[ R2.20 111 ] vpc creation failed due to error in policy creation

Bug #1521841 reported by Vedamurthy Joshi
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
New
High
Rudra Rugge
R2.20
Won't Fix
High
Rudra Rugge
Trunk
Won't Fix
High
Rudra Rugge

Bug Description

R2.20 Build 111 Ubuntu 14.04.2 icehouse

root@nodea12:/var/log#
root@nodea12:/var/log# euca-create-vpc 10.2.3.0/24
2015-12-02 09:13:40.674 5801 DEBUG nova.openstack.common.fileutils [-] Reloading cached file /etc/nova/policy.json read_cached_file /usr/lib/python2.7/dist-packages/nova/openstack/common/fileutils.py:61
2015-12-02 09:13:40.679 5801 DEBUG nova.openstack.common.policy [-] Rules successfully reloaded load_rules /usr/lib/python2.7/dist-packages/nova/openstack/common/policy.py:242
2015-12-02 09:13:40.684 5801 DEBUG nova.api.ec2 [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f None] action: CreateVpc __call__ /usr/lib/python2.7/dist-packages/nova/api/ec2/__init__.py:380
2015-12-02 09:13:40.684 5801 DEBUG nova.api.ec2 [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f None] arg: CidrBlock val: 10.2.3.0/24 __call__ /usr/lib/python2.7/dist-packages/nova/api/ec2/__init__.py:383
2015-12-02 09:13:40.686 5801 DEBUG keystoneclient.auth.identity.v2 [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f ] Making authentication request to http://10.204.216.8:5000/v2.0/tokens get_auth_ref /usr/lib/python2.7/dist-packages/keystoneclient/auth/identity/v2.py:72
2015-12-02 09:13:40.777 5801 DEBUG keystoneclient.session [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f ] REQ: curl -i -X POST http://10.204.216.8:35357/v2.0/tenants -H "User-Agent: python-keystoneclient" -H "Content-Type: application/json" -H "X-Auth-Token: 9a8968a034e24e9d953194713ab25e40" -d '{"tenant": {"enabled": true, "name": "vpc-1ca4d9c1", "description": null}}' _http_log_request /usr/lib/python2.7/dist-packages/keystoneclient/session.py:162
2015-12-02 09:13:40.803 5801 DEBUG keystoneclient.session [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f ] RESP: [200] CaseInsensitiveDict({'date': 'Wed, 02 Dec 2015 03:43:40 GMT', 'vary': 'X-Auth-Token', 'content-length': '116', 'content-type': 'application/json', 'x-distribution': 'Ubuntu'})
RESP BODY: {"tenant": {"description": null, "enabled": true, "id": "abc248db7e614a9e99a61d6b27bc4619", "name": "vpc-1ca4d9c1"}}
 _http_log_response /usr/lib/python2.7/dist-packages/keystoneclient/session.py:189
2015-12-02 09:13:40.804 5801 DEBUG neutronclient.client [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f ]
REQ: curl -i http://10.204.216.8:9696//v2.0/ipams.json -X POST -H "X-Auth-Token: 6e9d0dac1d9d4fc0b0287e36d7934d78" -H "User-Agent: python-neutronclient" -d '{"ipam": {"tenant_id": "abc248db7e614a9e99a61d6b27bc4619", "name": "vpc-1ca4d9c1", "mgmt": {"cidr_block": {"ip_prefix": "10.2.3.0", "ip_prefix_len": 24}}}}'
 http_log_req /usr/lib/python2.7/dist-packages/neutronclient/common/utils.py:138
2015-12-02 09:13:40.969 5801 DEBUG neutronclient.client [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f ] RESP:201 CaseInsensitiveDict({'date': 'Wed, 02 Dec 2015 03:43:40 GMT', 'content-length': '382', 'content-type': 'application/json; charset=UTF-8', 'x-openstack-request-id': 'req-71526b0a-3744-4944-b4b7-6b3cfdffed23'}) {"ipam": {"id": "92c3b3dc-116e-474c-a341-4b5ebe3759cc", "tenant_id": "abc248db7e614a9e99a61d6b27bc4619", "fq_name": ["default-domain", "vpc-1ca4d9c1", "vpc-1ca4d9c1"], "name": "vpc-1ca4d9c1", "mgmt": {"ipam_method": null, "ipam_dns_method": null, "ipam_dns_server": null, "dhcp_option_list": null, "host_routes": null, "cidr_block": {"ip_prefix": "10.2.3.0", "ip_prefix_len": 24}}}}
 http_log_resp /usr/lib/python2.7/dist-packages/neutronclient/common/utils.py:147
2015-12-02 09:13:40.970 5801 DEBUG keystoneclient.session [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f ] REQ: curl -i -X GET http://10.204.216.8:35357/v2.0/tenants -H "User-Agent: python-keystoneclient" -H "X-Auth-Token: 9a8968a034e24e9d953194713ab25e40" _http_log_request /usr/lib/python2.7/dist-packages/keystoneclient/session.py:162
2015-12-02 09:13:40.986 5801 DEBUG keystoneclient.session [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f ] RESP: [200] CaseInsensitiveDict({'date': 'Wed, 02 Dec 2015 03:43:40 GMT', 'vary': 'X-Auth-Token', 'content-length': '762', 'content-type': 'application/json', 'x-distribution': 'Ubuntu'})
RESP BODY: {"tenants_links": [], "tenants": [{"description": null, "enabled": true, "id": "018fb00e3fad4d1eb5c7785b11cafa4b", "name": "vpc-a705f20d"}, {"description": null, "enabled": true, "id": "149975c5a3e3415184496185a2661b05", "name": "invisible_to_admin"}, {"description": null, "enabled": true, "id": "4df5b0b65d9a40d895733b1a54b201cf", "name": "demo"}, {"description": null, "enabled": true, "id": "6681537b3cb34a238ca480ad98a60500", "name": "vpc-8c198c41"}, {"description": null, "enabled": true, "id": "91094a9d05054d1986caa41fa8ca359e", "name": "admin"}, {"description": null, "enabled": true, "id": "abc248db7e614a9e99a61d6b27bc4619", "name": "vpc-1ca4d9c1"}, {"description": null, "enabled": true, "id": "bfef88acff60499a894d1c18de01bd00", "name": "service"}]}
 _http_log_response /usr/lib/python2.7/dist-packages/keystoneclient/session.py:189
2015-12-02 09:13:40.987 5801 DEBUG keystoneclient.session [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f ] REQ: curl -i -X GET http://10.204.216.8:35357/v2.0/tenants -H "User-Agent: python-keystoneclient" -H "X-Auth-Token: 9a8968a034e24e9d953194713ab25e40" _http_log_request /usr/lib/python2.7/dist-packages/keystoneclient/session.py:162
2015-12-02 09:13:40.999 5801 DEBUG keystoneclient.session [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f ] RESP: [200] CaseInsensitiveDict({'date': 'Wed, 02 Dec 2015 03:43:40 GMT', 'vary': 'X-Auth-Token', 'content-length': '762', 'content-type': 'application/json', 'x-distribution': 'Ubuntu'})
RESP BODY: {"tenants_links": [], "tenants": [{"description": null, "enabled": true, "id": "018fb00e3fad4d1eb5c7785b11cafa4b", "name": "vpc-a705f20d"}, {"description": null, "enabled": true, "id": "149975c5a3e3415184496185a2661b05", "name": "invisible_to_admin"}, {"description": null, "enabled": true, "id": "4df5b0b65d9a40d895733b1a54b201cf", "name": "demo"}, {"description": null, "enabled": true, "id": "6681537b3cb34a238ca480ad98a60500", "name": "vpc-8c198c41"}, {"description": null, "enabled": true, "id": "91094a9d05054d1986caa41fa8ca359e", "name": "admin"}, {"description": null, "enabled": true, "id": "abc248db7e614a9e99a61d6b27bc4619", "name": "vpc-1ca4d9c1"}, {"description": null, "enabled": true, "id": "bfef88acff60499a894d1c18de01bd00", "name": "service"}]}
 _http_log_response /usr/lib/python2.7/dist-packages/keystoneclient/session.py:189
2015-12-02 09:13:41.000 5801 DEBUG neutronclient.client [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f ]
REQ: curl -i http://10.204.216.8:9696//v2.0/policys.json -X POST -H "X-Auth-Token: 6e9d0dac1d9d4fc0b0287e36d7934d78" -H "User-Agent: python-neutronclient" -d '{"policy": {"tenant_id": "abc248db7e614a9e99a61d6b27bc4619", "name": "acl-default", "entries": {"policy_rule": [{"application": [], "direction": ">", "protocol": "any", "dst_addresses": [{"security_group": null, "subnet": null, "virtual_network": "local"}], "action_list": {"simple_action": "pass"}, "rule_uuid": "ingress-100", "src_addresses": [{"security_group": null, "subnet": {"ip_prefix": "0.0.0.0", "ip_prefix_len": 0}, "virtual_network": "any"}], "rule_sequence": null, "dst_ports": [{"end_port": 