Re: [Openstack] [Keystone]Question: Assignment of default role

2013-02-25 Thread Leo Toyoda
Hi Adam Thanks a lot for your answer. It is my understanding follows. Would that be OK with you? Case1: Create a user *with* specifying the tenant. * Default role is assigned. * I need to assign the required roles in keystone user-role-add. * The user has two roles. Case2: Create a

[Openstack] Regarding Role Management

2013-02-25 Thread Aru s
Hi, I am trying to understand the roles (default available) and its privillages. Not able to find any document on this. Also looking for document which reffers how to create roles with custom privillages. Please help. Regards, Arumon ___ Mailing list:

[Openstack] Server increasing load due increasing processes in D state

2013-02-25 Thread Alessandro Tagliapietra
Hello guys, at work we've the openstack controller that since some months started to increase its load after some days of uptime. I've seen that the cause is that processes sometimes hangs and remain in D state. I've used some combination of ps args to get these outputs:

Re: [Openstack] Server increasing load due increasing processes in D state

2013-02-25 Thread Alessandro Tagliapietra
After an strace of lsof I've seen it hangs on stat(/proc/1227/, {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open(/proc/1227/stat, O_RDONLY) = 4 read(4, 1227 (nova-dhcpbridge) D 1224 25..., 4096) = 242 close(4) = 0 readlink(/proc/1227/cwd, /..., 4096) = 1 stat(/proc/1227/cwd,

Re: [Openstack] VM doesnt get IP

2013-02-25 Thread Guilherme Russi
Hello Aaron, I can ping to 192.168.3.3 ping 192.168.3.3 PING 192.168.3.3 (192.168.3.3) 56(84) bytes of data. 64 bytes from 192.168.3.3: icmp_req=1 ttl=64 time=0.237 ms 64 bytes from 192.168.3.3: icmp_req=2 ttl=64 time=0.193 ms What am I missing? Regards. Guilherme. 2013/2/23 Rahul Sharma

[Openstack] Role of administrators

2013-02-25 Thread Ganesh Hariharan
Hi, I have a generic question related to paradigm shift towards cloud computing,, will there be same level of requirements to perform administrative jobs in cloud comparitive to traditional computing Thanks, ___ Mailing list:

[Openstack] horizon/keystone

2013-02-25 Thread Mballo Cherif
Hello everybody ! I need to understand how does horizon use keystone to authenticate user in dashboard? What is really the interaction with horizon and keystone? I am looking the horizon code but it's not easy to understand. Thanks you for your help! Sherif.

Re: [Openstack] horizon/keystone

2013-02-25 Thread Julie Pichon
Mballo Cherif cherif.mba...@gemalto.com wrote: Hello everybody ! I need to understand how does horizon use keystone to authenticate user in dashboard? What is really the interaction with horizon and keystone? I am looking the horizon code but it's not easy to understand. Thanks you for

Re: [Openstack] Comparing OpenStack to OpenNebula

2013-02-25 Thread Sylvain Bauza
Hi Shawn, Le 25/02/2013 06:20, Shawn Starr a écrit : Hello folks, I am starting to look at OpenStack and noticed there are some things it doesn't seem to be able to do right now? 1) Managing the nova-compute (hypervisor) - I see no options on how to control what nova-compute nodes can be

Re: [Openstack] Mirror in Online the VM

2013-02-25 Thread Razique Mahroua
I mean, is every box running all the OpenStack services (nova-compute, network, volumes, API, so forth and so so on):) Razique Mahroua-Nuage Corazique.mahr...@gmail.comTel: +33 9 72 37 94 15 Le 20 févr. 2013 à 22:25, Frans Thamura fr...@meruvian.org a écrit :On Thu, Feb 21, 2013 at 4:17 AM,

Re: [Openstack] Mirror in Online the VM

2013-02-25 Thread Frans Thamura
Just got vmotion Yes like that. Frans Thamura Meruvian Integrated Hypermedia Solution Provider On Feb 25, 2013 10:51 PM, Razique Mahroua razique.mahr...@gmail.com wrote: I mean, is every box running all the OpenStack services (nova-compute, network, volumes, API, so forth and so so on) :)

Re: [Openstack] [Quantum] Metadata service route from a VM

2013-02-25 Thread Sylvain Bauza
Yet no reply ? I did the hack, I removed the 169.254.0.0/16 route from my images, but this is quite a ugly hack. Could someone with OpenVswitch/GRE setup please confirm that there is no route to create for metadata ? Thanks, -Sylvain Le 21/02/2013 11:33, Sylvain Bauza a écrit : Anyone ? I

[Openstack] Usage of New Keystone Domains with OpenStack

2013-02-25 Thread Miller, Mark M (EB SW Cloud - RD - Corvallis)
Hello, We are moving from OpenStack Essex to Grizzly and I am trying to find out how the new domain security collection will be used by the OpenStack services like Nova or Glance. I would greatly appreciate any information or documentation pointers. Regards, Mark Miller

[Openstack] VM creation failure

2013-02-25 Thread Javier Alvarez
Hello, I'm trying to setup OpenStack Essex on Debian and I'm getting an error when creating new VMs. The problem arises when trying to allocate the network of the VM, but I'm not sure why it's happening, I'm using nova-network, and that's the log output: 2013-02-25 18:20:28 AUDIT

[Openstack] [Kesytone] Logging output modification

2013-02-25 Thread Alejandro Comisario
Hi guys, we are using keystone 2012.1.4 into production, and we are using keystone logs to stream into kafka, and we wanted to modify the logs content to add the tenant id into the line. We saw in the code that keystone leaves that duty to the python logging method. We tried several methods to

[Openstack] [Keystone] which config works?

2013-02-25 Thread Kun Huang
Hi all, In auth_token (at keystoneclient middleware), if we config like below: auth_uri = http://localhost:5000/ (without auth_protocal setting which default https) or like below auth_uri = http://localhost:5000/ auth_protocal = http Which one SHOULD works? The first one is brief but doesn't

Re: [Openstack] Grizzly-3 development milestone available (Keystone, Glance, Nova, Horizon, Quantum, Cinder)

2013-02-25 Thread Martinx - ジェームズ
Cool! Grizzly G3 is on Raring Ringtail! I'm seeing lots of AWESOME new packages here! Like Ajax Console, SPICE proxy, Ceilometer, Nova Cells and Baremetal and go on... But, no Heat package available... Is Heat a requirement to run Grizzly G3? Or can I start testing it now with those packages?

Re: [Openstack] Grizzly-3 development milestone available (Keystone, Glance, Nova, Horizon, Quantum, Cinder)

2013-02-25 Thread Chuck Short
Hi On 13-02-25 01:34 PM, Martinx - ジェームズ wrote: Cool! Grizzly G3 is on Raring Ringtail! I'm seeing lots of AWESOME new packages here! Like Ajax Console, SPICE proxy, Ceilometer, Nova Cells and Baremetal and go on... But, no Heat package available... Is Heat a requirement to run Grizzly G3?

Re: [Openstack] [OpenStack][Glance] Failure in Glance install: 'NoneType' object has no attribute 'method'

2013-02-25 Thread Brian Waldon
What version of webob do you have installed? stable/essex explicitly depends on v1.0.8, which ensures that the 'request' attribute is not-None on a Response object. As of v1.1.1, the 'request' attribute was no longer a supported part of the API. We treat this in Folsom and Grizzly by explicitly

[Openstack] VM guest can't access outside world.

2013-02-25 Thread Barrow Kwan
Hi, I just installed Folsom on CentOS 6.3 ( single host with two NIC ). I can launch VM fine and VM get an IP address. I associate a floating IP, create security group to allow ssh and I can ssh to the VM with the floating IP ( from a non-openstack node on the same physical network ). What

Re: [Openstack] VM guest can't access outside world.

2013-02-25 Thread Razique Mahroua
HiIs the Ip forwarding enabled on the server? Razique Mahroua-Nuage Corazique.mahr...@gmail.comTel: +33 9 72 37 94 15 Le 25 févr. 2013 à 22:15, Barrow Kwan barrowk...@yahoo.com a écrit :Hi,I just installed Folsom on CentOS 6.3 ( single host with two NIC ). I can launch VM fine and VM get an IP

Re: [Openstack] Usage of New Keystone Domains with OpenStack

2013-02-25 Thread Dolph Mathews
As of Grizzly, the introduction of domains into OpenStack won't have any impact on the rest of the deployment (AFAIK). Rather, the impact is currently isolated to keystone and their use is effectively optional (out of the box, keystone creates a single domain for you to work with -- the 'default'

Re: [Openstack] Comparing OpenStack to OpenNebula

2013-02-25 Thread Shawn Starr
On Monday, February 25, 2013 10:34:11 PM Jeremy Stanley wrote: On 2013-02-25 06:20 -0500 (-0500), Shawn Starr wrote: [...] I see no options on how to control what nova-compute nodes can be 'provisioned' into an OpenStack cloud, I'd consider that a security risk (potentially) if any

Re: [Openstack] Usage of New Keystone Domains with OpenStack

2013-02-25 Thread Miller, Mark M (EB SW Cloud - RD - Corvallis)
So one clarifying question? When an image is marked public in Glance, does that mean public for all projects in the domain for which the image belongs OR does it mean public for all projects in all domains? This clarifying question will tell me how nova and glance implicitly support domains

Re: [Openstack] Comparing OpenStack to OpenNebula

2013-02-25 Thread andi abes
On Mon, Feb 25, 2013 at 5:46 PM, Shawn Starr shawn.st...@rogers.com wrote: On Monday, February 25, 2013 10:34:11 PM Jeremy Stanley wrote: On 2013-02-25 06:20 -0500 (-0500), Shawn Starr wrote: [...] I see no options on how to control what nova-compute nodes can be 'provisioned' into

Re: [Openstack] Comparing OpenStack to OpenNebula

2013-02-25 Thread Shawn Starr
On Monday, February 25, 2013 05:59:02 PM andi abes wrote: On Mon, Feb 25, 2013 at 5:46 PM, Shawn Starr shawn.st...@rogers.com wrote: On Monday, February 25, 2013 10:34:11 PM Jeremy Stanley wrote: On 2013-02-25 06:20 -0500 (-0500), Shawn Starr wrote: [...] I see no options on how

Re: [Openstack] [Keystone] my token generated by curling http://localhost:35357/v2.0/tokens is too long...

2013-02-25 Thread Dolph Mathews
+1 However, I'm curious as to what makes it too long, or what's not working. Can you provide an example? -Dolph On Sat, Feb 23, 2013 at 12:33 PM, Anne Gentle a...@openstack.org wrote: I believe this is due to a change in default for grizzly-- token_format defaults to PKI instead of UUID in

Re: [Openstack] AggregateInstanceExtraSpecs very slow?

2013-02-25 Thread Joe Gordon
On Sun, Feb 24, 2013 at 3:31 PM, Sam Morrison sorri...@gmail.com wrote: I have been playing with the AggregateInstanceExtraSpecs filter and can't get it to work. In our staging environment it works fine with 4 compute nodes, I have 2 aggregates to split them into 2. When I try to do the

[Openstack] Announcing superglance (convenience wrapper for glanceclient)

2013-02-25 Thread Richard Goodwin
Most of you are probably already pretty familiar with Major Hayden's supernova utility, which is indispensable for working with even moderately complex Nova deployments. As I spend most of my days with Glance here @ Rackspace, I felt quite envious of these productive Nova folk, and decided

Re: [Openstack] AggregateInstanceExtraSpecs very slow?

2013-02-25 Thread Sam Morrison
Hi Joe, On 26/02/2013, at 11:19 AM, Joe Gordon j...@cloudscaling.com wrote: On Sun, Feb 24, 2013 at 3:31 PM, Sam Morrison sorri...@gmail.com wrote: I have been playing with the AggregateInstanceExtraSpecs filter and can't get it to work. In our staging environment it works fine with 4

Re: [Openstack] [Keystone] my token generated by curling http://localhost:35357/v2.0/tokens is too long...

2013-02-25 Thread Kun Huang
{ access: { metadata: { is_admin: 0, roles: [ acb42117c39945079ecf56bad7f441a1 ] }, serviceCatalog: [ { endpoints: [ { adminURL:

Re: [Openstack] AggregateInstanceExtraSpecs very slow?

2013-02-25 Thread Joe Gordon
On Mon, Feb 25, 2013 at 6:14 PM, Sam Morrison sorri...@gmail.com wrote: Hi Joe, On 26/02/2013, at 11:19 AM, Joe Gordon j...@cloudscaling.com wrote: On Sun, Feb 24, 2013 at 3:31 PM, Sam Morrison sorri...@gmail.com wrote: I have been playing with the AggregateInstanceExtraSpecs filter and

Re: [Openstack] AggregateInstanceExtraSpecs very slow?

2013-02-25 Thread Sam Morrison
Hi Joe, On 26/02/2013, at 1:39 PM, Joe Gordon j...@cloudscaling.com wrote: On Mon, Feb 25, 2013 at 6:14 PM, Sam Morrison sorri...@gmail.com wrote: Hi Joe, On 26/02/2013, at 11:19 AM, Joe Gordon j...@cloudscaling.com wrote: On Sun, Feb 24, 2013 at 3:31 PM, Sam Morrison

Re: [Openstack] AggregateInstanceExtraSpecs very slow?

2013-02-25 Thread Chris Behrens
On Feb 25, 2013, at 6:39 PM, Joe Gordon j...@cloudscaling.com wrote: It looks like the scheduler issues are related to the rabbitmq issues. host 'qh2-rcc77' ... is disabled or has not been heard from in a while What does 'nova host-list' say? the clocks must all be synced up? Good

Re: [Openstack] [Keystone]Question: Assignment of default role

2013-02-25 Thread Leo Toyoda
Hi Dolph Thanks a lot for the reply. I could understand very well. Regards, Leo Toyoda _ From: Dolph Mathews [mailto:dolph.math...@gmail.com] Sent: Tuesday, February 26, 2013 7:11 AM To: Leo Toyoda Cc: Adam Young; openstack Subject: Re: [Openstack] [Keystone]Question: Assignment

[Openstack] Huge memory consumption of qpid server

2013-02-25 Thread Yufang Zhang
Hi all, I use qpid server as message queue in openstack. After the cluster running for a month, I find the qpid server has consumed 400M memory. Considering the cluster has only 10 nodes, things would be worse as more nodes are being added into cluster. No memory leaks were found when I used

Re: [Openstack] AggregateInstanceExtraSpecs very slow?

2013-02-25 Thread Sam Morrison
On 26/02/2013, at 2:15 PM, Chris Behrens cbehr...@codestud.com wrote: On Feb 25, 2013, at 6:39 PM, Joe Gordon j...@cloudscaling.com wrote: It looks like the scheduler issues are related to the rabbitmq issues. host 'qh2-rcc77' ... is disabled or has not been heard from in a while

Re: [Openstack] Huge memory consumption of qpid server

2013-02-25 Thread Victor Palma
Can you provide more context around your start up commands? What is your xms set you, how much memory have you allocated? What is your buffer size on the broker and client? Additionally what makes you think it's consuming so much memory? Regards, Victor Palma On Feb 25, 2013, at 10:01 PM,

Re: [Openstack] Comparing OpenStack to OpenNebula

2013-02-25 Thread Vishvananda Ishaya
If you set: enable_new_services=False in your nova.conf, all new services will be disabled by default and the scheduler won't start scheduling instances until you explicitly enable them. Vish On Feb 25, 2013, at 2:46 PM, Shawn Starr shawn.st...@rogers.com wrote: On Monday, February 25, 2013

Re: [Openstack] AggregateInstanceExtraSpecs very slow?

2013-02-25 Thread Chris Behrens
After thinking more, it does seem like we're doing something wrong if the query itself is returning 300k rows. :) I can take a better look at it in front of the computer later if no one beats me to it. On Feb 25, 2013, at 9:28 PM, Chris Behrens cbehr...@codestud.com wrote: Replying from my

Re: [Openstack] [Quantum] Metadata service route from a VM

2013-02-25 Thread Dan Wendlandt
Hi Sylvain, The answer here is that it depends. If you are using Folsom + Quantum, the only supported mechanism is reaching the metadata server is via your default gateway, so VMs should not have specific routes to reach the metadata subnet (I believe this is also the case for nova-network, so

Re: [Openstack] AggregateInstanceExtraSpecs very slow?

2013-02-25 Thread Sam Morrison
On 26/02/2013, at 4:31 PM, Chris Behrens cbehr...@codestud.com wrote: After thinking more, it does seem like we're doing something wrong if the query itself is returning 300k rows. :) I can take a better look at it in front of the computer later if no one beats me to it. Yeah I think it's

Re: [Openstack] LBaas :: Service Agent :: Drivers

2013-02-25 Thread Dan Wendlandt
Hi Trinath, This review is no longer the active review for LBaaS within Quantum for Grizzly. Instead, we are going with a simplified approach, here: https://review.openstack.org/#/c/22794/3 dan On Sun, Feb 24, 2013 at 10:17 PM, Trinath Somanchi trinath.soman...@gmail.com wrote: Hi Stackers-

Re: [Openstack] LBaas :: Service Agent :: Drivers

2013-02-25 Thread Trinath Somanchi
Hi Dan- Thanks a lot for the update. As I understand, let me summarize the LBaas Driver and Agent in simple terms. [1] Service Agent is an generic implementation supporting many drivers. [2] Drivers form the applications of the Services. like, HAPROXY for Loadbalancer Service. What more

Re: [Openstack] Huge memory consumption of qpid server

2013-02-25 Thread Yufang Zhang
2013/2/26 Victor Palma palma.vic...@gmail.com Can you provide more context around your start up commands? What is your xms set you, how much memory have you allocated? What is your buffer size on the broker and client? Sorry. I have limited knowledge about qpid. I just install qpid server

[Openstack-ubuntu-testing-notifications] Build Failure: precise_grizzly_ceilometer_trunk #103

2013-02-25 Thread openstack-testing-bot
at 20130225-1003Build needed 00:00:00, 0k disc

[Openstack-ubuntu-testing-notifications] Build Still Failing: precise_grizzly_ceilometer_trunk #104

2013-02-25 Thread openstack-testing-bot
at 20130225-1033Build needed 00:00:00, 0k disc spaceE: Package build dependencies not satisfied; skippingERROR:root:Error occurred during package

[Openstack-ubuntu-testing-notifications] Build Failure: raring_grizzly_nova_trunk #769

2013-02-25 Thread openstack-testing-bot
at 20130225

[Openstack-ubuntu-testing-notifications] Build Fixed: raring_grizzly_nova_trunk #770

2013-02-25 Thread openstack-testing-bot
Title: raring_grizzly_nova_trunk General InformationBUILD SUCCESSBuild URL:https://jenkins.qa.ubuntu.com/job/raring_grizzly_nova_trunk/770/Project:raring_grizzly_nova_trunkDate of build:Mon, 25 Feb 2013 13:01:14 -0500Build duration:14 minBuild cause:Started by an SCM changeBuilt

[Openstack-ubuntu-testing-notifications] Build Still Failing: raring_grizzly_deploy #63

2013-02-25 Thread openstack-testing-bot
Title: raring_grizzly_deploy General InformationBUILD FAILUREBuild URL:https://jenkins.qa.ubuntu.com/job/raring_grizzly_deploy/63/Project:raring_grizzly_deployDate of build:Mon, 25 Feb 2013 14:02:32 -0500Build duration:46 minBuild cause:Started by command line by jenkinsBuilt on:masterHealth

[Openstack-ubuntu-testing-notifications] Build Still Failing: raring_grizzly_cinder_trunk #189

2013-02-25 Thread openstack-testing-bot
Title: raring_grizzly_cinder_trunk General InformationBUILD FAILUREBuild URL:https://jenkins.qa.ubuntu.com/job/raring_grizzly_cinder_trunk/189/Project:raring_grizzly_cinder_trunkDate of build:Mon, 25 Feb 2013 15:29:39 -0500Build duration:4 min 54 secBuild cause:Started by user Chuck ShortBuilt

[Openstack-ubuntu-testing-notifications] Build Still Failing: precise_grizzly_ceilometer_trunk #105

2013-02-25 Thread openstack-testing-bot
at 20130225-1703Build needed 00:00

[Openstack-ubuntu-testing-notifications] Build Still Failing: precise_grizzly_cinder_trunk #185

