[Openstack] VlanManager issues...

2012-01-25 Thread Lillie Ross-CDSR11
I'm setting up a modest cloud for internal use. Currently I have the following configuration: Server1 (nova) is running all nova services EXCEPT nova compute. Server 2 (nova1) is running only nova-compute. Servers3-12 are idle, but will eventually run nova-compute Server 1 is configured with

Re: [Openstack] Glance authentication with Keystone woes...

2012-02-01 Thread Lillie Ross-CDSR11
06:28 PM, Lillie Ross-CDSR11 wrote: I'm reinstalling the various Openstack services from packages in the ManagedIT PPA to pull in the latest Diablo bug fixes. I'm following the latest directions in the newly release installation guide as I perform these upgrades (http://docs.openstack.org/diablo

[Openstack] Keystone installation with ManagedIT packages...

2012-02-02 Thread Lillie Ross-CDSR11
legacy_auth RAX-KEY-extension service_api versus what is specified in the installation guide. Does this difference matter? What are the differences? Regards, Ross On Feb 1, 2012, at 10:31 AM, Lillie Ross-CDSR11 wrote: Hi Jay, Yes, this confused me, however I get the same error using

[Openstack] Nova command line versus Euca2ools

2012-02-06 Thread Lillie Ross-CDSR11
I currently have OpenStack installed (using the ManagedIT PPA) to use Keystone for authentication. However I'm still receiving a number of Malformed request URL messages, both in Dashboard as well as when using the Nova command line client. Also, some of the Euca2ools command run OK, others

[Openstack] Swift/Keystone authorization question

2012-02-22 Thread Lillie Ross-CDSR11
I've successfully installed all OpenStack components with Keystone authorization (well, mostly at least), but am now seeing an interesting problem for new accounts (created in Dashboard). Using my admin account, I issue a swift stat command and get the expected response back from swift-proxy:

Re: [Openstack] Swift/Keystone authorization question

2012-02-23 Thread Lillie Ross-CDSR11
of access to swift storage. Works great. /ross On Feb 22, 2012, at 3:26 PM, Lillie Ross-CDSR11 wrote: As a followup, additional info… Both the admin and glance accounts, that successfully authenticate against keystone, were created via the command line. Both accounts also have a tenant of the same

[Openstack] Swift container ACLs and container visibility question

2012-02-23 Thread Lillie Ross-CDSR11
I'm setting up Swift storage for an internal project. For the project's use of Swift, I want all members of the project to be able to see what's stored in Swift. Applying suitable ACLs, it's possible for user's to see the contents of the projects container. However, is there any way to allow

Re: [Openstack] Swift container ACLs and container visibility question

2012-02-23 Thread Lillie Ross-CDSR11
Sorry, I should have mentioned my setup. I'm using Keystone from the managedit repository combined with a swift keystone plugin to allow the proxy to use version 2 authentication. Ross (finger tapped on my iPhone) On Feb 23, 2012, at 4:38 PM, Chmouel Boudjnah chmo...@chmouel.com wrote: On

Re: [Openstack] Swift/Keystone authorization question

2012-02-24 Thread Lillie Ross-CDSR11
:52 PM, Lillie Ross-CDSR11 wrote: I've successfully installed all OpenStack components with Keystone authorization (well, mostly at least), but am now seeing an interesting problem for new accounts (created in Dashboard). Using my admin account, I issue a swift stat command and get the expected

Re: [Openstack] Swift/Keystone authorization question

2012-02-24 Thread Lillie Ross-CDSR11
data point. Ross On Feb 22, 2012, at 2:52 PM, Lillie Ross-CDSR11 wrote: I've successfully installed all OpenStack components with Keystone authorization (well, mostly at least), but am now seeing an interesting problem for new accounts (created in Dashboard). Using my admin account, I issue

Re: [Openstack] Swift/Keystone authorization question

2012-02-24 Thread Lillie Ross-CDSR11
OK, is this a 'role' grant issue? /ross On Feb 22, 2012, at 2:52 PM, Lillie Ross-CDSR11 wrote: I've successfully installed all OpenStack components with Keystone authorization (well, mostly at least), but am now seeing an interesting problem for new accounts (created in Dashboard). Using my

[Openstack] Nova instance and cloud-init

2012-02-28 Thread Lillie Ross-CDSR11
All, I've built a custom image according to the various directions available in the nova docs. The instance is loaded into glance and boots fine. When building the image, openssh-server and cloud-init packages are installed. So far so good. However, when I start the image, cloud-init does

Re: [Openstack] Swift, Keystone, and S3 pipeline configuration

2012-03-29 Thread Lillie Ross-CDSR11
in Essex) that means that data uploaded using S3 is in a different namespace to data uploaded with the OpenStack API. Regards, Tom On 03/28/2012 07:37 PM, Lillie Ross-CDSR11 wrote: Tom, Thanks! I'll give these a try. Regards Ross Sent from my iPad On Mar 27, 2012, at 6:19 PM, Tom

[Openstack] Mixing Swift authentication (tempauth) with Keystone = Dashboard flakiness

2012-03-30 Thread Lillie Ross-CDSR11
I'm not sure if you can do what I'm trying. I've deployed Openstack Diable (ManagedIT) with Keystone for all service authentication. However to restore S3 API compatibility with Swift, I've modified my proxy server config to use 'tempauth' instead of Keystone. Within the proxy-server.conf,

Re: [Openstack] Mixing Swift authentication (tempauth) with Keystone = Dashboard flakiness

2012-03-30 Thread Lillie Ross-CDSR11
As a followup. In Dashboard, the overview panel correctly displays the list of running instance. Only when selecting the 'instances' panel do I see problems. -- Ross Lillie ross.lil...@motorolasolutions.commailto:ross.lil...@motorolasolutions.com On Mar 30, 2012, at 1:18 PM, Lillie Ross

Re: [Openstack] Mixing Swift authentication (tempauth) with Keystone = Dashboard flakiness

2012-03-30 Thread Lillie Ross-CDSR11
Also... unable to start a new instance from dashboard. /ross -- Ross Lillie ross.lil...@motorolasolutions.commailto:ross.lil...@motorolasolutions.com On Mar 30, 2012, at 1:33 PM, Lillie Ross-CDSR11 wrote: As a followup. In Dashboard, the overview panel correctly displays the list

[Openstack] Best approach for deploying Essex?

2012-04-03 Thread Lillie Ross-CDSR11
With the pending release of Essex, I'm making plans to upgrade our internal cloud infrastructure. My question is what will be the best approach? Our cloud is being used to support internal research activities and thus needs to be 'relatively' stable, however as new features become available

Re: [Openstack] Best approach for deploying Essex?

2012-04-03 Thread Lillie Ross-CDSR11
On Apr 3, 2012, at 1:21 PM, Adam Gandelman wrote: On 04/03/2012 08:20 AM, Lillie Ross-CDSR11 wrote: My question is, should I base our new installation directly off the Essex branch in the git repository, or use the packages that will be deployed as part of the associated Ubuntu 12.04LTS release

Re: [Openstack] Best approach for deploying Essex?

2012-04-04 Thread Lillie Ross-CDSR11
for the Ubuntu packaging following quite quickly behind the devs. I highly recommend this approach. Kev On 3 April 2012 20:02, Lillie Ross-CDSR11 ross.lil...@motorolasolutions.commailto:ross.lil...@motorolasolutions.com wrote: Hi Adam, Thanks for the update. Actually, I'm in the process

[Openstack] Swift Keystone configuration in Essex release and possible logging issue

2012-04-17 Thread Lillie Ross-CDSR11
When configuring the paste pipeline for Swift's proxy, it appears that you must explicitly state the service and authentication protocol as http if you're not using an SSL connection, as this is the default. The current configuration section of the keystone documentation doesn't make this

[Openstack] Fwd: Unable to download images using Glance+Keystone+Swift

2012-04-26 Thread Lillie Ross-CDSR11
, Lillie Ross-CDSR11 wrote: 4. However, when I try to download the same image, I receive the following error: curl -v -H 'X-Auth-Token: 45d01460a0e04bff967eb954e7f4fee8' -H 'Content-type: application/json' http://essex3:9292/v1/images/6720c572-12b7-4cc8-a8c5-95b92998671a | python -mjson.tool

Re: [Openstack] Unable to download images using Glance+Keystone+Swift

2012-04-26 Thread Lillie Ross-CDSR11
Pipes jaypi...@gmail.com wrote: On 04/26/2012 02:37 PM, Lillie Ross-CDSR11 wrote: Hi Jay, Cut and paste error. It still doesn't work. If I issue the simple command (without the pipe or content-type header) I get the following root@essex1:/etc/keystone# curl -v -H 'X-Auth-Token

Re: [Openstack] Unable to download images using Glance+Keystone+Swift

2012-04-27 Thread Lillie Ross-CDSR11
, Sam On Fri, Apr 27, 2012 at 9:53 AM, Lillie Ross-CDSR11 ross.lil...@motorolasolutions.com wrote: Jay, These are the Ubuntu 12.04 packages from the beta with all known updates. I'm configuring another set of instances with the Ubuntu Precise final packages just to make sure I

[Openstack] Nova volume service and the nova client command

2012-05-01 Thread Lillie Ross-CDSR11
I've configured the nova_volume service using the the Ubuntu 12.04LTS packages, and am able to create/delete volumes using the euca2ools package. However, dashboard is not able to retrieve volume info or perform volume operations with the nova client. If I issue the 'nova volume-list'

Re: [Openstack] Nova volume service and the nova client command

2012-05-01 Thread Lillie Ross-CDSR11
-api service running on one node to correctly control the nova-volume backend on another node? Thanks in advance! Ross On May 1, 2012, at 3:15 PM, Lillie Ross-CDSR11 wrote: I've configured the nova_volume service using the the Ubuntu 12.04LTS packages, and am able to create/delete volumes

Re: [Openstack] Nova volume service and the nova client command

2012-05-01 Thread Lillie Ross-CDSR11
) running the nova-api front end. Nova-volume listens to the appropriate AMQP channel to perform the necessary LVM commands. Am I missing anything? Sorry for all questions. I just needed to think things through a bit more… /ross On May 1, 2012, at 3:15 PM, Lillie Ross-CDSR11 wrote: I've configured

[Openstack] Configuring Openstack (Essex) to use existing Dynamic DNS servers

2012-06-12 Thread Lillie Ross-CDSR11
All, I'm finally starting the upgrade to our internal cloud to the Essex release that's part of Ubuntu 12.04LTS. I'd like to setup the cloud to register instance names with our existing internal DNS servers. While there's some mention of this searching the Web, I haven't stumbled across

[Openstack] Dashboard (Ubuntu 12.04/Essex)

2012-06-18 Thread Lillie Ross-CDSR11
All, I've upgraded our cloud, but am stymied on one last configuration issue. From the dashboard, I'm unable to display images and/or snapshots. However, I can display loaded images using the nova and glance command line tools with no problems. For example, 'glance index' displays the

Re: [Openstack] Dashboard (Ubuntu 12.04/Essex)

2012-06-18 Thread Lillie Ross-CDSR11
@lists.launchpad.netmailto:nebula@lists.launchpad.net] On Behalf Of Lillie Ross-CDSR11 Sent: Monday, June 18, 2012 9:32 AM To: openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Subject: [Openstack] Dashboard (Ubuntu 12.04/Essex) All, I've upgraded our cloud, but am stymied

Re: [Openstack] Timeout during image build (task Networking)

2012-06-19 Thread Lillie Ross-CDSR11
in recently? This wasn't happening a week or so ago, AFAICT. Best, -jay On 06/18/2012 06:03 PM, Lillie Ross-CDSR11 wrote: I'm receiving RPC timeouts when trying to launch an instance. My installation is the Essex release running on Ubuntu 12.04. When I launch a test image, the launch fails. In my setup