Description of problem: Migration from ML2OVS to ML2OVN on an environment with TLS-everywhere does not work. Neutron-server is not connected to the OVN database. For example running 'openstack network agent list' hangs and then returns: HttpException: 502: Server Error for url: https://overcloud.redhat.local:13696/v2.0/agents, response from an upstream server.: 502 Proxy Error: The proxy server could not handle the request GET /v2.0/agents.: The proxy server received an invalid: Proxy Error: Reason: Error reading from remote server Version-Release number of selected component (if applicable): RHOS-16.1-RHEL-8-20200903.n.0 python3-networking-ovn-7.2.1-0.20200611133439.15f2281.el8ost.noarch python3-networking-ovn-migration-tool-7.2.1-0.20200611133439.15f2281.el8ost.noarch How reproducible: 100% Steps to Reproduce: 1. Install HA ML2OVS environment with TLS-everywhere 2. Run migration to ML2OVN using the official documentation https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html/networking_with_open_virtual_network/migrating-ml2ovs-to-ovn#ml2-ovs-to-ovn-migration-prepare Actual results: Migration fails Expected results: Migration succeeds Additional info:
Note: I applied these 2 patches on the environment before the migration, in order to overcome bz1877756 https://review.opendev.org/#/c/742801/ https://review.opendev.org/#/c/750939/
Does not happen anymore. Used RHOS-16.1-RHEL-8-20210421.n.1 on an environment with TLS-everywhere enabled. Migration to OVN passed successfully.