Bug 1923012

Summary:	Service project default quota allows only 10 HA octavia instances
Product:	Red Hat OpenStack	Reporter:	Srinivas Atmakuri <satmakur>
Component:	tripleo-ansible	Assignee:	Gregory Thiemonge <gthiemon>
Status:	CLOSED ERRATA	QA Contact:	Bruna Bonguardo <bbonguar>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	16.1 (Train)	CC:	cgaynor, cgoncalves, enothen, gthiemon, michjohn, schhabdi, tkajinam, visinha
Target Milestone:	z7	Keywords:	Triaged
Target Release:	16.1 (Train on RHEL 8.2)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	tripleo-ansible-0.5.1-1.20210628133308.902c3c8.el8ost	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-12-09 20:18:00 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Srinivas Atmakuri 2021-02-01 09:58:35 UTC

Service project default quota allows only 10 HA Octavia LoadBalancers

Description
=======
default service project quota allows 10 server_groups and 10 server_group_members. Every HA Octavia LoadBalancers consumes one of these. Creating more than 10 load balancers fails.

Octavia creates Amphorae (service VMs) under an operator configured project (tenant). In TripleO, we currently use the 'service' project by default.

Since booting Amphorae consume the project quota, this essentially results in a very low (around 10) global upper constraint for load balancers amount.

Steps to reproduce
============
1. Launch 10 HA Octavia LoadBalancers successful
2. Error while launching 10+x HA Octavia LoadBalancers

Expected Result
==========
Able to launch 10+x HA Octavia LoadBalancers

Actual Result
========
Quota exceeded too many server groups.

Possible Fix
=======
We need to address the 'service' project as a system project. Thus, we cannot be limited by project quotas for Octavia VMs.
We need to set '-1' for the following quotas (in the 'service project only):
1. server-group-members
2. server-groups

Logs
===
ERROR oslo_messaging.rpc.server novaclient.exceptions.Forbidden: Quota exceeded, too many server groups. (HTTP 403) (Request-ID: req-d48de5eb-de5f-4918-a92f-42092a21e1b3)

Comment 24 errata-xmlrpc 2021-12-09 20:18:00 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Red Hat OpenStack Platform 16.1.7 (Train) bug fix and enhancement advisory), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:3762