Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-1537

Full Cluster Cert Redeploy is broken when the ES clusters includes non-data nodes

    XMLWordPrintable

Details

    • False
    • False
    • NEW
    • NEW
    • Hide
      In previous releases, if you redeployed a full OpenShift Logging-managed Elasticsearch cluster, it might become stuck in an unhealthy state, with one non-data node running and all other data nodes shut down. This was caused by new certificates preventing the OpenShift Elasticsearch Operator from scaling down the non-data nodes of the Elasticsearch cluster. With this update, The OpenShift Elasticsearch Operator can scale all the data and non-data nodes down and then back up again, so that the nodes can load the new certificates. The OpenShift Elasticsearch Operator can reach the new nodes after they load the new certificates.
      Show
      In previous releases, if you redeployed a full OpenShift Logging-managed Elasticsearch cluster, it might become stuck in an unhealthy state, with one non-data node running and all other data nodes shut down. This was caused by new certificates preventing the OpenShift Elasticsearch Operator from scaling down the non-data nodes of the Elasticsearch cluster. With this update, The OpenShift Elasticsearch Operator can scale all the data and non-data nodes down and then back up again, so that the nodes can load the new certificates. The OpenShift Elasticsearch Operator can reach the new nodes after they load the new certificates.
    • Logging (LogExp) - Sprint 203

    Description

      On Cert expiry the elasticsearch-operator restarts the whole cluster by scaling down all nodes and then scaling them up again. This causes the restarted nodes to read the generated certificates. However, when the Elasticearch CR includes a node specification for non data nodes, the restart is stuck restarting the non-data nodes.

      Expected Behavior:

      • Scale down all ES nodes regardless roles
      • Scale up all the ES nodes loading the new certificates regardless roles.

      Attachments

        Issue Links

          clones

          Bug - A problem which impairs or prevents the functions of the product. LOG-1536 Full Cluster Cert Redeploy is broken when the ES clusters includes non-data nodes

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is cloned by

          Bug - A problem which impairs or prevents the functions of the product. LOG-1649 Full Cluster Cert Redeploy is broken when the ES clusters includes non-data nodes

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          links to

          GitHub openshift/elasticsearch-operator#742: LOG-1537: Fix full cluster cert redeploy with non-data nodes

          GitHub openshift/elasticsearch-operator#745: [release-4.6] [release-5.0] LOG-1537: Fix full cluster cert redeploy with non-data nodes

          Activity

            People

              ptsiraki@redhat.com Periklis Tsirakidis
              ptsiraki@redhat.com Periklis Tsirakidis
              Kabir Bharti Kabir Bharti
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: