Description of problem:
When running Neutron with `firewall_driver = openvswitch`, creating a load balancer in Octavia will never complete successfully.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Deploy OSP with Octavia
2. Add `firewall_driver=openvswitch` under `[securitygroup]` in `/etc/neutron/plugins/ml2/openvswitch_agent.ini`
3. Restart neutron-openvswitch-agent
4. Create a load balancer with `openstack loadbalancer create --vip-subnet-id private-subnet --name tst_lb`
The load balancer gets created.
The load balancer is stuck with provisioning_status set to `PENDING_UPDATE`.
According to the upstream report, this bug is in Neutron, however it manifests itself in Octavia.
This is a blocker for Kuryr: we use trunk ports (which in turns requires the openvswitch firewall driver) and we use Octavia to implement the Kubernetes services.
Oops, the actual and expected results are swapped. Sorry!
FWIW, this bug was verified by upstream CI: https://review.openstack.org/#/c/550431/
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.