Public bug reported:
Currently, if the CIDR of a subnet changes, and that subnet is used by
VPN, there is no checking performed.
Should add a notification for subnet CIDR changes and either block the
change, if in use by VPN service/endpoint group, or to cause a sync
operation in VPN so that exis
Public bug reported:
As part of the upstreamed implementation for endpoint groups, the API
documentation should be updated.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: doc vpnaas
** Changed in: neutron
Assignee
Public bug reported:
As part of the multiple local subnets feature, update the API
documentation. Note: also update the external_v4_ip and external_v6_ip
fields that were added by a bug fix (missing DocImpact).
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm
Public bug reported:
Need to enhance the functional tests for VPNaaS so that they verify
IPSec site-to-site connections with multiple local subnets in support of
RFE 1459423.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags
Found out that the CIDR for a subnet is read-only, so we don't have to
block changes, when the subnet is used by VPNaaS.
** Changed in: neutron
Status: In Progress => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to
Public bug reported:
In review of 231133, Akihiro mentioned follow up work for the neutron
client, so that Horizon can detect whether or not the new multiple local
subnet feature, with endpoint groups, is available.
Placeholder for that work.
** Affects: neutron
Importance: Undecided
Marked as invalid, as is a duplicate.
** Changed in: neutron
Status: In Progress => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1441783
Title:
VPNaaS: Non-stacking fun
erage).
Because this broke gate, there are several patches already in play for
this.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: neutron neutron-lbaas neutron-vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul
done
in neutron.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: fwaas lbaas vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Progress
-
Public bug reported:
Now that 1.4.0.0a3 oslo.messaging is available in Neutron, enable
commented out unit test cases that were failing due to garbage chars in
imported oslo.messaging module.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In
Public bug reported:
The IPSec site connection validation checks that the router has a GW
specified. It incorrectly accesses this information via the VPN service
table.
As a result, all validations fail.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm
cided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Progress
--
You received this bug notification because you are a member of Yahoo!
Engin
: Paul Michali (pcm)
Status: In Progress
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Progress
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscri
Public bug reported:
During review of some UT code for VPNaaS
(https://review.openstack.org/110432) it was found that the tests were
failing in Jenkins, with a cryptic StringException and no traceback.
The root cause of that was found to be that two test classes were
instantiating a VPN plugin, w
(
constants.L3_ROUTER_NAT)
return self._l3_plugin
In addition, we can look at placing this in a common area (mixin?) or as
a decorator, so that each class that needs it could use the mixin,
rather than repeat this property.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm
change local to VPN code, this bug is suggesting to
add this as an assert into the base test class, so that everyone can use
it.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Changed in: neutron
Assignee: (unassigned) => P
Assignee: Paul Michali (pcm)
Status: In Progress
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Progress
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subs
Public bug reported:
In neutron/plugins/cisco/cfg_agent/device_drivers/driver_mgr.py, if an
exception occurs loading the Cfg Agent, a log message is created and it
causes a second exception due to incorrect key used to access template
name.
** Affects: neutron
Importance: Undecided
Assi
For some reason a duplicate was created for this bug (1368899 and
1368900). Will close this one.
** Changed in: neutron
Assignee: Numan Siddique (numansiddique) => (unassigned)
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Public bug reported:
In VPNaaS extension there is a code block in get_resources() that is
very similar to other services (and with the additions being proposed
for SSL VPN - two more cases).
Should consider moving this up into a common module (base.py?) to remove
duplication (assuming the variati
Public bug reported:
I'm running tox -e py27 under Ubuntu 12.04 desktop 64 bit in a VM on my
laptop with 4 GB or RAM allocated. The memory in the run creeps up to
4GB and then near the end, it drops back down to about 2GB and in the
end, I get numerous tox failures, many indicating out of memory a
Wil mark invalid and have opened bug 1178675 for UT coverage
enhancement.
** Changed in: quantum
Status: Confirmed => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to quantum.
https://bugs.launchpad.net/bugs/1078490
Public bug reported:
Once VPN API tests are operational again (bug 1483417), they should be
enhanced to exercise the new endpoint group APIs and the modifications
to other APIs resulting from the new endpoint groups (e.g. no local
subnet specified for vpnservice, and no peer subnets specified for
://logs.openstack.org/70/199670/2/check/check-grenade-dsvm-
neutron/8000a62/
Applies to all the advanced services.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: New
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (
Public bug reported:
This is an enhancement to the neutron-vpnaas repo to add DevStack plugin
support.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => P
The pending states are used for cases when an action takes a long time -
namely, longer than the request response. For example, when creating an
IPSec connection, there is a period of time where the tunnel must be set
up and negotiated. As a result, the create request will return a
response, but th
The pending states are used for cases when an action takes a long time -
namely, longer than the request response. For example, when creating an
IPSec connection, there is a period of time where the tunnel must be set
up and negotiated. As a result, the create request will return a
response, but th
spawned.
Need to update the DevStack script to force mutual exclusion, and need
to rename the service for the plugin to prevent the conflict.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Public bug reported:
Currently, 'testr' does not support the --coverage-package-name option,
which is needed for coverage testing of VPN. Need to update tox.ini to
use 'test'.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: I
Public bug reported:
Coverage tests for VPNaaS are no longer working, as testr does not
support --coverage-package-name argument any more. Need to switch to
using 'test' instead.
** Affects: neutron
Importance: Undecided
Status: Invalid
** Tags: vpnaas
--
You received this bug n
Public bug reported:
Coverage tests for VPNaaS are no longer working, as testr does not
support --coverage-package-name argument any more. Need to switch to
using 'test' instead.
** Affects: neutron
Importance: Undecided
Status: Invalid
** Tags: vpnaas
--
You received this bug n
Public bug reported:
Currently, 'testr' does not support the --coverage-package-name option,
which is needed for coverage testing of VPN. Need to update tox.ini to
use 'test'.
** Affects: neutron
Importance: Undecided
Status: Invalid
** Tags: vpnaas
** Changed in: neutron
Duplicate bug created due to launchpad issue.
** Changed in: neutron
Status: New => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1495503
Title:
VPNaaS: Coverage tests b
Duplicate bug created due to launchpad issue.
** Changed in: neutron
Status: New => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1495504
Title:
VPNaaS: Coverage tests b
Duplicate bug created due to launchpad issue.
** Changed in: neutron
Status: New => Incomplete
** Changed in: neutron
Status: Incomplete => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bu
Public bug reported:
Currently, 'testr' does not support the --coverage-package-name option,
which is needed for coverage testing of VPN. Need to update tox.ini to
use 'test'.
** Affects: neutron
Importance: Undecided
Status: Invalid
** Tags: vpnaas
--
You received this bug noti
Public bug reported:
Currently, 'testr' does not support the --coverage-package-name option,
which is needed for coverage testing of VPN. Need to update tox.ini to
use 'test'.
** Affects: neutron
Importance: Undecided
Status: Invalid
** Tags: vpnaas
--
You received this bug noti
Duplicate bug created due to launchpad issue.
** Changed in: neutron
Status: New => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1495499
Title:
VPNaaS: Coverage tests b
Already have bug under 1454772.
** Changed in: neutron
Status: In Progress => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1495505
Title:
VPNaaS: Coverage tests broken
jobs need to move to check, and eventually gate queues.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status:
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Progress
--
You received this bug notification because you are a mem
Public bug reported:
Currently, there are no functional tests for OpenSwan reference
implementation of VPNaaS. Should develop tests to exercise this
implementation.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: New
** Tags: vpnaas
** Changed
.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Progress
--
You received this bug notification because you
After discussions with Maru, we've decided to abandon this change, as
the effort to remove the duplication is not worth it. Requires
modification to run-tox for sudo for dsvm-functional.
** Changed in: neutron
Status: In Progress => Invalid
--
You received this bug notification because yo
Public bug reported:
For VPN functional tests or unit test that are run after stacking with
DevStack, the tests are failing, indicating that the service driver is
not unique.
It appears that parse_service_provider_opt() is loading the service
driver based on what is in neutron_vpnaas.conf. Then,
Public bug reported:
The commit for namespaces in neutron (under review 147744, which is
approved, but awaiting upstreaming), changes the router creation logic.
This breaks the neutron-vpnaas unit tests.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm
Public bug reported:
This method was needed, until VPN has been updated to use the DVR router
object snat_namespace.name attribute.
Also fixing PEP8 error in event_observer.py.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
hierarchy for
this as well (#3)
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Pr
are not active, due to
missing test base class.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New =&
Public bug reported:
Like the change in Neutron (1440824), remove the check for bash script
usage.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Mich
Public bug reported:
Like the change in Neutron (14408244), remove the check for bash script.
** Affects: neutron
Importance: Low
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: fwaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (
functional tests and make
the jobs more consistent to what is done in the Neutron repo.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Chan
Public bug reported:
In early testing, I was unable to create a VPN connection using Fedora
Release 12 and StrongSwan driver.
Found out from StrongSwan IRC folks these issues:
A) Unlike Ubuntu, both Strongswan and LibreSwan can be installed at once
B) Fedora uses the process name "strongswan", w
Public bug reported:
Some early testing was showing a problem getting VPN IPSec connection up
and passing traffic, when using StrongSwan on one end and OpenSwan on
the other end (using the same, default, configuration). Worked fine,
when the same Swan flavor was used on each end.
Need to investig
Public bug reported:
In a manner similar to what is done for Neutron, the two functional jobs
need to be modified to only set up DevStack, and not actually run
DevStack.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Progress
--
You received this bug notification because you are a member of
>From what I can tell, this is an invalid bug, as multiple services are
not supported for a single router. It is 1:1. changing status.
** Changed in: neutron
Status: New => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscrib
This is, by design, not supported. The service and router must be 1:1. A
blueprint would need to be submitted to change the design, IMO. Changing
to invalid.
** Changed in: neutron
Status: In Progress => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engi
AFAIK, the IPSec connection is auto-negotiated and will use the IKE and
IPSec policy that is compatible with each end (in this case negotiating
down to aes-128.
This is not a bug, as far as I know. Will mark as invalid.
** Changed in: neutron
Status: New => Invalid
--
You received this b
The service type manager mechanism has been abandoned and will be
replaced in the future by a "Flavor" mechanism, so no sense in providing
additional improvements here.
** Changed in: neutron
Status: New => Invalid
--
You received this bug notification because you are a member of Yahoo!
E
Service Type Framework effort was abandoned and will be replaced in the
future by the "flavor" framework. This will not be done.
** Changed in: neutron
Status: In Progress => Invalid
** Changed in: neutron
Assignee: Paul Michali (pcm) => (unassigned)
--
You r
** Changed in: neutron
Status: In Progress => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1282855
Title:
Add httmock to test-requirements.txt and update requests -> 2.1
Problem with driver loading in new repo was resolved, so this is no
longer a failure. Marked as invalid.
** Changed in: neutron
Status: Incomplete => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://
ified.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Progress
--
You received this bug notification becaus
ugin: neutron_vpnaas.services.vpn.plugin.VPNPlugin
2015-04-24 06:40:39.840 | 2015-04-24 06:40:38,704ERROR
[neutron.api.extensions] Extension path 'neutron/tests/unit/extensions' doesn't
exist!
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Public bug reported:
Currently, VPNaaS IPsec site to site connections may be created with one
or more peer (right side) subnets specified (as CIDRs). However, for the
local (left) side, only a single subnet can be specified.
The reference OpenSwan/StrongSwan implementations will support multiple
Public bug reported:
Since Barbican provides certificate management/storage, and LBaaS has
successfully used the certificates, this RFE proposes to provide
certificate support for VPN IPSec site-to-site connections.
The expectation is that the user would use Barbican to create the
certificate, an
.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: New
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscri
Public bug reported:
There is unused arguments in a mock method, and duplication of
constants, in the Cisco VPNaaS unit test files.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Public bug reported:
Neutron gate for py27 is failing with this error...
2014-02-17 17:22:49.452 | 2014-02-17 17:22:49,107ERROR
[neutron.api.rpc.agentnotifiers.dhcp_rpc_agent_api] No DHCP agents are
associated with network '35b65fc4-9904-4bcc-9d94-2a5af567e910'. Unable to send
notification
it is only used for unit testing, it was suggested to place this
in test-requirements.txt. So, I'm going to push a separate review just
for this file, so I can use it for other commits.
Ref: https://pypi.python.org/pypi/httmock/
** Affects: neutron
Importance: Undecided
Assignee: Pa
rtance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Progress
--
You received this bug notification because you are a member of Yahoo!
Engi
connection still shows as ACTIVE and traffic passes as well.
Does not look like the update_vpnservice API forwards to the device
driver.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Changed in: neutron
Assignee: (unassigned
down state, the
underlying tunnel is not created (correct), but the status still shows
PENDING_CREATE.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Ch
Public bug reported:
Based on recent updates to the Cisco CSR REST APIs, update the Cisco
device driver for VPN to sync up with those changes.
This includes
- Support for various IKE and IPSec encryption modes.
- Support for disable of anti-replay-window-size
- Cleanup UTs based on verified cha
: Undecided
Assignee: Paul Michali (pcm)
Status: Confirmed
** Changed in: neutron
Status: New => Confirmed
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, wh
Public bug reported:
Description:
In Liberty and Mitaka, Nova assumes that it has exclusive access to the
huge pages on the compute node. It maintains track of the total pages
per NUMA node on the compute node, and then number of used (by Nova VMs)
pages on each NUMA node. This is done for the th
Public bug reported:
Colocate strings used in REST client methods as URIs for APIs to Cisco
CSR device, to make it easier to find and maintain them. File is:
neutron/services/vpn/device_drivers/cisco_csr_rest_client.py
** Affects: neutron
Importance: Undecided
Status: New
--
You
Public bug reported:
As part of bug 1291032 to fix PEP8 H302 violations, some changes made to
UT files in Cisco VPNaaS were not correctly modified (imports that were
for modules already, were changed to import the directory above, instead
of being left alone).
The mistake wasn't detected, because
Public bug reported:
Currently an ABC is defined (VPNPlugin) for the service driver APIs. For
some of the methods that must be implemented by the vendor and reference
service drivers, there is an abstract method defined in this class to
ensure that the child classes implement the method:
@abc
Public bug reported:
Both the 2.6 and 2.7 gate tests are failing, console log indicating two
failures, but only showing one failure 'process-retcode'. When looking
at testr_results it shows a fail and only mentions:
ft1.12873:
neutron.tests.unit.services.vpn.service_drivers.test_ipsec.TestValidat
has already done configure_db).
Need to register during __init__.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neut
the Cisco REST client code.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Progress
** Changed in: neutron
Status: In Progress => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1335973
Title:
VPNaaS Cisco table not created
Status in OpenStack Neutron (vi
Assignee: Paul Michali (pcm)
Status: In Progress
** Tags: cisco vpnaas
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Progress
** Description changed:
Currently, int he Cisco CSR REST client, t
Public bug reported:
I have a private repo that is a few weeks behind the upstream, and was
having problems stacking. Initially it was failing in one of the
migrations, so I changed the SQLAlchemy version to 0.8.4 and alembic to
0.6.5 and retried (clean database).
What I saw was that the migratio
86 matches
Mail list logo
