<p dir="ltr">Hello All, <br>
I've very basic question. How to we confirm after openstack installation that things are fine . I mean what are commands and what commands are mandatory to run just after installation. <br>
Thanks </p>
<div class="gmail_quote">On Aug 6, 2015 5:36 PM, <<a href="mailto:openstack-request@lists.openstack.org">openstack-request@lists.openstack.org</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send Openstack mailing list submissions to<br>
<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:openstack-request@lists.openstack.org">openstack-request@lists.openstack.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:openstack-owner@lists.openstack.org">openstack-owner@lists.openstack.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Openstack digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Multiple Domains in one install (Adam Young)<br>
2. Re: [designate] Not receiving notifications from nova and<br>
neutron in designate-sink (Rudrajit Tapadar)<br>
3. Re: External network Issues (Dhvanan Shah)<br>
4. Unable to mount image in nova-compute (Marco Marino)<br>
5. Ceilometer Empty Meter-List (Geoffrey Tran)<br>
6. configure SSL on glance, nova and neutron API (YANG LI)<br>
7. Re: configure SSL on glance, nova and neutron API (Rob Crittenden)<br>
8. Re: configure SSL on glance, nova and neutron API<br>
(Eduardo Gonzalez)<br>
9. Re: External network Issues (Akash Gunjal)<br>
10. multiple external networks mapped to the same l3 agent<br>
(ICHIBA Sara)<br>
11. VM MIgration on same host (Priyanka)<br>
12. Re: configure SSL on glance, nova and neutron API<br>
(Antonio Messina)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Wed, 05 Aug 2015 10:56:17 -0400<br>
From: Adam Young <<a href="mailto:ayoung@redhat.com">ayoung@redhat.com</a>><br>
To: <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Subject: Re: [Openstack] Multiple Domains in one install<br>
Message-ID: <<a href="mailto:55C22411.8080107@redhat.com">55C22411.8080107@redhat.com</a>><br>
Content-Type: text/plain; charset=windows-1252; format=flowed<br>
<br>
On 08/05/2015 01:30 AM, Lance Haig wrote:<br>
> Hi All,<br>
><br>
> We have an icehouse install that uses a default domain and tennant list<br>
><br>
> What has been requested is that we create a new Domain with new<br>
> projects etcc within that domain.<br>
><br>
><br>
> I tried creating the domain in horizon and it seems to complete just<br>
> fine.<br>
><br>
> When you go to edit the domain the quota fields are all empty and even<br>
> if you populate the quotas and submit it the quotas are not saved to<br>
> the configuration.<br>
><br>
> I have tried looking for documentation in the openstack docs but I<br>
> can's seem to find any.<br>
><br>
> The Auth version is set to v3 as per the documentation.<br>
><br>
> Is there a cli command I can run to check the fields are set ?<br>
<br>
Your best bet it to use the openstack common CLI.<br>
python-openstackclient. You need a V3 token to perform domain specific<br>
operations, like this:<br>
<br>
export OS_AUTH_URL=http://{{ keystone_hostname }}:5000/v3<br>
export OS_USERNAME={{ username }}<br>
export OS_PASSWORD={{ password }}<br>
export OS_USER_DOMAIN_NAME=Default<br>
export OS_PROJECT_DOMAIN_NAME=Default<br>
export OS_PROJECT_NAME={{ project_name }}<br>
export OS_IDENTITY_API_VERSION=3<br>
<br>
<br>
source that file, then run<br>
<br>
openstack domain list<br>
<br>
and you should see your domains.<br>
<br>
Nova does not know about domains. So I don't know if domain level<br>
quotas are supported.<br>
<br>
<br>
<br>
><br>
> Thanks<br>
><br>
> Lance<br>
><br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Wed, 5 Aug 2015 08:51:02 -0700<br>
From: Rudrajit Tapadar <<a href="mailto:rudrajit.tapadar%2Bosgen@gmail.com">rudrajit.tapadar+osgen@gmail.com</a>><br>
To: Jaime Fern?ndez <<a href="mailto:jjjaime@gmail.com">jjjaime@gmail.com</a>><br>
Cc: "<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>" <<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>><br>
Subject: Re: [Openstack] [designate] Not receiving notifications from<br>
nova and neutron in designate-sink<br>
Message-ID:<br>
<CAEVDg5qZK-W=+E_09_20uf1wH6+ifBDKQDrpOHrsmoKwe=<a href="mailto:ap7w@mail.gmail.com">ap7w@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Do you have any other service running that may consume the messages like<br>
Ceilometer? Can you check in your rabbit that Designate is the consumer in<br>
the queue you are sending the notifications to?<br>
<br>
If you have more than one consumer (other than Designate), then may be you<br>
can try configuring a separate queue for designate sink in Neutron and Nova<br>
and have the sink handler listen to this new queue.<br>
<br>
On Wed, Aug 5, 2015 at 1:53 AM, Jaime Fern?ndez <<a href="mailto:jjjaime@gmail.com">jjjaime@gmail.com</a>> wrote:<br>
<br>
> We've migrated our OST platform from qpid to rabbitmq. After this<br>
> migration, we don't receive any notification from nova/neutron in<br>
> designate-sink (so there is no DNS registration for new VMs or floating<br>
> IPs). However, designate is correctly integrated with rabbitmq because<br>
> designate-api replies successfully to API requests.<br>
><br>
> There is a user/password for designate in rabbitmq and every rabbit user<br>
> has all the possible permissions.<br>
><br>
> Do you have any hint? I don't think it's a wrong configuration in<br>
> designate because it was already working with qpid. Could you suggest where<br>
> I should inspect in order to find the problem?<br>
><br>
> _______________________________________________<br>
> Mailing list:<br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
> Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
> Unsubscribe :<br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
><br>
><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://lists.openstack.org/pipermail/openstack/attachments/20150805/cc423d6a/attachment-0001.html" rel="noreferrer" target="_blank">http://lists.openstack.org/pipermail/openstack/attachments/20150805/cc423d6a/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Wed, 5 Aug 2015 21:42:28 +0530<br>
From: Dhvanan Shah <<a href="mailto:dhvanan@gmail.com">dhvanan@gmail.com</a>><br>
To: nithish B <<a href="mailto:bestofnithish@gmail.com">bestofnithish@gmail.com</a>><br>
Cc: <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Subject: Re: [Openstack] External network Issues<br>
Message-ID:<br>
<<a href="mailto:CANovBq47nxMXuRyeo_o3M0PFtkNHaYD9wPO-F3iVsM1CB-MfgA@mail.gmail.com">CANovBq47nxMXuRyeo_o3M0PFtkNHaYD9wPO-F3iVsM1CB-MfgA@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hi,<br>
<br>
Yes, IP forwarding is enabled.<br>
<br>
<br>
Regards,<br>
Dhvanan Shah<br>
<br>
On Wed, Aug 5, 2015 at 9:55 AM, nithish B <<a href="mailto:bestofnithish@gmail.com">bestofnithish@gmail.com</a>> wrote:<br>
<br>
> Hi,<br>
> Is IP Forwarding enabled on your host?<br>
><br>
> Regards,<br>
> Nitish B.<br>
><br>
> On Tue, Aug 4, 2015 at 7:15 PM, Dhvanan Shah <<a href="mailto:dhvanan@gmail.com">dhvanan@gmail.com</a>> wrote:<br>
><br>
>> Hi,<br>
>><br>
>> I have deployed Kilo using Packstack on CentOS , but I am having troubles<br>
>> accessing the VM's that I spawn , through the public IP's that they are<br>
>> assigned to them.<br>
>><br>
>> I created my network as follows:<br>
>><br>
>> CREATE NETWORK FOR OPENSTACK<br>
>><br>
>> 1.<br>
>><br>
>> a. neutron router-gateway-clear router1 (neutron router-gateway-list)<br>
>> b. neutron subnet-delete public_subnet<br>
>> c. neutron net-delete public<br>
>> d. neutron router-interface-delete router1 private_subnet<br>
>> e. neutron subnet-delete private_subnet<br>
>> f. neutron net-delete private<br>
>> g. neutron router-delete router1<br>
>> 2.<br>
>><br>
>> a. neutron router-create router1<br>
>> b. neutron net-create private<br>
>> c. neutron subnet-create --name private_subnet private <a href="http://192.168.0.0/16" rel="noreferrer" target="_blank">192.168.0.0/16</a><br>
>> --allocation-pool start=192.168.0.0,end=192.168.255.250<br>
>> d. neutron router-interface-add router1 private_subnet<br>
>> 3.<br>
>><br>
>> a. neutron net-create public --router:external=True //(neutron<br>
>> net-create public --router:external)<br>
>> b. neutron subnet-create public <a href="http://10.16.37.0/24" rel="noreferrer" target="_blank">10.16.37.0/24</a> <set for your n/w><br>
>> --name public_subnet --enable_dhcp=False --allocation-pool<br>
>> start=10.16.37.230,end=10.16.37.250 <make sure that it will not conflict<br>
>> with other IP address> --gateway=10.16.37.1 <your n/w gateway><br>
>> c. neutron router-gateway-set router1 public<br>
>><br>
>><br>
>> Also I made changes in the ifcfg-br-ex file and ifcfg-<my network> file<br>
>> in /etc/sysconfig/network-scripts.<br>
>><br>
>> The Changes were as follows:<br>
>><br>
>> ifcfg-br-ex<br>
>> DEVICE=br-ex<br>
>> BOOTPROTO=static<br>
>> IPADDR=<your workstation IP address> e.g 10.16.37.221<br>
>> NETMASK=255.255.255.0<br>
>> DNS1=<your n/w DNS1> e.g 10.16.25.13<br>
>> DNS2=<your n/w DNS2> e.g 10.16.25.15<br>
>> BROADCAST=10.16.37.255<br>
>> GATEWAY=10.16.37.1<br>
>> NM_CONTROLLED="no"<br>
>> DEFROUTE=yes<br>
>> IPV4_FAILURE_FATAL="yes"<br>
>> IPV6INIT=no<br>
>> ONBOOT=yes<br>
>> TYPE=OVSIntPort<br>
>> OVS_BRIDGE=br-ex<br>
>> DEVICETYPE=ovs<br>
>><br>
>> *ifcfg-p2p1*<br>
>><br>
>> DEVICE=p2p1 <change with your device name><br>
>><br>
>> # HWADDR=00:22:15:63:E4:E2<br>
>><br>
>> ONBOOT="yes"<br>
>><br>
>> TYPE="OVSPort"<br>
>><br>
>> DEVICETYPE="ovs"<br>
>><br>
>> OVS_BRIDGE=br-ex<br>
>><br>
>> NM_CONTROLLED=no<br>
>><br>
>> IPV6INIT=no<br>
>><br>
>><br>
>> There is also a proxy in the network and so for that, I installed by "packstack<br>
>> --allinone --*provision-demo=n --provision-all-in-one-ovs-bridge=n*".<br>
>><br>
>> Could someone suggest me a reason as to why i might be facing issues or<br>
>> probably where I can look to debug this issue.<br>
>><br>
>> Thanks,<br>
>> Dhvanan Shah<br>
>><br>
>> _______________________________________________<br>
>> Mailing list:<br>
>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
>> Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
>> Unsubscribe :<br>
>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
>><br>
>><br>
><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://lists.openstack.org/pipermail/openstack/attachments/20150805/c4b646e6/attachment-0001.html" rel="noreferrer" target="_blank">http://lists.openstack.org/pipermail/openstack/attachments/20150805/c4b646e6/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Wed, 5 Aug 2015 19:32:44 +0200<br>
From: Marco Marino <<a href="mailto:marino.mrc@gmail.com">marino.mrc@gmail.com</a>><br>
To: <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Subject: [Openstack] Unable to mount image in nova-compute<br>
Message-ID:<br>
<<a href="mailto:CAFHVVu%2B%2BfC_2vms3bEhv9OjiQTTt7oWW8rcBx7Uo0p1vErCQbQ@mail.gmail.com">CAFHVVu++fC_2vms3bEhv9OjiQTTt7oWW8rcBx7Uo0p1vErCQbQ@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hi, i'm using openstack (icehouse) with virt-manager (ubuntu 15.04 64bit on<br>
the physical server) and 3 vms (controller, compute and network with<br>
neutron and gre - centos 6.5 64bit on each vm). When I try to launch a new<br>
cirros 0.3.4 image, i have an error on the compute node:<br>
<br>
DEBUG nova.virt.disk.api [req-e98d3647-5bff-4524-8d3f-c3275f10f607<br>
66713c43084e4163ad01a79d66f96276 bfd8576b0dae41a9bdd67b58e3c835a4] Unable<br>
to mount image<br>
/var/lib/nova/instances/5e0693fc-891a-43d4-be78-33ec47bc7b07/disk with<br>
error Error mounting<br>
/var/lib/nova/instances/5e0693fc-891a-43d4-be78-33ec47bc7b07/disk with<br>
libguestfs (mount_options: /dev/sda on / (options: ''): mount: you must<br>
specify the filesystem type). Cannot resize. is_image_partitionless<br>
/usr/lib/python2.6/site-packages/nova/virt/disk/api.py:211<br>
<br>
On the compute node I have:<br>
<br>
virt_type = qemu<br>
<br>
and<br>
<br>
inject_partition = -2<br>
<br>
Please, someone can help me? I cannot find a solution.<br>
<br>
PS: I have a production environment with the same configuration and all<br>
works well. I think the problem is related to the virtualized environment.<br>
<br>
Thanks<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://lists.openstack.org/pipermail/openstack/attachments/20150805/07be9559/attachment-0001.html" rel="noreferrer" target="_blank">http://lists.openstack.org/pipermail/openstack/attachments/20150805/07be9559/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Wed, 5 Aug 2015 16:34:28 -0400 (EDT)<br>
