a revoked ID still exist in the vswitch's authorized list

Bug #1708613 reported by Ya Lian Pan
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
networking-zvm
New
Undecided
Unassigned

Bug Description

https://extbasicopstackcilog01.w3-969.ibm.com/test_logs/jenkins-check-nova-master-4244/logs/zvm.log
https://extbasicopstackcilog01.w3-969.ibm.com/test_logs/jenkins-check-nova-master-4245/logs/zvm.log

Here is one case that one guest has already been removed from vswitch's authorized list (using smcli Virtual_Network_Vswitch_Set_Extended -T userid -k switch_name=switch_name -k revoke_userid=userid), however when the neutron-zvm-agent restart, we can still see the guest in the vswitch's authorized list. This will cause too much output for a vswitch query command and affect the normal process

Revision history for this message
Ya Lian Pan (yalian) wrote :

One possible reason is there are multiple neutron-zvmagent run on the zVM, the guest is revoked by one of the agent, but this revoke operation didn't update switch tale ( switch table is deleted when the whole guest is destroyed), so there is a time gap between the revoke and the guest deploy. During this time, it is possible that another neutron_zvm_agent start and check the vswitch table, to regrant the guest. It will cause the guest is deleted but the still existed in the vswitch's authorized list.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.