Bug 1898743
| Summary: | validations for dns and tls-everywhere-pre-deployment failing even when they're not used in the deployment | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | David Hill <dhill> |
| Component: | documentation | Assignee: | Roger Heslop <rheslop> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | RHOS Documentation Team <rhos-docs> |
| Severity: | low | Docs Contact: | |
| Priority: | medium | ||
| Version: | 16.1 (Train) | CC: | alee, amcleod, cjeanner, dpeacock, dwilde, gchamoul, gfidente, jjoyce, johfulto, jschluet, jslagle, rheslop, slinaber, tvignaud |
| Target Milestone: | z8 | Keywords: | Reopened, Triaged |
| Target Release: | 16.1 (Train on RHEL 8.2) | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-04-19 18:56:07 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
David Hill
2020-11-18 00:58:20 UTC
*** This bug has been marked as a duplicate of bug 1889159 *** The bug was opened because the following validations are failing: tls-everywhere-pre-deployment dns ceph-pg The ceph-pg validation issue is addressed by bz 1889159. However, I'm re-opening this for the first two failing validations tls-everywhere-pre-deployment and dns. DFG:DF will need to comment on those. This BZ was a copy of another one, in order to not get 3 errors in the same BZ. TLS-E is for Security, and the DNS for... errr.. no idea - but I had a look in it already. Regarding "running validation based on active services": how are we supposed to know what services are active or not? Would love doing a smart filtering, but maybe the ceph related validations could find on their own and gracefully exit if no ceph is configured? Cheers, C. After discussion with the Validations folks, it was determined to change this to a documentation bug. The main problem is that it is impossible to tell what the intent of the deployer is. For example, when the deployer is trying to run a pre-deploy validation, we have no idea whether the deployer plans to deploy with tls-everywhere or not. If they do not, then tests to check if the undercloud is an ipa client and has the right credentials will fail. If they do, then they need to run the tests to make sure everything is set correctly and fail if it is not. Fortunately, there is the ability for the deployer to select tests to be skipped - either on the command line or in a config file. The deployer should understand what tests they are running and choose which tests to skip. This applies not just to tls-e tests but to other optional deployment options too. So, there is no code fix here - but rather a task to look at the documentation and make sure things are clearly explained. Additional text has been added for clarification: https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html-single/director_installation_and_usage/index#assembly_using-the-validation-framework https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html-single/director_installation_and_usage/index#running-validations If this does not resolve the issue, please reopen the BZ |