Bug 2000542
| Summary: | Cluster Proxy not used during installation on OSP | |||
|---|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | OpenShift BugZilla Robot <openshift-bugzilla-robot> | |
| Component: | Cloud Compute | Assignee: | Eric Duen <eduen> | |
| Cloud Compute sub component: | OpenStack Provider | QA Contact: | rlobillo | |
| Status: | CLOSED ERRATA | Docs Contact: | ||
| Severity: | high | |||
| Priority: | high | CC: | adduarte, egarcia, emacchi, m.andre, mfedosin, pprinett, rlobillo | |
| Version: | 4.8 | Keywords: | Triaged | |
| Target Milestone: | --- | |||
| Target Release: | 4.8.z | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | Doc Type: | Bug Fix | ||
| Doc Text: |
Cause: The HTTP transport to connect to OpenStack endpoints using a custom CA certificate was missing the Proxy settings.
Consequence: Cluster wasn't fully operational when deployed on OpenStack with a combination of proxy and custom CA certificate.
Fix: Pass the proxy settings to the HTTP transport used when connecting with a custom CA certificate.
Result: All cluster components work as expected.
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 2000551 (view as bug list) | Environment: | ||
| Last Closed: | 2021-09-14 06:57:48 UTC | Type: | --- | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 1986540 | |||
| Bug Blocks: | 2000551 | |||
|
Comment 1
Martin André
2021-09-02 12:51:43 UTC
Verified on 4.8.0-0.nightly-2021-09-06-042819 on top of OSP16.1 (RHOS-16.1-RHEL-8-20210604.n.0) using OpenShiftSDN network type. The installation was performed using IPI on restricted network and configuring a proxy with http and https:
--- install-config.yaml section ---
platform:
openstack:
cloud: "shiftstack"
externalNetwork: ""
region: "regionOne"
computeFlavor: "m4.xlarge"
machinesSubnet: 5bd85e62-3487-4d41-977f-f508c1f40045
apiVIP: "172.16.0.5"
ingressVIP: "172.16.0.7"
proxy:
httpProxy: http://dummy:dummy@172.16.0.3:3128/
httpsProxy: https://dummy:dummy@172.16.0.3:3130/
----
The error log mentioned on the bug description is not appearing:
$ oc logs machine-api-controllers-68b7c76784-l7zmk -n openshift-machine-api -c machine-controller | grep "Failed to authenticate provider client"
[cloud-user@installer-host ~]$
And the nodes were successfully deployed:
$ oc get nodes
NAME STATUS ROLES AGE VERSION
ostest-mfhzv-master-0 Ready master 70m v1.21.1+9807387
ostest-mfhzv-master-1 Ready master 70m v1.21.1+9807387
ostest-mfhzv-master-2 Ready master 70m v1.21.1+9807387
ostest-mfhzv-worker-0-8rrrn Ready worker 48m v1.21.1+9807387
ostest-mfhzv-worker-0-bgvnz Ready worker 47m v1.21.1+9807387
ostest-mfhzv-worker-0-ncqj6 Ready worker 48m v1.21.1+9807387
$ oc -n openshift-machine-api get pods
NAME READY STATUS RESTARTS AGE
cluster-autoscaler-operator-8b565f5b4-cwzd8 2/2 Running 0 73m
cluster-baremetal-operator-747bc97d67-bd54c 2/2 Running 5 73m
machine-api-controllers-68b7c76784-l7zmk 7/7 Running 0 61m
machine-api-operator-5467b94745-rlpsl 2/2 Running 1 73m
$ oc -n openshift-machine-api -c machine-controller rsh machine-api-controllers-68b7c76784-l7zmk
sh-4.4$ env | grep -i proxy
HTTP_PROXY=http://dummy:dummy@172.16.0.3:3128/
NO_PROXY=.cluster.local,.svc,10.128.0.0/14,127.0.0.1,169.254.169.254,172.16.0.0/24,172.30.0.0/16,api-int.ostest.shiftstack.com,localhost
HTTPS_PROXY=https://dummy:dummy@172.16.0.3:3130/
sh-4.4$
Please note that installation is not completed successfully because the Storage clusteroperator is degraded due to https://bugzilla.redhat.com/show_bug.cgi?id=1996672
$ oc logs -n openshift-cluster-csi-drivers openstack-cinder-csi-driver-operator-cdb55587b-pxfwk | tail -2
I0907 09:50:41.219043 1 event.go:282] Event(v1.ObjectReference{Kind:"ConfigMap", Namespace:"openshift-cluster-csi-drivers", Name:"openstack-cinder-csi-driver-operator-lock", UID:"64cd106c-2953-42dc-a781-3774d0d13f2d", APIVersion:"v1", ResourceVersion:"45917", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' openstack-cinder-csi-driver-operator-cdb55587b-pxfwk_51e75064-f774-41a2-ae2f-8e9248709ab9 became leader
W0907 09:50:44.319558 1 builder.go:99] graceful termination failed, controllers failed with error: couldn't collect info about cloud availability zones: failed to create a compute client: Get "https://10.46.44.10:13000/": dial tcp 10.46.44.10:13000: connect: no route to host
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.8.11 bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:3429 |