| 2014-06-23 09:24:16 |
Vincent Ladeuil |
bug |
|
|
added bug |
| 2014-06-23 12:55:06 |
Curtis Hovey |
juju-core: status |
New |
Triaged |
|
| 2014-06-23 12:55:10 |
Curtis Hovey |
juju-core: importance |
Undecided |
High |
|
| 2014-06-23 12:55:12 |
Curtis Hovey |
juju-core: milestone |
|
next-stable |
|
| 2014-06-23 12:55:26 |
Curtis Hovey |
tags |
|
hp-cloud openstack-provider security |
|
| 2014-10-28 21:08:36 |
Curtis Hovey |
juju-core: importance |
High |
Medium |
|
| 2014-10-28 21:08:36 |
Curtis Hovey |
juju-core: milestone |
next-stable |
|
|
| 2015-11-24 14:42:38 |
Ryan Beisner |
summary |
juju-hp-global secgroup defined twice |
cannot bootstrap on openstack provider: Multiple security_group matches found for name 'XYZ', use an ID to be more specific. |
|
| 2015-11-24 14:49:54 |
Ryan Beisner |
description |
On HP cloud, I encounter a case where I end up with the juju-hp-global security group defined twice.
I use:
firewall-mode: global
use-floating-ip: true
in my environments.yaml file.
This is not reproducible at will but more likely to happen when a deployment is already present and I'm running more juju deployer commands to complete a deployment.
juju status also gives some hard to parse hints:
"12":
agent-state-info: '(error: cannot run instance: failed to run a server with nova.RunServerOpts{Name:"juju-hp-machine-12",
FlavorId:"100", ImageId:"b35fe7b8-78bb-44a8-a6bd-7bc5ebdfc633", UserData:[]uint8{0x1f,
< ~500 lines of: 0x99, 0xb6, 0x7f, 0x14, 0x4d, 0x1b, 0xc7, 0x72, 0xa9, 0x84, 0x2e, 0x98, 0x72, stuff>
SecurityGroupNames:[]nova.SecurityGroupName{nova.SecurityGroupName{Name:"juju-hp"},
nova.SecurityGroupName{Name:"juju-hp-global"}}, Networks:[]nova.ServerNetworks{}}
caused by: request (https://region-a.geo-1.compute.hpcloudsvc.com/v2/11206487910601/servers)
returned unexpected status: 409; error info: {"conflictingRequest": {"message":
"Multiple security_group matches found for name ''juju-hp-global'', use an ID
to be more specific.", "code": 409}})'
instance-id: pending
series: precise
I would guess that checking the existence of juju-hp-global fails for some unexpected cause (rate limitation, nova transient error) and juju believes the group doesn't exist and create a *new* one.
At that point there are two existing juju-hp-global secgroups and juju can't recover:
$ nova secgroup-list
+--------------------------------------+----------------+-------------+
| Id | Name | Description |
+--------------------------------------+----------------+-------------+
| f9b0e939-1a37-4f61-92b4-28f88b125d74 | default | default |
| c37f45d9-0787-4272-8558-dc4db9310802 | juju-hp | juju group |
| 32fb3fef-e1c1-41df-9227-5eda15e1cfba | juju-hp-global | juju group |
| d9cf6d0a-747a-474a-920d-90e7381eb1f5 | juju-hp-global | juju group |
+--------------------------------------+----------------+-------------+ |
Now observed with Ubuntu OpenStack Kilo as the undercloud, with juju 1.25.0 and juju 1.25.1(proposed) and the juju openstack provider.
This blocks deploy/test automation where iterative bootstrap/deploy/destroy loops occur, such as bundletester, amulet, juju test, and perhaps other CI.
2015-11-24 14:26:47 ERROR juju.cmd supercommand.go:429 failed to bootstrap environment: cannot start bootstrap instance: cannot run instance: failed to run a server with nova.RunServerOpts{ ...
caused by: request (http://10.245.161.158:8774/v2/d2be765ac7a7490a899995bdad501cc6/servers) returned unexpected status: 409; error info: {"conflictingRequest": {"message": "Multiple security_group matches found for name 'juju-osci-sv07-0', use an ID to be more specific.", "code": 409}}
# juju bootstrap --debug output:
http://paste.ubuntu.com/13492802/
--- original description ---
On HP cloud, I encounter a case where I end up with the juju-hp-global security group defined twice.
I use:
firewall-mode: global
use-floating-ip: true
in my environments.yaml file.
This is not reproducible at will but more likely to happen when a deployment is already present and I'm running more juju deployer commands to complete a deployment.
juju status also gives some hard to parse hints:
"12":
agent-state-info: '(error: cannot run instance: failed to run a server with nova.RunServerOpts{Name:"juju-hp-machine-12",
FlavorId:"100", ImageId:"b35fe7b8-78bb-44a8-a6bd-7bc5ebdfc633", UserData:[]uint8{0x1f,
< ~500 lines of: 0x99, 0xb6, 0x7f, 0x14, 0x4d, 0x1b, 0xc7, 0x72, 0xa9, 0x84, 0x2e, 0x98, 0x72, stuff>
SecurityGroupNames:[]nova.SecurityGroupName{nova.SecurityGroupName{Name:"juju-hp"},
nova.SecurityGroupName{Name:"juju-hp-global"}}, Networks:[]nova.ServerNetworks{}}
caused by: request (https://region-a.geo-1.compute.hpcloudsvc.com/v2/11206487910601/servers)
returned unexpected status: 409; error info: {"conflictingRequest": {"message":
"Multiple security_group matches found for name ''juju-hp-global'', use an ID
to be more specific.", "code": 409}})'
instance-id: pending
series: precise
I would guess that checking the existence of juju-hp-global fails for some unexpected cause (rate limitation, nova transient error) and juju believes the group doesn't exist and create a *new* one.
At that point there are two existing juju-hp-global secgroups and juju can't recover:
$ nova secgroup-list
+--------------------------------------+----------------+-------------+
| Id | Name | Description |
+--------------------------------------+----------------+-------------+
| f9b0e939-1a37-4f61-92b4-28f88b125d74 | default | default |
| c37f45d9-0787-4272-8558-dc4db9310802 | juju-hp | juju group |
| 32fb3fef-e1c1-41df-9227-5eda15e1cfba | juju-hp-global | juju group |
| d9cf6d0a-747a-474a-920d-90e7381eb1f5 | juju-hp-global | juju group |
+--------------------------------------+----------------+-------------+ |
|
| 2015-11-24 14:52:00 |
Ryan Beisner |
tags |
hp-cloud openstack-provider security |
hp-cloud openstack-provider security uosci |
|
| 2015-11-24 15:33:29 |
Cheryl Jennings |
juju-core: importance |
Medium |
High |
|
| 2015-11-24 15:35:26 |
Cheryl Jennings |
juju-core: milestone |
|
1.26-beta1 |
|
| 2015-11-24 16:29:50 |
Curtis Hovey |
tags |
