With the gate job for the Octavia charm I deployed a bionic-ussuri cloud with the currently released packages (Note that the amphora image was built with focal pending resolution of bug 1895835).
I can confirm that the test fails with not being able to reach the FIP:
--2021-06-11 07:33:28-- http://10.78.95.98/
Connecting to 10.78.95.98:80... failed: Connection timed out.
Retrying.
And I can confirm that the ovn-controller for the hypervisor hosting the load balancer logs:
2021-06-11T05:36:21.649Z|00130|pinctrl|INFO|Claiming virtual lport 96582bd0-1823-49bd-9c40-fad147c47ca3 for this chassis with the virtual parent 38910d74-fe51-454e-907c-448c32c96661
2021-06-11T05:36:21.651Z|00131|ovsdb_idl|WARN|Dropped 17 log messages in last 55 seconds (most recently, 5 seconds ago) due to excessive rate
2021-06-11T05:36:21.651Z|00132|ovsdb_idl|WARN|transaction error: {"details":"RBAC rules for client \"awake-mammal.maas\" role \"ovn-controller\" prohibit modification of table \"Port_Binding\".","error":"permission error"}
2021-06-11T05:36:21.651Z|00133|main|INFO|OVNSB commit failed, force recompute next time.
I can confirm that after adding the -proposed pocket on ovn-central and ovn-chassis units and then upgrading the ovn-common, ovn-host and ovn-central packages the test succeeds and the RBAC violation is no longer logged by ovn-controller:
--2021-06-11 07:42:19-- (try: 5) http://10.78.95.98/
Connecting to 10.78.95.98:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 10918 (11K) [text/html]
Saving to: ‘STDOUT’
- 100%[===================>] 10.66K --.-KB/s in 0s
2021-06-11 07:42:19 (485 MB/s) - written to stdout [10918/10918]
2021-06-11 07:42:19 [INFO] Found "This is the default welcome page" in page retrieved through load balancer (provider="amphora") at "http://10.78.95.98/"
$ juju run --application ovn-central 'dpkg -l |grep ovn'
- Stdout: |
ii ovn-central 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN central components
ii ovn-common 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN common components
UnitId: ovn-central/0
- Stdout: |
ii ovn-central 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN central components
ii ovn-common 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN common components
UnitId: ovn-central/1
- Stdout: |
ii ovn-central 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN central components
ii ovn-common 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN common components
UnitId: ovn-central/2
$ juju run --application ovn-chassis 'dpkg -l |grep ovn'
- Stdout: |
ii neutron-ovn-metadata-agent 2:16.3.1-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - OVN metadata agent
ii ovn-common 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN common components
ii ovn-host 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN host components
UnitId: ovn-chassis/0
- Stdout: |
ii neutron-ovn-metadata-agent 2:16.3.1-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - OVN metadata agent
ii ovn-common 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN common components
ii ovn-host 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN host components
UnitId: ovn-chassis/2
- Stdout: |
ii neutron-ovn-metadata-agent 2:16.3.1-0ubuntu1~cloud0 all Neutron is a virtual network service for Openstack - OVN metadata agent
ii ovn-common 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN common components
ii ovn-host 20.03.2-0ubuntu0.20.04.1~cloud0 amd64 OVN host components
UnitId: ovn-chassis/1
For reference packages on the neutron-api units was not touched as part of the test, and they were running python3-neutron 2:16.3.1-0ubuntu1~cloud0 for neutron-server.
With the gate job for the Octavia charm I deployed a bionic-ussuri cloud with the currently released packages (Note that the amphora image was built with focal pending resolution of bug 1895835).
I can confirm that the test fails with not being able to reach the FIP: 10.78.95. 98/
--2021-06-11 07:33:28-- http://
Connecting to 10.78.95.98:80... failed: Connection timed out.
Retrying.
And I can confirm that the ovn-controller for the hypervisor hosting the load balancer logs: 11T05:36: 21.649Z| 00130|pinctrl| INFO|Claiming virtual lport 96582bd0- 1823-49bd- 9c40-fad147c47c a3 for this chassis with the virtual parent 38910d74- fe51-454e- 907c-448c32c966 61 11T05:36: 21.651Z| 00131|ovsdb_ idl|WARN| Dropped 17 log messages in last 55 seconds (most recently, 5 seconds ago) due to excessive rate 11T05:36: 21.651Z| 00132|ovsdb_ idl|WARN| transaction error: {"details":"RBAC rules for client \"awake- mammal. maas\" role \"ovn-controller\" prohibit modification of table \"Port_ Binding\ ".","error" :"permission error"} 11T05:36: 21.651Z| 00133|main| INFO|OVNSB commit failed, force recompute next time.
2021-06-
2021-06-
2021-06-
2021-06-
I can confirm that after adding the -proposed pocket on ovn-central and ovn-chassis units and then upgrading the ovn-common, ovn-host and ovn-central packages the test succeeds and the RBAC violation is no longer logged by ovn-controller: 10.78.95. 98/
--2021-06-11 07:42:19-- (try: 5) http://
Connecting to 10.78.95.98:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 10918 (11K) [text/html]
Saving to: ‘STDOUT’
- 100%[== ======= ======= ===>] 10.66K --.-KB/s in 0s
2021-06-11 07:42:19 (485 MB/s) - written to stdout [10918/10918]
2021-06-11 07:42:19 [INFO] Found "This is the default welcome page" in page retrieved through load balancer (provider= "amphora" ) at "http:// 10.78.95. 98/"
$ juju run --application ovn-central 'dpkg -l |grep ovn' 0ubuntu0. 20.04.1~ cloud0 amd64 OVN central components 0ubuntu0. 20.04.1~ cloud0 amd64 OVN common components 0ubuntu0. 20.04.1~ cloud0 amd64 OVN central components 0ubuntu0. 20.04.1~ cloud0 amd64 OVN common components 0ubuntu0. 20.04.1~ cloud0 amd64 OVN central components 0ubuntu0. 20.04.1~ cloud0 amd64 OVN common components
- Stdout: |
ii ovn-central 20.03.2-
ii ovn-common 20.03.2-
UnitId: ovn-central/0
- Stdout: |
ii ovn-central 20.03.2-
ii ovn-common 20.03.2-
UnitId: ovn-central/1
- Stdout: |
ii ovn-central 20.03.2-
ii ovn-common 20.03.2-
UnitId: ovn-central/2
$ juju run --application ovn-chassis 'dpkg -l |grep ovn' ovn-metadata- agent 2:16.3. 1-0ubuntu1~ cloud0 all Neutron is a virtual network service for Openstack - OVN metadata agent 0ubuntu0. 20.04.1~ cloud0 amd64 OVN common components 0ubuntu0. 20.04.1~ cloud0 amd64 OVN host components ovn-metadata- agent 2:16.3. 1-0ubuntu1~ cloud0 all Neutron is a virtual network service for Openstack - OVN metadata agent 0ubuntu0. 20.04.1~ cloud0 amd64 OVN common components 0ubuntu0. 20.04.1~ cloud0 amd64 OVN host components ovn-metadata- agent 2:16.3. 1-0ubuntu1~ cloud0 all Neutron is a virtual network service for Openstack - OVN metadata agent 0ubuntu0. 20.04.1~ cloud0 amd64 OVN common components 0ubuntu0. 20.04.1~ cloud0 amd64 OVN host components
- Stdout: |
ii neutron-
ii ovn-common 20.03.2-
ii ovn-host 20.03.2-
UnitId: ovn-chassis/0
- Stdout: |
ii neutron-
ii ovn-common 20.03.2-
ii ovn-host 20.03.2-
UnitId: ovn-chassis/2
- Stdout: |
ii neutron-
ii ovn-common 20.03.2-
ii ovn-host 20.03.2-
UnitId: ovn-chassis/1
For reference packages on the neutron-api units was not touched as part of the test, and they were running python3-neutron 2:16.3. 1-0ubuntu1~ cloud0 for neutron-server.