Uploaded image for project: 'Fast Datapath Product'
  1. Fast Datapath Product
  2. FDP-893

CLONE [ovn23.09 fast-datapath-rhel-9] - ovn-northd IPAM incorrectly reports duplicate IP when part of excluded_ips

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Minor Minor
    • None
    • None
    • ovn23.09
    • 1
    • False
    • Hide

      None

      Show
      None
    • False
    • rhel-sst-network-fastdatapath-ovn
    • ssg_networking
    • Low

      Steps to reproduce the issue, in a sandbox:

      # Add a switch with a port with a static IP address.
      ovn-nbctl ls-add ls
      ovn-nbctl lsp-add ls lsp
      ovn-nbctl lsp-set-addresses lsp "a2:01:ea:3d:df:4a 10.128.2.2"
      # Enable IPAM for the switch but exclude the IP assigned to the existing LSP
      ovn-nbctl set logical_switch ls other_config:exclude_ips="10.128.2.2" other_config:subnet="10.128.2.0/24" 

      ovn-northd should exclude the IP from the ones that can be dynamically assigned through IPAM but shouldn't complain about duplicates (the IP is not really used anywhere else).  In reality, northd logs:

      2024-08-22T19:39:50.071Z|00012|ipam|WARN|b86ed8fe-061a-4366-9982-af84395872ba: Duplicate IP set: 10.128.2.2 

      This has no functional side effects but it does spam the log.

            [FDP-893] CLONE [ovn23.09 fast-datapath-rhel-9] - ovn-northd IPAM incorrectly reports duplicate IP when part of excluded_ips

            Since the problem described in this issue should be resolved in a recent advisory, it has been closed.

            For information on the advisory (ovn23.09 bug fix and enhancement update), and where to find the updated files, follow the link below.

            If the solution does not work for you, open a new bug report.
            https://access.redhat.com/errata/RHBA-2024:10896

            Errata Tool added a comment - Since the problem described in this issue should be resolved in a recent advisory, it has been closed. For information on the advisory (ovn23.09 bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2024:10896

            Ehsan Elahi added a comment -

            Reproduced on:

             

            [root@wsfd-advnetlab156 fdp-752]# rpm -qa | grep -E 'ovn|openvswitch'
            openvswitch-selinux-extra-policy-1.0-34.el9fdp.noarch
            openvswitch3.2-3.2.0-87.el9fdp.x86_64
            ovn23.09-23.09.4-36.el9fdp.x86_64
            ovn23.09-central-23.09.4-36.el9fdp.x86_64
            ovn23.09-host-23.09.4-36.el9fdp.x86_64
             
            

             

            Here is the reproducer:

             

            systemctl start ovn-northd
            ovn-nbctl set-connection ptcp:6641
            ovn-sbctl set-connection ptcp:6642
            systemctl start openvswitch
            ovs-vsctl set open . external_ids:system-id=hv0
            ovs-vsctl set open . external_ids:ovn-remote=tcp:42.42.42.1:6642
            ovs-vsctl set open . external_ids:ovn-encap-type=geneve
            ovs-vsctl set open . external_ids:ovn-encap-ip=42.42.42.1
            systemctl start ovn-controller
            ovn-nbctl ls-add ls
            ovn-nbctl lsp-add ls lsp
            ovn-nbctl lsp-set-addresses lsp "a2:01:ea:3d:df:4a 10.128.2.2"
            # Enable IPAM for the switch but exclude the IP assigned to the existing LSP
            ovn-nbctl set logical_switch ls other_config:exclude_ips="10.128.2.2" other_config:subnet="10.128.2.0/24" 
             
            +++ cat /var/log/ovn/ovn-northd.log |grep "Duplicate IP set: 10.128.2.2"
            2024-11-15T18:41:51.416Z|00010|ipam|WARN|95f48d26-62a6-44c1-882b-5bca047ad032: Duplicate IP set: 10.128.2.2
            <==== Northd logged Duplicate IP 
             
            

             

            Verified on:

             

            [root@wsfd-advnetlab155 fdp-752]# rpm -qa | grep -E 'ovn|openvswitch'
            openvswitch-selinux-extra-policy-1.0-34.el9fdp.noarch
            openvswitch3.2-3.2.0-87.el9fdp.x86_64
            ovn23.09-23.09.6-6.el9fdp.x86_64
            ovn23.09-central-23.09.6-6.el9fdp.x86_64
            ovn23.09-host-23.09.6-6.el9fdp.x86_64
             
            +++ cat /var/log/ovn/ovn-northd.log |grep "Duplicate IP set: 10.128.2.2"
            <============ Northd does not complain about duplicate IP
            

             

            Ehsan Elahi added a comment - Reproduced on:   [root@wsfd-advnetlab156 fdp-752]# rpm -qa | grep -E 'ovn|openvswitch' openvswitch-selinux-extra-policy-1.0-34.el9fdp.noarch openvswitch3.2-3.2.0-87.el9fdp.x86_64 ovn23.09-23.09.4-36.el9fdp.x86_64 ovn23.09-central-23.09.4-36.el9fdp.x86_64 ovn23.09-host-23.09.4-36.el9fdp.x86_64     Here is the reproducer:   systemctl start ovn-northd ovn-nbctl set-connection ptcp:6641 ovn-sbctl set-connection ptcp:6642 systemctl start openvswitch ovs-vsctl set open . external_ids:system-id=hv0 ovs-vsctl set open . external_ids:ovn-remote=tcp:42.42.42.1:6642 ovs-vsctl set open . external_ids:ovn-encap-type=geneve ovs-vsctl set open . external_ids:ovn-encap-ip=42.42.42.1 systemctl start ovn-controller ovn-nbctl ls-add ls ovn-nbctl lsp-add ls lsp ovn-nbctl lsp-set-addresses lsp "a2:01:ea:3d:df:4a 10.128.2.2" # Enable IPAM for the switch but exclude the IP assigned to the existing LSP ovn-nbctl set logical_switch ls other_config:exclude_ips= "10.128.2.2" other_config:subnet= "10.128.2.0/24"     +++ cat / var /log/ovn/ovn-northd.log |grep "Duplicate IP set: 10.128.2.2" 2024-11-15T18:41:51.416Z|00010|ipam|WARN|95f48d26-62a6-44c1-882b-5bca047ad032: Duplicate IP set: 10.128.2.2 <==== Northd logged Duplicate IP      Verified on:   [root@wsfd-advnetlab155 fdp-752]# rpm -qa | grep -E 'ovn|openvswitch' openvswitch-selinux-extra-policy-1.0-34.el9fdp.noarch openvswitch3.2-3.2.0-87.el9fdp.x86_64 ovn23.09-23.09.6-6.el9fdp.x86_64 ovn23.09-central-23.09.6-6.el9fdp.x86_64 ovn23.09-host-23.09.6-6.el9fdp.x86_64   +++ cat / var /log/ovn/ovn-northd.log |grep "Duplicate IP set: 10.128.2.2" <============ Northd does not complain about duplicate IP  

            OVN Team added a comment -

            The issue is fixed in ovn23.09-23.09.6-4.el9fdp.

            OVN Team added a comment - The issue is fixed in ovn23.09-23.09.6-4.el9fdp.

              lorenzobianconi lorenzo bianconi
              ovnteam@redhat.com OVN Team
              Ehsan Elahi Ehsan Elahi
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: