Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-18447

ZTP MachineConfig is not applied with no enforce policy being created

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • Low
    • No
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      Spoke cluster has MachineConfig policy violation after deployment. All configurations and policies are applied successfully, except machine config.

      Version-Release number of selected component (if applicable):

      OCP: 4.14.0-0.nightly-2023-08-28-154013
      gitops operator: 1.9.1
      Topology Aware Lifecycle Manager: 4.14.0
      multicluster engine for Kubernetes: 2.4.0-136
      Advanced Cluster Management for Kubernetes: 2.9.0-119

      How reproducible:

       

      Steps to Reproduce:

      1. Deploy hub cluster
      2. Configure ZTP
      3. Wait for deployment to complete
      

      Actual results:

      All policies are complient except xr11-machineconfig-config-policy-config.
      
      Policy reports: Resource not found but should exist.
      Details:
      [{"Compliant":"NonCompliant","Validity":{},"conditions":[{"lastTransitionTime":"2023-09-01T09:28:14Z","message":"machineconfigs [10-oot-ice-gnss] not found","reason":"K8s does not have a `must have` object","status":"True","type":"violation"}]}]
      
      I don't see enforce policy being created, not on initial deployment nor on cgu re-creation.

      Expected results:

      MachineConfig successfully applied

      Additional info:

      Policy can be found here: https://gitlab.cee.redhat.com/agurenko/mavenir-ztp/-/blob/airtel-4.14/policygentemplates/xr11-mc.yaml

              sahasan@redhat.com Sabbir Hasan
              agurenko@redhat.com Alexander Gurenko
              None
              None
              Yang Liu Yang Liu
              None
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: