Hyper-V security groups tests fail due to lack of ICMP stateful ACLs support

[Alessandro Pilotti]

The following test fails on Hyper-Y as Hyper-V networking ACLs (the native security group equivalent) don't support stateful ICMP rules, this means that it's not possible to enable an instance to issue outbound ping requests to a second instance without allowing also inbound ping requests (for the reply).

tempest.scenario.test_security_groups_basic_ops.TestSecurityGroupsBasicOps.test_cross_tenant_traffic

This issue does not apply to TCP or UDP, so the tests could be replaced by a TCP based tests (e.g testing port 22) instead of ICMP.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/118158

[OpenStack Infra (hudson-openstack)]

Change abandoned by Sean Dague (<email address hidden>) on branch: master
Review: https://review.openstack.org/118158
Reason: This review is > 4 weeks without comment, and failed Jenkins the last time it was checked. We are abandoning this for now. Feel free to reactivate the review by pressing the restore button and leaving a 'recheck' comment to get fresh test results.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/384528

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/384528
Committed: https://git.openstack.org/cgit/openstack/tempest/commit/?id=33c3e60a3dd3e2de11700bcdc3e6d05e5e5b2c33
Submitter: Zuul
Branch: master

commit 33c3e60a3dd3e2de11700bcdc3e6d05e5e5b2c33
Author: Claudiu Belu <email address hidden>
Date: Thu Aug 28 16:38:01 2014 +0300

    Adds protocol options for test_cross_tenant_traffic

    Hyper-V cannot create stateful ICMP / ICMPv6 rules, but can create
    stateful rules for any other protocol, thus, the test
    test_cross_tenant_traffic cannot pass in the Hyper-V CI at the moment.
    Testing other protocols instead can solve this issue.

    Adds configuration option scenario.protocols, which contains the protocols
    tested by the mentioned test. Its default option is 'icmp', in order
    to maintain existing behaviour.

    Change-Id: Ia304b81ec60a4fb06730f297e732a6b19a183f7f
    Closes-Bug: #1363986

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tempest 21.0.0 release.