[NETVIRT-215] Security group assigned to existing vm does not create flows Created: 25/Oct/16  Updated: 09/Mar/18  Resolved: 09/Mar/18

Status: Resolved
Project: netvirt
Component/s: None
Affects Version/s: Boron
Fix Version/s: None

Type: Bug Priority: Medium
Reporter: Michal Skalski Assignee: Unassigned
Resolution: Won't Do Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

Operating System: All
Platform: All

Attachments: Text File fail-karaf.log     Text File work-karaf.log    
External issue ID: 7021

 Description   

Opendaylight Boron, odl-ovsdb-openstack in use, no L3 (ovsdb.l3.fwd.enabled=no), OpenStack Mitaka, networking-odl_v2

Scenario:

Create VM, create Security group:
{
"rules": "id='8e77f8c1-0de0-4f3e-9f76-171fbe241f90', ip_protocol='tcp', ip_range='0.0.0.0/0', port_range='22:22'\nid='cd1bc019-2c6f-443c-8662-b3c6e5cd02ec', ip_protocol='icmp', ip_range='0.0.0.0/0'",
"project_id": "9eea32b513954dfba3244bccc4316e12",
"description": "Security group for vPing test case",
"name": "vPing-sg",
"id": "f807fc7a-ea76-49df-9261-4b19c70b0917"
}

assign SG to VM

Result:

Flows which should allow communication on port 22 are not created.

Workaround:

Assign SG during vm creation. Related change in opnfv: https://gerrit.opnfv.org/gerrit/#/c/23637/

 Comments   
Comment by Michal Skalski [ 25/Oct/16 ]

Attachment fail-karaf.log has been added with description: SG assigned to existing vm - flows not created

Comment by Michal Skalski [ 25/Oct/16 ]

Attachment work-karaf.log has been added with description: SG assigned during vm creation - flows created

Comment by Michal Skalski [ 25/Oct/16 ]

When switch to networking-odl v1 (mechanism_driver = 'opendaylight' vs 'opendaylight_v2') assign SG to existing VM generate appropriate flows. However Beryllium was also tested with opendaylight_v2 and that combination was ok.

Comment by Sam Hague [ 09/Mar/18 ]

Legacy NetVirt is deprecated.

Generated at Wed Feb 07 20:20:59 UTC 2024 using Jira 8.20.10#820010-sha1:ace47f9899e9ee25d7157d59aa17ab06aee30d3d.