Neutron-VPNaaS: vpn service on ovn-vpnaas is hanging in PENDING_CREATE
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
neutron |
New
|
Undecided
|
Unassigned |
Bug Description
Description
-----------
Using the ovn-vpnaas service plugin from neutron-vpnaas after creating the VPN
service, it hangs in state PENDING_CREATE. The neutron log contains a stacktrace
with the message:
ovsdbapp.
Pre-conditions
--------------
The issue was encountered on a testbed cluster, but is also reproducible with
devstack on a single computer.
The devstack machine is running on Debian bookworm and has two NICs, one of
which is solely used for OpenStack networking. (The devstack on this machine is
otherwise functional and served multiple times as test environment.)
Step-by-step reproduction steps
-------
#. Clone the devstack repostory and checkout 2024.1:
git clone -b stable/2014.1 https:/
#. Provide local.conf as suggestet in the neutron-vpnaas repository [1] and then
in the devstack directory:
./stack.sh
#. Follow the instructions for VPNaaS [2]:
openstack vpn ike policy create ikepolicy
openstack vpn ipsec policy create ipsecpolicy
openstack vpn service create vpn --router router1
#. Observe in the neutron log the above error (see attachment)
journalctl --boot 0 --identifier neutron-server
#. Check the vpn service
openstack vpn service show vpn
[1] https:/
[2] https:/
Expected output
---------------
Status CREATED or ACTIVE for the vpn service.
Actual output
-------------
Status PENDING_CREATE
Versions
--------
- OS: Debian bookworm (Linux 6.1.106)
- Devstack 2024.1
- Openstackclient: 6.6.0
Perceived severity
------------------
Blocker for using VPNaaS on OVN
tags: | added: ovn |
The state of the vpn service stays in PENDING_CREATE until you create an ipsec site connection.
Could you check if the state changes after creating one?
I didn't see the "Cannot find Logical_ Router_ Port" exceptions in our vpnaas/ovn setup. At this point I'm not sure if that points to some problem or not. I will have to reproduce it.