charm-ovn-dedicated-chassis

  1. Bug #1858416
  2. Comment #5

Comment 5 for bug 1858416

Revision history for this message
Florian Guitton (f-guitton) wrote : Re: ovn-chassis node not registering itself

Hello everybody,

Has anyone got any news about this issue ? We are encountering the same problem.
It would seem that the root cause is SSL validation and the charm might not be appropriately seting the Root CA from Vault on all nodes. We use Self-signed Root CA and no connections could be verified between any of the ovn-chassis/ovn-central and the system stalls.

Adding manually the certificate seem to have allowed us to get the northd to start running. But we are still experiencing large numbers of "connection dropped (Protocol error)" all over the place.

This is all the more strange considering that the cert place in /etc/ovn/ seem to check out:

root@od-13: ~# openssl verify -CAfile <(cat /etc/ovn/ovn-chassis.crt) /etc/ovn/cert_host
/etc/ovn/cert_host: OK
root@od-13: ~# openssl verify -CAfile <(cat /etc/ssl/certs/Imperial_DSI_Root_CA.pem) /etc/ovn/ovn-chassis.crt
/etc/ovn/ovn-chassis.crt: OK