Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-32328

Azure upgrades to 4.14.15+ fail with UPI storage account

    XMLWordPrintable

Details

    • Critical
    • Yes
    • Proposed
    • False
    • Hide

      None

      Show
      None
    • Hide
      Previously the image registry's azure path fix job incorrectly required the presence of client id and tenant id to function, resulting in valid configurations throwing validation errors. This fix adds a check to account key in connection to client and tenant ids missing.
      Show
      Previously the image registry's azure path fix job incorrectly required the presence of client id and tenant id to function, resulting in valid configurations throwing validation errors. This fix adds a check to account key in connection to client and tenant ids missing.
    • Bug Fix
    • In Progress
    • Customer Facing

    Description

      Description of problem:

      Cluster with user provisioned image registry storage accounts fails to upgrade to 4.14.20 due to image-registry-operator being degraded.

message: "Progressing: The registry is ready\nNodeCADaemonProgressing: The daemon set node-ca is deployed\nAzurePathFixProgressing: Migration failed: panic: AZURE_CLIENT_ID is required for authentication\nAzurePathFixProgressing: \nAzurePathFixProgressing: goroutine 1 [running]:\nAzurePathFixProgressing: main.main()\nAzurePathFixProgressing: \t/go/src/github.com/openshift/cluster-image-registry-operator/cmd/move-blobs/main.go:25 +0x15c\nAzurePathFixProgressing: "

cmd/move-blobs was introduced due to https://issues.redhat.com/browse/OCPBUGS-29003.

       

      Version-Release number of selected component (if applicable):

      4.14.15+

      How reproducible:

      I have not reproduced myself but I imagine you would hit this every time when upgrading from 4.13->4.14.15+ with Azure UPI image registry

       

      Steps to Reproduce:

          1.Starting on version 4.13, Configuring the registry for Azure user-provisioned infrastructure - https://docs.openshift.com/container-platform/4.14/registry/configuring_registry_storage/configuring-registry-storage-azure-user-infrastructure.html.

    2.  Upgrade to 4.14.15+
    3.

      Actual results:

          Upgrade does not complete succesfully 
$ oc get co
....
image-registry                             4.14.20        True        False         True       617d     AzurePathFixControllerDegraded: Migration failed: panic: AZURE_CLIENT_ID is required for authentication...

$ oc get clusterversion
NAME      VERSION   AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.13.38   True        True          7h41m   Unable to apply 4.14.20: wait has exceeded 40 minutes for these operators: image-registry

       

      Expected results:

      Upgrade to complete successfully

      Additional info:

      Attachments

        Issue Links

          blocks

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-32396 Azure upgrades to 4.14.15+ fail with UPI storage account

          • Critical - To be worked on immediately following BLOCKER issues.
          • Verified
          is blocked by

          Spike - Represents a research-related task. IR-468 Impact Azure upgrades to 4.14.15+ fail with UPI storage account

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed
          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-32396 Azure upgrades to 4.14.15+ fail with UPI storage account

          • Critical - To be worked on immediately following BLOCKER issues.
          • Verified
          relates to

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-29003 Default Internal Registry cleans custom images stored on it from 4.13 to 4.14

          • Critical - To be worked on immediately following BLOCKER issues.
          • Verified
          links to

          GitHub openshift/cluster-image-registry-operator#1021: OCPBUGS-32328: azure-path-fix: support auth via account key (without clientID)

          Web Link RHEA-2024:0041 OpenShift Container Platform 4.16.z bug fix update

          Activity

            People

              fmissi Flavian Missi
              rh-ee-tschneid Tony Schneider
              xiujuan wang xiujuan wang
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

                Created:
                Updated: