Update cert-manager image tags to support upgrade

Bug #2063372 reported by ayyappa
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Fix Released
Low
ayyappa

Bug Description

Brief Description
-----------------
Upgrade fails from stx9 to stx10 due to cert-manager image issue

The error happened on the ansible playbook - upgrade_platform.yml

Severity
--------
Critical

Steps to Reproduce
------------------
Upgrade the SX deployment from stx9 to stx10.

Expected Behavior
------------------
The upgrade has been done successfully

Actual Behavior
----------------
stderr: |-
Error from server (InternalError): Internal error occurred: failed calling webhook "webhook.cert-manager.io": Post "[https://cm-cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s|https://cm-cert-manager-webhook.cert-manager.svc/mutate?timeout=10s]": dial tcp [fd04::82f9]:443: connect: connection refused
Error from server (InternalError): Internal error occurred: failed calling webhook "webhook.cert-manager.io": Post "[https://cm-cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s|https://cm-cert-manager-webhook.cert-manager.svc/mutate?timeout=10s]": dial tcp [fd04::82f9]:443: connect: connection refused
stderr_lines: <omitted>
stdout: secret/system-local-ca unchanged
stdout_lines: <omitted>

Reproducibility
---------------
Reproducible 100%

System Configuration
--------------------
AIO-SX

Branch/Pull Time/Commit
-----------------------
master

Last Pass
---------
N/A

Timestamp/Logs
--------------
stderr: |-
Error from server (InternalError): Internal error occurred: failed calling webhook "webhook.cert-manager.io": Post "[https://cm-cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s|https://cm-cert-manager-webhook.cert-manager.svc/mutate?timeout=10s]": dial tcp [fd04::82f9]:443: connect: connection refused
Error from server (InternalError): Internal error occurred: failed calling webhook "webhook.cert-manager.io": Post "[https://cm-cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s|https://cm-cert-manager-webhook.cert-manager.svc/mutate?timeout=10s]": dial tcp [fd04::82f9]:443: connect: connection refused
stderr_lines: <omitted>
stdout: secret/system-local-ca unchanged
stdout_lines: <omitted>

Test Activity
-------------
Feature Testing

Workaround
----------
After stx10 ISO is installed, edit system-images.yml file for 1.24.4 k8s version and set v1.11.5 on cert-manager images prior to running the upgrade playbook

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to ansible-playbooks (master)
Changed in starlingx:
status: New → In Progress
ayyappa (mantri425)
description: updated
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to ansible-playbooks (master)

Reviewed: https://review.opendev.org/c/starlingx/ansible-playbooks/+/916948
Committed: https://opendev.org/starlingx/ansible-playbooks/commit/6bcbd05fcfc27155c62dcbfe451ebff5cb85df59
Submitter: "Zuul (22348)"
Branch: master

commit 6bcbd05fcfc27155c62dcbfe451ebff5cb85df59
Author: amantri <email address hidden>
Date: Wed Apr 24 16:22:01 2024 -0400

    Update cert-manager image tags for upgrade

    Add cert-manager images from v1.7.1 to v1.11.5 to support upgrade
    from stx9.0 to stx10.0

    Test Cases:
    PASS: Perform an upgrade from stx9.0 to stx10.0 and after
          running upgrade playbook verify that cert-manager app
          is successfully running, perform upgrade activate
          and notice that app is upgraded.

    Closes-Bug: 2063372

    Change-Id: I30fc44bb3e76375c0590233708a8cc23b6e1141c
    Signed-off-by: amantri <email address hidden>

Changed in starlingx:
status: In Progress → Fix Released
Ghada Khalil (gkhalil)
Changed in starlingx:
importance: Undecided → Low
tags: added: stx.10.0 stx.apps stx.update
Changed in starlingx:
assignee: nobody → ayyappa (mantri425)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to ansible-playbooks (master)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to ansible-playbooks (master)

Reviewed: https://review.opendev.org/c/starlingx/ansible-playbooks/+/919615
Committed: https://opendev.org/starlingx/ansible-playbooks/commit/6744fadd62d9fe2f00ad01ab7b4bc945d0a9e572
Submitter: "Zuul (22348)"
Branch: master

commit 6744fadd62d9fe2f00ad01ab7b4bc945d0a9e572
Author: amantri <email address hidden>
Date: Tue May 14 15:07:17 2024 -0400

    Add cert-manager image tags v1.7.1 for upgrade

    Add cert-manager images v1.7.1 to support upgrade
    from stx9.0 to stx10.0

    Test Cases:
    PASS: Perform an upgrade from stx9.0 to stx10.0 and after
          running upgrade playbook verify that cert-manager app
          is successfully running, perform upgrade activate
          and notice that app is upgraded.

    Closes-Bug: 2063372

    Change-Id: I68c534420857b4dc718760f45b987e07056a07f3
    Signed-off-by: amantri <email address hidden>

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.