Bug#990342: neutron-l3-agent: Neutron not installing iptables as dependency

[Michal Arbet]

Package: neutron-l3-agent
Version: 2:18.0.0-4
Severity: normal

Dear Maintainer,

Neutron agents (l3-agent, dhcp agent) needs iptables.
Currently it's missing, in previous versions it was
working probably due some other openstack or system package
installed iptables as dependency, so issue was "hidden".

Issue was tested on kolla-ansible infrastructure where
neutron components is divided into containers.

LOG:

2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager [-] Failure applying iptables rules: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['ip', 'netns', 'exec', 'qrouter-8c2976c5-cc73-4860-abdf-1488e8e5aae4', 'iptables-save']; Stdin: ; Stdout: ; Stderr: exec of "iptables-save" failed: No such file or directory
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager Traceback (most recent call last):
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 432, in defer_apply
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager self.defer_apply_off()
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 446, in defer_apply_off
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager self._apply()
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 464, in _apply
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager first = self._apply_synchronized()
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 589, in _apply_synchronized
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager return []
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager File "/usr/lib/python3/dist-packages/oslo_utils/excutils.py", line 227, in __exit__
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager self.force_reraise()
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager File "/usr/lib/python3/dist-packages/oslo_utils/excutils.py", line 200, in force_reraise
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager raise self.value
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 576, in _apply_synchronized
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager save_output = linux_utils.execute(args, run_as_root=True,
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 156, in execute
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager raise exceptions.ProcessExecutionError(msg,
2021-06-24 09:26:18.672 29 ERROR neutron.agent.linux.iptables_manager neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['ip', 'netns', 'exec', 'qrouter-8c2976c5-cc73-4860-abdf-1488e8e5aae4', 'iptables-save']; Stdin: ; Stdout: ; Stderr: exec of "iptables-save" failed: No such file or directory

Occurences:

root@controller0:/home/ubuntu# grep -Ri iptables /var/log/kolla/neutron/ | awk -F ':' '{print $1}' | sort | uniq | sort
/var/log/kolla/neutron/neutron-dhcp-agent.log
/var/log/kolla/neutron/neutron-l3-agent.log


-- System Information:
Debian Release: 10.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-8-amd64 (SMP w/32 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages neutron-l3-agent depends on:
ii adduser 3.118
ii debconf 1.5.71
pn haproxy <none>
pn iputils-arping <none>
pn keepalived <none>
ii lsb-base 10.2019051400
pn neutron-common <none>
pn radvd <none>
ii sudo 1.8.27-1+deb10u2

Versions of packages neutron-l3-agent recommends:
pn openvswitch-switch <none>

neutron-l3-agent suggests no packages.