openstack team mailing list archive

[Vishvananda Ishaya <vishvananda@xxxxxxxxx>]

So creating the configuration file used to be done automatically via a nova-manage project zipfile, but it got removed along with the deprecated auth removal. A user should be able to generate the required certificate and private key from nova using novaclient via:

nova x509-create-cert (it downloads the files as pk.pem and cert.pem)

You can get the ip and port for a project using:

nova cloudpipe-list

Then you can create the certfile manually from:

nova/cloudpipe/client.ovpn.template

you will have to replace the file names with pk.pem and cert.pem and ip and port with the data from the cloudpipe-list call.

We really should add a GET to the cloudpipes extension that is not admin only so that a user can retrieve the ip and port for his or her own cloudpipe. Then we could create a novaclient command to generate the ovpn template for you (move the template into novaclient). This would allow a user to get the configuration for his or her cloudpipe without needing an admin to generate it.

Vish

On Jul 17, 2012, at 3:16 AM, Kevin Jackson wrote:

> Hi All,
> So I've been looking at CloudPipe and have got to a stage where I can successfully (I presume) create a CloudPipe image and it launches.
> 
> But now what? :)
> 
> My understanding is that you now execute, from your desktop, openvpn against the public IP of the CloudPipe image which then allows you access to the previously unrouted private (fixed) network range.  But what settings do you use against this?
> Under the old deprecated auth, nova-manage packaged up the relevant config file as part of the project.  Under Keystone there isn't that notion of projects.
> 
> As much as I love the much improved docs on creating the image, I don't see that final step on how to use it once its running.
> 
> I did try to take a template that was buried deep in the Python dist-packages [using Ubuntu 12.04] area and filled in some details - but it suggests that this (being a  template) should create the final file for a user to use.  This seemed to try to  connect and didn't complete [kept retrying] so I'm not sure if it was the process I used to create the image or configuration issues that caused my problem
> 
> Cheers,
> 
> Kev
> 
> On 21 June 2012 17:23, Anne Gentle <anne@xxxxxxxxxxxxx> wrote:
> The docs team is on it!
> 
> https://bugs.launchpad.net/openstack-manuals/+bug/1015937
> 
> I <3 the docs team.
> 
> Anne
> 
> On Thu, Jun 21, 2012 at 3:00 AM, Sébastien Han <han.sebastien@xxxxxxxxx> wrote:
> > Hi,
> >
> > The official doc needs to be updated at some points. If you want to make
> > this compatible with Ubuntu 12.04.
> > You can check my article
> > here http://www.sebastien-han.fr/blog/2012/06/20/setup-cloud-pipe-vpn-in-openstack/
> > and the fork of the mirantis
> > repo https://github.com/leseb/cloudpipe-image-auto-creation/blob/master/cloudpipeconf.sh
> >
> > I will also try to  update the OpenStacj wiki asap.
> >
> > Cheers.
> >
> >
> > On Thu, Jun 21, 2012 at 7:01 AM, Atul Jha <Atul.Jha@xxxxxxxxxxx> wrote:
> >>
> >> Hi Naveen,
> >> ________________________________________
> >> From: openstack-bounces+atul.jha=csscorp.com@xxxxxxxxxxxxxxxxxxx
> >> [openstack-bounces+atul.jha=csscorp.com@xxxxxxxxxxxxxxxxxxx] on behalf of
> >> Naveen Kuna [naveen.kuna@xxxxxxxxxxxxxxxxxx]
> >> Sent: Thursday, June 21, 2012 8:22 AM
> >> To: openstack@xxxxxxxxxxxxxxxxxxx
> >> Subject: [Openstack] How to use Cloudpipe
> >>
> >> Hi All,
> >>
> >> Can anyone help me in making cloudpipe image and how to use cloudpipe
> >> image for VPN service ?
> >>
> >>
> >> http://docs.openstack.org/trunk/openstack-compute/admin/content/cloudpipe-per-project-vpns.html
> >>
> >> Please go through documentation pages next time onwards before asking
> >> questions which are already easily available.
> >>
> >> Thanks in Advance
> >>
> >> Regards,
> >> Naveen
> >>
> >> Cheers!!
> >>
> >> Atul
> >> http://www.csscorp.com/common/email-disclaimer.php
> >>
> >> _______________________________________________
> >> Mailing list: https://launchpad.net/~openstack
> >> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
> >> Unsubscribe : https://launchpad.net/~openstack
> >> More help   : https://help.launchpad.net/ListHelp
> >
> >
> >
> > _______________________________________________
> > Mailing list: https://launchpad.net/~openstack
> > Post to     : openstack@xxxxxxxxxxxxxxxxxxx
> > Unsubscribe : https://launchpad.net/~openstack
> > More help   : https://help.launchpad.net/ListHelp
> >
> 
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
> 
> 
> 
> -- 
> Kevin Jackson
> @itarchitectkev
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp