| 2021-11-17 17:28:33 |
Jakub Libosvar |
bug |
|
|
added bug |
| 2021-11-17 17:28:40 |
Jakub Libosvar |
neutron: assignee |
|
Jakub Libosvar (libosvar) |
|
| 2021-11-17 18:00:05 |
OpenStack Infra |
neutron: status |
New |
In Progress |
|
| 2021-11-18 17:10:20 |
OpenStack Infra |
neutron: status |
In Progress |
Fix Released |
|
| 2021-11-24 06:35:25 |
OpenStack Infra |
tags |
|
in-stable-xena |
|
| 2021-11-24 06:35:32 |
OpenStack Infra |
tags |
in-stable-xena |
in-stable-wallaby in-stable-xena |
|
| 2021-11-26 19:50:57 |
OpenStack Infra |
tags |
in-stable-wallaby in-stable-xena |
in-stable-ussuri in-stable-wallaby in-stable-xena |
|
| 2021-11-26 21:42:02 |
OpenStack Infra |
tags |
in-stable-ussuri in-stable-wallaby in-stable-xena |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena |
|
| 2022-01-14 14:50:44 |
Bernard Cafarelli |
tags |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena neutron-proactive-backport-potential |
|
| 2022-01-21 08:31:29 |
Slawek Kaplonski |
tags |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena neutron-proactive-backport-potential |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena |
|
| 2023-03-28 14:38:00 |
Edward Hope-Morley |
bug task added |
|
cloud-archive |
|
| 2023-03-28 14:39:19 |
Edward Hope-Morley |
nominated for series |
|
cloud-archive/yoga |
|
| 2023-03-28 14:39:19 |
Edward Hope-Morley |
bug task added |
|
cloud-archive/yoga |
|
| 2023-03-28 14:39:19 |
Edward Hope-Morley |
nominated for series |
|
cloud-archive/zed |
|
| 2023-03-28 14:39:19 |
Edward Hope-Morley |
bug task added |
|
cloud-archive/zed |
|
| 2023-03-28 14:39:19 |
Edward Hope-Morley |
nominated for series |
|
cloud-archive/ussuri |
|
| 2023-03-28 14:39:19 |
Edward Hope-Morley |
bug task added |
|
cloud-archive/ussuri |
|
| 2023-03-28 14:39:19 |
Edward Hope-Morley |
nominated for series |
|
cloud-archive/victoria |
|
| 2023-03-28 14:39:19 |
Edward Hope-Morley |
bug task added |
|
cloud-archive/victoria |
|
| 2023-03-28 14:39:19 |
Edward Hope-Morley |
nominated for series |
|
cloud-archive/wallaby |
|
| 2023-03-28 14:39:19 |
Edward Hope-Morley |
bug task added |
|
cloud-archive/wallaby |
|
| 2023-03-28 14:39:19 |
Edward Hope-Morley |
nominated for series |
|
cloud-archive/xena |
|
| 2023-03-28 14:39:19 |
Edward Hope-Morley |
bug task added |
|
cloud-archive/xena |
|
| 2023-03-28 14:41:06 |
Edward Hope-Morley |
cloud-archive/zed: status |
New |
Fix Released |
|
| 2023-03-28 14:41:13 |
Edward Hope-Morley |
cloud-archive/yoga: status |
New |
Fix Released |
|
| 2023-03-28 15:08:27 |
Edward Hope-Morley |
cloud-archive/xena: status |
New |
Fix Released |
|
| 2023-03-28 15:08:51 |
Edward Hope-Morley |
cloud-archive/wallaby: status |
New |
Fix Released |
|
| 2023-03-28 15:09:23 |
Edward Hope-Morley |
cloud-archive/victoria: status |
New |
Fix Released |
|
| 2023-03-28 17:45:17 |
Jorge Rodríguez |
bug |
|
|
added subscriber Jorge Rodríguez |
| 2023-03-31 09:24:56 |
Edward Hope-Morley |
description |
OVN introduced a new column in ACL table. The column name is label and when running db-sync script, we compare ACL generated by the ovn mech driver from Neutron DB with the actual ACLs in the OVN DB. Because of the new label column, everything seems like a new ACL because the column differs to what Neutron generated. Thus the script attempts to create a new ACL that already exists.
b'Traceback (most recent call last):'
b' File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func'
b' return f(self, *args, **kwargs)'
b' File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func'
b' return f(self, *args, **kwargs)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1547, in test_ovn_nb_sync_repair'
b" self._test_ovn_nb_sync_helper('repair')"
b' File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1543, in _test_ovn_nb_sync_helper'
b' self._sync_resources(mode)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1523, in _sync_resources'
b' nb_synchronizer.do_sync()'
b' File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 104, in do_sync'
b' self.sync_acls(ctx)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 288, in sync_acls'
b' txn.add(self.ovn_api.pg_acl_add(**acla))'
b' File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__'
b' next(self.gen)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/ovsdb/impl_idl_ovn.py", line 230, in transaction'
b' yield t'
b' File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__'
b' next(self.gen)'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 110, in transaction'
b' del self._nested_txns_map[cur_thread_id]'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 61, in __exit__'
b' self.result = self.commit()'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 65, in commit'
b' raise result.ex'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/connection.py", line 131, in run'
b' txn.results.put(txn.do_commit())'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 93, in do_commit'
b' command.run_idl(txn)'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/schema/ovn_northbound/commands.py", line 124, in run_idl'
b' self.direction, self.priority, self.match))'
b'RuntimeError: ACL (from-lport, 1001, inport == @neutron_pg_drop && ip) already exists' |
[Impact]
Backport fix to Focal/Ussuri so that neutron-ovn-db-sync-util does not trip up when it finds ovn ACL table entries with a "label" column that does not exist in neutron db.
[Test Plan]
* Deploy Openstack Ussuri
* Create a network with security groups
* Create an instance using this network so that ports get tied to SGs
* Go to neutron-api unit (neutron-server) and do the following
* cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.no_keystone_authtoken
* remove "auth_section = keystone_authtoken" in the [nova] section of neutron.conf.no_keystone_authtoken
* run 'neutron-ovn-db-sync-util --config-file /etc/neutron/neutron.conf.no_keystone_authtoken --config-file /etc/neutron/plugins/ml2/ml2_conf.ini --ovn-neutron_sync_mode repair'
* the above should not produce any errors like the following:
RuntimeError: ACL ... already exists
[Regression Potential]
there is no regression potential expected with this patch.
--------------------------------------------------------------------------
OVN introduced a new column in ACL table. The column name is label and when running db-sync script, we compare ACL generated by the ovn mech driver from Neutron DB with the actual ACLs in the OVN DB. Because of the new label column, everything seems like a new ACL because the column differs to what Neutron generated. Thus the script attempts to create a new ACL that already exists.
b'Traceback (most recent call last):'
b' File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func'
b' return f(self, *args, **kwargs)'
b' File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func'
b' return f(self, *args, **kwargs)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1547, in test_ovn_nb_sync_repair'
b" self._test_ovn_nb_sync_helper('repair')"
b' File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1543, in _test_ovn_nb_sync_helper'
b' self._sync_resources(mode)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1523, in _sync_resources'
b' nb_synchronizer.do_sync()'
b' File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 104, in do_sync'
b' self.sync_acls(ctx)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 288, in sync_acls'
b' txn.add(self.ovn_api.pg_acl_add(**acla))'
b' File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__'
b' next(self.gen)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/ovsdb/impl_idl_ovn.py", line 230, in transaction'
b' yield t'
b' File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__'
b' next(self.gen)'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 110, in transaction'
b' del self._nested_txns_map[cur_thread_id]'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 61, in __exit__'
b' self.result = self.commit()'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 65, in commit'
b' raise result.ex'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/connection.py", line 131, in run'
b' txn.results.put(txn.do_commit())'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 93, in do_commit'
b' command.run_idl(txn)'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/schema/ovn_northbound/commands.py", line 124, in run_idl'
b' self.direction, self.priority, self.match))'
b'RuntimeError: ACL (from-lport, 1001, inport == @neutron_pg_drop && ip) already exists' |
|
| 2023-03-31 09:25:07 |
Edward Hope-Morley |
bug task added |
|
neutron (Ubuntu) |
|
| 2023-03-31 09:25:21 |
Edward Hope-Morley |
nominated for series |
|
Ubuntu Focal |
|
| 2023-03-31 09:25:21 |
Edward Hope-Morley |
bug task added |
|
neutron (Ubuntu Focal) |
|
| 2023-03-31 09:27:13 |
Edward Hope-Morley |
summary |
OVN db sync script fails with OVN schema that has label column in ACL table |
[SRU] OVN db sync script fails with OVN schema that has label column in ACL table |
|
| 2023-03-31 09:28:43 |
Edward Hope-Morley |
attachment added |
|
lp1951296.debdiff https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/1951296/+attachment/5659459/+files/lp1951296.debdiff |
|
| 2023-03-31 09:52:57 |
Dariusz Gadomski |
tags |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena se se-sponsor-dgadomski |
|
| 2023-03-31 10:09:41 |
Edward Hope-Morley |
merge proposal linked |
|
https://code.launchpad.net/~hopem/ubuntu/+source/neutron/+git/neutron/+merge/440128 |
|
| 2023-03-31 10:11:22 |
Launchpad Janitor |
merge proposal linked |
|
https://code.launchpad.net/~hopem/ubuntu/+source/neutron/+git/neutron/+merge/440129 |
|
| 2023-03-31 10:11:51 |
Edward Hope-Morley |
attachment removed |
lp1951296.debdiff https://bugs.launchpad.net/neutron/+bug/1951296/+attachment/5659459/+files/lp1951296.debdiff |
|
|
| 2023-03-31 15:33:50 |
James Page |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2023-04-01 12:33:04 |
Edward Hope-Morley |
description |
[Impact]
Backport fix to Focal/Ussuri so that neutron-ovn-db-sync-util does not trip up when it finds ovn ACL table entries with a "label" column that does not exist in neutron db.
[Test Plan]
* Deploy Openstack Ussuri
* Create a network with security groups
* Create an instance using this network so that ports get tied to SGs
* Go to neutron-api unit (neutron-server) and do the following
* cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.no_keystone_authtoken
* remove "auth_section = keystone_authtoken" in the [nova] section of neutron.conf.no_keystone_authtoken
* run 'neutron-ovn-db-sync-util --config-file /etc/neutron/neutron.conf.no_keystone_authtoken --config-file /etc/neutron/plugins/ml2/ml2_conf.ini --ovn-neutron_sync_mode repair'
* the above should not produce any errors like the following:
RuntimeError: ACL ... already exists
[Regression Potential]
there is no regression potential expected with this patch.
--------------------------------------------------------------------------
OVN introduced a new column in ACL table. The column name is label and when running db-sync script, we compare ACL generated by the ovn mech driver from Neutron DB with the actual ACLs in the OVN DB. Because of the new label column, everything seems like a new ACL because the column differs to what Neutron generated. Thus the script attempts to create a new ACL that already exists.
b'Traceback (most recent call last):'
b' File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func'
b' return f(self, *args, **kwargs)'
b' File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func'
b' return f(self, *args, **kwargs)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1547, in test_ovn_nb_sync_repair'
b" self._test_ovn_nb_sync_helper('repair')"
b' File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1543, in _test_ovn_nb_sync_helper'
b' self._sync_resources(mode)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1523, in _sync_resources'
b' nb_synchronizer.do_sync()'
b' File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 104, in do_sync'
b' self.sync_acls(ctx)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 288, in sync_acls'
b' txn.add(self.ovn_api.pg_acl_add(**acla))'
b' File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__'
b' next(self.gen)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/ovsdb/impl_idl_ovn.py", line 230, in transaction'
b' yield t'
b' File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__'
b' next(self.gen)'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 110, in transaction'
b' del self._nested_txns_map[cur_thread_id]'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 61, in __exit__'
b' self.result = self.commit()'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 65, in commit'
b' raise result.ex'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/connection.py", line 131, in run'
b' txn.results.put(txn.do_commit())'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 93, in do_commit'
b' command.run_idl(txn)'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/schema/ovn_northbound/commands.py", line 124, in run_idl'
b' self.direction, self.priority, self.match))'
b'RuntimeError: ACL (from-lport, 1001, inport == @neutron_pg_drop && ip) already exists' |
[Impact]
Backport fix to Focal/Ussuri so that neutron-ovn-db-sync-util does not trip up when it finds ovn ACL table entries with a "label" column that does not exist in neutron db.
[Test Plan]
* Deploy Openstack Ussuri
* Upgrade OVN to 22.03 (https://charmhub.io/ovn-chassis/configure?channel=22.03/stable#ovn-source)
* Create a network with security groups
* Create an instance using this network so that ports get tied to SGs
* Go to neutron-api unit (neutron-server) and do the following
* cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.no_keystone_authtoken
* remove "auth_section = keystone_authtoken" in the [nova] section of neutron.conf.no_keystone_authtoken
* run 'neutron-ovn-db-sync-util --config-file /etc/neutron/neutron.conf.no_keystone_authtoken --config-file /etc/neutron/plugins/ml2/ml2_conf.ini --ovn-neutron_sync_mode repair'
* the above should not produce any errors like the following:
RuntimeError: ACL ... already exists
[Regression Potential]
there is no regression potential expected with this patch.
--------------------------------------------------------------------------
OVN introduced a new column in ACL table. The column name is label and when running db-sync script, we compare ACL generated by the ovn mech driver from Neutron DB with the actual ACLs in the OVN DB. Because of the new label column, everything seems like a new ACL because the column differs to what Neutron generated. Thus the script attempts to create a new ACL that already exists.
b'Traceback (most recent call last):'
b' File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func'
b' return f(self, *args, **kwargs)'
b' File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func'
b' return f(self, *args, **kwargs)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1547, in test_ovn_nb_sync_repair'
b" self._test_ovn_nb_sync_helper('repair')"
b' File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1543, in _test_ovn_nb_sync_helper'
b' self._sync_resources(mode)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1523, in _sync_resources'
b' nb_synchronizer.do_sync()'
b' File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 104, in do_sync'
b' self.sync_acls(ctx)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 288, in sync_acls'
b' txn.add(self.ovn_api.pg_acl_add(**acla))'
b' File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__'
b' next(self.gen)'
b' File "/home/cloud-user/networking-ovn/networking_ovn/ovsdb/impl_idl_ovn.py", line 230, in transaction'
b' yield t'
b' File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__'
b' next(self.gen)'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 110, in transaction'
b' del self._nested_txns_map[cur_thread_id]'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 61, in __exit__'
b' self.result = self.commit()'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 65, in commit'
b' raise result.ex'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/connection.py", line 131, in run'
b' txn.results.put(txn.do_commit())'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 93, in do_commit'
b' command.run_idl(txn)'
b' File "/usr/local/lib/python3.6/site-packages/ovsdbapp/schema/ovn_northbound/commands.py", line 124, in run_idl'
b' self.direction, self.priority, self.match))'
b'RuntimeError: ACL (from-lport, 1001, inport == @neutron_pg_drop && ip) already exists' |
|
| 2023-04-03 12:19:32 |
Łukasz Zemczak |
neutron (Ubuntu Focal): status |
New |
Fix Committed |
|
| 2023-04-03 12:19:36 |
Łukasz Zemczak |
bug |
|
|
added subscriber SRU Verification |
| 2023-04-03 12:19:41 |
Łukasz Zemczak |
tags |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena se se-sponsor-dgadomski |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena se se-sponsor-dgadomski verification-needed verification-needed-focal |
|
| 2023-04-10 15:28:04 |
Corey Bryant |
cloud-archive/ussuri: status |
New |
Fix Committed |
|
| 2023-04-10 15:28:07 |
Corey Bryant |
tags |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena se se-sponsor-dgadomski verification-needed verification-needed-focal |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena se se-sponsor-dgadomski verification-needed verification-needed-focal verification-ussuri-needed |
|
| 2023-04-12 14:07:49 |
Edward Hope-Morley |
tags |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena se se-sponsor-dgadomski verification-needed verification-needed-focal verification-ussuri-needed |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena se se-sponsor-dgadomski verification-done-focal verification-needed verification-ussuri-needed |
|
| 2023-04-13 09:20:40 |
Edward Hope-Morley |
tags |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena se se-sponsor-dgadomski verification-done-focal verification-needed verification-ussuri-needed |
in-stable-ussuri in-stable-victoria in-stable-wallaby in-stable-xena se se-sponsor-dgadomski verification-done verification-done-focal verification-ussuri-done |
|
| 2023-04-13 19:38:52 |
Launchpad Janitor |
neutron (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
| 2023-04-13 19:38:57 |
Andreas Hasenack |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2023-04-14 11:38:36 |
Corey Bryant |
neutron (Ubuntu): status |
New |
Fix Released |
|
| 2023-04-14 11:41:56 |
Corey Bryant |
cloud-archive/ussuri: status |
Fix Committed |
Fix Released |
|
