[Yahoo-eng-team] [Bug 1362416] [NEW] midonet: Deletes incorrect nested DHCP subnet

2014-08-27 Thread Angus Lees
Public bug reported: midonet "delete_dhcp" function doesn't check subnet length when searching for the DHCP entries to delete. This means it can delete the wrong subnet entry if two are nested (ie: have the same prefix, but different lengths). Disclaimer: I don't have midonet equipment and don't

[Yahoo-eng-team] [Bug 1362405] [NEW] 'Force' option broken for quota update

2014-08-27 Thread Kieran Spear
Public bug reported: This change broke the ability to force quotas below the current in-use value by adding new validation checks: https://review.openstack.org/#/c/28232/ $ nova quota-update --force --cores 0 132 ERROR (BadRequest): Quota limit must be greater than 1. (HTTP 400) (Request-ID: r

[Yahoo-eng-team] [Bug 1358155] Re: Using CLI I am able to stop server when it is locked

2014-08-27 Thread Thang Pham
I cannot reproduce this bug based on the steps you listed above. I get the following error, which is correct: $ nova stop test1 ERROR (Conflict): Instance f7961e90-29c8-4e5d-8e8e-34ad7e46b834 is locked (HTTP 409) (Request-ID: req-5193f0fb-3cd5-4603-80ea-74585caae612) However, if I attempt to us

[Yahoo-eng-team] [Bug 1358158] Re: unable to get servers locked status

2014-08-27 Thread Ghanshyam Mann
*** This bug is a duplicate of bug 1326553 *** https://bugs.launchpad.net/bugs/1326553 It nothing to do with Tempest :) ** Project changed: tempest => nova ** This bug has been marked a duplicate of bug 1326553 Instance lock/unlock state is not presented anywhere -- You received this b

[Yahoo-eng-team] [Bug 1358158] [NEW] unable to get servers locked status

2014-08-27 Thread Launchpad Bug Tracker
You have been subscribed to a public bug: 1. When one stop a server then it's status is - "SHUTOFF" 2. When I start a server successfully it's status is - "ACTIVE" but when I lock a server using following command - # nova lock and when I check the server status using - # nova show , or # nov

[Yahoo-eng-team] [Bug 1358155] Re: Using CLI I am able to stop server when it is locked

2014-08-27 Thread Ghanshyam Mann
What was the Role? was it Admin. I think you have performed this operation with Admin role (Please confirm). Server can be stopped only from two state ACTIVE or ERROR. If server is locked then only Admin can stop the server. Non admin user will get the conflict error if they try the same. Tempe

[Yahoo-eng-team] [Bug 1358155] [NEW] Using CLI I am able to stop server when it is locked

2014-08-27 Thread Launchpad Bug Tracker
You have been subscribed to a public bug: I am using devstack + tempest - Operations are as - 1. [raies@localhost devstack]$ nova list +--+-+++-+---+ | ID | Name

[Yahoo-eng-team] [Bug 1362347] [NEW] gneutron-ns-meta invokes oom-killer during gate runs

2014-08-27 Thread Matthew Treinish
Public bug reported: Occasionally a neutron gate job fails because the node runs out of memory. oom-killer is invoked and it starts killing processes to save the node. (which just causes cascading issues) The kernel logs show that oom-killer is being invoked by neutron-ns-meta. An example of one

[Yahoo-eng-team] [Bug 1362343] [NEW] weak digest algorithm for PKI

2014-08-27 Thread Brant Knudson
Public bug reported: The digest algorithm for PKI tokens is the openssl default of sha1. This is a weak algorithm and some security standards require a stronger algorithm such as sha256. Keystone should make the token digest hash algorithm configurable so that deployments can use a stronger algori

[Yahoo-eng-team] [Bug 1362344] [NEW] Tests for Trusts don't actually test the roles provided in the trust reference

2014-08-27 Thread Lance Bragstad
Public bug reported: The tests for Trusts leverage the test_v3.py module and are housed in test_v3_auth.py. These tests use the new_trust_ref() provided in test_v3.py to build new trust references [1]. The new_trust_ref method is suppose to go through and build a list of role ids that can be used

[Yahoo-eng-team] [Bug 1362325] [NEW] Dashboard with slug "sahara" is not registered

2014-08-27 Thread Matt Riedemann
Public bug reported: Saw this in a nova patch going through the check queue: http://logs.openstack.org/03/103703/5/check/check-tempest-dsvm- full/525cfaf/logs/horizon_error.txt.gz [Wed Aug 27 18:07:56.251879 2014] [:error] [pid 20373:tid 140464345409280] Internal Server Error: /project/ [Wed Au

[Yahoo-eng-team] [Bug 1362308] [NEW] Use dict_extend_functions mechanism to populate provider network attributes in Nuage Plugin

2014-08-27 Thread Divya ChanneGowda
Public bug reported: Use dict_extend_functions mechanism to handle populating additional provider network attributes into Network model. ** Affects: neutron Importance: Undecided Assignee: Divya ChanneGowda (divya-hc) Status: New ** Tags: nuage ** Tags added: nuage ** Chang

[Yahoo-eng-team] [Bug 1362309] [NEW] Creating an endpoint with an invalid service_id returns the wrong error code

2014-08-27 Thread David Stanek
Public bug reported: When creating or updating an endpoint with an invalid service_id specified the server returns a 404 instead of a 400. While it's true that the service can't be found, that's not the resource the client is attempting to access. This is misleading. ** Affects: keystone Im

[Yahoo-eng-team] [Bug 1056437] Re: L3 agent should support provider external networks

2014-08-27 Thread Cedric Brandily
This bug has been solved in trunk[1] (icehouse) and backported to stable/havana[2]: When external_network_bridge and gateway_external_network_id are empty, l3-agent uses provider attributes to deploy the external network [1] https://review.openstack.org/59359 [2] https://review.openstack.org/68601

[Yahoo-eng-team] [Bug 1362301] [NEW] neutron.plugins.openvswitch.agent.ovs_neutron_agent fails to configure bridges

2014-08-27 Thread Tom Carroll
Public bug reported: I'm testing icehouse on Xenserver release Creedance (what will be 6.5). The kernel is 3.10. When iptables-restore is called via neutron- rootwrap-xen-dom0, the iptables-restore produces warnings that the state netfilter module is obsolete (but the command does exits with 0). T

[Yahoo-eng-team] [Bug 1362291] Re: Project creation attributes in Identity API are inconsistent with implementation

2014-08-27 Thread Lance Bragstad
The implementation does make sure a `domain_id` is supplied in the project reference: https://github.com/openstack/keystone/blob/f4f0bdf092edf7ba6e74019f5524629fd2ad85ce/keystone/assignment/controllers.py#L399 This invalids this bug since the user doesn't *have* to specific a `domain_id` in the r

[Yahoo-eng-team] [Bug 1362291] [NEW] Project creation attributes in Identity API are inconsistent with implementation

2014-08-27 Thread Lance Bragstad
Public bug reported: The Identity API lists `domain_id` as an optional attribute when creating a project. If a `domain_id` is optional, it can be supplied in the request as a valid id string, supplied in the request with value None, or not supplied in the request at all. Currently, the Keystone i

[Yahoo-eng-team] [Bug 1361413] Re: LBaaS documentation is outdated , shows listeners instead of VIPs

2014-08-27 Thread Anne Gentle
Neutron bug triager, you can move to the openstack-api-site project. ** Changed in: neutron Status: Incomplete => Confirmed ** Also affects: openstack-api-site Importance: Undecided Status: New ** Changed in: openstack-api-site Status: New => Confirmed -- You received t

[Yahoo-eng-team] [Bug 1362268] [NEW] Data Table update is recursive.

2014-08-27 Thread Charles V Bock
Public bug reported: Data table refresh seems to be recursive causing a very large number of Ajax refresh calls if more than one table row is being updated. Check out this line in the tables JS: https://github.com/openstack/horizon/blob/master/horizon/static/horizon/js/horizon.tables.js#L106 For

[Yahoo-eng-team] [Bug 1362242] [NEW] bridge_mappings isn't bound to any segment warning from l2pop

2014-08-27 Thread Carl Baldwin
Public bug reported: Rossella asked me about this yesterday [1]. A brief discussion in the DVR meeting this morning [2] seems to indicate it is not a serious problem. But, I thought I'd submit this bug as a place to land for others who see this warning. Hopefully at some point we can get it cle

[Yahoo-eng-team] [Bug 1362244] [NEW] Issues with Nova Evacuate API

2014-08-27 Thread Majid
Public bug reported: We have deployed OpenStack Icehouse with Legacy Networking setup and we are building our instances on shared storage (NFS). We want to protect VMs when a host (compute node) fails. When we use Nova Evacuate API with "--on-shared-storage" option two issues happens: 1- Someti

[Yahoo-eng-team] [Bug 1362245] [NEW] Update Endpoint Filter APIs

2014-08-27 Thread Bob Thyne
Public bug reported: Henry-Nash made a good comment regarding the existing/new Endpoint Filter API. Currently the API looks like: GET /OS-EP-FILTER/projects/$project_id/endpoints/$endpoint_id HEAD /OS-EP-FILTER/projects/$project_id/endpoints/$endpoint_id DELETE /OS-EP-FILT

[Yahoo-eng-team] [Bug 1362233] [NEW] instance_create() DB API method implicitly creates additional DB transactions

2014-08-27 Thread Roman Podoliaka
Public bug reported: In DB API code we have a notion of 'public' and 'private' methods. The former are conceptually executed within a *single* DB transaction and the latter can either create a new transaction or participate in the existing one. The whole point is to be able to roll back the result

[Yahoo-eng-team] [Bug 1362221] [NEW] VMs fail to start when Ceph is used as a backend for ephemeral drives

2014-08-27 Thread Roman Podoliaka
Public bug reported: VMs' drives placement in Ceph option has been chosen (libvirt.images_types == 'rbd'). When user creates a flavor and specifies: - root drive size >0 - ephemeral drive size >0 (important) and tries to boot a VM, he gets "no valid host was found" in the scheduler log: E

[Yahoo-eng-team] [Bug 1362213] [NEW] haproxy configuration spams logged-in users when no servers are available

2014-08-27 Thread John Schwarz
Public bug reported: On certain systems which use the default syslog configuration, using haproxy-based LBaaS causes error logs to spam all the logged-in users: Message from syslogd@alpha-controller at Jun 9 01:32:07 ... haproxy[2719]:backend 32fce5ee-b7f7-4415-a572-a83eba1be6b0 has no server

[Yahoo-eng-team] [Bug 1362200] [NEW] Port details overview Fixed IP field "none" not translated

2014-08-27 Thread Aaron Sahlin
Public bug reported: In /openstack_dashboard/dashboards/project/networks/templates/networks/ports/_detail_overview.html, "None" is not translated. Should be {% trans "None" %} {% if port.fixed_ips.items|length > 1 %} {% for ip in port.fixed_ips %} {% trans "IP address:"

[Yahoo-eng-team] [Bug 1362194] [NEW] _sync_power_state locks during deployment

2014-08-27 Thread Kyle L. Henderson
Public bug reported: In nova/compute/manager.py, _sync_power_states() uses a synchronized() lock to lock on the instance uuid before reconciling the power states of the instance between OpenStack and the compute driver. It purposely conflicts with the instance uuid lock on deployment (do_build_an

[Yahoo-eng-team] [Bug 1362191] [NEW] Deprecated & remove the libvirt volume_drivers config parameter

2014-08-27 Thread Daniel Berrange
Public bug reported: In this thread the topic of deprecating and removing config parameters related to extension points for non-public APIs was discussed. The consensus was that such extension points should not be exposed and that instead people wishing to develop extensions should be doing so on

[Yahoo-eng-team] [Bug 1362181] [NEW] Multi-domain has problems with domain drivers

2014-08-27 Thread Marcos Lobo
Public bug reported: My Environment -- I've install RDO Openstack Icehouse, then I've upgrade to keystone-2014.2.b2 from launchpad tarball. I'm using SQL (not LDAP). With standard installation, we have only 1 domain, the "default" domain. I did not configure nothing more. What I wan

[Yahoo-eng-team] [Bug 1362171] [NEW] Reuse process management classes from dnsmasq for radvd

2014-08-27 Thread Henry Gessau
Public bug reported: When reviewing/discussing the change to add functional tests for radvd[1] it was requested that radvd should be managed similar to the dnsmasq process. We should reuse the classes already existing for dnsmasq. Extract common functionality to allow them to work for both radvd a

[Yahoo-eng-team] [Bug 1362129] [NEW] For rbd image backend, disk IO rate limiting isn't supported

2014-08-27 Thread Yaguang Tang
Public bug reported: when using rbd as disk backend. images_type=rbd in nova.conf disk IO tunning doesn't work as described https://wiki.openstack.org/wiki/InstanceResourceQuota ** Affects: nova Importance: Undecided Assignee: Yaguang Tang (heut2008) Status: New ** Tags: i

[Yahoo-eng-team] [Bug 1332660] Re: Update statistics from computes if RBD ephemeral is used

2014-08-27 Thread Roman Podoliaka
** Changed in: mos/5.0.x Status: Fix Committed => Fix Released ** Changed in: fuel/5.0.x Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.la

[Yahoo-eng-team] [Bug 1362100] [NEW] Pre-created ports get deleted on interface-detach

2014-08-27 Thread Tomasz GÅ‚uch
Public bug reported: Neutron ports which exist prior to being attached to instance are removed on interface-detach. Way to repeat: 1) Create port (neutron port-create ) 2) Create instance (nova boot ...) 3) Attach port created in 1) to instance (nova interface-attach --port-id ) 4) Detach port

[Yahoo-eng-team] [Bug 1362075] [NEW] Live migration fails on Hyper-V when boot from volume is used

2014-08-27 Thread Alessandro Pilotti
Public bug reported: Live migration fails on Hyper-V when boot from volume is used with CoW, as the target host tries to cache the root disk image in pre_live_migration, but in this case the image_ref is empty. ** Affects: nova Importance: Medium Status: Triaged ** Tags: hyper-v

[Yahoo-eng-team] [Bug 1362073] [NEW] Wrong string format result in exception can't be record into log in nova.virt.disk.vfs.guestfs.

2014-08-27 Thread Rui Chen
Public bug reported: In current master, nova.virt.disk.vfs.guestfs 136 except AttributeError as ex: 137 # set_backend_settings method doesn't exist in older 138 # libguestfs versions, so nothing we can do but ignore 139 -> LOG.info(_LI("Unab

[Yahoo-eng-team] [Bug 1362058] [NEW] osapi_compute_link_prefix configuration option has incorrect behavior for certain urls

2014-08-27 Thread Ishant Tyagi
Public bug reported: I am using osapi_compute_link_prefix conf option in nova.conf to get some other URL in response. I am using osapi_compute_link_prefix = https://16.125.106.106:8774/rest/compute output which I get is { "servers": [ { "id": "c85f3e06-daef-468f-a298-e5

[Yahoo-eng-team] [Bug 1362048] [NEW] SQLite timeout in glance image_cache

2014-08-27 Thread Jordan Pittier
Public bug reported: Hi, Sometime I get the following stack trace in Glance-API : GET /v1/images/42646b2b-cf0b-4b15-b011-19d0a6880ffb HTTP/1.1" 200 4970175 2.403391 for chunk in image_iter: File "/opt/stack/new/glance/glance/api/middleware/cache.py", line 281, in get_from_cache yield

[Yahoo-eng-team] [Bug 1362039] [NEW] Cannot Upgrade from Keystone Essex to Keystone Icehouse

2014-08-27 Thread Leigh Hayward
Public bug reported: When trying to update from Essex to Icehosue in a test environment with an existing keystone daabase table I get the following error: 6:07:38.888 11464 TRACE keystone return versioning_api.upgrade(engine, repository, version)#0122014-08-26 16:07:38.888 11464 TRACE keysto

[Yahoo-eng-team] [Bug 1362007] [NEW] Empty supported backend list in Keystone architecture documentation

2014-08-27 Thread Alexander
Public bug reported: Found just before: http://docs.openstack.org/developer/keystone/architecture.html#rules in block: http://docs.openstack.org/developer/keystone/architecture.html#approach-to-authorization-policy ...Backends included in Keystone are: ** Affects: keystone Importance: Und