[Yahoo-eng-team] [Bug 1818479] [NEW] RFE Decouple placement reporting service plugin from ML2
Public bug reported: This RFE tracks an improvement to the placement reporter service plugin that was suggested just a few days before the Stein feature freeze, so instead of working on it right there, this is delayed to the Train cycle. The original code review comment: https://review.openstack.org/#/c/580672/30/neutron/services/placement_report/plugin.py@187 The placement reporter service plugin as merged in Stein depends on ML2. The improvement idea is to decouple it, by a driver pattern as in the qos service plugin. We need to investigate the costs and benefits of this refactoring and if it's feasible implement it in Train. ** Affects: neutron Importance: Undecided Assignee: Bence Romsics (bence-romsics) Status: New ** Tags: qos rfe -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1818479 Title: RFE Decouple placement reporting service plugin from ML2 Status in neutron: New Bug description: This RFE tracks an improvement to the placement reporter service plugin that was suggested just a few days before the Stein feature freeze, so instead of working on it right there, this is delayed to the Train cycle. The original code review comment: https://review.openstack.org/#/c/580672/30/neutron/services/placement_report/plugin.py@187 The placement reporter service plugin as merged in Stein depends on ML2. The improvement idea is to decouple it, by a driver pattern as in the qos service plugin. We need to investigate the costs and benefits of this refactoring and if it's feasible implement it in Train. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1818479/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1818318] Re: Network filtering by dns_domain is not supported in the "dns-integration" extension
** Changed in: neutron Status: Invalid => New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1818318 Title: Network filtering by dns_domain is not supported in the "dns- integration" extension Status in neutron: New Bug description: Filtering network by "dns_domain" (http://neutron/v2.0/networks?dns_domain=foo) returns: in_() not yet supported for relationships. For a simple many-to-one, use in_() against the set of foreign key values. However ports filtering by dns_name works fine: http://neutron/v2.0/ports?dns_name=bar I haven't managed to clarify why. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1818318/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1809907] Re: Unstable ping during zuul testing
[Expired for neutron because there has been no activity for 60 days.] ** Changed in: neutron Status: Incomplete => Expired -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1809907 Title: Unstable ping during zuul testing Status in neutron: Expired Bug description: Log search: http://logstash.openstack.org/#dashboard/file/logstash.json?query=message%3A%5C%22ERROR%20neutron.agent.linux.utils%20%5B-%5D%20Exit%20code%3A%201%3B%20Stdin%3A%20%3B%20Stdout%3A%20PING%5C%22 Sometimes it could happen 2600+ times per 12 hour. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1809907/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1818385] Re: It's possible to add a security group rule for VRRP with a dport
Since this report concerns a possible security risk, an incomplete security advisory task has been added while the core security reviewers for the affected project or projects confirm the bug and discuss the scope of any vulnerability along with potential solutions. ** Also affects: ossa Importance: Undecided Status: New ** Changed in: ossa Status: New => Incomplete ** Information type changed from Public to Public Security -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1818385 Title: It's possible to add a security group rule for VRRP with a dport Status in neutron: In Progress Status in OpenStack Security Advisory: Incomplete Bug description: This command should be invalid, but Neutron (Rocky) allows it to be created. > openstack security group rule create xxx --protocol vrrp --ingress --remote-ip --dst-port 112 Since iptables does not allow dst-port being passed. It would trigger the following error on the compute. > unknown option "--dport" I would have created this as a security vulnerability, but it's already been mentioned on IRC. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1818385/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1817295] Re: Functional NetlinkLib tests can interfere with other tests
Reviewed: https://review.openstack.org/638635 Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=798c6c731fc5872ade8b5eb1f571a2c002c8c0fb Submitter: Zuul Branch:master commit 798c6c731fc5872ade8b5eb1f571a2c002c8c0fb Author: Slawek Kaplonski Date: Fri Feb 22 12:34:54 2019 +0100 [Functional tests] Change way how conntrack entries are checked In netlink_lib functional tests module there are listed conntrack entries and those entries are assert to some expected list. It may happen that sometimes some additional entries from other tests will also be in the list and that cause failures of netlink_lib tests. So this patch changes way how those assertions are done. For now it will check if each of expected entries is in entries list and in case of delete entries tests, it will also check if any of deleted entries isn't actually in list. Change-Id: I30c18f141a8356b060902e6493ba0657b21619ad Closes-Bug: #1817295 ** Changed in: neutron Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1817295 Title: Functional NetlinkLib tests can interfere with other tests Status in neutron: Fix Released Bug description: It may happen that tests from neutron.tests.functional.agent.linux.test_netlink_lib.NetlinkLibTestCase can interfere with e.g. tests from neutron.tests.functional.agent.test_firewall module and fail because of that. It may happen that one of NetlinkLib tests deletes some conntrack entries and expects ONLY some specific ones to be still in conntrack. But there are also other entries added by some other tests. Example of such failure: http://logs.openstack.org/02/637802/2/check /neutron-functional-python27/3d611ea/logs/testr_results.html.gz Additional conntrack entry (6, u'udp', 46935, 18650, u'2001:db8:::1', u'2001:db8:::2', 71) comes probably from one of tests in neutron.tests.functional.agent.test_firewall module. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1817295/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1817306] Re: Failed gARP for floating IP in l3 agent logs
Reviewed: https://review.openstack.org/638648 Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=1ee18775a99492f445f1fb29e2d4639cbdff613d Submitter: Zuul Branch:master commit 1ee18775a99492f445f1fb29e2d4639cbdff613d Author: Oleg Bondarev Date: Fri Feb 22 16:00:30 2019 +0400 DVR edge router: avoid accidental centralized floating IP remove Need to pass centralized floating IPs as preserve_ips to _external_gateway_added during DVR router update. Otherwise IP addresses will be deleted from gw device in certain case. The case is when a router with active centralized floating IPs is being scheduled to a new dvr_snat L3 agent (rescheduled from a down one). Please see corresponding traces in the bug description. Change-Id: Iaeb9fbed73144df6fcd9092c665ed19986e85f4d Closes-bug: #1817306 ** Changed in: neutron Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1817306 Title: Failed gARP for floating IP in l3 agent logs Status in neutron: Fix Released Bug description: release: Pike. When a DVR router with centralized floating IPs is rescheduled from down l3 agent to another, following traces are seen on the destination agent: 2019-02-21 14:55:59,150.150 24730 ERROR neutron.agent.linux.ip_lib [-] Failed sending gratuitous ARP to 10.13.250.14 on qg-af0de258-a8 in namespace snat-afe70a67-a007-4bcf-93ac-099aad63411c: Exit code: 2; Stdin: ; Stdout: ; Stderr: bind: Cannot assign requested address : ProcessExecutionError: Exit code: 2; Stdin: ; Stdout: ; Stderr: bind: Cannot assign requested address 2019-02-21 14:55:59,150.150 24730 ERROR neutron.agent.linux.ip_lib Traceback (most recent call last): 2019-02-21 14:55:59,150.150 24730 ERROR neutron.agent.linux.ip_lib File "/usr/lib/python2.7/dist-packages/neutron/agent/linux/ip_lib.py", line 1097, in _arping 2019-02-21 14:55:59,150.150 24730 ERROR neutron.agent.linux.ip_lib ip_wrapper.netns.execute(arping_cmd, extra_ok_codes=[1]) 2019-02-21 14:55:59,150.150 24730 ERROR neutron.agent.linux.ip_lib File "/usr/lib/python2.7/dist-packages/neutron/agent/linux/ip_lib.py", line 916, in execute 2019-02-21 14:55:59,150.150 24730 ERROR neutron.agent.linux.ip_lib log_fail_as_error=log_fail_as_error, **kwargs) 2019-02-21 14:55:59,150.150 24730 ERROR neutron.agent.linux.ip_lib File "/usr/lib/python2.7/dist-packages/neutron/agent/linux/utils.py", line 151, in execute 2019-02-21 14:55:59,150.150 24730 ERROR neutron.agent.linux.ip_lib raise ProcessExecutionError(msg, returncode=returncode) 2019-02-21 14:55:59,150.150 24730 ERROR neutron.agent.linux.ip_lib ProcessExecutionError: Exit code: 2; Stdin: ; Stdout: ; Stderr: bind: Cannot assign requested address Earlier in logs following is seen: 2019-02-22 07:52:14,894.894 9528 DEBUG neutron.agent.linux.utils [-] Running command (rootwrap daemon): ['ip', 'netns', 'exec', 'snat-afe70a67-a007-4bcf-93ac-099aad63411c', 'ip', '-4', 'addr', 'del', '10.13.250.14/32', 'dev', 'qg-af0de258-a8'] execute_rootwrap_daemon /usr/lib/python2.7/dist-packages/neutron/agent/linux/utils.py:108 2019-02-22 07:52:14,922.922 9528 DEBUG neutron.agent.linux.utils [-] Running command (rootwrap daemon): ['ip', 'netns', 'exec', 'snat-afe70a67-a007-4bcf-93ac-099aad63411c', 'conntrack', '-D', '-d', '10.13.250.14'] execute_rootwrap_daemon /usr/lib/python2.7/dist-packages/neutron/agent/linux/utils.py:108 So centralized floating ip is deleted from gw device for some reason. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1817306/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
