Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-25990

dual-stack UPI: IPv6 security group rules created for single-stack cluster

    XMLWordPrintable

Details

    • -
    • Important
    • No
    • ShiftStack Sprint 247, ShiftStack Sprint 248
    • 2
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • N/A
    • Release Note Not Required

    Description

      This is a clone of issue OCPBUGS-25132. The following is the description of the original issue:
      —
      Description of problem:

      security-groups.yaml playbook runs the IPv6 security group rules creation tasks regardless of the os_subnet6 value.
The when clause is not considering the os_subnet6 [1] value and is always executed.

      It works with:

        - name: 'Create security groups for IPv6'
    block:
    - name: 'Create master-sg IPv6 rule "OpenShift API"'
    [...]
    when: os_subnet6 is defined

      Version-Release number of selected component (if applicable):

      4.15.0-0.nightly-2023-12-11-033133

      How reproducible:

      Always

      Steps to Reproduce:

      1. Don't set the os_subnet6 in the inventory file [2] (so it's not dual-stack)
2. Deploy 4.15 UPI by running the UPI playbooks

      Actual results:

      IPv6 security group rules are created

      Expected results:

      IPv6 security group rules shouldn't be created

      Additional info:
      [1] https://github.com/openshift/installer/blob/46fd66272538c350327880e1ed261b70401b406e/upi/openstack/security-groups.yaml#L375
      [2] https://github.com/openshift/installer/blob/46fd66272538c350327880e1ed261b70401b406e/upi/openstack/inventory.yaml#L77

      Attachments

        Issue Links

          clones

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-25132 dual-stack UPI: IPv6 security group rules created for single-stack cluster

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Verified
          is blocked by

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-25132 dual-stack UPI: IPv6 security group rules created for single-stack cluster

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Verified
          links to

          GitHub openshift/installer#7863: [release-4.15] OCPBUGS-25990: Fixes for the OpensStack UPI playbooks.

          Web Link RHSA-2023:7198 OpenShift Container Platform 4.15 security update

          Activity

            People

              rdobosz Roman Dobosz
              openshift-crt-jira-prow OpenShift Prow Bot
              Jon Uriarte Jon Uriarte
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: