[Yahoo-eng-team] [Bug 1832265] Re: keystone LDAP integration in rocky not working for RBAC rules or token auth

2019-06-13 Thread James Page
Raising a bug task against keystone as I think that we may need to expanded the decode coverage in token_formatters. ** Changed in: keystone (Ubuntu) Assignee: (unassigned) => James Page (james-page) ** Changed in: keystone (Ubuntu) Importance: Undecided => High ** Changed in: keystone (

[Yahoo-eng-team] [Bug 1832265] Re: keystone LDAP integration in rocky not working for RBAC rules or token auth

2019-06-13 Thread James Page
Tl;DR - I think the disassemble functions need to deal with the encoding better under py3; if the user_id gets into keystone decoded, then it should be dealt with correctly throughout. ** Also affects: keystone Importance: Undecided Status: New -- You received this bug notification bec

[Yahoo-eng-team] [Bug 1752792] Re: Iptables can allow open access to instances in certain situations

2019-06-13 Thread Jeremy Stanley
Thanks Sam, I don't expect the Nova security reviewers to object as they're unable to reproduce this and consider the bug apparently fixed in the Queens release anyway. Setting the security advisory task to won't fix state, but can be revisited if any new information comes to light. ** Information

[Yahoo-eng-team] [Bug 1802218] Re: An instance created by openstack rocky can't be remotely connected by xshell and putty, But SSH tools for Linux systems do. [server's host key did not match the sign

2019-06-13 Thread sean mooney
marking as invalid as this is likely an issue wiht the ssh client you are using ro the ssh server in the guest. the fact it works on linux but not windows/android suggest to me it might be related to the authentication methods or encryption algothims and key types supproted in the client/server a

[Yahoo-eng-team] [Bug 1813446] Re: impl_rabbit timedout

2019-06-13 Thread sean mooney
making as invalid as there appears to be sever different issues from you database to the kernel locking up which seam unrelated to nova. ** Changed in: nova Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribe

[Yahoo-eng-team] [Bug 1815762] Re: you can end up in a state where qvo* interfaces aren't owned by ovs which results in a dangling connection

2019-06-13 Thread sean mooney
this might be somthing that could be added to the exsiting neutron-ovs-cleanup script that is generated by this entry point https://github.com/openstack/neutron/blob/master/setup.cfg#L49 and impmeneted here https://github.com/openstack/neutron/blob/master/neutron/cmd/ovs_cleanup.py but this sho

[Yahoo-eng-team] [Bug 1817683] Re: Key pair not imported when passing cloud-init script on initiation

2019-06-13 Thread sean mooney
i belive you are correct that this behavior is caused by the fact you are creating a usever via cloud init. if you think this is really a nova bug feel free to set the status back to New for the bug to be retriaged. ** Changed in: nova Status: New => Invalid -- You received this bug noti

[Yahoo-eng-team] [Bug 1768919] Re: PCI-Passthrough fails when we have Flavor configured and provide a port with vnic_type=direct-physical

2019-06-13 Thread sean mooney
*** This bug is a duplicate of bug 1768917 *** https://bugs.launchpad.net/bugs/1768917 i have closed this as a duplicate as i explain in the other bug that you miss understood how to use this feature. based on teh in fomation you provdied on the ohter bug i am assumin you have only one nic av

[Yahoo-eng-team] [Bug 1768917] Re: PCI-Passthrough documentation is incorrect while trying to pass through a NIC

2019-06-13 Thread sean mooney
you are conflating two different things alias are not used for neutron based sriov networking and nic that are pastthoyhg via flaovr aliase are not managed by neutorn or the sriov nic agent. the documentation in https://docs.openstack.org/nova/pike/admin/pci- passthrough.html describe how to do

[Yahoo-eng-team] [Bug 1802973] Re: Failed to create VM with no IP assigned to SR-IOV port

2019-06-13 Thread sean mooney
Nova does not currently have support for neutron ports without an ip. when support was added for the neutron port ip_allocation polices only support for intimidate and defer where implemented. i believe work is planned to add support for addresses port in train but i am close this as invalid as i

[Yahoo-eng-team] [Bug 1805891] Re: pci numa polices are not followed

2019-06-13 Thread sean mooney
as this feature never worked on rocky and queens i am marking it as wont fix as it would be effectivly a feature backport based on matt's comment here https://review.opendev.org/#/c/641653/1//COMMIT_MSG@13 ** Also affects: nova/rocky Importance: Undecided Status: New ** Also affects: no

[Yahoo-eng-team] [Bug 1824048] Re: SRIOV pci_numa_policy dosen't working when create instance with 'cpu_policy' and 'num_nodes'

2019-06-13 Thread sean mooney
*** This bug is a duplicate of bug 1805891 *** https://bugs.launchpad.net/bugs/1805891 ** This bug has been marked a duplicate of bug 1805891 pci numa polices are not followed -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to

[Yahoo-eng-team] [Bug 1832771] [NEW] AgularJS pages do not display dates in system's timezone

2019-06-13 Thread Kristine Bujold
Public bug reported: Brief Description - Horizon's AngularJS pages (for example Images) does not display timestamp in the server's timezone. The timezone used is the browser's. Steps to Reproduce -- - If Timezone is not set under Settings (menu on the top right):

[Yahoo-eng-team] [Bug 1832169] Re: device_type of PCI alias config could be mismatched

2019-06-13 Thread sean mooney
the device_type is optional but if set it will be checked https://github.com/openstack/nova/blob/51e3787bf89f19af8a9d37288a63731563c92fca/nova/pci/request.py#L136-L138 type-pci is not intended for fore use with device that are capable of sriov and exits primarly for use with pci device that are n

[Yahoo-eng-team] [Bug 1832769] [NEW] designate client requires region name to fetch PTR records

2019-06-13 Thread Mithil Arun
Public bug reported: Enable neutron's designate driver to accept the region name as a parameter while making requests. ** Affects: neutron Importance: Undecided Assignee: Mithil Arun (arun-mithil) Status: New ** Changed in: neutron Assignee: (unassigned) => Mithil Arun (a

[Yahoo-eng-team] [Bug 1832766] [NEW] LDAP group_members_are_ids = false fails in Rocky/Stein

2019-06-13 Thread Drew Freiberger
Public bug reported: I'm running into an interesting issue with the group_members_are_ids: false Per the documentation, this means that the group's group_member_attribute values (in my case "member") are understood to be full LDAP DNs to the user records. https://docs.openstack.org/keystone/que

[Yahoo-eng-team] [Bug 1831996] Re: glance project "tips" jobs should be runnable on demand

2019-06-13 Thread OpenStack Infra
Reviewed: https://review.opendev.org/663917 Committed: https://git.openstack.org/cgit/openstack/glance/commit/?id=693f52f8826e7ebcab417247e6faab3d7fd1c514 Submitter: Zuul Branch:master commit 693f52f8826e7ebcab417247e6faab3d7fd1c514 Author: Brian Rosmaita Date: Fri Jun 7 08:07:00 2019 -04

[Yahoo-eng-team] [Bug 1831538] Re: IDE config drive CDROM doesn't work with q35 machine type

2019-06-13 Thread Matt Riedemann
** Also affects: nova/stein Importance: Undecided Status: New ** Changed in: nova/stein Status: New => In Progress ** Changed in: nova/stein Importance: Undecided => High ** Changed in: nova/stein Assignee: (unassigned) => Lee Yarwood (lyarwood) ** Tags added: libvirt

[Yahoo-eng-team] [Bug 1832758] [NEW] [RFE] Allow/deny custom ethertypes in security groups

2019-06-13 Thread Dan Sneddon
Public bug reported: Some operators need to allow/deny custom Ethertypes for applications which use their own non-IP traffic (such as for clustering applications). The Security Group API only handles specifying behavior within the IP protocol. With the firewall reference implementation (OVS Firew

[Yahoo-eng-team] [Bug 1832225] Re: Neutron-vpnaas unit tests broken

2019-06-13 Thread OpenStack Infra
Reviewed: https://review.opendev.org/664257 Committed: https://git.openstack.org/cgit/openstack/neutron-vpnaas/commit/?id=183934eae66d8a411b8f2d7f7cb00ebbc4152d7c Submitter: Zuul Branch:master commit 183934eae66d8a411b8f2d7f7cb00ebbc4152d7c Author: Slawek Kaplonski Date: Mon Jun 10 15:13:

[Yahoo-eng-team] [Bug 1832746] [NEW] Failed to discover available identity versions when contacting http://controller:35357/v3

