[RFE] Limits and Counts for SecGroup and FIPs

[Ankur]

[Problem]

As stated in recently submitted bug to OpenStack Client:
OpenStack limits --absolute shows wrong count for 'totalSecurityGroupsUsed'. Despite creating multiple security groups still, the count shows as 1.

openstack security group create <name> uses neutron API to create security group
openstack limits show --absolute fetches the information from nova api. Since nova-network has been deprecated and current devstack installation runs with neutron as default, it's better to change the way how how openstack limits show fetches its information

[Proposal]

Similar to Mitaka feature of IP Capacity. Provide an admin only feature to return the number of Security Groups, Security Group Rules, Floating IPs used and their absolute limits.

[References]
Original OSC bug
https://bugs.launchpad.net/python-openstackclient/+bug/1632460

Paste of difference in nova limits support.
http://paste.openstack.org/show/585516/

Paste sample return of "openstack limits show --absolute"
http://paste.openstack.org/show/585518/

[Ihar Hrachyshka (ihar-hrachyshka)]

We seem to already track the needed data in QuotaUsage sqla model (per project_id; we would need to aggregate the data to provide absolute data). The proposal is to expose that data through API, and make OSC use it.

Is it correct?

[Ankur (ankur-gupta-f)]

Ihar: correct, for FIPs SecGroup, SecGroupRules

[Kevin Benton (kevinbenton)]

We need to be careful with using the QuotaUsage model. IIRC, it has a concept of 'dirty' that indicates the data is stale and needs to be recalculated. I think rather than query it directly, we should ask the quota engine itself to give us this info which can correctly trigger recalculations.

I think this should just be implemented as a general quota usage API. The request has come up in that context before. So expanding the existing API to return usage should cover this.

[Armando Migliaccio (armando-migliaccio)]

This sounds like an effort aimed at closing the OSC gap as well.

[Ankur (ankur-gupta-f)]

OSC, but also can help Horizon and their effort to improve how they handle Quotas

[Armando Migliaccio (armando-migliaccio)]

https://review.openstack.org/#/c/383673/

[Armando Migliaccio (armando-migliaccio)]

https://review.openstack.org/#/c/348947/

[Armando Migliaccio (armando-migliaccio)]

Approved:

http://eavesdrop.openstack.org/meetings/neutron_drivers/2017/neutron_drivers.2017-03-16-22.02.log.html

[Brian Haley (brian-haley)]

Closing as this seems to work from running 'openstack quota show --network --usage' - if there is something still missing please either re-open this bug or a new one with more details. Thanks.