[openstack-dev] [Keystone] Store quotas in Keystone

Shawn Hartsock hartsocks at vmware.com
Tue Dec 3 15:26:21 UTC 2013


Sorry to jump into this late and all, but I am curious.

Why not borrow the concept of "flavors" from Nova and apply them to quotas? 

While it is open to interpretation and I most certainly could be wrong, the "why of flavors" is that you want to plan. If you know that you have "flavors" that are 1/4, 1/8, 1/16, 1/32, and so on the size of your "standard host node" then you know that if you plan for each node that 4 of the 1/4th flavor tenants in storage and CPU and 32 times 4 (or 128) possible  IP addresses ... then you know your worst case infrastructure requirements. As a cloud operator, you know how many maximum IP you need and how many compute nodes you need.

So in the terms of quotas, why not borrow the same concept and allow for the creation of a quota system that then allows a cloud operator to plan. That should limit the total number of quotas and make the problem space smaller and easier to deal with right?

Or have I missed a lot of the conversation and should I run out and do some reading? Pointers would be welcome.

# Shawn Hartsock


----- Original Message -----
> From: "John Dickinson" <me at not.mn>
> To: "OpenStack Development Mailing List (not for usage questions)" <openstack-dev at lists.openstack.org>
> Cc: "Chmouel Boudjnah" <chmouel at chmouel.com>
> Sent: Tuesday, December 3, 2013 10:04:47 AM
> Subject: Re: [openstack-dev] [Keystone] Store quotas in Keystone
> 
> How are you proposing that this integrate with Swift's account and container
> quotas (especially since there may be hundreds of thousands of accounts and
> millions (billions?) of containers in a single Swift cluster)? A centralized
> lookup for quotas doesn't really seem to be a scalable solution.
> 
> --John
> 
> 
> On Dec 3, 2013, at 6:53 AM, Oleg Gelbukh <ogelbukh at mirantis.com> wrote:
> 
> > Chmouel,
> > 
> > We reviewed the design of this feature at the summit with CERN and HP
> > teams. Centralized quota storage in Keystone is an anticipated feature,
> > but there are concerns about adding quota enforcement logic for every
> > service to Keystone. The agreed solution is to add quota numbers storage
> > to Keystone, and add mechanism that will notify services about change to
> > the quota. Service, in turn, will update quota cache and apply the new
> > quota value according to its own enforcement rules.
> > 
> > More detailed capture of the discussion on etherpad:
> > https://urldefense.proofpoint.com/v1/url?u=https://etherpad.openstack.org/p/CentralizedQuotas&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=U9jd8i1QXRWQEdLI1XfrWPjXsJaoGrk8w31ffdfY7Wk%3D%0A&m=tzBzbXgJCXEysjYVOTpv38Q4gcaAQ%2Fi8DgWNbal6W78%3D%0A&s=10a3de3d5f5eeea63349193030efc95dfcd127f9275b8244b0fe02ce5e3da2ab
> > 
> > Re this particular change, we plan to reuse this API extension code, but
> > extended to support domain-level quota as well.
> > 
> > --
> > Best regards,
> > Oleg Gelbukh
> > Mirantis Labs
> > 
> > 
> > On Mon, Dec 2, 2013 at 5:39 PM, Chmouel Boudjnah <chmouel at enovance.com>
> > wrote:
> > Hello,
> > 
> > I was wondering what was the status of Keystone being the central place
> > across all OpenStack projects for quotas.
> > 
> > There is already an implementation from Dmitry here :
> > 
> > https://urldefense.proofpoint.com/v1/url?u=https://review.openstack.org/%23/c/40568/&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=U9jd8i1QXRWQEdLI1XfrWPjXsJaoGrk8w31ffdfY7Wk%3D%0A&m=tzBzbXgJCXEysjYVOTpv38Q4gcaAQ%2Fi8DgWNbal6W78%3D%0A&s=783921e458225eec7098c9755b96d5f2c45a8c744d6eec76ee30cb7a583d522b
> > 
> > but hasn't seen activities since october waiting for icehouse development
> > to be started and a few bits to be cleaned and added (i.e: the sqlite
> > migration).
> > 
> > It would be great if we can get this rekicked to get that for icehouse-2.
> > 
> > Thanks,
> > Chmouel.
> > 
> > _______________________________________________
> > OpenStack-dev mailing list
> > OpenStack-dev at lists.openstack.org
> > https://urldefense.proofpoint.com/v1/url?u=http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=U9jd8i1QXRWQEdLI1XfrWPjXsJaoGrk8w31ffdfY7Wk%3D%0A&m=tzBzbXgJCXEysjYVOTpv38Q4gcaAQ%2Fi8DgWNbal6W78%3D%0A&s=a18fc7f57ed9d5071ef1aa8893069f260a9b40f75c2c405be351d7271a1b1794
> > 
> > 
> > _______________________________________________
> > OpenStack-dev mailing list
> > OpenStack-dev at lists.openstack.org
> > https://urldefense.proofpoint.com/v1/url?u=http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=U9jd8i1QXRWQEdLI1XfrWPjXsJaoGrk8w31ffdfY7Wk%3D%0A&m=tzBzbXgJCXEysjYVOTpv38Q4gcaAQ%2Fi8DgWNbal6W78%3D%0A&s=a18fc7f57ed9d5071ef1aa8893069f260a9b40f75c2c405be351d7271a1b1794
> 
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> https://urldefense.proofpoint.com/v1/url?u=http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev&k=oIvRg1%2BdGAgOoM1BIlLLqw%3D%3D%0A&r=U9jd8i1QXRWQEdLI1XfrWPjXsJaoGrk8w31ffdfY7Wk%3D%0A&m=tzBzbXgJCXEysjYVOTpv38Q4gcaAQ%2Fi8DgWNbal6W78%3D%0A&s=a18fc7f57ed9d5071ef1aa8893069f260a9b40f75c2c405be351d7271a1b1794
> 



More information about the OpenStack-dev mailing list