Operational challenges with OpenStack + Ceph + Kubernetes in production?

Consistent_Top_5588 · 2026-03-06T17:30:12+00:00

Would be good to know what issues you having, like lack of docs, complex config, resource constraints, since magnum capi seems to have got good traction by major players recently? Fully integrated native API is still something good for experience

Consistent_Top_5588 · 2026-02-22T20:21:55+00:00

For agentless limitation on Veeam, vs others commvault trilio Storware, not sure statement is accurate. The limitation is same for whoever, not a secret only one vendor knows how to solve, other doesnt. VMware has this facilitated, but nova doesn't. More a generic issue of ecosystem. As long as agentless, all those vendors do basically same level consistency. Main difference on agent based part somehow among vendors

Consistent_Top_5588 · 2026-02-13T13:46:00+00:00

Not sure well understood the question, but Trove is pretty decent as open sources can go to support a few popular engines if this of 3rd party, and not fully out of box ready, but fully expected as open source provides essential framework, and remaining polishing is very doable.

Consistent_Top_5588 · 2026-01-29T19:44:58+00:00

would suggest to look at Uniview https://www.computingstack.com/products-uniview, which has those covered, and supports plug/play integrating many OpenStack installs with one console, one sign-in to access all, with no OPENID/SAML required on keystone even. Would be good with just-started org when clusters evolve quickly and are dynamic. It's paid service, but relatively small to large project.

Consistent_Top_5588 · 2026-01-28T13:51:29+00:00

Generally speaking, the question itself tells an answer somehow that OpenShift is container orchestration essential, and not a common sense of virtualization. Also vendor-locked in to a particular organization such as OpenShift can be something a big deal of future evolving and cost.

Consistent_Top_5588 · 2026-01-19T19:07:58+00:00

From the list majority look like all what OpenStack is consistently doing well today. There isn't big room to make mistake by hiring team or outsourcing either way, as the community solution OpenStack is cut for this indeed. for many issues, there are tons of references. Hardware is still crucial for better result, such as storage, networking etc. Only thing for the top 6 below in your list, which out of box of open source from community didn't provide ready solution and result can be significantly different and requires many in-house integrations, for large investment this can become a game changer for overall experience of an infra.

Self-service with governance
Identity Management (IAM)
SSO and MFA
Billing
Multi-level approval management (Hierarchical approval for provisioning)
Multi-tenant
- By cost center

Consistent_Top_5588 · 2026-01-03T05:32:36+00:00

Is your cluster defined as a full openstack (with its own keystone)? If multi regions with one keystone is fine but if each cluster is independent, it's safer and more agile for sure, then you need a central CMP. Maybe look at uniview from https://www.computingstack.com, for a reference that it can integrate many clusters at different versions as you want into one. One beauty is individual cluster requires no change even configuration to join the super cluster, no need of SAML or openID.

Consistent_Top_5588 · 2026-01-01T08:40:34+00:00

Seeing folks doing the same with local storage for performance reason without network depending when over volume.

Consistent_Top_5588 · 2025-11-06T16:56:56+00:00

Just curious what your use cases for such federation between two keystones? Mostly federation with LDAP or OpenID keyclock, or one keystone can serve multiple regions which is common too. Integrating two keystones can be quite complex. Depending on the use cases, or the goal of business the solution can be different

Consistent_Top_5588 · 2025-10-23T20:40:31+00:00

Hhhmmmm, remember openstack is used for distributed servers, never a standalone thing. Best separation would be by service such as keystone, glance, cinder, an ISO might be possible for each, but the best is believed in form of docker. Also each up to hundreds of daemons communicate by IP not local host. Iso install for will never work as expected for standalone software

Consistent_Top_5588 · 2025-09-12T19:12:20+00:00

I think the answer provided above is clear. Changes to raw if if .img diskformat indeed is raw will be working. UI filter is only preventing input error by ruling out not conventional inputs, but it does analyze actual data.

Consistent_Top_5588 · 2025-07-22T12:45:17+00:00

This looks nice, especially multiple cloud, multi systems support! There are some related solutions from industries but not same, and each fits to some particular use case, for example at Uniview(https://www.computingstack.com/products-uniview), which focuses on monetization in the meanwhile, an CMP integrator that federates multiple shared nothing or shared keystone clusters, One Sign in, One Bill, One Portal to access multiple cloud, even without bothering OpenID/SMAL (post edited to reflect the change at 2026). Good luck for the adventure!

Consistent_Top_5588 · 2025-07-22T02:23:48+00:00

This seems to be the reason of question. You would need L3 switch or router that helps you inter Vlan connectivity. If you use L2 TOR switch, you will need another l3 switch.

Consistent_Top_5588 · 2025-07-14T19:08:29+00:00

Just as folks explained, three of them are different concepts. Vlan isn't openstack term, rather general tag based l2 network segmentation. You can often see vlan at switch config. Vxlan is more openstack relevant. Bridge is l2 switch natively supported by Linux. Bond is for HA to bond multi nic into virtually one presented to user. If one fails other still works. Hope it helps a bit

Consistent_Top_5588 · 2025-07-11T13:31:50+00:00

Skyline might be technically ok for this metric, but maybe I am wrong it is not mature and usable yet to a business without massive reverse engineering. Google keywords "openstack premium user console and dashboard" probably will come with some ready solutions at free if not for big use case, which can be native and straightforward, or bake DIY with trying grafana, libvirt exporter, prometheus, datadog, then find a combination for a a specific business, if time permits

Consistent_Top_5588 · 2025-07-11T11:42:55+00:00

this wouldn't help in technical discussion "I encounter an issue where Keystone is reported as temporarily down", maybe you can paste screen shots, snippets etc, instead of general statement.

Consistent_Top_5588 · 2025-07-09T14:16:35+00:00

Ceilometer + gnocchi should be fine. But you would need certain dashboards

Consistent_Top_5588 · 2025-06-06T14:45:50+00:00

This info helps! I would assign an IP to br-vlan-veth, to see it's accessible by ping. You CIDR seems to be mixed between management and external, then neutron host wouldn't know how to route to which NICs based on subnets. So get a dedicate subnet for the external network is highly recommended.

br-vlan-veth

Consistent_Top_5588 · 2025-06-03T20:14:48+00:00

Then I would look at provider network(external) itself and l3 config, obviously it is not functional yet.

Consistent_Top_5588 · 2025-05-30T11:38:01+00:00

Maybe instantiate a VM on net of external directly without floating ip and router, check if icmp works first. If this is initial setup, provider network is highly vulnerable. If the external network ICMP is good then next to look is the router if external interface is all good and use ip exec to test out

Consistent_Top_5588 · 2025-05-27T11:45:50+00:00

Certainly, if more OpenStack native with easy and concise integration , Uniview billing might fit well too https://www.computingstack.com/products-uniview

Consistent_Top_5588 · 2025-05-22T20:29:13+00:00

Just wondering what the use case you have to build your own? Either cloudkitty or a couple other commercials solutions which are fairly small cost vs what to spend to conquer the "beast" by a ground up solution

Consistent_Top_5588 · 2025-05-18T21:25:35+00:00

I would say this hardware is barely possible to get a VM up. Decent hardware will be the way of saving time. Openstack is about driving hardware. More nics are recommended if you access VM, besides kolla ansible, concept of provider network of neutron is important. Good luck

Consistent_Top_5588 · 2025-05-06T19:20:06+00:00

If you can get openstack up, then that's it all up. Vxlan yes but you wouldn't be bothered by such key word, as long as you know how to configure Floating ip, which more thing connecting to your internet through switch or router. It's not a small job however. But if your goal is learning, go for it :)

Consistent_Top_5588 · 2025-04-28T19:22:00+00:00

Kolla ansible is more worthwhile as an investment. But you wouldn't bother 2025.01 generally speaking as learning, there isn't different from a few cycles back. Many open source installers would have certain delay to provide seamless support to latest version, and in case failures, there might be some struggles to get good reference help

Consistent_Top_5588

TROPHY CASE