[Yahoo-eng-team] [Bug 1452143] [NEW] nova-idmapshift is missing its rootwrap filter

2015-05-06 Thread gustavo panizzo
Public bug reported: when i try to boot a vm using lxc idmap the following error appears on nova-compute log 2015-05-06 14:46:10.827 8940 TRACE nova.compute.manager [instance: 2c776372-1fa2-4b19-83aa-8358b7212d06] File /usr/lib/python2.7/dist-packages/nova/utils.py, line 206, in execute

[Yahoo-eng-team] [Bug 1452197] [NEW] websso docs have incorrect/incomplete Apache config snippets

2015-05-06 Thread Julian Edwards
Public bug reported: The documentation referenced here http://docs.openstack.org/developer/keystone/extensions/websso.html has a few problems: 1. The Apache config in all the examples is incorrect, it has an opening Location tag bug closes with LocationMatch 2. The mod_shib snippet needs the

[Yahoo-eng-team] [Bug 1452206] [NEW] User can send requests directly to glance registry server

2015-05-06 Thread Inessa Vasilevskaya
Public bug reported: I was playing with the devstack environment and noticed an interesting feature: The user can send requests directly to the registry server. All he needs to know is the address/port glance-registry is launched at. The following request curl -v localhost:9191/images --header

[Yahoo-eng-team] [Bug 1452205] [NEW] VPNaaS: ipsec addconn failed

2015-05-06 Thread baojie
Public bug reported: When create an ipsec-connection 2015-05-05 14:06:41.875 4555 DEBUG neutron.agent.linux.utils [-] Running command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ip', 'netns', 'exec', 'qrouter-a9e53c63-23fa-4544-9ad4-cdaa480eb5de', 'ipsec', 'addconn',

[Yahoo-eng-team] [Bug 1452241] [NEW] neutron-sanity-check can't find prevent_arp_spoofing in config

2015-05-06 Thread Jakub Libosvar
Public bug reported: Running neutron-sanity-check fails with 2015-05-06 13:09:26.180 CRITICAL neutron [-] AttributeError: 'module' object has no attribute 'AGENT' 2015-05-06 13:09:26.180 TRACE neutron Traceback (most recent call last): 2015-05-06 13:09:26.180 TRACE neutron File

[Yahoo-eng-team] [Bug 1452232] [NEW] NameError: global name '_' is not defined on keystone authorization error

2015-05-06 Thread Doug Fish
Public bug reported: If there is a keystone authorization error at login time Horizon reaches the error screen and File /usr/lib/python2.7/site-packages/openstack_auth/plugin/base.py, line 95, in list_projects msg = _('Unable to retrieve authorized projects.') NameError: global name '_' is

[Yahoo-eng-team] [Bug 1450798] Re: Multiple command injection vulns in schema_diff tool

2015-05-06 Thread Jeremy Stanley
Based on the above discussion, I'm reclassifying this as E: not a vulnerability http://security.openstack.org/vmt-process.html#incident- report-taxonomy but have tagged it security since it might present a strengthening opportunity (albeit a very minimal one). ** Information type changed from

[Yahoo-eng-team] [Bug 1448161] Re: IPv6 missing from example local.conf

2015-05-06 Thread Rob Cresswell
** Changed in: horizon Status: In Progress = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Dashboard (Horizon). https://bugs.launchpad.net/bugs/1448161 Title: IPv6 missing from example local.conf

[Yahoo-eng-team] [Bug 1452224] [NEW] libvirt: attaching volume device name should be decided using the same logic as when booting

2015-05-06 Thread Nikola Đipanov
Public bug reported: libvirt driver needs to use it's own logic for determining the device name that will be persisted in Nova instead of the generic methods in nova.compute.utils, since libvirt cannot really assign the device name to a block device of an instance (it's treated as a ordering hint

[Yahoo-eng-team] [Bug 1452275] [NEW] loading multiple extension apis using a single extension driver fails

2015-05-06 Thread Om Kumar
Public bug reported: While trying to implement an extension driver, i observed that more than one extension apis can not be exposed. For Eg: class ABCExtensionDriver(api.ExtensionDriver): _supported_extension_aliases = [switch, commit, trunked] def initialize(self):

[Yahoo-eng-team] [Bug 1451921] Re: live-migration fails when instance booted without specified availability_zone

2015-05-06 Thread Sylvain Bauza
As discussed on IRC, the issue you mention comes from the fact that default_schedule_zone conf flag is set to None by default. As it's defaulted to None, then the instance has no AZ unless the user specifically asks for one, so the AZFilter doesn't care about it. If you want to have a default AZ

[Yahoo-eng-team] [Bug 1452257] [NEW] hide remove rule when no rule is inserted in firewall policies

2015-05-06 Thread Masco Kaliyamoorthy
Public bug reported: hide the remove rule row action from the firewall policy if no rule is inserted on it ** Affects: horizon Importance: Undecided Assignee: Masco Kaliyamoorthy (masco) Status: New ** Changed in: horizon Assignee: (unassigned) = Masco Kaliyamoorthy

[Yahoo-eng-team] [Bug 1253982] Re: Inconsistency in internationalization of the button Terminate Instances in Instances.

2015-05-06 Thread utsav dusad
** Changed in: horizon Status: Confirmed = Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Dashboard (Horizon). https://bugs.launchpad.net/bugs/1253982 Title: Inconsistency in internationalization

[Yahoo-eng-team] [Bug 1452485] [NEW] Error from libvirt Cannot recv data: Connection reset by peer

2015-05-06 Thread melanie witt
Public bug reported: Sample trace: 2015-05-06 05:11:59.378 ERROR nova.compute.manager [req-5a1cc40e-be46-4be3-818d-fecd6fcddff4 ServerRescueTestJSON-467649084 ServerRescueTestJSON-1704558189] [instance: cdb1cda4-9ca1-4bfd-8a1e-8a36214a72c3] Error trying to Rescue Instance 2015-05-06

[Yahoo-eng-team] [Bug 1252947] Re: libvirtError: Cannot recv data: Connection reset by peer

2015-05-06 Thread Matt Riedemann
This is still around:

[Yahoo-eng-team] [Bug 1403333] Re: KeyError: 'gateway_mac' in ovs dvr agent

2015-05-06 Thread Assaf Muller
*** This bug is a duplicate of bug 1404823 *** https://bugs.launchpad.net/bugs/1404823 Following my investigation and conversation with Swami, closing this bug as a duplicate of: https://bugs.launchpad.net/neutron/+bug/1404823 ** Changed in: neutron Status: In Progress = Invalid **

[Yahoo-eng-team] [Bug 1452447] [NEW] is_public is not v2 reserved prop but domain marks it otherwise

2015-05-06 Thread nikhil komawar
Public bug reported: https://review.openstack.org/#/c/154704/ modifies is_public to be non- reserved. However, the list -- _reserved_properties = ['owner', 'is_public', 'locations', does not have it removed. https://github.com/openstack/glance/blob/master/glance/domain/__init__.py#L56 **

[Yahoo-eng-team] [Bug 1452458] [NEW] Server returns error 500 when setting a DVR router as a gateway on a network with no subnet, and then adding an interface

2015-05-06 Thread Assaf Muller
Public bug reported: Steps to reproduce: 1) Create DVR router 2) Set it as a gateway on an external network with no subnet (Note: I have no idea what this means or why would someone do this). The operation succeeds as it does with legacy routers. 3) Add a router interface on an internal subnet.

[Yahoo-eng-team] [Bug 1452443] [NEW] Schema definition for visibility attribute missing shared value

2015-05-06 Thread Jay Pipes
Public bug reported: Glance's v2 Images resource has a visibility attribute that can be private, public, and shared: http://git.openstack.org/cgit/openstack/glance/tree/glance/api/v2/images.py?id=93b0d5fce3a41e4a3a549f98f78b6681cbc3ea95#n579 However, the schema definition for the visibility

[Yahoo-eng-team] [Bug 1452464] [NEW] Jshint removing Hogan and static_url

2015-05-06 Thread Thai Tran
Public bug reported: Hogan and STATIC_URL are only use in a few files. Hence, we do not really need them enabled globally. Removing them from jshint global config. ** Affects: horizon Importance: Low Assignee: Thai Tran (tqtran) Status: In Progress -- You received this bug

[Yahoo-eng-team] [Bug 1452446] [NEW] Jasmine in dashboard out of sync

2015-05-06 Thread Thai Tran
Public bug reported: We currently have two jasmine tests, one in horizon and one in dashboard. We are currently use two different templates and they are out of sync with each other. Furthermore, we should extend the sources list, not override it, because dashboard modules have a dependency on

[Yahoo-eng-team] [Bug 1452411] [NEW] lbaas panel does not show fip info

2015-05-06 Thread Eric Peterson
Public bug reported: The floating IP associated with a load balancers vip is perhaps one of the most important pieces of information users need to know. Horizon has no clear / easy way to get this information other than tracking down a VIP's attached port, and mapping that to the FIP to port

[Yahoo-eng-team] [Bug 1452418] [NEW] Fernet tokens read from disk on every request

2015-05-06 Thread Dolph Mathews
Public bug reported: The fernet keys are stored (by default) in /etc/keystone/fernet-keys/ in individual key files. All keys are read from disk on every request, so you end up with log spam like: keystone.token.providers.fernet.utils [-] Loaded 2 encryption keys from:

[Yahoo-eng-team] [Bug 1452425] [NEW] iproute_arg_supported in neutron/agent/linux/ip_lib.py causes error logs when they should be debug

2015-05-06 Thread Matthew Thode
Public bug reported: this function calls help. calling help typically causes the program being called to exit non-zero. This causes the command to be logged as an error even though it should not be. ** Affects: neutron Importance: Undecided Status: New -- You received this bug

[Yahoo-eng-team] [Bug 1377161] Re: If volume-attach API is failed, Block Device Mapping record will remain

2015-05-06 Thread Nikola Đipanov
So as commented on the patch - I really think that we need to make sure that whatever gets created, also gets cleaned up on errors - while the patch https://review.openstack.org/166695 has some good ideas. What I also noticed (when I was testing this some time ago) is that what really happens

[Yahoo-eng-team] [Bug 1450521] Re: remove the gateway validation of subnet for router VM's port

2015-05-06 Thread Carl Baldwin
The reason for not allowing the gateway to be within the allocation pools was so that Neutron would not allocate the gateway IP address to just anything. It should be specifically requested for a router port or a service VM like you've done. If we allow moving the gateway IP to an IP inside the

[Yahoo-eng-team] [Bug 1435748] Re: save method is getting called two times in 'attach' api

2015-05-06 Thread Nikola Đipanov
** Changed in: nova Status: In Progress = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1435748 Title: save method is getting called two times in

[Yahoo-eng-team] [Bug 1452518] [NEW] Add member_action to subresource will cause:500 Internal Server Error

2015-05-06 Thread Brian Shang
Public bug reported: Add member_action to subresource will cause:500 Internal Server Error ** Affects: neutron Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron.

[Yahoo-eng-team] [Bug 1452529] [NEW] Lbaas object query doesn't support sorting or paging

2015-05-06 Thread Xurong Yang
Public bug reported: Lbaas object query doesn't support sorting or paging, while query of the basic Neutron objects like network, subnet and port does. ** Affects: neutron Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo!

[Yahoo-eng-team] [Bug 1452510] [NEW] TestVolumeBootPattern KeyError: 'metadata'

2015-05-06 Thread Ramy Asselin
Public bug reported: Getting this error in TestVolumeBootPattern: KeyError: 'metadata' According to logstash, started happening around 2015-04-28T18:47:32.000

[Yahoo-eng-team] [Bug 1452522] [NEW] nova-api: remove unuseful expect error in v2.1 service delete method

2015-05-06 Thread Eli Qiao
Public bug reported: in nova/api/openstack/compute/plugins/v3/services.py we found : @extensions.expected_errors((400, 404)) def delete(self, req, id): by checking code, there isn't any badrequest exception raising, we need to remove 400 from expected code. ** Affects: nova

[Yahoo-eng-team] [Bug 1452443] Re: Schema definition for visibility attribute missing shared value

2015-05-06 Thread Fei Long Wang
Got some heads up from Brian. 'shared' is a valid value for the visibility *filter*, but it is not a value that's used to populate the 'visibility' field of any image. Images are either visibility == public or visibility == private, and a shared image is someone's private image that they have

[Yahoo-eng-team] [Bug 1452345] [NEW] keystone-manage should not attempt to run if keystone is in httpd

2015-05-06 Thread Adam Young
Public bug reported: If a user attempts to run keystone-manage but the instance is configured to run in httpd, it will attempt to start the eventlet server. If the httpd instance is running, the error is confusing, since a port is already in use. ** Affects: keystone Importance: Undecided