Bug 1300308

Summary:	OSP8 neutron-server fails to push notifications on security group update into OSP7 L2 agents
Product:	Red Hat OpenStack	Reporter:	Ihar Hrachyshka <ihrachys>
Component:	openstack-neutron	Assignee:	Ihar Hrachyshka <ihrachys>
Status:	CLOSED ERRATA	QA Contact:	Eran Kuris <ekuris>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.0 (Liberty)	CC:	amuller, chrisw, jschluet, lpeer, mlopes, nyechiel, rhos-flags, yeylon
Target Milestone:	ga
Target Release:	8.0 (Liberty)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openstack-neutron-7.0.1-7.el7ost	Doc Type:	Bug Fix
Doc Text:	Previously, the neutron-server service would sometimes erroneously require a new RPC entrypoint version from the L2 agents that listened for security group updates. Consequently, the RHEL OpenStack Platform 7 neutron L2 agents could not handle certain security group update notifications sent by Red Hat OpenStack Platform 8 neutron-server services, causing certain security group updates to not be propagated to the data plane. This update addresses this issue by ending the requirement of the new RPC endpoint version from agents, as this will assist the rolling upgrade scenario between RHEL OpenStack Platform 7 and Red Hat OpenStack Platform 8. As a result, RHEL OpenStack Platform 7 neutron L2 agents will now correctly handle security group update notifications sent by the Red Hat OpenStack Platform 8 neutron-server services.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-04-07 21:25:17 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Ihar Hrachyshka 2016-01-20 12:54:26 UTC

Description of problem:

When you try to mix Liberty neutron-server and Kilo l2 agent, the following trace back can be seen when security groups are modified on DHCP and IPv6 router ports.

ERROR oslo_messaging.rpc.dispatcher [-] Exception during message handling: Endpoint does not support RPC version 1.3. Attempted method: security_groups_provider_updated
TRACE oslo_messaging.rpc.dispatcher Traceback (most recent call last):
TRACE oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 142, in _dispatch_and_reply
TRACE oslo_messaging.rpc.dispatcher     executor_callback))
TRACE oslo_messaging.rpc.dispatcher   File "/usr/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 195, in _dispatch
TRACE oslo_messaging.rpc.dispatcher     raise UnsupportedVersion(version, method=method)
TRACE oslo_messaging.rpc.dispatcher UnsupportedVersion: Endpoint does not support RPC version 1.3. Attempted method: security_groups_provider_updated

This is because neutron-server requires security group API endpoint = 1.3 while Kilo agents are still at 1.2.

The fix would be to avoid enforcing the version in OSP8, since OSP7 l2 agents are resistant against changes in argument list of RPC notification endpoints, and are able to handle new OSP8 notifications (just with reduced performance).

Comment 5 Eran Kuris 2016-01-26 07:46:23 UTC

verified 

[heat-admin@overcloud-controller-0 ~]$ sudo vi /usr/lib/python2.7/site-packages/neutron/api/rpc/handlers/securitygroups_rpc.py
[heat-admin@overcloud-controller-0 ~]$ rpm -qa |grep openstack-neutron
openstack-neutron-7.0.1-8.el7ost.noarch
openstack-neutron-common-7.0.1-8.el7ost.noarch
openstack-neutron-openvswitch-7.0.1-8.el7ost.noarch
openstack-neutron-ml2-7.0.1-8.el7ost.noarch
openstack-neutron-metering-agent-7.0.1-8.el7ost.noarch
openstack-neutron-lbaas-7.0.0-2.el7ost.noarch

Comment 6 errata-xmlrpc 2016-04-07 21:25:17 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-0603.html