Bug 1569070

Summary:	Security group updates fail when port hasn't been initialized yet
Product:	Red Hat OpenStack	Reporter:	Jakub Libosvar <jlibosva>
Component:	openstack-neutron	Assignee:	Jakub Libosvar <jlibosva>
Status:	CLOSED ERRATA	QA Contact:	Roee Agiman <ragiman>
Severity:	high	Docs Contact:
Priority:	high
Version:	12.0 (Pike)	CC:	amuller, chrisw, jlibosva, jschluet, nyechiel, ragiman, skaplons, srevivo
Target Milestone:	z3	Keywords:	Triaged, ZStream
Target Release:	12.0 (Pike)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openstack-neutron-11.0.2-6.el7ost	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-08-20 12:51:31 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jakub Libosvar 2018-04-18 14:48:08 UTC

2 or 3 tests are failing in neutron-tempest-ovsfw job. Example of failed job: http://logs.openstack.org/54/537654/4/check/neutron-tempest-ovsfw/5c90b2b/logs/testr_results.html.gz

From ovs L2 agent logs it looks that there is quite many issues related to ovsfw: http://logs.openstack.org/54/537654/4/check/neutron-tempest-ovsfw/5c90b2b/logs/screen-q-agt.txt.gz?level=ERROR

Errors are like:

Feb 05 21:23:55.740789 ubuntu-xenial-inap-mtl01-0002377325 neutron-openvswitch-agent[20990]: ERROR neutron.agent.linux.openvswitch_firewall.firewall [None req-bdd502f0-2b26-4566-b0e5-ee77d4d939ae None None] Initializing unfiltered port 7f46ff5c-5c9f-462f-8348-ef8741a9194d that does not exist in ovsdb: Port 7f46ff5c-5c9f-462f-8348-ef8741a9194d is not managed by this agent..: OVSFWPortNotFound: Port 7f46ff5c-5c9f-462f-8348-ef8741a9194d is not managed by this agent.
Feb 05 21:24:09.731637 ubuntu-xenial-inap-mtl01-0002377325 neutron-openvswitch-agent[20990]: ERROR neutron.agent.linux.openvswitch_firewall.firewall [None req-bdd502f0-2b26-4566-b0e5-ee77d4d939ae None None] Initializing unfiltered port b191da42-6eca-4ba3-a12b-244b07e6fe45 that does not exist in ovsdb: Port b191da42-6eca-4ba3-a12b-244b07e6fe45 is not managed by this agent..: OVSFWPortNotFound: Port b191da42-6eca-4ba3-a12b-244b07e6fe45 is not managed by this agent.

Comment 16 errata-xmlrpc 2018-08-20 12:51:31 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:2514