[Yahoo-eng-team] [Bug 1811605] Re: Tokenless authentication is broken

2019-02-15 Thread OpenStack Infra
Reviewed: https://review.openstack.org/635993 Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=1b261e8bec31a6de3905557abde0da93d5c0437a Submitter: Zuul Branch:master commit 1b261e8bec31a6de3905557abde0da93d5c0437a Author: Guang Yee Date: Fri Feb 8 16:56:40 2019

[Yahoo-eng-team] [Bug 1808691] Re: Alert user of Ec2 Datasource on lookalike cloud

2019-02-15 Thread Launchpad Bug Tracker
[Expired for cloud-init because there has been no activity for 60 days.] ** Changed in: cloud-init Status: Incomplete => Expired -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to cloud-init.

[Yahoo-eng-team] [Bug 1816209] [NEW] Could not parse ip addr

2019-02-15 Thread Nils K
Public bug reported: cloud-init fails at stage "init" because it couldn't parse "ip addr show". Cloud provider: Strato AG Germany Environment: Virtuozzo Minimal cloud-init configuration which leads to failure: #cloud-config cloud_init_modules: - users-groups users: - name:

[Yahoo-eng-team] [Bug 1814589] Re: Tokenless auth: ephemeral user mapping is broken

2019-02-15 Thread OpenStack Infra
Reviewed: https://review.openstack.org/634816 Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=505fe204795330c12bc00fce3510902a5b59457d Submitter: Zuul Branch:master commit 505fe204795330c12bc00fce3510902a5b59457d Author: Guang Yee Date: Mon Feb 4 13:27:05 2019

[Yahoo-eng-team] [Bug 1816166] [NEW] RFE: Support tokens with subsets of roles

2019-02-15 Thread Lance Bragstad
Public bug reported: Allow a user to request a token with a subset of the roles that they have so they don't give away too much authority with each token. ** Affects: keystone Importance: Wishlist Status: Triaged ** Tags: rfe -- You received this bug notification because you

[Yahoo-eng-team] [Bug 1816167] [NEW] RFE: Service Catalog Standardization

2019-02-15 Thread Lance Bragstad
Public bug reported: The service catalog is widely used yet poorly documented and doesn't have standards. This blueprint identifies areas where we can improve the experience with the service catalog for both end users and operators. ** Affects: keystone Importance: Wishlist Status:

[Yahoo-eng-team] [Bug 1816164] [NEW] RFE: Service Catalog Subsets by IDs

2019-02-15 Thread Lance Bragstad
Public bug reported: (Original blueprint and specification was written by Adam Young) Allow the definition of subsets of the service catalog that can be referenced by ID. Use the ID as a way to shorthand the service catalog in tokens and other remote references. ** Affects: keystone

[Yahoo-eng-team] [Bug 1816165] [NEW] RFE: Expand endpoint filters to service providers

2019-02-15 Thread Lance Bragstad
Public bug reported: (Original specification and blueprint was written by Rodrigo Duarte and Marek Denis) Endpoint filtering is a keystone extension since the Havana release, in Juno it was expanded by the Multi-Attribute Endpoint Grouping spec [1] that improves the filtering flexibility. Since

[Yahoo-eng-team] [Bug 1816160] [NEW] RFE: Domain Specific Mappings

2019-02-15 Thread Lance Bragstad
Public bug reported: (Original blueprint and specification were written by Henry Nash) Today mapping rules for federated users have to be created by system administrators. As public clouds evolve and host more and more enterprises, system administrators will want to be able to delegate this

[Yahoo-eng-team] [Bug 1816163] [NEW] RFE: Better expose public interfaces

2019-02-15 Thread Lance Bragstad
Public bug reported: (The original blueprint was written by Jamie Lennox) We have gone through the process of adding and then removing versioned driver interfaces which intended to give stable interfaces to implementers of drivers. The rationale behind removing it was that it was too much work

[Yahoo-eng-team] [Bug 1816158] [NEW] RFE: Retrofit keystone-manage db_* commands to work with Alembic

2019-02-15 Thread Lance Bragstad
Public bug reported: (Original blueprint and specification was written by Boris Bobrov) Dependent bug: https://bugs.launchpad.net/keystone/+bug/1816107 Now we have two commands that are related to migrations -- db_sync to migrate and db_version to show the current version. It works OK with

[Yahoo-eng-team] [Bug 1816152] [NEW] legacy-grenade-dsvm-neutron-multinode-live-migration is not running on real code changes

2019-02-15 Thread Matt Riedemann
Public bug reported: Ever since this change to the .zuul.yaml file: https://review.openstack.org/#/c/634962/5/.zuul.yaml@242 The job isn't running on changes to non-test files, like nova/conf/api.py. ** Affects: nova Importance: Medium Assignee: Matt Riedemann (mriedem)

[Yahoo-eng-team] [Bug 1816120] [NEW] RFE: Devstack plugin

2019-02-15 Thread Lance Bragstad
Public bug reported: Some functional tests require setting up a custom environment on which to run. For example, federation tests require configuration of a service provider module in Apache, and federation with an external identity provider such as Shibboleth or another keystone (for

[Yahoo-eng-team] [Bug 1816115] [NEW] RFE: Unified Delegation

2019-02-15 Thread Lance Bragstad
Public bug reported: Both assignments and trusts serve a single purpose, to delegate roles on a resource (e.g., system, domain, project) to the actor (e.g., user or group). This RFE proposes a new delegation model containing the following information: - trustee (user or group) - roles to be

[Yahoo-eng-team] [Bug 1816112] [NEW] RFE: Object Dependency Lifecycle

2019-02-15 Thread Lance Bragstad
Public bug reported: (The original description and blueprint was drafted by David Stanek) The dependency injection (DI) that is currently implemented in Keystone is not really using the "dependency injection" pattern. This RFE is focused on improving the internal-to-Keystone object lifecycle

[Yahoo-eng-team] [Bug 1815702] Re: When the name is empty, the prompt to update the network is incorrect.

2019-02-15 Thread OpenStack Infra
Reviewed: https://review.openstack.org/636512 Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=ba4a84148b5da0d6c9eb98de0091441e8c324c83 Submitter: Zuul Branch:master commit ba4a84148b5da0d6c9eb98de0091441e8c324c83 Author: pengyuesheng Date: Wed Feb 13 09:44:05 2019

[Yahoo-eng-team] [Bug 1816109] [NEW] RFE: Add materialized path to project model

2019-02-15 Thread Lance Bragstad
Public bug reported: To manage hierarchical multi-tenancy (HMT) effectively the introduced adjacency list field 'parent_id' is not enough and requires recursion to traverse the tree, which can negatively impact performance in deployments the complex hierarchical structures. The materialized path

[Yahoo-eng-team] [Bug 1816107] [NEW] RFE: Use Alembic for database migrations

2019-02-15 Thread Lance Bragstad
Public bug reported: Move from SQLALChemy-migrate to Alembic as the tool for maintaining SQL Repos. ** Affects: keystone Importance: Wishlist Status: Triaged ** Tags: sql upgrades ** Tags added: sql ** Tags added: upgrades ** Changed in: keystone Status: New => Triaged

[Yahoo-eng-team] [Bug 1815844] Re: iscsi multipath dm-N device only used on first volume attachment

2019-02-15 Thread Ryan Beisner
** Changed in: charm-nova-compute Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1815844 Title: iscsi multipath dm-N device only used on

[Yahoo-eng-team] [Bug 1816034] Re: Ironic flavor migration and default resource classes

2019-02-15 Thread Matt Riedemann
I've removed Pike and Queens from this since those are lower priority since https://review.openstack.org/#/q/Id3c74c019da29070811ffc368351e2238b3f6da5 hasn't landed on those branches. ** No longer affects: nova/queens ** No longer affects: nova/pike -- You received this bug notification

[Yahoo-eng-team] [Bug 1815029] Re: Missing Project ID information in detail page

2019-02-15 Thread OpenStack Infra
Reviewed: https://review.openstack.org/636585 Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=99b89a430edd7572a6c41b950dd228e7b1acfc47 Submitter: Zuul Branch:master commit 99b89a430edd7572a6c41b950dd228e7b1acfc47 Author: manchandavishal Date: Wed Feb 13 10:04:58

[Yahoo-eng-team] [Bug 1816105] [NEW] RFE: Project Tree Deletion/Disabling

2019-02-15 Thread Lance Bragstad
Public bug reported: The proposal is to add the possibility to delete/disable a whole project tree/subtree, where the children of the requested node will be also deleted/disabled. ** Affects: keystone Importance: Wishlist Status: Triaged ** Tags: hierarchical-multitenancy --

[Yahoo-eng-team] [Bug 1815913] Re: DVR can not work with multiple routers on single network.

2019-02-15 Thread OpenStack Infra
Reviewed: https://review.openstack.org/636953 Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=1f104a093c1f27ddb1967e72cd452d43120b4cc2 Submitter: Zuul Branch:master commit 1f104a093c1f27ddb1967e72cd452d43120b4cc2 Author: Slawek Kaplonski Date: Thu Feb 14 14:35:25

[Yahoo-eng-team] [Bug 1816097] [NEW] RFE: Support sub domains to enable namespaces for projects

2019-02-15 Thread Lance Bragstad
Public bug reported: The proposal is to support hierarchical domains so that domain administrators can create new namespaces for the purposes of allowing hierarchies to exist. Since we already store domains as projects, this is essentially extending the project hierarchy to include

[Yahoo-eng-team] [Bug 1816099] [NEW] RFE: Gate inheritance from a parent

2019-02-15 Thread Lance Bragstad
Public bug reported: With the introduction of nested domains, there is a need to control whether assignments are inherited into child domains. This specification proposes a new project attribute for this which, for completeness, can also be used with non-domain projects within a hierarchy.

[Yahoo-eng-team] [Bug 1816086] [NEW] Resource Tracker performance with Ironic driver

2019-02-15 Thread Belmiro Moreira
Public bug reported: The problem is in rocky. The resource tracker builds the resource provider tree and it's updated 2 times in "_update_available_resource". With "_init_compute_node" and in the "_update_available_resource" itself. The problem is that the RP tree will contain all the ironic

[Yahoo-eng-team] [Bug 1816076] [NEW] RFE: Extend user API to support federated attributes

2019-02-15 Thread Lance Bragstad
Public bug reported: (Original specification and description was proposed as a blueprint by Ron De Rose) Federated users are no longer ephemeral and are like any other keystone user. Thus, let's extend the user API to support federated attributes. ** Affects: keystone Importance: Wishlist

[Yahoo-eng-team] [Bug 1816066] [NEW] RFE: Multi-node job for rolling upgrades testing

2019-02-15 Thread Lance Bragstad
Public bug reported: To ensure that Keystone upgradability is not broken it may be useful to add a new testing job. We can test how different Keystone versions work together. We will create multi-node OpenStack installation (controller + keystone node) of master-1 version and then upgrade one of

[Yahoo-eng-team] [Bug 1816034] Re: Ironic flavor migration and default resource classes

2019-02-15 Thread Matt Riedemann
** Changed in: nova Importance: Undecided => High ** Also affects: nova/queens Importance: Undecided Status: New ** Also affects: nova/pike Importance: Undecided Status: New ** Also affects: nova/rocky Importance: Undecided Status: New -- You received this bug

[Yahoo-eng-team] [Bug 1816054] [NEW] RFE: Token Key Store

2019-02-15 Thread Lance Bragstad
Public bug reported: The existing Fernet implementation uses a file-backed key repository for storing Fernet keys. A security optimization that can be made is to put the keys into a dedicated key manager instead of having the Fernet keys on disk. ** Affects: keystone Importance: Wishlist

[Yahoo-eng-team] [Bug 1816059] [NEW] RFE: Native SAML Support

2019-02-15 Thread Lance Bragstad
Public bug reported: Currently, keystone relies heavily on web server plugins to parse and validate SAML assertions from external identity providers. The cost of not having this support natively in keystone is that it makes federation harder to set up for operators, and limits the usability of

[Yahoo-eng-team] [Bug 1808252] Re: libvirt: unplug_hw_veb incorrectly set vm mac on vf

2019-02-15 Thread OpenStack Infra
Reviewed: https://review.openstack.org/624842 Committed: https://git.openstack.org/cgit/openstack/nova/commit/?id=9e77c3d3bbd47863c0f60e4499396429bb46582c Submitter: Zuul Branch:master commit 9e77c3d3bbd47863c0f60e4499396429bb46582c Author: Sean Mooney Date: Thu Dec 13 00:56:44 2018

[Yahoo-eng-team] [Bug 1815287] Re: TypeError: unorderable types: MagicMock() <= int() in py35 openstack_dashboard.dashboards.project.instances.tests

2019-02-15 Thread OpenStack Infra
Reviewed: https://review.openstack.org/636013 Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=1ca0c6f6ec1c8efd38103a37af42d937fbb55aa4 Submitter: Zuul Branch:master commit 1ca0c6f6ec1c8efd38103a37af42d937fbb55aa4 Author: Akihiro Motoki Date: Sat Feb 9 21:43:32 2019

[Yahoo-eng-team] [Bug 1811644] Re: There are multiple spaces in the middle of the name. cannot delete the data.

2019-02-15 Thread OpenStack Infra
Reviewed: https://review.openstack.org/636034 Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=611224db1821af08e4ec022cbe89d327c084382c Submitter: Zuul Branch:master commit 611224db1821af08e4ec022cbe89d327c084382c Author: Akihiro Motoki Date: Sun Feb 10 08:31:08

[Yahoo-eng-team] [Bug 1813236] Re: On create flavor form, modify the ID prompt information

2019-02-15 Thread OpenStack Infra
Reviewed: https://review.openstack.org/633103 Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=f24278da73e36efd10196b426a34d6182578cf9c Submitter: Zuul Branch:master commit f24278da73e36efd10196b426a34d6182578cf9c Author: pengyuesheng Date: Fri Jan 25 10:49:54 2019

[Yahoo-eng-team] [Bug 1810909] Re: In "Create a port" page, when we select "specify a subnet" and do not select a subnet, no error message is shown.

2019-02-15 Thread OpenStack Infra
Reviewed: https://review.openstack.org/629113 Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=239bf1390e1b7b108a918963267c26ce1967246a Submitter: Zuul Branch:master commit 239bf1390e1b7b108a918963267c26ce1967246a Author: pengyuesheng Date: Tue Jan 8 17:16:36 2019

[Yahoo-eng-team] [Bug 1815285] Re: test_url_for in openstack_dashboard.test.unit.api.test_base fails if UT runs only with this module

2019-02-15 Thread OpenStack Infra
Reviewed: https://review.openstack.org/636012 Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=4bf069bb9292710ed86be245c1b091b0a7a7d678 Submitter: Zuul Branch:master commit 4bf069bb9292710ed86be245c1b091b0a7a7d678 Author: Akihiro Motoki Date: Sat Feb 9 21:12:50 2019

[Yahoo-eng-team] [Bug 1816011] Re: When the status of the volume snapshot is Error Deleting, the status displayed on the snapshot details page is Error_deleting

2019-02-15 Thread OpenStack Infra
Reviewed: https://review.openstack.org/637141 Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=74b5367c74ff6c89e699f16042c1d753ed71f3f3 Submitter: Zuul Branch:master commit 74b5367c74ff6c89e699f16042c1d753ed71f3f3 Author: pengyuesheng Date: Fri Feb 15 15:29:07 2019

[Yahoo-eng-team] [Bug 1816041] [NEW] Nova keypair type cannot be selected

2019-02-15 Thread Lucian Petrut
Public bug reported: Nova supports x509 keypairs, most commonly used with Windows instances. Horizon doesn't allow picking the keypair type at the moment. ** Affects: horizon Importance: Undecided Assignee: Daniel Vincze (dvincze) Status: In Progress ** Tags: nova -- You

[Yahoo-eng-team] [Bug 1816034] [NEW] Ironic flavor migration and default resource classes

2019-02-15 Thread Belmiro Moreira
Public bug reported: The Ironic flavor migration to use resource classes happened in Pike/Queens. The flavors and the instances needed to be upgraded with the correct resource class. This was done by an online data migration. Looking into Rocky code: ironic.driver._pike_flavor_migration There

[Yahoo-eng-team] [Bug 1816025] [NEW] instance failed to class 'nova.exception.InvalidQuotaMethodUsage

2019-02-15 Thread POPESCU CAROL EUGEN
Public bug reported: Hi, When trying to create an instance in monsoon 3, I am receiving an error: -"Api: Unexpected API Error. Please report this at http://bugs.launchpad.net/nova/ and attach the Nova API log if possible. " ** Affects: nova Importance: Undecided Status: New --