Description of problem:
When running Neutron with `firewall_driver = openvswitch`, creating a load balancer in Octavia will never complete successfully.
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1. Deploy OSP with Octavia
2. Add `firewall_driver=openvswitch` under `[securitygroup]` in `/etc/neutron/plugins/ml2/openvswitch_agent.ini`
3. Restart neutron-openvswitch-agent
4. Create a load balancer with `openstack loadbalancer create --vip-subnet-id private-subnet --name tst_lb`
Actual results:
The load balancer gets created.
Expected results:
The load balancer is stuck with provisioning_status set to `PENDING_UPDATE`.
Additional info:
According to the upstream report, this bug is in Neutron, however it manifests itself in Octavia.
This is a blocker for Kuryr: we use trunk ports (which in turns requires the openvswitch firewall driver) and we use Octavia to implement the Kubernetes services.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHEA-2018:2086