[neutron][ovn] Stateless Security Group

Slawek Kaplonski skaplons at redhat.com
Tue Nov 2 08:03:53 UTC 2021


Hi,

On wtorek, 2 listopada 2021 08:51:04 CET Ammad Syed wrote:
> Hi,
> 
> I have upgraded my lab to latest xena release and ovn 21.09 and ovs 2.16. I
> am trying to create stateless security group. But its getting failed with
> below error message.
> 
> # openstack security group  create --stateless sec02-stateless
> Error while executing command: BadRequestException: 400, Unrecognized
> attribute(s) 'stateful'
> 
> I see below logs in neutron server logs.
> 
> 2021-11-02 12:47:41.921 1346 DEBUG neutron.wsgi [-] (1346) accepted
> ('172.16.40.45', 41272) server
> /usr/lib/python3/dist-packages/eventlet/wsgi.py:992
> 2021-11-02 12:47:42.166 1346 DEBUG neutron.api.v2.base
> [req-b6a37fff-090f-4754-9df7-6e4314ed9481 19844bf62a7b498eb443508ef150e9b8
> 98687873a146418eaeeb54a01693669f - default default] Request body:
> {'security_group': {'name': 'sec02-stateless', 'stateful': False,
> 'description': 'sec02-stateless'}} prepare_request_body
> /usr/lib/python3/dist-packages/neutron/api/v2/base.py:729
> 2021-11-02 12:47:42.167 1346 WARNING neutron.api.v2.base
> [req-b6a37fff-090f-4754-9df7-6e4314ed9481 19844bf62a7b498eb443508ef150e9b8
> 98687873a146418eaeeb54a01693669f - default default] An exception happened
> while processing the request body. The exception message is [Unrecognized
> attribute(s) 'stateful'].: webob.exc.HTTPBadRequest: Unrecognized
> attribute(s) 'stateful'
> 2021-11-02 12:47:42.167 1346 INFO neutron.api.v2.resource
> [req-b6a37fff-090f-4754-9df7-6e4314ed9481 19844bf62a7b498eb443508ef150e9b8
> 98687873a146418eaeeb54a01693669f - default default] create failed (client
> error): Unrecognized attribute(s) 'stateful'
> 2021-11-02 12:47:42.168 1346 INFO neutron.wsgi
> [req-b6a37fff-090f-4754-9df7-6e4314ed9481 19844bf62a7b498eb443508ef150e9b8
> 98687873a146418eaeeb54a01693669f - default default] 172.16.40.45 "POST
> /v2.0/security-groups HTTP/1.1" status: 400  len: 317 time: 0.2455938
> 
> Any advice on how to fix it ?
> 
> Ammad

Do You have 'stateful-security-group' API extension enabled? You can check it 
with command

    neutron ext-list

If it's not loaded, You can check in the neutron-server logs while it wasn't 
loaded properly.

-- 
Slawek Kaplonski
Principal Software Engineer
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20211102/f8cbb653/attachment.sig>


More information about the openstack-discuss mailing list