yahoo-eng-team team mailing list archive

[Tristan Cacqueray <tdecacqu@xxxxxxxxxx>]

Since this report concerns a possible security risk, an incomplete
security advisory task has been added while the core security reviewers
for the affected project or projects confirm the bug and discuss the
scope of any vulnerability along with potential solutions.

** Also affects: ossa
   Importance: Undecided
       Status: New

** Changed in: ossa
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1742102

Title:
  Simple user can disable compute

Status in OpenStack Compute (nova):
  In Progress
Status in OpenStack Security Advisory:
  Incomplete

Bug description:
  Hi,

  When I tested a fresh deploy of Pike, I created a private network with
  a little subnet like /28. If you try to create a lot of new instances,
  nova failed because which doesn't have free IP for the creation of new
  instances.

  The fail trace is  https://thepasteb.in/p/zmh8qDG2ZYJIZ

  So after that, the trigger consecutive_build_service_disable_threshold
  up to 10 very fast and computes are disable.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1742102/+subscriptions