Cisco Bug: CSCvt61417 - Deploying a Template referencing an undeployed Template can delete name-overlapped site MOs
Jun 11, 2020
- Cisco Application Policy Infrastructure Controller (APIC)
Known Affected Releases
Symptom: Contracts defined within the Template that was deleted (which overlap with associated sites by name) will be deleted, even though that Template was never deployed. If these contracts are being referenced by EPGs forwarding traffic, this will result in contract drops. Conditions: Template1: T1 has an EPG within tenant-A. This EPG is referencing T2 contract "vz1" with cons/prov relations. Template2: T2 has contract vz1 defined in tenant-B, however it has never been deployed to Site1. Site1: Already has contracts configured within tn-2 named "vz1", however this was done manually in APIC, not pushed by MSO When T1 is deployed, it will push the EPG as well as the cons/prov relation to "vz1" within tn-A. Since contract vz1 already exists within tn-B, this will not flag any faults on the site. Since T2 was never deployed, it is still in a state where it can be deleted from MSO. In the above scenario, if the following steps are taken: 1. Remove vz1 reference from T1 EPGs 2. Delete T2 3. Redeploy T1 Any contracts which overlap within the site and tempalte T2 which were reference by T1 will be deleted by name.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases