On 05/10/2012 10:56 AM, Itamar Heim wrote:
On 05/10/2012 10:55 AM, Yaniv Kaul wrote:
> On 05/10/2012 09:40 AM, Gary Kotton wrote:
>> On 05/10/2012 09:07 AM, Itamar Heim wrote:
>>> Gary - can you please share how quantum solves this?
>> Hi,
>> At the moment there is work in progress of integrating Melange
>> (
http://wiki.openstack.org/Melange) into Quantum. This module takes
>> care of the IP address management. Addition information can be seen at
>>
http://docs.openstack.org/trunk/openstack-network/admin/content/Melange-d....
>>
>>
>> Thanks
>> Gary
>
> I personally think Melange is a short-sighted project, as the next item
> would be to configure the firewall policy, then the SSH keys, etc., etc.
> Something like Foreman (
http://theforeman.org/ ) integration makes a lot
> more sense to me.
firewall is supposed to be covered by quantum afaiu.
I think Quantum's assumption is that there is a centrally managed
firewall server (Firewall-as-a-service?), I was talking about the VM's
firewall.
ssh keys is covered via the metadata service ("ec2 guest
api") and
cloud-init in fedora loads the relevant configuration from it (using
http://169.254.169.254 to get it)
Which is even worse, because:
1. Now you are splitting the configuration of a virtual machine to
different components
2. You are not doing the complete lifecycle mgmt, just the provisioning.
Y.