Bug 2262100 - openstack security group list --project <project_name> takes very long and is not using RBAC [NEEDINFO]
Summary: openstack security group list --project <project_name> takes very long and is...
Keywords:
Status: MODIFIED
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-neutron
Version: 16.2 (Train)
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: Rodolfo Alonso
QA Contact: Eran Kuris
URL:
Whiteboard:
Depends On:
Blocks: 2263516
TreeView+ depends on / blocked
 
Reported: 2024-01-31 14:52 UTC by Eduard Barrera
Modified: 2024-02-20 11:58 UTC (History)
3 users (show)

Fixed In Version: openstack-neutron-15.3.5-2.20240220114830.63bac0f.el8osttrunk
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 2263516 (view as bug list)
Environment:
Last Closed:
Target Upstream Version:
Embargoed:
ralonsoh: needinfo? (ebarrera)


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 2052419 0 None None None 2024-02-05 08:37:21 UTC
OpenStack gerrit 908571 0 None NEW Change SG rules backref load method to "joined" 2024-02-09 13:44:10 UTC
Red Hat Issue Tracker OSP-31312 0 None None None 2024-01-31 14:52:49 UTC

Description Eduard Barrera 2024-01-31 14:52:27 UTC
Description of problem:

There was this bug where neutron API was taking really long to answer when RBAC was used:

 https://bugzilla.redhat.com/show_bug.cgi?id=2218183


But in this case RBAC is not used an api calls takes really long to answer, even they timeout:

# time openstack security group list --project <ProjectName> |wc -l
HttpException: 504: Server Error for url: \ 
 https://osp-dev.inf.example:13696/v2.0/security-groups?project_id=b26cbe7dd923467689642da0c92f4f1f&
 tenant_id=b26cbe7dd923467689642da0c92f4f1f, 504 Gateway Time-out: The server didn't respond in time.


> select count(*) from securitygroupportbindings;
|    19457 |
> select count(*) from securitygrouprbacs;
|        0 |
> select count(*) from securitygrouprules;
|   123911 |
> select count(*) from securitygroups;
|     7196 |

# openstack port list -c ID -f value | wc -l
5613
# openstack project list -c ID -f value | wc -l
2582


Version-Release number of selected component (if applicable):
Red Hat OpenStack Platform release 16.2.2 (Train)


How reproducible:
Always

Steps to Reproduce:
1. openstack security group list --project <project_name> 
2.
3.

Actual results:
Api calls take too long, heat stack fails


Note You need to log in before you can comment on or make changes to this bug.