SE Group Management Network Override Issues in Tenant Mode
search cancel

SE Group Management Network Override Issues in Tenant Mode

book

Article ID: 420668

calendar_today

Updated On:

Products

VMware Avi Load Balancer

Issue/Introduction

When configuring Service Engine (SE) Groups under Tenant Mode, inconsistencies are observed while overriding the management network, depending on the tenant_vrf configuration:

  • Tenant Mode with tenant_vrf = false: When attempting to override the management network for the SE Group and saving the configuration, an error is displayed: “Cannot modify VrfContext. Object is not in tenant ####”

Although the error is correctly returned, the behavior is inconsistent. If the user cancels the SE Group configuration and edits it again, the updated management network settings are visible, indicating that the change was partially applied.

  • Tenant Mode with tenant_vrf = true: When overriding the management network and saving the SE Group configuration, no error message is shown. However, the UI becomes unresponsive and does not proceed further.

If the user refreshes the page or cancels the operation and reopens the SE Group configuration, the updated management network is visible.

Environment

VMware Avi Load Balancer Versions 22.1.x, 30.2.x till 30.2.6, 31.1.x and 31.2.1

Cause

The way the user interface handles the backend API requests during the save process is the cause for these issues

  • For tenant_vrf = false: When a network is selected in the Override Management Network dropdown and Save is clicked, the UI sends two API requests:

A PUT request to /api/serviceenginegroup/<uuid>: This request succeeds and updates the mgmt_network_ref field in the SE Group object.

A PUT request to /api/vrfcontext/<uuid>This request fails with HTTP status code 400, resulting in the displayed error. Despite the error, the SE Group object has already been updated, which explains why the new management network is visible upon re-editing.

  • For tenant_vrf = true

The PUT request to /api/serviceenginegroup/<uuid> succeeds, updating the management network. However, the UI does not properly handle the completion of the request flow, causing the page to remain stuck even though the configuration change has been applied in the backend.

Resolution

These inconsistencies in SE Group management network override behavior under Tenant Mode have been fixed in the following releases:

  • 31.2.2
  • 30.2.7
Powered by Wolken Software