L3policy creation failed.

Bug #1535638 reported by venkat akkina
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Group Based Policy
Incomplete
Undecided
Ivar Lazzaro

Bug Description

L3policy creation failed. When we tried to created l3policy it failed. While creating l3policy we were using ACI fabric and APIC controller in the openstack environment.

Following calltrace has been observed in neutron server logs.

Neutron server Logs:
==================

2016-01-19 05:05:37 ERROR [apicapi.apic_mapper] The resource could not be found.
2016-01-19 05:05:37 ERROR [gbpservice.neutron.services.grouppolicy.policy_driver_manager] Policy driver 'apic' failed in create_l3_policy_postcommit
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/gbpservice/neutron/services/grouppolicy/policy_driver_manager.py", line 119, in _call_on_drivers
    getattr(driver.obj, method_name)(context)
  File "/usr/lib/python2.7/site-packages/gbpservice/neutron/services/grouppolicy/drivers/cisco/apic/apic_mapping.py", line 826, in create_l3_policy_postcommit
    self._plug_l3p_to_es(context, es)
  File "/usr/lib/python2.7/site-packages/gbpservice/neutron/services/grouppolicy/drivers/cisco/apic/apic_mapping.py", line 1678, in _plug_l3p_to_es
    ep['consumed_policy_rule_sets'])
  File "/usr/lib/python2.7/site-packages/gbpservice/neutron/services/grouppolicy/drivers/cisco/apic/apic_mapping.py", line 1796, in _plug_external_policy_to_segment
    provided=False, transaction=trs)
  File "/usr/lib64/python2.7/contextlib.py", line 24, in __exit__
    self.gen.next()
  File "/usr/lib/python2.7/site-packages/apicapi/apic_client.py", line 869, in transaction
    result = transaction.commit()
  File "/usr/lib/python2.7/site-packages/apicapi/apic_client.py", line 775, in commit
    *self.root_params)
  File "/usr/lib/python2.7/site-packages/apicapi/apic_client.py", line 482, in post_body
    return self._send(self.session.post, url, data=data)
  File "/usr/lib/python2.7/site-packages/apicapi/apic_client.py", line 437, in _send
    err_text=err_text, err_code=err_code)
ApicResponseNotOk: APIC responded with HTTP status 400: Bad Request, Request: '/mo/uni/tn-common.json, data={"fvTenant": {"attributes": {"rn": "tn-common"}, "children": [{"l3extOut": {"attributes": {"rn": "out-laba-internet-l3out"}, "children": [{"l3extInstP": {"attributes": {"rn": "instP-_laba-opflex_sdfg_97e1"}, "children": [{"l3extSubnet": {"attributes": {"rn": "extsubnet-[0.0.0.0/0]"}, "children": []}}, {"fvRsProv": {"attributes": {"rn": "rsprov-NAT-allow-laba-internet-l3out_f128"}, "children": []}}, {"fvRsCons": {"attributes": {"rn": "rscons-NAT-allow-laba-internet-l3out_f128"}, "children": []}}]}}]}}]}}', APIC error code 1: Invalid Configuration - External Subnet: uni/tn-common/out-laba-internet-l3out/instP-_laba-opflex_sdfg_97e1/extsubnet-[0.0.0.0/0] already present at : uni/tn-common/out-laba-internet-l3out/instP-internet/extsubnet-[0.0.0.0/0]
2016-01-19 05:05:37 ERROR [gbpservice.neutron.services.grouppolicy.plugin] create_l3_policy_postcommit failed, deleting l3_policy f2e128b1-c72e-4ecc-88d6-48f1ee145001
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/gbpservice/neutron/services/grouppolicy/plugin.py", line 786, in create_l3_policy
    policy_context)
  File "/usr/lib/python2.7/site-packages/gbpservice/neutron/services/grouppolicy/policy_driver_manager.py", line 198, in create_l3_policy_postcommit
    self._call_on_drivers("create_l3_policy_postcommit", context)
  File "/usr/lib/python2.7/site-packages/gbpservice/neutron/services/grouppolicy/policy_driver_manager.py", line 134, in _call_on_drivers
    method=method_name
GroupPolicyDriverError: create_l3_policy_postcommit failed.
2016-01-19 05:05:37 WARNING [apicapi.apic_mapper] Exception in looking up name tenant
2016-01-19 05:05:37 ERROR [apicapi.apic_mapper] The resource could not be found.

Changed in group-based-policy:
assignee: nobody → Ivar Lazzaro (mmaleckk)
Revision history for this message
Sumit Naiksatam (snaiksat) wrote :

I believe this is not happening anymore?

Changed in group-based-policy:
status: New → Incomplete
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.