Can't boot instance on cd-overcloud

[Derek Higgins]

Error while trying to boot the demo VM on the overcloud

Happening on cd-overcloud and local devtest

2013-11-26 10:55:57,790.790 2785 ERROR nova.compute.manager [-] Instance failed network setup after 1 attempt(s)
2013-11-26 10:55:57,790.790 2785 TRACE nova.compute.manager Traceback (most recent call last):
2013-11-26 10:55:57,790.790 2785 TRACE nova.compute.manager File "/opt/stack/venvs/nova/local/lib/python2.7/site-packages/nova/compute/manager.py", line 1219, in _allocate_network_async
2013-11-26 10:55:57,790.790 2785 TRACE nova.compute.manager dhcp_options=dhcp_options)
2013-11-26 10:55:57,790.790 2785 TRACE nova.compute.manager File "/opt/stack/venvs/nova/local/lib/python2.7/site-packages/nova/network/neutronv2/api.py", line 295, in allocate_for_instance
2013-11-26 10:55:57,790.790 2785 TRACE nova.compute.manager security_group_id=security_group)
2013-11-26 10:55:57,790.790 2785 TRACE nova.compute.manager SecurityGroupNotFound: Security group default not found.
2013-11-26 10:55:57,790.790 2785 TRACE nova.compute.manager

[Derek Higgins (derekh)]

I took a stab in the dark and reverted
https://review.openstack.org/#/c/47651/

The problem I was seeing has now gone away.

[Robert Collins (lifeless)]

So the optimisation introduced in that patch was better in theory buy the Neutron side lacks performance?

[Phil Day (philip-day)]

Hi Folks,

Can someone e-mail me (<email address hidden>) on how to reproduce the error you were seeing in Devstack please ?

We've been running a variant of this patch in out production Nova system with Neutron for a couple of months now with out a problem (and without it we're broken on a large scale system) - so keen to work out why it doesn't work in the context of tripleo

It only has any effect it you have the secGroup API extension loaded BTW - does TripleO use SecGroups with Neutron ?

[Robert Collins (lifeless)]

we run defaults as much as possible: where they are wrong we file bugs :).

[Robert Collins (lifeless)]

We don't know if this shows up in devstack.

[Robert Collins (lifeless)]

We've had multiple successful deploys without the backout patch, so I think we've disproven any association.