tripleo-heat-templates/deployment
Michele Baldessari b1d82e6acb Workaround rhel8,0 iptables bug causing neutron_ovs_agent to restart continuously
On rhel8 the ovs_neutron_agent container endlessly restarts with:

2019-03-05 15:41:57.096 534226 DEBUG oslo_concurrency.lockutils [req-a004e117-dba8-42bf-81fe-abf7a9f2faab - - - - -] Lock "conntrack" released by "neutron.agent.linux.ip_conntrack.get_conntrack" :: held 0.257s inner /usr/lib/python3.6/site-packages/oslo_concurrency/lockutils.py:339
2019-03-05 15:41:57.096 534226 ERROR neutron.plugins.ml2.drivers.openvswitch.agent.ovs_neutron_agent [req-a004e117-dba8-42bf-81fe-abf7a9f2faab - - - - -] Exit code: 1; Stdin: ; Stdout: Table `raw' does not exist
; Stderr:  Agent terminated!: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Stdin: ; Stdout: Table `raw' does not exist
2019-03-05 15:41:57.098 534226 INFO oslo_rootwrap.client [-] Stopping rootwrap daemon process with pid=534237

This is due to an iptables bug listing tables that were not initialized:
https://bugzilla.redhat.com/show_bug.cgi?id=1673609

Let us just load the raw module by listing it so that the issue does not
appear. Slawomir and I tested this on an environment and could confirm
that the agent does not restart any longer:
[root@undercloud-0 ~]# podman logs neutron_ovs_agent 2>&1|grep -i error
[root@undercloud-0 ~]#

We are leaving these commands running on any OS version as they are
harmless in any case.

Closes-Bug: #1818834

Co-Authored-By: Slawomir Kaplonski <skaplons@redhat.com>

Change-Id: Ifddcec009ae93ad0e51abfe1425eb81c1817db55
2019-03-06 14:18:02 +01:00
..
aodh flatten database service MySQL Client 2019-01-30 09:38:32 -05:00
barbican flatten the barbican service configurations 2019-02-18 08:06:21 -05:00
ceilometer Fix monitoring_subscription on misc services 2019-03-04 07:52:56 -05:00
cinder Rename docker_puppet_tasks to container_puppet_tasks 2019-03-05 12:07:09 -05:00
clients Move openstack clients service 2019-02-15 13:32:06 -07:00
congress flatten the congress service 2019-02-01 10:02:10 -05:00
container-image-prepare container-image-prepare: redirect all output to logfile 2019-02-26 12:58:54 -05:00
database Rename docker_puppet_tasks to container_puppet_tasks 2019-03-05 12:07:09 -05:00
deprecated Fix logging config on misc services 2019-03-04 07:52:56 -05:00
designate Fix logging config on misc services 2019-03-04 07:52:56 -05:00
ec2 flatten the ec2 service configurations 2019-02-25 09:21:26 -05:00
etcd Rename docker_puppet_tasks to container_puppet_tasks 2019-03-05 12:07:09 -05:00
glance Enable glance image cache's cleaner and pruner 2019-02-11 12:32:28 -05:00
haproxy Drop unused deployment services parameters 2019-03-04 07:52:56 -05:00
heat Merge "flatten database service MySQL Client" 2019-02-01 00:07:19 +00:00
horizon flatten the horizon service configurations 2019-02-04 14:23:57 -05:00
image-serve image-serve: only uninstall docker-distribution when it was installed 2019-03-05 16:36:30 -05:00
ironic Disable SELinux separation for ironic_pxe_http 2019-03-01 16:03:23 +01:00
iscsid flatten the iscsid service 2019-01-29 08:08:06 -05:00
keepalived Ensure logs folder is created in prep hosts tasks. 2019-01-18 09:28:56 +01:00
kernel Switch default neutron ML2 mechanism driver to OVN 2019-02-14 15:58:27 +01:00
keystone Rename docker_puppet_tasks to container_puppet_tasks 2019-03-05 12:07:09 -05:00
login-defs Move login-defs to deployment directory 2019-01-22 13:48:57 -07:00
manila Fix monitoring_subscription on misc services 2019-03-04 07:52:56 -05:00
memcached Merge "Enable memcached debug if Debug param is set" 2019-01-22 00:49:42 +00:00
messaging Apply stop period for paunch-managed stateful svcs 2019-02-21 16:50:17 +01:00
metrics flatten collectd service configuration 2019-02-19 16:42:24 +05:30
mistral Fix malformed mistal_executor kolla config file 2019-02-19 09:25:11 +01:00
multipathd Move the multipathd services into deployment 2019-01-29 08:13:40 -05:00
neutron Workaround rhel8,0 iptables bug causing neutron_ovs_agent to restart continuously 2019-03-06 14:18:02 +01:00
nova Drop unused deployment services parameters 2019-03-04 07:52:56 -05:00
octavia Rename docker_puppet_tasks to container_puppet_tasks 2019-03-05 12:07:09 -05:00
podman Remove Docker when upgrading to Podman 2019-03-01 13:07:19 +00:00
qdr flatten qdrouterd service configs 2019-02-15 12:53:15 -07:00
rabbitmq Rename docker_puppet_tasks to container_puppet_tasks 2019-03-05 12:07:09 -05:00
sahara flatten database service MySQL Client 2019-01-30 09:38:32 -05:00
securetty Move securetty to deployment dir 2019-01-22 13:45:40 -07:00
selinux Move selinux to deployment folder 2019-01-22 13:21:13 -07:00
snmp Snmp - Use net_cidr_map for firewall rules 2019-01-06 18:21:54 +01:00
sshd Avoid dangling firewall rule for ssh access 2019-01-22 14:49:46 +01:00
swift Remove the use of tests as filters as it will be deprecated. 2019-02-07 16:29:52 +01:00
tacker flatten the tacker service 2019-02-01 10:00:25 -05:00
time flatten time service configuration 2018-12-18 10:41:15 -05:00
timesync Fix service naming conventions 2018-12-13 08:12:36 -07:00
tripleo-firewall Clean unmanaged rules pushed by iptables-services package 2019-02-04 14:56:08 +01:00
tripleo-packages Move UpgradeInitCommand and UpgradeInitCommonCommand to run by Ansible 2019-01-28 12:16:52 +01:00
tuned flatten tuned service configuration 2018-12-14 13:13:40 -05:00
zaqar flatten database service MySQL Client 2019-01-30 09:38:32 -05:00
README.rst Add deployments/README.rst 2018-12-13 10:25:09 -05:00

README.rst

TripleO Deployments

This directory contains files that represent individual service deployments, orchestration tools, and the configuration tools used to deploy them.

Directory Structure

Each logical grouping of services will have a directory. Example: 'timesync'. Within this directory related timesync services would exist to for example configure timesync services on baremetal or via containers.

Filenaming conventions

As a convention each deployments service filename will reflect both the deployment engine (baremetal, or containers) along with the config tool used to deploy that service.

The convention is <service-name>-<engine>-<config management tool>.

Examples:

deployment/aodh/aodh-api-container-puppet.yaml (containerized Aodh service configured with Puppet)

deployment/aodh/aodh-api-container-ansible.yaml (containerized Aodh service configured with Ansible)

deployment/timesync/chrony-baremetal-ansible.yaml (baremetal Chrony service configured with Ansible)

deployment/timesync/chrony-baremetal-puppet.yaml (baremetal Chrony service configured with Puppet)