2019-06-13 Thread nitish patni
Public bug reported: I am getting below errors [root@controller ~]# openstack service list Failed to discover available identity versions when contacting http://controller:35357/v3. Attempting to parse version from URL. Unable to establish connection to http://controller:35357/v3/auth/tokens: H

[Yahoo-eng-team] [Bug 1832745] [NEW] _update_network_segmentation_id KeyError: 'provider:network_type'

2019-06-13 Thread LIU Yulong
Public bug reported: ENV: master Exception: Jun 14 00:51:28 network2 neutron-openvswitch-agent[10081]: ERROR neutron_lib.callbacks.manager [None req-1c6689ba-8524-4f93-9387-d5bcce5101dd None None] Error during notification for neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent.OV

[Yahoo-eng-team] [Bug 1794252] Re: we shouldn't persist the retried failed host in db when migrating an instance

2019-06-13 Thread Matt Riedemann
*** This bug is a duplicate of bug 1718512 *** https://bugs.launchpad.net/bugs/1718512 ** This bug has been marked a duplicate of bug 1718512 migration fails if instance build failed on destination host -- You received this bug notification because you are a member of Yahoo! Engineering T

[Yahoo-eng-team] [Bug 1832743] [NEW] delete_dvr_dst_mac_for_arp uses wrong table id

2019-06-13 Thread LIU Yulong
Public bug reported: ENV: master Jun 14 00:30:49 network2 neutron-openvswitch-agent[8378]: ERROR neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent [None req-64e6eccc-0d85-4145-923e-de511adf9946 None None] Error while processing VIF ports: TypeError: 'int' object is not iterable J

[Yahoo-eng-team] [Bug 1832021] Re: Checksum drop of metadata traffic on isolated provider networks

2019-06-13 Thread James Page
** Also affects: charm-neutron-openvswitch Importance: Undecided Status: New ** This bug is no longer a duplicate of bug 1722584 [SRU] Return traffic from metadata service may get dropped by hypervisor due to wrong checksum ** Changed in: neutron Status: New => Incomplete --

[Yahoo-eng-team] [Bug 1831866] Re: tempest.api.compute.servers.test_servers.ServerShowV263Test only passing when image has already been cached

2019-06-13 Thread Lee Yarwood
** No longer affects: nova -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1831866 Title: tempest.api.compute.servers.test_servers.ServerShowV263Test only passing when

[Yahoo-eng-team] [Bug 1826419] Re: dhcp agent configured with mismatching domain and host entries

2019-06-13 Thread James Page
This bug was fixed in the package neutron - 2:13.0.2-0ubuntu3.3~cloud0 --- neutron (2:13.0.2-0ubuntu3.3~cloud0) bionic-rocky; urgency=medium . * New update for the Ubuntu Cloud Archive. . neutron (2:13.0.2-0ubuntu3.3) cosmic; urgency=medium . * d/p/bug1826419.patch: Cherry p

[Yahoo-eng-team] [Bug 1826419] Re: dhcp agent configured with mismatching domain and host entries

2019-06-13 Thread James Page
This bug was fixed in the package neutron - 2:14.0.0-0ubuntu2~cloud0 --- neutron (2:14.0.0-0ubuntu2~cloud0) bionic-train; urgency=medium . * New update for the Ubuntu Cloud Archive. . neutron (2:14.0.0-0ubuntu2) eoan; urgency=medium . * d/p/bug1826419.patch: Cherry pick fix

[Yahoo-eng-team] [Bug 1826419] Re: dhcp agent configured with mismatching domain and host entries

2019-06-13 Thread James Page
This bug was fixed in the package neutron - 2:14.0.0-0ubuntu2~cloud0 --- neutron (2:14.0.0-0ubuntu2~cloud0) bionic-train; urgency=medium . * New update for the Ubuntu Cloud Archive. . neutron (2:14.0.0-0ubuntu2) eoan; urgency=medium . * d/p/bug1826419.patch: Cherry pick fix

[Yahoo-eng-team] [Bug 1832720] [NEW] Inconsistent power and vm states for physical instances when doing nova start/stop

2019-06-13 Thread Surya Seetharaman
Public bug reported: For performance improvement, a cache was added in the ironic driver to store nodes (and hence their power states) in https://github.com/openstack/nova/commit/9d5fb1b58e908ccacbbbf29341918d0b0588a36f #diff-1e4547e2c3b36b8f836d8f851f85fde7. Later on through https://github.com/op