Skip to content

Instantly share code, notes, and snippets.

View madorn's full-sized avatar

Matt Dorn madorn

68 followers · 7 following
View GitHub Profile
@madorn
madorn / gist:00490209a8e2a948375d
Created September 10, 2014 03:10
OpenStack Icehouse All-in-One Virtual Appliance

Getting Started with OpenStack Icehouse All-in-One Virtual Appliance

date

2014-09-08 15:46

tags

rackspace, openstack

category

*nix

The Easiest Way To Get Started with OpenStack

This VirtualBox Appliance will get you up and running with OpenStack Icehouse quickly!

@madorn
madorn / gist:9793286
Last active August 29, 2015 13:57
Havana: Cinder NFS Backend

Havana: Cinder NFS Backend

Intro

Cinder maintains an iSCSI connection between the cinder-volume and compute node when utilizing the LVM driver (cinder.volume.drivers.lvm.LVMISCSIDriver).

If one uses the NFS driver for a backend (cinder.volume.drivers.nfs.NfsDriver), the volume is served to the compute node via NFS share.

@madorn
madorn / gist:9378335
Last active August 29, 2015 13:57
Havana: Glance

Glance v2 API

Havana comes with both v1 and v2 of the Glance API

python-glanceclient curently supports v1 but v2 support is in progress.

Glance v2 API adds:

@madorn
madorn / gist:8565097
Last active January 4, 2016 03:59
Havana: Neutron

Havana: Neutron

ML2 Plugin

One of the most significant features of Havana is the introduction of the ML2 (Modular Layer 2) plugin framework.

@madorn
madorn / gist:8445517
Last active January 3, 2016 09:49
Havana: Cinder

Havana: Cinder

Multiple-Storage Back-Ends

Multiple-storage back-end capability in Cinder was introduced in Grizzly.

This allows one to run multiple cinder volume back-ends and create groups of these back-ends based off unique volume drivers. Cinder volume backends are spawned as children to cinder-volume. The filter scheduler determines where to send the volume based on the volume type thats passed in.

@madorn
madorn / gist:8438906
Last active January 3, 2016 08:49
Havana: Glance

Havana: Glance

API

Havana comes with both v1 and v2 Glance API (v2.2 is now in development).

python-glanceclient currently supports Glance API v1.

@madorn
madorn / gist:8322597
Last active January 2, 2016 15:19
Havana: Keystone

Havana: Keystone

Example Org Structure Utilizing Keystone v2 API

image

This is an example of user, role, and project/tenant setup utilizing the current v2 API. The Texas Robotics Center has three departments, each in their own tenant/projects.

@madorn
madorn / gist:8047311
Last active December 31, 2015 21:29
Grizzly: Live-Migration

Live-Migration in OpenStack

One can do a live-migration in OpenStack without having to setup a NFS share for compute hosts:

nova live-migration --block-migrate <server> <hosts>

This will temporarily suspend the instance, copy it over to the specified compute node, and resume.

@madorn
madorn / gist:8047226
Last active December 31, 2015 21:29
Grizzly: Resizing Running Instance

Resize a Running Instance on a Single Compute Node

One can resize a running instance in OpenStack by running the following nova command:

nova resize --poll <server> <flavor>

The default behavior of this command is to invoke the nova scheduler to determine the best compute node for the resized instance. If there is only one compute node in the environment, the resize will fail.

@madorn
madorn / gist:6942738
Created October 11, 2013 22:02
How Keystone Signs, Encodes, Decodes, Verifies

How Keystone Signs, Encodes, Decodes, Verifies

A few months ago, we did a write up on the new PKI Token default introduced in Grizzly Keystone.

This described the new workflow for authentication and the fact that services no longer need to constantly validate tokens against Keystone - this can be done on the service endpoint with the help of security certificates.

How this really works has been bugging me for awhile since I was confused about the concepts of encoding/decoding/encrypting/decrypting. Let's walk through it.

Note: