Race between loadbalancer creation and FIP association with ovn-octavia provider

Bug #1962713 reported by Luis Tomas Bolivar
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
Medium
Luis Tomas Bolivar

Bug Description

With Kuryr, when a service of LoadBalancer type is created in kubernetes the
process is the next:
- Create a load balancer
- Associate FIP to the load balancer VIP

In busy enviroments, with HA, there may be a race condition where
the method to associate the FIP to the loadbalancer fails to find
the recently created loadbalancer, therefore not doing the FIP to
VIP association in the OVN NB DB. Which breaks the connectivity to
the LoadBalancer FIP (k8s external-ip associated to the loadbalancer)
until there is a modification on the service (for instance, adding
a new member/endpoint) and the FIP to VIP association is reconfigured

This problem only happens in stable/train, as fix was released as part
of this code reshape at https://opendev.org/openstack/ovn-octavia-provider/commit/c6cee9207349a12e499cbc81fe0e5d4d5bfa015c

Changed in neutron:
assignee: nobody → Luis Tomas Bolivar (ltomasbo)
Revision history for this message
Brian Haley (brian-haley) wrote :

Looks like the _find_ovn_lbs_with_retry() change is what you are referring to.

tags: added: ovn-octavia-provider
Changed in neutron:
status: New → Confirmed
importance: Undecided → Medium
Revision history for this message
Luis Tomas Bolivar (ltomasbo) wrote :

Yes, this is what I did in this (partial) backport: https://review.opendev.org/c/openstack/networking-ovn/+/831349/

Changed in neutron:
status: Confirmed → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/networking-ovn train-eol

This issue was fixed in the openstack/networking-ovn train-eol release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.