Open Stack

Hello folks,

I am starting to look at OpenStack and noticed there are some things it 
doesn't seem to be able to do right now?

1) Managing the nova-compute (hypervisor) - I see no options on how to control 
what nova-compute nodes can be 'provisioned' into an OpenStack cloud, I'd 
consider that a security risk (potentially) if any computer could just 
register to become a nova-compute?

The reason I ask this question is how do we handle hardware failures? How can 
we manually move a instance/VM off a nova-compute? I see instructions on 
setting up the hypervisor to move VM instances but no actual commands to issue 
a move manually.

2) Can we build a diskless nova-compute? just one kernel/initramfs with the 
various configurations, libvirt, file storage network mounts, openvswitch setup 
etc inside it?

3) keystone seems a lot of work to setup with all the various URLs, we plan to 
streamline this somehow?

When I used OpenNebula I found the installation similar but simpler (a 
clear distinction between hypervisors themselves and managing them and 
managing the VM instances overall). While OpenStack is new I would expect it 
to be missing functionality currently.

Thanks,
Shawn