Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

All ACL rules deletion, ACL table deletion and single ACL rule deletion not working #57

Closed
Tejaswi-Goel opened this issue Aug 2, 2019 · 7 comments
Assignees

Comments

@Tejaswi-Goel
Copy link
Collaborator

Tejaswi-Goel commented Aug 2, 2019

gnmi commands used:

To delete all rules: ./gnmi_set -delete /openconfig-acl:acl -target_addr 127.0.0.1:8080 -alsologtostderr -insecure true -pretty

To delete an ACL table: ./gnmi_set -delete /openconfig-acl:acl/acl-sets/acl-set[name=MyACL1][type=ACL_IPV4] -target_addr 127.0.0.1:8080 -alsologtostderr -insecure true -pretty

To delete a single rule: ./gnmi_set -delete /openconfig-acl:acl/acl-sets/acl-set[name=MyACL1][type=ACL_IPV4]/acl-entries/acl-entry[sequence-id=1] -target_addr 127.0.0.1:8080 -alsologtostderr -insecure true -pretty

@seiferteric
Copy link

Here are delete logs for single acl-set:

I0802 16:32:08.875809   26151 server.go:215] Delete path: elem:<name:"openconfig-acl:acl" > elem:<name:"acl-sets" > elem:<name:"acl-set" key:<key:"name" value:"MyACL1" > key:<key:"type" value:"ACL_IPV4" > > 
I0802 16:32:08.875861   26151 translib.go:329] Delete request received with path =/openconfig-acl:acl/acl-sets/acl-set[name=MyACL1][type=ACL_IPV4]
I0802 16:32:08.875868   26151 app_interface.go:116] getAppModule called for path =/openconfig-acl:acl/acl-sets/acl-set[name=MyACL1][type=ACL_IPV4]
I0802 16:32:08.875873   26151 app_interface.go:123] found the entry in the map for path =/openconfig-acl:acl
I0802 16:32:08.875878   26151 app_interface.go:154] cast to appInterface worked&{<nil> <nil> <nil> <nil> <nil> map[] map[] false false false}
I0802 16:32:08.876160   26151 acl_app.go:105] initialize:acl:path =/openconfig-acl:acl/acl-sets/acl-set[name=MyACL1][type=ACL_IPV4]
I0802 16:32:08.876202   26151 db.go:307] NewDB: Init indication not requested
I0802 16:32:08.876209   26151 acl_app.go:155] translateDelete:acl:path =/openconfig-acl:acl/acl-sets/acl-set{name}{type}
I0802 16:32:08.876906   26151 acl_app.go:305] processCommon--Path Received: /openconfig-acl:acl/acl-sets/acl-set{name}{type}
I0802 16:32:08.876928   26151 acl_app.go:308] processCommon: Target object is a <ptr> of Type: OpenconfigAcl_Acl_AclSets_AclSet
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:32:08.882196   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:32:08.882224   26151 db.go:528] doCVL: 1 1
W0802 16:32:08.882235   26151 db.go:460] DeleteKeys: Deleting: ts: &{ACL_RULE 0} key{ Comp: [MyACL1_ACL_IPV4 RULE_5] } : Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:32:08.882731   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:32:08.882746   26151 db.go:528] doCVL: 1 1
W0802 16:32:08.882752   26151 db.go:460] DeleteKeys: Deleting: ts: &{ACL_RULE 0} key{ Comp: [MyACL1_ACL_IPV4 RULE_4] } : Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:32:08.883599   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:32:08.883620   26151 db.go:528] doCVL: 1 1
W0802 16:32:08.883627   26151 db.go:460] DeleteKeys: Deleting: ts: &{ACL_RULE 0} key{ Comp: [MyACL1_ACL_IPV4 RULE_3] } : Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:32:08.884075   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:32:08.884084   26151 db.go:528] doCVL: 1 1
W0802 16:32:08.884090   26151 db.go:460] DeleteKeys: Deleting: ts: &{ACL_RULE 0} key{ Comp: [MyACL1_ACL_IPV4 RULE_2] } : Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:32:08.884574   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:32:08.884589   26151 db.go:528] doCVL: 1 1
W0802 16:32:08.884595   26151 db.go:460] DeleteKeys: Deleting: ts: &{ACL_RULE 0} key{ Comp: [MyACL1_ACL_IPV4 DEFAULT_RULE] } : Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:32:08.885298   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:32:08.885314   26151 db.go:528] doCVL: 1 1
W0802 16:32:08.885338   26151 db.go:460] DeleteKeys: Deleting: ts: &{ACL_RULE 0} key{ Comp: [MyACL1_ACL_IPV4 RULE_1] } : Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
E0802 16:32:08.885391   26151 acl_app.go:264] Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
I0802 16:32:08.885418   26151 db.go:1280] AbortTx: No SET|DEL done, txState: txStateWatch
I0802 16:32:08.886786   26151 transl_utils.go:112] DELETE operation failed with error =1

@seiferteric
Copy link

Here are delete logs for whole acl table:

I0802 16:33:30.632512   26151 server.go:215] Delete path: elem:<name:"openconfig-acl:acl" > 
I0802 16:33:30.632564   26151 translib.go:329] Delete request received with path =/openconfig-acl:acl
I0802 16:33:30.632688   26151 app_interface.go:116] getAppModule called for path =/openconfig-acl:acl
I0802 16:33:30.632706   26151 app_interface.go:123] found the entry in the map for path =/openconfig-acl:acl
I0802 16:33:30.632717   26151 app_interface.go:154] cast to appInterface worked&{<nil> <nil> <nil> <nil> <nil> map[] map[] false false false}
I0802 16:33:30.632821   26151 acl_app.go:105] initialize:acl:path =/openconfig-acl:acl
I0802 16:33:30.632860   26151 db.go:307] NewDB: Init indication not requested
I0802 16:33:30.632877   26151 acl_app.go:155] translateDelete:acl:path =/openconfig-acl:acl
I0802 16:33:30.633518   26151 acl_app.go:305] processCommon--Path Received: /openconfig-acl:acl
I0802 16:33:30.633553   26151 acl_app.go:308] processCommon: Target object is a <ptr> of Type: OpenconfigAcl_Acl
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.634349   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.634372   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.634430   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.634946   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.634968   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.634992   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.635558   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.635580   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.635608   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.636188   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.636209   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.636233   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.636738   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.636762   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.636821   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.637329   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.637351   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.637375   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.637869   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.637884   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.637901   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.638324   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.638339   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.638353   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.638774   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.638789   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.638807   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.639211   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.639225   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.639238   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.639626   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.639635   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.639648   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.640043   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.640058   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.640072   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.640469   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.640483   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.640496   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.640867   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.640882   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.640899   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.641290   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.641299   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.641318   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.641661   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.641675   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.641691   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.642047   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.642058   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.642074   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0802 16:33:30.642426   26151 db.go:524] doCVL: CVL Failure: 1014
E0802 16:33:30.642444   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.642462   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
E0802 16:33:30.642714   26151 util.go:141] Delete will violate the constraint as entry ACL_TABLE is referred in ACL_RULE|MyACL1_ACL_IPV4|DEFAULT_RULE
E0802 16:33:30.642732   26151 db.go:524] doCVL: CVL Failure: 1002
E0802 16:33:30.642743   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.642756   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,002: { 1,002 Config Validation Semantic Error []     }
E0802 16:33:30.642850   26151 util.go:141] Delete will violate the constraint as entry ACL_TABLE is referred in ACL_RULE|MyACL3_ACL_IPV4|DEFAULT_RULE
E0802 16:33:30.642859   26151 db.go:524] doCVL: CVL Failure: 1002
E0802 16:33:30.642865   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.642876   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,002: { 1,002 Config Validation Semantic Error []     }
E0802 16:33:30.643027   26151 util.go:141] Delete will violate the constraint as entry ACL_TABLE is referred in ACL_RULE|MyACL2_ACL_IPV4|DEFAULT_RULE
E0802 16:33:30.643039   26151 db.go:524] doCVL: CVL Failure: 1002
E0802 16:33:30.643047   26151 db.go:528] doCVL: 1 1
W0802 16:33:30.643058   26151 db.go:877] DeleteTable: DeleteEntry: Translib Redis Error: CVL Failure: 1,002: { 1,002 Config Validation Semantic Error []     }
I0802 16:33:30.643073   26151 db.go:1142] CommitTx: No SET|DEL done, txState: txStateWatch

@Tejaswi-Goel Tejaswi-Goel changed the title ACL rules all deletion, ACL table deletion and single ACL rule deletion not working All ACL rules deletion, ACL table deletion and single ACL rule deletion not working Aug 2, 2019
@maheshwari-mayank
Copy link
Collaborator

This is same issue of CVL as reported earlier. Please confirm, if it is merged to master branch. If so then please close this.

@seiferteric
Copy link

I am still having some problem deleting either individual or all ACLs via gnmi. It is complaining about MyACL1 constraints, but I am trying to delete MyACL3... This is the result of trying to delete a single acl-set with gnmi command: ./gnmi_set -delete /openconfig-acl:acl/acl-sets/acl-set[name=MyACL3][type=ACL_IPV4] -target_addr 127.0.0.1:8080 -insecure

I0803 00:35:45.070522    3620 server.go:215] Delete path: elem:<name:"openconfig-acl:acl" > elem:<name:"acl-sets" > elem:<name:"acl-set" key:<key:"name" value:"MyACL3" > key:<key:"type" value:"ACL_IPV4" > > 
I0803 00:35:45.070615    3620 translib.go:318] Delete request received with path =/openconfig-acl:acl/acl-sets/acl-set[name=MyACL3][type=ACL_IPV4]
I0803 00:35:45.070629    3620 app_interface.go:116] getAppModule called for path =/openconfig-acl:acl/acl-sets/acl-set[name=MyACL3][type=ACL_IPV4]
I0803 00:35:45.070641    3620 app_interface.go:123] found the entry in the map for path =/openconfig-acl:acl
I0803 00:35:45.070652    3620 app_interface.go:154] cast to appInterface worked&{<nil> <nil> <nil> <nil> <nil> map[] map[] false false false}
I0803 00:35:45.070871    3620 acl_app.go:105] initialize:acl:path =/openconfig-acl:acl/acl-sets/acl-set[name=MyACL3][type=ACL_IPV4]
I0803 00:35:45.071008    3620 db.go:310] NewDB: Init indication not requested
I0803 00:35:45.071022    3620 acl_app.go:155] translateDelete:acl:path =/openconfig-acl:acl/acl-sets/acl-set{name}{type}
I0803 00:35:45.071673    3620 acl_app.go:305] processCommon--Path Received: /openconfig-acl:acl/acl-sets/acl-set{name}{type}
I0803 00:35:45.071706    3620 acl_app.go:308] processCommon: Target object is a <ptr> of Type: OpenconfigAcl_Acl_AclSets_AclSet
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0803 00:35:45.072321    3620 db.go:532] doCVL: CVL Failure: 1014
E0803 00:35:45.072344    3620 db.go:536] doCVL: 1 1
W0803 00:35:45.072355    3620 db.go:463] DeleteKeys: Deleting: ts: &{ACL_RULE 0} key{ Comp: [MyACL3_ACL_IPV4 RULE_5] } : Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0803 00:35:45.072773    3620 db.go:532] doCVL: CVL Failure: 1014
E0803 00:35:45.072797    3620 db.go:536] doCVL: 1 1
W0803 00:35:45.072811    3620 db.go:463] DeleteKeys: Deleting: ts: &{ACL_RULE 0} key{ Comp: [MyACL3_ACL_IPV4 RULE_2] } : Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0803 00:35:45.073216    3620 db.go:532] doCVL: CVL Failure: 1014
E0803 00:35:45.073238    3620 db.go:536] doCVL: 1 1
W0803 00:35:45.073251    3620 db.go:463] DeleteKeys: Deleting: ts: &{ACL_RULE 0} key{ Comp: [MyACL3_ACL_IPV4 RULE_4] } : Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0803 00:35:45.073607    3620 db.go:532] doCVL: CVL Failure: 1014
E0803 00:35:45.073622    3620 db.go:536] doCVL: 1 1
W0803 00:35:45.073631    3620 db.go:463] DeleteKeys: Deleting: ts: &{ACL_RULE 0} key{ Comp: [MyACL3_ACL_IPV4 DEFAULT_RULE] } : Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0803 00:35:45.073995    3620 db.go:532] doCVL: CVL Failure: 1014
E0803 00:35:45.074011    3620 db.go:536] doCVL: 1 1
W0803 00:35:45.074021    3620 db.go:463] DeleteKeys: Deleting: ts: &{ACL_RULE 0} key{ Comp: [MyACL3_ACL_IPV4 RULE_1] } : Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
libyang[0]: Must condition "(/sonic-common:operation/sonic-common:operation != 'DELETE') or count(../../ACL_TABLE[aclname=current()]/ports) = 0" not satisfied. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
libyang[0]: Ports are already bound to this rule. (path: /sonic-acl:sonic-acl/ACL_RULE[aclname='MyACL1_ACL_IPV4'][rulename='DEFAULT_RULE']/aclname)
E0803 00:35:45.074417    3620 db.go:532] doCVL: CVL Failure: 1014
E0803 00:35:45.074445    3620 db.go:536] doCVL: 1 1
W0803 00:35:45.074457    3620 db.go:463] DeleteKeys: Deleting: ts: &{ACL_RULE 0} key{ Comp: [MyACL3_ACL_IPV4 RULE_3] } : Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
E0803 00:35:45.074482    3620 acl_app.go:264] Translib Redis Error: CVL Failure: 1,014: {ACL_RULE 1,014 Dependent Data is missing ['MyACL1_ACL_IPV4' 'DEFAULT_RULE']  aclname Dependent data validation failed for table ACL_RULE with keys['MyACL1_ACL_IPV4' 'DEFAULT_RULE' ] Ports are already bound to this rule. }
I0803 00:35:45.074518    3620 db.go:1288] AbortTx: No SET|DEL done, txState: txStateWatch
I0803 00:35:45.074777    3620 transl_utils.go:112] DELETE operation failed with error =1

@jeff-yin
Copy link
Collaborator

jeff-yin commented Aug 5, 2019

@maheshwari-mayank ^ see above

@dutta-partha
Copy link
Collaborator

dutta-partha commented Aug 6, 2019

This changes have been merged to 'master' branch recently. Please check it again.

@Tejaswi-Goel
Copy link
Collaborator Author

All 3 deletes working fine, closing this issue.

joyas-joseph pushed a commit that referenced this issue Nov 12, 2020
CLI handler for 'ip access-list XYZ' was not sednding RESTCONF compliant
payload earlier. New ygot code does not accept it. Modified the actioner
to use 'PATCH /restconf/data/openconfig-acl:acl/acl-sets/acl-set'
request with correct payload.
sameerdell pushed a commit that referenced this issue Mar 3, 2022
…-path-list (#57)

* check if deleting as-path-list rules means deleting the as-path-list

* snc-17101: deleting as-path rule needs to match the action first

* pass cliclient as an input parameter
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants