Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-35253

[AWS] securityGroups and subnet don’t keep consistent in machine yaml and on aws console

XMLWordPrintable

    • Moderate
    • Yes
    • False
    • Hide

      None

      Show
      None
    • N/A
    • Release Note Not Required
    • In Progress

      This is a clone of issue OCPBUGS-34713. The following is the description of the original issue:

      Description of problem:

          [AWS] securityGroups and subnet don’t keep consistent in machine yaml and on aws console 
          No securityGroups huliu-aws531d-vlzbw-master-sg for masters on aws console, but shows in master machines yaml 
          No securityGroups huliu-aws531d-vlzbw-worker-sg for workers on aws console, but shows in worker machines yaml 
          No subnet huliu-aws531d-vlzbw-private-us-east-2a for masters and workers on aws console, but shows in master and worker machines yaml 

      Version-Release number of selected component (if applicable):

          4.16.0-0.nightly-2024-05-30-130713
      This happens in the latest 4.16(CAPI) AWS cluster

      How reproducible:

          Always

      Steps to Reproduce:

          1. Install a AWS 4.16 cluster
      liuhuali@Lius-MacBook-Pro huali-test % oc get clusterversion
      NAME      VERSION                              AVAILABLE   PROGRESSING   SINCE   STATUS
      version   4.16.0-0.nightly-2024-05-30-130713   True        False         46m     Cluster version is 4.16.0-0.nightly-2024-05-30-130713
      liuhuali@Lius-MacBook-Pro huali-test % oc  get machine
      NAME                                          PHASE     TYPE         REGION      ZONE         AGE
      huliu-aws531d-vlzbw-master-0                  Running   m6i.xlarge   us-east-2   us-east-2a   65m
      huliu-aws531d-vlzbw-master-1                  Running   m6i.xlarge   us-east-2   us-east-2b   65m
      huliu-aws531d-vlzbw-master-2                  Running   m6i.xlarge   us-east-2   us-east-2c   65m
      huliu-aws531d-vlzbw-worker-us-east-2a-swwmk   Running   m6i.xlarge   us-east-2   us-east-2a   62m
      huliu-aws531d-vlzbw-worker-us-east-2b-f2gw9   Running   m6i.xlarge   us-east-2   us-east-2b   62m
      huliu-aws531d-vlzbw-worker-us-east-2c-x6gbz   Running   m6i.xlarge   us-east-2   us-east-2c   62m
      
          2.Check the machines yaml, there are 4 securityGroups and 2 subnet value for master machines, 3 securityGroups and 2 subnet value for worker machines. 
      But check on aws console, only 3 securityGroups and 1 subnet value for masters, 2 securityGroups and 1 subnet value for workers.
      
      liuhuali@Lius-MacBook-Pro huali-test % oc get machine huliu-aws531d-vlzbw-master-0  -oyaml
      …
            securityGroups:
            - filters:
              - name: tag:Name
                values:
                - huliu-aws531d-vlzbw-master-sg
            - filters:
              - name: tag:Name
                values:
                - huliu-aws531d-vlzbw-node
            - filters:
              - name: tag:Name
                values:
                - huliu-aws531d-vlzbw-lb
            - filters:
              - name: tag:Name
                values:
                - huliu-aws531d-vlzbw-controlplane
            subnet:
              filters:
              - name: tag:Name
                values:
                - huliu-aws531d-vlzbw-private-us-east-2a
                - huliu-aws531d-vlzbw-subnet-private-us-east-2a
      …
      https://drive.google.com/file/d/1YyPQjSCXOm-1gbD3cwktDQQJter6Lnk4/view?usp=sharing
      https://drive.google.com/file/d/1MhRIm8qIZWXdL9-cDZiyu0TOTFLKCAB6/view?usp=sharing
      https://drive.google.com/file/d/1Qo32mgBerWp5z6BAVNqBxbuH5_4sRuBv/view?usp=sharing
      https://drive.google.com/file/d/1seqwluMsPEFmwFL6pTROHYyJ_qPc0cCd/view?usp=sharing
      
      
      liuhuali@Lius-MacBook-Pro huali-test % oc get machine huliu-aws531d-vlzbw-worker-us-east-2a-swwmk  -oyaml
      …
            securityGroups:
            - filters:
              - name: tag:Name
                values:
                - huliu-aws531d-vlzbw-worker-sg
            - filters:
              - name: tag:Name
                values:
                - huliu-aws531d-vlzbw-node
            - filters:
              - name: tag:Name
                values:
                - huliu-aws531d-vlzbw-lb
            subnet:
              filters:
              - name: tag:Name
                values:
                - huliu-aws531d-vlzbw-private-us-east-2a
                - huliu-aws531d-vlzbw-subnet-private-us-east-2a
      …
      
      
      https://drive.google.com/file/d/1FM7dxfSK0CGnm81dQbpWuVz1ciw9hgpq/view?usp=sharing
      https://drive.google.com/file/d/1QClWivHeGGhxK7FdBUJnGu-vHylqeg5I/view?usp=sharing
      https://drive.google.com/file/d/12jgyFfyP8fTzQu5wRoEa6RrXbYt_Gxm1/view?usp=sharing 
          

      Actual results:

          securityGroups and subnet don’t keep consistent in machine yaml and on aws console 

      Expected results:

          securityGroups and subnet should keep consistent in machine yaml and on aws console 

      Additional info:

          

            rh-ee-bbarbach Brent Barbachem
            openshift-crt-jira-prow OpenShift Prow Bot
            Gaoyun Pei Gaoyun Pei
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: