Comment 4 for bug 1867101

Hello:

This happens when, in a fresh deployment, a router is created (for example, this is what happens during the devstack post installation phase, when the network config is initialized).

By default, there are not default security groups per project. But when a network or a port are created, the handler "_ensure_default_security_group_handler" will enforce the creation of this default SG [1].

When the GW port is assigned to a router, this port has no project_id [2]. When this port is created, the project_id (tenant_id) is "" (empty string). This empty string is used then to create the default SG in [1].

"location" is a parameter retrieved by the OSC and informs about the caller's project [3], not the object [3].

Regards.

[1]https://github.com/openstack/neutron/blob/master/neutron/db/securitygroups_db.py#L846
[2]https://github.com/openstack/neutron/blob/master/neutron/db/l3_db.py#L294
[3]http://paste.openstack.org/show/791874/