Router's external gateway isn't properly updated when new subnet is added

Bug #1959331 reported by Slawek Kaplonski
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
Medium
Slawek Kaplonski

Bug Description

Steps to reproduce the issue:

1. Enable scope enforcement and new secure RBAC default policies in Neutron,
2. As project A create external network and IPv4 subnet
3. As project B create router and set external gateway using network created above,
4. As project A create IPv6 subnet in external network
5. Router's external gateway should be updated but it isn't.

The issue happens after patch https://review.opendev.org/c/openstack/neutron/+/821208 was merged.

Tags: api
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/neutron/+/826828

Changed in neutron:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.opendev.org/c/openstack/neutron/+/826828
Committed: https://opendev.org/openstack/neutron/commit/0fd168ae93176573575c61eab370e13a4cee34ce
Submitter: "Zuul (22348)"
Branch: master

commit 0fd168ae93176573575c61eab370e13a4cee34ce
Author: Slawek Kaplonski <email address hidden>
Date: Fri Jan 28 09:32:47 2022 +0100

    Use elevated context to update router's external gateway

    When new defaults and scope enforcement are used in Neutron, elevated
    context needs to be used to update router's external gateway when new
    subnet is added to the external network. Otherwise, router can belongs
    to the other project than external network and it will not be updated at
    all.

    Closes-Bug: #1959331
    Change-Id: I888ddf66a15cd20039ff26baccd170da128e1eb7

Changed in neutron:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/neutron 20.0.0.0rc1

This issue was fixed in the openstack/neutron 20.0.0.0rc1 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.