yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #60759
[Bug 1430345] Re: Manually created port by admin can be assigned as a second gateway to an existing router
As per the discussion with kevinbenton on
https://review.openstack.org/368414, it seems that the code has been
changed, which allows a port to be added if the device owner is
network:router_gateway, but the code [1] will change the device owner to
network:router_interface.
[1]:
https://github.com/openstack/neutron/commit/6281fddbcb4c471b6b06e24d3faa2990e040f3d2
** Changed in: neutron
Assignee: Reedip (reedip-banerjee) => (unassigned)
** Changed in: neutron
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1430345
Title:
Manually created port by admin can be assigned as a second gateway to
an existing router
Status in neutron:
Fix Released
Bug description:
____________
Description:
As an admin one can manually create a port on a network and assign it to a router (which already have a gateway) as a gateway by adding "Device Owner" = "network:router_gateway" and "Device ID" = "<router ID>"
basically I see two issues here:
1. When Manually creating a port on an external network it cannot be deleted via API access (Horizon or CLI command)
2. The manually created port can be assign as a "Device Owner" = network:router_gateway to a router that already have a default gateway which cause one router to have two default gateways.
________________
Version-Release:
openstack 6.0.3-0
openstack-neutron-2014.2.2-3
horizon-2014.2.2-2
____________
Environment:
All-in-One
RHEL 7.1
___________________
Steps to Reproduce:
1. Create Neutron external network and a subnet
2. Create a router and set a gateway the external network
3. Add a port and assign it to the router you created with "Device Owner" = "network:router_gateway" and "Device ID" = "<router ID>"
4. Try to delete the manually created port
_______________
Actual results:
Port cannot be deleted with the following: Error: Failed to delete port: Port 0ff48364-dcb1-44a4-b064-b1df5e9cb911 has owner network:router_gateway and therefore cannot be deleted directly via the port API.
_________________
Expected results:
Port can be deleted
Cannot assign two gateways to one router.
________________
Additional Info:
# neutron port-list
+--------------------------------------+----------+-------------------+--------------------------------------------------------------------------------------+
| id | name | mac_address | fixed_ips |
+--------------------------------------+----------+-------------------+--------------------------------------------------------------------------------------+
| 08b934f3-7daf-4895-8494-42ef944e7fe1 | | fa:16:3e:a7:b5:be | {"subnet_id": "d0533169-c649-456e-9aba-03672b6c2321", "ip_address": "x.x.x.x"} |
| 0ff48364-dcb1-44a4-b064-b1df5e9cb911 | Man-port | fa:16:3e:89:89:ca | {"subnet_id": "d0533169-c649-456e-9aba-03672b6c2321", "ip_address": "x.x.x.x"} |
| 5bea96f1-c3a8-43fc-90cb-db87f8dd92dd | | fa:16:3e:93:77:3f | {"subnet_id": "6140e6fa-d0a5-4621-bb15-472893e0fe85", "ip_address": "x.x.x.x"} |
| 80b8a6fe-67b1-4f72-86b6-9368611239c4 | | fa:16:3e:89:00:1b | {"subnet_id": "6140e6fa-d0a5-4621-bb15-472893e0fe85", "ip_address": "x.x.x.x"} |
| a49c7caf-a8cf-44e9-b7e6-6ba724ab9f7e | | fa:16:3e:5c:d3:bc | {"subnet_id": "d0533169-c649-456e-9aba-03672b6c2321", "ip_address": "x.x.x.x"} |
+--------------------------------------+----------+-------------------+--------------------------------------------------------------------------------------+
# neutron port-show 0ff48364-dcb1-44a4-b064-b1df5e9cb911
+-----------------------+------------------------------------------------------------------------------------+
| Field | Value |
+-----------------------+------------------------------------------------------------------------------------+
| admin_state_up | True |
| allowed_address_pairs | |
| binding:host_id | |
| binding:profile | {} |
| binding:vif_details | {} |
| binding:vif_type | unbound |
| binding:vnic_type | normal |
| device_id | 123dd109-1b37-4e69-9905-df2e1e233e25 |
| device_owner | network:router_gateway |
| extra_dhcp_opts | |
| fixed_ips | {"subnet_id": "d0533169-c649-456e-9aba-03672b6c2321", "ip_address": "x.x.x.x"} |
| id | 0ff48364-dcb1-44a4-b064-b1df5e9cb911 |
| mac_address | fa:16:3e:89:89:ca |
| name | Man-port |
| network_id | 07febdca-2189-4238-9891-9bde173863dd |
| security_groups | |
| status | DOWN |
| tenant_id | cc8ce0117f264950976bd8f932e68c58 |
+-----------------------+------------------------------------------------------------------------------------+
# neutron port-show 08b934f3-7daf-4895-8494-42ef944e7fe1
+-----------------------+------------------------------------------------------------------------------------+
| Field | Value |
+-----------------------+------------------------------------------------------------------------------------+
| admin_state_up | True |
| allowed_address_pairs | |
| binding:host_id | hhh.hhh.hhh.hhh |
| binding:profile | {} |
| binding:vif_details | {"port_filter": true, "ovs_hybrid_plug": true} |
| binding:vif_type | ovs |
| binding:vnic_type | normal |
| device_id | 123dd109-1b37-4e69-9905-df2e1e233e25 |
| device_owner | network:router_gateway |
| extra_dhcp_opts | |
| fixed_ips | {"subnet_id": "d0533169-c649-456e-9aba-03672b6c2321", "ip_address": "x.x.x.x"} |
| id | 08b934f3-7daf-4895-8494-42ef944e7fe1 |
| mac_address | fa:16:3e:a7:b5:be |
| name | |
| network_id | 07febdca-2189-4238-9891-9bde173863dd |
| security_groups | |
| status | ACTIVE |
| tenant_id | |
+-----------------------+------------------------------------------------------------------------------------+
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1430345/+subscriptions
References