Port Security is required for Amphora driver to work

Bug #1927959 reported by Frode Nordahl
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Charms Deployment Guide
Fix Released
High
Peter Matulis
OpenStack Octavia Charm
In Progress
Medium
Frode Nordahl

Bug Description

In reference to:
https://bugzilla.redhat.com/show_bug.cgi?id=1907349
https://storyboard.openstack.org/#!/story/2008449

Port Security is required for successful operation of the Octavia Amphora provider driver. This should be reflected in the charm documentation and test gates.

Frode Nordahl (fnordahl)
Changed in charm-octavia:
status: New → In Progress
importance: Undecided → Medium
assignee: nobody → Frode Nordahl (fnordahl)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to charm-octavia (master)
Changed in charm-deployment-guide:
assignee: nobody → Peter Matulis (petermatulis)
importance: Undecided → High
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to charm-deployment-guide (master)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to charm-deployment-guide (master)

Reviewed: https://review.opendev.org/c/openstack/charm-deployment-guide/+/793198
Committed: https://opendev.org/openstack/charm-deployment-guide/commit/52201ec71824331131b125725481eec74c11d13d
Submitter: "Zuul (22348)"
Branch: master

commit 52201ec71824331131b125725481eec74c11d13d
Author: Peter Matulis <email address hidden>
Date: Wed May 26 11:50:16 2021 -0400

    Add port security to Octavia deploy

    The Octavia deploy steps need to enable port security
    for the neutron-api charm.

    Partial-Bug: #1927959
    Change-Id: I22e17834be2cc56e54a8f3a2b81827c88b82b35d

Changed in charm-deployment-guide:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to charm-octavia (master)

Reviewed: https://review.opendev.org/c/openstack/charm-octavia/+/790554
Committed: https://opendev.org/openstack/charm-octavia/commit/d5b9859741829adc403b8078999bbc9998ec6611
Submitter: "Zuul (22348)"
Branch: master

commit d5b9859741829adc403b8078999bbc9998ec6611
Author: Frode Nordahl <email address hidden>
Date: Mon May 10 15:16:53 2021 +0200

    Enable OVN L4 provider from Victoria onward

    The driver is unreliable at Ussuri.

    Also ensure we restart the ovn-driver-agent when configuration is
    written to disk.

    Ensure Port Security is enabled as this is a requirement for
    reliable operation of the Amphora driver also exercised by the
    functional tests.

    Enable focal/groovy-victoria gates and re-enable Ussuri OVS gate.

    Closes-Bug: #1927960
    Closes-Bug: #1927962
    Related-Bug: #1927959
    Change-Id: I1bafd9eecb83aefb425bc5286f23d47c0885ac8e

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to charm-octavia (stable/21.04)

Related fix proposed to branch: stable/21.04
Review: https://review.opendev.org/c/openstack/charm-octavia/+/801253

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on charm-octavia (stable/21.04)

Change abandoned by "Aurelien Lourot <email address hidden>" on branch: stable/21.04
Review: https://review.opendev.org/c/openstack/charm-octavia/+/801253
Reason: 21.10 has been released meanwhile

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.