[Openstack-operators] AggregateMultiTenancyIsolation with multiple (many) projects
Jay Pipes
jaypipes at gmail.com
Tue Feb 6 13:48:34 UTC 2018
On 02/06/2018 04:26 AM, Flint WALRUS wrote:
> Aren’t CellsV2 more adapted to what you’re trying to do?
No, cellsv2 are not user-facing nor is there a way to segregate certain
tenants on to certain cells.
Host aggregates are the appropriate way to structure this grouping.
Best,
-jay
> Le mar. 6 févr. 2018 à 06:45, Massimo Sgaravatto
> <massimo.sgaravatto at gmail.com <mailto:massimo.sgaravatto at gmail.com>> a
> écrit :
>
> Hi
>
> I want to partition my OpenStack cloud so that:
>
> - Project p1, p2, .., pn can use only compute nodes C1, C2, ... Cx
> - Projects pn+1.. pm can use only compute nodes Cx+1 ... Cy
>
> I read that CERN addressed this use case implementing the
> ProjectsToAggregateFilter but, as far as I understand, this in-house
> developments eventually wasn't pushed upstream.
>
> So I am trying to rely on the AggregateMultiTenancyIsolation filter
> to create 2 host aggregates:
>
> - the first one including C1, C2, ... Cx and with
> filter_tenant_id=p1, p2, .., pn
> - the second one including Cx+1 ... Cy and with
> filter_tenant_id=pn+1.. pm
>
>
> But if I try to specify the long list of projects, I get:a "Value
> ... is too long" error message [*].
>
> I can see two workarounds for this problem:
>
> 1) Create an host aggregate per project:
>
> HA1 including CA1, C2, ... Cx and with filter_tenant_id=p1
> HA2 including CA1, C2, ... Cx and with filter_tenant_id=p2
> etc
>
> 2) Use the AggregateInstanceExtraSpecsFilter, creating two
> aggregates and having each flavor visible only by a set of projects,
> and tagged with a specific string that should match the value
> specified in the correspondent host aggregate
>
> Is this correct ? Can you see better options ?
>
> Thanks, Massimo
>
>
>
> [*]
> # nova aggregate-set-metadata 1
> filter_tenant_id=ee1865a76440481cbcff08544c7d580a,1c63ef80901b46bebc9e1e8e10d85019,a22db12575694c9e9f8650dde73ef565,b4a1039f2f7c419596662950d8a1d397,d8ce7a449d8e4d68bbf2c40314da357e,e81df4c0b493439abb8b85bfd4cbe071,ee1865a76440481cbcff08544c7d580a,29d6233c0b2741e2a30324079f05aa9f,2b92483138dc4a61b1133c8c177ff298
> ERROR (BadRequest): Invalid input for field/attribute
> filter_tenant_id. Value:
> ee1865a76440481cbcff08544c7d580a,1c63ef80901b46bebc9e1e8e10d85019,a22db12575694c9e9f8650dde73ef565,b4a1039f2f7c419596662950d8a1d397,d8ce7a449d8e4d68bbf2c40314da357e,e81df4c0b493439abb8b85bfd4cbe071,ee1865a76440481cbcff08544c7d580a,29d6233c0b2741e2a30324079f05aa9f,2b92483138dc4a61b1133c8c177ff298.
> u'ee1865a76440481cbcff08544c7d580a,1c63ef80901b46bebc9e1e8e10d85019,a22db12575694c9e9f8650dde73ef565,b4a1039f2f7c419596662950d8a1d397,d8ce7a449d8e4d68bbf2c40314da357e,e81df4c0b493439abb8b85bfd4cbe071,ee1865a76440481cbcff08544c7d580a,29d6233c0b2741e2a30324079f05aa9f,2b92483138dc4a61b1133c8c177ff298'
> is too long (HTTP 400) (Request-ID:
> req-b971d686-72e5-4c54-aaa1-fef5eb7c7001)
>
>
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> <mailto:OpenStack-operators at lists.openstack.org>
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
>
>
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
More information about the OpenStack-operators
mailing list