Bug 2023640

Summary: ACL db sync fails for default security group rules
Product: Red Hat OpenStack Reporter: Eran Kuris <ekuris>
Component: python-networking-ovnAssignee: Jakub Libosvar <jlibosva>
Status: CLOSED ERRATA QA Contact: Eran Kuris <ekuris>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 16.2 (Train)CC: apevec, jlibosva, jpretori, lhh, majopela, scohen, spower, tvignaud
Target Milestone: z1Keywords: Regression, Triaged
Target Release: 16.2 (Train on RHEL 8.4)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: python-networking-ovn-7.4.2-2.20210601204831.el8ost.13 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-12-09 20:41:59 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Eran Kuris 2021-11-16 09:18:27 UTC
Description of problem:
networking_ovn.tests.functional.test_ovn_db_sync.TestOvnNbSync are failing  with error :
testtools.testresult.real._StringException: Traceback (most recent call last):
  File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func
    return f(self, *args, **kwargs)
  File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1547, in test_ovn_nb_sync_repair
    self._test_ovn_nb_sync_helper('repair')
  File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1543, in _test_ovn_nb_sync_helper
    self._sync_resources(mode)
  File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1523, in _sync_resources
    nb_synchronizer.do_sync()
  File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 104, in do_sync
    self.sync_acls(ctx)
  File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 288, in sync_acls
    txn.add(self.ovn_api.pg_acl_add(**acla))
  File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__
    next(self.gen)
  File "/home/cloud-user/networking-ovn/networking_ovn/ovsdb/impl_idl_ovn.py", line 230, in transaction
    yield t
  File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__
    next(self.gen)
  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 110, in transaction
    del self._nested_txns_map[cur_thread_id]
  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 61, in __exit__
    self.result = self.commit()
  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 65, in commit
    raise result.ex
  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/connection.py", line 131, in run
    txn.results.put(txn.do_commit())
  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 93, in do_commit
    command.run_idl(txn)
  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/schema/ovn_northbound/commands.py", line 124, in run_idl
    self.direction, self.priority, self.match))
Version-Release number of selected component (if applicable):


How reproducible:

100%
Steps to Reproduce:
1. run this job : https://rhos-ci-jenkins.lab.eng.tlv2.redhat.com/view/DFG/view/network/view/networking-ovn/job/DFG-network-networking-ovn-16.2-dsvm-functional-rhos/365/testReport/
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Jakub Libosvar 2021-11-16 19:27:06 UTC
Pasting the traceback:

    b'Traceback (most recent call last):'
    b'  File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func'
    b'    return f(self, *args, **kwargs)'
    b'  File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func'
    b'    return f(self, *args, **kwargs)'
    b'  File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1547, in test_ovn_nb_sync_repair'
    b"    self._test_ovn_nb_sync_helper('repair')"
    b'  File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1543, in _test_ovn_nb_sync_helper'
    b'    self._sync_resources(mode)'
    b'  File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1523, in _sync_resources'
    b'    nb_synchronizer.do_sync()'
    b'  File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 104, in do_sync'
    b'    self.sync_acls(ctx)'
    b'  File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 288, in sync_acls'
    b'    txn.add(self.ovn_api.pg_acl_add(**acla))'
    b'  File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__'
    b'    next(self.gen)'
    b'  File "/home/cloud-user/networking-ovn/networking_ovn/ovsdb/impl_idl_ovn.py", line 230, in transaction'
    b'    yield t'
    b'  File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__'
    b'    next(self.gen)'
    b'  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 110, in transaction'
    b'    del self._nested_txns_map[cur_thread_id]'
    b'  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 61, in __exit__'
    b'    self.result = self.commit()'
    b'  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 65, in commit'
    b'    raise result.ex'
    b'  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/connection.py", line 131, in run'
    b'    txn.results.put(txn.do_commit())'
    b'  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 93, in do_commit'
    b'    command.run_idl(txn)'
    b'  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/schema/ovn_northbound/commands.py", line 124, in run_idl'
    b'    self.direction, self.priority, self.match))'
    b'RuntimeError: ACL (from-lport, 1001, inport == @neutron_pg_drop && ip) already exists'
    b''

Comment 16 errata-xmlrpc 2021-12-09 20:41:59 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Release of components for Red Hat OpenStack Platform 16.2.1 (Train)), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:5067