yahoo-eng-team team mailing list archive

[Ghanshyam Mann <ghanshyam.mann@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Currently imageRef in server create, rebuild and rescue
operation can be accepted as random url which contains image
UUID and fetch the UUID from that.

ImageRef in server creation etc are UUID only and valid against glance.

Currently nova used to fetch the UUID from ImageRef url and proceed.

As /images proxy APIs are deprecated, it make sense to strict
the imageRef to UUID only and return 400 when non UUID(random url) is requested.

** Affects: nova
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1607229

Title:
  ImageRef for server create/rebuild/rescue etc are accepted as random
  url

Status in OpenStack Compute (nova):
  New

Bug description:
  Currently imageRef in server create, rebuild and rescue
  operation can be accepted as random url which contains image
  UUID and fetch the UUID from that.

  ImageRef in server creation etc are UUID only and valid against
  glance.

  Currently nova used to fetch the UUID from ImageRef url and proceed.

  As /images proxy APIs are deprecated, it make sense to strict
  the imageRef to UUID only and return 400 when non UUID(random url) is requested.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1607229/+subscriptions