Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-39402

UPI playbooks when master schedulable fails

XMLWordPrintable

    • +
    • None
    • ShiftStack Sprint 259
    • 1
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, a coding issue caused the Ansible script on {op-system} user-provisioned installation infrastructure to fail. This occurred when IPv6 was enabled for a three-node cluster. With this release, support is provided for installing a three-node cluster with
      IPv6 enabled on {op-system}. (link:https://issues.redhat.com/browse/OCPBUGS-39402 [*OCPBUGS-39402 *])
      Show
      * Previously, a coding issue caused the Ansible script on {op-system} user-provisioned installation infrastructure to fail. This occurred when IPv6 was enabled for a three-node cluster. With this release, support is provided for installing a three-node cluster with IPv6 enabled on {op-system}. (link: https://issues.redhat.com/browse/OCPBUGS-39402 [* OCPBUGS-39402 *])
    • Bug Fix
    • Proposed

      There is a typo here: https://github.com/openshift/installer/blob/release-4.18/upi/openstack/security-groups.yaml#L370

      It should be os_subnet6_range.

      That task is only run if os_master_schedulable is defined and greater to 0 in the inventory.yaml

            [OCPBUGS-39402] UPI playbooks when master schedulable fails

            Errata Tool added a comment -

            Since the problem described in this issue should be resolved in a recent advisory, it has been closed.

            For information on the advisory (Important: OpenShift Container Platform 4.18.1 bug fix and security update), and where to find the updated files, follow the link below.

            If the solution does not work for you, open a new bug report.
            https://access.redhat.com/errata/RHSA-2024:6122

            Errata Tool added a comment - Since the problem described in this issue should be resolved in a recent advisory, it has been closed. For information on the advisory (Important: OpenShift Container Platform 4.18.1 bug fix and security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2024:6122

            Itshak Brown added a comment - 
            The fix is in place:
$ cat ostest/security-groups.yaml
[...]
    - name: 'Create master-sg rule "router"'
      openstack.cloud.security_group_rule:
        security_group: "{{ os_sg_master }}"
        ethertype: IPv6
        protocol: tcp
        remote_ip_prefix: "{{ os_subnet6_range }}"
        port_range_min: 1936
        port_range_max: 1936
      when: os_master_schedulable is defined and os_master_schedulable
[...]$ cat playbooks_logs/security-groups.log
[...]
TASK [Create master-sg rule "router"] ******************************************
changed: [localhost]
[...]And the IPv6 rule is added to the master security group:
$ openstack security group rule list ostest-nzkgq-master | grep 1936 | grep IPv6
| 333fc37e-e325-4f7f-9b56-c55d33d00747 | tcp         | IPv6      | fd2e:6f44:5dd8:c956::/64 | 1936:1936   | ingress   | None                  | None                 |

            Verified with: 4.18.0-0.nightly-2024-09-13-024933

            Itshak Brown added a comment - The fix is in place: $ cat ostest/security-groups.yaml [...] - name: 'Create master-sg rule "router" ' openstack.cloud.security_group_rule: security_group: "{{ os_sg_master }}" ethertype: IPv6 protocol: tcp remote_ip_prefix: "{{ os_subnet6_range }}" port_range_min: 1936 port_range_max: 1936 when: os_master_schedulable is defined and os_master_schedulable [...]$ cat playbooks_logs/security-groups.log [...] TASK [Create master-sg rule "router" ] ****************************************** changed: [localhost] [...]And the IPv6 rule is added to the master security group: $ openstack security group rule list ostest-nzkgq-master | grep 1936 | grep IPv6 | 333fc37e-e325-4f7f-9b56-c55d33d00747 | tcp | IPv6 | fd2e:6f44:5dd8:c956::/64 | 1936:1936 | ingress | None | None | Verified with: 4.18.0-0.nightly-2024-09-13-024933

            OpenShift On OpenStack added a comment -

            Removing the Triaged label because:

            • the Priority assessment is missing

            OpenShift On OpenStack added a comment - Removing the Triaged label because: the Priority assessment is missing

              maandre@redhat.com Martin André
              rlobillo Ramón Lobillo
              Itshak Brown Itshak Brown
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: