[Yahoo-eng-team] [Bug 1446074] [NEW] FWaaS - Missing tenant_id validation between firewall and firewall_policy in creating/updating firewall

2015-04-20 Thread Yushiro FURUKAWA
Public bug reported: In creating/updating firewall, it is not implemented tenant_id check in validation. Therefore, when executing following operation with admin privilege, the error continues to tracing into neutron's log even the firewall has created. [Operation] 1. Create firewall-policy(sha

[Yahoo-eng-team] [Bug 1446078] [NEW] Apache error logs contains non-error messages

2015-04-20 Thread Aakash Soni
Public bug reported: In the file /var/log/apache2/horizon.error.log there are many lines that are not errors: [Fri Apr 17 14:49:32.604840 2015] [:error] [pid 28933:tid 140515448411904] Login successful for user "admin". [Fri Apr 17 13:04:25.892490 2015] [:error] [pid 28933:tid 140515448411904]

[Yahoo-eng-team] [Bug 1446082] [NEW] Instance without "extra" data crashes nova-compute

2015-04-20 Thread Christoph Dwertmann
Public bug reported: I'm upgrading from Icehouse to Kilo. I have a single instance that was created in Icehouse. After the upgrade, nova-compute crashes because it's looking for instance "extra" data that is not there. To fix this, we need to check if there is any "extra" data for the instance be

[Yahoo-eng-team] [Bug 1446087] [NEW] Impossible to create port with port_security_enabled = False and security_groups=[]

2015-04-20 Thread Dmitry Ratushnyy
Public bug reported: Creating port with specifying both port_security_enabled=False and security_groups=[] raises PortSecurityAndIPRequiredForSecurityGroups Steps to reproduce: 1) Make sure that port security is enabled for ML2 (for DevStack https://review.openstack.org/#/c/162063/) 2) create n

[Yahoo-eng-team] [Bug 1446102] [NEW] Unable to establish connection failure in rpcapi leads to leaving vm in migrating state

2015-04-20 Thread Bartosz Fic
Public bug reported: To reproduce this bug: 1. Hang migrate_server() method in /nova/conductor/rpcapi.py Before this call: return cctxt.call(context, 'migrate_server', **kw) You can add for example: "import pdb; pdb.set_trace();" 2. Try to live-migration vm to another host 3. The call shoul

[Yahoo-eng-team] [Bug 1383465] Re: [pci-passthrough] nova-compute fails to start

2015-04-20 Thread Nikola Đipanov
** Changed in: nova Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1383465 Title: [pci-passthrough] nova-compute fails to star

[Yahoo-eng-team] [Bug 1446161] [NEW] Support multiple IPv6 prefixes on internal router ports for an HA Router.

2015-04-20 Thread Sridhar Gaddam
Public bug reported: As part of BP multiple IPv6 prefixes, we can have multiple IPv6 prefixes on router internal ports. Patch, I7d4e8194815e626f1cfa267f77a3f2475fdfa3d1, adds the necessary support for a legacy router. For an HA router, instead of configuring the addresses on the router internal p

[Yahoo-eng-team] [Bug 1435396] Re: No notifications for role grants using v2

2015-04-20 Thread Thierry Carrez
Agree with fungi ** Changed in: ossa Status: Incomplete => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1435396 Title: No notifications for role grants using v2 Sta

[Yahoo-eng-team] [Bug 1439928] Re: can create the same type and name of a service with v3 API

2015-04-20 Thread Dolph Mathews
I don't see any reason for this to be a "Medium" bug - there's absolutely no negative impact described here. In fact, the documented behavior is as-designed. To quote myself from the code review above: The most obvious conflicting use case I can think of is having two services of the same type i

[Yahoo-eng-team] [Bug 1446253] [NEW] docs need to be updated to follow conventions

2015-04-20 Thread Shilla Saebi
Public bug reported: In all the horizon docs, the conventions need to be updated per the doc conventions wiki (see link below). This needs to be done for all the docs throughout. one of the pages that needs to be updated: http://docs.openstack.org/developer/horizon/topics/policy.html link to the

[Yahoo-eng-team] [Bug 1445199] Re: Nova user should not have admin role

2015-04-20 Thread Thierry Carrez
** Changed in: ossa Status: Incomplete => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1445199 Title: Nova user should not have admin role Status in de

[Yahoo-eng-team] [Bug 1443798] Re: Restrict netmask of CIDR to avoid DHCP resync

2015-04-20 Thread Thierry Carrez
** Changed in: ossa Importance: Undecided => High ** Changed in: ossa Status: Incomplete => Confirmed ** Also affects: neutron/kilo Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribe

[Yahoo-eng-team] [Bug 1446261] [NEW] gate-neutron-dsvm-functional race fails HA/DVR tests with network namespace not found

2015-04-20 Thread Matt Riedemann
Public bug reported: http://logs.openstack.org/21/174821/1/gate/gate-neutron-dsvm- functional/eb6b441/console.html#_2015-04-20_07_41_14_649 This is happening quite often and is not just this specific test: 2015-04-20 07:41:14.649 | 2015-04-20 07:41:14.642 | {4} neutron.tests.functional.agent.te

[Yahoo-eng-team] [Bug 1445335] Re: create/delete flavor permissions should be controlled by policy.json

2015-04-20 Thread Jeremy Stanley
You've switched the status of this bug to indicate an exploitable security vulnerability. Can you please clarify the conditions under which this bug can be exploited by a malicious actor, and the extent of the impact it implies? ** Also affects: ossa Importance: Undecided Status: New **

[Yahoo-eng-team] [Bug 1446284] [NEW] functional tests fail non-deterministicly because of full-stack

2015-04-20 Thread John Schwarz
Public bug reported: On startup, the L3 agent looks for namespaces to clean that don't belong to him, in order to minimize system resources (namespaces) in the machine. The fullstack tests run an l3 agent that after deletes some namespaces that he doesn't know. This in turns causes the deletion o

[Yahoo-eng-team] [Bug 1446288] [NEW] DVR functional tests leak resources

2015-04-20 Thread Assaf Muller
Public bug reported: test_dvr_router_add_internal_network_set_arp_cache and test_dvr_router_rem_fips_on_restarted_agent don't clean up after themselves when run successfully. ** Affects: neutron Importance: Undecided Assignee: Assaf Muller (amuller) Status: In Progress ** Chan

[Yahoo-eng-team] [Bug 1441300] Re: keystone-manage man page updates

2015-04-20 Thread Thierry Carrez
** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone/kilo Milestone: None => kilo-rc2 ** Changed in: keystone/kilo Status: New => In Progress ** Changed in: keystone/kilo Importance: Undecided => Medium -- You received this bug notifi

[Yahoo-eng-team] [Bug 1446286] [NEW] Exporting a deactivated image returns a generic task failure message

2015-04-20 Thread Luke Wollney
Public bug reported: Overview: When a user attempts to export a deactivated image, the operation fails as expected, but the message that is returned explaining why it failed is very generic. Steps to reproduce: 1) Import an image as user A 2) Deactivate the image as admin 3) Export the image as

[Yahoo-eng-team] [Bug 1415106] Re: gate-tempest-dsvm-large-ops fails with RPC MessagingTimeout in _try_deallocate_network

2015-04-20 Thread Matt Riedemann
** Changed in: pbr Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1415106 Title: gate-tempest-dsvm-large-ops fails with RPC Me

[Yahoo-eng-team] [Bug 1426397] Re: tempest.scenario.test_network_v6.TestGettingAddress.test_slaac_from_os intermittently fails with MismatchError

2015-04-20 Thread Matt Riedemann
** No longer affects: neutron -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1426397 Title: tempest.scenario.test_network_v6.TestGettingAddress.test_slaac_from_os intermittently fails

[Yahoo-eng-team] [Bug 1446326] [NEW] 403 response from Nova when making a DELETE call for an image in pending_delete

2015-04-20 Thread nikhil komawar
Public bug reported: Context and information: -- Currently, 404 is seen by the user when "image-delete" call is made via the Glance API or through the Images API of Nova for an Image in "deleted" status. However, if an Image is in "pending_delete" and a user w

[Yahoo-eng-team] [Bug 1432065] Re: DBDeadlock: (OperationalError) (1213, 'Deadlock found when trying to get lock; try restarting transaction') 'DELETE FROM ipallocationpools WHERE ipallocationpools.id

2015-04-20 Thread Matt Riedemann
** Changed in: neutron Status: Confirmed => Fix Released ** Changed in: neutron Assignee: (unassigned) => Salvatore Orlando (salvatore-orlando) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.laun

[Yahoo-eng-team] [Bug 1446349] [NEW] L3 agent can fail to delete router silently

2015-04-20 Thread Assaf Muller
Public bug reported: The L3 agent currently tries to delete a router by wrapping the delete call in a try/except Exception block, but fails to log the caught exception. ** Affects: neutron Importance: Undecided Assignee: Assaf Muller (amuller) Status: In Progress ** Changed in

[Yahoo-eng-team] [Bug 1445917] Re: (juno) gate-grenade-dsvm-ironic-sideways failing with NoValidHost due to PortNotUsable

2015-04-20 Thread OpenStack Infra
Reviewed: https://review.openstack.org/175219 Committed: https://git.openstack.org/cgit/openstack/tempest/commit/?id=92b63aa8211b6a54f47c3ec2f1c77abf15017be8 Submitter: Jenkins Branch:master commit 92b63aa8211b6a54f47c3ec2f1c77abf15017be8 Author: Matt Riedemann Date: Sun Apr 19 15:45:38 2

[Yahoo-eng-team] [Bug 1446286] Re: Exporting a deactivated image returns a generic task failure message

2015-04-20 Thread nikhil komawar
How can this be a bug if export is not even a implemented task yet? ** Changed in: glance Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Glance. https://bugs.launchpad.net/bugs/1446286 Title: Expo

[Yahoo-eng-team] [Bug 1446376] [NEW] Not Authorized response from neutron causes nova to traceback with AttributeError

2015-04-20 Thread Eoghan Glynn
Public bug reported: version: stable/icehouse from 2014.2.2 onwards (does not impact stable/{juno|kilo}) nova-api fails to handle Not Authorized from neutron: 2015-04-20 00:49:29.399 22741 TRACE nova.api.openstack action_result = self.dispatch(meth, request, action_args) 2015-04-20 00:49:2

[Yahoo-eng-team] [Bug 1407721] Re: Add range support to all address fields in pci_passthrough_whitelist

2015-04-20 Thread Moshe Levi
** Changed in: nova Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1407721 Title: Add range support to all address fields in pci_pa

[Yahoo-eng-team] [Bug 1313800] Re: lock wait timeout while updating LB pool

2015-04-20 Thread Joe Gordon
Haven't seen this in a while, marking as invalid ** Changed in: neutron Status: Incomplete => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1313800 Title: lock wait time

[Yahoo-eng-team] [Bug 1313794] Re: lock_wait timeout caused by plug_vip_port

2015-04-20 Thread Joe Gordon
no, we are not seeing this. ** Changed in: neutron Status: Incomplete => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1313794 Title: lock_wait timeout caused by plug_vi

[Yahoo-eng-team] [Bug 1298355] Re: Lock wait timeout in update VIP status

2015-04-20 Thread Joe Gordon
The expiration timer hasn't started for some reason. ** Changed in: neutron Status: Incomplete => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1298355 Title: Lock wait

[Yahoo-eng-team] [Bug 1446405] [NEW] Test discovery is broken for the api and functional paths

2015-04-20 Thread Maru Newby
Public bug reported: The following failures in test discovery were noted: https://review.openstack.org/#/c/169962/ https://bugs.launchpad.net/neutron/+bug/1443480 It was eventually determined that the use of the unittest discovery mechanism to perform manual discovery in package init for the api

[Yahoo-eng-team] [Bug 1446418] [NEW] Redundant validation indicator

2015-04-20 Thread Shaoquan Chen
Public bug reported: In the new Launch Instance wizard, first step, there are redundant validation indicators for `Instance Name`. When the field is empty, it will show a red asterisk AND a warning icon. ** Affects: horizon Importance: Undecided Status: Invalid ** Changed in: horiz

[Yahoo-eng-team] [Bug 1446421] [NEW] Increasing gap between form-groups

2015-04-20 Thread Shaoquan Chen
Public bug reported: In new Launch Instance wizard, vertical margin between .form-groups is zero, causing form field too close. Steps to reproduce: - Open new Launch Instance wizard. - switch to Key Pare step - click on `Import Key Pair` button, you will see the Public Key field is too close to

[Yahoo-eng-team] [Bug 1446428] [NEW] Python-neutronclient command extension does not support parent_id in neutronV20.find_resourceid_by_name_or_id()

2015-04-20 Thread Sayaji Patil
Public bug reported: neutronV20.find_resourceid_by_name_or_id() when used without the parent_id parameter works . But in case we want to pass the parent_id to the method it fails with this error _fx() takes exactly 0 arguments (3 given) ** Affects: python-neutronclient Importance: Undecid

[Yahoo-eng-team] [Bug 1446449] [NEW] ironic hypervisor resource should be released for booting failed case

2015-04-20 Thread Haomeng,Wang
Public bug reported: nova boot failed in spawn step, the ironic hypervisor show the mem/cpu/disk resource still be occpied by the nova instance which is in error status, I understand for such boot failed case, the ironic hypervisor resource should be released once the boot is completed with error

[Yahoo-eng-team] [Bug 1446456] [NEW] remaining use of neutron.agent.linux.ovs_lib

2015-04-20 Thread YAMAMOTO Takashi
Public bug reported: neutron/tests/common/net_helpers.py still uses neutron.agent.linux.ovs_lib. it prevents some of functional tests from running. ** Affects: neutron Importance: Undecided Assignee: YAMAMOTO Takashi (yamamoto) Status: In Progress -- You received this bug not

[Yahoo-eng-team] [Bug 1423587] Re: tox -egenconfig appears broken on the juno branch

2015-04-20 Thread Launchpad Bug Tracker
[Expired for OpenStack Compute (nova) juno because there has been no activity for 60 days.] ** Changed in: nova/juno Status: Incomplete => Expired -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). ht

[Yahoo-eng-team] [Bug 1446465] [NEW] test_plug_succeeds failed for _create_namespace

2015-04-20 Thread YAMAMOTO Takashi
Public bug reported: _create_namespace method was recently removed (commit 7f7343b1afc0b1b953e5c36a753397a6d37316cb) but still has a few users. neutron/tests/functional/agent/linux/test_interface.py:namespace = self._create_namespace() neutron/tests/functional/agent/test_ovs_flows.py:

[Yahoo-eng-team] [Bug 1445335] Re: create/delete flavor permissions should be controlled by policy.json

2015-04-20 Thread Alex Xu
Yes, this isn't cause security vulnerability. We just add hard- permission checks in the v2 API, that make the flavor api is unconfiguable by policy.json. We just need remove the hard-code permission checks. ** Changed in: ossa Status: Incomplete => Invalid ** Tags removed: security -- Y