65535, "start_port": 0}], "src_ports": [{"end_port": 65535, "start_port": 0}]}, {"application": [], "direction": ">", "protocol": "any", "dst_addresses": [{"security_group": null, "subnet": {"ip_prefix": "0.0.0.0", "ip_prefix_len": 0}, "virtual_network": "any"}], "action_list": {"simple_action": "pass"}, "rule_uuid": "egress-100", "src_addresses": [{"security_group": null, "subnet": null, "virtual_network": "local"}], "rule_sequence": null, "dst_ports": [{"end_port": 65535, "start_port": 0}], "src_ports": [{"end_port": 65535, "start_port": 0}]}, {"application": [], "direction": ">", "protocol": "any", "dst_addresses": [{"security_group": null, "subnet": null, "virtual_network": "local"}], "action_list": {"simple_action": "drop"}, "rule_uuid": "ingress-32767", "src_addresses": [{"security_group": null, "subnet": {"ip_prefix": "0.0.0.0", "ip_prefix_len": 0}, "virtual_network": "any"}], "rule_sequence": null, "dst_ports": [{"end_port": 65535, "start_port": 0}], "src_ports": [{"end_port": 65535, "start_port": 0}]}, {"application": [], "direction": ">", "protocol": "any", "dst_addresses": [{"security_group": null, "subnet": {"ip_prefix": "0.0.0.0", "ip_prefix_len": 0}, "virtual_network": "any"}], "action_list": {"simple_action": "drop"}, "rule_uuid": "egress-32767", "src_addresses": [{"security_group": null, "subnet": null, "virtual_network": "local"}], "rule_sequence": null, "dst_ports": [{"end_port": 65535, "start_port": 0}], "src_ports": [{"end_port": 65535, "start_port": 0}]}]}}}'
 http_log_req /usr/lib/python2.7/dist-packages/neutronclient/common/utils.py:138
2015-12-02 09:13:41.086 5801 DEBUG neutronclient.client [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f ] RESP:500 CaseInsensitiveDict({'date': 'Wed, 02 Dec 2015 03:43:41 GMT', 'content-length': '105', 'content-type': 'application/json; charset=UTF-8', 'x-openstack-request-id': 'req-e2626586-101e-4a48-8d57-1e7f180853a5'}) {"NeutronError": {"message": "An unknown exception occurred.", "type": "NeutronException", "detail": ""}}
 http_log_resp /usr/lib/python2.7/dist-packages/neutronclient/common/utils.py:147
2015-12-02 09:13:41.086 5801 DEBUG neutronclient.v2_0.client [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f ] Error message: {"NeutronError": {"message": "An unknown exception occurred.", "type": "NeutronException", "detail": ""}} _handle_fault_response /usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py:1355
2015-12-02 09:13:41.087 5801 DEBUG nova.api.ec2 [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f None] InvalidRequest raised: An unknown exception occurred. ec2_error_ex /usr/lib/python2.7/dist-packages/nova/api/ec2/__init__.py:565
2015-12-02 09:13:41.088 5801 DEBUG nova.api.ec2.faults [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f None] EC2 error response: InvalidRequest: An unknown exception occurred. ec2_error_response /usr/lib/python2.7/dist-packages/nova/api/ec2/faults.py:29
2015-12-02 09:13:41.089 5801 INFO nova.api.ec2 [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f None] 0.464297s 127.0.0.1 GET /services/Cloud/ CloudController:CreateVpc 400 [Boto/2.12.0 Python/2.7.6 Linux/3.13.0-40-generic] text/plain text/xml
InvalidRequest: An unknown exception occurred.
2015-12-02 09:13:41.106 5801 INFO nova.ec2.wsgi.server [req-177a11de-287e-4aa8-94a7-57dd3b1dd12f None] 127.0.0.1 "GET /services/Cloud/?AWSAccessKeyId=34aa2c9ea9d44d1080af2d8d5314973e&Action=CreateVpc&CidrBlock=10.2.3.0%2F24&SignatureMethod=HmacSHA256&SignatureVersion=2&Timestamp=2015-12-02T03%3A43%3A40Z&Version=2013-06-15&Signature=eR4yYJj%2FlCQ1V96a2BZs7e44JWxipCTcC1RHKxAMBek%3D HTTP/1.1" status: 400 len: 324 time: 0.4820318
root@nodea12:/var/log#
root@nodea12:/var/log#

