Bug 1917928

Summary: Installer bootstrap node setting of additional subnets inconsistent with additional security groups
Product: OpenShift Container Platform Reporter: OpenShift BugZilla Robot <openshift-bugzilla-robot>
Component: InstallerAssignee: egarcia
Installer sub component: OpenShift on OpenStack QA Contact: Pedro Amoedo <pamoedom>
Status: CLOSED ERRATA Docs Contact:
Severity: medium    
Priority: medium CC: pamoedom, pprinett
Version: 4.7   
Target Milestone: ---   
Target Release: 4.6.z   
Hardware: All   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-02-22 13:54:32 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1915998    
Bug Blocks:    

Description OpenShift BugZilla Robot 2021-01-19 17:18:54 UTC
+++ This bug was initially created as a clone of Bug #1915998 +++

The installer attaches the Control Plane's additional subnets to the bootstrap node, but not the Control Plane's additional security groups. We should set both on the bootstrap node, and update the documentation to match.

Comment 3 Pedro Amoedo 2021-02-17 13:58:37 UTC
Verified with version "4.6.0-0.nightly-2021-02-13-034601" setting "additionalNetworkIDs" and "additionalSecurityGroupIDs" parameters for the nodes, installation went successful and bootstrap uses now the same network context and securitygroups than master nodes as expected:

~~~
02-17 13:51:42  ./openshift-install 4.6.0-0.nightly-2021-02-13-034601
02-17 13:51:42  built from commit 74b1d08f7f44c9c0d3f999c669a16fb2395e9551
02-17 13:51:42  release image registry.ci.openshift.org/ocp/release@sha256:aa0d57d5cb325f33b1679dc0fa21a375a972e0fcb8efa6da0edd202ea03a759a
...
[2021-02-17T12:51:37.977Z] ---
[2021-02-17T12:51:37.977Z] apiVersion: v1
[2021-02-17T12:51:37.977Z] controlPlane:
[2021-02-17T12:51:37.977Z]   architecture: amd64
[2021-02-17T12:51:37.977Z]   hyperthreading: Enabled
[2021-02-17T12:51:37.977Z]   name: master
[2021-02-17T12:51:37.977Z]   platform:
[2021-02-17T12:51:37.977Z]     openstack:
[2021-02-17T12:51:37.977Z]       additionalNetworkIDs: &1
[2021-02-17T12:51:37.977Z]       - '07944628-df88-47a5-9853-26300330c403'
[2021-02-17T12:51:37.977Z]       additionalSecurityGroupIDs: &2
[2021-02-17T12:51:37.977Z]       - 7ee009cb-0b82-440e-9782-0a9b87253330
[2021-02-17T12:51:37.977Z]   replicas: 3
~~~

~~~
$ openstack --os-cloud osp-qe server list --name pamoedom-9f6h8
+--------------------------------------+-------------------------------+--------+----------------------------------------------------------------------------------------+----------------------------+-----------+
| ID                                   | Name                          | Status | Networks                                                                               | Image                      | Flavor    |
+--------------------------------------+-------------------------------+--------+----------------------------------------------------------------------------------------+----------------------------+-----------+
| eb410380-e36f-488a-86f9-63619edaf5d7 | pamoedom-9f6h8-worker-0-qdwsx | ACTIVE | pamoedom-9f6h8-openshift=192.168.3.187; pamoedom-network-test=172.16.1.184             | rhcos-46.82.202011260640-0 | m1.large  |
| 9c49a1a3-4956-4c41-b7c4-46879f7d9cef | pamoedom-9f6h8-worker-0-jfqtd | ACTIVE | pamoedom-9f6h8-openshift=192.168.1.167; pamoedom-network-test=172.16.1.139             | rhcos-46.82.202011260640-0 | m1.large  |
| b072ea98-4a0d-4e66-89c6-7800a96bebe1 | pamoedom-9f6h8-bootstrap      | ACTIVE | pamoedom-9f6h8-openshift=192.168.0.12, 10.0.102.89; pamoedom-network-test=172.16.1.122 | rhcos-46.82.202011260640-0 | m1.xlarge |
| 068fe20e-f538-4edd-a44c-038c002e2195 | pamoedom-9f6h8-master-1       | ACTIVE | pamoedom-9f6h8-openshift=192.168.2.154; pamoedom-network-test=172.16.1.151             | rhcos-46.82.202011260640-0 | m1.xlarge |
| 87d5bfec-f9d9-49f5-893b-037384422723 | pamoedom-9f6h8-master-0       | ACTIVE | pamoedom-9f6h8-openshift=192.168.3.155; pamoedom-network-test=172.16.1.136             | rhcos-46.82.202011260640-0 | m1.xlarge |
| ec7e4234-0339-430e-a705-a75eff24093b | pamoedom-9f6h8-master-2       | ACTIVE | pamoedom-9f6h8-openshift=192.168.3.47; pamoedom-network-test=172.16.1.186              | rhcos-46.82.202011260640-0 | m1.xlarge |
+--------------------------------------+-------------------------------+--------+----------------------------------------------------------------------------------------+----------------------------+-----------+

$ openstack --os-cloud osp-qe server show pamoedom-9f6h8-bootstrap
+-----------------------------+----------------------------------------------------------------------------------------+
| Field                       | Value                                                                                  |
+-----------------------------+----------------------------------------------------------------------------------------+
| OS-DCF:diskConfig           | MANUAL                                                                                 |
| OS-EXT-AZ:availability_zone | nova                                                                                   |
| OS-EXT-STS:power_state      | Running                                                                                |
| OS-EXT-STS:task_state       | None                                                                                   |
| OS-EXT-STS:vm_state         | active                                                                                 |
| OS-SRV-USG:launched_at      | 2021-02-17T12:53:47.000000                                                             |
| OS-SRV-USG:terminated_at    | None                                                                                   |
| accessIPv4                  |                                                                                        |
| accessIPv6                  |                                                                                        |
| addresses                   | pamoedom-9f6h8-openshift=192.168.0.12, 10.0.102.89; pamoedom-network-test=172.16.1.122 |
| config_drive                |                                                                                        |
| created                     | 2021-02-17T12:53:20Z                                                                   |
| flavor                      | m1.xlarge (3f183920-6cba-4bfb-ab3a-599559cf0f97)                                       |
| hostId                      | baef40e600d23169b19db337100189f3fa07ebda88e8ea6c5022c486                               |
| id                          | b072ea98-4a0d-4e66-89c6-7800a96bebe1                                                   |
| image                       | rhcos-46.82.202011260640-0 (435163c2-09b7-4951-8a8c-59e5be2f7fdd)                      |
| key_name                    | None                                                                                   |
| name                        | pamoedom-9f6h8-bootstrap                                                               |
| progress                    | 0                                                                                      |
| project_id                  | 542c6ebd48bf40fa857fc245c7572e30                                                       |
| properties                  | Name='pamoedom-9f6h8-bootstrap', openshiftClusterID='pamoedom-9f6h8'                   |
| security_groups             | name='default'                                                                         |
|                             | name='pamoedom-9f6h8-master'                                                           |
|                             | name='pamoedom-sg-test'                                                                |
| status                      | ACTIVE                                                                                 |
| updated                     | 2021-02-17T12:53:47Z                                                                   |
| user_id                     | b414646065ab99780ef1bbcba52c07d2033a6f99fd0b10a3b1b12fcb5e5275e1                       |
| volumes_attached            |                                                                                        |
+-----------------------------+----------------------------------------------------------------------------------------+
~~~

Regards.

Comment 5 errata-xmlrpc 2021-02-22 13:54:32 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.6.18 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:0510