[Yahoo-eng-team] [Bug 1930866] [NEW] locked instance can be rendered broken by deleting port

2021-06-04 Thread George Shuklin
Public bug reported: 'server lock' is indented to protect instance from simple mistakes (like removing the wrong instance, or shut-downing it). It does prevent shutdown, destruction and port detachment. But if port is removed via `openstack port delete` it silently get removed from locked instanc

[Yahoo-eng-team] [Bug 1663225] Re: ironic does not clean or shutdown nodes if nova-compute is down at the moment of 'nova delete'

2017-07-10 Thread George Shuklin
This problem exists in Ironic regardless of bot attempts to sweep it under the expiration rug. ** Changed in: nova Status: Expired => New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bug

[Yahoo-eng-team] [Bug 1685237] Re: port security does not block router advertisements for instances

2017-06-24 Thread George Shuklin
** Also affects: neutron (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1685237 Title: port security does not block router advertisem

[Yahoo-eng-team] [Bug 1699495] [NEW] security groups allows localhost (127.0.0.0/8) to pass

2017-06-21 Thread George Shuklin
Public bug reported: Host local IP addresses shouldn't be in source_ip for incoming packets. No exceptions. Current implementation of security groups, when user allow a wide range of IP addresses to pass, allow to pass 127.0.0.0/8. Steps to reproduce: 1. Create rule in security groups which allo

[Yahoo-eng-team] [Bug 1685237] [NEW] port security does not block router advertisements for instances

2017-04-21 Thread George Shuklin
Public bug reported: Affected version: mitaka Issue: If port security is enabled, IPv6 router advertisements may be send by any instance. Network configuration: vlan, security groups disabled, port security enabled. subnet: {   "description": "",   "enable_dhcp": true,   "network_id": "b71b7cc7

[Yahoo-eng-team] [Bug 1673818] [NEW] Misleading requirements for 'unpartitioned disks' for ConfigDrive in documentation

2017-03-17 Thread George Shuklin
Public bug reported: Current documentation states that: http://cloudinit.readthedocs.io/en/latest/topics/datasources/configdrive.html#version-2 ... a config drive: ...Must be a un-partitioned block device (/dev/vdb, not /dev/vdb1)... This is not correct. 1. Cloud-init actually, works with Confi

[Yahoo-eng-team] [Bug 1672433] [NEW] dhcp-agent should send a grace ARP after assigning IP address in dhcp namespace

2017-03-13 Thread George Shuklin
Public bug reported: Normally dhcp agents should not provide routable services. There is one exception: monitoring. Checking dhcp agents availability by sending PING requests is very easy and sits well with existing monitoring frameworks. Outside of checking of availability of DHCP agent itself th

[Yahoo-eng-team] [Bug 1669727] [NEW] Mystery link in rhel.py

2017-03-03 Thread George Shuklin
Public bug reported: Hello. File cloud-init/cloudinit/distros/rhel.py has a broken link "# See: http://tiny.cc/6r99fw";. Can you put it content somewhere inside repo? Thanks. ** Affects: cloud-init Importance: Undecided Status: New -- You received this bug notification because y

[Yahoo-eng-team] [Bug 1665366] [NEW] [RFE] Add --key-name option to 'nova rebuild'

2017-02-16 Thread George Shuklin
Public bug reported: Currently there is no way to change key-name associated with instance. This has some justification as key may be downloaded only at build time and later changes will be ignored by instance. But this is not a case for rebuild command. If tenant want to rebuild instance, he may

[Yahoo-eng-team] [Bug 1663225] Re: ironic does not clean or shutdown nodes if nova-compute is down at the moment of 'nova delete'

2017-02-09 Thread George Shuklin
** Project changed: ironic => nova ** Tags added: ironic ** Description changed: If nova-compute service is down at the moment of execution 'nova delete' for instance, node with this instance will never been cleaned/turned off after nova-compute start. Steps to reproduce: 1. Prepare

[Yahoo-eng-team] [Bug 1660317] Re: NotImplementedError for detach_interface in nova-compute during instance deletion

2017-02-07 Thread George Shuklin
** Also affects: nova (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1660317 Title: NotImplementedError for detach_i

[Yahoo-eng-team] [Bug 1660317] [NEW] NotImplementedError for detach_interface in nova-compute during instance deletion

2017-01-30 Thread George Shuklin
Public bug reported: When baremetal instance deleted there is a harmless but annoying trace in nova-compute output. nova.compute.manager[26553]: INFO [instance: e265be67-9e87-44ea-95b6-641fc2dcaad8] Terminating instance [req-5f1eba69-239a-4dd4-8677-f28542b190bc 5a08515f35d749068a6327e387ca04e2

[Yahoo-eng-team] [Bug 1659290] [NEW] Failure to load mechanism drivers in ML2 should be critical

2017-01-25 Thread George Shuklin
Public bug reported: Right now when ML2 load mechanism driver, if some of them is unavailable (due to typo or bug in the driver, preventing it to be loaded by stevedore), it registered only in 'info' output of neutron-server ('Configured mechanism driver names' and 'Loaded mechanism driver names')

[Yahoo-eng-team] [Bug 1658682] [NEW] port-security can't be disabled if security groups are not enabled

2017-01-23 Thread George Shuklin
Public bug reported: If ml2 have settings [DEFAULT] extension_drivers = port_security [securitygroup] enable_security_group = False and one is trying to disable port-security on a given port, he/she will fail: neutron port-update fad58638-3568-4bcb-8742-d857d138056d --port- security-enabled=Fa

[Yahoo-eng-team] [Bug 1658636] [NEW] neutron (mitaka) rejects port updates for allowed address pairs

2017-01-23 Thread George Shuklin
Public bug reported: Neutron 8.3 (mitaka) rejects requests to update allowed_address_pairs. Request: neutron --debug port-update b59bc3bb-7d34-4fbb-8e55-a9f1c5c88411 --allowed-address-pairs type=dict list=true ip_address=10.254.15.4 curl: curl -g -i -X PUT https://network.servers.example.com:9

[Yahoo-eng-team] [Bug 1658024] [NEW] Incorrect tag in other-config for openvsiwtch agent after upgrade to mitaka

2017-01-20 Thread George Shuklin
Public bug reported: We've performed upgrade juno->kilo->libery->mitaka (one by one) without rebooting compute hosts. After mitaka upgrage we found that some of tenant networks are not functional. Deeper debug shows that in openvswitch tag value in 'other- config' field in ovs port description do

[Yahoo-eng-team] [Bug 1625305] Re: neutron-openvswitch-agent is crashing due to KeyError in _restore_local_vlan_map()

2017-01-19 Thread George Shuklin
We've got same issue after upgrading from liberty. It was really painful, and we've been forced to manually patch agent on hosts. This is a real issue, please fix it. ** Changed in: neutron Status: Invalid => New -- You received this bug notification because you are a member of Yahoo! E

[Yahoo-eng-team] [Bug 1656854] Re: Incorrect metada in ConfigDrive when using barematal ports under neutron

2017-01-16 Thread George Shuklin
** Also affects: nova Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1656854 Title: Incorrect metada in ConfigDrive when usin

[Yahoo-eng-team] [Bug 1656010] [NEW] Incorrect notification to nova about ironic baremetall port (for nodes in 'cleaning' state)

2017-01-12 Thread George Shuklin
Public bug reported: version: newton (2:9.0.0-0ubuntu1~cloud0) When neutron trying to bind port for Ironic baremetall node, it sending wrong notification to nova about port been ready. neutron send it with 'device_id' == ironic-node-id, and nova rejects it as 'not found' (there is no nova instanc

[Yahoo-eng-team] [Bug 1655974] [NEW] ml2 provides no information if there is no suitable mech_driver found during port binding

2017-01-12 Thread George Shuklin
Public bug reported: If there is no suitable mech driver found, ML2 just make port bind_failed and write uninformative message in the log: 2017-01-12 13:56:46.691 3889 ERROR neutron.plugins.ml2.managers [req- d9d956d7-c9e9-4c1b-aa1b-59fb974dd980 5a08515f35d749068a6327e387ca04e2 7d450ecf00d64399ae

[Yahoo-eng-team] [Bug 1653967] Re: nova raises ConfigFileValueError for URLs with dashes

2017-01-05 Thread George Shuklin
I found one more source of this bug (It was pointed by Marsikus at habrahabr.ru): https://github.com/openstack/oslo.config/compare/3.18.0...master As you can see, oslo.config have dependency for python-rfc3986== 0.2.0 in version 3.18.0, and 0.2.2 in stable/newton. And https://releases.openstack.o

[Yahoo-eng-team] [Bug 1653967] Re: nova (newton) raises ConfigFileValueError for urls with dashess

2017-01-04 Thread George Shuklin
I found source of the bug: python-rfc3986 is to blame (it is used by oslo-config). Version 0.2.0-2 contains bug which violates RFC3986. It was fixed in 0.2.2. Version of python-rfc3986 from zesty (0.3.1-2) fix this problem. I believe this bug should be fixed by bumping up version of python- rfc39

[Yahoo-eng-team] [Bug 1653967] [NEW] nova (newton) raises ConfigFileValueError for urls with dashess

2017-01-04 Thread George Shuklin
Public bug reported: nova version: newton dpkg version: 2:14.0.1-0ubuntu1~cloud0 distribution: nova @ xenial with ubuntu cloud archive, amd64. Nova fails with exception ConfigFileValueError: Value for option url is not valid: invalid URI: if url parameter of [neutron] section or novncproxy_base_

[Yahoo-eng-team] [Bug 1569779] [NEW] allow to investigate instance actions after instance deletion

2016-04-13 Thread George Shuklin
Public bug reported: Right now if instance has been deleted, 'nova instance-action-list' returns 404. Due to very specific nature of 'action list' is is very nice to have ability to see action lists for deleted instances, especially deletion request. Can this feature be added to nova? Al least, f

[Yahoo-eng-team] [Bug 1554195] [NEW] Nova (juno) ignores logging_*_format_string in syslog output

2016-03-07 Thread George Shuklin
Public bug reported: Nova in juno ignores following settings in configuration file ([DEFAULT] section): logging_context_format_string logging_default_format_string logging_debug_format_suffix logging_exception_prefix when sending logs via syslog. Log entries on stderr / in log files are fine (us

[Yahoo-eng-team] [Bug 1548724] Re: nova.tests.unit.test_signature_utils.TestSignatureUtils.test_get_certificate fails on slow build server

2016-02-24 Thread George Shuklin
** Attachment added: "Full build log from CI" https://bugs.launchpad.net/nova/+bug/1548724/+attachment/4579857/+files/consoleText ** Changed in: nova Status: Incomplete => Opinion ** Changed in: nova Status: Opinion => New -- You received this bug notification because you are

[Yahoo-eng-team] [Bug 1548724] [NEW] nova.tests.unit.test_signature_utils.TestSignatureUtils.test_get_certificate fails on slow build server

2016-02-23 Thread George Shuklin
Public bug reported: When I've tried to set up CI build for nova package (13.0b2) but it fails on tests: == FAIL: nova.tests.unit.test_signature_utils.TestSignatureUtils.test_get_certificate nova.tests.unit.test_signature_utils.

[Yahoo-eng-team] [Bug 1467544] [NEW] Network field update delayed if a few net-id were specified during creation

2015-06-22 Thread George Shuklin
Public bug reported: Steps to reproduce: 1. Create a few networks. In my case they were shared external networks of 'vlan' type. Example: neutron net-create internet_192.168.16.64/27 --router:external True --provider:physical_network internet --provider:network_type vlan --provider:segmentati

[Yahoo-eng-team] [Bug 1467518] [NEW] neutron --debug port-list --binding:vif_type=binding_failed returns wrong ports

2015-06-22 Thread George Shuklin
Public bug reported: neutron --debug port-list --binding:vif_type=binding_failed displays all ports with all vif_type, not only with binding_failed. vif_type=binding_failed is set when something bad happens on a compute host during port configuration (no local vlans in ml2 conf, etc) We had inte

[Yahoo-eng-team] [Bug 1461923] [NEW] Field 'gateway' not disabled when 'no gateway' selected in 'edit subnet'

2015-06-04 Thread George Shuklin
Public bug reported: Horizon: 2014.2.3 Steps to reproduce: 1. Create net 2. Create subnet with gateway 3. Open network details (click on network name) under admin section 4. Click 'edit subnet' 5. Click "Disable Gateway" Expected behavior: 1. Field 'gateway' disabled 2. IP address in 'gateway' c

[Yahoo-eng-team] [Bug 1460577] [NEW] If instance was migrated while was in shutdown state, nova disallow start before resize-confirm

2015-06-01 Thread George Shuklin
Public bug reported: Steps to reproduce: 1. Create instance 2. Shutdown instance 3. Perform resize 4. Try to start instance. Expected behaviour: instance starts in resize_confirm state Actual behaviour: ERROR (Conflict): Instance d0e9bc6b-0544-410f-ba96-b0b78ce18828 in vm_state resized. Cannot

[Yahoo-eng-team] [Bug 1459726] Re: api servers hang with 100% CPU if syslog restarted

2015-05-29 Thread George Shuklin
May be. I'm not sure. Anyway, this is not nova/glance/neutron bug, but python-eventlet, and it is mostly concerns for distributions, not for developers. ** Also affects: python-eventlet (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a m

[Yahoo-eng-team] [Bug 1459726] [NEW] api servers hang with 100% CPU if syslog restarted

2015-05-28 Thread George Shuklin
Public bug reported: Affected: glance-api glance-registry neutron-server nova-api If service was configured to use rsyslog and rsyslog was restarted after API server started, it hangs on next log line with 100% CPU. If server have few workers, each worker will eat own 100% CPU share. Steps to r

[Yahoo-eng-team] [Bug 1457900] [NEW] dhcp_agents_per_network > 1 cause conflicts (NACKs) from dnsmasqs (break networks)

2015-05-22 Thread George Shuklin
Public bug reported: If neutron was configured to have more than one DHCP agent per network (option dhcp_agents_per_network=2), it causes dnsmasq to reject leases of others dnsmasqs, creating mess and stopping instances to boot normally. Symptoms: Cirros (at the log): Sending discover... Sending

[Yahoo-eng-team] [Bug 1457598] [NEW] Horizon unable to change quotas if routers extension is disabled in neutron

2015-05-21 Thread George Shuklin
Public bug reported: Horizon version: openstack-dashboard 1:2014.2.2-0ubuntu1~cloud0 python-django-horizon 1:2014.2.2-0ubuntu1~cloud0 Steps to reproduce: 1. Disable router extension in neutron (empty service_plugins in neutron.conf) 2. Disable routers in horizon OP

[Yahoo-eng-team] [Bug 1425543] [NEW] (self-documentation) doc/api_samples/all_extensions/extensions-get-resp.json contain broken links

2015-02-25 Thread George Shuklin
Public bug reported: doc/api_samples/all_extensions/extensions-get-resp.json in repository contains broken links: namespace": "http://docs.openstack.org/compute/ext/extended_rescue_with_image/api/v2"; namespace": "http://docs.openstack.org/compute/ext/rescue/api/v1.1"; etc. ** Affects: nova

[Yahoo-eng-team] [Bug 1424597] [NEW] Obscure 'No valid hosts found' if no free fixed IPs left in the network

2015-02-23 Thread George Shuklin
Public bug reported: If network have no free fixed IPs, new instances failed with 'No valid hosts found' without proper explanation. Example: nova boot foobar --flavor SSD.1 --image cirros --nic net-id=f3f2802a- c2a1-4d8b-9f43-cf24d0dc8233 (There is no free IP left in network f3f2802a-c2a1-4d8b

[Yahoo-eng-team] [Bug 1424594] [NEW] 500 error and 2 traces if no free fixed IP left in the neutron network

2015-02-23 Thread George Shuklin
Public bug reported: If nova recieve 404 from neutron due lack of free fixed IPs, it traces badly and return 500 error to user. Steps to reproduce: 0. Setup nova & neutron, create network & subnetwork 1. Consume all IP from that network 2. Try to attach interface to that network (nova interface-a

[Yahoo-eng-team] [Bug 1419002] [NEW] nova do not compain if 'my_ip' is wrong

2015-02-06 Thread George Shuklin
Public bug reported: If my_ip in nova config do not exit on any interface of the compute host, nova-compute silently accepts it and failing cold migration. Expected behaviour: error or warning if my_ip can not be found on any interface. Nova version: 1:2014.2.1-0ubuntu1~cloud0 ** Affects: nova

[Yahoo-eng-team] [Bug 1418590] Re: No ERROR state if image deleted, _base is lost and instance is rescued

2015-02-05 Thread George Shuklin
** Description changed: State to reproduce: 1. Boot instance from image 2. Delete image 3. Stop nova-compute 4. Remove /var/lib/nova/instances/_base/* 5. start nova-compute 6. Try to rescue instance (nova rescue image) Nova-compute will fail with few traces (see below) and inst

[Yahoo-eng-team] [Bug 1418590] [NEW] No ERROR state if image deleted, _base is lost and instance is rescued

2015-02-05 Thread George Shuklin
Public bug reported: State to reproduce: 1. Boot instance from image 2. Delete image 3. Stop nova-compute 4. Remove /var/lib/nova/instances/_base/* 5. start nova-compute 6. Try to rescue instance (nova rescue image) Nova-compute will fail with few traces (see below) and instance get strange stat

[Yahoo-eng-team] [Bug 1412798] [NEW] Typo in section header in config silently disables all config parsing

2015-01-20 Thread George Shuklin
Public bug reported: I know it sounds silly, but I just spend five hours trying to find why glance is not working with swift and printing random erros. At the end I had found it had ignored all debug/log settings, and later I had found the source of the problem - small typo in my config. If confi

[Yahoo-eng-team] [Bug 1404962] [NEW] openvswitch mech. driver does not report error in check_segment_for_agent

2014-12-22 Thread George Shuklin
Public bug reported: When administrator misspells mappings for external flat networks, nova fails with obscure trace during instance creation: Traceback (most recent call last): File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 2231, in _build_resources yield resourc

[Yahoo-eng-team] [Bug 1404943] [NEW] 'Error: Invalid service catalog service: volume' if no volume service is defined

2014-12-22 Thread George Shuklin
Public bug reported: If openstack installation has no cinder service in endpoint list, horizon reports 'Error: Invalid service catalog service: volume' many times (after login, each time dialog for new instance is opened). ** Affects: horizon Importance: Undecided Status: New -- Y

[Yahoo-eng-team] [Bug 1396677] [NEW] Heavy use of metering labels/rules cause memory leak in neutron server

2014-11-26 Thread George Shuklin
Public bug reported: We found that large amount of metering labels and rules cause memory leak in neutron server. This problem is multiplied by amount of workers (10 workers - 10x memory leak). In our case we have 657 metering-lables and 122399 metering-label-rules, If anyone query them, neutron

[Yahoo-eng-team] [Bug 1392921] [NEW] host ssh key has been changed after full installation reboot

2014-11-14 Thread George Shuklin
Public bug reported: We've has a planned outage for whole OS installation, and after booting back (+few reboots of hosts and instances during that process) many (may be all) instances changed their ssh keys. OS: havana@ubuntu cloud-init: cloud-init 0.7.2-3~bpo70+1 cloud-in

[Yahoo-eng-team] [Bug 1358147] [NEW] ProgrammingError: You have an error in your SQL syntax 'INSERT INTO meteringlabels'

2014-08-18 Thread George Shuklin
Public bug reported: Installation works about few months, got this message in logstash. Happens once, there is no surrounding activity (no requests to API). Havanna, ubuntu-cloud-archive, 2013.2.3-0ubuntu1.1 Aug 17 21:48:59 api1 neutron.openstack.common.db.sqlalchemy.session[12400]: ERROR DB

[Yahoo-eng-team] [Bug 1329313] [NEW] server migration fails if it image in glance was deleted

