Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1647478

Summary: Stack update does not update fencing configuration
Product: Red Hat OpenStack Reporter: Lars Kellogg-Stedman <lars>
Component: puppet-pacemakerAssignee: Michele Baldessari <michele>
Status: CLOSED ERRATA QA Contact: Gurenko Alex <agurenko>
Severity: high Docs Contact:
Priority: medium    
Version: 15.0 (Stein)CC: broose, bshephar, chrisbro, dbecker, dhill, dsedgmen, jjoyce, jschluet, lmiccini, mburns, michele, morazi, nsatsia, pmannidi, slinaber, sputhenp, tvignaud
Target Milestone: z2Keywords: Triaged, ZStream
Target Release: 15.0 (Stein)   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: puppet-pacemaker-0.8.1-0.20191118230434.b6174b3.el8ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-03-05 11:59:04 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1693423    

Description Lars Kellogg-Stedman 2018-11-07 14:59:57 UTC
We have successfully deployed an OSP 13 overcloud, but the fencing configuration was incorrect. Specifically, the fencing configuration had the wrong hostnames in pcmk_host_list for each device.  We have:

    Resource: stonith-fence_ipmilan-000f530df538 (class=stonith type=fence_ipmilan)
    Attributes: ipaddr=10.0.15.39 lanplus=true login=root passwd=***** pcmk_host_list=overcloud-controller-0 privlvl=administrator

But we want pcmk_host_list to use real hostnames (such as
neu-3-39-control3).  I've updated the fencing configuration and
redeployed, and while the stack environment has the desired
configuration:

    $ openstack stack environment show overcloud
    [...]
      FencingConfig:
        devices:
        - agent: fence_ipmilan
          host_mac: 00:0f:53:0d:fa:60
          params:
            ipaddr: 10.0.3.39
            lanplus: true
            login: root
            passwd: ******
            pcmk_host_list: neu-3-39-control3
            privlvl: administrator
    [...]

The fencing configuration in pacemaker retains the incorrect values:

    [root@neu-3-39-control3 ~]# pcs stonith show --full
     Resource: stonith-fence_ipmilan-000f530df538 (class=stonith type=fence_ipmilan)
      Attributes: ipaddr=10.0.15.39 lanplus=true login=root passwd=***** pcmk_host_list=overcloud-controller-0 privlvl=administrator
      Operations: monitor interval=60s (stonith-fence_ipmilan-000f530df538-monitor-interval-60s)
     Resource: stonith-fence_ipmilan-000f530dfa60 (class=stonith type=fence_ipmilan)
      Attributes: ipaddr=10.0.3.39 lanplus=true login=root passwd=***** pcmk_host_list=overcloud-controller-2 privlvl=administrator
      Operations: monitor interval=60s (stonith-fence_ipmilan-000f530dfa60-monitor-interval-60s)
     Resource: stonith-fence_ipmilan-000f53281af0 (class=stonith type=fence_ipmilan)
      Attributes: ipaddr=10.0.5.39 lanplus=true login=root passwd=***** pcmk_host_list=overcloud-controller-1 privlvl=administrator
      Operations: monitor interval=60s (stonith-fence_ipmilan-000f53281af0-monitor-interval-60s)

What is the appropriate mechanism for updating these values?

Comment 1 Lars Kellogg-Stedman 2018-11-07 15:18:08 UTC
(I was able to update this by hand by running the appropriate sequence of 'pcs stonith update ...' commands. I'm interested in whether there is a way to have this happen as part of the stack update.)

Comment 2 Andrew Beekhof 2018-11-08 00:49:53 UTC
puppet-pacemaker has traditionally been satisfied with "the object exists" and not checked for any changes.

This is a known problem that we're actively working towards fixing, but is unlikely to be back ported.

Comment 3 Michele Baldessari 2019-05-08 09:31:19 UTC
*** Bug 1693422 has been marked as a duplicate of this bug. ***

Comment 5 Luca Miccini 2019-06-26 06:33:56 UTC
*** Bug 1723648 has been marked as a duplicate of this bug. ***

Comment 9 Luca Miccini 2019-10-21 07:49:25 UTC
*** Bug 1715372 has been marked as a duplicate of this bug. ***

Comment 14 errata-xmlrpc 2020-03-05 11:59:04 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0643