Public bug reported: Currently imageRef in server create, rebuild and rescue operation can be accepted as random url which contains image UUID and fetch the UUID from that.
ImageRef in server creation etc are UUID only and valid against glance. Currently nova used to fetch the UUID from ImageRef url and proceed. As /images proxy APIs are deprecated, it make sense to strict the imageRef to UUID only and return 400 when non UUID(random url) is requested. ** Affects: nova Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1607229 Title: ImageRef for server create/rebuild/rescue etc are accepted as random url Status in OpenStack Compute (nova): New Bug description: Currently imageRef in server create, rebuild and rescue operation can be accepted as random url which contains image UUID and fetch the UUID from that. ImageRef in server creation etc are UUID only and valid against glance. Currently nova used to fetch the UUID from ImageRef url and proceed. As /images proxy APIs are deprecated, it make sense to strict the imageRef to UUID only and return 400 when non UUID(random url) is requested. To manage notifications about this bug go to: https://bugs.launchpad.net/nova/+bug/1607229/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp