-
Spike
-
Resolution: Done
-
Critical
-
None
-
None
-
None
-
False
-
-
False
-
None
-
None
-
None
-
None
Impact statement for the OCPBUGS-56380 series:
Which 4.y.z to 4.y'.z' updates increase vulnerability?
Updates to the following versions:
- 4.15.48 or higher
- 4.16.38 or higher
- 4.17.17 or higherÂ
- 4.18.1 or higher
Which types of clusters?
Only some Azure clusters are exposed. Check your infrastructure platform with:
$ oc get -o 'jsonpath={.status.platformStatus.type}{"\n"}' infrastructure.config.openshift.io cluster
If the output is not Azure, the cluster is not exposed. If the output is Azure, check your regions:
$ oc -n openshift-machine-api get -o 'jsonpath={range .items[*]}{.spec.template.spec.providerSpec.value.location}{"\n"}{end}' machinesets.machine.openshift.io
If the output contains any of these regions without availability zones, the cluster is exposed:
$ az account list-locations | jq -c '.[] | select(.availabilityZoneMappings == null) | {name, displayName}' | sort
{"name":"asia","displayName":"Asia"}
{"name":"asiapacific","displayName":"Asia Pacific"}
{"name":"australiacentral2","displayName":"Australia Central 2"}
{"name":"australiacentral","displayName":"Australia Central"}
{"name":"australia","displayName":"Australia"}
{"name":"australiasoutheast","displayName":"Australia Southeast"}
{"name":"brazil","displayName":"Brazil"}
{"name":"brazilsoutheast","displayName":"Brazil Southeast"}
{"name":"brazilus","displayName":"Brazil US"}
{"name":"canada","displayName":"Canada"}
{"name":"canadaeast","displayName":"Canada East"}
{"name":"centraluseuap","displayName":"Central US EUAP"}
{"name":"centralusstage","displayName":"Central US (Stage)"}
{"name":"eastasiastage","displayName":"East Asia (Stage)"}
{"name":"eastus2stage","displayName":"East US 2 (Stage)"}
{"name":"eastusstage","displayName":"East US (Stage)"}
{"name":"eastusstg","displayName":"East US STG"}
{"name":"europe","displayName":"Europe"}
{"name":"france","displayName":"France"}
{"name":"francesouth","displayName":"France South"}
{"name":"germany","displayName":"Germany"}
{"name":"germanynorth","displayName":"Germany North"}
{"name":"global","displayName":"Global"}
{"name":"india","displayName":"India"}
{"name":"indonesia","displayName":"Indonesia"}
{"name":"israel","displayName":"Israel"}
{"name":"italy","displayName":"Italy"}
{"name":"japan","displayName":"Japan"}
{"name":"jioindiacentral","displayName":"Jio India Central"}
{"name":"jioindiawest","displayName":"Jio India West"}
{"name":"korea","displayName":"Korea"}
{"name":"koreasouth","displayName":"Korea South"}
{"name":"malaysia","displayName":"Malaysia"}
{"name":"mexico","displayName":"Mexico"}
{"name":"newzealand","displayName":"New Zealand"}
{"name":"northcentralus","displayName":"North Central US"}
{"name":"northcentralusstage","displayName":"North Central US (Stage)"}
{"name":"norway","displayName":"Norway"}
{"name":"norwaywest","displayName":"Norway West"}
{"name":"poland","displayName":"Poland"}
{"name":"qatar","displayName":"Qatar"}
{"name":"singapore","displayName":"Singapore"}
{"name":"southafrica","displayName":"South Africa"}
{"name":"southafricawest","displayName":"South Africa West"}
{"name":"southcentralusstage","displayName":"South Central US (Stage)"}
{"name":"southcentralusstg","displayName":"South Central US STG"}
{"name":"southeastasiastage","displayName":"Southeast Asia (Stage)"}
{"name":"southindia","displayName":"South India"}
{"name":"spain","displayName":"Spain"}
{"name":"sweden","displayName":"Sweden"}
{"name":"switzerland","displayName":"Switzerland"}
{"name":"switzerlandwest","displayName":"Switzerland West"}
{"name":"taiwan","displayName":"Taiwan"}
{"name":"uaecentral","displayName":"UAE Central"}
{"name":"uae","displayName":"United Arab Emirates"}
{"name":"uk","displayName":"United Kingdom"}
{"name":"ukwest","displayName":"UK West"}
{"name":"unitedstates","displayName":"United States"}
{"name":"unitedstateseuap","displayName":"United States EUAP"}
{"name":"westcentralus","displayName":"West Central US"}
{"name":"westindia","displayName":"West India"}
{"name":"westus2stage","displayName":"West US 2 (Stage)"}
{"name":"westus","displayName":"West US"}
{"name":"westusstage","displayName":"West US (Stage)"}
What is the impact? Is it serious enough to warrant removing update recommendations?
- Machine API cannot scale up new instances in existing MachineSets.
- Autoscaling is, therefore, also broken.
How involved is remediation?
- Users must create new MachineSets and then scale those instead.
- The above-mentioned step is not obvious, and it has not been tested yet. However, in theory, it should be functional.
Is this a regression?
- Yes, a cluster administrator shouldn't have to recreate MachineSets ever.
- is related to
-
OCPBUGS-56380 OCP on Azure MachineSet scaling up fails after upgrade to 4.15.48+ on non zonal region
-
- Verified
-
- links to