← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1872439] [NEW] The firewall group's status is active when firewall group has no any policy

 

Public bug reported:

Creating a firewall group with policies and 1 interface ports.
[root@test25g04 yuanshuo1]#  openstack firewall group show ys-normal-fw1                                                                                     +-------------------+-------------------------------------------+
| Field             | Value                                     |
+-------------------+-------------------------------------------+
| Description       |                                           |
| Egress Policy ID  | 0910e062-f961-45aa-928a-03cdc8725da9      |
| ID                | f3b8441a-dcdb-457d-90bc-71571bffa155      |
| Ingress Policy ID | 9873dfd4-f235-463e-a246-67217ecdbdb0      |
| Name              | ys-normal-fw1                             |
| Ports             | [u'ef283f14-ed0b-4dbb-bde4-2e08b66e73fc'] |
| Project           | 17bf57ec04994db2b591fda36c368e99          |
| Shared            | False                                     |
| State             | UP                                        |
| Status            | ACTIVE                                    |
| project_id        | 17bf57ec04994db2b591fda36c368e99          |
| revision_number   | 9                                         |
| tags              | []                                        |
+-------------------+-------------------------------------------+

Then update the firewall group, but the status of firewall group is active.
[root@test25g04 yuanshuo1]#  openstack firewall group set --no-ingress-firewall-policy --no-egress-firewall-policy ys-normal-fw1
[root@test25g04 yuanshuo1]#  openstack firewall group show ys-normal-fw1
+-------------------+-------------------------------------------+
| Field             | Value                                     |
+-------------------+-------------------------------------------+
| Description       |                                           |
| Egress Policy ID  | None                                      |
| ID                | f3b8441a-dcdb-457d-90bc-71571bffa155      |
| Ingress Policy ID | None                                      |
| Name              | ys-normal-fw1                             |
| Ports             | [u'ef283f14-ed0b-4dbb-bde4-2e08b66e73fc'] |
| Project           | 17bf57ec04994db2b591fda36c368e99          |
| Shared            | False                                     |
| State             | UP                                        |
| Status            | ACTIVE                                    |
| project_id        | 17bf57ec04994db2b591fda36c368e99          |
| revision_number   | 10                                        |
| tags              | []                                        |
+-------------------+-------------------------------------------+

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1872439

Title:
  The firewall group's status is active when firewall group has no any
  policy

Status in neutron:
  New

Bug description:
  Creating a firewall group with policies and 1 interface ports.
  [root@test25g04 yuanshuo1]#  openstack firewall group show ys-normal-fw1                                                                                     +-------------------+-------------------------------------------+
  | Field             | Value                                     |
  +-------------------+-------------------------------------------+
  | Description       |                                           |
  | Egress Policy ID  | 0910e062-f961-45aa-928a-03cdc8725da9      |
  | ID                | f3b8441a-dcdb-457d-90bc-71571bffa155      |
  | Ingress Policy ID | 9873dfd4-f235-463e-a246-67217ecdbdb0      |
  | Name              | ys-normal-fw1                             |
  | Ports             | [u'ef283f14-ed0b-4dbb-bde4-2e08b66e73fc'] |
  | Project           | 17bf57ec04994db2b591fda36c368e99          |
  | Shared            | False                                     |
  | State             | UP                                        |
  | Status            | ACTIVE                                    |
  | project_id        | 17bf57ec04994db2b591fda36c368e99          |
  | revision_number   | 9                                         |
  | tags              | []                                        |
  +-------------------+-------------------------------------------+

  Then update the firewall group, but the status of firewall group is active.
  [root@test25g04 yuanshuo1]#  openstack firewall group set --no-ingress-firewall-policy --no-egress-firewall-policy ys-normal-fw1
  [root@test25g04 yuanshuo1]#  openstack firewall group show ys-normal-fw1
  +-------------------+-------------------------------------------+
  | Field             | Value                                     |
  +-------------------+-------------------------------------------+
  | Description       |                                           |
  | Egress Policy ID  | None                                      |
  | ID                | f3b8441a-dcdb-457d-90bc-71571bffa155      |
  | Ingress Policy ID | None                                      |
  | Name              | ys-normal-fw1                             |
  | Ports             | [u'ef283f14-ed0b-4dbb-bde4-2e08b66e73fc'] |
  | Project           | 17bf57ec04994db2b591fda36c368e99          |
  | Shared            | False                                     |
  | State             | UP                                        |
  | Status            | ACTIVE                                    |
  | project_id        | 17bf57ec04994db2b591fda36c368e99          |
  | revision_number   | 10                                        |
  | tags              | []                                        |
  +-------------------+-------------------------------------------+

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1872439/+subscriptions