Bug 2023640 - ACL db sync fails for default security group rules
Summary: ACL db sync fails for default security group rules
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: python-networking-ovn
Version: 16.2 (Train)
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: z1
: 16.2 (Train on RHEL 8.4)
Assignee: Jakub Libosvar
QA Contact: Eran Kuris
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-11-16 09:18 UTC by Eran Kuris
Modified: 2022-05-16 19:00 UTC (History)
8 users (show)

Fixed In Version: python-networking-ovn-7.4.2-2.20210601204831.el8ost.13
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-12-09 20:41:59 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 818255 0 None MERGED ovn: Filter ACL columns when syncing the DB 2021-11-18 19:22:31 UTC
Red Hat Issue Tracker OSP-10820 0 None None None 2021-11-16 09:20:05 UTC
Red Hat Product Errata RHBA-2021:5067 0 None None None 2021-12-09 20:42:17 UTC

Description Eran Kuris 2021-11-16 09:18:27 UTC
Description of problem:
networking_ovn.tests.functional.test_ovn_db_sync.TestOvnNbSync are failing  with error :
testtools.testresult.real._StringException: Traceback (most recent call last):
  File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func
    return f(self, *args, **kwargs)
  File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1547, in test_ovn_nb_sync_repair
    self._test_ovn_nb_sync_helper('repair')
  File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1543, in _test_ovn_nb_sync_helper
    self._sync_resources(mode)
  File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1523, in _sync_resources
    nb_synchronizer.do_sync()
  File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 104, in do_sync
    self.sync_acls(ctx)
  File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 288, in sync_acls
    txn.add(self.ovn_api.pg_acl_add(**acla))
  File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__
    next(self.gen)
  File "/home/cloud-user/networking-ovn/networking_ovn/ovsdb/impl_idl_ovn.py", line 230, in transaction
    yield t
  File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__
    next(self.gen)
  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 110, in transaction
    del self._nested_txns_map[cur_thread_id]
  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 61, in __exit__
    self.result = self.commit()
  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 65, in commit
    raise result.ex
  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/connection.py", line 131, in run
    txn.results.put(txn.do_commit())
  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 93, in do_commit
    command.run_idl(txn)
  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/schema/ovn_northbound/commands.py", line 124, in run_idl
    self.direction, self.priority, self.match))
Version-Release number of selected component (if applicable):


How reproducible:

100%
Steps to Reproduce:
1. run this job : https://rhos-ci-jenkins.lab.eng.tlv2.redhat.com/view/DFG/view/network/view/networking-ovn/job/DFG-network-networking-ovn-16.2-dsvm-functional-rhos/365/testReport/
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Jakub Libosvar 2021-11-16 19:27:06 UTC
Pasting the traceback:

    b'Traceback (most recent call last):'
    b'  File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func'
    b'    return f(self, *args, **kwargs)'
    b'  File "/usr/local/lib/python3.6/site-packages/neutron/tests/base.py", line 181, in func'
    b'    return f(self, *args, **kwargs)'
    b'  File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1547, in test_ovn_nb_sync_repair'
    b"    self._test_ovn_nb_sync_helper('repair')"
    b'  File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1543, in _test_ovn_nb_sync_helper'
    b'    self._sync_resources(mode)'
    b'  File "/home/cloud-user/networking-ovn/networking_ovn/tests/functional/test_ovn_db_sync.py", line 1523, in _sync_resources'
    b'    nb_synchronizer.do_sync()'
    b'  File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 104, in do_sync'
    b'    self.sync_acls(ctx)'
    b'  File "/home/cloud-user/networking-ovn/networking_ovn/ovn_db_sync.py", line 288, in sync_acls'
    b'    txn.add(self.ovn_api.pg_acl_add(**acla))'
    b'  File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__'
    b'    next(self.gen)'
    b'  File "/home/cloud-user/networking-ovn/networking_ovn/ovsdb/impl_idl_ovn.py", line 230, in transaction'
    b'    yield t'
    b'  File "/usr/lib64/python3.6/contextlib.py", line 88, in __exit__'
    b'    next(self.gen)'
    b'  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 110, in transaction'
    b'    del self._nested_txns_map[cur_thread_id]'
    b'  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/api.py", line 61, in __exit__'
    b'    self.result = self.commit()'
    b'  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 65, in commit'
    b'    raise result.ex'
    b'  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/connection.py", line 131, in run'
    b'    txn.results.put(txn.do_commit())'
    b'  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/transaction.py", line 93, in do_commit'
    b'    command.run_idl(txn)'
    b'  File "/usr/local/lib/python3.6/site-packages/ovsdbapp/schema/ovn_northbound/commands.py", line 124, in run_idl'
    b'    self.direction, self.priority, self.match))'
    b'RuntimeError: ACL (from-lport, 1001, inport == @neutron_pg_drop && ip) already exists'
    b''

Comment 16 errata-xmlrpc 2021-12-09 20:41:59 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Release of components for Red Hat OpenStack Platform 16.2.1 (Train)), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:5067


Note You need to log in before you can comment on or make changes to this bug.