Bug 1528858
| Summary: | Nova Cold Migration uses wrong Network and fails | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Andreas Karis <akaris> |
| Component: | openstack-tripleo-heat-templates | Assignee: | Emilien Macchi <emacchi> |
| Status: | CLOSED DUPLICATE | QA Contact: | Gurenko Alex <agurenko> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 10.0 (Newton) | CC: | akaris, berrange, dasmith, eglynn, j.beisiegel, jhakimra, kchamart, mburns, mirko.schmidt, owalsh, rhel-osp-director-maint, sbauza, sferdjao, sgordon, srevivo, vromanso |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1478346 | Environment: | |
| Last Closed: | 2018-01-04 17:59:26 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1478346, 1501564 | ||
| Bug Blocks: | |||
|
Description
Andreas Karis
2017-12-24 16:09:13 UTC
### OSP 11 ###
Compute nodes use the network of the default route for cold migration. In order to correctly configure `/etc/ssh/sshd_config`, modify the `ServiceNetMap`, for example in `network-environment.yaml`, and set `NovaColdMigrationNetwork` to the network on the compute nodes with the default route:
~~~
parameter_defaults:
(...)
ServiceNetMap:
NovaColdMigrationNetwork: external
~~~
The above should be set to the network that compute nodes use as their default route. In this example case, the default route on the computes nodes has been set to the external network.
### OSP 10 ###
In OSP 10, this is slightly more complex, as parameter `NovaColdMigrationNetwork` does not exist. Instead, `NovaApiNetwork` is used.
~~~
[stack@undercloud-r430 ~]$ grep cold_migration_ssh /usr/share/openstack-tripleo-heat-templates/* -R
/usr/share/openstack-tripleo-heat-templates/puppet/services/nova-compute.yaml: - "%{hiera('cold_migration_ssh_inbound_addr')}"
/usr/share/openstack-tripleo-heat-templates/puppet/services/nova-compute.yaml: cold_migration_ssh_inbound_addr: {get_param: [ServiceNetMap, NovaApiNetwork]}
~~~
This network, by default, maps to `internal_api`:
~~~
/usr/share/openstack-tripleo-heat-templates/environments/updates/update-from-keystone-admin-internal-api.yaml: NovaApiNetwork: internal_api
~~~
A workaround could hence be to change the `ServiceNetMap` again, however this will also move VIPs and other services to the network which has the default route, and hence could introduce a security risk:
~~~
parameter_defaults:
(...)
ServiceNetMap:
NovaApiNetwork: ctlplane
~~~
Currently, as bug report was opened to address this issue: [https://bugzilla.redhat.com/show_bug.cgi?id=1528858](https://bugzilla.redhat.com/show_bug.cgi?id=1528858)
Can we get a backport of NovaColdMigrationNetwork into OSP 10? Or does this have any further implications? I don't understand why this is different in OSP 10 and 11:
OSP 11:
~~~
[root@undercloud-8 ~]# grep NovaColdMigrationNetwork /usr/share/openstack-tripleo-heat-templates/* -R
/usr/share/openstack-tripleo-heat-templates/network/service_net_map.j2.yaml: NovaColdMigrationNetwork: ctlplane
/usr/share/openstack-tripleo-heat-templates/puppet/services/nova-compute.yaml: cold_migration_ssh_inbound_addr: {get_param: [ServiceNetMap, NovaColdMigrationNetwork]}
~~~
OSP 10:
~~~
[stack@undercloud-r430 ~]$ grep cold_migration_ssh /usr/share/openstack-tripleo-heat-templates/* -R
/usr/share/openstack-tripleo-heat-templates/puppet/services/nova-compute.yaml: - "%{hiera('cold_migration_ssh_inbound_addr')}"
/usr/share/openstack-tripleo-heat-templates/puppet/services/nova-compute.yaml: cold_migration_ssh_inbound_addr: {get_param: [ServiceNetMap, NovaApiNetwork]}
~~~
If I'm correct, then this is actually a fairly easy, yet important backport for OSP 10. I guess we should simply leave the default in OSP 10 at internal_api not to break anything existing?
~~~
/usr/share/openstack-tripleo-heat-templates/network/service_net_map.j2.yaml: NovaApiNetwork: internal_api
~~~
So:
~~~
NovaColdMigrationNetwork: internal_api
~~~
Though then things could break on an upgrade to OSP 11 ;-)
Just for completeness: https://bugzilla.redhat.com/show_bug.cgi?id=1478346#c7 Ollie Walsh 2018-01-04 12:50:04 EST Yes, NovaColdMigrationNetwork was removed in https://bugzilla.redhat.com/show_bug.cgi?id=1501564. Nova now uses the internal_api network for cold migration instead of relying on the default route. *** This bug has been marked as a duplicate of bug 1501564 *** Resolution: NOTABUG → DUPLICATE *** This bug has been marked as a duplicate of bug 1486948 *** |