Open Stack

I should have added, this is the 2011.3-0ubuntu6 version running on Ubuntu
Oneiric, installed from the Ubuntu archives.

Thanks,
Kiall


On Mon, Oct 10, 2011 at 10:32 AM, Kiall Mac Innes <kiall at managedit.ie>wrote:

> Hiya,
>
> After deleting a security group, new instances fail to create due to the
> error below, I've restored the group via the DB (its the "puppet" group with
> id 6) and all is well again.
>
> Is this expected/a known issue/etc or am I doing something wrong? If I'm
> not, can you let me know so I can file a bug :)
>
> Thanks!
> Kiall
>
> (The new instance was in the "web" group, if that matters!)
>
> $ euca-describe-groups
>> GROUP kohana default default
>> PERMISSION kohana default ALLOWS icmp -1 -1 FROM CIDR 0.0.0.0/0
>> PERMISSION kohana default ALLOWS tcp 22 22 FROM CIDR 0.0.0.0/0
>> PERMISSION kohana default ALLOWS tcp 80 80 FROM CIDR 0.0.0.0/0
>> GROUP managedit default default
>> PERMISSION managedit default ALLOWS icmp -1 -1 FROM CIDR 0.0.0.0/0
>> PERMISSION managedit default ALLOWS tcp 22 22 FROM CIDR 0.0.0.0/0
>> GROUP managedit mysql MySQL Servers
>> PERMISSION managedit mysql ALLOWS tcp 22 22 FROM CIDR 0.0.0.0/0
>> PERMISSION managedit mysql ALLOWS icmp -1 -1 FROM CIDR 0.0.0.0/0
>> PERMISSION managedit mysql ALLOWS tcp 3306 3306 GRPNAME web
>> GROUP managedit puppet Puppet Servers
>> PERMISSION managedit puppet ALLOWS tcp 22 22 FROM CIDR 0.0.0.0/0
>> PERMISSION managedit puppet ALLOWS icmp -1 -1 FROM CIDR 0.0.0.0/0
>> PERMISSION managedit puppet ALLOWS tcp 8140 8140 GRPNAME web
>> PERMISSION managedit puppet ALLOWS tcp 8140 8140 GRPNAME mysql
>> GROUP managedit web Web Servers
>> PERMISSION managedit web ALLOWS icmp -1 -1 FROM CIDR 0.0.0.0/0
>> PERMISSION managedit web ALLOWS tcp 22 22 FROM CIDR 0.0.0.0/0
>> PERMISSION managedit web ALLOWS tcp 80 80 FROM CIDR 0.0.0.0/0
>
>
> And the nova-compute logs:
>
> 2011-10-10 10:22:46,129 DEBUG nova.compute.manager [-] image_id=2,
>> image_size_bytes=1476395008, allowed_size_bytes=10737418240 from (pid=1156)
>> _check_image_size
>> /usr/lib/python2.7/dist-packages/nova/compute/manager.py:354
>> 2011-10-10 10:22:46,130 AUDIT nova.compute.manager
>> [54fe14bf-142e-42d0-8001-b314f9e1a194 kiall managedit] instance 42:
>> starting...
>> 2011-10-10 10:22:46,292 DEBUG nova.rpc [-] Making asynchronous call on
>> network ... from (pid=1156) multicall
>> /usr/lib/python2.7/dist-packages/nova/rpc/impl_kombu.py:721
>> 2011-10-10 10:22:46,292 DEBUG nova.rpc [-] MSG_ID is
>> 6dd965a7d04c43f5be475781541166dc from (pid=1156) multicall
>> /usr/lib/python2.7/dist-packages/nova/rpc/impl_kombu.py:724
>> 2011-10-10 10:22:46,706 ERROR nova.rpc [-] Exception during message
>> handling
>> (nova.rpc): TRACE: Traceback (most recent call last):
>> (nova.rpc): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/rpc/impl_kombu.py", line 620, in
>> _process_data
>> (nova.rpc): TRACE:     rval = node_func(context=ctxt, **node_args)
>> (nova.rpc): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/exception.py", line 98, in wrapped
>> (nova.rpc): TRACE:     return f(*args, **kw)
>> (nova.rpc): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 454, in
>> run_instance
>> (nova.rpc): TRACE:     self._run_instance(context, instance_id, **kwargs)
>> (nova.rpc): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 393, in
>> _run_instance
>> (nova.rpc): TRACE:     requested_networks=requested_networks)
>> (nova.rpc): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/network/api.py", line 162, in
>> allocate_for_instance
>> (nova.rpc): TRACE:     'args': args})
>> (nova.rpc): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/rpc/__init__.py", line 45, in call
>> (nova.rpc): TRACE:     return get_impl().call(context, topic, msg)
>> (nova.rpc): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/rpc/impl_kombu.py", line 739, in call
>> (nova.rpc): TRACE:     rv = list(rv)
>> (nova.rpc): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/rpc/impl_kombu.py", line 703, in
>> __iter__
>> (nova.rpc): TRACE:     raise result
>> (nova.rpc): TRACE: RemoteError: SecurityGroupNotFound Security group 6 not
>> found.
>> (nova.rpc): TRACE: [u'Traceback (most recent call last):\n', u'  File
>> "/usr/lib/python2.7/dist-packages/nova/rpc/impl_kombu.py", line 620, in
>> _process_data\n    rval = node_func(context=ctxt, **node_args)\n', u'  File
>> "/usr/lib/python2.7/dist-packages/nova/network/manager.py", line 221, in
>> allocate_for_instance\n    ips = super(FloatingIP,
>> self).allocate_for_instance(context, **kwargs)\n', u'  File
>> "/usr/lib/python2.7/dist-packages/nova/network/manager.py", line 444, in
>> allocate_for_instance\n    requested_networks=requested_networks)\n', u'
>>  File "/usr/lib/python2.7/dist-packages/nova/network/manager.py", line 171,
>> in _allocate_fixed_ips\n    vpn=vpn, address=address)\n', u'  File
>> "/usr/lib/python2.7/dist-packages/nova/network/manager.py", line 1032, in
>> allocate_fixed_ip\n    instance_id)\n', u'  File
>> "/usr/lib/python2.7/dist-packages/nova/network/manager.py", line 403, in
>> _do_trigger_security_group_members_refresh_for_instance\n    group_ids)\n',
>> u'  File "/usr/lib/python2.7/dist-packages/nova/compute/api.py", line 626,
>> in trigger_security_group_members_refresh\n
>>  rule[\'parent_group_id\'])\n', u'  File
>> "/usr/lib/python2.7/dist-packages/nova/db/api.py", line 1058, in
>> security_group_get\n    return IMPL.security_group_get(context,
>> security_group_id)\n', u'  File
>> "/usr/lib/python2.7/dist-packages/nova/db/sqlalchemy/api.py", line 119, in
>> wrapper\n    return f(*args, **kwargs)\n', u'  File
>> "/usr/lib/python2.7/dist-packages/nova/db/sqlalchemy/api.py", line 2700, in
>> security_group_get\n    security_group_id=security_group_id)\n',
>> u'SecurityGroupNotFound: Security group 6 not found.\n']
>> (nova.rpc): TRACE:
>> 2011-10-10 10:23:24,017 INFO nova.compute.manager [-] Found 2 in the
>> database and 1 on the hypervisor.
>
>
> Thanks,
> Kiall
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20111010/8c4fa2b3/attachment.html>