Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-1524

Full Cluster Cert Redeploy is broken when the ES clusters includes non-data nodes

    XMLWordPrintable

Details

    • False
    • False
    • NEW
    • NEW
    • Hide
      In previous releases, if you redeployed a full OpenShift Logging-managed Elasticsearch cluster, it might become stuck in an unhealthy state, with one non-data node running and all other data nodes shut down. This was caused by new certificates preventing the OpenShift Elasticsearch Operator from scaling down the non-data nodes of the Elasticsearch cluster. With this update, The OpenShift Elasticsearch Operator can scale all the data and non-data nodes down and then back up again, so that the nodes can load the new certificates. The OpenShift Elasticsearch Operator can reach the new nodes after they load the new certificates.
      Show
      In previous releases, if you redeployed a full OpenShift Logging-managed Elasticsearch cluster, it might become stuck in an unhealthy state, with one non-data node running and all other data nodes shut down. This was caused by new certificates preventing the OpenShift Elasticsearch Operator from scaling down the non-data nodes of the Elasticsearch cluster. With this update, The OpenShift Elasticsearch Operator can scale all the data and non-data nodes down and then back up again, so that the nodes can load the new certificates. The OpenShift Elasticsearch Operator can reach the new nodes after they load the new certificates.
    • Logging (LogExp) - Sprint 203

    Description

      On Cert expiry the elasticsearch-operator restarts the whole cluster by scaling down all nodes and then scaling them up again. This causes the restarted nodes to read the generated certificates. However, when the Elasticearch CR includes a node specification for non data nodes, the restart is stuck restarting the non-data nodes.

      Expected Behavior:

      • Scale down all ES nodes regardless roles
      • Scale up all the ES nodes loading the new certificates regardless roles.

      Attachments

        Activity

          People

            ptsiraki@redhat.com Periklis Tsirakidis
            ptsiraki@redhat.com Periklis Tsirakidis
            rhn-support-anli Li rhn-support-anli Li
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: