python-neutronclient

neutron-fwaas osc plugin don't allow to create fw rules with some of the protocol types allowed by the fwaas plugin

Bug #2142479 reported by Slawek Kaplonski
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
python-neutronclient
Fix Released
Low
Slawek Kaplonski

Bug Description

FWaaS OSC plugin which is in the neutronclient allows to choose only one of the: 'tcp', 'udp', 'icmp', 'any' as protocol type. But actually server accepts more choices like e.g. ipv6-icmp.
For security groups client is not doing any validation and let server to validate if the provided value is correct. FWaaS client plugin should behave in the same way.

Tags: fwaas
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-neutronclient (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/python-neutronclient/+/977690

Changed in python-neutronclient:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-neutronclient (master)

Reviewed: https://review.opendev.org/c/openstack/python-neutronclient/+/977690
Committed: https://opendev.org/openstack/python-neutronclient/commit/f7c085005de1ec98656c904a4d90fe833044ae9e
Submitter: "Zuul (22348)"
Branch: master

commit f7c085005de1ec98656c904a4d90fe833044ae9e
Author: Slawek Kaplonski <email address hidden>
Date: Mon Feb 23 16:39:28 2026 +0100

    [FWaaS] Remove client side protocol validation

    There is no need to limit available choices for the firewall rule's
    protocol on the client side. Neutron-fwaas plugin on the server side
    will do the validation in the same way as for security group rules.
    And for SG rules OSC is not validating nor limiting choices on the
    client's side at all.

    Closes-bug: #2142479

    Change-Id: I8c02a2232601c2ab6655c458aa0365102b3b5e2d
    Signed-off-by: Slawek Kaplonski <email address hidden>

Changed in python-neutronclient:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/python-neutronclient 11.8.0

This issue was fixed in the openstack/python-neutronclient 11.8.0 Gazpacho release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.