nova quota-update and defaults not working

asked 2015-05-28 05:12:00 -0600

adam__ gravatar image

Hi all,

I am trying to set the security-groups and security-group-rules properties to a number other than the defaults of 10 and 20.

I have tried:

  • Changing the /etc/nova/nova.conf (this did nothing even after restarting the service)
  • Updating via nova quota-update --user and/or just tenant
  • nova quota-class-update default (I did this before making the user and tenant so that they would get the new default)

Now when I perform any of the following:

nova quota-show --user U-C12GE42 --tenant b270bb09f88e4f429f057a472197c79e
nova quota-show --user U-C12GE42
nova quota-show --tenant b270bb09f88e4f429f057a472197c79e

I get the response:

| Quota                       | Limit |
| instances                   | 10    |
| cores                       | 20    |
| ram                         | 51200 |
| floating_ips                | 10    |
| fixed_ips                   | -1    |
| metadata_items              | 128   |
| injected_files              | 5     |
| injected_file_content_bytes | 10240 |
| injected_file_path_bytes    | 255   |
| key_pairs                   | 100   |
| security_groups             | -1    |
| security_group_rules        | -1    |

Which is exactly what I want. However when I try to add security groups or rules as that user I am still stuck with the old maximum of 10. Regardless of if I perform this via CLI or horizon. If they login to horizon it says they have used 10 out of 10 of their quota.

How can I increase quotas for my users?

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted

answered 2015-05-28 12:39:01 -0600

jdexter gravatar image

updated 2015-05-28 12:39:22 -0600

What service is implementing your security groups? Nova or Neutron?? If its neutron you will need to set the quota there.

root@controller1 ~(keystone_admin)]# neutron quota-show
| Field               | Value |
| floatingip          | 50    |
| network             | 10    |
| port                | 50    |
| router              | 10    |
| security_group      | 10    |
| security_group_rule | 100   |
| subnet              | 10    |

[root@controller1 ~(keystone_admin)]# neutron help quota-update
usage: neutron quota-update [-h] [-f {shell,table,value}] [-c COLUMN]
                            [--max-width <integer>] [--prefix PREFIX]
                            [--request-format {json,xml}]
                            [--tenant-id tenant-id] [--network networks]
                            [--subnet subnets] [--port ports]
                            [--router routers] [--floatingip floatingips]
                            [--security-group security_groups]
                            [--security-group-rule security_group_rules]
                            [--vip vips] [--pool pools] [--member members]
                            [--health-monitor health_monitors]

Define tenant's quotas not to use defaults.

optional arguments:
  -h, --help            show this help message and exit
  --request-format {json,xml}
                        The XML or JSON request format.
  --tenant-id tenant-id
                        The owner tenant ID.
  --network networks    The limit of networks.
  --subnet subnets      The limit of subnets.
  --port ports          The limit of ports.
  --router routers      The limit of routers.
  --floatingip floatingips
                        The limit of floating IPs.
  --security-group security_groups
                        The limit of security groups.
  --security-group-rule security_group_rules
                        The limit of security groups rules.
  --vip vips            The limit of vips.
  --pool pools          The limit of pools.
  --member members      The limit of pool members.
  --health-monitor health_monitors
                        The limit of health monitors.

output formatters:
  output formatter options

  -f {shell,table,value}, --format {shell,table,value}
                        the output format, defaults to table
  -c COLUMN, --column COLUMN
                        specify the column(s) to include, can be repeated

table formatter:
  --max-width <integer>
                        Maximum display width, 0 to disable

shell formatter:
  a format a UNIX shell can parse (variable="value")

  --prefix PREFIX       add a prefix to all variable names
edit flag offensive delete link more


Using neutron quota-update has changed them. Thanks for the solution. I was getting confused by the documentation and some other forum answers as they had just mentioned doing nova quota-update and changing the nova.conf!

adam__ gravatar imageadam__ ( 2015-05-29 02:42:19 -0600 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2015-05-28 05:12:00 -0600

Seen: 5,164 times

Last updated: May 28 '15