[Yahoo-eng-team] [Bug 1917279] Re: [L3][Port forwarding][DVR] failed to process floating ip port forwarding on 'legacy' mode L3 agent

2021-02-28 Thread LIU Yulong
For DVR router the snat node should be configured with "dvr_snat". For now, "legacy/ha router" can run on a "dvr_snat" node. But, DVR router can not run on "legacy" node, since the RouterInfo instance type is based on the agent mode [1]. [1] https://github.com/openstack/neutron/blob/master/neutron

[Yahoo-eng-team] [Bug 1917279] [NEW] [L3][Port forwarding][DVR] failed to process floating ip port forwarding on 'legacy' mode L3 agent

2021-02-28 Thread LIU Yulong
Public bug reported: Create dvr router on 'legacy' agent node, then we got AttributeError: 'DvrLocalRouter' object has no attribute 'snat_namespace'. ERROR LOG: .agent.l3.agent [-] Failed to process compatible router: b247f145-569a-4d5a-bdd8-31a5213641ea: AttributeError: 'DvrLocalRouter' object

[Yahoo-eng-team] [Bug 1516200] Re: Horizon doesn't display ipaddresses of a VM when a lot of ports attached

2021-02-28 Thread Akihiro Motoki
*** This bug is a duplicate of bug 1825961 *** https://bugs.launchpad.net/bugs/1825961 I checked a comment from Alexander https://review.opendev.org/c/openstack/horizon/+/110291/2/openstack_dashboard/api/neutron.py#554. The logic pointed out was originally introduced to convert a string into

[Yahoo-eng-team] [Bug 1478714] Re: Difficult to find out which users are admins in a project

2021-02-28 Thread Akihiro Motoki
As of 2021, the project detail page has "Users" tab and you can check roles in a table. The output is similar to "openstack role-assignment- list --project ". I believe this improvement was done after this issue was filed. I think this issue can be marked as "Fix Released". If you need more improve

[Yahoo-eng-team] [Bug 1333440] Re: Secure Site Recommendations does not discuss LOGGING settings

2021-02-28 Thread Akihiro Motoki
As of 2021, keystoneauth1 is used to communicate back-end services. keystoneauth1 handles the underlying http connections and is in charge of DEBUG logging. It no longer records credentials like user password. token ID is still logged but token is ephemeral so I think this issue has been addressed.

[Yahoo-eng-team] [Bug 1762347] Re: [ocata] Logout on duplicated swift container name

2021-02-28 Thread Akihiro Motoki
As of Victoria (Feb 2021), swift returns 204 for an existing container. This means some fix has been done in the swift side. 2021-02-28 09:20:37.237383 DEBUG swiftclient REQ: curl -i http://192.168.50.24:8080/v1/AUTH_af0ef1a85f544dc9b2a46404fe1943ab/new-a/ -X GET -H "X-Auth-Token: gABgO13m5u