From 8e173b88d138d0065e7f1bc668e3a0b65ce3be2e Mon Sep 17 00:00:00 2001 From: Julia Kreger Date: Fri, 17 Sep 2021 12:34:52 -0700 Subject: [PATCH] Disable Neutron firewall Neutron's firewall initialization with OVS seems to be the source of our pain with ports not being found by ironic jobs. This is because firewall startup errors crashes out the agent with a RuntimeError while it is deep in it's initial __init__ sequence. This ultimately seems to be rooted with communication with OVS itself, but perhaps the easiest solution is to just disable the firewall.... Related: https://bugs.launchpad.net/neutron/+bug/1944201 Change-Id: I303989a825a7e35f1cb7b401134fd63553f6791c --- zuul.d/ironic-jobs.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/zuul.d/ironic-jobs.yaml b/zuul.d/ironic-jobs.yaml index 308a2b1912..e00e7397cd 100644 --- a/zuul.d/ironic-jobs.yaml +++ b/zuul.d/ironic-jobs.yaml @@ -59,6 +59,11 @@ # something more like 5GB for baremetal jobs due to image sizes # with firmware. GLANCE_LIMIT_IMAGE_SIZE_TOTAL: 5000 + # NOTE(TheJulia): Disable neutron firewall as bug + # https://bugs.launchpad.net/neutron/+bug/1944201 + # causes us an abnormally high job failure rate due to the ports + # not being found (as neutron crashed on initailization). + Q_USE_SECGROUP: False devstack_plugins: ironic: https://opendev.org/openstack/ironic tempest_plugins: