Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-11428

[BGP] OVN Routing not working with TLS

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • rhos-18.0.4
    • None
    • edpm-ansible
    • None
    • 3
    • False
    • Hide

      None

      Show
      None
    • False
    • ?
    • ?
    • ?
    • ?
    • None
    • RHOSO sprint BugFix 4
    • Important

      When `edpm_ovn_bgp_agent_local_ovn_routing` is enabled, some containers are deployed on each EDPM node, implementing an OVN cluster: NB DB, SB DB, northd and ovn-controller. See [1].

       

      On RHOSO 18.0 FR1, `northd` and `bgp_ovn_controller` containers are properly running on EDPM nodes, but `nb_db_server` and `sb_db_server` are restarting every few seconds.

       

      The reason is the options added by edpm-ansible to the `ovn-ctl`  command executed on these containers when TLS is enabled are not valid:

      Nov 11 18:22:06 compute-ehm6ti6v-0 nb_db_server[30040]: Running command: '/usr/share/ovn/scripts/ovn-ctl --no-monitor run_nb_ovsdb  -p /etc/pki/tls/private/ovndb.key -c /etc/pki/tls/certs/ovndb.crt -C /etc/pki/tls/certs/ovndbca.crt '
      Nov 11 18:22:06 compute-ehm6ti6v-0 nb_db_server[30040]: + echo 'Running command: '\''/usr/share/ovn/scripts/ovn-ctl --no-monitor run_nb_ovsdb  -p /etc/pki/tls/private/ovndb.key -c /etc/pki/tls/certs/ovndb.crt -C /etc/pki/tls/certs/ovndbca.crt '\'''
      Nov 11 18:22:06 compute-ehm6ti6v-0 nb_db_server[30040]: /usr/share/ovn/scripts/ovn-ctl: unknown option "-p" (use --help for help)
      Nov 11 18:22:07 compute-ehm6ti6v-0 systemd[1]: edpm_nb_db_server.service: Main process exited, code=exited, status=1/FAILURE

       

      Those options can be found here [2].

       

       [1] https://github.com/openstack-k8s-operators/edpm-ansible/blob/6615889c5d708df2accb7dafec5aa099946292b8/roles/edpm_ovn_bgp_agent/tasks/run_ovn.yml#L35-L73

       [2] https://github.com/openstack-k8s-operators/edpm-ansible/tree/main/roles/edpm_ovn_bgp_agent/templates/kolla_config

       

              eolivare Eduardo Olivares Toledo
              eolivare Eduardo Olivares Toledo
              rhos-dfg-networking-squad-bgp
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: