Bug ID 1397145: Unable to add blade to Openshift cluster, if VELOS partition root password is expired or locked

Last Modified: Aug 01, 2024

Affected Product(s):
F5OS F5OS, F5OS-A, F5OS-C, Velos(all modules)

Known Affected Versions:
F5OS-C 1.6.0, F5OS-C 1.6.1, F5OS-C 1.6.2

Fixed In:
F5OS-A 1.7.0, F5OS-A 1.5.2

Opened: Nov 13, 2023

Severity: 3-Major

Symptoms

If a VELOS partition root password is expired or locked, the system may be unable to add the blade to the Openshift cluster (or manage the cluster). The "show cluster" command output will report that a blade is reachable ("able to ping"), but will not be able to connect to it ("able to SSH"): ABLE ABLE IN READY TO TO PARTITION INDEX NAME INSERTED CLUSTER CLUSTER PING SSH STATE LABEL -------------------------------------------------------------------------------------------------- 1 blade-1.chassis.local true false false true false Not In Cluster 2 blade-2.chassis.local true false false true false Not In Cluster 3 blade-3.chassis.local true false false true false Not In Cluster

Impact

- Blade will not join Openshift cluster. - Unable to deploy Tenants to blade.

Conditions

-- VELOS partition -- root account in partition is expired or locked

Workaround

Re-enable the root user account for the partition: system aaa authentication users user root config expiry-status enabled

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips