← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1297701] [NEW] Create VM use another tenant's port, the VM can't communicate with other

 

Public bug reported:

An admin user create port for another project, then use this port Create
VM, the VM can't communicate with other, because the security rule does
not work. the vm in nova can not show IP.

root@ubuntu01:/var/log/neutron# neutron port-show 66c2d6bd-7d39-4948-b561-935cb9d264eb
+-----------------------+-----------------------------------------------------------------------------------+
| Field                 | Value                                                                             |
+-----------------------+-----------------------------------------------------------------------------------+
| admin_state_up        | True                                                                              |
| allowed_address_pairs | {"ip_address": "169.254.16.253", "mac_address": "fa:16:3e:48:73:a7"}              |
| binding:capabilities  | {"port_filter": false}                                                            |
| binding:host_id       |                                                                                   |
| binding:vif_type      | unbound                                                                           |
| device_id             |                                                                                   |
| device_owner          |                                                                                   |
| extra_dhcp_opts       |                                                                                   |
| fixed_ips             | {"subnet_id": "5519e015-fc83-44c2-99ad-d669b3c2c9d7", "ip_address": "10.10.10.4"} |
| id                    | 66c2d6bd-7d39-4948-b561-935cb9d264eb                                              |
| mac_address           | fa:16:3e:48:73:a7                                                                 |
| name                  |                                                                                   |
| network_id            | 255f3e92-5a6e-44a5-bbf9-1a62bf5d5935                                              |
| security_groups       | 94ad554f-392d-4dd5-8184-357f37b75111                                              |
| status                | DOWN                                                                              |
| tenant_id             | 3badf700bbc749ec9d9869fddc63899f                                                  |
+-----------------------+-----------------------------------------------------------------------------------+

root@ubuntu01:/var/log/neutron# keystone tenant-list
+----------------------------------+---------+---------+
|                id                |   name  | enabled |
+----------------------------------+---------+---------+
| 34fddbc22c184214b823be267837ef81 |  admin  |   True  |
| 48eb4330b6e74a9f9e74d3e191a0fa2e | service |   True  |
+----------------------------------+---------+---------+

root@ubuntu01:/var/log/neutron# nova list
+--------------------------------------+-------+--------+------------+-------------+----------+
| ID                                   | Name  | Status | Task State | Power State | Networks |
+--------------------------------------+-------+--------+------------+-------------+----------+
| 5ce98599-75cb-49db-aa76-668491ee3bd0 | test3 | ACTIVE | None       | Running     |          |
+--------------------------------------+-------+--------+------------+-------------+----------+

** Affects: neutron
     Importance: Undecided
     Assignee: shihanzhang (shihanzhang)
         Status: New

** Affects: nova
     Importance: Undecided
     Assignee: shihanzhang (shihanzhang)
         Status: New

** Changed in: neutron
     Assignee: (unassigned) => shihanzhang (shihanzhang)

** Also affects: nova
   Importance: Undecided
       Status: New

** Changed in: nova
     Assignee: (unassigned) => shihanzhang (shihanzhang)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1297701

Title:
  Create VM use another tenant's port, the VM can't communicate with
  other

Status in OpenStack Neutron (virtual network service):
  New
Status in OpenStack Compute (Nova):
  New

Bug description:
  An admin user create port for another project, then use this port
  Create VM, the VM can't communicate with other, because the security
  rule does not work. the vm in nova can not show IP.

  root@ubuntu01:/var/log/neutron# neutron port-show 66c2d6bd-7d39-4948-b561-935cb9d264eb
  +-----------------------+-----------------------------------------------------------------------------------+
  | Field                 | Value                                                                             |
  +-----------------------+-----------------------------------------------------------------------------------+
  | admin_state_up        | True                                                                              |
  | allowed_address_pairs | {"ip_address": "169.254.16.253", "mac_address": "fa:16:3e:48:73:a7"}              |
  | binding:capabilities  | {"port_filter": false}                                                            |
  | binding:host_id       |                                                                                   |
  | binding:vif_type      | unbound                                                                           |
  | device_id             |                                                                                   |
  | device_owner          |                                                                                   |
  | extra_dhcp_opts       |                                                                                   |
  | fixed_ips             | {"subnet_id": "5519e015-fc83-44c2-99ad-d669b3c2c9d7", "ip_address": "10.10.10.4"} |
  | id                    | 66c2d6bd-7d39-4948-b561-935cb9d264eb                                              |
  | mac_address           | fa:16:3e:48:73:a7                                                                 |
  | name                  |                                                                                   |
  | network_id            | 255f3e92-5a6e-44a5-bbf9-1a62bf5d5935                                              |
  | security_groups       | 94ad554f-392d-4dd5-8184-357f37b75111                                              |
  | status                | DOWN                                                                              |
  | tenant_id             | 3badf700bbc749ec9d9869fddc63899f                                                  |
  +-----------------------+-----------------------------------------------------------------------------------+

  root@ubuntu01:/var/log/neutron# keystone tenant-list
  +----------------------------------+---------+---------+
  |                id                |   name  | enabled |
  +----------------------------------+---------+---------+
  | 34fddbc22c184214b823be267837ef81 |  admin  |   True  |
  | 48eb4330b6e74a9f9e74d3e191a0fa2e | service |   True  |
  +----------------------------------+---------+---------+

  root@ubuntu01:/var/log/neutron# nova list
  +--------------------------------------+-------+--------+------------+-------------+----------+
  | ID                                   | Name  | Status | Task State | Power State | Networks |
  +--------------------------------------+-------+--------+------------+-------------+----------+
  | 5ce98599-75cb-49db-aa76-668491ee3bd0 | test3 | ACTIVE | None       | Running     |          |
  +--------------------------------------+-------+--------+------------+-------------+----------+

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1297701/+subscriptions


Follow ups

References