glance wants to go public
DESCRIPTION
OpenStack's Image service has been doing a great job on providing images throughout OpenStack and as the number of cloud services grow, the time for this service to be public has arrived. In this talk, I'll take you through different deployments strategies, in progress tasks and future ideas that will make all this possible.TRANSCRIPT
@flaper87 at OpenStack Israel
OpenStack Image
wants to go public
@flaper87 at OpenStack Israel
I mean... Why?How's that even possible?What needs to be changed?
DAFUQ?
Who's this dude?
@flaper87 (a.k.a, Flavio Percoco):Very proud Red Hatter, who's also part of the MongoDB Master team and has contributed to Open Source since... forever.
One of those who thinks about programming when he's not programming.
member of
@flaper87 at OpenStack Israel
OpenStack Image (Glance)
@flaper87 at OpenStack Israel
DISCLAIMER
From this slide on, everything is UNDER DISCUSSION
@flaper87 at OpenStack Israel
Sick of Nova proxying Glance's calls
WHY?
@flaper87 at OpenStack Israel
Easier to distribute images to the Outside World™Sick of Nova proxying Glance's calls
WHY?
@flaper87 at OpenStack Israel
Users want to upload their own imagesSick of Nova proxying Glance's calls
Easier to distribute images to the Outside World™
WHY?
@flaper87 at OpenStack Israel
It's the best excuseto finally have Quotas #WINSick of Nova proxying Glance's calls
Easier to distribute images to the Outside World™
Users want to upload their own images
WHY?
@flaper87 at OpenStack Israel
How many lines of code
does this thing cost?
@flaper87 at OpenStack Israel
Well ... and the scared rabbit ran away
@flaper87 at OpenStack Israel
Enhanced RBAC (Role Based Access Control)
{ "context_is_admin": "role:admin", "default": "", "manage_image_cache": "role:admin"}
moar Stuff like this
@flaper87 at OpenStack Israel
Protected Image properties
class ImageProperty(BASE, ModelBase): id = Column(Integer, ...) image_id = Column(String(36), ...) image = relationship(Image, ...) name = Column(String(255), ...) value = Column(Text)
No protection at all
@flaper87 at OpenStack Israel
Rate Limits
Within Glance?
… or as third-party service ?
@flaper87 at OpenStack Israel
Quotasyou know, just in case
Do we really need Quotas?Yep, we dared to ask
@flaper87 at OpenStack Israel
Quotasyou know, just in case
What to limit?Do we really need Quotas?
@flaper87 at OpenStack Israel
Quotasyou know, just in case
How to do it?What to limit?Do we really need Quotas?
@flaper87 at OpenStack Israel
New image upload / download workflow
@flaper87 at OpenStack Israel
Use Cases
It's all about providing images, right?
@flaper87 at OpenStack Israel
Use Cases
Cross region image sharingIt's all about providing images, right?
@flaper87 at OpenStack Israel
Use Cases
Live ISO ImagesCross region image sharingIt's all about providing images, right?
@flaper87 at OpenStack Israel
Use Cases
Vagrant BoxesCross region image sharingIt's all about providing images, right?
Live ISO images
@flaper87 at OpenStack Israel
Q&A
Thankswe
're hi
ring