[Yahoo-eng-team] [Bug 1845243] [NEW] Nested 'path' query param in console URL breaks serialproxy

2019-09-24 Thread Jason Anderson
Public bug reported: Description === Change I2ddf0f4d768b698e980594dd67206464a9cea37b changed all console URLs to have the token attached as a nested query parameter inside an outer "path" query parameter, e.g. "?path=?token=***". While this was necessary for NoVNC support, it appears

[Yahoo-eng-team] [Bug 1864122] [NEW] Instances (bare metal) queue for long time when managing a large amount of Ironic nodes

2020-02-20 Thread Jason Anderson
Public bug reported: Description === We have two deployments, one with ~150 bare metal nodes, and another with ~300. These are each managed by one nova-compute process running the Ironic driver. After upgrading from the Ocata release, we noticed that instance launches would be stuck in

[Yahoo-eng-team] [Bug 1878496] [NEW] RFE: Support for direct-mapping auto-provisioned project/role names

2020-05-13 Thread Jason Anderson
Public bug reported: It is currently possible for an IdP to specify multiple values in an assertion (e.g., for groups a user is a member of) and have each of those values mapped to an individual entities. This allows to map a user into multiple Keystone groups. However, this functionality does

[Yahoo-eng-team] [Bug 1880252] [NEW] RFE: allow regexes in blacklist and whitelist conditionals

2020-05-22 Thread Jason Anderson
Public bug reported: Currently a regex can be used in the "any_of_one" and "not_any_of" conditionals, allowing operators to specify rules not bound to a static set of expected values. However, this is not supported for the "whitelist" or "blacklist" conditional type. Having regex support in

[Yahoo-eng-team] [Bug 1888029] [NEW] RFE: allow automatically deprovisioning mapped assignments

2020-07-17 Thread Jason Anderson
Public bug reported: Currently there is support for auto-provisioning role assignments within projects that are created for the user when they authenticate. However, there is no way to offboard users from these projects, either due to mapping changes or due to dynamic changes in their group/role

[Yahoo-eng-team] [Bug 1942469] [NEW] Network delete notifications no longer container segment info

2021-09-02 Thread Jason Anderson
Public bug reported: Change I07c70db027f2ae03ffb5a95072e019e8a5fdc411 made it so PRECOMMIT_DELETE and AFTER_DELETE both receive the network dict fetched from the DB (decorated with any resource_extend hooks). However, this network representation does not include segment information like