[OCPBUGS-36681] Azure HC fails to create AzureMachineTemplate if a MachineIdentityID is not provided

Type: Bug
Resolution: Done
Priority: Normal
Fix Version/s: None
Affects Version/s: 4.17.0, 4.16.z
Component/s: HyperShift
Labels:
- triaged

Severity:
Moderate
Regression:
No
Sprint:
Hypershift Sprint 256, Hypershift Sprint 257, Hypershift Sprint 258
sprint_count:
3
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Target Version:

4.17.0
Target Backport Versions:

4.16.z

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Description of problem:

Azure HC fails to create AzureMachineTemplate if a MachineIdentityID is not provided. 

E0705 19:09:23.783858       1 controller.go:329] "Reconciler error" err="failed to parse ProviderID : invalid resource ID: id cannot be empty" controller="azuremachinetemplate" controllerGroup="infrastructure.cluster.x-k8s.io" controllerKind="AzureMachineTemplate" AzureMachineTemplate="clusters-hostedcp-1671-hc/hostedcp-1671-hc-f412695a" namespace="clusters-hostedcp-1671-hc" name="hostedcp-1671-hc-f412695a" reconcileID="74581db2-0ac0-4a30-abfc-38f07b8247cc"

https://github.com/openshift/hypershift/blob/84f594bd2d44e03aaac2d962b0d548d75505fed7/hypershift-operator/controllers/nodepool/azure.go#L52 does not check first to see if a MachineIdentityID was provided before adding the UserAssignedIdentity field.

Version-Release number of selected component (if applicable):

How reproducible:

    Every time

Steps to Reproduce:

    1. Create an Azure HC without a MachineIdentityID

Actual results:

    Azure HC fails to create AzureMachineTemplate properly, nodes aren't created, and HC is in a failed state.

Expected results:

     Azure HC creates AzureMachineTemplate properly, nodes are created, and HC is in a completed state.

Additional info:

blocks

OCPBUGS-36781 Azure HC fails to create AzureMachineTemplate if a MachineIdentityID is not provided

Closed

is cloned by

OCPBUGS-36781 Azure HC fails to create AzureMachineTemplate if a MachineIdentityID is not provided

Closed

links to

openshift/hypershift#4332: OCPBUGS-36681: Set Azure VM identity if user assigned identity set

RHEA-2024:3718 OpenShift Container Platform 4.17.z bug fix update

Errata Tool added a comment - 2024/10/01 5:38 PM

Since the problem described in this issue should be resolved in a recent advisory, it has been closed.

For information on the advisory (Moderate: OpenShift Container Platform 4.17.0 bug fix and security update), and where to find the updated files, follow the link below.

If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHSA-2024:3718

Errata Tool added a comment - 2024/10/01 5:38 PM Since the problem described in this issue should be resolved in a recent advisory, it has been closed. For information on the advisory (Moderate: OpenShift Container Platform 4.17.0 bug fix and security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2024:3718

Bryan Cox made changes - 2024/08/22 12:47 PM

Resolution		New: Done [ 1 ]
Status	Original: Verified [ 10015 ]	New: Closed [ 6 ]

Bryan Cox added a comment - 2024/08/21 12:30 PM

Hey fxierh - in my opinion, it's only helpful if its needed in testing since the HyperShift CLI is used for development and testing purposes.

Bryan Cox added a comment - 2024/08/21 12:30 PM Hey fxierh - in my opinion, it's only helpful if its needed in testing since the HyperShift CLI is used for development and testing purposes.

Feilian Xie (Inactive) made changes - 2024/08/21 11:12 AM

Status

Original: ON_QA [ 15723 ]

New: Verified [ 10015 ]

Feilian Xie (Inactive) added a comment - 2024/08/21 11:12 AM

hypershift create nodepool azure does not provide an option to specify machineIdentityID at the moment. Would it be useful to provide such an option?

cc. rh-ee-brcox

Feilian Xie (Inactive) added a comment - 2024/08/21 11:12 AM hypershift create nodepool azure does not provide an option to specify machineIdentityID at the moment. Would it be useful to provide such an option? cc. rh-ee-brcox

Feilian Xie (Inactive) added a comment - 2024/08/21 11:07 AM - edited

Test passed:

# Install 4.17 HO
hypershift install --hypershift-image=registry.build03.ci.openshift.org/ci-op-lxx3j7bk/pipeline@sha256:596a768d199a6abdfcc4bc29d2d36766252ce56a057d8b6177927cbb817aa288 --wait-until-available --managed-service=ARO-HCP --enable-conversion-webhook=false --pull-secret=/var/run/secrets/ci.openshift.io/cluster-profile/pull-secret --external-dns-credentials=/etc/hypershift-ext-dns-app-azure/credentials --external-dns-provider=azure --external-dns-domain-filter=qe1.azure.devcluster.openshift.com

# Create 4.17 HC
hypershift create cluster azure --fips --generate-ssh --annotations=hypershift.openshift.io/pod-security-admission-label-override=baseline --olm-catalog-placement=guest --marketplace-offer=aro4 --marketplace-publisher=azureopenshift --marketplace-sku=aro_417 --marketplace-version=417.94.20240701 --diagnostics-storage-account-type=Managed --image-content-sources /tmp/secret/mgmt_icsp.yaml --name 69e8eae2c50cf2dd2a46 --node-pool-replicas 3 --base-domain qe.azure.devcluster.openshift.com --external-dns-domain=qe1.azure.devcluster.openshift.com --pull-secret /etc/ci-pull-credentials/.dockerconfigjson --azure-creds /var/run/secrets/ci.openshift.io/cluster-profile/osServicePrincipal.json --location southcentralus --release-image registry.build03.ci.openshift.org/ci-op-lxx3j7bk/release@sha256:b8105494ce61dc1f5ba68f173c78adfb834ff70c66e7399b9ae401021517f27f --encryption-key-id= --disk-encryption-set-id= --resource-group-name=ci-op-lxx3j7bk-6c717-rg --vnet-id=/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-lxx3j7bk-6c717-vnet-rg/providers/Microsoft.Network/virtualNetworks/ci-op-lxx3j7bk-6c717-vnet --subnet-id=/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-lxx3j7bk-6c717-vnet-rg/providers/Microsoft.Network/virtualNetworks/ci-op-lxx3j7bk-6c717-vnet/subnets/ci-op-lxx3j7bk-6c717-subnet --network-security-group-id=/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-lxx3j7bk-6c717-nsg-rg/providers/Microsoft.Network/networkSecurityGroups/ci-op-lxx3j7bk-6c717-nsg
# HC ready
oc get hc -A
NAMESPACE   NAME                   VERSION                              KUBECONFIG                              PROGRESS    AVAILABLE   PROGRESSING   MESSAGE
clusters    69e8eae2c50cf2dd2a46   4.17.0-0.nightly-2024-08-19-165854   69e8eae2c50cf2dd2a46-admin-kubeconfig   Completed   True        False         The hosted control plane is available

# NP created with machineIdentityID specified
oc get np  -n clusters 69e8eae2c50cf2dd2a46 -o jsonpath='{.spec.platform.azure}' | jq
{
  "diagnostics": {
    "storageAccountType": "Managed"
  },
  "diskSizeGB": 120,
  "diskStorageAccountType": "Premium_LRS",
  "image": {
    "azureImageType": "AzureMarketplace",
    "azureMarketplace": {
      "offer": "aro4",
      "publisher": "azureopenshift",
      "sku": "aro_417",
      "version": "417.94.20240701"
    }
  },
  "machineIdentityID": "/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourcegroups/ci-op-lxx3j7bk-6c717-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/69e8eae2c50cf2dd2a46-69e8eae2c50cf2dd2a46-gqn2d",
  "subnetID": "/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-lxx3j7bk-6c717-vnet-rg/providers/Microsoft.Network/virtualNetworks/ci-op-lxx3j7bk-6c717-vnet/subnets/ci-op-lxx3j7bk-6c717-subnet",
  "vmsize": "Standard_D4s_v3"
}
# Check AzureMachineTemplate, user assigned identity is used
oc get azuremachinetemplate -n clusters-69e8eae2c50cf2dd2a46   69e8eae2c50cf2dd2a46-f412695a -o jsonpath='{.spec.template.spec}' | jq
{
  "diagnostics": {
    "boot": {
      "storageAccountType": "Managed"
    }
  },
  "identity": "UserAssigned",
  "image": {
    "marketplace": {
      "offer": "aro4",
      "publisher": "azureopenshift",
      "sku": "aro_417",
      "thirdPartyImage": false,
      "version": "417.94.20240701"
    }
  },
  "networkInterfaces": [
    {
      "subnetName": "ci-op-lxx3j7bk-6c717-subnet"
    }
  ],
  "osDisk": {
    "diskSizeGB": 120,
    "managedDisk": {
      "storageAccountType": "Premium_LRS"
    },
    "osType": ""
  },
  "sshPublicKey": "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",
  "userAssignedIdentities": [
    {
      "providerID": "/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourcegroups/ci-op-lxx3j7bk-6c717-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/69e8eae2c50cf2dd2a46-69e8eae2c50cf2dd2a46-gqn2d"
    }
  ],
  "vmSize": "Standard_D4s_v3"
}

# Create additional NP without specifying machine identity ID
hypershift create nodepool azure --nodepool-subnet-id "/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-lxx3j7bk-6c717-vnet-rg/providers/Microsoft.Network/virtualNetworks/ci-op-lxx3j7bk-6c717-vnet/subnets/ci-op-lxx3j7bk-6c717-subnet" --cluster-name 69e8eae2c50cf2dd2a46 --name 69e8eae2c50cf2dd2a46-1 --node-count 1 --marketplace-offer=aro4 --marketplace-publisher=azureopenshift --marketplace-sku=aro_417 --marketplace-version=417.94.20240701
oc get np  -n clusters 69e8eae2c50cf2dd2a46-1 -o jsonpath='{.spec.platform.azure}' | jq
{
  "diskSizeGB": 120,
  "diskStorageAccountType": "Premium_LRS",
  "image": {
    "azureImageType": "AzureMarketplace",
    "azureMarketplace": {
      "offer": "aro4",
      "publisher": "azureopenshift",
      "sku": "aro_417",
      "version": "417.94.20240701"
    }
  },
  "subnetID": "/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-lxx3j7bk-6c717-vnet-rg/providers/Microsoft.Network/virtualNetworks/ci-op-lxx3j7bk-6c717-vnet/subnets/ci-op-lxx3j7bk-6c717-subnet",
  "vmsize": "Standard_D4s_v3"
}
# Check AzureMachineTemplate, user assigned identity is not used
oc get azuremachinetemplate -n clusters-69e8eae2c50cf2dd2a46 69e8eae2c50cf2dd2a46-1-f412695a -o jsonpath='{.spec.template.spec}' | jq
{
  "identity": "None",
  "image": {
    "marketplace": {
      "offer": "aro4",
      "publisher": "azureopenshift",
      "sku": "aro_417",
      "thirdPartyImage": false,
      "version": "417.94.20240701"
    }
  },
  "networkInterfaces": [
    {
      "subnetName": "ci-op-lxx3j7bk-6c717-subnet"
    }
  ],
  "osDisk": {
    "diskSizeGB": 120,
    "managedDisk": {
      "storageAccountType": "Premium_LRS"
    },
    "osType": ""
  },
  "sshPublicKey": "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",
  "vmSize": "Standard_D4s_v3"
}
# New nodes ready
oc get np -n clusters    69e8eae2c50cf2dd2a46-1
NAME                     CLUSTER                DESIRED NODES   CURRENT NODES   AUTOSCALING   AUTOREPAIR   VERSION                              UPDATINGVERSION   UPDATINGCONFIG   MESSAGE
69e8eae2c50cf2dd2a46-1   69e8eae2c50cf2dd2a46   1               1               False         False        4.17.0-0.nightly-2024-08-19-165854   False             False
hcp oc get node
NAME                                 STATUS   ROLES    AGE     VERSION
69e8eae2c50cf2dd2a46-1-t56kc-2s8vf   Ready    worker   2m13s   v1.30.3
69e8eae2c50cf2dd2a46-5pbmg-4zntq     Ready    worker   27m     v1.30.3
69e8eae2c50cf2dd2a46-5pbmg-6v6tk     Ready    worker   27m     v1.30.3
69e8eae2c50cf2dd2a46-5pbmg-bhkd8     Ready    worker   27m     v1.30.3
# All HC CO ready
hcp oc get co
NAME                                       VERSION                              AVAILABLE   PROGRESSING   DEGRADED   SINCE   MESSAGE
console                                    4.17.0-0.nightly-2024-08-19-165854   True        False         False      25m     
csi-snapshot-controller                    4.17.0-0.nightly-2024-08-19-165854   True        False         False      32m     
dns                                        4.17.0-0.nightly-2024-08-19-165854   True        False         False      25m     
image-registry                             4.17.0-0.nightly-2024-08-19-165854   True        False         False      25m     
ingress                                    4.17.0-0.nightly-2024-08-19-165854   True        False         False      25m     
insights                                   4.17.0-0.nightly-2024-08-19-165854   True        False         False      26m     
kube-apiserver                             4.17.0-0.nightly-2024-08-19-165854   True        False         False      33m     
kube-controller-manager                    4.17.0-0.nightly-2024-08-19-165854   True        False         False      33m     
kube-scheduler                             4.17.0-0.nightly-2024-08-19-165854   True        False         False      33m     
kube-storage-version-migrator              4.17.0-0.nightly-2024-08-19-165854   True        False         False      25m     
monitoring                                 4.17.0-0.nightly-2024-08-19-165854   True        False         False      24m     
network                                    4.17.0-0.nightly-2024-08-19-165854   True        False         False      32m     
node-tuning                                4.17.0-0.nightly-2024-08-19-165854   True        False         False      2m23s   
openshift-apiserver                        4.17.0-0.nightly-2024-08-19-165854   True        False         False      33m     
openshift-controller-manager               4.17.0-0.nightly-2024-08-19-165854   True        False         False      33m     
openshift-samples                          4.17.0-0.nightly-2024-08-19-165854   True        False         False      24m     
operator-lifecycle-manager                 4.17.0-0.nightly-2024-08-19-165854   True        False         False      32m     
operator-lifecycle-manager-catalog         4.17.0-0.nightly-2024-08-19-165854   True        False         False      33m     
operator-lifecycle-manager-packageserver   4.17.0-0.nightly-2024-08-19-165854   True        False         False      33m     
service-ca                                 4.17.0-0.nightly-2024-08-19-165854   True        False         False      26m     
storage                                    4.17.0-0.nightly-2024-08-19-165854   True        False         False      25m

Feilian Xie (Inactive) added a comment - 2024/08/21 11:07 AM - edited Test passed: # Install 4.17 HO hypershift install --hypershift-image=registry.build03.ci.openshift.org/ci-op-lxx3j7bk/pipeline@sha256:596a768d199a6abdfcc4bc29d2d36766252ce56a057d8b6177927cbb817aa288 --wait-until-available --managed-service=ARO-HCP --enable-conversion-webhook= false --pull-secret=/ var /run/secrets/ci.openshift.io/cluster-profile/pull-secret --external-dns-credentials=/etc/hypershift-ext-dns-app-azure/credentials --external-dns-provider=azure --external-dns-domain-filter=qe1.azure.devcluster.openshift.com # Create 4.17 HC hypershift create cluster azure --fips --generate-ssh --annotations=hypershift.openshift.io/pod-security-admission-label-override=baseline --olm-catalog-placement=guest --marketplace-offer=aro4 --marketplace-publisher=azureopenshift --marketplace-sku=aro_417 --marketplace-version=417.94.20240701 --diagnostics-storage-account-type=Managed --image-content-sources /tmp/secret/mgmt_icsp.yaml --name 69e8eae2c50cf2dd2a46 --node-pool-replicas 3 --base-domain qe.azure.devcluster.openshift.com --external-dns-domain=qe1.azure.devcluster.openshift.com --pull-secret /etc/ci-pull-credentials/.dockerconfigjson --azure-creds / var /run/secrets/ci.openshift.io/cluster-profile/osServicePrincipal.json --location southcentralus --release-image registry.build03.ci.openshift.org/ci-op-lxx3j7bk/release@sha256:b8105494ce61dc1f5ba68f173c78adfb834ff70c66e7399b9ae401021517f27f --encryption-key-id= --disk-encryption-set-id= --resource-group-name=ci-op-lxx3j7bk-6c717-rg --vnet-id=/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-lxx3j7bk-6c717-vnet-rg/providers/Microsoft.Network/virtualNetworks/ci-op-lxx3j7bk-6c717-vnet --subnet-id=/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-lxx3j7bk-6c717-vnet-rg/providers/Microsoft.Network/virtualNetworks/ci-op-lxx3j7bk-6c717-vnet/subnets/ci-op-lxx3j7bk-6c717-subnet --network-security-group-id=/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-lxx3j7bk-6c717-nsg-rg/providers/Microsoft.Network/networkSecurityGroups/ci-op-lxx3j7bk-6c717-nsg # HC ready oc get hc -A NAMESPACE NAME VERSION KUBECONFIG PROGRESS AVAILABLE PROGRESSING MESSAGE clusters 69e8eae2c50cf2dd2a46 4.17.0-0.nightly-2024-08-19-165854 69e8eae2c50cf2dd2a46-admin-kubeconfig Completed True False The hosted control plane is available # NP created with machineIdentityID specified oc get np -n clusters 69e8eae2c50cf2dd2a46 -o jsonpath= '{.spec.platform.azure}' | jq { "diagnostics" : { "storageAccountType" : "Managed" }, "diskSizeGB" : 120, "diskStorageAccountType" : "Premium_LRS" , "image" : { "azureImageType" : "AzureMarketplace" , "azureMarketplace" : { "offer" : "aro4" , "publisher" : "azureopenshift" , "sku" : "aro_417" , "version" : "417.94.20240701" } }, "machineIdentityID" : "/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourcegroups/ci-op-lxx3j7bk-6c717-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/69e8eae2c50cf2dd2a46-69e8eae2c50cf2dd2a46-gqn2d" , "subnetID" : "/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-lxx3j7bk-6c717-vnet-rg/providers/Microsoft.Network/virtualNetworks/ci-op-lxx3j7bk-6c717-vnet/subnets/ci-op-lxx3j7bk-6c717-subnet" , "vmsize" : "Standard_D4s_v3" } # Check AzureMachineTemplate, user assigned identity is used oc get azuremachinetemplate -n clusters-69e8eae2c50cf2dd2a46 69e8eae2c50cf2dd2a46-f412695a -o jsonpath= '{.spec.template.spec}' | jq { "diagnostics" : { "boot" : { "storageAccountType" : "Managed" } }, "identity" : "UserAssigned" , "image" : { "marketplace" : { "offer" : "aro4" , "publisher" : "azureopenshift" , "sku" : "aro_417" , "thirdPartyImage" : false , "version" : "417.94.20240701" } }, "networkInterfaces" : [ { "subnetName" : "ci-op-lxx3j7bk-6c717-subnet" } ], "osDisk" : { "diskSizeGB" : 120, "managedDisk" : { "storageAccountType" : "Premium_LRS" }, "osType" : "" }, "sshPublicKey" : "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" , "userAssignedIdentities" : [ { "providerID" : "/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourcegroups/ci-op-lxx3j7bk-6c717-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/69e8eae2c50cf2dd2a46-69e8eae2c50cf2dd2a46-gqn2d" } ], "vmSize" : "Standard_D4s_v3" } # Create additional NP without specifying machine identity ID hypershift create nodepool azure --nodepool-subnet-id "/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-lxx3j7bk-6c717-vnet-rg/providers/Microsoft.Network/virtualNetworks/ci-op-lxx3j7bk-6c717-vnet/subnets/ci-op-lxx3j7bk-6c717-subnet" --cluster-name 69e8eae2c50cf2dd2a46 --name 69e8eae2c50cf2dd2a46-1 --node-count 1 --marketplace-offer=aro4 --marketplace-publisher=azureopenshift --marketplace-sku=aro_417 --marketplace-version=417.94.20240701 oc get np -n clusters 69e8eae2c50cf2dd2a46-1 -o jsonpath= '{.spec.platform.azure}' | jq { "diskSizeGB" : 120, "diskStorageAccountType" : "Premium_LRS" , "image" : { "azureImageType" : "AzureMarketplace" , "azureMarketplace" : { "offer" : "aro4" , "publisher" : "azureopenshift" , "sku" : "aro_417" , "version" : "417.94.20240701" } }, "subnetID" : "/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-lxx3j7bk-6c717-vnet-rg/providers/Microsoft.Network/virtualNetworks/ci-op-lxx3j7bk-6c717-vnet/subnets/ci-op-lxx3j7bk-6c717-subnet" , "vmsize" : "Standard_D4s_v3" } # Check AzureMachineTemplate, user assigned identity is not used oc get azuremachinetemplate -n clusters-69e8eae2c50cf2dd2a46 69e8eae2c50cf2dd2a46-1-f412695a -o jsonpath= '{.spec.template.spec}' | jq { "identity" : "None" , "image" : { "marketplace" : { "offer" : "aro4" , "publisher" : "azureopenshift" , "sku" : "aro_417" , "thirdPartyImage" : false , "version" : "417.94.20240701" } }, "networkInterfaces" : [ { "subnetName" : "ci-op-lxx3j7bk-6c717-subnet" } ], "osDisk" : { "diskSizeGB" : 120, "managedDisk" : { "storageAccountType" : "Premium_LRS" }, "osType" : "" }, "sshPublicKey" : "c3NoLXJzYSBBQUFBQjNOemFDMXljMkVBQUFBREFRQUJBQUFCQVFDeEtqSFhjMFBNV21zYlZzNDRUdVhvUTVieWpLNzd3b3JpQlBlbGlGK2ltMzI4djhJcFIvbmxyVXQ2emtHMFl0aEVxbDRYVGIySm9VeENmOG8rQ0s1YndsODdSZ3NGQmdPUUtJTkN2ay9sSitqTUUyYkdsa1JOcnQwbml4RklkSER1SktwUUd2Q1R3NW1QWThVVGFBeGlydmVhN3lpRzFudndUMkl3aDNQRXJlbDVxb21ab1pET0tZVm56NTJlYy9uSXF3UEx4Vml1NXlBQ2d6TkxWdDBhVW50SkJkWnNkd1dwTmI1cmhFdTlQaHBNSURUUTN3V0RsQk43S1dlbEc1M0lmN0o4N3ZrenJDQURXVFlsSU1yMGwvQ05NcW9zYktDbkt5SGgyZUg3Mk9JcU9pbnJyMFEzbWErb3FrekJqUmlPd2NMR3Q0Q2VpdnJ4QzRWK0x2TVIK" , "vmSize" : "Standard_D4s_v3" } # New nodes ready oc get np -n clusters 69e8eae2c50cf2dd2a46-1 NAME CLUSTER DESIRED NODES CURRENT NODES AUTOSCALING AUTOREPAIR VERSION UPDATINGVERSION UPDATINGCONFIG MESSAGE 69e8eae2c50cf2dd2a46-1 69e8eae2c50cf2dd2a46 1 1 False False 4.17.0-0.nightly-2024-08-19-165854 False False hcp oc get node NAME STATUS ROLES AGE VERSION 69e8eae2c50cf2dd2a46-1-t56kc-2s8vf Ready worker 2m13s v1.30.3 69e8eae2c50cf2dd2a46-5pbmg-4zntq Ready worker 27m v1.30.3 69e8eae2c50cf2dd2a46-5pbmg-6v6tk Ready worker 27m v1.30.3 69e8eae2c50cf2dd2a46-5pbmg-bhkd8 Ready worker 27m v1.30.3 # All HC CO ready hcp oc get co NAME VERSION AVAILABLE PROGRESSING DEGRADED SINCE MESSAGE console 4.17.0-0.nightly-2024-08-19-165854 True False False 25m csi-snapshot-controller 4.17.0-0.nightly-2024-08-19-165854 True False False 32m dns 4.17.0-0.nightly-2024-08-19-165854 True False False 25m image-registry 4.17.0-0.nightly-2024-08-19-165854 True False False 25m ingress 4.17.0-0.nightly-2024-08-19-165854 True False False 25m insights 4.17.0-0.nightly-2024-08-19-165854 True False False 26m kube-apiserver 4.17.0-0.nightly-2024-08-19-165854 True False False 33m kube-controller-manager 4.17.0-0.nightly-2024-08-19-165854 True False False 33m kube-scheduler 4.17.0-0.nightly-2024-08-19-165854 True False False 33m kube-storage-version-migrator 4.17.0-0.nightly-2024-08-19-165854 True False False 25m monitoring 4.17.0-0.nightly-2024-08-19-165854 True False False 24m network 4.17.0-0.nightly-2024-08-19-165854 True False False 32m node-tuning 4.17.0-0.nightly-2024-08-19-165854 True False False 2m23s openshift-apiserver 4.17.0-0.nightly-2024-08-19-165854 True False False 33m openshift-controller-manager 4.17.0-0.nightly-2024-08-19-165854 True False False 33m openshift-samples 4.17.0-0.nightly-2024-08-19-165854 True False False 24m operator -lifecycle-manager 4.17.0-0.nightly-2024-08-19-165854 True False False 32m operator -lifecycle-manager-catalog 4.17.0-0.nightly-2024-08-19-165854 True False False 33m operator -lifecycle-manager-packageserver 4.17.0-0.nightly-2024-08-19-165854 True False False 33m service-ca 4.17.0-0.nightly-2024-08-19-165854 True False False 26m storage 4.17.0-0.nightly-2024-08-19-165854 True False False 25m

