openstack/ironic
Code Issues Proposed changes

Disable Neutron firewall

Browse Source 
Neutron's firewall initialization with OVS seems
to be the source of our pain with ports not being found
by ironic jobs. This is because firewall startup errors
crashes out the agent with a RuntimeError while it is deep
in it's initial __init__ sequence.

This ultimately seems to be rooted with communication
with OVS itself, but perhaps the easiest solution is
to just disable the firewall....

Related: https://bugs.launchpad.net/neutron/+bug/1944201
Change-Id: I303989a825a7e35f1cb7b401134fd63553f6791c
This commit is contained in:
Julia Kreger 2021-09-17 12:34:52 -07:00
parent de50ff2df5
commit 8e173b88d1
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
zuul.d/ironic-jobs.yaml
View File

@ -59,6 +59,11 @@
# something more like 5GB for baremetal jobs due to image sizes
# with firmware.
GLANCE_LIMIT_IMAGE_SIZE_TOTAL: 5000
# NOTE(TheJulia): Disable neutron firewall as bug
# https://bugs.launchpad.net/neutron/+bug/1944201
# causes us an abnormally high job failure rate due to the ports
# not being found (as neutron crashed on initailization).
Q_USE_SECGROUP: False
devstack_plugins:
ironic: https://opendev.org/openstack/ironic
tempest_plugins: