Guang,
I think you need to re-read the code. The association between a user and tenant
is what the role represents, and its inaccurate to assert that a user is
aligned only with a single tenant ever, that is not the case.
A role is no longer global, specifically to avoid the tremendous
+1
The second way to accomplish this is exactly what keystone currently supports
(explicit role grants), which didn't change between diablo and essex at all.
The first method (using global unscopedness) was dropped because its just as
confusing as you describe it.
-Dolph Mathews
On May 10,
On Wed, May 09 2012, Doug Hellmann wrote:
I'm not sure what you mean. I was able to use nova.service to create a
metering server and a simple manager that subscribes to the notification
events. See https://github.com/dhellmann/metering-prototype (metering-test
is the main program and
On 05/09/2012 11:11 PM, Doug Hellmann wrote:
On Wed, May 9, 2012 at 3:07 PM, Tomasz Paszkowski ss7...@gmail.com
mailto:ss7...@gmail.com wrote:
On Wed, May 9, 2012 at 8:02 PM, Doug Hellmann
doug.hellm...@dreamhost.com mailto:doug.hellm...@dreamhost.com wrote:
Nice!
On Wed, May 09, 2012 at 11:08:13PM -0600, Jim Fehlig wrote:
Hi,
I've been tinkering with improving Xen support in the libvirt driver and
wanted to discuss a few issues before submitting patches.
Even the latest upstream release of Xen (4.1.x) contains a rather old
qemu, version 0.10.2,
Il 10/05/2012 07:08, Jim Fehlig ha scritto:
Hi,
I've been tinkering with improving Xen support in the libvirt driver and
wanted to discuss a few issues before submitting patches.
Even the latest upstream release of Xen (4.1.x) contains a rather old
qemu, version 0.10.2, which rejects qcow2
On Thu, May 10, 2012 at 09:06:58AM +0100, Daniel P. Berrange wrote:
On Wed, May 09, 2012 at 11:08:13PM -0600, Jim Fehlig wrote:
Hi,
I've been tinkering with improving Xen support in the libvirt driver and
wanted to discuss a few issues before submitting patches.
Even the latest
I18N is an architecture decision. Besides developers, we should also
consult customers' options.
I18N is a very big scope. It includes not only translation, but also
Date/time format, number format,
or even the input of non-English characters. Surely I18N will take some
efforts. But considering
On Thu 10 May 2012 (10:41), Muriel wrote:
If I remember correctly, the qcow images are not the only problem
with xen, but I'm far from the code for too long time. In the past
(diablo), the method for counting the ram (and cpu perhaps?) did not
work with xen and this affected the choices of the
I running an instance(ubuntu or centos), and it cannot get keypair.
In ubuntu12.04, I have install cloud-init and in centos I have add some
command into /etc/rc.local
There is some of instance's logs about cloud-init:
cloud-init start-local running: Thu, 10 May 2012 10:17:33 +. up 4.47
Hey
livememon, is it possible to see the content of the rc.local. Also,
are other instances able to reach the metadata server ?
livemoon
10 mai 2012 12:24I running an
instance(ubuntu or centos), and it cannot get keypair.In
ubuntu12.04, I have install cloud-init and in centos
Hi,
https://review.openstack.org/#/c/7169/ ensures that all of the open
source agents have uniform database access. This requires a minor change
to the devstack code.
In addition to this I have added in some minor chnages which ensure that
the devstack user is able to run Quantum Plugins and
Hi,
The metering project team holds a meeting in #openstack-meeting, Thursdays at
1600 UTC
http://www.timeanddate.com/worldclock/fixedtime.html?hour=16min=0sec=0.
Everyone is welcome.
I propose an agenda based on the discussions we had on this list.
have you started the instance with keypair?-openstack-bounces+gongysh=cn.ibm@lists.launchpad.net wrote: -To: livemoon mwjpi...@gmail.comFrom: Razique Mahroua razique.mahr...@gmail.comSent by: openstack-bounces+gongysh=cn.ibm@lists.launchpad.netDate: 05/10/2012 06:29PMCc:
On 05/10/2012 02:14 PM, Loic Dachary wrote:
Hi,
The metering project team holds a meeting in #openstack-meeting, Thursdays at
1600 UTC
http://www.timeanddate.com/worldclock/fixedtime.html?hour=16min=0sec=0.
Everyone is welcome.
I propose an agenda based on the discussions we had on this
Hello,
I'm running into troubles accessing my instances.
I have 3 nodes:
1. proxmox that virtualizes in KVM my controller node
1.1 the controller node (10.10.200.50) runs keystone, nova-api,
network, scheduler, vncproxy and volumes but NOT compute as it is
already a VM
2. glance in a
BTW that patch is up for review as:
https://review.openstack.org/7302
Cheers,
eoghan
I'm working on a patch to at least make the glance UUID - S3 image
ID
not totally depend on an on-demand insertion order as it does now.
Agreed, collisions are inevitable given the relative domain and
Il 10/05/2012 11:48, Alvaro Lopez ha scritto:
On Thu 10 May 2012 (10:41), Muriel wrote:
If I remember correctly, the qcow images are not the only problem
with xen, but I'm far from the code for too long time. In the past
(diablo), the method for counting the ram (and cpu perhaps?) did not
work
Another item that we need to discuss is extensibility of this API.
Hi,
Here is a proposal, which we could discuss further during the meeting.
GET extension=param1=fooparam2=bar
The API looks up /usr/share/ceilometer/extensions/.py and loads it. The
module defines a query
I am sure image is ok since of I use the same image in both older version
installed via devstack on ubuntu11.10 and new version installed on
ubuntu12.04.
In older version, it can work well. but now it cannot. Am I missing
something in nova.conf ?
On Thu, May 10, 2012 at 8:29 PM, Yong Sheng Gong
Hi all!
I'm having some problems with juju and security groups in openstack. When I
try to instantiate about 10 instances, some of them generate an error
related to the security groups. The log below is from nova-api.log. I'm
using versions from ubuntu 12.04 LTS packages (nova*, keystone etc).
HI,First you have to make sure the network between your control node's br100 and your compute node's br100 are connected. and then can you show the output on control node:ps -ef | grep dnsmasqbrctl showifconfig2. can you login to your vm by vnc to see the eth0 configuration and then try to run
On Thu, May 10, 2012 at 03:17:59PM +0200, Muriel wrote:
Il 10/05/2012 11:48, Alvaro Lopez ha scritto:
On Thu 10 May 2012 (10:41), Muriel wrote:
If I remember correctly, the qcow images are not the only problem
with xen, but I'm far from the code for too long time. In the past
(diablo), the
Are there any documented examples out there of how to use roles? I still have a
hard time building a mental model of how the system works. In particular:
Do I need to create a new role for every user-tenant pair? Or can I reuse the
same role?
Where are the semantics of roles specified? What
On Thu 10 May 2012 (15:17), Muriel wrote:
Great! But there is a reason if are you using /proc/meminfo instead
of getInfo when calculating the memory used?
You know if there is a way to get, using libvirt, the reserved
memory for dom0? Or the only solution is to read the configuration
file of
On Thu, May 10, 2012 at 9:00 AM, Lorin Hochstein
lo...@nimbisservices.comwrote:
Are there any documented examples out there of how to use roles? I still
have a hard time building a mental model of how the system works. In
particular:
Do I need to create a new role for every user-tenant
Hi all,
We at Csscorp have been publishing series of beginners guide on
Ubuntu/Openstack (versions), in continuation with that we have released the
latest version of our book with Essex and Ubuntu 12.04.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Daniel Dyer dan.dye...@gmail.com wrote: One per installation, at least, since
the source field could allow to aggregate informations from multiple
installations.
Is it your assumption that there will be one metering service per
installation or
ok I'm gonna check this and I'll keep you posted.
By the way, how could I check the network between the control node's
br100 and the compute node's br100? I guess I can do this by checking
that each bridge knows the other in the ARP table. Or did you have
another idea?
Michaël Van de Borne
Hi,
First, check if nova-api is running on the host where your nova-network runs
(same as nova-compute if using a multi_host=true setup).
Second, using the console of the instance check if your instance can access the
API service by doing a:
GET
we are here talking about I18N of log information
i prefer to English only log:
1. easy to search and share
2. easy to maintain
2012/5/10 Ying Chun Guo guoyi...@cn.ibm.com:
I18N is an architecture decision. Besides developers, we should also consult
customers' options.
I18N is a very big
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Daniel Dyer dan.dye...@gmail.com wrote:
A question/comment about the scope of the schema or maybe the
architecture.
Assuming the services will provide the instrumentation to populate the
raw
metric data, it seems likely that you will need to define
Hi all,
I was wondering if is there any way to create private and global endpoints
in Keystone essex final, what for ?
I have users defined for specific applications, for example i want that the
images user, just to have access to the SWIFT endpoint, but no to nova,
and etc
In previous versions
Can anyone pinpoint what exactly is wrong with this. I've been stuck here
for the past three days, and nothing i do seems to be working :/
On Tue, May 8, 2012 at 12:11 PM, Leander Bessa leande...@gmail.com wrote:
I fixed the swift ip and i'm still getting the same error.
Here are the log
Hey guys,
Just wanted to say that I'm deep, deep into some Keystone right now
(auth'ing against DreamHost's existing infrastructure and granting
access to tenants, etc.) and this email just saved me about a week of
work :-)
Thanks!
d
On Thu, May 10, 2012 at 10:25 AM, Dolph Mathews
As usual, amazing work.Congratulations
to all the team sir :)
Atul Jha
10 mai 2012 16:33Hi all,We at
Csscorp have been publishing series of beginners guide on
Ubuntu/Openstack (versions), in continuation with that we have released
the latest version of our book with Essex and
Concerning your keystone.log being empty (empty for the duration of the
request, or completely empty?)... is logging to a specific file configured
in your keystone.conf? If not, keystone just logs to stdout.
-Dolph
On Thu, May 10, 2012 at 10:20 AM, Leander Bessa Beernaert
leande...@gmail.com
Il 10/05/2012 16:08, Alvaro Lopez ha scritto:
On Thu 10 May 2012 (15:17), Muriel wrote:
Great! But there is a reason if are you using /proc/meminfo instead
of getInfo when calculating the memory used?
You know if there is a way to get, using libvirt, the reserved
memory for dom0? Or the only
Both. The log file is completely empty and the stdout only prints
deprecation warnings :/
On Thu, May 10, 2012 at 4:32 PM, Dolph Mathews dolph.math...@gmail.comwrote:
Concerning your keystone.log being empty (empty for the duration of the
request, or completely empty?)... is logging to a
On Thu, May 10, 2012 at 12:17 AM, Daniel Dyer dan.dye...@gmail.com wrote:
A question/comment about the scope of the schema or maybe the
architecture. Assuming the services will provide the instrumentation to
populate the raw metric data, it seems likely that you will need to define
an
Can you paste those deprecation warnings, your keystone.conf, and logging.conf?
-Dolph Mathews
On May 10, 2012, at 10:37 AM, Leander Bessa Beernaert leande...@gmail.com
wrote:
Both. The log file is completely empty and the stdout only prints deprecation
warnings :/
On Thu, May 10, 2012
On Thu, May 10, 2012 at 9:22 AM, Loic Dachary l...@enovance.com wrote:
Another item that we need to discuss is extensibility of this API.
Hi,
Here is a proposal, which we could discuss further during the meeting.
GET extension=param1=fooparam2=bar
The API looks up
On Thu 10 May 2012 (17:33), Muriel wrote:
I messed up the question: if you consider the case where the memory
is limited (dom0_mem) the value of MemTotal in meminfo is wrong. Do
you think it makes sense to take the total memory value from libvirt
and from meminfo the rest?
Thus it should work
Hi,
In Admin installation document guide of Ubuntu 12.04 in the section 5.
Installing OpenStack Compute and Image Service
Following settings are missing.
[filter:authtoken]
paste.filter_factory = keystone.middleware.auth_token:filter_factory
service_protocol = http service_host = *IP*
Hi everyone , i proudly present 30 days of work.30 days ago , i was an
OpenStack Noobie, Today i have much more knowledge about this awesome project.I
wanted to share this work with those who are still taking the fist steps into
the world of cloud computing.It's a one host install guide,
Hi All,
I've started a
blueprinthttps://blueprints.launchpad.net/keystone/+spec/store-quota-dataand
spec http://wiki.openstack.org/KeystoneStoreQuotaData to store quota data
in Keystone. Please have a look if you're interested and any feedback is
welcome.
Of course, writing up the spec brought
Unfortunately there's something wrong with my logging configuration. Nova-api
doesn't log anything after it starts up. I've got debug enabled, and
verbose=true. But once it finished binding that last port.. Nothing. I've tried
grabbing the sample logging.conf and using that, but it doesn't get
Glance isn't able to authenticate who you are. What happens if you speak to
glance directly?
On May 10, 2012, at 8:20 AM, Leander Bessa Beernaert wrote:
Can anyone pinpoint what exactly is wrong with this. I've been stuck here for
the past three days, and nothing i do seems to be working :/
On May 10, 2012, at 1:56 AM, Daniel P. Berrange wrote:
On Thu, May 10, 2012 at 09:06:58AM +0100, Daniel P. Berrange wrote:
I had a quick chat with Kevin Wolf who's the upstream QEMU qcow2 maintainer
and he said that 64k is the current recommended cluster size for qcow2.
Above this size,
On May 9, 2012, at 10:08 PM, Jim Fehlig wrote:
Hi,
I've been tinkering with improving Xen support in the libvirt driver and
wanted to discuss a few issues before submitting patches.
Awesome!
Even the latest upstream release of Xen (4.1.x) contains a rather old
qemu, version 0.10.2,
You might want to talk to Soren and fix it within:
https://blueprints.launchpad.net/nova/+spec/hypervisor-code-consolidation
since this will also result in refactoring in the same area.
Vishvananda Ishaya wrote:
No this is mostly just legacy stuff that was never refactored.
Vish
On May
Thanks Gabriel for the work. I agree with Thierry:
On 05/08/2012 09:56 PM, Thierry Carrez wrote:
Great! I'm happy to defer the tool decision to the people that will own
and push that work forward ;)
I like the basic reporting offered by Transifex. Do you know if there is
a way to identify the
On 05/10/2012 07:33 AM, Atul Jha wrote:
Suggestion/criticism would be highly appreciated.
Tried a few times to send this directly to Atul and the
css.ossbo...@csscorp.com address in the paper, but was getting rejected
content for Atul's email destination and no such user for the
Hi Dolph and Kevin,
thank you for your attention and sorry for delay reply.
Here are what I have in nova-api.log :
2012-05-10 14:40:08 INFO nova.api.openstack.wsgi
[req-c6b9ea76-bbe1-4796-a231-41fc41c7695f
50be127b9b7f49dcbf5ffea06d23d83a ebf29e67cbd445daa5ad09f76cdf69f9] GET
Hi! Thank you for the reply. I'm not trying to delete de secgroup manually.
All the tasks are made by juju and nova. I've made a detailed description
of the problem. Take a look at:
http://pastebin.com/SnC4GLEi
Thanks!
On Thu, May 10, 2012 at 12:57 PM, Russell Bryant rbry...@redhat.com wrote:
How are we doing event handling in the client? Is there a blueprint on
this somewhere?
-Matt
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help :
I was also wondering about this, it seems there are lots of policy.json files
with hard coded roles in them, which is weird since keystone supports the
creation of roles and such, but if u create a role which isn't in a policy.json
then u have just caused yourself a problem, which isn't very
George:
I can GET http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key in
instance.
Now I found some error about key injecting when launching instance:
2012-05-11 10:30:41 INFO nova.virt.libvirt.connection
[req-e9463bab-044f-4a79-a0a4-40499894fd51 faa39ad681294b8097070541cb62e91f
There's a very related open review in progress concerning the auth_token
docs at http://keystone.openstack.org/ as well.
https://review.openstack.org/#/c/7217
-Dolph
On Thu, May 10, 2012 at 12:09 AM, Milind milindkpa...@gmail.com wrote:
Hi,
In Admin installation document guide of Ubuntu
Ubuntu 12.04 Essex.
# glance index
Failed to show index. Got error:
You are not authenticated.
Details: 401 Unauthorized
This server could not verify that you are authorized to access the document
you requested. Either you supplied the wrong credentials (e.g., bad
password), or your browser does
Hi all.
I am using ubuntu 12.04 essex. 3.2.0-23-generic #36-Ubuntu SMP Tue Apr
10 20:39:51 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux.
After a while, with high traffic, the instances loses network and they
end being unreachables, only being able to connect using terminal. My
network/interfaces are
61 matches
Mail list logo