He Liu made changes - 2024/08/21 3:47 AM

QA Contact

Original: Jie Zhao [ JIRAUSER162331 ]

New: Feilian Xie [ JIRAUSER198986 ]

Antoni Segura Puimedon made changes - 2024/08/13 3:11 PM

Sprint

Original: Hypershift Sprint 256, Hypershift Sprint 257 [ 62306, 62936 ]

New: Hypershift Sprint 256, Hypershift Sprint 257, Hypershift Sprint 258 [ 62306, 62936, 62937 ]

Yu Li made changes - 2024/08/13 6:39 AM

Severity

New: Moderate [ 26752 ]

Alberto Garcia Lamela made changes - 2024/07/23 3:04 PM

Sprint

Original: Hypershift Sprint 256 [ 62306 ]

New: Hypershift Sprint 256, Hypershift Sprint 257 [ 62306, 62936 ]

Errata Tool made changes - 2024/07/19 3:40 PM

Remote Link

New: This issue links to "RHEA-2024:3718 (Web Link)" [ 1704105 ]

OpenShift Jira Bot added a comment - 2024/07/10 2:59 AM

Hi rh-ee-brcox,

Bugs should not be moved to Verified without first providing a Release Note Type("Bug Fix" or "No Doc Update") and for type "Bug Fix" the Release Note Text must also be provided. Please populate the necessary fields before moving the Bug to Verified.

OpenShift Jira Bot added a comment - 2024/07/10 2:59 AM Hi rh-ee-brcox , Bugs should not be moved to Verified without first providing a Release Note Type("Bug Fix" or "No Doc Update") and for type "Bug Fix" the Release Note Text must also be provided. Please populate the necessary fields before moving the Bug to Verified.

ART Bot made changes - 2024/07/10 2:59 AM

Status

Original: MODIFIED [ 14454 ]

New: ON_QA [ 15723 ]

OpenShift Prow Bot made changes - 2024/07/10 2:27 AM

Link

New: This issue blocks ~~OCPBUGS-36781~~ [ ~~OCPBUGS-36781~~ ]

OpenShift Prow Bot made changes - 2024/07/10 2:27 AM

Link

New: This issue is cloned by ~~OCPBUGS-36781~~ [ ~~OCPBUGS-36781~~ ]

OpenShift Prow Bot made changes - 2024/07/10 2:25 AM

Status

Original: POST [ 15726 ]

New: MODIFIED [ 14454 ]

OpenShift Prow Bot made changes - 2024/07/08 2:40 PM

Status

Original: ASSIGNED [ 14452 ]

New: POST [ 15726 ]

Bryan Cox made changes - 2024/07/08 2:40 PM

Target Version

New: 4.17.0 [ 12428295 ]

OpenShift Prow Bot made changes - 2024/07/08 2:39 PM

Remote Link

New: This issue links to "openshift/hypershift#4332: ~~OCPBUGS-36681~~: Set Azure VM identity if user assigned identity set (Web Link)" [ 1691295 ]

Bryan Cox made changes - 2024/07/08 2:29 PM

Status

Original: New [ 10016 ]

New: ASSIGNED [ 14452 ]

Bryan Cox made changes - 2024/07/08 2:21 PM

Sprint

New: Hypershift Sprint 256 [ 62306 ]

Juan Manuel Parrilla Madrid made changes - 2024/07/08 2:18 PM

Priority

Original: Undefined [ 10300 ]

New: Normal [ 10200 ]

Juan Manuel Parrilla Madrid made changes - 2024/07/08 2:17 PM

Labels

New: triaged

Juan Manuel Parrilla Madrid made changes - 2024/07/08 2:17 PM

Assignee

Original: Alberto Garcia Lamela [ agarcial@redhat.com ]

New: Bryan Cox [ rh-ee-brcox ]

Bryan Cox made changes - 2024/07/08 1:24 PM

Rank

New: Ranked higher

Bryan Cox made changes - 2024/07/08 1:24 PM

QA Contact

New: Jie Zhao [ JIRAUSER162331 ]

Bryan Cox created issue - 2024/07/08 1:24 PM

Assignee:: Bryan Cox

Reporter:: Bryan Cox

QA Contact:: Feilian Xie (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 2024/07/08 1:24 PM

Updated:: 2024/10/01 5:38 PM

Resolved:: 2024/08/22 12:47 PM

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

Collapse comment: Errata Tool added a comment - 2024/10/01 5:38 PM

Expand comment: Errata Tool added a comment - 2024/10/01 5:38 PM

Collapse comment: Bryan Cox added a comment - 2024/08/21 12:30 PM

Expand comment: Bryan Cox added a comment - 2024/08/21 12:30 PM

Collapse comment: Feilian Xie (Inactive) added a comment - 2024/08/21 11:12 AM

Expand comment: Feilian Xie (Inactive) added a comment - 2024/08/21 11:12 AM

Collapse comment: Feilian Xie (Inactive) added a comment - 2024/08/21 11:07 AM, Edited by Feilian Xie - 2024/08/21 11:08 AM

Expand comment: Feilian Xie (Inactive) added a comment - 2024/08/21 11:07 AM, Edited by Feilian Xie - 2024/08/21 11:08 AM

Collapse comment: OpenShift Jira Bot added a comment - 2024/07/10 2:59 AM

Expand comment: OpenShift Jira Bot added a comment - 2024/07/10 2:59 AM

People

Dates