yahoo-eng-team team mailing list archive

[Dmitry Ratushnyy <d.ratushnyy@xxxxxxxxx>]

Public bug reported:

Creating port with specifying both port_security_enabled=False and
security_groups=[] raises PortSecurityAndIPRequiredForSecurityGroups

Steps to reproduce:
1) Make sure that port security is enabled for ML2 (for DevStack https://review.openstack.org/#/c/162063/)

2) create network with neutron net-create
neutron net-create test
Created a new network:
+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | True                                 |
| id                        | 61a8a4be-d607-4683-b636-f1ae08bc135e |
| mtu                       | 0                                    |
| name                      | test                                 |
| port_security_enabled     | True                                 |
| provider:network_type     | vxlan                                |
| provider:physical_network |                                      |
| provider:segmentation_id  | 1003                                 |
| router:external           | False                                |
| shared                    | False                                |
| status                    | ACTIVE                               |
| subnets                   |                                      |
| tenant_id                 | bbd1128dfeb141b3b6442d910cb64dfa     |
+---------------------------+--------------------------------------+


2) Optional (does not affect result) 
neutron subnet-create 61a8a4be-d607-4683-b636-f1ae08bc135e 10.10.0.1/24
3) Try to create port 
neutron port-create 61a8a4be-d607-4683-b636-f1ae08bc135e --no-securty-groups --port-security-enabled=False

4) Result: 
"Port security must be enabled and port must have an IP address in order to use security groups."

Expected result: Port created with port_security_enabled=False and no
security groups attached to port

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1446087

Title:
  Impossible  to create port with port_security_enabled = False and
  security_groups=[]

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  Creating port with specifying both port_security_enabled=False and
  security_groups=[] raises PortSecurityAndIPRequiredForSecurityGroups

  Steps to reproduce:
  1) Make sure that port security is enabled for ML2 (for DevStack https://review.openstack.org/#/c/162063/)

  2) create network with neutron net-create
  neutron net-create test
  Created a new network:
  +---------------------------+--------------------------------------+
  | Field                     | Value                                |
  +---------------------------+--------------------------------------+
  | admin_state_up            | True                                 |
  | id                        | 61a8a4be-d607-4683-b636-f1ae08bc135e |
  | mtu                       | 0                                    |
  | name                      | test                                 |
  | port_security_enabled     | True                                 |
  | provider:network_type     | vxlan                                |
  | provider:physical_network |                                      |
  | provider:segmentation_id  | 1003                                 |
  | router:external           | False                                |
  | shared                    | False                                |
  | status                    | ACTIVE                               |
  | subnets                   |                                      |
  | tenant_id                 | bbd1128dfeb141b3b6442d910cb64dfa     |
  +---------------------------+--------------------------------------+

  
  2) Optional (does not affect result) 
  neutron subnet-create 61a8a4be-d607-4683-b636-f1ae08bc135e 10.10.0.1/24
  3) Try to create port 
  neutron port-create 61a8a4be-d607-4683-b636-f1ae08bc135e --no-securty-groups --port-security-enabled=False

  4) Result: 
  "Port security must be enabled and port must have an IP address in order to use security groups."

  Expected result: Port created with port_security_enabled=False and no
  security groups attached to port

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1446087/+subscriptions