Skip to content

Copy LSP.tag to LSP.tag_request if it is unset#584

Open
otherwiseguy wants to merge 1 commit into
openstack-k8s-operators:mainfrom
otherwiseguy:OSPRH-31613
Open

Copy LSP.tag to LSP.tag_request if it is unset#584
otherwiseguy wants to merge 1 commit into
openstack-k8s-operators:mainfrom
otherwiseguy:OSPRH-31613

Conversation

@otherwiseguy

@otherwiseguy otherwiseguy commented Jun 26, 2026

Copy link
Copy Markdown

OVN 26.03.1 contains a fix that clears tags when the tag_request is cleared. For years, neutron has set the tag directly without setting a request. This if fixed in the neutron code, but on upgrade, it is possible that ports with tags and no tag_request will have the tags cleared before neutron could restart to fix them. Due to upgrade races between ovndbcluster and northd, this hacks the fix into northd startup.

Resolves: OSPRH-31613

@openshift-ci openshift-ci Bot requested review from averdagu and slawqo June 26, 2026 15:57
@openshift-ci

openshift-ci Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: otherwiseguy
Once this PR has been reviewed and has the lgtm label, please assign abays for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci

openshift-ci Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Hi @otherwiseguy. Thanks for your PR.

I'm waiting for a openstack-k8s-operators member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@@ -0,0 +1,32 @@
#!/bin/bash
set -e

@karelyatin karelyatin Jun 29, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok this will exit on errors, but may be better if we also have some wait for ovndbs on this script startup?
considering the case where both ovndbs(single replica setup) and ovn-northd started or rolled out together.

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry, I should have commented on that in the commit message. Using the nbctl daemon does cause it to wait on the connection.

@otherwiseguy

Copy link
Copy Markdown
Author

In northd logs https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/logs//558/rdoproject.org/558bdff04a364d57a3cb4bbcbf95a0a9/controller/ci-framework-data/logs/openstack-must-gather/quay-io-openstack-k8s-operators-openstack-must-gather-sha256-60f18c13dd16095f37313b68f86965210c8ccdb0badbf530f299f3accfed406a/namespaces/openstack/pods/ovn-northd-0/logs/ovn-northd.log observed the below warning:- 2026-06-26T16:42:15Z|00002|ovn_dbctl|WARN|not using ovn-nbctl daemon because of db option

@karelyatin Ah, good catch. I moved the --db option to only the nbctl daemon setup.

@karelyatin

Copy link
Copy Markdown
Contributor

/ok-to-test

const (
// ServiceCommand -
ServiceCommand = "/usr/bin/ovn-northd"
ServiceCommand = "/usr/local/bin/container-scripts/setup.sh"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IIUC the problem it is solving, this is needed only temporary and we should be fine with removing it in one of the next releases. We actually should need it only in 18, maybe even in one FR release and then it is not needed anymore, right? If that's correct understanding, maybe you could add some small TODO note to remove it in future, wdyt?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actually we don't have control from which release to which release customer will update so atleast for 18.0 looks we need this for 18.0 Lifetime. i.e if any release before this fix is the source version then this will be required. For any future update(i.e once all the tag are switched to tag_request) it will not be needed

For 19 we likely would not need it depending on how the pre-requisite of rhoso 19 are layered out(like if pre-requisite is env should be on latest FR like FR7 then we should be fine to drop it), but if update is allowed from FR6 to RHOSO 19 then we can't get rid of it.
If we are sure of this we can push this patch only in 18.0-fr6 branch which will be the base of all FR and bug fix releases for 18.0
But yes good to add NOTE on the code why this all is needed with a TODO to remove once this is no longer needed

@otherwiseguy otherwiseguy force-pushed the OSPRH-31613 branch 2 times, most recently from fe297b0 to de47e56 Compare June 30, 2026 22:29
OVN 26.03.1 contains a fix that clears tags when the tag_request
is cleared. For years, neutron has set the tag directly without
setting a request. This if fixed in the neutron code, but on
upgrade, it is possible that ports with tags and no tag_request
will have the tags cleared before neutron could restart to fix
them. Due to upgrade races between ovndbcluster and northd, this
hacks the fix into northd startup.

Resolves: OSPRH-31613

Signed-off-by: Terry Wilson <twilson@redhat.com>
@openshift-ci

openshift-ci Bot commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

@otherwiseguy: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/ovn-operator-build-deploy-kuttl 607960c link true /test ovn-operator-build-deploy-kuttl

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants