Public bug reported:

An admin user create port for another project, then use this port Create
VM, the VM can't communicate with other, because the security rule does
not work. the vm in nova can not show IP.

root@ubuntu01:/var/log/neutron# neutron port-show 
66c2d6bd-7d39-4948-b561-935cb9d264eb
+-----------------------+-----------------------------------------------------------------------------------+
| Field                 | Value                                                 
                            |
+-----------------------+-----------------------------------------------------------------------------------+
| admin_state_up        | True                                                  
                            |
| allowed_address_pairs | {"ip_address": "169.254.16.253", "mac_address": 
"fa:16:3e:48:73:a7"}              |
| binding:capabilities  | {"port_filter": false}                                
                            |
| binding:host_id       |                                                       
                            |
| binding:vif_type      | unbound                                               
                            |
| device_id             |                                                       
                            |
| device_owner          |                                                       
                            |
| extra_dhcp_opts       |                                                       
                            |
| fixed_ips             | {"subnet_id": "5519e015-fc83-44c2-99ad-d669b3c2c9d7", 
"ip_address": "10.10.10.4"} |
| id                    | 66c2d6bd-7d39-4948-b561-935cb9d264eb                  
                            |
| mac_address           | fa:16:3e:48:73:a7                                     
                            |
| name                  |                                                       
                            |
| network_id            | 255f3e92-5a6e-44a5-bbf9-1a62bf5d5935                  
                            |
| security_groups       | 94ad554f-392d-4dd5-8184-357f37b75111                  
                            |
| status                | DOWN                                                  
                            |
| tenant_id             | 3badf700bbc749ec9d9869fddc63899f                      
                            |
+-----------------------+-----------------------------------------------------------------------------------+

root@ubuntu01:/var/log/neutron# keystone tenant-list
+----------------------------------+---------+---------+
|                id                |   name  | enabled |
+----------------------------------+---------+---------+
| 34fddbc22c184214b823be267837ef81 |  admin  |   True  |
| 48eb4330b6e74a9f9e74d3e191a0fa2e | service |   True  |
+----------------------------------+---------+---------+

root@ubuntu01:/var/log/neutron# nova list
+--------------------------------------+-------+--------+------------+-------------+----------+
| ID                                   | Name  | Status | Task State | Power 
State | Networks |
+--------------------------------------+-------+--------+------------+-------------+----------+
| 5ce98599-75cb-49db-aa76-668491ee3bd0 | test3 | ACTIVE | None       | Running  
   |          |
+--------------------------------------+-------+--------+------------+-------------+----------+

** Affects: neutron
     Importance: Undecided
     Assignee: shihanzhang (shihanzhang)
         Status: New

** Affects: nova
     Importance: Undecided
     Assignee: shihanzhang (shihanzhang)
         Status: New

** Changed in: neutron
     Assignee: (unassigned) => shihanzhang (shihanzhang)

** Also affects: nova
   Importance: Undecided
       Status: New

** Changed in: nova
     Assignee: (unassigned) => shihanzhang (shihanzhang)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1297701

Title:
  Create VM use another tenant's port, the VM can't communicate with
  other

Status in OpenStack Neutron (virtual network service):
  New
Status in OpenStack Compute (Nova):
  New

Bug description:
  An admin user create port for another project, then use this port
  Create VM, the VM can't communicate with other, because the security
  rule does not work. the vm in nova can not show IP.

  root@ubuntu01:/var/log/neutron# neutron port-show 
66c2d6bd-7d39-4948-b561-935cb9d264eb
  
+-----------------------+-----------------------------------------------------------------------------------+
  | Field                 | Value                                               
                              |
  
+-----------------------+-----------------------------------------------------------------------------------+
  | admin_state_up        | True                                                
                              |
  | allowed_address_pairs | {"ip_address": "169.254.16.253", "mac_address": 
"fa:16:3e:48:73:a7"}              |
  | binding:capabilities  | {"port_filter": false}                              
                              |
  | binding:host_id       |                                                     
                              |
  | binding:vif_type      | unbound                                             
                              |
  | device_id             |                                                     
                              |
  | device_owner          |                                                     
                              |
  | extra_dhcp_opts       |                                                     
                              |
  | fixed_ips             | {"subnet_id": 
"5519e015-fc83-44c2-99ad-d669b3c2c9d7", "ip_address": "10.10.10.4"} |
  | id                    | 66c2d6bd-7d39-4948-b561-935cb9d264eb                
                              |
  | mac_address           | fa:16:3e:48:73:a7                                   
                              |
  | name                  |                                                     
                              |
  | network_id            | 255f3e92-5a6e-44a5-bbf9-1a62bf5d5935                
                              |
  | security_groups       | 94ad554f-392d-4dd5-8184-357f37b75111                
                              |
  | status                | DOWN                                                
                              |
  | tenant_id             | 3badf700bbc749ec9d9869fddc63899f                    
                              |
  
+-----------------------+-----------------------------------------------------------------------------------+

  root@ubuntu01:/var/log/neutron# keystone tenant-list
  +----------------------------------+---------+---------+
  |                id                |   name  | enabled |
  +----------------------------------+---------+---------+
  | 34fddbc22c184214b823be267837ef81 |  admin  |   True  |
  | 48eb4330b6e74a9f9e74d3e191a0fa2e | service |   True  |
  +----------------------------------+---------+---------+

  root@ubuntu01:/var/log/neutron# nova list
  
+--------------------------------------+-------+--------+------------+-------------+----------+
  | ID                                   | Name  | Status | Task State | Power 
State | Networks |
  
+--------------------------------------+-------+--------+------------+-------------+----------+
  | 5ce98599-75cb-49db-aa76-668491ee3bd0 | test3 | ACTIVE | None       | 
Running     |          |
  
+--------------------------------------+-------+--------+------------+-------------+----------+

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1297701/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp

Reply via email to