Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-41359 When provisioning using image and cloudInit, the userdata definition is too big (> 2K).
  3. SAT-42575

[QE] When provisioning using image and cloudInit, the userdata definition is too big (> 2K).

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False
    • 0
    • sat-rocket
    • Satellite Rocket Sprint 16

      Description of problem:

      When provisioning using image and cloud-init, the userdata definition is too big (> 2K). We either need to use UserDataSecretRef to pass large definitions as we can't reduce the userdata under 2K.

      How reproducible:

      Always

      Is this issue a regression from an earlier version: No

       

      Steps to Reproduce:

      1. Define an OCP-V compute resource
      2. Define an image under the OCP-V CR and the OS of your choosing with userdata flag set.
      3. Create a host under OCP-V, select image based provisioning
      4. Save the host

      Actual behavior:

      Host is not created, and an exception is logged about userdata being too large

      Expected behavior:

      The host is created successfully

      Additional information:
      For a lengthy explanation about all the problems with our cloud-init templates, see SAT-41746.
      To fix the problem at hand, the following information is important:

      • KubeVirt (and GCE) impose a strict 2K limit on textual cloud-init configurations
      • To subscribe a system to Satellite after provisioning, we need to provide the CA certificate the system should trust and that certificate alone is bigger than 2K
      • While cloud-init can fetch the certificate over HTTP, that would be insecure (as the CA is yet unknown) while placing it in the cloud-init config directly is secure (as it's transferred over a secured channel)
      • Instead of passing the cloud-init configuration in the userData field as text, we can provide a reference to a Kubernetes Secret in UserDataSecretRef (See the CloudInitNoCloudSource spec and Cloud-init UserData as k8s Secret), which would allow us to provide the template with an arbitrary size.

      QE Tracker for https://issues.redhat.com/browse/SAT-41359

              rhn-support-sganar Shubham Ganar
              satellite-jira-automation@redhat.com Satellite Jira-Automation
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: