[DVS] Instance with remote security groups hasn’t got ipv4 address.

[Olesia Tsvigun]

Fuel ISO#570
Fuel-plugin-vmware-dvs fuel-plugin-vmware-dvs | 2.1.10 | 4.0.0

Steps to reproduce
1. Install fuel-vmware-dvs-plugin
2. Create and deploy cluster with:
     1 controler
     1 compute
     1 cinder-vmware
     1 compute-vmware
     storage : default
   2 clusters: Cluster1, Cluster2
3. Create net_1: net01__subnet, 192.168.1.0/24, and attach it to the router01.
4. Create SG1 and SG2
5. Add icmp rule to SG1:
    Ingress rule with ip protocol 'icmp ', port range any, SG group 'SG1'
    Egress rule with ip protocol 'icmp ', port range any, SG group 'SG1'
6. Add icmp rule to SG2:
    Ingress rule with ip protocol 'icmp ', port range any, SG group 'SG2'
    Egress rule with ip protocol 'icmp ', port range any, SG group 'SG2'
7. Launch 2 instance of vcenter az with SG1 in net1.
    Launch 2 instance of nova az with SG1 in net1.
8. Launch 2 instance of vcenter az with SG2 in net1.
     Launch 2 instance of nova az with SG2 in net1.
9. Check that instances have got ipv4 address.

Actual Result
Instance with remote security groups havn't got ipv4 address.

[Olesia Tsvigun (otsvigun)]

Fuel ISO#570
id | name | version | package_version
---|------------------------|---------|----------------
1 | fuel-plugin-vmware-dvs | 2.1.14 | 4.0.0

Remote SG don't work on instances of compute-vmware cluster. Instances havn't got ipv4 address.

Steps to reproduce.
1. Upload plugins to the master node
2. Install plugin.
3. Create cluster with vcenter.
4. Add 1 node with controller role.
5. Add 2 node with compute role.
6. Add 1 node with compute-vmware role.
8. Fill all fields in vmware tab.
9. Fill field 'Enter the Cluster to dvSwitch mapping.'
10. Use the VMware DVS firewall driver is enabled.
11. Deploy the cluster.
12. Create net_1: net01__subnet, 192.168.1.0/24
13. Create security groups:
      SG1
      SG2
14. Delete all defaults egress rules of SG1 and SG2.
15. Add icmp rule to SG1:
      Ingress rule with ip protocol 'icmp ', port range any, SG group 'SG1'
       Egress rule with ip protocol 'icmp ', port range any, SG group 'SG1'
16. Add icmp rule to SG2:
       Ingress rule with ip protocol 'icmp ', port range any, SG group 'SG2'
       Egress rule with ip protocol 'icmp ', port range any, SG group 'SG2'
17. Launch 2 instance of vcenter az with SG1 in net1 in Cluster of compute-vmware.
18. Verify that icmp ping is enabled between VMs from SG1.

Actual result
Instances with remote security groups havn't got ipv4 address.

[Olesia Tsvigun (otsvigun)]

The same issues is reproducing, when we uing SG rules with "remote-ip-prefix'.

[Vyacheslav Tabolin (slavchick)]

https://github.com/Mirantis/vmware-dvs/commit/15cfd45a4647bd95ce3e409ab9abd267acb976fc

[Olesia Tsvigun (otsvigun)]

From time to time issue is reproducing again.
Repruducibility 50%

Verified at
id | name | version | package_version
---|------------------------|---------|----------------
1 | fuel-plugin-vmware-dvs | 2.1.17 | 4.0.0

[Vyacheslav Tabolin (slavchick)]

May be closed by https://github.com/Mirantis/vmware-dvs/commit/efe6cf66cdf7045186f0a6cf6b140f094ccf2c1d

[Olesia Tsvigun (otsvigun)]

Verified at fuel-plugin-vmware-dvs-2.1.0
Fuel ISO#570