Re: [Openstack-operators] Openstack deployment tool advice

Yes, you can! That is the beauty of chef/puppet you can decide which repo to use because there is cookbook/manifest for yum/apt configuration :-) Edgar From: Pedro Sousa mailto:[email protected]>> Date: Tuesday, February 10, 2015 at 10:49 AM To: Edgar Magana mailto:[email protected]>> Su

[Openstack-operators] Swift-Proxy + Keystone with HAProxy and SSL

hey guy, my production environment is down for two days and I can't fixit. I had 3 keystone+swiftproxy nodes, balanced with DNS-RR and endpoints pointing to DNS; keystone running on 5000/35357 and swift on 443, both with self-signed certificate and native ssl; Then I've changed the swiftproxy to

Re: [Openstack-operators] Swift-Proxy + Keystone with HAProxy and SSL

Can you post your haproxy config file? Kris Lindgren Senior Linux Systems Engineer GoDaddy, LLC. From: Gui Maluf mailto:[email protected]>> Date: Tuesday, February 10, 2015 at 3:25 PM To: "[email protected]

Re: [Openstack-operators] Swift-Proxy + Keystone with HAProxy and SSL

http://paste.openstack.org/show/171017/ On Tue, Feb 10, 2015 at 8:33 PM, Kris G. Lindgren wrote: > Can you post your haproxy config file? > > > Kris Lindgren > Senior Linux Systems Engineer > GoDaddy, LLC. > > > From: Gui Maluf > Date: Tuesday, F

Re: [Openstack-operators] Swift-Proxy + Keystone with HAProxy and SSL

Something wrong with my certificates and Keystone, cause changing to self-signed certificates everything is working. On Tue, Feb 10, 2015 at 8:52 PM, Gui Maluf wrote: > http://paste.openstack.org/show/171017/ > > On Tue, Feb 10, 2015 at 8:33 PM, Kris G. Lindgren > wrote: > >> Can you post your

Re: [Openstack-operators] Swift-Proxy + Keystone with HAProxy and SSL

We had this issue. OS_CAcert doesn't do what you think it does. If I remember correctly its for client certs or something of the like. For us - we had to include the bundle of signing CA into the cert file. Our ssl config is like: ca_certs=/path/to/your-ca-ssl-bundle.crt certfile=/path/to/ssl

Re: [Openstack-operators] Swift-Proxy + Keystone with HAProxy and SSL

On 2/10/15 3:40 PM, Gui Maluf wrote: Something wrong with my certificates and Keystone, cause changing to self-signed certificates everything is working. There is an undocumented (in the usual places) for keystone middleware to point at the CA file for your certificates. http://docs.opensta

[Openstack-operators] [cinder] Driver Filters and Goodness Weighers... Who plans to use this?

eate these filters and weigher functions. So far, it appears only one operator has weighed in on this feature according to gerrit. Proposed Documentation: http://thing.ee/x/doc-20150210/content/driver_filter_weighing.html Spec: https://review.openstack.org/#/c/129330/11/specs/kilo/filtering-weighing-w