hp-cloud openstack-provider security uosci |
hp-cloud openstack-provider repeatability security uosci |
|
| 2015-11-24 16:30:18 |
Curtis Hovey |
tags |
hp-cloud openstack-provider repeatability security uosci |
charmers hp-cloud openstack-provider repeatability security uosci |
|
| 2015-11-25 22:30:06 |
Cheryl Jennings |
tags |
charmers hp-cloud openstack-provider repeatability security uosci |
bug-squad charmers hp-cloud openstack-provider repeatability security uosci |
|
| 2015-12-01 17:03:59 |
Cheryl Jennings |
nominated for series |
|
juju-core/1.25 |
|
| 2015-12-01 17:03:59 |
Cheryl Jennings |
bug task added |
|
juju-core/1.25 |
|
| 2015-12-01 17:04:05 |
Cheryl Jennings |
juju-core/1.25: status |
New |
Triaged |
|
| 2015-12-01 17:04:07 |
Cheryl Jennings |
juju-core/1.25: importance |
Undecided |
High |
|
| 2015-12-01 17:04:09 |
Cheryl Jennings |
juju-core/1.25: milestone |
|
1.25.3 |
|
| 2015-12-07 03:34:06 |
Cheryl Jennings |
juju-core: milestone |
1.26-beta1 |
2.0-alpha2 |
|
| 2016-01-18 02:12:25 |
Cheryl Jennings |
juju-core/1.25: milestone |
1.25.3 |
1.25.4 |
|
| 2016-01-25 17:15:00 |
Cheryl Jennings |
juju-core: milestone |
2.0-alpha2 |
2.0-alpha3 |
|
| 2016-02-11 17:20:47 |
Cheryl Jennings |
juju-core/1.25: milestone |
1.25.4 |
1.25.5 |
|
| 2016-02-29 20:07:03 |
Cheryl Jennings |
juju-core: milestone |
2.0-alpha3 |
2.0-beta4 |
|
| 2016-03-22 01:54:54 |
Cheryl Jennings |
juju-core/1.25: milestone |
1.25.5 |
1.25.6 |
|
| 2016-04-02 16:07:15 |
Cheryl Jennings |
juju-core: milestone |
2.0-beta4 |
2.0.0 |
|
| 2016-04-12 20:31:40 |
Curtis Hovey |
tags |
bug-squad charmers hp-cloud openstack-provider repeatability security uosci |
bug-squad charmers openstack-provider repeatability security uosci |
|
| 2016-07-14 21:08:20 |
Curtis Hovey |
juju-core/1.25: milestone |
1.25.6 |
1.25.7 |
|
| 2016-08-08 03:28:17 |
Anastasia |
juju-core/1.25: status |
Triaged |
Won't Fix |
|
| 2016-08-09 13:32:57 |
Anastasia |
juju-core/1.25: milestone |
1.25.7 |
|
|
| 2016-08-09 13:33:00 |
Anastasia |
juju-core/1.25: importance |
High |
Undecided |
|
| 2016-08-11 21:09:54 |
Alexis Bruemmer |
juju-core: status |
Triaged |
Incomplete |
|
| 2016-08-11 21:12:14 |
Anastasia |
juju-core: milestone |
2.0.0 |
|
|
| 2016-08-12 00:04:35 |
Anastasia |
juju-core: status |
Incomplete |
Invalid |
|
| 2016-11-01 10:45:28 |
Ryan Beisner |
attachment added |
|
juju-bootstrap-secgroup-still.txt https://bugs.launchpad.net/juju-core/+bug/1333162/+attachment/4770534/+files/juju-bootstrap-secgroup-still.txt |
|
| 2016-11-01 12:22:09 |
Anastasia |
juju-core: status |
Invalid |
Triaged |
|
| 2016-11-01 12:22:11 |
Anastasia |
juju-core/1.25: status |
Won't Fix |
Triaged |
|
| 2016-11-01 12:22:15 |
Anastasia |
juju-core: importance |
High |
Critical |
|
| 2016-11-01 12:22:17 |
Anastasia |
juju-core/1.25: importance |
Undecided |
Critical |
|
| 2016-11-01 12:22:19 |
Anastasia |
juju-core/1.25: milestone |
|
1.25.8 |
|
| 2016-11-01 12:22:29 |
Anastasia |
bug task added |
|
juju |
|
| 2016-11-01 12:22:36 |
Anastasia |
juju: status |
New |
Incomplete |
|
| 2016-11-01 16:53:12 |
Frode Nordahl |
bug |
|
|
added subscriber Frode Nordahl |
| 2016-11-07 14:38:30 |
Edward Hope-Morley |
tags |
bug-squad charmers openstack-provider repeatability security uosci |
bug-squad charmers openstack-provider repeatability security sts uosci |
|
| 2016-11-07 14:38:34 |
Mario Splivalo |
bug |
|
|
added subscriber Mario Splivalo |
| 2016-11-13 18:22:15 |
Curtis Hovey |
juju-core/1.25: milestone |
1.25.8 |
1.25.9 |
|
| 2016-11-21 21:35:12 |
Anastasia |
juju: status |
Incomplete |
Triaged |
|
| 2016-11-21 21:35:16 |
Anastasia |
juju: importance |
Undecided |
Critical |
|
| 2016-11-21 21:35:31 |
Anastasia |
juju: milestone |
|
2.2.0 |
|
| 2016-11-21 21:35:57 |
Anastasia |
juju: assignee |
|
Alexis Bruemmer (alexis-bruemmer) |
|
| 2016-11-28 18:26:01 |
Ryan Beisner |
bug task added |
|
charm-test-infra |
|
| 2016-11-28 18:26:18 |
Ryan Beisner |
charm-test-infra: status |
New |
Confirmed |
|
| 2016-11-28 18:26:27 |
Ryan Beisner |
charm-test-infra: importance |
Undecided |
High |
|
| 2016-12-07 16:32:50 |
Curtis Hovey |
juju-core/1.25: milestone |
1.25.9 |
1.25.10 |
|
| 2017-01-10 18:11:38 |
Heather Lanigan |
bug |
|
|
added subscriber Heather Lanigan |
| 2017-01-27 17:26:21 |
Curtis Hovey |
juju-core/1.25: milestone |
1.25.10 |
|
|
| 2017-01-30 06:20:13 |
Anastasia |
juju-core: milestone |
|
1.25.11 |
|
| 2017-01-30 06:20:17 |
Anastasia |
juju-core/1.25: milestone |
|
1.25.11 |
|
| 2017-02-02 07:15:24 |
Anastasia |
juju: assignee |
Alexis Bruemmer (alexis-bruemmer) |
|
|
| 2017-02-20 03:45:45 |
Anastasia |
juju-core: status |
Triaged |
Incomplete |
|
| 2017-02-20 03:45:48 |
Anastasia |
juju-core/1.25: status |
Triaged |
Incomplete |
|
| 2017-02-20 03:45:52 |
Anastasia |
juju-core: importance |
Critical |
Undecided |
|
| 2017-02-20 03:45:55 |
Anastasia |
juju-core/1.25: importance |
Critical |
Undecided |
|
| 2017-02-20 03:45:57 |
Anastasia |
juju-core: milestone |
1.25.11 |
|
|
| 2017-02-20 03:45:58 |
Anastasia |
juju-core/1.25: milestone |
1.25.11 |
|
|
| 2017-02-20 04:17:54 |
Anastasia |
juju: status |
Triaged |
Fix Committed |
|
| 2017-02-20 04:18:00 |
Anastasia |
juju: milestone |
2.2.0 |
2.1.0 |
|
| 2017-02-20 21:28:38 |
Anastasia |
juju-core: status |
Incomplete |
Fix Committed |
|
| 2017-02-20 21:28:43 |
Anastasia |
juju-core/1.25: status |
Incomplete |
Fix Committed |
|
| 2017-02-20 21:28:53 |
Anastasia |
juju-core: status |
Fix Committed |
Fix Released |
|
| 2017-02-20 21:28:57 |
Anastasia |
juju-core/1.25: status |
Fix Committed |
Fix Released |
|
| 2017-02-21 16:08:48 |
Curtis Hovey |
juju: milestone |
2.1.0 |
2.1-rc1 |
|
| 2017-02-21 16:09:17 |
Curtis Hovey |
juju-core/1.25: milestone |
|
1.25.10 |
|
| 2017-02-22 23:08:09 |
Curtis Hovey |
juju: status |
Fix Committed |
Fix Released |
|
| 2017-03-21 21:23:01 |
Ryan Beisner |
charm-test-infra: status |
Confirmed |
Invalid |
|
