** Changed in: neutron
Status: New => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2033683
Title:
openvswitch.agent.ovs_neutron_agent fails to Cmd: ['iptables-restore',
'-n']
Status in neutron:
Invalid
Status in tripleo:
New
Bug description:
Description
===========
Wallaby deployment via undercloud/overcloud started to fail recently on
overcloud node provision
Neutron constantly reports inability to update iptables that in turn makes
baremetal to fail to boot from PXE
From the review it seems that /usr/bin/update-alternatives set to legacy
fails since neutron user doesn't have sudo to run it
In the info I can see that neutron user has the following subset of commands
it's able to run:
...
(root) NOPASSWD: /usr/bin/update-alternatives --set iptables
/usr/sbin/iptables-legacy
(root) NOPASSWD: /usr/bin/update-alternatives --set ip6tables
/usr/sbin/ip6tables-legacy
(root) NOPASSWD: /usr/bin/update-alternatives --auto iptables
(root) NOPASSWD: /usr/bin/update-alternatives --auto ip6tables
But the issue is the fact that command isn't found as it was moved to
/usr/sbin/update-alternatives
Steps to reproduce
==================
1. Deploy undercloud
2. Deploy networks and VIP
3. Add and introspect a node
4. Execute overcloud node provision ... that will timeout
Expected result
===============
Successful overcloud node baremetal provisioning
Logs & Configs
==============
2023-08-31 18:21:28.613 4413 ERROR
neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent
[req-18d52177-9c93-401c-b97d-0334e488a257 - - - - -] Error while processing VIF
ports: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd:
['iptables-restore', '-n']; Stdin: # Generated by iptables_manager
2023-08-31 18:21:28.613 4413 ERROR
neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent COMMIT
2023-08-31 18:21:28.613 4413 ERROR
neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent # Completed by
iptables_manager
2023-08-31 18:21:28.613 4413 ERROR
neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent ; Stdout: ;
Stderr: iptables-restore: line 23 failed
Environment
===========
Centos 9 Stream and undercloud deployment tool
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2033683/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
