Why creation of Service Instance from heat template cause that ports are in
down state. When I create Service Instance manually that everything works
fine. Everything that I run from webUI works perfect. Using heat automation
cause problems like the one I mentioned.


---
  fw_service_instance:
    type: OS::Contrail::ServiceInstance
    properties:
      name: { get_param: fw_instance_name }
      service_template: { get_param:  fw_template}
      interface_list: [
          {
              virtual_network: {get_param: netM}
          },
          {
              virtual_network: {get_param: netA}
          },
          {
              virtual_network: {get_param: netB}
          },
      ]

  service_chain_fw:
    type: OS::Contrail::NetworkPolicy
    depends_on: [ fw_service_instance ]
    properties:
      name: { get_param: fw_policy_name }
      entries:
        policy_rule: [
              {
                "direction": "<>",
                "protocol": "any",
                "src_ports": [{"start_port":-1,"end_port":-1}],
                "dst_ports": [{"start_port":-1,"end_port":-1}],
                "src_addresses": [{ "virtual_network": {get_param: netA}}],
                "dst_addresses": [{ "virtual_network": {get_param: netB}}],
                "action_list": {"apply_service": [{get_resource:
fw_service_instance}]}
              },
        ]

  service_chain_fw_attach_netA:
    type: OS::Contrail::AttachPolicy
    depends_on: [ service_chain_fw ]
    properties:
      network: { get_param: netA }
      policy: { get_attr: [service_chain_fw, fq_name] }

  service_chain_fw_attach_netB:
    type: OS::Contrail::AttachPolicy
    depends_on: [ service_chain_fw ]
    properties:
      network: { get_param: netB }
      policy: { get_attr: [service_chain_fw, fq_name] }

---

Ports:

{
  index: "5",
  name: "tap0e76bb2d-04",
  uuid: "0e76bb2d-044b-434f-8afb-17432a2b58a4",
  vrf_name: "--ERROR--",
  active: "Inactive < vrf-null ipv4_inactive ipv6_inactive l2_inactive  >",
  dhcp_service: "Enable",
  dns_service: "Enable",
  type: "vport",
  label: "-1",
  vn_name: "default-domain:admin:netM",
  vm_uuid: "e11bf0ea-a730-4283-a73e-d0cf2e6b18c4",
  vm_name: "default-domain__admin__Firewall__1",
  ip_addr: "172.16.0.5",
  mac_addr: "02:94:7f:0e:37:19",
  policy: "Enable",
  fip_list:  {
    list: ""
  },
  mdata_ip_addr: "0.0.0.0",
  service_vlan_list:  {
    list: ""
  },
  os_ifindex: "39",
  fabric_port: "NotFabricPort",
  alloc_linklocal_ip: "LL-Enable",
  analyzer_name: "",
  config_name:
"default-domain:admin:default-domain__admin__Firewall__1__management__1",
  sg_uuid_list:  {
    list:  {
      VmIntfSgUuid:  {
        sg_uuid: "b4f4a1e9-de35-445a-a991-10d28625917a"
      }
    }
  },
  l2_label: "-1",
  vxlan_id: "6",
  static_route_list:  {
    list: ""
  },
  l2_active: "L2 Inactive < vrf-null  >",
  vm_project_uuid: "08f1150b-40dc-4c6d-a5ba-56d8f102211e",
  admin_state: "Enabled",
  flow_key_idx: "0",
  allowed_address_pair_list:  {
    list: ""
  },
  ip6_addr: "::",
  ip6_active: "Ipv6 Inactive < vrf-null no-ipv6-addr  >",
  local_preference: "0",
  tx_vlan_id: "-1",
  rx_vlan_id: "-1",
  parent_interface: "",
  sub_type: "Tap",
  vmi_type: "Virtual Machine",
  transport: "Ethernet",
  logical_interface_uuid: "00000000-0000-0000-0000-000000000000",
  flood_unknown_unicast: "false",
  physical_device: "",
  physical_interface: "",
  ipv4_active: "Ipv4 Inactive < vrf-null  >",
  fixed_ip4_list:  {
    list:  {
      element: "172.16.0.5"
    }
  },
  fixed_ip6_list:  {
    list: ""
  },
  dispName: "tap0e76bb2d-04",
  disp_fip_list: "None"
}


 {
  index: "7",
  name: "tap53157ed2-5f",
  uuid: "53157ed2-5f51-4055-a774-95d32a0efa4c",
  vrf_name: "--ERROR--",
  active: "Inactive < vrf-null ipv4_inactive ipv6_inactive l2_inactive  >",
  dhcp_service: "Enable",
  dns_service: "Enable",
  type: "vport",
  label: "-1",
  vn_name: "default-domain:admin:netB",
  vm_uuid: "e11bf0ea-a730-4283-a73e-d0cf2e6b18c4",
  vm_name: "default-domain__admin__Firewall__1",
  ip_addr: "192.168.1.4",
  mac_addr: "02:63:0f:ae:a4:ae",
  policy: "Enable",
  fip_list:  {
    list: ""
  },
  mdata_ip_addr: "0.0.0.0",
  service_vlan_list:  {
    list: ""
  },
  os_ifindex: "41",
  fabric_port: "NotFabricPort",
  alloc_linklocal_ip: "LL-Enable",
  analyzer_name: "",
  config_name:
"default-domain:admin:default-domain__admin__Firewall__1__right__3",
  sg_uuid_list:  {
    list:  {
      VmIntfSgUuid:  {
        sg_uuid: "b4f4a1e9-de35-445a-a991-10d28625917a"
      }
    }
  },
  l2_label: "-1",
  vxlan_id: "7",
  static_route_list:  {
    list: ""
  },
  l2_active: "L2 Inactive < vrf-null  >",
  vm_project_uuid: "08f1150b-40dc-4c6d-a5ba-56d8f102211e",
  admin_state: "Enabled",
  flow_key_idx: "0",
  allowed_address_pair_list:  {
    list: ""
  },
  ip6_addr: "::",
  ip6_active: "Ipv6 Inactive < vrf-null no-ipv6-addr  >",
  local_preference: "0",
  tx_vlan_id: "-1",
  rx_vlan_id: "-1",
  parent_interface: "",
  sub_type: "Tap",
  vmi_type: "Virtual Machine",
  transport: "Ethernet",
  logical_interface_uuid: "00000000-0000-0000-0000-000000000000",
  flood_unknown_unicast: "false",
  physical_device: "",
  physical_interface: "",
  ipv4_active: "Ipv4 Inactive < vrf-null  >",
  fixed_ip4_list:  {
    list:  {
      element: "192.168.1.4"
    }
  },
  fixed_ip6_list:  {
    list: ""
  },
  dispName: "tap53157ed2-5f",
  disp_fip_list: "None"
}



 {
  index: "6",
  name: "tapba60fd7a-f4",
  uuid: "ba60fd7a-f416-4f9a-9a51-9fcb76412f71",
  vrf_name: "--ERROR--",
  active: "Inactive < vrf-null ipv4_inactive ipv6_inactive l2_inactive  >",
  dhcp_service: "Enable",
  dns_service: "Enable",
  type: "vport",
  label: "-1",
  vn_name: "default-domain:admin:netA",
  vm_uuid: "e11bf0ea-a730-4283-a73e-d0cf2e6b18c4",
  vm_name: "default-domain__admin__Firewall__1",
  ip_addr: "192.168.0.4",
  mac_addr: "02:37:f5:98:76:7a",
  policy: "Enable",
  fip_list:  {
    list: ""
  },
  mdata_ip_addr: "0.0.0.0",
  service_vlan_list:  {
    list: ""
  },
  os_ifindex: "40",
  fabric_port: "NotFabricPort",
  alloc_linklocal_ip: "LL-Enable",
  analyzer_name: "",
  config_name:
"default-domain:admin:default-domain__admin__Firewall__1__left__2",
  sg_uuid_list:  {
    list:  {
      VmIntfSgUuid:  {
        sg_uuid: "b4f4a1e9-de35-445a-a991-10d28625917a"
      }
    }
  },
  l2_label: "-1",
  vxlan_id: "8",
  static_route_list:  {
    list: ""
  },
  l2_active: "L2 Inactive < vrf-null  >",
  vm_project_uuid: "08f1150b-40dc-4c6d-a5ba-56d8f102211e",
  admin_state: "Enabled",
  flow_key_idx: "0",
  allowed_address_pair_list:  {
    list: ""
  },
  ip6_addr: "::",
  ip6_active: "Ipv6 Inactive < vrf-null no-ipv6-addr  >",
  local_preference: "0",
  tx_vlan_id: "-1",
  rx_vlan_id: "-1",
  parent_interface: "",
  sub_type: "Tap",
  vmi_type: "Virtual Machine",
  transport: "Ethernet",
  logical_interface_uuid: "00000000-0000-0000-0000-000000000000",
  flood_unknown_unicast: "false",
  physical_device: "",
  physical_interface: "",
  ipv4_active: "Ipv4 Inactive < vrf-null  >",
  fixed_ip4_list:  {
    list:  {
      element: "192.168.0.4"
    }
  },
  fixed_ip6_list:  {
    list: ""
  },
  dispName: "tapba60fd7a-f4",
  disp_fip_list: "None"
}


-- 
Wojciech Sronek
_______________________________________________
Users mailing list
[email protected]
http://lists.opencontrail.org/mailman/listinfo/users_lists.opencontrail.org

Reply via email to