Bug 1987279 - installer fails to destroy a cluster with a tagged access-point
Summary: installer fails to destroy a cluster with a tagged access-point
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Storage
Version: 4.9
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
: 4.9.0
Assignee: Jan Safranek
QA Contact: Chao Yang
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-07-29 12:06 UTC by Jan Safranek
Modified: 2021-10-18 17:43 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-10-18 17:43:21 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift installer pull 5112 0 None open Bug 1987279: Delete AWS EFS AccessPoints with owner tags 2021-07-29 12:31:14 UTC
Red Hat Product Errata RHSA-2021:3759 0 None None None 2021-10-18 17:43:35 UTC

Description Jan Safranek 2021-07-29 12:06:20 UTC
When destroying an AWS cluster with EFS CSI driver with some dynamically provisioned PVs, the installer stops with this error and does not destroy anything:

WARNING unrecognized elastic file system resource type access-point  arn=arn:aws:elasticfilesystem:us-east-1:269733383066:access-point/fsap-0557455fcf9f618c5

The reason is that dynamic provisioning in the EFS CSI driver creates AccessPoints that are tagged as owned by the cluster, but the installer does not know how to destroy them when it lists all objects tagged with the cluster ID.

Comment 1 Jan Safranek 2021-07-29 12:34:53 UTC
Steps to reproduce:

1. Use AWS EFS CSI driver and provision few PVs from a single EFS volume.
2. Do not tag the EFS volume with the owner tag!
3. openshift-install destroy cluster

Expected result:
Destruction succeeds. AccessPoints for the provisioned PVs are deleted.

Actual result:
WARNING unrecognized elastic file system resource type access-point  arn=arn:aws:elasticfilesystem:us-east-1:269733383066:access-point/fsap-0557455fcf9f618c5

Comment 3 Chao Yang 2021-09-03 07:37:33 UTC
Passed with aws-efs-csi-driver-operator.4.9.0-202108311328

Comment 6 errata-xmlrpc 2021-10-18 17:43:21 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.9.0 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:3759


Note You need to log in before you can comment on or make changes to this bug.