deleting a tenant doesn't delete its security-groups

Bug #1250768 reported by Yair Fried
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Incomplete
Undecided
Unassigned

Bug Description

after a tenant is deleted all of its security groups remain and pollute the DB mainly with all the "default" security-groups remaining

after deleting tenants:
# keystone tenant-list
+----------------------------------+-----------------------------------------------+---------+
| id | name | enabled |
+----------------------------------+-----------------------------------------------+---------+
| b1751bc4aa6e4f54ae4d0694aa4b6397 | QuotasAdminTestJSON-tempest-107038200-tenant | True |
| 6bac74d78cf54fa3b141321a257478d1 | QuotasAdminTestJSON-tempest-1585191858-tenant | True |
| fee7fc9b1e4648fcbdb045e42f5f43b8 | QuotasAdminTestJSON-tempest-1850444303-tenant | True |
| f31de9fe995649d9a0945fa0437ab340 | QuotasAdminTestJSON-tempest-185792585-tenant | True |
| 256a35e8fb324122920ee7ca5e365c37 | QuotasAdminTestJSON-tempest-1956191309-tenant | True |
| 76896839a9f54fe2bcb877d4f677018a | QuotasAdminTestJSON-tempest-2077362149-tenant | True |
| f746f0d0df7642e2a7b6c23ffd48afaf | QuotasAdminTestJSON-tempest-2134674551-tenant | True |
| 875407a5c58f435e810a93d151bdb72d | QuotasAdminTestJSON-tempest-230664500-tenant | True |
| 4e43bb0f05424aaca391475303eed467 | QuotasAdminTestJSON-tempest-261666469-tenant | True |
| cfde1568272a49ddbdf432b2abe96a08 | QuotasAdminTestJSON-tempest-516108505-tenant | True |
| 37f704c85c984816acb70360dfe3fc87 | QuotasAdminTestJSON-tempest-804001554-tenant | True |
| ad605f38f4344fc2a121971f83a8a5fe | QuotasAdminTestJSON-tempest-833354909-tenant | True |
| c75d0c32bca04f90b33bb775fc78caee | QuotasAdminTestXML-tempest-1032389404-tenant | True |
| d03fbc3063d9425c85ad1119192fc33e | QuotasAdminTestXML-tempest-1419699229-tenant | True |
| 5e25c587b8654da2834d38ec52f91cab | QuotasAdminTestXML-tempest-1531531965-tenant | True |
| 11d7e90dcb4945169231a1ac66dc9ea0 | QuotasAdminTestXML-tempest-2021157506-tenant | True |
| 3dc0a45bbe6b4348b6e0503e899ae3db | QuotasAdminTestXML-tempest-247081371-tenant | True |
| 39c972dcbfd843899db931a61682ded3 | QuotasAdminTestXML-tempest-356284897-tenant | True |
| 10f91b0551fb4c1d8489c5b51701702c | QuotasAdminTestXML-tempest-600040087-tenant | True |
| e7051ec54ebf4e4388b6224bbe085589 | QuotasAdminTestXML-tempest-63891120-tenant | True |
| 715b0eb3f589417a98390dafe2d49d26 | QuotasAdminTestXML-tempest-812658802-tenant | True |
| 6872dde176a645008b070a0278ba8f57 | admin | True |
| ff4ff065b47c4946b3c4ef197cfb18cd | demo | True |
| ebd6437f4c69460784d3a417ad6e0266 | rami | True |
| 07284afd5e264921836b0223be79e924 | services | True |
+----------------------------------+-----------------------------------------------+---------+

# keystone tenant-list
+----------------------------------+-----------------------------------------------+---------+
| id | name | enabled |
+----------------------------------+-----------------------------------------------+---------+
| 6872dde176a645008b070a0278ba8f57 | admin | True |
| ff4ff065b47c4946b3c4ef197cfb18cd | demo | True |
| ebd6437f4c69460784d3a417ad6e0266 | rami | True |
| 07284afd5e264921836b0223be79e924 | services | True |
+----------------------------------+-----------------------------------------------+---------+
# neutron security-group-list
+--------------------------------------+------------------------------------+------------------------------------------------+
| id | name | description |
+--------------------------------------+------------------------------------+------------------------------------------------+
| 0fd027c2-7b4f-45c2-9d13-97cdb1b66756 | default | default |
| 184d6619-8aa8-4591-9e35-c8404c277517 | default | default |
| 20a4d1ef-aafa-49f4-8425-a9bd4ffefaf8 | default | default |
| 20c29c96-0353-4e33-b2f1-6e327ac90692 | default | default |
| 28e2eba8-cb31-459a-b03c-067db0717451 | default | default |
| 2aba4658-c732-4354-8b97-e9110a01a821 | default | default |
| 2c420f3d-39a9-453e-899c-01c05f23aeca | default | default |
| 2d0e6fa2-ca3b-4918-a49d-5e7a9b146505 | default | default |
| 2ea45de2-2684-4097-bd0a-57a2d621dd14 | default | default |
| 2ffbea34-5092-48d9-98bf-b9a94265fbd0 | default | default |
| 30f5be5a-45da-46f9-bede-99a871d2169e | default | default |
| 31776cbe-ef02-4236-a983-e926943856a6 | default | default |
| 339978fd-f2a5-4d61-a17a-7d9219c935cd | default | default |
| 39d55229-3152-49be-99f8-891ac2333824 | default | default |
| 3b12f209-a23e-4ea1-b0c5-c16a6e51c959 | default | default |
| 3d4f0441-bfb7-4187-8881-263137d2c943 | default | default |
| 3e6ed811-edb1-4b8d-b432-253434acf4d1 | secgroup-smoke--tempest-477370047 | secgroup-smoke--tempest-477370047 description |
| 3ed66ee7-584c-4b38-bc86-ac96a6fe74c7 | default | default |
| 41f710ef-98db-41dd-a478-94dc778f8699 | default | default |
| 43a998c1-08b5-4af3-9e69-4a29be765989 | secgroup-smoke--tempest-1250499924 | secgroup-smoke--tempest-1250499924 description |
| 4d8f067d-b7e5-4d2e-94be-120ad633c0cb | default | default |
| 52677a4f-1694-4cf7-9d22-9fb656babd49 | default | default |
| 54d08e2d-38c0-4989-97ab-878c4f50e2f3 | default | default |
| 55568772-3a7d-424a-95bb-bf4a06eaa700 | default | default |
| 58e1073b-765b-4989-a976-53eaf71e3fbc | default | default |
| 5c213278-33c3-4837-8cba-328eb1501754 | default | default |
| 5dddbacd-1ebb-43aa-ac3c-29d9eabe20ef | default | default |
| 6219f3d0-8221-4836-a58c-ed1b213dea52 | secgroup-smoke--tempest-1159684012 | secgroup-smoke--tempest-1159684012 description |
| 632ae871-0ea7-45e2-8864-cf415e54eda5 | default | default |
| 664876ff-cf61-423c-a0bd-9c3f479df73e | default | default |
| 68b8e3ea-a2b3-49d4-9650-bf57f6ebd81b | secgroup-smoke--tempest-446709818 | secgroup-smoke--tempest-446709818 description |
| 6b1f302e-ecf8-41da-89b6-09c43042731f | default | default |
| 6f23ec07-9c00-44e1-8ef6-b92119c14a68 | default | default |
| 7214f3f9-b2e8-432f-a96c-6cbf1500e9e1 | default | default |
| 73541623-8af8-47a1-9f09-65f9731f74c6 | default | default |
| 74eb07a2-d1cd-4aaf-942b-0d3ca27da11d | default | default |
| 7e0f9f96-9d3e-48e9-8906-94f10e5a9651 | default | default |
| 7fc8bbe1-9301-4b28-9f63-b382ea17edb4 | default | default |
