OpenContrail¶

23177¶

Dynamic Kernel Module Support fails to build DPDK kernel modules for OpenContrail v3.2.3 on kernels newer than v4.8. The workaround is to use DPDK libraries v17.02 instead of v2.1.

24943¶

If the OpenContrail cluster has ports with the allowed address pair (AAP) prefix length less than /24 for IPv4 and /120 for IPv6, such AAPs may not work after the upgrade of OpenContrail v3.2 to v4.0. The workaround is to modify all AAPs on all virtual interfaces through the OpenContrail web UI. For example, change 1.2.3.4/16 to 1.2.3.4/24.

25264¶

^{Fixed in 2019.2.3} In the OpenContrail 4.x deployments, after restoring the ZooKeeper database, contrail-control may be inactive on all ntw nodes due to an issue with permissions for certificates.

Workaround:

1. Log in to the Salt Master node.

2. Change permissions:

   salt -C 'I@opencontrail:control' cmd.run 'chown -R contrail:contrail /etc/contrail'
   

3. Verify that the files are owned by the OpenContrail user:

   salt -C 'I@opencontrail:control' cmd.run 'ls -la /etc/contrail'
   

25629¶

^{Fixed in 2019.2.3} In the OpenContrail 4.x deployments, some web UI tabs fail to open. For example, opening of Setting -> Config Editor raises [SyntaxError: Failed to parse JSON body: Unexpected end of input] in logs. Opening of Monitor -> Infrastructure -> Virtual Router restarts the web UI with The worker has disconnected error in logs.

Workaround:

1. Log in to any ntw or nal node.

2. In /etc/haproxy/haproxy.cfg, remove the option nolinger parameter from the contrail-api and contrail-analytics sections of the file.

3. Repeat the step 2 on the remaining ntw and nal nodes.

25857¶

The OpenContrail web UI may display the Instance data is available in config but not available in analytics false error message for some properly operating SNAT instances in Monitoring > Virtual Routers > Instances. Do not remove such instances.

26133¶

Tempest tests may cause contrail-api fail to start. The workaround depends on the workloads put on the cloud after performing the tempest test, contact Mirantis support to resolve the issue.

26673¶

^{Fixed in 2019.2.8} Updating the name of a shared network in the Horizon web UI fails with the Failed to update network <network_name> error message. As a workaround, update the network through CLI or the OpenContrail web UI.

29253¶

^{Fixed in 2019.2.4}

The Kafka service may fail to start on the MCP deployments with OpenContrail 4.1.

The Kafka service has the timeout option for connection to the ZooKeeper cluster. Sometimes, the specified timeout value is less than the time needed for ZooKeeper to perform election and start the service requests. The Kafka service stops working if connection to the ZooKeeper cluster is not established during the specified amount of time (timeout).

Workaround:

1. Log in to the Salt Master node.

2. Start the failed Kafka service on the affected node(s):

   salt -C "<affected_node_name>" cmd.run "doctrail analyticsdb service confluent-kafka start"
   

29091¶

Opening or refreshing the OpenContrail 4.1 web UI in the Google Chrome browser causes the SSH handshake failure.

Workaround:

Select from the following options:

• Use a different browser, for example, Firefox or Safari

• Access the OpenContrail web UI through the prx nodes

34807¶

The OpenContrail 4.1 vRouter may crash when applying the contrail-vrouter-agent configuration. No workaround is required, the vRouter automatically restarts after the crash and correctly applies the new configuration.