2014-06-12 Thread George Shuklin
Public bug reported: If instance is migrated from hypervisor by 'nova host-servers-migrate' and it image was deleted, instance fails to start with message {u'message': u'Image d2ab45e6-3db0-450b-b5aa-8b0646e063a2 could not be found.', u'code': 404, u'created': u'2014-06-12T12:39:27Z'} Steps to r

[Yahoo-eng-team] [Bug 1323383] [NEW] Ubuntu source package for neutron can not be rebuild

2014-05-26 Thread George Shuklin
Public bug reported: Ubuntu's source package for neutron can not be rebuild twice: 1. There is no proper clean target. 2. neutron.egg-info included in neutron_2013.2.3.orig.tar.gz (regardless of .gitignore in original git). That cause problem when package is build twice from same source. 1st bu

[Yahoo-eng-team] [Bug 1310571] [NEW] ovs pluging floods auth.log (~200Mb/day)

2014-04-21 Thread George Shuklin
Public bug reported: ovs plugin floods auth.log with repeative messages: Apr 20 06:25:20 pp3 sudo: neutron : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf ovs-vsctl --timeout=2 --format=json -- --columns=name,external_ids list Interface Apr 20 0

[Yahoo-eng-team] [Bug 1297920] [NEW] Completely disabled availability zone cause horizon to trace at availability zones list

2014-03-26 Thread George Shuklin
Public bug reported: If all compute nodes in some availability zone are disabled, horizon trace at availability zones list. Steps to reproduce: 1. Create host aggregate and availability zone (nova aggreage-create some some) 2. Add some (at least one) host to that host aggregate (nova aggreage-ad

[Yahoo-eng-team] [Bug 1288859] [NEW] Load ballancer can't choose proper port in multi-network configuration

2014-03-06 Thread George Shuklin
Public bug reported: If LBaaS functionality enabled and instances has more that one network interfaces, horizon incorrectly choose members ports to add in the LB pool. Steps to reproduce: 0. nova, neutron with configured LBaaS functions, horizon. 1. Create 1st network (e.g. net1) 2. Create 2nd n

[Yahoo-eng-team] [Bug 1286209] Re: unhandled trace if no namespaces in metering agent

2014-02-28 Thread George Shuklin
neutron-plugin-metering-agent1:2013.2.1-0ubuntu1~cloud0 ** Project changed: neutron => neutron (Ubuntu) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1286209 Title: unhandled trace

[Yahoo-eng-team] [Bug 1286209] [NEW] unhandled trace if no namespaces in metering agent

2014-02-28 Thread George Shuklin
Public bug reported: If network node has no active routers on it l3-agent, metering-agent tracing: 2014-02-28 17:04:51.286 1121 DEBUG neutron.services.metering.agents.metering_agent [-] Get router traffic counters _get_traffic_counters /usr/lib/python2.7/dist-packages/neutron/services/meterin

[Yahoo-eng-team] [Bug 1276629] [NEW] Non-working tunnels after IP change of nodes (ovs_tunnel_endpoints doesn't clean)

2014-02-05 Thread George Shuklin
Public bug reported: If any OVS-enabled host with GRE tunnes change it IP, neutron do not discard entry in ovs_tunnel_endpoints table and recreate gre-x interfaces in br-tun on every boot. Expected behavior: automaic removing of entries in ovs_tunnel_endpoints when IP address is changed. ** Affe

[Yahoo-eng-team] [Bug 1271958] [NEW] nova compute fail to remove instance with port if network is broken

2014-01-23 Thread George Shuklin
Public bug reported: If user was capable to create broken network configuration, instance become undeletable. Reason why user can create broken networking is under investigation (current hypothesis: if network (neutron) created in one tennant and instance in other, and user is admin in both tenan

[Yahoo-eng-team] [Bug 1269394] [NEW] button "Launch Instance (quota exceded)" does not change back if some instances terminated

2014-01-15 Thread George Shuklin
Public bug reported: Steps to reproduce: 1. Create maximum amount of instances allowed by quota 2. Go to Project -> Instances. 3. Terminate any instance Expected behavior: Button "Launch Instance (quota exceded)" become enabled and changed to "Launch Instance" Actual behavior: Button not change