| 2018-04-09 15:23:39 |
Matthias Bastian |
bug |
|
|
added bug |
| 2018-04-09 15:24:41 |
Matthias Bastian |
description |
This is bug is probably very similar to #1759773.
Creating a firewall group fails on CentOS 7.4. and OS Ocata with fwaas_v2 when using a port of a distributed router.
The validation only accepts "network:router_interface" as "device_owner", but not "network:router_interface_distributed".
The creation of the firewall group itself works, setting a port does not:
# openstack firewall group set --port ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8 oh_noes
Failed to set firewall group 'oh_noes': Firewall Group Port ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8 is invalid
Neutron server returns request_ids: ['req-8a8a320b-659e-4364-9604-d41e0b04d6ea']
The port in question:
# openstack port show ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8 -f json
{
"allowed_address_pairs": "",
"extra_dhcp_opts": "",
"updated_at": "2018-04-09T15:15:07Z",
"device_owner": "network:router_interface_distributed",
"revision_number": 9,
"port_security_enabled": false,
"fixed_ips": "ip_address='192.168.133.1', subnet_id='4d0e4235-a1e8-44c8-9297-e226a65beda6'",
"id": "ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8",
"security_groups": "",
"option_value": null,
"binding_vnic_type": "normal",
"option_name": null,
"description": "",
"qos_policy_id": null,
"mac_address": "fa:16:3e:75:c8:06",
"project_id": "4c7effe5f22b4d11ade21982746d650c",
"status": "ACTIVE",
"binding_profile": "",
"binding_vif_type": "distributed",
"binding_vif_details": "",
"dns_assignment": "fqdn='host-192-168-133-1.vm.environment.uf0.de.', hostname='host-192-168-133-1', ip_address='192.168.133.1'",
"ip_address": null,
"device_id": "f305a116-5d6d-4539-883b-117de552d291",
"name": "",
"admin_state_up": "UP",
"network_id": "25b641fb-b104-480c-b347-4b5f66e9bd2b",
"dns_name": "",
"created_at": "2018-04-09T15:15:00Z",
"subnet_id": null,
"binding_host_id": ""
} |
This bug is probably very similar to #1759773.
Creating a firewall group fails on CentOS 7.4. and OS Ocata with fwaas_v2 when using a port of a distributed router.
The validation only accepts "network:router_interface" as "device_owner", but not "network:router_interface_distributed".
The creation of the firewall group itself works, setting a port does not:
# openstack firewall group set --port ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8 oh_noes
Failed to set firewall group 'oh_noes': Firewall Group Port ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8 is invalid
Neutron server returns request_ids: ['req-8a8a320b-659e-4364-9604-d41e0b04d6ea']
The port in question:
# openstack port show ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8 -f json
{
"allowed_address_pairs": "",
"extra_dhcp_opts": "",
"updated_at": "2018-04-09T15:15:07Z",
"device_owner": "network:router_interface_distributed",
"revision_number": 9,
"port_security_enabled": false,
"fixed_ips": "ip_address='192.168.133.1', subnet_id='4d0e4235-a1e8-44c8-9297-e226a65beda6'",
"id": "ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8",
"security_groups": "",
"option_value": null,
"binding_vnic_type": "normal",
"option_name": null,
"description": "",
"qos_policy_id": null,
"mac_address": "fa:16:3e:75:c8:06",
"project_id": "4c7effe5f22b4d11ade21982746d650c",
"status": "ACTIVE",
"binding_profile": "",
"binding_vif_type": "distributed",
"binding_vif_details": "",
"dns_assignment": "fqdn='host-192-168-133-1.vm.environment.uf0.de.', hostname='host-192-168-133-1', ip_address='192.168.133.1'",
"ip_address": null,
"device_id": "f305a116-5d6d-4539-883b-117de552d291",
"name": "",
"admin_state_up": "UP",
"network_id": "25b641fb-b104-480c-b347-4b5f66e9bd2b",
"dns_name": "",
"created_at": "2018-04-09T15:15:00Z",
"subnet_id": null,
"binding_host_id": ""
} |
|
| 2018-04-10 00:22:03 |
Swaminathan Vasudevan |
tags |
fwaas |
fwaas l3-dvr-backlog |
|
| 2018-04-10 06:44:41 |
Matthias Bastian |
description |
This bug is probably very similar to #1759773.
Creating a firewall group fails on CentOS 7.4. and OS Ocata with fwaas_v2 when using a port of a distributed router.
The validation only accepts "network:router_interface" as "device_owner", but not "network:router_interface_distributed".
The creation of the firewall group itself works, setting a port does not:
# openstack firewall group set --port ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8 oh_noes
Failed to set firewall group 'oh_noes': Firewall Group Port ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8 is invalid
Neutron server returns request_ids: ['req-8a8a320b-659e-4364-9604-d41e0b04d6ea']
The port in question:
# openstack port show ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8 -f json
{
"allowed_address_pairs": "",
"extra_dhcp_opts": "",
"updated_at": "2018-04-09T15:15:07Z",
"device_owner": "network:router_interface_distributed",
"revision_number": 9,
"port_security_enabled": false,
"fixed_ips": "ip_address='192.168.133.1', subnet_id='4d0e4235-a1e8-44c8-9297-e226a65beda6'",
"id": "ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8",
"security_groups": "",
"option_value": null,
"binding_vnic_type": "normal",
"option_name": null,
"description": "",
"qos_policy_id": null,
"mac_address": "fa:16:3e:75:c8:06",
"project_id": "4c7effe5f22b4d11ade21982746d650c",
"status": "ACTIVE",
"binding_profile": "",
"binding_vif_type": "distributed",
"binding_vif_details": "",
"dns_assignment": "fqdn='host-192-168-133-1.vm.environment.uf0.de.', hostname='host-192-168-133-1', ip_address='192.168.133.1'",
"ip_address": null,
"device_id": "f305a116-5d6d-4539-883b-117de552d291",
"name": "",
"admin_state_up": "UP",
"network_id": "25b641fb-b104-480c-b347-4b5f66e9bd2b",
"dns_name": "",
"created_at": "2018-04-09T15:15:00Z",
"subnet_id": null,
"binding_host_id": ""
} |
This bug is probably very similar to #1759773.
Creating a firewall group fails on CentOS 7.4. and OS Ocata with fwaas_v2 when using a port of a distributed router. The issue is also still present in Queens.
The validation only accepts "network:router_interface" as "device_owner", but not "network:router_interface_distributed".
The creation of the firewall group itself works, setting a port does not:
# openstack firewall group set --port ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8 oh_noes
Failed to set firewall group 'oh_noes': Firewall Group Port ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8 is invalid
Neutron server returns request_ids: ['req-8a8a320b-659e-4364-9604-d41e0b04d6ea']
The port in question:
# openstack port show ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8 -f json
{
"allowed_address_pairs": "",
"extra_dhcp_opts": "",
"updated_at": "2018-04-09T15:15:07Z",
"device_owner": "network:router_interface_distributed",
"revision_number": 9,
"port_security_enabled": false,
"fixed_ips": "ip_address='192.168.133.1', subnet_id='4d0e4235-a1e8-44c8-9297-e226a65beda6'",
"id": "ff2c03f4-22d9-4d7a-bc7a-9632ba6cd9d8",
"security_groups": "",
"option_value": null,
"binding_vnic_type": "normal",
"option_name": null,
"description": "",
"qos_policy_id": null,
"mac_address": "fa:16:3e:75:c8:06",
"project_id": "4c7effe5f22b4d11ade21982746d650c",
"status": "ACTIVE",
"binding_profile": "",
"binding_vif_type": "distributed",
"binding_vif_details": "",
"dns_assignment": "fqdn='host-192-168-133-1.vm.environment.uf0.de.', hostname='host-192-168-133-1', ip_address='192.168.133.1'",
"ip_address": null,
"device_id": "f305a116-5d6d-4539-883b-117de552d291",
"name": "",
"admin_state_up": "UP",
"network_id": "25b641fb-b104-480c-b347-4b5f66e9bd2b",
"dns_name": "",
"created_at": "2018-04-09T15:15:00Z",
"subnet_id": null,
"binding_host_id": ""
} |
|
| 2018-04-26 14:38:36 |
Sridar Kandaswamy |
neutron: assignee |
|
Sridar Kandaswamy (skandasw) |
|
| 2018-05-23 18:06:52 |
Brian Haley |
bug |
|
|
added subscriber Brian Haley |
| 2018-06-14 14:49:18 |
Swaminathan Vasudevan |
neutron: status |
New |
Triaged |
|
| 2018-06-14 14:49:46 |
Swaminathan Vasudevan |
neutron: importance |
Undecided |
Medium |
|
| 2018-07-05 14:29:00 |
Nguyen Phuong An |
bug |
|
|
added subscriber Nguyen Phuong An |
| 2018-07-06 04:23:12 |
OpenStack Infra |
neutron: status |
Triaged |
In Progress |
|
| 2018-07-06 04:23:12 |
OpenStack Infra |
neutron: assignee |
Sridar Kandaswamy (skandasw) |
Yushiro FURUKAWA (y-furukawa-2) |
|
| 2018-08-14 13:17:22 |
Krzysztof Pawlowski |
bug |
|
|
added subscriber Krzysztof Pawlowski |
| 2018-10-01 06:46:49 |
OpenStack Infra |
neutron: assignee |
Yushiro FURUKAWA (y-furukawa-2) |
Nguyen Phuong An (annp) |
|
| 2018-10-13 05:42:41 |
OpenStack Infra |
neutron: status |
In Progress |
Fix Released |
|
| 2018-10-26 18:47:42 |
Swaminathan Vasudevan |
tags |
fwaas l3-dvr-backlog |
fwaas l3-dvr-backlog pike-backport-potential queens-backport-potential |
|
| 2018-11-06 12:51:58 |
OpenStack Infra |
tags |
fwaas l3-dvr-backlog pike-backport-potential queens-backport-potential |
fwaas in-stable-rocky l3-dvr-backlog pike-backport-potential queens-backport-potential |
|
| 2019-07-30 01:59:30 |
XiaoRuiguo |
bug |
|
|
added subscriber XiaoRuiguo |
| 2019-12-04 08:43:27 |
Slawek Kaplonski |
neutron: assignee |
Nguyen Phuong An (annp) |
|
|
| 2019-12-04 08:43:30 |
Slawek Kaplonski |
tags |
fwaas in-stable-rocky l3-dvr-backlog pike-backport-potential queens-backport-potential |
fwaas in-stable-rocky l3-dvr-backlog pike-backport-potential queens-backport-potential timeout-abandon |
|
