[openstack-dev] [Manila] using one Manila service for two clouds

Jake Kugel jkugel at us.ibm.com
Sun Feb 15 21:18:23 UTC 2015


Thanks for the reply, and you're right - I was interested in was allowing 
people outside of the cloud to use Manila, that is great to hear that is a 
supported use case.  I still have some learning to do around per-tenant 
share servers and per-tenant networks but in general I think it will work 
well.

Thanks,
Jake


Ben Swartzlander <ben at swartzlander.org> wrote on 02/13/2015 07:30:57 PM:

> From: Ben Swartzlander <ben at swartzlander.org>
> To: "OpenStack Development Mailing List (not for usage questions)" 
> <openstack-dev at lists.openstack.org>
> Date: 02/13/2015 07:33 PM
> Subject: Re: [openstack-dev] [Manila] using one Manila service for two 
clouds
> 
> On 02/13/2015 05:58 PM, Jake Kugel wrote:
> > Hi,
> >
> > this might be a dumb question, is it possible to have a stand-alone 
Manila
> > service that could be used by clients outside of a specific OpenStack
> > cloud?  For example, a shared Manila service that VMs in two clouds 
could
> > both use?
> 
> We've tried to design Manila to not have any hard dependencies on any 
> OpenStack services (except for keystone). The use case is exactly what 
> you suggest -- people should be able to use Manila outside of the cloud 
> if they wish.
> 
> > I am guessing that there would be two drawbacks to this scenario -- 
(1)
> > users would need two keystone credentials - a keystone credential in 
the
> > cloud hosting their VM, and then a keystone credential that is used 
with
> > the stand-alone Manila service to create a share.  And (2), the shared
> > Manila service wouldn't be able to isolate network traffic for a
> > particular tenant - all users of the service would share the same 
network.
> >   Do these capture the problems with it?
> 
> Possibly yes. I would like to think it would be possible to use 1 
> keystone for both purposes, but I'm not expert on keystone I'm not 
> familiar with what you're trying to do.
> 
> Regarding isolation of network traffic, Manila doesn't actually do that 
> for you. What Manila does is allows you to create per-tenant share 
> servers and connect them to various per-tenant network, assuming the 
> networks are already segmented by something else. That something else 
> doesn't have to be neutron or a cloud, necessarily. As the code is 
> written today, the segmentation is assumed to be either neutron or 
> nova-network based, but it shouldn't be terribly hard to add something 
> else in the future.
> 
> > Thanks,
> > Jake
> >
> >
> > 
__________________________________________________________________________
> > OpenStack Development Mailing List (not for usage questions)
> > Unsubscribe: 
OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> 
> 
__________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: 
OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 




More information about the OpenStack-dev mailing list