<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 28 Feb 2019, at 1:25 am, Matt Riedemann <<a href="mailto:mriedemos@gmail.com" class="">mriedemos@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 2/26/2019 11:53 PM, Sam Morrison wrote:<br class=""><blockquote type="cite" class="">We have a use case where we want to schedule a bunch of projects to specific compute nodes only.<br class="">The aggregate_multitenancy_isolation isn’t viable because in some cases we will want thousands of projects to go to some hardware and it isn’t manageable/scaleable to do this in nova and aggregates. (Maybe it is and I’m being silly?)<br class=""></blockquote><br class="">Is the issue because of this?<br class=""><br class=""><a href="https://bugs.launchpad.net/nova/+bug/1802111" class="">https://bugs.launchpad.net/nova/+bug/1802111</a></div></div></blockquote><blockquote type="cite" class=""><div class=""><div class=""><br class="">Or just in general. Because <a href="https://docs.openstack.org/nova/latest/admin/configuration/schedulers.html#tenant-isolation-with-placement" class="">https://docs.openstack.org/nova/latest/admin/configuration/schedulers.html#tenant-isolation-with-placement</a> fixes that problem, but is only available since Rocky.<br class=""></div></div></blockquote><br class="">Yeah essentially it is however it would be nice to manage this in keystone where is’t all in one place but this I think would work. Just upgraded to Queens so not far off too!</div><div><br class=""></div><div><blockquote type="cite" class=""><div class=""></div></blockquote><blockquote type="cite" class=""><div class=""><div class="">Also, I can't find it now but there was a public cloud workgroup bug in launchpad at one point where it was asking that the AggregateMultiTenancyIsolation filter work on keystone domains rather than a list of projects, so if those projects were all in the same domain you'd just specify the domain in the aggregate metadata than the thousands of projects which is your scaling issue. Tobias might remember that bug.<br class=""></div></div></blockquote><div><br class=""></div>We actually already have a domain scheduler filter [1] but we have multiple levels of projects that intersects. Eg. We use domains to seperate our Australian and NZ projects. But we also have needs to schedule our projects based on their funding source.</div><div><br class=""></div><div>Thanks,</div><div>Sam</div><div><br class=""></div><div><br class=""></div><div>[1] <a href="https://github.com/NeCTAR-RC/nova/blob/nectar/queens/nova/cells/filters/restrict_domain.py" class="">https://github.com/NeCTAR-RC/nova/blob/nectar/queens/nova/cells/filters/restrict_domain.py</a></div><div><br class=""></div><div><br class=""></div><div><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">-- <br class=""><br class="">Thanks,<br class=""><br class="">Matt<br class=""><br class=""></div></div></blockquote></div><br class=""></body></html>