yahoo-eng-team team mailing list archive

[Armando Migliaccio <1190394@xxxxxxxxxxxxxxxxxx>]

*** This bug is a duplicate of bug 1255142 ***
    https://bugs.launchpad.net/bugs/1255142

** This bug is no longer a duplicate of bug 1189358
   non-admin user cannot see external address associated with router
** This bug has been marked a duplicate of bug 1255142
   unable to get router's external IP when non admin (blocker for VPNaaS)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1190394

Title:
  unable to determine router-ip

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  if a normal tenant creates a router and then uplinks this to a network
  (that is router:external). The an ip address is allocated out of that
  network and assigned to the router. This ip address is then used to
  nat with. Currently there is no way for this tenant to determine what
  that ip address is.

  As an admin you can if you run quantum router-port-list: you see:

  arosen@arosen-desktop:~$ quantum router-port-list router
  +--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
  | id                                   | name | mac_address       | fixed_ips                                                                              |
  +--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
  | 3ab0e378-c0ec-4b84-b311-0c06b336fd50 |      | fa:16:3e:ef:99:1a | {"subnet_id": "743d30ec-d78f-4d77-95e6-3da764da38c8", "ip_address": "10.0.0.1"}        |
  | 85061c58-1341-448d-ae89-50e316b3ccb0 |      | fa:16:3e:7f:55:20 | {"subnet_id": "4a30a2ee-65a0-4231-8d9e-b3e556b4637d", "ip_address": "12.12.12.4"}      |
  | f756db1e-d32e-4cde-8cf9-e4d95959725e |      | fa:16:3e:7b:04:45 | {"subnet_id": "a5dba76f-218f-472b-b819-46b1773e54a4", "ip_address": "169.254.169.253"} |
  +--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+

  
  but as a normal tenant: 
  arosen@arosen-desktop:~/devstack$ quantum router-port-list router
  +--------------------------------------+------+-------------------+---------------------------------------------------------------------------------+
  | id                                   | name | mac_address       | fixed_ips                                                                       |
  +--------------------------------------+------+-------------------+---------------------------------------------------------------------------------+
  | 3ab0e378-c0ec-4b84-b311-0c06b336fd50 |      | fa:16:3e:ef:99:1a | {"subnet_id": "743d30ec-d78f-4d77-95e6-3da764da38c8", "ip_address": "10.0.0.1"} |
  +--------------------------------------+------+-------------------+---------------------------------------------------------------------------------+


  Currently we are not storing the tenant_id for some reason on the
  router-port on the otherside:

  
  arosen@arosen-desktop:~$ quantum port-show 85061c58-1341-448d-ae89-50e316b3ccb0
  +-----------------------+-----------------------------------------------------------------------------------+
  | Field                 | Value                                                                             |
  +-----------------------+-----------------------------------------------------------------------------------+
  | admin_state_up        | True                                                                              |
  | device_id             | 59880398-1d34-40c7-8cb5-92ac55b01fd6                                              |
  | device_owner          | network:router_gateway                                                            |
  | fixed_ips             | {"subnet_id": "4a30a2ee-65a0-4231-8d9e-b3e556b4637d", "ip_address": "12.12.12.4"} |
  | id                    | 85061c58-1341-448d-ae89-50e316b3ccb0                                              |
  | mac_address           | fa:16:3e:7f:55:20                                                                 |
  | name                  |                                                                                   |
  | network_id            | 53d499d3-d7c7-434c-805c-04fff13e560c                                              |
  | port_security_enabled | False                                                                             |
  | queue_id              |                                                                                   |
  | security_groups       |                                                                                   |
  | status                | ACTIVE                                                                            |
  | tenant_id             |                                                                                   |
  +-----------------------+-----------------------------------------------------------------------------------+

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1190394/+subscriptions