Bug 2005086 - Unable to disable gateway validation on deployment
Summary: Unable to disable gateway validation on deployment
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 16.2 (Train)
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: OSP Team
QA Contact: David Rosenfeld
URL:
Whiteboard:
: 2008100 (view as bug list)
Depends On:
Blocks: 2005091
TreeView+ depends on / blocked
 
Reported: 2021-09-16 18:03 UTC by Alex Schultz
Modified: 2022-05-20 13:21 UTC (History)
3 users (show)

Fixed In Version: openstack-tripleo-heat-templates-11.6.1-2.20210922004813.938370e.el8ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 2005091 (view as bug list)
Environment:
Last Closed: 2022-03-23 22:29:32 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1898724 0 None None None 2021-09-16 18:03:25 UTC
OpenStack gerrit 809379 0 None NEW Fix ansible var 2021-09-16 18:03:25 UTC
Red Hat Issue Tracker OSP-9715 0 None None None 2021-11-15 12:48:57 UTC
Red Hat Knowledge Base (Solution) 6959429 0 None None None 2022-05-20 13:21:36 UTC
Red Hat Product Errata RHSA-2022:0995 0 None None None 2022-03-23 22:30:03 UTC

Description Alex Schultz 2021-09-16 18:03:25 UTC
Description of problem:
ValidateGatewaysIcmp: False doesn't work because the ansible variable it maps to is incorrect for the role.

Version-Release number of selected component (if applicable):
openstack-tripleo-heat-templates-11.5.1-2.20210603174823.el8ost.9.noarch

How reproducible:


Steps to Reproduce:
1. Deploy with default gateway that is unavailable
2. Attempt to disable the check with ValidateGatewaysIcmp: False
3.

Actual results:
Deployment will fail in the tripleo_node_valiadtion role

2021-09-16 13:10:01.139075 | fa163e35-3c83-bd89-fd69-00000000115a |       TASK | Check Default IPv4 Gateway availability
2021-09-16 13:10:04.260888 | fa163e35-3c83-bd89-fd69-00000000115a |      FATAL | Check Default IPv4 Gateway availability | overcloud-controller-1 | error={"changed": false, "cmd": ["ping", "-w", "10", "-c", "1", "192.168.24.1"], "delta": "0:00:03.110230", "end": "2021-09-16 13:10:03.221896", "msg": "non-zero return code", "rc": 1, "start": "2021-09-16 13:10:00.111666", "stderr": "", "stderr_lines": [], "stdout": "PING 192.168.24.1 (192.168.24.1) 56(84) bytes of data.\nFrom 192.168.24.80 icmp_seq=1 Destination Host Unreachable\nFrom 192.168.24.80 icmp_seq=2 Destination Host Unreachable\nFrom 192.168.24.80 icmp_seq=3 Destination Host Unreachable\n\n--- 192.168.24.1 ping statistics ---\n3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2081ms\npipe 3", "stdout_lines": ["PING 192.168.24.1 (192.168.24.1) 56(84) bytes of data.", "From 192.168.24.80 icmp_seq=1 Destination Host Unreachable", "From 192.168.24.80 icmp_seq=2 Destination Host Unreachable", "From 192.168.24.80 icmp_seq=3 Destination Host Unreachable", "", "--- 192.168.24.1 ping statistics ---", "3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2081ms", "pipe 3"]}
2021-09-16 13:10:04.262705 | fa163e35-3c83-bd89-fd69-00000000115a |     TIMING | tripleo_nodes_validation : Check Default IPv4 Gateway availability | overcloud-controller-1 | 0:01:04.533632 | 3.41s
2021-09-16 13:10:04.484673 | fa163e35-3c83-bd89-fd69-00000000115a |      FATAL | Check Default IPv4 Gateway availability | overcloud-controller-0 | error={"changed": false, "cmd": ["ping", "-w", "10", "-c", "1", "192.168.24.1"], "delta": "0:00:03.109112", "end": "2021-09-16 13:10:03.415206", "msg": "non-zero return code", "rc": 1, "start": "2021-09-16 13:10:00.306094", "stderr": "", "stderr_lines": [], "stdout": "PING 192.168.24.1 (192.168.24.1) 56(84) bytes of data.\nFrom 192.168.24.38 icmp_seq=1 Destination Host Unreachable\nFrom 192.168.24.38 icmp_seq=2 Destination Host Unreachable\nFrom 192.168.24.38 icmp_seq=3 Destination Host Unreachable\n\n--- 192.168.24.1 ping statistics ---\n3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2077ms\npipe 3", "stdout_lines": ["PING 192.168.24.1 (192.168.24.1) 56(84) bytes of data.", "From 192.168.24.38 icmp_seq=1 Destination Host Unreachable", "From 192.168.24.38 icmp_seq=2 Destination Host Unreachable", "From 192.168.24.38 icmp_seq=3 Destination Host Unreachable", "", "--- 192.168.24.1 ping statistics ---", "3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2077ms", "pipe 3"]}
2021-09-16 13:10:04.485914 | fa163e35-3c83-bd89-fd69-00000000115a |     TIMING | tripleo_nodes_validation : Check Default IPv4 Gateway availability | overcloud-controller-0 | 0:01:04.756857 | 3.50s
2021-09-16 13:10:04.550175 | fa163e35-3c83-bd89-fd69-00000000115a |      FATAL | Check Default IPv4 Gateway availability | overcloud-controller-2 | error={"changed": false, "cmd": ["ping", "-w", "10", "-c", "1", "192.168.24.1"], "delta": "0:00:03.061904", "end": "2021-09-16 13:10:03.795394", "msg": "non-zero return code", "rc": 1, "start": "2021-09-16 13:10:00.733490", "stderr": "", "stderr_lines": [], "stdout": "PING 192.168.24.1 (192.168.24.1) 56(84) bytes of data.\nFrom 192.168.24.78 icmp_seq=1 Destination Host Unreachable\nFrom 192.168.24.78 icmp_seq=2 Destination Host Unreachable\nFrom 192.168.24.78 icmp_seq=3 Destination Host Unreachable\n\n--- 192.168.24.1 ping statistics ---\n3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2030ms\npipe 3", "stdout_lines": ["PING 192.168.24.1 (192.168.24.1) 56(84) bytes of data.", "From 192.168.24.78 icmp_seq=1 Destination Host Unreachable", "From 192.168.24.78 icmp_seq=2 Destination Host Unreachable", "From 192.168.24.78 icmp_seq=3 Destination Host Unreachable", "", "--- 192.168.24.1 ping statistics ---", "3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2030ms", "pipe 3"]}
2021-09-16 13:10:04.551453 | fa163e35-3c83-bd89-fd69-00000000115a |     TIMING | tripleo_nodes_validation : Check Default IPv4 Gateway availability | overcloud-controller-2 | 0:01:04.822390 | 3.49s
2021-09-16 13:10:04.665212 | fa163e35-3c83-bd89-fd69-00000000115a |      FATAL | Check Default IPv4 Gateway availability | overcloud-novacompute-0 | error={"changed": false, "cmd": ["ping", "-w", "10", "-c", "1", "192.168.24.1"], "delta": "0:00:03.107185", "end": "2021-09-16 13:10:03.389430", "msg": "non-zero return code", "rc": 1, "start": "2021-09-16 13:10:00.282245", "stderr": "", "stderr_lines": [], "stdout": "PING 192.168.24.1 (192.168.24.1) 56(84) bytes of data.\nFrom 192.168.24.99 icmp_seq=1 Destination Host Unreachable\nFrom 192.168.24.99 icmp_seq=2 Destination Host Unreachable\nFrom 192.168.24.99 icmp_seq=3 Destination Host Unreachable\n\n--- 192.168.24.1 ping statistics ---\n3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2076ms\npipe 3", "stdout_lines": ["PING 192.168.24.1 (192.168.24.1) 56(84) bytes of data.", "From 192.168.24.99 icmp_seq=1 Destination Host Unreachable", "From 192.168.24.99 icmp_seq=2 Destination Host Unreachable", "From 192.168.24.99 icmp_seq=3 Destination Host Unreachable", "", "--- 192.168.24.1 ping statistics ---", "3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2076ms", "pipe 3"]}
2021-09-16 13:10:04.666574 | fa163e35-3c83-bd89-fd69-00000000115a |     TIMING | tripleo_nodes_validation : Check Default IPv4 Gateway availability | overcloud-novacompute-0 | 0:01:04.937518 | 3.53s


Expected results:
This check should not be run

Workaround:

You can use <role>ExtraGroupVars to specify the correct ansible var.

Example:
parameter_defaults:
   ControllerExtraGroupVars:
       tripleo_nodes_validation_validate_gateway_icmp: false
   ComputeExtraGroupVars:
       tripleo_nodes_validation_validate_gateway_icmp: false

Comment 1 Alex Schultz 2021-10-25 14:36:55 UTC
*** Bug 2008100 has been marked as a duplicate of this bug. ***

Comment 13 errata-xmlrpc 2022-03-23 22:29:32 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: Red Hat OpenStack Platform 16.2 (openstack-tripleo-heat-templates) security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:0995


Note You need to log in before you can comment on or make changes to this bug.