mhabash@mhabash-thinkpadt14gen5:~$ ssh root@ocp-edge04.lab.eng.tlv2.redhat.com
Activate the web console with: systemctl enable --now cockpit.socket
Register this system with Red Hat Insights: insights-client --register
Create an account or view all your systems at https://red.ht/insights-dashboard
Last login: Wed Feb 18 22:44:08 2026 from 10.47.238.121
[root@ocp-edge04 ~]# su - kni
Last login: Wed Feb 18 22:44:09 IST 2026 on pts/8
[kni@ocp-edge04 ~]$ cat <<EOF | oc apply -f -
> apiVersion: fence-agents-remediation.medik8s.io/v1alpha1
> kind: FenceAgentsRemediationTemplate
> metadata:
> name: broken-template
> namespace: openshift-workload-availability
> spec:
> template:
> spec:
> agent: fence_invalid_agent # <--- Invalid agent name
> remediationStrategy: OutOfServiceTaint
> EOF
Error from server (Forbidden): error when creating "STDIN": admission webhook "vfenceagentsremediationtemplate.kb.io" denied the request: [unsupported fence agent: fence_invalid_agent, invalid spec: mandatory parameters are missing]
[kni@ocp-edge04 ~]$ cat <<EOF | oc apply -f -
> apiVersion: fence-agents-remediation.medik8s.io/v1alpha1
> kind: FenceAgentsRemediationTemplate
> metadata:
> name: status-check-test
> namespace: openshift-workload-availability
> spec:
> # This tells the operator to run a status check every 1 minute
> statusValidationSample: 1m
> template:
> spec:
> agent: fence_ipmilan
> remediationStrategy: OutOfServiceTaint
> sharedSecretName: fence-agents-credentials
> sharedparameters:
> "--ip": "10.10.10.254"
> "--ipport": "623"
> "--action": "status" # Background checks use the 'status' action
> "--username": "admin"
> "--password": "password"
> nodeparameters:
> "--ip":
> worker-0-2: "10.10.10.254"
> EOF
The FenceAgentsRemediationTemplate "status-check-test" is invalid: spec.statusValidationSample: Invalid value: "": Value must be an integer >=0, or string between 0% and 100%
[kni@ocp-edge04 ~]$ cat <<EOF | oc apply -f -
> apiVersion: fence-agents-remediation.medik8s.io/v1alpha1
> kind: FenceAgentsRemediationTemplate
> metadata:
> name: status-check-test
> namespace: openshift-workload-availability
> spec:
> # Set this to an integer (number of nodes to sample)
> statusValidationSample: 1
> template:
> spec:
> agent: fence_ipmilan
> remediationStrategy: OutOfServiceTaint
> sharedSecretName: fence-agents-credentials
> sharedparameters:
> "--ip": "10.10.10.254"
> "--ipport": "623"
> "--action": "status"
> "--username": "admin"
> "--password": "password"
> nodeparameters:
> "--ip":
> worker-0-2: "10.10.10.254"
> EOF
Error from server (Forbidden): error when creating "STDIN": admission webhook "vfenceagentsremediationtemplate.kb.io" denied the request: secret 'fence-agents-credentials' not found in namespace 'openshift-workload-availability': Secret "fence-agents-credentials" not found
[kni@ocp-edge04 ~]$ oc create secret generic fence-agents-credentials \
> -n openshift-workload-availability \
> --from-literal=username=admin \
> --from-literal=password=password
secret/fence-agents-credentials created
[kni@ocp-edge04 ~]$ cat <<EOF | oc apply -f -
> apiVersion: fence-agents-remediation.medik8s.io/v1alpha1
> kind: FenceAgentsRemediationTemplate
> metadata:
> name: status-check-test
> namespace: openshift-workload-availability
> spec:
> statusValidationSample: 1
> template:
> spec:
> agent: fence_ipmilan
> remediationStrategy: OutOfServiceTaint
> sharedSecretName: fence-agents-credentials
> sharedparameters:
> "--ip": "10.10.10.254"
> "--ipport": "623"
> "--action": "status"
> "--username": "admin"
> "--password": "password"
> nodeparameters:
> "--ip":
> worker-0-2: "10.10.10.254"
> EOF
Error from server (Forbidden): error when creating "STDIN": admission webhook "vfenceagentsremediationtemplate.kb.io" denied the request: FAR doesn't support any other action than `reboot` or `off`
[kni@ocp-edge04 ~]$ cat <<EOF | oc apply -f -
> apiVersion: fence-agents-remediation.medik8s.io/v1alpha1
> kind: FenceAgentsRemediationTemplate
> metadata:
> name: status-check-test
> namespace: openshift-workload-availability
> spec:
> statusValidationSample: 1
> template:
> spec:
> agent: fence_ipmilan
> remediationStrategy: OutOfServiceTaint
> sharedSecretName: fence-agents-credentials
> sharedparameters:
> "--ip": "10.10.10.254"
> "--ipport": "623"
> "--action": "reboot" # <--- Changed from 'status' to 'reboot'
> "--username": "admin"
> "--password": "password"
> nodeparameters:
> "--ip":
> worker-0-2: "10.10.10.254"
> EOF
fenceagentsremediationtemplate.fence-agents-remediation.medik8s.io/status-check-test created
[kni@ocp-edge04 ~]$ oc get fartemplate status-check-test -n openshift-workload-availability -o yaml
apiVersion: fence-agents-remediation.medik8s.io/v1alpha1
kind: FenceAgentsRemediationTemplate
metadata:
annotations:
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"fence-agents-remediation.medik8s.io/v1alpha1","kind":"FenceAgentsRemediationTemplate","metadata":{"annotations":{},"name":"status-check-test","namespace":"openshift-workload-availability"},"spec":{"statusValidationSample":1,"template":{"spec":{"agent":"fence_ipmilan","nodeparameters":{"--ip":{"worker-0-2":"10.10.10.254"}},"remediationStrategy":"OutOfServiceTaint","sharedSecretName":"fence-agents-credentials","sharedparameters":{"--action":"reboot","--ip":"10.10.10.254","--ipport":"623","--password":"password","--username":"admin"}}}}}
remediation.medik8s.io/multiple-templates-support: "true"
creationTimestamp: "2026-02-18T21:33:14Z"
generation: 1
name: status-check-test
namespace: openshift-workload-availability
resourceVersion: "308148"
uid: 32fd1856-406a-46d6-a8b7-4e5b3b4c9d1e
spec:
statusValidationSample: 1
template:
spec:
agent: fence_ipmilan
nodeparameters:
--ip:
worker-0-2: 10.10.10.254
remediationStrategy: OutOfServiceTaint
retrycount: 5
retryinterval: 5s
sharedSecretName: fence-agents-credentials
sharedparameters:
--action: reboot
--ip: 10.10.10.254
--ipport: "623"
--password: password
--username: admin
timeout: 1m0s
status:
conditions:
- lastTransitionTime: "2026-02-18T21:33:24Z"
message: parameters validation failed for 1 node(s)
observedGeneration: 1
reason: ValidationFailed
status: "False"
type: FenceAgentStatusValidationSucceeded
validationFailed:
worker-0-2: status command timed out after 15s
[kni@ocp-edge04 ~]$ oc get fartemplate status-check-test -n openshift-workload-availability -o yaml
apiVersion: fence-agents-remediation.medik8s.io/v1alpha1
kind: FenceAgentsRemediationTemplate
metadata:
annotations:
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"fence-agents-remediation.medik8s.io/v1alpha1","kind":"FenceAgentsRemediationTemplate","metadata":{"annotations":{},"name":"status-check-test","namespace":"openshift-workload-availability"},"spec":{"statusValidationSample":1,"template":{"spec":{"agent":"fence_ipmilan","nodeparameters":{"--ip":{"worker-0-2":"10.10.10.254"}},"remediationStrategy":"OutOfServiceTaint","sharedSecretName":"fence-agents-credentials","sharedparameters":{"--action":"reboot","--ip":"10.10.10.254","--ipport":"623","--password":"password","--username":"admin"}}}}}
remediation.medik8s.io/multiple-templates-support: "true"
creationTimestamp: "2026-02-18T21:33:14Z"
generation: 1
name: status-check-test
namespace: openshift-workload-availability
resourceVersion: "308148"
uid: 32fd1856-406a-46d6-a8b7-4e5b3b4c9d1e
spec:
statusValidationSample: 1
template:
spec:
agent: fence_ipmilan
nodeparameters:
--ip:
worker-0-2: 10.10.10.254
remediationStrategy: OutOfServiceTaint
retrycount: 5
retryinterval: 5s
sharedSecretName: fence-agents-credentials
sharedparameters:
--action: reboot
--ip: 10.10.10.254
--ipport: "623"
--password: password
--username: admin
timeout: 1m0s
status:
conditions:
- lastTransitionTime: "2026-02-18T21:33:24Z"
message: parameters validation failed for 1 node(s)
observedGeneration: 1
reason: ValidationFailed
status: "False"
type: FenceAgentStatusValidationSucceeded
validationFailed:
worker-0-2: status command timed out after 15s
[kni@ocp-edge04 ~]$