HTTP 401)
If I use MySQL as the token store, I can see that the token in question has
indeed become invalid.
I'm not sure if something broke or is misconfigured from the upgrade or if
this is a new characteristic of Keystone?
Any ideas?
Thanks,
Joe
--
Joe Topjian
Systems Architect
Cybera
013.1.3 is available in the Ubuntu cloud repository
yet, so I'll keep my local modifications. But good to know that the
backport will be coming soon.
Thanks again,
Joe
On Thu, Aug 29, 2013 at 1:23 AM, Julie Pichon wrote:
> Hi Joe,
>
> "Joe Topjian" wrote:
> >
mind that this is
just casual hacking and could be done a lot better by a more experienced
openstack dev.
Thanks,
Joe
--
Joe Topjian
Systems Architect
Cybera Inc.
www.cybera.ca
Cybera is a not-for-profit organization that works to spur and support
innovation, for the economic benefit of Al
version would be this post where I link to some scripts that are
able to build a complete CentOS image that resizes as you would expect:
http://www.gossamer-threads.com/lists/openstack/operators/28733#28733
Hope that helps,
Joe
--
Joe Topjian
Systems Architect
Cybera Inc.
www.cybera.ca
Cyber
Hello,
Regions can be a little confusing because of their ambiguity.
Regions are really nothing more than a tag you give an endpoint in the
Identity catalog. Depending on how you use that tag determines how regions
are used in your environment. Here are a few scenarios:
(IMO, using the Keystone
Your suggested solution uses a single router where all floating IPs will be
attached. This will work fine for a single-tenant cloud, but this was not
possible to do in a multi-tenant cloud when I tested this a few weeks back.
Perhaps I did not create the router correctly? Is there some type of
"sh
rnal network and attach it to a shared network also owned by the admin
> tenant. Then other tenants would just attach their VMs to the shared
> network.
>
> Let me know if this doesn't work.
>
> On Tue, Dec 30, 2014 at 9:06 AM, Joe Topjian wrote:
>
>> Your suggested
Hello,
When using the APIs directly to manage instances, which API is preferable
for associating and disassociating Floating IPs?
Nova has the "os-floating-ips" extension which works for nova-network based
environments and, as far as I can tell, Neutron-based environments. All
that is required is
Fri, Feb 20, 2015 at 6:56 AM, Everett Toews
wrote:
> On Feb 16, 2015, at 1:14 PM, Joe Topjian wrote:
>
> > Hello,
> >
> > When using the APIs directly to manage instances, which API is
> preferable for associating and disassociating Floating IPs?
> >
> > No
Hello,
I don't know the exact reason you're seeing this issue, but there are a few
pointers/suggestions:
* Try to set the nova.conf settings the same across both the controller and
compute node. Although you're not using nova-network on your controller,
doing this can't hurt. So for your environm
The number is the ID of the instance in the nova.instances table:
mysql> select id from instances where uuid =
'9927550c-5950-4daf-9f05-0530e51d36c7';
+---+
| id|
+---+
| 19437 |
+---+
$ iptables-save | grep 19437
:nova-compute-inst-19437 - [0:0]
-A nova-compute-inst-19437 -m stat
I think that particular scenario in the Ops Guide could be considered a bit
outdated, but the subject in general is still relevant.
I've found that in each release of OpenStack, the various OpenStack
components are better able to reclaim / resolve orphaned resources, such as
the floating IP scenar
n, that
> should be on par with nova-network's FlatDHCP.
>
>
> 1. https://review.openstack.org/#/c/163728/
>
> On Fri, Jan 16, 2015 at 7:12 AM, Joe Topjian wrote:
>
>> Tenants can launch on the shared network. The issue is with floating IP
>> addresses: when the t
Hello,
I've got a similar question about cache-manager and the presence of a
> shared filesystem for instances images.
> I'm currently reading the source code in order to find out how this is
> managed but before I would be curious how you achieve this on production
> servers.
>
> For example imag
On Mon, May 4, 2015 at 12:56 PM, Adam Young wrote:
> On 05/04/2015 10:23 AM, rémi Le trocquer wrote:
>
>> Hi,
>>
>> In multi-region configuration : multi keystone, multi database
>> but with a common ldap. Is-it possible on Horizon to switch
>> region without re-authenticate ?
>>
>
> Horizon talk
Hello,
Do you have HAProxy configured to round-robin the MySQL traffic? If so,
change the balance config to something where the source connection will
always hit the same mysql node.
Or just make one of the mysql nodes a designated "write" node by setting
the opposite node as "backup". This will
Hello,
If the nova-network service is down, then only actions that would involve
nova-network (creating and terminating instances for example) won't work.
Instances that are already running will still be able to communicate with
both the outside network and other instances in the cloud.
You can e
Hello,
I'm glad to hear that it works for you! I just now tried setting
> force_snat_range for my floating IP range but I'm still not getting any
> pings. Strangely if I restart nova-network things work for a minute or
> two, then return to the status quo. That means that no matter what I
> cha
gt; where it can without needing an agent / cloud-init installed in the VM.***
> *
>
> ** **
>
> It does this by mounting the disk in the domain running nova and resizing
> the filesystem/device.
>
> ** **
>
> Bob
>
> ** **
>
> *From:* Joe Topjian
hanks!
> Thiago
>
> ___
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
perations | Lookout | https://twitter.com/mrz
>
>
> ___
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman
reatly appreciated.
>> >>
>> >> Cheers,
>> >> Alex
>> >> --
>> >> Alexander Stellwag
>> >> Deutsche Telekom AG Products & Innovation Infrastructure Design
>> >
>> >
>> >___
Hello,
I have created an OpenStack Havana environment and configured Nova to use
libgfapi. I'm running into an odd issue, though:
The cloud consists of five compute nodes. Four of them are also running
Gluster and host a Distributed Replicated volume called "volumes". All
Cinder services are runn
During the time when we wrote that, we were discussing the various
use-cases that we usually see in our clouds. The use-cases ranged anywhere
from cpu-heavy batch processing, scientific modeling, or basic web hosting.
I believe, but I could be wrong as that discussion was 10 months ago (!),
that i
Hello,
I ran into a very odd issue today when setting up a new OpenStack cloud.
Instances that were migrated to another compute node lost communication
with the DHCP server once their lease was up.
The cloud is configured with nova-network, FlatDHCPManager, and uses
multi-host. Shared storage is
Hello,
We've used this in the past:
https://github.com/jordanrinke/openstack
It allows a user to type in an Administrator password in the Post Config
text box when launching an instance in Horizon. The password is then
retrieved when Windows first boots via the metadata service.
We stopped usin
I'm running into a similar issue.
In a fresh Ubuntu 12.04 Havana environment, do the following, either as an
admin user or regular user:
glance image-create --name "CirrOS 1" --disk-format qcow2
--container-format bare --is-public true < cirros-0.3.1-x86_64-disk.img
glance image-list
glance image
, 2014 at 5:05 PM, Joe Topjian wrote:
> Hello,
>
> I ran into a very odd issue today when setting up a new OpenStack cloud.
> Instances that were migrated to another compute node lost communication
> with the DHCP server once their lease was up.
>
> The cloud is configu
> >
> > Will check them to find the proper way.
> >
> > Thanks.
> >
> > On 1/19/2014 3:32 PM, Joe Topjian wrote:
> > > Hello,
> > >
> > > We've used this in the past:
> > >
> > > https://github.com/jordanrinke/op
rwise I'll probably disable public
> access to glance. :(
>
> ~ Scott
>
> [1] http://docs.openstack.org/havana/install-guide/install/apt/content/
>
>
> On Mon, Jan 20, 2014 at 1:22 PM, Joe Topjian wrote:
>
>> I'm running into a similar issue.
>>
>>
it are confidential
> and may be legally privileged. If you have received this message in error
> you should delete it from your system immediately and advise the sender. To
> any recipient of this message within HP, unless otherwise stated, you
> should consider this message and attachmen
Hello,
One of the new features advertised in the Havana release of Keystone was
external authentication via REMOTE_USER. I'm beginning to assume that I
should take that at face value: Keystone has external auth, but that's it.
OpenStack as a whole cannot currently utilize it.
Is this an incorrect
hanks,
>
> Krishnaprasad
>
> *From:* Hancock, Tom (HP Cloud Services) [mailto:tom.hanc...@hp.com]
> *Sent:* Dienstag, 21. Januar 2014 11:39
> *To:* Joe Topjian
>
> *Cc:* openstack@lists.openstack.org Openstack
> *Subject:* Re: [Openstack] Private images are not displayed i
>
>
>
> Can I know whether this fix is released?
>
>
>
> Thanks,
>
> Krishnaprasad
>
> *From:* Narayanan, Krishnaprasad
> *Sent:* Mittwoch, 22. Januar 2014 13:16
> *To:* 'Hancock, Tom (HP Cloud Services)'; Joe Topjian
> *Cc:* openstack
automating an installation is that if there's a
typo, the typo is automated as well. :)
Thanks,
Joe
On Wed, Jan 22, 2014 at 1:45 PM, Joe Topjian wrote:
> Krishnaprasad,
>
> That bug refers to the glance client command line tool which can be found
> in the python-glanceclien
A group I'm working with recently finished some basic cloudfuse testing and
in the end, we weren't 100% comfortable with using it in production. The
core reason for this is cloudfuse writing files to /tmp before they get
moved to Swift. We played with a few variations of /tmp including using a
ramd
on a ramdisk, overflow tmp.
On Thu, Jan 23, 2014 at 9:58 AM, Clark, Robert Graham
wrote:
> On Thu Jan 23 07:41:09 2014, Joe Topjian wrote:
> > A group I'm working with recently finished some basic cloudfuse
> > testing and in the end, we weren't 100% comfortable with u
> however I can't tcpdump on the patch or gre devices
>
> # tcpdump -i patch-tun
> tcpdump: patch-tun: No such device exists
>
I can reproduce this. I suspect because patch-tun and patch-int are OVS
patch interfaces, they are internal to OVS and not a real interface. "ip a
| grep patch-tun" re
> This may be getting close to the issue. I don't see any interfaces
> anything like that. I'm seeing two different types of bride states on
> my compute nodes, which suggest something's wrong there. On the
> compute node hosting the 'bad' instances and many other nodes as well
> I see:
>
> bridg
Hi Sam,
We upgraded to Icehouse over the weekend and had some issues with Rabbit.
The number of RabbitMQ connections went from ~70 to ~380 post-upgrade and
we had reports of users being unable to use the metadata service and that
instances took longer to boot as they waited for metadata.
I notic
I can confidently say that throttling will work with KVM. I think both
virt_types will work since libvirt is controlling everything in the end.
One caveat about IO throttling to keep in mind is that the Nova settings
are not applied to volumes -- just the root and ephemeral disk. We were
unable to
Isn't it similar to asking if you use Fedora, CentOS, or RHEL?
My understanding is that Juniper offers a paid/supported version of
Contrail while OpenContrail is the open source version.
On Tue, Feb 9, 2016 at 2:50 AM, Edgar Magana
wrote:
> Tom,
>
> For the "Which OpenStack Network (Neutron) dr
ot Enterprise version of OpenContrail.
> Therefore, this question could split the responses because it is confusing.
>
> Edgar
>
> From: Joe Topjian
> Date: Tuesday, February 9, 2016 at 8:17 AM
> To: Edgar Magana
> Cc: Tom Fifield , "openstack@lists.openstack.org"
Hi Andrew,
NeCTAR published a suite of scripts for doing a nova-network to neutron
migration: https://github.com/NeCTAR-RC/novanet2neutron
IIRC, another organization reported success with these scripts a few months
ago on the openstack-operators list.
I'm currently doing some trial runs and all
I'm an absolute amateur at this -- no doubt OpenStack Infra has better
tools -- but I have a suite of deployment configurations here:
https://github.com/jtopjian/terraform-devstack
The most up-to-date ones are the "packstack-standard" (which I'm now using
Packer to create a standard image that la
That sounds about right. There was some prior discussion about this on the
openstack-operators group with similar results.
We use virtio-scsi in one of our clouds because testing (and production)
has shown that volumes attached via virtio-scsi are better able to
participate in mdadm and zfs. For t
Hi all,
I've been meaning to reply to this thread. Volodymyr, your reply reminded
me :)
I agree with what you said that the SDK should support everything that the
API supports. In that way, one could simply review the API reference docs
and create a checklist for each possible action. I've often
Hello,
I was unable to get anti-affinity to work in Sahara. The logs were
reporting a Heat error that u'' was not a valid UUID. Upon further
investigation, I think I found several errors in the
`sahara/service/heat/templates.py` file. I'm working with Sahara 7.0.0 but
the master branch still exhib
48 matches
Mail list logo
