<div dir="ltr">Hi German,<br><div><br></div><div>Once again, we are not talking about a real delete of a cert in whatever cert storage.</div><div><br></div><div>The problem we are trying to resolve is, even the lbaas is deleted, users still see the lbaas is using the cert in Barbican.</div><div>We didn't call the deregister logic during lbaas deletion.</div><div><br></div><div>Best,</div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jan 27, 2017 at 11:37 AM, Jiahao Liang (Frankie) <span dir="ltr"><<a href="mailto:gzliangjiahao@gmail.com" target="_blank">gzliangjiahao@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Andrey,<div><br></div><div>The reason Barbican cert container has a property called consumer. The definition is as following:</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">What is a Consumer?</blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><br></blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">A consumer is a way to register as an interested party for a container. All of the registered consumers can be viewed by performing a GET on the {container_ref}/consumers. The idea being that before a container is deleted all consumers should be notified of the delete.</blockquote></blockquote><div><br></div><div>When we create a Terminated_HTTPS listener in lbaas, we register the lbaas as one of the consumers of corresponding cert container. </div><div><br></div><div>But when we delete the listener/lb, we didn't deregister/revert the consumer registration. </div><div>This deregister/revert is actually what delete_cert() do for Barbican cert_manager in neutron_lbaas, NOT a real delete.</div><div><br></div><div>My suggestion was we need to add this deregister/revert procedure. </div><div><br></div><div>Hope this helps.</div><div><br></div><div>Best,</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jan 27, 2017 at 9:07 AM, Andrey Grebennikov <span dir="ltr"><<a href="mailto:agrebennikov@mirantis.com" target="_blank">agrebennikov@mirantis.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Frankie,<div><br></div><div>What is the reason why the cert has to be deleted on the balancer deletion?</div><div>The entire workflow, if I'm not mistaken, is to first work with Barbican API in order to create the cert bundle. And technically it is not yet connected to anything else.</div><div>After that you create the balancer, specifying the link to where the cert bundle is.</div><div>From this perspective, why one should expect the cert bundle to be deleted?</div><div><br></div><div>For me personally it is the same as deletion of the image automatically once the instance got deleted :/</div><div><br></div><div>Sorry if I'm missing the context.</div><div class="gmail_extra"><div><div class="m_-8389627358340296476h5"><br><div class="gmail_quote">On Fri, Jan 27, 2017 at 2:19 AM, Adam Harwell <span dir="ltr"><<a href="mailto:flux.adam@gmail.com" target="_blank">flux.adam@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">Yeah, I believe it was because we intended to leave it up to the specific certificate manager to determine what needs to be done -- we are treating it as a delete, and if the cert manager wants to do a true delete, they can. I'll agree the verb is not perfectly clear, but the driver author should make sure the correct action is taken regardless of the function name.</p>
<p dir="ltr">It's possible we should just rename the function to something like "unget_cert", which sounds a bit nonsensical but is possibly still clearer. I remember at the time I wrote this being frustrated with trying to name the function and wanting to just move on. T_T</p>
<p dir="ltr"> --Adam (rm_work)</p>
<p dir="ltr">PS: Did we remove the local cert manager yet? Now I need to check... I hope so, because it's not actually usable, nor can it be without API modifications (which we discussed but never actually implemented or even fully agreed on).</p><div class="m_-8389627358340296476m_2753620438764656628HOEnZb"><div class="m_-8389627358340296476m_2753620438764656628h5">
<br><div class="gmail_quote"><div dir="ltr">On Wed, Jan 25, 2017, 17:50 Jiahao Liang (Frankie) <<a href="mailto:gzliangjiahao@gmail.com" target="_blank">gzliangjiahao@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">Thanks rm_work.</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">I also notice something need to be handled properly. </div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">For barbican, the delete_cert() only deregisters the cert without actually delete it. That's safe for us to call during delete_listener()/delete_loadb<wbr>alancer().</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">But if the user uses other cert_manager by any chance, say the local_cert_manager, the same delete_cert() method will do a real delete of the cert.</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">Probably we need to implement register_consumer()/remove_con<wbr>sumer() method for cert_manager and call them in neutron_lbaas as well.</div></div><div dir="ltr" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><div class="gmail_quote m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">On Wed, Jan 25, 2017 at 10:48 Adam Harwell <<a href="mailto:flux.adam@gmail.com" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">flux.adam@gmail.com</a>> wrote:<br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><blockquote class="gmail_quote m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><p class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">I've got this on my list of things to look at -- I don't know if it was you I was talking with on IRC the other day about this issue, but I'm definitely aware of it. As soon as we are past the Ocata feature freeze crunch, I'll take a closer look.</p>
<p class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">My gut says that we should be calling the delete (which is not a real delete) when the LB is deleted, and not doing so is a bug, but I'll need to double check the logic as it has been a while since I touched this.</p>
<p class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"> --Adam (rm_work)</p>
<br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><div class="gmail_quote m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="gmail_quote m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">On Mon, Jan 23, 2017, 18:38 Jiahao Liang (Frankie) <<a href="mailto:gzliangjiahao@gmail.com" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">gzliangjiahao@gmail.com</a>> wrote:<br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div></div><div class="gmail_quote m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><blockquote class="gmail_quote m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">Hi community,<div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">I created a loadbalancer with a listener with protocol as "TERMINATED_HTTPS" and specify --default-tls-container-ref with a ref of secret container from Barbican.</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">However, after I deleted the listener, the lbaas wasn't removed from barbican container consumer list.</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">$openstack secret container get <a href="http://192.168.20.24:9311/v1/containers/453e8905-d42b-43bd-9947-50e3acf499f4" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">http://192.168.20.24:9311/v1/c<wbr>ontainers/453e8905-d42b-43bd-9<wbr>947-50e3acf499f4</a><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">+----------------+------------<wbr>------------------------------<wbr>------------------------------<wbr>-----------------------------+</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">| Field | Value |</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">+----------------+------------<wbr>------------------------------<wbr>------------------------------<wbr>-----------------------------+</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">| Container href | <a href="http://192.168.20.24:9311/v1/containers/453e8905-d42b-43bd-9947-50e3acf499f4" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">http://192.168.20.24:9311/v1/c<wbr>ontainers/453e8905-d42b-43bd-9<wbr>947-50e3acf499f4</a> |</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">| Name | tls_container2 |</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">| Created | 2017-01-19 12:44:07+00:00 |</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">| Status | ACTIVE |</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">| Type | certificate |</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">| Certificate | <a href="http://192.168.20.24:9311/v1/secrets/bfc2bf01-0f23-4105-bf09-c75839b6b4cb" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">http://192.168.20.24:9311/v1/s<wbr>ecrets/bfc2bf01-0f23-4105-bf09<wbr>-c75839b6b4cb</a> |</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">| Intermediates | None |</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">| Private Key | <a href="http://192.168.20.24:9311/v1/secrets/c85d150e-ec84-42e0-a65f-9c9ec19767e1" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">http://192.168.20.24:9311/v1/s<wbr>ecrets/c85d150e-ec84-42e0-a65f<wbr>-9c9ec19767e1</a> |</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">| PK Passphrase | None |</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">| <b class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">Consumers | {u'URL': u'lbaas://RegionOne/loadbalanc<wbr>er/5e7768b9-7aa9-4146-8a71-629<wbr>1353b447e', u'name': u'lbaas'}</b></div></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">I went through the neutron-lbaas code base. We did register consumer during the creation of "TERMINATED_HTTPS" listener in [1]. But we somehow doesn't deregister it during the deletion in [1]: <a href="https://github.com/openstack/neutron-lbaas/blob/stable/mitaka/neutron_lbaas/services/loadbalancer/plugin.py#L642" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">https://github.com/openst<wbr>ack/neutron-lbaas/blob/stable/<wbr>mitaka/neutron_lbaas/services/<wbr>loadbalancer/plugin.py#L642</a></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">get_cert() register lbaas as a consumer for barbican cert_manager. (<a href="https://github.com/openstack/neutron-lbaas/blob/stable/mitaka/neutron_lbaas/common/cert_manager/barbican_cert_manager.py#L177" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">https://github.com/openstack<wbr>/neutron-lbaas/blob/stable/mit<wbr>aka/neutron_lbaas/common/cert_<wbr>manager/barbican_cert_manager.<wbr>py#L177</a>)</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">[2]: <a href="https://github.com/openstack/neutron-lbaas/blob/stable/mitaka/neutron_lbaas/services/loadbalancer/plugin.py#L805" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">https://github.com/openst<wbr>ack/neutron-lbaas/blob/stable/<wbr>mitaka/neutron_lbaas/services/<wbr>loadbalancer/plugin.py#L805</a></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">we probably need to call delete_cert from barbican cert_manager to remove the consumer. (<a href="https://github.com/openstack/neutron-lbaas/blob/stable/mitaka/neutron_lbaas/common/cert_manager/barbican_cert_manager.py#L187" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">https://github.com/openstack/<wbr>neutron-lbaas/blob/stable/mita<wbr>ka/neutron_lbaas/common/cert_m<wbr>anager/barbican_cert_manager.p<wbr>y#L187</a>)</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">My questions are:</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">1. is that a bug?</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">2. or is it a <span style="font-family:roboto,arial,sans-serif" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">intentional </span>design letting the vendor driver to handle it?</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">It looks more like a bug to me.</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">Any thoughts?</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">Best,</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">Jiahao</div><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">-- <br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176m_-1974580634870267779m_5450193218513205940gmail_signature m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><div class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><div style="color:rgb(34,34,34);font-family:verdana,arial,helvetica,sans-serif;margin:0px 0px 8px" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><table border="0" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><tbody class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><tr valign="top" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><td style="font-family:arial,sans-serif;margin:0px" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></td><td style="font-family:arial,sans-serif;margin:0px" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><font size="2" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><strong style="font-family:georgia,palatino;color:rgb(0,0,128);background-color:rgb(192,192,192)" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><span style="background-color:rgb(255,255,255)" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">梁嘉豪/Jiahao LIANG</span><span style="background-color:rgb(255,255,255)" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"> (Frankie</span><span style="background-color:rgb(255,255,255)" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">) <br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></span></strong></font><span style="font-size:small" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">Email: </span><a href="mailto:gzliangjiahao@gmail.com" style="font-size:small" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">gzliangjiahao@gmail.com</a></td></tr></tbody></table></div><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"></div></div></div></div>
</div></div></blockquote></div><div class="gmail_quote m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg"><blockquote class="gmail_quote m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
______________________________<wbr>______________________________<wbr>______________<br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">
OpenStack Development Mailing List (not for usage questions)<br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">OpenStack-dev-request@lists.op<wbr>enstack.org?subject:unsubscrib<wbr>e</a><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k-dev</a><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">
</blockquote></div>
______________________________<wbr>______________________________<wbr>______________<br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">
OpenStack Development Mailing List (not for usage questions)<br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">OpenStack-dev-request@lists.op<wbr>enstack.org?subject:unsubscrib<wbr>e</a><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k-dev</a><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961m_6721743541969961784gmail-m_-2102407136204268176gmail_msg m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">
</blockquote></div></div></div>
______________________________<wbr>______________________________<wbr>______________<br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">
OpenStack Development Mailing List (not for usage questions)<br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">OpenStack-dev-request@lists.op<wbr>enstack.org?subject:unsubscrib<wbr>e</a><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k-dev</a><br class="m_-8389627358340296476m_2753620438764656628m_3954780794741139961gmail_msg">
</blockquote></div>
</div></div><br>______________________________<wbr>______________________________<wbr>______________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.op<wbr>enstack.org?subject:unsubscrib<wbr>e</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k-dev</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div></div></div><span class="m_-8389627358340296476HOEnZb"><font color="#888888">-- <br><div class="m_-8389627358340296476m_2753620438764656628gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr">Andrey Grebennikov<div>Principal Deployment Engineer</div><div>Mirantis Inc, Austin TX</div></div></div></div></div>
</font></span></div></div>
<br>______________________________<wbr>______________________________<wbr>______________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.op<wbr>enstack.org?subject:unsubscrib<wbr>e</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k-dev</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="m_-8389627358340296476gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div style="color:rgb(34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;margin:0px 0px 8px"><table border="0"><tbody><tr valign="top"><td style="font-family:arial,sans-serif;margin:0px"></td><td style="font-family:arial,sans-serif;margin:0px"><font size="2"><strong style="font-family:georgia,palatino;color:rgb(0,0,128);background-color:rgb(192,192,192)"><span style="background-color:rgb(255,255,255)">梁嘉豪/Jiahao LIANG</span><span style="background-color:rgb(255,255,255)"> (Frankie</span><span style="background-color:rgb(255,255,255)">) <br></span></strong></font><span style="font-size:small"><br>Email: </span><a href="mailto:gzliangjiahao@gmail.com" style="font-size:small" target="_blank">gzliangjiahao@gmail.com</a></td></tr></tbody></table></div><br></div></div></div></div>
</div>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div style="color:rgb(34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;margin:0px 0px 8px"><table border="0"><tbody><tr valign="top"><td style="font-family:arial,sans-serif;margin:0px"></td><td style="font-family:arial,sans-serif;margin:0px"><font size="2"><strong style="font-family:georgia,palatino;color:rgb(0,0,128);background-color:rgb(192,192,192)"><span style="background-color:rgb(255,255,255)">梁嘉豪/Jiahao LIANG</span><span style="background-color:rgb(255,255,255)"> (Frankie</span><span style="background-color:rgb(255,255,255)">) <br></span></strong></font><span style="font-size:small"><br>Email: </span><a href="mailto:gzliangjiahao@gmail.com" style="font-size:small" target="_blank">gzliangjiahao@gmail.com</a></td></tr></tbody></table></div><br></div></div></div></div>
</div></div>