2013-02-25 Thread openstack-testing-bot
Title: precise_grizzly_cinder_trunk General InformationBUILD FAILUREBuild URL:https://jenkins.qa.ubuntu.com/job/precise_grizzly_cinder_trunk/185/Project:precise_grizzly_cinder_trunkDate of build:Mon, 25 Feb 2013 17:49:36 -0500Build duration:4 min 34 secBuild cause:Started by user James PageBuilt

[Openstack-ubuntu-testing-notifications] Build Fixed: precise_grizzly_ceilometer_trunk #106

2013-02-25 Thread openstack-testing-bot
Title: precise_grizzly_ceilometer_trunk General InformationBUILD SUCCESSBuild URL:https://jenkins.qa.ubuntu.com/job/precise_grizzly_ceilometer_trunk/106/Project:precise_grizzly_ceilometer_trunkDate of build:Mon, 25 Feb 2013 17:58:40 -0500Build duration:4 min 5 secBuild cause:Started by user James

[Openstack-ubuntu-testing-notifications] Build Still Failing: raring_grizzly_deploy #64

2013-02-25 Thread openstack-testing-bot
Title: raring_grizzly_deploy General InformationBUILD FAILUREBuild URL:https://jenkins.qa.ubuntu.com/job/raring_grizzly_deploy/64/Project:raring_grizzly_deployDate of build:Mon, 25 Feb 2013 17:23:05 -0500Build duration:46 minBuild cause:Started by command line by jenkinsBuilt on:masterHealth

[Openstack-ubuntu-testing-notifications] Build Failure: precise_grizzly_quantum_trunk #356

2013-02-25 Thread openstack-testing-bot
Title: precise_grizzly_quantum_trunk General InformationBUILD FAILUREBuild URL:https://jenkins.qa.ubuntu.com/job/precise_grizzly_quantum_trunk/356/Project:precise_grizzly_quantum_trunkDate of build:Mon, 25 Feb 2013 21:01:16 -0500Build duration:1 min 22 secBuild cause:Started by an SCM changeBuilt

[Openstack-ubuntu-testing-notifications] Build Failure: raring_grizzly_quantum_trunk #368

2013-02-25 Thread openstack-testing-bot
Title: raring_grizzly_quantum_trunk General InformationBUILD FAILUREBuild URL:https://jenkins.qa.ubuntu.com/job/raring_grizzly_quantum_trunk/368/Project:raring_grizzly_quantum_trunkDate of build:Mon, 25 Feb 2013 21:01:13 -0500Build duration:2 min 28 secBuild cause:Started by an SCM changeBuilt

[Openstack-ubuntu-testing-notifications] Build Still Failing: raring_grizzly_deploy #65

2013-02-25 Thread openstack-testing-bot
Title: raring_grizzly_deploy General InformationBUILD FAILUREBuild URL:https://jenkins.qa.ubuntu.com/job/raring_grizzly_deploy/65/Project:raring_grizzly_deployDate of build:Mon, 25 Feb 2013 20:45:26 -0500Build duration:46 minBuild cause:Started by command line by jenkinsBuilt on:masterHealth

[Openstack-ubuntu-testing-notifications] Build Still Failing: raring_grizzly_quantum_trunk #369

2013-02-25 Thread openstack-testing-bot
Title: raring_grizzly_quantum_trunk General InformationBUILD FAILUREBuild URL:https://jenkins.qa.ubuntu.com/job/raring_grizzly_quantum_trunk/369/Project:raring_grizzly_quantum_trunkDate of build:Tue, 26 Feb 2013 00:35:49 -0500Build duration:2 min 53 secBuild cause:Started by an SCM changeBuilt

[Openstack-ubuntu-testing-notifications] Build Still Failing: precise_grizzly_quantum_trunk #357

2013-02-25 Thread openstack-testing-bot
Title: precise_grizzly_quantum_trunk General InformationBUILD FAILUREBuild URL:https://jenkins.qa.ubuntu.com/job/precise_grizzly_quantum_trunk/357/Project:precise_grizzly_quantum_trunkDate of build:Tue, 26 Feb 2013 00:38:25 -0500Build duration:1 min 20 secBuild cause:Started by an SCM changeBuilt