Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-20296

sos report does not collect all ovn related data if ipsec is disabled

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • No
    • None
    • None
    • None
    • SDN Sprint 243, SDN Sprint 244
    • 2
    • None
    • Release Note Not Required
    • N/A
    • None
    • None
    • None
    • None

      Description of problem:

      sos report does not collect all ovn related data if ipsec is disabled

      Version-Release number of selected component (if applicable):

      OCP version: 4.14.0-0.nightly-2023-10-06-234925
      sos report version: sos-4.5.6-1.el9.noarch

      How reproducible:

      always

      Steps to Reproduce:

      1. install 4.14 cluster, CNI OVNK, with ipsec disabled
      
      
      2. debug into one node, run toolbox
      $ oc debug node/ip-10-0-61-109
      Starting pod/ip-10-0-61-109-debug ...
      To use host binaries, run `chroot /host`
      Pod IP: 10.0.61.109
      If you don't see a command prompt, try pressing enter.
      sh-4.4# chroot /host
      sh-5.1# toolbox
      Trying to pull registry.redhat.io/rhel9/support-tools:latest...
      Getting image source signatures
      Checking if image destination supports signatures
      Copying blob 6846d6b7272b done 
      Copying blob 3b7adf049118 skipped: already exists 
      Copying config 4288d91b2b done 
      Writing manifest to image destination
      Storing signatures
      4288d91b2bfe3f2a5a7c87bc8dbee11d3936e6941120928d00f853162bd14401
      Spawning a container 'toolbox-root' with image 'registry.redhat.io/rhel9/support-tools'
      Detected RUN label in the container image. Using that as the default...
      0626d8ff71d448a844fd3f3c24621bd0c8fd3174c882b4d4cfe1be8602dee3a2
      toolbox-root
      Container started successfully. To exit, type 'exit'.
      [root@ip-10-0-61-109 /]#
      
      
      3. run sos report to collect data
      [root@ip-10-0-61-109 /]# sos report
      ...
      Your sosreport has been generated and saved in:
      	/host/var/tmp/sosreport-ip-10-0-61-109-2023-10-09-acvurll.tar.xz
      ...
      
      
      4. extract and check the collected data

      Actual results:

      some ovn related data is not collected:
      1. there is no sosreport-xxxx/sos_command/openshift_ovn direcotry:
      % ls -l sosreport-ip-10-0-61-109-2023-10-09-acvurll/sos_commands/openshift_ovn
      ls: sosreport-ip-10-0-61-109-2023-10-09-acvurll/sos_commands/openshift_ovn: No such file or directory
      
      
      2. there is no sosreport-xxxx/var/lib/ovn or sosreport-xxxx/var/lib/ovn-ic direcotry:
      % ls -l sosreport-ip-10-0-61-109-2023-10-09-acvurll/var/lib/ovn
      ls: sosreport-ip-10-0-61-109-2023-10-09-acvurll/var/lib/ovn: No such file or directory
      % ls -l sosreport-ip-10-0-61-109-2023-10-09-acvurll/var/lib/ovn-ic
      ls: sosreport-ip-10-0-61-109-2023-10-09-acvurll/var/lib/ovn-ic: No such file or directory

      Expected results:

      ovn related data can be collected when ipsec is disabled, as openshift_ovn is an enabled plugin by default, like:
      
      % ls -l sosreport-ip-10-0-48-226-2023-10-09-lrzzdta/sos_commands/openshift_ovn 
      total 104
      -rw-r--r--  1 qiowang  staff    197 Oct  9 15:48 crictl_exec_6c7c2d2b7473a355afb1e4f3ab5c165d447bcd4e4673bb2b8d5402a0426d59cc_certutil_-L_-d_sql_.etc.ipsec.d
      -rw-r--r--  1 qiowang  staff  35124 Oct  9 15:48 crictl_exec_6c7c2d2b7473a355afb1e4f3ab5c165d447bcd4e4673bb2b8d5402a0426d59cc_ipsec_status
      -rw-r--r--  1 qiowang  staff   7747 Oct  9 15:48 crictl_exec_6c7c2d2b7473a355afb1e4f3ab5c165d447bcd4e4673bb2b8d5402a0426d59cc_ovs-appctl_-t_ovs-monitor-ipsec_tunnels.show
      -rw-r--r--  1 qiowang  staff   1592 Oct  9 15:48 ovs-appctl_-t_.var.run.ovn-ic.ovn-controller._.ctl_ct-zone-list
      
      % ls -l sosreport-ip-10-0-48-226-2023-10-09-lrzzdta/var/lib/ovn-ic/etc        
      total 4216
      -rw-r-----  1 qiowang  staff   617311 Oct  9 15:48 ovnnb_db.db
      -rw-r-----  1 qiowang  staff  1539812 Oct  9 15:48 ovnsb_db.db

      Additional info:

      the ovn releated data can be collected well when ipsec is enabled

              pepalani@redhat.com Periyasamy Palanisamy
              rh-ee-qiowang Qiong Wang
              None
              None
              Qiong Wang Qiong Wang
              None
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: