Failures when detaching volumes from instances

Bug #2019975 reported by Felipe Reyes
This bug report is a duplicate of:  Bug #2020111: CVE-2023-2088 regressions. Edit Remove
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
cinder (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

[Impact]

Since the release of the security fix USN-6073-1[0], the CI of Charmed OpenStack started seeing failures when manipulating cinder volumes[1], specifically when detaching a volume from an instance, the detaching won't complete on time (>10m), this issue was initially detected in the 2023.1 (Antelope) testing, although other CI runs found the same issue in OpenStack Xena[2]

[0] https://ubuntu.com/security/notices/USN-6073-1
[1] https://openstack-ci-reports.ubuntu.com/artifacts/2d4/881045/3/check/jammy-zed/2d4c7e7/job-output.txt
[2] https://review.opendev.org/c/openstack/charm-cinder/+/872573/2#message-b399e1e90ac018d6b9aa3b026fbd20973c961d39

Revision history for this message
Felipe Reyes (freyes) wrote :

This patch in the cinder charm was just merged which enables service tokens in master - https://review.opendev.org/c/openstack/charm-cinder/+/879195

Revision history for this message
Seth Arnold (seth-arnold) wrote :

Hello Felipe, is there a reason to keep this report private? It might be more useful to other people if it's public.

Thanks

Revision history for this message
Felipe Reyes (freyes) wrote :

we identified the issue, and we are certain of what we are seeing, I'm marking this bug as a duplicate of https://bugs.launchpad.net/ubuntu/+source/nova/+bug/2020111 where all the efforts are being tracked.

information type: Private Security → Public
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in cinder (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.