yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #96036
[Bug 2114913] [NEW] Instance creation fails if multiple security groups with the same name exist in a single project
Public bug reported:
In OpenStack 2025.1, instance creation fails when there are two or more
security groups with the same name in the same project. This occurs even
if the security groups are not explicitly referenced during server
creation (i.e., using only the default default security group).
This behavior did not occur in earlier versions of OpenStack.
Steps to Reproduce:
Make sure you are operating within a single project
Create two security groups with the same name:
openstack security group create aa
openstack security group create aa
| ID | Name | Project |
|-------------------------------------|------|--------------------------------------|
| 7af5d2ad-9f6c-4f33-a4d8-6c79fb192caa | aa | 802e37d05d6045abab7c07aa5affb533 |
| 850ac252-1dd4-46de-86f4-0b94da346df3 | aa | 802e37d05d6045abab7c07aa5affb533 |
Attempt to create a VM:
openstack server create --flavor m1.medium --image Template-Openstack-Debian-12 --network demo-net --security-group 4c6be158-d850-47b0-a602-597f00071afe TEST1111
SG: 4c6be158-d850-47b0-a602-597f00071afe = default
(if we do not connect any SG, the instance is started without any
problems)
The instance creation fails with an error.
openstack server show TEST1111
+-------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field | Value |
+-------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| OS-DCF:diskConfig | MANUAL |
| OS-EXT-AZ:availability_zone | |
| OS-EXT-SRV-ATTR:host | None |
| OS-EXT-SRV-ATTR:hostname | test1111 |
| OS-EXT-SRV-ATTR:hypervisor_hostname | None |
| OS-EXT-SRV-ATTR:instance_name | instance-00005c77 |
| OS-EXT-SRV-ATTR:kernel_id | |
| OS-EXT-SRV-ATTR:launch_index | 0 |
| OS-EXT-SRV-ATTR:ramdisk_id | |
| OS-EXT-SRV-ATTR:reservation_id | r-iyqyxon0 |
| OS-EXT-SRV-ATTR:root_device_name | /dev/vda |
| OS-EXT-SRV-ATTR:user_data | None |
| OS-EXT-STS:power_state | NOSTATE |
| OS-EXT-STS:task_state | None |
| OS-EXT-STS:vm_state | error |
| OS-SRV-USG:launched_at | None |
| OS-SRV-USG:terminated_at | None |
| accessIPv4 | |
| accessIPv6 | |
| addresses | |
| config_drive | |
| created | 2025-06-18T14:50:08Z |
| description | None |
| flavor | description=, disk='40', ephemeral='0', extra_specs.HA_Enabled='True', id='m1.medium', is_disabled=, is_public='True', location=, name='m1.medium', |
| | original_name='m1.medium', ram='4096', rxtx_factor=, swap='0', vcpus='2' |
| hostId | |
| host_status | |
| id | 9938ab7a-99ac-486d-bd5b-cd6724a2e396 |
| image | Template-Openstack-Debian-12 (13c8b154-d7f9-40eb-8de8-b0ea734ccc75) |
| key_name | None |
| locked | False |
| locked_reason | None |
| name | TEST1111 |
| pinned_availability_zone | None |
| progress | None |
| project_id | 802e37d05d6045abab7c07aa5affb533 |
| properties | |
| server_groups | None |
| status | ERROR |
| tags | |
| trusted_image_certificates | None |
| updated | 2025-06-18T14:51:11Z |
| user_id | 031bddc09b164be7a28dcee6bf42d4d8 |
| volumes_attached | |
+-------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+
in nova logs:
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [None req-c4b38dce-2c1d-4859-b376-0d3e9d004cc8 031bddc09b164be7a28dcee6bf42d4d8 802e37d05d6045abab7c07aa5affb533 - - default default] [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] Failed to build and run instance: nova.exception.NoUniqueMatch: Multiple security groups found matching 'aa'. Use an ID to be more specific.
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] Traceback (most recent call last):
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/compute/manager.py", line 2648, in _build_and_run_instance
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] self.driver.spawn(context, instance, image_meta,
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/virt/libvirt/driver.py", line 4861, in spawn
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] xml = self._get_guest_xml(context, instance, network_info,
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/virt/libvirt/driver.py", line 8029, in _get_guest_xml
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] network_info_str = str(network_info)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/model.py", line 622, in __str__
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] return self._sync_wrapper(fn, *args, **kwargs)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/model.py", line 605, in _sync_wrapper
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] self.wait()
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/model.py", line 637, in wait
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] self[:] = self._gt.wait()
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/eventlet/greenthread.py", line 232, in wait
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] return self._exit_event.wait()
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/eventlet/event.py", line 131, in wait
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] current.throw(*self._exc)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/eventlet/greenthread.py", line 272, in main
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] result = function(*args, **kwargs)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/utils.py", line 663, in context_wrapper
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] return func(*args, **kwargs)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/compute/manager.py", line 2018, in _allocate_network_async
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] raise e
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/compute/manager.py", line 1996, in _allocate_network_async
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] nwinfo = self.network_api.allocate_for_instance(
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/neutron.py", line 1242, in allocate_for_instance
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] security_group_ids = self._process_security_groups(
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/neutron.py", line 913, in _process_security_groups
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] security_group_ids = self._get_security_group_ids(
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/neutron.py", line 847, in _get_security_group_ids
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] raise exception.NoUniqueMatch(
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] nova.exception.NoUniqueMatch: Multiple security groups found matching 'aa'. Use an ID to be more specific.
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396]
** Affects: nova
Importance: Undecided
Status: New
** Description changed:
In OpenStack 2025.1, instance creation fails when there are two or more
security groups with the same name in the same project. This occurs even
if the security groups are not explicitly referenced during server
creation (i.e., using only the default default security group).
This behavior did not occur in earlier versions of OpenStack.
Steps to Reproduce:
Make sure you are operating within a single project
Create two security groups with the same name:
openstack security group create aa
openstack security group create aa
| ID | Name | Project |
|-------------------------------------|------|--------------------------------------|
| 7af5d2ad-9f6c-4f33-a4d8-6c79fb192caa | aa | 802e37d05d6045abab7c07aa5affb533 |
| 850ac252-1dd4-46de-86f4-0b94da346df3 | aa | 802e37d05d6045abab7c07aa5affb533 |
+ Attempt to create a VM:
+ openstack server create --flavor m1.medium --image Template-Openstack-Debian-12 --network demo-net --security-group 4c6be158-d850-47b0-a602-597f00071afe TEST1111
- Attempt to create a VM:
- openstack server create --flavor m1.medium --image Template-Openstack-Debian-12 --network demo-net --security-group 4c6be158-d850-47b0-a602-597f00071afe TEST1111
+ SG: 4c6be158-d850-47b0-a602-597f00071afe = default
+
+ (if we do not connect any SG, the instance is started without any
+ problems)
The instance creation fails with an error.
openstack server show TEST1111
+-------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field | Value |
+-------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| OS-DCF:diskConfig | MANUAL |
| OS-EXT-AZ:availability_zone | |
| OS-EXT-SRV-ATTR:host | None |
| OS-EXT-SRV-ATTR:hostname | test1111 |
| OS-EXT-SRV-ATTR:hypervisor_hostname | None |
| OS-EXT-SRV-ATTR:instance_name | instance-00005c77 |
| OS-EXT-SRV-ATTR:kernel_id | |
| OS-EXT-SRV-ATTR:launch_index | 0 |
| OS-EXT-SRV-ATTR:ramdisk_id | |
| OS-EXT-SRV-ATTR:reservation_id | r-iyqyxon0 |
| OS-EXT-SRV-ATTR:root_device_name | /dev/vda |
| OS-EXT-SRV-ATTR:user_data | None |
| OS-EXT-STS:power_state | NOSTATE |
| OS-EXT-STS:task_state | None |
| OS-EXT-STS:vm_state | error |
| OS-SRV-USG:launched_at | None |
| OS-SRV-USG:terminated_at | None |
| accessIPv4 | |
| accessIPv6 | |
| addresses | |
| config_drive | |
| created | 2025-06-18T14:50:08Z |
| description | None |
| flavor | description=, disk='40', ephemeral='0', extra_specs.HA_Enabled='True', id='m1.medium', is_disabled=, is_public='True', location=, name='m1.medium', |
| | original_name='m1.medium', ram='4096', rxtx_factor=, swap='0', vcpus='2' |
| hostId | |
| host_status | |
| id | 9938ab7a-99ac-486d-bd5b-cd6724a2e396 |
| image | Template-Openstack-Debian-12 (13c8b154-d7f9-40eb-8de8-b0ea734ccc75) |
| key_name | None |
| locked | False |
| locked_reason | None |
| name | TEST1111 |
| pinned_availability_zone | None |
| progress | None |
| project_id | 802e37d05d6045abab7c07aa5affb533 |
| properties | |
| server_groups | None |
| status | ERROR |
| tags | |
| trusted_image_certificates | None |
| updated | 2025-06-18T14:51:11Z |
| user_id | 031bddc09b164be7a28dcee6bf42d4d8 |
| volumes_attached | |
+-------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+
-
in nova logs:
-
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [None req-c4b38dce-2c1d-4859-b376-0d3e9d004cc8 031bddc09b164be7a28dcee6bf42d4d8 802e37d05d6045abab7c07aa5affb533 - - default default] [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] Failed to build and run instance: nova.exception.NoUniqueMatch: Multiple security groups found matching 'aa'. Use an ID to be more specific.
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] Traceback (most recent call last):
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/compute/manager.py", line 2648, in _build_and_run_instance
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] self.driver.spawn(context, instance, image_meta,
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/virt/libvirt/driver.py", line 4861, in spawn
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] xml = self._get_guest_xml(context, instance, network_info,
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/virt/libvirt/driver.py", line 8029, in _get_guest_xml
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] network_info_str = str(network_info)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/model.py", line 622, in __str__
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] return self._sync_wrapper(fn, *args, **kwargs)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/model.py", line 605, in _sync_wrapper
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] self.wait()
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/model.py", line 637, in wait
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] self[:] = self._gt.wait()
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/eventlet/greenthread.py", line 232, in wait
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] return self._exit_event.wait()
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/eventlet/event.py", line 131, in wait
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] current.throw(*self._exc)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/eventlet/greenthread.py", line 272, in main
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] result = function(*args, **kwargs)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/utils.py", line 663, in context_wrapper
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] return func(*args, **kwargs)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/compute/manager.py", line 2018, in _allocate_network_async
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] raise e
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/compute/manager.py", line 1996, in _allocate_network_async
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] nwinfo = self.network_api.allocate_for_instance(
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/neutron.py", line 1242, in allocate_for_instance
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] security_group_ids = self._process_security_groups(
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/neutron.py", line 913, in _process_security_groups
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] security_group_ids = self._get_security_group_ids(
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/neutron.py", line 847, in _get_security_group_ids
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] raise exception.NoUniqueMatch(
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] nova.exception.NoUniqueMatch: Multiple security groups found matching 'aa'. Use an ID to be more specific.
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396]
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/2114913
Title:
Instance creation fails if multiple security groups with the same name
exist in a single project
Status in OpenStack Compute (nova):
New
Bug description:
In OpenStack 2025.1, instance creation fails when there are two or
more security groups with the same name in the same project. This
occurs even if the security groups are not explicitly referenced
during server creation (i.e., using only the default default security
group).
This behavior did not occur in earlier versions of OpenStack.
Steps to Reproduce:
Make sure you are operating within a single project
Create two security groups with the same name:
openstack security group create aa
openstack security group create aa
| ID | Name | Project |
|-------------------------------------|------|--------------------------------------|
| 7af5d2ad-9f6c-4f33-a4d8-6c79fb192caa | aa | 802e37d05d6045abab7c07aa5affb533 |
| 850ac252-1dd4-46de-86f4-0b94da346df3 | aa | 802e37d05d6045abab7c07aa5affb533 |
Attempt to create a VM:
openstack server create --flavor m1.medium --image Template-Openstack-Debian-12 --network demo-net --security-group 4c6be158-d850-47b0-a602-597f00071afe TEST1111
SG: 4c6be158-d850-47b0-a602-597f00071afe = default
(if we do not connect any SG, the instance is started without any
problems)
The instance creation fails with an error.
openstack server show TEST1111
+-------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field | Value |
+-------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| OS-DCF:diskConfig | MANUAL |
| OS-EXT-AZ:availability_zone | |
| OS-EXT-SRV-ATTR:host | None |
| OS-EXT-SRV-ATTR:hostname | test1111 |
| OS-EXT-SRV-ATTR:hypervisor_hostname | None |
| OS-EXT-SRV-ATTR:instance_name | instance-00005c77 |
| OS-EXT-SRV-ATTR:kernel_id | |
| OS-EXT-SRV-ATTR:launch_index | 0 |
| OS-EXT-SRV-ATTR:ramdisk_id | |
| OS-EXT-SRV-ATTR:reservation_id | r-iyqyxon0 |
| OS-EXT-SRV-ATTR:root_device_name | /dev/vda |
| OS-EXT-SRV-ATTR:user_data | None |
| OS-EXT-STS:power_state | NOSTATE |
| OS-EXT-STS:task_state | None |
| OS-EXT-STS:vm_state | error |
| OS-SRV-USG:launched_at | None |
| OS-SRV-USG:terminated_at | None |
| accessIPv4 | |
| accessIPv6 | |
| addresses | |
| config_drive | |
| created | 2025-06-18T14:50:08Z |
| description | None |
| flavor | description=, disk='40', ephemeral='0', extra_specs.HA_Enabled='True', id='m1.medium', is_disabled=, is_public='True', location=, name='m1.medium', |
| | original_name='m1.medium', ram='4096', rxtx_factor=, swap='0', vcpus='2' |
| hostId | |
| host_status | |
| id | 9938ab7a-99ac-486d-bd5b-cd6724a2e396 |
| image | Template-Openstack-Debian-12 (13c8b154-d7f9-40eb-8de8-b0ea734ccc75) |
| key_name | None |
| locked | False |
| locked_reason | None |
| name | TEST1111 |
| pinned_availability_zone | None |
| progress | None |
| project_id | 802e37d05d6045abab7c07aa5affb533 |
| properties | |
| server_groups | None |
| status | ERROR |
| tags | |
| trusted_image_certificates | None |
| updated | 2025-06-18T14:51:11Z |
| user_id | 031bddc09b164be7a28dcee6bf42d4d8 |
| volumes_attached | |
+-------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+
in nova logs:
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [None req-c4b38dce-2c1d-4859-b376-0d3e9d004cc8 031bddc09b164be7a28dcee6bf42d4d8 802e37d05d6045abab7c07aa5affb533 - - default default] [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] Failed to build and run instance: nova.exception.NoUniqueMatch: Multiple security groups found matching 'aa'. Use an ID to be more specific.
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] Traceback (most recent call last):
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/compute/manager.py", line 2648, in _build_and_run_instance
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] self.driver.spawn(context, instance, image_meta,
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/virt/libvirt/driver.py", line 4861, in spawn
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] xml = self._get_guest_xml(context, instance, network_info,
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/virt/libvirt/driver.py", line 8029, in _get_guest_xml
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] network_info_str = str(network_info)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/model.py", line 622, in __str__
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] return self._sync_wrapper(fn, *args, **kwargs)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/model.py", line 605, in _sync_wrapper
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] self.wait()
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/model.py", line 637, in wait
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] self[:] = self._gt.wait()
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/eventlet/greenthread.py", line 232, in wait
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] return self._exit_event.wait()
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/eventlet/event.py", line 131, in wait
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] current.throw(*self._exc)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/eventlet/greenthread.py", line 272, in main
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] result = function(*args, **kwargs)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/utils.py", line 663, in context_wrapper
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] return func(*args, **kwargs)
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/compute/manager.py", line 2018, in _allocate_network_async
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] raise e
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/compute/manager.py", line 1996, in _allocate_network_async
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] nwinfo = self.network_api.allocate_for_instance(
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/neutron.py", line 1242, in allocate_for_instance
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] security_group_ids = self._process_security_groups(
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/neutron.py", line 913, in _process_security_groups
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] security_group_ids = self._get_security_group_ids(
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] File "/var/lib/kolla/venv/lib/python3.12/site-packages/nova/network/neutron.py", line 847, in _get_security_group_ids
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] raise exception.NoUniqueMatch(
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396] nova.exception.NoUniqueMatch: Multiple security groups found matching 'aa'. Use an ID to be more specific.
2025-06-18 16:51:08.287 7 ERROR nova.compute.manager [instance: 9938ab7a-99ac-486d-bd5b-cd6724a2e396]
To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/2114913/+subscriptions