A downstream-only backport of [1] is necessary. [1] https://review.openstack.org/#/c/216716/
So i made some tests with that backport and it should well fix the problem: [root@localhost ~(keystone_admin)]# nova secgroup-create adm1 adm1 +--------------------------------------+------+-------------+ | Id | Name | Description | +--------------------------------------+------+-------------+ | e59e288a-9c19-4baf-bee3-0294cf1a5d6a | adm1 | adm1 | +--------------------------------------+------+-------------+ [root@localhost ~(keystone_admin)]# nova secgroup-create adm2 adm2 +--------------------------------------+------+-------------+ | Id | Name | Description | +--------------------------------------+------+-------------+ | c01ad4eb-aa03-4bfd-9dad-f386e5e898d0 | adm2 | adm2 | +--------------------------------------+------+-------------+ [root@localhost ~(keystone_demo)]# nova secgroup-create usr2 usr2 +--------------------------------------+------+-------------+ | Id | Name | Description | +--------------------------------------+------+-------------+ | ccae0a4d-c314-4e75-a804-229025f5fbc3 | usr2 | usr2 | +--------------------------------------+------+-------------+ [root@localhost ~(keystone_demo)]# nova secgroup-create usr1 usr1 +--------------------------------------+------+-------------+ | Id | Name | Description | +--------------------------------------+------+-------------+ | 7c6d572d-d5ea-4afc-b1df-eb45454d5c6a | usr1 | usr1 | +--------------------------------------+------+-------------+ [root@localhost ~(keystone_demo)]# nova secgroup-list +--------------------------------------+---------+-------------+ | Id | Name | Description | +--------------------------------------+---------+-------------+ | 2d330252-98ec-45f2-bfc9-0865a49b03d4 | default | default | | 7c6d572d-d5ea-4afc-b1df-eb45454d5c6a | usr1 | usr1 | | ccae0a4d-c314-4e75-a804-229025f5fbc3 | usr2 | usr2 | +--------------------------------------+---------+-------------+ [root@localhost ~(keystone_demo)]# . keystonerc_admin [root@localhost ~(keystone_admin)]# nova secgroup-list +--------------------------------------+---------+-------------+ | Id | Name | Description | +--------------------------------------+---------+-------------+ | e59e288a-9c19-4baf-bee3-0294cf1a5d6a | adm1 | adm1 | | c01ad4eb-aa03-4bfd-9dad-f386e5e898d0 | adm2 | adm2 | | b937dfaf-3b6d-41e8-949d-ddb940f513d6 | default | default | +--------------------------------------+---------+-------------+ [root@localhost ~(keystone_admin)]# nova secgroup-list --all-tenant +--------------------------------------+---------+-------------+----------------------------------+ | Id | Name | Description | Tenant_ID | +--------------------------------------+---------+-------------+----------------------------------+ | 65e4b057-5daf-4d48-b4fc-ca3650318b5a | default | default | | | 2d330252-98ec-45f2-bfc9-0865a49b03d4 | default | default | 0eaf145cb10b466db0ecffa94e426e13 | | 7c6d572d-d5ea-4afc-b1df-eb45454d5c6a | usr1 | usr1 | 0eaf145cb10b466db0ecffa94e426e13 | | ccae0a4d-c314-4e75-a804-229025f5fbc3 | usr2 | usr2 | 0eaf145cb10b466db0ecffa94e426e13 | | e59e288a-9c19-4baf-bee3-0294cf1a5d6a | adm1 | adm1 | 2b31da3a4b124087910d7e644acbf362 | | c01ad4eb-aa03-4bfd-9dad-f386e5e898d0 | adm2 | adm2 | 2b31da3a4b124087910d7e644acbf362 | | b937dfaf-3b6d-41e8-949d-ddb940f513d6 | default | default | 2b31da3a4b124087910d7e644acbf362 | +--------------------------------------+---------+-------------+----------------------------------+
code is in openstack-nova-api-2014.2.3-65.el7ost.noarch automation passed https://rhos-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/view/RHOS/view/RHOS6/job/rhos-jenkins-rhos-6.0-puddle-rhel-7.2-multi-node-packstack-neutron-ml2-vxlan-rabbitmq-tempest-git-all/17/
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-0500.html