datacenter / ACI-Pre-Upgrade-Validation-Script

A script to run validations to detect potential issues that may cause an ACI fabric upgrade to fail
https://datacenter.github.io/ACI-Pre-Upgrade-Validation-Script/
Apache License 2.0
42 stars 27 forks source link

NewValidation: CSCwi66348 ACI switch Bootstrap can hit several hours delay if PBR policy are referred by mutiple contracts #143

Open rg5147 opened 2 months ago

rg5147 commented 2 months ago

Validation Type

[ ] - Fault

[ ] - Config

[ x] - Bug

[ ] - Other

What needs to be validated

    This validation needs to be done per switch. Not sure if this is possible with the script 

    1. Version check    < 16.0(4a)/5.3(2c)

    2. Check if the number of instances of the MO classes:  [vnsAdjacencyDefCont , vnsSvcRedirEcmpBucketCons, fvAdjDefCons] surpasses the 100,000. 

    Logic  1 and 2

    Snippit Format version 5.2(6e) :

    Per leaf

    moquery -c vnsAdjacencyDefCont -o xml| wc -l
    86861
    moquery -c vnsSvcRedirEcmpBucketCons -o xml| wc -l
    127858
    moquery -c fvAdjDefCons -o xml| wc -l
    84567

    Instances =  299286  > 100,000

Why it needs to be validated

Front panel ports will be brought up before policy download is completed after 90 minutes

Additional context

Traffic loss if front panel ports are brought up before policy download is complete
Customer should prepare for longer upgrade time for the affected leaf
Customer should shutdown front panel ports for affected leaves
monrog2 commented 3 weeks ago

Can pull out all fabric Node Ids with a fabricNode query then iterate through and count... maybe do a fabric-wide count first to decide whether or not to bother doing the iterations:

admin@apic1:~> icurl 'http://127.0.0.1:7777/api/node-101/class/vnsAdjacencyDefCont.json?&rsp-subtree-include=count'
{"totalCount":"1","imdata":[{"moCount":{"attributes":{"childAction":"","count":"15","dn":"","status":""}}}]}

admin@apic1:~> icurl 'http://127.0.0.1:7777/api/node-101/class/vnsSvcRedirEcmpBucketCons.json?&rsp-subtree-include=count'
{"totalCount":"1","imdata":[{"moCount":{"attributes":{"childAction":"","count":"15","dn":"","status":""}}}]}

admin@apic1:~> icurl 'http://127.0.0.1:7777/api/node-101/class/fvAdjDefCons.json?&rsp-subtree-include=count'
{"totalCount":"1","imdata":[{"moCount":{"attributes":{"childAction":"","count":"15","dn":"","status":""}}}]}