[R3.0-25]:vnc-api:source and destination port should not be mandatory to create SG
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
Juniper Openstack | Status tracked in Trunk | |||||
R3.0 |
Fix Committed
|
Undecided
|
Ranjeet R | |||
Trunk |
Fix Committed
|
Undecided
|
Ranjeet R |
Bug Description
While creating security group through contrail API, if source and destination ports both are not used then there are some unexpected behaviour.
1. Both ports should not be mandatory, however neutron allows to create SG rule without any port input too.
for ingress rule, only src port makes sense and for egress rule only dst port should be used.
even if it's mandatory in config, API should throw error while creation.
2. When try to create SG egress rule without src port, creation goes through fine but egress ACL is not populated in agent.
Rest api call to create SG:
curl -X POST -H "Content-Type: application/json; charset=UTF-8" -d '{"security-group": {"parent_type": "project", "fq_name": ["default-domain", "admin", "sg-test2"], "security_
After debugging, it was seen that there was no egress rule in ifmap egress acl sent to agent.
type:access-
3. when try to create SG ingress rule without dst port, creation goes through fine and its visible in config too but SG does not show up in horizon/neutron.
without dst port:
curl -X POST -H "Content-Type: application/json; charset=UTF-8" -d '{"security-group": {"parent_type": "project", "fq_name": ["default-domain", "admin", "sg-test6"], "security_
root@nodeg18:~# neutron security-group-list
+------
| id | name | description |
+------
| 73744aee-
| a935164d-
| 2348464f-
| 579e461d-
| 289c0898-
| 6f0e9628-
+------
4. same as 2 for ingress rule(without src port). agent does get ingress rule.
curl -X POST -H "Content-Type: application/json; charset=UTF-8" -d '{"security-group": {"parent_type": "project", "fq_name": ["default-domain", "admin", "sg-test3"], "security_
Setup Info:
env.roledefs = { host2,host3, host4], :[host2] ,
'all': [host1,
'cfgm': [host1],
'openstack'
'control': [host1,host2],
'compute': [host3,host4],
'collector': [host1,host2],
'webui': [host1],
'database': [host1],
'build': [host_build],
}
env.hostnames = {
'all': ['nodec64', 'nodeg18', 'nodec62', 'nodec12']
}
agent introspect ifmap page: nodec12. englab. juniper. net:8085/ Snh_ShowIFMapAg entReq? table_name= &node_sub_ string= &link_type_ sub_string= &link_node_ sub_string=
http://