https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/NETVIRT-506 netvirt <p><a href="https://logs.opendaylight.org/releng/jenkins092/netvirt-csit-1node-openstack-newton-nodl-v2-gate-learn-carbon/4/archives/log.html.gz" class="external-link" target="_blank" rel="nofollow noopener">https://logs.opendaylight.org/releng/jenkins092/netvirt-csit-1node-openstack-newton-nodl-v2-gate-learn-carbon/4/archives/log.html.gz</a></p> <p>Operating System: All<br/> Platform: All</p> NETVIRT-506

CSIT Sporadic failures - tempest.scenario.test_port_security_macspoofing_port

Bug Highest Resolved Cannot Reproduce Sam Hague Alon Kochba csit:failures csit:snat-conntrack csit:sporadic Wed, 1 Mar 2017 17:50:40 +0000 Thu, 3 May 2018 14:37:01 +0000 Thu, 5 Apr 2018 23:32:23 +0000 Carbon General 0 5 <p>This test is failing due to multiple reasons on different configurations.</p> <p>The main reason it is failing is regression introduced here <a href="https://git.opendaylight.org/gerrit/#/c/52175/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/52175/</a>, causing a change in the port to port_security_enabled=False not to unbind the service - so the port still goes through the ACL even though it shouldn't.</p> <p>The reason all transparent jobs fail is that the test was recently corrected in Tempest - and it fails on transparent as expected since there is no mac spoofing check, this is basically a test that should be grouped with the other ACL tests.</p> <p>The reason learn security groups are unstable is yet to be determined. Technically there is no anti-spoofing rules in learn so the test should not pass due to that, but it also seems like it fails earlier.</p> <p>When port-security is enabled/disabled bind/unbind was not getting invoked, hence leaving the SG flows in the dispatcher. <span class="error">&#91;1&#93;</span> should solve the issue.</p> <p><span class="error">&#91;1&#93;</span>https://git.opendaylight.org/gerrit/#/c/52875/</p> <p>I had a look at the macspoofing test that’s failing only in mitaka now all the time.<br/> I'm pretty sure the reason it's failing is because of the default SG bug that was fixed in newton networking-odl and not in mitaka <span class="error">&#91;1&#93;</span></p> <p>We skip a similar test 'hotplug_nic' due to this reason <span class="error">&#91;2&#93;</span>.</p> <p>Here's a failure <span class="error">&#91;3&#93;</span>, you can see that the test does something very similar to the hotplug nic test (adds a nic with default security rules, pings from it to another vm on that network).<br/> It's failing on that ping, before any spoofing/port_security is changed <span class="error">&#91;4&#93;</span>, line 834.</p> <p>I think it's safe to skip this test in Mitaka, not worth the trouble IMO.<br/> Otherwise can ask neutron to cherry-pick this though it's been 4 months.</p> <p>Jamo, I put up <span class="error">&#91;5&#93;</span> to just skip this test. Can't run it in sandbox as its in shutdown mode.</p> <p><span class="error">&#91;1&#93;</span> <a href="https://review.openstack.org/#/c/390783/" class="external-link" target="_blank" rel="nofollow noopener">https://review.openstack.org/#/c/390783/</a><br/> <span class="error">&#91;2&#93;</span> <a href="https://git.opendaylight.org/gerrit/#/c/49411/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/49411/</a><br/> <span class="error">&#91;3&#93;</span> <a href="https://logs.opendaylight.org/releng/jenkins092/netvirt-csit-1node-openstack-mitaka-upstream-stateful-carbon/201/archives/tempest/tempest_output_tempest.scenario.test_network_basic_ops.TestNetworkBasicOps.test_port_security_macspoofing_port.log.gz" class="external-link" target="_blank" rel="nofollow noopener">https://logs.opendaylight.org/releng/jenkins092/netvirt-csit-1node-openstack-mitaka-upstream-stateful-carbon/201/archives/tempest/tempest_output_tempest.scenario.test_network_basic_ops.TestNetworkBasicOps.test_port_security_macspoofing_port.log.gz</a><br/> <span class="error">&#91;4&#93;</span> <a href="https://github.com/openstack/tempest/blob/master/tempest/scenario/test_network_basic_ops.py" class="external-link" target="_blank" rel="nofollow noopener">https://github.com/openstack/tempest/blob/master/tempest/scenario/test_network_basic_ops.py</a><br/> <span class="error">&#91;5&#93;</span> <a href="https://git.opendaylight.org/gerrit/53285" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/53285</a></p> <p><a href="https://logs.opendaylight.org/releng/jenkins092/netvirt-csit-1node-openstack-newton-nodl-v2-upstream-stateful-carbon/268/archives/log.html.gz#s1-s2-s1-t16" class="external-link" target="_blank" rel="nofollow noopener">https://logs.opendaylight.org/releng/jenkins092/netvirt-csit-1node-openstack-newton-nodl-v2-upstream-stateful-carbon/268/archives/log.html.gz#s1-s2-s1-t16</a></p> <p>tempest failures appear to mostly have been resolved. We can re-open any<br/> of the tempest bugs if/when they appear again in CSIT.</p> <p><a href="https://logs.opendaylight.org/releng/jenkins092/netvirt-csit-1node-openstack-newton-nodl-v2-upstream-learn-carbon/243/archives/log.html.gz#s1-s2-s1-t16" class="external-link" target="_blank" rel="nofollow noopener">https://logs.opendaylight.org/releng/jenkins092/netvirt-csit-1node-openstack-newton-nodl-v2-upstream-learn-carbon/243/archives/log.html.gz#s1-s2-s1-t16</a></p> <p>closing as part of a general bug cleanup. Will re-open if we see it again.</p> <p><a href="https://logs.opendaylight.org/releng/jenkins092/netvirt-csit-1node-openstack-newton-nodl-v2-upstream-learn-carbon/333/log.html.gz#s1-s2-s1-t16" class="external-link" target="_blank" rel="nofollow noopener">https://logs.opendaylight.org/releng/jenkins092/netvirt-csit-1node-openstack-newton-nodl-v2-upstream-learn-carbon/333/log.html.gz#s1-s2-s1-t16</a></p> <p><a href="https://logs.opendaylight.org/releng/jenkins092/netvirt-csit-1node-openstack-newton-nodl-v2-upstream-learn-carbon/353/log.html.gz#s1-s2-s1-t16" class="external-link" target="_blank" rel="nofollow noopener">https://logs.opendaylight.org/releng/jenkins092/netvirt-csit-1node-openstack-newton-nodl-v2-upstream-learn-carbon/353/log.html.gz#s1-s2-s1-t16</a></p> <p>no longer seen in CSIT</p> <p>seen again in nitrogen:</p> <p><a href="https://logs.opendaylight.org/releng/vex-yul-odl-jenkins-1/netvirt-csit-1node-openstack-ocata-upstream-stateful-snat-conntrack-nitrogen/195/robot-plugin/log_full.html.gz#s1-s5-t12" class="external-link" target="_blank" rel="nofollow noopener">https://logs.opendaylight.org/releng/vex-yul-odl-jenkins-1/netvirt-csit-1node-openstack-ocata-upstream-stateful-snat-conntrack-nitrogen/195/robot-plugin/log_full.html.gz#s1-s5-t12</a></p> <p>here's one in oxygen:</p> <p> <a href="https://logs.opendaylight.org/releng/vex-yul-odl-jenkins-1/netvirt-csit-1node-openstack-queens-upstream-stateful-snat-conntrack-oxygen/214/" class="external-link" target="_blank" rel="nofollow noopener">https://logs.opendaylight.org/releng/vex-yul-odl-jenkins-1/netvirt-csit-1node-openstack-queens-upstream-stateful-snat-conntrack-oxygen/214/</a></p> Development External issue ID 7885 External issue URL Rank 0|i01s7z: Status Whiteboard csit:sporadic_failures