Adding compute node fails if >1 security group

[Paul Bakoyiannis]

Adding a second compute node to the cluster fails if there is more than one security group. The script runs the command to list security groups under the assumption that there is only one. It then attempts to find and add default rules while supplying a list of security groups as the group id parameter to the command.

Attempting to add a second compute node to the cluster continued to fail for various reasons - this is the only one I've solved so far. After these attempts networking broke on my main cluster node, which I cannot yet say definitely it was due to this process, but things point in that direction.

[Juan Otero (juanoterocas)]

I'm facing the same issue, there is my log output:

 DEBUG - Error while executing command: No SecurityGroup found for 40512d18-5d68-4611-a31c-1a23aab86302

2021-05-21 15:36:57,281 - microstack_init - DEBUG - 7d06f08c-587c-4e46-9635-c90cb5dffb8e

2021-05-21 15:36:57,281 - microstack_init - DEBUG - 8fa2e710-d3e8-4602-800e-dd201efcdf44

Traceback (most recent call last):
  File "/snap/microstack/233/bin/microstack", line 11, in <module>
    load_entry_point('microstack==0.0.1', 'console_scripts', 'microstack')()
  File "/snap/microstack/233/lib/python3.8/site-packages/microstack/main.py", line 44, in main
    cmd()
  File "/snap/microstack/233/lib/python3.8/site-packages/init/main.py", line 60, in wrapper
    return func(*args, **kwargs)
  File "/snap/microstack/233/lib/python3.8/site-packages/init/main.py", line 227, in init
    question.ask()
  File "/snap/microstack/233/lib/python3.8/site-packages/init/questions/question.py", line 210, in ask
    self.yes(awr)
  File "/snap/microstack/233/lib/python3.8/site-packages/init/questions/__init__.py", line 907, in yes
    check('openstack', 'security', 'group', 'rule', 'create',
  File "/snap/microstack/233/lib/python3.8/site-packages/init/shell.py", line 69, in check
    raise subprocess.CalledProcessError(proc.returncode, " ".join(args))
subprocess.CalledProcessError: Command 'openstack security group rule create 40512d18-5d68-4611-a31c-1a23aab86302
7d06f08c-587c-4e46-9635-c90cb5dffb8e
8fa2e710-d3e8-4602-800e-dd201efcdf44 --proto icmp' returned non-zero exit status 1.

[nephews (michel-neven)]

Was this bug ever solved or workaround discovered? I still get this on Ubuntu 22.04 with Microstack ussuri. (I tried different parameters for installing Microstack: --beta and --edge channels and with/without --devmode).

This is my output when trying to add a compute node:

2023-02-04 08:36:27,379 - microstack_init - INFO - Configuring clustering ...
2023-02-04 08:36:27,570 - microstack_init - INFO - Setting up as a compute node.
2023-02-04 08:36:31,548 - microstack_init - INFO - TLS certificates must be provided: config.tls.cacert-path, config.tls.cert-path, and config.tls.key-path.
2023-02-04 08:36:32,477 - microstack_init - INFO - Configuring networking ...
2023-02-04 08:36:36,871 - microstack_init - INFO - Opening horizon dashboard up to *
2023-02-04 08:36:37,621 - microstack_init - INFO - Disabling local rabbit ...
2023-02-04 08:36:38,250 - microstack_init - INFO - Disabling local MySQL ...
2023-02-04 08:36:38,896 - microstack_init - INFO - Disabling the Placement service...
2023-02-04 08:36:39,465 - microstack_init - INFO - Disabling nova control plane services ...
2023-02-04 08:36:41,856 - microstack_init - INFO - Configuring nova compute hypervisor ...
2023-02-04 08:36:41,856 - microstack_init - INFO - Checking virtualization extensions presence on the host
2023-02-04 08:36:41,878 - microstack_init - INFO - Hardware virtualization is supported - KVM will be used for Nova instances
2023-02-04 08:36:44,426 - microstack_init - INFO - Configuring the Spice HTML5 console service...
2023-02-04 08:36:56,545 - microstack_init - INFO - Creating security group rules ...
Traceback (most recent call last):
  File "/snap/microstack/245/bin/microstack", line 11, in <module>
    load_entry_point('microstack==0.0.1', 'console_scripts', 'microstack')()
  File "/snap/microstack/245/lib/python3.8/site-packages/microstack/main.py", line 44, in main
    cmd()
  File "/snap/microstack/245/lib/python3.8/site-packages/init/main.py", line 60, in wrapper
    return func(*args, **kwargs)
  File "/snap/microstack/245/lib/python3.8/site-packages/init/main.py", line 228, in init
    question.ask()
  File "/snap/microstack/245/lib/python3.8/site-packages/init/questions/question.py", line 210, in ask
    self.yes(awr)
  File "/snap/microstack/245/lib/python3.8/site-packages/init/questions/__init__.py", line 1027, in yes
    check('openstack', 'security', 'group', 'rule', 'create',
  File "/snap/microstack/245/lib/python3.8/site-packages/init/shell.py", line 69, in check
    raise subprocess.CalledProcessError(proc.returncode, " ".join(args))
subprocess.CalledProcessError: Command 'openstack security group rule create 1fc39106-ebb9-4350-a77f-d2b4f47c4739
20d6a154-251e-4e95-a928-1cc13254c081
211c7a10-680a-4994-88df-cda94a6c98a5
2e29a366-c820-4a70-a0e2-cbe55bf510ca
6c60e6e6-e87e-4778-a350-c8e80b3d1a3c
a18228a8-2955-4dde-8677-8fc9f0fa611b
e7b039c8-d226-4233-ab06-d2d6bc4214b6 --proto icmp' returned non-zero exit status 1.