Draft objects should be filtered by the control-node and shouldnt be pushed to the agent.
FYI, the original commit to ignore the drafts was made via https://review.opencontrail.org/#/c/41044/ which seems to be broken now.
msenthil-mbp:~ msenthil$ curl "http://10.87.74.130:8085/Snh_ShowIFMapAgentReq?table_name=&node_sub_string=draft&link_type_sub_string=&link_node_sub_string=" | xmllint --format -
<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="/universal_parse.xsl"?>
<ShowIFMapAgentResp type="sandesh">
<table_data type="list" identifier="1">
<list type="string" size="15">
<element>
type:address-group
name:draft-policy-management:ctest-TestFirewallDraft_1-78880126-98706359
draft-mode-state:created
id-perms
permissions
owner:contrail-api
owner-access:7
group:admin
group-access:7
other-access:7
uuid
uuid-mslong:11176500770961444195
uuid-lslong:9430037126770745513
Uuid : 9b1ae83c-4d09-4d63-82de-38cde7ea60a9
enable:true
created:2018-05-16T22:07:21
last-modified:2018-05-16T22:07:21
user-visible:true
display-name:ctest-TestFirewallDraft_1-78880126-98706359
Adjacencies:
tag label=ag
firewall-rule default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-33536440
firewall-rule default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-02797300
</element>
<element>
type:application-policy-set
name:default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-50275431
draft-mode-state:created
all-applications:false
id-perms
permissions
owner:contrail-api
owner-access:7
group:admin
group-access:7
other-access:7
uuid
uuid-mslong:12749880629021392902
uuid-lslong:9557930504603351915
Uuid : b0f0ace1-5d74-4006-84a4-972762c0bb6b
enable:true
created:2018-05-16T22:07:27
last-modified:2018-05-16T22:07:27
user-visible:true
display-name:ctest-TestFirewallDraft_1-78880126-50275431
Adjacencies:
application-policy-set-firewall-policy attr(default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-50275431,default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397)
application-policy-set-firewall-policy attr(default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-50275431,draft-policy-management:ctest-TestFirewallDraft_1-78880126-43770508)
tag default-domain:ctest-TestFirewallDraft_1-78880126:application=hr
policy-management default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management
</element>
<element>
type:application-policy-set-firewall-policy
name:attr(default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-50275431,default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397)
value
sequence:20
Adjacencies:
application-policy-set default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-50275431
firewall-policy default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397
</element>
<element>
type:application-policy-set-firewall-policy
name:attr(default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-50275431,draft-policy-management:ctest-TestFirewallDraft_1-78880126-43770508)
value
sequence:30
Adjacencies:
application-policy-set default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-50275431
firewall-policy draft-policy-management:ctest-TestFirewallDraft_1-78880126-43770508
</element>
<element>
type:firewall-policy
name:default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397
draft-mode-state:created
id-perms
permissions
owner:contrail-api
owner-access:7
group:admin
group-access:7
other-access:7
uuid
uuid-mslong:11976039415087449057
uuid-lslong:13513037206489513293
Uuid : a6337065-705d-43e1-bb87-f3be8171bd4d
enable:true
created:2018-05-16T22:07:26
last-modified:2018-05-16T22:07:26
user-visible:true
display-name:ctest-TestFirewallDraft_1-78880126-77233397
Adjacencies:
application-policy-set-firewall-policy attr(default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-50275431,default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397)
firewall-policy-firewall-rule attr(default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-33536440,default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397)
firewall-policy-firewall-rule attr(default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-02797300,default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397)
</element>
<element>
type:firewall-policy
name:draft-policy-management:ctest-TestFirewallDraft_1-78880126-43770508
draft-mode-state:created
id-perms
permissions
owner:contrail-api
owner-access:7
group:admin
group-access:7
other-access:7
uuid
uuid-mslong:14148363083224206658
uuid-lslong:9245034414098185333
Uuid : c4591543-50d4-4d42-804c-f5d13c957c75
enable:true
created:2018-05-16T22:07:26
last-modified:2018-05-16T22:07:26
user-visible:true
display-name:ctest-TestFirewallDraft_1-78880126-43770508
Adjacencies:
application-policy-set-firewall-policy attr(default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-50275431,draft-policy-management:ctest-TestFirewallDraft_1-78880126-43770508)
firewall-policy-firewall-rule attr(draft-policy-management:ctest-TestFirewallDraft_1-78880126-43770508,draft-policy-management:ctest-TestFirewallDraft_1-78880126-67254036)
</element>
<element>
type:firewall-policy-firewall-rule
name:attr(default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-02797300,default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397)
value
sequence:30
Adjacencies:
firewall-policy default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397
firewall-rule default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-02797300
</element>
<element>
type:firewall-policy-firewall-rule
name:attr(default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-33536440,default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397)
value
sequence:40
Adjacencies:
firewall-policy default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397
firewall-rule default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-33536440
</element>
<element>
type:firewall-policy-firewall-rule
name:attr(draft-policy-management:ctest-TestFirewallDraft_1-78880126-43770508,draft-policy-management:ctest-TestFirewallDraft_1-78880126-67254036)
value
sequence:20
Adjacencies:
firewall-policy draft-policy-management:ctest-TestFirewallDraft_1-78880126-43770508
firewall-rule draft-policy-management:ctest-TestFirewallDraft_1-78880126-67254036
</element>
<element>
type:firewall-rule
name:default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-02797300
draft-mode-state:created
action-list
simple-action:pass
mirror-to
udp-port:0
juniper-header:true
static-nh-header
vni:0
nic-assisted-mirroring:false
nic-assisted-mirroring-vlan:0
log:false
alert:false
endpoint-1
subnet
ip-prefix-len:0
tags:tier=web
tag-ids:131334
any:false
endpoint-2
subnet
ip-prefix-len:0
address-group:draft-policy-management:ctest-TestFirewallDraft_1-78880126-98706359
any:false
match-tags
tag-list:deployment
match-tag-types
tag-type:3
direction:<>
id-perms
permissions
owner:contrail-api
owner-access:7
group:admin
group-access:7
other-access:7
uuid
uuid-mslong:18406882394772030381
uuid-lslong:12242370262651952067
Uuid : ff726203-a2c7-43ad-a9e5-a2e41a2cdbc3
enable:true
created:2018-05-16T22:07:24
last-modified:2018-05-16T22:07:24
user-visible:true
display-name:ctest-TestFirewallDraft_1-78880126-02797300
Adjacencies:
firewall-policy-firewall-rule attr(default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-02797300,default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397)
address-group draft-policy-management:ctest-TestFirewallDraft_1-78880126-98706359
service-group default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-36316900
tag default-domain:ctest-TestFirewallDraft_1-78880126:tier=web
</element>
<element>
type:firewall-rule
name:default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-33536440
draft-mode-state:created
action-list
simple-action:pass
mirror-to
udp-port:0
juniper-header:true
static-nh-header
vni:0
nic-assisted-mirroring:false
nic-assisted-mirroring-vlan:0
log:false
alert:false
service
protocol:udp
protocol-id:17
src-ports
start-port:0
end-port:65535
dst-ports
start-port:8000
end-port:8010
endpoint-1
subnet
ip-prefix-len:0
address-group:draft-policy-management:ctest-TestFirewallDraft_1-78880126-98706359
any:false
endpoint-2
subnet
ip-prefix-len:0
tags:tier=db
tag-ids:131338
any:false
match-tags
tag-list:deployment
match-tag-types
tag-type:3
direction:<>
id-perms
permissions
owner:contrail-api
owner-access:7
group:admin
group-access:7
other-access:7
uuid
uuid-mslong:1943059211804230369
uuid-lslong:12472942233209114554
Uuid : 1af7220e-f124-42e1-ad18-cae06a658fba
enable:true
created:2018-05-16T22:07:25
last-modified:2018-05-16T22:07:25
user-visible:true
display-name:ctest-TestFirewallDraft_1-78880126-33536440
Adjacencies:
firewall-policy-firewall-rule attr(default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-33536440,default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-77233397)
address-group draft-policy-management:ctest-TestFirewallDraft_1-78880126-98706359
tag default-domain:ctest-TestFirewallDraft_1-78880126:tier=db
</element>
<element>
type:firewall-rule
name:draft-policy-management:ctest-TestFirewallDraft_1-78880126-67254036
draft-mode-state:created
action-list
simple-action:pass
mirror-to
udp-port:0
juniper-header:true
static-nh-header
vni:0
nic-assisted-mirroring:false
nic-assisted-mirroring-vlan:0
log:false
alert:false
endpoint-1
subnet
ip-prefix-len:0
tags:global:site=blr
tag-ids:262301
any:false
endpoint-2
subnet
ip-prefix-len:0
tags:global:site=blr
tag-ids:262301
any:false
match-tags
tag-list:deployment
match-tag-types
tag-type:3
direction:<>
id-perms
permissions
owner:contrail-api
owner-access:7
group:admin
group-access:7
other-access:7
uuid
uuid-mslong:6732227750186929838
uuid-lslong:10323686590570670784
Uuid : 5d6dad78-4ceb-4eae-8f45-1a41c36daac0
enable:true
created:2018-05-16T22:07:23
last-modified:2018-05-16T22:07:23
user-visible:true
display-name:ctest-TestFirewallDraft_1-78880126-67254036
Adjacencies:
firewall-policy-firewall-rule attr(draft-policy-management:ctest-TestFirewallDraft_1-78880126-43770508,draft-policy-management:ctest-TestFirewallDraft_1-78880126-67254036)
service-group draft-policy-management:ctest-TestFirewallDraft_1-78880126-09264388
tag site=blr
</element>
<element>
type:policy-management
name:default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management
id-perms
permissions
owner:contrail-api
owner-access:7
group:admin
group-access:7
other-access:7
uuid
uuid-mslong:16747854295773236446
uuid-lslong:13252669935028993859
Uuid : e86c54bf-8190-4cde-b7ea-f1171ae6ff43
enable:true
created:2018-05-16T22:07:19
last-modified:2018-05-16T22:07:19
user-visible:true
display-name:draft-policy-management
Adjacencies:
application-policy-set default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-50275431
</element>
<element>
type:service-group
name:default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-36316900
draft-mode-state:created
service-group-firewall-service-list
firewall-service
protocol:tcp
protocol-id:6
src-ports
start-port:0
end-port:65535
dst-ports
start-port:8000
end-port:8010
id-perms
permissions
owner:contrail-api
owner-access:7
group:admin
group-access:7
other-access:7
uuid
uuid-mslong:4832821388003658840
uuid-lslong:12794218310811680993
Uuid : 4311a172-6ede-4c58-b18e-31c45aba80e1
enable:true
created:2018-05-16T22:07:22
last-modified:2018-05-16T22:07:22
user-visible:true
display-name:ctest-TestFirewallDraft_1-78880126-36316900
Adjacencies:
firewall-rule default-domain:ctest-TestFirewallDraft_1-78880126:draft-policy-management:ctest-TestFirewallDraft_1-78880126-02797300
</element>
<element>
type:service-group
name:draft-policy-management:ctest-TestFirewallDraft_1-78880126-09264388
draft-mode-state:created
service-group-firewall-service-list
firewall-service
protocol:icmp
protocol-id:1
src-ports
start-port:0
end-port:65535
dst-ports
start-port:0
end-port:65535
id-perms
permissions
owner:contrail-api
owner-access:7
group:admin
group-access:7
other-access:7
uuid
uuid-mslong:3221455382348189250
uuid-lslong:12866248318197379142
Uuid : 2cb4e89a-2ca2-4e42-b28e-18ad561f3046
enable:true
created:2018-05-16T22:07:23
last-modified:2018-05-16T22:07:23
user-visible:true
display-name:ctest-TestFirewallDraft_1-78880126-09264388
Adjacencies:
firewall-rule draft-policy-management:ctest-TestFirewallDraft_1-78880126-67254036
</element>
</list>
</table_data>
<more type="bool" identifier="0">false</more>
</ShowIFMapAgentResp>
Review in progress for https:/ /review. opencontrail. org/43143
Submitter: Pramodh D'Souza (<email address hidden>)