[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-28 Thread James Page
** Changed in: cloud-archive/rocky
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-28 Thread James Page
This bug was fixed in the package neutron - 2:14.1.0-0ubuntu1~cloud1
---

 neutron (2:14.1.0-0ubuntu1~cloud1) bionic-stein; urgency=medium
 .
   * d/p/lp1877797.patch: Cherry pick fix to resolve issues with
 remote security groups when used with the OVS firewall driver
 (LP: #1877797).


** Changed in: cloud-archive/stein
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-28 Thread James Page
This bug was fixed in the package neutron - 2:15.0.2-0ubuntu1.1~cloud0
---

 neutron (2:15.0.2-0ubuntu1.1~cloud0) bionic-train; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 neutron (2:15.0.2-0ubuntu1.1) eoan; urgency=medium
 .
   * d/p/lp1877797.patch: Cherry pick fix to resolve issues with
 remote security groups when used with the OVS firewall driver
 (LP: #1877797).


** Changed in: cloud-archive/train
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-28 Thread Launchpad Bug Tracker
This bug was fixed in the package neutron - 2:15.0.2-0ubuntu1.1

---
neutron (2:15.0.2-0ubuntu1.1) eoan; urgency=medium

  * d/p/lp1877797.patch: Cherry pick fix to resolve issues with
remote security groups when used with the OVS firewall driver
(LP: #1877797).

 -- James Page   Mon, 11 May 2020 08:24:20 +0100

** Changed in: neutron (Ubuntu Eoan)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-28 Thread James Page
Verification completed across all UCA and Ubuntu series.

It would be good to get this released today - waiting on SRU team for
eoan release before releasing to the UCA pockets.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-28 Thread James Page
UCA bionic-rocky/proposed

$ apt-cache policy python3-neutron
python3-neutron:
  Installed: 2:13.0.7-0ubuntu1~cloud1
  Candidate: 2:13.0.7-0ubuntu1~cloud1
  Version table:
 *** 2:13.0.7-0ubuntu1~cloud1 500
500 http://ubuntu-cloud.archive.canonical.com/ubuntu 
bionic-proposed/rocky/main amd64 Packages
100 /var/lib/dpkg/status

No log errors seem, able to SSH from bastion to application server.

Fix verified. Also ran tempest smoke to ensure no other regressions.



** Tags added: verification-rocky-done

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-27 Thread James Page
UCA bionic-stein/proposed

$ apt-cache policy python3-neutron
python3-neutron:
  Installed: 2:14.1.0-0ubuntu1~cloud1
  Candidate: 2:14.1.0-0ubuntu1~cloud1
  Version table:
 *** 2:14.1.0-0ubuntu1~cloud1 500
500 http://ubuntu-cloud.archive.canonical.com/ubuntu 
bionic-proposed/stein/main amd64 Packages
100 /var/lib/dpkg/status

No log errors seem, able to SSH from bastion to application server.

Fix verified. Also ran tempest smoke to ensure no other regressions.


** Tags removed: verification-stein-needed
** Tags added: verification-stein-done

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-27 Thread James Page
UCA bionic-train/proposed

$ apt-cache policy python3-neutron
python3-neutron:
  Installed: 2:15.0.2-0ubuntu1.1~cloud0
  Candidate: 2:15.0.2-0ubuntu1.1~cloud0
  Version table:
 *** 2:15.0.2-0ubuntu1.1~cloud0 500
500 http://ubuntu-cloud.archive.canonical.com/ubuntu 
bionic-proposed/train/main amd64 Packages
100 /var/lib/dpkg/status


No log errors seem, able to SSH from bastion to application server.

Fix verified. Also ran tempest smoke to ensure no other regressions.


** Tags removed: verification-train-needed
** Tags added: verification-train-done

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-27 Thread James Page
eoan/proposed

# apt-cache policy python3-neutron
python3-neutron:
  Installed: 2:15.0.2-0ubuntu1.1
  Candidate: 2:15.0.2-0ubuntu1.1
  Version table:
 *** 2:15.0.2-0ubuntu1.1 500
500 http://archive.ubuntu.com/ubuntu eoan-proposed/main amd64 Packages
100 /var/lib/dpkg/status
 2:15.0.2-0ubuntu1 500
500 http://nova.clouds.archive.ubuntu.com/ubuntu eoan-updates/main 
amd64 Packages
 2:15.0.0-0ubuntu1 500
500 http://nova.clouds.archive.ubuntu.com/ubuntu eoan/main amd64 
Packages

No log errors seem, able to SSH from bastion to application server.

