[Yahoo-eng-team] [Bug 1408859] [NEW] Scheduler didn't release already allocated HostState resources after multiple creating instances fails

2015-01-08 Thread Rui Chen
Public bug reported: We multiple-create 3 instances, but the host resource is only enough for 1 instance, nova-scheduler consume the resource of selected host for the first instance in select_destinations. After the multiple creating fails, we try to boot 1 instance with same flavor, the host

[Yahoo-eng-team] [Bug 1408862] [NEW] type filter of policy list doesn't take effect

2015-01-08 Thread wanghong
Public bug reported: According to the code and the comment of code, it seams that we don't want to support type filter for policy list, refer to: https://github.com/openstack/keystone/blob/master/keystone/policy/core.py#L64 However, the controller defines the type filter:

[Yahoo-eng-team] [Bug 1408865] [NEW] Ignoring EndpointNotFound: The service catalog is empty error when init_host

2015-01-08 Thread wanghao
Public bug reported: the scenario: 1. create a vm using bootable volume. 2. delete this vm 3. restart service nova-compute when vm's task state is deleting. When nova-compute is up, vm became deleted successful, but the bootable volume is still in-use state and can't delete it using cinder

[Yahoo-eng-team] [Bug 1408845] [NEW] Disabling user in ldap brakes user-list for project

2015-01-08 Thread Oleksii Aleksieiev
Public bug reported: Disabling user in ldap brakes user-list for project. Step to reproduce. * create a testuser user in ldap backend for keystone. * check that user exist in user list. * assign some role to this user in any test project. * check that this user appear in keystone user-list

[Yahoo-eng-team] [Bug 1408862] Re: type filter of policy list doesn't take effect

2015-01-08 Thread wanghong
The filtering by 'type' is not being done by the manager/driver. It's being done at Controller level, at PolicyV3.wrap_collection(..) ** Changed in: keystone Status: In Progress = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is

[Yahoo-eng-team] [Bug 1408873] [NEW] references to name in pluggables misleading

2015-01-08 Thread David Lyle
Public bug reported: The term name is used incorrectly and is misleading in the pluggable extensions settings documentation and the enabled files. The value that needs to be specified is the slug not the name. This correction will aid in developers and deployers using the correct value. Change

[Yahoo-eng-team] [Bug 1408908] [NEW] Nova API secgroup-list doesn't support all_tenants

2015-01-08 Thread sireesha chintada
Public bug reported: When nova secgroup-list --all-tenants is given with sourcing admin, it is returning secgroups of only admin tenant. It should actually list secgroups of all the tenants present. This bug is reproduced in stable/icehouse and stable/juno Steps to reproduce this bug:

[Yahoo-eng-team] [Bug 1408909] [NEW] Release_dhcp_port doesn't work when remove network from dhcp agent

2015-01-08 Thread KaiLin
Public bug reported: In the bug:https://bugs.launchpad.net/neutron/+bug/1288923 It changes that reserve the dhcp port to be reused after remove-network-from-agent. The code is: port['device_id'] = constants.DEVICE_ID_RESERVED_DHCP_PORT self.update_port(context,

[Yahoo-eng-team] [Bug 1065531] Re: lockutils - remove lock dir creation and cleanup

2015-01-08 Thread Ben Nemec
I believe everyone is on oslo.concurrency now, so this should no longer be an issue anywhere. ** Changed in: cinder Status: In Progress = Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron.

[Yahoo-eng-team] [Bug 1407105] Re: Password Change Doesn't Affirmatively Invalidate Sessions

2015-01-08 Thread Jeremy Stanley
Given the overwhelming consensus that this isn't exploitable, I've switched the bug to public and marked the security advisory task won't fix so this can just be worked as a normal bug/hardening opportunity. ** Information type changed from Private Security to Public ** Changed in: ossa

[Yahoo-eng-team] [Bug 1408625] [NEW] metadata server errors out with a request missing X-Instance-ID-Signature header

2015-01-08 Thread Tomoe Sugihara
Public bug reported: When metadata server (nova-api:8775 by default) gets a request without X -Instance-ID-Signature header, the server errors out with the following stacktrace: 2015-01-08 18:10:51.955 INFO nova.metadata.wsgi.server [-] 127.0.0.1 GET / HTTP/1.1 status: 200 len: 215 time:

[Yahoo-eng-team] [Bug 1408636] [NEW] Incompatibility between nova 2014.2 and 2014.2.1-1

2015-01-08 Thread Michal
Public bug reported: The problem I experienced and a solution is described under the following link: https://ask.openstack.org/en/question/57296/juno-centos-7 -buildabortexception-build-of-instance-aborted-failed-to-allocate-the- networks-not-rescheduling/ It was also reported here:

[Yahoo-eng-team] [Bug 1408640] [NEW] logout dropdown was blocked by message tip

2015-01-08 Thread LIU Yulong
Public bug reported: Logout dropdown was blocked by message tip, if you close one message tip, the next will come top again : ( ** Affects: horizon Importance: Undecided Assignee: LIU Yulong (dragon889) Status: In Progress ** Attachment added: message block the logout

[Yahoo-eng-team] [Bug 1408591] [NEW] AttributeError: 'Instance' object has no attribute 'get_flavor' when call compute_api.update

2015-01-08 Thread Jerry Cai
Public bug reported: In nova/notifications.py(370)info_from_instance(): The AttributeError: 'Instance' object has no attribute 'get_flavor' throws on: instance_type = instance.get_flavor() The stacktrace is: - self.compute_api.update(context, local_instance, **base_options)

[Yahoo-eng-team] [Bug 1408603] [NEW] OVS Agent creates a tunnel when local_ip is wrong

2015-01-08 Thread Itzik Brown
Public bug reported: When specifying a wrong local_ip with tunnel type 'vxlan' which doesn't belong to the host a tunnel is created where local_ip is the wrong one and the remote_ip is the right one. There should be a sanity check to check that the IP address in local_ip belongs to the host.

[Yahoo-eng-team] [Bug 1408612] [NEW] HTTP Keep-alive connections prevent keystone from terminating

2015-01-08 Thread Mark Goddard
Public bug reported: Seen on RDO Juno, running on CentOS 7. Steps to reproduce: - Set admin_workers=1 and public_workers=1 in /etc/keystone/keystone.conf - Start the keystone service: `systemctl start openstack-keystone` - Start a 'persistent' TCP connection to keystone: `telnet localhost 5000

[Yahoo-eng-team] [Bug 1408613] [NEW] VMware: snapshoting a VM with ephemeral disk attached creates wrong image

2015-01-08 Thread Gary Kotton
Public bug reported: Booting a image that was snapshoted from a VM with an ephemarl disk fails. This is due to the fact that the wrong root disk is uploaded! ** Affects: nova Importance: Critical Assignee: Gary Kotton (garyk) Status: In Progress ** Changed in: nova

[Yahoo-eng-team] [Bug 1370037] Re: bulk termination of instances

2015-01-08 Thread Matthias Runge
The issue is here: bulk termination stops, when an instance is stopped e.g via command line manually after displaying the list of instances. ** Changed in: horizon Status: Expired = New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is

[Yahoo-eng-team] [Bug 1400966] Re: [OSSA-2014-041] Glance allows users to download and delete any file in glance-api server (CVE-2014-9493)

2015-01-08 Thread Thierry Carrez
Let's track the filesystem: case on bug 1408663, for clarity. ** Changed in: ossa Status: In Progress = Fix Released ** Changed in: glance Status: In Progress = Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is

[Yahoo-eng-team] [Bug 1408663] [NEW] Glance still allows users to download and delete any file in glance-api server

2015-01-08 Thread Thierry Carrez
*** This bug is a security vulnerability *** Public security bug reported: Jin Liu reported that OSSA-2014-041 (CVE-2014-9493) only fixed the vulnerability for swift: and file: URI, but overlooked filesystem: URIs. Please see bug 1400966 for historical reference. ** Affects: glance

[Yahoo-eng-team] [Bug 1408656] [NEW] No proper validtion for optional arguments for nova list command

2015-01-08 Thread Sudheer Kalla
Public bug reported: ubuntu@ubuntu-ThinkCentre-M93p:~$ nova list --te +--+--+++-+--+ | ID | Name | Status | Task State | Power State | Networks |

[Yahoo-eng-team] [Bug 1408658] [NEW] migration 61 downgrade fails using mysql

2015-01-08 Thread Brant Knudson
Public bug reported: When trying to downgrade from version 61, it fails with an AttributeError. $ keystone-manage db_sync 60 2015-01-08 08:29:56.494 CRITICAL keystone [-] AttributeError: 'MetaData' object has no attribute 'c' 2015-01-08 08:29:56.494 TRACE keystone Traceback (most recent call

[Yahoo-eng-team] [Bug 1408708] [NEW] The API returns a serial console connection without an activated nova-serialproxy

2015-01-08 Thread Markus Zoeller
Public bug reported: Problem description === The Nova REST API returns with server action ``os-getSerialConsole`` a connection info (a websocket URL) although the nova-serialproxy service is *not* activated. Steps to reproduce == * Configure in ``nova.conf``

[Yahoo-eng-team] [Bug 1407736] Re: python unit test jobs failing due to subunit log being too big

2015-01-08 Thread Matt Riedemann
bknudson pointed out the real issue, sqlalchemy-migrate is always logging deprecation warnings, that's why moving the deprecation warnings fixture in nova to after the db fixture fixed the problem for nova: https://github.com/stackforge/sqlalchemy-