Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

inconsistent network quota in mitaka (nova, neutron or openstack CLI??)

 I am trying to make heads or tails out of the very weird quota configuration, depending on wether I use the openstack command, the nova command, or the neutron command.

Where the H....ECK, are they saved really, since it seems the havent really got the same view of whats actually configured for a project??

Check the below output, when using the different commands, for a normal user Student4, i project StackLab4.

The lab is running an up2date centos-release mitaka.

[root@ctrl ~(admin)]# openstack project show $LAB4
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description |                                  |
| domain_id   | 224263ec11a04d0e8976634a3c755fce |
| enabled     | True                             |
| id          | 8cc512ce5b83485993cd1133d0de40e6 |
| is_domain   | False                            |
| name        | StackLab4                        |
| parent_id   | 224263ec11a04d0e8976634a3c755fce |
+-------------+----------------------------------+
[lab5]:admin@admin
[root@ctrl ~(admin)]# openstack quota set --secgroups 2 --secgroup-rules 6 $LAB4
[lab5]:admin@admin
[root@ctrl ~(admin)]# openstack quota show $LAB4 | grep sec
| secgroup-rules       | 100                              |
| secgroups            | 10                               |
[lab5]:admin@admin
[root@ctrl ~(admin)]# . keystone_student4
[lab5]:student4@StackLab4
[root@ctrl ~(student4)]# SOS
OS_AUTH_URL=http://10.10.15.100:35357/v3
OS_IDENTITY_API_VERSION=3
OS_IMAGE_API_VERSION=2
OS_PASSWORD=student4
OS_PROJECT_DOMAIN_NAME=StudentCloud
OS_PROJECT_NAME=StackLab4
OS_REGION_NAME=RegionOne
OS_USERNAME=student4
OS_USER_DOMAIN_NAME=StudentCloud
[lab5]:student4@StackLab4
[root@ctrl ~(student4)]# neutron quota-show | grep sec
| security_group      | 10    |
| security_group_rule | 100   |
[lab5]:student4@StackLab4
[root@ctrl ~(student4)]# nova quota-show | grep sec
| security_groups             | 2     |
| security_group_rules        | 6     |
[lab5]:student4@StackLab4
[root@ctrl ~(student4)]# . keystone_admin
[lab5]:admin@admin
[root@ctrl ~(admin)]# neutron quota-update --tenant-id $LAB4 --security-group 15 --security-group-rule 64
+---------------------+-------+
| Field               | Value |
+---------------------+-------+
| floatingip          | 50    |
| healthmonitor       | -1    |
| l7policy            | -1    |
| listener            | -1    |
| loadbalancer        | 10    |
| network             | 10    |
| pool                | 10    |
| port                | 50    |
| rbac_policy         | 10    |
| router              | 10    |
| security_group      | 15    |
| security_group_rule | 64    |
| subnet              | 10    |
| subnetpool          | -1    |
+---------------------+-------+
[lab5]:admin@admin
[root@ctrl ~(admin)]# openstack quota show $LAB4 | grep sec
| secgroup-rules       | 64                               |
| secgroups            | 15                               |
[lab5]:admin@admin
[root@ctrl ~(admin)]# nova quota-show --tenant $LAB4  | grep sec
| security_groups             | 2     |
| security_group_rules        | 6     |
[lab5]:admin@admin
[root@ctrl ~(admin)]# nova quota-show --tenant $LAB4 | grep sec
| security_groups             | 2     |
| security_group_rules        | 6     |
[lab5]:admin@admin
[root@ctrl ~(admin)]# openstack quota set --secgroups 5 --secgroup-rules 12 $LAB4
[lab5]:admin@admin
[root@ctrl ~(admin)]# nova quota-show --tenant $LAB4
| security_groups             | 5     |
| security_group_rules        | 12    |


[lab5]:admin@admin
[root@ctrl ~(admin)]# openstack quota show $LAB4 | grep sec
| secgroup-rules       | 64                               |
| secgroups            | 15                               |
[lab5]:admin@admin
[root@ctrl ~(admin)]#