CAPO should quickly validate user provided AZs and return a clear failure message if they are not valid.
Checked with 4.7.0-0.nightly-2021-01-04-215816, and the validation work well, so move to verified. $ oc get machine -A -o wide NAMESPACE NAME PHASE TYPE REGION ZONE AGE NODE PROVIDERID STATE openshift-machine-api wj47ios105z2-vtdqt-addit-0-q7h7x Failed 7m32s Unknown openshift-machine-api wj47ios105z2-vtdqt-master-0 Running m1.xlarge regionOne nova 96m wj47ios105z2-vtdqt-master-0 ACTIVE openshift-machine-api wj47ios105z2-vtdqt-master-1 Running m1.xlarge regionOne nova 96m wj47ios105z2-vtdqt-master-1 ACTIVE openshift-machine-api wj47ios105z2-vtdqt-master-2 Running m1.xlarge regionOne nova 96m wj47ios105z2-vtdqt-master-2 ACTIVE openshift-machine-api wj47ios105z2-vtdqt-worker-0-gq7st Running m1.large regionOne nova 93m wj47ios105z2-vtdqt-worker-0-gq7st ACTIVE openshift-machine-api wj47ios105z2-vtdqt-worker-0-sbfxw Running m1.large regionOne nova 93m wj47ios105z2-vtdqt-worker-0-sbfxw ACTIVE openshift-machine-api wj47ios105z2-vtdqt-worker-0-tpxtg Running m1.large regionOne nova 93m wj47ios105z2-vtdqt-worker-0-tpxtg ACTIVE $ oc -n openshift-machine-api logs machine-api-controllers-6b4665cb5c-fdxzm -c machine-controller ...... I0105 07:58:46.969491 1 controller.go:426] wj47ios105z2-vtdqt-addit-0-q7h7x: going into phase "Provisioning" I0105 07:58:46.984189 1 controller.go:315] wj47ios105z2-vtdqt-addit-0-q7h7x: reconciling machine triggers idempotent create I0105 07:58:46.996475 1 utils.go:99] Cloud provider CA cert not provided, using system trust bundle I0105 07:58:47.019351 1 utils.go:99] Cloud provider CA cert not provided, using system trust bundle E0105 07:58:47.583628 1 actuator.go:574] Machine error wj47ios105z2-vtdqt-addit-0-q7h7x: Machine validation failed: could not find compute availability zone: aoeuoaeu W0105 07:58:47.583656 1 controller.go:317] wj47ios105z2-vtdqt-addit-0-q7h7x: failed to create machine: Machine validation failed: could not find compute availability zone: aoeuoaeu I0105 07:58:47.583692 1 controller.go:417] Actuator returned invalid configuration error: Machine validation failed: could not find compute availability zone: aoeuoaeu I0105 07:58:47.583697 1 controller.go:426] wj47ios105z2-vtdqt-addit-0-q7h7x: going into phase "Failed" I0105 07:58:47.613256 1 controller.go:171] wj47ios105z2-vtdqt-addit-0-q7h7x: reconciling Machine I0105 07:58:47.619869 1 utils.go:99] Cloud provider CA cert not provided, using system trust bundle I0105 07:58:47.768850 1 controller.go:315] wj47ios105z2-vtdqt-addit-0-q7h7x: reconciling machine triggers idempotent create I0105 07:58:47.779946 1 utils.go:99] Cloud provider CA cert not provided, using system trust bundle I0105 07:58:47.807709 1 utils.go:99] Cloud provider CA cert not provided, using system trust bundle W0105 07:58:48.387086 1 controller.go:317] wj47ios105z2-vtdqt-addit-0-q7h7x: failed to create machine: unable to update machine status: Operation cannot be fulfilled on machines.machine.openshift.io "wj47ios105z2-vtdqt-addit-0-q7h7x": the object has been modified; p lease apply your changes to the latest version and try again E0105 07:58:48.387149 1 controller.go:237] controller "msg"="Reconciler error" "error"="unable to update machine status: Operation cannot be fulfilled on machines.machine.openshift.io \"wj47ios105z2-vtdqt-addit-0-q7h7x\": the object has been modified; please apply y our changes to the latest version and try again" "controller"="machine_controller" "name"="wj47ios105z2-vtdqt-addit-0-q7h7x" "namespace"="openshift-machine-api" I0105 07:58:49.387357 1 controller.go:171] wj47ios105z2-vtdqt-addit-0-q7h7x: reconciling Machine W0105 07:58:49.387484 1 controller.go:268] wj47ios105z2-vtdqt-addit-0-q7h7x: machine has gone "Failed" phase. It won't reconcile
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.7.0 security, bug fix, and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2020:5633