[Yahoo-eng-team] [Bug 1501505] [NEW] Allow updating of TLS refs
Public bug reported: A bug prevented updating of default_tls_container_ref and failing with a 503 This bug uncovered a few other issues with null key checks and complaints if sni_container_refs were not provided. ** Affects: neutron Importance: Undecided Assignee: Phillip Toohill (phillip-toohill) Status: In Progress ** Tags: lbaas liberty-rc-potential ** Project changed: octavia => neutron -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1501505 Title: Allow updating of TLS refs Status in neutron: In Progress Bug description: A bug prevented updating of default_tls_container_ref and failing with a 503 This bug uncovered a few other issues with null key checks and complaints if sni_container_refs were not provided. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1501505/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1505354] [NEW] oslo.db dependency changes breaks testing in neutron-lbaas
Public bug reported: oslo.db updates removes testresources from their requirements. We must now import this ourselves. https://bugs.launchpad.net/nova/+bug/1503501 ** Affects: neutron Importance: Undecided Assignee: Phillip Toohill (phillip-toohill) Status: In Progress ** Tags: lbaas ** Project changed: octavia => neutron ** Summary changed: - oslo.db dependency changes breaks testing + oslo.db dependency changes breaks testing in neutron-lbaas -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1505354 Title: oslo.db dependency changes breaks testing in neutron-lbaas Status in neutron: In Progress Bug description: oslo.db updates removes testresources from their requirements. We must now import this ourselves. https://bugs.launchpad.net/nova/+bug/1503501 To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1505354/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1531640] [NEW] lbaas:Service authentication from Octavia driver
Public bug reported: Some implementations of Octavia may require authenticated access to the API. For this, pass the service admin auth token as a header along with the request. For those implementations that do not require it, it can simply be ignored. ** Affects: neutron Importance: Undecided Assignee: Phillip Toohill (phillip-toohill) Status: In Progress ** Tags: lbaas -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1531640 Title: lbaas:Service authentication from Octavia driver Status in neutron: In Progress Bug description: Some implementations of Octavia may require authenticated access to the API. For this, pass the service admin auth token as a header along with the request. For those implementations that do not require it, it can simply be ignored. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1531640/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1532344] [NEW] lbaas:Remove OpenSSL from cert_parser
Public bug reported: Utilize cryptography package instead of OpenSSL in the cert_parser ** Affects: neutron Importance: Undecided Assignee: Phillip Toohill (phillip-toohill) Status: In Progress ** Tags: lbaas -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1532344 Title: lbaas:Remove OpenSSL from cert_parser Status in neutron: In Progress Bug description: Utilize cryptography package instead of OpenSSL in the cert_parser To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1532344/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1533877] [NEW] lbaas:encode cert data for processing
Public bug reported: Cryptography requires the cert data to be encoded for processing. ** Affects: neutron Importance: Undecided Status: New ** Tags: lbaas -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1533877 Title: lbaas:encode cert data for processing Status in neutron: New Bug description: Cryptography requires the cert data to be encoded for processing. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1533877/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1427396] [NEW] lbaasv2 pool list not returning all data
Public bug reported: Each pool returned by the API on a request to list pools should include all relevant data, such as, session persistence and listeners. ** Affects: neutron Importance: Undecided Assignee: Phillip Toohill (phillip-toohill) Status: New ** Tags: lbaas ** Changed in: neutron Assignee: (unassigned) => Phillip Toohill (phillip-toohill) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1427396 Title: lbaasv2 pool list not returning all data Status in OpenStack Neutron (virtual network service): New Bug description: Each pool returned by the API on a request to list pools should include all relevant data, such as, session persistence and listeners. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1427396/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1438568] [NEW] crypto expects encoded passphrase
Public bug reported: When attempting to validate TLS private key and passphrase the application raises an exception, 'String expected', due to the passphrase being unicode. ** Affects: neutron Importance: Undecided Assignee: Phillip Toohill (phillip-toohill) Status: In Progress ** Tags: neutron-lbaas -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1438568 Title: crypto expects encoded passphrase Status in OpenStack Neutron (virtual network service): In Progress Bug description: When attempting to validate TLS private key and passphrase the application raises an exception, 'String expected', due to the passphrase being unicode. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1438568/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1439010] [NEW] Encrypted key is not properly handled
Public bug reported: Haproxy cannot load an encrypted private key. There should be a mechanism to strip the key with the provided passphrase and this un- encrypted key should be loaded. ** Affects: neutron Importance: Undecided Assignee: Phillip Toohill (phillip-toohill) Status: New ** Tags: haproxy lbaas neutron-lbaas ** Changed in: neutron Assignee: (unassigned) => Phillip Toohill (phillip-toohill) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1439010 Title: Encrypted key is not properly handled Status in OpenStack Neutron (virtual network service): New Bug description: Haproxy cannot load an encrypted private key. There should be a mechanism to strip the key with the provided passphrase and this un- encrypted key should be loaded. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1439010/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 1439770] [NEW] Invalid validation for intermediates
Public bug reported: The cert_parser is attempting to validate intermediates against the users private key. It only need to validate that the intermediates are readable and the users certificate/key match. ** Affects: neutron Importance: Undecided Status: New ** Tags: lbaas neutron neutron-lbaas -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1439770 Title: Invalid validation for intermediates Status in OpenStack Neutron (virtual network service): New Bug description: The cert_parser is attempting to validate intermediates against the users private key. It only need to validate that the intermediates are readable and the users certificate/key match. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1439770/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
[Yahoo-eng-team] [Bug 2112130] [NEW] No port found in network None with IP address 169.254.169.254
Public bug reported: Consistent metadata error log lines across all deployments of 2024.1 neutron running ovn/ml2 and no dhcp agent. "ERROR neutron.agent.ovn.metadata.server [-] No port found in network None with IP address 169.254.169.254" My cluster is a kubernetes cluster with openstack services deployed via helm running openstack 2024.1 versions. To reproduce, deploy neutron with ovn/ml2 and no dhcp agent and view the neutron-ovn-metadata pod logs. This 'error' doesn't appear to actually impact anything as metadata requests are served as expected. The expected output here would either be an INFO or possibly Warning log line instead of an error. But ideally there wouldn't be anything logged as this shouldn't be a problem that's loggged at all. Actual output: ERROR logs that crop up consistently. Version: - 2024.1 - Ubuntu 24.04 - Helm deployed kubernetes cluster Relevant debug logs for the ovn-metadata pod: https://paste.openstack.org/show/bScRWBOBMFt3z60Fn23I/ ** Affects: neutron Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/2112130 Title: No port found in network None with IP address 169.254.169.254 Status in neutron: New Bug description: Consistent metadata error log lines across all deployments of 2024.1 neutron running ovn/ml2 and no dhcp agent. "ERROR neutron.agent.ovn.metadata.server [-] No port found in network None with IP address 169.254.169.254" My cluster is a kubernetes cluster with openstack services deployed via helm running openstack 2024.1 versions. To reproduce, deploy neutron with ovn/ml2 and no dhcp agent and view the neutron-ovn- metadata pod logs. This 'error' doesn't appear to actually impact anything as metadata requests are served as expected. The expected output here would either be an INFO or possibly Warning log line instead of an error. But ideally there wouldn't be anything logged as this shouldn't be a problem that's loggged at all. Actual output: ERROR logs that crop up consistently. Version: - 2024.1 - Ubuntu 24.04 - Helm deployed kubernetes cluster Relevant debug logs for the ovn-metadata pod: https://paste.openstack.org/show/bScRWBOBMFt3z60Fn23I/ To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/2112130/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
