dheeraj12347 commented on issue #12770:
URL: https://github.com/apache/cloudstack/issues/12770#issuecomment-4038964262

   Hi @DaanHoogland @rybakovanton-metta, 
   I reviewed the issue and it seems the cleanup logic in `security_group.py` 
attempts to flush/delete iptables chains and ipsets without verifying whether 
they exist first. When they don't exist, `iptables`/`ipset` return exit code 1, 
which is expected for idempotent cleanup but currently gets logged as an ERROR 
with a traceback.
   
   I’d like to work on this by adding checks to verify the chain/ipset 
existence before deletion and adjusting the logging so that non-existent chains 
are handled gracefully (e.g., logged at DEBUG instead of ERROR).
   
   Please let me know if it’s okay for me to take this up.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to