Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-57302

Compute nodes fail to provision with Standard_D8s_v6 type and Disk encryption sets

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Undefined Undefined
    • None
    • 4.18.z
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      Working with an architect, we are seeing Standard_D8s_v6 compute nodes fail to provision 

           Failure sending request: StatusCode=400 -- Original Error: Code="InvalidParameter" Message="The VM size ''Standard_D8s_v6'' cannot boot with OS image or disk. Please check that disk controller types supported by the OS image or disk is one of the supported disk controller types for the VM size ''Standard_D8s_v6''. Please query sku api at https://aka.ms/azure-compute-skus  to determine supported disk controller types for the VM size." Target="vmSize"'

      The install config looks like 

      Version-Release number of selected component (if applicable):

          apiVersion: v1
      baseDomain: 4chjk.azure.redhatworkshops.io
      credentialsMode: Passthrough
      compute:
      - hyperthreading: Enabled
        architecture: amd64
        name: worker
        platform:
          azure:
            type: Standard_D8s_v6
        replicas: 3
      controlPlane:
        architecture: amd64
        hyperthreading: Enabled
        name: master
        platform: 
          azure:
            type: Standard_D8s_v4
        replicas: 3
      metadata:
        name: ddcocp4aztst
      networking:
        ovnKubernetesConfig:
          ipv4:
            internalJoinSubnet: 100.64.0.0/16
        clusterNetwork:
        - cidr: 10.128.0.0/14
          hostPrefix: 23
        machineNetwork:
        - cidr: 10.0.0.0/16
        networkType: OVNKubernetes
        serviceNetwork:
        - 172.30.0.0/16
      platform:
        azure:
          baseDomainResourceGroupName: openenv-4chjk
          resourceGroupName: openenv-4chjk-ddcocp4aztst
          #outboundType: UserDefinedRouting
          outboundType: Loadbalancer
          region: eastus
          defaultMachinePlatform:
            osDisk:
              diskType: Premium_LRS
              diskSizeGB: 512
              diskEncryptionSet:
                subscriptionId: 7598d218-6d54-4ed2-9f3a-533610e4e1e5
                resourceGroup: openenv-4chjk-keyvault
                name: openenv-4chjk-diskencryptionset
            zones:
            - "1"
            - "2"
            - "3"
          customerManagedKey:
            userAssignedIdentityKey: openenv-4chjk-usermanagedidentity
            keyVault:
              subscriptionId: 7598d218-6d54-4ed2-9f3a-533610e4e1e5
              resourceGroup: openenv-4chjk-keyvault
              keyName: openenv-4chjk-key
              name: openenv-4chjk-keyv
          networkResourceGroupName: openenv-4chjk
          virtualNetwork: openenv-4chjk-vnet
          controlPlaneSubnet: openenv-4chjk-master-subnet
          computeSubnet: openenv-4chjk-worker-subnet
          cloudName: AzurePublicCloud
          userTags:
            CostCenter:   "xxxxxxx"
            Environment:  xx
            BusinessMapping:     xxx
            DataClass:    xxxxxxxx
            Support:      jdoe@example.com
            ApplicationID: xxxx-xxxx
            BackupPlan:   xxxxxx
            Criticality:  xxxxx
            applicationname: ocp-paas
            assignmentgroup: support
      cpuPartitioningMode: None
      fips: false
      publish: Internal
      pullSecret: ''
      sshKey: |
        ssh-rsa xxxx

      How reproducible:

          I have not been able to reproduce locally as I'm lacking permissions (which I have requested). Asking for a reproducer.
      
      Installing Standard_D8s_v6 compute nodes without the encryption set works fine. The customer was also able to switch compute nodes to Standard_D8s_v4 and complete the install.

      Steps to Reproduce:

          1. Install Standard_D8s_v6 compute nodes with disk encryption. 
          2.
          3.
          

      Actual results:

          Failed compute node provisioning

      Expected results:

          Successful compute node provisioning

      Additional info:

          

              Unassigned Unassigned
              padillon Patrick Dillon
              None
              None
              Jinyun Ma Jinyun Ma
              None
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: