ovn: instance unable to retrieve metadata
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ubuntu Cloud Archive |
Fix Released
|
Undecided
|
Unassigned | ||
Ussuri |
Fix Released
|
Undecided
|
Unassigned | ||
Victoria |
Won't Fix
|
Undecided
|
Unassigned | ||
Wallaby |
Fix Released
|
Undecided
|
Unassigned | ||
charm-ovn-chassis |
Invalid
|
Undecided
|
Unassigned | ||
neutron |
Invalid
|
Undecided
|
Unassigned | ||
openvswitch (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
Focal |
Fix Released
|
High
|
Unassigned | ||
Groovy |
Fix Released
|
High
|
Unassigned | ||
Hirsute |
Fix Released
|
High
|
Unassigned |
Bug Description
[Impact]
Cloud instances are unable to retrieve metadata on startup.
[Test Case]
Deploy OpenStack with OVN/OVS
Restart OVN central controllers
Create a new instance
Instance will fail to retrieve metadata with the message from the original bug report displayed in the metadata agent log on the local hypervisor
[Regression Potential]
The fix for this issue is included in the upstream 2.13.3 release of OVS.
The fix ensures that SSL related connection issues are correctly handling in python3-ovs avoiding an issue where the connection to the OVN SB IDL is reset and never recreated.
The OVN drivers use python3-ovsdbapp which in turn bases off code provided by python3-ovs.
[Original Bug Report]
Ubuntu:focal
OpenStack: ussuri
Instance port: hardware offloaded
instance created, attempts to access metadata - metadata agent can't resolve the port/network combination:
2020-12-10 15:00:18.258 4732 INFO neutron.
assis
2020-12-10 15:00:31.672 8062 ERROR neutron.
2020-12-10 15:00:31.673 8062 INFO eventlet.
2020-12-10 15:00:34.639 8062 ERROR neutron.
2020-12-10 15:00:34.639 8062 INFO eventlet.
CVE References
tags: | added: ovn |
no longer affects: | neutron (Ubuntu) |
no longer affects: | neutron (Ubuntu Bionic) |
no longer affects: | neutron (Ubuntu Focal) |
no longer affects: | neutron (Ubuntu Groovy) |
no longer affects: | neutron (Ubuntu Hirsute) |
Changed in openvswitch (Ubuntu Hirsute): | |
status: | Triaged → Fix Released |
Changed in openvswitch (Ubuntu Groovy): | |
status: | New → Triaged |
Changed in openvswitch (Ubuntu Focal): | |
status: | New → Triaged |
Changed in openvswitch (Ubuntu Bionic): | |
status: | New → Triaged |
Changed in openvswitch (Ubuntu Focal): | |
importance: | Undecided → High |
Changed in openvswitch (Ubuntu Groovy): | |
importance: | Undecided → High |
Changed in openvswitch (Ubuntu Bionic): | |
importance: | Undecided → High |
description: | updated |
tags: |
added: verification-done removed: verification-needed |
And another:
2020-12-10 15:00:21.013 4703 INFO neutron. agent.ovn. metadata. agent [-] Port f0cc41de- 6f54-40c5- 85cd-fdeb5249c1 54 in datapath 37706e4d- ce2a-4d81- 8c61-3fd12437a0 a7 bound to our ch agent.ovn. metadata. server [-] No port found in network 37706e4d- ce2a-4d81- 8c61-3fd12437a0 a7 with IP address 10.5.3.123 wsgi.server [-] 10.5.3.123,<local> "GET /openstack HTTP/1.1" status: 404 len: 297 time: 0.0043950 agent.ovn. metadata. server [-] No port found in network 37706e4d- ce2a-4d81- 8c61-3fd12437a0 a7 with IP address 10.5.3.123 wsgi.server [-] 10.5.3.123,<local> "GET /openstack HTTP/1.1" status: 404 len: 297 time: 0.0045562
assis
2020-12-10 15:00:34.017 7849 ERROR neutron.
2020-12-10 15:00:34.018 7849 INFO eventlet.
2020-12-10 15:00:36.664 7848 ERROR neutron.
2020-12-10 15:00:36.665 7848 INFO eventlet.