From: Geoffrey Tran <<a href="mailto:gtran@isi.edu">gtran@isi.edu</a>><br>
To: <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Subject: [Openstack] Ceilometer Empty Meter-List<br>
Message-ID:<br>
<<a href="mailto:1560446486.63557336.1438806868734.JavaMail.zimbra@meritmail.isi.edu">1560446486.63557336.1438806868734.JavaMail.zimbra@meritmail.isi.edu</a>><br>
Content-Type: text/plain; charset=utf-8<br>
<br>
Hello all,<br>
<br>
I have deployed the master branch of devstack on Ubuntu 15.04 and am having<br>
problems with ceilometer. The same symptoms showed up on Ubunutu 14.04 also.<br>
I have tested with both Xen/Libvirt and the default hypervisor.<br>
<br>
The problem is that ceilometer doesn't seem to get any meters. The output is<br>
shown below:<br>
HOST:~$ ceilometer --version<br>
1.3.0<br>
HOST:~/devstack$ ceilometer meter-list<br>
+------+------+------+-------------+---------+------------+<br>
| Name | Type | Unit | Resource ID | User ID | Project ID |<br>
+------+------+------+-------------+---------+------------+<br>
+------+------+------+-------------+---------+------------+<br>
HOST:~/devstack$ ceilometer event-list<br>
+------------+------------+-----------+--------+<br>
| Message ID | Event Type | Generated | Traits |<br>
+------------+------------+-----------+--------+<br>
+------------+------------+-----------+--------+<br>
<br>
The ceilometer-acompute screen shows multiple "Skip polling pollster METER,<br>
no resources found."<br>
<br>
Could I please get help with this? I'm not sure whether to start with<br>
the compute agent or with the collector and central agent.<br>
<br>
Thanks so much!<br>
Geoffrey<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 6<br>
Date: Wed, 5 Aug 2015 22:17:07 +0000<br>
From: YANG LI <<a href="mailto:yangli@clemson.edu">yangli@clemson.edu</a>><br>
To: "<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>" <<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>><br>
Subject: [Openstack] configure SSL on glance, nova and neutron API<br>
Message-ID:<br>
<<a href="mailto:070D144E-2288-48A3-AE43-7AE682188246@exchange.clemson.edu">070D144E-2288-48A3-AE43-7AE682188246@exchange.clemson.edu</a>><br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
Is there a documentation on how to configure SSL on glance, nova and neutron API? we did get keystone done ,but had hard time to find document on how to do this on other services.<br>
<br>
Thanks,<br>
Yang<br>
<br>
<br>
------------------------------<br>
<br>
Message: 7<br>
Date: Wed, 05 Aug 2015 18:33:29 -0400<br>
From: Rob Crittenden <<a href="mailto:rcritten@redhat.com">rcritten@redhat.com</a>><br>
To: YANG LI <<a href="mailto:yangli@clemson.edu">yangli@clemson.edu</a>>, "<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>"<br>
<<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>><br>
Subject: Re: [Openstack] configure SSL on glance, nova and neutron API<br>
Message-ID: <<a href="mailto:55C28F39.7010906@redhat.com">55C28F39.7010906@redhat.com</a>><br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed<br>
<br>
YANG LI wrote:<br>
> Is there a documentation on how to configure SSL on glance, nova and neutron API? we did get keystone done ,but had hard time to find document on how to do this on other services.<br>
<br>
No documentation that I know of. There are some places that list the<br>
configuration values but nothing that ties any of the services together.<br>
I've got some musings on converting various services to SSL at<br>
<a href="http://blog-rcritten.rhcloud.com/?cat=2" rel="noreferrer" target="_blank">http://blog-rcritten.rhcloud.com/?cat=2</a><br>
<br>
You probably don't want to do native eventlet SSL in production.<br>
Terminating SSL using haproxy or stud or some other SSL-aware handler is<br>
probably your best bet.<br>
<br>
I have SSL using stud basically working in devstack, just stuck on the<br>
final review before I can start working on making SSL a requirement of<br>
the gate: <a href="https://review.openstack.org/#/c/187346/" rel="noreferrer" target="_blank">https://review.openstack.org/#/c/187346/</a> . Well, last patch<br>
assuming that Ian Wienand's iniset patchset is also accepted:<br>
<a href="https://review.openstack.org/#/c/204383/" rel="noreferrer" target="_blank">https://review.openstack.org/#/c/204383/</a><br>
<br>
rob<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 8<br>
Date: Wed, 05 Aug 2015 22:44:28 +0000<br>
From: Eduardo Gonzalez <<a href="mailto:dabarren@gmail.com">dabarren@gmail.com</a>><br>
To: YANG LI <<a href="mailto:yangli@clemson.edu">yangli@clemson.edu</a>>, "<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>"<br>
<<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>><br>
Subject: Re: [Openstack] configure SSL on glance, nova and neutron API<br>
Message-ID:<br>
<<a href="mailto:CAKZYVLwrV2k%2BebFN2v9J_xUftKeA%2B7dpbALjntwC70JpxmPUcw@mail.gmail.com">CAKZYVLwrV2k+ebFN2v9J_xUftKeA+7dpbALjntwC70JpxmPUcw@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hi, you can find this guides here:<br>
<a href="http://docs.openstack.org/admin-guide-cloud/content/section_networking-api-ssl.html" rel="noreferrer" target="_blank">http://docs.openstack.org/admin-guide-cloud/content/section_networking-api-ssl.html</a><br>
<a href="http://docs.openstack.org/kilo/config-reference/content/list-of-compute-config-options.html" rel="noreferrer" target="_blank">http://docs.openstack.org/kilo/config-reference/content/list-of-compute-config-options.html</a><br>
<a href="http://docs.openstack.org/kilo/config-reference/content/image-configuring-api.html" rel="noreferrer" target="_blank">http://docs.openstack.org/kilo/config-reference/content/image-configuring-api.html</a><br>
<br>
Just search for SSL in the configuration reference and configure it. Is<br>
nearly the same as the neutron guide.<br>
Regards<br>
<br>
On Thu, Aug 6, 2015, 12:26 AM YANG LI <<a href="mailto:yangli@clemson.edu">yangli@clemson.edu</a>> wrote:<br>
<br>
> Is there a documentation on how to configure SSL on glance, nova and<br>
> neutron API? we did get keystone done ,but had hard time to find document<br>
> on how to do this on other services.<br>
><br>
> Thanks,<br>
> Yang<br>
> _______________________________________________<br>
> Mailing list:<br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
> Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
> Unsubscribe :<br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://lists.openstack.org/pipermail/openstack/attachments/20150805/2b11dda6/attachment-0001.html" rel="noreferrer" target="_blank">http://lists.openstack.org/pipermail/openstack/attachments/20150805/2b11dda6/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 9<br>
Date: Thu, 6 Aug 2015 10:56:05 +0530<br>
From: Akash Gunjal <<a href="mailto:akgunjal@in.ibm.com">akgunjal@in.ibm.com</a>><br>
To: Dhvanan Shah <<a href="mailto:dhvanan@gmail.com">dhvanan@gmail.com</a>><br>
Cc: <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Subject: Re: [Openstack] External network Issues<br>
Message-ID:<br>
<<a href="mailto:OF83F77B14.568CEFA8-ON65257E99.001B5049-65257E99.001DD9C1@in.ibm.com">OF83F77B14.568CEFA8-ON65257E99.001B5049-65257E99.001DD9C1@in.ibm.com</a>><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
<br>
Hi Dhvanan,<br>
<br>
Couple of changes are needed in the ifcfg-br-ex file. Please check the<br>
changes I made in below.<br>
<br>
ifcfg-br-ex<br>
DEVICE=br-ex<br>
BOOTPROTO=static<br>
IPADDR=<your workstation IP address> e.g 10.16.37.221<br>
NETMASK=<a href="tel:255.255.255.0" value="+912552552550">255.255.255.0</a><br>
DNS1=<your n/w DNS1> e.g 10.16.25.13<br>
DNS2=<your n/w DNS2> e.g 10.16.25.15<br>
BROADCAST=10.16.37.255<br>
GATEWAY=10.16.37.1<br>
NM_CONTROLLED="no"<br>
DEFROUTE=yes<br>
IPV4_FAILURE_FATAL="yes"<br>
IPV6INIT=no<br>
ONBOOT=yes<br>
TYPE=OVSBridge<br>
OVS_BRIDGE=br-ex<br>
DEVICETYPE=ovs<br>
<br>
<br>
Regards,<br>
Akash<br>
<br>
<br>
<br>
From: Dhvanan Shah <<a href="mailto:dhvanan@gmail.com">dhvanan@gmail.com</a>><br>
To: <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Date: 08/04/2015 07:19 PM<br>
Subject: [Openstack] External network Issues<br>
<br>
<br>
<br>
Hi,<br>
<br>
I have deployed Kilo using Packstack on CentOS , but I am having troubles<br>
accessing the VM's that I spawn , through the public IP's that they are<br>
assigned to them.<br>
<br>
I created my network as follows:<br>
<br>
CREATE NETWORK FOR OPENSTACK<br>
1. a. neutron router-gateway-clear router1 (neutron router-gateway-list)<br>
b. neutron subnet-delete public_subnet<br>
c. neutron net-delete public<br>
d. neutron router-interface-delete router1 private_subnet<br>
e. neutron subnet-delete private_subnet<br>
f. neutron net-delete private<br>
g. neutron router-delete router1<br>
2. a. neutron router-create router1<br>
b. neutron net-create private<br>
c. neutron subnet-create --name private_subnet private <a href="http://192.168.0.0/16" rel="noreferrer" target="_blank">192.168.0.0/16</a><br>
--allocation-pool start=192.168.0.0,end=192.168.255.250<br>
d. neutron router-interface-add router1 private_subnet<br>
3. a. neutron net-create public --router:external=True ???//(neutron<br>
net-create public --router:external)<br>
b. neutron subnet-create public <a href="http://10.16.37.0/24" rel="noreferrer" target="_blank">10.16.37.0/24</a> <set for your n/w><br>
--name public_subnet --enable_dhcp=False --allocation-pool<br>
start=10.16.37.230,end=10.16.37.250 <make sure that it will not<br>
conflict with other IP address> --gateway=10.16.37.1 <your n/w<br>
gateway><br>
c. neutron router-gateway-set router1 public<br>
<br>
<br>
<br>
Also I made changes in the ifcfg-br-ex file and ifcfg-<my network> file in<br>
/etc/sysconfig/network-scripts.<br>
<br>
The Changes were as follows:<br>
<br>
ifcfg-br-ex<br>
DEVICE=br-ex<br>
BOOTPROTO=static<br>
IPADDR=<your workstation IP address> e.g 10.16.37.221<br>
NETMASK=255.255.255.0<br>
DNS1=<your n/w DNS1> e.g 10.16.25.13<br>
DNS2=<your n/w DNS2> e.g 10.16.25.15<br>
BROADCAST=10.16.37.255<br>
GATEWAY=10.16.37.1<br>
NM_CONTROLLED="no"<br>
DEFROUTE=yes<br>
IPV4_FAILURE_FATAL="yes"<br>
IPV6INIT=no<br>
ONBOOT=yes<br>
TYPE=OVSIntPort<br>
OVS_BRIDGE=br-ex<br>
DEVICETYPE=ovs<br>
<br>
ifcfg-p2p1<br>
DEVICE=p2p1 <change with your device name><br>
# HWADDR=00:22:15:63:E4:E2<br>
ONBOOT="yes"<br>
TYPE="OVSPort"<br>
DEVICETYPE="ovs"<br>
OVS_BRIDGE=br-ex<br>
NM_CONTROLLED=no<br>
IPV6INIT=no<br>
<br>
<br>
<br>
<br>
There is also a proxy in the network and so for that, I installed by "<br>
packstack --allinone --provision-demo=n --provision-all-in-one-ovs-bridge=n<br>
".<br>
<br>
Could someone suggest me a reason as to why i might be facing issues or<br>
probably where I can look to debug this issue.<br>
<br>
Thanks,<br>
Dhvanan Shah_______________________________________________<br>
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://lists.openstack.org/pipermail/openstack/attachments/20150806/ceb1f5cf/attachment-0001.html" rel="noreferrer" target="_blank">http://lists.openstack.org/pipermail/openstack/attachments/20150806/ceb1f5cf/attachment-0001.html</a>><br>
-------------- next part --------------<br>
A non-text attachment was scrubbed...<br>
Name: graycol.gif<br>
Type: image/gif<br>
Size: 105 bytes<br>
Desc: not available<br>
URL: <<a href="http://lists.openstack.org/pipermail/openstack/attachments/20150806/ceb1f5cf/attachment-0001.gif" rel="noreferrer" target="_blank">http://lists.openstack.org/pipermail/openstack/attachments/20150806/ceb1f5cf/attachment-0001.gif</a>><br>
<br>
------------------------------<br>
<br>
Message: 10<br>
Date: Thu, 6 Aug 2015 08:48:55 +0200<br>
From: ICHIBA Sara <<a href="mailto:ichi.sara@gmail.com">ichi.sara@gmail.com</a>><br>
To: <a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>, <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Subject: [Openstack] multiple external networks mapped to the same l3<br>
agent<br>
Message-ID:<br>
<<a href="mailto:CADeXowhjeZHsRnEFSH0W5h33peew5MLNyNfETypoyhMFt8X8Lw@mail.gmail.com">CADeXowhjeZHsRnEFSH0W5h33peew5MLNyNfETypoyhMFt8X8Lw@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
hey there,<br>
<br>
I'm trying to configure two external networks for openstack. I'm using the<br>
same l3 agent. the first external network is connected to eth1 via br-eth1<br>
and the second is connected to eth0 via br-ex.<br>
<br>
You can find below my configuration. My problem is that I can't ping the<br>
external gateways from my routers<br>
<br>
<br>
<br>
root@OScontroller ~(keystone_admin)]# ovs-vsctl show<br>
9b3e4cc7-6761-483e-a538-1a132734d1a5<br>
Bridge "br-eth2"<br>
Port "phy-br-eth2"<br>
Interface "phy-br-eth2"<br>
type: patch<br>
options: {peer="int-br-eth2"}<br>
Port "eth2"<br>
Interface "eth2"<br>
Port "br-eth2"<br>
Interface "br-eth2"<br>
type: internal<br>
Bridge br-tun<br>
Port br-tun<br>
Interface br-tun<br>
type: internal<br>
Port patch-int<br>
Interface patch-int<br>
type: patch<br>
options: {peer=patch-tun}<br>
Port "vxlan-c0a80523"<br>
Interface "vxlan-c0a80523"<br>
type: vxlan<br>
options: {df_default="true", in_key=flow,<br>
local_ip="192.168.5.34", out_key=flow, remote_ip="192.168.5.35"}<br>
Bridge br-int<br>
fail_mode: secure<br>
Port "tap61f76964-85"<br>
tag: 1<br>
Interface "tap61f76964-85"<br>
type: internal<br>
Port "tap599b2f77-21"<br>
tag: 4095<br>
Interface "tap599b2f77-21"<br>
type: internal<br>
Port patch-tun<br>
Interface patch-tun<br>
type: patch<br>
options: {peer=patch-int}<br>
Port "qr-2b96e8b6-38"<br>
tag: 3<br>
Interface "qr-2b96e8b6-38"<br>
type: internal<br>
Port "qvo5cc221dc-e8"<br>
tag: 1<br>
Interface "qvo5cc221dc-e8"<br>
Port "qg-6bfc1340-c6"<br>
tag: 4<br>
Interface "qg-6bfc1340-c6"<br>
type: internal<br>
Port "int-br-eth2"<br>
Interface "int-br-eth2"<br>
type: patch<br>
options: {peer="phy-br-eth2"}<br>
Port "qr-047464e1-99"<br>
tag: 5<br>
Interface "qr-047464e1-99"<br>
type: internal<br>
Port "qg-7cbde2a0-f0"<br>
tag: 2<br>
Interface "qg-7cbde2a0-f0"<br>
type: internal<br>
Port "qr-9e50bd2e-fa"<br>
tag: 1<br>
Interface "qr-9e50bd2e-fa"<br>
type: internal<br>
Port "tapa383b7ae-99"<br>
tag: 3<br>
Interface "tapa383b7ae-99"<br>
type: internal<br>
Port int-br-ex<br>
Interface int-br-ex<br>
type: patch<br>
options: {peer=phy-br-ex}<br>
Port br-int<br>
Interface br-int<br>
type: internal<br>
Bridge br-ex<br>
Port br-ex<br>
Interface br-ex<br>
type: internal<br>
Port phy-br-ex<br>
Interface phy-br-ex<br>
type: patch<br>
options: {peer=int-br-ex}<br>
Port "eth0"<br>
Interface "eth0"<br>
ovs_version: "2.3.1"<br>
<br>
<br>
<br>
[root@OScontroller openvswitch(keystone_admin)]# cat ovs_neutron_plugin.ini<br>
| grep -v ^# | grep -v ^$<br>
[ovs]<br>
enable_tunneling = True<br>
integration_bridge = br-int<br>
tunnel_bridge = br-tun<br>
local_ip =192.168.5.34<br>
network_vlan_ranges = physnet1,physnet2<br>
bridge_mappings =physnet1:br-ex,physnet2:br-eth2<br>
[agent]<br>
polling_interval = 2<br>
tunnel_types =vxlan<br>
vxlan_udp_port =4789<br>
l2_population = False<br>
arp_responder = False<br>
enable_distributed_routing = False<br>
[securitygroup]<br>
firewall_driver =<br>
neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver<br>
<br>
<br>
<br>
<br>
[root@OScontroller neutron(keystone_admin)]# cat plugin.ini | grep -v ^# |<br>
grep -v ^$<br>
[ml2]<br>
type_drivers = vxlan<br>
tenant_network_types = vxlan<br>
mechanism_drivers =openvswitch<br>
[ml2_type_flat]<br>
[ml2_type_vlan]<br>
[ml2_type_gre]<br>
[ml2_type_vxlan]<br>
vni_ranges =10:100<br>
vxlan_group =224.0.0.1<br>
[securitygroup]<br>
enable_security_group = True<br>
<br>
<br>
<br>
<br>
<br>
[root@OScontroller neutron(keystone_admin)]# cat l3_agent.ini | grep -v ^#<br>
| grep -v ^$<br>
[DEFAULT]<br>
debug = False<br>
interface_driver =neutron.agent.linux.interface.OVSInterfaceDriver<br>
use_namespaces = True<br>
handle_internal_only_routers = True<br>
external_network_bridge = br-ex<br>
metadata_port = 9697<br>
send_arp_for_ha = 3<br>
periodic_interval = 40<br>
periodic_fuzzy_delay = 5<br>
enable_metadata_proxy = True<br>
router_delete_namespaces = False<br>
agent_mode = legacy<br>
allow_automatic_l3agent_failover=False<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://lists.openstack.org/pipermail/openstack/attachments/20150806/3c7f925a/attachment-0001.html" rel="noreferrer" target="_blank">http://lists.openstack.org/pipermail/openstack/attachments/20150806/3c7f925a/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 11<br>
Date: Thu, 06 Aug 2015 14:54:43 +0530<br>
From: Priyanka <<a href="mailto:ppnaik@cse.iitb.ac.in">ppnaik@cse.iitb.ac.in</a>><br>
To: OpenStack Mailing List <<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>><br>
Subject: [Openstack] VM MIgration on same host<br>
Message-ID: <<a href="mailto:55C327DB.9050601@cse.iitb.ac.in">55C327DB.9050601@cse.iitb.ac.in</a>><br>
Content-Type: text/plain; charset=windows-1252; format=flowed<br>
<br>
<br>
Hi,<br>
I have a multi node openstack setup but my other compute nodes donot<br>
have free resources. I want to resize a VM on a compute node. Resizing<br>
leads to migration of VM which would not be possible in my case. Can I<br>
set allow_migrate_to_same_host to true in nova.conf on that compute node<br>
and then resize hte VM on it? Also, do I have to make some configuration<br>
changes in the controller for this resizing.<br>
<br>
<br>
Thanks,<br>
<br>
Priyanka<br>
<br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 12<br>
Date: Thu, 6 Aug 2015 13:38:35 +0200<br>
From: Antonio Messina <<a href="mailto:antonio.s.messina@gmail.com">antonio.s.messina@gmail.com</a>><br>
To: YANG LI <<a href="mailto:yangli@clemson.edu">yangli@clemson.edu</a>><br>
Cc: "<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>" <<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>><br>
Subject: Re: [Openstack] configure SSL on glance, nova and neutron API<br>
Message-ID:<br>
<<a href="mailto:CA%2BjNneBJ2jJ5ekriumQ6D1O3RGF6rmrPmKmTmWpUo7_dhQf4Gg@mail.gmail.com">CA+jNneBJ2jJ5ekriumQ6D1O3RGF6rmrPmKmTmWpUo7_dhQf4Gg@mail.gmail.com</a>><br>
Content-Type: text/plain; charset=UTF-8<br>
<br>
Hi Yang,<br>
<br>
There are different ways of doing this:<br>
<br>
1) configure nova/glance/neutron/cinder to "speak" SSL, this should be<br>
covered by the official documentation<br>
2) run nova/glance/neutron/cinder as wsgi application behind apache,<br>
and let apache "speak" SSL<br>
3) run nova/glance/neutron/cinder behind a load-balancer which is also<br>
doing SSL termination.<br>
<br>
We chose option 3), but there are a few issues. Specifically, nova,<br>
glance and cinder will always reply with the wrong url schema (http<br>
instead of https), regardless of what you put on the endpoint.<br>
<br>
For nova, there is a patch not yet merged in kilo:<br>
<a href="https://bugs.launchpad.net/glance/+bug/1384379" rel="noreferrer" target="_blank">https://bugs.launchpad.net/glance/+bug/1384379</a><br>
<br>
For glance and cinder, we solved adding a "middleware" in the wsgi<br>
pipeline, responsible for converting "http" to "https" whenever it's<br>
needed<br>
<br>
Some useful links:<br>
<a href="https://bugs.launchpad.net/glance/+bug/1384379" rel="noreferrer" target="_blank">https://bugs.launchpad.net/glance/+bug/1384379</a><br>
<a href="https://gist.github.com/invsblduck/55923d81b175ba4168c1" rel="noreferrer" target="_blank">https://gist.github.com/invsblduck/55923d81b175ba4168c1</a><br>
<a href="https://github.com/rcbops-cookbooks/openstack-ssl/wiki/OpenStack-SSL-Reverse-Proxy-Findings" rel="noreferrer" target="_blank">https://github.com/rcbops-cookbooks/openstack-ssl/wiki/OpenStack-SSL-Reverse-Proxy-Findings</a><br>
<br>
.a.<br>
<br>
<br>
On Thu, Aug 6, 2015 at 12:17 AM, YANG LI <<a href="mailto:yangli@clemson.edu">yangli@clemson.edu</a>> wrote:<br>
> Is there a documentation on how to configure SSL on glance, nova and neutron API? we did get keystone done ,but had hard time to find document on how to do this on other services.<br>
><br>
> Thanks,<br>
> Yang<br>
> _______________________________________________<br>
> Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
> Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
> Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
<br>
<br>
<br>
--<br>
<a href="mailto:antonio.s.messina@gmail.com">antonio.s.messina@gmail.com</a><br>
<a href="mailto:antonio.messina@uzh.ch">antonio.messina@uzh.ch</a> <a href="tel:%2B41%20%280%2944%20635%2042%2022" value="+41446354222">+41 (0)44 635 42 22</a><br>
S3IT: Service and Support for Science IT <a href="http://www.s3it.uzh.ch/" rel="noreferrer" target="_blank">http://www.s3it.uzh.ch/</a><br>
University of Zurich<br>
Winterthurerstrasse 190<br>
CH-8057 Zurich Switzerland<br>
<br>
<br>
<br>
------------------------------<br>
<br>
_______________________________________________<br>
Openstack mailing list<br>
<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
<br>
<br>
End of Openstack Digest, Vol 26, Issue 6<br>
****************************************<br>
</blockquote></div>