octavia/releasenotes/notes/fix-duplicate-sg-creation-0c502a5d2d8c276d.yaml
Hemanth Nakkina 151a943210 Fix duplicate SG creation for listener peer port
In cases where the listener protcol port is same as the peer port
and allowed_cidr set to 0.0.0.0/0 explicitly, the listener is not
provisioned due to duplicate security group creation for peer port
with None as remote_ip_prefix. Neutron SG defaults remote_ip_prefix
to 0.0.0.0/0 if not specified or None and hence the error SG rule
already exists.

Remove the duplicate entry from the updated_ports.

Story: #2009117
Change-Id: I9dbdb71e9b94bbcc75766a8687a996d5358f3381
2021-09-12 08:00:44 +05:30

10 lines
420 B
YAML

---
fixes:
- |
Fixes loadbalancer creation failure when one of the listener port matches
with the octavia generated peer ports and the allowed_cidr is explicitly
set to 0.0.0.0/0 on the listener. This is due to creation of two security
group rules with remote_ip_prefix as None and remote_ip_prefix as 0.0.0.0/0
which neutron rejects the second request with security group rule already
exists.