generic driver can not create service VM

Bug #1415770 reported by Valeriy Ponomaryov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Shared File Systems Service (Manila)
Fix Released
Critical
Valeriy Ponomaryov

Bug Description

Several hours ago was merged commit to Nova:

https://github.com/openstack/nova/commit/d8cafb9a

After which Generic driver is not able to create Nova VMs anymore with following error:

2015-01-29 06:59:30.001 5290 ERROR nova.compute.manager [-] Instance failed network setup after 1 attempt(s)
2015-01-29 06:59:30.001 5290 TRACE nova.compute.manager Traceback (most recent call last):
2015-01-29 06:59:30.001 5290 TRACE nova.compute.manager File "/opt/stack/new/nova/nova/compute/manager.py", line 1677, in _allocate_network_async
2015-01-29 06:59:30.001 5290 TRACE nova.compute.manager dhcp_options=dhcp_options)
2015-01-29 06:59:30.001 5290 TRACE nova.compute.manager File "/opt/stack/new/nova/nova/network/neutronv2/api.py", line 457, in allocate_for_instance
2015-01-29 06:59:30.001 5290 TRACE nova.compute.manager raise exception.SecurityGroupNotAllowedTogetherWithPort()
2015-01-29 06:59:30.001 5290 TRACE nova.compute.manager SecurityGroupNotAllowedTogetherWithPort: It's not allowed to specify security groups if port_id is provided on instance boot. Neutron should be used to configure security groups on port.
2015-01-29 06:59:30.001 5290 TRACE nova.compute.manager
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/eventlet/hubs/poll.py", line 115, in wait
    listener.cb(fileno)
  File "/usr/local/lib/python2.7/dist-packages/eventlet/greenthread.py", line 214, in main
    result = function(*args, **kwargs)
  File "/opt/stack/new/nova/nova/compute/manager.py", line 1677, in _allocate_network_async
    dhcp_options=dhcp_options)
  File "/opt/stack/new/nova/nova/network/neutronv2/api.py", line 457, in allocate_for_instance
    raise exception.SecurityGroupNotAllowedTogetherWithPort()
SecurityGroupNotAllowedTogetherWithPort: It's not allowed to specify security groups if port_id is provided on instance boot. Neutron should be used to configure security groups on port.
Removing descriptor: 19

Tags: driver generic
Changed in manila:
milestone: none → kilo-2
importance: Undecided → Critical
assignee: nobody → Valeriy Ponomaryov (vponomaryov)
status: New → Incomplete
status: Incomplete → In Progress
tags: added: driver generic
Revision history for this message
Valeriy Ponomaryov (vponomaryov) wrote :

Looks like Nova shoots in its own leg. Filed a bug: https://bugs.launchpad.net/nova/+bug/1415835

Fix should be done in Nova.

In Manila the only way to avoid it, at least for CI, it is checking out of appropriate Nova's commit temporary, until fix for Nova is out.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to manila (master)

Fix proposed to branch: master
Review: https://review.openstack.org/151217

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to manila (master)

Reviewed: https://review.openstack.org/151217
Committed: https://git.openstack.org/cgit/openstack/manila/commit/?id=7393fb03b987b82b561464e1a32de89327d10620
Submitter: Jenkins
Branch: master

commit 7393fb03b987b82b561464e1a32de89327d10620
Author: Valeriy Ponomaryov <email address hidden>
Date: Thu Jan 29 15:02:45 2015 +0200

    Workaround Nova VM boot bug

    Generic driver is unable to boot VMs anymore. The cause is in appeared bug in
    Nova, that was introduced by commit d8cafb9a6efb95b78609aca8fcb3532c33a1788f,
    where Nova is unable to boot VM if port from Neutron is provided.

    Checkout Nova working commit until this bug is fixed in Nova.

    Change-Id: I6dd2892392b5d08a7cede9c750d6328bee7dea9b
    Closes-Bug: #1415770

Changed in manila:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in manila:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in manila:
milestone: kilo-2 → 2015.1.0
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.