-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
4.14
-
Quality / Stability / Reliability
-
False
-
-
None
-
None
-
No
-
None
-
None
-
None
-
SDN Sprint 243, SDN Sprint 244
-
2
-
None
-
Release Note Not Required
-
N/A
-
None
-
None
-
None
-
None
Description of problem:
sos report does not collect all ovn related data if ipsec is disabled
Version-Release number of selected component (if applicable):
OCP version: 4.14.0-0.nightly-2023-10-06-234925 sos report version: sos-4.5.6-1.el9.noarch
How reproducible:
always
Steps to Reproduce:
1. install 4.14 cluster, CNI OVNK, with ipsec disabled 2. debug into one node, run toolbox $ oc debug node/ip-10-0-61-109 Starting pod/ip-10-0-61-109-debug ... To use host binaries, run `chroot /host` Pod IP: 10.0.61.109 If you don't see a command prompt, try pressing enter. sh-4.4# chroot /host sh-5.1# toolbox Trying to pull registry.redhat.io/rhel9/support-tools:latest... Getting image source signatures Checking if image destination supports signatures Copying blob 6846d6b7272b done Copying blob 3b7adf049118 skipped: already exists Copying config 4288d91b2b done Writing manifest to image destination Storing signatures 4288d91b2bfe3f2a5a7c87bc8dbee11d3936e6941120928d00f853162bd14401 Spawning a container 'toolbox-root' with image 'registry.redhat.io/rhel9/support-tools' Detected RUN label in the container image. Using that as the default... 0626d8ff71d448a844fd3f3c24621bd0c8fd3174c882b4d4cfe1be8602dee3a2 toolbox-root Container started successfully. To exit, type 'exit'. [root@ip-10-0-61-109 /]# 3. run sos report to collect data [root@ip-10-0-61-109 /]# sos report ... Your sosreport has been generated and saved in: /host/var/tmp/sosreport-ip-10-0-61-109-2023-10-09-acvurll.tar.xz ... 4. extract and check the collected data
Actual results:
some ovn related data is not collected: 1. there is no sosreport-xxxx/sos_command/openshift_ovn direcotry: % ls -l sosreport-ip-10-0-61-109-2023-10-09-acvurll/sos_commands/openshift_ovn ls: sosreport-ip-10-0-61-109-2023-10-09-acvurll/sos_commands/openshift_ovn: No such file or directory 2. there is no sosreport-xxxx/var/lib/ovn or sosreport-xxxx/var/lib/ovn-ic direcotry: % ls -l sosreport-ip-10-0-61-109-2023-10-09-acvurll/var/lib/ovn ls: sosreport-ip-10-0-61-109-2023-10-09-acvurll/var/lib/ovn: No such file or directory % ls -l sosreport-ip-10-0-61-109-2023-10-09-acvurll/var/lib/ovn-ic ls: sosreport-ip-10-0-61-109-2023-10-09-acvurll/var/lib/ovn-ic: No such file or directory
Expected results:
ovn related data can be collected when ipsec is disabled, as openshift_ovn is an enabled plugin by default, like: % ls -l sosreport-ip-10-0-48-226-2023-10-09-lrzzdta/sos_commands/openshift_ovn total 104 -rw-r--r-- 1 qiowang staff 197 Oct 9 15:48 crictl_exec_6c7c2d2b7473a355afb1e4f3ab5c165d447bcd4e4673bb2b8d5402a0426d59cc_certutil_-L_-d_sql_.etc.ipsec.d -rw-r--r-- 1 qiowang staff 35124 Oct 9 15:48 crictl_exec_6c7c2d2b7473a355afb1e4f3ab5c165d447bcd4e4673bb2b8d5402a0426d59cc_ipsec_status -rw-r--r-- 1 qiowang staff 7747 Oct 9 15:48 crictl_exec_6c7c2d2b7473a355afb1e4f3ab5c165d447bcd4e4673bb2b8d5402a0426d59cc_ovs-appctl_-t_ovs-monitor-ipsec_tunnels.show -rw-r--r-- 1 qiowang staff 1592 Oct 9 15:48 ovs-appctl_-t_.var.run.ovn-ic.ovn-controller._.ctl_ct-zone-list % ls -l sosreport-ip-10-0-48-226-2023-10-09-lrzzdta/var/lib/ovn-ic/etc total 4216 -rw-r----- 1 qiowang staff 617311 Oct 9 15:48 ovnnb_db.db -rw-r----- 1 qiowang staff 1539812 Oct 9 15:48 ovnsb_db.db
Additional info:
the ovn releated data can be collected well when ipsec is enabled