quota-show security_group in_use not correct

[tom king]

python-novaclient (9.1.1)

nova quota-show --detail does not reflect the correct security_groups usage.

lab@Ubuntu-1404LTS:~$ nova quota-show --detail --tenant ef954183f6d548a69cc7e7de5282086f
+-----------------------------+-----------------------------------------------------+
| Quota | Limit |
+-----------------------------+-----------------------------------------------------+
| instances | {u'limit': 20, u'reserved': 0, u'in_use': 14} |
| cores | {u'limit': 80, u'reserved': 0, u'in_use': 21} |
| ram | {u'limit': 81920, u'reserved': 0, u'in_use': 47104} |
| floating_ips | {u'limit': 10, u'reserved': 0, u'in_use': 0} |
| fixed_ips | {u'limit': -1, u'reserved': 0, u'in_use': 0} |
| metadata_items | {u'limit': 128, u'reserved': 0, u'in_use': 0} |
| injected_files | {u'limit': 5, u'reserved': 0, u'in_use': 0} |
| injected_file_content_bytes | {u'limit': 10240, u'reserved': 0, u'in_use': 0} |
| injected_file_path_bytes | {u'limit': 255, u'reserved': 0, u'in_use': 0} |
| key_pairs | {u'limit': 100, u'reserved': 0, u'in_use': 0} |
| security_groups | {u'limit': 10, u'reserved': 0, u'in_use': 1} |
| security_group_rules | {u'limit': 20, u'reserved': 0, u'in_use': 0} |
| server_groups | {u'limit': 10, u'reserved': 0, u'in_use': 0} |
| server_group_members | {u'limit': 10, u'reserved': 0, u'in_use': 0} |
+-----------------------------+-----------------------------------------------------+

List of security groups for this project:
+--------------------------------------+--------------------------------------------------+------------------------+----------------------------------+
| ID | Name | Description | Project |
+--------------------------------------+--------------------------------------------------+------------------------+----------------------------------+
| 25fd771d-2e8c-497a-8e30-1bfc0d074f98 | FLASH-dbc4628c-c57b-11e7-8bfc-fa163ea0bffb-group | | ef954183f6d548a69cc7e7de5282086f |
| 4ef98e22-f5f2-4e06-86b5-1cd93043ed7a | FLASH-117f4834-c4d6-11e7-91ff-fa163ea0bffb-group | | ef954183f6d548a69cc7e7de5282086f |
| 57204137-8537-495a-b98e-9f168160456d | FLASH-db8f1654-c57b-11e7-b221-fa163ea0bffb-group | | ef954183f6d548a69cc7e7de5282086f |
| 64a49394-40cb-4061-b752-a2fdb7b23cc4 | FLASH-db8cc02a-c57b-11e7-8b14-fa163ea0bffb-group | | ef954183f6d548a69cc7e7de5282086f |
| 7d47aa36-57ed-49e8-a369-d254daed77d2 | FLASH-dbc74d80-c57b-11e7-9433-fa163ea0bffb-group | | ef954183f6d548a69cc7e7de5282086f |
| 82418bda-148e-41eb-bc18-c1322927f4ee | bagursreenivasamurth-OneArmed-1-group | | ef954183f6d548a69cc7e7de5282086f |
| b246f364-57a7-4b11-b278-344090f2efa6 | default | Default security group | ef954183f6d548a69cc7e7de5282086f |
| bf4da89a-e1cf-4fac-80e1-ed69fe2dc350 | FLASH-117745ee-c4d6-11e7-8547-fa163ea0bffb-group | | ef954183f6d548a69cc7e7de5282086f |
| cbe42c81-513a-407c-89b8-6db96bbb0756 | FLASH-d85b76c2-c43f-11e7-b8c8-fa163ea0bffb-group | | ef954183f6d548a69cc7e7de5282086f |
+--------------------------------------+--------------------------------------------------+------------------------+----------------------------------+

[Takashi Natsume (natsume-takashi)]

Python-novaclient just shows the result that nova returns.
So it seems an issue in nova side, not in python-novaclient side.

[Takashi Natsume (natsume-takashi)]

Needs nova version.

[Deepak Mourya (mourya007)]

hi, i have got the output of nova quota-show --details in Queen setup like this :

nova quota-show --detail
+----------------------+-------------------------------------------------+
| Quota | Limit |
+----------------------+-------------------------------------------------+
| instances | {u'limit': 10, u'reserved': 0, u'in_use': 0} |
| cores | {u'limit': 20, u'reserved': 0, u'in_use': 0} |
| ram | {u'limit': 51200, u'reserved': 0, u'in_use': 0} |
| metadata_items | {u'limit': 128, u'reserved': 0, u'in_use': 0} |
| key_pairs | {u'limit': 100, u'reserved': 0, u'in_use': 0} |
| server_groups | {u'limit': 10, u'reserved': 0, u'in_use': 0} |
| server_group_members | {u'limit': 10, u'reserved': 0, u'in_use': 0} |
+----------------------+-------------------------------------------------+

In pike :

 nova quota-show --detail --tenant c741464f95d6442fbde6786eb90251af
+-----------------------------+-------------------------------------------------+
| Quota | Limit |
+-----------------------------+-------------------------------------------------+
| instances | {u'limit': 10, u'reserved': 0, u'in_use': 0} |
| cores | {u'limit': 20, u'reserved': 0, u'in_use': 0} |
| ram | {u'limit': 51200, u'reserved': 0, u'in_use': 0} |
| metadata_items | {u'limit': 128, u'reserved': 0, u'in_use': 0} |
| injected_files | {u'limit': 5, u'reserved': 0, u'in_use': 0} |
| injected_file_content_bytes | {u'limit': 10240, u'reserved': 0, u'in_use': 0} |
| injected_file_path_bytes | {u'limit': 255, u'reserved': 0, u'in_use': 0} |
| key_pairs | {u'limit': 100, u'reserved': 0, u'in_use': 0} |
| server_groups | {u'limit': 10, u'reserved': 0, u'in_use': 0} |
| server_group_members | {u'limit': 10, u'reserved': 0, u'in_use': 0} |
+-----------------------------+-------------------------------------------------+

here it doesn't specify any security groups related information.

[melanie witt (melwitt)]

The security_group quota and usage in nova is only related to security groups created with nova-network. When using neutron, the quotas and usage are handled by neutron, not nova.

What version of nova is this bug report about? And were you using nova-network or neutron when you showed the output of the list of security groups?

[tom king (kingttx)]

Related comment from python-openstackclient, on 2016-10-12:
https://bugs.launchpad.net/python-openstackclient/+bug/1632460/comments/1

"No such current way to retrieve this information from the Neutron API. Discussions on going"

[Launchpad Janitor (janitor)]

[Expired for OpenStack Compute (nova) because there has been no activity for 60 days.]