Firewall status remains 'PENDING_CREATE' for regular user

[Rishabh Das]

Description of problem:
Status of firewall for regular user remains at 'PENDING_CREATE'. The same works fine for admin user.

Steps to Reproduce:
1. Install method : packstack --alinone

2. Configure FwaaS.
   driver = neutron.services.firewall.drivers.linux.iptables_fwaas.IptablesFwaasDriver
   enabled = True

   Set value for service_plugins and service_provider in neutron.conf.

3. Create firewall rule, policy and then firewall using 'demo' user

Actual results:
Status of firewall stuck at 'PENDING_CREATE'

Expected results:
Firewall should be created successfully with status changing to 'ACTIVE'

Additional info:
This happens only in case of regular user. For admin user, firewall is created successfully and status is changed to ACTIVE.

[Sumit Naiksatam (snaiksat)]

Can you please verify if the demo user in this case has an active router? Most likely your admin user has one, and but the demo user doesn't.

[Rishabh Das (rishabh5290)]

If you can please check the attachment, The first thing done is to create a router with demo user. Status for the router is 'ACTIVE'

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/99956

[Sumit Naiksatam (snaiksat)]

Does the router have interfaces?

[OpenStack Infra (hudson-openstack)]

Change abandoned by Jakub Libosvar (<email address hidden>) on branch: master
Review: https://review.openstack.org/99956
Reason: Abandoning as router will become ACTIVE once router is created.

[Jakub Libosvar (libosvar)]

This is designed behavior. Router becomes ACTIVE once router with interfaces is added.