[Yahoo-eng-team] [Bug 1872813] Re: cloud-init fails to detect iSCSI root on focal Oracle instances
** Also affects: open-iscsi (Ubuntu Bionic) Importance: Undecided Status: New ** Changed in: open-iscsi (Ubuntu Bionic) Assignee: (unassigned) => Jorge Merlino (jorge-merlino) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to cloud-init. https://bugs.launchpad.net/bugs/1872813 Title: cloud-init fails to detect iSCSI root on focal Oracle instances Status in cloud-init: Invalid Status in open-iscsi package in Ubuntu: Fix Released Status in open-iscsi source package in Bionic: New Status in open-iscsi source package in Focal: Fix Released Bug description: Currently focal images on Oracle are failing to get data from the Oracle DS with this traceback: Traceback (most recent call last): File "/usr/lib/python3/dist-packages/cloudinit/sources/__init__.py", line 772, in find_source if s.update_metadata([EventType.BOOT_NEW_INSTANCE]): File "/usr/lib/python3/dist-packages/cloudinit/sources/__init__.py", line 661, in update_metadata result = self.get_data() File "/usr/lib/python3/dist-packages/cloudinit/sources/__init__.py", line 279, in get_data return_value = self._get_data() File "/usr/lib/python3/dist-packages/cloudinit/sources/DataSourceOracle.py", line 195, in _get_data with dhcp.EphemeralDHCPv4(net.find_fallback_nic()): File "/usr/lib/python3/dist-packages/cloudinit/net/dhcp.py", line 57, in __enter__ return self.obtain_lease() File "/usr/lib/python3/dist-packages/cloudinit/net/dhcp.py", line 109, in obtain_lease ephipv4.__enter__() File "/usr/lib/python3/dist-packages/cloudinit/net/__init__.py", line 1019, in __enter__ self._bringup_static_routes() File "/usr/lib/python3/dist-packages/cloudinit/net/__init__.py", line 1071, in _bringup_static_routes util.subp( File "/usr/lib/python3/dist-packages/cloudinit/util.py", line 2084, in subp raise ProcessExecutionError(stdout=out, stderr=err, cloudinit.util.ProcessExecutionError: Unexpected error while running command. Command: ['ip', '-4', 'route', 'add', '0.0.0.0/0', 'via', '10.0.0.1', 'dev', 'ens3'] Exit code: 2 Reason: - Stdout: Stderr: RTNETLINK answers: File exists In https://github.com/canonical/cloud-init/blob/46cf23c28812d3e3ba0c570defd9a05628af5556/cloudinit/sources/DataSourceOracle.py#L194-L198, we can see that this path is only taken if _is_iscsi_root returns False. To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-init/+bug/1872813/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 2077024] Re: Delete router from Network Topology page throws ns_error_xfo_violation
I've managed to reproduce this issue and I found out that it is not a bug in horizon. It is caused by the web server X-Frame-Options[1] header setting. Apache sets this as deny by default and the horizon page tries to access the router page from inside a tag (that is the network topology drawing). This tag counts as an tag with respect to the X-Frame-Options setting and thus the browser blocks the request to delete the router. I was able to fix this issue by changing the header setting in the apache configuration like this: Header set X-Frame-Options: "sameorigin" This allows the page to be opened inside an tag as long as it belongs to the same web application (same origin) but would still reject it in case someone is trying to embed it in an external web site. [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame- Options ** Changed in: horizon Assignee: (unassigned) => Jorge Merlino (jorge-merlino) ** Changed in: horizon Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Dashboard (Horizon). https://bugs.launchpad.net/bugs/2077024 Title: Delete router from Network Topology page throws ns_error_xfo_violation Status in OpenStack Dashboard (Horizon): Invalid Bug description: At the Network Topology page, clicking "Delete router" and then "Delete" confirmation modal, nothing happens and I see the following error on the browser developer tools: ns_error_xfo_violation Steps to reproduce 1. Network -> Router -> Create Router 2. Routers -> Click on recently created router -> Interfaces tab -> + Add Interface -> Select one of the Subnets drop down options available -> Press "Submit" 3. Network Topology -> Select the Router created -> Delete router -> Confirmation Delete Router pop-up window -> "Delete router" Issue Detected: Action on Delete Router is not performed by the GUI as expected. Expected Result: Delete Router action is performed and the Router is deleted via this available GUI option. Deleting the router through Router -> Delete router, does works. Ubuntu 22.04.4 LTS (Jammy Jellyfish) openstack-dashboard 4:22.1.1-0ubuntu1.1 To manage notifications about this bug go to: https://bugs.launchpad.net/horizon/+bug/2077024/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 2107350] [NEW] Heat template generator not working on Chrome
Public bug reported: Going to Project / Orchestration / Template Generator there are icons on the top of the screen that can be dragged into the canvas below. That works fine in Firefox but does not work in Chrome or Chromium. When the icon is dragged over the canvas in Chrome it shows a little green plus sign next to it which does not appear in Firefox and dropping the icon does nothing. I could not see any errors show in the browser console. Tested on horizon 22.1.1 (openstack Yoga) ** Affects: horizon Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Dashboard (Horizon). https://bugs.launchpad.net/bugs/2107350 Title: Heat template generator not working on Chrome Status in OpenStack Dashboard (Horizon): New Bug description: Going to Project / Orchestration / Template Generator there are icons on the top of the screen that can be dragged into the canvas below. That works fine in Firefox but does not work in Chrome or Chromium. When the icon is dragged over the canvas in Chrome it shows a little green plus sign next to it which does not appear in Firefox and dropping the icon does nothing. I could not see any errors show in the browser console. Tested on horizon 22.1.1 (openstack Yoga) To manage notifications about this bug go to: https://bugs.launchpad.net/horizon/+bug/2107350/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 2112477] [NEW] Problems with AD nested groups
Public bug reported: There are some issues with the implementation of AD nested groups from LP #1638603 It works fine when listing the groups a user belongs to, but fails when listing all members of a group. This function of listing all members is also used to check if a user belongs to a group which also fails. The queries to achieve this are outlined here: https://learn.microsoft.com/en-us/windows/win32/adsi/search-filter-syntax?redirectedfrom=MSDN#operators It mentions how to get all groups a user belongs to but does not show the query to get all members of a group. >From that document I have derived a query to get all users from a group. That entails using the users base and querying (memberof:1.2.840.113556.1.4.1941:=cn=Group1,OU=groupsOU,DC=x) but this is not what keystone is doing. ** Affects: keystone Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/2112477 Title: Problems with AD nested groups Status in OpenStack Identity (keystone): New Bug description: There are some issues with the implementation of AD nested groups from LP #1638603 It works fine when listing the groups a user belongs to, but fails when listing all members of a group. This function of listing all members is also used to check if a user belongs to a group which also fails. The queries to achieve this are outlined here: https://learn.microsoft.com/en-us/windows/win32/adsi/search-filter-syntax?redirectedfrom=MSDN#operators It mentions how to get all groups a user belongs to but does not show the query to get all members of a group. From that document I have derived a query to get all users from a group. That entails using the users base and querying (memberof:1.2.840.113556.1.4.1941:=cn=Group1,OU=groupsOU,DC=x) but this is not what keystone is doing. To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/2112477/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
