yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: nova
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1154755

Title:
  console support broken with cells

Status in OpenStack Compute (Nova):
  Fix Released

Bug description:
  Cells code in trunk combined with console support expects that
  consoleauth runs in the API cell.  Ie, get_vnc_console() in cells mode
  queries down to the compute node for an instance to get console
  information, but then sends that info to consoleauth in the API cell
  to get a token.

  Some (somewhat recent) security fixes related to consoleauth tokens
  broke this behavior.  These fixes, on instance deletion, call  to
  consoleauth from the compute manager to delete any tokens for the
  instance.  This does not work because consoleauth is in the API cell
  on a separate rabbit server.  Also:  now when consoleauth validates
  tokens, it makes a call to the compute manager to verify the console
  port is still the same.  But, again, the compute manager is in a child
  cell on a different rabbit server.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1154755/+subscriptions