Back to bug 1391613
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Ihar Hrachyshka | 2017-01-16 18:50:40 UTC | Status | NEW | ASSIGNED |
| CC | ihrachys | |||
| Assignee | amuller | ihrachys | ||
| RHEL Program Management | 2017-01-16 19:16:39 UTC | Keywords | ZStream | |
| Ihar Hrachyshka | 2017-01-16 19:17:11 UTC | Status | ASSIGNED | POST |
| Assaf Muller | 2017-05-08 18:04:17 UTC | Keywords | Triaged | |
| Red Hat Bugzilla Rules Engine | 2017-05-08 18:04:20 UTC | Target Release | --- | 7.0 (Kilo) |
| Ihar Hrachyshka | 2017-05-15 17:09:51 UTC | Status | POST | MODIFIED |
| Fixed In Version | openstack-neutron-2015.1.4-14.el7ost | |||
| errata-xmlrpc | 2017-05-25 20:16:37 UTC | Status | MODIFIED | ON_QA |
| Martin Lopes | 2017-06-09 05:32:48 UTC | CC | mlopes | |
| Flags | needinfo?(ihrachys) | |||
| Ihar Hrachyshka | 2017-06-09 17:19:34 UTC | Doc Text | Cause: ports created without port_security ml2 extension driver enabled don't get port_security database records created. But server code assumed that all ports have corresponding port security records are present if the extension driver is enabled. Consequence: after the driver is enabled, Neutron fails to disable port security for existing ports due to missing records in the database. Fix: make neutron-server gracefully handle missing port security records and create them if needed. Result: neutron now allows to disable port security for ports that were created before the port security ml2 extension driver was enabled. | |
| Doc Type | If docs needed, set a value | Bug Fix | ||
| Flags | needinfo?(ihrachys) | |||
| Martin Lopes | 2017-06-12 01:09:18 UTC | Doc Text | Cause: ports created without port_security ml2 extension driver enabled don't get port_security database records created. But server code assumed that all ports have corresponding port security records are present if the extension driver is enabled. Consequence: after the driver is enabled, Neutron fails to disable port security for existing ports due to missing records in the database. Fix: make neutron-server gracefully handle missing port security records and create them if needed. Result: neutron now allows to disable port security for ports that were created before the port security ml2 extension driver was enabled. | Prior to this update, ports created without the `port_security` ML2 extension driver enabled did not have `port_security` database records created. However, if the extension driver was enabled, the server code assumed that all ports had corresponding port security records. Consequently, after the driver was enabled, neutron failed to disable port security for existing ports due to missing records in the database. With this update, `neutron-server` gracefully handles missing port security records, and creates them if needed. As a result, neutron now allows you to disable port security for ports that were created before the port security ml2 extension driver was enabled. |
| Ofer Blaut | 2017-06-13 06:38:22 UTC | CC | oblaut | |
| QA Contact | tfreger | ekuris | ||
| Eran Kuris | 2017-06-14 14:12:22 UTC | Status | ON_QA | VERIFIED |
| errata-xmlrpc | 2017-06-14 14:58:20 UTC | Status | VERIFIED | RELEASE_PENDING |
| errata-xmlrpc | 2017-06-14 15:46:34 UTC | Status | RELEASE_PENDING | CLOSED |
| Resolution | --- | ERRATA | ||
| Last Closed | 2017-06-14 11:46:34 UTC | |||
| Toni Freger | 2017-12-19 10:32:30 UTC | CC | tfreger | |
| Link ID | Github https://github.com/openstack/neutron-tempest-plugin/blob/master/neutron_tempest_plugin/scenario/test_security_groups.py |
Back to bug 1391613