[Secure RBAC] Cleaning shared networks fails with new RBAC policies

[Slawek Kaplonski]

Failed test: tearDownClass (neutron_tempest_plugin.api.admin.test_shared_network_extension.RBACSharedNetworksTest)

Error:

ft7.1: tearDownClass (neutron_tempest_plugin.api.admin.test_shared_network_extension.RBACSharedNetworksTest)testtools.testresult.real._StringException: Traceback (most recent call last):
  File "/opt/stack/tempest/tempest/test.py", line 220, in tearDownClass
    raise value.with_traceback(trace)
  File "/opt/stack/tempest/tempest/test.py", line 192, in tearDownClass
    teardown()
  File "/opt/stack/tempest/.tox/tempest/lib/python3.8/site-packages/neutron_tempest_plugin/api/base.py", line 228, in resource_cleanup
    cls._try_delete_resource(cls.delete_network, network)
  File "/opt/stack/tempest/.tox/tempest/lib/python3.8/site-packages/neutron_tempest_plugin/api/base.py", line 310, in _try_delete_resource
    delete_callable(*args, **kwargs)
  File "/opt/stack/tempest/.tox/tempest/lib/python3.8/site-packages/neutron_tempest_plugin/api/base.py", line 403, in delete_network
    client.delete_network(network['id'])
  File "/opt/stack/tempest/.tox/tempest/lib/python3.8/site-packages/neutron_tempest_plugin/services/network/json/network_client.py", line 112, in _delete
    resp, body = self.delete(uri)
  File "/opt/stack/tempest/tempest/lib/common/rest_client.py", line 330, in delete
    return self.request('DELETE', url, extra_headers, headers, body)
  File "/opt/stack/tempest/tempest/lib/common/rest_client.py", line 720, in request
    self._error_checker(resp, resp_body)
  File "/opt/stack/tempest/tempest/lib/common/rest_client.py", line 841, in _error_checker
    raise exceptions.Conflict(resp_body, resp=resp)
tempest.lib.exceptions.Conflict: Conflict with state of target resource
Details: {'type': 'NetworkInUse', 'message': 'Unable to complete operation on network fa38e116-dfce-49a1-9e68-5575db2ac936. There are one or more ports still in use on the network, id for these ports is: f88933d0-9a03-447f-a1b4-d0cf6715d128.', 'detail': ''}

[Slawek Kaplonski (slaweq)]

Patch proposed https://review.opendev.org/c/openstack/neutron/+/872280

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/neutron/+/872280
Committed: https://opendev.org/openstack/neutron/commit/17be2505d145d404967b30d9794b9d027b83ac6b
Submitter: "Zuul (22348)"
Branch: master

commit 17be2505d145d404967b30d9794b9d027b83ac6b
Author: Slawek Kaplonski <email address hidden>
Date: Tue Jan 31 15:14:50 2023 +0100

    [Secure RBAC] Allow network owner to delete ports plugged to the network

    Network owner should be able to delete ports plugged to the owner's
    network, even if port belongs to some other project.

    Closes-Bug: #2004012
    Closes-Bug: #2004016
    Change-Id: I6d5418762b48ff382ca95b1a445a6edc7d72b424

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/zed
Review: https://review.opendev.org/c/openstack/neutron/+/875607

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/neutron/+/875607
Committed: https://opendev.org/openstack/neutron/commit/f2ba02d90da6b00e2213f66fb2f0b19ed2ea30af
Submitter: "Zuul (22348)"
Branch: stable/zed

commit f2ba02d90da6b00e2213f66fb2f0b19ed2ea30af
Author: Slawek Kaplonski <email address hidden>
Date: Tue Jan 31 15:14:50 2023 +0100

    [Secure RBAC] Allow network owner to delete ports plugged to the network

    Network owner should be able to delete ports plugged to the owner's
    network, even if port belongs to some other project.

    Closes-Bug: #2004012
    Closes-Bug: #2004016
    Change-Id: I6d5418762b48ff382ca95b1a445a6edc7d72b424
    (cherry picked from commit 17be2505d145d404967b30d9794b9d027b83ac6b)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/neutron 22.0.0.0rc1 release candidate.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/neutron 21.1.0 release.