Bug 2228414 - Missing service_user for nova_compute causes nova hybrid state to fail
Summary: Missing service_user for nova_compute causes nova hybrid state to fail
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 16.2 (Train)
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: async
: 16.2 (Train on RHEL 8.4)
Assignee: Lukas Bezdicka
QA Contact: Khomesh Thakre
URL:
Whiteboard:
: 2244768 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-08-02 10:55 UTC by Lukas Bezdicka
Modified: 2023-12-05 13:53 UTC (History)
7 users (show)

Fixed In Version: openstack-tripleo-heat-templates-11.6.1-2.20230320130753.el8ost
Doc Type: If docs needed, set a value
Doc Text:
Cause: Security fix #2186892 introduced requirement of service_user for nova and cinder services. Consequence: Hybrid mode in upgrade does not change configuration by default but change to require service_user causes nova in hybrid state to be unable to work with cinder. Fix: We configure the service_user for nova during the switch to hybrid state. Result:
Clone Of:
Environment:
Last Closed: 2023-09-14 08:41:29 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 890324 0 None MERGED [ffwd2] Set service_user for nova on hybrid state 2023-08-09 11:51:49 UTC
Red Hat Bugzilla 2186892 1 None None None 2023-08-02 11:44:02 UTC
Red Hat Issue Tracker OSP-27179 0 None None None 2023-08-03 13:59:11 UTC
Red Hat Product Errata RHBA-2023:5163 0 None None None 2023-09-14 08:41:30 UTC

Description Lukas Bezdicka 2023-08-02 10:55:17 UTC 
During investigation of OSP-26886 we noticed that fix for #2186892 introduced breaking change for upgrade.


From now on nova_compute needs to use service_user but that is not set up during the controller upgrade. This blocks volume operations on the cloud breaking the upgrade.

We need to provide nova service_user setting during switch to the hybrid mode of nova_compute.
Comment 4 Lukas Bezdicka 2023-08-09 11:06:43 UTC 
I concluded that best WA for this for now is to simply apply the patch on Undercloud before running upgrade prepare.

curl -4 https://review.opendev.org/changes/openstack%2Ftripleo-heat-templates~890324/revisions/3/patch?download | base64 -d | sudo patch -p1 -d /usr/share/openstack-tripleo-heat-templates
Comment 10 Lukas Bezdicka 2023-09-06 11:25:05 UTC 
FAILED QA investigating
Comment 11 Lukas Bezdicka 2023-09-07 07:45:13 UTC 
We verified that it does set service token and nova compute sends service token. Failure in CI is some new issue that needs new BZ.
Comment 18 errata-xmlrpc 2023-09-14 08:41:29 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Red Hat OpenStack Platform 16.2-async bug fix and enhancement advisory), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:5163
Comment 20 Lukas Bezdicka 2023-12-05 13:53:13 UTC 
*** Bug 2244768 has been marked as a duplicate of this bug. ***
Note You need to log in before you can comment on or make changes to this bug.