Bug 2012206 - Unable to path a cluster with disk encryption: upstream connect error or disconnect/reset before headers. reset reason: connection termination
Summary: Unable to path a cluster with disk encryption: upstream connect error or dis...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: assisted-installer
Version: 4.9
Hardware: Unspecified
OS: Unspecified
unspecified
urgent
Target Milestone: ---
: ---
Assignee: Yoni Bettan
QA Contact: Alexander Chuzhoy
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-10-08 14:50 UTC by Alexander Chuzhoy
Modified: 2022-08-28 08:45 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-08-28 08:45:59 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Alexander Chuzhoy 2021-10-08 14:50:37 UTC
Stage env
Assisted-ui-lib version:  1.5.37


Every time I try to patch a cluster with disk encryption[1], the following error is shown:
upstream connect error or disconnect/reset before headers. reset reason: connection termination


[1]
-X PATCH -d '{"disk_encryption": {"enable_on":"all","mode":"tpmv2"} }'

Comment 2 Alexander Chuzhoy 2021-11-01 15:46:28 UTC
The issue still reproduces in asisted-ui-lib version 1.5.41

Comment 3 Yoni Bettan 2021-11-01 16:33:34 UTC
Is it working on integration?

Is the fix reached stage yet @odepaz

Comment 4 Osher De Paz 2021-11-01 19:46:35 UTC
I don't think so

Comment 5 Yoni Bettan 2021-11-02 09:11:22 UTC
It is working on integration.
Just checked and the fix hasn't reached stage yet.
The fix will be included in release v1.0.27

Comment 9 Alexander Chuzhoy 2021-11-12 19:29:27 UTC
Verified.

Version: Assisted-ui-lib version:  1.5.42


The reported issue doesn't reproduce and patching the cluster works:


curl -X PATCH -d '{"disk_encryption": {"enable_on":"all","mode":"tpmv2"} }'   -H "Authorization: Bearer $TOKEN"  "https://<URL>/api/assisted-install/v2/clusters/ab9b758c-5e86-4a7d-a627-b999bb2da476" -H 'accept: application/json' -H 'Content-Type: application/json' 
{"ams_subscription_id":"20pbJpa0cvft0ajDWc43KxHA2xH","base_dns_domain":"test.com","cluster_network_cidr":"10.128.0.0/14","cluster_network_host_prefix":23,"cluster_networks":[{"cidr":"10.128.0.0/14","cluster_id":"ab9b758c-5e86-4a7d-a627-b999bb2da476","host_prefix":23}],"connectivity_majority_groups":"{\"IPv4\":[],\"IPv6\":[]}","controller_logs_collected_at":"0001-01-01T00:00:00.000Z","controller_logs_started_at":"0001-01-01T00:00:00.000Z","cpu_architecture":"x86_64","created_at":"2021-11-12T19:13:26.625Z","disk_encryption":{"enable_on":"all","mode":"tpmv2"},"email_domain":"redhat.com","feature_usage":"{\"VIP auto alloc.\":{\"id\":\"VIP_AUTO_ALLOC\",\"name\":\"VIP auto alloc.\"}}","high_availability_mode":"Full","host_networks":[],"hosts":[],"href":"/api/assisted-install/v1/clusters/ab9b758c-5e86-4a7d-a627-b999bb2da476","hyperthreading":"all","id":"ab9b758c-5e86-4a7d-a627-b999bb2da476","image_info":{"created_at":"0001-01-01T00:00:00.000Z","expires_at":"0001-01-01T00:00:00.000Z"},"install_completed_at":"2000-01-01T00:00:00.000Z","install_started_at":"2000-01-01T00:00:00.000Z","kind":"Cluster","machine_networks":[],"monitored_operators":[{"cluster_id":"ab9b758c-5e86-4a7d-a627-b999bb2da476","name":"console","operator_type":"builtin","status_updated_at":"0001-01-01T00:00:00.000Z","timeout_seconds":3600},{"cluster_id":"ab9b758c-5e86-4a7d-a627-b999bb2da476","name":"cvo","operator_type":"builtin","status_updated_at":"0001-01-01T00:00:00.000Z","timeout_seconds":3600}],"name":"test1","ocp_release_image":"quay.io/openshift-release-dev/ocp-release:4.9.4-x86_64","openshift_version":"4.9.4","org_id":"13539309","platform":{"type":"baremetal","vsphere":{}},"progress":{},"pull_secret_set":true,"schedulable_masters":false,"service_network_cidr":"172.30.0.0/16","service_networks":[{"cidr":"172.30.0.0/16","cluster_id":"ab9b758c-5e86-4a7d-a627-b999bb2da476"}],"status":"pending-for-input","status_info":"User input required","status_updated_at":"2021-11-12T19:13:28.070Z","updated_at":"2021-11-12T19:25:43.683Z","user_managed_networking":false,"user_name":"nshidlin-aiqe1","validations_info":"{\"configuration\":[{\"id\":\"pull-secret-set\",\"status\":\"success\",\"message\":\"The pull secret is set.\"}],\"hosts-data\":[{\"id\":\"all-hosts-are-ready-to-install\",\"status\":\"success\",\"message\":\"All hosts in the cluster are ready to install.\"},{\"id\":\"sufficient-masters-count\",\"status\":\"failure\",\"message\":\"Clusters must have exactly 3 dedicated masters and if workers are added, there should be at least 2 workers. Please check your configuration and add or remove hosts as to meet the above requirement.\"}],\"network\":[{\"id\":\"api-vip-defined\",\"status\":\"pending\",\"message\":\"The Machine Network CIDR is undefined\"},{\"id\":\"api-vip-valid\",\"status\":\"pending\",\"message\":\"The API virtual IP is undefined.\"},{\"id\":\"cluster-cidr-defined\",\"status\":\"success\",\"message\":\"The Cluster Network CIDR is defined.\"},{\"id\":\"dns-domain-defined\",\"status\":\"success\",\"message\":\"The base domain is defined.\"},{\"id\":\"ingress-vip-defined\",\"status\":\"pending\",\"message\":\"The Machine Network CIDR is undefined\"},{\"id\":\"ingress-vip-valid\",\"status\":\"pending\",\"message\":\"The Ingress virtual IP is undefined.\"},{\"id\":\"machine-cidr-defined\",\"status\":\"pending\",\"message\":\"Hosts have not been discovered yet\"},{\"id\":\"machine-cidr-equals-to-calculated-cidr\",\"status\":\"pending\",\"message\":\"The Machine Network CIDR, API virtual IP, or Ingress virtual IP is undefined.\"},{\"id\":\"network-prefix-valid\",\"status\":\"success\",\"message\":\"The Cluster Network prefix is valid.\"},{\"id\":\"network-type-valid\",\"status\":\"success\",\"message\":\"The cluster has a valid network type\"},{\"id\":\"no-cidrs-overlapping\",\"status\":\"pending\",\"message\":\"At least one of the CIDRs (Machine Network, Cluster Network, Service Network) is undefined.\"},{\"id\":\"ntp-server-configured\",\"status\":\"success\",\"message\":\"No ntp problems found\"},{\"id\":\"service-cidr-defined\",\"status\":\"success\",\"message\":\"The Service Network CIDR is defined.\"}],\"operators\":[{\"id\":\"cnv-requirements-satisfied\",\"status\":\"success\",\"message\":\"cnv is disabled\"},{\"id\":\"lso-requirements-satisfied\",\"status\":\"success\",\"message\":\"lso is disabled\"},{\"id\":\"ocs-requirements-satisfied\",\"status\":\"success\",\"message\":\"ocs is disabled\"}]}","vip_dhcp_allocation":true}


Note You need to log in before you can comment on or make changes to this bug.