Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-30742

[4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group


    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Normal Normal
    • 4.15.z
    • 4.14.z, 4.15.z
    • HyperShift
    • No
    • Hypershift Sprint 250, Hypershift Sprint 251
    • 2
    • False
    • Hide



      Description of problem:

      If a ROSA HCP customer uses the default worker security group that the CPO creates for some other purpose (i.e. creates their own VPC Endpoint or EC2 instance using this security group) and then starts an uninstallation - the uninstallation will hang indefinitely because the CPO is unable to delete the security group.

      Version-Release number of selected component (if applicable):


      How reproducible:


      Steps to Reproduce:

          1. Create a ROSA HCP cluster
          2. Attach the default worker security group to some other object unrelated to the cluster, like an EC2 instance or VPC Endpoint
          3. Uninstall the ROSA HCP cluster

      Actual results:

      The uninstall hangs without much feedback to the customer    

      Expected results:

      Either that the uninstall gives up and moves on eventually, or that clear feedback is provided to the customer, so that they know that the uninstall is held up because of an inability to delete a specific security group id. If this feedback mechanism is already in place, but not wired through to OCM, this may not be an OCPBUGS and could just be an OCM bug instead!    

      Additional info:


            pstefans@redhat.com Patryk Stefanski
            pstefans@redhat.com Patryk Stefanski
            He Liu He Liu
            0 Vote for this issue
            6 Start watching this issue