os_vif.plug() at cni fails with privsep issue when using ovs-firewall
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
kuryr-kubernetes |
Triaged
|
High
|
Antoni Segura Puimedon |
Bug Description
When deploying kuryr-kubernetes with ovs-firewall enabled I got some errors at the os_vif.plug() command triggered by the cni, which prevent the container to go to running state due to some privsep issues.
This is the error at the kubelet.log:
E0317 13:24:36.315148 29430 cni.go:209] Error while adding to cni network: Failed to plug VIF VIFOpenVSwitch(
File "/opt/stack/
vif = self._plugin.
File "/opt/stack/
self.
File "/opt/stack/
self.
File "/opt/stack/
self.
File "/opt/stack/
self.
File "/opt/stack/
self.
File "/opt/stack/
handler(event)
File "/opt/stack/
self.
File "/opt/stack/
self.
File "/opt/stack/
self.
File "/opt/stack/
os_
File "/usr/lib/
raise os_vif.
PlugException: Failed to plug VIF VIFOpenVSwitch(
The current workaround is:
- As os-vif.plug() is not really needed for ovs-firewall, just commenting out that os_vif.plug fix the problem:
#os_vif.plug(vif, instance_info) in /opt/stack/
Changed in kuryr-kubernetes: | |
importance: | Undecided → High |
status: | New → Triaged |
Changed in kuryr-kubernetes: | |
milestone: | none → pike-3 |
assignee: | nobody → Antoni Segura Puimedon (celebdor) |
The following was logged while running on Xenial: active= True,address= fa:16:3e: 09:e0:2d, bridge_ name='qbr3e519f d3-c6', has_traffic_ filtering= True,id= 3e519fd3- c671-4627- ba39-f9fcebf3d2 f3,network= Network( 483f2685- 846c-4a46- 83fc-9e5cc42434 51),plugin= 'ovs',port_ profile= VIFPortProfileO penVSwitch, preserve_ on_delete= False,vif_ name='tap3e519f d3-c6') plug /usr/local/ lib/python2. 7/dist- packages/ os_vif/ __init_ _.py:79 kuryr/kuryr. conf', '--privsep_ context' , 'vif_plug_ ovs.privsep. vif_plug' , '--privsep_ sock_path' , '/tmp/tmpw_ hQ_9/privsep. sock'] hQ_9/privsep. sock __init__ /usr/local/ lib/python2. 7/dist- packages/ oslo_privsep/ daemon. py:332 python2. 7/logging/ __init_ _.py", line 861, in emit lib/python2. 7/dist- packages/ oslo_log/ handlers. py", line 100, in format StreamHandler. format( self, record) python2. 7/logging/ __init_ _.py", line 734, in format lib/python2. 7/dist- packages/ oslo_log/ formatters. py", line 273, in format python2. 7/logging/ __init_ _.py", line 861, in emit lib/python2. 7/dist- packages/ oslo_log/ handlers. py", line 100, in format StreamHandler. format( self, record) python2. 7/logging/ __init_ _.py", line 734, in format lib/python2. 7/dist- packages/ oslo_log/ formatters. py", line 273, in format python2. 7/logging/ __init_ _.py", line 861, in emit lib/python2. 7/dist- packages/ oslo_log/ handlers. py", line 100, in format StreamHandler. format( self, record) python2. 7/logging/ __init_ _.py", line 734, in format lib/python2. 7/dist- packages/ oslo_log/ formatters. py", line 273, in format python2. 7/logging/ __init_ _.py", line 861, in emit lib/python2. 7/dist- packages/ oslo_log/ handlers. py", line 100, in format StreamHandler. format( self, record) python2. 7/logging/ __init_ _.py", line 734, in format lib/python2. 7/dist- packages/ oslo_log/ format. ..
2017-03-20 09:03:39.063 31121 DEBUG os_vif [-] Plugging vif VIFBridge(
2017-03-20 09:03:39.065 31121 INFO oslo.privsep.daemon [-] Running privsep helper: ['sudo', 'privsep-helper', '--config-file', u'/etc/
2017-03-20 09:03:39.480 31121 INFO oslo.privsep.daemon [-] Spawned new privsep daemon via rootwrap
2017-03-20 09:03:39.481 31121 DEBUG oslo.privsep.daemon [-] Accepted privsep connection to /tmp/tmpw_
Traceback (most recent call last):
File "/usr/lib/
msg = self.format(record)
File "/usr/local/
return logging.
File "/usr/lib/
return fmt.format(record)
File "/usr/local/
for arg in record.args:
TypeError: 'NoneType' object is not iterable
Logged from file daemon.py, line 506
Traceback (most recent call last):
File "/usr/lib/
msg = self.format(record)
File "/usr/local/
return logging.
File "/usr/lib/
return fmt.format(record)
File "/usr/local/
for arg in record.args:
TypeError: 'NoneType' object is not iterable
Logged from file daemon.py, line 395
Traceback (most recent call last):
File "/usr/lib/
msg = self.format(record)
File "/usr/local/
return logging.
File "/usr/lib/
return fmt.format(record)
File "/usr/local/
for arg in record.args:
TypeError: 'NoneType' object is not iterable
Logged from file daemon.py, line 414
Traceback (most recent call last):
File "/usr/lib/
msg = self.format(record)
File "/usr/local/
return logging.
File "/usr/lib/
return fmt.format(record)
File "/usr/local/