[multicast] Bump dendrite to dendrite-232 and remove recovery path

Author: zeeshanlakhani

Cargo.lock

@@ -477,7 +477,7 @@ digest = "0.10.7"
 dns-server = { path = "dns-server" }
 dns-server-api = { path = "dns-server-api" }
 dns-service-client = { path = "clients/dns-service-client" }
-dpd-client = { git = "https://github.com/oxidecomputer/dendrite", rev = "f20f786e67c86388dfaaf0ef3aa9d2693dfe1da4" }
+dpd-client = { git = "https://github.com/oxidecomputer/dendrite", rev = "5a4f56eede22d9a4484b6b28864306b1e4759f37" }
 dropshot = { version = "0.16.6", features = [ "usdt-probes" ] }
 dropshot-api-manager = "0.5.2"
 dropshot-api-manager-types = "0.5.2"

Cargo.toml

@@ -43,7 +43,7 @@ use std::net::IpAddr;
 
 use futures::future::try_join_all;
 use oxnet::MulticastMac;
-use slog::{Logger, debug, error, info, warn};
+use slog::{Logger, debug, error, info};
 
 use dpd_client::Error as DpdError;
 use dpd_client::types::{
@@ -927,116 +927,20 @@ impl MulticastDataplaneClient {
                         &underlay_ip_admin, &tag, &update_entry)
                     .await;
 
-                match update_res {
-                    Ok(_) => {}
-                    Err(DpdError::ErrorResponse(ref resp))
-                        if resp.status() == reqwest::StatusCode::NOT_FOUND
-                            || resp.status()
-                                == reqwest::StatusCode::INTERNAL_SERVER_ERROR =>
-                    {
-                        // 404: Group disappeared (race or external cleanup)
-                        // 500: ASIC state inconsistent with DPD DB
-                        //
-                        // In both cases, delete and recreate with the updated members.
-                        info!(
-                            log,
-                            "underlay update failed, attempting delete+recreate";
-                            "underlay_ip" => %underlay_ip,
-                            "switch" => %location,
-                            "operation" => %operation_name,
-                            "status" => %resp.status(),
-                            "dpd_operation" => "modify_group_membership_recreate"
-                        );
-
-                        // TODO: this `reset_by_tag` fallback can be removed
-                        // once DPD's `modify_group_internal` calls
-                        // `process_membership_changes` in the
-                        // empty-transition arm, preventing the 500 that
-                        // triggers this recovery path.
-                        // See https://github.com/oxidecomputer/dendrite/pull/232
-                        //
-                        // Try to delete the stale underlay group. If this
-                        // fails because the underlay group is still
-                        // referenced by an external group via NAT target,
-                        // fall back to `reset_by_tag`, which deletes
-                        // external groups first so the ASIC state is clean
-                        // for the next reconciler pass.
-                        if let Err(del_err) = client
-                            .multicast_group_delete(&underlay_ip, &tag)
-                            .await
-                        {
-                            warn!(
-                                log,
-                                "underlay delete failed, resetting all \
-                                 groups by tag for clean ASIC state";
-                                "underlay_ip" => %underlay_ip,
-                                "switch" => %location,
-                                "delete_error" => %del_err,
-                                "dpd_operation" => "modify_group_membership_recreate"
-                            );
-
-                            if let Err(reset_err) = client
-                                .multicast_reset_by_tag(&tag)
-                                .await
-                            {
-                                error!(
-                                    log,
-                                    "tag reset also failed during recovery";
-                                    "underlay_ip" => %underlay_ip,
-                                    "switch" => %location,
-                                    "error" => %reset_err,
-                                    "dpd_operation" => "modify_group_membership_recreate"
-                                );
-                            }
-
-                            // Return error so the reconciler retries.
-                            // Drift correction will recreate the groups
-                            // with clean ASIC state on the next pass.
-                            return Err(Error::internal_error(&format!(
-                                "underlay group recovery on {location}: \
-                                 reset by tag after delete failed ({del_err})"
-                            )));
-                        }
-
-                        // Recreate with the updated members
-                        let create_entry = MulticastGroupCreateUnderlayEntry {
-                            group_ip: underlay_ip_admin.clone(),
-                            members: update_entry.members,
-                            tag: underlay_group.tag.clone(),
-                        };
-
-                        client
-                            .multicast_group_create_underlay(&create_entry)
-                            .await
-                            .map_err(|e| {
-                                error!(
-                                    log,
-                                    "underlay recreate with members failed";
-                                    "underlay_ip" => %underlay_ip,
-                                    "switch" => %location,
-                                    "error" => %e,
-                                    "dpd_operation" => "modify_group_membership_recreate"
-                                );
-                                Error::internal_error(&format!(
-                                    "underlay recreate with members failed on {location}: {e}"
-                                ))
-                            })?;
-                    }
-                    Err(e) => {
-                        error!(
-                            log,
-                            "underlay member modify failed";
-                            "operation_name" => %operation_name,
-                            "underlay_ip" => %underlay_ip,
-                            "switch" => %location,
-                            "error" => %e,
-                            "dpd_operation" => "modify_group_membership_update"
-                        );
-                        return Err(Error::internal_error(&format!(
-                            "underlay member modify failed on {location}: {e}"
-                        )));
-                    }
-                }
+                update_res.map_err(|e| {
+                    error!(
+                        log,
+                        "underlay member modify failed";
+                        "operation_name" => %operation_name,
+                        "underlay_ip" => %underlay_ip,
+                        "switch" => %location,
+                        "error" => %e,
+                        "dpd_operation" => "modify_group_membership_update"
+                    );
+                    Error::internal_error(&format!(
+                        "underlay member modify failed on {location}: {e}"
+                    ))
+                })?;
 
                 info!(
                     log,

nexus/src/app/multicast/dataplane.rs

@@ -748,8 +748,8 @@ only_for_targets.image = "standard"
 # the other `source.*` keys.
 source.type = "prebuilt"
 source.repo = "dendrite"
-source.commit = "f20f786e67c86388dfaaf0ef3aa9d2693dfe1da4"
-source.sha256 = "877bb1cf5050825254befb9c259de7e362178613f1bacc8970af8c0a1f2f5fa5"
+source.commit = "5a4f56eede22d9a4484b6b28864306b1e4759f37"
+source.sha256 = "d5ffbf943805a3a72cd7a954b0ca2aec6530d21555ab5e7fcb3c75d8da7f5142"
 output.type = "zone"
 output.intermediate_only = true
 
@@ -775,8 +775,8 @@ only_for_targets.image = "standard"
 # the other `source.*` keys.
 source.type = "prebuilt"
 source.repo = "dendrite"
-source.commit = "f20f786e67c86388dfaaf0ef3aa9d2693dfe1da4"
-source.sha256 = "f30deb7c2989027ee0a3a9d67250b6ed107b7d1740fddfc81f97900c92bc7520"
+source.commit = "5a4f56eede22d9a4484b6b28864306b1e4759f37"
+source.sha256 = "85e2e2c6cc5e3daa346c20d5641cf9c8dc7dc9d15eaf61073e5002cf307b85f9"
 output.type = "zone"
 output.intermediate_only = true
 
@@ -795,8 +795,8 @@ only_for_targets.image = "standard"
 # the other `source.*` keys.
 source.type = "prebuilt"
 source.repo = "dendrite"
-source.commit = "f20f786e67c86388dfaaf0ef3aa9d2693dfe1da4"
-source.sha256 = "3f89230b0220e1e4e2797a00c202f5fae32dfba875cc7570f3f3681ea353d40b"
+source.commit = "5a4f56eede22d9a4484b6b28864306b1e4759f37"
+source.sha256 = "91217466293c47f6d964e55a9b54bac6c3a1a9d5580fa6a59eb218b850b2ade1"
 output.type = "zone"
 output.intermediate_only = true
 

package-manifest.toml

@@ -1,3 +1,3 @@
-CIDL_SHA256_ILLUMOS="877bb1cf5050825254befb9c259de7e362178613f1bacc8970af8c0a1f2f5fa5"
-CIDL_SHA256_LINUX_DPD="87a0bd1dd16e33a095bddd713006a9de70c6444525e796c0c066a87d6284cd0d"
+CIDL_SHA256_ILLUMOS="d5ffbf943805a3a72cd7a954b0ca2aec6530d21555ab5e7fcb3c75d8da7f5142"
+CIDL_SHA256_LINUX_DPD="cc3f34b9e85cd73b1563abbe9506c5589c1cf6d7aed0dccf5de38e9fb565dd3d"
 CIDL_SHA256_LINUX_SWADM="b059fde4e6859b2f7aaf2b3ade268a0cdbd5b696a0c8552e1c7d22e59680dbef"

tools/dendrite_stub_checksums

@@ -1 +1 @@
-COMMIT="f20f786e67c86388dfaaf0ef3aa9d2693dfe1da4"
+COMMIT="5a4f56eede22d9a4484b6b28864306b1e4759f37"