[Openstack-operators] security-group quotas

Samuel Winchenbach swinchen at gmail.com
Fri Oct 18 18:00:53 UTC 2013


Thanks all for the responses.

Is it safe for me to change quota_driver and restart the services?   Are
there any nasty side effects I should be prepared for?

Thanks!


On Thu, Oct 17, 2013 at 7:36 AM, Akihiro Motoki <amotoki at gmail.com> wrote:

> Hi Samuel,
>
> Some addition to Julie's reply.
>
> On Thu, Oct 17, 2013 at 3:04 AM, Samuel Winchenbach <swinchen at gmail.com>
> wrote:
> > Hi Akihiro,
> >
> > I do not have that flag set, so I think I am using the default (#
> > quota_driver = quantum.quota.ConfDriver).
>
> First of all, this quota driver does not support per-tenant quota
> mechanism.
> This is the reason quota-update is not support with this driver.
> As Julie says, DbQuotaDriver is considered more suited for production use
> and
> it becomes the default quota driver in the coming release Havana.
>
> > Is there anyway to have quantum use the nova quotas?
>
> Syncing nova and neutron quotas is one of the future topics.
> At now, there is no mechanism to integrate nova and neutron quotas.
> As a long time solution, quotas of network-related features will
> disappear from nova
> and neutron provides quotas settings.
>
> > If not is there a way to have dashboard update the quantum quotas?
>
> In Grizzly release, there is no way to update quantum quotas.
> Havana Horizon supports it if DbQuotaDriver is used.
> On #openstack IRC, I have a report Havana Horizon works well with
> Grizzly deployment
> and Horizon team believes Havana Horizon works with Grizzly.
>
> Thanks,
> Akihiro
>
> >
> > Thanks,
> > Sam
> >
> >
> > On Wed, Oct 16, 2013 at 11:12 AM, Akihiro Motoki <amotoki at gmail.com>
> wrote:
> >>
> >> Hi Samuel,
> >>
> >> Could you check the following two points?
> >> - Which quota_driver do you use in neutron.conf?
> >>   We need to use quantum.db.quota_db.DbQuotaDriver as quota_driver to
> >> use quota-update.
> >> - Only users with admin role can "quota-update".
> >>
> >> Thanks,
> >> Akihiro
> >>
> >> On Wed, Oct 16, 2013 at 11:11 PM, Samuel Winchenbach <
> swinchen at gmail.com>
> >> wrote:
> >> > Hi David,
> >> >
> >> > I am using Quantum (at least that is what it is called in grizzly).
>  It
> >> > doesn't look like I can list them or update them though:
> >> > http://paste.openstack.org/show/48560/
> >> >
> >> >
> >> > On Wed, Oct 16, 2013 at 9:56 AM, David Wittman <dwittman at gmail.com>
> >> > wrote:
> >> >>
> >> >> Hey Samuel,
> >> >>
> >> >> Are you using Neutron/Quantum? They have their own set quotas,
> >> >> including
> >> >> one for security groups:
> >> >>
> >> >>
> >> >>
> >> >>
> https://github.com/openstack/neutron/blob/master/etc/neutron.conf#L284-L285
> >> >>
> >> >> Dave
> >> >>
> >> >>
> >> >> On Wed, Oct 16, 2013 at 8:50 AM, Samuel Winchenbach
> >> >> <swinchen at gmail.com>
> >> >> wrote:
> >> >>>
> >> >>> Hi everyone,
> >> >>>
> >> >>> So I created a project that I gave unlimited access (everything set
> to
> >> >>> -1).  I verified with nova (http://paste.openstack.org/show/48558/
> ).
> >> >>>
> >> >>> I still can not create more than 10 security groups.
> >> >>>
> >> >>> Any idea what might be causing this?   Thanks!
> >> >>>
> >> >>> _______________________________________________
> >> >>> OpenStack-operators mailing list
> >> >>> OpenStack-operators at lists.openstack.org
> >> >>>
> >> >>>
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
> >> >>>
> >> >>
> >> >
> >> >
> >> > _______________________________________________
> >> > OpenStack-operators mailing list
> >> > OpenStack-operators at lists.openstack.org
> >> >
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
> >> >
> >
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20131018/265b530f/attachment.html>


More information about the OpenStack-operators mailing list