Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1760123

Summary: [DOCS 4.1.z] Update snapshot-controller deployment config pod spec to include hostNetwork: true
Product: OpenShift Container Platform Reporter: Daniel Del Ciancio <ddelcian>
Component: DocumentationAssignee: Bob Furu <bfuru>
Status: CLOSED CURRENTRELEASE QA Contact: Liang Xia <lxia>
Severity: medium Docs Contact: Vikram Goyal <vigoyal>
Priority: high    
Version: 4.1.zCC: aos-bugs, bfuru, jokerman
Target Milestone: ---Keywords: Reopened
Target Release: 4.1.z   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1762299 (view as bug list) Environment:
Last Closed: 2019-11-04 19:18:53 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1762299    

Description Daniel Del Ciancio 2019-10-09 22:15:36 UTC
Document URL: 

https://docs.openshift.com/container-platform/4.1/storage/persistent-storage/persistent-storage-snapshots.html#aws-authentication


Section Number and Name: 

AWS AUTHENTICATION - snapshot-controller deployment configuration


Describe the issue: 

Refer to BZ for details:  https://bugzilla.redhat.com/show_bug.cgi?id=1718389

The pod spec section in the snapshot-controller deployment configuration should include "hostNetwork: true"


Suggestions for improvement: 

Additional information:

Comment 1 Daniel Del Ciancio 2019-10-10 05:08:17 UTC
The following section:

https://docs.openshift.com/container-platform/4.1/storage/persistent-storage/persistent-storage-snapshots.html#snapshots-starting-controller-provisioner_persistent-storage-snapshots


should be modified to include this command after creating the serviceaccount : 

# oc adm policy add-scc-to-user hostnetwork -z snapshot-controller-runner


Since the pod runs using snapshot-controller-runner serviceaccount, it requires the hostnetwork scc assigned it.

Comment 2 Daniel Del Ciancio 2019-10-10 15:12:46 UTC
Also, the "AWS authentication" section [https://docs.openshift.com/container-platform/4.1/storage/persistent-storage/persistent-storage-snapshots.html#aws-authentication], it should state something like "when generating the base64 values required for the awskeys secret, make sure to remove any trailing newline character as follows:

echo -n "<aws_access_key_id>" | base64
echo -n "<aws_secret_access_key>" | base64


Can we be sure to have the documentation reflect this as well?


Thanks!

Comment 3 Daniel Del Ciancio 2019-10-15 12:55:40 UTC
The restore section in [1] should also reflect the following changes:


# When using AWS EBS storage with gp2 encryption configured, you need to explicitly set the parameters below:

kind: StorageClass
apiVersion: storage.k8s.io/v1
metadata:
  name: snapshot-promoter
provisioner: volumesnapshot.external-storage.k8s.io/snapshot-promoter
parameters:
  encrypted: "true"
  type: gp2



# The restore snapshot should specify the accessModes and resources attributes:

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: snapshot-pv-provisioning-demo
  annotations:
    snapshot.alpha.kubernetes.io/snapshot: snapshot-demo
spec:
  storageClassName: snapshot-promoter
  accessModes:
  - ReadWriteOnce
  resources:
    requests:
      storage: 1Gi



Lastly, the 4.1 doc states that volume snapshots is tech preview, however, the 4.2 doc (still unpublished) states that this feature will be deprecated.  Can you clarify?  Will it be replaced with a storage operator? 



-----

[1] https://docs.openshift.com/container-platform/4.1/storage/persistent-storage/persistent-storage-snapshots.html#persistent-storage-snapshots-restore_persistent-storage-snapshots

Comment 4 Bob Furu 2019-10-17 19:38:28 UTC
Docs updated to reflect Daniel's suggestions. Created PR 17438 (https://github.com/openshift/openshift-docs/pull/17438). 
Waiting for SME review and also QE review. 
Updating to ON_QA.

Comment 6 Liang Xia 2019-10-18 02:07:02 UTC
The doc looks good.

Comment 7 Bob Furu 2019-10-22 15:49:17 UTC
--> Waiting for SME review

Comment 8 Bob Furu 2019-10-25 16:38:34 UTC
BZ 1762299 is a clone of this bug. Confirming with reporter that content updates are the same for both bugs, and that once approved, this will be merged, CP to 4.1 and 4.2 only (not 4.3).

Comment 10 Bob Furu 2019-10-29 21:21:52 UTC
SME reviewed and approved. Out for peer review.

Comment 11 Daniel Del Ciancio 2019-10-29 21:36:19 UTC
Hi Bob - feedback provided in PR 17438 (https://github.com/openshift/openshift-docs/pull/17438).
Looks good for the most part, just a small precision suggested to denote that in the example provided, the snapshot-controller is deployed in "default" namespace.  Namespace references should be specific to the appropriate namespace where deployed to.

Comment 12 Bob Furu 2019-10-29 21:39:19 UTC
Thanks, Daniel. I've added annotations for "default" namespace as described in this comment: https://github.com/openshift/openshift-docs/pull/17438#issuecomment-547633291.

Comment 13 Daniel Del Ciancio 2019-10-30 00:58:34 UTC
PR 17438 approved.

Comment 14 Bob Furu 2019-10-30 15:37:54 UTC
Peer reviewed and merged and CP to 4.1, 4.2, 4.3. Waiting to verify on prod.

Comment 15 Bob Furu 2019-10-30 15:46:29 UTC
*** Bug 1762299 has been marked as a duplicate of this bug. ***

Comment 16 Bob Furu 2019-10-30 17:44:29 UTC
Verified on docs.openshift.com. Closing bug.

Comment 20 Bob Furu 2019-11-01 14:18:59 UTC
QE re-verified, waiting for SME (Daniel) approval before closing.

Comment 22 Daniel Del Ciancio 2019-11-07 13:52:57 UTC
(In reply to Bob Furu from comment #21)
> SME approved and merged, CP to 4.1, 4.2, 4.3 on docs.openshift.com and
> portal.
> 
> 4.2
> https://docs.openshift.com/container-platform/4.2/storage/persistent-storage/
> persistent-storage-snapshots.html#persistent-storage-snapshots-
> restore_persistent-storage-snapshots
> https://access.redhat.com/documentation/en-us/openshift_container_platform/4.
> 2/html-single/storage/index
> 
> 4.1
> https://docs.openshift.com/container-platform/4.1/storage/persistent-storage/
> persistent-storage-snapshots.html#persistent-storage-snapshots-
> restore_persistent-storage-snapshots
> https://access.redhat.com/documentation/en-us/openshift_container_platform/4.
> 1/html-single/storage/index
> 
> Will publish in 4.3 docs upon release. Closing bug.

PR (https://github.com/openshift/openshift-docs/pull/17784) reviewed and approved.