Bug 2228414 - Missing service_user for nova_compute causes nova hybrid state to fail
Summary: Missing service_user for nova_compute causes nova hybrid state to fail
Keywords:
Status: POST
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 16.2 (Train)
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: z6
: 16.2 (Train on RHEL 8.4)
Assignee: Lukas Bezdicka
QA Contact: Khomesh Thakre
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-08-02 10:55 UTC by Lukas Bezdicka
Modified: 2023-08-09 11:06 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Cause: Security fix #2186892 introduced requirement of service_user for nova and cinder services. Consequence: Hybrid mode in upgrade does not change configuration by default but change to require service_user causes nova in hybrid state to be unable to work with cinder. Fix: We configure the service_user for nova during the switch to hybrid state. Result:
Clone Of:
Environment:
Last Closed:
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 890324 0 None MERGED [ffwd2] Set service_user for nova on hybrid state 2023-08-09 11:51:49 UTC
Red Hat Bugzilla 2186892 1 None None None 2023-08-02 11:44:02 UTC
Red Hat Issue Tracker OSP-27179 0 None None None 2023-08-03 13:59:11 UTC

Description Lukas Bezdicka 2023-08-02 10:55:17 UTC 
During investigation of OSP-26886 we noticed that fix for #2186892 introduced breaking change for upgrade.


From now on nova_compute needs to use service_user but that is not set up during the controller upgrade. This blocks volume operations on the cloud breaking the upgrade.

We need to provide nova service_user setting during switch to the hybrid mode of nova_compute.
Comment 4 Lukas Bezdicka 2023-08-09 11:06:43 UTC 
I concluded that best WA for this for now is to simply apply the patch on Undercloud before running upgrade prepare.

curl -4 https://review.opendev.org/changes/openstack%2Ftripleo-heat-templates~890324/revisions/3/patch?download | base64 -d | sudo patch -p1 -d /usr/share/openstack-tripleo-heat-templates
Note You need to log in before you can comment on or make changes to this bug.