[SRU] OVN db sync script fails with OVN schema that has label column in ACL table
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ubuntu Cloud Archive |
New
|
Undecided
|
Unassigned | ||
Ussuri |
Fix Released
|
Undecided
|
Unassigned | ||
Victoria |
Fix Released
|
Undecided
|
Unassigned | ||
Wallaby |
Fix Released
|
Undecided
|
Unassigned | ||
Xena |
Fix Released
|
Undecided
|
Unassigned | ||
Yoga |
Fix Released
|
Undecided
|
Unassigned | ||
Zed |
Fix Released
|
Undecided
|
Unassigned | ||
neutron |
Fix Released
|
Undecided
|
Jakub Libosvar | ||
neutron (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Focal |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
[Impact]
Backport fix to Focal/Ussuri so that neutron-
[Test Plan]
* Deploy Openstack Ussuri
* Upgrade OVN to 22.03 (https:/
* Create a network with security groups
* Create an instance using this network so that ports get tied to SGs
* Go to neutron-api unit (neutron-server) and do the following
* cp /etc/neutron/
* remove "auth_section = keystone_authtoken" in the [nova] section of neutron.
* run 'neutron-
* the above should not produce any errors like the following:
RuntimeError: ACL ... already exists
[Regression Potential]
there is no regression potential expected with this patch.
-------
OVN introduced a new column in ACL table. The column name is label and when running db-sync script, we compare ACL generated by the ovn mech driver from Neutron DB with the actual ACLs in the OVN DB. Because of the new label column, everything seems like a new ACL because the column differs to what Neutron generated. Thus the script attempts to create a new ACL that already exists.
b'Traceback (most recent call last):'
b' File "/usr/local/
b' return f(self, *args, **kwargs)'
b' File "/usr/local/
b' return f(self, *args, **kwargs)'
b' File "/home/
b" self._test_
b' File "/home/
b' self._sync_
b' File "/home/
b' nb_synchronizer
b' File "/home/
b' self.sync_
b' File "/home/
b' txn.add(
b' File "/usr/lib64/
b' next(self.gen)'
b' File "/home/
b' yield t'
b' File "/usr/lib64/
b' next(self.gen)'
b' File "/usr/local/
b' del self._nested_
b' File "/usr/local/
b' self.result = self.commit()'
b' File "/usr/local/
b' raise result.ex'
b' File "/usr/local/
b' txn.results.
b' File "/usr/local/
b' command.
b' File "/usr/local/
b' self.direction, self.priority, self.match))'
b'RuntimeError: ACL (from-lport, 1001, inport == @neutron_pg_drop && ip) already exists'
Changed in neutron: | |
assignee: | nobody → Jakub Libosvar (libosvar) |
tags: | added: neutron-proactive-backport-potential |
tags: | removed: neutron-proactive-backport-potential |
description: | updated |
summary: |
- OVN db sync script fails with OVN schema that has label column in ACL - table + [SRU] OVN db sync script fails with OVN schema that has label column in + ACL table |
tags: | added: se se-sponsor-dgadomski |
Fix proposed to branch: master /review. opendev. org/c/openstack /neutron/ +/818255
Review: https:/