You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by GitBox <gi...@apache.org> on 2022/06/17 10:30:41 UTC
[GitHub] [cloudstack] kricud opened a new issue, #6471: Cloudstack agent for KVM
kricud opened a new issue, #6471:
URL: https://github.com/apache/cloudstack/issues/6471
<!--
Verify first that your issue/request is not already reported on GitHub.
Also test if the latest release and main branch are affected too.
Always add information AFTER of these HTML comments, but no need to delete the comments.
-->
##### ISSUE TYPE
<!-- Pick one below and delete the rest -->
* Bug Report
##### COMPONENT NAME
<!--
-->
~~~
Cloudstack agent for KVM
~~~
##### CLOUDSTACK VERSION
<!--
New line separated list of affected versions, commit ID for issues on main branch.
-->
~~~
4.15.2.0
~~~
##### CONFIGURATION
<!--
Information about the configuration if relevant, e.g. basic network, advanced networking, etc. N/A otherwise
-->
##### OS / ENVIRONMENT
<!--
Information about the environment if relevant, N/A otherwise
-->
Ubuntu 18.04.6 LTS
##### SUMMARY
<!-- Explain the problem/feature briefly -->
/usr/share/cloudstack-common/scripts/util/keystore-setup
This script is not excluding fe80 / link-local address and cloudstack agent certificate contains 300+ fe80 san names in it.
From:
ip address | grep inet | awk '{print $2}' | sed 's/\/.*//g' | grep -v '^169.254.' | grep -v '^127.0.0.1' | grep -v '^::1' | sed 's/^/ip:/g' | tr '\r\n' ','
To:
ip address | grep inet | awk '{print $2}' | sed 's/\/.*//g' | grep -v '^169.254.' | grep -v '^127.0.0.1' | egrep -v '^::1|^fe80' | sed 's/^/ip:/g' | tr '\r\n' ','
##### STEPS TO REPRODUCE
<!--
For bugs, show exactly how to reproduce the problem, using a minimal test-case. Use Screenshots if accurate.
For new features, show how the feature would be used.
-->
<!-- Paste example playbooks or commands between quotes below -->
~~~
IPv6 must be enabled on host
~~~
<!-- You can also paste gist.github.com links for larger files -->
##### EXPECTED RESULTS
<!-- What did you expect to happen when running the steps above? -->
~~~
Cloudstack agent for KVM certificate SAN contains only routable IPs
~~~
##### ACTUAL RESULTS
<!-- What actually happened? -->
<!-- Paste verbatim command output between quotes below -->
~~~
Cloudstack agent for KVM certificate SAN contains fe80/link-local IPs
~~~
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] harikrishna-patnala commented on issue #6471: Cloudstack agent for KVM
Posted by GitBox <gi...@apache.org>.
harikrishna-patnala commented on issue #6471:
URL: https://github.com/apache/cloudstack/issues/6471#issuecomment-1175038128
Hi @kricud, I've tried to fix this as part of the PR https://github.com/apache/cloudstack/pull/6530.
Can you please help me verify it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] rohityadavcloud commented on issue #6471: Cloudstack agent for KVM
Posted by GitBox <gi...@apache.org>.
rohityadavcloud commented on issue #6471:
URL: https://github.com/apache/cloudstack/issues/6471#issuecomment-1175747685
Fixed in https://github.com/apache/cloudstack/pull/6530
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] rohityadavcloud closed issue #6471: Cloudstack agent for KVM
Posted by GitBox <gi...@apache.org>.
rohityadavcloud closed issue #6471: Cloudstack agent for KVM
URL: https://github.com/apache/cloudstack/issues/6471
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] kricud commented on issue #6471: Cloudstack agent for KVM
Posted by GitBox <gi...@apache.org>.
kricud commented on issue #6471:
URL: https://github.com/apache/cloudstack/issues/6471#issuecomment-1175053803
@harikrishna-patnala
It works as expected:
```
acs@kvm05-dev:~$ ip address | grep inet | awk '{print $2}' | sed 's/\/.*//g' | grep -v '^169.254.' | grep -v '^127.0.0.1' | egrep -v '^::1|^fe80' | grep -v '^::1' | sed 's/^/ip:/g' | tr '\r\n' ','
ip:10.170.1.14,ip:10.170.0.14,
acs@kvm05-dev:~$ ip address | grep inet | awk '{print $2}' | sed 's/\/.*//g' | grep -v '^169.254.' | grep -v '^127.0.0.1' | grep -v '^::1' | sed 's/^/ip:/g' | tr '\r\n' ','
ip:10.170.1.14,ip:fe80::c4af:5cff:fe86:e7b1,ip:10.170.0.14,ip:fe80::e8d0:1bff:fe72:a9b7,
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [cloudstack] rohityadavcloud commented on issue #6471: Cloudstack agent for KVM
Posted by GitBox <gi...@apache.org>.
rohityadavcloud commented on issue #6471:
URL: https://github.com/apache/cloudstack/issues/6471#issuecomment-1171959978
@harikrishna-patnala pl discuss with @nvazquez or @Pearl1594 if needed, this is related to how certificates are generated for agent.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org