Neutron fwaas v2 group port binding failed

[Tamas Pasztor]

I use pike release, and configuring the fwaas v2. If I binding the firewall group to port, get the error message:

update failed (client error): There was a conflict when trying to complete your request.

2018-06-07 16:55:04.658 24960 DEBUG neutron.api.v2.base [req-1660fa52-8c47-4aec-a51c-fcac935f8e2d 7e4e2be74d6b416bab0b0be0660b17ae 3625aede6aab4fbcac51df711c44260a - default default] Request body: {u'firewall_group': {u'ports': [u'e4273d58-109a-437b-993e-545ce01ae41e']}} prepare_request_body /openstack/venvs/neutron-16.0.13/lib/python2.7/site-packages/neutron/api/v2/base.py:695
2018-06-07 16:55:04.659 24960 DEBUG neutron_fwaas.db.firewall.v2.firewall_db_v2 [req-1660fa52-8c47-4aec-a51c-fcac935f8e2d 7e4e2be74d6b416bab0b0be0660b17ae 3625aede6aab4fbcac51df711c44260a - default default] get_firewall_group() called get_firewall_group /openstack/venvs/neutron-16.0.13/lib/python2.7/site-packages/neutron_fwaas/db/firewall/v2/firewall_db_v2.py:812
2018-06-07 16:55:04.668 24960 DEBUG neutron_fwaas.services.firewall.fwaas_plugin_v2 [req-1660fa52-8c47-4aec-a51c-fcac935f8e2d 7e4e2be74d6b416bab0b0be0660b17ae 3625aede6aab4fbcac51df711c44260a - default default] update_firewall_group() called on firewall_group 6a7d5557-0ff3-4fbe-bb03-248eed04b00f update_firewall_group /openstack/venvs/neutron-16.0.13/lib/python2.7/site-packages/neutron_fwaas/services/firewall/fwaas_plugin_v2.py:291
2018-06-07 16:55:04.668 24960 DEBUG neutron_fwaas.db.firewall.v2.firewall_db_v2 [req-1660fa52-8c47-4aec-a51c-fcac935f8e2d 7e4e2be74d6b416bab0b0be0660b17ae 3625aede6aab4fbcac51df711c44260a - default default] get_firewall_group() called get_firewall_group /openstack/venvs/neutron-16.0.13/lib/python2.7/site-packages/neutron_fwaas/db/firewall/v2/firewall_db_v2.py:812
2018-06-07 16:55:04.827 24960 INFO neutron.api.v2.resource [req-1660fa52-8c47-4aec-a51c-fcac935f8e2d 7e4e2be74d6b416bab0b0be0660b17ae 3625aede6aab4fbcac51df711c44260a - default default] update failed (client error): There was a conflict when trying to complete your request.
2018-06-07 16:55:04.827 24960 INFO neutron.wsgi [req-1660fa52-8c47-4aec-a51c-fcac935f8e2d 7e4e2be74d6b416bab0b0be0660b17ae 3625aede6aab4fbcac51df711c44260a - default default] 10.1.62.16,10.1.62.103 "PUT /v2.0/fwaas/firewall_groups/6a7d5557-0ff3-4fbe-bb03-248eed04b00f HTTP/1.1" status: 409 len: 354 time: 0.2021940

[Li Zhouzhou (lizhouzhou)]

The port must be a router:interface.

[Slawek Kaplonski (slaweq)]

Is this still an issue on current master release?
@Tamas: can You also check if that happens only when You try to bind it to wrong port type as Li mentioned in comment above?

For now I'm marking this as incomplete because:
1. It doesn't look like a bug as there is no any unhandled exception or something like that but there is error message returned. Maybe message could be a bit improved but nothing more than that IMO.
2. There is missing information about port's device type which You tried to bound with firewall group.

[Launchpad Janitor (janitor)]

[Expired for neutron because there has been no activity for 60 days.]