fix openstack cleanup (#11410)

Signed-off-by: Kay Yan <kay.yan@daocloud.io>
Co-authored-by: Kay Yan <kay.yan@daocloud.io>

.gitlab-ci.yml

@@ -79,7 +79,7 @@ ci-not-authorized:
   after_script: []
   rules:
     # LGTM or ok-to-test labels
-    - if: $PR_LABELS =~ /.*,(lgtm|ok-to-test).*|^(lgtm|ok-to-test).*/i
+    - if: $PR_LABELS =~ /.*,(lgtm|approved|ok-to-test).*|^(lgtm|approved|ok-to-test).*/i
       variables:
         CI_OK_TO_TEST: '0'
       when: always

scripts/openstack-cleanup/main.py

@@ -38,8 +38,15 @@ def main():
                conn.compute.servers())
 
     print('Security groups...')
-    map_if_old(conn.network.delete_security_group,
-               conn.network.security_groups())
+    try:
+        map_if_old(conn.network.delete_security_group,
+                conn.network.security_groups())
+    except openstack.exceptions.ConflictException as ex:
+        # Need to delete port when security groups is in used
+        map_if_old(conn.network.delete_port,
+                   conn.network.ports())
+        map_if_old(conn.network.delete_security_group,
+                conn.network.security_groups())
 
     print('Ports...')
     try: