← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1472936] [NEW] External flat network show out iof the tenant.

 

Public bug reported:

Hi guys!

I found  problem in neutron. When I create a new network and I set
external and the tenant is i.e demo, then I saw the network form other
(not admin) tenant as well. I can get floating IP address, router etc.

It is a problem because I can't assign external network to tenant.

Here is an example:

ext-pub1 is an external network, owned by demo tenant. If I list the
networks in the demo2 tenant I see the ext-pub1 network as well :(

root@controller01:~# source demo-openrc.sh 
root@controller01:~# neutron net-list
+--------------------------------------+-----------+---------------------------------------------------------+
| id                                   | name      | subnets                                                 |
+--------------------------------------+-----------+---------------------------------------------------------+
| 0c034b21-4e79-45c0-8f63-48b58dbd29f9 | demo-net  | 24ad19d9-7967-42da-8457-bde999558bca 10.0.2.0/24        |
| 3a647d2a-3386-4104-8fbc-0deacac5f0f2 | demo-net2 | ffe02388-45d5-431d-967d-625344410081 10.0.3.0/24        |
| 807c842e-2b99-40cc-bbcc-3d74990de142 | ext-net   | d6d52683-7dba-432d-adf6-7c582ca0f527                    |
| 938c2abb-dfcb-4627-8626-3618c189d4de | ext-pub1  | 791b8764-a5ab-4b16-a7b0-2b883c4f0e1e 193.225.212.128/27 |
+--------------------------------------+-----------+---------------------------------------------------------+
root@controller01:~# source demo2-openrc.sh 
root@controller01:~# neutron net-list
+--------------------------------------+------------+--------------------------------------------------+
| id                                   | name       | subnets                                          |
+--------------------------------------+------------+--------------------------------------------------+
| 7b362a28-4bbd-42a3-b99f-81861905b136 | demo2-net | abd5d600-2f54-4a27-8d6b-23d690c18e3a 10.0.4.0/24 |
| 807c842e-2b99-40cc-bbcc-3d74990de142 | ext-net    | d6d52683-7dba-432d-adf6-7c582ca0f527             |
| 938c2abb-dfcb-4627-8626-3618c189d4de | ext-pub1   | 791b8764-a5ab-4b16-a7b0-2b883c4f0e1e             |
+--------------------------------------+------------+--------------------------------------------------+


The database seems be okay:

root@controller01:~# openstack project list
+----------------------------------+---------+
| ID                               | Name    |
+----------------------------------+---------+
| 0d693b62fb2941a381faf68f348f68f8 | service |
| 1437d72da6e64b2785e04c3e2e73d6a7 | demo2  |
| 15371d3015b24005a33536a95a750a62 | admin   |
| 60800c67e5a94d9c90c462283ea3ad0a | demo    |
+----------------------------------+---------+


Database:

MariaDB [neutron]> select * from networks;
+----------------------------------+--------------------------------------+----------------------------------------------------+--------+----------------+--------+------+------------------+
| tenant_id                        | id                                   | name                                               | status | admin_state_up | shared | mtu  | vlan_transparent |
+----------------------------------+--------------------------------------+----------------------------------------------------+--------+----------------+--------+------+------------------+
| 60800c67e5a94d9c90c462283ea3ad0a | 0c034b21-4e79-45c0-8f63-48b58dbd29f9 | demo-net                                           | ACTIVE |              1 |      0 |    0 |             NULL |
| 60800c67e5a94d9c90c462283ea3ad0a | 3a647d2a-3386-4104-8fbc-0deacac5f0f2 | demo-net2                                          | ACTIVE |              1 |      0 |    0 |             NULL |
|                                  | 57646215-ad08-465e-9b14-bc00023bd685 | HA network tenant 60800c67e5a94d9c90c462283ea3ad0a | ACTIVE |              1 |      0 |    0 |             NULL |
| 15371d3015b24005a33536a95a750a62 | 5a0db313-a44e-41ea-8d45-e6742f0ab608 | admin-net                                          | ACTIVE |              1 |      0 |    0 |             NULL |
| 1437d72da6e64b2785e04c3e2e73d6a7 | 7b362a28-4bbd-42a3-b99f-81861905b136 | demo2-net                                         | ACTIVE |              1 |      0 |    0 |             NULL |
| 15371d3015b24005a33536a95a750a62 | 807c842e-2b99-40cc-bbcc-3d74990de142 | ext-net                                            | ACTIVE |              1 |      0 |    0 |             NULL |
| 60800c67e5a94d9c90c462283ea3ad0a | 938c2abb-dfcb-4627-8626-3618c189d4de | ext-pub1                                           | ACTIVE |              1 |      0 |    0 |             NULL |
+----------------------------------+--------------------------------------+----------------------------------------------------+--------+----------------+--------+------+------------------+
7 rows in set (0.00 sec)

The stored tenant id in networks table is equal with the demo tenant id.

I think maybe it is a filter problem.
Could you please help or fix it?

Many thanks,
   kallaics

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1472936

Title:
  External flat network show out iof the tenant.

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  Hi guys!

  I found  problem in neutron. When I create a new network and I set
  external and the tenant is i.e demo, then I saw the network form other
  (not admin) tenant as well. I can get floating IP address, router etc.

  It is a problem because I can't assign external network to tenant.

  Here is an example:

  ext-pub1 is an external network, owned by demo tenant. If I list the
  networks in the demo2 tenant I see the ext-pub1 network as well :(

  root@controller01:~# source demo-openrc.sh 
  root@controller01:~# neutron net-list
  +--------------------------------------+-----------+---------------------------------------------------------+
  | id                                   | name      | subnets                                                 |
  +--------------------------------------+-----------+---------------------------------------------------------+
  | 0c034b21-4e79-45c0-8f63-48b58dbd29f9 | demo-net  | 24ad19d9-7967-42da-8457-bde999558bca 10.0.2.0/24        |
  | 3a647d2a-3386-4104-8fbc-0deacac5f0f2 | demo-net2 | ffe02388-45d5-431d-967d-625344410081 10.0.3.0/24        |
  | 807c842e-2b99-40cc-bbcc-3d74990de142 | ext-net   | d6d52683-7dba-432d-adf6-7c582ca0f527                    |
  | 938c2abb-dfcb-4627-8626-3618c189d4de | ext-pub1  | 791b8764-a5ab-4b16-a7b0-2b883c4f0e1e 193.225.212.128/27 |
  +--------------------------------------+-----------+---------------------------------------------------------+
  root@controller01:~# source demo2-openrc.sh 
  root@controller01:~# neutron net-list
  +--------------------------------------+------------+--------------------------------------------------+
  | id                                   | name       | subnets                                          |
  +--------------------------------------+------------+--------------------------------------------------+
  | 7b362a28-4bbd-42a3-b99f-81861905b136 | demo2-net | abd5d600-2f54-4a27-8d6b-23d690c18e3a 10.0.4.0/24 |
  | 807c842e-2b99-40cc-bbcc-3d74990de142 | ext-net    | d6d52683-7dba-432d-adf6-7c582ca0f527             |
  | 938c2abb-dfcb-4627-8626-3618c189d4de | ext-pub1   | 791b8764-a5ab-4b16-a7b0-2b883c4f0e1e             |
  +--------------------------------------+------------+--------------------------------------------------+

  
  The database seems be okay:

  root@controller01:~# openstack project list
  +----------------------------------+---------+
  | ID                               | Name    |
  +----------------------------------+---------+
  | 0d693b62fb2941a381faf68f348f68f8 | service |
  | 1437d72da6e64b2785e04c3e2e73d6a7 | demo2  |
  | 15371d3015b24005a33536a95a750a62 | admin   |
  | 60800c67e5a94d9c90c462283ea3ad0a | demo    |
  +----------------------------------+---------+

  
  Database:

  MariaDB [neutron]> select * from networks;
  +----------------------------------+--------------------------------------+----------------------------------------------------+--------+----------------+--------+------+------------------+
  | tenant_id                        | id                                   | name                                               | status | admin_state_up | shared | mtu  | vlan_transparent |
  +----------------------------------+--------------------------------------+----------------------------------------------------+--------+----------------+--------+------+------------------+
  | 60800c67e5a94d9c90c462283ea3ad0a | 0c034b21-4e79-45c0-8f63-48b58dbd29f9 | demo-net                                           | ACTIVE |              1 |      0 |    0 |             NULL |
  | 60800c67e5a94d9c90c462283ea3ad0a | 3a647d2a-3386-4104-8fbc-0deacac5f0f2 | demo-net2                                          | ACTIVE |              1 |      0 |    0 |             NULL |
  |                                  | 57646215-ad08-465e-9b14-bc00023bd685 | HA network tenant 60800c67e5a94d9c90c462283ea3ad0a | ACTIVE |              1 |      0 |    0 |             NULL |
  | 15371d3015b24005a33536a95a750a62 | 5a0db313-a44e-41ea-8d45-e6742f0ab608 | admin-net                                          | ACTIVE |              1 |      0 |    0 |             NULL |
  | 1437d72da6e64b2785e04c3e2e73d6a7 | 7b362a28-4bbd-42a3-b99f-81861905b136 | demo2-net                                         | ACTIVE |              1 |      0 |    0 |             NULL |
  | 15371d3015b24005a33536a95a750a62 | 807c842e-2b99-40cc-bbcc-3d74990de142 | ext-net                                            | ACTIVE |              1 |      0 |    0 |             NULL |
  | 60800c67e5a94d9c90c462283ea3ad0a | 938c2abb-dfcb-4627-8626-3618c189d4de | ext-pub1                                           | ACTIVE |              1 |      0 |    0 |             NULL |
  +----------------------------------+--------------------------------------+----------------------------------------------------+--------+----------------+--------+------+------------------+
  7 rows in set (0.00 sec)

  The stored tenant id in networks table is equal with the demo tenant
  id.

  I think maybe it is a filter problem.
  Could you please help or fix it?

  Many thanks,
     kallaics

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1472936/+subscriptions


Follow ups