| Summary: | Unable to delete security group | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Ruchika K <rkharwar> |
| Component: | openstack-neutron | Assignee: | Assaf Muller <amuller> |
| Status: | CLOSED NOTABUG | QA Contact: | Toni Freger <tfreger> |
| Severity: | low | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 10.0 (Newton) | CC: | amuller, chrisw, gkadam, jjoyce, nyechiel, rkharwar, srevivo |
| Target Milestone: | --- | Keywords: | Reopened |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2017-07-27 10:18:47 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Attachments: | |||
*** Bug 1396199 has been marked as a duplicate of this bug. *** Can you please attach logs of neutron-server? Also can you show the output of: rpm -qa openstack-neutron [stack@undercloud ~]$ rpm -qa openstack-neutron openstack-neutron-9.1.0-4.el7ost.noarch attached neutron logs from a controller node and the network node Created attachment 1221662 [details]
Neutron logs from the controller node
Created attachment 1221663 [details]
neutron logs from networker node
Sorry I should have been specific, we need DEBUG logs from the neutron server process. Assaf, I turned on debug and then restarted the network services and started trying to delete the security group and I don't see it on horizon or the cli anymore [stack@undercloud ~]$ openstack security group list +--------------------------------------+---------+------------------------+----------------------------------+ | ID | Name | Description | Project | +--------------------------------------+---------+------------------------+----------------------------------+ | 0517d62e-89f2-4c5f-a82a-abb348d32f06 | default | Default security group | a5e1b335b86f487e90b2f59163bbef39 | | c586c5b8-6348-40cf-90d5-d83af28d03e3 | default | Default security group | 1ebbd2ea560c47de846155cedb194052 | +--------------------------------------+---------+------------------------+----------------------------------+ so I don't know what to comment except its some strange issue and can't coment on what to do with this bug. I'll close this for now but if it happens again please do send DEBUG logs and we'll handle it. Created attachment 1297441 [details]
debug logs for case 01888642 infra_secuirty_group
Created attachment 1297442 [details]
debug logs for case 01888642 master_security_group_delete
The error is showing up because the security group is used by a neutron port. Please refer to https://access.redhat.com/solutions/3009811. |
Description of problem: - Unable to delete an unused security group. - irrespective of the Horizon dashboard or the cli unable to use a security group. Version-Release number of selected component (if applicable): How reproducible: Quite Steps to Reproduce: 1. 2. 3. Actual results: Expect to be able to delete the security group since it is not used Expected results: Additional info: openstack security group list +--------------------------------------+--------------------------+------------------------+----------------------------------+ | ID | Name | Description | Project | +--------------------------------------+--------------------------+------------------------+----------------------------------+ | 0517d62e-89f2-4c5f-a82a-abb348d32f06 | default | Default security group | a5e1b335b86f487e90b2f59163bbef39 | | d4f610ea-b620-4f67-8ab3-c8506a8fd723 | db_server_security_group | | a5e1b335b86f487e90b2f59163bbef39 | +--------------------------------------+--------------------------+------------------------+----------------------------------+ [stack@undercloud apptemplates]$ openstack security group show d4f610ea-b620-4f67-8ab3-c8506a8fd723 +-----------------+-------------------------------------------------------------------------------------------------------------------------+ | Field | Value | +-----------------+-------------------------------------------------------------------------------------------------------------------------+ | created_at | 2016-11-17T17:23:35Z | | description | | | id | d4f610ea-b620-4f67-8ab3-c8506a8fd723 | | name | db_server_security_group | | project_id | a5e1b335b86f487e90b2f59163bbef39 | | project_id | a5e1b335b86f487e90b2f59163bbef39 | | revision_number | 2 | | rules | created_at='2016-11-17T17:23:35Z', direction='egress', ethertype='IPv4', id='032f0d52-3a83-4545-b884-7642ec5043cb', | | | project_id='a5e1b335b86f487e90b2f59163bbef39', revision_number='1', updated_at='2016-11-17T17:23:35Z' | | | created_at='2016-11-17T17:23:35Z', direction='ingress', ethertype='IPv4', id='2ef40bbe-61ee-4801-a64e-99272307161e', | | | port_range_max='3306', port_range_min='3306', project_id='a5e1b335b86f487e90b2f59163bbef39', protocol='tcp', | | | revision_number='1', updated_at='2016-11-17T17:23:35Z' | | | created_at='2016-11-17T17:23:35Z', direction='egress', ethertype='IPv6', id='a4163497-4f0a-4f35-a32e-4a250453a839', | | | project_id='a5e1b335b86f487e90b2f59163bbef39', revision_number='1', updated_at='2016-11-17T17:23:35Z' | | updated_at | 2016-11-17T17:23:35Z | +-----------------+-------------------------------------------------------------------------------------------------------------------------+ [stack@undercloud apptemplates]$ openstack security group delete d4f610ea-b620-4f67-8ab3-c8506a8fd723 Failed to delete group with name or ID 'd4f610ea-b620-4f67-8ab3-c8506a8fd723': HttpException: Conflict 1 of 1 groups failed to delete. nova list +--------------------------------------+------+--------+------------+-------------+-------------------------------------+ | ID | Name | Status | Task State | Power State | Networks | +--------------------------------------+------+--------+------------+-------------+-------------------------------------+ | 4aa6738a-85e4-471d-beb3-8d9d2635d924 | test | ACTIVE | - | Running | test=192.168.123.4, 192.168.122.155 | +--------------------------------------+------+--------+------------+-------------+-------------------------------------+ [stack@undercloud apptemplates]$ nova show test +--------------------------------------+------------------------------------------------------------+ | Property | Value | +--------------------------------------+------------------------------------------------------------+ | OS-DCF:diskConfig | MANUAL | | OS-EXT-AZ:availability_zone | nova | | OS-EXT-SRV-ATTR:host | overcloud-compute-0.localdomain | | OS-EXT-SRV-ATTR:hostname | test | | OS-EXT-SRV-ATTR:hypervisor_hostname | overcloud-compute-0.localdomain | | OS-EXT-SRV-ATTR:instance_name | instance-00000002 | | OS-EXT-SRV-ATTR:kernel_id | | | OS-EXT-SRV-ATTR:launch_index | 0 | | OS-EXT-SRV-ATTR:ramdisk_id | | | OS-EXT-SRV-ATTR:reservation_id | r-84tlob2s | | OS-EXT-SRV-ATTR:root_device_name | /dev/vda | | OS-EXT-SRV-ATTR:user_data | - | | OS-EXT-STS:power_state | 1 | | OS-EXT-STS:task_state | - | | OS-EXT-STS:vm_state | active | | OS-SRV-USG:launched_at | 2016-11-16T21:23:06.000000 | | OS-SRV-USG:terminated_at | - | | accessIPv4 | | | accessIPv6 | | | config_drive | | | created | 2016-11-16T21:23:00Z | | description | - | | flavor | m1.tiny (ff005ff9-8d5e-4af2-b3e4-9eda83bbff01) | | hostId | fe891a21f3687104f1b72c3b0d958b4aca8cb56dc2c23e03ae7ced0e | | host_status | UP | | id | 4aa6738a-85e4-471d-beb3-8d9d2635d924 | | image | cirros-0.3.4-x86_64 (e1a28b5d-704b-4f24-bb66-ad8400a0e685) | | key_name | stack | | locked | False | | metadata | {} | | name | test | | os-extended-volumes:volumes_attached | [] | | progress | 0 | | security_groups | default | | status | ACTIVE | | tags | [] | | tenant_id | a5e1b335b86f487e90b2f59163bbef39 | | test network | 192.168.123.4, 192.168.122.155 | | updated | 2016-11-16T21:23:06Z | | user_id | 556678aab3e340b193e14873201cfc3e | +--------------------------------------+------------------------------------------------------------+ This is not using the security group being deleted