Hide Forgot
Description of problem: When running Neutron with `firewall_driver = openvswitch`, creating a load balancer in Octavia will never complete successfully. Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. Deploy OSP with Octavia 2. Add `firewall_driver=openvswitch` under `[securitygroup]` in `/etc/neutron/plugins/ml2/openvswitch_agent.ini` 3. Restart neutron-openvswitch-agent 4. Create a load balancer with `openstack loadbalancer create --vip-subnet-id private-subnet --name tst_lb` Actual results: The load balancer gets created. Expected results: The load balancer is stuck with provisioning_status set to `PENDING_UPDATE`. Additional info: According to the upstream report, this bug is in Neutron, however it manifests itself in Octavia. This is a blocker for Kuryr: we use trunk ports (which in turns requires the openvswitch firewall driver) and we use Octavia to implement the Kubernetes services.
Oops, the actual and expected results are swapped. Sorry!
FWIW, this bug was verified by upstream CI: https://review.openstack.org/#/c/550431/
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2018:2086