tenant created networks cannot be deleted by the tenant

Bug #1491593 reported by Adam Gandelman
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Astara
Fix Released
High
Adam Gandelman
akanda
Fix Released
High
Adam Gandelman

Bug Description

If a tenant creates their own network, subnet and router that same tenant may not be able to delete it.

To reproduce using a non-admin tenant:

- Create a network
- Create a subnet
- Create a router

Akanda boots a router appliance appliance, connected to the external network

- Attach a router interface to the created network

Attempt to delete the network resources:

- delete router interface
- Delete the router
- delete all ports on subnet
- delete subnet
- delete network

In one instance where I setup network resources using python-neutronclient directly, this fails because there is still active ports on the network. One issue I've found is that it looks like the VRRP port created by akanda is an admin resource and not visible or deletable by the tenant.

In another where I did all of this using horizon, it fails because deleting the router (via horizon) does not ensure the any associated router interface ports are deleted. The network fails to delete because of a stale router interface pot. Said port cannot be removed via api as a router interface because the router is gone. It needs to first be updated to NOT be a router interface, deleted then the network may cleanup.

Changed in akanda:
importance: Undecided → High
Changed in akanda:
status: New → In Progress
Sean Roberts (sarob)
Changed in akanda:
assignee: nobody → Adam Gandelman (gandelman-a)
Changed in akanda:
milestone: none → liberty-rc1
Revision history for this message
Adam Gandelman (gandelman-a) wrote :
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to akanda-rug (master)

Reviewed: https://review.openstack.org/219951
Committed: https://git.openstack.org/cgit/stackforge/akanda-rug/commit/?id=379a150a9968b98093b8cf5e24302b2766e89569
Submitter: Jenkins
Branch: master

commit 379a150a9968b98093b8cf5e24302b2766e89569
Author: Adam Gandelman <email address hidden>
Date: Wed Sep 2 18:52:35 2015 -0700

    Delete VRRP and MGT ports on router delete

    These ports are left behind when a router is deleted.
    Stale VRRP ports prevent a tenant from deleting their own networks
    as it is owned by the service VM but active and invisible to the tenant.
    MGT ports dont block net delete but should be cleaned up regardless.

    Closes-bug: #1491593

    Change-Id: I8d93a7d4392e26dc1ca7940e31d47ddcb81b08ad

Changed in akanda:
status: In Progress → Fix Committed
Changed in astara:
milestone: none → liberty-rc1
status: New → Incomplete
status: Incomplete → Fix Committed
importance: Undecided → High
Changed in akanda:
status: Fix Committed → Fix Released
Changed in astara:
assignee: nobody → Adam Gandelman (gandelman-a)
status: Fix Committed → Fix Released
Changed in astara:
milestone: liberty-rc1 → 7.0.0
Changed in akanda:
milestone: liberty-rc1 → 7.0.0
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to astara (stable/kilo)

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/263420

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to astara (stable/kilo)

Reviewed: https://review.openstack.org/263420
Committed: https://git.openstack.org/cgit/openstack/astara/commit/?id=f8d2bccb51e544df0dba9550620764087bb40beb
Submitter: Jenkins
Branch: stable/kilo

commit f8d2bccb51e544df0dba9550620764087bb40beb
Author: Rosario Di Somma <email address hidden>
Date: Mon Jan 4 12:25:03 2016 -0800

    Delete VRRP and MGT ports on router delete

    These ports are left behind when a router is deleted.
    Stale VRRP ports prevent a tenant from deleting their own networks
    as it is owned by the service VM but active and invisible to the tenant.
    MGT ports dont block net delete but should be cleaned up regardless.

    Closes-bug: #1491593
    (manually adapted from 379a150a9968b98093b8cf5e24302b2766e89569)

    Change-Id: Ib96a730825468822fe12a2b0b402e2d18fd33c4e
    Signed-off-by: Rosario Di Somma <email address hidden>

tags: added: in-stable-kilo
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.