Bug 1823847 - [osp16] 16.1 should enforce policy during update to ensure we are in rhel8.2
Summary: [osp16] 16.1 should enforce policy during update to ensure we are in rhel8.2
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 16.1 (Train)
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: beta
: 16.1 (Train on RHEL 8.2)
Assignee: Sofer Athlan-Guyot
QA Contact: David Rosenfeld
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-04-14 15:40 UTC by Sofer Athlan-Guyot
Modified: 2024-02-26 13:48 UTC (History)
8 users (show)

Fixed In Version: tripleo-ansible-0.5.1-0.20200513233423.f321a32.el8ost openstack-tripleo-heat-templates-11.3.2-0.20200512233431.6237280.el8ost
Doc Type: No Doc Update
Doc Text:
Clone Of: 1823835
: 1928223 (view as bug list)
Environment:
Last Closed: 2020-07-29 07:51:34 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 721291 0 None MERGED Add hook to run RHOSP policies enforcement. 2021-02-08 20:02:56 UTC
OpenStack gerrit 721292 0 None MERGED tripleo_redhat_enforce new role to enforce RHOSP constraints. 2021-02-08 20:02:56 UTC
Red Hat Issue Tracker OSP-11041 0 None None None 2021-11-24 16:57:15 UTC
Red Hat Issue Tracker UPG-1395 0 None None None 2021-11-24 16:57:08 UTC
Red Hat Product Errata RHBA-2020:3148 0 None None None 2020-07-29 07:52:08 UTC

Comment 3 Sofer Athlan-Guyot 2020-04-29 09:21:59 UTC
We should add a follow up bz that will enforce repositories as well, as the patches here just enforce the rhel release.

For downstream it need a specific patch equivalent to:


sudo sed -i -e 's/tripleo_redhat_enforce_osp.*/tripleo_redhat_enforce_osp: "16.1"/' /usr/share/ansible/roles/tripleo-redhat-enforce/vars/redhat.yml
sudo sed -i -e 's/tripleo_redhat_enforce_os:.*/tripleo_redhat_enforce_os: "8.2"/' /usr/share/ansible/roles/tripleo-redhat-enforce/vars/redhat.yml

as there is no way to make the distinction upstream between 16.0 and 16.1.

Comment 8 Alex McLeod 2020-06-16 12:28:41 UTC
If this bug requires doc text for errata release, please set the 'Doc Type' and provide draft text according to the template in the 'Doc Text' field. The documentation team will review, edit, and approve the text.

If this bug does not require doc text, please set the 'requires_doc_text' flag to '-'.

Comment 9 Sofer Athlan-Guyot 2020-06-17 08:10:12 UTC
Hi,

Verified.

Tested on undercloud and overcloud with consistent results:
 - not subscribed:

TASK [tripleo-redhat-enforce : fails if not registered] ************************
Tuesday 16 June 2020  19:09:23 +0000 (0:00:01.521)       0:00:21.522 **********
fatal: [compute-0]: FAILED! => {"changed": false, "msg": "Your environment is not subscribed! If it is expected, please set SkipRhelEnforcement to true. For Director the documentation is there https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.0/html-single/ director_installation_and_usage/i
ndex#configuring-the-undercloud-with-environment-files, for the Overcloud you need to add a new parameter file to your deploy command with that parameter set. If this is unexpected, you have to subscribe this node and ensure that RHEL is pinned to 8.2 as this is the only version supported for 16.1."}

 - subscribed but not the right rhel version:


TASK [tripleo-redhat-enforce : fails if the release is not correct] ************
Tuesday 16 June 2020  19:18:26 +0000 (0:00:00.105)       0:00:21.571 **********
fatal: [compute-0]: FAILED! => {"changed": false, "msg": "OSP16.1 is only supported with Red Hat 8.2. Please make sure to pin rhel to 8.2 using: subscription-manager release --set=8.2. You can then proceed with the update."}

  - subscribed to the right rhel version and the update goes on.

No need for a specific doc message.

Comment 11 errata-xmlrpc 2020-07-29 07:51:34 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:3148


Note You need to log in before you can comment on or make changes to this bug.