[Yahoo-eng-team] [Bug 1488362] Re: Network ports are not down when network admin-state is made down

2015-08-25 Thread Jeremy Stanley
I've switched this to a regular public bug and marked the security advisory task won't fix since this doesn't seem to represent an exploitable security vulnerability on its own. It may indicate incomplete Neutron documentation around caveats of downing a network, and could also be seen as a

[Yahoo-eng-team] [Bug 1387543] Re: [OSSA 2015-015] Resize/delete combo allows to overload nova-compute (CVE-2015-3241)

2015-08-25 Thread Tristan Cacqueray
** Changed in: ossa Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1387543 Title: [OSSA 2015-015] Resize/delete combo allows

[Yahoo-eng-team] [Bug 1488362] Re: Network ports are not down when network admin-state is made down

2015-08-25 Thread Kevin Benton
Not a vulnerability. We don't document anywhere that setting admin_state_up to False is supposed to stop all traffic from flowing. ** Changed in: neutron Status: New = Opinion -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed

[Yahoo-eng-team] [Bug 1488513] [NEW] The pipeline job gate-neutron-dsvm-api is showing increased timeouts in the FWaaS test

2015-08-25 Thread Ryan Moats
Public bug reported: The pipeline job gate-neutron-dsvm-api is showing increased timeouts in the _try_delete_firewall piece of the test_firewall_insertion_mode_one_firewall_per_router test from neutron.tests.api.test_fwaas_extensions.FWaaSExtensionTestJSON. ** Affects: neutron Importance:

[Yahoo-eng-team] [Bug 1488513] Re: The pipeline job gate-neutron-dsvm-api is showing increased timeouts in the FWaaS test

2015-08-25 Thread Ryan Moats
Marking as invalid unless/until I see it more than once in the past 48 hours ** Changed in: neutron Status: New = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1488513

[Yahoo-eng-team] [Bug 1488522] [NEW] PKIZ provider with 10s token expiration time, horizon sesssion timeout, the user will cannot login unless clear the browser cache.

2015-08-25 Thread Shunli Zhou
Public bug reported: I use the keystone-manage to setup the PKI. In keystone.conf, provider is PKIZ and the token expiration set to 60s. When I log in to horizon, after a while the session timeout. Then I cannot login to the horizon unless i clear the browser cache. I can reproduce this

[Yahoo-eng-team] [Bug 1488537] [NEW] Lack of graceful handling of 404 error from neutron

2015-08-25 Thread Radomir Dopieralski
Public bug reported: When ceilometer tries to poll 'ip.floating'(checking existance of floating ip) pollster on undercloud node it fails with message: Continue after error from ip.floating: The server has either erred or is incapable of performing the requested operation. (HTTP 500)

[Yahoo-eng-team] [Bug 1488565] [NEW] Quiescing instance on live snapshot fails by AttributeError

2015-08-25 Thread Tomoki Sekiyama
Public bug reported: *Step to reproduce: - Enable live snapshot by adding following lines to nova.conf: [workarounds] disable_libvirt_livesnapshot = False - Boot instance from image with hw_qemu_guest_agent=yes and os_require_quiesce=yes properties. $ glance image-show f22-qga

[Yahoo-eng-team] [Bug 1476481] Re: RFE - Add Neutron API extension for packet forwarding

2015-08-25 Thread vikram.choudhary
Can be achieved via SFC. Not required to have a separate solution for this. ** Changed in: neutron Status: New = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1476481

[Yahoo-eng-team] [Bug 1485925] Re: setting AVAILABLE_REGIONS breaks header layout

2015-08-25 Thread Piotr Kopec
** Changed in: horizon Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Dashboard (Horizon). https://bugs.launchpad.net/bugs/1485925 Title: setting AVAILABLE_REGIONS breaks

[Yahoo-eng-team] [Bug 1488571] [NEW] neutronclient traces while running tests

2015-08-25 Thread Matthias Runge
Public bug reported: with a recent checkout on aug 25th: (being executted on the gate) 2015-08-25 13:53:51.266 | Traceback (most recent call last): 2015-08-25 13:53:51.266 | File /home/jenkins/workspace/gate-horizon-python27/horizon/tables/base.py, line 1270, in _filter_action 2015-08-25

[Yahoo-eng-team] [Bug 1484745] Re: DB migration juno- kilo fails: Can't create table nsxv_internal_networks

2015-08-25 Thread Henry Gessau
** Changed in: neutron Status: Incomplete = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1484745 Title: DB migration juno- kilo fails: Can't create table

[Yahoo-eng-team] [Bug 1452646] Re: nova quota for instances numbers may be incorrect

2015-08-25 Thread jichenjc
from comments above, we should set it Invalid since it's not bug ** Changed in: nova Status: Confirmed = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova).

[Yahoo-eng-team] [Bug 1488730] [NEW] ping the external network ip, clear external-gateway and then set the external-gateway back, the connection is not recoverd due to conntrack

2015-08-25 Thread Zhao Yi
Public bug reported: I found a small bug: ping the external network ip, clear external- gateway and then set the external-gateway back, the ping connection is not recoverd due to conntrack. here is the detailed operations: 1. make sure a vm is connected to a router: router1, and the router is

[Yahoo-eng-team] [Bug 1452039] Re: HAProxy LBaaS driver does not work with L3 HA

2015-08-25 Thread Launchpad Bug Tracker
[Expired for neutron because there has been no activity for 60 days.] ** Changed in: neutron Status: Incomplete = Expired -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1452039

[Yahoo-eng-team] [Bug 1488740] [NEW] neutron dbsync fails with 44621190bc02_add_uniqueconstraint_ipavailability_ranges.py

2015-08-25 Thread Emilien Macchi
Public bug reported: 2015-08-26 02:50:39.383 | Debug: Executing 'neutron-db-manage --config- file /etc/neutron/neutron.conf --config-file /etc/neutron/plugin.ini upgrade head' 2015-08-26 02:50:41.398 | Notice: /Stage[main]/Neutron::Db::Sync/Exec[neutron-db-sync]/returns: No handlers could be

[Yahoo-eng-team] [Bug 1405135] Re: Neutron lbaas can't update vip session-persistence's cookie_name

2015-08-25 Thread Dongcan Ye
** Changed in: neutron Assignee: Dongcan Ye (hellochosen) = (unassigned) ** Changed in: neutron Status: In Progress = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron.

[Yahoo-eng-team] [Bug 1488747] [NEW] algorithm error in function _modify_rules of iptables_manager.py

2015-08-25 Thread Zhangqi Chen
Public bug reported: Reproduce: 1. delete all rules in compute node. iptables --flush 2. restart neutron-openvswitch-agent, and neutron-openvswitch-agent will try to rebuild all chains and rules. Then a error message can be found in neutron-openvswitch-agent log file, like belows: Stdout:

[Yahoo-eng-team] [Bug 1488753] [NEW] ephemeral and root device filesystems should be labeled

2015-08-25 Thread Jianghua Wang
Public bug reported: Similar as bug 828357 which is against on libvirt, we should label the FileSystems for ephemeral and root device which running on XenServer. With a meaningful label, it's easier to get the device's type and allow you to easily add entries to fstab just as what is mentioned in

[Yahoo-eng-team] [Bug 1488360] [NEW] CONF.task.task_time_to_live doesn't work

2015-08-25 Thread wangxiyuan
Public bug reported: Reproduce: 1.set task_time_to_live to 1 in glance-api.conf: task_time_to_live = 1 2. restart glance-api 3. create a import task { type:import, input:{ import_from:http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86_64-disk.img;,

[Yahoo-eng-team] [Bug 1488369] [NEW] Default panel not registered shown when unregister is called from customisation module

2015-08-25 Thread Karthik
Public bug reported: Steps to reproduce the issue. 1) Create overrides.py(customisation module). 2) Call unregister for a default panel of any dashboard. 3) You get an exception saying Default Panel is not registered although default panel was registered. ** Affects: horizon Importance:

[Yahoo-eng-team] [Bug 1488347] [NEW] Can't specify identity endpoint for token validation among several keystone servers in keystonemiddleware

2015-08-25 Thread Chaoyi Huang
Public bug reported: Issue: Can't specify identity endpoint among several keystone servers in keystonemiddleware A prototype was executed to verify that KeyStone fernet token can work in multi-site OPNFV cloud(in OpenStack terms, multi-OpenStack regions):

[Yahoo-eng-team] [Bug 1488619] [NEW] Neutron API reports both routers in active state for L3 HA

2015-08-25 Thread Abhishek Chanda
Public bug reported: I am running Kilo with L3 HA. Here is what I see: # neutron --insecure --os-project-domain-name default --os-user-domain-name default l3-agent-list-hosting-router test-router +--+-++---+--+ | id

[Yahoo-eng-team] [Bug 1488619] Re: Neutron API reports both routers in active state for L3 HA

2015-08-25 Thread Assaf Muller
After an IRC conversation, this turned out to be an SELinux issue. ** Changed in: neutron Status: New = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1488619 Title:

[Yahoo-eng-team] [Bug 1433609] Re: Not adding a image block device mapping causes some valid boot requests to fail

2015-08-25 Thread melanie witt
https://review.openstack.org/#/c/165932/ was released in 2.24.0 ** Also affects: python-novaclient Importance: Undecided Status: New ** Changed in: python-novaclient Importance: Undecided = Medium ** Changed in: python-novaclient Status: New = Fix Released -- You received

[Yahoo-eng-team] [Bug 1488435] [NEW] Resources on destination node doesn't cleanup if live-migration fails

2015-08-25 Thread Timofey Durakov
Public bug reported: I've deployed multinode devstack environment and tried to live-migrate volume-backed instance, live-migration fails during copying of glance image to destination. When it happens nova leaves destination host in inconsistent state, and attempt to run live-migration again

[Yahoo-eng-team] [Bug 1488451] [NEW] It had better to change the sequence of keystone.common.validate_token_bind's code

2015-08-25 Thread majianjun
Public bug reported: The part original code of keystone.common.validate_token_bind function is as follows --- def validate_token_bind(context, token_ref): ... bind = token_ref.bind # permissive and strict modes don't require there to be a bind permissive = bind_mode in

[Yahoo-eng-team] [Bug 1488437] [NEW] Fix the error of duplicate words.

2015-08-25 Thread zhangfeng
Public bug reported: remove duplicate word 'an' in file: 1.nova/locale/es/LC_MESSAGES/nova-log-error.po 2.nova/locale/nova-log-error.pot 3.nova/locale/tr_TR/LC_MESSAGES/nova-log-error.po 4.nova/locale/fr/LC_MESSAGES/nova-log-error.po 5.nova/locale/it/LC_MESSAGES/nova-log-error.po ** Affects:

[Yahoo-eng-team] [Bug 1488443] [NEW] Any action always cause error ( in kilo)

2015-08-25 Thread Kevin Tibi
Public bug reported: When I use French language in Horizon I have this trace : 2015-08-25 09:35:23,185 1024 ERROR django.request Internal Server Error: /dashboard/project/instances/ Traceback (most recent call last):   File /usr/lib/python2.7/site-packages/django/core/handlers/base.py, line

[Yahoo-eng-team] [Bug 1488619] Re: Neutron API reports both routers in active state for L3 HA

2015-08-25 Thread Abhishek Chanda
Sorry for the miscommunication. This isn't confirmed to be a SELinux issue right now. We will keep debugging with the pointers you provided. ** Changed in: neutron Status: Invalid = New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is

[Yahoo-eng-team] [Bug 1488637] [NEW] tox -e docs fails trying to import nova.pci.device

2015-08-25 Thread Matt Riedemann
Public bug reported: The nova.pci.device module was removed in: https://github.com/openstack/nova/commit/ee2ecfc68aaf52223d6491dd7a366682d06c03c6 Now tox -e docs fails: 2015-08-25 12:14:13.393 7869 CRITICAL nova [-] SphinxWarning: /home/mriedem/git/nova/doc/source/api/nova.pci.device.rst:4:

[Yahoo-eng-team] [Bug 1488637] Re: tox -e docs fails trying to import nova.pci.device

2015-08-25 Thread Matt Riedemann
I must have had some stale files under nova/doc/source/api, after deleting that and rebuilding it was fine. ** Changed in: nova Status: New = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute

[Yahoo-eng-team] [Bug 1488645] [NEW] Fix typo on b/nova/tests/unit/api/ec2/test_api.py

2015-08-25 Thread Jorge Niedbalski
Public bug reported: [Description] Test /nova/tests/unit/api/ec2/test_api.py has a typo on the method test_properties_root_defice_name, should be called test_properties_root_device_name ** Affects: nova Importance: Undecided Assignee: Jorge Niedbalski (niedbalski) Status:

[Yahoo-eng-team] [Bug 1488637] Re: tox -e docs fails trying to import nova.pci.device

2015-08-25 Thread Matt Riedemann
We can still make the tox -e docs target better by automatically removing doc/source/api and doc/build in tox.ini so I'll make that change. ** Changed in: nova Status: Invalid = Confirmed ** Tags added: low-hanging-fruit ** Changed in: nova Importance: Undecided = Low ** Changed in:

[Yahoo-eng-team] [Bug 1488347] Re: Can't specify identity endpoint for token validation among several keystone servers in keystonemiddleware

2015-08-25 Thread Dolph Mathews
A related conversation is occurring on the mailing list [1]. It sounds like this is a regression with the introduction of auth plugins to keystonemiddleware (Jamie, correct me if I'm wrong), so you might want to try using an older version of keystonemiddleware as a workaround. [1]:

[Yahoo-eng-team] [Bug 1488635] [NEW] xen: resize assumes an ephemeral was migrated if the new flavor has one

2015-08-25 Thread Andrew Laski
Public bug reported: When resizing from a flavor with no ephemeral disk to a flavor which includes one an error is raise due to a migrated ephemeral disk not being found. The migration code needs to consider the original flavor when looking for migrated ephemeral disks. 2015-08-20 14:38:07.744

[Yahoo-eng-team] [Bug 1488696] [NEW] Compute *.percent metrics are always 0

2015-08-25 Thread Joe Cropper
Public bug reported: It seems that with the recent update to the Nova virt metrics framework, the 'percent' related metrics always 0 now in the database. After tracing through the code, I determined tha the virt_driver and resource tracker will still behaving properly and the

[Yahoo-eng-team] [Bug 1488686] [NEW] Mac address on linux bridge can change depending on taps plugged in

2015-08-25 Thread Andrew Melton
Public bug reported: When the linux bridge nova-network driver creates it's bridge, it makes an assumption that the bridge's mac will be the mac from the first device plugged into it. This is the case at first, when there is only one device. But, when more devices are plugged in, the default

[Yahoo-eng-team] [Bug 1401121] Re: SimpleCIDRAffinityFilter should accept missing host_ip

2015-08-25 Thread John L. Villalovos
Marking as WONTFIX as bug submitter hasn't continued with patch. Feel free to re-open. ** Changed in: nova Status: In Progress = Incomplete ** Changed in: nova Status: Incomplete = Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering

[Yahoo-eng-team] [Bug 1488362] Re: Network ports are not down when network admin-state is made down

2015-08-25 Thread Jeremy Stanley
Since this report concerns a possible security risk, an incomplete security advisory task has been added while the core security reviewers for the affected project or projects confirm the bug and discuss the scope of any vulnerability along with potential solutions. ** Also affects: ossa

[Yahoo-eng-team] [Bug 1219690] Re: save the run_tests.sh output to file

2015-08-25 Thread David Stanek
https://review.openstack.org/#/c/199343/ has been merged and run_tests.sh has been deleted. ** Changed in: keystone Status: In Progress = Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone.

[Yahoo-eng-team] [Bug 1467589] Re: Remove Cinder V1 support

2015-08-25 Thread Ivan Kolodyazhny
** Also affects: grenade Importance: Undecided Status: New ** Changed in: grenade Assignee: (unassigned) = Ivan Kolodyazhny (e0ne) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova).

[Yahoo-eng-team] [Bug 1488507] [NEW] Wily daily MAAS cloud image fails to fully install.

2015-08-25 Thread Brad Figg
Public bug reported: Aug 24 20:47:32 ubuntu cloud-init[804]: 2015-08-24 20:47:32,158 - util.py[WARNING]: Getting data from class cloudinit.sources.DataSourceMAAS.DataSourceMAAS' failed Aug 24 20:47:32 ubuntu pollinate[850]: ERROR: Network communication failed [6]\n % Total% Received %

[Yahoo-eng-team] [Bug 1488715] [NEW] There is an unnecessary condition judgment at the keystone.token.controllers._get_project_id_from_auth function

2015-08-25 Thread majianjun
Public bug reported: At the keystone.token.controllers._get_project_id_from_auth function , the code about tenant_id judgment is unnecessary. --- def _get_project_id_from_auth(self, auth): Extract tenant information from auth dict. Returns a valid tenant_id if it exists, or