz
Just FYI- swift's ratelimiting doesn't limit on bandwidth. Just requests per second to specific resources. David On Mar 30, 2012, at 1:40 PM, Caitlin Bestler wrote: Caitlin Replies inline /Caitlin -Original Message- From: andi abes [mailto:andi.a...@gmail.com] Sent: Friday,

Re: [Openstack] Installion guide for OpenStack Essex on Ubuntu 12.04

2012-03-30 Thread San Su
Hi Martin and Shark, Thank you for your post. I am a beginner in OpenStack, it is very helpful for me to install OpenStack. Follow Martin's instruction, I am planning to deploy OpenStack environment with 5 nodes based on VMs (all VMs are running on the VMware Vsphere ESXi server, and

[Openstack] Code 500 when authenticating with password

2012-03-30 Thread Pete Zaitcev
Greetings: It seems that I am unable to authenticate against the current Keystone, and I am not sure if it is a bug or a local misconfiguration. So, before I file in Launchpad, I'd like someone to verify that I am doing the right thing. The problem looks like this: [zaitcev@kvm-rei zaitcev]$

Re: [Openstack] Code 500 when authenticating with password

2012-03-30 Thread Yong Sheng Gong
First:Make sure you have not set SERVICE_TOKEN and SERVICE_ENDPOINT env since keystone client honours token auth over user/password way.Second: you can use keystone --debug user-list to show what http message sent to serveralso you can see the request body from server log, just like

Re: [Openstack] Code 500 when authenticating with password

2012-03-30 Thread Pete Zaitcev
On Sat, 31 Mar 2012 10:26:10 +0800 Yong Sheng Gong gong...@cn.ibm.com wrote: also you can see the request body from server log, just like this: 2012-03-31 10:16:44DEBUG [keystone.common.wsgi] REQUEST BODY 2012-03-31 10:16:44DEBUG

Re: [Openstack] Code 500 when authenticating with password

2012-03-30 Thread Pete Zaitcev
On Sat, 31 Mar 2012 10:26:10 +0800 Yong Sheng Gong gong...@cn.ibm.com wrote: Second: you can use keystone --debug user-list to show what http message sent to server As it turned out, I omitted 's' after the format, because I redone my old Keystone population script, which did not have any of

[Openstack-ubuntu-testing-notifications] Build Failure: precise-openstack-essex-deploy #18288

2012-03-30 Thread openstack-testing-bot
Title: precise-openstack-essex-deploy General InformationBUILD FAILUREBuild URL:https://jenkins.qa.ubuntu.com/job/precise-openstack-essex-deploy/18288/Project:precise-openstack-essex-deployDate of build:Fri, 30 Mar 2012 07:55:14 -0400Build duration:46 minBuild cause:Started by user james-pageBuilt

[Openstack-ubuntu-testing-notifications] Build Fixed: precise-openstack-essex-glance-trunk #157

2012-03-30 Thread openstack-testing-bot
Finished at 20120330-1011Build needed 00:33:03, 15736k disc spaceINFO:root:Uploading package to ppa:openstack-ubuntu-testing/openstack-trunk-testingDEBUG:root:['dput', 'ppa:openstack-ubuntu-testing/openstack-trunk-testing', 'glance_2012.1+git201203300936