Bug 1326644
| Summary: | When undercloud is deployed with SSL, openstack undercloud upgrade removes the SSL VIP IP addresses | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Dan Yasny <dyasny> |
| Component: | instack-undercloud | Assignee: | Brad P. Crochet <brad> |
| Status: | CLOSED ERRATA | QA Contact: | Dan Yasny <dyasny> |
| Severity: | high | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 8.0 (Liberty) | CC: | adahms, brad, mburns, nlevinki, rhel-osp-director-maint, sasha |
| Target Milestone: | async | ||
| Target Release: | 8.0 (Liberty) | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | instack-undercloud-2.2.7-5.el7ost | Doc Type: | Known Issue |
| Doc Text: |
Cause: A change in os-net-config defaults might cause networking on the undercloud to restart
Consequence: If you're using SSL on the undercloud, the vips will lose connectivity because of this restart
Workaround (if any): If this occurs, simply run:
systemctl restart keepalived
Result: the vips will be re-established.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-06-15 12:39:09 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1325702 | ||
|
Description
Dan Yasny
2016-04-13 09:32:45 UTC
Adding a reload (not a restart) of keepalived appears to fix this. I've posted a patch to master. *** Bug 1334047 has been marked as a duplicate of this bug. *** Verified: Environment: instack-undercloud-2.2.7-7.el7ost.noarch grep -q OS_AUTH_URL=https stackrc && echo "https" https ran "openstack undercloud upgrade". ############################################################################# Undercloud install complete. The file containing this installation's passwords is at /home/stack/undercloud-passwords.conf. There is also a stackrc file at /home/stack/stackrc. These files are needed to interact with the OpenStack services, and should be secured. ############################################################################# ############################################################################# Upgrade is a new feature in Red Hat OpenStack Platform-director (OSP-d) that needs to be fully tested on each customer’s specific configurations before it is performed on any live production environment. Red Hat has tested most use cases and combinations that are offered as standard options through the director but, due to the number of possible combinations, this can never be a fully exhaustive list. In addition, if the configuration has been modified from the standard deployment, either manually or through post configuration hooks, testing the upgrade feature in a non-production environment becomes even more critical. Therefore, we advise you to: 1) Perform a backup of your undercloud node before starting any steps in the upgrade procedure. 2) Run the upgrade procedure in a test environment that includes all of the changes you have made before running the procedure in your production environment. 3) Please contact Red Hat and request guidance and assistance on the upgrade process before proceeding If you feel uncomfortable about performing this upgrade we suggest. ############################################################################# Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2016:1229 |