yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: nova
       Status: Fix Committed => Fix Released

** Changed in: nova
    Milestone: None => havana-2

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1180828

Title:
  quantum driver in nova does not translate empty remote IP

Status in OpenStack Compute (Nova):
  Fix Released

Bug description:
  The quantum driver in nova does not translate empty remote IP in
  security group rules into a CIDR valid for nova.

  Quantum allows for an empty remote_ip_prefix to be specified in
  ingress rules. An empty value means "any host".

  Nova instead expects the remote_ip_prefix to be non-empty: 
  - create an ingress SG rule with empty remote IP via quantum
  - display the rule via nova API works fine
  - deleting the rule via nova API fails

  The quantum driver in nova shall translate the empty remote IP in the
  security group rule into 0.0.0.0/0.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1180828/+subscriptions