[Openstack-operators] security-group quotas

Akihiro Motoki amotoki at gmail.com
Thu Oct 17 11:36:50 UTC 2013


Hi Samuel,

Some addition to Julie's reply.

On Thu, Oct 17, 2013 at 3:04 AM, Samuel Winchenbach <swinchen at gmail.com> wrote:
> Hi Akihiro,
>
> I do not have that flag set, so I think I am using the default (#
> quota_driver = quantum.quota.ConfDriver).

First of all, this quota driver does not support per-tenant quota mechanism.
This is the reason quota-update is not support with this driver.
As Julie says, DbQuotaDriver is considered more suited for production use and
it becomes the default quota driver in the coming release Havana.

> Is there anyway to have quantum use the nova quotas?

Syncing nova and neutron quotas is one of the future topics.
At now, there is no mechanism to integrate nova and neutron quotas.
As a long time solution, quotas of network-related features will
disappear from nova
and neutron provides quotas settings.

> If not is there a way to have dashboard update the quantum quotas?

In Grizzly release, there is no way to update quantum quotas.
Havana Horizon supports it if DbQuotaDriver is used.
On #openstack IRC, I have a report Havana Horizon works well with
Grizzly deployment
and Horizon team believes Havana Horizon works with Grizzly.

Thanks,
Akihiro

>
> Thanks,
> Sam
>
>
> On Wed, Oct 16, 2013 at 11:12 AM, Akihiro Motoki <amotoki at gmail.com> wrote:
>>
>> Hi Samuel,
>>
>> Could you check the following two points?
>> - Which quota_driver do you use in neutron.conf?
>>   We need to use quantum.db.quota_db.DbQuotaDriver as quota_driver to
>> use quota-update.
>> - Only users with admin role can "quota-update".
>>
>> Thanks,
>> Akihiro
>>
>> On Wed, Oct 16, 2013 at 11:11 PM, Samuel Winchenbach <swinchen at gmail.com>
>> wrote:
>> > Hi David,
>> >
>> > I am using Quantum (at least that is what it is called in grizzly).  It
>> > doesn't look like I can list them or update them though:
>> > http://paste.openstack.org/show/48560/
>> >
>> >
>> > On Wed, Oct 16, 2013 at 9:56 AM, David Wittman <dwittman at gmail.com>
>> > wrote:
>> >>
>> >> Hey Samuel,
>> >>
>> >> Are you using Neutron/Quantum? They have their own set quotas,
>> >> including
>> >> one for security groups:
>> >>
>> >>
>> >>
>> >> https://github.com/openstack/neutron/blob/master/etc/neutron.conf#L284-L285
>> >>
>> >> Dave
>> >>
>> >>
>> >> On Wed, Oct 16, 2013 at 8:50 AM, Samuel Winchenbach
>> >> <swinchen at gmail.com>
>> >> wrote:
>> >>>
>> >>> Hi everyone,
>> >>>
>> >>> So I created a project that I gave unlimited access (everything set to
>> >>> -1).  I verified with nova (http://paste.openstack.org/show/48558/).
>> >>>
>> >>> I still can not create more than 10 security groups.
>> >>>
>> >>> Any idea what might be causing this?   Thanks!
>> >>>
>> >>> _______________________________________________
>> >>> OpenStack-operators mailing list
>> >>> OpenStack-operators at lists.openstack.org
>> >>>
>> >>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>> >>>
>> >>
>> >
>> >
>> > _______________________________________________
>> > OpenStack-operators mailing list
>> > OpenStack-operators at lists.openstack.org
>> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>> >
>
>



More information about the OpenStack-operators mailing list