Bug 2234831

Summary:	[Updates 17.0 to 17.1] Access to the overcloud is lost after undercloud upgrade command and reboot of the node. Key rotation documentation should be added before upgrading undercloud to 17.1
Product:	Red Hat OpenStack	Reporter:	Pedro Navarro <pnavarro>
Component:	documentation	Assignee:	kgilliga
Status:	CLOSED CURRENTRELEASE	QA Contact:	RHOS Documentation Team <rhos-docs>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	17.1 (Wallaby)	CC:	kgilliga, mciecier, sathlang
Target Milestone:	---	Keywords:	Documentation, Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-10-02 17:27:37 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Pedro Navarro 2023-08-25 14:59:51 UTC

Description of problem:
Red Hat Enterprise Linux (RHEL) 9.1 requires a minimum SSH key size of 2048 bits. An operator should check that your current SSH key on Red Hat OpenStack Platform (RHOSP) director has a key of at least 2048 bits. If you do not have an SSH key that meets the requirements of RHEL 9.x, you can lose access to the overcloud.

Version-Release number of selected component (if applicable): 17.1


How reproducible:


Steps to Reproduce:
1.Follow the update steps until chapter 2.1 https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/17.1/html/performing_a_minor_update_of_red_hat_openstack_platform/assembly_updating-the-undercloud_keeping-updated#proc_performing-a-minor-update-of-a-containerized-undercloud_updating-undercloud
2. Reboot undercloud
3. Access to overcloud is lost

Actual results:

Access to overcloud is lost

Expected results:

The key should have been rotated before the upgrade of the undercloud. Following a similar process detailed here: 
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/17.1/html-single/framework_for_upgrades_16.2_to_17.1/index#proc_validating-your-ssh-key-size_undercloud

Additional info:

A similar section that exists in 16.2 to 17.1 upgrade framework should be implemented: https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/17.1/html-single/framework_for_upgrades_16.2_to_17.1/index#proc_validating-your-ssh-key-size_undercloud