port_extra_properties feature of the OS::Nova::Server Heat resource in Mitaka doesn't seem to be working correctly.
Neutron didn't receive any allowed_address_pairs and there is some thing wrong with Heat.
Request body: {u'port': {u'network_id': u'b6bdd5ae-0213-4cb8-956e-610468079e27', u'allowed_address_pairs': [{u'ip_address': u'10.10.10.10/24'}], u'admin_state_up': True}}
When adding subnet info to the template (uncomment the line of subnet below), Heat passed value_specs to neutron which won't understand value_specs.
Request body: {u'port': {u'name': u'server1-port-0', u'allowed_address_pairs': [{u'ip_address': u'192.168.10.0/24', u'mac_address': u'fa:16:3e:00:00:00'}], u'admin_state_up': True, u'network_id': u'b6bdd5ae-0213-4cb8-956e-610468079e27', u'value_specs': {}, u'fixed_ips': [{u'subnet_id': u'cd50dc29-05ff-4df7-a861-3bb528b38720'}]}}
#template
resources:
server1:
type: OS::Nova::Server
properties:
name: Server1
image: { get_param: image }
flavor: { get_param: flavor }
key_name: { get_param: key_name }
networks:
- network: { get_param: private_net_id }
# subnet: { get_param: private_subnet_id }
port_extra_properties:
allowed_address_pairs:
- ip_address: 192.168.10.0/24
mac_address: fa:16:3e:00:00:00
So you need the subnet to be able to create the port. If you don't pass the subnet, heat ignores port_extra_