Clearing router gateway in non-admin project with SNAT port fails

[Thomas Bachman]

The AIM mechanism driver fails to delete the router gateway when SNAT subnets are present on the external network.

1) Create an external network (using admin project)
2) Create an SNAT subnet on external network (i.e. create subnet, passing "--apic:snat_host_pool True")
3) Create a tenant network, router, and connect the router to the tenantnetwork in non-admin project
4) Set the router gateway to the external network, using the non-admin project
5) Try clearing the gateway in the non-admin project

The operation will fail.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/ocata
Review: https://review.openstack.org/492290

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/newton
Review: https://review.openstack.org/492292

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/492297

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/492121
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=96c8f006cdb4f230d469161a5b579806f798b29b
Submitter: Jenkins
Branch: master

commit 96c8f006cdb4f230d469161a5b579806f798b29b
Author: Thomas Bachman <email address hidden>
Date: Wed Aug 9 12:31:42 2017 +0000

    Fix router delete w/SNAT in non-admin projects

    Deleting a router or just clearing the gateway in a non-admin project
    fails when the external network has SNAT subnets. This patch fixes
    that issue.

    Change-Id: Ic75b2acc975ab9ba529d539a0abad189430ed737
    Closes-Bug: 1709615

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/492297
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=0319b1555f02ddaf51ef378e70d07077640fda6c
Submitter: Jenkins
Branch: stable/mitaka

commit 0319b1555f02ddaf51ef378e70d07077640fda6c
Author: Thomas Bachman <email address hidden>
Date: Wed Aug 9 12:31:42 2017 +0000

    Fix router delete w/SNAT in non-admin projects

    Deleting a router or just clearing the gateway in a non-admin project
    fails when the external network has SNAT subnets. This patch fixes
    that issue.

    Change-Id: Ic75b2acc975ab9ba529d539a0abad189430ed737
    Closes-Bug: 1709615

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/492292
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=574070fae69a9b41101088e2f0fbbaf4cde22509
Submitter: Jenkins
Branch: stable/newton

commit 574070fae69a9b41101088e2f0fbbaf4cde22509
Author: Thomas Bachman <email address hidden>
Date: Wed Aug 9 12:31:42 2017 +0000

    Fix router delete w/SNAT in non-admin projects

    Deleting a router or just clearing the gateway in a non-admin project
    fails when the external network has SNAT subnets. This patch fixes
    that issue.

    Change-Id: Ic75b2acc975ab9ba529d539a0abad189430ed737
    Closes-Bug: 1709615

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/492290
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=3c9d32b29e54ea8a9ce525b54cf141d4e930805d
Submitter: Jenkins
Branch: stable/ocata

commit 3c9d32b29e54ea8a9ce525b54cf141d4e930805d
Author: Thomas Bachman <email address hidden>
Date: Wed Aug 9 12:31:42 2017 +0000

    Fix router delete w/SNAT in non-admin projects

    Deleting a router or just clearing the gateway in a non-admin project
    fails when the external network has SNAT subnets. This patch fixes
    that issue.

    Change-Id: Ic75b2acc975ab9ba529d539a0abad189430ed737
    Closes-Bug: 1709615