yahoo-eng-team team mailing list archive

[Corey Bryant <corey.bryant@xxxxxxxxxxxxx>]

This bug was fixed in the package neutron - 2:11.0.6-0ubuntu1~cloud2.1
---------------

 neutron (2:11.0.6-0ubuntu1~cloud2.1) xenial; urgency=medium
 .
   * d/p/bug1823038.patch: Cherry pick fix to ensure that None is not
     passed as an argument when spawning the neutron-keepalived-state-change
     agent (LP: #1823038).
 .
 neutron (2:11.0.6-0ubuntu1~cloud2) xenial-pike; urgency=medium
 .
   * d/p/fix-KeyError-in-OVS-firewall.patch: Cherry-picked from upstream
     to prevent neutron ovs agent from crashing due to creation of two
     security groups that both use the same remote security group, where
     the first group's port range is a subset of the second (LP: #1813007).
   * d/p/set-initial-ha-router-state-in-neutron-keepalived-st.patch:
     Cherry-picked from upstream stable/rocky branch to ensure proper
     detection of MASTER HA router by neutron-keepalived-state-change
     (LP: #1818614).


** Changed in: cloud-archive/pike
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1823038

Title:
  Neutron-keepalived-state-change fails to check initial router state

Status in Ubuntu Cloud Archive:
  Fix Released
Status in Ubuntu Cloud Archive pike series:
  Fix Released
Status in Ubuntu Cloud Archive queens series:
  Fix Released
Status in Ubuntu Cloud Archive rocky series:
  Fix Released
Status in Ubuntu Cloud Archive stein series:
  Fix Released
Status in neutron:
  Confirmed
Status in neutron package in Ubuntu:
  Fix Released
Status in neutron source package in Bionic:
  Fix Released
Status in neutron source package in Cosmic:
  Fix Released
Status in neutron source package in Disco:
  Fix Released

Bug description:
  [Impact]
  Fix for bug 1818614 in *-proposed includes a regression is the deployment is not using the rootwrap-daemon.

  [Test Case]
  See bug 1818614

  [Regression Potential]
  Low - this is a minor fix to resolve a regression due to the SRU bug 1818614.

  [Original Description]

  As fix for bug https://bugs.launchpad.net/neutron/+bug/1818614 we
  added to neutron-keepalived-state-change monitor possibility to check
  initial status of router (master or slave).

  Unfortunately for some reason I see now in journal log of functional
  job that this check is failing with error like:

  Apr 03 09:19:09 ubuntu-bionic-ovh-gra1-0004666718 neutron-keepalived-state-change[1553]: 2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change [-] Failed to get initial status of router cd300e6b-8222-4100-8f6a-3b5c4d5fe37b: FailedToDropPrivileges: privsep helper command exited non-zero (96)
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change Traceback (most recent call last):
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change   File "/home/zuul/src/git.openstack.org/openstack/neutron/neutron/agent/l3/keepalived_state_change.py", line 98, in handle_initial_state
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change     for address in ip.addr.list():
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change   File "/home/zuul/src/git.openstack.org/openstack/neutron/neutron/agent/linux/ip_lib.py", line 540, in list
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change     **kwargs)
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change   File "/home/zuul/src/git.openstack.org/openstack/neutron/neutron/agent/linux/ip_lib.py", line 1412, in get_devices_with_ip
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change     devices = privileged.get_link_devices(namespace, **link_args)
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change   File "/home/zuul/src/git.openstack.org/openstack/neutron/.tox/dsvm-functional-python27/local/lib/python2.7/site-packages/oslo_privsep/priv_context.py", line 240, in _wrap
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change     self.start()
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change   File "/home/zuul/src/git.openstack.org/openstack/neutron/.tox/dsvm-functional-python27/local/lib/python2.7/site-packages/oslo_privsep/priv_context.py", line 251, in start
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change     channel = daemon.RootwrapClientChannel(context=self)
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change   File "/home/zuul/src/git.openstack.org/openstack/neutron/.tox/dsvm-functional-python27/local/lib/python2.7/site-packages/oslo_privsep/daemon.py", line 328, in __init__
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change     raise FailedToDropPrivileges(msg)
                                                                                           2019-04-03 09:19:09.778 1553 ERROR neutron.agent.l3.keepalived_state_change FailedToDropPrivileges: privsep helper command exited non-zero (96)

  Example of such error: http://logs.openstack.org/25/645225/8/check
  /neutron-functional-
  python27/0704654/controller/logs/journal_log.txt.gz#_Apr_03_09_19_09

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1823038/+subscriptions