yahoo-eng-team team mailing list archive

[Robert van Leeuwen <rovanleeuwen@xxxxxxxx>]

Public bug reported:

1) create a security group
2) create a bunch of security group rules which reference a security group instead of a CIDR e.g.
openstack security group rule create --remote-group xxxxx-1123-xxxx-xxx-xxxxx


When querying nova api /os-security-groups there will be an API call to neutron for each rule that has a remote group attached.

In the logs you will seee GET /v2.0/security-groups/xxxxx-1123-xxxx-xxx-xxxxx
Creating rules with a CIDR do not have this issue.

As you can imagine this will quickly get very slow.

** Affects: nova
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1729741

Title:
  os-security-groups api call creates api call explosion to neutron

Status in OpenStack Compute (nova):
  New

Bug description:
  1) create a security group
  2) create a bunch of security group rules which reference a security group instead of a CIDR e.g.
  openstack security group rule create --remote-group xxxxx-1123-xxxx-xxx-xxxxx

  
  When querying nova api /os-security-groups there will be an API call to neutron for each rule that has a remote group attached.

  In the logs you will seee GET /v2.0/security-groups/xxxxx-1123-xxxx-xxx-xxxxx
  Creating rules with a CIDR do not have this issue.

  As you can imagine this will quickly get very slow.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1729741/+subscriptions