[jira] [Commented] (CLOUDSTACK-10230) User is able to change to “Guest OS type” that has been removed

2018-04-05 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10230?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16427605#comment-16427605
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10230:
-

blueorangutan commented on issue #2404: [CLOUDSTACK-10230] User should not be 
able to use removed “Guest OS type”
URL: https://github.com/apache/cloudstack/pull/2404#issuecomment-379077062
 
 
   Trillian test result (tid-2463)
   Environment: kvm-centos7 (x2), Advanced Networking with Mgmt server 7
   Total time taken: 46315 seconds
   Marvin logs: 
https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr2404-t2463-kvm-centos7.zip
   Intermitten failure detected: /marvin/tests/smoke/test_certauthority_root.py
   Intermitten failure detected: /marvin/tests/smoke/test_privategw_acl.py
   Intermitten failure detected: /marvin/tests/smoke/test_public_ip_range.py
   Intermitten failure detected: /marvin/tests/smoke/test_reset_vm_on_reboot.py
   Intermitten failure detected: /marvin/tests/smoke/test_router_dhcphosts.py
   Intermitten failure detected: /marvin/tests/smoke/test_router_dns.py
   Intermitten failure detected: /marvin/tests/smoke/test_router_dnsservice.py
   Intermitten failure detected: 
/marvin/tests/smoke/test_routers_iptables_default_policy.py
   Intermitten failure detected: /marvin/tests/smoke/test_routers_network_ops.py
   Intermitten failure detected: /marvin/tests/smoke/test_routers.py
   Intermitten failure detected: /marvin/tests/smoke/test_secondary_storage.py
   Intermitten failure detected: /marvin/tests/smoke/test_service_offerings.py
   Intermitten failure detected: /marvin/tests/smoke/test_snapshots.py
   Intermitten failure detected: /marvin/tests/smoke/test_ssvm.py
   Intermitten failure detected: /marvin/tests/smoke/test_templates.py
   Intermitten failure detected: /marvin/tests/smoke/test_usage.py
   Intermitten failure detected: /marvin/tests/smoke/test_vm_life_cycle.py
   Intermitten failure detected: /marvin/tests/smoke/test_vm_snapshots.py
   Intermitten failure detected: /marvin/tests/smoke/test_volumes.py
   Intermitten failure detected: /marvin/tests/smoke/test_vpc_redundant.py
   Intermitten failure detected: /marvin/tests/smoke/test_vpc_router_nics.py
   Intermitten failure detected: /marvin/tests/smoke/test_vpc_vpn.py
   Intermitten failure detected: /marvin/tests/smoke/test_host_maintenance.py
   Intermitten failure detected: /marvin/tests/smoke/test_hostha_kvm.py
   Smoke tests completed. 45 look OK, 22 have error(s)
   Only failed tests results shown below:
   
   
   Test | Result | Time (s) | Test File
   --- | --- | --- | ---
   test_03_vpc_privategw_restart_vpc_cleanup | `Failure` | 187.11 | 
test_privategw_acl.py
   ContextSuite context=TestResetVmOnReboot>:setup | `Error` | 0.00 | 
test_reset_vm_on_reboot.py
   ContextSuite context=TestRouterDHCPHosts>:setup | `Error` | 0.00 | 
test_router_dhcphosts.py
   ContextSuite context=TestRouterDHCPOpts>:setup | `Error` | 0.00 | 
test_router_dhcphosts.py
   ContextSuite context=TestRouterDns>:setup | `Error` | 0.00 | 
test_router_dns.py
   ContextSuite context=TestVmSnapshot>:setup | `Error` | 0.07 | 
test_vm_snapshots.py
   ContextSuite context=TestRouterDnsService>:setup | `Error` | 0.00 | 
test_router_dnsservice.py
   ContextSuite context=TestRouterIpTablesPolicies>:setup | `Error` | 0.00 | 
test_routers_iptables_default_policy.py
   ContextSuite context=TestVPCIpTablesPolicies>:setup | `Error` | 0.00 | 
test_routers_iptables_default_policy.py
   test_01_isolate_network_FW_PF_default_routes_egress_true | `Error` | 0.18 | 
test_routers_network_ops.py
   test_02_isolate_network_FW_PF_default_routes_egress_false | `Error` | 0.17 | 
test_routers_network_ops.py
   ContextSuite context=TestRedundantIsolateNetworks>:setup | `Error` | 1.35 | 
test_routers_network_ops.py
   ContextSuite context=TestRouterServices>:setup | `Error` | 0.00 | 
test_routers.py
   test_01_sys_vm_start | `Failure` | 0.11 | test_secondary_storage.py
   test_02_sys_template_ready | `Failure` | 0.10 | test_secondary_storage.py
   ContextSuite context=TestCpuCapServiceOfferings>:setup | `Error` | 0.00 | 
test_service_offerings.py
   ContextSuite context=TestServiceOfferings>:setup | `Error` | 0.20 | 
test_service_offerings.py
   ContextSuite context=TestSnapshotRootDisk>:setup | `Error` | 0.00 | 
test_snapshots.py
   test_01_list_sec_storage_vm | `Failure` | 0.04 | test_ssvm.py
   test_02_list_cpvm_vm | `Failure` | 0.04 | test_ssvm.py
   test_03_ssvm_internals | `Failure` | 0.04 | test_ssvm.py
   test_04_cpvm_internals | `Failure` | 0.04 | test_ssvm.py
   test_05_stop_ssvm | `Failure` | 0.04 | test_ssvm.py
   test_06_stop_cpvm | `Failure` | 0.04 | test_ssvm.py
   test_07_reboot_ssvm | `Failure` | 0.04 | test_ssvm.py
   test_08_reboot_cpvm | `Failure` | 0.04 | test_ssvm.py
   test_09_destroy_ssvm | `Failure` | 0.04 | test_ssvm.py
   test_10_destroy_cpvm | `Failure` | 0

[jira] [Commented] (CLOUDSTACK-10333) Secure VM Live migration for KVM

2018-04-05 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10333?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16427279#comment-16427279
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10333:
-

rhtyd commented on issue #2505: CLOUDSTACK-10333: Secure Live VM Migration for 
KVM
URL: https://github.com/apache/cloudstack/pull/2505#issuecomment-379009668
 
 
   Looks like there is an outstanding/related issue to CA management, I'll have 
a look next week (on holidays now).


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> Secure VM Live migration for KVM
> 
>
> Key: CLOUDSTACK-10333
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10333
> Project: CloudStack
>  Issue Type: Improvement
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>Reporter: Rohit Yadav
>Assignee: Rohit Yadav
>Priority: Major
> Fix For: 4.12.0.0, 4.11.1.0
>
>
> With use of CA framework to secure hosts, the current mechanisms don't secure 
> libvirtd to use those certificates (used by agent to connect to mgmt server). 
> This causes insecure vm migration over tcp instead of tls. The aim is to use 
> the same framework and certificates to secure live VM migration. This could 
> be coupled with securing of a host and renewal/provisioning of certificates 
> to host.
>  
> FS: 
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Secure+Live+VM+Migration+for+KVM



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CLOUDSTACK-10333) Secure VM Live migration for KVM

2018-04-05 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10333?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16427264#comment-16427264
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10333:
-

blueorangutan commented on issue #2505: CLOUDSTACK-10333: Secure Live VM 
Migration for KVM
URL: https://github.com/apache/cloudstack/pull/2505#issuecomment-379007673
 
 
   Trillian test result (tid-2459)
   Environment: kvm-centos7 (x2), Advanced Networking with Mgmt server 7
   Total time taken: 107420 seconds
   Marvin logs: 
https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr2505-t2459-kvm-centos7.zip
   Intermitten failure detected: /marvin/tests/smoke/test_privategw_acl.py
   Intermitten failure detected: /marvin/tests/smoke/test_routers_network_ops.py
   Intermitten failure detected: /marvin/tests/smoke/test_routers.py
   Intermitten failure detected: /marvin/tests/smoke/test_ssvm.py
   Intermitten failure detected: /marvin/tests/smoke/test_vm_life_cycle.py
   Smoke tests completed. 65 look OK, 2 have error(s)
   Only failed tests results shown below:
   
   
   Test | Result | Time (s) | Test File
   --- | --- | --- | ---
   test_04_restart_network_wo_cleanup | `Failure` | 4.14 | test_routers.py
   test_01_secured_vm_migration | `Failure` | 1069.92 | test_vm_life_cycle.py
   test_02_not_secured_vm_migration | `Failure` | 118.28 | test_vm_life_cycle.py
   


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> Secure VM Live migration for KVM
> 
>
> Key: CLOUDSTACK-10333
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10333
> Project: CloudStack
>  Issue Type: Improvement
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>Reporter: Rohit Yadav
>Assignee: Rohit Yadav
>Priority: Major
> Fix For: 4.12.0.0, 4.11.1.0
>
>
> With use of CA framework to secure hosts, the current mechanisms don't secure 
> libvirtd to use those certificates (used by agent to connect to mgmt server). 
> This causes insecure vm migration over tcp instead of tls. The aim is to use 
> the same framework and certificates to secure live VM migration. This could 
> be coupled with securing of a host and renewal/provisioning of certificates 
> to host.
>  
> FS: 
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Secure+Live+VM+Migration+for+KVM



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (CLOUDSTACK-10354) Remove branches CS-2163, Commit-Ratio, dedicate*, and bugfix*

2018-04-05 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10354?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Rafael Weingärtner updated CLOUDSTACK-10354:

Description: 
Following the protocol defined in [1]. We will remove branches "Remove branches 
matching the expressions.

{code:java}
CS-2163, Commit-Ratio, dedicate*, and bugfix*
{code}

The branches that will be removed are the following:

* CS-2163
* Commit-Ratio
* dedicate-guest-vlan-ranges
* dedicate-guest-vlan-ranges_2
* dedicate_public_ip_range
* dedicate_public_ip_range_2
* bugfix/CID-1114591
* bugfix/CID-1114601
* bugfix/CID-1116300
* bugfix/CID-1116654
* bugfix/CID-1116850
 *bugfix/CID-116538
*bugfix/CID-1192805
* bugfix/CID-1192810
* bugfix/CID-1212198
* bugfix/CID-106
*bugfix/CID-1230585
* bugfix/CID-1230587
* bugfix/CID-1230587-2ndtime
* bugfix/CID-1232333
* bugfix/CID-1240106
* bugfix/CID-1241966
* bugfix/CID-1241967
* bugfix/CID-1249800
* bugfix/CID-1249801
* bugfix/CID-1249803
* bugfix/CID-1254835
* bugfix/CS-7580
* bugfix/CS-7665
* bugfix/TO-hierarchy-flatening

[1] 
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Clean+up+old+and+obsolete+branches+protocol



  was:
Following the protocol defined in [1]. We will remove branches "Remove branches 
matching the expressions.

{code:java}
CS-2163, Commit-Ratio, dedicate*, and bugfix*
{code}

The branches that will be removed are the following:

* * CS-2163
* Commit-Ratio
* dedicate-guest-vlan-ranges
* dedicate-guest-vlan-ranges_2
* dedicate_public_ip_range
* dedicate_public_ip_range_2
* bugfix/CID-1114591
* bugfix/CID-1114601
* bugfix/CID-1116300
* bugfix/CID-1116654
* bugfix/CID-1116850
 *bugfix/CID-116538
*bugfix/CID-1192805
* bugfix/CID-1192810
* bugfix/CID-1212198
* bugfix/CID-106
*bugfix/CID-1230585
* bugfix/CID-1230587
* bugfix/CID-1230587-2ndtime
* bugfix/CID-1232333
* bugfix/CID-1240106
* bugfix/CID-1241966
* bugfix/CID-1241967
* bugfix/CID-1249800
* bugfix/CID-1249801
* bugfix/CID-1249803
* bugfix/CID-1254835
* bugfix/CS-7580
* bugfix/CS-7665
* bugfix/TO-hierarchy-flatening

[1] 
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Clean+up+old+and+obsolete+branches+protocol




> Remove branches CS-2163, Commit-Ratio, dedicate*, and bugfix*
> -
>
> Key: CLOUDSTACK-10354
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10354
> Project: CloudStack
>  Issue Type: Sub-task
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>Reporter: Rafael Weingärtner
>Assignee: Rafael Weingärtner
>Priority: Major
>
> Following the protocol defined in [1]. We will remove branches "Remove 
> branches matching the expressions.
> {code:java}
> CS-2163, Commit-Ratio, dedicate*, and bugfix*
> {code}
> The branches that will be removed are the following:
> * CS-2163
> * Commit-Ratio
> * dedicate-guest-vlan-ranges
> * dedicate-guest-vlan-ranges_2
> * dedicate_public_ip_range
> * dedicate_public_ip_range_2
> * bugfix/CID-1114591
> * bugfix/CID-1114601
> * bugfix/CID-1116300
> * bugfix/CID-1116654
> * bugfix/CID-1116850
>  *bugfix/CID-116538
> *bugfix/CID-1192805
> * bugfix/CID-1192810
> * bugfix/CID-1212198
> * bugfix/CID-106
> *bugfix/CID-1230585
> * bugfix/CID-1230587
> * bugfix/CID-1230587-2ndtime
> * bugfix/CID-1232333
> * bugfix/CID-1240106
> * bugfix/CID-1241966
> * bugfix/CID-1241967
> * bugfix/CID-1249800
> * bugfix/CID-1249801
> * bugfix/CID-1249803
> * bugfix/CID-1254835
> * bugfix/CS-7580
> * bugfix/CS-7665
> * bugfix/TO-hierarchy-flatening
> [1] 
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Clean+up+old+and+obsolete+branches+protocol



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Updated] (CLOUDSTACK-10354) Remove branches CS-2163, Commit-Ratio, dedicate*, and bugfix*

2018-04-05 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10354?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Rafael Weingärtner updated CLOUDSTACK-10354:

Description: 
Following the protocol defined in [1]. We will remove branches "Remove branches 
matching the expressions.

{code:java}
CS-2163, Commit-Ratio, dedicate*, and bugfix*
{code}

The branches that will be removed are the following:

* CS-2163
* Commit-Ratio
* dedicate-guest-vlan-ranges
* dedicate-guest-vlan-ranges_2
* dedicate_public_ip_range
* dedicate_public_ip_range_2
* bugfix/CID-1114591
* bugfix/CID-1114601
* bugfix/CID-1116300
* bugfix/CID-1116654
* bugfix/CID-1116850
* bugfix/CID-116538
* bugfix/CID-1192805
* bugfix/CID-1192810
* bugfix/CID-1212198
* bugfix/CID-106
* bugfix/CID-1230585
* bugfix/CID-1230587
* bugfix/CID-1230587-2ndtime
* bugfix/CID-1232333
* bugfix/CID-1240106
* bugfix/CID-1241966
* bugfix/CID-1241967
* bugfix/CID-1249800
* bugfix/CID-1249801
* bugfix/CID-1249803
* bugfix/CID-1254835
* bugfix/CS-7580
* bugfix/CS-7665
* bugfix/TO-hierarchy-flatening

[1] 
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Clean+up+old+and+obsolete+branches+protocol



  was:
Following the protocol defined in [1]. We will remove branches "Remove branches 
matching the expressions.

{code:java}
CS-2163, Commit-Ratio, dedicate*, and bugfix*
{code}

The branches that will be removed are the following:

* CS-2163
* Commit-Ratio
* dedicate-guest-vlan-ranges
* dedicate-guest-vlan-ranges_2
* dedicate_public_ip_range
* dedicate_public_ip_range_2
* bugfix/CID-1114591
* bugfix/CID-1114601
* bugfix/CID-1116300
* bugfix/CID-1116654
* bugfix/CID-1116850
 *bugfix/CID-116538
*bugfix/CID-1192805
* bugfix/CID-1192810
* bugfix/CID-1212198
* bugfix/CID-106
*bugfix/CID-1230585
* bugfix/CID-1230587
* bugfix/CID-1230587-2ndtime
* bugfix/CID-1232333
* bugfix/CID-1240106
* bugfix/CID-1241966
* bugfix/CID-1241967
* bugfix/CID-1249800
* bugfix/CID-1249801
* bugfix/CID-1249803
* bugfix/CID-1254835
* bugfix/CS-7580
* bugfix/CS-7665
* bugfix/TO-hierarchy-flatening

[1] 
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Clean+up+old+and+obsolete+branches+protocol




> Remove branches CS-2163, Commit-Ratio, dedicate*, and bugfix*
> -
>
> Key: CLOUDSTACK-10354
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10354
> Project: CloudStack
>  Issue Type: Sub-task
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>Reporter: Rafael Weingärtner
>Assignee: Rafael Weingärtner
>Priority: Major
>
> Following the protocol defined in [1]. We will remove branches "Remove 
> branches matching the expressions.
> {code:java}
> CS-2163, Commit-Ratio, dedicate*, and bugfix*
> {code}
> The branches that will be removed are the following:
> * CS-2163
> * Commit-Ratio
> * dedicate-guest-vlan-ranges
> * dedicate-guest-vlan-ranges_2
> * dedicate_public_ip_range
> * dedicate_public_ip_range_2
> * bugfix/CID-1114591
> * bugfix/CID-1114601
> * bugfix/CID-1116300
> * bugfix/CID-1116654
> * bugfix/CID-1116850
> * bugfix/CID-116538
> * bugfix/CID-1192805
> * bugfix/CID-1192810
> * bugfix/CID-1212198
> * bugfix/CID-106
> * bugfix/CID-1230585
> * bugfix/CID-1230587
> * bugfix/CID-1230587-2ndtime
> * bugfix/CID-1232333
> * bugfix/CID-1240106
> * bugfix/CID-1241966
> * bugfix/CID-1241967
> * bugfix/CID-1249800
> * bugfix/CID-1249801
> * bugfix/CID-1249803
> * bugfix/CID-1254835
> * bugfix/CS-7580
> * bugfix/CS-7665
> * bugfix/TO-hierarchy-flatening
> [1] 
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Clean+up+old+and+obsolete+branches+protocol



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Created] (CLOUDSTACK-10354) Remove branches CS-2163, Commit-Ratio, dedicate*, and bugfix*

2018-04-05 Thread JIRA
Rafael Weingärtner created CLOUDSTACK-10354:
---

 Summary: Remove branches CS-2163, Commit-Ratio, dedicate*, and 
bugfix*
 Key: CLOUDSTACK-10354
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10354
 Project: CloudStack
  Issue Type: Sub-task
  Security Level: Public (Anyone can view this level - this is the default.)
Reporter: Rafael Weingärtner
Assignee: Rafael Weingärtner


Following the protocol defined in [1]. We will remove branches "Remove branches 
matching the expressions.

{code:java}
CS-2163, Commit-Ratio, dedicate*, and bugfix*
{code}

The branches that will be removed are the following:

* * CS-2163
* Commit-Ratio
* dedicate-guest-vlan-ranges
* dedicate-guest-vlan-ranges_2
* dedicate_public_ip_range
* dedicate_public_ip_range_2
* bugfix/CID-1114591
* bugfix/CID-1114601
* bugfix/CID-1116300
* bugfix/CID-1116654
* bugfix/CID-1116850
 *bugfix/CID-116538
*bugfix/CID-1192805
* bugfix/CID-1192810
* bugfix/CID-1212198
* bugfix/CID-106
*bugfix/CID-1230585
* bugfix/CID-1230587
* bugfix/CID-1230587-2ndtime
* bugfix/CID-1232333
* bugfix/CID-1240106
* bugfix/CID-1241966
* bugfix/CID-1241967
* bugfix/CID-1249800
* bugfix/CID-1249801
* bugfix/CID-1249803
* bugfix/CID-1254835
* bugfix/CS-7580
* bugfix/CS-7665
* bugfix/TO-hierarchy-flatening

[1] 
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Clean+up+old+and+obsolete+branches+protocol





--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CLOUDSTACK-10301) Allow updating the network ACL list name and Description

2018-04-05 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16426930#comment-16426930
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10301:
-

rafaelweingartner commented on issue #2462: [CLOUDSTACK-10301] Allow updating 
the network ACL list name and Description
URL: https://github.com/apache/cloudstack/pull/2462#issuecomment-378937724
 
 
   @borisstoyanov these errors do not seem to be caused by changes introduced 
here.


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> Allow updating the network ACL list name and Description 
> -
>
> Key: CLOUDSTACK-10301
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10301
> Project: CloudStack
>  Issue Type: Bug
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>Reporter: Rafael Weingärtner
>Assignee: Rafael Weingärtner
>Priority: Major
>
> Currently, it is not possible to update the Network ACL name or Description 
> of an ACL after it has been created. It might be interesting to expose this 
> option via API and to add this feature to the UI.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CLOUDSTACK-10301) Allow updating the network ACL list name and Description

2018-04-05 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16426912#comment-16426912
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10301:
-

blueorangutan commented on issue #2462: [CLOUDSTACK-10301] Allow updating the 
network ACL list name and Description
URL: https://github.com/apache/cloudstack/pull/2462#issuecomment-378933821
 
 
   Trillian test result (tid-2461)
   Environment: kvm-centos7 (x2), Advanced Networking with Mgmt server 7
   Total time taken: 89017 seconds
   Marvin logs: 
https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr2462-t2461-kvm-centos7.zip
   Intermitten failure detected: /marvin/tests/smoke/test_certauthority_root.py
   Intermitten failure detected: /marvin/tests/smoke/test_internal_lb.py
   Intermitten failure detected: /marvin/tests/smoke/test_primary_storage.py
   Intermitten failure detected: /marvin/tests/smoke/test_routers.py
   Intermitten failure detected: /marvin/tests/smoke/test_snapshots.py
   Intermitten failure detected: /marvin/tests/smoke/test_vm_life_cycle.py
   Intermitten failure detected: /marvin/tests/smoke/test_host_maintenance.py
   Intermitten failure detected: /marvin/tests/smoke/test_hostha_kvm.py
   Smoke tests completed. 61 look OK, 6 have error(s)
   Only failed tests results shown below:
   
   
   Test | Result | Time (s) | Test File
   --- | --- | --- | ---
   test_01_add_primary_storage_disabled_host | `Error` | 0.61 | 
test_primary_storage.py
   test_01_primary_storage_nfs | `Error` | 0.11 | test_primary_storage.py
   ContextSuite context=TestStorageTags>:setup | `Error` | 0.19 | 
test_primary_storage.py
   test_04_restart_network_wo_cleanup | `Failure` | 2.82 | test_routers.py
   test_02_list_snapshots_with_removed_data_store | `Error` | 1.13 | 
test_snapshots.py
   test_08_migrate_vm | `Error` | 34.01 | test_vm_life_cycle.py
   test_01_cancel_host_maintenace_with_no_migration_jobs | `Failure` | 0.11 | 
test_host_maintenance.py
   test_02_cancel_host_maintenace_with_migration_jobs | `Error` | 3.37 | 
test_host_maintenance.py
   test_hostha_enable_ha_when_host_in_maintenance | `Error` | 2.51 | 
test_hostha_kvm.py
   


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> Allow updating the network ACL list name and Description 
> -
>
> Key: CLOUDSTACK-10301
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10301
> Project: CloudStack
>  Issue Type: Bug
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>Reporter: Rafael Weingärtner
>Assignee: Rafael Weingärtner
>Priority: Major
>
> Currently, it is not possible to update the Network ACL name or Description 
> of an ACL after it has been created. It might be interesting to expose this 
> option via API and to add this feature to the UI.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CLOUDSTACK-10352) XenServer: Support online storage migration from non-managed to managed storage

2018-04-05 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10352?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16426795#comment-16426795
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10352:
-

blueorangutan commented on issue #2502: [CLOUDSTACK-10352] XenServer: Support 
online migration of a virtual disk from non-managed to managed storage
URL: https://github.com/apache/cloudstack/pull/2502#issuecomment-378910671
 
 
   Trillian test result (tid-2452)
   Environment: vmware-65 (x2), Advanced Networking with Mgmt server 7
   Total time taken: 137537 seconds
   Marvin logs: 
https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr2502-t2452-vmware-65.zip
   Intermitten failure detected: /marvin/tests/smoke/test_certauthority_root.py
   Intermitten failure detected: 
/marvin/tests/smoke/test_deploy_vm_root_resize.py
   Intermitten failure detected: /marvin/tests/smoke/test_public_ip_range.py
   Intermitten failure detected: /marvin/tests/smoke/test_routers_network_ops.py
   Intermitten failure detected: /marvin/tests/smoke/test_routers.py
   Intermitten failure detected: /marvin/tests/smoke/test_service_offerings.py
   Intermitten failure detected: /marvin/tests/smoke/test_ssvm.py
   Intermitten failure detected: /marvin/tests/smoke/test_templates.py
   Intermitten failure detected: /marvin/tests/smoke/test_usage.py
   Intermitten failure detected: /marvin/tests/smoke/test_volumes.py
   Intermitten failure detected: /marvin/tests/smoke/test_vpc_redundant.py
   Smoke tests completed. 59 look OK, 8 have error(s)
   Only failed tests results shown below:
   
   
   Test | Result | Time (s) | Test File
   --- | --- | --- | ---
   test_00_deploy_vm_root_resize | `Failure` | 1151.77 | 
test_deploy_vm_root_resize.py
   test_01_RVR_Network_FW_PF_SSH_default_routes_egress_true | `Failure` | 
2071.44 | test_routers_network_ops.py
   test_04_restart_network_wo_cleanup | `Failure` | 3.06 | test_routers.py
   ContextSuite context=TestCpuCapServiceOfferings>:teardown | `Error` | 0.00 | 
test_service_offerings.py
   test_04_extract_template | `Failure` | 155.37 | test_templates.py
   ContextSuite context=TestISOUsage>:setup | `Error` | 0.00 | test_usage.py
   test_06_download_detached_volume | `Failure` | 188.13 | test_volumes.py
   test_04_rvpc_network_garbage_collector_nics | `Failure` | 672.53 | 
test_vpc_redundant.py
   


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> XenServer: Support online storage migration from non-managed to managed 
> storage
> ---
>
> Key: CLOUDSTACK-10352
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10352
> Project: CloudStack
>  Issue Type: Improvement
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>  Components: Management Server, XenServer
> Environment: XenServer
>Reporter: Mike Tutkowski
>Assignee: Mike Tutkowski
>Priority: Major
> Fix For: 4.12.0.0
>
>
> Allow a user to online migrate a volume from non-managed storage to managed 
> storage.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CLOUDSTACK-10327) SSO fails with error "Session Expired", except for root admin

2018-04-05 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10327?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16426760#comment-16426760
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10327:
-

rafaelweingartner commented on issue #2498: CLOUDSTACK-10327: Do not invalidate 
the session when API command not found
URL: https://github.com/apache/cloudstack/pull/2498#issuecomment-378901994
 
 
   @borisstoyanov here we also have that same 
`test_04_restart_network_wo_cleanup` failure.


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> SSO fails with error "Session Expired", except for root admin
> -
>
> Key: CLOUDSTACK-10327
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10327
> Project: CloudStack
>  Issue Type: Bug
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>  Components: API
>Affects Versions: 4.11.0.0
>Reporter: Olivier Lemasle
>Assignee: Olivier Lemasle
>Priority: Critical
>
> CloudStack SSO (using {{security.singlesignon.key}}) does not work anymore 
> with CloudStack 4.11, since commit 
> [9988c26|https://github.com/apache/cloudstack/commit/9988c269b259b84c0b8436bad17f88dbc1d706e7#diff-16f2bfa56c6e8760760dd2b27b47d5b4]
> This commit introduced a new feature (the ability to limit admin API calls to 
> a network CIDR), but also a regression due to a refactoring: every API 
> request that is not "validated" generates the same error (401 - Unauthorized) 
> and *invalidates the session*.
> However, during an SSO login, CloudStack executes (since ACS 4.7), a [call to 
> "listConfigurations"|https://github.com/apache/cloudstack/blob/8a3943b7632eddf3856a19e7d9a3fee82dd325be/ui/scripts/cloudStack.js#L172],
>  an API command reserved for root admins. When the user is not a root admin, 
> he does not have the privileges for this command.
> With CloudStack up to 4.10, an error 432 was returned (and ignored):
> {noformat}
> {"errorresponse":{"uuidList":[],"errorcode":432,"cserrorcode":,"errortext":"The
>  user is not allowed to request the API command or the API command does not 
> exist"}}
> {noformat}
> With CloudStack 4.11, the error 432 is replaced by an error 401 and the 
> session is invalidated. Then the next API calls lead to an error "Session 
> Expired" and the user cannot log in.
> {noformat}
> {"listconfigurationsresponse":{"uuidList":[],"errorcode":401,"errortext":"unable
>  to verify user credentials and/or request signature"}}
> {noformat}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CLOUDSTACK-10327) SSO fails with error "Session Expired", except for root admin

2018-04-05 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10327?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16426757#comment-16426757
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10327:
-

blueorangutan commented on issue #2498: CLOUDSTACK-10327: Do not invalidate the 
session when API command not found
URL: https://github.com/apache/cloudstack/pull/2498#issuecomment-378900724
 
 
   Trillian test result (tid-2456)
   Environment: kvm-centos7 (x2), Advanced Networking with Mgmt server 7
   Total time taken: 95355 seconds
   Marvin logs: 
https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr2498-t2456-kvm-centos7.zip
   Intermitten failure detected: 
/marvin/tests/smoke/test_deploy_virtio_scsi_vm.py
   Intermitten failure detected: /marvin/tests/smoke/test_loadbalance.py
   Intermitten failure detected: /marvin/tests/smoke/test_routers.py
   Intermitten failure detected: /marvin/tests/smoke/test_vpc_redundant.py
   Intermitten failure detected: /marvin/tests/smoke/test_host_maintenance.py
   Smoke tests completed. 65 look OK, 2 have error(s)
   Only failed tests results shown below:
   
   
   Test | Result | Time (s) | Test File
   --- | --- | --- | ---
   test_04_restart_network_wo_cleanup | `Failure` | 4.11 | test_routers.py
   test_04_rvpc_network_garbage_collector_nics | `Failure` | 538.30 | 
test_vpc_redundant.py
   


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> SSO fails with error "Session Expired", except for root admin
> -
>
> Key: CLOUDSTACK-10327
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10327
> Project: CloudStack
>  Issue Type: Bug
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>  Components: API
>Affects Versions: 4.11.0.0
>Reporter: Olivier Lemasle
>Assignee: Olivier Lemasle
>Priority: Critical
>
> CloudStack SSO (using {{security.singlesignon.key}}) does not work anymore 
> with CloudStack 4.11, since commit 
> [9988c26|https://github.com/apache/cloudstack/commit/9988c269b259b84c0b8436bad17f88dbc1d706e7#diff-16f2bfa56c6e8760760dd2b27b47d5b4]
> This commit introduced a new feature (the ability to limit admin API calls to 
> a network CIDR), but also a regression due to a refactoring: every API 
> request that is not "validated" generates the same error (401 - Unauthorized) 
> and *invalidates the session*.
> However, during an SSO login, CloudStack executes (since ACS 4.7), a [call to 
> "listConfigurations"|https://github.com/apache/cloudstack/blob/8a3943b7632eddf3856a19e7d9a3fee82dd325be/ui/scripts/cloudStack.js#L172],
>  an API command reserved for root admins. When the user is not a root admin, 
> he does not have the privileges for this command.
> With CloudStack up to 4.10, an error 432 was returned (and ignored):
> {noformat}
> {"errorresponse":{"uuidList":[],"errorcode":432,"cserrorcode":,"errortext":"The
>  user is not allowed to request the API command or the API command does not 
> exist"}}
> {noformat}
> With CloudStack 4.11, the error 432 is replaced by an error 401 and the 
> session is invalidated. Then the next API calls lead to an error "Session 
> Expired" and the user cannot log in.
> {noformat}
> {"listconfigurationsresponse":{"uuidList":[],"errorcode":401,"errortext":"unable
>  to verify user credentials and/or request signature"}}
> {noformat}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CLOUDSTACK-10344) Sometimes a bug happens when moving ACL rules (changing their order with drag and drop)

2018-04-05 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10344?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16426723#comment-16426723
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10344:
-

rafaelweingartner commented on issue #2511: [CLOUDSTACK-10344] bug when moving 
ACL rules (change order with drag and drop)
URL: https://github.com/apache/cloudstack/pull/2511#issuecomment-378890282
 
 
   I looked into it. The test failed because the uptime of the VR is less than 
3 minutes? 
   This looks like a "test" prone to fail due to environment differences. Shall 
we execute the tests again?
   
   ```
   Traceback (most recent call last):
 File "/marvin/tests/smoke/test_routers.py", line 526, in 
test_04_restart_network_wo_cleanup
   "Check uptime is less than 3 mins or not"
   AssertionError: Check uptime is less than 3 mins or not
   ```


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> Sometimes a bug happens when moving ACL rules (changing their order with drag 
> and drop) 
> 
>
> Key: CLOUDSTACK-10344
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10344
> Project: CloudStack
>  Issue Type: Bug
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>Reporter: Rafael Weingärtner
>Assignee: Rafael Weingärtner
>Priority: Major
> Fix For: 4.12
>
>
> An error is happening in certain conditions, such as when you have only 2 ACL 
> rules and you move the last one to the top. There are other conditions, for 
> instance, when moving ACLs that are in a sequence of numbers without gaps.
> Example, rules:
> number | rule
> 1 - rule A
> 2 - rule D
> 3 - rule B
> 4 - rule C
> 5 - rule E
> It is not possible to move "rule C" in position 2, 1, and 3.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CLOUDSTACK-10344) Sometimes a bug happens when moving ACL rules (changing their order with drag and drop)

2018-04-05 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10344?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16426601#comment-16426601
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10344:
-

borisstoyanov commented on issue #2511: [CLOUDSTACK-10344] bug when moving ACL 
rules (change order with drag and drop)
URL: https://github.com/apache/cloudstack/pull/2511#issuecomment-378851971
 
 
   @rafaelweingartner I think this one is suspicious: 
   ```
   
   test_04_restart_network_wo_cleanup | Failure | 4.38 | test_routers.py
   -- | -- | -- | --
   
   
   ```
   Can you have a look please? 


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> Sometimes a bug happens when moving ACL rules (changing their order with drag 
> and drop) 
> 
>
> Key: CLOUDSTACK-10344
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10344
> Project: CloudStack
>  Issue Type: Bug
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>Reporter: Rafael Weingärtner
>Assignee: Rafael Weingärtner
>Priority: Major
> Fix For: 4.12
>
>
> An error is happening in certain conditions, such as when you have only 2 ACL 
> rules and you move the last one to the top. There are other conditions, for 
> instance, when moving ACLs that are in a sequence of numbers without gaps.
> Example, rules:
> number | rule
> 1 - rule A
> 2 - rule D
> 3 - rule B
> 4 - rule C
> 5 - rule E
> It is not possible to move "rule C" in position 2, 1, and 3.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CLOUDSTACK-10226) CloudStack is not importing Local storage properly

2018-04-05 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10226?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16426599#comment-16426599
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10226:
-

blueorangutan commented on issue #2401: [CLOUDSTACK-10226] CloudStack is not 
importing Local storage properly
URL: https://github.com/apache/cloudstack/pull/2401#issuecomment-378851349
 
 
   @borisstoyanov a Trillian-Jenkins test job (centos7 mgmt + xenserver-71) has 
been kicked to run smoke tests


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> CloudStack is not importing Local storage properly 
> ---
>
> Key: CLOUDSTACK-10226
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10226
> Project: CloudStack
>  Issue Type: Bug
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>  Components: XenServer
>Reporter: Rafael Weingärtner
>Assignee: Rafael Weingärtner
>Priority: Major
> Fix For: 4.12
>
>
> CloudStack is importing as Local storage any XenServer SR that is of type LVM 
> or EXT. This causes a problem when one wants to use both Direct attach 
> storage and local storage. Moreover, CloudStack was not importing all of the 
> local storage that a host has available when local storage is enabled. It was 
> only importing the First SR it sees.
> To fix the first problem we started ignoring SRs that have the flag 
> shared=true when discovering local storages. SRs configured to be shared are 
> used as direct attached storage, and therefore should not be imported again 
> as local ones.
> To fix the second problem, we started loading all Local storage and importing 
> them accordingly to ACS.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CLOUDSTACK-10226) CloudStack is not importing Local storage properly

2018-04-05 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-10226?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16426598#comment-16426598
 ] 

ASF GitHub Bot commented on CLOUDSTACK-10226:
-

borisstoyanov commented on issue #2401: [CLOUDSTACK-10226] CloudStack is not 
importing Local storage properly
URL: https://github.com/apache/cloudstack/pull/2401#issuecomment-378851222
 
 
   @blueorangutan test centos7 xenserver-71


This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> CloudStack is not importing Local storage properly 
> ---
>
> Key: CLOUDSTACK-10226
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10226
> Project: CloudStack
>  Issue Type: Bug
>  Security Level: Public(Anyone can view this level - this is the 
> default.) 
>  Components: XenServer
>Reporter: Rafael Weingärtner
>Assignee: Rafael Weingärtner
>Priority: Major
> Fix For: 4.12
>
>
> CloudStack is importing as Local storage any XenServer SR that is of type LVM 
> or EXT. This causes a problem when one wants to use both Direct attach 
> storage and local storage. Moreover, CloudStack was not importing all of the 
> local storage that a host has available when local storage is enabled. It was 
> only importing the First SR it sees.
> To fix the first problem we started ignoring SRs that have the flag 
> shared=true when discovering local storages. SRs configured to be shared are 
> used as direct attached storage, and therefore should not be imported again 
> as local ones.
> To fix the second problem, we started loading all Local storage and importing 
> them accordingly to ACS.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)