Reviewed: https://review.openstack.org/640252
Committed:
https://git.openstack.org/cgit/openstack/neutron/commit/?id=18c578aa10c19a6befdf1f1510645200f173eb44
Submitter: Zuul
Branch: master
commit 18c578aa10c19a6befdf1f1510645200f173eb44
Author: Brian Haley <bha...@redhat.com>
Date: Thu Feb 28 22:19:16 2019 -0500
Fix KeyError in OVS firewall
When merging port ranges, the code never assumed the
conjunction ID might not be present in the set due to
already being removed.
In this case there were two security groups, both using
the same remote security group, but the first security
group does not define a port range and the second one does.
Or more generally, the first SG port range is a subset
of the second, as no port-range means the full range.
Change-Id: I17ab643abbd2ec21eda4ae1dfb9abf2d4b0657f2
Closes-bug: #1813007
** Changed in: neutron
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1813007
Title:
Unable to install new flows on compute nodes when having broken
security group rules
Status in Ubuntu Cloud Archive:
Triaged
Status in Ubuntu Cloud Archive pike series:
Triaged
Status in Ubuntu Cloud Archive queens series:
Triaged
Status in Ubuntu Cloud Archive rocky series:
Triaged
Status in Ubuntu Cloud Archive stein series:
Triaged
Status in neutron:
Fix Released
Status in OpenStack Security Advisory:
Incomplete
Status in neutron package in Ubuntu:
Triaged
Status in neutron source package in Xenial:
Triaged
Status in neutron source package in Bionic:
Triaged
Status in neutron source package in Cosmic:
Triaged
Status in neutron source package in Disco:
Triaged
Bug description:
It appears that we have found that neutron-openvswitch-agent appears to have
a bug where two security group rules that have two different port ranges that
overlap tied to the same parent security group will cause neutron to not be
able to configure networks on the compute nodes where those security groups are
present.
Those are the broken security rules:
https://pastebin.canonical.com/p/wSy8RSXt85/
Here is the log when we discovered the issue:
https://pastebin.canonical.com/p/wvFKjNWydr/
To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1813007/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~group.of.nepali.translators
Post to : group.of.nepali.translators@lists.launchpad.net
Unsubscribe : https://launchpad.net/~group.of.nepali.translators
More help : https://help.launchpad.net/ListHelp