| 7fda04f2-a414-46d1-af27-7c4d01cb9fcf | default | default |
| 8350ad38-c89a-4762-89c9-17d0211ee5ff | default | default |
| 84ed65c7-1d94-4bcd-9d3f-32332951db93 | default | default |
| 863caa7f-fd19-4e83-8bec-cebff93bc76c | default | default |
| 8a3fffc8-2679-49b0-a86e-9394877cb7e7 | default | default |
| 8d74c3c0-624d-496e-9763-49d3882f4434 | default | default |
| 9432a4c5-693d-4c47-9799-064c3231c860 | default | default |
| 96ce0fab-af1b-44d5-a8e0-1c5b5d29c363 | default | default |
| 9bc69982-2687-4692-b4b9-df83469e7c66 | default | default |
| 9f529bad-232d-418b-bee7-0d3f62d4d705 | default | default |
| 9f547588-b540-450b-909f-312073793b0a | default | default |
| 9f812237-e128-4a72-8fe9-83ef3d8ec161 | default | default |
| a2d42a9b-2bab-4483-b6bc-d55399b763de | default | default |
| aab5b1a5-fdff-4047-a0f2-16ed9b9d184a | default | default |
| ab2796ed-df11-4d10-a509-b22eaa6fcfcc | default | default |
| afafa9d9-d9c0-4caf-aa1d-cf25eba3138e | default | default |
| b3ff1912-d16e-49f2-8d95-ed871aeffdba | default | default |
| b54dc611-5a29-47fa-a78f-473baf4e3430 | default | default |
| bfbfb850-f596-409a-97cd-db85c6fbff45 | default | default |
| c0e9322c-5b01-4399-8bfb-de19d64bd69d | default | default |
| cdf9127d-d698-4dce-8ee8-bc293573d97e | default | default |
| cf4d527c-5925-41d3-bd36-6d97233a7d3b | default | default |
| d059e26f-da93-49cf-9c4a-f2f10c4958f7 | default | default |
| d14271cb-48ee-427c-945e-a2fbc3dce5e7 | default | default |
| dac03b3a-1cb2-47f8-a01f-b809005742bf | default | default |
| e0d635cf-10e9-447b-a968-bb430084fd61 | default | default |
| e6221616-1a2b-4d17-97b8-0db812808d5e | default | default |
| e861023a-9029-423d-9066-c5b6da0c0855 | default | default |
| edeea60c-19e1-4d65-9bf9-d8b788eabdef | default | default |
| f2047ff5-11cc-4e3d-ba14-e79eaa6a7062 | default | default |
| f42c9db2-0e9c-493d-a52a-559f82066b01 | default | default |
| f7a8a982-1d51-4c11-9455-5dfa8c4ba3c9 | default | default |
| f90c11c5-9986-42ff-b0e1-529bb30297d8 | default | default |
| fd73b0cb-2483-445d-ba01-bd62d1476652 | default | default |
| ffaf6bfe-6bf7-4341-b895-8e269085bf42 | default | default |
+--------------------------------------+------------------------------------+------------------------------------------------+

Revision history for this message
Eugene Nikanorov (enikanorov) wrote :

Neutron is not notified upon tenant deletion, so there's no automatic way to remove tenant's resources.
Marking as Incomplete since I'd like to hear other opinions.
Probably this bug should be marked as invalid.

Also, I remember I saw a blueprint on generic tenant deletion that should handle resource cleanup in other projects, including neutron.

Changed in neutron:
status: New → Incomplete
Revision history for this message
Eugene Nikanorov (enikanorov) wrote :

Here's the blueprint for horizon: https://blueprints.launchpad.net/horizon/+spec/tenant-deletion

Horizon could be a good tool to cleanup resources.
However for the Neutron itself it is a feature that requires a blueprint.

Revision history for this message
Dolph Mathews (dolph) wrote :

I think it would be a terrible idea to attempt to centralize that kind of responsibility in horizon. As of Havana, keystone emits notifications on project deletion:

  http://docs.openstack.org/developer/keystone/event_notifications.html

no longer affects: keystone
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.