Bug 1807032

Summary: Adding RHEL compute node requires port 22623 to be opened on external LB
Product: OpenShift Container Platform Reporter: Russell Teague <rteague>
Component: InstallerAssignee: Russell Teague <rteague>
Installer sub component: openshift-ansible QA Contact: Gaoyun Pei <gpei>
Status: CLOSED ERRATA Docs Contact:
Severity: unspecified    
Priority: unspecified CC: adahiya, gpei, lbednar, rkshirsa, scuppett, yanyang
Version: 4.4   
Target Milestone: ---   
Target Release: 4.4.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Cause: Bootstrap server endpoint uses 'api' endpoint which goes through external load-balancer Consequence: Additional port required to be open on external load-balancer to bootstrap nodes Fix: Switched the bootstrap server endpoint to the internal endpoint 'api-int' Result: Additional open port not required on external load-balancer
Story Points: ---
Clone Of: 1792822 Environment:
Last Closed: 2020-05-04 11:42:22 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1792822    
Bug Blocks:    

Comment 4 Gaoyun Pei 2020-02-28 07:50:19 UTC
Verify this bug using openshift-ansible-4.4.0-202002252246.git.1.f37df7d.el7.noarch.rpm.

It's using the internal api LB address to fetch bootstrap.ign, so no need additional 22623 opened on external LB now.


TASK [openshift_node : Wait for bootstrap endpoint to show up] *****************
Friday 28 February 2020  13:47:00 +0800 (0:00:00.664)       0:09:23.974 ******* 
ok: [ip-10-0-49-13.us-east-2.compute.internal] => {"attempts": 1, "changed": false, "connection": "close", "content_length": "152208", "content_type": "application/json", "cookies": {}, "cookies_string": "", "date": "Fri, 28 Feb 2020 05:47:01 GMT", "elapsed": 0, "json": {"ignition": {"config": {}, "security": {"tls": {}}, "timeouts": {}, "version": "2.2.0"}, "networkd": {},
...
{"contents": "[Unit]\nBefore=pivot.service\nConditionFirstBoot=true\n[Service]\nExecStart=/bin/sh -c 'mkdir /run/pivot && touch /run/pivot/reboot-needed'\n[Install]\nWantedBy=multi-user.target\n", "enabled": true, "name": "mcd-write-pivot-reboot.service"}]}}, "msg": "OK (152208 bytes)", "redirected": false, "status": 200, "url": "https://api-int.gpei-44.qe.devcluster.openshift.com:22623/config/worker"}

Comment 6 errata-xmlrpc 2020-05-04 11:42:22 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0581