+++ This bug was initially created as a clone of Bug #1915998 +++ The installer attaches the Control Plane's additional subnets to the bootstrap node, but not the Control Plane's additional security groups. We should set both on the bootstrap node, and update the documentation to match.
Verified with version "4.6.0-0.nightly-2021-02-13-034601" setting "additionalNetworkIDs" and "additionalSecurityGroupIDs" parameters for the nodes, installation went successful and bootstrap uses now the same network context and securitygroups than master nodes as expected: ~~~ 02-17 13:51:42 ./openshift-install 4.6.0-0.nightly-2021-02-13-034601 02-17 13:51:42 built from commit 74b1d08f7f44c9c0d3f999c669a16fb2395e9551 02-17 13:51:42 release image registry.ci.openshift.org/ocp/release@sha256:aa0d57d5cb325f33b1679dc0fa21a375a972e0fcb8efa6da0edd202ea03a759a ... [2021-02-17T12:51:37.977Z] --- [2021-02-17T12:51:37.977Z] apiVersion: v1 [2021-02-17T12:51:37.977Z] controlPlane: [2021-02-17T12:51:37.977Z] architecture: amd64 [2021-02-17T12:51:37.977Z] hyperthreading: Enabled [2021-02-17T12:51:37.977Z] name: master [2021-02-17T12:51:37.977Z] platform: [2021-02-17T12:51:37.977Z] openstack: [2021-02-17T12:51:37.977Z] additionalNetworkIDs: &1 [2021-02-17T12:51:37.977Z] - '07944628-df88-47a5-9853-26300330c403' [2021-02-17T12:51:37.977Z] additionalSecurityGroupIDs: &2 [2021-02-17T12:51:37.977Z] - 7ee009cb-0b82-440e-9782-0a9b87253330 [2021-02-17T12:51:37.977Z] replicas: 3 ~~~ ~~~ $ openstack --os-cloud osp-qe server list --name pamoedom-9f6h8 +--------------------------------------+-------------------------------+--------+----------------------------------------------------------------------------------------+----------------------------+-----------+ | ID | Name | Status | Networks | Image | Flavor | +--------------------------------------+-------------------------------+--------+----------------------------------------------------------------------------------------+----------------------------+-----------+ | eb410380-e36f-488a-86f9-63619edaf5d7 | pamoedom-9f6h8-worker-0-qdwsx | ACTIVE | pamoedom-9f6h8-openshift=192.168.3.187; pamoedom-network-test=172.16.1.184 | rhcos-46.82.202011260640-0 | m1.large | | 9c49a1a3-4956-4c41-b7c4-46879f7d9cef | pamoedom-9f6h8-worker-0-jfqtd | ACTIVE | pamoedom-9f6h8-openshift=192.168.1.167; pamoedom-network-test=172.16.1.139 | rhcos-46.82.202011260640-0 | m1.large | | b072ea98-4a0d-4e66-89c6-7800a96bebe1 | pamoedom-9f6h8-bootstrap | ACTIVE | pamoedom-9f6h8-openshift=192.168.0.12, 10.0.102.89; pamoedom-network-test=172.16.1.122 | rhcos-46.82.202011260640-0 | m1.xlarge | | 068fe20e-f538-4edd-a44c-038c002e2195 | pamoedom-9f6h8-master-1 | ACTIVE | pamoedom-9f6h8-openshift=192.168.2.154; pamoedom-network-test=172.16.1.151 | rhcos-46.82.202011260640-0 | m1.xlarge | | 87d5bfec-f9d9-49f5-893b-037384422723 | pamoedom-9f6h8-master-0 | ACTIVE | pamoedom-9f6h8-openshift=192.168.3.155; pamoedom-network-test=172.16.1.136 | rhcos-46.82.202011260640-0 | m1.xlarge | | ec7e4234-0339-430e-a705-a75eff24093b | pamoedom-9f6h8-master-2 | ACTIVE | pamoedom-9f6h8-openshift=192.168.3.47; pamoedom-network-test=172.16.1.186 | rhcos-46.82.202011260640-0 | m1.xlarge | +--------------------------------------+-------------------------------+--------+----------------------------------------------------------------------------------------+----------------------------+-----------+ $ openstack --os-cloud osp-qe server show pamoedom-9f6h8-bootstrap +-----------------------------+----------------------------------------------------------------------------------------+ | Field | Value | +-----------------------------+----------------------------------------------------------------------------------------+ | OS-DCF:diskConfig | MANUAL | | OS-EXT-AZ:availability_zone | nova | | OS-EXT-STS:power_state | Running | | OS-EXT-STS:task_state | None | | OS-EXT-STS:vm_state | active | | OS-SRV-USG:launched_at | 2021-02-17T12:53:47.000000 | | OS-SRV-USG:terminated_at | None | | accessIPv4 | | | accessIPv6 | | | addresses | pamoedom-9f6h8-openshift=192.168.0.12, 10.0.102.89; pamoedom-network-test=172.16.1.122 | | config_drive | | | created | 2021-02-17T12:53:20Z | | flavor | m1.xlarge (3f183920-6cba-4bfb-ab3a-599559cf0f97) | | hostId | baef40e600d23169b19db337100189f3fa07ebda88e8ea6c5022c486 | | id | b072ea98-4a0d-4e66-89c6-7800a96bebe1 | | image | rhcos-46.82.202011260640-0 (435163c2-09b7-4951-8a8c-59e5be2f7fdd) | | key_name | None | | name | pamoedom-9f6h8-bootstrap | | progress | 0 | | project_id | 542c6ebd48bf40fa857fc245c7572e30 | | properties | Name='pamoedom-9f6h8-bootstrap', openshiftClusterID='pamoedom-9f6h8' | | security_groups | name='default' | | | name='pamoedom-9f6h8-master' | | | name='pamoedom-sg-test' | | status | ACTIVE | | updated | 2021-02-17T12:53:47Z | | user_id | b414646065ab99780ef1bbcba52c07d2033a6f99fd0b10a3b1b12fcb5e5275e1 | | volumes_attached | | +-----------------------------+----------------------------------------------------------------------------------------+ ~~~ Regards.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.6.18 bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:0510