[Yahoo-eng-team] [Bug 1821357] [NEW] VRRP vip on VM not reachable from other network on DVR setup

2019-03-22 Thread David Rabel
Public bug reported:

Hi.

We are using OpenStack Queens with DVR and have the following problem:

We have a VRRP setup (OpenSense firewalls) on VMs. The vip is reachable
from alle other VMs in the same network, but not from VMs in different
networks. Both OpenSense VMs are reachable from the other network.


So, routing in general between the two networks works fine, but we cannot reach 
the vip from the other network.

Port Security is deactivated.

It does work if the VRRP master VM is on the same compute node as the
test VM trying to reach it.

Further investigation shows that when trying to ping the vip, the ICMP
message reaches the router interface on the compute node where the VM
sending it is located. But a ovs-tcpdump on patch-int port shows that
there is no traffic tunneled between the hosts.

So, if the VRRP master with the vip is on the same node as the VM trying
to reach it, it receives the ping and answers. If it is on a different
node, we can observe an arp request from the router interface only on
the node where the VM sending the ping is located. This arp request is
unanswered.


It seems to us that this is a bug in Neutron.

Yours
  David

** Affects: neutron
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1821357

Title:
  VRRP vip on VM not reachable from other network on DVR setup

Status in neutron:
  New

Bug description:
  Hi.

  We are using OpenStack Queens with DVR and have the following problem:

  We have a VRRP setup (OpenSense firewalls) on VMs. The vip is
  reachable from alle other VMs in the same network, but not from VMs in
  different networks. Both OpenSense VMs are reachable from the other
  network.

  
  So, routing in general between the two networks works fine, but we cannot 
reach the vip from the other network.

  Port Security is deactivated.

  It does work if the VRRP master VM is on the same compute node as the
  test VM trying to reach it.

  Further investigation shows that when trying to ping the vip, the ICMP
  message reaches the router interface on the compute node where the VM
  sending it is located. But a ovs-tcpdump on patch-int port shows that
  there is no traffic tunneled between the hosts.

  So, if the VRRP master with the vip is on the same node as the VM
  trying to reach it, it receives the ping and answers. If it is on a
  different node, we can observe an arp request from the router
  interface only on the node where the VM sending the ping is located.
  This arp request is unanswered.

  
  It seems to us that this is a bug in Neutron.

  Yours
David

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1821357/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp


[Yahoo-eng-team] [Bug 1815728] [NEW] Can delete port attached to VM without Nova noticing

2019-02-13 Thread David Rabel
Public bug reported:

In the Rocky release it still possible to delete a port that is attached
to a VM as primary network interface. Nova doesn't even seem to notice
when this happens. Shouldn't there be any kind of precaution form
Neutron's side?

Reproduce:

$ openstack port create ...
$ openstack server create --port ...
$ openstack port delete ...
$ openstack server show ...

** Affects: neutron
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1815728

Title:
  Can delete port attached to VM without Nova noticing

Status in neutron:
  New

Bug description:
  In the Rocky release it still possible to delete a port that is
  attached to a VM as primary network interface. Nova doesn't even seem
  to notice when this happens. Shouldn't there be any kind of precaution
  form Neutron's side?

  Reproduce:

  $ openstack port create ...
  $ openstack server create --port ...
  $ openstack port delete ...
  $ openstack server show ...

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1815728/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp


[Yahoo-eng-team] [Bug 1815594] [NEW] update-member throws 404

2019-02-12 Thread David Rabel
Public bug reported:

Hi, I'm using PackStack with OpenStack Rocky release.

When creating an image in project1 and adding project2 as a member to
it, project2 has pending status for the image. That's correct so far.

When switching to a user from project2 (_member_ role in that project)
and trying to do a glance image update, it fails with a 404. The image
cannot be found. It works neither with OSC nor with glanceclient, so it
might be a bug in Glance itself.

# glance-api --version
17.0.0

# glance --version
2.13.1

# openstack --version
openstack 3.16.2

** Affects: glance
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1815594

Title:
  update-member throws 404

Status in Glance:
  New

Bug description:
  Hi, I'm using PackStack with OpenStack Rocky release.

  When creating an image in project1 and adding project2 as a member to
  it, project2 has pending status for the image. That's correct so far.

  When switching to a user from project2 (_member_ role in that project)
  and trying to do a glance image update, it fails with a 404. The image
  cannot be found. It works neither with OSC nor with glanceclient, so
  it might be a bug in Glance itself.

  # glance-api --version
  17.0.0

  # glance --version
  2.13.1

  # openstack --version
  openstack 3.16.2

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1815594/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp


[Yahoo-eng-team] [Bug 1793351] [NEW] CONF.libvirt.snapshot_image_format does not always default to format of source image

2018-09-19 Thread David Rabel
Public bug reported:

It seems to be intended, that CONF.libvirt.snapshot_image_format defaults to 
the format of the source image.
That is also what the docs say. See for example 
https://docs.openstack.org/nova/latest/configuration/sample-config.html

If the format of the source image is raw, the raw image is only used as
a backing file with a qcow2 overlay. So find_disk() from nova's libvirt
utils will return the overlay file and qcow2 as a format.

What we want to use here is the format of the backing file.

** Affects: nova
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1793351

Title:
  CONF.libvirt.snapshot_image_format does not always default to format
  of source image

Status in OpenStack Compute (nova):
  New

Bug description:
  It seems to be intended, that CONF.libvirt.snapshot_image_format defaults to 
the format of the source image.
  That is also what the docs say. See for example 
https://docs.openstack.org/nova/latest/configuration/sample-config.html

  If the format of the source image is raw, the raw image is only used
  as a backing file with a qcow2 overlay. So find_disk() from nova's
  libvirt utils will return the overlay file and qcow2 as a format.

  What we want to use here is the format of the backing file.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1793351/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp


[Yahoo-eng-team] [Bug 1766257] [NEW] Image Service API v2 (CURRENT) broken link

2018-04-23 Thread David Rabel
Public bug reported:


This bug tracker is for errors with the documentation, use the following
as a template and remove or add fields as you see fit. Convert [ ] into
[x] to check boxes:

- [x] This doc is inaccurate in this way: broken link to
http://docs.openstack.org/developer/glance/tasks.html


---
Release: 16.0.0.0rc2.dev123 on 'Wed Apr 18 12:08:04 2018, commit c6376ea'
SHA: 
Source: 
https://git.openstack.org/cgit/openstack/glance/tree/api-ref/source/v2/index.rst
URL: https://developer.openstack.org/api-ref/image/v2/index.html

** Affects: glance
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1766257

Title:
  Image Service API v2 (CURRENT) broken link

Status in Glance:
  New

Bug description:

  This bug tracker is for errors with the documentation, use the
  following as a template and remove or add fields as you see fit.
  Convert [ ] into [x] to check boxes:

  - [x] This doc is inaccurate in this way: broken link to
  http://docs.openstack.org/developer/glance/tasks.html

  
  ---
  Release: 16.0.0.0rc2.dev123 on 'Wed Apr 18 12:08:04 2018, commit c6376ea'
  SHA: 
  Source: 
https://git.openstack.org/cgit/openstack/glance/tree/api-ref/source/v2/index.rst
  URL: https://developer.openstack.org/api-ref/image/v2/index.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1766257/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp


[Yahoo-eng-team] [Bug 1727941] [NEW] ML2 plug-in in neutron - Link to OpenStack Admin Guide does not make sense anymore

2017-10-27 Thread David Rabel
Public bug reported:


This bug tracker is for errors with the documentation, use the following
as a template and remove or add fields as you see fit. Convert [ ] into
[x] to check boxes:

- [x] This doc is inaccurate in this way:

There is a link to the OpenStack Admin Guide for more information on
provider networks and project networks. This is an old link (with a
wrong anchor), which will eventually lead to the OpenStack Networking
page that is linked in the same line.

Make a long story short: I would like to delete that link, since it is
useless.

It is in paragraph "Project network types". The link to
https://docs.openstack.org/admin-guide/networking-adv-features.html
#provider-networks

Yours
  David

---
Release: 11.0.2.dev40 on 2017-10-25 21:29
SHA: 2cafbe9e06909d8e9710ff57da6b288f56322901
Source: 
https://git.openstack.org/cgit/openstack/neutron/tree/doc/source/admin/config-ml2.rst
URL: https://docs.openstack.org/neutron/pike/admin/config-ml2.html

** Affects: neutron
 Importance: Undecided
 Assignee: David Rabel (rabel-b1)
 Status: New


** Tags: doc

** Changed in: neutron
 Assignee: (unassigned) => David Rabel (rabel-b1)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1727941

Title:
  ML2 plug-in in neutron - Link to OpenStack Admin Guide does not make
  sense anymore

Status in neutron:
  New

Bug description:

  This bug tracker is for errors with the documentation, use the
  following as a template and remove or add fields as you see fit.
  Convert [ ] into [x] to check boxes:

  - [x] This doc is inaccurate in this way:

  There is a link to the OpenStack Admin Guide for more information on
  provider networks and project networks. This is an old link (with a
  wrong anchor), which will eventually lead to the OpenStack Networking
  page that is linked in the same line.

  Make a long story short: I would like to delete that link, since it is
  useless.

  It is in paragraph "Project network types". The link to
  https://docs.openstack.org/admin-guide/networking-adv-features.html
  #provider-networks

  Yours
David

  ---
  Release: 11.0.2.dev40 on 2017-10-25 21:29
  SHA: 2cafbe9e06909d8e9710ff57da6b288f56322901
  Source: 
https://git.openstack.org/cgit/openstack/neutron/tree/doc/source/admin/config-ml2.rst
  URL: https://docs.openstack.org/neutron/pike/admin/config-ml2.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1727941/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp


[Yahoo-eng-team] [Bug 1489059] Re: "db type could not be determined" running py34

2017-03-13 Thread David Rabel
** Also affects: python-openstackclient
   Importance: Undecided
   Status: New

** Changed in: python-openstackclient
 Assignee: (unassigned) => David Rabel (rabel-b1)

** No longer affects: python-openstackclient

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1489059

Title:
  "db type could not be determined" running py34

Status in Aodh:
  Fix Released
Status in Barbican:
  Fix Released
Status in Bareon:
  Fix Released
Status in Cinder:
  Fix Released
Status in cloudkitty:
  Fix Released
Status in Fuel for OpenStack:
  In Progress
Status in Fuel for OpenStack mitaka series:
  Won't Fix
Status in Fuel for OpenStack newton series:
  In Progress
Status in Glance:
  Fix Released
Status in hacking:
  Fix Released
Status in heat:
  Fix Released
Status in Ironic:
  Fix Released
Status in ironic-lib:
  Fix Committed
Status in OpenStack Identity (keystone):
  Fix Released
Status in keystoneauth:
  Fix Released
Status in keystonemiddleware:
  Fix Released
Status in kolla:
  Fix Released
Status in Manila:
  Fix Released
Status in networking-midonet:
  Fix Released
Status in networking-odl:
  Fix Released
Status in networking-ofagent:
  Fix Released
Status in neutron:
  Fix Released
Status in Glance Client:
  Fix Released
Status in python-keystoneclient:
  Fix Released
Status in python-muranoclient:
  Fix Released
Status in python-solumclient:
  Fix Released
Status in python-swiftclient:
  In Progress
Status in Rally:
  Fix Released
Status in Sahara:
  Fix Released
Status in OpenStack Search (Searchlight):
  Fix Released
Status in senlin:
  Fix Released
Status in tap-as-a-service:
  Fix Released
Status in tempest:
  Fix Released
Status in zaqar:
  Fix Released
Status in python-ironicclient package in Ubuntu:
  Fix Committed

Bug description:
  When running tox for the first time, the py34 execution fails with an
  error saying "db type could not be determined".

  This issue is know to be caused when the run of py27 preceeds py34 and
  can be solved erasing the .testrepository and running "tox -e py34"
  first of all.

To manage notifications about this bug go to:
https://bugs.launchpad.net/aodh/+bug/1489059/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp