[Yahoo-eng-team] [Bug 1774556] [NEW] Invalid raise in test_compute_mgr

2018-05-31 Thread Yikun Jiang
Public bug reported: The test code in [1][2] uses `raise` statement without any parameter. It is not a valid python construct if used outside of an `expect` block. The test does not fail on this as this codepath never executed. Also see the reference bug[3]. [1] https://github.com/openstack/no

[Yahoo-eng-team] [Bug 1774540] [NEW] bionic: DNS search domains lost from cloud-init to netplan

2018-05-31 Thread Ryan Finnie
Public bug reported: On a MAAS-deployed node, /etc/cloud/cloud.cfg.d/50-curtin-networking.cfg contains: network: config: - id: enp1s0 mac_address: 52:54:00:9a:b4:64 mtu: 1500 name: enp1s0 subnets: - address: 10.48.7.48/21 dns_nameservers: - 10.48.0.5 gate

[Yahoo-eng-team] [Bug 1774508] Re: Documentation warnings are treated as errors and failing check/gate jobs

2018-05-31 Thread OpenStack Infra
Reviewed: https://review.openstack.org/571369 Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=488ecef3296f3a1c17df7431de315c0c3cf2b226 Submitter: Zuul Branch:master commit 488ecef3296f3a1c17df7431de315c0c3cf2b226 Author: wangxiyuan Date: Thu May 31 11:21:42 2018 +0

[Yahoo-eng-team] [Bug 1715042] Re: Flavor list is not in order when booting instance

2018-05-31 Thread OpenStack Infra
Reviewed: https://review.openstack.org/498672 Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=cf06d278af6952a8df8ae4f7367d0873d497cbbc Submitter: Zuul Branch:master commit cf06d278af6952a8df8ae4f7367d0873d497cbbc Author: Feilong Wang Date: Tue Aug 29 15:57:27 2017 +

[Yahoo-eng-team] [Bug 1742102] Re: Simple user can disable compute

2018-05-31 Thread Tristan Cacqueray
Since this report concerns a possible security risk, an incomplete security advisory task has been added while the core security reviewers for the affected project or projects confirm the bug and discuss the scope of any vulnerability along with potential solutions. ** Also affects: ossa Import

[Yahoo-eng-team] [Bug 1774527] Re: Too many errors can trigger compute failed_builds to get incremented

2018-05-31 Thread Tristan Cacqueray
*** This bug is a duplicate of bug 1742102 *** https://bugs.launchpad.net/bugs/1742102 ** Also affects: ossa Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova).

[Yahoo-eng-team] [Bug 1757482] Re: IP address for a router interface allowed outside the allocation range of subnet

2018-05-31 Thread Jeremy Stanley
Since this report concerns a possible security risk, an incomplete security advisory task has been added while the core security reviewers for the affected project or projects confirm the bug and discuss the scope of any vulnerability along with potential solutions. ** Information type changed fro

[Yahoo-eng-team] [Bug 1774527] [NEW] Too many errors can trigger compute failed_builds to get incremented

2018-05-31 Thread Joshua Harlow
*** This bug is a security vulnerability *** Private security bug reported: So let's analyze what can cause a compute managers failed_builds to get incremented and point out that some of them should not be causing failed_builds to get incremented (which then can have the 'nice' effect of auto-dis

[Yahoo-eng-team] [Bug 1769864] Re: cannot use newly issued token immediately after admin password change

2018-05-31 Thread Lance Bragstad
Colleen's assessment is accurate and her workaround is about the best we have. This happens when a token is created within the same second as a revocation event (e.g. changing your password then immediately authenticating for a token). The token's creation timestamp is determined when the token is

[Yahoo-eng-team] [Bug 1774508] [NEW] Documentation warnings are treated as errors and failing check/gate jobs

2018-05-31 Thread Lance Bragstad
Public bug reported: Keystone has some warnings when building documentation. The first is because we don't install an optional dependency for ldappool/pyldap. The second is because we included invalid json in a piece of documentation [0]. Since they were being treated as warnings, they weren't fa

[Yahoo-eng-team] [Bug 1774341] Re: dvr fip doesn't work on centos 7.5

2018-05-31 Thread Brian Haley
Yes, this is a known issue with certain kernel versions having broken netfilter code. I don't have the exact upstream bug as reference, just have a memory of seeing it tracked down. So I will close as not a bug. ** Changed in: neutron Status: New => Invalid -- You received this bug noti

[Yahoo-eng-team] [Bug 1607345] Re: Collect all logs needed to debug curtin/cloud-init for each deployment

2018-05-31 Thread Andres Rodriguez
** Also affects: maas/2.4 Importance: Undecided Status: New ** Changed in: maas/2.4 Milestone: None => 2.4.x ** Changed in: maas/2.4 Status: New => Triaged -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to clou

[Yahoo-eng-team] [Bug 1774463] [NEW] RFE: Add support for IPv6 on DVR Routers for the Fast-path exit

2018-05-31 Thread Swaminathan Vasudevan
Public bug reported: This RFE is to add support for IPv6 on DVR Routers for the Fast-Path-Exit. Today DVR support Fast-Path-Exit through the FIP Namespace, but FIP Namespace does not support IPv6 addresses for the Link local address and also we don't have any ra proxy enabled in the FIP Namespac

[Yahoo-eng-team] [Bug 1774459] [NEW] RFE: Update permanent ARP entries for allowed_address_pair IPs in DVR Routers

2018-05-31 Thread Swaminathan Vasudevan
Public bug reported: We have a long term issue with Allowed_address_pairs IP which associated with unbound ports and DVR routers. The ARP entry for the allowed_address_pair IP does not change based on the GARP issued by any keepalived instance. Since DVR does the ARP table update through the co

[Yahoo-eng-team] [Bug 1774460] [NEW] Neutron pagination ignores X-Forwarded-Proto header

2018-05-31 Thread Mykola Yakovliev
Public bug reported: In our setup HAProxy implements https, with http at the backend. But due to incorrect behavior, api pagination returns incorrect protocol. f.e. curl -g -i -X GET "https://network.lab.att.com:9696/v2.0/subnets.json?fields=<...>&limit=2" \ -H "User-Agent: python-neutronclient

[Yahoo-eng-team] [Bug 1662867] Re: update_available_resource_for_node racing instance deletion

2018-05-31 Thread Matt Riedemann
** Also affects: nova/pike Importance: Undecided Status: New ** Also affects: nova/ocata Importance: Undecided Status: New ** Also affects: nova/queens Importance: Undecided Status: New ** Changed in: nova/ocata Status: New => In Progress ** Changed in: nova

[Yahoo-eng-team] [Bug 1774402] [NEW] Glance scrubber SELinux denials

2018-05-31 Thread Ben O'Hara
Public bug reported: Glance scrubber on RHEL7 from RDO with SELinux enabled get denied connecting to cinder & swift type=AVC msg=audit(1527765224.059:149655): avc: denied { name_connect } for pid=1283 comm="glance-scrubber" dest=8776 scontext=system_u:system_r:glance_scrubber_t:s0 tcontext=

[Yahoo-eng-team] [Bug 1774363] [NEW] Instance is of no use during "shelve-offloading" operation, when nova-conductor is stopped

2018-05-31 Thread Swati Bansal
Public bug reported: During shelve-offloading operation if nova-conductor is stopped, the instance stuck forever in "SHELVED" state and task state of instance stuck in "SHELVING_OFFLOADING" state. After restarting the nova-conductor service, the state of instance does not change to "SHELVE_OFF

[Yahoo-eng-team] [Bug 1774189] Re: delete stack failed, oslo_db.exception.DBError

2018-05-31 Thread jichenjc
I think you need check your API log Out of resources when opening file \'/tmp/#sql_905_1.MAI\' (Errcode: 24 "Too many open files")') guess mysql has some resource issue, not a nova bug ** Changed in: nova Status: New => Invalid -- You received this bug notification because you are a mem

[Yahoo-eng-team] [Bug 1773945] Re: nova client servers.list crashes with bad marker

2018-05-31 Thread jichenjc
seems this is a python nova client issue ? ** Project changed: nova => python-novaclient -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1773945 Title: nova client serve

[Yahoo-eng-team] [Bug 1774341] [NEW] dvr fip doesn't work on centos 7.5

2018-05-31 Thread ByungYeol Woo
Public bug reported: Fip in dvr mode worked well on centos 7.4. But I found fip in dvr mode on centos 7.5 didn't work. If a router is centralized mode, fip works well although on centos 7.5. But if a router is distributed mode, fip didn't work. I found packets from outside was pass through from