[Yahoo-eng-team] [Bug 1687027] Re: test_walk_versions tests fail with "IndexError: tuple index out of range" after timeout

2018-10-24 Thread OpenStack Infra
Reviewed: https://review.openstack.org/612505 Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=c39afbd5fcdfff2ad5e7f6963768da9f3d8027d2 Submitter: Zuul Branch:master commit c39afbd5fcdfff2ad5e7f6963768da9f3d8027d2 Author: Slawek Kaplonski Date: Mon Oct 22 22:58:48

[Yahoo-eng-team] [Bug 1787306] Re: scss.errors.SassImportError: Couldn't find anything to import: ../../mixins

2018-10-24 Thread Launchpad Bug Tracker
[Expired for OpenStack Dashboard (Horizon) because there has been no activity for 60 days.] ** Changed in: horizon Status: Incomplete => Expired -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Dashboard

[Yahoo-eng-team] [Bug 1799332] Re: Apache WSGI config shipping with Keystone is incompatible with Horizon

2018-10-24 Thread Mike Joseph
I believe that this should be reopened, since the issue remains for the following reasons: * All installation guide docs refer to Keystone running on port 5000 (OS_AUTH_URL=http://controller:5000/v3). If that's no longer the recommended deployment model, then the docs should be updated

[Yahoo-eng-team] [Bug 1759420] Re: nova does not correctly support HW_DISK_BUS=sata or usb for kvm/qemu

2018-10-24 Thread OpenStack Infra
Reviewed: https://review.openstack.org/584999 Committed: https://git.openstack.org/cgit/openstack/nova/commit/?id=1ba150fa5233ebeacdc02e89b2e83a1a6861bc19 Submitter: Zuul Branch:master commit 1ba150fa5233ebeacdc02e89b2e83a1a6861bc19 Author: Sean Mooney Date: Tue Jul 31 21:22:52 2018

[Yahoo-eng-team] [Bug 1799790] [NEW] Scenario job neutron_tempest_plugin.scenario.test_floatingip.FloatingIPPortDetailsTest.test_floatingip_port_details timeout

2018-10-24 Thread Hongbin Lu
Public bug reported: Job: any tempest plugin scenario jobs Failed test: neutron_tempest_plugin.scenario.test_floatingip.FloatingIPPortDetailsTest.test_floatingip_port_details Sample failure:

[Yahoo-eng-team] [Bug 1799779] [NEW] LXD module installs the wrong ZFS package if it's missing

2018-10-24 Thread Michael Skalka
Public bug reported: When using the LXD module cloud-init will attempt to install ZFS if it does not exist on the target system. However instead of installing the `zfsutils-linux` package it attempts to install `zfs` resulting in an error. This was captured from a MAAS deployed server however

[Yahoo-eng-team] [Bug 1794302] Re: Live migration : service catalog is empty

2018-10-24 Thread Matt Riedemann
Check the [neutron] section of the nova configuration file used for your nova-conductor service, because that is what is failing. Is that configured? And if so, what are the values? Are those consistent with what is in the service catalog for the networking service (neutron)? ** Changed in: nova

[Yahoo-eng-team] [Bug 1797771] Re: nova rebuild using openstack server rebuild is failing

2018-10-24 Thread Matt Riedemann
This doesn't seem to be a nova problem, but a problem with your database: 2018-10-11 04:47:49.827 12628 ERROR nova.api.metadata.handler [req-e8a61425-56dc-4dd7-bbca-05ae913f24c0 - - - - -] Failed to get metadata for instance id: b9f8fe03-a78b-43f3-bc1f-68ceaff3f978 2018-10-11 04:47:49.827 12628

[Yahoo-eng-team] [Bug 1780164] Re: httpd leaks open files

2018-10-24 Thread Morgan Fainberg
We should fix keystoneclient. KeystoneAuth is not doing anything wrong here. I am against a "temp hack" like this. Secondarily, please submit this patch to gerrit at review.openstack.org so that it can be considered. Posting patches here is unlikely to be seen as easily/readily. ** Changed in:

[Yahoo-eng-team] [Bug 1498556] Re: Reasonable assumptions concerning domain references

2018-10-24 Thread Morgan Fainberg
** Changed in: keystoneauth Status: Triaged => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1498556 Title: Reasonable assumptions concerning

[Yahoo-eng-team] [Bug 1659053] Re: use uuids with pycadf

2018-10-24 Thread Morgan Fainberg
** Changed in: pycadf Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1659053 Title: use uuids with pycadf Status in

[Yahoo-eng-team] [Bug 1699060] Re: Impossible to define policy rule based on domain ID

2018-10-24 Thread Morgan Fainberg
@Ben, this is nothing to do with oslo-policy. it has to do with the values passed to oslo-policy in the creds dict. If the creds dict does not have domain-id populated in it, you can't enforce on it. ** Changed in: oslo.policy Status: Incomplete => Invalid -- You received this bug

[Yahoo-eng-team] [Bug 1687593] Re: Create OAUTH request token gives 401 error when request url is admin endpoint

2018-10-24 Thread Morgan Fainberg
** Changed in: python-keystoneclient Status: In Progress => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1687593 Title: Create OAUTH request

[Yahoo-eng-team] [Bug 1710329] Re: support for chinese name to show

2018-10-24 Thread Morgan Fainberg
Is this something in the Keystone Server? this doesn't seem to be KSC specific. ** Changed in: python-keystoneclient Status: In Progress => Incomplete ** Also affects: keystone Importance: Undecided Status: New -- You received this bug notification because you are a member of

[Yahoo-eng-team] [Bug 1266962] Re: Remove set_time_override in timeutils

2018-10-24 Thread Morgan Fainberg
removed keystonemiddleware as LP will timeout when trying to update. ** No longer affects: keystonemiddleware -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1266962 Title: Remove

[Yahoo-eng-team] [Bug 1317302] Re: pki_setup shouldn't be required to check revocations

2018-10-24 Thread Morgan Fainberg
Revocations are no longer exposed with keystone. Marking this bug as invalid. ** Changed in: keystonemiddleware Status: Triaged => Won't Fix ** Changed in: keystonemiddleware Status: Won't Fix => Invalid -- You received this bug notification because you are a member of Yahoo!

[Yahoo-eng-team] [Bug 1440493] Re: Crash with python-memcached==1.5.4

2018-10-24 Thread Morgan Fainberg
marking as invalid for ksm. ** Changed in: keystonemiddleware Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1440493 Title:

[Yahoo-eng-team] [Bug 1795800] Re: Username enumeration via response timing difference

2018-10-24 Thread Morgan Fainberg
I don't know how we'll address this. Realistically, I think this is going to have to be marked as invalid/wont fix/opinion. I'm going to mark it as wont fix, we can circle back on it if there is more discussion to be had. ** Changed in: keystone Status: New => Won't Fix -- You received

[Yahoo-eng-team] [Bug 1649616] Re: Keystone Token Flush job does not complete in HA deployed environment

2018-10-24 Thread Morgan Fainberg
newton is EOL ** Changed in: keystone/newton Status: In Progress => Won't Fix ** Changed in: keystone/ocata Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity

[Yahoo-eng-team] [Bug 1793347] Re: keystone upgrade fails q->r oslo.log requirement to low

2018-10-24 Thread Morgan Fainberg
This isn't something Keystone directly has control over, what is in our requirements/g-r is what we ship with. Marking as invalid for keystone server. ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team,

[Yahoo-eng-team] [Bug 1541656] Re: OAuth Identity token gives Forbidden

2018-10-24 Thread Morgan Fainberg
Marking as incomplete for OSC, please re-visit if it is still an issue (many things have changed across the board) and invalid for keystone. ** Changed in: keystone Status: Incomplete => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team,

[Yahoo-eng-team] [Bug 1235340] Re: Links always use public endpoint

2018-10-24 Thread Morgan Fainberg
Marking as wont fix. The solution has been discussed and is recommended that the public_endpoint be unset. ** Changed in: keystone Status: Triaged => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack

[Yahoo-eng-team] [Bug 1645263] Re: Unable to run stack.sh on fresh new Ubuntu Xenial 16.04 LTS, script fails with "No module named 'memcache' "

2018-10-24 Thread Morgan Fainberg
Marked as invalid. Not a lot we can do about python-memcached, but with the py3-first testing i think we are beyond this as a bug. ** Changed in: keystone Status: Incomplete => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is

[Yahoo-eng-team] [Bug 1630092] Re: Admin password reset should be exempt from password history validation

2018-10-24 Thread Morgan Fainberg
** Changed in: keystone/newton Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1630092 Title: Admin password reset

[Yahoo-eng-team] [Bug 1635306] Re: After newton deployment _member_ role is missing in keystone

2018-10-24 Thread Morgan Fainberg
** Changed in: keystone/newton Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1635306 Title: After newton deployment

[Yahoo-eng-team] [Bug 1696111] Re: Keystone confuses users when creating a trust when there's a roles name conflict

2018-10-24 Thread Morgan Fainberg
** Changed in: keystone Status: Fix Committed => Fix Released ** Changed in: python-keystoneclient Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone).

[Yahoo-eng-team] [Bug 1717847] Re: Policy does not work for trusts

2018-10-24 Thread Morgan Fainberg
I'm going to mark this as opinion. It likely will get better with scope- types and policy-in-code, but this bug in itself isn't relevant due to how trusts were architected. ** Changed in: keystone Status: Confirmed => Opinion -- You received this bug notification because you are a member

[Yahoo-eng-team] [Bug 1704148] Re: OAUTH functional tests are broken on stable/ocata and stable/newton

2018-10-24 Thread Morgan Fainberg
** Changed in: keystone/newton Status: Fix Committed => Fix Released ** Changed in: keystone/ocata Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone).

[Yahoo-eng-team] [Bug 1703369] Re: get_identity_providers policy should be singular

2018-10-24 Thread Morgan Fainberg
** Changed in: keystone/ocata Status: Fix Committed => Fix Released ** Changed in: keystone/newton Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone).

[Yahoo-eng-team] [Bug 1767024] Re: pycadf fails on FIPS compliant system due to using md5

2018-10-24 Thread Morgan Fainberg
Not a bug in keystone. Something must be fixed in pycadf. ** Changed in: keystone Status: Incomplete => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone).

[Yahoo-eng-team] [Bug 1799748] [NEW] OVSNeutronAgent.rpc_loop is always called with "polling_manager"

2018-10-24 Thread Rodolfo Alonso
Public bug reported: OVSNeutronAgent.rpc_loop is always called with "polling_manager" parameter. Furthermore, "polling_manager" cannot be retrieved like in [1]. "get_polling_manager" is a generator and must be used within a context manager. [1]

[Yahoo-eng-team] [Bug 1599546] Re: Make validation patterns configurable

2018-10-24 Thread Morgan Fainberg
Marking as invalid. Validation should not vary based upon options set in configuration keystone-to-keystone. It makes it hard to know what to expect when interacting with keystone. ** Changed in: keystone Status: In Progress => Opinion -- You received this bug notification because you

[Yahoo-eng-team] [Bug 1548580] Re: [FG-VD-16-010] Openstack Dashboard Brute Force Vulnerability Notification

2018-10-24 Thread Morgan Fainberg
I'm going to mark this as invalid. It is recommended to add a rate- limiter in-front of the openstack services if needed. Ideally Keystone could support such a bit of software, but it is largely out-of-scope (can be supplied by the fronting webservers e.g. apache and mod_ratelimit) ** Changed in:

[Yahoo-eng-team] [Bug 1715080] Re: Update global requirements to handle encoding issues with python2-pyldap-2.4.35

2018-10-24 Thread Morgan Fainberg
This is just something to do, update global-requirments and it is populated down. Updating global-requirements for a past release is hard to do, it is suggested that you simply propose the changes and it will be synchronized to keystone once it is approved. ** Changed in: keystone/pike

[Yahoo-eng-team] [Bug 1680911] Re: Revoking an unscoped token does not revoke all tokens scoped from the unscoped token

2018-10-24 Thread Morgan Fainberg
Marking this as wont fix. This really is not something we can address in a meaningful way at this time. It expands through a huge set of issues across all of openstack and is not in line with the direction of the project now. ** Changed in: keystone Status: Triaged => Won't Fix -- You

[Yahoo-eng-team] [Bug 1799727] Re: CPU_Allocation_Ratio from nova.conf doesn't update exisiting providers

2018-10-24 Thread Matt Riedemann
I believe the bug is right here: https://github.com/openstack/nova/blob/835faf3f40af6b0e07c585690982a997d6a2ac47/nova/compute/provider_tree.py#L128 That is just comparing the keys in the dict, not the values, so: >>> old {'a': 1, 'b': 2} >>> new {'a': 1, 'b': 2} >>> new['b'] = 3 >>> old {'a':

[Yahoo-eng-team] [Bug 1799727] Re: CPU_Allocation_Ratio from nova.conf doesn't update exisiting providers

2018-10-24 Thread Matt Riedemann
I guess this shouldn't be a problem in queens because the resource tracker didn't use that provider tree to report back the inventory changes: https://github.com/openstack/nova/blob/stable/queens/nova/compute/resource_tracker.py#L883 That was done in Rocky:

[Yahoo-eng-team] [Bug 1798495] Re: Resource name maximum length is not defined in limits

2018-10-24 Thread OpenStack Infra
Reviewed: https://review.openstack.org/611484 Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=2e85dc47c9301b00f89bd44955534f8d9631e3d6 Submitter: Zuul Branch:master commit 2e85dc47c9301b00f89bd44955534f8d9631e3d6 Author: Vishakha Agarwal Date: Wed Oct 17 16:43:15

[Yahoo-eng-team] [Bug 1799707] [NEW] shutdown_timeout config min version is not consistent with glance image meta def

2018-10-24 Thread Matt Riedemann
Public bug reported: Nova change https://review.openstack.org/#/c/317693/ set a min=1 value on the shutdown_timeout config option. https://docs.openstack.org/nova/latest/configuration/config.html#DEFAULT.shutdown_timeout The glance image meta def description for the related os_shutdown_timeout

[Yahoo-eng-team] [Bug 1799455] Re: AttributeError: 'BgpDrAgentNotifyApi' object has no attribute 'agent_updated'

2018-10-24 Thread Brian Haley
** Project changed: neutron => bgpvpn ** Project changed: bgpvpn => networking-bgp -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1799455 Title: AttributeError: 'BgpDrAgentNotifyApi'

[Yahoo-eng-team] [Bug 1799588] Re: non-admin users can see all tenants' images even when image is private

2018-10-24 Thread Jeremy Stanley
Since this report concerns a possible security risk, an incomplete security advisory task has been added while the core security reviewers for the affected project or projects confirm the bug and discuss the scope of any vulnerability along with potential solutions. ** Information type changed

[Yahoo-eng-team] [Bug 1799727] [NEW] CPU_Allocation_Ratio from nova.conf doesn't update exisiting providers

2018-10-24 Thread Andrew Waugaman
Public bug reported: (OpenStack 14) After changing the value of cpu_allocation_ratio in nova.conf from 16 to 1 and restarting nova containers, the ProviderTree still uses the old value (A patch with extra debugging is applied to the system for ProviderTree information) Nova.conf setting:

[Yahoo-eng-team] [Bug 1799709] [NEW] service order is incorrect for SUSE distros

2018-10-24 Thread Robert Schweikert
Public bug reported: With db50bc0d9 the sysconfig renderer was enabled for openSUSE and SUSE Linux Enterprise. This requires that cloud-init.service starts after wicked, but at present the service is started after wicked. ** Affects: cloud-init Importance: Undecided Assignee: Robert

[Yahoo-eng-team] [Bug 1799656] [NEW] agent/linux/bridge_lib: Not all methods of BridgeDevice respect namespaces

2018-10-24 Thread Adriaan Schmidt
Public bug reported: Looking at agent/linux/bridge_lib.py, I see that most methods of BridgeDevice use calls to brctl, using a namespace wrapper. They work as expected. However, some methods (get_interface_bridge, owns_interface, get_interfaces) retrieve information from the file system, and do

[Yahoo-eng-team] [Bug 1776504] Re: flaskification

2018-10-24 Thread OpenStack Infra
Reviewed: https://review.openstack.org/609839 Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=184c84ae76b1e4dc6b9907caf0cfa0d65bf8ecc5 Submitter: Zuul Branch:master commit 184c84ae76b1e4dc6b9907caf0cfa0d65bf8ecc5 Author: Morgan Fainberg Date: Thu Oct 11 15:16:02

[Yahoo-eng-team] [Bug 1504397] Re: truncate table size column cause the exception

2018-10-24 Thread OpenStack Infra
Reviewed: https://review.openstack.org/546114 Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=7f121363935be32b345ec80fd15d478bb8d9f23f Submitter: Zuul Branch:master commit 7f121363935be32b345ec80fd15d478bb8d9f23f Author: Ameed Ashour Date: Tue Feb 20 05:54:33 2018

[Yahoo-eng-team] [Bug 1744079] Re: [SRU] disk over-commit still not correctly calculated during live migration

2018-10-24 Thread Hua Zhang
** Also affects: nova (Ubuntu) Importance: Undecided Status: New ** No longer affects: nova (Ubuntu) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1744079