tripleo

IPSEC deployment makes corosync loose quorum

Bug #1743693 reported by Juan Antonio Osorio Robles
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
High
Juan Antonio Osorio Robles
tripleo queens-3

Bug Description

Enabling the IPSEC feature is flaky. When doing so, there are times where the corosync cluster looses quorum, so one of the nodes will come offline.

Juan Antonio Osorio Robles (juan-osorio-robles)
Changed in tripleo:
status: New → Triaged
importance: Undecided → High
assignee: nobody → Juan Antonio Osorio Robles (juan-osorio-robles)
milestone: none → queens-3
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-ipsec (master)

Fix proposed to branch: master
Review: https://review.openstack.org/534694

Changed in tripleo:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-ipsec (master)

Reviewed: https://review.openstack.org/534694
Committed: https://git.openstack.org/cgit/openstack/tripleo-ipsec/commit/?id=0b10ce8e4575347b8c09482740e79eda6bcb2708
Submitter: Zuul
Branch: master

commit 0b10ce8e4575347b8c09482740e79eda6bcb2708
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Wed Jan 17 08:16:06 2018 +0000

    Dont insist on IKEv2

    For some reason, using IKEv2 causes issues with tunnels
    that are on the same network going to different hosts.

    This commit leaves then the usage of IKEv2 only for
    opportunistic IPSEC configurations.

    Closes-Bug: #1743693
    Change-Id: Ic1b1dfa86fd9fb328a197211b114cd39ee12da3f

Changed in tripleo:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.