Fix verified.  Also ran tempest smoke to ensure no other regressions.


** Tags removed: verification-needed verification-needed-eoan
** Tags added: verification-done verification-done-eoan

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-11 Thread Łukasz Zemczak
Hello James, or anyone else affected,

Accepted neutron into eoan-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/neutron/2:15.0.2-0ubuntu1.1 in a
few hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, what testing has been
performed on the package and change the tag from verification-needed-
eoan to verification-done-eoan. If it does not fix the bug for you,
please add a comment stating that, and change the tag to verification-
failed-eoan. In either case, without details of your testing we will not
be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance for helping!

N.B. The updated package will be released to -updates after the bug(s)
fixed by this package have been verified and the package has been in
-proposed for a minimum of 7 days.

** Changed in: neutron (Ubuntu Eoan)
   Status: Triaged => Fix Committed

** Tags added: verification-needed verification-needed-eoan

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-11 Thread Łukasz Zemczak
Could we maybe get the reproduction steps from bug LP: #1862703 copied
over to the bug description for readability? Anyway, accepted, I like
that this fix comes with an unit test as well.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-11 Thread James Page
Uploaded to eoan for SRU team review.

** Also affects: neutron (Ubuntu Groovy)
   Importance: Critical
 Assignee: James Page (james-page)
   Status: New

** Also affects: neutron (Ubuntu Eoan)
   Importance: Undecided
   Status: New

** Also affects: neutron (Ubuntu Focal)
   Importance: Undecided
   Status: New

** No longer affects: cloud-archive/queens

** Changed in: neutron (Ubuntu Groovy)
   Status: New => Fix Released

** Changed in: neutron (Ubuntu Focal)
   Status: New => Fix Released

** Changed in: neutron (Ubuntu Eoan)
   Status: New => Triaged

** Changed in: neutron (Ubuntu Eoan)
   Importance: Undecided => Critical

** Changed in: neutron (Ubuntu Focal)
   Importance: Undecided => Critical

** Description changed:

- Remote security groups are broken in the UCA Rocky and Stein versions of
- Neutron.
+ [Impact]
+ OpenStack deployments using the OVS firewall driver are broken when remote 
security groups are used due to a regression caused by bug 1854131.
+ 
+ [Test Case]
+ Deploy OpenStack (using charms)
+ Create and instance and configure a remote security group with SSH access to 
the instance - connectivity to instance via security group will not work.
+ 
+ [Regression Potential]
+ Low - the fix is upstream across multiple releases and resolves a previous 
regression in functionality.
+ 
+ [Original Bug Report]
+ Remote security groups are broken in the UCA Rocky and Stein versions of 
Neutron.
  
  The broken patch was introduced in LP #1854131 and fixed in LP #1862703.
  
  The relevant fixed has landed in Neutron 13.0.7 for Rocky¹.
  
  The relevant fixed landed in Neutron 14.1.0-37 for Stein², alternatively
  the specific fix is available here:
  
  
https://github.com/openstack/neutron/commit/4193c6ca0e0165a2bcc7a11eee775df15019e755
  
  The Queens version of Neutron currently in UCA (12.1.0) doesn't appear
  to have the bad patch from #1854131 in it.
  
  We ran into this while upgrading a customer cloud and it caused several
  hours of VM connectivity downtime while we diagnosed it.  Please upgrade
  Neutron in the Ubuntu Cloud Archive to have this fix available for at
  least Rocky and Stein.
  
  I realise Rocky is no longer supported, but given that the supported
  upgrade path from Queens is via Rocky, I think it needs fixed there too.
  
  ¹ https://docs.openstack.org/releasenotes/neutron/rocky.html
  ² https://docs.openstack.org/releasenotes/neutron/stein.html

** Description changed:

  [Impact]
  OpenStack deployments using the OVS firewall driver are broken when remote 
security groups are used due to a regression caused by bug 1854131.
  
  [Test Case]
  Deploy OpenStack (using charms)
- Create and instance and configure a remote security group with SSH access to 
the instance - connectivity to instance via security group will not work.
+ Create multiple instances and configure a remote security group with SSH 
access to the instance - connectivity to instance via security group will not 
work.
  
  [Regression Potential]
  Low - the fix is upstream across multiple releases and resolves a previous 
regression in functionality.
  
  [Original Bug Report]
  Remote security groups are broken in the UCA Rocky and Stein versions of 
Neutron.
  
  The broken patch was introduced in LP #1854131 and fixed in LP #1862703.
  
  The relevant fixed has landed in Neutron 13.0.7 for Rocky¹.
  
  The relevant fixed landed in Neutron 14.1.0-37 for Stein², alternatively
  the specific fix is available here:
  
  
https://github.com/openstack/neutron/commit/4193c6ca0e0165a2bcc7a11eee775df15019e755
  
  The Queens version of Neutron currently in UCA (12.1.0) doesn't appear
  to have the bad patch from #1854131 in it.
  
  We ran into this while upgrading a customer cloud and it caused several
  hours of VM connectivity downtime while we diagnosed it.  Please upgrade
  Neutron in the Ubuntu Cloud Archive to have this fix available for at
  least Rocky and Stein.
  
  I realise Rocky is no longer supported, but given that the supported
  upgrade path from Queens is via Rocky, I think it needs fixed there too.
  
  ¹ https://docs.openstack.org/releasenotes/neutron/rocky.html
  ² https://docs.openstack.org/releasenotes/neutron/stein.html

** Description changed:

  [Impact]
  OpenStack deployments using the OVS firewall driver are broken when remote 
security groups are used due to a regression caused by bug 1854131.
  
  [Test Case]
  Deploy OpenStack (using charms)
- Create multiple instances and configure a remote security group with SSH 
access to the instance - connectivity to instance via security group will not 
work.
+ Follow reproduction steps as detailed in bug 1862703
  
  [Regression Potential]
  Low - the fix is upstream across multiple releases and resolves a previous 
regression in functionality.
  
  [Original Bug Report]
  Remote security groups are broken in the UCA Rocky and Stein versions of 
Neutron.
  
  The broken patch was introduced in LP 

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-11 Thread James Page
Ussuri has the required fix - rocky,stein,train are all impacted as they
don't container the followup fix under bug 1862703.  Queens does not
have the regression (bug 1854131) or the fix (bug 1862703) but needs to
be addressed as part of the next set of SRU's

** Changed in: neutron (Ubuntu)
 Assignee: (unassigned) => James Page (james-page)

** Changed in: neutron (Ubuntu)
   Importance: Undecided => Critical

** Also affects: cloud-archive
   Importance: Undecided
   Status: New

** Also affects: cloud-archive/rocky
   Importance: Undecided
   Status: New

** Also affects: cloud-archive/ussuri
   Importance: Undecided
   Status: New

** Also affects: cloud-archive/train
   Importance: Undecided
   Status: New

** Also affects: cloud-archive/stein
   Importance: Undecided
   Status: New

** Also affects: cloud-archive/queens
   Importance: Undecided
   Status: New

** Changed in: cloud-archive/train
   Status: New => Confirmed

** Changed in: cloud-archive/stein
   Status: New => Confirmed

** Changed in: cloud-archive/rocky
   Status: New => Confirmed

** Changed in: cloud-archive/ussuri
   Status: New => Fix Released

** Changed in: cloud-archive/ussuri
   Importance: Undecided => Critical

** Changed in: cloud-archive/train
   Importance: Undecided => Critical

** Changed in: cloud-archive/stein
   Importance: Undecided => Critical

** Changed in: cloud-archive/rocky
   Importance: Undecided => Critical

** Changed in: cloud-archive/queens
   Importance: Undecided => Critical

** Changed in: cloud-archive/rocky
   Status: Confirmed => Fix Committed

** Changed in: cloud-archive/queens
   Status: New => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-11 Thread James Page
Rocky/13.0.7 is in rocky-proposed under bug 1875462 - looking at stein
now.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-10 Thread James Troup
For reference this is the debdiff I used to build fixed packages for
Bionic/Stein:

 https://paste.ubuntu.com/p/bHVZFz29dN/

Those packages are available in a PPA here:

 https://launchpad.net/~elmo/+archive/ubuntu/neutron-lp-1862703-public

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-10 Thread James Troup
** Description changed:

  Remote security groups are broken in the UCA Rocky and Stein versions of
  Neutron.
  
  The broken patch was introduced in LP #1854131 and fixed in LP #1862703.
  
  The relevant fixed has landed in Neutron 13.0.7 for Rocky¹.
  
  The relevant fixed landed in Neutron 14.1.0-37 for Stein², alternatively
  the specific fix is available here:
  
  
https://github.com/openstack/neutron/commit/4193c6ca0e0165a2bcc7a11eee775df15019e755
  
- The version of Queens currently in UCA (12.1.0) doesn't appear to have
- the bad patch from #1854131 in it.
+ The Queens version of Neutron currently in UCA (12.1.0) doesn't appear
+ to have the bad patch from #1854131 in it.
  
  We ran into this while upgrading a customer cloud and it caused several
  hours of VM connectivity downtime while we diagnosed it.  Please upgrade
  Neutron in the Ubuntu Cloud Archive to have this fix available for at
  least Rocky and Stein.
  
  I realise Rocky is no longer supported, but given that the supported
  upgrade path from Queens is via Rocky, I think it needs fixed there too.
  
  ¹ https://docs.openstack.org/releasenotes/neutron/rocky.html
  ² https://docs.openstack.org/releasenotes/neutron/stein.html

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-10 Thread James Troup
** Description changed:

- The Rocky release notes
- (https://docs.openstack.org/releasenotes/neutron/rocky.html) contain
- this entry for 13.0.7:
+ Remote security groups are broken in the UCA Rocky and Stein versions of
+ Neutron.
  
- Fixes an issue that the OVS firewall driver does not configure security
- group rules using remote group properly when a corresponding remote
- group has no port on a local hypervisor. For more information see bugs:
- 1862703 and 1854131.
+ The broken patch was introduced in LP #1854131 and fixed in LP #1862703.
  
- Unfortunately Rocky in the Ubuntu Cloud Archive is only 13.06 and we hit
- this problem with a customer cloud that was being upgraded to Stein and
- it caused workload network outages for them.
+ The relevant fixed has landed in Neutron 13.0.7 for Rocky¹.
  
- I realize Rocky is out of support at this point, but the supported
- upgrade path for Queens to Stein, includes upgrading to Rocky.  Can we
- please get 13.07 or later into the UCA for Rocky?
+ The relevant fixed landed in Neutron 14.1.0-37 for Stein², alternatively
+ the specific fix is available here:
+ 
+ 
https://github.com/openstack/neutron/commit/4193c6ca0e0165a2bcc7a11eee775df15019e755
+ 
+ The version of Queens currently in UCA (12.1.0) doesn't appear to have
+ the bad patch from #1854131 in it.
+ 
+ We ran into this while upgrading a customer cloud and it caused several
+ hours of VM connectivity downtime while we diagnosed it.  Please upgrade
+ Neutron in the Ubuntu Cloud Archive to have this fix available for at
+ least Rocky and Stein.
+ 
+ I realise Rocky is no longer supported, but given that the supported
+ upgrade path from Queens is via Rocky, I think it needs fixed there too.
+ 
+ ¹ https://docs.openstack.org/releasenotes/neutron/rocky.html
+ ² https://docs.openstack.org/releasenotes/neutron/stein.html

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1877797] Re: Neutron remote security group does not work in UCA Rocky and Stein - fixed upstream

2020-05-10 Thread James Troup
** Summary changed:

- UCA rocky neutron-openvswitch-agent has a bug which causes VM connectivity 
problems during Rocky upgrade (to get to Stein)
+ Neutron remote security group does not work in UCA Rocky and Stein - fixed 
upstream

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877797

Title:
  Neutron remote security group does not work in UCA Rocky and Stein -
  fixed upstream

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/1877797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs