-
Bug
-
Resolution: Done-Errata
-
Undefined
-
None
-
4.16
-
Yes
-
False
-
-
Openshift ansible upgrades were no longer working. The ipsec configuration needed to be idempotent, and the changes were made to the openshift ansible playbooks to ensure that all ipsec configurations are idempotent.
-
Bug Fix
-
In Progress
This is a clone of issue OCPBUGS-30802. The following is the description of the original issue:
—
Description of problem:
RHEL nodes failed to be upgraded from 4.15 to 4.16
Version-Release number of selected component (if applicable):
4.16.0-0.nightly-2024-03-11-041450
How reproducible:
Always
Steps to Reproduce:
ansible-playbook -i "${SHARED_DIR}/ansible-hosts" /usr/share/ansible/openshift-ansible/playbooks/upgrade.yml -vvvGot error: TASK [openshift_node : set nss selinux context] ********************************task path: /usr/share/ansible/openshift-ansible/roles/openshift_node/tasks/ipsec.yml:18Using module file /opt/python-env/ansible-core/lib64/python3.8/site-packages/ansible/modules/command.py
Actual results:
ValueError: File context for /var/lib/ipsec/nss already defined
Expected results:
RHEL worker upgrade complete
Additional info:
Job ref: https://gcsweb-qe-private-deck-ci.apps.ci.l2s4.p1.openshiftapps.com/gcs/qe-private-deck/logs/periodic-ci-openshift-openshift-tests-private-release-4.16-amd64-nightly-4.16-upgrade-from-stable-4.15-ibmcloud-ipi-workers-rhel8-f14/1767222721101434880/artifacts/ibmcloud-ipi-workers-rhel8-f14/cucushift-upgrade-toimage/build-log.txt
- clones
-
-
- Verified
-
- is blocked by
-
-
- Verified
-
- links to
-
RHBA-2024:2664
OpenShift Container Platform 4.15.z bug fix update