Advertisement
Guest User

RHOSP13 any default rule problem

a guest
Apr 1st, 2020
89
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.71 KB | None | 0 0
  1.  
  2. This is the problem "default" group. Note the IP protocol is wrong and specifically written as "any"
  3.  
  4. openstack security group rule list e9e90df1-d839-4d08-9a2e-1e70e4232e84
  5.  
  6. +--------------------------------------+-------------+-----------+------------+--------------------------------------+
  7.  
  8. | ID | IP Protocol | IP Range | Port Range | Remote Security Group |
  9.  
  10. +--------------------------------------+-------------+-----------+------------+--------------------------------------+
  11.  
  12. | 43012fc8-c1ed-4b3a-9a63-ceecfba25cd6 | any | None | 0:65535 | e9e90df1-d839-4d08-9a2e-1e70e4232e84 |
  13.  
  14. | c4e2cbaf-5589-4000-9e21-a70c7429ee8f | any | None | 0:65535 | e9e90df1-d839-4d08-9a2e-1e70e4232e84 |
  15.  
  16. | 2c62e1a1-25f7-4a4a-b500-09483c752b3b | any | 0.0.0.0/0 | 0:65535 | None |
  17.  
  18. | 334ffae7-9652-41e2-af75-fc143f214df8 | any | ::/0 | 0:65535 | None |
  19.  
  20. +--------------------------------------+-------------+-----------+------------+--------------------------------------+
  21.  
  22.  
  23.  
  24. This is a "correct" one. Note the IP Protocol is "None" (and in the DB is "null")
  25.  
  26. openstack security group rule list 0e85ae5d-03c1-48ec-8bcf-ce23a74ade9b
  27. +--------------------------------------+-------------+----------+------------+--------------------------------------+
  28. | ID | IP Protocol | IP Range | Port Range | Remote Security Group |
  29. +--------------------------------------+-------------+----------+------------+--------------------------------------+
  30. | 1f737a14-425a-49e9-8bb2-1e2561e4e126 | None | None | | None |
  31. | 6dd777aa-4071-4ef0-9aab-3231d6b721fb | None | None | | 0e85ae5d-03c1-48ec-8bcf-ce23a74ade9b |
  32. | b350e420-bd64-43aa-a3c8-4bbea25476d6 | None | None | | None |
  33. | b7a0f1f3-6760-443c-915f-bbb8d8520fad | None | None | | 0e85ae5d-03c1-48ec-8bcf-ce23a74ade9b |
  34. +--------------------------------------+-------------+----------+------------+--------------------------------------+
  35.  
  36.  
  37. Ultimately leads to this error (which comes from Neutron, we don't do this check):
  38.  
  39. 020-03-31 08:40:29.902 2900 TRACE workloadmgr.workflows.vmtasks BadRequest: Security group rule protocol any not supported. Only protocol values [None, 'ah', 'pgm', 'tcp', 'ipv6-encap', 'dccp', 'igmp', 'icmp', 'esp', 'vrrp', 'ipv6-icmp', 'gre', 'sctp', 'rsvp', 'ipv6-route', 'udp', 'ipv6-opts', 'ipv6-nonxt', 'udplite', 'egp', 'ipip', 'icmpv6', 'ipv6-frag', 'ospf'] and integer representations [0 to 255] are supported.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement