Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1593424

Summary: When deleting sec group rules using userrc instead of adminrc it takes much longer.
Product: Red Hat OpenStack Reporter: Jeremy <jmelvin>
Component: python-neutronclientAssignee: Assaf Muller <amuller>
Status: CLOSED NOTABUG QA Contact: Toni Freger <tfreger>
Severity: medium Docs Contact:
Priority: medium    
Version: 10.0 (Newton)CC: amuller, bdoran, chrisw, jruzicka, nyechiel, srevivo
Target Milestone: ---Keywords: Unconfirmed
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-07-10 16:39:38 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
neutron_server0.log.clean none

Description Jeremy 2018-06-20 19:16:32 UTC 
Description of problem: Customer is using bigswitch, using a specific project user's rc file it takes much longer vs using the admin rc for deleting a rule in the same project.

Looking at the logs I notice the slow delete's request id shows it looping over pulling many sec-groups an rules before doing the actual delete. Please look at this to see what I mean:  

[stack@<DIRECTOR> /home/stack]$ time openstack security group rule delete 1ec21dc4-e3ef-4a9d-a39e-0783d4d9420e --debug

real    0m59.757s


### Here shows delete of 1ec21dc4-e3ef-4a9d-a39e-0783d4d9420e rule
2018-06-20 17:07:48.622 2830 INFO neutron.wsgi [req-cf59feb1-8037-496f-aab5-6f73dcb345f3 f9f55988f0d5410cb6e4dd6794aa99d1 90bc7dfd91d4428f81adf08da9e5e069 - - -] ip.ip.ip.ip - - [20/Jun/2018 17:07:48] "DELETE /v2.0/security-group-rules/1ec21dc4-e3ef-4a9d-a39e-0783d4d9420e HTTP/1.1" 204 149 58.602923

###grep is req-id
grep req-cf59feb1-8037-496f-aab5-6f73dcb345f3 SCRIPTS/LOGS/neutron_server0.log.clean







Version-Release number of selected component (if applicable):


How reproducible:
100%

Steps to Reproduce:
1. attempt delete of rule using user rc.
2.
3.

Actual results:
user rc takes longer to delete rules vs adminrc

Expected results:
both userrc and adminrc same time

Additional info:

This happens when admin and user rc attempt delete of rules in the same sec group in the same project.

We wonder why the user rc loops through seemingly all the rules before deleting the requested rule id?
Comment 2 Jeremy 2018-06-20 20:20:31 UTC 
Here are the neutron packages running on the controllers.

openstack-neutron-ml2-9.4.1-5.el7ost.noarch
puppet-neutron-9.5.0-4.el7ost.noarch
python-neutron-9.4.1-5.el7ost.noarch
python-neutron-lbaas-9.2.2-1.el7ost.noarch
openstack-neutron-openvswitch-9.4.1-5.el7ost.noarch
openstack-neutron-bigswitch-lldp-9.42.13-1.el7.centos.noarch
openstack-neutron-lbaas-9.2.2-1.el7ost.noarch
python-neutronclient-6.0.1-1.el7ost.noarch
python-neutron-lib-0.4.0-1.el7ost.noarch
openstack-neutron-9.4.1-5.el7ost.noarch
python-neutron-tests-9.4.1-5.el7ost.noarch
openstack-neutron-metering-agent-9.4.1-5.el7ost.noarch
openstack-neutron-bigswitch-agent-9.42.13-1.el7.centos.noarch
openstack-neutron-common-9.4.1-5.el7ost.noarch
openstack-neutron-lbaas-ui-1.0.1-0.20160606131231.b85927d.el7ost.noarch
Comment 3 Jeremy 2018-06-20 20:21:30 UTC 
Created attachment 1453275 [details]
neutron_server0.log.clean
Comment 5 Jeremy 2018-07-10 16:39:38 UTC 
Hello, Customer updated bigswitch provided them with ML2 package that seems to fix the issue.