tripleo

trileo-ipsec: resource agent stop doesn't put tunnel back up

Bug #1751265 reported by Juan Antonio Osorio Robles
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
Critical
Juan Antonio Osorio Robles

Bug Description

the resource agent doesn't put the tunnel back up when the VIP is removed from it. It ends up hanging and requiring a manual restart, or just using plaintext, which is even worst.

Juan Antonio Osorio Robles (juan-osorio-robles)
Changed in tripleo:
importance: Undecided → Critical
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to tripleo-ipsec (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/547416

Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Related fix proposed to branch: master
Review: https://review.openstack.org/547417

Changed in tripleo:
assignee: nobody → Juan Antonio Osorio Robles (juan-osorio-robles)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-ipsec (master)

Fix proposed to branch: master
Review: https://review.openstack.org/547418

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to tripleo-ipsec (master)

Reviewed: https://review.openstack.org/547416
Committed: https://git.openstack.org/cgit/openstack/tripleo-ipsec/commit/?id=26cb6895ba7ef497001bb66967e6e0a1b723ff55
Submitter: Zuul
Branch: master

commit 26cb6895ba7ef497001bb66967e6e0a1b723ff55
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Fri Feb 23 14:59:22 2018 +0200

    Force ipsec resource agent overwrite

    This takes the resource agent that's in the playbook as a priority,
    allowing us to upgrade easier.

    Change-Id: Iaca0231e61ffded7ff7f3d7dc9cbd03a2b4a2dfb
    Related-Bug: #1751265

Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Reviewed: https://review.openstack.org/547417
Committed: https://git.openstack.org/cgit/openstack/tripleo-ipsec/commit/?id=e3bdcc16fc4a75c5442466085345ea34bb4974c3
Submitter: Zuul
Branch: master

commit e3bdcc16fc4a75c5442466085345ea34bb4974c3
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Fri Feb 23 15:01:20 2018 +0200

    Add fallback tunnel option to resource agent

    This enables the resource agent to fall back to another tunnel when the
    resource agent gets a stop operation. This effectively updates the xfrm
    rules if done in the right order.

    Change-Id: Ifa588455b354bd81d63b4fb1698b3a2e492e6473
    Related-Bug: #1751265

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-ipsec (master)

Reviewed: https://review.openstack.org/547418
Committed: https://git.openstack.org/cgit/openstack/tripleo-ipsec/commit/?id=61eac5e734f97ecf3ee2c176530174e7955aeabe
Submitter: Zuul
Branch: master

commit 61eac5e734f97ecf3ee2c176530174e7955aeabe
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Fri Feb 23 15:02:38 2018 +0200

    Add order constraint for stop operation in resource agent

    We already have an order constraint for the start operation, apparently
    we need another one for the stop operation too, as this assures that the
    VIP is stopped before the tunnel is put down.

    Change-Id: Ica9c2e9c0c2eb24b0f174d30a0d6af1e090768f4
    Closes-Bug: #1751265

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-ipsec 8.1.0

This issue was fixed in the openstack/tripleo-ipsec 8.1.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.