neutron log :
============
2015-12-02 09:13:41.84 ERROR [neutron.api.v2.resource] create failed
Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/neutron/api/v2/resource.py", line 87, in resource
    result = method(request=request, **args)
  File "/usr/lib/python2.7/dist-packages/neutron/api/v2/base.py", line 448, in create
    obj = obj_creator(request.context, **kwargs)
  File "/usr/lib/python2.7/dist-packages/neutron_plugin_contrail/plugins/opencontrail/contrail_plugin_policy.py", line 43, in create_policy
    plugin_policy)
  File "/usr/lib/python2.7/dist-packages/neutron_plugin_contrail/plugins/opencontrail/contrail_plugin.py", line 254, in _create_resource
    obj_name=res_type)
  File "/usr/lib/python2.7/dist-packages/neutron_plugin_contrail/plugins/opencontrail/contrail_plugin.py", line 236, in _transform_response
    plugin_base._raise_contrail_error(info, obj_name)
  File "/usr/lib/python2.7/dist-packages/neutron_plugin_contrail/plugins/opencontrail/contrail_plugin_base.py", line 92, in _raise_contrail_error
    raise exc.NeutronException(**info)
NeutronException: An unknown exception occurred.

contrail-api log :
==============

Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/bottle.py", line 856, in _handle
    return route.call(**args)
  File "/usr/lib/python2.7/dist-packages/bottle.py", line 1721, in wrapper
    rv = callback(*a, **ka)
  File "/usr/lib/python2.7/dist-packages/vnc_openstack/__init__.py", line 987, in handler_trap_exception
    response = handler(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/vnc_openstack/neutron_plugin_interface.py", line 1089, in plugin_http_post_policy
    return self.plugin_create_policy(context, policy)
  File "/usr/lib/python2.7/dist-packages/vnc_openstack/neutron_plugin_interface.py", line 1014, in plugin_create_policy
    pol_info = cfgdb.policy_create(policy['resource'])
  File "/usr/lib/python2.7/dist-packages/vnc_openstack/neutron_plugin_db.py", line 2251, in wrapper
    return func(self, *args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/vnc_openstack/neutron_plugin_db.py", line 2866, in policy_create
    policy_uuid = self._vnc_lib.network_policy_create(policy_obj)
  File "/usr/lib/python2.7/dist-packages/vnc_api/vnc_api.py", line 38, in wrapper
    return func(self, *args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/vnc_api/vnc_api.py", line 346, in _object_create
    data = json_body)
  File "/usr/lib/python2.7/dist-packages/vnc_api/vnc_api.py", line 649, in _request_server
    retry_count=retry_count)
  File "/usr/lib/python2.7/dist-packages/vnc_api/vnc_api.py", line 708, in _request
    raise BadRequest(status, content)
BadRequest: HTTP Status: 400 Content: Bad property in create: Error validating property network_policy_entries value {'policy_rule': [{'direction': '>', 'protocol': 'any', 'dst_addresses': [{'security_group': None, 'subnet': None, 'network_policy': None, 'virtual_network': 'local'}], 'action_list': {'gateway_name': None, 'log': False, 'alert': False, 'assign_routing_instance': None, 'mirror_to': None, 'simple_action': 'pass', 'apply_service': []}, 'rule_uuid': 'ingress-100', 'dst_ports': [{'end_port': 65535, 'start_port': 0}], 'application': [], 'ethertype': None, 'src_addresses': [{'security_group': None, 'subnet': {'ip_prefix': '0.0.0.0', 'ip_prefix_len': 0}, 'network_policy': None, 'virtual_network': 'any'}], 'rule_sequence': None, 'src_ports': [{'end_port': 65535, 'start_port': 0}]}, {'direction': '>', 'protocol': 'any', 'dst_addresses': [{'security_group': None, 'subnet': {'ip_prefix': '0.0.0.0', 'ip_prefix_len': 0}, 'network_policy': None, 'virtual_network': 'any'}], 'action_list': {'gateway_name': None, 'log': False, 'alert': False, 'assign_routing_instance': None, 'mirror_to': None, 'simple_action': 'pass', 'apply_service': []}, 'rule_uuid': 'egress-100', 'dst_ports': [{'end_port': 65535, 'start_port': 0}], 'application': [], 'ethertype': None, 'src_addresses': [{'security_group': None, 'subnet': None, 'network_policy': None, 'virtual_network': 'local'}], 'rule_sequence': None, 'src_ports': [{'end_port': 65535, 'start_port': 0}]}, {'direction': '>', 'protocol': 'any', 'dst_addresses': [{'security_group': None, 'subnet': None, 'network_policy': None, 'virtual_network': 'local'}], 'action_list': {'gateway_name': None, 'log': False, 'alert': False, 'assign_routing_instance': None, 'mirror_to': None, 'simple_action': 'drop', 'apply_service': []}, 'rule_uuid': 'ingress-32767', 'dst_ports': [{'end_port': 65535, 'start_port': 0}], 'application': [], 'ethertype': None, 'src_addresses': [{'security_group': None, 'subnet': {'ip_prefix': '0.0.0.0', 'ip_prefix_len': 0}, 'network_policy': None, 'virtual_network': 'any'}], 'rule_sequence': None, 'src_ports': [{'end_port': 65535, 'start_port': 0}]}, {'direction': '>', 'protocol': 'any', 'dst_addresses': [{'security_group': None, 'subnet': {'ip_prefix': '0.0.0.0', 'ip_prefix_len': 0}, 'network_policy': None, 'virtual_network': 'any'}], 'action_list': {'gateway_name': None, 'log': False, 'alert': False, 'assign_routing_instance': None, 'mirror_to': None, 'simple_action': 'drop', 'apply_service': []}, 'rule_uuid': 'egress-32767', 'dst_ports': [{'end_port': 65535, 'start_port': 0}], 'application': [], 'ethertype': None, 'src_addresses': [{'security_group': None, 'subnet': None, 'network_policy': None, 'virtual_network': 'local'}], 'rule_sequence': None, 'src_ports': [{'end_port': 65535, 'start_port': 0}]}]} SimpleActionType must be one of [u'deny', u'pass']
10.204.216.8 - - [2015-12-02 09:13:41] "POST /neutron/policy HTTP/1.1" 500 156 0.049022

Tags: vpc
tags: added: releasenote
tags: removed: releasenote
Revision history for this message
Rudra Rugge (rrugge) wrote :

This feature is not supported any more.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.