Resolve kubeadm alpha Check in kube-cert-rotation Script

Bug #2045271 reported by Lucas Borges
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Fix Released
Medium
Lucas Borges

Bug Description

 -----------------
During DC sanity test, alarm 250.003 Kubernetes certificates renewal failed raised and not cleared

Severity
--------
Major

Steps to Reproduce
------------------
DC sanity test

Expected Behavior
------------------
No alarm 250.003 Kubernetes certificates renewal failed raised

Actual Behavior
----------------
alarm 250.003 Kubernetes certificates renewal failed raised

Reproducibility
---------------
This is the first time saw this issue

System Configuration
--------------------
DC

Timestamp/Logs
--------------
[2023-11-18 00:10:01,517] 349 DEBUG MainThread ssh.send :: Send 'fm --os-username 'admin' --os-password 'Li69nux*' --os-project-name admin --os-auth-url http://[fd01:306::2]:5000/v3 --os-user-domain-name Default --os-project-domain-name Default --os-endpoint-type internalURL --os-region-name b1f552ee07e74e4a9524407d0ff6f50c alarm-list --nowrap --uuid'
[2023-11-18 00:10:01,567] 551 DEBUG MainThread ssh.exec_cmd:: Expecting [.@controller-[01] .(keystone_admin)]\$ in prompt
[2023-11-18 00:10:03,613] 471 DEBUG MainThread ssh.expect :: Output:
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
UUID Alarm ID Reason Text Entity ID Severity Time Stamp

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
ba8279bf-5244-444b-afea-868a8a5f3c99 250.003 Kubernetes certificates renewal failed. host=controller-0 major 2023-11-18T00:10:01.734445
5bd64503-fbb7-4779-8547-8b2f1ca78107 250.001 controller-0 Configuration is out-of-date. (applied: 116e2c64-87da-44ae-867c-e1593735deef target: 1ef34f64-4d4c-4111-b806-aec532e0b3f0) host=controller-0 major 2023-11-18T00:08:59.290266
8a1e080c-7795-4982-a07d-b19348f71f43 200.014 The Hardware Monitor was unable to load, configure and monitor one or more hardware sensors. host=controller-0.sensor=profile minor 2023-11-17T21:51:18.769435

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

Changed in starlingx:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to config (master)

Reviewed: https://review.opendev.org/c/starlingx/config/+/901759
Committed: https://opendev.org/starlingx/config/commit/1e10f4a086aa49322994171c2bb08e5103fbfb3a
Submitter: "Zuul (22348)"
Branch: master

commit 1e10f4a086aa49322994171c2bb08e5103fbfb3a
Author: Lucas Borges <email address hidden>
Date: Thu Nov 23 10:54:43 2023 -0300

    Resolve kubeadm alpha Check in kube-cert-rotation Script

    The 'kube-cert-rotation' script evaluates the status
    of the 'kubeadm' command to determine if it is in
    alpha mode. This modification addresses an issue with
    the check, ensuring it conforms to the correct usage.
    After kubernetes v1.21 the 'kubeadm alpha' has been
    deprecated.

    TEST PLAN:

    PASS: Deploy the DC (with dc-libvirt) and verify
          that alarm 250.003 is not triggered.

    Closes-bug: 2045271
    Change-Id: I05d7aabbb3ac35b59b78e1c4f0cb070ec671b6a7
    Signed-off-by: Lucas Borges <email address hidden>

Changed in starlingx:
status: In Progress → Fix Released
Ghada Khalil (gkhalil)
Changed in starlingx:
importance: Undecided → Medium
tags: added: stx.9.0 stx.security
Changed in starlingx:
assignee: nobody → Lucas Borges (lborges)
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.